@gethelio/proxy 0.7.0 → 0.9.0

package/dist/cli.js

@@ -3277,6 +3277,7 @@ var GovernedForwarder = class {
     let result;
     let approvalOutcome;
     let approvalWaitMs = 0;
+    let approvalContext;
     let rateLimitResult;
     let spendLimitResult;
     let forwardingError;
@@ -3306,6 +3307,7 @@ var GovernedForwarder = class {
           result = approvalResult.result;
           approvalOutcome = approvalResult.outcome;
           approvalWaitMs = approvalResult.approvalWaitMs;
+          approvalContext = approvalResult.approvalContext;
         }
       } else if (decision.action === "rate_limit") {
         if (!this.rateLimiter) {
@@ -3358,6 +3360,7 @@ var GovernedForwarder = class {
       dependencyResult,
       evidenceBlocked,
       approvalOutcome,
+      approvalContext,
       rateLimitResult,
       spendLimitResult,
       isDryRun,
@@ -3379,6 +3382,16 @@ var GovernedForwarder = class {
       request.signal
     );
     const approvalWaitMs = performance.now() - approvalStart;
+    const ticket = outcome.ticketId ? router.getTicket(outcome.ticketId) : void 0;
+    const denialReason = outcome.status === "denied" && outcome.reason ? outcome.reason : void 0;
+    const approvalContext = outcome.ticketId && (denialReason || ticket?.escalated_at) ? {
+      ticket_id: outcome.ticketId,
+      ...denialReason ? { denial_reason: denialReason } : {},
+      ...ticket?.escalated_at ? {
+        escalated_at: ticket.escalated_at,
+        escalated_to: [...ticket.escalated_to ?? []]
+      } : {}
+    } : void 0;
     let result;
     if (outcome.status === "approved" || outcome.status === "break_glass") {
       if (request.signal?.aborted) {
@@ -3407,7 +3420,7 @@ var GovernedForwarder = class {
         result = makeErrorResult(request, POLICY_DENIED, message, { ...feedback });
       }
     }
-    return { result, outcome, approvalWaitMs };
+    return { result, outcome, approvalWaitMs, approvalContext };
   }
   async handleRateLimit(request, decision, toolName) {
     const limiter = this.rateLimiter;
@@ -3587,7 +3600,7 @@ var GovernedForwarder = class {
   wasForwardedUpstream(decision, approvalOutcome, rateLimitResult, spendLimitResult) {
     return decision.action === "allow" || approvalOutcome?.status === "approved" || approvalOutcome?.status === "break_glass" || approvalOutcome?.status === "timeout" && this.approvalRouter?.defaultOnTimeout === "allow" || rateLimitResult?.allowed === true || spendLimitResult?.allowed === true;
   }
-  writeAuditRecord(request, timestamp, toolName, toolArguments, decision, result, totalDurationMs, approvalWaitMs, flaggedDestructive, evidenceResult, dependencyResult, evidenceBlocked, approvalOutcome, rateLimitResult, spendLimitResult, isDryRun, forwardingError, drift) {
+  writeAuditRecord(request, timestamp, toolName, toolArguments, decision, result, totalDurationMs, approvalWaitMs, flaggedDestructive, evidenceResult, dependencyResult, evidenceBlocked, approvalOutcome, approvalContext, rateLimitResult, spendLimitResult, isDryRun, forwardingError, drift) {
     if (!this.auditWriter) return;
     const wasForwarded = this.wasForwardedUpstream(
       decision,
@@ -3622,6 +3635,12 @@ var GovernedForwarder = class {
         }
       };
     }
+    if (approvalContext) {
+      evidenceChain = {
+        ...evidenceChain ?? {},
+        approval: { ...approvalContext }
+      };
+    }
     if (rateLimitResult) {
       evidenceChain = {
         ...evidenceChain ?? {},
@@ -4445,6 +4464,8 @@ function clampInt(value, fallback, min, max) {
 
 // src/audit/store.ts
 var DRIFT_EVENT_DECISIONS_SQL = "('tool_drift', 'tool_drift_reverted')";
+var EXPORT_MAX_RECORDS = 1e4;
+var LIST_MAX_PAGE_SIZE = 1e3;
 var CREATE_TABLE_DDL = `
 CREATE TABLE IF NOT EXISTS audit_records (
   id                TEXT PRIMARY KEY,
@@ -4748,15 +4769,28 @@ var AuditStore = class {
     const row = this.db.prepare("SELECT * FROM audit_records WHERE id = ?").get(id);
     return row ? deserializeRow(row) : void 0;
   }
-  /** Query records with filters and pagination. */
+  /** Query records with filters and pagination. Capped at 1,000 per page. */
   list(filters = {}, pagination = {}) {
-    const { clause, params } = buildWhereClause(filters);
-    const limit = clamp(pagination.limit ?? 50, 1, 1e3);
+    const limit = clamp(pagination.limit ?? 50, 1, LIST_MAX_PAGE_SIZE);
     const offset = Math.max(pagination.offset ?? 0, 0);
     const order = pagination.order === "asc" ? "ASC" : "DESC";
+    return this.query(filters, limit, offset, order);
+  }
+  /**
+   * Query records for bulk export. Unlike `list()`, which enforces the
+   * dashboard's 1,000-row page cap, this path allows up to
+   * {@link EXPORT_MAX_RECORDS} in a single call. Always oldest-first
+   * (ascending `created_at`), so a capped export keeps the earliest records.
+   */
+  listForExport(filters = {}, limit) {
+    const clamped = clamp(limit ?? EXPORT_MAX_RECORDS, 1, EXPORT_MAX_RECORDS);
+    return this.query(filters, clamped, 0, "ASC");
+  }
+  query(filters, limit, offset, order) {
+    const { clause, params } = buildWhereClause(filters);
     const { total } = this.db.prepare(`SELECT COUNT(*) as total FROM audit_records ${clause}`).get(...params);
     const rows = this.db.prepare(
-      `SELECT * FROM audit_records ${clause} ORDER BY created_at ${order} LIMIT ? OFFSET ?`
+      `SELECT * FROM audit_records ${clause} ORDER BY created_at ${order}, rowid ${order} LIMIT ? OFFSET ?`
     ).all(...params, limit, offset);
     return {
       records: rows.map(deserializeRow),
@@ -5255,6 +5289,7 @@ var EvidenceStore = class _EvidenceStore {
 // src/evidence/api.ts
 import { Hono as Hono5 } from "hono";
 import { bodyLimit } from "hono/body-limit";
+import { HTTPException } from "hono/http-exception";
 import { z as z5 } from "zod";
 
 // src/auth/bearer.ts
@@ -5455,6 +5490,11 @@ function createSidebandApp(store, options = {}) {
   const app = new Hono5();
   const sdkToken = options.token && options.token.length > 0 ? options.token : void 0;
   const adapterToken = options.adapterToken && options.adapterToken.length > 0 ? options.adapterToken : void 0;
+  app.onError((err, c) => {
+    if (err instanceof HTTPException) return err.getResponse();
+    console.error("[helio] Unhandled sideband API error:", err);
+    return c.json({ error: "Internal server error" }, 500);
+  });
   app.use("*", async (c, next) => {
     const origin = c.req.header("origin");
     if (origin) {
@@ -5567,6 +5607,7 @@ var MAX_PENDING_BYTES = 64 * 1024 * 1024;
 var MAX_SENDER_KEYS = 5e4;
 var MAX_EVIDENCE_ENTRIES = 16;
 var MAX_EVIDENCE_BYTES = 64 * 1024;
+var MAX_VERSION_LOG_LINES_PER_ORIGIN = 5;
 var SWEEP_INTERVAL_MS2 = 3e4;
 var GovernanceService = class {
   policy;
@@ -5584,6 +5625,13 @@ var GovernanceService = class {
   maxSenderKeys;
   /** Distinct sender_id limit keys with live state (reservation registry, issue #13). */
   senderKeys = /* @__PURE__ */ new Set();
+  /**
+   * Per-origin adapter liveness (issue #126). New origins are inserted ONLY on
+   * the /evaluate path, which sits behind the MAX_ORIGINS cache gate — every
+   * other path updates existing entries and skips unknown origins, so the
+   * registry shares the origin cap instead of adding a second growth vector.
+   */
+  adapters = /* @__PURE__ */ new Map();
   pending = /* @__PURE__ */ new Map();
   tombstones = /* @__PURE__ */ new Map();
   caches = /* @__PURE__ */ new Map();
@@ -5641,6 +5689,7 @@ var GovernanceService = class {
       return { status: 503, body: { error: "evaluation_backlog_full" } };
     }
     const cache = this.cacheFor(req.origin);
+    this.recordAdapterSeen(req.origin, req.adapter_version);
     const toolName = req.tool.name;
     const hasDefinition = definitionProvided(req.tool);
     if (hasDefinition) {
@@ -5832,6 +5881,7 @@ var GovernanceService = class {
     }
     let approvalStatus = null;
     let approvedBy = null;
+    let approvalContext;
     if (entry.approvalTicketId) {
       const ticket = this.getTicketStatus(entry.approvalTicketId);
       const status = ticket?.status;
@@ -5840,6 +5890,16 @@ var GovernanceService = class {
       }
       approvalStatus = status;
       approvedBy = ticket.resolved_by ?? null;
+      if (ticket.denial_reason || ticket.escalated_at) {
+        approvalContext = {
+          ticket_id: entry.approvalTicketId,
+          ...ticket.denial_reason ? { denial_reason: ticket.denial_reason } : {},
+          ...ticket.escalated_at ? {
+            escalated_at: ticket.escalated_at,
+            escalated_to: [...ticket.escalated_to ?? []]
+          } : {}
+        };
+      }
     }
     if (req.actual_amount !== void 0) {
       if (!Number.isFinite(req.actual_amount) || req.actual_amount < 0) {
@@ -5876,6 +5936,7 @@ var GovernanceService = class {
       limitsChain,
       approvalStatus,
       approvedBy,
+      approvalContext,
       upstreamError: req.status === "error" ? req.error ?? "tool call failed" : null,
       upstreamResponse: req.result ?? null,
       upstreamLatencyMs: req.duration_ms ?? null
@@ -5887,6 +5948,7 @@ var GovernanceService = class {
       finalizedBy: "audit",
       expiresAtMs: this.now() + this.ttlMs
     });
+    this.touchAdapter(entry.origin);
     const body = { ok: true, audit_record_id: auditId };
     if (evidenceOutcomes) body["evidence"] = evidenceOutcomes;
     return { status: 201, body };
@@ -5952,6 +6014,7 @@ var GovernanceService = class {
     if (reserved) {
       return { status: 400, body: { error: "reserved_metadata_key", key: reserved } };
     }
+    this.touchAdapter(req.origin);
     const evaluationId = randomUUID4();
     const toolName = `install:${req.package.source ?? "pkg"}:${req.package.name}`;
     const verdict = this.evaluateInstall(req);
@@ -6016,6 +6079,65 @@ var GovernanceService = class {
     };
   }
   // -------------------------------------------------------------------------
+  // Adapter liveness registry (issue #126)
+  // -------------------------------------------------------------------------
+  /** Wire-ready liveness entries, most recently seen first. */
+  listAdapters() {
+    return [...this.adapters.entries()].sort(([oa, a], [ob, b]) => b.lastSeenMs - a.lastSeenMs || oa.localeCompare(ob)).map(([origin, state]) => ({
+      origin,
+      adapter_version: state.adapterVersion,
+      first_seen: new Date(state.firstSeenMs).toISOString(),
+      last_seen: new Date(state.lastSeenMs).toISOString()
+    }));
+  }
+  /** Insert-or-refresh on the /evaluate path (the only insert site). */
+  recordAdapterSeen(origin, version) {
+    const normalized = version && version.length <= 64 ? version : void 0;
+    const now = this.now();
+    const existing = this.adapters.get(origin);
+    if (!existing) {
+      const state = {
+        adapterVersion: normalized ?? null,
+        firstSeenMs: now,
+        lastSeenMs: now,
+        versionLogCount: 0
+      };
+      this.adapters.set(origin, state);
+      if (normalized !== void 0) this.logVersionEvent(origin, state, null, normalized);
+      return;
+    }
+    existing.lastSeenMs = Math.max(existing.lastSeenMs, now);
+    if (normalized !== void 0 && normalized !== existing.adapterVersion) {
+      this.logVersionEvent(origin, existing, existing.adapterVersion, normalized);
+      existing.adapterVersion = normalized;
+    }
+  }
+  /** Refresh-only for paths without an origin budget gate (install-scan, audit). */
+  touchAdapter(origin) {
+    const existing = this.adapters.get(origin);
+    if (!existing) return;
+    existing.lastSeenMs = Math.max(existing.lastSeenMs, this.now());
+  }
+  /**
+   * Log a version sighting/change, capped per origin per boot. Both origin and
+   * version are caller-controlled free text, so both are JSON-escaped — a
+   * newline or control character must not be able to forge extra log lines
+   * (the route's origin regex does not protect direct embedders).
+   */
+  logVersionEvent(origin, state, from, to) {
+    if (state.versionLogCount > MAX_VERSION_LOG_LINES_PER_ORIGIN) return;
+    state.versionLogCount += 1;
+    if (state.versionLogCount > MAX_VERSION_LOG_LINES_PER_ORIGIN) {
+      console.error(
+        `[helio] adapter origin ${JSON.stringify(origin)}: suppressing further version logs after ${String(MAX_VERSION_LOG_LINES_PER_ORIGIN)}`
+      );
+      return;
+    }
+    console.error(
+      from === null ? `[helio] adapter origin ${JSON.stringify(origin)} reports version ${JSON.stringify(to)}` : `[helio] adapter origin ${JSON.stringify(origin)} version changed ${JSON.stringify(from)} -> ${JSON.stringify(to)}`
+    );
+  }
+  // -------------------------------------------------------------------------
   // POST /approval/:id/resolve
   // -------------------------------------------------------------------------
   resolveApproval(ticketId, req) {
@@ -6117,6 +6239,7 @@ var GovernanceService = class {
     this.tombstones.clear();
     this.caches.clear();
     this.senderKeys.clear();
+    this.adapters.clear();
     this.pendingBytes = 0;
   }
   // -------------------------------------------------------------------------
@@ -6281,6 +6404,9 @@ var GovernanceService = class {
     if (args.sidebandUnreported) {
       evidenceChain = { ...evidenceChain ?? {}, sideband: { unreported: true } };
     }
+    if (args.approvalContext) {
+      evidenceChain = { ...evidenceChain ?? {}, approval: { ...args.approvalContext } };
+    }
     const record = {
       timestamp: args.timestampIso,
       session_id: args.sessionId,
@@ -7367,6 +7493,7 @@ import { readFileSync } from "fs";
 import { join } from "path";
 import { randomUUID as randomUUID6 } from "crypto";
 import { Hono as Hono8 } from "hono";
+import { HTTPException as HTTPException2 } from "hono/http-exception";
 import { z as z8 } from "zod";
 import { cors } from "hono/cors";
 import { serveStatic } from "@hono/node-server/serve-static";
@@ -7397,7 +7524,10 @@ var CSV_HEADERS = [
   "dry_run",
   "created_at",
   "environment",
-  "matched_rule_index"
+  "matched_rule_index",
+  "record_kind",
+  "origin",
+  "metadata"
 ];
 var FORMULA_PREFIXES = /^[=+\-@\t\r]/;
 function csvEscape(value) {
@@ -7543,7 +7673,7 @@ var feedQuerySchema = z8.object({
 });
 var auditExportQuerySchema = z8.object({
   format: z8.preprocess((value) => value === "csv" ? "csv" : "json", z8.enum(["json", "csv"])),
-  limit: clampedQueryInt(1e4, 1, 1e4),
+  limit: clampedQueryInt(EXPORT_MAX_RECORDS, 1, EXPORT_MAX_RECORDS),
   tool: optionalQueryString,
   decision: optionalQueryString,
   reason: optionalQueryString,
@@ -7561,7 +7691,7 @@ var auditExportQuerySchema = z8.object({
   sender_id: optionalQueryString
 });
 var auditQuerySchema = z8.object({
-  limit: clampedQueryInt(50, 1, 1e3),
+  limit: clampedQueryInt(50, 1, LIST_MAX_PAGE_SIZE),
   offset: clampedQueryInt(0, 0, Number.MAX_SAFE_INTEGER),
   tool: optionalQueryString,
   decision: optionalQueryString,
@@ -7633,6 +7763,16 @@ function shouldSetSecureCookie(url, xForwardedProto) {
   if (xForwardedProto?.toLowerCase() === "https") return true;
   return new URL(url).protocol === "https:";
 }
+function isPrivateIpv4(host) {
+  const match = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
+  if (!match) return false;
+  const a = Number(match[1]);
+  const b = Number(match[2]);
+  const c = Number(match[3]);
+  const d = Number(match[4]);
+  if (a > 255 || b > 255 || c > 255 || d > 255) return false;
+  return a === 10 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168;
+}
 function createDashboardAppWithLifecycle(deps, options) {
   const {
     auditStore,
@@ -7641,11 +7781,17 @@ function createDashboardAppWithLifecycle(deps, options) {
     rateLimiter,
     spendLimiter,
     evidenceStore,
-    eventBus
+    eventBus,
+    adapterLiveness
   } = deps;
   const apiSecret = options?.apiSecret;
   const sessionStore = apiSecret ? new DashboardSessionStore({ secret: apiSecret, ttlMs: SESSION_TTL_MS }) : void 0;
   const app = new Hono8();
+  app.onError((err, c) => {
+    if (err instanceof HTTPException2) return err.getResponse();
+    console.error("[helio] Unhandled dashboard API error:", err);
+    return c.json({ error: "Internal server error" }, 500);
+  });
   app.use(
     "*",
     cors({
@@ -7655,7 +7801,7 @@ function createDashboardAppWithLifecycle(deps, options) {
           const url = new URL(origin);
           const h = url.hostname;
           if (h === "localhost" || h === "127.0.0.1" || h === "0.0.0.0") return origin;
-          if (/^(10\.|172\.(1[6-9]|2\d|3[01])\.|192\.168\.)/.test(h)) return origin;
+          if (isPrivateIpv4(h)) return origin;
         } catch {
         }
         return null;
@@ -7791,7 +7937,7 @@ function createDashboardAppWithLifecycle(deps, options) {
       channel_id: query.channel_id,
       sender_id: query.sender_id
     };
-    const result = auditStore.list(filters, { limit, order: "asc" });
+    const result = auditStore.listForExport(filters, limit);
     if (format === "csv") {
       const csv = recordsToCsv(result.records);
       return new Response(csv, {
@@ -7855,6 +8001,9 @@ function createDashboardAppWithLifecycle(deps, options) {
       spend_limits: spendLimiter.listKeyStates()
     });
   });
+  app.get("/api/adapters", (c) => {
+    return c.json({ adapters: adapterLiveness?.listAdapters() ?? [] });
+  });
   app.get("/api/analytics", (c) => {
     const query = analyticsQuerySchema.parse(c.req.query());
     const now = /* @__PURE__ */ new Date();
@@ -8385,6 +8534,7 @@ async function startCommand(configPath, options) {
   let sidebandToken;
   let sidebandTokenSource;
   let adapterToken;
+  let adapterTokenSource;
   let governanceService;
   if (config.sdk.enabled) {
     sidebandToken = process.env["HELIO_SDK_TOKEN"];
@@ -8399,6 +8549,9 @@ async function startCommand(configPath, options) {
     if (!adapterToken || adapterToken.length === 0) {
       adapterToken = randomBytes2(32).toString("hex");
       process.env["HELIO_ADAPTER_TOKEN"] = adapterToken;
+      adapterTokenSource = "generated";
+    } else {
+      adapterTokenSource = "env";
     }
     governanceService = new GovernanceService({
       policy,
@@ -8429,7 +8582,10 @@ async function startCommand(configPath, options) {
         rateLimiter,
         spendLimiter,
         evidenceStore,
-        eventBus
+        eventBus,
+        // Adapter liveness for GET /api/adapters (issue #126); undefined
+        // unless the SDK sideband is enabled → endpoint serves an empty list.
+        adapterLiveness: governanceService
       },
       {
         apiSecret: config.dashboard.api_secret,
@@ -8461,15 +8617,14 @@ async function startCommand(configPath, options) {
   if (sidebandHandle) {
     console.error(`SDK sideband listening on http://${config.sdk.host}:${String(config.sdk.port)}`);
     if (sidebandToken) {
-      const source = sidebandTokenSource === "env" ? "reusing HELIO_SDK_TOKEN from environment" : "generated per-boot HELIO_SDK_TOKEN";
       console.error(
-        `SDK token (${source}; pass as HELIO_SDK_TOKEN env var to your SDK clients):
+        sidebandTokenSource === "env" ? "SDK token: reusing HELIO_SDK_TOKEN from environment (value not shown)" : `SDK token (generated per-boot HELIO_SDK_TOKEN; pass as HELIO_SDK_TOKEN env var to your SDK clients):
   ${sidebandToken}`
       );
     }
     if (adapterToken) {
       console.error(
-        `Adapter token (governance routes; pass as HELIO_ADAPTER_TOKEN to your adapter):
+        adapterTokenSource === "env" ? "Adapter token: reusing HELIO_ADAPTER_TOKEN from environment (value not shown)" : `Adapter token (generated per-boot HELIO_ADAPTER_TOKEN; governance routes; pass as HELIO_ADAPTER_TOKEN to your adapter):
   ${adapterToken}`
       );
     }
@@ -8600,6 +8755,14 @@ async function validateCommand(configPath) {
   }
 }
 async function exportCommand(opts) {
+  const parsedLimit = Number(opts.limit);
+  if (!Number.isInteger(parsedLimit) || parsedLimit < 1) {
+    console.error(
+      `Error: --limit must be an integer between 1 and ${String(EXPORT_MAX_RECORDS)} (got "${opts.limit}")`
+    );
+    process.exit(1);
+  }
+  const limit = Math.min(parsedLimit, EXPORT_MAX_RECORDS);
   let config;
   try {
     config = await loadConfig(opts.config);
@@ -8618,7 +8781,7 @@ async function exportCommand(opts) {
     // No cleanup timer for one-shot CLI
   });
   try {
-    const result = store.list(
+    const result = store.listForExport(
       {
         tool_name: opts.tool,
         policy_decision: opts.decision,
@@ -8627,7 +8790,7 @@ async function exportCommand(opts) {
         from: opts.from,
         to: opts.to
       },
-      { limit: Number(opts.limit), order: "asc" }
+      limit
     );
     if (opts.format === "csv") {
       writeCsv(result.records);
@@ -8699,5 +8862,5 @@ program.command("start").description("Load config and start the proxy server").o
 );
 program.command("init").description("Scaffold a helio.yaml config file with commented defaults").option("-o, --output <path>", "Output file path", DEFAULT_CONFIG_PATH).option("-f, --force", "Overwrite existing file", false).action((opts) => initCommand(opts.output, opts.force));
 program.command("validate").description("Validate a helio.yaml config file").option("-c, --config <path>", "Path to helio.yaml", DEFAULT_CONFIG_PATH).action((opts) => validateCommand(opts.config));
-program.command("export").description("Export audit records to JSON or CSV").option("-c, --config <path>", "Path to helio.yaml", DEFAULT_CONFIG_PATH).option("-f, --format <format>", "Output format: json or csv", "json").option("--tool <name>", "Filter by tool name").option("--decision <decision>", "Filter by policy decision").option("--reason <reason>", "Filter by block reason").option("--session <id>", "Filter by session ID").option("--from <iso>", "Start time (ISO 8601)").option("--to <iso>", "End time (ISO 8601)").option("--limit <n>", "Max records to export", "1000").action((opts) => exportCommand(opts));
+program.command("export").description("Export audit records to JSON or CSV").option("-c, --config <path>", "Path to helio.yaml", DEFAULT_CONFIG_PATH).option("-f, --format <format>", "Output format: json or csv", "json").option("--tool <name>", "Filter by tool name").option("--decision <decision>", "Filter by policy decision").option("--reason <reason>", "Filter by block reason").option("--session <id>", "Filter by session ID").option("--from <iso>", "Start time (ISO 8601)").option("--to <iso>", "End time (ISO 8601)").option("--limit <n>", "Max records to export (up to 10000)", "1000").action((opts) => exportCommand(opts));
 program.parse();