@cybedefend/vibedefend 1.5.0 → 1.7.0

package/dist/mcp/proxy/jsonrpc.js

@@ -0,0 +1,153 @@
+/**
+ * JSON-RPC 2.0 framing for the MCP stdio channel.
+ *
+ * The proxy forwards messages it does not understand, so nothing here parses
+ * MCP semantics: a message is an object, and the only questions we ask are
+ * "is it a request, a response or a notification" and "what is its id".
+ * Everything else stays untouched between `stdin` and the upstream.
+ */
+/**
+ * Largest single message the framer accepts, in bytes.
+ *
+ * A tool result carrying a base64 image or a gzipped resource is routinely a
+ * few megabytes; 16 MiB leaves room for those while bounding the memory an
+ * upstream (or a hostile agent) can make the proxy hold on a line that never
+ * ends. Over the limit the framer drops bytes until the next newline and
+ * reports an error instead of growing without bound.
+ */
+export const MAX_MESSAGE_BYTES = 16 * 1024 * 1024;
+const NEWLINE = 0x0a;
+export function isJsonRpcMessage(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** A request expects a response: it carries both a method and a non-null id. */
+export function isRequest(message) {
+    return typeof message.method === 'string' && message.id !== undefined && message.id !== null;
+}
+/** A notification carries a method and no id. */
+export function isNotification(message) {
+    return typeof message.method === 'string' && (message.id === undefined || message.id === null);
+}
+/** A response carries an id and either a result or an error, and no method. */
+export function isResponse(message) {
+    return (message.method === undefined &&
+        message.id !== undefined &&
+        ('result' in message || 'error' in message));
+}
+export function methodOf(message) {
+    return typeof message.method === 'string' ? message.method : undefined;
+}
+/**
+ * A comparable key for an id. JSON-RPC ids are strings or numbers and `1` is
+ * not `"1"`, so the type is part of the key.
+ */
+export function idKey(id) {
+    if (typeof id === 'number')
+        return `n:${id}`;
+    if (typeof id === 'string')
+        return `s:${id}`;
+    return undefined;
+}
+/**
+ * Serialises one message as a single line. `JSON.stringify` escapes every
+ * control character, so the payload can never contain the delimiter.
+ */
+export function encodeMessage(message) {
+    return `${JSON.stringify(message)}\n`;
+}
+/** Longest fragment of a bad line kept for the log. */
+const SAMPLE_BYTES = 200;
+/**
+ * Newline-delimited JSON reader.
+ *
+ * Chunks are held as a list and only concatenated when a newline shows up, so
+ * a multi-megabyte message costs one copy instead of one copy per chunk.
+ */
+export class LineFramer {
+    maxBytes;
+    chunks = [];
+    size = 0;
+    /** Set when the current line blew the size limit: bytes are dropped until the next newline. */
+    discarding = false;
+    discarded = 0;
+    constructor(maxBytes = MAX_MESSAGE_BYTES) {
+        this.maxBytes = maxBytes;
+    }
+    push(chunk) {
+        const out = { messages: [], errors: [] };
+        let start = 0;
+        for (;;) {
+            const newline = chunk.indexOf(NEWLINE, start);
+            if (newline === -1) {
+                this.append(chunk.subarray(start));
+                return out;
+            }
+            this.append(chunk.subarray(start, newline));
+            this.emit(out);
+            start = newline + 1;
+        }
+    }
+    /** Decodes whatever is left when the stream ends without a trailing newline. */
+    flush() {
+        const out = { messages: [], errors: [] };
+        if (this.size > 0 || this.discarding)
+            this.emit(out);
+        return out;
+    }
+    append(part) {
+        if (part.length === 0)
+            return;
+        if (this.discarding) {
+            this.discarded += part.length;
+            return;
+        }
+        if (this.size + part.length > this.maxBytes) {
+            this.discarding = true;
+            this.discarded = this.size + part.length;
+            this.chunks = [];
+            this.size = 0;
+            return;
+        }
+        this.chunks.push(part);
+        this.size += part.length;
+    }
+    emit(out) {
+        if (this.discarding) {
+            out.errors.push({ reason: 'too-large', sample: '', bytes: this.discarded });
+            this.discarding = false;
+            this.discarded = 0;
+            return;
+        }
+        const line = this.size === 1 ? this.chunks[0] : Buffer.concat(this.chunks, this.size);
+        const bytes = this.size;
+        this.chunks = [];
+        this.size = 0;
+        // A bare "\r\n" or a blank line is not an error, it is padding.
+        const text = line.toString('utf8').replace(/\r$/, '');
+        if (text.trim() === '')
+            return;
+        let parsed;
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            out.errors.push({ reason: 'invalid-json', sample: text.slice(0, SAMPLE_BYTES), bytes });
+            return;
+        }
+        if (!isJsonRpcMessage(parsed)) {
+            out.errors.push({ reason: 'not-an-object', sample: text.slice(0, SAMPLE_BYTES), bytes });
+            return;
+        }
+        out.messages.push(parsed);
+    }
+}
+/** JSON-RPC error codes used by the proxy itself. */
+export const JSON_RPC_INTERNAL_ERROR = -32603;
+export const JSON_RPC_INVALID_REQUEST = -32600;
+export function errorResponse(id, code, message, data) {
+    const error = { code, message };
+    if (data !== undefined)
+        error.data = data;
+    return { jsonrpc: '2.0', id: id === undefined ? null : id, error };
+}
+//# sourceMappingURL=jsonrpc.js.map

package/dist/mcp/proxy/jsonrpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonrpc.js","sourceRoot":"","sources":["../../../src/mcp/proxy/jsonrpc.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAqBH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAElD,MAAM,OAAO,GAAG,IAAI,CAAC;AAErB,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,SAAS,CAAC,OAAuB;IAC/C,OAAO,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC;AAC/F,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,cAAc,CAAC,OAAuB;IACpD,OAAO,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;AACjG,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,UAAU,CAAC,OAAuB;IAChD,OAAO,CACL,OAAO,CAAC,MAAM,KAAK,SAAS;QAC5B,OAAO,CAAC,EAAE,KAAK,SAAS;QACxB,CAAC,QAAQ,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO,CAAC,CAC5C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAuB;IAC9C,OAAO,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,EAAW;IAC/B,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,EAAE,EAAE,CAAC;IAC7C,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,EAAE,EAAE,CAAC;IAC7C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,OAAuB;IACnD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;AACxC,CAAC;AAgBD,uDAAuD;AACvD,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IAOQ;IANrB,MAAM,GAAa,EAAE,CAAC;IACtB,IAAI,GAAG,CAAC,CAAC;IACjB,+FAA+F;IACvF,UAAU,GAAG,KAAK,CAAC;IACnB,SAAS,GAAG,CAAC,CAAC;IAEtB,YAA6B,WAAmB,iBAAiB;QAApC,aAAQ,GAAR,QAAQ,CAA4B;IAAG,CAAC;IAErE,IAAI,CAAC,KAAa;QAChB,MAAM,GAAG,GAAiB,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACvD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,SAAS,CAAC;YACR,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9C,IAAI,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBACnC,OAAO,GAAG,CAAC;YACb,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,KAAK,GAAG,OAAO,GAAG,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,KAAK;QACH,MAAM,GAAG,GAAiB,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACvD,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,MAAM,CAAC,IAAY;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;YACzC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC;IAC3B,CAAC;IAEO,IAAI,CAAC,GAAiB;QAC5B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC5E,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YACxB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QACd,gEAAgE;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO;QAC/B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;CACF;AAED,qDAAqD;AACrD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,KAAK,CAAC;AAC9C,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAK,CAAC;AAE/C,MAAM,UAAU,aAAa,CAC3B,EAAW,EACX,IAAY,EACZ,OAAe,EACf,IAAc;IAEd,MAAM,KAAK,GAA4B,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACzD,IAAI,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;AACrE,CAAC"}

package/dist/mcp/proxy/log.js

@@ -0,0 +1,109 @@
+/**
+ * File logger for the proxy.
+ *
+ * The one rule that shapes this module: `stdout` is the MCP channel, so
+ * nothing here may ever write to it. Records go to a JSONL file under
+ * `~/.cybedefend/mcp/logs/`, and optionally to `stderr` when the operator
+ * asks for it (`VIBEDEFEND_MCP_LOG_STDERR=1`) — a client that spawns us over
+ * stdio captures our stderr for debugging, which is the right place for it.
+ *
+ * Every write is best-effort: a full disk or a read-only home must degrade
+ * the logs, never the MCP session.
+ */
+import { appendFileSync, mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { mcpLogsDir, PROXY_ENV_PREFIX } from './paths.js';
+const ORDER = { silent: 0, error: 1, warn: 2, info: 3, debug: 4 };
+export function parseLogLevel(value, fallback = 'info') {
+    if (!value)
+        return fallback;
+    const normalized = value.trim().toLowerCase();
+    return normalized in ORDER ? normalized : fallback;
+}
+/** `proxy-YYYY-MM-DD.log`: one file per day, no rotation logic to get wrong. */
+export function logFileNameFor(date) {
+    return `proxy-${date.toISOString().slice(0, 10)}.log`;
+}
+export function createLogger(options = {}) {
+    const now = options.now ?? (() => new Date());
+    const level = options.level ?? 'info';
+    const dir = options.dir ?? mcpLogsDir();
+    const mirrorToStderr = options.mirrorToStderr ?? false;
+    let target;
+    if (level !== 'silent') {
+        try {
+            mkdirSync(dir, { recursive: true });
+            target = join(dir, logFileNameFor(now()));
+        }
+        catch {
+            target = undefined;
+        }
+    }
+    const write = (recordLevel, base) => {
+        return (message, fields) => {
+            if (ORDER[recordLevel] > ORDER[level])
+                return;
+            const record = {
+                ts: now().toISOString(),
+                level: recordLevel,
+                msg: message,
+                ...base,
+                ...fields,
+            };
+            let line;
+            try {
+                line = `${JSON.stringify(record)}\n`;
+            }
+            catch {
+                line = `${JSON.stringify({ ts: record.ts, level: recordLevel, msg: message, note: 'fields not serialisable' })}\n`;
+            }
+            if (target) {
+                try {
+                    appendFileSync(target, line);
+                }
+                catch {
+                    // A logger that throws would take the session down with it.
+                }
+            }
+            if (mirrorToStderr) {
+                try {
+                    process.stderr.write(line);
+                }
+                catch {
+                    /* ignore */
+                }
+            }
+        };
+    };
+    const build = (base) => ({
+        error: write('error', base),
+        warn: write('warn', base),
+        info: write('info', base),
+        debug: write('debug', base),
+        child: (fields) => build({ ...base, ...fields }),
+        file: target,
+    });
+    return build(options.base ?? {});
+}
+/** Drops everything. Used by unit tests that do not assert on logs. */
+export function createNullLogger() {
+    const noop = () => { };
+    const logger = {
+        error: noop,
+        warn: noop,
+        info: noop,
+        debug: noop,
+        child: () => logger,
+        file: undefined,
+    };
+    return logger;
+}
+export function loggerFromEnv(base, env = process.env) {
+    return createLogger({
+        level: parseLogLevel(env[`${PROXY_ENV_PREFIX}LOG_LEVEL`]),
+        dir: mcpLogsDir(env),
+        base,
+        mirrorToStderr: env[`${PROXY_ENV_PREFIX}LOG_STDERR`] === '1',
+    });
+}
+//# sourceMappingURL=log.js.map

package/dist/mcp/proxy/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../../../src/mcp/proxy/log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAI1D,MAAM,KAAK,GAA6B,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAe5F,MAAM,UAAU,aAAa,CAAC,KAAyB,EAAE,WAAqB,MAAM;IAClF,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,UAAU,IAAI,KAAK,CAAC,CAAC,CAAE,UAAuB,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnE,CAAC;AAYD,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,IAAU;IACvC,OAAO,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,UAAyB,EAAE;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC;IACxC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IAEvD,IAAI,MAA0B,CAAC;IAC/B,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,WAAwC,EAAE,IAAe,EAAE,EAAE;QAC1E,OAAO,CAAC,OAAe,EAAE,MAAkB,EAAQ,EAAE;YACnD,IAAI,KAAK,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;gBAAE,OAAO;YAC9C,MAAM,MAAM,GAAG;gBACb,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;gBACvB,KAAK,EAAE,WAAW;gBAClB,GAAG,EAAE,OAAO;gBACZ,GAAG,IAAI;gBACP,GAAG,MAAM;aACV,CAAC;YACF,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,IAAI,CAAC;YACrH,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;YACH,CAAC;YACD,IAAI,cAAc,EAAE,CAAC;gBACnB,IAAI,CAAC;oBACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY;gBACd,CAAC;YACH,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,IAAe,EAAU,EAAE,CAAC,CAAC;QAC1C,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;QAC3B,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC;QACzB,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC;QACzB,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;QAC3B,KAAK,EAAE,CAAC,MAAiB,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;QAC3D,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,gBAAgB;IAC9B,MAAM,IAAI,GAAG,GAAS,EAAE,GAAE,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAW;QACrB,KAAK,EAAE,IAAI;QACX,IAAI,EAAE,IAAI;QACV,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM;QACnB,IAAI,EAAE,SAAS;KAChB,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAe,EAAE,MAAyB,OAAO,CAAC,GAAG;IACjF,OAAO,YAAY,CAAC;QAClB,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,GAAG,gBAAgB,WAAW,CAAC,CAAC;QACzD,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC;QACpB,IAAI;QACJ,cAAc,EAAE,GAAG,CAAC,GAAG,gBAAgB,YAAY,CAAC,KAAK,GAAG;KAC7D,CAAC,CAAC;AACL,CAAC"}

package/dist/mcp/proxy/paths.js

@@ -0,0 +1,57 @@
+/**
+ * Where the proxy keeps its state.
+ *
+ * Section 0 of docs/PLAN-mcp-proxy.md: everything lives under
+ * `~/.cybedefend/mcp/`, no second user directory. `VIBEDEFEND_MCP_DIR` moves
+ * the whole tree, which is what the test suite uses instead of rewriting
+ * `HOME`.
+ */
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+/** Variables the proxy reads for itself; they are stripped from the upstream env. */
+export const PROXY_ENV_PREFIX = 'VIBEDEFEND_MCP_';
+export function mcpHomeDir(env = process.env) {
+    const override = env[`${PROXY_ENV_PREFIX}DIR`];
+    if (override && override.trim() !== '')
+        return override;
+    return join(homedir(), '.cybedefend', 'mcp');
+}
+/**
+ * Where the clients' own config files are looked for.
+ *
+ * The home directory — unless `VIBEDEFEND_MCP_DIR` is set, in which case the
+ * clients are looked for under it as if it were the home directory. The
+ * variable is the root of everything the MCP feature reads and writes: a test
+ * or a manual procedure that points it at an empty directory must be certain
+ * that no real `~/.claude.json` is discovered, let alone rewritten. Measured
+ * on 2026-09-08 before this existed: a proxy started for a throwaway test
+ * wrapped twelve real servers across three clients.
+ */
+export function clientConfigRoot(env = process.env) {
+    const override = env[`${PROXY_ENV_PREFIX}DIR`];
+    if (override && override.trim() !== '')
+        return override;
+    return env.HOME || env.USERPROFILE || homedir();
+}
+/** Is `clientConfigRoot` an override, so platform-specific roots must follow it too? */
+export function clientConfigRootIsOverridden(env = process.env) {
+    const override = env[`${PROXY_ENV_PREFIX}DIR`];
+    return Boolean(override && override.trim() !== '');
+}
+export function mcpLogsDir(env = process.env) {
+    return join(mcpHomeDir(env), 'logs');
+}
+export function mcpCacheDir(env = process.env) {
+    return join(mcpHomeDir(env), 'cache');
+}
+export function mcpAuditDir(env = process.env) {
+    return join(mcpHomeDir(env), 'audit');
+}
+/** Call reports not yet delivered: `reports.jsonl`, `holds.json`, `flush.lock`. */
+export function mcpReportsDir(env = process.env) {
+    return join(mcpHomeDir(env), 'reports');
+}
+export function upstreamsFile(env = process.env) {
+    return join(mcpHomeDir(env), 'upstreams.json');
+}
+//# sourceMappingURL=paths.js.map

package/dist/mcp/proxy/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/mcp/proxy/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,qFAAqF;AACrF,MAAM,CAAC,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAElD,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,gBAAgB,KAAK,CAAC,CAAC;IAC/C,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACxD,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,gBAAgB,KAAK,CAAC,CAAC;IAC/C,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACxD,OAAO,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,WAAW,IAAI,OAAO,EAAE,CAAC;AAClD,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,4BAA4B,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC/E,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,gBAAgB,KAAK,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC9D,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC9D,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,MAAyB,OAAO,CAAC,GAAG;IAChE,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAyB,OAAO,CAAC,GAAG;IAChE,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACjD,CAAC"}