@tickernelz/paperclip-pro-server 2026.928.4 → 2026.928.5

package/node_modules/@agentclientprotocol/sdk/dist/server-sse.js

@@ -1,11 +1,24 @@
-import { serializeSseEvent, serializeSseKeepAlive } from "./sse.js";
+import { serializeSseJson, serializeSseKeepAlive } from "./sse.js";
+/**
+ * Streams the JSON text of each message a lease yields as an SSE event. The
+ * body takes a message only when its reader asks for one, so messages its
+ * client has not read stay queued, and counted, in their connection.
+ */
 export function createSseBody(lease) {
-    return new ReadableStream(createSseBodySource(lease));
+    return new ReadableStream(createSseBodySource(lease), {
+        highWaterMark: 0,
+    });
 }
 /** @internal */
 export function createSseBodySource(lease) {
     const encoder = new TextEncoder();
     let keepAliveTimer;
+    /**
+     * Whether the reader has asked for a chunk it has not been given. With no
+     * high-water mark, a reader that is not waiting may still be writing the
+     * last chunk out to a client that stopped reading.
+     */
+    let isReaderWaiting = false;
     let isReceiving = false;
     let isClosed = false;
     const clearKeepAlive = () => {
@@ -15,6 +28,9 @@ export function createSseBodySource(lease) {
         }
     };
     const enqueueText = (controller, text) => {
+        // The reader takes this chunk at once; pull() runs again when it asks for
+        // another.
+        isReaderWaiting = false;
         try {
             controller.enqueue(encoder.encode(text));
             return true;
@@ -23,7 +39,6 @@ export function createSseBodySource(lease) {
             return false;
         }
     };
-    const hasDemand = (controller) => controller.desiredSize !== null && controller.desiredSize > 0;
     const closeBody = (controller) => {
         if (isClosed) {
             return;
@@ -38,23 +53,34 @@ export function createSseBodySource(lease) {
             // Stream may already be cancelled by the consumer.
         }
     };
-    return {
-        start(controller) {
-            keepAliveTimer = setInterval(() => {
-                if (isClosed || !hasDemand(controller)) {
-                    return;
-                }
-                if (!enqueueText(controller, serializeSseKeepAlive())) {
-                    closeBody(controller);
-                }
-            }, 15_000);
-        },
-        async pull(controller) {
-            if (isClosed || isReceiving || !hasDemand(controller)) {
-                return;
-            }
-            isReceiving = true;
-            try {
+    const errorBody = (controller, error) => {
+        if (isClosed) {
+            return;
+        }
+        isClosed = true;
+        clearKeepAlive();
+        lease.release();
+        controller.error(error);
+    };
+    /**
+     * Once the stream stops, the body can only end. A waiting reader has taken
+     * every chunk, so the pending receive() ends the body, cleanly or with the
+     * error. Any other reader may be stuck on a chunk its client will never
+     * take, so abort the body rather than leave its response open.
+     */
+    const endIfStopped = (controller) => {
+        if (lease.stopped.aborted && !isReaderWaiting) {
+            errorBody(controller, lease.stopped.reason);
+        }
+    };
+    /** Hands the reader messages for as long as it waits for them. */
+    const deliver = async (controller) => {
+        if (isReceiving) {
+            return;
+        }
+        isReceiving = true;
+        try {
+            while (isReaderWaiting && !isClosed) {
                 const result = await lease.receive();
                 if (isClosed) {
                     return;
@@ -63,20 +89,42 @@ export function createSseBodySource(lease) {
                     closeBody(controller);
                     return;
                 }
-                if (!enqueueText(controller, serializeSseEvent(result.value))) {
+                if (!enqueueText(controller, serializeSseJson(result.value))) {
                     closeBody(controller);
+                    return;
                 }
+                // The stream may have stopped while this message was on its way.
+                endIfStopped(controller);
             }
-            catch (error) {
-                if (!isClosed) {
-                    isClosed = true;
-                    clearKeepAlive();
-                    controller.error(error);
+        }
+        catch (error) {
+            errorBody(controller, error);
+        }
+        finally {
+            isReceiving = false;
+        }
+    };
+    return {
+        start(controller) {
+            lease.stopped.addEventListener("abort", () => {
+                endIfStopped(controller);
+            }, { once: true });
+            keepAliveTimer = setInterval(() => {
+                // Only a waiting reader needs a keep-alive.
+                if (isClosed || !isReaderWaiting) {
+                    return;
                 }
-            }
-            finally {
-                isReceiving = false;
-            }
+                if (!enqueueText(controller, serializeSseKeepAlive())) {
+                    closeBody(controller);
+                }
+            }, 15_000);
+        },
+        // With no high-water mark, this runs only when the reader asks for a
+        // chunk. It returns at once, so the stream calls it again whenever the
+        // reader asks while a receive() is still pending.
+        pull(controller) {
+            isReaderWaiting = true;
+            void deliver(controller);
         },
         cancel() {
             isClosed = true;

package/node_modules/@agentclientprotocol/sdk/dist/server-sse.js.map

@@ -1 +1 @@
-{"version":3,"file":"server-sse.js","sourceRoot":"","sources":["../src/server-sse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAIpE,MAAM,UAAU,aAAa,CAC3B,KAAoB;IAEpB,OAAO,IAAI,cAAc,CAAa,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,gBAAgB;AAChB,MAAM,UAAU,mBAAmB,CACjC,KAAoB;IAEpB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,cAA0D,CAAC;IAC/D,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,cAAc,GAAG,GAAS,EAAE;QAChC,IAAI,cAAc,EAAE,CAAC;YACnB,aAAa,CAAC,cAAc,CAAC,CAAC;YAC9B,cAAc,GAAG,SAAS,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAClB,UAAuD,EACvD,IAAY,EACH,EAAE;QACX,IAAI,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,CAChB,UAAuD,EAC9C,EAAE,CAAC,UAAU,CAAC,WAAW,KAAK,IAAI,IAAI,UAAU,CAAC,WAAW,GAAG,CAAC,CAAC;IAE5E,MAAM,SAAS,GAAG,CAChB,UAAuD,EACjD,EAAE;QACR,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,QAAQ,GAAG,IAAI,CAAC;QAChB,cAAc,EAAE,CAAC;QACjB,KAAK,CAAC,OAAO,EAAE,CAAC;QAEhB,IAAI,CAAC;YACH,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,UAAU;YACd,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;gBAChC,IAAI,QAAQ,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;oBACvC,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,qBAAqB,EAAE,CAAC,EAAE,CAAC;oBACtD,SAAS,CAAC,UAAU,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC,EAAE,MAAM,CAAC,CAAC;QACb,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,UAAU;YACnB,IAAI,QAAQ,IAAI,WAAW,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtD,OAAO;YACT,CAAC;YAED,WAAW,GAAG,IAAI,CAAC;YAEnB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;gBAErC,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBAED,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBAChB,SAAS,CAAC,UAAU,CAAC,CAAC;oBACtB,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC9D,SAAS,CAAC,UAAU,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,QAAQ,GAAG,IAAI,CAAC;oBAChB,cAAc,EAAE,CAAC;oBACjB,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,WAAW,GAAG,KAAK,CAAC;YACtB,CAAC;QACH,CAAC;QACD,MAAM;YACJ,QAAQ,GAAG,IAAI,CAAC;YAChB,cAAc,EAAE,CAAC;YACjB,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"server-sse.js","sourceRoot":"","sources":["../src/server-sse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAInE;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,KAA4B;IAE5B,OAAO,IAAI,cAAc,CAAa,mBAAmB,CAAC,KAAK,CAAC,EAAE;QAChE,aAAa,EAAE,CAAC;KACjB,CAAC,CAAC;AACL,CAAC;AAED,gBAAgB;AAChB,MAAM,UAAU,mBAAmB,CACjC,KAA4B;IAE5B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,cAA0D,CAAC;IAC/D;;;;OAIG;IACH,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,cAAc,GAAG,GAAS,EAAE;QAChC,IAAI,cAAc,EAAE,CAAC;YACnB,aAAa,CAAC,cAAc,CAAC,CAAC;YAC9B,cAAc,GAAG,SAAS,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAClB,UAAuD,EACvD,IAAY,EACH,EAAE;QACX,0EAA0E;QAC1E,WAAW;QACX,eAAe,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,CAChB,UAAuD,EACjD,EAAE;QACR,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,QAAQ,GAAG,IAAI,CAAC;QAChB,cAAc,EAAE,CAAC;QACjB,KAAK,CAAC,OAAO,EAAE,CAAC;QAEhB,IAAI,CAAC;YACH,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,CAChB,UAAuD,EACvD,KAAc,EACR,EAAE;QACR,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,QAAQ,GAAG,IAAI,CAAC;QAChB,cAAc,EAAE,CAAC;QACjB,KAAK,CAAC,OAAO,EAAE,CAAC;QAChB,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC;IAEF;;;;;OAKG;IACH,MAAM,YAAY,GAAG,CACnB,UAAuD,EACjD,EAAE;QACR,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9C,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC;IAEF,kEAAkE;IAClE,MAAM,OAAO,GAAG,KAAK,EACnB,UAAuD,EACxC,EAAE;QACjB,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QAED,WAAW,GAAG,IAAI,CAAC;QAEnB,IAAI,CAAC;YACH,OAAO,eAAe,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;gBAErC,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBAED,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBAChB,SAAS,CAAC,UAAU,CAAC,CAAC;oBACtB,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC7D,SAAS,CAAC,UAAU,CAAC,CAAC;oBACtB,OAAO;gBACT,CAAC;gBAED,iEAAiE;gBACjE,YAAY,CAAC,UAAU,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,UAAU;YACd,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAC5B,OAAO,EACP,GAAG,EAAE;gBACH,YAAY,CAAC,UAAU,CAAC,CAAC;YAC3B,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;YAEF,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;gBAChC,4CAA4C;gBAC5C,IAAI,QAAQ,IAAI,CAAC,eAAe,EAAE,CAAC;oBACjC,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,qBAAqB,EAAE,CAAC,EAAE,CAAC;oBACtD,SAAS,CAAC,UAAU,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC,EAAE,MAAM,CAAC,CAAC;QACb,CAAC;QACD,qEAAqE;QACrE,uEAAuE;QACvE,kDAAkD;QAClD,IAAI,CAAC,UAAU;YACb,eAAe,GAAG,IAAI,CAAC;YACvB,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM;YACJ,QAAQ,GAAG,IAAI,CAAC;YAChB,cAAc,EAAE,CAAC;YACjB,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@agentclientprotocol/sdk/dist/server-sse.test.js

@@ -1,7 +1,7 @@
-import { describe, expect, it } from "vitest";
+import { describe, expect, it, vi } from "vitest";
 import { OutboundMailbox } from "./connection.js";
-import { createSseBodySource } from "./server-sse.js";
-import { serializeSseEvent } from "./sse.js";
+import { createSseBody, createSseBodySource } from "./server-sse.js";
+import { serializeSseEvent, serializeSseKeepAlive } from "./sse.js";
 const message = {
     jsonrpc: "2.0",
     id: 1,
@@ -35,14 +35,67 @@ describe("createSseBodySource", () => {
                 }
             },
         };
-        const pull = Promise.resolve(source.pull?.(controller));
+        await source.pull?.(controller);
         await flushMicrotasks();
         desiredSize = 0;
-        mailbox.push(message);
-        await pull;
+        mailbox.push(JSON.stringify(message));
+        await new Promise((resolve) => setTimeout(resolve, 0));
         expect(enqueued.map(decodeText)).toEqual([serializeSseEvent(message)]);
     });
 });
+describe("createSseBody", () => {
+    it("leaves messages queued until its reader asks for one", async () => {
+        const mailbox = new OutboundMailbox();
+        const lease = mailbox.tryAcquire();
+        if (!lease) {
+            throw new Error("Expected outbound mailbox lease");
+        }
+        const reader = createSseBody(lease).getReader();
+        mailbox.push(JSON.stringify(message));
+        await flushMicrotasks();
+        expect(mailbox.hasQueuedMessages).toBe(true);
+        const { value } = await reader.read();
+        expect(value && decodeText(value)).toBe(serializeSseEvent(message));
+        expect(mailbox.hasQueuedMessages).toBe(false);
+        await reader.cancel();
+    });
+    it("ends cleanly when its stream shuts down while the reader waits", async () => {
+        const mailbox = new OutboundMailbox();
+        const lease = mailbox.tryAcquire();
+        if (!lease) {
+            throw new Error("Expected outbound mailbox lease");
+        }
+        const reader = createSseBody(lease).getReader();
+        const read = reader.read();
+        await flushMicrotasks();
+        mailbox.abort();
+        await expect(read).resolves.toEqual({ done: true, value: undefined });
+    });
+    it("sends keep-alives only while its reader waits, and aborts once stopped otherwise", async () => {
+        vi.useFakeTimers();
+        try {
+            const mailbox = new OutboundMailbox();
+            const lease = mailbox.tryAcquire();
+            if (!lease) {
+                throw new Error("Expected outbound mailbox lease");
+            }
+            const reader = createSseBody(lease).getReader();
+            // The reader takes a keep-alive, then stops asking, as if stuck writing
+            // it to a client that stopped reading.
+            const read = reader.read();
+            await vi.advanceTimersByTimeAsync(15_000);
+            const { value } = await read;
+            expect(value && decodeText(value)).toBe(serializeSseKeepAlive());
+            await vi.advanceTimersByTimeAsync(60_000);
+            // Even a clean shutdown aborts the body, and no keep-alives piled up.
+            mailbox.abort();
+            await expect(reader.read()).rejects.toThrow("ACP connection is closed");
+        }
+        finally {
+            vi.useRealTimers();
+        }
+    });
+});
 async function flushMicrotasks() {
     await Promise.resolve();
     await Promise.resolve();

package/node_modules/@agentclientprotocol/sdk/dist/server-sse.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"server-sse.test.js","sourceRoot":"","sources":["../src/server-sse.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAI7C,MAAM,OAAO,GAAG;IACd,OAAO,EAAE,KAAK;IACd,EAAE,EAAE,CAAC;IACL,MAAM,EAAE;QACN,EAAE,EAAE,IAAI;KACT;CACmB,CAAC;AAEvB,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,OAAO,GAAG,IAAI,eAAe,EAAc,CAAC;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAiB,EAAE,CAAC;QAClC,IAAI,WAAW,GAAkB,CAAC,CAAC;QACnC,MAAM,UAAU,GAAG;YACjB,IAAI,WAAW;gBACb,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,OAAO,CAAC,KAAiB;gBACvB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YACD,KAAK;gBACH,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,KAAK,CAAC,KAAe;gBACnB,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;SAC6C,CAAC;QAEjD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QACxD,MAAM,eAAe,EAAE,CAAC;QACxB,WAAW,GAAG,CAAC,CAAC;QAEhB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,IAAI,CAAC;QAEX,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,eAAe;IAC5B,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IACxB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC"}
+{"version":3,"file":"server-sse.test.js","sourceRoot":"","sources":["../src/server-sse.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAIpE,MAAM,OAAO,GAAG;IACd,OAAO,EAAE,KAAK;IACd,EAAE,EAAE,CAAC;IACL,MAAM,EAAE;QACN,EAAE,EAAE,IAAI;KACT;CACmB,CAAC;AAEvB,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,OAAO,GAAG,IAAI,eAAe,EAAU,CAAC;QAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAiB,EAAE,CAAC;QAClC,IAAI,WAAW,GAAkB,CAAC,CAAC;QACnC,MAAM,UAAU,GAAG;YACjB,IAAI,WAAW;gBACb,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,OAAO,CAAC,KAAiB;gBACvB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YACD,KAAK;gBACH,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,KAAK,CAAC,KAAe;gBACnB,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;SAC6C,CAAC;QAEjD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC;QAChC,MAAM,eAAe,EAAE,CAAC;QACxB,WAAW,GAAG,CAAC,CAAC;QAEhB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACtC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAEvD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,OAAO,GAAG,IAAI,eAAe,EAAU,CAAC;QAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;QAEhD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACtC,MAAM,eAAe,EAAE,CAAC;QACxB,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE7C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,OAAO,GAAG,IAAI,eAAe,EAAU,CAAC;QAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,eAAe,EAAE,CAAC;QAExB,OAAO,CAAC,KAAK,EAAE,CAAC;QAEhB,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,EAAE,CAAC,aAAa,EAAE,CAAC;QAEnB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,eAAe,EAAU,CAAC;YAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,CAAC;YAEhD,wEAAwE;YACxE,uCAAuC;YACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3B,MAAM,EAAE,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC;YAC7B,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAC;YACjE,MAAM,EAAE,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;YAE1C,sEAAsE;YACtE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC1E,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,aAAa,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,eAAe;IAC5B,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IACxB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC"}

package/node_modules/@agentclientprotocol/sdk/dist/server-websocket-upgrade.test.js

@@ -5,6 +5,7 @@ import { Connection as JsonRpcConnection, batchNotification, batchRequest, } fro
 import { HEADER_CONNECTION_ID, JSON_MIME_TYPE } from "./protocol.js";
 import { AcpServer } from "./server.js";
 import { createTestAgentApp, TestAgent } from "./test-support/test-agent.js";
+import { until } from "./test-support/until.js";
 import { handleWebSocketConnection } from "./ws-server.js";
 const initializeRequest = {
     jsonrpc: "2.0",
@@ -592,6 +593,305 @@ describe("AcpServer prepared WebSocket upgrades", () => {
             await registry.closeAll();
         }
     });
+    it("closes the socket for session IDs and request IDs longer than maxIdLength", async () => {
+        const warn = vi.spyOn(console, "warn").mockImplementation(() => undefined);
+        const registry = new ConnectionRegistry({ maxIdLength: 8 });
+        const agent = createTestAgentApp();
+        const tooLong = "s".repeat(9);
+        const frames = [
+            {
+                jsonrpc: "2.0",
+                method: "session/cancel",
+                params: { sessionId: tooLong },
+            },
+            { ...sessionNewRequest, id: tooLong },
+        ];
+        try {
+            for (const [index, frame] of frames.entries()) {
+                const socket = new FakeServerSocket();
+                const session = handleWebSocketConnection(socket, { registry, agent });
+                socket.receive(JSON.stringify(initializeRequest));
+                await readSentMessage(socket);
+                socket.receive(JSON.stringify(frame));
+                await session.closed;
+                expect(socket.closeCode).toBe(1008);
+                expect(socket.closeReason).toBe(`${index === 0 ? "Session" : "Request"} ID exceeds maxIdLength (8)`);
+            }
+        }
+        finally {
+            warn.mockRestore();
+            await registry.closeAll();
+        }
+    });
+    it("holds back client requests while the socket holds maxBufferedBytes", async () => {
+        const registry = new ConnectionRegistry({ maxBufferedBytes: 1024 });
+        const agent = createTestAgentApp();
+        const socket = new FakeServerSocket();
+        handleWebSocketConnection(socket, { registry, agent });
+        try {
+            socket.receive(JSON.stringify(initializeRequest));
+            await readSentMessage(socket);
+            // The client has not read what the socket holds, so the request waits.
+            socket.bufferedAmount = 1024;
+            const reads = socket.bufferedAmountReads;
+            socket.receive(JSON.stringify(sessionNewRequest));
+            await until(() => socket.bufferedAmountReads > reads);
+            await delay(20);
+            expect(socket.sent).toEqual([]);
+            socket.bufferedAmount = 0;
+            await expect(readSentMessage(socket)).resolves.toMatchObject({
+                id: sessionNewRequest.id,
+                result: { sessionId: expect.any(String) },
+            });
+            expect(socket.closeCount).toBe(0);
+        }
+        finally {
+            socket.close();
+            await registry.closeAll();
+        }
+    });
+    it("holds back batches the agent answers while the socket holds maxBufferedBytes", async () => {
+        const registry = new ConnectionRegistry({ maxBufferedBytes: 4096 });
+        const agent = createProtocolAgent(2);
+        const socket = new FakeServerSocket();
+        handleWebSocketConnection(socket, { registry, agent });
+        try {
+            socket.receive(JSON.stringify(v2InitializeRequest));
+            await readSentMessage(socket);
+            // Each of these gets an error reply, and none is a request.
+            socket.bufferedAmount = 4096;
+            const reads = socket.bufferedAmountReads;
+            socket.receive(JSON.stringify([]));
+            socket.receive(JSON.stringify([
+                { id: 1, padding: "p" },
+                { jsonrpc: "2.0", method: "_vendor/acme/notification" },
+            ]));
+            await until(() => socket.bufferedAmountReads > reads);
+            await delay(20);
+            expect(socket.sent).toEqual([]);
+            socket.bufferedAmount = 0;
+            await expect(readSentWireMessage(socket)).resolves.toMatchObject({
+                error: { code: -32600 },
+            });
+            await expect(readSentWireMessage(socket)).resolves.toMatchObject([
+                { error: { code: -32600 } },
+            ]);
+        }
+        finally {
+            socket.close();
+            await registry.closeAll();
+        }
+    });
+    it("paces agent output to what the socket has sent", async () => {
+        const registry = new ConnectionRegistry({ maxBufferedBytes: 4096 });
+        const sent = [];
+        const agent = createAgentApp({ name: "burst-agent" })
+            .onRequest(methods.agent.initialize, () => ({
+            protocolVersion: PROTOCOL_VERSION,
+            agentCapabilities: {},
+        }))
+            .onRequest(methods.agent.session.prompt, async (c) => {
+            for (let index = 0; index < 50; index++) {
+                await c.client.notify(methods.client.session.update, {
+                    sessionId: c.params.sessionId,
+                    update: {
+                        sessionUpdate: "agent_message_chunk",
+                        content: { type: "text", text: "x".repeat(1000) },
+                    },
+                });
+                sent.push(index);
+            }
+            return { stopReason: "end_turn" };
+        });
+        const socket = new FakeServerSocket();
+        handleWebSocketConnection(socket, { registry, agent });
+        try {
+            socket.receive(JSON.stringify(initializeRequest));
+            await readSentMessage(socket);
+            // The client stops reading, so everything sent stays in the socket.
+            socket.holdsSentData = true;
+            socket.receive(JSON.stringify({
+                jsonrpc: "2.0",
+                id: 5,
+                method: "session/prompt",
+                params: {
+                    sessionId: "session-1",
+                    prompt: [{ type: "text", text: "go" }],
+                },
+            }));
+            await until(() => socket.bufferedAmount >= 4096);
+            await delay(20);
+            expect(sent.length).toBeGreaterThan(0);
+            expect(sent.length).toBeLessThan(10);
+            expect(socket.sent.length).toBeLessThan(10);
+            // Once the client reads, the agent finishes.
+            socket.holdsSentData = false;
+            socket.bufferedAmount = 0;
+            await until(() => socket.sent.some((data) => JSON.parse(data).id === 5), 2_000);
+            expect(sent).toHaveLength(50);
+            expect(socket.closeCount).toBe(0);
+        }
+        finally {
+            socket.close();
+            await registry.closeAll();
+        }
+    });
+    it("closes the socket when its client reads none of its output for maxOutputStallMs", async () => {
+        const warn = vi.spyOn(console, "warn").mockImplementation(() => undefined);
+        const registry = new ConnectionRegistry({
+            maxBufferedBytes: 1024,
+            maxOutputStallMs: 50,
+        });
+        // A reply larger than the socket may hold, after which the agent has
+        // nothing more to send.
+        const agent = createTestAgentApp({
+            newSession: () => ({
+                sessionId: "session-1",
+                _meta: { padding: "p".repeat(2000) },
+            }),
+        });
+        const socket = new FakeServerSocket();
+        const session = handleWebSocketConnection(socket, { registry, agent });
+        try {
+            socket.receive(JSON.stringify(initializeRequest));
+            await readSentMessage(socket);
+            socket.holdsSentData = true;
+            socket.receive(JSON.stringify(sessionNewRequest));
+            await session.closed;
+            expect(socket.sent).toHaveLength(1);
+            expect(socket.closeCode).toBe(1008);
+            expect(socket.closeReason).toBe("Connection output stalled for maxOutputStallMs (50)");
+        }
+        finally {
+            warn.mockRestore();
+            await registry.closeAll();
+        }
+    });
+    it("closes a full socket once its connection shuts down", async () => {
+        const warn = vi.spyOn(console, "warn").mockImplementation(() => undefined);
+        const registry = new ConnectionRegistry({
+            maxBufferedBytes: 1024,
+            maxIdLength: 8,
+        });
+        let agentWriter;
+        const agent = {
+            connect(stream) {
+                void (async () => {
+                    const reader = stream.readable.getReader();
+                    const { value } = await reader.read();
+                    agentWriter = stream.writable.getWriter();
+                    await agentWriter.write({
+                        jsonrpc: "2.0",
+                        id: value.id,
+                        result: {
+                            protocolVersion: PROTOCOL_VERSION,
+                            agentCapabilities: {},
+                        },
+                    });
+                })();
+            },
+        };
+        const socket = new FakeServerSocket();
+        const session = handleWebSocketConnection(socket, { registry, agent });
+        try {
+            socket.receive(JSON.stringify(initializeRequest));
+            await readSentMessage(socket);
+            if (!agentWriter) {
+                throw new Error("Expected the agent to have answered initialize");
+            }
+            // The client stops reading, so this fills the socket.
+            socket.holdsSentData = true;
+            void agentWriter.write({
+                jsonrpc: "2.0",
+                method: "_vendor/acme/notification",
+                params: { padding: "p".repeat(2000) },
+            });
+            await readSentMessage(socket);
+            // A session ID the connection refuses shuts it down, which closes the
+            // socket without waiting for the client to read.
+            void agentWriter.write({
+                jsonrpc: "2.0",
+                method: "_vendor/acme/notification",
+                params: { sessionId: "s".repeat(9) },
+            });
+            await session.closed;
+            expect(socket.closeCode).toBe(1008);
+            expect(socket.closeReason).toBe("Session ID exceeds maxIdLength (8)");
+        }
+        finally {
+            warn.mockRestore();
+            await registry.closeAll();
+        }
+    });
+    it("closes the socket when the client sends more than maxBufferedBytes while earlier messages wait", async () => {
+        const warn = vi.spyOn(console, "warn").mockImplementation(() => undefined);
+        const initialize = createDeferred();
+        const registry = new ConnectionRegistry({ maxBufferedBytes: 4096 });
+        const agent = createTestAgentApp({ initialize: () => initialize.promise });
+        const connection = registry.createPendingConnection(agent);
+        const socket = new FakeServerSocket();
+        const session = handleWebSocketConnection(socket, {
+            registry,
+            agent,
+            connection,
+        });
+        const padding = JSON.stringify({
+            jsonrpc: "2.0",
+            method: "_vendor/acme/padding",
+            params: { padding: "p".repeat(1500) },
+        });
+        try {
+            // Frames wait behind the initialize request until the agent answers.
+            socket.receive(JSON.stringify(initializeRequest));
+            await delay(0);
+            socket.receive(padding);
+            expect(socket.closeCount).toBe(0);
+            socket.receive(padding);
+            await session.closed;
+            expect(socket.closeCode).toBe(1008);
+            expect(socket.closeReason).toBe("Connection exceeds maxBufferedBytes (4096)");
+            expect(warn).toHaveBeenCalledWith(`Closing ACP connection ${connection.connectionId}:`, "Connection exceeds maxBufferedBytes (4096)");
+        }
+        finally {
+            initialize.resolve({
+                protocolVersion: PROTOCOL_VERSION,
+                agentCapabilities: {},
+            });
+            warn.mockRestore();
+            await registry.closeAll();
+        }
+    });
+    it("counts empty frames waiting to be handled toward maxBufferedBytes", async () => {
+        const warn = vi.spyOn(console, "warn").mockImplementation(() => undefined);
+        const initialize = createDeferred();
+        const registry = new ConnectionRegistry({ maxBufferedBytes: 4096 });
+        const agent = createTestAgentApp({ initialize: () => initialize.promise });
+        const socket = new FakeServerSocket();
+        const session = handleWebSocketConnection(socket, { registry, agent });
+        try {
+            // Frames wait behind the initialize request until the agent answers.
+            // Each also holds more than its text, which counts 1 KiB, so four fit.
+            socket.receive(JSON.stringify(initializeRequest));
+            await delay(0);
+            let frames = 0;
+            while (socket.closeCount === 0 && frames < 100) {
+                socket.receive("");
+                frames += 1;
+            }
+            expect(frames).toBe(5);
+            await session.closed;
+            expect(socket.closeCode).toBe(1008);
+            expect(socket.closeReason).toBe("Connection exceeds maxBufferedBytes (4096)");
+        }
+        finally {
+            initialize.resolve({
+                protocolVersion: PROTOCOL_VERSION,
+                agentCapabilities: {},
+            });
+            warn.mockRestore();
+            await registry.closeAll();
+        }
+    });
     it("forwards post-initialize batches and sends one response-array frame", async () => {
         const registry = new ConnectionRegistry();
         const agent = createProtocolAgent(2);
@@ -674,7 +974,7 @@ describe("AcpServer prepared WebSocket upgrades", () => {
             ]));
             await loadStarted.promise;
             expect(connection.pendingRoutes.get("number:30")).toBe("connection");
-            expect(connection.sessionStreams.has(sessionId)).toBe(true);
+            expect(connection.sessionStreams.has(sessionId)).toBe(false);
             finishLoad.resolve();
             const response = await readSentWireMessage(socket);
             expect(response).toMatchObject([{ jsonrpc: "2.0", id: 30 }]);
@@ -777,7 +1077,7 @@ describe("AcpServer prepared WebSocket upgrades", () => {
                 [`number:${firstRequest.id}`, { session: sessionId }],
                 [`number:${secondRequest.id}`, "connection"],
             ]));
-            expect(connection.sessionStreams.has(sessionId)).toBe(true);
+            expect(connection.sessionStreams.has(sessionId)).toBe(false);
             socket.receive(JSON.stringify([
                 {
                     jsonrpc: "2.0",
@@ -935,6 +1235,9 @@ function createDeferred() {
     });
     return { promise, resolve, reject };
 }
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
 function readSentMessage(socket) {
     return readSentWireMessage(socket).then((message) => {
         if (Array.isArray(message)) {
@@ -959,11 +1262,26 @@ class FakeServerSocket {
     sent = [];
     listeners = new Map();
     onSend;
+    /** Whether sent data stays in `bufferedAmount`, as if the peer stopped reading. */
+    holdsSentData = false;
+    /** How many times `bufferedAmount` was read, such as by a session waiting on it. */
+    bufferedAmountReads = 0;
     closeCount = 0;
     closeCode;
     closeReason;
+    unsentBytes = 0;
+    get bufferedAmount() {
+        this.bufferedAmountReads += 1;
+        return this.unsentBytes;
+    }
+    set bufferedAmount(value) {
+        this.unsentBytes = value;
+    }
     send(data) {
         this.sent.push(data);
+        if (this.holdsSentData) {
+            this.unsentBytes += data.length;
+        }
         this.onSend?.(data);
         this.onSend = undefined;
     }