@frihet/mcp-server 1.14.2 → 1.14.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/dist/__tests__/einvoice-day4-tools.test.js +33 -73
- package/dist/__tests__/einvoice-day4-tools.test.js.map +1 -1
- package/dist/__tests__/intelligence-duplicate-invoice.test.d.ts +14 -0
- package/dist/__tests__/intelligence-duplicate-invoice.test.d.ts.map +1 -0
- package/dist/__tests__/intelligence-duplicate-invoice.test.js +108 -0
- package/dist/__tests__/intelligence-duplicate-invoice.test.js.map +1 -0
- package/dist/__tests__/observability-redaction.test.d.ts +13 -0
- package/dist/__tests__/observability-redaction.test.d.ts.map +1 -0
- package/dist/__tests__/observability-redaction.test.js +94 -0
- package/dist/__tests__/observability-redaction.test.js.map +1 -0
- package/dist/__tests__/openai-profile.test.js +33 -0
- package/dist/__tests__/openai-profile.test.js.map +1 -1
- package/dist/index.js +19 -3
- package/dist/index.js.map +1 -1
- package/dist/observability.d.ts +60 -0
- package/dist/observability.d.ts.map +1 -1
- package/dist/observability.js +94 -69
- package/dist/observability.js.map +1 -1
- package/dist/openai-profile.d.ts.map +1 -1
- package/dist/openai-profile.js +76 -40
- package/dist/openai-profile.js.map +1 -1
- package/dist/redaction.d.ts +39 -0
- package/dist/redaction.d.ts.map +1 -0
- package/dist/redaction.js +91 -0
- package/dist/redaction.js.map +1 -0
- package/dist/tools/einvoice.d.ts.map +1 -1
- package/dist/tools/einvoice.js +42 -129
- package/dist/tools/einvoice.js.map +1 -1
- package/dist/tools/intelligence.d.ts.map +1 -1
- package/dist/tools/intelligence.js +36 -9
- package/dist/tools/intelligence.js.map +1 -1
- package/package.json +2 -2
- package/scripts/audit-mcp-refs.mjs +1 -0
package/dist/index.js
CHANGED
|
@@ -8,9 +8,25 @@
|
|
|
8
8
|
* Authentication: Set the FRIHET_API_KEY environment variable with your Frihet API key.
|
|
9
9
|
* Transport: stdio (designed for CLI tools like Claude Code, Cursor, Windsurf).
|
|
10
10
|
*/
|
|
11
|
+
import { readFileSync } from "node:fs";
|
|
12
|
+
import { dirname, join } from "node:path";
|
|
13
|
+
import { fileURLToPath } from "node:url";
|
|
11
14
|
import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
|
|
12
15
|
import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
|
|
13
16
|
import { FrihetClient } from "./client.js";
|
|
17
|
+
// Single source of truth for the server version: package.json (read at runtime
|
|
18
|
+
// from dist/../package.json). Hardcoding it here caused repeated version drift
|
|
19
|
+
// (server.json/index.ts/console out of sync → audit:mcp-refs gate failure).
|
|
20
|
+
// Reading it once means a `npm version` bump is the ONLY place version lives.
|
|
21
|
+
const PKG_VERSION = (() => {
|
|
22
|
+
try {
|
|
23
|
+
const pkgPath = join(dirname(fileURLToPath(import.meta.url)), "..", "package.json");
|
|
24
|
+
return JSON.parse(readFileSync(pkgPath, "utf8")).version;
|
|
25
|
+
}
|
|
26
|
+
catch {
|
|
27
|
+
return "0.0.0";
|
|
28
|
+
}
|
|
29
|
+
})();
|
|
14
30
|
import { registerAllTools } from "./tools/register-all.js";
|
|
15
31
|
import { registerAllResources } from "./resources/register-all.js";
|
|
16
32
|
import { registerAllPrompts } from "./prompts/register-all.js";
|
|
@@ -60,7 +76,7 @@ function main() {
|
|
|
60
76
|
});
|
|
61
77
|
const server = new McpServer({
|
|
62
78
|
name: "frihet-erp",
|
|
63
|
-
version:
|
|
79
|
+
version: PKG_VERSION,
|
|
64
80
|
description: "AI-native MCP server for Frihet ERP — invoices, expenses, clients, products, quotes, webhooks, and deposits. " +
|
|
65
81
|
"Provides 157 tools (including business context, monthly summaries, quarterly taxes, invoice duplication, CRM subcollections, and deposit management), " +
|
|
66
82
|
"11 resources (8 static + 3 live), and 10 workflow prompts for business management " +
|
|
@@ -114,12 +130,12 @@ function main() {
|
|
|
114
130
|
// Connect via stdio transport
|
|
115
131
|
const transport = new StdioServerTransport();
|
|
116
132
|
server.connect(transport).then(() => {
|
|
117
|
-
console.error(
|
|
133
|
+
console.error(`[frihet-mcp] v${PKG_VERSION} | 157 tools | https://github.com/Frihet-io/frihet-mcp`);
|
|
118
134
|
log({
|
|
119
135
|
level: "info",
|
|
120
136
|
message: "Frihet MCP server running on stdio",
|
|
121
137
|
operation: "startup",
|
|
122
|
-
metadata: { version:
|
|
138
|
+
metadata: { version: PKG_VERSION, transport: "stdio" },
|
|
123
139
|
});
|
|
124
140
|
}).catch((error) => {
|
|
125
141
|
log({
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,MAAM,WAAW,GAAW,CAAC,GAAG,EAAE;IAChC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAiB,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AACL,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,8BAA8B,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAC;AAC3K,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AACxG,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,SAAS,IAAI;IACX,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAE1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CACX,6DAA6D;YAC3D,qBAAqB;YACrB,uDAAuD;YACvD,+CAA+C;YAC/C,4DAA4D;YAC5D,oEAAoE,CACvE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAE3C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CACX,8CAA8C,OAAO,KAAK;gBACxD,8DAA8D,CACjE,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CACX,iDAAiD,MAAM,CAAC,QAAQ,OAAO,CACxE,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,KAAK,CACX,gEAAgE,MAAM,CAAC,QAAQ,OAAO;gBACpF,mDAAmD,CACtD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEjD,oFAAoF;IACpF,+EAA+E;IAC/E,eAAe,CAAC;QACd,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;KAC3C,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,WAAW;QACpB,WAAW,EACT,+GAA+G;YAC/G,wJAAwJ;YACxJ,oFAAoF;YACpF,qDAAqD;KACxD,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,MAAM,CAAC;IAC7D,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IAEnC,mEAAmE;IACnE,uEAAuE;IACvE,+EAA+E;IAC/E,gFAAgF;IAChF,6EAA6E;IAC7E,+EAA+E;IAC/E,8EAA8E;IAC9E,gFAAgF;IAChF,kEAAkE;IAClE,gFAAgF;IAChF,2CAA2C;IAE3C,2EAA2E;IAC3E,2EAA2E;IAC3E,gFAAgF;IAChF,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,2CAA2C;IAC3C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,wBAAwB,CACtB,MAAM,EACN,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,8BAA8B,EAAE,CAAC,CAAC,CAAC,SAAS,CACvE,CAAC;QACF,GAAG,CAAC;YACF,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,sEAAsE,uBAAuB,0GAA0G;YAChN,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC;IACL,CAAC;IAED,oFAAoF;IACpF,IAAI,UAAU,EAAE,CAAC;QACf,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3B,GAAG,CAAC;YACF,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,kCAAkC,yBAAyB,mCAAmC,qBAAqB,iCAAiC,8BAA8B,qDAAqD;YAChP,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC;IACL,CAAC;IAED,+CAA+C;IAC/C,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEjC,uDAAuD;IACvD,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAErC,+BAA+B;IAC/B,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE3B,sDAAsD;IACtD,oBAAoB,EAAE,CAAC;IAEvB,8BAA8B;IAC9B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;QAClC,OAAO,CAAC,KAAK,CAAC,iBAAiB,WAAW,wDAAwD,CAAC,CAAC;QACpG,GAAG,CAAC;YACF,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,oCAAoC;YAC7C,SAAS,EAAE,SAAS;YACpB,QAAQ,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE;SACvD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC1B,GAAG,CAAC;YACF,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,mCAAmC;YAC5C,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC3E,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC"}
|
package/dist/observability.d.ts
CHANGED
|
@@ -27,6 +27,36 @@ export declare function initLangfuse(config: {
|
|
|
27
27
|
secretKey?: string;
|
|
28
28
|
baseUrl?: string;
|
|
29
29
|
}): void;
|
|
30
|
+
interface LangfuseSpanBody {
|
|
31
|
+
id: string;
|
|
32
|
+
traceId: string;
|
|
33
|
+
name: string;
|
|
34
|
+
startTime: string;
|
|
35
|
+
endTime: string;
|
|
36
|
+
input?: unknown;
|
|
37
|
+
output?: unknown;
|
|
38
|
+
metadata?: Record<string, unknown>;
|
|
39
|
+
level?: "DEFAULT" | "DEBUG" | "WARNING" | "ERROR";
|
|
40
|
+
statusMessage?: string;
|
|
41
|
+
}
|
|
42
|
+
interface LangfuseTraceBody {
|
|
43
|
+
id: string;
|
|
44
|
+
name: string;
|
|
45
|
+
timestamp: string;
|
|
46
|
+
input?: unknown;
|
|
47
|
+
output?: unknown;
|
|
48
|
+
metadata?: Record<string, unknown>;
|
|
49
|
+
tags?: string[];
|
|
50
|
+
userId?: string;
|
|
51
|
+
}
|
|
52
|
+
interface IngestionBatch {
|
|
53
|
+
batch: Array<{
|
|
54
|
+
type: string;
|
|
55
|
+
id: string;
|
|
56
|
+
timestamp: string;
|
|
57
|
+
body: LangfuseTraceBody | LangfuseSpanBody;
|
|
58
|
+
}>;
|
|
59
|
+
}
|
|
30
60
|
interface StubMarker {
|
|
31
61
|
plannedEndpoint?: string;
|
|
32
62
|
note?: string;
|
|
@@ -61,6 +91,36 @@ interface TraceContext {
|
|
|
61
91
|
* Call once from server init; applies to all subsequent traces.
|
|
62
92
|
*/
|
|
63
93
|
export declare function setTraceContext(ctx: TraceContext): void;
|
|
94
|
+
interface TracePayloadParams {
|
|
95
|
+
toolName: string;
|
|
96
|
+
/** Raw tool input args (redacted before serialization). */
|
|
97
|
+
input: unknown;
|
|
98
|
+
/** Raw tool output (redacted before serialization); ignored when isError. */
|
|
99
|
+
output: unknown;
|
|
100
|
+
isError: boolean;
|
|
101
|
+
errorMessage?: string;
|
|
102
|
+
startTime: Date;
|
|
103
|
+
endTime: Date;
|
|
104
|
+
traceId: string;
|
|
105
|
+
spanId: string;
|
|
106
|
+
/** Already-hashed user id, or undefined. */
|
|
107
|
+
userIdHashed?: string;
|
|
108
|
+
clientName?: string;
|
|
109
|
+
mcpVersion?: string;
|
|
110
|
+
/** Fabricated-stub marker, or null on a genuine result. */
|
|
111
|
+
stub: StubMarker | null;
|
|
112
|
+
}
|
|
113
|
+
/**
|
|
114
|
+
* Builds the Langfuse trace+span ingestion batch for a single tool call.
|
|
115
|
+
*
|
|
116
|
+
* CRITICAL (Trust): `input` and `output` are passed through {@link redactClone}
|
|
117
|
+
* before they enter the payload, so government IDs (taxId/NIF/CIF), banking
|
|
118
|
+
* identifiers (IBAN), webhook signing secrets, and auth tokens NEVER reach the
|
|
119
|
+
* external Langfuse service — in ANY profile mode. The tool-call output handed
|
|
120
|
+
* to the user is redacted later (OpenAI mode only); this redacts the trace copy
|
|
121
|
+
* unconditionally. Exported so a test can assert no sensitive value survives.
|
|
122
|
+
*/
|
|
123
|
+
export declare function buildTracePayload(p: TracePayloadParams): IngestionBatch;
|
|
64
124
|
/**
|
|
65
125
|
* Wraps a tool handler fn and sends a Langfuse trace+span for the call.
|
|
66
126
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"observability.d.ts","sourceRoot":"","sources":["../src/observability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;
|
|
1
|
+
{"version":3,"file":"observability.d.ts","sourceRoot":"","sources":["../src/observability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAoCH;;;GAGG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CAQP;AA2BD,UAAU,gBAAgB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;IAClD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,iBAAiB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,cAAc;IACtB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,iBAAiB,GAAG,gBAAgB,CAAA;KAAE,CAAC,CAAC;CAC3G;AAWD,UAAU,UAAU;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,IAAI,CA0BpE;AAkCD,UAAU,YAAY;IACpB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAKD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAEvD;AAID,UAAU,kBAAkB;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,KAAK,EAAE,OAAO,CAAC;IACf,6EAA6E;IAC7E,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,EAAE,IAAI,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,kBAAkB,GAAG,cAAc,CA2EvE;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,EACd,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CA+EZ"}
|
package/dist/observability.js
CHANGED
|
@@ -18,6 +18,7 @@
|
|
|
18
18
|
*
|
|
19
19
|
* Docs: https://langfuse.com/docs/api/reference/overview
|
|
20
20
|
*/
|
|
21
|
+
import { redactClone, redactText } from "./redaction.js";
|
|
21
22
|
function getConfig() {
|
|
22
23
|
let publicKey;
|
|
23
24
|
let secretKey;
|
|
@@ -147,6 +148,83 @@ let _sessionContext = {};
|
|
|
147
148
|
export function setTraceContext(ctx) {
|
|
148
149
|
_sessionContext = { ..._sessionContext, ...ctx };
|
|
149
150
|
}
|
|
151
|
+
/**
|
|
152
|
+
* Builds the Langfuse trace+span ingestion batch for a single tool call.
|
|
153
|
+
*
|
|
154
|
+
* CRITICAL (Trust): `input` and `output` are passed through {@link redactClone}
|
|
155
|
+
* before they enter the payload, so government IDs (taxId/NIF/CIF), banking
|
|
156
|
+
* identifiers (IBAN), webhook signing secrets, and auth tokens NEVER reach the
|
|
157
|
+
* external Langfuse service — in ANY profile mode. The tool-call output handed
|
|
158
|
+
* to the user is redacted later (OpenAI mode only); this redacts the trace copy
|
|
159
|
+
* unconditionally. Exported so a test can assert no sensitive value survives.
|
|
160
|
+
*/
|
|
161
|
+
export function buildTracePayload(p) {
|
|
162
|
+
const { toolName, input, output, isError, errorMessage, startTime, endTime, traceId, spanId, userIdHashed, clientName, mcpVersion, stub, } = p;
|
|
163
|
+
const stubbed = stub !== null;
|
|
164
|
+
// success: false whenever the call threw OR returned a fabricated stub body.
|
|
165
|
+
const success = !isError && !stubbed;
|
|
166
|
+
const stubNote = stub?.note ??
|
|
167
|
+
(stub?.plannedEndpoint
|
|
168
|
+
? `Backend endpoint not yet available: ${stub.plannedEndpoint}`
|
|
169
|
+
: undefined);
|
|
170
|
+
// ── Redact BEFORE the payload is built (never mutates the live response) ──
|
|
171
|
+
const safeArgs = redactClone(input);
|
|
172
|
+
const safeError = errorMessage ? redactText(errorMessage) : errorMessage;
|
|
173
|
+
const safeOutput = isError ? { error: safeError } : redactClone(output);
|
|
174
|
+
const traceBody = {
|
|
175
|
+
id: traceId,
|
|
176
|
+
name: "mcp_request",
|
|
177
|
+
timestamp: startTime.toISOString(),
|
|
178
|
+
input: { tool: toolName, args: safeArgs },
|
|
179
|
+
output: safeOutput,
|
|
180
|
+
metadata: {
|
|
181
|
+
tool: toolName,
|
|
182
|
+
clientName,
|
|
183
|
+
mcpVersion,
|
|
184
|
+
// FALSE on a thrown error AND on a fabricated-stub fallback.
|
|
185
|
+
success,
|
|
186
|
+
...(stubbed
|
|
187
|
+
? {
|
|
188
|
+
stub: true,
|
|
189
|
+
...(stub?.plannedEndpoint ? { plannedEndpoint: stub.plannedEndpoint } : {}),
|
|
190
|
+
...(stubNote ? { note: stubNote } : {}),
|
|
191
|
+
}
|
|
192
|
+
: {}),
|
|
193
|
+
},
|
|
194
|
+
tags: [`mcp.tool.${toolName}`, ...(stubbed ? ["mcp.stub"] : [])],
|
|
195
|
+
...(userIdHashed ? { userId: userIdHashed } : {}),
|
|
196
|
+
};
|
|
197
|
+
const spanBody = {
|
|
198
|
+
id: spanId,
|
|
199
|
+
traceId,
|
|
200
|
+
name: `tool.${toolName}`,
|
|
201
|
+
startTime: startTime.toISOString(),
|
|
202
|
+
endTime: endTime.toISOString(),
|
|
203
|
+
input: safeArgs,
|
|
204
|
+
output: safeOutput,
|
|
205
|
+
metadata: {
|
|
206
|
+
durationMs: endTime.getTime() - startTime.getTime(),
|
|
207
|
+
clientName,
|
|
208
|
+
mcpVersion,
|
|
209
|
+
...(stubbed ? { stub: true } : {}),
|
|
210
|
+
},
|
|
211
|
+
// ERROR on a thrown error; WARNING on a fabricated-stub fallback (the call
|
|
212
|
+
// "succeeded" mechanically but returned no real backend data); DEFAULT only
|
|
213
|
+
// on a genuine success.
|
|
214
|
+
level: isError ? "ERROR" : stubbed ? "WARNING" : "DEFAULT",
|
|
215
|
+
...(isError && safeError
|
|
216
|
+
? { statusMessage: safeError }
|
|
217
|
+
: stubbed && stubNote
|
|
218
|
+
? { statusMessage: stubNote }
|
|
219
|
+
: {}),
|
|
220
|
+
};
|
|
221
|
+
return {
|
|
222
|
+
batch: [
|
|
223
|
+
{ type: "trace-create", id: newId(), timestamp: startTime.toISOString(), body: traceBody },
|
|
224
|
+
{ type: "span-create", id: newId(), timestamp: startTime.toISOString(), body: spanBody },
|
|
225
|
+
],
|
|
226
|
+
};
|
|
227
|
+
}
|
|
150
228
|
/**
|
|
151
229
|
* Wraps a tool handler fn and sends a Langfuse trace+span for the call.
|
|
152
230
|
*
|
|
@@ -193,82 +271,29 @@ export async function traceMCPTool(toolName, input, fn) {
|
|
|
193
271
|
// success. This is the central fix: it covers every stub branch regardless of
|
|
194
272
|
// which tool produced it, because the stub path never reaches the catch above.
|
|
195
273
|
const stub = isError ? null : inspectStubMarker(output);
|
|
196
|
-
const stubbed = stub !== null;
|
|
197
|
-
// success: false whenever the call threw OR returned a fabricated stub body.
|
|
198
|
-
const success = !isError && !stubbed;
|
|
199
|
-
const stubNote = stub?.note ??
|
|
200
|
-
(stub?.plannedEndpoint
|
|
201
|
-
? `Backend endpoint not yet available: ${stub.plannedEndpoint}`
|
|
202
|
-
: undefined);
|
|
203
274
|
// Fire-and-forget — build and send async, never awaited
|
|
204
275
|
void (async () => {
|
|
205
276
|
try {
|
|
206
277
|
// Hash PII fields
|
|
207
278
|
const userIdRaw = _sessionContext.userId;
|
|
208
279
|
const userIdHashed = userIdRaw ? await hashPii(userIdRaw) : undefined;
|
|
209
|
-
|
|
210
|
-
|
|
211
|
-
|
|
212
|
-
|
|
213
|
-
input: { tool: toolName, args: input },
|
|
214
|
-
output: isError ? { error: errorMessage } : output,
|
|
215
|
-
metadata: {
|
|
216
|
-
tool: toolName,
|
|
217
|
-
clientName: _sessionContext.clientName,
|
|
218
|
-
mcpVersion: _sessionContext.mcpVersion,
|
|
219
|
-
// FALSE on a thrown error AND on a fabricated-stub fallback.
|
|
220
|
-
success,
|
|
221
|
-
...(stubbed
|
|
222
|
-
? {
|
|
223
|
-
stub: true,
|
|
224
|
-
...(stub?.plannedEndpoint ? { plannedEndpoint: stub.plannedEndpoint } : {}),
|
|
225
|
-
...(stubNote ? { note: stubNote } : {}),
|
|
226
|
-
}
|
|
227
|
-
: {}),
|
|
228
|
-
},
|
|
229
|
-
tags: [`mcp.tool.${toolName}`, ...(stubbed ? ["mcp.stub"] : [])],
|
|
230
|
-
...(userIdHashed ? { userId: userIdHashed } : {}),
|
|
231
|
-
};
|
|
232
|
-
const spanBody = {
|
|
233
|
-
id: spanId,
|
|
234
|
-
traceId,
|
|
235
|
-
name: `tool.${toolName}`,
|
|
236
|
-
startTime: startTime.toISOString(),
|
|
237
|
-
endTime: endTime.toISOString(),
|
|
280
|
+
// buildTracePayload redacts input/output (taxId/secret/IBAN/tokens) so
|
|
281
|
+
// the external Langfuse service never stores cleartext PII or credentials.
|
|
282
|
+
const batch = buildTracePayload({
|
|
283
|
+
toolName,
|
|
238
284
|
input,
|
|
239
|
-
output
|
|
240
|
-
|
|
241
|
-
|
|
242
|
-
|
|
243
|
-
|
|
244
|
-
|
|
245
|
-
|
|
246
|
-
|
|
247
|
-
|
|
248
|
-
|
|
249
|
-
|
|
250
|
-
|
|
251
|
-
? { statusMessage: errorMessage }
|
|
252
|
-
: stubbed && stubNote
|
|
253
|
-
? { statusMessage: stubNote }
|
|
254
|
-
: {}),
|
|
255
|
-
};
|
|
256
|
-
const batch = {
|
|
257
|
-
batch: [
|
|
258
|
-
{
|
|
259
|
-
type: "trace-create",
|
|
260
|
-
id: newId(),
|
|
261
|
-
timestamp: startTime.toISOString(),
|
|
262
|
-
body: traceBody,
|
|
263
|
-
},
|
|
264
|
-
{
|
|
265
|
-
type: "span-create",
|
|
266
|
-
id: newId(),
|
|
267
|
-
timestamp: startTime.toISOString(),
|
|
268
|
-
body: spanBody,
|
|
269
|
-
},
|
|
270
|
-
],
|
|
271
|
-
};
|
|
285
|
+
output,
|
|
286
|
+
isError,
|
|
287
|
+
errorMessage,
|
|
288
|
+
startTime,
|
|
289
|
+
endTime,
|
|
290
|
+
traceId,
|
|
291
|
+
spanId,
|
|
292
|
+
userIdHashed,
|
|
293
|
+
clientName: _sessionContext.clientName,
|
|
294
|
+
mcpVersion: _sessionContext.mcpVersion,
|
|
295
|
+
stub,
|
|
296
|
+
});
|
|
272
297
|
await sendBatch(config, batch);
|
|
273
298
|
}
|
|
274
299
|
catch (langfuseErr) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"observability.js","sourceRoot":"","sources":["../src/observability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;
|
|
1
|
+
{"version":3,"file":"observability.js","sourceRoot":"","sources":["../src/observability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAazD,SAAS,SAAS;IAChB,IAAI,SAA6B,CAAC;IAClC,IAAI,SAA6B,CAAC;IAClC,IAAI,OAA2B,CAAC;IAEhC,UAAU;IACV,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,EAAE,GAAG,EAAE,CAAC;QACnD,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC5C,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC5C,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC1C,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAEtD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,+EAA+E;AAE/E,IAAI,SAAS,GAA0B,IAAI,CAAC;AAE5C;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAI5B;IACC,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC3D,SAAS,GAAG;YACV,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAC3C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,SAAS,IAAI,SAAS,EAAE,CAAC;AAClC,CAAC;AAED,gFAAgF;AAEhF;;;GAGG;AACH,KAAK,UAAU,OAAO,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QACzD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC;AAiCD,gFAAgF;AAEhF,SAAS,KAAK;IACZ,+DAA+D;IAC/D,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AASD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAe;IAC/C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEvD,MAAM,UAAU,GAA8B,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,MAAM,EAAE,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACpC,IAAI,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,UAAU,CAAC,IAAI,CAAC,EAA6B,CAAC,CAAC;IAEjF,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,iBAAiB,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7F,OAAO;gBACL,eAAe,EAAE,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,kBAAkB,CAAY,CAAC,CAAC,CAAC,SAAS;gBAC9G,IAAI,EAAE,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,OAAO,CAAY,CAAC,CAAC,CAAC,SAAS;aAC9E,CAAC;QACJ,CAAC;QACD,4EAA4E;QAC5E,IAAI,OAAO,GAAG,CAAC,kBAAkB,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChD,OAAO;gBACL,eAAe,EAAE,GAAG,CAAC,kBAAkB,CAAW;gBAClD,IAAI,EAAE,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,OAAO,CAAY,CAAC,CAAC,CAAC,SAAS;aAC9E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,SAAS,CAAC,MAAsB,EAAE,KAAqB;IACpE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAEpE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,uBAAuB,EAAE;QACjE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,SAAS,WAAW,EAAE;SACxC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAC3B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;KAClC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,kCAAkC;QAClC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,KAAK,CACX,IAAI,CAAC,SAAS,CAAC;YACb,OAAO,EAAE,YAAY;YACrB,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,8BAA8B,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YAC1E,SAAS,EAAE,eAAe;YAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAaD,qFAAqF;AACrF,IAAI,eAAe,GAAiB,EAAE,CAAC;AAEvC;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAiB;IAC/C,eAAe,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,GAAG,EAAE,CAAC;AACnD,CAAC;AAwBD;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAqB;IACrD,MAAM,EACJ,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAC9C,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,GAChF,GAAG,CAAC,CAAC;IAEN,MAAM,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC;IAC9B,6EAA6E;IAC7E,MAAM,OAAO,GAAG,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC;IACrC,MAAM,QAAQ,GACZ,IAAI,EAAE,IAAI;QACV,CAAC,IAAI,EAAE,eAAe;YACpB,CAAC,CAAC,uCAAuC,IAAI,CAAC,eAAe,EAAE;YAC/D,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjB,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IACzE,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAExE,MAAM,SAAS,GAAsB;QACnC,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;QAClC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzC,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,UAAU;YACV,UAAU;YACV,6DAA6D;YAC7D,OAAO;YACP,GAAG,CAAC,OAAO;gBACT,CAAC,CAAC;oBACE,IAAI,EAAE,IAAI;oBACV,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3E,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxC;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;QACD,IAAI,EAAE,CAAC,YAAY,QAAQ,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;IAEF,MAAM,QAAQ,GAAqB;QACjC,EAAE,EAAE,MAAM;QACV,OAAO;QACP,IAAI,EAAE,QAAQ,QAAQ,EAAE;QACxB,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;QAClC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE;QAC9B,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE;YACR,UAAU,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE;YACnD,UAAU;YACV,UAAU;YACV,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnC;QACD,2EAA2E;QAC3E,4EAA4E;QAC5E,wBAAwB;QACxB,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QAC1D,GAAG,CAAC,OAAO,IAAI,SAAS;YACtB,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE;YAC9B,CAAC,CAAC,OAAO,IAAI,QAAQ;gBACnB,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE;gBAC7B,CAAC,CAAC,EAAE,CAAC;KACV,CAAC;IAEF,OAAO;QACL,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC1F,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SACzF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,KAAc,EACd,EAAoB;IAEpB,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAE/B,oCAAoC;IACpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAE7B,IAAI,MAAS,CAAC;IACd,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,YAAgC,CAAC;IACrC,IAAI,MAAe,CAAC;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;QACpB,MAAM,GAAG,MAAM,CAAC;QAChB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,GAAG,IAAI,CAAC;QACf,YAAY,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAE3B,6EAA6E;QAC7E,8EAA8E;QAC9E,8EAA8E;QAC9E,+EAA+E;QAC/E,8EAA8E;QAC9E,yEAAyE;QACzE,+EAA+E;QAC/E,8EAA8E;QAC9E,+EAA+E;QAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAExD,wDAAwD;QACxD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,kBAAkB;gBAClB,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC;gBACzC,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAEtE,uEAAuE;gBACvE,2EAA2E;gBAC3E,MAAM,KAAK,GAAG,iBAAiB,CAAC;oBAC9B,QAAQ;oBACR,KAAK;oBACL,MAAM;oBACN,OAAO;oBACP,YAAY;oBACZ,SAAS;oBACT,OAAO;oBACP,OAAO;oBACP,MAAM;oBACN,YAAY;oBACZ,UAAU,EAAE,eAAe,CAAC,UAAU;oBACtC,UAAU,EAAE,eAAe,CAAC,UAAU;oBACtC,IAAI;iBACL,CAAC,CAAC;gBAEH,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACrB,2BAA2B;gBAC3B,OAAO,CAAC,KAAK,CACX,IAAI,CAAC,SAAS,CAAC;oBACb,OAAO,EAAE,YAAY;oBACrB,KAAK,EAAE,MAAM;oBACb,OAAO,EAAE,yCAAyC,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;oBAC5H,SAAS,EAAE,gBAAgB;oBAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;AACH,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"openai-profile.d.ts","sourceRoot":"","sources":["../src/openai-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;
|
|
1
|
+
{"version":3,"file":"openai-profile.d.ts","sourceRoot":"","sources":["../src/openai-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA6SH;;;GAGG;AACH,eAAO,MAAM,UAAU,QAQkB,CAAC;AAM1C;;;;;;;;;;;;;;;;GAgBG;AAEH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,CAsIpD;AAED,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,QAA4B,CAAC;AAE/D,yDAAyD;AACzD,eAAO,MAAM,yBAAyB,QAA4B,CAAC;AAEnE;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,8BAA8B,EAAE,WAAW,CAAC,MAAM,CACzC,CAAC;AAEvB,iEAAiE;AACjE,eAAO,MAAM,8BAA8B,QAAyB,CAAC"}
|
package/dist/openai-profile.js
CHANGED
|
@@ -20,6 +20,8 @@
|
|
|
20
20
|
*
|
|
21
21
|
* @see https://developers.openai.com/apps-sdk/app-submission-guidelines
|
|
22
22
|
*/
|
|
23
|
+
import { z } from "zod";
|
|
24
|
+
import { SENSITIVE_FIELD_NAMES, deepRedact, redactText } from "./redaction.js";
|
|
23
25
|
const PROFILE = {
|
|
24
26
|
// -- OpenAI-reviewed core surface ----------------------------------------
|
|
25
27
|
//
|
|
@@ -170,53 +172,80 @@ const PROFILE = {
|
|
|
170
172
|
},
|
|
171
173
|
// ── Output fields redacted ─────────────────────────────────────────
|
|
172
174
|
// Stripped from structuredContent and text in ALL tool responses.
|
|
173
|
-
//
|
|
174
|
-
|
|
175
|
-
|
|
176
|
-
"nif", "cif", "vatNumber", // Spanish/EU synonyms for government tax ID
|
|
177
|
-
"vat_number", "vatId", "vat_id",
|
|
178
|
-
"secret", // Webhook signing credential
|
|
179
|
-
"iban", "bankAccount", // Banking identifiers (if exposed via passthrough)
|
|
180
|
-
"bank_account", "accountNumber",
|
|
181
|
-
"idDocument", "documentNumber", // Guest/customer government document fields
|
|
182
|
-
"passport", "passportNumber",
|
|
183
|
-
"dni", "nationalId", "national_id",
|
|
184
|
-
"ssn", "socialSecurityNumber", "social_security_number",
|
|
185
|
-
"apiKey", "api_key",
|
|
186
|
-
"accessToken", "access_token", "refreshToken", "refresh_token",
|
|
187
|
-
"password", "mfa", "otp",
|
|
188
|
-
],
|
|
175
|
+
// Single source of truth lives in redaction.ts (shared with observability.ts
|
|
176
|
+
// so Langfuse traces redact the EXACT same field set).
|
|
177
|
+
redactOutputFields: SENSITIVE_FIELD_NAMES,
|
|
189
178
|
};
|
|
190
179
|
/* ------------------------------------------------------------------ */
|
|
191
|
-
/* Deep field redaction
|
|
180
|
+
/* Deep field redaction — shared policy in redaction.ts */
|
|
192
181
|
/* ------------------------------------------------------------------ */
|
|
193
|
-
|
|
194
|
-
|
|
195
|
-
|
|
196
|
-
|
|
197
|
-
|
|
198
|
-
|
|
199
|
-
|
|
200
|
-
|
|
182
|
+
//
|
|
183
|
+
// deepRedact (in-place DELETE) + redactText (regex) now live in ./redaction.ts
|
|
184
|
+
// so observability.ts redacts the SAME field set before tracing to Langfuse.
|
|
185
|
+
/* ------------------------------------------------------------------ */
|
|
186
|
+
/* Output SCHEMA stripping (descriptor-level) */
|
|
187
|
+
/* ------------------------------------------------------------------ */
|
|
188
|
+
/**
|
|
189
|
+
* Returns a Zod output schema with sensitive fields removed at EVERY depth.
|
|
190
|
+
*
|
|
191
|
+
* Runtime output redaction (deepRedact in the handler wrapper) hides the
|
|
192
|
+
* VALUES, but the advertised `outputSchema` descriptor still DECLARES taxId /
|
|
193
|
+
* secret etc. at tools/list — which OpenAI's submission review auto-detects as
|
|
194
|
+
* exposed government IDs / credentials. This strips them from the descriptor too.
|
|
195
|
+
*
|
|
196
|
+
* Surgical: only the object/array nodes on the path to a sensitive field are
|
|
197
|
+
* rebuilt; untouched branches are returned BY REFERENCE so their `.describe()`
|
|
198
|
+
* metadata and `.passthrough()` behavior are preserved. A schema with no
|
|
199
|
+
* sensitive field anywhere is returned unchanged (identity).
|
|
200
|
+
*/
|
|
201
|
+
function stripSensitiveOutputSchema(schema, fields) {
|
|
202
|
+
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
203
|
+
const def = schema?._def;
|
|
204
|
+
const typeName = def?.typeName;
|
|
205
|
+
if (typeName === "ZodObject") {
|
|
206
|
+
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
207
|
+
const shape = schema.shape;
|
|
208
|
+
const newShape = {};
|
|
209
|
+
let changed = false;
|
|
210
|
+
for (const [key, value] of Object.entries(shape)) {
|
|
211
|
+
if (fields.includes(key)) {
|
|
212
|
+
changed = true;
|
|
213
|
+
continue; // drop the sensitive field entirely from the descriptor
|
|
214
|
+
}
|
|
215
|
+
const stripped = stripSensitiveOutputSchema(value, fields);
|
|
216
|
+
if (stripped !== value)
|
|
217
|
+
changed = true;
|
|
218
|
+
newShape[key] = stripped;
|
|
219
|
+
}
|
|
220
|
+
if (!changed)
|
|
221
|
+
return schema;
|
|
222
|
+
let rebuilt = z.object(newShape);
|
|
223
|
+
if (typeof def.description === "string")
|
|
224
|
+
rebuilt = rebuilt.describe(def.description);
|
|
225
|
+
return rebuilt;
|
|
201
226
|
}
|
|
202
|
-
|
|
203
|
-
|
|
204
|
-
|
|
205
|
-
|
|
227
|
+
if (typeName === "ZodArray") {
|
|
228
|
+
const inner = def.type;
|
|
229
|
+
const stripped = stripSensitiveOutputSchema(inner, fields);
|
|
230
|
+
if (stripped === inner)
|
|
231
|
+
return schema;
|
|
232
|
+
let rebuilt = z.array(stripped);
|
|
233
|
+
if (typeof def.description === "string")
|
|
234
|
+
rebuilt = rebuilt.describe(def.description);
|
|
235
|
+
return rebuilt;
|
|
206
236
|
}
|
|
207
|
-
|
|
208
|
-
|
|
237
|
+
if (typeName === "ZodOptional") {
|
|
238
|
+
const inner = def.innerType;
|
|
239
|
+
const stripped = stripSensitiveOutputSchema(inner, fields);
|
|
240
|
+
return stripped === inner ? schema : z.optional(stripped);
|
|
209
241
|
}
|
|
210
|
-
|
|
211
|
-
|
|
212
|
-
|
|
213
|
-
|
|
214
|
-
for (const field of fields) {
|
|
215
|
-
// Remove "field": "value", or "field": value patterns
|
|
216
|
-
result = result.replace(new RegExp(`\\s*"${field}"\\s*:\\s*(?:"[^"]*"|null|true|false|\\d+(?:\\.\\d+)?)\\s*,?`, "g"), "");
|
|
242
|
+
if (typeName === "ZodNullable") {
|
|
243
|
+
const inner = def.innerType;
|
|
244
|
+
const stripped = stripSensitiveOutputSchema(inner, fields);
|
|
245
|
+
return stripped === inner ? schema : z.nullable(stripped);
|
|
217
246
|
}
|
|
218
|
-
//
|
|
219
|
-
return
|
|
247
|
+
// Primitives, unions, records, and anything else: leave untouched.
|
|
248
|
+
return schema;
|
|
220
249
|
}
|
|
221
250
|
/* ------------------------------------------------------------------ */
|
|
222
251
|
/* Resources excluded / redacted in OpenAI mode */
|
|
@@ -306,6 +335,13 @@ export function applyOpenAIProfile(server) {
|
|
|
306
335
|
delete config.inputSchema[field];
|
|
307
336
|
}
|
|
308
337
|
}
|
|
338
|
+
// 4b. Strip sensitive fields from the OUTPUT schema descriptor too.
|
|
339
|
+
// The handler wrapper (step 5) redacts VALUES at runtime; this removes the
|
|
340
|
+
// field DECLARATIONS (taxId/secret/iban/…) from the outputSchema advertised
|
|
341
|
+
// at tools/list, so OpenAI review never sees a gov-ID/credential field.
|
|
342
|
+
if (config.outputSchema) {
|
|
343
|
+
config.outputSchema = stripSensitiveOutputSchema(config.outputSchema, fieldsToRedact);
|
|
344
|
+
}
|
|
309
345
|
// 5. Wrap handler to redact sensitive output fields
|
|
310
346
|
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
311
347
|
const wrappedHandler = async (input) => {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"openai-profile.js","sourceRoot":"","sources":["../src/openai-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;
|
|
1
|
+
{"version":3,"file":"openai-profile.js","sourceRoot":"","sources":["../src/openai-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAuB/E,MAAM,OAAO,GAAkB;IAC7B,2EAA2E;IAC3E,EAAE;IACF,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,yEAAyE;IACzE,YAAY,EAAE,IAAI,GAAG,CAAC;QACpB,kBAAkB;QAClB,sBAAsB;QACtB,qBAAqB;QACrB,eAAe;QACf,aAAa;QACb,iBAAiB;QACjB,iBAAiB;QACjB,eAAe;QACf,aAAa;QACb,cAAc;QACd,YAAY;QACZ,sBAAsB;QACtB,wBAAwB;QACxB,mBAAmB;QACnB,eAAe;QACf,aAAa;QACb,aAAa;QACb,WAAW;QACX,cAAc;QACd,YAAY;QACZ,eAAe;QACf,aAAa;QAEb,eAAe;QACf,gBAAgB;QAChB,mBAAmB;QACnB,oBAAoB;QACpB,gBAAgB;QAChB,gBAAgB;QAChB,eAAe;QACf,uBAAuB;QACvB,qBAAqB;QACrB,oBAAoB;QACpB,gBAAgB;QAChB,cAAc;QACd,eAAe;QAEf,eAAe;QACf,gBAAgB;QAChB,mBAAmB;QACnB,gBAAgB;QAChB,eAAe;QACf,gBAAgB;QAChB,cAAc;QACd,eAAe;QAEf,eAAe;QACf,gBAAgB;QAChB,gBAAgB;QAChB,eAAe;QACf,uBAAuB;QACvB,oBAAoB;QACpB,gBAAgB;QAChB,cAAc;QACd,eAAe;QACf,gBAAgB;QAEhB,gDAAgD;QAChD,cAAc;QACd,YAAY;QACZ,gBAAgB;QAChB,gBAAgB;KACjB,CAAC;IAEF,uEAAuE;IACvE,wEAAwE;IACxE,YAAY,EAAE,IAAI,GAAG,CAAC;QACpB,qBAAqB,EAAG,wDAAwD;QAChF,sBAAsB,EAAE,wDAAwD;KACjF,CAAC;IAEF,4EAA4E;IAC5E,6EAA6E;IAC7E,8EAA8E;IAC9E,cAAc,EAAE,IAAI;IAEpB,uEAAuE;IACvE,yEAAyE;IACzE,mBAAmB,EAAE;QACnB,YAAY,EAAI,EAAE,aAAa,EAAE,IAAI,EAAE;QACvC,UAAU,EAAM,EAAE,aAAa,EAAE,IAAI,EAAE;QACvC,cAAc,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;QACvC,cAAc,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;KACxC;IAED,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,oBAAoB,EAAE;QACpB,YAAY,EACV,uDAAuD;YACvD,sCAAsC;YACtC,sDAAsD;YACtD,iDAAiD;QAEnD,aAAa,EACX,4DAA4D;YAC5D,sDAAsD;YACtD,uDAAuD;YACvD,4DAA4D;YAC5D,0DAA0D;QAE5D,aAAa,EACX,6FAA6F;YAC7F,mEAAmE;YACnE,gFAAgF;QAElF,YAAY,EACV,kEAAkE;YAClE,sCAAsC;YACtC,oEAAoE;YACpE,iDAAiD;QAEnD,aAAa,EACX,4DAA4D;YAC5D,+DAA+D;YAC/D,mEAAmE;YACnE,6DAA6D;YAC7D,4DAA4D;QAE9D,aAAa,EACX,6FAA6F;YAC7F,uEAAuE;YACvE,kFAAkF;QAEpF,YAAY,EACV,mFAAmF;YACnF,8DAA8D;YAC9D,wFAAwF;YACxF,4CAA4C;YAC5C,kFAAkF;QAEpF,UAAU,EACR,gFAAgF;YAChF,sEAAsE;YACtE,wFAAwF;YACxF,4CAA4C;YAC5C,qFAAqF;QAEvF,cAAc,EACZ,+EAA+E;YAC/E,qFAAqF;YACrF,qFAAqF;YACrF,gDAAgD;YAChD,wFAAwF;YACxF,6FAA6F;YAC7F,0CAA0C;QAE5C,cAAc,EACZ,kEAAkE;YAClE,2DAA2D;YAC3D,0FAA0F;YAC1F,6CAA6C;KAChD;IAED,sEAAsE;IACtE,kEAAkE;IAClE,uDAAuD;IACvD,gBAAgB,EAAE;QAChB,aAAa,EAAG,CAAC,OAAO,CAAC,EAAI,6CAA6C;QAC1E,aAAa,EAAG,CAAC,OAAO,CAAC;QACzB,aAAa,EAAG,CAAC,OAAO,CAAC;QACzB,aAAa,EAAG,CAAC,OAAO,CAAC;QACzB,YAAY,EAAI,CAAC,IAAI,CAAC,EAAO,kDAAkD;QAC/E,UAAU,EAAM,CAAC,IAAI,CAAC;QACtB,cAAc,EAAE,CAAC,QAAQ,CAAC,EAAG,iDAAiD;QAC9E,cAAc,EAAE,CAAC,QAAQ,CAAC;KAC3B;IAED,sEAAsE;IACtE,kEAAkE;IAClE,6EAA6E;IAC7E,uDAAuD;IACvD,kBAAkB,EAAE,qBAAqB;CAC1C,CAAC;AAEF,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AACxE,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAE7E,wEAAwE;AACxE,0EAA0E;AAC1E,wEAAwE;AAExE;;;;;;;;;;;;GAYG;AACH,SAAS,0BAA0B,CACjC,MAAe,EACf,MAAyB;IAEzB,8DAA8D;IAC9D,MAAM,GAAG,GAAI,MAAc,EAAE,IAAI,CAAC;IAClC,MAAM,QAAQ,GAAuB,GAAG,EAAE,QAAQ,CAAC;IAEnD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,8DAA8D;QAC9D,MAAM,KAAK,GAAI,MAAc,CAAC,KAAgC,CAAC;QAC/D,MAAM,QAAQ,GAA4B,EAAE,CAAC;QAC7C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS,CAAC,wDAAwD;YACpE,CAAC;YACD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC3D,IAAI,QAAQ,KAAK,KAAK;gBAAE,OAAO,GAAG,IAAI,CAAC;YACvC,QAAQ,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC;QAC5B,IAAI,OAAO,GAAiB,CAAC,CAAC,MAAM,CAAC,QAAyB,CAAC,CAAC;QAChE,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;YAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC;QACvB,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,QAAQ,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC;QACtC,IAAI,OAAO,GAAiB,CAAC,CAAC,KAAK,CAAC,QAAwB,CAAC,CAAC;QAC9D,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;YAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;QAC5B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3D,OAAO,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAwB,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;QAC5B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3D,OAAO,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAwB,CAAC,CAAC;IAC5E,CAAC;IAED,mEAAmE;IACnE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,6EAA6E;AAC7E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,kBAAkB,EAAE,4DAA4D;CACjF,CAAC,CAAC;AAEH,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GACrB,sBAAsB;IACtB,qFAAqF;IACrF,oCAAoC;IACpC,6GAA6G;IAC3G,gIAAgI;IAClI,8FAA8F;IAC9F,+BAA+B;IAC/B,uCAAuC,CAAC;AAE1C,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE;;;;;;;;;;;;;;;;GAgBG;AACH,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB,CAAC,MAAW;IAC5C,MAAM,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAElD,uEAAuE;IAEvE,MAAM,oBAAoB,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9D,8DAA8D;IAC9D,MAAM,CAAC,YAAY,GAAG,CAAC,IAAY,EAAE,MAAW,EAAE,OAAY,EAAE,EAAE;QAChE,mEAAmE;QACnE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAE5C,kCAAkC;QAClC,IAAI,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAE3C,gCAAgC;QAChC,MAAM,YAAY,GAAG,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,WAAW,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,YAAY,EAAE,CAAC;QAClE,CAAC;QAED,0BAA0B;QAC1B,MAAM,YAAY,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,CAAC,WAAW,GAAG,YAAY,CAAC;QACpC,CAAC;QAED,6EAA6E;QAC7E,gFAAgF;QAChF,8EAA8E;QAC9E,+EAA+E;QAC/E,4EAA4E;QAC5E,2EAA2E;QAC3E,iFAAiF;QACjF,uEAAuE;QACvE,IACE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;YACtC,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC,EAC7C,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC;YAC7C,MAAM,CAAC,WAAW;gBAChB,EAAE,KAAK,IAAI;oBACT,CAAC,CAAC,6GAA6G;oBAC/G,CAAC,CAAC,gHAAgH,CAAC;QACzH,CAAC;QAED,kCAAkC;QAClC,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACrC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,2EAA2E;QAC3E,4EAA4E;QAC5E,wEAAwE;QACxE,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,MAAM,CAAC,YAAY,GAAG,0BAA0B,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QACxF,CAAC;QAED,oDAAoD;QACpD,8DAA8D;QAC9D,MAAM,cAAc,GAAG,KAAK,EAAE,KAAU,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YAEpC,iDAAiD;YACjD,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC7B,UAAU,CAAC,MAAM,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;YACvD,CAAC;YAED,mDAAmD;YACnD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC5D,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;oBACtD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QAEF,OAAO,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEF,uEAAuE;IAEvE,MAAM,wBAAwB,GAAG,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEtE,wDAAwD;IACxD,8DAA8D;IAC9D,MAAM,CAAC,gBAAgB,GAAG,CAAC,IAAY,EAAE,GAAG,IAAW,EAAE,EAAE;QACzD,8CAA8C;QAC9C,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAExC,+CAA+C;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACtC,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;YAClC,8DAA8D;YAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,IAAW,EAAE,EAAE;gBAC/C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;gBAEtC,yDAAyD;gBACzD,IAAI,MAAM,EAAE,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACvD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;wBACtC,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;4BACrC,qDAAqD;4BACrD,IAAI,CAAC;gCACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gCACxC,UAAU,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;gCACnC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;4BACjD,CAAC;4BAAC,MAAM,CAAC;gCACP,0CAA0C;gCAC1C,OAAO,CAAC,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;4BAC1D,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,wBAAwB,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,uEAAuE;IAEvE,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QAC1E,8DAA8D;QAC9D,MAAM,CAAC,cAAc,GAAG,CAAC,KAAa,EAAE,GAAG,KAAY,EAAE,EAAE,CAAC,SAAS,CAAC;IACxE,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;AAE/D,yDAAyD;AACzD,MAAM,CAAC,MAAM,yBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;AAEnE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,8BAA8B,GACzC,OAAO,CAAC,YAAY,CAAC;AAEvB,iEAAiE;AACjE,MAAM,CAAC,MAAM,8BAA8B,GAAG,iBAAiB,CAAC,IAAI,CAAC"}
|
|
@@ -0,0 +1,39 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Shared PII / credential redaction policy for the Frihet MCP server.
|
|
3
|
+
*
|
|
4
|
+
* Single source of truth for the set of field names that must never leave the
|
|
5
|
+
* process in cleartext — government IDs (NIF/CIF/VAT), banking identifiers,
|
|
6
|
+
* identity documents, webhook signing secrets, and auth tokens.
|
|
7
|
+
*
|
|
8
|
+
* Two consumers:
|
|
9
|
+
* - openai-profile.ts — strips these from tool I/O in OpenAI-safe mode
|
|
10
|
+
* (in-place DELETE of the live response the user receives).
|
|
11
|
+
* - observability.ts — redacts these from every Langfuse trace payload
|
|
12
|
+
* (non-mutating CLONE) so an external observability service never stores a
|
|
13
|
+
* taxId / secret / IBAN, regardless of profile mode.
|
|
14
|
+
*
|
|
15
|
+
* Zero runtime deps — safe in both Node.js (stdio) and Cloudflare Workers (edge).
|
|
16
|
+
*/
|
|
17
|
+
/** Sentinel left in place of a redacted value in cloned (tracing) payloads. */
|
|
18
|
+
export declare const REDACTED = "[redacted]";
|
|
19
|
+
/**
|
|
20
|
+
* Field names whose VALUES must never appear in logs, traces, or any surface
|
|
21
|
+
* outside the process boundary. Includes snake_case + locale synonyms because
|
|
22
|
+
* the Frihet API may return any of them via `.passthrough()` schemas.
|
|
23
|
+
*/
|
|
24
|
+
export declare const SENSITIVE_FIELD_NAMES: readonly string[];
|
|
25
|
+
/** Recursively removes named fields from an object/array tree, IN PLACE. */
|
|
26
|
+
export declare function deepRedact(obj: unknown, fields?: readonly string[]): void;
|
|
27
|
+
/** Best-effort redaction of JSON field patterns from display / serialized text. */
|
|
28
|
+
export declare function redactText(text: string, fields?: readonly string[]): string;
|
|
29
|
+
/**
|
|
30
|
+
* Returns a deep CLONE of `value` with sensitive field values replaced by the
|
|
31
|
+
* REDACTED sentinel (objects/arrays) and JSON field patterns stripped from any
|
|
32
|
+
* string leaf (covers the serialized MCP `content[].text` block).
|
|
33
|
+
*
|
|
34
|
+
* Unlike {@link deepRedact} this never mutates its argument — required for
|
|
35
|
+
* tracing, where the original object is the live response returned to the
|
|
36
|
+
* caller. A depth guard bounds pathological / cyclic structures.
|
|
37
|
+
*/
|
|
38
|
+
export declare function redactClone(value: unknown, fields?: readonly string[], depth?: number): unknown;
|
|
39
|
+
//# sourceMappingURL=redaction.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,QAAQ,eAAe,CAAC;AAErC;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAclD,CAAC;AAEF,4EAA4E;AAC5E,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,SAAS,MAAM,EAA0B,GAAG,IAAI,CAehG;AAED,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,SAAS,MAAM,EAA0B,GAAG,MAAM,CAclG;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,OAAO,EACd,MAAM,GAAE,SAAS,MAAM,EAA0B,EACjD,KAAK,SAAI,GACR,OAAO,CAWT"}
|