@agimon-ai/doompi-core 0.0.1-alpha.100

package/dist/src/services/sessionGitStatus/index.mjs

@@ -0,0 +1,46 @@
+import { execFile } from "node:child_process";
+//#region src/services/sessionGitStatus/index.ts
+const GIT_TIMEOUT_MS = 5e3;
+const BRANCH_HEAD_PREFIX = "# branch.head ";
+const BRANCH_OID_PREFIX = "# branch.oid ";
+const DETACHED_HEAD = "(detached)";
+const SHORT_OID_LENGTH = 7;
+/**
+* Reads the branch and dirty flag for a session cwd with one `git status` call.
+* Resolves undefined when the cwd is not a git work tree or git is unavailable,
+* which the session summary documents as "no git status".
+*/
+function readSessionGitStatus(cwd) {
+	return new Promise((resolve) => {
+		execFile("git", [
+			"status",
+			"--porcelain=v2",
+			"--branch",
+			"--untracked-files=no"
+		], {
+			cwd,
+			timeout: GIT_TIMEOUT_MS,
+			windowsHide: true
+		}, (error, stdout) => {
+			if (error) {
+				resolve(void 0);
+				return;
+			}
+			let head;
+			let oid;
+			let dirty = false;
+			for (const line of stdout.split("\n")) if (line.startsWith(BRANCH_HEAD_PREFIX)) head = line.slice(14).trim();
+			else if (line.startsWith(BRANCH_OID_PREFIX)) oid = line.slice(13).trim();
+			else if (line !== "" && !line.startsWith("#")) dirty = true;
+			const branch = head === DETACHED_HEAD ? oid?.slice(0, SHORT_OID_LENGTH) : head;
+			resolve(branch ? {
+				branch,
+				dirty
+			} : void 0);
+		});
+	});
+}
+//#endregion
+export { readSessionGitStatus };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/services/sessionGitStatus/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/sessionGitStatus/index.ts"],"sourcesContent":["import { execFile } from 'node:child_process';\n\nimport type { SessionGitStatus } from './type';\n\nconst GIT_TIMEOUT_MS = 5_000;\nconst BRANCH_HEAD_PREFIX = '# branch.head ';\nconst BRANCH_OID_PREFIX = '# branch.oid ';\nconst DETACHED_HEAD = '(detached)';\nconst SHORT_OID_LENGTH = 7;\n\n/**\n * Reads the branch and dirty flag for a session cwd with one `git status` call.\n * Resolves undefined when the cwd is not a git work tree or git is unavailable,\n * which the session summary documents as \"no git status\".\n */\nexport function readSessionGitStatus(cwd: string): Promise<SessionGitStatus | undefined> {\n  return new Promise((resolve) => {\n    execFile(\n      'git',\n      ['status', '--porcelain=v2', '--branch', '--untracked-files=no'],\n      { cwd, timeout: GIT_TIMEOUT_MS, windowsHide: true },\n      (error, stdout) => {\n        if (error) {\n          resolve(undefined);\n          return;\n        }\n        let head: string | undefined;\n        let oid: string | undefined;\n        let dirty = false;\n        for (const line of stdout.split('\\n')) {\n          if (line.startsWith(BRANCH_HEAD_PREFIX)) head = line.slice(BRANCH_HEAD_PREFIX.length).trim();\n          else if (line.startsWith(BRANCH_OID_PREFIX)) oid = line.slice(BRANCH_OID_PREFIX.length).trim();\n          else if (line !== '' && !line.startsWith('#')) dirty = true;\n        }\n        const branch = head === DETACHED_HEAD ? oid?.slice(0, SHORT_OID_LENGTH) : head;\n        resolve(branch ? { branch, dirty } : undefined);\n      },\n    );\n  });\n}\n"],"mappings":";;AAIA,MAAM,iBAAiB;AACvB,MAAM,qBAAqB;AAC3B,MAAM,oBAAoB;AAC1B,MAAM,gBAAgB;AACtB,MAAM,mBAAmB;;;;;;AAOzB,SAAgB,qBAAqB,KAAoD;CACvF,OAAO,IAAI,SAAS,YAAY;EAC9B,SACE,OACA;GAAC;GAAU;GAAkB;GAAY;EAAsB,GAC/D;GAAE;GAAK,SAAS;GAAgB,aAAa;EAAK,IACjD,OAAO,WAAW;GACjB,IAAI,OAAO;IACT,QAAQ,KAAA,CAAS;IACjB;GACF;GACA,IAAI;GACJ,IAAI;GACJ,IAAI,QAAQ;GACZ,KAAK,MAAM,QAAQ,OAAO,MAAM,IAAI,GAClC,IAAI,KAAK,WAAW,kBAAkB,GAAG,OAAO,KAAK,MAAM,EAAyB,CAAC,CAAC,KAAK;QACtF,IAAI,KAAK,WAAW,iBAAiB,GAAG,MAAM,KAAK,MAAM,EAAwB,CAAC,CAAC,KAAK;QACxF,IAAI,SAAS,MAAM,CAAC,KAAK,WAAW,GAAG,GAAG,QAAQ;GAEzD,MAAM,SAAS,SAAS,gBAAgB,KAAK,MAAM,GAAG,gBAAgB,IAAI;GAC1E,QAAQ,SAAS;IAAE;IAAQ;GAAM,IAAI,KAAA,CAAS;EAChD,CACF;CACF,CAAC;AACH"}

package/dist/src/services/sessionGitStatus/type.d.mts

@@ -0,0 +1,8 @@
+//#region src/services/sessionGitStatus/type.d.ts
+export interface SessionGitStatus {
+  readonly branch: string;
+  /** True when tracked files have uncommitted changes. Untracked files are ignored to keep large trees cheap. */
+  readonly dirty: boolean;
+}
+//#endregion
+//# sourceMappingURL=type.d.mts.map

package/dist/src/services/sessionGitStatus/type.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"type.d.mts","names":[],"sources":["../../../../src/services/sessionGitStatus/type.ts"],"mappings":";iBAAiB;WACN;;WAEA"}

package/dist/src/services/sessionMcpActivity/index.cjs

@@ -0,0 +1,115 @@
+const require_runtime = require("../../../_virtual/_rolldown/runtime.cjs");
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+let node_sqlite = require("node:sqlite");
+//#region src/services/sessionMcpActivity/index.ts
+const PREVIEW_LIMIT = 16384;
+const PAGE_SIZE = 50;
+const SECRET_KEY = /password|passphrase|secret|token|authorization|cookie|credential|api[-_]?key|private[-_]?key/iu;
+/** Bounded text previews only. Do not persist binary MCP content or authentication material. */
+function sessionMcpPreview(value) {
+	let remaining = PREVIEW_LIMIT;
+	const seen = /* @__PURE__ */ new WeakSet();
+	const clean = (item, depth) => {
+		if (remaining <= 0 || depth > 12) return "[truncated]";
+		if (typeof item === "string") {
+			const text = item.replace(/Bearer\s+[^\s"']+/giu, "Bearer [redacted]").replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/gu, "[redacted]").replace(/([?&](?:token|api_key|key|secret|password)=)[^&#\s"']*/giu, "$1[redacted]").replace(/(https?:\/\/)[^\s/@]+:[^\s/@]+@/giu, "$1[redacted]@");
+			const bounded = text.slice(0, remaining);
+			remaining -= bounded.length;
+			return bounded.length < text.length ? `${bounded}\n[truncated]` : bounded;
+		}
+		if (item === null || typeof item !== "object") return item;
+		if (seen.has(item)) return "[circular]";
+		seen.add(item);
+		if (Array.isArray(item)) return item.slice(0, 100).map((entry) => clean(entry, depth + 1));
+		return Object.fromEntries(Object.entries(item).slice(0, 100).map(([key, entry]) => [key, SECRET_KEY.test(key) ? "[redacted]" : key === "data" && typeof entry === "string" ? "[binary omitted]" : clean(entry, depth + 1)]));
+	};
+	try {
+		const text = JSON.stringify(clean(value, 0), null, 2) ?? "";
+		return text.length > PREVIEW_LIMIT ? `${text.slice(0, PREVIEW_LIMIT)}\n[truncated]` : text;
+	} catch {
+		return "[preview unavailable]";
+	}
+}
+/** One process owns this private ledger. Pagination never drops older tool calls. */
+function createSessionMcpActivityStore(stateDir) {
+	node_fs.default.mkdirSync(stateDir, {
+		recursive: true,
+		mode: 448
+	});
+	const file = node_path.default.join(stateDir, "session-mcp-activity.sqlite");
+	node_fs.default.closeSync(node_fs.default.openSync(file, "a", 384));
+	const database = new node_sqlite.DatabaseSync(file);
+	database.exec(`
+    PRAGMA journal_mode = WAL;
+    PRAGMA busy_timeout = 5000;
+    CREATE TABLE IF NOT EXISTS calls (
+      sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+      id TEXT NOT NULL UNIQUE,
+      workspace_id TEXT NOT NULL,
+      session_id TEXT NOT NULL,
+      record TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS calls_session ON calls(workspace_id, session_id, sequence);
+  `);
+	const unfinished = database.prepare("SELECT id, record FROM calls WHERE json_extract(record, '$.status') = 'running'").all();
+	const update = database.prepare("UPDATE calls SET record = ? WHERE id = ?");
+	for (const row of unfinished) {
+		const record = JSON.parse(String(row.record));
+		update.run(JSON.stringify({
+			...record,
+			status: "interrupted",
+			finishedAt: Date.now()
+		}), String(row.id));
+	}
+	let failure;
+	const save = database.prepare(`
+    INSERT INTO calls (id, workspace_id, session_id, record) VALUES (?, ?, ?, ?)
+    ON CONFLICT(id) DO UPDATE SET workspace_id = excluded.workspace_id, session_id = excluded.session_id, record = excluded.record
+  `);
+	return {
+		record(workspaceId, sessionId, clientName, invocation) {
+			try {
+				const record = {
+					id: invocation.id,
+					toolName: invocation.toolName,
+					clientName,
+					startedAt: invocation.startedAt,
+					finishedAt: invocation.finishedAt,
+					status: invocation.status,
+					input: sessionMcpPreview(invocation.input),
+					...invocation.output === void 0 ? {} : { output: sessionMcpPreview(invocation.output) }
+				};
+				save.run(invocation.id, workspaceId, sessionId, JSON.stringify(record));
+			} catch (error) {
+				failure = new Error("MCP call history could not be saved. Check the host storage.", { cause: error });
+				throw failure;
+			}
+		},
+		read(workspaceId, sessionId, before) {
+			if (failure) throw failure;
+			const rows = database.prepare(`SELECT sequence, record FROM calls
+        WHERE workspace_id = ? AND session_id = ? AND sequence < ? ORDER BY sequence DESC LIMIT ?`).all(workspaceId, sessionId, before ?? Number.MAX_SAFE_INTEGER, 51);
+			const calls = rows.slice(0, PAGE_SIZE).map((row) => ({
+				...JSON.parse(String(row.record)),
+				sequence: Number(row.sequence)
+			}));
+			const count = database.prepare("SELECT COUNT(*) AS total FROM calls WHERE workspace_id = ? AND session_id = ?").get(workspaceId, sessionId);
+			return {
+				calls,
+				total: Number(count?.total ?? 0),
+				...rows.length > PAGE_SIZE ? { nextBefore: calls.at(-1).sequence } : {}
+			};
+		},
+		close() {
+			database.close();
+		}
+	};
+}
+//#endregion
+exports.createSessionMcpActivityStore = createSessionMcpActivityStore;
+exports.sessionMcpPreview = sessionMcpPreview;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/sessionMcpActivity/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["path","fs","DatabaseSync"],"sources":["../../../../src/services/sessionMcpActivity/index.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport { DatabaseSync } from 'node:sqlite';\n\nimport type { SessionMcpCall, SessionMcpInvocation } from '../../schemas/sessionMcpActivity';\n\nconst PREVIEW_LIMIT = 16_384;\nconst PAGE_SIZE = 50;\nconst SECRET_KEY = /password|passphrase|secret|token|authorization|cookie|credential|api[-_]?key|private[-_]?key/iu;\n\n/** Bounded text previews only. Do not persist binary MCP content or authentication material. */\nexport function sessionMcpPreview(value: unknown): string {\n  let remaining = PREVIEW_LIMIT;\n  const seen = new WeakSet<object>();\n  const clean = (item: unknown, depth: number): unknown => {\n    if (remaining <= 0 || depth > 12) return '[truncated]';\n    if (typeof item === 'string') {\n      const text = item\n        .replace(/Bearer\\s+[^\\s\"']+/giu, 'Bearer [redacted]')\n        .replace(/\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\b/gu, '[redacted]')\n        .replace(/([?&](?:token|api_key|key|secret|password)=)[^&#\\s\"']*/giu, '$1[redacted]')\n        .replace(/(https?:\\/\\/)[^\\s/@]+:[^\\s/@]+@/giu, '$1[redacted]@');\n      const bounded = text.slice(0, remaining);\n      remaining -= bounded.length;\n      return bounded.length < text.length ? `${bounded}\\n[truncated]` : bounded;\n    }\n    if (item === null || typeof item !== 'object') return item;\n    if (seen.has(item)) return '[circular]';\n    seen.add(item);\n    if (Array.isArray(item)) return item.slice(0, 100).map((entry) => clean(entry, depth + 1));\n    return Object.fromEntries(\n      Object.entries(item)\n        .slice(0, 100)\n        .map(([key, entry]) => [\n          key,\n          SECRET_KEY.test(key)\n            ? '[redacted]'\n            : key === 'data' && typeof entry === 'string'\n              ? '[binary omitted]'\n              : clean(entry, depth + 1),\n        ]),\n    );\n  };\n  try {\n    const text = JSON.stringify(clean(value, 0), null, 2) ?? '';\n    return text.length > PREVIEW_LIMIT ? `${text.slice(0, PREVIEW_LIMIT)}\\n[truncated]` : text;\n  } catch {\n    return '[preview unavailable]';\n  }\n}\n\n/** One process owns this private ledger. Pagination never drops older tool calls. */\nexport function createSessionMcpActivityStore(stateDir: string) {\n  fs.mkdirSync(stateDir, { recursive: true, mode: 0o700 });\n  const file = path.join(stateDir, 'session-mcp-activity.sqlite');\n  fs.closeSync(fs.openSync(file, 'a', 0o600));\n  const database = new DatabaseSync(file);\n  database.exec(`\n    PRAGMA journal_mode = WAL;\n    PRAGMA busy_timeout = 5000;\n    CREATE TABLE IF NOT EXISTS calls (\n      sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n      id TEXT NOT NULL UNIQUE,\n      workspace_id TEXT NOT NULL,\n      session_id TEXT NOT NULL,\n      record TEXT NOT NULL\n    );\n    CREATE INDEX IF NOT EXISTS calls_session ON calls(workspace_id, session_id, sequence);\n  `);\n  // A process restart cannot truthfully keep an in-flight call marked as running.\n  const unfinished = database\n    .prepare(\"SELECT id, record FROM calls WHERE json_extract(record, '$.status') = 'running'\")\n    .all();\n  const update = database.prepare('UPDATE calls SET record = ? WHERE id = ?');\n  for (const row of unfinished) {\n    const record = JSON.parse(String(row.record)) as SessionMcpCall;\n    update.run(JSON.stringify({ ...record, status: 'interrupted', finishedAt: Date.now() }), String(row.id));\n  }\n  let failure: Error | undefined;\n  const save = database.prepare(`\n    INSERT INTO calls (id, workspace_id, session_id, record) VALUES (?, ?, ?, ?)\n    ON CONFLICT(id) DO UPDATE SET workspace_id = excluded.workspace_id, session_id = excluded.session_id, record = excluded.record\n  `);\n  return {\n    record(workspaceId: string, sessionId: string, clientName: string, invocation: SessionMcpInvocation): void {\n      try {\n        const record: Omit<SessionMcpCall, 'sequence'> = {\n          id: invocation.id,\n          toolName: invocation.toolName,\n          clientName,\n          startedAt: invocation.startedAt,\n          finishedAt: invocation.finishedAt,\n          status: invocation.status,\n          input: sessionMcpPreview(invocation.input),\n          ...(invocation.output === undefined ? {} : { output: sessionMcpPreview(invocation.output) }),\n        };\n        save.run(invocation.id, workspaceId, sessionId, JSON.stringify(record));\n      } catch (error) {\n        failure = new Error('MCP call history could not be saved. Check the host storage.', { cause: error });\n        throw failure;\n      }\n    },\n    read(workspaceId: string, sessionId: string, before?: number) {\n      if (failure) throw failure;\n      const rows = database\n        .prepare(`SELECT sequence, record FROM calls\n        WHERE workspace_id = ? AND session_id = ? AND sequence < ? ORDER BY sequence DESC LIMIT ?`)\n        .all(workspaceId, sessionId, before ?? Number.MAX_SAFE_INTEGER, PAGE_SIZE + 1);\n      const calls = rows.slice(0, PAGE_SIZE).map((row) => ({\n        ...(JSON.parse(String(row.record)) as Omit<SessionMcpCall, 'sequence'>),\n        sequence: Number(row.sequence),\n      }));\n      const count = database\n        .prepare('SELECT COUNT(*) AS total FROM calls WHERE workspace_id = ? AND session_id = ?')\n        .get(workspaceId, sessionId);\n      return {\n        calls,\n        total: Number(count?.total ?? 0),\n        ...(rows.length > PAGE_SIZE ? { nextBefore: calls.at(-1)!.sequence } : {}),\n      };\n    },\n    close(): void {\n      database.close();\n    },\n  };\n}\n\nexport type SessionMcpActivityStore = ReturnType<typeof createSessionMcpActivityStore>;\n"],"mappings":";;;;;;;AAMA,MAAM,gBAAgB;AACtB,MAAM,YAAY;AAClB,MAAM,aAAa;;AAGnB,SAAgB,kBAAkB,OAAwB;CACxD,IAAI,YAAY;CAChB,MAAM,uBAAO,IAAI,QAAgB;CACjC,MAAM,SAAS,MAAe,UAA2B;EACvD,IAAI,aAAa,KAAK,QAAQ,IAAI,OAAO;EACzC,IAAI,OAAO,SAAS,UAAU;GAC5B,MAAM,OAAO,KACV,QAAQ,wBAAwB,mBAAmB,CAAC,CACpD,QAAQ,2DAA2D,YAAY,CAAC,CAChF,QAAQ,6DAA6D,cAAc,CAAC,CACpF,QAAQ,sCAAsC,eAAe;GAChE,MAAM,UAAU,KAAK,MAAM,GAAG,SAAS;GACvC,aAAa,QAAQ;GACrB,OAAO,QAAQ,SAAS,KAAK,SAAS,GAAG,QAAQ,iBAAiB;EACpE;EACA,IAAI,SAAS,QAAQ,OAAO,SAAS,UAAU,OAAO;EACtD,IAAI,KAAK,IAAI,IAAI,GAAG,OAAO;EAC3B,KAAK,IAAI,IAAI;EACb,IAAI,MAAM,QAAQ,IAAI,GAAG,OAAO,KAAK,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,UAAU,MAAM,OAAO,QAAQ,CAAC,CAAC;EACzF,OAAO,OAAO,YACZ,OAAO,QAAQ,IAAI,CAAC,CACjB,MAAM,GAAG,GAAG,CAAC,CACb,KAAK,CAAC,KAAK,WAAW,CACrB,KACA,WAAW,KAAK,GAAG,IACf,eACA,QAAQ,UAAU,OAAO,UAAU,WACjC,qBACA,MAAM,OAAO,QAAQ,CAAC,CAC9B,CAAC,CACL;CACF;CACA,IAAI;EACF,MAAM,OAAO,KAAK,UAAU,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK;EACzD,OAAO,KAAK,SAAS,gBAAgB,GAAG,KAAK,MAAM,GAAG,aAAa,EAAE,iBAAiB;CACxF,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,8BAA8B,UAAkB;CAC9D,QAAA,QAAG,UAAU,UAAU;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACvD,MAAM,OAAOA,UAAAA,QAAK,KAAK,UAAU,6BAA6B;CAC9D,QAAA,QAAG,UAAUC,QAAAA,QAAG,SAAS,MAAM,KAAK,GAAK,CAAC;CAC1C,MAAM,WAAW,IAAIC,YAAAA,aAAa,IAAI;CACtC,SAAS,KAAK;;;;;;;;;;;GAWb;CAED,MAAM,aAAa,SAChB,QAAQ,iFAAiF,CAAC,CAC1F,IAAI;CACP,MAAM,SAAS,SAAS,QAAQ,0CAA0C;CAC1E,KAAK,MAAM,OAAO,YAAY;EAC5B,MAAM,SAAS,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC;EAC5C,OAAO,IAAI,KAAK,UAAU;GAAE,GAAG;GAAQ,QAAQ;GAAe,YAAY,KAAK,IAAI;EAAE,CAAC,GAAG,OAAO,IAAI,EAAE,CAAC;CACzG;CACA,IAAI;CACJ,MAAM,OAAO,SAAS,QAAQ;;;GAG7B;CACD,OAAO;EACL,OAAO,aAAqB,WAAmB,YAAoB,YAAwC;GACzG,IAAI;IACF,MAAM,SAA2C;KAC/C,IAAI,WAAW;KACf,UAAU,WAAW;KACrB;KACA,WAAW,WAAW;KACtB,YAAY,WAAW;KACvB,QAAQ,WAAW;KACnB,OAAO,kBAAkB,WAAW,KAAK;KACzC,GAAI,WAAW,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,kBAAkB,WAAW,MAAM,EAAE;IAC5F;IACA,KAAK,IAAI,WAAW,IAAI,aAAa,WAAW,KAAK,UAAU,MAAM,CAAC;GACxE,SAAS,OAAO;IACd,UAAU,IAAI,MAAM,gEAAgE,EAAE,OAAO,MAAM,CAAC;IACpG,MAAM;GACR;EACF;EACA,KAAK,aAAqB,WAAmB,QAAiB;GAC5D,IAAI,SAAS,MAAM;GACnB,MAAM,OAAO,SACV,QAAQ;kGACiF,CAAC,CAC1F,IAAI,aAAa,WAAW,UAAU,OAAO,kBAAkB,EAAa;GAC/E,MAAM,QAAQ,KAAK,MAAM,GAAG,SAAS,CAAC,CAAC,KAAK,SAAS;IACnD,GAAI,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC;IACjC,UAAU,OAAO,IAAI,QAAQ;GAC/B,EAAE;GACF,MAAM,QAAQ,SACX,QAAQ,+EAA+E,CAAC,CACxF,IAAI,aAAa,SAAS;GAC7B,OAAO;IACL;IACA,OAAO,OAAO,OAAO,SAAS,CAAC;IAC/B,GAAI,KAAK,SAAS,YAAY,EAAE,YAAY,MAAM,GAAG,EAAE,CAAC,CAAE,SAAS,IAAI,CAAC;GAC1E;EACF;EACA,QAAc;GACZ,SAAS,MAAM;EACjB;CACF;AACF"}

package/dist/src/services/sessionMcpActivity/index.mjs

@@ -0,0 +1,111 @@
+import fs from "node:fs";
+import path from "node:path";
+import { DatabaseSync } from "node:sqlite";
+//#region src/services/sessionMcpActivity/index.ts
+const PREVIEW_LIMIT = 16384;
+const PAGE_SIZE = 50;
+const SECRET_KEY = /password|passphrase|secret|token|authorization|cookie|credential|api[-_]?key|private[-_]?key/iu;
+/** Bounded text previews only. Do not persist binary MCP content or authentication material. */
+function sessionMcpPreview(value) {
+	let remaining = PREVIEW_LIMIT;
+	const seen = /* @__PURE__ */ new WeakSet();
+	const clean = (item, depth) => {
+		if (remaining <= 0 || depth > 12) return "[truncated]";
+		if (typeof item === "string") {
+			const text = item.replace(/Bearer\s+[^\s"']+/giu, "Bearer [redacted]").replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/gu, "[redacted]").replace(/([?&](?:token|api_key|key|secret|password)=)[^&#\s"']*/giu, "$1[redacted]").replace(/(https?:\/\/)[^\s/@]+:[^\s/@]+@/giu, "$1[redacted]@");
+			const bounded = text.slice(0, remaining);
+			remaining -= bounded.length;
+			return bounded.length < text.length ? `${bounded}\n[truncated]` : bounded;
+		}
+		if (item === null || typeof item !== "object") return item;
+		if (seen.has(item)) return "[circular]";
+		seen.add(item);
+		if (Array.isArray(item)) return item.slice(0, 100).map((entry) => clean(entry, depth + 1));
+		return Object.fromEntries(Object.entries(item).slice(0, 100).map(([key, entry]) => [key, SECRET_KEY.test(key) ? "[redacted]" : key === "data" && typeof entry === "string" ? "[binary omitted]" : clean(entry, depth + 1)]));
+	};
+	try {
+		const text = JSON.stringify(clean(value, 0), null, 2) ?? "";
+		return text.length > PREVIEW_LIMIT ? `${text.slice(0, PREVIEW_LIMIT)}\n[truncated]` : text;
+	} catch {
+		return "[preview unavailable]";
+	}
+}
+/** One process owns this private ledger. Pagination never drops older tool calls. */
+function createSessionMcpActivityStore(stateDir) {
+	fs.mkdirSync(stateDir, {
+		recursive: true,
+		mode: 448
+	});
+	const file = path.join(stateDir, "session-mcp-activity.sqlite");
+	fs.closeSync(fs.openSync(file, "a", 384));
+	const database = new DatabaseSync(file);
+	database.exec(`
+    PRAGMA journal_mode = WAL;
+    PRAGMA busy_timeout = 5000;
+    CREATE TABLE IF NOT EXISTS calls (
+      sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+      id TEXT NOT NULL UNIQUE,
+      workspace_id TEXT NOT NULL,
+      session_id TEXT NOT NULL,
+      record TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS calls_session ON calls(workspace_id, session_id, sequence);
+  `);
+	const unfinished = database.prepare("SELECT id, record FROM calls WHERE json_extract(record, '$.status') = 'running'").all();
+	const update = database.prepare("UPDATE calls SET record = ? WHERE id = ?");
+	for (const row of unfinished) {
+		const record = JSON.parse(String(row.record));
+		update.run(JSON.stringify({
+			...record,
+			status: "interrupted",
+			finishedAt: Date.now()
+		}), String(row.id));
+	}
+	let failure;
+	const save = database.prepare(`
+    INSERT INTO calls (id, workspace_id, session_id, record) VALUES (?, ?, ?, ?)
+    ON CONFLICT(id) DO UPDATE SET workspace_id = excluded.workspace_id, session_id = excluded.session_id, record = excluded.record
+  `);
+	return {
+		record(workspaceId, sessionId, clientName, invocation) {
+			try {
+				const record = {
+					id: invocation.id,
+					toolName: invocation.toolName,
+					clientName,
+					startedAt: invocation.startedAt,
+					finishedAt: invocation.finishedAt,
+					status: invocation.status,
+					input: sessionMcpPreview(invocation.input),
+					...invocation.output === void 0 ? {} : { output: sessionMcpPreview(invocation.output) }
+				};
+				save.run(invocation.id, workspaceId, sessionId, JSON.stringify(record));
+			} catch (error) {
+				failure = new Error("MCP call history could not be saved. Check the host storage.", { cause: error });
+				throw failure;
+			}
+		},
+		read(workspaceId, sessionId, before) {
+			if (failure) throw failure;
+			const rows = database.prepare(`SELECT sequence, record FROM calls
+        WHERE workspace_id = ? AND session_id = ? AND sequence < ? ORDER BY sequence DESC LIMIT ?`).all(workspaceId, sessionId, before ?? Number.MAX_SAFE_INTEGER, 51);
+			const calls = rows.slice(0, PAGE_SIZE).map((row) => ({
+				...JSON.parse(String(row.record)),
+				sequence: Number(row.sequence)
+			}));
+			const count = database.prepare("SELECT COUNT(*) AS total FROM calls WHERE workspace_id = ? AND session_id = ?").get(workspaceId, sessionId);
+			return {
+				calls,
+				total: Number(count?.total ?? 0),
+				...rows.length > PAGE_SIZE ? { nextBefore: calls.at(-1).sequence } : {}
+			};
+		},
+		close() {
+			database.close();
+		}
+	};
+}
+//#endregion
+export { createSessionMcpActivityStore, sessionMcpPreview };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/services/sessionMcpActivity/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/sessionMcpActivity/index.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport { DatabaseSync } from 'node:sqlite';\n\nimport type { SessionMcpCall, SessionMcpInvocation } from '../../schemas/sessionMcpActivity';\n\nconst PREVIEW_LIMIT = 16_384;\nconst PAGE_SIZE = 50;\nconst SECRET_KEY = /password|passphrase|secret|token|authorization|cookie|credential|api[-_]?key|private[-_]?key/iu;\n\n/** Bounded text previews only. Do not persist binary MCP content or authentication material. */\nexport function sessionMcpPreview(value: unknown): string {\n  let remaining = PREVIEW_LIMIT;\n  const seen = new WeakSet<object>();\n  const clean = (item: unknown, depth: number): unknown => {\n    if (remaining <= 0 || depth > 12) return '[truncated]';\n    if (typeof item === 'string') {\n      const text = item\n        .replace(/Bearer\\s+[^\\s\"']+/giu, 'Bearer [redacted]')\n        .replace(/\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\b/gu, '[redacted]')\n        .replace(/([?&](?:token|api_key|key|secret|password)=)[^&#\\s\"']*/giu, '$1[redacted]')\n        .replace(/(https?:\\/\\/)[^\\s/@]+:[^\\s/@]+@/giu, '$1[redacted]@');\n      const bounded = text.slice(0, remaining);\n      remaining -= bounded.length;\n      return bounded.length < text.length ? `${bounded}\\n[truncated]` : bounded;\n    }\n    if (item === null || typeof item !== 'object') return item;\n    if (seen.has(item)) return '[circular]';\n    seen.add(item);\n    if (Array.isArray(item)) return item.slice(0, 100).map((entry) => clean(entry, depth + 1));\n    return Object.fromEntries(\n      Object.entries(item)\n        .slice(0, 100)\n        .map(([key, entry]) => [\n          key,\n          SECRET_KEY.test(key)\n            ? '[redacted]'\n            : key === 'data' && typeof entry === 'string'\n              ? '[binary omitted]'\n              : clean(entry, depth + 1),\n        ]),\n    );\n  };\n  try {\n    const text = JSON.stringify(clean(value, 0), null, 2) ?? '';\n    return text.length > PREVIEW_LIMIT ? `${text.slice(0, PREVIEW_LIMIT)}\\n[truncated]` : text;\n  } catch {\n    return '[preview unavailable]';\n  }\n}\n\n/** One process owns this private ledger. Pagination never drops older tool calls. */\nexport function createSessionMcpActivityStore(stateDir: string) {\n  fs.mkdirSync(stateDir, { recursive: true, mode: 0o700 });\n  const file = path.join(stateDir, 'session-mcp-activity.sqlite');\n  fs.closeSync(fs.openSync(file, 'a', 0o600));\n  const database = new DatabaseSync(file);\n  database.exec(`\n    PRAGMA journal_mode = WAL;\n    PRAGMA busy_timeout = 5000;\n    CREATE TABLE IF NOT EXISTS calls (\n      sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n      id TEXT NOT NULL UNIQUE,\n      workspace_id TEXT NOT NULL,\n      session_id TEXT NOT NULL,\n      record TEXT NOT NULL\n    );\n    CREATE INDEX IF NOT EXISTS calls_session ON calls(workspace_id, session_id, sequence);\n  `);\n  // A process restart cannot truthfully keep an in-flight call marked as running.\n  const unfinished = database\n    .prepare(\"SELECT id, record FROM calls WHERE json_extract(record, '$.status') = 'running'\")\n    .all();\n  const update = database.prepare('UPDATE calls SET record = ? WHERE id = ?');\n  for (const row of unfinished) {\n    const record = JSON.parse(String(row.record)) as SessionMcpCall;\n    update.run(JSON.stringify({ ...record, status: 'interrupted', finishedAt: Date.now() }), String(row.id));\n  }\n  let failure: Error | undefined;\n  const save = database.prepare(`\n    INSERT INTO calls (id, workspace_id, session_id, record) VALUES (?, ?, ?, ?)\n    ON CONFLICT(id) DO UPDATE SET workspace_id = excluded.workspace_id, session_id = excluded.session_id, record = excluded.record\n  `);\n  return {\n    record(workspaceId: string, sessionId: string, clientName: string, invocation: SessionMcpInvocation): void {\n      try {\n        const record: Omit<SessionMcpCall, 'sequence'> = {\n          id: invocation.id,\n          toolName: invocation.toolName,\n          clientName,\n          startedAt: invocation.startedAt,\n          finishedAt: invocation.finishedAt,\n          status: invocation.status,\n          input: sessionMcpPreview(invocation.input),\n          ...(invocation.output === undefined ? {} : { output: sessionMcpPreview(invocation.output) }),\n        };\n        save.run(invocation.id, workspaceId, sessionId, JSON.stringify(record));\n      } catch (error) {\n        failure = new Error('MCP call history could not be saved. Check the host storage.', { cause: error });\n        throw failure;\n      }\n    },\n    read(workspaceId: string, sessionId: string, before?: number) {\n      if (failure) throw failure;\n      const rows = database\n        .prepare(`SELECT sequence, record FROM calls\n        WHERE workspace_id = ? AND session_id = ? AND sequence < ? ORDER BY sequence DESC LIMIT ?`)\n        .all(workspaceId, sessionId, before ?? Number.MAX_SAFE_INTEGER, PAGE_SIZE + 1);\n      const calls = rows.slice(0, PAGE_SIZE).map((row) => ({\n        ...(JSON.parse(String(row.record)) as Omit<SessionMcpCall, 'sequence'>),\n        sequence: Number(row.sequence),\n      }));\n      const count = database\n        .prepare('SELECT COUNT(*) AS total FROM calls WHERE workspace_id = ? AND session_id = ?')\n        .get(workspaceId, sessionId);\n      return {\n        calls,\n        total: Number(count?.total ?? 0),\n        ...(rows.length > PAGE_SIZE ? { nextBefore: calls.at(-1)!.sequence } : {}),\n      };\n    },\n    close(): void {\n      database.close();\n    },\n  };\n}\n\nexport type SessionMcpActivityStore = ReturnType<typeof createSessionMcpActivityStore>;\n"],"mappings":";;;;AAMA,MAAM,gBAAgB;AACtB,MAAM,YAAY;AAClB,MAAM,aAAa;;AAGnB,SAAgB,kBAAkB,OAAwB;CACxD,IAAI,YAAY;CAChB,MAAM,uBAAO,IAAI,QAAgB;CACjC,MAAM,SAAS,MAAe,UAA2B;EACvD,IAAI,aAAa,KAAK,QAAQ,IAAI,OAAO;EACzC,IAAI,OAAO,SAAS,UAAU;GAC5B,MAAM,OAAO,KACV,QAAQ,wBAAwB,mBAAmB,CAAC,CACpD,QAAQ,2DAA2D,YAAY,CAAC,CAChF,QAAQ,6DAA6D,cAAc,CAAC,CACpF,QAAQ,sCAAsC,eAAe;GAChE,MAAM,UAAU,KAAK,MAAM,GAAG,SAAS;GACvC,aAAa,QAAQ;GACrB,OAAO,QAAQ,SAAS,KAAK,SAAS,GAAG,QAAQ,iBAAiB;EACpE;EACA,IAAI,SAAS,QAAQ,OAAO,SAAS,UAAU,OAAO;EACtD,IAAI,KAAK,IAAI,IAAI,GAAG,OAAO;EAC3B,KAAK,IAAI,IAAI;EACb,IAAI,MAAM,QAAQ,IAAI,GAAG,OAAO,KAAK,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,UAAU,MAAM,OAAO,QAAQ,CAAC,CAAC;EACzF,OAAO,OAAO,YACZ,OAAO,QAAQ,IAAI,CAAC,CACjB,MAAM,GAAG,GAAG,CAAC,CACb,KAAK,CAAC,KAAK,WAAW,CACrB,KACA,WAAW,KAAK,GAAG,IACf,eACA,QAAQ,UAAU,OAAO,UAAU,WACjC,qBACA,MAAM,OAAO,QAAQ,CAAC,CAC9B,CAAC,CACL;CACF;CACA,IAAI;EACF,MAAM,OAAO,KAAK,UAAU,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK;EACzD,OAAO,KAAK,SAAS,gBAAgB,GAAG,KAAK,MAAM,GAAG,aAAa,EAAE,iBAAiB;CACxF,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,8BAA8B,UAAkB;CAC9D,GAAG,UAAU,UAAU;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACvD,MAAM,OAAO,KAAK,KAAK,UAAU,6BAA6B;CAC9D,GAAG,UAAU,GAAG,SAAS,MAAM,KAAK,GAAK,CAAC;CAC1C,MAAM,WAAW,IAAI,aAAa,IAAI;CACtC,SAAS,KAAK;;;;;;;;;;;GAWb;CAED,MAAM,aAAa,SAChB,QAAQ,iFAAiF,CAAC,CAC1F,IAAI;CACP,MAAM,SAAS,SAAS,QAAQ,0CAA0C;CAC1E,KAAK,MAAM,OAAO,YAAY;EAC5B,MAAM,SAAS,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC;EAC5C,OAAO,IAAI,KAAK,UAAU;GAAE,GAAG;GAAQ,QAAQ;GAAe,YAAY,KAAK,IAAI;EAAE,CAAC,GAAG,OAAO,IAAI,EAAE,CAAC;CACzG;CACA,IAAI;CACJ,MAAM,OAAO,SAAS,QAAQ;;;GAG7B;CACD,OAAO;EACL,OAAO,aAAqB,WAAmB,YAAoB,YAAwC;GACzG,IAAI;IACF,MAAM,SAA2C;KAC/C,IAAI,WAAW;KACf,UAAU,WAAW;KACrB;KACA,WAAW,WAAW;KACtB,YAAY,WAAW;KACvB,QAAQ,WAAW;KACnB,OAAO,kBAAkB,WAAW,KAAK;KACzC,GAAI,WAAW,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,kBAAkB,WAAW,MAAM,EAAE;IAC5F;IACA,KAAK,IAAI,WAAW,IAAI,aAAa,WAAW,KAAK,UAAU,MAAM,CAAC;GACxE,SAAS,OAAO;IACd,UAAU,IAAI,MAAM,gEAAgE,EAAE,OAAO,MAAM,CAAC;IACpG,MAAM;GACR;EACF;EACA,KAAK,aAAqB,WAAmB,QAAiB;GAC5D,IAAI,SAAS,MAAM;GACnB,MAAM,OAAO,SACV,QAAQ;kGACiF,CAAC,CAC1F,IAAI,aAAa,WAAW,UAAU,OAAO,kBAAkB,EAAa;GAC/E,MAAM,QAAQ,KAAK,MAAM,GAAG,SAAS,CAAC,CAAC,KAAK,SAAS;IACnD,GAAI,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC;IACjC,UAAU,OAAO,IAAI,QAAQ;GAC/B,EAAE;GACF,MAAM,QAAQ,SACX,QAAQ,+EAA+E,CAAC,CACxF,IAAI,aAAa,SAAS;GAC7B,OAAO;IACL;IACA,OAAO,OAAO,OAAO,SAAS,CAAC;IAC/B,GAAI,KAAK,SAAS,YAAY,EAAE,YAAY,MAAM,GAAG,EAAE,CAAC,CAAE,SAAS,IAAI,CAAC;GAC1E;EACF;EACA,QAAc;GACZ,SAAS,MAAM;EACjB;CACF;AACF"}