qyl-mcp-server 0.1.0

package/dist/secret-redactor.js

@@ -0,0 +1,255 @@
+const DEFAULT_REPLACEMENT = "[REDACTED]";
+const DEFAULT_MAX_DEPTH = 32;
+const DEFAULT_MAX_STRING_LENGTH = 16_384;
+const SecretKeyNames = new Set([
+    "authorization",
+    "proxyauthorization",
+    "cookie",
+    "setcookie",
+    "apikey",
+    "accesskey",
+    "secret",
+    "secretkey",
+    "clientsecret",
+    "password",
+    "passwd",
+    "pwd",
+    "credential",
+    "credentials",
+    "privatekey",
+    "token",
+    "accesstoken",
+    "refreshtoken",
+    "authtoken",
+    "bearertoken",
+    "sessiontoken",
+    "sessionkey",
+    "idtoken",
+]);
+const SafeTokenKeys = new Set([
+    "inputtokens",
+    "outputtokens",
+    "tokencount",
+    "tokencounts",
+    "progresstoken",
+    "maxtokens",
+    "totaltokens",
+    "prompttokens",
+    "completiontokens",
+    "cachedinputtokens",
+    "reasoningtokens",
+]);
+const EnvironmentNamePattern = /^[A-Za-z_][A-Za-z0-9_]*$/u;
+const EmbeddedUrlPattern = /\b[a-z][a-z0-9+.-]*:\/\/[^\s<>"'`]+|(?<![:\w])\/\/[^\s<>"'`]+/giu;
+/**
+ * Redacts credentials from diagnostic values without retaining or emitting the
+ * secret source. The result is safe to serialize but deliberately does not
+ * preserve object prototypes.
+ */
+export class SecretRedactor {
+    replacement;
+    maxDepth;
+    maxStringLength;
+    registeredSecretValues = new Set();
+    secretValues = [];
+    constructor(options = {}) {
+        this.replacement = options.replacement ?? DEFAULT_REPLACEMENT;
+        this.maxDepth = positiveInteger(options.maxDepth ?? DEFAULT_MAX_DEPTH, "maxDepth");
+        this.maxStringLength = positiveInteger(options.maxStringLength ?? DEFAULT_MAX_STRING_LENGTH, "maxStringLength");
+        for (const value of options.secretValues ?? []) {
+            addSecretValue(this.registeredSecretValues, value, true);
+        }
+        for (const [name, value] of Object.entries(options.environment ?? {})) {
+            if (isCredentialKey(name) && value !== undefined) {
+                addSecretValue(this.registeredSecretValues, value, false);
+            }
+        }
+        this.refreshSecretValues();
+    }
+    /** Registers credential values resolved after construction. */
+    registerSecretValues(values) {
+        const previousSize = this.registeredSecretValues.size;
+        for (const value of values) {
+            addSecretValue(this.registeredSecretValues, value, true);
+        }
+        if (this.registeredSecretValues.size !== previousSize)
+            this.refreshSecretValues();
+    }
+    redact(value) {
+        return this.redactValue(value, 0, new WeakSet());
+    }
+    redactText(value) {
+        let redacted = redactEmbeddedUrls(value);
+        for (const secret of this.secretValues) {
+            redacted = redacted.split(secret).join(this.replacement);
+        }
+        redacted = redacted
+            .replace(/\b(authorization|proxy-authorization|x[-_]?api[-_]?key|api[-_]?key|x[-_]?otlp[-_]?api[-_]?key)\s*[:=]\s*(?:"[^"\r\n]*"|'[^'\r\n]*'|[^\r\n,;}]+)/giu, (_match, name) => `${name}: ${this.replacement}`)
+            .replace(/(?<![A-Za-z0-9_])(["']?)(token|access[-_]?token|refresh[-_]?token|auth[-_]?token|session[-_]?token|id[-_]?token|password|passwd|pwd|secret|secret[-_]?key|client[-_]?secret|private[-_]?key)\1(?![A-Za-z0-9_])\s*[:=]\s*(?:"[^"\r\n]*"|'[^'\r\n]*'|[^\r\n,;}]+)/giu, (_match, quote, name) => `${quote}${name}${quote}: ${this.replacement}`)
+            .replace(/\b(cookie|set-cookie)\s*[:=]\s*[^\r\n]*/giu, (_match, name) => `${name}: ${this.replacement}`)
+            .replace(/\b(bearer|basic)\s+[A-Za-z0-9._~+/=-]+/giu, (_match, scheme) => `${scheme} ${this.replacement}`);
+        if (redacted.length <= this.maxStringLength)
+            return redacted;
+        return `${redacted.slice(0, this.maxStringLength - 1)}…`;
+    }
+    redactUri(value) {
+        try {
+            const networkPath = value.startsWith("//");
+            const url = networkPath
+                ? new URL(value, "http://redaction.invalid")
+                : new URL(value);
+            url.username = "";
+            url.password = "";
+            url.search = "";
+            url.hash = "";
+            const result = networkPath
+                ? `//${url.host}${url.pathname}`
+                : url.toString();
+            return this.redactTextWithoutUrls(result);
+        }
+        catch {
+            return this.redactText(value.split(/[?#]/u, 1)[0]);
+        }
+    }
+    redactValue(value, depth, seen) {
+        if (typeof value === "string")
+            return this.redactText(value);
+        if (value === null ||
+            typeof value === "number" ||
+            typeof value === "boolean" ||
+            typeof value === "undefined") {
+            return value;
+        }
+        if (typeof value === "bigint")
+            return value.toString();
+        if (typeof value === "symbol" || typeof value === "function")
+            return String(value);
+        if (depth >= this.maxDepth)
+            return "[MAX_DEPTH]";
+        if (seen.has(value))
+            return "[CIRCULAR]";
+        seen.add(value);
+        try {
+            if (Array.isArray(value)) {
+                return value.map((item) => this.redactValue(item, depth + 1, seen));
+            }
+            if (value instanceof Date)
+                return value.toISOString();
+            if (value instanceof URL)
+                return this.redactUri(value.toString());
+            if (value instanceof Error) {
+                return {
+                    name: value.name,
+                    message: this.redactText(value.message),
+                };
+            }
+            const source = value;
+            const semanticKey = semanticCredentialKey(source);
+            const result = {};
+            for (const [key, child] of Object.entries(source)) {
+                if (semanticKey !== undefined && key === "value") {
+                    result[key] = this.replacement;
+                }
+                else if (isCredentialKey(key)) {
+                    result[key] = this.replacement;
+                }
+                else if (typeof child === "string" && isUriKey(key)) {
+                    result[key] = this.redactUri(child);
+                }
+                else {
+                    result[key] = this.redactValue(child, depth + 1, seen);
+                }
+            }
+            return result;
+        }
+        finally {
+            seen.delete(value);
+        }
+    }
+    redactTextWithoutUrls(value) {
+        let redacted = value;
+        for (const secret of this.secretValues) {
+            redacted = redacted.split(secret).join(this.replacement);
+        }
+        return redacted;
+    }
+    refreshSecretValues() {
+        this.secretValues = [...this.registeredSecretValues]
+            .sort((left, right) => right.length - left.length);
+    }
+}
+function semanticCredentialKey(value) {
+    if (!("value" in value))
+        return undefined;
+    for (const field of ["key", "name", "header"]) {
+        const candidate = value[field];
+        if (typeof candidate === "string" && isCredentialKey(candidate))
+            return candidate;
+    }
+    return undefined;
+}
+export function isCredentialKey(key) {
+    const normalized = key.toLowerCase().replace(/[^a-z0-9]/gu, "");
+    if ([...SafeTokenKeys].some((safeKey) => normalized.endsWith(safeKey)))
+        return false;
+    if (SecretKeyNames.has(normalized))
+        return true;
+    return (normalized.endsWith("apikey") ||
+        normalized.endsWith("token") ||
+        normalized.endsWith("tokens") ||
+        normalized.endsWith("password") ||
+        normalized.endsWith("secret") ||
+        normalized.endsWith("credential") ||
+        normalized.endsWith("accesstoken") ||
+        normalized.endsWith("refreshtoken") ||
+        normalized.endsWith("accesskeyid") ||
+        normalized.endsWith("clientsecret") ||
+        normalized.endsWith("privatekey"));
+}
+export function validateEnvironmentVariableName(name) {
+    if (!EnvironmentNamePattern.test(name)) {
+        throw new Error(`Invalid environment variable name '${name}'.`);
+    }
+}
+function redactEmbeddedUrls(value) {
+    return value.replace(EmbeddedUrlPattern, (candidate) => {
+        const punctuation = /[),.!?]$/u.exec(candidate)?.[0] ?? "";
+        const urlText = punctuation ? candidate.slice(0, -1) : candidate;
+        try {
+            const networkPath = urlText.startsWith("//");
+            const url = networkPath
+                ? new URL(urlText, "http://redaction.invalid")
+                : new URL(urlText);
+            url.username = "";
+            url.password = "";
+            url.search = "";
+            url.hash = "";
+            const result = networkPath
+                ? `//${url.host}${url.pathname}`
+                : url.toString();
+            return `${result}${punctuation}`;
+        }
+        catch {
+            return candidate;
+        }
+    });
+}
+function isUriKey(key) {
+    const normalized = key.toLowerCase().replace(/[^a-z0-9]/gu, "");
+    return normalized === "uri" ||
+        normalized.endsWith("uri") ||
+        normalized === "url" ||
+        normalized.endsWith("url") ||
+        normalized === "endpoint";
+}
+function addSecretValue(values, value, explicit) {
+    if (value.length > 0 && (explicit || value.length >= 4))
+        values.add(value);
+}
+function positiveInteger(value, name) {
+    if (!Number.isSafeInteger(value) || value <= 0) {
+        throw new Error(`${name} must be a positive integer.`);
+    }
+    return value;
+}
+//# sourceMappingURL=secret-redactor.js.map

package/dist/secret-redactor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-redactor.js","sourceRoot":"","sources":["../src/secret-redactor.ts"],"names":[],"mappings":"AAAA,MAAM,mBAAmB,GAAG,YAAY,CAAC;AACzC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEzC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,eAAe;IACf,oBAAoB;IACpB,QAAQ;IACR,WAAW;IACX,QAAQ;IACR,WAAW;IACX,QAAQ;IACR,WAAW;IACX,cAAc;IACd,UAAU;IACV,QAAQ;IACR,KAAK;IACL,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,OAAO;IACP,aAAa;IACb,cAAc;IACd,WAAW;IACX,aAAa;IACb,cAAc;IACd,YAAY;IACZ,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,aAAa;IACb,cAAc;IACd,YAAY;IACZ,aAAa;IACb,eAAe;IACf,WAAW;IACX,aAAa;IACb,cAAc;IACd,kBAAkB;IAClB,mBAAmB;IACnB,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,2BAA2B,CAAC;AAC3D,MAAM,kBAAkB,GAAG,kEAAkE,CAAC;AAU9F;;;;GAIG;AACH,MAAM,OAAO,cAAc;IAChB,WAAW,CAAS;IACZ,QAAQ,CAAS;IACjB,eAAe,CAAS;IACxB,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;IACpD,YAAY,GAAsB,EAAE,CAAC;IAE7C,YAAY,OAAO,GAA0B,EAAE;QAC7C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,mBAAmB,CAAC;QAC9D,IAAI,CAAC,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,IAAI,iBAAiB,EAAE,UAAU,CAAC,CAAC;QACnF,IAAI,CAAC,eAAe,GAAG,eAAe,CACpC,OAAO,CAAC,eAAe,IAAI,yBAAyB,EACpD,iBAAiB,CAClB,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YAC/C,cAAc,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3D,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACjD,cAAc,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7B,CAAC;IAED,+DAA+D;IAC/D,oBAAoB,CAAC,MAAyB;QAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,cAAc,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,KAAK,YAAY;YAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC;IACpF,CAAC;IAED,MAAM,CAAC,KAAc;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,OAAO,EAAU,CAAC,CAAC;IAC3D,CAAC;IAED,UAAU,CAAC,KAAa;QACtB,IAAI,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAEzC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACvC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC;QAED,QAAQ,GAAG,QAAQ;aAChB,OAAO,CACN,oJAAoJ,EACpJ,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,CACzD;aACA,OAAO,CACN,oQAAoQ,EACpQ,CAAC,MAAM,EAAE,KAAa,EAAE,IAAY,EAAE,EAAE,CACtC,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,KAAK,IAAI,CAAC,WAAW,EAAE,CACjD;aACA,OAAO,CACN,4CAA4C,EAC5C,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,CACzD;aACA,OAAO,CACN,2CAA2C,EAC3C,CAAC,MAAM,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAC5D,CAAC;QAEJ,IAAI,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,QAAQ,CAAC;QAC7D,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC;IAC3D,CAAC;IAED,SAAS,CAAC,KAAa;QACrB,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,WAAW;gBACrB,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,0BAA0B,CAAC;gBAC5C,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YACnB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;YAClB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;YAClB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,WAAW;gBACxB,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE;gBAChC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,KAAc,EAAE,KAAa,EAAE,IAAqB;QACtE,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7D,IACE,KAAK,KAAK,IAAI;YACd,OAAO,KAAK,KAAK,QAAQ;YACzB,OAAO,KAAK,KAAK,SAAS;YAC1B,OAAO,KAAK,KAAK,WAAW,EAC5B,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;QACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACnF,IAAI,KAAK,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,aAAa,CAAC;QAEjD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,KAAK,YAAY,IAAI;gBAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;YACtD,IAAI,KAAK,YAAY,GAAG;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClE,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,OAAO;oBACL,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;iBACxC,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,KAAgC,CAAC;YAChD,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,MAAM,GAA4B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,IAAI,WAAW,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;oBACjD,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;gBACjC,CAAC;qBAAM,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;gBACjC,CAAC;qBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtD,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACtC,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAEO,qBAAqB,CAAC,KAAa;QACzC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACvC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,mBAAmB;QACzB,IAAI,CAAC,YAAY,GAAG,CAAC,GAAG,IAAI,CAAC,sBAAsB,CAAC;aACjD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;CACF;AAED,SAAS,qBAAqB,CAAC,KAAwC;IACrE,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAU,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,eAAe,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IACpF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrF,IAAI,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,CACL,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC5B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC/B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC;QAClC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC;QACnC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC;QAClC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC;QACnC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,IAAY;IAC1D,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,IAAI,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,SAAS,EAAE,EAAE;QACrD,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,WAAW;gBACrB,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,0BAA0B,CAAC;gBAC9C,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;YAClB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;YAClB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,WAAW;gBACxB,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE;gBAChC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,GAAG,MAAM,GAAG,WAAW,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAChE,OAAO,UAAU,KAAK,KAAK;QACzB,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC1B,UAAU,KAAK,KAAK;QACpB,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC1B,UAAU,KAAK,UAAU,CAAC;AAC9B,CAAC;AAED,SAAS,cAAc,CAAC,MAAmB,EAAE,KAAa,EAAE,QAAiB;IAC3E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,IAAY;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,25 @@
+/**
+ * qyl telemetry MCP Apps server (the visual half of qyl.mcp).
+ *
+ * Tool surface:
+ * - display_traces:        trace explorer UI (waterfall + logs) — THE app tool
+ * - display_mcp_dashboard: aggregate MCP traffic dashboard UI
+ * - list_traces, get_trace, list_sessions, search_logs: direct read tools
+ * - fetch_telemetry:       app-only (viewer iframes; hidden from the model)
+ *
+ * Modes: live against the qyl collector REST API (QYL_COLLECTOR_URL, default
+ * http://127.0.0.1:5100), or explicit generated demo telemetry when
+ * QYL_DEMO=1. A collector failure remains an error and never changes modes.
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { McpTelemetryTransport } from "./mcp-semconv.js";
+import { type NativeExecutionRuntime } from "./native-execution.js";
+export { closeDefaultNativeExecutionRuntime, hasNativeExecutionTelemetry, } from "./native-execution.js";
+export interface CreateServerOptions {
+    /** Transport identity recorded on native server spans and durable evidence. */
+    transport?: McpTelemetryTransport;
+    /** Test/embedding override. Native evidence is automatic unless explicitly disabled. */
+    nativeExecution?: NativeExecutionRuntime | false;
+}
+/** Creates a server with automatic native execution evidence for every tool. */
+export declare function createServer(options?: CreateServerOptions): McpServer;

package/dist/server.js

@@ -0,0 +1,207 @@
+/**
+ * qyl telemetry MCP Apps server (the visual half of qyl.mcp).
+ *
+ * Tool surface:
+ * - display_traces:        trace explorer UI (waterfall + logs) — THE app tool
+ * - display_mcp_dashboard: aggregate MCP traffic dashboard UI
+ * - list_traces, get_trace, list_sessions, search_logs: direct read tools
+ * - fetch_telemetry:       app-only (viewer iframes; hidden from the model)
+ *
+ * Modes: live against the qyl collector REST API (QYL_COLLECTOR_URL, default
+ * http://127.0.0.1:5100), or explicit generated demo telemetry when
+ * QYL_DEMO=1. A collector failure remains an error and never changes modes.
+ */
+import { registerAppResource, registerAppTool, RESOURCE_MIME_TYPE, } from "@modelcontextprotocol/ext-apps/server";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import fs from "node:fs/promises";
+import path from "node:path";
+import packageMetadata from "../package.json" with { type: "json" };
+import { DASHBOARD_RESOURCE_URI, RESOURCE_URI } from "./config.js";
+import { CollectorError } from "./collector.js";
+import { DisplayMcpDashboardInputSchema, DisplayMcpDashboardOutputSchema, DisplayTracesInputSchema, DisplayTracesOutputSchema, FetchTelemetryInputSchema, FetchTelemetryOutputSchema, } from "./contract-validation.js";
+import { fetchLogs, fetchMcpStats, fetchTrace, fetchTraces, fetchTracesForDisplay, } from "./data.js";
+import { humanizeNs, rootSpanName, shortId, summarizeMcpStats, } from "./summaries.js";
+import { READ_ONLY_TELEMETRY_TOOL_ANNOTATIONS, registerTelemetryTools, toolError, } from "./tools.js";
+import { registerCiTools } from "./ci.js";
+import { telemetryToolResult } from "./telemetry-redaction.js";
+import { defaultNativeExecutionRuntime, installNativeExecutionRecording, } from "./native-execution.js";
+export { closeDefaultNativeExecutionRuntime, hasNativeExecutionTelemetry, } from "./native-execution.js";
+// The vite-built single-file viewers live next to the compiled server code.
+const DIST_DIR = import.meta.dirname;
+// Cached across createServer() calls — in stateless HTTP deployments a fresh
+// server is created per request and per-instance caches would be useless.
+let cachedAppHtml;
+let cachedDashboardHtml;
+/** Creates a server with automatic native execution evidence for every tool. */
+export function createServer(options = {}) {
+    const server = new McpServer({
+        name: "qyl.mcp",
+        version: packageMetadata.version,
+    });
+    if (options.nativeExecution !== false) {
+        installNativeExecutionRecording(server, options.nativeExecution ?? defaultNativeExecutionRuntime(), options.transport ?? "builtin");
+    }
+    registerAppTool(server, "display_traces", {
+        title: "Display Traces",
+        description: "Show qyl traces in the interactive trace explorer with a span waterfall, " +
+            "detail panel, and correlated logs. Pass a trace_id to open one trace, a " +
+            "session_id for that session's traces, or neither for recent traces. Prefer " +
+            "this over list_traces/get_trace whenever the user wants to " +
+            "look at traces.",
+        inputSchema: DisplayTracesInputSchema,
+        outputSchema: DisplayTracesOutputSchema,
+        annotations: READ_ONLY_TELEMETRY_TOOL_ANNOTATIONS,
+        _meta: { ui: { resourceUri: RESOURCE_URI } },
+    }, async ({ trace_id, session_id, limit }) => {
+        try {
+            const result = await fetchTracesForDisplay({
+                trace_id,
+                session_id,
+                limit: limit ?? 20,
+            });
+            let text;
+            if (result.selected_trace_id) {
+                const trace = result.traces[0];
+                text =
+                    `Showing trace ${shortId(trace.trace_id)} (${rootSpanName(trace)}, ` +
+                        `${trace.span_count} spans, ${humanizeNs(trace.duration_ns)}) in the qyl explorer` +
+                        `${result.mode === "demo" ? " (demo data)" : ""}.`;
+            }
+            else {
+                const errorCount = result.traces.filter((t) => t.has_error).length;
+                const scope = session_id ? `session ${session_id}` : "recent";
+                text =
+                    `Showing ${result.traces.length} ${scope} traces in the qyl explorer` +
+                        `${errorCount > 0 ? ` (${errorCount} with errors)` : ""}` +
+                        `${result.mode === "demo" ? " (demo data)" : ""}.`;
+            }
+            const output = {
+                traces: result.traces,
+                ...(result.selected_trace_id
+                    ? { selected_trace_id: result.selected_trace_id }
+                    : {}),
+                mode: result.mode,
+            };
+            return telemetryToolResult(text, output);
+        }
+        catch (err) {
+            return toolError(err);
+        }
+    });
+    registerAppTool(server, "display_mcp_dashboard", {
+        title: "Display MCP Dashboard",
+        description: "Show an aggregate dashboard of MCP traffic (spans carrying an " +
+            "`mcp.method.name` attribute): request/error timeline, per-server and " +
+            "per-transport breakdowns, and per-tool latency and error " +
+            "rates. Prefer this when the user asks about MCP usage, tool health, " +
+            "or MCP monitoring.",
+        inputSchema: DisplayMcpDashboardInputSchema,
+        outputSchema: DisplayMcpDashboardOutputSchema,
+        annotations: READ_ONLY_TELEMETRY_TOOL_ANNOTATIONS,
+        _meta: { ui: { resourceUri: DASHBOARD_RESOURCE_URI } },
+    }, async ({ hours }) => {
+        try {
+            const window = hours ?? 24;
+            const stats = await fetchMcpStats(window);
+            const output = { stats };
+            return telemetryToolResult(summarizeMcpStats(stats, window), output);
+        }
+        catch (err) {
+            return toolError(err);
+        }
+    });
+    registerTelemetryTools(server);
+    registerCiTools(server);
+    registerAppTool(server, "fetch_telemetry", {
+        title: "Fetch Telemetry",
+        description: "Fetch traces, a single trace, or logs for the trace explorer UI. " +
+            "The model should NOT call this tool directly.",
+        inputSchema: FetchTelemetryInputSchema,
+        outputSchema: FetchTelemetryOutputSchema,
+        annotations: READ_ONLY_TELEMETRY_TOOL_ANNOTATIONS,
+        _meta: { ui: { visibility: ["app"] } },
+    }, async ({ view, trace_id, service_name, severity_min, query, limit, hours, }) => {
+        try {
+            if (view === "mcp_stats") {
+                const stats = await fetchMcpStats(hours ?? 24);
+                const output = { stats, mode: stats.mode };
+                return telemetryToolResult(`Fetched MCP stats: ${stats.totals.requests} requests over ${hours ?? 24}h (${stats.mode} mode).`, output);
+            }
+            if (view === "trace") {
+                if (!trace_id) {
+                    throw new CollectorError('view "trace" requires a `trace_id`.');
+                }
+                const { trace, mode } = await fetchTrace(trace_id);
+                const output = { trace, mode };
+                return telemetryToolResult(`Fetched trace ${shortId(trace.trace_id)} (${trace.span_count} spans, ${mode} mode).`, output);
+            }
+            if (view === "logs") {
+                const { logs, mode } = await fetchLogs({
+                    trace_id,
+                    service_name,
+                    severity_min,
+                    query,
+                    limit: limit ?? 50,
+                });
+                const output = { logs, mode };
+                return telemetryToolResult(`Fetched ${logs.length} logs (${mode} mode).`, output);
+            }
+            const { traces, mode } = await fetchTraces(limit ?? 20);
+            const output = { traces, mode };
+            return telemetryToolResult(`Fetched ${traces.length} traces (${mode} mode).`, output);
+        }
+        catch (err) {
+            return toolError(err);
+        }
+    });
+    registerAppResource(server, RESOURCE_URI, RESOURCE_URI, { mimeType: RESOURCE_MIME_TYPE }, async () => {
+        const html = (cachedAppHtml ??= await fs.readFile(path.join(DIST_DIR, "mcp-app.html"), "utf-8"));
+        return {
+            contents: [
+                {
+                    uri: RESOURCE_URI,
+                    mimeType: RESOURCE_MIME_TYPE,
+                    text: html,
+                    _meta: {
+                        ui: {
+                            csp: {
+                                connectDomains: [],
+                                resourceDomains: [],
+                            },
+                        },
+                    },
+                },
+            ],
+        };
+    });
+    registerAppResource(server, DASHBOARD_RESOURCE_URI, DASHBOARD_RESOURCE_URI, { mimeType: RESOURCE_MIME_TYPE }, async () => {
+        if (cachedDashboardHtml === undefined) {
+            try {
+                cachedDashboardHtml = await fs.readFile(path.join(DIST_DIR, "mcp-dashboard.html"), "utf-8");
+            }
+            catch {
+                throw new Error("dashboard UI not built yet: dist/mcp-dashboard.html is missing — " +
+                    "build the mcp-dashboard.html vite entry (`npm run build`) first");
+            }
+        }
+        return {
+            contents: [
+                {
+                    uri: DASHBOARD_RESOURCE_URI,
+                    mimeType: RESOURCE_MIME_TYPE,
+                    text: cachedDashboardHtml,
+                    _meta: {
+                        ui: {
+                            csp: {
+                                connectDomains: [],
+                                resourceDomains: [],
+                            },
+                        },
+                    },
+                },
+            ],
+        };
+    });
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,kBAAkB,GACnB,MAAM,uCAAuC,CAAC;AAS/C,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAKpE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,eAAe,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,SAAS,EACT,aAAa,EACb,UAAU,EACV,WAAW,EACX,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,UAAU,EACV,YAAY,EACZ,OAAO,EACP,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,oCAAoC,EACpC,sBAAsB,EACtB,SAAS,GACV,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,GAEhC,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kCAAkC,EAClC,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAE/B,4EAA4E;AAC5E,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,OAAO,CAAC;AAErC,6EAA6E;AAC7E,0EAA0E;AAC1E,IAAI,aAAiC,CAAC;AACtC,IAAI,mBAAuC,CAAC;AAS5C,gFAAgF;AAChF,MAAM,UAAU,YAAY,CAAC,OAAO,GAAwB,EAAE;IAC5D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,eAAe,CAAC,OAAO;KACjC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;QACtC,+BAA+B,CAC7B,MAAM,EACN,OAAO,CAAC,eAAe,IAAI,6BAA6B,EAAE,EAC1D,OAAO,CAAC,SAAS,IAAI,SAAS,CAC/B,CAAC;IACJ,CAAC;IAED,eAAe,CACb,MAAM,EACN,gBAAgB,EAChB;QACE,KAAK,EAAE,gBAAgB;QACvB,WAAW,EACT,2EAA2E;YAC3E,0EAA0E;YAC1E,6EAA6E;YAC7E,6DAA6D;YAC7D,iBAAiB;QACnB,WAAW,EAAE,wBAAwB;QACrC,YAAY,EAAE,yBAAyB;QACvC,WAAW,EAAE,oCAAoC;QACjD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE;KAC7C,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAsB,EAA2B,EAAE;QACrF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;gBACzC,QAAQ;gBACR,UAAU;gBACV,KAAK,EAAE,KAAK,IAAI,EAAE;aACnB,CAAC,CAAC;YAEH,IAAI,IAAY,CAAC;YACjB,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC/B,IAAI;oBACF,iBAAiB,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,IAAI;wBACpE,GAAG,KAAK,CAAC,UAAU,WAAW,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,uBAAuB;wBAClF,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;gBACnE,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,UAAU,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC9D,IAAI;oBACF,WAAW,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,6BAA6B;wBACrE,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE;wBACzD,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;YACvD,CAAC;YAED,MAAM,MAAM,GAAwB;gBAClC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,CAAC,MAAM,CAAC,iBAAiB;oBAC1B,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE;oBACjD,CAAC,CAAC,EAAE,CAAC;gBACP,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,CAAC;YAEF,OAAO,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CACF,CAAC;IAEF,eAAe,CACb,MAAM,EACN,uBAAuB,EACvB;QACE,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EACT,gEAAgE;YAChE,uEAAuE;YACvE,2DAA2D;YAC3D,sEAAsE;YACtE,oBAAoB;QACtB,WAAW,EAAE,8BAA8B;QAC3C,YAAY,EAAE,+BAA+B;QAC7C,WAAW,EAAE,oCAAoC;QACjD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE,EAAE;KACvD,EACD,KAAK,EAAE,EAAE,KAAK,EAA4B,EAA2B,EAAE;QACrE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,MAAM,GAA8B,EAAE,KAAK,EAAE,CAAC;YACpD,OAAO,mBAAmB,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CACF,CAAC;IAEF,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/B,eAAe,CAAC,MAAM,CAAC,CAAC;IAExB,eAAe,CACb,MAAM,EACN,iBAAiB,EACjB;QACE,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,mEAAmE;YACnE,+CAA+C;QACjD,WAAW,EAAE,yBAAyB;QACtC,YAAY,EAAE,0BAA0B;QACxC,WAAW,EAAE,oCAAoC;QACjD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE;KACvC,EACD,KAAK,EAAE,EACL,IAAI,EACJ,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,KAAK,EACL,KAAK,EACL,KAAK,GACe,EAA2B,EAAE;QACjD,IAAI,CAAC;YACH,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC/C,MAAM,MAAM,GAAyB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;gBACjE,OAAO,mBAAmB,CACxB,sBAAsB,KAAK,CAAC,MAAM,CAAC,QAAQ,kBAAkB,KAAK,IAAI,EAAE,MAAM,KAAK,CAAC,IAAI,SAAS,EACjG,MAAM,CACP,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,cAAc,CAAC,qCAAqC,CAAC,CAAC;gBAClE,CAAC;gBACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAyB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBACrD,OAAO,mBAAmB,CACxB,iBAAiB,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,UAAU,WAAW,IAAI,SAAS,EACrF,MAAM,CACP,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC;oBACrC,QAAQ;oBACR,YAAY;oBACZ,YAAY;oBACZ,KAAK;oBACL,KAAK,EAAE,KAAK,IAAI,EAAE;iBACnB,CAAC,CAAC;gBACH,MAAM,MAAM,GAAyB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACpD,OAAO,mBAAmB,CACxB,WAAW,IAAI,CAAC,MAAM,UAAU,IAAI,SAAS,EAC7C,MAAM,CACP,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM,MAAM,GAAyB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACtD,OAAO,mBAAmB,CACxB,WAAW,MAAM,CAAC,MAAM,YAAY,IAAI,SAAS,EACjD,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CACF,CAAC;IAEF,mBAAmB,CACjB,MAAM,EACN,YAAY,EACZ,YAAY,EACZ,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAChC,KAAK,IAAiC,EAAE;QACtC,MAAM,IAAI,GAAG,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC,QAAQ,CAC/C,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,EACnC,OAAO,CACR,CAAC,CAAC;QACH,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,GAAG,EAAE,YAAY;oBACjB,QAAQ,EAAE,kBAAkB;oBAC5B,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE;wBACL,EAAE,EAAE;4BACF,GAAG,EAAE;gCACH,cAAc,EAAE,EAAE;gCAClB,eAAe,EAAE,EAAE;6BACpB;yBACF;qBACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,mBAAmB,CACjB,MAAM,EACN,sBAAsB,EACtB,sBAAsB,EACtB,EAAE,QAAQ,EAAE,kBAAkB,EAAE,EAChC,KAAK,IAAiC,EAAE;QACtC,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,mBAAmB,GAAG,MAAM,EAAE,CAAC,QAAQ,CACrC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,EACzC,OAAO,CACR,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CACb,mEAAmE;oBACjE,iEAAiE,CACpE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO;YACL,QAAQ,EAAE;gBACR;oBACE,GAAG,EAAE,sBAAsB;oBAC3B,QAAQ,EAAE,kBAAkB;oBAC5B,IAAI,EAAE,mBAAmB;oBACzB,KAAK,EAAE;wBACL,EAAE,EAAE;4BACF,GAAG,EAAE;gCACH,cAAc,EAAE,EAAE;gCAClB,eAAe,EAAE,EAAE;6BACpB;yBACF;qBACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/stats.d.ts

@@ -0,0 +1,18 @@
+/**
+ * MCP dashboard aggregation — shared verbatim by the demo and live paths so
+ * the demo dataset exercises exactly the code that renders production stats.
+ */
+import type { McpDashboardStats, QylSpan } from "./wire.js";
+export declare function spanAttr(span: QylSpan, key: string): string | undefined;
+/**
+ * Pick a clean bucket size that tiles the window into 24–48 buckets.
+ * For every integer hours in 1–168 the resulting count lands in range.
+ */
+export declare function pickBucketMs(windowMs: number): number;
+/**
+ * Aggregate flattened spans into McpDashboardStats (minus mode/truncated,
+ * which depend on the data source). Classified MCP spans starting inside
+ * [windowStart, windowEnd] count; durations come from the span nano fields;
+ * error = status.code 2.
+ */
+export declare function aggregateMcpStats(spans: QylSpan[], windowStart: number, windowEnd: number, bucketMs: number): Omit<McpDashboardStats, "mode" | "truncated">;