@mcp-audit-gateway/core 0.1.0

package/dist/wrap/proxy.js

@@ -0,0 +1,152 @@
+import { spawn } from "node:child_process";
+import { createInterface } from "node:readline";
+import { appendFile, mkdir, readFile, stat } from "node:fs/promises";
+import { createHmac, randomBytes, createHash } from "node:crypto";
+import { homedir } from "node:os";
+import { join } from "node:path";
+export async function runWrapProxy(command, args) {
+    const auditDir = join(homedir(), ".mcp-audit");
+    await mkdir(auditDir, { recursive: true });
+    const keyPath = join(auditDir, "key.hex");
+    const logPath = join(auditDir, "audit.jsonl");
+    const secret = await ensureKey(keyPath);
+    let lastHash = await restoreLastHash(logPath);
+    let writeQueue = Promise.resolve();
+    const pending = new Map();
+    const child = spawn(command, args, {
+        stdio: ["pipe", "pipe", "inherit"],
+        env: process.env,
+    });
+    child.on("error", (err) => {
+        process.stderr.write(`[mcp-audit] failed to spawn: ${err.message}\n`);
+        process.exit(1);
+    });
+    child.on("exit", (code) => {
+        process.exit(code ?? 0);
+    });
+    const clientRl = createInterface({ input: process.stdin, crlfDelay: Infinity });
+    const serverRl = createInterface({ input: child.stdout, crlfDelay: Infinity });
+    clientRl.on("line", (line) => {
+        if (!line.trim())
+            return;
+        try {
+            const msg = JSON.parse(line);
+            if (msg.method === "tools/call" && msg.id !== undefined) {
+                pending.set(msg.id, {
+                    toolName: msg.params?.name ?? "unknown",
+                    args: msg.params?.arguments ?? {},
+                    startTime: Date.now(),
+                });
+            }
+        }
+        catch { }
+        child.stdin.write(line + "\n");
+    });
+    serverRl.on("line", (line) => {
+        if (!line.trim())
+            return;
+        process.stdout.write(line + "\n");
+        let msg;
+        try {
+            msg = JSON.parse(line);
+        }
+        catch {
+            return;
+        }
+        if (msg.id !== undefined && pending.has(msg.id)) {
+            const call = pending.get(msg.id);
+            pending.delete(msg.id);
+            const durationMs = Date.now() - call.startTime;
+            const success = !msg.error;
+            writeQueue = writeQueue.then(async () => {
+                try {
+                    const entry = createEntry(call.toolName, call.args, durationMs, success, lastHash);
+                    const signed = sign(entry, secret);
+                    lastHash = hashEntry(signed);
+                    await appendFile(logPath, JSON.stringify(signed) + "\n");
+                }
+                catch (err) {
+                    process.stderr.write(`[mcp-audit] log write failed: ${err}\n`);
+                }
+            });
+        }
+    });
+    clientRl.on("close", () => {
+        child.stdin.end();
+    });
+    process.on("SIGINT", () => {
+        child.kill("SIGINT");
+    });
+    process.on("SIGTERM", () => {
+        child.kill("SIGTERM");
+    });
+}
+function createEntry(toolName, args, durationMs, success, previousHash) {
+    return {
+        id: crypto.randomUUID(),
+        timestamp: new Date().toISOString(),
+        method: "tools/call",
+        toolName,
+        namespace: null,
+        upstream: null,
+        principal: null,
+        args,
+        durationMs,
+        success,
+        errorCode: null,
+        previousHash,
+    };
+}
+function sign(entry, secret) {
+    const canonical = JSON.stringify([
+        ["id", entry.id],
+        ["timestamp", entry.timestamp],
+        ["method", entry.method],
+        ["toolName", entry.toolName],
+        ["namespace", null],
+        ["upstream", null],
+        ["principal", null],
+        ["durationMs", entry.durationMs],
+        ["success", entry.success],
+        ["errorCode", null],
+        ["previousHash", entry.previousHash],
+    ]);
+    const hmac = createHmac("sha256", secret);
+    hmac.update(canonical);
+    const attestation = hmac.digest("hex");
+    return { ...entry, attestation };
+}
+function hashEntry(entry) {
+    return createHash("sha256").update(JSON.stringify(entry)).digest("hex");
+}
+async function ensureKey(keyPath) {
+    try {
+        const hex = await readFile(keyPath, "utf-8");
+        return Buffer.from(hex.trim(), "hex");
+    }
+    catch {
+        const key = randomBytes(32);
+        await appendFile(keyPath, key.toString("hex") + "\n");
+        process.stderr.write(`[mcp-audit] generated signing key: ${keyPath}\n`);
+        return key;
+    }
+}
+async function restoreLastHash(logPath) {
+    try {
+        const s = await stat(logPath);
+        if (s.size === 0)
+            return "genesis";
+        const content = await readFile(logPath, "utf-8");
+        const lines = content.trimEnd().split("\n");
+        for (let i = lines.length - 1; i >= 0; i--) {
+            try {
+                const entry = JSON.parse(lines[i]);
+                return hashEntry(entry);
+            }
+            catch { }
+        }
+    }
+    catch { }
+    return "genesis";
+}
+//# sourceMappingURL=proxy.js.map

package/dist/wrap/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/wrap/proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAmB,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAwBjC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,IAAc;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;IAC/C,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;IAExC,IAAI,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;IAExD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;QACjC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC;QAClC,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACxB,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEhF,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC3B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBACxD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE;oBAClB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,SAAS;oBACvC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE;oBACjC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,KAAK,CAAC,KAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC3B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO;QAEzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QAElC,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;YAClC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEvB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YAC/C,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;YAE3B,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBACtC,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;oBACnF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;oBACnC,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;oBAC7B,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC3D,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,GAAG,IAAI,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACxB,KAAK,CAAC,KAAM,CAAC,GAAG,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAClB,QAAgB,EAChB,IAA6B,EAC7B,UAAkB,EAClB,OAAgB,EAChB,YAAoB;IAEpB,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,YAAY;QACpB,QAAQ;QACR,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,IAAI;QACf,IAAI;QACJ,UAAU;QACV,OAAO;QACP,SAAS,EAAE,IAAI;QACf,YAAY;KACb,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,KAAsC,EAAE,MAAc;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAChB,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC;QAC9B,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;QACxB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC;QAC5B,CAAC,WAAW,EAAE,IAAI,CAAC;QACnB,CAAC,UAAU,EAAE,IAAI,CAAC;QAClB,CAAC,WAAW,EAAE,IAAI,CAAC;QACnB,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC;QAChC,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;QAC1B,CAAC,WAAW,EAAE,IAAI,CAAC;QACnB,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC;KACrC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvB,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAAe;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,OAAO,IAAI,CAAC,CAAC;QACxE,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAe;IAC5C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,KAAK,GAAe,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC/C,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/wrap/proxy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=proxy.test.d.ts.map

package/dist/wrap/proxy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.test.d.ts","sourceRoot":"","sources":["../../src/wrap/proxy.test.ts"],"names":[],"mappings":""}

package/dist/wrap/proxy.test.js

@@ -0,0 +1,155 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { spawn } from "node:child_process";
+import { readFile, rm, mkdir } from "node:fs/promises";
+import { join } from "node:path";
+import { homedir } from "node:os";
+const AUDIT_DIR = join(homedir(), ".mcp-audit");
+const LOG_PATH = join(AUDIT_DIR, "audit.jsonl");
+const CLI_PATH = join(import.meta.dirname, "../../dist/cli.js");
+function sendJsonRpc(proc, msg) {
+    proc.stdin.write(JSON.stringify(msg) + "\n");
+}
+function collectLines(proc) {
+    return new Promise((resolve) => {
+        const lines = [];
+        proc.stdout.on("data", (chunk) => {
+            const parts = chunk.toString().split("\n").filter((l) => l.trim());
+            lines.push(...parts);
+        });
+        proc.on("close", () => resolve(lines));
+    });
+}
+describe("wrap proxy", () => {
+    let originalLog = null;
+    beforeEach(async () => {
+        await mkdir(AUDIT_DIR, { recursive: true });
+        try {
+            originalLog = await readFile(LOG_PATH, "utf-8");
+        }
+        catch {
+            originalLog = null;
+        }
+    });
+    afterEach(async () => {
+        if (originalLog !== null) {
+            const { writeFile } = await import("node:fs/promises");
+            await writeFile(LOG_PATH, originalLog);
+        }
+        else {
+            try {
+                await rm(LOG_PATH);
+            }
+            catch { }
+        }
+    });
+    it("forwards non-tool messages transparently", async () => {
+        const proc = spawn("node", [CLI_PATH, "wrap", "--", "node", "-e", `
+      process.stdin.setEncoding('utf-8');
+      let buf = '';
+      process.stdin.on('data', d => {
+        buf += d;
+        const lines = buf.split('\\n');
+        buf = lines.pop();
+        for (const line of lines) {
+          if (!line.trim()) continue;
+          const req = JSON.parse(line);
+          if (req.method === 'initialize') {
+            process.stdout.write(JSON.stringify({jsonrpc:'2.0',id:req.id,result:{capabilities:{tools:{}}}}) + '\\n');
+          } else if (req.method === 'resources/list') {
+            process.stdout.write(JSON.stringify({jsonrpc:'2.0',id:req.id,result:{resources:[]}}) + '\\n');
+          }
+        }
+      });
+    `], { stdio: ["pipe", "pipe", "pipe"] });
+        const lines = collectLines(proc);
+        sendJsonRpc(proc, { jsonrpc: "2.0", id: 1, method: "initialize", params: {} });
+        sendJsonRpc(proc, { jsonrpc: "2.0", id: 2, method: "resources/list", params: {} });
+        await new Promise((r) => setTimeout(r, 500));
+        proc.stdin.end();
+        const output = await lines;
+        const parsed = output.map((l) => JSON.parse(l));
+        expect(parsed).toHaveLength(2);
+        expect(parsed[0].id).toBe(1);
+        expect(parsed[0].result.capabilities).toBeDefined();
+        expect(parsed[1].id).toBe(2);
+        expect(parsed[1].result.resources).toBeDefined();
+    });
+    it("logs tool calls with attestation", async () => {
+        const proc = spawn("node", [CLI_PATH, "wrap", "--", "node", "-e", `
+      process.stdin.setEncoding('utf-8');
+      let buf = '';
+      process.stdin.on('data', d => {
+        buf += d;
+        const lines = buf.split('\\n');
+        buf = lines.pop();
+        for (const line of lines) {
+          if (!line.trim()) continue;
+          const req = JSON.parse(line);
+          if (req.method === 'tools/call') {
+            process.stdout.write(JSON.stringify({
+              jsonrpc:'2.0', id:req.id,
+              result:{content:[{type:'text',text:'done'}]}
+            }) + '\\n');
+          }
+        }
+      });
+    `], { stdio: ["pipe", "pipe", "pipe"] });
+        const lines = collectLines(proc);
+        sendJsonRpc(proc, {
+            jsonrpc: "2.0", id: 1, method: "tools/call",
+            params: { name: "fs/read_file", arguments: { path: "/tmp/test" } },
+        });
+        await new Promise((r) => setTimeout(r, 500));
+        proc.stdin.end();
+        const output = await lines;
+        expect(output.length).toBeGreaterThanOrEqual(1);
+        const response = JSON.parse(output[0]);
+        expect(response.result.content[0].text).toBe("done");
+        await new Promise((r) => setTimeout(r, 200));
+        const logContent = await readFile(LOG_PATH, "utf-8");
+        const logLines = logContent.trimEnd().split("\n");
+        const lastEntry = JSON.parse(logLines[logLines.length - 1]);
+        expect(lastEntry.toolName).toBe("fs/read_file");
+        expect(lastEntry.success).toBe(true);
+        expect(lastEntry.attestation).toBeDefined();
+        expect(lastEntry.attestation.length).toBe(64);
+        expect(lastEntry.previousHash).toBeDefined();
+    });
+    it("maintains hash chain across calls", async () => {
+        const proc = spawn("node", [CLI_PATH, "wrap", "--", "node", "-e", `
+      process.stdin.setEncoding('utf-8');
+      let buf = '';
+      process.stdin.on('data', d => {
+        buf += d;
+        const lines = buf.split('\\n');
+        buf = lines.pop();
+        for (const line of lines) {
+          if (!line.trim()) continue;
+          const req = JSON.parse(line);
+          if (req.method === 'tools/call') {
+            process.stdout.write(JSON.stringify({
+              jsonrpc:'2.0', id:req.id,
+              result:{content:[{type:'text',text:'ok'}]}
+            }) + '\\n');
+          }
+        }
+      });
+    `], { stdio: ["pipe", "pipe", "pipe"] });
+        collectLines(proc);
+        sendJsonRpc(proc, { jsonrpc: "2.0", id: 1, method: "tools/call", params: { name: "tool_a", arguments: {} } });
+        await new Promise((r) => setTimeout(r, 300));
+        sendJsonRpc(proc, { jsonrpc: "2.0", id: 2, method: "tools/call", params: { name: "tool_b", arguments: {} } });
+        await new Promise((r) => setTimeout(r, 300));
+        sendJsonRpc(proc, { jsonrpc: "2.0", id: 3, method: "tools/call", params: { name: "tool_c", arguments: {} } });
+        await new Promise((r) => setTimeout(r, 500));
+        proc.stdin.end();
+        await new Promise((r) => setTimeout(r, 200));
+        const logContent = await readFile(LOG_PATH, "utf-8");
+        const logLines = logContent.trimEnd().split("\n");
+        const entries = logLines.slice(-3).map((l) => JSON.parse(l));
+        expect(entries[0].previousHash).toBeDefined();
+        expect(entries[1].previousHash).not.toBe(entries[0].previousHash);
+        expect(entries[2].previousHash).not.toBe(entries[1].previousHash);
+    });
+});
+//# sourceMappingURL=proxy.test.js.map

package/dist/wrap/proxy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.test.js","sourceRoot":"","sources":["../../src/wrap/proxy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;AAEhE,SAAS,WAAW,CAAC,IAA8B,EAAE,GAAW;IAC9D,IAAI,CAAC,KAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,YAAY,CAAC,IAA8B;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3E,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAI,WAAW,GAAkB,IAAI,CAAC;IAEtC,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACvD,MAAM,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;;;;;;;;;;;;;;;;;KAiBjE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAEzC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAEjC,WAAW,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/E,WAAW,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAEnF,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAM,CAAC,GAAG,EAAE,CAAC;QAElB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAEhD,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;;;;;;;;;;;;;;;;;;KAkBjE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAEzC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAEjC,WAAW,CAAC,IAAI,EAAE;YAChB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY;YAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE;SACnE,CAAC,CAAC;QAEH,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAM,CAAC,GAAG,EAAE,CAAC;QAElB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAEhD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAErD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAE5D,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAChD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;;;;;;;;;;;;;;;;;;KAkBjE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAEzC,YAAY,CAAC,IAAI,CAAC,CAAC;QAEnB,WAAW,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9G,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,WAAW,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9G,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,WAAW,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAE9G,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAM,CAAC,GAAG,EAAE,CAAC;QAClB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAE7C,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7D,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QAClE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/examples/README.md

@@ -0,0 +1,33 @@
+# Examples
+
+## claude-desktop.json
+
+Minimal config for wrapping Claude Desktop's MCP servers with audit logging. Uses HMAC-SHA256 (no key file needed, just a secret). Denies write operations by default.
+
+Add to your `claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "audited": {
+      "command": "node",
+      "args": ["/path/to/mcp-audit-gateway/dist/cli.js", "serve", "/path/to/examples/claude-desktop.json"],
+      "env": {
+        "GITHUB_TOKEN": "ghp_...",
+        "AUDIT_SECRET": "your-64-char-hex-secret"
+      }
+    }
+  }
+}
+```
+
+## multi-agent-production.json
+
+Production deployment with multiple upstream services, strict deny-by-default policy, per-principal rate limits, Ed25519 signing, and OTel export. Shows the typical setup for a team running multiple AI agents against shared infrastructure.
+
+Key patterns demonstrated:
+- Default deny with explicit allow rules per agent identity
+- Rate limiting on destructive operations (deploy)
+- Separate namespaces isolating database, deploy, and monitoring tools
+- OTel export to a collector for centralized observability
+- Large rotation threshold for high-volume environments

package/examples/claude-desktop.json

@@ -0,0 +1,50 @@
+{
+  "name": "claude-desktop-gateway",
+  "version": "0.1.0",
+  "listen": {
+    "transport": "stdio"
+  },
+  "upstreams": [
+    {
+      "name": "filesystem",
+      "namespace": "fs",
+      "transport": {
+        "type": "stdio",
+        "command": "npx",
+        "args": ["@modelcontextprotocol/server-filesystem", "/Users/you/projects"]
+      }
+    },
+    {
+      "name": "github",
+      "namespace": "gh",
+      "transport": {
+        "type": "stdio",
+        "command": "npx",
+        "args": ["@modelcontextprotocol/server-github"],
+        "env": {
+          "GITHUB_PERSONAL_ACCESS_TOKEN": "${GITHUB_TOKEN}"
+        }
+      }
+    }
+  ],
+  "policy": {
+    "defaultEffect": "allow",
+    "rules": [
+      {
+        "effect": "deny",
+        "tools": ["fs/write_file", "fs/create_directory"],
+        "principals": ["*"]
+      }
+    ]
+  },
+  "attestation": {
+    "enabled": true,
+    "algorithm": "hmac-sha256",
+    "secret": "${AUDIT_SECRET}"
+  },
+  "auditLog": {
+    "enabled": true,
+    "path": "~/.mcp-audit/claude-desktop.jsonl",
+    "rotateAfterMb": 50
+  }
+}

package/examples/multi-agent-production.json

@@ -0,0 +1,72 @@
+{
+  "name": "production-gateway",
+  "version": "0.1.0",
+  "listen": {
+    "transport": "streamable-http",
+    "port": 3100,
+    "host": "0.0.0.0"
+  },
+  "upstreams": [
+    {
+      "name": "database",
+      "namespace": "db",
+      "transport": {
+        "type": "streamable-http",
+        "url": "http://db-mcp-server:8080/mcp"
+      }
+    },
+    {
+      "name": "deploy-tools",
+      "namespace": "deploy",
+      "transport": {
+        "type": "streamable-http",
+        "url": "http://deploy-mcp-server:8080/mcp"
+      }
+    },
+    {
+      "name": "monitoring",
+      "namespace": "mon",
+      "transport": {
+        "type": "streamable-http",
+        "url": "http://monitoring-mcp-server:8080/mcp"
+      }
+    }
+  ],
+  "policy": {
+    "defaultEffect": "deny",
+    "rules": [
+      {
+        "effect": "allow",
+        "principals": ["agent:read-*"],
+        "tools": ["db/query", "mon/*"]
+      },
+      {
+        "effect": "allow",
+        "principals": ["agent:deploy-bot"],
+        "tools": ["deploy/*"],
+        "rateLimit": { "maxPerMinute": 5, "maxPerHour": 20 }
+      },
+      {
+        "effect": "allow",
+        "principals": ["agent:admin"],
+        "rateLimit": { "maxPerMinute": 60, "maxPerHour": 500 }
+      }
+    ]
+  },
+  "attestation": {
+    "enabled": true,
+    "algorithm": "ed25519",
+    "keyPath": "/etc/mcp-gateway/signing.key"
+  },
+  "telemetry": {
+    "enabled": true,
+    "serviceName": "mcp-audit-gateway",
+    "exporterEndpoint": "http://otel-collector:4318/v1/traces",
+    "sampleRate": 1.0
+  },
+  "auditLog": {
+    "enabled": true,
+    "path": "/var/log/mcp-audit/production.jsonl",
+    "rotateAfterMb": 500
+  }
+}

package/gateway.config.example.json

@@ -0,0 +1,61 @@
+{
+  "name": "mcp-audit-gateway",
+  "version": "0.1.0",
+  "listen": {
+    "transport": "streamable-http",
+    "port": 3100,
+    "host": "127.0.0.1"
+  },
+  "upstreams": [
+    {
+      "name": "filesystem-server",
+      "namespace": "fs",
+      "transport": {
+        "type": "stdio",
+        "command": "npx",
+        "args": ["@modelcontextprotocol/server-filesystem", "/tmp"]
+      }
+    },
+    {
+      "name": "github-server",
+      "namespace": "github",
+      "transport": {
+        "type": "streamable-http",
+        "url": "http://localhost:3001/mcp"
+      }
+    }
+  ],
+  "policy": {
+    "defaultEffect": "allow",
+    "rules": [
+      {
+        "effect": "deny",
+        "principals": ["agent:readonly-*"],
+        "tools": ["*/write_*", "*/delete_*", "*/create_*"]
+      },
+      {
+        "effect": "allow",
+        "principals": ["agent:admin"],
+        "rateLimit": {
+          "maxPerMinute": 60,
+          "maxPerHour": 1000
+        }
+      }
+    ]
+  },
+  "attestation": {
+    "enabled": true,
+    "algorithm": "ed25519"
+  },
+  "telemetry": {
+    "enabled": true,
+    "serviceName": "mcp-audit-gateway",
+    "exporterEndpoint": "http://localhost:4318/v1/traces",
+    "sampleRate": 1.0
+  },
+  "auditLog": {
+    "enabled": true,
+    "path": "./audit.jsonl",
+    "rotateAfterMb": 100
+  }
+}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@mcp-audit-gateway/core",
+  "version": "0.1.0",
+  "description": "MCP audit and attestation gateway — transparent proxy with cryptographic attestation, policy enforcement, and OTel export",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "mcp-audit": "dist/cli.js",
+    "mcp-audit-gateway": "dist/cli.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx watch src/cli.ts",
+    "start": "node dist/cli.js",
+    "test": "vitest",
+    "lint": "eslint src/"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "gateway",
+    "audit",
+    "attestation",
+    "opentelemetry",
+    "proxy"
+  ],
+  "author": "Elankumaran Srinivasan",
+  "license": "MIT",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "@opentelemetry/api": "^1.9.0",
+    "@opentelemetry/sdk-node": "^0.57.0",
+    "@opentelemetry/sdk-trace-node": "^1.30.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.57.0",
+    "@opentelemetry/semantic-conventions": "^1.30.0",
+    "@noble/ed25519": "^2.1.0",
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.6.0",
+    "vitest": "^2.1.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  }
+}