kiokuko 1.0.0

package/dist/ledger/validate.js

@@ -0,0 +1,178 @@
+import { KiokukoError } from '../errors.js';
+import { findSecret } from '../memory/secrets.js';
+import { CAPTURE_PROFILES, COVERAGE_LEVELS, LEDGER_EVENT_TYPES, MAX_BATCH_EVENTS, MAX_ID_LENGTH, MAX_TEXT_LENGTH, RUN_STATUSES, TASK_TYPES, } from './types.js';
+function validation(message) {
+    throw new KiokukoError('VALIDATION_ERROR', message);
+}
+function isPlainObject(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function object(value, label) {
+    if (!isPlainObject(value))
+        validation(`${label} must be a JSON object`);
+    return value;
+}
+function knownFields(value, fields, label) {
+    const allowed = new Set(fields);
+    if (Object.keys(value).some((field) => !allowed.has(field)))
+        validation(`Unknown ${label} field`);
+}
+function nonEmptyString(value, label, max = MAX_TEXT_LENGTH) {
+    if (typeof value !== 'string' || value.trim().length === 0 || value.length > max || value.includes('\u0000')) {
+        validation(`${label} must be a non-empty bounded string`);
+    }
+    return value;
+}
+function nullableString(value, label, max = MAX_TEXT_LENGTH) {
+    if (value === null)
+        return null;
+    return nonEmptyString(value, label, max);
+}
+function enumValue(value, values, label) {
+    if (typeof value !== 'string' || !values.includes(value))
+        validation(`${label} has an invalid enum value`);
+    return value;
+}
+function jsonValue(value, label) {
+    if (value === null || typeof value === 'boolean' || typeof value === 'string')
+        return value;
+    if (typeof value === 'number') {
+        if (Number.isFinite(value))
+            return value;
+        validation(`${label} must contain finite JSON numbers`);
+    }
+    if (Array.isArray(value))
+        return value.map((child, index) => jsonValue(child, `${label}[${index}]`));
+    if (isPlainObject(value)) {
+        const result = {};
+        for (const [key, child] of Object.entries(value)) {
+            if (findSecret(key))
+                throw new KiokukoError('SECURITY_REJECTION', 'JSON object key contains secret material');
+            result[key] = jsonValue(child, `${label} field`);
+        }
+        return result;
+    }
+    validation(`${label} must be JSON-compatible`);
+}
+export function validateTimestamp(value, label = 'timestamp') {
+    if (typeof value !== 'string' || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(value))
+        validation(`${label} must be an ISO-8601 UTC timestamp`);
+    const parsed = Date.parse(value);
+    if (!Number.isFinite(parsed) || new Date(parsed).toISOString() !== value)
+        validation(`${label} must be a valid ISO-8601 UTC timestamp`);
+    return value;
+}
+export function validateProfileHints(value) {
+    const input = object(value, 'profile hints');
+    knownFields(input, ['taskType', 'target', 'expected', 'constraints'], 'profile hints');
+    const taskType = input.taskType === null ? null : enumValue(input.taskType, TASK_TYPES, 'profileHints.taskType');
+    const target = nullableString(input.target, 'profileHints.target');
+    const expected = nullableString(input.expected, 'profileHints.expected');
+    const constraints = input.constraints === null ? null : jsonValue(input.constraints, 'profileHints.constraints');
+    return { taskType, target, expected, constraints };
+}
+export function validateTaskInput(value) {
+    const input = object(value, 'task');
+    knownFields(input, ['title', 'query', 'profileHints'], 'task');
+    return {
+        title: nonEmptyString(input.title, 'task.title'),
+        query: nonEmptyString(input.query, 'task.query'),
+        profileHints: validateProfileHints(input.profileHints),
+    };
+}
+export function validateAnswerInput(value) {
+    const input = object(value, 'answer');
+    knownFields(input, ['apiVersion', 'questionId', 'value'], 'answer');
+    return {
+        apiVersion: enumValue(input.apiVersion, ['1'], 'answer.apiVersion'),
+        questionId: nonEmptyString(input.questionId, 'answer.questionId', MAX_ID_LENGTH),
+        value: jsonValue(input.value, 'answer.value'),
+    };
+}
+function validateClient(value) {
+    const input = object(value, 'client');
+    knownFields(input, ['kind', 'version', 'sessionId'], 'client');
+    return {
+        kind: nonEmptyString(input.kind, 'client.kind', MAX_ID_LENGTH),
+        ...(input.version === undefined ? {} : { version: nonEmptyString(input.version, 'client.version', MAX_ID_LENGTH) }),
+        ...(input.sessionId === undefined ? {} : { sessionId: nonEmptyString(input.sessionId, 'client.sessionId', MAX_ID_LENGTH) }),
+    };
+}
+function validateCoverage(value) {
+    const input = object(value, 'coverage');
+    const fields = ['run', 'tool', 'command', 'file', 'approval'];
+    knownFields(input, fields, 'coverage');
+    const result = {};
+    for (const field of fields)
+        result[field] = enumValue(input[field], COVERAGE_LEVELS, `coverage.${field}`);
+    return result;
+}
+export function validateEventInput(value) {
+    const input = object(value, 'event');
+    knownFields(input, ['eventId', 'sourceEventId', 'sourceSequence', 'eventType', 'sourceType', 'actor', 'outcome', 'occurredAt', 'payload'], 'event');
+    if (input.sourceSequence !== undefined && (typeof input.sourceSequence !== 'number' || !Number.isSafeInteger(input.sourceSequence) || input.sourceSequence < 0))
+        validation('sourceSequence must be a non-negative safe integer');
+    const sourceSequence = input.sourceSequence;
+    const occurredAt = input.occurredAt === undefined ? undefined : validateTimestamp(input.occurredAt, 'occurredAt');
+    const outcome = input.outcome === undefined || input.outcome === null ? input.outcome : nonEmptyString(input.outcome, 'outcome', MAX_ID_LENGTH);
+    return {
+        ...(input.eventId === undefined ? {} : { eventId: nonEmptyString(input.eventId, 'eventId', MAX_ID_LENGTH) }),
+        ...(input.sourceEventId === undefined ? {} : { sourceEventId: nonEmptyString(input.sourceEventId, 'sourceEventId', MAX_ID_LENGTH) }),
+        ...(sourceSequence === undefined ? {} : { sourceSequence }),
+        eventType: enumValue(input.eventType, LEDGER_EVENT_TYPES, 'eventType'),
+        ...(input.sourceType === undefined ? {} : { sourceType: nonEmptyString(input.sourceType, 'sourceType', MAX_ID_LENGTH) }),
+        actor: nonEmptyString(input.actor, 'actor', MAX_ID_LENGTH),
+        ...(outcome === undefined ? {} : { outcome }),
+        ...(occurredAt === undefined ? {} : { occurredAt }),
+        payload: jsonValue(input.payload, 'payload'),
+    };
+}
+export function validateEventBatch(value) {
+    const input = object(value, 'event batch');
+    knownFields(input, ['events'], 'event batch');
+    if (!Array.isArray(input.events) || input.events.length === 0)
+        validation('event batch must contain at least one event');
+    if (input.events.length > MAX_BATCH_EVENTS)
+        validation(`event batch must contain at most ${MAX_BATCH_EVENTS} events`);
+    return input.events.map((event, index) => {
+        try {
+            return validateEventInput(event);
+        }
+        catch (error) {
+            if (error instanceof KiokukoError && error.code === 'VALIDATION_ERROR')
+                throw new KiokukoError('VALIDATION_ERROR', `Invalid event at batch index ${index}`);
+            throw error;
+        }
+    });
+}
+export function validateRunInput(value) {
+    const input = object(value, 'run');
+    knownFields(input, ['runId', 'workspace', 'protocolVersion', 'client', 'captureProfile', 'coverage', 'task', 'metadata', 'parentRunId', 'startedAt'], 'run');
+    const metadata = input.metadata === undefined ? {} : object(input.metadata, 'metadata');
+    const metadataJson = jsonValue(metadata, 'metadata');
+    if (!isPlainObject(metadataJson))
+        validation('metadata must be a JSON object');
+    const startedAt = input.startedAt === undefined ? undefined : validateTimestamp(input.startedAt, 'startedAt');
+    const workspace = nonEmptyString(input.workspace, 'workspace', MAX_TEXT_LENGTH);
+    if (findSecret(workspace))
+        throw new KiokukoError('SECURITY_REJECTION', 'Workspace contains secret material');
+    return {
+        runId: nonEmptyString(input.runId, 'runId', MAX_ID_LENGTH),
+        workspace,
+        protocolVersion: enumValue(input.protocolVersion, ['1'], 'protocolVersion'),
+        client: validateClient(input.client),
+        captureProfile: enumValue(input.captureProfile, CAPTURE_PROFILES, 'captureProfile'),
+        coverage: validateCoverage(input.coverage),
+        task: validateTaskInput(input.task),
+        metadata: metadataJson,
+        ...(input.parentRunId === undefined ? {} : { parentRunId: nonEmptyString(input.parentRunId, 'parentRunId', MAX_ID_LENGTH) }),
+        ...(startedAt === undefined ? {} : { startedAt }),
+    };
+}
+export function validateRunStatus(value) {
+    return enumValue(value, RUN_STATUSES, 'run status');
+}
+//# sourceMappingURL=validate.js.map

package/dist/ledger/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/ledger/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,UAAU,GAWX,MAAM,YAAY,CAAC;AAEpB,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B,EAAE,MAAyB,EAAE,KAAa;IAC3F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,UAAU,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa,EAAE,GAAG,GAAG,eAAe;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7G,UAAU,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa,EAAE,GAAG,GAAG,eAAe;IAC1E,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAA8B,KAAc,EAAE,MAAS,EAAE,KAAa;IACtF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;IAC3G,OAAO,KAAkB,CAAC;AAC5B,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,UAAU,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACrG,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAe,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,UAAU,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,0CAA0C,CAAC,CAAC;YAC9G,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,UAAU,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,KAAK,GAAG,WAAW;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;IACxJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK;QAAE,UAAU,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;IACxI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC7C,WAAW,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,eAAe,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;IACjH,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;IACjH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpC,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/D,OAAO;QACL,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC;QAChD,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC;QAChD,YAAY,EAAE,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtC,WAAW,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpE,OAAO;QACL,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,CAAU,EAAE,mBAAmB,CAAC;QAC5E,UAAU,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,mBAAmB,EAAE,aAAa,CAAC;QAChF,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtC,WAAW,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC/D,OAAO;QACL,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,aAAa,CAAC;QAC9D,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,gBAAgB,EAAE,aAAa,CAAC,EAAE,CAAC;QACnH,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,EAAE,aAAa,CAAC,EAAE,CAAC;KAC5H,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAU,CAAC;IACvE,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,EAAc,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,YAAY,KAAK,EAAE,CAAC,CAAC;IAC1G,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrC,WAAW,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IACpJ,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC;QAAE,UAAU,CAAC,oDAAoD,CAAC,CAAC;IAClO,MAAM,cAAc,GAAG,KAAK,CAAC,cAAoC,CAAC;IAClE,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAClH,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IAChJ,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;QAC5G,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,cAAc,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,EAAE,aAAa,CAAC,EAAE,CAAC;QACpI,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;QAC3D,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,EAAE,WAAW,CAAC;QACtE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,aAAa,CAAC,EAAE,CAAC;QACxH,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC;QAC1D,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;QACnD,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC3C,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,UAAU,CAAC,6CAA6C,CAAC,CAAC;IACzH,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,gBAAgB;QAAE,UAAU,CAAC,oCAAoC,gBAAgB,SAAS,CAAC,CAAC;IACtH,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,CAAC;YACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;gBAAE,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,gCAAgC,KAAK,EAAE,CAAC,CAAC;YAC5J,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnC,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7J,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxF,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;QAAE,UAAU,CAAC,gCAAgC,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC9G,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IAChF,IAAI,UAAU,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,oCAAoC,CAAC,CAAC;IAC9G,OAAO;QACL,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC;QAC1D,SAAS;QACT,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,GAAG,CAAU,EAAE,iBAAiB,CAAC;QACpF,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC;QACpC,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,EAAE,gBAAgB,CAAC;QACnF,QAAQ,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC1C,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC;QACnC,QAAQ,EAAE,YAA0B;QACpC,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,aAAa,CAAC,EAAE,CAAC;QAC5H,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,OAAO,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AACtD,CAAC"}

package/dist/mcp/bounded-stdio-transport.d.ts

@@ -0,0 +1,26 @@
+import type { Readable, Writable } from 'node:stream';
+import type { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
+import type { Transport, TransportSendOptions } from '@modelcontextprotocol/sdk/shared/transport.js';
+export { DEFAULT_MCP_REQUEST_TIMEOUT_MS, MAX_MCP_REQUEST_TIMEOUT_MS, MIN_MCP_REQUEST_TIMEOUT_MS, } from './request-deadline.js';
+export declare const MAX_STDIO_JSON_RPC_MESSAGE_BYTES: number;
+export declare class BoundedStdioServerTransport implements Transport {
+    private readonly input;
+    private readonly output;
+    private readonly maxMessageBytes;
+    onclose?: () => void;
+    onerror?: (error: Error) => void;
+    onmessage?: <T extends JSONRPCMessage>(message: T) => void;
+    private buffer;
+    private discardingOversizedLine;
+    private started;
+    private closed;
+    constructor(input?: Readable, output?: Writable, maxMessageBytes?: number);
+    private readonly onData;
+    private readonly onInputError;
+    private readonly onInputEnd;
+    private writeOversizedMessageError;
+    start(): Promise<void>;
+    close(): Promise<void>;
+    send(message: JSONRPCMessage, _options?: TransportSendOptions): Promise<void>;
+}
+//# sourceMappingURL=bounded-stdio-transport.d.ts.map

package/dist/mcp/bounded-stdio-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-stdio-transport.d.ts","sourceRoot":"","sources":["../../src/mcp/bounded-stdio-transport.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,+CAA+C,CAAC;AAErG,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,gCAAgC,QAAkB,CAAC;AAUhE,qBAAa,2BAA4B,YAAW,SAAS;IAWzD,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,eAAe;IAZlC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACjC,SAAS,CAAC,EAAE,CAAC,CAAC,SAAS,cAAc,EAAE,OAAO,EAAE,CAAC,KAAK,IAAI,CAAC;IAE3D,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,uBAAuB,CAAS;IACxC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAS;gBAGJ,KAAK,GAAE,QAAwB,EAC/B,MAAM,GAAE,QAAyB,EACjC,eAAe,SAAmC;IAOrE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAuCrB;IAEF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAE3B;IAEF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAEzB;IAEF,OAAO,CAAC,0BAA0B;IAM5B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAQtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAa5B,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;CAU9E"}

package/dist/mcp/bounded-stdio-transport.js

@@ -0,0 +1,121 @@
+import process from 'node:process';
+import { deserializeMessage, serializeMessage } from '@modelcontextprotocol/sdk/shared/stdio.js';
+export { DEFAULT_MCP_REQUEST_TIMEOUT_MS, MAX_MCP_REQUEST_TIMEOUT_MS, MIN_MCP_REQUEST_TIMEOUT_MS, } from './request-deadline.js';
+export const MAX_STDIO_JSON_RPC_MESSAGE_BYTES = 8 * 1024 * 1024;
+const MESSAGE_TOO_LARGE = Object.freeze({
+    jsonrpc: '2.0',
+    error: {
+        code: -32000,
+        message: 'JSON-RPC message exceeds the configured transport limit.',
+    },
+});
+export class BoundedStdioServerTransport {
+    input;
+    output;
+    maxMessageBytes;
+    onclose;
+    onerror;
+    onmessage;
+    buffer;
+    discardingOversizedLine = false;
+    started = false;
+    closed = false;
+    constructor(input = process.stdin, output = process.stdout, maxMessageBytes = MAX_STDIO_JSON_RPC_MESSAGE_BYTES) {
+        this.input = input;
+        this.output = output;
+        this.maxMessageBytes = maxMessageBytes;
+        if (!Number.isSafeInteger(maxMessageBytes) || maxMessageBytes < 1) {
+            throw new Error('Stdio message limit must be a positive integer');
+        }
+    }
+    onData = (value) => {
+        const chunk = Buffer.isBuffer(value) ? value : Buffer.from(value);
+        let offset = 0;
+        while (offset < chunk.length) {
+            if (this.discardingOversizedLine) {
+                const newline = chunk.indexOf(0x0a, offset);
+                if (newline === -1)
+                    return;
+                this.discardingOversizedLine = false;
+                offset = newline + 1;
+                continue;
+            }
+            const newline = chunk.indexOf(0x0a, offset);
+            const end = newline === -1 ? chunk.length : newline;
+            const segment = chunk.subarray(offset, end);
+            const bufferedBytes = this.buffer?.length ?? 0;
+            if (bufferedBytes + segment.length > this.maxMessageBytes) {
+                this.buffer = undefined;
+                this.writeOversizedMessageError();
+                if (newline === -1) {
+                    this.discardingOversizedLine = true;
+                    return;
+                }
+            }
+            else if (newline === -1) {
+                this.buffer = this.buffer === undefined ? Buffer.from(segment) : Buffer.concat([this.buffer, segment]);
+                return;
+            }
+            else {
+                const line = this.buffer === undefined ? segment : Buffer.concat([this.buffer, segment]);
+                this.buffer = undefined;
+                try {
+                    const text = line.toString('utf8').replace(/\r$/u, '');
+                    const message = deserializeMessage(text);
+                    this.onmessage?.(message);
+                }
+                catch (error) {
+                    this.onerror?.(error instanceof Error ? error : new Error('Invalid JSON-RPC stdio message'));
+                }
+            }
+            offset = newline + 1;
+        }
+    };
+    onInputError = (error) => {
+        this.onerror?.(error);
+    };
+    onInputEnd = () => {
+        void this.close();
+    };
+    writeOversizedMessageError() {
+        void this.send(MESSAGE_TOO_LARGE).catch((error) => {
+            this.onerror?.(error instanceof Error ? error : new Error('Failed to write JSON-RPC transport error'));
+        });
+    }
+    async start() {
+        if (this.started || this.closed)
+            throw new Error('BoundedStdioServerTransport cannot be started again');
+        this.started = true;
+        this.input.on('data', this.onData);
+        this.input.on('error', this.onInputError);
+        this.input.on('end', this.onInputEnd);
+    }
+    async close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        this.started = false;
+        this.input.off('data', this.onData);
+        this.input.off('error', this.onInputError);
+        this.input.off('end', this.onInputEnd);
+        if (this.input.listenerCount('data') === 0)
+            this.input.pause();
+        this.buffer = undefined;
+        this.discardingOversizedLine = false;
+        this.onclose?.();
+    }
+    send(message, _options) {
+        return new Promise((resolve, reject) => {
+            try {
+                if (this.output.write(serializeMessage(message)))
+                    resolve();
+                else
+                    this.output.once('drain', resolve);
+            }
+            catch (error) {
+                reject(error instanceof Error ? error : new Error('Failed to write JSON-RPC stdio message'));
+            }
+        });
+    }
+}
+//# sourceMappingURL=bounded-stdio-transport.js.map

package/dist/mcp/bounded-stdio-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-stdio-transport.js","sourceRoot":"","sources":["../../src/mcp/bounded-stdio-transport.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AAInC,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AACjG,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEhE,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,KAAc;IACvB,KAAK,EAAE;QACL,IAAI,EAAE,CAAC,KAAK;QACZ,OAAO,EAAE,0DAA0D;KACpE;CACF,CAAC,CAAC;AAEH,MAAM,OAAO,2BAA2B;IAWnB;IACA;IACA;IAZnB,OAAO,CAAc;IACrB,OAAO,CAA0B;IACjC,SAAS,CAAkD;IAEnD,MAAM,CAAqB;IAC3B,uBAAuB,GAAG,KAAK,CAAC;IAChC,OAAO,GAAG,KAAK,CAAC;IAChB,MAAM,GAAG,KAAK,CAAC;IAEvB,YACmB,QAAkB,OAAO,CAAC,KAAK,EAC/B,SAAmB,OAAO,CAAC,MAAM,EACjC,kBAAkB,gCAAgC;QAFlD,UAAK,GAAL,KAAK,CAA0B;QAC/B,WAAM,GAAN,MAAM,CAA2B;QACjC,oBAAe,GAAf,eAAe,CAAmC;QAEnE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAEgB,MAAM,GAAG,CAAC,KAAsB,EAAQ,EAAE;QACzD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC5C,IAAI,OAAO,KAAK,CAAC,CAAC;oBAAE,OAAO;gBAC3B,IAAI,CAAC,uBAAuB,GAAG,KAAK,CAAC;gBACrC,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC;gBACrB,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACpD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC;YAC/C,IAAI,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC1D,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;gBACxB,IAAI,CAAC,0BAA0B,EAAE,CAAC;gBAClC,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;oBACnB,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC;oBACpC,OAAO;gBACT,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;gBACvG,OAAO;YACT,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;gBACzF,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;gBACxB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBACvD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;oBACzC,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC5B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;gBAC/F,CAAC;YACH,CAAC;YACD,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;IAEe,YAAY,GAAG,CAAC,KAAY,EAAQ,EAAE;QACrD,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC;IAEe,UAAU,GAAG,GAAS,EAAE;QACvC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC;IAEM,0BAA0B;QAChC,KAAK,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACzD,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;QACzG,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACxG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/D,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,uBAAuB,GAAG,KAAK,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,OAAuB,EAAE,QAA+B;QAC3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC;gBACH,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;oBAAE,OAAO,EAAE,CAAC;;oBACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;YAC/F,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/mcp/client-identity.d.ts

@@ -0,0 +1,22 @@
+declare const CLIENT_KINDS: readonly ["codex", "claude", "opencode"];
+type ClientKind = (typeof CLIENT_KINDS)[number];
+export interface TaskClientHint {
+    kind?: string;
+    version?: string;
+    sessionId?: string;
+}
+export interface TaskClientHintInput {
+    kind?: string | undefined;
+    version?: string | undefined;
+    sessionId?: string | undefined;
+}
+export interface McpClientImplementation {
+    name: string;
+    title?: string | undefined;
+    version: string;
+}
+export declare function identifyClientKind(value: unknown): ClientKind | null;
+export declare function identifyMcpClientKind(client: McpClientImplementation | undefined): ClientKind | null;
+export declare function resolveTaskPrepareClient(explicit: TaskClientHintInput | undefined, runtime: McpClientImplementation | undefined): TaskClientHint | undefined;
+export {};
+//# sourceMappingURL=client-identity.d.ts.map

package/dist/mcp/client-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-identity.d.ts","sourceRoot":"","sources":["../../src/mcp/client-identity.ts"],"names":[],"mappings":"AACA,QAAA,MAAM,YAAY,0CAA2C,CAAC;AAC9D,KAAK,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;CACjB;AAoBD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,IAAI,CAIpE;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,uBAAuB,GAAG,SAAS,GAAG,UAAU,GAAG,IAAI,CAQpG;AAED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,mBAAmB,GAAG,SAAS,EACzC,OAAO,EAAE,uBAAuB,GAAG,SAAS,GAC3C,cAAc,GAAG,SAAS,CA2B5B"}

package/dist/mcp/client-identity.js

@@ -0,0 +1,65 @@
+import { KiokukoError } from '../errors.js';
+const CLIENT_KINDS = ['codex', 'claude', 'opencode'];
+const CLIENT_ALIASES = {
+    codex: ['codex', 'codex-mcp-client'],
+    claude: ['claude', 'claude-ai', 'claude-code'],
+    opencode: ['opencode'],
+};
+function normalizedClientName(value) {
+    if (typeof value !== 'string' || value.length === 0 || value.length > 200
+        || value.trim() !== value || /[\p{Cc}\p{Cf}]/u.test(value))
+        return null;
+    return value.normalize('NFKC').toLowerCase();
+}
+function boundedVersion(value) {
+    if (typeof value !== 'string' || value.length === 0 || value.length > 100
+        || value.trim() !== value || /[\p{Cc}\p{Cf}]/u.test(value))
+        return undefined;
+    return value;
+}
+export function identifyClientKind(value) {
+    const normalized = normalizedClientName(value);
+    if (normalized === null)
+        return null;
+    return CLIENT_KINDS.find((kind) => CLIENT_ALIASES[kind].includes(normalized)) ?? null;
+}
+export function identifyMcpClientKind(client) {
+    if (client === undefined)
+        return null;
+    const fromName = identifyClientKind(client.name);
+    const fromTitle = identifyClientKind(client.title);
+    if (fromName !== null && fromTitle !== null && fromName !== fromTitle) {
+        throw new KiokukoError('CONFLICT', 'MCP client identity is contradictory');
+    }
+    return fromName ?? fromTitle;
+}
+export function resolveTaskPrepareClient(explicit, runtime) {
+    const runtimeKind = identifyMcpClientKind(runtime);
+    const explicitKind = identifyClientKind(explicit?.kind);
+    if (runtimeKind !== null && explicit?.kind !== undefined && explicitKind !== runtimeKind) {
+        throw new KiokukoError('CONFLICT', 'Explicit client identity conflicts with the MCP client');
+    }
+    if (runtimeKind !== null) {
+        const runtimeVersion = boundedVersion(runtime?.version);
+        return {
+            kind: runtimeKind,
+            ...(runtimeVersion === undefined ? {} : { version: runtimeVersion }),
+            ...(explicit?.sessionId === undefined ? {} : { sessionId: explicit.sessionId }),
+        };
+    }
+    if (explicit !== undefined) {
+        return {
+            ...(explicit.kind === undefined ? {} : { kind: explicit.kind }),
+            ...(explicit.version === undefined ? {} : { version: explicit.version }),
+            ...(explicit.sessionId === undefined ? {} : { sessionId: explicit.sessionId }),
+        };
+    }
+    if (runtime === undefined)
+        return undefined;
+    const runtimeVersion = boundedVersion(runtime.version);
+    return {
+        kind: runtime.name,
+        ...(runtimeVersion === undefined ? {} : { version: runtimeVersion }),
+    };
+}
+//# sourceMappingURL=client-identity.js.map

package/dist/mcp/client-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-identity.js","sourceRoot":"","sources":["../../src/mcp/client-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAC;AAqB9D,MAAM,cAAc,GAAoD;IACtE,KAAK,EAAE,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACpC,MAAM,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC;IAC9C,QAAQ,EAAE,CAAC,UAAU,CAAC;CACvB,CAAC;AAEF,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;WACpE,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;WACpE,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,UAAU,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAA2C;IAC/E,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,QAAQ,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,sCAAsC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,QAAQ,IAAI,SAAS,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,QAAyC,EACzC,OAA4C;IAE5C,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,WAAW,KAAK,IAAI,IAAI,QAAQ,EAAE,IAAI,KAAK,SAAS,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QACzF,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,wDAAwD,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,cAAc,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;YACpE,GAAG,CAAC,QAAQ,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;SAChF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/D,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;YACxE,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;SAC/E,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,cAAc,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;KACrE,CAAC;AACJ,CAAC"}

package/dist/mcp/request-deadline.d.ts

@@ -0,0 +1,51 @@
+export declare const DEFAULT_MCP_REQUEST_TIMEOUT_MS = 90000;
+export declare const MIN_MCP_REQUEST_TIMEOUT_MS = 10;
+export declare const MAX_MCP_REQUEST_TIMEOUT_MS = 90000;
+export declare const MCP_READ_TIMEOUT_MS = 30000;
+export declare const MCP_EXTERNAL_IO_TIMEOUT_MS = 10000;
+export declare const MCP_MUTATION_TIMEOUT_MS = 60000;
+export type McpToolOperation = 'task_prepare' | 'task_answer' | 'memory_checkpoint' | 'curator_check' | 'curator_globalize';
+export type McpDeadlineClass = 'read' | 'external' | 'mutation';
+export interface McpDeadlinePolicy {
+    readMs: number;
+    externalMs: number;
+    mutationMs: number;
+    hardMaxMs: number;
+}
+export interface McpDeadlinePolicyOverrides {
+    readMs?: number;
+    externalMs?: number;
+    mutationMs?: number;
+    hardMaxMs?: number;
+}
+export interface McpDeadlineContext {
+    readonly operation: McpToolOperation;
+    readonly deadlineAt: number;
+    remainingMs(): number;
+    childTimeoutMs(requestedMs: number): number;
+}
+export interface RunWithMcpDeadlineOptions<T> {
+    operation: McpToolOperation;
+    timeoutMs?: number;
+    policy?: McpDeadlinePolicy;
+    signal?: AbortSignal;
+    operationFn: (signal: AbortSignal, context: McpDeadlineContext) => Promise<T> | T;
+}
+export declare class McpRequestTimeoutError extends Error {
+    readonly operation: McpToolOperation;
+    readonly code: "MCP_REQUEST_TIMEOUT";
+    readonly retryable: true;
+    constructor(operation: McpToolOperation);
+}
+export declare class McpRequestCancelledError extends Error {
+    readonly operation: McpToolOperation;
+    readonly code: "MCP_REQUEST_CANCELLED";
+    readonly retryable: false;
+    constructor(operation: McpToolOperation);
+}
+export declare const DEFAULT_MCP_DEADLINE_POLICY: Readonly<McpDeadlinePolicy>;
+export declare function createMcpDeadlinePolicy(overrides?: McpDeadlinePolicyOverrides): McpDeadlinePolicy;
+export declare function operationDeadlineClass(operation: McpToolOperation): McpDeadlineClass;
+export declare function timeoutForOperation(operation: McpToolOperation, policy?: McpDeadlinePolicy): number;
+export declare function runWithMcpDeadline<T>({ operation, timeoutMs, policy, signal, operationFn, }: RunWithMcpDeadlineOptions<T>): Promise<T>;
+//# sourceMappingURL=request-deadline.d.ts.map

package/dist/mcp/request-deadline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-deadline.d.ts","sourceRoot":"","sources":["../../src/mcp/request-deadline.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,8BAA8B,QAAS,CAAC;AACrD,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAC1C,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,MAAM,MAAM,gBAAgB,GACxB,cAAc,GACd,aAAa,GACb,mBAAmB,GACnB,eAAe,GACf,mBAAmB,CAAC;AAExB,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CAAC;AAEhE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,WAAW,IAAI,MAAM,CAAC;IACtB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;CAC7C;AAED,MAAM,WAAW,yBAAyB,CAAC,CAAC;IAC1C,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,WAAW,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;CACnF;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAInC,QAAQ,CAAC,SAAS,EAAE,gBAAgB;IAHhD,QAAQ,CAAC,IAAI,EAAG,qBAAqB,CAAU;IAC/C,QAAQ,CAAC,SAAS,EAAG,IAAI,CAAU;gBAEd,SAAS,EAAE,gBAAgB;CAIjD;AAED,qBAAa,wBAAyB,SAAQ,KAAK;IAIrC,QAAQ,CAAC,SAAS,EAAE,gBAAgB;IAHhD,QAAQ,CAAC,IAAI,EAAG,uBAAuB,CAAU;IACjD,QAAQ,CAAC,SAAS,EAAG,KAAK,CAAU;gBAEf,SAAS,EAAE,gBAAgB;CAIjD;AAED,eAAO,MAAM,2BAA2B,EAAE,QAAQ,CAAC,iBAAiB,CAKlE,CAAC;AA4BH,wBAAgB,uBAAuB,CAAC,SAAS,GAAE,0BAA+B,GAAG,iBAAiB,CAuBrG;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,gBAAgB,GAAG,gBAAgB,CAIpF;AAED,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,gBAAgB,EAC3B,MAAM,GAAE,iBAA+C,GACtD,MAAM,CAOR;AAMD,wBAAsB,kBAAkB,CAAC,CAAC,EAAE,EAC1C,SAAS,EACT,SAAS,EACT,MAAoC,EACpC,MAAM,EACN,WAAW,GACZ,EAAE,yBAAyB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAuD3C"}