sensorium-mcp 3.1.2 → 3.1.3-board.10

package/dist/sessions/mcp-registry.js

@@ -46,35 +46,46 @@ export function associateSessionToken(mcpSessionId, spawnToken) {
     sessionSpawnToken.set(mcpSessionId, spawnToken);
 }
 /**
- * Resolve the stable ownership key for a transport session id.
- * Prefers the per-process spawn token (survives reconnects); falls back to the
- * raw session id when no token is known (e.g. STDIO or pre-token agents), which
- * preserves the previous session-id-based behavior for those.
+ * Resolve the stable, THREAD-SCOPED ownership key for a transport session id.
+ *
+ * The spawn token identifies the PROCESS, but this is NOT unique per thread:
+ * every Copilot CLI thread shares a single COPILOT_HOME, so all of them present
+ * the SAME per-process token across DIFFERENT threads. Keying ownership by the
+ * token alone would make superseding one thread's owner poison every other
+ * thread that merely shares that token (their next call sees the token in the
+ * superseded set and tears itself down). We therefore scope the key by threadId
+ * too: `tok:<token>#<threadId>` (or legacy `sid:<sessionId>#<threadId>` when no
+ * token is known). A reconnect of the same process on the same thread reuses the
+ * same token AND threadId → resolves to the SAME key; a supersede touches only
+ * that one (token, thread) pair and can never leak to a sibling thread.
  */
-function ownerKey(mcpSessionId) {
+function ownerKey(mcpSessionId, threadId) {
     const token = sessionSpawnToken.get(mcpSessionId);
-    return token ? `tok:${token}` : `sid:${mcpSessionId}`;
+    return token ? `tok:${token}#${threadId}` : `sid:${mcpSessionId}#${threadId}`;
 }
 /** Check if a session has been superseded by a newer session for its thread. */
 export function isSessionSuperseded(mcpSessionId, threadId) {
     if (mcpSessionId === undefined)
         return false;
-    const key = ownerKey(mcpSessionId);
+    // The owner key is thread-scoped, so we must know the threadId to build it.
+    // The caller passes it directly on tool calls; fall back to the session→thread
+    // registry for callers (e.g. poll loops) that only hold a session id.
+    const resolvedThreadId = threadId ?? sessionThreadRegistry.get(mcpSessionId);
+    if (resolvedThreadId === undefined)
+        return false;
+    const key = ownerKey(mcpSessionId, resolvedThreadId);
     if (supersededSessions.has(key)) {
-        log.debug(`[session] superseded-check: ${key.slice(0, 12)}… is in the superseded set (thread ${threadId ?? "?"}).`);
+        log.debug(`[session] superseded-check: ${key.slice(0, 12)}… is in the superseded set (thread ${resolvedThreadId}).`);
         return true;
     }
     // A different identity owns this thread now. With token-based keys a reconnect
     // resolves to the SAME key as the owner, so this only fires for a genuinely
     // different process (or a legacy session-id whose transport changed) — the
     // poll loop running under the stale identity must stop.
-    const resolvedThreadId = threadId ?? sessionThreadRegistry.get(mcpSessionId);
-    if (resolvedThreadId !== undefined) {
-        const owner = threadOwnerSession.get(resolvedThreadId);
-        if (owner !== undefined && owner !== key) {
-            log.debug(`[session] superseded-check: thread ${resolvedThreadId} owned by ${owner.slice(0, 12)}…, caller ${key.slice(0, 12)}… — superseded.`);
-            return true;
-        }
+    const owner = threadOwnerSession.get(resolvedThreadId);
+    if (owner !== undefined && owner !== key) {
+        log.debug(`[session] superseded-check: thread ${resolvedThreadId} owned by ${owner.slice(0, 12)}…, caller ${key.slice(0, 12)}… — superseded.`);
+        return true;
     }
     return false;
 }
@@ -97,13 +108,29 @@ export function isSessionSuperseded(mcpSessionId, threadId) {
  *   - When token info is missing on either side (legacy/STDIO), fall back to the
  *     previous adoption behavior so those paths keep working.
  *
- * A caller that already owns a DIFFERENT thread may never adopt this one
- * (guards against a forged `threadId` argument hijacking another thread).
+ * The owner key is thread-scoped (`tok:<token>#<threadId>`), so a single process
+ * (shared token) legitimately owning MANY threads is fully supported: each
+ * thread carries its own key and its own ownership row. A forged `threadId` still
+ * cannot hijack another thread — it would build a NEW key (its own token, the
+ * target thread), collide with that thread's real token-bearing owner, and be
+ * rejected below as a zombie/duplicate — so no separate cross-thread guard is
+ * needed (and a token-only one would misfire on the shared-token reality).
  */
 export function reconcileThreadOwnership(mcpSessionId, threadId) {
     if (mcpSessionId === undefined)
         return false;
-    const key = ownerKey(mcpSessionId);
+    // Defense in depth: a transport session may only act on the thread it was
+    // registered on (via start_session). This restores the security intent of the
+    // removed cross-thread guard without the shared-token misfire. A reconnect's
+    // new session id is not yet in the registry (reg===undefined → fail-open), and
+    // a normal call passes its own threadId (reg===threadId → transparent); only a
+    // forged/foreign threadId on a known session is refused.
+    const registeredThread = sessionThreadRegistry.get(mcpSessionId);
+    if (registeredThread !== undefined && registeredThread !== threadId) {
+        log.warn(`[session] Rejecting session ${mcpSessionId.slice(0, 8)}… acting on thread ${threadId} — registered on ${registeredThread} (cross-thread claim refused).`);
+        return true;
+    }
+    const key = ownerKey(mcpSessionId, threadId);
     if (supersededSessions.has(key)) {
         log.warn(`[session] Rejecting ${key.slice(0, 12)}… on thread ${threadId} — already superseded (zombie/evicted).`);
         return true;
@@ -111,13 +138,6 @@ export function reconcileThreadOwnership(mcpSessionId, threadId) {
     const owner = threadOwnerSession.get(threadId);
     if (owner === key)
         return false;
-    // Refuse cross-thread adoption: this identity already owns another thread.
-    for (const [otherThreadId, otherOwner] of threadOwnerSession) {
-        if (otherOwner === key && otherThreadId !== threadId) {
-            log.warn(`[session] ${key.slice(0, 12)}… tried to act on thread ${threadId} but owns ${otherThreadId} — refused.`);
-            return true;
-        }
-    }
     if (owner !== undefined) {
         const bothTokens = key.startsWith("tok:") && owner.startsWith("tok:");
         if (bothTokens) {
@@ -141,7 +161,7 @@ export function reconcileThreadOwnership(mcpSessionId, threadId) {
 }
 /** Mark a session as the sole owner for a thread. Old owners are superseded. */
 export function setThreadOwnerSession(threadId, mcpSessionId) {
-    const key = ownerKey(mcpSessionId);
+    const key = ownerKey(mcpSessionId, threadId);
     const previous = threadOwnerSession.get(threadId);
     if (previous !== undefined && previous !== key) {
         // start_session is the explicit ownership-transfer signal (e.g. the keeper
@@ -157,13 +177,114 @@ export function setThreadOwnerSession(threadId, mcpSessionId) {
     supersededSessions.delete(key);
     threadOwnerSession.set(threadId, key);
 }
+// ── Park registry: which OWNER is parked in wait_for_instructions right now ──
+// A worker is PARKED when THIS process is holding its
+// remote_copilot_wait_for_instructions call open. The poll loop knows that
+// first-hand, so parking is OBSERVED, never inferred from artifacts — and it must
+// not be: our own SSE keepalive is echoed into the agent's stream-json log every
+// 30s, so a parked worker's log keeps growing and its mtime keeps advancing while
+// it does nothing (measured: three threads all parked in wait grew 1056/1059/2080
+// bytes over 90s). Log activity cannot tell WORKING from PARKED-WAITING; this can.
+//
+// The mark is keyed by OWNER KEY, not by thread, because the fact the TTL sweep
+// needs is about the owner: "is the session that owns this thread parked?". A
+// thread-keyed mark answered a different question and got it wrong — a superseded
+// zombie's residual mark made its replacement read as parked while the
+// replacement was actually WORKING (it consumed a queued task in the pre-loop
+// path and never reached the mark), so the sweep could behead a live worker.
+// ownerKey — not the raw transport session id — because a same-process transport
+// reconnect opens a second wait under a NEW sid but the SAME token: keying by sid
+// would split one identity in two and break the legitimate reconnect overlap the
+// refcount exists for.
+//
+// REFCOUNTED per owner key, not a Set: a superseded zombie session's poll loop
+// exits on its next 2s tick AFTER the replacement's loop has entered, and a
+// reconnecting transport of the SAME owner overlaps the same way. With a Set the
+// first release would erase the surviving call's mark and a parked worker would
+// read as working.
+//
+// IN-MEMORY on purpose: the mark mirrors a live socket held by this process, so a
+// restart must drop both together — and the worker's re-entry into wait rebuilds
+// both within one poll re-call. Everything that DECIDES teardown stays durable
+// (created_at, the grace deadline, the decommission arbitration), so losing a mark
+// can only DELAY a parked worker's death, never kill a working one.
+//
+// NOT CLOSED, deliberately: the CROSS-PROCESS form — an old process sweeping while
+// its own old wait is open and the replacement works in a NEW process — is not
+// fixed by ownership scoping, because both the marks and threadOwnerSession are
+// per-process. It is bounded instead by the maintenance handover: the old wait
+// checks the maintenance flag every iteration un-throttled, its return unmarks
+// through the `finally`, and the port handover is ACK-gated on that same
+// observation — so the old process's marks are gone before the new one serves,
+// unless the old wait was stuck in the (timeout-less) SSE keepalive across the
+// WHOLE handover AND the dying process's sweep fired in its shutdown window AND
+// the row was untracked there too. Stacked coincidences, bounded by process death.
+const parkedOwners = new Map();
+/** The park-mark identity for a wait call. A call with no transport session id
+ *  (STDIO/legacy) has no owner key to resolve, so it parks under its own anonymous
+ *  identity; such a thread also never has an owner row, which is exactly the case
+ *  isThreadWaiting's any-mark fallback covers. */
+function parkKey(threadId, mcpSessionId) {
+    return mcpSessionId === undefined ? `anon:#${threadId}` : ownerKey(mcpSessionId, threadId);
+}
+/**
+ * Mark a thread as parked in wait_for_instructions (refcount +1) and return the
+ * key the mark was filed under.
+ *
+ * The caller MUST hand that returned key back to unmarkThreadWaiting rather than
+ * recomputing it: the key is derived from the session's spawn token, and a token
+ * state change mid-wait would recompute to a different key and leak the mark
+ * forever.
+ */
+export function markThreadWaiting(threadId, mcpSessionId) {
+    const key = parkKey(threadId, mcpSessionId);
+    const marks = parkedOwners.get(threadId) ?? new Map();
+    marks.set(key, (marks.get(key) ?? 0) + 1);
+    parkedOwners.set(threadId, marks);
+    return key;
+}
+/** Release the park mark taken under `key` (the value markThreadWaiting returned). */
+export function unmarkThreadWaiting(threadId, key) {
+    const marks = parkedOwners.get(threadId);
+    if (marks === undefined)
+        return;
+    const remaining = (marks.get(key) ?? 0) - 1;
+    if (remaining > 0)
+        marks.set(key, remaining);
+    else
+        marks.delete(key);
+    if (marks.size === 0)
+        parkedOwners.delete(threadId);
+}
+/**
+ * True while the session that OWNS this thread is holding a
+ * wait_for_instructions call open — i.e. the worker is parked on us rather than
+ * working. Marks belonging to any other identity (a superseded zombie that has
+ * not yet noticed) are ignored: they say nothing about what the current owner is
+ * doing.
+ *
+ * When the thread has no owner row yet, fall back to counting ANY mark. That gap
+ * is transient by construction: the poll loop's pre-loop reconcileThreadOwnership
+ * claims ownership BEFORE the mark is taken, in the same call — so an unowned
+ * thread with a mark is a fresh process whose wait predates its own ownership
+ * row, and treating it as parked is the same answer ownership would give.
+ */
+export function isThreadWaiting(threadId) {
+    const marks = parkedOwners.get(threadId);
+    if (marks === undefined || marks.size === 0)
+        return false;
+    const owner = threadOwnerSession.get(threadId);
+    if (owner === undefined)
+        return true;
+    return (marks.get(owner) ?? 0) > 0;
+}
 export function registerMcpSession(threadId, mcpSessionId, closeTransport) {
     const entries = threadSessionRegistry.get(threadId) ?? [];
     entries.push({ mcpSessionId, closeTransport });
     threadSessionRegistry.set(threadId, entries);
     sessionThreadRegistry.set(mcpSessionId, threadId);
     expectedSessionCloses.delete(mcpSessionId);
-    log.debug(`[session] Registered transport ${mcpSessionId.slice(0, 8)}… for thread ${threadId} (${ownerKey(mcpSessionId).slice(0, 12)}…).`);
+    log.debug(`[session] Registered transport ${mcpSessionId.slice(0, 8)}… for thread ${threadId} (${ownerKey(mcpSessionId, threadId).slice(0, 12)}…).`);
 }
 export function getThreadIdForMcpSession(mcpSessionId) {
     return sessionThreadRegistry.get(mcpSessionId);
@@ -232,7 +353,7 @@ export function unregisterMcpSession(mcpSessionId) {
  */
 export function purgeOtherSessions(threadId, keepMcpSessionId) {
     const entries = threadSessionRegistry.get(threadId) ?? [];
-    const keepKey = keepMcpSessionId ? ownerKey(keepMcpSessionId) : undefined;
+    const keepKey = keepMcpSessionId ? ownerKey(keepMcpSessionId, threadId) : undefined;
     let purged = 0;
     const kept = [];
     for (const entry of entries) {
@@ -240,8 +361,10 @@ export function purgeOtherSessions(threadId, keepMcpSessionId) {
             kept.push(entry);
             continue;
         }
-        // Resolve the identity BEFORE unregister clears its token mapping.
-        const entryKey = ownerKey(entry.mcpSessionId);
+        // Resolve the identity BEFORE unregister clears its token mapping. Both keys
+        // are scoped to THIS thread, so the supersede below cannot leak to a sibling
+        // thread that shares the same spawn token.
+        const entryKey = ownerKey(entry.mcpSessionId, threadId);
         // Supersede only DIFFERENT processes. A stale transport of the SAME process
         // (a prior reconnect — same key as the keeper) is closed but never
         // superseded, otherwise we would evict the live owner.

package/dist/sessions/mcp-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-registry.js","sourceRoot":"","sources":["../../src/sessions/mcp-registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAO/C,6CAA6C;AAC7C,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAkC,CAAC;AACxE,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC;AACxD,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAU,CAAC;AAEhD;;;;;;;;;;;GAWG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE7C,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAErD;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEpD,yEAAyE;AACzE,MAAM,UAAU,qBAAqB,CAAC,YAAoB,EAAE,UAAkB;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACrD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CACN,0DAA0D,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,oBAAoB,CACvG,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,iBAAiB,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,YAAoB;IACpC,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,YAAY,EAAE,CAAC;AACxD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CAAC,YAAgC,EAAE,QAAiB;IACrF,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnC,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,KAAK,CACP,+BAA+B,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sCAAsC,QAAQ,IAAI,GAAG,IAAI,CACzG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,+EAA+E;IAC/E,4EAA4E;IAC5E,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,gBAAgB,GAAG,QAAQ,IAAI,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC7E,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACzC,GAAG,CAAC,KAAK,CACP,sCAAsC,gBAAgB,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CACpI,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,wBAAwB,CACtC,YAAgC,EAChC,QAAgB;IAEhB,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnC,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CACN,uBAAuB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,QAAQ,yCAAyC,CACxG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAChC,2EAA2E;IAC3E,KAAK,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,IAAI,kBAAkB,EAAE,CAAC;QAC7D,IAAI,UAAU,KAAK,GAAG,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CACN,aAAa,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,4BAA4B,QAAQ,aAAa,aAAa,aAAa,CACzG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,UAAU,EAAE,CAAC;YACf,0EAA0E;YAC1E,wEAAwE;YACxE,0BAA0B;YAC1B,GAAG,CAAC,IAAI,CACN,oBAAoB,QAAQ,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,kCAAkC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CACrI,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,0EAA0E;QAC1E,wEAAwE;QACxE,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,GAAG,CAAC,IAAI,CACN,oBAAoB,QAAQ,yBAAyB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,gCAAgC,CAClI,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,6EAA6E;QAC7E,GAAG,CAAC,IAAI,CAAC,oBAAoB,QAAQ,6BAA6B,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1F,CAAC;IACD,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,YAAoB;IAC1E,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;QAC/C,2EAA2E;QAC3E,2EAA2E;QAC3E,yEAAyE;QACzE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,GAAG,CAAC,IAAI,CACN,oBAAoB,QAAQ,6BAA6B,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CACvI,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,oBAAoB,QAAQ,iBAAiB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC;IAChG,CAAC;IACD,2DAA2D;IAC3D,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,YAAoB,EACpB,cAA0B;IAE1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC;IAC/C,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,qBAAqB,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAClD,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3C,GAAG,CAAC,KAAK,CACP,kCAAkC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,QAAQ,KAAK,QAAQ,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAChI,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,YAAoB;IAC3D,OAAO,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;AAC5D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA+B,CAAC;AAEjE,MAAM,UAAU,yBAAyB,CAAC,YAAoB,EAAE,KAA0B;IACxF,iBAAiB,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,oBAAoB,CAAC,YAAoB;IACvD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACvC,OAAO,KAAK,EAAE,CAAC;AACjB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,YAAoB;IACzD,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,YAAoB;IACxD,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,YAAoB;IACjE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,YAAoB;IACvD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3C,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3C,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACvC,GAAG,CAAC,KAAK,CACP,oCAAoC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,QAAQ,IAAI,GAAG,IAAI,CAC7F,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,gBAAyB;IAC5E,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,YAAY,KAAK,gBAAgB,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,mEAAmE;QACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC9C,4EAA4E;QAC5E,mEAAmE;QACnE,uDAAuD;QACvD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjC,GAAG,CAAC,IAAI,CACN,6BAA6B,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,QAAQ,iCAAiC,CAClJ,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,KAAK,CACP,+CAA+C,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gCAAgC,QAAQ,GAAG,CACzH,CAAC;QACJ,CAAC;QACD,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,uCAAuC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,QAAQ,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CACrH,CAAC;QACJ,CAAC;QACD,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC;IACX,CAAC;IACD,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,gBAAgB;QAAE,qBAAqB,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,4DAA4D,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,QAAQ,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CAC1I,CAAC;QACJ,CAAC;QACD,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC;IACX,CAAC;IACD,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"mcp-registry.js","sourceRoot":"","sources":["../../src/sessions/mcp-registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAO/C,6CAA6C;AAC7C,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAkC,CAAC;AACxE,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC;AACxD,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAU,CAAC;AAEhD;;;;;;;;;;;GAWG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE7C,8EAA8E;AAC9E,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAErD;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEpD,yEAAyE;AACzE,MAAM,UAAU,qBAAqB,CAAC,YAAoB,EAAE,UAAkB;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACrD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CACN,0DAA0D,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,oBAAoB,CACvG,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,iBAAiB,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,QAAQ,CAAC,YAAoB,EAAE,QAAgB;IACtD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,YAAY,IAAI,QAAQ,EAAE,CAAC;AAChF,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CAAC,YAAgC,EAAE,QAAiB;IACrF,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,4EAA4E;IAC5E,+EAA+E;IAC/E,sEAAsE;IACtE,MAAM,gBAAgB,GAAG,QAAQ,IAAI,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC7E,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IACrD,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,KAAK,CACP,+BAA+B,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sCAAsC,gBAAgB,IAAI,CAC1G,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,+EAA+E;IAC/E,4EAA4E;IAC5E,2EAA2E;IAC3E,wDAAwD;IACxD,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACvD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;QACzC,GAAG,CAAC,KAAK,CACP,sCAAsC,gBAAgB,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CACpI,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,wBAAwB,CACtC,YAAgC,EAChC,QAAgB;IAEhB,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,0EAA0E;IAC1E,8EAA8E;IAC9E,6EAA6E;IAC7E,+EAA+E;IAC/E,+EAA+E;IAC/E,yDAAyD;IACzD,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACjE,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QACpE,GAAG,CAAC,IAAI,CACN,+BAA+B,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,sBAAsB,QAAQ,oBAAoB,gBAAgB,gCAAgC,CAC1J,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CACN,uBAAuB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,QAAQ,yCAAyC,CACxG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,UAAU,EAAE,CAAC;YACf,0EAA0E;YAC1E,wEAAwE;YACxE,0BAA0B;YAC1B,GAAG,CAAC,IAAI,CACN,oBAAoB,QAAQ,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,kCAAkC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CACrI,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,0EAA0E;QAC1E,wEAAwE;QACxE,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,GAAG,CAAC,IAAI,CACN,oBAAoB,QAAQ,yBAAyB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,gCAAgC,CAClI,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,6EAA6E;QAC7E,GAAG,CAAC,IAAI,CAAC,oBAAoB,QAAQ,6BAA6B,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1F,CAAC;IACD,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,YAAoB;IAC1E,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;QAC/C,2EAA2E;QAC3E,2EAA2E;QAC3E,yEAAyE;QACzE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,GAAG,CAAC,IAAI,CACN,oBAAoB,QAAQ,6BAA6B,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CACvI,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,oBAAoB,QAAQ,iBAAiB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC;IAChG,CAAC;IACD,2DAA2D;IAC3D,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,gFAAgF;AAChF,sDAAsD;AACtD,2EAA2E;AAC3E,kFAAkF;AAClF,iFAAiF;AACjF,kFAAkF;AAClF,kFAAkF;AAClF,mFAAmF;AACnF,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,kFAAkF;AAClF,uEAAuE;AACvE,8EAA8E;AAC9E,6EAA6E;AAC7E,iFAAiF;AACjF,kFAAkF;AAClF,iFAAiF;AACjF,uBAAuB;AACvB,EAAE;AACF,+EAA+E;AAC/E,4EAA4E;AAC5E,iFAAiF;AACjF,gFAAgF;AAChF,mBAAmB;AACnB,EAAE;AACF,kFAAkF;AAClF,iFAAiF;AACjF,+EAA+E;AAC/E,mFAAmF;AACnF,oEAAoE;AACpE,EAAE;AACF,mFAAmF;AACnF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,+EAA+E;AAC/E,yEAAyE;AACzE,+EAA+E;AAC/E,+EAA+E;AAC/E,gFAAgF;AAChF,mFAAmF;AACnF,MAAM,YAAY,GAAG,IAAI,GAAG,EAA+B,CAAC;AAE5D;;;kDAGkD;AAClD,SAAS,OAAO,CAAC,QAAgB,EAAE,YAAqB;IACtD,OAAO,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAC7F,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,YAAqB;IACvE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAC;IACtE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,GAAW;IAC/D,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,SAAS,GAAG,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;;QACxC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,YAAoB,EACpB,cAA0B;IAE1B,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC;IAC/C,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7C,qBAAqB,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAClD,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3C,GAAG,CAAC,KAAK,CACP,kCAAkC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,QAAQ,KAAK,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAC1I,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,YAAoB;IAC3D,OAAO,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;AAC5D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA+B,CAAC;AAEjE,MAAM,UAAU,yBAAyB,CAAC,YAAoB,EAAE,KAA0B;IACxF,iBAAiB,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,oBAAoB,CAAC,YAAoB;IACvD,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACvC,OAAO,KAAK,EAAE,CAAC;AACjB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,YAAoB;IACzD,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,YAAoB;IACxD,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,YAAoB;IACjE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,YAAoB;IACvD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3C,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3C,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACvC,GAAG,CAAC,KAAK,CACP,oCAAoC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,QAAQ,IAAI,GAAG,IAAI,CAC7F,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,gBAAyB;IAC5E,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,YAAY,KAAK,gBAAgB,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,6EAA6E;QAC7E,6EAA6E;QAC7E,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACxD,4EAA4E;QAC5E,mEAAmE;QACnE,uDAAuD;QACvD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjC,GAAG,CAAC,IAAI,CACN,6BAA6B,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,QAAQ,iCAAiC,CAClJ,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,KAAK,CACP,+CAA+C,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gCAAgC,QAAQ,GAAG,CACzH,CAAC;QACJ,CAAC;QACD,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,uCAAuC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,QAAQ,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CACrH,CAAC;QACJ,CAAC;QACD,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC;IACX,CAAC;IACD,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,gBAAgB;QAAE,qBAAqB,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,4DAA4D,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,QAAQ,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CAC1I,CAAC;QACJ,CAAC;QACD,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC;IACX,CAAC;IACD,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/test-bootstrap.d.ts

@@ -1,9 +1,10 @@
 /**
  * GLOBAL TEST ISOLATION GUARD — preloaded before every test file.
  *
- * Wired in package.json as an `--import` hook that runs BEFORE the test module
- * (and therefore before its first import of config / schema / scheduler / any
- * module that resolves a path from the data dir):
+ * Wired (by scripts/run-tests.mjs, what `npm test` runs) as an `--import` hook
+ * that runs BEFORE the test module (and therefore before its first import of
+ * config / schema / scheduler / any module that resolves a path from the data
+ * dir):
  *
  *     node --import tsx --import ./src/test-bootstrap.ts --test "src/**\/*.test.ts"
  *
@@ -20,20 +21,26 @@
  * min until the supervisor restarted it. The earlier mitigation only redirected
  * LOGS (SENSORIUM_LOG_DIR); every other real path stayed exposed.
  *
- * This guard closes the whole hole three ways:
+ * This guard closes the whole hole four ways:
  *   1. SENSORIUM_BASE_DIR → a fresh per-run temp dir (the durable follow-up):
  *      relocates memory.db, settings.json, schedules, heartbeats, pids,
  *      active-sessions.json, files — see src/lib/paths.ts.
- *   2. HOME + USERPROFILE → the same temp dir (belt-and-suspenders): any path
- *      that still reaches os.homedir() directly (session-store sibling file,
- *      external-tool dirs, a call site not yet routed through paths.ts) also
- *      lands in the throwaway dir. os.homedir() reads USERPROFILE on Windows and
- *      HOME on POSIX, so both are set.
- *   3. A HARD REFUSAL: if the data dir still resolves to the real one, THROW
+ *   2. HOME + USERPROFILE + APPDATA + LOCALAPPDATA → the same temp dir
+ *      (belt-and-suspenders): any path that still reaches os.homedir() or the
+ *      AppData roots directly also lands in the throwaway dir. os.homedir()
+ *      reads USERPROFILE on Windows and HOME on POSIX, so both are set.
+ *   3. The environment is REBUILT from an allowlist (below). Nothing the shell
+ *      running the suite carries — the live supervisor / MCP ports and secret,
+ *      Telegram / OpenAI / Claude credentials, board and broker switches, a
+ *      parent agent session's variables — reaches a test.
+ *   4. A HARD REFUSAL: if the data dir still resolves to the real one, THROW
  *      before a single test runs. The suite can never run against live state.
  *
- * Ports are already safe (the two HTTP tests bind port 0); nothing here needs to
- * touch them.
+ * Ports are NOT safe by construction: product code talks to the supervisor and
+ * the MCP over loopback, and a test can always reach a live server on this
+ * host. The tripwire (test-tripwire.test-support.ts) refuses every connection
+ * to a port this process is not listening on, every agent CLI / process killer,
+ * and every signal to a process this test did not spawn (inc75).
  */
 export {};
 //# sourceMappingURL=test-bootstrap.d.ts.map

package/dist/test-bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"test-bootstrap.d.ts","sourceRoot":"","sources":["../src/test-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG"}
+{"version":3,"file":"test-bootstrap.d.ts","sourceRoot":"","sources":["../src/test-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG"}

package/dist/test-bootstrap.js

@@ -1,9 +1,10 @@
 /**
  * GLOBAL TEST ISOLATION GUARD — preloaded before every test file.
  *
- * Wired in package.json as an `--import` hook that runs BEFORE the test module
- * (and therefore before its first import of config / schema / scheduler / any
- * module that resolves a path from the data dir):
+ * Wired (by scripts/run-tests.mjs, what `npm test` runs) as an `--import` hook
+ * that runs BEFORE the test module (and therefore before its first import of
+ * config / schema / scheduler / any module that resolves a path from the data
+ * dir):
  *
  *     node --import tsx --import ./src/test-bootstrap.ts --test "src/**\/*.test.ts"
  *
@@ -20,27 +21,64 @@
  * min until the supervisor restarted it. The earlier mitigation only redirected
  * LOGS (SENSORIUM_LOG_DIR); every other real path stayed exposed.
  *
- * This guard closes the whole hole three ways:
+ * This guard closes the whole hole four ways:
  *   1. SENSORIUM_BASE_DIR → a fresh per-run temp dir (the durable follow-up):
  *      relocates memory.db, settings.json, schedules, heartbeats, pids,
  *      active-sessions.json, files — see src/lib/paths.ts.
- *   2. HOME + USERPROFILE → the same temp dir (belt-and-suspenders): any path
- *      that still reaches os.homedir() directly (session-store sibling file,
- *      external-tool dirs, a call site not yet routed through paths.ts) also
- *      lands in the throwaway dir. os.homedir() reads USERPROFILE on Windows and
- *      HOME on POSIX, so both are set.
- *   3. A HARD REFUSAL: if the data dir still resolves to the real one, THROW
+ *   2. HOME + USERPROFILE + APPDATA + LOCALAPPDATA → the same temp dir
+ *      (belt-and-suspenders): any path that still reaches os.homedir() or the
+ *      AppData roots directly also lands in the throwaway dir. os.homedir()
+ *      reads USERPROFILE on Windows and HOME on POSIX, so both are set.
+ *   3. The environment is REBUILT from an allowlist (below). Nothing the shell
+ *      running the suite carries — the live supervisor / MCP ports and secret,
+ *      Telegram / OpenAI / Claude credentials, board and broker switches, a
+ *      parent agent session's variables — reaches a test.
+ *   4. A HARD REFUSAL: if the data dir still resolves to the real one, THROW
  *      before a single test runs. The suite can never run against live state.
  *
- * Ports are already safe (the two HTTP tests bind port 0); nothing here needs to
- * touch them.
+ * Ports are NOT safe by construction: product code talks to the supervisor and
+ * the MCP over loopback, and a test can always reach a live server on this
+ * host. The tripwire (test-tripwire.test-support.ts) refuses every connection
+ * to a port this process is not listening on, every agent CLI / process killer,
+ * and every signal to a process this test did not spawn (inc75).
  */
-import { homedir, tmpdir } from "node:os";
-import { mkdtempSync, rmSync } from "node:fs";
+import { homedir, tmpdir, userInfo } from "node:os";
+import { mkdtempSync, mkdirSync, rmSync } from "node:fs";
 import { join } from "node:path";
-// Snapshot the REAL data dir BEFORE we override anything, so the refusal check
-// below compares against ground truth.
-const REAL_DATA_DIR = join(homedir(), ".remote-copilot-mcp");
+import { installTestTripwire, TRIPWIRE_LEDGER_ENV } from "./test-tripwire.test-support.js";
+// The REAL data dir, from the account database rather than the environment: a
+// nested run (a test that runs a fixture file under its own runner) inherits
+// the temp HOME this file set, so an env-derived "real" dir there would be a
+// temp one.
+const REAL_DATA_DIR = join(userInfo().homedir, ".remote-copilot-mcp");
+// ── ENV ALLOWLIST ────────────────────────────────────────────────────────────
+// Each variable kept is needed by the platform, never by product config:
+//   PATH                git and `where` resolution
+//   SystemRoot, windir  Windows: Node's crypto, DNS and child spawns need them
+//   TEMP, TMP           os.tmpdir() — the temp home below lives there
+//   ComSpec             the shell exec / shell:true launch
+//   PATHEXT             .cmd / .exe resolution by `where` and the shell
+//   NODE_OPTIONS        node flags the operator passes to every test child
+//   NODE_TEST_CONTEXT   the runner's marker for its children (logger.ts, tripwire)
+//   TRIPWIRE_LEDGER_ENV the run's refusal ledger (scripts/run-tests.mjs)
+//   TZ                  a timezone a test run was started under on purpose
+// Windows environment names are case-insensitive, so the match is too.
+const ENV_ALLOWLIST = new Set([
+    "PATH",
+    "SystemRoot",
+    "windir",
+    "TEMP",
+    "TMP",
+    "ComSpec",
+    "PATHEXT",
+    "NODE_OPTIONS",
+    "NODE_TEST_CONTEXT",
+    "TZ",
+    TRIPWIRE_LEDGER_ENV,
+].map((name) => name.toUpperCase()));
+for (const name of Object.keys(process.env))
+    if (!ENV_ALLOWLIST.has(name.toUpperCase()))
+        delete process.env[name];
 // One throwaway home per test child. Not cleaned between files (each child gets
 // its own), but removed on this child's exit below.
 const TEST_HOME = mkdtempSync(join(tmpdir(), "sensorium-test-home-"));
@@ -49,11 +87,21 @@ process.env.SENSORIUM_BASE_DIR = TEST_BASE_DIR;
 process.env.SENSORIUM_LOG_DIR = join(TEST_BASE_DIR, "logs", "mcp");
 process.env.USERPROFILE = TEST_HOME;
 process.env.HOME = TEST_HOME;
+process.env.APPDATA = join(TEST_HOME, "AppData", "Roaming");
+process.env.LOCALAPPDATA = join(TEST_HOME, "AppData", "Local");
+mkdirSync(process.env.APPDATA, { recursive: true });
+mkdirSync(process.env.LOCALAPPDATA, { recursive: true });
+// Published for tests that need to assert they are NOT pointed at live state.
+// Once HOME/USERPROFILE are overridden above, `os.homedir()` inside a test
+// returns the temp home, so a test cannot recompute the production data dir on
+// its own — it has to be handed the real value from here.
+process.env.SENSORIUM_TEST_REAL_DATA_DIR = REAL_DATA_DIR;
 // config/index.ts calls process.exit(1) at import when these are unset — seed
-// dummies so importing config in any test can never kill the runner. Only fill
-// blanks; never clobber a value a test set on purpose.
-process.env.TELEGRAM_TOKEN ||= "test-token";
-process.env.TELEGRAM_CHAT_ID ||= "test-chat-id";
+// dummies so importing config in any test can never kill the runner. The
+// allowlist above already dropped any real value.
+process.env.TELEGRAM_TOKEN = "test-token";
+process.env.TELEGRAM_CHAT_ID = "test-chat-id";
+installTestTripwire();
 // ── HARD REFUSAL ────────────────────────────────────────────────────────────
 // If, after the overrides, the data dir STILL points at the live one, abort the
 // entire process. This can only happen if the override mechanism itself failed

package/dist/test-bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"test-bootstrap.js","sourceRoot":"","sources":["../src/test-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,+EAA+E;AAC/E,uCAAuC;AACvC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,qBAAqB,CAAC,CAAC;AAE7D,gFAAgF;AAChF,oDAAoD;AACpD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;AACtE,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;AAE7D,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,aAAa,CAAC;AAC/C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AACnE,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,SAAS,CAAC;AACpC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;AAE7B,8EAA8E;AAC9E,+EAA+E;AAC/E,uDAAuD;AACvD,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,YAAY,CAAC;AAC5C,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,cAAc,CAAC;AAEhD,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,qDAAqD;AACrD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AACrD,IACE,CAAC,aAAa;IACd,aAAa,KAAK,aAAa;IAC/B,IAAI,CAAC,OAAO,EAAE,EAAE,qBAAqB,CAAC,KAAK,aAAa,EACxD,CAAC;IACD,MAAM,IAAI,KAAK,CACb,4EAA4E;QAC1E,IAAI,aAAa,0DAA0D;QAC3E,0DAA0D,CAC7D,CAAC;AACJ,CAAC;AAED,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;IACtB,IAAI,CAAC;QACH,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"test-bootstrap.js","sourceRoot":"","sources":["../src/test-bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3F,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,YAAY;AACZ,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;AAEtE,gFAAgF;AAChF,yEAAyE;AACzE,mDAAmD;AACnD,+EAA+E;AAC/E,sEAAsE;AACtE,2DAA2D;AAC3D,wEAAwE;AACxE,2EAA2E;AAC3E,mFAAmF;AACnF,yEAAyE;AACzE,2EAA2E;AAC3E,uEAAuE;AACvE,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B;IACE,MAAM;IACN,YAAY;IACZ,QAAQ;IACR,MAAM;IACN,KAAK;IACL,SAAS;IACT,SAAS;IACT,cAAc;IACd,mBAAmB;IACnB,IAAI;IACJ,mBAAmB;CACpB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CACpC,CAAC;AACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IACzC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAEvE,gFAAgF;AAChF,oDAAoD;AACpD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;AACtE,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;AAE7D,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,aAAa,CAAC;AAC/C,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AACnE,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,SAAS,CAAC;AACpC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC;AAC7B,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAC5D,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAC/D,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAEzD,8EAA8E;AAC9E,2EAA2E;AAC3E,+EAA+E;AAC/E,0DAA0D;AAC1D,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,aAAa,CAAC;AAEzD,8EAA8E;AAC9E,yEAAyE;AACzE,kDAAkD;AAClD,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,YAAY,CAAC;AAC1C,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,cAAc,CAAC;AAE9C,mBAAmB,EAAE,CAAC;AAEtB,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,qDAAqD;AACrD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;AACrD,IACE,CAAC,aAAa;IACd,aAAa,KAAK,aAAa;IAC/B,IAAI,CAAC,OAAO,EAAE,EAAE,qBAAqB,CAAC,KAAK,aAAa,EACxD,CAAC;IACD,MAAM,IAAI,KAAK,CACb,4EAA4E;QAC1E,IAAI,aAAa,0DAA0D;QAC3E,0DAA0D,CAC7D,CAAC;AACJ,CAAC;AAED,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;IACtB,IAAI,CAAC;QACH,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/test-tripwire.test-support.d.ts

@@ -0,0 +1,75 @@
+/**
+ * TEST TRIPWIRE — installed by test-bootstrap.ts in every test process.
+ *
+ * The rule, with NO exceptions: a test process connects only to its own
+ * exclusive listeners, launches no agent CLI or process killer, and signals
+ * only its own live children; every refusal is recorded and turns the run red.
+ *
+ *   - network: fetch and net sockets may reach only an address and port (or a
+ *     pipe) a server in THIS process holds alone at that moment — see Network
+ *     below for what counts. The live supervisor (8848), the live MCP (3847)
+ *     and every other host are refused — there is deliberately no in-process
+ *     fake supervisor, so a test that needs a broker has to stand one up and
+ *     say so;
+ *   - child processes: agent CLIs (claude / copilot / codex) and process killers
+ *     (taskkill / wmic / Stop-Process) are refused;
+ *   - signals: process.kill(pid, sig) with a non-zero signal is refused unless
+ *     `pid` is a child this process spawned that has not exited yet. A made-up
+ *     test pid — or a finished child's, once the OS reuses it — can be a real
+ *     process on this machine; the degraded native kill path would end it.
+ *
+ * No test is given leave to do any of these. A test that needs a supervisor
+ * that is down swaps the broker client's transport (brokerTransportForTest).
+ *
+ * Scope — the tripwire guards the code that runs where it is installed: every
+ * `node --test` file child (they inherit the --import flags) and worker threads
+ * started from a file or URL with the default execArgv. Three ways out are NOT
+ * covered by it:
+ *
+ *   - a worker_threads Worker started with an explicit `execArgv` that drops the
+ *     --import flags runs without the tripwire;
+ *   - a worker_threads Worker started with `eval: true` runs without it even
+ *     with the default execArgv: Node does not run the --import modules for an
+ *     eval worker (probed: fetch is unpatched in a CommonJS eval worker, patched
+ *     in a data:-URL ESM worker). The one in product code today,
+ *     flight-recorder.service.ts, uses only worker_threads and fs on the path
+ *     its test supplies (a temp dir) — no network, child process or kill — so
+ *     it is not an escape now;
+ *   - a grandchild started as spawn(process.execPath, ...) is a plain node that
+ *     never loads test-bootstrap.ts, and launching node is not refused here.
+ *
+ * All three still inherit only the allowlisted environment (test-bootstrap.ts), so
+ * they find no live broker / MCP port to reach; nothing stops one that brings
+ * its own port.
+ *
+ * Product code catches the errors it gets from fetch / kill, so a throw alone
+ * would be swallowed into a degraded path and the test would pass. Every refusal
+ * is therefore also RECORDED, twice:
+ *
+ *   - in the run's LEDGER, a file scripts/run-tests.mjs (what `npm test` runs)
+ *     creates and reads back after the whole `node --test` run has exited. It
+ *     is appended to synchronously at the moment of refusal and that script
+ *     runs no test code, so no test attribution, concurrency or exit listener order
+ *     inside a child can lose a refusal — including one raised after the last
+ *     test ended (fire-and-forget work that outlived its test, the inc74
+ *     failure mode) or from a test module's own exit hook.
+ *   - per test, for the report: a root afterEach fails the test it ran after.
+ *     Best effort only — node:test shares one afterEach hook instance across
+ *     sibling tests and a concurrent sibling's run of it clears the first
+ *     failure (TestHook.run resets `error`), and a sibling's afterEach can
+ *     drain a refusal that was not its own.
+ *
+ * Why (inc75): a fire-and-forget exit path outlived its test, the port default
+ * in broker-client sent a real /proc/spawn to the live supervisor, and twelve
+ * real agents were started against the live MCP.
+ */
+/** The variable that carries the run's ledger path from scripts/run-tests.mjs,
+ *  which spells the same name (it is plain Node and cannot import this file). */
+export declare const TRIPWIRE_LEDGER_ENV = "SENSORIUM_TEST_TRIPWIRE_LEDGER";
+/** The error every refused operation throws (or emits, for a socket). */
+export declare class TripwireRefusal extends Error {
+    readonly code = "ERR_TEST_TRIPWIRE";
+    constructor(what: string);
+}
+export declare function installTestTripwire(): void;
+//# sourceMappingURL=test-tripwire.test-support.d.ts.map

package/dist/test-tripwire.test-support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-tripwire.test-support.d.ts","sourceRoot":"","sources":["../src/test-tripwire.test-support.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AAWH;iFACiF;AACjF,eAAO,MAAM,mBAAmB,mCAAmC,CAAC;AAEpE,yEAAyE;AACzE,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,uBAAuB;gBACxB,IAAI,EAAE,MAAM;CAIzB;AA8WD,wBAAgB,mBAAmB,IAAI,IAAI,CAQ1C"}