Repository navigation
Conversation
The window listens on 127.0.0.1 and a stdio helper forwards MCP into the open page. The test profile is unsigned, uses its own identifier, and is not a release. Co-authored-by: DNT_OF <allowcache@gmail.com>
Create the session directory and files with a protected DACL before the token is written, and delete them when the window closes or MCP is turned off. A swapped or overly broad session file is refused. Co-authored-by: DNT_OF <allowcache@gmail.com>
Use CreateDirectory and CreateFile so the protected ACL exists before the token is written. The phone sheet test waits until the type tool is selected before the touch, so the tap cannot still see the pen. Co-authored-by: DNT_OF <allowcache@gmail.com>
A bare JSON line never completed the helper's Content-Length read, so initialize produced no reply. npx mathscrap-mcp-stdio forwards newline JSON to the loopback window and does not spawn the helper. A normal window close deletes the session files before the runtime exits. Co-authored-by: DNT_OF <allowcache@gmail.com>
Co-authored-by: DNT_OF <allowcache@gmail.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Depends on #8 (
cursor/ssrf-ocr-gate-0e28,c5caff7). This branch does not merge, publish, sign, or retag v0.0.1.Source
7617d696213d3f2bc824f41ed18b1ab904a80335. The39f6c9eartifact (13603251941) still has the private ACL, and it does not answer a JSON line. Do not point ZCode at that helper.The committed helper read stdin until it saw a
Content-Lengthheader. A JSON line with the pipe left open produced no stdout.npxrunsmathscrap-mcp-stdio, which speaks one JSON object per line and POSTs it to the window's loopback listener. It does not spawnmathscrap-mcp.exe.A normal window close deletes the session and endpoint before the runtime calls
process::exit. Ending the process with taskkill does not.Artifact
Workflow run: https://github.com/DNTOF/MathScrap/actions/runs/42447911927
All three jobs succeeded. Artifact
mathscrap-mcp-test-windowsid13604726585is an Actions artifact, not a GitHub Release. The Windows job started the packaged window and the npx client.initializereturnedmathscrap0.0.2-dev,tools/listreturned 7 tools, andpage_readreturnedformulas=0for that empty runner window.CloseMainWindowthen exited and the session files were gone. That is not the parent PC and not ZCode.signed=no,github_release=no,official_v0.0.1=no, profilemcptest, session directory%LOCALAPPDATA%\MathScrap-mcptest\mcp. These bytes match the sums above. Nothing was published to npm.What to run
Leave
C:\Users\AllowCache\AppData\Local\MathScrap\mathscrap.exealone. Unzip into a new folder, for exampleC:\Users\AllowCache\AppData\Local\MathScrap-mcptest-run\. StartMathScrap-mcp-test-windows-x64.exeand leave that window open.cwdisC:\Users\AllowCache. No extra env. Back upC:\Users\AllowCache\.zcode\cli\config.json, then in a new ZCode session add:/mcp list, then/mcp connect mathscrap-test, thenpage_read. Do not usezcode -pand do not restart the open chat.From that folder, with the window still open:
page_read=okmeans the open test window answered. The probe prints redacted snippets and does not print the token.