@trusty-squire/mcp 1.1.13-rc.8 → 1.1.13

package/dist/server-instance-registry.js

@@ -0,0 +1,392 @@
+// Self-clean stale prior `mcp server` instances at startup.
+//
+// A host agent relaunches `mcp server` on every reconnect but does not
+// reliably terminate the instance it superseded. A live box carried a
+// superseded claude-code server sitting beside its replacement, plus two
+// codex-identity servers orphaned to init for ~31 hours — each keeping a
+// browser/reaper child tree resident. The owner-process reaper next door
+// only reaps a dead owner's CHILDREN; nothing reaped a wedged owner itself.
+// This registry does.
+//
+// The gate is deliberately narrow, because one shared box legitimately runs
+// many concurrent servers — including several of the SAME agent identity,
+// one per project/lane. So there is no name-based or blanket kill anywhere
+// here. A prior instance is a candidate only when all of these hold:
+//   * its recorded agent identity EXACTLY matches ours (and ours is set),
+//   * it is not us, and its birth identity still names a live process,
+//   * and it is either orphaned — its spawning host is gone, i.e. PPid
+//     collapsed to init when the instance did not start that way — past a
+//     short grace, or quiet past the very bound it should have self-exited
+//     on (server.ts's idle backstop, mirrored here).
+// A non-orphan is therefore only reaped after it already failed its own
+// exit policy, and an instance still serving a client is never a candidate.
+import { chmodSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+import { randomUUID } from "node:crypto";
+import { sweepOrphanedOwnerProcesses } from "./bot/owner-process-reaper.js";
+import { processBirthIdentity, processBirthIdentityState, } from "./bot/profile.js";
+import { VERSION } from "./version.js";
+// Idle self-exit bounds. transport.onclose / stdin EOF / SIGTERM already exit
+// the process on a well-behaved disconnect; these bound the case a live box
+// surfaced instead — a host that spawns a *new* server on reconnect without
+// ever closing the old child's stdio or signaling it. They live here rather
+// than in server.ts because the startup reaper enforces the same policy from
+// the outside for an instance that failed to enforce it on itself.
+const DEFAULT_IDLE_TIMEOUT_MS = 20 * 60 * 1_000; // 20m, no open session
+const DEFAULT_IDLE_TIMEOUT_WITH_SESSION_MS = 12 * 60 * 60 * 1_000; // 12h, session open
+const DEFAULT_IDLE_CHECK_INTERVAL_MS = 5 * 60 * 1_000; // 5m — must stay well under the 20m bound
+// An orphan's stdio peer is gone, so a well-behaved instance exits within
+// milliseconds. Still alive and quiet this long past that means wedged.
+const DEFAULT_ORPHAN_GRACE_MS = 60 * 1_000;
+const DEFAULT_HEARTBEAT_INTERVAL_MS = 30 * 1_000;
+const DEFAULT_REAP_GRACE_MS = 2_000;
+function envMs(name, fallback) {
+    const raw = process.env[name];
+    if (raw === undefined)
+        return fallback;
+    const parsed = Number(raw);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
+}
+export function idleTimeoutMs() {
+    return envMs("TRUSTY_SQUIRE_SERVER_IDLE_TIMEOUT_MS", DEFAULT_IDLE_TIMEOUT_MS);
+}
+export function idleTimeoutWithSessionMs() {
+    return envMs("TRUSTY_SQUIRE_SERVER_IDLE_TIMEOUT_WITH_SESSION_MS", DEFAULT_IDLE_TIMEOUT_WITH_SESSION_MS);
+}
+export function idleCheckIntervalMs() {
+    return envMs("TRUSTY_SQUIRE_SERVER_IDLE_CHECK_INTERVAL_MS", DEFAULT_IDLE_CHECK_INTERVAL_MS);
+}
+export function heartbeatIntervalMs() {
+    return envMs("TRUSTY_SQUIRE_SERVER_HEARTBEAT_INTERVAL_MS", DEFAULT_HEARTBEAT_INTERVAL_MS);
+}
+export function serverReapBounds() {
+    return {
+        orphanGraceMs: envMs("TRUSTY_SQUIRE_SERVER_REAP_ORPHAN_GRACE_MS", DEFAULT_ORPHAN_GRACE_MS),
+        idleMs: idleTimeoutMs(),
+        idleWithSessionMs: idleTimeoutWithSessionMs(),
+        idleSlackMs: idleCheckIntervalMs(),
+        graceMs: envMs("TRUSTY_SQUIRE_SERVER_REAP_GRACE_MS", DEFAULT_REAP_GRACE_MS),
+    };
+}
+function serverInstanceRootDir() {
+    const configured = (process.env.TRUSTY_SQUIRE_SERVER_INSTANCE_DIR ?? "").trim();
+    return configured.length > 0
+        ? resolve(configured)
+        : join(homedir(), ".trusty-squire", "server-instances");
+}
+function agentIdentity() {
+    return (process.env.TRUSTY_SQUIRE_AGENT_IDENTITY ?? "").trim();
+}
+function ensurePrivateDir(path) {
+    mkdirSync(path, { recursive: true, mode: 0o700 });
+    chmodSync(path, 0o700);
+}
+function isServerInstanceRecord(value) {
+    if (value === null || typeof value !== "object")
+        return false;
+    const record = value;
+    const numbers = [
+        record.pid,
+        record.parent_pid,
+        record.started_at,
+        record.heartbeat_at,
+        record.last_activity_at,
+        record.active_sessions,
+        record.in_flight_calls,
+    ];
+    return (record.version === 1 &&
+        typeof record.agent_identity === "string" &&
+        typeof record.start_time === "string" &&
+        typeof record.server_version === "string" &&
+        numbers.every((entry) => Number.isSafeInteger(entry)) &&
+        (record.pid ?? 0) > 0);
+}
+export function readServerInstanceRecord(path) {
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf8"));
+        return isServerInstanceRecord(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+function writeServerInstanceRecord(path, record) {
+    const temporary = `${path}.tmp-${randomUUID()}`;
+    try {
+        writeFileSync(temporary, `${JSON.stringify(record)}\n`, { mode: 0o600, flag: "wx" });
+        renameSync(temporary, path);
+    }
+    finally {
+        rmSync(temporary, { force: true });
+    }
+}
+/** PPid is field 4 of /proc/<pid>/stat — index 1 after the comm close-paren. */
+function linuxParentPid(pid) {
+    try {
+        const stat = readFileSync(`/proc/${pid}/stat`, "utf8");
+        const closeParen = stat.lastIndexOf(")");
+        if (closeParen < 0)
+            return "unknown";
+        const parent = Number(stat
+            .slice(closeParen + 2)
+            .trim()
+            .split(/\s+/)[1]);
+        return Number.isSafeInteger(parent) && parent >= 0 ? parent : "unknown";
+    }
+    catch (error) {
+        const code = error.code;
+        return code === "ENOENT" || code === "ESRCH" ? "stale" : "unknown";
+    }
+}
+function linuxProcessIds() {
+    try {
+        return readdirSync("/proc")
+            .filter((entry) => /^\d+$/.test(entry))
+            .map(Number);
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Descendants by PPid chain — never by process group. A stdio server shares
+ * its parent's process group, so `kill(-pgid)` would take the host agent
+ * down with it.
+ */
+export function processDescendantIdentities(pid, readers = {}) {
+    const readProcessIds = readers.readProcessIds ?? linuxProcessIds;
+    const readParentPid = readers.readParentPid ?? linuxParentPid;
+    const readBirthIdentity = readers.readBirthIdentity ?? processBirthIdentity;
+    const children = new Map();
+    for (const candidate of readProcessIds()) {
+        if (candidate === pid)
+            continue;
+        const parent = readParentPid(candidate);
+        if (typeof parent !== "number")
+            continue;
+        const siblings = children.get(parent);
+        if (siblings === undefined)
+            children.set(parent, [candidate]);
+        else
+            siblings.push(candidate);
+    }
+    const seen = new Set([pid]);
+    const descendants = [];
+    const queue = [pid];
+    while (queue.length > 0) {
+        for (const child of children.get(queue.shift()) ?? []) {
+            if (seen.has(child))
+                continue;
+            seen.add(child);
+            queue.push(child);
+            const identity = readBirthIdentity(child);
+            if (identity !== null)
+                descendants.push(identity);
+        }
+    }
+    return descendants;
+}
+/**
+ * The whole safety contract, as one pure function. `forget` means the record
+ * names no live process — delete the file, signal nothing.
+ */
+export function serverInstanceReapDecision(record, self, liveness, parentPid, now, bounds) {
+    if (record.pid === self.pid)
+        return "keep";
+    // A record naming a process that is already gone is file GC, not a kill —
+    // safe for any identity, and the only thing that keeps the directory from
+    // growing for an identity that never launches again.
+    if (liveness === "stale" || parentPid === "stale")
+        return "forget";
+    // Guard rail: identity is the outer fence on SIGNALLING. An unset identity
+    // matches nothing, so a host that never set one is never a target.
+    if (self.agent_identity.length === 0)
+        return "keep";
+    if (record.agent_identity !== self.agent_identity)
+        return "keep";
+    // A pid we cannot read is a pid we do not kill.
+    if (liveness === "unknown" || parentPid === "unknown")
+        return "keep";
+    const quietMs = now - record.last_activity_at;
+    // Its spawning host is gone, so no client can still be attached over the
+    // stdio pipe it was handed. A host that was ALREADY init at registration
+    // (container PID 1) never reads as orphaned.
+    const orphaned = record.parent_pid !== 1 && parentPid === 1;
+    if (orphaned)
+        return quietMs >= bounds.orphanGraceMs ? "reap" : "keep";
+    // Not orphaned: mirror the instance's own idle bound, so we only ever reap
+    // one that already blew past the deadline it should have exited on itself.
+    // The slack is that bound's poll interval — an instance whose own idle timer
+    // is working exits on its next poll, so anything still here past bound +
+    // interval demonstrably failed to.
+    const busy = record.active_sessions > 0 || record.in_flight_calls > 0;
+    const threshold = (busy ? bounds.idleWithSessionMs : bounds.idleMs) + bounds.idleSlackMs;
+    return quietMs >= threshold ? "reap" : "keep";
+}
+/**
+ * Publish this instance's heartbeat so a later launch of the same identity can
+ * tell "still serving a client" from "wedged". Returns null when there is
+ * nothing to publish (non-Linux, no agent identity, unreadable birth identity).
+ */
+export function registerServerInstance(options = {}) {
+    if (process.platform !== "linux")
+        return null;
+    const identity = options.identity ?? agentIdentity();
+    if (identity.length === 0)
+        return null;
+    const birth = processBirthIdentity(process.pid);
+    if (birth === null)
+        return null;
+    const parent = linuxParentPid(process.pid);
+    const now = options.now ?? Date.now;
+    const rootDir = resolve(options.rootDir ?? serverInstanceRootDir());
+    const startedAt = now();
+    let record = {
+        version: 1,
+        agent_identity: identity,
+        pid: birth.pid,
+        start_time: birth.start_time,
+        parent_pid: typeof parent === "number" ? parent : 0,
+        started_at: startedAt,
+        heartbeat_at: startedAt,
+        last_activity_at: startedAt,
+        active_sessions: 0,
+        in_flight_calls: 0,
+        server_version: VERSION,
+    };
+    const path = join(rootDir, `${birth.pid}-${randomUUID()}.json`);
+    try {
+        ensurePrivateDir(rootDir);
+        writeServerInstanceRecord(path, record);
+    }
+    catch {
+        return null;
+    }
+    let released = false;
+    return {
+        path,
+        heartbeat: (activity) => {
+            if (released)
+                return;
+            record = {
+                ...record,
+                heartbeat_at: now(),
+                last_activity_at: activity.lastActivityAt,
+                active_sessions: activity.activeSessions,
+                in_flight_calls: activity.inFlightCalls,
+            };
+            try {
+                writeServerInstanceRecord(path, record);
+            }
+            catch {
+                // A heartbeat that cannot be written only costs this instance its
+                // protection from a later launch; it must never break serving.
+            }
+        },
+        release: () => {
+            released = true;
+            rmSync(path, { force: true });
+        },
+    };
+}
+async function terminateServerInstanceTree(record, bounds, runtime) {
+    const readBirthState = runtime.readBirthState ?? processBirthIdentityState;
+    const readDescendants = runtime.readDescendants ?? ((pid) => processDescendantIdentities(pid));
+    const kill = runtime.kill ?? ((pid, signal) => process.kill(pid, signal));
+    const wait = runtime.wait ??
+        (async (ms) => await new Promise((done) => setTimeout(done, ms).unref()));
+    // Snapshot the tree BEFORE signalling: once the owner dies its children are
+    // re-parented to init and the PPid chain that identifies them is gone. Each
+    // entry carries a birth identity so a pid recycled during the grace window
+    // is not escalated to SIGKILL by mistake.
+    const tree = [
+        { pid: record.pid, start_time: record.start_time },
+        ...readDescendants(record.pid).filter((entry) => entry.pid !== process.pid),
+    ];
+    const signalled = [];
+    const signal = (signalName) => {
+        const alive = [];
+        for (const identity of tree) {
+            if (readBirthState(identity) !== "matching")
+                continue;
+            alive.push(identity);
+            try {
+                kill(identity.pid, signalName);
+                if (!signalled.includes(identity.pid))
+                    signalled.push(identity.pid);
+            }
+            catch { }
+        }
+        return alive;
+    };
+    signal("SIGTERM");
+    await wait(bounds.graceMs);
+    if (signal("SIGKILL").length > 0)
+        await wait(bounds.graceMs);
+    return signalled;
+}
+/**
+ * Reap stale prior instances of OUR agent identity. Never throws: a startup
+ * housekeeping pass must not be able to stop the server from serving.
+ */
+export async function reapStaleServerInstances(runtime = {}) {
+    const summary = { reaped: 0, forgotten: 0, kept: 0, signalled: [] };
+    if (process.platform !== "linux" && runtime.self === undefined)
+        return summary;
+    const birth = processBirthIdentity(process.pid);
+    const self = runtime.self ?? {
+        agent_identity: agentIdentity(),
+        pid: process.pid,
+        start_time: birth?.start_time ?? "unknown",
+    };
+    if (self.agent_identity.length === 0)
+        return summary;
+    const rootDir = resolve(runtime.rootDir ?? serverInstanceRootDir());
+    const bounds = runtime.bounds ?? serverReapBounds();
+    const now = (runtime.now ?? Date.now)();
+    const readBirthState = runtime.readBirthState ?? processBirthIdentityState;
+    const readParentPid = runtime.readParentPid ?? linuxParentPid;
+    let entries;
+    try {
+        entries = readdirSync(rootDir).filter((entry) => entry.endsWith(".json"));
+    }
+    catch {
+        return summary;
+    }
+    for (const entry of entries) {
+        const path = join(rootDir, entry);
+        const record = readServerInstanceRecord(path);
+        if (record === null)
+            continue;
+        const decision = serverInstanceReapDecision(record, self, readBirthState(record), readParentPid(record.pid), now, bounds);
+        if (decision === "keep") {
+            summary.kept += 1;
+            continue;
+        }
+        if (decision === "forget") {
+            summary.forgotten += 1;
+            rmSync(path, { force: true });
+            continue;
+        }
+        try {
+            summary.signalled.push(...(await terminateServerInstanceTree(record, bounds, runtime)));
+        }
+        catch {
+            continue;
+        }
+        summary.reaped += 1;
+        if (readBirthState(record) === "stale")
+            rmSync(path, { force: true });
+        process.stderr.write(`[trusty-squire] reaped stale prior server pid=${record.pid} ` +
+            `identity=${record.agent_identity} v${record.server_version}\n`);
+    }
+    if (summary.reaped > 0) {
+        // Their owner-reaper manifests now name a dead owner, so the existing
+        // sweep collects any browser the tree walk missed (already re-parented
+        // to init before the snapshot).
+        await (runtime.sweep ?? sweepOrphanedOwnerProcesses)().catch(() => 0);
+    }
+    return summary;
+}
+//# sourceMappingURL=server-instance-registry.js.map

package/dist/server-instance-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-instance-registry.js","sourceRoot":"","sources":["../src/server-instance-registry.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,yEAAyE;AACzE,yEAAyE;AACzE,yEAAyE;AACzE,4EAA4E;AAC5E,sBAAsB;AACtB,EAAE;AACF,4EAA4E;AAC5E,0EAA0E;AAC1E,2EAA2E;AAC3E,qEAAqE;AACrE,0EAA0E;AAC1E,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,2EAA2E;AAC3E,qDAAqD;AACrD,wEAAwE;AACxE,4EAA4E;AAE5E,OAAO,EACL,SAAS,EACT,SAAS,EACT,YAAY,EACZ,WAAW,EACX,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EACL,oBAAoB,EACpB,yBAAyB,GAE1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,mEAAmE;AACnE,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,uBAAuB;AACxE,MAAM,oCAAoC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,oBAAoB;AACvF,MAAM,8BAA8B,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,0CAA0C;AACjG,0EAA0E;AAC1E,wEAAwE;AACxE,MAAM,uBAAuB,GAAG,EAAE,GAAG,KAAK,CAAC;AAC3C,MAAM,6BAA6B,GAAG,EAAE,GAAG,KAAK,CAAC;AACjD,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAEpC,SAAS,KAAK,CAAC,IAAY,EAAE,QAAgB;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,KAAK,CAAC,sCAAsC,EAAE,uBAAuB,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,KAAK,CACV,mDAAmD,EACnD,oCAAoC,CACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,KAAK,CAAC,6CAA6C,EAAE,8BAA8B,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,KAAK,CAAC,4CAA4C,EAAE,6BAA6B,CAAC,CAAC;AAC5F,CAAC;AAsCD,MAAM,UAAU,gBAAgB;IAC9B,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,2CAA2C,EAAE,uBAAuB,CAAC;QAC1F,MAAM,EAAE,aAAa,EAAE;QACvB,iBAAiB,EAAE,wBAAwB,EAAE;QAC7C,WAAW,EAAE,mBAAmB,EAAE;QAClC,OAAO,EAAE,KAAK,CAAC,oCAAoC,EAAE,qBAAqB,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChF,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QACrB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,MAAM,GAAG,KAAsC,CAAC;IACtD,MAAM,OAAO,GAAsC;QACjD,MAAM,CAAC,GAAG;QACV,MAAM,CAAC,UAAU;QACjB,MAAM,CAAC,UAAU;QACjB,MAAM,CAAC,YAAY;QACnB,MAAM,CAAC,gBAAgB;QACvB,MAAM,CAAC,eAAe;QACtB,MAAM,CAAC,eAAe;KACvB,CAAC;IACF,OAAO,CACL,MAAM,CAAC,OAAO,KAAK,CAAC;QACpB,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;QACzC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;QACzC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY,EAAE,MAA4B;IAC3E,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,UAAU,EAAE,EAAE,CAAC;IAChD,IAAI,CAAC;QACH,aAAa,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAID,gFAAgF;AAChF,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,UAAU,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CACnB,IAAI;aACD,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC;aACrB,IAAI,EAAE;aACN,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CACnB,CAAC;QACF,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,eAAe;IACtB,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,OAAO,CAAC;aACxB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACtC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAW,EACX,UAII,EAAE;IAEN,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,eAAe,CAAC;IACjE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,cAAc,CAAC;IAC9D,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,oBAAoB,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC7C,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,EAAE,CAAC;QACzC,IAAI,SAAS,KAAK,GAAG;YAAE,SAAS;QAChC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,SAAS;QACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,SAAS;YAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;;YACzD,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,MAAM,WAAW,GAA0B,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YACvD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,QAAQ,KAAK,IAAI;gBAAE,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAID;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAA4B,EAC5B,IAAiE,EACjE,QAA8B,EAC9B,SAAwB,EACxB,GAAW,EACX,MAAwB;IAExB,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC;IAC3C,0EAA0E;IAC1E,0EAA0E;IAC1E,qDAAqD;IACrD,IAAI,QAAQ,KAAK,OAAO,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IACnE,2EAA2E;IAC3E,mEAAmE;IACnE,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACpD,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc;QAAE,OAAO,MAAM,CAAC;IACjE,gDAAgD;IAChD,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAErE,MAAM,OAAO,GAAG,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAC9C,yEAAyE;IACzE,yEAAyE;IACzE,6CAA6C;IAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC;IAC5D,IAAI,QAAQ;QAAE,OAAO,OAAO,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAEvE,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,yEAAyE;IACzE,mCAAmC;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,GAAG,CAAC,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;IACzF,OAAO,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAChD,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAuE,EAAE;IAEzE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,aAAa,EAAE,CAAC;IACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,qBAAqB,EAAE,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,IAAI,MAAM,GAAyB;QACjC,OAAO,EAAE,CAAC;QACV,cAAc,EAAE,QAAQ;QACxB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACnD,UAAU,EAAE,SAAS;QACrB,YAAY,EAAE,SAAS;QACvB,gBAAgB,EAAE,SAAS;QAC3B,eAAe,EAAE,CAAC;QAClB,eAAe,EAAE,CAAC;QAClB,cAAc,EAAE,OAAO;KACxB,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,UAAU,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1B,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;YACtB,IAAI,QAAQ;gBAAE,OAAO;YACrB,MAAM,GAAG;gBACP,GAAG,MAAM;gBACT,YAAY,EAAE,GAAG,EAAE;gBACnB,gBAAgB,EAAE,QAAQ,CAAC,cAAc;gBACzC,eAAe,EAAE,QAAQ,CAAC,cAAc;gBACxC,eAAe,EAAE,QAAQ,CAAC,aAAa;aACxC,CAAC;YACF,IAAI,CAAC;gBACH,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;gBAClE,+DAA+D;YACjE,CAAC;QACH,CAAC;QACD,OAAO,EAAE,GAAG,EAAE;YACZ,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAsBD,KAAK,UAAU,2BAA2B,CACxC,MAA4B,EAC5B,MAAwB,EACxB,OAAkC;IAElC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,yBAAyB,CAAC;IAC3E,MAAM,eAAe,GACnB,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,GAAW,EAAE,MAAsB,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAClG,MAAM,IAAI,GACR,OAAO,CAAC,IAAI;QACZ,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,MAAM,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAE1F,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,0CAA0C;IAC1C,MAAM,IAAI,GAA0B;QAClC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;QAClD,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC;KAC5E,CAAC;IACF,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,CAAC,UAA0B,EAAyB,EAAE;QACnE,MAAM,KAAK,GAA0B,EAAE,CAAC;QACxC,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;YAC5B,IAAI,cAAc,CAAC,QAAQ,CAAC,KAAK,UAAU;gBAAE,SAAS;YACtD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrB,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;gBAC/B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,CAAC,SAAS,CAAC,CAAC;IAClB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,UAAqC,EAAE;IAEvC,MAAM,OAAO,GAA8B,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC/F,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC/E,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI;QAC3B,cAAc,EAAE,aAAa,EAAE;QAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,UAAU,EAAE,KAAK,EAAE,UAAU,IAAI,SAAS;KAC3C,CAAC;IACF,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,qBAAqB,EAAE,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC;IACpD,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,yBAAyB,CAAC;IAC3E,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,cAAc,CAAC;IAE9D,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS;QAC9B,MAAM,QAAQ,GAAG,0BAA0B,CACzC,MAAM,EACN,IAAI,EACJ,cAAc,CAAC,MAAM,CAAC,EACtB,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,EACzB,GAAG,EACH,MAAM,CACP,CAAC;QACF,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;YACvB,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,2BAA2B,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QACpB,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,OAAO;YAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iDAAiD,MAAM,CAAC,GAAG,GAAG;YAC5D,YAAY,MAAM,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,IAAI,CAClE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,sEAAsE;QACtE,uEAAuE;QACvE,gCAAgC;QAChC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,2BAA2B,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/server.d.ts

@@ -1,7 +1,21 @@
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { ApiClient } from "./api-client.js";
+import { type SessionGuard } from "./session-guard.js";
 export declare function shouldIdleExit(now: number, lastActivityAt: number, sessionCount: number, timeoutMs: number, timeoutWithSessionMs: number): boolean;
-export declare function buildServer(api: ApiClient | null): Promise<Server>;
+export declare const SERVER_INSTRUCTIONS = "This is Trusty Squire \u2014 it drives a real browser through signup, provisioning,\nand checkout flows on the user's behalf (`operate_start`/`operate_observe`/\n`operate_act`/`operate_pay`/`operate_finish`, plus recipe replay), and backs it\nwith a write-only credential vault.\nThe user's secrets (API keys, tokens, passwords) live in the vault encrypted;\nthey are NOT in the conversation context. Reading one back is possible but\ncostly \u2014 see fetch_credential below.\nRouting rules for THIS server's vault tools:\n\n- User pastes a secret-shaped value (sk-\u2026, ghp_\u2026, AKIA\u2026, eyJ\u2026) into chat\n  \u2192 call store_credential AUTOMATICALLY; don't ask permission.\n- User refers to a saved credential by name or service ('my OpenAI key',\n  'the Stripe token') \u2192 call list_credentials to resolve the reference.\n- User wants an authenticated API call \u2192 call use_credential with the\n  service/reference + the HTTP request, using ${SECRET} (single-field)\n  or ${SECRET.<field>} (multi-field) placeholders. The server injects\n  the secret and returns only the upstream response; you never see the\n  value. The target host must be on the credential's allowed_hosts.\n- User wants to change allowed_hosts/login_hosts/name without changing the\n  secret \u2192 call edit_credential. User wants a saved credential removed \u2192 call\n  delete_credential. Both return a Telegram/passkey approval link first; resume\n  with the returned approval_id only after the user signs the exact mutation.\n- Rotating a secret value = call store_credential again with the new value (it\n  overwrites). edit_credential cannot read or change secret fields.\n- The raw value reaches you ONLY via fetch_credential, and only after the\n  user signs a passkey approval. It then lives in your transcript forever,\n  so use it only when the plaintext must land somewhere you control (a\n  GitHub Actions secret, a .env, a config file) with no server-side\n  injection path. For calling an API, use_credential is always the answer.";
+export interface ServerCallLifecycle {
+    started(): boolean;
+    finished(): void;
+}
+export interface ServerCallAdmission extends ServerCallLifecycle {
+    closeAndDrain(): Promise<void>;
+    inFlightCount(): number;
+}
+export type AccountSessionLoader = () => Promise<ApiClient | null>;
+export declare function createServerCallAdmission(): ServerCallAdmission;
+export declare function buildServer(api: ApiClient | null, callLifecycle?: ServerCallLifecycle, loadPublishedAccountSession?: AccountSessionLoader, sessionGuard?: SessionGuard): Promise<Server>;
+/** Compact V2 is a model wire protocol; indentation adds no information. */
+export declare function compactToolResultText(result: unknown): string;
 export declare function installServerProcessGuards(): void;
 export declare function runServer(): Promise<void>;
 //# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAGnE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAmE5C,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,oBAAoB,EAAE,MAAM,GAC3B,OAAO,CAGT;AAgCD,wBAAsB,WAAW,CAAC,GAAG,EAAE,SAAS,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAwFxE;AAyDD,wBAAgB,0BAA0B,IAAI,IAAI,CAajD;AAID,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAgH/C"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAGnE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAkB5C,OAAO,EAA2C,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AA+BhG,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,MAAM,EACtB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,EACjB,oBAAoB,EAAE,MAAM,GAC3B,OAAO,CAGT;AAKD,eAAO,MAAM,mBAAmB,8/DA4B2C,CAAC;AAE5E,MAAM,WAAW,mBAAmB;IAClC,OAAO,IAAI,OAAO,CAAC;IACnB,QAAQ,IAAI,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC9D,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,aAAa,IAAI,MAAM,CAAC;CACzB;AAMD,MAAM,MAAM,oBAAoB,GAAG,MAAM,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;AAEnE,wBAAgB,yBAAyB,IAAI,mBAAmB,CA4B/D;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,SAAS,GAAG,IAAI,EACrB,aAAa,CAAC,EAAE,mBAAmB,EACnC,2BAA2B,CAAC,EAAE,oBAAoB,EAClD,YAAY,CAAC,EAAE,YAAY,GAC1B,OAAO,CAAC,MAAM,CAAC,CA+GjB;AAiCD,4EAA4E;AAC5E,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAU7D;AA0BD,wBAAgB,0BAA0B,IAAI,IAAI,CAajD;AAID,wBAAsB,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAmK/C"}