codegraph-java 0.1.0

package/dist/mcp/index.js

@@ -0,0 +1,567 @@
+"use strict";
+/**
+ * CodeGraph MCP Server
+ *
+ * Model Context Protocol server that exposes CodeGraph functionality
+ * as tools for AI assistants like Claude.
+ *
+ * @module mcp
+ *
+ * @example
+ * ```typescript
+ * import { MCPServer } from 'codegraph';
+ *
+ * const server = new MCPServer('/path/to/project');
+ * await server.start();
+ * ```
+ *
+ * Runtime modes (decided in {@link MCPServer.start}):
+ *
+ * - **Direct** — one process serves one MCP client over stdio. The pre-#411
+ *   behavior; used when the user opts out (`CODEGRAPH_NO_DAEMON=1`), no
+ *   `.codegraph/` is reachable, or the daemon machinery fails for any reason.
+ * - **Proxy** — what an MCP host actually talks to when sharing is on: a thin
+ *   stdio↔socket pipe to the shared daemon. The proxy carries the #277 PPID
+ *   watchdog, so a SIGKILL'd host reaps its proxy promptly. See {@link ./proxy.ts}.
+ * - **Daemon** — a *detached* background process (its own session/process
+ *   group) that serves N proxies over a Unix-domain socket / named pipe,
+ *   sharing one CodeGraph + watcher + SQLite handle. Spawned on demand; never a
+ *   child of any host, so it survives individual sessions and is reaped by
+ *   client-refcount + idle timeout. See {@link ./daemon.ts} and issue #411.
+ *
+ * The detached-daemon + always-proxy split is the fix for the review finding
+ * that the original in-process daemon (a) was the first host's child, so closing
+ * that terminal severed every other client, and (b) disabled the PPID watchdog,
+ * regressing #277 (orphaned daemons on host SIGKILL).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CodeGraphPackageVersion = exports.Daemon = exports.ToolHandler = exports.tools = exports.StdioTransport = exports.MCPServer = void 0;
+exports.timestampStderrLines = timestampStderrLines;
+exports.stampLogChunk = stampLogChunk;
+exports.watchdogProgressPaths = watchdogProgressPaths;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const child_process_1 = require("child_process");
+const directory_1 = require("../directory");
+const transport_1 = require("./transport");
+const engine_1 = require("./engine");
+const session_1 = require("./session");
+const daemon_1 = require("./daemon");
+const proxy_1 = require("./proxy");
+const daemon_paths_1 = require("./daemon-paths");
+const telemetry_1 = require("../telemetry");
+const update_check_1 = require("../upgrade/update-check");
+const early_ppid_1 = require("./early-ppid");
+const ppid_watchdog_1 = require("./ppid-watchdog");
+const liveness_watchdog_1 = require("./liveness-watchdog");
+const startup_handshake_1 = require("./startup-handshake");
+const stdin_teardown_1 = require("./stdin-teardown");
+const wasm_runtime_flags_1 = require("../extraction/wasm-runtime-flags");
+/**
+ * Env var that marks a process as the *detached daemon* itself (set by
+ * {@link spawnDetachedDaemon} when it re-invokes the CLI). Without it a
+ * `serve --mcp` invocation is a launcher that connects-or-spawns; with it, the
+ * process IS the daemon and must never try to spawn another (infinite spawn).
+ */
+const DAEMON_INTERNAL_ENV = 'CODEGRAPH_DAEMON_INTERNAL';
+/**
+ * Retries for the detached daemon arbitrating the O_EXCL lock against a racing
+ * sibling. Tiny — the lock resolves on the first round in practice; the retries
+ * only cover clearing a genuinely stale (dead-pid) lockfile.
+ */
+const TAKEOVER_MAX_RETRIES = 5;
+const TAKEOVER_RETRY_DELAY_MS = 100;
+/**
+ * How long a launcher waits for a freshly-spawned daemon to bind its socket
+ * before giving up and running in-process. The daemon binds the socket *before*
+ * the (backgrounded) engine/grammar warm-up, so this only needs to cover node
+ * process startup. 60 × 100ms = 6s of headroom for a cold/slow box; on the
+ * common path the socket appears within a few rounds.
+ */
+// Poll finely (25ms) so the proxy attaches the instant the freshly-spawned
+// daemon binds, instead of waiting up to a coarse 100ms after — shaves the
+// cold-start handshake (the window the headless agent races). Same ~6s total
+// give-up budget (240 × 25ms), just finer granularity; socket-connect probes
+// are cheap. Paired with deferring the CodeGraph load (engine.ts) off the bind
+// path, this narrows the "No such tool available" race window.
+const DAEMON_CONNECT_MAX_RETRIES = 240;
+const DAEMON_CONNECT_RETRY_DELAY_MS = 25;
+/** Whether `CODEGRAPH_NO_DAEMON` was set to a truthy value. */
+function daemonOptOutSet() {
+    const raw = process.env.CODEGRAPH_NO_DAEMON;
+    if (!raw)
+        return false;
+    return raw !== '0' && raw.toLowerCase() !== 'false';
+}
+/** Whether this process was spawned to BE the detached daemon. */
+function daemonInternalSet() {
+    const raw = process.env[DAEMON_INTERNAL_ENV];
+    return !!raw && raw !== '0' && raw.toLowerCase() !== 'false';
+}
+/**
+ * Prefix every `process.stderr.write` chunk with an ISO-8601 timestamp. Called
+ * once, only when this process becomes the detached daemon — whose stderr is
+ * appended to `.codegraph/daemon.log`. Before #1431 no log line carried a
+ * timestamp, so watchdog kills and restarts could be counted but never placed
+ * in time. (The watchdog child writes its kill notice through its own
+ * inherited fd 2, bypassing this wrapper — it stamps that line itself.)
+ */
+function timestampStderrLines() {
+    const orig = process.stderr.write.bind(process.stderr);
+    process.stderr.write = ((chunk, ...rest) => {
+        return orig(stampLogChunk(chunk), ...rest);
+    });
+}
+/** Prepend `[<ISO-8601>] ` to a log chunk; unknown chunk types pass through. */
+function stampLogChunk(chunk) {
+    try {
+        const stamp = `[${new Date().toISOString()}] `;
+        if (typeof chunk === 'string')
+            return stamp + chunk;
+        if (Buffer.isBuffer(chunk))
+            return Buffer.concat([Buffer.from(stamp), chunk]);
+    }
+    catch { /* stamping is best-effort; never block the write */ }
+    return chunk;
+}
+/**
+ * Watchdog `progressPaths` for a server keyed on `root`'s index: the SQLite DB
+ * + its WAL. With these, the #850 liveness watchdog only kills on heartbeat
+ * silence when the DB files are NOT advancing — the same slow-disk deferral
+ * the CLI `index`/`build` path got in #1231. Without it, one >timeout
+ * synchronous statement on a big DB (multi-GB index behind Windows Defender)
+ * SIGKILLs a perfectly healthy daemon — and a daemon SIGKILL'd at the end of
+ * nearly every session is what ratcheted the WAL leak in #1431. A true wedge
+ * still dies: a wedged loop writes nothing, so the files stay still.
+ */
+function watchdogProgressPaths(root) {
+    if (!root)
+        return {};
+    const dbPath = path.join((0, directory_1.getCodeGraphDir)(root), 'codegraph.db');
+    return { progressPaths: [dbPath, `${dbPath}-wal`] };
+}
+/**
+ * Resolve the project root the daemon machinery should key on. Returns
+ * `null` when no `.codegraph/` is reachable from the candidate path — in
+ * that case the caller must run in direct mode, since the daemon lockfile
+ * and socket both live under `.codegraph/`.
+ *
+ * Uses the same resolution as the engine (#1606): up-walk first, then the
+ * bounded workspace down-scan that adopts a SINGLE indexed sub-project. A
+ * workspace root above one indexed child therefore gets the shared daemon
+ * (one watcher, one writer, keyed on the child) instead of a direct-mode
+ * server per host.
+ *
+ * The result is canonicalized with `realpathSync` so every client converges on
+ * the same socket/lock path regardless of how it expressed the path: a client
+ * launched with cwd under a symlink (e.g. macOS `/var` → `/private/var`, where
+ * spawned `process.cwd()` is already realpath'd) and one that passed a
+ * symlinked `rootUri` would otherwise hash to different sockets and silently
+ * fail to share the daemon.
+ */
+function resolveDaemonRoot(explicitPath) {
+    const candidate = explicitPath ?? process.cwd();
+    const root = (0, directory_1.resolveServerRoot)(candidate).root;
+    if (!root)
+        return null;
+    try {
+        return fs.realpathSync(root);
+    }
+    catch {
+        return root;
+    }
+}
+/**
+ * Spawn the shared daemon as a fully detached background process: its own
+ * session/process group (so a SIGHUP/SIGINT to the launcher's terminal can't
+ * reach it) with stdio decoupled from the launcher (logs to
+ * `.codegraph/daemon.log`). Re-invokes the *same* CLI faithfully across dev and
+ * bundled launches by reusing `process.argv[0]` (the right node), the current
+ * `process.execArgv` (carries `--liftoff-only`, so the daemon never re-execs)
+ * and `process.argv[1]` (this script). The spawned process self-arbitrates the
+ * O_EXCL lock, so racing launchers may each spawn one — losers exit and every
+ * launcher proxies through the single winner.
+ */
+function spawnDetachedDaemon(root) {
+    const scriptPath = process.argv[1];
+    if (!scriptPath) {
+        // No resolvable CLI entry point to re-invoke — let the caller fall back to
+        // direct mode rather than spawn something broken.
+        throw new Error('cannot resolve CLI script path to spawn the daemon');
+    }
+    let logFd = null;
+    let stdio = 'ignore';
+    try {
+        logFd = fs.openSync(path.join((0, directory_1.getCodeGraphDir)(root), 'daemon.log'), 'a');
+        stdio = ['ignore', logFd, logFd];
+    }
+    catch {
+        stdio = 'ignore'; // no log file — discard daemon output rather than fail
+    }
+    try {
+        // The daemon has no host: scrub the threaded host pid so it can't leak
+        // into the daemon's env (and from there into anything the daemon spawns),
+        // where a long-dead session's host pid would trigger spurious shutdowns.
+        const env = { ...process.env, [DAEMON_INTERNAL_ENV]: '1' };
+        delete env[wasm_runtime_flags_1.HOST_PPID_ENV];
+        const child = (0, child_process_1.spawn)(process.execPath, [...process.execArgv, scriptPath, 'serve', '--mcp', '--path', root], {
+            detached: true,
+            stdio,
+            windowsHide: true,
+            env,
+        });
+        child.unref();
+    }
+    finally {
+        // The child holds its own dup of the log fd now; the launcher doesn't need it.
+        if (logFd !== null) {
+            try {
+                fs.closeSync(logFd);
+            }
+            catch { /* ignore */ }
+        }
+    }
+}
+/**
+ * MCP Server for CodeGraph
+ *
+ * Implements the Model Context Protocol to expose CodeGraph
+ * functionality as tools that can be called by AI assistants.
+ *
+ * Backwards-compatible constructor and `start()` signature with the
+ * pre-issue-#411 implementation: callers continue to do
+ * `new MCPServer(path).start()`. Internally we now pick from direct / proxy /
+ * daemon at start time.
+ */
+class MCPServer {
+    projectPath;
+    // Direct-mode-only state. In daemon mode the per-connection sessions live
+    // inside the Daemon class; in proxy mode there is no session at all.
+    session = null;
+    engine = null;
+    daemon = null;
+    ppidWatchdog = null;
+    // Worker-thread liveness watchdog (#850). Long-lived modes only; SIGKILLs the
+    // process if the main thread wedges in a non-yielding sync loop.
+    livenessWatchdog = null;
+    // PPID watchdog baseline — from the CLI entry's earliest-possible capture
+    // (early-ppid.ts). Capturing here (construction) already lost the race when
+    // the launcher was killed during module loading (#1185).
+    originalPpid = early_ppid_1.EARLY_PPID;
+    hostPpid = (0, ppid_watchdog_1.parseHostPpid)(process.env[wasm_runtime_flags_1.HOST_PPID_ENV]);
+    // Idempotency guard for stop().
+    stopped = false;
+    mode = 'unstarted';
+    constructor(projectPath) {
+        this.projectPath = projectPath || null;
+    }
+    /**
+     * Start the MCP server.
+     *
+     * Decision order:
+     *   1. `CODEGRAPH_NO_DAEMON=1` → direct mode (unchanged pre-#411 behavior).
+     *   2. `CODEGRAPH_DAEMON_INTERNAL=1` → we ARE the detached daemon; listen.
+     *   3. No `.codegraph/` reachable → direct mode (the daemon's lockfile and
+     *      socket both live under `.codegraph/`).
+     *   4. Otherwise connect to (or spawn) the shared daemon and proxy to it.
+     *
+     * On any unexpected failure in step 4 we transparently fall back to direct
+     * mode — a misbehaving daemon must never block a session from starting.
+     */
+    async start() {
+        // Long-lived process (direct / proxy / daemon alike): flush buffered
+        // telemetry opportunistically. Fire-and-forget + unref'd — adds nothing
+        // to the handshake path and never keeps the process alive.
+        (0, telemetry_1.getTelemetry)().startInterval();
+        // #1243: the MCP config launches the local binary, so a server left
+        // running drifts behind releases with no signal. Refresh the shared
+        // update-check cache in the background and log ONE stderr notice when a
+        // newer version exists (stderr only — stdout is the protocol channel).
+        // The notice also reaches the agent via the initialize instructions and
+        // codegraph_status. Fire-and-forget: adds nothing to the handshake path.
+        (0, update_check_1.checkForUpdateInBackground)();
+        // The detached daemon process itself. Checked before the opt-out so the
+        // daemon honors the same env it was spawned with (it never sets NO_DAEMON).
+        if (daemonInternalSet()) {
+            return this.startDaemonProcess();
+        }
+        // Direct mode if the user opted out. Setting the env var is sufficient to
+        // get the pre-#411 single-process behavior.
+        if (daemonOptOutSet()) {
+            return this.startDirect('CODEGRAPH_NO_DAEMON set');
+        }
+        const root = resolveDaemonRoot(this.projectPath);
+        if (!root) {
+            // No initialized project found — daemon mode has nowhere to put its
+            // socket. The fresh-checkout / outside-project case; behave as before.
+            return this.startDirect('no .codegraph/ root found');
+        }
+        try {
+            // Answer the MCP handshake LOCALLY (instant tool registration — no waiting
+            // ~600ms for the daemon to spawn+bind, which produced the cold-start race)
+            // and forward tool CALLS to the shared daemon, connected in the background.
+            // Runs until the host disconnects; the proxy installs its own watchdog and
+            // falls back to an in-process engine if the daemon never comes up.
+            this.mode = 'proxy';
+            await this.runProxyWithLocalHandshake(root);
+            return;
+        }
+        catch (err) {
+            // Belt-and-braces: a throw during proxy SETUP (before the client was served)
+            // is still safe to recover from with a direct-mode session.
+            const msg = err instanceof Error ? err.message : String(err);
+            process.stderr.write(`[CodeGraph MCP] Proxy path failed (${msg}); falling back to direct mode.\n`);
+            return this.startDirect('proxy path threw');
+        }
+    }
+    /**
+     * Stop the server. In daemon mode this triggers graceful shutdown of every
+     * connected session; in direct mode it mirrors the pre-#411 behavior (close
+     * cg, exit). Proxy mode never routes through here — the proxy exits itself.
+     */
+    stop() {
+        if (this.stopped)
+            return;
+        this.stopped = true;
+        if (this.ppidWatchdog) {
+            clearInterval(this.ppidWatchdog);
+            this.ppidWatchdog = null;
+        }
+        if (this.livenessWatchdog) {
+            this.livenessWatchdog.stop();
+            this.livenessWatchdog = null;
+        }
+        if (this.daemon) {
+            void this.daemon.stop('stop()');
+            // Daemon.stop calls process.exit; nothing else to do.
+            return;
+        }
+        if (this.session) {
+            this.session.stop();
+            this.session = null;
+        }
+        if (this.engine) {
+            this.engine.stop();
+            this.engine = null;
+        }
+        process.exit(0);
+    }
+    /** Single-process stdio MCP session — the pre-issue-#411 code path. */
+    async startDirect(reason) {
+        if (reason && process.env.CODEGRAPH_MCP_DEBUG) {
+            process.stderr.write(`[CodeGraph MCP] Direct mode: ${reason}.\n`);
+        }
+        this.engine = new engine_1.MCPEngine();
+        const transport = new transport_1.StdioTransport();
+        this.session = new session_1.MCPSession(transport, this.engine, {
+            explicitProjectPath: this.projectPath,
+        });
+        if (this.projectPath) {
+            // Background init so the initialize response stays fast (#172).
+            void this.engine.ensureInitialized(this.projectPath);
+        }
+        this.session.start();
+        // Detect parent-process death — same logic as pre-refactor. When stdin
+        // closes we go through StdioTransport's `process.exit(0)` already, but
+        // SIGKILL of the parent doesn't reliably close stdin on Linux (#277).
+        // Also treat a stdin `'error'` (a socket-backed stdin can fail with
+        // ECONNRESET/hangup instead of a clean close) as shutdown, and destroy the
+        // stream so a hung fd can't busy-spin the event loop (#799).
+        (0, stdin_teardown_1.treatStdinFailureAsShutdown)(() => this.stop());
+        // Backstop for a launch abandoned during startup (#1185): launcher killed
+        // before EARLY_PPID could see it + host holding our pipes open. A server
+        // that never receives a byte of MCP traffic isn't serving anyone. Armed
+        // after session.start() attached the real stdin consumer.
+        (0, startup_handshake_1.armStartupHandshakeTimeout)(() => {
+            process.stderr.write('[CodeGraph MCP] No MCP traffic since startup; assuming an abandoned launch and shutting down (#1185). ' +
+                'Tune with CODEGRAPH_STARTUP_HANDSHAKE_TIMEOUT_MS (0 disables).\n');
+            this.stop();
+        });
+        this.mode = 'direct';
+        this.installSignalHandlers();
+        this.installPpidWatchdog();
+        this.livenessWatchdog = (0, liveness_watchdog_1.installMainThreadWatchdog)(watchdogProgressPaths(resolveDaemonRoot(this.projectPath)));
+    }
+    /**
+     * Run as the detached shared daemon (process spawned with
+     * `CODEGRAPH_DAEMON_INTERNAL=1`). Arbitrate the O_EXCL lock, then either
+     * become the daemon (bind the socket, serve forever) or — if a live daemon
+     * already holds the lock — exit so we don't leak a redundant process.
+     *
+     * No PPID watchdog and no stdin handlers: the daemon is detached on purpose
+     * and reaps itself via client-refcount + idle timeout (see {@link Daemon}).
+     */
+    async startDaemonProcess() {
+        // In daemon mode stderr IS `.codegraph/daemon.log`; stamp every line so
+        // kills/restarts can be placed in time (#1431 — the log was undatable).
+        timestampStderrLines();
+        const root = resolveDaemonRoot(this.projectPath) ?? this.projectPath ?? process.cwd();
+        for (let attempt = 0; attempt < TAKEOVER_MAX_RETRIES; attempt++) {
+            const lock = (0, daemon_1.tryAcquireDaemonLock)(root);
+            if (lock.kind === 'acquired') {
+                const daemon = new daemon_1.Daemon(root);
+                await daemon.start();
+                this.daemon = daemon;
+                this.mode = 'daemon';
+                // The detached daemon has no PPID watchdog or stdin lifeline, so a
+                // wedged main thread would pin a core forever (#850). The liveness
+                // watchdog is its only recovery path.
+                this.livenessWatchdog = (0, liveness_watchdog_1.installMainThreadWatchdog)(watchdogProgressPaths(root));
+                return; // the net.Server keeps the process alive
+            }
+            // Taken. If the holder is alive, another daemon already serves (or is
+            // binding) — we're redundant; exit cleanly so the launcher proxies to it.
+            const existing = lock.existing;
+            if (existing && existing.pid > 0 && (0, daemon_1.isProcessAlive)(existing.pid)) {
+                // Give a newly-elected daemon time to bind, then require its socket hello
+                // to match the lock PID/version. PID existence alone accepts an unrelated
+                // process after OS PID reuse and permanently wedges startup (#1553).
+                const age = Date.now() - existing.startedAt;
+                const stillStarting = existing.startedAt > 0 && age >= 0 && age < 10_000;
+                if (stillStarting || await (0, daemon_paths_1.probeDaemonIdentity)(existing)) {
+                    process.stderr.write(`[CodeGraph daemon] Another daemon (pid ${existing.pid}) already holds the lock; exiting.\n`);
+                    process.exit(0);
+                }
+            }
+            // Holder is dead (or the record is unreadable) — clear it (pid-verified,
+            // so we never delete a live daemon's lock) and retry the acquire.
+            (0, daemon_1.clearStaleDaemonLock)(lock.pidPath, existing?.pid, { allowLivePid: true });
+            await sleep(TAKEOVER_RETRY_DELAY_MS);
+        }
+        process.stderr.write('[CodeGraph daemon] Could not acquire the daemon lock; exiting.\n');
+        process.exit(0);
+    }
+    /**
+     * Proxy mode (the common case). Serve the MCP handshake LOCALLY for instant
+     * tool registration, forwarding tool calls to the shared daemon — which is
+     * connected in the background (probed, then spawned + polled if absent) so the
+     * handshake never waits ~600ms on it. Runs until the host disconnects; the
+     * proxy falls back to an in-process engine if the daemon never binds, so this
+     * never wedges a session.
+     */
+    async runProxyWithLocalHandshake(root) {
+        // The daemon may relocate its socket past an in-project filesystem that can't
+        // host one (ExFAT/FAT volumes, WSL2 DrvFs; #997) to the deterministic tmpdir
+        // fallback. We don't read the bound path from the lockfile — both sides walk
+        // the SAME ordered candidate list, so we converge on whichever the daemon
+        // bound with zero coordination. The in-project candidate is tried first, so a
+        // normal repo pays nothing extra (it connects on the very first probe).
+        const candidates = (0, daemon_paths_1.getDaemonSocketCandidates)(root);
+        const connectAnyCandidate = async () => {
+            for (const candidate of candidates) {
+                const s = await (0, proxy_1.connectWithHello)(candidate);
+                // A wrong-version daemon IS up — definitive; propagate so the caller
+                // serves in-process instead of spawning + polling for 6s. Don't keep
+                // probing fallbacks past it.
+                if (s === 'version-mismatch')
+                    return s;
+                if (s)
+                    return s;
+            }
+            return null;
+        };
+        const getDaemonSocket = async () => {
+            // Fast path: a daemon may already be listening (on either candidate).
+            const probe = await connectAnyCandidate();
+            if (probe === 'version-mismatch')
+                return null; // definitive — serve in-process, don't poll for 6s
+            if (probe)
+                return probe;
+            // None reachable — spawn one (detached) and poll for its bind.
+            spawnDetachedDaemon(root);
+            for (let attempt = 0; attempt < DAEMON_CONNECT_MAX_RETRIES; attempt++) {
+                await sleep(DAEMON_CONNECT_RETRY_DELAY_MS);
+                const s = await connectAnyCandidate();
+                if (s === 'version-mismatch')
+                    return null;
+                if (s)
+                    return s;
+            }
+            return null; // never bound — the proxy serves this session in-process
+        };
+        await (0, proxy_1.runLocalHandshakeProxy)({ getDaemonSocket, makeEngine: () => new engine_1.MCPEngine(), root });
+    }
+    /** Standard SIGINT/SIGTERM handlers that route to our `stop()` (direct mode). */
+    installSignalHandlers() {
+        process.on('SIGINT', () => this.stop());
+        process.on('SIGTERM', () => this.stop());
+    }
+    /**
+     * PPID watchdog (#277) — direct mode only. Daemon mode is detached on purpose
+     * and reaps via idle timeout; proxy mode installs its own watchdog inside
+     * {@link runProxy}. So this only ever runs for an in-process direct session.
+     */
+    installPpidWatchdog() {
+        if (this.mode !== 'direct')
+            return;
+        const pollMs = (0, ppid_watchdog_1.parsePpidPollMs)(process.env.CODEGRAPH_PPID_POLL_MS);
+        if (pollMs <= 0)
+            return;
+        this.ppidWatchdog = setInterval(() => {
+            const reason = (0, ppid_watchdog_1.supervisionLostReason)({
+                originalPpid: this.originalPpid,
+                currentPpid: process.ppid,
+                hostPpid: this.hostPpid,
+                isAlive: daemon_1.isProcessAlive,
+            });
+            if (reason) {
+                process.stderr.write(`[CodeGraph MCP] Parent process exited (${reason}); shutting down.\n`);
+                this.stop();
+            }
+        }, pollMs);
+        this.ppidWatchdog.unref();
+    }
+}
+exports.MCPServer = MCPServer;
+function sleep(ms) {
+    // Deliberately NOT unref'd. During the daemon connect/takeover retry loop we
+    // may be between processes — no socket bound yet, no transport, no listener
+    // pinning the event loop. An unref'd timer would let Node drain the loop and
+    // exit silently before we get a chance to try again.
+    return new Promise((resolve) => { setTimeout(resolve, ms); });
+}
+// Export for use in CLI
+var transport_2 = require("./transport");
+Object.defineProperty(exports, "StdioTransport", { enumerable: true, get: function () { return transport_2.StdioTransport; } });
+var tools_1 = require("./tools");
+Object.defineProperty(exports, "tools", { enumerable: true, get: function () { return tools_1.tools; } });
+Object.defineProperty(exports, "ToolHandler", { enumerable: true, get: function () { return tools_1.ToolHandler; } });
+// Surface a few daemon-mode bits for tests + diagnostics.
+var daemon_2 = require("./daemon");
+Object.defineProperty(exports, "Daemon", { enumerable: true, get: function () { return daemon_2.Daemon; } });
+var version_1 = require("./version");
+Object.defineProperty(exports, "CodeGraphPackageVersion", { enumerable: true, get: function () { return version_1.CodeGraphPackageVersion; } });
+//# sourceMappingURL=index.js.map

package/dist/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+EH,oDAKC;AAGD,sCAOC;AAYD,sDAIC;AA5GD,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAoD;AACpD,4CAAkE;AAClE,2CAA6C;AAC7C,qCAAqC;AACrC,uCAAuC;AACvC,qCAKkB;AAClB,mCAAmE;AACnE,iDAAgF;AAChF,4CAA4C;AAC5C,0DAAqE;AACrE,6CAA0C;AAC1C,mDAAwF;AACxF,2DAAgF;AAChF,2DAAiE;AACjE,qDAA+D;AAC/D,yEAAiE;AAEjE;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAExD;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC;;;;;;GAMG;AACH,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,+DAA+D;AAC/D,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAEzC,+DAA+D;AAC/D,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC5C,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,OAAO,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;AACtD,CAAC;AAED,kEAAkE;AAClE,SAAS,iBAAiB;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC7C,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;AAC/D,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,oBAAoB;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAA0B,EAAE,GAAG,IAAe,EAAE,EAAE;QACzE,OAAQ,IAAwC,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAClF,CAAC,CAAgC,CAAC;AACpC,CAAC;AAED,gFAAgF;AAChF,SAAgB,aAAa,CAAC,KAA0B;IACtD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,GAAG,KAAK,CAAC;QACpD,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC,CAAC,oDAAoD,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,qBAAqB,CAAC,IAAmB;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,2BAAe,EAAC,IAAI,CAAC,EAAE,cAAc,CAAC,CAAC;IAChE,OAAO,EAAE,aAAa,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,iBAAiB,CAAC,YAA2B;IACpD,MAAM,SAAS,GAAG,YAAY,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,IAAA,6BAAiB,EAAC,SAAS,CAAC,CAAC,IAAI,CAAC;IAC/C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,2EAA2E;QAC3E,kDAAkD;QAClD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,KAAK,GAAiB,QAAQ,CAAC;IACnC,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAA,2BAAe,EAAC,IAAI,CAAC,EAAE,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC;QACzE,KAAK,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,QAAQ,CAAC,CAAC,uDAAuD;IAC3E,CAAC;IACD,IAAI,CAAC;QACH,uEAAuE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,GAAG,GAAsB,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC;QAC9E,OAAO,GAAG,CAAC,kCAAa,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAA,qBAAK,EACjB,OAAO,CAAC,QAAQ,EAChB,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,EACnE;YACE,QAAQ,EAAE,IAAI;YACd,KAAK;YACL,WAAW,EAAE,IAAI;YACjB,GAAG;SACJ,CACF,CAAC;QACF,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,+EAA+E;QAC/E,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAa,SAAS;IACZ,WAAW,CAAgB;IACnC,0EAA0E;IAC1E,qEAAqE;IAC7D,OAAO,GAAsB,IAAI,CAAC;IAClC,MAAM,GAAqB,IAAI,CAAC;IAChC,MAAM,GAAkB,IAAI,CAAC;IAC7B,YAAY,GAA0C,IAAI,CAAC;IACnE,8EAA8E;IAC9E,iEAAiE;IACzD,gBAAgB,GAA0B,IAAI,CAAC;IACvD,0EAA0E;IAC1E,4EAA4E;IAC5E,yDAAyD;IACjD,YAAY,GAAW,uBAAU,CAAC;IAClC,QAAQ,GAAkB,IAAA,6BAAa,EAAC,OAAO,CAAC,GAAG,CAAC,kCAAa,CAAC,CAAC,CAAC;IAC5E,gCAAgC;IACxB,OAAO,GAAG,KAAK,CAAC;IAChB,IAAI,GAAgD,WAAW,CAAC;IAExE,YAAY,WAAoB;QAC9B,IAAI,CAAC,WAAW,GAAG,WAAW,IAAI,IAAI,CAAC;IACzC,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,KAAK;QACT,qEAAqE;QACrE,wEAAwE;QACxE,2DAA2D;QAC3D,IAAA,wBAAY,GAAE,CAAC,aAAa,EAAE,CAAC;QAE/B,oEAAoE;QACpE,oEAAoE;QACpE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,IAAA,yCAA0B,GAAE,CAAC;QAE7B,wEAAwE;QACxE,4EAA4E;QAC5E,IAAI,iBAAiB,EAAE,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACnC,CAAC;QAED,0EAA0E;QAC1E,4CAA4C;QAC5C,IAAI,eAAe,EAAE,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,oEAAoE;YACpE,uEAAuE;YACvE,OAAO,IAAI,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,CAAC;YACH,2EAA2E;YAC3E,2EAA2E;YAC3E,4EAA4E;YAC5E,2EAA2E;YAC3E,mEAAmE;YACnE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;YACpB,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6EAA6E;YAC7E,4DAA4D;YAC5D,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,GAAG,mCAAmC,CAAC,CAAC;YACnG,OAAO,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QACD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC/B,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChC,sDAAsD;YACtD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,uEAAuE;IAC/D,KAAK,CAAC,WAAW,CAAC,MAAc;QACtC,IAAI,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;YAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,MAAM,KAAK,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,kBAAS,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,0BAAc,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,IAAI,oBAAU,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE;YACpD,mBAAmB,EAAE,IAAI,CAAC,WAAW;SACtC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,gEAAgE;YAChE,KAAK,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAErB,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,oEAAoE;QACpE,2EAA2E;QAC3E,6DAA6D;QAC7D,IAAA,4CAA2B,EAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,0DAA0D;QAC1D,IAAA,8CAA0B,EAAC,GAAG,EAAE;YAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wGAAwG;gBACxG,kEAAkE,CACnE,CAAC;YACF,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;QACrB,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC7B,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,gBAAgB,GAAG,IAAA,6CAAyB,EAAC,qBAAqB,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChH,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,kBAAkB;QAC9B,wEAAwE;QACxE,wEAAwE;QACxE,oBAAoB,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACtF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,oBAAoB,EAAE,OAAO,EAAE,EAAE,CAAC;YAChE,MAAM,IAAI,GAAG,IAAA,6BAAoB,EAAC,IAAI,CAAC,CAAC;YAExC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,IAAI,CAAC,CAAC;gBAChC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;gBACrB,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACrB,mEAAmE;gBACnE,mEAAmE;gBACnE,sCAAsC;gBACtC,IAAI,CAAC,gBAAgB,GAAG,IAAA,6CAAyB,EAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC/E,OAAO,CAAC,yCAAyC;YACnD,CAAC;YAED,sEAAsE;YACtE,0EAA0E;YAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC/B,IAAI,QAAQ,IAAI,QAAQ,CAAC,GAAG,GAAG,CAAC,IAAI,IAAA,uBAAc,EAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjE,0EAA0E;gBAC1E,0EAA0E;gBAC1E,qEAAqE;gBACrE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC;gBAC5C,MAAM,aAAa,GAAG,QAAQ,CAAC,SAAS,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,MAAM,CAAC;gBACzE,IAAI,aAAa,IAAI,MAAM,IAAA,kCAAmB,EAAC,QAAQ,CAAC,EAAE,CAAC;oBACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,QAAQ,CAAC,GAAG,sCAAsC,CAC7F,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;YAED,yEAAyE;YACzE,kEAAkE;YAClE,IAAA,6BAAoB,EAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1E,MAAM,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,0BAA0B,CAAC,IAAY;QACnD,8EAA8E;QAC9E,6EAA6E;QAC7E,6EAA6E;QAC7E,0EAA0E;QAC1E,8EAA8E;QAC9E,wEAAwE;QACxE,MAAM,UAAU,GAAG,IAAA,wCAAyB,EAAC,IAAI,CAAC,CAAC;QACnD,MAAM,mBAAmB,GAAG,KAAK,IAA2D,EAAE;YAC5F,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,MAAM,IAAA,wBAAgB,EAAC,SAAS,CAAC,CAAC;gBAC5C,qEAAqE;gBACrE,qEAAqE;gBACrE,6BAA6B;gBAC7B,IAAI,CAAC,KAAK,kBAAkB;oBAAE,OAAO,CAAC,CAAC;gBACvC,IAAI,CAAC;oBAAE,OAAO,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QACF,MAAM,eAAe,GAAG,KAAK,IAAI,EAAE;YACjC,sEAAsE;YACtE,MAAM,KAAK,GAAG,MAAM,mBAAmB,EAAE,CAAC;YAC1C,IAAI,KAAK,KAAK,kBAAkB;gBAAE,OAAO,IAAI,CAAC,CAAC,mDAAmD;YAClG,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;YACxB,+DAA+D;YAC/D,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC1B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,0BAA0B,EAAE,OAAO,EAAE,EAAE,CAAC;gBACtE,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAC3C,MAAM,CAAC,GAAG,MAAM,mBAAmB,EAAE,CAAC;gBACtC,IAAI,CAAC,KAAK,kBAAkB;oBAAE,OAAO,IAAI,CAAC;gBAC1C,IAAI,CAAC;oBAAE,OAAO,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,IAAI,CAAC,CAAC,yDAAyD;QACxE,CAAC,CAAC;QACF,MAAM,IAAA,8BAAsB,EAAC,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,kBAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,iFAAiF;IACzE,qBAAqB;QAC3B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED;;;;OAIG;IACK,mBAAmB;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QACnC,MAAM,MAAM,GAAG,IAAA,+BAAe,EAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACnE,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO;QACxB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACnC,MAAM,MAAM,GAAG,IAAA,qCAAqB,EAAC;gBACnC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,WAAW,EAAE,OAAO,CAAC,IAAI;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,uBAAc;aACxB,CAAC,CAAC;YACH,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,MAAM,qBAAqB,CACtE,CAAC;gBACF,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,CAAC;QACH,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;CACF;AAvSD,8BAuSC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,qDAAqD;IACrD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,wBAAwB;AACxB,yCAA6C;AAApC,2GAAA,cAAc,OAAA;AACvB,iCAA6C;AAApC,8FAAA,KAAK,OAAA;AAAE,oGAAA,WAAW,OAAA;AAC3B,0DAA0D;AAC1D,mCAAkC;AAAzB,gGAAA,MAAM,OAAA;AACf,qCAAoD;AAA3C,kHAAA,uBAAuB,OAAA"}

package/dist/mcp/liveness-watchdog.d.ts

@@ -0,0 +1,35 @@
+/** Default: 60s — ~300× shorter than the 5h #850 wedge, far longer than any real main-thread block. */
+export declare const DEFAULT_WATCHDOG_TIMEOUT_MS = 60000;
+/**
+ * Hard cap on disk-progress deferral: after this many timeouts' worth of
+ * CONTINUOUS heartbeat silence the process is killed even if the watched files
+ * keep advancing (a wedge coinciding with unrelated file writes, or I/O hung
+ * beyond any legitimate statement). 10× the 60s default ⇒ 10 minutes.
+ */
+export declare const PROGRESS_CAP_MULTIPLIER = 10;
+/** Parse the timeout env, falling back to the default for missing/invalid values. */
+export declare function parseWatchdogTimeoutMs(raw: string | undefined, fallback?: number): number;
+/** Derive a heartbeat cadence that emits several beats inside the timeout window. */
+export declare function deriveCheckIntervalMs(timeoutMs: number): number;
+export interface WatchdogHandle {
+    /** Stop heartbeating and shut the watchdog child down. Idempotent. */
+    stop(): void;
+}
+export interface WatchdogOptions {
+    /**
+     * Files whose size/mtime advancing counts as forward progress (the SQLite
+     * DB + `-wal` for an in-process indexer). With paths supplied, a silent
+     * timeout only kills when the files did NOT advance — see the header. Omit
+     * for pure heartbeat behavior (the daemon, whose main thread never runs
+     * long synchronous work).
+     */
+    progressPaths?: string[];
+}
+/**
+ * Install the main-thread liveness watchdog for a long-lived process. Returns a
+ * handle to stop it, or `null` when disabled or when the child can't be spawned
+ * (degraded, never throws — a missing watchdog must never keep a process from
+ * starting).
+ */
+export declare function installMainThreadWatchdog(options?: WatchdogOptions): WatchdogHandle | null;
+//# sourceMappingURL=liveness-watchdog.d.ts.map

package/dist/mcp/liveness-watchdog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"liveness-watchdog.d.ts","sourceRoot":"","sources":["../../src/mcp/liveness-watchdog.ts"],"names":[],"mappings":"AAwDA,uGAAuG;AACvG,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAElD;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAQ1C,qFAAqF;AACrF,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,QAAQ,GAAE,MAAoC,GAC7C,MAAM,CAIR;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/D;AASD,MAAM,WAAW,cAAc;IAC7B,sEAAsE;IACtE,IAAI,IAAI,IAAI,CAAC;CACd;AAgED,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,GAAE,eAAoB,GAAG,cAAc,GAAG,IAAI,CAgE9F"}