token-goat 2.9.30 → 2.9.31

package/dist/token-goat-chunk-Z7N5OMMP.mjs

@@ -0,0 +1,98 @@
+import { createRequire as __cjsRequire } from 'node:module';
+const require = __cjsRequire(import.meta.url);
+import {
+  BASH_OUTPUT_SUBDIR,
+  getBashOutput
+} from "./token-goat-chunk-KQBLRPBN.mjs";
+import {
+  indexRecallEntry,
+  storeBlob
+} from "./token-goat-chunk-4ZBFWLXF.mjs";
+import {
+  redactSecrets,
+  redactSerializedJson
+} from "./token-goat-chunk-T5P5ACNQ.mjs";
+import {
+  shortFingerprint
+} from "./token-goat-chunk-4GBVPH3D.mjs";
+import {
+  init_define_import_meta_env
+} from "./token-goat-chunk-A37V4PBF.mjs";
+
+// src/mcp_cache.ts
+init_define_import_meta_env();
+var MCP_MAX_CACHE_BYTES = 2 * 1024 * 1024;
+var READ_VERBS_RE = /(?:^|_)(?:get|list|search|read|view|fetch|describe|export|download|find|show|query|resolve|context)(?=_|$)/i;
+var MUTATING_VERBS_RE = /^(?:request|run)(?=_|$)|(?:^|_)(?:create|update|delete|send|write|push|post|remove|label|unlabel|merge|modify|draft|fork|reply|move|rename|set|add|execute|close|copy|upload|insert|revoke|reset|archive|restore|annotate|register|unregister|star|unstar|like|unlike|vote|block|unblock|invite|kick|ban|click|fill|press|type|navigate|evaluate|drag|hover|handle|snapshot|wait|emulate|new|select|resize|audit|apply|commit|grant|deploy|toggle|pin|trigger|finalize|approve|cancel|sync)(?=_|$)/i;
+var STATE_CHANGING_INPUT_KEYS = ["createIfEmpty", "clear", "save_to_disk"];
+function isMcpReadOnly(toolName, toolInput) {
+  if (!toolName.startsWith("mcp__")) {
+    return false;
+  }
+  const method = toolName.split("__").pop() || "";
+  if (/screenshot/i.test(method)) return false;
+  if (READ_VERBS_RE.test(method) && !MUTATING_VERBS_RE.test(method)) {
+    return !STATE_CHANGING_INPUT_KEYS.some((key) => toolInput[key]);
+  }
+  return false;
+}
+function mcpHash(toolName, toolInput) {
+  const sortedInput = {};
+  for (const key of Object.keys(toolInput).sort()) {
+    sortedInput[key] = toolInput[key];
+  }
+  const canonical = JSON.stringify({ tool: toolName, input: sortedInput });
+  return shortFingerprint(canonical);
+}
+function mcpOutputId(sessionId, hash) {
+  return `mcp_${shortFingerprint(`${sessionId}\0${hash}`)}`;
+}
+function mcpInputPreview(toolInput) {
+  try {
+    return redactSerializedJson(JSON.stringify(toolInput)).text.slice(0, 120);
+  } catch {
+    return "";
+  }
+}
+function storeMcpOutput(sessionId, toolName, toolInput, resultText) {
+  if (!sessionId || !resultText) return null;
+  const rawSizeBytes = Buffer.byteLength(resultText, "utf-8");
+  if (rawSizeBytes > MCP_MAX_CACHE_BYTES) return null;
+  const id = mcpOutputId(sessionId, mcpHash(toolName, toolInput));
+  const rawLabel = `mcp:${toolName} ${mcpInputPreview(toolInput)}`.trim();
+  const redactedOutput = redactSecrets(resultText).text;
+  const label = redactSecrets(rawLabel).text;
+  const entry = {
+    id,
+    command: label,
+    output: redactedOutput,
+    exitCode: 0,
+    storedAt: Date.now(),
+    // Sized off the redacted output, not the raw pre-redaction resultText (rawSizeBytes is only the cache-eligibility gate above) -- mirrors bash_output_cache.ts's storeBashOutput, whose sizeBytes is likewise computed from redactedOutput. Sizing off the raw text here left mcp-audit's per-call token estimate and `mcp-history`'s byte column reporting a stale byte count for any entry a secret was actually stripped from, out of sync with the stored/served (redacted, shorter) output.
+    sizeBytes: Buffer.byteLength(redactedOutput, "utf-8")
+  };
+  if (!storeBlob(BASH_OUTPUT_SUBDIR, id, entry)) return null;
+  indexRecallEntry("mcp", id, label, `${label}
+${redactedOutput}`, entry.storedAt);
+  return id;
+}
+function mcpOutputBytes(id) {
+  return getBashOutput(id)?.sizeBytes ?? 0;
+}
+function getMcpOutput(sessionId, toolName, toolInput, ttlMs = Number.POSITIVE_INFINITY) {
+  if (!sessionId) return null;
+  const id = mcpOutputId(sessionId, mcpHash(toolName, toolInput));
+  const entry = getBashOutput(id);
+  if (!entry) return null;
+  if (Date.now() - entry.storedAt > ttlMs) return null;
+  return id;
+}
+
+export {
+  isMcpReadOnly,
+  mcpHash,
+  mcpOutputId,
+  storeMcpOutput,
+  mcpOutputBytes,
+  getMcpOutput
+};