@intutic/mcp-governance-proxy 1.4.1 → 1.6.0

package/package.json

@@ -1,32 +1,46 @@
 {
   "name": "@intutic/mcp-governance-proxy",
-  "version": "1.4.1",
+  "version": "1.6.0",
   "description": "Intutic MCP Governance Proxy — transparent stdio proxy that intercepts all tools/call JSON-RPC messages and applies workspace SOP policy before forwarding to real MCP servers",
   "type": "module",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/intutic/intutic",
+    "directory": "packages/mcp-proxy"
+  },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "bin": {
     "intutic-mcp-proxy": "./dist/index.js",
     "intutic-mcp-daemon": "./dist/daemon/index.js"
   },
-  "scripts": {
-    "build": "tsc",
-    "dev": "tsx src/index.ts",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "test:watch": "vitest"
-  },
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE"
+  ],
   "dependencies": {
-    "@intutic/id": "workspace:*",
-    "@intutic/logger": "workspace:*",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "ioredis": "^5",
-    "zod": "^3"
+    "zod": "^3",
+    "@intutic/id": "1.6.0",
+    "@intutic/logger": "1.6.0"
   },
   "devDependencies": {
     "@types/node": "^22",
     "tsx": "^4",
     "typescript": "^5.5",
     "vitest": "^3"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/index.ts",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
   }
-}
+}

package/.turbo/turbo-build.log

@@ -1 +0,0 @@
-$ tsc

package/.turbo/turbo-test.log

@@ -1,51 +0,0 @@
-$ vitest run
-
- RUN  v3.2.6 /Users/ishangupta/intutic-enterprise/packages/mcp-proxy
-
- ✓ src/__tests__/dlp.test.ts (14 tests) 9ms
-stderr | src/__tests__/config.test.ts > loadConfig > loads variables from runtime.env and parses CLI arguments
-[mcp-proxy] INTUTIC_MCP_PROXY_MODE=daemon is stored but not yet active — running in per-session mode (Phase 4). Will be activated in Phase 5.
-
- ✓ src/__tests__/config.test.ts (2 tests) 20ms
-{"level":"info","time":"2026-07-22T18:22:42.382Z","pid":56861,"hostname":"Ishans-MacBook-Pro-9.local","name":"mcp-proxy.policyCache","workspaceId":"ws_test_cache_miss","msg":"policy_cache.invalidated"}
-{"level":"info","time":"2026-07-22T18:22:42.419Z","pid":56861,"hostname":"Ishans-MacBook-Pro-9.local","name":"mcp-proxy.policyCache","workspaceId":"ws_test_cache_miss","msg":"policy_cache.invalidated"}
- ✓ src/__tests__/unit/policyCache.test.ts (4 tests) 210ms
-{"level":"debug","time":"2026-07-22T18:22:42.429Z","name":"mcp-proxy-interceptor","action":"interceptor_decide","toolName":"Bash","msg":"Evaluating tool call"}
-{"level":"warn","time":"2026-07-22T18:22:42.429Z","name":"mcp-proxy-interceptor","action":"dlp_block","toolName":"Bash","findings":[{"pattern":"sk-[A-Za-z0-9]{20,}","description":"OpenAI API key pattern"}],"msg":"DLP block"}
-{"level":"debug","time":"2026-07-22T18:22:42.430Z","name":"mcp-proxy-interceptor","action":"interceptor_decide","toolName":"Write","msg":"Evaluating tool call"}
-{"level":"warn","time":"2026-07-22T18:22:42.431Z","name":"mcp-proxy-interceptor","action":"dlp_block","toolName":"Write","findings":[{"pattern":"sk-ant-[A-Za-z0-9\\-_]{20,}","description":"Anthropic API key pattern"}],"msg":"DLP block"}
-{"level":"debug","time":"2026-07-22T18:22:42.431Z","name":"mcp-proxy-interceptor","action":"interceptor_decide","toolName":"Bash","msg":"Evaluating tool call"}
-{"level":"warn","time":"2026-07-22T18:22:42.431Z","name":"mcp-proxy-interceptor","action":"dlp_block","toolName":"Bash","findings":[{"pattern":"rm\\s+-rf?\\s+\\/","description":"Destructive rm -rf / command"}],"msg":"DLP block"}
-{"level":"debug","time":"2026-07-22T18:22:42.431Z","name":"mcp-proxy-interceptor","action":"interceptor_decide","toolName":"mcp__database__execute","msg":"Evaluating tool call"}
-{"level":"warn","time":"2026-07-22T18:22:42.431Z","name":"mcp-proxy-interceptor","action":"dlp_block","toolName":"mcp__database__execute","findings":[{"pattern":"DROP\\s+TABLE","description":"SQL DROP TABLE statement"}],"msg":"DLP block"}
-{"level":"debug","time":"2026-07-22T18:22:42.431Z","name":"mcp-proxy-interceptor","action":"interceptor_decide","toolName":"Read","msg":"Evaluating tool call"}
-{"level":"debug","time":"2026-07-22T18:22:42.431Z","name":"mcp-proxy-interceptor","action":"interceptor_decide","toolName":"Bash","msg":"Evaluating tool call"}
-{"level":"warn","time":"2026-07-22T18:22:42.432Z","name":"mcp-proxy-interceptor","action":"policy_block","toolName":"Bash","ruleId":"rule-1","reason":"Bash execution not permitted in this workspace","msg":"Policy block"}
-{"level":"debug","time":"2026-07-22T18:22:42.433Z","name":"mcp-proxy-interceptor","action":"interceptor_decide","toolName":"Read","msg":"Evaluating tool call"}
-{"level":"debug","time":"2026-07-22T18:22:42.433Z","name":"mcp-proxy-interceptor","action":"interceptor_decide","toolName":"mcp__postgres__query","msg":"Evaluating tool call"}
-{"level":"warn","time":"2026-07-22T18:22:42.433Z","name":"mcp-proxy-interceptor","action":"policy_block","toolName":"mcp__postgres__query","ruleId":"rule-2","reason":"Production database access blocked","msg":"Policy block"}
-{"level":"debug","time":"2026-07-22T18:22:42.433Z","name":"mcp-proxy-interceptor","action":"interceptor_decide","toolName":"mcp__postgres__query","msg":"Evaluating tool call"}
-{"level":"debug","time":"2026-07-22T18:22:42.436Z","name":"mcp-proxy-interceptor","action":"interceptor_decide","toolName":"Write","msg":"Evaluating tool call"}
-{"level":"warn","time":"2026-07-22T18:22:42.438Z","name":"mcp-proxy-interceptor","action":"policy_approval_required","toolName":"Write","ruleId":"rule-3","msg":"Tool requires human approval per SOP rule rule-3: File writes require review"}
-{"level":"debug","time":"2026-07-22T18:22:42.439Z","name":"mcp-proxy-interceptor","action":"interceptor_decide","toolName":"Read","msg":"Evaluating tool call"}
-{"level":"error","time":"2026-07-22T18:22:42.439Z","name":"mcp-proxy-interceptor","action":"policy_error","err":"Policy engine down","msg":"Policy evaluation error"}
-{"level":"debug","time":"2026-07-22T18:22:42.440Z","name":"mcp-proxy-interceptor","action":"interceptor_decide","toolName":"Read","msg":"Evaluating tool call"}
-{"level":"error","time":"2026-07-22T18:22:42.440Z","name":"mcp-proxy-interceptor","action":"policy_error","err":"Policy engine down","msg":"Policy evaluation error"}
-{"level":"debug","time":"2026-07-22T18:22:42.440Z","name":"mcp-proxy-interceptor","action":"interceptor_decide","toolName":"Read","msg":"Evaluating tool call"}
-{"level":"error","time":"2026-07-22T18:22:42.446Z","name":"mcp-proxy-interceptor","action":"dlp_error","err":"Converting circular structure to JSON\n    --> starting at object with constructor 'Object'\n    --- property 'self' closes the circle","msg":"DLP scan error — skipping"}
- ✓ src/__tests__/interceptor.test.ts (13 tests) 19ms
-{"level":"info","time":"2026-07-22T18:22:42.562Z","pid":56863,"hostname":"Ishans-MacBook-Pro-9.local","name":"mcp-proxy.policyCache","workspaceId":"ws_test","msg":"policy_cache.invalidated"}
-{"level":"info","time":"2026-07-22T18:22:42.570Z","name":"mcp-proxy-policy","action":"policy_refreshed_from_daemon","ruleCount":1,"msg":"SOP rules refreshed from daemon"}
- ✓ src/__tests__/unit/socketServer.test.ts (5 tests) 144ms
-{"level":"debug","time":"2026-07-22T18:22:42.571Z","name":"mcp-proxy-emitter","action":"telemetry_enqueued","msg":"Telemetry successfully enqueued to daemon"}
-{"level":"warn","time":"2026-07-22T18:22:42.572Z","name":"mcp-proxy-policy","action":"policy_daemon_failed","err":"connect ENOENT /tmp/nonexistent-1784744562571.sock","msg":"Failed to refresh policy from daemon socket — falling back to HTTP"}
-{"level":"debug","time":"2026-07-22T18:22:42.572Z","name":"mcp-proxy-policy","action":"policy_refresh","url":"http://127.0.0.1:51982/api/v1/sop/rules?workspaceId=ws_fallback&active=true","msg":"Fetching SOP rules from control plane"}
-{"level":"info","time":"2026-07-22T18:22:42.573Z","name":"mcp-proxy-policy","action":"policy_refreshed","ruleCount":1,"msg":"SOP rules refreshed"}
- ✓ src/__tests__/integration/daemon-shim.test.ts (4 tests) 141ms
- ✓ src/__tests__/unit/telemetryBatcher.test.ts (1 test) 446ms
-
- Test Files  7 passed (7)
-      Tests  43 passed (43)
-   Start at  14:22:41
-   Duration  1.15s (transform 482ms, setup 0ms, collect 1.25s, tests 989ms, environment 1ms, prepare 1.18s)
-

package/.turbo/turbo-typecheck.log

@@ -1 +0,0 @@
-$ tsc --noEmit

package/dummy-path.jsonl

@@ -1,2 +0,0 @@
-{"incidentId":"535a62554f3fd91f7c4d6c4af61fdcc230ff682f","kind":"tool_blocked","toolName":"Bash","toolInput":{"args":["rm -rf"]},"workspaceId":"ws_integration","harnessType":"mcp-governance-proxy","reason":"Blocked in test","timestamp":"2026-06-21T17:41:55.853Z"}
-{"incidentId":"c981afc5cd4f0b9c9b5f320bf958b04a2da43163","kind":"tool_blocked","toolName":"Bash","toolInput":{"args":["rm -rf"]},"workspaceId":"ws_integration","harnessType":"mcp-governance-proxy","reason":"Blocked in test","timestamp":"2026-06-21T17:42:18.325Z"}

package/src/__tests__/config.test.ts

@@ -1,82 +0,0 @@
-/**
- * config.test.ts — Unit tests for MCP Governance Proxy configuration loading.
- *
- * Zero vi.mock — tests the actual env parsing and CLI arguments using temporary disk files.
- *
- * @module
- */
-
-import { describe, it, expect, beforeAll, afterAll } from 'vitest'
-import * as node_fs from 'node:fs/promises'
-import * as node_os from 'node:os'
-import * as node_path from 'node:path'
-import { loadConfig } from '../config.js'
-
-describe('loadConfig', () => {
-  const runtimeEnvPath = node_path.join(node_os.homedir(), '.intutic', 'env', 'runtime.env')
-  const backupPath = runtimeEnvPath + '.bak'
-  let hadOriginalFile = false
-
-  beforeAll(async () => {
-    try {
-      // Backup original runtime.env if it exists
-      await node_fs.access(runtimeEnvPath)
-      await node_fs.copyFile(runtimeEnvPath, backupPath)
-      hadOriginalFile = true
-    } catch {
-      hadOriginalFile = false
-    }
-
-    // Ensure directory exists
-    await node_fs.mkdir(node_path.dirname(runtimeEnvPath), { recursive: true })
-  })
-
-  afterAll(async () => {
-    // Restore backup
-    try {
-      await node_fs.unlink(runtimeEnvPath).catch(() => {})
-      if (hadOriginalFile) {
-        await node_fs.copyFile(backupPath, runtimeEnvPath)
-        await node_fs.unlink(backupPath).catch(() => {})
-      }
-    } catch {
-      // Cleanup failed
-    }
-  })
-
-  it('loads variables from runtime.env and parses CLI arguments', async () => {
-    // Write test runtime.env
-    const testEnvContent = [
-      '# Test config',
-      'INTUTIC_CONTROL_PLANE_URL=http://test-control-plane:3005',
-      'INTUTIC_API_KEY=sk-test-api-key-value',
-      'INTUTIC_WORKSPACE_ID=ws-test-1234',
-      'INTUTIC_MCP_FAIL_OPEN=false',
-      'INTUTIC_MCP_PROXY_MODE=daemon',
-    ].join('\n')
-
-    await node_fs.writeFile(runtimeEnvPath, testEnvContent, 'utf-8')
-
-    const config = await loadConfig(['--workspace-id', 'cli-override-ws', '--', 'node', 'server.js', '--port', '8080'])
-
-    expect(config.controlPlaneUrl).toBe('http://test-control-plane:3005')
-    expect(config.apiKey).toBe('sk-test-api-key-value')
-    // CLI takes precedence over runtime.env for workspaceId
-    expect(config.workspaceId).toBe('cli-override-ws')
-    expect(config.failOpen).toBe(false)
-    expect(config.mcpProxyMode).toBe('daemon')
-    expect(config.realServerCommand).toEqual(['node', 'server.js', '--port', '8080'])
-  })
-
-  it('defaults failOpen to true when not specified', async () => {
-    const testEnvContent = [
-      'INTUTIC_WORKSPACE_ID=ws-test-1234',
-    ].join('\n')
-
-    await node_fs.writeFile(runtimeEnvPath, testEnvContent, 'utf-8')
-
-    const config = await loadConfig(['--', 'node', 'server.js'])
-    expect(config.failOpen).toBe(true)
-    expect(config.workspaceId).toBe('ws-test-1234')
-  })
-})

package/src/__tests__/dlp.test.ts

@@ -1,103 +0,0 @@
-/**
- * dlp.test.ts — Unit tests for the DLP argument scanner.
- *
- * @module
- */
-
-import { describe, it, expect } from 'vitest'
-import { scanToolInput, formatDlpBlockReason } from '../dlp.js'
-
-describe('scanToolInput', () => {
-  it('returns no findings for benign content', () => {
-    const result = scanToolInput({ path: '/tmp/file.txt', content: 'hello world' })
-    expect(result.hasFinding).toBe(false)
-    expect(result.findings).toHaveLength(0)
-  })
-
-  it('detects OpenAI API keys', () => {
-    const result = scanToolInput({ env: 'OPENAI_KEY=sk-abc123def456ghi789jkl012mno345pqr' })
-    expect(result.hasFinding).toBe(true)
-    expect(result.findings.some((f) => f.description.includes('OpenAI'))).toBe(true)
-  })
-
-  it('detects Anthropic API keys', () => {
-    const result = scanToolInput({ key: 'sk-ant-api03-verylongantkeyhere12345678901234' })
-    expect(result.hasFinding).toBe(true)
-    expect(result.findings.some((f) => f.description.includes('Anthropic'))).toBe(true)
-  })
-
-  it('detects GitHub personal access tokens', () => {
-    const result = scanToolInput({ token: 'ghp_abcdefghijklmnopqrstuvwxyz123456789012' })
-    expect(result.hasFinding).toBe(true)
-    expect(result.findings.some((f) => f.description.includes('GitHub'))).toBe(true)
-  })
-
-  it('detects AWS Access Key IDs', () => {
-    const result = scanToolInput({ key: 'AKIAIOSFODNN7EXAMPLE' })
-    expect(result.hasFinding).toBe(true)
-    expect(result.findings.some((f) => f.description.includes('AWS'))).toBe(true)
-  })
-
-  it('detects PEM private keys', () => {
-    const result = scanToolInput({ cert: '-----BEGIN RSA PRIVATE KEY-----\nMIIEowIBAAK...' })
-    expect(result.hasFinding).toBe(true)
-    expect(result.findings.some((f) => f.description.includes('private key'))).toBe(true)
-  })
-
-  it('detects destructive rm -rf / commands', () => {
-    const result = scanToolInput({ command: 'rm -rf /var/data' })
-    expect(result.hasFinding).toBe(true)
-    expect(result.findings.some((f) => f.description.includes('Destructive'))).toBe(true)
-  })
-
-  it('detects SQL DROP TABLE', () => {
-    const result = scanToolInput({ query: 'DROP TABLE users; SELECT 1' })
-    expect(result.hasFinding).toBe(true)
-    expect(result.findings.some((f) => f.description.includes('DROP TABLE'))).toBe(true)
-  })
-
-  it('detects SQL DROP DATABASE', () => {
-    const result = scanToolInput({ sql: 'DROP DATABASE production' })
-    expect(result.hasFinding).toBe(true)
-  })
-
-  it('handles null/undefined input gracefully', () => {
-    expect(() => scanToolInput(null)).not.toThrow()
-    expect(() => scanToolInput(undefined)).not.toThrow()
-    const result = scanToolInput(undefined)
-    expect(result.hasFinding).toBe(false)
-  })
-
-  it('handles deeply nested objects', () => {
-    const result = scanToolInput({ outer: { inner: { key: 'sk-abc123def456ghi789jkl012mno345pqr' } } })
-    expect(result.hasFinding).toBe(true)
-  })
-
-  it('returns multiple findings when multiple patterns match', () => {
-    const result = scanToolInput({
-      openai: 'sk-abc123def456ghi789jkl012mno345pqr',
-      aws: 'AKIAIOSFODNN7EXAMPLE',
-    })
-    expect(result.findings.length).toBeGreaterThanOrEqual(2)
-  })
-})
-
-describe('formatDlpBlockReason', () => {
-  it('formats a single finding into readable text', () => {
-    const findings = [{ pattern: 'sk-.*', description: 'OpenAI API key pattern' }]
-    const reason = formatDlpBlockReason(findings)
-    expect(reason).toContain('DLP scanner')
-    expect(reason).toContain('OpenAI API key pattern')
-    expect(reason).toContain('•')
-  })
-
-  it('formats multiple findings', () => {
-    const findings = [
-      { pattern: 'sk-.*', description: 'OpenAI API key' },
-      { pattern: 'AKIA.*', description: 'AWS Access Key' },
-    ]
-    const reason = formatDlpBlockReason(findings)
-    expect(reason).toContain('OpenAI API key')
-    expect(reason).toContain('AWS Access Key')
-  })
-})

package/src/__tests__/integration/daemon-shim.test.ts

@@ -1,125 +0,0 @@
-import { describe, it, expect, beforeAll, afterAll } from 'vitest'
-import * as net from 'node:net'
-import * as path from 'node:path'
-import * as os from 'node:os'
-import * as fs from 'node:fs/promises'
-import * as http from 'node:http'
-import { createSocketServer } from '../../daemon/socketServer.js'
-import { callDaemonSocket } from '../../daemonClient.js'
-import { PolicyClient } from '../../policy.js'
-import { GovernanceEmitter } from '../../emitter.js'
-
-describe('Daemon-Shim Integration Tests', () => {
-  const socketPath = path.join(os.tmpdir(), `mcp-daemon-shim-test-${Date.now()}.sock`)
-  let server: net.Server
-  let mockCp: http.Server
-  let cpPort: number
-  let lastWorkspaceId: string | null = null
-  let telemetryEvents: any[] = []
-
-  beforeAll(async () => {
-    process.env['MCP_DAEMON_SOCKET'] = socketPath
-    await fs.rm(socketPath, { force: true })
-
-    // Setup mock control plane HTTP server
-    mockCp = http.createServer((req, res) => {
-      const url = new URL(req.url ?? '', `http://${req.headers.host}`)
-      if (url.pathname === '/api/v1/policy/resolve') {
-        lastWorkspaceId = url.searchParams.get('workspaceId')
-        res.writeHead(200, { 'Content-Type': 'application/json' })
-        res.end(
-          JSON.stringify({
-            workspaceId: lastWorkspaceId,
-            sopRules: [
-              { id: 'rule_xyz', toolPattern: 'Bash', action: 'block', reason: 'Blocked in test' }
-            ],
-            dlpPatterns: [],
-            interventionMode: 'BLOCK'
-          })
-        )
-      } else if (url.pathname === '/api/v1/sop/rules') {
-        lastWorkspaceId = url.searchParams.get('workspaceId')
-        res.writeHead(200, { 'Content-Type': 'application/json' })
-        res.end(
-          JSON.stringify({
-            rules: [
-              { id: 'rule_xyz', toolPattern: 'Bash', action: 'block', reason: 'Blocked in test' }
-            ]
-          })
-        )
-      } else if (url.pathname === '/api/v1/hook-events') {
-        let body = ''
-        req.on('data', c => body += c)
-        req.on('end', () => {
-          try {
-            telemetryEvents.push(JSON.parse(body))
-          } catch {}
-          res.writeHead(200, { 'Content-Type': 'application/json' })
-          res.end(JSON.stringify({ ok: true }))
-        })
-      } else {
-        res.writeHead(404)
-        res.end()
-      }
-    })
-
-    await new Promise<void>((resolve) => {
-      mockCp.listen(0, '127.0.0.1', () => {
-        const addr = mockCp.address() as net.AddressInfo | null
-        cpPort = addr?.port ?? 3001
-        process.env['CONTROL_PLANE_URL'] = `http://127.0.0.1:${cpPort}`
-        process.env['INTUTIC_API_KEY'] = 'test-api-key'
-        resolve()
-      })
-    })
-
-    // Start daemon socket server
-    server = createSocketServer()
-    await new Promise<void>((resolve) => server.listen(socketPath, () => resolve()))
-  })
-
-  afterAll(async () => {
-    await new Promise<void>((resolve) => server.close(() => resolve()))
-    await new Promise<void>((resolve) => mockCp.close(() => resolve()))
-    await fs.rm(socketPath, { force: true })
-  })
-
-  it('client callDaemonSocket requests policy.get and gets cached policy', async () => {
-    const res = await callDaemonSocket('policy.get', { workspaceId: 'ws_integration' })
-    expect(res).toBeDefined()
-    expect(res.workspaceId).toBe('ws_integration')
-    expect(res.sopRules).toHaveLength(1)
-    expect(res.sopRules[0].id).toBe('rule_xyz')
-  })
-
-  it('PolicyClient uses daemon when mcpProxyMode is daemon', async () => {
-    const client = new PolicyClient(`http://127.0.0.1:${cpPort}`, 'test-api-key', 'ws_integration', 60000, 'daemon')
-    await client.refresh()
-    const rules = client.getRules()
-    expect(rules).toHaveLength(1)
-    expect(rules[0].id).toBe('rule_xyz')
-  })
-
-  it('GovernanceEmitter enqueues telemetry to daemon', async () => {
-    const emitter = new GovernanceEmitter(`http://127.0.0.1:${cpPort}`, 'test-api-key', 'dummy-path.jsonl', 'ws_integration', 'daemon')
-    emitter.emit('tool_blocked', 'Bash', { args: ['rm -rf'] }, 'Blocked in test')
-    
-    const res = await callDaemonSocket('proxy.health_check', {})
-    expect(res.status).toBe('ok')
-  })
-
-  it('shim client falls back to direct control plane requests if daemon socket is offline', async () => {
-    // Set socket path to invalid location
-    process.env['MCP_DAEMON_SOCKET'] = path.join(os.tmpdir(), `nonexistent-${Date.now()}.sock`)
-    
-    const client = new PolicyClient(`http://127.0.0.1:${cpPort}`, 'test-api-key', 'ws_fallback', 60000, 'daemon')
-    await client.refresh()
-    const rules = client.getRules()
-    expect(rules).toHaveLength(1)
-    expect(rules[0].id).toBe('rule_xyz')
-    expect(lastWorkspaceId).toBe('ws_fallback') // hit CP directly
-    
-    // Restore
-    process.env['MCP_DAEMON_SOCKET'] = socketPath
-  })
-})