@sentropic/h2a 0.97.2 → 0.97.4

package/dist/runtime/mcp/identity-state.d.ts

@@ -0,0 +1,131 @@
+/**
+ * L2 — identity-independent MCP connection + asynchronous identity readiness.
+ *
+ * The MCP transport (initialize / tools/list) must answer IMMEDIATELY, without
+ * waiting on the shared-identity critical section (the keypair read, the
+ * registry parse, and above all the identity/registry lock wait). Those run in a
+ * dedicated, non-detached CHILD process (`../identity/worker.js`) so they never
+ * block the parent's event loop — a `Promise`/`setImmediate` around the sync
+ * lock in the PARENT would not help, because the lock wait (and the ~17 MB
+ * registry parse) are synchronous and would still stall `initialize`.
+ *
+ * This module owns the readiness STATE MACHINE and the single 20 s deadline
+ * measured from entering `identity_pending`. Activation (opening the real
+ * presence session, reading the private key, publishing the correlated readiness
+ * ACK, arming the live signer) is delegated to the caller through `activate`,
+ * because that side lives with the SessionRegistry in the stdio transport. The
+ * controller only transitions to `identity_ready` once activation reports
+ * success — never on the child's raw result, never with a provisional key, never
+ * with an early availability ACK.
+ */
+import type { H2ASendSigner } from "../send.js";
+/** The single identity deadline (ms), measured from entering identity_pending. */
+export declare const MCP_IDENTITY_TIMEOUT_MS = 20000;
+export type IdentityFailureCode = "identity_timeout" | "storage_readonly" | "storage_permission_denied" | "identity_worker_failed" | "identity_proof_failed" | "identity_storage_failed" | "session_open_failed" | "readiness_ack_failed";
+export type McpIdentityStatus = {
+    state: "identity_disabled";
+} | {
+    state: "identity_pending";
+    attemptId: string;
+    elapsedMs: number;
+    timeoutMs: 20000;
+} | {
+    state: "identity_ready";
+    attemptId: string;
+    instance: string;
+    sessionId: string;
+    signingAvailable: boolean;
+} | {
+    state: "identity_failed";
+    attemptId: string;
+    cause: IdentityFailureCode;
+    message: string;
+    retryable: false;
+    elapsedMs: number;
+};
+export interface McpIdentityController {
+    status(): McpIdentityStatus;
+    start(): void;
+    cancel(reason: "transport_closed" | "signal"): void;
+    signer(): H2ASendSigner | undefined;
+}
+/**
+ * The identity attributes the worker resolves and hands back over IPC. It
+ * carries NO private key material — only paths, which the parent re-validates
+ * against `identityKeyPaths(root, instance)` before reading.
+ */
+export interface ResolvedIdentityMessage {
+    readonly instance: string;
+    readonly host: string;
+    readonly workspace?: unknown;
+    readonly name?: string;
+    readonly action: "override" | "reclaim" | "mint";
+    readonly providerSessionId?: string;
+    readonly providerSessionSource?: string;
+    readonly privateKeyPath: string;
+    readonly publicKeyPath: string;
+    readonly migrationNotice?: string;
+    readonly legacyInstance?: string;
+    readonly delegationEligible?: boolean;
+}
+/** The deferred identity request the CLI hands to the transport (no lock work). */
+export interface McpIdentityRequest {
+    readonly root: string;
+    readonly host: string;
+    readonly cwd: string;
+    readonly explicitInstance?: string;
+    readonly name?: string;
+    readonly scopes?: readonly string[];
+    readonly declaredCapabilities?: readonly string[];
+    /** Provider env captured from the launching session (never re-derived in child). */
+    readonly providerEnv?: Readonly<Record<string, string>>;
+}
+/** Result of a caller-supplied activation attempt (session + ACK + signer). */
+export type ActivationResult = {
+    ok: true;
+    sessionId: string;
+    signer?: H2ASendSigner;
+} | {
+    ok: false;
+    cause: IdentityFailureCode;
+    message: string;
+};
+export interface CreateIdentityControllerOptions {
+    readonly request: McpIdentityRequest;
+    /**
+     * Perform the real activation once the worker resolved a valid identity and
+     * the deadline still holds: open the presence session, read the private key,
+     * publish the correlated readiness ACK, build the live signer. Returning
+     * `{ok:false}` fails the identity terminally (no partial availability).
+     */
+    readonly activate: (identity: ResolvedIdentityMessage) => ActivationResult;
+    /** Diagnostic sink (stderr). Never protocol traffic. */
+    readonly log?: (line: string) => void;
+    /** Test seam: fork a worker child. Production uses the real fork below. */
+    readonly spawnWorker?: (request: McpIdentityRequest, budgetMs: number) => IdentityWorkerHandle;
+    /** Test seam: monotonic clock in ns. Defaults to process.hrtime.bigint. */
+    readonly nowNs?: () => bigint;
+    /** Test seam: deadline in ms. Defaults to MCP_IDENTITY_TIMEOUT_MS. */
+    readonly timeoutMs?: number;
+}
+/** Minimal handle over the identity worker child (real fork or test double). */
+export interface IdentityWorkerHandle {
+    onResolved(cb: (identity: ResolvedIdentityMessage) => void): void;
+    onError(cb: (cause: IdentityFailureCode, message: string) => void): void;
+    /** Fires when the child exits WITHOUT having produced a result. */
+    onExitWithoutResult(cb: () => void): void;
+    cancel(reason: string): void;
+}
+/**
+ * Real worker fork. Non-detached, argv-only, stdout IGNORED (it must never write
+ * protocol traffic), stderr piped for diagnostics, IPC typed. cwd/provider env
+ * are captured explicitly so the child does not inherit an artificial
+ * conversation. No shell, and NO PEM ever crosses IPC.
+ */
+export declare function forkIdentityWorker(request: McpIdentityRequest, budgetMs: number, log?: (line: string) => void): IdentityWorkerHandle;
+/**
+ * Build the identity controller for one MCP attachment. It starts inert and
+ * transitions `identity_pending → identity_ready | identity_failed` exactly once.
+ */
+export declare function createIdentityController(options: CreateIdentityControllerOptions): McpIdentityController;
+//# sourceMappingURL=identity-state.d.ts.map

package/dist/runtime/mcp/identity-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-state.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp/identity-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAIhD,kFAAkF;AAClF,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,MAAM,MAAM,mBAAmB,GAC3B,kBAAkB,GAClB,kBAAkB,GAClB,2BAA2B,GAC3B,wBAAwB,GACxB,uBAAuB,GACvB,yBAAyB,GACzB,qBAAqB,GACrB,sBAAsB,CAAC;AAE3B,MAAM,MAAM,iBAAiB,GACzB;IAAE,KAAK,EAAE,mBAAmB,CAAA;CAAE,GAC9B;IAAE,KAAK,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,KAAK,CAAA;CAAE,GACrF;IACE,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,OAAO,CAAC;CAC3B,GACD;IACE,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,KAAK,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEN,MAAM,WAAW,qBAAqB;IACpC,MAAM,IAAI,iBAAiB,CAAC;IAC5B,KAAK,IAAI,IAAI,CAAC;IACd,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,QAAQ,GAAG,IAAI,CAAC;IACpD,MAAM,IAAI,aAAa,GAAG,SAAS,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;IACjD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CACvC;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,oFAAoF;IACpF,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACzD;AAED,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,aAAa,CAAA;CAAE,GACvD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/D,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,uBAAuB,KAAK,gBAAgB,CAAC;IAC3E,wDAAwD;IACxD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,KAAK,oBAAoB,CAAC;IAC/F,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B,sEAAsE;IACtE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,gFAAgF;AAChF,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,uBAAuB,KAAK,IAAI,GAAG,IAAI,CAAC;IAClE,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IACzE,mEAAmE;IACnE,mBAAmB,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;IAC1C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAOD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,EAChB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAC3B,oBAAoB,CAiGtB;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,+BAA+B,GACvC,qBAAqB,CAyJvB"}

package/dist/runtime/mcp/identity-state.js

@@ -0,0 +1,288 @@
+/**
+ * L2 — identity-independent MCP connection + asynchronous identity readiness.
+ *
+ * The MCP transport (initialize / tools/list) must answer IMMEDIATELY, without
+ * waiting on the shared-identity critical section (the keypair read, the
+ * registry parse, and above all the identity/registry lock wait). Those run in a
+ * dedicated, non-detached CHILD process (`../identity/worker.js`) so they never
+ * block the parent's event loop — a `Promise`/`setImmediate` around the sync
+ * lock in the PARENT would not help, because the lock wait (and the ~17 MB
+ * registry parse) are synchronous and would still stall `initialize`.
+ *
+ * This module owns the readiness STATE MACHINE and the single 20 s deadline
+ * measured from entering `identity_pending`. Activation (opening the real
+ * presence session, reading the private key, publishing the correlated readiness
+ * ACK, arming the live signer) is delegated to the caller through `activate`,
+ * because that side lives with the SessionRegistry in the stdio transport. The
+ * controller only transitions to `identity_ready` once activation reports
+ * success — never on the child's raw result, never with a provisional key, never
+ * with an early availability ACK.
+ */
+import { fork } from "node:child_process";
+import { identityKeyPaths } from "../identity/live.js";
+import { getActiveMcpTrace } from "./phase-trace.js";
+/** The single identity deadline (ms), measured from entering identity_pending. */
+export const MCP_IDENTITY_TIMEOUT_MS = 20_000;
+function randomAttemptId() {
+    // A short, non-secret correlation id for the attempt (never a nonce/key).
+    return `att:${Math.random().toString(16).slice(2, 10)}${Date.now().toString(16)}`;
+}
+/**
+ * Real worker fork. Non-detached, argv-only, stdout IGNORED (it must never write
+ * protocol traffic), stderr piped for diagnostics, IPC typed. cwd/provider env
+ * are captured explicitly so the child does not inherit an artificial
+ * conversation. No shell, and NO PEM ever crosses IPC.
+ */
+export function forkIdentityWorker(request, budgetMs, log) {
+    const capturedEnv = { ...process.env, ...(request.providerEnv ?? {}) };
+    let child;
+    let resolvedCb;
+    let errorCb;
+    let exitCb;
+    let sawResult = false;
+    let started = false;
+    const ensureStarted = () => {
+        if (started)
+            return;
+        started = true;
+        try {
+            child = fork(new URL("../identity/worker.js", import.meta.url), [], {
+                cwd: request.cwd,
+                env: capturedEnv,
+                stdio: ["ignore", "ignore", "pipe", "ipc"]
+            });
+        }
+        catch (err) {
+            queueMicrotask(() => errorCb?.("identity_worker_failed", err instanceof Error ? err.message : String(err)));
+            return;
+        }
+        // Forward the worker's stderr LINE BY LINE so a `h2a.mcp.phase …` trace span
+        // (L0, role=identity-child) is never split across a chunk boundary when it is
+        // re-emitted on the parent's stderr. Diagnostics flow through unchanged.
+        let stderrBuf = "";
+        child.stderr?.on("data", (chunk) => {
+            stderrBuf += String(chunk);
+            let nl;
+            while ((nl = stderrBuf.indexOf("\n")) !== -1) {
+                const line = stderrBuf.slice(0, nl);
+                stderrBuf = stderrBuf.slice(nl + 1);
+                if (line.length > 0)
+                    log?.(`identity-worker: ${line}`);
+            }
+        });
+        child.stderr?.on("end", () => {
+            if (stderrBuf.trimEnd().length > 0)
+                log?.(`identity-worker: ${stderrBuf.trimEnd()}`);
+            stderrBuf = "";
+        });
+        child.on("message", (msg) => {
+            const m = msg;
+            if (!m || typeof m !== "object")
+                return;
+            if (m.kind === "identity_resolved") {
+                sawResult = true;
+                resolvedCb?.(m.identity);
+            }
+            else if (m.kind === "identity_error") {
+                sawResult = true;
+                const e = m;
+                errorCb?.(e.cause ?? "identity_worker_failed", e.message ?? "identity worker error");
+            }
+            // A `cancel_ack` needs no parent action beyond letting the child exit.
+        });
+        child.on("error", (err) => {
+            if (sawResult)
+                return;
+            errorCb?.("identity_worker_failed", err instanceof Error ? err.message : String(err));
+        });
+        child.on("exit", () => {
+            if (!sawResult)
+                exitCb?.();
+        });
+        try {
+            // Correlate the worker's L0 spans to THIS attempt's trace (same attemptId,
+            // role=identity-child) so the relocated identity/lock/registry spans stay
+            // joinable with the parent's server-role boot spans.
+            const traceAttemptId = getActiveMcpTrace()?.attemptId;
+            child.send({
+                kind: "resolve_identity",
+                v: 1,
+                request,
+                budgetMs,
+                ...(traceAttemptId !== undefined ? { traceAttemptId } : {})
+            });
+        }
+        catch (err) {
+            errorCb?.("identity_worker_failed", err instanceof Error ? err.message : String(err));
+        }
+    };
+    return {
+        onResolved(cb) {
+            resolvedCb = cb;
+            ensureStarted();
+        },
+        onError(cb) {
+            errorCb = cb;
+        },
+        onExitWithoutResult(cb) {
+            exitCb = cb;
+        },
+        cancel(reason) {
+            try {
+                child?.send({ kind: "cancel", reason });
+            }
+            catch {
+                /* channel already gone; the child's own finally releases its lock */
+            }
+        }
+    };
+}
+/**
+ * Build the identity controller for one MCP attachment. It starts inert and
+ * transitions `identity_pending → identity_ready | identity_failed` exactly once.
+ */
+export function createIdentityController(options) {
+    const timeoutMs = options.timeoutMs ?? MCP_IDENTITY_TIMEOUT_MS;
+    const nowNs = options.nowNs ?? process.hrtime.bigint;
+    const spawnWorker = options.spawnWorker ??
+        ((req, budget) => forkIdentityWorker(req, budget, options.log));
+    let state = { state: "identity_disabled" };
+    let attemptId = "";
+    let startedNs = 0n;
+    let deadlineTimer;
+    let worker;
+    let liveSigner;
+    let terminal = false;
+    let cancelled = false;
+    const elapsedMs = () => Number((nowNs() - startedNs) / 1000000n);
+    const clearTimer = () => {
+        if (deadlineTimer) {
+            clearTimeout(deadlineTimer);
+            deadlineTimer = undefined;
+        }
+    };
+    const fail = (cause, message) => {
+        if (terminal)
+            return;
+        terminal = true;
+        clearTimer();
+        state = {
+            state: "identity_failed",
+            attemptId,
+            cause,
+            message,
+            retryable: false,
+            elapsedMs: elapsedMs()
+        };
+        liveSigner = undefined;
+        // L0 trace reuse: the identity lifecycle on the PARENT (the deep provider /
+        // registry / lock spans now run in the child, off this event loop).
+        getActiveMcpTrace()?.phase("identity_failed", { code: cause });
+        options.log?.(`identity failed (${cause}): ${message}`);
+        try {
+            worker?.cancel("failed");
+        }
+        catch {
+            /* best effort */
+        }
+    };
+    const onResolved = (identity) => {
+        if (terminal || cancelled)
+            return;
+        // Deadline re-check at the activation boundary: a late worker result never
+        // reactivates the connection.
+        if (elapsedMs() >= timeoutMs) {
+            fail("identity_timeout", `identity did not become ready within ${timeoutMs}ms`);
+            return;
+        }
+        // Validate the returned key paths against the canonical layout for this
+        // instance — NEVER read an arbitrary path the child claimed. An explicit
+        // `--instance` override resolves with NO key paths (presence-only, no
+        // signer); that is allowed and only skips this check.
+        if (identity.privateKeyPath) {
+            const expected = identityKeyPaths(options.request.root, identity.instance);
+            if (identity.privateKeyPath !== expected.privateKeyPath ||
+                identity.publicKeyPath !== expected.publicKeyPath) {
+                fail("identity_proof_failed", "resolved identity key paths do not match the canonical layout");
+                return;
+            }
+        }
+        let result;
+        try {
+            result = options.activate(identity);
+        }
+        catch (err) {
+            fail("session_open_failed", err instanceof Error ? err.message : String(err));
+            return;
+        }
+        if (!result.ok) {
+            fail(result.cause, result.message);
+            return;
+        }
+        // F1: a FULLY-SUCCESSFUL activation is terminal-ready. We do NOT re-check the
+        // deadline here: activation already opened the presence session, armed the
+        // signer/wake and published the correlated readiness ACK — failing now would
+        // leave a live ACK + presence + wake behind a `failed` state (a wedged
+        // connection). The deadline is enforced BEFORE activation (above) and by the
+        // parent timer; if activation itself fails, `activate` rolls its own partial
+        // work back before returning `{ok:false}`.
+        terminal = true;
+        clearTimer();
+        liveSigner = result.signer;
+        state = {
+            state: "identity_ready",
+            attemptId,
+            instance: identity.instance,
+            sessionId: result.sessionId,
+            signingAvailable: liveSigner !== undefined
+        };
+        getActiveMcpTrace()?.phase("identity_ready", {
+            code: liveSigner ? "signing" : "presence_only"
+        });
+        options.log?.(`identity ready: ${identity.instance} (signing ${liveSigner ? "available" : "unavailable"})`);
+    };
+    return {
+        status() {
+            if (state.state === "identity_pending") {
+                return { state: "identity_pending", attemptId, elapsedMs: elapsedMs(), timeoutMs: 20000 };
+            }
+            return state;
+        },
+        start() {
+            if (state.state !== "identity_disabled")
+                return;
+            attemptId = randomAttemptId();
+            startedNs = nowNs();
+            state = { state: "identity_pending", attemptId, elapsedMs: 0, timeoutMs: 20000 };
+            // L0 trace reuse: mark that identity entered the async pending window on the
+            // parent (initialize/tools-list are already answerable — identity is NOT on
+            // the boot critical path anymore, which is the #249 fix).
+            getActiveMcpTrace()?.phase("identity_pending");
+            deadlineTimer = setTimeout(() => {
+                fail("identity_timeout", `identity did not become ready within ${timeoutMs}ms`);
+            }, timeoutMs);
+            deadlineTimer.unref?.();
+            worker = spawnWorker(options.request, timeoutMs);
+            worker.onError((cause, message) => fail(cause, message));
+            worker.onExitWithoutResult(() => fail("identity_worker_failed", "identity worker exited without a result"));
+            worker.onResolved(onResolved);
+        },
+        cancel(reason) {
+            cancelled = true;
+            clearTimer();
+            try {
+                worker?.cancel(reason);
+            }
+            catch {
+                /* best effort */
+            }
+            // Transport is gone: no activation may follow. Keep the last observable
+            // state for any in-flight status read, but disarm the signer.
+            liveSigner = undefined;
+        },
+        signer() {
+            return liveSigner;
+        }
+    };
+}
+//# sourceMappingURL=identity-state.js.map

package/dist/runtime/mcp/identity-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-state.js","sourceRoot":"","sources":["../../../src/runtime/mcp/identity-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,IAAI,EAAqB,MAAM,oBAAoB,CAAC;AAG7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,kFAAkF;AAClF,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAwG9C,SAAS,eAAe;IACtB,0EAA0E;IAC1E,OAAO,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;AACpF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA2B,EAC3B,QAAgB,EAChB,GAA4B;IAE5B,MAAM,WAAW,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;IAC1F,IAAI,KAA+B,CAAC;IACpC,IAAI,UAAqE,CAAC;IAC1E,IAAI,OAA4E,CAAC;IACjF,IAAI,MAAgC,CAAC;IACrC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,aAAa,GAAG,GAAS,EAAE;QAC/B,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE;gBAClE,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG,EAAE,WAAW;gBAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,cAAc,CAAC,GAAG,EAAE,CAClB,OAAO,EAAE,CAAC,wBAAwB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACtF,CAAC;YACF,OAAO;QACT,CAAC;QACD,6EAA6E;QAC7E,8EAA8E;QAC9E,yEAAyE;QACzE,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,EAAE,CAAC;YACP,OAAO,CAAC,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACpC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,EAAE,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAC3B,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,EAAE,CAAC,oBAAoB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACrF,SAAS,GAAG,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE;YACnC,MAAM,CAAC,GAAG,GAAoC,CAAC;YAC/C,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,OAAO;YACxC,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACnC,SAAS,GAAG,IAAI,CAAC;gBACjB,UAAU,EAAE,CAAE,CAA2C,CAAC,QAAQ,CAAC,CAAC;YACtE,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACvC,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM,CAAC,GAAG,CAAsD,CAAC;gBACjE,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,wBAAwB,EAAE,CAAC,CAAC,OAAO,IAAI,uBAAuB,CAAC,CAAC;YACvF,CAAC;YACD,uEAAuE;QACzE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,SAAS;gBAAE,OAAO;YACtB,OAAO,EAAE,CAAC,wBAAwB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACpB,IAAI,CAAC,SAAS;gBAAE,MAAM,EAAE,EAAE,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,2EAA2E;YAC3E,0EAA0E;YAC1E,qDAAqD;YACrD,MAAM,cAAc,GAAG,iBAAiB,EAAE,EAAE,SAAS,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,kBAAkB;gBACxB,CAAC,EAAE,CAAC;gBACJ,OAAO;gBACP,QAAQ;gBACR,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,CAAC,wBAAwB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxF,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,UAAU,CAAC,EAAE;YACX,UAAU,GAAG,EAAE,CAAC;YAChB,aAAa,EAAE,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,EAAE;YACR,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QACD,mBAAmB,CAAC,EAAE;YACpB,MAAM,GAAG,EAAE,CAAC;QACd,CAAC;QACD,MAAM,CAAC,MAAM;YACX,IAAI,CAAC;gBACH,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;YACvE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAwC;IAExC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;IACrD,MAAM,WAAW,GACf,OAAO,CAAC,WAAW;QACnB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAElE,IAAI,KAAK,GAAsB,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC9D,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,aAAwD,CAAC;IAC7D,IAAI,MAAwC,CAAC;IAC7C,IAAI,UAAqC,CAAC;IAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,GAAG,SAAS,CAAC,GAAG,QAAU,CAAC,CAAC;IAE3E,MAAM,UAAU,GAAG,GAAS,EAAE;QAC5B,IAAI,aAAa,EAAE,CAAC;YAClB,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5B,aAAa,GAAG,SAAS,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,KAA0B,EAAE,OAAe,EAAQ,EAAE;QACjE,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,UAAU,EAAE,CAAC;QACb,KAAK,GAAG;YACN,KAAK,EAAE,iBAAiB;YACxB,SAAS;YACT,KAAK;YACL,OAAO;YACP,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,SAAS,EAAE;SACvB,CAAC;QACF,UAAU,GAAG,SAAS,CAAC;QACvB,4EAA4E;QAC5E,oEAAoE;QACpE,iBAAiB,EAAE,EAAE,KAAK,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,EAAE,CAAC,oBAAoB,KAAK,MAAM,OAAO,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,QAAiC,EAAQ,EAAE;QAC7D,IAAI,QAAQ,IAAI,SAAS;YAAE,OAAO;QAClC,2EAA2E;QAC3E,8BAA8B;QAC9B,IAAI,SAAS,EAAE,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,kBAAkB,EAAE,wCAAwC,SAAS,IAAI,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QACD,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,sDAAsD;QACtD,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3E,IACE,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;gBACnD,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,EACjD,CAAC;gBACD,IAAI,CACF,uBAAuB,EACvB,+DAA+D,CAChE,CAAC;gBACF,OAAO;YACT,CAAC;QACH,CAAC;QACD,IAAI,MAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,qBAAqB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QACD,8EAA8E;QAC9E,2EAA2E;QAC3E,6EAA6E;QAC7E,uEAAuE;QACvE,6EAA6E;QAC7E,6EAA6E;QAC7E,2CAA2C;QAC3C,QAAQ,GAAG,IAAI,CAAC;QAChB,UAAU,EAAE,CAAC;QACb,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,KAAK,GAAG;YACN,KAAK,EAAE,gBAAgB;YACvB,SAAS;YACT,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,gBAAgB,EAAE,UAAU,KAAK,SAAS;SAC3C,CAAC;QACF,iBAAiB,EAAE,EAAE,KAAK,CAAC,gBAAgB,EAAE;YAC3C,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe;SAC/C,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,EAAE,CACX,mBAAmB,QAAQ,CAAC,QAAQ,aAAa,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,GAAG,CAC7F,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACL,MAAM;YACJ,IAAI,KAAK,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;gBACvC,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC5F,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK;YACH,IAAI,KAAK,CAAC,KAAK,KAAK,mBAAmB;gBAAE,OAAO;YAChD,SAAS,GAAG,eAAe,EAAE,CAAC;YAC9B,SAAS,GAAG,KAAK,EAAE,CAAC;YACpB,KAAK,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACjF,6EAA6E;YAC7E,4EAA4E;YAC5E,0DAA0D;YAC1D,iBAAiB,EAAE,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAC/C,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,kBAAkB,EAAE,wCAAwC,SAAS,IAAI,CAAC,CAAC;YAClF,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;YACxB,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACjD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YACzD,MAAM,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAC9B,IAAI,CAAC,wBAAwB,EAAE,yCAAyC,CAAC,CAC1E,CAAC;YACF,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,CAAC,MAAM;YACX,SAAS,GAAG,IAAI,CAAC;YACjB,UAAU,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;YACD,wEAAwE;YACxE,8DAA8D;YAC9D,UAAU,GAAG,SAAS,CAAC;QACzB,CAAC;QACD,MAAM;YACJ,OAAO,UAAU,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/mcp/index.d.ts

@@ -5,4 +5,6 @@ export { H2A_MCP_READY_FILE_ENV, H2A_MCP_READY_KIND, H2A_MCP_READY_NONCE_ENV, ru
 export { buildH2aRunInvocation, executeH2aRun, executeH2aRunWithSpawn, handleH2aRun, recordMcpRunDelegation, H2A_RUN_API_VERSION, validateH2aRunRequest, type H2aRunExecutor, type H2aRunInvocation, type H2aRunRequest } from "./agent-launch.js";
 export { SessionRegistry, type OpenSessionRequest, type SessionRegistryOptions } from "./sessions.js";
 export { NotificationDispatcher, type McpPushNotification, type NotificationSink } from "./notifications.js";
+export { createMcpTrace, getActiveMcpTrace, setActiveMcpTrace, TRACE_LINE_PREFIX, TRACE_DETAIL_ENV, type McpTrace, type McpTraceEvent, type McpTraceFields, type McpTraceOptions, type McpTraceRole, type McpTraceEventKind } from "./phase-trace.js";
+export { createIdentityController, forkIdentityWorker, MCP_IDENTITY_TIMEOUT_MS, type ActivationResult, type CreateIdentityControllerOptions, type IdentityFailureCode, type IdentityWorkerHandle, type McpIdentityController, type McpIdentityRequest, type McpIdentityStatus, type ResolvedIdentityMessage } from "./identity-state.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime/mcp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,WAAW,EACX,KAAK,kBAAkB,EACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,sBAAsB,EACtB,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,WAAW,EACX,KAAK,kBAAkB,EACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,sBAAsB,EACtB,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,gBAAgB,EACrB,KAAK,+BAA+B,EACpC,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC7B,MAAM,qBAAqB,CAAC"}

package/dist/runtime/mcp/index.js

@@ -5,4 +5,6 @@ export { H2A_MCP_READY_FILE_ENV, H2A_MCP_READY_KIND, H2A_MCP_READY_NONCE_ENV, ru
 export { buildH2aRunInvocation, executeH2aRun, executeH2aRunWithSpawn, handleH2aRun, recordMcpRunDelegation, H2A_RUN_API_VERSION, validateH2aRunRequest } from "./agent-launch.js";
 export { SessionRegistry } from "./sessions.js";
 export { NotificationDispatcher } from "./notifications.js";
+export { createMcpTrace, getActiveMcpTrace, setActiveMcpTrace, TRACE_LINE_PREFIX, TRACE_DETAIL_ENV } from "./phase-trace.js";
+export { createIdentityController, forkIdentityWorker, MCP_IDENTITY_TIMEOUT_MS } from "./identity-state.js";
 //# sourceMappingURL=index.js.map

package/dist/runtime/mcp/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EAIrB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,4BAA4B,EAG7B,MAAM,YAAY,CAAC;AAEpB,OAAO,EAGN,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,WAAW,EAEZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,sBAAsB,EACtB,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EAItB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,EAGhB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EAGvB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EAIrB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,4BAA4B,EAG7B,MAAM,YAAY,CAAC;AAEpB,OAAO,EAGN,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,WAAW,EAEZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,sBAAsB,EACtB,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EAItB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,EAGhB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EAGvB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAOjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EASxB,MAAM,qBAAqB,CAAC"}

package/dist/runtime/mcp/notifications.d.ts

@@ -11,7 +11,18 @@ export interface McpPushNotification {
         data: Record<string, unknown>;
     };
 }
-export type NotificationSink = (notification: McpPushNotification) => void;
+/**
+ * L1: a sink may return a receipt so the dispatcher advances a session's
+ * snapshot ONLY after the notification left bounded (or its intact bytes were
+ * persisted). `void`/`undefined` is treated as accepted, keeping existing mock
+ * sinks working. When a push is not accepted (persistence impossible), the
+ * session's snapshot is NOT advanced, so the diff is retried next tick — no ACK
+ * of a purely-ephemeral event is fabricated.
+ */
+export type NotificationReceipt = {
+    readonly accepted: boolean;
+} | void;
+export type NotificationSink = (notification: McpPushNotification) => NotificationReceipt;
 /**
  * Owns the per-session diff snapshots and the periodic scan that turns
  * filesystem changes into pushed JSON-RPC notifications. One dispatcher per
@@ -42,6 +53,7 @@ export declare class NotificationDispatcher {
      * tests can drive the dispatch deterministically without a timer.
      */
     tick(): void;
+    /** Emit one notification; returns whether the sink accepted it (see NotificationReceipt). */
     private push;
 }
 //# sourceMappingURL=notifications.d.ts.map

package/dist/runtime/mcp/notifications.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp/notifications.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,2BAA2B,EACjC,MAAM,gBAAgB,CAAC;AAGxB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,kEAAkE;AAClE,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,EAAE;QACN,KAAK,EAAE,2BAA2B,CAAC;QACnC,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC/B,CAAC;CACH;AAED,MAAM,MAAM,gBAAgB,GAAG,CAAC,YAAY,EAAE,mBAAmB,KAAK,IAAI,CAAC;AAsD3E;;;;;GAKG;AACH,qBAAa,sBAAsB;IAK/B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,QAAQ,CAAC,UAAU;IAR7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IACjE,OAAO,CAAC,KAAK,CAAC,CAAiC;gBAG5B,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,MAAM,EACrB,IAAI,EAAE,gBAAgB,GAAG,SAAS,EACzB,UAAU,EAAE,MAAM;IAGrC,OAAO,CAAC,IAAI,EAAE,gBAAgB,GAAG,SAAS,GAAG,IAAI;IAIjD;;;;OAIG;IACH,OAAO,CAAC,cAAc,CAAC,CAA6B;IACpD,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,GAAG,IAAI;IAIrE,KAAK,IAAI,IAAI;IAMb,IAAI,IAAI,IAAI;IAMZ;;;OAGG;IACH,IAAI,IAAI,IAAI;IA6HZ,OAAO,CAAC,IAAI;CAab"}
+{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp/notifications.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,2BAA2B,EACjC,MAAM,gBAAgB,CAAC;AAGxB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,kEAAkE;AAClE,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,EAAE;QACN,KAAK,EAAE,2BAA2B,CAAC;QACnC,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC/B,CAAC;CACH;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAAC;AAExE,MAAM,MAAM,gBAAgB,GAAG,CAAC,YAAY,EAAE,mBAAmB,KAAK,mBAAmB,CAAC;AAsD1F;;;;;GAKG;AACH,qBAAa,sBAAsB;IAK/B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,QAAQ,CAAC,UAAU;IAR7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IACjE,OAAO,CAAC,KAAK,CAAC,CAAiC;gBAG5B,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,MAAM,EACrB,IAAI,EAAE,gBAAgB,GAAG,SAAS,EACzB,UAAU,EAAE,MAAM;IAGrC,OAAO,CAAC,IAAI,EAAE,gBAAgB,GAAG,SAAS,GAAG,IAAI;IAIjD;;;;OAIG;IACH,OAAO,CAAC,cAAc,CAAC,CAA6B;IACpD,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,GAAG,IAAI;IAIrE,KAAK,IAAI,IAAI;IAMb,IAAI,IAAI,IAAI;IAMZ;;;OAGG;IACH,IAAI,IAAI,IAAI;IAqIZ,6FAA6F;IAC7F,OAAO,CAAC,IAAI;CAsBb"}

package/dist/runtime/mcp/notifications.js

@@ -92,6 +92,11 @@ export class NotificationDispatcher {
         const activeBlockages = listBlockages(this.root).filter(isActiveBlockage);
         for (const session of ownSessions) {
             const prev = this.snapshots.get(session.sessionId) ?? emptyDiffState();
+            // L1: a session's snapshot advances only if EVERY emitted diff was accepted
+            // (bounded/persisted). One unaccepted push holds the whole session snapshot
+            // so the diffs are retried next tick — an at-least-once guarantee that never
+            // fabricates an ACK for a dropped ephemeral notification.
+            let accepted = true;
             // 1. Presence join/leave (excluding self)
             const others = new Set([...peerIds].filter((sid) => sid !== session.sessionId));
             if (isInterestedIn(session, "presence.peer_joined")) {
@@ -99,14 +104,14 @@ export class NotificationDispatcher {
                     if (!prev.peers.has(sid)) {
                         const peer = freshPeers.find((p) => p.sessionId === sid);
                         if (peer) {
-                            this.push(session.sessionId, "presence.peer_joined", {
+                            accepted = this.push(session.sessionId, "presence.peer_joined", {
                                 peer: {
                                     sessionId: peer.sessionId,
                                     instance: peer.instance,
                                     host: peer.host,
                                     interests: peer.interests
                                 }
-                            });
+                            }) && accepted;
                         }
                     }
                 }
@@ -114,9 +119,9 @@ export class NotificationDispatcher {
             if (isInterestedIn(session, "presence.peer_left")) {
                 for (const sid of prev.peers) {
                     if (!others.has(sid)) {
-                        this.push(session.sessionId, "presence.peer_left", {
+                        accepted = this.push(session.sessionId, "presence.peer_left", {
                             peer: { sessionId: sid }
-                        });
+                        }) && accepted;
                     }
                 }
             }
@@ -127,10 +132,10 @@ export class NotificationDispatcher {
             if (isInterestedIn(session, "inbox.envelope_arrived")) {
                 for (const envelopeId of inboxIds) {
                     if (!prev.inbox.envelopeIds.has(envelopeId)) {
-                        this.push(session.sessionId, "inbox.envelope_arrived", {
+                        accepted = this.push(session.sessionId, "inbox.envelope_arrived", {
                             instance: session.instance,
                             envelopeId
-                        });
+                        }) && accepted;
                     }
                 }
                 // EVO-1 wake (bug #3): nudge the host every tick while the inbox is
@@ -148,11 +153,11 @@ export class NotificationDispatcher {
                     const count = readJournalLength(this.store, negotiationId);
                     const prevCount = prev.negotiations.get(negotiationId)?.count ?? 0;
                     if (count > prevCount) {
-                        this.push(session.sessionId, "negotiation.event_appended", {
+                        accepted = this.push(session.sessionId, "negotiation.event_appended", {
                             negotiationId,
                             newEntries: count - prevCount,
                             totalEntries: count
-                        });
+                        }) && accepted;
                     }
                     negotiationSnap.set(negotiationId, { count });
                 }
@@ -165,40 +170,51 @@ export class NotificationDispatcher {
             if (isInterestedIn(session, "peer.blocked")) {
                 for (const b of inScope) {
                     if (!prev.blocked.has(b.instance)) {
-                        this.push(session.sessionId, "peer.blocked", {
+                        accepted = this.push(session.sessionId, "peer.blocked", {
                             instance: b.instance,
                             scope: b.scope,
                             reason: b.reason,
                             ...(b.needs ? { needs: b.needs } : {})
-                        });
+                        }) && accepted;
                     }
                 }
             }
             if (isInterestedIn(session, "peer.unblocked")) {
                 for (const instance of prev.blocked) {
                     if (!blockedNow.has(instance)) {
-                        this.push(session.sessionId, "peer.unblocked", { instance });
+                        accepted = this.push(session.sessionId, "peer.unblocked", { instance }) && accepted;
                     }
                 }
             }
-            this.snapshots.set(session.sessionId, {
-                peers: others,
-                inbox: { envelopeIds: new Set(inboxIds) },
-                negotiations: negotiationSnap,
-                blocked: blockedNow
-            });
+            if (accepted) {
+                this.snapshots.set(session.sessionId, {
+                    peers: others,
+                    inbox: { envelopeIds: new Set(inboxIds) },
+                    negotiations: negotiationSnap,
+                    blocked: blockedNow
+                });
+            }
+            // else: keep the previous snapshot so the unaccepted diffs are retried.
         }
     }
+    /** Emit one notification; returns whether the sink accepted it (see NotificationReceipt). */
     push(sessionId, topic, data) {
         if (!this.sink)
-            return;
+            return true;
         if (!H2A_SESSION_NOTIFICATION_TOPICS.includes(topic))
-            return;
-        this.sink({
+            return true;
+        const receipt = this.sink({
             jsonrpc: "2.0",
             method: "notifications/h2a",
             params: { topic, sessionId, data }
         });
+        // Accepted unless the sink explicitly returns `{ accepted: false }`. A sink
+        // that returns void, or any other value (e.g. a legacy `array.push` count),
+        // is treated as accepted so existing sinks keep advancing the snapshot.
+        return !(receipt !== null &&
+            typeof receipt === "object" &&
+            "accepted" in receipt &&
+            receipt.accepted === false);
     }
 }
 //# sourceMappingURL=notifications.js.map