@compr/opscontext-mcp 2.10.0 → 2.12.0

package/dist/secret-shapes.js

@@ -50,13 +50,16 @@ export const SECRET_SHAPES = [
     { id: "api_key_header", re: /(\bx-api-key:\s*)[^\s'"]{8,}/gi, keepPrefix: true },
     // name = value, the long tail. Skips variables, env lookups, paths, placeholders already
     // redacted, type names and function calls.
-    // A name that is PASS alone or ends in a separator plus PASS (SMTP_PASS, DB_PASS, db.pass) counts
-    // too: a real mail password sat in the shared index under SMTP_PASS (E2E_REVIEW_2026-09 A6-3).
-    // The separator keeps bypass and compass out.
+    // A name that ends in a separator plus PASS (SMTP_PASS, DB_PASS, db.pass) counts too: a real mail
+    // password sat in the shared index under SMTP_PASS (E2E_REVIEW_2026-09 A6-3). The separator keeps
+    // bypass and compass out. A bare `pass` counts only before an equals sign, or before a quoted value
+    // after a colon (nodemailer's auth block): as first shipped in 2.10.0 it also took prose (a README's
+    // "PII pass" list) and code (a count of passing checks in agents.ts), which the public-release scan
+    // refused.
     {
         id: "credential_assignment",
         // A backtick opens a value too: "password: `...`" in Markdown, found in the real log.
-        re: /(\b(?:[\w.-]*(?:password|passwd|pwd|secret|token|api[_-]?key|apikey|access[_-]?key|private[_-]?key|client[_-]?secret)|(?:[\w.-]*[_.-])?pass)["'`]?\s*[:=]\s*["'`]?)(?![$<{*/~.[]|process\.env|os\.environ|getenv)[^\s'"`,;)}\]]{6,}/gi,
+        re: /(\b(?:[\w.-]*(?:password|passwd|pwd|secret|token|api[_-]?key|apikey|access[_-]?key|private[_-]?key|client[_-]?secret)|[\w.-]*[_.-]pass|pass(?=["'`]?\s*=|["'`]?\s*:\s*["'`]))["'`]?\s*[:=]\s*["'`]?)(?![$<{*/~.[]|process\.env|os\.environ|getenv)[^\s'"`,;)}\]]{6,}/gi,
         keepPrefix: true,
         skip: (value, after) => after.startsWith("(") ||
             (/^[A-Za-z_$][\w$.]*\(/.test(value) && after.startsWith(")")) || // getToken(user), not a value

package/dist/server-registry.d.ts

@@ -42,6 +42,8 @@ export declare const SERVER_COUNT_WARN = 3;
  */
 export declare function buildHashOf(scriptPath: string): string | null;
 export declare function isAlive(pid: number): boolean;
+/** The record's own process is still running. [LOCK] [A-RECORD-BELONGS-TO-ITS-OWN-PROCESS] */
+export declare function recordIsLive(rec: Pick<ServerRecord, "pid" | "started">): boolean;
 /**
  * Register the running server. Returns a stop() that removes the record; exit handlers call it too.
  */
@@ -51,6 +53,7 @@ export declare function registerServer(opts: {
     corpus?: string;
     role?: "indexer" | "reader";
     daemon?: boolean;
+    onSignal?: () => void;
 }): {
     record: ServerRecord;
     stop: () => void;

package/dist/server-registry.js

@@ -76,6 +76,60 @@ export function isAlive(pid) {
         return e?.code === "EPERM"; // exists, not ours
     }
 }
+/**
+ * [LOCKED] [A-RECORD-BELONGS-TO-ITS-OWN-PROCESS] - 2026-09-27
+ * [NEVER] treat a registry record as a live server because its pid exists.
+ * WHY: pids are reused. A dead launchd agent's record pointed at a live unrelated process (3 of 3
+ *      valid runs, E2E_REVIEW_2026-09 B5-1): for as long as that process lived, no reader took over
+ *      indexing (a doc change never reached the index), nobody answered on the event port, a new chat
+ *      server did not take it, and `contextengine servers` listed the unrelated process as the
+ *      current launchd agent holding the port. Records survive a crash or a power cut, and pids wrap.
+ * FIX: a record is alive when its pid exists AND that process started no later than the record says
+ *      the server did (the server registers after its process starts; a reused pid belongs to a
+ *      process that started later). Start times come from one `ps -o pid=,lstart=` for all uncached
+ *      pids of a listing, cached 60 s per pid. When ps cannot answer, the pid test alone decides, as
+ *      before. A record that fails is dead: removed by the lister, never elected, never the daemon.
+ */
+const START_CACHE_MS = 60_000;
+const startCache = new Map();
+function refreshStartTimes(pids) {
+    const now = Date.now();
+    const need = pids.filter((p) => { const c = startCache.get(p); return !c || now - c.at > START_CACHE_MS; });
+    if (need.length === 0)
+        return;
+    let out = "";
+    try {
+        // Hardcoded argv, no shell: the only variables are numbers.
+        out = execFileSync("ps", ["-o", "pid=,lstart=", "-p", need.join(",")], { encoding: "utf8", timeout: 2000, stdio: ["ignore", "pipe", "ignore"] });
+    }
+    catch (e) {
+        const stdout = e.stdout;
+        out = typeof stdout === "string" ? stdout : ""; // ps exits 1 when some pid is gone; keep what it printed
+    }
+    const seen = new Set();
+    for (const line of out.split("\n")) {
+        const m = /^\s*(\d+)\s+(.+?)\s*$/.exec(line);
+        if (!m)
+            continue;
+        const t = Date.parse(m[2]);
+        seen.add(Number(m[1]));
+        startCache.set(Number(m[1]), { startedMs: Number.isNaN(t) ? null : t, at: now });
+    }
+    for (const p of need)
+        if (!seen.has(p))
+            startCache.set(p, { startedMs: null, at: now });
+}
+/** The record's own process is still running. [LOCK] [A-RECORD-BELONGS-TO-ITS-OWN-PROCESS] */
+export function recordIsLive(rec) {
+    if (!isAlive(rec.pid))
+        return false;
+    refreshStartTimes([rec.pid]);
+    const startedMs = startCache.get(rec.pid)?.startedMs ?? null;
+    const registered = Date.parse(rec.started);
+    if (startedMs === null || Number.isNaN(registered))
+        return true; // cannot tell: the pid test decides
+    return startedMs <= registered + 5_000; // lstart has one-second resolution
+}
 /**
  * Register the running server. Returns a stop() that removes the record; exit handlers call it too.
  */
@@ -119,7 +173,11 @@ export function registerServer(opts) {
     };
     process.on("exit", stop);
     for (const sig of ["SIGTERM", "SIGINT", "SIGHUP"]) {
-        process.on(sig, () => { stop(); process.exit(0); });
+        // The record goes first; the caller may end the process its own way. [LOCK] [A-CHAT-SERVER-ENDS-WITH-ITS-CHAT]
+        process.on(sig, () => { stop(); if (opts.onSignal)
+            opts.onSignal();
+        else
+            process.exit(0); });
     }
     const setRole = (role) => { record.role = role; write(); };
     const setEventPort = (port) => {
@@ -141,7 +199,7 @@ export function liveDaemonPid(exceptPid = process.pid) {
             continue;
         try {
             const rec = JSON.parse(readFileSync(join(dir, f), "utf8"));
-            if (rec.daemon && rec.pid !== exceptPid && isAlive(rec.pid))
+            if (rec.daemon && rec.pid !== exceptPid && recordIsLive(rec))
                 return rec.pid;
         }
         catch {
@@ -156,6 +214,7 @@ export function listServers() {
     const report = { servers: [], removed: 0, warnings: [] };
     if (!existsSync(dir))
         return report;
+    const records = [];
     for (const f of readdirSync(dir)) {
         if (!f.endsWith(".json"))
             continue;
@@ -172,7 +231,12 @@ export function listServers() {
             report.removed++;
             continue;
         }
-        if (!isAlive(rec.pid)) {
+        records.push({ path, rec });
+    }
+    refreshStartTimes(records.filter(({ rec }) => isAlive(rec.pid)).map(({ rec }) => rec.pid)); // one ps for the listing
+    for (const { path, rec } of records) {
+        // [LOCK] [A-RECORD-BELONGS-TO-ITS-OWN-PROCESS]
+        if (!recordIsLive(rec)) {
             try {
                 unlinkSync(path);
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@compr/opscontext-mcp",
-  "version": "2.10.0",
+  "version": "2.12.0",
   "description": "OpsContext for AI Agents — read-only fleet visibility (PM2/nginx/Docker/git/cron) + tamper-evident audit log + policy-as-code hooks. The ops + compliance layer Claude Code can't grow natively.",
   "type": "module",
   "main": "dist/index.js",