autotel-cli 0.9.1 → 0.11.0

package/dist/index.js

@@ -4506,6 +4506,7 @@ const INVESTIGATE_COMMANDS = [
 	investigateCmd("security", "Security telemetry (parent)"),
 	investigateCmd("security summary", "Security posture: events by severity/category, probe signals, denied responses"),
 	investigateCmd("security events", "List spans carrying security.* events"),
+	investigateCmd("security mcp", "MCP protocol-boundary security: injection verdicts, output-budget breaches, untrusted-content tool calls"),
 	investigateCmd("semconv", "Semantic conventions lookup (parent)", { static: true }),
 	investigateCmd("semconv list", "List semconv namespaces", {
 		static: true,
@@ -6073,6 +6074,83 @@ async function runSecurityEvents(flags) {
 		};
 	});
 }
+/**
+* `autotel security mcp` — MCP protocol-boundary security signals emitted by
+* `autotel-mcp-instrumentation`:
+* - `mcp.security.injection.*` — pluggable classifier verdicts on tool args/results
+* - `mcp.security.budget.exceeded` — tool output over the configured char budget
+* - `mcp.tool.untrusted_content` — tools flagged via the WebMCP untrustedContentHint
+*
+* Keep these field literals in sync with `MCP_SEMCONV` in
+* `autotel-mcp-instrumentation/semantic-conventions`.
+*/
+const MCP_TOOL_NAME = "gen_ai.tool.name";
+const MCP_INJECTION_VERDICT = "mcp.security.injection.verdict";
+const MCP_INJECTION_SOURCE = "mcp.security.injection.source";
+const MCP_BUDGET_EXCEEDED = "mcp.security.budget.exceeded";
+const MCP_UNTRUSTED_CONTENT = "mcp.tool.untrusted_content";
+async function runSecurityMcp(flags) {
+	await runInvestigate("security mcp", flags, async (backend) => {
+		const base = toSpanSearchQuery({
+			serviceName: flags.serviceName,
+			lookbackMinutes: flags.lookbackMinutes,
+			from: flags.from,
+			to: flags.to,
+			limit: flags.limit ?? DEFAULT_LIMIT
+		});
+		const [injection, budget, untrusted] = await Promise.all([
+			backend.searchSpans({
+				...base,
+				filters: [{
+					field: MCP_INJECTION_VERDICT,
+					operator: "exists"
+				}]
+			}),
+			backend.searchSpans({
+				...base,
+				filters: [{
+					field: MCP_BUDGET_EXCEEDED,
+					operator: "exists"
+				}]
+			}),
+			backend.searchSpans({
+				...base,
+				filters: [{
+					field: MCP_UNTRUSTED_CONTENT,
+					operator: "exists"
+				}]
+			})
+		]);
+		const suspected = injection.items.filter((span) => span.tags[MCP_INJECTION_VERDICT] !== void 0 && String(span.tags[MCP_INJECTION_VERDICT]) !== "clean");
+		const untrustedTrue = untrusted.items.filter((span) => String(span.tags[MCP_UNTRUSTED_CONTENT]) === "true");
+		return {
+			window: {
+				lookbackMinutes: flags.lookbackMinutes ?? 60,
+				from: flags.from,
+				to: flags.to,
+				limitPerQuery: flags.limit ?? DEFAULT_LIMIT
+			},
+			injection: {
+				scanned: injection.items.length,
+				suspected: suspected.length,
+				byVerdict: countBy(injection.items, MCP_INJECTION_VERDICT),
+				bySource: countBy(suspected, MCP_INJECTION_SOURCE),
+				byTool: topEntries(countBy(suspected, MCP_TOOL_NAME), 10),
+				sampleTraceIds: sampleTraceIds(suspected)
+			},
+			budgetBreaches: {
+				total: budget.items.length,
+				byTool: topEntries(countBy(budget.items, MCP_TOOL_NAME), 10),
+				byService: countByService(budget.items),
+				sampleTraceIds: sampleTraceIds(budget.items)
+			},
+			untrustedContent: {
+				toolCalls: untrustedTrue.length,
+				byTool: topEntries(countBy(untrustedTrue, MCP_TOOL_NAME), 10)
+			}
+		};
+	});
+}
 function csvIntArg(value) {
 	return value.split(",").map((part) => Number.parseInt(part.trim(), 10)).filter((n) => !Number.isNaN(n));
 }
@@ -6095,9 +6173,17 @@ function registerSecurityCommands(program) {
 			severity: o.severity
 		});
 	});
+	const mcpCmd = addTimeWindowFlags(new Command("mcp")).description("MCP protocol-boundary security: prompt-injection verdicts, output-budget breaches, untrusted-content tool calls").action(async function() {
+		const o = this.optsWithGlobals();
+		await runSecurityMcp({
+			...backendFlagsFromOpts(o),
+			...windowFlagsFromOpts(o)
+		});
+	});
 	addBackendFlags(securityCmd);
 	securityCmd.addCommand(summaryCmd);
 	securityCmd.addCommand(eventsCmd);
+	securityCmd.addCommand(mcpCmd);
 	program.addCommand(securityCmd);
 }
 //#endregion