@compr/opscontext-mcp 2.5.2 → 2.5.4

package/dist/index.js

@@ -10,9 +10,10 @@ import { collectProjectOps, collectSystemOps } from "./collectors.js";
 import { loadCache, saveCache } from "./cache.js";
 import { listProjects, checkPorts, runComplianceAudit, formatProjectList, formatPortMap, formatPlan, scoreProject, formatScoreReport, runScoreCanary, } from "./agents.js";
 import { saveSession, loadSession, listSessions, deleteSession, formatSession, formatSessionList, } from "./sessions.js";
-import { verifyChain, readAuditLog, filterByRange } from "./audit.js";
+import { verifyChain, readAuditLog, filterByRange, autoRotateAuditLog } from "./audit.js";
 import { startEventIngestServer } from "./http-server.js";
 import { detect } from "./detector.js";
+import { buildCostReport } from "./cost-report.js";
 import { saveLearning, searchLearnings, listLearnings, deleteLearning, learningsToChunks, learningsStats, formatLearnings, importLearningsFromFile, autoImportFromSources, LEARNING_CATEGORIES, } from "./learnings.js";
 import { communityRulesToChunks, mergeWithDedup, loadCommunityStore, } from "./community-sync.js";
 import { readFileSync, existsSync, watch, statSync, writeFileSync, mkdirSync } from "fs";
@@ -609,6 +610,9 @@ server.tool("audit_verify", "Verify the integrity of the local audit log chain.
     const summary = [];
     summary.push(`Audit chain: ${report.ok ? "✅ INTACT" : "❌ BROKEN"}`);
     summary.push(`Total records: ${report.total}`);
+    if ((report.redactedIndices ?? []).length > 0) {
+        summary.push(`Redacted and acknowledged on the chain: ${report.redactedIndices.length} record(s), not counted as altered`);
+    }
     if (since || until) {
         summary.push(`Range filter: ${since ?? "start"} → ${until ?? "now"}  (${filtered.length} record(s) in range)`);
     }
@@ -623,6 +627,28 @@ server.tool("audit_verify", "Verify the integrity of the local audit log chain.
     return respond("audit_verify", summary.join("\n"));
 });
 // ---------------------------------------------------------------------------
+// Tool: agent_cost (multi-agent token / cost / capacity report)
+// ---------------------------------------------------------------------------
+// Same renderer as `contextengine cost`. [LOCK] [COST-REPORT-ONE-RENDERER]
+// Free tool: it reads the caller's own Claude Code transcripts on this machine,
+// nothing leaves it. Added 2026-08-21, one day after the CLI (707fcc8).
+server.tool("agent_cost", "Multi-agent cost report from Claude Code's own transcripts on this machine: tokens moved (cache read/write, fresh input, output), valued cost at API list prices (marked NOTIONAL on a subscription, UNPRICED when no rate matches), capacity intensity (subagents, failed, died at window, tool calls per agent, cache reuse), top runs, and context_burn / fanout_without_canary signals. Call it after a fan-out to read what it consumed, or before one to compare with the last. Thresholds come from .contextengine/policy.json agent_cost, else built-in defaults.", {
+    days: z.number().int().positive().optional().describe("Only runs started within the last N days"),
+    project: z.string().optional().describe("Filter by project slug as it appears in ~/.claude/projects (e.g. -Users-yan-Projects-ContextEngine)"),
+    session: z.string().optional().describe("Filter by parent session id"),
+    run: z.string().optional().describe("Filter by run id (wf_... or task group id)"),
+    top: z.number().int().positive().max(50).optional().describe("How many runs to list (default 10)"),
+    json: z.boolean().optional().describe("Return the structured JSON report instead of the text one"),
+    policy_dir: z.string().optional().describe("Absolute path of the repo whose .contextengine/policy.json supplies agent_cost thresholds and rates. Default: the MCP server's working directory, which under launchd is the home dir, not a repo; the report names which source it used on its 'thresholds:' line"),
+}, async ({ days, project, session, run, top, json, policy_dir }) => {
+    // [COST-POLICY-DIR-IS-EXPLICIT] — the daemon's cwd is not a project. Without this the MCP
+    // surface silently priced with built-in defaults while the CLI in the repo read policy.json.
+    const report = buildCostReport({ days, project, session, run, top }, policy_dir || process.cwd());
+    if (json && report.json)
+        return respond("agent_cost", JSON.stringify(report.json, null, 2));
+    return respond("agent_cost", report.text);
+});
+// ---------------------------------------------------------------------------
 // Tool: drift_status (Detector — read current drift signals)
 // ---------------------------------------------------------------------------
 // Agents should call this between major task phases. If any 'critical' signal
@@ -1131,6 +1157,24 @@ async function main() {
     const transport = new StdioServerTransport();
     await server.connect(transport);
     console.error("[ContextEngine] 🚀 MCP server running on stdio (keyword search ready)");
+    // 3a. Audit log auto-rotation. Deferred so the first requests are answered before the
+    // synchronous verify + rewrite (a few seconds on a 500k-record chain) blocks the loop.
+    // [LOCK] [AUTO-ROTATE-HYSTERESIS-AND-ONE-RUNNER]
+    // Measured 2026-08-21: ~13k records/hour on this machine, so the 100k trigger is hours
+    // away, not a day; a server that is never restarted must still rotate. Hourly recheck.
+    const runAutoRotate = () => {
+        try {
+            const o = autoRotateAuditLog();
+            if (o.action === "rotated" || o.action === "refused" || o.action === "error" || o.action === "in_progress") {
+                console.error(`[ContextEngine] 📦 audit auto-rotate (${o.action}): ${o.detail}`);
+            }
+        }
+        catch (err) {
+            console.error(`[ContextEngine] ⚠ audit auto-rotate failed: ${err.message}`);
+        }
+    };
+    setTimeout(runAutoRotate, 3_000).unref();
+    setInterval(runAutoRotate, 60 * 60_000).unref();
     // 3b. Write server-meta.json so the VS Code extension can read tool count
     // without needing an active MCP session. Single source of truth =
     // src/tools-manifest.ts (asserted by tests/tools-manifest.test.ts).

package/dist/tools-manifest.d.ts

@@ -24,14 +24,14 @@
  * Every tool name registered on the MCP server, in registration order.
  * Order is not load-bearing — kept stable for easier diffs.
  */
-export declare const ALL_TOOLS: readonly ["search_context", "list_sources", "read_source", "reindex", "list_projects", "check_ports", "run_audit", "score_project", "save_session", "load_session", "list_sessions", "delete_session", "audit_verify", "drift_status", "end_session", "save_learning", "list_learnings", "delete_learning", "import_learnings", "activate", "activation_status"];
+export declare const ALL_TOOLS: readonly ["search_context", "list_sources", "read_source", "reindex", "list_projects", "check_ports", "run_audit", "score_project", "save_session", "load_session", "list_sessions", "delete_session", "audit_verify", "drift_status", "agent_cost", "end_session", "save_learning", "list_learnings", "delete_learning", "import_learnings", "activate", "activation_status"];
 /**
  * The 4 tools gated behind PRO activation. Subset of `ALL_TOOLS`.
  * Must match `PREMIUM_TOOLS` in `src/activation.ts` (asserted by test).
  */
 export declare const PREMIUM_TOOL_NAMES: readonly ["score_project", "run_audit", "check_ports", "list_projects"];
 /** Total count — what users see as "Active on all N MCP tools". */
-export declare const TOOL_COUNT: 21;
+export declare const TOOL_COUNT: 22;
 /** Free-tier tool count — everything except `PREMIUM_TOOL_NAMES`. */
 export declare const FREE_TOOL_COUNT: number;
 //# sourceMappingURL=tools-manifest.d.ts.map

package/dist/tools-manifest.js

@@ -39,6 +39,7 @@ export const ALL_TOOLS = [
     "delete_session",
     "audit_verify",
     "drift_status",
+    "agent_cost",
     "end_session",
     "save_learning",
     "list_learnings",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@compr/opscontext-mcp",
-  "version": "2.5.2",
+  "version": "2.5.4",
   "description": "OpsContext for AI Agents — read-only fleet visibility (PM2/nginx/Docker/git/cron) + tamper-evident audit log + policy-as-code hooks. The ops + compliance layer Claude Code can't grow natively.",
   "type": "module",
   "main": "dist/index.js",