@zhixuan92/multi-model-agent-mcp 2.7.5 → 2.8.0

package/dist/http/cwd-validator.js

@@ -0,0 +1,31 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+export function validateCwd(cwd) {
+    if (!cwd)
+        return { ok: false, error: 'missing_cwd', message: "required query param 'cwd' not provided" };
+    if (!path.isAbsolute(cwd))
+        return { ok: false, error: 'invalid_cwd', message: `cwd must be absolute: ${cwd}` };
+    let canonical;
+    try {
+        canonical = fs.realpathSync(cwd);
+    }
+    catch (err) {
+        const code = err.code;
+        if (code === 'ENOENT')
+            return { ok: false, error: 'cwd_not_dir', message: `cwd does not exist: ${cwd}` };
+        if (code === 'EACCES' || code === 'EPERM')
+            return { ok: false, error: 'cwd_not_dir', message: `cwd is not accessible (permission denied): ${cwd}` };
+        return { ok: false, error: 'cwd_not_dir', message: `cwd cannot be resolved (${code ?? 'unknown error'}): ${cwd}` };
+    }
+    let stat;
+    try {
+        stat = fs.statSync(canonical);
+    }
+    catch {
+        return { ok: false, error: 'cwd_not_dir', message: `cwd realpath is not accessible: ${cwd} → ${canonical}` };
+    }
+    if (!stat.isDirectory())
+        return { ok: false, error: 'cwd_not_dir', message: `cwd is not a directory: ${cwd}` };
+    return { ok: true, canonicalCwd: canonical };
+}
+//# sourceMappingURL=cwd-validator.js.map

package/dist/http/cwd-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cwd-validator.js","sourceRoot":"","sources":["../../src/http/cwd-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAQlC,MAAM,UAAU,WAAW,CAAC,GAAuB;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IACzG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,yBAAyB,GAAG,EAAE,EAAE,CAAC;IAC/G,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,uBAAuB,GAAG,EAAE,EAAE,CAAC;QACzG,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,8CAA8C,GAAG,EAAE,EAAE,CAAC;QACpJ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,2BAA2B,IAAI,IAAI,eAAe,MAAM,GAAG,EAAE,EAAE,CAAC;IACrH,CAAC;IACD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,mCAAmC,GAAG,MAAM,SAAS,EAAE,EAAE,CAAC;IAC/G,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,2BAA2B,GAAG,EAAE,EAAE,CAAC;IAC/G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AAC/C,CAAC"}

package/dist/http/lifecycle-handlers.d.ts

@@ -0,0 +1,12 @@
+import type { Server as HttpServer } from 'node:http';
+import type { DiagnosticLogger } from '@zhixuan92/multi-model-agent-core';
+import type { ProjectRegistry } from './project-registry.js';
+import type { SessionRouter } from './session-router.js';
+export interface HttpLifecycleOptions {
+    shutdownDrainMs: number;
+    noExit?: boolean;
+}
+export declare function installHttpLifecycleHandlers(logger: DiagnosticLogger, httpServer: HttpServer, registry: ProjectRegistry, router: SessionRouter, options: HttpLifecycleOptions): void;
+/** Test-only. */
+export declare function __resetHttpLifecycleHandlersForTests(): void;
+//# sourceMappingURL=lifecycle-handlers.d.ts.map

package/dist/http/lifecycle-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-handlers.d.ts","sourceRoot":"","sources":["../../src/http/lifecycle-handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAKD,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,oBAAoB,GAC5B,IAAI,CA4EN;AAED,iBAAiB;AACjB,wBAAgB,oCAAoC,IAAI,IAAI,CAI3D"}

package/dist/http/lifecycle-handlers.js

@@ -0,0 +1,87 @@
+let installed = false;
+let cleanup = null;
+export function installHttpLifecycleHandlers(logger, httpServer, registry, router, options) {
+    if (installed)
+        return;
+    installed = true;
+    let shuttingDown = false;
+    const hasInFlight = () => {
+        for (const [, pc] of registry.entries()) {
+            if (pc.activeRequests > 0)
+                return true;
+        }
+        return false;
+    };
+    const drainAndExit = async (cause) => {
+        if (shuttingDown)
+            return;
+        shuttingDown = true;
+        registry.stopEvictionTimer();
+        await new Promise((resolve) => httpServer.close(() => resolve()));
+        const deadline = Date.now() + options.shutdownDrainMs;
+        while (Date.now() < deadline && hasInFlight()) {
+            await new Promise((r) => setTimeout(r, 50));
+        }
+        const timedOut = hasInFlight();
+        await router.closeAll();
+        registry.clear();
+        logger.shutdown(timedOut ? 'SIGTERM_drain_timeout' : cause);
+        if (!options.noExit)
+            process.exit(0);
+    };
+    const onSigterm = () => { void drainAndExit('SIGTERM'); };
+    const onSigint = () => { void drainAndExit('SIGINT'); };
+    const onSighup = () => { };
+    const onSigpipe = () => { };
+    const onStdinEnd = () => { };
+    const onStdoutError = () => { };
+    const onUncaught = (err) => {
+        logger.error('uncaughtException', err);
+        process.stderr.write(`[multi-model-agent] uncaughtException: ${err.stack ?? String(err)}\n`);
+        registry.stopEvictionTimer();
+        void router.closeAll().finally(() => {
+            registry.clear();
+            logger.shutdown('uncaughtException');
+            if (!options.noExit)
+                process.exit(1);
+        });
+    };
+    const onUnhandled = (reason) => {
+        logger.error('unhandledRejection', reason);
+        const stack = reason instanceof Error ? (reason.stack ?? reason.message) : String(reason);
+        process.stderr.write(`[multi-model-agent] unhandledRejection: ${stack}\n`);
+        registry.stopEvictionTimer();
+        void router.closeAll().finally(() => {
+            registry.clear();
+            logger.shutdown('unhandledRejection');
+            if (!options.noExit)
+                process.exit(1);
+        });
+    };
+    process.on('SIGTERM', onSigterm);
+    process.on('SIGINT', onSigint);
+    process.on('SIGHUP', onSighup);
+    process.on('SIGPIPE', onSigpipe);
+    process.stdin.on('end', onStdinEnd);
+    process.stdout.on('error', onStdoutError);
+    process.on('uncaughtException', onUncaught);
+    process.on('unhandledRejection', onUnhandled);
+    cleanup = () => {
+        process.off('SIGTERM', onSigterm);
+        process.off('SIGINT', onSigint);
+        process.off('SIGHUP', onSighup);
+        process.off('SIGPIPE', onSigpipe);
+        process.stdin.off('end', onStdinEnd);
+        process.stdout.off('error', onStdoutError);
+        process.off('uncaughtException', onUncaught);
+        process.off('unhandledRejection', onUnhandled);
+        installed = false;
+    };
+}
+/** Test-only. */
+export function __resetHttpLifecycleHandlersForTests() {
+    cleanup?.();
+    cleanup = null;
+    installed = false;
+}
+//# sourceMappingURL=lifecycle-handlers.js.map

package/dist/http/lifecycle-handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle-handlers.js","sourceRoot":"","sources":["../../src/http/lifecycle-handlers.ts"],"names":[],"mappings":"AAUA,IAAI,SAAS,GAAG,KAAK,CAAC;AACtB,IAAI,OAAO,GAAwB,IAAI,CAAC;AAExC,MAAM,UAAU,4BAA4B,CAC1C,MAAwB,EACxB,UAAsB,EACtB,QAAyB,EACzB,MAAqB,EACrB,OAA6B;IAE7B,IAAI,SAAS;QAAE,OAAO;IACtB,SAAS,GAAG,IAAI,CAAC;IACjB,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,MAAM,WAAW,GAAG,GAAY,EAAE;QAChC,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACxC,IAAI,EAAE,CAAC,cAAc,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QACzC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EAAE,KAA2B,EAAiB,EAAE;QACxE,IAAI,YAAY;YAAE,OAAO;QACzB,YAAY,GAAG,IAAI,CAAC;QACpB,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC;QACtD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,WAAW,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,GAAG,EAAE,GAAG,KAAK,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,KAAK,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,GAAG,EAAE,GAA4B,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,GAAG,EAAE,GAA4D,CAAC,CAAC;IACrF,MAAM,UAAU,GAAG,GAAG,EAAE,GAA4B,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,GAAG,EAAE,GAAgC,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,CAAC,GAAU,EAAE,EAAE;QAChC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7F,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAClC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YACrC,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,CAAC,MAAe,EAAE,EAAE;QACtC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,KAAK,IAAI,CAAC,CAAC;QAC3E,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAClC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;YACtC,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACpC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC1C,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;IAE9C,OAAO,GAAG,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACrC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;QAC/C,SAAS,GAAG,KAAK,CAAC;IACpB,CAAC,CAAC;AACJ,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,oCAAoC;IAClD,OAAO,EAAE,EAAE,CAAC;IACZ,OAAO,GAAG,IAAI,CAAC;IACf,SAAS,GAAG,KAAK,CAAC;AACpB,CAAC"}

package/dist/http/loopback.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Returns true iff the given address string refers to the loopback interface.
+ * Accepts all forms Node's socket layer surfaces:
+ *   - IPv4 loopback (any 127.0.0.0/8 address): 127.0.0.1, 127.0.1.1, etc.
+ *   - IPv6 loopback: ::1
+ *   - IPv4-mapped IPv6 loopback: ::ffff:127.0.0.1 (and other 127/8 mapped forms)
+ *   - Hostname: localhost
+ */
+export declare function isLoopbackAddress(addr: string | undefined): boolean;
+//# sourceMappingURL=loopback.d.ts.map

package/dist/http/loopback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback.d.ts","sourceRoot":"","sources":["../../src/http/loopback.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAoBnE"}

package/dist/http/loopback.js

@@ -0,0 +1,34 @@
+import * as net from 'node:net';
+/**
+ * Returns true iff the given address string refers to the loopback interface.
+ * Accepts all forms Node's socket layer surfaces:
+ *   - IPv4 loopback (any 127.0.0.0/8 address): 127.0.0.1, 127.0.1.1, etc.
+ *   - IPv6 loopback: ::1
+ *   - IPv4-mapped IPv6 loopback: ::ffff:127.0.0.1 (and other 127/8 mapped forms)
+ *   - Hostname: localhost
+ */
+export function isLoopbackAddress(addr) {
+    if (!addr)
+        return false;
+    if (addr === 'localhost')
+        return true;
+    // Strip any scope ID (fe80::1%lo0 style) — rare for loopback but cheap to handle.
+    const clean = addr.split('%')[0];
+    const kind = net.isIP(clean);
+    if (kind === 4) {
+        return clean.startsWith('127.');
+    }
+    if (kind === 6) {
+        if (clean === '::1')
+            return true;
+        // IPv4-mapped IPv6: ::ffff:A.B.C.D
+        const mappedPrefix = '::ffff:';
+        if (clean.toLowerCase().startsWith(mappedPrefix)) {
+            const v4 = clean.slice(mappedPrefix.length);
+            return net.isIPv4(v4) && v4.startsWith('127.');
+        }
+        return false;
+    }
+    return false;
+}
+//# sourceMappingURL=loopback.js.map

package/dist/http/loopback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback.js","sourceRoot":"","sources":["../../src/http/loopback.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAEhC;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAwB;IACxD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACtC,kFAAkF;IAClF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,IAAI,KAAK,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACjC,mCAAmC;QACnC,MAAM,YAAY,GAAG,SAAS,CAAC;QAC/B,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjD,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC5C,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/http/project-registry.d.ts

@@ -0,0 +1,48 @@
+import { type ProjectContext } from '@zhixuan92/multi-model-agent-core';
+export type ReserveError = 'project_cap' | 'invalid_cwd' | 'missing_cwd' | 'cwd_not_dir';
+export type ReserveResult = {
+    ok: true;
+    projectContext: ProjectContext;
+    created: boolean;
+} | {
+    ok: false;
+    error: ReserveError;
+    message: string;
+};
+export interface ProjectRegistryOptions {
+    cap: number;
+    idleEvictionMs: number;
+    evictionIntervalMs: number;
+    onProjectCreated?: (cwd: string) => void;
+    onProjectEvicted?: (cwd: string, idleMs: number) => void;
+}
+export declare class ProjectRegistry {
+    private readonly map;
+    private readonly cap;
+    private readonly idleEvictionMs;
+    private readonly evictionIntervalMs;
+    private evictionTimer;
+    private readonly onProjectCreated?;
+    private readonly onProjectEvicted?;
+    constructor(options: ProjectRegistryOptions);
+    startEvictionTimer(): void;
+    stopEvictionTimer(): void;
+    /** Synchronous lookup-or-create with cap enforcement. Increments pendingReservations on success. */
+    reserveProject(cwd: string): ReserveResult;
+    /**
+     * Called from onsessioninitialized. Decrements pendingReservations and registers the session.
+     * `canonicalCwd` MUST be the `.cwd` value returned from a prior `reserveProject` call.
+     */
+    attachSession(canonicalCwd: string, sessionId: string): void;
+    /** Detach a session. `canonicalCwd` must match `projectContext.cwd`. No-op if unknown. */
+    detachSession(canonicalCwd: string, sessionId: string): void;
+    /** Called if attachSession never fires. `canonicalCwd` must match `projectContext.cwd`. */
+    cancelReservation(canonicalCwd: string): void;
+    /** Look up a project by its canonical cwd. */
+    get(canonicalCwd: string): ProjectContext | undefined;
+    get size(): number;
+    entries(): IterableIterator<[string, ProjectContext]>;
+    evictIdle(): void;
+    clear(): void;
+}
+//# sourceMappingURL=project-registry.d.ts.map

package/dist/http/project-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-registry.d.ts","sourceRoot":"","sources":["../../src/http/project-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAG9F,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,aAAa,GAAG,aAAa,GAAG,aAAa,CAAC;AAEzF,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,cAAc,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAC9D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CAC1D;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqC;IACzD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,aAAa,CAA+B;IACpD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAwB;IAC1D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAwC;gBAE9D,OAAO,EAAE,sBAAsB;IAQ3C,kBAAkB,IAAI,IAAI;IAM1B,iBAAiB,IAAI,IAAI;IAKzB,oGAAoG;IACpG,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa;IAoB1C;;;OAGG;IACH,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAQ5D,0FAA0F;IAC1F,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAO5D,2FAA2F;IAC3F,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAO7C,8CAA8C;IAC9C,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAIrD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAEA,OAAO,IAAI,gBAAgB,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAItD,SAAS,IAAI,IAAI;IAuBjB,KAAK,IAAI,IAAI;CAQd"}

package/dist/http/project-registry.js

@@ -0,0 +1,119 @@
+import { createProjectContext } from '@zhixuan92/multi-model-agent-core';
+import { validateCwd } from './cwd-validator.js';
+export class ProjectRegistry {
+    map = new Map();
+    cap;
+    idleEvictionMs;
+    evictionIntervalMs;
+    evictionTimer = null;
+    onProjectCreated;
+    onProjectEvicted;
+    constructor(options) {
+        this.cap = options.cap;
+        this.idleEvictionMs = options.idleEvictionMs;
+        this.evictionIntervalMs = options.evictionIntervalMs;
+        this.onProjectCreated = options.onProjectCreated;
+        this.onProjectEvicted = options.onProjectEvicted;
+    }
+    startEvictionTimer() {
+        if (this.evictionTimer)
+            return;
+        this.evictionTimer = setInterval(() => this.evictIdle(), this.evictionIntervalMs);
+        this.evictionTimer.unref?.();
+    }
+    stopEvictionTimer() {
+        if (this.evictionTimer)
+            clearInterval(this.evictionTimer);
+        this.evictionTimer = null;
+    }
+    /** Synchronous lookup-or-create with cap enforcement. Increments pendingReservations on success. */
+    reserveProject(cwd) {
+        const v = validateCwd(cwd);
+        if (!v.ok)
+            return { ok: false, error: v.error, message: v.message };
+        const key = v.canonicalCwd;
+        const existing = this.map.get(key);
+        if (existing) {
+            existing.pendingReservations += 1;
+            existing.lastSeenAt = Date.now();
+            return { ok: true, projectContext: existing, created: false };
+        }
+        if (this.map.size >= this.cap) {
+            return { ok: false, error: 'project_cap', message: `server at ${this.cap} projects; close some connections and retry` };
+        }
+        const pc = createProjectContext(key);
+        pc.pendingReservations = 1;
+        this.map.set(key, pc);
+        this.onProjectCreated?.(key);
+        return { ok: true, projectContext: pc, created: true };
+    }
+    /**
+     * Called from onsessioninitialized. Decrements pendingReservations and registers the session.
+     * `canonicalCwd` MUST be the `.cwd` value returned from a prior `reserveProject` call.
+     */
+    attachSession(canonicalCwd, sessionId) {
+        const pc = this.map.get(canonicalCwd);
+        if (!pc)
+            throw new Error(`attachSession: no project for ${canonicalCwd} (did you pass the raw cwd instead of projectContext.cwd?)`);
+        pc.activeSessions.add(sessionId);
+        if (pc.pendingReservations > 0)
+            pc.pendingReservations -= 1;
+        pc.lastSeenAt = Date.now();
+    }
+    /** Detach a session. `canonicalCwd` must match `projectContext.cwd`. No-op if unknown. */
+    detachSession(canonicalCwd, sessionId) {
+        const pc = this.map.get(canonicalCwd);
+        if (!pc)
+            return;
+        pc.activeSessions.delete(sessionId);
+        pc.lastSeenAt = Date.now();
+    }
+    /** Called if attachSession never fires. `canonicalCwd` must match `projectContext.cwd`. */
+    cancelReservation(canonicalCwd) {
+        const pc = this.map.get(canonicalCwd);
+        if (!pc)
+            return;
+        if (pc.pendingReservations > 0)
+            pc.pendingReservations -= 1;
+        pc.lastSeenAt = Date.now();
+    }
+    /** Look up a project by its canonical cwd. */
+    get(canonicalCwd) {
+        return this.map.get(canonicalCwd);
+    }
+    get size() {
+        return this.map.size;
+    }
+    *entries() {
+        yield* this.map.entries();
+    }
+    evictIdle() {
+        const now = Date.now();
+        const victims = [];
+        for (const [cwd, pc] of this.map.entries()) {
+            if (pc.activeSessions.size === 0 &&
+                pc.activeRequests === 0 &&
+                pc.pendingReservations === 0 &&
+                now - pc.lastSeenAt > this.idleEvictionMs) {
+                victims.push(cwd);
+            }
+        }
+        for (const cwd of victims) {
+            const pc = this.map.get(cwd);
+            pc.contextBlocks.clear();
+            pc.batchCache.clear();
+            pc.clarifications.clear();
+            this.map.delete(cwd);
+            this.onProjectEvicted?.(cwd, now - pc.lastSeenAt);
+        }
+    }
+    clear() {
+        for (const pc of this.map.values()) {
+            pc.contextBlocks.clear();
+            pc.batchCache.clear();
+            pc.clarifications.clear();
+        }
+        this.map.clear();
+    }
+}
+//# sourceMappingURL=project-registry.js.map

package/dist/http/project-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-registry.js","sourceRoot":"","sources":["../../src/http/project-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAuB,MAAM,mCAAmC,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAgBjD,MAAM,OAAO,eAAe;IACT,GAAG,GAAG,IAAI,GAAG,EAA0B,CAAC;IACxC,GAAG,CAAS;IACZ,cAAc,CAAS;IACvB,kBAAkB,CAAS;IACpC,aAAa,GAA0B,IAAI,CAAC;IACnC,gBAAgB,CAAyB;IACzC,gBAAgB,CAAyC;IAE1E,YAAY,OAA+B;QACzC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;QACrD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QACjD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IACnD,CAAC;IAED,kBAAkB;QAChB,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO;QAC/B,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAClF,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;IAC/B,CAAC;IAED,iBAAiB;QACf,IAAI,IAAI,CAAC,aAAa;YAAE,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,oGAAoG;IACpG,cAAc,CAAC,GAAW;QACxB,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACpE,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,mBAAmB,IAAI,CAAC,CAAC;YAClC,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACjC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAChE,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,CAAC,GAAG,6CAA6C,EAAE,CAAC;QAC1H,CAAC;QACD,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACrC,EAAE,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzD,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,YAAoB,EAAE,SAAiB;QACnD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,YAAY,4DAA4D,CAAC,CAAC;QACpI,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,mBAAmB,GAAG,CAAC;YAAE,EAAE,CAAC,mBAAmB,IAAI,CAAC,CAAC;QAC5D,EAAE,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,CAAC;IAED,0FAA0F;IAC1F,aAAa,CAAC,YAAoB,EAAE,SAAiB;QACnD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE;YAAE,OAAO;QAChB,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,EAAE,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,CAAC;IAED,2FAA2F;IAC3F,iBAAiB,CAAC,YAAoB;QACpC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE;YAAE,OAAO;QAChB,IAAI,EAAE,CAAC,mBAAmB,GAAG,CAAC;YAAE,EAAE,CAAC,mBAAmB,IAAI,CAAC,CAAC;QAC5D,EAAE,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,CAAC;IAED,8CAA8C;IAC9C,GAAG,CAAC,YAAoB;QACtB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,CAAC,OAAO;QACN,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5B,CAAC;IAED,SAAS;QACP,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3C,IACE,EAAE,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC;gBAC5B,EAAE,CAAC,cAAc,KAAK,CAAC;gBACvB,EAAE,CAAC,mBAAmB,KAAK,CAAC;gBAC5B,GAAG,GAAG,EAAE,CAAC,UAAU,GAAG,IAAI,CAAC,cAAc,EACzC,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;YAC9B,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YACzB,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,KAAK;QACH,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YACzB,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;CACF"}

package/dist/http/session-router.d.ts

@@ -0,0 +1,33 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import type { ProjectContext } from '@zhixuan92/multi-model-agent-core';
+export interface SessionEntry {
+    transport: StreamableHTTPServerTransport;
+    server: McpServer;
+    projectContext: ProjectContext;
+    openedAt: number;
+    lastRequestAt: number;
+}
+export declare class SessionRouter {
+    private readonly map;
+    set(sessionId: string, entry: SessionEntry): void;
+    get(sessionId: string): SessionEntry | undefined;
+    /**
+     * Remove the entry from the map without calling transport.close() / server.close().
+     * Use this from inside transport.onclose to avoid reentrant close calls.
+     */
+    delete(sessionId: string): void;
+    /**
+     * Remove the entry AND dispose its transport + server. Use from external shutdown paths
+     * where the transport is still live. Idempotent; safe to call when the entry is already gone.
+     */
+    remove(sessionId: string): Promise<void>;
+    touchSession(sessionId: string): void;
+    evictIdleSessions(timeoutMs: number, options?: {
+        onEvict?: (sessionId: string, entry: SessionEntry) => void;
+    }): Promise<void>;
+    closeAll(): Promise<void>;
+    entries(): IterableIterator<[string, SessionEntry]>;
+    get size(): number;
+}
+//# sourceMappingURL=session-router.d.ts.map

package/dist/http/session-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-router.d.ts","sourceRoot":"","sources":["../../src/http/session-router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACxG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAExE,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,6BAA6B,CAAC;IACzC,MAAM,EAAE,SAAS,CAAC;IAClB,cAAc,EAAE,cAAc,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAmC;IAEvD,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI;IAIjD,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAIhD;;;OAGG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAI/B;;;OAGG;IACG,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ9C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAK/B,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QACnD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;KAC5D,GAAG,OAAO,CAAC,IAAI,CAAC;IAYX,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAK9B,OAAO,IAAI,gBAAgB,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAIpD,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/http/session-router.js

@@ -0,0 +1,62 @@
+export class SessionRouter {
+    map = new Map();
+    set(sessionId, entry) {
+        this.map.set(sessionId, entry);
+    }
+    get(sessionId) {
+        return this.map.get(sessionId);
+    }
+    /**
+     * Remove the entry from the map without calling transport.close() / server.close().
+     * Use this from inside transport.onclose to avoid reentrant close calls.
+     */
+    delete(sessionId) {
+        this.map.delete(sessionId);
+    }
+    /**
+     * Remove the entry AND dispose its transport + server. Use from external shutdown paths
+     * where the transport is still live. Idempotent; safe to call when the entry is already gone.
+     */
+    async remove(sessionId) {
+        const entry = this.map.get(sessionId);
+        if (!entry)
+            return;
+        this.map.delete(sessionId);
+        try {
+            await entry.transport.close();
+        }
+        catch { /* best-effort */ }
+        try {
+            await entry.server.close();
+        }
+        catch { /* best-effort */ }
+    }
+    touchSession(sessionId) {
+        const entry = this.map.get(sessionId);
+        if (entry)
+            entry.lastRequestAt = Date.now();
+    }
+    async evictIdleSessions(timeoutMs, options) {
+        const now = Date.now();
+        const victims = [];
+        for (const [id, entry] of this.map.entries()) {
+            if (now - entry.lastRequestAt > timeoutMs)
+                victims.push({ id, entry });
+        }
+        for (const { id, entry } of victims) {
+            options?.onEvict?.(id, entry);
+            await this.remove(id);
+        }
+    }
+    async closeAll() {
+        const ids = Array.from(this.map.keys());
+        await Promise.all(ids.map(id => this.remove(id)));
+    }
+    *entries() {
+        yield* this.map.entries();
+    }
+    get size() {
+        return this.map.size;
+    }
+}
+//# sourceMappingURL=session-router.js.map

package/dist/http/session-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-router.js","sourceRoot":"","sources":["../../src/http/session-router.ts"],"names":[],"mappings":"AAYA,MAAM,OAAO,aAAa;IACP,GAAG,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEvD,GAAG,CAAC,SAAiB,EAAE,KAAmB;QACxC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,GAAG,CAAC,SAAiB;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,SAAiB;QACtB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAClE,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACjE,CAAC;IAED,YAAY,CAAC,SAAiB;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,KAAK;YAAE,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,OAE1C;QACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAA+C,EAAE,CAAC;QAC/D,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7C,IAAI,GAAG,GAAG,KAAK,CAAC,aAAa,GAAG,SAAS;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,KAAK,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,CAAC,OAAO;QACN,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;IACvB,CAAC;CACF"}

package/dist/http/status-endpoint.d.ts

@@ -0,0 +1,20 @@
+import type * as http from 'node:http';
+import type { ProjectRegistry } from './project-registry.js';
+import type { SessionRouter } from './session-router.js';
+import type { MultiModelConfig, DiagnosticLogger } from '@zhixuan92/multi-model-agent-core';
+export interface StatusHandlerOptions {
+    registry: ProjectRegistry;
+    router: SessionRouter;
+    config: MultiModelConfig;
+    logger: DiagnosticLogger;
+    token: string;
+}
+export interface StatusHandler {
+    (req: http.IncomingMessage, res: http.ServerResponse): void;
+    updateBinding(host: string, port: number): void;
+    trackRequestStart(sessionId: string, cwd: string, tool: string): string;
+    trackRequestEnd(reqTrackId: string, status: 'ok' | 'error', durationMs: number): void;
+    trackHeadline(reqTrackId: string, headline: string): void;
+}
+export declare function buildStatusHandler(options: StatusHandlerOptions): StatusHandler;
+//# sourceMappingURL=status-endpoint.d.ts.map

package/dist/http/status-endpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-endpoint.d.ts","sourceRoot":"","sources":["../../src/http/status-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,IAAI,MAAM,WAAW,CAAC;AACvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAK5F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,eAAe,CAAC;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC5D,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACxE,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACtF,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3D;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CAuG/E"}

package/dist/http/status-endpoint.js

@@ -0,0 +1,85 @@
+import { SERVER_VERSION } from '../cli.js';
+import { isLoopbackAddress } from './loopback.js';
+import { validateAuthHeader } from './auth.js';
+export function buildStatusHandler(options) {
+    const startedAtMs = Date.now();
+    let boundHost = options.config.transport.http.bind;
+    let boundPort = options.config.transport.http.port;
+    const active = new Map();
+    const recent = [];
+    const RECENT_MAX = 100;
+    const handler = ((req, res) => {
+        const peer = req.socket.remoteAddress;
+        if (!isLoopbackAddress(peer)) {
+            res.writeHead(403, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'forbidden', message: '/status is loopback-only' }));
+            return;
+        }
+        if (options.config.transport.http.auth.enabled) {
+            const auth = validateAuthHeader(Array.isArray(req.headers.authorization) ? req.headers.authorization[0] : req.headers.authorization, options.token);
+            if (!auth.ok) {
+                res.writeHead(401, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'unauthorized' }));
+                return;
+            }
+        }
+        const projects = [];
+        for (const [cwd, pc] of options.registry.entries()) {
+            projects.push({
+                cwd,
+                createdAt: new Date(pc.createdAt).toISOString(),
+                lastSeenAt: new Date(pc.lastSeenAt).toISOString(),
+                activeSessions: pc.activeSessions.size,
+                batchCacheSize: pc.batchCache.size,
+                contextBlocksSize: pc.contextBlocks.size,
+                clarificationsSize: pc.clarifications.size,
+            });
+        }
+        const displayHost = boundHost.includes(':') ? `[${boundHost}]` : boundHost;
+        const body = {
+            version: SERVER_VERSION,
+            pid: process.pid,
+            transport: 'http',
+            bind: `${displayHost}:${boundPort}`,
+            uptimeMs: Date.now() - startedAtMs,
+            auth: { enabled: options.config.transport.http.auth.enabled },
+            projects,
+            activeRequests: Array.from(active.values()).map(r => ({
+                sessionId: r.sessionId,
+                cwd: r.cwd,
+                tool: r.tool,
+                startedAt: new Date(r.startedAt).toISOString(),
+                lastHeadline: r.lastHeadline,
+            })),
+            recent: recent.slice(-10),
+        };
+        res.writeHead(200, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify(body));
+    });
+    handler.updateBinding = (host, port) => {
+        boundHost = host;
+        boundPort = port;
+    };
+    handler.trackRequestStart = (sessionId, cwd, tool) => {
+        const id = `${sessionId}:${Date.now()}:${Math.random().toString(36).slice(2, 8)}`;
+        active.set(id, { sessionId, cwd, tool, startedAt: Date.now() });
+        return id;
+    };
+    handler.trackRequestEnd = (id, status, durationMs) => {
+        const entry = active.get(id);
+        if (!entry)
+            return;
+        active.delete(id);
+        recent.push({ sessionId: entry.sessionId, cwd: entry.cwd, tool: entry.tool, status, durationMs });
+        while (recent.length > RECENT_MAX)
+            recent.shift();
+    };
+    handler.trackHeadline = (id, headline) => {
+        const entry = active.get(id);
+        if (!entry)
+            return;
+        entry.lastHeadline = headline;
+    };
+    return handler;
+}
+//# sourceMappingURL=status-endpoint.js.map

package/dist/http/status-endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-endpoint.js","sourceRoot":"","sources":["../../src/http/status-endpoint.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAkB/C,MAAM,UAAU,kBAAkB,CAAC,OAA6B;IAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;IACnD,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;IASnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAQhD,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,GAAG,CAAC;IAEvB,MAAM,OAAO,GAAG,CAAC,CAAC,GAAyB,EAAE,GAAwB,EAAE,EAAE;QACvE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;QACtC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,kBAAkB,CAC7B,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EACnG,OAAO,CAAC,KAAK,CACd,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC;gBACZ,GAAG;gBACH,SAAS,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;gBAC/C,UAAU,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;gBACjD,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI;gBACtC,cAAc,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI;gBAClC,iBAAiB,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI;gBACxC,kBAAkB,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,MAAM,IAAI,GAAG;YACX,OAAO,EAAE,cAAc;YACvB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,SAAS,EAAE,MAAe;YAC1B,IAAI,EAAE,GAAG,WAAW,IAAI,SAAS,EAAE;YACnC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW;YAClC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YAC7D,QAAQ;YACR,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpD,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;gBAC9C,YAAY,EAAE,CAAC,CAAC,YAAY;aAC7B,CAAC,CAAC;YACH,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;SAC1B,CAAC;QACF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,CAAC,CAAkB,CAAC;IAEpB,OAAO,CAAC,aAAa,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE;QACrD,SAAS,GAAG,IAAI,CAAC;QACjB,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC,CAAC;IAEF,OAAO,CAAC,iBAAiB,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACnD,MAAM,EAAE,GAAG,GAAG,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChE,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,OAAO,CAAC,eAAe,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAClG,OAAO,MAAM,CAAC,MAAM,GAAG,UAAU;YAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACpD,CAAC,CAAC;IAEF,OAAO,CAAC,aAAa,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,KAAK,CAAC,YAAY,GAAG,QAAQ,CAAC;IAChC,CAAC,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/http/transport.d.ts

@@ -0,0 +1,14 @@
+import { type DiagnosticLogger, type MultiModelConfig } from '@zhixuan92/multi-model-agent-core';
+import { ProjectRegistry } from './project-registry.js';
+import { SessionRouter } from './session-router.js';
+export interface DaemonHandle {
+    url: string;
+    logger: DiagnosticLogger;
+    registry: ProjectRegistry;
+    router: SessionRouter;
+    stop: () => Promise<void>;
+}
+export declare function startHttpDaemon(config: MultiModelConfig, options?: {
+    testMode?: boolean;
+}): Promise<DaemonHandle>;
+//# sourceMappingURL=transport.d.ts.map

package/dist/http/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/http/transport.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACtB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAqB,MAAM,qBAAqB,CAAC;AAQvE,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,eAAe,CAAC;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,gBAAgB,EACxB,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAC/B,OAAO,CAAC,YAAY,CAAC,CA2NvB"}