@cybedefend/vibedefend 1.6.0 → 1.8.0

package/dist/mcp/report/buffer.js

@@ -0,0 +1,351 @@
+// ─── The on-disk buffer of call reports ───────────────────────────────────────
+//
+// A report that cannot be delivered now (backend down, VibeDefend off, expired
+// login) waits here, bounded in count and in age, and goes out on a later flush
+// or from a later process. Modelled on the guard violations buffer: JSON lines
+// appended without a lock, one flush at a time under an O_EXCL lock, holds per
+// backend and organisation so a refusing organisation is left alone without
+// stopping the others.
+//
+// Each record names the backend (`apiBase`) it was made for, and a flush posts
+// only its own backend's records: a report written while an EU backend was down
+// never reaches the US backend (or a staging one) through the next proxy, and
+// that other backend's refusal never holds it. A record without a backend
+// predates this rule and is dropped: its destination is not guessed.
+//
+// Written under 0700 / 0600. A record holds what a report holds (C4) plus its
+// backend, which stays on disk: the post is handed the body alone. The token is
+// never written, only its fingerprint (401 holds).
+import { appendFileSync, chmodSync, closeSync, existsSync, mkdirSync, openSync, readFileSync, rmSync, statSync, utimesSync, writeFileSync, writeSync, } from 'node:fs';
+import { join } from 'node:path';
+import { httpStatusOf, retryAfterOf } from '../../hooks/runtime/gateway-http-error.js';
+import { tokenFingerprint, transientRetryMs, unauthorizedBackoffMs, } from '../../hooks/runtime/retry-policy.js';
+import { mcpReportsDir } from '../proxy/paths.js';
+import { REPORT_BUFFER_MAX_AGE_MS, REPORT_BUFFER_MAX_RECORDS, REPORT_HOLD_MS, } from './constants.js';
+/** A flush lock older than this is a crashed flush's (as the violations buffer's). */
+export const FLUSH_LOCK_STALE_MS = 60_000;
+const HELD_STATUSES = new Set([400, 403, 404, 422]);
+/** A URL holds no space: the pair cannot be read back two ways. */
+function holdKey(record) {
+    return `${record.apiBase} ${record.organizationId}`;
+}
+export function makeReportBuffer(opts = {}) {
+    const dir = opts.dir ?? mcpReportsDir(opts.env ?? process.env);
+    const bufferFile = join(dir, 'reports.jsonl');
+    const holdsFile = join(dir, 'holds.json');
+    const lockFile = join(dir, 'flush.lock');
+    const now = opts.now ?? Date.now;
+    function ensureDir() {
+        if (!existsSync(dir))
+            mkdirSync(dir, { recursive: true, mode: 0o700 });
+        try {
+            chmodSync(dir, 0o700);
+        }
+        catch {
+            // Best-effort (not on every platform)
+        }
+    }
+    function writeSecret(file, content, flag) {
+        ensureDir();
+        const fresh = !existsSync(file);
+        if (flag === 'a')
+            appendFileSync(file, content, { encoding: 'utf8', mode: 0o600 });
+        else
+            writeFileSync(file, content, { encoding: 'utf8', mode: 0o600 });
+        if (fresh) {
+            try {
+                chmodSync(file, 0o600);
+            }
+            catch {
+                // Best-effort
+            }
+        }
+    }
+    function append(apiBase, organizationId, body) {
+        try {
+            const record = {
+                apiBase,
+                organizationId,
+                body,
+                bufferedAt: new Date(now()).toISOString(),
+            };
+            writeSecret(bufferFile, JSON.stringify(record) + '\n', 'a');
+        }
+        catch {
+            // Best-effort: a report is never worth blocking a call.
+        }
+    }
+    async function flush(apiBase, token, post) {
+        if (!existsSync(bufferFile))
+            return { ran: true, retryAt: null };
+        if (!acquireLock())
+            return { ran: false, retryAt: null };
+        try {
+            return { ran: true, retryAt: await flushLocked(apiBase, token, post) };
+        }
+        finally {
+            releaseLock();
+        }
+    }
+    /** Returns when the earliest record kept for `apiBase` is due again, or `null`. */
+    async function flushLocked(apiBase, token, post) {
+        const snapshot = readBuffer();
+        if (!snapshot)
+            return null;
+        const flushedAt = now();
+        const records = capRecords(parseRecords(snapshot.content), flushedAt);
+        const fingerprint = tokenFingerprint(token);
+        const holds = readHolds();
+        const kept = [];
+        const blocked = new Set(); // hold keys that stop for this flush
+        for (const record of records) {
+            // Another backend's record: not ours to post, nor to hold.
+            if (record.apiBase !== apiBase) {
+                kept.push(record);
+                continue;
+            }
+            const key = holdKey(record);
+            if (blocked.has(key) || !isDue(holds[key], flushedAt, fingerprint)) {
+                kept.push(record);
+                blocked.add(key);
+                continue;
+            }
+            touchLock();
+            try {
+                await post(record.organizationId, record.body);
+                delete holds[key];
+            }
+            catch (e) {
+                kept.push(record);
+                blocked.add(key);
+                holds[key] = holdAfter(e, holds[key], flushedAt, fingerprint);
+            }
+        }
+        // A hold only matters while its backend and organisation still have records.
+        const waiting = new Set(kept.map(holdKey));
+        for (const key of Object.keys(holds))
+            if (!waiting.has(key))
+                delete holds[key];
+        writeHolds(holds);
+        let retryAt = null;
+        for (const record of kept) {
+            if (record.apiBase !== apiBase)
+                continue;
+            const due = holds[holdKey(record)]?.retryAt;
+            if (due !== undefined && (retryAt === null || due < retryAt))
+                retryAt = due;
+        }
+        // Keep what was appended while we posted (appends only grow the file).
+        try {
+            const serialised = kept.map((r) => JSON.stringify(r) + '\n').join('');
+            writeSecret(bufferFile, serialised + appendedSince(snapshot.bytes), 'w');
+        }
+        catch {
+            // Worst case: posted records are posted again; the route upserts by eventId.
+        }
+        return retryAt;
+    }
+    function hasDue(apiBase, token) {
+        try {
+            const snapshot = readBuffer();
+            if (!snapshot || !snapshot.content.trim())
+                return false;
+            if (existsSync(lockFile) && !lockIsStale())
+                return false;
+            const at = now();
+            const parsed = parseRecords(snapshot.content);
+            // Records to drop make a flush worth running (it rewrites the file).
+            if (parsed.length === 0 || capRecords(parsed, at).length !== parsed.length)
+                return true;
+            const holds = readHolds();
+            const fingerprint = tokenFingerprint(token);
+            return parsed.some((r) => r.apiBase === apiBase && isDue(holds[holdKey(r)], at, fingerprint));
+        }
+        catch {
+            return false;
+        }
+    }
+    function readBuffer() {
+        try {
+            const raw = readFileSync(bufferFile);
+            return { content: raw.toString('utf8'), bytes: raw.length };
+        }
+        catch {
+            return null;
+        }
+    }
+    function appendedSince(bytes) {
+        try {
+            const raw = readFileSync(bufferFile);
+            return raw.length > bytes ? raw.subarray(bytes).toString('utf8') : '';
+        }
+        catch {
+            return '';
+        }
+    }
+    function acquireLock() {
+        try {
+            ensureDir();
+        }
+        catch {
+            return false;
+        }
+        for (let attempt = 0; attempt < 2; attempt++) {
+            try {
+                const fd = openSync(lockFile, 'wx', 0o600);
+                try {
+                    writeSync(fd, String(process.pid));
+                }
+                finally {
+                    closeSync(fd);
+                }
+                return true;
+            }
+            catch (e) {
+                if (e.code !== 'EEXIST')
+                    return false;
+                if (!lockIsStale())
+                    return false;
+                try {
+                    rmSync(lockFile, { force: true });
+                }
+                catch {
+                    return false;
+                }
+            }
+        }
+        return false;
+    }
+    /** File mtimes are wall-clock time, hence Date.now() and not `now`. */
+    function lockIsStale() {
+        try {
+            return Date.now() - statSync(lockFile).mtimeMs > FLUSH_LOCK_STALE_MS;
+        }
+        catch {
+            return true;
+        }
+    }
+    function touchLock() {
+        try {
+            const t = new Date();
+            utimesSync(lockFile, t, t);
+        }
+        catch {
+            // Best-effort
+        }
+    }
+    function releaseLock() {
+        try {
+            rmSync(lockFile, { force: true });
+        }
+        catch {
+            // Best-effort: a lock left behind goes stale after a minute.
+        }
+    }
+    function readHolds() {
+        try {
+            if (!existsSync(holdsFile))
+                return {};
+            const parsed = JSON.parse(readFileSync(holdsFile, 'utf8'));
+            if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
+                return {};
+            const holds = {};
+            for (const [key, raw] of Object.entries(parsed)) {
+                const h = raw;
+                if (h &&
+                    (typeof h.status === 'number' || h.status === null) &&
+                    typeof h.failedAt === 'number' &&
+                    typeof h.retryAt === 'number') {
+                    holds[key] = {
+                        status: h.status,
+                        failedAt: h.failedAt,
+                        retryAt: h.retryAt,
+                        ...(typeof h.unauthorized === 'number' ? { unauthorized: h.unauthorized } : {}),
+                        ...(typeof h.token === 'string' ? { token: h.token } : {}),
+                    };
+                }
+            }
+            return holds;
+        }
+        catch {
+            return {};
+        }
+    }
+    function writeHolds(holds) {
+        try {
+            if (Object.keys(holds).length === 0) {
+                rmSync(holdsFile, { force: true });
+                return;
+            }
+            writeSecret(holdsFile, JSON.stringify(holds), 'w');
+        }
+        catch {
+            // Best-effort: one more request to a refusing organisation at worst.
+        }
+    }
+    return { append, flush, hasDue };
+}
+/** The hold an organisation gets after a failed post (400/403/404/422 | 401 | the rest). */
+function holdAfter(error, previous, at, fingerprint) {
+    const status = httpStatusOf(error);
+    if (status !== null && HELD_STATUSES.has(status)) {
+        return { status, failedAt: at, retryAt: at + REPORT_HOLD_MS };
+    }
+    if (status === 401) {
+        const unauthorized = previous?.status === 401 && previous.token === fingerprint
+            ? (previous.unauthorized ?? 0) + 1
+            : 1;
+        return {
+            status,
+            failedAt: at,
+            retryAt: at + unauthorizedBackoffMs(unauthorized),
+            unauthorized,
+            token: fingerprint,
+        };
+    }
+    return { status, failedAt: at, retryAt: at + transientRetryMs(retryAfterOf(error)) };
+}
+/** Due when not held, when the hold is over, or when a 401 hold was set by another token. */
+function isDue(hold, at, fingerprint) {
+    if (!hold || at >= hold.retryAt)
+        return true;
+    return hold.status === 401 && hold.token !== fingerprint;
+}
+/**
+ * Unreadable lines and records without a backend, an organisation or a body are
+ * dropped. A record without a backend was written before records named theirs
+ * (1.7.0): which backend it was for is not guessed.
+ */
+function parseRecords(content) {
+    const records = [];
+    for (const line of content.split('\n')) {
+        const trimmed = line.trim();
+        if (!trimmed)
+            continue;
+        try {
+            const p = JSON.parse(trimmed);
+            if (typeof p.apiBase === 'string' &&
+                p.apiBase &&
+                typeof p.organizationId === 'string' &&
+                p.organizationId &&
+                p.body &&
+                typeof p.body === 'object' &&
+                typeof p.bufferedAt === 'string') {
+                records.push(p);
+            }
+        }
+        catch {
+            // Corrupt line: drop it
+        }
+    }
+    return records;
+}
+/** None older than the age cap, at most the newest N, oldest first. */
+function capRecords(records, at) {
+    const dated = records
+        .map((record) => ({ record, t: Date.parse(record.bufferedAt) }))
+        .filter(({ t }) => Number.isFinite(t) && at - t <= REPORT_BUFFER_MAX_AGE_MS);
+    dated.sort((a, b) => a.t - b.t);
+    return dated.slice(-REPORT_BUFFER_MAX_RECORDS).map(({ record }) => record);
+}
+//# sourceMappingURL=buffer.js.map

package/dist/mcp/report/buffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buffer.js","sourceRoot":"","sources":["../../../src/mcp/report/buffer.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,uBAAuB;AACvB,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,8EAA8E;AAC9E,0EAA0E;AAC1E,qEAAqE;AACrE,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,mDAAmD;AAEnD,OAAO,EACL,cAAc,EACd,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,MAAM,EACN,QAAQ,EACR,UAAU,EACV,aAAa,EACb,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,cAAc,GACf,MAAM,gBAAgB,CAAC;AAGxB,sFAAsF;AACtF,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAE1C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AA6CpD,mEAAmE;AACnE,SAAS,OAAO,CAAC,MAA0D;IACzE,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAAsE,EAAE;IAExE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAEjC,SAAS,SAAS;QAChB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;IAED,SAAS,WAAW,CAAC,IAAY,EAAE,OAAe,EAAE,IAAe;QACjE,SAAS,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,GAAG;YAAE,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;;YAC9E,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,MAAM,CAAC,OAAe,EAAE,cAAsB,EAAE,IAAmB;QAC1E,IAAI,CAAC;YACH,MAAM,MAAM,GAAmB;gBAC7B,OAAO;gBACP,cAAc;gBACd,IAAI;gBACJ,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;aAC1C,CAAC;YACF,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IAED,KAAK,UAAU,KAAK,CAClB,OAAe,EACf,KAAa,EACb,IAAoE;QAEpE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACjE,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACzD,IAAI,CAAC;YACH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACzE,CAAC;gBAAS,CAAC;YACT,WAAW,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAED,mFAAmF;IACnF,KAAK,UAAU,WAAW,CACxB,OAAe,EACf,KAAa,EACb,IAAoE;QAEpE,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;QACtE,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAE1B,MAAM,IAAI,GAAqB,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,qCAAqC;QACxE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,2DAA2D;YAC3D,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;gBACnE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,SAAS,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC/C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACjB,KAAK,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/E,UAAU,CAAC,KAAK,CAAC,CAAC;QAElB,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;YAC1B,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;gBAAE,SAAS;YACzC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC;YAC5C,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,GAAG,GAAG,OAAO,CAAC;gBAAE,OAAO,GAAG,GAAG,CAAC;QAC9E,CAAC;QAED,uEAAuE;QACvE,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtE,WAAW,CAAC,UAAU,EAAE,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,6EAA6E;QAC/E,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS,MAAM,CAAC,OAAe,EAAE,KAAa;QAC5C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;YAC9B,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;gBAAE,OAAO,KAAK,CAAC;YACxD,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO,KAAK,CAAC;YACzD,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9C,qEAAqE;YACrE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACxF,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;YAC1B,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAC5C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,SAAS,UAAU;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YACrC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,aAAa,CAAC,KAAa;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YACrC,OAAO,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,SAAS,WAAW;QAClB,IAAI,CAAC;YACH,SAAS,EAAE,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC3C,IAAI,CAAC;oBACH,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrC,CAAC;wBAAS,CAAC;oBACT,SAAS,CAAC,EAAE,CAAC,CAAC;gBAChB,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBACjE,IAAI,CAAC,WAAW,EAAE;oBAAE,OAAO,KAAK,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,uEAAuE;IACvE,SAAS,WAAW;QAClB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,GAAG,mBAAmB,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,SAAS;QAChB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,UAAU,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IAED,SAAS,WAAW;QAClB,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;QAC/D,CAAC;IACH,CAAC;IAED,SAAS,SAAS;QAChB,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,EAAE,CAAC;YACtC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;YACpE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,CAAC;YACtF,MAAM,KAAK,GAAU,EAAE,CAAC;YACxB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChD,MAAM,CAAC,GAAG,GAA8B,CAAC;gBACzC,IACE,CAAC;oBACD,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC;oBACnD,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;oBAC9B,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,EAC7B,CAAC;oBACD,KAAK,CAAC,GAAG,CAAC,GAAG;wBACX,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,GAAG,CAAC,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC/E,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC3D,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,SAAS,UAAU,CAAC,KAAY;QAC9B,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,4FAA4F;AAC5F,SAAS,SAAS,CAChB,KAAc,EACd,QAA6B,EAC7B,EAAU,EACV,WAAmB;IAEnB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,cAAc,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,YAAY,GAChB,QAAQ,EAAE,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW;YACxD,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC;YAClC,CAAC,CAAC,CAAC,CAAC;QACR,OAAO;YACL,MAAM;YACN,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,EAAE,GAAG,qBAAqB,CAAC,YAAY,CAAC;YACjD,YAAY;YACZ,KAAK,EAAE,WAAW;SACnB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,gBAAgB,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AACvF,CAAC;AAED,6FAA6F;AAC7F,SAAS,KAAK,CAAC,IAAyB,EAAE,EAAU,EAAE,WAAmB;IACvE,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;YACzD,IACE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;gBAC7B,CAAC,CAAC,OAAO;gBACT,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;gBACpC,CAAC,CAAC,cAAc;gBAChB,CAAC,CAAC,IAAI;gBACN,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAC1B,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,EAChC,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAmB,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,uEAAuE;AACvE,SAAS,UAAU,CAAC,OAAyB,EAAE,EAAU;IACvD,MAAM,KAAK,GAAG,OAAO;SAClB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;SAC/D,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,wBAAwB,CAAC,CAAC;IAC/E,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC"}

package/dist/mcp/report/coalesce.js

@@ -0,0 +1,165 @@
+// ─── Coalescing of call events ────────────────────────────────────────────────
+//
+// An agent looping on a refused tool would otherwise send thousands of events.
+// Identical events (kind, reason, tool) inside COALESCE_WINDOW_MS are ONE event:
+// one eventId whose count rises. The gateway upserts by eventId, so a resend
+// with a higher count replaces the earlier one.
+import { randomUUID } from 'node:crypto';
+import { COALESCE_WINDOW_MS, REPORT_BUFFER_MAX_RECORDS, REPORT_MAX_EVENT_COUNT, REPORT_MAX_EVENTS, } from './constants.js';
+const CATEGORY_PATTERN = /^[a-z0-9_-]{1,64}$/;
+const SEVERITY_PATTERN = /^[a-z]{1,16}$/;
+const RULE_PATTERN = /^[a-z0-9._-]{1,64}$/;
+const DIGEST_PATTERN = /^d1:[0-9a-f]{64}$/;
+const MAX_RULES = 5;
+const MAX_TOOL_NAME = 128;
+export function toReportVerdict(verdict) {
+    if (verdict === undefined)
+        return undefined;
+    if (verdict === 'ok')
+        return 'clean';
+    if (verdict === 'malicious' || verdict === 'suspicious')
+        return verdict;
+    return 'unverified';
+}
+/** A tool name as it leaves the machine: the gateway's charset and length. */
+export function reportToolName(name) {
+    const cleaned = name.replace(/[^A-Za-z0-9._/-]/g, '_').slice(0, MAX_TOOL_NAME);
+    return cleaned === '' ? 'unnamed' : cleaned;
+}
+const SWEEP_EVERY_MS = 1_000;
+export class EventCoalescer {
+    now;
+    windowMs;
+    newId;
+    maxGroups;
+    groups = new Map();
+    lastSweepMs = -Infinity;
+    constructor(opts = {}) {
+        this.now = opts.now ?? Date.now;
+        this.windowMs = opts.windowMs ?? COALESCE_WINDOW_MS;
+        this.newId = opts.newId ?? randomUUID;
+        // Nothing may be sent for a long time (no organization, offline): the
+        // memory a proxy keeps for its reports stays bounded all the same.
+        this.maxGroups = Math.max(1, opts.maxGroups ?? REPORT_BUFFER_MAX_RECORDS);
+    }
+    add(input) {
+        const nowMs = this.now();
+        // On the hot path: forgetting closed groups is worth one pass a second,
+        // not one per call (`pending()` sweeps before reading anyway).
+        if (nowMs < this.lastSweepMs || nowMs - this.lastSweepMs >= SWEEP_EVERY_MS)
+            this.sweep(nowMs);
+        const tool = reportToolName(input.tool);
+        const key = groupKey(input.kind, input.reason, tool);
+        const iso = new Date(nowMs).toISOString();
+        let group = this.groups.get(key);
+        if (group !== undefined && nowMs - group.firstMs >= this.windowMs) {
+            // The window is over. A group still unsent keeps its own key slot until
+            // replaced here, so it is lost only if it was never sent: keep it under
+            // its eventId by moving it aside.
+            if (group.dirty)
+                this.groups.set(`${key}#${group.event.eventId}`, group);
+            group = undefined;
+        }
+        if (group === undefined) {
+            group = {
+                event: {
+                    eventId: this.newId(),
+                    kind: input.kind,
+                    reason: input.reason,
+                    tool,
+                    count: 0,
+                    firstAt: iso,
+                    lastAt: iso,
+                },
+                firstMs: nowMs,
+                lastMs: nowMs,
+                dirty: true,
+            };
+            this.groups.set(key, group);
+            this.evictOldest();
+        }
+        const e = group.event;
+        // Stops at the gateway's bound: past it, the group's every later send
+        // would be refused and the event lost. `lastAt` still moves on below.
+        e.count = Math.min(e.count + 1, REPORT_MAX_EVENT_COUNT);
+        // `lastAt` only moves forward. A wall clock can step back (NTP, a resume),
+        // and an event that ends before it starts is refused by the gateway: one such
+        // event would poison its whole report, and the report would keep coming back
+        // from the buffer for the 7 days it lives there.
+        if (nowMs > group.lastMs) {
+            group.lastMs = nowMs;
+            e.lastAt = iso;
+        }
+        if (input.digest !== undefined && DIGEST_PATTERN.test(input.digest))
+            e.toolDigest = input.digest;
+        const verdict = toReportVerdict(input.verdict);
+        if (verdict !== undefined)
+            e.verdict = verdict;
+        if (input.category !== undefined && CATEGORY_PATTERN.test(input.category))
+            e.category = input.category;
+        if (input.severity !== undefined && SEVERITY_PATTERN.test(input.severity))
+            e.severity = input.severity;
+        if (input.rules !== undefined) {
+            const merged = new Set(e.rules ?? []);
+            for (const r of input.rules) {
+                if (RULE_PATTERN.test(r))
+                    merged.add(r);
+            }
+            const rules = [...merged].slice(0, MAX_RULES);
+            if (rules.length > 0)
+                e.rules = rules;
+        }
+        group.dirty = true;
+    }
+    /** Dirty groups, oldest first, copied. */
+    pending(limit = REPORT_MAX_EVENTS) {
+        this.sweep(this.now());
+        return [...this.groups.values()]
+            .filter((g) => g.dirty)
+            .sort((a, b) => a.firstMs - b.firstMs)
+            .slice(0, limit)
+            .map((g) => ({ ...g.event, ...(g.event.rules ? { rules: [...g.event.rules] } : {}) }));
+    }
+    markSent(sent) {
+        for (const s of sent) {
+            for (const g of this.groups.values()) {
+                if (g.event.eventId === s.eventId && g.event.count === s.count)
+                    g.dirty = false;
+            }
+        }
+    }
+    hasPending() {
+        for (const g of this.groups.values())
+            if (g.dirty)
+                return true;
+        return false;
+    }
+    /** Over the bound, the oldest groups go first, sent or not. */
+    evictOldest() {
+        while (this.groups.size > this.maxGroups) {
+            let oldestKey;
+            let oldestMs = Infinity;
+            for (const [key, g] of this.groups) {
+                if (g.firstMs < oldestMs) {
+                    oldestMs = g.firstMs;
+                    oldestKey = key;
+                }
+            }
+            if (oldestKey === undefined)
+                return;
+            this.groups.delete(oldestKey);
+        }
+    }
+    /** Closed and clean groups are forgotten. */
+    sweep(nowMs) {
+        this.lastSweepMs = nowMs;
+        for (const [key, g] of this.groups) {
+            if (!g.dirty && nowMs - g.firstMs >= this.windowMs)
+                this.groups.delete(key);
+        }
+    }
+}
+function groupKey(kind, reason, tool) {
+    return `${kind}|${reason}|${tool}`;
+}
+//# sourceMappingURL=coalesce.js.map

package/dist/mcp/report/coalesce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coalesce.js","sourceRoot":"","sources":["../../../src/mcp/report/coalesce.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,EAAE;AACF,+EAA+E;AAC/E,iFAAiF;AACjF,6EAA6E;AAC7E,gDAAgD;AAEhD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAUxB,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAC9C,MAAM,gBAAgB,GAAG,eAAe,CAAC;AACzC,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAC3C,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,aAAa,GAAG,GAAG,CAAC;AAE1B,MAAM,UAAU,eAAe,CAAC,OAA4B;IAC1D,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACrC,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,YAAY;QAAE,OAAO,OAAO,CAAC;IACxE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC/E,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED,MAAM,cAAc,GAAG,KAAK,CAAC;AAU7B,MAAM,OAAO,cAAc;IACR,GAAG,CAAe;IAClB,QAAQ,CAAS;IACjB,KAAK,CAAe;IACpB,SAAS,CAAS;IAClB,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC3C,WAAW,GAAG,CAAC,QAAQ,CAAC;IAEhC,YACE,OAA4F,EAAE;QAE9F,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,kBAAkB,CAAC;QACpD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC;QACtC,sEAAsE;QACtE,mEAAmE;QACnE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,yBAAyB,CAAC,CAAC;IAC5E,CAAC;IAED,GAAG,CAAC,KAAqB;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,wEAAwE;QACxE,+DAA+D;QAC/D,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,cAAc;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9F,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClE,wEAAwE;YACxE,wEAAwE;YACxE,kCAAkC;YAClC,IAAI,KAAK,CAAC,KAAK;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;YACzE,KAAK,GAAG,SAAS,CAAC;QACpB,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,GAAG;gBACN,KAAK,EAAE;oBACL,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE;oBACrB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,IAAI;oBACJ,KAAK,EAAE,CAAC;oBACR,OAAO,EAAE,GAAG;oBACZ,MAAM,EAAE,GAAG;iBACZ;gBACD,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,IAAI;aACZ,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QACtB,sEAAsE;QACtE,sEAAsE;QACtE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACxD,2EAA2E;QAC3E,8EAA8E;QAC9E,6EAA6E;QAC7E,iDAAiD;QACjD,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACzB,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;YACrB,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC;QACjB,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;QACjG,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,OAAO,KAAK,SAAS;YAAE,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;QAC/C,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACvG,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACvG,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC5B,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1C,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;QACxC,CAAC;QACD,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,0CAA0C;IAC1C,OAAO,CAAC,QAAgB,iBAAiB;QACvC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACvB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;aAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;aACtB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;aACrC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3F,CAAC;IAED,QAAQ,CAAC,IAA0D;QACjE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;oBAAE,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;YAClF,CAAC;QACH,CAAC;IACH,CAAC;IAED,UAAU;QACR,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+DAA+D;IACvD,WAAW;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,IAAI,SAA6B,CAAC;YAClC,IAAI,QAAQ,GAAG,QAAQ,CAAC;YACxB,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACnC,IAAI,CAAC,CAAC,OAAO,GAAG,QAAQ,EAAE,CAAC;oBACzB,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC;oBACrB,SAAS,GAAG,GAAG,CAAC;gBAClB,CAAC;YACH,CAAC;YACD,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO;YACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,6CAA6C;IACrC,KAAK,CAAC,KAAa;QACzB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,IAAkB,EAAE,MAAsB,EAAE,IAAY;IACxE,OAAO,GAAG,IAAI,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;AACrC,CAAC"}

package/dist/mcp/report/constants.js

@@ -0,0 +1,51 @@
+// ─── Constants of MCP call reporting (contract C6 and the validation of C4) ──
+/** Events of one report, at most. */
+export const REPORT_MAX_EVENTS = 200;
+/** Repeated events of one (server, tool, kind, reason) are one event over this window. */
+export const COALESCE_WINDOW_MS = 600_000;
+/** The first send goes this long after an event. */
+export const FIRST_SEND_DELAY_MS = 5_000;
+/** Then at most one send per this interval. */
+export const MIN_SEND_INTERVAL_MS = 60_000;
+/** The inventory is resent at least this often. */
+export const INVENTORY_REFRESH_MS = 3_600_000;
+/** The report buffer holds this many records, at most... */
+export const REPORT_BUFFER_MAX_RECORDS = 500;
+/** ...and none older than this. */
+export const REPORT_BUFFER_MAX_AGE_MS = 7 * 24 * 3_600_000;
+/** How long an organisation is left alone after a 400, 403, 404 or 422. */
+export const REPORT_HOLD_MS = 3_600_000;
+/** Timeout of one report request. */
+export const REPORT_HTTP_TIMEOUT_MS = 5_000;
+/** `servers/check` runs this often for the whole life of the proxy. */
+export const SERVER_CHECK_INTERVAL_MS = 900_000;
+/** A known organisation block stays applied this long while the backend cannot be reached. */
+export const ORG_BLOCK_STICKY_MAX_MS = 7 * 24 * 3_600_000;
+// What a report may carry, field by field (C4). Anything else is not sent.
+/** A config entry name or a launcher name, as it leaves the machine. */
+export const LABEL_PATTERN = /^[A-Za-z0-9._-]{1,64}$/;
+/**
+ * A lowercase hostname, no scheme, port or path: labels of 1 to 63 characters
+ * that neither start nor end with a hyphen, 253 characters at most. The
+ * gateway's pattern, so an empty label (`mcp..example.com`) or a trailing dot
+ * is refused here instead of costing the whole report a 400.
+ */
+export const HOST_PATTERN = /^(?=.{1,253}$)[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$/;
+/** At most 214 characters in all, scope included: npm's own limit (ruling R30). */
+export const NPM_NAME_PATTERN = /^(?=.{1,214}$)(@[a-z0-9._~-]+\/)?[a-z0-9._~-]{1,214}$/;
+export const PYPI_NAME_PATTERN = /^[A-Za-z0-9._-]{1,128}$/;
+export const PACKAGE_VERSION_PATTERN = /^[A-Za-z0-9.+_-]{1,64}$/;
+export const SERVER_KEY_PATTERN = /^[a-f0-9]{64}$/;
+/** The gateway's pattern for `vibedefendVersion`: semver, at most one pre-release and one build part. */
+export const VIBEDEFEND_VERSION_PATTERN = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
+/** `server.toolCount` and `server.flaggedToolCount`, at most (the gateway refuses more). */
+export const REPORT_MAX_TOOL_COUNT = 100_000;
+/** An event's `count`, at most (the gateway refuses more). */
+export const REPORT_MAX_EVENT_COUNT = 100_000;
+/**
+ * How far ahead of this machine's clock an organisation block's confirmation
+ * may be and still count: a clock set back a little while offline (an NTP
+ * correction) must not lift a block that is in force.
+ */
+export const ORG_BLOCK_CLOCK_SKEW_MS = 5 * 60_000;
+//# sourceMappingURL=constants.js.map

package/dist/mcp/report/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/mcp/report/constants.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,qCAAqC;AACrC,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,0FAA0F;AAC1F,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAC1C,oDAAoD;AACpD,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AACzC,+CAA+C;AAC/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C,mDAAmD;AACnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAE9C,4DAA4D;AAC5D,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAC7C,mCAAmC;AACnC,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;AAC3D,2EAA2E;AAC3E,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;AACxC,qCAAqC;AACrC,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAE5C,uEAAuE;AACvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAChD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;AAE1D,2EAA2E;AAE3E,wEAAwE;AACxE,MAAM,CAAC,MAAM,aAAa,GAAG,wBAAwB,CAAC;AACtD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GACvB,gGAAgG,CAAC;AACnG,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,uDAAuD,CAAC;AACxF,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAC3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AACnD,yGAAyG;AACzG,MAAM,CAAC,MAAM,0BAA0B,GAAG,0DAA0D,CAAC;AACrG,4FAA4F;AAC5F,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAC7C,8DAA8D;AAC9D,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAC9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,MAAM,CAAC"}