@intutic/mcp-governance-proxy 1.10.0 → 1.10.1

package/dist/wasm/worker.js

@@ -0,0 +1,245 @@
+/**
+ * wasm/worker.ts — The ONE dedicated `worker_threads` worker hosting every
+ * compiled WASM governance rule.
+ *
+ * Runs in its own thread (spawned by `wasm/runner.ts`). Owns a
+ * `Map<ruleId, WebAssembly.Module>` — compiled ONCE per file and cached here
+ * — but instantiates a FRESH `WebAssembly.Instance` (fresh guest memory) for
+ * every `evaluate` message, mirroring the Rust runner's actual per-evaluation
+ * `Store` and preventing any cross-request state leakage between calls that
+ * happen to share a rule.
+ *
+ * Protocol (see `runner.ts` for the main-thread side):
+ *   compile  { type:'compile',  id, ruleId, bytes }  -> { type:'compile-result',  id, ruleId, ok, unsupportedImports?, readsReferencedFiles?, error? }
+ *   remove   { type:'remove', ruleId }                  (no reply)
+ *   evaluate { type:'evaluate', id, ruleId, bytes, files? } -> { type:'evaluate-result', id, ruleId, ok, code?, reason?, error? }
+ *
+ * `files` is the per-evaluation referenced-files table (TD-441), posted only
+ * to a rule that imports `read_referenced_file`; it is rebuilt here into the
+ * host-import state, so the main thread never shares memory with the guest.
+ *
+ * A guest `abort` call is inert (hostImports.ts logs and returns); an
+ * uncaught exception or trap during instantiation/evaluation is caught here
+ * and reported as `ok:false` — the caller (runner.ts) treats that as
+ * fail-open ALLOW, exactly like a timeout, never a crash.
+ *
+ * @module
+ */
+import { parentPort } from 'node:worker_threads';
+import { unsupportedWasmImports, WASM_HOST_IMPORTS } from '@intutic/shared-types';
+import { createHostImports, newHostImportState } from './hostImports.js';
+import { ReferencedFiles } from './referencedFiles.js';
+/**
+ * Guest memory ceiling, `runner.rs`'s 16MB `StoreLimits` (TD-440). V8 offers
+ * no grow hook on a memory the module itself exports and `unsupportedWasmImports`
+ * refuses an imported one, so this is enforced AFTER the call: a rule whose
+ * memory grew past the ceiling has its verdict discarded and reported as a
+ * failure (fail-open, like a trap), rather than being stopped mid-growth.
+ * What it cannot do is bound the growth itself; that remainder stays in
+ * TD-440. Checked before the call too, so a module that declares more than
+ * the ceiling as its initial size never runs.
+ */
+export const MAX_GUEST_MEMORY_BYTES = 16 * 1024 * 1024;
+/**
+ * Longest reason a guest may return — ported from `runner.rs`'s
+ * `MAX_GUEST_REASON` (confirmed: `const MAX_GUEST_REASON: usize = 480;`).
+ */
+const MAX_GUEST_REASON = 480;
+/**
+ * Highest code point treated as a control character for the purpose of
+ * stripping a guest-supplied reason string, plus the DEL character — the
+ * ASCII-control-range equivalent of Rust's `char::is_control`, which
+ * `runner.rs`'s `read_guest_reason` filters out for the same reason (a
+ * control character would corrupt a log line or an HTTP header downstream).
+ * Implemented as an explicit char-code filter rather than a regex literal,
+ * to keep raw control bytes out of this file's own source text.
+ */
+const MAX_C0_CONTROL_CODE = 0x1f;
+const DEL_CODE = 0x7f;
+function stripControlCharacters(text) {
+    let out = '';
+    for (const ch of text) {
+        const code = ch.codePointAt(0) ?? 0;
+        if (code <= MAX_C0_CONTROL_CODE || code === DEL_CODE)
+            continue;
+        out += ch;
+    }
+    return out;
+}
+const modules = new Map();
+function importsUsingReadReferencedFile(module) {
+    return WebAssembly.Module.imports(module).some((i) => i.module === 'env' && i.name === 'read_referenced_file' && i.kind === 'function');
+}
+function handleCompile(msg) {
+    try {
+        const module = new WebAssembly.Module(new Uint8Array(msg.bytes));
+        const unsupported = unsupportedWasmImports(module);
+        if (unsupported.length > 0) {
+            parentPort?.postMessage({
+                type: 'compile-result',
+                id: msg.id,
+                ruleId: msg.ruleId,
+                ok: false,
+                unsupportedImports: unsupported,
+            });
+            return;
+        }
+        modules.set(msg.ruleId, module);
+        parentPort?.postMessage({
+            type: 'compile-result',
+            id: msg.id,
+            ruleId: msg.ruleId,
+            ok: true,
+            readsReferencedFiles: importsUsingReadReferencedFile(module),
+        });
+    }
+    catch (err) {
+        parentPort?.postMessage({
+            type: 'compile-result',
+            id: msg.id,
+            ruleId: msg.ruleId,
+            ok: false,
+            error: err instanceof Error ? err.message : String(err),
+        });
+    }
+}
+function handleRemove(msg) {
+    modules.delete(msg.ruleId);
+}
+/**
+ * Ported from `runner.rs`'s `read_guest_reason`: two OPTIONAL zero-arg
+ * exports, `reason_ptr()`/`reason_len()`, read only together. Every failure
+ * path returns `undefined` and the caller falls back to a built-in string —
+ * a guest that lies about its own memory is ignored, not trusted. Bounds are
+ * checked against actual memory size, the length is capped at
+ * `MAX_GUEST_REASON`, invalid UTF-8 is discarded (never lossily patched),
+ * and control characters are stripped (they would corrupt a log line or an
+ * HTTP header downstream) — the same discipline, in the same order, as the
+ * Rust source.
+ */
+function readGuestReason(exportsObj, memory) {
+    const ptrFn = exportsObj['reason_ptr'];
+    const lenFn = exportsObj['reason_len'];
+    if (typeof ptrFn !== 'function' || typeof lenFn !== 'function')
+        return undefined;
+    let ptr;
+    let len;
+    try {
+        ptr = ptrFn();
+        len = lenFn();
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof ptr !== 'number' || typeof len !== 'number')
+        return undefined;
+    if (ptr <= 0 || len <= 0)
+        return undefined;
+    const cappedLen = Math.min(len, MAX_GUEST_REASON);
+    const end = ptr + cappedLen;
+    const bytes = new Uint8Array(memory.buffer);
+    if (end > bytes.length)
+        return undefined;
+    let text;
+    try {
+        text = new TextDecoder('utf-8', { fatal: true }).decode(bytes.subarray(ptr, end));
+    }
+    catch {
+        return undefined;
+    }
+    text = text.trim();
+    if (text.length === 0)
+        return undefined;
+    const stripped = stripControlCharacters(text);
+    return stripped.length > 0 ? stripped : undefined;
+}
+function handleEvaluate(msg) {
+    const module = modules.get(msg.ruleId);
+    if (!module) {
+        parentPort?.postMessage({ type: 'evaluate-result', id: msg.id, ruleId: msg.ruleId, ok: false, error: 'rule not loaded' });
+        return;
+    }
+    try {
+        // A holder object, not a reassigned `let`: the import object (needed by
+        // `WebAssembly.Instance` below) has to exist BEFORE the instance's own
+        // `memory` export does, so `createHostImports`'s closure reads through
+        // one indirection that gets filled in once, right after instantiation.
+        const memoryHolder = { current: undefined };
+        const hostState = newHostImportState(ReferencedFiles.fromTable(msg.files));
+        const env = createHostImports(() => memoryHolder.current, hostState);
+        const instance = new WebAssembly.Instance(module, { env });
+        const exportsObj = instance.exports;
+        const memExport = exportsObj['memory'];
+        if (!(memExport instanceof WebAssembly.Memory)) {
+            throw new Error("WASM module missing 'memory' export");
+        }
+        memoryHolder.current = memExport;
+        const memory = memExport;
+        if (memory.buffer.byteLength > MAX_GUEST_MEMORY_BYTES) {
+            throw new Error(`WASM module declares ${memory.buffer.byteLength} bytes of initial memory, over the ${MAX_GUEST_MEMORY_BYTES}-byte ceiling`);
+        }
+        const contextBytes = new Uint8Array(msg.bytes);
+        // allocate() primary, __new(size, id) AssemblyScript fallback — same
+        // fallback order as runner.rs.
+        let offset;
+        const allocateFn = exportsObj['allocate'];
+        const newFn = exportsObj['__new'];
+        if (typeof allocateFn === 'function') {
+            offset = allocateFn(contextBytes.length);
+        }
+        else if (typeof newFn === 'function') {
+            offset = newFn(contextBytes.length, 0);
+        }
+        else {
+            throw new Error("WASM module missing 'allocate' or '__new' export");
+        }
+        // Re-read the memory view after allocate — it can grow memory, which
+        // detaches any Uint8Array view taken before the call.
+        new Uint8Array(memory.buffer, offset, contextBytes.length).set(contextBytes);
+        const evaluateFn = exportsObj['evaluate'];
+        if (typeof evaluateFn !== 'function') {
+            throw new Error("WASM module missing 'evaluate' export");
+        }
+        const code = evaluateFn(offset, contextBytes.length);
+        // Read inside the same call, deliberately: a guest that returns a
+        // hostile length must not be able to buy extra time by doing so after
+        // the verdict — same reasoning runner.rs states for its own placement.
+        const reason = readGuestReason(exportsObj, memory);
+        if (memory.buffer.byteLength > MAX_GUEST_MEMORY_BYTES) {
+            throw new Error(`WASM rule grew guest memory to ${memory.buffer.byteLength} bytes, over the ${MAX_GUEST_MEMORY_BYTES}-byte ceiling; verdict discarded`);
+        }
+        parentPort?.postMessage({ type: 'evaluate-result', id: msg.id, ruleId: msg.ruleId, ok: true, code, reason });
+    }
+    catch (err) {
+        // A guest trap (including one following an `abort` call) lands here.
+        // Reported as a failure, never re-thrown — the worker process must
+        // survive one hostile or buggy rule to keep evaluating every other one.
+        parentPort?.postMessage({
+            type: 'evaluate-result',
+            id: msg.id,
+            ruleId: msg.ruleId,
+            ok: false,
+            error: err instanceof Error ? err.message : String(err),
+        });
+    }
+}
+parentPort?.on('message', (msg) => {
+    switch (msg.type) {
+        case 'compile':
+            handleCompile(msg);
+            break;
+        case 'remove':
+            handleRemove(msg);
+            break;
+        case 'evaluate':
+            handleEvaluate(msg);
+            break;
+    }
+});
+// Referenced so a future accidental removal of the import in hostImports.ts
+// is caught by a type error here, not by a rule silently linking a fifth
+// host function this worker forgot to register — `createHostImports`
+// already builds against `WASM_HOST_IMPORTS`' exact 4 names via
+// `@intutic/shared-types`'s frozen list, imported above.
+void WASM_HOST_IMPORTS;
+//# sourceMappingURL=worker.js.map

package/dist/wasm/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/wasm/worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AACjF,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACxE,OAAO,EAAE,eAAe,EAA6B,MAAM,sBAAsB,CAAA;AAEjF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAEtD;;;GAGG;AACH,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAE5B;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAG,IAAI,CAAA;AAChC,MAAM,QAAQ,GAAG,IAAI,CAAA;AAErB,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACnC,IAAI,IAAI,IAAI,mBAAmB,IAAI,IAAI,KAAK,QAAQ;YAAE,SAAQ;QAC9D,GAAG,IAAI,EAAE,CAAA;IACX,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAqBD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAA;AAErD,SAAS,8BAA8B,CAAC,MAA0B;IAChE,OAAO,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,sBAAsB,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,CACxF,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAmB;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;QAChE,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAA;QAClD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,UAAU,EAAE,WAAW,CAAC;gBACtB,IAAI,EAAE,gBAAgB;gBACtB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,EAAE,EAAE,KAAK;gBACT,kBAAkB,EAAE,WAAW;aAChC,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC/B,UAAU,EAAE,WAAW,CAAC;YACtB,IAAI,EAAE,gBAAgB;YACtB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,EAAE,EAAE,IAAI;YACR,oBAAoB,EAAE,8BAA8B,CAAC,MAAM,CAAC;SAC7D,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,EAAE,WAAW,CAAC;YACtB,IAAI,EAAE,gBAAgB;YACtB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAkB;IACtC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AAC5B,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,eAAe,CAAC,UAAmC,EAAE,MAA0B;IACtF,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAC,CAAA;IACtC,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,SAAS,CAAA;IAEhF,IAAI,GAAY,CAAA;IAChB,IAAI,GAAY,CAAA;IAChB,IAAI,CAAC;QACH,GAAG,GAAI,KAAsB,EAAE,CAAA;QAC/B,GAAG,GAAI,KAAsB,EAAE,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACxE,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IAE1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;IACjD,MAAM,GAAG,GAAG,GAAG,GAAG,SAAS,CAAA;IAC3B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3C,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAExC,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAClB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACvC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;IAC7C,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;AACnD,CAAC;AAED,SAAS,cAAc,CAAC,GAAoB;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,UAAU,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAA;QACzH,OAAM;IACR,CAAC;IAED,IAAI,CAAC;QACH,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,YAAY,GAAgD,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;QACxF,MAAM,SAAS,GAAG,kBAAkB,CAAC,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1E,MAAM,GAAG,GAA8B,iBAAiB,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QAC/F,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1D,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAkC,CAAA;QAE9D,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;QACtC,IAAI,CAAC,CAAC,SAAS,YAAY,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACxD,CAAC;QACD,YAAY,CAAC,OAAO,GAAG,SAAS,CAAA;QAChC,MAAM,MAAM,GAAG,SAAS,CAAA;QACxB,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,sBAAsB,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,wBAAwB,MAAM,CAAC,MAAM,CAAC,UAAU,sCAAsC,sBAAsB,eAAe,CAAC,CAAA;QAC9I,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAE9C,qEAAqE;QACrE,+BAA+B;QAC/B,IAAI,MAAc,CAAA;QAClB,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;QACjC,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;YACrC,MAAM,GAAI,UAAoC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QACrE,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;YACvC,MAAM,GAAI,KAA8C,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QAClF,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;QACrE,CAAC;QAED,qEAAqE;QACrE,sDAAsD;QACtD,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;QAE5E,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;QACzC,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QAC1D,CAAC;QACD,MAAM,IAAI,GAAI,UAAsD,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;QAEjG,kEAAkE;QAClE,sEAAsE;QACtE,uEAAuE;QACvE,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;QAElD,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,sBAAsB,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,MAAM,CAAC,UAAU,oBAAoB,sBAAsB,kCAAkC,CAAC,CAAA;QACzJ,CAAC;QAED,UAAU,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IAC9G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,qEAAqE;QACrE,mEAAmE;QACnE,wEAAwE;QACxE,UAAU,EAAE,WAAW,CAAC;YACtB,IAAI,EAAE,iBAAiB;YACvB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,UAAU,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,GAAc,EAAE,EAAE;IAC3C,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,SAAS;YACZ,aAAa,CAAC,GAAG,CAAC,CAAA;YAClB,MAAK;QACP,KAAK,QAAQ;YACX,YAAY,CAAC,GAAG,CAAC,CAAA;YACjB,MAAK;QACP,KAAK,UAAU;YACb,cAAc,CAAC,GAAG,CAAC,CAAA;YACnB,MAAK;IACT,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,4EAA4E;AAC5E,yEAAyE;AACzE,qEAAqE;AACrE,gEAAgE;AAChE,yDAAyD;AACzD,KAAK,iBAAiB,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intutic/mcp-governance-proxy",
-  "version": "1.10.0",
+  "version": "1.10.1",
   "description": "Intutic MCP Governance Proxy — transparent stdio proxy that intercepts all tools/call JSON-RPC messages and applies workspace SOP policy before forwarding to real MCP servers",
   "type": "module",
   "license": "MIT",
@@ -23,21 +23,31 @@
   ],
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
+    "@opentelemetry/api": "^1.9.1",
+    "@opentelemetry/auto-instrumentations-node": "^0.79.0",
+    "@opentelemetry/exporter-metrics-otlp-http": "^0.221.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.221.0",
+    "@opentelemetry/resources": "^2.10.0",
+    "@opentelemetry/sdk-metrics": "^2.10.0",
+    "@opentelemetry/sdk-node": "^0.221.0",
+    "@opentelemetry/semantic-conventions": "^1.43.0",
     "ioredis": "^5",
     "zod": "^3",
-    "@intutic/id": "1.10.0",
-    "@intutic/logger": "1.10.0"
+    "@intutic/id": "1.10.1",
+    "@intutic/shared-types": "1.10.1",
+    "@intutic/logger": "1.10.1"
   },
   "devDependencies": {
     "@types/node": "^22",
     "tsx": "^4",
     "typescript": "^5.5",
-    "vitest": "^3"
+    "vitest": "^4"
   },
   "engines": {
     "node": ">=18"
   },
   "scripts": {
+    "lint": "eslint src",
     "build": "tsc",
     "dev": "tsx src/index.ts",
     "typecheck": "tsc --noEmit",