@trusty-squire/mcp 1.1.13-rc.9 → 1.1.13

package/dist/server.js

@@ -1,4 +1,4 @@
-// MCP server: reads the session from keytar/file, sets up an ApiClient
+// MCP server: reads its account's session from the session file, sets up an ApiClient
 // against the configured API base URL, and exposes the registered tools
 // over stdio.
 //
@@ -16,9 +16,11 @@ import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprot
 import { ApiClient } from "./api-client.js";
 import { setSelfManagedChromeTerminationSignalExitEnabled } from "./bot/browser.js";
 import { cancelActiveLoginBrowsers } from "./bot/google-login.js";
+import { startOwnerProcessReaper } from "./bot/owner-process-reaper.js";
 import { activeSessionCount, closeAllProvisionSessions, withProvisionSessionCall, } from "./bot/provision-session.js";
+import { heartbeatIntervalMs, idleCheckIntervalMs, idleTimeoutMs, idleTimeoutWithSessionMs, reapStaleServerInstances, registerServerInstance, } from "./server-instance-registry.js";
 import { buildToolRegistry, findTool } from "./tools/index.js";
-import { openSessionStorage } from "./session.js";
+import { createSessionGuard, setServingAccountId } from "./session-guard.js";
 import { VERSION } from "./version.js";
 const SERVER_NAME = "trusty-squire";
 const DEFAULT_REGISTRY_BASE = process.env.ADAPTER_REGISTRY_URL ?? "https://registry.trustysquire.ai";
@@ -30,39 +32,18 @@ const DEFAULT_REGISTRY_BASE = process.env.ADAPTER_REGISTRY_URL ?? "https://regis
 // from a host like that will ever arrive, so this is a time bound, not an
 // event.
 //
-// It also has to cover a server that still holds an open provision session:
-// the operator-profile-pool ACTIVE-slot reclaim (operator-profile-pool.ts,
-// scavengeActiveSlots) only ever reclaims a slot once its *owning process* is
-// provably dead — a live-but-abandoned zombie server is, by that design, a
-// "genuine concurrent run" the pool must never touch. So a background
-// pool-level reaper cannot free an active session's Chrome on its own; only
-// the owning server exiting (which runs closeAllProvisionSessions, which
-// calls browser.close() on the leased Chrome — already timeout-capped down
-// to a SIGKILL reap, see browser.ts's closeWithProfileGuard) can. Hence two
+// It also has to cover a server that still holds an open provision session.
+// Its browser is owned by that server, so only the owning server's bounded
+// terminal teardown can close Chrome and destroy its private profile. Hence two
 // bounds: a short one when idle with no session (routine), and a longer one
 // when a session is still open — wide enough that no real in-flight flow
-// (operate_pay no longer blocks a call for approval; verification polling is
-// bounded in the minutes) should ever cross it, so crossing it is a reliable
+// (operate_pay's approval wait is bounded to one minute; post-submit outcome
+// checks are bounded in the minutes) should ever cross it, so crossing it is a reliable
 // abandoned-session signal, not a false kill of live work.
-const DEFAULT_IDLE_TIMEOUT_MS = 20 * 60 * 1_000; // 20m, no open session
-const DEFAULT_IDLE_TIMEOUT_WITH_SESSION_MS = 12 * 60 * 60 * 1_000; // 12h, session open
-const DEFAULT_IDLE_CHECK_INTERVAL_MS = 5 * 60 * 1_000; // 5m — must stay well under the 20m bound above
-function envMs(name, fallback) {
-    const raw = process.env[name];
-    if (raw === undefined)
-        return fallback;
-    const parsed = Number(raw);
-    return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
-}
-function idleTimeoutMs() {
-    return envMs("TRUSTY_SQUIRE_SERVER_IDLE_TIMEOUT_MS", DEFAULT_IDLE_TIMEOUT_MS);
-}
-function idleTimeoutWithSessionMs() {
-    return envMs("TRUSTY_SQUIRE_SERVER_IDLE_TIMEOUT_WITH_SESSION_MS", DEFAULT_IDLE_TIMEOUT_WITH_SESSION_MS);
-}
-function idleCheckIntervalMs() {
-    return envMs("TRUSTY_SQUIRE_SERVER_IDLE_CHECK_INTERVAL_MS", DEFAULT_IDLE_CHECK_INTERVAL_MS);
-}
+//
+// The bounds themselves live in server-instance-registry.ts, because the
+// startup reaper there applies the same policy from the outside to a prior
+// instance that failed to apply it to itself.
 // Exported for unit testing; kept pure so the branches (recent activity,
 // no-session idle, session-open idle) don't need a live process/interval.
 export function shouldIdleExit(now, lastActivityAt, sessionCount, timeoutMs, timeoutWithSessionMs) {
@@ -72,12 +53,13 @@ export function shouldIdleExit(now, lastActivityAt, sessionCount, timeoutMs, tim
 // Injected into the model's system prompt every turn (≤2KB). Teaches
 // the routing between store / use / request so the agent reaches for
 // the right credential tool without the user spelling it out.
-const SERVER_INSTRUCTIONS = `This is Trusty Squire — it drives a real browser through signup, provisioning,
+export const SERVER_INSTRUCTIONS = `This is Trusty Squire — it drives a real browser through signup, provisioning,
 and checkout flows on the user's behalf (\`operate_start\`/\`operate_observe\`/
 \`operate_act\`/\`operate_pay\`/\`operate_finish\`, plus recipe replay), and backs it
 with a write-only credential vault.
 The user's secrets (API keys, tokens, passwords) live in the vault encrypted;
-they are NOT in the conversation context and CANNOT be read back to you.
+they are NOT in the conversation context. Reading one back is possible but
+costly — see fetch_credential below.
 Routing rules for THIS server's vault tools:
 
 - User pastes a secret-shaped value (sk-…, ghp_…, AKIA…, eyJ…) into chat
@@ -95,10 +77,44 @@ Routing rules for THIS server's vault tools:
   with the returned approval_id only after the user signs the exact mutation.
 - Rotating a secret value = call store_credential again with the new value (it
   overwrites). edit_credential cannot read or change secret fields.
-- There is NO way to extract a raw secret value to you — by design. If a
-  user wants the plaintext (e.g. for a .env file), they read it from the
-  Trusty Squire web vault themselves.`;
-export async function buildServer(api) {
+- The raw value reaches you ONLY via fetch_credential, and only after the
+  user signs a passkey approval. It then lives in your transcript forever,
+  so use it only when the plaintext must land somewhere you control (a
+  GitHub Actions secret, a .env, a config file) with no server-side
+  injection path. For calling an API, use_credential is always the answer.`;
+export function createServerCallAdmission() {
+    let accepting = true;
+    let inFlight = 0;
+    let drain;
+    let finishDrain;
+    return {
+        started: () => {
+            if (!accepting)
+                return false;
+            inFlight += 1;
+            return true;
+        },
+        finished: () => {
+            inFlight -= 1;
+            if (inFlight === 0) {
+                finishDrain?.();
+                finishDrain = undefined;
+            }
+        },
+        closeAndDrain: () => {
+            accepting = false;
+            if (inFlight === 0)
+                return Promise.resolve();
+            drain ??= new Promise((resolveDrain) => {
+                finishDrain = resolveDrain;
+            });
+            return drain;
+        },
+        inFlightCount: () => inFlight,
+    };
+}
+export async function buildServer(api, callLifecycle, loadPublishedAccountSession, sessionGuard) {
+    let activeApi = api;
     const tools = buildToolRegistry();
     const server = new Server({ name: SERVER_NAME, version: VERSION }, { capabilities: { tools: {} }, instructions: SERVER_INSTRUCTIONS });
     server.setRequestHandler(ListToolsRequestSchema, async () => ({
@@ -129,13 +145,33 @@ export async function buildServer(api) {
                 .map((i) => (i.path.length > 0 ? `${i.path.join(".")}: ${i.message}` : i.message))
                 .join("; ")}`);
         }
-        if (api === null) {
+        // Which account is this server serving? Sessions are stored per account, so
+        // a `connect` under a different account no longer overwrites this one — but
+        // this server must still refuse rather than fall back to another account's
+        // scope if its own entry is gone.
+        if (sessionGuard !== undefined) {
+            const report = await sessionGuard.inspect();
+            if (report.problem !== null) {
+                return errorContent(report.problem.code, report.problem.message);
+            }
+        }
+        // The install ceremony publishes the agent token after the operator may
+        // already have launched this stdio server. Retry the canonical session
+        // read only while unauthenticated; once bound, keep the in-memory client
+        // for the rest of this server lifetime.
+        if (activeApi === null && loadPublishedAccountSession !== undefined) {
+            activeApi = await loadPublishedAccountSession();
+        }
+        if (activeApi === null) {
             return errorContent("reconnect_required", `This install is from before single-tier auth and isn't bound to an account. ` +
                 `Run \`npx @trusty-squire/mcp connect\` to reconnect.`);
         }
+        if (callLifecycle !== undefined && !callLifecycle.started()) {
+            return errorContent("server_unavailable", "server is shutting down");
+        }
         try {
-            api.setRequestingAgent(server.getClientVersion()?.name ?? "unknown-agent");
-            const invoke = async () => await tool.handler(parsed.data, api, {
+            activeApi.setRequestingAgent(server.getClientVersion()?.name ?? "unknown-agent");
+            const invoke = async () => await tool.handler(parsed.data, activeApi, {
                 notifyUser: async (message, data) => {
                     await server.sendLoggingMessage({
                         level: "notice",
@@ -145,8 +181,8 @@ export async function buildServer(api) {
                 },
             });
             // Tool handlers await independently.  A finish must therefore close the
-            // admission gate and drain calls that already entered before it resets or
-            // pools a browser.  `operate_finish*` owns that transition itself.
+            // admission gate and drain calls that already entered before it snapshots
+            // eligible state and closes the browser. `operate_finish*` owns that transition.
             const sessionId = typeof parsed.data.session_id === "string" ? parsed.data.session_id : undefined;
             const result = sessionId !== undefined && !/^operate_finish(?:_task)?$/.test(tool.name)
                 ? await withProvisionSessionCall(sessionId, async () => await invoke())
@@ -163,6 +199,9 @@ export async function buildServer(api) {
                 })
                 : errorContent(malformedAction ? "invalid_arguments" : "tool_execution_failed", message);
         }
+        finally {
+            callLifecycle?.finished();
+        }
     });
     return server;
 }
@@ -186,15 +225,25 @@ function toolResultContent(result) {
         const { image, ...meta } = result;
         return {
             content: [
-                { type: "text", text: JSON.stringify(meta, null, 2) },
+                { type: "text", text: compactToolResultText(meta) },
                 { type: "image", data: image.data_base64, mimeType: image.mime_type },
             ],
         };
     }
     return {
-        content: [{ type: "text", text: JSON.stringify(result, null, 2) }],
+        content: [{ type: "text", text: compactToolResultText(result) }],
     };
 }
+/** Compact V2 is a model wire protocol; indentation adds no information. */
+export function compactToolResultText(result) {
+    if (typeof result === "object" &&
+        result !== null &&
+        "format" in result &&
+        result.format === "compact-v2") {
+        return JSON.stringify(result);
+    }
+    return JSON.stringify(result, null, 2);
+}
 function errorContent(code, message, guidance) {
     return {
         isError: true,
@@ -214,8 +263,8 @@ function errorContent(code, message, guidance) {
 // kill the process, which turns one bad operate_* call into "MCP server
 // unreachable" for the host agent. Log the escape and keep serving: the
 // in-flight call fails on its own (its awaited promise threw or timed out),
-// session/browser state is self-contained and recycled by the warm-browser
-// health checks, and no security gate depends on process death — a crash
+// session/browser state is self-contained and bounded by its watchdog and
+// terminal teardown, and no security gate depends on process death — a crash
 // leaves any half-done page action in exactly the same state, minus the
 // transport. Installed only for `mcp server`; the CLI keeps fail-fast.
 export function installServerProcessGuards() {
@@ -232,27 +281,60 @@ export function installServerProcessGuards() {
 export async function runServer() {
     installServerProcessGuards();
     setSelfManagedChromeTerminationSignalExitEnabled(false);
+    // The detached Linux watchdog survives SIGKILL/parent death. It asynchronously
+    // sweeps strict process-only manifests, then tracks exact local browser and
+    // session-helper identities for launches owned by this server.
+    startOwnerProcessReaper();
+    // Reconnects leave the superseded instance behind: a live box carried a
+    // superseded server beside its replacement plus two orphaned to init for
+    // ~31 hours, each keeping a browser tree resident. Reap prior instances of
+    // OUR agent identity that are orphaned or past their own idle bound, before
+    // serving — never by process name, never one still serving a client. Purely
+    // housekeeping, so a failure here must not stop the server from starting.
+    try {
+        await reapStaleServerInstances();
+    }
+    catch (err) {
+        process.stderr.write(`[trusty-squire] stale server reap failed: ${err instanceof Error ? err.message : String(err)}\n`);
+    }
     // Startup breadcrumb on stderr (which lands in the host agent's MCP
     // log). A silent no-op was the worst part of the entrypoint-guard
     // bug — this line makes "did the server actually start?" answerable
     // at a glance.
     process.stderr.write(`[trusty-squire] server v${VERSION} starting\n`);
-    const storage = await openSessionStorage();
-    const session = await storage.read();
-    // Single-tier: every session is account-bound. A session with just a
-    // machine_token (pre-collapse install) yields api=null, and every
-    // tool call returns the re-install instruction.
-    const api = session !== null && session.agent_session_token !== undefined
-        ? new ApiClient({
-            apiBaseUrl: session.api_base_url,
-            registryBaseUrl: DEFAULT_REGISTRY_BASE,
-            agentSessionToken: session.agent_session_token,
-            agentIdentity: process.env.TRUSTY_SQUIRE_AGENT_IDENTITY ?? "unknown",
-            ...(session.account_id !== undefined ? { accountId: session.account_id } : {}),
-        })
-        : null;
-    const server = await buildServer(api);
+    // Owns this server's answer to "which account am I serving?".
+    const sessionGuard = createSessionGuard();
+    const loadPublishedAccountSession = async () => {
+        try {
+            const session = await sessionGuard.bind();
+            setServingAccountId(sessionGuard.boundAccountId());
+            // Single-tier: every session is account-bound. A session with just a
+            // machine_token (pre-collapse install) yields api=null, and every
+            // tool call returns the re-install instruction.
+            if (session === null || session.agent_session_token === undefined)
+                return null;
+            return new ApiClient({
+                apiBaseUrl: session.api_base_url,
+                registryBaseUrl: DEFAULT_REGISTRY_BASE,
+                agentSessionToken: session.agent_session_token,
+                agentIdentity: process.env.TRUSTY_SQUIRE_AGENT_IDENTITY ?? "unknown",
+                ...(session.account_id !== undefined ? { accountId: session.account_id } : {}),
+            });
+        }
+        catch {
+            // A failed session read must remain fail-closed; the next tool call can
+            // retry after a transient session-storage problem clears.
+            return null;
+        }
+    };
+    const api = await loadPublishedAccountSession();
+    const callAdmission = createServerCallAdmission();
+    const server = await buildServer(api, callAdmission, loadPublishedAccountSession, sessionGuard);
     const transport = new StdioServerTransport();
+    // Publishes what a later launch of this identity needs to tell "still
+    // serving a client" from "wedged": last inbound message, open sessions,
+    // in-flight calls. Without it every prior instance looks equally idle.
+    const instance = registerServerInstance();
     // A stdio client can disappear without sending a signal (for example when
     // its parent agent exits). Chrome keeps Node's event loop alive in that
     // case, so close every active provisioning browser and explicitly exit.
@@ -260,22 +342,29 @@ export async function runServer() {
     // idle backstop below racing together cannot run teardown twice.
     let shutdown;
     let idleTimer;
+    let heartbeatTimer;
     const requestShutdown = () => {
         if (shutdown !== undefined)
             return;
+        const admittedCallsDrained = callAdmission.closeAndDrain();
         shutdown = (async () => {
             process.stdin.removeListener("end", requestShutdown);
             process.stdin.removeListener("close", requestShutdown);
+            process.removeListener("SIGHUP", requestShutdown);
             process.removeListener("SIGTERM", requestShutdown);
             process.removeListener("SIGINT", requestShutdown);
             if (idleTimer !== undefined)
                 clearInterval(idleTimer);
+            if (heartbeatTimer !== undefined)
+                clearInterval(heartbeatTimer);
+            instance?.release();
             try {
                 // The OAuth-bootstrap login Chrome (google-login) is tracked apart
                 // from provision sessions — drain it too so it cannot outlive the
                 // server. Its own signal handlers stand down in server mode (see
                 // registerHeadlessRigCleanup), leaving this coordinator as the one
                 // exit owner.
+                await admittedCallsDrained;
                 await cancelActiveLoginBrowsers();
                 await closeAllProvisionSessions();
                 await server.close();
@@ -296,6 +385,7 @@ export async function runServer() {
     transport.onclose = requestShutdown;
     process.stdin.once("end", requestShutdown);
     process.stdin.once("close", requestShutdown);
+    process.once("SIGHUP", requestShutdown);
     process.once("SIGTERM", requestShutdown);
     process.once("SIGINT", requestShutdown);
     // Protocol.connect chains transport.onmessage the same way it chains
@@ -318,6 +408,18 @@ export async function runServer() {
         requestShutdown();
     }, idleCheckIntervalMs());
     idleTimer.unref();
+    if (instance !== null) {
+        heartbeatTimer = setInterval(() => {
+            if (shutdown !== undefined)
+                return;
+            instance.heartbeat({
+                lastActivityAt,
+                activeSessions: activeSessionCount(),
+                inFlightCalls: callAdmission.inFlightCount(),
+            });
+        }, heartbeatIntervalMs());
+        heartbeatTimer.unref();
+    }
     await server.connect(transport);
 }
 //# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,wEAAwE;AACxE,cAAc;AACd,EAAE;AACF,uEAAuE;AACvE,wEAAwE;AACxE,sEAAsE;AACtE,EAAE;AACF,qEAAqE;AACrE,+DAA+D;AAC/D,qEAAqE;AACrE,6DAA6D;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACnG,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,gDAAgD,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,WAAW,GAAG,eAAe,CAAC;AAEpC,MAAM,qBAAqB,GACzB,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,kCAAkC,CAAC;AAEzE,2EAA2E;AAC3E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,0EAA0E;AAC1E,SAAS;AACT,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,8EAA8E;AAC9E,2EAA2E;AAC3E,sEAAsE;AACtE,4EAA4E;AAC5E,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,6EAA6E;AAC7E,2DAA2D;AAC3D,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,uBAAuB;AACxE,MAAM,oCAAoC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,oBAAoB;AACvF,MAAM,8BAA8B,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,gDAAgD;AAEvG,SAAS,KAAK,CAAC,IAAY,EAAE,QAAgB;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnE,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,KAAK,CAAC,sCAAsC,EAAE,uBAAuB,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO,KAAK,CACV,mDAAmD,EACnD,oCAAoC,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,KAAK,CAAC,6CAA6C,EAAE,8BAA8B,CAAC,CAAC;AAC9F,CAAC;AAED,yEAAyE;AACzE,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAC5B,GAAW,EACX,cAAsB,EACtB,YAAoB,EACpB,SAAiB,EACjB,oBAA4B;IAE5B,MAAM,SAAS,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACxE,OAAO,GAAG,GAAG,cAAc,IAAI,SAAS,CAAC;AAC3C,CAAC;AAED,qEAAqE;AACrE,qEAAqE;AACrE,8DAA8D;AAC9D,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;sCAyBU,CAAC;AAEvC,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAqB;IACrD,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,EACvC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,mBAAmB,EAAE,CACnE,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,eAAe;YAC9B,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC,CAAC;KACJ,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,YAAY,CAAC,cAAc,EAAE,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,2EAA2E;QAC3E,0EAA0E;QAC1E,6DAA6D;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,YAAY,CAAC,mBAAmB,EAAE,mBAAmB,EAAE;oBAC5D,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;iBAC7E,CAAC,CAAC;YACL,CAAC;YACD,OAAO,YAAY,CACjB,mBAAmB,EACnB,sBAAsB,MAAM,CAAC,KAAK,CAAC,MAAM;iBACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;iBACjF,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,YAAY,CACjB,oBAAoB,EACpB,8EAA8E;gBAC5E,sDAAsD,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,IAAI,IAAI,eAAe,CAAC,CAAC;YAC3E,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE,CACxB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBACnC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;oBAClC,MAAM,MAAM,CAAC,kBAAkB,CAAC;wBAC9B,KAAK,EAAE,QAAQ;wBACf,MAAM,EAAE,eAAe;wBACvB,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE;qBAC3B,CAAC,CAAC;gBACL,CAAC;aACF,CAAC,CAAC;YACL,wEAAwE;YACxE,0EAA0E;YAC1E,mEAAmE;YACnE,MAAM,SAAS,GACb,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,MAAM,MAAM,GACV,SAAS,KAAK,SAAS,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtE,CAAC,CAAC,MAAM,wBAAwB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,MAAM,EAAE,CAAC;gBACvE,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC;YACrB,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,iBAAiB,GACrB,8EAA8E,CAAC,IAAI,CACjF,OAAO,CACR,CAAC;YACJ,MAAM,eAAe,GAAG,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxE,OAAO,iBAAiB;gBACtB,CAAC,CAAC,YAAY,CACV,oBAAoB,EACpB,GAAG,OAAO,6FAA6F,EACvG;oBACE,KAAK,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE;iBAC3B,CACF;gBACH,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iFAAiF;AACjF,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,+CAA+C;AAC/C,SAAS,eAAe,CACtB,KAAc;IAEd,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,OAAO,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC;AAClF,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAe;IACxC,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAClC,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;gBAC9D,EAAE,IAAI,EAAE,OAAgB,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE;aAC/E;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe,EAAE,QAAkC;IACrF,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;aACxE;SACF;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,wEAAwE;AACxE,wEAAwE;AACxE,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,wEAAwE;AACxE,uEAAuE;AACvE,MAAM,UAAU,0BAA0B;IACxC,MAAM,QAAQ,GAAG,CAAC,MAAe,EAAU,EAAE,CAC3C,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9E,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4DAA4D,QAAQ,CAAC,MAAM,CAAC,IAAI,CACjF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2DAA2D,QAAQ,CAAC,GAAG,CAAC,IAAI,CAC7E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wEAAwE;AACxE,yCAAyC;AACzC,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,0BAA0B,EAAE,CAAC;IAC7B,gDAAgD,CAAC,KAAK,CAAC,CAAC;IACxD,oEAAoE;IACpE,kEAAkE;IAClE,oEAAoE;IACpE,eAAe;IACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,OAAO,aAAa,CAAC,CAAC;IAEtE,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAErC,qEAAqE;IACrE,kEAAkE;IAClE,gDAAgD;IAChD,MAAM,GAAG,GACP,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,mBAAmB,KAAK,SAAS;QAC3D,CAAC,CAAC,IAAI,SAAS,CAAC;YACZ,UAAU,EAAE,OAAO,CAAC,YAAY;YAChC,eAAe,EAAE,qBAAqB;YACtC,iBAAiB,EAAE,OAAO,CAAC,mBAAmB;YAC9C,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,SAAS;YACpE,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/E,CAAC;QACJ,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7C,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,iEAAiE;IACjE,IAAI,QAAmC,CAAC;IACxC,IAAI,SAAqC,CAAC;IAC1C,MAAM,eAAe,GAAG,GAAS,EAAE;QACjC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO;QAEnC,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YACrB,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;YACrD,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACvD,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;YACnD,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YAClD,IAAI,SAAS,KAAK,SAAS;gBAAE,aAAa,CAAC,SAAS,CAAC,CAAC;YAEtD,IAAI,CAAC;gBACH,mEAAmE;gBACnE,kEAAkE;gBAClE,iEAAiE;gBACjE,mEAAmE;gBACnE,cAAc;gBACd,MAAM,yBAAyB,EAAE,CAAC;gBAClC,MAAM,yBAAyB,EAAE,CAAC;gBAClC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uEAAuE;gBACvE,sEAAsE;gBACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mDACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,IAAI,CACL,CAAC;YACJ,CAAC;YAED,uEAAuE;YACvE,uEAAuE;YACvE,0DAA0D;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;IAEF,4EAA4E;IAC5E,8DAA8D;IAC9D,SAAS,CAAC,OAAO,GAAG,eAAe,CAAC;IACpC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC3C,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACzC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAExC,qEAAqE;IACrE,wEAAwE;IACxE,0EAA0E;IAC1E,6CAA6C;IAC7C,IAAI,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,SAAS,CAAC,SAAS,GAAG,GAAG,EAAE;QACzB,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,CAAC,CAAC;IAEF,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QAC3B,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO;QACnC,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;QAC1C,IACE,CAAC,cAAc,CACb,IAAI,CAAC,GAAG,EAAE,EACV,cAAc,EACd,YAAY,EACZ,aAAa,EAAE,EACf,wBAAwB,EAAE,CAC3B,EACD,CAAC;YACD,OAAO;QACT,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oCAAoC,YAAY,iCAAiC;YAC/E,iFAAiF,CACpF,CAAC;QACF,eAAe,EAAE,CAAC;IACpB,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC1B,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,wEAAwE;AACxE,cAAc;AACd,EAAE;AACF,uEAAuE;AACvE,wEAAwE;AACxE,sEAAsE;AACtE,EAAE;AACF,qEAAqE;AACrE,+DAA+D;AAC/D,qEAAqE;AACrE,6DAA6D;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACnG,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,gDAAgD,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAqB,MAAM,oBAAoB,CAAC;AAChG,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,WAAW,GAAG,eAAe,CAAC;AAEpC,MAAM,qBAAqB,GACzB,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,kCAAkC,CAAC;AAEzE,2EAA2E;AAC3E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,6EAA6E;AAC7E,0EAA0E;AAC1E,SAAS;AACT,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,gFAAgF;AAChF,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,wFAAwF;AACxF,2DAA2D;AAC3D,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,8CAA8C;AAE9C,yEAAyE;AACzE,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAC5B,GAAW,EACX,cAAsB,EACtB,YAAoB,EACpB,SAAiB,EACjB,oBAA4B;IAE5B,MAAM,SAAS,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACxE,OAAO,GAAG,GAAG,cAAc,IAAI,SAAS,CAAC;AAC3C,CAAC;AAED,qEAAqE;AACrE,qEAAqE;AACrE,8DAA8D;AAC9D,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;2EA4BwC,CAAC;AAkB5E,MAAM,UAAU,yBAAyB;IACvC,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,KAAgC,CAAC;IACrC,IAAI,WAAqC,CAAC;IAC1C,OAAO;QACL,OAAO,EAAE,GAAG,EAAE;YACZ,IAAI,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YAC7B,QAAQ,IAAI,CAAC,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE;YACb,QAAQ,IAAI,CAAC,CAAC;YACd,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,WAAW,EAAE,EAAE,CAAC;gBAChB,WAAW,GAAG,SAAS,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,aAAa,EAAE,GAAG,EAAE;YAClB,SAAS,GAAG,KAAK,CAAC;YAClB,IAAI,QAAQ,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YAC7C,KAAK,KAAK,IAAI,OAAO,CAAO,CAAC,YAAY,EAAE,EAAE;gBAC3C,WAAW,GAAG,YAAY,CAAC;YAC7B,CAAC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QACD,aAAa,EAAE,GAAG,EAAE,CAAC,QAAQ;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAqB,EACrB,aAAmC,EACnC,2BAAkD,EAClD,YAA2B;IAE3B,IAAI,SAAS,GAAG,GAAG,CAAC;IACpB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,EACvC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,mBAAmB,EAAE,CACnE,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,WAAW,EAAE,CAAC,CAAC,eAAe;YAC9B,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC,CAAC;KACJ,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,YAAY,CAAC,cAAc,EAAE,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,2EAA2E;QAC3E,0EAA0E;QAC1E,6DAA6D;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,YAAY,CAAC,mBAAmB,EAAE,mBAAmB,EAAE;oBAC5D,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;iBAC7E,CAAC,CAAC;YACL,CAAC;YACD,OAAO,YAAY,CACjB,mBAAmB,EACnB,sBAAsB,MAAM,CAAC,KAAK,CAAC,MAAM;iBACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;iBACjF,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,4EAA4E;QAC5E,4EAA4E;QAC5E,2EAA2E;QAC3E,kCAAkC;QAClC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC;YAC5C,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC5B,OAAO,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,wEAAwE;QACxE,uEAAuE;QACvE,yEAAyE;QACzE,wCAAwC;QACxC,IAAI,SAAS,KAAK,IAAI,IAAI,2BAA2B,KAAK,SAAS,EAAE,CAAC;YACpE,SAAS,GAAG,MAAM,2BAA2B,EAAE,CAAC;QAClD,CAAC;QACD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,YAAY,CACjB,oBAAoB,EACpB,8EAA8E;gBAC5E,sDAAsD,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,aAAa,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,OAAO,YAAY,CAAC,oBAAoB,EAAE,yBAAyB,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC;YACH,SAAS,CAAC,kBAAkB,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,IAAI,IAAI,eAAe,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE,CACxB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE;gBACzC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;oBAClC,MAAM,MAAM,CAAC,kBAAkB,CAAC;wBAC9B,KAAK,EAAE,QAAQ;wBACf,MAAM,EAAE,eAAe;wBACvB,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE;qBAC3B,CAAC,CAAC;gBACL,CAAC;aACF,CAAC,CAAC;YACL,wEAAwE;YACxE,0EAA0E;YAC1E,iFAAiF;YACjF,MAAM,SAAS,GACb,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,MAAM,MAAM,GACV,SAAS,KAAK,SAAS,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtE,CAAC,CAAC,MAAM,wBAAwB,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,MAAM,EAAE,CAAC;gBACvE,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC;YACrB,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,iBAAiB,GACrB,8EAA8E,CAAC,IAAI,CACjF,OAAO,CACR,CAAC;YACJ,MAAM,eAAe,GAAG,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxE,OAAO,iBAAiB;gBACtB,CAAC,CAAC,YAAY,CACV,oBAAoB,EACpB,GAAG,OAAO,6FAA6F,EACvG;oBACE,KAAK,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE;iBAC3B,CACF;gBACH,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;QAC7F,CAAC;gBAAS,CAAC;YACT,aAAa,EAAE,QAAQ,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iFAAiF;AACjF,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,+CAA+C;AAC/C,SAAS,eAAe,CACtB,KAAc;IAEd,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,OAAO,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC;AAClF,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAe;IACxC,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAClC,OAAO;YACL,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC,EAAE;gBAC5D,EAAE,IAAI,EAAE,OAAgB,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE;aAC/E;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,qBAAqB,CAAC,MAAe;IACnD,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,QAAQ,IAAI,MAAM;QACjB,MAA+B,CAAC,MAAM,KAAK,YAAY,EACxD,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe,EAAE,QAAkC;IACrF,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;aACxE;SACF;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,wEAAwE;AACxE,wEAAwE;AACxE,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,wEAAwE;AACxE,uEAAuE;AACvE,MAAM,UAAU,0BAA0B;IACxC,MAAM,QAAQ,GAAG,CAAC,MAAe,EAAU,EAAE,CAC3C,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9E,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4DAA4D,QAAQ,CAAC,MAAM,CAAC,IAAI,CACjF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2DAA2D,QAAQ,CAAC,GAAG,CAAC,IAAI,CAC7E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wEAAwE;AACxE,yCAAyC;AACzC,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,0BAA0B,EAAE,CAAC;IAC7B,gDAAgD,CAAC,KAAK,CAAC,CAAC;IACxD,+EAA+E;IAC/E,4EAA4E;IAC5E,+DAA+D;IAC/D,uBAAuB,EAAE,CAAC;IAC1B,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,CAAC;QACH,MAAM,wBAAwB,EAAE,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6CACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,IAAI,CACL,CAAC;IACJ,CAAC;IACD,oEAAoE;IACpE,kEAAkE;IAClE,oEAAoE;IACpE,eAAe;IACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,OAAO,aAAa,CAAC,CAAC;IAEtE,8DAA8D;IAC9D,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;IAC1C,MAAM,2BAA2B,GAAG,KAAK,IAA+B,EAAE;QACxE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;YAC1C,mBAAmB,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC;YACnD,qEAAqE;YACrE,kEAAkE;YAClE,gDAAgD;YAChD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,mBAAmB,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC/E,OAAO,IAAI,SAAS,CAAC;gBACnB,UAAU,EAAE,OAAO,CAAC,YAAY;gBAChC,eAAe,EAAE,qBAAqB;gBACtC,iBAAiB,EAAE,OAAO,CAAC,mBAAmB;gBAC9C,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,SAAS;gBACpE,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/E,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,0DAA0D;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,2BAA2B,EAAE,CAAC;IAEhD,MAAM,aAAa,GAAG,yBAAyB,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,aAAa,EAAE,2BAA2B,EAAE,YAAY,CAAC,CAAC;IAChG,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,sEAAsE;IACtE,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,QAAQ,GAAG,sBAAsB,EAAE,CAAC;IAE1C,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,iEAAiE;IACjE,IAAI,QAAmC,CAAC;IACxC,IAAI,SAAqC,CAAC;IAC1C,IAAI,cAA0C,CAAC;IAC/C,MAAM,eAAe,GAAG,GAAS,EAAE;QACjC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO;QACnC,MAAM,oBAAoB,GAAG,aAAa,CAAC,aAAa,EAAE,CAAC;QAE3D,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YACrB,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;YACrD,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACvD,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YAClD,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;YACnD,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YAClD,IAAI,SAAS,KAAK,SAAS;gBAAE,aAAa,CAAC,SAAS,CAAC,CAAC;YACtD,IAAI,cAAc,KAAK,SAAS;gBAAE,aAAa,CAAC,cAAc,CAAC,CAAC;YAChE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAEpB,IAAI,CAAC;gBACH,mEAAmE;gBACnE,kEAAkE;gBAClE,iEAAiE;gBACjE,mEAAmE;gBACnE,cAAc;gBACd,MAAM,oBAAoB,CAAC;gBAC3B,MAAM,yBAAyB,EAAE,CAAC;gBAClC,MAAM,yBAAyB,EAAE,CAAC;gBAClC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uEAAuE;gBACvE,sEAAsE;gBACtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,mDACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,IAAI,CACL,CAAC;YACJ,CAAC;YAED,uEAAuE;YACvE,uEAAuE;YACvE,0DAA0D;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;IAEF,4EAA4E;IAC5E,8DAA8D;IAC9D,SAAS,CAAC,OAAO,GAAG,eAAe,CAAC;IACpC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC3C,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACzC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAExC,qEAAqE;IACrE,wEAAwE;IACxE,0EAA0E;IAC1E,6CAA6C;IAC7C,IAAI,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,SAAS,CAAC,SAAS,GAAG,GAAG,EAAE;QACzB,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,CAAC,CAAC;IAEF,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QAC3B,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO;QACnC,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;QAC1C,IACE,CAAC,cAAc,CACb,IAAI,CAAC,GAAG,EAAE,EACV,cAAc,EACd,YAAY,EACZ,aAAa,EAAE,EACf,wBAAwB,EAAE,CAC3B,EACD,CAAC;YACD,OAAO;QACT,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oCAAoC,YAAY,iCAAiC;YAC/E,iFAAiF,CACpF,CAAC;QACF,eAAe,EAAE,CAAC;IACpB,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC1B,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YAChC,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO;YACnC,QAAQ,CAAC,SAAS,CAAC;gBACjB,cAAc;gBACd,cAAc,EAAE,kBAAkB,EAAE;gBACpC,aAAa,EAAE,aAAa,CAAC,aAAa,EAAE;aAC7C,CAAC,CAAC;QACL,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC1B,cAAc,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC"}

package/dist/session-guard.d.ts

@@ -0,0 +1,28 @@
+import { type SessionData, type SessionStore } from "./session.js";
+export interface SessionStateProblem {
+    code: "account_session_missing";
+    message: string;
+}
+export interface SessionGuardReport {
+    /** Non-null means the read cannot be trusted; surface it as a tool error. */
+    problem: SessionStateProblem | null;
+}
+export interface SessionGuard {
+    /** Read this server's account entry, adopting an account on first success. */
+    bind(): Promise<SessionData | null>;
+    /** Per-tool-call check; never throws. */
+    inspect(): Promise<SessionGuardReport>;
+    /** The account this server is serving, once bound. */
+    boundAccountId(): string | null;
+}
+export declare function setServingAccountId(accountId: string | null): void;
+export declare function servingAccountId(): string | undefined;
+export declare function createSessionGuard(options?: {
+    openStorage?: () => Promise<SessionStore>;
+    self?: {
+        pid: number;
+        version: string;
+    };
+    accountId?: string | undefined;
+}): SessionGuard;
+//# sourceMappingURL=session-guard.d.ts.map

package/dist/session-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-guard.d.ts","sourceRoot":"","sources":["../src/session-guard.ts"],"names":[],"mappings":"AAcA,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,cAAc,CAAC;AAGtB,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,yBAAyB,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,YAAY;IAC3B,8EAA8E;IAC9E,IAAI,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACpC,yCAAyC;IACzC,OAAO,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvC,sDAAsD;IACtD,cAAc,IAAI,MAAM,GAAG,IAAI,CAAC;CACjC;AAaD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAElE;AAED,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAGrD;AAOD,wBAAgB,kBAAkB,CAChC,OAAO,GAAE;IACP,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B,GACL,YAAY,CAiDd"}

package/dist/session-guard.js

@@ -0,0 +1,84 @@
+// A server's account-scoped view of the session store.
+//
+// The store keeps one entry per account, so a `connect` under a second account
+// no longer overwrites the first account's binding. What remains is telling the
+// server WHICH account it is: it binds one at startup and reads only that
+// entry, so it can never fall back to another account's scope, and it says so
+// loudly if its own entry is removed.
+//
+// The account a server binds comes from TRUSTY_SQUIRE_ACCOUNT_ID — `connect`
+// writes it into the host agent's MCP config env, so an already-running server
+// keeps the account it was launched for even after a later connect installs a
+// different one. Without that env (a config written before this existed) it
+// falls back to the store's most recently connected account.
+import { AccountSessionMissingError, openSessionStorage, } from "./session.js";
+import { VERSION } from "./version.js";
+// The account THIS process is acting for, published by whoever owns the guard.
+//
+// Tools must read it from here and must NEVER fall back to the store's
+// current-account pointer: a server launched from a pre-pin config binds by
+// fallback, and re-resolving later would hand it whichever account connected
+// most recently — the original "acting as an account it never bound to"
+// defect. The launch env is a different thing and is a legitimate source: it
+// is the pinned value the guard itself starts from, and operator/CI paths
+// (skill CLI, direct registry publishes) run with no guard at all.
+let servingAccount = null;
+export function setServingAccountId(accountId) {
+    servingAccount = accountId;
+}
+export function servingAccountId() {
+    if (servingAccount !== null)
+        return servingAccount;
+    return accountFromEnv();
+}
+function accountFromEnv() {
+    const id = (process.env.TRUSTY_SQUIRE_ACCOUNT_ID ?? "").trim();
+    return id.length > 0 ? id : undefined;
+}
+export function createSessionGuard(options = {}) {
+    const openStorage = options.openStorage ?? (async () => await openSessionStorage());
+    const self = options.self ?? { pid: process.pid, version: VERSION };
+    const configured = "accountId" in options ? options.accountId : accountFromEnv();
+    let bound = configured ?? null;
+    // Only an account this server has actually served can go missing. Before
+    // that, a read that comes back empty is "not installed yet" — the install
+    // ceremony can still publish while this server is already running — and the
+    // existing unauthenticated path owns that message.
+    let served = false;
+    const readOwn = async (storage) => bound === null ? await storage.read() : await storage.read(bound);
+    return {
+        async bind() {
+            const storage = await openStorage();
+            const data = await readOwn(storage);
+            if (data !== null &&
+                data.agent_session_token !== undefined &&
+                data.account_id !== undefined) {
+                bound = data.account_id;
+                served = true;
+            }
+            return data;
+        },
+        async inspect() {
+            if (bound === null || !served)
+                return { problem: null };
+            let storage;
+            let data;
+            try {
+                storage = await openStorage();
+                data = await storage.read(bound);
+            }
+            catch {
+                // A transient read failure is not evidence the account is gone. Stay
+                // quiet and let the existing unauthenticated path report it.
+                return { problem: null };
+            }
+            if (data !== null)
+                return { problem: null };
+            const available = await storage.listAccounts().catch(() => []);
+            const error = new AccountSessionMissingError(bound, available, self);
+            return { problem: { code: error.code, message: error.message } };
+        },
+        boundAccountId: () => bound,
+    };
+}
+//# sourceMappingURL=session-guard.js.map

package/dist/session-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-guard.js","sourceRoot":"","sources":["../src/session-guard.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,0EAA0E;AAC1E,8EAA8E;AAC9E,sCAAsC;AACtC,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,6DAA6D;AAE7D,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,GAGnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAqBvC,+EAA+E;AAC/E,EAAE;AACF,uEAAuE;AACvE,4EAA4E;AAC5E,6EAA6E;AAC7E,wEAAwE;AACxE,6EAA6E;AAC7E,0EAA0E;AAC1E,mEAAmE;AACnE,IAAI,cAAc,GAAkB,IAAI,CAAC;AAEzC,MAAM,UAAU,mBAAmB,CAAC,SAAwB;IAC1D,cAAc,GAAG,SAAS,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,IAAI,cAAc,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC;IACnD,OAAO,cAAc,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,UAII,EAAE;IAEN,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,kBAAkB,EAAE,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACpE,MAAM,UAAU,GAAG,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;IACjF,IAAI,KAAK,GAAkB,UAAU,IAAI,IAAI,CAAC;IAC9C,yEAAyE;IACzE,0EAA0E;IAC1E,4EAA4E;IAC5E,mDAAmD;IACnD,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,MAAM,OAAO,GAAG,KAAK,EAAE,OAAqB,EAA+B,EAAE,CAC3E,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEpE,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACpC,IACE,IAAI,KAAK,IAAI;gBACb,IAAI,CAAC,mBAAmB,KAAK,SAAS;gBACtC,IAAI,CAAC,UAAU,KAAK,SAAS,EAC7B,CAAC;gBACD,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC;gBACxB,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,KAAK,CAAC,OAAO;YACX,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACxD,IAAI,OAAqB,CAAC;YAC1B,IAAI,IAAwB,CAAC;YAC7B,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;gBAC9B,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;gBACrE,6DAA6D;gBAC7D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC;YACD,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/D,MAAM,KAAK,GAAG,IAAI,0BAA0B,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YACrE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACnE,CAAC;QAED,cAAc,EAAE,GAAG,EAAE,CAAC,KAAK;KAC5B,CAAC;AACJ,CAAC"}

package/dist/session.d.ts

@@ -8,21 +8,65 @@ export interface SessionData {
     consent_skillify_telemetry?: boolean;
     consent_operator_inbox_otp?: boolean;
 }
-export interface SessionStorage {
-    read(): Promise<SessionData | null>;
-    write(data: SessionData): Promise<void>;
-    clear(): Promise<void>;
-    backendName(): string;
+/**
+ * Slot for an entry whose claim has not landed yet, so it has no account to be
+ * keyed by. A real account_id is a ULID, so this can never collide with one.
+ */
+export declare const UNBOUND_ACCOUNT_KEY = "__unbound__";
+export declare function accountKey(data: SessionData): string;
+/**
+ * The account entry a server bound to is gone — logged out, or erased by hand.
+ * Loud rather than an empty read, because an empty read reports "not installed"
+ * for a machine that is installed, just not under this account any more.
+ */
+export declare class AccountSessionMissingError extends Error {
+    readonly accountId: string;
+    readonly available: string[];
+    readonly code = "account_session_missing";
+    constructor(accountId: string, available: string[], self?: {
+        pid: number;
+        version: string;
+    });
 }
-export declare function openSessionStorage(options?: {
-    preferFile?: boolean;
-}): Promise<SessionStorage>;
-export declare class FileStorage implements SessionStorage {
-    private readonly filePath;
+export declare class SessionStore {
+    /** The current-account pointer and pre-per-account compatibility mirror. */
+    readonly path: string;
+    private readonly dir;
     constructor(filePath?: string);
-    read(): Promise<SessionData | null>;
+    private get sessionsDir();
+    private accountFile;
+    private readJson;
+    /**
+     * The legacy flat pointer/mirror. Also the pre-per-account file, which is
+     * why a read falls back to it: an install that predates `sessions/` has its
+     * only copy here, and reading must not require migrating it first.
+     */
+    private readPointer;
+    private writeAtomic;
+    private writeAtomicIfMissing;
+    /** Every account installed on this machine. */
+    listAccounts(): Promise<string[]>;
+    /** The account the most recent connect bound, for a reader that has no own. */
+    currentAccountId(): Promise<string | null>;
+    /**
+     * One account's entry. With `accountId`, ONLY that account's file — a caller
+     * bound to an account never silently reads another's. Without it, the account
+     * the most recent connect bound.
+     */
+    read(accountId?: string): Promise<SessionData | null>;
+    /**
+     * Upsert ONE account's entry. Structurally cannot touch another account's:
+     * it writes that account's own file, then refreshes the pointer/mirror.
+     */
     write(data: SessionData): Promise<void>;
-    clear(): Promise<void>;
-    backendName(): string;
+    /**
+     * Remove ONE account's entry (the current one by default). Other accounts'
+     * files are untouched; the pointer moves to a survivor, or is deleted when
+     * nothing is left.
+     */
+    clear(accountId?: string): Promise<void>;
 }
+export declare function openSessionStorage(options?: {
+    filePath?: string;
+}): Promise<SessionStore>;
 //# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAyCA,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IAapB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAG/B,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,WAAW,IAAI,MAAM,CAAC;CACvB;AAKD,wBAAsB,kBAAkB,CACtC,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACrC,OAAO,CAAC,cAAc,CAAC,CAOzB;AA0GD,qBAAa,WAAY,YAAW,cAAc;IAChD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAKtB,QAAQ,CAAC,EAAE,MAAM;IAIvB,IAAI,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAanC,KAAK,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ5B,WAAW,IAAI,MAAM;CAGtB"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AA6CA,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IAMpB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAG/B,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACtC;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,gBAAgB,CAAC;AAEjD,wBAAgB,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAGpD;AAED;;;;GAIG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IAGjD,QAAQ,CAAC,SAAS,EAAE,MAAM;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE;IAH9B,QAAQ,CAAC,IAAI,6BAA6B;gBAE/B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EAAE,EAC5B,IAAI,GAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAA2C;CAalF;AAqBD,qBAAa,YAAY;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;gBAKjB,QAAQ,CAAC,EAAE,MAAM;IAK7B,OAAO,KAAK,WAAW,GAEtB;IAED,OAAO,CAAC,WAAW;YAIL,QAAQ;IAStB;;;;OAIG;YACW,WAAW;YAIX,WAAW;YAiBX,oBAAoB;IAkBlC,+CAA+C;IACzC,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAoBvC,+EAA+E;IACzE,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAOhD;;;;OAIG;IACG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAe3D;;;OAGG;IACG,KAAK,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA6B7C;;;;OAIG;IACG,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAoC/C;AAED,wBAAsB,kBAAkB,CACtC,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAClC,OAAO,CAAC,YAAY,CAAC,CAEvB"}