ssh-mcp-pro 1.1.5 → 1.2.3

package/dist/remote/agent-handler.js

@@ -1,8 +1,8 @@
+import { AgentConnectionLifecycle } from "./agent-connection-lifecycle.js";
 import { nowIso, verifyEnvelope } from "./crypto.js";
 import { AGENT_NONCE_TTL_MS, isRecord, pruneNonceWindow, hasSeenNonce, rememberNonce, } from "./http-util.js";
 import { parseActionResultEnvelope, parseAgentHelloEnvelope } from "./schemas.js";
-import { acceptWebSocketUpgrade } from "./websocket.js";
-/** Handles agent WebSocket connection lifecycle for RemoteControlPlane. */
+/** Handles signed agent messages while delegating bounded socket state to the lifecycle manager. */
 export class AgentWebSocketHandler {
     config;
     store;
@@ -10,6 +10,7 @@ export class AgentWebSocketHandler {
     agentHelloNonces;
     pendingActions;
     audit;
+    lifecycle;
     constructor(config, store, agentConnections, agentHelloNonces, pendingActions, audit) {
         this.config = config;
         this.store = store;
@@ -17,41 +18,63 @@ export class AgentWebSocketHandler {
         this.agentHelloNonces = agentHelloNonces;
         this.pendingActions = pendingActions;
         this.audit = audit;
+        this.lifecycle = new AgentConnectionLifecycle(config, {
+            onMessage: (connection, message) => this.handleAgentMessage(connection, message),
+            onAuthenticatedClose: (agentId, connection, code) => this.handleLiveConnectionClosedById(agentId, connection, code),
+            getAgent: (agentId) => this.store.getAgent(agentId),
+        }, audit);
     }
     handleUpgrade(req, socket, head, pathname) {
         if (pathname !== this.config.agentWsPath) {
             return false;
         }
-        const connection = acceptWebSocketUpgrade(req, socket, head);
-        connection.onText((message) => {
-            void this.handleAgentMessage(connection, message).catch(() => {
-                connection.sendJson({
-                    type: "error",
-                    code: "INTERNAL_ERROR",
-                    message: "Agent message failed",
-                });
-                connection.close();
-            });
-        });
+        this.lifecycle.handleUpgrade(req, socket, head);
         return true;
     }
+    attachConnection(connection, now = Date.now()) {
+        return this.lifecycle.attach(connection, now);
+    }
     async handleAgentMessage(connection, message) {
-        const payload = JSON.parse(message);
+        let payload;
+        try {
+            payload = JSON.parse(message);
+        }
+        catch {
+            this.rejectInvalidMessage(connection, "Invalid message", "invalid agent message");
+            return;
+        }
         if (!isRecord(payload)) {
-            connection.sendJson({ type: "error", code: "INTERNAL_ERROR", message: "Invalid message" });
-            connection.close();
+            this.rejectInvalidMessage(connection, "Invalid message", "invalid agent message");
             return;
         }
         if (payload.type === "agent.hello") {
             await this.handleAgentHello(connection, parseAgentHelloEnvelope(payload));
             return;
         }
+        if (this.lifecycle.isManaged(connection) && !this.lifecycle.isAuthenticated(connection)) {
+            this.audit({
+                agentId: this.lifecycle.agentIdFor(connection),
+                eventType: "agent_message_before_hello",
+                severity: "warn",
+                metadata: {},
+            });
+            connection.sendJson({
+                type: "error",
+                code: "FORBIDDEN",
+                message: "Agent hello is required before other messages",
+            });
+            this.lifecycle.closeConnection(connection, 1008, "agent hello required");
+            return;
+        }
         if (payload.type === "action.result") {
             await this.handleActionResult(connection, parseActionResultEnvelope(payload));
             return;
         }
-        connection.sendJson({ type: "error", code: "INTERNAL_ERROR", message: "Unknown message type" });
-        connection.close();
+        this.rejectInvalidMessage(connection, "Unknown message type", "unknown agent message");
+    }
+    rejectInvalidMessage(connection, message, closeReason) {
+        connection.sendJson({ type: "error", code: "INTERNAL_ERROR", message });
+        this.lifecycle.closeConnection(connection, 1008, closeReason);
     }
     async handleAgentHello(connection, hello) {
         const agent = this.store.getAgent(hello.agent_id);
@@ -61,7 +84,10 @@ export class AgentWebSocketHandler {
                 code: "AGENT_NOT_FOUND",
                 message: "Agent is not enrolled",
             });
-            connection.close();
+            this.lifecycle.closeConnection(connection, 1008, "agent not enrolled");
+            return;
+        }
+        if (!this.lifecycle.claim(connection, agent)) {
             return;
         }
         if (!verifyEnvelope(hello, agent.publicKey)) {
@@ -77,11 +103,10 @@ export class AgentWebSocketHandler {
                 code: "SIGNATURE_INVALID",
                 message: "Agent signature is invalid",
             });
-            connection.close();
+            this.lifecycle.closeConnection(connection, 1008, "invalid agent signature");
             return;
         }
-        const timestampAgeMs = Math.abs(Date.now() - new Date(hello.timestamp).getTime());
-        if (timestampAgeMs > 300_000) {
+        if (this.isStaleHello(hello)) {
             this.audit({
                 userId: agent.userId,
                 agentId: agent.id,
@@ -94,53 +119,30 @@ export class AgentWebSocketHandler {
                 code: "ACTION_EXPIRED",
                 message: "Agent hello timestamp is stale",
             });
-            connection.close();
+            this.lifecycle.closeConnection(connection, 1008, "stale agent hello");
             return;
         }
         const now = Date.now();
         this.cleanupEphemeralState(now);
         const existingConnection = this.agentConnections.get(agent.id);
         if (existingConnection?.connection === connection) {
-            this.audit({
-                userId: agent.userId,
-                agentId: agent.id,
-                eventType: "agent_duplicate_hello_rejected",
-                severity: "warn",
-                metadata: {},
-            });
-            connection.sendJson({
-                type: "error",
-                code: "ACTION_REPLAY_DETECTED",
-                message: "Agent hello was already processed on this connection",
-            });
-            connection.close();
+            this.rejectDuplicateHello(connection, agent, "Agent hello was already processed on this connection");
             return;
         }
-        const helloNonces = this.agentHelloNonces.get(agent.id) ?? new Map();
-        if (helloNonces.has(hello.nonce)) {
-            this.audit({
-                userId: agent.userId,
-                agentId: agent.id,
-                eventType: "agent_hello_replay_detected",
-                severity: "warn",
-                metadata: {},
-            });
+        if (this.hasReplayedHello(agent, hello, now)) {
             connection.sendJson({
                 type: "error",
                 code: "ACTION_REPLAY_DETECTED",
                 message: "Agent hello nonce was already used",
             });
-            connection.close();
+            this.lifecycle.closeConnection(connection, 1008, "replayed agent hello");
             return;
         }
-        helloNonces.set(hello.nonce, now + AGENT_NONCE_TTL_MS);
-        this.agentHelloNonces.set(agent.id, helloNonces);
-        if (existingConnection) {
-            existingConnection.connection.close();
-        }
         const seenNonces = new Map();
         rememberNonce(seenNonces, hello.nonce, now);
         this.agentConnections.set(agent.id, { agent, connection, seenNonces });
+        this.lifecycle.markAuthenticated(connection, agent.id);
+        this.replaceExistingConnection(existingConnection, agent);
         const online = {
             ...agent,
             status: "online",
@@ -149,32 +151,61 @@ export class AgentWebSocketHandler {
             updatedAt: nowIso(),
         };
         this.store.updateAgent(online);
-        connection.onClose(() => {
-            const live = this.agentConnections.get(agent.id);
-            if (live?.connection !== connection) {
-                return;
-            }
-            this.agentConnections.delete(agent.id);
-            const latest = this.store.getAgent(agent.id);
-            if (latest && latest.status !== "revoked") {
-                this.store.updateAgent({ ...latest, status: "offline", updatedAt: nowIso() });
-            }
+        if (!this.lifecycle.isManaged(connection)) {
+            connection.onClose((code) => this.handleLiveConnectionClosed(agent, connection, code));
+        }
+        this.audit({
+            userId: agent.userId,
+            agentId: agent.id,
+            eventType: "agent_connected",
+            severity: "info",
+            metadata: {},
+        });
+        connection.sendJson({ type: "agent.ready", agent_id: agent.id, policy: agent.policy });
+    }
+    isStaleHello(hello) {
+        const timestamp = new Date(hello.timestamp).getTime();
+        return !Number.isFinite(timestamp) || Math.abs(Date.now() - timestamp) > 300_000;
+    }
+    rejectDuplicateHello(connection, agent, message) {
+        this.audit({
+            userId: agent.userId,
+            agentId: agent.id,
+            eventType: "agent_duplicate_hello_rejected",
+            severity: "warn",
+            metadata: {},
+        });
+        connection.sendJson({ type: "error", code: "ACTION_REPLAY_DETECTED", message });
+        this.lifecycle.closeConnection(connection, 1008, "duplicate agent hello");
+    }
+    hasReplayedHello(agent, hello, now) {
+        const helloNonces = this.agentHelloNonces.get(agent.id) ?? new Map();
+        if (helloNonces.has(hello.nonce)) {
             this.audit({
                 userId: agent.userId,
                 agentId: agent.id,
-                eventType: "agent_disconnected",
-                severity: "info",
+                eventType: "agent_hello_replay_detected",
+                severity: "warn",
                 metadata: {},
             });
-        });
+            return true;
+        }
+        helloNonces.set(hello.nonce, now + AGENT_NONCE_TTL_MS);
+        this.agentHelloNonces.set(agent.id, helloNonces);
+        return false;
+    }
+    replaceExistingConnection(existingConnection, agent) {
+        if (!existingConnection) {
+            return;
+        }
         this.audit({
             userId: agent.userId,
             agentId: agent.id,
-            eventType: "agent_connected",
+            eventType: "agent_connection_replaced",
             severity: "info",
-            metadata: { agent_version: hello.agent_version, host: hello.host.hostname },
+            metadata: {},
         });
-        connection.sendJson({ type: "agent.ready", agent_id: agent.id, policy: agent.policy });
+        this.lifecycle.closeConnection(existingConnection.connection, 1000, "connection replaced");
     }
     async handleActionResult(connection, result) {
         const pending = this.pendingActions.get(result.action_id);
@@ -184,31 +215,13 @@ export class AgentWebSocketHandler {
         const agent = this.store.getAgent(result.agent_id);
         if (!agent?.publicKey ||
             !verifyEnvelope(result, agent.publicKey)) {
-            clearTimeout(pending.timeout);
-            this.pendingActions.delete(result.action_id);
-            this.audit({
-                userId: pending.action.userId,
-                agentId: pending.action.agentId,
-                actionId: pending.action.id,
-                eventType: "agent_result_signature_invalid",
-                severity: "warn",
-                metadata: {},
-            });
+            this.rejectPendingAction(pending, result.action_id, "agent_result_signature_invalid");
             pending.reject(new Error("Agent result signature is invalid"));
             return;
         }
         const live = this.agentConnections.get(result.agent_id);
         if (pending.action.agentId !== result.agent_id || live?.connection !== connection) {
-            clearTimeout(pending.timeout);
-            this.pendingActions.delete(result.action_id);
-            this.audit({
-                userId: pending.action.userId,
-                agentId: pending.action.agentId,
-                actionId: pending.action.id,
-                eventType: "agent_result_connection_invalid",
-                severity: "warn",
-                metadata: {},
-            });
+            this.rejectPendingAction(pending, result.action_id, "agent_result_connection_invalid");
             pending.reject(Object.assign(new Error("Agent result came from an unexpected connection"), {
                 code: "SIGNATURE_INVALID",
             }));
@@ -216,16 +229,7 @@ export class AgentWebSocketHandler {
         }
         const now = Date.now();
         if (hasSeenNonce(live.seenNonces, result.nonce, now)) {
-            clearTimeout(pending.timeout);
-            this.pendingActions.delete(result.action_id);
-            this.audit({
-                userId: pending.action.userId,
-                agentId: pending.action.agentId,
-                actionId: pending.action.id,
-                eventType: "agent_result_replay_detected",
-                severity: "warn",
-                metadata: {},
-            });
+            this.rejectPendingAction(pending, result.action_id, "agent_result_replay_detected");
             pending.reject(Object.assign(new Error("Agent result nonce was already used"), {
                 code: "ACTION_REPLAY_DETECTED",
             }));
@@ -236,6 +240,44 @@ export class AgentWebSocketHandler {
         this.pendingActions.delete(result.action_id);
         pending.resolve(result);
     }
+    rejectPendingAction(pending, actionId, eventType) {
+        clearTimeout(pending.timeout);
+        this.pendingActions.delete(actionId);
+        this.audit({
+            userId: pending.action.userId,
+            agentId: pending.action.agentId,
+            actionId: pending.action.id,
+            eventType,
+            severity: "warn",
+            metadata: {},
+        });
+    }
+    handleLiveConnectionClosedById(agentId, connection, closeCode) {
+        const agent = this.store.getAgent(agentId);
+        return agent ? this.handleLiveConnectionClosed(agent, connection, closeCode) : false;
+    }
+    handleLiveConnectionClosed(agent, connection, closeCode) {
+        const live = this.agentConnections.get(agent.id);
+        if (live?.connection !== connection) {
+            return false;
+        }
+        this.agentConnections.delete(agent.id);
+        const latest = this.store.getAgent(agent.id);
+        if (latest && latest.status !== "revoked") {
+            this.store.updateAgent({ ...latest, status: "offline", updatedAt: nowIso() });
+        }
+        this.audit({
+            userId: agent.userId,
+            agentId: agent.id,
+            eventType: "agent_disconnected",
+            severity: "info",
+            metadata: { close_code: closeCode },
+        });
+        return true;
+    }
+    runHeartbeat(now = Date.now()) {
+        this.lifecycle.runHeartbeat(now);
+    }
     cleanupEphemeralState(now = Date.now()) {
         for (const [agentId, nonces] of this.agentHelloNonces.entries()) {
             pruneNonceWindow(nonces, now);
@@ -247,9 +289,20 @@ export class AgentWebSocketHandler {
             pruneNonceWindow(live.seenNonces, now);
         }
     }
-    /** Number of currently connected agents. */
+    close() {
+        this.lifecycle.close();
+    }
+    /** Number of currently authenticated agents. */
     get connectedAgentCount() {
         return this.agentConnections.size;
     }
+    /** Number of accepted WebSocket connections, authenticated or not. */
+    get openConnectionCount() {
+        return this.lifecycle.openConnectionCount;
+    }
+    /** Number of accepted WebSocket connections still waiting for agent.hello. */
+    get unauthenticatedConnectionCount() {
+        return this.lifecycle.unauthenticatedConnectionCount;
+    }
 }
 //# sourceMappingURL=agent-handler.js.map

package/dist/remote/agent-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-handler.js","sourceRoot":"","sources":["../../src/remote/agent-handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,kBAAkB,EAClB,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AASlF,OAAO,EAAE,sBAAsB,EAAmC,MAAM,gBAAgB,CAAC;AAezF,2EAA2E;AAC3E,MAAM,OAAO,qBAAqB;IAEb;IACA;IACA;IACA;IACA;IACA;IANnB,YACmB,MAA+B,EAC/B,KAAkB,EAClB,gBAA8C,EAC9C,gBAAkD,EAClD,cAA0C,EAC1C,KAA4D;QAL5D,WAAM,GAAN,MAAM,CAAyB;QAC/B,UAAK,GAAL,KAAK,CAAa;QAClB,qBAAgB,GAAhB,gBAAgB,CAA8B;QAC9C,qBAAgB,GAAhB,gBAAgB,CAAkC;QAClD,mBAAc,GAAd,cAAc,CAA4B;QAC1C,UAAK,GAAL,KAAK,CAAuD;IAC5E,CAAC;IAEJ,aAAa,CACX,GAAoB,EACpB,MAAc,EACd,IAA6B,EAC7B,QAAgB;QAEhB,IAAI,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7D,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;YAC5B,KAAK,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC3D,UAAU,CAAC,QAAQ,CAAC;oBAClB,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,sBAAsB;iBAChC,CAAC,CAAC;gBACH,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,UAAsC,EACtC,OAAe;QAEf,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACvB,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC3F,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAChG,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,UAAsC,EACtC,KAAyB;QAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC7D,UAAU,CAAC,QAAQ,CAAC;gBAClB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,uBAAuB;aACjC,CAAC,CAAC;YACH,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,KAA2C,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAClF,IAAI,CAAC,KAAK,CAAC;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,SAAS,EAAE,yBAAyB;gBACpC,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE;aAC1C,CAAC,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC;gBAClB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,4BAA4B;aACtC,CAAC,CAAC;YACH,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,IAAI,cAAc,GAAG,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,SAAS,EAAE,qBAAqB;gBAChC,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC;gBAClB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,gCAAgC;aAC1C,CAAC,CAAC;YACH,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/D,IAAI,kBAAkB,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,CAAC;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,SAAS,EAAE,gCAAgC;gBAC3C,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC;gBAClB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,sDAAsD;aAChE,CAAC,CAAC;YACH,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAC;QACrF,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,SAAS,EAAE,6BAA6B;gBACxC,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC;gBAClB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,oCAAoC;aAC9C,CAAC,CAAC;YACH,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,kBAAkB,CAAC,CAAC;QACvD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACjD,IAAI,kBAAkB,EAAE,CAAC;YACvB,kBAAkB,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxC,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC7C,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,GAAsB;YAChC,GAAG,KAAK;YACR,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,MAAM,EAAE;YACpB,YAAY,EAAE,KAAK,CAAC,IAAI;YACxB,SAAS,EAAE,MAAM,EAAE;SACpB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC/B,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE;YACtB,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjD,IAAI,IAAI,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC7C,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,CAAC,KAAK,CAAC;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,SAAS,EAAE,oBAAoB;gBAC/B,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC;YACT,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,SAAS,EAAE,iBAAiB;YAC5B,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;SAC5E,CAAC,CAAC;QACH,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzF,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,UAAsC,EACtC,MAA4B;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnD,IACE,CAAC,KAAK,EAAE,SAAS;YACjB,CAAC,cAAc,CAAC,MAA4C,EAAE,KAAK,CAAC,SAAS,CAAC,EAC9E,CAAC;YACD,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,CAAC,KAAK,CAAC;gBACT,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;gBAC7B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;gBAC/B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;gBAC3B,SAAS,EAAE,gCAAgC;gBAC3C,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,QAAQ,IAAI,IAAI,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;YAClF,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,CAAC,KAAK,CAAC;gBACT,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;gBAC7B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;gBAC/B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;gBAC3B,SAAS,EAAE,iCAAiC;gBAC5C,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,CACZ,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,EAAE;gBAC1E,IAAI,EAAE,mBAA6C;aACpD,CAAC,CACH,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YACrD,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,CAAC,KAAK,CAAC;gBACT,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;gBAC7B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;gBAC/B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;gBAC3B,SAAS,EAAE,8BAA8B;gBACzC,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,CACZ,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,EAAE;gBAC9D,IAAI,EAAE,wBAAkD;aACzD,CAAC,CACH,CAAC;YACF,OAAO;QACT,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAClD,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,qBAAqB,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACpC,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;YAChE,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;YAClD,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,IAAI,mBAAmB;QACrB,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;IACpC,CAAC;CACF"}
+{"version":3,"file":"agent-handler.js","sourceRoot":"","sources":["../../src/remote/agent-handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,kBAAkB,EAClB,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAyBlF,oGAAoG;AACpG,MAAM,OAAO,qBAAqB;IAIb;IASA;IACA;IACA;IACA;IACA;IAhBF,SAAS,CAA2B;IAErD,YACmB,MAQhB,EACgB,KAAkB,EAClB,gBAA8C,EAC9C,gBAAkD,EAClD,cAA0C,EAC1C,KAA4D;QAb5D,WAAM,GAAN,MAAM,CAQtB;QACgB,UAAK,GAAL,KAAK,CAAa;QAClB,qBAAgB,GAAhB,gBAAgB,CAA8B;QAC9C,qBAAgB,GAAhB,gBAAgB,CAAkC;QAClD,mBAAc,GAAd,cAAc,CAA4B;QAC1C,UAAK,GAAL,KAAK,CAAuD;QAE7E,IAAI,CAAC,SAAS,GAAG,IAAI,wBAAwB,CAC3C,MAAM,EACN;YACE,SAAS,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC;YAChF,oBAAoB,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAClD,IAAI,CAAC,8BAA8B,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC;YAChE,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;SACpD,EACD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,aAAa,CACX,GAAoB,EACpB,MAAc,EACd,IAA6B,EAC7B,QAAgB;QAEhB,IAAI,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,gBAAgB,CAAC,UAA+B,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACxE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAChD,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,UAA+B,EAC/B,OAAe;QAEf,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;YACxF,IAAI,CAAC,KAAK,CAAC;gBACT,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC;gBAC9C,SAAS,EAAE,4BAA4B;gBACvC,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC;gBAClB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,EAAE,sBAAsB,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,oBAAoB,CAAC,UAAU,EAAE,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;IACzF,CAAC;IAEO,oBAAoB,CAC1B,UAA+B,EAC/B,OAAe,EACf,WAAmB;QAEnB,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAChE,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,UAA+B,EAC/B,KAAyB;QAEzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YAC7D,UAAU,CAAC,QAAQ,CAAC;gBAClB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,uBAAuB;aACjC,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,KAA2C,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAClF,IAAI,CAAC,KAAK,CAAC;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,SAAS,EAAE,yBAAyB;gBACpC,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE;aAC1C,CAAC,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC;gBAClB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,4BAA4B;aACtC,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,EAAE,yBAAyB,CAAC,CAAC;YAC5E,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,SAAS,EAAE,qBAAqB;gBAChC,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;YACH,UAAU,CAAC,QAAQ,CAAC;gBAClB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,gCAAgC;aAC1C,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/D,IAAI,kBAAkB,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;YAClD,IAAI,CAAC,oBAAoB,CACvB,UAAU,EACV,KAAK,EACL,sDAAsD,CACvD,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YAC7C,UAAU,CAAC,QAAQ,CAAC;gBAClB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,wBAAwB;gBAC9B,OAAO,EAAE,oCAAoC;aAC9C,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,EAAE,sBAAsB,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC7C,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,yBAAyB,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAsB;YAChC,GAAG,KAAK;YACR,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,MAAM,EAAE;YACpB,YAAY,EAAE,KAAK,CAAC,IAAI;YACxB,SAAS,EAAE,MAAM,EAAE;SACpB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC;YACT,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,SAAS,EAAE,iBAAiB;YAC5B,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;QACH,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzF,CAAC;IAEO,YAAY,CAAC,KAAyB;QAC5C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;IACnF,CAAC;IAEO,oBAAoB,CAC1B,UAA+B,EAC/B,KAAwB,EACxB,OAAe;QAEf,IAAI,CAAC,KAAK,CAAC;YACT,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,SAAS,EAAE,gCAAgC;YAC3C,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;QACH,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC;IAC5E,CAAC;IAEO,gBAAgB,CACtB,KAAwB,EACxB,KAAyB,EACzB,GAAW;QAEX,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAC;QACrF,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,SAAS,EAAE,6BAA6B;gBACxC,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE;aACb,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,kBAAkB,CAAC,CAAC;QACvD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,yBAAyB,CAC/B,kBAA+C,EAC/C,KAAwB;QAExB,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC;YACT,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,SAAS,EAAE,2BAA2B;YACtC,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAC7F,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,UAA+B,EAC/B,MAA4B;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnD,IACE,CAAC,KAAK,EAAE,SAAS;YACjB,CAAC,cAAc,CAAC,MAA4C,EAAE,KAAK,CAAC,SAAS,CAAC,EAC9E,CAAC;YACD,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;YACtF,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,QAAQ,IAAI,IAAI,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;YAClF,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC;YACvF,OAAO,CAAC,MAAM,CACZ,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,EAAE;gBAC1E,IAAI,EAAE,mBAA6C;aACpD,CAAC,CACH,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,8BAA8B,CAAC,CAAC;YACpF,OAAO,CAAC,MAAM,CACZ,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,EAAE;gBAC9D,IAAI,EAAE,wBAAkD;aACzD,CAAC,CACH,CAAC;YACF,OAAO;QACT,CAAC;QACD,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAClD,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAEO,mBAAmB,CAAC,OAAsB,EAAE,QAAgB,EAAE,SAAiB;QACrF,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC;YACT,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;YAC7B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;YAC/B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;YAC3B,SAAS;YACT,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IAEO,8BAA8B,CACpC,OAAe,EACf,UAA+B,EAC/B,SAAiB;QAEjB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACvF,CAAC;IAEO,0BAA0B,CAChC,KAAwB,EACxB,UAA+B,EAC/B,SAAiB;QAEjB,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,IAAI,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC;YACT,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,SAAS,EAAE,oBAAoB;YAC/B,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;SACpC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,YAAY,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACnC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,qBAAqB,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACpC,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;YAChE,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACtB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;YAClD,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,gDAAgD;IAChD,IAAI,mBAAmB;QACrB,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;IACpC,CAAC;IAED,sEAAsE;IACtE,IAAI,mBAAmB;QACrB,OAAO,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC;IAC5C,CAAC;IAED,8EAA8E;IAC9E,IAAI,8BAA8B;QAChC,OAAO,IAAI,CAAC,SAAS,CAAC,8BAA8B,CAAC;IACvD,CAAC;CACF"}

package/dist/remote/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/remote/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAqB/C,wBAAgB,gBAAgB,IAAI,YAAY,CAyC/C"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/remote/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AA+B/C,wBAAgB,gBAAgB,IAAI,YAAY,CAwE/C"}

package/dist/remote/config.js

@@ -13,6 +13,10 @@ function parseInteger(value, fallback) {
     const parsed = Number.parseInt(value, 10);
     return Number.isFinite(parsed) ? parsed : fallback;
 }
+function parseBoundedInteger(value, fallback, minimum, maximum) {
+    const parsed = parseInteger(value, fallback);
+    return parsed >= minimum && parsed <= maximum ? parsed : fallback;
+}
 function stripTrailingSlash(value) {
     return value.replace(/\/+$/u, "");
 }
@@ -20,6 +24,11 @@ export function loadRemoteConfig() {
     const publicBaseUrl = stripTrailingSlash(process.env.PUBLIC_BASE_URL ??
         process.env.SSHAUTOMATOR_PUBLIC_BASE_URL ??
         "http://localhost:3000");
+    const agentHeartbeatIntervalMs = parseBoundedInteger(process.env.AGENT_WS_HEARTBEAT_INTERVAL_MS, 30_000, 1_000, 300_000);
+    const requestedAgentIdleTimeoutMs = parseBoundedInteger(process.env.AGENT_WS_IDLE_TIMEOUT_MS, 90_000, 2_000, 900_000);
+    const agentIdleTimeoutMs = requestedAgentIdleTimeoutMs >= agentHeartbeatIntervalMs * 2
+        ? requestedAgentIdleTimeoutMs
+        : Math.max(90_000, agentHeartbeatIntervalMs * 2);
     return {
         enabled: parseBoolean(process.env.SSH_MCP_REMOTE_AGENT_CONTROL_PLANE ??
             process.env.SSHAUTOMATOR_REMOTE_AGENT_CONTROL_PLANE, false),
@@ -44,6 +53,11 @@ export function loadRemoteConfig() {
         controlPlaneSigningKeyPath: process.env.CONTROL_PLANE_SIGNING_KEY_PATH ?? path.join("data", "control-plane-ed25519.json"),
         jwtSigningKeyPath: process.env.JWT_SIGNING_KEY_PATH ?? path.join("data", "jwt-ed25519.json"),
         agentWsPath: process.env.AGENT_WS_PATH ?? "/api/agents/connect",
+        agentHelloTimeoutMs: parseBoundedInteger(process.env.AGENT_WS_HELLO_TIMEOUT_MS, 10_000, 1_000, 60_000),
+        agentHeartbeatIntervalMs,
+        agentIdleTimeoutMs,
+        maxAgentConnections: parseBoundedInteger(process.env.AGENT_WS_MAX_CONNECTIONS, 128, 1, 10_000),
+        maxAgentConnectionsPerAgent: parseBoundedInteger(process.env.AGENT_WS_MAX_CONNECTIONS_PER_AGENT, 2, 1, 16),
         maxActionTimeoutSeconds: parseInteger(process.env.MAX_ACTION_TIMEOUT_SECONDS, 120),
         maxOutputBytes: parseInteger(process.env.MAX_OUTPUT_BYTES, 200_000),
         maxOAuthClients: parseInteger(process.env.OAUTH_DCR_MAX_CLIENTS, 100),

package/dist/remote/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/remote/config.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,SAAS,YAAY,CAAC,KAAyB,EAAE,QAAiB;IAChE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,QAAgB;IAC/D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACrD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,aAAa,GAAG,kBAAkB,CACtC,OAAO,CAAC,GAAG,CAAC,eAAe;QACzB,OAAO,CAAC,GAAG,CAAC,4BAA4B;QACxC,uBAAuB,CAC1B,CAAC;IACF,OAAO;QACL,OAAO,EAAE,YAAY,CACnB,OAAO,CAAC,GAAG,CAAC,kCAAkC;YAC5C,OAAO,CAAC,GAAG,CAAC,uCAAuC,EACrD,KAAK,CACN;QACD,aAAa;QACb,cAAc,EACZ,OAAO,CAAC,GAAG,CAAC,gBAAgB;YAC5B,OAAO,CAAC,GAAG,CAAC,6BAA6B;YACzC,GAAG,aAAa,MAAM;QACxB,WAAW,EACT,OAAO,CAAC,GAAG,CAAC,YAAY;YACxB,OAAO,CAAC,GAAG,CAAC,yBAAyB;YACrC,6BAA6B;QAC/B,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5C,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QACpD,iBAAiB,EACf,OAAO,CAAC,GAAG,CAAC,mBAAmB;YAC/B,OAAO,CAAC,GAAG,CAAC,gCAAgC;YAC5C,GAAG,aAAa,wBAAwB;QAC1C,aAAa,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC;QACpE,mBAAmB,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QACtE,gBAAgB,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAChE,qBAAqB,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,GAAG,CAAC;QAC9E,kBAAkB,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,CAAC;QACxE,yBAAyB,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,GAAG,CAAC;QACtF,0BAA0B,EACxB,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,4BAA4B,CAAC;QAC/F,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC;QAC5F,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,qBAAqB;QAC/D,uBAAuB,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,GAAG,CAAC;QAClF,cAAc,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC;QACnE,eAAe,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,CAAC;KACtE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/remote/config.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,SAAS,YAAY,CAAC,KAAyB,EAAE,QAAiB;IAChE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,QAAgB;IAC/D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACrD,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAyB,EACzB,QAAgB,EAChB,OAAe,EACf,OAAe;IAEf,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7C,OAAO,MAAM,IAAI,OAAO,IAAI,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,aAAa,GAAG,kBAAkB,CACtC,OAAO,CAAC,GAAG,CAAC,eAAe;QACzB,OAAO,CAAC,GAAG,CAAC,4BAA4B;QACxC,uBAAuB,CAC1B,CAAC;IACF,MAAM,wBAAwB,GAAG,mBAAmB,CAClD,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAC1C,MAAM,EACN,KAAK,EACL,OAAO,CACR,CAAC;IACF,MAAM,2BAA2B,GAAG,mBAAmB,CACrD,OAAO,CAAC,GAAG,CAAC,wBAAwB,EACpC,MAAM,EACN,KAAK,EACL,OAAO,CACR,CAAC;IACF,MAAM,kBAAkB,GACtB,2BAA2B,IAAI,wBAAwB,GAAG,CAAC;QACzD,CAAC,CAAC,2BAA2B;QAC7B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,wBAAwB,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO;QACL,OAAO,EAAE,YAAY,CACnB,OAAO,CAAC,GAAG,CAAC,kCAAkC;YAC5C,OAAO,CAAC,GAAG,CAAC,uCAAuC,EACrD,KAAK,CACN;QACD,aAAa;QACb,cAAc,EACZ,OAAO,CAAC,GAAG,CAAC,gBAAgB;YAC5B,OAAO,CAAC,GAAG,CAAC,6BAA6B;YACzC,GAAG,aAAa,MAAM;QACxB,WAAW,EACT,OAAO,CAAC,GAAG,CAAC,YAAY;YACxB,OAAO,CAAC,GAAG,CAAC,yBAAyB;YACrC,6BAA6B;QAC/B,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5C,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB;QACpD,iBAAiB,EACf,OAAO,CAAC,GAAG,CAAC,mBAAmB;YAC/B,OAAO,CAAC,GAAG,CAAC,gCAAgC;YAC5C,GAAG,aAAa,wBAAwB;QAC1C,aAAa,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC;QACpE,mBAAmB,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QACtE,gBAAgB,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAChE,qBAAqB,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,GAAG,CAAC;QAC9E,kBAAkB,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,CAAC;QACxE,yBAAyB,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,GAAG,CAAC;QACtF,0BAA0B,EACxB,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,4BAA4B,CAAC;QAC/F,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC;QAC5F,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,qBAAqB;QAC/D,mBAAmB,EAAE,mBAAmB,CACtC,OAAO,CAAC,GAAG,CAAC,yBAAyB,EACrC,MAAM,EACN,KAAK,EACL,MAAM,CACP;QACD,wBAAwB;QACxB,kBAAkB;QAClB,mBAAmB,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC;QAC9F,2BAA2B,EAAE,mBAAmB,CAC9C,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAC9C,CAAC,EACD,CAAC,EACD,EAAE,CACH;QACD,uBAAuB,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,GAAG,CAAC;QAClF,cAAc,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC;QACnE,eAAe,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,CAAC;KACtE,CAAC;AACJ,CAAC"}

package/dist/remote/control-plane.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../../src/remote/control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAWL,KAAK,UAAU,EAChB,MAAM,aAAa,CAAC;AAkBrB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAyB,MAAM,oBAAoB,CAAC;AACzE,OAAO,EACL,qBAAqB,EAGtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAMV,YAAY,EAKb,MAAM,YAAY,CAAC;AAKpB,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAuC;IAC7E,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAsC;IACvE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0C;IAC3E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAiB;IACjD,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAa;IACjD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;gBAEjC,MAAM,eAAqB;IAuBjC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,KAAK,IAAI,IAAI;IAgBb,OAAO,CAAC,qBAAqB;IAKvB,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAuD/F,aAAa,CACX,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,EAC7B,QAAQ,EAAE,MAAM,GACf,OAAO;YAII,SAAS;YAwFT,SAAS;YAsDT,iBAAiB;YAsDjB,YAAY;IAiB1B,OAAO,CAAC,gBAAgB;YAWV,cAAc;IA4D5B,OAAO,CAAC,qBAAqB;IAmD7B,OAAO,CAAC,cAAc;IA8BtB,OAAO,CAAC,iBAAiB;IAsDzB,OAAO,CAAC,WAAW;YAkBL,cAAc;IA4H5B,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,KAAK;IASb,OAAO,CAAC,iBAAiB;CAM1B;AAED,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAI5E;AAED,wBAAgB,uBAAuB,CAAC,mBAAmB,EAAE,UAAU,GAAG,MAAM,CAE/E"}
+{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../../src/remote/control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAWL,KAAK,UAAU,EAChB,MAAM,aAAa,CAAC;AAkBrB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAyB,MAAM,oBAAoB,CAAC;AACzE,OAAO,EACL,qBAAqB,EAGtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAMV,YAAY,EAKb,MAAM,YAAY,CAAC;AAKpB,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAuC;IAC7E,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAsC;IACvE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0C;IAC3E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAiB;IACjD,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAa;IACjD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;gBAEjC,MAAM,eAAqB;IAuBjC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,KAAK,IAAI,IAAI;IAiBb,OAAO,CAAC,qBAAqB;IAKvB,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA6D/F,aAAa,CACX,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,EAC7B,QAAQ,EAAE,MAAM,GACf,OAAO;YAII,SAAS;YAwFT,SAAS;YA+DT,iBAAiB;YAsDjB,YAAY;IAiB1B,OAAO,CAAC,gBAAgB;YAWV,cAAc;IA4D5B,OAAO,CAAC,qBAAqB;IAmD7B,OAAO,CAAC,cAAc;IA8BtB,OAAO,CAAC,iBAAiB;IAsDzB,OAAO,CAAC,WAAW;YAkBL,cAAc;IA4H5B,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,KAAK;IASb,OAAO,CAAC,iBAAiB;CAM1B;AAED,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAI5E;AAED,wBAAgB,uBAAuB,CAAC,mBAAmB,EAAE,UAAU,GAAG,MAAM,CAE/E"}

package/dist/remote/control-plane.js

@@ -38,6 +38,7 @@ export class RemoteControlPlane {
     }
     close() {
         clearInterval(this.cleanupInterval);
+        this.agentHandler.close();
         for (const pending of this.pendingActions.values()) {
             clearTimeout(pending.timeout);
             pending.reject(new Error("Control plane shutting down"));
@@ -72,6 +73,10 @@ export class RemoteControlPlane {
             await this.oauth.handleAuthorize(req, res);
             return true;
         }
+        if (pathname === "/oauth/approve" && req.method === "POST") {
+            await this.oauth.handleApprove(req, res);
+            return true;
+        }
         if (pathname === "/oauth/callback/github" && req.method === "GET") {
             await this.oauth.handleGitHubCallback(req, res);
             return true;
@@ -90,6 +95,8 @@ export class RemoteControlPlane {
                 service: "ssh-mcp-pro",
                 control_plane: true,
                 agents_online: this.agentHandler.connectedAgentCount,
+                agent_connections_open: this.agentHandler.openConnectionCount,
+                agent_connections_unauthenticated: this.agentHandler.unauthenticatedConnectionCount,
             });
             return true;
         }
@@ -211,6 +218,9 @@ export class RemoteControlPlane {
             return;
         }
         if (pathname === "/api/agents" && req.method === "GET") {
+            if (!hasCapability(principal.capabilities, "agents.read")) {
+                throw safeError("INVALID_SCOPE", "agents:read scope is required", 403);
+            }
             jsonResponse(res, 200, {
                 agents: this.store.listAgents(principal.userId).map(sanitizeAgent),
             });
@@ -223,6 +233,9 @@ export class RemoteControlPlane {
                 throw safeError("AGENT_NOT_FOUND", "Agent not found", 404);
             }
             if (!agentMatch[2] && req.method === "GET") {
+                if (!hasCapability(principal.capabilities, "agents.read")) {
+                    throw safeError("INVALID_SCOPE", "agents:read scope is required", 403);
+                }
                 jsonResponse(res, 200, { agent: sanitizeAgent(agent) });
                 return;
             }
@@ -239,6 +252,9 @@ export class RemoteControlPlane {
             }
         }
         if (pathname === "/api/audit" && req.method === "GET") {
+            if (!hasCapability(principal.capabilities, "agents.admin")) {
+                throw safeError("INVALID_SCOPE", "agents:admin scope is required", 403);
+            }
             const url = new URL(req.url ?? "/api/audit", this.config.publicBaseUrl);
             const limit = Number(url.searchParams.get("limit") ?? 50);
             jsonResponse(res, 200, { events: this.store.listAudit(principal.userId, undefined, limit) });