@aimarket/warden 0.6.0 → 0.8.0

package/dist/wrap-cli.js

@@ -0,0 +1,158 @@
+import { readFile } from 'node:fs/promises';
+import { createHash, createPublicKey } from 'node:crypto';
+import { createInterface } from 'node:readline/promises';
+import { join } from 'node:path';
+import { asPolicy } from './mcp-tools.js';
+import { defaultStateDir, readState, withStateLock, writeState } from './state.js';
+import { FilePinStore, pinRevision } from './pin-store.js';
+import { Warden, ThreatFeed, canonicalToolsHash, serverIdentityHash, displaySafe } from './index.js';
+import { observationPath, observationRevision, describeReview } from './wrap-state.js';
+export async function parseWrapArgs(argv) {
+    const mode = argv.shift();
+    if (mode !== 'wrap' && mode !== 'pins')
+        throw new Error('Usage: warden-mcp wrap [flags] -- command [args] | pins status|approve|revoke --id ID');
+    const opts = { mode, args: [], stateDir: defaultStateDir(), policy: asPolicy(undefined), auditOnly: false };
+    if (mode === 'pins') {
+        opts.action = argv.shift();
+        if (!['status', 'approve', 'revoke'].includes(opts.action ?? ''))
+            throw new Error('pins requires status, approve or revoke');
+    }
+    const seen = new Set();
+    while (argv.length) {
+        const flag = argv.shift();
+        if (flag === '--' && mode === 'wrap') {
+            opts.command = argv.shift();
+            opts.args = argv;
+            break;
+        }
+        if (seen.has(flag))
+            throw new Error(`Duplicate flag ${flag}`);
+        seen.add(flag);
+        if (flag === '--audit-only' && mode === 'wrap') {
+            opts.auditOnly = true;
+            continue;
+        }
+        const allowed = mode === 'wrap' ? ['--id', '--state-dir', '--policy', '--feed', '--feed-key', '--verdict-log'] : ['--id', '--state-dir', '--feed', '--feed-key'];
+        if (!allowed.includes(flag))
+            throw new Error(`Unknown flag ${flag}`);
+        const value = argv.shift();
+        if (!value || value.startsWith('--'))
+            throw new Error(`Missing value for ${flag}`);
+        switch (flag) {
+            case '--id':
+                if (!/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/.test(value))
+                    throw new Error('--id must be a slug (1–128 letters, digits, ., _ or -)');
+                opts.id = value;
+                break;
+            case '--state-dir':
+                opts.stateDir = value;
+                break;
+            case '--feed':
+                opts.feed = value;
+                break;
+            case '--feed-key':
+                opts.feedKey = value;
+                break;
+            case '--verdict-log':
+                opts.verdictLog = value;
+                break;
+            case '--policy': {
+                const raw = JSON.parse(await readFile(value, 'utf8'));
+                // asPolicy preserves compatibility for MCP callers; CLI files must not silently repair bad types.
+                if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+                    throw new Error('policy must be an object');
+                for (const key of Object.keys(raw))
+                    if (!['blockAtSeverity', 'pinToolDefs', 'allowUnknownServers', 'sensitiveToolPatterns'].includes(key))
+                        throw new Error(`Unknown policy field ${key}`);
+                for (const key of ['pinToolDefs', 'allowUnknownServers'])
+                    if (key in raw && typeof raw[key] !== 'boolean')
+                        throw new Error(`policy.${key} must be boolean`);
+                if ('blockAtSeverity' in raw && typeof raw.blockAtSeverity !== 'string')
+                    throw new Error('policy.blockAtSeverity must be a severity');
+                if ('sensitiveToolPatterns' in raw && (!Array.isArray(raw.sensitiveToolPatterns) || !raw.sensitiveToolPatterns.every((v) => typeof v === 'string')))
+                    throw new Error('policy.sensitiveToolPatterns must be strings');
+                opts.policy = asPolicy(raw);
+                break;
+            }
+        }
+    }
+    if (mode === 'wrap' && !opts.command)
+        throw new Error('wrap requires -- command [args]');
+    if (mode === 'pins' && !opts.id)
+        throw new Error('pins requires --id');
+    if (opts.feed) {
+        const url = new URL(opts.feed);
+        if (!['https:', 'http:'].includes(url.protocol))
+            throw new Error('--feed requires an HTTP(S) URL');
+    }
+    if (opts.feedKey) {
+        if (!/^(?:[a-fA-F0-9]{2})+$/.test(opts.feedKey) || createPublicKey({ key: Buffer.from(opts.feedKey, 'hex'), format: 'der', type: 'spki' }).asymmetricKeyType !== 'ed25519')
+            throw new Error('--feed-key must be an Ed25519 SPKI DER hex key');
+    }
+    return opts;
+}
+export function wrapServer(opts) {
+    const id = opts.id ?? createHash('sha256').update(JSON.stringify([opts.command, opts.args])).digest('hex');
+    return { id, name: id, transport: 'stdio', command: opts.command, args: opts.args };
+}
+export function wrapLogger(auditOnly = false) {
+    const write = (message) => process.stderr.write(`warden: ${auditOnly ? 'AUDIT-ONLY ' : ''}${displaySafe(message, 8192)}\n`);
+    const logger = { debug: () => { }, info: () => { }, warn: write, error: write, child: () => logger };
+    return logger;
+}
+export async function loadWrapFeed(opts) {
+    const log = wrapLogger(opts.auditOnly);
+    const feed = new ThreatFeed({ feedPublicKey: opts.feedKey, stateDir: opts.stateDir, log });
+    await feed.load(opts.feed);
+    if (opts.feed && feed.status.stale)
+        log.warn('Remote feed unavailable or stale; using retained records and built-in floor');
+    return feed;
+}
+export async function runPins(opts) {
+    if (!process.stdin.isTTY)
+        throw new Error('pins requires a human terminal (TTY on stdin); refusing non-interactive review');
+    const id = opts.id, path = observationPath(opts.stateDir, id), store = new FilePinStore(join(opts.stateDir, 'pins'));
+    const { previous, current } = await withStateLock(path, async () => ({ previous: await store.getPin(id), current: await readState(path) }));
+    process.stdout.write(describeReview(previous, current) + '\n');
+    if (opts.action === 'status')
+        return;
+    if (opts.action === 'approve' && !current)
+        throw new Error('No observed definitions; run wrap first');
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    let answer;
+    try {
+        answer = await rl.question(`Type ${opts.action} ${id} to confirm: `);
+    }
+    finally {
+        rl.close();
+    }
+    if (answer !== `${opts.action} ${id}`)
+        throw new Error('Not confirmed; pin unchanged');
+    const feed = await loadWrapFeed(opts);
+    await withStateLock(path, async () => {
+        if (observationRevision(await readState(path)) !== observationRevision(current))
+            throw new Error('Observed definitions changed since review; inspect status again');
+        if (opts.action === 'revoke') {
+            // Persist denial before deleting the pin, so a crash cannot accidentally enable TOFU.
+            if (current)
+                await writeState(path, { ...current, revoked: true });
+            await store.replace(id, pinRevision(previous));
+        }
+        else {
+            const tools = current.tools ?? previous?.tools;
+            if (!tools)
+                throw new Error('No reviewed tool snapshot available');
+            const policy = asPolicy(current.policy);
+            // Re-approval removes only pin drift; the other gates still have to pass.
+            const warden = Warden.create({ policy, threatFeed: feed, store: { getPin: async () => undefined, putPin: async () => { } } });
+            const verdict = await warden.vet(current.server, tools);
+            if (!verdict.allow)
+                throw new Error(`Approval blocked: ${verdict.findings.map(f => f.code).join(', ')}`);
+            await store.replace(id, pinRevision(previous), { serverId: id, tools, toolsHash: canonicalToolsHash(tools), toolsHashVersion: 2,
+                identityHash: serverIdentityHash(current.server), toolNames: tools.map(t => t.name).sort(), approvedAt: new Date().toISOString() });
+            await writeState(path, { ...current, revoked: false });
+        }
+    });
+    process.stdout.write(`${opts.action}: ${displaySafe(id)}\n`);
+}
+//# sourceMappingURL=wrap-cli.js.map

package/dist/wrap-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap-cli.js","sourceRoot":"","sources":["../src/wrap-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAQvF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAc;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC1B,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IACjJ,MAAM,IAAI,GAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACzH,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC/H,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAG,CAAC;QAC3B,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YAAC,MAAM;QAAC,CAAC;QAC/F,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QACpF,MAAM,OAAO,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACjK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;QACnF,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,MAAM;gBACT,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;gBACjI,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;gBAAC,MAAM;YACzB,KAAK,aAAa;gBAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;gBAAC,MAAM;YACjD,KAAK,QAAQ;gBAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;gBAAC,MAAM;YACxC,KAAK,YAAY;gBAAE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;gBAAC,MAAM;YAC/C,KAAK,eAAe;gBAAE,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;gBAAC,MAAM;YACrD,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;gBACtD,kGAAkG;gBAClG,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBACvG,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;oBAAE,IAAI,CAAC,CAAC,iBAAiB,EAAE,aAAa,EAAE,qBAAqB,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;gBAC1L,KAAK,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,qBAAqB,CAAC;oBAAE,IAAI,GAAG,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;wBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,kBAAkB,CAAC,CAAC;gBAC5J,IAAI,iBAAiB,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBACtI,IAAI,uBAAuB,IAAI,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBAC9N,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAAC,MAAM;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACzF,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACvE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,iBAAiB,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAChP,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,IAAiB;IAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AACvF,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,SAAS,GAAG,KAAK;IAC1C,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACpI,MAAM,MAAM,GAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;IACjH,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAiB;IAClD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3F,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,GAAG,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;IAC5H,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAiB;IAC7C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IAC5H,MAAM,EAAE,GAAG,IAAI,CAAC,EAAG,EAAE,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,KAAK,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACtH,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,SAAS,CAAc,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACzJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO;IACrC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACtG,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,EAAE,eAAe,CAAC,CAAC;IAAC,CAAC;YACrE,CAAC;QAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IACvB,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACnC,IAAI,mBAAmB,CAAC,MAAM,SAAS,CAAc,IAAI,CAAC,CAAC,KAAK,mBAAmB,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACjL,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7B,sFAAsF;YACtF,IAAI,OAAO;gBAAE,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,OAAQ,CAAC,KAAK,IAAI,QAAQ,EAAE,KAAK,CAAC;YAChD,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAQ,CAAC,MAAM,CAAC,CAAC;YACzC,0EAA0E;YAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7H,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,OAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACzD,IAAI,CAAC,OAAO,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,CAAC;gBAC7H,YAAY,EAAE,kBAAkB,CAAC,OAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACvI,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC"}

package/dist/wrap-state.d.ts

@@ -0,0 +1,19 @@
+import { FilePinStore, pinRevision } from './pin-store.js';
+import { Warden } from './index.js';
+import type { McpServerRef, ToolDef, WardenPolicy, WardenVerdict } from './types.js';
+import type { ThreatFeed } from './threat-feed.js';
+export interface Observation {
+    server: McpServerRef;
+    /** Absent when vetLaunch refused to start the new command. */
+    tools?: ToolDef[];
+    policy: WardenPolicy;
+    revoked?: boolean;
+}
+export declare function observationPath(dir: string, id: string): string;
+export declare function observationRevision(value: Observation | undefined): string;
+export declare function observe(dir: string, value: Observation): Promise<void>;
+/** One lock spans TOFU's read/vet/approve, as well as human review's final CAS. */
+export declare function vetAndPin(dir: string, server: McpServerRef, tools: ToolDef[], policy: WardenPolicy, store: FilePinStore, warden: Warden, feed: ThreatFeed, auditOnly: boolean, isCurrent: () => boolean, record: (v: WardenVerdict) => void): Promise<WardenVerdict>;
+export declare function describeReview(previous: Awaited<ReturnType<FilePinStore['getPin']>>, current: Observation | undefined): string;
+export { pinRevision };
+//# sourceMappingURL=wrap-state.d.ts.map

package/dist/wrap-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap-state.d.ts","sourceRoot":"","sources":["../src/wrap-state.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,MAAM,EAAuD,MAAM,YAAY,CAAC;AACzF,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,YAAY,CAAC;IACrB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AACD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAE/D;AACD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,MAAM,CAE1E;AACD,wBAAsB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAO5E;AAED,mFAAmF;AACnF,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EACvG,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAiBjK;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,MAAM,CAiB9H;AACD,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/wrap-state.js

@@ -0,0 +1,62 @@
+import { createHash } from 'node:crypto';
+import { join } from 'node:path';
+import { pinRevision } from './pin-store.js';
+import { readState, writeState, withStateLock } from './state.js';
+import { Warden, canonicalToolsHash, serverIdentityHash, displaySafe } from './index.js';
+export function observationPath(dir, id) {
+    return join(dir, 'wrap', createHash('sha256').update(id).digest('hex') + '.json');
+}
+export function observationRevision(value) {
+    return createHash('sha256').update(JSON.stringify(value) ?? 'null').digest('hex');
+}
+export async function observe(dir, value) {
+    const path = observationPath(dir, value.server.id);
+    await withStateLock(path, async () => {
+        const previous = await readState(path);
+        const tools = value.tools ?? (previous?.revoked && serverIdentityHash(previous.server) === serverIdentityHash(value.server) ? previous.tools : undefined);
+        await writeState(path, { ...value, tools, revoked: previous?.revoked });
+    });
+}
+/** One lock spans TOFU's read/vet/approve, as well as human review's final CAS. */
+export async function vetAndPin(dir, server, tools, policy, store, warden, feed, auditOnly, isCurrent, record) {
+    const path = observationPath(dir, server.id);
+    return withStateLock(path, async () => {
+        const previous = await readState(path);
+        await writeState(path, { server, tools, policy, revoked: previous?.revoked });
+        const verdict = await warden.vet(server, tools);
+        record(verdict);
+        if (!auditOnly && !isCurrent())
+            throw new Error('tools changed, blocked by WARDEN during verification');
+        if (previous?.revoked && !auditOnly)
+            throw new Error('Approval revoked; inspect pins status and approve before reconnecting');
+        if (!auditOnly && verdict.allow && policy.pinToolDefs && !previous?.revoked && !await store.getPin(server.id)) {
+            // Use the published approve API with a CAS adapter: other hosts may share this store.
+            const firstContact = Warden.create({ policy, threatFeed: feed,
+                store: { getPin: id => store.getPin(id), putPin: pin => store.replace(server.id, null, pin) } });
+            await firstContact.approve(server, tools);
+        }
+        return verdict;
+    });
+}
+export function describeReview(previous, current) {
+    const oldTools = previous?.tools ?? [];
+    const newTools = current?.tools ?? oldTools;
+    const lines = [`Previous identity: ${previous?.identityHash ?? '(none)'}`,
+        `Observed identity: ${current ? serverIdentityHash(current.server) : '(none)'}`,
+        `Launch: ${current ? JSON.stringify(current.server) : '(none)'}`];
+    if (current && !current.tools)
+        lines.push('Launch was blocked; tool definitions below are the PREVIOUS snapshot, not fetched from the new command.');
+    for (const name of new Set([...oldTools, ...newTools].map(t => t.name))) {
+        const old = oldTools.find(t => t.name === name), next = newTools.find(t => t.name === name);
+        if (JSON.stringify(old) !== JSON.stringify(next)) {
+            if (old)
+                lines.push('- ' + JSON.stringify(old));
+            if (next)
+                lines.push('+ ' + JSON.stringify(next));
+        }
+    }
+    lines.push(`Previous tools: ${previous?.toolsHash ?? '(none)'}`, `Observed tools: ${canonicalToolsHash(newTools)}`, `Revoked: ${current?.revoked === true}`);
+    return lines.map(line => displaySafe(line, 2_000_000)).join('\n');
+}
+export { pinRevision };
+//# sourceMappingURL=wrap-state.js.map

package/dist/wrap-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap-state.js","sourceRoot":"","sources":["../src/wrap-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAgB,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAWzF,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,EAAU;IACrD,OAAO,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC;AACpF,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAA8B;IAChE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,KAAkB;IAC3D,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACnC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAc,IAAI,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC1J,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,MAAoB,EAAE,KAAgB,EAAE,MAAoB,EACvG,KAAmB,EAAE,MAAc,EAAE,IAAgB,EAAE,SAAkB,EAAE,SAAwB,EAAE,MAAkC;IACvI,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7C,OAAO,aAAa,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAc,IAAI,CAAC,CAAC;QACpD,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,CAAC;QAChB,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACxG,IAAI,QAAQ,EAAE,OAAO,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC9H,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9G,sFAAsF;YACtF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI;gBAC3D,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACnG,MAAM,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAqD,EAAE,OAAgC;IACpH,MAAM,QAAQ,GAAG,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,IAAI,QAAQ,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,sBAAsB,QAAQ,EAAE,YAAY,IAAI,QAAQ,EAAE;QACvE,sBAAsB,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC/E,WAAW,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpE,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,yGAAyG,CAAC,CAAC;IACrJ,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC5F,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,IAAI,GAAG;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,mBAAmB,QAAQ,EAAE,SAAS,IAAI,QAAQ,EAAE,EAAE,mBAAmB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAChH,YAAY,OAAO,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AACD,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/wrap-wire.d.ts

@@ -0,0 +1,13 @@
+import type { Readable } from 'node:stream';
+export declare const WRAP_FRAME_BYTES: number;
+export type FrameMode = 'unknown' | 'ndjson' | 'lsp';
+/** Incremental, bounded framing. Raw JSON bodies are retained for transparent forwarding. */
+export declare class WrapFrames {
+    mode: FrameMode;
+    private buf;
+    constructor(mode?: FrameMode);
+    push(chunk: Buffer): string[];
+    end(): string[];
+}
+export declare function readFrames(stream: Readable, frames: WrapFrames, onBody: (body: string) => void, onError: (e: unknown) => void, onEnd: () => void): void;
+//# sourceMappingURL=wrap-wire.d.ts.map

package/dist/wrap-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap-wire.d.ts","sourceRoot":"","sources":["../src/wrap-wire.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,eAAO,MAAM,gBAAgB,QAAmB,CAAC;AACjD,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAC;AAErD,6FAA6F;AAC7F,qBAAa,UAAU;IACrB,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,CAAC,GAAG,CAA2B;gBAC1B,IAAI,GAAE,SAAqB;IACvC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE;IAuC7B,GAAG,IAAI,MAAM,EAAE;CAKhB;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,EAAE,KAAK,EAAE,MAAM,IAAI,GAAG,IAAI,CAWvJ"}

package/dist/wrap-wire.js

@@ -0,0 +1,88 @@
+export const WRAP_FRAME_BYTES = 32 * 1024 * 1024;
+/** Incremental, bounded framing. Raw JSON bodies are retained for transparent forwarding. */
+export class WrapFrames {
+    mode;
+    buf = Buffer.alloc(0);
+    constructor(mode = 'unknown') { this.mode = mode; }
+    push(chunk) {
+        this.buf = Buffer.concat([this.buf, chunk]);
+        if (this.mode === 'unknown') {
+            const prefix = this.buf.subarray(0, 8193).toString('ascii').trimStart().toLowerCase();
+            if (!prefix || 'content-length:'.startsWith(prefix)) {
+                if (this.buf.length > 8192)
+                    throw new Error('MCP header too large');
+                return [];
+            }
+            this.mode = prefix.startsWith('content-length:') ? 'lsp' : 'ndjson';
+        }
+        const bodies = [];
+        while (this.buf.length) {
+            let start = 0, end, consumed;
+            if (this.mode === 'lsp') {
+                const header = this.buf.indexOf('\r\n\r\n');
+                if (header < 0) {
+                    if (this.buf.length > 8192)
+                        throw new Error('MCP header too large');
+                    break;
+                }
+                if (header > 8192)
+                    throw new Error('MCP header too large');
+                const lengths = [...this.buf.subarray(0, header).toString('ascii').matchAll(/^Content-Length:\s*(\d+)\s*$/gim)];
+                const length = lengths.length === 1 ? Number(lengths[0][1]) : NaN;
+                if (!Number.isSafeInteger(length) || length < 0 || length > WRAP_FRAME_BYTES)
+                    throw new Error('Invalid or oversized MCP frame');
+                start = header + 4;
+                end = start + length;
+                consumed = end;
+                if (this.buf.length < end)
+                    break;
+            }
+            else {
+                end = this.buf.indexOf(10);
+                consumed = end + 1;
+                if (end < 0) {
+                    if (this.buf.length > WRAP_FRAME_BYTES)
+                        throw new Error('MCP frame too large');
+                    break;
+                }
+                if (end > WRAP_FRAME_BYTES)
+                    throw new Error('MCP frame too large');
+            }
+            const body = this.buf.subarray(start, end).toString('utf8');
+            this.buf = this.buf.subarray(consumed);
+            if (body.trim())
+                bodies.push(body);
+        }
+        return bodies;
+    }
+    end() {
+        if (!this.buf.length)
+            return [];
+        if (this.mode === 'lsp')
+            throw new Error('Incomplete MCP frame');
+        return this.push(Buffer.from('\n'));
+    }
+}
+export function readFrames(stream, frames, onBody, onError, onEnd) {
+    stream.on('data', chunk => {
+        try {
+            for (const body of frames.push(Buffer.from(chunk)))
+                onBody(body);
+        }
+        catch (e) {
+            onError(e);
+        }
+    });
+    stream.on('end', () => {
+        try {
+            for (const body of frames.end())
+                onBody(body);
+        }
+        catch (e) {
+            onError(e);
+        }
+        onEnd();
+    });
+    stream.on('error', onError);
+}
+//# sourceMappingURL=wrap-wire.js.map

package/dist/wrap-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap-wire.js","sourceRoot":"","sources":["../src/wrap-wire.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAGjD,6FAA6F;AAC7F,MAAM,OAAO,UAAU;IACrB,IAAI,CAAY;IACR,GAAG,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtC,YAAY,OAAkB,SAAS,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAa;QAChB,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,CAAC;YACtF,IAAI,CAAC,MAAM,IAAI,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBACpE,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtE,CAAC;QACD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YACvB,IAAI,KAAK,GAAG,CAAC,EAAE,GAAW,EAAE,QAAgB,CAAC;YAC7C,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC5C,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;oBACf,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;oBACpE,MAAM;gBACR,CAAC;gBACD,IAAI,MAAM,GAAG,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;gBAC3D,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC,CAAC;gBAChH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;gBACnE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,gBAAgB;oBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAChI,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC;gBAAC,GAAG,GAAG,KAAK,GAAG,MAAM,CAAC;gBAAC,QAAQ,GAAG,GAAG,CAAC;gBACzD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG;oBAAE,MAAM;YACnC,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAAC,QAAQ,GAAG,GAAG,GAAG,CAAC,CAAC;gBAC/C,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;oBACZ,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,gBAAgB;wBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;oBAC/E,MAAM;gBACR,CAAC;gBACD,IAAI,GAAG,GAAG,gBAAgB;oBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC5D,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,IAAI,CAAC,IAAI,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,GAAG;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,CAAC;CACF;AAED,MAAM,UAAU,UAAU,CAAC,MAAgB,EAAE,MAAkB,EAAE,MAA8B,EAAE,OAA6B,EAAE,KAAiB;IAC/I,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;QACxB,IAAI,CAAC;YAAC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QACzE,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;QACpB,IAAI,CAAC;YAAC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,GAAG,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QACtD,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACzB,KAAK,EAAE,CAAC;IACV,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9B,CAAC"}

package/dist/wrap.d.ts

@@ -0,0 +1,3 @@
+import { type WrapOptions } from './wrap-cli.js';
+export declare function runWrap(opts: WrapOptions): Promise<number>;
+//# sourceMappingURL=wrap.d.ts.map

package/dist/wrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap.d.ts","sourceRoot":"","sources":["../src/wrap.ts"],"names":[],"mappings":"AAQA,OAAO,EAAwC,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAavF,wBAAsB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CA0NhE"}