@integsec/agentic-pentest-proxy 0.2.8 → 0.3.0

package/cloudflare/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "@integsec/agentic-pentest-cloudflare",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "check": "node --check src/worker.mjs && wrangler deploy --dry-run",
+    "deploy": "wrangler deploy"
+  },
+  "dependencies": {
+    "@cloudflare/containers": "^0.3.7"
+  },
+  "devDependencies": {
+    "wrangler": "^4.158.0"
+  }
+}

package/cloudflare/src/worker.mjs

@@ -0,0 +1,126 @@
+import { Container, getContainer } from '@cloudflare/containers';
+
+const text = (value, status = 200) => new Response(value, { status, headers: { 'Cache-Control': 'no-store' } });
+const json = (value, status = 200) => new Response(JSON.stringify(value), { status, headers: { 'Content-Type': 'application/json', 'Cache-Control': 'no-store' } });
+
+function tokenMatches(header, expected) {
+  if (!expected || !header?.startsWith('Bearer ')) return false;
+  const value = header.slice(7);
+  if (value.length !== expected.length) return false;
+  let difference = 0;
+  for (let i = 0; i < expected.length; i++) difference |= value.charCodeAt(i) ^ expected.charCodeAt(i);
+  return difference === 0;
+}
+
+export class PentestGatewayContainer extends Container {
+  defaultPort = 9091;
+  pingEndpoint = 'localhost/healthz';
+  sleepAfter = '10m';
+  writeQueue = Promise.resolve();
+
+  constructor(ctx, env) {
+    super(ctx, env);
+    for (const name of ['GATEWAY_ADMIN_TOKEN', 'INTERNAL_TOKEN', 'CLOUDFLARE_TEAM_DOMAIN', 'CLOUDFLARE_ACCESS_AUD', 'AUDIT_WEBHOOK_URL']) {
+      if (!env[name]) throw new Error(`Missing required Worker secret: ${name}`);
+    }
+    this.envVars = {
+      GATEWAY_MODE: 'true',
+      GATEWAY_HOST: '0.0.0.0',
+      GATEWAY_PORT: '9091',
+      GATEWAY_PUBLIC_URL: env.GATEWAY_PUBLIC_URL,
+      GATEWAY_AUTH_MODE: 'cloudflare',
+      CLOUDFLARE_TEAM_DOMAIN: env.CLOUDFLARE_TEAM_DOMAIN,
+      CLOUDFLARE_ACCESS_AUD: env.CLOUDFLARE_ACCESS_AUD,
+      GATEWAY_ADMIN_TOKEN: env.GATEWAY_ADMIN_TOKEN,
+      GATEWAY_INTERNAL_TOKEN: env.INTERNAL_TOKEN,
+      AUDIT_WEBHOOK_URL: env.AUDIT_WEBHOOK_URL,
+      AUDIT_WEBHOOK_TOKEN: env.INTERNAL_TOKEN,
+      GATEWAY_STATE_PATH: '/app/gateway/state.json',
+      AUDIT_LOG_PATH: '/app/audit',
+    };
+  }
+
+  async onStart() {
+    const state = await this.ctx.storage.get('gateway-state');
+    if (state) {
+      const response = await this.containerFetch('http://localhost:9091/__internal/state', {
+        method: 'PUT',
+        headers: { Authorization: `Bearer ${this.env.INTERNAL_TOKEN}`, 'Content-Type': 'application/json' },
+        body: JSON.stringify(state),
+      });
+      await response.body?.cancel();
+      if (!response.ok) throw new Error(`Failed to restore gateway state: ${response.status}`);
+    }
+  }
+
+  async fetch(request) {
+    const url = new URL(request.url);
+    if (url.pathname === '/__internal/audit') return this.persistAudit(request);
+    if (url.hostname !== new URL(this.env.GATEWAY_PUBLIC_URL).hostname) return text('Not found', 404);
+    if (url.pathname === '/api/audit' && request.method === 'GET') return this.listAudit(request);
+    if (url.pathname.startsWith('/__internal/')) return text('Not found', 404);
+    const mutatesState = url.pathname.startsWith('/api/') && ['POST', 'PUT', 'PATCH', 'DELETE'].includes(request.method);
+    if (!mutatesState) return this.containerFetch(request);
+
+    const result = this.writeQueue.then(() => this.persistMutation(request));
+    this.writeQueue = result.then(() => undefined, () => undefined);
+    return result;
+  }
+
+  async persistMutation(request) {
+    const previous = await this.ctx.storage.get('gateway-state') ?? { version: 1, upstreams: [], scopes: [], activeScopeId: null };
+    const response = await this.containerFetch(request);
+    if (!response.ok) return response;
+    const currentResponse = await this.containerFetch('http://localhost:9091/__internal/state', {
+      headers: { Authorization: `Bearer ${this.env.INTERNAL_TOKEN}` },
+    });
+    if (!currentResponse.ok) {
+      await this.restoreState(previous);
+      return text('Unable to read updated state', 503);
+    }
+    const current = await currentResponse.json();
+    try {
+      await this.ctx.storage.put('gateway-state', current);
+      return response;
+    } catch (error) {
+      console.error('Durable state write failed', error);
+      await this.restoreState(previous);
+      return text('Durable state write failed; change was not acknowledged', 503);
+    }
+  }
+
+  async restoreState(state) {
+    const response = await this.containerFetch('http://localhost:9091/__internal/state', {
+      method: 'PUT', headers: { Authorization: `Bearer ${this.env.INTERNAL_TOKEN}`, 'Content-Type': 'application/json' }, body: JSON.stringify(state),
+    });
+    await response.body?.cancel();
+    if (!response.ok) throw new Error(`Gateway rollback failed: ${response.status}`);
+  }
+
+  async persistAudit(request) {
+    if (request.method !== 'POST' || !tokenMatches(request.headers.get('authorization'), this.env.INTERNAL_TOKEN)) return text('Forbidden', 403);
+    if (Number(request.headers.get('content-length') || 0) > 65_536) return text('Too large', 413);
+    const raw = await request.text();
+    if (raw.length > 65_536) return text('Too large', 413);
+    let entry;
+    try { entry = JSON.parse(raw); } catch { return text('Invalid JSON', 400); }
+    if (!entry || typeof entry.engagement_id !== 'string' || typeof entry.decision !== 'string' || typeof entry.timestamp !== 'string') return text('Invalid audit entry', 400);
+    await this.ctx.storage.put(`audit:${Date.now().toString().padStart(13, '0')}:${crypto.randomUUID()}`, entry);
+    return new Response(null, { status: 204, headers: { 'Cache-Control': 'no-store' } });
+  }
+
+  async listAudit(request) {
+    if (!tokenMatches(request.headers.get('authorization'), this.env.GATEWAY_ADMIN_TOKEN)) return text('Admin token required', 401);
+    const check = await this.containerFetch('http://localhost:9091/api/state', { headers: request.headers });
+    await check.body?.cancel();
+    if (check.status !== 200) return text('Access assertion required', 403);
+    const entries = await this.ctx.storage.list({ prefix: 'audit:', reverse: true, limit: 100 });
+    return json({ entries: [...entries.values()] });
+  }
+}
+
+export default {
+  async fetch(request, env) {
+    return getContainer(env.GATEWAY, 'team').fetch(request);
+  },
+};

package/cloudflare/wrangler.jsonc

@@ -0,0 +1,26 @@
+{
+  "$schema": "./node_modules/wrangler/config-schema.json",
+  "name": "agentic-pentest-gateway",
+  "main": "src/worker.mjs",
+  "compatibility_date": "2026-11-07",
+  "workers_dev": true,
+  "routes": [{ "pattern": "agentic-proxy.pentestprepper.com", "custom_domain": true }],
+  "observability": { "enabled": true },
+  "containers": [
+    {
+      "class_name": "PentestGatewayContainer",
+      "image": "docker.io/integsec/agentic-pentest-mcp-proxy:0.3.0",
+      "instance_type": "basic",
+      "max_instances": 1
+    }
+  ],
+  "durable_objects": {
+    "bindings": [{ "name": "GATEWAY", "class_name": "PentestGatewayContainer" }]
+  },
+  "exports": {
+    "PentestGatewayContainer": { "type": "durable-object", "storage": "sqlite" }
+  },
+  "vars": {
+    "GATEWAY_PUBLIC_URL": "https://agentic-proxy.pentestprepper.com"
+  }
+}

package/dist/bin/integsec-agentic-pentest-bridge.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=integsec-agentic-pentest-bridge.d.ts.map

package/dist/bin/integsec-agentic-pentest-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integsec-agentic-pentest-bridge.d.ts","sourceRoot":"","sources":["../../bin/integsec-agentic-pentest-bridge.ts"],"names":[],"mappings":""}

package/dist/bin/integsec-agentic-pentest-bridge.js

@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
+if (process.argv.includes("--help") || process.argv.includes("-h")) {
+    console.log("Local MCP bridge for Claude Desktop. Set GATEWAY_URL=http://127.0.0.1:9091/mcp or pass it as the first argument.");
+    process.exit(0);
+}
+const url = new URL(process.argv[2] ?? process.env.GATEWAY_URL ?? "http://127.0.0.1:9091/mcp");
+if (!["127.0.0.1", "localhost", "[::1]"].includes(url.hostname) || url.protocol !== "http:") {
+    throw new Error("The local bridge only accepts a loopback HTTP gateway URL");
+}
+const upstream = new Client({ name: "agentic-pentest-bridge", version: "0.3.0" });
+await upstream.connect(new StreamableHTTPClientTransport(url));
+const bridge = new Server({ name: "agentic-pentest-local", version: "0.3.0" }, { capabilities: { tools: {} } });
+bridge.setRequestHandler(ListToolsRequestSchema, async (request) => upstream.listTools(request.params));
+bridge.setRequestHandler(CallToolRequestSchema, async (request) => upstream.callTool(request.params));
+await bridge.connect(new StdioServerTransport());
+process.on("SIGINT", () => void upstream.close());
+process.on("SIGTERM", () => void upstream.close());
+//# sourceMappingURL=integsec-agentic-pentest-bridge.js.map

package/dist/bin/integsec-agentic-pentest-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integsec-agentic-pentest-bridge.js","sourceRoot":"","sources":["../../bin/integsec-agentic-pentest-bridge.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAEnG,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,kHAAkH,CAAC,CAAC;IAChI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,2BAA2B,CAAC,CAAC;AAC/F,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;IAC5F,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;AAC/E,CAAC;AACD,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAClF,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,6BAA6B,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AAChH,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AACxG,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AACtG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;AACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;AAClD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC"}

package/dist/bin/integsec-agentic-pentest-gateway.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import "dotenv/config";
+//# sourceMappingURL=integsec-agentic-pentest-gateway.d.ts.map

package/dist/bin/integsec-agentic-pentest-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integsec-agentic-pentest-gateway.d.ts","sourceRoot":"","sources":["../../bin/integsec-agentic-pentest-gateway.ts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC"}

package/dist/bin/integsec-agentic-pentest-gateway.js

@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+import "dotenv/config";
+import { createGateway } from "../src/gateway/server.js";
+if (process.argv.includes("--help") || process.argv.includes("-h")) {
+    console.log(`IntegSec MCP Gateway
+
+Manage MCP upstreams and engagement scopes in a browser, then connect an MCP client at /mcp.
+
+Required: GATEWAY_ADMIN_TOKEN (at least 32 characters).
+Optional: GATEWAY_HOST (127.0.0.1), GATEWAY_PORT (9091), GATEWAY_STATE_PATH (./gateway/state.json).
+Hosted with Cloudflare Access: GATEWAY_PUBLIC_URL, GATEWAY_AUTH_MODE=cloudflare,
+  CLOUDFLARE_TEAM_DOMAIN, CLOUDFLARE_ACCESS_AUD.
+Hosted with direct Entra: GATEWAY_PUBLIC_URL, ENTRA_TENANT, ENTRA_AUDIENCE, ENTRA_SCOPE.
+
+Run: integsec-agentic-pentest-gateway
+Open: http://127.0.0.1:9091/admin
+`);
+    process.exit(0);
+}
+const gateway = createGateway({
+    host: process.env.GATEWAY_HOST ?? "127.0.0.1",
+    port: Number(process.env.GATEWAY_PORT ?? "9091"),
+    statePath: process.env.GATEWAY_STATE_PATH ?? "./gateway/state.json",
+    adminToken: process.env.GATEWAY_ADMIN_TOKEN ?? "",
+    publicUrl: process.env.GATEWAY_PUBLIC_URL,
+    entraTenant: process.env.ENTRA_TENANT,
+    entraAudience: process.env.ENTRA_AUDIENCE,
+    entraScope: process.env.ENTRA_SCOPE,
+    authMode: process.env.GATEWAY_AUTH_MODE === "cloudflare" ? "cloudflare" : "entra",
+    cloudflareTeamDomain: process.env.CLOUDFLARE_TEAM_DOMAIN,
+    cloudflareAccessAud: process.env.CLOUDFLARE_ACCESS_AUD,
+    internalToken: process.env.GATEWAY_INTERNAL_TOKEN,
+    auditWebhookUrl: process.env.AUDIT_WEBHOOK_URL,
+    auditWebhookToken: process.env.AUDIT_WEBHOOK_TOKEN,
+});
+await gateway.listen();
+console.error(`[gateway] Listening on ${process.env.GATEWAY_HOST ?? "127.0.0.1"}:${process.env.GATEWAY_PORT ?? "9091"}`);
+console.error("[gateway] Admin UI: /admin; MCP: /mcp");
+const stop = async () => { await gateway.close(); process.exit(0); };
+process.on("SIGINT", () => void stop());
+process.on("SIGTERM", () => void stop());
+//# sourceMappingURL=integsec-agentic-pentest-gateway.js.map

package/dist/bin/integsec-agentic-pentest-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integsec-agentic-pentest-gateway.js","sourceRoot":"","sources":["../../bin/integsec-agentic-pentest-gateway.ts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;CAYb,CAAC,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,OAAO,GAAG,aAAa,CAAC;IAC5B,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,WAAW;IAC7C,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC;IAChD,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,sBAAsB;IACnE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE;IACjD,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;IACzC,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;IACrC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;IACzC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW;IACnC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO;IACjF,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB;IACxD,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;IACtD,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB;IACjD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;IAC9C,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;CACnD,CAAC,CAAC;AAEH,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;AACvB,OAAO,CAAC,KAAK,CAAC,0BAA0B,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,MAAM,EAAE,CAAC,CAAC;AACzH,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;AACvD,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AACxC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC"}

package/dist/bin/integsec-agentic-pentest-proxy.js

@@ -10,6 +10,10 @@ import { CloudWatchAuditLogger } from "../src/audit/cloudwatch.js";
 import { AzureMonitorAuditLogger } from "../src/audit/azure-monitor.js";
 import { GcpAuditLogger } from "../src/audit/gcp-logging.js";
 async function main() {
+    if (process.argv.includes("--gateway") || process.env.GATEWAY_MODE === "true") {
+        await import("./integsec-agentic-pentest-gateway.js");
+        return;
+    }
     if (process.argv.includes("--help") || process.argv.includes("-h")) {
         console.log(`IntegSec Agentic Pentest Proxy
 
@@ -21,6 +25,8 @@ Get started:
   3. Paste the generated mcpServers entry into your MCP client's configuration.
   4. integsec-agentic-pentest-tui --audit-path ./audit
 
+Managed gateway: integsec-agentic-pentest-gateway --help
+
 The proxy starts when your MCP client launches its configured tool.
 Docs: https://github.com/IntegSec/agentic-pentest-proxy#quick-start
 `);

package/dist/bin/integsec-agentic-pentest-proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"integsec-agentic-pentest-proxy.js","sourceRoot":"","sources":["../../bin/integsec-agentic-pentest-proxy.ts"],"names":[],"mappings":";AAEA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,KAAK,UAAU,IAAI;IACjB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;CAYf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IAEtC,OAAO,CAAC,KAAK,CAAC,gEAAgE,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7H,OAAO,CAAC,KAAK,CAAC,4CAA4C,QAAQ,CAAC,iBAAiB,CAAC,KAAK,OAAO,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,CAAC;IACnI,OAAO,CAAC,KAAK,CAAC,+CAA+C,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAEjF,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;IAE3C,mCAAmC;IACnC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,WAAW,CAAC,UAAU,CAAC,IAAI,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACxF,OAAO,CAAC,KAAK,CAAC,gEAAgE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,MAAM,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,yBAAyB,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,sHAAsH,CAAC,CAAC;IAC1I,CAAC;IACD,IAAI,MAAM,CAAC,yBAAyB,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACnE,WAAW,CAAC,UAAU,CACpB,IAAI,uBAAuB,CAAC,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CACrH,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,uBAAuB,CAAC;YAC3C,MAAM,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,wEAAwE;gBACxE,mEAAmE,CACpE,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,UAAU,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,8FAA8F,CAAC,CAAC;YAC9G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,aAAa,CACjB,KAAK,EACL,MAAM,CAAC,kBAAkB,EACzB,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,sBAAsB,CAC9B,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,wFAAwF,CAAC,CAAC;YACxG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;YACzG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,iDAAiD,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"integsec-agentic-pentest-proxy.js","sourceRoot":"","sources":["../../bin/integsec-agentic-pentest-proxy.ts"],"names":[],"mappings":";AAEA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,KAAK,UAAU,IAAI;IACjB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;QAC9E,MAAM,MAAM,CAAC,uCAAuC,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;CAcf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IAEtC,OAAO,CAAC,KAAK,CAAC,gEAAgE,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7H,OAAO,CAAC,KAAK,CAAC,4CAA4C,QAAQ,CAAC,iBAAiB,CAAC,KAAK,OAAO,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,CAAC;IACnI,OAAO,CAAC,KAAK,CAAC,+CAA+C,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAEjF,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;IAE3C,mCAAmC;IACnC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,WAAW,CAAC,UAAU,CAAC,IAAI,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACxF,OAAO,CAAC,KAAK,CAAC,gEAAgE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,MAAM,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,yBAAyB,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,sHAAsH,CAAC,CAAC;IAC1I,CAAC;IACD,IAAI,MAAM,CAAC,yBAAyB,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACnE,WAAW,CAAC,UAAU,CACpB,IAAI,uBAAuB,CAAC,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CACrH,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,uBAAuB,CAAC;YAC3C,MAAM,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,wEAAwE;gBACxE,mEAAmE,CACpE,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,UAAU,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,8FAA8F,CAAC,CAAC;YAC9G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,aAAa,CACjB,KAAK,EACL,MAAM,CAAC,kBAAkB,EACzB,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,sBAAsB,CAC9B,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,wFAAwF,CAAC,CAAC;YACxG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;YACzG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,iDAAiD,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/src/config.js

@@ -50,7 +50,7 @@ export function loadConfig() {
         techniqueMapPath: process.env.TECHNIQUE_MAP_PATH,
         dnsCacheTtl: parseInt(process.env.DNS_CACHE_TTL || "60", 10),
         logLevel: process.env.LOG_LEVEL || "INFO",
-        proxyVersion: process.env.PROXY_VERSION || "0.2.7",
+        proxyVersion: process.env.PROXY_VERSION || "0.3.0",
     };
 }
 //# sourceMappingURL=config.js.map

package/dist/src/gateway/admin.html

@@ -0,0 +1,21 @@
+<!doctype html>
+<html lang="en">
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>IntegSec MCP Gateway</title>
+<style>
+  :root{font:15px system-ui,sans-serif;color:#e8f0f2;background:#0b1218}
+  *{box-sizing:border-box}body{margin:0}header{padding:22px 5vw;background:#10202b;border-bottom:1px solid #234052;display:flex;justify-content:space-between;align-items:center;gap:20px}
+  h1{font-size:21px;margin:0}h2{font-size:18px;margin:0 0 14px}h3{font-size:15px;margin:16px 0 6px}p{color:#a8bdc8;line-height:1.45}main{max-width:1200px;margin:30px auto;padding:0 20px;display:grid;grid-template-columns:1fr 1fr;gap:20px}.card{background:#14222c;border:1px solid #294454;border-radius:13px;padding:24px}.wide{grid-column:1/-1}
+  input,select,textarea,button{font:inherit}input,select,textarea{width:100%;background:#0b1720;color:#fff;border:1px solid #426073;border-radius:7px;padding:9px;margin:5px 0 12px}textarea{min-height:70px}label{display:block;color:#c1d0d8;font-weight:600;font-size:13px}button{border:0;border-radius:7px;background:#26bfa4;color:#081914;padding:9px 14px;font-weight:700;cursor:pointer;margin:4px 7px 4px 0}button.secondary{background:#304b5a;color:#e8f0f2}button.danger{background:#6d3541;color:#fff}button:disabled{opacity:.5;cursor:not-allowed}.grid{display:grid;grid-template-columns:1fr 1fr;gap:0 14px}.row{border-top:1px solid #294454;padding:12px 0;display:flex;align-items:center;justify-content:space-between;gap:12px}.muted{font-size:12px;color:#93acb9}#status{padding:8px 5vw;color:#8ee7ce;min-height:35px}#status.error{color:#ff9e9e}code{color:#a6e7db}@media(max-width:800px){main{display:block}.card{margin-bottom:20px}.grid{display:block}}
+</style>
+<header><h1>IntegSec MCP Gateway</h1><span class="muted">Manage tools and engagement scope</span></header>
+<div id="status" role="status"></div>
+<main>
+  <section class="card wide"><h2>Administrator access</h2><p>Enter the gateway admin token from your service environment. It stays in this browser tab only.</p><div class="grid"><label>Admin token<input id="token" type="password" autocomplete="off"></label><div><br><button id="connect">Connect</button></div></div></section>
+  <section class="card"><h2>MCP servers</h2><div id="upstreams"></div><h3>Add a server</h3><div class="grid"><label>Name<input id="up-name" placeholder="burp"></label><label>Transport<select id="up-transport"><option value="stdio">Local process</option><option value="http">Streamable HTTP</option><option value="sse">SSE</option></select></label></div><label>Command or URL<input id="up-target" placeholder="burp-mcp-server or https://example.com/mcp"></label><label>Arguments, one per line<textarea id="up-args" placeholder="--port\n3000"></textarea></label><button id="add-upstream">Add server</button></section>
+  <section class="card"><h2>Engagement scopes</h2><p>Save a draft, review it, then activate it. The active scope cannot be edited in place.</p><div id="scopes"></div><h3>Scope editor</h3><div class="grid"><label>Engagement ID<input id="engagement" placeholder="ENG-2026-001"></label><label>Client<input id="client" placeholder="Example Client"></label><label>Operator<input id="operator" placeholder="Test Team"></label><label>Starts (UTC)<input id="starts" type="datetime-local"></label><label>Ends (UTC)<input id="ends" type="datetime-local"></label><label>Execution profile<select id="profile"><option value="isolated">Isolated: local MCP only</option><option value="restricted">Restricted: approved hosts</option><option value="connected">Connected: network MCP allowed</option></select></label></div><p class="muted">Use one item per line in each field.</p><div class="grid"><label>IP ranges<textarea id="ips"></textarea></label><label>Domains<textarea id="domains"></textarea></label><label>URLs<textarea id="urls"></textarea></label><label>Cloud accounts<textarea id="cloud"></textarea></label><label>Excluded targets<textarea id="excluded-targets"></textarea></label><label>Authorized techniques<textarea id="techniques"></textarea></label><label>Excluded techniques<textarea id="excluded-techniques"></textarea></label><label>Allowed MCP hosts (restricted profile)<textarea id="hosts"></textarea></label></div><button id="save-scope">Save draft</button><button id="new-scope" class="secondary">Clear editor</button></section>
+  <section class="card wide"><h2>Client connection</h2><p id="connection">Connect as an administrator to see the endpoint.</p><p class="muted">Local Burp tools must run on each tester’s own gateway or local MCP connection. A public gateway cannot launch Burp on a tester’s laptop.</p></section>
+</main>
+<script src="/admin.js" defer></script>
+</html>

package/dist/src/gateway/admin.js

@@ -0,0 +1,78 @@
+const $ = (id) => document.getElementById(id);
+let state = null;
+let editing = null;
+const token = $('token');
+token.value = sessionStorage.getItem('gateway-token') || '';
+
+function status(message, error = false) { const node = $('status'); node.textContent = message; node.classList.toggle('error', error); }
+async function api(path, method = 'GET', data) {
+  const response = await fetch(path, { method, headers: { Authorization: `Bearer ${token.value}`, ...(data ? { 'Content-Type': 'application/json' } : {}) }, body: data ? JSON.stringify(data) : undefined });
+  const result = await response.json();
+  if (!response.ok) throw new Error(result.error || `HTTP ${response.status}`);
+  return result;
+}
+const lines = (id) => $(id).value.split(/\r?\n/).map(x => x.trim()).filter(Boolean);
+const setLines = (id, values) => { $(id).value = values.join('\n'); };
+const make = (tag, value) => { const node = document.createElement(tag); node.textContent = value; return node; };
+const button = (label, action, style = 'secondary') => { const node = make('button', label); node.className = style; node.addEventListener('click', () => action().catch(e => status(e.message, true))); return node; };
+
+async function refresh() {
+  state = await api('/api/state');
+  const up = $('upstreams'); up.replaceChildren();
+  for (const item of state.upstreams) {
+    const row = make('div', ''); row.className = 'row';
+    const label = make('div', `${item.name} · ${item.transport} · ${item.enabled ? 'Enabled' : 'Disabled'}`);
+    label.appendChild(make('div', item.transport === 'stdio' ? item.command : item.url));
+    row.append(label, button(item.enabled ? 'Disable' : 'Enable', async () => { await api(`/api/upstreams/${item.id}`, 'PATCH', { enabled: !item.enabled }); await refresh(); }));
+    row.append(button('Remove', async () => { if (confirm(`Remove ${item.name}?`)) { await api(`/api/upstreams/${item.id}`, 'DELETE'); await refresh(); } }, 'danger'));
+    up.append(row);
+  }
+  const scopes = $('scopes'); scopes.replaceChildren();
+  for (const item of state.scopes) {
+    const active = item.id === state.activeScopeId;
+    const row = make('div', ''); row.className = 'row';
+    row.append(make('div', `${item.manifest.engagement_id} · ${item.profile}${active ? ' · ACTIVE' : ''}`));
+    row.append(button('View', async () => loadScope(item)));
+    if (!active) {
+      row.append(button('Activate', async () => { await api(`/api/scopes/${item.id}/activate`, 'POST'); await refresh(); }));
+      row.append(button('Delete', async () => { if (confirm(`Delete draft ${item.manifest.engagement_id}?`)) { await api(`/api/scopes/${item.id}`, 'DELETE'); await refresh(); } }, 'danger'));
+    }
+    scopes.append(row);
+  }
+  $('connection').textContent = `MCP endpoint: ${location.origin}/mcp. ${state.activeScopeId ? 'An engagement scope is active.' : 'Activate a scope before connecting clients.'}`;
+  status('Gateway state loaded.');
+}
+function loadScope(item) {
+  editing = item.id === state.activeScopeId ? null : item.id;
+  const m = item.manifest;
+  $('engagement').value = m.engagement_id; $('client').value = m.client; $('operator').value = m.operator;
+  $('starts').value = m.engagement_window.start.slice(0,16); $('ends').value = m.engagement_window.end.slice(0,16);
+  $('profile').value = item.profile; setLines('ips', m.authorized_targets.ip_ranges); setLines('domains', m.authorized_targets.domains);
+  setLines('urls', m.authorized_targets.urls); setLines('cloud', m.authorized_targets.cloud_accounts);
+  setLines('excluded-targets', m.excluded_targets); setLines('techniques', m.authorized_techniques);
+  setLines('excluded-techniques', m.excluded_techniques); setLines('hosts', item.allowedHosts);
+  status(item.id === state.activeScopeId ? 'Viewing active scope. Saving creates a new draft.' : 'Draft loaded for editing.');
+}
+$('connect').onclick = () => { sessionStorage.setItem('gateway-token', token.value); refresh().catch(e => status(e.message, true)); };
+$('add-upstream').onclick = async () => {
+  try {
+    const transport = $('up-transport').value;
+    await api('/api/upstreams', 'POST', { name: $('up-name').value.trim(), enabled: true, transport,
+      ...(transport === 'stdio' ? { command: $('up-target').value.trim(), args: lines('up-args') } : { url: $('up-target').value.trim(), args: [] }) });
+    $('up-name').value = ''; $('up-target').value = ''; $('up-args').value = ''; await refresh();
+  } catch (e) { status(e.message, true); }
+};
+$('new-scope').onclick = () => { editing = null; for (const id of ['engagement','client','operator','starts','ends','ips','domains','urls','cloud','excluded-targets','techniques','excluded-techniques','hosts']) $(id).value = ''; $('profile').value = 'isolated'; status('New draft.'); };
+$('save-scope').onclick = async () => {
+  try {
+    const scope = { profile: $('profile').value, allowedHosts: lines('hosts'), manifest: {
+      engagement_id: $('engagement').value.trim(), client: $('client').value.trim(), operator: $('operator').value.trim(),
+      authorized_targets: { ip_ranges: lines('ips'), domains: lines('domains'), urls: lines('urls'), cloud_accounts: lines('cloud') },
+      excluded_targets: lines('excluded-targets'), authorized_techniques: lines('techniques'), excluded_techniques: lines('excluded-techniques'),
+      engagement_window: { start: new Date($('starts').value).toISOString(), end: new Date($('ends').value).toISOString() },
+    } };
+    await api(editing ? `/api/scopes/${editing}` : '/api/scopes', editing ? 'PUT' : 'POST', scope);
+    editing = null; await refresh(); status('Draft saved. Review it before activation.');
+  } catch (e) { status(e.message, true); }
+};
+if (token.value) refresh().catch(e => status(e.message, true));

package/dist/src/gateway/auth.d.ts

@@ -0,0 +1,18 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+export declare class GatewayAuth {
+    readonly publicUrl: string | undefined;
+    private readonly tenant;
+    private readonly audience;
+    private readonly requiredScope;
+    private readonly mode;
+    private readonly teamDomain?;
+    private verifier?;
+    private accessJwks?;
+    constructor(publicUrl: string | undefined, tenant: string | undefined, audience: string | undefined, requiredScope: string | undefined, mode?: "entra" | "cloudflare", teamDomain?: string | undefined);
+    protectedResource(): Promise<Record<string, unknown>>;
+    authorize(req: IncomingMessage, res: ServerResponse): Promise<string | false>;
+    private denyAccess;
+    private challenge;
+    private getVerifier;
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/src/gateway/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/gateway/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAIjE,qBAAa,WAAW;IAKpB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAT9B,OAAO,CAAC,QAAQ,CAAC,CAA2E;IAC5F,OAAO,CAAC,UAAU,CAAC,CAAwC;gBAGhD,SAAS,EAAE,MAAM,GAAG,SAAS,EACrB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,IAAI,GAAE,OAAO,GAAG,YAAsB,EACtC,UAAU,CAAC,EAAE,MAAM,YAAA;IAUhC,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAYrD,SAAS,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC;IA0BnF,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,SAAS;IAUjB,OAAO,CAAC,WAAW;CAepB"}

package/dist/src/gateway/auth.js

@@ -0,0 +1,112 @@
+import { createRemoteJWKSet, jwtVerify } from "jose";
+export class GatewayAuth {
+    publicUrl;
+    tenant;
+    audience;
+    requiredScope;
+    mode;
+    teamDomain;
+    verifier;
+    accessJwks;
+    constructor(publicUrl, tenant, audience, requiredScope, mode = "entra", teamDomain) {
+        this.publicUrl = publicUrl;
+        this.tenant = tenant;
+        this.audience = audience;
+        this.requiredScope = requiredScope;
+        this.mode = mode;
+        this.teamDomain = teamDomain;
+        if (publicUrl) {
+            if (new URL(publicUrl).protocol !== "https:")
+                throw new Error("GATEWAY_PUBLIC_URL must be HTTPS");
+            if (mode === "entra" && (!tenant || !audience || !requiredScope))
+                throw new Error("Direct Entra mode requires ENTRA_TENANT, ENTRA_AUDIENCE and ENTRA_SCOPE");
+            if (mode === "cloudflare" && (!teamDomain || !audience))
+                throw new Error("Cloudflare mode requires CLOUDFLARE_TEAM_DOMAIN and CLOUDFLARE_ACCESS_AUD");
+            if (mode === "cloudflare" && (new URL(teamDomain).protocol !== "https:" || !new URL(teamDomain).hostname.endsWith(".cloudflareaccess.com")))
+                throw new Error("Invalid CLOUDFLARE_TEAM_DOMAIN");
+        }
+    }
+    async protectedResource() {
+        if (!this.publicUrl)
+            throw new Error("No public gateway URL configured");
+        if (this.mode === "cloudflare")
+            throw new Error("Cloudflare Access serves OAuth metadata at the edge");
+        const { issuer } = await this.getVerifier();
+        return {
+            resource: new URL("/mcp", this.publicUrl).toString(),
+            authorization_servers: [issuer],
+            scopes_supported: [this.requiredScope],
+            bearer_methods_supported: ["header"],
+        };
+    }
+    async authorize(req, res) {
+        if (!this.publicUrl)
+            return "local";
+        if (this.mode === "cloudflare") {
+            const token = req.headers["cf-access-jwt-assertion"];
+            if (typeof token !== "string") {
+                this.denyAccess(res);
+                return false;
+            }
+            try {
+                const domain = new URL(this.teamDomain);
+                this.accessJwks ??= createRemoteJWKSet(new URL("/cdn-cgi/access/certs", domain));
+                const { payload } = await jwtVerify(token, this.accessJwks, { issuer: domain.origin, audience: this.audience, algorithms: ["RS256"] });
+                return typeof payload.sub === "string" ? payload.sub : "cloudflare-access";
+            }
+            catch {
+                this.denyAccess(res);
+                return false;
+            }
+        }
+        const token = /^Bearer (\S+)$/i.exec(req.headers.authorization ?? "")?.[1];
+        if (!token) {
+            this.challenge(res);
+            return false;
+        }
+        try {
+            const { issuer, jwks } = await this.getVerifier();
+            const { payload } = await jwtVerify(token, jwks, { issuer, audience: this.audience, algorithms: ["RS256"] });
+            const scopes = typeof payload.scp === "string" ? payload.scp.split(" ") : [];
+            if (!scopes.includes(this.requiredScope)) {
+                this.challenge(res);
+                return false;
+            }
+            return typeof payload.oid === "string" ? payload.oid : typeof payload.sub === "string" ? payload.sub : "entra-user";
+        }
+        catch {
+            this.challenge(res);
+            return false;
+        }
+    }
+    denyAccess(res) {
+        res.writeHead(403, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+        res.end(JSON.stringify({ error: "invalid Cloudflare Access assertion" }));
+    }
+    challenge(res) {
+        const metadata = new URL("/.well-known/oauth-protected-resource/mcp", this.publicUrl).toString();
+        res.writeHead(401, {
+            "WWW-Authenticate": `Bearer resource_metadata="${metadata}", scope="${this.requiredScope}"`,
+            "Cache-Control": "no-store",
+            "Content-Type": "application/json",
+        });
+        res.end(JSON.stringify({ error: "unauthorized" }));
+    }
+    getVerifier() {
+        this.verifier ??= (async () => {
+            const endpoint = `https://login.microsoftonline.com/${encodeURIComponent(this.tenant)}/v2.0/.well-known/openid-configuration`;
+            const response = await fetch(endpoint, { signal: AbortSignal.timeout(5000) });
+            if (!response.ok)
+                throw new Error("Entra discovery failed");
+            const metadata = await response.json();
+            const issuer = new URL(metadata.issuer);
+            const jwksUrl = new URL(metadata.jwks_uri);
+            if (issuer.protocol !== "https:" || jwksUrl.protocol !== "https:" || issuer.hostname !== "login.microsoftonline.com" || jwksUrl.hostname !== "login.microsoftonline.com") {
+                throw new Error("Unexpected Entra discovery endpoint");
+            }
+            return { issuer: metadata.issuer, jwks: createRemoteJWKSet(jwksUrl) };
+        })().catch((error) => { this.verifier = undefined; throw error; });
+        return this.verifier;
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/src/gateway/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/gateway/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAKrD,MAAM,OAAO,WAAW;IAKX;IACQ;IACA;IACA;IACA;IACA;IATX,QAAQ,CAA4E;IACpF,UAAU,CAAyC;IAE3D,YACW,SAA6B,EACrB,MAA0B,EAC1B,QAA4B,EAC5B,aAAiC,EACjC,OAA+B,OAAO,EACtC,UAAmB;QAL3B,cAAS,GAAT,SAAS,CAAoB;QACrB,WAAM,GAAN,MAAM,CAAoB;QAC1B,aAAQ,GAAR,QAAQ,CAAoB;QAC5B,kBAAa,GAAb,aAAa,CAAoB;QACjC,SAAI,GAAJ,IAAI,CAAkC;QACtC,eAAU,GAAV,UAAU,CAAS;QAEpC,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClG,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;YAC7J,IAAI,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;YACtJ,IAAI,IAAI,KAAK,YAAY,IAAI,CAAC,IAAI,GAAG,CAAC,UAAW,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,GAAG,CAAC,UAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACnM,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACvG,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO;YACL,QAAQ,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;YACpD,qBAAqB,EAAE,CAAC,MAAM,CAAC;YAC/B,gBAAgB,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC;YACtC,wBAAwB,EAAE,CAAC,QAAQ,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAoB,EAAE,GAAmB;QACvD,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,OAAO,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;YACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;YACtE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAW,CAAC,CAAC;gBACzC,IAAI,CAAC,UAAU,KAAK,kBAAkB,CAAC,IAAI,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC,CAAC;gBACjF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACvI,OAAO,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC;YAC7E,CAAC;YAAC,MAAM,CAAC;gBAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QACjD,CAAC;QACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAClD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7G,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAc,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;YACjF,OAAO,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;QACtH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,GAAmB;QACpC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;QACxF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IAEO,SAAS,CAAC,GAAmB;QACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,2CAA2C,EAAE,IAAI,CAAC,SAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClG,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,kBAAkB,EAAE,6BAA6B,QAAQ,aAAa,IAAI,CAAC,aAAa,GAAG;YAC3F,eAAe,EAAE,UAAU;YAC3B,cAAc,EAAE,kBAAkB;SACnC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,QAAQ,KAAK,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,QAAQ,GAAG,qCAAqC,kBAAkB,CAAC,IAAI,CAAC,MAAO,CAAC,wCAAwC,CAAC;YAC/H,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9E,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC5D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAkB,CAAC;YACvD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,2BAA2B,IAAI,OAAO,CAAC,QAAQ,KAAK,2BAA2B,EAAE,CAAC;gBACzK,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QACxE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF"}

package/dist/src/gateway/runtime.d.ts

@@ -0,0 +1,20 @@
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import type { AuditEntry } from "../types.js";
+import { GatewayStore } from "./state.js";
+export declare class GatewayRuntime {
+    readonly store: GatewayStore;
+    private readonly hosted;
+    private readonly requiredAuditSink?;
+    private clients;
+    private pending;
+    private proxies;
+    private proxyScope?;
+    constructor(store: GatewayStore, hosted: boolean, requiredAuditSink?: ((entry: AuditEntry) => Promise<void>) | undefined);
+    sync(): Promise<void>;
+    private scopeProxy;
+    private clientFor;
+    private available;
+    createServer(actor?: string): Server;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=runtime.d.ts.map

package/dist/src/gateway/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/gateway/runtime.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAInE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAiE,MAAM,YAAY,CAAC;AAIzG,qBAAa,cAAc;IAMb,QAAQ,CAAC,KAAK,EAAE,YAAY;IAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAW,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAL/G,OAAO,CAAC,OAAO,CAA4D;IAC3E,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,OAAO,CAA4C;IAC3D,OAAO,CAAC,UAAU,CAAC,CAAc;gBAEZ,KAAK,EAAE,YAAY,EAAmB,MAAM,EAAE,OAAO,EAAmB,iBAAiB,CAAC,GAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,aAAA;IAE/I,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAa3B,OAAO,CAAC,UAAU;YAcJ,SAAS;IA2BvB,OAAO,CAAC,SAAS;IAOjB,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM;IAgE9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAI7B"}