[Init] Initial commit - NetMesh terminal manager

domain/terminalBootEpoch.ts

@@ -0,0 +1,31 @@
+/**
+ * Tracks the active terminal boot epoch per UI session id so async auth
+ * prompts (keyboard-interactive / MFA) can reject superseded reconnect
+ * attempts that still share the same sessionId.
+ */
+const terminalBootEpochs = new Map<string, number>();
+
+export function setTerminalBootEpoch(sessionId: string, epoch: number): void {
+  if (!sessionId) return;
+  terminalBootEpochs.set(sessionId, epoch);
+}
+
+export function clearTerminalBootEpoch(sessionId: string): void {
+  if (!sessionId) return;
+  terminalBootEpochs.delete(sessionId);
+}
+
+export function getTerminalBootEpoch(sessionId: string): number | undefined {
+  return terminalBootEpochs.get(sessionId);
+}
+
+/** Epoch-tagged prompts need a live map entry; missing entry means the session tore down. Legacy prompts without bootEpoch stay eligible. */
+export function isTerminalBootEpochCurrent(
+  sessionId: string,
+  requestEpoch: number | undefined,
+): boolean {
+  if (!Number.isFinite(requestEpoch)) return true;
+  const current = terminalBootEpochs.get(sessionId);
+  if (current === undefined) return false;
+  return current === requestEpoch;
+}