@sentropic/h2a 0.97.3 → 0.97.5

package/dist/runtime/mcp/identity-state.d.ts

@@ -0,0 +1,131 @@
+/**
+ * L2 — identity-independent MCP connection + asynchronous identity readiness.
+ *
+ * The MCP transport (initialize / tools/list) must answer IMMEDIATELY, without
+ * waiting on the shared-identity critical section (the keypair read, the
+ * registry parse, and above all the identity/registry lock wait). Those run in a
+ * dedicated, non-detached CHILD process (`../identity/worker.js`) so they never
+ * block the parent's event loop — a `Promise`/`setImmediate` around the sync
+ * lock in the PARENT would not help, because the lock wait (and the ~17 MB
+ * registry parse) are synchronous and would still stall `initialize`.
+ *
+ * This module owns the readiness STATE MACHINE and the single 20 s deadline
+ * measured from entering `identity_pending`. Activation (opening the real
+ * presence session, reading the private key, publishing the correlated readiness
+ * ACK, arming the live signer) is delegated to the caller through `activate`,
+ * because that side lives with the SessionRegistry in the stdio transport. The
+ * controller only transitions to `identity_ready` once activation reports
+ * success — never on the child's raw result, never with a provisional key, never
+ * with an early availability ACK.
+ */
+import type { H2ASendSigner } from "../send.js";
+/** The single identity deadline (ms), measured from entering identity_pending. */
+export declare const MCP_IDENTITY_TIMEOUT_MS = 20000;
+export type IdentityFailureCode = "identity_timeout" | "storage_readonly" | "storage_permission_denied" | "identity_worker_failed" | "identity_proof_failed" | "identity_storage_failed" | "session_open_failed" | "readiness_ack_failed";
+export type McpIdentityStatus = {
+    state: "identity_disabled";
+} | {
+    state: "identity_pending";
+    attemptId: string;
+    elapsedMs: number;
+    timeoutMs: 20000;
+} | {
+    state: "identity_ready";
+    attemptId: string;
+    instance: string;
+    sessionId: string;
+    signingAvailable: boolean;
+} | {
+    state: "identity_failed";
+    attemptId: string;
+    cause: IdentityFailureCode;
+    message: string;
+    retryable: false;
+    elapsedMs: number;
+};
+export interface McpIdentityController {
+    status(): McpIdentityStatus;
+    start(): void;
+    cancel(reason: "transport_closed" | "signal"): void;
+    signer(): H2ASendSigner | undefined;
+}
+/**
+ * The identity attributes the worker resolves and hands back over IPC. It
+ * carries NO private key material — only paths, which the parent re-validates
+ * against `identityKeyPaths(root, instance)` before reading.
+ */
+export interface ResolvedIdentityMessage {
+    readonly instance: string;
+    readonly host: string;
+    readonly workspace?: unknown;
+    readonly name?: string;
+    readonly action: "override" | "reclaim" | "mint";
+    readonly providerSessionId?: string;
+    readonly providerSessionSource?: string;
+    readonly privateKeyPath: string;
+    readonly publicKeyPath: string;
+    readonly migrationNotice?: string;
+    readonly legacyInstance?: string;
+    readonly delegationEligible?: boolean;
+}
+/** The deferred identity request the CLI hands to the transport (no lock work). */
+export interface McpIdentityRequest {
+    readonly root: string;
+    readonly host: string;
+    readonly cwd: string;
+    readonly explicitInstance?: string;
+    readonly name?: string;
+    readonly scopes?: readonly string[];
+    readonly declaredCapabilities?: readonly string[];
+    /** Provider env captured from the launching session (never re-derived in child). */
+    readonly providerEnv?: Readonly<Record<string, string>>;
+}
+/** Result of a caller-supplied activation attempt (session + ACK + signer). */
+export type ActivationResult = {
+    ok: true;
+    sessionId: string;
+    signer?: H2ASendSigner;
+} | {
+    ok: false;
+    cause: IdentityFailureCode;
+    message: string;
+};
+export interface CreateIdentityControllerOptions {
+    readonly request: McpIdentityRequest;
+    /**
+     * Perform the real activation once the worker resolved a valid identity and
+     * the deadline still holds: open the presence session, read the private key,
+     * publish the correlated readiness ACK, build the live signer. Returning
+     * `{ok:false}` fails the identity terminally (no partial availability).
+     */
+    readonly activate: (identity: ResolvedIdentityMessage) => ActivationResult;
+    /** Diagnostic sink (stderr). Never protocol traffic. */
+    readonly log?: (line: string) => void;
+    /** Test seam: fork a worker child. Production uses the real fork below. */
+    readonly spawnWorker?: (request: McpIdentityRequest, budgetMs: number) => IdentityWorkerHandle;
+    /** Test seam: monotonic clock in ns. Defaults to process.hrtime.bigint. */
+    readonly nowNs?: () => bigint;
+    /** Test seam: deadline in ms. Defaults to MCP_IDENTITY_TIMEOUT_MS. */
+    readonly timeoutMs?: number;
+}
+/** Minimal handle over the identity worker child (real fork or test double). */
+export interface IdentityWorkerHandle {
+    onResolved(cb: (identity: ResolvedIdentityMessage) => void): void;
+    onError(cb: (cause: IdentityFailureCode, message: string) => void): void;
+    /** Fires when the child exits WITHOUT having produced a result. */
+    onExitWithoutResult(cb: () => void): void;
+    cancel(reason: string): void;
+}
+/**
+ * Real worker fork. Non-detached, argv-only, stdout IGNORED (it must never write
+ * protocol traffic), stderr piped for diagnostics, IPC typed. cwd/provider env
+ * are captured explicitly so the child does not inherit an artificial
+ * conversation. No shell, and NO PEM ever crosses IPC.
+ */
+export declare function forkIdentityWorker(request: McpIdentityRequest, budgetMs: number, log?: (line: string) => void): IdentityWorkerHandle;
+/**
+ * Build the identity controller for one MCP attachment. It starts inert and
+ * transitions `identity_pending → identity_ready | identity_failed` exactly once.
+ */
+export declare function createIdentityController(options: CreateIdentityControllerOptions): McpIdentityController;
+//# sourceMappingURL=identity-state.d.ts.map

package/dist/runtime/mcp/identity-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-state.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp/identity-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAIhD,kFAAkF;AAClF,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,MAAM,MAAM,mBAAmB,GAC3B,kBAAkB,GAClB,kBAAkB,GAClB,2BAA2B,GAC3B,wBAAwB,GACxB,uBAAuB,GACvB,yBAAyB,GACzB,qBAAqB,GACrB,sBAAsB,CAAC;AAE3B,MAAM,MAAM,iBAAiB,GACzB;IAAE,KAAK,EAAE,mBAAmB,CAAA;CAAE,GAC9B;IAAE,KAAK,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,KAAK,CAAA;CAAE,GACrF;IACE,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,OAAO,CAAC;CAC3B,GACD;IACE,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,KAAK,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEN,MAAM,WAAW,qBAAqB;IACpC,MAAM,IAAI,iBAAiB,CAAC;IAC5B,KAAK,IAAI,IAAI,CAAC;IACd,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,QAAQ,GAAG,IAAI,CAAC;IACpD,MAAM,IAAI,aAAa,GAAG,SAAS,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;IACjD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CACvC;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,oFAAoF;IACpF,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACzD;AAED,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,aAAa,CAAA;CAAE,GACvD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/D,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,uBAAuB,KAAK,gBAAgB,CAAC;IAC3E,wDAAwD;IACxD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,KAAK,oBAAoB,CAAC;IAC/F,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B,sEAAsE;IACtE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,gFAAgF;AAChF,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,uBAAuB,KAAK,IAAI,GAAG,IAAI,CAAC;IAClE,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IACzE,mEAAmE;IACnE,mBAAmB,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;IAC1C,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAOD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,kBAAkB,EAC3B,QAAQ,EAAE,MAAM,EAChB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAC3B,oBAAoB,CAiGtB;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,+BAA+B,GACvC,qBAAqB,CAyJvB"}

package/dist/runtime/mcp/identity-state.js

@@ -0,0 +1,288 @@
+/**
+ * L2 — identity-independent MCP connection + asynchronous identity readiness.
+ *
+ * The MCP transport (initialize / tools/list) must answer IMMEDIATELY, without
+ * waiting on the shared-identity critical section (the keypair read, the
+ * registry parse, and above all the identity/registry lock wait). Those run in a
+ * dedicated, non-detached CHILD process (`../identity/worker.js`) so they never
+ * block the parent's event loop — a `Promise`/`setImmediate` around the sync
+ * lock in the PARENT would not help, because the lock wait (and the ~17 MB
+ * registry parse) are synchronous and would still stall `initialize`.
+ *
+ * This module owns the readiness STATE MACHINE and the single 20 s deadline
+ * measured from entering `identity_pending`. Activation (opening the real
+ * presence session, reading the private key, publishing the correlated readiness
+ * ACK, arming the live signer) is delegated to the caller through `activate`,
+ * because that side lives with the SessionRegistry in the stdio transport. The
+ * controller only transitions to `identity_ready` once activation reports
+ * success — never on the child's raw result, never with a provisional key, never
+ * with an early availability ACK.
+ */
+import { fork } from "node:child_process";
+import { identityKeyPaths } from "../identity/live.js";
+import { getActiveMcpTrace } from "./phase-trace.js";
+/** The single identity deadline (ms), measured from entering identity_pending. */
+export const MCP_IDENTITY_TIMEOUT_MS = 20_000;
+function randomAttemptId() {
+    // A short, non-secret correlation id for the attempt (never a nonce/key).
+    return `att:${Math.random().toString(16).slice(2, 10)}${Date.now().toString(16)}`;
+}
+/**
+ * Real worker fork. Non-detached, argv-only, stdout IGNORED (it must never write
+ * protocol traffic), stderr piped for diagnostics, IPC typed. cwd/provider env
+ * are captured explicitly so the child does not inherit an artificial
+ * conversation. No shell, and NO PEM ever crosses IPC.
+ */
+export function forkIdentityWorker(request, budgetMs, log) {
+    const capturedEnv = { ...process.env, ...(request.providerEnv ?? {}) };
+    let child;
+    let resolvedCb;
+    let errorCb;
+    let exitCb;
+    let sawResult = false;
+    let started = false;
+    const ensureStarted = () => {
+        if (started)
+            return;
+        started = true;
+        try {
+            child = fork(new URL("../identity/worker.js", import.meta.url), [], {
+                cwd: request.cwd,
+                env: capturedEnv,
+                stdio: ["ignore", "ignore", "pipe", "ipc"]
+            });
+        }
+        catch (err) {
+            queueMicrotask(() => errorCb?.("identity_worker_failed", err instanceof Error ? err.message : String(err)));
+            return;
+        }
+        // Forward the worker's stderr LINE BY LINE so a `h2a.mcp.phase …` trace span
+        // (L0, role=identity-child) is never split across a chunk boundary when it is
+        // re-emitted on the parent's stderr. Diagnostics flow through unchanged.
+        let stderrBuf = "";
+        child.stderr?.on("data", (chunk) => {
+            stderrBuf += String(chunk);
+            let nl;
+            while ((nl = stderrBuf.indexOf("\n")) !== -1) {
+                const line = stderrBuf.slice(0, nl);
+                stderrBuf = stderrBuf.slice(nl + 1);
+                if (line.length > 0)
+                    log?.(`identity-worker: ${line}`);
+            }
+        });
+        child.stderr?.on("end", () => {
+            if (stderrBuf.trimEnd().length > 0)
+                log?.(`identity-worker: ${stderrBuf.trimEnd()}`);
+            stderrBuf = "";
+        });
+        child.on("message", (msg) => {
+            const m = msg;
+            if (!m || typeof m !== "object")
+                return;
+            if (m.kind === "identity_resolved") {
+                sawResult = true;
+                resolvedCb?.(m.identity);
+            }
+            else if (m.kind === "identity_error") {
+                sawResult = true;
+                const e = m;
+                errorCb?.(e.cause ?? "identity_worker_failed", e.message ?? "identity worker error");
+            }
+            // A `cancel_ack` needs no parent action beyond letting the child exit.
+        });
+        child.on("error", (err) => {
+            if (sawResult)
+                return;
+            errorCb?.("identity_worker_failed", err instanceof Error ? err.message : String(err));
+        });
+        child.on("exit", () => {
+            if (!sawResult)
+                exitCb?.();
+        });
+        try {
+            // Correlate the worker's L0 spans to THIS attempt's trace (same attemptId,
+            // role=identity-child) so the relocated identity/lock/registry spans stay
+            // joinable with the parent's server-role boot spans.
+            const traceAttemptId = getActiveMcpTrace()?.attemptId;
+            child.send({
+                kind: "resolve_identity",
+                v: 1,
+                request,
+                budgetMs,
+                ...(traceAttemptId !== undefined ? { traceAttemptId } : {})
+            });
+        }
+        catch (err) {
+            errorCb?.("identity_worker_failed", err instanceof Error ? err.message : String(err));
+        }
+    };
+    return {
+        onResolved(cb) {
+            resolvedCb = cb;
+            ensureStarted();
+        },
+        onError(cb) {
+            errorCb = cb;
+        },
+        onExitWithoutResult(cb) {
+            exitCb = cb;
+        },
+        cancel(reason) {
+            try {
+                child?.send({ kind: "cancel", reason });
+            }
+            catch {
+                /* channel already gone; the child's own finally releases its lock */
+            }
+        }
+    };
+}
+/**
+ * Build the identity controller for one MCP attachment. It starts inert and
+ * transitions `identity_pending → identity_ready | identity_failed` exactly once.
+ */
+export function createIdentityController(options) {
+    const timeoutMs = options.timeoutMs ?? MCP_IDENTITY_TIMEOUT_MS;
+    const nowNs = options.nowNs ?? process.hrtime.bigint;
+    const spawnWorker = options.spawnWorker ??
+        ((req, budget) => forkIdentityWorker(req, budget, options.log));
+    let state = { state: "identity_disabled" };
+    let attemptId = "";
+    let startedNs = 0n;
+    let deadlineTimer;
+    let worker;
+    let liveSigner;
+    let terminal = false;
+    let cancelled = false;
+    const elapsedMs = () => Number((nowNs() - startedNs) / 1000000n);
+    const clearTimer = () => {
+        if (deadlineTimer) {
+            clearTimeout(deadlineTimer);
+            deadlineTimer = undefined;
+        }
+    };
+    const fail = (cause, message) => {
+        if (terminal)
+            return;
+        terminal = true;
+        clearTimer();
+        state = {
+            state: "identity_failed",
+            attemptId,
+            cause,
+            message,
+            retryable: false,
+            elapsedMs: elapsedMs()
+        };
+        liveSigner = undefined;
+        // L0 trace reuse: the identity lifecycle on the PARENT (the deep provider /
+        // registry / lock spans now run in the child, off this event loop).
+        getActiveMcpTrace()?.phase("identity_failed", { code: cause });
+        options.log?.(`identity failed (${cause}): ${message}`);
+        try {
+            worker?.cancel("failed");
+        }
+        catch {
+            /* best effort */
+        }
+    };
+    const onResolved = (identity) => {
+        if (terminal || cancelled)
+            return;
+        // Deadline re-check at the activation boundary: a late worker result never
+        // reactivates the connection.
+        if (elapsedMs() >= timeoutMs) {
+            fail("identity_timeout", `identity did not become ready within ${timeoutMs}ms`);
+            return;
+        }
+        // Validate the returned key paths against the canonical layout for this
+        // instance — NEVER read an arbitrary path the child claimed. An explicit
+        // `--instance` override resolves with NO key paths (presence-only, no
+        // signer); that is allowed and only skips this check.
+        if (identity.privateKeyPath) {
+            const expected = identityKeyPaths(options.request.root, identity.instance);
+            if (identity.privateKeyPath !== expected.privateKeyPath ||
+                identity.publicKeyPath !== expected.publicKeyPath) {
+                fail("identity_proof_failed", "resolved identity key paths do not match the canonical layout");
+                return;
+            }
+        }
+        let result;
+        try {
+            result = options.activate(identity);
+        }
+        catch (err) {
+            fail("session_open_failed", err instanceof Error ? err.message : String(err));
+            return;
+        }
+        if (!result.ok) {
+            fail(result.cause, result.message);
+            return;
+        }
+        // F1: a FULLY-SUCCESSFUL activation is terminal-ready. We do NOT re-check the
+        // deadline here: activation already opened the presence session, armed the
+        // signer/wake and published the correlated readiness ACK — failing now would
+        // leave a live ACK + presence + wake behind a `failed` state (a wedged
+        // connection). The deadline is enforced BEFORE activation (above) and by the
+        // parent timer; if activation itself fails, `activate` rolls its own partial
+        // work back before returning `{ok:false}`.
+        terminal = true;
+        clearTimer();
+        liveSigner = result.signer;
+        state = {
+            state: "identity_ready",
+            attemptId,
+            instance: identity.instance,
+            sessionId: result.sessionId,
+            signingAvailable: liveSigner !== undefined
+        };
+        getActiveMcpTrace()?.phase("identity_ready", {
+            code: liveSigner ? "signing" : "presence_only"
+        });
+        options.log?.(`identity ready: ${identity.instance} (signing ${liveSigner ? "available" : "unavailable"})`);
+    };
+    return {
+        status() {
+            if (state.state === "identity_pending") {
+                return { state: "identity_pending", attemptId, elapsedMs: elapsedMs(), timeoutMs: 20000 };
+            }
+            return state;
+        },
+        start() {
+            if (state.state !== "identity_disabled")
+                return;
+            attemptId = randomAttemptId();
+            startedNs = nowNs();
+            state = { state: "identity_pending", attemptId, elapsedMs: 0, timeoutMs: 20000 };
+            // L0 trace reuse: mark that identity entered the async pending window on the
+            // parent (initialize/tools-list are already answerable — identity is NOT on
+            // the boot critical path anymore, which is the #249 fix).
+            getActiveMcpTrace()?.phase("identity_pending");
+            deadlineTimer = setTimeout(() => {
+                fail("identity_timeout", `identity did not become ready within ${timeoutMs}ms`);
+            }, timeoutMs);
+            deadlineTimer.unref?.();
+            worker = spawnWorker(options.request, timeoutMs);
+            worker.onError((cause, message) => fail(cause, message));
+            worker.onExitWithoutResult(() => fail("identity_worker_failed", "identity worker exited without a result"));
+            worker.onResolved(onResolved);
+        },
+        cancel(reason) {
+            cancelled = true;
+            clearTimer();
+            try {
+                worker?.cancel(reason);
+            }
+            catch {
+                /* best effort */
+            }
+            // Transport is gone: no activation may follow. Keep the last observable
+            // state for any in-flight status read, but disarm the signer.
+            liveSigner = undefined;
+        },
+        signer() {
+            return liveSigner;
+        }
+    };
+}
+//# sourceMappingURL=identity-state.js.map

package/dist/runtime/mcp/identity-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-state.js","sourceRoot":"","sources":["../../../src/runtime/mcp/identity-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,IAAI,EAAqB,MAAM,oBAAoB,CAAC;AAG7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,kFAAkF;AAClF,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAwG9C,SAAS,eAAe;IACtB,0EAA0E;IAC1E,OAAO,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;AACpF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA2B,EAC3B,QAAgB,EAChB,GAA4B;IAE5B,MAAM,WAAW,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;IAC1F,IAAI,KAA+B,CAAC;IACpC,IAAI,UAAqE,CAAC;IAC1E,IAAI,OAA4E,CAAC;IACjF,IAAI,MAAgC,CAAC;IACrC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,aAAa,GAAG,GAAS,EAAE;QAC/B,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE;gBAClE,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG,EAAE,WAAW;gBAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,cAAc,CAAC,GAAG,EAAE,CAClB,OAAO,EAAE,CAAC,wBAAwB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACtF,CAAC;YACF,OAAO;QACT,CAAC;QACD,6EAA6E;QAC7E,8EAA8E;QAC9E,yEAAyE;QACzE,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,EAAE,CAAC;YACP,OAAO,CAAC,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACpC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,EAAE,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAC3B,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,EAAE,CAAC,oBAAoB,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACrF,SAAS,GAAG,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE;YACnC,MAAM,CAAC,GAAG,GAAoC,CAAC;YAC/C,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,OAAO;YACxC,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACnC,SAAS,GAAG,IAAI,CAAC;gBACjB,UAAU,EAAE,CAAE,CAA2C,CAAC,QAAQ,CAAC,CAAC;YACtE,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACvC,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM,CAAC,GAAG,CAAsD,CAAC;gBACjE,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,wBAAwB,EAAE,CAAC,CAAC,OAAO,IAAI,uBAAuB,CAAC,CAAC;YACvF,CAAC;YACD,uEAAuE;QACzE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,SAAS;gBAAE,OAAO;YACtB,OAAO,EAAE,CAAC,wBAAwB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACpB,IAAI,CAAC,SAAS;gBAAE,MAAM,EAAE,EAAE,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,2EAA2E;YAC3E,0EAA0E;YAC1E,qDAAqD;YACrD,MAAM,cAAc,GAAG,iBAAiB,EAAE,EAAE,SAAS,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,kBAAkB;gBACxB,CAAC,EAAE,CAAC;gBACJ,OAAO;gBACP,QAAQ;gBACR,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,CAAC,wBAAwB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxF,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,UAAU,CAAC,EAAE;YACX,UAAU,GAAG,EAAE,CAAC;YAChB,aAAa,EAAE,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,EAAE;YACR,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QACD,mBAAmB,CAAC,EAAE;YACpB,MAAM,GAAG,EAAE,CAAC;QACd,CAAC;QACD,MAAM,CAAC,MAAM;YACX,IAAI,CAAC;gBACH,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;YACvE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAwC;IAExC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;IACrD,MAAM,WAAW,GACf,OAAO,CAAC,WAAW;QACnB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAElE,IAAI,KAAK,GAAsB,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC9D,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,aAAwD,CAAC;IAC7D,IAAI,MAAwC,CAAC;IAC7C,IAAI,UAAqC,CAAC;IAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,GAAG,SAAS,CAAC,GAAG,QAAU,CAAC,CAAC;IAE3E,MAAM,UAAU,GAAG,GAAS,EAAE;QAC5B,IAAI,aAAa,EAAE,CAAC;YAClB,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5B,aAAa,GAAG,SAAS,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,KAA0B,EAAE,OAAe,EAAQ,EAAE;QACjE,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,UAAU,EAAE,CAAC;QACb,KAAK,GAAG;YACN,KAAK,EAAE,iBAAiB;YACxB,SAAS;YACT,KAAK;YACL,OAAO;YACP,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,SAAS,EAAE;SACvB,CAAC;QACF,UAAU,GAAG,SAAS,CAAC;QACvB,4EAA4E;QAC5E,oEAAoE;QACpE,iBAAiB,EAAE,EAAE,KAAK,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,EAAE,CAAC,oBAAoB,KAAK,MAAM,OAAO,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,QAAiC,EAAQ,EAAE;QAC7D,IAAI,QAAQ,IAAI,SAAS;YAAE,OAAO;QAClC,2EAA2E;QAC3E,8BAA8B;QAC9B,IAAI,SAAS,EAAE,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,kBAAkB,EAAE,wCAAwC,SAAS,IAAI,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QACD,wEAAwE;QACxE,yEAAyE;QACzE,sEAAsE;QACtE,sDAAsD;QACtD,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3E,IACE,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;gBACnD,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,EACjD,CAAC;gBACD,IAAI,CACF,uBAAuB,EACvB,+DAA+D,CAChE,CAAC;gBACF,OAAO;YACT,CAAC;QACH,CAAC;QACD,IAAI,MAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,qBAAqB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QACD,8EAA8E;QAC9E,2EAA2E;QAC3E,6EAA6E;QAC7E,uEAAuE;QACvE,6EAA6E;QAC7E,6EAA6E;QAC7E,2CAA2C;QAC3C,QAAQ,GAAG,IAAI,CAAC;QAChB,UAAU,EAAE,CAAC;QACb,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,KAAK,GAAG;YACN,KAAK,EAAE,gBAAgB;YACvB,SAAS;YACT,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,gBAAgB,EAAE,UAAU,KAAK,SAAS;SAC3C,CAAC;QACF,iBAAiB,EAAE,EAAE,KAAK,CAAC,gBAAgB,EAAE;YAC3C,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe;SAC/C,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,EAAE,CACX,mBAAmB,QAAQ,CAAC,QAAQ,aAAa,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,GAAG,CAC7F,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACL,MAAM;YACJ,IAAI,KAAK,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;gBACvC,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC5F,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK;YACH,IAAI,KAAK,CAAC,KAAK,KAAK,mBAAmB;gBAAE,OAAO;YAChD,SAAS,GAAG,eAAe,EAAE,CAAC;YAC9B,SAAS,GAAG,KAAK,EAAE,CAAC;YACpB,KAAK,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACjF,6EAA6E;YAC7E,4EAA4E;YAC5E,0DAA0D;YAC1D,iBAAiB,EAAE,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAC/C,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,kBAAkB,EAAE,wCAAwC,SAAS,IAAI,CAAC,CAAC;YAClF,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;YACxB,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACjD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YACzD,MAAM,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAC9B,IAAI,CAAC,wBAAwB,EAAE,yCAAyC,CAAC,CAC1E,CAAC;YACF,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,CAAC,MAAM;YACX,SAAS,GAAG,IAAI,CAAC;YACjB,UAAU,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;YACD,wEAAwE;YACxE,8DAA8D;YAC9D,UAAU,GAAG,SAAS,CAAC;QACzB,CAAC;QACD,MAAM;YACJ,OAAO,UAAU,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/mcp/index.d.ts

@@ -6,4 +6,5 @@ export { buildH2aRunInvocation, executeH2aRun, executeH2aRunWithSpawn, handleH2a
 export { SessionRegistry, type OpenSessionRequest, type SessionRegistryOptions } from "./sessions.js";
 export { NotificationDispatcher, type McpPushNotification, type NotificationSink } from "./notifications.js";
 export { createMcpTrace, getActiveMcpTrace, setActiveMcpTrace, TRACE_LINE_PREFIX, TRACE_DETAIL_ENV, type McpTrace, type McpTraceEvent, type McpTraceFields, type McpTraceOptions, type McpTraceRole, type McpTraceEventKind } from "./phase-trace.js";
+export { createIdentityController, forkIdentityWorker, MCP_IDENTITY_TIMEOUT_MS, type ActivationResult, type CreateIdentityControllerOptions, type IdentityFailureCode, type IdentityWorkerHandle, type McpIdentityController, type McpIdentityRequest, type McpIdentityStatus, type ResolvedIdentityMessage } from "./identity-state.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime/mcp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,WAAW,EACX,KAAK,kBAAkB,EACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,sBAAsB,EACtB,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACvB,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACf,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,WAAW,EACX,KAAK,kBAAkB,EACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,sBAAsB,EACtB,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,gBAAgB,EACrB,KAAK,+BAA+B,EACpC,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC7B,MAAM,qBAAqB,CAAC"}

package/dist/runtime/mcp/index.js

@@ -6,4 +6,5 @@ export { buildH2aRunInvocation, executeH2aRun, executeH2aRunWithSpawn, handleH2a
 export { SessionRegistry } from "./sessions.js";
 export { NotificationDispatcher } from "./notifications.js";
 export { createMcpTrace, getActiveMcpTrace, setActiveMcpTrace, TRACE_LINE_PREFIX, TRACE_DETAIL_ENV } from "./phase-trace.js";
+export { createIdentityController, forkIdentityWorker, MCP_IDENTITY_TIMEOUT_MS } from "./identity-state.js";
 //# sourceMappingURL=index.js.map

package/dist/runtime/mcp/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EAIrB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,4BAA4B,EAG7B,MAAM,YAAY,CAAC;AAEpB,OAAO,EAGN,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,WAAW,EAEZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,sBAAsB,EACtB,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EAItB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,EAGhB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EAGvB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAOjB,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EAIrB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,4BAA4B,EAG7B,MAAM,YAAY,CAAC;AAEpB,OAAO,EAGN,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,uBAAuB,EACvB,WAAW,EAEZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,sBAAsB,EACtB,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EAItB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,EAGhB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,sBAAsB,EAGvB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAOjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EASxB,MAAM,qBAAqB,CAAC"}

package/dist/runtime/mcp/server.d.ts

@@ -7,6 +7,7 @@ import { type H2aRunDelegation, type H2aRunExecutor } from "./agent-launch.js";
 import type { H2ASendSigner } from "../send.js";
 import { type PayloadStore } from "./payload-store.js";
 import { type FrameBudget } from "./frame-budget.js";
+import type { McpIdentityController } from "./identity-state.js";
 export interface CreateMcpServerOptions {
     /** Filesystem root for the backing local-files store. */
     root: string;
@@ -24,6 +25,20 @@ export interface CreateMcpServerOptions {
     store?: LocalStore;
     /** Trusted local sidecar identity used by h2a_send; never supplied by tool args. */
     sendContext?: H2ASendSigner;
+    /**
+     * L2: the asynchronous identity readiness controller. When present, mutating /
+     * signed / identity-requiring tools are refused with a bounded typed error
+     * while identity is `identity_pending` or `identity_failed`, and
+     * `h2a_identity_status` reports the live state. Absent → `identity_disabled`
+     * (the historical explicit mode) and no gating.
+     */
+    identity?: McpIdentityController;
+    /**
+     * L2: the LIVE signing identity, read on each `h2a_send` so a signer that only
+     * becomes available after asynchronous activation is picked up without
+     * rebuilding the server. Falls back to `sendContext` when absent.
+     */
+    getSendContext?: () => H2ASendSigner | undefined;
     /**
      * Optional SessionRegistry overrides. Disabled `autoHeartbeat` is the
      * sane default for in-process tests; the stdio transport enables it.
@@ -39,6 +54,14 @@ export interface CreateMcpServerOptions {
     };
     /** L1: frame budget override (tests). Defaults to `resolveFrameBudget()`. */
     frameBudget?: FrameBudget;
+    /**
+     * L2: when `false`, the auto-created store does NOT initialize the layout
+     * (no directory / sentinel / file writes) so `initialize` / `tools/list` /
+     * `h2a_identity_status` and every read-only tool answer on a read-only or
+     * not-yet-created root before identity is ready. Ignored when `store` is
+     * supplied. Default `true` (unchanged for existing callers).
+     */
+    storeInitialize?: boolean;
 }
 /** L1: optional per-call transport context (reserved for exact-id budgeting). */
 export interface McpCallContext {

package/dist/runtime/mcp/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE5E,OAAO,EAsCL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,eAAe,EACf,KAAK,sBAAsB,EAC5B,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,KAAK,iBAAiB,EAEvB,MAAM,YAAY,CAAC;AAOpB,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGzE,MAAM,WAAW,sBAAsB;IACrC,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,MAAM,gBAAgB,GAAG,SAAS,CAAC;IACvD;;;;OAIG;IACH,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,oFAAoF;IACpF,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC;;;OAGG;IACH,aAAa,CAAC,EAAE;QACd,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,gBAAgB,CAAC;KACzB,CAAC;IACF,6EAA6E;IAC7E,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,IAAI,iBAAiB,EAAE,CAAC;IACjC,QAAQ,CACN,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACzC,OAAO,CAAC,EAAE,cAAc,GACvB,aAAa,GAAG,cAAc,GAAG,kBAAkB,CAAC;IACvD,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,EAAE,sBAAsB,CAAC;IAC/C,+DAA+D;IAC/D,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,mEAAmE;IACnE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CACnC;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAOhF;AAID;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,SAAS,CA8J1E"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE5E,OAAO,EAsCL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,eAAe,EACf,KAAK,sBAAsB,EAC5B,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,KAAK,iBAAiB,EAEvB,MAAM,YAAY,CAAC;AAOpB,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGzE,OAAO,KAAK,EAAE,qBAAqB,EAAqB,MAAM,qBAAqB,CAAC;AAEpF,MAAM,WAAW,sBAAsB;IACrC,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,MAAM,gBAAgB,GAAG,SAAS,CAAC;IACvD;;;;OAIG;IACH,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,oFAAoF;IACpF,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,aAAa,GAAG,SAAS,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC;;;OAGG;IACH,aAAa,CAAC,EAAE;QACd,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,gBAAgB,CAAC;KACzB,CAAC;IACF,6EAA6E;IAC7E,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,IAAI,iBAAiB,EAAE,CAAC;IACjC,QAAQ,CACN,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EACzC,OAAO,CAAC,EAAE,cAAc,GACvB,aAAa,GAAG,cAAc,GAAG,kBAAkB,CAAC;IACvD,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,mDAAmD;IACnD,QAAQ,CAAC,aAAa,EAAE,sBAAsB,CAAC;IAC/C,+DAA+D;IAC/D,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,mEAAmE;IACnE,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CACnC;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAOhF;AAwED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,SAAS,CAuM1E"}