ctxr-cli 0.34.0 → 0.36.0

package/dist/core/mcp/ownership.js

@@ -0,0 +1,101 @@
+import { createHash } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { mkdir, readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { writeFileAtomic } from '../fs/atomic.js';
+import { listSessionWorktreeDirs, sessionLabelFromDirName } from '../session.js';
+import { slugifySegment } from '../slug.js';
+/**
+ * serve-the-session-lifecycle-to-chat-apps D3 (remote-access spec, *A member
+ * works in named sessions of their own*): who started each session over MCP.
+ * One JSON file under the canonical checkout's derived cache, keyed by the
+ * worktree's directory name, written atomically and only under the surface's
+ * write mutex. A record whose worktree is gone — landed, or discarded locally —
+ * is dropped on read, and the next write persists the drop. Sessions started
+ * locally have no record and are never visible over MCP.
+ *
+ * A worktree left by the per-member draft of `2026-10-23-serve-the-store-over-mcp`
+ * carries no record; it is adopted for the member whose email its label was
+ * derived from, so its pull request stays the member's to answer.
+ */
+export const OWNERSHIP_VERSION = 1;
+/** D3: the open sessions a member may hold from `session_start`; a capture's session does not count (revision 8). */
+export const MAX_OPEN_SESSIONS = 20;
+const DRAFT_LABEL_PREFIX = 'mcp-draft-';
+/** The ownership record's path under the canonical checkout, beside the read view. */
+export function ownershipFile(canonicalRoot) {
+    return path.join(canonicalRoot, '.contexture', 'cache', 'mcp', 'sessions.json');
+}
+/** The label the earlier per-member draft carried: `mcp-draft-<local part>-<8 hex of the email>`. */
+export function draftLabel(email) {
+    const local = slugifySegment(email.split('@')[0] ?? 'member').slice(0, 20).replace(/-+$/, '') || 'member';
+    const digest = createHash('sha256').update(email.toLowerCase()).digest('hex').slice(0, 8);
+    return `${DRAFT_LABEL_PREFIX}${local}-${digest}`;
+}
+export class Ownership {
+    canonicalRoot;
+    config;
+    constructor(canonicalRoot, config) {
+        this.canonicalRoot = canonicalRoot;
+        this.config = config;
+    }
+    worktreeExists(name) {
+        return existsSync(path.join(this.canonicalRoot, this.config.session.worktrees_path, name));
+    }
+    /** Every record whose worktree still exists. */
+    async read() {
+        let parsed = null;
+        try {
+            parsed = JSON.parse(await readFile(ownershipFile(this.canonicalRoot), 'utf8'));
+        }
+        catch (err) {
+            if (err.code !== 'ENOENT' && !(err instanceof SyntaxError))
+                throw err;
+        }
+        const sessions = {};
+        for (const [name, record] of Object.entries(parsed?.sessions ?? {})) {
+            if (typeof record?.owner === 'string' && this.worktreeExists(name))
+                sessions[name] = record;
+        }
+        return sessions;
+    }
+    async persist(sessions) {
+        const file = ownershipFile(this.canonicalRoot);
+        await mkdir(path.dirname(file), { recursive: true });
+        await writeFileAtomic(file, `${JSON.stringify({ version: OWNERSHIP_VERSION, sessions }, null, 2)}\n`);
+    }
+    /** Under the write mutex. */
+    async record(name, record) {
+        const sessions = await this.read();
+        sessions[name] = { ...record, owner: record.owner.toLowerCase() };
+        await this.persist(sessions);
+    }
+    /** Under the write mutex. */
+    async forget(name) {
+        const sessions = await this.read();
+        delete sessions[name];
+        await this.persist(sessions);
+    }
+    /** The member's sessions on disk, recorded or adopted, by directory name. */
+    async ownedBy(email) {
+        const who = email.toLowerCase();
+        const sessions = await this.read();
+        const owned = Object.entries(sessions)
+            .filter(([, record]) => record.owner === who)
+            .map(([name, record]) => ({ name, record }));
+        const draft = draftLabel(who);
+        for (const name of await listSessionWorktreeDirs(this.canonicalRoot, this.config)) {
+            if (sessions[name] === undefined && sessionLabelFromDirName(this.config, name) === draft)
+                owned.push({ name, record: { owner: who, kind: 'session', started_at: null } });
+        }
+        return owned.sort((a, b) => (a.name < b.name ? -1 : 1));
+    }
+    /** Every capture session on disk, whoever started it. */
+    async captures() {
+        return Object.entries(await this.read())
+            .filter(([, record]) => record.kind === 'capture')
+            .map(([name, record]) => ({ name, record }))
+            .sort((a, b) => (a.name < b.name ? -1 : 1));
+    }
+}
+//# sourceMappingURL=ownership.js.map

package/dist/core/mcp/ownership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownership.js","sourceRoot":"","sources":["../../../src/core/mcp/ownership.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;;;;;;;;GAYG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,qHAAqH;AACrH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAgBxC,sFAAsF;AACtF,MAAM,UAAU,aAAa,CAAC,aAAqB;IACjD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;AAClF,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC;IAC1G,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1F,OAAO,GAAG,kBAAkB,GAAG,KAAK,IAAI,MAAM,EAAE,CAAC;AACnD,CAAC;AAQD,MAAM,OAAO,SAAS;IAED,aAAa;IACb,MAAM;IAFzB,YACmB,aAAqB,EACrB,MAAmB;6BADnB,aAAa;sBACb,MAAM;IACtB,CAAC;IAEI,cAAc,CAAC,IAAY;QACjC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,IAAI;QACR,IAAI,MAAM,GAAyB,IAAI,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAkB,CAAC;QAClG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,YAAY,WAAW,CAAC;gBAAE,MAAM,GAAG,CAAC;QACnG,CAAC;QACD,MAAM,QAAQ,GAAoC,EAAE,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,IAAI,OAAO,MAAM,EAAE,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;QAC9F,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAyC;QAC7D,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAA0B,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAChI,CAAC;IAED,6BAA6B;IAC7B,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,MAAuB;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,6BAA6B;IAC7B,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,OAAO,CAAC,KAAa;QACzB,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,KAAK,GAAiB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;aACjD,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC;aAC5C,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,uBAAuB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAClF,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5K,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,QAAQ;QACZ,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;aACrC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC;aACjD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;aAC3C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;CACF"}

package/dist/core/mcp/paths.d.ts

@@ -0,0 +1,48 @@
+import type { StoreConfig } from '../../config/schema.js';
+import { ToolRefusal } from './jsonrpc.js';
+/**
+ * serve-the-session-lifecycle-to-chat-apps D5: what the file tools and the
+ * command runners may read and change, as predicates over a store-relative,
+ * `/`-separated path. Kept free of any session or snapshot, so the file tools
+ * over the served commit, the same tools inside a session, and `ctxr_write`'s
+ * before- and after-run checks all ask the same question.
+ */
+/** The store's entry document, readable though it is not a note. */
+export declare const ENTRY_DOCUMENT = "AGENTS.md";
+export type ProtectedReason = 'configuration' | 'git' | 'derived' | 'worktrees' | 'skills';
+/**
+ * D5, revision 7: the one protected-path predicate. Inside a session a member
+ * may change what a local session may change except these: the configuration
+ * (it grants MCP scopes), anything whose first segment begins with `.git` —
+ * the hooks directory among them, because a commit in a session worktree runs
+ * that worktree's hooks on the server — derived and cache paths, the
+ * worktrees path, and the managed skills path, which `ctxr update` owns.
+ * Null when the path may be changed.
+ */
+export declare function protectedReason(rel: string, config: StoreConfig): ProtectedReason | null;
+export declare function protectedRefusal(rel: string, reason: ProtectedReason): ToolRefusal;
+/** D5: the paths the owned skills read that are not notes: templates, house conventions, the mission, the log and the skills. */
+export declare function widenedReadablePrefixes(config: StoreConfig): string[];
+/** Never read or returned, whatever else applies: configuration, `.git`, derived paths and the worktrees path. */
+export declare function neverReadablePrefixes(config: StoreConfig): string[];
+/**
+ * D5: hidden from the file tools. `retrieval.exclude_paths` stays hidden — it
+ * is the operator's declared intent — except the capture tier, which `Read`
+ * marks, and the widened readable set, which the skills need.
+ */
+export declare function hiddenPrefixes(config: StoreConfig): string[];
+/** Whether `rel` is a path the file tools may name at all (a file or a directory to search). */
+export declare function nameablePath(rel: string, config: StoreConfig): boolean;
+/** What `Read` answers for, as one predicate: a note, a markdown capture, the entry document, or the widened set. Grep and Glob return nothing else. */
+export declare function readablePath(rel: string, config: StoreConfig): boolean;
+/**
+ * The exclusions ripgrep is given: the hidden prefixes that contain nothing in
+ * the widened set. A hidden prefix that does contain some (the default
+ * `.contexture/` holds the templates) is searched and filtered by
+ * `readablePath` afterwards, because a later positive glob would turn
+ * ripgrep's exclusions into an allowlist.
+ */
+export declare function searchExclusions(config: StoreConfig): string[];
+/** A caller's path as a normalized store-relative one (a leading `/` names the store root); refused when it leaves the store. `''` is the root. */
+export declare function normalizeStorePath(input: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/core/mcp/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/paths.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAK1D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C;;;;;;GAMG;AAEH,oEAAoE;AACpE,eAAO,MAAM,cAAc,cAAc,CAAC;AAE1C,MAAM,MAAM,eAAe,GAAG,eAAe,GAAG,KAAK,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE3F;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,eAAe,GAAG,IAAI,CAOxF;AAUD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,WAAW,CAElF;AAED,iIAAiI;AACjI,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,EAAE,CAQrE;AAED,kHAAkH;AAClH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,EAAE,CAEnE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,EAAE,CAG5D;AAED,gGAAgG;AAChG,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAKtE;AAED,wJAAwJ;AACxJ,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAKtE;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,EAAE,CAG9D;AAED,mJAAmJ;AACnJ,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOxD"}

package/dist/core/mcp/paths.js

@@ -0,0 +1,111 @@
+import path from 'node:path';
+import { DEFAULT_LOG_PATH } from '../../config/defaults.js';
+import { isUnderAnyPrefix, isUnderPrefix } from '../fs/prefix.js';
+import { admitsNotePath } from '../notes/list.js';
+import { CONFIG_FILE_NAME } from '../root.js';
+import { ToolRefusal } from './jsonrpc.js';
+/**
+ * serve-the-session-lifecycle-to-chat-apps D5: what the file tools and the
+ * command runners may read and change, as predicates over a store-relative,
+ * `/`-separated path. Kept free of any session or snapshot, so the file tools
+ * over the served commit, the same tools inside a session, and `ctxr_write`'s
+ * before- and after-run checks all ask the same question.
+ */
+/** The store's entry document, readable though it is not a note. */
+export const ENTRY_DOCUMENT = 'AGENTS.md';
+/**
+ * D5, revision 7: the one protected-path predicate. Inside a session a member
+ * may change what a local session may change except these: the configuration
+ * (it grants MCP scopes), anything whose first segment begins with `.git` —
+ * the hooks directory among them, because a commit in a session worktree runs
+ * that worktree's hooks on the server — derived and cache paths, the
+ * worktrees path, and the managed skills path, which `ctxr update` owns.
+ * Null when the path may be changed.
+ */
+export function protectedReason(rel, config) {
+    if (rel === CONFIG_FILE_NAME)
+        return 'configuration';
+    if ((rel.split('/')[0] ?? '').startsWith('.git'))
+        return 'git';
+    if (isUnderAnyPrefix(rel, config.derived.paths))
+        return 'derived';
+    if (isUnderPrefix(rel, config.session.worktrees_path))
+        return 'worktrees';
+    if (isUnderPrefix(rel, config.harness.skills_path))
+        return 'skills';
+    return null;
+}
+const PROTECTED_WORDS = {
+    configuration: 'the store configuration',
+    git: "git's own files and the hooks directory, which a commit on the server would run",
+    derived: 'a derived or cache path',
+    worktrees: 'the session worktrees path',
+    skills: 'the managed skills path',
+};
+export function protectedRefusal(rel, reason) {
+    return new ToolRefusal('mcp.path_protected', `"${rel}" is ${PROTECTED_WORDS[reason]}, which cannot be changed from here; change it in a local session.`, { path: rel, reason });
+}
+/** D5: the paths the owned skills read that are not notes: templates, house conventions, the mission, the log and the skills. */
+export function widenedReadablePrefixes(config) {
+    return [
+        config.templates.path,
+        config.harness.guidance_path,
+        config.harness.skills_path,
+        config.organize.log_path ?? DEFAULT_LOG_PATH,
+        ...(config.organize.mission_path !== undefined ? [config.organize.mission_path] : []),
+    ];
+}
+/** Never read or returned, whatever else applies: configuration, `.git`, derived paths and the worktrees path. */
+export function neverReadablePrefixes(config) {
+    return [CONFIG_FILE_NAME, '.git', ...config.derived.paths, config.session.worktrees_path];
+}
+/**
+ * D5: hidden from the file tools. `retrieval.exclude_paths` stays hidden — it
+ * is the operator's declared intent — except the capture tier, which `Read`
+ * marks, and the widened readable set, which the skills need.
+ */
+export function hiddenPrefixes(config) {
+    const captureRoot = config.ingest.capture_root.replace(/\/+$/, '');
+    return [...config.retrieval.exclude_paths.filter((p) => p.replace(/\/+$/, '') !== captureRoot), ...neverReadablePrefixes(config)];
+}
+/** Whether `rel` is a path the file tools may name at all (a file or a directory to search). */
+export function nameablePath(rel, config) {
+    if (rel === '')
+        return true;
+    if (isUnderAnyPrefix(rel, neverReadablePrefixes(config)))
+        return false;
+    if (isUnderAnyPrefix(rel, widenedReadablePrefixes(config)))
+        return true;
+    return !isUnderAnyPrefix(rel, hiddenPrefixes(config));
+}
+/** What `Read` answers for, as one predicate: a note, a markdown capture, the entry document, or the widened set. Grep and Glob return nothing else. */
+export function readablePath(rel, config) {
+    if (!nameablePath(rel, config) || rel === '')
+        return false;
+    if (isUnderAnyPrefix(rel, widenedReadablePrefixes(config)))
+        return true;
+    if (admitsNotePath(rel, config) || rel === ENTRY_DOCUMENT)
+        return true;
+    return rel.endsWith('.md') && isUnderAnyPrefix(rel, [config.ingest.capture_root]);
+}
+/**
+ * The exclusions ripgrep is given: the hidden prefixes that contain nothing in
+ * the widened set. A hidden prefix that does contain some (the default
+ * `.contexture/` holds the templates) is searched and filtered by
+ * `readablePath` afterwards, because a later positive glob would turn
+ * ripgrep's exclusions into an allowlist.
+ */
+export function searchExclusions(config) {
+    const widened = widenedReadablePrefixes(config).map((p) => p.replace(/\/+$/, ''));
+    return hiddenPrefixes(config).filter((hidden) => !widened.some((w) => isUnderPrefix(w, hidden)) || isUnderAnyPrefix(hidden, neverReadablePrefixes(config)));
+}
+/** A caller's path as a normalized store-relative one (a leading `/` names the store root); refused when it leaves the store. `''` is the root. */
+export function normalizeStorePath(input) {
+    const cleaned = input.trim().replace(/\\/g, '/');
+    const normalized = path.posix.normalize(`/${cleaned}`).replace(/^\/+/, '').replace(/\/+$/, '');
+    if (normalized === '..' || normalized.startsWith('../') || cleaned.split('/').includes('..')) {
+        throw new ToolRefusal('mcp.path_outside_store', `"${input}" is outside the store.`);
+    }
+    return normalized;
+}
+//# sourceMappingURL=paths.js.map

package/dist/core/mcp/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/core/mcp/paths.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C;;;;;;GAMG;AAEH,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC;AAI1C;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,MAAmB;IAC9D,IAAI,GAAG,KAAK,gBAAgB;QAAE,OAAO,eAAe,CAAC;IACrD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC;QAAE,OAAO,WAAW,CAAC;IAC1E,IAAI,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,QAAQ,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,eAAe,GAAoC;IACvD,aAAa,EAAE,yBAAyB;IACxC,GAAG,EAAE,iFAAiF;IACtF,OAAO,EAAE,yBAAyB;IAClC,SAAS,EAAE,4BAA4B;IACvC,MAAM,EAAE,yBAAyB;CAClC,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,MAAuB;IACnE,OAAO,IAAI,WAAW,CAAC,oBAAoB,EAAE,IAAI,GAAG,QAAQ,eAAe,CAAC,MAAM,CAAC,oEAAoE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;AAClL,CAAC;AAED,iIAAiI;AACjI,MAAM,UAAU,uBAAuB,CAAC,MAAmB;IACzD,OAAO;QACL,MAAM,CAAC,SAAS,CAAC,IAAI;QACrB,MAAM,CAAC,OAAO,CAAC,aAAa;QAC5B,MAAM,CAAC,OAAO,CAAC,WAAW;QAC1B,MAAM,CAAC,QAAQ,CAAC,QAAQ,IAAI,gBAAgB;QAC5C,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACtF,CAAC;AACJ,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,qBAAqB,CAAC,MAAmB;IACvD,OAAO,CAAC,gBAAgB,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;AAC5F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAmB;IAChD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,WAAW,CAAC,EAAE,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;AACpI,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,MAAmB;IAC3D,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,gBAAgB,CAAC,GAAG,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,IAAI,gBAAgB,CAAC,GAAG,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,OAAO,CAAC,gBAAgB,CAAC,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,wJAAwJ;AACxJ,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,MAAmB;IAC3D,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,gBAAgB,CAAC,GAAG,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,GAAG,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IACvE,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAmB;IAClD,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAClF,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,gBAAgB,CAAC,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC9J,CAAC;AAED,mJAAmJ;AACnJ,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/F,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,WAAW,CAAC,wBAAwB,EAAE,IAAI,KAAK,yBAAyB,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/core/mcp/sessions.d.ts

@@ -1,19 +1,22 @@
 import type { StoreConfig } from '../../config/schema.js';
 import { type ForgeCredentials } from '../forge/credentials.js';
-import type { ForgeClient, PullRequest } from '../forge/github.js';
+import type { ForgeClient } from '../forge/github.js';
 import type { GitRunner } from '../git/exec.js';
-import { type PullState } from '../session/remote.js';
+import type { CommitOptions } from '../session/commit.js';
+import { type StartedSession } from '../session/start.js';
 /**
  * serve-the-store-over-mcp design.md D9, D13: the write side the MCP surface
- * shares between `capture` and the member drafts. Everything it writes is an
- * ordinary session — a worktree under the configured worktrees path, on a
- * branch under the session prefix, with a pull request — so the approval page
- * lists it and `ctxr land` lands it with no MCP-specific path anywhere.
+ * shares between its tools. Everything it writes is an ordinary session — a
+ * worktree under the configured worktrees path, on a branch under the session
+ * prefix, with a pull request — so the approval page lists it and `ctxr land`
+ * lands it with no MCP-specific path anywhere.
  *
- * bring-the-session-lifecycle-into-the-cli (Migration Plan, step 2): push,
- * publish, remove and the commit call itself are `src/core/session/`'s, shared
- * with `ctxr session submit` and `discard`; what stays here is the MCP
- * surface's own wording of their failures.
+ * serve-the-session-lifecycle-to-chat-apps D3: starting, submitting,
+ * rebasing and discarding are `src/core/session/`'s, the same calls
+ * `ctxr session <verb>` makes. What stays here is what the MCP layer adds:
+ * the server's forge credential on every remote step, the member as commit
+ * author, and the surface's wording of a refusal. The per-member draft's
+ * helpers are gone with the draft.
  */
 export interface WriteDeps {
     git: GitRunner;
@@ -31,51 +34,26 @@ export interface WriteDeps {
     /** The store root's path inside its repository, when the caller has already resolved it; asked of git otherwise. */
     repoPrefix?: string;
 }
-export interface Session {
-    /** The worktree directory's name: the key the approval page addresses it by. */
-    name: string;
-    path: string;
-    branch: string;
-    label: string | null;
-}
-export type { PullState };
 export declare class WriteRefusal extends Error {
     readonly code: string;
     readonly details?: Record<string, unknown> | undefined;
     constructor(code: string, message: string, details?: Record<string, unknown> | undefined);
 }
-/** One write at a time across `capture`, `Edit` and `Write` (design.md D9, D13). */
+/** One write at a time across every tool that changes a worktree, the ownership record or the forge (design.md D9, D13). */
 export declare class Mutex {
     private tail;
     run<T>(fn: () => Promise<T>): Promise<T>;
 }
-export declare function approvalUrl(deps: WriteDeps, session: Session): string;
-/** The session worktrees on disk whose label starts with `labelPrefix`, with their branches. */
-export declare function sessionsLabelled(deps: WriteDeps, labelPrefix: string): Promise<Session[]>;
-/** What the forge says about the pull requests for `branch`: the open one, else merged, else closed, else none. */
-export declare function pullStateFor(deps: WriteDeps, branch: string): Promise<PullState>;
-/** A session whose pull request was closed without merging is removed: worktree and local branch (D9, D13). */
-export declare function removeSession(deps: WriteDeps, session: Session): Promise<void>;
-/** A new session from the freshly fetched default branch, exactly as `ctxr session start` names and places one. */
-export declare function startSession(deps: WriteDeps, label: string): Promise<Session>;
-/** The store-relative path's location inside the repository, for `git show <branch>:<path>`. */
-export declare function repoPathOf(deps: WriteDeps, storeRelative: string): Promise<string>;
-/**
- * Stages `paths` and commits them authored by the member, with the store's
- * hooks running as for any commit. On a refusal the worktree is restored to
- * its tip — a draft never keeps a change its pull request does not carry —
- * and the hook's output is the refusal (design.md D13).
- */
-export declare function commitAs(deps: WriteDeps, session: Session, email: string, paths: readonly string[], subject: string, trailer: string): Promise<string>;
-export declare function restore(deps: WriteDeps, session: Session): Promise<void>;
+/** The approval page for a session, at the server's own address. */
+export declare function approvalUrl(deps: WriteDeps, sessionName: string): string;
 /**
- * Publishes whatever the session holds that the forge does not, through the
- * shared core's idempotent publish, so a retry after any partial failure
- * converges on exactly one pull request (design.md D9, D13). An open pull
- * request is found, never rewritten: its body is the draft's own.
+ * A new session from the freshly fetched default branch, through the core
+ * `ctxr session start` calls. A closed pull request's branch stays on the
+ * remote, so a generated name the remote already carries is stepped past.
  */
-export declare function publish(deps: WriteDeps, session: Session, pull: {
-    title: string;
-    body: string;
-}): Promise<PullRequest>;
+export declare function startSession(deps: WriteDeps, label: string | undefined): Promise<StartedSession>;
+/** D3: the member as the commit's author, with a trailer naming them; the recording login commits when the host has no identity. */
+export declare function memberCommit(deps: WriteDeps, email: string, trailer: string): Omit<CommitOptions, 'message'>;
+/** A WriteRefusal or a core refusal, as a refusal the client model can read rather than a protocol error. */
+export declare function asToolRefusal(err: unknown): unknown;
 //# sourceMappingURL=sessions.d.ts.map

package/dist/core/mcp/sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/sessions.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAgB,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,EAAa,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAI3D,OAAO,EAA0H,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAE9K;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,SAAS,CAAC;IACf,8GAA8G;IAC9G,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAClD,GAAG,IAAI,IAAI,CAAC;IACZ,+GAA+G;IAC/G,cAAc,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,oHAAoH;IACpH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,OAAO;IACtB,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,YAAY,EAAE,SAAS,EAAE,CAAC;AAE1B,qBAAa,YAAa,SAAQ,KAAK;IAEnC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAErB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAH5C,YACW,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACN,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA,EAI3C;CACF;AAED,oFAAoF;AACpF,qBAAa,KAAK;IAChB,OAAO,CAAC,IAAI,CAAuC;IAEnD,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAIvC;CACF;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAErE;AAED,gGAAgG;AAChG,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAY/F;AAED,mHAAmH;AACnH,wBAAsB,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAEtF;AAED,+GAA+G;AAC/G,wBAAsB,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpF;AAED,mHAAmH;AACnH,wBAAsB,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAiBnF;AASD,gGAAgG;AAChG,wBAAsB,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGxF;AAED;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAmB5J;AAED,wBAAsB,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAG9E;AAED;;;;;GAKG;AACH,wBAAsB,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAU5H"}
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../src/core/mcp/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EAAgB,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,OAAO,EAAoC,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG5F;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,SAAS,CAAC;IACf,8GAA8G;IAC9G,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAClD,GAAG,IAAI,IAAI,CAAC;IACZ,+GAA+G;IAC/G,cAAc,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,oHAAoH;IACpH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,YAAa,SAAQ,KAAK;IAEnC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAErB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAH5C,YACW,IAAI,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACN,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA,EAI3C;CACF;AAED,4HAA4H;AAC5H,qBAAa,KAAK;IAChB,OAAO,CAAC,IAAI,CAAuC;IAEnD,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAIvC;CACF;AAED,oEAAoE;AACpE,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAExE;AASD;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,CAYtG;AAED,oIAAoI;AACpI,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAE5G;AAED,6GAA6G;AAC7G,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAInD"}

package/dist/core/mcp/sessions.js

@@ -1,9 +1,8 @@
-import path from 'node:path';
+import { ContextureError } from '../errors.js';
 import { runRemoteGit } from '../forge/credentials.js';
-import { addWorktree } from '../git/worktree.js';
-import { generateSessionBranchName, listSessionWorktreeDirs, sessionLabelFromDirName, sessionLabelSlug, worktreePathFor } from '../session.js';
-import { commitStaged } from '../session/commit.js';
-import { firstLines, publishSession, pullStateFor as forgePullState, removeSession as removeSessionWorktree, SessionRemoteError } from '../session/remote.js';
+import { fetchDefaultBranch } from '../session/status.js';
+import { startSession as startCoreSession } from '../session/start.js';
+import { ToolRefusal } from './jsonrpc.js';
 export class WriteRefusal extends Error {
     code;
     details;
@@ -14,7 +13,7 @@ export class WriteRefusal extends Error {
         this.name = 'WriteRefusal';
     }
 }
-/** One write at a time across `capture`, `Edit` and `Write` (design.md D9, D13). */
+/** One write at a time across every tool that changes a worktree, the ownership record or the forge (design.md D9, D13). */
 export class Mutex {
     tail = Promise.resolve();
     run(fn) {
@@ -23,52 +22,9 @@ export class Mutex {
         return next;
     }
 }
-export function approvalUrl(deps, session) {
-    return `${deps.baseUrl.replace(/\/+$/, '')}/approve/${encodeURIComponent(session.name)}`;
-}
-/** The session worktrees on disk whose label starts with `labelPrefix`, with their branches. */
-export async function sessionsLabelled(deps, labelPrefix) {
-    const root = path.join(deps.canonicalRoot, deps.config.session.worktrees_path);
-    const sessions = [];
-    for (const name of await listSessionWorktreeDirs(deps.canonicalRoot, deps.config)) {
-        const label = sessionLabelFromDirName(deps.config, name);
-        if (label === null || !label.startsWith(labelPrefix))
-            continue;
-        const dir = path.join(root, name);
-        const branch = (await deps.git.run(['symbolic-ref', '--short', 'HEAD'], { cwd: dir, allowFailure: true })).stdout.trim();
-        if (branch === '')
-            continue;
-        sessions.push({ name, path: dir, branch, label });
-    }
-    return sessions.sort((a, b) => (a.name < b.name ? -1 : 1));
-}
-/** What the forge says about the pull requests for `branch`: the open one, else merged, else closed, else none. */
-export async function pullStateFor(deps, branch) {
-    return forgePullState(deps.forge, branch);
-}
-/** A session whose pull request was closed without merging is removed: worktree and local branch (D9, D13). */
-export async function removeSession(deps, session) {
-    await removeSessionWorktree(deps.git, deps.canonicalRoot, session);
-}
-/** A new session from the freshly fetched default branch, exactly as `ctxr session start` names and places one. */
-export async function startSession(deps, label) {
-    const slug = sessionLabelSlug(label);
-    const defaultBranch = deps.config.git.default_branch;
-    await runRemoteGit(deps.git, deps.credentials, deps.env, ['fetch', '--quiet', 'origin', `+refs/heads/${defaultBranch}:refs/remotes/origin/${defaultBranch}`], {
-        cwd: deps.canonicalRoot,
-        allowFailure: true,
-    });
-    const hasRemote = (await deps.git.run(['rev-parse', '--verify', '--quiet', `refs/remotes/origin/${defaultBranch}`], { cwd: deps.canonicalRoot, allowFailure: true })).exitCode === 0;
-    // Names carry a timestamp to the second, and a closed pull request's branch stays on the remote: step past any taken name.
-    let branch = generateSessionBranchName(deps.config, deps.now(), slug);
-    for (let step = 1; step <= 60 && (await branchTaken(deps, branch)); step += 1) {
-        branch = generateSessionBranchName(deps.config, new Date(deps.now().getTime() + step * 1000), slug);
-    }
-    const dir = worktreePathFor({ root: deps.canonicalRoot, config: deps.config }, branch);
-    const added = await addWorktree(deps.git, deps.canonicalRoot, dir, branch, hasRemote ? `origin/${defaultBranch}` : defaultBranch, { allowFailure: true });
-    if (added.exitCode !== 0)
-        throw new WriteRefusal('mcp.session_not_started', `A session could not be started: ${firstLines(added.stderr)}`);
-    return { name: path.basename(dir), path: dir, branch, label: slug };
+/** The approval page for a session, at the server's own address. */
+export function approvalUrl(deps, sessionName) {
+    return `${deps.baseUrl.replace(/\/+$/, '')}/approve/${encodeURIComponent(sessionName)}`;
 }
 async function branchTaken(deps, branch) {
     const local = await deps.git.run(['rev-parse', '--verify', '--quiet', `refs/heads/${branch}`], { cwd: deps.canonicalRoot, allowFailure: true });
@@ -77,58 +33,30 @@ async function branchTaken(deps, branch) {
     const remote = await runRemoteGit(deps.git, deps.credentials, deps.env, ['ls-remote', '--exit-code', 'origin', `refs/heads/${branch}`], { cwd: deps.canonicalRoot, allowFailure: true });
     return remote.exitCode === 0;
 }
-/** The store-relative path's location inside the repository, for `git show <branch>:<path>`. */
-export async function repoPathOf(deps, storeRelative) {
-    const prefix = deps.repoPrefix ?? (await deps.git.run(['rev-parse', '--show-prefix'], { cwd: deps.canonicalRoot, allowFailure: true })).stdout.trim();
-    return `${prefix}${storeRelative}`;
-}
 /**
- * Stages `paths` and commits them authored by the member, with the store's
- * hooks running as for any commit. On a refusal the worktree is restored to
- * its tip — a draft never keeps a change its pull request does not carry —
- * and the hook's output is the refusal (design.md D13).
+ * A new session from the freshly fetched default branch, through the core
+ * `ctxr session start` calls. A closed pull request's branch stays on the
+ * remote, so a generated name the remote already carries is stepped past.
  */
-export async function commitAs(deps, session, email, paths, subject, trailer) {
-    const run = (args) => deps.git.run(args, { cwd: session.path, allowFailure: true });
-    const added = await run(['add', '--', ...paths]);
-    if (added.exitCode !== 0) {
-        await restore(deps, session);
-        throw new WriteRefusal('mcp.commit_refused', `The change could not be staged: ${firstLines(added.stderr)}`);
-    }
-    const name = email.split('@')[0] ?? email;
-    const committed = await commitStaged(deps.git, session.path, deps.env, {
-        message: subject,
-        author: { name, email },
-        trailer: { key: trailer, value: email },
-        fallbackCommitter: deps.recordingLogin,
-    });
-    if (committed.exitCode !== 0) {
-        await restore(deps, session);
-        throw new WriteRefusal('mcp.commit_refused', `The store refused the change: ${firstLines(`${committed.stdout}\n${committed.stderr}`, 12)}`);
-    }
-    return (await run(['rev-parse', 'HEAD'])).stdout.trim();
-}
-export async function restore(deps, session) {
-    await deps.git.run(['reset', '--quiet', '--hard', 'HEAD'], { cwd: session.path, allowFailure: true });
-    await deps.git.run(['clean', '-fdq'], { cwd: session.path, allowFailure: true });
-}
-/**
- * Publishes whatever the session holds that the forge does not, through the
- * shared core's idempotent publish, so a retry after any partial failure
- * converges on exactly one pull request (design.md D9, D13). An open pull
- * request is found, never rewritten: its body is the draft's own.
- */
-export async function publish(deps, session, pull) {
-    try {
-        return (await publishSession(deps, session, pull)).pull;
-    }
-    catch (err) {
-        if (!(err instanceof SessionRemoteError))
-            throw err;
-        if (err.step === 'push') {
-            throw new WriteRefusal('mcp.push_failed', `The change is saved in its session but could not be pushed yet (${err.detail}). Retry the same call to publish it.`, { session: session.name });
-        }
-        throw new WriteRefusal('mcp.pull_request_failed', `The change is pushed but its pull request could not be opened yet (${err.detail}). Retry the same call to open it.`, { session: session.name });
-    }
+export async function startSession(deps, label) {
+    return startCoreSession({
+        git: deps.git,
+        config: deps.config,
+        fetch: (cwd) => fetchDefaultBranch({ git: deps.git, config: deps.config, env: deps.env, credentials: deps.credentials }, cwd),
+        now: deps.now,
+        branchTaken: (branch) => branchTaken(deps, branch),
+    }, deps.canonicalRoot, label);
+}
+/** D3: the member as the commit's author, with a trailer naming them; the recording login commits when the host has no identity. */
+export function memberCommit(deps, email, trailer) {
+    return { author: { name: email.split('@')[0] ?? email, email }, trailer: { key: trailer, value: email }, fallbackCommitter: deps.recordingLogin };
+}
+/** A WriteRefusal or a core refusal, as a refusal the client model can read rather than a protocol error. */
+export function asToolRefusal(err) {
+    if (err instanceof WriteRefusal)
+        return new ToolRefusal(err.code, err.message, err.details);
+    if (err instanceof ContextureError)
+        return new ToolRefusal(err.finding.code, err.finding.message, err.finding.details);
+    return err;
 }
 //# sourceMappingURL=sessions.js.map

package/dist/core/mcp/sessions.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../src/core/mcp/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAyB,MAAM,yBAAyB,CAAC;AAG9E,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC/I,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,IAAI,cAAc,EAAE,aAAa,IAAI,qBAAqB,EAAE,kBAAkB,EAAkB,MAAM,sBAAsB,CAAC;AA0C9K,MAAM,OAAO,YAAa,SAAQ,KAAK;IAE1B,IAAI;IAEJ,OAAO;IAHlB,YACW,IAAY,EACrB,OAAe,EACN,OAAiC;QAE1C,KAAK,CAAC,OAAO,CAAC,CAAC;oBAJN,IAAI;uBAEJ,OAAO;QAGhB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,oFAAoF;AACpF,MAAM,OAAO,KAAK;IACR,IAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEnD,GAAG,CAAI,EAAoB;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,IAAe,EAAE,OAAgB;IAC3D,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3F,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAe,EAAE,WAAmB;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,uBAAuB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClF,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,SAAS;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACzH,IAAI,MAAM,KAAK,EAAE;YAAE,SAAS;QAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,mHAAmH;AACnH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAe,EAAE,MAAc;IAChE,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED,+GAA+G;AAC/G,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAe,EAAE,OAAgB;IACnE,MAAM,qBAAqB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,mHAAmH;AACnH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAe,EAAE,KAAa;IAC/D,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;IACrD,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,aAAa,wBAAwB,aAAa,EAAE,CAAC,EAAE;QAC5J,GAAG,EAAE,IAAI,CAAC,aAAa;QACvB,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,uBAAuB,aAAa,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC;IACrL,2HAA2H;IAC3H,IAAI,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IACtE,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,EAAE,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QAC9E,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU,aAAa,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1J,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,mCAAmC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3I,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAe,EAAE,MAAc;IACxD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAChJ,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACzL,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAe,EAAE,aAAqB;IACrE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACtJ,OAAO,GAAG,MAAM,GAAG,aAAa,EAAE,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAe,EAAE,OAAgB,EAAE,KAAa,EAAE,KAAwB,EAAE,OAAe,EAAE,OAAe;IACzI,MAAM,GAAG,GAAG,CAAC,IAAuB,EAAsB,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3H,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7B,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,mCAAmC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QACrE,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;QACvB,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE;QACvC,iBAAiB,EAAE,IAAI,CAAC,cAAc;KACvC,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7B,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,iCAAiC,UAAU,CAAC,GAAG,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9I,CAAC;IACD,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAe,EAAE,OAAgB;IAC7D,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACtG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;AACnF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAe,EAAE,OAAgB,EAAE,IAAqC;IACpG,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,kBAAkB,CAAC;YAAE,MAAM,GAAG,CAAC;QACpD,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,mEAAmE,GAAG,CAAC,MAAM,uCAAuC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7L,CAAC;QACD,MAAM,IAAI,YAAY,CAAC,yBAAyB,EAAE,sEAAsE,GAAG,CAAC,MAAM,oCAAoC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACrM,CAAC;AACH,CAAC"}
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../src/core/mcp/sessions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAyB,MAAM,yBAAyB,CAAC;AAI9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAuB,MAAM,qBAAqB,CAAC;AAC5F,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAkC3C,MAAM,OAAO,YAAa,SAAQ,KAAK;IAE1B,IAAI;IAEJ,OAAO;IAHlB,YACW,IAAY,EACrB,OAAe,EACN,OAAiC;QAE1C,KAAK,CAAC,OAAO,CAAC,CAAC;oBAJN,IAAI;uBAEJ,OAAO;QAGhB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,4HAA4H;AAC5H,MAAM,OAAO,KAAK;IACR,IAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEnD,GAAG,CAAI,EAAoB;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAC,IAAe,EAAE,WAAmB;IAC9D,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAe,EAAE,MAAc;IACxD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAChJ,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACzL,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAe,EAAE,KAAyB;IAC3E,OAAO,gBAAgB,CACrB;QACE,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC;QAC7H,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC;KACnD,EACD,IAAI,CAAC,aAAa,EAClB,KAAK,CACN,CAAC;AACJ,CAAC;AAED,oIAAoI;AACpI,MAAM,UAAU,YAAY,CAAC,IAAe,EAAE,KAAa,EAAE,OAAe;IAC1E,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;AACpJ,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,GAAG,YAAY,YAAY;QAAE,OAAO,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5F,IAAI,GAAG,YAAY,eAAe;QAAE,OAAO,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvH,OAAO,GAAG,CAAC;AACb,CAAC"}