@cybedefend/vibedefend 1.5.0 → 1.7.0

package/dist/commands/mcp/connect.js

@@ -0,0 +1,337 @@
+/**
+ * `vibedefend connect` — obtain and keep the OAuth token of an HTTP MCP
+ * server, so the proxy can talk to it.
+ *
+ * This one is typed by a human, so unlike `vibedefend mcp` it prints. What it
+ * prints is entirely ours: a status from a closed vocabulary and a sentence
+ * written here. Nothing from the server reaches the terminal — an
+ * `error_description` is the natural place for an attacker to put "run
+ * `curl … | sh` to finish setting up", and it would be printed with our name
+ * in front of it.
+ */
+import { openBrowser } from '../../login.js';
+import { connectAll, connectMcpServer, connectWithToken, } from '../../mcp/auth/connect.js';
+import { AGENT_SIGN_IN_LABELS } from '../../mcp/auth/agent-sign-ins.js';
+import { canonicalMcpUrl } from '../../mcp/auth/oauth.js';
+import { expandedSpecOf, httpUpstreams, readUpstreams, recordUpstreamAuth, } from '../../mcp/proxy/upstreams.js';
+import { getOrgPolicy } from '../../mcp/verify/api.js';
+import { resolveBackendConfig } from '../../mcp/verify/backend.js';
+import { verifyTokenResolver } from '../../mcp/verify/token.js';
+import { log } from '../../utils.js';
+export const EXIT_OK = 0;
+export const EXIT_FAILED = 1;
+export const EXIT_USAGE = 2;
+/**
+ * What each outcome means, in one sentence, for someone who has just run the
+ * command and has to decide what to do next.
+ */
+const EXPLANATIONS = {
+    'already-connected': 'already connected — pass --force to authorize again',
+    connected: 'connected',
+    'no-auth-needed': 'answered without a token; nothing to connect',
+    'token-stored': 'bearer token stored',
+    unreachable: 'could not be reached',
+    'closed-door': 'refuses requests but advertises no way to authenticate',
+    unusable: 'advertises an OAuth setup VibeDefend refuses (see the log for which check failed)',
+    'unverifiable-issuer': 'its authorization server does not implement RFC 9207, so the authorization response cannot be tied back to it, and strict issuer verification is on (--strict-issuer, or the organisation policy)',
+    'no-registration': 'has no dynamic client registration endpoint — register a client by hand and pass --client-id',
+    'registration-failed': 'refused the dynamic client registration',
+    'browser-failed': 'the local callback server could not be started',
+    denied: 'authorization was denied',
+    'state-mismatch': 'the authorization response carried an unknown or already-used state',
+    'issuer-mismatch': 'the authorization response came from a different issuer than the one discovered',
+    'missing-code': 'the authorization response carried no code',
+    'authorization-timeout': 'nothing came back from the browser in time',
+    'exchange-failed': 'the token exchange was refused',
+    'suspicious-redirect': 'answered a request carrying a secret with a redirect — treated as an exfiltration attempt, not a failure',
+    'store-failed': 'the token could not be stored anywhere',
+    'token-rejected': 'issued a token its own MCP endpoint then refused',
+    'sign-in-needed': 'needs a sign-in in the browser',
+};
+export async function runMcpConnectCommand(options, runtime, name) {
+    const stdout = runtime.stdout ?? process.stdout;
+    const stderr = runtime.stderr ?? process.stderr;
+    const targets = resolveTargets(name, options, runtime);
+    if ('error' in targets) {
+        stderr.write(`vibedefend connect: ${targets.error}\n`);
+        return EXIT_USAGE;
+    }
+    if (targets.list.length === 0) {
+        if (!options.json)
+            log.info('No HTTP MCP server to connect.');
+        return EXIT_OK;
+    }
+    const callbackPort = parseCallbackPort(options.callbackPort);
+    if (callbackPort === 'invalid') {
+        stderr.write(`vibedefend connect: --callback-port must be a TCP port between 1 and 65535 (got "${String(options.callbackPort)}")\n`);
+        return EXIT_USAGE;
+    }
+    if (options.token) {
+        if (targets.list.length !== 1) {
+            stderr.write('vibedefend connect: --token connects exactly one server\n');
+            return EXIT_USAGE;
+        }
+        const result = connectWithToken(targets.list[0].url, options.token, runtime.deps ?? {});
+        return report([{ ...result, name: targets.list[0].name }], options, runtime, stdout);
+    }
+    // A headless box, a container, an SSH session: there is no browser to open
+    // and the URL is the whole point. It goes to stderr so `--json` stays
+    // machine-readable on stdout.
+    const noBrowser = options.noBrowser || runtime.env.VIBEDEFEND_MCP_NO_BROWSER === '1';
+    const deps = {
+        openBrowser: noBrowser
+            ? (url) => {
+                stderr.write(`Open this URL to authorize VibeDefend:\n${url}\n`);
+                return false;
+            }
+            : openBrowser,
+        clientId: options.clientId,
+        clientSecret: options.clientSecret,
+        scope: options.scope,
+        force: options.force,
+        reuse: options.reuse !== false,
+        clientInfo: { name: 'vibedefend', version: runtime.version },
+        strictIssuer: await strictIssuerPolicy(options, runtime.env, runtime.policyDeps),
+        callbackPort,
+        onEvent: options.json || options.quiet ? undefined : (event) => announce(event),
+        ...runtime.deps,
+    };
+    const outcome = targets.list.length === 1
+        ? {
+            results: [
+                { ...(await connectMcpServer(targets.list[0].url, deps)), name: targets.list[0].name },
+            ],
+        }
+        : await connectAll(targets.list, deps);
+    recordAuth(outcome.results, runtime.env);
+    return report(outcome.results, options, runtime, stdout);
+}
+/**
+ * The first pass of `vibedefend install` over the HTTP upstreams: take over
+ * the sign-ins Claude Code or Codex already hold, and nothing else. It asks
+ * nothing, registers no client and opens no browser, so the install only
+ * asks about the servers it leaves.
+ *
+ * A server wired in several clients is one server: counted once, under the
+ * first entry that names it.
+ */
+export async function takeOverAgentSignIns(runtime) {
+    const targets = resolveTargets(undefined, { all: true }, runtime);
+    if ('error' in targets || targets.list.length === 0)
+        return { reused: [], remaining: [] };
+    const deps = {
+        clientInfo: { name: 'vibedefend', version: runtime.version },
+        strictIssuer: await strictIssuerPolicy({}, runtime.env, runtime.policyDeps),
+        ...runtime.deps,
+        force: false,
+        reuse: true,
+        reuseOnly: true,
+        onEvent: undefined,
+    };
+    const { results } = await connectAll(targets.list, deps);
+    recordAuth(results, runtime.env);
+    const seen = new Set();
+    const outcome = { reused: [], remaining: [] };
+    for (const result of results) {
+        if (seen.has(result.server))
+            continue;
+        seen.add(result.server);
+        const name = result.name ?? result.server;
+        if (result.status === 'reused' && result.from)
+            outcome.reused.push({ name, from: result.from });
+        else if (result.status === 'failed')
+            outcome.remaining.push(name);
+    }
+    return outcome;
+}
+/** Records in `upstreams.json` what each connect learned. */
+function recordAuth(results, env) {
+    for (const result of results) {
+        if (!result.name)
+            continue;
+        const state = result.status === 'connected' ||
+            result.status === 'reused' ||
+            result.status === 'already-connected' ||
+            result.status === 'token-stored'
+            ? 'connected'
+            : result.status === 'no-auth-needed'
+                ? 'none'
+                : 'required';
+        try {
+            recordUpstreamAuth(result.name, state, env);
+        }
+        catch {
+            // The upstream file is a convenience here, not the credential store.
+        }
+    }
+}
+/**
+ * Which servers to work on: a name from `upstreams.json`, an explicit URL, or
+ * every HTTP upstream.
+ */
+/**
+ * The url a connection is actually made to — expanded, exactly as the proxy
+ * expands it before contacting the server.
+ *
+ * The token store is keyed by url. Keyed on the stored
+ * `https://${TENANT}.example.com/mcp` form instead, the proxy would look up a
+ * key nobody ever wrote, and every tenant of one template would share a
+ * single token — one tenant's token presented to another.
+ */
+function connectUrlOf(entry, env) {
+    try {
+        const spec = expandedSpecOf(entry, env).value;
+        if (spec.transport === 'http')
+            return spec.url;
+    }
+    catch {
+        /* an entry we cannot read stays exactly as it was stored */
+    }
+    return entry.url ?? '';
+}
+function resolveTargets(name, options, runtime) {
+    if (options.url) {
+        if (name || options.all)
+            return { error: '--url cannot be combined with a name or --all' };
+        if (!canonicalMcpUrl(options.url))
+            return { error: `not an http(s) url: ${options.url}` };
+        return { list: [{ name: options.url, url: options.url }] };
+    }
+    if (options.all) {
+        if (name)
+            return { error: '--all cannot be combined with a name' };
+        return {
+            list: httpUpstreams(runtime.env).map((entry) => ({
+                name: entry.name,
+                url: connectUrlOf(entry, runtime.env),
+            })),
+        };
+    }
+    if (!name)
+        return { error: 'give a server name, --url <url>, or --all' };
+    const entry = readUpstreams(runtime.env).servers[name];
+    if (!entry) {
+        const known = Object.keys(readUpstreams(runtime.env).servers);
+        return {
+            error: known.length === 0
+                ? `no upstream named "${name}": ~/.cybedefend/mcp/upstreams.json is empty. Run \`vibedefend install\` first, or pass --url.`
+                : `no upstream named "${name}". Known: ${known.join(', ')}.`,
+        };
+    }
+    if (entry.transport !== 'http' || !entry.url) {
+        return { error: `"${name}" is a stdio server; there is nothing to connect.` };
+    }
+    return { list: [{ name, url: connectUrlOf(entry, runtime.env) }] };
+}
+/**
+ * Strict issuer verification, from either source that asks for it: the
+ * `--strict-issuer` flag, which only ever HARDENS, or the organisation's
+ * policy (`strictIssuer`), served by the backend. No environment variable:
+ * a security setting read from the environment of the machine it constrains
+ * is not a setting.
+ *
+ * Fail-open: no backend, no organization, or a policy that cannot be read
+ * means `false` — a cut network must neither open a door nor block the
+ * work, and the warning line still names the missing RFC 9207.
+ */
+export async function strictIssuerPolicy(options, env, deps = {}) {
+    if (options.strictIssuer)
+        return true;
+    try {
+        const backend = await (deps.resolveBackendConfigFn ?? resolveBackendConfig)({ env });
+        if (!backend)
+            return false;
+        const policy = await (deps.getOrgPolicyFn ?? getOrgPolicy)(backend, {
+            resolveTokenFn: verifyTokenResolver({ env }),
+        });
+        return policy.strictIssuer;
+    }
+    catch {
+        return false;
+    }
+}
+/** A port as typed on the command line: an integer in range, or nothing. */
+export function parseCallbackPort(value) {
+    if (value === undefined)
+        return undefined;
+    if (!/^\d+$/.test(value.trim()))
+        return 'invalid';
+    const port = Number(value.trim());
+    return Number.isInteger(port) && port >= 1 && port <= 65535 ? port : 'invalid';
+}
+function announce(event) {
+    switch (event.kind) {
+        case 'probing':
+            log.step(`Checking whether ${event.server} needs a token`);
+            break;
+        case 'discovering':
+            log.info('It does. Looking up its authorization server…');
+            break;
+        case 'reusing':
+            log.info(`It does. Trying the sign-in ${AGENT_SIGN_IN_LABELS[event.from]} already holds…`);
+            break;
+        case 'registering':
+            log.info('Registering VibeDefend as an OAuth client…');
+            break;
+        case 'awaiting-browser':
+            log.info('Waiting for the browser. If it did not open, paste this URL:');
+            log.hint(event.url);
+            break;
+        case 'unverifiable-issuer':
+            log.warn(`${event.server}: the authorization response carried no issuer (RFC 9207), so it cannot be ` +
+                'tied back to its authorization server. Going on anyway; pass --strict-issuer, or have the ' +
+                'organisation policy require a strict issuer, to refuse such servers.');
+            break;
+        case 'exchanging':
+            log.info('Exchanging the authorization code…');
+            break;
+        case 'done':
+            break;
+    }
+}
+/**
+ * One closing line, because twelve lines scrolling by are not a report.
+ *
+ * ⚠️ It names WHAT IS LEFT. That is the only actionable part of the batch: a
+ * summary that only counts the successes makes the user read the list again
+ * to find the two servers they still have to connect.
+ */
+export function summariseConnectResults(results) {
+    const connected = results.filter((result) => result.status === 'connected' || result.status === 'reused' || result.status === 'token-stored').length;
+    const already = results.filter((result) => result.status === 'already-connected' || result.status === 'no-auth-needed').length;
+    const outstanding = results.filter((result) => result.status === 'failed');
+    const counts = `${connected} connected, ${already} already in order, ${outstanding.length} failed`;
+    if (outstanding.length === 0)
+        return counts;
+    const names = outstanding.map((result) => result.name ?? result.server);
+    return (`${counts}\nStill to connect: ${names.join(', ')}\n` +
+        `Re-run \`vibedefend connect --all\` — what is already connected is skipped — ` +
+        `or one at a time: \`vibedefend connect ${names[0]}\``);
+}
+function report(results, options, runtime, stdout) {
+    if (options.json) {
+        stdout.write(`${JSON.stringify({ servers: results }, null, 2)}\n`);
+    }
+    else if (!options.quiet) {
+        for (const result of results) {
+            const label = result.name && result.name !== result.server ? `${result.name} (${result.server})` : result.server;
+            const explanation = result.status === 'reused' && result.from
+                ? `connected with the sign-in ${AGENT_SIGN_IN_LABELS[result.from]} already holds`
+                : (EXPLANATIONS[result.reason ?? result.status] ?? result.status);
+            if (result.status === 'failed')
+                log.err(`${label}: ${explanation}`);
+            else if (result.status === 'connected' || result.status === 'reused' || result.status === 'token-stored') {
+                log.ok(`${label}: ${explanation}`);
+            }
+            else
+                log.info(`${label}: ${explanation}`);
+        }
+        // The closing report: more useful than the list as soon as it is longer
+        // than three lines, which it is as soon as a fleet of servers is wrapped.
+        if (results.length > 1)
+            log.step(summariseConnectResults(results));
+    }
+    void runtime;
+    return results.some((result) => result.status === 'failed') ? EXIT_FAILED : EXIT_OK;
+}
+//# sourceMappingURL=connect.js.map

package/dist/commands/mcp/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../../src/commands/mcp/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,gBAAgB,GAKjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAA0B,MAAM,kCAAkC,CAAC;AAChG,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EACL,cAAc,EACd,aAAa,EACb,aAAa,EACb,kBAAkB,GAEnB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AAsCrC,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC;AACzB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AAC7B,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAE5B;;;GAGG;AACH,MAAM,YAAY,GAA2B;IAC3C,mBAAmB,EAAE,qDAAqD;IAC1E,SAAS,EAAE,WAAW;IACtB,gBAAgB,EAAE,8CAA8C;IAChE,cAAc,EAAE,qBAAqB;IACrC,WAAW,EAAE,sBAAsB;IACnC,aAAa,EAAE,wDAAwD;IACvE,QAAQ,EAAE,mFAAmF;IAC7F,qBAAqB,EACnB,mMAAmM;IACrM,iBAAiB,EACf,8FAA8F;IAChG,qBAAqB,EAAE,yCAAyC;IAChE,gBAAgB,EAAE,gDAAgD;IAClE,MAAM,EAAE,0BAA0B;IAClC,gBAAgB,EAAE,qEAAqE;IACvF,iBAAiB,EAAE,iFAAiF;IACpG,cAAc,EAAE,4CAA4C;IAC5D,uBAAuB,EAAE,4CAA4C;IACrE,iBAAiB,EAAE,gCAAgC;IACnD,qBAAqB,EACnB,0GAA0G;IAC5G,cAAc,EAAE,wCAAwC;IACxD,gBAAgB,EAAE,kDAAkD;IACpE,gBAAgB,EAAE,gCAAgC;CACnD,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA0B,EAC1B,OAA0B,EAC1B,IAAa;IAEb,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAEhD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACvB,MAAM,CAAC,KAAK,CAAC,uBAAuB,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;QACvD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC9D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,CACV,oFAAoF,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CACvH,CAAC;QACF,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;YAC1E,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACxF,OAAO,MAAM,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACvF,CAAC;IAED,2EAA2E;IAC3E,sEAAsE;IACtE,8BAA8B;IAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG,CAAC;IAErF,MAAM,IAAI,GAAgB;QACxB,WAAW,EAAE,SAAS;YACpB,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,CAAC,KAAK,CAAC,2CAA2C,GAAG,IAAI,CAAC,CAAC;gBACjE,OAAO,KAAK,CAAC;YACf,CAAC;YACH,CAAC,CAAC,WAAW;QACf,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK,KAAK,KAAK;QAC9B,UAAU,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;QAC5D,YAAY,EAAE,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC;QAChF,YAAY;QACZ,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC/E,GAAG,OAAO,CAAC,IAAI;KAChB,CAAC;IAEF,MAAM,OAAO,GACX,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC;YACE,OAAO,EAAE;gBACP,EAAE,GAAG,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;aACvF;SACF;QACH,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE3C,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAC3D,CAAC;AAUD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAA0B;IACnE,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IAClE,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAE1F,MAAM,IAAI,GAAgB;QACxB,UAAU,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;QAC5D,YAAY,EAAE,MAAM,kBAAkB,CAAC,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC;QAC3E,GAAG,OAAO,CAAC,IAAI;QACf,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,SAAS;KACnB,CAAC;IACF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzD,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAEjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAoB,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC/D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;QAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;aAC3F,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,6DAA6D;AAC7D,SAAS,UAAU,CAAC,OAAiC,EAAE,GAAsB;IAC3E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,SAAS;QAC3B,MAAM,KAAK,GACT,MAAM,CAAC,MAAM,KAAK,WAAW;YAC7B,MAAM,CAAC,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,MAAM,KAAK,mBAAmB;YACrC,MAAM,CAAC,MAAM,KAAK,cAAc;YAC9B,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,gBAAgB;gBAClC,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,UAAU,CAAC;QACnB,IAAI,CAAC;YACH,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,KAAoB,EAAE,GAAsB;IAChE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC;QAC9C,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,cAAc,CACrB,IAAwB,EACxB,OAA0B,EAC1B,OAA0B;IAE1B,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,IAAI,IAAI,IAAI,OAAO,CAAC,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;QAC3F,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,uBAAuB,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QAC1F,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,IAAI,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;QACnE,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC/C,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,GAAG,EAAE,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC;aACtC,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;IAEzE,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QAC9D,OAAO;YACL,KAAK,EACH,KAAK,CAAC,MAAM,KAAK,CAAC;gBAChB,CAAC,CAAC,sBAAsB,IAAI,gGAAgG;gBAC5H,CAAC,CAAC,sBAAsB,IAAI,aAAa,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SACjE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7C,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,mDAAmD,EAAE,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAgD,EAChD,GAAsB,EACtB,OAAyB,EAAE;IAE3B,IAAI,OAAO,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,sBAAsB,IAAI,oBAAoB,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,YAAY,CAAC,CAAC,OAAO,EAAE;YAClE,cAAc,EAAE,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC;SAC7C,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,iBAAiB,CAAC,KAAyB;IACzD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAmB;IACnC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,GAAG,CAAC,IAAI,CAAC,oBAAoB,KAAK,CAAC,MAAM,gBAAgB,CAAC,CAAC;YAC3D,MAAM;QACR,KAAK,aAAa;YAChB,GAAG,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YAC1D,MAAM;QACR,KAAK,SAAS;YACZ,GAAG,CAAC,IAAI,CAAC,+BAA+B,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC3F,MAAM;QACR,KAAK,aAAa;YAChB,GAAG,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YACvD,MAAM;QACR,KAAK,kBAAkB;YACrB,GAAG,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;YACzE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpB,MAAM;QACR,KAAK,qBAAqB;YACxB,GAAG,CAAC,IAAI,CACN,GAAG,KAAK,CAAC,MAAM,6EAA6E;gBAC1F,4FAA4F;gBAC5F,sEAAsE,CACzE,CAAC;YACF,MAAM;QACR,KAAK,YAAY;YACf,GAAG,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YAC/C,MAAM;QACR,KAAK,MAAM;YACT,MAAM;IACV,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAiC;IACvE,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAC9B,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,CAC5G,CAAC,MAAM,CAAC;IACT,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAC5B,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,mBAAmB,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,CACxF,CAAC,MAAM,CAAC;IACT,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAE3E,MAAM,MAAM,GAAG,GAAG,SAAS,eAAe,OAAO,sBAAsB,WAAW,CAAC,MAAM,SAAS,CAAC;IACnG,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAE5C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IACxE,OAAO,CACL,GAAG,MAAM,uBAAuB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACpD,+EAA+E;QAC/E,0CAA0C,KAAK,CAAC,CAAC,CAAC,IAAI,CACvD,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CACb,OAAwB,EACxB,OAA0B,EAC1B,OAA0B,EAC1B,MAA6B;IAE7B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;SAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC1B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACjH,MAAM,WAAW,GACf,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI;gBACvC,CAAC,CAAC,8BAA8B,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB;gBACjF,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC;YACtE,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,WAAW,EAAE,CAAC,CAAC;iBAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;gBACzG,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,KAAK,WAAW,EAAE,CAAC,CAAC;YACrC,CAAC;;gBACI,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,WAAW,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,wEAAwE;QACxE,0EAA0E;QAC1E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,OAAO,CAAC;IACb,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;AACtF,CAAC"}

package/dist/commands/mcp/index.js

@@ -0,0 +1,170 @@
+import { runMcpOverrideCommand } from './allow.js';
+import { runMcpConnectCommand } from './connect.js';
+import { runMcpProxyCommand } from './proxy.js';
+import { runMcpScanCommand } from './scan.js';
+import { runMcpSyncCommand } from './sync.js';
+function collect(value, previous) {
+    return previous.concat([value]);
+}
+export function registerMcpCommand(program, version) {
+    const command = program
+        .command('mcp')
+        .description('Run the VibeDefend MCP proxy in front of an upstream MCP server. stdin/stdout carry JSON-RPC; this command is meant to be spawned by an agent, not typed by hand.')
+        .argument('[upstreamCommand...]', 'Upstream command and its arguments, after `--`. Example: vibedefend mcp -- npx -y @modelcontextprotocol/server-everything')
+        .option('--upstream <spec>', 'Upstream as an http(s) URL, or as a command line. Shell operators are refused; use `--` for anything the parser would not take.')
+        .option('--upstream-command <command>', 'Upstream executable (alternative to --upstream).')
+        .option('--upstream-arg <arg>', 'One argument for --upstream-command. Repeatable.', collect, [])
+        .option('--upstream-env <KEY=VALUE>', 'Extra environment for the upstream. Repeatable.', collect, [])
+        .option('--upstream-cwd <dir>', 'Working directory of the upstream.')
+        .option('--header <name:value>', 'Extra HTTP header for an http upstream. Repeatable.', collect, [])
+        .option('--name <id>', 'Upstream name from ~/.cybedefend/mcp/upstreams.json (Phase 5).')
+        .option('--log-level <level>', 'silent | error | warn | info | debug. Logs never touch stdout.')
+        .action(async (upstreamCommand, options) => {
+        const code = await runMcpProxyCommand({ ...options, trailing: upstreamCommand }, {
+            stdin: process.stdin,
+            stdout: process.stdout,
+            stderr: process.stderr,
+            env: process.env,
+            version,
+        });
+        process.exitCode = code;
+    });
+    registerConnectCommand(program, version);
+    registerSyncCommand(program);
+    registerUnwrapCommand(program);
+    registerScanCommand(program, version);
+    registerOverrideCommands(program);
+    // Help and parse errors must not land on the MCP channel.
+    command.configureOutput({
+        writeOut: (text) => process.stderr.write(text),
+        writeErr: (text) => process.stderr.write(text),
+    });
+    // Without this, commander throws on `--help` and the rejection surfaces as
+    // a crash; the exit code it computed is the right one to use.
+    command.exitOverride((error) => {
+        process.exit(error.exitCode);
+    });
+    return command;
+}
+/**
+ * `vibedefend connect` — the OAuth side. A separate top-level command rather
+ * than `vibedefend mcp connect`, because `vibedefend mcp` is the proxy entry
+ * point an agent spawns and its stdout is a JSON-RPC channel; hanging a
+ * chatty interactive subcommand off it would be one typo away from writing a
+ * banner onto that channel.
+ */
+export function registerConnectCommand(program, version) {
+    return program
+        .command('connect')
+        .description('Authorize VibeDefend against an HTTP MCP server so the proxy can reach it. Takes over the sign-in Claude Code or Codex already holds for it, otherwise runs the OAuth flow in your browser.')
+        .argument('[name]', 'Server name from ~/.cybedefend/mcp/upstreams.json.')
+        .option('--all', 'Connect every HTTP upstream, skipping the ones already connected.')
+        .option('--url <url>', 'Connect a URL that is not in upstreams.json yet.')
+        .option('--token <bearer>', 'Store this bearer token instead of running the browser flow (CI).')
+        .option('--client-id <id>', 'Use a client registered out of band, for a server with no dynamic registration.')
+        .option('--client-secret <secret>', 'Secret of that client, when it has one.')
+        .option('--callback-port <port>', 'Listen on this loopback port for the authorization callback instead of an ephemeral one, for a client whose redirect URI was registered by hand. Remembered per server with --client-id.')
+        .option('--scope <scope>', 'Override the scopes advertised by the server.')
+        .option('--force', 'Authorize again even if a usable token is already stored.')
+        .option('--no-reuse', 'Do not take over the sign-in Claude Code or Codex already holds for the server: always run the browser flow.')
+        .option('--strict-issuer', 'Refuse an authorization server that does not implement RFC 9207 instead of warning. Also on when the organisation policy requires a strict issuer.')
+        .option('--no-browser', 'Print the authorization URL instead of launching a browser (headless, SSH, CI with a human).')
+        .option('--json', 'Machine-readable output.')
+        .option('--quiet', 'Print only the outcome.')
+        .action(async (name, 
+    // Commander turns `--no-browser` into `browser: false` rather than
+    // `noBrowser: true`; the flag is negatable by construction.
+    options) => {
+        process.exitCode = await runMcpConnectCommand({ ...options, noBrowser: options.browser === false }, {
+            env: process.env,
+            version,
+        }, name);
+    });
+}
+/**
+ * `vibedefend sync` — put the proxy in front of whatever is configured now.
+ *
+ * The same operation as the first install, on purpose: running it twice
+ * changes nothing, which is what lets the `SessionStart` hook and the proxy's
+ * own background refresh both call it.
+ */
+export function registerSyncCommand(program) {
+    return program
+        .command('sync')
+        .description('Put the VibeDefend proxy in front of the MCP servers configured in Claude Code, Cursor, VS Code, Windsurf and Claude Desktop. Idempotent.')
+        .option('--client <name>', 'Only this client: claude-code, claude-desktop, cursor, vscode, windsurf.')
+        .option('--dry-run', 'Show what would change and write nothing.')
+        .option('--quiet', 'Print only when something happened. Used by the SessionStart hook.')
+        .option('--json', 'Machine-readable output.')
+        .option('--no-backup', 'Do not keep a timestamped copy of each config file.')
+        .option('--hook <client>', 'Install the SessionStart hook for a client (claude-code) and exit.')
+        .option('--remove-hook', 'With --hook: remove it instead of installing it.')
+        .action(async (options) => {
+        process.exitCode = await runMcpSyncCommand({ ...options, noBackup: options.backup === false }, { env: process.env });
+    });
+}
+/**
+ * `vibedefend unwrap` — take the proxy back out. Not `uninstall`, which
+ * removes VibeDefend itself (and runs this first).
+ *
+ * It restores each original from `~/.cybedefend/mcp/upstreams.json`, not from
+ * the timestamped backup: the backup is for the user, and by the time anyone
+ * uninstalls it may have been edited, moved or cleaned up.
+ */
+export function registerUnwrapCommand(program) {
+    return program
+        .command('unwrap')
+        .description('Remove the VibeDefend proxy from the MCP servers it wraps, restoring each original entry.')
+        .option('--client <name>', 'Only this client.')
+        .option('--dry-run', 'Show what would change and write nothing.')
+        .option('--json', 'Machine-readable output.')
+        .option('--no-backup', 'Do not keep a timestamped copy of each config file.')
+        .action(async (options) => {
+        process.exitCode = await runMcpSyncCommand({ ...options, noBackup: options.backup === false }, { env: process.env }, 'uninstall');
+    });
+}
+/** `vibedefend scan` — talk to every upstream once, with no agent in the loop. */
+export function registerScanCommand(program, version) {
+    return program
+        .command('scan')
+        .description('Reach every registered MCP server once and report what it answers. No agent involved.')
+        .option('--name <id>', 'Scan one server instead of all of them.')
+        .option('--json', 'Machine-readable output.')
+        .action(async (options) => {
+        process.exitCode = await runMcpScanCommand(options, { env: process.env, version });
+    });
+}
+/**
+ * `vibedefend allow` and `vibedefend deny`.
+ *
+ * The decision the user makes after `vibedefend_alert` told the agent to ask
+ * them. It outranks the backend in both directions, which is why it lives
+ * with the verdicts it overrides rather than in a settings file of its own.
+ *
+ * The third command the plan names, `status`, is not registered here: the CLI
+ * already has one, about the install, and a second command with the same name
+ * would silently shadow it. The MCP verdicts are a section of that one
+ * instead, which is where somebody typing `vibedefend status` would look for
+ * them anyway.
+ */
+export function registerOverrideCommands(program) {
+    program
+        .command('allow')
+        .description('Use an MCP server even when VibeDefend flags it. The decision is yours and it outranks the verdict.')
+        .argument('<server>', 'Server name, as it appears in your client config.')
+        .option('--clear', "Undo it: VibeDefend's own verdict applies again.")
+        .option('--json', 'Machine-readable output.')
+        .action((server, options) => {
+        process.exitCode = runMcpOverrideCommand(server, 'allow', options, { env: process.env });
+    });
+    program
+        .command('deny')
+        .description('Refuse an MCP server whatever the verdict.')
+        .argument('<server>', 'Server name, as it appears in your client config.')
+        .option('--clear', "Undo it: VibeDefend's own verdict applies again.")
+        .option('--json', 'Machine-readable output.')
+        .action((server, options) => {
+        process.exitCode = runMcpOverrideCommand(server, 'deny', options, { env: process.env });
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/mcp/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,qBAAqB,EAA2B,MAAM,YAAY,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAA0B,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAA+B,MAAM,YAAY,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAuB,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAuB,MAAM,WAAW,CAAC;AAEnE,SAAS,OAAO,CAAC,KAAa,EAAE,QAAkB;IAChD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAgB,EAAE,OAAe;IAClE,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CACV,mKAAmK,CACpK;SACA,QAAQ,CACP,sBAAsB,EACtB,2HAA2H,CAC5H;SACA,MAAM,CACL,mBAAmB,EACnB,iIAAiI,CAClI;SACA,MAAM,CAAC,8BAA8B,EAAE,kDAAkD,CAAC;SAC1F,MAAM,CAAC,sBAAsB,EAAE,kDAAkD,EAAE,OAAO,EAAE,EAAE,CAAC;SAC/F,MAAM,CAAC,4BAA4B,EAAE,iDAAiD,EAAE,OAAO,EAAE,EAAE,CAAC;SACpG,MAAM,CAAC,sBAAsB,EAAE,oCAAoC,CAAC;SACpE,MAAM,CAAC,uBAAuB,EAAE,qDAAqD,EAAE,OAAO,EAAE,EAAE,CAAC;SACnG,MAAM,CAAC,aAAa,EAAE,gEAAgE,CAAC;SACvF,MAAM,CAAC,qBAAqB,EAAE,gEAAgE,CAAC;SAC/F,MAAM,CAAC,KAAK,EAAE,eAAyB,EAAE,OAA+B,EAAE,EAAE;QAC3E,MAAM,IAAI,GAAG,MAAM,kBAAkB,CACnC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,EACzC;YACE,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO;SACR,CACF,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEL,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/B,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAElC,0DAA0D;IAC1D,OAAO,CAAC,eAAe,CAAC;QACtB,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QAC9C,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;KAC/C,CAAC,CAAC;IACH,2EAA2E;IAC3E,8DAA8D;IAC9D,OAAO,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgB,EAAE,OAAe;IACtE,OAAO,OAAO;SACX,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CACV,6LAA6L,CAC9L;SACA,QAAQ,CAAC,QAAQ,EAAE,oDAAoD,CAAC;SACxE,MAAM,CAAC,OAAO,EAAE,mEAAmE,CAAC;SACpF,MAAM,CAAC,aAAa,EAAE,kDAAkD,CAAC;SACzE,MAAM,CAAC,kBAAkB,EAAE,mEAAmE,CAAC;SAC/F,MAAM,CAAC,kBAAkB,EAAE,iFAAiF,CAAC;SAC7G,MAAM,CAAC,0BAA0B,EAAE,yCAAyC,CAAC;SAC7E,MAAM,CACL,wBAAwB,EACxB,0LAA0L,CAC3L;SACA,MAAM,CAAC,iBAAiB,EAAE,+CAA+C,CAAC;SAC1E,MAAM,CAAC,SAAS,EAAE,2DAA2D,CAAC;SAC9E,MAAM,CACL,YAAY,EACZ,8GAA8G,CAC/G;SACA,MAAM,CACL,iBAAiB,EACjB,oJAAoJ,CACrJ;SACA,MAAM,CACL,cAAc,EACd,8FAA8F,CAC/F;SACA,MAAM,CAAC,QAAQ,EAAE,0BAA0B,CAAC;SAC5C,MAAM,CAAC,SAAS,EAAE,yBAAyB,CAAC;SAC5C,MAAM,CACL,KAAK,EACH,IAAwB;IACxB,mEAAmE;IACnE,4DAA4D;IAC5D,OAAkD,EAClD,EAAE;QACF,OAAO,CAAC,QAAQ,GAAG,MAAM,oBAAoB,CAC3C,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,EACpD;YACE,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO;SACR,EACD,IAAI,CACL,CAAC;IACJ,CAAC,CACF,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,OAAO,OAAO;SACX,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CACV,2IAA2I,CAC5I;SACA,MAAM,CAAC,iBAAiB,EAAE,0EAA0E,CAAC;SACrG,MAAM,CAAC,WAAW,EAAE,2CAA2C,CAAC;SAChE,MAAM,CAAC,SAAS,EAAE,oEAAoE,CAAC;SACvF,MAAM,CAAC,QAAQ,EAAE,0BAA0B,CAAC;SAC5C,MAAM,CAAC,aAAa,EAAE,qDAAqD,CAAC;SAC5E,MAAM,CAAC,iBAAiB,EAAE,oEAAoE,CAAC;SAC/F,MAAM,CAAC,eAAe,EAAE,kDAAkD,CAAC;SAC3E,MAAM,CAAC,KAAK,EAAE,OAA8C,EAAE,EAAE;QAC/D,OAAO,CAAC,QAAQ,GAAG,MAAM,iBAAiB,CACxC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,EAClD,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO,OAAO;SACX,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CACV,2FAA2F,CAC5F;SACA,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;SAC9C,MAAM,CAAC,WAAW,EAAE,2CAA2C,CAAC;SAChE,MAAM,CAAC,QAAQ,EAAE,0BAA0B,CAAC;SAC5C,MAAM,CAAC,aAAa,EAAE,qDAAqD,CAAC;SAC5E,MAAM,CAAC,KAAK,EAAE,OAA8C,EAAE,EAAE;QAC/D,OAAO,CAAC,QAAQ,GAAG,MAAM,iBAAiB,CACxC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,EAClD,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EACpB,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,OAAgB,EAAE,OAAe;IACnE,OAAO,OAAO;SACX,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CACV,uFAAuF,CACxF;SACA,MAAM,CAAC,aAAa,EAAE,yCAAyC,CAAC;SAChE,MAAM,CAAC,QAAQ,EAAE,0BAA0B,CAAC;SAC5C,MAAM,CAAC,KAAK,EAAE,OAAuB,EAAE,EAAE;QACxC,OAAO,CAAC,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CACV,qGAAqG,CACtG;SACA,QAAQ,CAAC,UAAU,EAAE,mDAAmD,CAAC;SACzE,MAAM,CAAC,SAAS,EAAE,kDAAkD,CAAC;SACrE,MAAM,CAAC,QAAQ,EAAE,0BAA0B,CAAC;SAC5C,MAAM,CAAC,CAAC,MAAc,EAAE,OAA2B,EAAE,EAAE;QACtD,OAAO,CAAC,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,4CAA4C,CAAC;SACzD,QAAQ,CAAC,UAAU,EAAE,mDAAmD,CAAC;SACzE,MAAM,CAAC,SAAS,EAAE,kDAAkD,CAAC;SACrE,MAAM,CAAC,QAAQ,EAAE,0BAA0B,CAAC;SAC5C,MAAM,CAAC,CAAC,MAAc,EAAE,OAA2B,EAAE,EAAE;QACtD,OAAO,CAAC,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACP,CAAC"}