enpilink 1.0.3 → 1.0.4

package/dist/server/analytics.d.ts

@@ -1,18 +1,30 @@
+import { type CaptureGate } from "./capture-gate.js";
 import type { McpMiddlewareEntry, McpMiddlewareFn } from "./middleware.js";
 import { type OtelSink } from "./otel.js";
 import type { StorageAdapter } from "./storage/types.js";
 /**
- * Analytics + log capture (M2). Opt-in, env-gated, zero overhead when off.
+ * Analytics + log capture (M2) — now with a LIVE runtime toggle (bugfix).
  *
- * When enabled, a single {@link StorageAdapter} is resolved + `init()`ed at
- * server startup and shared in-process: the analytics middleware writes
- * `tool_call` events to it, the log sink mirrors server logs to it, and (M3)
- * the observability API reads from the very same instance via the
- * `server.storage` getter or {@link getActiveStorage}.
+ * A single {@link StorageAdapter} is shared in-process: the analytics
+ * middleware writes `tool_call` events to it, the log sink mirrors server logs
+ * to it, and the observability/config APIs read from the very same instance via
+ * the `server.storage` getter or {@link getActiveStorage}.
  *
- * Gating: OFF unless `ENPILINK_ANALYTICS` is `1` or `true` (case-insensitive).
- * When OFF, no adapter is resolved or initialized (so no `enpilink.db` is
- * created), no middleware is registered, and there is zero network activity.
+ * Storage activation (so the Configuration + observability UI always has a
+ * backing store) vs. capture gating (whether tool calls are recorded) are now
+ * DECOUPLED:
+ *
+ * - **Storage** is activated whenever the admin/config UI is reachable: always
+ *   in dev (default `memory`, honoring `ENPILINK_STORAGE`/`ENPILINK_DB_PATH`),
+ *   and in prod-admin (handled separately in `admin.ts`). It reuses any already
+ *   active adapter — never double-inits.
+ * - **Capture** is governed at runtime by the resolved `analytics.enabled`
+ *   config value (env > file > db > default) via the {@link CaptureGate}, so
+ *   toggling it in the UI takes effect WITHOUT a restart. `ENPILINK_ANALYTICS`
+ *   still works as an env override (env > db).
+ *
+ * The default `memory` adapter creates NO `enpilink.db` file and does zero
+ * network; OTel stays independently gated and off by default.
  */
 /** Options for {@link installAnalytics}. */
 export interface InstallAnalyticsOptions {
@@ -33,25 +45,53 @@ export declare function analyticsEnabled(): boolean;
  * NEVER touches disk and is never on by default.
  */
 export declare function mockEnabled(): boolean;
+/** Options controlling the live capture gate (injectable for tests). */
+export interface AnalyticsMiddlewareOptions {
+    /** Read the live capture gate. Defaults to the shared {@link getCaptureGate}. */
+    gate?: () => CaptureGate;
+    /** RNG for sampling `[0, 1)`. Defaults to `Math.random`. */
+    rng?: () => number;
+}
 /**
  * Build the analytics middleware entry. Times each request around `next()`,
- * records a `tool_call`-typed event (capturing the tool name for `tools/call`),
- * and ALWAYS swallows storage errors so a storage failure can never break or
- * slow a tool call. Recording is fire-and-forget (non-blocking).
+ * and — ONLY when the live capture gate says so — records a `tool_call`-typed
+ * event (capturing the tool name for `tools/call`). Always swallows storage
+ * errors so a storage failure can never break or slow a tool call. Recording is
+ * fire-and-forget (non-blocking).
+ *
+ * The gate is a cheap, synchronous in-memory snapshot of the resolved
+ * `analytics.enabled` / `analytics.sampleRate` config (see `capture-gate.ts`),
+ * so toggling analytics in the UI takes effect live without a restart and the
+ * hot path does no DB read. `next()` is ALWAYS awaited so the tool call runs
+ * identically whether capture is on or off; only the record/export at the end is
+ * gated.
  */
-export declare function createAnalyticsMiddleware(storage: StorageAdapter, now?: () => number, otel?: OtelSink | null): McpMiddlewareFn;
+export declare function createAnalyticsMiddleware(storage: StorageAdapter, now?: () => number, otel?: OtelSink | null, opts?: AnalyticsMiddlewareOptions): McpMiddlewareFn;
 /**
- * Install analytics on a server, ONLY when enabled (`ENPILINK_ANALYTICS`).
+ * Install analytics on a server.
  *
- * When enabled: resolves a {@link StorageAdapter} via `resolveStorageAdapter()`
- * (`ENPILINK_STORAGE` / `ENPILINK_DB_PATH`), `init()`s it, registers it as the
- * active storage for the log sink + `getActiveStorage()`, and returns the
- * built analytics middleware entry to splice into the chain.
+ * STORAGE activation (decoupled from capture):
+ * - Reuse any already-active adapter ({@link getActiveStorage}) — never
+ *   double-init.
+ * - In `--mock` mode, force a fresh in-memory adapter and seed it.
+ * - Otherwise, in DEV activate the configured adapter (default `memory`,
+ *   honoring `ENPILINK_STORAGE` / `ENPILINK_DB_PATH`) so the Configuration +
+ *   observability UI always has a backing store — removing the "no active
+ *   storage" 409 on the first config write. `memory` creates NO file and does
+ *   zero network.
+ * - In PRODUCTION WITHOUT mock, activate NOTHING here (the config UI isn't
+ *   reachable; prod-admin activates its own store in `admin.ts`). This preserves
+ *   the "no db / no network when off in prod" guarantee.
  *
- * When disabled: resolves/initializes NOTHING and returns `null` — zero
- * overhead, zero network, no `enpilink.db` created.
+ * CAPTURE gating: the returned middleware records events only when the live
+ * {@link CaptureGate} (resolved `analytics.enabled`/`analytics.sampleRate`, env
+ * > file > db > default) allows it — so the toggle is live (no restart). The
+ * gate is resolved once here and refreshed on config writes by the router. In
+ * `--mock` mode capture is force-enabled for the session.
  *
- * @returns the active storage + middleware entry, or `null` when disabled.
+ * @returns the active storage + middleware entry + otel sink, or `null` when no
+ * storage was activated (prod without mock/admin) — zero overhead, no file, no
+ * network, no middleware.
  */
 export declare function installAnalytics(opts?: InstallAnalyticsOptions): Promise<{
     storage: StorageAdapter;

package/dist/server/analytics.js

@@ -1,4 +1,5 @@
-import { setActiveStorage } from "./log-sink.js";
+import { getCaptureGate, refreshCaptureGate, setCaptureGate, } from "./capture-gate.js";
+import { getActiveStorage, setActiveStorage } from "./log-sink.js";
 import { seedMockData } from "./mock-seed.js";
 import { initOtel } from "./otel.js";
 import { resolveStorageAdapter } from "./storage/index.js";
@@ -11,6 +12,10 @@ import { MemoryStorageAdapter } from "./storage/memory.js";
 function resolveSessionStorage(mock) {
     return mock ? new MemoryStorageAdapter() : resolveStorageAdapter();
 }
+/** Whether the process is running in production (no dev admin plane). */
+function isProduction() {
+    return process.env.NODE_ENV === "production";
+}
 /** Truthy values that enable analytics via {@link analyticsEnabled}. */
 const TRUTHY = new Set(["1", "true", "yes", "on"]);
 /**
@@ -50,11 +55,21 @@ function toolNameOf(method, params) {
 }
 /**
  * Build the analytics middleware entry. Times each request around `next()`,
- * records a `tool_call`-typed event (capturing the tool name for `tools/call`),
- * and ALWAYS swallows storage errors so a storage failure can never break or
- * slow a tool call. Recording is fire-and-forget (non-blocking).
+ * and — ONLY when the live capture gate says so — records a `tool_call`-typed
+ * event (capturing the tool name for `tools/call`). Always swallows storage
+ * errors so a storage failure can never break or slow a tool call. Recording is
+ * fire-and-forget (non-blocking).
+ *
+ * The gate is a cheap, synchronous in-memory snapshot of the resolved
+ * `analytics.enabled` / `analytics.sampleRate` config (see `capture-gate.ts`),
+ * so toggling analytics in the UI takes effect live without a restart and the
+ * hot path does no DB read. `next()` is ALWAYS awaited so the tool call runs
+ * identically whether capture is on or off; only the record/export at the end is
+ * gated.
  */
-export function createAnalyticsMiddleware(storage, now = Date.now, otel = null) {
+export function createAnalyticsMiddleware(storage, now = Date.now, otel = null, opts = {}) {
+    const readGate = opts.gate ?? getCaptureGate;
+    const rng = opts.rng ?? Math.random;
     return async (request, _extra, next) => {
         const start = now();
         const tool = toolNameOf(request.method, request.params);
@@ -77,25 +92,31 @@ export function createAnalyticsMiddleware(storage, now = Date.now, otel = null)
             throw err;
         }
         finally {
-            const ms = now() - start;
-            const event = {
-                ts: start,
-                type: "tool_call",
-                tool,
-                method: request.method,
-                ms,
-                ok,
-                error,
-            };
-            // Fire-and-forget; never block or throw into the request path.
-            void recordSafely(storage, event);
-            // Optional OTel export — guarded, synchronous, error-swallowing.
-            if (otel) {
-                try {
-                    otel.record(event);
-                }
-                catch {
-                    // OTel export must never break or slow a tool call.
+            // Live gate: skip recording entirely when analytics is off, or when this
+            // call falls outside the sample rate. Cheap + synchronous + never throws.
+            const { enabled, sampleRate } = readGate();
+            const sampled = sampleRate >= 1 || (sampleRate > 0 && rng() < sampleRate);
+            if (enabled && sampled) {
+                const ms = now() - start;
+                const event = {
+                    ts: start,
+                    type: "tool_call",
+                    tool,
+                    method: request.method,
+                    ms,
+                    ok,
+                    error,
+                };
+                // Fire-and-forget; never block or throw into the request path.
+                void recordSafely(storage, event);
+                // Optional OTel export — guarded, synchronous, error-swallowing.
+                if (otel) {
+                    try {
+                        otel.record(event);
+                    }
+                    catch {
+                        // OTel export must never break or slow a tool call.
+                    }
                 }
             }
         }
@@ -111,40 +132,65 @@ async function recordSafely(storage, event) {
     }
 }
 /**
- * Install analytics on a server, ONLY when enabled (`ENPILINK_ANALYTICS`).
+ * Install analytics on a server.
  *
- * When enabled: resolves a {@link StorageAdapter} via `resolveStorageAdapter()`
- * (`ENPILINK_STORAGE` / `ENPILINK_DB_PATH`), `init()`s it, registers it as the
- * active storage for the log sink + `getActiveStorage()`, and returns the
- * built analytics middleware entry to splice into the chain.
+ * STORAGE activation (decoupled from capture):
+ * - Reuse any already-active adapter ({@link getActiveStorage}) — never
+ *   double-init.
+ * - In `--mock` mode, force a fresh in-memory adapter and seed it.
+ * - Otherwise, in DEV activate the configured adapter (default `memory`,
+ *   honoring `ENPILINK_STORAGE` / `ENPILINK_DB_PATH`) so the Configuration +
+ *   observability UI always has a backing store — removing the "no active
+ *   storage" 409 on the first config write. `memory` creates NO file and does
+ *   zero network.
+ * - In PRODUCTION WITHOUT mock, activate NOTHING here (the config UI isn't
+ *   reachable; prod-admin activates its own store in `admin.ts`). This preserves
+ *   the "no db / no network when off in prod" guarantee.
  *
- * When disabled: resolves/initializes NOTHING and returns `null` — zero
- * overhead, zero network, no `enpilink.db` created.
+ * CAPTURE gating: the returned middleware records events only when the live
+ * {@link CaptureGate} (resolved `analytics.enabled`/`analytics.sampleRate`, env
+ * > file > db > default) allows it — so the toggle is live (no restart). The
+ * gate is resolved once here and refreshed on config writes by the router. In
+ * `--mock` mode capture is force-enabled for the session.
  *
- * @returns the active storage + middleware entry, or `null` when disabled.
+ * @returns the active storage + middleware entry + otel sink, or `null` when no
+ * storage was activated (prod without mock/admin) — zero overhead, no file, no
+ * network, no middleware.
  */
 export async function installAnalytics(opts = {}) {
-    // `--mock` (ENPILINK_MOCK) force-enables analytics for the session even when
-    // the env-based gating is off, so demos work without setting both flags.
+    // `--mock` (ENPILINK_MOCK) force-enables capture for the session and uses a
+    // throwaway in-memory store so demos work with no real traffic and no disk.
     const mock = mockEnabled();
-    if (!mock && !analyticsEnabled()) {
-        return null;
-    }
-    let storage;
-    try {
-        storage = resolveSessionStorage(mock);
-        await storage.init();
-    }
-    catch (err) {
-        // Never let an analytics/storage failure break server startup.
-        console.error("[enpilink] analytics disabled: storage init failed:", err instanceof Error ? err.message : err);
-        return null;
+    // Reuse an already-active adapter if one exists (e.g. set elsewhere); never
+    // double-init. Otherwise decide whether to activate one.
+    let storage = getActiveStorage();
+    let ownedHere = false;
+    if (!storage) {
+        // In prod we don't activate storage here UNLESS analytics is explicitly
+        // enabled via env (the historical M2 behavior — capture to a resolved
+        // store). Otherwise the config UI isn't reachable (prod-admin handles its
+        // own store), so activating nothing preserves the "no db / no network when
+        // off" guarantee. In dev (or mock) we always activate so the UI works.
+        if (!mock && isProduction() && !analyticsEnabled()) {
+            return null;
+        }
+        try {
+            storage = resolveSessionStorage(mock);
+            await storage.init();
+            ownedHere = true;
+        }
+        catch (err) {
+            // Never let a storage failure break server startup.
+            console.error("[enpilink] analytics storage init failed:", err instanceof Error ? err.message : err);
+            return null;
+        }
+        setActiveStorage(storage);
     }
-    setActiveStorage(storage);
-    // In `--mock` mode, seed the in-memory storage with a deterministic demo
+    // In `--mock` mode, seed the (in-memory) storage with a deterministic demo
     // dataset so the Dashboard renders full immediately (no real traffic).
-    // Determinism: a fixed seed + a base timestamp captured once here.
-    if (mock) {
+    // Determinism: a fixed seed + a base timestamp captured once here. Only seed a
+    // store we just created here, never an adopted/pre-existing one.
+    if (mock && ownedHere) {
         const now = (opts.now ?? Date.now)();
         try {
             await seedMockData(storage, { now });
@@ -153,9 +199,18 @@ export async function installAnalytics(opts = {}) {
             // A seeding failure must never break server startup.
         }
     }
+    // Initialize the live capture gate. `--mock` force-enables capture for the
+    // session (full sample); otherwise resolve from env/file/db/default so the UI
+    // toggle (and any env override) governs capture live.
+    if (mock) {
+        setCaptureGate({ enabled: true, sampleRate: 1 });
+    }
+    else {
+        await refreshCaptureGate();
+    }
     // Optional OTel export (M6): off by default, zero network/imports when unset.
-    // Initialized once here and fed by the middleware alongside storage. Mock mode
-    // never exports (it's dev-only demo data); requires the explicit env opt-in.
+    // Mock mode never exports (it's dev-only demo data); requires the explicit env
+    // opt-in.
     const otel = mock ? null : await initOtel();
     const entry = {
         // "request" matches every (non-notification) request so non-tool methods

package/dist/server/analytics.js.map

@@ -1 +1 @@
-{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../../src/server/analytics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAiB,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAyB3D;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,IAAa;IAC1C,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC;AACrE,CAAC;AAED,wEAAwE;AACxE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAEnD;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC3C,OAAO,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW;IACzB,sEAAsE;IACtE,0EAA0E;IAC1E,0CAA0C;IAC1C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACtC,OAAO,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACnE,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CACjB,MAAc,EACd,MAA+B;IAE/B,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,CAAC;IAC1B,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAuB,EACvB,MAAoB,IAAI,CAAC,GAAG,EAC5B,OAAwB,IAAI;IAE5B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,EAAE,GAAG,IAAI,CAAC;QACd,IAAI,KAAyB,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;YAC5B,kEAAkE;YAClE,IACE,MAAM;gBACN,OAAO,MAAM,KAAK,QAAQ;gBACzB,MAAgC,CAAC,OAAO,KAAK,IAAI,EAClD,CAAC;gBACD,EAAE,GAAG,KAAK,CAAC;YACb,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6DAA6D;YAC7D,EAAE,GAAG,KAAK,CAAC;YACX,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzD,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC;YACzB,MAAM,KAAK,GAAG;gBACZ,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,WAAW;gBACjB,IAAI;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,EAAE;gBACF,EAAE;gBACF,KAAK;aACG,CAAC;YACX,+DAA+D;YAC/D,KAAK,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAClC,iEAAiE;YACjE,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC;oBACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;gBAAC,MAAM,CAAC;oBACP,oDAAoD;gBACtD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,KAAK,UAAU,YAAY,CACzB,OAAuB,EACvB,KAAmD;IAEnD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgC,EAAE;IAMlC,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,+DAA+D;QAC/D,OAAO,CAAC,KAAK,CACX,qDAAqD,EACrD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CACzC,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE1B,yEAAyE;IACzE,uEAAuE;IACvE,mEAAmE;IACnE,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC;IAE5C,MAAM,KAAK,GAAuB;QAChC,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;KAC5D,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC","sourcesContent":["import { setActiveStorage } from \"./log-sink.js\";\nimport type { McpMiddlewareEntry, McpMiddlewareFn } from \"./middleware.js\";\nimport { seedMockData } from \"./mock-seed.js\";\nimport { initOtel, type OtelSink } from \"./otel.js\";\nimport { resolveStorageAdapter } from \"./storage/index.js\";\nimport { MemoryStorageAdapter } from \"./storage/memory.js\";\nimport type { StorageAdapter } from \"./storage/types.js\";\n\n/**\n * Analytics + log capture (M2). Opt-in, env-gated, zero overhead when off.\n *\n * When enabled, a single {@link StorageAdapter} is resolved + `init()`ed at\n * server startup and shared in-process: the analytics middleware writes\n * `tool_call` events to it, the log sink mirrors server logs to it, and (M3)\n * the observability API reads from the very same instance via the\n * `server.storage` getter or {@link getActiveStorage}.\n *\n * Gating: OFF unless `ENPILINK_ANALYTICS` is `1` or `true` (case-insensitive).\n * When OFF, no adapter is resolved or initialized (so no `enpilink.db` is\n * created), no middleware is registered, and there is zero network activity.\n */\n\n/** Options for {@link installAnalytics}. */\nexport interface InstallAnalyticsOptions {\n  /**\n   * Inject a clock for deterministic tests. Defaults to `Date.now`.\n   */\n  now?: () => number;\n}\n\n/**\n * Resolve a storage adapter for the session. In `--mock` mode we force an\n * in-memory adapter (the demo seed must never touch disk and must vanish on\n * exit); otherwise the configured `ENPILINK_STORAGE` adapter is used.\n */\nfunction resolveSessionStorage(mock: boolean): StorageAdapter {\n  return mock ? new MemoryStorageAdapter() : resolveStorageAdapter();\n}\n\n/** Truthy values that enable analytics via {@link analyticsEnabled}. */\nconst TRUTHY = new Set([\"1\", \"true\", \"yes\", \"on\"]);\n\n/**\n * Whether analytics is enabled. OFF by default; enable with\n * `ENPILINK_ANALYTICS=1` (also accepts `true`/`yes`/`on`, case-insensitive).\n */\nexport function analyticsEnabled(): boolean {\n  const raw = process.env.ENPILINK_ANALYTICS;\n  return raw !== undefined && TRUTHY.has(raw.trim().toLowerCase());\n}\n\n/**\n * Whether the `--mock` demo seed is enabled (`ENPILINK_MOCK`=1/true/yes/on).\n * Mock mode is opt-in only and IMPLIES analytics-on + in-memory storage for the\n * session, so the Dashboard renders full demo data with NO real traffic. It\n * NEVER touches disk and is never on by default.\n */\nexport function mockEnabled(): boolean {\n  // The demo seed is DEV-ONLY: it must never seed a real deployment. In\n  // production `ENPILINK_MOCK` is ignored entirely (read the literal so the\n  // guard survives DCE and is unambiguous).\n  if (process.env.NODE_ENV === \"production\") {\n    return false;\n  }\n  const raw = process.env.ENPILINK_MOCK;\n  return raw !== undefined && TRUTHY.has(raw.trim().toLowerCase());\n}\n\n/**\n * Extract the tool name from a `tools/call` request's params. Returns\n * `undefined` for non-`tools/call` methods or malformed params, never throws.\n */\nfunction toolNameOf(\n  method: string,\n  params: Record<string, unknown>,\n): string | undefined {\n  if (method !== \"tools/call\") {\n    return undefined;\n  }\n  const name = params?.name;\n  return typeof name === \"string\" ? name : undefined;\n}\n\n/**\n * Build the analytics middleware entry. Times each request around `next()`,\n * records a `tool_call`-typed event (capturing the tool name for `tools/call`),\n * and ALWAYS swallows storage errors so a storage failure can never break or\n * slow a tool call. Recording is fire-and-forget (non-blocking).\n */\nexport function createAnalyticsMiddleware(\n  storage: StorageAdapter,\n  now: () => number = Date.now,\n  otel: OtelSink | null = null,\n): McpMiddlewareFn {\n  return async (request, _extra, next) => {\n    const start = now();\n    const tool = toolNameOf(request.method, request.params);\n    let ok = true;\n    let error: string | undefined;\n\n    try {\n      const result = await next();\n      // A tool result with `isError: true` is a soft (handled) failure.\n      if (\n        result &&\n        typeof result === \"object\" &&\n        (result as { isError?: unknown }).isError === true\n      ) {\n        ok = false;\n      }\n      return result;\n    } catch (err) {\n      // Record the failure, then rethrow so behavior is unchanged.\n      ok = false;\n      error = err instanceof Error ? err.message : String(err);\n      throw err;\n    } finally {\n      const ms = now() - start;\n      const event = {\n        ts: start,\n        type: \"tool_call\",\n        tool,\n        method: request.method,\n        ms,\n        ok,\n        error,\n      } as const;\n      // Fire-and-forget; never block or throw into the request path.\n      void recordSafely(storage, event);\n      // Optional OTel export — guarded, synchronous, error-swallowing.\n      if (otel) {\n        try {\n          otel.record(event);\n        } catch {\n          // OTel export must never break or slow a tool call.\n        }\n      }\n    }\n  };\n}\n\n/** Record an event, swallowing any storage error. */\nasync function recordSafely(\n  storage: StorageAdapter,\n  event: Parameters<StorageAdapter[\"recordEvent\"]>[0],\n): Promise<void> {\n  try {\n    await storage.recordEvent(event);\n  } catch {\n    // A storage failure must never break or slow a tool call.\n  }\n}\n\n/**\n * Install analytics on a server, ONLY when enabled (`ENPILINK_ANALYTICS`).\n *\n * When enabled: resolves a {@link StorageAdapter} via `resolveStorageAdapter()`\n * (`ENPILINK_STORAGE` / `ENPILINK_DB_PATH`), `init()`s it, registers it as the\n * active storage for the log sink + `getActiveStorage()`, and returns the\n * built analytics middleware entry to splice into the chain.\n *\n * When disabled: resolves/initializes NOTHING and returns `null` — zero\n * overhead, zero network, no `enpilink.db` created.\n *\n * @returns the active storage + middleware entry, or `null` when disabled.\n */\nexport async function installAnalytics(\n  opts: InstallAnalyticsOptions = {},\n): Promise<{\n  storage: StorageAdapter;\n  entry: McpMiddlewareEntry;\n  otel: OtelSink | null;\n} | null> {\n  // `--mock` (ENPILINK_MOCK) force-enables analytics for the session even when\n  // the env-based gating is off, so demos work without setting both flags.\n  const mock = mockEnabled();\n  if (!mock && !analyticsEnabled()) {\n    return null;\n  }\n\n  let storage: StorageAdapter;\n  try {\n    storage = resolveSessionStorage(mock);\n    await storage.init();\n  } catch (err) {\n    // Never let an analytics/storage failure break server startup.\n    console.error(\n      \"[enpilink] analytics disabled: storage init failed:\",\n      err instanceof Error ? err.message : err,\n    );\n    return null;\n  }\n\n  setActiveStorage(storage);\n\n  // In `--mock` mode, seed the in-memory storage with a deterministic demo\n  // dataset so the Dashboard renders full immediately (no real traffic).\n  // Determinism: a fixed seed + a base timestamp captured once here.\n  if (mock) {\n    const now = (opts.now ?? Date.now)();\n    try {\n      await seedMockData(storage, { now });\n    } catch {\n      // A seeding failure must never break server startup.\n    }\n  }\n\n  // Optional OTel export (M6): off by default, zero network/imports when unset.\n  // Initialized once here and fed by the middleware alongside storage. Mock mode\n  // never exports (it's dev-only demo data); requires the explicit env opt-in.\n  const otel = mock ? null : await initOtel();\n\n  const entry: McpMiddlewareEntry = {\n    // \"request\" matches every (non-notification) request so non-tool methods\n    // are counted too; the handler captures the tool name for tools/call.\n    filter: \"request\",\n    handler: createAnalyticsMiddleware(storage, opts.now, otel),\n  };\n\n  return { storage, entry, otel };\n}\n"]}
+{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../../src/server/analytics.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,cAAc,EACd,kBAAkB,EAClB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEnE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAiB,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAoC3D;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,IAAa;IAC1C,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC;AACrE,CAAC;AAED,yEAAyE;AACzE,SAAS,YAAY;IACnB,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAC/C,CAAC;AAED,wEAAwE;AACxE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAEnD;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC3C,OAAO,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW;IACzB,sEAAsE;IACtE,0EAA0E;IAC1E,0CAA0C;IAC1C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACtC,OAAO,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACnE,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CACjB,MAAc,EACd,MAA+B;IAE/B,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,CAAC;IAC1B,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAUD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAuB,EACvB,MAAoB,IAAI,CAAC,GAAG,EAC5B,OAAwB,IAAI,EAC5B,OAAmC,EAAE;IAErC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;IACpC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,EAAE,GAAG,IAAI,CAAC;QACd,IAAI,KAAyB,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;YAC5B,kEAAkE;YAClE,IACE,MAAM;gBACN,OAAO,MAAM,KAAK,QAAQ;gBACzB,MAAgC,CAAC,OAAO,KAAK,IAAI,EAClD,CAAC;gBACD,EAAE,GAAG,KAAK,CAAC;YACb,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6DAA6D;YAC7D,EAAE,GAAG,KAAK,CAAC;YACX,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzD,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,yEAAyE;YACzE,0EAA0E;YAC1E,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC;YAC1E,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;gBACvB,MAAM,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC;gBACzB,MAAM,KAAK,GAAG;oBACZ,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,WAAW;oBACjB,IAAI;oBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,EAAE;oBACF,EAAE;oBACF,KAAK;iBACG,CAAC;gBACX,+DAA+D;gBAC/D,KAAK,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAClC,iEAAiE;gBACjE,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC;wBACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACrB,CAAC;oBAAC,MAAM,CAAC;wBACP,oDAAoD;oBACtD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,KAAK,UAAU,YAAY,CACzB,OAAuB,EACvB,KAAmD;IAEnD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgC,EAAE;IAMlC,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAE3B,4EAA4E;IAC5E,yDAAyD;IACzD,IAAI,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACjC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,wEAAwE;QACxE,sEAAsE;QACtE,0EAA0E;QAC1E,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,CAAC,IAAI,IAAI,YAAY,EAAE,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oDAAoD;YACpD,OAAO,CAAC,KAAK,CACX,2CAA2C,EAC3C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CACzC,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,2EAA2E;IAC3E,uEAAuE;IACvE,+EAA+E;IAC/E,iEAAiE;IACjE,IAAI,IAAI,IAAI,SAAS,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;QACvD,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,8EAA8E;IAC9E,sDAAsD;IACtD,IAAI,IAAI,EAAE,CAAC;QACT,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,MAAM,kBAAkB,EAAE,CAAC;IAC7B,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,UAAU;IACV,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC;IAE5C,MAAM,KAAK,GAAuB;QAChC,yEAAyE;QACzE,sEAAsE;QACtE,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;KAC5D,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC","sourcesContent":["import {\n  type CaptureGate,\n  getCaptureGate,\n  refreshCaptureGate,\n  setCaptureGate,\n} from \"./capture-gate.js\";\nimport { getActiveStorage, setActiveStorage } from \"./log-sink.js\";\nimport type { McpMiddlewareEntry, McpMiddlewareFn } from \"./middleware.js\";\nimport { seedMockData } from \"./mock-seed.js\";\nimport { initOtel, type OtelSink } from \"./otel.js\";\nimport { resolveStorageAdapter } from \"./storage/index.js\";\nimport { MemoryStorageAdapter } from \"./storage/memory.js\";\nimport type { StorageAdapter } from \"./storage/types.js\";\n\n/**\n * Analytics + log capture (M2) — now with a LIVE runtime toggle (bugfix).\n *\n * A single {@link StorageAdapter} is shared in-process: the analytics\n * middleware writes `tool_call` events to it, the log sink mirrors server logs\n * to it, and the observability/config APIs read from the very same instance via\n * the `server.storage` getter or {@link getActiveStorage}.\n *\n * Storage activation (so the Configuration + observability UI always has a\n * backing store) vs. capture gating (whether tool calls are recorded) are now\n * DECOUPLED:\n *\n * - **Storage** is activated whenever the admin/config UI is reachable: always\n *   in dev (default `memory`, honoring `ENPILINK_STORAGE`/`ENPILINK_DB_PATH`),\n *   and in prod-admin (handled separately in `admin.ts`). It reuses any already\n *   active adapter — never double-inits.\n * - **Capture** is governed at runtime by the resolved `analytics.enabled`\n *   config value (env > file > db > default) via the {@link CaptureGate}, so\n *   toggling it in the UI takes effect WITHOUT a restart. `ENPILINK_ANALYTICS`\n *   still works as an env override (env > db).\n *\n * The default `memory` adapter creates NO `enpilink.db` file and does zero\n * network; OTel stays independently gated and off by default.\n */\n\n/** Options for {@link installAnalytics}. */\nexport interface InstallAnalyticsOptions {\n  /**\n   * Inject a clock for deterministic tests. Defaults to `Date.now`.\n   */\n  now?: () => number;\n}\n\n/**\n * Resolve a storage adapter for the session. In `--mock` mode we force an\n * in-memory adapter (the demo seed must never touch disk and must vanish on\n * exit); otherwise the configured `ENPILINK_STORAGE` adapter is used.\n */\nfunction resolveSessionStorage(mock: boolean): StorageAdapter {\n  return mock ? new MemoryStorageAdapter() : resolveStorageAdapter();\n}\n\n/** Whether the process is running in production (no dev admin plane). */\nfunction isProduction(): boolean {\n  return process.env.NODE_ENV === \"production\";\n}\n\n/** Truthy values that enable analytics via {@link analyticsEnabled}. */\nconst TRUTHY = new Set([\"1\", \"true\", \"yes\", \"on\"]);\n\n/**\n * Whether analytics is enabled. OFF by default; enable with\n * `ENPILINK_ANALYTICS=1` (also accepts `true`/`yes`/`on`, case-insensitive).\n */\nexport function analyticsEnabled(): boolean {\n  const raw = process.env.ENPILINK_ANALYTICS;\n  return raw !== undefined && TRUTHY.has(raw.trim().toLowerCase());\n}\n\n/**\n * Whether the `--mock` demo seed is enabled (`ENPILINK_MOCK`=1/true/yes/on).\n * Mock mode is opt-in only and IMPLIES analytics-on + in-memory storage for the\n * session, so the Dashboard renders full demo data with NO real traffic. It\n * NEVER touches disk and is never on by default.\n */\nexport function mockEnabled(): boolean {\n  // The demo seed is DEV-ONLY: it must never seed a real deployment. In\n  // production `ENPILINK_MOCK` is ignored entirely (read the literal so the\n  // guard survives DCE and is unambiguous).\n  if (process.env.NODE_ENV === \"production\") {\n    return false;\n  }\n  const raw = process.env.ENPILINK_MOCK;\n  return raw !== undefined && TRUTHY.has(raw.trim().toLowerCase());\n}\n\n/**\n * Extract the tool name from a `tools/call` request's params. Returns\n * `undefined` for non-`tools/call` methods or malformed params, never throws.\n */\nfunction toolNameOf(\n  method: string,\n  params: Record<string, unknown>,\n): string | undefined {\n  if (method !== \"tools/call\") {\n    return undefined;\n  }\n  const name = params?.name;\n  return typeof name === \"string\" ? name : undefined;\n}\n\n/** Options controlling the live capture gate (injectable for tests). */\nexport interface AnalyticsMiddlewareOptions {\n  /** Read the live capture gate. Defaults to the shared {@link getCaptureGate}. */\n  gate?: () => CaptureGate;\n  /** RNG for sampling `[0, 1)`. Defaults to `Math.random`. */\n  rng?: () => number;\n}\n\n/**\n * Build the analytics middleware entry. Times each request around `next()`,\n * and — ONLY when the live capture gate says so — records a `tool_call`-typed\n * event (capturing the tool name for `tools/call`). Always swallows storage\n * errors so a storage failure can never break or slow a tool call. Recording is\n * fire-and-forget (non-blocking).\n *\n * The gate is a cheap, synchronous in-memory snapshot of the resolved\n * `analytics.enabled` / `analytics.sampleRate` config (see `capture-gate.ts`),\n * so toggling analytics in the UI takes effect live without a restart and the\n * hot path does no DB read. `next()` is ALWAYS awaited so the tool call runs\n * identically whether capture is on or off; only the record/export at the end is\n * gated.\n */\nexport function createAnalyticsMiddleware(\n  storage: StorageAdapter,\n  now: () => number = Date.now,\n  otel: OtelSink | null = null,\n  opts: AnalyticsMiddlewareOptions = {},\n): McpMiddlewareFn {\n  const readGate = opts.gate ?? getCaptureGate;\n  const rng = opts.rng ?? Math.random;\n  return async (request, _extra, next) => {\n    const start = now();\n    const tool = toolNameOf(request.method, request.params);\n    let ok = true;\n    let error: string | undefined;\n\n    try {\n      const result = await next();\n      // A tool result with `isError: true` is a soft (handled) failure.\n      if (\n        result &&\n        typeof result === \"object\" &&\n        (result as { isError?: unknown }).isError === true\n      ) {\n        ok = false;\n      }\n      return result;\n    } catch (err) {\n      // Record the failure, then rethrow so behavior is unchanged.\n      ok = false;\n      error = err instanceof Error ? err.message : String(err);\n      throw err;\n    } finally {\n      // Live gate: skip recording entirely when analytics is off, or when this\n      // call falls outside the sample rate. Cheap + synchronous + never throws.\n      const { enabled, sampleRate } = readGate();\n      const sampled = sampleRate >= 1 || (sampleRate > 0 && rng() < sampleRate);\n      if (enabled && sampled) {\n        const ms = now() - start;\n        const event = {\n          ts: start,\n          type: \"tool_call\",\n          tool,\n          method: request.method,\n          ms,\n          ok,\n          error,\n        } as const;\n        // Fire-and-forget; never block or throw into the request path.\n        void recordSafely(storage, event);\n        // Optional OTel export — guarded, synchronous, error-swallowing.\n        if (otel) {\n          try {\n            otel.record(event);\n          } catch {\n            // OTel export must never break or slow a tool call.\n          }\n        }\n      }\n    }\n  };\n}\n\n/** Record an event, swallowing any storage error. */\nasync function recordSafely(\n  storage: StorageAdapter,\n  event: Parameters<StorageAdapter[\"recordEvent\"]>[0],\n): Promise<void> {\n  try {\n    await storage.recordEvent(event);\n  } catch {\n    // A storage failure must never break or slow a tool call.\n  }\n}\n\n/**\n * Install analytics on a server.\n *\n * STORAGE activation (decoupled from capture):\n * - Reuse any already-active adapter ({@link getActiveStorage}) — never\n *   double-init.\n * - In `--mock` mode, force a fresh in-memory adapter and seed it.\n * - Otherwise, in DEV activate the configured adapter (default `memory`,\n *   honoring `ENPILINK_STORAGE` / `ENPILINK_DB_PATH`) so the Configuration +\n *   observability UI always has a backing store — removing the \"no active\n *   storage\" 409 on the first config write. `memory` creates NO file and does\n *   zero network.\n * - In PRODUCTION WITHOUT mock, activate NOTHING here (the config UI isn't\n *   reachable; prod-admin activates its own store in `admin.ts`). This preserves\n *   the \"no db / no network when off in prod\" guarantee.\n *\n * CAPTURE gating: the returned middleware records events only when the live\n * {@link CaptureGate} (resolved `analytics.enabled`/`analytics.sampleRate`, env\n * > file > db > default) allows it — so the toggle is live (no restart). The\n * gate is resolved once here and refreshed on config writes by the router. In\n * `--mock` mode capture is force-enabled for the session.\n *\n * @returns the active storage + middleware entry + otel sink, or `null` when no\n * storage was activated (prod without mock/admin) — zero overhead, no file, no\n * network, no middleware.\n */\nexport async function installAnalytics(\n  opts: InstallAnalyticsOptions = {},\n): Promise<{\n  storage: StorageAdapter;\n  entry: McpMiddlewareEntry;\n  otel: OtelSink | null;\n} | null> {\n  // `--mock` (ENPILINK_MOCK) force-enables capture for the session and uses a\n  // throwaway in-memory store so demos work with no real traffic and no disk.\n  const mock = mockEnabled();\n\n  // Reuse an already-active adapter if one exists (e.g. set elsewhere); never\n  // double-init. Otherwise decide whether to activate one.\n  let storage = getActiveStorage();\n  let ownedHere = false;\n  if (!storage) {\n    // In prod we don't activate storage here UNLESS analytics is explicitly\n    // enabled via env (the historical M2 behavior — capture to a resolved\n    // store). Otherwise the config UI isn't reachable (prod-admin handles its\n    // own store), so activating nothing preserves the \"no db / no network when\n    // off\" guarantee. In dev (or mock) we always activate so the UI works.\n    if (!mock && isProduction() && !analyticsEnabled()) {\n      return null;\n    }\n    try {\n      storage = resolveSessionStorage(mock);\n      await storage.init();\n      ownedHere = true;\n    } catch (err) {\n      // Never let a storage failure break server startup.\n      console.error(\n        \"[enpilink] analytics storage init failed:\",\n        err instanceof Error ? err.message : err,\n      );\n      return null;\n    }\n    setActiveStorage(storage);\n  }\n\n  // In `--mock` mode, seed the (in-memory) storage with a deterministic demo\n  // dataset so the Dashboard renders full immediately (no real traffic).\n  // Determinism: a fixed seed + a base timestamp captured once here. Only seed a\n  // store we just created here, never an adopted/pre-existing one.\n  if (mock && ownedHere) {\n    const now = (opts.now ?? Date.now)();\n    try {\n      await seedMockData(storage, { now });\n    } catch {\n      // A seeding failure must never break server startup.\n    }\n  }\n\n  // Initialize the live capture gate. `--mock` force-enables capture for the\n  // session (full sample); otherwise resolve from env/file/db/default so the UI\n  // toggle (and any env override) governs capture live.\n  if (mock) {\n    setCaptureGate({ enabled: true, sampleRate: 1 });\n  } else {\n    await refreshCaptureGate();\n  }\n\n  // Optional OTel export (M6): off by default, zero network/imports when unset.\n  // Mock mode never exports (it's dev-only demo data); requires the explicit env\n  // opt-in.\n  const otel = mock ? null : await initOtel();\n\n  const entry: McpMiddlewareEntry = {\n    // \"request\" matches every (non-notification) request so non-tool methods\n    // are counted too; the handler captures the tool name for tools/call.\n    filter: \"request\",\n    handler: createAnalyticsMiddleware(storage, opts.now, otel),\n  };\n\n  return { storage, entry, otel };\n}\n"]}

package/dist/server/analytics.test.js

@@ -1,6 +1,7 @@
 import { existsSync } from "node:fs";
 import { afterEach, beforeEach, describe, expect, it } from "vitest";
 import { analyticsEnabled, createAnalyticsMiddleware, installAnalytics, } from "./analytics.js";
+import { getCaptureGate, setCaptureGate } from "./capture-gate.js";
 import { getActiveStorage, serverLog, setActiveStorage } from "./log-sink.js";
 import { MemoryStorageAdapter } from "./storage/memory.js";
 /** Flush the fire-and-forget recordEvent/appendLog microtasks. */
@@ -38,6 +39,8 @@ describe("analyticsEnabled", () => {
         }
     });
 });
+/** A gate that always records (analytics on, full sample) — for capture tests. */
+const onGate = () => ({ enabled: true, sampleRate: 1 });
 describe("createAnalyticsMiddleware", () => {
     let store;
     beforeEach(async () => {
@@ -45,7 +48,9 @@ describe("createAnalyticsMiddleware", () => {
         await store.init();
     });
     it("records a tool_call event on success with tool, ms, ok", async () => {
-        const mw = createAnalyticsMiddleware(store, fixedClock());
+        const mw = createAnalyticsMiddleware(store, fixedClock(), null, {
+            gate: onGate,
+        });
         const result = { content: [{ type: "text", text: "hi" }] };
         const ret = await mw({ method: "tools/call", params: { name: "greet" } }, undefined, async () => result);
         await flush();
@@ -62,14 +67,18 @@ describe("createAnalyticsMiddleware", () => {
         expect(e?.error).toBeUndefined();
     });
     it("records ok=false when the result has isError", async () => {
-        const mw = createAnalyticsMiddleware(store, fixedClock());
+        const mw = createAnalyticsMiddleware(store, fixedClock(), null, {
+            gate: onGate,
+        });
         await mw({ method: "tools/call", params: { name: "boom" } }, undefined, async () => ({ isError: true, content: [] }));
         await flush();
         const [e] = await store.queryEvents({});
         expect(e).toMatchObject({ tool: "boom", ok: false });
     });
     it("records the event AND rethrows on a thrown error", async () => {
-        const mw = createAnalyticsMiddleware(store, fixedClock());
+        const mw = createAnalyticsMiddleware(store, fixedClock(), null, {
+            gate: onGate,
+        });
         await expect(mw({ method: "tools/call", params: { name: "kaboom" } }, undefined, async () => {
             throw new Error("nope");
         })).rejects.toThrow("nope");
@@ -78,7 +87,9 @@ describe("createAnalyticsMiddleware", () => {
         expect(e).toMatchObject({ tool: "kaboom", ok: false, error: "nope" });
     });
     it("captures the method but no tool for non-tools/call requests", async () => {
-        const mw = createAnalyticsMiddleware(store, fixedClock());
+        const mw = createAnalyticsMiddleware(store, fixedClock(), null, {
+            gate: onGate,
+        });
         await mw({ method: "tools/list", params: {} }, undefined, async () => ({
             tools: [],
         }));
@@ -93,7 +104,9 @@ describe("createAnalyticsMiddleware", () => {
         broken.recordEvent = async () => {
             throw new Error("storage down");
         };
-        const mw = createAnalyticsMiddleware(broken, fixedClock());
+        const mw = createAnalyticsMiddleware(broken, fixedClock(), null, {
+            gate: onGate,
+        });
         const result = { content: [] };
         await expect(mw({ method: "tools/call", params: { name: "x" } }, undefined, async () => result)).resolves.toBe(result);
         await flush();
@@ -102,11 +115,13 @@ describe("createAnalyticsMiddleware", () => {
 describe("installAnalytics gating", () => {
     const originalAnalytics = process.env.ENPILINK_ANALYTICS;
     const originalStorage = process.env.ENPILINK_STORAGE;
+    const originalNodeEnv = process.env.NODE_ENV;
     beforeEach(() => {
         setActiveStorage(null);
     });
     afterEach(() => {
         setActiveStorage(null);
+        setCaptureGate({ enabled: false, sampleRate: 1 });
         if (originalAnalytics === undefined) {
             delete process.env.ENPILINK_ANALYTICS;
         }
@@ -119,33 +134,69 @@ describe("installAnalytics gating", () => {
         else {
             process.env.ENPILINK_STORAGE = originalStorage;
         }
+        if (originalNodeEnv === undefined) {
+            delete process.env.NODE_ENV;
+        }
+        else {
+            process.env.NODE_ENV = originalNodeEnv;
+        }
     });
-    it("returns null and creates no adapter when disabled", async () => {
+    it("activates a default (memory) storage in dev even when analytics is OFF", async () => {
         delete process.env.ENPILINK_ANALYTICS;
+        delete process.env.ENPILINK_STORAGE; // default = memory in dev
+        delete process.env.NODE_ENV; // dev
         const result = await installAnalytics();
-        expect(result).toBeNull();
-        expect(getActiveStorage()).toBeNull();
+        // Storage is activated (so the config/observability UI can persist) ...
+        expect(result).not.toBeNull();
+        expect(getActiveStorage()).toBe(result?.storage);
+        // ... but capture stays OFF until the runtime toggle / env enables it.
+        expect(getCaptureGate().enabled).toBe(false);
+        await result?.storage.close();
     });
-    it("does NOT create a sqlite db file when disabled", async () => {
+    it("does NOT create a sqlite db file in dev when storage is the default (memory)", async () => {
         delete process.env.ENPILINK_ANALYTICS;
-        process.env.ENPILINK_STORAGE = "sqlite";
+        delete process.env.ENPILINK_STORAGE; // default = memory => no file
+        delete process.env.NODE_ENV;
         const dbPath = `${process.cwd()}/enpilink.db`;
         const preexisting = existsSync(dbPath);
-        await installAnalytics();
+        const result = await installAnalytics();
         if (!preexisting) {
             expect(existsSync(dbPath)).toBe(false);
         }
+        await result?.storage.close();
     });
-    it("resolves + inits + registers the active storage when enabled", async () => {
+    it("activates NOTHING in prod when analytics is OFF (no admin)", async () => {
+        delete process.env.ENPILINK_ANALYTICS;
+        process.env.NODE_ENV = "production";
+        const result = await installAnalytics();
+        expect(result).toBeNull();
+        expect(getActiveStorage()).toBeNull();
+    });
+    it("sets capture ON from env (env override) when ENPILINK_ANALYTICS=1", async () => {
         process.env.ENPILINK_ANALYTICS = "1";
         process.env.ENPILINK_STORAGE = "memory";
+        delete process.env.NODE_ENV;
         const result = await installAnalytics();
         expect(result).not.toBeNull();
         expect(result?.entry.filter).toBe("request");
         expect(typeof result?.entry.handler).toBe("function");
         expect(getActiveStorage()).toBe(result?.storage);
+        // env override -> gate enabled regardless of any DB value.
+        expect(getCaptureGate().enabled).toBe(true);
         await result?.storage.close();
     });
+    it("REUSES an already-active storage and never double-inits", async () => {
+        const existing = new MemoryStorageAdapter();
+        await existing.init();
+        setActiveStorage(existing);
+        process.env.ENPILINK_ANALYTICS = "1";
+        delete process.env.NODE_ENV;
+        const result = await installAnalytics();
+        // Same instance reused; no second adapter created.
+        expect(result?.storage).toBe(existing);
+        expect(getActiveStorage()).toBe(existing);
+        await existing.close();
+    });
 });
 describe("serverLog capture", () => {
     beforeEach(() => setActiveStorage(null));

package/dist/server/analytics.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"analytics.test.js","sourceRoot":"","sources":["../../src/server/analytics.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAG3D,kEAAkE;AAClE,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAEzD,6DAA6D;AAC7D,SAAS,UAAU;IACjB,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAW,CAAC;AAChE,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAChD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,QAAQ,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACtC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,IAAI,KAA2B,CAAC;IAChC,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,KAAK,GAAG,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,GAAG,yBAAyB,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,EAAE,CAClB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EACnD,SAAS,EACT,KAAK,IAAI,EAAE,CAAC,MAAM,CACnB,CAAC;QACF,MAAM,KAAK,EAAE,CAAC;QAEd,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAA0B;YAC/C,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,YAAY;YACpB,EAAE,EAAE,CAAC;YACL,EAAE,EAAE,IAAI;SACT,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,GAAG,yBAAyB,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1D,MAAM,EAAE,CACN,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAClD,SAAS,EACT,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAC7C,CAAC;QACF,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,EAAE,GAAG,yBAAyB,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1D,MAAM,MAAM,CACV,EAAE,CACA,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EACpD,SAAS,EACT,KAAK,IAAI,EAAE;YACT,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC,CACF,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,EAAE,GAAG,yBAAyB,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1D,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACrE,KAAK,EAAE,EAAE;SACV,CAAC,CAAC,CAAC;QACJ,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC1C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,CAAC,WAAW,GAAG,KAAK,IAAI,EAAE;YAC9B,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC,CAAC;QACF,MAAM,EAAE,GAAG,yBAAyB,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC/B,MAAM,MAAM,CACV,EAAE,CACA,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAC/C,SAAS,EACT,KAAK,IAAI,EAAE,CAAC,MAAM,CACnB,CACF,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,MAAM,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACzD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAErD,UAAU,CAAC,GAAG,EAAE;QACd,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;QACrD,CAAC;QACD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,eAAe,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,QAAQ,CAAC;QACxC,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC;QAC9C,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,gBAAgB,EAAE,CAAC;QACzB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,GAAG,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,QAAQ,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,UAAU,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,SAAS,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAExC,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACzC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACzD,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACzC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,CAAC,SAAS,GAAG,KAAK,IAAI,EAAE;YAC3B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC,CAAC;QACF,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACnD,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { existsSync } from \"node:fs\";\nimport { afterEach, beforeEach, describe, expect, it } from \"vitest\";\nimport {\n  analyticsEnabled,\n  createAnalyticsMiddleware,\n  installAnalytics,\n} from \"./analytics.js\";\nimport { getActiveStorage, serverLog, setActiveStorage } from \"./log-sink.js\";\nimport { MemoryStorageAdapter } from \"./storage/memory.js\";\nimport type { AnalyticsEvent } from \"./storage/types.js\";\n\n/** Flush the fire-and-forget recordEvent/appendLog microtasks. */\nconst flush = () => new Promise((r) => setTimeout(r, 0));\n\n/** A fixed clock: 1000 at start, +5ms on the second read. */\nfunction fixedClock(): () => number {\n  const ticks = [1000, 1005];\n  let i = 0;\n  return () => ticks[Math.min(i++, ticks.length - 1)] as number;\n}\n\ndescribe(\"analyticsEnabled\", () => {\n  const original = process.env.ENPILINK_ANALYTICS;\n  afterEach(() => {\n    if (original === undefined) {\n      delete process.env.ENPILINK_ANALYTICS;\n    } else {\n      process.env.ENPILINK_ANALYTICS = original;\n    }\n  });\n\n  it(\"is off by default\", () => {\n    delete process.env.ENPILINK_ANALYTICS;\n    expect(analyticsEnabled()).toBe(false);\n  });\n\n  it(\"accepts 1/true/yes/on (case-insensitive)\", () => {\n    for (const v of [\"1\", \"true\", \"TRUE\", \"yes\", \"on\", \" True \"]) {\n      process.env.ENPILINK_ANALYTICS = v;\n      expect(analyticsEnabled()).toBe(true);\n    }\n  });\n\n  it(\"rejects other values\", () => {\n    for (const v of [\"0\", \"false\", \"\", \"off\", \"no\"]) {\n      process.env.ENPILINK_ANALYTICS = v;\n      expect(analyticsEnabled()).toBe(false);\n    }\n  });\n});\n\ndescribe(\"createAnalyticsMiddleware\", () => {\n  let store: MemoryStorageAdapter;\n  beforeEach(async () => {\n    store = new MemoryStorageAdapter({ cap: 100 });\n    await store.init();\n  });\n\n  it(\"records a tool_call event on success with tool, ms, ok\", async () => {\n    const mw = createAnalyticsMiddleware(store, fixedClock());\n    const result = { content: [{ type: \"text\", text: \"hi\" }] };\n    const ret = await mw(\n      { method: \"tools/call\", params: { name: \"greet\" } },\n      undefined,\n      async () => result,\n    );\n    await flush();\n\n    expect(ret).toBe(result);\n    const [e] = await store.queryEvents({});\n    expect(e).toMatchObject<Partial<AnalyticsEvent>>({\n      type: \"tool_call\",\n      tool: \"greet\",\n      method: \"tools/call\",\n      ms: 5,\n      ok: true,\n    });\n    expect(e?.ts).toBe(1000);\n    expect(e?.error).toBeUndefined();\n  });\n\n  it(\"records ok=false when the result has isError\", async () => {\n    const mw = createAnalyticsMiddleware(store, fixedClock());\n    await mw(\n      { method: \"tools/call\", params: { name: \"boom\" } },\n      undefined,\n      async () => ({ isError: true, content: [] }),\n    );\n    await flush();\n    const [e] = await store.queryEvents({});\n    expect(e).toMatchObject({ tool: \"boom\", ok: false });\n  });\n\n  it(\"records the event AND rethrows on a thrown error\", async () => {\n    const mw = createAnalyticsMiddleware(store, fixedClock());\n    await expect(\n      mw(\n        { method: \"tools/call\", params: { name: \"kaboom\" } },\n        undefined,\n        async () => {\n          throw new Error(\"nope\");\n        },\n      ),\n    ).rejects.toThrow(\"nope\");\n    await flush();\n    const [e] = await store.queryEvents({});\n    expect(e).toMatchObject({ tool: \"kaboom\", ok: false, error: \"nope\" });\n  });\n\n  it(\"captures the method but no tool for non-tools/call requests\", async () => {\n    const mw = createAnalyticsMiddleware(store, fixedClock());\n    await mw({ method: \"tools/list\", params: {} }, undefined, async () => ({\n      tools: [],\n    }));\n    await flush();\n    const [e] = await store.queryEvents({});\n    expect(e?.method).toBe(\"tools/list\");\n    expect(e?.tool).toBeUndefined();\n  });\n\n  it(\"never breaks the call when storage.recordEvent throws\", async () => {\n    const broken = new MemoryStorageAdapter();\n    await broken.init();\n    broken.recordEvent = async () => {\n      throw new Error(\"storage down\");\n    };\n    const mw = createAnalyticsMiddleware(broken, fixedClock());\n    const result = { content: [] };\n    await expect(\n      mw(\n        { method: \"tools/call\", params: { name: \"x\" } },\n        undefined,\n        async () => result,\n      ),\n    ).resolves.toBe(result);\n    await flush();\n  });\n});\n\ndescribe(\"installAnalytics gating\", () => {\n  const originalAnalytics = process.env.ENPILINK_ANALYTICS;\n  const originalStorage = process.env.ENPILINK_STORAGE;\n\n  beforeEach(() => {\n    setActiveStorage(null);\n  });\n  afterEach(() => {\n    setActiveStorage(null);\n    if (originalAnalytics === undefined) {\n      delete process.env.ENPILINK_ANALYTICS;\n    } else {\n      process.env.ENPILINK_ANALYTICS = originalAnalytics;\n    }\n    if (originalStorage === undefined) {\n      delete process.env.ENPILINK_STORAGE;\n    } else {\n      process.env.ENPILINK_STORAGE = originalStorage;\n    }\n  });\n\n  it(\"returns null and creates no adapter when disabled\", async () => {\n    delete process.env.ENPILINK_ANALYTICS;\n    const result = await installAnalytics();\n    expect(result).toBeNull();\n    expect(getActiveStorage()).toBeNull();\n  });\n\n  it(\"does NOT create a sqlite db file when disabled\", async () => {\n    delete process.env.ENPILINK_ANALYTICS;\n    process.env.ENPILINK_STORAGE = \"sqlite\";\n    const dbPath = `${process.cwd()}/enpilink.db`;\n    const preexisting = existsSync(dbPath);\n    await installAnalytics();\n    if (!preexisting) {\n      expect(existsSync(dbPath)).toBe(false);\n    }\n  });\n\n  it(\"resolves + inits + registers the active storage when enabled\", async () => {\n    process.env.ENPILINK_ANALYTICS = \"1\";\n    process.env.ENPILINK_STORAGE = \"memory\";\n    const result = await installAnalytics();\n    expect(result).not.toBeNull();\n    expect(result?.entry.filter).toBe(\"request\");\n    expect(typeof result?.entry.handler).toBe(\"function\");\n    expect(getActiveStorage()).toBe(result?.storage);\n    await result?.storage.close();\n  });\n});\n\ndescribe(\"serverLog capture\", () => {\n  beforeEach(() => setActiveStorage(null));\n  afterEach(() => setActiveStorage(null));\n\n  it(\"is a no-op sink (no storage) when no active storage\", () => {\n    expect(() => serverLog(\"info\", \"hello\")).not.toThrow();\n  });\n\n  it(\"mirrors logs to the active storage when set\", async () => {\n    const store = new MemoryStorageAdapter();\n    await store.init();\n    setActiveStorage(store);\n    serverLog(\"error\", \"boom\", { code: 1 });\n    await flush();\n    const [l] = await store.queryLogs({});\n    expect(l).toMatchObject({ level: \"error\", msg: \"boom\" });\n    expect(l?.data).toEqual({ code: 1 });\n    await store.close();\n  });\n\n  it(\"swallows storage errors\", async () => {\n    const store = new MemoryStorageAdapter();\n    await store.init();\n    store.appendLog = async () => {\n      throw new Error(\"down\");\n    };\n    setActiveStorage(store);\n    expect(() => serverLog(\"info\", \"x\")).not.toThrow();\n    await flush();\n    await store.close();\n  });\n});\n"]}
+{"version":3,"file":"analytics.test.js","sourceRoot":"","sources":["../../src/server/analytics.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAG3D,kEAAkE;AAClE,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAEzD,6DAA6D;AAC7D,SAAS,UAAU;IACjB,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAW,CAAC;AAChE,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAChD,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,QAAQ,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACtC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,kFAAkF;AAClF,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;AAExD,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,IAAI,KAA2B,CAAC;IAChC,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,KAAK,GAAG,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,GAAG,yBAAyB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE;YAC9D,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,EAAE,CAClB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EACnD,SAAS,EACT,KAAK,IAAI,EAAE,CAAC,MAAM,CACnB,CAAC;QACF,MAAM,KAAK,EAAE,CAAC;QAEd,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAA0B;YAC/C,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,YAAY;YACpB,EAAE,EAAE,CAAC;YACL,EAAE,EAAE,IAAI;SACT,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,GAAG,yBAAyB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE;YAC9D,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,EAAE,CACN,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAClD,SAAS,EACT,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAC7C,CAAC;QACF,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,EAAE,GAAG,yBAAyB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE;YAC9D,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,MAAM,CACV,EAAE,CACA,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EACpD,SAAS,EACT,KAAK,IAAI,EAAE;YACT,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC,CACF,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,EAAE,GAAG,yBAAyB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE;YAC9D,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACrE,KAAK,EAAE,EAAE;SACV,CAAC,CAAC,CAAC;QACJ,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC1C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,CAAC,WAAW,GAAG,KAAK,IAAI,EAAE;YAC9B,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC,CAAC;QACF,MAAM,EAAE,GAAG,yBAAyB,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE;YAC/D,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC/B,MAAM,MAAM,CACV,EAAE,CACA,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAC/C,SAAS,EACT,KAAK,IAAI,EAAE,CAAC,MAAM,CACnB,CACF,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,MAAM,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACzD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACrD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IAE7C,UAAU,CAAC,GAAG,EAAE;QACd,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvB,cAAc,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QAClD,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;QACrD,CAAC;QACD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,eAAe,CAAC;QACjD,CAAC;QACD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,eAAe,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACtC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,0BAA0B;QAC/D,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM;QACnC,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,wEAAwE;QACxE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjD,uEAAuE;QACvE,MAAM,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACtC,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,8BAA8B;QACnE,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC;QAC9C,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,YAAY,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,GAAG,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,QAAQ,CAAC;QACxC,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjD,2DAA2D;QAC3D,MAAM,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,QAAQ,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC5C,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,GAAG,CAAC;QACrC,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,mDAAmD;QACnD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,UAAU,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,SAAS,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAExC,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACzC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACzD,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACzC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,CAAC,SAAS,GAAG,KAAK,IAAI,EAAE;YAC3B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC,CAAC;QACF,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACnD,MAAM,KAAK,EAAE,CAAC;QACd,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { existsSync } from \"node:fs\";\nimport { afterEach, beforeEach, describe, expect, it } from \"vitest\";\nimport {\n  analyticsEnabled,\n  createAnalyticsMiddleware,\n  installAnalytics,\n} from \"./analytics.js\";\nimport { getCaptureGate, setCaptureGate } from \"./capture-gate.js\";\nimport { getActiveStorage, serverLog, setActiveStorage } from \"./log-sink.js\";\nimport { MemoryStorageAdapter } from \"./storage/memory.js\";\nimport type { AnalyticsEvent } from \"./storage/types.js\";\n\n/** Flush the fire-and-forget recordEvent/appendLog microtasks. */\nconst flush = () => new Promise((r) => setTimeout(r, 0));\n\n/** A fixed clock: 1000 at start, +5ms on the second read. */\nfunction fixedClock(): () => number {\n  const ticks = [1000, 1005];\n  let i = 0;\n  return () => ticks[Math.min(i++, ticks.length - 1)] as number;\n}\n\ndescribe(\"analyticsEnabled\", () => {\n  const original = process.env.ENPILINK_ANALYTICS;\n  afterEach(() => {\n    if (original === undefined) {\n      delete process.env.ENPILINK_ANALYTICS;\n    } else {\n      process.env.ENPILINK_ANALYTICS = original;\n    }\n  });\n\n  it(\"is off by default\", () => {\n    delete process.env.ENPILINK_ANALYTICS;\n    expect(analyticsEnabled()).toBe(false);\n  });\n\n  it(\"accepts 1/true/yes/on (case-insensitive)\", () => {\n    for (const v of [\"1\", \"true\", \"TRUE\", \"yes\", \"on\", \" True \"]) {\n      process.env.ENPILINK_ANALYTICS = v;\n      expect(analyticsEnabled()).toBe(true);\n    }\n  });\n\n  it(\"rejects other values\", () => {\n    for (const v of [\"0\", \"false\", \"\", \"off\", \"no\"]) {\n      process.env.ENPILINK_ANALYTICS = v;\n      expect(analyticsEnabled()).toBe(false);\n    }\n  });\n});\n\n/** A gate that always records (analytics on, full sample) — for capture tests. */\nconst onGate = () => ({ enabled: true, sampleRate: 1 });\n\ndescribe(\"createAnalyticsMiddleware\", () => {\n  let store: MemoryStorageAdapter;\n  beforeEach(async () => {\n    store = new MemoryStorageAdapter({ cap: 100 });\n    await store.init();\n  });\n\n  it(\"records a tool_call event on success with tool, ms, ok\", async () => {\n    const mw = createAnalyticsMiddleware(store, fixedClock(), null, {\n      gate: onGate,\n    });\n    const result = { content: [{ type: \"text\", text: \"hi\" }] };\n    const ret = await mw(\n      { method: \"tools/call\", params: { name: \"greet\" } },\n      undefined,\n      async () => result,\n    );\n    await flush();\n\n    expect(ret).toBe(result);\n    const [e] = await store.queryEvents({});\n    expect(e).toMatchObject<Partial<AnalyticsEvent>>({\n      type: \"tool_call\",\n      tool: \"greet\",\n      method: \"tools/call\",\n      ms: 5,\n      ok: true,\n    });\n    expect(e?.ts).toBe(1000);\n    expect(e?.error).toBeUndefined();\n  });\n\n  it(\"records ok=false when the result has isError\", async () => {\n    const mw = createAnalyticsMiddleware(store, fixedClock(), null, {\n      gate: onGate,\n    });\n    await mw(\n      { method: \"tools/call\", params: { name: \"boom\" } },\n      undefined,\n      async () => ({ isError: true, content: [] }),\n    );\n    await flush();\n    const [e] = await store.queryEvents({});\n    expect(e).toMatchObject({ tool: \"boom\", ok: false });\n  });\n\n  it(\"records the event AND rethrows on a thrown error\", async () => {\n    const mw = createAnalyticsMiddleware(store, fixedClock(), null, {\n      gate: onGate,\n    });\n    await expect(\n      mw(\n        { method: \"tools/call\", params: { name: \"kaboom\" } },\n        undefined,\n        async () => {\n          throw new Error(\"nope\");\n        },\n      ),\n    ).rejects.toThrow(\"nope\");\n    await flush();\n    const [e] = await store.queryEvents({});\n    expect(e).toMatchObject({ tool: \"kaboom\", ok: false, error: \"nope\" });\n  });\n\n  it(\"captures the method but no tool for non-tools/call requests\", async () => {\n    const mw = createAnalyticsMiddleware(store, fixedClock(), null, {\n      gate: onGate,\n    });\n    await mw({ method: \"tools/list\", params: {} }, undefined, async () => ({\n      tools: [],\n    }));\n    await flush();\n    const [e] = await store.queryEvents({});\n    expect(e?.method).toBe(\"tools/list\");\n    expect(e?.tool).toBeUndefined();\n  });\n\n  it(\"never breaks the call when storage.recordEvent throws\", async () => {\n    const broken = new MemoryStorageAdapter();\n    await broken.init();\n    broken.recordEvent = async () => {\n      throw new Error(\"storage down\");\n    };\n    const mw = createAnalyticsMiddleware(broken, fixedClock(), null, {\n      gate: onGate,\n    });\n    const result = { content: [] };\n    await expect(\n      mw(\n        { method: \"tools/call\", params: { name: \"x\" } },\n        undefined,\n        async () => result,\n      ),\n    ).resolves.toBe(result);\n    await flush();\n  });\n});\n\ndescribe(\"installAnalytics gating\", () => {\n  const originalAnalytics = process.env.ENPILINK_ANALYTICS;\n  const originalStorage = process.env.ENPILINK_STORAGE;\n  const originalNodeEnv = process.env.NODE_ENV;\n\n  beforeEach(() => {\n    setActiveStorage(null);\n  });\n  afterEach(() => {\n    setActiveStorage(null);\n    setCaptureGate({ enabled: false, sampleRate: 1 });\n    if (originalAnalytics === undefined) {\n      delete process.env.ENPILINK_ANALYTICS;\n    } else {\n      process.env.ENPILINK_ANALYTICS = originalAnalytics;\n    }\n    if (originalStorage === undefined) {\n      delete process.env.ENPILINK_STORAGE;\n    } else {\n      process.env.ENPILINK_STORAGE = originalStorage;\n    }\n    if (originalNodeEnv === undefined) {\n      delete process.env.NODE_ENV;\n    } else {\n      process.env.NODE_ENV = originalNodeEnv;\n    }\n  });\n\n  it(\"activates a default (memory) storage in dev even when analytics is OFF\", async () => {\n    delete process.env.ENPILINK_ANALYTICS;\n    delete process.env.ENPILINK_STORAGE; // default = memory in dev\n    delete process.env.NODE_ENV; // dev\n    const result = await installAnalytics();\n    // Storage is activated (so the config/observability UI can persist) ...\n    expect(result).not.toBeNull();\n    expect(getActiveStorage()).toBe(result?.storage);\n    // ... but capture stays OFF until the runtime toggle / env enables it.\n    expect(getCaptureGate().enabled).toBe(false);\n    await result?.storage.close();\n  });\n\n  it(\"does NOT create a sqlite db file in dev when storage is the default (memory)\", async () => {\n    delete process.env.ENPILINK_ANALYTICS;\n    delete process.env.ENPILINK_STORAGE; // default = memory => no file\n    delete process.env.NODE_ENV;\n    const dbPath = `${process.cwd()}/enpilink.db`;\n    const preexisting = existsSync(dbPath);\n    const result = await installAnalytics();\n    if (!preexisting) {\n      expect(existsSync(dbPath)).toBe(false);\n    }\n    await result?.storage.close();\n  });\n\n  it(\"activates NOTHING in prod when analytics is OFF (no admin)\", async () => {\n    delete process.env.ENPILINK_ANALYTICS;\n    process.env.NODE_ENV = \"production\";\n    const result = await installAnalytics();\n    expect(result).toBeNull();\n    expect(getActiveStorage()).toBeNull();\n  });\n\n  it(\"sets capture ON from env (env override) when ENPILINK_ANALYTICS=1\", async () => {\n    process.env.ENPILINK_ANALYTICS = \"1\";\n    process.env.ENPILINK_STORAGE = \"memory\";\n    delete process.env.NODE_ENV;\n    const result = await installAnalytics();\n    expect(result).not.toBeNull();\n    expect(result?.entry.filter).toBe(\"request\");\n    expect(typeof result?.entry.handler).toBe(\"function\");\n    expect(getActiveStorage()).toBe(result?.storage);\n    // env override -> gate enabled regardless of any DB value.\n    expect(getCaptureGate().enabled).toBe(true);\n    await result?.storage.close();\n  });\n\n  it(\"REUSES an already-active storage and never double-inits\", async () => {\n    const existing = new MemoryStorageAdapter();\n    await existing.init();\n    setActiveStorage(existing);\n    process.env.ENPILINK_ANALYTICS = \"1\";\n    delete process.env.NODE_ENV;\n    const result = await installAnalytics();\n    // Same instance reused; no second adapter created.\n    expect(result?.storage).toBe(existing);\n    expect(getActiveStorage()).toBe(existing);\n    await existing.close();\n  });\n});\n\ndescribe(\"serverLog capture\", () => {\n  beforeEach(() => setActiveStorage(null));\n  afterEach(() => setActiveStorage(null));\n\n  it(\"is a no-op sink (no storage) when no active storage\", () => {\n    expect(() => serverLog(\"info\", \"hello\")).not.toThrow();\n  });\n\n  it(\"mirrors logs to the active storage when set\", async () => {\n    const store = new MemoryStorageAdapter();\n    await store.init();\n    setActiveStorage(store);\n    serverLog(\"error\", \"boom\", { code: 1 });\n    await flush();\n    const [l] = await store.queryLogs({});\n    expect(l).toMatchObject({ level: \"error\", msg: \"boom\" });\n    expect(l?.data).toEqual({ code: 1 });\n    await store.close();\n  });\n\n  it(\"swallows storage errors\", async () => {\n    const store = new MemoryStorageAdapter();\n    await store.init();\n    store.appendLog = async () => {\n      throw new Error(\"down\");\n    };\n    setActiveStorage(store);\n    expect(() => serverLog(\"info\", \"x\")).not.toThrow();\n    await flush();\n    await store.close();\n  });\n});\n"]}

package/dist/server/capture-gate.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Live capture gate for analytics (bugfix milestone).
+ *
+ * The analytics capture middleware is installed whenever there is an active
+ * {@link StorageAdapter} (so the dashboard/observability always has a backing
+ * store), but whether it ACTUALLY records an event is decided per-call by this
+ * gate. The gate mirrors the resolved runtime config value of
+ * `analytics.enabled` (+ `analytics.sampleRate`) using the documented
+ * env > file > db > default precedence.
+ *
+ * Why a cached gate instead of resolving config on every tool call:
+ * - {@link resolveConfig} does an async DB read; doing that on the hot path of
+ *   every tool call would measurably slow calls and could throw into the path.
+ * - Instead we resolve ONCE at install and re-resolve only when config is
+ *   written (the config router calls {@link refreshCaptureGate} after a
+ *   successful PUT/DELETE/preset). The middleware reads a cheap, synchronous,
+ *   in-memory snapshot — no DB read, no async, never throws.
+ *
+ * Result: toggling `analytics.enabled` in the Configuration UI takes effect for
+ * subsequent tool calls WITHOUT a process restart. An env override of
+ * `ENPILINK_ANALYTICS` still wins (env > db) because `resolveConfig` applies the
+ * same precedence — so an operator who pins the env var env-locks the toggle.
+ *
+ * No backfill: enabling analytics starts capturing forward only; it does not
+ * retroactively synthesize events for calls made while it was off.
+ */
+/** The cheap, synchronous snapshot read on the hot path. */
+export interface CaptureGate {
+    /** Whether to record events at all (resolved `analytics.enabled`). */
+    enabled: boolean;
+    /** Fraction of calls to record `[0, 1]` (resolved `analytics.sampleRate`). */
+    sampleRate: number;
+}
+/** Read the current capture gate (synchronous, cheap, never throws). */
+export declare function getCaptureGate(): CaptureGate;
+/**
+ * TEST-ONLY / mock: force the gate to a known value without resolving config.
+ * `--mock` mode uses this to force capture on for the session.
+ */
+export declare function setCaptureGate(next: CaptureGate): void;
+/**
+ * Re-resolve the capture gate from the active storage + env/file. Called at
+ * install and after every config write. Fire-and-forget friendly: it never
+ * throws (a resolve failure leaves the previous gate in place). Returns the
+ * freshly resolved gate for callers/tests that want to await it.
+ */
+export declare function refreshCaptureGate(): Promise<CaptureGate>;

package/dist/server/capture-gate.js

@@ -0,0 +1,39 @@
+import { resolveConfig } from "./config/index.js";
+import { getActiveStorage } from "./log-sink.js";
+/**
+ * The current gate. Defaults to OFF so that, before the first resolve (or if a
+ * resolve fails), capture stays off — preserving the off-by-default guarantee.
+ */
+let gate = { enabled: false, sampleRate: 1 };
+/** Read the current capture gate (synchronous, cheap, never throws). */
+export function getCaptureGate() {
+    return gate;
+}
+/**
+ * TEST-ONLY / mock: force the gate to a known value without resolving config.
+ * `--mock` mode uses this to force capture on for the session.
+ */
+export function setCaptureGate(next) {
+    gate = next;
+}
+/**
+ * Re-resolve the capture gate from the active storage + env/file. Called at
+ * install and after every config write. Fire-and-forget friendly: it never
+ * throws (a resolve failure leaves the previous gate in place). Returns the
+ * freshly resolved gate for callers/tests that want to await it.
+ */
+export async function refreshCaptureGate() {
+    try {
+        const { values } = await resolveConfig(getActiveStorage());
+        gate = {
+            enabled: values["analytics.enabled"] === true,
+            sampleRate: values["analytics.sampleRate"],
+        };
+    }
+    catch {
+        // Keep the previous gate; a config-resolve failure must never break or
+        // change capture behavior abruptly.
+    }
+    return gate;
+}
+//# sourceMappingURL=capture-gate.js.map

package/dist/server/capture-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-gate.js","sourceRoot":"","sources":["../../src/server/capture-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAqCjD;;;GAGG;AACH,IAAI,IAAI,GAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAE1D,wEAAwE;AACxE,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAiB;IAC9C,IAAI,GAAG,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC3D,IAAI,GAAG;YACL,OAAO,EAAE,MAAM,CAAC,mBAAmB,CAAC,KAAK,IAAI;YAC7C,UAAU,EAAE,MAAM,CAAC,sBAAsB,CAAC;SAC3C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,oCAAoC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { resolveConfig } from \"./config/index.js\";\nimport { getActiveStorage } from \"./log-sink.js\";\n\n/**\n * Live capture gate for analytics (bugfix milestone).\n *\n * The analytics capture middleware is installed whenever there is an active\n * {@link StorageAdapter} (so the dashboard/observability always has a backing\n * store), but whether it ACTUALLY records an event is decided per-call by this\n * gate. The gate mirrors the resolved runtime config value of\n * `analytics.enabled` (+ `analytics.sampleRate`) using the documented\n * env > file > db > default precedence.\n *\n * Why a cached gate instead of resolving config on every tool call:\n * - {@link resolveConfig} does an async DB read; doing that on the hot path of\n *   every tool call would measurably slow calls and could throw into the path.\n * - Instead we resolve ONCE at install and re-resolve only when config is\n *   written (the config router calls {@link refreshCaptureGate} after a\n *   successful PUT/DELETE/preset). The middleware reads a cheap, synchronous,\n *   in-memory snapshot — no DB read, no async, never throws.\n *\n * Result: toggling `analytics.enabled` in the Configuration UI takes effect for\n * subsequent tool calls WITHOUT a process restart. An env override of\n * `ENPILINK_ANALYTICS` still wins (env > db) because `resolveConfig` applies the\n * same precedence — so an operator who pins the env var env-locks the toggle.\n *\n * No backfill: enabling analytics starts capturing forward only; it does not\n * retroactively synthesize events for calls made while it was off.\n */\n\n/** The cheap, synchronous snapshot read on the hot path. */\nexport interface CaptureGate {\n  /** Whether to record events at all (resolved `analytics.enabled`). */\n  enabled: boolean;\n  /** Fraction of calls to record `[0, 1]` (resolved `analytics.sampleRate`). */\n  sampleRate: number;\n}\n\n/**\n * The current gate. Defaults to OFF so that, before the first resolve (or if a\n * resolve fails), capture stays off — preserving the off-by-default guarantee.\n */\nlet gate: CaptureGate = { enabled: false, sampleRate: 1 };\n\n/** Read the current capture gate (synchronous, cheap, never throws). */\nexport function getCaptureGate(): CaptureGate {\n  return gate;\n}\n\n/**\n * TEST-ONLY / mock: force the gate to a known value without resolving config.\n * `--mock` mode uses this to force capture on for the session.\n */\nexport function setCaptureGate(next: CaptureGate): void {\n  gate = next;\n}\n\n/**\n * Re-resolve the capture gate from the active storage + env/file. Called at\n * install and after every config write. Fire-and-forget friendly: it never\n * throws (a resolve failure leaves the previous gate in place). Returns the\n * freshly resolved gate for callers/tests that want to await it.\n */\nexport async function refreshCaptureGate(): Promise<CaptureGate> {\n  try {\n    const { values } = await resolveConfig(getActiveStorage());\n    gate = {\n      enabled: values[\"analytics.enabled\"] === true,\n      sampleRate: values[\"analytics.sampleRate\"],\n    };\n  } catch {\n    // Keep the previous gate; a config-resolve failure must never break or\n    // change capture behavior abruptly.\n  }\n  return gate;\n}\n"]}

package/dist/server/capture-gate.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/server/capture-gate.test.js

@@ -0,0 +1,124 @@
+import express from "express";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { createAnalyticsMiddleware } from "./analytics.js";
+import { getCaptureGate, refreshCaptureGate, setCaptureGate, } from "./capture-gate.js";
+import { createConfigRouter } from "./config/index.js";
+import { setActiveStorage } from "./log-sink.js";
+import { MemoryStorageAdapter } from "./storage/memory.js";
+/** Flush the fire-and-forget recordEvent microtask. */
+const flush = () => new Promise((r) => setTimeout(r, 0));
+/** Issue a real HTTP request against an Express app on an ephemeral port. */
+async function request(app, method, url, body) {
+    const { createServer } = await import("node:http");
+    const server = createServer(app);
+    await new Promise((r) => server.listen(0, r));
+    const addr = server.address();
+    const port = typeof addr === "object" && addr ? addr.port : 0;
+    try {
+        const res = await fetch(`http://127.0.0.1:${port}${url}`, {
+            method,
+            headers: body ? { "content-type": "application/json" } : undefined,
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        return { status: res.status };
+    }
+    finally {
+        await new Promise((r) => server.close(() => r()));
+    }
+}
+/** A fixed clock so latency is deterministic. */
+function fixedClock() {
+    const ticks = [1000, 1005];
+    let i = 0;
+    return () => ticks[Math.min(i++, ticks.length - 1)];
+}
+/** Call the middleware once (simulating a tool call). */
+async function callTool(mw) {
+    await mw({ method: "tools/call", params: { name: "greet" } }, undefined, async () => ({ content: [] }));
+    await flush();
+}
+describe("live analytics toggle (capture gate)", () => {
+    const original = process.env.ENPILINK_ANALYTICS;
+    beforeEach(() => {
+        setActiveStorage(null);
+        setCaptureGate({ enabled: false, sampleRate: 1 });
+        delete process.env.ENPILINK_ANALYTICS;
+    });
+    afterEach(() => {
+        setActiveStorage(null);
+        setCaptureGate({ enabled: false, sampleRate: 1 });
+        if (original === undefined) {
+            delete process.env.ENPILINK_ANALYTICS;
+        }
+        else {
+            process.env.ENPILINK_ANALYTICS = original;
+        }
+    });
+    it("config write to analytics.enabled flips capture ON live (no restart)", async () => {
+        const storage = new MemoryStorageAdapter();
+        await storage.init();
+        setActiveStorage(storage);
+        // Capture middleware is installed against the live gate (the production
+        // wiring) — initially gate is OFF.
+        await refreshCaptureGate();
+        expect(getCaptureGate().enabled).toBe(false);
+        const mw = createAnalyticsMiddleware(storage, fixedClock());
+        // A tool call while OFF records nothing.
+        await callTool(mw);
+        expect((await storage.queryEvents({})).length).toBe(0);
+        // Toggle analytics.enabled ON via the config router (the UI path).
+        const app = express();
+        app.use(express.json());
+        app.use(createConfigRouter()); // defaults to getActiveStorage()
+        const put = await request(app, "PUT", "/__enpilink/config/analytics.enabled", {
+            value: true,
+        });
+        expect(put.status).toBe(200);
+        // Gate flipped live — subsequent calls are captured WITHOUT a restart.
+        expect(getCaptureGate().enabled).toBe(true);
+        await callTool(mw);
+        expect((await storage.queryEvents({})).length).toBe(1);
+        // Toggle OFF again → capture stops; the existing row is not removed.
+        const off = await request(app, "PUT", "/__enpilink/config/analytics.enabled", { value: false });
+        expect(off.status).toBe(200);
+        expect(getCaptureGate().enabled).toBe(false);
+        await callTool(mw);
+        expect((await storage.queryEvents({})).length).toBe(1);
+        await storage.close();
+    });
+    it("env override env-locks analytics.enabled (env > db)", async () => {
+        process.env.ENPILINK_ANALYTICS = "1";
+        const storage = new MemoryStorageAdapter();
+        await storage.init();
+        // Persist a DB value of false — the env override must still win.
+        await storage.setConfig("analytics.enabled", false);
+        setActiveStorage(storage);
+        await refreshCaptureGate();
+        expect(getCaptureGate().enabled).toBe(true);
+        // The config UI must render the key env-locked (read-only) and a PUT must
+        // be rejected with 409 (pinned via env).
+        const app = express();
+        app.use(express.json());
+        app.use(createConfigRouter());
+        const put = await request(app, "PUT", "/__enpilink/config/analytics.enabled", {
+            value: true,
+        });
+        expect(put.status).toBe(409);
+        await storage.close();
+    });
+    it("sampleRate=0 records nothing even when enabled", async () => {
+        const storage = new MemoryStorageAdapter();
+        await storage.init();
+        setActiveStorage(storage);
+        setCaptureGate({ enabled: true, sampleRate: 0 });
+        const mw = createAnalyticsMiddleware(storage, fixedClock(), null, {
+            // RNG never matters at sampleRate 0; assert it's not even consulted by
+            // forcing a value that would otherwise pass.
+            rng: () => 0,
+        });
+        await callTool(mw);
+        expect((await storage.queryEvents({})).length).toBe(0);
+        await storage.close();
+    });
+});
+//# sourceMappingURL=capture-gate.test.js.map

package/dist/server/capture-gate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-gate.test.js","sourceRoot":"","sources":["../../src/server/capture-gate.test.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D,uDAAuD;AACvD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAEzD,6EAA6E;AAC7E,KAAK,UAAU,OAAO,CACpB,GAAoB,EACpB,MAAc,EACd,GAAW,EACX,IAAc;IAEd,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,GAAG,GAAG,EAAE,EAAE;YACxD,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,SAAS;YAClE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,iDAAiD;AACjD,SAAS,UAAU;IACjB,MAAM,KAAK,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAW,CAAC;AAChE,CAAC;AAED,yDAAyD;AACzD,KAAK,UAAU,QAAQ,CAAC,EAAgD;IACtE,MAAM,EAAE,CACN,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EACnD,SAAS,EACT,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAC9B,CAAC;IACF,MAAM,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAEhD,UAAU,CAAC,GAAG,EAAE;QACd,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvB,cAAc,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvB,cAAc,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,QAAQ,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1B,wEAAwE;QACxE,mCAAmC;QACnC,MAAM,kBAAkB,EAAE,CAAC;QAC3B,MAAM,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QAE5D,yCAAyC;QACzC,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnB,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEvD,mEAAmE;QACnE,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,iCAAiC;QAChE,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,GAAG,EACH,KAAK,EACL,sCAAsC,EACtC;YACE,KAAK,EAAE,IAAI;SACZ,CACF,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE7B,uEAAuE;QACvE,MAAM,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnB,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEvD,qEAAqE;QACrE,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,GAAG,EACH,KAAK,EACL,sCAAsC,EACtC,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnB,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEvD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,GAAG,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,iEAAiE;QACjE,MAAM,OAAO,CAAC,SAAS,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QACpD,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1B,MAAM,kBAAkB,EAAE,CAAC;QAC3B,MAAM,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5C,0EAA0E;QAC1E,yCAAyC;QACzC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,GAAG,EACH,KAAK,EACL,sCAAsC,EACtC;YACE,KAAK,EAAE,IAAI;SACZ,CACF,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,OAAO,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC3C,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC1B,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,yBAAyB,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE;YAChE,uEAAuE;YACvE,6CAA6C;YAC7C,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;SACb,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnB,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import express from \"express\";\nimport { afterEach, beforeEach, describe, expect, it } from \"vitest\";\nimport { createAnalyticsMiddleware } from \"./analytics.js\";\nimport {\n  getCaptureGate,\n  refreshCaptureGate,\n  setCaptureGate,\n} from \"./capture-gate.js\";\nimport { createConfigRouter } from \"./config/index.js\";\nimport { setActiveStorage } from \"./log-sink.js\";\nimport { MemoryStorageAdapter } from \"./storage/memory.js\";\n\n/** Flush the fire-and-forget recordEvent microtask. */\nconst flush = () => new Promise((r) => setTimeout(r, 0));\n\n/** Issue a real HTTP request against an Express app on an ephemeral port. */\nasync function request(\n  app: express.Express,\n  method: string,\n  url: string,\n  body?: unknown,\n): Promise<{ status: number }> {\n  const { createServer } = await import(\"node:http\");\n  const server = createServer(app);\n  await new Promise<void>((r) => server.listen(0, r));\n  const addr = server.address();\n  const port = typeof addr === \"object\" && addr ? addr.port : 0;\n  try {\n    const res = await fetch(`http://127.0.0.1:${port}${url}`, {\n      method,\n      headers: body ? { \"content-type\": \"application/json\" } : undefined,\n      body: body ? JSON.stringify(body) : undefined,\n    });\n    return { status: res.status };\n  } finally {\n    await new Promise<void>((r) => server.close(() => r()));\n  }\n}\n\n/** A fixed clock so latency is deterministic. */\nfunction fixedClock(): () => number {\n  const ticks = [1000, 1005];\n  let i = 0;\n  return () => ticks[Math.min(i++, ticks.length - 1)] as number;\n}\n\n/** Call the middleware once (simulating a tool call). */\nasync function callTool(mw: ReturnType<typeof createAnalyticsMiddleware>) {\n  await mw(\n    { method: \"tools/call\", params: { name: \"greet\" } },\n    undefined,\n    async () => ({ content: [] }),\n  );\n  await flush();\n}\n\ndescribe(\"live analytics toggle (capture gate)\", () => {\n  const original = process.env.ENPILINK_ANALYTICS;\n\n  beforeEach(() => {\n    setActiveStorage(null);\n    setCaptureGate({ enabled: false, sampleRate: 1 });\n    delete process.env.ENPILINK_ANALYTICS;\n  });\n  afterEach(() => {\n    setActiveStorage(null);\n    setCaptureGate({ enabled: false, sampleRate: 1 });\n    if (original === undefined) {\n      delete process.env.ENPILINK_ANALYTICS;\n    } else {\n      process.env.ENPILINK_ANALYTICS = original;\n    }\n  });\n\n  it(\"config write to analytics.enabled flips capture ON live (no restart)\", async () => {\n    const storage = new MemoryStorageAdapter();\n    await storage.init();\n    setActiveStorage(storage);\n    // Capture middleware is installed against the live gate (the production\n    // wiring) — initially gate is OFF.\n    await refreshCaptureGate();\n    expect(getCaptureGate().enabled).toBe(false);\n    const mw = createAnalyticsMiddleware(storage, fixedClock());\n\n    // A tool call while OFF records nothing.\n    await callTool(mw);\n    expect((await storage.queryEvents({})).length).toBe(0);\n\n    // Toggle analytics.enabled ON via the config router (the UI path).\n    const app = express();\n    app.use(express.json());\n    app.use(createConfigRouter()); // defaults to getActiveStorage()\n    const put = await request(\n      app,\n      \"PUT\",\n      \"/__enpilink/config/analytics.enabled\",\n      {\n        value: true,\n      },\n    );\n    expect(put.status).toBe(200);\n\n    // Gate flipped live — subsequent calls are captured WITHOUT a restart.\n    expect(getCaptureGate().enabled).toBe(true);\n    await callTool(mw);\n    expect((await storage.queryEvents({})).length).toBe(1);\n\n    // Toggle OFF again → capture stops; the existing row is not removed.\n    const off = await request(\n      app,\n      \"PUT\",\n      \"/__enpilink/config/analytics.enabled\",\n      { value: false },\n    );\n    expect(off.status).toBe(200);\n    expect(getCaptureGate().enabled).toBe(false);\n    await callTool(mw);\n    expect((await storage.queryEvents({})).length).toBe(1);\n\n    await storage.close();\n  });\n\n  it(\"env override env-locks analytics.enabled (env > db)\", async () => {\n    process.env.ENPILINK_ANALYTICS = \"1\";\n    const storage = new MemoryStorageAdapter();\n    await storage.init();\n    // Persist a DB value of false — the env override must still win.\n    await storage.setConfig(\"analytics.enabled\", false);\n    setActiveStorage(storage);\n    await refreshCaptureGate();\n    expect(getCaptureGate().enabled).toBe(true);\n\n    // The config UI must render the key env-locked (read-only) and a PUT must\n    // be rejected with 409 (pinned via env).\n    const app = express();\n    app.use(express.json());\n    app.use(createConfigRouter());\n    const put = await request(\n      app,\n      \"PUT\",\n      \"/__enpilink/config/analytics.enabled\",\n      {\n        value: true,\n      },\n    );\n    expect(put.status).toBe(409);\n\n    await storage.close();\n  });\n\n  it(\"sampleRate=0 records nothing even when enabled\", async () => {\n    const storage = new MemoryStorageAdapter();\n    await storage.init();\n    setActiveStorage(storage);\n    setCaptureGate({ enabled: true, sampleRate: 0 });\n    const mw = createAnalyticsMiddleware(storage, fixedClock(), null, {\n      // RNG never matters at sampleRate 0; assert it's not even consulted by\n      // forcing a value that would otherwise pass.\n      rng: () => 0,\n    });\n    await callTool(mw);\n    expect((await storage.queryEvents({})).length).toBe(0);\n    await storage.close();\n  });\n});\n"]}

package/dist/server/config/router.js

@@ -1,4 +1,5 @@
 import express, {} from "express";
+import { refreshCaptureGate } from "../capture-gate.js";
 import { getActiveStorage } from "../log-sink.js";
 import { getPreset, PRESETS } from "./presets.js";
 import { resolveConfig, validateConfigWrite, } from "./resolve.js";
@@ -110,6 +111,9 @@ export function createConfigRouter(getStorage = getActiveStorage) {
                 });
             }
         }
+        // A preset may have changed analytics.enabled/sampleRate — refresh the live
+        // capture gate so it takes effect without a restart.
+        await refreshCaptureGate();
         res.json({ ok: true, preset: preset.name, applied, skipped });
     });
     // PUT /config/:key — set a runtime or restart-tier key.
@@ -128,6 +132,9 @@ export function createConfigRouter(getStorage = getActiveStorage) {
         }
         try {
             await guard.storage.setConfig(key, check.value, actorOf(req));
+            // Refresh the live capture gate so a toggle of analytics.enabled /
+            // analytics.sampleRate takes effect immediately (no restart).
+            await refreshCaptureGate();
             res.json({
                 ok: true,
                 key,
@@ -150,6 +157,9 @@ export function createConfigRouter(getStorage = getActiveStorage) {
         }
         try {
             await guard.storage.clearConfig(guard.key, actorOf(req));
+            // Resetting analytics.enabled / sampleRate to default also re-gates
+            // capture live.
+            await refreshCaptureGate();
             res.json({
                 ok: true,
                 key: guard.key,

package/dist/server/config/router.js.map

@@ -1 +1 @@
-{"version":3,"file":"router.js","sourceRoot":"","sources":["../../../src/server/config/router.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAe,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAEL,aAAa,EACb,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAEL,cAAc,EACd,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,WAAW,GACZ,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,kBAAkB,CAChC,aAA0C,gBAAgB;IAE1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,oBAAoB,CAAC;IAElC,mEAAmE;IACnE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC;YACnD,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,qEAAqE;IACrE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC9C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAwB,EAAE,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAwB,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2DAA2D;IAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,wCAAwC;aAChD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAE3B,MAAM,OAAO,GAAsC,EAAE,CAAC;QACtD,MAAM,OAAO,GAAsC,EAAE,CAAC;QAEtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,oEAAoE;YACpE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACnD,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAgB,CAAC,CAAC;YAC5C,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,cAAc,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC9D,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC3C,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC;oBACX,GAAG;oBACH,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc;iBAC5D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,wDAAwD;IACxD,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QAEtB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAuC,CAAC;QACzD,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,IAAI;gBACR,GAAG;gBACH,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,eAAe,EAAE,YAAY,CAAC,GAAG,CAAC;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,IAAI;gBACR,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,KAAK,EAAE,IAAI;gBACX,eAAe,EAAE,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC;aACzC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAMD;;;;GAIG;AACH,KAAK,UAAU,UAAU,CACvB,GAAW,EACX,UAAuC;IAEvC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,GAAG,GAAG,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,IAAI,GAAG,+CAA+C;SAC9D,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,IAAI,GAAG,6CAA6C;SAC5D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACvE,CAAC;IAED,kEAAkE;IAClE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAC9E,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,IAAI,GAAG,mBAAmB,OAAO,CAAC,MAAM,6BAA6B;SAC7E,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,0CAA0C;SAClD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAgB,EAAE,OAAO,EAAE,CAAC;AACtD,CAAC;AAED,6EAA6E;AAC7E,SAAS,OAAO,CAAC,GAAoB;IACnC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC9C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1E,CAAC","sourcesContent":["import express, { type Router } from \"express\";\nimport { getActiveStorage } from \"../log-sink.js\";\nimport type { ConfigAuditEntry, StorageAdapter } from \"../storage/types.js\";\nimport { getPreset, PRESETS } from \"./presets.js\";\nimport {\n  type ResolvedSetting,\n  resolveConfig,\n  validateConfigWrite,\n} from \"./resolve.js\";\nimport {\n  type ConfigKey,\n  isBootstrapKey,\n  isKnownKey,\n  isRestartKey,\n  isRuntimeKey,\n  isSecretKey,\n} from \"./schema.js\";\n\n/**\n * Config admin API. Pure core — reads the SAME active {@link StorageAdapter}\n * the analytics middleware writes to, via {@link getActiveStorage}. Does NOT\n * depend on `@enpilink/console`.\n *\n * Mounted dev-only (unauth, localhost) and in the prod admin plane (behind\n * bearer auth) at `/__enpilink/config`.\n *\n * Routes:\n * - `GET    /__enpilink/config`               — all settings (rich metadata +\n *   source + secret/envLocked/modified/restartRequired flags).\n * - `PUT    /__enpilink/config/:key`          — set a RUNTIME or RESTART-tier\n *   key. Rejects secret / `admin` / env-locked / unknown keys with a clear 4xx.\n * - `DELETE /__enpilink/config/:key`          — reset a key to its default\n *   (clears the DB override). Same guardrails as PUT.\n * - `GET    /__enpilink/config/presets`       — list presets + the values each\n *   would set.\n * - `POST   /__enpilink/config/preset/:name`  — apply a preset (validate +\n *   persist + audit each runtime key; skip env-locked).\n * - `GET    /__enpilink/config/audit`         — recent config-change history.\n *\n * Disabled-safe: with no active storage, reads fall back to env/file/defaults\n * and NEVER 500. Writes require a storage adapter (409 when none).\n *\n * SECURITY: `admin`, `adminAuthToken`, unknown keys, and env-locked keys can\n * NEVER be written here. `adminAuthToken` is never persisted nor returned in\n * plaintext.\n */\nexport function createConfigRouter(\n  getStorage: () => StorageAdapter | null = getActiveStorage,\n): Router {\n  const router = express.Router();\n  const base = \"/__enpilink/config\";\n\n  // GET /config — full resolved settings. Secrets masked; never 500.\n  router.get(base, async (_req, res) => {\n    try {\n      const resolved = await resolveConfig(getStorage());\n      res.json({ settings: resolved.settings });\n    } catch {\n      const resolved = await resolveConfig(null);\n      res.json({ settings: resolved.settings });\n    }\n  });\n\n  // GET /config/presets — list presets + the values each would set.\n  router.get(`${base}/presets`, (_req, res) => {\n    res.json({ presets: Object.values(PRESETS) });\n  });\n\n  // GET /config/audit — change history (most recent first). Never 500.\n  router.get(`${base}/audit`, async (_req, res) => {\n    const storage = getStorage();\n    if (!storage) {\n      res.json({ enabled: false, audit: [] as ConfigAuditEntry[] });\n      return;\n    }\n    try {\n      const audit = await storage.getConfigAudit();\n      res.json({ enabled: true, audit });\n    } catch {\n      res.json({ enabled: false, audit: [] as ConfigAuditEntry[] });\n    }\n  });\n\n  // POST /config/preset/:name — apply a runtime-only preset.\n  router.post(`${base}/preset/:name`, async (req, res) => {\n    const preset = getPreset(req.params.name);\n    if (!preset) {\n      res.status(404).json({ error: `Unknown preset \"${req.params.name}\"` });\n      return;\n    }\n    const storage = getStorage();\n    if (!storage) {\n      res.status(409).json({\n        error: \"No active storage; cannot apply preset\",\n      });\n      return;\n    }\n\n    const resolved = await resolveConfig(storage);\n    const byKey = new Map(resolved.settings.map((s) => [s.key, s]));\n    const actor = actorOf(req);\n\n    const applied: { key: string; value: unknown }[] = [];\n    const skipped: { key: string; reason: string }[] = [];\n\n    for (const [key, value] of Object.entries(preset.values)) {\n      // Presets only ever touch runtime keys; double-check the guardrail.\n      if (!isRuntimeKey(key)) {\n        skipped.push({ key, reason: \"not a runtime key\" });\n        continue;\n      }\n      const setting = byKey.get(key as ConfigKey);\n      if (setting?.envLocked) {\n        skipped.push({ key, reason: `pinned via ${setting.source}` });\n        continue;\n      }\n      const check = validateConfigWrite(key, value);\n      if (!check.ok) {\n        skipped.push({ key, reason: check.error });\n        continue;\n      }\n      try {\n        await storage.setConfig(key, check.value, actor);\n        applied.push({ key, value: check.value });\n      } catch (err) {\n        skipped.push({\n          key,\n          reason: err instanceof Error ? err.message : \"write failed\",\n        });\n      }\n    }\n\n    res.json({ ok: true, preset: preset.name, applied, skipped });\n  });\n\n  // PUT /config/:key — set a runtime or restart-tier key.\n  router.put(`${base}/:key`, async (req, res) => {\n    const guard = await writeGuard(req.params.key, getStorage);\n    if (!guard.ok) {\n      res.status(guard.status).json({ error: guard.error });\n      return;\n    }\n    const key = guard.key;\n\n    const body = req.body as { value?: unknown } | undefined;\n    const check = validateConfigWrite(key, body?.value);\n    if (!check.ok) {\n      res.status(400).json({ error: check.error });\n      return;\n    }\n\n    try {\n      await guard.storage.setConfig(key, check.value, actorOf(req));\n      res.json({\n        ok: true,\n        key,\n        value: check.value,\n        restartRequired: isRestartKey(key),\n      });\n    } catch (err) {\n      res.status(500).json({\n        error: err instanceof Error ? err.message : \"Failed to write config\",\n      });\n    }\n  });\n\n  // DELETE /config/:key — reset to default (clear the DB override).\n  router.delete(`${base}/:key`, async (req, res) => {\n    const guard = await writeGuard(req.params.key, getStorage);\n    if (!guard.ok) {\n      res.status(guard.status).json({ error: guard.error });\n      return;\n    }\n    try {\n      await guard.storage.clearConfig(guard.key, actorOf(req));\n      res.json({\n        ok: true,\n        key: guard.key,\n        reset: true,\n        restartRequired: isRestartKey(guard.key),\n      });\n    } catch (err) {\n      res.status(500).json({\n        error: err instanceof Error ? err.message : \"Failed to reset config\",\n      });\n    }\n  });\n\n  return router;\n}\n\ntype WriteGuardResult =\n  | { ok: true; key: ConfigKey; storage: StorageAdapter }\n  | { ok: false; status: number; error: string };\n\n/**\n * Shared guardrail for PUT + DELETE. Rejects unknown / secret / `admin` /\n * env-locked keys and requires an active storage adapter. Only runtime and\n * non-env-locked restart-tier keys pass.\n */\nasync function writeGuard(\n  key: string,\n  getStorage: () => StorageAdapter | null,\n): Promise<WriteGuardResult> {\n  if (!isKnownKey(key)) {\n    return { ok: false, status: 404, error: `Unknown config key \"${key}\"` };\n  }\n  if (isSecretKey(key)) {\n    return {\n      ok: false,\n      status: 403,\n      error: `\"${key}\" is a secret and is set via environment only`,\n    };\n  }\n  // Bootstrap keys are writable ONLY if they are restart-tier (port/storage/\n  // dbPath). `admin` (and any other bootstrap key) is env-only / read-only.\n  if (isBootstrapKey(key) && !isRestartKey(key)) {\n    return {\n      ok: false,\n      status: 403,\n      error: `\"${key}\" is environment-only and is read-only here`,\n    };\n  }\n  if (!isRuntimeKey(key) && !isRestartKey(key)) {\n    return { ok: false, status: 403, error: `\"${key}\" is not editable` };\n  }\n\n  // Reject if the key is currently pinned (env-locked) by env/file.\n  const resolved = await resolveConfig(getStorage());\n  const setting = resolved.settings.find((s: ResolvedSetting) => s.key === key);\n  if (setting?.envLocked) {\n    return {\n      ok: false,\n      status: 409,\n      error: `\"${key}\" is pinned via ${setting.source} and cannot be changed here`,\n    };\n  }\n\n  const storage = getStorage();\n  if (!storage) {\n    return {\n      ok: false,\n      status: 409,\n      error: \"No active storage; cannot persist config\",\n    };\n  }\n  return { ok: true, key: key as ConfigKey, storage };\n}\n\n/** Best-effort actor attribution for audit rows (no auth in dev → \"dev\"). */\nfunction actorOf(req: express.Request): string {\n  const header = req.header(\"x-enpilink-actor\");\n  return typeof header === \"string\" && header.length > 0 ? header : \"dev\";\n}\n"]}
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../../src/server/config/router.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAe,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAEL,aAAa,EACb,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAEL,cAAc,EACd,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,WAAW,GACZ,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,kBAAkB,CAChC,aAA0C,gBAAgB;IAE1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,oBAAoB,CAAC;IAElC,mEAAmE;IACnE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACnC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC;YACnD,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,qEAAqE;IACrE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC9C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAwB,EAAE,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAwB,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2DAA2D;IAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACrD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,wCAAwC;aAChD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAE3B,MAAM,OAAO,GAAsC,EAAE,CAAC;QACtD,MAAM,OAAO,GAAsC,EAAE,CAAC;QAEtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,oEAAoE;YACpE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACnD,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAgB,CAAC,CAAC;YAC5C,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,cAAc,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC9D,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC3C,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC;oBACX,GAAG;oBACH,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc;iBAC5D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,qDAAqD;QACrD,MAAM,kBAAkB,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,wDAAwD;IACxD,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QAEtB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAuC,CAAC;QACzD,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,mEAAmE;YACnE,8DAA8D;YAC9D,MAAM,kBAAkB,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,IAAI;gBACR,GAAG;gBACH,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,eAAe,EAAE,YAAY,CAAC,GAAG,CAAC;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACzD,oEAAoE;YACpE,gBAAgB;YAChB,MAAM,kBAAkB,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,IAAI;gBACR,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,KAAK,EAAE,IAAI;gBACX,eAAe,EAAE,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC;aACzC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAMD;;;;GAIG;AACH,KAAK,UAAU,UAAU,CACvB,GAAW,EACX,UAAuC;IAEvC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,GAAG,GAAG,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,IAAI,GAAG,+CAA+C;SAC9D,CAAC;IACJ,CAAC;IACD,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,IAAI,GAAG,6CAA6C;SAC5D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACvE,CAAC;IAED,kEAAkE;IAClE,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAC9E,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,IAAI,GAAG,mBAAmB,OAAO,CAAC,MAAM,6BAA6B;SAC7E,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,0CAA0C;SAClD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAgB,EAAE,OAAO,EAAE,CAAC;AACtD,CAAC;AAED,6EAA6E;AAC7E,SAAS,OAAO,CAAC,GAAoB;IACnC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC9C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1E,CAAC","sourcesContent":["import express, { type Router } from \"express\";\nimport { refreshCaptureGate } from \"../capture-gate.js\";\nimport { getActiveStorage } from \"../log-sink.js\";\nimport type { ConfigAuditEntry, StorageAdapter } from \"../storage/types.js\";\nimport { getPreset, PRESETS } from \"./presets.js\";\nimport {\n  type ResolvedSetting,\n  resolveConfig,\n  validateConfigWrite,\n} from \"./resolve.js\";\nimport {\n  type ConfigKey,\n  isBootstrapKey,\n  isKnownKey,\n  isRestartKey,\n  isRuntimeKey,\n  isSecretKey,\n} from \"./schema.js\";\n\n/**\n * Config admin API. Pure core — reads the SAME active {@link StorageAdapter}\n * the analytics middleware writes to, via {@link getActiveStorage}. Does NOT\n * depend on `@enpilink/console`.\n *\n * Mounted dev-only (unauth, localhost) and in the prod admin plane (behind\n * bearer auth) at `/__enpilink/config`.\n *\n * Routes:\n * - `GET    /__enpilink/config`               — all settings (rich metadata +\n *   source + secret/envLocked/modified/restartRequired flags).\n * - `PUT    /__enpilink/config/:key`          — set a RUNTIME or RESTART-tier\n *   key. Rejects secret / `admin` / env-locked / unknown keys with a clear 4xx.\n * - `DELETE /__enpilink/config/:key`          — reset a key to its default\n *   (clears the DB override). Same guardrails as PUT.\n * - `GET    /__enpilink/config/presets`       — list presets + the values each\n *   would set.\n * - `POST   /__enpilink/config/preset/:name`  — apply a preset (validate +\n *   persist + audit each runtime key; skip env-locked).\n * - `GET    /__enpilink/config/audit`         — recent config-change history.\n *\n * Disabled-safe: with no active storage, reads fall back to env/file/defaults\n * and NEVER 500. Writes require a storage adapter (409 when none).\n *\n * SECURITY: `admin`, `adminAuthToken`, unknown keys, and env-locked keys can\n * NEVER be written here. `adminAuthToken` is never persisted nor returned in\n * plaintext.\n */\nexport function createConfigRouter(\n  getStorage: () => StorageAdapter | null = getActiveStorage,\n): Router {\n  const router = express.Router();\n  const base = \"/__enpilink/config\";\n\n  // GET /config — full resolved settings. Secrets masked; never 500.\n  router.get(base, async (_req, res) => {\n    try {\n      const resolved = await resolveConfig(getStorage());\n      res.json({ settings: resolved.settings });\n    } catch {\n      const resolved = await resolveConfig(null);\n      res.json({ settings: resolved.settings });\n    }\n  });\n\n  // GET /config/presets — list presets + the values each would set.\n  router.get(`${base}/presets`, (_req, res) => {\n    res.json({ presets: Object.values(PRESETS) });\n  });\n\n  // GET /config/audit — change history (most recent first). Never 500.\n  router.get(`${base}/audit`, async (_req, res) => {\n    const storage = getStorage();\n    if (!storage) {\n      res.json({ enabled: false, audit: [] as ConfigAuditEntry[] });\n      return;\n    }\n    try {\n      const audit = await storage.getConfigAudit();\n      res.json({ enabled: true, audit });\n    } catch {\n      res.json({ enabled: false, audit: [] as ConfigAuditEntry[] });\n    }\n  });\n\n  // POST /config/preset/:name — apply a runtime-only preset.\n  router.post(`${base}/preset/:name`, async (req, res) => {\n    const preset = getPreset(req.params.name);\n    if (!preset) {\n      res.status(404).json({ error: `Unknown preset \"${req.params.name}\"` });\n      return;\n    }\n    const storage = getStorage();\n    if (!storage) {\n      res.status(409).json({\n        error: \"No active storage; cannot apply preset\",\n      });\n      return;\n    }\n\n    const resolved = await resolveConfig(storage);\n    const byKey = new Map(resolved.settings.map((s) => [s.key, s]));\n    const actor = actorOf(req);\n\n    const applied: { key: string; value: unknown }[] = [];\n    const skipped: { key: string; reason: string }[] = [];\n\n    for (const [key, value] of Object.entries(preset.values)) {\n      // Presets only ever touch runtime keys; double-check the guardrail.\n      if (!isRuntimeKey(key)) {\n        skipped.push({ key, reason: \"not a runtime key\" });\n        continue;\n      }\n      const setting = byKey.get(key as ConfigKey);\n      if (setting?.envLocked) {\n        skipped.push({ key, reason: `pinned via ${setting.source}` });\n        continue;\n      }\n      const check = validateConfigWrite(key, value);\n      if (!check.ok) {\n        skipped.push({ key, reason: check.error });\n        continue;\n      }\n      try {\n        await storage.setConfig(key, check.value, actor);\n        applied.push({ key, value: check.value });\n      } catch (err) {\n        skipped.push({\n          key,\n          reason: err instanceof Error ? err.message : \"write failed\",\n        });\n      }\n    }\n\n    // A preset may have changed analytics.enabled/sampleRate — refresh the live\n    // capture gate so it takes effect without a restart.\n    await refreshCaptureGate();\n    res.json({ ok: true, preset: preset.name, applied, skipped });\n  });\n\n  // PUT /config/:key — set a runtime or restart-tier key.\n  router.put(`${base}/:key`, async (req, res) => {\n    const guard = await writeGuard(req.params.key, getStorage);\n    if (!guard.ok) {\n      res.status(guard.status).json({ error: guard.error });\n      return;\n    }\n    const key = guard.key;\n\n    const body = req.body as { value?: unknown } | undefined;\n    const check = validateConfigWrite(key, body?.value);\n    if (!check.ok) {\n      res.status(400).json({ error: check.error });\n      return;\n    }\n\n    try {\n      await guard.storage.setConfig(key, check.value, actorOf(req));\n      // Refresh the live capture gate so a toggle of analytics.enabled /\n      // analytics.sampleRate takes effect immediately (no restart).\n      await refreshCaptureGate();\n      res.json({\n        ok: true,\n        key,\n        value: check.value,\n        restartRequired: isRestartKey(key),\n      });\n    } catch (err) {\n      res.status(500).json({\n        error: err instanceof Error ? err.message : \"Failed to write config\",\n      });\n    }\n  });\n\n  // DELETE /config/:key — reset to default (clear the DB override).\n  router.delete(`${base}/:key`, async (req, res) => {\n    const guard = await writeGuard(req.params.key, getStorage);\n    if (!guard.ok) {\n      res.status(guard.status).json({ error: guard.error });\n      return;\n    }\n    try {\n      await guard.storage.clearConfig(guard.key, actorOf(req));\n      // Resetting analytics.enabled / sampleRate to default also re-gates\n      // capture live.\n      await refreshCaptureGate();\n      res.json({\n        ok: true,\n        key: guard.key,\n        reset: true,\n        restartRequired: isRestartKey(guard.key),\n      });\n    } catch (err) {\n      res.status(500).json({\n        error: err instanceof Error ? err.message : \"Failed to reset config\",\n      });\n    }\n  });\n\n  return router;\n}\n\ntype WriteGuardResult =\n  | { ok: true; key: ConfigKey; storage: StorageAdapter }\n  | { ok: false; status: number; error: string };\n\n/**\n * Shared guardrail for PUT + DELETE. Rejects unknown / secret / `admin` /\n * env-locked keys and requires an active storage adapter. Only runtime and\n * non-env-locked restart-tier keys pass.\n */\nasync function writeGuard(\n  key: string,\n  getStorage: () => StorageAdapter | null,\n): Promise<WriteGuardResult> {\n  if (!isKnownKey(key)) {\n    return { ok: false, status: 404, error: `Unknown config key \"${key}\"` };\n  }\n  if (isSecretKey(key)) {\n    return {\n      ok: false,\n      status: 403,\n      error: `\"${key}\" is a secret and is set via environment only`,\n    };\n  }\n  // Bootstrap keys are writable ONLY if they are restart-tier (port/storage/\n  // dbPath). `admin` (and any other bootstrap key) is env-only / read-only.\n  if (isBootstrapKey(key) && !isRestartKey(key)) {\n    return {\n      ok: false,\n      status: 403,\n      error: `\"${key}\" is environment-only and is read-only here`,\n    };\n  }\n  if (!isRuntimeKey(key) && !isRestartKey(key)) {\n    return { ok: false, status: 403, error: `\"${key}\" is not editable` };\n  }\n\n  // Reject if the key is currently pinned (env-locked) by env/file.\n  const resolved = await resolveConfig(getStorage());\n  const setting = resolved.settings.find((s: ResolvedSetting) => s.key === key);\n  if (setting?.envLocked) {\n    return {\n      ok: false,\n      status: 409,\n      error: `\"${key}\" is pinned via ${setting.source} and cannot be changed here`,\n    };\n  }\n\n  const storage = getStorage();\n  if (!storage) {\n    return {\n      ok: false,\n      status: 409,\n      error: \"No active storage; cannot persist config\",\n    };\n  }\n  return { ok: true, key: key as ConfigKey, storage };\n}\n\n/** Best-effort actor attribution for audit rows (no auth in dev → \"dev\"). */\nfunction actorOf(req: express.Request): string {\n  const header = req.header(\"x-enpilink-actor\");\n  return typeof header === \"string\" && header.length > 0 ? header : \"dev\";\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "enpilink",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "enpilink is a framework for building ChatGPT and MCP Apps",
   "repository": {
     "type": "git",
@@ -47,7 +47,7 @@
     "react": ">=18.0.0",
     "react-dom": ">=18.0.0",
     "vite": ">=7.3.1",
-    "@enpilink/console": "1.0.3"
+    "@enpilink/console": "1.0.4"
   },
   "dependencies": {
     "@babel/core": "^7.29.0",