@harperfast/harper-pro 5.0.25 → 5.1.0-beta.1

package/dist/core/components/mcp/listChanged.js

@@ -0,0 +1,257 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._setItcHandlersForTest = _setItcHandlersForTest;
+exports._resetListChangedForTest = _resetListChangedForTest;
+exports._setUserResolverForTest = _setUserResolverForTest;
+exports.initListChanged = initListChanged;
+exports.seedSessionSnapshot = seedSessionSnapshot;
+/**
+ * MCP server-push notification dispatcher (#619). Subscribes to Harper's
+ * existing role-cache-invalidation + schema-reload event channels and
+ * emits per-session `notifications/tools/list_changed` /
+ * `notifications/resources/list_changed` frames over the registered
+ * SSE streams.
+ *
+ * Per-session computation only — never broadcast. For each event, we
+ * walk the per-worker session registry, re-resolve the session's user
+ * (so the diff sees the freshly-mutated permission set, not the snapshot
+ * captured at GET-stream open), recompute that session's tools/list (or
+ * resources/list) under the fresh user, diff against the snapshot from
+ * the prior emission, and push a notification iff the visible set
+ * actually changed. Sessions whose visible surface is unchanged see
+ * nothing.
+ */
+const harper_logger_ts_1 = __importDefault(require("../../utility/logging/harper_logger.js"));
+const resources_ts_1 = require("./resources.js");
+const sessionRegistry_ts_1 = require("./sessionRegistry.js");
+const toolRegistry_ts_1 = require("./toolRegistry.js");
+const MAX_TOOLS_PAGE = 1000;
+const MAX_RESOURCES_PAGE = 1000;
+let initialized = false;
+let onUserChangeBound;
+let onSchemaChangeBound;
+// Test seams: avoid importing the real ITC handler from unit tests.
+let _itcHandlersOverride;
+function _setItcHandlersForTest(h) {
+    _itcHandlersOverride = h;
+}
+function _resetListChangedForTest() {
+    initialized = false;
+    onUserChangeBound = undefined;
+    onSchemaChangeBound = undefined;
+}
+function loadItcHandlers() {
+    if (_itcHandlersOverride)
+        return _itcHandlersOverride;
+    try {
+        return require('../../server/itc/serverHandlers');
+    }
+    catch (err) {
+        harper_logger_ts_1.default.trace(`MCP listChanged: ITC handlers unavailable (${err.message})`);
+        return undefined;
+    }
+}
+// Test seam: lets unit tests stub the user re-resolution without pulling in
+// security/user.ts (which initializes the system catalogs at module-load).
+let _userResolverOverride;
+function _setUserResolverForTest(fn) {
+    _userResolverOverride = fn;
+}
+async function resolveUser(username) {
+    if (!username)
+        return undefined;
+    if (_userResolverOverride)
+        return _userResolverOverride(username);
+    try {
+        const { findAndValidateUser } = require('../../security/user');
+        const fresh = await findAndValidateUser(username, null, false);
+        return fresh;
+    }
+    catch (err) {
+        harper_logger_ts_1.default.trace(`MCP listChanged: user re-resolve failed for ${username}: ${err.message}`);
+        return undefined;
+    }
+}
+function toolsListNames(profile, session) {
+    const { tools } = (0, toolRegistry_ts_1.listTools)({
+        user: session.user,
+        profile,
+        sessionId: session.sessionId,
+        limit: MAX_TOOLS_PAGE,
+    });
+    return tools.map((t) => ({ name: t.name }));
+}
+function resourcesListUris(profile, session) {
+    const result = (0, resources_ts_1.listResources)({ user: session.user, profile, limit: MAX_RESOURCES_PAGE });
+    return result.resources.map((r) => ({ uri: r.uri }));
+}
+function sameSet(a, b) {
+    if (!a)
+        return false;
+    if (a.length !== b.length)
+        return false;
+    const aKeys = new Set(a.map((x) => x.name ?? x.uri));
+    for (const x of b) {
+        if (!aKeys.has(x.name ?? x.uri))
+            return false;
+    }
+    return true;
+}
+/**
+ * Re-emit `notifications/tools/list_changed` for one session iff its
+ * visible tools list has changed since the last snapshot. Wrapped in
+ * try/catch so a single failing session never breaks the loop.
+ */
+function maybeNotifyToolsChanged(record) {
+    try {
+        const current = toolsListNames(record.profile, record);
+        if (sameSet(record.lastTools, current))
+            return;
+        record.lastTools = current;
+        record.queue.send({
+            event: 'message',
+            data: { jsonrpc: '2.0', method: 'notifications/tools/list_changed' },
+        });
+    }
+    catch (err) {
+        harper_logger_ts_1.default.trace(`MCP listChanged tools/* for session ${record.sessionId}: ${err.message}`);
+    }
+}
+function maybeNotifyResourcesChanged(record) {
+    try {
+        const current = resourcesListUris(record.profile, record);
+        if (sameSet(record.lastResources, current))
+            return;
+        record.lastResources = current;
+        record.queue.send({
+            event: 'message',
+            data: { jsonrpc: '2.0', method: 'notifications/resources/list_changed' },
+        });
+    }
+    catch (err) {
+        harper_logger_ts_1.default.trace(`MCP listChanged resources/* for session ${record.sessionId}: ${err.message}`);
+    }
+}
+/**
+ * Snapshot the current registry as a flat list so re-resolves can happen
+ * sequentially without re-walking the live map (which a concurrent
+ * registerSession could mutate mid-iteration).
+ */
+function snapshotSessions(profile) {
+    const out = [];
+    (0, sessionRegistry_ts_1.forEachSessionByProfile)(profile, (r) => out.push(r));
+    return out;
+}
+async function refreshSessionUser(record) {
+    const fresh = await resolveUser(record.user?.username);
+    if (fresh)
+        record.user = fresh;
+}
+/**
+ * Fan out a user/role change: for each session on either profile,
+ * re-resolve the user (so a role-perm mutation is visible to the diff —
+ * the captured `record.user` at GET-stream open is otherwise frozen),
+ * recompute the tools list and notify if changed. Resources may also
+ * change visibility (table-perm-gated schema URIs), so we re-check
+ * those too.
+ */
+async function onUserChange() {
+    for (const r of snapshotSessions('operations')) {
+        await refreshSessionUser(r);
+        maybeNotifyToolsChanged(r);
+        maybeNotifyResourcesChanged(r);
+    }
+    for (const r of snapshotSessions('application')) {
+        await refreshSessionUser(r);
+        maybeNotifyToolsChanged(r);
+        maybeNotifyResourcesChanged(r);
+    }
+}
+/**
+ * Schema changes touch both surfaces — application-profile tools are
+ * generated from the Resources registry, and operations-profile
+ * resources include the OPERATION list (unchanged) plus harper://schema
+ * URIs (changed). Application sessions need the bigger refresh. We also
+ * re-resolve the user here in case the schema change coincided with a
+ * role mutation (Harper sometimes fires both channels on database-level
+ * grants).
+ */
+async function onSchemaChange() {
+    for (const r of snapshotSessions('application')) {
+        await refreshSessionUser(r);
+        maybeNotifyToolsChanged(r);
+        maybeNotifyResourcesChanged(r);
+    }
+    // Operations sessions only need resources/list refresh — there are no
+    // schema-derived operations tools, but `harper://schema/...` URIs may
+    // shift if a new table appears under a database the user can describe.
+    for (const r of snapshotSessions('operations')) {
+        await refreshSessionUser(r);
+        maybeNotifyResourcesChanged(r);
+    }
+}
+/**
+ * Idempotent: subscribe once at component boot. Repeated calls are
+ * no-ops. Returns true if subscriptions were actually installed (false
+ * if Harper's ITC handlers aren't available in this process).
+ */
+function initListChanged() {
+    if (initialized)
+        return true;
+    const handlers = loadItcHandlers();
+    if (!handlers)
+        return false;
+    let installed = 0;
+    if (handlers.userHandler?.addListener) {
+        // Harper's ITC handler treats listeners as `() => void`. Our handler is
+        // async (re-resolves users); fire-and-forget with a swallow so a rejection
+        // can never escape the event emitter as an UnhandledPromiseRejection.
+        onUserChangeBound = () => {
+            onUserChange().catch((err) => harper_logger_ts_1.default.trace(`MCP listChanged onUserChange: ${err.message}`));
+        };
+        handlers.userHandler.addListener(onUserChangeBound);
+        installed++;
+    }
+    if (handlers.schemaHandler?.addListener) {
+        onSchemaChangeBound = () => {
+            onSchemaChange().catch((err) => harper_logger_ts_1.default.trace(`MCP listChanged onSchemaChange: ${err.message}`));
+        };
+        handlers.schemaHandler.addListener(onSchemaChangeBound);
+        installed++;
+    }
+    initialized = installed > 0;
+    if (initialized) {
+        harper_logger_ts_1.default.info(`MCP listChanged: subscribed to ${installed} event channel(s)`);
+    }
+    else {
+        harper_logger_ts_1.default.warn('MCP listChanged: ITC handlers do not expose addListener; list_changed notifications will not fire');
+    }
+    return initialized;
+}
+/**
+ * Compute and stash the initial tools/resources snapshot for a session
+ * that just opened its GET stream. Without this seed, the first event
+ * would always be a "changed" because `lastTools === undefined !==
+ * current`. Call right after registerSession.
+ */
+function seedSessionSnapshot(sessionId) {
+    const record = (0, sessionRegistry_ts_1.getRegisteredSession)(sessionId);
+    if (!record)
+        return;
+    try {
+        record.lastTools = toolsListNames(record.profile, record);
+    }
+    catch (err) {
+        harper_logger_ts_1.default.trace(`MCP seed tools list for ${sessionId}: ${err.message}`);
+    }
+    try {
+        record.lastResources = resourcesListUris(record.profile, record);
+    }
+    catch (err) {
+        harper_logger_ts_1.default.trace(`MCP seed resources list for ${sessionId}: ${err.message}`);
+    }
+}
+//# sourceMappingURL=listChanged.js.map

package/dist/core/components/mcp/listChanged.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listChanged.js","sourceRoot":"","sources":["../../../../core/components/mcp/listChanged.ts"],"names":[],"mappings":";;;;;AAqCA,wDASC;AAED,4DAIC;AAqBD,0DAEC;AA8ID,0CA+BC;AAQD,kDAaC;AA7QD;;;;;;;;;;;;;;;GAeG;AACH,8FAAkE;AAClE,iDAA+C;AAC/C,6DAA6G;AAC7G,uDAA+D;AAG/D,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,IAAI,WAAW,GAAG,KAAK,CAAC;AACxB,IAAI,iBAA2C,CAAC;AAChD,IAAI,mBAA6C,CAAC;AAElD,oEAAoE;AACpE,IAAI,oBAKQ,CAAC;AAEb,SAAgB,sBAAsB,CACrC,CAKY;IAEZ,oBAAoB,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,SAAgB,wBAAwB;IACvC,WAAW,GAAG,KAAK,CAAC;IACpB,iBAAiB,GAAG,SAAS,CAAC;IAC9B,mBAAmB,GAAG,SAAS,CAAC;AACjC,CAAC;AAED,SAAS,eAAe;IAMvB,IAAI,oBAAoB;QAAE,OAAO,oBAAoB,CAAC;IACtD,IAAI,CAAC;QACJ,OAAO,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,0BAAY,CAAC,KAAK,CAAC,8CAA+C,GAAa,CAAC,OAAO,GAAG,CAAC,CAAC;QAC5F,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,4EAA4E;AAC5E,2EAA2E;AAC3E,IAAI,qBAA0F,CAAC;AAE/F,SAAgB,uBAAuB,CAAC,EAAuE;IAC9G,qBAAqB,GAAG,EAAE,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAA4B;IACtD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,qBAAqB;QAAE,OAAO,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,CAAC;QACJ,MAAM,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/D,OAAO,KAAmB,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,0BAAY,CAAC,KAAK,CAAC,+CAA+C,QAAQ,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACzG,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,SAAS,cAAc,CAAC,OAAmB,EAAE,OAA0B;IACtE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAA,2BAAS,EAAC;QAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO;QACP,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,cAAc;KACrB,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAmB,EAAE,OAA0B;IACzE,MAAM,MAAM,GAAG,IAAA,4BAAa,EAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,OAAO,CACf,CAA6D,EAC7D,CAAiD;IAEjD,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,MAAyB;IACzD,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC;YAAE,OAAO;QAC/C,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YACjB,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE;SACpE,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,0BAAY,CAAC,KAAK,CAAC,uCAAuC,MAAM,CAAC,SAAS,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1G,CAAC;AACF,CAAC;AAED,SAAS,2BAA2B,CAAC,MAAyB;IAC7D,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC;YAAE,OAAO;QACnD,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YACjB,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE;SACxE,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,0BAAY,CAAC,KAAK,CAAC,2CAA2C,MAAM,CAAC,SAAS,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9G,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,OAAmB;IAC5C,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,IAAA,4CAAuB,EAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAyB;IAC1D,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,KAAK;QAAE,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,YAAY;IAC1B,KAAK,MAAM,CAAC,IAAI,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC;QAChD,MAAM,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC5B,uBAAuB,CAAC,CAAC,CAAC,CAAC;QAC3B,2BAA2B,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC;QACjD,MAAM,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC5B,uBAAuB,CAAC,CAAC,CAAC,CAAC;QAC3B,2BAA2B,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,cAAc;IAC5B,KAAK,MAAM,CAAC,IAAI,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC;QACjD,MAAM,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC5B,uBAAuB,CAAC,CAAC,CAAC,CAAC;QAC3B,2BAA2B,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,sEAAsE;IACtE,sEAAsE;IACtE,uEAAuE;IACvE,KAAK,MAAM,CAAC,IAAI,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC;QAChD,MAAM,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC5B,2BAA2B,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe;IAC9B,IAAI,WAAW;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,QAAQ,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC;QACvC,wEAAwE;QACxE,2EAA2E;QAC3E,sEAAsE;QACtE,iBAAiB,GAAG,GAAG,EAAE;YACxB,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,0BAAY,CAAC,KAAK,CAAC,iCAAkC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC9G,CAAC,CAAC;QACF,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;QACpD,SAAS,EAAE,CAAC;IACb,CAAC;IACD,IAAI,QAAQ,CAAC,aAAa,EAAE,WAAW,EAAE,CAAC;QACzC,mBAAmB,GAAG,GAAG,EAAE;YAC1B,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,0BAAY,CAAC,KAAK,CAAC,mCAAoC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAClH,CAAC,CAAC;QACF,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;QACxD,SAAS,EAAE,CAAC;IACb,CAAC;IACD,WAAW,GAAG,SAAS,GAAG,CAAC,CAAC;IAC5B,IAAI,WAAW,EAAE,CAAC;QACjB,0BAAY,CAAC,IAAI,CAAC,kCAAkC,SAAS,mBAAmB,CAAC,CAAC;IACnF,CAAC;SAAM,CAAC;QACP,0BAAY,CAAC,IAAI,CAChB,mGAAmG,CACnG,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,SAAiB;IACpD,MAAM,MAAM,GAAG,IAAA,yCAAoB,EAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,IAAI,CAAC;QACJ,MAAM,CAAC,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,0BAAY,CAAC,KAAK,CAAC,2BAA2B,SAAS,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,CAAC,aAAa,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,0BAAY,CAAC,KAAK,CAAC,+BAA+B,SAAS,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3F,CAAC;AACF,CAAC"}

package/dist/core/components/mcp/rateLimit.js

@@ -0,0 +1,226 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.configFor = configFor;
+exports._setClockForTest = _setClockForTest;
+exports.clearSessionRateState = clearSessionRateState;
+exports._resetForTest = _resetForTest;
+exports.tryAdmit = tryAdmit;
+/**
+ * Per-session, per-tool rate limiting for `tools/call`.
+ *
+ * Four configurable limits per profile (operations / application):
+ *   - perToolPerSecond:   sustained per-tool rate (token bucket refill)
+ *   - perToolBurst:       per-tool burst capacity (token bucket size)
+ *   - sessionConcurrency: max in-flight tool calls per session
+ *   - sessionPerSecond:   sustained per-session rate across all tools
+ *
+ * Limit hits surface as `result.isError = true` with `kind: 'rate_limited'`
+ * (NOT a JSON-RPC error) per the MCP spec's tools-call convention. The LLM
+ * sees and adapts; the protocol envelope stays clean.
+ *
+ * State is in-memory per worker process. Buckets are evicted lazily when
+ * a session's record is removed (#619 cleanup) or after they've been idle
+ * past the idle eviction threshold. Multi-process coordination isn't
+ * attempted in v1 — the limits are per-worker.
+ */
+const env = __importStar(require("../../utility/environment/environmentManager.js"));
+const hdbTerms_ts_1 = require("../../utility/hdbTerms.js");
+const DEFAULTS = {
+    operations: { perToolPerSecond: 10, perToolBurst: 20, sessionConcurrency: 25, sessionPerSecond: 100 },
+    application: { perToolPerSecond: 25, perToolBurst: 50, sessionConcurrency: 50, sessionPerSecond: 200 },
+};
+const CONFIG_KEYS = {
+    operations: {
+        perToolPerSecond: hdbTerms_ts_1.CONFIG_PARAMS.MCP_OPERATIONS_RATELIMIT_PERTOOLPERSECOND,
+        perToolBurst: hdbTerms_ts_1.CONFIG_PARAMS.MCP_OPERATIONS_RATELIMIT_PERTOOLBURST,
+        sessionConcurrency: hdbTerms_ts_1.CONFIG_PARAMS.MCP_OPERATIONS_RATELIMIT_SESSIONCONCURRENCY,
+        sessionPerSecond: hdbTerms_ts_1.CONFIG_PARAMS.MCP_OPERATIONS_RATELIMIT_SESSIONPERSECOND,
+    },
+    application: {
+        perToolPerSecond: hdbTerms_ts_1.CONFIG_PARAMS.MCP_APPLICATION_RATELIMIT_PERTOOLPERSECOND,
+        perToolBurst: hdbTerms_ts_1.CONFIG_PARAMS.MCP_APPLICATION_RATELIMIT_PERTOOLBURST,
+        sessionConcurrency: hdbTerms_ts_1.CONFIG_PARAMS.MCP_APPLICATION_RATELIMIT_SESSIONCONCURRENCY,
+        sessionPerSecond: hdbTerms_ts_1.CONFIG_PARAMS.MCP_APPLICATION_RATELIMIT_SESSIONPERSECOND,
+    },
+};
+function configFor(profile) {
+    const keys = CONFIG_KEYS[profile];
+    const defaults = DEFAULTS[profile];
+    const read = (key, fallback) => {
+        const v = env.get(key);
+        return typeof v === 'number' && v > 0 ? v : fallback;
+    };
+    return {
+        perToolPerSecond: read(keys.perToolPerSecond, defaults.perToolPerSecond),
+        perToolBurst: read(keys.perToolBurst, defaults.perToolBurst),
+        sessionConcurrency: read(keys.sessionConcurrency, defaults.sessionConcurrency),
+        sessionPerSecond: read(keys.sessionPerSecond, defaults.sessionPerSecond),
+    };
+}
+/**
+ * Token bucket: starts full at `burst`, refills at `rate` tokens per
+ * second up to `burst`, drained by `tryConsume(1)`. Stateless aside from
+ * `tokens` + `lastRefill`, both updated on every consume call.
+ */
+class TokenBucket {
+    rate;
+    burst;
+    tokens;
+    lastRefill;
+    constructor(rate, burst) {
+        this.rate = rate;
+        this.burst = burst;
+        this.tokens = burst;
+        this.lastRefill = now();
+    }
+    tryConsume() {
+        this.refill();
+        if (this.tokens >= 1) {
+            this.tokens -= 1;
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Refill-and-check, without consuming. Used by `tryAdmit` to peek each
+     * bucket so denial doesn't burn a token in *another* bucket.
+     */
+    hasToken() {
+        this.refill();
+        return this.tokens >= 1;
+    }
+    refill() {
+        const t = now();
+        const elapsedSec = (t - this.lastRefill) / 1000;
+        this.lastRefill = t;
+        if (elapsedSec <= 0)
+            return;
+        this.tokens = Math.min(this.burst, this.tokens + elapsedSec * this.rate);
+    }
+}
+/** Lazily monkey-patchable for tests. */
+let now = () => Date.now();
+function _setClockForTest(fn) {
+    now = fn ?? (() => Date.now());
+}
+const sessions = new Map();
+// Belt-and-braces against state leaks: sessions that get TTL-evicted from the
+// system.mcp_session table never reach deleteSession() in this process, so
+// `clearSessionRateState` is never called for them. Prune any session that
+// hasn't admitted a call in this many ms on every getOrCreate. The threshold
+// is generously above the default idle timeout (1800s) — well-behaved live
+// sessions never get pruned by accident.
+const IDLE_PRUNE_MS = 60 * 60 * 1000; // 1 hour
+const PRUNE_INTERVAL_MS = 5 * 60 * 1000; // run at most every 5 minutes
+let lastPruneAt = 0;
+function pruneIdleSessions() {
+    const t = now();
+    if (t - lastPruneAt < PRUNE_INTERVAL_MS)
+        return;
+    lastPruneAt = t;
+    const cutoff = t - IDLE_PRUNE_MS;
+    for (const [id, s] of sessions) {
+        if (s.inFlight === 0 && s.lastSeen < cutoff) {
+            sessions.delete(id);
+        }
+    }
+}
+function getOrCreate(sessionId, profile) {
+    pruneIdleSessions();
+    let s = sessions.get(sessionId);
+    if (!s) {
+        const config = configFor(profile);
+        s = {
+            perTool: new Map(),
+            sessionRate: new TokenBucket(config.sessionPerSecond, config.sessionPerSecond),
+            inFlight: 0,
+            config,
+            profile,
+            lastSeen: now(),
+        };
+        sessions.set(sessionId, s);
+    }
+    else {
+        s.lastSeen = now();
+    }
+    return s;
+}
+/** Drop a session's rate-limit state (called on session deletion). */
+function clearSessionRateState(sessionId) {
+    sessions.delete(sessionId);
+}
+/** Test seam: drop all sessions. */
+function _resetForTest() {
+    sessions.clear();
+}
+/**
+ * Attempt to admit a tools/call. If allowed, returns a `release()` that
+ * decrements in-flight; the caller MUST invoke it (even on tool failure)
+ * via `try { ... } finally { release(); }`.
+ */
+function tryAdmit(sessionId, toolName, profile) {
+    const state = getOrCreate(sessionId, profile);
+    if (state.inFlight >= state.config.sessionConcurrency) {
+        return { allowed: false, reason: 'concurrency' };
+    }
+    let toolBucket = state.perTool.get(toolName);
+    if (!toolBucket) {
+        toolBucket = new TokenBucket(state.config.perToolPerSecond, state.config.perToolBurst);
+        state.perTool.set(toolName, toolBucket);
+    }
+    // Peek both buckets first. Consuming session-rate before checking per-tool
+    // (or vice versa) silently drains the unrelated bucket on the denied path.
+    if (!toolBucket.hasToken()) {
+        return { allowed: false, reason: 'per_tool' };
+    }
+    if (!state.sessionRate.hasToken()) {
+        return { allowed: false, reason: 'session_rate' };
+    }
+    // Both have capacity — actually deduct. The peeks above ran refill(), so
+    // this immediate-follow-up tryConsume sees the same fresh state and is
+    // guaranteed to succeed (refill() is a no-op for elapsedSec ≤ 0).
+    toolBucket.tryConsume();
+    state.sessionRate.tryConsume();
+    state.inFlight += 1;
+    return {
+        allowed: true,
+        release: () => {
+            if (state.inFlight > 0)
+                state.inFlight -= 1;
+        },
+    };
+}
+//# sourceMappingURL=rateLimit.js.map

package/dist/core/components/mcp/rateLimit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimit.js","sourceRoot":"","sources":["../../../../core/components/mcp/rateLimit.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgDA,8BAaC;AA6CD,4CAEC;AAwDD,sDAEC;AAGD,sCAEC;AAWD,4BAkCC;AAxND;;;;;;;;;;;;;;;;;GAiBG;AACH,qFAAuE;AACvE,2DAA0D;AAS1D,MAAM,QAAQ,GAA0D;IACvE,UAAU,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE;IACrG,WAAW,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE;CACtG,CAAC;AAEF,MAAM,WAAW,GAAG;IACnB,UAAU,EAAE;QACX,gBAAgB,EAAE,2BAAa,CAAC,yCAAyC;QACzE,YAAY,EAAE,2BAAa,CAAC,qCAAqC;QACjE,kBAAkB,EAAE,2BAAa,CAAC,2CAA2C;QAC7E,gBAAgB,EAAE,2BAAa,CAAC,yCAAyC;KACzE;IACD,WAAW,EAAE;QACZ,gBAAgB,EAAE,2BAAa,CAAC,0CAA0C;QAC1E,YAAY,EAAE,2BAAa,CAAC,sCAAsC;QAClE,kBAAkB,EAAE,2BAAa,CAAC,4CAA4C;QAC9E,gBAAgB,EAAE,2BAAa,CAAC,0CAA0C;KAC1E;CACD,CAAC;AAEF,SAAgB,SAAS,CAAC,OAAqC;IAC9D,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,QAAgB,EAAU,EAAE;QACtD,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtD,CAAC,CAAC;IACF,OAAO;QACN,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,CAAC;QACxE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC;QAC5D,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,CAAC;QAC9E,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,CAAC;KACxE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,WAAW;IACC,IAAI,CAAS;IACb,KAAK,CAAS;IACvB,MAAM,CAAS;IACf,UAAU,CAAS;IAC3B,YAAY,IAAY,EAAE,KAAa;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;IACzB,CAAC;IACD,UAAU;QACT,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IACD;;;OAGG;IACH,QAAQ;QACP,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IACzB,CAAC;IACO,MAAM;QACb,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QACpB,IAAI,UAAU,IAAI,CAAC;YAAE,OAAO;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC;CACD;AAED,yCAAyC;AACzC,IAAI,GAAG,GAAiB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AACzC,SAAgB,gBAAgB,CAAC,EAA8B;IAC9D,GAAG,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AAChC,CAAC;AAWD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;AAEjD,8EAA8E;AAC9E,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,yCAAyC;AACzC,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAC/C,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,8BAA8B;AACvE,IAAI,WAAW,GAAG,CAAC,CAAC;AAEpB,SAAS,iBAAiB;IACzB,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC,GAAG,WAAW,GAAG,iBAAiB;QAAE,OAAO;IAChD,WAAW,GAAG,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,CAAC,GAAG,aAAa,CAAC;IACjC,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,MAAM,EAAE,CAAC;YAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,OAAqC;IAC5E,iBAAiB,EAAE,CAAC;IACpB,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,EAAE,CAAC;QACR,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC,GAAG;YACH,OAAO,EAAE,IAAI,GAAG,EAAE;YAClB,WAAW,EAAE,IAAI,WAAW,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC;YAC9E,QAAQ,EAAE,CAAC;YACX,MAAM;YACN,OAAO;YACP,QAAQ,EAAE,GAAG,EAAE;SACf,CAAC;QACF,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC5B,CAAC;SAAM,CAAC;QACP,CAAC,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED,sEAAsE;AACtE,SAAgB,qBAAqB,CAAC,SAAiB;IACtD,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC5B,CAAC;AAED,oCAAoC;AACpC,SAAgB,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC;AAMD;;;;GAIG;AACH,SAAgB,QAAQ,CACvB,SAAiB,EACjB,QAAgB,EAChB,OAAqC;IAErC,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACvD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,UAAU,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACvF,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACnD,CAAC;IACD,yEAAyE;IACzE,uEAAuE;IACvE,kEAAkE;IAClE,UAAU,CAAC,UAAU,EAAE,CAAC;IACxB,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;IAC/B,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;IACpB,OAAO;QACN,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,GAAG,EAAE;YACb,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC;gBAAE,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC7C,CAAC;KACD,CAAC;AACH,CAAC"}