@newrelic/preflight 0.0.1-pre.1 → 1.0.0

package/dist/proxy/proxy-manager.js

@@ -0,0 +1,338 @@
+/**
+ * ProxyManager — HTTP server that routes requests to upstream MCP servers
+ * with transparent forwarding and observability recording.
+ */
+import { createServer } from 'node:http';
+import { randomUUID } from 'node:crypto';
+import { performance } from 'node:perf_hooks';
+import { createLogger } from '../shared/index.js';
+import { TRACKED_METHODS } from './types.js';
+import { HttpUpstream } from './upstream-http.js';
+import { StdioUpstream } from './upstream-stdio.js';
+import { OtlpReceiver } from './otlp-receiver.js';
+const logger = createLogger('proxy-manager');
+const DEFAULT_BODY_TIMEOUT_MS = 30_000;
+const DEFAULT_MAX_BODY_BYTES = 10 * 1024 * 1024; // 10 MB
+function peekJsonRpc(body) {
+    if (body.length === 0)
+        return null;
+    try {
+        const parsed = JSON.parse(body.toString('utf-8'));
+        if (typeof parsed === 'object' &&
+            parsed !== null &&
+            'method' in parsed &&
+            typeof parsed.method === 'string') {
+            return parsed;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+// ---------------------------------------------------------------------------
+// ProxyManager
+// ---------------------------------------------------------------------------
+export class ProxyManager {
+    upstreams = new Map();
+    httpServer = null;
+    otlpReceiver = null;
+    options;
+    port;
+    onToolCall;
+    onRequest;
+    bodyTimeoutMs;
+    maxBodyBytes;
+    constructor(options) {
+        this.options = options;
+        this.port = options.port;
+        this.onToolCall = options.onToolCall;
+        this.onRequest = options.onRequest;
+        this.bodyTimeoutMs = options.bodyTimeoutMs ?? DEFAULT_BODY_TIMEOUT_MS;
+        this.maxBodyBytes = options.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES;
+    }
+    /** Register an upstream MCP server for proxying. */
+    registerUpstream(config) {
+        const upstream = createUpstream(config);
+        this.upstreams.set(config.name, upstream);
+        logger.info(`Registered upstream "${config.name}"`, { transportType: config.transportType });
+    }
+    /** Get the list of registered upstream names. */
+    getUpstreamNames() {
+        return Array.from(this.upstreams.keys());
+    }
+    /** Get a registered upstream by name (for testing). */
+    getUpstream(name) {
+        return this.upstreams.get(name);
+    }
+    /** Connect all upstreams and start the HTTP proxy server. */
+    async start() {
+        // Connect all upstreams
+        const upstreamNames = Array.from(this.upstreams.keys());
+        const connectResults = await Promise.allSettled(Array.from(this.upstreams.values()).map((u) => u.connect()));
+        const failedNames = [];
+        for (let i = 0; i < connectResults.length; i++) {
+            if (connectResults[i].status === 'rejected') {
+                const name = upstreamNames[i];
+                const reason = connectResults[i].reason;
+                logger.error('Failed to connect upstream', { name, error: String(reason) });
+                failedNames.push(name);
+            }
+        }
+        if (failedNames.length > 0 && failedNames.length === this.upstreams.size) {
+            throw new Error(`All upstreams failed to connect (${failedNames.join(', ')}). Proxy cannot start.`);
+        }
+        if (failedNames.length > 0) {
+            logger.warn('Some upstreams failed to connect — proxy starting in degraded mode', {
+                failed: failedNames,
+                total: this.upstreams.size,
+            });
+        }
+        // Start HTTP server
+        this.httpServer = createServer((req, res) => {
+            this.handleRequest(req, res).catch((err) => {
+                logger.error('Unhandled request error', { error: String(err) });
+                if (!res.headersSent) {
+                    res.writeHead(500, { 'content-type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'internal_error' }));
+                }
+                else if (!res.writableEnded) {
+                    // Headers already sent (e.g. mid-SSE stream) — writing JSON would corrupt
+                    // the stream. N-09: destroy the response (not just the socket) so the
+                    // writable stream and its pipe chain are fully cleaned up.
+                    res.on('error', () => {
+                        /* suppress post-destroy write errors */
+                    });
+                    res.destroy();
+                }
+            });
+        });
+        await new Promise((resolve, reject) => {
+            this.httpServer.once('error', reject);
+            this.httpServer.listen(this.port, '127.0.0.1', () => {
+                logger.info(`Proxy server listening`, { port: this.port });
+                // Replace the startup rejection handler with a permanent error logger so
+                // post-startup server errors don't invoke reject() on an already-resolved
+                // promise and don't become unhandled Node.js errors.
+                this.httpServer.removeAllListeners('error');
+                this.httpServer.on('error', (err) => logger.error('Proxy server error', { error: String(err) }));
+                resolve();
+            });
+        });
+        if (this.options.otlpReceiverEnabled) {
+            try {
+                const receiver = new OtlpReceiver({
+                    port: this.options.otlpReceiverPort ?? 4318,
+                    bindAddress: this.options.otlpReceiverBindAddress ?? '127.0.0.1',
+                    forwardEndpoint: this.options.otlpForwardEndpoint ?? null,
+                    forwardHeaders: this.options.otlpForwardHeaders ?? {},
+                    enrichmentAttributes: this.options.otlpEnrichmentAttributes ?? {},
+                });
+                await receiver.start();
+                this.otlpReceiver = receiver;
+            }
+            catch (err) {
+                logger.warn('OTLP receiver failed to start — disabled', { error: String(err) });
+            }
+        }
+    }
+    /** Stop the HTTP server and disconnect all upstreams. */
+    async stop() {
+        // Close the HTTP server
+        if (this.httpServer) {
+            // closeAllConnections() forcibly destroys keep-alive connections so stop()
+            // doesn't hang waiting for clients to close them naturally (Node 18.2+).
+            if (typeof this.httpServer.closeAllConnections === 'function') {
+                this.httpServer.closeAllConnections();
+            }
+            await new Promise((resolve) => {
+                this.httpServer.close(() => resolve());
+            });
+            this.httpServer = null;
+        }
+        if (this.otlpReceiver) {
+            await this.otlpReceiver.stop();
+            this.otlpReceiver = null;
+        }
+        // Disconnect all upstreams
+        await Promise.allSettled(Array.from(this.upstreams.values()).map((u) => u.disconnect()));
+        logger.info('Proxy server stopped');
+    }
+    // -------------------------------------------------------------------------
+    // Request handling
+    // -------------------------------------------------------------------------
+    async handleRequest(req, res) {
+        const url = req.url ?? '/';
+        // Health check
+        if (url === '/health' && req.method === 'GET') {
+            const body = JSON.stringify({
+                status: 'ok',
+                upstreams: this.getUpstreamNames(),
+            });
+            res.writeHead(200, { 'content-type': 'application/json' });
+            res.end(body);
+            return;
+        }
+        // Parse /proxy/{server-name} route
+        const match = url.match(/^\/proxy\/([^/]+)/);
+        if (!match) {
+            logger.warn('Proxy route not found', { url });
+            res.writeHead(404, { 'content-type': 'application/json' });
+            res.end(JSON.stringify({ error: 'not_found' }));
+            return;
+        }
+        let serverName;
+        try {
+            serverName = decodeURIComponent(match[1]);
+        }
+        catch {
+            res.writeHead(400, { 'content-type': 'application/json' });
+            res.end(JSON.stringify({ error: 'bad_request', message: 'Invalid server name encoding' }));
+            return;
+        }
+        const upstream = this.upstreams.get(serverName);
+        if (!upstream) {
+            logger.warn('Unknown upstream requested', { serverName });
+            res.writeHead(404, { 'content-type': 'application/json' });
+            res.end(JSON.stringify({ error: 'upstream_not_found' }));
+            return;
+        }
+        // Read request body (for POST/DELETE; empty for GET)
+        let body;
+        try {
+            body = await readBody(req, this.bodyTimeoutMs, this.maxBodyBytes);
+        }
+        catch (err) {
+            if (res.headersSent)
+                return;
+            const detailedMessage = err instanceof Error ? err.message : String(err);
+            logger.error('body read error', { error: detailedMessage });
+            if (err.code === 'BODY_TOO_LARGE') {
+                res.writeHead(413, { 'content-type': 'application/json' });
+                res.end(JSON.stringify({ error: 'payload_too_large' }));
+            }
+            else {
+                res.writeHead(408, { 'content-type': 'application/json' });
+                res.end(JSON.stringify({ error: 'request_timeout' }));
+            }
+            // Destroy the request so Node stops buffering inbound data.
+            req.destroy();
+            return;
+        }
+        // Forward with interception
+        await this.forwardWithInterception(upstream, req, res, body);
+    }
+    async forwardWithInterception(upstream, req, res, body) {
+        const rpc = peekJsonRpc(body);
+        const isTracked = rpc !== null && TRACKED_METHODS.has(rpc.method);
+        const overallStart = performance.now();
+        const result = await upstream.forward(req, res, body);
+        const overallEnd = performance.now();
+        if (!isTracked || !rpc)
+            return;
+        const totalDurationMs = overallEnd - overallStart;
+        const proxyOverheadMs = Math.max(0, totalDurationMs - result.upstreamLatencyMs);
+        if (rpc.method === 'tools/call') {
+            this.emitToolCallRecord(upstream, rpc, result, totalDurationMs, proxyOverheadMs, body);
+        }
+        else {
+            this.emitRequestRecord(upstream, rpc, result, totalDurationMs, proxyOverheadMs);
+        }
+    }
+    emitToolCallRecord(upstream, rpc, result, durationMs, proxyOverheadMs, body) {
+        if (!this.onToolCall)
+            return;
+        const toolName = (typeof rpc.params?.name === 'string' ? rpc.params.name : 'unknown')
+            .slice(0, 256)
+            .replace(/[\x00-\x1f\x7f]/g, '');
+        const args = typeof rpc.params?.arguments === 'object' && rpc.params.arguments !== null
+            ? rpc.params.arguments
+            : {};
+        const filePath = typeof args.file_path === 'string'
+            ? args.file_path
+            : typeof args.path === 'string'
+                ? args.path
+                : undefined;
+        const command = typeof args.command === 'string' ? args.command : undefined;
+        const record = {
+            id: randomUUID(),
+            sessionId: null,
+            toolName,
+            toolUseId: String(rpc.id ?? ''),
+            timestamp: Date.now(),
+            durationMs,
+            success: result.statusCode >= 200 && result.statusCode < 300,
+            serverName: upstream.name,
+            upstreamLatencyMs: result.upstreamLatencyMs,
+            proxyOverheadMs,
+            inputSizeBytes: body.length,
+            outputSizeBytes: result.responseSizeBytes ?? undefined,
+            ...(filePath !== undefined && { filePath }),
+            ...(command !== undefined && { command }),
+        };
+        this.onToolCall(record);
+    }
+    emitRequestRecord(upstream, rpc, result, durationMs, proxyOverheadMs) {
+        if (!this.onRequest)
+            return;
+        const record = {
+            id: randomUUID(),
+            serverName: upstream.name,
+            method: rpc.method,
+            timestamp: Date.now(),
+            durationMs,
+            upstreamLatencyMs: result.upstreamLatencyMs,
+            proxyOverheadMs,
+            success: result.statusCode >= 200 && result.statusCode < 300,
+            responseSizeBytes: result.responseSizeBytes ?? undefined,
+        };
+        this.onRequest(record);
+    }
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function readBody(req, timeoutMs, maxBytes) {
+    return new Promise((resolve, reject) => {
+        let timeoutHandle = null;
+        if (req.method === 'GET') {
+            resolve(Buffer.alloc(0));
+            return;
+        }
+        const chunks = [];
+        let totalBytes = 0;
+        let settled = false;
+        timeoutHandle = setTimeout(() => {
+            settle(() => reject(new Error(`Request body read timed out after ${timeoutMs}ms`)));
+        }, timeoutMs);
+        timeoutHandle.unref();
+        const settle = (fn) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timeoutHandle !== null)
+                clearTimeout(timeoutHandle);
+            fn();
+        };
+        req.on('data', (chunk) => {
+            totalBytes += chunk.length;
+            if (totalBytes > maxBytes) {
+                const err = new Error(`Request body exceeds limit of ${maxBytes} bytes`);
+                err.code = 'BODY_TOO_LARGE';
+                settle(() => reject(err));
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on('end', () => settle(() => resolve(Buffer.concat(chunks))));
+        req.on('error', (err) => settle(() => reject(err)));
+        req.on('close', () => settle(() => reject(new Error('Request closed before body was fully read'))));
+    });
+}
+function createUpstream(config) {
+    if (config.transportType === 'http') {
+        return new HttpUpstream(config);
+    }
+    return new StdioUpstream(config);
+}
+//# sourceMappingURL=proxy-manager.js.map

package/dist/proxy/proxy-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-manager.js","sourceRoot":"","sources":["../../src/proxy/proxy-manager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAQlD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;AAsB7C,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAYzD,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAY,CAAC;QAC7D,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,QAAQ,IAAI,MAAM;YAClB,OAAQ,MAAkC,CAAC,MAAM,KAAK,QAAQ,EAC9D,CAAC;YACD,OAAO,MAAqB,CAAC;QAC/B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,OAAO,YAAY;IACN,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IACtD,UAAU,GAAkB,IAAI,CAAC;IACjC,YAAY,GAAwB,IAAI,CAAC;IAChC,OAAO,CAAsB;IAC7B,IAAI,CAAS;IACb,UAAU,CAAsD;IAChE,SAAS,CAAqD;IAC9D,aAAa,CAAS;IACtB,YAAY,CAAS;IAEtC,YAAY,OAA4B;QACtC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC;QACtE,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACrE,CAAC;IAED,oDAAoD;IACpD,gBAAgB,CAAC,MAAsB;QACrC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,iDAAiD;IACjD,gBAAgB;QACd,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,uDAAuD;IACvD,WAAW,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,KAAK;QACT,wBAAwB;QACxB,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,UAAU,CAC7C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAC5D,CAAC;QACF,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/C,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC5C,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;gBAC9B,MAAM,MAAM,GAAI,cAAc,CAAC,CAAC,CAA2B,CAAC,MAAM,CAAC;gBACnE,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC5E,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CACb,oCAAoC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,oEAAoE,EAAE;gBAChF,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI;aAC3B,CAAC,CAAC;QACL,CAAC;QAED,oBAAoB;QACpB,IAAI,CAAC,UAAU,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC1C,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBAClD,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;gBACvD,CAAC;qBAAM,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;oBAC9B,0EAA0E;oBAC1E,sEAAsE;oBACtE,2DAA2D;oBAC3D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;wBACnB,wCAAwC;oBAC1C,CAAC,CAAC,CAAC;oBACH,GAAG,CAAC,OAAO,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,UAAW,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,UAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBACnD,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC3D,yEAAyE;gBACzE,0EAA0E;gBAC1E,qDAAqD;gBACrD,IAAI,CAAC,UAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBAC7C,IAAI,CAAC,UAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CACnC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAC3D,CAAC;gBACF,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC;oBAChC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,IAAI;oBAC3C,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,uBAAuB,IAAI,WAAW;oBAChE,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,IAAI;oBACzD,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE;oBACrD,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC,wBAAwB,IAAI,EAAE;iBAClE,CAAC,CAAC;gBACH,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACvB,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,IAAI;QACR,wBAAwB;QACxB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,2EAA2E;YAC3E,yEAAyE;YACzE,IAAI,OAAO,IAAI,CAAC,UAAU,CAAC,mBAAmB,KAAK,UAAU,EAAE,CAAC;gBAC9D,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;YACxC,CAAC;YACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,IAAI,CAAC,UAAW,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QAED,2BAA2B;QAC3B,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAEzF,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IAED,4EAA4E;IAC5E,mBAAmB;IACnB,4EAA4E;IAEpE,KAAK,CAAC,aAAa,CAAC,GAAoB,EAAE,GAAmB;QACnE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAE3B,eAAe;QACf,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC1B,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI,CAAC,gBAAgB,EAAE;aACnC,CAAC,CAAC;YACH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QAED,mCAAmC;QACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QAED,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC,CAAC;YAC3F,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;YAC1D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,qDAAqD;QACrD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,WAAW;gBAAE,OAAO;YAC5B,MAAM,eAAe,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzE,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAC5D,IAAK,GAA6B,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC7D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;YACxD,CAAC;YACD,4DAA4D;YAC5D,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,4BAA4B;QAC5B,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACnC,QAAuB,EACvB,GAAoB,EACpB,GAAmB,EACnB,IAAY;QAEZ,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,GAAG,KAAK,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAElE,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAErC,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG;YAAE,OAAO;QAE/B,MAAM,eAAe,GAAG,UAAU,GAAG,YAAY,CAAC;QAClD,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAEhF,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAChC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;QACzF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAEO,kBAAkB,CACxB,QAAuB,EACvB,GAAgB,EAChB,MAAqB,EACrB,UAAkB,EAClB,eAAuB,EACvB,IAAY;QAEZ,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO;QAE7B,MAAM,QAAQ,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;aAClF,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACb,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAEnC,MAAM,IAAI,GACR,OAAO,GAAG,CAAC,MAAM,EAAE,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI;YACxE,CAAC,CAAE,GAAG,CAAC,MAAM,CAAC,SAAqC;YACnD,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,QAAQ,GACZ,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;YAChC,CAAC,CAAC,IAAI,CAAC,SAAS;YAChB,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAC7B,CAAC,CAAC,IAAI,CAAC,IAAI;gBACX,CAAC,CAAC,SAAS,CAAC;QAClB,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAE5E,MAAM,MAAM,GAAwB;YAClC,EAAE,EAAE,UAAU,EAAE;YAChB,SAAS,EAAE,IAAI;YACf,QAAQ;YACR,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,UAAU;YACV,OAAO,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG,IAAI,MAAM,CAAC,UAAU,GAAG,GAAG;YAC5D,UAAU,EAAE,QAAQ,CAAC,IAAI;YACzB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,eAAe;YACf,cAAc,EAAE,IAAI,CAAC,MAAM;YAC3B,eAAe,EAAE,MAAM,CAAC,iBAAiB,IAAI,SAAS;YACtD,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC3C,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;SAC1C,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAEO,iBAAiB,CACvB,QAAuB,EACvB,GAAgB,EAChB,MAAqB,EACrB,UAAkB,EAClB,eAAuB;QAEvB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAE5B,MAAM,MAAM,GAAuB;YACjC,EAAE,EAAE,UAAU,EAAE;YAChB,UAAU,EAAE,QAAQ,CAAC,IAAI;YACzB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,UAAU;YACV,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,eAAe;YACf,OAAO,EAAE,MAAM,CAAC,UAAU,IAAI,GAAG,IAAI,MAAM,CAAC,UAAU,GAAG,GAAG;YAC5D,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,SAAS;SACzD,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;CACF;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,QAAQ,CAAC,GAAoB,EAAE,SAAiB,EAAE,QAAgB;IACzE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,aAAa,GAAyC,IAAI,CAAC;QAE/D,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC;QACtF,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,aAAa,CAAC,KAAK,EAAE,CAAC;QAEtB,MAAM,MAAM,GAAG,CAAC,EAAc,EAAE,EAAE;YAChC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,aAAa,KAAK,IAAI;gBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;YACxD,EAAE,EAAE,CAAC;QACP,CAAC,CAAC;QAEF,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;YAC3B,IAAI,UAAU,GAAG,QAAQ,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,iCAAiC,QAAQ,QAAQ,CACzB,CAAC;gBAC3B,GAAG,CAAC,IAAI,GAAG,gBAAgB,CAAC;gBAC5B,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1B,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CACnB,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,CAAC,CAC7E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,MAAsB;IAC5C,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QACpC,OAAO,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC"}

package/dist/proxy/types.d.ts

@@ -0,0 +1,72 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { ToolCallRecord } from '../storage/types.js';
+export interface UpstreamConfig {
+    readonly name: string;
+    /** URL for HTTP upstreams (e.g. "http://localhost:3000/mcp") */
+    readonly url?: string;
+    /** Command for stdio upstreams (e.g. "node") */
+    readonly command?: string;
+    /** Arguments for the stdio command (e.g. ["server.js", "--stdio"]) */
+    readonly args?: string[];
+    /** Extra environment variables for stdio process */
+    readonly env?: Record<string, string>;
+    readonly transportType: 'http' | 'stdio';
+    /** Timeout in ms for upstream HTTP requests (default: 30000) */
+    readonly timeoutMs?: number;
+    /**
+     * Allow private/loopback addresses (127.x.x.x, 10.x.x.x, etc.).
+     * For local development and testing only — never set in production deployments.
+     */
+    readonly allowPrivateHosts?: boolean;
+    /**
+     * Allow bare command names (e.g., "node" instead of "/usr/bin/node").
+     * For local development and testing only — never set in production deployments.
+     */
+    readonly allowBareCommand?: boolean;
+}
+export interface ForwardResult {
+    /** HTTP status code from upstream (or synthetic for stdio) */
+    readonly statusCode: number;
+    /** Was the response an SSE stream? */
+    readonly isStreaming: boolean;
+    /** Size of response body in bytes (null for in-progress streaming) */
+    readonly responseSizeBytes: number | null;
+    /** Time spent waiting for upstream response (ms) */
+    readonly upstreamLatencyMs: number;
+}
+export interface ProxyUpstream {
+    readonly name: string;
+    readonly transportType: 'http' | 'stdio';
+    /** Connect to the upstream (validate URL for HTTP, spawn process for stdio) */
+    connect(): Promise<void>;
+    /** Forward an HTTP request to the upstream and write the response */
+    forward(req: IncomingMessage, res: ServerResponse, body: Buffer): Promise<ForwardResult>;
+    /** Gracefully disconnect */
+    disconnect(): Promise<void>;
+}
+/** Extends ToolCallRecord with proxy-specific fields for tools/call requests. */
+export interface ProxyToolCallRecord extends ToolCallRecord {
+    readonly serverName: string;
+    readonly upstreamLatencyMs: number;
+    readonly proxyOverheadMs?: number;
+}
+/** Lighter record for discovery methods (tools/list, resources/list, resources/read). */
+export interface ProxyRequestRecord {
+    readonly id: string;
+    readonly serverName: string;
+    readonly method: string;
+    readonly timestamp: number;
+    readonly durationMs: number;
+    readonly upstreamLatencyMs: number;
+    readonly proxyOverheadMs?: number;
+    readonly success: boolean;
+    readonly error?: string;
+    readonly responseSizeBytes?: number;
+}
+/** JSON-RPC methods the proxy intercepts for observability recording. */
+export declare const TRACKED_METHODS: Set<string>;
+/** Headers that are forwarded from the proxy to the upstream server. */
+export declare const FORWARDED_HEADER_PREFIXES: string[];
+/** Check if a header should be forwarded to upstream. */
+export declare function shouldForwardHeader(name: string): boolean;
+//# sourceMappingURL=types.d.ts.map

package/dist/proxy/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/proxy/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAM1D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,sEAAsE;IACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,oDAAoD;IACpD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC;IACzC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACrC;AAMD,MAAM,WAAW,aAAa;IAC5B,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,sCAAsC;IACtC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,sEAAsE;IACtE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,oDAAoD;IACpD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC;IACzC,+EAA+E;IAC/E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,qEAAqE;IACrE,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACzF,4BAA4B;IAC5B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAMD,iFAAiF;AACjF,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACzD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,yFAAyF;AACzF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAMD,yEAAyE;AACzE,eAAO,MAAM,eAAe,aAK1B,CAAC;AAEH,wEAAwE;AACxE,eAAO,MAAM,yBAAyB,UAKrC,CAAC;AAEF,yDAAyD;AACzD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAWzD"}

package/dist/proxy/types.js

@@ -0,0 +1,33 @@
+// ---------------------------------------------------------------------------
+// Interception
+// ---------------------------------------------------------------------------
+/** JSON-RPC methods the proxy intercepts for observability recording. */
+export const TRACKED_METHODS = new Set([
+    'tools/call',
+    'tools/list',
+    'resources/list',
+    'resources/read',
+]);
+/** Headers that are forwarded from the proxy to the upstream server. */
+export const FORWARDED_HEADER_PREFIXES = [
+    'content-type',
+    'accept',
+    'authorization',
+    'mcp-session-id',
+];
+/** Check if a header should be forwarded to upstream. */
+export function shouldForwardHeader(name) {
+    const lower = name.toLowerCase();
+    if (FORWARDED_HEADER_PREFIXES.includes(lower))
+        return true;
+    // Block x-forwarded-* and x-real-* headers — upstream services that trust
+    // these for authentication or rate-limiting can be spoofed by a client that
+    // sets them on the inbound request. The proxy will re-add its own if needed.
+    if (lower === 'x-forwarded-for' || lower === 'x-forwarded-host' || lower === 'x-real-ip') {
+        return false;
+    }
+    if (lower.startsWith('x-'))
+        return true;
+    return false;
+}
+//# sourceMappingURL=types.js.map

package/dist/proxy/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/proxy/types.ts"],"names":[],"mappings":"AAmFA,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IACrC,YAAY;IACZ,YAAY;IACZ,gBAAgB;IAChB,gBAAgB;CACjB,CAAC,CAAC;AAEH,wEAAwE;AACxE,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,cAAc;IACd,QAAQ;IACR,eAAe;IACf,gBAAgB;CACjB,CAAC;AAEF,yDAAyD;AACzD,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,yBAAyB,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,IAAI,KAAK,KAAK,iBAAiB,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QACzF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/proxy/upstream-http.d.ts

@@ -0,0 +1,26 @@
+/**
+ * HTTP Upstream — raw HTTP proxy for upstream MCP servers that speak HTTP.
+ *
+ * Guarantees bit-for-bit passthrough: the proxy reads the request body into a
+ * Buffer (to peek at the JSON-RPC method for observability) then forwards the
+ * raw bytes unchanged via http.request(). SSE responses are piped chunk-by-chunk.
+ */
+import { type IncomingMessage, type ServerResponse } from 'node:http';
+import { Transform, type TransformCallback } from 'node:stream';
+import type { ForwardResult, ProxyUpstream, UpstreamConfig } from './types.js';
+export declare class ByteCountTransform extends Transform {
+    bytes: number;
+    _transform(chunk: Buffer, _encoding: BufferEncoding, callback: TransformCallback): void;
+}
+export declare class HttpUpstream implements ProxyUpstream {
+    readonly name: string;
+    readonly transportType: "http";
+    private readonly url;
+    private readonly timeoutMs;
+    private readonly allowPrivateHosts;
+    constructor(config: UpstreamConfig);
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    forward(req: IncomingMessage, res: ServerResponse, body: Buffer): Promise<ForwardResult>;
+}
+//# sourceMappingURL=upstream-http.d.ts.map

package/dist/proxy/upstream-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstream-http.d.ts","sourceRoot":"","sources":["../../src/proxy/upstream-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAA0B,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAE9F,OAAO,EAAE,SAAS,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhE,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAsB/E,qBAAa,kBAAmB,SAAQ,SAAS;IAC/C,KAAK,SAAK;IAED,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,GAAG,IAAI;CAIjG;AAMD,qBAAa,YAAa,YAAW,aAAa;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAG,MAAM,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAM;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAU;gBAEhC,MAAM,EAAE,cAAc;IAa5B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAIxB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAkK/F"}