opedd-mcp 0.6.7 → 0.6.8

package/dist/index.js

@@ -640,7 +640,10 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
     // dispatchTool) keeps unit tests, which call dispatchTool directly, silent.
     const start = Date.now();
     const result = await dispatchTool(request.params.name, (request.params.arguments ?? {}));
-    captureToolCall(request.params.name, Date.now() - start, result.isError !== true);
+    // channel:"stdio" lets the channel report separate local (npx) usage from
+    // hosted-gateway usage (channel:"gateway"); the Phase-2 hosted trigger
+    // counts only the latter.
+    captureToolCall(request.params.name, Date.now() - start, result.isError !== true, { channel: "stdio" });
     return result;
 });
 // ─── Tool dispatcher (exported for unit tests) ────────────────────────────────

package/dist/telemetry.js

@@ -37,12 +37,17 @@ export function isTelemetryEnabled() {
  * the privacy invariant directly.
  */
 export function toolCallProperties(tool, durationMs, ok, extra) {
+    // Spread `extra` FIRST so it can never overwrite the privacy-critical /
+    // integrity fields below. Otherwise a future caller passing e.g.
+    // { tool: ... } or { ok: ... } could silently forge metrics or shadow the
+    // canonical fields — the "nothing sensitive by construction" guarantee
+    // must hold even against a coding mistake in a caller.
     return {
+        ...extra,
         tool,
         duration_ms: Math.round(durationMs),
         ok,
         server_version: SERVER_VERSION,
-        ...extra,
     };
 }
 let client = null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opedd-mcp",
-  "version": "0.6.7",
+  "version": "0.6.8",
   "description": "Licensed, rights-cleared content for AI agents \u2014 verifiable license keys, on-chain proof, and EU AI Act attestation. The MCP alternative to unlicensed scraping for RAG and AI search.",
   "type": "module",
   "main": "dist/index.js",