@tonyclaw/agent-inspector 3.1.20 → 3.1.21

package/.output/backend/nitro.json

@@ -1,5 +1,5 @@
 {
-  "date": "2026-07-21T01:44:00.955Z",
+  "date": "2026-07-21T09:19:48.776Z",
   "preset": "node-server",
   "framework": {
     "name": "nitro",

package/.output/cli.js

@@ -20,7 +20,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@tonyclaw/agent-inspector",
-      version: "3.1.20",
+      version: "3.1.21",
       type: "module",
       description: "Agent observability and knowledge capture layer for AI coding tools.",
       license: "MIT",
@@ -84,6 +84,7 @@ var init_package = __esm({
         "test:integration": "node scripts/run-local-bun.mjs scripts/run-test-suite.mjs integration",
         "test:changed": "node scripts/run-local-bun.mjs scripts/run-test-suite.mjs changed",
         "test:all": "node scripts/run-local-bun.mjs scripts/run-test-suite.mjs all",
+        "test:hostile-inputs": "bun test src/proxy/identityProxy.test.ts src/proxy/handler.cancellationCompatibility.test.ts src/proxy/logImporter.test.ts src/backend/routes/api/-logs.stream.test.ts src/proxy/handler.admission.test.ts src/proxy/runtimeHealth.test.ts src/proxy/storageLifecycle.test.ts",
         "test:compatibility-tooling": "node scripts/run-compatibility-tests.mjs ultra",
         "test:compatibility-tooling:extended": "node scripts/run-compatibility-tests.mjs extended",
         "test:compatibility-conformance": "node scripts/run-compatibility-tests.mjs conformance",
@@ -102,6 +103,9 @@ var init_package = __esm({
         "smoke:ui-preview": "node scripts/smoke-decoupled-ui-preview.mjs",
         "check:bundle": "node scripts/check-client-bundle.mjs",
         "check:boundaries": "node scripts/check-runtime-boundaries.mjs",
+        "check:commercial-performance": "node scripts/check-commercial-performance-budgets.mjs",
+        "check:hostile-inputs": "node scripts/check-hostile-input-coverage.mjs",
+        "check:supply-chain": "node scripts/check-commercial-supply-chain.mjs",
         "compatibility:bdd": "node scripts/lint-bdd-catalog.mjs",
         "compatibility:compare": "node scripts/compatibility/cli.mjs compare",
         "compatibility:drift": "node scripts/check-backend-compatibility.mjs",
@@ -118,7 +122,10 @@ var init_package = __esm({
         "rust:pack-package": "node scripts/rust/pack-platform.mjs",
         "rust:native-artifact": "node scripts/rust/create-native-artifact.mjs",
         "rust:native:aggregate": "node scripts/rust/aggregate-native-artifacts.mjs",
-        "test:rust-packaging": "bun test scripts/rust/npmPackaging.test.ts scripts/rust/nativeReleaseContract.test.ts scripts/rust/nativeStartupSmoke.test.ts scripts/releaseCore.test.ts",
+        "rust:release-gate:preflight": "node scripts/rust/release-gate-preflight.mjs",
+        "commercial:release-gate:preflight": "node scripts/commercial-release-preflight.mjs",
+        "test:commercial-release-gate": "bun test scripts/commercialReleasePreflight.test.ts",
+        "test:rust-packaging": "bun test scripts/rust/npmPackaging.test.ts scripts/rust/nativeReleaseContract.test.ts scripts/rust/nativeStartupSmoke.test.ts scripts/rust/releaseGatePreflight.test.ts scripts/releaseCore.test.ts",
         "rust:packages:check": "node scripts/rust/sync-package-versions.mjs",
         "rust:packages:sync": "node scripts/rust/sync-package-versions.mjs --write",
         "themes:generate": "node scripts/generate-theme-scales.mjs",
@@ -136,7 +143,7 @@ var init_package = __esm({
         "extension:release": "node scripts/release-chrome-extension.mjs",
         release: "node scripts/release.mjs",
         knip: "knip",
-        check: "bun scripts/run-static-checks.mjs --format && bun check:boundaries && bun compatibility:bdd && bun rust:packages:check",
+        check: "bun scripts/run-static-checks.mjs --format && bun check:boundaries && bun check:commercial-performance && bun check:hostile-inputs && bun compatibility:bdd && bun rust:packages:check",
         prepare: "husky",
         ladle: "ladle serve",
         "ladle:build": "ladle build"
@@ -166,9 +173,9 @@ var init_package = __esm({
         zod: "^4.4.3"
       },
       optionalDependencies: {
-        "@tonyclaw/agent-inspector-backend-darwin-arm64": "3.1.20",
-        "@tonyclaw/agent-inspector-backend-linux-x64-gnu": "3.1.20",
-        "@tonyclaw/agent-inspector-backend-win32-x64-msvc": "3.1.20",
+        "@tonyclaw/agent-inspector-backend-darwin-arm64": "3.1.21",
+        "@tonyclaw/agent-inspector-backend-linux-x64-gnu": "3.1.21",
+        "@tonyclaw/agent-inspector-backend-win32-x64-msvc": "3.1.21",
         "better-sqlite3": "^12.11.1",
         rcedit: "4.0.1"
       },
@@ -20961,10 +20968,12 @@ var init_onboard = __esm({
 var doctor_exports = {};
 __export(doctor_exports, {
   buildDoctorReport: () => buildDoctorReport,
+  buildDoctorSupportBundle: () => buildDoctorSupportBundle,
   createDoctorDeps: () => createDoctorDeps,
   doctorHelp: () => doctorHelp,
   formatDoctorJson: () => formatDoctorJson,
   formatDoctorReport: () => formatDoctorReport,
+  formatDoctorSupportBundle: () => formatDoctorSupportBundle,
   parseDoctorArgs: () => parseDoctorArgs,
   runDoctor: () => runDoctor
 });
@@ -20994,6 +21003,7 @@ function parseDoctorArgs(argv, env = process.env) {
     chromeExtension: false,
     fix: false,
     json: false,
+    supportBundle: false,
     verbose: false,
     help: false
   };
@@ -21043,6 +21053,10 @@ function parseDoctorArgs(argv, env = process.env) {
       case "--json":
         options.json = true;
         break;
+      case "--support-bundle":
+        options.supportBundle = true;
+        options.json = true;
+        break;
       case "--verbose":
         options.verbose = true;
         break;
@@ -21186,6 +21200,39 @@ async function checkProxyHealth(port, deps) {
     "Start with `agent-inspector`, `agent-inspector --background`, or `bun run dev`."
   );
 }
+function readinessChecks(readiness) {
+  if (!readiness.ok) {
+    const suffix = readiness.status === null ? "" : ` (HTTP ${readiness.status})`;
+    return [
+      check2(
+        "Readiness",
+        "warn",
+        `Readiness probe is unavailable${suffix}.`,
+        "Use /readyz locally or run with --verbose for storage and worker hints."
+      )
+    ];
+  }
+  if (!isObject3(readiness.body)) {
+    return [check2("Readiness", "warn", "Readiness response was not an object.")];
+  }
+  const status = readiness.body["status"];
+  const checks = readiness.body["checks"];
+  if (typeof status !== "string" || !isObject3(checks)) {
+    return [check2("Readiness", "warn", "Readiness response did not include status/checks.")];
+  }
+  const degraded = Object.entries(checks).filter(([, value]) => value !== "ok").map(([name, value]) => `${name}=${String(value)}`);
+  if (degraded.length === 0) {
+    return [check2("Readiness", "pass", `Runtime readiness is ${status}.`)];
+  }
+  return [
+    check2(
+      "Readiness",
+      status === "unavailable" ? "fail" : "warn",
+      `Runtime readiness is ${status}: ${degraded.join(", ")}.`,
+      "Inspect /readyz and /metrics for safe aggregate runtime details."
+    )
+  ];
+}
 function findProjectRoot(startDir, deps) {
   let current = resolve5(startDir);
   for (let i = 0; i < 6; i++) {
@@ -21376,8 +21423,11 @@ function checkExtensionPackage(rootDir, deps) {
 }
 async function buildDoctorReport(options, deps = createDoctorDeps()) {
   const rootDir = findProjectRoot(deps.cwd, deps);
+  const basePath = getConfiguredBasePath(deps.env);
+  const readiness = await deps.fetchReadiness(options.port, basePath);
   const coreChecks = [
     await checkProxyHealth(options.port, deps),
+    ...readinessChecks(readiness),
     checkProviderConfig(options, deps),
     checkPackage(rootDir, deps)
   ];
@@ -21388,12 +21438,30 @@ async function buildDoctorReport(options, deps = createDoctorDeps()) {
   const failCount = checks.filter((item) => item.severity === "fail").length;
   return {
     checks,
+    readiness,
     passCount,
     warnCount,
     failCount,
     exitCode: failCount > 0 ? 1 : 0
   };
 }
+function buildDoctorSupportBundle(options, deps, report) {
+  return {
+    schema: "agent-inspector.support-bundle/v1",
+    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+    report,
+    environment: {
+      platform: deps.platform,
+      cwd: deps.cwd,
+      basePath: getConfiguredBasePath(deps.env),
+      port: options.port,
+      hasControlToken: deps.env["AGENT_INSPECTOR_CONTROL_TOKEN"] !== void 0 || deps.env["AGENT_INSPECTOR_API_TOKEN"] !== void 0,
+      hasProxyToken: deps.env["AGENT_INSPECTOR_PROXY_TOKEN"] !== void 0,
+      hasProviderJsonOverride: options.providersJson !== null || deps.env["AGENT_INSPECTOR_PROVIDERS_JSON"] !== void 0
+    },
+    storage: verboseChecks(options, deps).filter((item) => item.name.includes("storage"))
+  };
+}
 function formatDoctorReport(report) {
   const lines = ["agent-inspector doctor", ""];
   for (const item of report.checks) {
@@ -21413,17 +21481,22 @@ function formatDoctorJson(report) {
   return `${JSON.stringify(report, null, 2)}
 `;
 }
+function formatDoctorSupportBundle(bundle) {
+  return `${JSON.stringify(bundle, null, 2)}
+`;
+}
 function doctorHelp() {
   return [
     "agent-inspector doctor",
     "",
     "Usage:",
-    "  agent-inspector doctor [--port <port>] [--config-dir <dir>] [--providers <json>] [--fix] [--json] [--verbose] [--chrome-extension]",
+    "  agent-inspector doctor [--port <port>] [--config-dir <dir>] [--providers <json>] [--fix] [--json] [--support-bundle] [--verbose] [--chrome-extension]",
     "",
     "Checks local backend health, provider config presence, and package metadata.",
     "The backend check probes the local health endpoint and does not require a composed Web UI.",
     "Pass --fix to run safe local repairs before checks, including legacy data-dir migration.",
     "Pass --json to emit a machine-readable report for CI, scripts, and Jenkins.",
+    "Pass --support-bundle to emit a redacted JSON bundle with readiness causes and storage summary.",
     "Pass --verbose to include local paths, capture mode, and log storage checks.",
     "Pass --chrome-extension to also check Chrome companion source and packaged artifacts.",
     ""
@@ -21447,6 +21520,30 @@ async function fetchHealth(port, basePath) {
     clearTimeout(timeout);
   }
 }
+async function fetchReadiness(port, basePath) {
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), PROBE_TIMEOUT_MS);
+  try {
+    const response = await fetch(
+      appendBasePathToOrigin(`http://127.0.0.1:${port}`, "/readyz", basePath),
+      {
+        cache: "no-store",
+        signal: controller.signal
+      }
+    );
+    let body = null;
+    try {
+      body = await response.json();
+    } catch {
+      body = null;
+    }
+    return { ok: response.ok, status: response.status, body };
+  } catch {
+    return { ok: false, status: null, body: null };
+  } finally {
+    clearTimeout(timeout);
+  }
+}
 function isPortOpen(port) {
   return new Promise((resolveOpen) => {
     const socket = createConnection({ host: "127.0.0.1", port });
@@ -21493,6 +21590,7 @@ function createDoctorDeps() {
     listDir,
     stat: stat3,
     fetchHealth,
+    fetchReadiness,
     isPortOpen
   };
 }
@@ -21511,7 +21609,14 @@ async function runDoctor(argv) {
     migrateLegacyDataDirs();
   }
   const report = await buildDoctorReport(parsed.options);
-  process.stdout.write(parsed.options.json ? formatDoctorJson(report) : formatDoctorReport(report));
+  if (parsed.options.supportBundle) {
+    const bundle = buildDoctorSupportBundle(parsed.options, createDoctorDeps(), report);
+    process.stdout.write(formatDoctorSupportBundle(bundle));
+  } else {
+    process.stdout.write(
+      parsed.options.json ? formatDoctorJson(report) : formatDoctorReport(report)
+    );
+  }
   return report.exitCode;
 }
 var DEFAULT_PORT3, PROBE_TIMEOUT_MS, EXTENSION_REQUIRED_FILES;
@@ -23851,9 +23956,10 @@ function normalizedHostname(value) {
   }
 }
 function isLoopbackHostname(hostname3) {
-  if (hostname3 === "localhost" || hostname3 === "::1") return true;
-  if (isIP2(hostname3) !== 4) return false;
-  return hostname3.split(".", 1)[0] === "127";
+  const normalized = hostname3.toLowerCase().replace(/^\[|]$/g, "");
+  if (normalized === "localhost" || normalized === "::1") return true;
+  if (isIP2(normalized) !== 4) return false;
+  return normalized.split(".", 1)[0] === "127";
 }
 function parseUrl(value) {
   try {
@@ -23910,11 +24016,20 @@ function normalizedRequestOrigin(origin) {
     return null;
   }
 }
+function parsedRequestOrigin(origin) {
+  const normalized = normalizedRequestOrigin(origin);
+  if (normalized === null) return null;
+  return new URL(normalized);
+}
+function isSameOrLoopbackAliasOrigin(left, right) {
+  if (left.origin === right.origin) return true;
+  return left.protocol === right.protocol && left.port === right.port && isLoopbackHostname(left.hostname) && isLoopbackHostname(right.hostname);
+}
 function isSameRequestOrigin(origin, host, publicOrigin) {
-  const parsedOrigin = normalizedRequestOrigin(origin);
+  const parsedOrigin = parsedRequestOrigin(origin);
   if (parsedOrigin === null) return false;
-  const expected = normalizedRequestOrigin(publicOrigin ?? `http://${host ?? "localhost"}`);
-  return expected !== null && parsedOrigin === expected;
+  const expected = parsedRequestOrigin(publicOrigin ?? `http://${host ?? "localhost"}`);
+  return expected !== null && isSameOrLoopbackAliasOrigin(parsedOrigin, expected);
 }
 function matchedUiOrigin(origin, allowedUiOrigins) {
   if (origin === void 0) return null;
@@ -23998,18 +24113,19 @@ function isBrowserMutationAllowed(input) {
   const fetchSite = input.secFetchSite?.toLowerCase();
   const browserRequest = input.origin !== void 0 || fetchSite !== void 0;
   if (!browserRequest) return true;
+  const sameOrigin = input.origin !== void 0 ? isSameRequestOrigin(input.origin, input.host, input.publicOrigin) : false;
   if (isModelProxyPath(pathname)) {
-    if (fetchSite !== void 0 && fetchSite !== "same-origin") return false;
-    if (input.origin !== void 0 && !isSameRequestOrigin(input.origin, input.host, input.publicOrigin)) {
+    if (fetchSite !== void 0 && fetchSite !== "same-origin" && !sameOrigin) return false;
+    if (input.origin !== void 0 && !sameOrigin) {
       return false;
     }
     return input.csrfToken === "1";
   }
   const allowedOrigin = matchedUiOrigin(input.origin, input.allowedUiOrigins);
-  if (fetchSite !== void 0 && fetchSite !== "same-origin" && allowedOrigin === null)
+  if (fetchSite !== void 0 && fetchSite !== "same-origin" && !sameOrigin && allowedOrigin === null)
     return false;
   if (input.origin !== void 0) {
-    if (!isSameRequestOrigin(input.origin, input.host, input.publicOrigin) && allowedOrigin === null) {
+    if (!sameOrigin && allowedOrigin === null) {
       return false;
     }
   }
@@ -25686,8 +25802,9 @@ async function runStart(args) {
   }
   const runningInBackgroundSupervisor = process.env[AGENT_INSPECTOR_BACKGROUND_SUPERVISOR_ENV] === "1";
   const backgroundSupervisorLogs = runningInBackgroundSupervisor ? createBackgroundSupervisorLogs(serverEnv) : null;
+  const shouldPipeBackgroundRuntimeLogs = backgroundSupervisorLogs !== null;
   const serverProcess = spawn2(serverCommand.command, serverCommand.args, {
-    stdio: managedLaunch === null ? background ? ["ignore", "ignore", "ignore"] : ["ignore", "pipe", "pipe"] : backend === "typescript" ? background ? ["ignore", "ignore", "ignore", "ipc"] : ["ignore", "pipe", "pipe", "ipc"] : background ? ["ignore", "ignore", "ignore"] : ["ignore", "pipe", "pipe"],
+    stdio: managedLaunch === null ? background && !shouldPipeBackgroundRuntimeLogs ? ["ignore", "ignore", "ignore"] : ["ignore", "pipe", "pipe"] : backend === "typescript" ? background && !shouldPipeBackgroundRuntimeLogs ? ["ignore", "ignore", "ignore", "ipc"] : ["ignore", "pipe", "pipe", "ipc"] : background ? shouldPipeBackgroundRuntimeLogs ? ["ignore", "pipe", "pipe"] : ["ignore", "ignore", "ignore"] : ["ignore", "pipe", "pipe"],
     detached: background,
     env: serverEnv,
     windowsHide: background || runningInBackgroundSupervisor
@@ -25696,7 +25813,7 @@ async function runStart(args) {
     console.error(`Failed to start Agent Inspector runtime: ${err.message}`);
   });
   const serverExit = waitForProcessExit(serverProcess);
-  if (!background) {
+  if (!background || backgroundSupervisorLogs !== null) {
     const outputContext = {
       enableIdentityProxy,
       publicPort: port,

package/.output/server/_ssr/index.mjs

@@ -85,7 +85,7 @@ function getResponse() {
 }
 var HEADERS = { TSS_SHELL: "X-TSS_SHELL" };
 async function getStartManifest(matchedRoutes) {
-  const { tsrStartManifest } = await import("../_tanstack-start-manifest_v-DnbdNeun.mjs");
+  const { tsrStartManifest } = await import("../_tanstack-start-manifest_v-ClTaMkEj.mjs");
   const startManifest = tsrStartManifest();
   let routes = startManifest.routes;
   routes[rootRouteId];
@@ -1162,7 +1162,7 @@ var getBaseManifest = getProdBaseManifest;
 var createEarlyHintsForRequest = createEarlyHintsCollector;
 async function loadEntries() {
   const [routerEntry, startEntry, pluginAdapters] = await Promise.all([
-    import("./router-DpXchCXm.mjs"),
+    import("./router-Be6BLuut.mjs"),
     import("./start-COQu_AgD.mjs"),
     import("./empty-plugin-adapters-BFgPZ6_d.mjs")
   ]);