@sentropic/h2a 0.97.2 → 0.97.4

package/dist/runtime/mcp/notifications.js.map

@@ -1 +1 @@
-{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../../src/runtime/mcp/notifications.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,gBAAgB,EAGjB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAqCxD,SAAS,cAAc,CACrB,OAAmB,EACnB,KAAkC;IAElC,OAAO,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB,EAAE,QAAgB;IACvD,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAiB,EAAE,aAAqB;IACjE,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,OAAO;QACL,KAAK,EAAE,IAAI,GAAG,EAAE;QAChB,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,EAAE;QACjC,YAAY,EAAE,IAAI,GAAG,EAAE;QACvB,OAAO,EAAE,IAAI,GAAG,EAAE;KACnB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IAKd;IACA;IACA;IACT;IACS;IARF,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;IACzD,KAAK,CAAkC;IAE/C,YACmB,QAAyB,EACzB,KAAiB,EACjB,IAAY,EACrB,IAAkC,EACzB,UAAkB;QAJlB,aAAQ,GAAR,QAAQ,CAAiB;QACzB,UAAK,GAAL,KAAK,CAAY;QACjB,SAAI,GAAJ,IAAI,CAAQ;QACrB,SAAI,GAAJ,IAAI,CAA8B;QACzB,eAAU,GAAV,UAAU,CAAQ;IAClC,CAAC;IAEJ,OAAO,CAAC,IAAkC;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACK,cAAc,CAA8B;IACpD,iBAAiB,CAAC,EAA4C;QAC5D,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAErC,+DAA+D;QAC/D,kEAAkE;QAClE,0DAA0D;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAE5D,4EAA4E;QAC5E,qDAAqD;QACrD,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAE1E,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,cAAc,EAAE,CAAC;YAEvE,0CAA0C;YAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS,CAAC,CACxD,CAAC;YACF,IAAI,cAAc,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAAE,CAAC;gBACpD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;oBACzB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACzB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC;wBACzD,IAAI,IAAI,EAAE,CAAC;4BACT,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,sBAAsB,EAAE;gCACnD,IAAI,EAAE;oCACJ,SAAS,EAAE,IAAI,CAAC,SAAS;oCACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oCACvB,IAAI,EAAE,IAAI,CAAC,IAAI;oCACf,SAAS,EAAE,IAAI,CAAC,SAAS;iCAC1B;6BACF,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,cAAc,CAAC,OAAO,EAAE,oBAAoB,CAAC,EAAE,CAAC;gBAClD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACrB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,EAAE;4BACjD,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE;yBACzB,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,oBAAoB;YACpB,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,wBAAwB,CAAC;gBAChE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,cAAc,CAAC,OAAO,EAAE,wBAAwB,CAAC,EAAE,CAAC;gBACtD,KAAK,MAAM,UAAU,IAAI,QAAQ,EAAE,CAAC;oBAClC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC5C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,wBAAwB,EAAE;4BACrD,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,UAAU;yBACX,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,oEAAoE;gBACpE,yEAAyE;gBACzE,yEAAyE;gBACzE,0EAA0E;gBAC1E,wEAAwE;gBACxE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;oBAAE,IAAI,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACnE,CAAC;YAED,2EAA2E;YAC3E,MAAM,eAAe,GAAG,IAAI,GAAG,EAA+B,CAAC;YAC/D,IAAI,cAAc,CAAC,OAAO,EAAE,4BAA4B,CAAC,EAAE,CAAC;gBAC1D,KAAK,MAAM,aAAa,IAAI,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;oBAC3D,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;oBAC3D,MAAM,SAAS,GACb,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;oBACnD,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;wBACtB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,4BAA4B,EAAE;4BACzD,aAAa;4BACb,UAAU,EAAE,KAAK,GAAG,SAAS;4BAC7B,YAAY,EAAE,KAAK;yBACpB,CAAC,CAAC;oBACL,CAAC;oBACD,eAAe,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;YAED,wEAAwE;YACxE,uEAAuE;YACvE,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;gBAC/B,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAC7C,CAAC;YACF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3D,IAAI,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;gBAC5C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAClC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE;4BAC3C,QAAQ,EAAE,CAAC,CAAC,QAAQ;4BACpB,KAAK,EAAE,CAAC,CAAC,KAAK;4BACd,MAAM,EAAE,CAAC,CAAC,MAAM;4BAChB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBACvC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,cAAc,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,CAAC;gBAC9C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC9B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAC/D,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE;gBACpC,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,EAAE;gBACzC,YAAY,EAAE,eAAe;gBAC7B,OAAO,EAAE,UAAU;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,IAAI,CACV,SAAiB,EACjB,KAAkC,EAClC,IAA6B;QAE7B,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,IAAI,CAAC,+BAA+B,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO;QAC7D,IAAI,CAAC,IAAI,CAAC;YACR,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE;SACnC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../../src/runtime/mcp/notifications.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,gBAAgB,EAGjB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AA+CxD,SAAS,cAAc,CACrB,OAAmB,EACnB,KAAkC;IAElC,OAAO,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,KAAiB,EAAE,QAAgB;IACvD,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAiB,EAAE,aAAqB;IACjE,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,OAAO;QACL,KAAK,EAAE,IAAI,GAAG,EAAE;QAChB,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,EAAE;QACjC,YAAY,EAAE,IAAI,GAAG,EAAE;QACvB,OAAO,EAAE,IAAI,GAAG,EAAE;KACnB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IAKd;IACA;IACA;IACT;IACS;IARF,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;IACzD,KAAK,CAAkC;IAE/C,YACmB,QAAyB,EACzB,KAAiB,EACjB,IAAY,EACrB,IAAkC,EACzB,UAAkB;QAJlB,aAAQ,GAAR,QAAQ,CAAiB;QACzB,UAAK,GAAL,KAAK,CAAY;QACjB,SAAI,GAAJ,IAAI,CAAQ;QACrB,SAAI,GAAJ,IAAI,CAA8B;QACzB,eAAU,GAAV,UAAU,CAAQ;IAClC,CAAC;IAEJ,OAAO,CAAC,IAAkC;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACK,cAAc,CAA8B;IACpD,iBAAiB,CAAC,EAA4C;QAC5D,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAErC,+DAA+D;QAC/D,kEAAkE;QAClE,0DAA0D;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAE5D,4EAA4E;QAC5E,qDAAqD;QACrD,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAE1E,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,cAAc,EAAE,CAAC;YACvE,4EAA4E;YAC5E,4EAA4E;YAC5E,6EAA6E;YAC7E,0DAA0D;YAC1D,IAAI,QAAQ,GAAG,IAAI,CAAC;YAEpB,0CAA0C;YAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS,CAAC,CACxD,CAAC;YACF,IAAI,cAAc,CAAC,OAAO,EAAE,sBAAsB,CAAC,EAAE,CAAC;gBACpD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;oBACzB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACzB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC;wBACzD,IAAI,IAAI,EAAE,CAAC;4BACT,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,sBAAsB,EAAE;gCAC9D,IAAI,EAAE;oCACJ,SAAS,EAAE,IAAI,CAAC,SAAS;oCACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oCACvB,IAAI,EAAE,IAAI,CAAC,IAAI;oCACf,SAAS,EAAE,IAAI,CAAC,SAAS;iCAC1B;6BACF,CAAC,IAAI,QAAQ,CAAC;wBACjB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,cAAc,CAAC,OAAO,EAAE,oBAAoB,CAAC,EAAE,CAAC;gBAClD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACrB,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,EAAE;4BAC5D,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE;yBACzB,CAAC,IAAI,QAAQ,CAAC;oBACjB,CAAC;gBACH,CAAC;YACH,CAAC;YAED,oBAAoB;YACpB,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,wBAAwB,CAAC;gBAChE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,cAAc,CAAC,OAAO,EAAE,wBAAwB,CAAC,EAAE,CAAC;gBACtD,KAAK,MAAM,UAAU,IAAI,QAAQ,EAAE,CAAC;oBAClC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC5C,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,wBAAwB,EAAE;4BAChE,QAAQ,EAAE,OAAO,CAAC,QAAQ;4BAC1B,UAAU;yBACX,CAAC,IAAI,QAAQ,CAAC;oBACjB,CAAC;gBACH,CAAC;gBACD,oEAAoE;gBACpE,yEAAyE;gBACzE,yEAAyE;gBACzE,0EAA0E;gBAC1E,wEAAwE;gBACxE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;oBAAE,IAAI,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACnE,CAAC;YAED,2EAA2E;YAC3E,MAAM,eAAe,GAAG,IAAI,GAAG,EAA+B,CAAC;YAC/D,IAAI,cAAc,CAAC,OAAO,EAAE,4BAA4B,CAAC,EAAE,CAAC;gBAC1D,KAAK,MAAM,aAAa,IAAI,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;oBAC3D,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;oBAC3D,MAAM,SAAS,GACb,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;oBACnD,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;wBACtB,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,4BAA4B,EAAE;4BACpE,aAAa;4BACb,UAAU,EAAE,KAAK,GAAG,SAAS;4BAC7B,YAAY,EAAE,KAAK;yBACpB,CAAC,IAAI,QAAQ,CAAC;oBACjB,CAAC;oBACD,eAAe,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;YAED,wEAAwE;YACxE,uEAAuE;YACvE,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;gBAC/B,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAC7C,CAAC;YACF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3D,IAAI,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;gBAC5C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;oBACxB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAClC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE;4BACtD,QAAQ,EAAE,CAAC,CAAC,QAAQ;4BACpB,KAAK,EAAE,CAAC,CAAC,KAAK;4BACd,MAAM,EAAE,CAAC,CAAC,MAAM;4BAChB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBACvC,CAAC,IAAI,QAAQ,CAAC;oBACjB,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,cAAc,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAAE,CAAC;gBAC9C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAC9B,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,QAAQ,CAAC;oBACtF,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE;oBACpC,KAAK,EAAE,MAAM;oBACb,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,EAAE;oBACzC,YAAY,EAAE,eAAe;oBAC7B,OAAO,EAAE,UAAU;iBACpB,CAAC,CAAC;YACL,CAAC;YACD,wEAAwE;QAC1E,CAAC;IACH,CAAC;IAED,6FAA6F;IACrF,IAAI,CACV,SAAiB,EACjB,KAAkC,EAClC,IAA6B;QAE7B,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAC5B,IAAI,CAAC,+BAA+B,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE;SACnC,CAAC,CAAC;QACH,4EAA4E;QAC5E,4EAA4E;QAC5E,wEAAwE;QACxE,OAAO,CAAC,CACN,OAAO,KAAK,IAAI;YAChB,OAAO,OAAO,KAAK,QAAQ;YAC3B,UAAU,IAAI,OAAO;YACpB,OAAkC,CAAC,QAAQ,KAAK,KAAK,CACvD,CAAC;IACJ,CAAC;CACF"}

package/dist/runtime/mcp/payload-store.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Durable recovery store for oversize MCP outputs (lot L1).
+ *
+ * When a legitimate response or notification exceeds the frame budget
+ * (`frame-budget.ts`), the INTACT original bytes are persisted here BEFORE the
+ * bounded error/notice is emitted, and the client recovers them in budget-sized
+ * chunks through the `h2a_read_payload` tool. The store never holds tool
+ * arguments or a private key — only output already destined for THIS client —
+ * and it never re-executes an effectful tool: it hands back stored bytes.
+ *
+ * Security properties (DEC-116 lineage):
+ *  - Root/tenant confinement: one store per store-root; a ref is a 256-bit
+ *    random capability whose file name IS the ref, so there is no free path, no
+ *    `../`, and no cross-tenant lookup. Symlinks are refused on read.
+ *  - Atomic publication: content is staged to a temp file (0600) and renamed.
+ *  - Integrity: every payload carries a SHA-256 the reader verifies after
+ *    reassembly.
+ *  - Durability across restart: refs survive; nothing is purged at boot. Only a
+ *    dedicated maintenance sweep removes EXPIRED refs, never live data.
+ */
+/** Announced recovery window: a ref is readable for 24h after it is written. */
+export declare const PAYLOAD_TTL_MS: number;
+/** Proposed per-root ceiling (measured against the store dir before a write). */
+export declare const PAYLOAD_ROOT_QUOTA_BYTES: number;
+/** Hard maximum a single read may return (also bounded again by the frame budget). */
+export declare const PAYLOAD_MAX_READ_BYTES = 65536;
+export interface PayloadRecoveryRef {
+    /** Opaque 256-bit capability. */
+    readonly ref: string;
+    readonly sha256: string;
+    readonly totalBytes: number;
+    readonly expiresAt: string;
+}
+export type PayloadReadError = "payload_not_found" | "payload_expired" | "invalid_offset" | "payload_corrupt";
+export interface PayloadReadChunk {
+    readonly ref: string;
+    readonly encoding: "base64";
+    readonly data: string;
+    readonly offset: number;
+    readonly nextOffset: number | null;
+    readonly totalBytes: number;
+    readonly sha256: string;
+    readonly expiresAt: string;
+}
+export declare class PayloadStoreError extends Error {
+    readonly reason: "recovery_unavailable";
+    readonly cause: string;
+    constructor(reason: "recovery_unavailable", cause: string, message: string);
+}
+export interface PayloadStore {
+    /** The scope (store-root) every ref of this store is bound to. */
+    readonly scope: string;
+    /** Persist output bytes and return the recovery ref, or throw PayloadStoreError. */
+    persistOutput(bytes: Buffer): PayloadRecoveryRef;
+    /** Read a budget-sized chunk of a ref, or a typed read error. */
+    readPayload(ref: string, offset: number, maxBytes: number): PayloadReadChunk | {
+        error: PayloadReadError;
+    };
+    /** Remove ONLY expired refs (dedicated maintenance; never touches live data). */
+    sweepExpired(now?: number): number;
+}
+/**
+ * A payload store confined to `<root>/mcp-payloads/`. `scope` defaults to the
+ * root, so two roots (two tenants) never share a namespace.
+ */
+export declare function createPayloadStore(root: string, scope?: string): PayloadStore;
+//# sourceMappingURL=payload-store.d.ts.map

package/dist/runtime/mcp/payload-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-store.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp/payload-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAoBH,gFAAgF;AAChF,eAAO,MAAM,cAAc,QAAsB,CAAC;AAElD,iFAAiF;AACjF,eAAO,MAAM,wBAAwB,QAAoB,CAAC;AAE1D,sFAAsF;AACtF,eAAO,MAAM,sBAAsB,QAAQ,CAAC;AAI5C,MAAM,WAAW,kBAAkB;IACjC,iCAAiC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAWD,MAAM,MAAM,gBAAgB,GACxB,mBAAmB,GACnB,iBAAiB,GACjB,gBAAgB,GAChB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,QAAQ,CAAC,MAAM,EAAE,sBAAsB;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM;gBADb,MAAM,EAAE,sBAAsB,EAC9B,KAAK,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM;CAKlB;AAED,MAAM,WAAW,YAAY;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,CAAC;IACjD,iEAAiE;IACjE,WAAW,CACT,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,gBAAgB,GAAG;QAAE,KAAK,EAAE,gBAAgB,CAAA;KAAE,CAAC;IAClD,iFAAiF;IACjF,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACpC;AAqBD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,MAAa,GAAG,YAAY,CAwLnF"}

package/dist/runtime/mcp/payload-store.js

@@ -0,0 +1,242 @@
+/**
+ * Durable recovery store for oversize MCP outputs (lot L1).
+ *
+ * When a legitimate response or notification exceeds the frame budget
+ * (`frame-budget.ts`), the INTACT original bytes are persisted here BEFORE the
+ * bounded error/notice is emitted, and the client recovers them in budget-sized
+ * chunks through the `h2a_read_payload` tool. The store never holds tool
+ * arguments or a private key — only output already destined for THIS client —
+ * and it never re-executes an effectful tool: it hands back stored bytes.
+ *
+ * Security properties (DEC-116 lineage):
+ *  - Root/tenant confinement: one store per store-root; a ref is a 256-bit
+ *    random capability whose file name IS the ref, so there is no free path, no
+ *    `../`, and no cross-tenant lookup. Symlinks are refused on read.
+ *  - Atomic publication: content is staged to a temp file (0600) and renamed.
+ *  - Integrity: every payload carries a SHA-256 the reader verifies after
+ *    reassembly.
+ *  - Durability across restart: refs survive; nothing is purged at boot. Only a
+ *    dedicated maintenance sweep removes EXPIRED refs, never live data.
+ */
+import { createHash, randomBytes } from "node:crypto";
+import { chmodSync, closeSync, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+/** Announced recovery window: a ref is readable for 24h after it is written. */
+export const PAYLOAD_TTL_MS = 24 * 60 * 60 * 1000;
+/** Proposed per-root ceiling (measured against the store dir before a write). */
+export const PAYLOAD_ROOT_QUOTA_BYTES = 128 * 1024 * 1024;
+/** Hard maximum a single read may return (also bounded again by the frame budget). */
+export const PAYLOAD_MAX_READ_BYTES = 65536;
+const REF_RE = /^[0-9a-f]{64}$/;
+export class PayloadStoreError extends Error {
+    reason;
+    cause;
+    constructor(reason, cause, message) {
+        super(message);
+        this.reason = reason;
+        this.cause = cause;
+        this.name = "PayloadStoreError";
+    }
+}
+function binPath(dir, ref) {
+    return join(dir, `${ref}.bin`);
+}
+function metaPath(dir, ref) {
+    return join(dir, `${ref}.json`);
+}
+function dirBytes(dir) {
+    let total = 0;
+    for (const entry of readdirSync(dir)) {
+        try {
+            total += statSync(join(dir, entry)).size;
+        }
+        catch {
+            /* a racing unlink is not a measurement failure */
+        }
+    }
+    return total;
+}
+/**
+ * A payload store confined to `<root>/mcp-payloads/`. `scope` defaults to the
+ * root, so two roots (two tenants) never share a namespace.
+ */
+export function createPayloadStore(root, scope = root) {
+    const dir = join(root, "mcp-payloads");
+    function ensureDir() {
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+        try {
+            chmodSync(dir, 0o700);
+        }
+        catch {
+            /* best effort; a pre-existing dir may be owned differently in tests */
+        }
+    }
+    function sweepExpired(now = Date.now()) {
+        if (!existsSync(dir))
+            return 0;
+        let removed = 0;
+        for (const entry of readdirSync(dir)) {
+            if (!entry.endsWith(".json"))
+                continue;
+            const ref = entry.slice(0, -".json".length);
+            if (!REF_RE.test(ref))
+                continue;
+            try {
+                const meta = JSON.parse(readFileSync(join(dir, entry), "utf8"));
+                if (Date.parse(meta.expiresAt) <= now) {
+                    try {
+                        unlinkSync(metaPath(dir, ref));
+                    }
+                    catch {
+                        /* already gone */
+                    }
+                    try {
+                        unlinkSync(binPath(dir, ref));
+                    }
+                    catch {
+                        /* already gone */
+                    }
+                    removed += 1;
+                }
+            }
+            catch {
+                /* a corrupt meta is left for a human sweep, never live source data */
+            }
+        }
+        return removed;
+    }
+    function persistOutput(bytes) {
+        try {
+            ensureDir();
+        }
+        catch (err) {
+            throw new PayloadStoreError("recovery_unavailable", err.code ?? "mkdir_failed", `cannot create payload store directory: ${err.message}`);
+        }
+        // Reclaim expired space before enforcing the quota; never evict live data.
+        let used = 0;
+        try {
+            sweepExpired();
+            used = dirBytes(dir);
+        }
+        catch {
+            used = 0;
+        }
+        if (used + bytes.length > PAYLOAD_ROOT_QUOTA_BYTES) {
+            throw new PayloadStoreError("recovery_unavailable", "quota_exceeded", `payload store quota exceeded for ${dir}`);
+        }
+        const ref = randomBytes(32).toString("hex");
+        const sha256 = `sha256:${createHash("sha256").update(bytes).digest("hex")}`;
+        const now = Date.now();
+        const meta = {
+            sha256,
+            totalBytes: bytes.length,
+            createdAt: new Date(now).toISOString(),
+            expiresAt: new Date(now + PAYLOAD_TTL_MS).toISOString(),
+            scope
+        };
+        const tmpBin = binPath(dir, `.${ref}.tmp`);
+        const tmpMeta = metaPath(dir, `.${ref}.tmp`);
+        try {
+            writeFileSync(tmpBin, bytes, { mode: 0o600, flag: "wx" });
+            writeFileSync(tmpMeta, `${JSON.stringify(meta)}\n`, { mode: 0o600, flag: "wx" });
+            renameSync(tmpBin, binPath(dir, ref));
+            renameSync(tmpMeta, metaPath(dir, ref));
+        }
+        catch (err) {
+            for (const p of [tmpBin, tmpMeta, binPath(dir, ref), metaPath(dir, ref)]) {
+                try {
+                    unlinkSync(p);
+                }
+                catch {
+                    /* best effort cleanup of a half-written record */
+                }
+            }
+            throw new PayloadStoreError("recovery_unavailable", err.code ?? "write_failed", `cannot persist payload: ${err.message}`);
+        }
+        return { ref, sha256, totalBytes: bytes.length, expiresAt: meta.expiresAt };
+    }
+    function readMeta(ref) {
+        const mp = metaPath(dir, ref);
+        let st;
+        try {
+            st = lstatSync(mp);
+        }
+        catch {
+            return undefined;
+        }
+        if (!st.isFile())
+            return undefined; // refuse a symlink/dir masquerading as a ref
+        try {
+            return JSON.parse(readFileSync(mp, "utf8"));
+        }
+        catch {
+            return undefined;
+        }
+    }
+    function readPayload(ref, offset, maxBytes) {
+        if (typeof ref !== "string" || !REF_RE.test(ref)) {
+            return { error: "payload_not_found" };
+        }
+        const meta = readMeta(ref);
+        if (!meta || meta.scope !== scope)
+            return { error: "payload_not_found" };
+        if (Date.parse(meta.expiresAt) <= Date.now())
+            return { error: "payload_expired" };
+        if (!Number.isInteger(offset) || offset < 0 || offset > meta.totalBytes) {
+            return { error: "invalid_offset" };
+        }
+        const bp = binPath(dir, ref);
+        let bst;
+        try {
+            bst = lstatSync(bp);
+        }
+        catch {
+            return { error: "payload_not_found" };
+        }
+        if (!bst.isFile() || bst.size !== meta.totalBytes)
+            return { error: "payload_corrupt" };
+        const cap = Math.max(1, Math.min(Number.isInteger(maxBytes) && maxBytes > 0 ? maxBytes : PAYLOAD_MAX_READ_BYTES, PAYLOAD_MAX_READ_BYTES));
+        const remaining = meta.totalBytes - offset;
+        const chunkLen = Math.min(cap, remaining);
+        const buf = Buffer.allocUnsafe(chunkLen);
+        let fd;
+        try {
+            fd = openSync(bp, "r");
+            let read = 0;
+            while (read < chunkLen) {
+                const n = readSync(fd, buf, read, chunkLen - read, offset + read);
+                if (n === 0)
+                    break;
+                read += n;
+            }
+            if (read !== chunkLen)
+                return { error: "payload_corrupt" };
+        }
+        catch {
+            return { error: "payload_corrupt" };
+        }
+        finally {
+            if (fd !== undefined) {
+                try {
+                    closeSync(fd);
+                }
+                catch {
+                    /* fd closed on error already */
+                }
+            }
+        }
+        const nextOffset = offset + chunkLen;
+        return {
+            ref,
+            encoding: "base64",
+            data: buf.toString("base64"),
+            offset,
+            nextOffset: nextOffset >= meta.totalBytes ? null : nextOffset,
+            totalBytes: meta.totalBytes,
+            sha256: meta.sha256,
+            expiresAt: meta.expiresAt
+        };
+    }
+    return { scope, persistOutput, readPayload, sweepExpired };
+}
+//# sourceMappingURL=payload-store.js.map

package/dist/runtime/mcp/payload-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-store.js","sourceRoot":"","sources":["../../../src/runtime/mcp/payload-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,UAAU,EACV,QAAQ,EACR,UAAU,EACV,aAAa,EACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElD,iFAAiF;AACjF,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1D,sFAAsF;AACtF,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAE5C,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAoChC,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAE/B;IACA;IAFX,YACW,MAA8B,EAC9B,KAAa,EACtB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,WAAM,GAAN,MAAM,CAAwB;QAC9B,UAAK,GAAL,KAAK,CAAQ;QAItB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAiBD,SAAS,OAAO,CAAC,GAAW,EAAE,GAAW;IACvC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC;AACjC,CAAC;AACD,SAAS,QAAQ,CAAC,GAAW,EAAE,GAAW;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAAgB,IAAI;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAEvC,SAAS,SAAS;QAChB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;IACH,CAAC;IAED,SAAS,YAAY,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;QAC5C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACvC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,SAAS;YAChC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAgB,CAAC;gBAC/E,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,EAAE,CAAC;oBACtC,IAAI,CAAC;wBACH,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;oBACjC,CAAC;oBAAC,MAAM,CAAC;wBACP,kBAAkB;oBACpB,CAAC;oBACD,IAAI,CAAC;wBACH,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;oBAChC,CAAC;oBAAC,MAAM,CAAC;wBACP,kBAAkB;oBACpB,CAAC;oBACD,OAAO,IAAI,CAAC,CAAC;gBACf,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,sEAAsE;YACxE,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS,aAAa,CAAC,KAAa;QAClC,IAAI,CAAC;YACH,SAAS,EAAE,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,iBAAiB,CACzB,sBAAsB,EACrB,GAA6B,CAAC,IAAI,IAAI,cAAc,EACrD,0CAA2C,GAAa,CAAC,OAAO,EAAE,CACnE,CAAC;QACJ,CAAC;QACD,2EAA2E;QAC3E,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,CAAC;YACH,YAAY,EAAE,CAAC;YACf,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,wBAAwB,EAAE,CAAC;YACnD,MAAM,IAAI,iBAAiB,CACzB,sBAAsB,EACtB,gBAAgB,EAChB,oCAAoC,GAAG,EAAE,CAC1C,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAgB;YACxB,MAAM;YACN,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;YACtC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,cAAc,CAAC,CAAC,WAAW,EAAE;YACvD,KAAK;SACN,CAAC;QACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,aAAa,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACjF,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YACtC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;gBACzE,IAAI,CAAC;oBACH,UAAU,CAAC,CAAC,CAAC,CAAC;gBAChB,CAAC;gBAAC,MAAM,CAAC;oBACP,kDAAkD;gBACpD,CAAC;YACH,CAAC;YACD,MAAM,IAAI,iBAAiB,CACzB,sBAAsB,EACrB,GAA6B,CAAC,IAAI,IAAI,cAAc,EACrD,2BAA4B,GAAa,CAAC,OAAO,EAAE,CACpD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAC9E,CAAC;IAED,SAAS,QAAQ,CAAC,GAAW;QAC3B,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9B,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;YAAE,OAAO,SAAS,CAAC,CAAC,6CAA6C;QACjF,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAgB,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,SAAS,WAAW,CAClB,GAAW,EACX,MAAc,EACd,QAAgB;QAEhB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;QACxC,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;QACzE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACxE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACrC,CAAC;QACD,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,GAAG,CAAC;QACR,IAAI,CAAC;YACH,GAAG,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QAEvF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB,CAAC,EACD,IAAI,CAAC,GAAG,CACN,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,EAC9E,sBAAsB,CACvB,CACF,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,EAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACvB,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,OAAO,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;gBAClE,IAAI,CAAC,KAAK,CAAC;oBAAE,MAAM;gBACnB,IAAI,IAAI,CAAC,CAAC;YACZ,CAAC;YACD,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACtC,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACrB,IAAI,CAAC;oBACH,SAAS,CAAC,EAAE,CAAC,CAAC;gBAChB,CAAC;gBAAC,MAAM,CAAC;oBACP,gCAAgC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;QACrC,OAAO;YACL,GAAG;YACH,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC5B,MAAM;YACN,UAAU,EAAE,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;YAC7D,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;AAC7D,CAAC"}

package/dist/runtime/mcp/phase-trace.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Per-phase MCP boot/serve tracing (lot L0 — measurement & diagnosis only).
+ *
+ * Emits correlated, closed-field JSONL spans to an injected stderr writer so a
+ * host or an out-of-process measurement probe can reconstruct the whole
+ * `mcp-serve` lifecycle — process start, identity resolution, lock waits,
+ * registry reads, transport `initialize` / `tools/list` / first tool — WITHOUT
+ * pulling in the CLI or the heavy runtime. It has three properties the rest of
+ * the fix relies on:
+ *
+ *  1. **Passive.** A measurement callback can never fail the MCP protocol:
+ *     every emit is wrapped, a writer throw is swallowed, and the trace has no
+ *     side effect on the JSON-RPC stream (it only ever writes to stderr).
+ *  2. **Confidential.** Fields are a fixed whitelist and every string is
+ *     sanitized + length-capped, so no PEM, token, lock payload or binding
+ *     content can ever reach an event — even if a caller passes it by mistake.
+ *  3. **Monotonic + correlated.** Every event carries `attemptId` (a locally
+ *     minted UUID — a child process cannot inherit an identity from the MCP
+ *     client), `pid`, a per-trace `seq`, and a monotonic `monotonicMs`. Two
+ *     processes are correlated by matching events, never by subtracting their
+ *     independent monotonic clocks.
+ *
+ * `H2A_MCP_TRACE=1` turns on the detailed spans (`begin`/`end` of internal
+ * phases). Lifecycle milestones and failure diagnostics stay visible without
+ * the flag.
+ */
+/** Log line prefix; every trace event is `${TRACE_LINE_PREFIX}${json}\n` on stderr. */
+export declare const TRACE_LINE_PREFIX = "h2a.mcp.phase ";
+/** Env flag that turns on detailed (`begin`/`end`) spans. */
+export declare const TRACE_DETAIL_ENV = "H2A_MCP_TRACE";
+export type McpTraceRole = "server" | "identity-child";
+export type McpTraceEventKind = "begin" | "end" | "error" | "sample";
+/** The wire event. `v:1` is the schema version; keep additions backward-safe. */
+export interface McpTraceEvent {
+    readonly v: 1;
+    readonly attemptId: string;
+    readonly pid: number;
+    readonly role: McpTraceRole;
+    readonly seq: number;
+    readonly monotonicMs: number;
+    readonly phase: string;
+    readonly event: McpTraceEventKind;
+    readonly durationMs?: number;
+    readonly requestId?: string | number;
+    readonly method?: string;
+    readonly tool?: string;
+    readonly bytes?: number;
+    readonly waitMs?: number;
+    readonly holdMs?: number;
+    readonly code?: string | number;
+}
+/** The only fields a caller may attach. Everything else is dropped. */
+export interface McpTraceFields {
+    readonly requestId?: string | number;
+    readonly method?: string;
+    readonly tool?: string;
+    readonly bytes?: number;
+    readonly waitMs?: number;
+    readonly holdMs?: number;
+    readonly code?: string | number;
+    readonly durationMs?: number;
+}
+export interface McpTraceOptions {
+    readonly role?: McpTraceRole;
+    /** Locally minted UUID; never taken from the MCP client. */
+    readonly attemptId?: string;
+    readonly pid?: number;
+    /** Injected sink; defaults to a swallow-on-throw `process.stderr` writer. */
+    readonly writer?: (line: string) => void;
+    /** Monotonic clock; defaults to `performance.now`. */
+    readonly now?: () => number;
+    /** Force detailed spans on/off; defaults to `env[H2A_MCP_TRACE] === "1"`. */
+    readonly detailed?: boolean;
+    readonly env?: Record<string, string | undefined>;
+}
+export interface McpTrace {
+    readonly attemptId: string;
+    readonly role: McpTraceRole;
+    readonly pid: number;
+    readonly detailed: boolean;
+    /** A lifecycle milestone (`sample`). Always emitted — this is a diagnostic. */
+    phase(name: string, fields?: McpTraceFields): void;
+    /** Start of a detailed span. Emitted only when `detailed`. */
+    begin(name: string, fields?: McpTraceFields): void;
+    /** End of a detailed span. Emitted only when `detailed`. */
+    end(name: string, fields?: McpTraceFields): void;
+    /** A failure. Always emitted, flag or not. */
+    error(name: string, fields?: McpTraceFields): void;
+    /** Wrap `fn`: `begin`/`end` when detailed, an `error` event on throw always. */
+    span<T>(name: string, fn: () => T, fields?: McpTraceFields): T;
+    /** A correlated sub-trace (same `attemptId`) for a child role. */
+    child(role: McpTraceRole, options?: Pick<McpTraceOptions, "pid" | "writer">): McpTrace;
+}
+/** Create a fresh trace. `attemptId` defaults to a locally minted UUID. */
+export declare function createMcpTrace(options?: McpTraceOptions): McpTrace;
+export declare function setActiveMcpTrace(trace: McpTrace | undefined): void;
+export declare function getActiveMcpTrace(): McpTrace | undefined;
+//# sourceMappingURL=phase-trace.d.ts.map

package/dist/runtime/mcp/phase-trace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase-trace.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp/phase-trace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAKH,uFAAuF;AACvF,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAElD,6DAA6D;AAC7D,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAEhD,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AACvD,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;AAErE,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACjC;AAED,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAC7B,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,sDAAsD;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,+EAA+E;IAC/E,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACnD,8DAA8D;IAC9D,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACnD,4DAA4D;IAC5D,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACjD,8CAA8C;IAC9C,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACnD,gFAAgF;IAChF,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC;IAC/D,kEAAkE;IAClE,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,KAAK,GAAG,QAAQ,CAAC,GAAG,QAAQ,CAAC;CACxF;AAwID,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,OAAO,GAAE,eAAoB,GAAG,QAAQ,CAEtE;AAYD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAEnE;AAED,wBAAgB,iBAAiB,IAAI,QAAQ,GAAG,SAAS,CAExD"}

package/dist/runtime/mcp/phase-trace.js

@@ -0,0 +1,179 @@
+/**
+ * Per-phase MCP boot/serve tracing (lot L0 — measurement & diagnosis only).
+ *
+ * Emits correlated, closed-field JSONL spans to an injected stderr writer so a
+ * host or an out-of-process measurement probe can reconstruct the whole
+ * `mcp-serve` lifecycle — process start, identity resolution, lock waits,
+ * registry reads, transport `initialize` / `tools/list` / first tool — WITHOUT
+ * pulling in the CLI or the heavy runtime. It has three properties the rest of
+ * the fix relies on:
+ *
+ *  1. **Passive.** A measurement callback can never fail the MCP protocol:
+ *     every emit is wrapped, a writer throw is swallowed, and the trace has no
+ *     side effect on the JSON-RPC stream (it only ever writes to stderr).
+ *  2. **Confidential.** Fields are a fixed whitelist and every string is
+ *     sanitized + length-capped, so no PEM, token, lock payload or binding
+ *     content can ever reach an event — even if a caller passes it by mistake.
+ *  3. **Monotonic + correlated.** Every event carries `attemptId` (a locally
+ *     minted UUID — a child process cannot inherit an identity from the MCP
+ *     client), `pid`, a per-trace `seq`, and a monotonic `monotonicMs`. Two
+ *     processes are correlated by matching events, never by subtracting their
+ *     independent monotonic clocks.
+ *
+ * `H2A_MCP_TRACE=1` turns on the detailed spans (`begin`/`end` of internal
+ * phases). Lifecycle milestones and failure diagnostics stay visible without
+ * the flag.
+ */
+import { performance } from "node:perf_hooks";
+import { randomUUID } from "node:crypto";
+/** Log line prefix; every trace event is `${TRACE_LINE_PREFIX}${json}\n` on stderr. */
+export const TRACE_LINE_PREFIX = "h2a.mcp.phase ";
+/** Env flag that turns on detailed (`begin`/`end`) spans. */
+export const TRACE_DETAIL_ENV = "H2A_MCP_TRACE";
+const MAX_STR = 200;
+/** Strip control chars / newlines and cap length so a JSONL line stays one line. */
+function safeStr(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    const raw = typeof value === "string" ? value : String(value);
+    // eslint-disable-next-line no-control-regex
+    const cleaned = raw.replace(/[\u0000-\u001f\u007f-\u009f]/g, " ").trim();
+    if (cleaned.length === 0)
+        return undefined;
+    return cleaned.length > MAX_STR ? cleaned.slice(0, MAX_STR) : cleaned;
+}
+function safeNum(value) {
+    if (typeof value !== "number")
+        return undefined;
+    return Number.isFinite(value) ? value : undefined;
+}
+function safeId(value) {
+    if (typeof value === "number")
+        return Number.isFinite(value) ? value : undefined;
+    return safeStr(value);
+}
+/** Default writer: never throws into the caller (a broken stderr is not fatal). */
+function defaultWriter(line) {
+    try {
+        process.stderr.write(line);
+    }
+    catch {
+        /* a measurement sink must never break the protocol */
+    }
+}
+class Trace {
+    attemptId;
+    role;
+    pid;
+    detailed;
+    writer;
+    now;
+    env;
+    seq = 0;
+    constructor(options) {
+        this.env = options.env ?? process.env;
+        this.role = options.role ?? "server";
+        this.attemptId = options.attemptId ?? randomUUID();
+        this.pid = options.pid ?? process.pid;
+        this.writer = options.writer ?? defaultWriter;
+        this.now = options.now ?? (() => performance.now());
+        this.detailed =
+            options.detailed ?? this.env[TRACE_DETAIL_ENV] === "1";
+    }
+    emit(phase, kind, fields) {
+        try {
+            const event = {
+                v: 1,
+                attemptId: this.attemptId,
+                pid: this.pid,
+                role: this.role,
+                seq: this.seq++,
+                monotonicMs: Math.round(this.now() * 1000) / 1000,
+                phase: safeStr(phase) ?? "unknown",
+                event: kind,
+                ...withField("durationMs", safeNum(fields?.durationMs)),
+                ...withField("requestId", safeId(fields?.requestId)),
+                ...withField("method", safeStr(fields?.method)),
+                ...withField("tool", safeStr(fields?.tool)),
+                ...withField("bytes", safeNum(fields?.bytes)),
+                ...withField("waitMs", safeNum(fields?.waitMs)),
+                ...withField("holdMs", safeNum(fields?.holdMs)),
+                ...withField("code", safeId(fields?.code))
+            };
+            this.writer(`${TRACE_LINE_PREFIX}${JSON.stringify(event)}\n`);
+        }
+        catch {
+            /* the trace is best-effort; it never disturbs the caller */
+        }
+    }
+    phase(name, fields) {
+        this.emit(name, "sample", fields);
+    }
+    begin(name, fields) {
+        if (this.detailed)
+            this.emit(name, "begin", fields);
+    }
+    end(name, fields) {
+        if (this.detailed)
+            this.emit(name, "end", fields);
+    }
+    error(name, fields) {
+        this.emit(name, "error", fields);
+    }
+    span(name, fn, fields) {
+        const start = this.now();
+        if (this.detailed)
+            this.emit(name, "begin", fields);
+        try {
+            const out = fn();
+            if (this.detailed) {
+                this.emit(name, "end", { ...fields, durationMs: round3(this.now() - start) });
+            }
+            return out;
+        }
+        catch (err) {
+            this.emit(name, "error", {
+                ...fields,
+                durationMs: round3(this.now() - start),
+                code: err instanceof Error ? err.name : "error"
+            });
+            throw err;
+        }
+    }
+    child(role, options) {
+        return new Trace({
+            role,
+            attemptId: this.attemptId,
+            detailed: this.detailed,
+            now: this.now,
+            env: this.env,
+            ...(options?.pid !== undefined ? { pid: options.pid } : {}),
+            ...(options?.writer !== undefined ? { writer: options.writer } : {})
+        });
+    }
+}
+function withField(key, value) {
+    return value === undefined ? {} : { [key]: value };
+}
+function round3(ms) {
+    return Math.round(ms * 1000) / 1000;
+}
+/** Create a fresh trace. `attemptId` defaults to a locally minted UUID. */
+export function createMcpTrace(options = {}) {
+    return new Trace(options);
+}
+// --- Ambient, process-wide active trace ------------------------------------
+//
+// The boot path threads through many modules (bin → cli → identity → store →
+// stdio). Rather than plumb a trace object through every signature, the entry
+// point installs ONE active trace and the deep modules reach it via
+// `getActiveMcpTrace()`. When none is installed (a normal CLI verb, or a unit
+// test), every deep call is a no-op via optional chaining.
+let active;
+export function setActiveMcpTrace(trace) {
+    active = trace;
+}
+export function getActiveMcpTrace() {
+    return active;
+}
+//# sourceMappingURL=phase-trace.js.map

package/dist/runtime/mcp/phase-trace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase-trace.js","sourceRoot":"","sources":["../../../src/runtime/mcp/phase-trace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,uFAAuF;AACvF,MAAM,CAAC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAElD,6DAA6D;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,eAAe,CAAC;AAsEhD,MAAM,OAAO,GAAG,GAAG,CAAC;AAEpB,oFAAoF;AACpF,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9D,4CAA4C;IAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACxE,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,mFAAmF;AACnF,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;IACxD,CAAC;AACH,CAAC;AAED,MAAM,KAAK;IACA,SAAS,CAAS;IAClB,IAAI,CAAe;IACnB,GAAG,CAAS;IACZ,QAAQ,CAAU;IACV,MAAM,CAAyB;IAC/B,GAAG,CAAe;IAClB,GAAG,CAAqC;IACjD,GAAG,GAAG,CAAC,CAAC;IAEhB,YAAY,OAAwB;QAClC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC;QACnD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;QAC9C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ;YACX,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG,CAAC;IAC3D,CAAC;IAEO,IAAI,CAAC,KAAa,EAAE,IAAuB,EAAE,MAAuB;QAC1E,IAAI,CAAC;YACH,MAAM,KAAK,GAAkB;gBAC3B,CAAC,EAAE,CAAC;gBACJ,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;gBACf,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI;gBACjD,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,SAAS;gBAClC,KAAK,EAAE,IAAI;gBACX,GAAG,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBACvD,GAAG,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBACpD,GAAG,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC/C,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC3C,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC7C,GAAG,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC/C,GAAG,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC/C,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;aAC3C,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,MAAuB;QACzC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,MAAuB;QACzC,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,GAAG,CAAC,IAAY,EAAE,MAAuB;QACvC,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,MAAuB;QACzC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAI,IAAY,EAAE,EAAW,EAAE,MAAuB;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,EAAE,CAAC;YACjB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE;gBACvB,GAAG,MAAM;gBACT,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;gBACtC,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;aAChD,CAAC,CAAC;YACH,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAkB,EAAE,OAAiD;QACzE,OAAO,IAAI,KAAK,CAAC;YACf,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,SAAS,CAAsB,GAAM,EAAE,KAAoB;IAClE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAmB,CAAC;AACvE,CAAC;AAED,SAAS,MAAM,CAAC,EAAU;IACxB,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;AACtC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,UAA2B,EAAE;IAC1D,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,oEAAoE;AACpE,8EAA8E;AAC9E,2DAA2D;AAE3D,IAAI,MAA4B,CAAC;AAEjC,MAAM,UAAU,iBAAiB,CAAC,KAA2B;IAC3D,MAAM,GAAG,KAAK,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC"}