@weaveaijs/mcp-observatory 0.3.0

package/dist/tests/scoring.test.js

@@ -0,0 +1,41 @@
+import { test } from 'node:test';
+import { strict as assert } from 'node:assert';
+import { computeHallucinationRiskScore, riskLevelForScore, computeGroundingScore, computeNumericVarianceScore, detectToolClaimMismatch, } from '../hallucination/scoring.js';
+test('Hallucination risk score computation', async () => {
+    const score = computeHallucinationRiskScore({
+        outputInstability: 0.5,
+        groundingScore: 0.8,
+        numericVarianceScore: 0.2,
+        selfConsistencyScore: 0.9,
+        toolClaimMismatch: false,
+    });
+    assert.ok(score >= 0 && score <= 1);
+});
+test('Risk level categorization', async () => {
+    assert.equal(riskLevelForScore(0.2), 'low');
+    assert.equal(riskLevelForScore(0.5), 'medium');
+    assert.equal(riskLevelForScore(0.8), 'high');
+});
+test('Grounding score computation', async () => {
+    const output = 'the deployment plan includes staging';
+    const context = 'deployment staging production';
+    const score = computeGroundingScore(output, context);
+    assert.ok(score >= 0 && score <= 1);
+});
+test('Numeric variance score computation', async () => {
+    const values = [10, 11, 12, 10, 11];
+    const score = computeNumericVarianceScore(values);
+    assert.ok(score >= 0 && score <= 1);
+});
+test('Numeric variance score handles low variance', async () => {
+    const values = [100, 100, 100];
+    const score = computeNumericVarianceScore(values);
+    assert.equal(score, 0);
+});
+test('Tool claim mismatch detection', async () => {
+    const mismatch1 = detectToolClaimMismatch('transfer_funds', 'deployment plan');
+    const mismatch2 = detectToolClaimMismatch('transfer_funds', 'transfer 1000 to account');
+    assert.equal(mismatch1, true);
+    assert.equal(mismatch2, false);
+});
+//# sourceMappingURL=scoring.test.js.map

package/dist/tests/scoring.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoring.test.js","sourceRoot":"","sources":["../../src/tests/scoring.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,EACjB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,6BAA6B,CAAC;AAErC,IAAI,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;IACtD,MAAM,KAAK,GAAG,6BAA6B,CAAC;QAC1C,iBAAiB,EAAE,GAAG;QACtB,cAAc,EAAE,GAAG;QACnB,oBAAoB,EAAE,GAAG;QACzB,oBAAoB,EAAE,GAAG;QACzB,iBAAiB,EAAE,KAAK;KACzB,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;IAC3C,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;IAC7C,MAAM,MAAM,GAAG,sCAAsC,CAAC;IACtD,MAAM,OAAO,GAAG,+BAA+B,CAAC;IAEhD,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;IACpD,MAAM,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IAElD,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC;AACtC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;IAC7D,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;IAElD,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACzB,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;IAC/C,MAAM,SAAS,GAAG,uBAAuB,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,uBAAuB,CAAC,gBAAgB,EAAE,0BAA0B,CAAC,CAAC;IAExF,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC"}

package/dist/tests/token.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=token.test.d.ts.map

package/dist/tests/token.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.test.d.ts","sourceRoot":"","sources":["../../src/tests/token.test.ts"],"names":[],"mappings":""}

package/dist/tests/token.test.js

@@ -0,0 +1,51 @@
+import { test } from 'node:test';
+import { strict as assert } from 'node:assert';
+import { TokenManager } from '../proposal/token.js';
+test('TokenManager issues and verifies tokens', async () => {
+    const manager = new TokenManager('test-secret');
+    const { token, payload } = manager.issueToken({
+        proposalId: 'proposal-123',
+        toolName: 'transfer_funds',
+        toolArgsHash: 'hash-abc',
+        compositeScore: 0.5,
+    });
+    assert.ok(token);
+    assert.equal(payload.proposalId, 'proposal-123');
+    assert.equal(payload.toolName, 'transfer_funds');
+    const result = manager.verifyToken(token);
+    assert.equal(result.valid, true);
+    assert.equal(result.payload?.proposalId, 'proposal-123');
+});
+test('TokenManager rejects invalid tokens', async () => {
+    const manager = new TokenManager('test-secret');
+    const result = manager.verifyToken('invalid-token');
+    assert.equal(result.valid, false);
+});
+test('TokenManager rejects expired tokens', async () => {
+    const manager = new TokenManager('test-secret');
+    const { token } = manager.issueToken({
+        proposalId: 'proposal-123',
+        toolName: 'test',
+        toolArgsHash: 'hash',
+        compositeScore: 0.5,
+        expiryMs: 1, // 1ms - will be expired immediately
+    });
+    await new Promise((resolve) => setTimeout(resolve, 10));
+    const result = manager.verifyToken(token);
+    assert.equal(result.valid, false);
+    assert.equal(result.reason, 'expired');
+});
+test('Token signature verification fails with wrong secret', async () => {
+    const manager1 = new TokenManager('secret-1');
+    const manager2 = new TokenManager('secret-2');
+    const { token } = manager1.issueToken({
+        proposalId: 'proposal-123',
+        toolName: 'test',
+        toolArgsHash: 'hash',
+        compositeScore: 0.5,
+    });
+    const result = manager2.verifyToken(token);
+    assert.equal(result.valid, false);
+    assert.equal(result.reason, 'bad_signature');
+});
+//# sourceMappingURL=token.test.js.map

package/dist/tests/token.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.test.js","sourceRoot":"","sources":["../../src/tests/token.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,IAAI,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;IACzD,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,aAAa,CAAC,CAAC;IAEhD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;QAC5C,UAAU,EAAE,cAAc;QAC1B,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,UAAU;QACxB,cAAc,EAAE,GAAG;KACpB,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAEjD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;IACrD,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,aAAa,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;IAEpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;IACrD,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,aAAa,CAAC,CAAC;IAEhD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;QACnC,UAAU,EAAE,cAAc;QAC1B,QAAQ,EAAE,MAAM;QAChB,YAAY,EAAE,MAAM;QACpB,cAAc,EAAE,GAAG;QACnB,QAAQ,EAAE,CAAC,EAAE,oCAAoC;KAClD,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;IACtE,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,UAAU,CAAC,CAAC;IAE9C,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,UAAU,CAAC;QACpC,UAAU,EAAE,cAAc;QAC1B,QAAQ,EAAE,MAAM;QAChB,YAAY,EAAE,MAAM;QACpB,cAAc,EAAE,GAAG;KACpB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAC/C,CAAC,CAAC,CAAC"}

package/dist/tests/tracer.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tracer.test.d.ts.map

package/dist/tests/tracer.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracer.test.d.ts","sourceRoot":"","sources":["../../src/tests/tracer.test.ts"],"names":[],"mappings":""}

package/dist/tests/tracer.test.js

@@ -0,0 +1,38 @@
+import { test } from 'node:test';
+import { strict as assert } from 'node:assert';
+import { Tracer } from '../core/tracer.js';
+test('Tracer creates spans with unique IDs', async () => {
+    const tracer = new Tracer('test-service');
+    const span1 = tracer.startSpan({ model: 'gpt-4' });
+    const span2 = tracer.startSpan({ model: 'gpt-4' });
+    assert.notEqual(span1.spanId, span2.spanId);
+    assert.equal(span1.service, 'test-service');
+    assert.equal(span1.model, 'gpt-4');
+});
+test('Tracer span inheritance', async () => {
+    const tracer = new Tracer('test-service');
+    const parent = tracer.startSpan();
+    const child = tracer.startSpan({ parent });
+    assert.equal(child.traceId, parent.traceId);
+    assert.equal(child.parentSpanId, parent.spanId);
+});
+test('Span can be finished', async () => {
+    const tracer = new Tracer('test-service');
+    const span = tracer.startSpan();
+    assert.equal(span.endTime, undefined);
+    tracer.endSpan(span);
+    assert.notEqual(span.endTime, undefined);
+});
+test('withSpan context manager works', async () => {
+    const tracer = new Tracer('test-service');
+    let spanClosed = false;
+    await tracer.withSpan(async (span) => {
+        assert.equal(span.endTime, undefined);
+        return new Promise((resolve) => {
+            setTimeout(() => {
+                resolve(true);
+            }, 10);
+        });
+    });
+});
+//# sourceMappingURL=tracer.test.js.map

package/dist/tests/tracer.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracer.test.js","sourceRoot":"","sources":["../../src/tests/tracer.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,IAAI,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;IACtD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAEnD,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;IACzC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAE3C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;IACtC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAEtC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;IAChD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC;IAC1C,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACnC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,UAAU,CAAC,GAAG,EAAE;gBACd,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,EAAE,EAAE,CAAC,CAAC;QACT,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/utils/hashing.d.ts

@@ -0,0 +1,5 @@
+export declare function hashText(text: string): string;
+export declare function hashJson(obj: unknown): string;
+export declare function normalizePrompt(prompt: string): string;
+export declare function computePromptHash(prompt: string): string;
+//# sourceMappingURL=hashing.d.ts.map

package/dist/utils/hashing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hashing.d.ts","sourceRoot":"","sources":["../../src/utils/hashing.ts"],"names":[],"mappings":"AAEA,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAG7C;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAKtD;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAExD"}

package/dist/utils/hashing.js

@@ -0,0 +1,18 @@
+import { createHash } from 'crypto';
+export function hashText(text) {
+    return createHash('sha256').update(text).digest('hex');
+}
+export function hashJson(obj) {
+    const canonical = JSON.stringify(obj, Object.keys(obj).sort());
+    return hashText(canonical);
+}
+export function normalizePrompt(prompt) {
+    return prompt
+        .toLowerCase()
+        .trim()
+        .replace(/\s+/g, ' ');
+}
+export function computePromptHash(prompt) {
+    return hashText(normalizePrompt(prompt));
+}
+//# sourceMappingURL=hashing.js.map

package/dist/utils/hashing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hashing.js","sourceRoot":"","sources":["../../src/utils/hashing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAY;IACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAa,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,MAAM;SACV,WAAW,EAAE;SACb,IAAI,EAAE;SACN,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/utils/time.d.ts

@@ -0,0 +1,6 @@
+export declare function getCurrentTimeMs(): number;
+export declare function getCurrentTimeIso(): string;
+export declare function addMs(date: Date, ms: number): Date;
+export declare function diffMs(start: Date, end: Date): number;
+export declare function formatDuration(ms: number): string;
+//# sourceMappingURL=time.d.ts.map

package/dist/utils/time.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"time.d.ts","sourceRoot":"","sources":["../../src/utils/time.ts"],"names":[],"mappings":"AAAA,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAElD;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,GAAG,MAAM,CAErD;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAMjD"}

package/dist/utils/time.js

@@ -0,0 +1,22 @@
+export function getCurrentTimeMs() {
+    return Date.now();
+}
+export function getCurrentTimeIso() {
+    return new Date().toISOString();
+}
+export function addMs(date, ms) {
+    return new Date(date.getTime() + ms);
+}
+export function diffMs(start, end) {
+    return end.getTime() - start.getTime();
+}
+export function formatDuration(ms) {
+    if (ms < 1000)
+        return `${Math.round(ms)}ms`;
+    const seconds = ms / 1000;
+    if (seconds < 60)
+        return `${seconds.toFixed(2)}s`;
+    const minutes = seconds / 60;
+    return `${minutes.toFixed(2)}m`;
+}
+//# sourceMappingURL=time.js.map

package/dist/utils/time.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"time.js","sourceRoot":"","sources":["../../src/utils/time.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,IAAU,EAAE,EAAU;IAC1C,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAW,EAAE,GAAS;IAC3C,OAAO,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,IAAI,EAAE,GAAG,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC;IAC5C,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC;IAC1B,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,GAAG,EAAE,CAAC;IAC7B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AAClC,CAAC"}

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@weaveaijs/mcp-observatory",
+  "version": "0.3.0",
+  "description": "Observability and APM toolkit for MCP servers",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist",
+    "sql"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/rajatarun/mcp-observatory.git",
+    "directory": ".",
+    "branch": "main-nodejs"
+  },
+  "bugs": {
+    "url": "https://github.com/rajatarun/mcp-observatory/issues"
+  },
+  "homepage": "https://github.com/rajatarun/mcp-observatory#readme",
+  "keywords": [
+    "mcp",
+    "observability",
+    "apm",
+    "tracer",
+    "span",
+    "proposal-commit",
+    "risk-scoring",
+    "hallucination-detection"
+  ],
+  "author": "WeaveAI",
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "node scripts/test.mjs",
+    "test:watch": "tsc --watch",
+    "lint": "eslint src/**/*.ts",
+    "demo": "node dist/demo/runDemo.js",
+    "demo:server": "node dist/demo/server.js",
+    "demo:client": "node dist/demo/client.js"
+  },
+  "dependencies": {
+    "pg": "^8.11.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "@types/pg": "^8.11.0",
+    "@typescript-eslint/eslint-plugin": "^6.0.0",
+    "@typescript-eslint/parser": "^6.0.0",
+    "eslint": "^8.0.0",
+    "glob": "^10.5.0",
+    "typescript": "^5.0.0"
+  }
+}

package/sql/schema.sql

@@ -0,0 +1,73 @@
+-- MCP Observatory Schema for PostgreSQL
+
+-- Proposals table: stores proposal records with status and expiration
+CREATE TABLE IF NOT EXISTS proposals (
+  id UUID PRIMARY KEY,
+  tool_name VARCHAR(255) NOT NULL,
+  tool_args_hash VARCHAR(64) NOT NULL,
+  status VARCHAR(20) NOT NULL CHECK (status IN ('allowed', 'blocked', 'review')),
+  created_at TIMESTAMP NOT NULL DEFAULT NOW(),
+  expires_at TIMESTAMP NOT NULL,
+  INDEX idx_proposals_expires_at (expires_at)
+);
+
+-- Commits table: tracks execution of proposals
+CREATE TABLE IF NOT EXISTS commits (
+  id UUID PRIMARY KEY,
+  proposal_id UUID NOT NULL REFERENCES proposals(id),
+  executed BOOLEAN NOT NULL DEFAULT FALSE,
+  executed_at TIMESTAMP,
+  created_at TIMESTAMP NOT NULL DEFAULT NOW(),
+  INDEX idx_commits_proposal_id (proposal_id),
+  INDEX idx_commits_executed (executed)
+);
+
+-- Nonces table: tracks used nonces to prevent replay attacks
+CREATE TABLE IF NOT EXISTS nonces (
+  nonce VARCHAR(64) PRIMARY KEY,
+  used_at TIMESTAMP NOT NULL DEFAULT NOW(),
+  INDEX idx_nonces_used_at (used_at)
+);
+
+-- Tool prompt baselines table: stores baseline prompts for drift detection
+CREATE TABLE IF NOT EXISTS tool_prompt_baselines (
+  id UUID PRIMARY KEY,
+  tool_name VARCHAR(255) NOT NULL UNIQUE,
+  baseline_prompt_hash VARCHAR(64) NOT NULL,
+  created_at TIMESTAMP NOT NULL DEFAULT NOW(),
+  updated_at TIMESTAMP NOT NULL DEFAULT NOW(),
+  INDEX idx_baselines_tool_name (tool_name)
+);
+
+-- Traces table: stores execution traces for observability
+CREATE TABLE IF NOT EXISTS traces (
+  trace_id UUID PRIMARY KEY,
+  span_id UUID NOT NULL,
+  parent_span_id UUID,
+  service VARCHAR(255) NOT NULL,
+  model VARCHAR(255),
+  tool_name VARCHAR(255),
+  start_time TIMESTAMP NOT NULL,
+  end_time TIMESTAMP,
+  input_hash VARCHAR(64),
+  output_hash VARCHAR(64),
+  input_tokens INTEGER,
+  output_tokens INTEGER,
+  total_tokens INTEGER,
+  cost_usd DECIMAL(10, 6),
+  status_code INTEGER,
+  tags JSONB,
+  created_at TIMESTAMP NOT NULL DEFAULT NOW(),
+  INDEX idx_traces_trace_id (trace_id),
+  INDEX idx_traces_service (service),
+  INDEX idx_traces_created_at (created_at)
+);
+
+-- Clean up expired proposals periodically
+CREATE OR REPLACE FUNCTION cleanup_expired_proposals()
+RETURNS void AS $$
+BEGIN
+  DELETE FROM proposals WHERE expires_at < NOW();
+  DELETE FROM nonces WHERE used_at < NOW() - INTERVAL '1 hour';
+END;
+$$ LANGUAGE plpgsql;