crosscheck-mcp 0.1.8 → 0.1.10

package/dist/node-stdio.cjs

@@ -942,8 +942,8 @@ __export(node_stdio_exports, {
 });
 module.exports = __toCommonJS(node_stdio_exports);
 init_cjs_shims();
-var import_node_fs14 = require("fs");
-var import_node_path14 = __toESM(require("path"), 1);
+var import_node_fs15 = require("fs");
+var import_node_path15 = __toESM(require("path"), 1);
 var import_node_url2 = require("url");
 var import_stdio2 = require("@modelcontextprotocol/sdk/server/stdio.js");
 
@@ -1104,10 +1104,10 @@ var StderrEmitter = class {
   }
 };
 var FileEmitter = class {
-  constructor(path11) {
-    this.path = path11;
+  constructor(path12) {
+    this.path = path12;
     try {
-      (0, import_node_fs.mkdirSync)((0, import_node_path2.dirname)(path11), { recursive: true });
+      (0, import_node_fs.mkdirSync)((0, import_node_path2.dirname)(path12), { recursive: true });
     } catch {
     }
   }
@@ -1140,13 +1140,13 @@ var NullEmitter = class {
 function buildDefaultEmitter(env) {
   const mode = (env["CROSSCHECK_EVENTS"] ?? "stderr").toLowerCase();
   if (mode === "off") return new NullEmitter();
-  const path11 = env["CROSSCHECK_EVENTS_PATH"];
+  const path12 = env["CROSSCHECK_EVENTS_PATH"];
   if (mode === "file") {
-    return path11 ? new FileEmitter(path11) : new NullEmitter();
+    return path12 ? new FileEmitter(path12) : new NullEmitter();
   }
   if (mode === "both") {
     const ems = [new StderrEmitter()];
-    if (path11) ems.push(new FileEmitter(path11));
+    if (path12) ems.push(new FileEmitter(path12));
     return new TeeEmitter(ems);
   }
   return new StderrEmitter();
@@ -1195,10 +1195,10 @@ function envelopeBytes(v) {
 // src/core/pricing.ts
 init_cjs_shims();
 var import_node_fs2 = require("fs");
-function loadPricing(path11) {
+function loadPricing(path12) {
   let raw;
   try {
-    raw = (0, import_node_fs2.readFileSync)(path11, "utf8");
+    raw = (0, import_node_fs2.readFileSync)(path12, "utf8");
   } catch {
     return {};
   }
@@ -2070,27 +2070,27 @@ function extractJson(text) {
 
 // src/core/json-schema.ts
 init_cjs_shims();
-function validateSchema(value, schema, path11 = "") {
+function validateSchema(value, schema, path12 = "") {
   const errs = [];
   if ("anyOf" in schema) {
     const subs = schema["anyOf"].map(
-      (s) => validateSchema(value, s, path11)
+      (s) => validateSchema(value, s, path12)
     );
     if (!subs.some((e) => e.length === 0)) {
-      errs.push(`${path11 || "<root>"}: did not match anyOf`);
+      errs.push(`${path12 || "<root>"}: did not match anyOf`);
     }
     return errs;
   }
   if ("oneOf" in schema) {
-    const passed = schema["oneOf"].filter((s) => validateSchema(value, s, path11).length === 0).length;
+    const passed = schema["oneOf"].filter((s) => validateSchema(value, s, path12).length === 0).length;
     if (passed !== 1) {
-      errs.push(`${path11 || "<root>"}: matched ${passed} of oneOf, expected 1`);
+      errs.push(`${path12 || "<root>"}: matched ${passed} of oneOf, expected 1`);
     }
     return errs;
   }
   if ("const" in schema && !deepEqual(value, schema["const"])) {
     errs.push(
-      `${path11 || "<root>"}: expected const ${pyRepr(schema["const"])}, got ${pyRepr(value)}`
+      `${path12 || "<root>"}: expected const ${pyRepr(schema["const"])}, got ${pyRepr(value)}`
     );
     return errs;
   }
@@ -2100,7 +2100,7 @@ function validateSchema(value, schema, path11 = "") {
     const ok = types.some((tt) => matchesType(value, String(tt)));
     if (!ok) {
       errs.push(
-        `${path11 || "<root>"}: expected type ${pyReprType(t)}, got ${pyTypeName(value)}`
+        `${path12 || "<root>"}: expected type ${pyReprType(t)}, got ${pyTypeName(value)}`
       );
       return errs;
     }
@@ -2109,29 +2109,29 @@ function validateSchema(value, schema, path11 = "") {
     if ("enum" in schema) {
       const en = schema["enum"];
       if (!en.some((x) => deepEqual(x, value))) {
-        errs.push(`${path11 || "<root>"}: value ${pyRepr(value)} not in enum`);
+        errs.push(`${path12 || "<root>"}: value ${pyRepr(value)} not in enum`);
       }
     }
     if ("minLength" in schema && value.length < schema["minLength"]) {
-      errs.push(`${path11 || "<root>"}: shorter than minLength ${schema["minLength"]}`);
+      errs.push(`${path12 || "<root>"}: shorter than minLength ${schema["minLength"]}`);
     }
   }
   if (typeof value === "number" && !Number.isNaN(value)) {
     if ("minimum" in schema && value < schema["minimum"]) {
-      errs.push(`${path11 || "<root>"}: ${value} < minimum ${schema["minimum"]}`);
+      errs.push(`${path12 || "<root>"}: ${value} < minimum ${schema["minimum"]}`);
     }
     if ("maximum" in schema && value > schema["maximum"]) {
-      errs.push(`${path11 || "<root>"}: ${value} > maximum ${schema["maximum"]}`);
+      errs.push(`${path12 || "<root>"}: ${value} > maximum ${schema["maximum"]}`);
     }
   }
   if (Array.isArray(value)) {
     if ("minItems" in schema && value.length < schema["minItems"]) {
-      errs.push(`${path11 || "<root>"}: fewer items than minItems ${schema["minItems"]}`);
+      errs.push(`${path12 || "<root>"}: fewer items than minItems ${schema["minItems"]}`);
     }
     const itemSchema = schema["items"];
     if (isObj(itemSchema)) {
       for (let i = 0; i < value.length; i++) {
-        errs.push(...validateSchema(value[i], itemSchema, `${path11}[${i}]`));
+        errs.push(...validateSchema(value[i], itemSchema, `${path12}[${i}]`));
       }
     }
   }
@@ -2140,19 +2140,19 @@ function validateSchema(value, schema, path11 = "") {
     const required = schema["required"] ?? [];
     for (const r of required) {
       if (!(r in value)) {
-        errs.push(`${path11 || "<root>"}: missing required key ${pyRepr(r)}`);
+        errs.push(`${path12 || "<root>"}: missing required key ${pyRepr(r)}`);
       }
     }
     if (schema["additionalProperties"] === false) {
       for (const k of Object.keys(value)) {
         if (!(k in props)) {
-          errs.push(`${path11 || "<root>"}: unknown key ${pyRepr(k)}`);
+          errs.push(`${path12 || "<root>"}: unknown key ${pyRepr(k)}`);
         }
       }
     }
     for (const [k, v] of Object.entries(value)) {
       const ps = props[k];
-      if (ps) errs.push(...validateSchema(v, ps, path11 ? `${path11}.${k}` : k));
+      if (ps) errs.push(...validateSchema(v, ps, path12 ? `${path12}.${k}` : k));
     }
   }
   return errs;
@@ -6615,11 +6615,11 @@ function getNodeCache(cfg, repoRoot, key, nowMs) {
     return null;
   }
 }
-function atomicWriteJson(path11, payload) {
-  (0, import_node_fs7.mkdirSync)((0, import_node_path8.dirname)(path11), { recursive: true });
-  const tmp = `${path11}.${process.pid}.${Date.now()}.tmp`;
+function atomicWriteJson(path12, payload) {
+  (0, import_node_fs7.mkdirSync)((0, import_node_path8.dirname)(path12), { recursive: true });
+  const tmp = `${path12}.${process.pid}.${Date.now()}.tmp`;
   (0, import_node_fs7.writeFileSync)(tmp, JSON.stringify(payload), "utf8");
-  (0, import_node_fs7.renameSync)(tmp, path11);
+  (0, import_node_fs7.renameSync)(tmp, path12);
 }
 function putNodeCache(cfg, repoRoot, key, value) {
   if (!cfg || cfg.enabled === false) return;
@@ -7449,14 +7449,14 @@ function detectCycle(nodes) {
       indeg[id] = (indeg[id] ?? 0) + 1;
     }
   }
-  const queue = Object.keys(indeg).filter((id) => indeg[id] === 0);
+  const queue2 = Object.keys(indeg).filter((id) => indeg[id] === 0);
   let processed = 0;
-  while (queue.length > 0) {
-    const id = queue.shift();
+  while (queue2.length > 0) {
+    const id = queue2.shift();
     processed++;
     for (const next of consumers[id] ?? []) {
       indeg[next] = (indeg[next] ?? 0) - 1;
-      if (indeg[next] === 0) queue.push(next);
+      if (indeg[next] === 0) queue2.push(next);
     }
   }
   return processed === Object.keys(byId).length ? null : "cycle detected (Kahn's algorithm didn't process all nodes)";
@@ -7495,13 +7495,13 @@ function topologicalSort(nodesById) {
     }
   }
   const order = [];
-  const queue = Object.keys(indeg).filter((id) => indeg[id] === 0);
-  while (queue.length > 0) {
-    const id = queue.shift();
+  const queue2 = Object.keys(indeg).filter((id) => indeg[id] === 0);
+  while (queue2.length > 0) {
+    const id = queue2.shift();
     order.push(id);
     for (const next of consumers[id] ?? []) {
       indeg[next] = (indeg[next] ?? 0) - 1;
-      if (indeg[next] === 0) queue.push(next);
+      if (indeg[next] === 0) queue2.push(next);
     }
   }
   return order;
@@ -11330,8 +11330,110 @@ function pyRepr7(v) {
 // src/tools/update-crosscheck.ts
 init_cjs_shims();
 var import_node_child_process2 = require("child_process");
+var import_node_fs13 = require("fs");
+var import_node_path13 = __toESM(require("path"), 1);
+
+// src/core/update-notify.ts
+init_cjs_shims();
 var import_node_fs12 = require("fs");
+var import_node_os2 = __toESM(require("os"), 1);
 var import_node_path12 = __toESM(require("path"), 1);
+var NPM_REGISTRY = "https://registry.npmjs.org";
+var CHECK_INTERVAL_SECONDS = 3 * 24 * 60 * 60;
+var DEFAULT_PACKAGE = "crosscheck-cli";
+var FETCH_TIMEOUT_MS = 3e3;
+function engineVersion() {
+  return true ? "0.1.10" : "0.0.0-dev";
+}
+function defaultUpdateCachePath() {
+  const base = process.env["CROSSCHECK_DATA_DIR"] || import_node_path12.default.join(import_node_os2.default.homedir() || import_node_os2.default.tmpdir(), ".crosscheck");
+  return import_node_path12.default.join(base, "update_check.json");
+}
+function isNewer(latest, current) {
+  const a = parseTriple(latest);
+  const b = parseTriple(current);
+  for (let i = 0; i < 3; i += 1) {
+    if (a[i] !== b[i]) return a[i] > b[i];
+  }
+  return false;
+}
+function parseTriple(v) {
+  const parts = (v.split("-")[0] ?? "").split(".").map((n) => Number.parseInt(n, 10) || 0);
+  return [parts[0] ?? 0, parts[1] ?? 0, parts[2] ?? 0];
+}
+function buildNotice(pkg, current, latest) {
+  return {
+    update_available: true,
+    package: pkg,
+    current_version: current,
+    latest_version: latest,
+    message: `crosscheck ${latest} is available \u2014 you're on ${current}. To upgrade, run:
+
+    npm install -g crosscheck-cli@latest
+
+then reconnect the crosscheck MCP server (run \`/mcp\` in Claude Code, or restart your session) so the new version loads. Ask the user whether they'd like to upgrade now before doing anything else.`,
+    ask_user: true
+  };
+}
+function readCache(cachePath2) {
+  try {
+    if (!(0, import_node_fs12.existsSync)(cachePath2)) return null;
+    const data = JSON.parse((0, import_node_fs12.readFileSync)(cachePath2, "utf8"));
+    if (data && typeof data === "object" && !Array.isArray(data)) {
+      return data;
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+function writeCache(cachePath2, record2) {
+  try {
+    (0, import_node_fs12.mkdirSync)(import_node_path12.default.dirname(cachePath2), { recursive: true });
+    (0, import_node_fs12.writeFileSync)(cachePath2, JSON.stringify(record2, null, 2), "utf8");
+  } catch {
+  }
+}
+async function fetchLatest(fetchFn, pkg) {
+  try {
+    const resp = await fetchFn(`${NPM_REGISTRY}/${pkg}/latest`, {
+      signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
+      headers: { Accept: "application/json" }
+    });
+    if (!resp.ok) return null;
+    const data = await resp.json();
+    return typeof data?.version === "string" ? data.version : null;
+  } catch {
+    return null;
+  }
+}
+async function maybeCheckForUpdate(opts) {
+  const now = opts.nowEpochSeconds ? opts.nowEpochSeconds() : Math.floor(Date.now() / 1e3);
+  const pkg = opts.packageName ?? DEFAULT_PACKAGE;
+  const cachePath2 = opts.cachePath ?? defaultUpdateCachePath();
+  const minInterval = opts.minIntervalSeconds ?? CHECK_INTERVAL_SECONDS;
+  const fetchFn = opts.httpFetch ?? globalThis.fetch;
+  const cached = readCache(cachePath2);
+  const fresh = cached !== null && typeof cached.checked_at === "number" && now - cached.checked_at < minInterval && cached.current_version === opts.currentVersion && cached.package === pkg;
+  if (fresh) return cached;
+  const latest = await fetchLatest(fetchFn, pkg);
+  if (latest === null) {
+    return cached;
+  }
+  const updateAvailable = isNewer(latest, opts.currentVersion);
+  const record2 = {
+    checked_at: now,
+    package: pkg,
+    current_version: opts.currentVersion,
+    latest_version: latest,
+    update_available: updateAvailable,
+    ...updateAvailable ? { notice: buildNotice(pkg, opts.currentVersion, latest) } : {}
+  };
+  writeCache(cachePath2, record2);
+  return record2;
+}
+
+// src/tools/update-crosscheck.ts
 var UPDATE_REMOTE_REPO = "fxspeiser/crosscheck-agent";
 var UPDATE_REMOTE_URL = `https://github.com/${UPDATE_REMOTE_REPO}`;
 var UPDATE_API_URL = `https://api.github.com/repos/${UPDATE_REMOTE_REPO}/commits/main`;
@@ -11341,7 +11443,7 @@ async function runUpdateCrosscheck(args, opts) {
   const gitRun = opts.gitRun ?? defaultGitRun(opts.repoRoot);
   const fetchFn = opts.httpFetch ?? globalThis.fetch;
   const now = opts.nowEpochSeconds ? opts.nowEpochSeconds() : Math.floor(Date.now() / 1e3);
-  const cachePath2 = opts.cachePath ?? import_node_path12.default.join(opts.repoRoot, ".crosscheck", "update_check.json");
+  const cachePath2 = opts.cachePath ?? import_node_path13.default.join(opts.repoRoot, ".crosscheck", "update_check.json");
   const local = readLocalSha(gitRun);
   if (!local) {
     return {
@@ -11513,8 +11615,8 @@ function gitRelationship(gitRun, local, remote) {
 }
 function writeUpdateCache(p, payload) {
   try {
-    (0, import_node_fs12.mkdirSync)(import_node_path12.default.dirname(p), { recursive: true });
-    (0, import_node_fs12.writeFileSync)(p, JSON.stringify(payload, null, 2), "utf8");
+    (0, import_node_fs13.mkdirSync)(import_node_path13.default.dirname(p), { recursive: true });
+    (0, import_node_fs13.writeFileSync)(p, JSON.stringify(payload, null, 2), "utf8");
   } catch {
   }
 }
@@ -11530,6 +11632,43 @@ function buildUpdateNotice(local, remote, behindCount) {
     ask_user: true
   };
 }
+async function npmUpdateFallback(opts) {
+  const cliVersion = process.env["CROSSCHECK_CLI_VERSION"];
+  const currentVersion = cliVersion ?? engineVersion();
+  const pkg = cliVersion ? "crosscheck-cli" : "crosscheck-mcp";
+  const rec = await maybeCheckForUpdate({
+    currentVersion,
+    packageName: pkg,
+    minIntervalSeconds: 0,
+    // explicit invocation → always check fresh
+    ...opts?.httpFetch ? { httpFetch: opts.httpFetch } : {},
+    ...opts?.nowEpochSeconds ? { nowEpochSeconds: opts.nowEpochSeconds } : {},
+    ...opts?.cachePath ? { cachePath: opts.cachePath } : {}
+  });
+  const base = {
+    tool: "update_crosscheck",
+    install_type: "npm",
+    package: pkg,
+    current_version: currentVersion
+  };
+  if (!rec || rec.latest_version === null) {
+    return {
+      ...base,
+      status: "error",
+      reason: "could not reach the npm registry to check for updates."
+    };
+  }
+  if (rec.update_available) {
+    return {
+      ...base,
+      status: "update_available",
+      latest_version: rec.latest_version,
+      install_command: "npm install -g crosscheck-cli@latest",
+      next_step: "Run `npm install -g crosscheck-cli@latest`, then reconnect the crosscheck MCP server (run `/mcp` in Claude Code, or restart your session) so the new version loads. Ask the user before upgrading."
+    };
+  }
+  return { ...base, status: "up_to_date", latest_version: rec.latest_version };
+}
 function withTimeout2(promise, ms) {
   return new Promise((resolve2, reject) => {
     const t = setTimeout(() => reject(new Error(`timeout after ${ms / 1e3}s`)), ms);
@@ -11884,7 +12023,7 @@ function solveTool(providers, allowlist, bridge, storage, breakers, transcriptsD
     })
   };
 }
-function configPinTool(repoRoot, config, rejectDriftEnv) {
+function configPinTool(repoRoot, config2, rejectDriftEnv) {
   return {
     name: "config_pin",
     description: "CRUD over the config-pinning ledger. Tracks SHA256s of the canonical config files (config/pricing.json, etc.) and detects drift. Actions: show, set, accept_drift, clear. The actual drift-rejection gate is wired separately in the host.",
@@ -11909,7 +12048,7 @@ function configPinTool(repoRoot, config, rejectDriftEnv) {
       }
       return runConfigPin(args, {
         repoRoot,
-        ...config ? { config } : {},
+        ...config2 ? { config: config2 } : {},
         rejectDriftEnv
       });
     }
@@ -11945,7 +12084,7 @@ function benchTool(providers, allowlist, storage, bridge, moderator, defaultGold
 function updateCrosscheckTool(repoRoot) {
   return {
     name: "update_crosscheck",
-    description: "Compare local git HEAD to remote GitHub main HEAD and report the relationship (equal / ahead / behind / diverged / unknown). With apply=true, fast-forwards via git pull --ff-only when the local is strictly behind. Restart of the MCP connection is required after a successful update.",
+    description: "Check whether a newer version of crosscheck is available and report how to upgrade. For npm installs (the default), compares the running version to the published `latest` on npm and returns the `npm install -g crosscheck-cli@latest` upgrade command. For a git checkout, compares local HEAD to remote GitHub main (equal / ahead / behind / diverged) and, with apply=true, fast-forwards via git pull --ff-only. A reconnect of the MCP server is required after upgrading.",
     inputSchema: {
       type: "object",
       additionalProperties: true,
@@ -11955,12 +12094,7 @@ function updateCrosscheckTool(repoRoot) {
     },
     handler: async (args) => {
       if (!repoRoot) {
-        return {
-          tool: "update_crosscheck",
-          status: "error",
-          reason: "could not determine repo root; the entrypoint did not supply a repoRoot. crosscheck-agent must be installed as a git checkout for in-place updates.",
-          remote_url: "https://github.com/fxspeiser/crosscheck-agent"
-        };
+        return npmUpdateFallback();
       }
       return runUpdateCrosscheck(args, { repoRoot });
     }
@@ -12497,8 +12631,8 @@ function pingTool() {
 
 // src/core/wrappers.ts
 init_cjs_shims();
-var import_node_fs13 = require("fs");
-var import_node_path13 = __toESM(require("path"), 1);
+var import_node_fs14 = require("fs");
+var import_node_path14 = __toESM(require("path"), 1);
 function configPinGate(toolName, opts) {
   if (toolName === "config_pin") return null;
   if (!opts || !opts.repoRoot) return null;
@@ -12527,12 +12661,11 @@ function configPinGate(toolName, opts) {
     pin_file: drift.pin_file
   };
 }
-var updateCheckedThisProcess = false;
 var cachedUpdateNotice = null;
 function readUpdateCache(cachePath2) {
   try {
-    if (!(0, import_node_fs13.existsSync)(cachePath2)) return null;
-    const data = JSON.parse((0, import_node_fs13.readFileSync)(cachePath2, "utf8"));
+    if (!(0, import_node_fs14.existsSync)(cachePath2)) return null;
+    const data = JSON.parse((0, import_node_fs14.readFileSync)(cachePath2, "utf8"));
     if (data && typeof data === "object" && !Array.isArray(data)) return data;
     return null;
   } catch {
@@ -12543,10 +12676,8 @@ function attachUpdateNotice(result, toolName, opts) {
   if (!result || typeof result !== "object" || Array.isArray(result)) return;
   if (toolName === "update_crosscheck") return;
   if ("update_notice" in result) return;
-  if (!opts || !opts.repoRoot) return;
-  if (!updateCheckedThisProcess) {
-    updateCheckedThisProcess = true;
-    const cachePath2 = opts.cachePath ?? import_node_path13.default.join(opts.repoRoot, ".crosscheck", "update_check.json");
+  if (cachedUpdateNotice === null) {
+    const cachePath2 = opts?.cachePath ?? (opts?.repoRoot ? import_node_path14.default.join(opts.repoRoot, ".crosscheck", "update_check.json") : defaultUpdateCachePath());
     const cached = readUpdateCache(cachePath2);
     if (cached && cached.update_available && cached.notice && typeof cached.notice === "object") {
       cachedUpdateNotice = cached.notice;
@@ -12557,9 +12688,203 @@ function attachUpdateNotice(result, toolName, opts) {
   }
 }
 
+// src/core/telemetry.ts
+init_cjs_shims();
+var import_node_crypto7 = __toESM(require("crypto"), 1);
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var BATCH_MAX = 100;
+var FLUSH_BATCH_AT = 25;
+var FLUSH_INTERVAL_MS = 15e3;
+var MAX_QUEUE = 500;
+var POST_TIMEOUT_MS = 5e3;
+var PROVIDER_TO_SCHEMA = {
+  anthropic: "anthropic",
+  openai: "openai",
+  gemini: "gemini",
+  xai: "grok",
+  grok: "grok"
+};
+var TOOL_TO_PATTERN = {
+  confer: "confer",
+  debate: "debate",
+  audit: "audit",
+  plan: "plan",
+  pick: "panel_pick",
+  verify: "verify",
+  critique: "critique",
+  solve: "solve"
+};
+function providerToSchema(provider) {
+  return PROVIDER_TO_SCHEMA[String(provider).toLowerCase()] ?? null;
+}
+function toolToPattern(toolName) {
+  return TOOL_TO_PATTERN[String(toolName).toLowerCase()] ?? "other";
+}
+function canonicalEventBody(e) {
+  return [
+    e.eventId,
+    e.seatId,
+    e.orgId,
+    e.ts,
+    e.provider,
+    e.model,
+    e.pattern,
+    String(e.promptTokens),
+    String(e.completionTokens),
+    e.costUsdEstimate.toFixed(6),
+    String(e.latencyMs),
+    e.status,
+    e.errorClass ?? ""
+  ].join("|");
+}
+function signEvent(seatSigningKey, e) {
+  return import_node_crypto7.default.createHmac("sha256", seatSigningKey).update(canonicalEventBody(e)).digest("hex");
+}
+var configResolved = false;
+var config = null;
+function getConfig() {
+  if (configResolved) return config;
+  configResolved = true;
+  if (process.env["CROSSCHECK_TELEMETRY"] === "off") return config = null;
+  const url = process.env["CROSSCHECK_TELEMETRY_URL"];
+  const seatId = process.env["CROSSCHECK_SEAT_ID"];
+  const orgId = process.env["CROSSCHECK_ORG_ID"];
+  const seatKey = process.env["CROSSCHECK_SEAT_HMAC_KEY"];
+  if (!url || !seatId || !orgId || !seatKey) return config = null;
+  if (!UUID_RE.test(seatId) || !UUID_RE.test(orgId)) return config = null;
+  config = { url, seatId, orgId, seatKey };
+  return config;
+}
+function intNonNeg(v) {
+  const n = Math.trunc(Number(v));
+  return Number.isFinite(n) && n > 0 ? n : 0;
+}
+function usageEventsFromEnvelope(out, toolName) {
+  if (!out || typeof out !== "object" || Array.isArray(out)) return [];
+  const usage = out["usage"];
+  if (!usage || typeof usage !== "object") return [];
+  const byCall = usage["by_call"];
+  if (!Array.isArray(byCall) || byCall.length === 0) return [];
+  const timing = out["timing"];
+  const timingByCall = timing && typeof timing === "object" ? timing["by_call"] : void 0;
+  const latencies = Array.isArray(timingByCall) ? timingByCall : [];
+  const aligned = latencies.length === byCall.length;
+  const pattern = toolToPattern(toolName);
+  const events = [];
+  for (let i = 0; i < byCall.length; i += 1) {
+    const u = byCall[i];
+    const provider = providerToSchema(String(u.provider ?? ""));
+    if (!provider) continue;
+    const model = String(u.model ?? "").slice(0, 128) || "unknown";
+    const cost = Math.max(0, Number(u.cost_usd) || 0);
+    const latencyMs = aligned ? intNonNeg(latencies[i]?.["wall_ms"]) : 0;
+    events.push({
+      provider,
+      model,
+      pattern,
+      promptTokens: intNonNeg(u.prompt_tokens),
+      completionTokens: intNonNeg(u.completion_tokens),
+      costUsdEstimate: cost,
+      latencyMs,
+      status: "ok"
+    });
+  }
+  return events;
+}
+var queue = [];
+var flushTimer = null;
+function scheduleFlush() {
+  if (flushTimer) return;
+  flushTimer = setTimeout(() => {
+    flushTimer = null;
+    void flush();
+  }, FLUSH_INTERVAL_MS);
+  if (typeof flushTimer.unref === "function") flushTimer.unref();
+}
+function enqueue(cfg, input) {
+  const base = {
+    eventId: import_node_crypto7.default.randomUUID(),
+    seatId: cfg.seatId,
+    orgId: cfg.orgId,
+    ts: (/* @__PURE__ */ new Date()).toISOString(),
+    provider: input.provider,
+    model: input.model,
+    pattern: input.pattern,
+    promptTokens: input.promptTokens,
+    completionTokens: input.completionTokens,
+    costUsdEstimate: input.costUsdEstimate,
+    latencyMs: input.latencyMs,
+    status: input.status
+  };
+  const signatureHmac = signEvent(cfg.seatKey, base);
+  queue.push({ ...base, signatureHmac });
+  if (queue.length > MAX_QUEUE) queue.splice(0, queue.length - MAX_QUEUE);
+  if (queue.length >= FLUSH_BATCH_AT) void flush();
+  else scheduleFlush();
+}
+function recordUsage(out, toolName) {
+  try {
+    const cfg = getConfig();
+    if (!cfg) return;
+    if (toolName === "update_crosscheck") return;
+    for (const ev of usageEventsFromEnvelope(out, toolName)) enqueue(cfg, ev);
+  } catch {
+  }
+}
+async function postBatch(url, batch) {
+  let resp;
+  try {
+    resp = await fetch(url, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ events: batch }),
+      signal: AbortSignal.timeout(POST_TIMEOUT_MS)
+    });
+  } catch {
+    queue.unshift(...batch);
+    if (queue.length > MAX_QUEUE) queue.splice(0, queue.length - MAX_QUEUE);
+    return;
+  }
+  if (resp.ok) return;
+  if (resp.status === 400) {
+    try {
+      process.stderr.write(
+        `crosscheck-agent: telemetry batch rejected (400), dropped ${batch.length} event(s)
+`
+      );
+    } catch {
+    }
+    return;
+  }
+  queue.unshift(...batch);
+  if (queue.length > MAX_QUEUE) queue.splice(0, queue.length - MAX_QUEUE);
+}
+async function flush() {
+  const cfg = getConfig();
+  if (!cfg) return;
+  if (flushTimer) {
+    clearTimeout(flushTimer);
+    flushTimer = null;
+  }
+  while (queue.length > 0) {
+    const batch = queue.splice(0, BATCH_MAX);
+    await postBatch(cfg.url, batch);
+    if (queue.length > 0 && queue[0] === batch[0]) break;
+  }
+}
+
 // src/server.ts
 var SERVER_NAME = "crosscheck-agent";
-var SERVER_VERSION = true ? "0.1.8" : "0.0.0-dev";
+var SERVER_VERSION = true ? "0.1.10" : "0.0.0-dev";
+function extractRunSummaryText(out) {
+  if (out === null || typeof out !== "object" || Array.isArray(out)) return void 0;
+  const rs = out["run_summary"];
+  if (rs === null || typeof rs !== "object" || Array.isArray(rs)) return void 0;
+  const text = rs["text"];
+  if (typeof text !== "string") return void 0;
+  const trimmed = text.trim();
+  return trimmed === "" ? void 0 : text;
+}
 function createServer(opts = {}) {
   const server = new import_server2.Server(
     { name: SERVER_NAME, version: SERVER_VERSION },
@@ -12632,10 +12957,9 @@ function createServer(opts = {}) {
         () => tool.handler(args)
       );
       if (out && typeof out === "object" && !Array.isArray(out)) {
-        attachUpdateNotice(out, name, {
-          ...opts.repoRoot ? { repoRoot: opts.repoRoot } : {}
-        });
+        attachUpdateNotice(out, name);
       }
+      recordUsage(out, name);
       const durationMs = Number(
         (process.hrtime.bigint() - startedHr) / 1000000n
       );
@@ -12654,9 +12978,10 @@ function createServer(opts = {}) {
       };
       if (typeof errCode === "string") ev.error_code = errCode;
       emitEvent(ev);
-      return {
-        content: [{ type: "text", text: JSON.stringify(out, null, 2) }]
-      };
+      const summary = extractRunSummaryText(out);
+      const jsonBlock = { type: "text", text: JSON.stringify(out, null, 2) };
+      const content = summary !== void 0 ? [{ type: "text", text: summary }, jsonBlock] : [jsonBlock];
+      return { content };
     } catch (e) {
       const durationMs = Number(
         (process.hrtime.bigint() - startedHr) / 1000000n
@@ -12681,6 +13006,11 @@ function createServer(opts = {}) {
 async function connectAndServe(transport, opts = {}) {
   const server = createServer(opts);
   await server.connect(transport);
+  const cliVersion = process.env["CROSSCHECK_CLI_VERSION"];
+  void maybeCheckForUpdate({
+    currentVersion: cliVersion ?? SERVER_VERSION,
+    packageName: cliVersion ? "crosscheck-cli" : "crosscheck-mcp"
+  });
   return server;
 }
 function buildToolRegistry(opts) {
@@ -12729,7 +13059,7 @@ async function main() {
   installShutdownHandlers(bridge);
   const bundledPricing = (() => {
     try {
-      return import_node_path14.default.join(import_node_path14.default.dirname((0, import_node_url2.fileURLToPath)(importMetaUrl)), "pricing.json");
+      return import_node_path15.default.join(import_node_path15.default.dirname((0, import_node_url2.fileURLToPath)(importMetaUrl)), "pricing.json");
     } catch {
       return void 0;
     }
@@ -12738,7 +13068,7 @@ async function main() {
     process.env["CROSSCHECK_PRICING_PATH"],
     resolveRepoFile("config/pricing.json"),
     bundledPricing
-  ].find((p) => p && (0, import_node_fs14.existsSync)(p));
+  ].find((p) => p && (0, import_node_fs15.existsSync)(p));
   const pricing = pricingPath ? loadPricing(pricingPath) : {};
   const providers = buildProviders({ env: process.env, pricing });
   if (Object.keys(providers).length > 0) {
@@ -12752,7 +13082,7 @@ async function main() {
     const dbPath = process.env["CROSSCHECK_DB_PATH"] ?? resolveRepoFile(".crosscheck/db.sqlite");
     if (dbPath) {
       try {
-        (0, import_node_fs14.mkdirSync)(import_node_path14.default.dirname(dbPath), { recursive: true });
+        (0, import_node_fs15.mkdirSync)(import_node_path15.default.dirname(dbPath), { recursive: true });
         const { openBetterSqliteStorage: openBetterSqliteStorage2 } = await Promise.resolve().then(() => (init_better_sqlite3(), better_sqlite3_exports));
         storage = openBetterSqliteStorage2({ path: dbPath });
         await storage.migrate();
@@ -12796,6 +13126,11 @@ function installShutdownHandlers(bridge) {
       ]).catch(() => {
       });
     }
+    await Promise.race([
+      flush(),
+      new Promise((resolve2) => setTimeout(resolve2, SHUTDOWN_TIMEOUT_MS))
+    ]).catch(() => {
+    });
     process.stderr.write(`crosscheck-agent: shutdown (${reason})
 `);
     process.exit(0);
@@ -12816,9 +13151,9 @@ function installShutdownHandlers(bridge) {
 function resolveRepoFile(rel) {
   let dir = __dirname;
   for (let i = 0; i < 8; i++) {
-    const candidate = import_node_path14.default.join(dir, rel);
-    if ((0, import_node_fs14.existsSync)(candidate)) return candidate;
-    const parent = import_node_path14.default.dirname(dir);
+    const candidate = import_node_path15.default.join(dir, rel);
+    if ((0, import_node_fs15.existsSync)(candidate)) return candidate;
+    const parent = import_node_path15.default.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -12827,8 +13162,8 @@ function resolveRepoFile(rel) {
 function findGitRoot(startDir) {
   let dir = startDir;
   for (let i = 0; i < 12; i++) {
-    if ((0, import_node_fs14.existsSync)(import_node_path14.default.join(dir, ".git"))) return dir;
-    const parent = import_node_path14.default.dirname(dir);
+    if ((0, import_node_fs15.existsSync)(import_node_path15.default.join(dir, ".git"))) return dir;
+    const parent = import_node_path15.default.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }