@guardbee/mcp-security-proxy 0.3.1 → 1.0.0

package/dist/interceptors/prompt-injection.js

@@ -1,43 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.scanForPromptInjection = scanForPromptInjection;
-// Common prompt injection patterns
-const INJECTION_PATTERNS = [
-    /ignore\s+(all\s+)?(previous|prior|above)\s+instructions?/i,
-    /disregard\s+(all\s+)?(previous|prior|above)\s+instructions?/i,
-    /forget\s+(all\s+)?(previous|prior|above)\s+instructions?/i,
-    /you\s+are\s+now\s+(a\s+)?(?!an?\s+AI|a\s+language)/i,
-    /act\s+as\s+(if\s+you\s+are\s+)?(?!an?\s+AI|a\s+language)/i,
-    /pretend\s+(you\s+are|to\s+be)\s+(?!an?\s+AI|a\s+language)/i,
-    /jailbreak/i,
-    /DAN\s+mode/i,
-    /developer\s+mode/i,
-    /system\s+prompt\s*:/i,
-    /<\s*system\s*>/i,
-    /\[SYSTEM\]/i,
-    /bypass\s+(safety|filter|restriction|policy)/i,
-    /override\s+(safety|filter|restriction|policy)/i,
-    /reveal\s+(your\s+)?(system\s+prompt|instructions|prompt)/i,
-    /print\s+(your\s+)?(system\s+prompt|instructions)/i,
-];
-function flattenValue(value) {
-    if (typeof value === "string")
-        return value;
-    if (typeof value === "object" && value !== null) {
-        return JSON.stringify(value);
-    }
-    return String(value ?? "");
-}
-function scanForPromptInjection(input, mode = "block") {
-    const text = flattenValue(input);
-    for (const pattern of INJECTION_PATTERNS) {
-        if (pattern.test(text)) {
-            return {
-                action: mode,
-                reason: `Prompt injection pattern detected: ${pattern.toString()}`,
-            };
-        }
-    }
-    return { action: "allow" };
-}
+exports.scanForPromptInjection = void 0;
+// Injection patterns live in @guardbee/guard-core, shared with the gateway.
+var guard_core_1 = require("@guardbee/guard-core");
+Object.defineProperty(exports, "scanForPromptInjection", { enumerable: true, get: function () { return guard_core_1.scanForPromptInjection; } });
 //# sourceMappingURL=prompt-injection.js.map

package/dist/interceptors/prompt-injection.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-injection.js","sourceRoot":"","sources":["../../src/interceptors/prompt-injection.ts"],"names":[],"mappings":";;AA8BA,wDAgBC;AA5CD,mCAAmC;AACnC,MAAM,kBAAkB,GAAa;IACnC,2DAA2D;IAC3D,8DAA8D;IAC9D,2DAA2D;IAC3D,qDAAqD;IACrD,2DAA2D;IAC3D,4DAA4D;IAC5D,YAAY;IACZ,aAAa;IACb,mBAAmB;IACnB,sBAAsB;IACtB,iBAAiB;IACjB,aAAa;IACb,8CAA8C;IAC9C,gDAAgD;IAChD,2DAA2D;IAC3D,mDAAmD;CACpD,CAAC;AAEF,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,SAAgB,sBAAsB,CACpC,KAAc,EACd,OAAyB,OAAO;IAEhC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEjC,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,sCAAsC,OAAO,CAAC,QAAQ,EAAE,EAAE;aACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"prompt-injection.js","sourceRoot":"","sources":["../../src/interceptors/prompt-injection.ts"],"names":[],"mappings":";;;AAAA,4EAA4E;AAC5E,mDAA8D;AAArD,oHAAA,sBAAsB,OAAA"}

package/dist/interceptors/tool-result.d.ts

@@ -1,4 +1,2 @@
-import type { InterceptResult } from "../types.js";
-/** Same patterns as request scanning, applied to a tool result the model will read. */
-export declare function scanToolResult(content: unknown, mode?: "block" | "warn"): InterceptResult;
+export { scanToolResult } from "@guardbee/guard-core";
 //# sourceMappingURL=tool-result.d.ts.map

package/dist/interceptors/tool-result.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-result.d.ts","sourceRoot":"","sources":["../../src/interceptors/tool-result.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAE,OAAO,GAAG,MAAgB,GAAG,eAAe,CAOlG"}
+{"version":3,"file":"tool-result.d.ts","sourceRoot":"","sources":["../../src/interceptors/tool-result.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/interceptors/tool-result.js

@@ -1,15 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.scanToolResult = scanToolResult;
-const prompt_injection_js_1 = require("./prompt-injection.js");
-/** Same patterns as request scanning, applied to a tool result the model will read. */
-function scanToolResult(content, mode = "block") {
-    const result = (0, prompt_injection_js_1.scanForPromptInjection)(content, mode);
-    if (result.action === "allow")
-        return result;
-    return {
-        action: result.action,
-        reason: `Indirect prompt injection in tool result (MCP06:2025): ${result.reason}`,
-    };
-}
+exports.scanToolResult = void 0;
+// Indirect injection scanning lives in @guardbee/guard-core, shared with the gateway.
+var guard_core_1 = require("@guardbee/guard-core");
+Object.defineProperty(exports, "scanToolResult", { enumerable: true, get: function () { return guard_core_1.scanToolResult; } });
 //# sourceMappingURL=tool-result.js.map

package/dist/interceptors/tool-result.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-result.js","sourceRoot":"","sources":["../../src/interceptors/tool-result.ts"],"names":[],"mappings":";;AAIA,wCAOC;AAVD,+DAA+D;AAE/D,uFAAuF;AACvF,SAAgB,cAAc,CAAC,OAAgB,EAAE,OAAyB,OAAO;IAC/E,MAAM,MAAM,GAAG,IAAA,4CAAsB,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAC7C,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,0DAA0D,MAAM,CAAC,MAAM,EAAE;KAClF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"tool-result.js","sourceRoot":"","sources":["../../src/interceptors/tool-result.ts"],"names":[],"mappings":";;;AAAA,sFAAsF;AACtF,mDAAsD;AAA7C,4GAAA,cAAc,OAAA"}

package/dist/proxy.d.ts

@@ -1,3 +1,21 @@
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import type { ProxyConfig } from "./types.js";
+import { AuditLogger } from "./audit/logger.js";
+import { type GatewayConfig } from "./gateway/config.js";
+import { Gateway } from "./gateway/gateway.js";
+import { type Upstream } from "./gateway/upstream.js";
+/** The MCP server the agent talks to; every request goes through the gateway. */
+export declare function createProxyServer(gateway: Gateway): Server;
+/**
+ * Gateway + the MCP server in front of it, with approvals asked through that
+ * server (MCP elicitation). The approver needs the server and the server needs
+ * the gateway, hence the late binding.
+ */
+export declare function createGatewayServer(upstreams: Upstream[], config: GatewayConfig, audit: AuditLogger): {
+    gateway: Gateway;
+    server: Server;
+};
+export declare function startGateway(config: GatewayConfig): Promise<void>;
+/** 0.x entry point: one server, unprefixed tool names, toxic flows only warn. */
 export declare function startProxy(config: ProxyConfig): Promise<void>;
 //# sourceMappingURL=proxy.d.ts.map

package/dist/proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAQ9C,wBAAsB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA8PnE"}
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAUnE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAoB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAwB,KAAK,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAE5E,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CA2B1D;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,QAAQ,EAAE,EACrB,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,WAAW,GACjB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAOtC;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAevE;AAED,iFAAiF;AACjF,wBAAsB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnE"}

package/dist/proxy.js

@@ -1,243 +1,65 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.createProxyServer = createProxyServer;
+exports.createGatewayServer = createGatewayServer;
+exports.startGateway = startGateway;
 exports.startProxy = startProxy;
-const index_js_1 = require("@modelcontextprotocol/sdk/client/index.js");
-const stdio_js_1 = require("@modelcontextprotocol/sdk/client/stdio.js");
-const index_js_2 = require("@modelcontextprotocol/sdk/server/index.js");
-const stdio_js_2 = require("@modelcontextprotocol/sdk/server/stdio.js");
+const index_js_1 = require("@modelcontextprotocol/sdk/server/index.js");
+const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
 const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
-const prompt_injection_js_1 = require("./interceptors/prompt-injection.js");
-const tool_result_js_1 = require("./interceptors/tool-result.js");
-const definition_drift_js_1 = require("./interceptors/definition-drift.js");
-const pii_masker_js_1 = require("./interceptors/pii-masker.js");
 const logger_js_1 = require("./audit/logger.js");
-const mcp_telemetry_1 = require("@guardbee/mcp-telemetry");
-async function startProxy(config) {
-    const audit = new logger_js_1.AuditLogger(config.audit ?? { enabled: true, sink: "console" });
-    // --- Connect to target MCP server (downstream) ---
-    const downstream = new index_js_1.Client({ name: "guardbee-proxy-client", version: "0.1.0" }, { capabilities: {} });
-    const transport = new stdio_js_1.StdioClientTransport({
-        command: config.server.command,
-        args: config.server.args ?? [],
-        env: { ...process.env, ...(config.server.env ?? {}) },
-    });
-    await downstream.connect(transport);
-    const serverInfo = downstream.getServerVersion();
-    const driftEnabled = config.interceptors?.definitionDrift?.enabled !== false;
-    const driftAction = config.interceptors?.definitionDrift?.action ?? config.interceptors?.promptInjection?.action ?? "block";
-    const resultEnabled = config.interceptors?.toolResultInjection?.enabled !== false;
-    const resultAction = config.interceptors?.toolResultInjection?.action ?? config.interceptors?.promptInjection?.action ?? "block";
-    const pin = new definition_drift_js_1.ToolDefinitionPin();
-    // --- Start proxy MCP server (upstream, for Claude) ---
-    const server = new index_js_2.Server({ name: "guardbee-security-proxy", version: "0.1.0" }, {
+const approval_js_1 = require("./gateway/approval.js");
+const config_js_1 = require("./gateway/config.js");
+const gateway_js_1 = require("./gateway/gateway.js");
+const upstream_js_1 = require("./gateway/upstream.js");
+/** The MCP server the agent talks to; every request goes through the gateway. */
+function createProxyServer(gateway) {
+    const server = new index_js_1.Server({ name: "guardbee-security-proxy", version: "1.0.0" }, {
         capabilities: {
-            tools: {},
+            tools: { listChanged: true },
             resources: {},
             prompts: {},
         },
     });
-    // List tools → pin the first list, and keep serving that pin if the server changes it.
-    server.setRequestHandler(types_js_1.ListToolsRequestSchema, async () => {
-        const result = await downstream.listTools();
-        if (!driftEnabled)
-            return result;
-        const observed = pin.observe(result.tools, driftAction);
-        for (const finding of observed.findings) {
-            audit.log({
-                ts: new Date().toISOString(),
-                type: driftAction === "block" ? "blocked" : "warn",
-                tool: finding.toolName,
-                server: serverInfo?.name,
-                reason: finding.reason,
-            });
-        }
-        return { ...result, tools: observed.tools };
-    });
-    // Call tool → intercept, scan, forward, mask response
-    server.setRequestHandler(types_js_1.CallToolRequestSchema, async (req) => {
-        const toolName = req.params.name;
-        const toolInput = req.params.arguments ?? {};
-        const started = Date.now();
-        // 1. Prompt injection scan on input
-        if (config.interceptors?.promptInjection?.enabled !== false) {
-            const mode = config.interceptors?.promptInjection?.action ?? "block";
-            const scan = (0, prompt_injection_js_1.scanForPromptInjection)(toolInput, mode);
-            if (scan.action === "block") {
-                audit.log({
-                    ts: new Date().toISOString(),
-                    type: "blocked",
-                    tool: toolName,
-                    server: serverInfo?.name,
-                    input: toolInput,
-                    reason: scan.reason,
-                });
-                void (0, mcp_telemetry_1.recordEvent)({
-                    server: "security-proxy",
-                    tool: toolName,
-                    params: toolInput,
-                    success: false,
-                    durationMs: Date.now() - started,
-                    error: `blocked: ${scan.reason}`,
-                });
-                return {
-                    content: [
-                        {
-                            type: "text",
-                            text: `[GuardBee Security Proxy] Tool call blocked: ${scan.reason}`,
-                        },
-                    ],
-                    isError: true,
-                };
-            }
-            if (scan.action === "warn") {
-                audit.log({
-                    ts: new Date().toISOString(),
-                    type: "warn",
-                    tool: toolName,
-                    server: serverInfo?.name,
-                    input: toolInput,
-                    reason: scan.reason,
-                });
-            }
-        }
-        // 2. Re-check the live tool definition against the session pin.
-        if (driftEnabled) {
-            try {
-                const listed = await downstream.listTools();
-                pin.ensurePinned(listed.tools);
-                const drift = pin.drifted(toolName, listed.tools);
-                if (drift && driftAction === "block") {
-                    audit.log({
-                        ts: new Date().toISOString(),
-                        type: "blocked",
-                        tool: toolName,
-                        server: serverInfo?.name,
-                        input: toolInput,
-                        reason: drift.reason,
-                    });
-                    return {
-                        content: [{ type: "text", text: `[GuardBee Security Proxy] Tool call blocked: ${drift.reason}` }],
-                        isError: true,
-                    };
-                }
-                if (drift) {
-                    audit.log({
-                        ts: new Date().toISOString(),
-                        type: "warn",
-                        tool: toolName,
-                        server: serverInfo?.name,
-                        input: toolInput,
-                        reason: drift.reason,
-                    });
-                }
-            }
-            catch (err) {
-                audit.log({
-                    ts: new Date().toISOString(),
-                    type: "warn",
-                    tool: toolName,
-                    server: serverInfo?.name,
-                    reason: `definition re-check failed: ${err instanceof Error ? err.message : String(err)}`,
-                });
-            }
-        }
-        // 3. Log the call
-        audit.log({
-            ts: new Date().toISOString(),
-            type: "tool_call",
-            tool: toolName,
-            server: serverInfo?.name,
-            input: toolInput,
-        });
-        // 3. Forward to downstream
-        const result = await downstream.callTool({
-            name: toolName,
-            arguments: toolInput,
-        });
-        // 4. Indirect injection in the tool result, then PII masking.
-        let content = result.content;
-        if (resultEnabled) {
-            const scan = (0, tool_result_js_1.scanToolResult)(content, resultAction);
-            if (scan.action === "block") {
-                audit.log({
-                    ts: new Date().toISOString(),
-                    type: "blocked",
-                    tool: toolName,
-                    server: serverInfo?.name,
-                    output: content,
-                    reason: scan.reason,
-                });
-                void (0, mcp_telemetry_1.recordEvent)({
-                    server: "security-proxy",
-                    tool: toolName,
-                    params: toolInput,
-                    success: false,
-                    durationMs: Date.now() - started,
-                    error: `blocked: ${scan.reason}`,
-                });
-                return {
-                    content: [{ type: "text", text: `[GuardBee Security Proxy] Tool result blocked: ${scan.reason}` }],
-                    isError: true,
-                };
-            }
-            if (scan.action === "warn") {
-                audit.log({
-                    ts: new Date().toISOString(),
-                    type: "warn",
-                    tool: toolName,
-                    server: serverInfo?.name,
-                    output: content,
-                    reason: scan.reason,
-                });
-                const warning = { type: "text", text: `[GuardBee Security Proxy] Warning: ${scan.reason}` };
-                content = [warning, ...(Array.isArray(content) ? content : [])];
-            }
-        }
-        if (config.interceptors?.piiMasking?.enabled !== false) {
-            content = (0, pii_masker_js_1.maskPiiInValue)(content);
-        }
-        // 5. Log response
-        audit.log({
-            ts: new Date().toISOString(),
-            type: "tool_response",
-            tool: toolName,
-            server: serverInfo?.name,
-            output: content,
-        });
-        void (0, mcp_telemetry_1.recordEvent)({
-            server: "security-proxy",
-            tool: toolName,
-            params: toolInput,
-            success: !result.isError,
-            durationMs: Date.now() - started,
-        });
-        return { ...result, content };
-    });
-    // Resources pass-through
-    server.setRequestHandler(types_js_1.ListResourcesRequestSchema, async () => {
-        return await downstream.listResources();
-    });
-    server.setRequestHandler(types_js_1.ReadResourceRequestSchema, async (req) => {
-        return await downstream.readResource({ uri: req.params.uri });
-    });
-    // Prompts pass-through
-    server.setRequestHandler(types_js_1.ListPromptsRequestSchema, async () => {
-        return await downstream.listPrompts();
+    server.setRequestHandler(types_js_1.ListToolsRequestSchema, async () => ({ tools: await gateway.listTools() }));
+    server.setRequestHandler(types_js_1.CallToolRequestSchema, async (req) => gateway.callTool(req.params.name, req.params.arguments ?? {}));
+    server.setRequestHandler(types_js_1.ListResourcesRequestSchema, async () => ({ resources: await gateway.listResources() }));
+    server.setRequestHandler(types_js_1.ReadResourceRequestSchema, async (req) => gateway.readResource(req.params.uri));
+    server.setRequestHandler(types_js_1.ListPromptsRequestSchema, async () => ({ prompts: await gateway.listPrompts() }));
+    server.setRequestHandler(types_js_1.GetPromptRequestSchema, async (req) => gateway.getPrompt(req.params.name, req.params.arguments));
+    gateway.onToolsChanged(() => {
+        void server.sendToolListChanged().catch(() => { });
     });
-    server.setRequestHandler(types_js_1.GetPromptRequestSchema, async (req) => {
-        return await downstream.getPrompt({
-            name: req.params.name,
-            arguments: req.params.arguments,
-        });
-    });
-    // Start upstream server
-    const upstreamTransport = new stdio_js_2.StdioServerTransport();
-    await server.connect(upstreamTransport);
+    return server;
+}
+/**
+ * Gateway + the MCP server in front of it, with approvals asked through that
+ * server (MCP elicitation). The approver needs the server and the server needs
+ * the gateway, hence the late binding.
+ */
+function createGatewayServer(upstreams, config, audit) {
+    let server;
+    const approver = (request) => server ? (0, approval_js_1.elicitationApprover)(server, config.approval.timeoutSeconds)(request) : Promise.resolve("unavailable");
+    const gateway = new gateway_js_1.Gateway(upstreams, config, audit, approver);
+    server = createProxyServer(gateway);
+    return { gateway, server };
+}
+async function startGateway(config) {
+    const audit = new logger_js_1.AuditLogger(config.audit);
+    const upstreams = [];
+    for (const [name, server] of Object.entries(config.upstreams)) {
+        upstreams.push(await (0, upstream_js_1.connectStdioUpstream)(name, server));
+    }
+    const { gateway, server } = createGatewayServer(upstreams, config, audit);
+    await server.connect(new stdio_js_1.StdioServerTransport());
     process.on("SIGINT", async () => {
-        audit.close();
         await server.close();
-        await downstream.close();
+        await gateway.close();
         process.exit(0);
     });
 }
+/** 0.x entry point: one server, unprefixed tool names, toxic flows only warn. */
+async function startProxy(config) {
+    await startGateway((0, config_js_1.fromLegacyConfig)(config));
+}
 //# sourceMappingURL=proxy.js.map

package/dist/proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":";;AAoBA,gCA8PC;AAlRD,wEAAmE;AACnE,wEAAiF;AACjF,wEAAmE;AACnE,wEAAiF;AACjF,iEAO4C;AAE5C,4EAA4E;AAC5E,kEAA+D;AAC/D,4EAAwF;AACxF,gEAA8D;AAC9D,iDAAgD;AAChD,2DAAsD;AAE/C,KAAK,UAAU,UAAU,CAAC,MAAmB;IAClD,MAAM,KAAK,GAAG,IAAI,uBAAW,CAC3B,MAAM,CAAC,KAAK,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CACnD,CAAC;IAEF,oDAAoD;IACpD,MAAM,UAAU,GAAG,IAAI,iBAAM,CAC3B,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,OAAO,EAAE,EACnD,EAAE,YAAY,EAAE,EAAE,EAAE,CACrB,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,+BAAoB,CAAC;QACzC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;QAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE;QAC9B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAA4B;KAChF,CAAC,CAAC;IAEH,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEpC,MAAM,UAAU,GAAG,UAAU,CAAC,gBAAgB,EAAE,CAAC;IACjD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,OAAO,KAAK,KAAK,CAAC;IAC7E,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,MAAM,IAAI,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,MAAM,IAAI,OAAO,CAAC;IAC5H,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,EAAE,mBAAmB,EAAE,OAAO,KAAK,KAAK,CAAC;IAClF,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,EAAE,mBAAmB,EAAE,MAAM,IAAI,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,MAAM,IAAI,OAAO,CAAC;IACjI,MAAM,GAAG,GAAG,IAAI,uCAAiB,EAAE,CAAC;IAEpC,wDAAwD;IACxD,MAAM,MAAM,GAAG,IAAI,iBAAM,CACvB,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,OAAO,EAAE,EACrD;QACE,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE;SACZ;KACF,CACF,CAAC;IAEF,uFAAuF;IACvF,MAAM,CAAC,iBAAiB,CAAC,iCAAsB,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,CAAC;QAC5C,IAAI,CAAC,YAAY;YAAE,OAAO,MAAM,CAAC;QACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAqB,EAAE,WAAW,CAAC,CAAC;QACxE,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACxC,KAAK,CAAC,GAAG,CAAC;gBACR,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;gBAClD,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,MAAM,EAAE,UAAU,EAAE,IAAI;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,KAA4B,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,sDAAsD;IACtD,MAAM,CAAC,iBAAiB,CAAC,gCAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5D,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACjC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE3B,oCAAoC;QACpC,IAAI,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,MAAM,IAAI,OAAO,CAAC;YACrE,MAAM,IAAI,GAAG,IAAA,4CAAsB,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACrD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC5B,KAAK,CAAC,GAAG,CAAC;oBACR,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,UAAU,EAAE,IAAI;oBACxB,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;gBACH,KAAK,IAAA,2BAAW,EAAC;oBACf,MAAM,EAAE,gBAAgB;oBACxB,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,SAAoC;oBAC5C,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;oBAChC,KAAK,EAAE,YAAY,IAAI,CAAC,MAAM,EAAE;iBACjC,CAAC,CAAC;gBACH,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,gDAAgD,IAAI,CAAC,MAAM,EAAE;yBACpE;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,KAAK,CAAC,GAAG,CAAC;oBACR,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,UAAU,EAAE,IAAI;oBACxB,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,CAAC;gBAC5C,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,KAAqB,CAAC,CAAC;gBAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAqB,CAAC,CAAC;gBAClE,IAAI,KAAK,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;oBACrC,KAAK,CAAC,GAAG,CAAC;wBACR,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBAC5B,IAAI,EAAE,SAAS;wBACf,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,UAAU,EAAE,IAAI;wBACxB,KAAK,EAAE,SAAS;wBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;qBACrB,CAAC,CAAC;oBACH,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,gDAAgD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;wBAC1G,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,EAAE,CAAC;oBACV,KAAK,CAAC,GAAG,CAAC;wBACR,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBAC5B,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,UAAU,EAAE,IAAI;wBACxB,KAAK,EAAE,SAAS;wBAChB,MAAM,EAAE,KAAK,CAAC,MAAM;qBACrB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,KAAK,CAAC,GAAG,CAAC;oBACR,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,UAAU,EAAE,IAAI;oBACxB,MAAM,EAAE,+BAA+B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBAC1F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,KAAK,CAAC,GAAG,CAAC;YACR,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,UAAU,EAAE,IAAI;YACxB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QAEH,2BAA2B;QAC3B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC;YACvC,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC;QAEH,8DAA8D;QAC9D,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC7B,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,IAAA,+BAAc,EAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC5B,KAAK,CAAC,GAAG,CAAC;oBACR,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,UAAU,EAAE,IAAI;oBACxB,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;gBACH,KAAK,IAAA,2BAAW,EAAC;oBACf,MAAM,EAAE,gBAAgB;oBACxB,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,SAAoC;oBAC5C,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;oBAChC,KAAK,EAAE,YAAY,IAAI,CAAC,MAAM,EAAE;iBACjC,CAAC,CAAC;gBACH,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,kDAAkD,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;oBAC3G,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC3B,KAAK,CAAC,GAAG,CAAC;oBACR,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAC5B,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,UAAU,EAAE,IAAI;oBACxB,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,sCAAsC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACrG,OAAO,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAmB,CAAC;YACpF,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YACvD,OAAO,GAAG,IAAA,8BAAc,EAAC,OAAO,CAAmB,CAAC;QACtD,CAAC;QAED,kBAAkB;QAClB,KAAK,CAAC,GAAG,CAAC;YACR,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,UAAU,EAAE,IAAI;YACxB,MAAM,EAAE,OAAO;SAChB,CAAC,CAAC;QAEH,KAAK,IAAA,2BAAW,EAAC;YACf,MAAM,EAAE,gBAAgB;YACxB,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,SAAoC;YAC5C,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO;YACxB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SACjC,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,MAAM,CAAC,iBAAiB,CAAC,qCAA0B,EAAE,KAAK,IAAI,EAAE;QAC9D,OAAO,MAAM,UAAU,CAAC,aAAa,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,oCAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAChE,OAAO,MAAM,UAAU,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,uBAAuB;IACvB,MAAM,CAAC,iBAAiB,CAAC,mCAAwB,EAAE,KAAK,IAAI,EAAE;QAC5D,OAAO,MAAM,UAAU,CAAC,WAAW,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,iCAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7D,OAAO,MAAM,UAAU,CAAC,SAAS,CAAC;YAChC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;YACrB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,wBAAwB;IACxB,MAAM,iBAAiB,GAAG,IAAI,+BAAoB,EAAE,CAAC;IACrD,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAExC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC9B,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":";;AAkBA,8CA2BC;AAOD,kDAWC;AAED,oCAeC;AAGD,gCAEC;AArFD,wEAAmE;AACnE,wEAAiF;AACjF,iEAO4C;AAE5C,iDAAgD;AAChD,uDAA2E;AAC3E,mDAA2E;AAC3E,qDAA+C;AAC/C,uDAA4E;AAE5E,iFAAiF;AACjF,SAAgB,iBAAiB,CAAC,OAAgB;IAChD,MAAM,MAAM,GAAG,IAAI,iBAAM,CACvB,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,OAAO,EAAE,EACrD;QACE,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;YAC5B,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE;SACZ;KACF,CACF,CAAC;IAEF,MAAM,CAAC,iBAAiB,CAAC,iCAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IACrG,MAAM,CAAC,iBAAiB,CAAC,gCAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAC5D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAC9D,CAAC;IACF,MAAM,CAAC,iBAAiB,CAAC,qCAA0B,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC;IACjH,MAAM,CAAC,iBAAiB,CAAC,oCAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACzG,MAAM,CAAC,iBAAiB,CAAC,mCAAwB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3G,MAAM,CAAC,iBAAiB,CAAC,iCAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAC7D,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CACzD,CAAC;IACF,OAAO,CAAC,cAAc,CAAC,GAAG,EAAE;QAC1B,KAAK,MAAM,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAgB,mBAAmB,CACjC,SAAqB,EACrB,MAAqB,EACrB,KAAkB;IAElB,IAAI,MAA0B,CAAC;IAC/B,MAAM,QAAQ,GAAa,CAAC,OAAO,EAAE,EAAE,CACrC,MAAM,CAAC,CAAC,CAAC,IAAA,iCAAmB,EAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACjH,MAAM,OAAO,GAAG,IAAI,oBAAO,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,MAAqB;IACtD,MAAM,KAAK,GAAG,IAAI,uBAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9D,SAAS,CAAC,IAAI,CAAC,MAAM,IAAA,kCAAoB,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1E,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,+BAAoB,EAAE,CAAC,CAAC;IAEjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC9B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AAC1E,KAAK,UAAU,UAAU,CAAC,MAAmB;IAClD,MAAM,YAAY,CAAC,IAAA,4BAAgB,EAAC,MAAM,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/types.d.ts

@@ -3,13 +3,21 @@ export type McpServerConfig = {
     args?: string[];
     env?: Record<string, string>;
 };
+export type AuditConfig = {
+    enabled: boolean;
+    sink: "console" | "file";
+    filePath?: string;
+    /**
+     * Write raw tool arguments and results into the log. Off → arguments are
+     * stored only as a SHA-256 hash and results are left out, so the audit log
+     * does not become another store of personal data. Defaults to true for the
+     * legacy JSON config, false for guardbee-proxy.yaml.
+     */
+    includePayloads?: boolean;
+};
 export type ProxyConfig = {
     server: McpServerConfig;
-    audit?: {
-        enabled: boolean;
-        sink: "console" | "file";
-        filePath?: string;
-    };
+    audit?: AuditConfig;
     interceptors?: {
         promptInjection?: {
             enabled: boolean;
@@ -22,10 +30,19 @@ export type ProxyConfig = {
         definitionDrift?: {
             enabled: boolean;
             action: "block" | "warn";
+            /**
+             * `every-call` re-lists the upstream's tools before each call (default).
+             * `on-change` re-lists only after the upstream sent tools/list_changed.
+             */
+            recheck?: "every-call" | "on-change";
         };
         piiMasking?: {
             enabled: boolean;
             patterns?: string[];
+            /** `redact` (default) replaces PII with a fixed placeholder; `tokenize` with a reversible session token. */
+            mode?: "redact" | "tokenize";
+            /** Put real values back even when the tool can send data out. Off by default. */
+            detokenizeForEgress?: boolean;
         };
     };
 };
@@ -40,11 +57,24 @@ export type InterceptResult = {
 };
 export type AuditEvent = {
     ts: string;
-    type: "tool_call" | "tool_response" | "blocked" | "warn";
+    type: "tool_call" | "tool_response" | "blocked" | "warn" | "toxic_flow" | "resource_read" | "approval";
     tool?: string;
     server?: string;
+    upstream?: string;
+    labels?: string[];
+    /** Matching policy rule (`id` or `rules[<index>]`). */
+    ruleId?: string;
+    taint?: {
+        sawUntrusted: boolean;
+        sawSensitive: boolean;
+    };
     input?: unknown;
+    /** SHA-256 of the arguments, written instead of `input` when payloads are off. */
+    inputHash?: string;
     output?: unknown;
     reason?: string;
+    /** Hash chain: each event carries the previous event's hash. Set by AuditLogger. */
+    prevHash?: string;
+    hash?: string;
 };
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,OAAO,EAAE,OAAO,CAAC;QACjB,IAAI,EAAE,SAAS,GAAG,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,YAAY,CAAC,EAAE;QACb,eAAe,CAAC,EAAE;YAChB,OAAO,EAAE,OAAO,CAAC;YACjB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;SAC1B,CAAC;QACF,mBAAmB,CAAC,EAAE;YACpB,OAAO,EAAE,OAAO,CAAC;YACjB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;SAC1B,CAAC;QACF,eAAe,CAAC,EAAE;YAChB,OAAO,EAAE,OAAO,CAAC;YACjB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;SAC1B,CAAC;QACF,UAAU,CAAC,EAAE;YACX,OAAO,EAAE,OAAO,CAAC;YACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;SACrB,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,WAAW,GAAG,eAAe,GAAG,SAAS,GAAG,MAAM,CAAC;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,SAAS,GAAG,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,YAAY,CAAC,EAAE;QACb,eAAe,CAAC,EAAE;YAChB,OAAO,EAAE,OAAO,CAAC;YACjB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;SAC1B,CAAC;QACF,mBAAmB,CAAC,EAAE;YACpB,OAAO,EAAE,OAAO,CAAC;YACjB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;SAC1B,CAAC;QACF,eAAe,CAAC,EAAE;YAChB,OAAO,EAAE,OAAO,CAAC;YACjB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;YACzB;;;eAGG;YACH,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW,CAAC;SACtC,CAAC;QACF,UAAU,CAAC,EAAE;YACX,OAAO,EAAE,OAAO,CAAC;YACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;YACpB,4GAA4G;YAC5G,IAAI,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;YAC7B,iFAAiF;YACjF,mBAAmB,CAAC,EAAE,OAAO,CAAC;SAC/B,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,WAAW,GAAG,eAAe,GAAG,SAAS,GAAG,MAAM,GAAG,YAAY,GAAG,eAAe,GAAG,UAAU,CAAC;IACvG,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE;QAAE,YAAY,EAAE,OAAO,CAAC;QAAC,YAAY,EAAE,OAAO,CAAA;KAAE,CAAC;IACzD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC"}

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@guardbee/mcp-security-proxy",
-  "version": "0.3.1",
+  "version": "1.0.0",
   "mcpName": "io.github.4hmetuyar/security-proxy",
-  "description": "Security proxy for MCP servers — intercepts tool calls, detects prompt injection, masks PII, and writes audit logs",
+  "description": "MCP security gateway: several MCP servers behind one policy, with toxic-flow (lethal trifecta) blocking, approvals, PII masking and a hash-chained audit log",
   "author": "GuardBee <hello@guardbee.ai>",
   "license": "MIT",
   "homepage": "https://github.com/GuardBee/guardbee-mcp/tree/main/packages/security-proxy#readme",
@@ -41,7 +41,9 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
+    "yaml": "^2.9.1",
     "zod": "^4.5.4",
+    "@guardbee/guard-core": "^0.1.0",
     "@guardbee/mcp-telemetry": "^0.1.3"
   },
   "scripts": {