@agimon-ai/po-core 0.0.0-alpha.0

package/dist/src/services/sessionAttachments/index.cjs

@@ -0,0 +1,111 @@
+const require_runtime = require("../../../_virtual/_rolldown/runtime.cjs");
+const require_runtimePiSettings = require("../../../runtimePiSettings.cjs");
+const require_contextDetailStore = require("../../../contextDetailStore.cjs");
+const require_sessionFiles = require("../../constants/sessionFiles.cjs");
+let node_crypto = require("node:crypto");
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+//#region src/services/sessionAttachments/index.ts
+/**
+* Where composer attachments live on the host, so a tool can be handed one by path.
+*
+* Each upload gets its own random directory under the session's root, which keeps
+* two files with the same name apart and lets the original name survive. The
+* directory is owner-only because an attachment is whatever the user dropped in.
+*/
+const DIRECTORY_NAME = "doom-attachments";
+const PRIVATE_DIRECTORY_MODE = 448;
+const PRIVATE_FILE_MODE = 384;
+const MAX_NAME_BYTES = 200;
+const FALLBACK_NAME = "file";
+const RETENTION_MS = 6048e5;
+/** Throws for an id whose directory would be the attachment root itself or its parent. */
+function sessionAttachmentRoot(sessionId, environment = process.env) {
+	const directory = require_contextDetailStore.safeName(sessionId);
+	if (directory === "" || directory === "." || directory === "..") throw new Error("This session id cannot hold attachments.");
+	return node_path.default.join(require_runtimePiSettings.piAgentDirectory(environment), DIRECTORY_NAME, directory);
+}
+/**
+* One plain file name: no separators or control characters, and no leading dot, so
+* an attachment is never hidden and never `.` or `..`. Cut on a code point boundary
+* to fit common file-name limits.
+*/
+function attachmentName(name) {
+	const plain = name.replace(/[\u0000-\u001f\u007f/\\]/gu, "").replace(/^\.+/u, "");
+	let fitted = "";
+	for (const character of plain) {
+		if (Buffer.byteLength(fitted + character) > MAX_NAME_BYTES) break;
+		fitted += character;
+	}
+	return fitted === "" ? FALLBACK_NAME : fitted;
+}
+/** Best effort: a sweep that cannot read or remove a directory leaves it for the next write. */
+async function sweepExpired(root) {
+	const cutoff = Date.now() - RETENTION_MS;
+	let sessions;
+	try {
+		sessions = await node_fs.default.promises.readdir(root, { withFileTypes: true });
+	} catch {
+		return;
+	}
+	for (const session of sessions) {
+		if (!session.isDirectory()) continue;
+		const sessionDirectory = node_path.default.join(root, session.name);
+		let uploads;
+		try {
+			uploads = await node_fs.default.promises.readdir(sessionDirectory, { withFileTypes: true });
+		} catch {
+			continue;
+		}
+		for (const upload of uploads) {
+			if (!upload.isDirectory()) continue;
+			const uploadDirectory = node_path.default.join(sessionDirectory, upload.name);
+			try {
+				if ((await node_fs.default.promises.lstat(uploadDirectory)).mtimeMs < cutoff) await node_fs.default.promises.rm(uploadDirectory, {
+					recursive: true,
+					force: true
+				});
+			} catch {}
+		}
+	}
+}
+/** Stores one attachment and returns where it landed. Written through a temporary file, then renamed. */
+async function writeSessionAttachment(sessionId, name, bytes, environment = process.env) {
+	const root = sessionAttachmentRoot(sessionId, environment);
+	const fileName = attachmentName(name);
+	await node_fs.default.promises.mkdir(root, {
+		recursive: true,
+		mode: PRIVATE_DIRECTORY_MODE
+	});
+	await sweepExpired(node_path.default.dirname(root));
+	const directory = node_path.default.join(root, (0, node_crypto.randomUUID)());
+	await node_fs.default.promises.mkdir(directory, { mode: PRIVATE_DIRECTORY_MODE });
+	const target = node_path.default.join(directory, fileName);
+	const temporary = node_path.default.join(directory, `.${(0, node_crypto.randomUUID)()}.tmp`);
+	try {
+		await node_fs.default.promises.writeFile(temporary, bytes, {
+			mode: PRIVATE_FILE_MODE,
+			flag: "wx"
+		});
+		await node_fs.default.promises.rename(temporary, target);
+	} catch (error) {
+		await node_fs.default.promises.rm(directory, {
+			recursive: true,
+			force: true
+		});
+		throw error;
+	}
+	return {
+		path: target,
+		name: fileName,
+		size: bytes.byteLength,
+		mimeType: require_sessionFiles.SESSION_FILE_CONTENT_TYPES[node_path.default.extname(fileName).toLowerCase()] ?? "application/octet-stream"
+	};
+}
+//#endregion
+exports.sessionAttachmentRoot = sessionAttachmentRoot;
+exports.writeSessionAttachment = writeSessionAttachment;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/sessionAttachments/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["safeName","path","piAgentDirectory","fs","randomUUID","SESSION_FILE_CONTENT_TYPES"],"sources":["../../../../src/services/sessionAttachments/index.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport { SESSION_FILE_CONTENT_TYPES, SESSION_FILE_DEFAULT_CONTENT_TYPE } from '../../constants/sessionFiles';\nimport { safeName } from '../contextDetailStore';\nimport { piAgentDirectory } from '../piSettings';\n\n/**\n * Where composer attachments live on the host, so a tool can be handed one by path.\n *\n * Each upload gets its own random directory under the session's root, which keeps\n * two files with the same name apart and lets the original name survive. The\n * directory is owner-only because an attachment is whatever the user dropped in.\n */\n\nconst DIRECTORY_NAME = 'doom-attachments';\nconst PRIVATE_DIRECTORY_MODE = 0o700;\nconst PRIVATE_FILE_MODE = 0o600;\nconst MAX_NAME_BYTES = 200;\nconst FALLBACK_NAME = 'file';\nconst RETENTION_MS = 7 * 24 * 60 * 60 * 1000;\n\nexport interface SessionAttachment {\n  path: string;\n  name: string;\n  size: number;\n  mimeType: string;\n}\n\n/** Throws for an id whose directory would be the attachment root itself or its parent. */\nexport function sessionAttachmentRoot(\n  sessionId: string,\n  environment: Readonly<Record<string, string | undefined>> = process.env,\n): string {\n  const directory = safeName(sessionId);\n  if (directory === '' || directory === '.' || directory === '..')\n    throw new Error('This session id cannot hold attachments.');\n  return path.join(piAgentDirectory(environment), DIRECTORY_NAME, directory);\n}\n\n/**\n * One plain file name: no separators or control characters, and no leading dot, so\n * an attachment is never hidden and never `.` or `..`. Cut on a code point boundary\n * to fit common file-name limits.\n */\nfunction attachmentName(name: string): string {\n  // oxlint-disable-next-line no-control-regex -- stripping control characters is the point\n  const plain = name.replace(/[\\u0000-\\u001f\\u007f/\\\\]/gu, '').replace(/^\\.+/u, '');\n  let fitted = '';\n  for (const character of plain) {\n    if (Buffer.byteLength(fitted + character) > MAX_NAME_BYTES) break;\n    fitted += character;\n  }\n  return fitted === '' ? FALLBACK_NAME : fitted;\n}\n\n/** Best effort: a sweep that cannot read or remove a directory leaves it for the next write. */\nasync function sweepExpired(root: string): Promise<void> {\n  const cutoff = Date.now() - RETENTION_MS;\n  let sessions: fs.Dirent[];\n  try {\n    sessions = await fs.promises.readdir(root, { withFileTypes: true });\n  } catch {\n    return;\n  }\n  for (const session of sessions) {\n    if (!session.isDirectory()) continue;\n    const sessionDirectory = path.join(root, session.name);\n    let uploads: fs.Dirent[];\n    try {\n      uploads = await fs.promises.readdir(sessionDirectory, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const upload of uploads) {\n      if (!upload.isDirectory()) continue;\n      const uploadDirectory = path.join(sessionDirectory, upload.name);\n      try {\n        if ((await fs.promises.lstat(uploadDirectory)).mtimeMs < cutoff)\n          await fs.promises.rm(uploadDirectory, { recursive: true, force: true });\n      } catch {\n        // Left for the next sweep.\n      }\n    }\n  }\n}\n\n/** Stores one attachment and returns where it landed. Written through a temporary file, then renamed. */\nexport async function writeSessionAttachment(\n  sessionId: string,\n  name: string,\n  bytes: Uint8Array,\n  environment: Readonly<Record<string, string | undefined>> = process.env,\n): Promise<SessionAttachment> {\n  const root = sessionAttachmentRoot(sessionId, environment);\n  const fileName = attachmentName(name);\n  await fs.promises.mkdir(root, { recursive: true, mode: PRIVATE_DIRECTORY_MODE });\n  await sweepExpired(path.dirname(root));\n  const directory = path.join(root, randomUUID());\n  await fs.promises.mkdir(directory, { mode: PRIVATE_DIRECTORY_MODE });\n  const target = path.join(directory, fileName);\n  const temporary = path.join(directory, `.${randomUUID()}.tmp`);\n  try {\n    await fs.promises.writeFile(temporary, bytes, { mode: PRIVATE_FILE_MODE, flag: 'wx' });\n    await fs.promises.rename(temporary, target);\n  } catch (error) {\n    await fs.promises.rm(directory, { recursive: true, force: true });\n    throw error;\n  }\n  return {\n    path: target,\n    name: fileName,\n    size: bytes.byteLength,\n    mimeType: SESSION_FILE_CONTENT_TYPES[path.extname(fileName).toLowerCase()] ?? SESSION_FILE_DEFAULT_CONTENT_TYPE,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAgBA,MAAM,iBAAiB;AACvB,MAAM,yBAAyB;AAC/B,MAAM,oBAAoB;AAC1B,MAAM,iBAAiB;AACvB,MAAM,gBAAgB;AACtB,MAAM,eAAe;;AAUrB,SAAgB,sBACd,WACA,cAA4D,QAAQ,KAC5D;CACR,MAAM,YAAYA,2BAAAA,SAAS,SAAS;CACpC,IAAI,cAAc,MAAM,cAAc,OAAO,cAAc,MACzD,MAAM,IAAI,MAAM,0CAA0C;CAC5D,OAAOC,UAAAA,QAAK,KAAKC,0BAAAA,iBAAiB,WAAW,GAAG,gBAAgB,SAAS;AAC3E;;;;;;AAOA,SAAS,eAAe,MAAsB;CAE5C,MAAM,QAAQ,KAAK,QAAQ,8BAA8B,EAAE,CAAC,CAAC,QAAQ,SAAS,EAAE;CAChF,IAAI,SAAS;CACb,KAAK,MAAM,aAAa,OAAO;EAC7B,IAAI,OAAO,WAAW,SAAS,SAAS,IAAI,gBAAgB;EAC5D,UAAU;CACZ;CACA,OAAO,WAAW,KAAK,gBAAgB;AACzC;;AAGA,eAAe,aAAa,MAA6B;CACvD,MAAM,SAAS,KAAK,IAAI,IAAI;CAC5B,IAAI;CACJ,IAAI;EACF,WAAW,MAAMC,QAAAA,QAAG,SAAS,QAAQ,MAAM,EAAE,eAAe,KAAK,CAAC;CACpE,QAAQ;EACN;CACF;CACA,KAAK,MAAM,WAAW,UAAU;EAC9B,IAAI,CAAC,QAAQ,YAAY,GAAG;EAC5B,MAAM,mBAAmBF,UAAAA,QAAK,KAAK,MAAM,QAAQ,IAAI;EACrD,IAAI;EACJ,IAAI;GACF,UAAU,MAAME,QAAAA,QAAG,SAAS,QAAQ,kBAAkB,EAAE,eAAe,KAAK,CAAC;EAC/E,QAAQ;GACN;EACF;EACA,KAAK,MAAM,UAAU,SAAS;GAC5B,IAAI,CAAC,OAAO,YAAY,GAAG;GAC3B,MAAM,kBAAkBF,UAAAA,QAAK,KAAK,kBAAkB,OAAO,IAAI;GAC/D,IAAI;IACF,KAAK,MAAME,QAAAA,QAAG,SAAS,MAAM,eAAe,EAAA,CAAG,UAAU,QACvD,MAAMA,QAAAA,QAAG,SAAS,GAAG,iBAAiB;KAAE,WAAW;KAAM,OAAO;IAAK,CAAC;GAC1E,QAAQ,CAER;EACF;CACF;AACF;;AAGA,eAAsB,uBACpB,WACA,MACA,OACA,cAA4D,QAAQ,KACxC;CAC5B,MAAM,OAAO,sBAAsB,WAAW,WAAW;CACzD,MAAM,WAAW,eAAe,IAAI;CACpC,MAAMA,QAAAA,QAAG,SAAS,MAAM,MAAM;EAAE,WAAW;EAAM,MAAM;CAAuB,CAAC;CAC/E,MAAM,aAAaF,UAAAA,QAAK,QAAQ,IAAI,CAAC;CACrC,MAAM,YAAYA,UAAAA,QAAK,KAAK,OAAA,GAAMG,YAAAA,WAAAA,CAAW,CAAC;CAC9C,MAAMD,QAAAA,QAAG,SAAS,MAAM,WAAW,EAAE,MAAM,uBAAuB,CAAC;CACnE,MAAM,SAASF,UAAAA,QAAK,KAAK,WAAW,QAAQ;CAC5C,MAAM,YAAYA,UAAAA,QAAK,KAAK,WAAW,KAAA,GAAIG,YAAAA,WAAAA,CAAW,EAAE,KAAK;CAC7D,IAAI;EACF,MAAMD,QAAAA,QAAG,SAAS,UAAU,WAAW,OAAO;GAAE,MAAM;GAAmB,MAAM;EAAK,CAAC;EACrF,MAAMA,QAAAA,QAAG,SAAS,OAAO,WAAW,MAAM;CAC5C,SAAS,OAAO;EACd,MAAMA,QAAAA,QAAG,SAAS,GAAG,WAAW;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EAChE,MAAM;CACR;CACA,OAAO;EACL,MAAM;EACN,MAAM;EACN,MAAM,MAAM;EACZ,UAAUE,qBAAAA,2BAA2BJ,UAAAA,QAAK,QAAQ,QAAQ,CAAC,CAAC,YAAY,MAAA;CAC1E;AACF"}

package/dist/src/services/sessionAttachments/index.d.mts

@@ -0,0 +1,11 @@
+//#region src/services/sessionAttachments/index.d.ts
+export interface SessionAttachment {
+  path: string;
+  name: string;
+  size: number;
+  mimeType: string;
+}
+/** Stores one attachment and returns where it landed. Written through a temporary file, then renamed. */
+export declare function writeSessionAttachment(sessionId: string, name: string, bytes: Uint8Array, environment?: Readonly<Record<string, string | undefined>>): Promise<SessionAttachment>;
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/src/services/sessionAttachments/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/services/sessionAttachments/index.ts"],"mappings":";iBAuBiB;EACf;EACA;EACA;EACA;;;wBA8DoB,uBACpB,mBACA,cACA,OAAO,YACP,cAAa,SAAS,sCACrB,QAAQ"}

package/dist/src/services/sessionAttachments/index.mjs

@@ -0,0 +1,107 @@
+import { piAgentDirectory } from "../../../runtimePiSettings.mjs";
+import { safeName } from "../../../contextDetailStore.mjs";
+import { SESSION_FILE_CONTENT_TYPES } from "../../constants/sessionFiles.mjs";
+import { randomUUID } from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+//#region src/services/sessionAttachments/index.ts
+/**
+* Where composer attachments live on the host, so a tool can be handed one by path.
+*
+* Each upload gets its own random directory under the session's root, which keeps
+* two files with the same name apart and lets the original name survive. The
+* directory is owner-only because an attachment is whatever the user dropped in.
+*/
+const DIRECTORY_NAME = "doom-attachments";
+const PRIVATE_DIRECTORY_MODE = 448;
+const PRIVATE_FILE_MODE = 384;
+const MAX_NAME_BYTES = 200;
+const FALLBACK_NAME = "file";
+const RETENTION_MS = 6048e5;
+/** Throws for an id whose directory would be the attachment root itself or its parent. */
+function sessionAttachmentRoot(sessionId, environment = process.env) {
+	const directory = safeName(sessionId);
+	if (directory === "" || directory === "." || directory === "..") throw new Error("This session id cannot hold attachments.");
+	return path.join(piAgentDirectory(environment), DIRECTORY_NAME, directory);
+}
+/**
+* One plain file name: no separators or control characters, and no leading dot, so
+* an attachment is never hidden and never `.` or `..`. Cut on a code point boundary
+* to fit common file-name limits.
+*/
+function attachmentName(name) {
+	const plain = name.replace(/[\u0000-\u001f\u007f/\\]/gu, "").replace(/^\.+/u, "");
+	let fitted = "";
+	for (const character of plain) {
+		if (Buffer.byteLength(fitted + character) > MAX_NAME_BYTES) break;
+		fitted += character;
+	}
+	return fitted === "" ? FALLBACK_NAME : fitted;
+}
+/** Best effort: a sweep that cannot read or remove a directory leaves it for the next write. */
+async function sweepExpired(root) {
+	const cutoff = Date.now() - RETENTION_MS;
+	let sessions;
+	try {
+		sessions = await fs.promises.readdir(root, { withFileTypes: true });
+	} catch {
+		return;
+	}
+	for (const session of sessions) {
+		if (!session.isDirectory()) continue;
+		const sessionDirectory = path.join(root, session.name);
+		let uploads;
+		try {
+			uploads = await fs.promises.readdir(sessionDirectory, { withFileTypes: true });
+		} catch {
+			continue;
+		}
+		for (const upload of uploads) {
+			if (!upload.isDirectory()) continue;
+			const uploadDirectory = path.join(sessionDirectory, upload.name);
+			try {
+				if ((await fs.promises.lstat(uploadDirectory)).mtimeMs < cutoff) await fs.promises.rm(uploadDirectory, {
+					recursive: true,
+					force: true
+				});
+			} catch {}
+		}
+	}
+}
+/** Stores one attachment and returns where it landed. Written through a temporary file, then renamed. */
+async function writeSessionAttachment(sessionId, name, bytes, environment = process.env) {
+	const root = sessionAttachmentRoot(sessionId, environment);
+	const fileName = attachmentName(name);
+	await fs.promises.mkdir(root, {
+		recursive: true,
+		mode: PRIVATE_DIRECTORY_MODE
+	});
+	await sweepExpired(path.dirname(root));
+	const directory = path.join(root, randomUUID());
+	await fs.promises.mkdir(directory, { mode: PRIVATE_DIRECTORY_MODE });
+	const target = path.join(directory, fileName);
+	const temporary = path.join(directory, `.${randomUUID()}.tmp`);
+	try {
+		await fs.promises.writeFile(temporary, bytes, {
+			mode: PRIVATE_FILE_MODE,
+			flag: "wx"
+		});
+		await fs.promises.rename(temporary, target);
+	} catch (error) {
+		await fs.promises.rm(directory, {
+			recursive: true,
+			force: true
+		});
+		throw error;
+	}
+	return {
+		path: target,
+		name: fileName,
+		size: bytes.byteLength,
+		mimeType: SESSION_FILE_CONTENT_TYPES[path.extname(fileName).toLowerCase()] ?? "application/octet-stream"
+	};
+}
+//#endregion
+export { sessionAttachmentRoot, writeSessionAttachment };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/services/sessionAttachments/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/sessionAttachments/index.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport { SESSION_FILE_CONTENT_TYPES, SESSION_FILE_DEFAULT_CONTENT_TYPE } from '../../constants/sessionFiles';\nimport { safeName } from '../contextDetailStore';\nimport { piAgentDirectory } from '../piSettings';\n\n/**\n * Where composer attachments live on the host, so a tool can be handed one by path.\n *\n * Each upload gets its own random directory under the session's root, which keeps\n * two files with the same name apart and lets the original name survive. The\n * directory is owner-only because an attachment is whatever the user dropped in.\n */\n\nconst DIRECTORY_NAME = 'doom-attachments';\nconst PRIVATE_DIRECTORY_MODE = 0o700;\nconst PRIVATE_FILE_MODE = 0o600;\nconst MAX_NAME_BYTES = 200;\nconst FALLBACK_NAME = 'file';\nconst RETENTION_MS = 7 * 24 * 60 * 60 * 1000;\n\nexport interface SessionAttachment {\n  path: string;\n  name: string;\n  size: number;\n  mimeType: string;\n}\n\n/** Throws for an id whose directory would be the attachment root itself or its parent. */\nexport function sessionAttachmentRoot(\n  sessionId: string,\n  environment: Readonly<Record<string, string | undefined>> = process.env,\n): string {\n  const directory = safeName(sessionId);\n  if (directory === '' || directory === '.' || directory === '..')\n    throw new Error('This session id cannot hold attachments.');\n  return path.join(piAgentDirectory(environment), DIRECTORY_NAME, directory);\n}\n\n/**\n * One plain file name: no separators or control characters, and no leading dot, so\n * an attachment is never hidden and never `.` or `..`. Cut on a code point boundary\n * to fit common file-name limits.\n */\nfunction attachmentName(name: string): string {\n  // oxlint-disable-next-line no-control-regex -- stripping control characters is the point\n  const plain = name.replace(/[\\u0000-\\u001f\\u007f/\\\\]/gu, '').replace(/^\\.+/u, '');\n  let fitted = '';\n  for (const character of plain) {\n    if (Buffer.byteLength(fitted + character) > MAX_NAME_BYTES) break;\n    fitted += character;\n  }\n  return fitted === '' ? FALLBACK_NAME : fitted;\n}\n\n/** Best effort: a sweep that cannot read or remove a directory leaves it for the next write. */\nasync function sweepExpired(root: string): Promise<void> {\n  const cutoff = Date.now() - RETENTION_MS;\n  let sessions: fs.Dirent[];\n  try {\n    sessions = await fs.promises.readdir(root, { withFileTypes: true });\n  } catch {\n    return;\n  }\n  for (const session of sessions) {\n    if (!session.isDirectory()) continue;\n    const sessionDirectory = path.join(root, session.name);\n    let uploads: fs.Dirent[];\n    try {\n      uploads = await fs.promises.readdir(sessionDirectory, { withFileTypes: true });\n    } catch {\n      continue;\n    }\n    for (const upload of uploads) {\n      if (!upload.isDirectory()) continue;\n      const uploadDirectory = path.join(sessionDirectory, upload.name);\n      try {\n        if ((await fs.promises.lstat(uploadDirectory)).mtimeMs < cutoff)\n          await fs.promises.rm(uploadDirectory, { recursive: true, force: true });\n      } catch {\n        // Left for the next sweep.\n      }\n    }\n  }\n}\n\n/** Stores one attachment and returns where it landed. Written through a temporary file, then renamed. */\nexport async function writeSessionAttachment(\n  sessionId: string,\n  name: string,\n  bytes: Uint8Array,\n  environment: Readonly<Record<string, string | undefined>> = process.env,\n): Promise<SessionAttachment> {\n  const root = sessionAttachmentRoot(sessionId, environment);\n  const fileName = attachmentName(name);\n  await fs.promises.mkdir(root, { recursive: true, mode: PRIVATE_DIRECTORY_MODE });\n  await sweepExpired(path.dirname(root));\n  const directory = path.join(root, randomUUID());\n  await fs.promises.mkdir(directory, { mode: PRIVATE_DIRECTORY_MODE });\n  const target = path.join(directory, fileName);\n  const temporary = path.join(directory, `.${randomUUID()}.tmp`);\n  try {\n    await fs.promises.writeFile(temporary, bytes, { mode: PRIVATE_FILE_MODE, flag: 'wx' });\n    await fs.promises.rename(temporary, target);\n  } catch (error) {\n    await fs.promises.rm(directory, { recursive: true, force: true });\n    throw error;\n  }\n  return {\n    path: target,\n    name: fileName,\n    size: bytes.byteLength,\n    mimeType: SESSION_FILE_CONTENT_TYPES[path.extname(fileName).toLowerCase()] ?? SESSION_FILE_DEFAULT_CONTENT_TYPE,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;AAgBA,MAAM,iBAAiB;AACvB,MAAM,yBAAyB;AAC/B,MAAM,oBAAoB;AAC1B,MAAM,iBAAiB;AACvB,MAAM,gBAAgB;AACtB,MAAM,eAAe;;AAUrB,SAAgB,sBACd,WACA,cAA4D,QAAQ,KAC5D;CACR,MAAM,YAAY,SAAS,SAAS;CACpC,IAAI,cAAc,MAAM,cAAc,OAAO,cAAc,MACzD,MAAM,IAAI,MAAM,0CAA0C;CAC5D,OAAO,KAAK,KAAK,iBAAiB,WAAW,GAAG,gBAAgB,SAAS;AAC3E;;;;;;AAOA,SAAS,eAAe,MAAsB;CAE5C,MAAM,QAAQ,KAAK,QAAQ,8BAA8B,EAAE,CAAC,CAAC,QAAQ,SAAS,EAAE;CAChF,IAAI,SAAS;CACb,KAAK,MAAM,aAAa,OAAO;EAC7B,IAAI,OAAO,WAAW,SAAS,SAAS,IAAI,gBAAgB;EAC5D,UAAU;CACZ;CACA,OAAO,WAAW,KAAK,gBAAgB;AACzC;;AAGA,eAAe,aAAa,MAA6B;CACvD,MAAM,SAAS,KAAK,IAAI,IAAI;CAC5B,IAAI;CACJ,IAAI;EACF,WAAW,MAAM,GAAG,SAAS,QAAQ,MAAM,EAAE,eAAe,KAAK,CAAC;CACpE,QAAQ;EACN;CACF;CACA,KAAK,MAAM,WAAW,UAAU;EAC9B,IAAI,CAAC,QAAQ,YAAY,GAAG;EAC5B,MAAM,mBAAmB,KAAK,KAAK,MAAM,QAAQ,IAAI;EACrD,IAAI;EACJ,IAAI;GACF,UAAU,MAAM,GAAG,SAAS,QAAQ,kBAAkB,EAAE,eAAe,KAAK,CAAC;EAC/E,QAAQ;GACN;EACF;EACA,KAAK,MAAM,UAAU,SAAS;GAC5B,IAAI,CAAC,OAAO,YAAY,GAAG;GAC3B,MAAM,kBAAkB,KAAK,KAAK,kBAAkB,OAAO,IAAI;GAC/D,IAAI;IACF,KAAK,MAAM,GAAG,SAAS,MAAM,eAAe,EAAA,CAAG,UAAU,QACvD,MAAM,GAAG,SAAS,GAAG,iBAAiB;KAAE,WAAW;KAAM,OAAO;IAAK,CAAC;GAC1E,QAAQ,CAER;EACF;CACF;AACF;;AAGA,eAAsB,uBACpB,WACA,MACA,OACA,cAA4D,QAAQ,KACxC;CAC5B,MAAM,OAAO,sBAAsB,WAAW,WAAW;CACzD,MAAM,WAAW,eAAe,IAAI;CACpC,MAAM,GAAG,SAAS,MAAM,MAAM;EAAE,WAAW;EAAM,MAAM;CAAuB,CAAC;CAC/E,MAAM,aAAa,KAAK,QAAQ,IAAI,CAAC;CACrC,MAAM,YAAY,KAAK,KAAK,MAAM,WAAW,CAAC;CAC9C,MAAM,GAAG,SAAS,MAAM,WAAW,EAAE,MAAM,uBAAuB,CAAC;CACnE,MAAM,SAAS,KAAK,KAAK,WAAW,QAAQ;CAC5C,MAAM,YAAY,KAAK,KAAK,WAAW,IAAI,WAAW,EAAE,KAAK;CAC7D,IAAI;EACF,MAAM,GAAG,SAAS,UAAU,WAAW,OAAO;GAAE,MAAM;GAAmB,MAAM;EAAK,CAAC;EACrF,MAAM,GAAG,SAAS,OAAO,WAAW,MAAM;CAC5C,SAAS,OAAO;EACd,MAAM,GAAG,SAAS,GAAG,WAAW;GAAE,WAAW;GAAM,OAAO;EAAK,CAAC;EAChE,MAAM;CACR;CACA,OAAO;EACL,MAAM;EACN,MAAM;EACN,MAAM,MAAM;EACZ,UAAU,2BAA2B,KAAK,QAAQ,QAAQ,CAAC,CAAC,YAAY,MAAA;CAC1E;AACF"}

package/dist/src/services/sessionGitStatus/index.cjs

@@ -0,0 +1,46 @@
+let node_child_process = require("node:child_process");
+//#region src/services/sessionGitStatus/index.ts
+const GIT_TIMEOUT_MS = 5e3;
+const BRANCH_HEAD_PREFIX = "# branch.head ";
+const BRANCH_OID_PREFIX = "# branch.oid ";
+const DETACHED_HEAD = "(detached)";
+const SHORT_OID_LENGTH = 7;
+/**
+* Reads the branch and dirty flag for a session cwd with one `git status` call.
+* Resolves undefined when the cwd is not a git work tree or git is unavailable,
+* which the session summary documents as "no git status".
+*/
+function readSessionGitStatus(cwd) {
+	return new Promise((resolve) => {
+		(0, node_child_process.execFile)("git", [
+			"status",
+			"--porcelain=v2",
+			"--branch",
+			"--untracked-files=no"
+		], {
+			cwd,
+			timeout: GIT_TIMEOUT_MS,
+			windowsHide: true
+		}, (error, stdout) => {
+			if (error) {
+				resolve(void 0);
+				return;
+			}
+			let head;
+			let oid;
+			let dirty = false;
+			for (const line of stdout.split("\n")) if (line.startsWith(BRANCH_HEAD_PREFIX)) head = line.slice(14).trim();
+			else if (line.startsWith(BRANCH_OID_PREFIX)) oid = line.slice(13).trim();
+			else if (line !== "" && !line.startsWith("#")) dirty = true;
+			const branch = head === DETACHED_HEAD ? oid?.slice(0, SHORT_OID_LENGTH) : head;
+			resolve(branch ? {
+				branch,
+				dirty
+			} : void 0);
+		});
+	});
+}
+//#endregion
+exports.readSessionGitStatus = readSessionGitStatus;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/sessionGitStatus/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":[],"sources":["../../../../src/services/sessionGitStatus/index.ts"],"sourcesContent":["import { execFile } from 'node:child_process';\n\nimport type { SessionGitStatus } from './type';\n\nconst GIT_TIMEOUT_MS = 5_000;\nconst BRANCH_HEAD_PREFIX = '# branch.head ';\nconst BRANCH_OID_PREFIX = '# branch.oid ';\nconst DETACHED_HEAD = '(detached)';\nconst SHORT_OID_LENGTH = 7;\n\n/**\n * Reads the branch and dirty flag for a session cwd with one `git status` call.\n * Resolves undefined when the cwd is not a git work tree or git is unavailable,\n * which the session summary documents as \"no git status\".\n */\nexport function readSessionGitStatus(cwd: string): Promise<SessionGitStatus | undefined> {\n  return new Promise((resolve) => {\n    execFile(\n      'git',\n      ['status', '--porcelain=v2', '--branch', '--untracked-files=no'],\n      { cwd, timeout: GIT_TIMEOUT_MS, windowsHide: true },\n      (error, stdout) => {\n        if (error) {\n          resolve(undefined);\n          return;\n        }\n        let head: string | undefined;\n        let oid: string | undefined;\n        let dirty = false;\n        for (const line of stdout.split('\\n')) {\n          if (line.startsWith(BRANCH_HEAD_PREFIX)) head = line.slice(BRANCH_HEAD_PREFIX.length).trim();\n          else if (line.startsWith(BRANCH_OID_PREFIX)) oid = line.slice(BRANCH_OID_PREFIX.length).trim();\n          else if (line !== '' && !line.startsWith('#')) dirty = true;\n        }\n        const branch = head === DETACHED_HEAD ? oid?.slice(0, SHORT_OID_LENGTH) : head;\n        resolve(branch ? { branch, dirty } : undefined);\n      },\n    );\n  });\n}\n"],"mappings":";;AAIA,MAAM,iBAAiB;AACvB,MAAM,qBAAqB;AAC3B,MAAM,oBAAoB;AAC1B,MAAM,gBAAgB;AACtB,MAAM,mBAAmB;;;;;;AAOzB,SAAgB,qBAAqB,KAAoD;CACvF,OAAO,IAAI,SAAS,YAAY;EAC9B,CAAA,GAAA,mBAAA,SAAA,CACE,OACA;GAAC;GAAU;GAAkB;GAAY;EAAsB,GAC/D;GAAE;GAAK,SAAS;GAAgB,aAAa;EAAK,IACjD,OAAO,WAAW;GACjB,IAAI,OAAO;IACT,QAAQ,KAAA,CAAS;IACjB;GACF;GACA,IAAI;GACJ,IAAI;GACJ,IAAI,QAAQ;GACZ,KAAK,MAAM,QAAQ,OAAO,MAAM,IAAI,GAClC,IAAI,KAAK,WAAW,kBAAkB,GAAG,OAAO,KAAK,MAAM,EAAyB,CAAC,CAAC,KAAK;QACtF,IAAI,KAAK,WAAW,iBAAiB,GAAG,MAAM,KAAK,MAAM,EAAwB,CAAC,CAAC,KAAK;QACxF,IAAI,SAAS,MAAM,CAAC,KAAK,WAAW,GAAG,GAAG,QAAQ;GAEzD,MAAM,SAAS,SAAS,gBAAgB,KAAK,MAAM,GAAG,gBAAgB,IAAI;GAC1E,QAAQ,SAAS;IAAE;IAAQ;GAAM,IAAI,KAAA,CAAS;EAChD,CACF;CACF,CAAC;AACH"}

package/dist/src/services/sessionGitStatus/index.mjs

@@ -0,0 +1,46 @@
+import { execFile } from "node:child_process";
+//#region src/services/sessionGitStatus/index.ts
+const GIT_TIMEOUT_MS = 5e3;
+const BRANCH_HEAD_PREFIX = "# branch.head ";
+const BRANCH_OID_PREFIX = "# branch.oid ";
+const DETACHED_HEAD = "(detached)";
+const SHORT_OID_LENGTH = 7;
+/**
+* Reads the branch and dirty flag for a session cwd with one `git status` call.
+* Resolves undefined when the cwd is not a git work tree or git is unavailable,
+* which the session summary documents as "no git status".
+*/
+function readSessionGitStatus(cwd) {
+	return new Promise((resolve) => {
+		execFile("git", [
+			"status",
+			"--porcelain=v2",
+			"--branch",
+			"--untracked-files=no"
+		], {
+			cwd,
+			timeout: GIT_TIMEOUT_MS,
+			windowsHide: true
+		}, (error, stdout) => {
+			if (error) {
+				resolve(void 0);
+				return;
+			}
+			let head;
+			let oid;
+			let dirty = false;
+			for (const line of stdout.split("\n")) if (line.startsWith(BRANCH_HEAD_PREFIX)) head = line.slice(14).trim();
+			else if (line.startsWith(BRANCH_OID_PREFIX)) oid = line.slice(13).trim();
+			else if (line !== "" && !line.startsWith("#")) dirty = true;
+			const branch = head === DETACHED_HEAD ? oid?.slice(0, SHORT_OID_LENGTH) : head;
+			resolve(branch ? {
+				branch,
+				dirty
+			} : void 0);
+		});
+	});
+}
+//#endregion
+export { readSessionGitStatus };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/services/sessionGitStatus/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/sessionGitStatus/index.ts"],"sourcesContent":["import { execFile } from 'node:child_process';\n\nimport type { SessionGitStatus } from './type';\n\nconst GIT_TIMEOUT_MS = 5_000;\nconst BRANCH_HEAD_PREFIX = '# branch.head ';\nconst BRANCH_OID_PREFIX = '# branch.oid ';\nconst DETACHED_HEAD = '(detached)';\nconst SHORT_OID_LENGTH = 7;\n\n/**\n * Reads the branch and dirty flag for a session cwd with one `git status` call.\n * Resolves undefined when the cwd is not a git work tree or git is unavailable,\n * which the session summary documents as \"no git status\".\n */\nexport function readSessionGitStatus(cwd: string): Promise<SessionGitStatus | undefined> {\n  return new Promise((resolve) => {\n    execFile(\n      'git',\n      ['status', '--porcelain=v2', '--branch', '--untracked-files=no'],\n      { cwd, timeout: GIT_TIMEOUT_MS, windowsHide: true },\n      (error, stdout) => {\n        if (error) {\n          resolve(undefined);\n          return;\n        }\n        let head: string | undefined;\n        let oid: string | undefined;\n        let dirty = false;\n        for (const line of stdout.split('\\n')) {\n          if (line.startsWith(BRANCH_HEAD_PREFIX)) head = line.slice(BRANCH_HEAD_PREFIX.length).trim();\n          else if (line.startsWith(BRANCH_OID_PREFIX)) oid = line.slice(BRANCH_OID_PREFIX.length).trim();\n          else if (line !== '' && !line.startsWith('#')) dirty = true;\n        }\n        const branch = head === DETACHED_HEAD ? oid?.slice(0, SHORT_OID_LENGTH) : head;\n        resolve(branch ? { branch, dirty } : undefined);\n      },\n    );\n  });\n}\n"],"mappings":";;AAIA,MAAM,iBAAiB;AACvB,MAAM,qBAAqB;AAC3B,MAAM,oBAAoB;AAC1B,MAAM,gBAAgB;AACtB,MAAM,mBAAmB;;;;;;AAOzB,SAAgB,qBAAqB,KAAoD;CACvF,OAAO,IAAI,SAAS,YAAY;EAC9B,SACE,OACA;GAAC;GAAU;GAAkB;GAAY;EAAsB,GAC/D;GAAE;GAAK,SAAS;GAAgB,aAAa;EAAK,IACjD,OAAO,WAAW;GACjB,IAAI,OAAO;IACT,QAAQ,KAAA,CAAS;IACjB;GACF;GACA,IAAI;GACJ,IAAI;GACJ,IAAI,QAAQ;GACZ,KAAK,MAAM,QAAQ,OAAO,MAAM,IAAI,GAClC,IAAI,KAAK,WAAW,kBAAkB,GAAG,OAAO,KAAK,MAAM,EAAyB,CAAC,CAAC,KAAK;QACtF,IAAI,KAAK,WAAW,iBAAiB,GAAG,MAAM,KAAK,MAAM,EAAwB,CAAC,CAAC,KAAK;QACxF,IAAI,SAAS,MAAM,CAAC,KAAK,WAAW,GAAG,GAAG,QAAQ;GAEzD,MAAM,SAAS,SAAS,gBAAgB,KAAK,MAAM,GAAG,gBAAgB,IAAI;GAC1E,QAAQ,SAAS;IAAE;IAAQ;GAAM,IAAI,KAAA,CAAS;EAChD,CACF;CACF,CAAC;AACH"}

package/dist/src/services/sessionGitStatus/type.d.mts

@@ -0,0 +1,8 @@
+//#region src/services/sessionGitStatus/type.d.ts
+export interface SessionGitStatus {
+  readonly branch: string;
+  /** True when tracked files have uncommitted changes. Untracked files are ignored to keep large trees cheap. */
+  readonly dirty: boolean;
+}
+//#endregion
+//# sourceMappingURL=type.d.mts.map

package/dist/src/services/sessionGitStatus/type.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"type.d.mts","names":[],"sources":["../../../../src/services/sessionGitStatus/type.ts"],"mappings":";iBAAiB;WACN;;WAEA"}

package/dist/src/services/sessionMcpActivity/index.cjs

@@ -0,0 +1,115 @@
+const require_runtime = require("../../../_virtual/_rolldown/runtime.cjs");
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+let node_sqlite = require("node:sqlite");
+//#region src/services/sessionMcpActivity/index.ts
+const PREVIEW_LIMIT = 16384;
+const PAGE_SIZE = 50;
+const SECRET_KEY = /password|passphrase|secret|token|authorization|cookie|credential|api[-_]?key|private[-_]?key/iu;
+/** Bounded text previews only. Do not persist binary MCP content or authentication material. */
+function sessionMcpPreview(value) {
+	let remaining = PREVIEW_LIMIT;
+	const seen = /* @__PURE__ */ new WeakSet();
+	const clean = (item, depth) => {
+		if (remaining <= 0 || depth > 12) return "[truncated]";
+		if (typeof item === "string") {
+			const text = item.replace(/Bearer\s+[^\s"']+/giu, "Bearer [redacted]").replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/gu, "[redacted]").replace(/([?&](?:token|api_key|key|secret|password)=)[^&#\s"']*/giu, "$1[redacted]").replace(/(https?:\/\/)[^\s/@]+:[^\s/@]+@/giu, "$1[redacted]@");
+			const bounded = text.slice(0, remaining);
+			remaining -= bounded.length;
+			return bounded.length < text.length ? `${bounded}\n[truncated]` : bounded;
+		}
+		if (item === null || typeof item !== "object") return item;
+		if (seen.has(item)) return "[circular]";
+		seen.add(item);
+		if (Array.isArray(item)) return item.slice(0, 100).map((entry) => clean(entry, depth + 1));
+		return Object.fromEntries(Object.entries(item).slice(0, 100).map(([key, entry]) => [key, SECRET_KEY.test(key) ? "[redacted]" : key === "data" && typeof entry === "string" ? "[binary omitted]" : clean(entry, depth + 1)]));
+	};
+	try {
+		const text = JSON.stringify(clean(value, 0), null, 2) ?? "";
+		return text.length > PREVIEW_LIMIT ? `${text.slice(0, PREVIEW_LIMIT)}\n[truncated]` : text;
+	} catch {
+		return "[preview unavailable]";
+	}
+}
+/** One process owns this private ledger. Pagination never drops older tool calls. */
+function createSessionMcpActivityStore(stateDir) {
+	node_fs.default.mkdirSync(stateDir, {
+		recursive: true,
+		mode: 448
+	});
+	const file = node_path.default.join(stateDir, "session-mcp-activity.sqlite");
+	node_fs.default.closeSync(node_fs.default.openSync(file, "a", 384));
+	const database = new node_sqlite.DatabaseSync(file);
+	database.exec(`
+    PRAGMA journal_mode = WAL;
+    PRAGMA busy_timeout = 5000;
+    CREATE TABLE IF NOT EXISTS calls (
+      sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+      id TEXT NOT NULL UNIQUE,
+      workspace_id TEXT NOT NULL,
+      session_id TEXT NOT NULL,
+      record TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS calls_session ON calls(workspace_id, session_id, sequence);
+  `);
+	const unfinished = database.prepare("SELECT id, record FROM calls WHERE json_extract(record, '$.status') = 'running'").all();
+	const update = database.prepare("UPDATE calls SET record = ? WHERE id = ?");
+	for (const row of unfinished) {
+		const record = JSON.parse(String(row.record));
+		update.run(JSON.stringify({
+			...record,
+			status: "interrupted",
+			finishedAt: Date.now()
+		}), String(row.id));
+	}
+	let failure;
+	const save = database.prepare(`
+    INSERT INTO calls (id, workspace_id, session_id, record) VALUES (?, ?, ?, ?)
+    ON CONFLICT(id) DO UPDATE SET workspace_id = excluded.workspace_id, session_id = excluded.session_id, record = excluded.record
+  `);
+	return {
+		record(workspaceId, sessionId, clientName, invocation) {
+			try {
+				const record = {
+					id: invocation.id,
+					toolName: invocation.toolName,
+					clientName,
+					startedAt: invocation.startedAt,
+					finishedAt: invocation.finishedAt,
+					status: invocation.status,
+					input: sessionMcpPreview(invocation.input),
+					...invocation.output === void 0 ? {} : { output: sessionMcpPreview(invocation.output) }
+				};
+				save.run(invocation.id, workspaceId, sessionId, JSON.stringify(record));
+			} catch (error) {
+				failure = new Error("MCP call history could not be saved. Check the host storage.", { cause: error });
+				throw failure;
+			}
+		},
+		read(workspaceId, sessionId, before) {
+			if (failure) throw failure;
+			const rows = database.prepare(`SELECT sequence, record FROM calls
+        WHERE workspace_id = ? AND session_id = ? AND sequence < ? ORDER BY sequence DESC LIMIT ?`).all(workspaceId, sessionId, before ?? Number.MAX_SAFE_INTEGER, 51);
+			const calls = rows.slice(0, PAGE_SIZE).map((row) => ({
+				...JSON.parse(String(row.record)),
+				sequence: Number(row.sequence)
+			}));
+			const count = database.prepare("SELECT COUNT(*) AS total FROM calls WHERE workspace_id = ? AND session_id = ?").get(workspaceId, sessionId);
+			return {
+				calls,
+				total: Number(count?.total ?? 0),
+				...rows.length > PAGE_SIZE ? { nextBefore: calls.at(-1).sequence } : {}
+			};
+		},
+		close() {
+			database.close();
+		}
+	};
+}
+//#endregion
+exports.createSessionMcpActivityStore = createSessionMcpActivityStore;
+exports.sessionMcpPreview = sessionMcpPreview;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/sessionMcpActivity/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["path","fs","DatabaseSync"],"sources":["../../../../src/services/sessionMcpActivity/index.ts"],"sourcesContent":["import fs from 'node:fs';\nimport path from 'node:path';\nimport { DatabaseSync } from 'node:sqlite';\n\nimport type { SessionMcpCall, SessionMcpInvocation } from '../../schemas/sessionMcpActivity';\n\nconst PREVIEW_LIMIT = 16_384;\nconst PAGE_SIZE = 50;\nconst SECRET_KEY = /password|passphrase|secret|token|authorization|cookie|credential|api[-_]?key|private[-_]?key/iu;\n\n/** Bounded text previews only. Do not persist binary MCP content or authentication material. */\nexport function sessionMcpPreview(value: unknown): string {\n  let remaining = PREVIEW_LIMIT;\n  const seen = new WeakSet<object>();\n  const clean = (item: unknown, depth: number): unknown => {\n    if (remaining <= 0 || depth > 12) return '[truncated]';\n    if (typeof item === 'string') {\n      const text = item\n        .replace(/Bearer\\s+[^\\s\"']+/giu, 'Bearer [redacted]')\n        .replace(/\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\b/gu, '[redacted]')\n        .replace(/([?&](?:token|api_key|key|secret|password)=)[^&#\\s\"']*/giu, '$1[redacted]')\n        .replace(/(https?:\\/\\/)[^\\s/@]+:[^\\s/@]+@/giu, '$1[redacted]@');\n      const bounded = text.slice(0, remaining);\n      remaining -= bounded.length;\n      return bounded.length < text.length ? `${bounded}\\n[truncated]` : bounded;\n    }\n    if (item === null || typeof item !== 'object') return item;\n    if (seen.has(item)) return '[circular]';\n    seen.add(item);\n    if (Array.isArray(item)) return item.slice(0, 100).map((entry) => clean(entry, depth + 1));\n    return Object.fromEntries(\n      Object.entries(item)\n        .slice(0, 100)\n        .map(([key, entry]) => [\n          key,\n          SECRET_KEY.test(key)\n            ? '[redacted]'\n            : key === 'data' && typeof entry === 'string'\n              ? '[binary omitted]'\n              : clean(entry, depth + 1),\n        ]),\n    );\n  };\n  try {\n    const text = JSON.stringify(clean(value, 0), null, 2) ?? '';\n    return text.length > PREVIEW_LIMIT ? `${text.slice(0, PREVIEW_LIMIT)}\\n[truncated]` : text;\n  } catch {\n    return '[preview unavailable]';\n  }\n}\n\n/** One process owns this private ledger. Pagination never drops older tool calls. */\nexport function createSessionMcpActivityStore(stateDir: string) {\n  fs.mkdirSync(stateDir, { recursive: true, mode: 0o700 });\n  const file = path.join(stateDir, 'session-mcp-activity.sqlite');\n  fs.closeSync(fs.openSync(file, 'a', 0o600));\n  const database = new DatabaseSync(file);\n  database.exec(`\n    PRAGMA journal_mode = WAL;\n    PRAGMA busy_timeout = 5000;\n    CREATE TABLE IF NOT EXISTS calls (\n      sequence INTEGER PRIMARY KEY AUTOINCREMENT,\n      id TEXT NOT NULL UNIQUE,\n      workspace_id TEXT NOT NULL,\n      session_id TEXT NOT NULL,\n      record TEXT NOT NULL\n    );\n    CREATE INDEX IF NOT EXISTS calls_session ON calls(workspace_id, session_id, sequence);\n  `);\n  // A process restart cannot truthfully keep an in-flight call marked as running.\n  const unfinished = database\n    .prepare(\"SELECT id, record FROM calls WHERE json_extract(record, '$.status') = 'running'\")\n    .all();\n  const update = database.prepare('UPDATE calls SET record = ? WHERE id = ?');\n  for (const row of unfinished) {\n    const record = JSON.parse(String(row.record)) as SessionMcpCall;\n    update.run(JSON.stringify({ ...record, status: 'interrupted', finishedAt: Date.now() }), String(row.id));\n  }\n  let failure: Error | undefined;\n  const save = database.prepare(`\n    INSERT INTO calls (id, workspace_id, session_id, record) VALUES (?, ?, ?, ?)\n    ON CONFLICT(id) DO UPDATE SET workspace_id = excluded.workspace_id, session_id = excluded.session_id, record = excluded.record\n  `);\n  return {\n    record(workspaceId: string, sessionId: string, clientName: string, invocation: SessionMcpInvocation): void {\n      try {\n        const record: Omit<SessionMcpCall, 'sequence'> = {\n          id: invocation.id,\n          toolName: invocation.toolName,\n          clientName,\n          startedAt: invocation.startedAt,\n          finishedAt: invocation.finishedAt,\n          status: invocation.status,\n          input: sessionMcpPreview(invocation.input),\n          ...(invocation.output === undefined ? {} : { output: sessionMcpPreview(invocation.output) }),\n        };\n        save.run(invocation.id, workspaceId, sessionId, JSON.stringify(record));\n      } catch (error) {\n        failure = new Error('MCP call history could not be saved. Check the host storage.', { cause: error });\n        throw failure;\n      }\n    },\n    read(workspaceId: string, sessionId: string, before?: number) {\n      if (failure) throw failure;\n      const rows = database\n        .prepare(`SELECT sequence, record FROM calls\n        WHERE workspace_id = ? AND session_id = ? AND sequence < ? ORDER BY sequence DESC LIMIT ?`)\n        .all(workspaceId, sessionId, before ?? Number.MAX_SAFE_INTEGER, PAGE_SIZE + 1);\n      const calls = rows.slice(0, PAGE_SIZE).map((row) => ({\n        ...(JSON.parse(String(row.record)) as Omit<SessionMcpCall, 'sequence'>),\n        sequence: Number(row.sequence),\n      }));\n      const count = database\n        .prepare('SELECT COUNT(*) AS total FROM calls WHERE workspace_id = ? AND session_id = ?')\n        .get(workspaceId, sessionId);\n      return {\n        calls,\n        total: Number(count?.total ?? 0),\n        ...(rows.length > PAGE_SIZE ? { nextBefore: calls.at(-1)!.sequence } : {}),\n      };\n    },\n    close(): void {\n      database.close();\n    },\n  };\n}\n\nexport type SessionMcpActivityStore = ReturnType<typeof createSessionMcpActivityStore>;\n"],"mappings":";;;;;;;AAMA,MAAM,gBAAgB;AACtB,MAAM,YAAY;AAClB,MAAM,aAAa;;AAGnB,SAAgB,kBAAkB,OAAwB;CACxD,IAAI,YAAY;CAChB,MAAM,uBAAO,IAAI,QAAgB;CACjC,MAAM,SAAS,MAAe,UAA2B;EACvD,IAAI,aAAa,KAAK,QAAQ,IAAI,OAAO;EACzC,IAAI,OAAO,SAAS,UAAU;GAC5B,MAAM,OAAO,KACV,QAAQ,wBAAwB,mBAAmB,CAAC,CACpD,QAAQ,2DAA2D,YAAY,CAAC,CAChF,QAAQ,6DAA6D,cAAc,CAAC,CACpF,QAAQ,sCAAsC,eAAe;GAChE,MAAM,UAAU,KAAK,MAAM,GAAG,SAAS;GACvC,aAAa,QAAQ;GACrB,OAAO,QAAQ,SAAS,KAAK,SAAS,GAAG,QAAQ,iBAAiB;EACpE;EACA,IAAI,SAAS,QAAQ,OAAO,SAAS,UAAU,OAAO;EACtD,IAAI,KAAK,IAAI,IAAI,GAAG,OAAO;EAC3B,KAAK,IAAI,IAAI;EACb,IAAI,MAAM,QAAQ,IAAI,GAAG,OAAO,KAAK,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,UAAU,MAAM,OAAO,QAAQ,CAAC,CAAC;EACzF,OAAO,OAAO,YACZ,OAAO,QAAQ,IAAI,CAAC,CACjB,MAAM,GAAG,GAAG,CAAC,CACb,KAAK,CAAC,KAAK,WAAW,CACrB,KACA,WAAW,KAAK,GAAG,IACf,eACA,QAAQ,UAAU,OAAO,UAAU,WACjC,qBACA,MAAM,OAAO,QAAQ,CAAC,CAC9B,CAAC,CACL;CACF;CACA,IAAI;EACF,MAAM,OAAO,KAAK,UAAU,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK;EACzD,OAAO,KAAK,SAAS,gBAAgB,GAAG,KAAK,MAAM,GAAG,aAAa,EAAE,iBAAiB;CACxF,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAgB,8BAA8B,UAAkB;CAC9D,QAAA,QAAG,UAAU,UAAU;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACvD,MAAM,OAAOA,UAAAA,QAAK,KAAK,UAAU,6BAA6B;CAC9D,QAAA,QAAG,UAAUC,QAAAA,QAAG,SAAS,MAAM,KAAK,GAAK,CAAC;CAC1C,MAAM,WAAW,IAAIC,YAAAA,aAAa,IAAI;CACtC,SAAS,KAAK;;;;;;;;;;;GAWb;CAED,MAAM,aAAa,SAChB,QAAQ,iFAAiF,CAAC,CAC1F,IAAI;CACP,MAAM,SAAS,SAAS,QAAQ,0CAA0C;CAC1E,KAAK,MAAM,OAAO,YAAY;EAC5B,MAAM,SAAS,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC;EAC5C,OAAO,IAAI,KAAK,UAAU;GAAE,GAAG;GAAQ,QAAQ;GAAe,YAAY,KAAK,IAAI;EAAE,CAAC,GAAG,OAAO,IAAI,EAAE,CAAC;CACzG;CACA,IAAI;CACJ,MAAM,OAAO,SAAS,QAAQ;;;GAG7B;CACD,OAAO;EACL,OAAO,aAAqB,WAAmB,YAAoB,YAAwC;GACzG,IAAI;IACF,MAAM,SAA2C;KAC/C,IAAI,WAAW;KACf,UAAU,WAAW;KACrB;KACA,WAAW,WAAW;KACtB,YAAY,WAAW;KACvB,QAAQ,WAAW;KACnB,OAAO,kBAAkB,WAAW,KAAK;KACzC,GAAI,WAAW,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,kBAAkB,WAAW,MAAM,EAAE;IAC5F;IACA,KAAK,IAAI,WAAW,IAAI,aAAa,WAAW,KAAK,UAAU,MAAM,CAAC;GACxE,SAAS,OAAO;IACd,UAAU,IAAI,MAAM,gEAAgE,EAAE,OAAO,MAAM,CAAC;IACpG,MAAM;GACR;EACF;EACA,KAAK,aAAqB,WAAmB,QAAiB;GAC5D,IAAI,SAAS,MAAM;GACnB,MAAM,OAAO,SACV,QAAQ;kGACiF,CAAC,CAC1F,IAAI,aAAa,WAAW,UAAU,OAAO,kBAAkB,EAAa;GAC/E,MAAM,QAAQ,KAAK,MAAM,GAAG,SAAS,CAAC,CAAC,KAAK,SAAS;IACnD,GAAI,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC;IACjC,UAAU,OAAO,IAAI,QAAQ;GAC/B,EAAE;GACF,MAAM,QAAQ,SACX,QAAQ,+EAA+E,CAAC,CACxF,IAAI,aAAa,SAAS;GAC7B,OAAO;IACL;IACA,OAAO,OAAO,OAAO,SAAS,CAAC;IAC/B,GAAI,KAAK,SAAS,YAAY,EAAE,YAAY,MAAM,GAAG,EAAE,CAAC,CAAE,SAAS,IAAI,CAAC;GAC1E;EACF;EACA,QAAc;GACZ,SAAS,MAAM;EACjB;CACF;AACF"}

package/dist/src/services/sessionMcpActivity/index.mjs

@@ -0,0 +1,111 @@
+import fs from "node:fs";
+import path from "node:path";
+import { DatabaseSync } from "node:sqlite";
+//#region src/services/sessionMcpActivity/index.ts
+const PREVIEW_LIMIT = 16384;
+const PAGE_SIZE = 50;
+const SECRET_KEY = /password|passphrase|secret|token|authorization|cookie|credential|api[-_]?key|private[-_]?key/iu;
+/** Bounded text previews only. Do not persist binary MCP content or authentication material. */
+function sessionMcpPreview(value) {
+	let remaining = PREVIEW_LIMIT;
+	const seen = /* @__PURE__ */ new WeakSet();
+	const clean = (item, depth) => {
+		if (remaining <= 0 || depth > 12) return "[truncated]";
+		if (typeof item === "string") {
+			const text = item.replace(/Bearer\s+[^\s"']+/giu, "Bearer [redacted]").replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/gu, "[redacted]").replace(/([?&](?:token|api_key|key|secret|password)=)[^&#\s"']*/giu, "$1[redacted]").replace(/(https?:\/\/)[^\s/@]+:[^\s/@]+@/giu, "$1[redacted]@");
+			const bounded = text.slice(0, remaining);
+			remaining -= bounded.length;
+			return bounded.length < text.length ? `${bounded}\n[truncated]` : bounded;
+		}
+		if (item === null || typeof item !== "object") return item;
+		if (seen.has(item)) return "[circular]";
+		seen.add(item);
+		if (Array.isArray(item)) return item.slice(0, 100).map((entry) => clean(entry, depth + 1));
+		return Object.fromEntries(Object.entries(item).slice(0, 100).map(([key, entry]) => [key, SECRET_KEY.test(key) ? "[redacted]" : key === "data" && typeof entry === "string" ? "[binary omitted]" : clean(entry, depth + 1)]));
+	};
+	try {
+		const text = JSON.stringify(clean(value, 0), null, 2) ?? "";
+		return text.length > PREVIEW_LIMIT ? `${text.slice(0, PREVIEW_LIMIT)}\n[truncated]` : text;
+	} catch {
+		return "[preview unavailable]";
+	}
+}
+/** One process owns this private ledger. Pagination never drops older tool calls. */
+function createSessionMcpActivityStore(stateDir) {
+	fs.mkdirSync(stateDir, {
+		recursive: true,
+		mode: 448
+	});
+	const file = path.join(stateDir, "session-mcp-activity.sqlite");
+	fs.closeSync(fs.openSync(file, "a", 384));
+	const database = new DatabaseSync(file);
+	database.exec(`
+    PRAGMA journal_mode = WAL;
+    PRAGMA busy_timeout = 5000;
+    CREATE TABLE IF NOT EXISTS calls (
+      sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+      id TEXT NOT NULL UNIQUE,
+      workspace_id TEXT NOT NULL,
+      session_id TEXT NOT NULL,
+      record TEXT NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS calls_session ON calls(workspace_id, session_id, sequence);
+  `);
+	const unfinished = database.prepare("SELECT id, record FROM calls WHERE json_extract(record, '$.status') = 'running'").all();
+	const update = database.prepare("UPDATE calls SET record = ? WHERE id = ?");
+	for (const row of unfinished) {
+		const record = JSON.parse(String(row.record));
+		update.run(JSON.stringify({
+			...record,
+			status: "interrupted",
+			finishedAt: Date.now()
+		}), String(row.id));
+	}
+	let failure;
+	const save = database.prepare(`
+    INSERT INTO calls (id, workspace_id, session_id, record) VALUES (?, ?, ?, ?)
+    ON CONFLICT(id) DO UPDATE SET workspace_id = excluded.workspace_id, session_id = excluded.session_id, record = excluded.record
+  `);
+	return {
+		record(workspaceId, sessionId, clientName, invocation) {
+			try {
+				const record = {
+					id: invocation.id,
+					toolName: invocation.toolName,
+					clientName,
+					startedAt: invocation.startedAt,
+					finishedAt: invocation.finishedAt,
+					status: invocation.status,
+					input: sessionMcpPreview(invocation.input),
+					...invocation.output === void 0 ? {} : { output: sessionMcpPreview(invocation.output) }
+				};
+				save.run(invocation.id, workspaceId, sessionId, JSON.stringify(record));
+			} catch (error) {
+				failure = new Error("MCP call history could not be saved. Check the host storage.", { cause: error });
+				throw failure;
+			}
+		},
+		read(workspaceId, sessionId, before) {
+			if (failure) throw failure;
+			const rows = database.prepare(`SELECT sequence, record FROM calls
+        WHERE workspace_id = ? AND session_id = ? AND sequence < ? ORDER BY sequence DESC LIMIT ?`).all(workspaceId, sessionId, before ?? Number.MAX_SAFE_INTEGER, 51);
+			const calls = rows.slice(0, PAGE_SIZE).map((row) => ({
+				...JSON.parse(String(row.record)),
+				sequence: Number(row.sequence)
+			}));
+			const count = database.prepare("SELECT COUNT(*) AS total FROM calls WHERE workspace_id = ? AND session_id = ?").get(workspaceId, sessionId);
+			return {
+				calls,
+				total: Number(count?.total ?? 0),
+				...rows.length > PAGE_SIZE ? { nextBefore: calls.at(-1).sequence } : {}
+			};
+		},
+		close() {
+			database.close();
+		}
+	};
+}
+//#endregion
+export { createSessionMcpActivityStore, sessionMcpPreview };
+
+//# sourceMappingURL=index.mjs.map