@cybedefend/vibedefend 1.5.0 → 1.6.0

package/dist/mcp/config/rewrite.js

@@ -0,0 +1,388 @@
+/**
+ * Putting the proxy in front of the servers a user has configured, and taking
+ * it back out.
+ *
+ * After a wrap, a client's config no longer holds the URL, the command or the
+ * headers of a server: it holds `{"command":"vibedefend","args":["mcp",
+ * "--name","<id>"]}`, and the original entry moves to
+ * `~/.cybedefend/mcp/upstreams.json`. That is what lets `uninstall` restore
+ * the original from a record of OURS rather than from a backup file the user
+ * may have edited, moved or cleaned up in the meantime.
+ *
+ * ─── What is deliberately left alone ────────────────────────────────────────
+ *
+ *  - a `projects.<path>.mcpServers` section: project-scoped, out of bounds per
+ *    section 0, even though the file it lives in is the user's own;
+ *  - an entry already wrapped: wrapping twice would bury the original;
+ *  - an entry whose transport we could not read: wrapping it would replace a
+ *    working server with a proxy that cannot reach it;
+ *  - a JSONC file: `jsonEdit.ts` refuses to round-trip a document with
+ *    comments rather than silently dropping them.
+ *
+ * ─── The limit of byte-for-byte ─────────────────────────────────────────────
+ *
+ * `install` then `uninstall` reproduces the file exactly: the indentation,
+ * the newline style, the trailing newline and the key order all survive,
+ * because the shape is measured on the way in and the untouched parts
+ * round-trip through `JSON.parse`/`JSON.stringify` unchanged. The one thing
+ * that does not survive is an escape sequence spelled differently from what
+ * `JSON.stringify` would emit: `"\u00e9"` comes back as the raw letter. Both are the
+ * same string; only the bytes differ. Fixing that needs a full concrete
+ * syntax tree, which is not worth it for a case no config in the fixtures
+ * exhibits.
+ */
+import { copyFileSync, readFileSync } from 'node:fs';
+import { writeFileAtomic } from './atomicWrite.js';
+import { readUpstreams, writeUpstreams, } from '../proxy/upstreams.js';
+import { mcpAdapterFor } from './clients.js';
+import { isCybeDefendMcpUrl } from './cybedefend-servers.js';
+import { discoverMcpConfigs } from './discover.js';
+import { interactivePlaceholders } from '../proxy/expand.js';
+import { readJsonDocument, renderJson } from './jsonEdit.js';
+import { wrappedEntryFor } from './types.js';
+/**
+ * What `install` and `sync` both do: wrap what is not wrapped, and forget
+ * what the client no longer lists.
+ *
+ * They are the same operation on purpose. `install` is the first `sync`, and
+ * treating them as one thing is what makes running either of them twice
+ * harmless.
+ */
+export function planSync(options = {}) {
+    const env = options.env ?? process.env;
+    const discovery = discoverMcpConfigs(options);
+    const upstreams = readUpstreams(env);
+    const changes = [];
+    const skipped = [];
+    const taken = new Set(Object.keys(upstreams.servers));
+    for (const entry of discovery.entries) {
+        if (entry.wrapped) {
+            // An earlier version wrapped CybeDefend's own server: put it back.
+            const record = entry.wrappedName ? upstreams.servers[entry.wrappedName] : undefined;
+            if (entry.wrappedName &&
+                record?.original &&
+                record.transport === 'http' &&
+                record.url &&
+                isCybeDefendMcpUrl(record.url, env)) {
+                changes.push({
+                    kind: 'unwrap',
+                    location: entry.location,
+                    name: entry.name,
+                    upstreamName: entry.wrappedName,
+                    original: record.original,
+                });
+                changes.push({ kind: 'forget', upstreamName: entry.wrappedName });
+                continue;
+            }
+            skipped.push({ entry, reason: 'already-wrapped' });
+            continue;
+        }
+        if (entry.spec?.transport === 'http' && isCybeDefendMcpUrl(entry.spec.url, env)) {
+            skipped.push({ entry, reason: 'cybedefend-server' });
+            continue;
+        }
+        if (entry.kind === 'unknown') {
+            skipped.push({ entry, reason: 'unreadable-transport' });
+            continue;
+        }
+        if (interactiveInputsOf(entry).length > 0) {
+            skipped.push({ entry, reason: 'needs-interactive-input' });
+            continue;
+        }
+        const upstreamName = allocateName(entry, taken);
+        taken.add(upstreamName);
+        changes.push({ kind: 'wrap', entry, upstreamName });
+    }
+    // Anything we recorded that no client mentions any more. Only entries the
+    // proxy itself installed are forgotten: an entry added by hand to
+    // `upstreams.json` is the operator's, not ours.
+    const live = new Set(discovery.entries
+        .filter((entry) => entry.wrapped && entry.wrappedName)
+        .map((entry) => entry.wrappedName));
+    for (const [name, record] of Object.entries(upstreams.servers)) {
+        if (!record.source)
+            continue;
+        if (live.has(name))
+            continue;
+        if (changes.some((change) => change.kind !== 'unwrap' && change.upstreamName === name))
+            continue;
+        changes.push({ kind: 'forget', upstreamName: name });
+    }
+    return {
+        changes,
+        skipped,
+        problems: discovery.problems,
+        files: [...new Set(changes.flatMap((change) => filesOf(change)))],
+    };
+}
+/** The inverse: put every original back where it came from. */
+export function planUninstall(options = {}) {
+    const discovery = discoverMcpConfigs(options);
+    const upstreams = readUpstreams(options.env ?? process.env);
+    const changes = [];
+    const skipped = [];
+    for (const entry of discovery.entries) {
+        if (!entry.wrapped || !entry.wrappedName)
+            continue;
+        const record = upstreams.servers[entry.wrappedName];
+        if (!record?.original) {
+            // Wrapped, but we have no record of what it was. Leaving it is the only
+            // safe move: guessing an original would hand the user a server that
+            // never existed.
+            skipped.push({ entry, reason: 'not-ours' });
+            continue;
+        }
+        changes.push({
+            kind: 'unwrap',
+            location: entry.location,
+            name: entry.name,
+            upstreamName: entry.wrappedName,
+            original: record.original,
+        });
+        changes.push({ kind: 'forget', upstreamName: entry.wrappedName });
+    }
+    // Records the proxy installed that no client wraps any more (the entry was
+    // rewritten in clear by an installer or by hand): nothing to restore, but
+    // left behind they show up as phantom servers in `scan`.
+    for (const [name, record] of Object.entries(upstreams.servers)) {
+        if (!record.source)
+            continue;
+        if (changes.some((change) => change.kind !== 'unwrap' && change.upstreamName === name))
+            continue;
+        changes.push({ kind: 'forget', upstreamName: name });
+    }
+    return {
+        changes,
+        skipped,
+        problems: discovery.problems,
+        files: [...new Set(changes.flatMap((change) => filesOf(change)))],
+    };
+}
+function filesOf(change) {
+    if (change.kind === 'wrap')
+        return [change.entry.location.file];
+    if (change.kind === 'unwrap')
+        return [change.location.file];
+    return [];
+}
+/**
+ * The id a wrapped entry points at.
+ *
+ * The entry's own name, so `upstreams.json` reads like the config it came
+ * from. Two clients configuring the same server under the same name share one
+ * id — and therefore one credential, which is the point. A collision between
+ * genuinely different servers is broken by the client name, then by a counter.
+ */
+/**
+ * The `${input:…}` ids anywhere in an entry's own fields.
+ *
+ * Scanned on the RAW entry rather than the parsed spec: a placeholder can sit
+ * in a field the parser does not model, and a value we did not look at is
+ * exactly the one that would come back to bite.
+ */
+export function interactiveInputsOf(entry) {
+    return interactivePlaceholders(JSON.stringify(entry.raw));
+}
+export function allocateName(entry, taken) {
+    const base = sanitize(entry.name);
+    if (!taken.has(base))
+        return base;
+    const scoped = `${base}-${entry.location.client}`;
+    if (!taken.has(scoped))
+        return scoped;
+    for (let counter = 2;; counter += 1) {
+        const candidate = `${scoped}-${counter}`;
+        if (!taken.has(candidate))
+            return candidate;
+    }
+}
+/** An id travels on a command line and into a filename; keep it boring. */
+function sanitize(name) {
+    const cleaned = name.replace(/[^A-Za-z0-9._-]+/g, '-').replace(/^-+|-+$/g, '');
+    return cleaned === '' ? 'server' : cleaned;
+}
+/**
+ * Applies a plan.
+ *
+ * Every file is read again here rather than reusing the document discovery
+ * parsed: between the two, a client may have written to it — `claude mcp add`
+ * takes a second — and rewriting from a stale copy would delete whatever it
+ * added.
+ */
+export function applySyncPlan(plan, options = {}) {
+    const env = options.env ?? process.env;
+    const readFileFn = options.readFileFn ?? defaultRead;
+    const writeFileFn = options.writeFileFn ?? defaultWrite;
+    const copyFileFn = options.copyFileFn ?? copyFileSync;
+    const now = options.now ?? (() => new Date());
+    const upstreams = readUpstreams(env);
+    const contents = new Map();
+    const written = [];
+    const backups = [];
+    const failed = [];
+    // Group by file so one document is read, edited and written once, however
+    // many entries it holds.
+    const byFile = new Map();
+    for (const change of plan.changes) {
+        for (const file of filesOf(change)) {
+            const list = byFile.get(file) ?? [];
+            list.push(change);
+            byFile.set(file, list);
+        }
+    }
+    for (const [file, changes] of byFile) {
+        let text;
+        try {
+            text = readFileFn(file);
+        }
+        catch (error) {
+            for (const change of changes) {
+                failed.push({ change, reason: message(error) });
+            }
+            continue;
+        }
+        const parsed = readJsonDocument(text);
+        if (!parsed.ok) {
+            for (const change of changes)
+                failed.push({ change, reason: parsed.problem });
+            continue;
+        }
+        const document = parsed.document;
+        for (const change of changes) {
+            if (change.kind === 'wrap') {
+                const adapter = mcpAdapterFor(change.entry.location.client);
+                const map = mapKeysFor(adapter, document, change.entry.location);
+                const sourceMap = readMap(document.value, map);
+                const original = sourceMap && Object.hasOwn(sourceMap, change.entry.name)
+                    ? Object.getOwnPropertyDescriptor(sourceMap, change.entry.name)?.value
+                    : undefined;
+                if (typeof original !== 'object' || original === null) {
+                    failed.push({ change, reason: 'the entry disappeared before it could be wrapped' });
+                    continue;
+                }
+                setEntry(document.value, map, change.entry.name, adapter.wrappedEntry(change.upstreamName, original));
+                Object.defineProperty(upstreams.servers, change.upstreamName, {
+                    value: recordFor(change.upstreamName, change.entry, original, now()),
+                    writable: true,
+                    enumerable: true,
+                    configurable: true,
+                });
+            }
+            else if (change.kind === 'unwrap') {
+                const adapter = mcpAdapterFor(change.location.client);
+                const map = mapKeysFor(adapter, document, change.location);
+                setEntry(document.value, map, change.name, change.original);
+            }
+        }
+        const next = renderJson(document.value, document.format);
+        contents.set(file, next);
+        if (next === document.original)
+            continue;
+        written.push(file);
+        if (options.dryRun)
+            continue;
+        if (options.backup) {
+            const target = `${file}.vibedefend-${stamp(now())}.bak`;
+            try {
+                copyFileFn(file, target);
+                backups.push(target);
+            }
+            catch {
+                // A backup we could not take is not a reason to refuse the change:
+                // the original is recorded in upstreams.json, which is what
+                // `uninstall` restores from.
+            }
+        }
+        writeFileFn(file, next);
+    }
+    for (const change of plan.changes) {
+        if (change.kind === 'forget')
+            delete upstreams.servers[change.upstreamName];
+    }
+    if (!options.dryRun)
+        writeUpstreams(upstreams, env);
+    return { written, backups, contents, upstreams, failed };
+}
+function recordFor(name, entry, original, now) {
+    const spec = entry.spec;
+    const base = {
+        name,
+        transport: spec?.transport ?? 'stdio',
+        source: {
+            client: entry.location.client,
+            file: entry.location.file,
+            scope: entry.location.scope,
+        },
+        // The entry exactly as the client had it. This, not the backup file, is
+        // what `uninstall` puts back.
+        original,
+        addedAt: now.toISOString(),
+    };
+    if (spec?.transport === 'http') {
+        return { ...base, url: spec.url, headers: spec.headers };
+    }
+    if (spec?.transport === 'stdio') {
+        return { ...base, command: spec.command, args: spec.args, env: spec.env, cwd: spec.cwd };
+    }
+    return base;
+}
+function mapKeysFor(adapter, document, location) {
+    if (location.scope === 'project-in-user-file' && location.projectPath) {
+        return ['projects', location.projectPath, 'mcpServers'];
+    }
+    const maps = adapter.serverMaps(document, location);
+    return maps[0]?.keys ?? ['mcpServers'];
+}
+function readMap(value, keys) {
+    let current = value;
+    for (const key of keys) {
+        if (typeof current !== 'object' || current === null)
+            return undefined;
+        if (!Object.hasOwn(current, key))
+            return undefined;
+        current = Object.getOwnPropertyDescriptor(current, key)?.value;
+    }
+    return typeof current === 'object' && current !== null && !Array.isArray(current)
+        ? current
+        : undefined;
+}
+/**
+ * Replaces one entry in place.
+ *
+ * In place matters: assigning to an existing key keeps its position, so the
+ * server stays where the user put it in the file instead of moving to the
+ * end.
+ */
+function setEntry(value, keys, name, entry) {
+    const map = readMap(value, keys);
+    if (!map)
+        return;
+    // `name` comes from user-owned configuration. Defining an own data
+    // property keeps names such as `__proto__` from mutating the map's
+    // prototype while preserving the original key position on replacement.
+    Object.defineProperty(map, name, {
+        value: entry,
+        writable: true,
+        enumerable: true,
+        configurable: true,
+    });
+}
+function stamp(date) {
+    return date.toISOString().replace(/[:.]/g, '-');
+}
+function message(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function defaultRead(path) {
+    return readFileSync(path, 'utf8');
+}
+/**
+ * A client's own config, so the mode is left alone: these files are the
+ * user's, and tightening them to 0600 behind their back would break a setup
+ * where a second account reads the same dotfiles.
+ */
+function defaultWrite(path, content) {
+    writeFileAtomic(path, content, { mode: 0o644, directoryMode: 0o755 });
+}
+export { wrappedEntryFor };
+//# sourceMappingURL=rewrite.js.map

package/dist/mcp/config/rewrite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rewrite.js","sourceRoot":"","sources":["../../../src/mcp/config/rewrite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAErD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EACL,aAAa,EACb,cAAc,GAGf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAA4C,MAAM,eAAe,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAgD,MAAM,YAAY,CAAC;AAuC3F;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,UAAyD,EAAE;IAClF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAErC,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAEtD,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,mEAAmE;YACnE,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,IACE,KAAK,CAAC,WAAW;gBACjB,MAAM,EAAE,QAAQ;gBAChB,MAAM,CAAC,SAAS,KAAK,MAAM;gBAC3B,MAAM,CAAC,GAAG;gBACV,kBAAkB,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,EACnC,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,YAAY,EAAE,KAAK,CAAC,WAAW;oBAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;gBAClE,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACnD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,EAAE,SAAS,KAAK,MAAM,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAChF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QACD,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,0EAA0E;IAC1E,kEAAkE;IAClE,gDAAgD;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,SAAS,CAAC,OAAO;SACd,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,WAAW,CAAC;SACrD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAqB,CAAC,CAC/C,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,SAAS;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC;YAAE,SAAS;QACjG,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,OAAO;QACL,OAAO;QACP,OAAO;QACP,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,aAAa,CAAC,UAAyD,EAAE;IACvF,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IAE5D,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW;YAAE,SAAS;QACnD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;YACtB,wEAAwE;YACxE,oEAAoE;YACpE,iBAAiB;YACjB,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,yDAAyD;IACzD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,SAAS;QAC7B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC;YAAE,SAAS;QACjG,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,OAAO;QACL,OAAO;QACP,OAAO;QACP,QAAQ,EAAE,SAAS,CAAC,QAAQ;QAC5B,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,MAAqB;IACpC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;GAOG;AACH;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAsB;IACxD,OAAO,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAsB,EAAE,KAA0B;IAC7E,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAEtC,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC/E,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7C,CAAC;AAyBD;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAc,EAAE,UAAwB,EAAE;IACtE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC;IACrD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,YAAY,CAAC;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,YAAY,CAAC;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE9C,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAA0B,EAAE,CAAC;IAEzC,0EAA0E;IAC1E,yBAAyB;IACzB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAClD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;QACrC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClD,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC5D,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACjE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC/C,MAAM,QAAQ,GAAG,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;oBACvE,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK;oBACtE,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACtD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC,CAAC;oBACpF,SAAS;gBACX,CAAC;gBACD,QAAQ,CACN,QAAQ,CAAC,KAAK,EACd,GAAG,EACH,MAAM,CAAC,KAAK,CAAC,IAAI,EACjB,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,QAAmC,CAAC,CAC/E,CAAC;gBACF,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,EAAE;oBAC5D,KAAK,EAAE,SAAS,CACd,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,KAAK,EACZ,QAAmC,EACnC,GAAG,EAAE,CACN;oBACD,QAAQ,EAAE,IAAI;oBACd,UAAU,EAAE,IAAI;oBAChB,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACtD,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC3D,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,QAAQ,CAAC,QAAQ;YAAE,SAAS;QAEzC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,OAAO,CAAC,MAAM;YAAE,SAAS;QAE7B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,GAAG,IAAI,eAAe,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;YACxD,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;gBACnE,4DAA4D;gBAC5D,6BAA6B;YAC/B,CAAC;QACH,CAAC;QACD,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,cAAc,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,SAAS,CAChB,IAAY,EACZ,KAAsB,EACtB,QAAiC,EACjC,GAAS;IAET,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,IAAI,GAAkB;QAC1B,IAAI;QACJ,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,OAAO;QACrC,MAAM,EAAE;YACN,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;YAC7B,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;YACzB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;SAC5B;QACD,wEAAwE;QACxE,8BAA8B;QAC9B,QAAQ;QACR,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE;KAC3B,CAAC;IACF,IAAI,IAAI,EAAE,SAAS,KAAK,MAAM,EAAE,CAAC;QAC/B,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,IAAI,EAAE,SAAS,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CACjB,OAAyC,EACzC,QAA+E,EAC/E,QAA2B;IAE3B,IAAI,QAAQ,CAAC,KAAK,KAAK,sBAAsB,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QACtE,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,QAAiB,EAAE,QAAQ,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,OAAO,CAAC,KAA8B,EAAE,IAAuB;IACtE,IAAI,OAAO,GAAY,KAAK,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QACnD,OAAO,GAAG,MAAM,CAAC,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAC/E,CAAC,CAAE,OAAmC;QACtC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CACf,KAA8B,EAC9B,IAAuB,EACvB,IAAY,EACZ,KAA8B;IAE9B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,mEAAmE;IACnE,mEAAmE;IACnE,uEAAuE;IACvE,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE;QAC/B,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,IAAU;IACvB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe;IACjD,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,CAAC"}

package/dist/mcp/config/types.js

@@ -0,0 +1,34 @@
+/** The wrapped shape, and how to recognise it again. */
+export const PROXY_COMMAND = 'vibedefend';
+export function wrappedEntryFor(upstreamName) {
+    return { command: PROXY_COMMAND, args: ['mcp', '--name', upstreamName] };
+}
+/**
+ * Reads the upstream id back out of a wrapped entry, or `null`.
+ *
+ * Used to keep `install` idempotent: an entry already pointing at the proxy
+ * is left exactly as it is, never wrapped a second time.
+ */
+export function wrappedUpstreamName(raw) {
+    const command = typeof raw.command === 'string' ? raw.command : '';
+    if (!isProxyCommand(command))
+        return null;
+    const args = Array.isArray(raw.args) ? raw.args.map((arg) => String(arg)) : [];
+    if (args[0] !== 'mcp')
+        return null;
+    const index = args.indexOf('--name');
+    if (index === -1 || index + 1 >= args.length)
+        return null;
+    return args[index + 1];
+}
+/**
+ * The command may be `vibedefend`, an absolute path to it, or `vibedefend.cmd`
+ * on Windows — depending on how it was installed and on who wrote the entry.
+ */
+function isProxyCommand(command) {
+    if (command === '')
+        return false;
+    const base = command.replace(/\\/g, '/').split('/').pop() ?? command;
+    return base === PROXY_COMMAND || base === `${PROXY_COMMAND}.cmd` || base === `${PROXY_COMMAND}.exe`;
+}
+//# sourceMappingURL=types.js.map

package/dist/mcp/config/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/mcp/config/types.ts"],"names":[],"mappings":"AAsGA,wDAAwD;AACxD,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC;AAE1C,MAAM,UAAU,eAAe,CAAC,YAAoB;IAClD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAA4B;IAC9D,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/E,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC1D,OAAO,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC;IACrE,OAAO,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,GAAG,aAAa,MAAM,IAAI,IAAI,KAAK,GAAG,aAAa,MAAM,CAAC;AACtG,CAAC"}

package/dist/mcp/proxy/audit.js

@@ -0,0 +1,83 @@
+/**
+ * The local audit trail.
+ *
+ * One JSONL line per `tools/call`: which server, which tool, its digest, the
+ * verdict, and how big the arguments and the result were. Never the
+ * arguments, never the result — the plan's rule is that nothing from a
+ * `tools/call` leaves the machine, and a file on disk that quotes the
+ * arguments of every call is a second copy of everything the user has done,
+ * sitting in their home directory waiting to be read by the next thing that
+ * gets a foothold.
+ *
+ * Sizes are kept because they are the one thing that is useful and harmless:
+ * "the result of `read_file` was 4 MB" is worth seeing after the fact, and it
+ * says nothing about what was in it.
+ *
+ * Rotation at 50 MB, by renaming rather than truncating: a reader holding the
+ * file keeps reading the one it opened instead of finding it emptied
+ * underneath.
+ */
+import { appendFileSync, mkdirSync, renameSync, statSync, unlinkSync } from 'node:fs';
+import { join } from 'node:path';
+import { mcpAuditDir } from './paths.js';
+export const ROTATE_AT_BYTES = 50 * 1024 * 1024;
+/** How many rotated files to keep. Older ones are dropped. */
+export const KEEP_ROTATIONS = 3;
+export function createAudit(options = {}) {
+    const dir = options.dir ?? mcpAuditDir(options.env ?? process.env);
+    const now = options.now ?? (() => new Date());
+    const rotateAt = options.rotateAtBytes ?? ROTATE_AT_BYTES;
+    const file = join(dir, 'calls.jsonl');
+    let ready = false;
+    return {
+        file,
+        record(entry) {
+            const line = `${JSON.stringify({ ts: now().toISOString(), ...entry })}\n`;
+            try {
+                if (!ready) {
+                    mkdirSync(dir, { recursive: true, mode: 0o700 });
+                    ready = true;
+                }
+                rotateIfNeeded(file, rotateAt);
+                appendFileSync(file, line, { mode: 0o600 });
+            }
+            catch {
+                // An audit that throws would take the session down with it, which is
+                // a worse outcome than a missing line.
+            }
+        },
+    };
+}
+function rotateIfNeeded(file, rotateAt) {
+    let size;
+    try {
+        size = statSync(file).size;
+    }
+    catch {
+        return; // not there yet
+    }
+    if (size < rotateAt)
+        return;
+    // Shift the numbered files up, drop the oldest.
+    try {
+        unlinkSync(`${file}.${KEEP_ROTATIONS}`);
+    }
+    catch {
+        /* not there */
+    }
+    for (let index = KEEP_ROTATIONS - 1; index >= 1; index -= 1) {
+        try {
+            renameSync(`${file}.${index}`, `${file}.${index + 1}`);
+        }
+        catch {
+            /* not there */
+        }
+    }
+    try {
+        renameSync(file, `${file}.1`);
+    }
+    catch {
+        /* another process got there first */
+    }
+}
+//# sourceMappingURL=audit.js.map

package/dist/mcp/proxy/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/mcp/proxy/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,8DAA8D;AAC9D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AA6BhC,MAAM,UAAU,WAAW,CAAC,UAAwB,EAAE;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAEtC,IAAI,KAAK,GAAG,KAAK,CAAC;IAElB,OAAO;QACL,IAAI;QACJ,MAAM,CAAC,KAAK;YACV,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC;YAC1E,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;oBACjD,KAAK,GAAG,IAAI,CAAC;gBACf,CAAC;gBACD,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC/B,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;gBACrE,uCAAuC;YACzC,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,QAAgB;IACpD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,gBAAgB;IAC1B,CAAC;IACD,IAAI,IAAI,GAAG,QAAQ;QAAE,OAAO;IAE5B,gDAAgD;IAChD,IAAI,CAAC;QACH,UAAU,CAAC,GAAG,IAAI,IAAI,cAAc,EAAE,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,cAAc,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC;YACH,UAAU,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;AACH,CAAC"}

package/dist/mcp/proxy/authInterceptor.js

@@ -0,0 +1,119 @@
+/**
+ * What the agent sees when the upstream cannot be authenticated.
+ *
+ * The transport has already done what it could (`upstreamHttp.ts`: the
+ * stored token, then a forced renewal) and the upstream still answers 401.
+ * Section 0 says `initialize` is always answered, so this interceptor
+ * answers it — with one tool, `vibedefend_connect_required`, whose
+ * description tells the agent which server needs `vibedefend connect`. The
+ * alternative, an `initialize` error, is a server the client files as broken
+ * and never mentions to the user.
+ *
+ * The same door serves a server that was never connected: no token, 401,
+ * same tool. Once in that state the interceptor answers `tools/list` and a
+ * call to its own tool; everything else is forwarded, and fails upstream as
+ * honestly as it did before.
+ */
+import { CONNECT_REQUIRED_TOOL, connectRequiredResult, connectRequiredToolsList, } from './inject.js';
+import { FORWARD } from './intercept.js';
+import { idKey, isRequest, isResponse, methodOf } from './jsonrpc.js';
+import { KNOWN_PROTOCOL_VERSIONS } from './proxy.js';
+import { UPSTREAM_UNAUTHORIZED } from './upstreamHttp.js';
+/** The command the user has to type for this upstream. */
+export function connectCommandFor(target) {
+    if (target.name)
+        return `vibedefend connect ${target.name}`;
+    return target.spec.transport === 'http'
+        ? `vibedefend connect --url ${target.spec.url}`
+        : 'vibedefend connect';
+}
+export function createAuthInterceptor(options) {
+    const params = {
+        serverName: options.serverName,
+        connectCommand: options.connectCommand,
+    };
+    let requestedProtocolVersion;
+    /** The agent's `initialize` id, until it has been answered. */
+    let initializeKey;
+    let authRequired = false;
+    return {
+        name: 'auth',
+        fromAgent(message) {
+            const method = methodOf(message);
+            if (isRequest(message) && method === 'initialize') {
+                initializeKey = idKey(message.id);
+                const params = message.params;
+                if (typeof params === 'object' && params !== null) {
+                    const requested = params.protocolVersion;
+                    if (typeof requested === 'string')
+                        requestedProtocolVersion = requested;
+                }
+                return FORWARD;
+            }
+            if (!authRequired || !isRequest(message))
+                return FORWARD;
+            if (method === 'tools/list') {
+                return {
+                    action: 'respond',
+                    message: { jsonrpc: '2.0', id: message.id, result: connectRequiredToolsList(params) },
+                    reason: 'the upstream cannot be authenticated',
+                };
+            }
+            if (method === 'tools/call' && calledTool(message) === CONNECT_REQUIRED_TOOL) {
+                return {
+                    action: 'respond',
+                    message: { jsonrpc: '2.0', id: message.id, result: connectRequiredResult(params) },
+                    reason: 'a VibeDefend tool is answered by VibeDefend',
+                };
+            }
+            return FORWARD;
+        },
+        fromUpstream(message) {
+            if (!isResponse(message) || !isUnauthorized(message))
+                return FORWARD;
+            if (!authRequired) {
+                authRequired = true;
+                options.logger.warn('upstream cannot be authenticated; offering vibedefend_connect_required', {
+                    connectCommand: options.connectCommand,
+                });
+            }
+            const key = idKey(message.id);
+            if (initializeKey === undefined || key !== initializeKey)
+                return FORWARD;
+            initializeKey = undefined;
+            const protocolVersion = requestedProtocolVersion &&
+                KNOWN_PROTOCOL_VERSIONS.includes(requestedProtocolVersion)
+                ? requestedProtocolVersion
+                : KNOWN_PROTOCOL_VERSIONS[0];
+            return {
+                action: 'replace',
+                message: {
+                    jsonrpc: '2.0',
+                    id: message.id,
+                    result: {
+                        protocolVersion,
+                        capabilities: { tools: {} },
+                        serverInfo: { name: 'vibedefend-proxy', version: options.proxyVersion ?? '0.0.0' },
+                        instructions: `The MCP server ${params.serverName} could not be authenticated by the VibeDefend proxy. ` +
+                            `Its tools are unavailable until the user runs \`${params.connectCommand}\`; ` +
+                            'list the tools to see what to tell them.',
+                    },
+                },
+            };
+        },
+    };
+}
+function isUnauthorized(message) {
+    const error = message.error;
+    return (typeof error === 'object' &&
+        error !== null &&
+        error.code === UPSTREAM_UNAUTHORIZED);
+}
+function calledTool(message) {
+    const params = message.params;
+    if (typeof params !== 'object' || params === null)
+        return undefined;
+    const name = params.name;
+    return typeof name === 'string' ? name : undefined;
+}
+//# sourceMappingURL=authInterceptor.js.map

package/dist/mcp/proxy/authInterceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authInterceptor.js","sourceRoot":"","sources":["../../../src/mcp/proxy/authInterceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,GAEzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,OAAO,EAAmC,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAuB,MAAM,cAAc,CAAC;AAE3F,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAErD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAQ1D,0DAA0D;AAC1D,MAAM,UAAU,iBAAiB,CAAC,MAA6C;IAC7E,IAAI,MAAM,CAAC,IAAI;QAAE,OAAO,sBAAsB,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5D,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM;QACrC,CAAC,CAAC,4BAA4B,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QAC/C,CAAC,CAAC,oBAAoB,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,MAAM,MAAM,GAAoB;QAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC;IACF,IAAI,wBAA4C,CAAC;IACjD,+DAA+D;IAC/D,IAAI,aAAiC,CAAC;IACtC,IAAI,YAAY,GAAG,KAAK,CAAC;IAEzB,OAAO;QACL,IAAI,EAAE,MAAM;QAEZ,SAAS,CAAC,OAAuB;YAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YAEjC,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;gBAClD,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBAC9B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBAClD,MAAM,SAAS,GAAI,MAAwC,CAAC,eAAe,CAAC;oBAC5E,IAAI,OAAO,SAAS,KAAK,QAAQ;wBAAE,wBAAwB,GAAG,SAAS,CAAC;gBAC1E,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAAE,OAAO,OAAO,CAAC;YAEzD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;gBAC5B,OAAO;oBACL,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,wBAAwB,CAAC,MAAM,CAAC,EAAE;oBACrF,MAAM,EAAE,sCAAsC;iBAC/C,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,KAAK,YAAY,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,qBAAqB,EAAE,CAAC;gBAC7E,OAAO;oBACL,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE;oBAClF,MAAM,EAAE,6CAA6C;iBACtD,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,YAAY,CAAC,OAAuB;YAClC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;gBAAE,OAAO,OAAO,CAAC;YAErE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,YAAY,GAAG,IAAI,CAAC;gBACpB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,wEAAwE,EAAE;oBAC5F,cAAc,EAAE,OAAO,CAAC,cAAc;iBACvC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC9B,IAAI,aAAa,KAAK,SAAS,IAAI,GAAG,KAAK,aAAa;gBAAE,OAAO,OAAO,CAAC;YACzE,aAAa,GAAG,SAAS,CAAC;YAE1B,MAAM,eAAe,GACnB,wBAAwB;gBACvB,uBAA6C,CAAC,QAAQ,CAAC,wBAAwB,CAAC;gBAC/E,CAAC,CAAC,wBAAwB;gBAC1B,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;YACjC,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE;oBACP,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,MAAM,EAAE;wBACN,eAAe;wBACf,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;wBAC3B,UAAU,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,IAAI,OAAO,EAAE;wBAClF,YAAY,EACV,kBAAkB,MAAM,CAAC,UAAU,uDAAuD;4BAC1F,mDAAmD,MAAM,CAAC,cAAc,MAAM;4BAC9E,0CAA0C;qBAC7C;iBACF;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,OAAuB;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAA4B,CAAC,IAAI,KAAK,qBAAqB,CAC7D,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAAuB;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpE,MAAM,IAAI,GAAI,MAA6B,CAAC,IAAI,CAAC;IACjD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC"}