@ait-co/devtools 0.1.131 → 0.1.133

package/dist/{attach-orchestrator-BiaYiNOr.js → attach-orchestrator-CMoDuG2A.js}

@@ -1,7 +1,99 @@
-import { r as generateTotp } from "./totp-DfekTBk3.js";
-import { n as logInfo } from "./log-CUik_tHp.js";
+import { t as __exportAll } from "./rolldown-runtime-DUslC3ob.js";
+import { r as generateTotp } from "./totp-DAxys-r0.js";
 import { randomBytes } from "node:crypto";
 import { Tunnel, bin, install } from "cloudflared";
+//#region src/mcp/log.ts
+/**
+* Allowed field keys that may pass through to a log line.
+* Unknown keys are dropped. Values are still redact-scanned.
+*/
+const ALLOWED_KEYS = new Set([
+	"ts",
+	"level",
+	"event",
+	"msg",
+	"port",
+	"totpEnabled",
+	"env",
+	"tool",
+	"deploymentId",
+	"errorKind",
+	"reason",
+	"prevTargetId",
+	"mode",
+	"fileCount",
+	"passed",
+	"failed",
+	"skipped"
+]);
+/**
+* Patterns that match secret values.
+* Match order matters — more-specific patterns first.
+*
+* #268 redact script covers: relay=wss://…, at=<TOTP>, _deploymentId=<uuid>.
+* Here we extend to in-process value-level patterns used in server logs.
+*/
+const SECRET_PATTERNS = [
+	/^\d{6}$/,
+	/^(aitcc_|AITCC_)/i,
+	/^[A-Za-z0-9_-]+=.{4,}/,
+	/^wss:\/\//,
+	/(?:^|[?&])at=[A-Z0-9]{6}/i
+];
+/**
+* Returns `true` when the string value matches any known-secret pattern.
+* Only string values are tested — numbers/booleans are always safe.
+*/
+function isSecretValue(value) {
+	return SECRET_PATTERNS.some((re) => re.test(value));
+}
+/**
+* Redacts a single scalar value.
+* - strings: return "***" if the value matches a secret pattern.
+* - other: return as-is.
+*/
+function redactValue(value) {
+	if (typeof value === "string" && isSecretValue(value)) return "***";
+	return value;
+}
+/**
+* Builds a safe log payload from raw fields.
+*
+* - Only keys in `ALLOWED_KEYS` are included.
+* - String values are scanned for secret patterns and replaced with "***".
+* - `ts` and `level` and `event` are always included (they are injected by the
+*   logger functions below, not by callers).
+*/
+function buildPayload(level, event, fields) {
+	const out = {
+		ts: (/* @__PURE__ */ new Date()).toISOString(),
+		level,
+		event
+	};
+	for (const [key, value] of Object.entries(fields)) {
+		if (!ALLOWED_KEYS.has(key)) continue;
+		if (key === "ts" || key === "level" || key === "event") continue;
+		out[key] = redactValue(value);
+	}
+	return out;
+}
+/**
+* Writes a single JSON log line to stderr.
+* MCP stdio transport uses stdout; all diagnostics go to stderr.
+*/
+function writeLog(level, event, fields = {}) {
+	const payload = buildPayload(level, event, fields);
+	process.stderr.write(`${JSON.stringify(payload)}\n`);
+}
+/** Log an informational structured event. */
+function logInfo(event, fields = {}) {
+	writeLog("info", event, fields);
+}
+/** Log an error structured event. */
+function logError(event, fields = {}) {
+	writeLog("error", event, fields);
+}
+//#endregion
 //#region src/mcp/deeplink.ts
 /**
 * URL of the AITC Sandbox launcher PWA.
@@ -1191,6 +1283,19 @@ function makeTunnelStatus(up, wssUrl, droppedAt = null, reissueAttempts = 0) {
 }
 //#endregion
 //#region src/mcp/attach-orchestrator.ts
+var attach_orchestrator_exports = /* @__PURE__ */ __exportAll({
+	RELAY_SANDBOX_STALE_PAGE_MS: () => RELAY_SANDBOX_STALE_PAGE_MS,
+	START_ATTACH_REMINT_THRESHOLD_MS: () => START_ATTACH_REMINT_THRESHOLD_MS,
+	START_ATTACH_SEGMENT_MS: () => START_ATTACH_SEGMENT_MS,
+	buildIndicatorExpression: () => buildIndicatorExpression,
+	buildTotpMeta: () => buildTotpMeta,
+	extractDeploymentId: () => extractDeploymentId,
+	isSandboxPageFresh: () => isSandboxPageFresh,
+	mintAttachUrl: () => mintAttachUrl,
+	prepareAttach: () => prepareAttach,
+	renderAndMaybeWait: () => renderAndMaybeWait,
+	waitForAttachWithEvents: () => waitForAttachWithEvents
+});
 /**
 * Maximum age (ms) of a page's `lastSeenAt` before it is treated as a ghost
 * and excluded from the `wait_for_attach` short-circuit in `start_attach`
@@ -1378,7 +1483,7 @@ async function prepareAttach(deps, env, args, conn) {
 		const buildProjectRoot = typeof rawProjectRoot === "string" ? rawProjectRoot : void 0;
 		let tunnelHttpUrl = process.env.AIT_TUNNEL_BASE_URL?.trim() ?? "";
 		if (tunnelHttpUrl === "" && buildProjectRoot !== void 0) {
-			const { readRelayUrls } = await import("./relay-url-store-D3rY-GJJ.js");
+			const { readRelayUrls } = await import("./relay-url-store-B0X8TsGr.js");
 			tunnelHttpUrl = (await readRelayUrls({ projectRoot: buildProjectRoot }))?.tunnelBaseUrl ?? "";
 		}
 		if (tunnelHttpUrl === "") return {
@@ -1671,6 +1776,6 @@ function buildIndicatorExpression(opts) {
 	return `(() => {var W = window;function render(c) {if (c.dismissed) { c.el.style.display = 'none'; return; }c.el.style.display = 'block';var up = c.state !== 'disconnected';c.el.style.background = up ? '#e5484d' : '#8a8f98';c.el.textContent = up ? ${JSON.stringify(label)} : ${JSON.stringify(disconnectedLabel)};}function setState(c, next) { c.state = next; c.dismissed = false; render(c); }var c = W.__ait_indicator;if (!c) {var el = document.createElement('div');el.id = '__ait_debug_indicator';el.style.cssText = ['position:fixed','left:max(12px,calc(env(safe-area-inset-left,0px) + 8px))','bottom:max(12px,calc(env(safe-area-inset-bottom,0px) + 8px))','z-index:2147483647','color:#fff','font:bold 11px/1 system-ui,sans-serif','padding:5px 9px','border-radius:6px','pointer-events:auto','user-select:none',].join(';');document.body.appendChild(el);c = { el: el, state: 'attached', dismissed: false };el.addEventListener('pointerdown', function () { c.dismissed = true; render(c); }, { passive: true });W.__ait_indicator = c;if (W.__ait_relay_ws_observed) {W.addEventListener('ait:relay-ws-state', function (e) {setState(c, e.detail && e.detail.state === 'open' ? 'attached' : 'disconnected');});} else {try {var Native = W.WebSocket;W.WebSocket = new Proxy(Native, {construct: function (t, a) {var ws = Reflect.construct(t, a);try {var u = new URL(String(a[0]), location.href);if (/\\/target\\//.test(u.pathname)) {ws.addEventListener('open', function () { setState(c, 'attached'); });ws.addEventListener('close', function () { setState(c, 'disconnected'); });ws.addEventListener('error', function () { setState(c, 'disconnected'); });}} catch (_) {}return ws;},});} catch (_) {}}}setState(c, ${JSON.stringify(opts?.state ?? "attached")});})()`;
 }
 //#endregion
-export { RELAY_SANDBOX_STALE_PAGE_MS, START_ATTACH_REMINT_THRESHOLD_MS, START_ATTACH_SEGMENT_MS, startTunnelHealthProbe as a, buildIndicatorExpression, extractDeploymentId, startQuickTunnel as i, isSandboxPageFresh, mintAttachUrl, makeTunnelStatus as n, prepareAttach, printAttachBanner as r, renderAndMaybeWait, generateAttachToken as t };
+export { buildIndicatorExpression as a, generateAttachToken as c, startQuickTunnel as d, startTunnelHealthProbe as f, attach_orchestrator_exports as i, makeTunnelStatus as l, logInfo as m, START_ATTACH_REMINT_THRESHOLD_MS as n, extractDeploymentId as o, logError as p, START_ATTACH_SEGMENT_MS as r, isSandboxPageFresh as s, RELAY_SANDBOX_STALE_PAGE_MS as t, printAttachBanner as u };
 
-//# sourceMappingURL=attach-orchestrator-BiaYiNOr.js.map
+//# sourceMappingURL=attach-orchestrator-CMoDuG2A.js.map