@ruso-0/nreki 7.1.2 → 7.3.0

package/dist/utils/latency-tracker.d.ts

@@ -0,0 +1,22 @@
+/**
+ * latency-tracker.ts — Lightweight operation latency accumulator.
+ *
+ * Records timing for the last N operations and computes P50/P95/P99 percentiles.
+ * Used by nreki_guard action:"status" to surface performance telemetry.
+ * Zero external dependencies.
+ */
+declare class LatencyTracker {
+    private samples;
+    record(op: string, ms: number): void;
+    getStats(op?: string): {
+        count: number;
+        p50: number;
+        p95: number;
+        p99: number;
+        avg: number;
+    } | null;
+    getSummary(): string;
+}
+export declare const latencyTracker: LatencyTracker;
+export {};
+//# sourceMappingURL=latency-tracker.d.ts.map

package/dist/utils/latency-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"latency-tracker.d.ts","sourceRoot":"","sources":["../../src/utils/latency-tracker.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,cAAM,cAAc;IAChB,OAAO,CAAC,OAAO,CAAsB;IAErC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI;IAOpC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAmBnG,UAAU,IAAI,MAAM;CAcvB;AAGD,eAAO,MAAM,cAAc,gBAAuB,CAAC"}

package/dist/utils/latency-tracker.js

@@ -0,0 +1,49 @@
+/**
+ * latency-tracker.ts — Lightweight operation latency accumulator.
+ *
+ * Records timing for the last N operations and computes P50/P95/P99 percentiles.
+ * Used by nreki_guard action:"status" to surface performance telemetry.
+ * Zero external dependencies.
+ */
+const MAX_SAMPLES = 200;
+class LatencyTracker {
+    samples = [];
+    record(op, ms) {
+        this.samples.push({ op, ms, ts: Date.now() });
+        if (this.samples.length > MAX_SAMPLES) {
+            this.samples.shift();
+        }
+    }
+    getStats(op) {
+        const filtered = op
+            ? this.samples.filter(s => s.op === op)
+            : this.samples;
+        if (filtered.length === 0)
+            return null;
+        const sorted = filtered.map(s => s.ms).sort((a, b) => a - b);
+        const n = sorted.length;
+        return {
+            count: n,
+            p50: sorted[Math.floor(n * 0.50)] ?? 0,
+            p95: sorted[Math.floor(n * 0.95)] ?? 0,
+            p99: sorted[Math.floor(n * 0.99)] ?? 0,
+            avg: Math.round(sorted.reduce((a, b) => a + b, 0) / n),
+        };
+    }
+    getSummary() {
+        const ops = new Set(this.samples.map(s => s.op));
+        if (ops.size === 0)
+            return "  No operations recorded yet.";
+        const lines = [];
+        for (const op of ops) {
+            const stats = this.getStats(op);
+            if (!stats)
+                continue;
+            lines.push(`     ${op}: ${stats.count} ops, avg=${stats.avg}ms, p50=${stats.p50}ms, p95=${stats.p95}ms, p99=${stats.p99}ms`);
+        }
+        return lines.join("\n");
+    }
+}
+// Singleton
+export const latencyTracker = new LatencyTracker();
+//# sourceMappingURL=latency-tracker.js.map

package/dist/utils/latency-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"latency-tracker.js","sourceRoot":"","sources":["../../src/utils/latency-tracker.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,GAAG,GAAG,CAAC;AAQxB,MAAM,cAAc;IACR,OAAO,GAAmB,EAAE,CAAC;IAErC,MAAM,CAAC,EAAU,EAAE,EAAU;QACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,EAAW;QAChB,MAAM,QAAQ,GAAG,EAAE;YACf,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACvC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAEnB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEvC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QAExB,OAAO;YACH,KAAK,EAAE,CAAC;YACR,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC;YACtC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC;YACtC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC;YACtC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;SACzD,CAAC;IACN,CAAC;IAED,UAAU;QACN,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,+BAA+B,CAAC;QAE3D,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,KAAK,CAAC,IAAI,CACN,QAAQ,EAAE,KAAK,KAAK,CAAC,KAAK,aAAa,KAAK,CAAC,GAAG,WAAW,KAAK,CAAC,GAAG,WAAW,KAAK,CAAC,GAAG,WAAW,KAAK,CAAC,GAAG,IAAI,CACnH,CAAC;QACN,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;CACJ;AAED,YAAY;AACZ,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC"}

package/dist/utils/logger.d.ts

@@ -1,12 +1,15 @@
 /**
- * logger.ts — Lightweight stderr-only logger
+ * logger.ts — Lightweight stderr-only logger with structured output
  *
  * MCP requires stdout to be EXCLUSIVELY JSON-RPC.
  * All diagnostic output goes through process.stderr.write().
  * Zero external dependencies (no winston, no pino).
  *
- * NREKI_DEBUG=1 enables debug-level output.
+ * NREKI_DEBUG=1      enables debug-level output.
+ * NREKI_LOG_FORMAT=json  outputs JSON lines for machine parsing.
  */
+export declare function setTxId(id: string): void;
+export declare function clearTxId(): void;
 export declare const logger: {
     info: (msg: string) => void;
     warn: (msg: string) => void;

package/dist/utils/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,MAAM;gBACH,MAAM,KAAG,IAAI;gBAGb,MAAM,KAAG,IAAI;iBAGZ,MAAM,QAAQ,OAAO,KAAG,IAAI;iBAI5B,MAAM,KAAG,IAAI;CAG7B,CAAC"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH,wBAAgB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAgB;AACzD,wBAAgB,SAAS,IAAI,IAAI,CAAgB;AAejD,eAAO,MAAM,MAAM;gBACH,MAAM,KAAG,IAAI;gBAGb,MAAM,KAAG,IAAI;iBAGZ,MAAM,QAAQ,OAAO,KAAG,IAAI;iBAI5B,MAAM,KAAG,IAAI;CAG7B,CAAC"}

package/dist/utils/logger.js

@@ -1,26 +1,49 @@
 /**
- * logger.ts — Lightweight stderr-only logger
+ * logger.ts — Lightweight stderr-only logger with structured output
  *
  * MCP requires stdout to be EXCLUSIVELY JSON-RPC.
  * All diagnostic output goes through process.stderr.write().
  * Zero external dependencies (no winston, no pino).
  *
- * NREKI_DEBUG=1 enables debug-level output.
+ * NREKI_DEBUG=1      enables debug-level output.
+ * NREKI_LOG_FORMAT=json  outputs JSON lines for machine parsing.
  */
+const iso = () => new Date().toISOString();
+const compact = () => iso().slice(11, 23); // HH:MM:SS.mmm
+const isJson = process.env.NREKI_LOG_FORMAT === "json";
+// ─── Transaction context (set per interceptAtomicBatch) ──────────
+let _txId = "";
+export function setTxId(id) { _txId = id; }
+export function clearTxId() { _txId = ""; }
+function emit(level, msg, trace) {
+    if (isJson) {
+        const obj = { level, ts: iso(), msg };
+        if (_txId)
+            obj.txId = _txId;
+        if (trace)
+            obj.trace = trace;
+        process.stderr.write(JSON.stringify(obj) + "\n");
+    }
+    else {
+        const tx = _txId ? ` tx:${_txId}` : "";
+        const suffix = trace ?? "";
+        process.stderr.write(`[NREKI:${level} ${compact()}${tx}] ${msg}${suffix}\n`);
+    }
+}
 export const logger = {
     info: (msg) => {
-        process.stderr.write(`[NREKI:INFO] ${msg}\n`);
+        emit("INFO", msg);
     },
     warn: (msg) => {
-        process.stderr.write(`[NREKI:WARN] ${msg}\n`);
+        emit("WARN", msg);
     },
     error: (msg, err) => {
         const trace = err instanceof Error ? ` ${err.stack}` : (err ? ` ${err}` : "");
-        process.stderr.write(`[NREKI:ERROR] ${msg}${trace}\n`);
+        emit("ERROR", msg, trace || undefined);
     },
     debug: (msg) => {
         if (process.env.NREKI_DEBUG)
-            process.stderr.write(`[NREKI:DEBUG] ${msg}\n`);
+            emit("DEBUG", msg);
     },
 };
 //# sourceMappingURL=logger.js.map

package/dist/utils/logger.js.map

@@ -1 +1 @@
-{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,MAAM,GAAG;IAClB,IAAI,EAAE,CAAC,GAAW,EAAQ,EAAE;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,EAAE,CAAC,GAAW,EAAQ,EAAE;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,EAAE,CAAC,GAAW,EAAE,GAAa,EAAQ,EAAE;QACxC,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC;IAC3D,CAAC;IACD,KAAK,EAAE,CAAC,GAAW,EAAQ,EAAE;QACzB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAChF,CAAC;CACJ,CAAC"}
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,GAAG,GAAG,GAAW,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACnD,MAAM,OAAO,GAAG,GAAW,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe;AAClE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,MAAM,CAAC;AAEvD,oEAAoE;AACpE,IAAI,KAAK,GAAG,EAAE,CAAC;AACf,MAAM,UAAU,OAAO,CAAC,EAAU,IAAU,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;AACzD,MAAM,UAAU,SAAS,KAAW,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;AAEjD,SAAS,IAAI,CAAC,KAAa,EAAE,GAAW,EAAE,KAAc;IACpD,IAAI,MAAM,EAAE,CAAC;QACT,MAAM,GAAG,GAA2B,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC;QAC9D,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC;QAC5B,IAAI,KAAK;YAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACJ,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,OAAO,EAAE,GAAG,EAAE,KAAK,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC;IACjF,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG;IAClB,IAAI,EAAE,CAAC,GAAW,EAAQ,EAAE;QACxB,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,EAAE,CAAC,GAAW,EAAQ,EAAE;QACxB,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtB,CAAC;IACD,KAAK,EAAE,CAAC,GAAW,EAAE,GAAa,EAAQ,EAAE;QACxC,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,IAAI,SAAS,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,EAAE,CAAC,GAAW,EAAQ,EAAE;QACzB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;YAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACpD,CAAC;CACJ,CAAC"}

package/dist/utils/path-jail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"path-jail.d.ts","sourceRoot":"","sources":["../../src/utils/path-jail.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA4BH;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGzD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAoEzE"}
+{"version":3,"file":"path-jail.d.ts","sourceRoot":"","sources":["../../src/utils/path-jail.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA+BH;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGzD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAoEzE"}

package/dist/utils/path-jail.js

@@ -27,6 +27,9 @@ const SENSITIVE_PATTERNS = [
     /[/\\]\.htpasswd$/i, // Apache password file
     /[/\\]\.git-credentials$/i, // Git credential file
     /[/\\]\.kube[/\\]config$/i, // Kubernetes config
+    /\.age$/i, // age encryption keys
+    /[/\\]vault-token$/i, // HashiCorp Vault token
+    /[/\\]\.terraform[/\\]/i, // Terraform state (may contain secrets)
 ];
 /**
  * Check if a file path matches known sensitive file patterns.

package/dist/utils/path-jail.js.map

@@ -1 +1 @@
-{"version":3,"file":"path-jail.js","sourceRoot":"","sources":["../../src/utils/path-jail.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,uEAAuE;AAEvE,MAAM,kBAAkB,GAAa;IACjC,cAAc,EAAsB,oCAAoC;IACxE,kBAAkB,EAAkB,SAAS;IAC7C,oBAAoB,EAAe,WAAW;IAC9C,kBAAkB,EAAiB,SAAS;IAC5C,SAAS,EAA2B,eAAe;IACnD,aAAa,EAAuB,mBAAmB;IACvD,SAAS,EAA2B,wBAAwB;IAC5D,SAAS,EAA2B,oBAAoB;IACxD,gBAAgB,EAAoB,kBAAkB;IACtD,iBAAiB,EAAmB,mBAAmB;IACvD,8BAA8B,EAAM,uBAAuB;IAC3D,yBAAyB,EAAW,kCAAkC;IACtE,kCAAkC,EAAE,cAAc;IAClD,0BAA0B,EAAU,4BAA4B;IAChE,gBAAgB,EAAoB,uBAAuB;IAC3D,mBAAmB,EAAgB,uBAAuB;IAC1D,0BAA0B,EAAU,sBAAsB;IAC1D,0BAA0B,EAAU,oBAAoB;CAC3D,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChD,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,QAAQ,CAAC,aAAqB,EAAE,SAAiB;IAC7D,uFAAuF;IACvF,kEAAkE;IAClE,8EAA8E;IAC9E,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAEjD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,qDAAqD;IACrD,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,8CAA8C,SAAS,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,8CAA8C;IAC9C,uEAAuE;IACvE,8EAA8E;IAC9E,gDAAgD;IAChD,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACD,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACL,QAAQ,GAAG,YAAY,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,6BAA6B,CAAC,CAAC;QACvF,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnD,yEAAyE;YACzE,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACpC,8CAA8C;YAC9C,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/D,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC;YACD,IAAI,CAAC;gBACD,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC3C,IAAI,QAAgB,CAAC;gBACrB,IAAI,CAAC;oBACD,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC7C,CAAC;gBAAC,MAAM,CAAC;oBACL,QAAQ,GAAG,YAAY,CAAC;gBAC5B,CAAC;gBACD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;oBACzE,MAAM,IAAI,KAAK,CAAC,+CAA+C,SAAS,EAAE,CAAC,CAAC;gBAChF,CAAC;YACL,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACjB,IAAK,SAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;oBAClE,MAAM,SAAS,CAAC;gBACpB,CAAC;gBACD,mEAAmE;YACvE,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;IAED,kCAAkC;IAClC,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,qCAAqC,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,QAAQ,CAAC;AACpB,CAAC"}
+{"version":3,"file":"path-jail.js","sourceRoot":"","sources":["../../src/utils/path-jail.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,uEAAuE;AAEvE,MAAM,kBAAkB,GAAa;IACjC,cAAc,EAAsB,oCAAoC;IACxE,kBAAkB,EAAkB,SAAS;IAC7C,oBAAoB,EAAe,WAAW;IAC9C,kBAAkB,EAAiB,SAAS;IAC5C,SAAS,EAA2B,eAAe;IACnD,aAAa,EAAuB,mBAAmB;IACvD,SAAS,EAA2B,wBAAwB;IAC5D,SAAS,EAA2B,oBAAoB;IACxD,gBAAgB,EAAoB,kBAAkB;IACtD,iBAAiB,EAAmB,mBAAmB;IACvD,8BAA8B,EAAM,uBAAuB;IAC3D,yBAAyB,EAAW,kCAAkC;IACtE,kCAAkC,EAAE,cAAc;IAClD,0BAA0B,EAAU,4BAA4B;IAChE,gBAAgB,EAAoB,uBAAuB;IAC3D,mBAAmB,EAAgB,uBAAuB;IAC1D,0BAA0B,EAAU,sBAAsB;IAC1D,0BAA0B,EAAU,oBAAoB;IACxD,SAAS,EAA2B,sBAAsB;IAC1D,oBAAoB,EAAgB,wBAAwB;IAC5D,wBAAwB,EAAY,wCAAwC;CAC/E,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC5C,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChD,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,QAAQ,CAAC,aAAqB,EAAE,SAAiB;IAC7D,uFAAuF;IACvF,kEAAkE;IAClE,8EAA8E;IAC9E,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAEjD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,qDAAqD;IACrD,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,8CAA8C,SAAS,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,8CAA8C;IAC9C,uEAAuE;IACvE,8EAA8E;IAC9E,gDAAgD;IAChD,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACD,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACL,QAAQ,GAAG,YAAY,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,2BAA2B,SAAS,6BAA6B,CAAC,CAAC;QACvF,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnD,yEAAyE;YACzE,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACpC,8CAA8C;YAC9C,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/D,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC;YACD,IAAI,CAAC;gBACD,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAC3C,IAAI,QAAgB,CAAC;gBACrB,IAAI,CAAC;oBACD,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC7C,CAAC;gBAAC,MAAM,CAAC;oBACL,QAAQ,GAAG,YAAY,CAAC;gBAC5B,CAAC;gBACD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;oBACzE,MAAM,IAAI,KAAK,CAAC,+CAA+C,SAAS,EAAE,CAAC,CAAC;gBAChF,CAAC;YACL,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACjB,IAAK,SAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;oBAClE,MAAM,SAAS,CAAC;gBACpB,CAAC;gBACD,mEAAmE;YACvE,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;IAED,kCAAkC;IAClC,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,qCAAqC,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,QAAQ,CAAC;AACpB,CAAC"}

package/package.json

@@ -1,79 +1,96 @@
-{
-  "name": "@ruso-0/nreki",
-  "version": "7.1.2",
-  "description": "MCP server that validates AI agent edits in RAM before they reach disk. Cross-file semantic checks via TypeScript Compiler API. Auto-fixes structural errors. Zero cloud dependencies.",
-  "main": "dist/index.js",
-  "type": "module",
-  "bin": {
-    "nreki": "dist/index.js"
-  },
-  "scripts": {
-    "build": "tsc",
-    "start": "node dist/index.js",
-    "dev": "tsx src/index.ts",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "postinstall": "node scripts/download-wasm.js",
-    "lint": "tsc --noEmit",
-    "benchmark:spectral": "tsx tests/benchmark-spectral.ts",
-    "benchmark:external": "tsx tests/benchmark-spectral-external.ts",
-    "benchmark:precision": "tsx tests/benchmark-precision.ts"
-  },
-  "keywords": [
-    "nreki",
-    "mcp",
-    "claude-code",
-    "ai-safety",
-    "ast-validation",
-    "semantic-verification",
-    "acid-transactions",
-    "vfs",
-    "typescript-compiler",
-    "circuit-breaker",
-    "tree-sitter",
-    "pagerank",
-    "blast-radius",
-    "code-safety",
-    "surgical-edit",
-    "auto-healing",
-    "zero-token",
-    "codefix"
-  ],
-  "author": "Jherson Eddie Tintaya Holguin (https://github.com/Ruso-0)",
-  "license": "Apache-2.0",
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.12.1",
-    "chokidar": "^4.0.3",
-    "picomatch": "^4.0.3",
-    "sql.js": "^1.12.0",
-    "tree-sitter-wasms": "^0.1.13",
-    "typescript": "^5.9.3",
-    "web-tree-sitter": "^0.24.7",
-    "zod": "^3.24.2"
-  },
-  "optionalDependencies": {
-    "@xenova/transformers": "^2.17.2"
-  },
-  "devDependencies": {
-    "@types/node": "^22.13.10",
-    "@types/picomatch": "^4.0.2",
-    "tsx": "^4.19.3",
-    "vitest": "^4.1.1"
-  },
-  "files": [
-    "dist/",
-    "wasm/",
-    "templates/",
-    "scripts/download-wasm.js",
-    "README.md",
-    "LICENSE",
-    "CHANGELOG.md"
-  ],
-  "engines": {
-    "node": ">=20.0.0"
-  },
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/Ruso-0/nreki"
-  }
-}
+{
+  "name": "@ruso-0/nreki",
+  "version": "7.3.0",
+  "description": "MCP plugin that validates AI agent edits in RAM before they touch disk. Cross-file semantic checks for TypeScript, Go (gopls), and Python (pyright). Auto-healing, type regression detection, and spectral topology. Zero cloud dependencies.",
+  "main": "dist/index.js",
+  "type": "module",
+  "bin": {
+    "nreki": "dist/index.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "dev": "tsx src/index.ts",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "postinstall": "node scripts/download-wasm.js",
+    "lint": "tsc --noEmit",
+    "benchmark:spectral": "tsx tests/benchmark-spectral.ts",
+    "benchmark:external": "tsx tests/benchmark-spectral-external.ts",
+    "benchmark:precision": "tsx tests/benchmark-precision.ts"
+  },
+  "keywords": [
+    "nreki",
+    "mcp",
+    "claude-code",
+    "cursor",
+    "copilot",
+    "ai-safety",
+    "ai-coding-agent",
+    "ast-validation",
+    "semantic-verification",
+    "acid-transactions",
+    "vfs",
+    "typescript-compiler",
+    "gopls",
+    "pyright",
+    "multi-language",
+    "circuit-breaker",
+    "tree-sitter",
+    "pagerank",
+    "blast-radius",
+    "code-safety",
+    "surgical-edit",
+    "auto-healing",
+    "type-regression",
+    "spectral-topology",
+    "fiedler-vector",
+    "topology-aware-rag",
+    "lsp-sidecar"
+  ],
+  "author": "Jherson Eddie Tintaya Holguin (https://github.com/Ruso-0)",
+  "license": "Apache-2.0",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.1",
+    "chokidar": "^4.0.3",
+    "picomatch": "^4.0.3",
+    "sql.js": "^1.12.0",
+    "tree-sitter-wasms": "^0.1.13",
+    "web-tree-sitter": "^0.24.7",
+    "zod": "^3.24.2"
+  },
+  "peerDependencies": {
+    "typescript": ">=5.5.0"
+  },
+  "peerDependenciesMeta": {
+    "typescript": {
+      "optional": false
+    }
+  },
+  "optionalDependencies": {
+    "@xenova/transformers": "^2.17.2"
+  },
+  "devDependencies": {
+    "@types/node": "^22.13.10",
+    "@types/picomatch": "^4.0.2",
+    "tsx": "^4.19.3",
+    "typescript": "^5.9.3",
+    "vitest": "^4.1.1"
+  },
+  "files": [
+    "dist/",
+    "wasm/",
+    "templates/",
+    "scripts/download-wasm.js",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Ruso-0/nreki"
+  }
+}