@gethelio/proxy 0.8.0 → 0.9.0

package/dist/cli.js

@@ -4464,6 +4464,8 @@ function clampInt(value, fallback, min, max) {
 
 // src/audit/store.ts
 var DRIFT_EVENT_DECISIONS_SQL = "('tool_drift', 'tool_drift_reverted')";
+var EXPORT_MAX_RECORDS = 1e4;
+var LIST_MAX_PAGE_SIZE = 1e3;
 var CREATE_TABLE_DDL = `
 CREATE TABLE IF NOT EXISTS audit_records (
   id                TEXT PRIMARY KEY,
@@ -4767,15 +4769,28 @@ var AuditStore = class {
     const row = this.db.prepare("SELECT * FROM audit_records WHERE id = ?").get(id);
     return row ? deserializeRow(row) : void 0;
   }
-  /** Query records with filters and pagination. */
+  /** Query records with filters and pagination. Capped at 1,000 per page. */
   list(filters = {}, pagination = {}) {
-    const { clause, params } = buildWhereClause(filters);
-    const limit = clamp(pagination.limit ?? 50, 1, 1e3);
+    const limit = clamp(pagination.limit ?? 50, 1, LIST_MAX_PAGE_SIZE);
     const offset = Math.max(pagination.offset ?? 0, 0);
     const order = pagination.order === "asc" ? "ASC" : "DESC";
+    return this.query(filters, limit, offset, order);
+  }
+  /**
+   * Query records for bulk export. Unlike `list()`, which enforces the
+   * dashboard's 1,000-row page cap, this path allows up to
+   * {@link EXPORT_MAX_RECORDS} in a single call. Always oldest-first
+   * (ascending `created_at`), so a capped export keeps the earliest records.
+   */
+  listForExport(filters = {}, limit) {
+    const clamped = clamp(limit ?? EXPORT_MAX_RECORDS, 1, EXPORT_MAX_RECORDS);
+    return this.query(filters, clamped, 0, "ASC");
+  }
+  query(filters, limit, offset, order) {
+    const { clause, params } = buildWhereClause(filters);
     const { total } = this.db.prepare(`SELECT COUNT(*) as total FROM audit_records ${clause}`).get(...params);
     const rows = this.db.prepare(
-      `SELECT * FROM audit_records ${clause} ORDER BY created_at ${order} LIMIT ? OFFSET ?`
+      `SELECT * FROM audit_records ${clause} ORDER BY created_at ${order}, rowid ${order} LIMIT ? OFFSET ?`
     ).all(...params, limit, offset);
     return {
       records: rows.map(deserializeRow),
@@ -5592,6 +5607,7 @@ var MAX_PENDING_BYTES = 64 * 1024 * 1024;
 var MAX_SENDER_KEYS = 5e4;
 var MAX_EVIDENCE_ENTRIES = 16;
 var MAX_EVIDENCE_BYTES = 64 * 1024;
+var MAX_VERSION_LOG_LINES_PER_ORIGIN = 5;
 var SWEEP_INTERVAL_MS2 = 3e4;
 var GovernanceService = class {
   policy;
@@ -5609,6 +5625,13 @@ var GovernanceService = class {
   maxSenderKeys;
   /** Distinct sender_id limit keys with live state (reservation registry, issue #13). */
   senderKeys = /* @__PURE__ */ new Set();
+  /**
+   * Per-origin adapter liveness (issue #126). New origins are inserted ONLY on
+   * the /evaluate path, which sits behind the MAX_ORIGINS cache gate — every
+   * other path updates existing entries and skips unknown origins, so the
+   * registry shares the origin cap instead of adding a second growth vector.
+   */
+  adapters = /* @__PURE__ */ new Map();
   pending = /* @__PURE__ */ new Map();
   tombstones = /* @__PURE__ */ new Map();
   caches = /* @__PURE__ */ new Map();
@@ -5666,6 +5689,7 @@ var GovernanceService = class {
       return { status: 503, body: { error: "evaluation_backlog_full" } };
     }
     const cache = this.cacheFor(req.origin);
+    this.recordAdapterSeen(req.origin, req.adapter_version);
     const toolName = req.tool.name;
     const hasDefinition = definitionProvided(req.tool);
     if (hasDefinition) {
@@ -5924,6 +5948,7 @@ var GovernanceService = class {
       finalizedBy: "audit",
       expiresAtMs: this.now() + this.ttlMs
     });
+    this.touchAdapter(entry.origin);
     const body = { ok: true, audit_record_id: auditId };
     if (evidenceOutcomes) body["evidence"] = evidenceOutcomes;
     return { status: 201, body };
@@ -5989,6 +6014,7 @@ var GovernanceService = class {
     if (reserved) {
       return { status: 400, body: { error: "reserved_metadata_key", key: reserved } };
     }
+    this.touchAdapter(req.origin);
     const evaluationId = randomUUID4();
     const toolName = `install:${req.package.source ?? "pkg"}:${req.package.name}`;
     const verdict = this.evaluateInstall(req);
@@ -6053,6 +6079,65 @@ var GovernanceService = class {
     };
   }
   // -------------------------------------------------------------------------
+  // Adapter liveness registry (issue #126)
+  // -------------------------------------------------------------------------
+  /** Wire-ready liveness entries, most recently seen first. */
+  listAdapters() {
+    return [...this.adapters.entries()].sort(([oa, a], [ob, b]) => b.lastSeenMs - a.lastSeenMs || oa.localeCompare(ob)).map(([origin, state]) => ({
+      origin,
+      adapter_version: state.adapterVersion,
+      first_seen: new Date(state.firstSeenMs).toISOString(),
+      last_seen: new Date(state.lastSeenMs).toISOString()
+    }));
+  }
+  /** Insert-or-refresh on the /evaluate path (the only insert site). */
+  recordAdapterSeen(origin, version) {
+    const normalized = version && version.length <= 64 ? version : void 0;
+    const now = this.now();
+    const existing = this.adapters.get(origin);
+    if (!existing) {
+      const state = {
+        adapterVersion: normalized ?? null,
+        firstSeenMs: now,
+        lastSeenMs: now,
+        versionLogCount: 0
+      };
+      this.adapters.set(origin, state);
+      if (normalized !== void 0) this.logVersionEvent(origin, state, null, normalized);
+      return;
+    }
+    existing.lastSeenMs = Math.max(existing.lastSeenMs, now);
+    if (normalized !== void 0 && normalized !== existing.adapterVersion) {
+      this.logVersionEvent(origin, existing, existing.adapterVersion, normalized);
+      existing.adapterVersion = normalized;
+    }
+  }
+  /** Refresh-only for paths without an origin budget gate (install-scan, audit). */
+  touchAdapter(origin) {
+    const existing = this.adapters.get(origin);
+    if (!existing) return;
+    existing.lastSeenMs = Math.max(existing.lastSeenMs, this.now());
+  }
+  /**
+   * Log a version sighting/change, capped per origin per boot. Both origin and
+   * version are caller-controlled free text, so both are JSON-escaped — a
+   * newline or control character must not be able to forge extra log lines
+   * (the route's origin regex does not protect direct embedders).
+   */
+  logVersionEvent(origin, state, from, to) {
+    if (state.versionLogCount > MAX_VERSION_LOG_LINES_PER_ORIGIN) return;
+    state.versionLogCount += 1;
+    if (state.versionLogCount > MAX_VERSION_LOG_LINES_PER_ORIGIN) {
+      console.error(
+        `[helio] adapter origin ${JSON.stringify(origin)}: suppressing further version logs after ${String(MAX_VERSION_LOG_LINES_PER_ORIGIN)}`
+      );
+      return;
+    }
+    console.error(
+      from === null ? `[helio] adapter origin ${JSON.stringify(origin)} reports version ${JSON.stringify(to)}` : `[helio] adapter origin ${JSON.stringify(origin)} version changed ${JSON.stringify(from)} -> ${JSON.stringify(to)}`
+    );
+  }
+  // -------------------------------------------------------------------------
   // POST /approval/:id/resolve
   // -------------------------------------------------------------------------
   resolveApproval(ticketId, req) {
@@ -6154,6 +6239,7 @@ var GovernanceService = class {
     this.tombstones.clear();
     this.caches.clear();
     this.senderKeys.clear();
+    this.adapters.clear();
     this.pendingBytes = 0;
   }
   // -------------------------------------------------------------------------
@@ -7438,7 +7524,10 @@ var CSV_HEADERS = [
   "dry_run",
   "created_at",
   "environment",
-  "matched_rule_index"
+  "matched_rule_index",
+  "record_kind",
+  "origin",
+  "metadata"
 ];
 var FORMULA_PREFIXES = /^[=+\-@\t\r]/;
 function csvEscape(value) {
@@ -7584,7 +7673,7 @@ var feedQuerySchema = z8.object({
 });
 var auditExportQuerySchema = z8.object({
   format: z8.preprocess((value) => value === "csv" ? "csv" : "json", z8.enum(["json", "csv"])),
-  limit: clampedQueryInt(1e4, 1, 1e4),
+  limit: clampedQueryInt(EXPORT_MAX_RECORDS, 1, EXPORT_MAX_RECORDS),
   tool: optionalQueryString,
   decision: optionalQueryString,
   reason: optionalQueryString,
@@ -7602,7 +7691,7 @@ var auditExportQuerySchema = z8.object({
   sender_id: optionalQueryString
 });
 var auditQuerySchema = z8.object({
-  limit: clampedQueryInt(50, 1, 1e3),
+  limit: clampedQueryInt(50, 1, LIST_MAX_PAGE_SIZE),
   offset: clampedQueryInt(0, 0, Number.MAX_SAFE_INTEGER),
   tool: optionalQueryString,
   decision: optionalQueryString,
@@ -7692,7 +7781,8 @@ function createDashboardAppWithLifecycle(deps, options) {
     rateLimiter,
     spendLimiter,
     evidenceStore,
-    eventBus
+    eventBus,
+    adapterLiveness
   } = deps;
   const apiSecret = options?.apiSecret;
   const sessionStore = apiSecret ? new DashboardSessionStore({ secret: apiSecret, ttlMs: SESSION_TTL_MS }) : void 0;
@@ -7847,7 +7937,7 @@ function createDashboardAppWithLifecycle(deps, options) {
       channel_id: query.channel_id,
       sender_id: query.sender_id
     };
-    const result = auditStore.list(filters, { limit, order: "asc" });
+    const result = auditStore.listForExport(filters, limit);
     if (format === "csv") {
       const csv = recordsToCsv(result.records);
       return new Response(csv, {
@@ -7911,6 +8001,9 @@ function createDashboardAppWithLifecycle(deps, options) {
       spend_limits: spendLimiter.listKeyStates()
     });
   });
+  app.get("/api/adapters", (c) => {
+    return c.json({ adapters: adapterLiveness?.listAdapters() ?? [] });
+  });
   app.get("/api/analytics", (c) => {
     const query = analyticsQuerySchema.parse(c.req.query());
     const now = /* @__PURE__ */ new Date();
@@ -8441,6 +8534,7 @@ async function startCommand(configPath, options) {
   let sidebandToken;
   let sidebandTokenSource;
   let adapterToken;
+  let adapterTokenSource;
   let governanceService;
   if (config.sdk.enabled) {
     sidebandToken = process.env["HELIO_SDK_TOKEN"];
@@ -8455,6 +8549,9 @@ async function startCommand(configPath, options) {
     if (!adapterToken || adapterToken.length === 0) {
       adapterToken = randomBytes2(32).toString("hex");
       process.env["HELIO_ADAPTER_TOKEN"] = adapterToken;
+      adapterTokenSource = "generated";
+    } else {
+      adapterTokenSource = "env";
     }
     governanceService = new GovernanceService({
       policy,
@@ -8485,7 +8582,10 @@ async function startCommand(configPath, options) {
         rateLimiter,
         spendLimiter,
         evidenceStore,
-        eventBus
+        eventBus,
+        // Adapter liveness for GET /api/adapters (issue #126); undefined
+        // unless the SDK sideband is enabled → endpoint serves an empty list.
+        adapterLiveness: governanceService
       },
       {
         apiSecret: config.dashboard.api_secret,
@@ -8517,15 +8617,14 @@ async function startCommand(configPath, options) {
   if (sidebandHandle) {
     console.error(`SDK sideband listening on http://${config.sdk.host}:${String(config.sdk.port)}`);
     if (sidebandToken) {
-      const source = sidebandTokenSource === "env" ? "reusing HELIO_SDK_TOKEN from environment" : "generated per-boot HELIO_SDK_TOKEN";
       console.error(
-        `SDK token (${source}; pass as HELIO_SDK_TOKEN env var to your SDK clients):
+        sidebandTokenSource === "env" ? "SDK token: reusing HELIO_SDK_TOKEN from environment (value not shown)" : `SDK token (generated per-boot HELIO_SDK_TOKEN; pass as HELIO_SDK_TOKEN env var to your SDK clients):
   ${sidebandToken}`
       );
     }
     if (adapterToken) {
       console.error(
-        `Adapter token (governance routes; pass as HELIO_ADAPTER_TOKEN to your adapter):
+        adapterTokenSource === "env" ? "Adapter token: reusing HELIO_ADAPTER_TOKEN from environment (value not shown)" : `Adapter token (generated per-boot HELIO_ADAPTER_TOKEN; governance routes; pass as HELIO_ADAPTER_TOKEN to your adapter):
   ${adapterToken}`
       );
     }
@@ -8656,6 +8755,14 @@ async function validateCommand(configPath) {
   }
 }
 async function exportCommand(opts) {
+  const parsedLimit = Number(opts.limit);
+  if (!Number.isInteger(parsedLimit) || parsedLimit < 1) {
+    console.error(
+      `Error: --limit must be an integer between 1 and ${String(EXPORT_MAX_RECORDS)} (got "${opts.limit}")`
+    );
+    process.exit(1);
+  }
+  const limit = Math.min(parsedLimit, EXPORT_MAX_RECORDS);
   let config;
   try {
     config = await loadConfig(opts.config);
@@ -8674,7 +8781,7 @@ async function exportCommand(opts) {
     // No cleanup timer for one-shot CLI
   });
   try {
-    const result = store.list(
+    const result = store.listForExport(
       {
         tool_name: opts.tool,
         policy_decision: opts.decision,
@@ -8683,7 +8790,7 @@ async function exportCommand(opts) {
         from: opts.from,
         to: opts.to
       },
-      { limit: Number(opts.limit), order: "asc" }
+      limit
     );
     if (opts.format === "csv") {
       writeCsv(result.records);
@@ -8755,5 +8862,5 @@ program.command("start").description("Load config and start the proxy server").o
 );
 program.command("init").description("Scaffold a helio.yaml config file with commented defaults").option("-o, --output <path>", "Output file path", DEFAULT_CONFIG_PATH).option("-f, --force", "Overwrite existing file", false).action((opts) => initCommand(opts.output, opts.force));
 program.command("validate").description("Validate a helio.yaml config file").option("-c, --config <path>", "Path to helio.yaml", DEFAULT_CONFIG_PATH).action((opts) => validateCommand(opts.config));
-program.command("export").description("Export audit records to JSON or CSV").option("-c, --config <path>", "Path to helio.yaml", DEFAULT_CONFIG_PATH).option("-f, --format <format>", "Output format: json or csv", "json").option("--tool <name>", "Filter by tool name").option("--decision <decision>", "Filter by policy decision").option("--reason <reason>", "Filter by block reason").option("--session <id>", "Filter by session ID").option("--from <iso>", "Start time (ISO 8601)").option("--to <iso>", "End time (ISO 8601)").option("--limit <n>", "Max records to export", "1000").action((opts) => exportCommand(opts));
+program.command("export").description("Export audit records to JSON or CSV").option("-c, --config <path>", "Path to helio.yaml", DEFAULT_CONFIG_PATH).option("-f, --format <format>", "Output format: json or csv", "json").option("--tool <name>", "Filter by tool name").option("--decision <decision>", "Filter by policy decision").option("--reason <reason>", "Filter by block reason").option("--session <id>", "Filter by session ID").option("--from <iso>", "Start time (ISO 8601)").option("--to <iso>", "End time (ISO 8601)").option("--limit <n>", "Max records to export (up to 10000)", "1000").action((opts) => exportCommand(opts));
 program.parse();

package/dist/index.d.ts

@@ -921,7 +921,7 @@ interface AuditQueryFilters {
 }
 /** Pagination options for list queries. */
 interface AuditPaginationOptions {
-    /** Maximum number of records to return (default: 50, max: 1000). */
+    /** Maximum number of records to return (default: 50, max: 1,000 — `LIST_MAX_PAGE_SIZE`). */
     readonly limit?: number;
     /** Number of records to skip (default: 0). */
     readonly offset?: number;
@@ -986,6 +986,17 @@ interface AuditStoreOptions {
     readonly cleanupIntervalMs?: number;
 }
 
+/**
+ * Maximum records a single bulk export may return. Shared by the dashboard
+ * export route schema and the CLI export command so the advertised cap and
+ * the store's actual cap cannot diverge.
+ */
+declare const EXPORT_MAX_RECORDS = 10000;
+/**
+ * Maximum page size for paginated `list()` reads. Shared with the dashboard
+ * audit route schema for the same reason as {@link EXPORT_MAX_RECORDS}.
+ */
+declare const LIST_MAX_PAGE_SIZE = 1000;
 /**
  * SQLite-backed audit record store.
  *
@@ -1032,8 +1043,16 @@ declare class AuditStore {
     insertBatch(records: ReadonlyArray<Omit<AuditRecord, 'id' | 'created_at'>>, onError?: (record: Omit<AuditRecord, 'id' | 'created_at'>, err: unknown) => void, ids?: ReadonlyArray<string>, onPersist?: (record: Omit<AuditRecord, 'id' | 'created_at'>, id: string) => void): number;
     /** Get a single record by ID, or undefined if not found. */
     get(id: string): AuditRecord | undefined;
-    /** Query records with filters and pagination. */
+    /** Query records with filters and pagination. Capped at 1,000 per page. */
     list(filters?: AuditQueryFilters, pagination?: AuditPaginationOptions): AuditListResult;
+    /**
+     * Query records for bulk export. Unlike `list()`, which enforces the
+     * dashboard's 1,000-row page cap, this path allows up to
+     * {@link EXPORT_MAX_RECORDS} in a single call. Always oldest-first
+     * (ascending `created_at`), so a capped export keeps the earliest records.
+     */
+    listForExport(filters?: AuditQueryFilters, limit?: number): AuditListResult;
+    private query;
     /** Count records matching the given filters. */
     count(filters?: AuditQueryFilters): number;
     /** Get aggregate statistics for a time range. */
@@ -1962,6 +1981,17 @@ interface ServiceResult {
     readonly status: number;
     readonly body: Record<string, unknown>;
 }
+/**
+ * Per-origin adapter liveness, wire-ready for the dashboard's
+ * `GET /api/adapters` (issue #126). ISO-8601 timestamps; `adapter_version`
+ * stays null until an /evaluate supplies one.
+ */
+interface AdapterLivenessEntry {
+    readonly origin: string;
+    readonly adapter_version: string | null;
+    readonly first_seen: string;
+    readonly last_seen: string;
+}
 interface GovernanceServiceOptions {
     readonly policy: CompiledPolicy;
     readonly environment?: string;
@@ -2001,6 +2031,13 @@ declare class GovernanceService {
     private readonly maxSenderKeys;
     /** Distinct sender_id limit keys with live state (reservation registry, issue #13). */
     private readonly senderKeys;
+    /**
+     * Per-origin adapter liveness (issue #126). New origins are inserted ONLY on
+     * the /evaluate path, which sits behind the MAX_ORIGINS cache gate — every
+     * other path updates existing entries and skips unknown origins, so the
+     * registry shares the origin cap instead of adding a second growth vector.
+     */
+    private readonly adapters;
     private readonly pending;
     private readonly tombstones;
     private readonly caches;
@@ -2031,6 +2068,19 @@ declare class GovernanceService {
     installScan(req: InstallScanInput): ServiceResult;
     /** First-match-wins evaluation of the compiled install policy (issue #13). */
     private evaluateInstall;
+    /** Wire-ready liveness entries, most recently seen first. */
+    listAdapters(): AdapterLivenessEntry[];
+    /** Insert-or-refresh on the /evaluate path (the only insert site). */
+    private recordAdapterSeen;
+    /** Refresh-only for paths without an origin budget gate (install-scan, audit). */
+    private touchAdapter;
+    /**
+     * Log a version sighting/change, capped per origin per boot. Both origin and
+     * version are caller-controlled free text, so both are JSON-escaped — a
+     * newline or control character must not be able to forge extra log lines
+     * (the route's origin regex does not protect direct embedders).
+     */
+    private logVersionEvent;
     resolveApproval(ticketId: string, req: ResolveApprovalInput): ServiceResult;
     sweep(): void;
     /**
@@ -2338,6 +2388,14 @@ interface DashboardAppDeps {
     readonly spendLimiter: SpendLimiter;
     readonly evidenceStore: EvidenceStore;
     readonly eventBus: DashboardEventBus;
+    /**
+     * Adapter liveness source for `GET /api/adapters` (issue #126) — a narrow
+     * view of the SDK sideband's GovernanceService. Absent when the SDK
+     * sideband is disabled; the endpoint then serves an empty list.
+     */
+    readonly adapterLiveness?: {
+        listAdapters(): AdapterLivenessEntry[];
+    };
 }
 /** Options for the dashboard API. */
 interface DashboardAppOptions {
@@ -2356,4 +2414,4 @@ interface DashboardAppOptions {
  */
 declare function createDashboardApp(deps: DashboardAppDeps, options?: DashboardAppOptions): Hono;
 
-export { type ApprovalAppOptions, type ApprovalChannel, type ApprovalOutcome, ApprovalQueue, type ApprovalQueueOptions, ApprovalRouter, type ApprovalRouterOptions, type ApprovalStatus, type ApprovalTicket, type AuditAggregateStats, type AuditInput, type AuditListResult, type AuditPaginationOptions, type AuditQueryFilters, type AuditRecord, AuditStore, type AuditStoreOptions, type AuditTimeBucket, AuditWriter, type AuditWriterOptions, type CompilePoliciesResult, type CompiledPolicy, type CompiledPolicyRule, ConfigError, type CreateAppOptions, type DashboardAppDeps, type DashboardAppOptions, DashboardEventBus, type DashboardEventType, type DashboardEvents, type EvaluateInput, type EvidenceEntry, EvidenceStore, type EvidenceStoreOptions, GovernanceConfigError, GovernanceService, type GovernanceServiceOptions, GovernedForwarder, type GovernedForwarderOptions, type HelioConfig, type InstallScanInput, type MatchContext, type PolicyDecision, PolicyParseError, QueueChannel, type RateLimitCheckParams, type RateLimitKeyState, type RateLimitResult, RateLimiter, type RateLimiterOptions, type ResolveApprovalInput, type ServerHandle, type SessionState, type SlackActionAppOptions, SlackChannel, type SlackChannelOptions, type SpendLimitCheckParams, type SpendLimitKeyState, type SpendLimitResult, SpendLimiter, type SpendLimiterOptions, SseUpstreamForwarder, type SseUpstreamForwarderOptions, StdioForwarder, type StdioForwarderOptions, StreamableHttpForwarder, type StreamableHttpForwarderOptions, UpstreamForwarder, type UpstreamForwarderOptions, VERSION, WebhookChannel, type WebhookChannelOptions, type WireDecision, compilePolicies, createApp, createApprovalApp, createChannels, createDashboardApp, createSidebandApp, createSlackActionApp, evaluatePolicy, loadConfig, matchRule, startServer, startSidebandServer };
+export { type AdapterLivenessEntry, type ApprovalAppOptions, type ApprovalChannel, type ApprovalOutcome, ApprovalQueue, type ApprovalQueueOptions, ApprovalRouter, type ApprovalRouterOptions, type ApprovalStatus, type ApprovalTicket, type AuditAggregateStats, type AuditInput, type AuditListResult, type AuditPaginationOptions, type AuditQueryFilters, type AuditRecord, AuditStore, type AuditStoreOptions, type AuditTimeBucket, AuditWriter, type AuditWriterOptions, type CompilePoliciesResult, type CompiledPolicy, type CompiledPolicyRule, ConfigError, type CreateAppOptions, type DashboardAppDeps, type DashboardAppOptions, DashboardEventBus, type DashboardEventType, type DashboardEvents, EXPORT_MAX_RECORDS, type EvaluateInput, type EvidenceEntry, EvidenceStore, type EvidenceStoreOptions, GovernanceConfigError, GovernanceService, type GovernanceServiceOptions, GovernedForwarder, type GovernedForwarderOptions, type HelioConfig, type InstallScanInput, LIST_MAX_PAGE_SIZE, type MatchContext, type PolicyDecision, PolicyParseError, QueueChannel, type RateLimitCheckParams, type RateLimitKeyState, type RateLimitResult, RateLimiter, type RateLimiterOptions, type ResolveApprovalInput, type ServerHandle, type SessionState, type SlackActionAppOptions, SlackChannel, type SlackChannelOptions, type SpendLimitCheckParams, type SpendLimitKeyState, type SpendLimitResult, SpendLimiter, type SpendLimiterOptions, SseUpstreamForwarder, type SseUpstreamForwarderOptions, StdioForwarder, type StdioForwarderOptions, StreamableHttpForwarder, type StreamableHttpForwarderOptions, UpstreamForwarder, type UpstreamForwarderOptions, VERSION, WebhookChannel, type WebhookChannelOptions, type WireDecision, compilePolicies, createApp, createApprovalApp, createChannels, createDashboardApp, createSidebandApp, createSlackActionApp, evaluatePolicy, loadConfig, matchRule, startServer, startSidebandServer };

package/dist/index.js

@@ -4873,6 +4873,7 @@ var MAX_PENDING_BYTES = 64 * 1024 * 1024;
 var MAX_SENDER_KEYS = 5e4;
 var MAX_EVIDENCE_ENTRIES = 16;
 var MAX_EVIDENCE_BYTES = 64 * 1024;
+var MAX_VERSION_LOG_LINES_PER_ORIGIN = 5;
 var SWEEP_INTERVAL_MS2 = 3e4;
 var GovernanceService = class {
   policy;
@@ -4890,6 +4891,13 @@ var GovernanceService = class {
   maxSenderKeys;
   /** Distinct sender_id limit keys with live state (reservation registry, issue #13). */
   senderKeys = /* @__PURE__ */ new Set();
+  /**
+   * Per-origin adapter liveness (issue #126). New origins are inserted ONLY on
+   * the /evaluate path, which sits behind the MAX_ORIGINS cache gate — every
+   * other path updates existing entries and skips unknown origins, so the
+   * registry shares the origin cap instead of adding a second growth vector.
+   */
+  adapters = /* @__PURE__ */ new Map();
   pending = /* @__PURE__ */ new Map();
   tombstones = /* @__PURE__ */ new Map();
   caches = /* @__PURE__ */ new Map();
@@ -4947,6 +4955,7 @@ var GovernanceService = class {
       return { status: 503, body: { error: "evaluation_backlog_full" } };
     }
     const cache = this.cacheFor(req.origin);
+    this.recordAdapterSeen(req.origin, req.adapter_version);
     const toolName = req.tool.name;
     const hasDefinition = definitionProvided(req.tool);
     if (hasDefinition) {
@@ -5205,6 +5214,7 @@ var GovernanceService = class {
       finalizedBy: "audit",
       expiresAtMs: this.now() + this.ttlMs
     });
+    this.touchAdapter(entry.origin);
     const body = { ok: true, audit_record_id: auditId };
     if (evidenceOutcomes) body["evidence"] = evidenceOutcomes;
     return { status: 201, body };
@@ -5270,6 +5280,7 @@ var GovernanceService = class {
     if (reserved) {
       return { status: 400, body: { error: "reserved_metadata_key", key: reserved } };
     }
+    this.touchAdapter(req.origin);
     const evaluationId = randomUUID2();
     const toolName = `install:${req.package.source ?? "pkg"}:${req.package.name}`;
     const verdict = this.evaluateInstall(req);
@@ -5334,6 +5345,65 @@ var GovernanceService = class {
     };
   }
   // -------------------------------------------------------------------------
+  // Adapter liveness registry (issue #126)
+  // -------------------------------------------------------------------------
+  /** Wire-ready liveness entries, most recently seen first. */
+  listAdapters() {
+    return [...this.adapters.entries()].sort(([oa, a], [ob, b]) => b.lastSeenMs - a.lastSeenMs || oa.localeCompare(ob)).map(([origin, state]) => ({
+      origin,
+      adapter_version: state.adapterVersion,
+      first_seen: new Date(state.firstSeenMs).toISOString(),
+      last_seen: new Date(state.lastSeenMs).toISOString()
+    }));
+  }
+  /** Insert-or-refresh on the /evaluate path (the only insert site). */
+  recordAdapterSeen(origin, version) {
+    const normalized = version && version.length <= 64 ? version : void 0;
+    const now = this.now();
+    const existing = this.adapters.get(origin);
+    if (!existing) {
+      const state = {
+        adapterVersion: normalized ?? null,
+        firstSeenMs: now,
+        lastSeenMs: now,
+        versionLogCount: 0
+      };
+      this.adapters.set(origin, state);
+      if (normalized !== void 0) this.logVersionEvent(origin, state, null, normalized);
+      return;
+    }
+    existing.lastSeenMs = Math.max(existing.lastSeenMs, now);
+    if (normalized !== void 0 && normalized !== existing.adapterVersion) {
+      this.logVersionEvent(origin, existing, existing.adapterVersion, normalized);
+      existing.adapterVersion = normalized;
+    }
+  }
+  /** Refresh-only for paths without an origin budget gate (install-scan, audit). */
+  touchAdapter(origin) {
+    const existing = this.adapters.get(origin);
+    if (!existing) return;
+    existing.lastSeenMs = Math.max(existing.lastSeenMs, this.now());
+  }
+  /**
+   * Log a version sighting/change, capped per origin per boot. Both origin and
+   * version are caller-controlled free text, so both are JSON-escaped — a
+   * newline or control character must not be able to forge extra log lines
+   * (the route's origin regex does not protect direct embedders).
+   */
+  logVersionEvent(origin, state, from, to) {
+    if (state.versionLogCount > MAX_VERSION_LOG_LINES_PER_ORIGIN) return;
+    state.versionLogCount += 1;
+    if (state.versionLogCount > MAX_VERSION_LOG_LINES_PER_ORIGIN) {
+      console.error(
+        `[helio] adapter origin ${JSON.stringify(origin)}: suppressing further version logs after ${String(MAX_VERSION_LOG_LINES_PER_ORIGIN)}`
+      );
+      return;
+    }
+    console.error(
+      from === null ? `[helio] adapter origin ${JSON.stringify(origin)} reports version ${JSON.stringify(to)}` : `[helio] adapter origin ${JSON.stringify(origin)} version changed ${JSON.stringify(from)} -> ${JSON.stringify(to)}`
+    );
+  }
+  // -------------------------------------------------------------------------
   // POST /approval/:id/resolve
   // -------------------------------------------------------------------------
   resolveApproval(ticketId, req) {
@@ -5435,6 +5505,7 @@ var GovernanceService = class {
     this.tombstones.clear();
     this.caches.clear();
     this.senderKeys.clear();
+    this.adapters.clear();
     this.pendingBytes = 0;
   }
   // -------------------------------------------------------------------------
@@ -5788,6 +5859,8 @@ function clampInt(value, fallback, min, max) {
 
 // src/audit/store.ts
 var DRIFT_EVENT_DECISIONS_SQL = "('tool_drift', 'tool_drift_reverted')";
+var EXPORT_MAX_RECORDS = 1e4;
+var LIST_MAX_PAGE_SIZE = 1e3;
 var CREATE_TABLE_DDL = `
 CREATE TABLE IF NOT EXISTS audit_records (
   id                TEXT PRIMARY KEY,
@@ -6091,15 +6164,28 @@ var AuditStore = class {
     const row = this.db.prepare("SELECT * FROM audit_records WHERE id = ?").get(id);
     return row ? deserializeRow(row) : void 0;
   }
-  /** Query records with filters and pagination. */
+  /** Query records with filters and pagination. Capped at 1,000 per page. */
   list(filters = {}, pagination = {}) {
-    const { clause, params } = buildWhereClause(filters);
-    const limit = clamp(pagination.limit ?? 50, 1, 1e3);
+    const limit = clamp(pagination.limit ?? 50, 1, LIST_MAX_PAGE_SIZE);
     const offset = Math.max(pagination.offset ?? 0, 0);
     const order = pagination.order === "asc" ? "ASC" : "DESC";
+    return this.query(filters, limit, offset, order);
+  }
+  /**
+   * Query records for bulk export. Unlike `list()`, which enforces the
+   * dashboard's 1,000-row page cap, this path allows up to
+   * {@link EXPORT_MAX_RECORDS} in a single call. Always oldest-first
+   * (ascending `created_at`), so a capped export keeps the earliest records.
+   */
+  listForExport(filters = {}, limit) {
+    const clamped = clamp(limit ?? EXPORT_MAX_RECORDS, 1, EXPORT_MAX_RECORDS);
+    return this.query(filters, clamped, 0, "ASC");
+  }
+  query(filters, limit, offset, order) {
+    const { clause, params } = buildWhereClause(filters);
     const { total } = this.db.prepare(`SELECT COUNT(*) as total FROM audit_records ${clause}`).get(...params);
     const rows = this.db.prepare(
-      `SELECT * FROM audit_records ${clause} ORDER BY created_at ${order} LIMIT ? OFFSET ?`
+      `SELECT * FROM audit_records ${clause} ORDER BY created_at ${order}, rowid ${order} LIMIT ? OFFSET ?`
     ).all(...params, limit, offset);
     return {
       records: rows.map(deserializeRow),
@@ -7302,7 +7388,10 @@ var CSV_HEADERS = [
   "dry_run",
   "created_at",
   "environment",
-  "matched_rule_index"
+  "matched_rule_index",
+  "record_kind",
+  "origin",
+  "metadata"
 ];
 var FORMULA_PREFIXES = /^[=+\-@\t\r]/;
 function csvEscape(value) {
@@ -7448,7 +7537,7 @@ var feedQuerySchema = z8.object({
 });
 var auditExportQuerySchema = z8.object({
   format: z8.preprocess((value) => value === "csv" ? "csv" : "json", z8.enum(["json", "csv"])),
-  limit: clampedQueryInt(1e4, 1, 1e4),
+  limit: clampedQueryInt(EXPORT_MAX_RECORDS, 1, EXPORT_MAX_RECORDS),
   tool: optionalQueryString,
   decision: optionalQueryString,
   reason: optionalQueryString,
@@ -7466,7 +7555,7 @@ var auditExportQuerySchema = z8.object({
   sender_id: optionalQueryString
 });
 var auditQuerySchema = z8.object({
-  limit: clampedQueryInt(50, 1, 1e3),
+  limit: clampedQueryInt(50, 1, LIST_MAX_PAGE_SIZE),
   offset: clampedQueryInt(0, 0, Number.MAX_SAFE_INTEGER),
   tool: optionalQueryString,
   decision: optionalQueryString,
@@ -7556,7 +7645,8 @@ function createDashboardAppWithLifecycle(deps, options) {
     rateLimiter,
     spendLimiter,
     evidenceStore,
-    eventBus
+    eventBus,
+    adapterLiveness
   } = deps;
   const apiSecret = options?.apiSecret;
   const sessionStore = apiSecret ? new DashboardSessionStore({ secret: apiSecret, ttlMs: SESSION_TTL_MS }) : void 0;
@@ -7711,7 +7801,7 @@ function createDashboardAppWithLifecycle(deps, options) {
       channel_id: query.channel_id,
       sender_id: query.sender_id
     };
-    const result = auditStore.list(filters, { limit, order: "asc" });
+    const result = auditStore.listForExport(filters, limit);
     if (format === "csv") {
       const csv = recordsToCsv(result.records);
       return new Response(csv, {
@@ -7775,6 +7865,9 @@ function createDashboardAppWithLifecycle(deps, options) {
       spend_limits: spendLimiter.listKeyStates()
     });
   });
+  app.get("/api/adapters", (c) => {
+    return c.json({ adapters: adapterLiveness?.listAdapters() ?? [] });
+  });
   app.get("/api/analytics", (c) => {
     const query = analyticsQuerySchema.parse(c.req.query());
     const now = /* @__PURE__ */ new Date();
@@ -7945,10 +8038,12 @@ export {
   AuditWriter,
   ConfigError,
   DashboardEventBus,
+  EXPORT_MAX_RECORDS,
   EvidenceStore,
   GovernanceConfigError,
   GovernanceService,
   GovernedForwarder,
+  LIST_MAX_PAGE_SIZE,
   PolicyParseError,
   QueueChannel,
   RateLimiter,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gethelio/proxy",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "type": "module",
   "description": "Open-source MCP governance proxy for AI agents",
   "license": "Apache-2.0",