@adtl/gateway 0.0.0-stage → 0.1.1

package/dist/config.d.ts

@@ -0,0 +1,207 @@
+/**
+ * The `gateway:` section of adtl.yaml.
+ *
+ *   gateway:
+ *     audit: ./adtl-audit.jsonl          # optional JSONL audit log
+ *     mode: audit                        # optional: log what would be stopped, stop nothing
+ *     upstreams:
+ *       github:                          # id must match `servers.github` in the label config
+ *         command: npx
+ *         args: ["-y", "@modelcontextprotocol/server-github"]
+ *         env: { GITHUB_PERSONAL_ACCESS_TOKEN: "${GITHUB_TOKEN}" }
+ *       docs:
+ *         url: https://example.com/mcp
+ *         headers: { Authorization: "Bearer ${DOCS_TOKEN}" }
+ *
+ * `${VAR}` in command, args, env, cwd, url and headers is replaced from the
+ * gateway's environment. A missing variable is a config error.
+ */
+import { z } from "zod";
+export declare const StdioUpstreamSchema: z.ZodObject<{
+    command: z.ZodString;
+    args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    cwd: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    command: string;
+    args: string[];
+    env: Record<string, string>;
+    cwd?: string | undefined;
+}, {
+    command: string;
+    args?: string[] | undefined;
+    env?: Record<string, string> | undefined;
+    cwd?: string | undefined;
+}>;
+export declare const HttpUpstreamSchema: z.ZodObject<{
+    url: z.ZodString;
+    headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, "strict", z.ZodTypeAny, {
+    url: string;
+    headers: Record<string, string>;
+}, {
+    url: string;
+    headers?: Record<string, string> | undefined;
+}>;
+export declare const UpstreamSchema: z.ZodUnion<[z.ZodObject<{
+    command: z.ZodString;
+    args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    cwd: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    command: string;
+    args: string[];
+    env: Record<string, string>;
+    cwd?: string | undefined;
+}, {
+    command: string;
+    args?: string[] | undefined;
+    env?: Record<string, string> | undefined;
+    cwd?: string | undefined;
+}>, z.ZodObject<{
+    url: z.ZodString;
+    headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, "strict", z.ZodTypeAny, {
+    url: string;
+    headers: Record<string, string>;
+}, {
+    url: string;
+    headers?: Record<string, string> | undefined;
+}>]>;
+export type StdioUpstream = z.infer<typeof StdioUpstreamSchema>;
+export type HttpUpstream = z.infer<typeof HttpUpstreamSchema>;
+export type Upstream = z.infer<typeof UpstreamSchema>;
+export declare const GatewayConfigSchema: z.ZodObject<{
+    upstreams: z.ZodEffects<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodObject<{
+        command: z.ZodString;
+        args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        cwd: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+        cwd?: string | undefined;
+    }, {
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        cwd?: string | undefined;
+    }>, z.ZodObject<{
+        url: z.ZodString;
+        headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        url: string;
+        headers: Record<string, string>;
+    }, {
+        url: string;
+        headers?: Record<string, string> | undefined;
+    }>]>>, Record<string, {
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+        cwd?: string | undefined;
+    } | {
+        url: string;
+        headers: Record<string, string>;
+    }>, Record<string, {
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        cwd?: string | undefined;
+    } | {
+        url: string;
+        headers?: Record<string, string> | undefined;
+    }>>, Record<string, {
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+        cwd?: string | undefined;
+    } | {
+        url: string;
+        headers: Record<string, string>;
+    }>, Record<string, {
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        cwd?: string | undefined;
+    } | {
+        url: string;
+        headers?: Record<string, string> | undefined;
+    }>>;
+    /** How to start the interceptor server. Default: the bundled adtl-interceptors with this same config file. */
+    interceptors: z.ZodOptional<z.ZodObject<{
+        command: z.ZodString;
+        args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        cwd: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+        cwd?: string | undefined;
+    }, {
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        cwd?: string | undefined;
+    }>>;
+    /** Path of a JSONL audit log. Relative paths are resolved against the config file's directory. */
+    audit: z.ZodOptional<z.ZodString>;
+    /**
+     * `active` (default) enforces the policy. `audit` stops and changes nothing, and
+     * logs what would have been stopped: for trying a policy out safely.
+     */
+    mode: z.ZodDefault<z.ZodEnum<["active", "audit"]>>;
+    /** Timeout for each interceptor invocation, in milliseconds. */
+    interceptorTimeoutMs: z.ZodDefault<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    upstreams: Record<string, {
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+        cwd?: string | undefined;
+    } | {
+        url: string;
+        headers: Record<string, string>;
+    }>;
+    mode: "audit" | "active";
+    interceptorTimeoutMs: number;
+    audit?: string | undefined;
+    interceptors?: {
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+        cwd?: string | undefined;
+    } | undefined;
+}, {
+    upstreams: Record<string, {
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        cwd?: string | undefined;
+    } | {
+        url: string;
+        headers?: Record<string, string> | undefined;
+    }>;
+    audit?: string | undefined;
+    interceptors?: {
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        cwd?: string | undefined;
+    } | undefined;
+    mode?: "audit" | "active" | undefined;
+    interceptorTimeoutMs?: number | undefined;
+}>;
+export type GatewayConfig = z.infer<typeof GatewayConfigSchema>;
+export declare const TOOL_SEPARATOR = "__";
+export declare class EnvExpansionError extends Error {
+    readonly variable: string;
+    constructor(variable: string, where: string);
+}
+/** Replace `${VAR}` with values from `env`. `$${VAR}` keeps a literal `${VAR}`. */
+export declare function expandEnv(value: string, env: NodeJS.ProcessEnv, where: string): string;
+export declare function expandUpstream<T extends Upstream>(id: string, u: T, env: NodeJS.ProcessEnv): T;
+export declare function isHttpUpstream(u: Upstream): u is HttpUpstream;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;EAOrB,CAAC;AAEZ,eAAO,MAAM,kBAAkB;;;;;;;;;EAKpB,CAAC;AAEZ,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;IAAqD,CAAC;AACjF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAQ5B,8GAA8G;;;;;;;;;;;;;;;;;IAE9G,kGAAkG;;IAElG;;;OAGG;;IAEH,gEAAgE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGzD,CAAC;AACZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,qBAAa,iBAAkB,SAAQ,KAAK;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM;gBAAhB,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;CAIrD;AAED,mFAAmF;AACnF,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAOtF;AAMD,wBAAgB,cAAc,CAAC,CAAC,SAAS,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,CAAC,CAY9F;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,IAAI,YAAY,CAE7D"}

package/dist/config.js

@@ -0,0 +1,96 @@
+/**
+ * The `gateway:` section of adtl.yaml.
+ *
+ *   gateway:
+ *     audit: ./adtl-audit.jsonl          # optional JSONL audit log
+ *     mode: audit                        # optional: log what would be stopped, stop nothing
+ *     upstreams:
+ *       github:                          # id must match `servers.github` in the label config
+ *         command: npx
+ *         args: ["-y", "@modelcontextprotocol/server-github"]
+ *         env: { GITHUB_PERSONAL_ACCESS_TOKEN: "${GITHUB_TOKEN}" }
+ *       docs:
+ *         url: https://example.com/mcp
+ *         headers: { Authorization: "Bearer ${DOCS_TOKEN}" }
+ *
+ * `${VAR}` in command, args, env, cwd, url and headers is replaced from the
+ * gateway's environment. A missing variable is a config error.
+ */
+import { z } from "zod";
+const UPSTREAM_ID = /^[A-Za-z0-9-]+$/;
+export const StdioUpstreamSchema = z
+    .object({
+    command: z.string().min(1),
+    args: z.array(z.string()).default([]),
+    env: z.record(z.string()).default({}),
+    cwd: z.string().optional(),
+})
+    .strict();
+export const HttpUpstreamSchema = z
+    .object({
+    url: z.string().min(1),
+    headers: z.record(z.string()).default({}),
+})
+    .strict();
+export const UpstreamSchema = z.union([StdioUpstreamSchema, HttpUpstreamSchema]);
+export const GatewayConfigSchema = z
+    .object({
+    upstreams: z
+        .record(UpstreamSchema)
+        .refine((u) => Object.keys(u).length > 0, "At least one upstream server is required")
+        .refine((u) => Object.keys(u).every((id) => UPSTREAM_ID.test(id)), {
+        message: "Upstream ids may only contain letters, digits and '-' (they prefix tool names as <id>__<tool>)",
+    }),
+    /** How to start the interceptor server. Default: the bundled adtl-interceptors with this same config file. */
+    interceptors: StdioUpstreamSchema.optional(),
+    /** Path of a JSONL audit log. Relative paths are resolved against the config file's directory. */
+    audit: z.string().min(1).optional(),
+    /**
+     * `active` (default) enforces the policy. `audit` stops and changes nothing, and
+     * logs what would have been stopped: for trying a policy out safely.
+     */
+    mode: z.enum(["active", "audit"]).default("active"),
+    /** Timeout for each interceptor invocation, in milliseconds. */
+    interceptorTimeoutMs: z.number().int().positive().default(5000),
+})
+    .strict();
+export const TOOL_SEPARATOR = "__";
+export class EnvExpansionError extends Error {
+    variable;
+    constructor(variable, where) {
+        super(`Environment variable ${variable} is not set (used in ${where})`);
+        this.variable = variable;
+        this.name = "EnvExpansionError";
+    }
+}
+/** Replace `${VAR}` with values from `env`. `$${VAR}` keeps a literal `${VAR}`. */
+export function expandEnv(value, env, where) {
+    return value.replace(/(\$?)\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (match, escape, name) => {
+        if (escape)
+            return match.slice(1);
+        const v = env[name];
+        if (v === undefined)
+            throw new EnvExpansionError(name, where);
+        return v;
+    });
+}
+function expandRecord(rec, env, where) {
+    return Object.fromEntries(Object.entries(rec).map(([k, v]) => [k, expandEnv(v, env, `${where}.${k}`)]));
+}
+export function expandUpstream(id, u, env) {
+    const where = `gateway.upstreams.${id}`;
+    if ("url" in u) {
+        return { ...u, url: expandEnv(u.url, env, `${where}.url`), headers: expandRecord(u.headers, env, `${where}.headers`) };
+    }
+    return {
+        ...u,
+        command: expandEnv(u.command, env, `${where}.command`),
+        args: u.args.map((a, i) => expandEnv(a, env, `${where}.args[${i}]`)),
+        env: expandRecord(u.env, env, `${where}.env`),
+        ...(u.cwd !== undefined ? { cwd: expandEnv(u.cwd, env, `${where}.cwd`) } : {}),
+    };
+}
+export function isHttpUpstream(u) {
+    return "url" in u;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAEtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAKjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC;SACT,MAAM,CAAC,cAAc,CAAC;SACtB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,0CAA0C,CAAC;SACpF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE;QACjE,OAAO,EAAE,gGAAgG;KAC1G,CAAC;IACJ,8GAA8G;IAC9G,YAAY,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC5C,kGAAkG;IAClG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC;;;OAGG;IACH,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACnD,gEAAgE;IAChE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAChE,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC;AAEnC,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACrB;IAArB,YAAqB,QAAgB,EAAE,KAAa;QAClD,KAAK,CAAC,wBAAwB,QAAQ,wBAAwB,KAAK,GAAG,CAAC,CAAC;QADrD,aAAQ,GAAR,QAAQ,CAAQ;QAEnC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,GAAsB,EAAE,KAAa;IAC5E,OAAO,KAAK,CAAC,OAAO,CAAC,sCAAsC,EAAE,CAAC,KAAK,EAAE,MAAc,EAAE,IAAY,EAAE,EAAE;QACnG,IAAI,MAAM;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,SAAS;YAAE,MAAM,IAAI,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,GAA2B,EAAE,GAAsB,EAAE,KAAa;IACtF,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,cAAc,CAAqB,EAAU,EAAE,CAAI,EAAE,GAAsB;IACzF,MAAM,KAAK,GAAG,qBAAqB,EAAE,EAAE,CAAC;IACxC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACf,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,UAAU,CAAC,EAAE,CAAC;IACzH,CAAC;IACD,OAAO;QACL,GAAG,CAAC;QACJ,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,UAAU,CAAC;QACtD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,SAAS,CAAC,GAAG,CAAC,CAAC;QACpE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC;QAC7C,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAW;IACxC,OAAO,KAAK,IAAI,CAAC,CAAC;AACpB,CAAC"}

package/dist/gateway.d.ts

@@ -0,0 +1,34 @@
+import type { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { type CallToolResult, type Tool } from "@modelcontextprotocol/sdk/types.js";
+import type { AuditSink } from "./audit.js";
+import type { InterceptorInvoker } from "./invoker.js";
+export declare const GATEWAY_VERSION = "0.1.1";
+/** `_meta` key on gateway-generated error results describing why a call was stopped. */
+export declare const GATEWAY_DECISION_KEY = "adtl/gateway";
+export interface GatewayLogger {
+    info(msg: string): void;
+    warn(msg: string): void;
+}
+export interface AdtlGatewayOptions {
+    upstreams: Map<string, Client>;
+    invoker: InterceptorInvoker;
+    /** One gateway process serves one agent session over stdio. */
+    sessionId?: string;
+    audit?: AuditSink;
+    logger?: GatewayLogger;
+}
+export declare class AdtlGateway {
+    readonly sessionId: string;
+    private readonly upstreams;
+    private readonly invoker;
+    private readonly audit;
+    private readonly log;
+    private routes;
+    constructor(opts: AdtlGatewayOptions);
+    /** The downstream MCP server the agent connects to. */
+    createServer(): Server;
+    listTools(): Promise<Tool[]>;
+    callTool(name: string, args: Record<string, unknown>): Promise<CallToolResult>;
+}
+//# sourceMappingURL=gateway.d.ts.map

package/dist/gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,IAAI,EACV,MAAM,oCAAoC,CAAC;AAE5C,OAAO,KAAK,EAAc,SAAS,EAAE,MAAM,YAAY,CAAC;AAExD,OAAO,KAAK,EAAyB,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAE9E,eAAO,MAAM,eAAe,UAAU,CAAC;AAEvC,wFAAwF;AACxF,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AAQnD,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAOD,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,EAAE,kBAAkB,CAAC;IAC5B,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAoBD,qBAAa,WAAW;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwB;IAC9C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAgB;IACpC,OAAO,CAAC,MAAM,CAA4B;gBAE9B,IAAI,EAAE,kBAAkB;IAQpC,uDAAuD;IACvD,YAAY,IAAI,MAAM;IAehB,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAuB5B,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;CA+ErF"}

package/dist/gateway.js

@@ -0,0 +1,166 @@
+/**
+ * The gateway: one MCP server facing the agent, many MCP clients facing the
+ * upstream servers, and an interceptor chain in between.
+ *
+ * tools/list  → every upstream's tools, renamed <upstream>__<tool>
+ * tools/call  → request interceptors (adtl.policy) → upstream → response
+ *               interceptors (adtl.label) → agent
+ *
+ * When a call is stopped, the agent receives a normal tool result with
+ * `isError: true` explaining why, so the model can tell the user. In v0.1 an
+ * "ask" decision is treated as a block; approvals arrive in v0.2.
+ *
+ * In audit mode (the invoker runs every interceptor with `mode: "audit"`)
+ * nothing is stopped or changed: calls the policy would stop are forwarded,
+ * and the audit log records what would have happened.
+ */
+import { randomUUID } from "node:crypto";
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { CallToolRequestSchema, ListToolsRequestSchema, } from "@modelcontextprotocol/sdk/types.js";
+import { TOOL_SEPARATOR } from "./config.js";
+export const GATEWAY_VERSION = "0.1.1";
+/** `_meta` key on gateway-generated error results describing why a call was stopped. */
+export const GATEWAY_DECISION_KEY = "adtl/gateway";
+const stderrLogger = {
+    info: (m) => console.error(`[adtl-gateway] ${m}`),
+    warn: (m) => console.error(`[adtl-gateway] warning: ${m}`),
+};
+function textError(text, meta) {
+    return { content: [{ type: "text", text }], isError: true, _meta: { [GATEWAY_DECISION_KEY]: meta } };
+}
+function blockedMessage(b) {
+    if (b.decision === "ask") {
+        return (`ADTL stopped this call because it needs a human's approval: ${b.reason}. ` +
+            `This version of ADTL cannot ask for approval yet, so the call was not run. Tell the user what you were trying to do.`);
+    }
+    return `ADTL blocked this call: ${b.reason}. The call was not run.`;
+}
+function infoOf(outcome, interceptor) {
+    return outcome.results.find((r) => r.interceptor === interceptor)?.info ?? {};
+}
+export class AdtlGateway {
+    sessionId;
+    upstreams;
+    invoker;
+    audit;
+    log;
+    routes = new Map();
+    constructor(opts) {
+        this.upstreams = opts.upstreams;
+        this.invoker = opts.invoker;
+        this.sessionId = opts.sessionId ?? randomUUID();
+        this.audit = opts.audit;
+        this.log = opts.logger ?? stderrLogger;
+    }
+    /** The downstream MCP server the agent connects to. */
+    createServer() {
+        const server = new Server({ name: "adtl-gateway", version: GATEWAY_VERSION }, {
+            capabilities: { tools: {} },
+            instructions: "Tools from several MCP servers, named <server>__<tool>. ADTL checks each call against trust labels; " +
+                "if a call is stopped, the result explains why.",
+        });
+        server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: await this.listTools() }));
+        server.setRequestHandler(CallToolRequestSchema, async (req) => this.callTool(req.params.name, req.params.arguments ?? {}));
+        return server;
+    }
+    async listTools() {
+        const routes = new Map();
+        const tools = [];
+        for (const [upstream, client] of this.upstreams) {
+            let cursor;
+            try {
+                do {
+                    const page = await client.listTools(cursor ? { cursor } : {});
+                    for (const t of page.tools) {
+                        const name = `${upstream}${TOOL_SEPARATOR}${t.name}`;
+                        routes.set(name, { upstream, tool: t.name, ...(t.annotations ? { annotations: t.annotations } : {}) });
+                        tools.push({ ...t, name });
+                    }
+                    cursor = page.nextCursor;
+                } while (cursor);
+            }
+            catch (err) {
+                this.log.warn(`tools/list failed for ${upstream}: ${err.message}`);
+            }
+        }
+        this.routes = routes;
+        return tools;
+    }
+    async callTool(name, args) {
+        const started = performance.now();
+        let route = this.routes.get(name);
+        if (!route) {
+            await this.listTools();
+            route = this.routes.get(name);
+        }
+        if (!route)
+            return textError(`Unknown tool: ${name}`, { reason: "unknown_tool" });
+        const client = this.upstreams.get(route.upstream);
+        const context = {
+            sessionId: this.sessionId,
+            timestamp: new Date().toISOString(),
+            principal: { type: "anonymous" },
+        };
+        const config = {
+            server: route.upstream,
+            ...(route.annotations ? { toolAnnotations: route.annotations } : {}),
+        };
+        const base = { sessionId: this.sessionId, event: "tools/call", server: route.upstream, tool: route.tool };
+        const finish = (entry) => this.audit?.write({ ts: context.timestamp, ...base, ...entry, durationMs: Math.round(performance.now() - started) });
+        // 1. Request phase: adtl.policy decides whether the call may run.
+        const requestPayload = { method: "tools/call", params: { name: route.tool, arguments: args } };
+        const req = await this.invoker.runRequest({ event: "tools/call", payload: requestPayload, config, context });
+        const policy = infoOf(req, "adtl.policy");
+        if (req.blocked) {
+            finish({ outcome: "blocked", decision: req.blocked.decision, reason: req.blocked.reason, matched: policy.matched, callHash: policy.callHash, sessionLabel: policy.sessionLabel, warnings: req.warnings });
+            this.log.info(`${req.blocked.decision} ${name}: ${req.blocked.reason}`);
+            return textError(blockedMessage(req.blocked), { ...req.blocked, callHash: policy.callHash });
+        }
+        const forwarded = req.payload.params;
+        const decision = policy["adtl/decision"];
+        const audit = this.invoker.modeOverride === "audit";
+        // Only set in audit mode, for calls the policy would have stopped.
+        const wouldStop = audit && decision !== undefined && decision !== "allow"
+            ? { reason: policy.reason, matched: policy.matched }
+            : undefined;
+        if (wouldStop)
+            this.log.info(`audit: would ${decision} ${name}: ${wouldStop.reason}`);
+        // 2. Forward to the upstream server.
+        let result;
+        try {
+            result = (await client.callTool({ name: forwarded.name, arguments: forwarded.arguments }));
+        }
+        catch (err) {
+            const reason = err.message;
+            finish({ outcome: "upstream_error", ...(decision ? { decision } : {}), reason, callHash: policy.callHash, ...(audit ? { mode: "audit" } : {}), warnings: req.warnings });
+            return textError(`The ${route.upstream} server returned an error: ${reason}`, { reason: "upstream_error" });
+        }
+        // 3. Response phase: adtl.label labels the result and records it in the session.
+        const res = await this.invoker.runResponse({
+            event: "tools/call",
+            payload: { method: "tools/call", params: forwarded, result },
+            config,
+            context,
+        });
+        if (res.blocked) {
+            // Fail closed: an unlabeled result must not reach the agent.
+            finish({ outcome: "blocked", decision: res.blocked.decision, reason: res.blocked.reason, callHash: policy.callHash, warnings: [...req.warnings, ...res.warnings] });
+            this.log.warn(`result of ${name} withheld: ${res.blocked.reason}`);
+            return textError(`ADTL could not label the result of this call, so it was withheld: ${res.blocked.reason}`, { ...res.blocked });
+        }
+        const label = infoOf(res, "adtl.label");
+        finish({
+            outcome: "forwarded",
+            // Missing only if adtl.policy failed and was allowed to (audit mode); see warnings.
+            ...(decision ? { decision } : {}),
+            ...(wouldStop ?? {}),
+            ...(audit ? { mode: "audit" } : {}),
+            callHash: policy.callHash,
+            label: label.label,
+            sessionLabel: label.sessionLabel,
+            warnings: [...req.warnings, ...res.warnings],
+        });
+        return res.payload.result;
+    }
+}
+//# sourceMappingURL=gateway.js.map

package/dist/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GAGvB,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7C,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AAEvC,wFAAwF;AACxF,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAanD,MAAM,YAAY,GAAkB;IAClC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC;CAC3D,CAAC;AAWF,SAAS,SAAS,CAAC,IAAY,EAAE,IAA6B;IAC5D,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;AACvG,CAAC;AAED,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QACzB,OAAO,CACL,+DAA+D,CAAC,CAAC,MAAM,IAAI;YAC3E,sHAAsH,CACvH,CAAC;IACJ,CAAC;IACD,OAAO,2BAA2B,CAAC,CAAC,MAAM,yBAAyB,CAAC;AACtE,CAAC;AAED,SAAS,MAAM,CAAC,OAAqB,EAAE,WAAmB;IACxD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,OAAO,WAAW;IACb,SAAS,CAAS;IACV,SAAS,CAAsB;IAC/B,OAAO,CAAqB;IAC5B,KAAK,CAAwB;IAC7B,GAAG,CAAgB;IAC5B,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IAE1C,YAAY,IAAwB;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC;IACzC,CAAC;IAED,uDAAuD;IACvD,YAAY;QACV,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,EAClD;YACE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC3B,YAAY,EACV,sGAAsG;gBACtG,gDAAgD;SACnD,CACF,CAAC;QACF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAClG,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3H,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;QACxC,MAAM,KAAK,GAAW,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAChD,IAAI,MAA0B,CAAC;YAC/B,IAAI,CAAC;gBACH,GAAG,CAAC;oBACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC9D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;wBAC3B,MAAM,IAAI,GAAG,GAAG,QAAQ,GAAG,cAAc,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;wBACrD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;wBACvG,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC7B,CAAC;oBACD,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;gBAC3B,CAAC,QAAQ,MAAM,EAAE;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,QAAQ,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAA6B;QACxD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAClC,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACvB,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC,iBAAiB,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QAElF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAE,CAAC;QACnD,MAAM,OAAO,GAAsB;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;SACjC,CAAC;QACF,MAAM,MAAM,GAA4B;YACtC,MAAM,EAAE,KAAK,CAAC,QAAQ;YACtB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC;QACF,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,YAAqB,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACnH,MAAM,MAAM,GAAG,CAAC,KAAgE,EAAE,EAAE,CAClF,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,SAAU,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;QAExH,kEAAkE;QAClE,MAAM,cAAc,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;QAC/F,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7G,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC1C,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1M,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACxE,OAAO,SAAS,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,SAAS,GAAI,GAAG,CAAC,OAAiC,CAAC,MAAM,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAuB,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC;QACpD,mEAAmE;QACnE,MAAM,SAAS,GACb,KAAK,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,OAAO;YACrD,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAA4B,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;YAC1E,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,SAAS;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAEtF,qCAAqC;QACrC,IAAI,MAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAmB,CAAC;QAC/G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAI,GAAa,CAAC,OAAO,CAAC;YACtC,MAAM,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClL,OAAO,SAAS,CAAC,OAAO,KAAK,CAAC,QAAQ,8BAA8B,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC9G,CAAC;QAED,iFAAiF;QACjF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACzC,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;YAC5D,MAAM;YACN,OAAO;SACR,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,6DAA6D;YAC7D,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACpK,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,cAAc,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACnE,OAAO,SAAS,CAAC,qEAAqE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAClI,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACxC,MAAM,CAAC;YACL,OAAO,EAAE,WAAW;YACpB,oFAAoF;YACpF,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;YACpB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC;SAC7C,CAAC,CAAC;QACH,OAAQ,GAAG,CAAC,OAAsC,CAAC,MAAM,CAAC;IAC5D,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./config.js";
+export * from "./invoker.js";
+export * from "./audit.js";
+export * from "./gateway.js";
+export * from "./startup.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export * from "./config.js";
+export * from "./invoker.js";
+export * from "./audit.js";
+export * from "./gateway.js";
+export * from "./startup.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC"}

package/dist/invoker.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Runs interceptors in the order SEP-2624 requires:
+ *
+ * - Sending (request phase, gateway → upstream): Mutate (sequential, by
+ *   priorityHint then name) → Validate (parallel).
+ * - Receiving (response phase, upstream → gateway): Validate (parallel) →
+ *   Mutate (sequential).
+ *
+ * Only `severity: "error"` blocks. Audit-mode interceptors never block, and
+ * their mutations are not applied. An interceptor that fails (error or
+ * timeout) blocks the message unless it declares `failOpen: true`.
+ *
+ * The invoker may override every interceptor's `mode`, as SEP-2624 allows
+ * (e.g. audit in staging, active in production).
+ */
+import type { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { type InterceptorDefinition, type InterceptorResult, type InvocationContext } from "@adtl/interceptors";
+import type { Decision } from "@adtl/labels";
+export type InterceptorMode = NonNullable<InterceptorDefinition["mode"]>;
+export interface BoundInterceptor {
+    client: Client;
+    definition: InterceptorDefinition;
+}
+export interface Blocked {
+    interceptor: string;
+    decision: Decision;
+    reason: string;
+}
+export interface ChainOutcome {
+    payload: unknown;
+    blocked?: Blocked;
+    results: InterceptorResult[];
+    /** Interceptors that failed but were allowed to (failOpen or audit mode). */
+    warnings: string[];
+}
+export interface InvokeOptions {
+    event: string;
+    payload: unknown;
+    config: Record<string, unknown>;
+    context: InvocationContext;
+}
+export declare class InterceptorInvoker {
+    private readonly interceptors;
+    private readonly timeoutMs;
+    /** Overrides the mode every interceptor declares. */
+    readonly modeOverride?: InterceptorMode | undefined;
+    constructor(interceptors: BoundInterceptor[], timeoutMs?: number, 
+    /** Overrides the mode every interceptor declares. */
+    modeOverride?: InterceptorMode | undefined);
+    /** Discover the interceptors an interceptor server offers. */
+    static discover(client: Client): Promise<BoundInterceptor[]>;
+    get definitions(): InterceptorDefinition[];
+    runRequest(opts: InvokeOptions): Promise<ChainOutcome>;
+    runResponse(opts: InvokeOptions): Promise<ChainOutcome>;
+    private isAudit;
+    private select;
+    private invoke;
+    /** Handle an interceptor failure. Returns false if the chain must stop. */
+    private failed;
+    /** Sequential mutations, atomic: on failure the original payload is kept. */
+    private mutate;
+    /** Parallel validations. Only severity "error" blocks. */
+    private validate;
+}
+//# sourceMappingURL=invoker.d.ts.map

package/dist/invoker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoker.d.ts","sourceRoot":"","sources":["../src/invoker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,EAIL,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EAIvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAa7C,MAAM,MAAM,eAAe,GAAG,WAAW,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;AAEzE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,qBAAqB,CAAC;CACnC;AAED,MAAM,WAAW,OAAO;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AAaD,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,YAAY,CAAC,EAAE,eAAe;gBAHtB,YAAY,EAAE,gBAAgB,EAAE,EAChC,SAAS,SAAO;IACjC,qDAAqD;IAC5C,YAAY,CAAC,EAAE,eAAe,YAAA;IAGzC,8DAA8D;WACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAMlE,IAAI,WAAW,IAAI,qBAAqB,EAAE,CAEzC;IAEK,UAAU,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAOtD,WAAW,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAO7D,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,MAAM;YAIA,MAAM;IAUpB,2EAA2E;IAC3E,OAAO,CAAC,MAAM;IAUd,6EAA6E;YAC/D,MAAM;IAoBpB,0DAA0D;YAC5C,QAAQ;CAsBvB"}