@intutic/mcp-governance-proxy 1.0.3

package/dist/proxy.js

@@ -0,0 +1,238 @@
+/**
+ * proxy.ts — McpGovernanceProxy: transparent stdio MCP proxy with governance interception.
+ *
+ * Architecture (proxy mode):
+ *   Harness stdin → [McpGovernanceProxy] → real MCP server stdin
+ *   Real MCP server stdout → [McpGovernanceProxy] → Harness stdout
+ *
+ * Architecture (standalone mode — the `intutic` harness entry):
+ *   Harness ↔ [McpGovernanceProxy as MCP Server] ↔ Control Plane REST API
+ *   Exposes governance tools: intutic_governance_status, intutic_list_sops, intutic_list_incidents.
+ *
+ * CRITICAL: Never write to process.stdout except for valid JSON-RPC frames.
+ *           All logging MUST go to process.stderr via @intutic/logger.
+ *
+ * JSON-RPC framing: newline-delimited JSON (one JSON object per line).
+ *
+ * @module
+ */
+import * as node_child from 'node:child_process';
+import * as node_readline from 'node:readline';
+import { createStderrLogger as createLogger } from './stderrLog.js';
+import { PolicyClient } from './policy.js';
+import { GovernanceEmitter } from './emitter.js';
+import { ToolCallInterceptor } from './interceptor.js';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { z } from 'zod';
+const log = createLogger('mcp-governance-proxy');
+/**
+ * Build a JSON-RPC 2.0 error response for a blocked tool call.
+ */
+function buildBlockResponse(id, reason) {
+    return {
+        jsonrpc: '2.0',
+        id,
+        error: {
+            code: -32603, // Internal error (closest standard code to "blocked")
+            message: `[Intutic Governance] Tool call blocked: ${reason}`,
+        },
+    };
+}
+/**
+ * Write a JSON-RPC frame to stdout (the ONLY valid place to write in a stdio MCP proxy).
+ */
+function writeFrame(frame) {
+    process.stdout.write(JSON.stringify(frame) + '\n');
+}
+export class McpGovernanceProxy {
+    config;
+    policy;
+    emitter;
+    interceptor;
+    realServer = null;
+    constructor(config) {
+        this.config = config;
+        this.policy = new PolicyClient(config.controlPlaneUrl, config.apiKey, config.workspaceId, config.policyTtlMs, config.mcpProxyMode);
+        this.emitter = new GovernanceEmitter(config.controlPlaneUrl, config.apiKey, config.eventsFilePath, config.workspaceId, config.mcpProxyMode);
+        this.interceptor = new ToolCallInterceptor(this.policy, this.emitter, config.failOpen);
+    }
+    /**
+     * Start the proxy. Dispatches to standalone or proxy mode based on config.
+     */
+    async run() {
+        if (this.config.standalone) {
+            return this.runStandalone();
+        }
+        return this.runProxy();
+    }
+    // ─── Standalone MCP Server Mode ──────────────────────────────────────────────
+    /**
+     * Run as a standalone MCP server (the `intutic` harness entry).
+     * Exposes Intutic governance tools directly to the harness.
+     * Gracefully degrades when the control plane is unreachable.
+     */
+    async runStandalone() {
+        log.info({ action: 'standalone_start', workspaceId: this.config.workspaceId }, 'Starting Intutic MCP governance server (standalone mode)');
+        const server = new McpServer({
+            name: 'intutic',
+            version: '0.1.0',
+        });
+        const cpUrl = this.config.controlPlaneUrl;
+        const apiKey = this.config.apiKey;
+        const workspaceId = this.config.workspaceId;
+        /**
+         * Helper: call control plane REST API.
+         * Returns null on any error (graceful degradation — never crashes the MCP server).
+         */
+        async function callControlPlane(path) {
+            try {
+                const res = await fetch(`${cpUrl}${path}`, {
+                    headers: {
+                        'Authorization': `Bearer ${apiKey}`,
+                        'x-workspace-id': workspaceId,
+                    },
+                    signal: AbortSignal.timeout(5000),
+                });
+                if (!res.ok)
+                    return null;
+                return res.json();
+            }
+            catch {
+                return null;
+            }
+        }
+        // Tool: intutic_governance_status
+        server.tool('intutic_governance_status', 'Returns the current governance status and health of the Intutic control plane for this workspace.', {}, async () => {
+            const health = await callControlPlane('/healthz');
+            const status = health
+                ? { connected: true, controlPlane: cpUrl, workspaceId, ...health }
+                : { connected: false, controlPlane: cpUrl, workspaceId, error: 'Control plane unreachable' };
+            return {
+                content: [{ type: 'text', text: JSON.stringify(status, null, 2) }],
+            };
+        });
+        // Tool: intutic_list_sops
+        server.tool('intutic_list_sops', 'Lists Standard Operating Procedures (SOPs) active in this workspace.', { limit: z.number().int().min(1).max(50).default(10).describe('Number of SOPs to return (1–50)') }, async ({ limit }) => {
+            const data = await callControlPlane(`/api/v1/sops?workspaceId=${workspaceId}&limit=${limit}`);
+            const text = data
+                ? JSON.stringify(data, null, 2)
+                : 'Could not reach control plane to list SOPs.';
+            return {
+                content: [{ type: 'text', text }],
+            };
+        });
+        // Tool: intutic_list_incidents
+        server.tool('intutic_list_incidents', 'Lists recent governance incidents (policy violations, blocked tool calls) in this workspace.', { limit: z.number().int().min(1).max(50).default(10).describe('Number of incidents to return (1–50)') }, async ({ limit }) => {
+            const data = await callControlPlane(`/api/v1/incidents?workspaceId=${workspaceId}&limit=${limit}`);
+            const text = data
+                ? JSON.stringify(data, null, 2)
+                : 'Could not reach control plane to list incidents.';
+            return {
+                content: [{ type: 'text', text }],
+            };
+        });
+        const transport = new StdioServerTransport();
+        await server.connect(transport);
+        log.info({ action: 'standalone_ready' }, 'Intutic MCP server ready');
+        // Keep alive until stdin closes (harness disconnects)
+        await new Promise((resolve) => {
+            process.stdin.on('close', resolve);
+            process.on('SIGINT', resolve);
+            process.on('SIGTERM', resolve);
+        });
+        await server.close();
+    }
+    // ─── Proxy Mode ───────────────────────────────────────────────────────────────
+    /**
+     * Start the proxy. Spawns the real MCP server and begins proxying stdin/stdout.
+     * Returns a promise that resolves when the real server exits.
+     */
+    async runProxy() {
+        const [cmd, ...args] = this.config.realServerCommand;
+        log.info({ action: 'proxy_start', cmd, args, workspaceId: this.config.workspaceId }, 'Starting MCP governance proxy');
+        // Start background policy refresh
+        this.policy.start();
+        // Spawn the real MCP server
+        const realServer = node_child.spawn(cmd, args, {
+            stdio: ['pipe', 'pipe', 'inherit'], // inherit stderr so real server logs appear normally
+        });
+        this.realServer = realServer;
+        // Handle graceful shutdown
+        const shutdown = (signal) => {
+            log.info({ action: 'proxy_shutdown', signal }, 'Shutting down MCP governance proxy');
+            this.policy.stop();
+            if (!realServer.killed) {
+                realServer.kill();
+            }
+            process.exit(0);
+        };
+        process.on('SIGINT', () => shutdown('SIGINT'));
+        process.on('SIGTERM', () => shutdown('SIGTERM'));
+        // Real server stdout → harness stdout (pass through)
+        realServer.stdout.on('data', (chunk) => {
+            process.stdout.write(chunk);
+        });
+        // Harness stdin → governance interceptor → real server stdin
+        const rl = node_readline.createInterface({ input: process.stdin, terminal: false });
+        rl.on('line', (line) => {
+            const trimmed = line.trim();
+            if (!trimmed)
+                return;
+            let msg;
+            try {
+                msg = JSON.parse(trimmed);
+            }
+            catch {
+                log.warn({ action: 'parse_error', line: trimmed.slice(0, 100) }, 'Failed to parse JSON-RPC line');
+                return;
+            }
+            // Intercept tools/call
+            if (msg.method === 'tools/call') {
+                const params = msg.params;
+                const toolName = params?.name ?? '<unknown>';
+                const toolInput = params?.arguments ?? {};
+                // Run governance check asynchronously
+                this.interceptor.decide(toolName, toolInput).then((decision) => {
+                    if (decision.action === 'block') {
+                        log.warn({ action: 'tool_blocked', toolName, reason: decision.reason }, 'Tool call blocked by governance proxy');
+                        writeFrame(buildBlockResponse(msg.id, decision.reason));
+                    }
+                    else {
+                        // Allow: forward to real server
+                        realServer.stdin.write(line + '\n');
+                    }
+                }).catch((err) => {
+                    // Governance check failed — fail-open: forward to real server
+                    log.error({ action: 'interceptor_error', err: err.message }, 'Interceptor error — failing open');
+                    realServer.stdin.write(line + '\n');
+                });
+            }
+            else {
+                // Non-tools/call messages pass through immediately
+                realServer.stdin.write(line + '\n');
+            }
+        });
+        rl.on('close', () => {
+            log.info({ action: 'stdin_closed' }, 'Harness stdin closed — shutting down');
+            this.policy.stop();
+            if (!realServer.killed) {
+                realServer.kill();
+            }
+        });
+        // Wait for the real server to exit
+        return new Promise((resolve, reject) => {
+            realServer.on('exit', (code, signal) => {
+                log.info({ action: 'real_server_exit', code, signal }, 'Real MCP server exited');
+                this.policy.stop();
+                resolve();
+            });
+            realServer.on('error', (err) => {
+                log.error({ action: 'real_server_error', err: err.message }, 'Real MCP server process error');
+                this.policy.stop();
+                reject(err);
+            });
+        });
+    }
+}
+//# sourceMappingURL=proxy.js.map

package/dist/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,UAAU,MAAM,oBAAoB,CAAA;AAChD,OAAO,KAAK,aAAa,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,kBAAkB,IAAI,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAEnE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAA;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAChF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,GAAG,GAAG,YAAY,CAAC,sBAAsB,CAAC,CAAA;AAqBhD;;GAEG;AACH,SAAS,kBAAkB,CAAC,EAA0B,EAAE,MAAc;IACpE,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE;YACL,IAAI,EAAE,CAAC,KAAK,EAAE,sDAAsD;YACpE,OAAO,EAAE,2CAA2C,MAAM,EAAE;SAC7D;KACF,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAA;AACpD,CAAC;AAED,MAAM,OAAO,kBAAkB;IAMA;IALZ,MAAM,CAAc;IACpB,OAAO,CAAmB;IAC1B,WAAW,CAAqB;IACzC,UAAU,GAAmC,IAAI,CAAA;IAEzD,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;QAC9C,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAC5B,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,YAAY,CACpB,CAAA;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,iBAAiB,CAClC,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,YAAY,CACpB,CAAA;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IACxF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG;QACP,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,aAAa,EAAE,CAAA;QAC7B,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAA;IACxB,CAAC;IAED,gFAAgF;IAEhF;;;;OAIG;IACK,KAAK,CAAC,aAAa;QACzB,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EACpE,0DAA0D,CAC3D,CAAA;QAED,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;YAC3B,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,OAAO;SACjB,CAAC,CAAA;QAEF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAA;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;QAE3C;;;WAGG;QACH,KAAK,UAAU,gBAAgB,CAAC,IAAY;YAC1C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,KAAK,GAAG,IAAI,EAAE,EAAE;oBACzC,OAAO,EAAE;wBACP,eAAe,EAAE,UAAU,MAAM,EAAE;wBACnC,gBAAgB,EAAE,WAAW;qBAC9B;oBACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAA;gBACF,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAA;gBACxB,OAAO,GAAG,CAAC,IAAI,EAAE,CAAA;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QAED,kCAAkC;QAClC,MAAM,CAAC,IAAI,CACT,2BAA2B,EAC3B,mGAAmG,EACnG,EAAE,EACF,KAAK,IAAI,EAAE;YACT,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAmC,CAAA;YACnF,MAAM,MAAM,GAAG,MAAM;gBACnB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,EAAE;gBAClE,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAA;YAE9F,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5E,CAAA;QACH,CAAC,CACF,CAAA;QAED,0BAA0B;QAC1B,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,sEAAsE,EACtE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EAAE,EAClG,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAClB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CACjC,4BAA4B,WAAW,UAAU,KAAK,EAAE,CACvB,CAAA;YACnC,MAAM,IAAI,GAAG,IAAI;gBACf,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/B,CAAC,CAAC,6CAA6C,CAAA;YAEjD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC;aAC3C,CAAA;QACH,CAAC,CACF,CAAA;QAED,+BAA+B;QAC/B,MAAM,CAAC,IAAI,CACT,wBAAwB,EACxB,8FAA8F,EAC9F,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC,EAAE,EACvG,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAClB,MAAM,IAAI,GAAG,MAAM,gBAAgB,CACjC,iCAAiC,WAAW,UAAU,KAAK,EAAE,CAC5B,CAAA;YACnC,MAAM,IAAI,GAAG,IAAI;gBACf,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/B,CAAC,CAAC,kDAAkD,CAAA;YAEtD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC;aAC3C,CAAA;QACH,CAAC,CACF,CAAA;QAED,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAA;QAC5C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,0BAA0B,CAAC,CAAA;QAEpE,sDAAsD;QACtD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAClC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YAC7B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;QAEF,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IAED,iFAAiF;IAEjF;;;OAGG;IACK,KAAK,CAAC,QAAQ;QACpB,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAA;QAEpD,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAC1E,+BAA+B,CAChC,CAAA;QAED,kCAAkC;QAClC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QAEnB,4BAA4B;QAC5B,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,GAAI,EAAE,IAAI,EAAE;YAC9C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,qDAAqD;SAC1F,CAAC,CAAA;QAEF,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAE5B,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;YAClC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,oCAAoC,CAAC,CAAA;YACpF,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;YAClB,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBACvB,UAAU,CAAC,IAAI,EAAE,CAAA;YACnB,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC,CAAA;QACD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC9C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;QAEhD,qDAAqD;QACrD,UAAU,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC7B,CAAC,CAAC,CAAA;QAEF,6DAA6D;QAC7D,MAAM,EAAE,GAAG,aAAa,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QAEnF,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;YAC3B,IAAI,CAAC,OAAO;gBAAE,OAAM;YAEpB,IAAI,GAAmB,CAAA;YACvB,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAA;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,+BAA+B,CAAC,CAAA;gBACjG,OAAM;YACR,CAAC;YAED,uBAAuB;YACvB,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAwC,CAAA;gBAC3D,MAAM,QAAQ,GAAG,MAAM,EAAE,IAAI,IAAI,WAAW,CAAA;gBAC5C,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,EAAE,CAAA;gBAEzC,sCAAsC;gBACtC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;oBAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;wBAChC,GAAG,CAAC,IAAI,CACN,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAC7D,uCAAuC,CACxC,CAAA;wBACD,UAAU,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;oBACzD,CAAC;yBAAM,CAAC;wBACN,gCAAgC;wBAChC,UAAU,CAAC,KAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;oBACtC,CAAC;gBACH,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACf,8DAA8D;oBAC9D,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,kCAAkC,CAAC,CAAA;oBAC3G,UAAU,CAAC,KAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;gBACtC,CAAC,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,mDAAmD;gBACnD,UAAU,CAAC,KAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;YACtC,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAClB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,sCAAsC,CAAC,CAAA;YAC5E,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;YAClB,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBACvB,UAAU,CAAC,IAAI,EAAE,CAAA;YACnB,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,mCAAmC;QACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBACrC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAA;gBAChF,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;gBAClB,OAAO,EAAE,CAAA;YACX,CAAC,CAAC,CAAA;YACF,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC7B,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,+BAA+B,CAAC,CAAA;gBAC7F,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;gBAClB,MAAM,CAAC,GAAG,CAAC,CAAA;YACb,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;CACF"}

package/dist/stderrLog.d.ts

@@ -0,0 +1,32 @@
+/**
+ * stderrLog.ts — Lightweight structured logger for the MCP governance proxy.
+ *
+ * CRITICAL: In an MCP stdio server, stdout is exclusively for JSON-RPC frames.
+ * This module bypasses pino (which defaults to stdout) and writes structured
+ * JSON logs directly to process.stderr (fd 2).
+ *
+ * Do NOT use @intutic/logger anywhere in packages/mcp-proxy — it routes to
+ * stdout unless PINO_DEST=stderr is set, which is fragile across harnesses.
+ *
+ * @module
+ */
+interface LogBindings {
+    [key: string]: unknown;
+}
+/**
+ * A stderr-only structured logger that matches the @intutic/logger call surface.
+ */
+export declare class StderrLogger {
+    private readonly name;
+    private readonly staticBindings;
+    constructor(name: string, bindings?: LogBindings);
+    private write;
+    debug(bindings: LogBindings, msg: string): void;
+    info(bindings: LogBindings, msg: string): void;
+    warn(bindings: LogBindings, msg: string): void;
+    error(bindings: LogBindings, msg: string): void;
+    child(bindings: LogBindings): StderrLogger;
+}
+export declare function createStderrLogger(name: string, bindings?: LogBindings): StderrLogger;
+export {};
+//# sourceMappingURL=stderrLog.d.ts.map

package/dist/stderrLog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stderrLog.d.ts","sourceRoot":"","sources":["../src/stderrLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,UAAU,WAAW;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAQ;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAa;gBAEhC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,WAAgB;IAKpD,OAAO,CAAC,KAAK;IAYb,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAC/C,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAC9C,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAC9C,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAE/C,KAAK,CAAC,QAAQ,EAAE,WAAW,GAAG,YAAY;CAG3C;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,WAAW,GAAG,YAAY,CAErF"}

package/dist/stderrLog.js

@@ -0,0 +1,45 @@
+/**
+ * stderrLog.ts — Lightweight structured logger for the MCP governance proxy.
+ *
+ * CRITICAL: In an MCP stdio server, stdout is exclusively for JSON-RPC frames.
+ * This module bypasses pino (which defaults to stdout) and writes structured
+ * JSON logs directly to process.stderr (fd 2).
+ *
+ * Do NOT use @intutic/logger anywhere in packages/mcp-proxy — it routes to
+ * stdout unless PINO_DEST=stderr is set, which is fragile across harnesses.
+ *
+ * @module
+ */
+/**
+ * A stderr-only structured logger that matches the @intutic/logger call surface.
+ */
+export class StderrLogger {
+    name;
+    staticBindings;
+    constructor(name, bindings = {}) {
+        this.name = name;
+        this.staticBindings = bindings;
+    }
+    write(level, bindings, msg) {
+        const entry = {
+            level,
+            time: new Date().toISOString(),
+            name: this.name,
+            ...this.staticBindings,
+            ...bindings,
+            msg,
+        };
+        process.stderr.write(JSON.stringify(entry) + '\n');
+    }
+    debug(bindings, msg) { this.write('debug', bindings, msg); }
+    info(bindings, msg) { this.write('info', bindings, msg); }
+    warn(bindings, msg) { this.write('warn', bindings, msg); }
+    error(bindings, msg) { this.write('error', bindings, msg); }
+    child(bindings) {
+        return new StderrLogger(this.name, { ...this.staticBindings, ...bindings });
+    }
+}
+export function createStderrLogger(name, bindings) {
+    return new StderrLogger(name, bindings);
+}
+//# sourceMappingURL=stderrLog.js.map

package/dist/stderrLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stderrLog.js","sourceRoot":"","sources":["../src/stderrLog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAQH;;GAEG;AACH,MAAM,OAAO,YAAY;IACN,IAAI,CAAQ;IACZ,cAAc,CAAa;IAE5C,YAAY,IAAY,EAAE,WAAwB,EAAE;QAClD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAA;IAChC,CAAC;IAEO,KAAK,CAAC,KAAe,EAAE,QAAqB,EAAE,GAAW;QAC/D,MAAM,KAAK,GAAG;YACZ,KAAK;YACL,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,IAAI,CAAC,cAAc;YACtB,GAAG,QAAQ;YACX,GAAG;SACJ,CAAA;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,QAAqB,EAAE,GAAW,IAAU,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA,CAAC,CAAC;IACtF,IAAI,CAAC,QAAqB,EAAE,GAAW,IAAW,IAAI,CAAC,KAAK,CAAC,MAAM,EAAG,QAAQ,EAAE,GAAG,CAAC,CAAA,CAAC,CAAC;IACtF,IAAI,CAAC,QAAqB,EAAE,GAAW,IAAW,IAAI,CAAC,KAAK,CAAC,MAAM,EAAG,QAAQ,EAAE,GAAG,CAAC,CAAA,CAAC,CAAC;IACtF,KAAK,CAAC,QAAqB,EAAE,GAAW,IAAU,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA,CAAC,CAAC;IAEtF,KAAK,CAAC,QAAqB;QACzB,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAA;IAC7E,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAAsB;IACrE,OAAO,IAAI,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;AACzC,CAAC"}

package/dummy-path.jsonl

@@ -0,0 +1,2 @@
+{"incidentId":"535a62554f3fd91f7c4d6c4af61fdcc230ff682f","kind":"tool_blocked","toolName":"Bash","toolInput":{"args":["rm -rf"]},"workspaceId":"ws_integration","harnessType":"mcp-governance-proxy","reason":"Blocked in test","timestamp":"2026-06-21T17:41:55.853Z"}
+{"incidentId":"c981afc5cd4f0b9c9b5f320bf958b04a2da43163","kind":"tool_blocked","toolName":"Bash","toolInput":{"args":["rm -rf"]},"workspaceId":"ws_integration","harnessType":"mcp-governance-proxy","reason":"Blocked in test","timestamp":"2026-06-21T17:42:18.325Z"}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@intutic/mcp-governance-proxy",
+  "version": "1.0.3",
+  "description": "Intutic MCP Governance Proxy — transparent stdio proxy that intercepts all tools/call JSON-RPC messages and applies workspace SOP policy before forwarding to real MCP servers",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "intutic-mcp-proxy": "./dist/index.js",
+    "intutic-mcp-daemon": "./dist/daemon/index.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/index.ts",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "dependencies": {
+    "@intutic/id": "workspace:*",
+    "@intutic/logger": "workspace:*",
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "ioredis": "^5",
+    "zod": "^3"
+  },
+  "devDependencies": {
+    "@types/node": "^22",
+    "tsx": "^4",
+    "typescript": "^5.5",
+    "vitest": "^3"
+  }
+}

package/src/__tests__/config.test.ts

@@ -0,0 +1,82 @@
+/**
+ * config.test.ts — Unit tests for MCP Governance Proxy configuration loading.
+ *
+ * Zero vi.mock — tests the actual env parsing and CLI arguments using temporary disk files.
+ *
+ * @module
+ */
+
+import { describe, it, expect, beforeAll, afterAll } from 'vitest'
+import * as node_fs from 'node:fs/promises'
+import * as node_os from 'node:os'
+import * as node_path from 'node:path'
+import { loadConfig } from '../config.js'
+
+describe('loadConfig', () => {
+  const runtimeEnvPath = node_path.join(node_os.homedir(), '.intutic', 'env', 'runtime.env')
+  const backupPath = runtimeEnvPath + '.bak'
+  let hadOriginalFile = false
+
+  beforeAll(async () => {
+    try {
+      // Backup original runtime.env if it exists
+      await node_fs.access(runtimeEnvPath)
+      await node_fs.copyFile(runtimeEnvPath, backupPath)
+      hadOriginalFile = true
+    } catch {
+      hadOriginalFile = false
+    }
+
+    // Ensure directory exists
+    await node_fs.mkdir(node_path.dirname(runtimeEnvPath), { recursive: true })
+  })
+
+  afterAll(async () => {
+    // Restore backup
+    try {
+      await node_fs.unlink(runtimeEnvPath).catch(() => {})
+      if (hadOriginalFile) {
+        await node_fs.copyFile(backupPath, runtimeEnvPath)
+        await node_fs.unlink(backupPath).catch(() => {})
+      }
+    } catch {
+      // Cleanup failed
+    }
+  })
+
+  it('loads variables from runtime.env and parses CLI arguments', async () => {
+    // Write test runtime.env
+    const testEnvContent = [
+      '# Test config',
+      'INTUTIC_CONTROL_PLANE_URL=http://test-control-plane:3005',
+      'INTUTIC_API_KEY=sk-test-api-key-value',
+      'INTUTIC_WORKSPACE_ID=ws-test-1234',
+      'INTUTIC_MCP_FAIL_OPEN=false',
+      'INTUTIC_MCP_PROXY_MODE=daemon',
+    ].join('\n')
+
+    await node_fs.writeFile(runtimeEnvPath, testEnvContent, 'utf-8')
+
+    const config = await loadConfig(['--workspace-id', 'cli-override-ws', '--', 'node', 'server.js', '--port', '8080'])
+
+    expect(config.controlPlaneUrl).toBe('http://test-control-plane:3005')
+    expect(config.apiKey).toBe('sk-test-api-key-value')
+    // CLI takes precedence over runtime.env for workspaceId
+    expect(config.workspaceId).toBe('cli-override-ws')
+    expect(config.failOpen).toBe(false)
+    expect(config.mcpProxyMode).toBe('daemon')
+    expect(config.realServerCommand).toEqual(['node', 'server.js', '--port', '8080'])
+  })
+
+  it('defaults failOpen to true when not specified', async () => {
+    const testEnvContent = [
+      'INTUTIC_WORKSPACE_ID=ws-test-1234',
+    ].join('\n')
+
+    await node_fs.writeFile(runtimeEnvPath, testEnvContent, 'utf-8')
+
+    const config = await loadConfig(['--', 'node', 'server.js'])
+    expect(config.failOpen).toBe(true)
+    expect(config.workspaceId).toBe('ws-test-1234')
+  })
+})

package/src/__tests__/dlp.test.ts

@@ -0,0 +1,103 @@
+/**
+ * dlp.test.ts — Unit tests for the DLP argument scanner.
+ *
+ * @module
+ */
+
+import { describe, it, expect } from 'vitest'
+import { scanToolInput, formatDlpBlockReason } from '../dlp.js'
+
+describe('scanToolInput', () => {
+  it('returns no findings for benign content', () => {
+    const result = scanToolInput({ path: '/tmp/file.txt', content: 'hello world' })
+    expect(result.hasFinding).toBe(false)
+    expect(result.findings).toHaveLength(0)
+  })
+
+  it('detects OpenAI API keys', () => {
+    const result = scanToolInput({ env: 'OPENAI_KEY=sk-abc123def456ghi789jkl012mno345pqr' })
+    expect(result.hasFinding).toBe(true)
+    expect(result.findings.some((f) => f.description.includes('OpenAI'))).toBe(true)
+  })
+
+  it('detects Anthropic API keys', () => {
+    const result = scanToolInput({ key: 'sk-ant-api03-verylongantkeyhere12345678901234' })
+    expect(result.hasFinding).toBe(true)
+    expect(result.findings.some((f) => f.description.includes('Anthropic'))).toBe(true)
+  })
+
+  it('detects GitHub personal access tokens', () => {
+    const result = scanToolInput({ token: 'ghp_abcdefghijklmnopqrstuvwxyz123456789012' })
+    expect(result.hasFinding).toBe(true)
+    expect(result.findings.some((f) => f.description.includes('GitHub'))).toBe(true)
+  })
+
+  it('detects AWS Access Key IDs', () => {
+    const result = scanToolInput({ key: 'AKIAIOSFODNN7EXAMPLE' })
+    expect(result.hasFinding).toBe(true)
+    expect(result.findings.some((f) => f.description.includes('AWS'))).toBe(true)
+  })
+
+  it('detects PEM private keys', () => {
+    const result = scanToolInput({ cert: '-----BEGIN RSA PRIVATE KEY-----\nMIIEowIBAAK...' })
+    expect(result.hasFinding).toBe(true)
+    expect(result.findings.some((f) => f.description.includes('private key'))).toBe(true)
+  })
+
+  it('detects destructive rm -rf / commands', () => {
+    const result = scanToolInput({ command: 'rm -rf /var/data' })
+    expect(result.hasFinding).toBe(true)
+    expect(result.findings.some((f) => f.description.includes('Destructive'))).toBe(true)
+  })
+
+  it('detects SQL DROP TABLE', () => {
+    const result = scanToolInput({ query: 'DROP TABLE users; SELECT 1' })
+    expect(result.hasFinding).toBe(true)
+    expect(result.findings.some((f) => f.description.includes('DROP TABLE'))).toBe(true)
+  })
+
+  it('detects SQL DROP DATABASE', () => {
+    const result = scanToolInput({ sql: 'DROP DATABASE production' })
+    expect(result.hasFinding).toBe(true)
+  })
+
+  it('handles null/undefined input gracefully', () => {
+    expect(() => scanToolInput(null)).not.toThrow()
+    expect(() => scanToolInput(undefined)).not.toThrow()
+    const result = scanToolInput(undefined)
+    expect(result.hasFinding).toBe(false)
+  })
+
+  it('handles deeply nested objects', () => {
+    const result = scanToolInput({ outer: { inner: { key: 'sk-abc123def456ghi789jkl012mno345pqr' } } })
+    expect(result.hasFinding).toBe(true)
+  })
+
+  it('returns multiple findings when multiple patterns match', () => {
+    const result = scanToolInput({
+      openai: 'sk-abc123def456ghi789jkl012mno345pqr',
+      aws: 'AKIAIOSFODNN7EXAMPLE',
+    })
+    expect(result.findings.length).toBeGreaterThanOrEqual(2)
+  })
+})
+
+describe('formatDlpBlockReason', () => {
+  it('formats a single finding into readable text', () => {
+    const findings = [{ pattern: 'sk-.*', description: 'OpenAI API key pattern' }]
+    const reason = formatDlpBlockReason(findings)
+    expect(reason).toContain('DLP scanner')
+    expect(reason).toContain('OpenAI API key pattern')
+    expect(reason).toContain('•')
+  })
+
+  it('formats multiple findings', () => {
+    const findings = [
+      { pattern: 'sk-.*', description: 'OpenAI API key' },
+      { pattern: 'AKIA.*', description: 'AWS Access Key' },
+    ]
+    const reason = formatDlpBlockReason(findings)
+    expect(reason).toContain('OpenAI API key')
+    expect(reason).toContain('AWS Access Key')
+  })
+})