@newrelic/preflight 0.0.1-pre.1 → 1.0.1

package/dist/security/audit-trail.js

@@ -0,0 +1,338 @@
+/**
+ * Security Audit Trail — classifies tool calls into audit events, detects
+ * sensitive file access and destructive commands, and emits NR events for
+ * alerting.
+ */
+import { createLogger } from '../shared/index.js';
+import { redactSensitive } from '../config.js';
+import { isSyntheticSessionId } from '../hooks/session-resolver.js';
+const logger = createLogger('audit-trail');
+// ---------------------------------------------------------------------------
+// Default detection patterns
+// ---------------------------------------------------------------------------
+export const DEFAULT_SENSITIVE_FILE_PATTERNS = [
+    /(?:^|\/)\.env(?:\..+)?$/i,
+    /(?:^|\/)credentials/i,
+    /(?:^|\/)secret/i,
+    /\.pem$/i,
+    /\.key$/i,
+    /(?:^|\/)id_rsa(?:$|\.)/i,
+    /(?:^|\/)id_ed25519(?:$|\.)/i,
+    /(?:^|\/)\.ssh\//i,
+    /(?:^|\/)password(?:s)?(?:\.[^/]*)?$/i,
+    /(?:^|\/)\.npmrc$/i,
+    /(?:^|\/)\.pypirc$/i,
+    /(?:^|\/)token(?:s)?(?:\.[^/]*)?$/i,
+];
+export const DEFAULT_DESTRUCTIVE_COMMAND_PATTERNS = [
+    // rm with recursive + force flags in any combination or order:
+    // combined (-rf, -fr, -rfv, -rvf, -Rf, etc.) or separate (-r -f, -f -r, -r -v -f, etc.)
+    // rm with -r/-R (recursive), in any combination of flags or alone
+    /\brm\s+(?:-[a-zA-Z]*[rR][a-zA-Z]*[fF][a-zA-Z]*|-[a-zA-Z]*[fF][a-zA-Z]*[rR][a-zA-Z]*|-[rR][a-zA-Z]*(?:\s+-[a-zA-Z]+)*\s+-[fF]|-[fF][a-zA-Z]*(?:\s+-[a-zA-Z]+)*\s+-[rR]|-[rR]\b|-[a-zA-Z]*[rR]\b)/,
+    // GNU long-form: rm --recursive
+    /\brm\b.*--recursive\b/,
+    /\bgit\s+push\s+--force\b/i,
+    /\bgit\s+push\s+-f\b/i,
+    /\bgit\s+reset\s+--hard\b/i,
+    /\bDROP\s+TABLE\b/i,
+    /\bDROP\s+DATABASE\b/i,
+    /\bDELETE\s+FROM\b/i,
+    /\bchmod\s+777\b/,
+    // Pipe to shell — matches common shells and interpreters
+    /\bcurl\b.*\|\s*(?:\/[^\s]*\/)?(?:ba|z|k|da|fi|tc|c)?sh\b/i,
+    /\bwget\b.*\|\s*(?:\/[^\s]*\/)?(?:ba|z|k|da|fi|tc|c)?sh\b/i,
+    /\bcurl\b.*\|\s*(?:\/[^\s]*\/)?(?:node|python3?|perl|ruby)\b/i,
+    /\bwget\b.*\|\s*(?:\/[^\s]*\/)?(?:node|python3?|perl|ruby)\b/i,
+];
+export const DEFAULT_NETWORK_COMMAND_PATTERNS = [
+    /\bcurl\b/i,
+    /\bwget\b/i,
+    /\bnc\b/,
+    /\bssh\b/,
+];
+// ---------------------------------------------------------------------------
+// Tool name → AuditAction mapping
+// ---------------------------------------------------------------------------
+const TOOL_ACTION_MAP = {
+    Read: 'FileRead',
+    Write: 'FileWrite',
+    Edit: 'FileEdit',
+    Bash: 'BashCommand',
+    Agent: 'AgentSpawn',
+    Grep: 'Search',
+    Glob: 'Search',
+};
+function classifyTool(toolName) {
+    return TOOL_ACTION_MAP[toolName] ?? 'Other';
+}
+// ---------------------------------------------------------------------------
+// Detail builder
+// ---------------------------------------------------------------------------
+function buildDetail(record) {
+    const tool = record.toolName;
+    const filePath = record.filePath;
+    const command = record.command;
+    const agentDescription = record.agentDescription;
+    const pattern = record.pattern;
+    // Redact at the source so every downstream egress (NR Events API,
+    // NR Logs API, persisted on-disk audit log) sees only scrubbed strings.
+    // detectSecurityAlert runs against the raw record before this is invoked,
+    // so pattern matching still works correctly against unredacted input.
+    if (filePath)
+        return `${tool} ${redactSensitive(filePath)}`;
+    if (command)
+        return `${tool}: ${redactSensitive(command)}`;
+    if (agentDescription)
+        return `${tool}: ${redactSensitive(agentDescription)}`;
+    if (pattern)
+        return `${tool}: ${redactSensitive(pattern)}`;
+    return tool;
+}
+// ---------------------------------------------------------------------------
+// Pattern matching
+// ---------------------------------------------------------------------------
+function matchesAny(value, patterns) {
+    return patterns.some((p) => p.test(value));
+}
+function detectSecurityAlert(record, sensitivePatterns, destructivePatterns, networkPatterns) {
+    const command = record.command;
+    const filePath = record.filePath;
+    // Defense in depth: the classifier's verdict and the pattern lists are
+    // OR-ed together. Either layer flagging is enough to alert. We deliberately
+    // do NOT short-circuit on `bashDestructive === false` — the two layers can
+    // diverge (the classifier and the audit pattern list maintain independent
+    // regexes), so treating the classifier as authoritative would let a
+    // narrower classifier silently suppress a hit the audit list would have
+    // caught. Treat the classifier as additive, not authoritative, for
+    // security-critical decisions.
+    const classifierDestructive = record.bashDestructive === true;
+    const classifierNetwork = record.bashNetwork === true;
+    // Destructive commands (critical) — check first, highest priority
+    if (command) {
+        const isDestructive = classifierDestructive || matchesAny(command, destructivePatterns);
+        if (isDestructive) {
+            return {
+                severity: 'critical',
+                alertType: 'destructive_command',
+                description: `Destructive command detected: ${redactSensitive(command)}`,
+            };
+        }
+    }
+    // Sensitive file access (high)
+    if (filePath && matchesAny(filePath, sensitivePatterns)) {
+        return {
+            severity: 'high',
+            alertType: 'sensitive_file',
+            description: `Sensitive file accessed: ${redactSensitive(filePath)}`,
+        };
+    }
+    // External network request (medium) — only for Bash commands
+    if (command) {
+        const isNetwork = classifierNetwork || matchesAny(command, networkPatterns);
+        if (isNetwork) {
+            return {
+                severity: 'medium',
+                alertType: 'external_network',
+                description: `External network request: ${redactSensitive(command)}`,
+            };
+        }
+    }
+    return undefined;
+}
+// ---------------------------------------------------------------------------
+// NR Event helpers
+// ---------------------------------------------------------------------------
+export function auditRecordToNrEvent(record, attrs) {
+    const event = {
+        eventType: 'AiAuditEvent',
+        timestamp: Math.floor(record.timestamp / 1000),
+        action: record.action,
+        tool: record.tool,
+        detail: record.detail,
+        developer: record.developer,
+    };
+    if (attrs?.teamId)
+        event.team_id = attrs.teamId;
+    if (attrs?.projectId)
+        event.project_id = attrs.projectId;
+    if (attrs?.orgId)
+        event.org_id = attrs.orgId;
+    if (record.sessionId != null)
+        event.session_id = record.sessionId;
+    if (record.filePath != null)
+        event.file_path = redactSensitive(record.filePath);
+    if (record.command != null)
+        event.command = redactSensitive(record.command);
+    if (record.securityAlert) {
+        event['audit.security_alert'] = true;
+        event['audit.severity'] = record.securityAlert.severity;
+        event['audit.alert_type'] = record.securityAlert.alertType;
+    }
+    else {
+        event['audit.security_alert'] = false;
+    }
+    return event;
+}
+export function securityAlertToNrEvent(record, attrs) {
+    const alert = record.securityAlert;
+    if (!alert)
+        throw new Error('securityAlertToNrEvent called with no securityAlert on record');
+    const event = {
+        eventType: 'SecurityAlert',
+        timestamp: Math.floor(record.timestamp / 1000),
+        severity: alert.severity,
+        alert_type: alert.alertType,
+        description: alert.description,
+        tool: record.tool,
+        developer: record.developer,
+    };
+    if (attrs?.teamId)
+        event.team_id = attrs.teamId;
+    if (attrs?.projectId)
+        event.project_id = attrs.projectId;
+    if (attrs?.orgId)
+        event.org_id = attrs.orgId;
+    if (record.sessionId != null)
+        event.session_id = record.sessionId;
+    if (record.filePath != null)
+        event.file_path = redactSensitive(record.filePath);
+    if (record.command != null)
+        event.command = redactSensitive(record.command);
+    return event;
+}
+export class AuditTrailManager {
+    developer;
+    sessionId;
+    sensitivePatterns;
+    destructivePatterns;
+    networkPatterns;
+    localStore;
+    entries = [];
+    sensitiveAccessLog = [];
+    static MAX_ENTRIES = 10_000;
+    constructor(options) {
+        this.developer = options.developer;
+        this.sessionId = options.sessionId;
+        this.sensitivePatterns = options.sensitivePatterns ?? DEFAULT_SENSITIVE_FILE_PATTERNS;
+        this.destructivePatterns = options.destructivePatterns ?? DEFAULT_DESTRUCTIVE_COMMAND_PATTERNS;
+        this.networkPatterns = options.networkPatterns ?? DEFAULT_NETWORK_COMMAND_PATTERNS;
+        this.localStore = options.localStore ?? null;
+    }
+    recordToolCall(record) {
+        const action = classifyTool(record.toolName);
+        const detail = buildDetail(record);
+        const alert = detectSecurityAlert(record, this.sensitivePatterns, this.destructivePatterns, this.networkPatterns);
+        const rawFilePath = record.filePath;
+        const rawCommand = record.command;
+        const auditRecord = {
+            timestamp: record.timestamp,
+            sessionId: record.sessionId ?? (isSyntheticSessionId(this.sessionId) ? null : this.sessionId),
+            action,
+            tool: record.toolName,
+            detail,
+            developer: this.developer,
+            // Store redacted strings on the AuditRecord so every downstream consumer
+            // (NR Events, NR Logs, on-disk audit log) carries only scrubbed values.
+            filePath: rawFilePath != null ? redactSensitive(rawFilePath) : undefined,
+            command: rawCommand != null ? redactSensitive(rawCommand) : undefined,
+            securityAlert: alert,
+        };
+        if (this.entries.length >= AuditTrailManager.MAX_ENTRIES)
+            this.entries.shift();
+        this.entries.push(auditRecord);
+        if (alert) {
+            if (this.sensitiveAccessLog.length >= AuditTrailManager.MAX_ENTRIES)
+                this.sensitiveAccessLog.shift();
+            this.sensitiveAccessLog.push(auditRecord);
+            logger.warn('Security alert', {
+                severity: alert.severity,
+                alertType: alert.alertType,
+                tool: record.toolName,
+                detail,
+            });
+        }
+        this.persistToDisk(auditRecord);
+        return auditRecord;
+    }
+    recordProxyCall(record) {
+        const detail = `McpToolCall: ${record.serverName}/${record.toolName}`;
+        const filePath = record.filePath;
+        const command = record.command;
+        const alert = detectSecurityAlert(record, this.sensitivePatterns, this.destructivePatterns, this.networkPatterns);
+        const auditRecord = {
+            timestamp: record.timestamp,
+            sessionId: record.sessionId ?? (isSyntheticSessionId(this.sessionId) ? null : this.sessionId),
+            action: 'McpToolCall',
+            tool: record.toolName,
+            detail,
+            developer: this.developer,
+            // Same redaction policy as recordToolCall — see comment there.
+            filePath: filePath != null ? redactSensitive(filePath) : undefined,
+            command: command != null ? redactSensitive(command) : undefined,
+            securityAlert: alert,
+        };
+        if (this.entries.length >= AuditTrailManager.MAX_ENTRIES)
+            this.entries.shift();
+        this.entries.push(auditRecord);
+        if (alert) {
+            if (this.sensitiveAccessLog.length >= AuditTrailManager.MAX_ENTRIES)
+                this.sensitiveAccessLog.shift();
+            this.sensitiveAccessLog.push(auditRecord);
+            logger.warn('Security alert', {
+                severity: alert.severity,
+                alertType: alert.alertType,
+                tool: record.toolName,
+                detail,
+            });
+        }
+        this.persistToDisk(auditRecord);
+        return auditRecord;
+    }
+    getAuditLog() {
+        return this.entries;
+    }
+    getSensitiveAccessLog() {
+        return this.sensitiveAccessLog;
+    }
+    getMetrics() {
+        const alertsBySeverity = {};
+        let securityAlerts = 0;
+        for (const entry of this.entries) {
+            if (entry.securityAlert) {
+                securityAlerts++;
+                const sev = entry.securityAlert.severity;
+                alertsBySeverity[sev] = (alertsBySeverity[sev] ?? 0) + 1;
+            }
+        }
+        return {
+            totalEntries: this.entries.length,
+            securityAlerts,
+            alertsBySeverity,
+        };
+    }
+    reset(sessionId) {
+        this.entries = [];
+        this.sensitiveAccessLog = [];
+        if (sessionId !== undefined) {
+            this.sessionId = sessionId;
+        }
+    }
+    persistToDisk(record) {
+        if (!this.localStore)
+            return;
+        this.localStore.appendAuditLog({
+            timestamp: record.timestamp,
+            sessionId: record.sessionId,
+            action: record.action,
+            tool: record.tool,
+            detail: record.detail,
+            developer: record.developer,
+            filePath: record.filePath,
+            command: record.command,
+            securityAlert: record.securityAlert
+                ? { severity: record.securityAlert.severity, alertType: record.securityAlert.alertType }
+                : undefined,
+        });
+    }
+}
+//# sourceMappingURL=audit-trail.js.map

package/dist/security/audit-trail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-trail.js","sourceRoot":"","sources":["../../src/security/audit-trail.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKlD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;AA0C3C,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E,MAAM,CAAC,MAAM,+BAA+B,GAAa;IACvD,0BAA0B;IAC1B,sBAAsB;IACtB,iBAAiB;IACjB,SAAS;IACT,SAAS;IACT,yBAAyB;IACzB,6BAA6B;IAC7B,kBAAkB;IAClB,sCAAsC;IACtC,mBAAmB;IACnB,oBAAoB;IACpB,mCAAmC;CACpC,CAAC;AAEF,MAAM,CAAC,MAAM,oCAAoC,GAAa;IAC5D,+DAA+D;IAC/D,wFAAwF;IACxF,kEAAkE;IAClE,iMAAiM;IACjM,gCAAgC;IAChC,uBAAuB;IACvB,2BAA2B;IAC3B,sBAAsB;IACtB,2BAA2B;IAC3B,mBAAmB;IACnB,sBAAsB;IACtB,oBAAoB;IACpB,iBAAiB;IACjB,yDAAyD;IACzD,2DAA2D;IAC3D,2DAA2D;IAC3D,8DAA8D;IAC9D,8DAA8D;CAC/D,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAa;IACxD,WAAW;IACX,WAAW;IACX,QAAQ;IACR,SAAS;CACV,CAAC;AAEF,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E,MAAM,eAAe,GAAgC;IACnD,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,WAAW;IAClB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,YAAY;IACnB,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,QAAQ;CACf,CAAC;AAEF,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,eAAe,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC;AAC9C,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,SAAS,WAAW,CAAC,MAAsB;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAA8B,CAAC;IACvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAA6B,CAAC;IACrD,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAsC,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,OAA6B,CAAC;IAErD,kEAAkE;IAClE,wEAAwE;IACxE,0EAA0E;IAC1E,sEAAsE;IACtE,IAAI,QAAQ;QAAE,OAAO,GAAG,IAAI,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC5D,IAAI,OAAO;QAAE,OAAO,GAAG,IAAI,KAAK,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3D,IAAI,gBAAgB;QAAE,OAAO,GAAG,IAAI,KAAK,eAAe,CAAC,gBAAgB,CAAC,EAAE,CAAC;IAC7E,IAAI,OAAO;QAAE,OAAO,GAAG,IAAI,KAAK,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,UAAU,CAAC,KAAa,EAAE,QAA2B;IAC5D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAsB,EACtB,iBAAoC,EACpC,mBAAsC,EACtC,eAAkC;IAElC,MAAM,OAAO,GAAG,MAAM,CAAC,OAA6B,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAA8B,CAAC;IACvD,uEAAuE;IACvE,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,oEAAoE;IACpE,wEAAwE;IACxE,mEAAmE;IACnE,+BAA+B;IAC/B,MAAM,qBAAqB,GAAG,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC;IAC9D,MAAM,iBAAiB,GAAG,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC;IAEtD,kEAAkE;IAClE,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,aAAa,GAAG,qBAAqB,IAAI,UAAU,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QACxF,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO;gBACL,QAAQ,EAAE,UAAU;gBACpB,SAAS,EAAE,qBAAqB;gBAChC,WAAW,EAAE,iCAAiC,eAAe,CAAC,OAAO,CAAC,EAAE;aACzE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,QAAQ,IAAI,UAAU,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACxD,OAAO;YACL,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,gBAAgB;YAC3B,WAAW,EAAE,4BAA4B,eAAe,CAAC,QAAQ,CAAC,EAAE;SACrE,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,iBAAiB,IAAI,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC5E,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,kBAAkB;gBAC7B,WAAW,EAAE,6BAA6B,eAAe,CAAC,OAAO,CAAC,EAAE;aACrE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,UAAU,oBAAoB,CAClC,MAAmB,EACnB,KAAoF;IAEpF,MAAM,KAAK,GAAgB;QACzB,SAAS,EAAE,cAAc;QACzB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;QAC9C,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;IAEF,IAAI,KAAK,EAAE,MAAM;QAAE,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;IAChD,IAAI,KAAK,EAAE,SAAS;QAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;IACzD,IAAI,KAAK,EAAE,KAAK;QAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;IAE7C,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI;QAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;IAClE,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI;QAAE,KAAK,CAAC,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChF,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI;QAAE,KAAK,CAAC,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE5E,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,KAAK,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC;QACrC,KAAK,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;QACxD,KAAK,CAAC,kBAAkB,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC;IACxC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAmB,EACnB,KAAoF;IAEpF,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAgB;QACzB,SAAS,EAAE,eAAe;QAC1B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;QAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;IAEF,IAAI,KAAK,EAAE,MAAM;QAAE,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;IAChD,IAAI,KAAK,EAAE,SAAS;QAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;IACzD,IAAI,KAAK,EAAE,KAAK;QAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;IAE7C,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI;QAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;IAClE,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI;QAAE,KAAK,CAAC,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChF,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI;QAAE,KAAK,CAAC,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE5E,OAAO,KAAK,CAAC;AACf,CAAC;AAgBD,MAAM,OAAO,iBAAiB;IACX,SAAS,CAAS;IAC3B,SAAS,CAAgB;IAChB,iBAAiB,CAAoB;IACrC,mBAAmB,CAAoB;IACvC,eAAe,CAAoB;IACnC,UAAU,CAAoB;IAEvC,OAAO,GAAkB,EAAE,CAAC;IAC5B,kBAAkB,GAAkB,EAAE,CAAC;IACvC,MAAM,CAAU,WAAW,GAAG,MAAM,CAAC;IAE7C,YAAY,OAAiC;QAC3C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,+BAA+B,CAAC;QACtF,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,oCAAoC,CAAC;QAC/F,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,gCAAgC,CAAC;QACnF,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;IAC/C,CAAC;IAED,cAAc,CAAC,MAAsB;QACnC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAEnC,MAAM,KAAK,GAAG,mBAAmB,CAC/B,MAAM,EACN,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,mBAAmB,EACxB,IAAI,CAAC,eAAe,CACrB,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,CAAC,QAA8B,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,OAA6B,CAAC;QACxD,MAAM,WAAW,GAAgB;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;YAC7F,MAAM;YACN,IAAI,EAAE,MAAM,CAAC,QAAQ;YACrB,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,yEAAyE;YACzE,wEAAwE;YACxE,QAAQ,EAAE,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACxE,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;YACrE,aAAa,EAAE,KAAK;SACrB,CAAC;QAEF,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,WAAW;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC/E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/B,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,IAAI,iBAAiB,CAAC,WAAW;gBACjE,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,IAAI,EAAE,MAAM,CAAC,QAAQ;gBACrB,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAChC,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,eAAe,CAAC,MAA2B;QACzC,MAAM,MAAM,GAAG,gBAAgB,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAA8B,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAA6B,CAAC;QAErD,MAAM,KAAK,GAAG,mBAAmB,CAC/B,MAAM,EACN,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,mBAAmB,EACxB,IAAI,CAAC,eAAe,CACrB,CAAC;QAEF,MAAM,WAAW,GAAgB;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;YAC7F,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,MAAM,CAAC,QAAQ;YACrB,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,+DAA+D;YAC/D,QAAQ,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;YAClE,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/D,aAAa,EAAE,KAAK;SACrB,CAAC;QAEF,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,WAAW;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC/E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/B,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,IAAI,iBAAiB,CAAC,WAAW;gBACjE,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,IAAI,EAAE,MAAM,CAAC,QAAQ;gBACrB,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAChC,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,qBAAqB;QACnB,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,UAAU;QACR,MAAM,gBAAgB,GAA2B,EAAE,CAAC;QACpD,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACxB,cAAc,EAAE,CAAC;gBACjB,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC;gBACzC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YACjC,cAAc;YACd,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAyB;QAC7B,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,kBAAkB,GAAG,EAAE,CAAC;QAC7B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,MAAmB;QACvC,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO;QAC7B,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACjC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE;gBACxF,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;IACL,CAAC"}

package/dist/security/index.d.ts

@@ -0,0 +1,5 @@
+export { validateSsrfUrl } from './ssrf.js';
+export { AuditTrailManager, auditRecordToNrEvent, securityAlertToNrEvent } from './audit-trail.js';
+export type { AuditAction, AlertSeverity, SecurityAlert, AuditRecord, AuditMetrics, AuditTrailManagerOptions, } from './audit-trail.js';
+export { DEFAULT_SENSITIVE_FILE_PATTERNS, DEFAULT_DESTRUCTIVE_COMMAND_PATTERNS, DEFAULT_NETWORK_COMMAND_PATTERNS, } from './audit-trail.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AACnG,YAAY,EACV,WAAW,EACX,aAAa,EACb,aAAa,EACb,WAAW,EACX,YAAY,EACZ,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,EACpC,gCAAgC,GACjC,MAAM,kBAAkB,CAAC"}

package/dist/security/index.js

@@ -0,0 +1,4 @@
+export { validateSsrfUrl } from './ssrf.js';
+export { AuditTrailManager, auditRecordToNrEvent, securityAlertToNrEvent } from './audit-trail.js';
+export { DEFAULT_SENSITIVE_FILE_PATTERNS, DEFAULT_DESTRUCTIVE_COMMAND_PATTERNS, DEFAULT_NETWORK_COMMAND_PATTERNS, } from './audit-trail.js';
+//# sourceMappingURL=index.js.map

package/dist/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AASnG,OAAO,EACL,+BAA+B,EAC/B,oCAAoC,EACpC,gCAAgC,GACjC,MAAM,kBAAkB,CAAC"}

package/dist/security/ssrf.d.ts

@@ -0,0 +1,2 @@
+export declare function validateSsrfUrl(label: string, url: URL): void;
+//# sourceMappingURL=ssrf.d.ts.map

package/dist/security/ssrf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.d.ts","sourceRoot":"","sources":["../../src/security/ssrf.ts"],"names":[],"mappings":"AA4GA,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAqC7D"}

package/dist/security/ssrf.js

@@ -0,0 +1,126 @@
+const ALLOWED_SCHEMES = new Set(['http:', 'https:']);
+// Cloud metadata service FQDNs that resolve to internal addresses within cloud accounts.
+// Blocking these prevents SSRF attacks from exfiltrating cloud credentials.
+const BLOCKED_METADATA_FQDNS = new Set([
+    'metadata.google.internal',
+    'metadata.azure.com',
+    'ec2.internal',
+    'ec2.amazonaws.com',
+]);
+// Cloud metadata service IPs that are not covered by RFC-1918 or link-local blocks.
+const BLOCKED_METADATA_IPS = new Set(['100.100.100.200']);
+// Matches loopback, RFC-1918 private ranges, link-local (169.254/16), and
+// IPv4 multicast (224.0.0.0/4, i.e. 224–239.x.x.x).
+// Also blocks IPv6 unspecified (::), IPv6 loopback (::1), IPv4-mapped variants (::ffff:...),
+// IPv6 ULA (fc00::/7, fd00::/8), and IPv6 link-local (fe80::/10).
+// Supports both decimal IPv4 and hex-normalized IPv6-mapped formats (Node.js normalizes ::ffff:127.0.0.1 to ::ffff:7f00:1).
+// Node.js URL.hostname returns IPv6 addresses with brackets (e.g. [::1]).
+const BLOCKED_HOST_RE = /^(?:\[)?(?:127\.(?:\d{1,3}\.)*\d{1,3}|10\.(?:\d{1,3}\.)*\d{1,3}|172\.(?:1[6-9]|2\d|3[01])\.(?:\d{1,3}\.)*\d{1,3}|192\.168\.(?:\d{1,3}\.)*\d{1,3}|169\.254\.(?:\d{1,3}\.)*\d{1,3}|(?:22[4-9]|23[0-9])\.(?:\d{1,3}\.)*\d{1,3}|::1|::|::ffff:(?:7f[0-9a-f]{2}|0a[0-9a-f]{2}|ac1[0-9a-f]|c0a8|a9fe)[0-9a-f]*:[0-9a-f]+|fc[0-9a-f]{2}:[0-9a-f:]*|fd[0-9a-f]{2}:[0-9a-f:]*|fe[89ab][0-9a-f]:[0-9a-f:]*|0\.0\.0\.0|localhost)(?:\])?$/i;
+// Extracts embedded IPv4 from IPv6-mapped address. Returns null if not a valid mapped address.
+// Handles both decimal form (::ffff:127.0.0.1) and hex-normalized form (::ffff:7f00:1).
+function extractIPv4FromMappedIPv6(host) {
+    const trimmed = host.replace(/[\[\]]/g, '');
+    // Try decimal form: ::ffff:x.x.x.x
+    const decimalMatch = /^::ffff:((?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?))$/i.exec(trimmed);
+    if (decimalMatch) {
+        return decimalMatch[1];
+    }
+    // Try hex form: ::ffff:XXXX:XXXX where XXXX are hex digits
+    const hexMatch = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i.exec(trimmed);
+    if (hexMatch) {
+        const part1 = parseInt(hexMatch[1], 16);
+        const part2 = parseInt(hexMatch[2], 16);
+        const b1 = (part1 >> 8) & 0xff;
+        const b2 = part1 & 0xff;
+        const b3 = (part2 >> 8) & 0xff;
+        const b4 = part2 & 0xff;
+        return `${b1}.${b2}.${b3}.${b4}`;
+    }
+    return null;
+}
+// Canonicalize numeric IP encodings (decimal, octal, hex) to dotted-decimal form.
+// Returns the canonical dotted-decimal form, or null if not a recognized numeric encoding.
+function canonicalizeNumericIP(host) {
+    // Check for pure decimal encoding: 2130706433 (127.0.0.1 in decimal)
+    if (/^\d+$/.test(host)) {
+        const num = BigInt(host);
+        if (num >= 0n && num <= 0xffffffffn) {
+            const b1 = Number((num >> 24n) & 0xffn);
+            const b2 = Number((num >> 16n) & 0xffn);
+            const b3 = Number((num >> 8n) & 0xffn);
+            const b4 = Number(num & 0xffn);
+            return `${b1}.${b2}.${b3}.${b4}`;
+        }
+        return null;
+    }
+    // Check for octal/hex encoding in dot-separated parts: 0177.0.0.1, 0x7f.0.0.1, etc.
+    const parts = host.split('.');
+    if (parts.length >= 1 && parts.length <= 4) {
+        try {
+            const octets = [];
+            for (const part of parts) {
+                let value;
+                if (part.startsWith('0x') || part.startsWith('0X')) {
+                    // Hex: 0x7f
+                    value = parseInt(part, 16);
+                }
+                else if (part.startsWith('0') && part.length > 1 && /^[0-7]+$/.test(part.slice(1))) {
+                    // Octal: 0177
+                    value = parseInt(part, 8);
+                }
+                else if (/^\d+$/.test(part)) {
+                    // Decimal: 127
+                    value = parseInt(part, 10);
+                }
+                else {
+                    // Not a numeric part
+                    return null;
+                }
+                if (value < 0 || value > 255) {
+                    return null;
+                }
+                octets.push(value);
+            }
+            // If we have fewer than 4 octets, it's a shorthand notation (not standard IP format)
+            // We'll only canonicalize if we have exactly 4 parts
+            if (octets.length === 4) {
+                return octets.join('.');
+            }
+        }
+        catch {
+            return null;
+        }
+    }
+    return null;
+}
+export function validateSsrfUrl(label, url) {
+    if (!ALLOWED_SCHEMES.has(url.protocol)) {
+        throw new Error(`${label}: scheme "${url.protocol}" is not allowed; use http: or https:`);
+    }
+    // Strip trailing dot from hostname to prevent FQDN FQDN bypasses (F-123)
+    // Node's URL parser preserves trailing dots, but they should be treated the same as the bare hostname
+    const hostname = url.hostname.replace(/\.$/, '');
+    // Check cloud metadata service FQDNs (case-insensitive)
+    const hostnameLower = hostname.toLowerCase();
+    if (BLOCKED_METADATA_FQDNS.has(hostnameLower)) {
+        throw new Error(`${label}: host "${url.hostname}" is a cloud metadata service endpoint`);
+    }
+    // Check cloud metadata service IPs
+    if (BLOCKED_METADATA_IPS.has(hostname)) {
+        throw new Error(`${label}: host "${url.hostname}" is a cloud metadata service endpoint`);
+    }
+    // Canonicalize and check numeric IP encodings (decimal, octal, hex)
+    const canonicalIP = canonicalizeNumericIP(hostname);
+    if (canonicalIP && BLOCKED_HOST_RE.test(canonicalIP)) {
+        throw new Error(`${label}: host "${url.hostname}" is a numeric encoding of a private or loopback address`);
+    }
+    if (BLOCKED_HOST_RE.test(hostname)) {
+        throw new Error(`${label}: host "${url.hostname}" resolves to a private or loopback address`);
+    }
+    // Explicitly check IPv4-mapped IPv6 addresses by extracting and validating the embedded IPv4
+    const embeddedIPv4 = extractIPv4FromMappedIPv6(hostname);
+    if (embeddedIPv4 && BLOCKED_HOST_RE.test(embeddedIPv4)) {
+        throw new Error(`${label}: host "${url.hostname}" contains a private or loopback IPv4 address`);
+    }
+}
+//# sourceMappingURL=ssrf.js.map

package/dist/security/ssrf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.js","sourceRoot":"","sources":["../../src/security/ssrf.ts"],"names":[],"mappings":"AAAA,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAErD,yFAAyF;AACzF,4EAA4E;AAC5E,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,0BAA0B;IAC1B,oBAAoB;IACpB,cAAc;IACd,mBAAmB;CACpB,CAAC,CAAC;AAEH,oFAAoF;AACpF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAE1D,0EAA0E;AAC1E,oDAAoD;AACpD,6FAA6F;AAC7F,kEAAkE;AAClE,4HAA4H;AAC5H,0EAA0E;AAC1E,MAAM,eAAe,GACnB,iaAAia,CAAC;AAEpa,+FAA+F;AAC/F,wFAAwF;AACxF,SAAS,yBAAyB,CAAC,IAAY;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAE5C,mCAAmC;IACnC,MAAM,YAAY,GAChB,uGAAuG,CAAC,IAAI,CAC1G,OAAO,CACR,CAAC;IACJ,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3E,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC/B,MAAM,EAAE,GAAG,KAAK,GAAG,IAAI,CAAC;QACxB,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC/B,MAAM,EAAE,GAAG,KAAK,GAAG,IAAI,CAAC;QACxB,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;IACnC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAClF,2FAA2F;AAC3F,SAAS,qBAAqB,CAAC,IAAY;IACzC,qEAAqE;IACrE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;YACpC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;YACxC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;YACxC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;YACvC,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC;YAC/B,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oFAAoF;IACpF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,KAAa,CAAC;gBAClB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnD,YAAY;oBACZ,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC7B,CAAC;qBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrF,cAAc;oBACd,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC5B,CAAC;qBAAM,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9B,eAAe;oBACf,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,qBAAqB;oBACrB,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;oBAC7B,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YAED,qFAAqF;YACrF,qDAAqD;YACrD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,GAAQ;IACrD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,aAAa,GAAG,CAAC,QAAQ,uCAAuC,CAAC,CAAC;IAC5F,CAAC;IAED,yEAAyE;IACzE,sGAAsG;IACtG,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEjD,wDAAwD;IACxD,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAI,sBAAsB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,WAAW,GAAG,CAAC,QAAQ,wCAAwC,CAAC,CAAC;IAC3F,CAAC;IAED,mCAAmC;IACnC,IAAI,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,WAAW,GAAG,CAAC,QAAQ,wCAAwC,CAAC,CAAC;IAC3F,CAAC;IAED,oEAAoE;IACpE,MAAM,WAAW,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,WAAW,IAAI,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,WAAW,GAAG,CAAC,QAAQ,0DAA0D,CAC1F,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,WAAW,GAAG,CAAC,QAAQ,6CAA6C,CAAC,CAAC;IAChG,CAAC;IAED,6FAA6F;IAC7F,MAAM,YAAY,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,YAAY,IAAI,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,WAAW,GAAG,CAAC,QAAQ,+CAA+C,CAAC,CAAC;IAClG,CAAC;AACH,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,14 @@
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import type { ServerOptions } from './types.js';
+export declare class NrMcpServer {
+    readonly server: Server;
+    private _auditTrailManager;
+    get auditTrailManager(): import('./security/audit-trail.js').AuditTrailManager | undefined;
+    set auditTrailManager(value: import('./security/audit-trail.js').AuditTrailManager | undefined);
+    constructor(options: ServerOptions);
+    private registerHandlers;
+    connectStdio(): Promise<void>;
+    close(): Promise<void>;
+}
+export declare function createServer(options?: Partial<ServerOptions>): NrMcpServer;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AASnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAKhD,qBAAa,WAAW;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,kBAAkB,CAAoE;IAE9F,IAAI,iBAAiB,IAAI,OAAO,2BAA2B,EAAE,iBAAiB,GAAG,SAAS,CAEzF;IAED,IAAI,iBAAiB,CAAC,KAAK,EAAE,OAAO,2BAA2B,EAAE,iBAAiB,GAAG,SAAS,EAE7F;gBAEW,OAAO,EAAE,aAAa;IAiBlC,OAAO,CAAC,gBAAgB;IA2DlB,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAM7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAI7B;AAED,wBAAgB,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,WAAW,CAuB1E"}

package/dist/server.js

@@ -0,0 +1,117 @@
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { ListResourcesRequestSchema, ReadResourceRequestSchema, ErrorCode, McpError, } from '@modelcontextprotocol/sdk/types.js';
+import { VERSION, createLogger } from './shared/index.js';
+import { registerTools } from './tools/session-stats.js';
+const logger = createLogger('mcp-server');
+export class NrMcpServer {
+    server;
+    _auditTrailManager;
+    get auditTrailManager() {
+        return this._auditTrailManager;
+    }
+    set auditTrailManager(value) {
+        this._auditTrailManager = value;
+    }
+    constructor(options) {
+        const serverStartMs = Date.now();
+        this.server = new Server({ name: options.name, version: options.version }, {
+            capabilities: { tools: {}, resources: {}, logging: {} },
+            instructions: 'This server monitors tool usage for observability purposes. Metrics are sent to New Relic. ' +
+                'When token usage data is available after API calls, report it via nr_observe_report_tokens to enable cost tracking.',
+        });
+        this._auditTrailManager = options.auditTrailManager;
+        this.registerHandlers(options, serverStartMs);
+        logger.info('MCP server created', { name: options.name, version: options.version });
+    }
+    registerHandlers(options, serverStartMs) {
+        registerTools(this.server, {
+            sessionTracker: options.sessionTracker,
+            costTracker: options.costTracker,
+            taskDetector: options.taskDetector,
+            antiPatternDetector: options.antiPatternDetector,
+            efficiencyScorer: options.efficiencyScorer,
+            feedbackCollector: options.feedbackCollector,
+            sessionStore: options.sessionStore,
+            weeklySummaryGenerator: options.weeklySummaryGenerator,
+            trendAnalyzer: options.trendAnalyzer,
+            collaborationProfiler: options.collaborationProfiler,
+            claudeMdTracker: options.claudeMdTracker,
+            costPerOutcomeAnalyzer: options.costPerOutcomeAnalyzer,
+            recommendationEngine: options.recommendationEngine,
+            developer: options.developer,
+            teamId: options.teamId,
+            projectId: options.projectId,
+            sessionStartMs: serverStartMs,
+        });
+        this.server.setRequestHandler(ListResourcesRequestSchema, async () => {
+            const resources = [];
+            if (this.auditTrailManager) {
+                resources.push({
+                    uri: 'nr-observe://session/audit-log',
+                    name: 'Session Audit Log',
+                    description: 'Security audit trail for the current session — all tool calls with classification and alerts',
+                    mimeType: 'application/json',
+                });
+            }
+            return { resources };
+        });
+        this.server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
+            try {
+                if (request.params.uri === 'nr-observe://session/audit-log' && this.auditTrailManager) {
+                    const entries = this.auditTrailManager.getAuditLog();
+                    return {
+                        contents: [
+                            {
+                                uri: request.params.uri,
+                                mimeType: 'application/json',
+                                text: JSON.stringify(entries, null, 2),
+                            },
+                        ],
+                    };
+                }
+                throw new McpError(ErrorCode.InvalidRequest, `Unknown resource: ${request.params.uri}`);
+            }
+            catch (err) {
+                if (err instanceof McpError)
+                    throw err;
+                logger.error('Resource handler error', { uri: request.params.uri, error: String(err) });
+                throw err;
+            }
+        });
+    }
+    async connectStdio() {
+        const transport = new StdioServerTransport();
+        await this.server.connect(transport);
+        logger.info('MCP server connected via stdio transport');
+    }
+    async close() {
+        await this.server.close();
+        logger.info('MCP server closed');
+    }
+}
+export function createServer(options) {
+    const resolved = {
+        name: options?.name ?? 'preflight',
+        version: options?.version ?? VERSION,
+        developer: options?.developer,
+        teamId: options?.teamId,
+        projectId: options?.projectId,
+        sessionTracker: options?.sessionTracker,
+        costTracker: options?.costTracker,
+        taskDetector: options?.taskDetector,
+        antiPatternDetector: options?.antiPatternDetector,
+        efficiencyScorer: options?.efficiencyScorer,
+        feedbackCollector: options?.feedbackCollector,
+        auditTrailManager: options?.auditTrailManager,
+        sessionStore: options?.sessionStore,
+        weeklySummaryGenerator: options?.weeklySummaryGenerator,
+        trendAnalyzer: options?.trendAnalyzer,
+        collaborationProfiler: options?.collaborationProfiler,
+        claudeMdTracker: options?.claudeMdTracker,
+        costPerOutcomeAnalyzer: options?.costPerOutcomeAnalyzer,
+        recommendationEngine: options?.recommendationEngine,
+    };
+    return new NrMcpServer(resolved);
+}
+//# sourceMappingURL=server.js.map