@tencent-ai/agent-sdk 0.3.229 → 0.3.230-dev.80d16dd.202607272156

package/lib/in-memory-session-store.js

@@ -0,0 +1,127 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InMemorySessionStore = exports.DEFAULT_SESSION_STORE_KEY_BYTES = exports.DEFAULT_SESSION_STORE_EVENT_BYTES = void 0;
+const session_store_protocol_1 = require("./session-store-protocol");
+exports.DEFAULT_SESSION_STORE_EVENT_BYTES = 1024 * 1024;
+exports.DEFAULT_SESSION_STORE_KEY_BYTES = 16 * 1024 * 1024;
+function recordKey(key) {
+    return `${key.projectKey}\u0000${key.sessionId}\u0000${key.subpath ?? ''}`;
+}
+function mainKey(key) {
+    return `${key.projectKey}\u0000${key.sessionId}`;
+}
+class InMemorySessionStore {
+    constructor(options = {}) {
+        this.records = new Map();
+        this.mainTombstones = new Set();
+        this.subTombstones = new Set();
+        this.maxEventBytes = options.maxEventBytes ?? exports.DEFAULT_SESSION_STORE_EVENT_BYTES;
+        this.maxKeyBytes = options.maxKeyBytes ?? exports.DEFAULT_SESSION_STORE_KEY_BYTES;
+        this.now = options.now ?? Date.now;
+    }
+    async append(key, events) {
+        if (events.length === 0) {
+            return;
+        }
+        const normalized = (0, session_store_protocol_1.normalizeSessionStoreEvents)(events);
+        this.assertNotDeleted(key);
+        const id = recordKey(key);
+        const record = this.records.get(id);
+        const additions = [];
+        for (const candidate of normalized) {
+            const digest = record?.digests.get(candidate.event.eventId);
+            if (digest !== undefined && digest !== candidate.payloadDigest) {
+                throw (0, session_store_protocol_1.sessionStoreProtocolError)('EVENT_CONFLICT', `SessionStore eventId ${candidate.event.eventId} conflicts with the stored payload`);
+            }
+            if (digest === undefined) {
+                additions.push(candidate);
+            }
+        }
+        for (const candidate of additions) {
+            if (candidate.bytes > this.maxEventBytes) {
+                throw (0, session_store_protocol_1.sessionStoreProtocolError)('ENTRY_TOO_LARGE', `SessionStore event exceeds ${this.maxEventBytes} bytes`);
+            }
+        }
+        const addedBytes = additions.reduce((sum, candidate) => sum + candidate.bytes, 0);
+        if ((record?.bytes ?? 0) + addedBytes > this.maxKeyBytes) {
+            throw (0, session_store_protocol_1.sessionStoreProtocolError)('SESSION_TOO_LARGE', `SessionStore key exceeds ${this.maxKeyBytes} bytes`);
+        }
+        if (additions.length === 0) {
+            return;
+        }
+        const target = record ?? {
+            events: [],
+            digests: new Map(),
+            bytes: 0,
+            mtime: 0,
+        };
+        for (const candidate of additions) {
+            target.events.push(structuredClone(candidate.event));
+            target.digests.set(candidate.event.eventId, candidate.payloadDigest);
+            target.bytes += candidate.bytes;
+        }
+        if (!key.subpath) {
+            target.mtime = this.now();
+        }
+        this.records.set(id, target);
+    }
+    async load(key) {
+        if (this.isDeleted(key)) {
+            return null;
+        }
+        const record = this.records.get(recordKey(key));
+        return record ? structuredClone(record.events) : null;
+    }
+    async listSessions(projectKey) {
+        const sessions = [];
+        for (const [id, record] of this.records) {
+            const [project, sessionId, subpath] = id.split('\u0000');
+            if (project === projectKey && subpath === '' && !this.mainTombstones.has(`${project}\u0000${sessionId}`)) {
+                sessions.push({ sessionId, mtime: record.mtime });
+            }
+        }
+        return sessions;
+    }
+    async delete(key) {
+        if (key.subpath) {
+            this.subTombstones.add(recordKey(key));
+            this.records.delete(recordKey(key));
+            return;
+        }
+        const root = mainKey(key);
+        this.mainTombstones.add(root);
+        const prefix = `${root}\u0000`;
+        for (const id of [...this.records.keys()]) {
+            if (id.startsWith(prefix)) {
+                this.records.delete(id);
+            }
+        }
+    }
+    async listSubkeys(key) {
+        if (this.mainTombstones.has(mainKey(key))) {
+            return [];
+        }
+        const prefix = `${mainKey(key)}\u0000`;
+        const subkeys = [];
+        for (const id of this.records.keys()) {
+            if (id.startsWith(prefix) && !this.subTombstones.has(id)) {
+                const subpath = id.slice(prefix.length);
+                if (subpath !== '') {
+                    subkeys.push(subpath);
+                }
+            }
+        }
+        return subkeys;
+    }
+    assertNotDeleted(key) {
+        if (this.isDeleted(key)) {
+            throw (0, session_store_protocol_1.sessionStoreProtocolError)('SESSION_DELETED', 'SessionStore key has been deleted');
+        }
+    }
+    isDeleted(key) {
+        return this.mainTombstones.has(mainKey(key))
+            || (!!key.subpath && this.subTombstones.has(recordKey(key)));
+    }
+}
+exports.InMemorySessionStore = InMemorySessionStore;
+//# sourceMappingURL=in-memory-session-store.js.map

package/lib/in-memory-session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-session-store.js","sourceRoot":"","sources":["../src/in-memory-session-store.ts"],"names":[],"mappings":";;;AAAA,qEAIkC;AAGrB,QAAA,iCAAiC,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,QAAA,+BAA+B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAehE,SAAS,SAAS,CAAC,GAAe;IAC9B,OAAO,GAAG,GAAG,CAAC,UAAU,SAAS,GAAG,CAAC,SAAS,SAAS,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,OAAO,CAAC,GAAiD;IAC9D,OAAO,GAAG,GAAG,CAAC,UAAU,SAAS,GAAG,CAAC,SAAS,EAAE,CAAC;AACrD,CAAC;AAED;IAQI,YAAY,OAAO,GAAgC,EAAE;QAPpC,YAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;QAC1C,mBAAc,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,kBAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QAM/C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,QAAA,iCAAiC,CAAC;QAChF,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,QAAA,+BAA+B,CAAC;QAC1E,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAe,EAAE,MAA2B;QACrD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO;QACX,CAAC;QACD,MAAM,UAAU,GAAG,IAAA,oDAA2B,EAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAE3B,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,SAAS,GAAkC,EAAE,CAAC;QACpD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC,aAAa,EAAE,CAAC;gBAC7D,MAAM,IAAA,kDAAyB,EAC3B,gBAAgB,EAChB,wBAAwB,SAAS,CAAC,KAAK,CAAC,OAAO,oCAAoC,CACtF,CAAC;YACN,CAAC;YACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvB,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,CAAC;QACL,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,SAAS,EAAE,CAAC;YAChC,IAAI,SAAS,CAAC,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvC,MAAM,IAAA,kDAAyB,EAC3B,iBAAiB,EACjB,8BAA8B,IAAI,CAAC,aAAa,QAAQ,CAC3D,CAAC;YACN,CAAC;QACL,CAAC;QACD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACvD,MAAM,IAAA,kDAAyB,EAC3B,mBAAmB,EACnB,4BAA4B,IAAI,CAAC,WAAW,QAAQ,CACvD,CAAC;QACN,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;QACX,CAAC;QAED,MAAM,MAAM,GAAiB,MAAM,IAAI;YACnC,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,IAAI,GAAG,EAAkB;YAClC,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,CAAC;SACX,CAAC;QACF,KAAK,MAAM,SAAS,IAAI,SAAS,EAAE,CAAC;YAChC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACrD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;YACrE,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAe;QACtB,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB;QACjC,MAAM,QAAQ,GAAgD,EAAE,CAAC;QACjE,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACtC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACzD,IAAI,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,OAAO,SAAS,SAAS,EAAE,CAAC,EAAE,CAAC;gBACvG,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACtD,CAAC;QACL,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAe;QACxB,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YACpC,OAAO;QACX,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC;QAC/B,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACxC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5B,CAAC;QACL,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,GAA8C;QAC5D,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACxC,OAAO,EAAE,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACnC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACvD,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACxC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;oBACjB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1B,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAEO,gBAAgB,CAAC,GAAe;QACpC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAA,kDAAyB,EAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;QAC5F,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,GAAe;QAC7B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;eACrC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;CACJ"}

package/lib/index.d.ts

@@ -24,9 +24,21 @@ export { createSdkMcpServer, tool } from './mcp';
 export type { SdkMcpServerOptions, SdkMcpServerResult, SdkMcpToolDefinition, AnyZodRawShape, InferShape, ToolHandler, } from './mcp';
 export { HOOK_EVENTS, EXIT_REASONS } from './types';
 export { AbortError, CLIStartupError, ExecutionError } from './errors';
+export { RemoteProtocolError, } from './remote-error-codes';
+export type { RemoteErrorCode } from './remote-error-codes';
 export { installMarketplace, removeMarketplace, installPlugin, enablePlugin, disablePlugin, } from './plugin';
 export type { InstallMarketplaceOptions, RemoveMarketplaceOptions, InstallPluginOptions, SettingsOperationResult, } from './plugin';
-export type { Options, SessionOptions } from './types';
+export { InMemorySessionStore } from './in-memory-session-store';
+export { canonicalizeSessionStoreItem, digestSessionStoreItem, normalizeSessionStoreEvents, sessionStoreProtocolError, SessionStoreProtocolError, toSessionStoreWireItem, } from './session-store-protocol';
+export type { NormalizedSessionStoreEvent, SessionStoreErrorCode } from './session-store-protocol';
+export type { SessionKey, SessionStore, SessionStoreEntry, SessionStoreEvent, SessionStoreCapability, SessionStoreInitializeResult, SessionStoreMirrorNotificationData, MirrorErrorMessage, } from './types';
+export type { Options, RemoteOperationContext, SessionOptions, } from './types';
+export type { FileSystemHandler, FileSystemHandlerOptions, FileSystemModuleName, FileSystemOptions, FsPathInfo, } from './types';
+export type { ChannelHandler, ChannelOptions, ChannelOpenConfig, ChannelEvent } from './types';
+export type { ExecRunHandler, ExecRunHandlerRequest, ExecOptions, ExecPathInfo, ExecRequestContext, ExecRunArgs, ExecRunResult, ExecExitReason, ExecErrorCode, ExecUnsupportedFeature, } from './types';
+export type { LocalExecutionModuleName, LocalExecutionDeny } from './types';
+export { REMOTE_EXTENSION_HOOK_EVENTS } from './types';
+export type { RemoteExtensionScope, RemoteExtensionErrorCode, JsonValue, RemoteResourceMetadata, RemoteHookMetadata, RemoteExtensionComponentMetadata, RemoteSkillMetadata, RemoteCommandMetadata, RemoteAgentMetadata, RemoteOutputStyleMetadata, RemotePluginMetadata, RemoteExtensionMetadata, RemoteExtensionContent, ExtensionResourceContent, RemoteHookEvent, RemoteHookInput, RemoteHookRawResult, RemoteExtensionHandler, RemoteExtensionsOptions, } from './types';
 export type { PermissionMode, PermissionBehavior, PermissionResult, PermissionUpdate, CanUseTool, CanUseToolOptions, } from './types';
 export type { ElicitationHandler, ElicitationCreateRequest, ElicitationCreateResponse, ElicitationCompleteNotification, } from './types';
 export type { HookEvent, HookCallback, HookCallbackMatcher, HookInput, HookJSONOutput, SyncHookJSONOutput, AsyncHookJSONOutput, BaseHookInput, PreToolUseHookInput, PostToolUseHookInput, PostToolUseFailureHookInput, NotificationHookInput, UserPromptSubmitHookInput, SessionStartHookInput, SessionEndHookInput, StopHookInput, SubagentStartHookInput, SubagentStopHookInput, PreCompactHookInput, PermissionRequestHookInput, } from './types';

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAGhC,OAAO,EACH,aAAa,IAAI,yBAAyB,EAC1C,aAAa,IAAI,yBAAyB,EAC1C,MAAM,IAAI,kBAAkB,GAC/B,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,YAAY,IAAI,wBAAwB,EAAE,MAAM,IAAI,kBAAkB,EAAE,MAAM,QAAQ,CAAC;AAChG,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAIlF,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC;AACjD,YAAY,EACR,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACd,UAAU,EACV,WAAW,GACd,MAAM,OAAO,CAAC;AAIf,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAIpD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAIvE,OAAO,EACH,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,aAAa,GAChB,MAAM,UAAU,CAAC;AAElB,YAAY,EACR,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,EACpB,uBAAuB,GAC1B,MAAM,UAAU,CAAC;AAKlB,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAGvD,YAAY,EACR,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,iBAAiB,GACpB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACR,kBAAkB,EAClB,wBAAwB,EACxB,yBAAyB,EACzB,+BAA+B,GAClC,MAAM,SAAS,CAAC;AAGjB,YAAY,EACR,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,SAAS,EACT,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,oBAAoB,EACpB,2BAA2B,EAC3B,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,0BAA0B,GAC7B,MAAM,SAAS,CAAC;AAGjB,YAAY,EACR,OAAO,EACP,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,EACb,sBAAsB,EACtB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,SAAS,EACT,mBAAmB,EACnB,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,0BAA0B,EAC1B,gBAAgB,GACnB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACR,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,oBAAoB,GACvB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACR,YAAY,EACZ,SAAS,EACT,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,gBAAgB,GACnB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACR,mBAAmB,EACnB,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,wBAAwB,GAC3B,MAAM,SAAS,CAAC;AAGjB,YAAY,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGtD,YAAY,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAGpE,YAAY,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAGrD,YAAY,EACR,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,GACrB,MAAM,SAAS,CAAC;AAGjB,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,YAAY,EACR,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,YAAY,EACZ,aAAa,GAChB,MAAM,SAAS,CAAC;AAGjB,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAGhC,OAAO,EACH,aAAa,IAAI,yBAAyB,EAC1C,aAAa,IAAI,yBAAyB,EAC1C,MAAM,IAAI,kBAAkB,GAC/B,MAAM,WAAW,CAAC;AAGnB,OAAO,EAAE,YAAY,IAAI,wBAAwB,EAAE,MAAM,IAAI,kBAAkB,EAAE,MAAM,QAAQ,CAAC;AAChG,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAIlF,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC;AACjD,YAAY,EACR,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,cAAc,EACd,UAAU,EACV,WAAW,GACd,MAAM,OAAO,CAAC;AAIf,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAIpD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EACH,mBAAmB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAI5D,OAAO,EACH,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,aAAa,GAChB,MAAM,UAAU,CAAC;AAElB,YAAY,EACR,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,EACpB,uBAAuB,GAC1B,MAAM,UAAU,CAAC;AAIlB,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACH,4BAA4B,EAC5B,sBAAsB,EACtB,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,sBAAsB,GACzB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACnG,YAAY,EACR,UAAU,EACV,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EACtB,4BAA4B,EAC5B,kCAAkC,EAClC,kBAAkB,GACrB,MAAM,SAAS,CAAC;AAKjB,YAAY,EACR,OAAO,EACP,sBAAsB,EACtB,cAAc,GACjB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACR,iBAAiB,EACjB,wBAAwB,EACxB,oBAAoB,EACpB,iBAAiB,EACjB,UAAU,GACb,MAAM,SAAS,CAAC;AAGjB,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAG/F,YAAY,EACR,cAAc,EAAE,qBAAqB,EAAE,WAAW,EAClD,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,aAAa,EAC5D,cAAc,EAAE,aAAa,EAAE,sBAAsB,GACxD,MAAM,SAAS,CAAC;AAGjB,YAAY,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAG5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC;AACvD,YAAY,EACR,oBAAoB,EACpB,wBAAwB,EACxB,SAAS,EACT,sBAAsB,EACtB,kBAAkB,EAClB,gCAAgC,EAChC,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,GAC1B,MAAM,SAAS,CAAC;AAGjB,YAAY,EACR,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,iBAAiB,GACpB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACR,kBAAkB,EAClB,wBAAwB,EACxB,yBAAyB,EACzB,+BAA+B,GAClC,MAAM,SAAS,CAAC;AAGjB,YAAY,EACR,SAAS,EACT,YAAY,EACZ,mBAAmB,EACnB,SAAS,EACT,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,oBAAoB,EACpB,2BAA2B,EAC3B,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,0BAA0B,GAC7B,MAAM,SAAS,CAAC;AAGjB,YAAY,EACR,OAAO,EACP,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,EACb,sBAAsB,EACtB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,SAAS,EACT,mBAAmB,EACnB,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,0BAA0B,EAC1B,gBAAgB,GACnB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACR,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,oBAAoB,GACvB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACR,YAAY,EACZ,SAAS,EACT,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,gBAAgB,GACnB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACR,mBAAmB,EACnB,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,EAC1B,wBAAwB,GAC3B,MAAM,SAAS,CAAC;AAGjB,YAAY,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGtD,YAAY,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAGpE,YAAY,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAGrD,YAAY,EACR,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,GACrB,MAAM,SAAS,CAAC;AAGjB,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,YAAY,EACR,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,YAAY,EACZ,aAAa,GAChB,MAAM,SAAS,CAAC;AAGjB,YAAY,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC"}

package/lib/index.js

@@ -17,7 +17,7 @@
  * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.disablePlugin = exports.enablePlugin = exports.installPlugin = exports.removeMarketplace = exports.installMarketplace = exports.ExecutionError = exports.CLIStartupError = exports.AbortError = exports.EXIT_REASONS = exports.HOOK_EVENTS = exports.tool = exports.createSdkMcpServer = exports.unstable_v2_logout = exports.unstable_v2_authenticate = exports.unstable_v2_resumeSession = exports.unstable_v2_createSession = exports.Query = exports.query = void 0;
+exports.REMOTE_EXTENSION_HOOK_EVENTS = exports.toSessionStoreWireItem = exports.SessionStoreProtocolError = exports.sessionStoreProtocolError = exports.normalizeSessionStoreEvents = exports.digestSessionStoreItem = exports.canonicalizeSessionStoreItem = exports.InMemorySessionStore = exports.disablePlugin = exports.enablePlugin = exports.installPlugin = exports.removeMarketplace = exports.installMarketplace = exports.RemoteProtocolError = exports.ExecutionError = exports.CLIStartupError = exports.AbortError = exports.EXIT_REASONS = exports.HOOK_EVENTS = exports.tool = exports.createSdkMcpServer = exports.unstable_v2_logout = exports.unstable_v2_authenticate = exports.unstable_v2_resumeSession = exports.unstable_v2_createSession = exports.Query = exports.query = void 0;
 // ============= Main API =============
 var query_1 = require("./query");
 Object.defineProperty(exports, "query", { enumerable: true, get: function () { return query_1.query; } });
@@ -45,6 +45,8 @@ var errors_1 = require("./errors");
 Object.defineProperty(exports, "AbortError", { enumerable: true, get: function () { return errors_1.AbortError; } });
 Object.defineProperty(exports, "CLIStartupError", { enumerable: true, get: function () { return errors_1.CLIStartupError; } });
 Object.defineProperty(exports, "ExecutionError", { enumerable: true, get: function () { return errors_1.ExecutionError; } });
+var remote_error_codes_1 = require("./remote-error-codes");
+Object.defineProperty(exports, "RemoteProtocolError", { enumerable: true, get: function () { return remote_error_codes_1.RemoteProtocolError; } });
 // ============= Plugin API =============
 var plugin_1 = require("./plugin");
 Object.defineProperty(exports, "installMarketplace", { enumerable: true, get: function () { return plugin_1.installMarketplace; } });
@@ -52,4 +54,17 @@ Object.defineProperty(exports, "removeMarketplace", { enumerable: true, get: fun
 Object.defineProperty(exports, "installPlugin", { enumerable: true, get: function () { return plugin_1.installPlugin; } });
 Object.defineProperty(exports, "enablePlugin", { enumerable: true, get: function () { return plugin_1.enablePlugin; } });
 Object.defineProperty(exports, "disablePlugin", { enumerable: true, get: function () { return plugin_1.disablePlugin; } });
+// ============= Session Store =============
+var in_memory_session_store_1 = require("./in-memory-session-store");
+Object.defineProperty(exports, "InMemorySessionStore", { enumerable: true, get: function () { return in_memory_session_store_1.InMemorySessionStore; } });
+var session_store_protocol_1 = require("./session-store-protocol");
+Object.defineProperty(exports, "canonicalizeSessionStoreItem", { enumerable: true, get: function () { return session_store_protocol_1.canonicalizeSessionStoreItem; } });
+Object.defineProperty(exports, "digestSessionStoreItem", { enumerable: true, get: function () { return session_store_protocol_1.digestSessionStoreItem; } });
+Object.defineProperty(exports, "normalizeSessionStoreEvents", { enumerable: true, get: function () { return session_store_protocol_1.normalizeSessionStoreEvents; } });
+Object.defineProperty(exports, "sessionStoreProtocolError", { enumerable: true, get: function () { return session_store_protocol_1.sessionStoreProtocolError; } });
+Object.defineProperty(exports, "SessionStoreProtocolError", { enumerable: true, get: function () { return session_store_protocol_1.SessionStoreProtocolError; } });
+Object.defineProperty(exports, "toSessionStoreWireItem", { enumerable: true, get: function () { return session_store_protocol_1.toSessionStoreWireItem; } });
+// Remote extensions
+var types_2 = require("./types");
+Object.defineProperty(exports, "REMOTE_EXTENSION_HOOK_EVENTS", { enumerable: true, get: function () { return types_2.REMOTE_EXTENSION_HOOK_EVENTS; } });
 //# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;AAEH,uCAAuC;AAEvC,iCAAgC;AAAvB,8FAAA,KAAK,OAAA;AACd,iCAAgC;AAAvB,8FAAA,KAAK,OAAA;AAEd,oBAAoB;AACpB,qCAImB;AAHf,oHAAA,aAAa,OAA6B;AAC1C,oHAAA,aAAa,OAA6B;AAC1C,6GAAA,MAAM,OAAsB;AAGhC,gCAAgC;AAChC,+BAAgG;AAAvF,gHAAA,YAAY,OAA4B;AAAE,0GAAA,MAAM,OAAsB;AAG/E,6CAA6C;AAE7C,6BAAiD;AAAxC,yGAAA,kBAAkB,OAAA;AAAE,2FAAA,IAAI,OAAA;AAUjC,wCAAwC;AAExC,iCAAoD;AAA3C,oGAAA,WAAW,OAAA;AAAE,qGAAA,YAAY,OAAA;AAElC,qCAAqC;AAErC,mCAAuE;AAA9D,oGAAA,UAAU,OAAA;AAAE,yGAAA,eAAe,OAAA;AAAE,wGAAA,cAAc,OAAA;AAEpD,yCAAyC;AAEzC,mCAMkB;AALd,4GAAA,kBAAkB,OAAA;AAClB,2GAAA,iBAAiB,OAAA;AACjB,uGAAA,aAAa,OAAA;AACb,sGAAA,YAAY,OAAA;AACZ,uGAAA,aAAa,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;AAEH,uCAAuC;AAEvC,iCAAgC;AAAvB,8FAAA,KAAK,OAAA;AACd,iCAAgC;AAAvB,8FAAA,KAAK,OAAA;AAEd,oBAAoB;AACpB,qCAImB;AAHf,oHAAA,aAAa,OAA6B;AAC1C,oHAAA,aAAa,OAA6B;AAC1C,6GAAA,MAAM,OAAsB;AAGhC,gCAAgC;AAChC,+BAAgG;AAAvF,gHAAA,YAAY,OAA4B;AAAE,0GAAA,MAAM,OAAsB;AAG/E,6CAA6C;AAE7C,6BAAiD;AAAxC,yGAAA,kBAAkB,OAAA;AAAE,2FAAA,IAAI,OAAA;AAUjC,wCAAwC;AAExC,iCAAoD;AAA3C,oGAAA,WAAW,OAAA;AAAE,qGAAA,YAAY,OAAA;AAElC,qCAAqC;AAErC,mCAAuE;AAA9D,oGAAA,UAAU,OAAA;AAAE,yGAAA,eAAe,OAAA;AAAE,wGAAA,cAAc,OAAA;AACpD,2DAE8B;AAD1B,yHAAA,mBAAmB,OAAA;AAIvB,yCAAyC;AAEzC,mCAMkB;AALd,4GAAA,kBAAkB,OAAA;AAClB,2GAAA,iBAAiB,OAAA;AACjB,uGAAA,aAAa,OAAA;AACb,sGAAA,YAAY,OAAA;AACZ,uGAAA,aAAa,OAAA;AAUjB,4CAA4C;AAE5C,qEAAiE;AAAxD,+HAAA,oBAAoB,OAAA;AAC7B,mEAOkC;AAN9B,sIAAA,4BAA4B,OAAA;AAC5B,gIAAA,sBAAsB,OAAA;AACtB,qIAAA,2BAA2B,OAAA;AAC3B,mIAAA,yBAAyB,OAAA;AACzB,mIAAA,yBAAyB,OAAA;AACzB,gIAAA,sBAAsB,OAAA;AA6C1B,oBAAoB;AACpB,iCAAuD;AAA9C,qHAAA,4BAA4B,OAAA"}

package/lib/mcp/delegated-redaction.d.ts

@@ -0,0 +1,47 @@
+/**
+ * 委托响应策略化脱敏
+ *
+ * 宿主在把 tools/list response 与 tools/call result 传回 CLI 之前，必须先做脱敏。
+ * 这里提供两类能力：
+ * 1. redactDelegatedResponse：对 result 值做递归字段名脱敏 + URL 凭证脱敏；
+ * 2. screenToolListForSecretParams：对 tools/list 的 schema 做 fail-closed 筛查，
+ *    只拒绝含凭证形参的整个 tool，绝不改写 schema 结构。
+ */
+import type { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
+export type ConnectorRedactionHook = (message: JSONRPCMessage) => JSONRPCMessage;
+export interface DelegatedRedactionOptions {
+    connectorHooks?: ConnectorRedactionHook[];
+}
+export interface ToolListScreenResult {
+    message: JSONRPCMessage;
+    rejected: Array<{
+        tool: string;
+        param: string;
+    }>;
+}
+export declare function sanitizeDelegatedErrorData(value: unknown): Record<string, unknown> | undefined;
+/**
+ * 对委托响应的 result / error 做策略化脱敏。
+ *
+ * result 递归脱敏；error 仅保留数值 code 和安全分类字段，不透传不可信文本。
+ * notification 原样返回。不修改入参，返回新对象。schema 结构不在这里处理，见
+ * screenToolListForSecretParams。
+ */
+export declare function redactDelegatedResponse(message: JSONRPCMessage, options?: DelegatedRedactionOptions): JSONRPCMessage;
+/**
+ * 对 tools/list response 做 schema fail-closed 筛查。
+ *
+ * 递归遍历每个 tool 的 inputSchema / outputSchema（含嵌套 properties / items / oneOf /
+ * anyOf / allOf / prefixItems），若任一层出现凭证形参名，或某个 property 的 default 是
+ * token 形态字符串，则整个 tool 被拒绝（从 tools 数组移除）并记入 rejected 供审计。绝不
+ * 打码字段、绝不删 schema node —— 只做整 tool 拒绝。非 tools/list 结构原样返回。
+ */
+export declare function screenToolListForSecretParams(message: JSONRPCMessage): ToolListScreenResult;
+/**
+ * 组合脱敏：先做 schema fail-close 筛查（移除含凭证形参的 tool），再对筛查后的 message
+ * 做值级脱敏。顺序不可换 —— 先剔除 secret-schema tool，再脱敏残留值。
+ * 非 tools/list 的 message 在筛查阶段是透传，因此对所有响应都安全。
+ * rejected 一并返回供调用方审计，本函数自身不抛异常。
+ */
+export declare function redactAndScreenDelegatedResponse(message: JSONRPCMessage, options?: DelegatedRedactionOptions): ToolListScreenResult;
+//# sourceMappingURL=delegated-redaction.d.ts.map

package/lib/mcp/delegated-redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegated-redaction.d.ts","sourceRoot":"","sources":["../../src/mcp/delegated-redaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAuEzE,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,cAAc,KAAK,cAAc,CAAC;AAEjF,MAAM,WAAW,yBAAyB;IACtC,cAAc,CAAC,EAAE,sBAAsB,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,oBAAoB;IACjC,OAAO,EAAE,cAAc,CAAC;IACxB,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpD;AAuGD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CA6B9F;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACnC,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE,yBAAyB,GACpC,cAAc,CAkChB;AA4ED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,cAAc,GAAG,oBAAoB,CAgC3F;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAC5C,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE,yBAAyB,GACpC,oBAAoB,CAGtB"}

package/lib/mcp/delegated-redaction.js

@@ -0,0 +1,362 @@
+"use strict";
+/**
+ * 委托响应策略化脱敏
+ *
+ * 宿主在把 tools/list response 与 tools/call result 传回 CLI 之前，必须先做脱敏。
+ * 这里提供两类能力：
+ * 1. redactDelegatedResponse：对 result 值做递归字段名脱敏 + URL 凭证脱敏；
+ * 2. screenToolListForSecretParams：对 tools/list 的 schema 做 fail-closed 筛查，
+ *    只拒绝含凭证形参的整个 tool，绝不改写 schema 结构。
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeDelegatedErrorData = sanitizeDelegatedErrorData;
+exports.redactDelegatedResponse = redactDelegatedResponse;
+exports.screenToolListForSecretParams = screenToolListForSecretParams;
+exports.redactAndScreenDelegatedResponse = redactAndScreenDelegatedResponse;
+// 脱敏后的占位串
+const MASK = '[REDACTED]';
+// 需要脱敏的字段名清单，已按归一化形式（小写 + 去 _ / -）存放。
+// 归一化后 camelCase / snake_case / kebab-case / SCREAMING_SNAKE 变体都会命中同一项。
+const SECRET_KEYS_NORMALIZED = new Set([
+    'authorization',
+    'cookie',
+    'setcookie',
+    'wwwauthenticate',
+    'token',
+    'accesstoken',
+    'refreshtoken',
+    'clientsecret',
+    'apikey',
+    'privatekey',
+    'secret',
+    'password',
+    'passwd',
+    'pwd',
+]);
+// schema 中视为凭证形参的名字，同样以归一化形式存放。
+const SECRET_PARAM_NAMES_NORMALIZED = new Set([
+    'password',
+    'token',
+    'secret',
+    'apikey',
+    'clientsecret',
+    'privatekey',
+    'refreshtoken',
+]);
+// 凭证字段名词根（子串匹配）：用于命中 sessionToken / authToken / userPassword / githubToken /
+// xApiKey / bearerToken 等复合名，弥补精确集只能命中完整名的漏洞。
+// 不含裸 key，避免误伤 publicKey / keyName / keyboard；apikey / accesskey / privatekey 覆盖 key 场景。
+// 注意：子串匹配是安全 denylist，方向是宁可多脱敏也不漏（如 tokenizer 含 token 会被脱敏），
+// 这是可接受的 false-positive，不做白名单例外。
+const SECRET_KEY_STEMS = [
+    'token',
+    'secret',
+    'password',
+    'passwd',
+    'apikey',
+    'authorization',
+    'cookie',
+    'credential',
+    'privatekey',
+    'accesskey',
+];
+// 递归深度上限：防止恶意 / 异常的深嵌套上游输入导致栈溢出。
+const MAX_REDACT_DEPTH = 64;
+const SAFE_ERROR_CODES = new Set([
+    'MCP_NOT_ALLOWED',
+    'MCP_AUTH_REQUIRED',
+    'MCP_AUTH_FAILED',
+    'MCP_UPSTREAM_UNAVAILABLE',
+    'MCP_TIMEOUT',
+    'MCP_CANCELLED',
+    'MCP_MESSAGE_ERROR',
+]);
+const SAFE_REQUIRED_ACTIONS = new Set(['authorize']);
+// URL query 中需要移除的凭证参数名（小写比较）。
+const SECRET_QUERY_PARAMS = new Set(['token', 'access_token', 'api_key', 'code', 'state', 'session']);
+// 归一化 key：小写并去掉下划线 / 短横线，使各种命名风格收敛到同一形式。
+function normalizeKey(key) {
+    return key.toLowerCase().replace(/[_-]/g, '');
+}
+// 归一化后的 key 是否命中任一词根（子串匹配）。
+function matchesSecretStem(normalized) {
+    return SECRET_KEY_STEMS.some(stem => normalized.includes(stem));
+}
+// 两级判定：归一化 key 属于精确敏感集，或包含任一词根。
+function isSecretFieldName(key) {
+    const normalized = normalizeKey(key);
+    return SECRET_KEYS_NORMALIZED.has(normalized) || matchesSecretStem(normalized);
+}
+// 两级判定：归一化 param 名属于精确凭证形参集，或包含任一词根。
+function isSecretParamName(param) {
+    const normalized = normalizeKey(param);
+    return SECRET_PARAM_NAMES_NORMALIZED.has(normalized) || matchesSecretStem(normalized);
+}
+// 判断字符串是否为带 scheme 的 URL（形如 xxx://...），避免把 c:\path、a:b 之类误判为 URL。
+function looksLikeUrl(value) {
+    return /^[a-zA-Z][a-zA-Z0-9+.-]*:\/\//.test(value);
+}
+// 对 URL 字符串剥离 user:pass@ 并移除凭证 query 参数，保留 scheme + host + path。
+function redactUrlString(value) {
+    if (!looksLikeUrl(value)) {
+        return value;
+    }
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return value;
+    }
+    url.username = '';
+    url.password = '';
+    for (const name of [...url.searchParams.keys()]) {
+        if (SECRET_QUERY_PARAMS.has(name.toLowerCase())) {
+            url.searchParams.delete(name);
+        }
+    }
+    return url.toString();
+}
+// 递归脱敏：命中敏感字段名直接替换为 MASK，其余对象/数组继续深入，字符串走 URL 脱敏。
+// depth 达到上限时屏蔽整棵剩余子树，避免深嵌套输入绕过检查。
+//
+// 判定 value 是否为 JSON Schema 节点：必须同时有 `type`（字符串）与 `properties` / `items` /
+// `oneOf` / `anyOf` / `allOf` / `prefixItems` 之一。仅 `type` 不够（MCP `content[].type='text'`
+// 不是 schema），仅 `properties` 也不够（业务对象可能用 `properties` 作普通字段名）。
+function isSchemaLike(value) {
+    if (!value || typeof value !== 'object') {
+        return false;
+    }
+    const v = value;
+    const hasType = typeof v.type === 'string';
+    const hasStruct = 'properties' in v || 'items' in v
+        || 'oneOf' in v || 'anyOf' in v || 'allOf' in v || 'prefixItems' in v;
+    return hasType && hasStruct;
+}
+function redactValue(value, depth = 0) {
+    if (depth >= MAX_REDACT_DEPTH) {
+        return MASK;
+    }
+    if (typeof value === 'string') {
+        return redactUrlString(value);
+    }
+    if (Array.isArray(value)) {
+        return value.map(item => redactValue(item, depth + 1));
+    }
+    if (value && typeof value === 'object') {
+        const source = value;
+        const schemaMode = isSchemaLike(source);
+        const out = {};
+        for (const [key, child] of Object.entries(source)) {
+            if (schemaMode && key === 'properties' && child && typeof child === 'object') {
+                // schema 形参名键不脱敏：形参名由 screenToolListForSecretParams fail-closed 把关，
+                // 这里若再脱敏会把 schema 节点改坏成 [REDACTED]（设计明令禁止改写 schema 结构）。
+                // 仅递归处理每个 param 的 def（含 default 兜底等）。
+                const props = child;
+                const safeProps = {};
+                for (const [param, def] of Object.entries(props)) {
+                    safeProps[param] = redactValue(def, depth + 1);
+                }
+                out[key] = safeProps;
+            }
+            else if (!schemaMode && isSecretFieldName(key)) {
+                out[key] = MASK;
+            }
+            else {
+                out[key] = redactValue(child, depth + 1);
+            }
+        }
+        return out;
+    }
+    return value;
+}
+function sanitizeDelegatedErrorData(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        return undefined;
+    }
+    const source = value;
+    const safe = {};
+    if (typeof source.code === 'string' && SAFE_ERROR_CODES.has(source.code)) {
+        safe.code = source.code;
+    }
+    if (typeof source.serverName === 'string'
+        && /^[A-Za-z0-9_-]{1,63}$/.test(source.serverName)
+        && !looksLikeToken(source.serverName)) {
+        safe.serverName = source.serverName;
+    }
+    if (typeof source.capabilityId === 'string'
+        && source.capabilityId.length <= 256
+        && /^[A-Za-z0-9][A-Za-z0-9._:/-]*$/.test(source.capabilityId)
+        && !looksLikeToken(source.capabilityId)) {
+        safe.capabilityId = source.capabilityId;
+    }
+    if (Array.isArray(source.requiredActions)) {
+        const requiredActions = source.requiredActions.filter((action) => typeof action === 'string' && SAFE_REQUIRED_ACTIONS.has(action));
+        if (requiredActions.length > 0) {
+            safe.requiredActions = requiredActions;
+        }
+    }
+    return Object.keys(safe).length > 0 ? safe : undefined;
+}
+/**
+ * 对委托响应的 result / error 做策略化脱敏。
+ *
+ * result 递归脱敏；error 仅保留数值 code 和安全分类字段，不透传不可信文本。
+ * notification 原样返回。不修改入参，返回新对象。schema 结构不在这里处理，见
+ * screenToolListForSecretParams。
+ */
+function redactDelegatedResponse(message, options) {
+    if (!message || typeof message !== 'object') {
+        return message;
+    }
+    let cloned;
+    if ('result' in message) {
+        cloned = {
+            ...message,
+            result: redactValue(message.result),
+        };
+    }
+    else if ('error' in message) {
+        const sourceError = message.error;
+        const error = sourceError && typeof sourceError === 'object'
+            ? sourceError
+            : {};
+        const data = sanitizeDelegatedErrorData(error.data);
+        cloned = {
+            ...message,
+            error: {
+                code: typeof error.code === 'number' ? error.code : -32603,
+                message: 'Delegated MCP request failed',
+                ...(data ? { data } : {}),
+            },
+        };
+    }
+    else {
+        return message;
+    }
+    let result = cloned;
+    for (const hook of options?.connectorHooks ?? []) {
+        result = hook(result);
+    }
+    return result;
+}
+// 判断 default 值是否像凭证 token：常见前缀，或较长且仅由 token 字符集组成。
+function looksLikeToken(value) {
+    if (typeof value !== 'string') {
+        return false;
+    }
+    if (/^(gh[pousr]_|sk-|xox[baprs]-|Bearer\s+)/i.test(value)) {
+        return true;
+    }
+    return value.length >= 20 && /^[A-Za-z0-9._+/=-]+$/.test(value);
+}
+// 检查 schema 的 properties，递归下探嵌套形参：
+// - 顶层 properties 的每个 param 名直接判 secret；
+// - 形参 def 自身若也是 schema（含 properties/items/oneOf/anyOf/allOf/prefixItems），
+//   继续递归，捕获 `config.apiKey` 这类嵌套 secret 形参；
+// - default 值若是 token 形态字符串，同样视为 secret 形参（兜底）。
+// 深度上限避免恶意 / 异常深嵌套 schema 栈溢出。
+const MAX_SCHEMA_DEPTH = 32;
+function findSecretParam(schema, depth = 0) {
+    if (!schema || typeof schema !== 'object' || depth >= MAX_SCHEMA_DEPTH) {
+        return undefined;
+    }
+    const node = schema;
+    const properties = node.properties;
+    if (properties && typeof properties === 'object') {
+        for (const [param, def] of Object.entries(properties)) {
+            if (isSecretParamName(param)) {
+                return param;
+            }
+            if (def && typeof def === 'object') {
+                const defNode = def;
+                if (looksLikeToken(defNode.default)) {
+                    return param;
+                }
+                // 嵌套 schema：递归查 sub-properties / items / oneOf / anyOf / allOf / prefixItems
+                const nested = findSecretParam(defNode, depth + 1);
+                if (nested) {
+                    return nested;
+                }
+            }
+        }
+    }
+    // 复合 schema 关键字：每个分支都是子 schema，递归判定
+    for (const key of ['items', 'prefixItems']) {
+        const child = node[key];
+        if (Array.isArray(child)) {
+            for (const item of child) {
+                const hit = findSecretParam(item, depth + 1);
+                if (hit) {
+                    return hit;
+                }
+            }
+        }
+        else if (child && typeof child === 'object') {
+            const hit = findSecretParam(child, depth + 1);
+            if (hit) {
+                return hit;
+            }
+        }
+    }
+    for (const key of ['oneOf', 'anyOf', 'allOf']) {
+        const child = node[key];
+        if (Array.isArray(child)) {
+            for (const item of child) {
+                const hit = findSecretParam(item, depth + 1);
+                if (hit) {
+                    return hit;
+                }
+            }
+        }
+    }
+    return undefined;
+}
+/**
+ * 对 tools/list response 做 schema fail-closed 筛查。
+ *
+ * 递归遍历每个 tool 的 inputSchema / outputSchema（含嵌套 properties / items / oneOf /
+ * anyOf / allOf / prefixItems），若任一层出现凭证形参名，或某个 property 的 default 是
+ * token 形态字符串，则整个 tool 被拒绝（从 tools 数组移除）并记入 rejected 供审计。绝不
+ * 打码字段、绝不删 schema node —— 只做整 tool 拒绝。非 tools/list 结构原样返回。
+ */
+function screenToolListForSecretParams(message) {
+    const rejected = [];
+    const result = message.result;
+    const tools = result?.tools;
+    if (!Array.isArray(tools)) {
+        return { message, rejected };
+    }
+    const kept = [];
+    for (const tool of tools) {
+        const name = tool?.name;
+        const toolName = typeof name === 'string' ? name : '';
+        const offending = findSecretParam(tool?.inputSchema) ??
+            findSecretParam(tool?.outputSchema);
+        if (offending) {
+            rejected.push({ tool: toolName, param: offending });
+        }
+        else {
+            kept.push(tool);
+        }
+    }
+    if (rejected.length === 0) {
+        return { message, rejected };
+    }
+    const screened = {
+        ...message,
+        result: { ...result, tools: kept },
+    };
+    return { message: screened, rejected };
+}
+/**
+ * 组合脱敏：先做 schema fail-close 筛查（移除含凭证形参的 tool），再对筛查后的 message
+ * 做值级脱敏。顺序不可换 —— 先剔除 secret-schema tool，再脱敏残留值。
+ * 非 tools/list 的 message 在筛查阶段是透传，因此对所有响应都安全。
+ * rejected 一并返回供调用方审计，本函数自身不抛异常。
+ */
+function redactAndScreenDelegatedResponse(message, options) {
+    const { message: screened, rejected } = screenToolListForSecretParams(message);
+    return { message: redactDelegatedResponse(screened, options), rejected };
+}
+//# sourceMappingURL=delegated-redaction.js.map