@cybedefend/vibedefend 1.5.0 → 1.7.0

package/dist/mcp/report/coalesce.js

@@ -0,0 +1,165 @@
+// ─── Coalescing of call events ────────────────────────────────────────────────
+//
+// An agent looping on a refused tool would otherwise send thousands of events.
+// Identical events (kind, reason, tool) inside COALESCE_WINDOW_MS are ONE event:
+// one eventId whose count rises. The gateway upserts by eventId, so a resend
+// with a higher count replaces the earlier one.
+import { randomUUID } from 'node:crypto';
+import { COALESCE_WINDOW_MS, REPORT_BUFFER_MAX_RECORDS, REPORT_MAX_EVENT_COUNT, REPORT_MAX_EVENTS, } from './constants.js';
+const CATEGORY_PATTERN = /^[a-z0-9_-]{1,64}$/;
+const SEVERITY_PATTERN = /^[a-z]{1,16}$/;
+const RULE_PATTERN = /^[a-z0-9._-]{1,64}$/;
+const DIGEST_PATTERN = /^d1:[0-9a-f]{64}$/;
+const MAX_RULES = 5;
+const MAX_TOOL_NAME = 128;
+export function toReportVerdict(verdict) {
+    if (verdict === undefined)
+        return undefined;
+    if (verdict === 'ok')
+        return 'clean';
+    if (verdict === 'malicious' || verdict === 'suspicious')
+        return verdict;
+    return 'unverified';
+}
+/** A tool name as it leaves the machine: the gateway's charset and length. */
+export function reportToolName(name) {
+    const cleaned = name.replace(/[^A-Za-z0-9._/-]/g, '_').slice(0, MAX_TOOL_NAME);
+    return cleaned === '' ? 'unnamed' : cleaned;
+}
+const SWEEP_EVERY_MS = 1_000;
+export class EventCoalescer {
+    now;
+    windowMs;
+    newId;
+    maxGroups;
+    groups = new Map();
+    lastSweepMs = -Infinity;
+    constructor(opts = {}) {
+        this.now = opts.now ?? Date.now;
+        this.windowMs = opts.windowMs ?? COALESCE_WINDOW_MS;
+        this.newId = opts.newId ?? randomUUID;
+        // Nothing may be sent for a long time (no organization, offline): the
+        // memory a proxy keeps for its reports stays bounded all the same.
+        this.maxGroups = Math.max(1, opts.maxGroups ?? REPORT_BUFFER_MAX_RECORDS);
+    }
+    add(input) {
+        const nowMs = this.now();
+        // On the hot path: forgetting closed groups is worth one pass a second,
+        // not one per call (`pending()` sweeps before reading anyway).
+        if (nowMs < this.lastSweepMs || nowMs - this.lastSweepMs >= SWEEP_EVERY_MS)
+            this.sweep(nowMs);
+        const tool = reportToolName(input.tool);
+        const key = groupKey(input.kind, input.reason, tool);
+        const iso = new Date(nowMs).toISOString();
+        let group = this.groups.get(key);
+        if (group !== undefined && nowMs - group.firstMs >= this.windowMs) {
+            // The window is over. A group still unsent keeps its own key slot until
+            // replaced here, so it is lost only if it was never sent: keep it under
+            // its eventId by moving it aside.
+            if (group.dirty)
+                this.groups.set(`${key}#${group.event.eventId}`, group);
+            group = undefined;
+        }
+        if (group === undefined) {
+            group = {
+                event: {
+                    eventId: this.newId(),
+                    kind: input.kind,
+                    reason: input.reason,
+                    tool,
+                    count: 0,
+                    firstAt: iso,
+                    lastAt: iso,
+                },
+                firstMs: nowMs,
+                lastMs: nowMs,
+                dirty: true,
+            };
+            this.groups.set(key, group);
+            this.evictOldest();
+        }
+        const e = group.event;
+        // Stops at the gateway's bound: past it, the group's every later send
+        // would be refused and the event lost. `lastAt` still moves on below.
+        e.count = Math.min(e.count + 1, REPORT_MAX_EVENT_COUNT);
+        // `lastAt` only moves forward. A wall clock can step back (NTP, a resume),
+        // and an event that ends before it starts is refused by the gateway: one such
+        // event would poison its whole report, and the report would keep coming back
+        // from the buffer for the 7 days it lives there.
+        if (nowMs > group.lastMs) {
+            group.lastMs = nowMs;
+            e.lastAt = iso;
+        }
+        if (input.digest !== undefined && DIGEST_PATTERN.test(input.digest))
+            e.toolDigest = input.digest;
+        const verdict = toReportVerdict(input.verdict);
+        if (verdict !== undefined)
+            e.verdict = verdict;
+        if (input.category !== undefined && CATEGORY_PATTERN.test(input.category))
+            e.category = input.category;
+        if (input.severity !== undefined && SEVERITY_PATTERN.test(input.severity))
+            e.severity = input.severity;
+        if (input.rules !== undefined) {
+            const merged = new Set(e.rules ?? []);
+            for (const r of input.rules) {
+                if (RULE_PATTERN.test(r))
+                    merged.add(r);
+            }
+            const rules = [...merged].slice(0, MAX_RULES);
+            if (rules.length > 0)
+                e.rules = rules;
+        }
+        group.dirty = true;
+    }
+    /** Dirty groups, oldest first, copied. */
+    pending(limit = REPORT_MAX_EVENTS) {
+        this.sweep(this.now());
+        return [...this.groups.values()]
+            .filter((g) => g.dirty)
+            .sort((a, b) => a.firstMs - b.firstMs)
+            .slice(0, limit)
+            .map((g) => ({ ...g.event, ...(g.event.rules ? { rules: [...g.event.rules] } : {}) }));
+    }
+    markSent(sent) {
+        for (const s of sent) {
+            for (const g of this.groups.values()) {
+                if (g.event.eventId === s.eventId && g.event.count === s.count)
+                    g.dirty = false;
+            }
+        }
+    }
+    hasPending() {
+        for (const g of this.groups.values())
+            if (g.dirty)
+                return true;
+        return false;
+    }
+    /** Over the bound, the oldest groups go first, sent or not. */
+    evictOldest() {
+        while (this.groups.size > this.maxGroups) {
+            let oldestKey;
+            let oldestMs = Infinity;
+            for (const [key, g] of this.groups) {
+                if (g.firstMs < oldestMs) {
+                    oldestMs = g.firstMs;
+                    oldestKey = key;
+                }
+            }
+            if (oldestKey === undefined)
+                return;
+            this.groups.delete(oldestKey);
+        }
+    }
+    /** Closed and clean groups are forgotten. */
+    sweep(nowMs) {
+        this.lastSweepMs = nowMs;
+        for (const [key, g] of this.groups) {
+            if (!g.dirty && nowMs - g.firstMs >= this.windowMs)
+                this.groups.delete(key);
+        }
+    }
+}
+function groupKey(kind, reason, tool) {
+    return `${kind}|${reason}|${tool}`;
+}
+//# sourceMappingURL=coalesce.js.map

package/dist/mcp/report/coalesce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coalesce.js","sourceRoot":"","sources":["../../../src/mcp/report/coalesce.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,EAAE;AACF,+EAA+E;AAC/E,iFAAiF;AACjF,6EAA6E;AAC7E,gDAAgD;AAEhD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAUxB,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAC9C,MAAM,gBAAgB,GAAG,eAAe,CAAC;AACzC,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAC3C,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,MAAM,UAAU,eAAe,CAAC,OAA4B;IAC1D,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACrC,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,YAAY;QAAE,OAAO,OAAO,CAAC;IACxE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC/E,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED,MAAM,cAAc,GAAG,KAAK,CAAC;AAU7B,MAAM,OAAO,cAAc;IACR,GAAG,CAAe;IAClB,QAAQ,CAAS;IACjB,KAAK,CAAe;IACpB,SAAS,CAAS;IAClB,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC3C,WAAW,GAAG,CAAC,QAAQ,CAAC;IAEhC,YACE,OAA4F,EAAE;QAE9F,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC;QACpD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC;QACtC,sEAAsE;QACtE,mEAAmE;QACnE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,yBAAyB,CAAC,CAAC;IAC5E,CAAC;IAED,GAAG,CAAC,KAAqB;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,wEAAwE;QACxE,+DAA+D;QAC/D,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,cAAc;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9F,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClE,wEAAwE;YACxE,wEAAwE;YACxE,kCAAkC;YAClC,IAAI,KAAK,CAAC,KAAK;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;YACzE,KAAK,GAAG,SAAS,CAAC;QACpB,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,GAAG;gBACN,KAAK,EAAE;oBACL,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE;oBACrB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,IAAI;oBACJ,KAAK,EAAE,CAAC;oBACR,OAAO,EAAE,GAAG;oBACZ,MAAM,EAAE,GAAG;iBACZ;gBACD,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,IAAI;aACZ,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QACtB,sEAAsE;QACtE,sEAAsE;QACtE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACxD,2EAA2E;QAC3E,8EAA8E;QAC9E,6EAA6E;QAC7E,iDAAiD;QACjD,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACzB,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;YACrB,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;QACjG,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,OAAO,KAAK,SAAS;YAAE,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;QAC/C,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACvG,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACvG,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC5B,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1C,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;QACxC,CAAC;QACD,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,0CAA0C;IAC1C,OAAO,CAAC,QAAgB,iBAAiB;QACvC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;aAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;aACtB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;aACrC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3F,CAAC;IAED,QAAQ,CAAC,IAA0D;QACjE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;oBAAE,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;YAClF,CAAC;QACH,CAAC;IACH,CAAC;IAED,UAAU;QACR,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+DAA+D;IACvD,WAAW;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,IAAI,SAA6B,CAAC;YAClC,IAAI,QAAQ,GAAG,QAAQ,CAAC;YACxB,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnC,IAAI,CAAC,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;oBACzB,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC;oBACrB,SAAS,GAAG,GAAG,CAAC;gBAClB,CAAC;YACH,CAAC;YACD,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO;YACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,6CAA6C;IACrC,KAAK,CAAC,KAAa;QACzB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,IAAkB,EAAE,MAAsB,EAAE,IAAY;IACxE,OAAO,GAAG,IAAI,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;AACrC,CAAC"}

package/dist/mcp/report/constants.js

@@ -0,0 +1,51 @@
+// ─── Constants of MCP call reporting (contract C6 and the validation of C4) ──
+/** Events of one report, at most. */
+export const REPORT_MAX_EVENTS = 200;
+/** Repeated events of one (server, tool, kind, reason) are one event over this window. */
+export const COALESCE_WINDOW_MS = 600_000;
+/** The first send goes this long after an event. */
+export const FIRST_SEND_DELAY_MS = 5_000;
+/** Then at most one send per this interval. */
+export const MIN_SEND_INTERVAL_MS = 60_000;
+/** The inventory is resent at least this often. */
+export const INVENTORY_REFRESH_MS = 3_600_000;
+/** The report buffer holds this many records, at most... */
+export const REPORT_BUFFER_MAX_RECORDS = 500;
+/** ...and none older than this. */
+export const REPORT_BUFFER_MAX_AGE_MS = 7 * 24 * 3_600_000;
+/** How long an organisation is left alone after a 400, 403, 404 or 422. */
+export const REPORT_HOLD_MS = 3_600_000;
+/** Timeout of one report request. */
+export const REPORT_HTTP_TIMEOUT_MS = 5_000;
+/** `servers/check` runs this often for the whole life of the proxy. */
+export const SERVER_CHECK_INTERVAL_MS = 900_000;
+/** A known organisation block stays applied this long while the backend cannot be reached. */
+export const ORG_BLOCK_STICKY_MAX_MS = 7 * 24 * 3_600_000;
+// What a report may carry, field by field (C4). Anything else is not sent.
+/** A config entry name or a launcher name, as it leaves the machine. */
+export const LABEL_PATTERN = /^[A-Za-z0-9._-]{1,64}$/;
+/**
+ * A lowercase hostname, no scheme, port or path: labels of 1 to 63 characters
+ * that neither start nor end with a hyphen, 253 characters at most. The
+ * gateway's pattern, so an empty label (`mcp..example.com`) or a trailing dot
+ * is refused here instead of costing the whole report a 400.
+ */
+export const HOST_PATTERN = /^(?=.{1,253}$)[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$/;
+/** At most 214 characters in all, scope included: npm's own limit (ruling R30). */
+export const NPM_NAME_PATTERN = /^(?=.{1,214}$)(@[a-z0-9._~-]+\/)?[a-z0-9._~-]{1,214}$/;
+export const PYPI_NAME_PATTERN = /^[A-Za-z0-9._-]{1,128}$/;
+export const PACKAGE_VERSION_PATTERN = /^[A-Za-z0-9.+_-]{1,64}$/;
+export const SERVER_KEY_PATTERN = /^[a-f0-9]{64}$/;
+/** The gateway's pattern for `vibedefendVersion`: semver, at most one pre-release and one build part. */
+export const VIBEDEFEND_VERSION_PATTERN = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
+/** `server.toolCount` and `server.flaggedToolCount`, at most (the gateway refuses more). */
+export const REPORT_MAX_TOOL_COUNT = 100_000;
+/** An event's `count`, at most (the gateway refuses more). */
+export const REPORT_MAX_EVENT_COUNT = 100_000;
+/**
+ * How far ahead of this machine's clock an organisation block's confirmation
+ * may be and still count: a clock set back a little while offline (an NTP
+ * correction) must not lift a block that is in force.
+ */
+export const ORG_BLOCK_CLOCK_SKEW_MS = 5 * 60_000;
+//# sourceMappingURL=constants.js.map

package/dist/mcp/report/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/mcp/report/constants.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,qCAAqC;AACrC,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,0FAA0F;AAC1F,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAC1C,oDAAoD;AACpD,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AACzC,+CAA+C;AAC/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C,mDAAmD;AACnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAE9C,4DAA4D;AAC5D,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAC7C,mCAAmC;AACnC,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;AAC3D,2EAA2E;AAC3E,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;AACxC,qCAAqC;AACrC,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAE5C,uEAAuE;AACvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAChD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;AAE1D,2EAA2E;AAE3E,wEAAwE;AACxE,MAAM,CAAC,MAAM,aAAa,GAAG,wBAAwB,CAAC;AACtD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GACvB,gGAAgG,CAAC;AACnG,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,uDAAuD,CAAC;AACxF,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAC3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AACnD,yGAAyG;AACzG,MAAM,CAAC,MAAM,0BAA0B,GAAG,0DAA0D,CAAC;AACrG,4FAA4F;AAC5F,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAC7C,8DAA8D;AAC9D,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAC9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,MAAM,CAAC"}

package/dist/mcp/report/project.js

@@ -0,0 +1,83 @@
+/**
+ * The project a proxy reports for, resolved once per process.
+ *
+ * Off the hot path: the caller (the reporter) awaits it in the background and
+ * never before forwarding a call. It never throws.
+ *
+ * Only Claude Code has its project read from the proxy's working directory
+ * (`.cybedefend/config.json`, then the git origin through
+ * `GET /user/projects/resolve`): that the working directory is the agent's
+ * launch folder is verified for Claude Code alone. Any other agent, or one
+ * that did not say who it is, gets a project only from an explicit
+ * `CYBEDEFEND_PROJECT_ID`; otherwise its reports carry none. Where it is not
+ * reliable, the project is omitted rather than guessed (spec §2.3).
+ */
+import { execFile } from 'node:child_process';
+import { resolveProjectIdWithApi } from '../../hooks/runtime/resolve.js';
+import { findRepoRoot } from '../../hooks/runtime/work-dir.js';
+import { verifyTokenResolver } from '../verify/token.js';
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const ORIGIN_TIMEOUT_MS = 3000;
+/** The agents whose working directory says which project they work on (normalised names). */
+const PROJECT_FROM_WORKING_DIRECTORY = new Set(['claude-code']);
+/**
+ * A client name as the gateway stores it (`toClientName`): lowercase, every run
+ * of other characters a single `-`, no `-` at either end, 64 characters at most.
+ */
+export function normaliseClientName(name) {
+    if (typeof name !== 'string')
+        return '';
+    return name
+        .toLowerCase()
+        .replace(/[^a-z0-9._-]+/g, '-')
+        .replace(/-{2,}/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .slice(0, 64)
+        .replace(/-+$/, '');
+}
+/**
+ * Asynchronous on purpose: the sync `spawnSync` of `src/git.ts` would block the
+ * forwarding loop for up to its timeout.
+ */
+function readGitOrigin(cwd) {
+    return new Promise((resolve) => {
+        try {
+            execFile('git', ['remote', 'get-url', 'origin'], { cwd, timeout: ORIGIN_TIMEOUT_MS }, (err, stdout) => {
+                const out = err ? '' : String(stdout).trim();
+                resolve(out === '' ? null : out);
+            });
+        }
+        catch {
+            resolve(null);
+        }
+    });
+}
+export async function resolveReportProjectId(deps) {
+    try {
+        const explicit = deps.env.CYBEDEFEND_PROJECT_ID?.trim();
+        if (explicit && UUID_RE.test(explicit))
+            return explicit;
+        if (!PROJECT_FROM_WORKING_DIRECTORY.has(normaliseClientName(deps.clientName)))
+            return null;
+        const cwd = deps.cwd ?? process.cwd();
+        const root = findRepoRoot(cwd) ?? cwd;
+        let origin = null;
+        try {
+            origin = await (deps.readOrigin ?? readGitOrigin)(root);
+        }
+        catch {
+            origin = null;
+        }
+        const resolve = deps.resolveProject ?? resolveProjectIdWithApi;
+        const resolution = await resolve(root, {
+            resolveTokenFn: verifyTokenResolver({ env: deps.env }),
+            getOrigin: () => origin,
+        });
+        const id = resolution?.projectId;
+        return typeof id === 'string' && UUID_RE.test(id) ? id : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=project.js.map

package/dist/mcp/report/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../../src/mcp/report/project.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAClF,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,6FAA6F;AAC7F,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;AAEhE;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAwB;IAC1D,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACxC,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAWD;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,QAAQ,CACN,KAAK,EACL,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAC/B,EAAE,GAAG,EAAE,OAAO,EAAE,iBAAiB,EAAE,EACnC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;gBACd,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7C,OAAO,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC,CACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAuB;IAClE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;QACxD,IAAI,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QACxD,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAE3F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;QACtC,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,uBAAuB,CAAC;QAC/D,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;YACrC,cAAc,EAAE,mBAAmB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YACtD,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM;SACxB,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,UAAU,EAAE,SAAS,CAAC;QACjC,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}