@datasynx/agentic-ai-cartography 2.6.0 → 2.7.0

package/dist/api-bin.js

@@ -2,8 +2,8 @@
 import {
   parseApiArgs,
   startApi
-} from "./chunk-PQ7Q6MI5.js";
-import "./chunk-GA4427LB.js";
+} from "./chunk-TBPGFEMQ.js";
+import "./chunk-YVV6NIT2.js";
 import "./chunk-QQOQBE2A.js";
 import "./chunk-2SZ5QHGH.js";
 

package/dist/{chunk-X3UWUX3G.js → chunk-HLWNO3RF.js}

@@ -3,6 +3,7 @@ import {
   AuthorizationError,
   CartographyDB,
   RulesetSchema,
+  SCHEMA_VERSION,
   SqliteCredentialStore,
   assertSafeBind,
   authorize,
@@ -24,7 +25,7 @@ import {
   sanitizeUntrusted,
   stableStringify,
   stripSensitive
-} from "./chunk-GA4427LB.js";
+} from "./chunk-YVV6NIT2.js";
 import {
   EdgeSchema,
   NODE_TYPES,
@@ -1538,7 +1539,7 @@ async function executeNlQuery(db, sessionId, search, intent, opts = {}) {
 
 // src/mcp/server.ts
 var SERVER_NAME = "cartography";
-var SERVER_VERSION = "2.6.0";
+var SERVER_VERSION = "2.7.0";
 var SERVICE_TYPES = NODE_TYPE_GROUPS.web;
 var DATA_TYPES = NODE_TYPE_GROUPS.data;
 var lexicalSearch = async (db, sessionId, query, opts) => db.searchNodes(sessionId, query, { types: opts.types, limit: opts.limit }).map((node) => ({ node }));
@@ -2106,6 +2107,16 @@ async function runHttp(factory, opts = {}) {
   const httpServer = http.createServer(async (req, res) => {
     try {
       const url = req.url ?? "";
+      const probePath = new URL(url || "/", "http://probe").pathname;
+      if (probePath === "/healthz") {
+        res.writeHead(200, { "content-type": "application/json" }).end('{"status":"ok"}');
+        return;
+      }
+      if (probePath === "/readyz") {
+        const r = opts.readiness ? opts.readiness() : { ready: true };
+        res.writeHead(r.ready ? 200 : 503, { "content-type": "application/json" }).end(JSON.stringify({ status: r.ready ? "ready" : "unready" }));
+        return;
+      }
       const isIngest = url.startsWith("/ingest") && opts.onIngest !== void 0;
       if (!url.startsWith("/mcp") && !isIngest) {
         res.writeHead(404, { "content-type": "application/json" }).end('{"error":"not found"}');
@@ -2133,7 +2144,7 @@ async function runHttp(factory, opts = {}) {
           return;
         }
         const out = onIngest(value);
-        res.writeHead(out.status, { "content-type": "application/json" }).end(JSON.stringify(out.body));
+        res.writeHead(out.status, { "content-type": "application/json", ...out.headers ?? {} }).end(JSON.stringify(out.body));
         return;
       }
       const sessionId = req.headers["mcp-session-id"];
@@ -2461,7 +2472,7 @@ var ContributorSchema = z3.object({
 });
 var IngestEnvelopeSchema = z3.object({
   schemaVersion: z3.literal(INGEST_SCHEMA_VERSION),
-  org: z3.string().min(1).optional(),
+  org: z3.string().min(1).max(128).optional(),
   items: z3.array(z3.object({
     contentHash: z3.string(),
     kind: z3.enum(["node", "edge"]),
@@ -2549,6 +2560,7 @@ function ingestEnvelope(store, envelope, opts = {}) {
 
 // src/central/server.ts
 function createIngestHandler(store, opts = {}) {
+  const quota = opts.quota;
   return (body) => {
     const parsed = IngestEnvelopeSchema.safeParse(body);
     if (!parsed.success) {
@@ -2556,6 +2568,14 @@ function createIngestHandler(store, opts = {}) {
       logWarn("ingest: rejected invalid envelope", { issues });
       return { status: 400, body: { error: "invalid envelope", issues } };
     }
+    if (quota) {
+      const org = normalizeTenant(parsed.data.org ?? opts.defaultOrg);
+      const decision = quota.take(org);
+      if (!decision.allowed) {
+        logWarn("ingest: rate limited", { org, retryAfterSec: decision.retryAfterSec });
+        return { status: 429, body: { error: "too many requests" }, headers: { "retry-after": String(decision.retryAfterSec) } };
+      }
+    }
     try {
       const result = ingestEnvelope(store, parsed.data, opts);
       return { status: 200, body: result };
@@ -2566,7 +2586,41 @@ function createIngestHandler(store, opts = {}) {
   };
 }
 
+// src/central/quota.ts
+var DEFAULT_INGEST_QUOTA = { capacity: 120, refillMs: 6e4 };
+var MAX_KEYS = 1e4;
+var RateLimiter = class {
+  constructor(cfg = DEFAULT_INGEST_QUOTA, now = () => Date.now()) {
+    this.cfg = cfg;
+    this.now = now;
+  }
+  buckets = /* @__PURE__ */ new Map();
+  /** Consume one token for `key`. Returns whether the request is allowed (+ Retry-After when not). */
+  take(key) {
+    const t = this.now();
+    const ratePerMs = this.cfg.capacity / this.cfg.refillMs;
+    let b = this.buckets.get(key);
+    if (!b) {
+      if (this.buckets.size >= MAX_KEYS) {
+        const oldest = this.buckets.keys().next().value;
+        if (oldest !== void 0) this.buckets.delete(oldest);
+      }
+      b = { tokens: this.cfg.capacity, last: t };
+      this.buckets.set(key, b);
+    }
+    b.tokens = Math.min(this.cfg.capacity, b.tokens + Math.max(0, t - b.last) * ratePerMs);
+    b.last = t;
+    if (b.tokens >= 1) {
+      b.tokens -= 1;
+      return { allowed: true, retryAfterSec: 0 };
+    }
+    const waitMs = (1 - b.tokens) / ratePerMs;
+    return { allowed: false, retryAfterSec: Math.max(1, Math.ceil(waitMs / 1e3)) };
+  }
+};
+
 // src/mcp/start.ts
+var EXPECTED_USER_VERSION = SCHEMA_VERSION;
 function parseMcpArgs(argv) {
   const opts = {};
   for (let i = 0; i < argv.length; i++) {
@@ -2626,11 +2680,21 @@ async function startMcp(opts = {}) {
     if (serverMode) {
       const store = new SqliteStoreBackend(db);
       const anonMode = opts.anonMode ?? "reject";
-      onIngest = createIngestHandler(store, { anonMode, defaultOrg: tenant });
+      const quota = new RateLimiter(opts.ingestQuota ?? DEFAULT_INGEST_QUOTA);
+      onIngest = createIngestHandler(store, { anonMode, defaultOrg: tenant, quota });
     }
+    const readiness = () => {
+      try {
+        const v = db.rawConnection().pragma("user_version", { simple: true });
+        return { ready: v === EXPECTED_USER_VERSION, detail: { schema: v } };
+      } catch (err) {
+        return { ready: false, detail: { error: err instanceof Error ? err.message : String(err) } };
+      }
+    };
     await runHttp(factory, {
       port,
       host,
+      readiness,
       auth: { store: authStore, ...opts.authRequired ? { required: true } : {} },
       defaultTenant: tenant,
       ...opts.allowedHosts ? { allowedHosts: opts.allowedHosts } : {},
@@ -2659,4 +2723,4 @@ export {
   parseMcpArgs,
   startMcp
 };
-//# sourceMappingURL=chunk-X3UWUX3G.js.map
+//# sourceMappingURL=chunk-HLWNO3RF.js.map