@soleri/core 2.10.0 → 2.12.0

package/dist/transport/lsp-server.d.ts

@@ -0,0 +1,140 @@
+/**
+ * LSP Server — Language Server Protocol transport for editor-native agent integration.
+ *
+ * Speaks JSON-RPC 2.0 over stdio using the LSP wire format:
+ *   Content-Length: <N>\r\n\r\n<JSON payload>
+ *
+ * Maps agent capabilities to LSP features:
+ *   - Completions → vault search suggestions
+ *   - Diagnostics → quality gate violations
+ *   - Hover → pattern documentation
+ *   - Code actions → agent ops
+ *
+ * Uses only node:readline + node:process (zero deps).
+ */
+import type { LspTransportConfig } from './types.js';
+/** JSON-RPC 2.0 request */
+export interface LspRequest {
+    jsonrpc: '2.0';
+    id: number | string;
+    method: string;
+    params?: unknown;
+}
+/** JSON-RPC 2.0 notification (no id) */
+export interface LspNotification {
+    jsonrpc: '2.0';
+    method: string;
+    params?: unknown;
+}
+/** JSON-RPC 2.0 response */
+export interface LspResponse {
+    jsonrpc: '2.0';
+    id: number | string | null;
+    result?: unknown;
+    error?: {
+        code: number;
+        message: string;
+        data?: unknown;
+    };
+}
+/** LSP Position */
+export interface LspPosition {
+    line: number;
+    character: number;
+}
+/** LSP Range */
+export interface LspRange {
+    start: LspPosition;
+    end: LspPosition;
+}
+/** LSP Diagnostic */
+export interface LspDiagnostic {
+    range: LspRange;
+    severity?: number;
+    source?: string;
+    message: string;
+    code?: string | number;
+}
+/** LSP Completion Item */
+export interface LspCompletionItem {
+    label: string;
+    kind?: number;
+    detail?: string;
+    documentation?: string | {
+        kind: 'markdown' | 'plaintext';
+        value: string;
+    };
+    insertText?: string;
+}
+/** LSP Hover */
+export interface LspHover {
+    contents: string | {
+        kind: 'markdown' | 'plaintext';
+        value: string;
+    };
+    range?: LspRange;
+}
+/** LSP Code Action */
+export interface LspCodeAction {
+    title: string;
+    kind?: string;
+    diagnostics?: LspDiagnostic[];
+    command?: {
+        title: string;
+        command: string;
+        arguments?: unknown[];
+    };
+}
+export interface LspServerCallbacks {
+    /** Return completions for the given document URI and position. */
+    onCompletion?: (uri: string, position: LspPosition) => Promise<LspCompletionItem[]>;
+    /** Return hover info for the given document URI and position. */
+    onHover?: (uri: string, position: LspPosition) => Promise<LspHover | null>;
+    /** Return diagnostics for the given document URI and content. */
+    onDiagnostics?: (uri: string, content: string) => Promise<LspDiagnostic[]>;
+    /** Return code actions for the given document URI, range, and current diagnostics. */
+    onCodeAction?: (uri: string, range: LspRange, diagnostics: LspDiagnostic[]) => Promise<LspCodeAction[]>;
+    /** Called when the server is initialized. Return additional server info if desired. */
+    onInitialize?: () => Promise<{
+        name?: string;
+        version?: string;
+    }>;
+    /** Called when a document is opened or changed. */
+    onDocumentChange?: (uri: string, content: string) => Promise<void>;
+    /** Called on shutdown. */
+    onShutdown?: () => Promise<void>;
+}
+export declare class LspServer {
+    private config;
+    private callbacks;
+    private capabilities;
+    private input;
+    private output;
+    private running;
+    private buffer;
+    private contentLength;
+    private initialized;
+    constructor(config: LspTransportConfig, callbacks: LspServerCallbacks, input?: NodeJS.ReadableStream, output?: NodeJS.WritableStream);
+    /** Start listening for LSP messages on stdio. */
+    start(): void;
+    /** Stop the server. */
+    stop(): Promise<void>;
+    /** Whether the server is currently running. */
+    get isRunning(): boolean;
+    /** Send a notification to the client (e.g., diagnostics). */
+    notify(method: string, params?: unknown): void;
+    /** Push diagnostics for a document. */
+    publishDiagnostics(uri: string, diagnostics: LspDiagnostic[]): void;
+    private onData;
+    private processBuffer;
+    private handleMessage;
+    private handleInitialize;
+    private handleCompletion;
+    private handleHover;
+    private handleCodeAction;
+    private handleDocumentChange;
+    private respond;
+    private respondError;
+    private writeMessage;
+}
+//# sourceMappingURL=lsp-server.d.ts.map

package/dist/transport/lsp-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lsp-server.d.ts","sourceRoot":"","sources":["../../src/transport/lsp-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAmB,MAAM,YAAY,CAAC;AAMtE,2BAA2B;AAC3B,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wCAAwC;AACxC,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,4BAA4B;AAC5B,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC3D;AAED,mBAAmB;AACnB,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,gBAAgB;AAChB,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,WAAW,CAAC;CAClB;AAED,qBAAqB;AACrB,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,QAAQ,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACxB;AAED,0BAA0B;AAC1B,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,UAAU,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,gBAAgB;AAChB,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,UAAU,GAAG,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB;AAED,sBAAsB;AACtB,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC;IAC9B,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC;CACrE;AAMD,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACpF,iEAAiE;IACjE,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAC3E,iEAAiE;IACjE,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC3E,sFAAsF;IACtF,YAAY,CAAC,EAAE,CACb,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,QAAQ,EACf,WAAW,EAAE,aAAa,EAAE,KACzB,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC9B,uFAAuF;IACvF,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,0BAA0B;IAC1B,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAMD,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,YAAY,CAA4B;IAChD,OAAO,CAAC,KAAK,CAAwB;IACrC,OAAO,CAAC,MAAM,CAAwB;IACtC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,aAAa,CAAM;IAC3B,OAAO,CAAC,WAAW,CAAS;gBAG1B,MAAM,EAAE,kBAAkB,EAC1B,SAAS,EAAE,kBAAkB,EAC7B,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,EAC7B,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc;IAchC,iDAAiD;IACjD,KAAK,IAAI,IAAI;IAUb,uBAAuB;IACjB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAM3B,+CAA+C;IAC/C,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,6DAA6D;IAC7D,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI;IAI9C,uCAAuC;IACvC,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,IAAI;IAMnE,OAAO,CAAC,MAAM;IAKd,OAAO,CAAC,aAAa;YAyCP,aAAa;YA6Cb,gBAAgB;YA0ChB,gBAAgB;YAehB,WAAW;YAeX,gBAAgB;YAoBhB,oBAAoB;IAsBlC,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,YAAY;CAMrB"}

package/dist/transport/lsp-server.js

@@ -0,0 +1,239 @@
+/**
+ * LSP Server — Language Server Protocol transport for editor-native agent integration.
+ *
+ * Speaks JSON-RPC 2.0 over stdio using the LSP wire format:
+ *   Content-Length: <N>\r\n\r\n<JSON payload>
+ *
+ * Maps agent capabilities to LSP features:
+ *   - Completions → vault search suggestions
+ *   - Diagnostics → quality gate violations
+ *   - Hover → pattern documentation
+ *   - Code actions → agent ops
+ *
+ * Uses only node:readline + node:process (zero deps).
+ */
+// =============================================================================
+// LSP SERVER
+// =============================================================================
+export class LspServer {
+    config;
+    callbacks;
+    capabilities;
+    input;
+    output;
+    running = false;
+    buffer = '';
+    contentLength = -1;
+    initialized = false;
+    constructor(config, callbacks, input, output) {
+        this.config = config;
+        this.callbacks = callbacks;
+        this.capabilities = {
+            completions: config.capabilities?.completions ?? true,
+            diagnostics: config.capabilities?.diagnostics ?? true,
+            hover: config.capabilities?.hover ?? true,
+            codeActions: config.capabilities?.codeActions ?? false,
+        };
+        this.input = input ?? process.stdin;
+        this.output = output ?? process.stdout;
+    }
+    /** Start listening for LSP messages on stdio. */
+    start() {
+        if (this.running)
+            return;
+        this.running = true;
+        this.input.setEncoding('utf-8');
+        this.input.on('data', (chunk) => this.onData(chunk));
+        this.input.on('end', () => {
+            this.running = false;
+        });
+    }
+    /** Stop the server. */
+    async stop() {
+        this.running = false;
+        this.input.removeAllListeners('data');
+        this.input.removeAllListeners('end');
+    }
+    /** Whether the server is currently running. */
+    get isRunning() {
+        return this.running;
+    }
+    /** Send a notification to the client (e.g., diagnostics). */
+    notify(method, params) {
+        this.writeMessage({ jsonrpc: '2.0', method, params });
+    }
+    /** Push diagnostics for a document. */
+    publishDiagnostics(uri, diagnostics) {
+        this.notify('textDocument/publishDiagnostics', { uri, diagnostics });
+    }
+    // ─── Message Parsing (LSP wire format) ─────────────────────────────
+    onData(chunk) {
+        this.buffer += chunk;
+        this.processBuffer();
+    }
+    processBuffer() {
+        while (true) {
+            if (this.contentLength < 0) {
+                // Looking for headers
+                const headerEnd = this.buffer.indexOf('\r\n\r\n');
+                if (headerEnd < 0)
+                    return; // incomplete headers
+                const headers = this.buffer.substring(0, headerEnd);
+                const match = headers.match(/Content-Length:\s*(\d+)/i);
+                if (!match) {
+                    // Skip malformed header
+                    this.buffer = this.buffer.substring(headerEnd + 4);
+                    continue;
+                }
+                this.contentLength = parseInt(match[1], 10);
+                this.buffer = this.buffer.substring(headerEnd + 4);
+            }
+            // Check if we have the full body
+            if (Buffer.byteLength(this.buffer, 'utf-8') < this.contentLength)
+                return;
+            // Extract exactly contentLength bytes
+            const bodyBytes = Buffer.from(this.buffer, 'utf-8');
+            const body = bodyBytes.subarray(0, this.contentLength).toString('utf-8');
+            this.buffer = bodyBytes.subarray(this.contentLength).toString('utf-8');
+            this.contentLength = -1;
+            try {
+                const message = JSON.parse(body);
+                this.handleMessage(message).catch(() => {
+                    // Silently handle errors in message processing
+                });
+            }
+            catch {
+                // Invalid JSON — skip
+            }
+        }
+    }
+    // ─── Message Handling ──────────────────────────────────────────────
+    async handleMessage(message) {
+        const method = message.method;
+        const id = 'id' in message ? message.id : undefined;
+        switch (method) {
+            case 'initialize':
+                await this.handleInitialize(id);
+                break;
+            case 'initialized':
+                // Client acknowledgement — no response needed
+                break;
+            case 'shutdown':
+                await this.callbacks.onShutdown?.();
+                if (id !== undefined) {
+                    this.respond(id, null);
+                }
+                break;
+            case 'exit':
+                this.running = false;
+                break;
+            case 'textDocument/completion':
+                await this.handleCompletion(id, message.params);
+                break;
+            case 'textDocument/hover':
+                await this.handleHover(id, message.params);
+                break;
+            case 'textDocument/codeAction':
+                await this.handleCodeAction(id, message.params);
+                break;
+            case 'textDocument/didOpen':
+            case 'textDocument/didChange':
+                await this.handleDocumentChange(message.params);
+                break;
+            case 'textDocument/didClose':
+                // No-op
+                break;
+            default:
+                // Unknown method — respond with MethodNotFound if it has an id
+                if (id !== undefined) {
+                    this.respondError(id, -32601, `Method not found: ${method}`);
+                }
+                break;
+        }
+    }
+    async handleInitialize(id) {
+        const info = await this.callbacks.onInitialize?.();
+        const serverCapabilities = {};
+        if (this.capabilities.completions) {
+            serverCapabilities.completionProvider = {
+                triggerCharacters: ['@', '/'],
+                resolveProvider: false,
+            };
+        }
+        if (this.capabilities.hover) {
+            serverCapabilities.hoverProvider = true;
+        }
+        if (this.capabilities.diagnostics) {
+            // Diagnostics are push-based via textDocument/publishDiagnostics
+            // We signal support via textDocumentSync
+        }
+        if (this.capabilities.codeActions) {
+            serverCapabilities.codeActionProvider = true;
+        }
+        // Always support text document sync (needed for diagnostics + change tracking)
+        serverCapabilities.textDocumentSync = {
+            openClose: true,
+            change: 1, // Full content on change
+        };
+        this.respond(id, {
+            capabilities: serverCapabilities,
+            serverInfo: {
+                name: info?.name ?? 'soleri-lsp',
+                version: info?.version ?? '0.1.0',
+            },
+        });
+        this.initialized = true;
+    }
+    async handleCompletion(id, params) {
+        if (!this.capabilities.completions || !this.callbacks.onCompletion) {
+            this.respond(id, []);
+            return;
+        }
+        const p = params;
+        const items = await this.callbacks.onCompletion(p.textDocument.uri, p.position);
+        this.respond(id, items);
+    }
+    async handleHover(id, params) {
+        if (!this.capabilities.hover || !this.callbacks.onHover) {
+            this.respond(id, null);
+            return;
+        }
+        const p = params;
+        const hover = await this.callbacks.onHover(p.textDocument.uri, p.position);
+        this.respond(id, hover);
+    }
+    async handleCodeAction(id, params) {
+        if (!this.capabilities.codeActions || !this.callbacks.onCodeAction) {
+            this.respond(id, []);
+            return;
+        }
+        const p = params;
+        const actions = await this.callbacks.onCodeAction(p.textDocument.uri, p.range, p.context.diagnostics);
+        this.respond(id, actions);
+    }
+    async handleDocumentChange(params) {
+        const p = params;
+        const uri = p.textDocument.uri;
+        const content = p.contentChanges?.[0]?.text ?? p.textDocument.text ?? '';
+        await this.callbacks.onDocumentChange?.(uri, content);
+        // If diagnostics are enabled, compute and push them
+        if (this.capabilities.diagnostics && this.callbacks.onDiagnostics && content) {
+            const diagnostics = await this.callbacks.onDiagnostics(uri, content);
+            this.publishDiagnostics(uri, diagnostics);
+        }
+    }
+    // ─── Response Helpers ──────────────────────────────────────────────
+    respond(id, result) {
+        this.writeMessage({ jsonrpc: '2.0', id, result });
+    }
+    respondError(id, code, message) {
+        this.writeMessage({ jsonrpc: '2.0', id, error: { code, message } });
+    }
+    writeMessage(message) {
+        const json = JSON.stringify(message);
+        const contentLength = Buffer.byteLength(json, 'utf-8');
+        const header = `Content-Length: ${contentLength}\r\n\r\n`;
+        this.output.write(header + json);
+    }
+}
+//# sourceMappingURL=lsp-server.js.map

package/dist/transport/lsp-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lsp-server.js","sourceRoot":"","sources":["../../src/transport/lsp-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAoGH,gFAAgF;AAChF,aAAa;AACb,gFAAgF;AAEhF,MAAM,OAAO,SAAS;IACZ,MAAM,CAAqB;IAC3B,SAAS,CAAqB;IAC9B,YAAY,CAA4B;IACxC,KAAK,CAAwB;IAC7B,MAAM,CAAwB;IAC9B,OAAO,GAAG,KAAK,CAAC;IAChB,MAAM,GAAG,EAAE,CAAC;IACZ,aAAa,GAAG,CAAC,CAAC,CAAC;IACnB,WAAW,GAAG,KAAK,CAAC;IAE5B,YACE,MAA0B,EAC1B,SAA6B,EAC7B,KAA6B,EAC7B,MAA8B;QAE9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,YAAY,GAAG;YAClB,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,IAAI,IAAI;YACrD,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,IAAI,IAAI;YACrD,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,KAAK,IAAI,IAAI;YACzC,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,IAAI,KAAK;SACvD,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IACzC,CAAC;IAED,iDAAiD;IACjD,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACxB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,uBAAuB;IACvB,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,+CAA+C;IAC/C,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,6DAA6D;IAC7D,MAAM,CAAC,MAAc,EAAE,MAAgB;QACrC,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,uCAAuC;IACvC,kBAAkB,CAAC,GAAW,EAAE,WAA4B;QAC1D,IAAI,CAAC,MAAM,CAAC,iCAAiC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,sEAAsE;IAE9D,MAAM,CAAC,KAAa;QAC1B,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;QACrB,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAEO,aAAa;QACnB,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;gBAC3B,sBAAsB;gBACtB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAClD,IAAI,SAAS,GAAG,CAAC;oBAAE,OAAO,CAAC,qBAAqB;gBAEhD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBACxD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,wBAAwB;oBACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;oBACnD,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;YACrD,CAAC;YAED,iCAAiC;YACjC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,aAAa;gBAAE,OAAO;YAEzE,sCAAsC;YACtC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACzE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvE,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;YAExB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiC,CAAC;gBACjE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;oBACrC,+CAA+C;gBACjD,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,sEAAsE;IAE9D,KAAK,CAAC,aAAa,CAAC,OAAqC;QAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,MAAM,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAEpD,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,YAAY;gBACf,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAqB,CAAC,CAAC;gBACnD,MAAM;YACR,KAAK,aAAa;gBAChB,8CAA8C;gBAC9C,MAAM;YACR,KAAK,UAAU;gBACb,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC;gBACpC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;oBACrB,IAAI,CAAC,OAAO,CAAC,EAAqB,EAAE,IAAI,CAAC,CAAC;gBAC5C,CAAC;gBACD,MAAM;YACR,KAAK,MAAM;gBACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBACrB,MAAM;YACR,KAAK,yBAAyB;gBAC5B,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAqB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBACnE,MAAM;YACR,KAAK,oBAAoB;gBACvB,MAAM,IAAI,CAAC,WAAW,CAAC,EAAqB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC9D,MAAM;YACR,KAAK,yBAAyB;gBAC5B,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAqB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBACnE,MAAM;YACR,KAAK,sBAAsB,CAAC;YAC5B,KAAK,wBAAwB;gBAC3B,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChD,MAAM;YACR,KAAK,uBAAuB;gBAC1B,QAAQ;gBACR,MAAM;YACR;gBACE,+DAA+D;gBAC/D,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;oBACrB,IAAI,CAAC,YAAY,CAAC,EAAqB,EAAE,CAAC,KAAK,EAAE,qBAAqB,MAAM,EAAE,CAAC,CAAC;gBAClF,CAAC;gBACD,MAAM;QACV,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,EAAmB;QAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,CAAC;QAEnD,MAAM,kBAAkB,GAA4B,EAAE,CAAC;QAEvD,IAAI,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;YAClC,kBAAkB,CAAC,kBAAkB,GAAG;gBACtC,iBAAiB,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;gBAC7B,eAAe,EAAE,KAAK;aACvB,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC5B,kBAAkB,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1C,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;YAClC,iEAAiE;YACjE,yCAAyC;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;YAClC,kBAAkB,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC/C,CAAC;QAED,+EAA+E;QAC/E,kBAAkB,CAAC,gBAAgB,GAAG;YACpC,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,CAAC,EAAE,yBAAyB;SACrC,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE;YACf,YAAY,EAAE,kBAAkB;YAChC,UAAU,EAAE;gBACV,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,YAAY;gBAChC,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,OAAO;aAClC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,EAAmB,EAAE,MAAe;QACjE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;YACnE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,CAAC,GAAG,MAGT,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QAChF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,EAAmB,EAAE,MAAe;QAC5D,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACxD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,CAAC,GAAG,MAGT,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,EAAmB,EAAE,MAAe;QACjE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;YACnE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,CAAC,GAAG,MAIT,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAC/C,CAAC,CAAC,YAAY,CAAC,GAAG,EAClB,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,OAAO,CAAC,WAAW,CACtB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,MAAe;QAChD,MAAM,CAAC,GAAG,MAIT,CAAC;QAEF,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC;QAC/B,MAAM,OAAO,GACX,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAK,CAAC,CAAC,YAA6C,CAAC,IAAI,IAAI,EAAE,CAAC;QAE7F,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAEtD,oDAAoD;QACpD,IAAI,IAAI,CAAC,YAAY,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,IAAI,OAAO,EAAE,CAAC;YAC7E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACrE,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,sEAAsE;IAE9D,OAAO,CAAC,EAAmB,EAAE,MAAe;QAClD,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;IAEO,YAAY,CAAC,EAAmB,EAAE,IAAY,EAAE,OAAe;QACrE,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAEO,YAAY,CAAC,OAAgB;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,mBAAmB,aAAa,UAAU,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/transport/rate-limiter.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Sliding Window Rate Limiter
+ *
+ * Per-key tracking (session ID or IP) with periodic self-cleanup.
+ * Returns Retry-After hint for 429 responses.
+ */
+export interface RateLimitResult {
+    /** Whether the request is allowed */
+    allowed: boolean;
+    /** Remaining requests in current window */
+    remaining: number;
+    /** Milliseconds until the client can retry (0 if allowed) */
+    retryAfterMs: number;
+}
+export declare class RateLimiter {
+    private windows;
+    private maxRequests;
+    private windowMs;
+    private cleanupCounter;
+    private static readonly CLEANUP_INTERVAL;
+    constructor(maxRequests?: number, windowMs?: number);
+    /** Check if a request from the given key is allowed. Records timestamp if allowed. */
+    check(key: string): RateLimitResult;
+    /** Reset rate limit state for a key. */
+    reset(key: string): void;
+    /** Clear all rate limit state. */
+    clear(): void;
+    /** Get current state for a key. */
+    getKeyState(key: string): {
+        requestCount: number;
+        remaining: number;
+    };
+    private cleanup;
+}
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/transport/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../src/transport/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,WAAW,eAAe;IAC9B,qCAAqC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAC;CACtB;AAMD,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAA+B;IAC9C,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAO;gBAEnC,WAAW,SAAM,EAAE,QAAQ,SAAS;IAKhD,sFAAsF;IACtF,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe;IA4BnC,wCAAwC;IACxC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIxB,kCAAkC;IAClC,KAAK,IAAI,IAAI;IAIb,mCAAmC;IACnC,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IAUrE,OAAO,CAAC,OAAO;CAUhB"}

package/dist/transport/rate-limiter.js

@@ -0,0 +1,72 @@
+/**
+ * Sliding Window Rate Limiter
+ *
+ * Per-key tracking (session ID or IP) with periodic self-cleanup.
+ * Returns Retry-After hint for 429 responses.
+ */
+// =============================================================================
+// RATE LIMITER
+// =============================================================================
+export class RateLimiter {
+    windows = new Map();
+    maxRequests;
+    windowMs;
+    cleanupCounter = 0;
+    static CLEANUP_INTERVAL = 100;
+    constructor(maxRequests = 100, windowMs = 60_000) {
+        this.maxRequests = maxRequests;
+        this.windowMs = windowMs;
+    }
+    /** Check if a request from the given key is allowed. Records timestamp if allowed. */
+    check(key) {
+        const now = Date.now();
+        const windowStart = now - this.windowMs;
+        if (++this.cleanupCounter >= RateLimiter.CLEANUP_INTERVAL) {
+            this.cleanupCounter = 0;
+            this.cleanup(windowStart);
+        }
+        let timestamps = this.windows.get(key);
+        if (!timestamps) {
+            timestamps = [];
+            this.windows.set(key, timestamps);
+        }
+        // Remove expired timestamps
+        const filtered = timestamps.filter((t) => t > windowStart);
+        this.windows.set(key, filtered);
+        if (filtered.length >= this.maxRequests) {
+            const retryAfterMs = filtered[0] + this.windowMs - now;
+            return { allowed: false, remaining: 0, retryAfterMs: Math.max(retryAfterMs, 1) };
+        }
+        filtered.push(now);
+        return { allowed: true, remaining: this.maxRequests - filtered.length, retryAfterMs: 0 };
+    }
+    /** Reset rate limit state for a key. */
+    reset(key) {
+        this.windows.delete(key);
+    }
+    /** Clear all rate limit state. */
+    clear() {
+        this.windows.clear();
+    }
+    /** Get current state for a key. */
+    getKeyState(key) {
+        const timestamps = this.windows.get(key);
+        const windowStart = Date.now() - this.windowMs;
+        if (!timestamps)
+            return { requestCount: 0, remaining: this.maxRequests };
+        const active = timestamps.filter((t) => t > windowStart).length;
+        return { requestCount: active, remaining: Math.max(0, this.maxRequests - active) };
+    }
+    cleanup(windowStart) {
+        for (const [key, timestamps] of this.windows) {
+            const filtered = timestamps.filter((t) => t > windowStart);
+            if (filtered.length === 0) {
+                this.windows.delete(key);
+            }
+            else {
+                this.windows.set(key, filtered);
+            }
+        }
+    }
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/transport/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../src/transport/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF,MAAM,OAAO,WAAW;IACd,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IACtC,WAAW,CAAS;IACpB,QAAQ,CAAS;IACjB,cAAc,GAAG,CAAC,CAAC;IACnB,MAAM,CAAU,gBAAgB,GAAG,GAAG,CAAC;IAE/C,YAAY,WAAW,GAAG,GAAG,EAAE,QAAQ,GAAG,MAAM;QAC9C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,GAAW;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC;QAExC,IAAI,EAAE,IAAI,CAAC,cAAc,IAAI,WAAW,CAAC,gBAAgB,EAAE,CAAC;YAC1D,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACpC,CAAC;QAED,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAEhC,IAAI,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACxC,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC;QACnF,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,GAAW;QACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,kCAAkC;IAClC,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,mCAAmC;IACnC,WAAW,CAAC,GAAW;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAE/C,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAEzE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC;QAChE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC;IACrF,CAAC;IAEO,OAAO,CAAC,WAAmB;QACjC,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC;YAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC"}

package/dist/transport/session-manager.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Session Manager — tracks HTTP transport sessions with TTL-based reaping.
+ *
+ * Each connected client gets a session entry. Sessions are reaped
+ * automatically after their TTL expires.
+ */
+export interface Session {
+    id: string;
+    /** Opaque transport reference — the MCP SDK's StreamableHTTPServerTransport */
+    transport: unknown;
+    /** Opaque server reference — the MCP SDK's McpServer */
+    server: unknown;
+    createdAt: number;
+}
+export interface SessionManagerConfig {
+    /** Session TTL in ms. 0 to disable reaping. Default: 3600000 (1 hour). */
+    ttl?: number;
+    /** Reaper check interval in ms. Default: 60000 (1 minute). */
+    reaperInterval?: number;
+    /** Callback when a session is reaped. */
+    onReap?: (session: Session) => void;
+}
+export declare class SessionManager {
+    private sessions;
+    private reaperTimer;
+    private config;
+    constructor(config?: SessionManagerConfig);
+    /** Generate a new session ID. */
+    generateId(): string;
+    /** Register a new session. */
+    add(id: string, transport: unknown, server: unknown): Session;
+    /** Get a session by ID. */
+    get(id: string): Session | undefined;
+    /** Remove a session. */
+    remove(id: string): boolean;
+    /** Number of active sessions. */
+    get size(): number;
+    /** List all session IDs. */
+    listIds(): string[];
+    /** Start the periodic session reaper. */
+    startReaper(): void;
+    /** Stop the reaper. */
+    stopReaper(): void;
+    /** Close all sessions and stop reaper. */
+    close(): void;
+    /** Evict sessions older than TTL. */
+    private reap;
+}
+//# sourceMappingURL=session-manager.d.ts.map

package/dist/transport/session-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.d.ts","sourceRoot":"","sources":["../../src/transport/session-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,+EAA+E;IAC/E,SAAS,EAAE,OAAO,CAAC;IACnB,wDAAwD;IACxD,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;CACrC;AASD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAA8B;IAC9C,OAAO,CAAC,WAAW,CAA6C;IAChE,OAAO,CAAC,MAAM,CAAuB;gBAEzB,MAAM,GAAE,oBAAyB;IAI7C,iCAAiC;IACjC,UAAU,IAAI,MAAM;IAIpB,8BAA8B;IAC9B,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO;IAM7D,2BAA2B;IAC3B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAIpC,wBAAwB;IACxB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAI3B,iCAAiC;IACjC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,4BAA4B;IAC5B,OAAO,IAAI,MAAM,EAAE;IAInB,yCAAyC;IACzC,WAAW,IAAI,IAAI;IAenB,uBAAuB;IACvB,UAAU,IAAI,IAAI;IAOlB,0CAA0C;IAC1C,KAAK,IAAI,IAAI;IAKb,qCAAqC;IACrC,OAAO,CAAC,IAAI;CASb"}

package/dist/transport/session-manager.js

@@ -0,0 +1,83 @@
+/**
+ * Session Manager — tracks HTTP transport sessions with TTL-based reaping.
+ *
+ * Each connected client gets a session entry. Sessions are reaped
+ * automatically after their TTL expires.
+ */
+import { randomUUID } from 'node:crypto';
+// =============================================================================
+// SESSION MANAGER
+// =============================================================================
+const DEFAULT_TTL = 60 * 60 * 1000; // 1 hour
+const DEFAULT_REAPER_INTERVAL = 60 * 1000; // 1 minute
+export class SessionManager {
+    sessions = new Map();
+    reaperTimer;
+    config;
+    constructor(config = {}) {
+        this.config = config;
+    }
+    /** Generate a new session ID. */
+    generateId() {
+        return randomUUID();
+    }
+    /** Register a new session. */
+    add(id, transport, server) {
+        const session = { id, transport, server, createdAt: Date.now() };
+        this.sessions.set(id, session);
+        return session;
+    }
+    /** Get a session by ID. */
+    get(id) {
+        return this.sessions.get(id);
+    }
+    /** Remove a session. */
+    remove(id) {
+        return this.sessions.delete(id);
+    }
+    /** Number of active sessions. */
+    get size() {
+        return this.sessions.size;
+    }
+    /** List all session IDs. */
+    listIds() {
+        return Array.from(this.sessions.keys());
+    }
+    /** Start the periodic session reaper. */
+    startReaper() {
+        const ttl = this.config.ttl ?? DEFAULT_TTL;
+        if (ttl <= 0)
+            return;
+        const interval = this.config.reaperInterval ?? DEFAULT_REAPER_INTERVAL;
+        this.reaperTimer = setInterval(() => {
+            this.reap(ttl);
+        }, interval);
+        // Don't prevent process exit
+        if (this.reaperTimer && typeof this.reaperTimer === 'object' && 'unref' in this.reaperTimer) {
+            this.reaperTimer.unref();
+        }
+    }
+    /** Stop the reaper. */
+    stopReaper() {
+        if (this.reaperTimer) {
+            clearInterval(this.reaperTimer);
+            this.reaperTimer = undefined;
+        }
+    }
+    /** Close all sessions and stop reaper. */
+    close() {
+        this.stopReaper();
+        this.sessions.clear();
+    }
+    /** Evict sessions older than TTL. */
+    reap(ttlMs) {
+        const now = Date.now();
+        for (const [id, session] of this.sessions) {
+            if (now - session.createdAt > ttlMs) {
+                this.sessions.delete(id);
+                this.config.onReap?.(session);
+            }
+        }
+    }
+}
+//# sourceMappingURL=session-manager.js.map

package/dist/transport/session-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.js","sourceRoot":"","sources":["../../src/transport/session-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAwBzC,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,MAAM,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAC7C,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW;AAEtD,MAAM,OAAO,cAAc;IACjB,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,WAAW,CAA6C;IACxD,MAAM,CAAuB;IAErC,YAAY,SAA+B,EAAE;QAC3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,iCAAiC;IACjC,UAAU;QACR,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;IAED,8BAA8B;IAC9B,GAAG,CAAC,EAAU,EAAE,SAAkB,EAAE,MAAe;QACjD,MAAM,OAAO,GAAY,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC1E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,2BAA2B;IAC3B,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,wBAAwB;IACxB,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,iCAAiC;IACjC,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,4BAA4B;IAC5B,OAAO;QACL,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,yCAAyC;IACzC,WAAW;QACT,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC;QAC3C,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO;QAErB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,uBAAuB,CAAC;QACvE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC,EAAE,QAAQ,CAAC,CAAC;QAEb,6BAA6B;QAC7B,IAAI,IAAI,CAAC,WAAW,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3F,IAAI,CAAC,WAA8B,CAAC,KAAK,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,UAAU;QACR,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAChC,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,KAAK;QACH,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,qCAAqC;IAC7B,IAAI,CAAC,KAAa;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,GAAG,KAAK,EAAE,CAAC;gBACpC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}