@minhpnq1807/contextos 0.1.8 → 0.1.9

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.1.9
+
+- Proxies all configured MCP servers except ContextOS' own `ctx-mcp` server.
+- Preserves each original MCP command after the proxy separator and forwards it unchanged, including RTK-managed commands.
+
 ## 0.1.8
 
 - Limits automatic MCP telemetry wrapping to `code-review-graph` only.

package/README.md

@@ -105,7 +105,7 @@ node bin/ctx.js install
 3. Downloads and caches the required local MiniLM embedding model under `~/.ctx/contextos/models`.
 4. Warms `~/.ctx/contextos/embeddings.db` for AGENTS rules and project file paths.
 5. Registers the `ctx-mcp` MCP server and merges ContextOS global hooks into `$CODEX_HOME/hooks.json`.
-6. Wraps supported local MCP servers, currently `code-review-graph` and `agentmemory`, with a transparent telemetry proxy so `tools/call` events can be measured.
+6. Wraps configured local MCP servers, except ContextOS' own `ctx-mcp`, with a transparent telemetry proxy so `tools/call` events can be measured. The original MCP command is preserved after the proxy separator and executed unchanged.
 
 Restart Codex after installing.
 
@@ -290,7 +290,7 @@ unknown  = the rule was relevant, but the diff does not prove either way
 
 For runtime-only rules, ContextOS also checks `telemetry.jsonl` for hook-visible tool names, MCP server names, and command metadata. A rule like "use code-review-graph before reading files" can be marked `followed` when telemetry contains a matching `code-review-graph` signal.
 
-`ctx install` wraps supported stdio MCP servers with a transparent proxy. The proxy forwards MCP JSON-RPC unchanged, but records `tools/call` requests such as `code-review-graph.detect_changes_tool` to workspace telemetry. This is what lets ContextOS prove runtime rules that cannot be seen in git diff.
+`ctx install` wraps configured stdio MCP servers with a transparent proxy. Codex will show `node .../proxy.js` as the launched command because that is how stdio can be intercepted, but the original MCP command is kept after `--` and executed unchanged, including RTK-managed commands. The proxy forwards MCP JSON-RPC unchanged and records `tools/call` requests such as `code-review-graph.detect_changes_tool` to workspace telemetry.
 
 Host/session setup rules such as "run shell commands as user X", `sudo su - user`, `sudo -i -u user`, and `sudo -u user` are filtered before scoring. They are not injected and do not count toward `unknown` outcomes because they describe the agent runtime environment rather than project behavior.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@minhpnq1807/contextos",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "Task-aware AGENTS.md context injection and compliance reporting for Codex.",
   "type": "module",
   "bin": {

package/plugins/ctx/lib/mcp-proxy-install.js

@@ -1,22 +1,22 @@
 import fs from "node:fs";
 import path from "node:path";
 
-const DEFAULT_TARGETS = new Set(["code-review-graph"]);
+const DEFAULT_EXCLUDES = new Set(["ctx-mcp"]);
 
-export function installMcpTelemetryProxies({ codexHome, marketplaceRoot, targets = DEFAULT_TARGETS } = {}) {
+export function installMcpTelemetryProxies({ codexHome, marketplaceRoot, targets = null, excludes = DEFAULT_EXCLUDES } = {}) {
   const configPath = path.join(codexHome, "config.toml");
   if (!fs.existsSync(configPath)) return { wrapped: [], skipped: [], configPath };
 
   const original = fs.readFileSync(configPath, "utf8");
   const proxyPath = path.join(marketplaceRoot, "plugins", "ctx", "mcp", "proxy.js");
-  const result = rewriteMcpTelemetryProxies(original, { proxyPath, targets });
+  const result = rewriteMcpTelemetryProxies(original, { proxyPath, targets, excludes });
   if (result.content !== original) {
     fs.writeFileSync(configPath, result.content, "utf8");
   }
   return { ...result, configPath };
 }
 
-export function rewriteMcpTelemetryProxies(toml, { proxyPath, targets = DEFAULT_TARGETS } = {}) {
+export function rewriteMcpTelemetryProxies(toml, { proxyPath, targets = null, excludes = DEFAULT_EXCLUDES } = {}) {
   const lines = String(toml || "").split(/\r?\n/);
   const sections = findMcpServerSections(lines);
   const wrapped = [];
@@ -26,8 +26,9 @@ export function rewriteMcpTelemetryProxies(toml, { proxyPath, targets = DEFAULT_
     const body = lines.slice(section.start + 1, section.end);
     const command = findStringValue(body, "command");
     const args = findArrayValue(body, "args") || [];
+    const shouldProxy = shouldProxyServer(section.name, { targets, excludes });
 
-    if (command === "node" && args[0] === proxyPath && !targets.has(section.name)) {
+    if (command === "node" && args[0] === proxyPath && !shouldProxy) {
       const original = unwrapProxyArgs(args);
       if (original) {
         const nextBody = replaceOrInsertServerField(
@@ -41,7 +42,7 @@ export function rewriteMcpTelemetryProxies(toml, { proxyPath, targets = DEFAULT_
       }
     }
 
-    if (!targets.has(section.name)) {
+    if (!shouldProxy) {
       skipped.push({ name: section.name, reason: "not-targeted" });
       continue;
     }
@@ -54,10 +55,6 @@ export function rewriteMcpTelemetryProxies(toml, { proxyPath, targets = DEFAULT_
       skipped.push({ name: section.name, reason: "already-wrapped" });
       continue;
     }
-    if (command === "rtk") {
-      skipped.push({ name: section.name, reason: "rtk-managed" });
-      continue;
-    }
 
     const nextBody = replaceOrInsertServerField(
       replaceOrInsertServerField(body, "command", tomlString("node")),
@@ -71,6 +68,12 @@ export function rewriteMcpTelemetryProxies(toml, { proxyPath, targets = DEFAULT_
   return { content: lines.join("\n"), wrapped: wrapped.reverse(), skipped: skipped.reverse() };
 }
 
+function shouldProxyServer(name, { targets, excludes }) {
+  if (targets instanceof Set) return targets.has(name);
+  if (Array.isArray(targets)) return targets.includes(name);
+  return !(excludes || DEFAULT_EXCLUDES).has(name);
+}
+
 function unwrapProxyArgs(args) {
   const separator = args.indexOf("--");
   if (separator < 0 || separator >= args.length - 1) return null;