atabey 0.0.37 → 0.1.0

package/dist/atabey-mcp/src/mcp/utils/rules-engine.js

@@ -0,0 +1,296 @@
+/**
+ * ─── RULES ENGINE (Prompt Conflict Resolution) ────────────────────
+ *
+ * Resolves conflicts between AI CLI built-in prompts and Atabey governance rules.
+ * Ensures Atabey's critical rules ALWAYS override CLI-level instructions.
+ *
+ * Priority System:
+ * - CRITICAL (P0): Non-bypassable rules (zero any, no console.log, PII masking)
+ * - HIGH (P1): Important rules that should not be violated
+ * - MEDIUM (P2): Standard best practices
+ * - LOW (P3): Recommendations only
+ *
+ * Enforcement Mechanisms:
+ * 1. Pre-execution: Rule validation BEFORE tool runs
+ * 2. Post-execution: Scan changed files for violations → auto-rollback
+ * 3. CLI System Prompt Override: Inject critical rules at MCP initialization
+ */
+import path from "path";
+import { scanSourceForViolations } from "./ast-scan.js";
+// ─── Built-in Governance Rules ────────────────────────────────────
+const GOVERNANCE_RULES = [
+    // ── CRITICAL (P0) Rules ────────────────────────────────────
+    {
+        id: "no-any-types",
+        name: "Zero Any Type Policy",
+        description: "TypeScript 'any' type is strictly forbidden",
+        priority: "CRITICAL",
+        detectPattern: /:\s*any\b/g,
+        appliesToExtensions: [".ts", ".tsx"],
+        errorMessage: "CRITICAL: 'any' type is forbidden. Use 'unknown' with proper type guards instead.",
+        bypassable: false,
+    },
+    {
+        id: "no-console-log",
+        name: "No Console Log",
+        description: "console.log/error/warn is forbidden (use logger instead)",
+        priority: "CRITICAL",
+        detectPattern: /console\.(log|error|warn|debug|info)\s*\(/g,
+        appliesToExtensions: [".ts", ".tsx", ".js", ".jsx"],
+        errorMessage: "CRITICAL: console.log/error/warn is forbidden. Use the project's logger instead.",
+        bypassable: false,
+    },
+    {
+        id: "pii-masking",
+        name: "PII Masking Required",
+        description: "Sensitive data must be masked before logging or storing",
+        priority: "CRITICAL",
+        errorMessage: "CRITICAL: Detected potential PII in unmasked form. Use maskText() / maskObject() from pii.ts.",
+        bypassable: false,
+    },
+    {
+        id: "no-ts-directives",
+        name: "No TypeScript Suppression Directives",
+        description: "@ts-ignore / @ts-nocheck / @ts-expect-error are forbidden",
+        priority: "CRITICAL",
+        errorMessage: "CRITICAL: TypeScript suppression directives are forbidden. Fix the underlying type error.",
+        bypassable: false,
+    },
+    {
+        id: "no-debugger",
+        name: "No Debugger Statement",
+        description: "`debugger` statements must not be committed",
+        priority: "CRITICAL",
+        errorMessage: "CRITICAL: `debugger` statement detected. Remove it before committing.",
+        bypassable: false,
+    },
+    // ── HIGH (P1) Rules ────────────────────────────────────────
+    {
+        id: "no-hardcoded-secrets",
+        name: "No Hardcoded Secrets",
+        description: "API keys, tokens, passwords must use environment variables",
+        priority: "HIGH",
+        detectPattern: /(['"])sk-[a-zA-Z0-9]{20,}['"]|(['"])ghp_[a-zA-Z0-9]{36,}['"]|(['"])AIza[0-9A-Za-z_-]{35}['"]/g,
+        appliesToExtensions: [".ts", ".tsx", ".js", ".jsx", ".py", ".go", ".java", ".yaml", ".yml", ".env.example"],
+        errorMessage: "HIGH: Hardcoded API keys/tokens detected. Use environment variables (process.env.*).",
+        bypassable: false,
+    },
+    {
+        id: "no-commented-code",
+        name: "No Commented-Out Code",
+        description: "Dead code should be removed, not commented out",
+        priority: "HIGH",
+        // Only flag comments that actually look like commented-out code, not
+        // every `// ...` (which previously matched URLs and prose comments).
+        detectPattern: /\/\/\s*(?:const|let|var|function|return|import|export|if|for|while|switch|class|interface|type)\b/g,
+        appliesToExtensions: [".ts", ".tsx", ".js", ".jsx"],
+        errorMessage: "HIGH: Commented-out code detected. Remove dead code instead of commenting.",
+        bypassable: true,
+    },
+    // ── MEDIUM (P2) Rules ──────────────────────────────────────
+    {
+        id: "no-console-in-jsx",
+        name: "No Console in JSX",
+        description: "Avoid console statements inside JSX/TSX components",
+        priority: "MEDIUM",
+        detectPattern: /{.*console\.(log|error|warn)\(.*}/g,
+        appliesToExtensions: [".tsx", ".jsx"],
+        errorMessage: "MEDIUM: Console statement inside JSX detected. Move to event handler or useEffect.",
+        bypassable: true,
+    },
+    {
+        id: "i18n-usage",
+        name: "Internationalization Required",
+        description: "Use i18n for user-facing strings",
+        priority: "MEDIUM",
+        detectPattern: /(['"])([A-Z][a-z]+ [a-z]+ [a-z]+)['"]/g,
+        appliesToExtensions: [".tsx", ".jsx"],
+        errorMessage: "MEDIUM: User-facing string detected. Use i18n translation function instead.",
+        bypassable: true,
+    },
+];
+// ─── Rule Engine ──────────────────────────────────────────────────
+let rulesMap = null;
+function getRulesMap() {
+    if (!rulesMap) {
+        rulesMap = new Map();
+        for (const rule of GOVERNANCE_RULES) {
+            rulesMap.set(rule.id, rule);
+        }
+    }
+    return rulesMap;
+}
+/**
+ * Get all governance rules.
+ */
+export function getAllRules() {
+    return [...GOVERNANCE_RULES];
+}
+/**
+ * Get rules by priority level.
+ */
+export function getRulesByPriority(priority) {
+    return GOVERNANCE_RULES.filter(r => r.priority === priority);
+}
+/**
+ * Get non-bypassable rules (CRITICAL + HIGH non-bypassable).
+ */
+export function getNonBypassableRules() {
+    return GOVERNANCE_RULES.filter(r => !r.bypassable);
+}
+/**
+ * Scan file content for rule violations.
+ * Returns array of violations found.
+ */
+export function scanFileForViolations(filePath, content, options = {}) {
+    const includeBypassable = options.includeBypassable ?? true;
+    const ext = path.extname(filePath);
+    const violations = [];
+    const lines = content.split("\n");
+    for (const rule of GOVERNANCE_RULES) {
+        if (!includeBypassable && rule.bypassable)
+            continue;
+        // Check if rule applies to this file extension
+        if (rule.appliesToExtensions && !rule.appliesToExtensions.includes(ext)) {
+            continue;
+        }
+        // Check if rule has a detect pattern
+        if (!rule.detectPattern)
+            continue;
+        // Scan each line
+        for (let i = 0; i < lines.length; i++) {
+            // Reset lastIndex for stateful /g regexes before each line.
+            rule.detectPattern.lastIndex = 0;
+            const match = lines[i].match(rule.detectPattern);
+            if (match) {
+                violations.push({
+                    rule,
+                    match: match[0],
+                    line: i + 1,
+                });
+            }
+        }
+    }
+    // [REAL AST] For TS/JS, augment regex findings with TypeScript Compiler API
+    // results (catches `Array<any>`, type aliases, console.* in expressions, and
+    // avoids false positives from comments/strings).
+    if ([".ts", ".tsx", ".js", ".jsx"].includes(ext)) {
+        const astViolations = scanSourceForViolations(filePath, content);
+        for (const av of astViolations) {
+            const rule = getRulesMap().get(av.ruleId);
+            if (!rule)
+                continue;
+            if (!includeBypassable && rule.bypassable)
+                continue;
+            const already = violations.some((v) => v.rule.id === rule.id && v.line === av.line);
+            if (already)
+                continue;
+            violations.push({ rule, match: av.text, line: av.line });
+        }
+    }
+    return violations;
+}
+/**
+ * Collect the user-supplied content to scan across every write-style tool shape.
+ */
+function collectScannableContent(args) {
+    const contents = [];
+    for (const key of ["content", "newText", "newContent", "replacement"]) {
+        const v = args[key];
+        if (typeof v === "string" && v)
+            contents.push(v);
+    }
+    if (Array.isArray(args.edits)) {
+        for (const edit of args.edits) {
+            if (edit && typeof edit === "object") {
+                const obj = edit;
+                for (const key of ["newText", "newContent", "content", "replacement"]) {
+                    const v = obj[key];
+                    if (typeof v === "string" && v)
+                        contents.push(v);
+                }
+            }
+        }
+    }
+    return contents;
+}
+/**
+ * Validate tool arguments against governance rules.
+ * Returns violation messages if any critical rule is violated.
+ */
+export function validateArgsAgainstRules(toolName, args) {
+    // Content-bearing write tools all route through here (not just write_file).
+    const contents = collectScannableContent(args);
+    if (contents.length === 0)
+        return null;
+    const filePath = args.path || "unknown.ts";
+    const violations = contents
+        .flatMap((content) => scanFileForViolations(filePath, content, { includeBypassable: false }))
+        .filter((v) => !v.rule.appliesToTools || v.rule.appliesToTools.includes(toolName));
+    if (violations.length === 0)
+        return null;
+    const details = violations.map(v => `  Line ${v.line}: ${v.match} (${v.rule.name} - ${v.rule.priority})`).join("\n");
+    const top = violations[0].rule;
+    return [
+        `[GOVERNANCE] ${top.priority} rule violation: ${top.name}`,
+        `${top.errorMessage}`,
+        "\nViolations:",
+        details,
+    ].join("\n");
+}
+/**
+ * Validate tool response for governance violations.
+ * Returns violation messages if found.
+ */
+export function validateResponseAgainstRules(toolName, responseText) {
+    // For file reads, check if the content contains PII or secrets
+    if (toolName === "read_file" && responseText.length > 0) {
+        const criticalRules = getNonBypassableRules();
+        for (const rule of criticalRules) {
+            if (!rule.detectPattern)
+                continue;
+            // Stateful /g regexes keep lastIndex between calls — reset it.
+            rule.detectPattern.lastIndex = 0;
+            if (rule.detectPattern.test(responseText)) {
+                return `[GOVERNANCE] ${rule.priority} violation detected in response: ${rule.name}. ${rule.errorMessage}`;
+            }
+        }
+    }
+    return null;
+}
+/**
+ * Build system prompt override block for CLI initialization.
+ * This is injected into the AI's system prompt at MCP connect time.
+ */
+export function buildSystemPromptOverride() {
+    const criticalRules = getRulesByPriority("CRITICAL");
+    const highRules = getRulesByPriority("HIGH");
+    return [
+        "## [ATABEY GOVERNANCE] Critical Rules — DO NOT OVERRIDE",
+        "",
+        "The following rules are ENFORCED by the Atabey Governance Layer.",
+        "They CANNOT be bypassed or disabled.",
+        "",
+        "### Critical Rules (Non-Bypassable)",
+        ...criticalRules.map(r => `- 🔴 ${r.name}: ${r.description}`),
+        "",
+        "### High Priority Rules",
+        ...highRules.map(r => `- 🟠 ${r.name}: ${r.description}`),
+        "",
+        "> These rules are injected at the MCP middleware layer and enforced",
+        "> at both pre-execution and post-execution stages.",
+        "",
+    ].join("\n");
+}
+/**
+ * Add a custom governance rule at runtime.
+ */
+export function addRule(rule) {
+    const map = getRulesMap();
+    if (!map.has(rule.id)) {
+        GOVERNANCE_RULES.push(rule);
+        map.set(rule.id, rule);
+    }
+}
+export { GOVERNANCE_RULES as DefaultGovernanceRules };
+//# sourceMappingURL=rules-engine.js.map

package/dist/atabey-mcp/src/mcp/utils/rules-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules-engine.js","sourceRoot":"","sources":["../../../../../../atabey-mcp/src/mcp/utils/rules-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAyBxD,qEAAqE;AAErE,MAAM,gBAAgB,GAAqB;IACvC,8DAA8D;IAC9D;QACI,EAAE,EAAE,cAAc;QAClB,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,6CAA6C;QAC1D,QAAQ,EAAE,UAAU;QACpB,aAAa,EAAE,YAAY;QAC3B,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;QACpC,YAAY,EAAE,mFAAmF;QACjG,UAAU,EAAE,KAAK;KACpB;IACD;QACI,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,0DAA0D;QACvE,QAAQ,EAAE,UAAU;QACpB,aAAa,EAAE,4CAA4C;QAC3D,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;QACnD,YAAY,EAAE,kFAAkF;QAChG,UAAU,EAAE,KAAK;KACpB;IACD;QACI,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,yDAAyD;QACtE,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,+FAA+F;QAC7G,UAAU,EAAE,KAAK;KACpB;IACD;QACI,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,sCAAsC;QAC5C,WAAW,EAAE,2DAA2D;QACxE,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,2FAA2F;QACzG,UAAU,EAAE,KAAK;KACpB;IACD;QACI,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,6CAA6C;QAC1D,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,uEAAuE;QACrF,UAAU,EAAE,KAAK;KACpB;IAED,8DAA8D;IAC9D;QACI,EAAE,EAAE,sBAAsB;QAC1B,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,4DAA4D;QACzE,QAAQ,EAAE,MAAM;QAChB,aAAa,EAAE,+FAA+F;QAC9G,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC;QAC3G,YAAY,EAAE,sFAAsF;QACpG,UAAU,EAAE,KAAK;KACpB;IACD;QACI,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,MAAM;QAChB,qEAAqE;QACrE,qEAAqE;QACrE,aAAa,EAAE,oGAAoG;QACnH,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;QACnD,YAAY,EAAE,4EAA4E;QAC1F,UAAU,EAAE,IAAI;KACnB;IAED,8DAA8D;IAC9D;QACI,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,oDAAoD;QACjE,QAAQ,EAAE,QAAQ;QAClB,aAAa,EAAE,oCAAoC;QACnD,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;QACrC,YAAY,EAAE,oFAAoF;QAClG,UAAU,EAAE,IAAI;KACnB;IACD;QACI,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,+BAA+B;QACrC,WAAW,EAAE,kCAAkC;QAC/C,QAAQ,EAAE,QAAQ;QAClB,aAAa,EAAE,wCAAwC;QACvD,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;QACrC,YAAY,EAAE,6EAA6E;QAC3F,UAAU,EAAE,IAAI;KACnB;CACJ,CAAC;AAEF,qEAAqE;AAErE,IAAI,QAAQ,GAAuC,IAAI,CAAC;AAExD,SAAS,WAAW;IAChB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;QACrB,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;YAClC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACvB,OAAO,CAAC,GAAG,gBAAgB,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAsB;IACrD,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACjC,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACjC,QAAgB,EAChB,OAAe,EACf,UAA2C,EAAE;IAE7C,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,IAAI,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,UAAU,GAAiE,EAAE,CAAC;IACpF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QAClC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,UAAU;YAAE,SAAS;QACpD,+CAA+C;QAC/C,IAAI,IAAI,CAAC,mBAAmB,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtE,SAAS;QACb,CAAC;QAED,qCAAqC;QACrC,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,SAAS;QAElC,iBAAiB;QACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,4DAA4D;YAC5D,IAAI,CAAC,aAAa,CAAC,SAAS,GAAG,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACjD,IAAI,KAAK,EAAE,CAAC;gBACR,UAAU,CAAC,IAAI,CAAC;oBACZ,IAAI;oBACJ,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;oBACf,IAAI,EAAE,CAAC,GAAG,CAAC;iBACd,CAAC,CAAC;YACP,CAAC;QACL,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,6EAA6E;IAC7E,iDAAiD;IACjD,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,aAAa,GAAG,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjE,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,UAAU;gBAAE,SAAS;YACpD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;YACpF,IAAI,OAAO;gBAAE,SAAS;YACtB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;IACL,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,IAA6B;IAC1D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,CAAC,EAAE,CAAC;QACpE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,GAAG,GAAG,IAA+B,CAAC;gBAC5C,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;oBACpE,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;oBACnB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC;wBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACrD,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACpC,QAAgB,EAChB,IAA6B;IAE7B,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,QAAQ,GAAI,IAAI,CAAC,IAAe,IAAI,YAAY,CAAC;IACvD,MAAM,UAAU,GAAG,QAAQ;SACtB,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;SAC5F,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEvF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAC/B,UAAU,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,CACvE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/B,OAAO;QACH,gBAAgB,GAAG,CAAC,QAAQ,oBAAoB,GAAG,CAAC,IAAI,EAAE;QAC1D,GAAG,GAAG,CAAC,YAAY,EAAE;QACrB,eAAe;QACf,OAAO;KACV,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CACxC,QAAgB,EAChB,YAAoB;IAEpB,+DAA+D;IAC/D,IAAI,QAAQ,KAAK,WAAW,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,aAAa;gBAAE,SAAS;YAClC,+DAA+D;YAC/D,IAAI,CAAC,aAAa,CAAC,SAAS,GAAG,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBACxC,OAAO,gBAAgB,IAAI,CAAC,QAAQ,oCAAoC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9G,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB;IACrC,MAAM,aAAa,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE7C,OAAO;QACH,yDAAyD;QACzD,EAAE;QACF,kEAAkE;QAClE,sCAAsC;QACtC,EAAE;QACF,qCAAqC;QACrC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7D,EAAE;QACF,yBAAyB;QACzB,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACzD,EAAE;QACF,qEAAqE;QACrE,oDAAoD;QACpD,EAAE;KACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,IAAoB;IACxC,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACpB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;AACL,CAAC;AAED,OAAO,EAAE,gBAAgB,IAAI,sBAAsB,EAAE,CAAC"}

package/dist/atabey-mcp/src/mcp/utils/telemetry-streamer.d.ts

@@ -0,0 +1,133 @@
+/**
+ * ─── ASYNCHRONOUS TELEMETRY STREAMER ───────────────────────────────
+ *
+ * Streams local audit logs, metrics, and governance events to the
+ * central enterprise server asynchronously without blocking the
+ * developer's AI CLI workflow.
+ *
+ * Features:
+ * - Batch streaming (accumulates events, sends in batches)
+ * - Retry with exponential backoff
+ * - Queue persistence (survives process restarts)
+ * - Bandwidth throttling (max N events per minute)
+ * - PII masking before transmission (GDPR/KVKK)
+ * - Connection health monitoring
+ *
+ * Architecture:
+ *   [Local MCP] → SQLite Queue → Batch Processor → HTTPS/WS → [Enterprise Server]
+ *
+ * [KVKK/GDPR] All PII is masked BEFORE leaving the local machine.
+ */
+declare const CONFIG: {
+    /** Enterprise server URL (e.g., https://atabey.company.com) */
+    SERVER_URL: string;
+    /** Auth token for enterprise server */
+    AUTH_TOKEN: string;
+    /** Max events per batch */
+    BATCH_SIZE: number;
+    /** Flush interval in ms */
+    FLUSH_INTERVAL_MS: number;
+    /** Max retries per batch */
+    MAX_RETRIES: number;
+    /** Retry base delay (exponential backoff) */
+    RETRY_BASE_DELAY_MS: number;
+    /** Max events per minute (throttle) */
+    MAX_EVENTS_PER_MINUTE: number;
+    /** Enable/disable telemetry */
+    ENABLED: boolean;
+    /** Use WebSocket for real-time streaming (fallback to HTTPS) */
+    USE_WEBSOCKET: boolean;
+};
+export interface TelemetryEvent {
+    id: string;
+    type: "tool_call" | "governance_violation" | "risk_blocked" | "approval" | "error" | "metric" | "heartbeat";
+    timestamp: string;
+    agent: string;
+    machineId: string;
+    projectHash: string;
+    payload: Record<string, unknown>;
+}
+export declare class TelemetryStreamer {
+    private static instance;
+    private queue;
+    private flushTimer;
+    private ws;
+    private wsReconnectTimer;
+    private eventCountThisMinute;
+    private minuteResetTimer;
+    private machineId;
+    private projectHash;
+    private isFlushing;
+    private constructor();
+    static getInstance(): TelemetryStreamer;
+    /**
+     * Start the telemetry streamer.
+     * Begins periodic flush and WebSocket connection if configured.
+     */
+    start(): void;
+    /**
+     * Stop the telemetry streamer.
+     */
+    stop(): void;
+    /**
+     * Enqueue a telemetry event for streaming.
+     * Events are batched and sent asynchronously.
+     */
+    enqueue(event: Omit<TelemetryEvent, "id" | "machineId" | "projectHash">): void;
+    /**
+     * Convenience method for logging tool calls.
+     */
+    logToolCall(agent: string, toolName: string, tokens: number, traceId: string, durationMs: number): void;
+    /**
+     * Convenience method for logging governance violations.
+     */
+    logGovernanceViolation(agent: string, toolName: string, error: string): void;
+    /**
+     * Convenience method for logging errors.
+     */
+    logError(agent: string, action: string, error: string): void;
+    /**
+     * Flush queued events to the enterprise server.
+     */
+    private flush;
+    /**
+     * Synchronous flush (for process exit).
+     */
+    private flushSync;
+    /**
+     * Send a batch of events to the enterprise server via HTTPS.
+     */
+    private sendBatch;
+    /**
+     * Connect to enterprise server via WebSocket for real-time streaming.
+     */
+    private connectWebSocket;
+    /**
+     * Save event to local fallback file (when server is unreachable).
+     */
+    private saveToLocalFallback;
+    /**
+     * Generate a unique machine ID.
+     */
+    private generateMachineId;
+    /**
+     * Generate a project hash for grouping.
+     */
+    private generateProjectHash;
+    /**
+     * Simple string hash.
+     */
+    private simpleHash;
+    /**
+     * Get streamer status.
+     */
+    getStatus(): {
+        enabled: boolean;
+        serverUrl: string;
+        queueSize: number;
+        wsConnected: boolean;
+        eventsThisMinute: number;
+    };
+}
+export declare const telemetryStreamer: TelemetryStreamer;
+export { CONFIG as TelemetryConfig };