@guardbee/mcp-security-proxy 0.1.0

package/dist/audit/logger.d.ts

@@ -0,0 +1,9 @@
+import type { AuditEvent, ProxyConfig } from "../types.js";
+export declare class AuditLogger {
+    private config;
+    private stream;
+    constructor(config: NonNullable<ProxyConfig["audit"]>);
+    log(event: AuditEvent): void;
+    close(): void;
+}
+//# sourceMappingURL=logger.d.ts.map

package/dist/audit/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/audit/logger.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE3D,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAoC;IAClD,OAAO,CAAC,MAAM,CAA+B;IAE7C,YAAY,MAAM,EAAE,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAKpD;IAED,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAQ3B;IAED,KAAK,IAAI,IAAI,CAEZ;CACF"}

package/dist/audit/logger.js

@@ -0,0 +1,32 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditLogger = void 0;
+const fs_1 = __importDefault(require("fs"));
+class AuditLogger {
+    constructor(config) {
+        this.stream = null;
+        this.config = config;
+        if (config.sink === "file" && config.filePath) {
+            this.stream = fs_1.default.createWriteStream(config.filePath, { flags: "a" });
+        }
+    }
+    log(event) {
+        if (!this.config.enabled)
+            return;
+        const line = JSON.stringify(event);
+        if (this.config.sink === "file" && this.stream) {
+            this.stream.write(line + "\n");
+        }
+        else {
+            process.stderr.write("[guardbee-proxy] " + line + "\n");
+        }
+    }
+    close() {
+        this.stream?.end();
+    }
+}
+exports.AuditLogger = AuditLogger;
+//# sourceMappingURL=logger.js.map

package/dist/audit/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/audit/logger.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AAGpB;IAIE,YAAY,MAAyC;QAF7C,WAAM,GAA0B,IAAI,CAAC;QAG3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,GAAG,YAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,GAAG,CAAC,KAAiB;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const config_js_1 = require("./config.js");
+const proxy_js_1 = require("./proxy.js");
+async function main() {
+    const config = (0, config_js_1.loadProxyConfig)();
+    await (0, proxy_js_1.startProxy)(config);
+}
+main().catch((err) => {
+    process.stderr.write(`[guardbee-proxy] Fatal error: ${err instanceof Error ? err.message : String(err)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;AAAA,2CAA8C;AAC9C,yCAAwC;AAExC,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,IAAA,2BAAe,GAAE,CAAC;IACjC,MAAM,IAAA,qBAAU,EAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACtF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,3 @@
+import type { ProxyConfig } from "./types.js";
+export declare function loadProxyConfig(): ProxyConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAmB,MAAM,YAAY,CAAC;AA0B/D,wBAAgB,eAAe,IAAI,WAAW,CAuC7C"}

package/dist/config.js

@@ -0,0 +1,67 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadProxyConfig = loadProxyConfig;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+function parseServerFromEnv() {
+    const cmd = process.env["PROXY_COMMAND"];
+    if (!cmd)
+        return null;
+    const args = process.env["PROXY_ARGS"]?.split(" ").filter(Boolean) ?? [];
+    return { command: cmd, args };
+}
+function parseServerFromArgs(argv) {
+    // guardbee-proxy -- npx @some/mcp-server --flag value
+    const sep = argv.indexOf("--");
+    if (sep === -1 || sep === argv.length - 1)
+        return null;
+    const rest = argv.slice(sep + 1);
+    return { command: rest[0], args: rest.slice(1) };
+}
+function parseConfigFile(filePath) {
+    try {
+        const raw = fs_1.default.readFileSync(filePath, "utf8");
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+function loadProxyConfig() {
+    // 1. Config file: GUARDBEE_PROXY_CONFIG env or ./guardbee-proxy.json
+    const configPath = process.env["GUARDBEE_PROXY_CONFIG"] ??
+        path_1.default.join(process.cwd(), "guardbee-proxy.json");
+    const fileConfig = parseConfigFile(configPath);
+    if (fileConfig)
+        return fileConfig;
+    // 2. CLI args: guardbee-proxy -- <command> [args]
+    const fromArgs = parseServerFromArgs(process.argv);
+    if (fromArgs) {
+        return {
+            server: fromArgs,
+            audit: { enabled: true, sink: "console" },
+            interceptors: {
+                promptInjection: { enabled: true, action: "block" },
+                piiMasking: { enabled: true },
+            },
+        };
+    }
+    // 3. Env vars
+    const fromEnv = parseServerFromEnv();
+    if (fromEnv) {
+        return {
+            server: fromEnv,
+            audit: { enabled: true, sink: "console" },
+            interceptors: {
+                promptInjection: { enabled: true, action: "block" },
+                piiMasking: { enabled: true },
+            },
+        };
+    }
+    throw new Error("No proxy target configured. Use: guardbee-proxy -- <command> [args]\n" +
+        "Or create a guardbee-proxy.json config file.");
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,gDAAwB;AAGxB,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACzE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAc;IACzC,sDAAsD;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACjC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;IACE,qEAAqE;IACrE,MAAM,UAAU,GACd,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QACpC,cAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAElD,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,kDAAkD;IAClD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;YACzC,YAAY,EAAE;gBACZ,eAAe,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;gBACnD,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;aAC9B;SACF,CAAC;IACJ,CAAC;IAED,cAAc;IACd,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO;YACL,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE;YACzC,YAAY,EAAE;gBACZ,eAAe,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;gBACnD,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;aAC9B;SACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,KAAK,CACb,uEAAuE;QACrE,8CAA8C,CACjD,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { startProxy } from "./proxy.js";
+export { loadProxyConfig } from "./config.js";
+export { scanForPromptInjection } from "./interceptors/prompt-injection.js";
+export { maskPiiInValue, maskPiiInText } from "./interceptors/pii-masker.js";
+export { AuditLogger } from "./audit/logger.js";
+export type { ProxyConfig, McpServerConfig, InterceptResult, AuditEvent } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditLogger = exports.maskPiiInText = exports.maskPiiInValue = exports.scanForPromptInjection = exports.loadProxyConfig = exports.startProxy = void 0;
+var proxy_js_1 = require("./proxy.js");
+Object.defineProperty(exports, "startProxy", { enumerable: true, get: function () { return proxy_js_1.startProxy; } });
+var config_js_1 = require("./config.js");
+Object.defineProperty(exports, "loadProxyConfig", { enumerable: true, get: function () { return config_js_1.loadProxyConfig; } });
+var prompt_injection_js_1 = require("./interceptors/prompt-injection.js");
+Object.defineProperty(exports, "scanForPromptInjection", { enumerable: true, get: function () { return prompt_injection_js_1.scanForPromptInjection; } });
+var pii_masker_js_1 = require("./interceptors/pii-masker.js");
+Object.defineProperty(exports, "maskPiiInValue", { enumerable: true, get: function () { return pii_masker_js_1.maskPiiInValue; } });
+Object.defineProperty(exports, "maskPiiInText", { enumerable: true, get: function () { return pii_masker_js_1.maskPiiInText; } });
+var logger_js_1 = require("./audit/logger.js");
+Object.defineProperty(exports, "AuditLogger", { enumerable: true, get: function () { return logger_js_1.AuditLogger; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,uCAAwC;AAA/B,sGAAA,UAAU,OAAA;AACnB,yCAA8C;AAArC,4GAAA,eAAe,OAAA;AACxB,0EAA4E;AAAnE,6HAAA,sBAAsB,OAAA;AAC/B,8DAA6E;AAApE,+GAAA,cAAc,OAAA;AAAE,8GAAA,aAAa,OAAA;AACtC,+CAAgD;AAAvC,wGAAA,WAAW,OAAA"}

package/dist/interceptors/pii-masker.d.ts

@@ -0,0 +1,3 @@
+export declare function maskPiiInText(text: string): string;
+export declare function maskPiiInValue(value: unknown): unknown;
+//# sourceMappingURL=pii-masker.d.ts.map

package/dist/interceptors/pii-masker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-masker.d.ts","sourceRoot":"","sources":["../../src/interceptors/pii-masker.ts"],"names":[],"mappings":"AAuCA,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAUlD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAetD"}

package/dist/interceptors/pii-masker.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.maskPiiInText = maskPiiInText;
+exports.maskPiiInValue = maskPiiInValue;
+// PII patterns for response masking
+const PII_PATTERNS = [
+    {
+        name: "tc_kimlik",
+        pattern: /\b[1-9]\d{10}\b/g,
+        replacement: "[TC-KİMLİK]",
+    },
+    {
+        name: "iban",
+        pattern: /\bTR\d{2}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{2}\b/gi,
+        replacement: "TR**[IBAN]",
+    },
+    {
+        name: "credit_card",
+        pattern: /\b(?:\d{4}[\s-]?){3}\d{4}\b/g,
+        replacement: "****-****-****-[KART]",
+    },
+    {
+        name: "email",
+        pattern: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Z|a-z]{2,}\b/g,
+        replacement: "***@[EMAIL]",
+    },
+    {
+        name: "phone_tr",
+        pattern: /\b(?:\+90|0090|0)?[\s-]?(?:\d{3})[\s-]?\d{3}[\s-]?\d{2}[\s-]?\d{2}\b/g,
+        replacement: "+90-***-***-**[TELEFON]",
+    },
+    {
+        name: "api_key",
+        pattern: /\b(?:sk|pk|api|key|token|secret)[-_]?[A-Za-z0-9]{16,}\b/gi,
+        replacement: "[API-KEY]",
+    },
+    {
+        name: "jwt",
+        pattern: /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g,
+        replacement: "[JWT-TOKEN]",
+    },
+];
+function maskPiiInText(text) {
+    let result = text;
+    for (const { pattern, replacement } of PII_PATTERNS) {
+        if (typeof replacement === "string") {
+            result = result.replace(pattern, replacement);
+        }
+        else {
+            result = result.replace(pattern, replacement);
+        }
+    }
+    return result;
+}
+function maskPiiInValue(value) {
+    if (typeof value === "string") {
+        return maskPiiInText(value);
+    }
+    if (Array.isArray(value)) {
+        return value.map(maskPiiInValue);
+    }
+    if (typeof value === "object" && value !== null) {
+        const result = {};
+        for (const [k, v] of Object.entries(value)) {
+            result[k] = maskPiiInValue(v);
+        }
+        return result;
+    }
+    return value;
+}
+//# sourceMappingURL=pii-masker.js.map

package/dist/interceptors/pii-masker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-masker.js","sourceRoot":"","sources":["../../src/interceptors/pii-masker.ts"],"names":[],"mappings":";;;;AAAA,oCAAoC;AACpC,MAAM,YAAY,GAA6D;IAC7E;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,aAAa;KAC3B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,iFAAiF;QAC1F,WAAW,EAAE,YAAY;KAC1B;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,sDAAsD;QAC/D,WAAW,EAAE,aAAa;KAC3B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,uEAAuE;QAChF,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,2DAA2D;QACpE,WAAW,EAAE,WAAW;KACzB;IACD;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,wDAAwD;QACjE,WAAW,EAAE,aAAa;KAC3B;CACF,CAAC;AAEF,uBAA8B,IAAY;IACxC,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,YAAY,EAAE,CAAC;QACpD,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wBAA+B,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/interceptors/prompt-injection.d.ts

@@ -0,0 +1,3 @@
+import type { InterceptResult } from "../types.js";
+export declare function scanForPromptInjection(input: unknown): InterceptResult;
+//# sourceMappingURL=prompt-injection.d.ts.map

package/dist/interceptors/prompt-injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-injection.d.ts","sourceRoot":"","sources":["../../src/interceptors/prompt-injection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA8BnD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAatE"}

package/dist/interceptors/prompt-injection.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scanForPromptInjection = scanForPromptInjection;
+// Common prompt injection patterns
+const INJECTION_PATTERNS = [
+    /ignore\s+(all\s+)?(previous|prior|above)\s+instructions?/i,
+    /disregard\s+(all\s+)?(previous|prior|above)\s+instructions?/i,
+    /forget\s+(all\s+)?(previous|prior|above)\s+instructions?/i,
+    /you\s+are\s+now\s+(a\s+)?(?!an?\s+AI|a\s+language)/i,
+    /act\s+as\s+(if\s+you\s+are\s+)?(?!an?\s+AI|a\s+language)/i,
+    /pretend\s+(you\s+are|to\s+be)\s+(?!an?\s+AI|a\s+language)/i,
+    /jailbreak/i,
+    /DAN\s+mode/i,
+    /developer\s+mode/i,
+    /system\s+prompt\s*:/i,
+    /<\s*system\s*>/i,
+    /\[SYSTEM\]/i,
+    /bypass\s+(safety|filter|restriction|policy)/i,
+    /override\s+(safety|filter|restriction|policy)/i,
+    /reveal\s+(your\s+)?(system\s+prompt|instructions|prompt)/i,
+    /print\s+(your\s+)?(system\s+prompt|instructions)/i,
+];
+function flattenValue(value) {
+    if (typeof value === "string")
+        return value;
+    if (typeof value === "object" && value !== null) {
+        return JSON.stringify(value);
+    }
+    return String(value ?? "");
+}
+function scanForPromptInjection(input) {
+    const text = flattenValue(input);
+    for (const pattern of INJECTION_PATTERNS) {
+        if (pattern.test(text)) {
+            return {
+                action: "block",
+                reason: `Prompt injection pattern detected: ${pattern.toString()}`,
+            };
+        }
+    }
+    return { action: "allow" };
+}
+//# sourceMappingURL=prompt-injection.js.map

package/dist/interceptors/prompt-injection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-injection.js","sourceRoot":"","sources":["../../src/interceptors/prompt-injection.ts"],"names":[],"mappings":";;;AAEA,mCAAmC;AACnC,MAAM,kBAAkB,GAAa;IACnC,2DAA2D;IAC3D,8DAA8D;IAC9D,2DAA2D;IAC3D,qDAAqD;IACrD,2DAA2D;IAC3D,4DAA4D;IAC5D,YAAY;IACZ,aAAa;IACb,mBAAmB;IACnB,sBAAsB;IACtB,iBAAiB;IACjB,aAAa;IACb,8CAA8C;IAC9C,gDAAgD;IAChD,2DAA2D;IAC3D,mDAAmD;CACpD,CAAC;AAEF,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,gCAAuC,KAAc;IACnD,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEjC,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,sCAAsC,OAAO,CAAC,QAAQ,EAAE,EAAE;aACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC"}

package/dist/proxy.d.ts

@@ -0,0 +1,3 @@
+import type { ProxyConfig } from "./types.js";
+export declare function startProxy(config: ProxyConfig): Promise<void>;
+//# sourceMappingURL=proxy.d.ts.map

package/dist/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAK9C,wBAAsB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA8InE"}

package/dist/proxy.js

@@ -0,0 +1,128 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startProxy = startProxy;
+const index_js_1 = require("@modelcontextprotocol/sdk/client/index.js");
+const stdio_js_1 = require("@modelcontextprotocol/sdk/client/stdio.js");
+const index_js_2 = require("@modelcontextprotocol/sdk/server/index.js");
+const stdio_js_2 = require("@modelcontextprotocol/sdk/server/stdio.js");
+const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
+const prompt_injection_js_1 = require("./interceptors/prompt-injection.js");
+const pii_masker_js_1 = require("./interceptors/pii-masker.js");
+const logger_js_1 = require("./audit/logger.js");
+async function startProxy(config) {
+    const audit = new logger_js_1.AuditLogger(config.audit ?? { enabled: true, sink: "console" });
+    // --- Connect to target MCP server (downstream) ---
+    const downstream = new index_js_1.Client({ name: "guardbee-proxy-client", version: "0.1.0" }, { capabilities: {} });
+    const transport = new stdio_js_1.StdioClientTransport({
+        command: config.server.command,
+        args: config.server.args ?? [],
+        env: { ...process.env, ...(config.server.env ?? {}) },
+    });
+    await downstream.connect(transport);
+    const serverInfo = downstream.getServerVersion();
+    // --- Start proxy MCP server (upstream, for Claude) ---
+    const server = new index_js_2.Server({ name: "guardbee-security-proxy", version: "0.1.0" }, {
+        capabilities: {
+            tools: {},
+            resources: {},
+            prompts: {},
+        },
+    });
+    // List tools → pass through from downstream
+    server.setRequestHandler(types_js_1.ListToolsRequestSchema, async () => {
+        const result = await downstream.listTools();
+        return result;
+    });
+    // Call tool → intercept, scan, forward, mask response
+    server.setRequestHandler(types_js_1.CallToolRequestSchema, async (req) => {
+        const toolName = req.params.name;
+        const toolInput = req.params.arguments ?? {};
+        // 1. Prompt injection scan on input
+        if (config.interceptors?.promptInjection?.enabled !== false) {
+            const scan = (0, prompt_injection_js_1.scanForPromptInjection)(toolInput);
+            if (scan.action === "block") {
+                audit.log({
+                    ts: new Date().toISOString(),
+                    type: "blocked",
+                    tool: toolName,
+                    server: serverInfo?.name,
+                    input: toolInput,
+                    reason: scan.reason,
+                });
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: `[GuardBee Security Proxy] Tool call blocked: ${scan.reason}`,
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+            if (scan.action === "warn") {
+                audit.log({
+                    ts: new Date().toISOString(),
+                    type: "warn",
+                    tool: toolName,
+                    server: serverInfo?.name,
+                    input: toolInput,
+                    reason: scan.reason,
+                });
+            }
+        }
+        // 2. Log the call
+        audit.log({
+            ts: new Date().toISOString(),
+            type: "tool_call",
+            tool: toolName,
+            server: serverInfo?.name,
+            input: toolInput,
+        });
+        // 3. Forward to downstream
+        const result = await downstream.callTool({
+            name: toolName,
+            arguments: toolInput,
+        });
+        // 4. PII masking on response
+        let content = result.content;
+        if (config.interceptors?.piiMasking?.enabled !== false) {
+            content = (0, pii_masker_js_1.maskPiiInValue)(content);
+        }
+        // 5. Log response
+        audit.log({
+            ts: new Date().toISOString(),
+            type: "tool_response",
+            tool: toolName,
+            server: serverInfo?.name,
+            output: content,
+        });
+        return { ...result, content };
+    });
+    // Resources pass-through
+    server.setRequestHandler(types_js_1.ListResourcesRequestSchema, async () => {
+        return await downstream.listResources();
+    });
+    server.setRequestHandler(types_js_1.ReadResourceRequestSchema, async (req) => {
+        return await downstream.readResource({ uri: req.params.uri });
+    });
+    // Prompts pass-through
+    server.setRequestHandler(types_js_1.ListPromptsRequestSchema, async () => {
+        return await downstream.listPrompts();
+    });
+    server.setRequestHandler(types_js_1.GetPromptRequestSchema, async (req) => {
+        return await downstream.getPrompt({
+            name: req.params.name,
+            arguments: req.params.arguments,
+        });
+    });
+    // Start upstream server
+    const upstreamTransport = new stdio_js_2.StdioServerTransport();
+    await server.connect(upstreamTransport);
+    process.on("SIGINT", async () => {
+        audit.close();
+        await server.close();
+        await downstream.close();
+        process.exit(0);
+    });
+}
+//# sourceMappingURL=proxy.js.map

package/dist/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":";;;AAAA,wEAAmE;AACnE,wEAAiF;AACjF,wEAAmE;AACnE,wEAAiF;AACjF,iEAO4C;AAE5C,4EAA4E;AAC5E,gEAA8D;AAC9D,iDAAgD;AAEzC,KAAK,qBAAqB,MAAmB;IAClD,MAAM,KAAK,GAAG,IAAI,uBAAW,CAC3B,MAAM,CAAC,KAAK,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CACnD,CAAC;IAEF,oDAAoD;IACpD,MAAM,UAAU,GAAG,IAAI,iBAAM,CAC3B,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,OAAO,EAAE,EACnD,EAAE,YAAY,EAAE,EAAE,EAAE,CACrB,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,+BAAoB,CAAC;QACzC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;QAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE;QAC9B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAA4B;KAChF,CAAC,CAAC;IAEH,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEpC,MAAM,UAAU,GAAG,UAAU,CAAC,gBAAgB,EAAE,CAAC;IAEjD,wDAAwD;IACxD,MAAM,MAAM,GAAG,IAAI,iBAAM,CACvB,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,OAAO,EAAE,EACrD;QACE,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE;SACZ;KACF,CACF,CAAC;IAEF,4CAA4C;IAC5C,MAAM,CAAC,iBAAiB,CAAC,iCAAsB,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,sDAAsD;IACtD,MAAM,CAAC,iBAAiB,CAAC,gCAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5D,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;QAE7C,oCAAoC;QACpC,IAAI,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,IAAA,4CAAsB,EAAC,SAAS,CAAC,CAAC;YAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC5B,KAAK,CAAC,GAAG,CAAC;oBACR,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,UAAU,EAAE,IAAI;oBACxB,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;gBACH,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,gDAAgD,IAAI,CAAC,MAAM,EAAE;yBACpE;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,KAAK,CAAC,GAAG,CAAC;oBACR,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,UAAU,EAAE,IAAI;oBACxB,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,KAAK,CAAC,GAAG,CAAC;YACR,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,UAAU,EAAE,IAAI;YACxB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QAEH,2BAA2B;QAC3B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC;YACvC,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC;QAEH,6BAA6B;QAC7B,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC7B,IAAI,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YACvD,OAAO,GAAI,IAAA,8BAAc,EAAC,OAAO,CAAoB,CAAC;QACxD,CAAC;QAED,kBAAkB;QAClB,KAAK,CAAC,GAAG,CAAC;YACR,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,UAAU,EAAE,IAAI;YACxB,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,MAAM,CAAC,iBAAiB,CAAC,qCAA0B,EAAE,KAAK,IAAI,EAAE;QAC9D,OAAO,MAAM,UAAU,CAAC,aAAa,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,oCAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAChE,OAAO,MAAM,UAAU,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,uBAAuB;IACvB,MAAM,CAAC,iBAAiB,CAAC,mCAAwB,EAAE,KAAK,IAAI,EAAE;QAC5D,OAAO,MAAM,UAAU,CAAC,WAAW,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,iCAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7D,OAAO,MAAM,UAAU,CAAC,SAAS,CAAC;YAChC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;YACrB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,wBAAwB;IACxB,MAAM,iBAAiB,GAAG,IAAI,+BAAoB,EAAE,CAAC;IACrD,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAExC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC9B,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,42 @@
+export type McpServerConfig = {
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+};
+export type ProxyConfig = {
+    server: McpServerConfig;
+    audit?: {
+        enabled: boolean;
+        sink: "console" | "file";
+        filePath?: string;
+    };
+    interceptors?: {
+        promptInjection?: {
+            enabled: boolean;
+            action: "block" | "warn";
+        };
+        piiMasking?: {
+            enabled: boolean;
+            patterns?: string[];
+        };
+    };
+};
+export type InterceptResult = {
+    action: "allow";
+} | {
+    action: "block";
+    reason: string;
+} | {
+    action: "warn";
+    reason: string;
+};
+export type AuditEvent = {
+    ts: string;
+    type: "tool_call" | "tool_response" | "blocked" | "warn";
+    tool?: string;
+    server?: string;
+    input?: unknown;
+    output?: unknown;
+    reason?: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,OAAO,CAAC;QACjB,IAAI,EAAE,SAAS,GAAG,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,YAAY,CAAC,EAAE;QACb,eAAe,CAAC,EAAE;YAChB,OAAO,EAAE,OAAO,CAAC;YACjB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;SAC1B,CAAC;QACF,UAAU,CAAC,EAAE;YACX,OAAO,EAAE,OAAO,CAAC;YACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;SACrB,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,WAAW,GAAG,eAAe,GAAG,SAAS,GAAG,MAAM,CAAC;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC"}

package/dist/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@guardbee/mcp-security-proxy",
+  "version": "0.1.0",
+  "description": "Security proxy for MCP servers — intercepts tool calls, detects prompt injection, masks PII, and writes audit logs",
+  "author": "GuardBee <hello@guardbee.ai>",
+  "license": "MIT",
+  "homepage": "https://github.com/GuardBee/guardbee-mcp-security-proxy#readme",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/GuardBee/guardbee-mcp-security-proxy.git"
+  },
+  "bugs": {
+    "url": "https://github.com/GuardBee/guardbee-mcp-security-proxy/issues"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "security",
+    "proxy",
+    "prompt-injection",
+    "pii",
+    "audit",
+    "guardbee",
+    "llm",
+    "claude"
+  ],
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "guardbee-proxy": "dist/cli.js"
+  },
+  "files": ["dist", "README.md"],
+  "engines": { "node": ">=18" },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/cli.ts",
+    "start": "node dist/cli.js",
+    "type-check": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "prepublishOnly": "npm test && npm run build"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.30.0",
+    "zod": "^4.5.4"
+  },
+  "devDependencies": {
+    "@types/node": "^26.5.0",
+    "tsx": "^4.23.13",
+    "typescript": "^7.0.2",
+    "vitest": "^3.2.7"
+  }
+}