@mcp-rating/gateway 0.2.0

package/dist/http-daemon.js

@@ -0,0 +1,302 @@
+import { createServer } from "node:http";
+import { randomUUID } from "node:crypto";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { createGatewayServer } from "./gateway-server.js";
+import { RegistryClient } from "./registry/registry-client.js";
+import { ManifestResolver } from "./sandbox/manifest-resolver.js";
+import { log } from "./utils/logger.js";
+import { dirname, join } from "node:path";
+/**
+ * Run the gateway as a long-running HTTP daemon.
+ *
+ * Multiple MCP clients connect over Streamable HTTP. Each gets its own
+ * isolated session (McpServer + ConnectionManager + downstream connections),
+ * but all sessions share a warm RegistryClient cache and a single Manifest
+ * resolver (one source of truth for sandbox manifests on disk).
+ *
+ * Security: every /mcp request must carry `Authorization: Bearer <token>`.
+ * The token is required in daemon mode regardless of bind address.
+ *
+ * Multi-tenant: supply `tokens` (tenantId → token) to run a shared daemon
+ * where each tenant authenticates with its own token. Sessions are bound to
+ * the authenticating tenant (cross-tenant session reuse is rejected), and each
+ * tenant gets an isolated sandbox-manifest store. The single `token` maps to
+ * tenant "default" for backward compatibility.
+ */
+export async function runHttpDaemon(config, opts) {
+    const { port, host } = opts;
+    // Build the tenant → token map. The single token (if any) becomes "default".
+    const tenantTokens = { ...(opts.tokens ?? {}) };
+    if (opts.token)
+        tenantTokens.default ??= opts.token;
+    const tenantCount = Object.keys(tenantTokens).length;
+    if (tenantCount === 0) {
+        throw new Error("HTTP daemon requires at least one auth token. Set MCP_GATEWAY_HTTP_TOKEN or MCP_GATEWAY_HTTP_TOKENS.");
+    }
+    // Precompute the expected `Bearer <token>` header per tenant for matching.
+    const expectedHeaders = Object.entries(tenantTokens).map(([tenant, t]) => ({ tenant, header: `Bearer ${t}` }));
+    // DNS-rebinding protection. If the operator didn't specify an allowlist,
+    // default to localhost variants on the bind port — safe for local daemons.
+    // When binding publicly (0.0.0.0 behind a domain), the operator should set
+    // MCP_GATEWAY_HTTP_ALLOWED_HOSTS to the real hostname(s).
+    const allowedHosts = new Set((opts.allowedHosts ?? [
+        `127.0.0.1:${port}`,
+        `localhost:${port}`,
+        `[::1]:${port}`,
+    ]).map((h) => h.toLowerCase()));
+    const allowedOrigins = new Set((opts.allowedOrigins ?? []).map((o) => o.toLowerCase()));
+    // Process-wide shared singleton: the registry cache holds public, read-only
+    // data, so all tenants safely share one warm cache.
+    const registryClient = new RegistryClient(config.registryApiUrl, config.registryCacheTtlMs, config.partnerKey);
+    // Sandbox manifests are tenant-private — one tenant must not see or alter
+    // another's sandbox config. Each tenant gets its own resolver + file,
+    // created lazily on first use.
+    const manifestResolvers = new Map();
+    function manifestResolverFor(tenant) {
+        let r = manifestResolvers.get(tenant);
+        if (!r) {
+            const safe = tenant.replace(/[^a-z0-9_.-]/gi, "-").toLowerCase();
+            const file = tenantCount === 1 && tenant === "default"
+                ? join(dirname(config.permissionsPath), "mcp-gateway-manifests.json")
+                : join(dirname(config.permissionsPath), `mcp-gateway-manifests-${safe}.json`);
+            r = new ManifestResolver(file, config.enableContainerIsolation === true);
+            manifestResolvers.set(tenant, r);
+        }
+        return r;
+    }
+    const sessions = new Map();
+    /**
+     * DNS-rebinding defense. Validates the Host header against the allowlist and
+     * (if present) the Origin header against the origin allowlist. Browsers send
+     * Origin; non-browser clients (agents, curl) don't — those pass the origin
+     * check by design, but still must pass the Host check.
+     *
+     * Returns null if OK, or a short rejection reason string.
+     */
+    function checkHostOrigin(req) {
+        const hostHeader = req.headers["host"];
+        const reqHost = Array.isArray(hostHeader) ? hostHeader[0] : hostHeader;
+        if (!reqHost || !allowedHosts.has(reqHost.toLowerCase())) {
+            return `Host "${reqHost ?? "(none)"}" not allowed`;
+        }
+        const originHeader = req.headers["origin"];
+        const origin = Array.isArray(originHeader) ? originHeader[0] : originHeader;
+        if (origin && !allowedOrigins.has(origin.toLowerCase())) {
+            // An Origin header means a browser made this request. Reject unless
+            // explicitly allowlisted — an agent daemon shouldn't take browser traffic.
+            return `Origin "${origin}" not allowed`;
+        }
+        return null;
+    }
+    /** Constant-time-ish compare of two strings. */
+    function safeEqual(a, b) {
+        if (a.length !== b.length)
+            return false;
+        let diff = 0;
+        for (let i = 0; i < a.length; i++)
+            diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+        return diff === 0;
+    }
+    /**
+     * Resolve the authenticating tenant from the bearer token. Compares against
+     * every tenant token (constant-time per token) so the work doesn't reveal
+     * which/how many tenants matched. Returns the tenant id, or null if no match.
+     */
+    function resolveTenant(req) {
+        const header = req.headers["authorization"];
+        if (!header || Array.isArray(header))
+            return null;
+        let matched = null;
+        for (const { tenant, header: expected } of expectedHeaders) {
+            if (safeEqual(header, expected))
+                matched = tenant;
+        }
+        return matched;
+    }
+    function sendJson(res, status, body) {
+        const json = JSON.stringify(body);
+        res.writeHead(status, { "Content-Type": "application/json" });
+        res.end(json);
+    }
+    async function readBody(req) {
+        const chunks = [];
+        for await (const chunk of req)
+            chunks.push(chunk);
+        if (chunks.length === 0)
+            return undefined;
+        try {
+            return JSON.parse(Buffer.concat(chunks).toString("utf-8"));
+        }
+        catch {
+            return undefined;
+        }
+    }
+    function isInitialize(body) {
+        return (typeof body === "object" &&
+            body !== null &&
+            body.method === "initialize");
+    }
+    async function createSession(tenant) {
+        // Build the session object first so the SDK callbacks can close over THIS
+        // specific session — avoids any shared/pending-state race when multiple
+        // clients initialize concurrently.
+        const session = { id: "", tenant, createdAt: new Date() };
+        const transport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: () => randomUUID(),
+            onsessioninitialized: (sid) => {
+                session.id = sid;
+                sessions.set(sid, session);
+                log.info("HTTP session initialized", {
+                    sessionId: sid,
+                    tenant,
+                    total: sessions.size,
+                });
+            },
+            onsessionclosed: (sid) => {
+                const s = sessions.get(sid);
+                if (s) {
+                    s.context.connectionManager.disconnectAll().catch(() => { });
+                    sessions.delete(sid);
+                    log.info("HTTP session closed", {
+                        sessionId: sid,
+                        tenant: s.tenant,
+                        total: sessions.size,
+                    });
+                }
+            },
+        });
+        session.transport = transport;
+        // Each session gets its own gateway context. The registry cache is shared;
+        // the manifest store is the tenant's own (sandbox config stays private).
+        const context = createGatewayServer(config, {
+            registryClient,
+            manifestResolver: manifestResolverFor(tenant),
+        });
+        session.context = context;
+        await context.mcpServer.connect(transport);
+        context.connectionManager.startHealthChecks();
+        return session;
+    }
+    const server = createServer(async (req, res) => {
+        const url = req.url || "/";
+        // Health endpoint — unauthenticated, for liveness probes.
+        if (url === "/health" || url === "/health/live") {
+            return sendJson(res, 200, {
+                status: "ok",
+                sessions: sessions.size,
+                uptime: process.uptime(),
+            });
+        }
+        if (!url.startsWith("/mcp")) {
+            return sendJson(res, 404, { error: "Not found" });
+        }
+        // DNS-rebinding protection: validate Host/Origin before anything else.
+        const hostOriginError = checkHostOrigin(req);
+        if (hostOriginError) {
+            log.warn("Rejected request (host/origin)", { reason: hostOriginError });
+            return sendJson(res, 403, {
+                jsonrpc: "2.0",
+                error: { code: -32002, message: `Forbidden: ${hostOriginError}` },
+                id: null,
+            });
+        }
+        // Auth: always required for /mcp. Resolves which tenant the token belongs to.
+        const tenant = resolveTenant(req);
+        if (!tenant) {
+            res.setHeader("WWW-Authenticate", "Bearer");
+            return sendJson(res, 401, {
+                jsonrpc: "2.0",
+                error: { code: -32001, message: "Unauthorized: missing or invalid bearer token" },
+                id: null,
+            });
+        }
+        const sessionId = req.headers["mcp-session-id"];
+        const sid = Array.isArray(sessionId) ? sessionId[0] : sessionId;
+        try {
+            // Existing session → route to its transport, but only if the token's
+            // tenant owns it (prevents cross-tenant session hijacking).
+            if (sid && sessions.has(sid)) {
+                const session = sessions.get(sid);
+                if (session.tenant !== tenant) {
+                    log.warn("Rejected cross-tenant session access", {
+                        sessionId: sid,
+                        sessionTenant: session.tenant,
+                        requestTenant: tenant,
+                    });
+                    return sendJson(res, 403, {
+                        jsonrpc: "2.0",
+                        error: { code: -32003, message: "Forbidden: session belongs to another tenant" },
+                        id: null,
+                    });
+                }
+                const body = req.method === "POST" ? await readBody(req) : undefined;
+                await session.transport.handleRequest(req, res, body);
+                return;
+            }
+            // New session: only valid for an initialize POST without a session id.
+            if (req.method === "POST") {
+                const body = await readBody(req);
+                if (!sid && isInitialize(body)) {
+                    const session = await createSession(tenant);
+                    await session.transport.handleRequest(req, res, body);
+                    return;
+                }
+                return sendJson(res, 400, {
+                    jsonrpc: "2.0",
+                    error: {
+                        code: -32000,
+                        message: sid
+                            ? "Unknown session id. Re-initialize."
+                            : "Missing session id (only initialize may omit it).",
+                    },
+                    id: null,
+                });
+            }
+            // GET/DELETE without a known session.
+            return sendJson(res, 400, {
+                jsonrpc: "2.0",
+                error: { code: -32000, message: "No active session for this request." },
+                id: null,
+            });
+        }
+        catch (err) {
+            log.error("HTTP request handling failed", { error: String(err) });
+            if (!res.headersSent) {
+                sendJson(res, 500, {
+                    jsonrpc: "2.0",
+                    error: { code: -32603, message: "Internal error" },
+                    id: null,
+                });
+            }
+        }
+    });
+    // Graceful shutdown.
+    const shutdown = async () => {
+        log.info("HTTP daemon shutting down", { sessions: sessions.size });
+        for (const session of sessions.values()) {
+            try {
+                await session.context.connectionManager.disconnectAll();
+                await session.context.mcpServer.close();
+            }
+            catch {
+                /* best effort */
+            }
+        }
+        sessions.clear();
+        server.close(() => process.exit(0));
+    };
+    process.on("SIGINT", shutdown);
+    process.on("SIGTERM", shutdown);
+    await new Promise((resolve) => {
+        server.listen(port, host, () => {
+            log.info("MCP Gateway HTTP daemon listening", {
+                url: `http://${host}:${port}/mcp`,
+                health: `http://${host}:${port}/health`,
+                authRequired: true,
+                tenants: tenantCount,
+            });
+            resolve();
+        });
+    });
+}
+//# sourceMappingURL=http-daemon.js.map

package/dist/http-daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-daemon.js","sourceRoot":"","sources":["../src/http-daemon.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAuB,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAElE,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAY1C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAqB,EACrB,IAOC;IAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAE5B,6EAA6E;IAC7E,MAAM,YAAY,GAA2B,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;IACxE,IAAI,IAAI,CAAC,KAAK;QAAE,YAAY,CAAC,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC;IAEpD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;IACrD,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,sGAAsG,CACvG,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,MAAM,eAAe,GAA8C,MAAM,CAAC,OAAO,CAC/E,YAAY,CACb,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAE5D,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,0DAA0D;IAC1D,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,CAAC,IAAI,CAAC,YAAY,IAAI;QACpB,aAAa,IAAI,EAAE;QACnB,aAAa,IAAI,EAAE;QACnB,SAAS,IAAI,EAAE;KAChB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAC/B,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CACxD,CAAC;IAEF,4EAA4E;IAC5E,oDAAoD;IACpD,MAAM,cAAc,GAAG,IAAI,cAAc,CACvC,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,kBAAkB,EACzB,MAAM,CAAC,UAAU,CAClB,CAAC;IAEF,0EAA0E;IAC1E,sEAAsE;IACtE,+BAA+B;IAC/B,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC9D,SAAS,mBAAmB,CAAC,MAAc;QACzC,IAAI,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YACjE,MAAM,IAAI,GACR,WAAW,KAAK,CAAC,IAAI,MAAM,KAAK,SAAS;gBACvC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,4BAA4B,CAAC;gBACrE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,yBAAyB,IAAI,OAAO,CAAC,CAAC;YAClF,CAAC,GAAG,IAAI,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,wBAAwB,KAAK,IAAI,CAAC,CAAC;YACzE,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE5C;;;;;;;OAOG;IACH,SAAS,eAAe,CAAC,GAAoB;QAC3C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QACvE,IAAI,CAAC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACzD,OAAO,SAAS,OAAO,IAAI,QAAQ,eAAe,CAAC;QACrD,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;QAC5E,IAAI,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACxD,oEAAoE;YACpE,2EAA2E;YAC3E,OAAO,WAAW,MAAM,eAAe,CAAC;QAC1C,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gDAAgD;IAChD,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;QACrC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7E,OAAO,IAAI,KAAK,CAAC,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,SAAS,aAAa,CAAC,GAAoB;QACzC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,KAAK,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,eAAe,EAAE,CAAC;YAC3D,IAAI,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAAE,OAAO,GAAG,MAAM,CAAC;QACpD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,GAAoB;QAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,SAAS,YAAY,CAAC,IAAa;QACjC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,KAAK,IAAI;YACZ,IAA4B,CAAC,MAAM,KAAK,YAAY,CACtD,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,aAAa,CAAC,MAAc;QACzC,0EAA0E;QAC1E,wEAAwE;QACxE,mCAAmC;QACnC,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAa,CAAC;QAErE,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;YACtC,oBAAoB,EAAE,CAAC,GAAW,EAAE,EAAE;gBACpC,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC;gBACjB,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC3B,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE;oBACnC,SAAS,EAAE,GAAG;oBACd,MAAM;oBACN,KAAK,EAAE,QAAQ,CAAC,IAAI;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,eAAe,EAAE,CAAC,GAAW,EAAE,EAAE;gBAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC5B,IAAI,CAAC,EAAE,CAAC;oBACN,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBAC5D,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACrB,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE;wBAC9B,SAAS,EAAE,GAAG;wBACd,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,KAAK,EAAE,QAAQ,CAAC,IAAI;qBACrB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QACH,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;QAE9B,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE;YAC1C,cAAc;YACd,gBAAgB,EAAE,mBAAmB,CAAC,MAAM,CAAC;SAC9C,CAAC,CAAC;QACH,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,CAAC,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;QAE9C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAE3B,0DAA0D;QAC1D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;YAChD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACxB,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;aACzB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,uEAAuE;QACvE,MAAM,eAAe,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,eAAe,EAAE,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YACxE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACxB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,eAAe,EAAE,EAAE;gBACjE,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;QACL,CAAC;QAED,8EAA8E;QAC9E,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YAC5C,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACxB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,+CAA+C,EAAE;gBACjF,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEhE,IAAI,CAAC;YACH,qEAAqE;YACrE,4DAA4D;YAC5D,IAAI,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;gBACnC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC9B,GAAG,CAAC,IAAI,CAAC,sCAAsC,EAAE;wBAC/C,SAAS,EAAE,GAAG;wBACd,aAAa,EAAE,OAAO,CAAC,MAAM;wBAC7B,aAAa,EAAE,MAAM;qBACtB,CAAC,CAAC;oBACH,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;wBACxB,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,8CAA8C,EAAE;wBAChF,EAAE,EAAE,IAAI;qBACT,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACrE,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YAED,uEAAuE;YACvE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACjC,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;oBAC5C,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;oBACtD,OAAO;gBACT,CAAC;gBACD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;oBACxB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,GAAG;4BACV,CAAC,CAAC,oCAAoC;4BACtC,CAAC,CAAC,mDAAmD;qBACxD;oBACD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;YACL,CAAC;YAED,sCAAsC;YACtC,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACxB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,qCAAqC,EAAE;gBACvE,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;oBACjB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE;oBAClD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,qBAAqB;IACrB,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACnE,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,aAAa,EAAE,CAAC;gBACxD,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEhC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE;gBAC5C,GAAG,EAAE,UAAU,IAAI,IAAI,IAAI,MAAM;gBACjC,MAAM,EAAE,UAAU,IAAI,IAAI,IAAI,SAAS;gBACvC,YAAY,EAAE,IAAI;gBAClB,OAAO,EAAE,WAAW;aACrB,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,83 @@
+#!/usr/bin/env node
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { createGatewayServer } from "./gateway-server.js";
+import { runHttpDaemon } from "./http-daemon.js";
+import { loadConfig } from "./config/gateway-config.js";
+import { setLogLevel, log } from "./utils/logger.js";
+async function main() {
+    const config = loadConfig();
+    setLogLevel(config.logLevel);
+    // HTTP daemon mode: when a port is configured, run as a long-running HTTP
+    // server that many MCP clients can connect to. Otherwise, classic stdio.
+    if (config.httpPort) {
+        log.info("Starting MCP Gateway (HTTP daemon mode)", {
+            registryApiUrl: config.registryApiUrl,
+            port: config.httpPort,
+            host: config.httpHost,
+        });
+        const hasToken = Boolean(config.httpToken) ||
+            (config.httpTokens && Object.keys(config.httpTokens).length > 0);
+        if (!hasToken) {
+            process.stderr.write("MCP Gateway HTTP daemon requires MCP_GATEWAY_HTTP_TOKEN or MCP_GATEWAY_HTTP_TOKENS to be set.\n");
+            process.exit(1);
+        }
+        await runHttpDaemon(config, {
+            port: config.httpPort,
+            host: config.httpHost || "127.0.0.1",
+            token: config.httpToken,
+            tokens: config.httpTokens,
+            allowedHosts: config.httpAllowedHosts,
+            allowedOrigins: config.httpAllowedOrigins,
+        });
+        return;
+    }
+    log.info("Starting MCP Gateway", {
+        registryApiUrl: config.registryApiUrl,
+        maxConnections: config.maxConnections,
+    });
+    const { mcpServer, connectionManager } = createGatewayServer(config);
+    const transport = new StdioServerTransport();
+    // Graceful shutdown — only run once
+    let shuttingDown = false;
+    const cleanup = async () => {
+        if (shuttingDown)
+            return;
+        shuttingDown = true;
+        log.info("Gateway shutting down...");
+        try {
+            await connectionManager.disconnectAll();
+        }
+        catch (err) {
+            log.warn("Error during disconnectAll", { error: String(err) });
+        }
+        try {
+            await mcpServer.close();
+        }
+        catch (err) {
+            log.warn("Error closing MCP server", { error: String(err) });
+        }
+        process.exit(0);
+    };
+    process.on("SIGINT", cleanup);
+    process.on("SIGTERM", cleanup);
+    // Safety nets for unhandled errors — log but don't crash the gateway
+    process.on("uncaughtException", (err) => {
+        log.error("Uncaught exception", { error: String(err), stack: err.stack });
+    });
+    process.on("unhandledRejection", (reason) => {
+        log.error("Unhandled rejection", { reason: String(reason) });
+    });
+    await mcpServer.connect(transport);
+    log.info("MCP Gateway connected and ready");
+    // Start health monitoring
+    connectionManager.startHealthChecks();
+    // Auto-connect from saved profiles (fire-and-forget)
+    connectionManager.autoConnectFromProfiles().catch((err) => {
+        log.warn("Error during auto-connect from profiles", { error: String(err) });
+    });
+}
+main().catch((err) => {
+    process.stderr.write(`MCP Gateway fatal error: ${String(err)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAErD,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE7B,0EAA0E;IAC1E,yEAAyE;IACzE,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE;YAClD,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,IAAI,EAAE,MAAM,CAAC,QAAQ;YACrB,IAAI,EAAE,MAAM,CAAC,QAAQ;SACtB,CAAC,CAAC;QACH,MAAM,QAAQ,GACZ,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YACzB,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iGAAiG,CAClG,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,aAAa,CAAC,MAAM,EAAE;YAC1B,IAAI,EAAE,MAAM,CAAC,QAAQ;YACrB,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAI,WAAW;YACpC,KAAK,EAAE,MAAM,CAAC,SAAS;YACvB,MAAM,EAAE,MAAM,CAAC,UAAU;YACzB,YAAY,EAAE,MAAM,CAAC,gBAAgB;YACrC,cAAc,EAAE,MAAM,CAAC,kBAAkB;SAC1C,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE;QAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,cAAc,EAAE,MAAM,CAAC,cAAc;KACtC,CAAC,CAAC;IAEH,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7C,oCAAoC;IACpC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,IAAI,YAAY;YAAE,OAAO;QACzB,YAAY,GAAG,IAAI,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,aAAa,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE/B,qEAAqE;IACrE,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;QACtC,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,GAAG,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAE5C,0BAA0B;IAC1B,iBAAiB,CAAC,iBAAiB,EAAE,CAAC;IAEtC,qDAAqD;IACrD,iBAAiB,CAAC,uBAAuB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACxD,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/meta-tools/ad-status.d.ts

@@ -0,0 +1,8 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { ConnectionManager } from "../connection/connection-manager.js";
+import type { AdTracker } from "../ads/ad-tracker.js";
+/**
+ * Register the mcp_ad_status meta-tool.
+ * Shows partner earnings, tracked events, and which connected servers are promoted.
+ */
+export declare function registerAdStatus(server: McpServer, connectionManager: ConnectionManager, adTracker: AdTracker): void;

package/dist/meta-tools/ad-status.js

@@ -0,0 +1,41 @@
+/**
+ * Register the mcp_ad_status meta-tool.
+ * Shows partner earnings, tracked events, and which connected servers are promoted.
+ */
+export function registerAdStatus(server, connectionManager, adTracker) {
+    server.tool("mcp_ad_status", "View partner ad earnings, tracked events (connects, tool usage), and ad network status for this gateway session.", {}, async () => {
+        const status = adTracker.getStatus();
+        const earnings = await adTracker.getPartnerEarnings();
+        const connections = connectionManager.listConnections();
+        const lines = [
+            "## Ad Network Status",
+            "",
+            `**Session ID:** ${status.sessionId}`,
+            `**Partner Key:** Configured`,
+            "",
+            "### Event Tracking",
+            `- **Connect events:** ${status.eventCounts.connect}`,
+            `- **Tool usage events:** ${status.eventCounts.tool_usage}`,
+            `- **Total tracked:** ${status.totalEvents}`,
+            "",
+        ];
+        if (earnings) {
+            lines.push("### Partner Earnings", `- **Total gross:** $${(earnings.totalGrossCents / 100).toFixed(2)}`, `- **Your share:** $${(earnings.totalPartnerShareCents / 100).toFixed(2)}`, `- **Revenue events:** ${earnings.eventCount}`, "");
+        }
+        else {
+            lines.push("### Partner Earnings", "*Unable to fetch earnings from registry.*", "");
+        }
+        // Show connected servers
+        if (connections.length > 0) {
+            lines.push("### Connected Servers", ...connections.map((c) => `- **${c.displayName}** (\`${c.slug}\`) — ${c.state}`), "");
+        }
+        // Show recent events
+        if (status.recentEvents.length > 0) {
+            lines.push("### Recent Events (last 10)", ...status.recentEvents.map((e) => `- \`${e.eventType}\` on **${e.serverSlug}**${e.toolName ? ` (tool: ${e.toolName})` : ""} at ${e.timestamp}`));
+        }
+        return {
+            content: [{ type: "text", text: lines.join("\n") }],
+        };
+    });
+}
+//# sourceMappingURL=ad-status.js.map

package/dist/meta-tools/ad-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ad-status.js","sourceRoot":"","sources":["../../src/meta-tools/ad-status.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAiB,EACjB,iBAAoC,EACpC,SAAoB;IAEpB,MAAM,CAAC,IAAI,CACT,eAAe,EACf,kHAAkH,EAClH,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,kBAAkB,EAAE,CAAC;QACtD,MAAM,WAAW,GAAG,iBAAiB,CAAC,eAAe,EAAE,CAAC;QAExD,MAAM,KAAK,GAAa;YACtB,sBAAsB;YACtB,EAAE;YACF,mBAAmB,MAAM,CAAC,SAAS,EAAE;YACrC,6BAA6B;YAC7B,EAAE;YACF,oBAAoB;YACpB,yBAAyB,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE;YACrD,4BAA4B,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE;YAC3D,wBAAwB,MAAM,CAAC,WAAW,EAAE;YAC5C,EAAE;SACH,CAAC;QAEF,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CACR,sBAAsB,EACtB,uBAAuB,CAAC,QAAQ,CAAC,eAAe,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EACpE,sBAAsB,CAAC,QAAQ,CAAC,sBAAsB,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAC1E,yBAAyB,QAAQ,CAAC,UAAU,EAAE,EAC9C,EAAE,CACH,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CACR,sBAAsB,EACtB,2CAA2C,EAC3C,EAAE,CACH,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CACR,uBAAuB,EACvB,GAAG,WAAW,CAAC,GAAG,CAChB,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,WAAW,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,KAAK,EAAE,CAC7D,EACD,EAAE,CACH,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CACR,6BAA6B,EAC7B,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CACxB,CAAC,CAAC,EAAE,EAAE,CACJ,OAAO,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAC/G,CACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;SACpD,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/meta-tools/audit.d.ts

@@ -0,0 +1,12 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { AuditLog } from "../audit/audit-log.js";
+/**
+ * Register the `mcp_audit` meta-tool — the safety forensics view.
+ *
+ * Surfaces the audit trail of what sandboxed servers actually did and what the
+ * sandbox blocked: tool calls (under their enforcement level), blocked tools,
+ * blocked/allowed network egress, connects (with granted capability envelope),
+ * and disconnects. This is the "did this untrusted server try anything?"
+ * artifact a security reviewer reads — distinct from usage analytics.
+ */
+export declare function registerAudit(server: McpServer, auditLog: AuditLog): void;

package/dist/meta-tools/audit.js

@@ -0,0 +1,98 @@
+import { z } from "zod";
+import { toolError } from "../utils/errors.js";
+/**
+ * Register the `mcp_audit` meta-tool — the safety forensics view.
+ *
+ * Surfaces the audit trail of what sandboxed servers actually did and what the
+ * sandbox blocked: tool calls (under their enforcement level), blocked tools,
+ * blocked/allowed network egress, connects (with granted capability envelope),
+ * and disconnects. This is the "did this untrusted server try anything?"
+ * artifact a security reviewer reads — distinct from usage analytics.
+ */
+export function registerAudit(server, auditLog) {
+    server.tool("mcp_audit", "View the safety audit trail — a forensics log of what sandboxed MCP servers did and what the sandbox blocked (tool calls, blocked tools, blocked/allowed network egress, connects with granted capabilities). Use `securityOnly: true` to see only blocks and errors.", {
+        slug: z
+            .string()
+            .optional()
+            .describe("Filter to a single server slug"),
+        event: z
+            .enum([
+            "connect",
+            "tool_call",
+            "tool_blocked",
+            "egress_blocked",
+            "egress_allowed",
+            "disconnect",
+        ])
+            .optional()
+            .describe("Filter to a single event type"),
+        securityOnly: z
+            .boolean()
+            .optional()
+            .describe("Show only security-relevant events (blocks + errored calls)"),
+        limit: z
+            .number()
+            .min(1)
+            .max(500)
+            .optional()
+            .describe("Max events to return (default 50, newest first)"),
+    }, async ({ slug, event, securityOnly, limit = 50 }) => {
+        try {
+            const events = auditLog.query({
+                slug,
+                type: event,
+                securityRelevantOnly: securityOnly,
+                limit,
+            });
+            const summary = auditLog.summary();
+            const lines = [
+                "## 🛡️ Safety Audit Trail",
+                "",
+                `**Totals:** ${summary.total} events · ${summary.securityEvents} security-relevant (blocks)`,
+                `**By type:** ` +
+                    Object.entries(summary.counts)
+                        .filter(([, n]) => n > 0)
+                        .map(([t, n]) => `${t}=${n}`)
+                        .join(", "),
+                "",
+            ];
+            if (events.length === 0) {
+                lines.push("_No matching events recorded yet._");
+            }
+            else {
+                lines.push(`### Recent events (${events.length})`, "");
+                for (const e of events) {
+                    const icon = e.type === "tool_blocked" || e.type === "egress_blocked"
+                        ? "🚫"
+                        : e.type === "tool_call" && e.ok === false
+                            ? "⚠️"
+                            : e.type === "egress_allowed"
+                                ? "🌐"
+                                : e.type === "connect"
+                                    ? "🔗"
+                                    : e.type === "disconnect"
+                                        ? "🔌"
+                                        : "•";
+                    const parts = [
+                        `${icon} \`${e.ts}\``,
+                        `**${e.type}**`,
+                        e.slug,
+                        e.tool ? `tool=${e.tool}` : "",
+                        e.target ? `target=${e.target}` : "",
+                        e.enforcement ? `[${e.enforcement}]` : "",
+                        e.reason ? `— ${e.reason}` : "",
+                    ].filter(Boolean);
+                    lines.push("- " + parts.join(" · "));
+                }
+            }
+            return {
+                content: [{ type: "text", text: lines.join("\n") }],
+                structuredContent: { summary, events },
+            };
+        }
+        catch (err) {
+            return toolError(err instanceof Error ? err.message : String(err));
+        }
+    });
+}
+//# sourceMappingURL=audit.js.map

package/dist/meta-tools/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/meta-tools/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,MAAiB,EAAE,QAAkB;IACjE,MAAM,CAAC,IAAI,CACT,WAAW,EACX,uQAAuQ,EACvQ;QACE,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,gCAAgC,CAAC;QAC7C,KAAK,EAAE,CAAC;aACL,IAAI,CAAC;YACJ,SAAS;YACT,WAAW;YACX,cAAc;YACd,gBAAgB;YAChB,gBAAgB;YAChB,YAAY;SACb,CAAC;aACD,QAAQ,EAAE;aACV,QAAQ,CAAC,+BAA+B,CAAC;QAC5C,YAAY,EAAE,CAAC;aACZ,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,6DAA6D,CAAC;QAC1E,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,iDAAiD,CAAC;KAC/D,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,GAAG,EAAE,EAAE,EAAE,EAAE;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC;gBAC5B,IAAI;gBACJ,IAAI,EAAE,KAAK;gBACX,oBAAoB,EAAE,YAAY;gBAClC,KAAK;aACN,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;YAEnC,MAAM,KAAK,GAAa;gBACtB,2BAA2B;gBAC3B,EAAE;gBACF,eAAe,OAAO,CAAC,KAAK,aAAa,OAAO,CAAC,cAAc,6BAA6B;gBAC5F,eAAe;oBACb,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;yBAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;yBACxB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;yBAC5B,IAAI,CAAC,IAAI,CAAC;gBACf,EAAE;aACH,CAAC;YAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC,CAAC;gBACvD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;oBACvB,MAAM,IAAI,GACR,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB;wBACtD,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK;4BACxC,CAAC,CAAC,IAAI;4BACN,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB;gCAC3B,CAAC,CAAC,IAAI;gCACN,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS;oCACpB,CAAC,CAAC,IAAI;oCACN,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY;wCACvB,CAAC,CAAC,IAAI;wCACN,CAAC,CAAC,GAAG,CAAC;oBAClB,MAAM,KAAK,GAAG;wBACZ,GAAG,IAAI,MAAM,CAAC,CAAC,EAAE,IAAI;wBACrB,KAAK,CAAC,CAAC,IAAI,IAAI;wBACf,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;wBAC9B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;wBACpC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE;wBACzC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;qBAChC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBAClB,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,iBAAiB,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;aACvC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,SAAS,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/meta-tools/call-tool.d.ts

@@ -0,0 +1,11 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { ConnectionManager } from "../connection/connection-manager.js";
+/**
+ * Register the `mcp_call_tool` meta-tool.
+ *
+ * This is a fallback for MCP clients that don't refresh their tool list
+ * when `notifications/tools/list_changed` fires. The AI can call any
+ * tool on any connected downstream server by passing the namespaced
+ * tool name (e.g. "server-slug__echo") and a JSON arguments object.
+ */
+export declare function registerCallTool(server: McpServer, connectionManager: ConnectionManager): void;