@agimon-ai/po-core 0.0.0-alpha.0

package/dist/src/services/sessionMcpAuthorization/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/sessionMcpAuthorization/index.ts"],"sourcesContent":["import { createHash, createHmac, randomBytes, randomInt, timingSafeEqual } from 'node:crypto';\n\nconst ACCESS_TOKEN_TTL_MS = 15 * 60_000;\nconst AUTHORIZATION_CODE_TTL_MS = 5 * 60_000;\nconst CLIENT_ID_BYTES = 18;\nconst CLIENT_SECRET_BYTES = 32;\nconst DEFAULT_MAX_RECORDS = 10_000;\nconst GRANT_ID_BYTES = 18;\nconst REFRESH_TOKEN_TTL_MS = 30 * 24 * 60 * 60_000;\nconst TOKEN_BYTES = 32;\nconst URL_TOKEN_HEADER = Buffer.from('{\"alg\":\"HS256\",\"typ\":\"JWT\"}').toString('base64url');\nconst URL_TOKEN_ISSUER = 'po-session-mcp';\nconst URL_TOKEN_MAX_LENGTH = 4096;\n\nexport type SessionMcpOAuthErrorCode =\n  | 'invalid_client'\n  | 'invalid_grant'\n  | 'invalid_request'\n  | 'unsupported_grant_type';\n\nexport class SessionMcpOAuthError extends Error {\n  readonly code: SessionMcpOAuthErrorCode;\n\n  constructor(code: SessionMcpOAuthErrorCode, message: string) {\n    super(message);\n    this.name = 'SessionMcpOAuthError';\n    this.code = code;\n  }\n}\n\nexport type SessionMcpScope = 'restricted' | 'session';\nexport type SessionMcpRouting = 'conversation';\n\n/**\n * Conversation routing is mandatory. Legacy registrations are migrated at read time\n * so they cannot continue to share their parent runtime.\n */\nexport function sessionMcpRouting(value: unknown): SessionMcpRouting {\n  if (value === undefined || value === 'session' || value === 'conversation') return 'conversation';\n  throw new SessionMcpOAuthError('invalid_request', 'Session MCP routing is not supported.');\n}\n\nconst SESSION_MCP_TOOL_PREFIX_MAX_LENGTH = 24;\nconst SESSION_MCP_TOOL_PREFIX = /^[a-z0-9]+(?:_[a-z0-9]+)*$/u;\nconst FALLBACK_TOOL_PREFIXES = Object.freeze([\n  'alba',\n  'bruno',\n  'cora',\n  'dex',\n  'elio',\n  'fern',\n  'gus',\n  'hana',\n  'ivo',\n  'juno',\n  'kai',\n  'lena',\n  'milo',\n  'nora',\n  'otto',\n  'pia',\n]);\n\n/**\n * Remote tool names are `${prefix}_${name}`. The prefix keeps them distinct from\n * the remote agent's native tools and stays inside OpenAI and MCP name rules.\n */\nexport function sessionMcpToolPrefix(value: unknown): string | undefined {\n  if (value === undefined) return undefined;\n  if (\n    typeof value !== 'string' ||\n    value.length > SESSION_MCP_TOOL_PREFIX_MAX_LENGTH ||\n    !SESSION_MCP_TOOL_PREFIX.test(value)\n  ) {\n    throw new SessionMcpOAuthError(\n      'invalid_request',\n      `Tool prefix must be 1 to ${SESSION_MCP_TOOL_PREFIX_MAX_LENGTH} lowercase letters or digits, joined by single underscores.`,\n    );\n  }\n  return value;\n}\n\n/** Normalized session name, or a random readable word when the name is empty or the CLI default. */\nexport function defaultSessionMcpToolPrefix(sessionName: string): string {\n  const prefix = sessionName\n    .normalize('NFKD')\n    .replace(/\\p{M}/gu, '')\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/gu, '_')\n    .replace(/^_+|_+$/gu, '')\n    .slice(0, SESSION_MCP_TOOL_PREFIX_MAX_LENGTH)\n    .replace(/_+$/u, '');\n  if (prefix !== '' && prefix !== 'untitled') return prefix;\n  return FALLBACK_TOOL_PREFIXES[randomInt(FALLBACK_TOOL_PREFIXES.length)]!;\n}\n\nexport interface SessionMcpClient {\n  readonly clientId: string;\n  readonly name: string;\n  readonly redirectUri: string;\n  readonly tokenEndpointAuthMethod: 'client_secret_post' | 'api_key' | 'url_token';\n  readonly createdAt: number;\n}\n\nexport interface CreatedSessionMcpClient extends SessionMcpClient {\n  /** Returned once. Only a SHA-256 digest is retained by the service. */\n  readonly clientSecret: string;\n}\n\nexport interface SessionMcpAuthorizationBinding {\n  readonly clientId: string;\n  readonly sessionId: string;\n  readonly sessionGeneration: number;\n  readonly audience: string;\n  readonly scope: SessionMcpScope;\n  /** Always conversation. Legacy persisted values are normalized at read time. */\n  readonly routing?: SessionMcpRouting;\n  readonly tools: readonly string[];\n  readonly skills: readonly string[];\n  /** Fixed at creation. Absent on legacy registrations, which keep bare tool names. */\n  readonly toolPrefix?: string;\n}\n\nexport type CreateSessionMcpAuthorizationBindingInput = Omit<\n  SessionMcpAuthorizationBinding,\n  'scope' | 'tools' | 'skills'\n> &\n  (\n    | { readonly scope: 'session'; readonly tools?: never; readonly skills?: never }\n    | { readonly scope?: 'restricted'; readonly tools: readonly string[]; readonly skills: readonly string[] }\n  );\n\nexport interface SessionMcpGrant extends SessionMcpAuthorizationBinding {\n  readonly id: string;\n  readonly createdAt: number;\n}\n\nexport interface SessionMcpAccessGrant extends SessionMcpGrant {\n  readonly expiresAt: number;\n}\n\nexport interface SessionMcpTokenResponse {\n  readonly accessToken: string;\n  readonly refreshToken: string;\n  readonly tokenType: 'Bearer';\n  readonly expiresIn: number;\n  readonly grant: SessionMcpGrant;\n}\n\nexport interface SessionMcpAuthorizationServiceOptions {\n  readonly now?: () => number;\n  readonly authorizationCodeTtlMs?: number;\n  readonly accessTokenTtlMs?: number;\n  readonly refreshTokenTtlMs?: number;\n  /** Maximum combined authorization codes, grants, tokens, and refresh-token tombstones. */\n  readonly maxRecords?: number;\n}\n\nexport type CreateSessionMcpClientInput =\n  | { readonly name: string; readonly redirectUri: string; readonly authMethod?: 'oauth' }\n  | { readonly name: string; readonly authMethod: 'api_key' | 'url_token'; readonly redirectUri?: never };\n\nexport interface IssueSessionMcpAuthorizationCodeInput {\n  readonly clientId: string;\n  readonly redirectUri: string;\n  readonly codeChallenge: string;\n  readonly codeChallengeMethod: 'S256';\n}\n\nexport type SessionMcpTokenRequest =\n  | {\n      readonly grantType: 'authorization_code';\n      readonly clientId: string;\n      readonly clientSecret: string;\n      readonly code: string;\n      readonly redirectUri: string;\n      readonly codeVerifier: string;\n    }\n  | {\n      readonly grantType: 'refresh_token';\n      readonly clientId: string;\n      readonly clientSecret: string;\n      readonly refreshToken: string;\n    };\n\nexport interface SessionMcpAuthorizationCode {\n  readonly code: string;\n  readonly grant: SessionMcpGrant;\n  readonly expiresAt: number;\n}\n\nexport interface SessionMcpPersistentRegistration {\n  readonly client: SessionMcpClient;\n  readonly secretHash: string;\n  readonly workspaceId: string;\n  readonly binding: Omit<SessionMcpAuthorizationBinding, 'sessionGeneration'>;\n  readonly verifiedAt: number;\n}\n\nexport interface SessionMcpAuthorizationService {\n  createClient(input: CreateSessionMcpClientInput): CreatedSessionMcpClient;\n  readClient(clientId: string): SessionMcpClient | undefined;\n  listClients(): readonly SessionMcpClient[];\n  revokeClient(clientId: string): boolean;\n  createAuthorizationBinding(input: CreateSessionMcpAuthorizationBindingInput): SessionMcpAuthorizationBinding;\n  readAuthorizationBinding(clientId: string): SessionMcpAuthorizationBinding | undefined;\n  persistentRegistration(\n    clientId: string,\n    workspaceId: string,\n    verifiedAt: number,\n  ): SessionMcpPersistentRegistration | undefined;\n  restorePersistentRegistration(registration: SessionMcpPersistentRegistration, sessionGeneration: number): boolean;\n  issueAuthorizationCode(input: IssueSessionMcpAuthorizationCodeInput): SessionMcpAuthorizationCode;\n  exchangeToken(request: SessionMcpTokenRequest): SessionMcpTokenResponse;\n  issueUrlToken(clientId: string): string;\n  authenticateUrlToken(token: string, audience: string): SessionMcpAccessGrant | undefined;\n  authenticateAccessToken(token: string, audience: string): SessionMcpAccessGrant | undefined;\n  revokeGrant(grantId: string): boolean;\n  revokeSessionGeneration(sessionId: string, sessionGeneration: number): number;\n  revokeSession(sessionId: string): number;\n}\n\ninterface StoredClient extends SessionMcpClient {\n  readonly secretHash: Buffer;\n}\n\ninterface StoredCode {\n  readonly clientId: string;\n  readonly redirectUri: string;\n  readonly challenge: string;\n  readonly grant: SessionMcpGrant;\n  readonly expiresAt: number;\n}\n\ninterface StoredAccessToken {\n  readonly grant: SessionMcpGrant;\n  readonly familyId: string;\n  readonly expiresAt: number;\n}\n\ninterface StoredRefreshToken extends StoredAccessToken {\n  readonly familyExpiresAt: number;\n}\n\ninterface ConsumedRefreshToken {\n  readonly clientId: string;\n  readonly grantId: string;\n  readonly familyId: string;\n  readonly expiresAt: number;\n}\n\nfunction digest(value: string): Buffer {\n  return createHash('sha256').update(value).digest();\n}\n\nfunction tokenKey(value: string): string {\n  return digest(value).toString('hex');\n}\n\nfunction opaque(bytes = TOKEN_BYTES): string {\n  return randomBytes(bytes).toString('base64url');\n}\n\nfunction exactSecret(actual: string, expectedHash: Buffer): boolean {\n  return timingSafeEqual(digest(actual), expectedHash);\n}\n\ninterface SessionMcpUrlTokenClaims {\n  readonly aud: string;\n  readonly iat: number;\n  readonly iss: typeof URL_TOKEN_ISSUER;\n  readonly sid: string;\n  readonly sub: string;\n}\n\nfunction urlTokenSignature(input: string, key: Buffer): Buffer {\n  return createHmac('sha256', key).update(input).digest();\n}\n\nfunction parseUrlToken(\n  token: string,\n): { readonly claims: SessionMcpUrlTokenClaims; readonly input: string; readonly signature: Buffer } | undefined {\n  if (token.length > URL_TOKEN_MAX_LENGTH) return undefined;\n  const parts = token.split('.');\n  if (parts.length !== 3) return undefined;\n  const [header, payload, encodedSignature] = parts;\n  if (\n    header !== URL_TOKEN_HEADER ||\n    !/^[A-Za-z0-9_-]{1,2048}$/u.test(payload!) ||\n    !/^[A-Za-z0-9_-]{43}$/u.test(encodedSignature!)\n  )\n    return undefined;\n  try {\n    const payloadBytes = Buffer.from(payload!, 'base64url');\n    const signature = Buffer.from(encodedSignature!, 'base64url');\n    if (\n      payloadBytes.toString('base64url') !== payload ||\n      signature.length !== 32 ||\n      signature.toString('base64url') !== encodedSignature\n    )\n      return undefined;\n    const value: unknown = JSON.parse(payloadBytes.toString('utf8'));\n    if (typeof value !== 'object' || value === null || Array.isArray(value)) return undefined;\n    const claims = value as Partial<SessionMcpUrlTokenClaims>;\n    if (\n      Object.keys(value).sort().join(',') !== 'aud,iat,iss,sid,sub' ||\n      claims.iss !== URL_TOKEN_ISSUER ||\n      typeof claims.sub !== 'string' ||\n      claims.sub === '' ||\n      typeof claims.sid !== 'string' ||\n      claims.sid === '' ||\n      typeof claims.aud !== 'string' ||\n      claims.aud === '' ||\n      typeof claims.iat !== 'number' ||\n      !Number.isSafeInteger(claims.iat)\n    )\n      return undefined;\n    return { claims: claims as SessionMcpUrlTokenClaims, input: `${header}.${payload}`, signature };\n  } catch {\n    return undefined;\n  }\n}\n\nfunction requireHttpsUrl(value: string, label: string, allowQuery: boolean): string {\n  let parsed: URL;\n  try {\n    parsed = new URL(value);\n  } catch {\n    throw new SessionMcpOAuthError('invalid_request', `${label} must be an absolute HTTPS URL.`);\n  }\n  if (\n    parsed.protocol !== 'https:' ||\n    parsed.username !== '' ||\n    parsed.password !== '' ||\n    parsed.hash !== '' ||\n    (!allowQuery && parsed.search !== '')\n  ) {\n    throw new SessionMcpOAuthError(\n      'invalid_request',\n      `${label} must be an absolute HTTPS URL without credentials, a query, or a fragment.`,\n    );\n  }\n  return parsed.href;\n}\n\nfunction requireName(value: string, label: string): string {\n  const normalized = value.trim();\n  if (normalized === '') throw new SessionMcpOAuthError('invalid_request', `${label} must not be empty.`);\n  return normalized;\n}\n\nfunction exactUniqueGrants(values: readonly string[], label: string): readonly string[] {\n  if (values.some((value) => value === '' || value !== value.trim())) {\n    throw new SessionMcpOAuthError('invalid_request', `${label} grants must contain exact non-empty names.`);\n  }\n  return Object.freeze([...new Set(values)]);\n}\n\n/** In-memory restricted OAuth authority. It intentionally has no discovery or client registration surface. */\nexport function createSessionMcpAuthorizationService(\n  options: SessionMcpAuthorizationServiceOptions = {},\n): SessionMcpAuthorizationService {\n  const now = options.now ?? Date.now;\n  const codeTtl = options.authorizationCodeTtlMs ?? AUTHORIZATION_CODE_TTL_MS;\n  const accessTtl = options.accessTokenTtlMs ?? ACCESS_TOKEN_TTL_MS;\n  const refreshTtl = options.refreshTokenTtlMs ?? REFRESH_TOKEN_TTL_MS;\n  const maxRecords = options.maxRecords ?? DEFAULT_MAX_RECORDS;\n  if (!Number.isSafeInteger(maxRecords) || maxRecords < 3) {\n    throw new Error('Session MCP authorization maxRecords must be a safe integer of at least 3.');\n  }\n\n  const clients = new Map<string, StoredClient>();\n  const bindings = new Map<string, SessionMcpAuthorizationBinding>();\n  const grants = new Map<string, SessionMcpGrant>();\n  const codes = new Map<string, StoredCode>();\n  const accessTokens = new Map<string, StoredAccessToken>();\n  const refreshTokens = new Map<string, StoredRefreshToken>();\n  const consumedRefreshTokens = new Map<string, ConsumedRefreshToken>();\n\n  const publicClient = ({ secretHash: _secretHash, ...client }: StoredClient): SessionMcpClient => client;\n\n  const recordCount = (): number =>\n    grants.size + codes.size + accessTokens.size + refreshTokens.size + consumedRefreshTokens.size;\n\n  const sweep = (): void => {\n    const currentTime = now();\n    for (const [key, value] of codes) if (value.expiresAt <= currentTime) codes.delete(key);\n    for (const [key, value] of accessTokens) if (value.expiresAt <= currentTime) accessTokens.delete(key);\n    for (const [key, value] of refreshTokens) if (value.expiresAt <= currentTime) refreshTokens.delete(key);\n    for (const [key, value] of consumedRefreshTokens) {\n      if (value.expiresAt <= currentTime) consumedRefreshTokens.delete(key);\n    }\n\n    const referencedGrants = new Set<string>();\n    for (const value of codes.values()) referencedGrants.add(value.grant.id);\n    for (const value of accessTokens.values()) referencedGrants.add(value.grant.id);\n    for (const value of refreshTokens.values()) referencedGrants.add(value.grant.id);\n    for (const value of consumedRefreshTokens.values()) referencedGrants.add(value.grantId);\n    for (const grantId of grants.keys()) if (!referencedGrants.has(grantId)) grants.delete(grantId);\n  };\n\n  const requireCapacity = (additionalRecords: number): void => {\n    sweep();\n    if (recordCount() + additionalRecords > maxRecords) {\n      throw new SessionMcpOAuthError('invalid_request', 'The authorization service is at capacity.');\n    }\n  };\n\n  const authenticateClient = (clientId: string, clientSecret: string): StoredClient => {\n    const client = clients.get(clientId);\n    if (client === undefined || !exactSecret(clientSecret, client.secretHash)) {\n      throw new SessionMcpOAuthError('invalid_client', 'Client authentication failed.');\n    }\n    return client;\n  };\n\n  const revokeGrant = (grantId: string): boolean => {\n    if (!grants.delete(grantId)) return false;\n    for (const [key, value] of codes) if (value.grant.id === grantId) codes.delete(key);\n    for (const [key, value] of accessTokens) if (value.grant.id === grantId) accessTokens.delete(key);\n    for (const [key, value] of refreshTokens) if (value.grant.id === grantId) refreshTokens.delete(key);\n    return true;\n  };\n\n  const revokeFamily = (familyId: string, grantId: string): void => {\n    revokeGrant(grantId);\n    for (const [key, value] of accessTokens) if (value.familyId === familyId) accessTokens.delete(key);\n    for (const [key, value] of refreshTokens) if (value.familyId === familyId) refreshTokens.delete(key);\n  };\n\n  const mintTokens = (\n    grant: SessionMcpGrant,\n    familyId = opaque(GRANT_ID_BYTES),\n    familyExpiresAt = now() + refreshTtl,\n  ): SessionMcpTokenResponse => {\n    const issuedAt = now();\n    const accessExpiresAt = Math.min(issuedAt + accessTtl, familyExpiresAt);\n    const accessToken = opaque();\n    const refreshToken = opaque();\n    accessTokens.set(tokenKey(accessToken), { grant, familyId, expiresAt: accessExpiresAt });\n    refreshTokens.set(tokenKey(refreshToken), {\n      grant,\n      familyId,\n      expiresAt: familyExpiresAt,\n      familyExpiresAt,\n    });\n    return {\n      accessToken,\n      refreshToken,\n      tokenType: 'Bearer',\n      expiresIn: Math.max(0, Math.floor((accessExpiresAt - issuedAt) / 1000)),\n      grant,\n    };\n  };\n\n  return {\n    createClient(input) {\n      const createdAt = now();\n      const clientId = opaque(CLIENT_ID_BYTES);\n      const clientSecret = opaque(CLIENT_SECRET_BYTES);\n      const urlCredential = input.authMethod === 'url_token';\n      const headerCredential = input.authMethod === 'api_key';\n      let redirectUri = '';\n      if (!urlCredential && !headerCredential) {\n        if (typeof input.redirectUri !== 'string') {\n          throw new SessionMcpOAuthError('invalid_request', 'Redirect URI must be an absolute HTTPS URL.');\n        }\n        redirectUri = requireHttpsUrl(input.redirectUri, 'Redirect URI', true);\n      }\n      const client: StoredClient = {\n        clientId,\n        name: requireName(input.name, 'Client name'),\n        redirectUri,\n        tokenEndpointAuthMethod: urlCredential ? 'url_token' : headerCredential ? 'api_key' : 'client_secret_post',\n        createdAt,\n        secretHash: digest(clientSecret),\n      };\n      clients.set(clientId, client);\n      return { ...publicClient(client), clientSecret };\n    },\n    readClient(clientId) {\n      const client = clients.get(clientId);\n      return client === undefined ? undefined : publicClient(client);\n    },\n    listClients() {\n      return [...clients.values()].map(publicClient);\n    },\n    revokeClient(clientId) {\n      if (!clients.delete(clientId)) return false;\n      bindings.delete(clientId);\n      for (const grant of grants.values()) if (grant.clientId === clientId) revokeGrant(grant.id);\n      return true;\n    },\n    createAuthorizationBinding(input) {\n      if (!clients.has(input.clientId)) throw new SessionMcpOAuthError('invalid_client', 'Unknown local client.');\n      if (bindings.has(input.clientId)) {\n        throw new SessionMcpOAuthError('invalid_request', 'Client authorization is already bound.');\n      }\n      if (!Number.isSafeInteger(input.sessionGeneration) || input.sessionGeneration < 0) {\n        throw new SessionMcpOAuthError('invalid_request', 'Session generation must be a non-negative safe integer.');\n      }\n      const routing = sessionMcpRouting(input.routing);\n      const scope = input.scope ?? 'restricted';\n      if (scope !== 'session' && scope !== 'restricted') {\n        throw new SessionMcpOAuthError('invalid_request', 'Authorization scope is not supported.');\n      }\n      let tools: readonly string[];\n      let skills: readonly string[];\n      if (scope === 'session') {\n        if (input.tools !== undefined || input.skills !== undefined) {\n          throw new SessionMcpOAuthError('invalid_request', 'Session scope cannot include capability grants.');\n        }\n        tools = Object.freeze([] as string[]);\n        skills = Object.freeze([] as string[]);\n      } else {\n        if (!Array.isArray(input.tools) || !Array.isArray(input.skills)) {\n          throw new SessionMcpOAuthError('invalid_request', 'Restricted scope requires tool and skill grants.');\n        }\n        tools = exactUniqueGrants(input.tools, 'Tool');\n        skills = exactUniqueGrants(input.skills, 'Skill');\n      }\n      const toolPrefix = sessionMcpToolPrefix(input.toolPrefix);\n      const binding: SessionMcpAuthorizationBinding = Object.freeze({\n        clientId: input.clientId,\n        sessionId: requireName(input.sessionId, 'Session ID'),\n        sessionGeneration: input.sessionGeneration,\n        audience: requireHttpsUrl(input.audience, 'Audience', false),\n        scope,\n        routing,\n        tools,\n        skills,\n        ...(toolPrefix === undefined ? {} : { toolPrefix }),\n      });\n      bindings.set(input.clientId, binding);\n      return binding;\n    },\n    readAuthorizationBinding(clientId) {\n      return bindings.get(clientId);\n    },\n    persistentRegistration(clientId, workspaceId, verifiedAt) {\n      const client = clients.get(clientId);\n      const binding = bindings.get(clientId);\n      if (client === undefined || binding === undefined || !Number.isSafeInteger(verifiedAt)) return undefined;\n      const { sessionGeneration: _sessionGeneration, ...persistentBinding } = binding;\n      return {\n        client: publicClient(client),\n        secretHash: client.secretHash.toString('hex'),\n        workspaceId: requireName(workspaceId, 'Workspace ID'),\n        binding: persistentBinding,\n        verifiedAt,\n      };\n    },\n    restorePersistentRegistration(registration, sessionGeneration) {\n      if (\n        bindings.has(registration.client.clientId) ||\n        !/^[a-f0-9]{64}$/u.test(registration.secretHash) ||\n        !Number.isSafeInteger(sessionGeneration) ||\n        sessionGeneration < 0 ||\n        registration.client.clientId !== registration.binding.clientId\n      )\n        return false;\n      try {\n        // Restarting a runtime revokes its binding, not its durable client registration.\n        const held = clients.get(registration.client.clientId);\n        if (\n          held &&\n          (held.redirectUri !== registration.client.redirectUri ||\n            held.tokenEndpointAuthMethod !== registration.client.tokenEndpointAuthMethod ||\n            !timingSafeEqual(held.secretHash, Buffer.from(registration.secretHash, 'hex')))\n        )\n          return false;\n        if (\n          (registration.client.tokenEndpointAuthMethod !== 'client_secret_post' &&\n            registration.client.tokenEndpointAuthMethod !== 'api_key' &&\n            registration.client.tokenEndpointAuthMethod !== 'url_token') ||\n          (registration.client.tokenEndpointAuthMethod !== 'client_secret_post' &&\n            (registration.client.redirectUri !== '' || registration.binding.scope !== 'session'))\n        )\n          return false;\n        const client: StoredClient = {\n          clientId: requireName(registration.client.clientId, 'Client ID'),\n          name: requireName(registration.client.name, 'Client name'),\n          redirectUri:\n            registration.client.tokenEndpointAuthMethod === 'client_secret_post'\n              ? requireHttpsUrl(registration.client.redirectUri, 'Redirect URI', true)\n              : registration.client.redirectUri,\n          tokenEndpointAuthMethod: registration.client.tokenEndpointAuthMethod,\n          createdAt: registration.client.createdAt,\n          secretHash: Buffer.from(registration.secretHash, 'hex'),\n        };\n        const routing = sessionMcpRouting(registration.binding.routing);\n        const toolPrefix = sessionMcpToolPrefix(registration.binding.toolPrefix);\n        const scope = registration.binding.scope;\n        const tools =\n          scope === 'session' ? Object.freeze([] as string[]) : exactUniqueGrants(registration.binding.tools, 'Tool');\n        const skills =\n          scope === 'session' ? Object.freeze([] as string[]) : exactUniqueGrants(registration.binding.skills, 'Skill');\n        if (\n          (scope !== 'session' && scope !== 'restricted') ||\n          (scope === 'session' && (registration.binding.tools.length !== 0 || registration.binding.skills.length !== 0))\n        ) {\n          throw new SessionMcpOAuthError('invalid_request', 'Stored Session MCP authorization is invalid.');\n        }\n        clients.set(client.clientId, client);\n        bindings.set(\n          client.clientId,\n          Object.freeze({\n            clientId: client.clientId,\n            sessionId: requireName(registration.binding.sessionId, 'Session ID'),\n            sessionGeneration,\n            audience: requireHttpsUrl(registration.binding.audience, 'Audience', false),\n            scope,\n            routing,\n            tools,\n            skills,\n            ...(toolPrefix === undefined ? {} : { toolPrefix }),\n          }),\n        );\n        return true;\n      } catch {\n        clients.delete(registration.client.clientId);\n        return false;\n      }\n    },\n    issueAuthorizationCode(input) {\n      const client = clients.get(input.clientId);\n      if (client === undefined) throw new SessionMcpOAuthError('invalid_client', 'Unknown local client.');\n      const binding = bindings.get(input.clientId);\n      if (binding === undefined) {\n        throw new SessionMcpOAuthError('invalid_request', 'Client authorization has not been preauthorized.');\n      }\n      if (client.tokenEndpointAuthMethod !== 'client_secret_post') {\n        throw new SessionMcpOAuthError('invalid_client', 'This client does not support OAuth authorization.');\n      }\n      if (input.redirectUri !== client.redirectUri) {\n        throw new SessionMcpOAuthError(\n          'invalid_request',\n          'Redirect URI does not exactly match the registered callback.',\n        );\n      }\n      if (input.codeChallengeMethod !== 'S256' || !/^[A-Za-z0-9_-]{43}$/u.test(input.codeChallenge)) {\n        throw new SessionMcpOAuthError('invalid_request', 'A valid S256 PKCE challenge is required.');\n      }\n      requireCapacity(2);\n      const issuedAt = now();\n      const grant: SessionMcpGrant = Object.freeze({\n        id: opaque(GRANT_ID_BYTES),\n        ...binding,\n        createdAt: issuedAt,\n      });\n      const code = opaque();\n      const expiresAt = issuedAt + codeTtl;\n      grants.set(grant.id, grant);\n      codes.set(tokenKey(code), {\n        clientId: client.clientId,\n        redirectUri: client.redirectUri,\n        challenge: input.codeChallenge,\n        grant,\n        expiresAt,\n      });\n      return { code, grant, expiresAt };\n    },\n    exchangeToken(request) {\n      const client = authenticateClient(request.clientId, request.clientSecret);\n      if (client.tokenEndpointAuthMethod !== 'client_secret_post') {\n        throw new SessionMcpOAuthError('invalid_client', 'This client does not support OAuth tokens.');\n      }\n      sweep();\n      if (request.grantType === 'authorization_code') {\n        const codeKey = tokenKey(request.code);\n        const stored = codes.get(codeKey);\n        if (\n          stored === undefined ||\n          stored.expiresAt <= now() ||\n          stored.clientId !== request.clientId ||\n          stored.redirectUri !== request.redirectUri ||\n          !/^[A-Za-z0-9\\-._~]{43,128}$/u.test(request.codeVerifier) ||\n          createHash('sha256').update(request.codeVerifier).digest('base64url') !== stored.challenge ||\n          !grants.has(stored.grant.id)\n        ) {\n          codes.delete(codeKey);\n          if (stored !== undefined) revokeGrant(stored.grant.id);\n          throw new SessionMcpOAuthError('invalid_grant', 'Authorization code is invalid or expired.');\n        }\n        requireCapacity(1);\n        codes.delete(codeKey);\n        return mintTokens(stored.grant);\n      }\n      if (request.grantType === 'refresh_token') {\n        const refreshKey = tokenKey(request.refreshToken);\n        const replayed = consumedRefreshTokens.get(refreshKey);\n        if (replayed !== undefined) {\n          if (replayed.clientId === request.clientId && replayed.expiresAt > now()) {\n            revokeFamily(replayed.familyId, replayed.grantId);\n          }\n          throw new SessionMcpOAuthError('invalid_grant', 'Refresh token is invalid or expired.');\n        }\n        const stored = refreshTokens.get(refreshKey);\n        if (\n          stored === undefined ||\n          stored.expiresAt <= now() ||\n          stored.grant.clientId !== request.clientId ||\n          !grants.has(stored.grant.id)\n        ) {\n          refreshTokens.delete(refreshKey);\n          throw new SessionMcpOAuthError('invalid_grant', 'Refresh token is invalid or expired.');\n        }\n        requireCapacity(2);\n        refreshTokens.delete(refreshKey);\n        consumedRefreshTokens.set(refreshKey, {\n          clientId: stored.grant.clientId,\n          grantId: stored.grant.id,\n          familyId: stored.familyId,\n          expiresAt: stored.familyExpiresAt,\n        });\n        return mintTokens(stored.grant, stored.familyId, stored.familyExpiresAt);\n      }\n      throw new SessionMcpOAuthError(\n        'unsupported_grant_type',\n        'Only authorization_code and refresh_token are supported.',\n      );\n    },\n    issueUrlToken(clientId) {\n      const client = clients.get(clientId);\n      if (client === undefined || client.tokenEndpointAuthMethod !== 'url_token') {\n        throw new SessionMcpOAuthError('invalid_client', 'This client does not support signed MCP URLs.');\n      }\n      const binding = bindings.get(clientId);\n      if (binding === undefined) {\n        throw new SessionMcpOAuthError('invalid_request', 'Client authorization has not been preauthorized.');\n      }\n      const payload = Buffer.from(\n        JSON.stringify({\n          aud: binding.audience,\n          iat: Math.floor(client.createdAt / 1000),\n          iss: URL_TOKEN_ISSUER,\n          sid: binding.sessionId,\n          sub: client.clientId,\n        } satisfies SessionMcpUrlTokenClaims),\n      ).toString('base64url');\n      const input = `${URL_TOKEN_HEADER}.${payload}`;\n      return `${input}.${urlTokenSignature(input, client.secretHash).toString('base64url')}`;\n    },\n    authenticateUrlToken(token, audience) {\n      const parsed = parseUrlToken(token);\n      if (parsed === undefined) return undefined;\n      const client = clients.get(parsed.claims.sub);\n      if (client === undefined || client.tokenEndpointAuthMethod !== 'url_token') return undefined;\n      const binding = bindings.get(client.clientId);\n      if (\n        binding === undefined ||\n        binding.audience !== audience ||\n        parsed.claims.aud !== audience ||\n        parsed.claims.sid !== binding.sessionId ||\n        parsed.claims.iat !== Math.floor(client.createdAt / 1000)\n      )\n        return undefined;\n      const expected = urlTokenSignature(parsed.input, client.secretHash);\n      if (!timingSafeEqual(expected, parsed.signature)) return undefined;\n      return { id: client.clientId, ...binding, createdAt: client.createdAt, expiresAt: Number.MAX_SAFE_INTEGER };\n    },\n    authenticateAccessToken(token, audience) {\n      sweep();\n      const key = tokenKey(token);\n      // API keys are long-lived credentials, but remain tied to the current binding and audience.\n      const presentedHash = digest(token);\n      for (const client of clients.values()) {\n        if (client.tokenEndpointAuthMethod !== 'api_key' || !timingSafeEqual(presentedHash, client.secretHash))\n          continue;\n        const binding = bindings.get(client.clientId);\n        if (binding === undefined || binding.audience !== audience) return undefined;\n        return { id: client.clientId, ...binding, createdAt: client.createdAt, expiresAt: Number.MAX_SAFE_INTEGER };\n      }\n      const stored = accessTokens.get(key);\n      if (stored === undefined) return undefined;\n      if (stored.expiresAt <= now() || !grants.has(stored.grant.id)) {\n        accessTokens.delete(key);\n        return undefined;\n      }\n      if (stored.grant.audience !== audience) return undefined;\n      return { ...stored.grant, expiresAt: stored.expiresAt };\n    },\n    revokeGrant,\n    revokeSessionGeneration(sessionId, sessionGeneration) {\n      let revoked = 0;\n      for (const grant of grants.values()) {\n        if (grant.sessionId === sessionId && grant.sessionGeneration === sessionGeneration && revokeGrant(grant.id)) {\n          revoked += 1;\n        }\n      }\n      for (const [clientId, binding] of bindings) {\n        if (binding.sessionId === sessionId && binding.sessionGeneration === sessionGeneration)\n          bindings.delete(clientId);\n      }\n      return revoked;\n    },\n    revokeSession(sessionId) {\n      let revoked = 0;\n      for (const grant of grants.values()) {\n        if (grant.sessionId === sessionId && revokeGrant(grant.id)) revoked += 1;\n      }\n      for (const [clientId, binding] of bindings) if (binding.sessionId === sessionId) bindings.delete(clientId);\n      return revoked;\n    },\n  };\n}\n"],"mappings":";;AAEA,MAAM,sBAAsB;AAC5B,MAAM,4BAA4B;AAClC,MAAM,kBAAkB;AACxB,MAAM,sBAAsB;AAC5B,MAAM,sBAAsB;AAC5B,MAAM,iBAAiB;AACvB,MAAM,uBAAuB;AAC7B,MAAM,cAAc;AACpB,MAAM,mBAAmB,OAAO,KAAK,qCAA6B,CAAC,CAAC,SAAS,WAAW;AACxF,MAAM,mBAAmB;AACzB,MAAM,uBAAuB;AAQ7B,IAAa,uBAAb,cAA0C,MAAM;CAC9C;CAEA,YAAY,MAAgC,SAAiB;EAC3D,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,OAAO;CACd;AACF;;;;;AASA,SAAgB,kBAAkB,OAAmC;CACnE,IAAI,UAAU,KAAA,KAAa,UAAU,aAAa,UAAU,gBAAgB,OAAO;CACnF,MAAM,IAAI,qBAAqB,mBAAmB,uCAAuC;AAC3F;AAEA,MAAM,qCAAqC;AAC3C,MAAM,0BAA0B;AAChC,MAAM,yBAAyB,OAAO,OAAO;CAC3C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;AAMD,SAAgB,qBAAqB,OAAoC;CACvE,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IACE,OAAO,UAAU,YACjB,MAAM,SAAS,sCACf,CAAC,wBAAwB,KAAK,KAAK,GAEnC,MAAM,IAAI,qBACR,mBACA,4BAA4B,mCAAmC,4DACjE;CAEF,OAAO;AACT;;AAGA,SAAgB,4BAA4B,aAA6B;CACvE,MAAM,SAAS,YACZ,UAAU,MAAM,CAAC,CACjB,QAAQ,WAAW,EAAE,CAAC,CACtB,YAAY,CAAC,CACb,QAAQ,gBAAgB,GAAG,CAAC,CAC5B,QAAQ,aAAa,EAAE,CAAC,CACxB,MAAM,GAAG,kCAAkC,CAAC,CAC5C,QAAQ,QAAQ,EAAE;CACrB,IAAI,WAAW,MAAM,WAAW,YAAY,OAAO;CACnD,OAAO,uBAAuB,UAAU,uBAAuB,MAAM;AACvE;AA6JA,SAAS,OAAO,OAAuB;CACrC,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;AACnD;AAEA,SAAS,SAAS,OAAuB;CACvC,OAAO,OAAO,KAAK,CAAC,CAAC,SAAS,KAAK;AACrC;AAEA,SAAS,OAAO,QAAQ,aAAqB;CAC3C,OAAO,YAAY,KAAK,CAAC,CAAC,SAAS,WAAW;AAChD;AAEA,SAAS,YAAY,QAAgB,cAA+B;CAClE,OAAO,gBAAgB,OAAO,MAAM,GAAG,YAAY;AACrD;AAUA,SAAS,kBAAkB,OAAe,KAAqB;CAC7D,OAAO,WAAW,UAAU,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO;AACxD;AAEA,SAAS,cACP,OAC+G;CAC/G,IAAI,MAAM,SAAS,sBAAsB,OAAO,KAAA;CAChD,MAAM,QAAQ,MAAM,MAAM,GAAG;CAC7B,IAAI,MAAM,WAAW,GAAG,OAAO,KAAA;CAC/B,MAAM,CAAC,QAAQ,SAAS,oBAAoB;CAC5C,IACE,WAAW,oBACX,CAAC,2BAA2B,KAAK,OAAQ,KACzC,CAAC,uBAAuB,KAAK,gBAAiB,GAE9C,OAAO,KAAA;CACT,IAAI;EACF,MAAM,eAAe,OAAO,KAAK,SAAU,WAAW;EACtD,MAAM,YAAY,OAAO,KAAK,kBAAmB,WAAW;EAC5D,IACE,aAAa,SAAS,WAAW,MAAM,WACvC,UAAU,WAAW,MACrB,UAAU,SAAS,WAAW,MAAM,kBAEpC,OAAO,KAAA;EACT,MAAM,QAAiB,KAAK,MAAM,aAAa,SAAS,MAAM,CAAC;EAC/D,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GAAG,OAAO,KAAA;EAChF,MAAM,SAAS;EACf,IACE,OAAO,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,MAAM,yBACxC,OAAO,QAAQ,oBACf,OAAO,OAAO,QAAQ,YACtB,OAAO,QAAQ,MACf,OAAO,OAAO,QAAQ,YACtB,OAAO,QAAQ,MACf,OAAO,OAAO,QAAQ,YACtB,OAAO,QAAQ,MACf,OAAO,OAAO,QAAQ,YACtB,CAAC,OAAO,cAAc,OAAO,GAAG,GAEhC,OAAO,KAAA;EACT,OAAO;GAAU;GAAoC,OAAO,GAAG,OAAO,GAAG;GAAW;EAAU;CAChG,QAAQ;EACN;CACF;AACF;AAEA,SAAS,gBAAgB,OAAe,OAAe,YAA6B;CAClF,IAAI;CACJ,IAAI;EACF,SAAS,IAAI,IAAI,KAAK;CACxB,QAAQ;EACN,MAAM,IAAI,qBAAqB,mBAAmB,GAAG,MAAM,gCAAgC;CAC7F;CACA,IACE,OAAO,aAAa,YACpB,OAAO,aAAa,MACpB,OAAO,aAAa,MACpB,OAAO,SAAS,MACf,CAAC,cAAc,OAAO,WAAW,IAElC,MAAM,IAAI,qBACR,mBACA,GAAG,MAAM,4EACX;CAEF,OAAO,OAAO;AAChB;AAEA,SAAS,YAAY,OAAe,OAAuB;CACzD,MAAM,aAAa,MAAM,KAAK;CAC9B,IAAI,eAAe,IAAI,MAAM,IAAI,qBAAqB,mBAAmB,GAAG,MAAM,oBAAoB;CACtG,OAAO;AACT;AAEA,SAAS,kBAAkB,QAA2B,OAAkC;CACtF,IAAI,OAAO,MAAM,UAAU,UAAU,MAAM,UAAU,MAAM,KAAK,CAAC,GAC/D,MAAM,IAAI,qBAAqB,mBAAmB,GAAG,MAAM,4CAA4C;CAEzG,OAAO,OAAO,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC;AAC3C;;AAGA,SAAgB,qCACd,UAAiD,CAAC,GAClB;CAChC,MAAM,MAAM,QAAQ,OAAO,KAAK;CAChC,MAAM,UAAU,QAAQ,0BAA0B;CAClD,MAAM,YAAY,QAAQ,oBAAoB;CAC9C,MAAM,aAAa,QAAQ,qBAAqB;CAChD,MAAM,aAAa,QAAQ,cAAc;CACzC,IAAI,CAAC,OAAO,cAAc,UAAU,KAAK,aAAa,GACpD,MAAM,IAAI,MAAM,4EAA4E;CAG9F,MAAM,0BAAU,IAAI,IAA0B;CAC9C,MAAM,2BAAW,IAAI,IAA4C;CACjE,MAAM,yBAAS,IAAI,IAA6B;CAChD,MAAM,wBAAQ,IAAI,IAAwB;CAC1C,MAAM,+BAAe,IAAI,IAA+B;CACxD,MAAM,gCAAgB,IAAI,IAAgC;CAC1D,MAAM,wCAAwB,IAAI,IAAkC;CAEpE,MAAM,gBAAgB,EAAE,YAAY,aAAa,GAAG,aAA6C;CAEjG,MAAM,oBACJ,OAAO,OAAO,MAAM,OAAO,aAAa,OAAO,cAAc,OAAO,sBAAsB;CAE5F,MAAM,cAAoB;EACxB,MAAM,cAAc,IAAI;EACxB,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,IAAI,MAAM,aAAa,aAAa,MAAM,OAAO,GAAG;EACtF,KAAK,MAAM,CAAC,KAAK,UAAU,cAAc,IAAI,MAAM,aAAa,aAAa,aAAa,OAAO,GAAG;EACpG,KAAK,MAAM,CAAC,KAAK,UAAU,eAAe,IAAI,MAAM,aAAa,aAAa,cAAc,OAAO,GAAG;EACtG,KAAK,MAAM,CAAC,KAAK,UAAU,uBACzB,IAAI,MAAM,aAAa,aAAa,sBAAsB,OAAO,GAAG;EAGtE,MAAM,mCAAmB,IAAI,IAAY;EACzC,KAAK,MAAM,SAAS,MAAM,OAAO,GAAG,iBAAiB,IAAI,MAAM,MAAM,EAAE;EACvE,KAAK,MAAM,SAAS,aAAa,OAAO,GAAG,iBAAiB,IAAI,MAAM,MAAM,EAAE;EAC9E,KAAK,MAAM,SAAS,cAAc,OAAO,GAAG,iBAAiB,IAAI,MAAM,MAAM,EAAE;EAC/E,KAAK,MAAM,SAAS,sBAAsB,OAAO,GAAG,iBAAiB,IAAI,MAAM,OAAO;EACtF,KAAK,MAAM,WAAW,OAAO,KAAK,GAAG,IAAI,CAAC,iBAAiB,IAAI,OAAO,GAAG,OAAO,OAAO,OAAO;CAChG;CAEA,MAAM,mBAAmB,sBAAoC;EAC3D,MAAM;EACN,IAAI,YAAY,IAAI,oBAAoB,YACtC,MAAM,IAAI,qBAAqB,mBAAmB,2CAA2C;CAEjG;CAEA,MAAM,sBAAsB,UAAkB,iBAAuC;EACnF,MAAM,SAAS,QAAQ,IAAI,QAAQ;EACnC,IAAI,WAAW,KAAA,KAAa,CAAC,YAAY,cAAc,OAAO,UAAU,GACtE,MAAM,IAAI,qBAAqB,kBAAkB,+BAA+B;EAElF,OAAO;CACT;CAEA,MAAM,eAAe,YAA6B;EAChD,IAAI,CAAC,OAAO,OAAO,OAAO,GAAG,OAAO;EACpC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,IAAI,MAAM,MAAM,OAAO,SAAS,MAAM,OAAO,GAAG;EAClF,KAAK,MAAM,CAAC,KAAK,UAAU,cAAc,IAAI,MAAM,MAAM,OAAO,SAAS,aAAa,OAAO,GAAG;EAChG,KAAK,MAAM,CAAC,KAAK,UAAU,eAAe,IAAI,MAAM,MAAM,OAAO,SAAS,cAAc,OAAO,GAAG;EAClG,OAAO;CACT;CAEA,MAAM,gBAAgB,UAAkB,YAA0B;EAChE,YAAY,OAAO;EACnB,KAAK,MAAM,CAAC,KAAK,UAAU,cAAc,IAAI,MAAM,aAAa,UAAU,aAAa,OAAO,GAAG;EACjG,KAAK,MAAM,CAAC,KAAK,UAAU,eAAe,IAAI,MAAM,aAAa,UAAU,cAAc,OAAO,GAAG;CACrG;CAEA,MAAM,cACJ,OACA,WAAW,OAAO,cAAc,GAChC,kBAAkB,IAAI,IAAI,eACE;EAC5B,MAAM,WAAW,IAAI;EACrB,MAAM,kBAAkB,KAAK,IAAI,WAAW,WAAW,eAAe;EACtE,MAAM,cAAc,OAAO;EAC3B,MAAM,eAAe,OAAO;EAC5B,aAAa,IAAI,SAAS,WAAW,GAAG;GAAE;GAAO;GAAU,WAAW;EAAgB,CAAC;EACvF,cAAc,IAAI,SAAS,YAAY,GAAG;GACxC;GACA;GACA,WAAW;GACX;EACF,CAAC;EACD,OAAO;GACL;GACA;GACA,WAAW;GACX,WAAW,KAAK,IAAI,GAAG,KAAK,OAAO,kBAAkB,YAAY,GAAI,CAAC;GACtE;EACF;CACF;CAEA,OAAO;EACL,aAAa,OAAO;GAClB,MAAM,YAAY,IAAI;GACtB,MAAM,WAAW,OAAO,eAAe;GACvC,MAAM,eAAe,OAAO,mBAAmB;GAC/C,MAAM,gBAAgB,MAAM,eAAe;GAC3C,MAAM,mBAAmB,MAAM,eAAe;GAC9C,IAAI,cAAc;GAClB,IAAI,CAAC,iBAAiB,CAAC,kBAAkB;IACvC,IAAI,OAAO,MAAM,gBAAgB,UAC/B,MAAM,IAAI,qBAAqB,mBAAmB,6CAA6C;IAEjG,cAAc,gBAAgB,MAAM,aAAa,gBAAgB,IAAI;GACvE;GACA,MAAM,SAAuB;IAC3B;IACA,MAAM,YAAY,MAAM,MAAM,aAAa;IAC3C;IACA,yBAAyB,gBAAgB,cAAc,mBAAmB,YAAY;IACtF;IACA,YAAY,OAAO,YAAY;GACjC;GACA,QAAQ,IAAI,UAAU,MAAM;GAC5B,OAAO;IAAE,GAAG,aAAa,MAAM;IAAG;GAAa;EACjD;EACA,WAAW,UAAU;GACnB,MAAM,SAAS,QAAQ,IAAI,QAAQ;GACnC,OAAO,WAAW,KAAA,IAAY,KAAA,IAAY,aAAa,MAAM;EAC/D;EACA,cAAc;GACZ,OAAO,CAAC,GAAG,QAAQ,OAAO,CAAC,CAAC,CAAC,IAAI,YAAY;EAC/C;EACA,aAAa,UAAU;GACrB,IAAI,CAAC,QAAQ,OAAO,QAAQ,GAAG,OAAO;GACtC,SAAS,OAAO,QAAQ;GACxB,KAAK,MAAM,SAAS,OAAO,OAAO,GAAG,IAAI,MAAM,aAAa,UAAU,YAAY,MAAM,EAAE;GAC1F,OAAO;EACT;EACA,2BAA2B,OAAO;GAChC,IAAI,CAAC,QAAQ,IAAI,MAAM,QAAQ,GAAG,MAAM,IAAI,qBAAqB,kBAAkB,uBAAuB;GAC1G,IAAI,SAAS,IAAI,MAAM,QAAQ,GAC7B,MAAM,IAAI,qBAAqB,mBAAmB,wCAAwC;GAE5F,IAAI,CAAC,OAAO,cAAc,MAAM,iBAAiB,KAAK,MAAM,oBAAoB,GAC9E,MAAM,IAAI,qBAAqB,mBAAmB,yDAAyD;GAE7G,MAAM,UAAU,kBAAkB,MAAM,OAAO;GAC/C,MAAM,QAAQ,MAAM,SAAS;GAC7B,IAAI,UAAU,aAAa,UAAU,cACnC,MAAM,IAAI,qBAAqB,mBAAmB,uCAAuC;GAE3F,IAAI;GACJ,IAAI;GACJ,IAAI,UAAU,WAAW;IACvB,IAAI,MAAM,UAAU,KAAA,KAAa,MAAM,WAAW,KAAA,GAChD,MAAM,IAAI,qBAAqB,mBAAmB,iDAAiD;IAErG,QAAQ,OAAO,OAAO,CAAC,CAAa;IACpC,SAAS,OAAO,OAAO,CAAC,CAAa;GACvC,OAAO;IACL,IAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,KAAK,CAAC,MAAM,QAAQ,MAAM,MAAM,GAC5D,MAAM,IAAI,qBAAqB,mBAAmB,kDAAkD;IAEtG,QAAQ,kBAAkB,MAAM,OAAO,MAAM;IAC7C,SAAS,kBAAkB,MAAM,QAAQ,OAAO;GAClD;GACA,MAAM,aAAa,qBAAqB,MAAM,UAAU;GACxD,MAAM,UAA0C,OAAO,OAAO;IAC5D,UAAU,MAAM;IAChB,WAAW,YAAY,MAAM,WAAW,YAAY;IACpD,mBAAmB,MAAM;IACzB,UAAU,gBAAgB,MAAM,UAAU,YAAY,KAAK;IAC3D;IACA;IACA;IACA;IACA,GAAI,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW;GACnD,CAAC;GACD,SAAS,IAAI,MAAM,UAAU,OAAO;GACpC,OAAO;EACT;EACA,yBAAyB,UAAU;GACjC,OAAO,SAAS,IAAI,QAAQ;EAC9B;EACA,uBAAuB,UAAU,aAAa,YAAY;GACxD,MAAM,SAAS,QAAQ,IAAI,QAAQ;GACnC,MAAM,UAAU,SAAS,IAAI,QAAQ;GACrC,IAAI,WAAW,KAAA,KAAa,YAAY,KAAA,KAAa,CAAC,OAAO,cAAc,UAAU,GAAG,OAAO,KAAA;GAC/F,MAAM,EAAE,mBAAmB,oBAAoB,GAAG,sBAAsB;GACxE,OAAO;IACL,QAAQ,aAAa,MAAM;IAC3B,YAAY,OAAO,WAAW,SAAS,KAAK;IAC5C,aAAa,YAAY,aAAa,cAAc;IACpD,SAAS;IACT;GACF;EACF;EACA,8BAA8B,cAAc,mBAAmB;GAC7D,IACE,SAAS,IAAI,aAAa,OAAO,QAAQ,KACzC,CAAC,kBAAkB,KAAK,aAAa,UAAU,KAC/C,CAAC,OAAO,cAAc,iBAAiB,KACvC,oBAAoB,KACpB,aAAa,OAAO,aAAa,aAAa,QAAQ,UAEtD,OAAO;GACT,IAAI;IAEF,MAAM,OAAO,QAAQ,IAAI,aAAa,OAAO,QAAQ;IACrD,IACE,SACC,KAAK,gBAAgB,aAAa,OAAO,eACxC,KAAK,4BAA4B,aAAa,OAAO,2BACrD,CAAC,gBAAgB,KAAK,YAAY,OAAO,KAAK,aAAa,YAAY,KAAK,CAAC,IAE/E,OAAO;IACT,IACG,aAAa,OAAO,4BAA4B,wBAC/C,aAAa,OAAO,4BAA4B,aAChD,aAAa,OAAO,4BAA4B,eACjD,aAAa,OAAO,4BAA4B,yBAC9C,aAAa,OAAO,gBAAgB,MAAM,aAAa,QAAQ,UAAU,YAE5E,OAAO;IACT,MAAM,SAAuB;KAC3B,UAAU,YAAY,aAAa,OAAO,UAAU,WAAW;KAC/D,MAAM,YAAY,aAAa,OAAO,MAAM,aAAa;KACzD,aACE,aAAa,OAAO,4BAA4B,uBAC5C,gBAAgB,aAAa,OAAO,aAAa,gBAAgB,IAAI,IACrE,aAAa,OAAO;KAC1B,yBAAyB,aAAa,OAAO;KAC7C,WAAW,aAAa,OAAO;KAC/B,YAAY,OAAO,KAAK,aAAa,YAAY,KAAK;IACxD;IACA,MAAM,UAAU,kBAAkB,aAAa,QAAQ,OAAO;IAC9D,MAAM,aAAa,qBAAqB,aAAa,QAAQ,UAAU;IACvE,MAAM,QAAQ,aAAa,QAAQ;IACnC,MAAM,QACJ,UAAU,YAAY,OAAO,OAAO,CAAC,CAAa,IAAI,kBAAkB,aAAa,QAAQ,OAAO,MAAM;IAC5G,MAAM,SACJ,UAAU,YAAY,OAAO,OAAO,CAAC,CAAa,IAAI,kBAAkB,aAAa,QAAQ,QAAQ,OAAO;IAC9G,IACG,UAAU,aAAa,UAAU,gBACjC,UAAU,cAAc,aAAa,QAAQ,MAAM,WAAW,KAAK,aAAa,QAAQ,OAAO,WAAW,IAE3G,MAAM,IAAI,qBAAqB,mBAAmB,8CAA8C;IAElG,QAAQ,IAAI,OAAO,UAAU,MAAM;IACnC,SAAS,IACP,OAAO,UACP,OAAO,OAAO;KACZ,UAAU,OAAO;KACjB,WAAW,YAAY,aAAa,QAAQ,WAAW,YAAY;KACnE;KACA,UAAU,gBAAgB,aAAa,QAAQ,UAAU,YAAY,KAAK;KAC1E;KACA;KACA;KACA;KACA,GAAI,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW;IACnD,CAAC,CACH;IACA,OAAO;GACT,QAAQ;IACN,QAAQ,OAAO,aAAa,OAAO,QAAQ;IAC3C,OAAO;GACT;EACF;EACA,uBAAuB,OAAO;GAC5B,MAAM,SAAS,QAAQ,IAAI,MAAM,QAAQ;GACzC,IAAI,WAAW,KAAA,GAAW,MAAM,IAAI,qBAAqB,kBAAkB,uBAAuB;GAClG,MAAM,UAAU,SAAS,IAAI,MAAM,QAAQ;GAC3C,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,qBAAqB,mBAAmB,kDAAkD;GAEtG,IAAI,OAAO,4BAA4B,sBACrC,MAAM,IAAI,qBAAqB,kBAAkB,mDAAmD;GAEtG,IAAI,MAAM,gBAAgB,OAAO,aAC/B,MAAM,IAAI,qBACR,mBACA,8DACF;GAEF,IAAI,MAAM,wBAAwB,UAAU,CAAC,uBAAuB,KAAK,MAAM,aAAa,GAC1F,MAAM,IAAI,qBAAqB,mBAAmB,0CAA0C;GAE9F,gBAAgB,CAAC;GACjB,MAAM,WAAW,IAAI;GACrB,MAAM,QAAyB,OAAO,OAAO;IAC3C,IAAI,OAAO,cAAc;IACzB,GAAG;IACH,WAAW;GACb,CAAC;GACD,MAAM,OAAO,OAAO;GACpB,MAAM,YAAY,WAAW;GAC7B,OAAO,IAAI,MAAM,IAAI,KAAK;GAC1B,MAAM,IAAI,SAAS,IAAI,GAAG;IACxB,UAAU,OAAO;IACjB,aAAa,OAAO;IACpB,WAAW,MAAM;IACjB;IACA;GACF,CAAC;GACD,OAAO;IAAE;IAAM;IAAO;GAAU;EAClC;EACA,cAAc,SAAS;GAErB,IADe,mBAAmB,QAAQ,UAAU,QAAQ,YACnD,CAAC,CAAC,4BAA4B,sBACrC,MAAM,IAAI,qBAAqB,kBAAkB,4CAA4C;GAE/F,MAAM;GACN,IAAI,QAAQ,cAAc,sBAAsB;IAC9C,MAAM,UAAU,SAAS,QAAQ,IAAI;IACrC,MAAM,SAAS,MAAM,IAAI,OAAO;IAChC,IACE,WAAW,KAAA,KACX,OAAO,aAAa,IAAI,KACxB,OAAO,aAAa,QAAQ,YAC5B,OAAO,gBAAgB,QAAQ,eAC/B,CAAC,8BAA8B,KAAK,QAAQ,YAAY,KACxD,WAAW,QAAQ,CAAC,CAAC,OAAO,QAAQ,YAAY,CAAC,CAAC,OAAO,WAAW,MAAM,OAAO,aACjF,CAAC,OAAO,IAAI,OAAO,MAAM,EAAE,GAC3B;KACA,MAAM,OAAO,OAAO;KACpB,IAAI,WAAW,KAAA,GAAW,YAAY,OAAO,MAAM,EAAE;KACrD,MAAM,IAAI,qBAAqB,iBAAiB,2CAA2C;IAC7F;IACA,gBAAgB,CAAC;IACjB,MAAM,OAAO,OAAO;IACpB,OAAO,WAAW,OAAO,KAAK;GAChC;GACA,IAAI,QAAQ,cAAc,iBAAiB;IACzC,MAAM,aAAa,SAAS,QAAQ,YAAY;IAChD,MAAM,WAAW,sBAAsB,IAAI,UAAU;IACrD,IAAI,aAAa,KAAA,GAAW;KAC1B,IAAI,SAAS,aAAa,QAAQ,YAAY,SAAS,YAAY,IAAI,GACrE,aAAa,SAAS,UAAU,SAAS,OAAO;KAElD,MAAM,IAAI,qBAAqB,iBAAiB,sCAAsC;IACxF;IACA,MAAM,SAAS,cAAc,IAAI,UAAU;IAC3C,IACE,WAAW,KAAA,KACX,OAAO,aAAa,IAAI,KACxB,OAAO,MAAM,aAAa,QAAQ,YAClC,CAAC,OAAO,IAAI,OAAO,MAAM,EAAE,GAC3B;KACA,cAAc,OAAO,UAAU;KAC/B,MAAM,IAAI,qBAAqB,iBAAiB,sCAAsC;IACxF;IACA,gBAAgB,CAAC;IACjB,cAAc,OAAO,UAAU;IAC/B,sBAAsB,IAAI,YAAY;KACpC,UAAU,OAAO,MAAM;KACvB,SAAS,OAAO,MAAM;KACtB,UAAU,OAAO;KACjB,WAAW,OAAO;IACpB,CAAC;IACD,OAAO,WAAW,OAAO,OAAO,OAAO,UAAU,OAAO,eAAe;GACzE;GACA,MAAM,IAAI,qBACR,0BACA,0DACF;EACF;EACA,cAAc,UAAU;GACtB,MAAM,SAAS,QAAQ,IAAI,QAAQ;GACnC,IAAI,WAAW,KAAA,KAAa,OAAO,4BAA4B,aAC7D,MAAM,IAAI,qBAAqB,kBAAkB,+CAA+C;GAElG,MAAM,UAAU,SAAS,IAAI,QAAQ;GACrC,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,qBAAqB,mBAAmB,kDAAkD;GAEtG,MAAM,UAAU,OAAO,KACrB,KAAK,UAAU;IACb,KAAK,QAAQ;IACb,KAAK,KAAK,MAAM,OAAO,YAAY,GAAI;IACvC,KAAK;IACL,KAAK,QAAQ;IACb,KAAK,OAAO;GACd,CAAoC,CACtC,CAAC,CAAC,SAAS,WAAW;GACtB,MAAM,QAAQ,GAAG,iBAAiB,GAAG;GACrC,OAAO,GAAG,MAAM,GAAG,kBAAkB,OAAO,OAAO,UAAU,CAAC,CAAC,SAAS,WAAW;EACrF;EACA,qBAAqB,OAAO,UAAU;GACpC,MAAM,SAAS,cAAc,KAAK;GAClC,IAAI,WAAW,KAAA,GAAW,OAAO,KAAA;GACjC,MAAM,SAAS,QAAQ,IAAI,OAAO,OAAO,GAAG;GAC5C,IAAI,WAAW,KAAA,KAAa,OAAO,4BAA4B,aAAa,OAAO,KAAA;GACnF,MAAM,UAAU,SAAS,IAAI,OAAO,QAAQ;GAC5C,IACE,YAAY,KAAA,KACZ,QAAQ,aAAa,YACrB,OAAO,OAAO,QAAQ,YACtB,OAAO,OAAO,QAAQ,QAAQ,aAC9B,OAAO,OAAO,QAAQ,KAAK,MAAM,OAAO,YAAY,GAAI,GAExD,OAAO,KAAA;GACT,MAAM,WAAW,kBAAkB,OAAO,OAAO,OAAO,UAAU;GAClE,IAAI,CAAC,gBAAgB,UAAU,OAAO,SAAS,GAAG,OAAO,KAAA;GACzD,OAAO;IAAE,IAAI,OAAO;IAAU,GAAG;IAAS,WAAW,OAAO;IAAW,WAAW,OAAO;GAAiB;EAC5G;EACA,wBAAwB,OAAO,UAAU;GACvC,MAAM;GACN,MAAM,MAAM,SAAS,KAAK;GAE1B,MAAM,gBAAgB,OAAO,KAAK;GAClC,KAAK,MAAM,UAAU,QAAQ,OAAO,GAAG;IACrC,IAAI,OAAO,4BAA4B,aAAa,CAAC,gBAAgB,eAAe,OAAO,UAAU,GACnG;IACF,MAAM,UAAU,SAAS,IAAI,OAAO,QAAQ;IAC5C,IAAI,YAAY,KAAA,KAAa,QAAQ,aAAa,UAAU,OAAO,KAAA;IACnE,OAAO;KAAE,IAAI,OAAO;KAAU,GAAG;KAAS,WAAW,OAAO;KAAW,WAAW,OAAO;IAAiB;GAC5G;GACA,MAAM,SAAS,aAAa,IAAI,GAAG;GACnC,IAAI,WAAW,KAAA,GAAW,OAAO,KAAA;GACjC,IAAI,OAAO,aAAa,IAAI,KAAK,CAAC,OAAO,IAAI,OAAO,MAAM,EAAE,GAAG;IAC7D,aAAa,OAAO,GAAG;IACvB;GACF;GACA,IAAI,OAAO,MAAM,aAAa,UAAU,OAAO,KAAA;GAC/C,OAAO;IAAE,GAAG,OAAO;IAAO,WAAW,OAAO;GAAU;EACxD;EACA;EACA,wBAAwB,WAAW,mBAAmB;GACpD,IAAI,UAAU;GACd,KAAK,MAAM,SAAS,OAAO,OAAO,GAChC,IAAI,MAAM,cAAc,aAAa,MAAM,sBAAsB,qBAAqB,YAAY,MAAM,EAAE,GACxG,WAAW;GAGf,KAAK,MAAM,CAAC,UAAU,YAAY,UAChC,IAAI,QAAQ,cAAc,aAAa,QAAQ,sBAAsB,mBACnE,SAAS,OAAO,QAAQ;GAE5B,OAAO;EACT;EACA,cAAc,WAAW;GACvB,IAAI,UAAU;GACd,KAAK,MAAM,SAAS,OAAO,OAAO,GAChC,IAAI,MAAM,cAAc,aAAa,YAAY,MAAM,EAAE,GAAG,WAAW;GAEzE,KAAK,MAAM,CAAC,UAAU,YAAY,UAAU,IAAI,QAAQ,cAAc,WAAW,SAAS,OAAO,QAAQ;GACzG,OAAO;EACT;CACF;AACF"}

package/dist/src/services/sessionMcpConversations/index.cjs

@@ -0,0 +1,217 @@
+const require_runtime = require("../../../_virtual/_rolldown/runtime.cjs");
+let node_crypto = require("node:crypto");
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+//#region src/services/sessionMcpConversations/index.ts
+const STORE_FILE = "session-mcp-conversations.json";
+const STORE_VERSION = 1;
+const MAX_BINDINGS = 1e3;
+const MAX_CONVERSATION_BYTES = 1024;
+const CONVERSATION_META_KEY = "openai/session";
+const ID_PATTERN = /^[A-Za-z0-9_-]+$/u;
+const DIGEST_PATTERN = /^[a-f0-9]{64}$/u;
+/** Client metadata is a routing hint within an authenticated registration, never authority. */
+function sessionMcpConversationDigest(meta) {
+	if (typeof meta !== "object" || meta === null || Array.isArray(meta)) return void 0;
+	const value = meta[CONVERSATION_META_KEY];
+	if (typeof value !== "string" || value.trim() !== value || value.length === 0 || Array.from(value).some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127) || Buffer.byteLength(value, "utf8") > MAX_CONVERSATION_BYTES) return void 0;
+	return (0, node_crypto.createHash)("sha256").update(JSON.stringify(["chatgpt", value])).digest("hex");
+}
+var SessionMcpConversationError = class extends Error {
+	code;
+	bindingId;
+	constructor(code, message, bindingId) {
+		super(message);
+		this.code = code;
+		this.bindingId = bindingId;
+		this.name = "SessionMcpConversationError";
+	}
+};
+/** How many id characters name a conversation's managed worktree branch and directory. */
+const MANAGED_WORKTREE_ID_LENGTH = 12;
+function validRecord(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const record = value;
+	return typeof record.id === "string" && ID_PATTERN.test(record.id) && typeof record.clientId === "string" && ID_PATTERN.test(record.clientId) && typeof record.parentSessionId === "string" && ID_PATTERN.test(record.parentSessionId) && typeof record.parentWorkspaceId === "string" && record.parentWorkspaceId.length > 0 && typeof record.conversationDigest === "string" && DIGEST_PATTERN.test(record.conversationDigest) && typeof record.createdAt === "string" && Number.isFinite(Date.parse(record.createdAt)) && (record.state === "pending" || record.state === "bound" || record.state === "closed") && (record.setupKind === void 0 || record.setupKind === "managed-worktree" || record.setupKind === "existing-directory") && (record.failureCode === void 0 || record.failureCode === "SESSION_WORKTREE_PROVISION_FAILED" || record.failureCode === "SESSION_UNAVAILABLE") && (record.cwd === void 0 || typeof record.cwd === "string" && node_path.default.isAbsolute(record.cwd) && !record.cwd.includes("\0")) && (record.workspaceId === void 0 || typeof record.workspaceId === "string" && record.workspaceId.length > 0) && (record.state !== "bound" || record.cwd !== void 0 && record.workspaceId !== void 0);
+}
+/**
+* Records written before setups carried a provider have none, and recovery refuses a setup it
+* cannot attribute, which left every such conversation stuck. A managed conversation worktree is
+* the only setup named `po-conversation-<first 12 id characters>--`, so a record reserving
+* that directory can be attributed to it. Anything else stays unattributed and refused.
+*/
+function withLegacySetupKind(record) {
+	if (record.setupKind !== void 0 || record.cwd === void 0) return record;
+	const managedName = `po-conversation-${record.id.slice(0, MANAGED_WORKTREE_ID_LENGTH)}--`;
+	return node_path.default.basename(record.cwd).startsWith(managedName) ? {
+		...record,
+		setupKind: "managed-worktree"
+	} : record;
+}
+function routingKey(record) {
+	return JSON.stringify([
+		record.clientId,
+		record.parentSessionId,
+		record.conversationDigest
+	]);
+}
+/** One owning headless host persists these bindings. Corruption never becomes an empty, reusable store. */
+function createSessionMcpConversationStore(stateDir) {
+	const file = node_path.default.join(stateDir, STORE_FILE);
+	let failure;
+	let current = load();
+	function load() {
+		try {
+			const parsed = JSON.parse(node_fs.default.readFileSync(file, "utf8"));
+			if (typeof parsed !== "object" || parsed === null) throw new Error("Invalid store");
+			const stored = parsed;
+			if (stored.version !== STORE_VERSION || !Array.isArray(stored.bindings) || !stored.bindings.every(validRecord)) throw new Error("Invalid bindings");
+			const records = stored.bindings;
+			if (records.length > MAX_BINDINGS || new Set(records.map((record) => record.id)).size !== records.length || new Set(records.map(routingKey)).size !== records.length) throw new Error("Duplicate or excessive bindings");
+			return Object.freeze(records.map((record) => Object.freeze(withLegacySetupKind(record))));
+		} catch (error) {
+			if (error.code === "ENOENT") return [];
+			failure = new SessionMcpConversationError("CONVERSATION_STORE_UNAVAILABLE", "Conversation bindings could not be loaded. Restore the binding store before using conversation routing.");
+			return [];
+		}
+	}
+	function list() {
+		if (failure) throw failure;
+		return current;
+	}
+	function persist(next) {
+		list();
+		const temporary = `${file}.${(0, node_crypto.randomUUID)()}.tmp`;
+		try {
+			node_fs.default.mkdirSync(stateDir, {
+				recursive: true,
+				mode: 448
+			});
+			const descriptor = node_fs.default.openSync(temporary, "wx", 384);
+			try {
+				node_fs.default.writeFileSync(descriptor, `${JSON.stringify({
+					version: STORE_VERSION,
+					bindings: next
+				}, null, 2)}\n`);
+				node_fs.default.fsyncSync(descriptor);
+			} finally {
+				node_fs.default.closeSync(descriptor);
+			}
+			node_fs.default.renameSync(temporary, file);
+			current = Object.freeze(next.map((record) => Object.freeze(record)));
+		} catch {
+			throw new SessionMcpConversationError("CONVERSATION_STORE_UNAVAILABLE", "Conversation bindings could not be saved. No new execution target was admitted.");
+		} finally {
+			try {
+				node_fs.default.rmSync(temporary, { force: true });
+			} catch {}
+		}
+	}
+	function get(id, parentSessionId) {
+		const record = list().find((entry) => entry.id === id && entry.parentSessionId === parentSessionId);
+		if (!record || record.state === "closed") throw new SessionMcpConversationError("SESSION_UNAVAILABLE", "This conversation binding is unavailable. It will not be recreated automatically.");
+		return record;
+	}
+	function replace(record) {
+		persist(list().map((entry) => entry.id === record.id ? record : entry));
+		return get(record.id, record.parentSessionId);
+	}
+	return {
+		list,
+		get,
+		find: (clientId, parentSessionId, digest) => list().find((record) => record.clientId === clientId && record.parentSessionId === parentSessionId && record.conversationDigest === digest),
+		reserve(clientId, parentSessionId, parentWorkspaceId, digest) {
+			const existing = list().find((record) => record.clientId === clientId && record.parentSessionId === parentSessionId && record.conversationDigest === digest);
+			if (existing) return existing;
+			if (list().length >= MAX_BINDINGS) throw new SessionMcpConversationError("CONVERSATION_LIMIT_REACHED", "The conversation binding limit has been reached. Use a dedicated session connection.");
+			const record = {
+				id: (0, node_crypto.randomUUID)(),
+				clientId,
+				parentSessionId,
+				parentWorkspaceId,
+				conversationDigest: digest,
+				createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+				state: "pending"
+			};
+			if (!validRecord(record)) throw new SessionMcpConversationError("INVALID_CONVERSATION", "Invalid conversation identity.");
+			persist([...list(), record]);
+			return get(record.id, parentSessionId);
+		},
+		selectSetup(id, parentSessionId, kind) {
+			const record = get(id, parentSessionId);
+			if (record.setupKind === kind) return record.failureCode === void 0 ? record : replace({
+				...record,
+				failureCode: void 0
+			});
+			if (record.setupKind !== void 0 && (record.cwd !== void 0 || record.state === "bound")) throw new SessionMcpConversationError("SESSION_TARGET_FIXED", "An initialized setup cannot change its provider.", id);
+			if (record.setupKind === void 0 && record.cwd !== void 0) throw new SessionMcpConversationError("SESSION_TARGET_FIXED", "This existing setup has no verified provider. Recover it without changing its ownership.", id);
+			return replace({
+				...record,
+				setupKind: kind,
+				failureCode: void 0
+			});
+		},
+		prepare(id, parentSessionId, cwd) {
+			const record = get(id, parentSessionId);
+			if (!node_path.default.isAbsolute(cwd) || cwd.includes("\0")) throw new Error("A canonical absolute execution directory is required.");
+			if (record.cwd !== void 0 && record.cwd !== cwd) throw new SessionMcpConversationError("SESSION_TARGET_FIXED", "This conversation already reserved a different execution directory. Recover that setup instead.", id);
+			if (record.cwd === cwd) return record;
+			return replace({
+				...record,
+				cwd
+			});
+		},
+		fail(id, parentSessionId, code) {
+			const record = get(id, parentSessionId);
+			if (record.state !== "pending" || record.failureCode === code) return record;
+			return replace({
+				...record,
+				failureCode: code
+			});
+		},
+		bind(id, parentSessionId, workspaceId) {
+			const record = get(id, parentSessionId);
+			if (!record.cwd || !workspaceId) throw new Error("A prepared directory and admitted workspace are required.");
+			if (record.state === "bound") {
+				if (record.workspaceId !== workspaceId) throw new Error("The bound workspace cannot change.");
+				return record;
+			}
+			return replace({
+				...record,
+				state: "bound",
+				workspaceId,
+				failureCode: void 0
+			});
+		},
+		recover(id, parentSessionId) {
+			const record = list().find((entry) => entry.id === id && entry.parentSessionId === parentSessionId);
+			if (!record) throw new SessionMcpConversationError("SESSION_UNAVAILABLE", "This conversation binding is unavailable.");
+			return replace({
+				...record,
+				state: "pending"
+			});
+		},
+		closeSession(sessionId) {
+			const next = list().map((record) => record.id === sessionId || record.parentSessionId === sessionId ? {
+				...record,
+				state: "closed"
+			} : record);
+			if (next.some((record, index) => record !== current[index])) persist(next);
+		},
+		closeClient(clientId) {
+			const next = list().map((record) => record.clientId === clientId ? {
+				...record,
+				state: "closed"
+			} : record);
+			if (next.some((record, index) => record !== current[index])) persist(next);
+		}
+	};
+}
+//#endregion
+exports.SessionMcpConversationError = SessionMcpConversationError;
+exports.createSessionMcpConversationStore = createSessionMcpConversationStore;
+exports.sessionMcpConversationDigest = sessionMcpConversationDigest;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/sessionMcpConversations/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["createHash","path","fs","randomUUID"],"sources":["../../../../src/services/sessionMcpConversations/index.ts"],"sourcesContent":["import { createHash, randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nconst STORE_FILE = 'session-mcp-conversations.json';\nconst STORE_VERSION = 1;\nconst MAX_BINDINGS = 1000;\nconst MAX_CONVERSATION_BYTES = 1024;\nconst CONVERSATION_META_KEY = 'openai/session';\nconst ID_PATTERN = /^[A-Za-z0-9_-]+$/u;\nconst DIGEST_PATTERN = /^[a-f0-9]{64}$/u;\n\nexport type SessionMcpSetupKind = 'managed-worktree' | 'existing-directory';\nexport type SessionMcpSetupFailureCode = 'SESSION_WORKTREE_PROVISION_FAILED' | 'SESSION_UNAVAILABLE';\n\n/** Client metadata is a routing hint within an authenticated registration, never authority. */\nexport function sessionMcpConversationDigest(meta: unknown): string | undefined {\n  if (typeof meta !== 'object' || meta === null || Array.isArray(meta)) return undefined;\n  const value = (meta as Record<string, unknown>)[CONVERSATION_META_KEY];\n  if (\n    typeof value !== 'string' ||\n    value.trim() !== value ||\n    value.length === 0 ||\n    Array.from(value).some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127) ||\n    Buffer.byteLength(value, 'utf8') > MAX_CONVERSATION_BYTES\n  )\n    return undefined;\n  return createHash('sha256')\n    .update(JSON.stringify(['chatgpt', value]))\n    .digest('hex');\n}\n\nexport interface SessionMcpConversation {\n  /** Also the server-reserved target session identity. Never supplied by the model. */\n  readonly id: string;\n  readonly clientId: string;\n  readonly parentSessionId: string;\n  readonly parentWorkspaceId: string;\n  readonly conversationDigest: string;\n  readonly createdAt: string;\n  readonly state: 'pending' | 'bound' | 'closed';\n  /** Host-selected execution provider. Old records without this field are not assumed to be worktrees. */\n  readonly setupKind?: SessionMcpSetupKind;\n  /** Public, bounded failure code. Never persist Git stderr or exception text here. */\n  readonly failureCode?: SessionMcpSetupFailureCode;\n  /** Persisted before checkout or session creation starts. */\n  readonly cwd?: string;\n  readonly workspaceId?: string;\n}\n\nexport class SessionMcpConversationError extends Error {\n  constructor(\n    readonly code: string,\n    message: string,\n    readonly bindingId?: string,\n  ) {\n    super(message);\n    this.name = 'SessionMcpConversationError';\n  }\n}\n\nexport interface SessionMcpConversationStore {\n  list(): readonly SessionMcpConversation[];\n  find(clientId: string, parentSessionId: string, digest: string): SessionMcpConversation | undefined;\n  reserve(clientId: string, parentSessionId: string, parentWorkspaceId: string, digest: string): SessionMcpConversation;\n  get(id: string, parentSessionId: string): SessionMcpConversation;\n  selectSetup(id: string, parentSessionId: string, kind: SessionMcpSetupKind): SessionMcpConversation;\n  prepare(id: string, parentSessionId: string, cwd: string): SessionMcpConversation;\n  fail(id: string, parentSessionId: string, code: SessionMcpSetupFailureCode): SessionMcpConversation;\n  bind(id: string, parentSessionId: string, workspaceId: string): SessionMcpConversation;\n  recover(id: string, parentSessionId: string): SessionMcpConversation;\n  closeSession(sessionId: string): void;\n  closeClient(clientId: string): void;\n}\n\n/** How many id characters name a conversation's managed worktree branch and directory. */\nconst MANAGED_WORKTREE_ID_LENGTH = 12;\n\nfunction validRecord(value: unknown): value is SessionMcpConversation {\n  if (typeof value !== 'object' || value === null) return false;\n  const record = value as Partial<SessionMcpConversation>;\n  return (\n    typeof record.id === 'string' &&\n    ID_PATTERN.test(record.id) &&\n    typeof record.clientId === 'string' &&\n    ID_PATTERN.test(record.clientId) &&\n    typeof record.parentSessionId === 'string' &&\n    ID_PATTERN.test(record.parentSessionId) &&\n    typeof record.parentWorkspaceId === 'string' &&\n    record.parentWorkspaceId.length > 0 &&\n    typeof record.conversationDigest === 'string' &&\n    DIGEST_PATTERN.test(record.conversationDigest) &&\n    typeof record.createdAt === 'string' &&\n    Number.isFinite(Date.parse(record.createdAt)) &&\n    (record.state === 'pending' || record.state === 'bound' || record.state === 'closed') &&\n    (record.setupKind === undefined ||\n      record.setupKind === 'managed-worktree' ||\n      record.setupKind === 'existing-directory') &&\n    (record.failureCode === undefined ||\n      record.failureCode === 'SESSION_WORKTREE_PROVISION_FAILED' ||\n      record.failureCode === 'SESSION_UNAVAILABLE') &&\n    (record.cwd === undefined ||\n      (typeof record.cwd === 'string' && path.isAbsolute(record.cwd) && !record.cwd.includes('\\0'))) &&\n    (record.workspaceId === undefined || (typeof record.workspaceId === 'string' && record.workspaceId.length > 0)) &&\n    (record.state !== 'bound' || (record.cwd !== undefined && record.workspaceId !== undefined))\n  );\n}\n\n/**\n * Records written before setups carried a provider have none, and recovery refuses a setup it\n * cannot attribute, which left every such conversation stuck. A managed conversation worktree is\n * the only setup named `po-conversation-<first 12 id characters>--`, so a record reserving\n * that directory can be attributed to it. Anything else stays unattributed and refused.\n */\nfunction withLegacySetupKind(record: SessionMcpConversation): SessionMcpConversation {\n  if (record.setupKind !== undefined || record.cwd === undefined) return record;\n  const managedName = `po-conversation-${record.id.slice(0, MANAGED_WORKTREE_ID_LENGTH)}--`;\n  return path.basename(record.cwd).startsWith(managedName) ? { ...record, setupKind: 'managed-worktree' } : record;\n}\n\nfunction routingKey(\n  record: Pick<SessionMcpConversation, 'clientId' | 'parentSessionId' | 'conversationDigest'>,\n): string {\n  return JSON.stringify([record.clientId, record.parentSessionId, record.conversationDigest]);\n}\n\n/** One owning headless host persists these bindings. Corruption never becomes an empty, reusable store. */\nexport function createSessionMcpConversationStore(stateDir: string): SessionMcpConversationStore {\n  const file = path.join(stateDir, STORE_FILE);\n  let failure: Error | undefined;\n  let current: readonly SessionMcpConversation[] = load();\n\n  function load(): readonly SessionMcpConversation[] {\n    try {\n      const parsed: unknown = JSON.parse(fs.readFileSync(file, 'utf8'));\n      if (typeof parsed !== 'object' || parsed === null) throw new Error('Invalid store');\n      const stored = parsed as { version?: unknown; bindings?: unknown };\n      if (stored.version !== STORE_VERSION || !Array.isArray(stored.bindings) || !stored.bindings.every(validRecord))\n        throw new Error('Invalid bindings');\n      const records: SessionMcpConversation[] = stored.bindings;\n      if (\n        records.length > MAX_BINDINGS ||\n        new Set(records.map((record) => record.id)).size !== records.length ||\n        new Set(records.map(routingKey)).size !== records.length\n      )\n        throw new Error('Duplicate or excessive bindings');\n      return Object.freeze(records.map((record) => Object.freeze(withLegacySetupKind(record))));\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code === 'ENOENT') return [];\n      failure = new SessionMcpConversationError(\n        'CONVERSATION_STORE_UNAVAILABLE',\n        'Conversation bindings could not be loaded. Restore the binding store before using conversation routing.',\n      );\n      return [];\n    }\n  }\n\n  function list(): readonly SessionMcpConversation[] {\n    if (failure) throw failure;\n    return current;\n  }\n\n  function persist(next: readonly SessionMcpConversation[]): void {\n    list();\n    const temporary = `${file}.${randomUUID()}.tmp`;\n    try {\n      fs.mkdirSync(stateDir, { recursive: true, mode: 0o700 });\n      const descriptor = fs.openSync(temporary, 'wx', 0o600);\n      try {\n        fs.writeFileSync(descriptor, `${JSON.stringify({ version: STORE_VERSION, bindings: next }, null, 2)}\\n`);\n        fs.fsyncSync(descriptor);\n      } finally {\n        fs.closeSync(descriptor);\n      }\n      fs.renameSync(temporary, file);\n      current = Object.freeze(next.map((record) => Object.freeze(record)));\n    } catch {\n      throw new SessionMcpConversationError(\n        'CONVERSATION_STORE_UNAVAILABLE',\n        'Conversation bindings could not be saved. No new execution target was admitted.',\n      );\n    } finally {\n      // This temporary file never grants access and can safely be left for local recovery.\n      try {\n        fs.rmSync(temporary, { force: true });\n      } catch {\n        /* An inaccessible temporary file is not loaded. */\n      }\n    }\n  }\n\n  function get(id: string, parentSessionId: string): SessionMcpConversation {\n    const record = list().find((entry) => entry.id === id && entry.parentSessionId === parentSessionId);\n    if (!record || record.state === 'closed')\n      throw new SessionMcpConversationError(\n        'SESSION_UNAVAILABLE',\n        'This conversation binding is unavailable. It will not be recreated automatically.',\n      );\n    return record;\n  }\n\n  function replace(record: SessionMcpConversation): SessionMcpConversation {\n    persist(list().map((entry) => (entry.id === record.id ? record : entry)));\n    return get(record.id, record.parentSessionId);\n  }\n\n  return {\n    list,\n    get,\n    find: (clientId, parentSessionId, digest) =>\n      list().find(\n        (record) =>\n          record.clientId === clientId &&\n          record.parentSessionId === parentSessionId &&\n          record.conversationDigest === digest,\n      ),\n    reserve(clientId, parentSessionId, parentWorkspaceId, digest) {\n      const existing = list().find(\n        (record) =>\n          record.clientId === clientId &&\n          record.parentSessionId === parentSessionId &&\n          record.conversationDigest === digest,\n      );\n      if (existing) return existing;\n      if (list().length >= MAX_BINDINGS)\n        throw new SessionMcpConversationError(\n          'CONVERSATION_LIMIT_REACHED',\n          'The conversation binding limit has been reached. Use a dedicated session connection.',\n        );\n      const record: SessionMcpConversation = {\n        id: randomUUID(),\n        clientId,\n        parentSessionId,\n        parentWorkspaceId,\n        conversationDigest: digest,\n        createdAt: new Date().toISOString(),\n        state: 'pending',\n      };\n      if (!validRecord(record))\n        throw new SessionMcpConversationError('INVALID_CONVERSATION', 'Invalid conversation identity.');\n      persist([...list(), record]);\n      return get(record.id, parentSessionId);\n    },\n    selectSetup(id, parentSessionId, kind) {\n      const record = get(id, parentSessionId);\n      if (record.setupKind === kind)\n        return record.failureCode === undefined ? record : replace({ ...record, failureCode: undefined });\n      if (record.setupKind !== undefined && (record.cwd !== undefined || record.state === 'bound'))\n        throw new SessionMcpConversationError(\n          'SESSION_TARGET_FIXED',\n          'An initialized setup cannot change its provider.',\n          id,\n        );\n      if (record.setupKind === undefined && record.cwd !== undefined)\n        throw new SessionMcpConversationError(\n          'SESSION_TARGET_FIXED',\n          'This existing setup has no verified provider. Recover it without changing its ownership.',\n          id,\n        );\n      return replace({ ...record, setupKind: kind, failureCode: undefined });\n    },\n    prepare(id, parentSessionId, cwd) {\n      const record = get(id, parentSessionId);\n      if (!path.isAbsolute(cwd) || cwd.includes('\\0'))\n        throw new Error('A canonical absolute execution directory is required.');\n      if (record.cwd !== undefined && record.cwd !== cwd)\n        throw new SessionMcpConversationError(\n          'SESSION_TARGET_FIXED',\n          'This conversation already reserved a different execution directory. Recover that setup instead.',\n          id,\n        );\n      if (record.cwd === cwd) return record;\n      return replace({ ...record, cwd });\n    },\n    fail(id, parentSessionId, code) {\n      const record = get(id, parentSessionId);\n      if (record.state !== 'pending' || record.failureCode === code) return record;\n      return replace({ ...record, failureCode: code });\n    },\n    bind(id, parentSessionId, workspaceId) {\n      const record = get(id, parentSessionId);\n      if (!record.cwd || !workspaceId) throw new Error('A prepared directory and admitted workspace are required.');\n      if (record.state === 'bound') {\n        if (record.workspaceId !== workspaceId) throw new Error('The bound workspace cannot change.');\n        return record;\n      }\n      return replace({ ...record, state: 'bound', workspaceId, failureCode: undefined });\n    },\n    recover(id, parentSessionId) {\n      const record = list().find((entry) => entry.id === id && entry.parentSessionId === parentSessionId);\n      if (!record)\n        throw new SessionMcpConversationError('SESSION_UNAVAILABLE', 'This conversation binding is unavailable.');\n      return replace({ ...record, state: 'pending' });\n    },\n    closeSession(sessionId) {\n      const next = list().map((record): SessionMcpConversation =>\n        record.id === sessionId || record.parentSessionId === sessionId ? { ...record, state: 'closed' } : record,\n      );\n      if (next.some((record, index) => record !== current[index])) persist(next);\n    },\n    closeClient(clientId) {\n      const next = list().map((record): SessionMcpConversation =>\n        record.clientId === clientId ? { ...record, state: 'closed' } : record,\n      );\n      if (next.some((record, index) => record !== current[index])) persist(next);\n    },\n  };\n}\n"],"mappings":";;;;;;;AAIA,MAAM,aAAa;AACnB,MAAM,gBAAgB;AACtB,MAAM,eAAe;AACrB,MAAM,yBAAyB;AAC/B,MAAM,wBAAwB;AAC9B,MAAM,aAAa;AACnB,MAAM,iBAAiB;;AAMvB,SAAgB,6BAA6B,MAAmC;CAC9E,IAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,MAAM,QAAQ,IAAI,GAAG,OAAO,KAAA;CAC7E,MAAM,QAAS,KAAiC;CAChD,IACE,OAAO,UAAU,YACjB,MAAM,KAAK,MAAM,SACjB,MAAM,WAAW,KACjB,MAAM,KAAK,KAAK,CAAC,CAAC,MAAM,cAAc,UAAU,WAAW,CAAC,IAAI,MAAM,UAAU,WAAW,CAAC,MAAM,GAAG,KACrG,OAAO,WAAW,OAAO,MAAM,IAAI,wBAEnC,OAAO,KAAA;CACT,QAAA,GAAOA,YAAAA,WAAAA,CAAW,QAAQ,CAAC,CACxB,OAAO,KAAK,UAAU,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,CAC1C,OAAO,KAAK;AACjB;AAoBA,IAAa,8BAAb,cAAiD,MAAM;CAE1C;CAEA;CAHX,YACE,MACA,SACA,WACA;EACA,MAAM,OAAO;EAJJ,KAAA,OAAA;EAEA,KAAA,YAAA;EAGT,KAAK,OAAO;CACd;AACF;;AAiBA,MAAM,6BAA6B;AAEnC,SAAS,YAAY,OAAiD;CACpE,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,SAAS;CACf,OACE,OAAO,OAAO,OAAO,YACrB,WAAW,KAAK,OAAO,EAAE,KACzB,OAAO,OAAO,aAAa,YAC3B,WAAW,KAAK,OAAO,QAAQ,KAC/B,OAAO,OAAO,oBAAoB,YAClC,WAAW,KAAK,OAAO,eAAe,KACtC,OAAO,OAAO,sBAAsB,YACpC,OAAO,kBAAkB,SAAS,KAClC,OAAO,OAAO,uBAAuB,YACrC,eAAe,KAAK,OAAO,kBAAkB,KAC7C,OAAO,OAAO,cAAc,YAC5B,OAAO,SAAS,KAAK,MAAM,OAAO,SAAS,CAAC,MAC3C,OAAO,UAAU,aAAa,OAAO,UAAU,WAAW,OAAO,UAAU,cAC3E,OAAO,cAAc,KAAA,KACpB,OAAO,cAAc,sBACrB,OAAO,cAAc,0BACtB,OAAO,gBAAgB,KAAA,KACtB,OAAO,gBAAgB,uCACvB,OAAO,gBAAgB,2BACxB,OAAO,QAAQ,KAAA,KACb,OAAO,OAAO,QAAQ,YAAYC,UAAAA,QAAK,WAAW,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,SAAS,IAAI,OAC5F,OAAO,gBAAgB,KAAA,KAAc,OAAO,OAAO,gBAAgB,YAAY,OAAO,YAAY,SAAS,OAC3G,OAAO,UAAU,WAAY,OAAO,QAAQ,KAAA,KAAa,OAAO,gBAAgB,KAAA;AAErF;;;;;;;AAQA,SAAS,oBAAoB,QAAwD;CACnF,IAAI,OAAO,cAAc,KAAA,KAAa,OAAO,QAAQ,KAAA,GAAW,OAAO;CACvE,MAAM,cAAc,mBAAmB,OAAO,GAAG,MAAM,GAAG,0BAA0B,EAAE;CACtF,OAAOA,UAAAA,QAAK,SAAS,OAAO,GAAG,CAAC,CAAC,WAAW,WAAW,IAAI;EAAE,GAAG;EAAQ,WAAW;CAAmB,IAAI;AAC5G;AAEA,SAAS,WACP,QACQ;CACR,OAAO,KAAK,UAAU;EAAC,OAAO;EAAU,OAAO;EAAiB,OAAO;CAAkB,CAAC;AAC5F;;AAGA,SAAgB,kCAAkC,UAA+C;CAC/F,MAAM,OAAOA,UAAAA,QAAK,KAAK,UAAU,UAAU;CAC3C,IAAI;CACJ,IAAI,UAA6C,KAAK;CAEtD,SAAS,OAA0C;EACjD,IAAI;GACF,MAAM,SAAkB,KAAK,MAAMC,QAAAA,QAAG,aAAa,MAAM,MAAM,CAAC;GAChE,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,MAAM,IAAI,MAAM,eAAe;GAClF,MAAM,SAAS;GACf,IAAI,OAAO,YAAY,iBAAiB,CAAC,MAAM,QAAQ,OAAO,QAAQ,KAAK,CAAC,OAAO,SAAS,MAAM,WAAW,GAC3G,MAAM,IAAI,MAAM,kBAAkB;GACpC,MAAM,UAAoC,OAAO;GACjD,IACE,QAAQ,SAAS,gBACjB,IAAI,IAAI,QAAQ,KAAK,WAAW,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,QAAQ,UAC7D,IAAI,IAAI,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,SAAS,QAAQ,QAElD,MAAM,IAAI,MAAM,iCAAiC;GACnD,OAAO,OAAO,OAAO,QAAQ,KAAK,WAAW,OAAO,OAAO,oBAAoB,MAAM,CAAC,CAAC,CAAC;EAC1F,SAAS,OAAO;GACd,IAAK,MAAgC,SAAS,UAAU,OAAO,CAAC;GAChE,UAAU,IAAI,4BACZ,kCACA,yGACF;GACA,OAAO,CAAC;EACV;CACF;CAEA,SAAS,OAA0C;EACjD,IAAI,SAAS,MAAM;EACnB,OAAO;CACT;CAEA,SAAS,QAAQ,MAA+C;EAC9D,KAAK;EACL,MAAM,YAAY,GAAG,KAAK,IAAA,GAAGC,YAAAA,WAAAA,CAAW,EAAE;EAC1C,IAAI;GACF,QAAA,QAAG,UAAU,UAAU;IAAE,WAAW;IAAM,MAAM;GAAM,CAAC;GACvD,MAAM,aAAaD,QAAAA,QAAG,SAAS,WAAW,MAAM,GAAK;GACrD,IAAI;IACF,QAAA,QAAG,cAAc,YAAY,GAAG,KAAK,UAAU;KAAE,SAAS;KAAe,UAAU;IAAK,GAAG,MAAM,CAAC,EAAE,GAAG;IACvG,QAAA,QAAG,UAAU,UAAU;GACzB,UAAU;IACR,QAAA,QAAG,UAAU,UAAU;GACzB;GACA,QAAA,QAAG,WAAW,WAAW,IAAI;GAC7B,UAAU,OAAO,OAAO,KAAK,KAAK,WAAW,OAAO,OAAO,MAAM,CAAC,CAAC;EACrE,QAAQ;GACN,MAAM,IAAI,4BACR,kCACA,iFACF;EACF,UAAU;GAER,IAAI;IACF,QAAA,QAAG,OAAO,WAAW,EAAE,OAAO,KAAK,CAAC;GACtC,QAAQ,CAER;EACF;CACF;CAEA,SAAS,IAAI,IAAY,iBAAiD;EACxE,MAAM,SAAS,KAAK,CAAC,CAAC,MAAM,UAAU,MAAM,OAAO,MAAM,MAAM,oBAAoB,eAAe;EAClG,IAAI,CAAC,UAAU,OAAO,UAAU,UAC9B,MAAM,IAAI,4BACR,uBACA,mFACF;EACF,OAAO;CACT;CAEA,SAAS,QAAQ,QAAwD;EACvE,QAAQ,KAAK,CAAC,CAAC,KAAK,UAAW,MAAM,OAAO,OAAO,KAAK,SAAS,KAAM,CAAC;EACxE,OAAO,IAAI,OAAO,IAAI,OAAO,eAAe;CAC9C;CAEA,OAAO;EACL;EACA;EACA,OAAO,UAAU,iBAAiB,WAChC,KAAK,CAAC,CAAC,MACJ,WACC,OAAO,aAAa,YACpB,OAAO,oBAAoB,mBAC3B,OAAO,uBAAuB,MAClC;EACF,QAAQ,UAAU,iBAAiB,mBAAmB,QAAQ;GAC5D,MAAM,WAAW,KAAK,CAAC,CAAC,MACrB,WACC,OAAO,aAAa,YACpB,OAAO,oBAAoB,mBAC3B,OAAO,uBAAuB,MAClC;GACA,IAAI,UAAU,OAAO;GACrB,IAAI,KAAK,CAAC,CAAC,UAAU,cACnB,MAAM,IAAI,4BACR,8BACA,sFACF;GACF,MAAM,SAAiC;IACrC,KAAA,GAAIC,YAAAA,WAAAA,CAAW;IACf;IACA;IACA;IACA,oBAAoB;IACpB,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;IAClC,OAAO;GACT;GACA,IAAI,CAAC,YAAY,MAAM,GACrB,MAAM,IAAI,4BAA4B,wBAAwB,gCAAgC;GAChG,QAAQ,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC;GAC3B,OAAO,IAAI,OAAO,IAAI,eAAe;EACvC;EACA,YAAY,IAAI,iBAAiB,MAAM;GACrC,MAAM,SAAS,IAAI,IAAI,eAAe;GACtC,IAAI,OAAO,cAAc,MACvB,OAAO,OAAO,gBAAgB,KAAA,IAAY,SAAS,QAAQ;IAAE,GAAG;IAAQ,aAAa,KAAA;GAAU,CAAC;GAClG,IAAI,OAAO,cAAc,KAAA,MAAc,OAAO,QAAQ,KAAA,KAAa,OAAO,UAAU,UAClF,MAAM,IAAI,4BACR,wBACA,oDACA,EACF;GACF,IAAI,OAAO,cAAc,KAAA,KAAa,OAAO,QAAQ,KAAA,GACnD,MAAM,IAAI,4BACR,wBACA,4FACA,EACF;GACF,OAAO,QAAQ;IAAE,GAAG;IAAQ,WAAW;IAAM,aAAa,KAAA;GAAU,CAAC;EACvE;EACA,QAAQ,IAAI,iBAAiB,KAAK;GAChC,MAAM,SAAS,IAAI,IAAI,eAAe;GACtC,IAAI,CAACF,UAAAA,QAAK,WAAW,GAAG,KAAK,IAAI,SAAS,IAAI,GAC5C,MAAM,IAAI,MAAM,uDAAuD;GACzE,IAAI,OAAO,QAAQ,KAAA,KAAa,OAAO,QAAQ,KAC7C,MAAM,IAAI,4BACR,wBACA,mGACA,EACF;GACF,IAAI,OAAO,QAAQ,KAAK,OAAO;GAC/B,OAAO,QAAQ;IAAE,GAAG;IAAQ;GAAI,CAAC;EACnC;EACA,KAAK,IAAI,iBAAiB,MAAM;GAC9B,MAAM,SAAS,IAAI,IAAI,eAAe;GACtC,IAAI,OAAO,UAAU,aAAa,OAAO,gBAAgB,MAAM,OAAO;GACtE,OAAO,QAAQ;IAAE,GAAG;IAAQ,aAAa;GAAK,CAAC;EACjD;EACA,KAAK,IAAI,iBAAiB,aAAa;GACrC,MAAM,SAAS,IAAI,IAAI,eAAe;GACtC,IAAI,CAAC,OAAO,OAAO,CAAC,aAAa,MAAM,IAAI,MAAM,2DAA2D;GAC5G,IAAI,OAAO,UAAU,SAAS;IAC5B,IAAI,OAAO,gBAAgB,aAAa,MAAM,IAAI,MAAM,oCAAoC;IAC5F,OAAO;GACT;GACA,OAAO,QAAQ;IAAE,GAAG;IAAQ,OAAO;IAAS;IAAa,aAAa,KAAA;GAAU,CAAC;EACnF;EACA,QAAQ,IAAI,iBAAiB;GAC3B,MAAM,SAAS,KAAK,CAAC,CAAC,MAAM,UAAU,MAAM,OAAO,MAAM,MAAM,oBAAoB,eAAe;GAClG,IAAI,CAAC,QACH,MAAM,IAAI,4BAA4B,uBAAuB,2CAA2C;GAC1G,OAAO,QAAQ;IAAE,GAAG;IAAQ,OAAO;GAAU,CAAC;EAChD;EACA,aAAa,WAAW;GACtB,MAAM,OAAO,KAAK,CAAC,CAAC,KAAK,WACvB,OAAO,OAAO,aAAa,OAAO,oBAAoB,YAAY;IAAE,GAAG;IAAQ,OAAO;GAAS,IAAI,MACrG;GACA,IAAI,KAAK,MAAM,QAAQ,UAAU,WAAW,QAAQ,MAAM,GAAG,QAAQ,IAAI;EAC3E;EACA,YAAY,UAAU;GACpB,MAAM,OAAO,KAAK,CAAC,CAAC,KAAK,WACvB,OAAO,aAAa,WAAW;IAAE,GAAG;IAAQ,OAAO;GAAS,IAAI,MAClE;GACA,IAAI,KAAK,MAAM,QAAQ,UAAU,WAAW,QAAQ,MAAM,GAAG,QAAQ,IAAI;EAC3E;CACF;AACF"}

package/dist/src/services/sessionMcpConversations/index.mjs

@@ -0,0 +1,212 @@
+import { createHash, randomUUID } from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+//#region src/services/sessionMcpConversations/index.ts
+const STORE_FILE = "session-mcp-conversations.json";
+const STORE_VERSION = 1;
+const MAX_BINDINGS = 1e3;
+const MAX_CONVERSATION_BYTES = 1024;
+const CONVERSATION_META_KEY = "openai/session";
+const ID_PATTERN = /^[A-Za-z0-9_-]+$/u;
+const DIGEST_PATTERN = /^[a-f0-9]{64}$/u;
+/** Client metadata is a routing hint within an authenticated registration, never authority. */
+function sessionMcpConversationDigest(meta) {
+	if (typeof meta !== "object" || meta === null || Array.isArray(meta)) return void 0;
+	const value = meta[CONVERSATION_META_KEY];
+	if (typeof value !== "string" || value.trim() !== value || value.length === 0 || Array.from(value).some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127) || Buffer.byteLength(value, "utf8") > MAX_CONVERSATION_BYTES) return void 0;
+	return createHash("sha256").update(JSON.stringify(["chatgpt", value])).digest("hex");
+}
+var SessionMcpConversationError = class extends Error {
+	code;
+	bindingId;
+	constructor(code, message, bindingId) {
+		super(message);
+		this.code = code;
+		this.bindingId = bindingId;
+		this.name = "SessionMcpConversationError";
+	}
+};
+/** How many id characters name a conversation's managed worktree branch and directory. */
+const MANAGED_WORKTREE_ID_LENGTH = 12;
+function validRecord(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const record = value;
+	return typeof record.id === "string" && ID_PATTERN.test(record.id) && typeof record.clientId === "string" && ID_PATTERN.test(record.clientId) && typeof record.parentSessionId === "string" && ID_PATTERN.test(record.parentSessionId) && typeof record.parentWorkspaceId === "string" && record.parentWorkspaceId.length > 0 && typeof record.conversationDigest === "string" && DIGEST_PATTERN.test(record.conversationDigest) && typeof record.createdAt === "string" && Number.isFinite(Date.parse(record.createdAt)) && (record.state === "pending" || record.state === "bound" || record.state === "closed") && (record.setupKind === void 0 || record.setupKind === "managed-worktree" || record.setupKind === "existing-directory") && (record.failureCode === void 0 || record.failureCode === "SESSION_WORKTREE_PROVISION_FAILED" || record.failureCode === "SESSION_UNAVAILABLE") && (record.cwd === void 0 || typeof record.cwd === "string" && path.isAbsolute(record.cwd) && !record.cwd.includes("\0")) && (record.workspaceId === void 0 || typeof record.workspaceId === "string" && record.workspaceId.length > 0) && (record.state !== "bound" || record.cwd !== void 0 && record.workspaceId !== void 0);
+}
+/**
+* Records written before setups carried a provider have none, and recovery refuses a setup it
+* cannot attribute, which left every such conversation stuck. A managed conversation worktree is
+* the only setup named `po-conversation-<first 12 id characters>--`, so a record reserving
+* that directory can be attributed to it. Anything else stays unattributed and refused.
+*/
+function withLegacySetupKind(record) {
+	if (record.setupKind !== void 0 || record.cwd === void 0) return record;
+	const managedName = `po-conversation-${record.id.slice(0, MANAGED_WORKTREE_ID_LENGTH)}--`;
+	return path.basename(record.cwd).startsWith(managedName) ? {
+		...record,
+		setupKind: "managed-worktree"
+	} : record;
+}
+function routingKey(record) {
+	return JSON.stringify([
+		record.clientId,
+		record.parentSessionId,
+		record.conversationDigest
+	]);
+}
+/** One owning headless host persists these bindings. Corruption never becomes an empty, reusable store. */
+function createSessionMcpConversationStore(stateDir) {
+	const file = path.join(stateDir, STORE_FILE);
+	let failure;
+	let current = load();
+	function load() {
+		try {
+			const parsed = JSON.parse(fs.readFileSync(file, "utf8"));
+			if (typeof parsed !== "object" || parsed === null) throw new Error("Invalid store");
+			const stored = parsed;
+			if (stored.version !== STORE_VERSION || !Array.isArray(stored.bindings) || !stored.bindings.every(validRecord)) throw new Error("Invalid bindings");
+			const records = stored.bindings;
+			if (records.length > MAX_BINDINGS || new Set(records.map((record) => record.id)).size !== records.length || new Set(records.map(routingKey)).size !== records.length) throw new Error("Duplicate or excessive bindings");
+			return Object.freeze(records.map((record) => Object.freeze(withLegacySetupKind(record))));
+		} catch (error) {
+			if (error.code === "ENOENT") return [];
+			failure = new SessionMcpConversationError("CONVERSATION_STORE_UNAVAILABLE", "Conversation bindings could not be loaded. Restore the binding store before using conversation routing.");
+			return [];
+		}
+	}
+	function list() {
+		if (failure) throw failure;
+		return current;
+	}
+	function persist(next) {
+		list();
+		const temporary = `${file}.${randomUUID()}.tmp`;
+		try {
+			fs.mkdirSync(stateDir, {
+				recursive: true,
+				mode: 448
+			});
+			const descriptor = fs.openSync(temporary, "wx", 384);
+			try {
+				fs.writeFileSync(descriptor, `${JSON.stringify({
+					version: STORE_VERSION,
+					bindings: next
+				}, null, 2)}\n`);
+				fs.fsyncSync(descriptor);
+			} finally {
+				fs.closeSync(descriptor);
+			}
+			fs.renameSync(temporary, file);
+			current = Object.freeze(next.map((record) => Object.freeze(record)));
+		} catch {
+			throw new SessionMcpConversationError("CONVERSATION_STORE_UNAVAILABLE", "Conversation bindings could not be saved. No new execution target was admitted.");
+		} finally {
+			try {
+				fs.rmSync(temporary, { force: true });
+			} catch {}
+		}
+	}
+	function get(id, parentSessionId) {
+		const record = list().find((entry) => entry.id === id && entry.parentSessionId === parentSessionId);
+		if (!record || record.state === "closed") throw new SessionMcpConversationError("SESSION_UNAVAILABLE", "This conversation binding is unavailable. It will not be recreated automatically.");
+		return record;
+	}
+	function replace(record) {
+		persist(list().map((entry) => entry.id === record.id ? record : entry));
+		return get(record.id, record.parentSessionId);
+	}
+	return {
+		list,
+		get,
+		find: (clientId, parentSessionId, digest) => list().find((record) => record.clientId === clientId && record.parentSessionId === parentSessionId && record.conversationDigest === digest),
+		reserve(clientId, parentSessionId, parentWorkspaceId, digest) {
+			const existing = list().find((record) => record.clientId === clientId && record.parentSessionId === parentSessionId && record.conversationDigest === digest);
+			if (existing) return existing;
+			if (list().length >= MAX_BINDINGS) throw new SessionMcpConversationError("CONVERSATION_LIMIT_REACHED", "The conversation binding limit has been reached. Use a dedicated session connection.");
+			const record = {
+				id: randomUUID(),
+				clientId,
+				parentSessionId,
+				parentWorkspaceId,
+				conversationDigest: digest,
+				createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+				state: "pending"
+			};
+			if (!validRecord(record)) throw new SessionMcpConversationError("INVALID_CONVERSATION", "Invalid conversation identity.");
+			persist([...list(), record]);
+			return get(record.id, parentSessionId);
+		},
+		selectSetup(id, parentSessionId, kind) {
+			const record = get(id, parentSessionId);
+			if (record.setupKind === kind) return record.failureCode === void 0 ? record : replace({
+				...record,
+				failureCode: void 0
+			});
+			if (record.setupKind !== void 0 && (record.cwd !== void 0 || record.state === "bound")) throw new SessionMcpConversationError("SESSION_TARGET_FIXED", "An initialized setup cannot change its provider.", id);
+			if (record.setupKind === void 0 && record.cwd !== void 0) throw new SessionMcpConversationError("SESSION_TARGET_FIXED", "This existing setup has no verified provider. Recover it without changing its ownership.", id);
+			return replace({
+				...record,
+				setupKind: kind,
+				failureCode: void 0
+			});
+		},
+		prepare(id, parentSessionId, cwd) {
+			const record = get(id, parentSessionId);
+			if (!path.isAbsolute(cwd) || cwd.includes("\0")) throw new Error("A canonical absolute execution directory is required.");
+			if (record.cwd !== void 0 && record.cwd !== cwd) throw new SessionMcpConversationError("SESSION_TARGET_FIXED", "This conversation already reserved a different execution directory. Recover that setup instead.", id);
+			if (record.cwd === cwd) return record;
+			return replace({
+				...record,
+				cwd
+			});
+		},
+		fail(id, parentSessionId, code) {
+			const record = get(id, parentSessionId);
+			if (record.state !== "pending" || record.failureCode === code) return record;
+			return replace({
+				...record,
+				failureCode: code
+			});
+		},
+		bind(id, parentSessionId, workspaceId) {
+			const record = get(id, parentSessionId);
+			if (!record.cwd || !workspaceId) throw new Error("A prepared directory and admitted workspace are required.");
+			if (record.state === "bound") {
+				if (record.workspaceId !== workspaceId) throw new Error("The bound workspace cannot change.");
+				return record;
+			}
+			return replace({
+				...record,
+				state: "bound",
+				workspaceId,
+				failureCode: void 0
+			});
+		},
+		recover(id, parentSessionId) {
+			const record = list().find((entry) => entry.id === id && entry.parentSessionId === parentSessionId);
+			if (!record) throw new SessionMcpConversationError("SESSION_UNAVAILABLE", "This conversation binding is unavailable.");
+			return replace({
+				...record,
+				state: "pending"
+			});
+		},
+		closeSession(sessionId) {
+			const next = list().map((record) => record.id === sessionId || record.parentSessionId === sessionId ? {
+				...record,
+				state: "closed"
+			} : record);
+			if (next.some((record, index) => record !== current[index])) persist(next);
+		},
+		closeClient(clientId) {
+			const next = list().map((record) => record.clientId === clientId ? {
+				...record,
+				state: "closed"
+			} : record);
+			if (next.some((record, index) => record !== current[index])) persist(next);
+		}
+	};
+}
+//#endregion
+export { SessionMcpConversationError, createSessionMcpConversationStore, sessionMcpConversationDigest };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/services/sessionMcpConversations/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/sessionMcpConversations/index.ts"],"sourcesContent":["import { createHash, randomUUID } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nconst STORE_FILE = 'session-mcp-conversations.json';\nconst STORE_VERSION = 1;\nconst MAX_BINDINGS = 1000;\nconst MAX_CONVERSATION_BYTES = 1024;\nconst CONVERSATION_META_KEY = 'openai/session';\nconst ID_PATTERN = /^[A-Za-z0-9_-]+$/u;\nconst DIGEST_PATTERN = /^[a-f0-9]{64}$/u;\n\nexport type SessionMcpSetupKind = 'managed-worktree' | 'existing-directory';\nexport type SessionMcpSetupFailureCode = 'SESSION_WORKTREE_PROVISION_FAILED' | 'SESSION_UNAVAILABLE';\n\n/** Client metadata is a routing hint within an authenticated registration, never authority. */\nexport function sessionMcpConversationDigest(meta: unknown): string | undefined {\n  if (typeof meta !== 'object' || meta === null || Array.isArray(meta)) return undefined;\n  const value = (meta as Record<string, unknown>)[CONVERSATION_META_KEY];\n  if (\n    typeof value !== 'string' ||\n    value.trim() !== value ||\n    value.length === 0 ||\n    Array.from(value).some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127) ||\n    Buffer.byteLength(value, 'utf8') > MAX_CONVERSATION_BYTES\n  )\n    return undefined;\n  return createHash('sha256')\n    .update(JSON.stringify(['chatgpt', value]))\n    .digest('hex');\n}\n\nexport interface SessionMcpConversation {\n  /** Also the server-reserved target session identity. Never supplied by the model. */\n  readonly id: string;\n  readonly clientId: string;\n  readonly parentSessionId: string;\n  readonly parentWorkspaceId: string;\n  readonly conversationDigest: string;\n  readonly createdAt: string;\n  readonly state: 'pending' | 'bound' | 'closed';\n  /** Host-selected execution provider. Old records without this field are not assumed to be worktrees. */\n  readonly setupKind?: SessionMcpSetupKind;\n  /** Public, bounded failure code. Never persist Git stderr or exception text here. */\n  readonly failureCode?: SessionMcpSetupFailureCode;\n  /** Persisted before checkout or session creation starts. */\n  readonly cwd?: string;\n  readonly workspaceId?: string;\n}\n\nexport class SessionMcpConversationError extends Error {\n  constructor(\n    readonly code: string,\n    message: string,\n    readonly bindingId?: string,\n  ) {\n    super(message);\n    this.name = 'SessionMcpConversationError';\n  }\n}\n\nexport interface SessionMcpConversationStore {\n  list(): readonly SessionMcpConversation[];\n  find(clientId: string, parentSessionId: string, digest: string): SessionMcpConversation | undefined;\n  reserve(clientId: string, parentSessionId: string, parentWorkspaceId: string, digest: string): SessionMcpConversation;\n  get(id: string, parentSessionId: string): SessionMcpConversation;\n  selectSetup(id: string, parentSessionId: string, kind: SessionMcpSetupKind): SessionMcpConversation;\n  prepare(id: string, parentSessionId: string, cwd: string): SessionMcpConversation;\n  fail(id: string, parentSessionId: string, code: SessionMcpSetupFailureCode): SessionMcpConversation;\n  bind(id: string, parentSessionId: string, workspaceId: string): SessionMcpConversation;\n  recover(id: string, parentSessionId: string): SessionMcpConversation;\n  closeSession(sessionId: string): void;\n  closeClient(clientId: string): void;\n}\n\n/** How many id characters name a conversation's managed worktree branch and directory. */\nconst MANAGED_WORKTREE_ID_LENGTH = 12;\n\nfunction validRecord(value: unknown): value is SessionMcpConversation {\n  if (typeof value !== 'object' || value === null) return false;\n  const record = value as Partial<SessionMcpConversation>;\n  return (\n    typeof record.id === 'string' &&\n    ID_PATTERN.test(record.id) &&\n    typeof record.clientId === 'string' &&\n    ID_PATTERN.test(record.clientId) &&\n    typeof record.parentSessionId === 'string' &&\n    ID_PATTERN.test(record.parentSessionId) &&\n    typeof record.parentWorkspaceId === 'string' &&\n    record.parentWorkspaceId.length > 0 &&\n    typeof record.conversationDigest === 'string' &&\n    DIGEST_PATTERN.test(record.conversationDigest) &&\n    typeof record.createdAt === 'string' &&\n    Number.isFinite(Date.parse(record.createdAt)) &&\n    (record.state === 'pending' || record.state === 'bound' || record.state === 'closed') &&\n    (record.setupKind === undefined ||\n      record.setupKind === 'managed-worktree' ||\n      record.setupKind === 'existing-directory') &&\n    (record.failureCode === undefined ||\n      record.failureCode === 'SESSION_WORKTREE_PROVISION_FAILED' ||\n      record.failureCode === 'SESSION_UNAVAILABLE') &&\n    (record.cwd === undefined ||\n      (typeof record.cwd === 'string' && path.isAbsolute(record.cwd) && !record.cwd.includes('\\0'))) &&\n    (record.workspaceId === undefined || (typeof record.workspaceId === 'string' && record.workspaceId.length > 0)) &&\n    (record.state !== 'bound' || (record.cwd !== undefined && record.workspaceId !== undefined))\n  );\n}\n\n/**\n * Records written before setups carried a provider have none, and recovery refuses a setup it\n * cannot attribute, which left every such conversation stuck. A managed conversation worktree is\n * the only setup named `po-conversation-<first 12 id characters>--`, so a record reserving\n * that directory can be attributed to it. Anything else stays unattributed and refused.\n */\nfunction withLegacySetupKind(record: SessionMcpConversation): SessionMcpConversation {\n  if (record.setupKind !== undefined || record.cwd === undefined) return record;\n  const managedName = `po-conversation-${record.id.slice(0, MANAGED_WORKTREE_ID_LENGTH)}--`;\n  return path.basename(record.cwd).startsWith(managedName) ? { ...record, setupKind: 'managed-worktree' } : record;\n}\n\nfunction routingKey(\n  record: Pick<SessionMcpConversation, 'clientId' | 'parentSessionId' | 'conversationDigest'>,\n): string {\n  return JSON.stringify([record.clientId, record.parentSessionId, record.conversationDigest]);\n}\n\n/** One owning headless host persists these bindings. Corruption never becomes an empty, reusable store. */\nexport function createSessionMcpConversationStore(stateDir: string): SessionMcpConversationStore {\n  const file = path.join(stateDir, STORE_FILE);\n  let failure: Error | undefined;\n  let current: readonly SessionMcpConversation[] = load();\n\n  function load(): readonly SessionMcpConversation[] {\n    try {\n      const parsed: unknown = JSON.parse(fs.readFileSync(file, 'utf8'));\n      if (typeof parsed !== 'object' || parsed === null) throw new Error('Invalid store');\n      const stored = parsed as { version?: unknown; bindings?: unknown };\n      if (stored.version !== STORE_VERSION || !Array.isArray(stored.bindings) || !stored.bindings.every(validRecord))\n        throw new Error('Invalid bindings');\n      const records: SessionMcpConversation[] = stored.bindings;\n      if (\n        records.length > MAX_BINDINGS ||\n        new Set(records.map((record) => record.id)).size !== records.length ||\n        new Set(records.map(routingKey)).size !== records.length\n      )\n        throw new Error('Duplicate or excessive bindings');\n      return Object.freeze(records.map((record) => Object.freeze(withLegacySetupKind(record))));\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code === 'ENOENT') return [];\n      failure = new SessionMcpConversationError(\n        'CONVERSATION_STORE_UNAVAILABLE',\n        'Conversation bindings could not be loaded. Restore the binding store before using conversation routing.',\n      );\n      return [];\n    }\n  }\n\n  function list(): readonly SessionMcpConversation[] {\n    if (failure) throw failure;\n    return current;\n  }\n\n  function persist(next: readonly SessionMcpConversation[]): void {\n    list();\n    const temporary = `${file}.${randomUUID()}.tmp`;\n    try {\n      fs.mkdirSync(stateDir, { recursive: true, mode: 0o700 });\n      const descriptor = fs.openSync(temporary, 'wx', 0o600);\n      try {\n        fs.writeFileSync(descriptor, `${JSON.stringify({ version: STORE_VERSION, bindings: next }, null, 2)}\\n`);\n        fs.fsyncSync(descriptor);\n      } finally {\n        fs.closeSync(descriptor);\n      }\n      fs.renameSync(temporary, file);\n      current = Object.freeze(next.map((record) => Object.freeze(record)));\n    } catch {\n      throw new SessionMcpConversationError(\n        'CONVERSATION_STORE_UNAVAILABLE',\n        'Conversation bindings could not be saved. No new execution target was admitted.',\n      );\n    } finally {\n      // This temporary file never grants access and can safely be left for local recovery.\n      try {\n        fs.rmSync(temporary, { force: true });\n      } catch {\n        /* An inaccessible temporary file is not loaded. */\n      }\n    }\n  }\n\n  function get(id: string, parentSessionId: string): SessionMcpConversation {\n    const record = list().find((entry) => entry.id === id && entry.parentSessionId === parentSessionId);\n    if (!record || record.state === 'closed')\n      throw new SessionMcpConversationError(\n        'SESSION_UNAVAILABLE',\n        'This conversation binding is unavailable. It will not be recreated automatically.',\n      );\n    return record;\n  }\n\n  function replace(record: SessionMcpConversation): SessionMcpConversation {\n    persist(list().map((entry) => (entry.id === record.id ? record : entry)));\n    return get(record.id, record.parentSessionId);\n  }\n\n  return {\n    list,\n    get,\n    find: (clientId, parentSessionId, digest) =>\n      list().find(\n        (record) =>\n          record.clientId === clientId &&\n          record.parentSessionId === parentSessionId &&\n          record.conversationDigest === digest,\n      ),\n    reserve(clientId, parentSessionId, parentWorkspaceId, digest) {\n      const existing = list().find(\n        (record) =>\n          record.clientId === clientId &&\n          record.parentSessionId === parentSessionId &&\n          record.conversationDigest === digest,\n      );\n      if (existing) return existing;\n      if (list().length >= MAX_BINDINGS)\n        throw new SessionMcpConversationError(\n          'CONVERSATION_LIMIT_REACHED',\n          'The conversation binding limit has been reached. Use a dedicated session connection.',\n        );\n      const record: SessionMcpConversation = {\n        id: randomUUID(),\n        clientId,\n        parentSessionId,\n        parentWorkspaceId,\n        conversationDigest: digest,\n        createdAt: new Date().toISOString(),\n        state: 'pending',\n      };\n      if (!validRecord(record))\n        throw new SessionMcpConversationError('INVALID_CONVERSATION', 'Invalid conversation identity.');\n      persist([...list(), record]);\n      return get(record.id, parentSessionId);\n    },\n    selectSetup(id, parentSessionId, kind) {\n      const record = get(id, parentSessionId);\n      if (record.setupKind === kind)\n        return record.failureCode === undefined ? record : replace({ ...record, failureCode: undefined });\n      if (record.setupKind !== undefined && (record.cwd !== undefined || record.state === 'bound'))\n        throw new SessionMcpConversationError(\n          'SESSION_TARGET_FIXED',\n          'An initialized setup cannot change its provider.',\n          id,\n        );\n      if (record.setupKind === undefined && record.cwd !== undefined)\n        throw new SessionMcpConversationError(\n          'SESSION_TARGET_FIXED',\n          'This existing setup has no verified provider. Recover it without changing its ownership.',\n          id,\n        );\n      return replace({ ...record, setupKind: kind, failureCode: undefined });\n    },\n    prepare(id, parentSessionId, cwd) {\n      const record = get(id, parentSessionId);\n      if (!path.isAbsolute(cwd) || cwd.includes('\\0'))\n        throw new Error('A canonical absolute execution directory is required.');\n      if (record.cwd !== undefined && record.cwd !== cwd)\n        throw new SessionMcpConversationError(\n          'SESSION_TARGET_FIXED',\n          'This conversation already reserved a different execution directory. Recover that setup instead.',\n          id,\n        );\n      if (record.cwd === cwd) return record;\n      return replace({ ...record, cwd });\n    },\n    fail(id, parentSessionId, code) {\n      const record = get(id, parentSessionId);\n      if (record.state !== 'pending' || record.failureCode === code) return record;\n      return replace({ ...record, failureCode: code });\n    },\n    bind(id, parentSessionId, workspaceId) {\n      const record = get(id, parentSessionId);\n      if (!record.cwd || !workspaceId) throw new Error('A prepared directory and admitted workspace are required.');\n      if (record.state === 'bound') {\n        if (record.workspaceId !== workspaceId) throw new Error('The bound workspace cannot change.');\n        return record;\n      }\n      return replace({ ...record, state: 'bound', workspaceId, failureCode: undefined });\n    },\n    recover(id, parentSessionId) {\n      const record = list().find((entry) => entry.id === id && entry.parentSessionId === parentSessionId);\n      if (!record)\n        throw new SessionMcpConversationError('SESSION_UNAVAILABLE', 'This conversation binding is unavailable.');\n      return replace({ ...record, state: 'pending' });\n    },\n    closeSession(sessionId) {\n      const next = list().map((record): SessionMcpConversation =>\n        record.id === sessionId || record.parentSessionId === sessionId ? { ...record, state: 'closed' } : record,\n      );\n      if (next.some((record, index) => record !== current[index])) persist(next);\n    },\n    closeClient(clientId) {\n      const next = list().map((record): SessionMcpConversation =>\n        record.clientId === clientId ? { ...record, state: 'closed' } : record,\n      );\n      if (next.some((record, index) => record !== current[index])) persist(next);\n    },\n  };\n}\n"],"mappings":";;;;AAIA,MAAM,aAAa;AACnB,MAAM,gBAAgB;AACtB,MAAM,eAAe;AACrB,MAAM,yBAAyB;AAC/B,MAAM,wBAAwB;AAC9B,MAAM,aAAa;AACnB,MAAM,iBAAiB;;AAMvB,SAAgB,6BAA6B,MAAmC;CAC9E,IAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,MAAM,QAAQ,IAAI,GAAG,OAAO,KAAA;CAC7E,MAAM,QAAS,KAAiC;CAChD,IACE,OAAO,UAAU,YACjB,MAAM,KAAK,MAAM,SACjB,MAAM,WAAW,KACjB,MAAM,KAAK,KAAK,CAAC,CAAC,MAAM,cAAc,UAAU,WAAW,CAAC,IAAI,MAAM,UAAU,WAAW,CAAC,MAAM,GAAG,KACrG,OAAO,WAAW,OAAO,MAAM,IAAI,wBAEnC,OAAO,KAAA;CACT,OAAO,WAAW,QAAQ,CAAC,CACxB,OAAO,KAAK,UAAU,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,CAC1C,OAAO,KAAK;AACjB;AAoBA,IAAa,8BAAb,cAAiD,MAAM;CAE1C;CAEA;CAHX,YACE,MACA,SACA,WACA;EACA,MAAM,OAAO;EAJJ,KAAA,OAAA;EAEA,KAAA,YAAA;EAGT,KAAK,OAAO;CACd;AACF;;AAiBA,MAAM,6BAA6B;AAEnC,SAAS,YAAY,OAAiD;CACpE,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO;CACxD,MAAM,SAAS;CACf,OACE,OAAO,OAAO,OAAO,YACrB,WAAW,KAAK,OAAO,EAAE,KACzB,OAAO,OAAO,aAAa,YAC3B,WAAW,KAAK,OAAO,QAAQ,KAC/B,OAAO,OAAO,oBAAoB,YAClC,WAAW,KAAK,OAAO,eAAe,KACtC,OAAO,OAAO,sBAAsB,YACpC,OAAO,kBAAkB,SAAS,KAClC,OAAO,OAAO,uBAAuB,YACrC,eAAe,KAAK,OAAO,kBAAkB,KAC7C,OAAO,OAAO,cAAc,YAC5B,OAAO,SAAS,KAAK,MAAM,OAAO,SAAS,CAAC,MAC3C,OAAO,UAAU,aAAa,OAAO,UAAU,WAAW,OAAO,UAAU,cAC3E,OAAO,cAAc,KAAA,KACpB,OAAO,cAAc,sBACrB,OAAO,cAAc,0BACtB,OAAO,gBAAgB,KAAA,KACtB,OAAO,gBAAgB,uCACvB,OAAO,gBAAgB,2BACxB,OAAO,QAAQ,KAAA,KACb,OAAO,OAAO,QAAQ,YAAY,KAAK,WAAW,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,SAAS,IAAI,OAC5F,OAAO,gBAAgB,KAAA,KAAc,OAAO,OAAO,gBAAgB,YAAY,OAAO,YAAY,SAAS,OAC3G,OAAO,UAAU,WAAY,OAAO,QAAQ,KAAA,KAAa,OAAO,gBAAgB,KAAA;AAErF;;;;;;;AAQA,SAAS,oBAAoB,QAAwD;CACnF,IAAI,OAAO,cAAc,KAAA,KAAa,OAAO,QAAQ,KAAA,GAAW,OAAO;CACvE,MAAM,cAAc,mBAAmB,OAAO,GAAG,MAAM,GAAG,0BAA0B,EAAE;CACtF,OAAO,KAAK,SAAS,OAAO,GAAG,CAAC,CAAC,WAAW,WAAW,IAAI;EAAE,GAAG;EAAQ,WAAW;CAAmB,IAAI;AAC5G;AAEA,SAAS,WACP,QACQ;CACR,OAAO,KAAK,UAAU;EAAC,OAAO;EAAU,OAAO;EAAiB,OAAO;CAAkB,CAAC;AAC5F;;AAGA,SAAgB,kCAAkC,UAA+C;CAC/F,MAAM,OAAO,KAAK,KAAK,UAAU,UAAU;CAC3C,IAAI;CACJ,IAAI,UAA6C,KAAK;CAEtD,SAAS,OAA0C;EACjD,IAAI;GACF,MAAM,SAAkB,KAAK,MAAM,GAAG,aAAa,MAAM,MAAM,CAAC;GAChE,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,MAAM,IAAI,MAAM,eAAe;GAClF,MAAM,SAAS;GACf,IAAI,OAAO,YAAY,iBAAiB,CAAC,MAAM,QAAQ,OAAO,QAAQ,KAAK,CAAC,OAAO,SAAS,MAAM,WAAW,GAC3G,MAAM,IAAI,MAAM,kBAAkB;GACpC,MAAM,UAAoC,OAAO;GACjD,IACE,QAAQ,SAAS,gBACjB,IAAI,IAAI,QAAQ,KAAK,WAAW,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,QAAQ,UAC7D,IAAI,IAAI,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,SAAS,QAAQ,QAElD,MAAM,IAAI,MAAM,iCAAiC;GACnD,OAAO,OAAO,OAAO,QAAQ,KAAK,WAAW,OAAO,OAAO,oBAAoB,MAAM,CAAC,CAAC,CAAC;EAC1F,SAAS,OAAO;GACd,IAAK,MAAgC,SAAS,UAAU,OAAO,CAAC;GAChE,UAAU,IAAI,4BACZ,kCACA,yGACF;GACA,OAAO,CAAC;EACV;CACF;CAEA,SAAS,OAA0C;EACjD,IAAI,SAAS,MAAM;EACnB,OAAO;CACT;CAEA,SAAS,QAAQ,MAA+C;EAC9D,KAAK;EACL,MAAM,YAAY,GAAG,KAAK,GAAG,WAAW,EAAE;EAC1C,IAAI;GACF,GAAG,UAAU,UAAU;IAAE,WAAW;IAAM,MAAM;GAAM,CAAC;GACvD,MAAM,aAAa,GAAG,SAAS,WAAW,MAAM,GAAK;GACrD,IAAI;IACF,GAAG,cAAc,YAAY,GAAG,KAAK,UAAU;KAAE,SAAS;KAAe,UAAU;IAAK,GAAG,MAAM,CAAC,EAAE,GAAG;IACvG,GAAG,UAAU,UAAU;GACzB,UAAU;IACR,GAAG,UAAU,UAAU;GACzB;GACA,GAAG,WAAW,WAAW,IAAI;GAC7B,UAAU,OAAO,OAAO,KAAK,KAAK,WAAW,OAAO,OAAO,MAAM,CAAC,CAAC;EACrE,QAAQ;GACN,MAAM,IAAI,4BACR,kCACA,iFACF;EACF,UAAU;GAER,IAAI;IACF,GAAG,OAAO,WAAW,EAAE,OAAO,KAAK,CAAC;GACtC,QAAQ,CAER;EACF;CACF;CAEA,SAAS,IAAI,IAAY,iBAAiD;EACxE,MAAM,SAAS,KAAK,CAAC,CAAC,MAAM,UAAU,MAAM,OAAO,MAAM,MAAM,oBAAoB,eAAe;EAClG,IAAI,CAAC,UAAU,OAAO,UAAU,UAC9B,MAAM,IAAI,4BACR,uBACA,mFACF;EACF,OAAO;CACT;CAEA,SAAS,QAAQ,QAAwD;EACvE,QAAQ,KAAK,CAAC,CAAC,KAAK,UAAW,MAAM,OAAO,OAAO,KAAK,SAAS,KAAM,CAAC;EACxE,OAAO,IAAI,OAAO,IAAI,OAAO,eAAe;CAC9C;CAEA,OAAO;EACL;EACA;EACA,OAAO,UAAU,iBAAiB,WAChC,KAAK,CAAC,CAAC,MACJ,WACC,OAAO,aAAa,YACpB,OAAO,oBAAoB,mBAC3B,OAAO,uBAAuB,MAClC;EACF,QAAQ,UAAU,iBAAiB,mBAAmB,QAAQ;GAC5D,MAAM,WAAW,KAAK,CAAC,CAAC,MACrB,WACC,OAAO,aAAa,YACpB,OAAO,oBAAoB,mBAC3B,OAAO,uBAAuB,MAClC;GACA,IAAI,UAAU,OAAO;GACrB,IAAI,KAAK,CAAC,CAAC,UAAU,cACnB,MAAM,IAAI,4BACR,8BACA,sFACF;GACF,MAAM,SAAiC;IACrC,IAAI,WAAW;IACf;IACA;IACA;IACA,oBAAoB;IACpB,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;IAClC,OAAO;GACT;GACA,IAAI,CAAC,YAAY,MAAM,GACrB,MAAM,IAAI,4BAA4B,wBAAwB,gCAAgC;GAChG,QAAQ,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC;GAC3B,OAAO,IAAI,OAAO,IAAI,eAAe;EACvC;EACA,YAAY,IAAI,iBAAiB,MAAM;GACrC,MAAM,SAAS,IAAI,IAAI,eAAe;GACtC,IAAI,OAAO,cAAc,MACvB,OAAO,OAAO,gBAAgB,KAAA,IAAY,SAAS,QAAQ;IAAE,GAAG;IAAQ,aAAa,KAAA;GAAU,CAAC;GAClG,IAAI,OAAO,cAAc,KAAA,MAAc,OAAO,QAAQ,KAAA,KAAa,OAAO,UAAU,UAClF,MAAM,IAAI,4BACR,wBACA,oDACA,EACF;GACF,IAAI,OAAO,cAAc,KAAA,KAAa,OAAO,QAAQ,KAAA,GACnD,MAAM,IAAI,4BACR,wBACA,4FACA,EACF;GACF,OAAO,QAAQ;IAAE,GAAG;IAAQ,WAAW;IAAM,aAAa,KAAA;GAAU,CAAC;EACvE;EACA,QAAQ,IAAI,iBAAiB,KAAK;GAChC,MAAM,SAAS,IAAI,IAAI,eAAe;GACtC,IAAI,CAAC,KAAK,WAAW,GAAG,KAAK,IAAI,SAAS,IAAI,GAC5C,MAAM,IAAI,MAAM,uDAAuD;GACzE,IAAI,OAAO,QAAQ,KAAA,KAAa,OAAO,QAAQ,KAC7C,MAAM,IAAI,4BACR,wBACA,mGACA,EACF;GACF,IAAI,OAAO,QAAQ,KAAK,OAAO;GAC/B,OAAO,QAAQ;IAAE,GAAG;IAAQ;GAAI,CAAC;EACnC;EACA,KAAK,IAAI,iBAAiB,MAAM;GAC9B,MAAM,SAAS,IAAI,IAAI,eAAe;GACtC,IAAI,OAAO,UAAU,aAAa,OAAO,gBAAgB,MAAM,OAAO;GACtE,OAAO,QAAQ;IAAE,GAAG;IAAQ,aAAa;GAAK,CAAC;EACjD;EACA,KAAK,IAAI,iBAAiB,aAAa;GACrC,MAAM,SAAS,IAAI,IAAI,eAAe;GACtC,IAAI,CAAC,OAAO,OAAO,CAAC,aAAa,MAAM,IAAI,MAAM,2DAA2D;GAC5G,IAAI,OAAO,UAAU,SAAS;IAC5B,IAAI,OAAO,gBAAgB,aAAa,MAAM,IAAI,MAAM,oCAAoC;IAC5F,OAAO;GACT;GACA,OAAO,QAAQ;IAAE,GAAG;IAAQ,OAAO;IAAS;IAAa,aAAa,KAAA;GAAU,CAAC;EACnF;EACA,QAAQ,IAAI,iBAAiB;GAC3B,MAAM,SAAS,KAAK,CAAC,CAAC,MAAM,UAAU,MAAM,OAAO,MAAM,MAAM,oBAAoB,eAAe;GAClG,IAAI,CAAC,QACH,MAAM,IAAI,4BAA4B,uBAAuB,2CAA2C;GAC1G,OAAO,QAAQ;IAAE,GAAG;IAAQ,OAAO;GAAU,CAAC;EAChD;EACA,aAAa,WAAW;GACtB,MAAM,OAAO,KAAK,CAAC,CAAC,KAAK,WACvB,OAAO,OAAO,aAAa,OAAO,oBAAoB,YAAY;IAAE,GAAG;IAAQ,OAAO;GAAS,IAAI,MACrG;GACA,IAAI,KAAK,MAAM,QAAQ,UAAU,WAAW,QAAQ,MAAM,GAAG,QAAQ,IAAI;EAC3E;EACA,YAAY,UAAU;GACpB,MAAM,OAAO,KAAK,CAAC,CAAC,KAAK,WACvB,OAAO,aAAa,WAAW;IAAE,GAAG;IAAQ,OAAO;GAAS,IAAI,MAClE;GACA,IAAI,KAAK,MAAM,QAAQ,UAAU,WAAW,QAAQ,MAAM,GAAG,QAAQ,IAAI;EAC3E;CACF;AACF"}