dodo-mcp 1.0.0

package/dist/server/optionalServices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"optionalServices.js","sourceRoot":"","sources":["../../src/server/optionalServices.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAyB,EAAE,GAA2B;IAC3F,MAAM,QAAQ,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;IAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACnC,IAAI,CAAC;QACH,qEAAqE;QACrE,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,CAAC,gFAAgF,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QACD,EAAE,CAAC,QAAQ,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QACxG,GAAG,CAAC,qCAAqC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IACvH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,0BAA2B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,OAAO,KAAK,GAAG,MAAM,+BAA+B,CAAC;AACrD,SAAS,SAAS;IAChB,OAAO,OAAO,GAAG,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC"}

package/dist/server/projectLease.js

@@ -0,0 +1,46 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { randomBytes, createHash } from 'node:crypto';
+import { DodoError } from '../errors.js';
+/** Exclusive pre-bootstrap lease. A live/reused PID fails closed; never terminate it. */
+export function acquireProjectLease(configDir, root) {
+    const dir = path.join(configDir, 'runtime-leases');
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const file = path.join(dir, createHash('sha256').update(root).digest('hex') + '.json');
+    const value = JSON.stringify({ pid: process.pid, nonce: randomBytes(24).toString('hex') });
+    for (let attempt = 0; attempt < 2; attempt++) {
+        try {
+            fs.writeFileSync(file, value, { flag: 'wx', mode: 0o600 });
+            return () => { try {
+                if (fs.readFileSync(file, 'utf8') === value)
+                    fs.unlinkSync(file);
+            }
+            catch { /* absent */ } };
+        }
+        catch (e) {
+            if (e.code !== 'EEXIST')
+                throw e;
+            try {
+                const st = fs.lstatSync(file);
+                if (!st.isFile() || st.isSymbolicLink() || st.nlink !== 1 || st.size > 1024)
+                    throw new Error('invalid lease');
+                const lease = JSON.parse(fs.readFileSync(file, 'utf8'));
+                if (!Number.isSafeInteger(lease.pid) || lease.pid <= 0)
+                    throw new Error('invalid pid');
+                try {
+                    process.kill(lease.pid, 0);
+                }
+                catch (err) {
+                    if (err.code === 'ESRCH') {
+                        fs.unlinkSync(file);
+                        continue;
+                    }
+                }
+            }
+            catch { /* uncertain lease is never stolen */ }
+            throw new DodoError('CONFLICT', 'another DODO runtime holds this project; close it before opening another');
+        }
+    }
+    throw new DodoError('CONFLICT', 'could not acquire project runtime lease');
+}
+//# sourceMappingURL=projectLease.js.map

package/dist/server/projectLease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectLease.js","sourceRoot":"","sources":["../../src/server/projectLease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,yFAAyF;AACzF,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,IAAY;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACnD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3F,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC;gBAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,KAAK;oBAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACtL,OAAO,CAAC,EAAE,CAAC;YACT,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC;YAC5D,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC9B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,GAAG,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;gBAC9G,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAoB,CAAC;gBAC3E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;gBACvF,IAAI,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBAC/C,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;wBAAC,SAAS;oBAAC,CAAC;gBACzF,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,qCAAqC,CAAC,CAAC;YACjD,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,0EAA0E,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,yCAAyC,CAAC,CAAC;AAC7E,CAAC"}

package/dist/server/stdioServer.js

@@ -0,0 +1,75 @@
+import { InstallationRuntime } from './installationRuntime.js';
+import { instructionsFor } from './instructions.js';
+import { McpServer } from '@modelcontextprotocol/server';
+import { serveStdio, StdioServerTransport } from '@modelcontextprotocol/server/stdio';
+import { ipcSocketPath } from '../config/paths.js';
+import { ALL_SCOPES } from '../security/policy.js';
+import { registerSurface, surfaceStats } from '../tools/surface.js';
+import { startOwnerControl } from '../ipc/ownerControl.js';
+import { bootstrapWorkspace } from './bootstrap.js';
+import { createIpcDispatcher } from './ipcDispatch.js';
+import { attachOptionalServices } from './optionalServices.js';
+import { DODO_VERSION } from './version.js';
+export const STDIO_PRINCIPAL = {
+    grantId: 'local-stdio',
+    clientId: 'stdio',
+    sub: 'owner',
+    scopes: [...ALL_SCOPES],
+};
+export async function startStdioServer(opts) {
+    const log = opts.onLog ?? ((line) => process.stderr.write(`${line}\n`));
+    const ws = bootstrapWorkspace({
+        invokedCwd: opts.invokedCwd,
+        ...(opts.rootOverride !== undefined ? { rootOverride: opts.rootOverride } : {}),
+        allowUnsafeRoot: opts.allowUnsafeRoot ?? false,
+        log,
+    });
+    attachOptionalServices(ws, log);
+    ws.services.localPrincipal = { ...STDIO_PRINCIPAL, scopes: [...STDIO_PRINCIPAL.scopes] };
+    const installation = new InstallationRuntime(ws, () => ws, async (target) => startOwnerControl(target, createIpcDispatcher({ ws: target, transport: { kind: 'stdio', port: 0, locked: false, publicUrl: null }, requestStop: () => void close() })), log);
+    // STDIO keeps the FULL per-tool catalog by default: local clients (Codex,
+    // Claude Code, Cursor) rely on the individual tool contract (ADR-029).
+    const surface = opts.toolSurface ?? ws.config.toolSurface ?? 'full';
+    const surfaceFeatures = { subagents: ws.config.exposeSubagentsToMcp };
+    const factory = () => {
+        const server = new McpServer({ name: 'dodo', version: DODO_VERSION, title: 'DODO workspace server (stdio)' }, { instructions: instructionsFor(surface, surfaceFeatures) });
+        registerSurface(server, ws.services, surface, surfaceFeatures);
+        return server;
+    };
+    const handle = serveStdio(factory, {
+        legacy: 'serve',
+        transport: new StdioServerTransport(process.stdin, process.stdout, { maxBufferSize: ws.services.limits.requestBodyBytes }),
+        onerror: (err) => log(`[dodo] mcp: ${err.message}`),
+    });
+    const ipcPath = ipcSocketPath(ws.configDir, ws.workspaceId);
+    const ownerControl = await startOwnerControl(ws, createIpcDispatcher({
+        ws,
+        transport: { kind: 'stdio', port: 0, locked: false, publicUrl: null },
+        requestStop: () => void close(),
+    }));
+    let closePromise;
+    function close() {
+        if (!closePromise) {
+            const jobsClosed = ws.services.jobs.shutdown(3000);
+            closePromise = (async () => {
+                try {
+                    await handle.close();
+                }
+                catch { /* transport may already be gone */ }
+                await jobsClosed;
+                await ownerControl.close();
+                await installation.close();
+                await ws.shutdownServices();
+                opts.onStopped?.();
+            })();
+        }
+        return closePromise;
+    }
+    {
+        const stats = surfaceStats(surface, surfaceFeatures);
+        log(`[dodo] mcp tool surface | transport=stdio | surface=${surface} | tools=${stats.toolCount} | schemaBytes=${stats.schemaBytes} | subagents=${surfaceFeatures.subagents ? 'on' : 'off'}`);
+    }
+    log(`[dodo] stdio  |  workspace ${ws.rootInfo.root}  |  ${ws.workspaceId}  |  policy ${ws.services.trustMode()}  |  state ${ws.configDir}`);
+    return { root: ws.rootInfo.root, workspaceId: ws.workspaceId, epoch: ws.epoch, ipcPath, close };
+}
+//# sourceMappingURL=stdioServer.js.map

package/dist/server/stdioServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdioServer.js","sourceRoot":"","sources":["../../src/server/stdioServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAyB,MAAM,8BAA8B,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAoB,MAAM,qBAAqB,CAAC;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AA4B5C,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,OAAO,EAAE,aAAa;IACtB,QAAQ,EAAE,OAAO;IACjB,GAAG,EAAE,OAAO;IACZ,MAAM,EAAE,CAAC,GAAG,UAAU,CAAC;CACxB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAkB;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;IAChF,MAAM,EAAE,GAAG,kBAAkB,CAAC;QAC5B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,KAAK;QAC9C,GAAG;KACJ,CAAC,CAAC;IACH,sBAAsB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAChC,EAAE,CAAC,QAAQ,CAAC,cAAc,GAAG,EAAE,GAAG,eAAe,EAAE,MAAM,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;IAEzF,MAAM,YAAY,GAAG,IAAI,mBAAmB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAExP,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,OAAO,GAAgB,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC;IACjF,MAAM,eAAe,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;IACtE,MAAM,OAAO,GAAqB,GAAG,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,EAAE,YAAY,EAAE,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC;QAC3K,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;QAC/D,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE;QACjC,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,IAAI,oBAAoB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC1H,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,OAAO,EAAE,CAAC;KACpD,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAC1C,EAAE,EACF,mBAAmB,CAAC;QAClB,EAAE;QACF,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE;QACrE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE;KAChC,CAAC,CACH,CAAC;IAEF,IAAI,YAAuC,CAAC;IAC5C,SAAS,KAAK;QACZ,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACnD,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;gBACzB,IAAI,CAAC;oBAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,mCAAmC,CAAC,CAAC;gBAC3E,MAAM,UAAU,CAAC;gBACjB,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;gBAC3B,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;gBAC3B,MAAM,EAAE,CAAC,gBAAgB,EAAE,CAAC;gBAC5B,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACrB,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,CAAC;QACC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACrD,GAAG,CAAC,uDAAuD,OAAO,YAAY,KAAK,CAAC,SAAS,kBAAkB,KAAK,CAAC,WAAW,gBAAgB,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9L,CAAC;IACD,GAAG,CAAC,8BAA8B,EAAE,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC,WAAW,eAAe,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5I,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAClG,CAAC"}

package/dist/server/version.js

@@ -0,0 +1,13 @@
+import fs from 'node:fs';
+import { fileURLToPath } from 'node:url';
+export const DODO_VERSION = readOwnVersion();
+function readOwnVersion() {
+    try {
+        const pkgPath = fileURLToPath(new URL('../../package.json', import.meta.url));
+        return JSON.parse(fs.readFileSync(pkgPath, 'utf8')).version;
+    }
+    catch {
+        return 'unknown';
+    }
+}
+//# sourceMappingURL=version.js.map

package/dist/server/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/server/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,EAAE,CAAC;AAE7C,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,OAAQ,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAyB,CAAC,OAAO,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/server/workspaceHost.js

@@ -0,0 +1,194 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { resolveWorkspaceRoot } from '../workspace/root.js';
+import { mintWorkspaceId } from '../workspace/identity.js';
+import { DodoError } from '../errors.js';
+const MAX_PATH_INPUT = 4096;
+export function createWorkspaceHost(opts) {
+    let current = opts.initial;
+    let currentResources = opts.initialResources;
+    let state = 'ready';
+    let inflightCount = 0;
+    const listeners = new Set();
+    const drainDefault = opts.drainTimeoutMs ?? 15_000;
+    const inflight = {
+        enter() {
+            inflightCount += 1;
+            let done = false;
+            return () => {
+                if (done)
+                    return;
+                done = true;
+                inflightCount -= 1;
+            };
+        },
+        count: () => inflightCount,
+    };
+    async function switchTo(input) {
+        if (state === 'closed')
+            throw new DodoError('CONFLICT', 'server is shutting down');
+        if (state === 'switching')
+            throw new DodoError('CONFLICT', 'a workspace switch is already in progress');
+        const target = validateTarget(input.path);
+        if (target.root === current.rootInfo.root) {
+            return { changed: false, root: current.rootInfo.root, workspaceId: current.workspaceId, epoch: current.epoch, previousRoot: current.rootInfo.root, trustMode: current.services.trustMode() };
+        }
+        if (opts.busy?.())
+            throw new DodoError('CONFLICT', 'project has active agents or explicitly targeted requests');
+        const running = current.services.jobs.runningCount();
+        if (running > 0) {
+            throw new DodoError('CONFLICT', `${running} job(s) are still running in the current workspace`, {
+                recovery: 'wait for them to finish or cancel them (job_cancel / dodo stop) before switching; DODO never kills jobs silently',
+            });
+        }
+        state = 'switching';
+        const prev = current;
+        const prevResources = currentResources;
+        let next;
+        let nextResources;
+        try {
+            // 1. Drain: refuse rather than yank services from under a live request.
+            const deadline = Date.now() + (input.drainTimeoutMs ?? drainDefault);
+            while (inflightCount > 0 && Date.now() < deadline)
+                await sleep(50);
+            if (inflightCount > 0) {
+                throw new DodoError('CONFLICT', `${inflightCount} MCP request(s) still in flight`, { recovery: 'retry in a moment' });
+            }
+            // A request that was in flight may have started a job: check again now
+            // that nothing new can arrive (the gate returns 503 while switching).
+            const startedMeanwhile = prev.services.jobs.runningCount();
+            if (startedMeanwhile > 0) {
+                throw new DodoError('CONFLICT', `${startedMeanwhile} job(s) started while preparing the switch`, {
+                    recovery: 'wait for them to finish or cancel them, then retry',
+                });
+            }
+            if (opts.busy?.())
+                throw new DodoError('CONFLICT', 'target project requests are still running');
+            // 2. Another live process for that root would be clobbered by our IPC bind.
+            const nextId = mintWorkspaceId(prev.store.installSecret(), target.root);
+            if (opts.isRootServedElsewhere && (await opts.isRootServedElsewhere(nextId))) {
+                throw new DodoError('CONFLICT', 'another DODO process already serves that directory', {
+                    recovery: 'stop it there (dodo stop) or use that process instead',
+                });
+            }
+            // 3. Bootstrap + readiness, before anything old is touched.
+            next = opts.bootstrap(target.root);
+            assertReady(next);
+            // 4. Per-workspace resources for the NEW root (IPC socket) — may fail, e.g. EADDRINUSE.
+            nextResources = opts.resources ? await opts.resources(next) : undefined;
+            // 5. Commit: from here on every reader sees the new workspace.
+            current = next;
+            currentResources = nextResources;
+        }
+        catch (err) {
+            // Rollback: the old workspace was never touched; discard the half-built one.
+            state = 'ready';
+            if (nextResources)
+                await nextResources.close().catch(() => undefined);
+            if (next)
+                await next.shutdownServices().catch(() => undefined);
+            throw err;
+        }
+        // 6. Old workspace teardown, strictly after the swap (best effort, logged).
+        try {
+            await prevResources?.close();
+        }
+        catch (err) {
+            opts.log(`[dodo] workspace switch: old IPC close failed: ${err.message}`);
+        }
+        try {
+            await prev.shutdownServices();
+        }
+        catch (err) {
+            opts.log(`[dodo] workspace switch: old services shutdown failed: ${err.message}`);
+        }
+        // Pending approvals of the old workspace/epoch can never be completed
+        // now; deny them explicitly instead of leaving them to expire silently.
+        try {
+            for (const approval of current.store.listPendingApprovals()) {
+                if (approval.workspaceId === prev.workspaceId && approval.epoch === prev.epoch)
+                    current.store.setApprovalStatus(approval.id, 'denied');
+            }
+        }
+        catch {
+            /* best effort */
+        }
+        try {
+            current.store.audit({
+                principal: 'local-config-owner',
+                workspaceId: current.workspaceId,
+                tool: 'local.workspace.switch',
+                paths: [prev.rootInfo.root, current.rootInfo.root],
+                refId: prev.workspaceId,
+                result: 'switched',
+            });
+        }
+        catch {
+            /* audit is best effort */
+        }
+        opts.log(`[dodo] workspace switched: ${prev.rootInfo.root} → ${current.rootInfo.root} (${current.workspaceId}, epoch ${current.epoch})`);
+        for (const l of listeners) {
+            try {
+                l(current, prev);
+            }
+            catch {
+                /* listener errors never break the switch */
+            }
+        }
+        state = 'ready';
+        return { changed: true, root: current.rootInfo.root, workspaceId: current.workspaceId, epoch: current.epoch, previousRoot: prev.rootInfo.root, trustMode: current.services.trustMode() };
+    }
+    return {
+        current: () => current,
+        state: () => state,
+        inflight,
+        switchTo,
+        onSwitch(listener) {
+            listeners.add(listener);
+            return () => listeners.delete(listener);
+        },
+        async close() {
+            if (state === 'closed')
+                return;
+            // Let an in-progress switch settle instead of closing under it.
+            while (state === 'switching')
+                await sleep(50);
+            state = 'closed';
+            while (inflightCount > 0)
+                await sleep(25);
+            try {
+                await currentResources?.close();
+            }
+            catch {
+                /* best effort */
+            }
+            await current.shutdownServices();
+        },
+    };
+}
+/** Owner input → validated real root, through the shared root policy (no --allow-unsafe-root over HTTP). */
+export function validateTarget(input) {
+    if (typeof input !== 'string' || input.length === 0 || input.length > MAX_PATH_INPUT || input.includes('\0')) {
+        throw new DodoError('INVALID_INPUT', 'path must be a non-empty absolute path');
+    }
+    if (!path.isAbsolute(input)) {
+        throw new DodoError('INVALID_INPUT', 'path must be absolute (e.g. /Users/you/projects/app)');
+    }
+    const info = resolveWorkspaceRoot(input, { allowUnsafe: false });
+    return { root: info.root };
+}
+function assertReady(ws) {
+    try {
+        if (!fs.statSync(ws.rootInfo.root).isDirectory())
+            throw new Error('root is not a directory');
+        ws.store.trustMode(ws.workspaceId); // store reachable for this workspace
+        ws.services.listService.tree('.', { depth: 1, maxEntries: 5 }); // path policy + filesystem answer
+    }
+    catch (err) {
+        throw new DodoError('INTERNAL_ERROR', `new workspace failed its readiness check: ${err.message}`);
+    }
+}
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+//# sourceMappingURL=workspaceHost.js.map

package/dist/server/workspaceHost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaceHost.js","sourceRoot":"","sources":["../../src/server/workspaceHost.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAmEzC,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,MAAM,UAAU,mBAAmB,CAAC,IAA0B;IAC5D,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC3B,IAAI,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAC7C,IAAI,KAAK,GAAc,OAAO,CAAC;IAC/B,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsE,CAAC;IAChG,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC;IAEnD,MAAM,QAAQ,GAAG;QACf,KAAK;YACH,aAAa,IAAI,CAAC,CAAC;YACnB,IAAI,IAAI,GAAG,KAAK,CAAC;YACjB,OAAO,GAAG,EAAE;gBACV,IAAI,IAAI;oBAAE,OAAO;gBACjB,IAAI,GAAG,IAAI,CAAC;gBACZ,aAAa,IAAI,CAAC,CAAC;YACrB,CAAC,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,aAAa;KAC3B,CAAC;IAEF,KAAK,UAAU,QAAQ,CAAC,KAAkB;QACxC,IAAI,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QACnF,IAAI,KAAK,KAAK,WAAW;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,2CAA2C,CAAC,CAAC;QACxG,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC;QAC/L,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,2DAA2D,CAAC,CAAC;QAChH,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACrD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,GAAG,OAAO,oDAAoD,EAAE;gBAC9F,QAAQ,EAAE,kHAAkH;aAC7H,CAAC,CAAC;QACL,CAAC;QAED,KAAK,GAAG,WAAW,CAAC;QACpB,MAAM,IAAI,GAAG,OAAO,CAAC;QACrB,MAAM,aAAa,GAAG,gBAAgB,CAAC;QACvC,IAAI,IAAuC,CAAC;QAC5C,IAAI,aAA6C,CAAC;QAClD,IAAI,CAAC;YACH,wEAAwE;YACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,YAAY,CAAC,CAAC;YACrE,OAAO,aAAa,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;gBAAE,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;YACnE,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,GAAG,aAAa,iCAAiC,EAAE,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACxH,CAAC;YACD,uEAAuE;YACvE,sEAAsE;YACtE,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3D,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,GAAG,gBAAgB,4CAA4C,EAAE;oBAC/F,QAAQ,EAAE,oDAAoD;iBAC/D,CAAC,CAAC;YACL,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,2CAA2C,CAAC,CAAC;YAChG,4EAA4E;YAC5E,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACxE,IAAI,IAAI,CAAC,qBAAqB,IAAI,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC7E,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,oDAAoD,EAAE;oBACpF,QAAQ,EAAE,uDAAuD;iBAClE,CAAC,CAAC;YACL,CAAC;YACD,4DAA4D;YAC5D,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACnC,WAAW,CAAC,IAAI,CAAC,CAAC;YAClB,wFAAwF;YACxF,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,+DAA+D;YAC/D,OAAO,GAAG,IAAI,CAAC;YACf,gBAAgB,GAAG,aAAa,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6EAA6E;YAC7E,KAAK,GAAG,OAAO,CAAC;YAChB,IAAI,aAAa;gBAAE,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtE,IAAI,IAAI;gBAAE,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/D,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,4EAA4E;QAC5E,IAAI,CAAC;YACH,MAAM,aAAa,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,kDAAmD,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,0DAA2D,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,sEAAsE;QACtE,wEAAwE;QACxE,IAAI,CAAC;YACH,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,CAAC;gBAC5D,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;oBAAE,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACzI,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;gBAClB,SAAS,EAAE,oBAAoB;gBAC/B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,IAAI,EAAE,wBAAwB;gBAC9B,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAClD,KAAK,EAAE,IAAI,CAAC,WAAW;gBACvB,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,8BAA8B,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,WAAW,WAAW,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;QACzI,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;YAC9C,CAAC;QACH,CAAC;QACD,KAAK,GAAG,OAAO,CAAC;QAChB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC;IAC3L,CAAC;IAED,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO;QACtB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK;QAClB,QAAQ;QACR,QAAQ;QACR,QAAQ,CAAC,QAAQ;YACf,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,KAAK,KAAK,QAAQ;gBAAE,OAAO;YAC/B,gEAAgE;YAChE,OAAO,KAAK,KAAK,WAAW;gBAAE,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9C,KAAK,GAAG,QAAQ,CAAC;YACjB,OAAO,aAAa,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,gBAAgB,EAAE,KAAK,EAAE,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;YACD,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7G,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,sDAAsD,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,EAAyB;IAC5C,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7F,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,qCAAqC;QACzE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,kCAAkC;IACpG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,6CAA8C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/G,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC"}