easyeda-mcp-pro 0.17.1 → 0.18.0

package/README.md

@@ -40,6 +40,8 @@
   <a href="docs/vendor-terms.md">Vendor Terms and Unsupported Workflows</a>
   ·
   <a href="docs/OPENSSF_BEST_PRACTICES.md">OpenSSF Best Practices</a>
+  ·
+  <a href="docs/REMOTE_MCP_MODES.md">Remote MCP Modes</a>
 </p>
 
 </div>

package/dist/config/version.d.ts

@@ -1 +1 @@
-export declare const SERVER_VERSION = "0.17.1";
+export declare const SERVER_VERSION = "0.18.0";

package/dist/config/version.js

@@ -1,2 +1,2 @@
-export const SERVER_VERSION = '0.17.1'; // x-release-please-version
+export const SERVER_VERSION = '0.18.0'; // x-release-please-version
 //# sourceMappingURL=version.js.map

package/dist/remote/approval-policy.d.ts

@@ -0,0 +1,33 @@
+import type { ActiveProject, RemoteRiskLevel } from './protocol.js';
+export interface ApprovalRequestInput {
+    approvalId: string;
+    userId: string;
+    sessionId: string;
+    toolName: string;
+    riskLevel: RemoteRiskLevel;
+    inputHash: string;
+    actionSummary: string;
+    activeProject?: ActiveProject;
+    expiresAt: Date;
+}
+export type ApprovalDecision = 'approved' | 'rejected' | 'timeout';
+export interface ApprovalRecord extends ApprovalRequestInput {
+    decision?: ApprovalDecision;
+    decidedAt?: Date;
+}
+export declare function requiresApproval(riskLevel: RemoteRiskLevel): boolean;
+export declare function isDestructiveRisk(riskLevel: RemoteRiskLevel): boolean;
+export declare class ApprovalStore {
+    private readonly approvals;
+    request(input: ApprovalRequestInput): ApprovalRecord;
+    resolve(approvalId: string, decision: ApprovalDecision, now?: Date): ApprovalRecord | undefined;
+    consumeApproved(input: {
+        approvalId: string;
+        userId: string;
+        sessionId: string;
+        toolName: string;
+        inputHash: string;
+        now?: Date;
+    }): boolean;
+    get(approvalId: string): ApprovalRecord | undefined;
+}

package/dist/remote/approval-policy.js

@@ -0,0 +1,41 @@
+export function requiresApproval(riskLevel) {
+    return riskLevel !== 'read';
+}
+export function isDestructiveRisk(riskLevel) {
+    return riskLevel === 'destructive';
+}
+export class ApprovalStore {
+    approvals = new Map();
+    request(input) {
+        const record = { ...input };
+        this.approvals.set(input.approvalId, record);
+        return record;
+    }
+    resolve(approvalId, decision, now = new Date()) {
+        const record = this.approvals.get(approvalId);
+        if (!record)
+            return undefined;
+        record.decision = now.getTime() > record.expiresAt.getTime() ? 'timeout' : decision;
+        record.decidedAt = now;
+        return record;
+    }
+    consumeApproved(input) {
+        const record = this.approvals.get(input.approvalId);
+        if (!record)
+            return false;
+        const now = input.now ?? new Date();
+        const matches = record.userId === input.userId &&
+            record.sessionId === input.sessionId &&
+            record.toolName === input.toolName &&
+            record.inputHash === input.inputHash &&
+            record.decision === 'approved' &&
+            record.expiresAt.getTime() > now.getTime();
+        if (matches)
+            this.approvals.delete(input.approvalId);
+        return matches;
+    }
+    get(approvalId) {
+        return this.approvals.get(approvalId);
+    }
+}
+//# sourceMappingURL=approval-policy.js.map

package/dist/remote/approval-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-policy.js","sourceRoot":"","sources":["../../src/remote/approval-policy.ts"],"names":[],"mappings":"AAqBA,MAAM,UAAU,gBAAgB,CAAC,SAA0B;IACzD,OAAO,SAAS,KAAK,MAAM,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAA0B;IAC1D,OAAO,SAAS,KAAK,aAAa,CAAC;AACrC,CAAC;AAED,MAAM,OAAO,aAAa;IACP,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE/D,OAAO,CAAC,KAA2B;QACjC,MAAM,MAAM,GAAmB,EAAE,GAAG,KAAK,EAAE,CAAC;QAC5C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,CACL,UAAkB,EAClB,QAA0B,EAC1B,GAAG,GAAG,IAAI,IAAI,EAAE;QAEhB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpF,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC;QACvB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,eAAe,CAAC,KAOf;QACC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;QACpC,MAAM,OAAO,GACX,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC9B,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YACpC,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YAClC,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YACpC,MAAM,CAAC,QAAQ,KAAK,UAAU;YAC9B,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,OAAO;YAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,GAAG,CAAC,UAAkB;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/remote/index.d.ts

@@ -0,0 +1,5 @@
+export * from './approval-policy.js';
+export * from './observability.js';
+export * from './protocol.js';
+export * from './scope.js';
+export * from './session-router.js';

package/dist/remote/index.js

@@ -0,0 +1,6 @@
+export * from './approval-policy.js';
+export * from './observability.js';
+export * from './protocol.js';
+export * from './scope.js';
+export * from './session-router.js';
+//# sourceMappingURL=index.js.map

package/dist/remote/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/remote/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC"}

package/dist/remote/observability.d.ts

@@ -0,0 +1,27 @@
+import type { RemoteDeploymentMode, RemoteRiskLevel } from './protocol.js';
+export type RemoteAuditEventName = 'remote.session.registered' | 'remote.session.paired' | 'remote.session.disconnected' | 'remote.tool.requested' | 'remote.tool.dispatched' | 'remote.tool.completed' | 'remote.tool.failed' | 'remote.approval.requested' | 'remote.approval.resolved' | 'remote.identity.rejected';
+export interface RemoteAuditEvent {
+    event: RemoteAuditEventName;
+    observedAt: string;
+    mode: RemoteDeploymentMode;
+    userId?: string;
+    sessionId?: string;
+    connectionId?: string;
+    toolName?: string;
+    riskLevel?: RemoteRiskLevel;
+    inputHash?: string;
+    status?: 'ok' | 'error' | 'rejected' | 'timeout';
+    durationMs?: number;
+    errorCode?: string;
+}
+export declare function redactRemotePayload(value: unknown): unknown;
+export declare class RemoteAuditLog {
+    private readonly maxEvents;
+    private events;
+    constructor(maxEvents?: number);
+    record(event: Omit<RemoteAuditEvent, 'observedAt'> & {
+        observedAt?: string;
+    }): RemoteAuditEvent;
+    recent(limit?: number): RemoteAuditEvent[];
+    clear(): void;
+}

package/dist/remote/observability.js

@@ -0,0 +1,37 @@
+const REDACTED = '[redacted]';
+const SECRET_KEY_PATTERN = /(token|secret|password|credential|apiKey|api_key|pairingCode)/i;
+export function redactRemotePayload(value) {
+    if (Array.isArray(value))
+        return value.map((item) => redactRemotePayload(item));
+    if (!value || typeof value !== 'object')
+        return value;
+    const out = {};
+    for (const [key, child] of Object.entries(value)) {
+        out[key] = SECRET_KEY_PATTERN.test(key) ? REDACTED : redactRemotePayload(child);
+    }
+    return out;
+}
+export class RemoteAuditLog {
+    maxEvents;
+    events = [];
+    constructor(maxEvents = 200) {
+        this.maxEvents = maxEvents;
+    }
+    record(event) {
+        const stored = {
+            ...event,
+            observedAt: event.observedAt ?? new Date().toISOString(),
+        };
+        this.events.push(stored);
+        if (this.events.length > this.maxEvents)
+            this.events = this.events.slice(-this.maxEvents);
+        return stored;
+    }
+    recent(limit = 25) {
+        return this.events.slice(-limit);
+    }
+    clear() {
+        this.events = [];
+    }
+}
+//# sourceMappingURL=observability.js.map

package/dist/remote/observability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.js","sourceRoot":"","sources":["../../src/remote/observability.ts"],"names":[],"mappings":"AA6BA,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,kBAAkB,GAAG,gEAAgE,CAAC;AAE5F,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IAChF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,cAAc;IAGI;IAFrB,MAAM,GAAuB,EAAE,CAAC;IAExC,YAA6B,YAAY,GAAG;QAAf,cAAS,GAAT,SAAS,CAAM;IAAG,CAAC;IAEhD,MAAM,CAAC,KAAqE;QAC1E,MAAM,MAAM,GAAqB;YAC/B,GAAG,KAAK;YACR,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACzD,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1F,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,KAAK,GAAG,EAAE;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,CAAC;CACF"}

package/dist/remote/protocol.d.ts

@@ -0,0 +1,321 @@
+import { z } from 'zod';
+export declare const REMOTE_RELAY_PROTOCOL_VERSION: "2026-07-remote-relay-v1";
+export declare const RemoteDeploymentModeSchema: z.ZodEnum<{
+    local: "local";
+    hosted: "hosted";
+    self_hosted: "self_hosted";
+}>;
+export declare const RemoteRiskLevelSchema: z.ZodEnum<{
+    export: "export";
+    write: "write";
+    read: "read";
+    destructive: "destructive";
+}>;
+export declare const RemoteScopeSchema: z.ZodEnum<{
+    "easyeda.read": "easyeda.read";
+    "easyeda.write": "easyeda.write";
+    "easyeda.export": "easyeda.export";
+    "easyeda.project_admin": "easyeda.project_admin";
+}>;
+export type RemoteDeploymentMode = z.infer<typeof RemoteDeploymentModeSchema>;
+export type RemoteRiskLevel = z.infer<typeof RemoteRiskLevelSchema>;
+export type RemoteScope = z.infer<typeof RemoteScopeSchema>;
+export declare const ActiveProjectSchema: z.ZodObject<{
+    projectId: z.ZodOptional<z.ZodString>;
+    projectName: z.ZodOptional<z.ZodString>;
+    documentType: z.ZodDefault<z.ZodEnum<{
+        unknown: "unknown";
+        schematic: "schematic";
+        pcb: "pcb";
+    }>>;
+    url: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ActiveProject = z.infer<typeof ActiveProjectSchema>;
+export declare const RegisterSessionMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    sessionId: z.ZodOptional<z.ZodString>;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"register_session">;
+    extensionVersion: z.ZodString;
+    mode: z.ZodEnum<{
+        hosted: "hosted";
+        self_hosted: "self_hosted";
+    }>;
+    activeProject: z.ZodOptional<z.ZodObject<{
+        projectId: z.ZodOptional<z.ZodString>;
+        projectName: z.ZodOptional<z.ZodString>;
+        documentType: z.ZodDefault<z.ZodEnum<{
+            unknown: "unknown";
+            schematic: "schematic";
+            pcb: "pcb";
+        }>>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export declare const SessionRegisteredMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"session_registered">;
+    sessionId: z.ZodString;
+    paired: z.ZodBoolean;
+    expiresAt: z.ZodString;
+}, z.core.$strip>;
+export declare const HeartbeatMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    sessionId: z.ZodOptional<z.ZodString>;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"heartbeat">;
+}, z.core.$strip>;
+export declare const ToolRequestMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"tool_request">;
+    sessionId: z.ZodString;
+    toolName: z.ZodString;
+    riskLevel: z.ZodEnum<{
+        export: "export";
+        write: "write";
+        read: "read";
+        destructive: "destructive";
+    }>;
+    requiresApproval: z.ZodBoolean;
+    input: z.ZodOptional<z.ZodUnknown>;
+    inputHash: z.ZodString;
+    activeProjectHint: z.ZodOptional<z.ZodObject<{
+        projectId: z.ZodOptional<z.ZodString>;
+        projectName: z.ZodOptional<z.ZodString>;
+        documentType: z.ZodDefault<z.ZodEnum<{
+            unknown: "unknown";
+            schematic: "schematic";
+            pcb: "pcb";
+        }>>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    deadlineMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const ToolResponseMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"tool_response">;
+    sessionId: z.ZodString;
+    requestMessageId: z.ZodString;
+    ok: z.ZodBoolean;
+    result: z.ZodOptional<z.ZodUnknown>;
+    error: z.ZodOptional<z.ZodObject<{
+        code: z.ZodString;
+        message: z.ZodString;
+        suggestion: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    durationMs: z.ZodNumber;
+}, z.core.$strip>;
+export declare const ApprovalRequestMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"approval_request">;
+    sessionId: z.ZodString;
+    approvalId: z.ZodString;
+    toolName: z.ZodString;
+    riskLevel: z.ZodEnum<{
+        export: "export";
+        write: "write";
+        read: "read";
+        destructive: "destructive";
+    }>;
+    actionSummary: z.ZodString;
+    inputHash: z.ZodString;
+    activeProject: z.ZodOptional<z.ZodObject<{
+        projectId: z.ZodOptional<z.ZodString>;
+        projectName: z.ZodOptional<z.ZodString>;
+        documentType: z.ZodDefault<z.ZodEnum<{
+            unknown: "unknown";
+            schematic: "schematic";
+            pcb: "pcb";
+        }>>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    expiresAt: z.ZodString;
+}, z.core.$strip>;
+export declare const ApprovalResultMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"approval_result">;
+    sessionId: z.ZodString;
+    approvalId: z.ZodString;
+    result: z.ZodEnum<{
+        timeout: "timeout";
+        rejected: "rejected";
+        approved: "approved";
+    }>;
+}, z.core.$strip>;
+export declare const SessionClosedMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"session_closed">;
+    sessionId: z.ZodString;
+    reason: z.ZodEnum<{
+        disconnected: "disconnected";
+        user_disabled: "user_disabled";
+        expired: "expired";
+        replaced: "replaced";
+    }>;
+}, z.core.$strip>;
+export declare const RelayErrorMessageSchema: z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"error">;
+    sessionId: z.ZodOptional<z.ZodString>;
+    code: z.ZodString;
+    message: z.ZodString;
+}, z.core.$strip>;
+export declare const RelayMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    sessionId: z.ZodOptional<z.ZodString>;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"register_session">;
+    extensionVersion: z.ZodString;
+    mode: z.ZodEnum<{
+        hosted: "hosted";
+        self_hosted: "self_hosted";
+    }>;
+    activeProject: z.ZodOptional<z.ZodObject<{
+        projectId: z.ZodOptional<z.ZodString>;
+        projectName: z.ZodOptional<z.ZodString>;
+        documentType: z.ZodDefault<z.ZodEnum<{
+            unknown: "unknown";
+            schematic: "schematic";
+            pcb: "pcb";
+        }>>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    capabilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"session_registered">;
+    sessionId: z.ZodString;
+    paired: z.ZodBoolean;
+    expiresAt: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    sessionId: z.ZodOptional<z.ZodString>;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"heartbeat">;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"tool_request">;
+    sessionId: z.ZodString;
+    toolName: z.ZodString;
+    riskLevel: z.ZodEnum<{
+        export: "export";
+        write: "write";
+        read: "read";
+        destructive: "destructive";
+    }>;
+    requiresApproval: z.ZodBoolean;
+    input: z.ZodOptional<z.ZodUnknown>;
+    inputHash: z.ZodString;
+    activeProjectHint: z.ZodOptional<z.ZodObject<{
+        projectId: z.ZodOptional<z.ZodString>;
+        projectName: z.ZodOptional<z.ZodString>;
+        documentType: z.ZodDefault<z.ZodEnum<{
+            unknown: "unknown";
+            schematic: "schematic";
+            pcb: "pcb";
+        }>>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    deadlineMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"tool_response">;
+    sessionId: z.ZodString;
+    requestMessageId: z.ZodString;
+    ok: z.ZodBoolean;
+    result: z.ZodOptional<z.ZodUnknown>;
+    error: z.ZodOptional<z.ZodObject<{
+        code: z.ZodString;
+        message: z.ZodString;
+        suggestion: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    durationMs: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"approval_request">;
+    sessionId: z.ZodString;
+    approvalId: z.ZodString;
+    toolName: z.ZodString;
+    riskLevel: z.ZodEnum<{
+        export: "export";
+        write: "write";
+        read: "read";
+        destructive: "destructive";
+    }>;
+    actionSummary: z.ZodString;
+    inputHash: z.ZodString;
+    activeProject: z.ZodOptional<z.ZodObject<{
+        projectId: z.ZodOptional<z.ZodString>;
+        projectName: z.ZodOptional<z.ZodString>;
+        documentType: z.ZodDefault<z.ZodEnum<{
+            unknown: "unknown";
+            schematic: "schematic";
+            pcb: "pcb";
+        }>>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    expiresAt: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"approval_result">;
+    sessionId: z.ZodString;
+    approvalId: z.ZodString;
+    result: z.ZodEnum<{
+        timeout: "timeout";
+        rejected: "rejected";
+        approved: "approved";
+    }>;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"session_closed">;
+    sessionId: z.ZodString;
+    reason: z.ZodEnum<{
+        disconnected: "disconnected";
+        user_disabled: "user_disabled";
+        expired: "expired";
+        replaced: "replaced";
+    }>;
+}, z.core.$strip>, z.ZodObject<{
+    protocolVersion: z.ZodLiteral<"2026-07-remote-relay-v1">;
+    messageId: z.ZodString;
+    timestamp: z.ZodString;
+    type: z.ZodLiteral<"error">;
+    sessionId: z.ZodOptional<z.ZodString>;
+    code: z.ZodString;
+    message: z.ZodString;
+}, z.core.$strip>], "type">;
+export type RelayMessage = z.infer<typeof RelayMessageSchema>;
+export type RegisterSessionMessage = z.infer<typeof RegisterSessionMessageSchema>;
+export type ToolRequestMessage = z.infer<typeof ToolRequestMessageSchema>;
+export type ApprovalRequestMessage = z.infer<typeof ApprovalRequestMessageSchema>;

package/dist/remote/protocol.js

@@ -0,0 +1,104 @@
+import { z } from 'zod';
+export const REMOTE_RELAY_PROTOCOL_VERSION = '2026-07-remote-relay-v1';
+export const RemoteDeploymentModeSchema = z.enum(['local', 'hosted', 'self_hosted']);
+export const RemoteRiskLevelSchema = z.enum(['read', 'write', 'export', 'destructive']);
+export const RemoteScopeSchema = z.enum([
+    'easyeda.read',
+    'easyeda.write',
+    'easyeda.export',
+    'easyeda.project_admin',
+]);
+export const ActiveProjectSchema = z.object({
+    projectId: z.string().min(1).optional(),
+    projectName: z.string().min(1).optional(),
+    documentType: z.enum(['schematic', 'pcb', 'unknown']).default('unknown'),
+    url: z.string().url().optional(),
+});
+const BaseRelayMessageSchema = z.object({
+    protocolVersion: z.literal(REMOTE_RELAY_PROTOCOL_VERSION),
+    messageId: z.string().min(1),
+    sessionId: z.string().min(1).optional(),
+    timestamp: z.string().datetime(),
+});
+export const RegisterSessionMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('register_session'),
+    extensionVersion: z.string().min(1),
+    mode: RemoteDeploymentModeSchema.exclude(['local']),
+    activeProject: ActiveProjectSchema.optional(),
+    capabilities: z.array(z.string().min(1)).default([]),
+});
+export const SessionRegisteredMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('session_registered'),
+    sessionId: z.string().min(1),
+    paired: z.boolean(),
+    expiresAt: z.string().datetime(),
+});
+export const HeartbeatMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('heartbeat'),
+});
+export const ToolRequestMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('tool_request'),
+    sessionId: z.string().min(1),
+    toolName: z.string().min(1),
+    riskLevel: RemoteRiskLevelSchema,
+    requiresApproval: z.boolean(),
+    input: z.unknown().optional(),
+    inputHash: z.string().min(1),
+    activeProjectHint: ActiveProjectSchema.optional(),
+    deadlineMs: z.number().int().positive().optional(),
+});
+export const ToolResponseMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('tool_response'),
+    sessionId: z.string().min(1),
+    requestMessageId: z.string().min(1),
+    ok: z.boolean(),
+    result: z.unknown().optional(),
+    error: z
+        .object({
+        code: z.string().min(1),
+        message: z.string().min(1),
+        suggestion: z.string().min(1).optional(),
+    })
+        .optional(),
+    durationMs: z.number().nonnegative(),
+});
+export const ApprovalRequestMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('approval_request'),
+    sessionId: z.string().min(1),
+    approvalId: z.string().min(1),
+    toolName: z.string().min(1),
+    riskLevel: RemoteRiskLevelSchema,
+    actionSummary: z.string().min(1),
+    inputHash: z.string().min(1),
+    activeProject: ActiveProjectSchema.optional(),
+    expiresAt: z.string().datetime(),
+});
+export const ApprovalResultMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('approval_result'),
+    sessionId: z.string().min(1),
+    approvalId: z.string().min(1),
+    result: z.enum(['approved', 'rejected', 'timeout']),
+});
+export const SessionClosedMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('session_closed'),
+    sessionId: z.string().min(1),
+    reason: z.enum(['user_disabled', 'expired', 'disconnected', 'replaced']),
+});
+export const RelayErrorMessageSchema = BaseRelayMessageSchema.extend({
+    type: z.literal('error'),
+    sessionId: z.string().min(1).optional(),
+    code: z.string().min(1),
+    message: z.string().min(1),
+});
+export const RelayMessageSchema = z.discriminatedUnion('type', [
+    RegisterSessionMessageSchema,
+    SessionRegisteredMessageSchema,
+    HeartbeatMessageSchema,
+    ToolRequestMessageSchema,
+    ToolResponseMessageSchema,
+    ApprovalRequestMessageSchema,
+    ApprovalResultMessageSchema,
+    SessionClosedMessageSchema,
+    RelayErrorMessageSchema,
+]);
+//# sourceMappingURL=protocol.js.map

package/dist/remote/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/remote/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,6BAA6B,GAAG,yBAAkC,CAAC;AAChF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AACxF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IACtC,cAAc;IACd,eAAe;IACf,gBAAgB;IAChB,uBAAuB;CACxB,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACxE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAIH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACxE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACnC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,IAAI,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC;IACnD,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC7C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACrD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,sBAAsB,CAAC,MAAM,CAAC;IAC1E,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC,MAAM,CAAC;IAClE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACpE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,SAAS,EAAE,qBAAqB;IAChC,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,iBAAiB,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACjD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC;SACD,QAAQ,EAAE;IACb,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACxE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,SAAS,EAAE,qBAAqB;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACvE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACtE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;CACzE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACnE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,4BAA4B;IAC5B,8BAA8B;IAC9B,sBAAsB;IACtB,wBAAwB;IACxB,yBAAyB;IACzB,4BAA4B;IAC5B,2BAA2B;IAC3B,0BAA0B;IAC1B,uBAAuB;CACxB,CAAC,CAAC"}

package/dist/remote/scope.d.ts

@@ -0,0 +1,16 @@
+import type { RemoteRiskLevel, RemoteScope } from './protocol.js';
+export interface RemoteIdentity {
+    userId: string;
+    scopes: readonly RemoteScope[];
+    expiresAt?: Date;
+}
+export type ScopeCheckResult = {
+    ok: true;
+} | {
+    ok: false;
+    code: 'IDENTITY_MISSING' | 'IDENTITY_EXPIRED' | 'SCOPE_MISSING';
+    message: string;
+};
+export declare function requiredScopeForRisk(riskLevel: RemoteRiskLevel): RemoteScope;
+export declare function hasRemoteScope(identity: RemoteIdentity, scope: RemoteScope): boolean;
+export declare function checkRemoteScope(identity: RemoteIdentity | undefined, riskLevel: RemoteRiskLevel, now?: Date): ScopeCheckResult;

package/dist/remote/scope.js

@@ -0,0 +1,25 @@
+export function requiredScopeForRisk(riskLevel) {
+    if (riskLevel === 'read')
+        return 'easyeda.read';
+    if (riskLevel === 'write')
+        return 'easyeda.write';
+    if (riskLevel === 'export')
+        return 'easyeda.export';
+    return 'easyeda.project_admin';
+}
+export function hasRemoteScope(identity, scope) {
+    return identity.scopes.includes(scope) || identity.scopes.includes('easyeda.project_admin');
+}
+export function checkRemoteScope(identity, riskLevel, now = new Date()) {
+    if (!identity)
+        return { ok: false, code: 'IDENTITY_MISSING', message: 'Remote identity is required.' };
+    if (identity.expiresAt && identity.expiresAt.getTime() <= now.getTime()) {
+        return { ok: false, code: 'IDENTITY_EXPIRED', message: 'Remote identity has expired.' };
+    }
+    const required = requiredScopeForRisk(riskLevel);
+    if (!hasRemoteScope(identity, required)) {
+        return { ok: false, code: 'SCOPE_MISSING', message: `Remote tool requires ${required}.` };
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=scope.js.map

package/dist/remote/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../src/remote/scope.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,oBAAoB,CAAC,SAA0B;IAC7D,IAAI,SAAS,KAAK,MAAM;QAAE,OAAO,cAAc,CAAC;IAChD,IAAI,SAAS,KAAK,OAAO;QAAE,OAAO,eAAe,CAAC;IAClD,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,gBAAgB,CAAC;IACpD,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAwB,EAAE,KAAkB;IACzE,OAAO,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,QAAoC,EACpC,SAA0B,EAC1B,GAAG,GAAG,IAAI,IAAI,EAAE;IAEhB,IAAI,CAAC,QAAQ;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IAC1F,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,wBAAwB,QAAQ,GAAG,EAAE,CAAC;IAC5F,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/remote/session-router.d.ts

@@ -0,0 +1,54 @@
+import type { ActiveProject, RemoteDeploymentMode, RemoteRiskLevel } from './protocol.js';
+export interface ExtensionSession {
+    sessionId: string;
+    connectionId: string;
+    mode: Exclude<RemoteDeploymentMode, 'local'>;
+    extensionVersion: string;
+    userId?: string;
+    activeProject?: ActiveProject;
+    connected: boolean;
+    createdAt: Date;
+    lastSeenAt: Date;
+    expiresAt: Date;
+}
+export type SessionRouteResult = {
+    ok: true;
+    session: ExtensionSession;
+} | {
+    ok: false;
+    code: 'SESSION_UNPAIRED' | 'SESSION_DISCONNECTED' | 'SESSION_EXPIRED' | 'SESSION_AMBIGUOUS' | 'PROJECT_INACTIVE';
+    message: string;
+};
+export declare class RemoteSessionRouter {
+    private readonly now;
+    private readonly makeId;
+    private readonly sessions;
+    private readonly pairings;
+    constructor(now?: () => Date, makeId?: () => string);
+    registerSession(input: {
+        connectionId: string;
+        mode: Exclude<RemoteDeploymentMode, 'local'>;
+        extensionVersion: string;
+        activeProject?: ActiveProject;
+        ttlMs?: number;
+    }): ExtensionSession;
+    createPairingCode(input: {
+        userId: string;
+        sessionId?: string;
+        ttlMs?: number;
+    }): string;
+    completePairing(input: {
+        code: string;
+        userId: string;
+        sessionId: string;
+    }): boolean;
+    heartbeat(sessionId: string): boolean;
+    updateActiveProject(sessionId: string, activeProject?: ActiveProject): boolean;
+    disconnect(sessionId: string): boolean;
+    resolve(input: {
+        userId: string;
+        riskLevel: RemoteRiskLevel;
+        sessionId?: string;
+    }): SessionRouteResult;
+    getSession(sessionId: string): ExtensionSession | undefined;
+}

package/dist/remote/session-router.js

@@ -0,0 +1,138 @@
+import { randomUUID } from 'node:crypto';
+export class RemoteSessionRouter {
+    now;
+    makeId;
+    sessions = new Map();
+    pairings = new Map();
+    constructor(now = () => new Date(), makeId = () => randomUUID()) {
+        this.now = now;
+        this.makeId = makeId;
+    }
+    registerSession(input) {
+        const now = this.now();
+        const session = {
+            sessionId: `sess_${this.makeId()}`,
+            connectionId: input.connectionId,
+            mode: input.mode,
+            extensionVersion: input.extensionVersion,
+            activeProject: input.activeProject,
+            connected: true,
+            createdAt: now,
+            lastSeenAt: now,
+            expiresAt: new Date(now.getTime() + (input.ttlMs ?? 2 * 60 * 60 * 1000)),
+        };
+        this.sessions.set(session.sessionId, session);
+        return session;
+    }
+    createPairingCode(input) {
+        const now = this.now();
+        const code = `EDA-${this.makeId().replace(/-/g, '').slice(0, 8).toUpperCase()}`;
+        this.pairings.set(code, {
+            code,
+            userId: input.userId,
+            sessionId: input.sessionId,
+            createdAt: now,
+            expiresAt: new Date(now.getTime() + (input.ttlMs ?? 10 * 60 * 1000)),
+        });
+        return code;
+    }
+    completePairing(input) {
+        const pairing = this.pairings.get(input.code);
+        const session = this.sessions.get(input.sessionId);
+        const now = this.now();
+        if (!pairing || !session)
+            return false;
+        if (pairing.usedAt)
+            return false;
+        if (pairing.userId !== input.userId)
+            return false;
+        if (pairing.sessionId && pairing.sessionId !== input.sessionId)
+            return false;
+        if (pairing.expiresAt.getTime() <= now.getTime())
+            return false;
+        if (!session.connected || session.expiresAt.getTime() <= now.getTime())
+            return false;
+        pairing.usedAt = now;
+        session.userId = input.userId;
+        session.lastSeenAt = now;
+        return true;
+    }
+    heartbeat(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session || !session.connected)
+            return false;
+        session.lastSeenAt = this.now();
+        return true;
+    }
+    updateActiveProject(sessionId, activeProject) {
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            return false;
+        session.activeProject = activeProject;
+        session.lastSeenAt = this.now();
+        return true;
+    }
+    disconnect(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            return false;
+        session.connected = false;
+        session.lastSeenAt = this.now();
+        return true;
+    }
+    resolve(input) {
+        const now = this.now();
+        const candidates = [...this.sessions.values()].filter((session) => session.userId === input.userId &&
+            (!input.sessionId || session.sessionId === input.sessionId));
+        if (candidates.length === 0) {
+            return {
+                ok: false,
+                code: 'SESSION_UNPAIRED',
+                message: 'No paired EasyEDA extension session.',
+            };
+        }
+        const active = candidates.filter((session) => session.connected);
+        if (active.length === 0) {
+            return {
+                ok: false,
+                code: 'SESSION_DISCONNECTED',
+                message: 'Paired EasyEDA extension is disconnected.',
+            };
+        }
+        const unexpired = active.filter((session) => session.expiresAt.getTime() > now.getTime());
+        if (unexpired.length === 0) {
+            return {
+                ok: false,
+                code: 'SESSION_EXPIRED',
+                message: 'Paired EasyEDA extension session expired.',
+            };
+        }
+        if (!input.sessionId && unexpired.length > 1) {
+            return {
+                ok: false,
+                code: 'SESSION_AMBIGUOUS',
+                message: 'Multiple active EasyEDA sessions require explicit selection.',
+            };
+        }
+        const session = unexpired[0];
+        if (!session) {
+            return {
+                ok: false,
+                code: 'SESSION_UNPAIRED',
+                message: 'No paired EasyEDA extension session.',
+            };
+        }
+        if (input.riskLevel !== 'read' && !session.activeProject) {
+            return {
+                ok: false,
+                code: 'PROJECT_INACTIVE',
+                message: 'No active EasyEDA project is visible.',
+            };
+        }
+        return { ok: true, session };
+    }
+    getSession(sessionId) {
+        return this.sessions.get(sessionId);
+    }
+}
+//# sourceMappingURL=session-router.js.map

package/dist/remote/session-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-router.js","sourceRoot":"","sources":["../../src/remote/session-router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAsCzC,MAAM,OAAO,mBAAmB;IAKX;IACA;IALF,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC/C,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE3D,YACmB,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAClC,SAAuB,GAAG,EAAE,CAAC,UAAU,EAAE;QADzC,QAAG,GAAH,GAAG,CAA+B;QAClC,WAAM,GAAN,MAAM,CAAmC;IACzD,CAAC;IAEJ,eAAe,CAAC,KAMf;QACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAqB;YAChC,SAAS,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE;YAClC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,GAAG;YACd,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;SACzE,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,iBAAiB,CAAC,KAA6D;QAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAChF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE;YACtB,IAAI;YACJ,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;SACrE,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe,CAAC,KAA0D;QACxE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,OAAO,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7E,IAAI,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE;YAAE,OAAO,KAAK,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE;YAAE,OAAO,KAAK,CAAC;QACrF,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC;QACrB,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC9B,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,CAAC,SAAiB;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QACjD,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mBAAmB,CAAC,SAAiB,EAAE,aAA6B;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;QACtC,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC;QAC1B,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,KAIP;QACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CACnD,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC/B,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAC9D,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,sCAAsC;aAChD,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,2CAA2C;aACrD,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,2CAA2C;aACrD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,8DAA8D;aACxE,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,sCAAsC;aAChD,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YACzD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,uCAAuC;aACjD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "easyeda-mcp-pro",
-  "version": "0.17.1",
+  "version": "0.18.0",
   "mcpName": "io.github.oaslananka/easyeda-mcp-pro",
   "description": "MCP server for EasyEDA Pro: PCB inspection, BOM, exports, and hardware review.",
   "keywords": [