token-goat 2.9.29 → 2.9.31

package/dist/token-goat-chunk-Z7N5OMMP.mjs

@@ -0,0 +1,98 @@
+import { createRequire as __cjsRequire } from 'node:module';
+const require = __cjsRequire(import.meta.url);
+import {
+  BASH_OUTPUT_SUBDIR,
+  getBashOutput
+} from "./token-goat-chunk-KQBLRPBN.mjs";
+import {
+  indexRecallEntry,
+  storeBlob
+} from "./token-goat-chunk-4ZBFWLXF.mjs";
+import {
+  redactSecrets,
+  redactSerializedJson
+} from "./token-goat-chunk-T5P5ACNQ.mjs";
+import {
+  shortFingerprint
+} from "./token-goat-chunk-4GBVPH3D.mjs";
+import {
+  init_define_import_meta_env
+} from "./token-goat-chunk-A37V4PBF.mjs";
+
+// src/mcp_cache.ts
+init_define_import_meta_env();
+var MCP_MAX_CACHE_BYTES = 2 * 1024 * 1024;
+var READ_VERBS_RE = /(?:^|_)(?:get|list|search|read|view|fetch|describe|export|download|find|show|query|resolve|context)(?=_|$)/i;
+var MUTATING_VERBS_RE = /^(?:request|run)(?=_|$)|(?:^|_)(?:create|update|delete|send|write|push|post|remove|label|unlabel|merge|modify|draft|fork|reply|move|rename|set|add|execute|close|copy|upload|insert|revoke|reset|archive|restore|annotate|register|unregister|star|unstar|like|unlike|vote|block|unblock|invite|kick|ban|click|fill|press|type|navigate|evaluate|drag|hover|handle|snapshot|wait|emulate|new|select|resize|audit|apply|commit|grant|deploy|toggle|pin|trigger|finalize|approve|cancel|sync)(?=_|$)/i;
+var STATE_CHANGING_INPUT_KEYS = ["createIfEmpty", "clear", "save_to_disk"];
+function isMcpReadOnly(toolName, toolInput) {
+  if (!toolName.startsWith("mcp__")) {
+    return false;
+  }
+  const method = toolName.split("__").pop() || "";
+  if (/screenshot/i.test(method)) return false;
+  if (READ_VERBS_RE.test(method) && !MUTATING_VERBS_RE.test(method)) {
+    return !STATE_CHANGING_INPUT_KEYS.some((key) => toolInput[key]);
+  }
+  return false;
+}
+function mcpHash(toolName, toolInput) {
+  const sortedInput = {};
+  for (const key of Object.keys(toolInput).sort()) {
+    sortedInput[key] = toolInput[key];
+  }
+  const canonical = JSON.stringify({ tool: toolName, input: sortedInput });
+  return shortFingerprint(canonical);
+}
+function mcpOutputId(sessionId, hash) {
+  return `mcp_${shortFingerprint(`${sessionId}\0${hash}`)}`;
+}
+function mcpInputPreview(toolInput) {
+  try {
+    return redactSerializedJson(JSON.stringify(toolInput)).text.slice(0, 120);
+  } catch {
+    return "";
+  }
+}
+function storeMcpOutput(sessionId, toolName, toolInput, resultText) {
+  if (!sessionId || !resultText) return null;
+  const rawSizeBytes = Buffer.byteLength(resultText, "utf-8");
+  if (rawSizeBytes > MCP_MAX_CACHE_BYTES) return null;
+  const id = mcpOutputId(sessionId, mcpHash(toolName, toolInput));
+  const rawLabel = `mcp:${toolName} ${mcpInputPreview(toolInput)}`.trim();
+  const redactedOutput = redactSecrets(resultText).text;
+  const label = redactSecrets(rawLabel).text;
+  const entry = {
+    id,
+    command: label,
+    output: redactedOutput,
+    exitCode: 0,
+    storedAt: Date.now(),
+    // Sized off the redacted output, not the raw pre-redaction resultText (rawSizeBytes is only the cache-eligibility gate above) -- mirrors bash_output_cache.ts's storeBashOutput, whose sizeBytes is likewise computed from redactedOutput. Sizing off the raw text here left mcp-audit's per-call token estimate and `mcp-history`'s byte column reporting a stale byte count for any entry a secret was actually stripped from, out of sync with the stored/served (redacted, shorter) output.
+    sizeBytes: Buffer.byteLength(redactedOutput, "utf-8")
+  };
+  if (!storeBlob(BASH_OUTPUT_SUBDIR, id, entry)) return null;
+  indexRecallEntry("mcp", id, label, `${label}
+${redactedOutput}`, entry.storedAt);
+  return id;
+}
+function mcpOutputBytes(id) {
+  return getBashOutput(id)?.sizeBytes ?? 0;
+}
+function getMcpOutput(sessionId, toolName, toolInput, ttlMs = Number.POSITIVE_INFINITY) {
+  if (!sessionId) return null;
+  const id = mcpOutputId(sessionId, mcpHash(toolName, toolInput));
+  const entry = getBashOutput(id);
+  if (!entry) return null;
+  if (Date.now() - entry.storedAt > ttlMs) return null;
+  return id;
+}
+
+export {
+  isMcpReadOnly,
+  mcpHash,
+  mcpOutputId,
+  storeMcpOutput,
+  mcpOutputBytes,
+  getMcpOutput
+};

package/dist/{token-goat-chunk-BGHSSJUA.mjs → token-goat-chunk-ZFOBKUWH.mjs}

@@ -6,7 +6,7 @@ import {
   quantizeRgbaToIndexed,
   require_omggif,
   resizeRgba
-} from "./token-goat-chunk-RRNZMM3A.mjs";
+} from "./token-goat-chunk-5Y6ZYL6U.mjs";
 import {
   __toESM,
   init_define_import_meta_env

package/dist/token-goat-chunk-ZMBL6UVV.mjs

@@ -0,0 +1,110 @@
+import { createRequire as __cjsRequire } from 'node:module';
+const require = __cjsRequire(import.meta.url);
+import {
+  displaySafeText
+} from "./token-goat-chunk-FNFBKLRD.mjs";
+import {
+  init_define_import_meta_env
+} from "./token-goat-chunk-A37V4PBF.mjs";
+
+// src/listing_size.ts
+init_define_import_meta_env();
+import * as fs from "node:fs";
+import * as readline from "node:readline";
+function splitListingContent(content) {
+  const entries = [];
+  let current = null;
+  for (const line of content.split("\n")) {
+    const m = /^- (.+?): /.exec(line);
+    if (m !== null) {
+      if (current !== null) entries.push({ name: current.name, bytes: Buffer.byteLength(current.text, "utf8") });
+      current = { name: m[1], text: line };
+    } else if (current !== null) {
+      current.text += "\n" + line;
+    }
+  }
+  if (current !== null) entries.push({ name: current.name, bytes: Buffer.byteLength(current.text, "utf8") });
+  return entries;
+}
+function newState() {
+  return { current: /* @__PURE__ */ new Map(), injections: 0, injectedBytes: 0 };
+}
+function applyListingAttachment(attachment, skills, agents) {
+  const type = attachment["type"];
+  const initial = attachment["isInitial"] === true;
+  if (type === "skill_listing") {
+    const content = typeof attachment["content"] === "string" ? attachment["content"] : "";
+    if (initial) skills.current.clear();
+    for (const e of splitListingContent(content)) skills.current.set(e.name, e.bytes);
+    skills.injections++;
+    skills.injectedBytes += Buffer.byteLength(content, "utf8");
+  } else if (type === "agent_listing_delta") {
+    const lines = Array.isArray(attachment["addedLines"]) ? attachment["addedLines"].filter((l) => typeof l === "string") : [];
+    const types = Array.isArray(attachment["addedTypes"]) ? attachment["addedTypes"] : [];
+    const removed = Array.isArray(attachment["removedTypes"]) ? attachment["removedTypes"] : [];
+    if (initial) agents.current.clear();
+    for (const r of removed) if (typeof r === "string") agents.current.delete(r);
+    let added = 0;
+    lines.forEach((line, i) => {
+      const named = types[i];
+      const name = typeof named === "string" ? named : /^- (.+?): /.exec(line)?.[1] ?? line.slice(0, 40);
+      const bytes = Buffer.byteLength(line, "utf8");
+      agents.current.set(name, bytes);
+      added += bytes;
+    });
+    if (lines.length > 0) {
+      agents.injections++;
+      agents.injectedBytes += added;
+    }
+  }
+}
+function summarize(state) {
+  const entries = [...state.current].map(([name, bytes]) => ({ name, bytes })).sort((a, b) => b.bytes - a.bytes || a.name.localeCompare(b.name));
+  return { entries, bytes: entries.reduce((n, e) => n + e.bytes, 0), injections: state.injections, injectedBytes: state.injectedBytes };
+}
+async function measureListings(transcriptPath) {
+  const skills = newState();
+  const agents = newState();
+  const rl = readline.createInterface({ input: fs.createReadStream(transcriptPath, { encoding: "utf8" }), crlfDelay: Infinity });
+  for await (const line of rl) {
+    if (!line.includes("_listing")) continue;
+    let parsed;
+    try {
+      parsed = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    const attachment = parsed?.attachment;
+    if (attachment !== null && typeof attachment === "object") applyListingAttachment(attachment, skills, agents);
+  }
+  return { transcript: transcriptPath, skills: summarize(skills), agents: summarize(agents) };
+}
+function kb(bytes) {
+  return `${(bytes / 1024).toFixed(1)} KB`;
+}
+function summaryLine(label, s) {
+  if (s.injections === 0) return `${label}: no listing in this transcript`;
+  const times = s.injections === 1 ? "once" : `${s.injections} times`;
+  return `${label}: ${s.entries.length} listed, ${kb(s.bytes)} (~${Math.floor(s.bytes / 4)} tokens) per listing; sent ${times} in this session, ${kb(s.injectedBytes)} in all`;
+}
+function renderListingReport(report, top) {
+  const lines = [`# listing size: ${displaySafeText(report.transcript)}`, summaryLine("Skills", report.skills), summaryLine("Agents", report.agents)];
+  for (const [label, s] of [["skill", report.skills], ["agent", report.agents]]) {
+    if (s.entries.length === 0 || top === 0) continue;
+    lines.push("", `## Largest ${label} descriptions`);
+    for (const e of s.entries.slice(0, top)) {
+      const share = s.bytes > 0 ? (e.bytes / s.bytes * 100).toFixed(1) : "0.0";
+      lines.push(`  ${String(e.bytes).padStart(6)} B  ${share.padStart(5)}%  ${displaySafeText(e.name)}`);
+    }
+  }
+  if (report.skills.injections + report.agents.injections > 0) {
+    lines.push("", "Every byte above is paid again each time Claude Code re-sends the listing. Shorten the largest descriptions first, and keep the words that decide when the skill or agent is picked.");
+  }
+  return lines.join("\n");
+}
+export {
+  applyListingAttachment,
+  measureListings,
+  renderListingReport,
+  splitListingContent
+};