@intutic/mcp-governance-proxy 1.0.3

package/dist/emitter.d.ts

@@ -0,0 +1,34 @@
+/**
+ * emitter.ts — Dual-path governance event emitter.
+ *
+ * Path A: HTTP POST to /api/v1/hook-events (same endpoint as claudeCodeHooks.ts)
+ * Path B: Append JSONL line to ~/.intutic/events/hook-events.jsonl
+ *
+ * Mirrors the dual-path pattern from claudeCodeHooks.ts / syncLoop.ts.
+ *
+ * @module
+ */
+export type EventKind = 'tool_allowed' | 'tool_blocked' | 'tool_redacted';
+export interface GovernanceEvent {
+    incidentId: string;
+    kind: EventKind;
+    toolName: string;
+    toolInput: unknown;
+    workspaceId: string;
+    harnessType: string;
+    reason?: string;
+    timestamp: string;
+}
+export declare class GovernanceEmitter {
+    private readonly controlPlaneUrl;
+    private readonly apiKey;
+    private readonly eventsFilePath;
+    private readonly workspaceId;
+    private readonly mcpProxyMode;
+    constructor(controlPlaneUrl: string, apiKey: string, eventsFilePath: string, workspaceId: string, mcpProxyMode?: string);
+    emit(kind: EventKind, toolName: string, toolInput: unknown, reason?: string): void;
+    private runDualPath;
+    private postToControlPlane;
+    private appendToFile;
+}
+//# sourceMappingURL=emitter.d.ts.map

package/dist/emitter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emitter.d.ts","sourceRoot":"","sources":["../src/emitter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAYH,MAAM,MAAM,SAAS,GAAG,cAAc,GAAG,cAAc,GAAG,eAAe,CAAA;AAEzE,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,SAAS,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,OAAO,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,qBAAa,iBAAiB;IAE1B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAJZ,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,EACnB,YAAY,GAAE,MAAsB;IAGvD,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAkClF,OAAO,CAAC,WAAW;YAYL,kBAAkB;YAoBlB,YAAY;CAM3B"}

package/dist/emitter.js

@@ -0,0 +1,121 @@
+/**
+ * emitter.ts — Dual-path governance event emitter.
+ *
+ * Path A: HTTP POST to /api/v1/hook-events (same endpoint as claudeCodeHooks.ts)
+ * Path B: Append JSONL line to ~/.intutic/events/hook-events.jsonl
+ *
+ * Mirrors the dual-path pattern from claudeCodeHooks.ts / syncLoop.ts.
+ *
+ * @module
+ */
+import * as node_fs from 'node:fs/promises';
+import * as node_https from 'node:https';
+import * as node_http from 'node:http';
+import * as node_path from 'node:path';
+import * as node_crypto from 'node:crypto';
+import { createStderrLogger as createLogger } from './stderrLog.js';
+import { callDaemonSocket } from './daemonClient.js';
+const log = createLogger('mcp-proxy-emitter');
+export class GovernanceEmitter {
+    controlPlaneUrl;
+    apiKey;
+    eventsFilePath;
+    workspaceId;
+    mcpProxyMode;
+    constructor(controlPlaneUrl, apiKey, eventsFilePath, workspaceId, mcpProxyMode = 'per-session') {
+        this.controlPlaneUrl = controlPlaneUrl;
+        this.apiKey = apiKey;
+        this.eventsFilePath = eventsFilePath;
+        this.workspaceId = workspaceId;
+        this.mcpProxyMode = mcpProxyMode;
+    }
+    emit(kind, toolName, toolInput, reason) {
+        const event = {
+            incidentId: node_crypto.randomUUID(),
+            kind,
+            toolName,
+            toolInput,
+            workspaceId: this.workspaceId,
+            harnessType: 'mcp-governance-proxy',
+            reason,
+            timestamp: new Date().toISOString(),
+        };
+        if (this.mcpProxyMode === 'daemon') {
+            const eventPayload = {
+                event: kind === 'tool_blocked' ? 'tool_blocked' : 'tool_allowed',
+                toolName,
+                workspaceId: this.workspaceId,
+                harnessType: 'mcp-governance-proxy',
+                timestamp: event.timestamp,
+                reason,
+                toolInput,
+            };
+            callDaemonSocket('telemetry.enqueue', eventPayload).then(() => {
+                log.debug({ action: 'telemetry_enqueued' }, 'Telemetry successfully enqueued to daemon');
+            }).catch((err) => {
+                log.warn({ action: 'telemetry_daemon_failed', err: err.message }, 'Failed to enqueue telemetry to daemon socket — falling back to dual-path');
+                this.runDualPath(event);
+            });
+            return;
+        }
+        this.runDualPath(event);
+    }
+    runDualPath(event) {
+        // Path A: HTTP POST (best effort)
+        this.postToControlPlane(event).catch((err) => {
+            log.warn({ action: 'emit_path_a_failed', err: err.message }, 'Path A emission failed');
+        });
+        // Path B: JSONL file append (best effort)
+        this.appendToFile(event).catch((err) => {
+            log.warn({ action: 'emit_path_b_failed', err: err.message }, 'Path B emission failed');
+        });
+    }
+    async postToControlPlane(event) {
+        const payload = JSON.stringify({
+            events: [
+                {
+                    event: event.kind === 'tool_blocked' ? 'tool_blocked' : 'tool_allowed',
+                    toolName: event.toolName,
+                    toolInput: event.toolInput,
+                    workspaceId: event.workspaceId,
+                    harnessType: event.harnessType,
+                    incidentId: event.incidentId,
+                    reason: event.reason,
+                    timestamp: event.timestamp,
+                },
+            ],
+        });
+        const url = `${this.controlPlaneUrl}/api/v1/telemetry/enqueue`;
+        await httpPost(url, this.apiKey, payload);
+    }
+    async appendToFile(event) {
+        const dir = node_path.dirname(this.eventsFilePath);
+        await node_fs.mkdir(dir, { recursive: true });
+        const line = JSON.stringify(event) + '\n';
+        await node_fs.appendFile(this.eventsFilePath, line, 'utf-8');
+    }
+}
+function httpPost(url, apiKey, body) {
+    return new Promise((resolve, reject) => {
+        const parsed = new URL(url);
+        const lib = parsed.protocol === 'https:' ? node_https : node_http;
+        const req = lib.request(url, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Content-Length': Buffer.byteLength(body),
+                Authorization: `Bearer ${apiKey}`,
+            },
+            timeout: 4000,
+        }, (res) => {
+            // Drain response body to free socket
+            res.resume();
+            res.on('end', resolve);
+        });
+        req.on('error', reject);
+        req.on('timeout', () => { req.destroy(); reject(new Error('HTTP POST timed out')); });
+        req.write(body);
+        req.end();
+    });
+}
+//# sourceMappingURL=emitter.js.map

package/dist/emitter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../src/emitter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,OAAO,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,UAAU,MAAM,YAAY,CAAA;AACxC,OAAO,KAAK,SAAS,MAAM,WAAW,CAAA;AACtC,OAAO,KAAK,SAAS,MAAM,WAAW,CAAA;AACtC,OAAO,KAAK,WAAW,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,kBAAkB,IAAI,YAAY,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAEpD,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAA;AAe7C,MAAM,OAAO,iBAAiB;IAET;IACA;IACA;IACA;IACA;IALnB,YACmB,eAAuB,EACvB,MAAc,EACd,cAAsB,EACtB,WAAmB,EACnB,eAAuB,aAAa;QAJpC,oBAAe,GAAf,eAAe,CAAQ;QACvB,WAAM,GAAN,MAAM,CAAQ;QACd,mBAAc,GAAd,cAAc,CAAQ;QACtB,gBAAW,GAAX,WAAW,CAAQ;QACnB,iBAAY,GAAZ,YAAY,CAAwB;IACpD,CAAC;IAEJ,IAAI,CAAC,IAAe,EAAE,QAAgB,EAAE,SAAkB,EAAE,MAAe;QACzE,MAAM,KAAK,GAAoB;YAC7B,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE;YACpC,IAAI;YACJ,QAAQ;YACR,SAAS;YACT,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,sBAAsB;YACnC,MAAM;YACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAA;QAED,IAAI,IAAI,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,YAAY,GAAG;gBACnB,KAAK,EAAE,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc;gBAChE,QAAQ;gBACR,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,sBAAsB;gBACnC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM;gBACN,SAAS;aACV,CAAA;YACD,gBAAgB,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5D,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,2CAA2C,CAAC,CAAA;YAC1F,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACf,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,0EAA0E,CAAC,CAAA;gBAC7I,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;YACzB,CAAC,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;IACzB,CAAC;IAEO,WAAW,CAAC,KAAsB;QACxC,kCAAkC;QAClC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,wBAAwB,CAAC,CAAA;QACnG,CAAC,CAAC,CAAA;QAEF,0CAA0C;QAC1C,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACrC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,wBAAwB,CAAC,CAAA;QACnG,CAAC,CAAC,CAAA;IACJ,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,KAAsB;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,MAAM,EAAE;gBACN;oBACE,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc;oBACtE,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B;aACF;SACF,CAAC,CAAA;QAEF,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,2BAA2B,CAAA;QAC9D,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3C,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAAsB;QAC/C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAClD,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAA;QACzC,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IAC9D,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,MAAc,EAAE,IAAY;IACzD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;QACjE,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CACrB,GAAG,EACH;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;gBACzC,aAAa,EAAE,UAAU,MAAM,EAAE;aAClC;YACD,OAAO,EAAE,IAAI;SACd,EACD,CAAC,GAAG,EAAE,EAAE;YACN,qCAAqC;YACrC,GAAG,CAAC,MAAM,EAAE,CAAA;YACZ,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QACxB,CAAC,CACF,CAAA;QACD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACvB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QACpF,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACf,GAAG,CAAC,GAAG,EAAE,CAAA;IACX,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+/**
+ * index.ts — CLI entry point for @intutic/mcp-governance-proxy.
+ *
+ * CRITICAL: In the MCP proxy, stdout is exclusively reserved for JSON-RPC frames.
+ * All logging MUST go to stderr. We redirect pino's output to fd 2 (stderr)
+ * by overriding the destination before any logger is instantiated.
+ *
+ * Usage:
+ *   intutic-mcp-proxy [--workspace-id <id>] -- <real-mcp-server> [args...]
+ *
+ * Example (harness config):
+ *   {
+ *     "command": "node",
+ *     "args": ["/path/to/@intutic/mcp-governance-proxy/dist/index.js",
+ *              "--workspace-id", "ws_xxx",
+ *              "--",
+ *              "npx", "-y", "@modelcontextprotocol/server-filesystem", "/projects"]
+ *   }
+ *
+ * @module
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;GAoBG"}

package/dist/index.js

@@ -0,0 +1,50 @@
+#!/usr/bin/env node
+/**
+ * index.ts — CLI entry point for @intutic/mcp-governance-proxy.
+ *
+ * CRITICAL: In the MCP proxy, stdout is exclusively reserved for JSON-RPC frames.
+ * All logging MUST go to stderr. We redirect pino's output to fd 2 (stderr)
+ * by overriding the destination before any logger is instantiated.
+ *
+ * Usage:
+ *   intutic-mcp-proxy [--workspace-id <id>] -- <real-mcp-server> [args...]
+ *
+ * Example (harness config):
+ *   {
+ *     "command": "node",
+ *     "args": ["/path/to/@intutic/mcp-governance-proxy/dist/index.js",
+ *              "--workspace-id", "ws_xxx",
+ *              "--",
+ *              "npx", "-y", "@modelcontextprotocol/server-filesystem", "/projects"]
+ *   }
+ *
+ * @module
+ */
+import { loadConfig } from './config.js';
+import { McpGovernanceProxy } from './proxy.js';
+import { createStderrLogger as createLogger } from './stderrLog.js';
+const log = createLogger('mcp-proxy-main');
+async function main() {
+    let config;
+    try {
+        config = await loadConfig();
+    }
+    catch (err) {
+        // Write to stderr — never stdout
+        process.stderr.write(`[intutic-mcp-proxy] Configuration error: ${err.message}\n`);
+        process.exit(1);
+    }
+    const proxy = new McpGovernanceProxy(config);
+    try {
+        await proxy.run();
+    }
+    catch (err) {
+        log.error({ action: 'proxy_fatal', err: err.message }, 'Proxy exited with error');
+        process.exit(1);
+    }
+}
+main().catch((err) => {
+    process.stderr.write(`[intutic-mcp-proxy] Fatal error: ${String(err)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAC/C,OAAO,EAAE,kBAAkB,IAAI,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAEnE,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAA;AAE1C,KAAK,UAAU,IAAI;IACjB,IAAI,MAAM,CAAA;IACV,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,UAAU,EAAE,CAAA;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,iCAAiC;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA6C,GAAa,CAAC,OAAO,IAAI,CAAC,CAAA;QAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAE5C,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,GAAG,EAAE,CAAA;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,yBAAyB,CAAC,CAAA;QAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/dist/interceptor.d.ts

@@ -0,0 +1,38 @@
+/**
+ * interceptor.ts — tools/call decision engine.
+ *
+ * Given a tool name and arguments, evaluates:
+ * 1. DLP scan (credential / destructive pattern detection)
+ * 2. SOP policy rules (fetched from control plane via PolicyClient)
+ *
+ * Returns an allow / block / redact decision.
+ *
+ * @module
+ */
+import type { PolicyClient } from './policy.js';
+import type { GovernanceEmitter } from './emitter.js';
+export type Decision = {
+    action: 'allow';
+} | {
+    action: 'block';
+    reason: string;
+} | {
+    action: 'redact';
+    reason: string;
+    redactedInput: unknown;
+};
+export declare class ToolCallInterceptor {
+    private readonly policy;
+    private readonly emitter;
+    private readonly failOpen;
+    constructor(policy: PolicyClient, emitter: GovernanceEmitter, failOpen?: boolean);
+    /**
+     * Evaluate a tools/call request and return a governance decision.
+     *
+     * @param toolName - The MCP tool name (e.g. "mcp__filesystem__read_file" or "Bash")
+     * @param toolInput - The tool_input / arguments object
+     * @returns Decision: allow, block, or redact
+     */
+    decide(toolName: string, toolInput: unknown): Promise<Decision>;
+}
+//# sourceMappingURL=interceptor.d.ts.map

package/dist/interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interceptor.d.ts","sourceRoot":"","sources":["../src/interceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAIrD,MAAM,MAAM,QAAQ,GAChB;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,CAAA;AAEhE,qBAAa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAFR,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,GAAE,OAAc;IAG3C;;;;;;OAMG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;CAgEtE"}

package/dist/interceptor.js

@@ -0,0 +1,93 @@
+/**
+ * interceptor.ts — tools/call decision engine.
+ *
+ * Given a tool name and arguments, evaluates:
+ * 1. DLP scan (credential / destructive pattern detection)
+ * 2. SOP policy rules (fetched from control plane via PolicyClient)
+ *
+ * Returns an allow / block / redact decision.
+ *
+ * @module
+ */
+import { createStderrLogger as createLogger } from './stderrLog.js';
+import { scanToolInput, formatDlpBlockReason } from './dlp.js';
+const log = createLogger('mcp-proxy-interceptor');
+export class ToolCallInterceptor {
+    policy;
+    emitter;
+    failOpen;
+    constructor(policy, emitter, failOpen = true) {
+        this.policy = policy;
+        this.emitter = emitter;
+        this.failOpen = failOpen;
+    }
+    /**
+     * Evaluate a tools/call request and return a governance decision.
+     *
+     * @param toolName - The MCP tool name (e.g. "mcp__filesystem__read_file" or "Bash")
+     * @param toolInput - The tool_input / arguments object
+     * @returns Decision: allow, block, or redact
+     */
+    async decide(toolName, toolInput) {
+        log.debug({ action: 'interceptor_decide', toolName }, 'Evaluating tool call');
+        // 1. DLP scan
+        try {
+            const dlp = scanToolInput(toolInput);
+            if (dlp.hasFinding) {
+                const reason = formatDlpBlockReason(dlp.findings);
+                log.warn({ action: 'dlp_block', toolName, findings: dlp.findings }, 'DLP block');
+                this.emitter.emit('tool_blocked', toolName, toolInput, reason);
+                return { action: 'block', reason };
+            }
+        }
+        catch (err) {
+            log.error({ action: 'dlp_error', err: err.message }, 'DLP scan error — skipping');
+            if (!this.failOpen) {
+                return {
+                    action: 'block',
+                    reason: 'Governance check failed — Intutic control plane unreachable. ' +
+                        'Tool call blocked by workspace policy (fail-closed mode). ' +
+                        'Contact your administrator or update mcpProxyFailBehavior to open.',
+                };
+            }
+        }
+        // 2. SOP policy rule match
+        try {
+            const toolInputJson = JSON.stringify(toolInput ?? {});
+            const rule = this.policy.matchRule(toolName, toolInputJson);
+            if (rule) {
+                if (rule.action === 'block') {
+                    log.warn({ action: 'policy_block', toolName, ruleId: rule.id, reason: rule.reason }, 'Policy block');
+                    this.emitter.emit('tool_blocked', toolName, toolInput, rule.reason);
+                    return { action: 'block', reason: rule.reason };
+                }
+                if (rule.action === 'warn') {
+                    log.warn({ action: 'policy_warn', toolName, ruleId: rule.id, reason: rule.reason }, 'Policy warning (allowing)');
+                    // Fall through to allow — warnings are logged only
+                }
+                // 'require_approval' treated as block in headless proxy (no interactive UI)
+                if (rule.action === 'require_approval') {
+                    const reason = `Tool requires human approval per SOP rule ${rule.id}: ${rule.reason}`;
+                    log.warn({ action: 'policy_approval_required', toolName, ruleId: rule.id }, reason);
+                    this.emitter.emit('tool_blocked', toolName, toolInput, reason);
+                    return { action: 'block', reason };
+                }
+            }
+        }
+        catch (err) {
+            log.error({ action: 'policy_error', err: err.message }, 'Policy evaluation error');
+            if (!this.failOpen) {
+                return {
+                    action: 'block',
+                    reason: 'Governance check failed — Intutic control plane unreachable. ' +
+                        'Tool call blocked by workspace policy (fail-closed mode). ' +
+                        'Contact your administrator or update mcpProxyFailBehavior to open.',
+                };
+            }
+        }
+        // 3. Allow — emit telemetry event
+        this.emitter.emit('tool_allowed', toolName, toolInput);
+        return { action: 'allow' };
+    }
+}
+//# sourceMappingURL=interceptor.js.map

package/dist/interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interceptor.js","sourceRoot":"","sources":["../src/interceptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,kBAAkB,IAAI,YAAY,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAI9D,MAAM,GAAG,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAA;AAOjD,MAAM,OAAO,mBAAmB;IAEX;IACA;IACA;IAHnB,YACmB,MAAoB,EACpB,OAA0B,EAC1B,WAAoB,IAAI;QAFxB,WAAM,GAAN,MAAM,CAAc;QACpB,YAAO,GAAP,OAAO,CAAmB;QAC1B,aAAQ,GAAR,QAAQ,CAAgB;IACxC,CAAC;IAEJ;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,SAAkB;QAC/C,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,EAAE,sBAAsB,CAAC,CAAA;QAE7E,cAAc;QACd,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;YACpC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;gBACnB,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBACjD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,WAAW,CAAC,CAAA;gBAChF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;gBAC9D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;YACpC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,2BAA2B,CAAC,CAAA;YAC5F,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,OAAO;oBACL,MAAM,EAAE,OAAO;oBACf,MAAM,EACJ,+DAA+D;wBAC/D,4DAA4D;wBAC5D,oEAAoE;iBACvE,CAAA;YACH,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;YACrD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;YAC3D,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAA;oBACpG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;oBACnE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAA;gBACjD,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAA;oBAChH,mDAAmD;gBACrD,CAAC;gBACD,4EAA4E;gBAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;oBACvC,MAAM,MAAM,GAAG,6CAA6C,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,EAAE,CAAA;oBACrF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;oBACnF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;oBAC9D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,yBAAyB,CAAC,CAAA;YAC7F,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,OAAO;oBACL,MAAM,EAAE,OAAO;oBACf,MAAM,EACJ,+DAA+D;wBAC/D,4DAA4D;wBAC5D,oEAAoE;iBACvE,CAAA;YACH,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;QACtD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;IAC5B,CAAC;CACF"}

package/dist/policy.d.ts

@@ -0,0 +1,41 @@
+/**
+ * policy.ts — PolicyClient: fetches and caches SOP governance rules from the Intutic control plane.
+ *
+ * Rules are refreshed every policyTtlMs (default: 60s). On fetch failure, the
+ * last-known-good set is retained (fail-open behaviour).
+ *
+ * @module
+ */
+export interface SopRule {
+    id: string;
+    /** Regex pattern matched against tool name (e.g. "mcp__github__.*" or "Bash") */
+    toolPattern: string;
+    /** Optional regex matched against JSON.stringify(tool_input) */
+    argPattern?: string;
+    /** Action to take when the rule matches */
+    action: 'block' | 'warn' | 'require_approval';
+    /** Human-readable reason reported back to harness */
+    reason: string;
+}
+export declare class PolicyClient {
+    private readonly controlPlaneUrl;
+    private readonly apiKey;
+    private readonly workspaceId;
+    private readonly ttlMs;
+    private readonly mcpProxyMode;
+    private rules;
+    private lastFetchAt;
+    private refreshTimer;
+    constructor(controlPlaneUrl: string, apiKey: string, workspaceId: string, ttlMs?: number, mcpProxyMode?: string);
+    /** Start background refresh timer. */
+    start(): void;
+    /** Stop the background refresh timer. */
+    stop(): void;
+    /** Return the current cached rule set. */
+    getRules(): readonly SopRule[];
+    /** Find the first matching rule for a given tool name + serialized args. */
+    matchRule(toolName: string, toolInputJson: string): SopRule | null;
+    /** Fetch fresh rules from the control plane. */
+    refresh(): Promise<void>;
+}
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,iFAAiF;IACjF,WAAW,EAAE,MAAM,CAAA;IACnB,gEAAgE;IAChE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2CAA2C;IAC3C,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAA;IAC7C,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAA;CACf;AAMD,qBAAa,YAAY;IAMrB,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAT/B,OAAO,CAAC,KAAK,CAAgB;IAC7B,OAAO,CAAC,WAAW,CAAI;IACvB,OAAO,CAAC,YAAY,CAA8B;gBAG/B,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,KAAK,GAAE,MAAe,EACtB,YAAY,GAAE,MAAsB;IAGvD,sCAAsC;IACtC,KAAK,IAAI,IAAI;IAab,yCAAyC;IACzC,IAAI,IAAI,IAAI;IAOZ,0CAA0C;IAC1C,QAAQ,IAAI,SAAS,OAAO,EAAE;IAI9B,4EAA4E;IAC5E,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI;IAiBlE,gDAAgD;IAC1C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAyB/B"}

package/dist/policy.js

@@ -0,0 +1,130 @@
+/**
+ * policy.ts — PolicyClient: fetches and caches SOP governance rules from the Intutic control plane.
+ *
+ * Rules are refreshed every policyTtlMs (default: 60s). On fetch failure, the
+ * last-known-good set is retained (fail-open behaviour).
+ *
+ * @module
+ */
+import * as node_https from 'node:https';
+import * as node_http from 'node:http';
+import { createStderrLogger as createLogger } from './stderrLog.js';
+import { callDaemonSocket } from './daemonClient.js';
+const log = createLogger('mcp-proxy-policy');
+export class PolicyClient {
+    controlPlaneUrl;
+    apiKey;
+    workspaceId;
+    ttlMs;
+    mcpProxyMode;
+    rules = [];
+    lastFetchAt = 0;
+    refreshTimer = null;
+    constructor(controlPlaneUrl, apiKey, workspaceId, ttlMs = 60_000, mcpProxyMode = 'per-session') {
+        this.controlPlaneUrl = controlPlaneUrl;
+        this.apiKey = apiKey;
+        this.workspaceId = workspaceId;
+        this.ttlMs = ttlMs;
+        this.mcpProxyMode = mcpProxyMode;
+    }
+    /** Start background refresh timer. */
+    start() {
+        this.refreshTimer = setInterval(() => {
+            void this.refresh().catch(() => {
+                // Errors already logged inside refresh()
+            });
+        }, this.ttlMs);
+        // Don't block Node.js exit on this timer
+        this.refreshTimer.unref();
+        // Kick off initial fetch (non-blocking — proxy starts immediately)
+        void this.refresh().catch(() => { });
+    }
+    /** Stop the background refresh timer. */
+    stop() {
+        if (this.refreshTimer) {
+            clearInterval(this.refreshTimer);
+            this.refreshTimer = null;
+        }
+    }
+    /** Return the current cached rule set. */
+    getRules() {
+        return this.rules;
+    }
+    /** Find the first matching rule for a given tool name + serialized args. */
+    matchRule(toolName, toolInputJson) {
+        for (const rule of this.rules) {
+            try {
+                const toolRegex = new RegExp(rule.toolPattern);
+                if (!toolRegex.test(toolName))
+                    continue;
+                if (rule.argPattern) {
+                    const argRegex = new RegExp(rule.argPattern);
+                    if (!argRegex.test(toolInputJson))
+                        continue;
+                }
+                return rule;
+            }
+            catch {
+                // Malformed regex in rule — skip silently
+            }
+        }
+        return null;
+    }
+    /** Fetch fresh rules from the control plane. */
+    async refresh() {
+        if (this.mcpProxyMode === 'daemon') {
+            try {
+                const policy = await callDaemonSocket('policy.get', { workspaceId: this.workspaceId });
+                if (policy) {
+                    this.rules = (policy.sopRules || []);
+                    this.lastFetchAt = Date.now();
+                    log.info({ action: 'policy_refreshed_from_daemon', ruleCount: this.rules.length }, 'SOP rules refreshed from daemon');
+                    return;
+                }
+            }
+            catch (err) {
+                log.warn({ action: 'policy_daemon_failed', err: err.message }, 'Failed to refresh policy from daemon socket — falling back to HTTP');
+            }
+        }
+        const url = `${this.controlPlaneUrl}/api/v1/sop/rules?workspaceId=${encodeURIComponent(this.workspaceId)}&active=true`;
+        log.debug({ action: 'policy_refresh', url }, 'Fetching SOP rules from control plane');
+        const body = await httpGet(url, this.apiKey);
+        const parsed = JSON.parse(body);
+        const rules = Array.isArray(parsed.rules) ? parsed.rules : [];
+        this.rules = rules;
+        this.lastFetchAt = Date.now();
+        log.info({ action: 'policy_refreshed', ruleCount: rules.length }, 'SOP rules refreshed');
+    }
+}
+/** Minimal HTTP/HTTPS GET helper (avoids fetch / node-fetch dep). */
+function httpGet(url, apiKey) {
+    return new Promise((resolve, reject) => {
+        const parsed = new URL(url);
+        const lib = parsed.protocol === 'https:' ? node_https : node_http;
+        const req = lib.get(url, {
+            headers: {
+                Authorization: `Bearer ${apiKey}`,
+                Accept: 'application/json',
+            },
+            timeout: 5000,
+        }, (res) => {
+            const chunks = [];
+            res.on('data', (c) => chunks.push(c));
+            res.on('end', () => {
+                const body = Buffer.concat(chunks).toString('utf-8');
+                if ((res.statusCode ?? 0) >= 400) {
+                    reject(new Error(`HTTP ${res.statusCode ?? 'unknown'}: ${body}`));
+                }
+                else {
+                    resolve(body);
+                }
+            });
+        });
+        req.on('error', reject);
+        req.on('timeout', () => {
+            req.destroy();
+            reject(new Error('Policy fetch timed out'));
+        });
+    });
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,UAAU,MAAM,YAAY,CAAA;AACxC,OAAO,KAAK,SAAS,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,kBAAkB,IAAI,YAAY,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAEpD,MAAM,GAAG,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAA;AAkB5C,MAAM,OAAO,YAAY;IAMJ;IACA;IACA;IACA;IACA;IATX,KAAK,GAAc,EAAE,CAAA;IACrB,WAAW,GAAG,CAAC,CAAA;IACf,YAAY,GAA0B,IAAI,CAAA;IAElD,YACmB,eAAuB,EACvB,MAAc,EACd,WAAmB,EACnB,QAAgB,MAAM,EACtB,eAAuB,aAAa;QAJpC,oBAAe,GAAf,eAAe,CAAQ;QACvB,WAAM,GAAN,MAAM,CAAQ;QACd,gBAAW,GAAX,WAAW,CAAQ;QACnB,UAAK,GAAL,KAAK,CAAiB;QACtB,iBAAY,GAAZ,YAAY,CAAwB;IACpD,CAAC;IAEJ,sCAAsC;IACtC,KAAK;QACH,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACnC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC7B,yCAAyC;YAC3C,CAAC,CAAC,CAAA;QACJ,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;QACd,yCAAyC;QACzC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAA;QAEzB,mEAAmE;QACnE,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACrC,CAAC;IAED,yCAAyC;IACzC,IAAI;QACF,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAA;QAC1B,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAA;IACnB,CAAC;IAED,4EAA4E;IAC5E,SAAS,CAAC,QAAgB,EAAE,aAAqB;QAC/C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;gBAC9C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,SAAQ;gBACvC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBACpB,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;oBAC5C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;wBAAE,SAAQ;gBAC7C,CAAC;gBACD,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,YAAY,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;gBACtF,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAc,CAAA;oBACjD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;oBAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,8BAA8B,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,iCAAiC,CAAC,CAAA;oBACrH,OAAM;gBACR,CAAC;YACH,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,oEAAoE,CAAC,CAAA;YACtI,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,iCAAiC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAA;QACtH,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,uCAAuC,CAAC,CAAA;QAErF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,CAAA;QACnD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QAC7D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;QAClB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAA;IAC1F,CAAC;CACF;AAED,qEAAqE;AACrE,SAAS,OAAO,CAAC,GAAW,EAAE,MAAc;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;QACjE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CACjB,GAAG,EACH;YACE,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,MAAM,EAAE,kBAAkB;aAC3B;YACD,OAAO,EAAE,IAAI;SACd,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAA;YAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;YAC7C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;gBACpD,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;oBACjC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,UAAU,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC,CAAC,CAAA;gBACnE,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,CAAA;gBACf,CAAC;YACH,CAAC,CAAC,CAAA;QACJ,CAAC,CACF,CAAA;QACD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACvB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,OAAO,EAAE,CAAA;YACb,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAA;QAC7C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/proxy.d.ts

@@ -0,0 +1,43 @@
+/**
+ * proxy.ts — McpGovernanceProxy: transparent stdio MCP proxy with governance interception.
+ *
+ * Architecture (proxy mode):
+ *   Harness stdin → [McpGovernanceProxy] → real MCP server stdin
+ *   Real MCP server stdout → [McpGovernanceProxy] → Harness stdout
+ *
+ * Architecture (standalone mode — the `intutic` harness entry):
+ *   Harness ↔ [McpGovernanceProxy as MCP Server] ↔ Control Plane REST API
+ *   Exposes governance tools: intutic_governance_status, intutic_list_sops, intutic_list_incidents.
+ *
+ * CRITICAL: Never write to process.stdout except for valid JSON-RPC frames.
+ *           All logging MUST go to process.stderr via @intutic/logger.
+ *
+ * JSON-RPC framing: newline-delimited JSON (one JSON object per line).
+ *
+ * @module
+ */
+import type { ProxyConfig } from './config.js';
+export declare class McpGovernanceProxy {
+    private readonly config;
+    private readonly policy;
+    private readonly emitter;
+    private readonly interceptor;
+    private realServer;
+    constructor(config: ProxyConfig);
+    /**
+     * Start the proxy. Dispatches to standalone or proxy mode based on config.
+     */
+    run(): Promise<void>;
+    /**
+     * Run as a standalone MCP server (the `intutic` harness entry).
+     * Exposes Intutic governance tools directly to the harness.
+     * Gracefully degrades when the control plane is unreachable.
+     */
+    private runStandalone;
+    /**
+     * Start the proxy. Spawns the real MCP server and begins proxying stdin/stdout.
+     * Returns a promise that resolves when the real server exits.
+     */
+    private runProxy;
+}
+//# sourceMappingURL=proxy.d.ts.map

package/dist/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAkD9C,qBAAa,kBAAkB;IAMjB,OAAO,CAAC,QAAQ,CAAC,MAAM;IALnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmB;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IACjD,OAAO,CAAC,UAAU,CAAuC;gBAE5B,MAAM,EAAE,WAAW;IAoBhD;;OAEG;IACG,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;IAS1B;;;;OAIG;YACW,aAAa;IA0G3B;;;OAGG;YACW,QAAQ;CAqGvB"}