crosscheck-mcp 0.1.9 → 0.1.10

package/dist/node-stdio.cjs

@@ -7449,14 +7449,14 @@ function detectCycle(nodes) {
       indeg[id] = (indeg[id] ?? 0) + 1;
     }
   }
-  const queue = Object.keys(indeg).filter((id) => indeg[id] === 0);
+  const queue2 = Object.keys(indeg).filter((id) => indeg[id] === 0);
   let processed = 0;
-  while (queue.length > 0) {
-    const id = queue.shift();
+  while (queue2.length > 0) {
+    const id = queue2.shift();
     processed++;
     for (const next of consumers[id] ?? []) {
       indeg[next] = (indeg[next] ?? 0) - 1;
-      if (indeg[next] === 0) queue.push(next);
+      if (indeg[next] === 0) queue2.push(next);
     }
   }
   return processed === Object.keys(byId).length ? null : "cycle detected (Kahn's algorithm didn't process all nodes)";
@@ -7495,13 +7495,13 @@ function topologicalSort(nodesById) {
     }
   }
   const order = [];
-  const queue = Object.keys(indeg).filter((id) => indeg[id] === 0);
-  while (queue.length > 0) {
-    const id = queue.shift();
+  const queue2 = Object.keys(indeg).filter((id) => indeg[id] === 0);
+  while (queue2.length > 0) {
+    const id = queue2.shift();
     order.push(id);
     for (const next of consumers[id] ?? []) {
       indeg[next] = (indeg[next] ?? 0) - 1;
-      if (indeg[next] === 0) queue.push(next);
+      if (indeg[next] === 0) queue2.push(next);
     }
   }
   return order;
@@ -11343,7 +11343,7 @@ var CHECK_INTERVAL_SECONDS = 3 * 24 * 60 * 60;
 var DEFAULT_PACKAGE = "crosscheck-cli";
 var FETCH_TIMEOUT_MS = 3e3;
 function engineVersion() {
-  return true ? "0.1.9" : "0.0.0-dev";
+  return true ? "0.1.10" : "0.0.0-dev";
 }
 function defaultUpdateCachePath() {
   const base = process.env["CROSSCHECK_DATA_DIR"] || import_node_path12.default.join(import_node_os2.default.homedir() || import_node_os2.default.tmpdir(), ".crosscheck");
@@ -12023,7 +12023,7 @@ function solveTool(providers, allowlist, bridge, storage, breakers, transcriptsD
     })
   };
 }
-function configPinTool(repoRoot, config, rejectDriftEnv) {
+function configPinTool(repoRoot, config2, rejectDriftEnv) {
   return {
     name: "config_pin",
     description: "CRUD over the config-pinning ledger. Tracks SHA256s of the canonical config files (config/pricing.json, etc.) and detects drift. Actions: show, set, accept_drift, clear. The actual drift-rejection gate is wired separately in the host.",
@@ -12048,7 +12048,7 @@ function configPinTool(repoRoot, config, rejectDriftEnv) {
       }
       return runConfigPin(args, {
         repoRoot,
-        ...config ? { config } : {},
+        ...config2 ? { config: config2 } : {},
         rejectDriftEnv
       });
     }
@@ -12688,9 +12688,194 @@ function attachUpdateNotice(result, toolName, opts) {
   }
 }
 
+// src/core/telemetry.ts
+init_cjs_shims();
+var import_node_crypto7 = __toESM(require("crypto"), 1);
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var BATCH_MAX = 100;
+var FLUSH_BATCH_AT = 25;
+var FLUSH_INTERVAL_MS = 15e3;
+var MAX_QUEUE = 500;
+var POST_TIMEOUT_MS = 5e3;
+var PROVIDER_TO_SCHEMA = {
+  anthropic: "anthropic",
+  openai: "openai",
+  gemini: "gemini",
+  xai: "grok",
+  grok: "grok"
+};
+var TOOL_TO_PATTERN = {
+  confer: "confer",
+  debate: "debate",
+  audit: "audit",
+  plan: "plan",
+  pick: "panel_pick",
+  verify: "verify",
+  critique: "critique",
+  solve: "solve"
+};
+function providerToSchema(provider) {
+  return PROVIDER_TO_SCHEMA[String(provider).toLowerCase()] ?? null;
+}
+function toolToPattern(toolName) {
+  return TOOL_TO_PATTERN[String(toolName).toLowerCase()] ?? "other";
+}
+function canonicalEventBody(e) {
+  return [
+    e.eventId,
+    e.seatId,
+    e.orgId,
+    e.ts,
+    e.provider,
+    e.model,
+    e.pattern,
+    String(e.promptTokens),
+    String(e.completionTokens),
+    e.costUsdEstimate.toFixed(6),
+    String(e.latencyMs),
+    e.status,
+    e.errorClass ?? ""
+  ].join("|");
+}
+function signEvent(seatSigningKey, e) {
+  return import_node_crypto7.default.createHmac("sha256", seatSigningKey).update(canonicalEventBody(e)).digest("hex");
+}
+var configResolved = false;
+var config = null;
+function getConfig() {
+  if (configResolved) return config;
+  configResolved = true;
+  if (process.env["CROSSCHECK_TELEMETRY"] === "off") return config = null;
+  const url = process.env["CROSSCHECK_TELEMETRY_URL"];
+  const seatId = process.env["CROSSCHECK_SEAT_ID"];
+  const orgId = process.env["CROSSCHECK_ORG_ID"];
+  const seatKey = process.env["CROSSCHECK_SEAT_HMAC_KEY"];
+  if (!url || !seatId || !orgId || !seatKey) return config = null;
+  if (!UUID_RE.test(seatId) || !UUID_RE.test(orgId)) return config = null;
+  config = { url, seatId, orgId, seatKey };
+  return config;
+}
+function intNonNeg(v) {
+  const n = Math.trunc(Number(v));
+  return Number.isFinite(n) && n > 0 ? n : 0;
+}
+function usageEventsFromEnvelope(out, toolName) {
+  if (!out || typeof out !== "object" || Array.isArray(out)) return [];
+  const usage = out["usage"];
+  if (!usage || typeof usage !== "object") return [];
+  const byCall = usage["by_call"];
+  if (!Array.isArray(byCall) || byCall.length === 0) return [];
+  const timing = out["timing"];
+  const timingByCall = timing && typeof timing === "object" ? timing["by_call"] : void 0;
+  const latencies = Array.isArray(timingByCall) ? timingByCall : [];
+  const aligned = latencies.length === byCall.length;
+  const pattern = toolToPattern(toolName);
+  const events = [];
+  for (let i = 0; i < byCall.length; i += 1) {
+    const u = byCall[i];
+    const provider = providerToSchema(String(u.provider ?? ""));
+    if (!provider) continue;
+    const model = String(u.model ?? "").slice(0, 128) || "unknown";
+    const cost = Math.max(0, Number(u.cost_usd) || 0);
+    const latencyMs = aligned ? intNonNeg(latencies[i]?.["wall_ms"]) : 0;
+    events.push({
+      provider,
+      model,
+      pattern,
+      promptTokens: intNonNeg(u.prompt_tokens),
+      completionTokens: intNonNeg(u.completion_tokens),
+      costUsdEstimate: cost,
+      latencyMs,
+      status: "ok"
+    });
+  }
+  return events;
+}
+var queue = [];
+var flushTimer = null;
+function scheduleFlush() {
+  if (flushTimer) return;
+  flushTimer = setTimeout(() => {
+    flushTimer = null;
+    void flush();
+  }, FLUSH_INTERVAL_MS);
+  if (typeof flushTimer.unref === "function") flushTimer.unref();
+}
+function enqueue(cfg, input) {
+  const base = {
+    eventId: import_node_crypto7.default.randomUUID(),
+    seatId: cfg.seatId,
+    orgId: cfg.orgId,
+    ts: (/* @__PURE__ */ new Date()).toISOString(),
+    provider: input.provider,
+    model: input.model,
+    pattern: input.pattern,
+    promptTokens: input.promptTokens,
+    completionTokens: input.completionTokens,
+    costUsdEstimate: input.costUsdEstimate,
+    latencyMs: input.latencyMs,
+    status: input.status
+  };
+  const signatureHmac = signEvent(cfg.seatKey, base);
+  queue.push({ ...base, signatureHmac });
+  if (queue.length > MAX_QUEUE) queue.splice(0, queue.length - MAX_QUEUE);
+  if (queue.length >= FLUSH_BATCH_AT) void flush();
+  else scheduleFlush();
+}
+function recordUsage(out, toolName) {
+  try {
+    const cfg = getConfig();
+    if (!cfg) return;
+    if (toolName === "update_crosscheck") return;
+    for (const ev of usageEventsFromEnvelope(out, toolName)) enqueue(cfg, ev);
+  } catch {
+  }
+}
+async function postBatch(url, batch) {
+  let resp;
+  try {
+    resp = await fetch(url, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ events: batch }),
+      signal: AbortSignal.timeout(POST_TIMEOUT_MS)
+    });
+  } catch {
+    queue.unshift(...batch);
+    if (queue.length > MAX_QUEUE) queue.splice(0, queue.length - MAX_QUEUE);
+    return;
+  }
+  if (resp.ok) return;
+  if (resp.status === 400) {
+    try {
+      process.stderr.write(
+        `crosscheck-agent: telemetry batch rejected (400), dropped ${batch.length} event(s)
+`
+      );
+    } catch {
+    }
+    return;
+  }
+  queue.unshift(...batch);
+  if (queue.length > MAX_QUEUE) queue.splice(0, queue.length - MAX_QUEUE);
+}
+async function flush() {
+  const cfg = getConfig();
+  if (!cfg) return;
+  if (flushTimer) {
+    clearTimeout(flushTimer);
+    flushTimer = null;
+  }
+  while (queue.length > 0) {
+    const batch = queue.splice(0, BATCH_MAX);
+    await postBatch(cfg.url, batch);
+    if (queue.length > 0 && queue[0] === batch[0]) break;
+  }
+}
+
 // src/server.ts
 var SERVER_NAME = "crosscheck-agent";
-var SERVER_VERSION = true ? "0.1.9" : "0.0.0-dev";
+var SERVER_VERSION = true ? "0.1.10" : "0.0.0-dev";
 function extractRunSummaryText(out) {
   if (out === null || typeof out !== "object" || Array.isArray(out)) return void 0;
   const rs = out["run_summary"];
@@ -12772,10 +12957,9 @@ function createServer(opts = {}) {
         () => tool.handler(args)
       );
       if (out && typeof out === "object" && !Array.isArray(out)) {
-        attachUpdateNotice(out, name, {
-          ...opts.repoRoot ? { repoRoot: opts.repoRoot } : {}
-        });
+        attachUpdateNotice(out, name);
       }
+      recordUsage(out, name);
       const durationMs = Number(
         (process.hrtime.bigint() - startedHr) / 1000000n
       );
@@ -12822,6 +13006,11 @@ function createServer(opts = {}) {
 async function connectAndServe(transport, opts = {}) {
   const server = createServer(opts);
   await server.connect(transport);
+  const cliVersion = process.env["CROSSCHECK_CLI_VERSION"];
+  void maybeCheckForUpdate({
+    currentVersion: cliVersion ?? SERVER_VERSION,
+    packageName: cliVersion ? "crosscheck-cli" : "crosscheck-mcp"
+  });
   return server;
 }
 function buildToolRegistry(opts) {
@@ -12937,6 +13126,11 @@ function installShutdownHandlers(bridge) {
       ]).catch(() => {
       });
     }
+    await Promise.race([
+      flush(),
+      new Promise((resolve2) => setTimeout(resolve2, SHUTDOWN_TIMEOUT_MS))
+    ]).catch(() => {
+    });
     process.stderr.write(`crosscheck-agent: shutdown (${reason})
 `);
     process.exit(0);