@atelierai/uco 1.0.0

package/dist/server/rest/tools.js

@@ -0,0 +1,383 @@
+/**
+ * REST routes: GET /api/tools, POST /api/tools/{name}
+ *
+ * Response shapes match the .NET DirectToolCallEndpoints.cs exactly.
+ */
+import { sendJson, readJsonBody, isExplicitToolCallWrapper, sendStructuredToolCallError, createRestRequestSignal, } from './context.js';
+import { forwardToPlugin, generateRequestID, identityTuple } from './forward.js';
+import { restAuthMiddleware, extractSessionId } from './auth.js';
+import { ClientFacingMethod as Methods } from '../types.js';
+import { ErrorCode } from '../ws/envelope.js';
+import { normalizeToolCatalog } from '../../catalog.js';
+import { normalizeRestToolCall } from '../../tool-call-control.js';
+/** Whether the caller asked for fire-and-forget semantics (?async=1). */
+function isAsyncRequest(req) {
+    try {
+        const query = new URL(req.url ?? '', 'http://localhost').searchParams;
+        return query.get('async') === '1' || query.get('async') === 'true';
+    }
+    catch {
+        return false;
+    }
+}
+/** GET /api/tools — list all available tools with session filter. */
+export async function handleListTools(req, res, ctx) {
+    if (!restAuthMiddleware(req, res, { token: ctx.authToken }))
+        return;
+    const sessionId = extractSessionId(req);
+    const state = ctx.sessionStore.getOrCreate(sessionId);
+    ctx.sessionStore.touch(sessionId);
+    let response;
+    try {
+        response = (await forwardToPlugin(ctx, Methods.RunListTool, {
+            requestID: generateRequestID(),
+        }, {
+            instanceId: state.activeInstanceId,
+        }));
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : 'Plugin forwarding failed.';
+        sendJson(res, 500, { error: message });
+        return;
+    }
+    if (!response) {
+        sendJson(res, 500, { error: 'Tool hub returned a null response.' });
+        return;
+    }
+    if (response.status === 'error') {
+        sendJson(res, 500, { error: response.message ?? 'Failed to list tools.', retryable: false });
+        return;
+    }
+    const enabledTools = state.enabledTools;
+    const tools = [];
+    if (response.value) {
+        for (const tool of response.value) {
+            if (!tool)
+                continue;
+            if (enabledTools != null && !enabledTools.has(tool.name))
+                continue;
+            tools.push(tool);
+        }
+    }
+    sendJson(res, 200, normalizeToolCatalog(tools));
+}
+/** POST /api/tools/{name} — invoke a tool by name. */
+export async function handleCallTool(req, res, ctx, toolName) {
+    if (!restAuthMiddleware(req, res, { token: ctx.authToken }))
+        return;
+    if (!toolName || toolName.trim().length === 0) {
+        sendJson(res, 400, { error: 'Tool name must not be empty.' });
+        return;
+    }
+    // Parse and normalize exactly once. A bare body remains the legacy
+    // arguments object; the explicit wrapper is unwrapped only when both
+    // `arguments` and `control` are object members.
+    let body;
+    let normalized;
+    try {
+        body = await readJsonBody(req);
+        normalized = normalizeRestToolCall(toolName, body);
+    }
+    catch (err) {
+        if (isExplicitToolCallWrapper(body)) {
+            sendStructuredToolCallError(res, err);
+            return;
+        }
+        const message = err instanceof Error ? err.message : String(err);
+        sendJson(res, 400, { error: `Invalid JSON body: ${message}` });
+        return;
+    }
+    const sessionId = extractSessionId(req);
+    const state = ctx.sessionStore.getOrCreate(sessionId);
+    // Session tool-group gate.
+    if (state.enabledTools != null && !state.enabledTools.has(toolName)) {
+        sendJson(res, 403, {
+            error: `Tool '${toolName}' is not enabled in this session. Use POST /api/session/enabled-tools to enable it.`,
+        });
+        return;
+    }
+    const controlled = !normalized.context.legacy;
+    if (normalized.context.deadlineUnixMs !== undefined && normalized.context.deadlineUnixMs <= Date.now()) {
+        sendStructuredToolCallError(res, {
+            code: 'deadline_exceeded',
+            message: 'Tool call deadline expired.',
+            retryable: false,
+        }, normalized.context);
+        return;
+    }
+    // COCli-09: every forwarded call gets a bounded durable record so an
+    // observed transport timeout ("result unknown") can be resolved later.
+    // Async mode (?async=1) additionally answers 202 with the record id after
+    // dispatch; the REST request signal is deliberately NOT linked there —
+    // closing the HTTP response must not abort the plugin call (and must not
+    // send cancel-tool-call-v1 on capable plugins).
+    const asyncMode = isAsyncRequest(req);
+    const callId = normalized.context.callId ?? normalized.request.requestID;
+    const record = { callId };
+    ctx.callRecords.begin({
+        callId: record.callId,
+        requestId: normalized.request.requestID,
+        tool: toolName,
+        mode: asyncMode ? 'async' : 'sync',
+    });
+    const requestSignal = asyncMode ? null : createRestRequestSignal(req, res);
+    // Served-identity echo (COCli-01, relaxed): every success response whose
+    // serving connection reported any identity member echoes the tuple, so the
+    // executor is verifiable even without caller-asserted constraints. The echo
+    // is omitted when the tuple is identity-empty (older plugins) to avoid
+    // pure-null noise. Rejections keep carrying `observed` in error details.
+    const served = {};
+    const settleRecordFromError = (err) => {
+        if (record === undefined)
+            return;
+        const rpc = (err && typeof err === 'object' && 'code' in err ? err : undefined);
+        const message = err instanceof Error ? err.message : (typeof rpc?.message === 'string' ? rpc.message : 'Forwarding failed.');
+        if (rpc?.code === ErrorCode.CALL_CANCELLED) {
+            ctx.callRecords.settleAbandoned(record.callId, 'caller-disconnect');
+            return;
+        }
+        if (rpc?.code === ErrorCode.PLUGIN_TIMEOUT) {
+            ctx.callRecords.settleAbandoned(record.callId, 'server-wait-timeout');
+            return;
+        }
+        ctx.callRecords.settleFailed(record.callId, {
+            code: 'tool_execution_failed',
+            message,
+            retryable: false,
+        });
+    };
+    const forwardPromise = (asyncMode
+        ? forwardToPlugin(ctx, Methods.RunCallTool, normalized.request, {
+            instanceId: state.activeInstanceId,
+            deferredRequestID: normalized.request.requestID,
+            deadlineUnixMs: normalized.context.deadlineUnixMs,
+            context: normalized.context,
+            onServed: (entry) => {
+                if (served.identity === undefined)
+                    served.identity = identityTuple(entry);
+                if (record !== undefined)
+                    ctx.callRecords.markDispatched(record.callId, identityTuple(entry));
+            },
+            onDispatched: () => {
+                if (record !== undefined)
+                    ctx.callRecords.markDispatched(record.callId);
+            },
+        })
+        : forwardToPlugin(ctx, Methods.RunCallTool, normalized.request, {
+            instanceId: state.activeInstanceId,
+            deferredRequestID: normalized.request.requestID,
+            signal: requestSignal.signal,
+            deadlineUnixMs: normalized.context.deadlineUnixMs,
+            context: normalized.context,
+            onServed: (entry) => {
+                if (served.identity === undefined)
+                    served.identity = identityTuple(entry);
+            },
+        })).then((value) => {
+        if (record !== undefined)
+            ctx.callRecords.settleFromResponse(record.callId, value);
+        return value;
+    }, (err) => {
+        settleRecordFromError(err);
+        throw err;
+    });
+    if (asyncMode) {
+        // Wait (bounded) until the forwarder either dispatched to the plugin or
+        // failed pre-dispatch, then answer 202 with the durable record id.
+        if (record !== undefined) {
+            const deadline = Date.now() + 10_000;
+            while (Date.now() < deadline) {
+                const current = ctx.callRecords.get(record.callId);
+                if (current === undefined)
+                    break;
+                if (current.dispatchedAtUtc !== undefined)
+                    break;
+                if (current.state === 'failed' || current.state === 'abandoned')
+                    break;
+                await new Promise((resolve) => setTimeout(resolve, 25));
+            }
+        }
+        const current = record !== undefined ? ctx.callRecords.get(record.callId) : undefined;
+        if (current && (current.state === 'failed' || current.state === 'abandoned')) {
+            // Pre-dispatch failure (no eligible connection, etc.) — nothing is
+            // running; report it as a definitive failure.
+            sendJson(res, 502, {
+                error: current.error?.message ?? 'Async dispatch failed.',
+                retryable: current.error?.retryable ?? true,
+            });
+            return;
+        }
+        sendJson(res, 202, {
+            status: 'processing',
+            callId: record?.callId,
+            requestId: normalized.request.requestID,
+            tool: toolName,
+            transportStatus: 'accepted',
+            queryHint: `uco call get ${record?.callId ?? '<callId>'}`,
+        });
+        return;
+    }
+    let response;
+    try {
+        response = (await forwardPromise);
+    }
+    catch (err) {
+        requestSignal.dispose();
+        if (controlled) {
+            sendStructuredToolCallError(res, err, normalized.context);
+            return;
+        }
+        const message = err instanceof Error ? err.message : 'Plugin forwarding failed.';
+        sendJson(res, 500, { error: message });
+        return;
+    }
+    requestSignal.dispose();
+    ctx.sessionStore.touch(sessionId);
+    if (!response) {
+        sendJson(res, 500, { error: 'Tool hub returned a null response.' });
+        return;
+    }
+    if (response.status === 'error') {
+        // Diagnostic passthrough: the plugin puts the real failure text (compile
+        // errors, exception messages) into the first text content block and into
+        // the outer ResponseData.message, while the structured error may carry
+        // only the generic "Tool execution failed." — never let that placeholder
+        // shadow the actionable text.
+        const contentText = firstContentText(response.value);
+        const hint = toolNotFoundHint(response.message ?? contentText);
+        const diagnostic = contentText ?? response.message ?? undefined;
+        const error = mergeStructuredError(response.error ?? undefined, diagnostic, hint);
+        if (!controlled) {
+            // Legacy callers get the same structured failure (message, code,
+            // retryability) the controlled path reports, so the CLI can exit by
+            // the documented map instead of treating a tool decision as a bare
+            // HTTP-500 transport error.
+            sendStructuredToolCallError(res, error === undefined
+                ? {
+                    code: 'tool_execution_failed',
+                    message: `Tool '${toolName}' returned an error.`,
+                    retryable: false,
+                }
+                : error, normalized.context);
+            return;
+        }
+        sendStructuredToolCallError(res, error, normalized.context);
+        return;
+    }
+    const servedBy = served.identity !== undefined && hasIdentityMember(served.identity)
+        ? { servedBy: served.identity }
+        : {};
+    if (!response.value) {
+        sendJson(res, 200, {
+            status: 'success',
+            content: [],
+            transportStatus: 'forwarded',
+            ...servedBy,
+        });
+        return;
+    }
+    // Durable-operation projection (COCli-04): when the tool reported a durable
+    // operation handle, expose its authoritative identity/state/phase at the
+    // documented envelope position alongside the forwarding outcome.
+    const operationStatus = projectOperationStatus(response.value.structuredContent ?? response.value.content);
+    // Return structured content if available, otherwise return the text content blocks.
+    if (response.value.structuredContent != null) {
+        sendJson(res, 200, {
+            status: response.status,
+            structured: response.value.structuredContent,
+            ...(response.value.transaction == null ? {} : { transaction: response.value.transaction }),
+            transportStatus: 'forwarded',
+            ...(operationStatus === undefined ? {} : { operationStatus }),
+            ...servedBy,
+        });
+        return;
+    }
+    sendJson(res, 200, {
+        status: response.status,
+        content: response.value.content,
+        ...(response.value.transaction == null ? {} : { transaction: response.value.transaction }),
+        transportStatus: 'forwarded',
+        ...(operationStatus === undefined ? {} : { operationStatus }),
+        ...servedBy,
+    });
+}
+const GENERIC_TOOL_FAILURE_MESSAGES = new Set(['Tool call failed.', 'Tool execution failed.']);
+/** First bounded text content block of a plugin tool response, if any. */
+function firstContentText(value, maxLen = 1024) {
+    const text = value?.content?.find((block) => block?.type === 'text' && typeof block.text === 'string' && block.text.length > 0)?.text;
+    if (typeof text !== 'string')
+        return undefined;
+    const trimmed = text.trim();
+    if (trimmed.length === 0)
+        return undefined;
+    return trimmed.length <= maxLen ? trimmed : `${trimmed.slice(0, maxLen)}…`;
+}
+/**
+ * Replace a generic structured-error message with the actionable diagnostic
+ * text the plugin also returned, and attach the upgrade hint when present.
+ * Keeps the structured code/retryable/callId members intact.
+ */
+function mergeStructuredError(structured, diagnostic, hint) {
+    if (structured === null || typeof structured !== 'object') {
+        if (diagnostic === undefined)
+            return undefined;
+        return hint === undefined ? diagnostic : { message: diagnostic, details: { hint } };
+    }
+    const merged = { ...structured };
+    if (diagnostic !== undefined
+        && (typeof merged.message !== 'string' || merged.message.length === 0 || GENERIC_TOOL_FAILURE_MESSAGES.has(merged.message))) {
+        merged.message = diagnostic;
+    }
+    if (hint !== undefined) {
+        merged.details = typeof merged.details === 'object' && merged.details !== null
+            ? { ...merged.details, hint }
+            : { hint };
+    }
+    return merged;
+}
+/** Upgrade guidance when the connected plugin lacks a CLI-advertised tool. */
+function toolNotFoundHint(message) {
+    if (message === undefined || !/Tool with Name '.+' not found/i.test(message))
+        return undefined;
+    return "The connected plugin does not expose this tool — it is likely older than the CLI's generated command snapshot. Upgrade the project plugin (e.g. `uco install-plugin <project>`) and re-run `uco gen` if needed.";
+}
+/** Whether any identity member (besides the always-present generation) is set. */
+function hasIdentityMember(identity) {
+    return ['instanceId', 'projectPath', 'editorPid', 'unityVersion']
+        .some((key) => {
+        const value = identity[key];
+        return value !== null && value !== undefined && value !== '';
+    });
+}
+const OPERATION_WRAPPER_KEYS = ['structured', 'structuredContent', 'result', 'value'];
+/** Project { operationId, state, phase } from a durable tool payload. */
+function projectOperationStatus(payload) {
+    const queue = [payload];
+    const seen = new WeakSet();
+    for (let depth = 0; depth < queue.length && depth < 8; depth++) {
+        const current = queue[depth];
+        if (!current || typeof current !== 'object' || Array.isArray(current))
+            continue;
+        if (seen.has(current))
+            continue;
+        seen.add(current);
+        const record = current;
+        const operationId = record['OperationId'] ?? record['operationId'];
+        const state = record['Status'] ?? record['status'];
+        if (typeof operationId === 'string' && operationId.length > 0 && typeof state === 'string') {
+            const phase = record['Phase'] ?? record['phase'];
+            return {
+                operationId,
+                state,
+                phase: typeof phase === 'string' ? phase : state,
+            };
+        }
+        for (const key of OPERATION_WRAPPER_KEYS) {
+            const nested = record[key];
+            if (nested !== null && typeof nested === 'object' && !Array.isArray(nested))
+                queue.push(nested);
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=tools.js.map

package/dist/server/rest/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/server/rest/tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EACL,QAAQ,EACR,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,EAAE,kBAAkB,IAAI,OAAO,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAA2B,MAAM,4BAA4B,CAAC;AAE5F,yEAAyE;AACzE,SAAS,cAAc,CAAC,GAAoB;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,kBAAkB,CAAC,CAAC,YAAY,CAAC;QACtE,OAAO,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAoB,EAAE,GAAmB,EAAE,GAAgB;IAC/F,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QAAE,OAAO;IAEpE,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACtD,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAElC,IAAI,QAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,QAAQ,GAAG,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE;YAC1D,SAAS,EAAE,iBAAiB,EAAE;SACtB,EAAE;YACV,UAAU,EAAE,KAAK,CAAC,gBAAgB;SACnC,CAAC,CAAqC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;QACjF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,IAAI,uBAAuB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7F,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACxC,MAAM,KAAK,GAAuB,EAAE,CAAC;IAErC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,YAAY,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEnE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAoB,EACpB,GAAmB,EACnB,GAAgB,EAChB,QAAgB;IAEhB,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QAAE,OAAO;IAEpE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,mEAAmE;IACnE,qEAAqE;IACrE,gDAAgD;IAChD,IAAI,IAAa,CAAC;IAClB,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QAC/B,UAAU,GAAG,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,2BAA2B,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAEtD,2BAA2B;IAC3B,IAAI,KAAK,CAAC,YAAY,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,KAAK,EAAE,SAAS,QAAQ,qFAAqF;SAC9G,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9C,IAAI,UAAU,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACvG,2BAA2B,CAAC,GAAG,EAAE;YAC/B,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,6BAA6B;YACtC,SAAS,EAAE,KAAK;SACjB,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QACvB,OAAO;IACT,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,0EAA0E;IAC1E,uEAAuE;IACvE,yEAAyE;IACzE,gDAAgD;IAChD,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC;IACzE,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,CAAC;IAC1B,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,SAAS;QACvC,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;KACnC,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAE3E,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,yEAAyE;IACzE,MAAM,MAAM,GAA2C,EAAE,CAAC;IAE1D,MAAM,qBAAqB,GAAG,CAAC,GAAY,EAAQ,EAAE;QACnD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAqD,CAAC;QACpI,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAC7H,IAAI,GAAG,EAAE,IAAI,KAAK,SAAS,CAAC,cAAc,EAAE,CAAC;YAC3C,GAAG,CAAC,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QACD,IAAI,GAAG,EAAE,IAAI,KAAK,SAAS,CAAC,cAAc,EAAE,CAAC;YAC3C,GAAG,CAAC,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QACD,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE;YAC1C,IAAI,EAAE,uBAAuB;YAC7B,OAAO;YACP,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,CAAC,SAAS;QAC/B,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,EAAE;YAC5D,UAAU,EAAE,KAAK,CAAC,gBAAgB;YAClC,iBAAiB,EAAE,UAAU,CAAC,OAAO,CAAC,SAAS;YAC/C,cAAc,EAAE,UAAU,CAAC,OAAO,CAAC,cAAc;YACjD,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;oBAAE,MAAM,CAAC,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC1E,IAAI,MAAM,KAAK,SAAS;oBAAE,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YAChG,CAAC;YACD,YAAY,EAAE,GAAG,EAAE;gBACjB,IAAI,MAAM,KAAK,SAAS;oBAAE,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1E,CAAC;SACF,CAAC;QACJ,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,EAAE;YAC5D,UAAU,EAAE,KAAK,CAAC,gBAAgB;YAClC,iBAAiB,EAAE,UAAU,CAAC,OAAO,CAAC,SAAS;YAC/C,MAAM,EAAE,aAAc,CAAC,MAAM;YAC7B,cAAc,EAAE,UAAU,CAAC,OAAO,CAAC,cAAc;YACjD,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;oBAAE,MAAM,CAAC,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YAC5E,CAAC;SACF,CAAC,CACL,CAAC,IAAI,CACJ,CAAC,KAAK,EAAE,EAAE;QACR,IAAI,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,WAAW,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,EAAE,KAA8C,CAAC,CAAC;QAC5H,OAAO,KAAK,CAAC;IACf,CAAC,EACD,CAAC,GAAY,EAAE,EAAE;QACf,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,GAAG,CAAC;IACZ,CAAC,CACF,CAAC;IAEF,IAAI,SAAS,EAAE,CAAC;QACd,wEAAwE;QACxE,mEAAmE;QACnE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;YACrC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACnD,IAAI,OAAO,KAAK,SAAS;oBAAE,MAAM;gBACjC,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;oBAAE,MAAM;gBACjD,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW;oBAAE,MAAM;gBACvE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,CAAC,EAAE,CAAC;YAC7E,mEAAmE;YACnE,8CAA8C;YAC9C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACjB,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,IAAI,wBAAwB;gBACzD,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,IAAI,IAAI;aAC5C,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,MAAM,EAAE,MAAM;YACtB,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,SAAS;YACvC,IAAI,EAAE,QAAQ;YACd,eAAe,EAAE,UAAU;YAC3B,SAAS,EAAE,gBAAgB,MAAM,EAAE,MAAM,IAAI,UAAU,EAAE;SAC1D,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,QAA+C,CAAC;IACpD,IAAI,CAAC;QACH,QAAQ,GAAG,CAAC,MAAM,cAAc,CAAmC,CAAC;IACtE,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,aAAc,CAAC,OAAO,EAAE,CAAC;QACzB,IAAI,UAAU,EAAE,CAAC;YACf,2BAA2B,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;QACjF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IACD,aAAc,CAAC,OAAO,EAAE,CAAC;IAEzB,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAElC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,yEAAyE;QACzE,8BAA8B;QAC9B,MAAM,WAAW,GAAG,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,OAAO,IAAI,WAAW,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,WAAW,IAAI,QAAQ,CAAC,OAAO,IAAI,SAAS,CAAC;QAChE,MAAM,KAAK,GAAG,oBAAoB,CAChC,QAAQ,CAAC,KAAK,IAAI,SAAS,EAC3B,UAAU,EACV,IAAI,CACL,CAAC;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,iEAAiE;YACjE,oEAAoE;YACpE,mEAAmE;YACnE,4BAA4B;YAC5B,2BAA2B,CAAC,GAAG,EAAE,KAAK,KAAK,SAAS;gBAClD,CAAC,CAAC;oBACE,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EAAE,SAAS,QAAQ,sBAAsB;oBAChD,SAAS,EAAE,KAAK;iBACjB;gBACH,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,2BAA2B,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC;QAClF,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;QAC/B,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,EAAE;YACX,eAAe,EAAE,WAAW;YAC5B,GAAG,QAAQ;SACZ,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,iEAAiE;IACjE,MAAM,eAAe,GAAG,sBAAsB,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE3G,oFAAoF;IACpF,IAAI,QAAQ,CAAC,KAAK,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC;QAC7C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,iBAAiB;YAC5C,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAC1F,eAAe,EAAE,WAAW;YAC5B,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;YAC7D,GAAG,QAAQ;SACZ,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO;QAC/B,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC1F,eAAe,EAAE,WAAW;QAC5B,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;QAC7D,GAAG,QAAQ;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,wBAAwB,CAAC,CAAC,CAAC;AAE/F,0EAA0E;AAC1E,SAAS,gBAAgB,CAAC,KAA0C,EAAE,MAAM,GAAG,IAAI;IACjF,MAAM,IAAI,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC;IACtI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,UAA+D,EAC/D,UAA8B,EAC9B,IAAwB;IAExB,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC1D,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC/C,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;IACtF,CAAC;IACD,MAAM,MAAM,GAA4B,EAAE,GAAG,UAAU,EAAE,CAAC;IAC1D,IAAI,UAAU,KAAK,SAAS;WACvB,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,6BAA6B,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC9H,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC;IAC9B,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,CAAC,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;YAC5E,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,OAAkC,EAAE,IAAI,EAAE;YACxD,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,SAAS,gBAAgB,CAAC,OAA2B;IACnD,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/F,OAAO,iNAAiN,CAAC;AAC3N,CAAC;AAED,kFAAkF;AAClF,SAAS,iBAAiB,CAAC,QAAiC;IAC1D,OAAO,CAAC,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,CAAC;SAC9D,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,sBAAsB,GAAG,CAAC,YAAY,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AAE/F,yEAAyE;AACzE,SAAS,sBAAsB,CAAC,OAAgB;IAC9C,MAAM,KAAK,GAAc,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IACnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS;QAChF,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QAChC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,MAAM,MAAM,GAAG,OAAkC,CAAC;QAClD,MAAM,WAAW,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;YACjD,OAAO;gBACL,WAAW;gBACX,KAAK;gBACL,KAAK,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;aACjD,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,sBAAsB,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/server/session/store.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Session state store — mirrors the .NET ISessionStateStore.
+ *
+ * `Map<sessionId, SessionState>` with session-ID resolution from the
+ * `Mcp-Session-Id` header (defaults to a stdio sentinel).
+ *
+ * Session sweeper removes sessions idle > 30 minutes.
+ */
+export interface SessionState {
+    sessionId: string;
+    activeInstanceId: string | null;
+    /** null = all tools enabled; non-null = only these tool names allowed. */
+    enabledTools: Set<string> | null;
+    lastSeenUtc: Date;
+}
+/**
+ * Resolve the session ID from the Mcp-Session-Id header.
+ * Falls back to the stdio sentinel when missing.
+ */
+export declare function resolveSessionId(headers: {
+    'mcp-session-id'?: string;
+}): string;
+export declare class SessionStateStore {
+    private readonly sessions;
+    private sweeperTimer;
+    getOrCreate(sessionId: string): SessionState;
+    tryGet(sessionId: string): SessionState | undefined;
+    touch(sessionId: string): void;
+    snapshot(): SessionState[];
+    /** Start the periodic idle-session sweeper. */
+    startSweeper(intervalMs?: number): void;
+    /** Remove sessions idle for more than SESSION_IDLE_TIMEOUT_MS. */
+    sweep(): number;
+    /** Stop the sweeper and clear all sessions. */
+    dispose(): void;
+}

package/dist/server/session/store.js

@@ -0,0 +1,75 @@
+/**
+ * Session state store — mirrors the .NET ISessionStateStore.
+ *
+ * `Map<sessionId, SessionState>` with session-ID resolution from the
+ * `Mcp-Session-Id` header (defaults to a stdio sentinel).
+ *
+ * Session sweeper removes sessions idle > 30 minutes.
+ */
+import { SESSION_IDLE_TIMEOUT_MS, STDIO_SESSION_ID } from '../types.js';
+/**
+ * Resolve the session ID from the Mcp-Session-Id header.
+ * Falls back to the stdio sentinel when missing.
+ */
+export function resolveSessionId(headers) {
+    return headers['mcp-session-id'] ?? STDIO_SESSION_ID;
+}
+export class SessionStateStore {
+    sessions = new Map();
+    sweeperTimer = null;
+    getOrCreate(sessionId) {
+        let state = this.sessions.get(sessionId);
+        if (!state) {
+            state = {
+                sessionId,
+                activeInstanceId: null,
+                enabledTools: null,
+                lastSeenUtc: new Date(),
+            };
+            this.sessions.set(sessionId, state);
+        }
+        return state;
+    }
+    tryGet(sessionId) {
+        return this.sessions.get(sessionId);
+    }
+    touch(sessionId) {
+        const state = this.sessions.get(sessionId);
+        if (state)
+            state.lastSeenUtc = new Date();
+    }
+    snapshot() {
+        return Array.from(this.sessions.values());
+    }
+    /** Start the periodic idle-session sweeper. */
+    startSweeper(intervalMs = 5 * 60 * 1000) {
+        if (this.sweeperTimer)
+            return;
+        this.sweeperTimer = setInterval(() => this.sweep(), intervalMs);
+        // Don't keep the process alive just for the sweeper.
+        if (this.sweeperTimer && typeof this.sweeperTimer.unref === 'function') {
+            this.sweeperTimer.unref();
+        }
+    }
+    /** Remove sessions idle for more than SESSION_IDLE_TIMEOUT_MS. */
+    sweep() {
+        const now = Date.now();
+        let removed = 0;
+        for (const [id, state] of this.sessions) {
+            if (now - state.lastSeenUtc.getTime() > SESSION_IDLE_TIMEOUT_MS) {
+                this.sessions.delete(id);
+                removed++;
+            }
+        }
+        return removed;
+    }
+    /** Stop the sweeper and clear all sessions. */
+    dispose() {
+        if (this.sweeperTimer) {
+            clearInterval(this.sweeperTimer);
+            this.sweeperTimer = null;
+        }
+        this.sessions.clear();
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/server/session/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/server/session/store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAUxE;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAsC;IACrE,OAAO,OAAO,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,CAAC;AACvD,CAAC;AAED,MAAM,OAAO,iBAAiB;IACX,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IACpD,YAAY,GAA0C,IAAI,CAAC;IAEnE,WAAW,CAAC,SAAiB;QAC3B,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG;gBACN,SAAS;gBACT,gBAAgB,EAAE,IAAI;gBACtB,YAAY,EAAE,IAAI;gBAClB,WAAW,EAAE,IAAI,IAAI,EAAE;aACxB,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,SAAiB;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,KAAK;YAAE,KAAK,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;IAC5C,CAAC;IAED,QAAQ;QACN,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,+CAA+C;IAC/C,YAAY,CAAC,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI;QACrC,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAC9B,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;QAChE,qDAAqD;QACrD,IAAI,IAAI,CAAC,YAAY,IAAI,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACvE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,KAAK;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxC,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;gBAChE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzB,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,+CAA+C;IAC/C,OAAO;QACL,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF"}

package/dist/server/stub-client/index.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Stub-plugin client — connects to the WS hub and responds to all 14 client-facing
+ * methods with canned/realistic data. Used to validate the JSON envelope contract
+ * end-to-end before the C# plugin rewrite (child 2).
+ *
+ * Can also send the 7 server-facing methods to the server (see scenarios.ts).
+ */
+import type { ResponseListTool, ResponsePrompt, ResponseListResource, ResponseResourceTemplate } from '../types.js';
+export interface StubClientOptions {
+    url: string;
+    token?: string;
+    instanceId?: string;
+    /** Delay before responding to requests (ms), to simulate plugin latency. */
+    responseDelayMs?: number;
+}
+export interface StubPluginData {
+    tools: ResponseListTool[];
+    prompts: ResponsePrompt[];
+    resources: ResponseListResource[];
+    resourceTemplates: ResponseResourceTemplate[];
+}
+/** Default canned data returned by the stub client. */
+export declare const DEFAULT_STUB_DATA: StubPluginData;
+export declare class StubPluginClient {
+    private ws;
+    private nextId;
+    private readonly options;
+    private readonly data;
+    readonly notifications: {
+        method: string;
+        params: unknown;
+    }[];
+    constructor(options: StubClientOptions, data?: StubPluginData);
+    /** Connect to the WebSocket hub. Returns a promise that resolves on open. */
+    connect(): Promise<void>;
+    /** Disconnect from the hub. */
+    disconnect(): void;
+    /** Whether the client is connected. */
+    get isConnected(): boolean;
+    /**
+     * Send a server-facing request and await the response.
+     * Used by scenarios.ts to exercise the 7 server-facing methods.
+     */
+    sendServerRequest(method: string, params?: unknown): Promise<unknown>;
+    private handleMessage;
+    private handleRequest;
+    private makeListToolResponse;
+    private makeCallToolResponse;
+    private makeGetPromptResponse;
+    private makeListPromptsResponse;
+    private makeResourceContentResponse;
+    private makeListResourcesResponse;
+    private makeResourceTemplatesResponse;
+}