@darkiceinteractive/mcp-conductor 2.0.0-alpha.1 → 3.0.0-beta.1

package/dist/daemon/sandbox-api.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Sandbox `mcp.shared.*` API.
+ *
+ * Provides the shared KV, lock, broadcast, and subscribe surfaces that are
+ * injected into the sandbox runtime when a DaemonClient is available.
+ *
+ * When no daemon is available (v2 mode), all operations are no-ops or return
+ * null so existing code paths are not broken.
+ *
+ * This module is imported by the worker preload hook (Agent D's Phase 5 hook)
+ * via:
+ *
+ *   import { createSharedApi } from '../daemon/sandbox-api.js';
+ *   const mcp = { ..., shared: createSharedApi(daemonClient) };
+ *
+ * @module daemon/sandbox-api
+ */
+import type { DaemonClient } from './client.js';
+export interface SharedKVApi {
+    get<T>(key: string): Promise<T | null>;
+    set<T>(key: string, value: T, options?: {
+        ttl?: number;
+    }): Promise<void>;
+    delete(key: string): Promise<void>;
+    list(prefix?: string): Promise<string[]>;
+}
+export interface SharedApi {
+    kv: SharedKVApi;
+    lock(key: string, options?: {
+        timeoutMs?: number;
+    }): Promise<{
+        release: () => Promise<void>;
+    }>;
+    broadcast(channel: string, message: unknown): Promise<void>;
+    subscribe(channel: string, handler: (msg: unknown) => void): Promise<{
+        unsubscribe: () => void;
+    }>;
+}
+/**
+ * Create the `mcp.shared` API bound to a live DaemonClient.
+ *
+ * Pass `null` for `client` to get a no-op stub (standalone mode).
+ */
+export declare function createSharedApi(client: DaemonClient | null): SharedApi;
+//# sourceMappingURL=sandbox-api.d.ts.map

package/dist/daemon/sandbox-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-api.d.ts","sourceRoot":"","sources":["../../src/daemon/sandbox-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,WAAW,CAAC;IAChB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC,CAAC;IAC/F,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,IAAI,CAAA;KAAE,CAAC,CAAC;CACnG;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,CAiCtE"}

package/dist/daemon/sandbox-api.js

@@ -0,0 +1,74 @@
+/**
+ * Sandbox `mcp.shared.*` API.
+ *
+ * Provides the shared KV, lock, broadcast, and subscribe surfaces that are
+ * injected into the sandbox runtime when a DaemonClient is available.
+ *
+ * When no daemon is available (v2 mode), all operations are no-ops or return
+ * null so existing code paths are not broken.
+ *
+ * This module is imported by the worker preload hook (Agent D's Phase 5 hook)
+ * via:
+ *
+ *   import { createSharedApi } from '../daemon/sandbox-api.js';
+ *   const mcp = { ..., shared: createSharedApi(daemonClient) };
+ *
+ * @module daemon/sandbox-api
+ */
+/**
+ * Create the `mcp.shared` API bound to a live DaemonClient.
+ *
+ * Pass `null` for `client` to get a no-op stub (standalone mode).
+ */
+export function createSharedApi(client) {
+    if (client === null) {
+        return createNoopSharedApi();
+    }
+    return {
+        kv: {
+            async get(key) {
+                return client.kvGet(key);
+            },
+            async set(key, value, options) {
+                return client.kvSet(key, value, options);
+            },
+            async delete(key) {
+                return client.kvDelete(key);
+            },
+            async list(prefix) {
+                return client.kvList(prefix);
+            },
+        },
+        async lock(key, options) {
+            return client.lockAcquire(key, options);
+        },
+        async broadcast(channel, message) {
+            return client.broadcast(channel, message);
+        },
+        async subscribe(channel, handler) {
+            return Promise.resolve(client.subscribe(channel, handler));
+        },
+    };
+}
+/**
+ * No-op shared API for when no daemon is available (v2 standalone mode).
+ * All KV operations return null / empty results; locks are immediate no-ops.
+ */
+function createNoopSharedApi() {
+    return {
+        kv: {
+            async get(_key) { return null; },
+            async set(_key, _value) { },
+            async delete(_key) { },
+            async list(_prefix) { return []; },
+        },
+        async lock(_key) {
+            return { release: async () => { } };
+        },
+        async broadcast(_channel, _message) { },
+        async subscribe(_channel, _handler) {
+            return { unsubscribe: () => { } };
+        },
+    };
+}
+//# sourceMappingURL=sandbox-api.js.map

package/dist/daemon/sandbox-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-api.js","sourceRoot":"","sources":["../../src/daemon/sandbox-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAkBH;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAA2B;IACzD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,mBAAmB,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,EAAE,EAAE;YACF,KAAK,CAAC,GAAG,CAAI,GAAW;gBACtB,OAAO,MAAM,CAAC,KAAK,CAAI,GAAG,CAAC,CAAC;YAC9B,CAAC;YACD,KAAK,CAAC,GAAG,CAAI,GAAW,EAAE,KAAQ,EAAE,OAA0B;gBAC5D,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,GAAW;gBACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,MAAe;gBACxB,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;SACF;QAED,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,OAAgC;YACtD,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,OAAgB;YAC/C,OAAO,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,OAA+B;YAC9D,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB;IAC1B,OAAO;QACL,EAAE,EAAE;YACF,KAAK,CAAC,GAAG,CAAI,IAAY,IAAuB,OAAO,IAAI,CAAC,CAAC,CAAC;YAC9D,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,MAAe,IAAkB,CAAC;YAC1D,KAAK,CAAC,MAAM,CAAC,IAAY,IAAkB,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,OAAgB,IAAuB,OAAO,EAAE,CAAC,CAAC,CAAC;SAC/D;QACD,KAAK,CAAC,IAAI,CAAC,IAAY;YACrB,OAAO,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,CAAC;QACrC,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,QAAiB,IAAG,CAAC;QACvD,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,QAAgC;YAChE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/daemon/server.d.ts

@@ -0,0 +1,65 @@
+/**
+ * MCP Conductor Daemon Server.
+ *
+ * Listens on a Unix domain socket (primary) and optionally a TCP port (for
+ * Tailscale-mesh clients). Enforces HMAC-SHA256 auth on every connection using
+ * the shared secret loaded from `~/.mcp-conductor/daemon-auth.json`.
+ *
+ * Protocol (newline-delimited JSON):
+ *   Client → Server:  { id, method, params }
+ *   Server → Client:  { id, result } | { id, error }
+ *
+ * The daemon owns a SharedKV, SharedLock, and in-process pub/sub bus that all
+ * connected clients share.
+ *
+ * @module daemon/server
+ */
+import { SharedKV } from './shared-kv.js';
+import { SharedLock } from './shared-lock.js';
+export interface DaemonStats {
+    uptime: number;
+    connectedClients: number;
+    kvKeys: number;
+    activeLocks: boolean;
+    requestsHandled: number;
+}
+export interface DaemonServerOptions {
+    socketPath?: string;
+    tcpPort?: number;
+    tailscaleHostname?: string;
+    auth?: {
+        sharedSecretPath?: string;
+        sharedSecret?: string;
+    };
+    kvOptions?: ConstructorParameters<typeof SharedKV>[0];
+}
+export declare class DaemonServer {
+    private readonly socketPath;
+    private readonly tcpPort?;
+    private readonly sharedSecret;
+    private readonly kv;
+    private readonly lock;
+    private readonly bus;
+    private unixServer?;
+    private tcpServer?;
+    /** Map from socket to per-client state (including lock handles). */
+    private readonly clients;
+    private readonly startTime;
+    private requestsHandled;
+    private running;
+    constructor(options?: DaemonServerOptions);
+    start(): Promise<void>;
+    shutdown(): Promise<void>;
+    stats(): DaemonStats;
+    private startUnixServer;
+    private startTcpServer;
+    private closeServer;
+    private handleConnection;
+    private handleAuth;
+    private handleRequest;
+    private dispatch;
+    private sendRaw;
+    get kvStore(): SharedKV;
+    get lockRegistry(): SharedLock;
+}
+//# sourceMappingURL=server.d.ts.map

package/dist/daemon/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/daemon/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAWH,OAAO,EAAE,QAAQ,EAAqB,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAmB,MAAM,kBAAkB,CAAC;AAqF/D,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;CACzB;AAMD,MAAM,WAAW,mBAAmB;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,IAAI,CAAC,EAAE;QACL,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,SAAS,CAAC,EAAE,qBAAqB,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;CACvD;AAMD,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAW;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAa;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAmB;IAEvC,OAAO,CAAC,UAAU,CAAC,CAAY;IAC/B,OAAO,CAAC,SAAS,CAAC,CAAY;IAC9B,oEAAoE;IACpE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAC1D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAc;IACxC,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,GAAE,mBAAwB;IAevC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAsBtB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IA2B/B,KAAK,IAAI,WAAW;IAcpB,OAAO,CAAC,eAAe;IAiBvB,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,WAAW;IAWnB,OAAO,CAAC,gBAAgB;IA2DxB,OAAO,CAAC,UAAU;YAgCJ,aAAa;YAcb,QAAQ;IA0FtB,OAAO,CAAC,OAAO;IAcf,IAAI,OAAO,IAAI,QAAQ,CAAoB;IAC3C,IAAI,YAAY,IAAI,UAAU,CAAsB;CACrD"}

package/dist/daemon/server.js

@@ -0,0 +1,351 @@
+/**
+ * MCP Conductor Daemon Server.
+ *
+ * Listens on a Unix domain socket (primary) and optionally a TCP port (for
+ * Tailscale-mesh clients). Enforces HMAC-SHA256 auth on every connection using
+ * the shared secret loaded from `~/.mcp-conductor/daemon-auth.json`.
+ *
+ * Protocol (newline-delimited JSON):
+ *   Client → Server:  { id, method, params }
+ *   Server → Client:  { id, result } | { id, error }
+ *
+ * The daemon owns a SharedKV, SharedLock, and in-process pub/sub bus that all
+ * connected clients share.
+ *
+ * @module daemon/server
+ */
+import { createServer } from 'node:net';
+import { existsSync, mkdirSync, writeFileSync, readFileSync, chmodSync, unlinkSync, } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { EventEmitter } from 'node:events';
+import { logger } from '../utils/logger.js';
+import { SharedKV } from './shared-kv.js';
+import { SharedLock } from './shared-lock.js';
+const DEFAULT_AUTH_PATH = join(homedir(), '.mcp-conductor', 'daemon-auth.json');
+const DEFAULT_SOCKET_PATH = join(homedir(), '.mcp-conductor', 'daemon.sock');
+const CONDUCTOR_DIR = join(homedir(), '.mcp-conductor');
+function loadOrCreateSecret(authPath) {
+    if (existsSync(authPath)) {
+        const raw = readFileSync(authPath, 'utf-8');
+        return JSON.parse(raw).sharedSecret;
+    }
+    mkdirSync(CONDUCTOR_DIR, { recursive: true });
+    const secret = randomBytes(32).toString('hex');
+    const content = { sharedSecret: secret };
+    writeFileSync(authPath, JSON.stringify(content, null, 2), 'utf-8');
+    chmodSync(authPath, 0o600);
+    logger.info('DaemonServer: generated new shared secret', { authPath });
+    return secret;
+}
+function hmacToken(secret, nonce) {
+    return createHmac('sha256', secret).update(nonce).digest('hex');
+}
+class PubSubBus {
+    emitter = new EventEmitter();
+    subscribe(channel, handler) {
+        this.emitter.on(channel, handler);
+        return { unsubscribe: () => this.emitter.off(channel, handler) };
+    }
+    broadcast(channel, message) {
+        this.emitter.emit(channel, message);
+    }
+}
+// ---------------------------------------------------------------------------
+// DaemonServer
+// ---------------------------------------------------------------------------
+export class DaemonServer {
+    socketPath;
+    tcpPort;
+    sharedSecret;
+    kv;
+    lock;
+    bus = new PubSubBus();
+    unixServer;
+    tcpServer;
+    /** Map from socket to per-client state (including lock handles). */
+    clients = new Map();
+    startTime = Date.now();
+    requestsHandled = 0;
+    running = false;
+    constructor(options = {}) {
+        this.socketPath = options.socketPath ?? DEFAULT_SOCKET_PATH;
+        this.tcpPort = options.tcpPort;
+        const authPath = options.auth?.sharedSecretPath ?? DEFAULT_AUTH_PATH;
+        this.sharedSecret = options.auth?.sharedSecret ?? loadOrCreateSecret(authPath);
+        this.kv = new SharedKV(options.kvOptions);
+        this.lock = new SharedLock();
+    }
+    // ---------------------------------------------------------------------------
+    // Lifecycle
+    // ---------------------------------------------------------------------------
+    async start() {
+        if (this.running)
+            throw new Error('DaemonServer is already running');
+        this.running = true;
+        mkdirSync(CONDUCTOR_DIR, { recursive: true });
+        if (existsSync(this.socketPath)) {
+            unlinkSync(this.socketPath);
+        }
+        await this.startUnixServer();
+        if (this.tcpPort !== undefined) {
+            await this.startTcpServer();
+        }
+        logger.info('DaemonServer: started', {
+            socketPath: this.socketPath,
+            tcpPort: this.tcpPort,
+        });
+    }
+    async shutdown() {
+        this.running = false;
+        const closePromises = [];
+        for (const [socket] of this.clients) {
+            closePromises.push(new Promise((resolve) => {
+                socket.once('close', resolve);
+                socket.end();
+                setTimeout(() => { socket.destroy(); resolve(); }, 2000);
+            }));
+        }
+        await Promise.all(closePromises);
+        this.clients.clear();
+        await Promise.all([
+            this.closeServer(this.unixServer),
+            this.closeServer(this.tcpServer),
+        ]);
+        if (existsSync(this.socketPath)) {
+            try {
+                unlinkSync(this.socketPath);
+            }
+            catch { /* ignore */ }
+        }
+        await this.kv.shutdown();
+        logger.info('DaemonServer: shutdown complete');
+    }
+    stats() {
+        return {
+            uptime: Date.now() - this.startTime,
+            connectedClients: this.clients.size,
+            kvKeys: this.kv.size,
+            activeLocks: this.lock.hasActiveLocks,
+            requestsHandled: this.requestsHandled,
+        };
+    }
+    // ---------------------------------------------------------------------------
+    // Server startup helpers
+    // ---------------------------------------------------------------------------
+    startUnixServer() {
+        return new Promise((resolve, reject) => {
+            const server = createServer((socket) => this.handleConnection(socket));
+            this.unixServer = server;
+            server.once('error', reject);
+            server.listen(this.socketPath, () => {
+                try {
+                    chmodSync(this.socketPath, 0o600);
+                }
+                catch { /* ignore */ }
+                server.removeListener('error', reject);
+                server.on('error', (err) => {
+                    logger.error('DaemonServer Unix socket error', { error: String(err) });
+                });
+                resolve();
+            });
+        });
+    }
+    startTcpServer() {
+        return new Promise((resolve, reject) => {
+            const server = createServer((socket) => this.handleConnection(socket));
+            this.tcpServer = server;
+            server.once('error', reject);
+            server.listen(this.tcpPort, '127.0.0.1', () => {
+                server.removeListener('error', reject);
+                server.on('error', (err) => {
+                    logger.error('DaemonServer TCP error', { error: String(err) });
+                });
+                logger.info('DaemonServer: TCP listening', { port: this.tcpPort });
+                resolve();
+            });
+        });
+    }
+    closeServer(server) {
+        if (!server)
+            return Promise.resolve();
+        return new Promise((resolve) => {
+            server.close(() => resolve());
+        });
+    }
+    // ---------------------------------------------------------------------------
+    // Connection handling
+    // ---------------------------------------------------------------------------
+    handleConnection(socket) {
+        const state = { socket, lockHandles: new Map() };
+        this.clients.set(socket, state);
+        logger.debug('DaemonServer: client connected', { clients: this.clients.size });
+        let authenticated = false;
+        let buffer = '';
+        const nonce = randomBytes(16).toString('hex');
+        this.sendRaw(socket, { id: '__auth_challenge__', result: { nonce } });
+        socket.setEncoding('utf-8');
+        socket.on('data', (chunk) => {
+            buffer += chunk;
+            const lines = buffer.split('\n');
+            buffer = lines.pop() ?? '';
+            for (const line of lines) {
+                const trimmed = line.trim();
+                if (!trimmed)
+                    continue;
+                try {
+                    const msg = JSON.parse(trimmed);
+                    if (!authenticated) {
+                        this.handleAuth(socket, msg, nonce, (ok) => {
+                            authenticated = ok;
+                            if (!ok)
+                                socket.destroy();
+                        });
+                        return;
+                    }
+                    // Handle requests without blocking the data handler.
+                    this.handleRequest(socket, state, msg).catch((err) => {
+                        logger.error('DaemonServer: request handler error', { error: String(err) });
+                    });
+                }
+                catch {
+                    logger.warn('DaemonServer: malformed JSON from client');
+                }
+            }
+        });
+        socket.on('close', () => {
+            // Release all locks held by this client on disconnect.
+            for (const [key, handle] of state.lockHandles) {
+                handle.release().catch(() => { });
+                logger.debug('DaemonServer: auto-released lock on disconnect', { key });
+            }
+            state.lockHandles.clear();
+            this.clients.delete(socket);
+            logger.debug('DaemonServer: client disconnected', { clients: this.clients.size });
+        });
+        socket.on('error', (err) => {
+            logger.debug('DaemonServer: client socket error', { error: String(err) });
+            this.clients.delete(socket);
+        });
+    }
+    handleAuth(socket, msg, nonce, callback) {
+        const params = msg.params;
+        const token = params?.token;
+        if (!token) {
+            this.sendRaw(socket, { id: msg.id, error: { code: 401, message: 'Missing auth token' } });
+            callback(false);
+            return;
+        }
+        const expected = hmacToken(this.sharedSecret, nonce);
+        const expectedBuf = Buffer.from(expected, 'utf-8');
+        const providedBuf = Buffer.from(token, 'utf-8');
+        const ok = expectedBuf.length === providedBuf.length &&
+            timingSafeEqual(expectedBuf, providedBuf);
+        if (ok) {
+            this.sendRaw(socket, { id: msg.id, result: { authenticated: true } });
+            callback(true);
+        }
+        else {
+            this.sendRaw(socket, { id: msg.id, error: { code: 401, message: 'Invalid auth token' } });
+            callback(false);
+        }
+    }
+    async handleRequest(socket, state, msg) {
+        this.requestsHandled++;
+        try {
+            const result = await this.dispatch(msg.method, msg.params, socket, state);
+            this.sendRaw(socket, { id: msg.id, result });
+        }
+        catch (err) {
+            this.sendRaw(socket, {
+                id: msg.id,
+                error: { code: 500, message: String(err) },
+            });
+        }
+    }
+    async dispatch(method, params, socket, state) {
+        const p = params;
+        switch (method) {
+            // KV
+            case 'kv.get':
+                return this.kv.get(p?.key);
+            case 'kv.set':
+                this.kv.set(p?.key, p?.value, p?.options);
+                return null;
+            case 'kv.delete':
+                this.kv.delete(p?.key);
+                return null;
+            case 'kv.list':
+                return this.kv.list(p?.prefix);
+            // Locks
+            case 'lock.acquire': {
+                const key = p?.key;
+                const timeoutMs = p?.timeoutMs;
+                // Acquire the lock — this awaits until the lock is free.
+                // Node.js is async; concurrent awaits on different sockets yield to
+                // the event loop, so release RPCs from other clients can proceed.
+                const handle = await this.lock.acquire(key, { timeoutMs });
+                // Persist the handle so lock.release can find and call it.
+                // Use a composite key of lockKey + requestId to support multiple
+                // concurrent locks per client on different keys.
+                state.lockHandles.set(key, handle);
+                return { acquired: true, key };
+            }
+            case 'lock.release': {
+                const key = p?.key;
+                const handle = state.lockHandles.get(key);
+                if (handle) {
+                    state.lockHandles.delete(key);
+                    await handle.release();
+                    return { released: true };
+                }
+                return { released: false, reason: 'no handle found for key' };
+            }
+            // Pub/sub
+            case 'broadcast': {
+                const channel = p?.channel;
+                const message = p?.message;
+                this.bus.broadcast(channel, message);
+                const pushPayload = JSON.stringify({ id: '__push__', result: { channel, message } });
+                for (const [client] of this.clients) {
+                    if (!client.destroyed) {
+                        client.write(pushPayload + '\n');
+                    }
+                }
+                return null;
+            }
+            case 'subscribe':
+                return { subscribed: true };
+            // Meta
+            case 'ping':
+                return { pong: true };
+            case 'stats':
+                return this.stats();
+            case 'tool.call':
+                // Placeholder — actual tool dispatch handled by the MCP server layer.
+                throw new Error('tool.call not implemented in daemon v3.0 (agents use direct mode)');
+            default:
+                throw new Error(`Unknown method: ${method}`);
+        }
+    }
+    // ---------------------------------------------------------------------------
+    // Wire helpers
+    // ---------------------------------------------------------------------------
+    sendRaw(socket, msg) {
+        if (!socket.destroyed) {
+            try {
+                socket.write(JSON.stringify(msg) + '\n');
+            }
+            catch (err) {
+                logger.debug('DaemonServer: failed to write to client', { error: String(err) });
+            }
+        }
+    }
+    // ---------------------------------------------------------------------------
+    // Expose internals for integration tests
+    // ---------------------------------------------------------------------------
+    get kvStore() { return this.kv; }
+    get lockRegistry() { return this.lock; }
+}
+//# sourceMappingURL=server.js.map

package/dist/daemon/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/daemon/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAyC,MAAM,UAAU,CAAC;AAC/E,OAAO,EACL,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,GAC1E,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAqB,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAmB,MAAM,kBAAkB,CAAC;AAU/D,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;AAChF,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;AAC7E,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,CAAC;AAExD,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,OAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC,YAAY,CAAC;IACpD,CAAC;IACD,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAa,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IACnD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACnE,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3B,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,KAAa;IAC9C,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAwBD,MAAM,SAAS;IACI,OAAO,GAAG,IAAI,YAAY,EAAE,CAAC;IAE9C,SAAS,CAAC,OAAe,EAAE,OAAuB;QAChD,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;IACnE,CAAC;IAED,SAAS,CAAC,OAAe,EAAE,OAAgB;QACzC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;CACF;AA2CD,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,OAAO,YAAY;IACN,UAAU,CAAS;IACnB,OAAO,CAAU;IACjB,YAAY,CAAS;IACrB,EAAE,CAAW;IACb,IAAI,CAAa;IACjB,GAAG,GAAG,IAAI,SAAS,EAAE,CAAC;IAE/B,UAAU,CAAa;IACvB,SAAS,CAAa;IAC9B,oEAAoE;IACnD,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,eAAe,GAAG,CAAC,CAAC;IACpB,OAAO,GAAG,KAAK,CAAC;IAExB,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC5D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAE/B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,gBAAgB,IAAI,iBAAiB,CAAC;QACrE,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,YAAY,IAAI,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAE/E,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC;IAC/B,CAAC;IAED,8EAA8E;IAC9E,YAAY;IACZ,8EAA8E;IAE9E,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9C,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAED,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAE7B,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;YACnC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QAErB,MAAM,aAAa,GAAoB,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,aAAa,CAAC,IAAI,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC/C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC9B,MAAM,CAAC,GAAG,EAAE,CAAC;gBACb,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC3D,CAAC,CAAC,CAAC,CAAC;QACN,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAErB,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;YACjC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC;SACjC,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;IAED,KAAK;QACH,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS;YACnC,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACnC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI;YACpB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc;YACrC,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,yBAAyB;IACzB,8EAA8E;IAEtE,eAAe;QACrB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;YAEzB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE;gBAClC,IAAI,CAAC;oBAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACjE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACvC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBACzB,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACzE,CAAC,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,cAAc;QACpB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;YAExB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAQ,EAAE,WAAW,EAAE,GAAG,EAAE;gBAC7C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACvC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBACzB,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACjE,CAAC,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnE,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CAAC,MAAkB;QACpC,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,sBAAsB;IACtB,8EAA8E;IAEtE,gBAAgB,CAAC,MAAc;QACrC,MAAM,KAAK,GAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QAC9D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAE/E,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAEtE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,MAAM,IAAI,KAAK,CAAC;YAChB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO;oBAAE,SAAS;gBAEvB,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAe,CAAC;oBAE9C,IAAI,CAAC,aAAa,EAAE,CAAC;wBACnB,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE;4BACzC,aAAa,GAAG,EAAE,CAAC;4BACnB,IAAI,CAAC,EAAE;gCAAE,MAAM,CAAC,OAAO,EAAE,CAAC;wBAC5B,CAAC,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBAED,qDAAqD;oBACrD,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBACnD,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC9E,CAAC,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,uDAAuD;YACvD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC9C,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACjC,MAAM,CAAC,KAAK,CAAC,gDAAgD,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAChB,MAAc,EACd,GAAe,EACf,KAAa,EACb,QAA+B;QAE/B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAwC,CAAC;QAC5D,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,CAAC;QAE5B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAC;YAC1F,QAAQ,CAAC,KAAK,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAEhD,MAAM,EAAE,GACN,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;YACzC,eAAe,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAE5C,IAAI,EAAE,EAAE,CAAC;YACP,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACtE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAC;YAC1F,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,KAAkB,EAAE,GAAe;QAC7E,IAAI,CAAC,eAAe,EAAE,CAAC;QAEvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAC1E,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;gBACnB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,MAAc,EACd,MAAe,EACf,MAAc,EACd,KAAkB;QAElB,MAAM,CAAC,GAAG,MAA6C,CAAC;QAExD,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK;YACL,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,GAAa,CAAC,CAAC;YAEvC,KAAK,QAAQ;gBACX,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,GAAa,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAmC,CAAC,CAAC;gBAChF,OAAO,IAAI,CAAC;YAEd,KAAK,WAAW;gBACd,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,GAAa,CAAC,CAAC;gBACjC,OAAO,IAAI,CAAC;YAEd,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,MAA4B,CAAC,CAAC;YAEvD,QAAQ;YACR,KAAK,cAAc,CAAC,CAAC,CAAC;gBACpB,MAAM,GAAG,GAAG,CAAC,EAAE,GAAa,CAAC;gBAC7B,MAAM,SAAS,GAAG,CAAC,EAAE,SAA+B,CAAC;gBAErD,yDAAyD;gBACzD,oEAAoE;gBACpE,kEAAkE;gBAClE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBAE3D,2DAA2D;gBAC3D,iEAAiE;gBACjE,iDAAiD;gBACjD,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAEnC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACjC,CAAC;YAED,KAAK,cAAc,CAAC,CAAC,CAAC;gBACpB,MAAM,GAAG,GAAG,CAAC,EAAE,GAAa,CAAC;gBAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC1C,IAAI,MAAM,EAAE,CAAC;oBACX,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC9B,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;oBACvB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;gBAC5B,CAAC;gBACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;YAChE,CAAC;YAED,UAAU;YACV,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,OAAO,GAAG,CAAC,EAAE,OAAiB,CAAC;gBACrC,MAAM,OAAO,GAAG,CAAC,EAAE,OAAO,CAAC;gBAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACrC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;gBACrF,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBACpC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;wBACtB,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,KAAK,WAAW;gBACd,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAE9B,OAAO;YACP,KAAK,MAAM;gBACT,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAExB,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;YAEtB,KAAK,WAAW;gBACd,sEAAsE;gBACtE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;YAEvF;gBACE,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,eAAe;IACf,8EAA8E;IAEtE,OAAO,CAAC,MAAc,EAAE,GAAgB;QAC9C,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,yCAAyC;IACzC,8EAA8E;IAE9E,IAAI,OAAO,KAAe,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,IAAI,YAAY,KAAiB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;CACrD"}

package/dist/daemon/shared-kv.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Shared Key-Value Store for MCP Conductor Daemon.
+ *
+ * Provides in-memory storage with optional disk persistence and TTL support.
+ * Each KV entry can carry an expiry timestamp; a background sweep runs every
+ * 30 s to evict stale entries and sync the on-disk snapshot.
+ *
+ * @module daemon/shared-kv
+ */
+/** Options accepted by {@link SharedKV.set}. */
+export interface KVSetOptions {
+    /** Time-to-live in milliseconds. Entry is deleted after this duration. */
+    ttl?: number;
+}
+/** Options for constructing a {@link SharedKV} instance. */
+export interface SharedKVOptions {
+    /** Directory for disk persistence. Defaults to `~/.mcp-conductor/kv/`. */
+    persistDir?: string;
+    /** Sweep interval for TTL expiry, in milliseconds. Defaults to 30 000. */
+    sweepIntervalMs?: number;
+    /** Namespace / shard name used for the snapshot file. Defaults to `default`. */
+    namespace?: string;
+    /** Whether to skip loading from disk on construction. Useful in tests. */
+    skipLoad?: boolean;
+}
+/**
+ * Shared key-value store with TTL expiry and disk persistence.
+ *
+ * Thread-safety note: Node.js is single-threaded; all mutations are
+ * synchronous operations on the in-memory Map, so no locking is required
+ * within a single process. Cross-process sharing is handled by the daemon
+ * server, which owns a single SharedKV instance.
+ */
+export declare class SharedKV {
+    private readonly store;
+    private readonly persistDir;
+    private readonly snapshotPath;
+    private readonly sweepIntervalMs;
+    private sweepTimer;
+    private dirty;
+    constructor(options?: SharedKVOptions);
+    /**
+     * Retrieve a value by key.
+     * Returns `null` if the key does not exist or has expired.
+     */
+    get<T>(key: string): T | null;
+    /**
+     * Store a value, with an optional TTL.
+     */
+    set<T>(key: string, value: T, options?: KVSetOptions): void;
+    /**
+     * Delete a key. No-op if the key does not exist.
+     */
+    delete(key: string): void;
+    /**
+     * List all non-expired keys, optionally filtered by a string prefix.
+     */
+    list(prefix?: string): string[];
+    /**
+     * Remove all entries (optionally matching a prefix).
+     */
+    clear(prefix?: string): void;
+    /** Total number of (potentially expired) entries currently held in memory. */
+    get size(): number;
+    /**
+     * Flush the in-memory state to disk and stop the sweep timer.
+     * Call this before process exit or daemon shutdown.
+     */
+    shutdown(): Promise<void>;
+    private loadFromDisk;
+    /** Write the current (non-expired) state to disk. */
+    flushToDisk(): void;
+    private startSweep;
+    private evictExpired;
+    /**
+     * Delete all snapshot files under `persistDir`.
+     * Used in tests for clean-up between runs.
+     */
+    static clearAllSnapshots(persistDir: string): void;
+}
+//# sourceMappingURL=shared-kv.d.ts.map

package/dist/daemon/shared-kv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-kv.d.ts","sourceRoot":"","sources":["../../src/daemon/shared-kv.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,gDAAgD;AAChD,MAAM,WAAW,YAAY;IAC3B,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAeD,4DAA4D;AAC5D,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA8B;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,KAAK,CAAS;gBAEV,OAAO,GAAE,eAAoB;IAgBzC;;;OAGG;IACH,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI;IAa7B;;OAEG;IACH,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,IAAI;IAS3D;;OAEG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAMzB;;OAEG;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE;IAY/B;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAW5B,8EAA8E;IAC9E,IAAI,IAAI,IAAI,MAAM,CAEjB;IAMD;;;OAGG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAa/B,OAAO,CAAC,YAAY;IA2BpB,qDAAqD;IACrD,WAAW,IAAI,IAAI;IAqBnB,OAAO,CAAC,UAAU;IAclB,OAAO,CAAC,YAAY;IAUpB;;;OAGG;IACH,MAAM,CAAC,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;CAQnD"}