@reposkein/mcp 0.3.0 → 0.5.0

package/dist/indexer/fetchBinary.js

@@ -1,8 +1,9 @@
 import { createWriteStream, existsSync, mkdirSync, chmodSync, statSync, readFileSync, unlinkSync, renameSync } from "node:fs";
 import { createHash, randomBytes } from "node:crypto";
-import { get } from "node:https";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
+import { pipeline } from "node:stream/promises";
+import { request, EnvHttpProxyAgent } from "undici";
 /** Supported platform keys → must match the release asset suffixes (D2).
  *  Intel macOS (darwin-x64) is intentionally unsupported: all Macs have shipped
  *  Apple Silicon since 2020, and GitHub's macos-13 Intel runners are scarce and
@@ -28,6 +29,48 @@ export function platformKey(platform = process.platform, arch = process.arch) {
 export function isWindows(platform = process.platform) {
     return platform === "win32";
 }
+/** Whether this host has a prebuilt indexer release asset. Convenience
+ *  wrapper over `platformKey()` for call sites that just need a boolean
+ *  (e.g. `init`'s pre-flight check, before attempting any fetch). */
+export function isSupportedPlatform(platform = process.platform, arch = process.arch) {
+    return platformKey(platform, arch) !== null;
+}
+/** Printed when a host has no prebuilt indexer (darwin-x64, win32-arm64, …):
+ *  the from-source fallback plus the offline override env var, so `init` can
+ *  continue (write agent config, skip only the binary-dependent steps)
+ *  instead of crashing. See docs/INSTALL.md §2 "Platform support". */
+export function cargoInstallFallbackMessage(platform = process.platform, arch = process.arch) {
+    return (`reposkein: no prebuilt indexer for ${platform}-${arch}. Build from source:\n` +
+        "  git clone https://github.com/reposkein/reposkein.git && cd reposkein\n" +
+        "  cargo install --path indexer/crates/cli --root ./cargo-out\n" +
+        "  export REPOSKEIN_INDEXER_BIN=$PWD/cargo-out/bin/reposkein-indexer\n" +
+        "Then re-run `reposkein-mcp init` (or `doctor`/`index`) with that env var set — " +
+        "REPOSKEIN_INDEXER_BIN is also the offline fallback on supported platforms " +
+        "when the GitHub Releases fetch is unreachable.");
+}
+/** Reads HTTP(S)_PROXY / NO_PROXY (either case) via undici's
+ *  `EnvHttpProxyAgent` — the standard way to proxy `undici.request()` once
+ *  undici is a direct dependency (the global `fetch`'s own undici instance
+ *  isn't importable to attach a dispatcher to). Returns `undefined` (use
+ *  undici's default, non-proxying dispatcher) when no proxy env var is set,
+ *  so the common case pays zero extra cost. Cached per-process — proxy env
+ *  vars don't change mid-run. */
+let _proxyDispatcher;
+export function proxyDispatcher() {
+    if (_proxyDispatcher !== undefined)
+        return _proxyDispatcher ?? undefined;
+    const hasProxyEnv = !!(process.env.HTTPS_PROXY ||
+        process.env.https_proxy ||
+        process.env.HTTP_PROXY ||
+        process.env.http_proxy);
+    _proxyDispatcher = hasProxyEnv ? new EnvHttpProxyAgent() : null;
+    return _proxyDispatcher ?? undefined;
+}
+/** For testing only: reset the cached proxy dispatcher so env var changes
+ *  take effect on the next call. */
+export function _resetProxyDispatcherCache() {
+    _proxyDispatcher = undefined;
+}
 /** Release asset name for a platform key, e.g. reposkein-indexer-darwin-arm64. */
 export function assetName(key) {
     return `reposkein-indexer-${key}${key.startsWith("win32") ? ".exe" : ""}`;
@@ -96,45 +139,43 @@ export function verifyDigest(tempPath, expected) {
 }
 /** Follows redirects (GitHub release assets redirect to a CDN) and streams the
  *  body to `dest`. Rejects on non-2xx (after redirects) or network error.
- *  Redirect hardening: only follows https:// redirects to github.com or *.githubusercontent.com. */
-function downloadTo(url, dest, redirects = 5) {
-    return new Promise((resolve, reject) => {
-        get(url, (res) => {
-            const status = res.statusCode ?? 0;
-            if (status >= 300 && status < 400 && res.headers.location) {
-                if (redirects <= 0) {
-                    reject(new Error("too many redirects"));
-                    return;
-                }
-                const location = res.headers.location;
-                const next = new URL(location, url);
-                if (next.protocol !== "https:") {
-                    reject(new Error(`reposkein: redirect to non-https URL rejected: ${next.href}`));
-                    return;
-                }
-                const host = next.hostname;
-                if (host !== "github.com" &&
-                    host !== "objects.githubusercontent.com" &&
-                    !host.endsWith(".githubusercontent.com")) {
-                    reject(new Error(`reposkein: redirect to non-allowlisted host rejected: ${host}`));
-                    return;
-                }
-                res.resume();
-                downloadTo(next.href, dest, redirects - 1).then(resolve, reject);
-                return;
-            }
-            if (status !== 200) {
-                res.resume();
-                reject(new Error(`download failed: HTTP ${status} for ${url}`));
-                return;
-            }
-            mkdirSync(dirname(dest), { recursive: true });
-            const file = createWriteStream(dest);
-            res.pipe(file);
-            file.on("finish", () => file.close(() => resolve()));
-            file.on("error", reject);
-        }).on("error", reject);
-    });
+ *  Redirect hardening: only follows https:// redirects to github.com or
+ *  *.githubusercontent.com.
+ *
+ *  Uses undici's `request()` (not node:https) so a `proxyDispatcher()` can be
+ *  attached — that's the only way to honor HTTPS_PROXY/NO_PROXY for this
+ *  fetch, since the global `fetch()`'s own undici instance isn't reachable to
+ *  set a dispatcher on. `request()` never auto-follows redirects (no redirect
+ *  interceptor configured), so they're handled manually below to keep the
+ *  host allowlist in the loop. */
+async function downloadTo(url, dest, redirects = 5) {
+    const res = await request(url, { dispatcher: proxyDispatcher() });
+    const status = res.statusCode;
+    if (status >= 300 && status < 400 && res.headers.location) {
+        await res.body.dump().catch(() => { });
+        if (redirects <= 0) {
+            throw new Error("too many redirects");
+        }
+        const locationHeader = res.headers.location;
+        const location = Array.isArray(locationHeader) ? locationHeader[0] : locationHeader;
+        const next = new URL(location, url);
+        if (next.protocol !== "https:") {
+            throw new Error(`reposkein: redirect to non-https URL rejected: ${next.href}`);
+        }
+        const host = next.hostname;
+        if (host !== "github.com" &&
+            host !== "objects.githubusercontent.com" &&
+            !host.endsWith(".githubusercontent.com")) {
+            throw new Error(`reposkein: redirect to non-allowlisted host rejected: ${host}`);
+        }
+        return downloadTo(next.href, dest, redirects - 1);
+    }
+    if (status !== 200) {
+        await res.body.dump().catch(() => { });
+        throw new Error(`download failed: HTTP ${status} for ${url}`);
+    }
+    mkdirSync(dirname(dest), { recursive: true });
+    await pipeline(res.body, createWriteStream(dest));
 }
 /** Downloads the indexer binary for this host into the package cache, verifies
  *  its integrity, makes it executable, and atomically renames it into place.

package/dist/indexer/fetchBinary.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetchBinary.js","sourceRoot":"","sources":["../../src/indexer/fetchBinary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC9H,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;uFAGuF;AACvF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,cAAc;IACd,WAAW;IACX,aAAa;IACb,WAAW;CACZ,CAAC,CAAC;AAEH,uDAAuD;AACvD,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,UAAU,WAAW,CACzB,WAAmB,OAAO,CAAC,QAAQ,EACnC,OAAe,OAAO,CAAC,IAAI;IAE3B,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;IAClC,OAAO,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,WAAmB,OAAO,CAAC,QAAQ;IAC3D,OAAO,QAAQ,KAAK,OAAO,CAAC;AAC9B,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,qBAAqB,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,GAAW;IACrD,OAAO,6DAA6D,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;AACjG,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,cAAc;IAC5B,+DAA+D;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAiB,CAAC;AAC3C,CAAC;AAED,yFAAyF;AACzF,IAAI,UAAU,GAA8C,SAAS,CAAC;AAEtE,SAAS,aAAa;IACpB,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAChD,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAAC,UAAU,GAAG,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACvD,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAA2B,CAAC;IAC3E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;mFAEmF;AACnF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,qCAAqC;IACpE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,kEAAkE,IAAI,oBAAoB,CAAC,CAAC;IACzI,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC3B,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB;IAC/B,UAAU,GAAG,SAAS,CAAC;AACzB,CAAC;AAED;;wFAEwF;AACxF,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,QAAuB;IACpE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;QAChH,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,IAAI,cAAc,CAAC,sFAAsF,CAAC,CAAC;IACnH,CAAC;AACH,CAAC;AAED;;oGAEoG;AACpG,SAAS,UAAU,CAAC,GAAW,EAAE,IAAY,EAAE,SAAS,GAAG,CAAC;IAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE;YACf,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;YACnC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC1D,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;oBACxC,OAAO;gBACT,CAAC;gBACD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACtC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBACpC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC/B,MAAM,CAAC,IAAI,KAAK,CAAC,kDAAkD,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;oBACjF,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;gBAC3B,IACE,IAAI,KAAK,YAAY;oBACrB,IAAI,KAAK,+BAA+B;oBACxC,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EACxC,CAAC;oBACD,MAAM,CAAC,IAAI,KAAK,CAAC,yDAAyD,IAAI,EAAE,CAAC,CAAC,CAAC;oBACnF,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnB,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC;gBAChE,OAAO;YACT,CAAC;YACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACrC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACrD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;wBAGwB;AACxB,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAkB,cAAc,EAAE;IACrE,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,IAAI;YACxE,iDAAiD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,EAAE,GAAG,OAAO,GAAG,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/F,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACjD,YAAY,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,EAAE;YAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,yEAAyE,CAAC,CAAC;QAC7G,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,gBAAgB,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;uFAOuF;AACvF,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACnD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE;QAAE,OAAO,MAAM,CAAC;IACnE,IAAI,CAAC;QACH,OAAO,MAAM,cAAc,EAAE,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,cAAc;YAAE,MAAM,GAAG,CAAC,CAAC,iDAAiD;QAC/F,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACrE,CAAC;AACH,CAAC"}
+{"version":3,"file":"fetchBinary.js","sourceRoot":"","sources":["../../src/indexer/fetchBinary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC9H,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAmB,MAAM,QAAQ,CAAC;AAErE;;;uFAGuF;AACvF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,cAAc;IACd,WAAW;IACX,aAAa;IACb,WAAW;CACZ,CAAC,CAAC;AAEH,uDAAuD;AACvD,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,UAAU,WAAW,CACzB,WAAmB,OAAO,CAAC,QAAQ,EACnC,OAAe,OAAO,CAAC,IAAI;IAE3B,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC;IAClC,OAAO,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,WAAmB,OAAO,CAAC,QAAQ;IAC3D,OAAO,QAAQ,KAAK,OAAO,CAAC;AAC9B,CAAC;AAED;;qEAEqE;AACrE,MAAM,UAAU,mBAAmB,CACjC,WAAmB,OAAO,CAAC,QAAQ,EACnC,OAAe,OAAO,CAAC,IAAI;IAE3B,OAAO,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC;AAC9C,CAAC;AAED;;;sEAGsE;AACtE,MAAM,UAAU,2BAA2B,CACzC,WAAmB,OAAO,CAAC,QAAQ,EACnC,OAAe,OAAO,CAAC,IAAI;IAE3B,OAAO,CACL,sCAAsC,QAAQ,IAAI,IAAI,wBAAwB;QAC9E,0EAA0E;QAC1E,gEAAgE;QAChE,uEAAuE;QACvE,iFAAiF;QACjF,4EAA4E;QAC5E,gDAAgD,CACjD,CAAC;AACJ,CAAC;AAED;;;;;;iCAMiC;AACjC,IAAI,gBAA+C,CAAC;AAEpD,MAAM,UAAU,eAAe;IAC7B,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,gBAAgB,IAAI,SAAS,CAAC;IACzE,MAAM,WAAW,GAAG,CAAC,CAAC,CACpB,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,UAAU,CACvB,CAAC;IACF,gBAAgB,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,OAAO,gBAAgB,IAAI,SAAS,CAAC;AACvC,CAAC;AAED;oCACoC;AACpC,MAAM,UAAU,0BAA0B;IACxC,gBAAgB,GAAG,SAAS,CAAC;AAC/B,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,qBAAqB,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,GAAW;IACrD,OAAO,6DAA6D,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;AACjG,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,cAAc;IAC5B,+DAA+D;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAiB,CAAC;AAC3C,CAAC;AAED,yFAAyF;AACzF,IAAI,UAAU,GAA8C,SAAS,CAAC;AAEtE,SAAS,aAAa;IACpB,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAChD,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAAC,UAAU,GAAG,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACvD,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAA2B,CAAC;IAC3E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;mFAEmF;AACnF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,qCAAqC;IACpE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,kEAAkE,IAAI,oBAAoB,CAAC,CAAC;IACzI,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC3B,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB;IAC/B,UAAU,GAAG,SAAS,CAAC;AACzB,CAAC;AAED;;wFAEwF;AACxF,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,QAAuB;IACpE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;QAChH,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,IAAI,cAAc,CAAC,sFAAsF,CAAC,CAAC;IACnH,CAAC;AACH,CAAC;AAED;;;;;;;;;;kCAUkC;AAClC,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,IAAY,EAAE,SAAS,GAAG,CAAC;IAChE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;IAC9B,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC1D,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,cAAc,CAAC;QACrF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC3B,IACE,IAAI,KAAK,YAAY;YACrB,IAAI,KAAK,+BAA+B;YACxC,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EACxC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,yDAAyD,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;wBAGwB;AACxB,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAkB,cAAc,EAAE;IACrE,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,IAAI;YACxE,iDAAiD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,EAAE,GAAG,OAAO,GAAG,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/F,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACjD,YAAY,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,EAAE;YAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzC,UAAU,CAAC,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,yEAAyE,CAAC,CAAC;QAC7G,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,gBAAgB,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;uFAOuF;AACvF,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACnD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE;QAAE,OAAO,MAAM,CAAC;IACnE,IAAI,CAAC;QACH,OAAO,MAAM,cAAc,EAAE,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,cAAc;YAAE,MAAM,GAAG,CAAC,CAAC,iDAAiD;QAC/F,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACrE,CAAC;AACH,CAAC"}

package/dist/indexer/indexLock.d.ts

@@ -0,0 +1,13 @@
+/** True when an indexer run is in progress OR queued.
+ *
+ *  Deliberately counts waiters, not just the active holder: the HEAD watcher
+ *  uses this to SKIP a tick rather than queue behind a tool call, and a tick
+ *  that queued would fire a redundant index the moment the tool's run
+ *  finished — for a HEAD the tool's own run has by then already indexed. */
+export declare function isIndexLockHeld(): boolean;
+/** Runs `fn` with exclusive access to the indexer. */
+export declare function withIndexLock<T>(fn: () => Promise<T>): Promise<T>;
+/** Test-only: drains the queue so one suite's leftovers can't wedge the next.
+ *  Never call this from production code — it does not cancel a running
+ *  holder, it only waits for the queue to empty. */
+export declare function drainIndexLock(): Promise<void>;

package/dist/indexer/indexLock.js

@@ -0,0 +1,66 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+/** Process-wide mutual exclusion for indexer invocations.
+ *
+ *  Every `reposkein-indexer` run writes into the served checkout's
+ *  `.reposkein/` — `nodes.jsonl`, `edges.jsonl`, the committed summary shards,
+ *  the pending-drift delta. Two runs at once on one checkout interleave those
+ *  writes, and the loser's output is whatever the filesystem happened to
+ *  order last. That was survivable while the server was one stdio process
+ *  serving one agent: index runs were driven by one caller, one at a time.
+ *
+ *  `serve --http` (REP-17) removes that accident. A write-capable tool call
+ *  (`reindex_file`, `init_cpg_skeleton`, `record_decision`'s pre-stamp
+ *  refresh) can now land while the HEAD watcher is mid-reindex, from a
+ *  different connection, with no shared call stack to serialize them. So the
+ *  serialization has to be explicit and it has to be somewhere no future
+ *  caller can forget it — which is inside `spawnIndexer` itself, the single
+ *  choke point every invocation passes through.
+ *
+ *  Reentrancy-safe: a lock holder that (now or later) reaches `spawnIndexer`
+ *  again runs straight through instead of deadlocking the process against
+ *  itself. FIFO: waiters run in arrival order, so a queued tool call can't be
+ *  starved by a fast-polling watcher. */
+const reentrant = new AsyncLocalStorage();
+/** Tail of the FIFO queue: resolves when every already-queued holder is done. */
+let tail = Promise.resolve();
+/** Holders plus waiters. Drives `isIndexLockHeld` (see its doc comment). */
+let outstanding = 0;
+/** True when an indexer run is in progress OR queued.
+ *
+ *  Deliberately counts waiters, not just the active holder: the HEAD watcher
+ *  uses this to SKIP a tick rather than queue behind a tool call, and a tick
+ *  that queued would fire a redundant index the moment the tool's run
+ *  finished — for a HEAD the tool's own run has by then already indexed. */
+export function isIndexLockHeld() {
+    return outstanding > 0;
+}
+/** Runs `fn` with exclusive access to the indexer. */
+export async function withIndexLock(fn) {
+    // Already ours (a nested spawn inside a lock-holding operation): proceed.
+    if (reentrant.getStore())
+        return fn();
+    outstanding++;
+    let release;
+    const mine = new Promise((r) => {
+        release = r;
+    });
+    const prior = tail;
+    // A rejection can't come from `mine` (release never throws), but chain
+    // defensively: a broken tail would wedge every future acquisition.
+    tail = prior.then(() => mine).catch(() => undefined);
+    try {
+        await prior;
+        return await reentrant.run(true, fn);
+    }
+    finally {
+        outstanding--;
+        release();
+    }
+}
+/** Test-only: drains the queue so one suite's leftovers can't wedge the next.
+ *  Never call this from production code — it does not cancel a running
+ *  holder, it only waits for the queue to empty. */
+export async function drainIndexLock() {
+    await tail;
+}
+//# sourceMappingURL=indexLock.js.map

package/dist/indexer/indexLock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexLock.js","sourceRoot":"","sources":["../../src/indexer/indexLock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;yCAoByC;AAEzC,MAAM,SAAS,GAAG,IAAI,iBAAiB,EAAQ,CAAC;AAEhD,iFAAiF;AACjF,IAAI,IAAI,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAC5C,4EAA4E;AAC5E,IAAI,WAAW,GAAG,CAAC,CAAC;AAEpB;;;;;4EAK4E;AAC5E,MAAM,UAAU,eAAe;IAC7B,OAAO,WAAW,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAI,EAAoB;IACzD,0EAA0E;IAC1E,IAAI,SAAS,CAAC,QAAQ,EAAE;QAAE,OAAO,EAAE,EAAE,CAAC;IAEtC,WAAW,EAAE,CAAC;IACd,IAAI,OAAoB,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;QACnC,OAAO,GAAG,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,CAAC;IACnB,uEAAuE;IACvE,mEAAmE;IACnE,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC;QACZ,OAAO,MAAM,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,WAAW,EAAE,CAAC;QACd,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;oDAEoD;AACpD,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,IAAI,CAAC;AACb,CAAC"}

package/dist/indexer/runIndexer.d.ts

@@ -3,8 +3,14 @@ export interface SpawnResult {
     stdout: string;
     stderr: string;
 }
-/** Repo root the indexer operates on: REPOSKEIN_REPO_PATH or cwd. */
-export declare function repoPath(): string;
+/** Runs the indexer binary, capped and timed out.
+ *
+ *  Serialized process-wide by `withIndexLock`: every invocation writes into
+ *  the target checkout's `.reposkein/`, and since REP-17 two callers (a
+ *  write-capable tool call on one connection, the HEAD watcher on another) can
+ *  arrive concurrently with no shared call stack to order them. The lock lives
+ *  HERE rather than at each call site so a new call site cannot forget it —
+ *  see `indexLock.ts`. */
 export declare function spawnIndexer(bin: string, args: string[]): Promise<SpawnResult>;
 export interface IndexJsonStats {
     repo_id: string;

package/dist/indexer/runIndexer.js

@@ -1,4 +1,5 @@
 import { spawn } from "node:child_process";
+import { withIndexLock } from "./indexLock.js";
 const ALLOWED_KEYS = new Set(["PATH", "HOME", "TMPDIR", "LANG", "LC_ALL", "NEO4J_URI", "NEO4J_USER", "NEO4J_PASSWORD"]);
 /** Indexer spawn timeout (~10 minutes). Large repos can be slow but shouldn't hang forever. */
 const INDEXER_TIMEOUT_MS = 600_000;
@@ -13,11 +14,26 @@ function buildChildEnv() {
     }
     return env;
 }
-/** Repo root the indexer operates on: REPOSKEIN_REPO_PATH or cwd. */
-export function repoPath() {
-    return process.env.REPOSKEIN_REPO_PATH ?? process.cwd();
-}
+// NOTE: there used to be a `repoPath()` here (REPOSKEIN_REPO_PATH ?? cwd),
+// an independent repo-path resolver `tools/indexerTools.ts` called instead
+// of using its caller's already-resolved active repo. That let init/reindex
+// bypass session.select_repo entirely and index the wrong repo in workspace
+// mode — removed; every caller now takes an explicit `repoPath` param
+// sourced from mcp/src/store/repoSession.ts. Don't reintroduce an
+// env/cwd-based resolver here — see mcp/src/store/resolveRepoPath.ts for the
+// one central resolution algorithm.
+/** Runs the indexer binary, capped and timed out.
+ *
+ *  Serialized process-wide by `withIndexLock`: every invocation writes into
+ *  the target checkout's `.reposkein/`, and since REP-17 two callers (a
+ *  write-capable tool call on one connection, the HEAD watcher on another) can
+ *  arrive concurrently with no shared call stack to order them. The lock lives
+ *  HERE rather than at each call site so a new call site cannot forget it —
+ *  see `indexLock.ts`. */
 export function spawnIndexer(bin, args) {
+    return withIndexLock(() => spawnIndexerUnlocked(bin, args));
+}
+function spawnIndexerUnlocked(bin, args) {
     return new Promise((resolve, reject) => {
         const child = spawn(bin, args, { env: buildChildEnv() });
         let stdout = "";

package/dist/indexer/runIndexer.js.map

@@ -1 +1 @@
-{"version":3,"file":"runIndexer.js","sourceRoot":"","sources":["../../src/indexer/runIndexer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAExH,+FAA+F;AAC/F,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAErC,SAAS,aAAa;IACpB,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,qEAAqE;AACrE,MAAM,UAAU,QAAQ;IACtB,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAc;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,6EAA6E;QAC7E,SAAS,YAAY,CAAC,GAAW,EAAE,KAAa;YAC9C,MAAM,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC;YAC7B,IAAI,QAAQ,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBACvC,OAAO,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,kBAAkB,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAEvB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAcD,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO,MAAwB,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;yDAEyD;AACzD,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AACtC,CAAC"}
+{"version":3,"file":"runIndexer.js","sourceRoot":"","sources":["../../src/indexer/runIndexer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAExH,+FAA+F;AAC/F,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAErC,SAAS,aAAa;IACpB,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,2EAA2E;AAC3E,2EAA2E;AAC3E,4EAA4E;AAC5E,4EAA4E;AAC5E,sEAAsE;AACtE,kEAAkE;AAClE,6EAA6E;AAC7E,oCAAoC;AAEpC;;;;;;;0BAO0B;AAC1B,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,IAAc;IACtD,OAAO,aAAa,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW,EAAE,IAAc;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,6EAA6E;QAC7E,SAAS,YAAY,CAAC,GAAW,EAAE,KAAa;YAC9C,MAAM,QAAQ,GAAG,GAAG,GAAG,KAAK,CAAC;YAC7B,IAAI,QAAQ,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBACvC,OAAO,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,kBAAkB,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAEvB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAcD,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO,MAAwB,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;yDAEyD;AACzD,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AACtC,CAAC"}

package/dist/serve/serve.d.ts

@@ -0,0 +1,95 @@
+import { type IncomingMessage, type ServerResponse } from "node:http";
+import { type CreateMcpServerOptions } from "../server/createMcpServer.js";
+import { type ServeToken } from "./tokens.js";
+/** The one path the MCP Streamable HTTP transport answers on. Everything else
+ *  is the viewer + `/api/*`, served by view.ts's own handler. */
+export declare const MCP_PATH = "/mcp";
+export interface ServeOptions {
+    port: number;
+    host: string;
+    /** `git rev-parse HEAD` poll interval. 0 disables the watcher. */
+    watchIntervalMs: number;
+}
+/** Default bind host. NOT 0.0.0.0: even in the mode that exists to be
+ *  reachable, exposure is an explicit `--host` decision by the operator. */
+export declare const DEFAULT_SERVE_HOST = "127.0.0.1";
+export declare const DEFAULT_SERVE_PORT = 4318;
+export declare const DEFAULT_WATCH_INTERVAL_MS = 30000;
+export declare function parseServeArgs(argv: string[]): {
+    repoPath: string;
+    opts: ServeOptions;
+    http: boolean;
+};
+type NodeHandler = (req: IncomingMessage, res: ServerResponse) => void;
+export interface CreateServeAppOptions {
+    repoPath: string;
+    repoId: string;
+    tokens: readonly ServeToken[];
+    log?: (message: string) => void;
+    /** Test seam: replaces `makeViewHandler` (which reads the repo's JSONL and
+     *  shells out to git at construction time). */
+    viewHandlerFactory?: (repoPath: string, repoId: string) => NodeHandler;
+    /** Test seam: passed through to every per-connection `createMcpServer`. */
+    ensureGraph?: CreateMcpServerOptions["ensureGraph"];
+    /** Concurrent-session cap. Defaults to `MAX_SESSIONS` (64); lowered in
+     *  tests so the cap and the reaper-then-retry path are cheap to exercise. */
+    maxSessions?: number;
+    /** Idle-session reap threshold. Defaults to `SESSION_IDLE_MS` (5 min). */
+    idleMs?: number;
+    /** Clock. Injectable so the reaper can be tested without waiting minutes. */
+    now?: () => number;
+}
+export interface ServeApp {
+    handler: NodeHandler;
+    /** Rebuilds the `/api/*` handler. The view handler snapshots node/edge
+     *  counts and git metadata once per construction, so after a re-index the
+     *  hosted viewer would otherwise keep reporting the old graph — this is the
+     *  watcher's `onReindexed` hook, and it is why the MCP tools and the viewer
+     *  cannot drift apart: they are refreshed by the same event. */
+    refresh: () => void;
+    /** Closes every session idle past `idleMs` with no request in flight, and
+     *  returns how many it closed. Called automatically before each new-session
+     *  attempt (so a server wedged at the cap by dead clients frees itself on
+     *  the next connect); exposed for tests. */
+    sweepIdleSessions: () => number;
+    close: () => Promise<void>;
+    sessionCount: () => number;
+}
+/** Builds the one request handler that answers both the MCP endpoint and the
+ *  viewer/`/api/*` surface (REP-17 requirement: one process, one graph).
+ *
+ *  URL layout:
+ *    POST/GET/DELETE `/mcp`  — MCP Streamable HTTP transport
+ *    GET `/api/graph`, `/api/jsonl/*`, `/api/source`, `/api/temporal`
+ *                            — byte-identical to `reposkein-mcp view`, because
+ *                              it IS view.ts's handler, not a copy
+ *    GET everything else     — the prebuilt viewer SPA
+ *
+ *  Auth applies to every route. `/mcp` accepts ONLY
+ *  `Authorization: Bearer <token>`; the viewer routes additionally accept
+ *  `?token=` (which is immediately traded for an HttpOnly cookie and
+ *  redirected away, so it appears once) because a static SPA in a browser
+ *  cannot attach an Authorization header to its own page load. */
+export declare function createServeApp(opts: CreateServeAppOptions): ServeApp;
+/** `git status --porcelain` for the served checkout, or null when git is
+ *  unavailable / the path isn't a repo. Never throws. */
+export declare function gitPorcelainStatus(repoPath: string): string[] | null;
+/** The startup warning for serving a checkout with local modifications, or
+ *  null when the tree is clean (or git can't tell us).
+ *
+ *  Serving a dirty checkout is legal and sometimes exactly what an operator
+ *  wants, so this WARNS and never refuses. But it is worth saying loudly:
+ *  `serve`'s own re-index writes into `.reposkein/` (the committed summary
+ *  shards absorb every `local/summaries-*.jsonl` sidecar), so a checkout that
+ *  someone also works in will accumulate diffs that look like the server's
+ *  fault — and a re-index landing on top of half-finished local edits indexes
+ *  those edits. A dedicated deploy clone has neither problem. */
+export declare function dirtyCheckoutWarning(repoPath: string, statusFn?: (p: string) => string[] | null): string | null;
+/** `reposkein-mcp serve --http [path] [--port N] [--host H] [--watch-interval S]`.
+ *
+ *  Strictly optional (REP-17 / adr:2026-08-21-optional-shared-remote-mcp-server-…):
+ *  stdio is still the default transport and nothing binds a socket unless this
+ *  runs. Refuses to start without at least one configured token — an
+ *  unauthenticated remote MCP server would hand write access to the network. */
+export declare function runServe(repoPath: string, repoId: string, opts: ServeOptions): Promise<number>;
+export {};