@xurenxiang1219/pingcode-mcp 0.3.1

package/dist/write/runtime.d.ts

@@ -0,0 +1,90 @@
+import type { AuthInfo } from "@modelcontextprotocol/sdk/server/auth/types.js";
+import type { AppConfig } from "../config.js";
+import type { Logger } from "../logger.js";
+import { type ApprovalPayload, type WriteResourceType } from "./approval.js";
+import { type WriteAction, type WriteConfirmationPolicy } from "../mcp/write-approval.js";
+export interface ApprovalContextResult {
+    approvalContextId: string;
+    sessionBinding: string;
+    evidenceHash: string;
+    expiresAt: string;
+}
+export interface ResolvedApprovalContext extends ApprovalContextResult {
+    resourceType: WriteResourceType;
+    requestHash: string;
+    agentSessionIdHash: string | null;
+}
+export interface WriteRuntime {
+    readonly enabled: boolean;
+    readonly confirmationPolicy: WriteConfirmationPolicy;
+    readonly approvalTtlSeconds: number;
+    requiresConfirmation(actions: readonly WriteAction[]): boolean;
+    assertMcpWriteScope(scopes: string[] | undefined): void;
+    createApprovalContext(input: {
+        resourceType: WriteResourceType;
+        requestHash: string;
+        evidenceHash: string;
+        agentSessionId?: string;
+        authInfo?: AuthInfo;
+    }): Promise<ApprovalContextResult>;
+    resolveApprovalContext(approvalContextId: string): Promise<ResolvedApprovalContext>;
+    findApprovalContextIdForRequest(input: {
+        resourceType: WriteResourceType;
+        requestHash: string;
+        agentSessionId?: string;
+        authInfo?: AuthInfo;
+    }): Promise<string | undefined>;
+    commit<T>(input: {
+        resourceType: WriteResourceType;
+        requestHash: string;
+        evidenceHash: string;
+        approvalContextId: string;
+        sessionBinding: string;
+        agentSessionId?: string;
+        approvalToken: string;
+        idempotencyKey: string;
+        authInfo?: AuthInfo;
+        action: () => Promise<T>;
+    }): Promise<{
+        result: T;
+        replayed: boolean;
+        approval: ApprovalPayload;
+        auditId: string;
+    }>;
+    commitInteractive<T>(input: {
+        resourceType: WriteResourceType;
+        requestHash: string;
+        evidenceHash: string;
+        approvalContextId: string;
+        sessionBinding: string;
+        agentSessionId?: string;
+        idempotencyKey: string;
+        authInfo?: AuthInfo;
+        action: () => Promise<T>;
+    }): Promise<{
+        result: T;
+        replayed: boolean;
+        approval: ApprovalPayload;
+        auditId: string;
+    }>;
+    commitAutomatic<T>(input: {
+        resourceType: WriteResourceType;
+        requestHash: string;
+        evidenceHash: string;
+        approvalContextId: string;
+        sessionBinding: string;
+        agentSessionId?: string;
+        idempotencyKey: string;
+        authInfo?: AuthInfo;
+        action: () => Promise<T>;
+    }): Promise<{
+        result: T;
+        replayed: boolean;
+        approval: ApprovalPayload;
+        auditId: string;
+    }>;
+    ping(): Promise<void>;
+    close(): Promise<void>;
+}
+export declare function createWriteRuntime(config: AppConfig, logger: Logger): WriteRuntime;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/write/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/write/runtime.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gDAAgD,CAAC;AAC/E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AAQvB,OAAO,EAA6B,KAAK,WAAW,EAAE,KAAK,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAErH,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAwB,SAAQ,qBAAqB;IACpE,YAAY,EAAE,iBAAiB,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;IACrD,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,oBAAoB,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,OAAO,CAAC;IAC/D,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;IACxD,qBAAqB,CAAC,KAAK,EAAE;QAC3B,YAAY,EAAE,iBAAiB,CAAC;QAChC,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACrB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnC,sBAAsB,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpF,+BAA+B,CAAC,KAAK,EAAE;QACrC,YAAY,EAAE,iBAAiB,CAAC;QAChC,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACrB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE;QACf,YAAY,EAAE,iBAAiB,CAAC;QAChC,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,QAAQ,CAAC;QACpB,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;KAC1B,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,CAAC,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,eAAe,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1F,iBAAiB,CAAC,CAAC,EAAE,KAAK,EAAE;QAC1B,YAAY,EAAE,iBAAiB,CAAC;QAChC,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,QAAQ,CAAC;QACpB,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;KAC1B,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,CAAC,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,eAAe,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1F,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE;QACxB,YAAY,EAAE,iBAAiB,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAC;QACtG,cAAc,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;QAC7F,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;KAC1B,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,CAAC,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,eAAe,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1F,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,CAMlF"}

package/dist/write/runtime.js

@@ -0,0 +1,244 @@
+import { createHash, randomUUID } from "node:crypto";
+import { PingCodeError } from "../pingcode/errors.js";
+import { createApprovalToken, verifyApprovalToken, } from "./approval.js";
+import { MemoryWriteStateStore, RedisWriteStateStore, } from "./store.js";
+import { requiresWriteConfirmation } from "../mcp/write-approval.js";
+export function createWriteRuntime(config, logger) {
+    const store = config.write.store === "redis"
+        ? new RedisWriteStateStore(config.write.redisUrl)
+        : new MemoryWriteStateStore();
+    return new DefaultWriteRuntime(config, store, logger);
+}
+class DefaultWriteRuntime {
+    config;
+    store;
+    logger;
+    enabled;
+    confirmationPolicy;
+    approvalTtlSeconds;
+    constructor(config, store, logger) {
+        this.config = config;
+        this.store = store;
+        this.logger = logger;
+        this.enabled = true;
+        this.confirmationPolicy = config.write.confirmation;
+        this.approvalTtlSeconds = config.write.approvalTtlSeconds;
+    }
+    requiresConfirmation(actions) {
+        return requiresWriteConfirmation(this.confirmationPolicy, actions);
+    }
+    async createApprovalContext(input) {
+        const approvalContextId = randomUUID();
+        const credentialBinding = this.credentialBinding(input.authInfo);
+        const agentSessionIdHash = input.agentSessionId ? hash(input.agentSessionId) : null;
+        const sessionBinding = this.sessionBinding(credentialBinding, approvalContextId, agentSessionIdHash);
+        const expiresAt = new Date(Date.now() + this.approvalTtlSeconds * 1000).toISOString();
+        const record = {
+            status: "pending",
+            requestHash: input.requestHash,
+            evidenceHash: input.evidenceHash,
+            resourceType: input.resourceType,
+            credentialBinding,
+            sessionBinding,
+            agentSessionIdHash,
+            expiresAt,
+        };
+        await this.store.putApprovalContext(hash(approvalContextId), record, this.approvalTtlSeconds, {
+            key: this.requestIndexKey(input.resourceType, input.requestHash, credentialBinding, agentSessionIdHash),
+            approvalContextId,
+        });
+        return { approvalContextId, sessionBinding, evidenceHash: input.evidenceHash, expiresAt };
+    }
+    /**
+     * Recover the Approval Context id for a plan that Commit re-sent verbatim.
+     * Keyed by resource type, request hash and the same credential/agent binding
+     * used by the context itself, so a plan can only resolve back to a Preview
+     * created by the same caller.
+     */
+    async findApprovalContextIdForRequest(input) {
+        return this.store.findApprovalContextIdByRequest(this.requestIndexKey(input.resourceType, input.requestHash, this.credentialBinding(input.authInfo), input.agentSessionId ? hash(input.agentSessionId) : null));
+    }
+    requestIndexKey(resourceType, requestHashValue, credentialBinding, agentSessionIdHash) {
+        return hash(`${resourceType}:${requestHashValue}:${credentialBinding}:${agentSessionIdHash ?? ""}`);
+    }
+    async resolveApprovalContext(approvalContextId) {
+        const record = await this.store.getApprovalContext(hash(approvalContextId));
+        if (!record) {
+            throw new PingCodeError("Preview 的 Approval Context 已失效或不存在", "APPROVAL_CONTEXT_INVALID");
+        }
+        return {
+            approvalContextId,
+            resourceType: record.resourceType,
+            requestHash: record.requestHash,
+            evidenceHash: record.evidenceHash,
+            sessionBinding: record.sessionBinding,
+            agentSessionIdHash: record.agentSessionIdHash,
+            expiresAt: record.expiresAt,
+        };
+    }
+    async commit(input) {
+        if (!this.config.write.approvalSecret) {
+            throw new PingCodeError("PingCode 寫入 Approval Secret 尚未配置", "WRITE_DISABLED");
+        }
+        const credentialBinding = this.credentialBinding(input.authInfo);
+        const storedContext = await this.store.getApprovalContext(hash(input.approvalContextId));
+        const agentSessionIdHash = input.agentSessionId
+            ? hash(input.agentSessionId)
+            : storedContext?.agentSessionIdHash ?? null;
+        const expectedSessionBinding = this.sessionBinding(credentialBinding, input.approvalContextId, agentSessionIdHash);
+        if (input.sessionBinding !== expectedSessionBinding) {
+            throw new PingCodeError("Agent 會話與 Preview 審批上下文不一致", "SESSION_BINDING_MISMATCH");
+        }
+        const approval = verifyApprovalToken(input.approvalToken, this.config.write.approvalSecret, {
+            approvalContextId: input.approvalContextId,
+            sessionBinding: input.sessionBinding,
+            evidenceHash: input.evidenceHash,
+            requestHash: input.requestHash,
+            resourceType: input.resourceType,
+        });
+        const keyHash = hash(`${credentialBinding}:${agentSessionIdHash ?? "no-agent-session"}:${input.idempotencyKey}`);
+        const contextClaim = await this.store.claimApprovalContext(hash(input.approvalContextId), {
+            requestHash: input.requestHash,
+            evidenceHash: input.evidenceHash,
+            resourceType: input.resourceType,
+            credentialBinding,
+            sessionBinding: input.sessionBinding,
+            agentSessionIdHash,
+        }, keyHash, this.config.write.idempotencyTtlSeconds);
+        if (contextClaim === "missing" || contextClaim === "mismatch") {
+            throw new PingCodeError("Approval Context 已失效或不適用於本次 Commit", "APPROVAL_CONTEXT_INVALID");
+        }
+        if (contextClaim === "conflict") {
+            throw new PingCodeError("Approval Context 已由另一個幂等寫入使用", "APPROVAL_CONTEXT_INVALID");
+        }
+        const existing = await this.store.get(keyHash);
+        if (existing) {
+            if (existing.requestHash !== input.requestHash) {
+                throw new PingCodeError("此 idempotency key 已用於不同的 Preview", "IDEMPOTENCY_CONFLICT");
+            }
+            if (existing.status === "completed") {
+                return { result: existing.result, replayed: true, approval, auditId: existing.auditId };
+            }
+            throw new PingCodeError(existing.status === "failed"
+                ? "先前寫入未完整成功，必須人工核對 PingCode 後再決定後續處理"
+                : "相同 idempotency key 的寫入仍在執行中", "IDEMPOTENCY_CONFLICT");
+        }
+        const startedAt = new Date().toISOString();
+        const auditId = randomUUID();
+        const claimed = await this.store.claim(keyHash, { status: "in_progress", requestHash: input.requestHash, auditId, startedAt }, this.config.write.idempotencyTtlSeconds);
+        if (!claimed) {
+            throw new PingCodeError("相同 idempotency key 的寫入已被其他請求取得", "IDEMPOTENCY_CONFLICT");
+        }
+        this.logger.info("PingCode 寫入已通過 Approval 並取得幂等鎖", {
+            requestHash: input.requestHash,
+            approvalContextIdHash: hash(input.approvalContextId),
+            sessionBinding: input.sessionBinding,
+            idempotencyKeyHash: keyHash,
+            resourceType: input.resourceType,
+            approvedBy: approval.approvedBy,
+            auditId,
+        });
+        try {
+            const result = await input.action();
+            await this.store.set(keyHash, {
+                status: "completed",
+                requestHash: input.requestHash,
+                auditId,
+                startedAt,
+                completedAt: new Date().toISOString(),
+                result,
+            }, this.config.write.idempotencyTtlSeconds);
+            this.logger.info("PingCode 寫入完成", {
+                requestHash: input.requestHash,
+                approvalContextIdHash: hash(input.approvalContextId),
+                sessionBinding: input.sessionBinding,
+                idempotencyKeyHash: keyHash,
+                resourceType: input.resourceType,
+                approvedBy: approval.approvedBy,
+                auditId,
+            });
+            return { result, replayed: false, approval, auditId };
+        }
+        catch (error) {
+            const errorCode = error instanceof PingCodeError ? error.code : "INTERNAL_ERROR";
+            const failed = {
+                status: "failed",
+                requestHash: input.requestHash,
+                auditId,
+                startedAt,
+                failedAt: new Date().toISOString(),
+                errorCode,
+            };
+            await this.store.set(keyHash, failed, this.config.write.idempotencyTtlSeconds);
+            this.logger.warn("PingCode 寫入失敗，已保留不可重試的稽核狀態", {
+                requestHash: input.requestHash,
+                approvalContextIdHash: hash(input.approvalContextId),
+                sessionBinding: input.sessionBinding,
+                idempotencyKeyHash: keyHash,
+                resourceType: input.resourceType,
+                approvedBy: approval.approvedBy,
+                errorCode,
+                auditId,
+            });
+            throw error;
+        }
+    }
+    async commitInteractive(input) {
+        if (!this.config.write.approvalSecret) {
+            throw new PingCodeError("PingCode 寫入 Approval Secret 尚未配置", "WRITE_DISABLED");
+        }
+        const approvalToken = createApprovalToken({
+            version: 2,
+            approvalContextId: input.approvalContextId,
+            sessionBinding: input.sessionBinding,
+            evidenceHash: input.evidenceHash,
+            requestHash: input.requestHash,
+            resourceType: input.resourceType,
+            approvedBy: "mcp-client-tool-confirmation",
+            expiresAt: new Date(Date.now() + 60_000).toISOString(),
+        }, this.config.write.approvalSecret);
+        return this.commit({ ...input, approvalToken });
+    }
+    async commitAutomatic(input) {
+        if (!this.config.write.approvalSecret)
+            throw new PingCodeError("PingCode 寫入 Approval Secret 尚未配置", "WRITE_DISABLED");
+        const approvalToken = createApprovalToken({
+            version: 2, approvalContextId: input.approvalContextId, sessionBinding: input.sessionBinding,
+            evidenceHash: input.evidenceHash, requestHash: input.requestHash, resourceType: input.resourceType,
+            approvedBy: "server-configured-auto-approval", expiresAt: new Date(Date.now() + 60_000).toISOString(),
+        }, this.config.write.approvalSecret);
+        return this.commit({ ...input, approvalToken });
+    }
+    assertMcpWriteScope(scopes) {
+        if (this.config.pingcode.authMode === "user_oauth" &&
+            (!scopes || !scopes.includes("pingcode:write"))) {
+            throw new PingCodeError("目前 MCP OAuth Token 不具備 pingcode:write scope", "PERMISSION_DENIED");
+        }
+    }
+    ping() {
+        return this.store.ping();
+    }
+    close() {
+        return this.store.close();
+    }
+    credentialBinding(authInfo) {
+        if (this.config.pingcode.authMode === "user_oauth") {
+            if (!authInfo) {
+                throw new PingCodeError("無法建立使用者寫入幂等邊界", "PERMISSION_DENIED");
+            }
+            const sessionId = authInfo.extra?.sessionId;
+            if (typeof sessionId !== "string" || !authInfo.clientId) {
+                throw new PingCodeError("無法建立使用者寫入幂等邊界", "PERMISSION_DENIED");
+            }
+            return hash(`user:${authInfo.clientId}:${sessionId}`);
+        }
+        return hash(`enterprise:${this.config.pingcode.apiBaseUrl}:${this.config.pingcode.credentials?.clientId ?? "unconfigured"}`);
+    }
+    sessionBinding(credentialBinding, approvalContextId, agentSessionIdHash) {
+        return hash(`${credentialBinding}:${agentSessionIdHash ?? hash(approvalContextId)}`);
+    }
+}
+function hash(value) {
+    return `sha256:${createHash("sha256").update(value, "utf8").digest("hex")}`;
+}
+//# sourceMappingURL=runtime.js.map

package/dist/write/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/write/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIrD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GAGpB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GAIrB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,yBAAyB,EAAkD,MAAM,0BAA0B,CAAC;AAmErH,MAAM,UAAU,kBAAkB,CAAC,MAAiB,EAAE,MAAc;IAClE,MAAM,KAAK,GACT,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO;QAC5B,CAAC,CAAC,IAAI,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,QAAS,CAAC;QAClD,CAAC,CAAC,IAAI,qBAAqB,EAAE,CAAC;IAClC,OAAO,IAAI,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,mBAAmB;IAMJ;IACA;IACA;IAPV,OAAO,CAAU;IACjB,kBAAkB,CAA0B;IAC5C,kBAAkB,CAAS;IAEpC,YACmB,MAAiB,EACjB,KAAsB,EACtB,MAAc;QAFd,WAAM,GAAN,MAAM,CAAW;QACjB,UAAK,GAAL,KAAK,CAAiB;QACtB,WAAM,GAAN,MAAM,CAAQ;QAE/B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QACpD,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAC5D,CAAC;IAED,oBAAoB,CAAC,OAA+B;QAClD,OAAO,yBAAyB,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,KAM3B;QACC,MAAM,iBAAiB,GAAG,UAAU,EAAE,CAAC;QACvC,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjE,MAAM,kBAAkB,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpF,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CACxC,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,CACnB,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACtF,MAAM,MAAM,GAA0B;YACpC,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,iBAAiB;YACjB,cAAc;YACd,kBAAkB;YAClB,SAAS;SACV,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CACjC,IAAI,CAAC,iBAAiB,CAAC,EACvB,MAAM,EACN,IAAI,CAAC,kBAAkB,EACvB;YACE,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,CAAC;YACvG,iBAAiB;SAClB,CACF,CAAC;QACF,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC;IAC5F,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,+BAA+B,CAAC,KAKrC;QACC,OAAO,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAC9C,IAAI,CAAC,eAAe,CAClB,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,WAAW,EACjB,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,EACtC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CACzD,CACF,CAAC;IACJ,CAAC;IAEO,eAAe,CACrB,YAA+B,EAC/B,gBAAwB,EACxB,iBAAyB,EACzB,kBAAiC;QAEjC,OAAO,IAAI,CAAC,GAAG,YAAY,IAAI,gBAAgB,IAAI,iBAAiB,IAAI,kBAAkB,IAAI,EAAE,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,iBAAyB;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,aAAa,CAAC,oCAAoC,EAAE,0BAA0B,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO;YACL,iBAAiB;YACjB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAI,KAWf;QACC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YACtC,MAAM,IAAI,aAAa,CAAC,kCAAkC,EAAE,gBAAgB,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACzF,MAAM,kBAAkB,GAAG,KAAK,CAAC,cAAc;YAC7C,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;YAC5B,CAAC,CAAC,aAAa,EAAE,kBAAkB,IAAI,IAAI,CAAC;QAC9C,MAAM,sBAAsB,GAAG,IAAI,CAAC,cAAc,CAChD,iBAAiB,EACjB,KAAK,CAAC,iBAAiB,EACvB,kBAAkB,CACnB,CAAC;QACF,IAAI,KAAK,CAAC,cAAc,KAAK,sBAAsB,EAAE,CAAC;YACpD,MAAM,IAAI,aAAa,CAAC,4BAA4B,EAAE,0BAA0B,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE;YAC1F,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAClB,GAAG,iBAAiB,IAAI,kBAAkB,IAAI,kBAAkB,IAAI,KAAK,CAAC,cAAc,EAAE,CAC3F,CAAC;QACF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CACxD,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAC7B;YACE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,iBAAiB;YACjB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,kBAAkB;SACnB,EACD,OAAO,EACP,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CACxC,CAAC;QACF,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;YAC9D,MAAM,IAAI,aAAa,CACrB,oCAAoC,EACpC,0BAA0B,CAC3B,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;YAChC,MAAM,IAAI,aAAa,CACrB,8BAA8B,EAC9B,0BAA0B,CAC3B,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC/C,MAAM,IAAI,aAAa,CAAC,kCAAkC,EAAE,sBAAsB,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACpC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC/F,CAAC;YACD,MAAM,IAAI,aAAa,CACrB,QAAQ,CAAC,MAAM,KAAK,QAAQ;gBAC1B,CAAC,CAAC,oCAAoC;gBACtC,CAAC,CAAC,6BAA6B,EACjC,sBAAsB,CACvB,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACpC,OAAO,EACP,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,EAC7E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CACxC,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CAAC,gCAAgC,EAAE,sBAAsB,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;YACjD,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;YACpD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,kBAAkB,EAAE,OAAO;YAC3B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO;SACR,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAClB,OAAO,EACP;gBACE,MAAM,EAAE,WAAW;gBACnB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO;gBACP,SAAS;gBACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,MAAM;aACP,EACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CACxC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBACpD,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,kBAAkB,EAAE,OAAO;gBAC3B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO;aACR,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,KAAK,YAAY,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACjF,MAAM,MAAM,GAAgB;gBAC1B,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO;gBACP,SAAS;gBACT,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAClC,SAAS;aACV,CAAC;YACF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC/E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;gBAC7C,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBACpD,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,kBAAkB,EAAE,OAAO;gBAC3B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,SAAS;gBACT,OAAO;aACR,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAI,KAU1B;QACC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YACtC,MAAM,IAAI,aAAa,CAAC,kCAAkC,EAAE,gBAAgB,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,aAAa,GAAG,mBAAmB,CACvC;YACE,OAAO,EAAE,CAAC;YACV,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,UAAU,EAAE,8BAA8B;YAC1C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;SACvD,EACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CACjC,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,eAAe,CAAI,KAIxB;QACC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc;YAAE,MAAM,IAAI,aAAa,CAAC,kCAAkC,EAAE,gBAAgB,CAAC,CAAC;QACrH,MAAM,aAAa,GAAG,mBAAmB,CAAC;YACxC,OAAO,EAAE,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc;YAC5F,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY;YAClG,UAAU,EAAE,iCAAiC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;SACtG,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,mBAAmB,CAAC,MAA4B;QAC9C,IACE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,YAAY;YAC9C,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAC/C,CAAC;YACD,MAAM,IAAI,aAAa,CAAC,6CAA6C,EAAE,mBAAmB,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAEO,iBAAiB,CAAC,QAA8B;QACtD,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;YAC5C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACxD,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,QAAQ,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,IAAI,CACT,cAAc,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,IAAI,cAAc,EAAE,CAChH,CAAC;IACJ,CAAC;IAEO,cAAc,CACpB,iBAAyB,EACzB,iBAAyB,EACzB,kBAAiC;QAEjC,OAAO,IAAI,CAAC,GAAG,iBAAiB,IAAI,kBAAkB,IAAI,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;CACF;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC9E,CAAC"}

package/dist/write/store.d.ts

@@ -0,0 +1,101 @@
+import type { WriteResourceType } from "./approval.js";
+export type WriteRecord = {
+    status: "in_progress";
+    requestHash: string;
+    auditId: string;
+    startedAt: string;
+} | {
+    status: "completed";
+    requestHash: string;
+    auditId: string;
+    startedAt: string;
+    completedAt: string;
+    result: unknown;
+} | {
+    status: "failed";
+    requestHash: string;
+    auditId: string;
+    startedAt: string;
+    failedAt: string;
+    errorCode: string;
+};
+export interface ApprovalContextRecord {
+    status: "pending" | "claimed";
+    requestHash: string;
+    evidenceHash: string;
+    resourceType: WriteResourceType;
+    credentialBinding: string;
+    sessionBinding: string;
+    agentSessionIdHash: string | null;
+    expiresAt: string;
+    idempotencyKeyHash?: string;
+}
+export type ApprovalContextClaimResult = "claimed" | "replayed" | "missing" | "mismatch" | "conflict";
+export interface ApprovalContextExpectation {
+    requestHash: string;
+    evidenceHash: string;
+    resourceType: WriteResourceType;
+    credentialBinding: string;
+    sessionBinding: string;
+    agentSessionIdHash: string | null;
+}
+export interface WriteStateStore {
+    get(key: string): Promise<WriteRecord | undefined>;
+    getApprovalContext(key: string): Promise<ApprovalContextRecord | undefined>;
+    /**
+     * Reverse lookup from a request-hash key to the Approval Context id created by
+     * Preview. Commit re-sends the identical plan, so the Server can recover the
+     * context itself instead of requiring the Agent to echo an id it never sees:
+     * `_meta` is not surfaced to the model by most MCP Clients.
+     */
+    findApprovalContextIdByRequest(key: string): Promise<string | undefined>;
+    claim(key: string, record: WriteRecord, ttlSeconds: number): Promise<boolean>;
+    set(key: string, record: WriteRecord, ttlSeconds: number): Promise<void>;
+    putApprovalContext(key: string, record: ApprovalContextRecord, ttlSeconds: number, requestIndex?: {
+        key: string;
+        approvalContextId: string;
+    }): Promise<void>;
+    claimApprovalContext(key: string, expected: ApprovalContextExpectation, idempotencyKeyHash: string, ttlSeconds: number): Promise<ApprovalContextClaimResult>;
+    ping(): Promise<void>;
+    close(): Promise<void>;
+}
+export declare class MemoryWriteStateStore implements WriteStateStore {
+    private readonly now;
+    private readonly entries;
+    private readonly approvalContexts;
+    private readonly requestIndex;
+    constructor(now?: () => number);
+    findApprovalContextIdByRequest(key: string): Promise<string | undefined>;
+    get(key: string): Promise<WriteRecord | undefined>;
+    getApprovalContext(key: string): Promise<ApprovalContextRecord | undefined>;
+    claim(key: string, record: WriteRecord, ttlSeconds: number): Promise<boolean>;
+    set(key: string, record: WriteRecord, ttlSeconds: number): Promise<void>;
+    putApprovalContext(key: string, record: ApprovalContextRecord, ttlSeconds: number, requestIndex?: {
+        key: string;
+        approvalContextId: string;
+    }): Promise<void>;
+    claimApprovalContext(key: string, expected: ApprovalContextExpectation, idempotencyKeyHash: string, ttlSeconds: number): Promise<ApprovalContextClaimResult>;
+    ping(): Promise<void>;
+    close(): Promise<void>;
+}
+export declare class RedisWriteStateStore implements WriteStateStore {
+    private readonly client;
+    constructor(redisUrl: string);
+    get(key: string): Promise<WriteRecord | undefined>;
+    getApprovalContext(key: string): Promise<ApprovalContextRecord | undefined>;
+    findApprovalContextIdByRequest(key: string): Promise<string | undefined>;
+    claim(key: string, record: WriteRecord, ttlSeconds: number): Promise<boolean>;
+    set(key: string, record: WriteRecord, ttlSeconds: number): Promise<void>;
+    putApprovalContext(key: string, record: ApprovalContextRecord, ttlSeconds: number, requestIndex?: {
+        key: string;
+        approvalContextId: string;
+    }): Promise<void>;
+    claimApprovalContext(key: string, expected: ApprovalContextExpectation, idempotencyKeyHash: string, ttlSeconds: number): Promise<ApprovalContextClaimResult>;
+    ping(): Promise<void>;
+    close(): Promise<void>;
+    private connect;
+    private key;
+    private contextKey;
+    private requestIndexKey;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/write/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/write/store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,MAAM,WAAW,GACnB;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAClF;IACE,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;CACjB,GACD;IACE,MAAM,EAAE,QAAQ,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEN,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,iBAAiB,CAAC;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,0BAA0B,GAClC,SAAS,GACT,UAAU,GACV,SAAS,GACT,UAAU,GACV,UAAU,CAAC;AAEf,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,iBAAiB,CAAC;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IACnD,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAC5E;;;;;OAKG;IACH,8BAA8B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9E,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,kBAAkB,CAChB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,qBAAqB,EAC7B,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,GACxD,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,oBAAoB,CAClB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,0BAA0B,EACpC,kBAAkB,EAAE,MAAM,EAC1B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACvC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAYD,qBAAa,qBAAsB,YAAW,eAAe;IAK/C,OAAO,CAAC,QAAQ,CAAC,GAAG;IAJhC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAC1D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAiD;IAClF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyE;gBAEzE,GAAG,GAAE,MAAM,MAAiB;IAEnD,8BAA8B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IASxE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAYlD,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC;IAS3E,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAY7E,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxE,kBAAkB,CACtB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,qBAAqB,EAC7B,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,GACxD,OAAO,CAAC,IAAI,CAAC;IAWV,oBAAoB,CACxB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,0BAA0B,EACpC,kBAAkB,EAAE,MAAM,EAC1B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,0BAA0B,CAAC;IAiBhC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAErB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAK7B;AAED,qBAAa,oBAAqB,YAAW,eAAe;IAC1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;gBAE7C,QAAQ,EAAE,MAAM;IAOtB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAMlD,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC;IAM3E,8BAA8B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAMxE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQ7E,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKxE,kBAAkB,CACtB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,qBAAqB,EAC7B,UAAU,EAAE,MAAM,EAClB,YAAY,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,GACxD,OAAO,CAAC,IAAI,CAAC;IAUV,oBAAoB,CACxB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,0BAA0B,EACpC,kBAAkB,EAAE,MAAM,EAC1B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,0BAA0B,CAAC;IAmBhC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAKrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAMd,OAAO;IAMrB,OAAO,CAAC,GAAG;IAIX,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,eAAe;CAGxB"}

package/dist/write/store.js

@@ -0,0 +1,201 @@
+import { createClient } from "redis";
+export class MemoryWriteStateStore {
+    now;
+    entries = new Map();
+    approvalContexts = new Map();
+    requestIndex = new Map();
+    constructor(now = Date.now) {
+        this.now = now;
+    }
+    async findApprovalContextIdByRequest(key) {
+        const entry = this.requestIndex.get(key);
+        if (!entry || entry.expiresAtMs <= this.now()) {
+            this.requestIndex.delete(key);
+            return undefined;
+        }
+        return entry.approvalContextId;
+    }
+    async get(key) {
+        const entry = this.entries.get(key);
+        if (!entry) {
+            return undefined;
+        }
+        if (entry.expiresAtMs <= this.now()) {
+            this.entries.delete(key);
+            return undefined;
+        }
+        return entry.record;
+    }
+    async getApprovalContext(key) {
+        const entry = this.approvalContexts.get(key);
+        if (!entry || entry.expiresAtMs <= this.now()) {
+            this.approvalContexts.delete(key);
+            return undefined;
+        }
+        return entry.record;
+    }
+    async claim(key, record, ttlSeconds) {
+        const existing = this.entries.get(key);
+        if (existing) {
+            if (existing.expiresAtMs > this.now()) {
+                return false;
+            }
+            this.entries.delete(key);
+        }
+        this.entries.set(key, { record, expiresAtMs: this.now() + ttlSeconds * 1000 });
+        return true;
+    }
+    async set(key, record, ttlSeconds) {
+        this.entries.set(key, { record, expiresAtMs: this.now() + ttlSeconds * 1000 });
+    }
+    async putApprovalContext(key, record, ttlSeconds, requestIndex) {
+        const expiresAtMs = this.now() + ttlSeconds * 1000;
+        this.approvalContexts.set(key, { record, expiresAtMs });
+        if (requestIndex) {
+            this.requestIndex.set(requestIndex.key, {
+                approvalContextId: requestIndex.approvalContextId,
+                expiresAtMs,
+            });
+        }
+    }
+    async claimApprovalContext(key, expected, idempotencyKeyHash, ttlSeconds) {
+        const entry = this.approvalContexts.get(key);
+        if (!entry || entry.expiresAtMs <= this.now()) {
+            this.approvalContexts.delete(key);
+            return "missing";
+        }
+        if (!matchesApprovalContext(entry.record, expected)) {
+            return "mismatch";
+        }
+        if (entry.record.status === "claimed") {
+            return entry.record.idempotencyKeyHash === idempotencyKeyHash ? "replayed" : "conflict";
+        }
+        entry.record = { ...entry.record, status: "claimed", idempotencyKeyHash };
+        entry.expiresAtMs = this.now() + ttlSeconds * 1000;
+        return "claimed";
+    }
+    async ping() { }
+    async close() {
+        this.entries.clear();
+        this.approvalContexts.clear();
+        this.requestIndex.clear();
+    }
+}
+export class RedisWriteStateStore {
+    client;
+    constructor(redisUrl) {
+        this.client = createClient({ url: redisUrl });
+        this.client.on("error", () => {
+            // Redis URL 和錯誤正文可能含敏感資料，不在事件處理器中記錄。
+        });
+    }
+    async get(key) {
+        await this.connect();
+        const value = await this.client.get(this.key(key));
+        return value === null ? undefined : JSON.parse(value);
+    }
+    async getApprovalContext(key) {
+        await this.connect();
+        const value = await this.client.get(this.contextKey(key));
+        return value === null ? undefined : JSON.parse(value);
+    }
+    async findApprovalContextIdByRequest(key) {
+        await this.connect();
+        const value = await this.client.get(this.requestIndexKey(key));
+        return value === null ? undefined : value;
+    }
+    async claim(key, record, ttlSeconds) {
+        await this.connect();
+        return ((await this.client.set(this.key(key), JSON.stringify(record), { EX: ttlSeconds, NX: true })) ===
+            "OK");
+    }
+    async set(key, record, ttlSeconds) {
+        await this.connect();
+        await this.client.set(this.key(key), JSON.stringify(record), { EX: ttlSeconds });
+    }
+    async putApprovalContext(key, record, ttlSeconds, requestIndex) {
+        await this.connect();
+        await this.client.set(this.contextKey(key), JSON.stringify(record), { EX: ttlSeconds });
+        if (requestIndex) {
+            await this.client.set(this.requestIndexKey(requestIndex.key), requestIndex.approvalContextId, {
+                EX: ttlSeconds,
+            });
+        }
+    }
+    async claimApprovalContext(key, expected, idempotencyKeyHash, ttlSeconds) {
+        await this.connect();
+        const result = await this.client.eval(APPROVAL_CONTEXT_CLAIM_SCRIPT, {
+            keys: [this.contextKey(key)],
+            arguments: [
+                expected.requestHash,
+                expected.evidenceHash,
+                expected.resourceType,
+                expected.credentialBinding,
+                expected.sessionBinding,
+                expected.agentSessionIdHash ?? "",
+                idempotencyKeyHash,
+                String(ttlSeconds),
+            ],
+        });
+        const value = String(result);
+        return isApprovalContextClaimResult(value) ? value : "mismatch";
+    }
+    async ping() {
+        await this.connect();
+        await this.client.ping();
+    }
+    async close() {
+        if (this.client.isOpen) {
+            await this.client.quit();
+        }
+    }
+    async connect() {
+        if (!this.client.isOpen) {
+            await this.client.connect();
+        }
+    }
+    key(key) {
+        return `pingcode-mcp:write:${key}`;
+    }
+    contextKey(key) {
+        return `pingcode-mcp:write-context:${key}`;
+    }
+    requestIndexKey(key) {
+        return `pingcode-mcp:write-request:${key}`;
+    }
+}
+function matchesApprovalContext(record, expected) {
+    return (record.requestHash === expected.requestHash &&
+        record.evidenceHash === expected.evidenceHash &&
+        record.resourceType === expected.resourceType &&
+        record.credentialBinding === expected.credentialBinding &&
+        record.sessionBinding === expected.sessionBinding &&
+        record.agentSessionIdHash === expected.agentSessionIdHash);
+}
+function isApprovalContextClaimResult(value) {
+    return ["claimed", "replayed", "missing", "mismatch", "conflict"].includes(value);
+}
+const APPROVAL_CONTEXT_CLAIM_SCRIPT = `
+local value = redis.call('GET', KEYS[1])
+if not value then return 'missing' end
+local context = cjson.decode(value)
+local agentSessionIdHash = context.agentSessionIdHash
+if agentSessionIdHash == cjson.null then agentSessionIdHash = '' end
+if context.requestHash ~= ARGV[1]
+  or context.evidenceHash ~= ARGV[2]
+  or context.resourceType ~= ARGV[3]
+  or context.credentialBinding ~= ARGV[4]
+  or context.sessionBinding ~= ARGV[5]
+  or agentSessionIdHash ~= ARGV[6] then
+  return 'mismatch'
+end
+if context.status == 'claimed' then
+  if context.idempotencyKeyHash == ARGV[7] then return 'replayed' end
+  return 'conflict'
+end
+context.status = 'claimed'
+context.idempotencyKeyHash = ARGV[7]
+redis.call('SET', KEYS[1], cjson.encode(context), 'EX', ARGV[8])
+return 'claimed'
+`;
+//# sourceMappingURL=store.js.map