[Init] Initial commit - NetMesh terminal manager

electron/bridges/mcpServerBridge/sessionOwnership.cjs

@@ -0,0 +1,92 @@
+"use strict";
+
+function createSessionOwnershipRegistry() {
+  const ownedByScope = new Map();
+  const scopeGenerations = new Map();
+
+  function captureGeneration(chatSessionId) {
+    if (!chatSessionId) return null;
+    let generation = scopeGenerations.get(chatSessionId);
+    if (!generation) {
+      generation = { chatSessionId, revoked: false };
+      scopeGenerations.set(chatSessionId, generation);
+    }
+    return generation;
+  }
+
+  function register(chatSessionId, sessionId, expectedGeneration = null) {
+    if (!chatSessionId || !sessionId) return false;
+    if (expectedGeneration !== null) {
+      const currentGeneration = scopeGenerations.get(chatSessionId);
+      if (
+        expectedGeneration.revoked
+        || expectedGeneration.chatSessionId !== chatSessionId
+        || currentGeneration !== expectedGeneration
+      ) {
+        return false;
+      }
+    }
+    const owned = ownedByScope.get(chatSessionId) || new Set();
+    owned.add(sessionId);
+    ownedByScope.set(chatSessionId, owned);
+    return true;
+  }
+
+  function validate(chatSessionId, sessionId) {
+    if (!chatSessionId) return { ok: false, error: "chatSessionId is required." };
+    if (!ownedByScope.get(chatSessionId)?.has(sessionId)) {
+      return {
+        ok: false,
+        error: `Session "${sessionId}" was not opened by the current AI scope.`,
+      };
+    }
+    return { ok: true };
+  }
+
+  function listOwned(chatSessionId) {
+    if (!chatSessionId) return [];
+    const owned = ownedByScope.get(chatSessionId);
+    return owned ? Array.from(owned) : [];
+  }
+
+  function forgetSession(sessionId) {
+    for (const [scopeId, owned] of ownedByScope) {
+      owned.delete(sessionId);
+      if (owned.size === 0) ownedByScope.delete(scopeId);
+    }
+  }
+
+  /**
+   * Drop retained ownership for a chat scope without revoking its host_open
+   * generation. Used when the renderer pushes an authoritative empty scope
+   * replace so a later non-empty sync cannot resurrect cleared sessions.
+   */
+  function releaseScopeOwnership(chatSessionId) {
+    if (!chatSessionId) return;
+    ownedByScope.delete(chatSessionId);
+  }
+
+  function clearScope(chatSessionId) {
+    ownedByScope.delete(chatSessionId);
+    const generation = scopeGenerations.get(chatSessionId);
+    if (generation) generation.revoked = true;
+    scopeGenerations.delete(chatSessionId);
+  }
+
+  function getTrackedGenerationCountForTests() {
+    return scopeGenerations.size;
+  }
+
+  return {
+    captureGeneration,
+    register,
+    validate,
+    listOwned,
+    forgetSession,
+    releaseScopeOwnership,
+    clearScope,
+    getTrackedGenerationCountForTests,
+  };
+}
+
+module.exports = { createSessionOwnershipRegistry };