@mcp-rating/gateway 0.2.0

package/dist/permissions/trust-tiers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-tiers.js","sourceRoot":"","sources":["../../src/permissions/trust-tiers.ts"],"names":[],"mappings":"AAEA,yDAAyD;AACzD,MAAM,CAAC,MAAM,YAAY,GAA8B;IACrD,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,YAAY;CACtB,CAAC;AAEF,uDAAuD;AACvD,MAAM,CAAC,MAAM,sBAAsB,GAA8B;IAC/D,QAAQ,EAAE,EAAE;IACZ,OAAO,EAAE,CAAC;IACV,SAAS,EAAE,CAAC;IACZ,OAAO,EAAE,CAAC;CACX,CAAC;AAYF,sCAAsC;AACtC,MAAM,CAAC,MAAM,sBAAsB,GAAmC;IACpE,QAAQ,EAAE;QACR,oBAAoB,EAAE,KAAK;QAC3B,cAAc,EAAE,IAAI;QACpB,WAAW,EAAE,sDAAsD;KACpE;IACD,OAAO,EAAE;QACP,oBAAoB,EAAE,KAAK;QAC3B,cAAc,EAAE,IAAI;QACpB,WAAW,EAAE,oEAAoE;KAClF;IACD,SAAS,EAAE;QACT,oBAAoB,EAAE,IAAI;QAC1B,cAAc,EAAE,IAAI;QACpB,WAAW,EAAE,0FAA0F;KACxG;IACD,OAAO,EAAE;QACP,oBAAoB,EAAE,IAAI;QAC1B,cAAc,EAAE,IAAI;QACpB,WAAW,EAAE,iEAAiE;KAC/E;CACF,CAAC;AAEF,4CAA4C;AAC5C,MAAM,UAAU,cAAc,CAAC,IAAe;IAC5C,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC"}

package/dist/plugins/builtin/logging-plugin.d.ts

@@ -0,0 +1,6 @@
+import type { GatewayPlugin } from "../plugin-manager.js";
+/**
+ * Built-in logging plugin that logs all tool calls, connections, and disconnections.
+ * Serves as both a default plugin and an example for custom plugin development.
+ */
+export declare const loggingPlugin: GatewayPlugin;

package/dist/plugins/builtin/logging-plugin.js

@@ -0,0 +1,41 @@
+import { log } from "../../utils/logger.js";
+/**
+ * Built-in logging plugin that logs all tool calls, connections, and disconnections.
+ * Serves as both a default plugin and an example for custom plugin development.
+ */
+export const loggingPlugin = {
+    name: "builtin-logging",
+    version: "1.0.0",
+    async beforeToolCall(ctx) {
+        log.debug("[plugin:logging] Tool call starting", {
+            slug: ctx.slug,
+            tool: ctx.toolName,
+            trustTier: ctx.trustTier,
+            argKeys: Object.keys(ctx.args),
+        });
+        return ctx;
+    },
+    async afterToolCall(ctx, result) {
+        log.debug("[plugin:logging] Tool call completed", {
+            slug: ctx.slug,
+            tool: ctx.toolName,
+            isError: result.isError ?? false,
+            contentCount: result.content?.length ?? 0,
+        });
+        return result;
+    },
+    async onConnect(connection) {
+        log.debug("[plugin:logging] Server connected", {
+            slug: connection.slug,
+            displayName: connection.displayName,
+            transportType: connection.transportType,
+            toolCount: connection.toolCount,
+            resourceCount: connection.resourceCount,
+            promptCount: connection.promptCount,
+        });
+    },
+    async onDisconnect(slug) {
+        log.debug("[plugin:logging] Server disconnected", { slug });
+    },
+};
+//# sourceMappingURL=logging-plugin.js.map

package/dist/plugins/builtin/logging-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging-plugin.js","sourceRoot":"","sources":["../../../src/plugins/builtin/logging-plugin.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAE5C;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAkB;IAC1C,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,OAAO;IAEhB,KAAK,CAAC,cAAc,CAAC,GAAoB;QACvC,GAAG,CAAC,KAAK,CAAC,qCAAqC,EAAE;YAC/C,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;SAC/B,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,GAAoB,EACpB,MAAsB;QAEtB,GAAG,CAAC,KAAK,CAAC,sCAAsC,EAAE;YAChD,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK;YAChC,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;SAC1C,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAA6B;QAC3C,GAAG,CAAC,KAAK,CAAC,mCAAmC,EAAE;YAC7C,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,WAAW,EAAE,UAAU,CAAC,WAAW;SACpC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,GAAG,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;CACF,CAAC"}

package/dist/plugins/plugin-manager.d.ts

@@ -0,0 +1,65 @@
+import type { CallToolResult } from "@modelcontextprotocol/sdk/types.js";
+import type { ConnectionSummary } from "../connection/types.js";
+import type { TrustTier } from "../registry/types.js";
+export interface ToolCallContext {
+    slug: string;
+    toolName: string;
+    args: Record<string, unknown>;
+    trustTier: TrustTier;
+}
+export interface GatewayPlugin {
+    name: string;
+    version?: string;
+    /** Called before a proxied tool call is forwarded downstream */
+    beforeToolCall?(context: ToolCallContext): Promise<ToolCallContext | null>;
+    /** Called after a proxied tool call returns */
+    afterToolCall?(context: ToolCallContext, result: CallToolResult): Promise<CallToolResult>;
+    /** Called when a server connects */
+    onConnect?(connection: ConnectionSummary): Promise<void>;
+    /** Called when a server disconnects */
+    onDisconnect?(slug: string): Promise<void>;
+}
+/**
+ * Manages gateway plugins and runs lifecycle hooks.
+ *
+ * Plugins are run in registration order.
+ * `beforeToolCall` returning null blocks the call.
+ * Errors in plugins are logged but don't block the call (fault-tolerant).
+ */
+export declare class PluginManager {
+    private plugins;
+    /**
+     * Register a plugin.
+     */
+    register(plugin: GatewayPlugin): void;
+    /**
+     * Unregister a plugin by name.
+     */
+    unregister(name: string): void;
+    /**
+     * List all registered plugins.
+     */
+    listPlugins(): Array<{
+        name: string;
+        version?: string;
+    }>;
+    /**
+     * Run beforeToolCall hooks in order.
+     * Returns null if any plugin blocks the call.
+     * Returns the (potentially modified) context otherwise.
+     */
+    runBeforeToolCall(ctx: ToolCallContext): Promise<ToolCallContext | null>;
+    /**
+     * Run afterToolCall hooks in order.
+     * Returns the (potentially modified) result.
+     */
+    runAfterToolCall(ctx: ToolCallContext, result: CallToolResult): Promise<CallToolResult>;
+    /**
+     * Run onConnect hooks for all plugins.
+     */
+    runOnConnect(connection: ConnectionSummary): Promise<void>;
+    /**
+     * Run onDisconnect hooks for all plugins.
+     */
+    runOnDisconnect(slug: string): Promise<void>;
+}

package/dist/plugins/plugin-manager.js

@@ -0,0 +1,137 @@
+import { log } from "../utils/logger.js";
+// ── Plugin Manager ───────────────────────────────────────────────────────────
+/**
+ * Manages gateway plugins and runs lifecycle hooks.
+ *
+ * Plugins are run in registration order.
+ * `beforeToolCall` returning null blocks the call.
+ * Errors in plugins are logged but don't block the call (fault-tolerant).
+ */
+export class PluginManager {
+    plugins = [];
+    /**
+     * Register a plugin.
+     */
+    register(plugin) {
+        // Don't double-register
+        if (this.plugins.some((p) => p.name === plugin.name)) {
+            log.warn("Plugin already registered, replacing", { name: plugin.name });
+            this.plugins = this.plugins.filter((p) => p.name !== plugin.name);
+        }
+        this.plugins.push(plugin);
+        log.info("Plugin registered", {
+            name: plugin.name,
+            version: plugin.version,
+        });
+    }
+    /**
+     * Unregister a plugin by name.
+     */
+    unregister(name) {
+        const before = this.plugins.length;
+        this.plugins = this.plugins.filter((p) => p.name !== name);
+        if (this.plugins.length < before) {
+            log.info("Plugin unregistered", { name });
+        }
+    }
+    /**
+     * List all registered plugins.
+     */
+    listPlugins() {
+        return this.plugins.map((p) => ({
+            name: p.name,
+            version: p.version,
+        }));
+    }
+    /**
+     * Run beforeToolCall hooks in order.
+     * Returns null if any plugin blocks the call.
+     * Returns the (potentially modified) context otherwise.
+     */
+    async runBeforeToolCall(ctx) {
+        let currentCtx = ctx;
+        for (const plugin of this.plugins) {
+            if (!plugin.beforeToolCall)
+                continue;
+            try {
+                const result = await plugin.beforeToolCall(currentCtx);
+                if (result === null) {
+                    log.info("Tool call blocked by plugin", {
+                        plugin: plugin.name,
+                        tool: ctx.toolName,
+                        server: ctx.slug,
+                    });
+                    return null;
+                }
+                currentCtx = result;
+            }
+            catch (err) {
+                log.warn("Plugin beforeToolCall error (continuing)", {
+                    plugin: plugin.name,
+                    error: String(err),
+                });
+                // Continue with unmodified context on error
+            }
+        }
+        return currentCtx;
+    }
+    /**
+     * Run afterToolCall hooks in order.
+     * Returns the (potentially modified) result.
+     */
+    async runAfterToolCall(ctx, result) {
+        let currentResult = result;
+        for (const plugin of this.plugins) {
+            if (!plugin.afterToolCall)
+                continue;
+            try {
+                currentResult = await plugin.afterToolCall(ctx, currentResult);
+            }
+            catch (err) {
+                log.warn("Plugin afterToolCall error (continuing)", {
+                    plugin: plugin.name,
+                    error: String(err),
+                });
+                // Continue with unmodified result on error
+            }
+        }
+        return currentResult;
+    }
+    /**
+     * Run onConnect hooks for all plugins.
+     */
+    async runOnConnect(connection) {
+        for (const plugin of this.plugins) {
+            if (!plugin.onConnect)
+                continue;
+            try {
+                await plugin.onConnect(connection);
+            }
+            catch (err) {
+                log.warn("Plugin onConnect error", {
+                    plugin: plugin.name,
+                    error: String(err),
+                });
+            }
+        }
+    }
+    /**
+     * Run onDisconnect hooks for all plugins.
+     */
+    async runOnDisconnect(slug) {
+        for (const plugin of this.plugins) {
+            if (!plugin.onDisconnect)
+                continue;
+            try {
+                await plugin.onDisconnect(slug);
+            }
+            catch (err) {
+                log.warn("Plugin onDisconnect error", {
+                    plugin: plugin.name,
+                    error: String(err),
+                });
+            }
+        }
+    }
+}
+//# sourceMappingURL=plugin-manager.js.map

package/dist/plugins/plugin-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-manager.js","sourceRoot":"","sources":["../../src/plugins/plugin-manager.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAyBzC,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IAChB,OAAO,GAAoB,EAAE,CAAC;IAEtC;;OAEG;IACH,QAAQ,CAAC,MAAqB;QAC5B,wBAAwB;QACxB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAC5B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAY;QACrB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CACrB,GAAoB;QAEpB,IAAI,UAAU,GAAG,GAAG,CAAC;QAErB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,cAAc;gBAAE,SAAS;YAErC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;gBACvD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBACpB,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE;wBACtC,MAAM,EAAE,MAAM,CAAC,IAAI;wBACnB,IAAI,EAAE,GAAG,CAAC,QAAQ;wBAClB,MAAM,EAAE,GAAG,CAAC,IAAI;qBACjB,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,UAAU,GAAG,MAAM,CAAC;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,0CAA0C,EAAE;oBACnD,MAAM,EAAE,MAAM,CAAC,IAAI;oBACnB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;iBACnB,CAAC,CAAC;gBACH,4CAA4C;YAC9C,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CACpB,GAAoB,EACpB,MAAsB;QAEtB,IAAI,aAAa,GAAG,MAAM,CAAC;QAE3B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,aAAa;gBAAE,SAAS;YAEpC,IAAI,CAAC;gBACH,aAAa,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE;oBAClD,MAAM,EAAE,MAAM,CAAC,IAAI;oBACnB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;iBACnB,CAAC,CAAC;gBACH,2CAA2C;YAC7C,CAAC;QACH,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,UAA6B;QAC9C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,SAAS;gBAAE,SAAS;YAEhC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE;oBACjC,MAAM,EAAE,MAAM,CAAC,IAAI;oBACnB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,IAAY;QAChC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,YAAY;gBAAE,SAAS;YAEnC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE;oBACpC,MAAM,EAAE,MAAM,CAAC,IAAI;oBACnB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/proxy/prime-handlers.d.ts

@@ -0,0 +1,27 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+/**
+ * Prime the SDK's resource and prompt request handlers BEFORE the transport
+ * is connected.
+ *
+ * Why this exists:
+ *   The MCP SDK initializes resource/prompt request handlers lazily — the
+ *   first time you call `mcpServer.resource()` / `mcpServer.prompt()`. That
+ *   lazy init calls `server.registerCapabilities(...)`, which throws
+ *   "Cannot register capabilities after connecting to transport" once a
+ *   transport is attached.
+ *
+ *   The gateway only registers resources/prompts dynamically — AFTER a
+ *   downstream server connects (well after the gateway's own transport is up).
+ *   So the first dynamic registration would throw, and downstream resources
+ *   and prompts would never be proxied to the upstream client.
+ *
+ *   The fix: register a throwaway resource and prompt at construction time
+ *   (before connect) and immediately remove them. This flips the SDK's
+ *   one-way `_resourceHandlersInitialized` / `_promptHandlersInitialized`
+ *   flags and registers the capabilities while still allowed. Subsequent
+ *   dynamic registrations short-circuit the lazy init and never re-register
+ *   capabilities — so they no longer throw.
+ *
+ * Must be called before `mcpServer.connect(transport)`.
+ */
+export declare function primeProxyHandlers(mcpServer: McpServer): void;

package/dist/proxy/prime-handlers.js

@@ -0,0 +1,47 @@
+import { log } from "../utils/logger.js";
+/**
+ * Prime the SDK's resource and prompt request handlers BEFORE the transport
+ * is connected.
+ *
+ * Why this exists:
+ *   The MCP SDK initializes resource/prompt request handlers lazily — the
+ *   first time you call `mcpServer.resource()` / `mcpServer.prompt()`. That
+ *   lazy init calls `server.registerCapabilities(...)`, which throws
+ *   "Cannot register capabilities after connecting to transport" once a
+ *   transport is attached.
+ *
+ *   The gateway only registers resources/prompts dynamically — AFTER a
+ *   downstream server connects (well after the gateway's own transport is up).
+ *   So the first dynamic registration would throw, and downstream resources
+ *   and prompts would never be proxied to the upstream client.
+ *
+ *   The fix: register a throwaway resource and prompt at construction time
+ *   (before connect) and immediately remove them. This flips the SDK's
+ *   one-way `_resourceHandlersInitialized` / `_promptHandlersInitialized`
+ *   flags and registers the capabilities while still allowed. Subsequent
+ *   dynamic registrations short-circuit the lazy init and never re-register
+ *   capabilities — so they no longer throw.
+ *
+ * Must be called before `mcpServer.connect(transport)`.
+ */
+export function primeProxyHandlers(mcpServer) {
+    // Resources
+    try {
+        const placeholder = mcpServer.resource("__gateway_capability_init__", "gateway-init://capability-priming", { description: "Internal capability-priming placeholder (removed immediately)" }, async () => ({ contents: [] }));
+        placeholder.remove();
+        log.debug("Primed resource handlers");
+    }
+    catch (err) {
+        log.warn("Failed to prime resource handlers", { error: String(err) });
+    }
+    // Prompts
+    try {
+        const placeholder = mcpServer.prompt("__gateway_capability_init__", "Internal capability-priming placeholder (removed immediately)", {}, async () => ({ messages: [] }));
+        placeholder.remove();
+        log.debug("Primed prompt handlers");
+    }
+    catch (err) {
+        log.warn("Failed to prime prompt handlers", { error: String(err) });
+    }
+}
+//# sourceMappingURL=prime-handlers.js.map

package/dist/proxy/prime-handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prime-handlers.js","sourceRoot":"","sources":["../../src/proxy/prime-handlers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAoB;IACrD,YAAY;IACZ,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,CACpC,6BAA6B,EAC7B,mCAAmC,EACnC,EAAE,WAAW,EAAE,+DAA+D,EAAE,EAChF,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAC/B,CAAC;QACF,WAAW,CAAC,MAAM,EAAE,CAAC;QACrB,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,UAAU;IACV,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAClC,6BAA6B,EAC7B,+DAA+D,EAC/D,EAAE,EACF,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAC/B,CAAC;QACF,WAAW,CAAC,MAAM,EAAE,CAAC;QACrB,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;AACH,CAAC"}

package/dist/proxy/progress-forwarder.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Progress notification from the downstream server's onprogress callback.
+ * Matches the MCP `notifications/progress` params shape (without progressToken,
+ * which the forwarder adds).
+ */
+export interface DownstreamProgress {
+    progress: number;
+    total?: number;
+    message?: string;
+}
+/**
+ * Minimal slice of the upstream `RequestHandlerExtra` we need to forward
+ * progress notifications back to the original client. Typed loosely so we
+ * stay compatible with future MCP SDK changes to `RequestHandlerExtra`.
+ */
+export interface UpstreamProgressContext {
+    _meta?: {
+        progressToken?: string | number;
+    } | undefined;
+    sendNotification: (notification: {
+        method: "notifications/progress";
+        params: {
+            progressToken: string | number;
+            progress: number;
+            total?: number;
+            message?: string;
+        };
+    }) => Promise<void>;
+}
+/**
+ * Build an `onprogress` callback that relays downstream progress events back
+ * to the upstream client using the upstream-supplied `progressToken`.
+ *
+ * Returns `undefined` when the upstream client didn't supply a progress
+ * token — in which case we skip the wiring entirely so the SDK doesn't
+ * allocate handlers we'll never invoke.
+ *
+ * Failures inside the forwarder are logged but never thrown — progress
+ * notifications are best-effort by design.
+ */
+export declare function buildProgressForwarder(extra: UpstreamProgressContext | undefined, context: {
+    slug: string;
+    toolName: string;
+}): ((progress: DownstreamProgress) => void) | undefined;

package/dist/proxy/progress-forwarder.js

@@ -0,0 +1,40 @@
+import { log } from "../utils/logger.js";
+/**
+ * Build an `onprogress` callback that relays downstream progress events back
+ * to the upstream client using the upstream-supplied `progressToken`.
+ *
+ * Returns `undefined` when the upstream client didn't supply a progress
+ * token — in which case we skip the wiring entirely so the SDK doesn't
+ * allocate handlers we'll never invoke.
+ *
+ * Failures inside the forwarder are logged but never thrown — progress
+ * notifications are best-effort by design.
+ */
+export function buildProgressForwarder(extra, context) {
+    const upstreamToken = extra?._meta?.progressToken;
+    if (upstreamToken === undefined || !extra?.sendNotification) {
+        return undefined;
+    }
+    return (progress) => {
+        extra
+            .sendNotification({
+            method: "notifications/progress",
+            params: {
+                progressToken: upstreamToken,
+                progress: progress.progress,
+                total: progress.total,
+                message: progress.message,
+            },
+        })
+            .catch((err) => {
+            // Best-effort: don't fail the tool call if a progress notification
+            // can't be delivered (e.g. transport already closed).
+            log.warn("Failed to forward progress notification", {
+                slug: context.slug,
+                toolName: context.toolName,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        });
+    };
+}
+//# sourceMappingURL=progress-forwarder.js.map

package/dist/proxy/progress-forwarder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"progress-forwarder.js","sourceRoot":"","sources":["../../src/proxy/progress-forwarder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AA+BzC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAA0C,EAC1C,OAA2C;IAE3C,MAAM,aAAa,GAAG,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC;IAClD,IAAI,aAAa,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,gBAAgB,EAAE,CAAC;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,QAA4B,EAAQ,EAAE;QAC5C,KAAK;aACF,gBAAgB,CAAC;YAChB,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE;gBACN,aAAa,EAAE,aAAa;gBAC5B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B;SACF,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,mEAAmE;YACnE,sDAAsD;YACtD,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE;gBAClD,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;AACJ,CAAC"}

package/dist/proxy/prompt-router.d.ts

@@ -0,0 +1,25 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { DownstreamConnection, DownstreamPrompt } from "../connection/types.js";
+/**
+ * Namespace a prompt name: `{slug}__{promptname}`
+ */
+export declare function namespacePrompt(slug: string, promptName: string): string;
+/**
+ * Register proxied prompts on the gateway McpServer for a downstream connection.
+ *
+ * Each downstream prompt is registered with:
+ * - Namespaced name: `slug__promptname`
+ * - Description prefixed with trust tier and server name
+ * - Get handler that forwards to `client.getPrompt()`
+ *
+ * Returns a map of namespaced name → { remove } handle for cleanup.
+ */
+export declare function registerProxiedPrompts(mcpServer: McpServer, connection: DownstreamConnection, downstreamPrompts: DownstreamPrompt[]): Map<string, {
+    remove: () => void;
+}>;
+/**
+ * Remove all proxied prompts for a connection.
+ */
+export declare function removeProxiedPrompts(proxies: Map<string, {
+    remove: () => void;
+}>): void;

package/dist/proxy/prompt-router.js

@@ -0,0 +1,110 @@
+import { z } from "zod";
+import { TRUST_LABELS } from "../permissions/trust-tiers.js";
+import { log } from "../utils/logger.js";
+const SEPARATOR = "__";
+/**
+ * Namespace a prompt name: `{slug}__{promptname}`
+ */
+export function namespacePrompt(slug, promptName) {
+    return `${slug}${SEPARATOR}${promptName}`;
+}
+/**
+ * Register proxied prompts on the gateway McpServer for a downstream connection.
+ *
+ * Each downstream prompt is registered with:
+ * - Namespaced name: `slug__promptname`
+ * - Description prefixed with trust tier and server name
+ * - Get handler that forwards to `client.getPrompt()`
+ *
+ * Returns a map of namespaced name → { remove } handle for cleanup.
+ */
+export function registerProxiedPrompts(mcpServer, connection, downstreamPrompts) {
+    const registered = new Map();
+    const trustLabel = TRUST_LABELS[connection.trustTier];
+    for (const prompt of downstreamPrompts) {
+        const nsName = namespacePrompt(connection.slug, prompt.name);
+        const description = `[${trustLabel}] [${connection.displayName}] ${prompt.description || prompt.name}`;
+        log.debug("Registering proxied prompt", {
+            nsName,
+            downstream: prompt.name,
+            server: connection.slug,
+        });
+        try {
+            // Build args schema from prompt arguments
+            const argsSchema = {};
+            if (prompt.arguments) {
+                for (const arg of prompt.arguments) {
+                    if (arg.required) {
+                        argsSchema[arg.name] = z
+                            .string()
+                            .describe(arg.description || arg.name);
+                    }
+                    else {
+                        argsSchema[arg.name] = z
+                            .string()
+                            .optional()
+                            .describe(arg.description || arg.name);
+                    }
+                }
+            }
+            const handle = mcpServer.prompt(nsName, description, argsSchema, async (args) => {
+                log.debug("Proxying prompt get", {
+                    nsName,
+                    downstream: prompt.name,
+                    server: connection.slug,
+                });
+                try {
+                    // Convert args to string values for the downstream prompt
+                    const stringArgs = {};
+                    for (const [key, value] of Object.entries(args)) {
+                        if (value !== undefined && value !== null) {
+                            stringArgs[key] = String(value);
+                        }
+                    }
+                    const result = await connection.client.getPrompt({
+                        name: prompt.name,
+                        arguments: stringArgs,
+                    });
+                    return result;
+                }
+                catch (err) {
+                    const msg = err instanceof Error ? err.message : String(err);
+                    log.error("Proxied prompt get failed", {
+                        nsName,
+                        error: msg,
+                    });
+                    return {
+                        messages: [
+                            {
+                                role: "user",
+                                content: {
+                                    type: "text",
+                                    text: `Error getting prompt from ${connection.displayName}: ${msg}`,
+                                },
+                            },
+                        ],
+                    };
+                }
+            });
+            registered.set(nsName, handle);
+        }
+        catch (err) {
+            log.warn("Failed to register proxied prompt", {
+                nsName,
+                error: String(err),
+            });
+        }
+    }
+    return registered;
+}
+/**
+ * Remove all proxied prompts for a connection.
+ */
+export function removeProxiedPrompts(proxies) {
+    for (const [name, handle] of proxies) {
+        log.debug("Removing proxied prompt", { name });
+        handle.remove();
+    }
+    proxies.clear();
+}
+//# sourceMappingURL=prompt-router.js.map

package/dist/proxy/prompt-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-router.js","sourceRoot":"","sources":["../../src/proxy/prompt-router.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAK7D,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAEzC,MAAM,SAAS,GAAG,IAAI,CAAC;AAEvB;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,UAAkB;IAC9D,OAAO,GAAG,IAAI,GAAG,SAAS,GAAG,UAAU,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAoB,EACpB,UAAgC,EAChC,iBAAqC;IAErC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC7D,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAEtD,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,IAAI,UAAU,MAAM,UAAU,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAEvG,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE;YACtC,MAAM;YACN,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,MAAM,EAAE,UAAU,CAAC,IAAI;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,0CAA0C;YAC1C,MAAM,UAAU,GAAiC,EAAE,CAAC;YACpD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACnC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;wBACjB,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;6BACrB,MAAM,EAAE;6BACR,QAAQ,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC3C,CAAC;yBAAM,CAAC;wBACN,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;6BACrB,MAAM,EAAE;6BACR,QAAQ,EAAE;6BACV,QAAQ,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC3C,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAC7B,MAAM,EACN,WAAW,EACX,UAAU,EACV,KAAK,EAAE,IAA6B,EAAE,EAAE;gBACtC,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE;oBAC/B,MAAM;oBACN,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,MAAM,EAAE,UAAU,CAAC,IAAI;iBACxB,CAAC,CAAC;gBAEH,IAAI,CAAC;oBACH,0DAA0D;oBAC1D,MAAM,UAAU,GAA2B,EAAE,CAAC;oBAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;wBAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;4BAC1C,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;wBAClC,CAAC;oBACH,CAAC;oBAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC;wBAC/C,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,SAAS,EAAE,UAAU;qBACtB,CAAC,CAAC;oBACH,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC7D,GAAG,CAAC,KAAK,CAAC,2BAA2B,EAAE;wBACrC,MAAM;wBACN,KAAK,EAAE,GAAG;qBACX,CAAC,CAAC;oBACH,OAAO;wBACL,QAAQ,EAAE;4BACR;gCACE,IAAI,EAAE,MAAe;gCACrB,OAAO,EAAE;oCACP,IAAI,EAAE,MAAe;oCACrB,IAAI,EAAE,6BAA6B,UAAU,CAAC,WAAW,KAAK,GAAG,EAAE;iCACpE;6BACF;yBACF;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC,CACF,CAAC;YAEF,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE;gBAC5C,MAAM;gBACN,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAA4C;IAE5C,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACrC,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,EAAE,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC"}

package/dist/proxy/resource-router.d.ts

@@ -0,0 +1,25 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { DownstreamConnection, DownstreamResource } from "../connection/types.js";
+/**
+ * Register proxied resources on the gateway McpServer for a downstream connection.
+ *
+ * Each downstream resource is registered with:
+ * - Namespaced URI: `slug://original-uri`
+ * - Description prefixed with trust tier and server name
+ * - Read handler that forwards to downstream `client.readResource()`
+ *
+ * Returns a map of namespaced URI → { remove } handle for cleanup.
+ */
+export declare function registerProxiedResources(mcpServer: McpServer, connection: DownstreamConnection, downstreamResources: DownstreamResource[]): Map<string, {
+    remove: () => void;
+}>;
+/**
+ * Remove all proxied resources for a connection.
+ */
+export declare function removeProxiedResources(proxies: Map<string, {
+    remove: () => void;
+}>): void;
+/**
+ * Namespace a resource URI: `slug://original-uri-path`
+ */
+export declare function namespaceResourceUri(slug: string, originalUri: string): string;