@maadb/core 0.0.1 → 0.7.9

package/dist/instance/session.js

@@ -0,0 +1,267 @@
+// ============================================================================
+// SessionRegistry — per-connection state for multi-project routing
+//
+// A session is created when an MCP client connects. The client binds the
+// session to one project (single mode) or a whitelist (multi mode) via
+// maad_use_project(s). Once bound, a session cannot rebind — it must
+// disconnect and reconnect.
+//
+// Session IDs are derived from the MCP request context (SDK-supplied where
+// possible) so the same code path works for stdio today and HTTP/SSE in 0.9.0.
+// ============================================================================
+import { randomUUID } from 'node:crypto';
+import { ok, singleErr } from '../errors.js';
+import { roleSatisfies, minRole } from '../mcp/roles.js';
+import { getProject } from './config.js';
+import { composeEffectiveRole } from '../auth/resolve.js';
+export class SessionRegistry {
+    instance;
+    sessions = new Map();
+    closeHandlers = [];
+    createHandlers = [];
+    constructor(instance) {
+        this.instance = instance;
+    }
+    /**
+     * Swap the live instance config. Called by the instance-reload path after
+     * the pool has applied diffs. Does not touch existing sessions — cancellation
+     * and whitelist pruning are separate explicit calls.
+     */
+    setInstance(newInstance) {
+        this.instance = newInstance;
+    }
+    create(sessionId) {
+        const existing = this.sessions.get(sessionId);
+        if (existing)
+            return existing;
+        const state = {
+            sessionId,
+            mode: null,
+            effectiveRoles: new Map(),
+            bindingSource: null,
+            createdAt: new Date(),
+            lastActivityAt: new Date(),
+        };
+        this.sessions.set(sessionId, state);
+        // Fan-out to createHandlers — stdio uses this to register a per-session
+        // notifier once the synthesized stdio session ID becomes known. Cheap
+        // synchronous call path; handlers must be best-effort and non-throwing.
+        for (const h of this.createHandlers) {
+            try {
+                h(sessionId);
+            }
+            catch { /* best-effort fan-out */ }
+        }
+        return state;
+    }
+    get(sessionId) {
+        const state = this.sessions.get(sessionId);
+        if (state)
+            state.lastActivityAt = new Date();
+        return state;
+    }
+    /**
+     * Peek without bumping lastActivityAt. Used by the idle sweeper — it must
+     * not reset the very activity timestamp it's checking against.
+     */
+    peek(sessionId) {
+        return this.sessions.get(sessionId);
+    }
+    /**
+     * Register a handler fired when a session is destroyed, regardless of cause.
+     * Handlers should be cheap (syncronous, no throws); failures in one handler
+     * must not block others. Multiple handlers compose in registration order.
+     */
+    registerCloseHandler(handler) {
+        this.closeHandlers.push(handler);
+    }
+    /**
+     * 0.6.11 — Register a handler fired when a session is created. Used by
+     * stdio mode to register a notifier once the synthesized stdio session ID
+     * becomes known (HTTP knows the sid earlier via onsessioninitialized).
+     * Same best-effort / non-throwing contract as closeHandlers.
+     */
+    registerCreateHandler(handler) {
+        this.createHandlers.push(handler);
+    }
+    destroy(sessionId, reason = 'client') {
+        if (!this.sessions.has(sessionId))
+            return;
+        this.sessions.delete(sessionId);
+        for (const h of this.closeHandlers) {
+            try {
+                h(sessionId, reason);
+            }
+            catch { /* best-effort fan-out */ }
+        }
+    }
+    size() {
+        return this.sessions.size;
+    }
+    /**
+     * Iterate session snapshots without triggering lastActivityAt updates.
+     * Returned array is a copy — safe to mutate during iteration (the sweeper
+     * calls destroy() which mutates the underlying map).
+     */
+    snapshot() {
+        return Array.from(this.sessions.values());
+    }
+    /**
+     * Mark sessions whose single-mode binding (or gateway-pin) targets the
+     * named project as `cancelled`. The next tool call on a cancelled session
+     * returns SESSION_CANCELLED and then destroys the session. Multi-mode
+     * sessions are NOT cancelled here — use `pruneProjectFromWhitelist` for
+     * those. Returns the session IDs that were cancelled.
+     */
+    cancelByProject(projectName) {
+        const cancelled = [];
+        for (const state of this.sessions.values()) {
+            if (state.mode === 'single' && state.activeProject === projectName) {
+                state.cancelled = true;
+                cancelled.push(state.sessionId);
+            }
+        }
+        return cancelled;
+    }
+    /**
+     * Remove a project from multi-mode sessions' whitelist + effectiveRoles.
+     * Single-mode sessions are not touched (handled by `cancelByProject`).
+     * A multi-mode session whose whitelist becomes empty after pruning is
+     * marked cancelled — it has no remaining projects to route to.
+     * Returns { prunedSessions, cancelledSessions } lists.
+     */
+    pruneProjectFromWhitelist(projectName) {
+        const pruned = [];
+        const cancelledFromEmpty = [];
+        for (const state of this.sessions.values()) {
+            if (state.mode !== 'multi')
+                continue;
+            const listHadProject = state.whitelist?.includes(projectName) ?? false;
+            if (!listHadProject)
+                continue;
+            state.whitelist = state.whitelist.filter(n => n !== projectName);
+            state.effectiveRoles.delete(projectName);
+            pruned.push(state.sessionId);
+            if (state.whitelist.length === 0) {
+                state.cancelled = true;
+                cancelledFromEmpty.push(state.sessionId);
+            }
+        }
+        return { prunedSessions: pruned, cancelledSessions: cancelledFromEmpty };
+    }
+    bindSingle(sessionId, projectName, opts = {}) {
+        const state = this.sessions.get(sessionId);
+        if (!state)
+            return singleErr('SESSION_UNBOUND', `Unknown session: ${sessionId}`);
+        if (state.bindingSource === 'gateway_pin') {
+            return singleErr('SESSION_PINNED', `session is pinned to project '${state.activeProject}' by gateway; open a new session with a different X-Maad-Pin-Project header to switch projects`);
+        }
+        if (state.mode !== null) {
+            return singleErr('SESSION_ALREADY_BOUND', 'Session already bound — disconnect and reconnect to rebind');
+        }
+        const project = getProject(this.instance, projectName);
+        if (!project)
+            return singleErr('PROJECT_UNKNOWN', `Project "${projectName}" not declared in instance`);
+        const effective = this.composeEffective(project.role, projectName, state.token, opts.as);
+        if (!effective.ok)
+            return effective;
+        state.mode = 'single';
+        state.activeProject = projectName;
+        state.effectiveRoles.set(projectName, effective.value);
+        state.bindingSource = opts.source ?? 'client_tool';
+        state.lastActivityAt = new Date();
+        return ok(state);
+    }
+    bindMulti(sessionId, projectNames, opts = {}) {
+        const state = this.sessions.get(sessionId);
+        if (!state)
+            return singleErr('SESSION_UNBOUND', `Unknown session: ${sessionId}`);
+        if (state.bindingSource === 'gateway_pin') {
+            return singleErr('SESSION_PINNED', `session is pinned to project '${state.activeProject}' by gateway; open a new session with a different X-Maad-Pin-Project header to switch projects`);
+        }
+        if (state.mode !== null) {
+            return singleErr('SESSION_ALREADY_BOUND', 'Session already bound — disconnect and reconnect to rebind');
+        }
+        if (projectNames.length === 0) {
+            return singleErr('INSTANCE_CONFIG_INVALID', 'bindMulti requires at least one project name');
+        }
+        const effectiveRoles = new Map();
+        for (const name of projectNames) {
+            const project = getProject(this.instance, name);
+            if (!project)
+                return singleErr('PROJECT_UNKNOWN', `Project "${name}" not declared in instance`);
+            const effective = this.composeEffective(project.role, name, state.token, opts.as);
+            if (!effective.ok)
+                return effective;
+            effectiveRoles.set(name, effective.value);
+        }
+        state.mode = 'multi';
+        state.whitelist = [...projectNames];
+        state.effectiveRoles = effectiveRoles;
+        state.bindingSource = opts.source ?? 'client_tool';
+        state.lastActivityAt = new Date();
+        return ok(state);
+    }
+    /**
+     * Compose the effective role for a (project, token?, requested?) tuple.
+     * Three-cap when a token is present (HTTP+registry mode); two-cap legacy
+     * behavior when token is undefined (stdio, synthetic, or any path that
+     * never populated state.token).
+     */
+    composeEffective(projectRole, projectName, token, requested) {
+        if (token === undefined) {
+            // Legacy two-cap path — stdio/synthetic mode.
+            if (!requested)
+                return ok(projectRole);
+            if (!roleSatisfies(projectRole, requested)) {
+                return singleErr('ROLE_UPGRADE_DENIED', `Cannot bind as ${requested} — project role is ${projectRole}`);
+            }
+            return ok(minRole(projectRole, requested));
+        }
+        // Three-cap path — HTTP+registry mode.
+        const composed = composeEffectiveRole(projectRole, token, projectName, requested);
+        if (!composed.ok) {
+            return singleErr(composed.code, composed.message);
+        }
+        return ok(composed.role);
+    }
+}
+// Session ID resolution. MCP SDK v1.29+ exposes a session identifier via
+// request meta in some transports. Where it's unavailable (stdio today),
+// we synthesize one UUID per process and reuse it — stdio is single-client
+// so that's equivalent to "this connection." HTTP/SSE in 0.9.0 will supply
+// a real per-connection ID through transport middleware.
+let processStdioSessionId = null;
+// `extra` is the second arg MCP SDK passes to tool handlers (RequestHandlerExtra).
+// It exposes `sessionId` when the transport supplies one (HTTP/SSE in 0.9.0).
+// stdio today does not, so we fall back to a stable per-process UUID.
+export function resolveSessionId(extra) {
+    if (extra && typeof extra === 'object') {
+        const sid = extra.sessionId;
+        if (typeof sid === 'string' && sid.length > 0)
+            return sid;
+        const meta = extra._meta;
+        if (meta && typeof meta === 'object') {
+            const metaSid = meta.sessionId;
+            if (typeof metaSid === 'string' && metaSid.length > 0)
+                return metaSid;
+        }
+        const params = extra.params;
+        if (params && typeof params === 'object') {
+            const paramMeta = params._meta;
+            if (paramMeta && typeof paramMeta === 'object') {
+                const paramSid = paramMeta.sessionId;
+                if (typeof paramSid === 'string' && paramSid.length > 0)
+                    return paramSid;
+            }
+        }
+    }
+    if (!processStdioSessionId)
+        processStdioSessionId = `stdio-${randomUUID()}`;
+    return processStdioSessionId;
+}
+// Test hook — resets the stdio fallback. Production code never calls this.
+export function __resetStdioSessionId() {
+    processStdioSessionId = null;
+}
+//# sourceMappingURL=session.js.map

package/dist/instance/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/instance/session.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mEAAmE;AACnE,EAAE;AACF,yEAAyE;AACzE,uEAAuE;AACvE,qEAAqE;AACrE,4BAA4B;AAC5B,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,+EAA+E;AAE/E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAe,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,OAAO,EAAa,MAAM,iBAAiB,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAuE1D,MAAM,OAAO,eAAe;IAKN;IAJZ,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC3C,aAAa,GAA0B,EAAE,CAAC;IAC1C,cAAc,GAA2B,EAAE,CAAC;IAEpD,YAAoB,QAAwB;QAAxB,aAAQ,GAAR,QAAQ,CAAgB;IAAG,CAAC;IAEhD;;;;OAIG;IACH,WAAW,CAAC,WAA2B;QACrC,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC;IAC9B,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,KAAK,GAAiB;YAC1B,SAAS;YACT,IAAI,EAAE,IAAI;YACV,cAAc,EAAE,IAAI,GAAG,EAAE;YACzB,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,cAAc,EAAE,IAAI,IAAI,EAAE;SAC3B,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpC,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACpC,IAAI,CAAC;gBAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,GAAG,CAAC,SAAiB;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,KAAK;YAAE,KAAK,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,SAAiB;QACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAAC,OAA4B;QAC/C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACH,qBAAqB,CAAC,OAA6B;QACjD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,SAA6B,QAAQ;QAC9D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACnC,IAAI,CAAC;gBAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACH,QAAQ;QACN,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;OAMG;IACH,eAAe,CAAC,WAAmB;QACjC,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,KAAK,WAAW,EAAE,CAAC;gBACnE,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;gBACvB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACH,yBAAyB,CAAC,WAAmB;QAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,kBAAkB,GAAa,EAAE,CAAC;QACxC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;gBAAE,SAAS;YACrC,MAAM,cAAc,GAAG,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC;YACvE,IAAI,CAAC,cAAc;gBAAE,SAAS;YAC9B,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;YAClE,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7B,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;gBACvB,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;IAC3E,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,WAAmB,EAAE,OAAoB,EAAE;QACvE,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC,iBAAiB,EAAE,oBAAoB,SAAS,EAAE,CAAC,CAAC;QACjF,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;YAC1C,OAAO,SAAS,CAAC,gBAAgB,EAC/B,iCAAiC,KAAK,CAAC,aAAa,gGAAgG,CAAC,CAAC;QAC1J,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC,uBAAuB,EAAE,4DAA4D,CAAC,CAAC;QAC1G,CAAC;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC,iBAAiB,EAAE,YAAY,WAAW,4BAA4B,CAAC,CAAC;QAEvG,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,SAAS,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAEpC,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC;QACtB,KAAK,CAAC,aAAa,GAAG,WAAW,CAAC;QAClC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QACvD,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC;QACnD,KAAK,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAED,SAAS,CAAC,SAAiB,EAAE,YAAsB,EAAE,OAAoB,EAAE;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC,iBAAiB,EAAE,oBAAoB,SAAS,EAAE,CAAC,CAAC;QACjF,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;YAC1C,OAAO,SAAS,CAAC,gBAAgB,EAC/B,iCAAiC,KAAK,CAAC,aAAa,gGAAgG,CAAC,CAAC;QAC1J,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC,uBAAuB,EAAE,4DAA4D,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC,yBAAyB,EAAE,8CAA8C,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,GAAG,EAAgB,CAAC;QAC/C,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAC,iBAAiB,EAAE,YAAY,IAAI,4BAA4B,CAAC,CAAC;YAChG,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAClF,IAAI,CAAC,SAAS,CAAC,EAAE;gBAAE,OAAO,SAAS,CAAC;YACpC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC;QAED,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC;QACrB,KAAK,CAAC,SAAS,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC;QACpC,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC;QACtC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC;QACnD,KAAK,CAAC,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACK,gBAAgB,CACtB,WAAiB,EACjB,WAAmB,EACnB,KAA8B,EAC9B,SAAgB;QAEhB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,8CAA8C;YAC9C,IAAI,CAAC,SAAS;gBAAE,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC;YACvC,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;gBAC3C,OAAO,SAAS,CAAC,qBAAqB,EACpC,kBAAkB,SAAS,sBAAsB,WAAW,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,uCAAuC;QACvC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAClF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;CACF;AAED,yEAAyE;AACzE,yEAAyE;AACzE,2EAA2E;AAC3E,2EAA2E;AAC3E,yDAAyD;AACzD,IAAI,qBAAqB,GAAkB,IAAI,CAAC;AAEhD,mFAAmF;AACnF,8EAA8E;AAC9E,sEAAsE;AACtE,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAI,KAAiC,CAAC,SAAS,CAAC;QACzD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QAC1D,MAAM,IAAI,GAAI,KAAiC,CAAC,KAAK,CAAC;QACtD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,OAAO,GAAI,IAAgC,CAAC,SAAS,CAAC;YAC5D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,OAAO,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAI,KAAiC,CAAC,MAAM,CAAC;QACzD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,SAAS,GAAI,MAAkC,CAAC,KAAK,CAAC;YAC5D,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAC/C,MAAM,QAAQ,GAAI,SAAqC,CAAC,SAAS,CAAC;gBAClE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,QAAQ,CAAC;YAC3E,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,qBAAqB;QAAE,qBAAqB,GAAG,SAAS,UAAU,EAAE,EAAE,CAAC;IAC5E,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,qBAAqB;IACnC,qBAAqB,GAAG,IAAI,CAAC;AAC/B,CAAC"}

package/dist/logging.d.ts

@@ -0,0 +1,108 @@
+import { type Logger, type DestinationStream } from 'pino';
+export interface LoggingOptions {
+    level?: string;
+    pretty?: boolean;
+    auditPath?: string;
+    opsDestination?: DestinationStream;
+    auditDestination?: DestinationStream;
+}
+export declare function initLogging(opts?: LoggingOptions): void;
+export declare function getOpsLog(): Logger;
+export declare function getAuditLog(): Logger;
+export declare function readLoggingEnv(): LoggingOptions;
+export interface ToolCallLogFields {
+    request_id: string;
+    session_id: string;
+    project: string | null;
+    tool: string;
+    role: string | null;
+    payload_size: number;
+    latency_ms: number;
+    result: 'ok' | 'error';
+    error_code: string | null;
+}
+export declare function logToolCall(fields: ToolCallLogFields): void;
+export interface WriteAuditFields {
+    request_id: string;
+    session_id: string;
+    project: string;
+    tool: string;
+    doc_id: string | null;
+    doc_ids?: string[];
+    doc_type: string | null;
+    version_before: number | null;
+    version_after: number | null;
+    changed_fields: string[];
+    git_commit: string | null;
+    token_id?: string;
+    agent_id?: string;
+    user_id?: string;
+    role?: string;
+}
+export declare function logWriteAudit(fields: WriteAuditFields): void;
+export interface AuthFailureFields {
+    remote_addr: string;
+    reason: 'missing' | 'invalid';
+}
+export declare function logAuthFailure(fields: AuthFailureFields): void;
+export interface PinRejectedFields {
+    remote_addr: string;
+    code: 'PIN_PROJECT_INVALID' | 'PIN_PROJECT_NOT_FOUND' | 'PIN_ON_EXISTING_SESSION';
+    project: string | null;
+}
+export declare function logPinRejected(fields: PinRejectedFields): void;
+export interface ValidationWarningFields {
+    request_id: string;
+    session_id: string;
+    project: string;
+    tool: string;
+    doc_id: string | null;
+    doc_type: string | null;
+    field: string;
+    code: string;
+    message: string;
+}
+export declare function logValidationWarning(fields: ValidationWarningFields): void;
+export interface InstanceReloadAuditFields {
+    source: 'tool' | 'sighup';
+    projectsAdded: number;
+    projectsRemoved: number;
+    projectsAddedNames: string[];
+    projectsRemovedNames: string[];
+    sessionsCancelled: number;
+    sessionsPruned: number;
+    durationMs: number;
+}
+export declare function logInstanceReload(fields: InstanceReloadAuditFields): void;
+export interface InstanceReloadProgressFields {
+    source: 'tool' | 'sighup';
+    phase: 'start' | 'complete' | 'failed';
+    code?: string;
+    message?: string;
+    projectsAdded?: number;
+    projectsRemoved?: number;
+    durationMs?: number;
+}
+export declare function logInstanceReloadProgress(fields: InstanceReloadProgressFields): void;
+export interface OpsChannelReadyFields {
+    destination: 'stderr' | 'pretty' | 'custom';
+    level: string;
+    pid: number;
+}
+export declare function logOpsChannelReady(fields: OpsChannelReadyFields): void;
+export interface SchemaCacheStaleFields {
+    project: string | null;
+    trigger_op: string;
+    changed_files: string[];
+}
+export declare function logSchemaCacheStale(fields: SchemaCacheStaleFields): void;
+export interface CommitFailureFields {
+    code: string;
+    message: string;
+    action: 'create' | 'update' | 'delete';
+    doc_id: string;
+    doc_type: string;
+    file_count: number;
+}
+export declare function logCommitFailure(fields: CommitFailureFields): void;
+//# sourceMappingURL=logging.d.ts.map

package/dist/logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../src/logging.ts"],"names":[],"mappings":"AAkBA,OAAa,EAAE,KAAK,MAAM,EAAE,KAAK,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAYjE,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,cAAc,CAAC,EAAE,iBAAiB,CAAC;IACnC,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;CACtC;AA4CD,wBAAgB,WAAW,CAAC,IAAI,GAAE,cAAmB,GAAG,IAAI,CAG3D;AAKD,wBAAgB,SAAS,IAAI,MAAM,CAAmB;AACtD,wBAAgB,WAAW,IAAI,MAAM,CAAqB;AAE1D,wBAAgB,cAAc,IAAI,cAAc,CAM/C;AAID,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAE3D;AAID,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAG1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAE5D;AAID,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;CAC/B;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAE9D;AAQD,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,qBAAqB,GAAG,uBAAuB,GAAG,yBAAyB,CAAC;IAClF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAE9D;AASD,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI,CAE1E;AAQD,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,yBAAyB,GAAG,IAAI,CAEzE;AAED,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC1B,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,4BAA4B,GAAG,IAAI,CAOpF;AAUD,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAEtE;AAUD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAExE;AASD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAElE"}

package/dist/logging.js

@@ -0,0 +1,120 @@
+// ============================================================================
+// Logging — two pino loggers, ops + audit.
+//
+// opsLog   one line per MCP tool call, plus engine-layer events (write_slow,
+//          shutdown_start, etc.). Level env-tunable. Redacts authorization
+//          and common token fields.
+//
+// auditLog one line per successful write. Before/after version, changed
+//          fields, git commit SHA. Separable to a dedicated file via
+//          MAAD_AUDIT_PATH for operators who want an append-only audit trail.
+//
+// Both are pino instances — fast JSON, zero overhead for gated levels,
+// first-class redaction. Test hook: resetLoggers() lets tests inject a
+// destination (via environment + pino transports) or capture output via a
+// child with a memory destination. See tests/mcp/logging.test.ts for the
+// pattern.
+// ============================================================================
+import pino from 'pino';
+import { createWriteStream } from 'node:fs';
+const REDACT_PATHS = [
+    'args.authorization',
+    'args.token',
+    'args.bearer',
+    'args.headers.authorization',
+    'authorization',
+    'headers.authorization',
+];
+let opsLog;
+let auditLog;
+// Default log destination is stderr (fd 2), not stdout. In stdio MCP transport
+// mode, stdout IS the JSON-RPC channel — any non-protocol bytes written there
+// (including pino log lines) corrupt the frame stream and the client
+// disconnects. stderr is safe for both transports; HTTP operators can still
+// redirect it wherever they like.
+function defaultDestination() {
+    return pino.destination({ fd: 2, sync: false });
+}
+function buildOps(opts) {
+    const level = opts.level ?? process.env.MAAD_LOG_LEVEL ?? 'info';
+    if (opts.opsDestination) {
+        return pino({ level, redact: { paths: REDACT_PATHS, censor: '[redacted]' } }, opts.opsDestination);
+    }
+    if (opts.pretty ?? process.env.MAAD_LOG_PRETTY === '1') {
+        return pino({
+            level,
+            redact: { paths: REDACT_PATHS, censor: '[redacted]' },
+            transport: { target: 'pino-pretty', options: { colorize: true, destination: 2 } },
+        });
+    }
+    return pino({ level, redact: { paths: REDACT_PATHS, censor: '[redacted]' } }, defaultDestination());
+}
+function buildAudit(opts) {
+    // Audit is always 'info' — it records discrete state changes, level gating
+    // would defeat its purpose.
+    const level = 'info';
+    if (opts.auditDestination) {
+        return pino({ level, base: { channel: 'audit' } }, opts.auditDestination);
+    }
+    const auditPath = opts.auditPath ?? process.env.MAAD_AUDIT_PATH;
+    if (auditPath && auditPath.length > 0) {
+        const stream = createWriteStream(auditPath, { flags: 'a' });
+        return pino({ level, base: { channel: 'audit' } }, stream);
+    }
+    return pino({ level, base: { channel: 'audit' } }, defaultDestination());
+}
+export function initLogging(opts = {}) {
+    opsLog = buildOps(opts);
+    auditLog = buildAudit(opts);
+}
+// Eager default — safe to call getOpsLog()/getAuditLog() before initLogging().
+initLogging();
+export function getOpsLog() { return opsLog; }
+export function getAuditLog() { return auditLog; }
+export function readLoggingEnv() {
+    const opts = {};
+    if (process.env.MAAD_LOG_LEVEL)
+        opts.level = process.env.MAAD_LOG_LEVEL;
+    if (process.env.MAAD_LOG_PRETTY === '1')
+        opts.pretty = true;
+    if (process.env.MAAD_AUDIT_PATH)
+        opts.auditPath = process.env.MAAD_AUDIT_PATH;
+    return opts;
+}
+export function logToolCall(fields) {
+    opsLog.info(fields, 'tool_call');
+}
+export function logWriteAudit(fields) {
+    auditLog.info(fields, 'write');
+}
+export function logAuthFailure(fields) {
+    opsLog.info(fields, 'auth_failure');
+}
+export function logPinRejected(fields) {
+    opsLog.info(fields, 'pin_rejected');
+}
+export function logValidationWarning(fields) {
+    opsLog.warn(fields, 'validation_warning');
+}
+export function logInstanceReload(fields) {
+    auditLog.info(fields, 'instance_reload');
+}
+export function logInstanceReloadProgress(fields) {
+    const eventName = `instance_reload_${fields.phase}`;
+    if (fields.phase === 'failed') {
+        opsLog.warn(fields, eventName);
+    }
+    else {
+        opsLog.info(fields, eventName);
+    }
+}
+export function logOpsChannelReady(fields) {
+    opsLog.info(fields, 'ops_channel_ready');
+}
+export function logSchemaCacheStale(fields) {
+    opsLog.warn(fields, 'schema_cache_stale');
+}
+export function logCommitFailure(fields) {
+    opsLog.warn(fields, 'commit_failed');
+}
+//# sourceMappingURL=logging.js.map

package/dist/logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../src/logging.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2CAA2C;AAC3C,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,oCAAoC;AACpC,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,8EAA8E;AAC9E,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,yEAAyE;AACzE,WAAW;AACX,+EAA+E;AAE/E,OAAO,IAA6C,MAAM,MAAM,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAE5C,MAAM,YAAY,GAAG;IACnB,oBAAoB;IACpB,YAAY;IACZ,aAAa;IACb,4BAA4B;IAC5B,eAAe;IACf,uBAAuB;CACxB,CAAC;AAWF,IAAI,MAAc,CAAC;AACnB,IAAI,QAAgB,CAAC;AAErB,+EAA+E;AAC/E,8EAA8E;AAC9E,qEAAqE;AACrE,4EAA4E;AAC5E,kCAAkC;AAClC,SAAS,kBAAkB;IACzB,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,QAAQ,CAAC,IAAoB;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC;IACjE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,GAAG,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;YACV,KAAK;YACL,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE;YACrD,SAAS,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE;SAClF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,UAAU,CAAC,IAAoB;IACtC,2EAA2E;IAC3E,4BAA4B;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC;IACrB,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAChE,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAuB,EAAE;IACnD,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,+EAA+E;AAC/E,WAAW,EAAE,CAAC;AAEd,MAAM,UAAU,SAAS,KAAa,OAAO,MAAM,CAAC,CAAC,CAAC;AACtD,MAAM,UAAU,WAAW,KAAa,OAAO,QAAQ,CAAC,CAAC,CAAC;AAE1D,MAAM,UAAU,cAAc;IAC5B,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACxE,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,GAAG;QAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IAC5D,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;QAAE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC9E,OAAO,IAAI,CAAC;AACd,CAAC;AAgBD,MAAM,UAAU,WAAW,CAAC,MAAyB;IACnD,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACnC,CAAC;AAwBD,MAAM,UAAU,aAAa,CAAC,MAAwB;IACpD,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC;AASD,MAAM,UAAU,cAAc,CAAC,MAAyB;IACtD,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AACtC,CAAC;AAcD,MAAM,UAAU,cAAc,CAAC,MAAyB;IACtD,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;AACtC,CAAC;AAqBD,MAAM,UAAU,oBAAoB,CAAC,MAA+B;IAClE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;AAC5C,CAAC;AAmBD,MAAM,UAAU,iBAAiB,CAAC,MAAiC;IACjE,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAC3C,CAAC;AAYD,MAAM,UAAU,yBAAyB,CAAC,MAAoC;IAC5E,MAAM,SAAS,GAAG,mBAAmB,MAAM,CAAC,KAAK,EAAE,CAAC;IACpD,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAgBD,MAAM,UAAU,kBAAkB,CAAC,MAA6B;IAC9D,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAC3C,CAAC;AAgBD,MAAM,UAAU,mBAAmB,CAAC,MAA8B;IAChE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;AAC5C,CAAC;AAkBD,MAAM,UAAU,gBAAgB,CAAC,MAA2B;IAC1D,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACvC,CAAC"}

package/dist/maad-md.d.ts

@@ -0,0 +1,11 @@
+import type { Registry, SchemaStore, BackendStats } from './types.js';
+export interface MaadMdContext {
+    projectRoot: string;
+    enginePath: string;
+    registry: Registry;
+    schemaStore: SchemaStore;
+    stats: BackendStats | null;
+}
+export declare function generateMaadMd(ctx: MaadMdContext): string;
+export declare function generateStubMaadMd(enginePath: string, projectRoot: string): string;
+//# sourceMappingURL=maad-md.d.ts.map

package/dist/maad-md.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"maad-md.d.ts","sourceRoot":"","sources":["../src/maad-md.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEtE,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;CAC5B;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,MAAM,CAazD;AA8ND,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAqBlF"}