synabun 1.3.0 → 2.0.0-beta

package/mcp-server/dist/services/identity.js

@@ -0,0 +1,241 @@
+/**
+ * Per-caller identity for browser session/tab isolation.
+ *
+ * Over the HTTP transport, every MCP request runs inside the ONE Neural
+ * Interface process — module-level state in neural-interface.ts would be
+ * shared by every connected Claude Code instance (CLI windows, sidepanel
+ * chats, loops), which is exactly how separately-launched automations ended
+ * up competing for the same browser tab. This module gives each caller its
+ * own identity object, derived per-request from:
+ *
+ *   1. X-Synabun-Terminal / X-Synabun-Browser-Session / X-Synabun-Browser-Tab
+ *      headers (loops, scheduled loops, sidepanel — injected at launch), or
+ *   2. the stateful Mcp-Session-Id (plain CLI windows — unique per Claude
+ *      Code process with zero client configuration), or
+ *   3. a per-process stdio singleton whose pins read live process.env —
+ *      bit-identical to the historical behavior for stdio MCP children
+ *      (codex/opencode loops, automation-window agents).
+ *
+ * The HTTP transport enters the AsyncLocalStorage context around every
+ * transport.handleRequest call; stdio never enters it, so getIdentity()
+ * falling back to the stdio singleton IS the backward-compat switch.
+ */
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { randomUUID } from 'node:crypto';
+const emptyState = () => ({
+    affinitySessionId: null,
+    interactiveSessionId: null,
+    interactiveTabId: null,
+    recoveredSessionId: null,
+    recoveredTabId: null,
+    ancestorPinnedSession: null,
+    ancestorPinnedTab: null,
+    ancestorPinnedTerminal: null,
+    ancestorAttempts: 0,
+});
+const als = new AsyncLocalStorage();
+export function callerMemoryContext() {
+    return als.getStore()?.memoryContext || (httpMode ? {} : {
+        project: process.env.SYNABUN_PROJECT,
+        session: process.env.SYNABUN_TERMINAL_SESSION,
+        generation: process.env.SYNABUN_CONTEXT_GENERATION,
+    });
+}
+const identities = new Map();
+// Set by the HTTP transport at mount. Once true, a missing ALS store inside a
+// tool handler is a context-propagation bug: degrade to an EPHEMERAL identity
+// (costs an extra tab) rather than the shared stdio singleton (cross-talk).
+let httpMode = false;
+export function markHttpMode() { httpMode = true; }
+// Lazy stdio singleton — the per-process identity for stdio transports.
+// clientId is minted once per process (the old INTERACTIVE_CLIENT_ID); pins
+// are read live from process.env by effectivePins(), preserving the exact
+// historical env-pin semantics.
+let _stdioIdentity = null;
+function stdioIdentity() {
+    if (!_stdioIdentity) {
+        _stdioIdentity = {
+            key: 'stdio',
+            source: 'stdio',
+            clientId: randomUUID(),
+            pins: { terminalSessionId: null, browserSessionId: null, browserTabId: null },
+            state: emptyState(),
+            lastSeen: Date.now(),
+        };
+    }
+    return _stdioIdentity;
+}
+/** The stdio identity if it was ever created (for exit-hook tab release). */
+export function peekStdioIdentity() {
+    return _stdioIdentity;
+}
+export function isHttpMode() { return httpMode; }
+export function runWithIdentity(identity, fn) {
+    return als.run(identity, fn);
+}
+export function getIdentity() {
+    const store = als.getStore();
+    if (store)
+        return store;
+    if (httpMode) {
+        // Propagation bug guard: never hand the shared stdio identity to an HTTP
+        // caller. An ephemeral identity wastes a tab at worst — never cross-talk.
+        console.error('[identity] missing ALS context in HTTP mode — using ephemeral identity (propagation bug?)');
+        const key = `ephemeral-${randomUUID()}`;
+        return {
+            key,
+            source: 'mcp-session',
+            clientId: key,
+            pins: { terminalSessionId: null, browserSessionId: null, browserTabId: null },
+            state: emptyState(),
+            lastSeen: Date.now(),
+        };
+    }
+    return stdioIdentity();
+}
+/** Pins must look like the ids we mint (hex/uuid-ish). Rejects empty strings
+ *  and unexpanded template junk like "${SYNABUN_TERMINAL_SESSION}". */
+export function sanitizePin(v) {
+    if (!v)
+        return null;
+    return /^[A-Za-z0-9_-]{1,128}$/.test(v) ? v : null;
+}
+/** Only known roles are accepted; anything else (empty, template junk,
+ *  invented roles) is treated as "no role" so gating fails closed. */
+export function sanitizeRole(v) {
+    return typeof v === 'string' && v.trim().toLowerCase() === 'assistant' ? 'assistant' : null;
+}
+/** Desktop grants look exactly like the tokens the Neural Interface mints. */
+export function sanitizeDesktopGrant(v) {
+    return typeof v === 'string' && /^sbd_[A-Za-z0-9_-]{43}$/.test(v.trim()) ? v.trim() : null;
+}
+/**
+ * Computer-use grant of the current caller: the ALS identity's grant over HTTP
+ * (X-Synabun-Desktop-Grant on every request), SYNABUN_DESKTOP_GRANT for stdio
+ * children. Never the host's own env for an unidentified HTTP caller.
+ */
+export function callerDesktopGrant() {
+    const store = als.getStore();
+    if (store)
+        return store.desktopGrant ?? null;
+    if (httpMode)
+        return null;
+    return sanitizeDesktopGrant(process.env.SYNABUN_DESKTOP_GRANT);
+}
+/**
+ * Role of the current caller: the ALS identity's role over HTTP (derived from
+ * X-Synabun-Role on every request), or SYNABUN_ROLE for stdio children —
+ * Codex/OpenCode assistant brains pass the role to their MCP child via env.
+ * In HTTP mode a missing ALS store is a propagation bug, so the host
+ * process's own env must never grant a role to an unidentified caller.
+ */
+export function callerRole() {
+    const store = als.getStore();
+    if (store)
+        return store.role ?? null;
+    if (httpMode)
+        return null;
+    return sanitizeRole(process.env.SYNABUN_ROLE);
+}
+/** Create-or-touch the identity for an HTTP caller. */
+export function obtainIdentity(key, opts) {
+    let id = identities.get(key);
+    if (!id) {
+        id = {
+            key,
+            source: opts.source,
+            clientId: key,
+            pins: {
+                terminalSessionId: opts.pins?.terminalSessionId ?? null,
+                browserSessionId: opts.pins?.browserSessionId ?? null,
+                browserTabId: opts.pins?.browserTabId ?? null,
+            },
+            state: emptyState(),
+            lastSeen: Date.now(),
+        };
+        if (opts.role)
+            id.role = opts.role;
+        if (opts.desktopGrant)
+            id.desktopGrant = opts.desktopGrant;
+        identities.set(key, id);
+    }
+    else {
+        // Refresh pins on every request — a loop relaunch may rebind its headers.
+        if (opts.pins?.terminalSessionId !== undefined)
+            id.pins.terminalSessionId = opts.pins.terminalSessionId;
+        if (opts.pins?.browserSessionId !== undefined)
+            id.pins.browserSessionId = opts.pins.browserSessionId;
+        if (opts.pins?.browserTabId !== undefined)
+            id.pins.browserTabId = opts.pins.browserTabId;
+        // The role is per-request: a request without the header carries no role,
+        // so a stale grant can never outlive the headers that justified it.
+        if (opts.role !== undefined)
+            id.role = opts.role ?? undefined;
+        if (opts.desktopGrant !== undefined)
+            id.desktopGrant = opts.desktopGrant ?? undefined;
+        id.lastSeen = Date.now();
+    }
+    return id;
+}
+/** Pin resolution: stdio reads live env (historical behavior); HTTP identities
+ *  carry pins parsed from their launch headers. */
+export function effectivePins(id) {
+    if (id.source === 'stdio') {
+        return {
+            terminalSessionId: process.env.SYNABUN_TERMINAL_SESSION || null,
+            browserSessionId: process.env.SYNABUN_BROWSER_SESSION || null,
+            browserTabId: process.env.SYNABUN_BROWSER_TAB || null,
+        };
+    }
+    return id.pins;
+}
+/** The X-Synabun-Terminal value for Neural Interface requests — the server
+ *  routes this caller's tab-less browser calls via _tabOwners[terminalId].
+ *  Analogue of the old currentTerminalId(): env/header pin → resolved
+ *  ancestor terminal → this identity's own client id. */
+export function terminalIdFor(id) {
+    return effectivePins(id).terminalSessionId || id.state.ancestorPinnedTerminal || id.clientId;
+}
+let releaseHook = null;
+export function setReleaseHook(fn) { releaseHook = fn; }
+/**
+ * Drop an HTTP identity, releasing its acquired tab if it ever called
+ * /api/browser/acquire. Loop tabs are NEVER released here: a loop identity's
+ * tab is owned server-side under its terminalSessionId and reaped by
+ * /api/loop/stop — interactiveSessionId is only set by acquireInteractive.
+ */
+export function releaseIdentity(key) {
+    const id = identities.get(key);
+    if (!id)
+        return;
+    if (id.state.interactiveSessionId && releaseHook) {
+        try {
+            releaseHook(id);
+        }
+        catch { /* best-effort */ }
+    }
+    identities.delete(key);
+}
+export function identityCount() { return identities.size; }
+const IDENTITY_TTL_MS = parseInt(process.env.SYNABUN_IDENTITY_TTL_MS || '', 10) || 2 * 60 * 60 * 1000;
+let sweeperStarted = false;
+export function startIdentitySweeper() {
+    if (sweeperStarted)
+        return;
+    sweeperStarted = true;
+    const interval = setInterval(() => {
+        const now = Date.now();
+        let evicted = 0;
+        for (const [key, id] of identities) {
+            if (now - id.lastSeen > IDENTITY_TTL_MS) {
+                releaseIdentity(key);
+                evicted++;
+            }
+        }
+        if (evicted > 0) {
+            console.error(`[identity] evicted ${evicted} idle identities (${identities.size} remain)`);
+        }
+    }, 60_000);
+    interval.unref();
+}
+//# sourceMappingURL=identity.js.map

package/mcp-server/dist/services/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/services/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA2CzC,MAAM,UAAU,GAAG,GAAkB,EAAE,CAAC,CAAC;IACvC,iBAAiB,EAAE,IAAI;IACvB,oBAAoB,EAAE,IAAI;IAC1B,gBAAgB,EAAE,IAAI;IACtB,kBAAkB,EAAE,IAAI;IACxB,cAAc,EAAE,IAAI;IACpB,qBAAqB,EAAE,IAAI;IAC3B,iBAAiB,EAAE,IAAI;IACvB,sBAAsB,EAAE,IAAI;IAC5B,gBAAgB,EAAE,CAAC;CACpB,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG,IAAI,iBAAiB,EAAkB,CAAC;AACpD,MAAM,UAAU,mBAAmB;IACjC,OAAO,GAAG,CAAC,QAAQ,EAAE,EAAE,aAAa,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;QACpC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB;QAC7C,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B;KACnD,CAAC,CAAC;AACL,CAAC;AACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;AAErD,8EAA8E;AAC9E,8EAA8E;AAC9E,4EAA4E;AAC5E,IAAI,QAAQ,GAAG,KAAK,CAAC;AACrB,MAAM,UAAU,YAAY,KAAW,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC;AAEzD,wEAAwE;AACxE,4EAA4E;AAC5E,0EAA0E;AAC1E,gCAAgC;AAChC,IAAI,cAAc,GAA0B,IAAI,CAAC;AACjD,SAAS,aAAa;IACpB,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG;YACf,GAAG,EAAE,OAAO;YACZ,MAAM,EAAE,OAAO;YACf,QAAQ,EAAE,UAAU,EAAE;YACtB,IAAI,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;YAC7E,KAAK,EAAE,UAAU,EAAE;YACnB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB;IAC/B,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,UAAU,KAAc,OAAO,QAAQ,CAAC,CAAC,CAAC;AAE1D,MAAM,UAAU,eAAe,CAAI,QAAwB,EAAE,EAAW;IACtE,OAAO,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC7B,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,QAAQ,EAAE,CAAC;QACb,yEAAyE;QACzE,0EAA0E;QAC1E,OAAO,CAAC,KAAK,CAAC,2FAA2F,CAAC,CAAC;QAC3G,MAAM,GAAG,GAAG,aAAa,UAAU,EAAE,EAAE,CAAC;QACxC,OAAO;YACL,GAAG;YACH,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,GAAG;YACb,IAAI,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;YAC7E,KAAK,EAAE,UAAU,EAAE;YACnB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,EAAE,CAAC;AACzB,CAAC;AAED;uEACuE;AACvE,MAAM,UAAU,WAAW,CAAC,CAA4B;IACtD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED;sEACsE;AACtE,MAAM,UAAU,YAAY,CAAC,CAA4B;IACvD,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9F,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAAC,CAA4B;IAC/D,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC7B,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC;IAC7C,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC7B,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC;IACrC,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAChD,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,cAAc,CAC5B,GAAW,EACX,IAA0H;IAE1H,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,EAAE,GAAG;YACH,GAAG;YACH,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,GAAG;YACb,IAAI,EAAE;gBACJ,iBAAiB,EAAE,IAAI,CAAC,IAAI,EAAE,iBAAiB,IAAI,IAAI;gBACvD,gBAAgB,EAAE,IAAI,CAAC,IAAI,EAAE,gBAAgB,IAAI,IAAI;gBACrD,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,IAAI,IAAI;aAC9C;YACD,KAAK,EAAE,UAAU,EAAE;YACnB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC;QACF,IAAI,IAAI,CAAC,IAAI;YAAE,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACnC,IAAI,IAAI,CAAC,YAAY;YAAE,EAAE,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QAC3D,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,0EAA0E;QAC1E,IAAI,IAAI,CAAC,IAAI,EAAE,iBAAiB,KAAK,SAAS;YAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC;QACxG,IAAI,IAAI,CAAC,IAAI,EAAE,gBAAgB,KAAK,SAAS;YAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACrG,IAAI,IAAI,CAAC,IAAI,EAAE,YAAY,KAAK,SAAS;YAAE,EAAE,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;QACzF,yEAAyE;QACzE,oEAAoE;QACpE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC;QAC9D,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;YAAE,EAAE,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,SAAS,CAAC;QACtF,EAAE,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;mDACmD;AACnD,MAAM,UAAU,aAAa,CAAC,EAAkB;IAC9C,IAAI,EAAE,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO;YACL,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,IAAI;YAC/D,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,IAAI;YAC7D,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI;SACtD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC,IAAI,CAAC;AACjB,CAAC;AAED;;;yDAGyD;AACzD,MAAM,UAAU,aAAa,CAAC,EAAkB;IAC9C,OAAO,aAAa,CAAC,EAAE,CAAC,CAAC,iBAAiB,IAAI,EAAE,CAAC,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,QAAQ,CAAC;AAC/F,CAAC;AAMD,IAAI,WAAW,GAAuB,IAAI,CAAC;AAC3C,MAAM,UAAU,cAAc,CAAC,EAAe,IAAU,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE;QAAE,OAAO;IAChB,IAAI,EAAE,CAAC,KAAK,CAAC,oBAAoB,IAAI,WAAW,EAAE,CAAC;QACjD,IAAI,CAAC;YAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACtD,CAAC;IACD,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,aAAa,KAAa,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AAEnE,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtG,IAAI,cAAc,GAAG,KAAK,CAAC;AAC3B,MAAM,UAAU,oBAAoB;IAClC,IAAI,cAAc;QAAE,OAAO;IAC3B,cAAc,GAAG,IAAI,CAAC;IACtB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,GAAG,GAAG,EAAE,CAAC,QAAQ,GAAG,eAAe,EAAE,CAAC;gBACxC,eAAe,CAAC,GAAG,CAAC,CAAC;gBACrB,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,sBAAsB,OAAO,qBAAqB,UAAU,CAAC,IAAI,UAAU,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;IACX,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC"}

package/mcp-server/dist/services/local-embeddings.d.ts

@@ -0,0 +1,2 @@
+export * from './embedding-service.js';
+//# sourceMappingURL=local-embeddings.d.ts.map

package/mcp-server/dist/services/local-embeddings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-embeddings.d.ts","sourceRoot":"","sources":["../../src/services/local-embeddings.ts"],"names":[],"mappings":"AACA,cAAc,wBAAwB,CAAC"}

package/mcp-server/dist/services/local-embeddings.js

@@ -0,0 +1,3 @@
+// Compatibility entry point; all transports share the worker and bounded cache.
+export * from './embedding-service.js';
+//# sourceMappingURL=local-embeddings.js.map

package/mcp-server/dist/services/local-embeddings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-embeddings.js","sourceRoot":"","sources":["../../src/services/local-embeddings.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,cAAc,wBAAwB,CAAC"}

package/mcp-server/dist/services/memory-client.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+/** Standard MCP roots are optional; clients without roots keep existing calls. */
+export declare function attachMemoryClient(server: McpServer): void;
+//# sourceMappingURL=memory-client.d.ts.map

package/mcp-server/dist/services/memory-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-client.d.ts","sourceRoot":"","sources":["../../src/services/memory-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAMzE,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,QAenD"}

package/mcp-server/dist/services/memory-client.js

@@ -0,0 +1,27 @@
+import { RootsListChangedNotificationSchema } from '@modelcontextprotocol/sdk/types.js';
+import { fileURLToPath } from 'node:url';
+import { getIdentity } from './identity.js';
+import { detectProject } from '../config.js';
+/** Standard MCP roots are optional; clients without roots keep existing calls. */
+export function attachMemoryClient(server) {
+    const refresh = async () => {
+        if (!server.server.getClientCapabilities()?.roots)
+            return;
+        const identity = getIdentity();
+        if (identity.memoryContext?.project && identity.memoryContext.generation !== 'mcp-roots')
+            return;
+        try {
+            const { roots } = await server.server.listRoots({}, { timeout: 1500 });
+            if (roots.length === 1 && roots[0].uri.startsWith('file:')) {
+                identity.memoryContext = { ...identity.memoryContext, project: detectProject(fileURLToPath(roots[0].uri)), generation: 'mcp-roots' };
+            }
+            else if (identity.memoryContext)
+                delete identity.memoryContext.project;
+        }
+        catch { /* Optional capability; explicit project always remains available. */ }
+    };
+    const previous = server.server.oninitialized;
+    server.server.oninitialized = () => { previous?.(); refresh().catch(() => { }); };
+    server.server.setNotificationHandler(RootsListChangedNotificationSchema, refresh);
+}
+//# sourceMappingURL=memory-client.js.map

package/mcp-server/dist/services/memory-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-client.js","sourceRoot":"","sources":["../../src/services/memory-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kCAAkC,EAAE,MAAM,oCAAoC,CAAC;AACxF,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,MAAiB;IAClD,MAAM,OAAO,GAAC,KAAK,IAAE,EAAE;QACrB,IAAG,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,EAAE,KAAK;YAAC,OAAO;QACxD,MAAM,QAAQ,GAAC,WAAW,EAAE,CAAC;QAC7B,IAAG,QAAQ,CAAC,aAAa,EAAE,OAAO,IAAI,QAAQ,CAAC,aAAa,CAAC,UAAU,KAAK,WAAW;YAAC,OAAO;QAC/F,IAAI,CAAC;YACH,MAAM,EAAC,KAAK,EAAC,GAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAC,OAAO,EAAC,IAAI,EAAC,CAAC,CAAC;YAChE,IAAG,KAAK,CAAC,MAAM,KAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxD,QAAQ,CAAC,aAAa,GAAC,EAAC,GAAG,QAAQ,CAAC,aAAa,EAAC,OAAO,EAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAC,UAAU,EAAC,WAAW,EAAC,CAAC;YAC/H,CAAC;iBAAM,IAAG,QAAQ,CAAC,aAAa;gBAAE,OAAO,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC,CAAC,qEAAqE,CAAC,CAAC;IACnF,CAAC,CAAC;IACF,MAAM,QAAQ,GAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;IAC3C,MAAM,CAAC,MAAM,CAAC,aAAa,GAAC,GAAE,EAAE,GAAC,QAAQ,EAAE,EAAE,CAAC,CAAA,OAAO,EAAE,CAAC,KAAK,CAAC,GAAE,EAAE,GAAC,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC;IACxE,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,kCAAkC,EAAC,OAAO,CAAC,CAAC;AACnF,CAAC"}

package/mcp-server/dist/services/memory-judge-backfill.d.ts

@@ -0,0 +1,135 @@
+/**
+ * Backfill: judge the memories that were indexed before judgments existed.
+ *
+ * Migration v4 added the judged columns after every `index` job had already
+ * completed, so only memories written since carry a judgment. This runner
+ * enqueues a distinct `judge` job per unjudged memory and works through them
+ * with its own pacing — a bounded batch per tick, only while nothing
+ * interactive is waiting — using the vector already stored on the row rather
+ * than re-embedding 24k memories.
+ *
+ * Rails: a dry-run estimate before anything is enqueued, an explicit start,
+ * pause/resume/cancel, exponential backoff on failures, a lease so only one
+ * Neural Interface drives it, and progress persisted in `typesafe_config`
+ * so a restart resumes where it stopped. Judgments happen before the write
+ * transaction and the revision is re-checked inside it, exactly like the
+ * `index` job.
+ */
+import type { DatabaseSync } from 'node:sqlite';
+import { type AppliedJudgments } from './memory-maintenance.js';
+import { type BackfillState, type BackfillEstimate } from './typesafe-config.js';
+export interface BackfillJobCounts {
+    pending: number;
+    running: number;
+    complete: number;
+    failed: number;
+}
+export interface BackfillStatus extends BackfillState {
+    jobs: BackfillJobCounts;
+    coverage: {
+        judged: number;
+        total: number;
+    };
+    retryAfterMs: number;
+    owner: string;
+    lease: {
+        owner: string;
+        until: string;
+    } | null;
+}
+/** Live memories with a judgment / all live memories. */
+export declare function judgedCoverage(): {
+    judged: number;
+    total: number;
+};
+export declare function countUnjudged(project?: string | null): number;
+/** One `judge` job per unjudged live memory (newest first). Re-arms a stale non-running job; never touches a running one. */
+export declare function enqueueJudgeBackfill(options?: {
+    limit?: number | null;
+    project?: string | null;
+}): {
+    enqueued: number;
+    total: number;
+};
+/**
+ * Tokens and cost from what is actually stored: content length for the
+ * memory request, a local neighbour sample for how often a relations
+ * request follows. Bench actuals replace the per-memory formula once a bench
+ * has run. Nothing here talks to the API.
+ */
+export declare function estimateJudgeBackfill(options?: {
+    limit?: number | null;
+    project?: string | null;
+    sampleSize?: number;
+}): BackfillEstimate;
+export declare function backfillStatus(): BackfillStatus;
+export type BackfillAction = 'estimate' | 'start' | 'pause' | 'resume' | 'cancel';
+/**
+ * Drive the state machine. `start` is the only action that costs money and
+ * it needs the API reachable; it enqueues, snapshots the estimate it was
+ * confirmed against, and zeroes the counters.
+ */
+export declare function controlBackfill(action: BackfillAction, options?: {
+    limit?: number | null;
+    project?: string | null;
+    estimate?: BackfillEstimate | null;
+}): BackfillStatus;
+export type JudgeJobOutcome = {
+    outcome: 'judged';
+    applied: AppliedJudgments;
+    usage: {
+        input: number;
+        output: number;
+        ms: number;
+    };
+} | {
+    outcome: 'unavailable' | 'skipped' | 'stale' | 'deferred';
+    usage: {
+        input: number;
+        output: number;
+        ms: number;
+    };
+};
+/**
+ * Judge one memory from its stored vector. Reads and both judgments happen
+ * before BEGIN IMMEDIATE; the revision re-check inside discards anything
+ * judged against content that changed meanwhile. Never re-embeds.
+ */
+export declare function runJudgeJob(d: DatabaseSync, job: Record<string, unknown>): Promise<JudgeJobOutcome>;
+/** Forget in-memory pacing state (start/resume, and tests). Persisted counters are untouched. */
+export declare function resetJudgeBackfillRunner(): void;
+declare function flushProgress(force?: boolean): void;
+export interface TickResult {
+    claimed: number;
+    outcomes: Record<string, number>;
+    reason?: string;
+}
+/**
+ * One bounded batch. Returns without claiming when the backfill is not
+ * running, TypeSafe is off, a 429 asked us to wait, maintenance is paused,
+ * an interactive job is pending (starvation guard), backoff is in effect,
+ * or another runner holds the lease.
+ */
+export declare function runJudgeBackfillTick(): Promise<TickResult>;
+/** Start the runner in this process. Only the Neural Interface should call this; stdio MCP servers must not. */
+export declare function startJudgeBackfill(options?: {
+    intervalMs?: number;
+}): void;
+/**
+ * Stop the runner in this process: flush the last counters and give up the
+ * lease so a respawned server claims immediately instead of waiting out the
+ * 30 s. Pending jobs stay pending; the persisted status is untouched.
+ */
+export declare function stopJudgeBackfill(): void;
+/** Exposed for tests. */
+export declare const _backfillInternals: {
+    readonly consecutiveFailures: number;
+    readonly nextTickAt: number;
+    /** Clear only the backoff clock; the failure streak stays. */
+    clearBackoff(): void;
+    OWNER: string;
+    LEASE_KEY: string;
+    flushProgress: typeof flushProgress;
+};
+export {};
+//# sourceMappingURL=memory-judge-backfill.d.ts.map

package/mcp-server/dist/services/memory-judge-backfill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-judge-backfill.d.ts","sourceRoot":"","sources":["../../src/services/memory-judge-backfill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,OAAO,EAAoI,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAElM,OAAO,EAAyG,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAuB,MAAM,sBAAsB,CAAC;AAY7M,MAAM,WAAW,iBAAiB;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACzG,MAAM,WAAW,cAAe,SAAQ,aAAa;IAAG,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CAAE;AAenN,yDAAyD;AACzD,wBAAgB,cAAc,IAAI;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAKlE;AAED,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAG7D;AAED,6HAA6H;AAC7H,wBAAgB,oBAAoB,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAU1I;AASD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,gBAAgB,CAsD7I;AAsBD,wBAAgB,cAAc,IAAI,cAAc,CAI/C;AAmBD,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAElF;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAA;CAAO,GAAG,cAAc,CAyC5K;AAID,MAAM,MAAM,eAAe,GACvB;IAAE,OAAO,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACtG;IAAE,OAAO,EAAE,aAAa,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,CAAC;IAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAExH;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC,CAmCzG;AAeD,iGAAiG;AACjG,wBAAgB,wBAAwB,IAAI,IAAI,CAA6C;AAE7F,iBAAS,aAAa,CAAC,KAAK,UAAQ,GAAG,IAAI,CAoB1C;AAwCD,MAAM,WAAW,UAAU;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AAElG;;;;;GAKG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,UAAU,CAAC,CA4DhE;AAED,gHAAgH;AAChH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,IAAI,CAI9E;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAKxC;AAED,yBAAyB;AACzB,eAAO,MAAM,kBAAkB;;;IAG7B,8DAA8D;;;;;CAG/D,CAAC"}