@dotsetlabs/tollgate 0.1.0

package/dist/proxy/server.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Tollgate MCP Server
+ *
+ * Acts as a proxy between Claude Desktop and upstream MCP servers,
+ * intercepting tool calls and applying policy-based access control.
+ *
+ * Resilience features:
+ * - Failure modes: fail-closed, fail-open, fail-readonly
+ * - Health-aware request routing
+ * - In-flight request tracking for graceful shutdown
+ */
+import type { PolicyEngine } from '../policy/engine.js';
+import type { AuditLogger } from '../audit/logger.js';
+import type { ApprovalHandler } from '../approval/types.js';
+import type { UpstreamClient } from './client.js';
+import type { SessionManager } from '../session/manager.js';
+import type { FailureMode } from '../policy/types.js';
+export interface TollgateServerOptions {
+    serverName: string;
+    policyEngine: PolicyEngine;
+    auditLogger: AuditLogger;
+    approvalHandler: ApprovalHandler;
+    upstreamClient: UpstreamClient;
+    /** Session manager for time-bounded approvals */
+    sessionManager?: SessionManager;
+    /**
+     * Enable dry-run mode.
+     * When true, tool calls are logged and policies evaluated,
+     * but calls are NOT forwarded to the upstream server.
+     */
+    dryRun?: boolean;
+    /**
+     * Failure mode when upstream is unavailable.
+     * - 'fail-closed': Deny all requests (default, most secure)
+     * - 'fail-open': Allow all requests (logged, for development)
+     * - 'fail-readonly': Only allow read operations (balanced)
+     */
+    failureMode?: FailureMode;
+}
+export declare class TollgateServer {
+    private server;
+    private transport;
+    private options;
+    private upstreamTools;
+    private failureMode;
+    /** In-flight request tracking for graceful shutdown */
+    private inFlightRequests;
+    /** Flag indicating shutdown is in progress */
+    private isShuttingDown;
+    constructor(options: TollgateServerOptions);
+    /**
+     * Check if the upstream server is available.
+     * Used to apply failure mode policies.
+     */
+    private isUpstreamHealthy;
+    /**
+     * Check if a tool name matches read-only patterns.
+     * Used for fail-readonly mode.
+     */
+    private isReadOnlyTool;
+    /**
+     * Apply failure mode policy when upstream is unavailable.
+     * Returns null if the request should proceed, or a CallToolResult to return immediately.
+     */
+    private applyFailureMode;
+    /**
+     * Get the number of in-flight requests.
+     */
+    getInFlightCount(): number;
+    /**
+     * Check if the server is currently shutting down.
+     */
+    isClosing(): boolean;
+    /**
+     * Wait for all in-flight requests to complete.
+     * @param timeoutMs Maximum time to wait in milliseconds
+     * @returns true if all requests completed, false if timed out
+     */
+    waitForInFlightRequests(timeoutMs: number): Promise<boolean>;
+    /** Promise to prevent concurrent ListTools initialization */
+    private listToolsPromise;
+    private setupHandlers;
+    /**
+     * Handles a tool call from the downstream client (Claude).
+     *
+     * Flow:
+     * 1. Check if shutting down (reject new requests)
+     * 2. Track request as in-flight
+     * 3. Check upstream health and apply failure mode
+     * 4. Evaluate policy to get decision (allow/deny/prompt)
+     * 5. If 'prompt', check for existing session grant
+     * 6. If no grant, prompt user (with session duration options)
+     * 7. If approved with session, create grant for future calls
+     * 8. Forward to upstream if allowed/approved
+     * 9. Log everything to audit
+     */
+    private handleToolCall;
+    /**
+     * Process a tool call after in-flight tracking is set up.
+     */
+    private processToolCall;
+    start(): Promise<void>;
+    /**
+     * Gracefully close the server.
+     * Waits for in-flight requests to complete before closing components.
+     *
+     * @param drainTimeoutMs - Time to wait for in-flight requests (default: 5000)
+     */
+    close(drainTimeoutMs?: number): Promise<void>;
+}
+//# sourceMappingURL=server.d.ts.map

package/dist/proxy/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/proxy/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAItD,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;IACjC,cAAc,EAAE,cAAc,CAAC;IAC/B,iDAAiD;IACjD,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAiBD,qBAAa,cAAc;IAKzB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,aAAa,CAAc;IACnC,OAAO,CAAC,WAAW,CAAc;IAEjC,uDAAuD;IACvD,OAAO,CAAC,gBAAgB,CAAqB;IAE7C,8CAA8C;IAC9C,OAAO,CAAC,cAAc,CAAS;gBAMnB,OAAO,EAAE,qBAAqB;IAyB1C;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAIzB;;;OAGG;IACH,OAAO,CAAC,cAAc;IAItB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAuExB;;OAEG;IACH,gBAAgB,IAAI,MAAM;IAI1B;;OAEG;IACH,SAAS,IAAI,OAAO;IAIpB;;;;OAIG;IACG,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAmClE,6DAA6D;IAC7D,OAAO,CAAC,gBAAgB,CAA8B;IAEtD,OAAO,CAAC,aAAa;IA0BrB;;;;;;;;;;;;;OAaG;YACW,cAAc;IA+B5B;;OAEG;YACW,eAAe;IA+OvB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAY5B;;;;;OAKG;IACG,KAAK,CAAC,cAAc,SAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAmBlD"}

package/dist/proxy/server.js

@@ -0,0 +1,444 @@
+/**
+ * Tollgate MCP Server
+ *
+ * Acts as a proxy between Claude Desktop and upstream MCP servers,
+ * intercepting tool calls and applying policy-based access control.
+ *
+ * Resilience features:
+ * - Failure modes: fail-closed, fail-open, fail-readonly
+ * - Health-aware request routing
+ * - In-flight request tracking for graceful shutdown
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+import { v4 as uuidv4 } from 'uuid';
+import { proxyLogger as logger } from '../utils/logger.js';
+/**
+ * Read-only tool name patterns for fail-readonly mode.
+ */
+const READ_ONLY_PATTERNS = [
+    /^read/i,
+    /^get/i,
+    /^list/i,
+    /^query$/i,
+    /^search/i,
+    /^find/i,
+    /^describe/i,
+    /^show/i,
+    /^select/i,
+];
+export class TollgateServer {
+    // ---------------------------------------------------------------------------
+    // Private State
+    // ---------------------------------------------------------------------------
+    server;
+    transport;
+    options;
+    upstreamTools = [];
+    failureMode;
+    /** In-flight request tracking for graceful shutdown */
+    inFlightRequests = new Set();
+    /** Flag indicating shutdown is in progress */
+    isShuttingDown = false;
+    // ---------------------------------------------------------------------------
+    // Constructor
+    // ---------------------------------------------------------------------------
+    constructor(options) {
+        this.options = options;
+        this.failureMode = options.failureMode ?? 'fail-closed';
+        this.server = new Server({
+            name: 'tollgate',
+            version: '0.1.0',
+        }, {
+            capabilities: {
+                tools: {},
+            },
+        });
+        this.transport = new StdioServerTransport();
+        this.setupHandlers();
+    }
+    // ---------------------------------------------------------------------------
+    // Health & Failure Mode
+    // ---------------------------------------------------------------------------
+    /**
+     * Check if the upstream server is available.
+     * Used to apply failure mode policies.
+     */
+    isUpstreamHealthy() {
+        return this.options.upstreamClient.isHealthy();
+    }
+    /**
+     * Check if a tool name matches read-only patterns.
+     * Used for fail-readonly mode.
+     */
+    isReadOnlyTool(toolName) {
+        return READ_ONLY_PATTERNS.some((pattern) => pattern.test(toolName));
+    }
+    /**
+     * Apply failure mode policy when upstream is unavailable.
+     * Returns null if the request should proceed, or a CallToolResult to return immediately.
+     */
+    applyFailureMode(toolName, _args, auditId) {
+        // If upstream is healthy, no failure mode needed
+        if (this.isUpstreamHealthy()) {
+            return null;
+        }
+        const healthStatus = this.options.upstreamClient.getHealthStatus();
+        const errorDetail = healthStatus.error ? `: ${healthStatus.error}` : '';
+        switch (this.failureMode) {
+            case 'fail-closed':
+                // Deny all requests when upstream is down
+                this.options.auditLogger.logResult(auditId, null, 'error', `Upstream unavailable (fail-closed mode)${errorDetail}`, 0);
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `Service temporarily unavailable: upstream server is not responding. Please try again later.`,
+                        },
+                    ],
+                    isError: true,
+                };
+            case 'fail-open':
+                // Log warning but proceed (will likely fail at upstream call)
+                logger.warn(`Upstream unhealthy but proceeding (fail-open mode)`, { error: errorDetail || undefined });
+                return null;
+            case 'fail-readonly':
+                // Only allow read operations
+                if (this.isReadOnlyTool(toolName)) {
+                    logger.warn('Upstream unhealthy, allowing read-only operation (fail-readonly mode)');
+                    return null;
+                }
+                this.options.auditLogger.logResult(auditId, null, 'error', `Upstream unavailable - only read operations allowed (fail-readonly mode)${errorDetail}`, 0);
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `Service degraded: upstream server is not responding. Only read operations are currently available.`,
+                        },
+                    ],
+                    isError: true,
+                };
+            default:
+                return null;
+        }
+    }
+    // ---------------------------------------------------------------------------
+    // Request Tracking & Shutdown
+    // ---------------------------------------------------------------------------
+    /**
+     * Get the number of in-flight requests.
+     */
+    getInFlightCount() {
+        return this.inFlightRequests.size;
+    }
+    /**
+     * Check if the server is currently shutting down.
+     */
+    isClosing() {
+        return this.isShuttingDown;
+    }
+    /**
+     * Wait for all in-flight requests to complete.
+     * @param timeoutMs Maximum time to wait in milliseconds
+     * @returns true if all requests completed, false if timed out
+     */
+    async waitForInFlightRequests(timeoutMs) {
+        if (this.inFlightRequests.size === 0) {
+            return true;
+        }
+        const startTime = Date.now();
+        const checkInterval = 100;
+        return new Promise((resolve) => {
+            const check = () => {
+                if (this.inFlightRequests.size === 0) {
+                    resolve(true);
+                    return;
+                }
+                if (Date.now() - startTime >= timeoutMs) {
+                    logger.warn('Requests still in-flight after timeout', {
+                        count: this.inFlightRequests.size,
+                        timeoutMs,
+                    });
+                    resolve(false);
+                    return;
+                }
+                setTimeout(check, checkInterval);
+            };
+            check();
+        });
+    }
+    // ---------------------------------------------------------------------------
+    // MCP Protocol Handlers
+    // ---------------------------------------------------------------------------
+    /** Promise to prevent concurrent ListTools initialization */
+    listToolsPromise = null;
+    setupHandlers() {
+        // List tools - forward from upstream with initialization mutex
+        this.server.setRequestHandler(ListToolsRequestSchema, async () => {
+            if (this.upstreamTools.length === 0) {
+                // Use a mutex pattern to prevent concurrent ListTools calls
+                if (!this.listToolsPromise) {
+                    this.listToolsPromise = (async () => {
+                        const result = await this.options.upstreamClient.listTools();
+                        this.upstreamTools = result.tools;
+                    })();
+                }
+                await this.listToolsPromise;
+            }
+            return { tools: this.upstreamTools };
+        });
+        // Call tool - intercept and apply policy
+        this.server.setRequestHandler(CallToolRequestSchema, async (request) => {
+            return this.handleToolCall(request.params.name, request.params.arguments ?? {});
+        });
+    }
+    // ---------------------------------------------------------------------------
+    // Tool Call Processing
+    // ---------------------------------------------------------------------------
+    /**
+     * Handles a tool call from the downstream client (Claude).
+     *
+     * Flow:
+     * 1. Check if shutting down (reject new requests)
+     * 2. Track request as in-flight
+     * 3. Check upstream health and apply failure mode
+     * 4. Evaluate policy to get decision (allow/deny/prompt)
+     * 5. If 'prompt', check for existing session grant
+     * 6. If no grant, prompt user (with session duration options)
+     * 7. If approved with session, create grant for future calls
+     * 8. Forward to upstream if allowed/approved
+     * 9. Log everything to audit
+     */
+    async handleToolCall(toolName, args) {
+        // Generate unique request ID for tracking
+        const requestId = uuidv4();
+        // Reject new requests during shutdown
+        if (this.isShuttingDown) {
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: 'Server is shutting down. Please retry later.',
+                    },
+                ],
+                isError: true,
+            };
+        }
+        // Track this request as in-flight
+        this.inFlightRequests.add(requestId);
+        try {
+            return await this.processToolCall(toolName, args, requestId);
+        }
+        finally {
+            // Remove from in-flight tracking
+            this.inFlightRequests.delete(requestId);
+        }
+    }
+    /**
+     * Process a tool call after in-flight tracking is set up.
+     */
+    async processToolCall(toolName, args, _requestId) {
+        const startTime = Date.now();
+        const context = {
+            server: this.options.serverName,
+            tool: toolName,
+            args,
+            timestamp: new Date(),
+        };
+        // Evaluate policy
+        const decision = this.options.policyEngine.evaluate(context);
+        // Check if there's an active session grant that covers this call
+        let sessionGrantId;
+        const sessionManager = this.options.sessionManager;
+        if (decision.action === 'prompt' && sessionManager) {
+            const sessionCheck = sessionManager.checkGrant(context);
+            if (sessionCheck.granted && sessionCheck.grant) {
+                // Session grant found - skip prompting
+                sessionGrantId = sessionCheck.grant.id;
+                // Log session grant usage
+                this.options.auditLogger.logSessionGrantUsage(sessionGrantId);
+                // Log the attempt with session grant reference
+                const auditId = this.options.auditLogger.logAttempt(context, decision, sessionGrantId);
+                // Check upstream health and apply failure mode if needed
+                const failureModeResult = this.applyFailureMode(toolName, args, auditId);
+                if (failureModeResult) {
+                    return failureModeResult;
+                }
+                // In dry-run mode, skip the actual upstream call
+                if (this.options.dryRun) {
+                    const duration = Date.now() - startTime;
+                    this.options.auditLogger.logResult(auditId, 'approved', 'success', '[DRY RUN] Tool call simulated (session grant)', duration);
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: `[DRY RUN] Would have executed (via session): ${toolName}(${JSON.stringify(args)})`,
+                            },
+                        ],
+                        isError: false,
+                    };
+                }
+                try {
+                    // Forward directly to upstream
+                    const result = await this.options.upstreamClient.callTool(toolName, args);
+                    const duration = Date.now() - startTime;
+                    this.options.auditLogger.logResult(auditId, 'approved', // Implicitly approved by session
+                    'success', undefined, duration);
+                    return result;
+                }
+                catch (error) {
+                    const duration = Date.now() - startTime;
+                    const errorMessage = error instanceof Error ? error.message : String(error);
+                    this.options.auditLogger.logResult(auditId, 'approved', 'error', errorMessage, duration);
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: `Error executing tool: ${errorMessage}`,
+                            },
+                        ],
+                        isError: true,
+                    };
+                }
+            }
+        }
+        // Log the attempt (without session grant - not covered or policy allows/denies)
+        const auditId = this.options.auditLogger.logAttempt(context, decision);
+        // Check upstream health and apply failure mode if needed (for non-session path)
+        const failureModeResult = this.applyFailureMode(toolName, args, auditId);
+        if (failureModeResult) {
+            return failureModeResult;
+        }
+        try {
+            let userDecision = null;
+            switch (decision.action) {
+                case 'allow':
+                    // Forward directly to upstream
+                    break;
+                case 'deny': {
+                    const denyDuration = Date.now() - startTime;
+                    this.options.auditLogger.logResult(auditId, null, 'error', decision.reason, denyDuration);
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: `Action denied by policy: ${decision.reason ?? 'No reason provided'}`,
+                            },
+                        ],
+                        isError: true,
+                    };
+                }
+                case 'prompt': {
+                    const requestId = uuidv4();
+                    const approvalResponse = await this.options.approvalHandler.prompt({
+                        id: requestId,
+                        context,
+                        decision,
+                        timestamp: new Date(),
+                        // Session config would come from policy in future
+                        sessionConfig: undefined,
+                    });
+                    userDecision = approvalResponse.result;
+                    if (approvalResponse.result !== 'approved') {
+                        const promptDuration = Date.now() - startTime;
+                        this.options.auditLogger.logResult(auditId, userDecision, 'error', `User ${approvalResponse.result}`, promptDuration);
+                        return {
+                            content: [
+                                {
+                                    type: 'text',
+                                    text: `Action ${approvalResponse.result} by user`,
+                                },
+                            ],
+                            isError: true,
+                        };
+                    }
+                    // If user approved with a session grant, create it
+                    if (approvalResponse.sessionGrant && sessionManager) {
+                        const grant = sessionManager.createGrant({
+                            context,
+                            scope: approvalResponse.sessionGrant.scope,
+                            duration: approvalResponse.sessionGrant.duration,
+                            grantedBy: 'terminal',
+                            pattern: approvalResponse.sessionGrant.pattern,
+                            originalRequestId: requestId,
+                        });
+                        // Log the session grant
+                        this.options.auditLogger.logSessionGrant(grant);
+                        sessionGrantId = grant.id;
+                    }
+                    break;
+                }
+            }
+            // In dry-run mode, skip the actual upstream call
+            if (this.options.dryRun) {
+                const duration = Date.now() - startTime;
+                this.options.auditLogger.logResult(auditId, userDecision, 'success', '[DRY RUN] Tool call simulated', duration);
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: `[DRY RUN] Would have executed: ${toolName}(${JSON.stringify(args)})`,
+                        },
+                    ],
+                    isError: false,
+                };
+            }
+            // Forward to upstream
+            const result = await this.options.upstreamClient.callTool(toolName, args);
+            const duration = Date.now() - startTime;
+            this.options.auditLogger.logResult(auditId, userDecision, 'success', undefined, duration);
+            return result;
+        }
+        catch (error) {
+            const duration = Date.now() - startTime;
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            this.options.auditLogger.logResult(auditId, null, 'error', errorMessage, duration);
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: `Error executing tool: ${errorMessage}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    }
+    // ---------------------------------------------------------------------------
+    // Lifecycle Methods
+    // ---------------------------------------------------------------------------
+    async start() {
+        // Wait for upstream client to be ready
+        await this.options.upstreamClient.initialize();
+        // Pre-fetch tools
+        const result = await this.options.upstreamClient.listTools();
+        this.upstreamTools = result.tools;
+        // Connect to Claude Desktop via stdio
+        await this.server.connect(this.transport);
+    }
+    /**
+     * Gracefully close the server.
+     * Waits for in-flight requests to complete before closing components.
+     *
+     * @param drainTimeoutMs - Time to wait for in-flight requests (default: 5000)
+     */
+    async close(drainTimeoutMs = 5000) {
+        // Mark as shutting down to reject new requests
+        this.isShuttingDown = true;
+        // Wait for in-flight requests to complete
+        if (this.inFlightRequests.size > 0) {
+            logger.info('Waiting for in-flight requests to complete', {
+                count: this.inFlightRequests.size,
+            });
+            await this.waitForInFlightRequests(drainTimeoutMs);
+        }
+        // Close all components
+        await this.server.close();
+        this.options.approvalHandler.close();
+        this.options.auditLogger.close();
+        this.options.sessionManager?.close();
+        await this.options.upstreamClient.close();
+    }
+}
+//# sourceMappingURL=server.js.map

package/dist/proxy/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/proxy/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GAGvB,MAAM,oCAAoC,CAAC;AAO5C,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,WAAW,IAAI,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAyB3D;;GAEG;AACH,MAAM,kBAAkB,GAAG;IACzB,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,UAAU;IACV,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,UAAU;CACX,CAAC;AAEF,MAAM,OAAO,cAAc;IACzB,8EAA8E;IAC9E,gBAAgB;IAChB,8EAA8E;IAEtE,MAAM,CAAS;IACf,SAAS,CAAuB;IAChC,OAAO,CAAwB;IAC/B,aAAa,GAAW,EAAE,CAAC;IAC3B,WAAW,CAAc;IAEjC,uDAAuD;IAC/C,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE7C,8CAA8C;IACtC,cAAc,GAAG,KAAK,CAAC;IAE/B,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAE9E,YAAY,OAA8B;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,aAAa,CAAC;QAExD,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CACtB;YACE,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,OAAO;SACjB,EACD;YACE,YAAY,EAAE;gBACZ,KAAK,EAAE,EAAE;aACV;SACF,CACF,CAAC;QAEF,IAAI,CAAC,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAE5C,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED,8EAA8E;IAC9E,wBAAwB;IACxB,8EAA8E;IAE9E;;;OAGG;IACK,iBAAiB;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;IACjD,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,QAAgB;QACrC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtE,CAAC;IAED;;;OAGG;IACK,gBAAgB,CACtB,QAAgB,EAChB,KAA8B,EAC9B,OAAe;QAEf,iDAAiD;QACjD,IAAI,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,EAAE,CAAC;QACnE,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAExE,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;YACzB,KAAK,aAAa;gBAChB,0CAA0C;gBAC1C,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAChC,OAAO,EACP,IAAI,EACJ,OAAO,EACP,0CAA0C,WAAW,EAAE,EACvD,CAAC,CACF,CAAC;gBACF,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,6FAA6F;yBACpG;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YAEJ,KAAK,WAAW;gBACd,8DAA8D;gBAC9D,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE,EAAE,KAAK,EAAE,WAAW,IAAI,SAAS,EAAE,CAAC,CAAC;gBACvG,OAAO,IAAI,CAAC;YAEd,KAAK,eAAe;gBAClB,6BAA6B;gBAC7B,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAClC,MAAM,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;oBACrF,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAChC,OAAO,EACP,IAAI,EACJ,OAAO,EACP,2EAA2E,WAAW,EAAE,EACxF,CAAC,CACF,CAAC;gBACF,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,oGAAoG;yBAC3G;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YAEJ;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,8BAA8B;IAC9B,8EAA8E;IAE9E;;OAEG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,uBAAuB,CAAC,SAAiB;QAC7C,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,GAAG,CAAC;QAE1B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,GAAG,EAAE;gBACjB,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBACrC,OAAO,CAAC,IAAI,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,SAAS,EAAE,CAAC;oBACxC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;wBACpD,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI;wBACjC,SAAS;qBACV,CAAC,CAAC;oBACH,OAAO,CAAC,KAAK,CAAC,CAAC;oBACf,OAAO;gBACT,CAAC;gBAED,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACnC,CAAC,CAAC;YAEF,KAAK,EAAE,CAAC;QACV,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,wBAAwB;IACxB,8EAA8E;IAE9E,6DAA6D;IACrD,gBAAgB,GAAyB,IAAI,CAAC;IAE9C,aAAa;QACnB,+DAA+D;QAC/D,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;YAC/D,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpC,4DAA4D;gBAC5D,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBAC3B,IAAI,CAAC,gBAAgB,GAAG,CAAC,KAAK,IAAI,EAAE;wBAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;wBAC7D,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;oBACpC,CAAC,CAAC,EAAE,CAAC;gBACP,CAAC;gBACD,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC9B,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,yCAAyC;QACzC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACrE,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,uBAAuB;IACvB,8EAA8E;IAE9E;;;;;;;;;;;;;OAaG;IACK,KAAK,CAAC,cAAc,CAC1B,QAAgB,EAChB,IAA6B;QAE7B,0CAA0C;QAC1C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;QAE3B,sCAAsC;QACtC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,8CAA8C;qBACrD;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAErC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC/D,CAAC;gBAAS,CAAC;YACT,iCAAiC;YACjC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAC3B,QAAgB,EAChB,IAA6B,EAC7B,UAAkB;QAElB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG;YACd,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;YAC/B,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;QAEF,kBAAkB;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAE7D,iEAAiE;QACjE,IAAI,cAAkC,CAAC;QACvC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;QAEnD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,cAAc,EAAE,CAAC;YACnD,MAAM,YAAY,GAAG,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAExD,IAAI,YAAY,CAAC,OAAO,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;gBAC/C,uCAAuC;gBACvC,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAEvC,0BAA0B;gBAC1B,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;gBAE9D,+CAA+C;gBAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;gBAEvF,yDAAyD;gBACzD,MAAM,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBACzE,IAAI,iBAAiB,EAAE,CAAC;oBACtB,OAAO,iBAAiB,CAAC;gBAC3B,CAAC;gBAED,iDAAiD;gBACjD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;oBACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;oBACxC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAChC,OAAO,EACP,UAAU,EACV,SAAS,EACT,+CAA+C,EAC/C,QAAQ,CACT,CAAC;oBAEF,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,gDAAgD,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG;6BAC1F;yBACF;wBACD,OAAO,EAAE,KAAK;qBACf,CAAC;gBACJ,CAAC;gBAED,IAAI,CAAC;oBACH,+BAA+B;oBAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;oBAE1E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;oBACxC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAChC,OAAO,EACP,UAAU,EAAE,iCAAiC;oBAC7C,SAAS,EACT,SAAS,EACT,QAAQ,CACT,CAAC;oBAEF,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;oBACxC,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC5E,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;oBAEzF,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,yBAAyB,YAAY,EAAE;6BAC9C;yBACF;wBACD,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,gFAAgF;QAChF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEvE,gFAAgF;QAChF,MAAM,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACzE,IAAI,iBAAiB,EAAE,CAAC;YACtB,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC;YACH,IAAI,YAAY,GAA6C,IAAI,CAAC;YAElE,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACxB,KAAK,OAAO;oBACV,+BAA+B;oBAC/B,MAAM;gBAER,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;oBAC5C,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAChC,OAAO,EACP,IAAI,EACJ,OAAO,EACP,QAAQ,CAAC,MAAM,EACf,YAAY,CACb,CAAC;oBACF,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,4BAA4B,QAAQ,CAAC,MAAM,IAAI,oBAAoB,EAAE;6BAC5E;yBACF;wBACD,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBAED,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC;oBAC3B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC;wBACjE,EAAE,EAAE,SAAS;wBACb,OAAO;wBACP,QAAQ;wBACR,SAAS,EAAE,IAAI,IAAI,EAAE;wBACrB,kDAAkD;wBAClD,aAAa,EAAE,SAAS;qBACzB,CAAC,CAAC;oBAEH,YAAY,GAAG,gBAAgB,CAAC,MAAM,CAAC;oBAEvC,IAAI,gBAAgB,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;wBAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;wBAC9C,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAChC,OAAO,EACP,YAAY,EACZ,OAAO,EACP,QAAQ,gBAAgB,CAAC,MAAM,EAAE,EACjC,cAAc,CACf,CAAC;wBACF,OAAO;4BACL,OAAO,EAAE;gCACP;oCACE,IAAI,EAAE,MAAM;oCACZ,IAAI,EAAE,UAAU,gBAAgB,CAAC,MAAM,UAAU;iCAClD;6BACF;4BACD,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,CAAC;oBAED,mDAAmD;oBACnD,IAAI,gBAAgB,CAAC,YAAY,IAAI,cAAc,EAAE,CAAC;wBACpD,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,CAAC;4BACvC,OAAO;4BACP,KAAK,EAAE,gBAAgB,CAAC,YAAY,CAAC,KAAK;4BAC1C,QAAQ,EAAE,gBAAgB,CAAC,YAAY,CAAC,QAAQ;4BAChD,SAAS,EAAE,UAAU;4BACrB,OAAO,EAAE,gBAAgB,CAAC,YAAY,CAAC,OAAO;4BAC9C,iBAAiB,EAAE,SAAS;yBAC7B,CAAC,CAAC;wBAEH,wBAAwB;wBACxB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;wBAEhD,cAAc,GAAG,KAAK,CAAC,EAAE,CAAC;oBAC5B,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;YAED,iDAAiD;YACjD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAChC,OAAO,EACP,YAAY,EACZ,SAAS,EACT,+BAA+B,EAC/B,QAAQ,CACT,CAAC;gBAEF,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,kCAAkC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG;yBAC5E;qBACF;oBACD,OAAO,EAAE,KAAK;iBACf,CAAC;YACJ,CAAC;YAED,sBAAsB;YACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAE1E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAChC,OAAO,EACP,YAAY,EACZ,SAAS,EACT,SAAS,EACT,QAAQ,CACT,CAAC;YAEF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACxC,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;YAEnF,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,yBAAyB,YAAY,EAAE;qBAC9C;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,oBAAoB;IACpB,8EAA8E;IAE9E,KAAK,CAAC,KAAK;QACT,uCAAuC;QACvC,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QAE/C,kBAAkB;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;QAC7D,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;QAElC,sCAAsC;QACtC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK,CAAC,cAAc,GAAG,IAAI;QAC/B,+CAA+C;QAC/C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAE3B,0CAA0C;QAC1C,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;gBACxD,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI;aAClC,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC;QACrD,CAAC;QAED,uBAAuB;QACvB,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;QACrC,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;IAC5C,CAAC;CACF"}

package/dist/scanner.d.ts

@@ -0,0 +1,91 @@
+/**
+ * MCP Server Scanner
+ *
+ * Scans MCP servers to discover tools and assess security risks.
+ * Spawns the server, calls tools/list, analyzes tool definitions,
+ * and generates recommended security policies.
+ *
+ * Usage:
+ *   tollgate scan @modelcontextprotocol/server-postgres
+ *   tollgate scan npx -y @anthropic/mcp-server-filesystem ./
+ *
+ * @module scanner
+ */
+import type { Tool } from '@modelcontextprotocol/sdk/types.js';
+/**
+ * Risk level for a tool.
+ */
+export type ToolRiskLevel = 'safe' | 'read' | 'write' | 'destructive' | 'dangerous';
+/**
+ * Risk indicator found in a tool definition.
+ */
+export interface RiskIndicator {
+    type: 'keyword' | 'parameter' | 'pattern' | 'capability';
+    value: string;
+    risk: ToolRiskLevel;
+    description: string;
+}
+/**
+ * Analyzed tool with risk assessment.
+ */
+export interface AnalyzedTool {
+    name: string;
+    description: string;
+    risk: ToolRiskLevel;
+    category: 'read' | 'write' | 'admin' | 'unknown';
+    indicators: RiskIndicator[];
+    recommendedAction: 'allow' | 'prompt' | 'deny' | 'smart';
+    recommendedAnalyzer?: 'sql' | 'filesystem' | 'shell' | 'http';
+    inputSchema?: Record<string, unknown>;
+}
+/**
+ * Complete scan result for an MCP server.
+ */
+export interface ScanResult {
+    serverCommand: string;
+    serverArgs: string[];
+    scanTime: Date;
+    toolCount: number;
+    tools: AnalyzedTool[];
+    overallRisk: ToolRiskLevel;
+    summary: {
+        safe: number;
+        read: number;
+        write: number;
+        destructive: number;
+        dangerous: number;
+    };
+}
+/**
+ * Options for the scanner.
+ */
+export interface ScannerOptions {
+    /** Connection timeout in milliseconds */
+    timeoutMs?: number;
+    /** Environment variables to pass to the server */
+    env?: Record<string, string>;
+    /** Whether to skip the actual server spawn (for testing) */
+    dryRun?: boolean;
+}
+/**
+ * Analyze a single tool definition to assess its risk.
+ */
+export declare function analyzeTool(tool: Tool): AnalyzedTool;
+/**
+ * Scan an MCP server to discover tools and assess security risks.
+ *
+ * @param command - Server command (e.g., "npx")
+ * @param args - Server arguments (e.g., ["-y", "@modelcontextprotocol/server-postgres"])
+ * @param options - Scanner options
+ * @returns Scan result with tool analysis
+ */
+export declare function scanServer(command: string, args: string[], options?: ScannerOptions): Promise<ScanResult>;
+/**
+ * Generate a tollgate.yaml policy configuration from scan results.
+ */
+export declare function generatePolicy(scanResult: ScanResult, serverName?: string): string;
+/**
+ * Generate a partial config to append to existing tollgate.yaml.
+ */
+export declare function generateServerConfig(scanResult: ScanResult, serverName?: string): string;
+//# sourceMappingURL=scanner.d.ts.map

package/dist/scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.d.ts","sourceRoot":"","sources":["../src/scanner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAM/D;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,aAAa,GAAG,WAAW,CAAC;AAEpF;;GAEG;AACH,MAAM,WAAW,aAAa;IAC1B,IAAI,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,YAAY,CAAC;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IACjD,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,iBAAiB,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;IACzD,mBAAmB,CAAC,EAAE,KAAK,GAAG,YAAY,GAAG,OAAO,GAAG,MAAM,CAAC;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,IAAI,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,WAAW,EAAE,aAAa,CAAC;IAC3B,OAAO,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;KACrB,CAAC;CACL;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC3B,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,4DAA4D;IAC5D,MAAM,CAAC,EAAE,OAAO,CAAC;CACpB;AAyDD;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,YAAY,CAgJpD;AAsBD;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC5B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,UAAU,CAAC,CA+CrB;AAMD;;GAEG;AACH,wBAAgB,cAAc,CAC1B,UAAU,EAAE,UAAU,EACtB,UAAU,GAAE,MAAyB,GACtC,MAAM,CA+FR;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAChC,UAAU,EAAE,UAAU,EACtB,UAAU,GAAE,MAAyB,GACtC,MAAM,CAUR"}