@ainyc/canonry 4.191.0 → 4.192.1

package/dist/{chunk-WSD5J6O4.js → chunk-S5QNBQ72.js}

@@ -5,11 +5,11 @@ import {
   installSkills,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-2A7E5TDU.js";
+} from "./chunk-V4ZLHKOG.js";
 import {
   SKILL_MANIFEST_FILENAME,
   SkillsClients
-} from "./chunk-KBUV3HGS.js";
+} from "./chunk-QRNKMGVD.js";
 
 // src/skills-autosync.ts
 import fs from "fs";

package/dist/{chunk-XI6FN52S.js → chunk-T4OO575U.js}

@@ -14,7 +14,7 @@ import {
   loadConfig,
   loadConfigRaw,
   saveConfigPatch
-} from "./chunk-2A7E5TDU.js";
+} from "./chunk-V4ZLHKOG.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -162,7 +162,7 @@ import {
   siteCrawlSnapshots,
   toAlertView,
   usageCounters
-} from "./chunk-ZK4FJDCH.js";
+} from "./chunk-T6GRXUOE.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_PROVIDER_IDS,
@@ -305,7 +305,7 @@ import {
   validationError,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-KBUV3HGS.js";
+} from "./chunk-QRNKMGVD.js";
 
 // src/telemetry.ts
 import crypto from "crypto";
@@ -12041,7 +12041,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-EVRWZHDG.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-QYRQHSJH.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -15711,6 +15711,7 @@ ${lines.join("\n")}
 import crypto26 from "crypto";
 import { eq as eq22 } from "drizzle-orm";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
 var SESSION_IDLE_MS = 10 * 60 * 1e3;
 var SWEEP_INTERVAL_MS = 60 * 1e3;
 function mintSessionKey(db, scopes, userId) {
@@ -15795,12 +15796,18 @@ function registerMcpHttpRoutes(scope, opts) {
       sessionKey = mintSessionKey(opts.db, scopes, request.principal.id);
     }
     const client = new ApiClient(opts.selfApiUrl, sessionKey?.raw ?? bearer, { skipProbe: true });
-    const server = createCanonryMcpServer({
-      scope: segment.readOnly || isReadOnlyKey(scopes) ? "read-only" : "all",
-      credentialScopes: scopes,
-      tiers: segment.tiers,
-      clientFactory: () => client
-    });
+    let server;
+    try {
+      server = createCanonryMcpServer({
+        scope: segment.readOnly || isReadOnlyKey(scopes) ? "read-only" : "all",
+        credentialScopes: scopes,
+        tiers: segment.tiers,
+        clientFactory: () => client
+      });
+    } catch (error) {
+      if (sessionKey) revokeSessionKey(opts.db, sessionKey.id);
+      throw error;
+    }
     const transport = new StreamableHTTPServerTransport({
       sessionIdGenerator: () => crypto26.randomUUID(),
       onsessioninitialized: (id) => {
@@ -15808,16 +15815,25 @@ function registerMcpHttpRoutes(scope, opts) {
       }
     });
     async function close() {
-      await transport.close();
-      await server.close();
       if (sessionKey) revokeSessionKey(opts.db, sessionKey.id);
+      try {
+        await transport.close();
+      } finally {
+        await server.close();
+      }
     }
     transport.onclose = () => {
       const id = transport.sessionId;
       if (id) sessions.delete(id);
       if (sessionKey) revokeSessionKey(opts.db, sessionKey.id);
     };
-    await server.connect(transport);
+    try {
+      await server.connect(transport);
+    } catch (error) {
+      await close().catch(() => {
+      });
+      throw error;
+    }
     return { transport, close, authorizationId, segmentId: segment.id, lastSeenAt: now() };
   }
   async function handle(request, reply, segment) {
@@ -15849,12 +15865,27 @@ function registerMcpHttpRoutes(scope, opts) {
       await reply.status(404).send({ error: { code: "NOT_FOUND", message: "Unknown MCP session." } });
       return;
     }
+    if (request.method !== "POST" || !isInitializeRequest(request.body)) {
+      await reply.status(400).send({ jsonrpc: "2.0", error: { code: -32e3, message: "Bad Request: Expected an initialize request." }, id: null });
+      return;
+    }
     const opened = await openSession(request, authorizationId, segment);
     if (!opened) {
       await reply.status(401).send({ error: { code: "AUTH_REQUIRED", message: "Authentication required." } });
       return;
     }
-    await opened.transport.handleRequest(request.raw, reply.raw, request.body);
+    let handled = false;
+    try {
+      await opened.transport.handleRequest(request.raw, reply.raw, request.body);
+      handled = true;
+    } finally {
+      const openedId = opened.transport.sessionId;
+      if (!handled || reply.raw.statusCode >= 400 || openedId === void 0 || !sessions.has(openedId)) {
+        if (openedId !== void 0) sessions.delete(openedId);
+        await opened.close().catch(() => {
+        });
+      }
+    }
   }
   const config = { transportEnvelope: true };
   function mount(pathname, segment) {