@elsium-ai/mcp 0.9.1 → 0.10.0

package/dist/index.d.ts

@@ -3,4 +3,6 @@ export type { MCPClient, MCPClientConfig, MCPClientStdioConfig, MCPClientHttpCon
 export { createMCPServer, createMCPHttpHandler } from './server';
 export type { MCPServer, MCPServerConfig, MCPHttpHandlerConfig, MCPHttpHandler, MCPResourceHandler, MCPPromptHandler, } from './server';
 export type { JsonRpcRequest, JsonRpcResponse, MCPTransport, MCPResource, MCPResourceContent, MCPPrompt, MCPPromptArgument, MCPPromptMessage, } from './types';
+export { createTrustedMCPClient } from './trust';
+export type { MCPTrustConfig, AllowedServer, MCPAuditLogger, MCPAuditEvent, MCPToolManifest, MCPToolManifestEntry, TrustedMCPClient, } from './trust';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAC1C,YAAY,EACX,SAAS,EACT,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,GACX,MAAM,UAAU,CAAA;AAGjB,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAChE,YAAY,EACX,SAAS,EACT,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,kBAAkB,EAClB,gBAAgB,GAChB,MAAM,UAAU,CAAA;AAGjB,YAAY,EACX,cAAc,EACd,eAAe,EACf,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,SAAS,EACT,iBAAiB,EACjB,gBAAgB,GAChB,MAAM,SAAS,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAC1C,YAAY,EACX,SAAS,EACT,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,GACX,MAAM,UAAU,CAAA;AAGjB,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAChE,YAAY,EACX,SAAS,EACT,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,kBAAkB,EAClB,gBAAgB,GAChB,MAAM,UAAU,CAAA;AAGjB,YAAY,EACX,cAAc,EACd,eAAe,EACf,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,SAAS,EACT,iBAAiB,EACjB,gBAAgB,GAChB,MAAM,SAAS,CAAA;AAGhB,OAAO,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAA;AAChD,YAAY,EACX,cAAc,EACd,aAAa,EACb,cAAc,EACd,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,gBAAgB,GAChB,MAAM,SAAS,CAAA"}

package/dist/index.js

@@ -1012,7 +1012,177 @@ function createMCPHttpHandler(config) {
     });
   };
 }
+// src/trust.ts
+import { createHash } from "node:crypto";
+function computeSchemaHash(schema) {
+  return createHash("sha256").update(JSON.stringify(schema)).digest("hex");
+}
+function computeManifestHash(tools) {
+  const content = tools.map((t) => `${t.name}:${t.inputSchemaHash}`).join("|");
+  return createHash("sha256").update(content).digest("hex");
+}
+function isServerAllowed(config, trust) {
+  if (!trust.allowedServers?.length)
+    return true;
+  return trust.allowedServers.some((s) => {
+    if (s.name !== config.name)
+      return false;
+    if (s.transport !== config.transport)
+      return false;
+    if (config.transport === "http" && s.urlPattern) {
+      const pattern = new RegExp(s.urlPattern);
+      if (!pattern.test(config.url))
+        return false;
+    }
+    if (config.transport === "stdio" && s.commandHash) {
+      const cmdHash = createHash("sha256").update(`${config.command}:${(config.args ?? []).join(":")}`).digest("hex");
+      if (cmdHash !== s.commandHash)
+        return false;
+    }
+    return true;
+  });
+}
+function isToolAllowed(toolName, serverName, trust) {
+  if (!trust.allowedServers?.length)
+    return true;
+  const server = trust.allowedServers.find((s) => s.name === serverName);
+  if (!server)
+    return false;
+  if (server.deniedTools?.includes(toolName))
+    return false;
+  if (server.allowedTools && !server.allowedTools.includes(toolName))
+    return false;
+  return true;
+}
+var MAX_TOOL_OUTPUT_SIZE = 1024 * 1024;
+function createTrustedMCPClient(config, trustConfig) {
+  if (!isServerAllowed(config, trustConfig)) {
+    throw new ElsiumError({
+      code: "AUTH_ERROR",
+      message: `MCP server "${config.name}" is not in the allowed servers list`,
+      retryable: false
+    });
+  }
+  const inner = createMCPClient(config);
+  let currentManifest = null;
+  const maxOutputSize = trustConfig.maxToolOutputSize ?? MAX_TOOL_OUTPUT_SIZE;
+  function audit(event) {
+    trustConfig.auditLog?.log({ ...event, timestamp: Date.now() });
+  }
+  return {
+    get connected() {
+      return inner.connected;
+    },
+    get manifest() {
+      return currentManifest;
+    },
+    async connect() {
+      audit({ type: "connection", serverName: config.name, data: { action: "connect" } });
+      await inner.connect();
+    },
+    async disconnect() {
+      audit({ type: "connection", serverName: config.name, data: { action: "disconnect" } });
+      await inner.disconnect();
+    },
+    async listTools() {
+      const tools = await inner.listTools();
+      const filteredTools = tools.filter((t) => isToolAllowed(t.name, config.name, trustConfig));
+      audit({
+        type: "tool_list",
+        serverName: config.name,
+        data: {
+          totalTools: tools.length,
+          allowedTools: filteredTools.length,
+          toolNames: filteredTools.map((t) => t.name)
+        }
+      });
+      return filteredTools;
+    },
+    async callTool(name, args) {
+      if (!isToolAllowed(name, config.name, trustConfig)) {
+        audit({
+          type: "security_violation",
+          serverName: config.name,
+          data: { tool: name, reason: "Tool not allowed" }
+        });
+        throw new ElsiumError({
+          code: "AUTH_ERROR",
+          message: `Tool "${name}" is not allowed on server "${config.name}"`,
+          retryable: false
+        });
+      }
+      audit({
+        type: "tool_call",
+        serverName: config.name,
+        data: { tool: name, argumentKeys: Object.keys(args) }
+      });
+      const result = await inner.callTool(name, args);
+      const resultStr = typeof result === "string" ? result : JSON.stringify(result);
+      if (resultStr.length > maxOutputSize) {
+        audit({
+          type: "security_violation",
+          serverName: config.name,
+          data: { tool: name, reason: "Output exceeds size limit", size: resultStr.length }
+        });
+        throw new ElsiumError({
+          code: "VALIDATION_ERROR",
+          message: `Tool "${name}" output exceeds maximum size (${resultStr.length} > ${maxOutputSize})`,
+          retryable: false
+        });
+      }
+      audit({
+        type: "tool_result",
+        serverName: config.name,
+        data: { tool: name, outputSize: resultStr.length }
+      });
+      return result;
+    },
+    listResources: inner.listResources.bind(inner),
+    readResource: inner.readResource.bind(inner),
+    listPrompts: inner.listPrompts.bind(inner),
+    getPrompt: inner.getPrompt.bind(inner),
+    toElsiumTools: inner.toElsiumTools.bind(inner),
+    async generateManifest() {
+      const tools = await inner.listTools();
+      const entries = tools.map((t) => ({
+        name: t.name,
+        description: t.description,
+        inputSchemaHash: computeSchemaHash(t.inputSchema)
+      }));
+      currentManifest = {
+        serverName: config.name,
+        tools: entries,
+        generatedAt: Date.now(),
+        hash: computeManifestHash(entries)
+      };
+      return currentManifest;
+    },
+    async verifyManifest(manifest) {
+      const tools = await inner.listTools();
+      const currentEntries = tools.map((t) => ({
+        name: t.name,
+        description: t.description,
+        inputSchemaHash: computeSchemaHash(t.inputSchema)
+      }));
+      const currentHash = computeManifestHash(currentEntries);
+      if (currentHash !== manifest.hash) {
+        audit({
+          type: "security_violation",
+          serverName: config.name,
+          data: {
+            reason: "Manifest mismatch",
+            expectedHash: manifest.hash,
+            actualHash: currentHash
+          }
+        });
+        return false;
+      }
+      return true;
+    }
+  };
+}
 export {
+  createTrustedMCPClient,
   createMCPServer,
   createMCPHttpHandler,
   createMCPClient

package/dist/trust.d.ts

@@ -0,0 +1,42 @@
+import type { MCPClient, MCPClientConfig } from './client';
+export interface MCPTrustConfig {
+    allowedServers?: AllowedServer[];
+    validateToolOutputs?: boolean;
+    auditLog?: MCPAuditLogger;
+    maxToolOutputSize?: number;
+}
+export interface AllowedServer {
+    name: string;
+    transport: 'stdio' | 'http';
+    commandHash?: string;
+    urlPattern?: string;
+    allowedTools?: string[];
+    deniedTools?: string[];
+}
+export interface MCPAuditLogger {
+    log(event: MCPAuditEvent): void;
+}
+export interface MCPAuditEvent {
+    type: 'connection' | 'tool_list' | 'tool_call' | 'tool_result' | 'security_violation';
+    serverName: string;
+    timestamp: number;
+    data: Record<string, unknown>;
+}
+export interface MCPToolManifest {
+    serverName: string;
+    tools: MCPToolManifestEntry[];
+    generatedAt: number;
+    hash: string;
+}
+export interface MCPToolManifestEntry {
+    name: string;
+    description: string;
+    inputSchemaHash: string;
+}
+export interface TrustedMCPClient extends MCPClient {
+    readonly manifest: MCPToolManifest | null;
+    generateManifest(): Promise<MCPToolManifest>;
+    verifyManifest(manifest: MCPToolManifest): Promise<boolean>;
+}
+export declare function createTrustedMCPClient(config: MCPClientConfig, trustConfig: MCPTrustConfig): TrustedMCPClient;
+//# sourceMappingURL=trust.d.ts.map

package/dist/trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../src/trust.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAe,MAAM,UAAU,CAAA;AAGvE,MAAM,WAAW,cAAc;IAC9B,cAAc,CAAC,EAAE,aAAa,EAAE,CAAA;IAChC,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,OAAO,GAAG,MAAM,CAAA;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,cAAc;IAC9B,GAAG,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAAA;CAC/B;AAED,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,aAAa,GAAG,oBAAoB,CAAA;IACrF,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC7B;AAED,MAAM,WAAW,eAAe;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,oBAAoB,EAAE,CAAA;IAC7B,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,gBAAiB,SAAQ,SAAS;IAClD,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAA;IACzC,gBAAgB,IAAI,OAAO,CAAC,eAAe,CAAC,CAAA;IAC5C,cAAc,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC3D;AA8CD,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,eAAe,EACvB,WAAW,EAAE,cAAc,GACzB,gBAAgB,CAoJlB"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@elsium-ai/mcp",
-	"version": "0.9.1",
+	"version": "0.10.0",
 	"description": "Model Context Protocol (MCP) support for ElsiumAI — bidirectional bridge",
 	"license": "MIT",
 	"author": "Eric Utrera <ebutrera9103@gmail.com>",
@@ -26,8 +26,8 @@
 		"dev": "bun --watch src/index.ts"
 	},
 	"dependencies": {
-		"@elsium-ai/core": "^0.9.1",
-		"@elsium-ai/tools": "^0.9.1"
+		"@elsium-ai/core": "^0.10.0",
+		"@elsium-ai/tools": "^0.10.0"
 	},
 	"devDependencies": {
 		"typescript": "^5.7.0"