@fml-inc/fml 0.8.11-rc.1 → 0.8.12-rc.1

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "fml",
-  "version": "0.8.11-rc.1",
+  "version": "0.8.12-rc.1",
   "description": "FML agent tools for Claude Code",
   "mcpServers": {
     "fml": {

package/README.md

@@ -10,7 +10,8 @@ not install or run a second Panopticon package.
 
 ## Install
 
-Node.js 22.19 or newer and npm are required.
+Node.js 22.23.4+ (22.x), 24.22.1+ (24.x), or 26.12.1+ (26.x), and npm are required.
+These minimum patch versions include the October 2026 Node.js security fixes.
 
 On macOS, Linux, and compatible Bash environments, install with:
 

package/dist/{chunk-B46WIVL7.js → chunk-D5LBADQV.js}

@@ -53,7 +53,7 @@ var PACKAGE_NAME = "@fml-inc/fml";
 var UPDATE_TIMEOUT_MS = 12e4;
 var SETUP_TIMEOUT_MS = 3e5;
 function getCurrentVersion() {
-  return true ? "0.8.11-rc.1+80d59e99" : "unknown";
+  return true ? "0.8.12-rc.1+bc772cee" : "unknown";
 }
 function parseVersion(version) {
   const match = SEMVER_PATTERN.exec(version);

package/dist/cli.js

@@ -7,7 +7,7 @@ import {
   execBinSync,
   handleUpdate,
   resolveBin
-} from "./chunk-B46WIVL7.js";
+} from "./chunk-D5LBADQV.js";
 import {
   openObserverLog,
   readJsonFile,
@@ -132,7 +132,7 @@ var STOP_TIMEOUT_MS = 5e3;
 var FORCE_STOP_TIMEOUT_MS = 2e3;
 var POLL_INTERVAL_MS = 50;
 function expectedObserverVersion() {
-  return true ? "0.8.11-rc.1+80d59e99" : "dev";
+  return true ? "0.8.12-rc.1+bc772cee" : "dev";
 }
 function delay(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
@@ -3012,12 +3012,27 @@ import path17 from "path";
 
 // ../../packages/agent-targets/src/install/hooks/codex.ts
 import { createHash as createHash3 } from "crypto";
-import { isDeepStrictEqual as isDeepStrictEqual2 } from "util";
+
+// ../../packages/agent-targets/src/config-value.ts
+import { isDeepStrictEqual } from "util";
+function normalizeRecords(value) {
+  if (Array.isArray(value)) return value.map(normalizeRecords);
+  if (value === null || typeof value !== "object") return value;
+  const prototype = Object.getPrototypeOf(value);
+  if (prototype !== null && prototype !== Object.prototype) return value;
+  return Object.fromEntries(
+    Object.entries(value).map(([key, child]) => [key, normalizeRecords(child)])
+  );
+}
+function isConfigValueEqual(left, right) {
+  return isDeepStrictEqual(normalizeRecords(left), normalizeRecords(right));
+}
+
+// ../../packages/agent-targets/src/install/hooks/codex.ts
 import path14 from "path";
 import { parse as parse2 } from "smol-toml";
 
 // ../../packages/agent-targets/src/toml.ts
-import { isDeepStrictEqual } from "util";
 import { parse, stringify } from "smol-toml";
 function asRecord2(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -3235,7 +3250,7 @@ function updateTomlPaths(source, updated, updates) {
       "unsupported inline TOML layout; preserving the existing configuration"
     );
   }
-  if (!isDeepStrictEqual(reparsed, updated)) {
+  if (!isConfigValueEqual(reparsed, updated)) {
     throw new Error(
       "unsupported inline TOML layout; preserving the existing configuration"
     );
@@ -3801,7 +3816,7 @@ function hasOwn2(record, key) {
 function changedValuePath(paths, original, updated, key, parentPath) {
   const originalHasKey = hasOwn2(original, key);
   const updatedHasKey = hasOwn2(updated, key);
-  if (originalHasKey === updatedHasKey && (!originalHasKey || isDeepStrictEqual2(original[key], updated[key]))) {
+  if (originalHasKey === updatedHasKey && (!originalHasKey || isConfigValueEqual(original[key], updated[key]))) {
     return;
   }
   paths.push([...parentPath, key]);
@@ -4081,11 +4096,11 @@ function planInstall(context) {
   }
   hooksFile.hooks = hooks;
   const mutations = [];
-  if (!isDeepStrictEqual2(hooksResult.data, hooksFile)) {
+  if (!isConfigValueEqual(hooksResult.data, hooksFile)) {
     const mutation = changedMutation(hooksSnapshot, jsonContents(hooksFile));
     if (mutation) mutations.push(mutation);
   }
-  if (!isDeepStrictEqual2(configResult.data, config2)) {
+  if (!isConfigValueEqual(configResult.data, config2)) {
     let after;
     try {
       after = updateCodexConfigToml(
@@ -4259,7 +4274,7 @@ function planUninstall(context) {
     const mutation = changedMutation(hooksSnapshot, after);
     if (mutation) mutations.push(mutation);
   }
-  if (!isDeepStrictEqual2(configResult.data, config2)) {
+  if (!isConfigValueEqual(configResult.data, config2)) {
     let after;
     try {
       after = updateCodexConfigToml(
@@ -4302,11 +4317,11 @@ var CODEX_HOOK_INSTALLER = Object.freeze({
 });
 
 // ../../packages/agent-targets/src/install/hooks/gemini.ts
-import { isDeepStrictEqual as isDeepStrictEqual4 } from "util";
+import { isDeepStrictEqual as isDeepStrictEqual3 } from "util";
 import path15 from "path";
 
 // ../../packages/agent-targets/src/mcp/jsonc.ts
-import { isDeepStrictEqual as isDeepStrictEqual3 } from "util";
+import { isDeepStrictEqual as isDeepStrictEqual2 } from "util";
 import {
   applyEdits,
   modify,
@@ -4334,7 +4349,7 @@ function longestCommonArraySubsequence(original, updated) {
   );
   for (let originalIndex2 = original.length - 1; originalIndex2 >= 0; --originalIndex2) {
     for (let updatedIndex2 = updated.length - 1; updatedIndex2 >= 0; --updatedIndex2) {
-      lengths[originalIndex2][updatedIndex2] = isDeepStrictEqual3(
+      lengths[originalIndex2][updatedIndex2] = isDeepStrictEqual2(
         original[originalIndex2],
         updated[updatedIndex2]
       ) ? (lengths[originalIndex2 + 1][updatedIndex2 + 1] ?? 0) + 1 : Math.max(
@@ -4347,7 +4362,7 @@ function longestCommonArraySubsequence(original, updated) {
   let originalIndex = 0;
   let updatedIndex = 0;
   while (originalIndex < original.length && updatedIndex < updated.length) {
-    if (isDeepStrictEqual3(original[originalIndex], updated[updatedIndex])) {
+    if (isDeepStrictEqual2(original[originalIndex], updated[updatedIndex])) {
       matches.push([originalIndex, updatedIndex]);
       originalIndex += 1;
       updatedIndex += 1;
@@ -4403,7 +4418,7 @@ function arrayDiff(original, updated, path32) {
   return updates;
 }
 function jsoncUpdatesForObjectDiff(original, updated, path32 = []) {
-  if (isDeepStrictEqual3(original, updated)) return [];
+  if (isDeepStrictEqual2(original, updated)) return [];
   if (Array.isArray(original) && Array.isArray(updated)) {
     return arrayDiff(original, updated, path32);
   }
@@ -4608,7 +4623,7 @@ function planInstall2(context) {
   }
   settings.hooks = hooks;
   migrateDisabledHookIdentifiers(settings, replacedDisabledIdentifiers);
-  if (isDeepStrictEqual4(result.data, settings)) {
+  if (isDeepStrictEqual3(result.data, settings)) {
     return unchangedPlan(TARGET_ID3, DISPLAY_NAME3, configPath4);
   }
   const after = updateJsoncObject(result.source, result.data, settings);
@@ -4642,7 +4657,7 @@ function planUninstall2(context) {
   if (!currentHooks) {
     const settings2 = structuredClone(result.data);
     removeUnusedManagedDisabledIdentifier(settings2);
-    if (isDeepStrictEqual4(result.data, settings2)) {
+    if (isDeepStrictEqual3(result.data, settings2)) {
       return unchangedPlan(TARGET_ID3, DISPLAY_NAME3, configPath4);
     }
     const after2 = updateJsoncObject(result.source, result.data, settings2);
@@ -4675,7 +4690,7 @@ function planUninstall2(context) {
   if (Object.keys(hooks).length === 0) delete settings.hooks;
   else settings.hooks = hooks;
   removeUnusedManagedDisabledIdentifier(settings);
-  if (isDeepStrictEqual4(result.data, settings)) {
+  if (isDeepStrictEqual3(result.data, settings)) {
     return unchangedPlan(TARGET_ID3, DISPLAY_NAME3, configPath4);
   }
   const after = updateJsoncObject(result.source, result.data, settings);
@@ -5038,7 +5053,6 @@ function removeMarketplaceLink(linkPath) {
 }
 
 // ../../packages/agent-targets/src/mcp/config.ts
-import { isDeepStrictEqual as isDeepStrictEqual5 } from "util";
 var FML_MCP_MANAGED_ENV = "FML_MCP_MANAGED";
 var FML_MCP_MANAGED_VALUE = "1";
 function asRecord4(value) {
@@ -5094,7 +5108,7 @@ function upsertFmlMcpServerConfig(existing, key, serverConfig) {
       [FML_MCP_MANAGED_ENV]: FML_MCP_MANAGED_VALUE
     }
   };
-  if (isDeepStrictEqual5(existingFml, nextFml)) {
+  if (isConfigValueEqual(existingFml, nextFml)) {
     return existing;
   }
   servers.fml = nextFml;
@@ -5135,18 +5149,17 @@ import path18 from "path";
 import { parse as parse4 } from "smol-toml";
 
 // ../../packages/agent-targets/src/mcp/toml.ts
-import { isDeepStrictEqual as isDeepStrictEqual6 } from "util";
 function hasOwn3(record, key) {
   return Object.prototype.hasOwnProperty.call(record, key);
 }
 function updateTomlTopLevelTable(source, original, updated, tableKey) {
-  if (isDeepStrictEqual6(original[tableKey], updated[tableKey])) return source;
+  if (isConfigValueEqual(original[tableKey], updated[tableKey])) return source;
   return updateTomlPaths(source, updated, [{ path: [tableKey] }]);
 }
 function updateTomlMcpConfig(source, original, updated, configKey) {
   const originalServers = configRecord(original[configKey]) ?? {};
   const updatedServers = configRecord(updated[configKey]) ?? {};
-  const rewriteFml = !isDeepStrictEqual6(
+  const rewriteFml = !isConfigValueEqual(
     originalServers.fml,
     updatedServers.fml
   );
@@ -5910,7 +5923,6 @@ import path29 from "path";
 import path25 from "path";
 
 // ../../packages/agent-targets/src/install/otel/shared.ts
-import { isDeepStrictEqual as isDeepStrictEqual7 } from "util";
 function asRecord5(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
@@ -5961,13 +5973,13 @@ function readJsonc(snapshot) {
   }
 }
 function jsoncMutation(snapshot, result, updated) {
-  if (isDeepStrictEqual7(result.data, updated)) return null;
+  if (isConfigValueEqual(result.data, updated)) return null;
   const after = Object.keys(updated).length === 0 ? null : updateJsoncObject(result.source, result.data, updated);
   return changedMutation2(snapshot, after);
 }
 function firstConflict(existing, managed) {
   for (const [key, value] of Object.entries(managed)) {
-    if (Object.prototype.hasOwnProperty.call(existing, key) && !isDeepStrictEqual7(existing[key], value)) {
+    if (Object.prototype.hasOwnProperty.call(existing, key) && !isConfigValueEqual(existing[key], value)) {
       return key;
     }
   }
@@ -5978,7 +5990,7 @@ function containsManagedValues(existing, managed) {
     if (!Object.prototype.hasOwnProperty.call(existing, key)) return false;
     const existingRecord = asRecord5(existing[key]);
     const expectedRecord = asRecord5(expected);
-    return existingRecord && expectedRecord ? containsManagedValues(existingRecord, expectedRecord) : isDeepStrictEqual7(existing[key], expected);
+    return existingRecord && expectedRecord ? containsManagedValues(existingRecord, expectedRecord) : isConfigValueEqual(existing[key], expected);
   });
 }
 function mergeManagedValues(existing, managed) {
@@ -6005,7 +6017,7 @@ function removeMatchingManagedValues(existing, managed) {
       if (Object.keys(nested.value).length === 0) delete value[key];
       else value[key] = nested.value;
       changed = true;
-    } else if (isDeepStrictEqual7(value[key], expected)) {
+    } else if (isConfigValueEqual(value[key], expected)) {
       delete value[key];
       changed = true;
     }
@@ -6216,7 +6228,6 @@ var CLAUDE_OTEL_INSTALLER = Object.freeze({
 });
 
 // ../../packages/agent-targets/src/install/otel/codex.ts
-import { isDeepStrictEqual as isDeepStrictEqual8 } from "util";
 import path26 from "path";
 import { parse as parse5 } from "smol-toml";
 var TARGET14 = agentTarget("codex");
@@ -6349,7 +6360,7 @@ function planInstall6(context) {
     result.data.otel,
     context.configOwnershipRecorded === true
   );
-  if (result.data.otel !== void 0 && !isDeepStrictEqual8(result.data.otel, managed) && !isPriorManagedConfig) {
+  if (result.data.otel !== void 0 && !isConfigValueEqual(result.data.otel, managed) && !isPriorManagedConfig) {
     return skippedPlan3(
       TARGET_ID6,
       DISPLAY_NAME6,
@@ -6358,7 +6369,7 @@ function planInstall6(context) {
       "existing user-level otel table is not managed by FML"
     );
   }
-  if (isDeepStrictEqual8(result.data.otel, managed)) {
+  if (isConfigValueEqual(result.data.otel, managed)) {
     return unchangedPlan2(TARGET_ID6, DISPLAY_NAME6, settingsPath2, AUTHENTICATION2);
   }
   const currentOtel = asRecord5(result.data.otel) ?? {};
@@ -9725,7 +9736,7 @@ async function handleConfigDetail(opts) {
 // src/commands/tools.ts
 import { readFileSync } from "fs";
 import path31 from "path";
-var pluginVersion = true ? "0.8.11-rc.1+80d59e99" : void 0;
+var pluginVersion = true ? "0.8.12-rc.1+bc772cee" : void 0;
 async function getApi() {
   const api = await getAuthenticatedClient();
   if (!api) {
@@ -9882,7 +9893,7 @@ if (process.argv.length <= 2 || process.argv.includes("--help") || process.argv.
   printBanner();
 }
 var program = new Command().name("fml").description("FML CLI and agent tools").version(
-  true ? "0.8.11-rc.1+80d59e99" : "dev"
+  true ? "0.8.12-rc.1+bc772cee" : "dev"
 );
 function formatCommandInventory(cmd, prefix = "") {
   const name = prefix ? `${prefix} ${cmd.name()}` : cmd.name();

package/dist/mcp/server.js

@@ -302,6 +302,102 @@ function registerTools(server2, environment = getActiveEnv()) {
       async (args) => handleTool(tool.mastraId, args)
     );
   }
+  const gcpBillingDateArgs = {
+    sourceId: z.string().min(1).describe(
+      "Organization-owned trusted source ID from gcp_billing_sources."
+    ),
+    startDate: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).describe("Inclusive usage start date in YYYY-MM-DD format."),
+    endDate: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).describe(
+      "Exclusive usage end date in YYYY-MM-DD format; date ranges may span at most 366 days."
+    )
+  };
+  const gcpBillingFilters = z.object({
+    projectIds: z.array(z.string().min(1).max(200)).max(50).optional().describe(
+      "Optional GCP project IDs. Omit to include account-level charges; an empty array matches no rows."
+    ),
+    serviceIds: z.array(z.string().max(200)).max(50).optional().describe("GCP service IDs."),
+    skuIds: z.array(z.string().max(200)).max(50).optional().describe("GCP SKU IDs."),
+    locations: z.array(z.string().max(200)).max(50).optional().describe("Usage locations."),
+    resourceNames: z.array(z.string().min(1).max(2048)).max(50).optional().describe(
+      "Canonical resource global names; an empty array matches no rows."
+    ),
+    labels: z.array(
+      z.object({
+        scope: z.enum(["resource", "project"]),
+        key: z.string().min(1).max(63),
+        values: z.array(z.string().max(63)).max(50)
+      }).strict()
+    ).max(10).optional().describe(
+      "Label selectors are ANDed; values within each selector are ORed. Empty values match no rows; an empty selector list is unrestricted. Empty label values are valid."
+    )
+  }).strict().optional().describe(
+    "Optional account billing filters; omitted means unrestricted within the account. Empty project/service/SKU/location/resource arrays or label value arrays match no rows; an empty labels list is unrestricted."
+  );
+  server2.tool(
+    "gcp_billing_sources",
+    "List the organization's saved GCP billing connection and account sources. A saved credential does not prove source access.",
+    {},
+    async () => handleTool("gcp-billing-sources", {})
+  );
+  server2.tool(
+    "gcp_billing_describe",
+    "Describe a detailed account billing export table or view, date coverage and export freshness. Account check is matched only when the bounded query returns rows; zero rows remain unverified.",
+    gcpBillingDateArgs,
+    async (args) => handleTool("gcp-billing-describe", args)
+  );
+  server2.tool(
+    "gcp_billing_summary",
+    "Summarize bounded billing account costs with optional project, service, SKU, location, resource and scoped label filters. Group by resource global name or a selected resource/project label. Account-level rows are included unless projects are filtered; credits count once and currencies stay separate. includeUsage defaults to false; true automatically adds SKU and usage/pricing unit groups, returning quantities as precision-preserving decimal strings without combining SKUs or units.",
+    {
+      ...gcpBillingDateArgs,
+      dimensions: z.array(
+        z.enum([
+          "usageDate",
+          "service",
+          "sku",
+          "location",
+          "project",
+          "invoiceMonth",
+          "costType",
+          "resource",
+          "label",
+          "usageUnit",
+          "pricingUnit"
+        ])
+      ).max(11).optional().describe(
+        "Optional grouping dimensions: usageDate, service, sku, location, project, invoiceMonth, costType, resource, label, usageUnit, pricingUnit. Resource uses canonical global names; selected-label grouping keeps unlabeled rows as null. Currency is always grouped separately."
+      ),
+      label: z.object({
+        scope: z.enum(["resource", "project"]),
+        key: z.string().min(1).max(63)
+      }).strict().optional().describe("Required exactly when dimensions includes label."),
+      includeUsage: z.boolean().optional().describe(
+        "Defaults to false (cost only). True returns usageAmount and usageAmountInPricingUnits as precision-preserving decimal strings and automatically adds sku, usageUnit and pricingUnit grouping without combining SKUs or units. Returned dimensions include these groups."
+      ),
+      filters: gcpBillingFilters
+    },
+    async (args) => {
+      if ((args.dimensions?.includes("label") ?? false) !== (args.label !== void 0)) {
+        return errorResult(
+          "label is required exactly when dimensions includes label"
+        );
+      }
+      return handleTool("gcp-billing-summary", args);
+    }
+  );
+  server2.tool(
+    "gcp_billing_records",
+    "Read a bounded page of detailed billing account records, including nullable projects and nested credits, labels, tags, resources and adjustments. Supports project, service, SKU, location, canonical resource and scoped label filters. Keep source, dates, filters and page size unchanged when using the cursor.",
+    {
+      ...gcpBillingDateArgs,
+      filters: gcpBillingFilters,
+      pageSize: z.number().int().min(1).max(200).optional().describe("Records per page: integer from 1 to 200; defaults to 50."),
+      cursor: z.string().max(256).optional().describe(
+        "Opaque cursor from the preceding page; reuse with the same source, dates, and filters."
+      )
+    },
+    async (args) => handleTool("gcp-billing-records", args)
+  );
   server2.tool(
     "get_engineering_activity",
     "Get agent activity summary (Claude Code, Codex, Gemini CLI, Mastra). SCOPES: 'org' (default), 'project', or 'user' (by githubUsername).",

package/dist/observer-server.js

@@ -5,7 +5,7 @@ import {
   isWinShim,
   quoteWinArg,
   resolveBin
-} from "./chunk-B46WIVL7.js";
+} from "./chunk-D5LBADQV.js";
 import {
   createHookSyncLoop,
   getActiveHookDestinationBinding
@@ -1563,7 +1563,7 @@ var hookRejectionStatus = () => ({
   ...lastRejectedReason !== void 0 ? { lastRejectedReason } : {},
   ...lastRejectedTarget !== void 0 ? { lastRejectedTarget } : {}
 });
-var packageVersion = true ? "0.8.11-rc.1+80d59e99" : "dev";
+var packageVersion = true ? "0.8.12-rc.1+bc772cee" : "dev";
 var health = () => ({
   status: "ok",
   service: OBSERVER_SERVICE_NAME,