purecontext-mcp 1.0.1

package/dist/core/security.js

@@ -0,0 +1,133 @@
+import { resolve, sep, basename } from 'path';
+import { realpathSync, openSync, readSync, closeSync } from 'fs';
+import { PureContextError } from './errors.js';
+// ─── SecurityError ────────────────────────────────────────────────────────────
+export class SecurityError extends PureContextError {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+// ─── Path validation ──────────────────────────────────────────────────────────
+/**
+ * Resolve `filePath` relative to `projectRoot` and verify it stays within the
+ * project root.  Throws `SecurityError('path_traversal')` on escape attempts.
+ * Returns the absolute resolved path.
+ */
+export function validatePath(filePath, projectRoot) {
+    const resolvedRoot = resolve(projectRoot);
+    const resolvedFile = resolve(projectRoot, filePath);
+    if (resolvedFile !== resolvedRoot &&
+        !resolvedFile.startsWith(resolvedRoot + sep)) {
+        throw new SecurityError('path_traversal', `Path traversal detected: "${filePath}"`);
+    }
+    return resolvedFile;
+}
+// ─── Symlink check ────────────────────────────────────────────────────────────
+/**
+ * Verify that `resolvedPath` does not escape `projectRoot` after all symlinks
+ * are resolved.  Throws `SecurityError('symlink_escape')` if it does.
+ * No-ops when the path does not exist (not yet created files are not a threat).
+ */
+export function checkSymlinkEscape(resolvedPath, projectRoot) {
+    // Resolve symlinks in the root itself (e.g. macOS /tmp → /private/tmp)
+    let realRoot;
+    try {
+        realRoot = realpathSync(projectRoot);
+    }
+    catch {
+        realRoot = resolve(projectRoot);
+    }
+    let realPath;
+    try {
+        realPath = realpathSync(resolvedPath);
+    }
+    catch {
+        return; // File doesn't exist — nothing to check
+    }
+    if (realPath !== realRoot &&
+        !realPath.startsWith(realRoot + sep)) {
+        throw new SecurityError('symlink_escape', `Symlink resolves outside project root: "${resolvedPath}"`);
+    }
+}
+// ─── Secret-file detection ────────────────────────────────────────────────────
+const SECRET_PATTERNS = [
+    /^\.env$/i,
+    /^\.env\./i,
+    /\.pem$/i,
+    /\.key$/i,
+    /\.p12$/i,
+    /\.pfx$/i,
+    /\.crt$/i,
+    /\.cer$/i,
+    /^id_rsa(\.pub)?$/i,
+    /^id_ed25519(\.pub)?$/i,
+    /^id_ecdsa(\.pub)?$/i,
+    /^id_dsa(\.pub)?$/i,
+    /^credentials\.(json|yaml|yml)$/i,
+    /^secrets\.(json|yaml|yml)$/i,
+    /^serviceaccountkey.*\.json$/i,
+    /.*-service-account\.json$/i,
+    /\.token$/i,
+    /\.secret$/i,
+];
+/**
+ * Returns `true` when the file name matches a known credential/secret pattern
+ * and should be excluded from indexing.  Case-insensitive.
+ */
+export function isSecretFile(filePath) {
+    const name = basename(filePath);
+    return SECRET_PATTERNS.some((re) => re.test(name));
+}
+// ─── Binary detection ─────────────────────────────────────────────────────────
+const BINARY_PEEK_BYTES = 8192;
+/**
+ * Returns `true` when the content buffer contains a null byte, which is a
+ * reliable indicator of binary (non-text) content.  Only the first 8192 bytes
+ * are examined.
+ */
+export function isBinaryFile(content) {
+    const len = Math.min(content.length, BINARY_PEEK_BYTES);
+    for (let i = 0; i < len; i++) {
+        if (content[i] === 0)
+            return true;
+    }
+    return false;
+}
+/**
+ * Read up to `BINARY_PEEK_BYTES` from the beginning of a file for binary
+ * detection without loading the whole file into memory.
+ * Returns an empty buffer on read failure.
+ */
+export function peekFileContent(absPath) {
+    const buf = Buffer.allocUnsafe(BINARY_PEEK_BYTES);
+    let fd = -1;
+    try {
+        fd = openSync(absPath, 'r');
+        const bytesRead = readSync(fd, buf, 0, BINARY_PEEK_BYTES, 0);
+        return buf.subarray(0, bytesRead);
+    }
+    catch {
+        return Buffer.alloc(0);
+    }
+    finally {
+        if (fd >= 0) {
+            try {
+                closeSync(fd);
+            }
+            catch { /* ignore */ }
+        }
+    }
+}
+// ─── File-size check ──────────────────────────────────────────────────────────
+export const DEFAULT_MAX_FILE_BYTES = 1_048_576; // 1 MB
+/**
+ * Throws `SecurityError('file_too_large')` when `size` exceeds `maxBytes`.
+ */
+export function checkFileSize(size, maxBytes = DEFAULT_MAX_FILE_BYTES) {
+    if (size > maxBytes) {
+        throw new SecurityError('file_too_large', `File size ${size} bytes exceeds limit of ${maxBytes} bytes`);
+    }
+}
+//# sourceMappingURL=security.js.map

package/dist/core/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/core/security.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,iFAAiF;AAEjF,MAAM,OAAO,aAAc,SAAQ,gBAAgB;IAE/B;IADlB,YACkB,IAA4D,EAC5E,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAwD;IAI9E,CAAC;CACF;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,WAAmB;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACpD,IACE,YAAY,KAAK,YAAY;QAC7B,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,EAC5C,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,gBAAgB,EAChB,6BAA6B,QAAQ,GAAG,CACzC,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,YAAoB,EAAE,WAAmB;IAC1E,uEAAuE;IACvE,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,wCAAwC;IAClD,CAAC;IAED,IACE,QAAQ,KAAK,QAAQ;QACrB,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC,EACpC,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,gBAAgB,EAChB,2CAA2C,YAAY,GAAG,CAC3D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,MAAM,eAAe,GAAa;IAChC,UAAU;IACV,WAAW;IACX,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,mBAAmB;IACnB,uBAAuB;IACvB,qBAAqB;IACrB,mBAAmB;IACnB,iCAAiC;IACjC,6BAA6B;IAC7B,8BAA8B;IAC9B,4BAA4B;IAC5B,WAAW;IACX,YAAY;CACb,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,iFAAiF;AAEjF,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAClD,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACZ,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;QAC7D,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACZ,IAAI,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC,CAAC,OAAO;AAExD;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAmB,sBAAsB;IAEzC,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;QACpB,MAAM,IAAI,aAAa,CACrB,gBAAgB,EAChB,aAAa,IAAI,2BAA2B,QAAQ,QAAQ,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/core/telemetry.d.ts

@@ -0,0 +1,19 @@
+export interface TelemetryEvent {
+    event: string;
+    [key: string]: unknown;
+}
+/**
+ * Returns true when telemetry is enabled in config.
+ * Synchronous — config is loaded at startup.
+ */
+export declare function isTelemetryEnabled(): boolean;
+/**
+ * Track an anonymous telemetry event.
+ *
+ * When disabled: logs at debug level what would have been sent, returns immediately.
+ * When enabled:  appends to ~/.purecontext/telemetry.jsonl, then POSTs to the
+ *                configured endpoint. Network errors are silently discarded.
+ * Never throws.
+ */
+export declare function track(event: TelemetryEvent): Promise<void>;
+//# sourceMappingURL=telemetry.d.ts.map

package/dist/core/telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/core/telemetry.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAmCD;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAM5C;AAED;;;;;;;GAOG;AACH,wBAAsB,KAAK,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA0ChE"}

package/dist/core/telemetry.js

@@ -0,0 +1,101 @@
+import { randomUUID } from 'crypto';
+import { appendFileSync, mkdirSync } from 'fs';
+import { join } from 'path';
+import { homedir, platform } from 'os';
+import { logger } from './logger.js';
+import { getConfig } from '../config/config-loader.js';
+import { VERSION } from '../version.js';
+// ─── Session ID ───────────────────────────────────────────────────────────────
+/**
+ * Random UUID generated once per process start.
+ * Not persisted — no cross-session tracking.
+ */
+const SESSION_ID = randomUUID();
+// ─── PII blocklist ────────────────────────────────────────────────────────────
+/**
+ * Keys that must never appear in a telemetry payload.
+ * If accidentally passed, they are silently dropped.
+ */
+const PII_KEYS = new Set([
+    'filePath', 'path', 'rootPath', 'repoPath', 'clonePath',
+    'name', 'symbolName', 'repoName', 'source', 'content',
+    'signature', 'summary', 'importedNames', 'specifier',
+]);
+function sanitize(event) {
+    const safe = {};
+    for (const [k, v] of Object.entries(event)) {
+        if (PII_KEYS.has(k))
+            continue;
+        // Drop string values that look like file-system paths
+        if (typeof v === 'string' && (v.includes('/') || v.includes('\\')))
+            continue;
+        safe[k] = v;
+    }
+    return safe;
+}
+// ─── Public API ───────────────────────────────────────────────────────────────
+/**
+ * Returns true when telemetry is enabled in config.
+ * Synchronous — config is loaded at startup.
+ */
+export function isTelemetryEnabled() {
+    try {
+        return getConfig().telemetry.enabled;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Track an anonymous telemetry event.
+ *
+ * When disabled: logs at debug level what would have been sent, returns immediately.
+ * When enabled:  appends to ~/.purecontext/telemetry.jsonl, then POSTs to the
+ *                configured endpoint. Network errors are silently discarded.
+ * Never throws.
+ */
+export async function track(event) {
+    const payload = sanitize({
+        ...event,
+        version: VERSION,
+        nodeVersion: process.version.replace(/^v/, ''),
+        platform: platform(),
+        sessionId: SESSION_ID,
+        timestamp: new Date().toISOString(),
+    });
+    if (!isTelemetryEnabled()) {
+        logger.debug(`Telemetry (disabled) — would have sent: ${JSON.stringify(payload)}`);
+        return;
+    }
+    // Always write to local JSONL log so the user can inspect what was sent
+    try {
+        const logDir = join(homedir(), '.purecontext');
+        mkdirSync(logDir, { recursive: true });
+        appendFileSync(join(logDir, 'telemetry.jsonl'), JSON.stringify(payload) + '\n', 'utf8');
+    }
+    catch {
+        // Non-fatal — proceed to network send regardless
+    }
+    // Send to configured endpoint (best-effort)
+    let endpoint;
+    try {
+        endpoint = getConfig().telemetry.endpoint ?? DEFAULT_TELEMETRY_ENDPOINT;
+    }
+    catch {
+        endpoint = DEFAULT_TELEMETRY_ENDPOINT;
+    }
+    try {
+        await fetch(endpoint, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(payload),
+            signal: AbortSignal.timeout(5000),
+        });
+    }
+    catch {
+        // Silently discard network errors — telemetry must never affect the user
+    }
+}
+// ─── Constants ────────────────────────────────────────────────────────────────
+const DEFAULT_TELEMETRY_ENDPOINT = 'https://telemetry.purecontext.dev/v1/event';
+//# sourceMappingURL=telemetry.js.map

package/dist/core/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/core/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AASxC,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;AAEhC,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW;IACvD,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS;IACrD,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW;CACrD,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,KAAqB;IACrC,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAC9B,sDAAsD;QACtD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QAC7E,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC;QACH,OAAO,SAAS,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,KAAqB;IAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC;QACvB,GAAG,KAAK;QACR,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,QAAQ,EAAE,QAAQ,EAAE;QACpB,SAAS,EAAE,UAAU;QACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;IAEH,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAC1B,MAAM,CAAC,KAAK,CAAC,2CAA2C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,wEAAwE;IACxE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;QAC/C,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;IAED,4CAA4C;IAC5C,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,SAAS,EAAE,CAAC,SAAS,CAAC,QAAQ,IAAI,0BAA0B,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,0BAA0B,CAAC;IACxC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,QAAQ,EAAE;YACpB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,MAAM,0BAA0B,GAAG,4CAA4C,CAAC"}

package/dist/core/tenant-context.d.ts

@@ -0,0 +1,22 @@
+/**
+ * TenantContext — identifies the current tenant for a request.
+ *
+ * In single-tenant (stdio) mode, the context is always DEFAULT_TENANT_CONTEXT.
+ * In multi-tenant HTTP mode, the context is derived from the authenticated API key
+ * and attached to each request before calling any service method.
+ *
+ * All data-store operations accept an optional TenantContext. When provided,
+ * queries are scoped with `AND tenant_id = ?` to prevent cross-tenant data access.
+ */
+export declare const DEFAULT_TENANT_ID = "local";
+export interface TenantContext {
+    /** Identifies the owning tenant for data isolation. */
+    tenantId: string;
+    /** Permissions granted to the current request (from API key). */
+    permissions?: string[];
+    /** Rate limit tier identifier (from API key). */
+    rateLimitTier?: string;
+}
+/** Context used in single-tenant / local CLI mode — no auth, no isolation. */
+export declare const DEFAULT_TENANT_CONTEXT: TenantContext;
+//# sourceMappingURL=tenant-context.d.ts.map

package/dist/core/tenant-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-context.d.ts","sourceRoot":"","sources":["../../src/core/tenant-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,eAAO,MAAM,iBAAiB,UAAU,CAAC;AAEzC,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,iDAAiD;IACjD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,8EAA8E;AAC9E,eAAO,MAAM,sBAAsB,EAAE,aAEpC,CAAC"}

package/dist/core/tenant-context.js

@@ -0,0 +1,16 @@
+/**
+ * TenantContext — identifies the current tenant for a request.
+ *
+ * In single-tenant (stdio) mode, the context is always DEFAULT_TENANT_CONTEXT.
+ * In multi-tenant HTTP mode, the context is derived from the authenticated API key
+ * and attached to each request before calling any service method.
+ *
+ * All data-store operations accept an optional TenantContext. When provided,
+ * queries are scoped with `AND tenant_id = ?` to prevent cross-tenant data access.
+ */
+export const DEFAULT_TENANT_ID = 'local';
+/** Context used in single-tenant / local CLI mode — no auth, no isolation. */
+export const DEFAULT_TENANT_CONTEXT = {
+    tenantId: DEFAULT_TENANT_ID,
+};
+//# sourceMappingURL=tenant-context.js.map

package/dist/core/tenant-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-context.js","sourceRoot":"","sources":["../../src/core/tenant-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAWzC,8EAA8E;AAC9E,MAAM,CAAC,MAAM,sBAAsB,GAAkB;IACnD,QAAQ,EAAE,iBAAiB;CAC5B,CAAC"}

package/dist/core/token-tracker.d.ts

@@ -0,0 +1,39 @@
+export declare const BYTES_PER_TOKEN = 4;
+export interface CostEstimates {
+    cost_avoided: Record<string, number>;
+    total_cost_avoided: Record<string, number>;
+}
+/**
+ * Estimate tokens saved by comparing raw file size vs response size.
+ * Returns 0 if response is larger than raw (never negative).
+ */
+export declare function estimateSavings(rawBytes: number, responseBytes: number): number;
+/**
+ * Add tokensSaved to the running total. Flushes to disk every FLUSH_INTERVAL calls.
+ * Returns the new cumulative total.
+ */
+export declare function recordSavings(tokensSaved: number): number;
+/**
+ * Returns the current cumulative total without modifying state.
+ */
+export declare function getTotalSaved(): number;
+/**
+ * Compute cost avoided in USD for a single call and cumulatively,
+ * based on model pricing tiers. Values rounded to 4 decimal places.
+ */
+export declare function costAvoided(tokensSaved: number, totalTokensSaved: number): CostEstimates;
+/**
+ * Resets the cumulative total to zero, both in-memory and on disk.
+ * Returns the previous total before the reset.
+ */
+export declare function resetSavings(): number;
+/**
+ * Returns the timestamp when the current session started (first recordSavings() call).
+ * Returns the current time if recordSavings() has never been called this session.
+ */
+export declare function getSessionStart(): Date;
+/**
+ * Reset in-memory state. For testing only.
+ */
+export declare function _resetForTesting(): void;
+//# sourceMappingURL=token-tracker.d.ts.map

package/dist/core/token-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-tracker.d.ts","sourceRoot":"","sources":["../../src/core/token-tracker.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,eAAe,IAAI,CAAC;AAKjC,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5C;AAsED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAE/E;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAiBzD;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAGtC;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,aAAa,CAUxF;AAED;;;GAGG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAqBrC;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAID;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,IAAI,CAOvC"}

package/dist/core/token-tracker.js

@@ -0,0 +1,153 @@
+import { loadSavings, saveSavings } from './db/savings-store.js';
+import { logger } from './logger.js';
+// ─── Constants ────────────────────────────────────────────────────────────────
+export const BYTES_PER_TOKEN = 4;
+const FLUSH_INTERVAL = 5;
+// ─── Pricing tiers (USD per million input tokens) ─────────────────────────────
+const PRICING_TIERS = {
+    claude_opus_4: 15.0,
+    claude_sonnet_4: 3.0,
+    claude_haiku_4: 0.8,
+    gpt4o: 2.5,
+    gpt4o_mini: 0.15,
+};
+// ─── In-memory state ──────────────────────────────────────────────────────────
+class _State {
+    total = 0;
+    unflushed = 0;
+    callCount = 0;
+    loaded = false;
+    anonId = '';
+    sessionStart = null;
+}
+const state = new _State();
+let handlersRegistered = false;
+// ─── Internal helpers ─────────────────────────────────────────────────────────
+function ensureLoaded() {
+    if (state.loaded)
+        return;
+    const data = loadSavings();
+    state.total = data.total_tokens_saved;
+    state.anonId = data.anon_id;
+    state.loaded = true;
+}
+function flush() {
+    if (state.unflushed === 0)
+        return;
+    try {
+        saveSavings({
+            total_tokens_saved: state.total,
+            anon_id: state.anonId,
+            last_updated: new Date().toISOString(),
+        });
+        state.unflushed = 0;
+        state.callCount = 0;
+    }
+    catch (err) {
+        logger.warn('Failed to flush token savings to disk', { error: String(err) });
+    }
+}
+function registerExitHandlers() {
+    if (handlersRegistered)
+        return;
+    handlersRegistered = true;
+    process.on('exit', () => flush());
+    process.on('SIGTERM', () => {
+        flush();
+        process.exit(0);
+    });
+    process.on('SIGINT', () => {
+        flush();
+        process.exit(0);
+    });
+}
+// ─── Public API ───────────────────────────────────────────────────────────────
+/**
+ * Estimate tokens saved by comparing raw file size vs response size.
+ * Returns 0 if response is larger than raw (never negative).
+ */
+export function estimateSavings(rawBytes, responseBytes) {
+    return Math.max(0, Math.floor((rawBytes - responseBytes) / BYTES_PER_TOKEN));
+}
+/**
+ * Add tokensSaved to the running total. Flushes to disk every FLUSH_INTERVAL calls.
+ * Returns the new cumulative total.
+ */
+export function recordSavings(tokensSaved) {
+    ensureLoaded();
+    registerExitHandlers();
+    if (state.sessionStart === null) {
+        state.sessionStart = new Date();
+    }
+    state.total += tokensSaved;
+    state.unflushed += tokensSaved;
+    state.callCount++;
+    if (state.callCount >= FLUSH_INTERVAL) {
+        flush();
+    }
+    return state.total;
+}
+/**
+ * Returns the current cumulative total without modifying state.
+ */
+export function getTotalSaved() {
+    ensureLoaded();
+    return state.total;
+}
+/**
+ * Compute cost avoided in USD for a single call and cumulatively,
+ * based on model pricing tiers. Values rounded to 4 decimal places.
+ */
+export function costAvoided(tokensSaved, totalTokensSaved) {
+    const cost_avoided = {};
+    const total_cost_avoided = {};
+    for (const [model, ratePerMillion] of Object.entries(PRICING_TIERS)) {
+        cost_avoided[model] = parseFloat((tokensSaved * ratePerMillion / 1_000_000).toFixed(4));
+        total_cost_avoided[model] = parseFloat((totalTokensSaved * ratePerMillion / 1_000_000).toFixed(4));
+    }
+    return { cost_avoided, total_cost_avoided };
+}
+/**
+ * Resets the cumulative total to zero, both in-memory and on disk.
+ * Returns the previous total before the reset.
+ */
+export function resetSavings() {
+    ensureLoaded();
+    const previous = state.total;
+    state.total = 0;
+    state.unflushed = 0;
+    state.callCount = 0;
+    state.sessionStart = null;
+    // Write zeroed state to disk immediately
+    try {
+        saveSavings({
+            total_tokens_saved: 0,
+            anon_id: state.anonId,
+            last_updated: new Date().toISOString(),
+        });
+    }
+    catch (err) {
+        logger.warn('Failed to persist savings reset to disk', { error: String(err) });
+    }
+    return previous;
+}
+/**
+ * Returns the timestamp when the current session started (first recordSavings() call).
+ * Returns the current time if recordSavings() has never been called this session.
+ */
+export function getSessionStart() {
+    return state.sessionStart ?? new Date();
+}
+// ─── Test utilities ───────────────────────────────────────────────────────────
+/**
+ * Reset in-memory state. For testing only.
+ */
+export function _resetForTesting() {
+    state.total = 0;
+    state.unflushed = 0;
+    state.callCount = 0;
+    state.loaded = false;
+    state.anonId = '';
+    state.sessionStart = null;
+}
+//# sourceMappingURL=token-tracker.js.map

package/dist/core/token-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-tracker.js","sourceRoot":"","sources":["../../src/core/token-tracker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,iFAAiF;AAEjF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AACjC,MAAM,cAAc,GAAG,CAAC,CAAC;AASzB,iFAAiF;AAEjF,MAAM,aAAa,GAA2B;IAC5C,aAAa,EAAE,IAAI;IACnB,eAAe,EAAE,GAAG;IACpB,cAAc,EAAE,GAAG;IACnB,KAAK,EAAE,GAAG;IACV,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF,iFAAiF;AAEjF,MAAM,MAAM;IACV,KAAK,GAAW,CAAC,CAAC;IAClB,SAAS,GAAW,CAAC,CAAC;IACtB,SAAS,GAAW,CAAC,CAAC;IACtB,MAAM,GAAY,KAAK,CAAC;IACxB,MAAM,GAAW,EAAE,CAAC;IACpB,YAAY,GAAgB,IAAI,CAAC;CAClC;AAED,MAAM,KAAK,GAAG,IAAI,MAAM,EAAE,CAAC;AAC3B,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAE/B,iFAAiF;AAEjF,SAAS,YAAY;IACnB,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO;IACzB,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC;IACtC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;IAC5B,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;AACtB,CAAC;AAED,SAAS,KAAK;IACZ,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC;QAAE,OAAO;IAClC,IAAI,CAAC;QACH,WAAW,CAAC;YACV,kBAAkB,EAAE,KAAK,CAAC,KAAK;YAC/B,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC,CAAC;QACH,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QACpB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB;IAC3B,IAAI,kBAAkB;QAAE,OAAO;IAC/B,kBAAkB,GAAG,IAAI,CAAC;IAE1B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IAElC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,KAAK,EAAE,CAAC;QACR,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,KAAK,EAAE,CAAC;QACR,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,aAAqB;IACrE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,aAAa,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,YAAY,EAAE,CAAC;IACf,oBAAoB,EAAE,CAAC;IAEvB,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAChC,KAAK,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,KAAK,IAAI,WAAW,CAAC;IAC3B,KAAK,CAAC,SAAS,IAAI,WAAW,CAAC;IAC/B,KAAK,CAAC,SAAS,EAAE,CAAC;IAElB,IAAI,KAAK,CAAC,SAAS,IAAI,cAAc,EAAE,CAAC;QACtC,KAAK,EAAE,CAAC;IACV,CAAC;IAED,OAAO,KAAK,CAAC,KAAK,CAAC;AACrB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,YAAY,EAAE,CAAC;IACf,OAAO,KAAK,CAAC,KAAK,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,WAAmB,EAAE,gBAAwB;IACvE,MAAM,YAAY,GAA2B,EAAE,CAAC;IAChD,MAAM,kBAAkB,GAA2B,EAAE,CAAC;IAEtD,KAAK,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACpE,YAAY,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,CAAC,WAAW,GAAG,cAAc,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,kBAAkB,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,CAAC,gBAAgB,GAAG,cAAc,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,YAAY,EAAE,CAAC;IACf,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC;IAE7B,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACpB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACpB,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;IAE1B,yCAAyC;IACzC,IAAI,CAAC;QACH,WAAW,CAAC;YACV,kBAAkB,EAAE,CAAC;YACrB,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,KAAK,CAAC,YAAY,IAAI,IAAI,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,iFAAiF;AAEjF;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACpB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACpB,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;IACrB,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;IAClB,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;AAC5B,CAAC"}