@newrelic/preflight 0.0.1-pre.1 → 1.0.1

package/dist/proxy/upstream-http.js

@@ -0,0 +1,209 @@
+/**
+ * HTTP Upstream — raw HTTP proxy for upstream MCP servers that speak HTTP.
+ *
+ * Guarantees bit-for-bit passthrough: the proxy reads the request body into a
+ * Buffer (to peek at the JSON-RPC method for observability) then forwards the
+ * raw bytes unchanged via http.request(). SSE responses are piped chunk-by-chunk.
+ */
+import { request as httpRequest } from 'node:http';
+import { request as httpsRequest } from 'node:https';
+import { Transform } from 'node:stream';
+import { performance } from 'node:perf_hooks';
+import { createLogger } from '../shared/index.js';
+import { shouldForwardHeader } from './types.js';
+import { validateSsrfUrl } from '../security/ssrf.js';
+const logger = createLogger('proxy-http');
+// Hop-by-hop headers that must never be forwarded between proxy and client.
+const HOP_BY_HOP_HEADERS = new Set([
+    'connection',
+    'keep-alive',
+    'transfer-encoding',
+    'upgrade',
+    'te',
+    'trailers',
+    'proxy-authorization',
+    'proxy-authenticate',
+]);
+// ---------------------------------------------------------------------------
+// ByteCountTransform — counts bytes flowing through without modification
+// ---------------------------------------------------------------------------
+export class ByteCountTransform extends Transform {
+    bytes = 0;
+    _transform(chunk, _encoding, callback) {
+        this.bytes += chunk.length;
+        callback(null, chunk);
+    }
+}
+// ---------------------------------------------------------------------------
+// HttpUpstream
+// ---------------------------------------------------------------------------
+export class HttpUpstream {
+    name;
+    transportType = 'http';
+    url;
+    timeoutMs;
+    allowPrivateHosts;
+    constructor(config) {
+        if (!config.url) {
+            throw new Error(`HttpUpstream "${config.name}" requires a url`);
+        }
+        this.name = config.name;
+        this.url = new URL(config.url);
+        this.allowPrivateHosts = config.allowPrivateHosts ?? false;
+        if (!this.allowPrivateHosts) {
+            validateSsrfUrl(`HttpUpstream "${this.name}"`, this.url);
+        }
+        this.timeoutMs = config.timeoutMs ?? 30_000;
+    }
+    async connect() {
+        logger.debug(`HTTP upstream "${this.name}" connected`, { url: this.url.href });
+    }
+    async disconnect() {
+        logger.debug(`HTTP upstream "${this.name}" disconnected`);
+    }
+    async forward(req, res, body) {
+        const requestFn = this.url.protocol === 'https:' ? httpsRequest : httpRequest;
+        // Re-validate URL against SSRF rules immediately before fetch to prevent DNS rebinding
+        if (!this.allowPrivateHosts) {
+            validateSsrfUrl(`HttpUpstream "${this.name}" (pre-fetch)`, this.url);
+        }
+        // Build forwarded headers
+        const headers = {};
+        if (req.headers) {
+            for (const [key, value] of Object.entries(req.headers)) {
+                if (value != null && shouldForwardHeader(key)) {
+                    headers[key] = Array.isArray(value) ? value.join(', ') : value;
+                }
+            }
+        }
+        if (body.length > 0) {
+            headers['content-length'] = String(body.length);
+        }
+        return new Promise((resolve, _reject) => {
+            const start = performance.now();
+            const upstreamReq = requestFn(this.url, {
+                method: req.method ?? 'POST',
+                headers,
+                timeout: this.timeoutMs,
+            }, (upstreamRes) => {
+                const upstreamLatencyMs = performance.now() - start;
+                const statusCode = upstreamRes.statusCode ?? 502;
+                const mediaType = (upstreamRes.headers['content-type'] ?? '')
+                    .split(';')[0]
+                    .trim()
+                    .toLowerCase();
+                const isStreaming = mediaType === 'text/event-stream';
+                // Copy response headers, skipping hop-by-hop headers
+                for (const [key, value] of Object.entries(upstreamRes.headers)) {
+                    if (value != null && !HOP_BY_HOP_HEADERS.has(key.toLowerCase())) {
+                        res.setHeader(key, value);
+                    }
+                }
+                if (isStreaming) {
+                    res.writeHead(statusCode);
+                    // SSE: pipe chunk-by-chunk through ByteCountTransform
+                    const counter = new ByteCountTransform();
+                    let sseResolved = false;
+                    const resolveSSE = () => {
+                        if (sseResolved)
+                            return;
+                        sseResolved = true;
+                        resolve({
+                            statusCode,
+                            isStreaming: true,
+                            responseSizeBytes: counter.bytes,
+                            upstreamLatencyMs,
+                        });
+                    };
+                    counter.on('error', (err) => {
+                        logger.error('Stream error in ByteCountTransform', { error: String(err) });
+                        if (!res.writableEnded) {
+                            res.socket?.destroy();
+                        }
+                        // Destroy upstream and counter to stop reading from the network.
+                        upstreamRes.destroy();
+                        counter.destroy();
+                        resolveSSE();
+                    });
+                    upstreamRes.pipe(counter).pipe(res);
+                    upstreamRes.on('end', resolveSSE);
+                    upstreamRes.on('error', (err) => {
+                        logger.error('Upstream SSE stream error', { error: String(err) });
+                        resolveSSE();
+                    });
+                    res.on('close', () => {
+                        if (!upstreamRes.destroyed) {
+                            upstreamRes.destroy();
+                        }
+                        resolveSSE();
+                    });
+                }
+                else {
+                    // Non-SSE: buffer full body, then write with recomputed content-length
+                    const chunks = [];
+                    upstreamRes.on('data', (chunk) => {
+                        chunks.push(chunk);
+                    });
+                    upstreamRes.on('end', () => {
+                        const responseBody = Buffer.concat(chunks);
+                        res.setHeader('content-length', responseBody.length);
+                        res.writeHead(statusCode);
+                        res.end(responseBody);
+                        resolve({
+                            statusCode,
+                            isStreaming: false,
+                            responseSizeBytes: responseBody.length,
+                            upstreamLatencyMs,
+                        });
+                    });
+                    upstreamRes.on('error', (err) => {
+                        logger.error('Upstream response error', { error: String(err) });
+                        const bytesAlreadySent = chunks.reduce((sum, c) => sum + c.length, 0);
+                        if (bytesAlreadySent > 0 && !res.writableEnded) {
+                            res.socket?.destroy();
+                        }
+                        else if (!res.writableEnded) {
+                            // Write 502 rather than re-using the upstream's statusCode (which may
+                            // be 200) — that would fool callers into treating an error body as success.
+                            res.writeHead(502, { 'content-type': 'application/json' });
+                            res.end(JSON.stringify({ error: 'upstream_error', message: String(err) }));
+                        }
+                        resolve({
+                            statusCode,
+                            isStreaming: false,
+                            responseSizeBytes: bytesAlreadySent,
+                            upstreamLatencyMs,
+                        });
+                    });
+                }
+            });
+            upstreamReq.on('timeout', () => {
+                upstreamReq.destroy(new Error(`Upstream "${this.name}" timed out after ${this.timeoutMs}ms`));
+            });
+            upstreamReq.on('error', (err) => {
+                const upstreamLatencyMs = performance.now() - start;
+                logger.error('Upstream request error', { error: String(err), upstream: this.name });
+                if (!res.headersSent) {
+                    res.writeHead(502, { 'content-type': 'application/json' });
+                }
+                if (!res.writableEnded) {
+                    res.end(JSON.stringify({ error: 'upstream_unavailable', message: String(err) }));
+                }
+                resolve({
+                    statusCode: 502,
+                    isStreaming: false,
+                    responseSizeBytes: 0,
+                    upstreamLatencyMs,
+                });
+            });
+            // Send the raw body unchanged
+            if (body.length > 0) {
+                upstreamReq.end(body);
+            }
+            else {
+                upstreamReq.end();
+            }
+        });
+    }
+}
+//# sourceMappingURL=upstream-http.js.map

package/dist/proxy/upstream-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstream-http.js","sourceRoot":"","sources":["../../src/proxy/upstream-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,IAAI,WAAW,EAA6C,MAAM,WAAW,CAAC;AAC9F,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,SAAS,EAA0B,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;AAE1C,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,YAAY;IACZ,YAAY;IACZ,mBAAmB;IACnB,SAAS;IACT,IAAI;IACJ,UAAU;IACV,qBAAqB;IACrB,oBAAoB;CACrB,CAAC,CAAC;AAEH,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAE9E,MAAM,OAAO,kBAAmB,SAAQ,SAAS;IAC/C,KAAK,GAAG,CAAC,CAAC;IAED,UAAU,CAAC,KAAa,EAAE,SAAyB,EAAE,QAA2B;QACvF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QAC3B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;CACF;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,OAAO,YAAY;IACd,IAAI,CAAS;IACb,aAAa,GAAG,MAAe,CAAC;IACxB,GAAG,CAAM;IACT,SAAS,CAAS;IAClB,iBAAiB,CAAU;IAE5C,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,CAAC,IAAI,kBAAkB,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,KAAK,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,eAAe,CAAC,iBAAiB,IAAI,CAAC,IAAI,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,IAAI,aAAa,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,IAAI,gBAAgB,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAoB,EAAE,GAAmB,EAAE,IAAY;QACnE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;QAE9E,uFAAuF;QACvF,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,eAAe,CAAC,iBAAiB,IAAI,CAAC,IAAI,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,0BAA0B;QAC1B,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,IAAI,KAAK,IAAI,IAAI,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBACjE,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;YACrD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAEhC,MAAM,WAAW,GAAG,SAAS,CAC3B,IAAI,CAAC,GAAG,EACR;gBACE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,MAAM;gBAC5B,OAAO;gBACP,OAAO,EAAE,IAAI,CAAC,SAAS;aACxB,EACD,CAAC,WAAW,EAAE,EAAE;gBACd,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;gBACpD,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,IAAI,GAAG,CAAC;gBAEjD,MAAM,SAAS,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;qBAC1D,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;qBACb,IAAI,EAAE;qBACN,WAAW,EAAE,CAAC;gBACjB,MAAM,WAAW,GAAG,SAAS,KAAK,mBAAmB,CAAC;gBAEtD,qDAAqD;gBACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC/D,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;wBAChE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;gBAED,IAAI,WAAW,EAAE,CAAC;oBAChB,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;oBAC1B,sDAAsD;oBACtD,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;oBACzC,IAAI,WAAW,GAAG,KAAK,CAAC;oBAExB,MAAM,UAAU,GAAG,GAAG,EAAE;wBACtB,IAAI,WAAW;4BAAE,OAAO;wBACxB,WAAW,GAAG,IAAI,CAAC;wBACnB,OAAO,CAAC;4BACN,UAAU;4BACV,WAAW,EAAE,IAAI;4BACjB,iBAAiB,EAAE,OAAO,CAAC,KAAK;4BAChC,iBAAiB;yBAClB,CAAC,CAAC;oBACL,CAAC,CAAC;oBAEF,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;wBAC1B,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBAC3E,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;4BACvB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;wBACxB,CAAC;wBACD,iEAAiE;wBACjE,WAAW,CAAC,OAAO,EAAE,CAAC;wBACtB,OAAO,CAAC,OAAO,EAAE,CAAC;wBAClB,UAAU,EAAE,CAAC;oBACf,CAAC,CAAC,CAAC;oBAEH,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAEpC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;oBAElC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;wBAC9B,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBAClE,UAAU,EAAE,CAAC;oBACf,CAAC,CAAC,CAAC;oBAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;wBACnB,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;4BAC3B,WAAW,CAAC,OAAO,EAAE,CAAC;wBACxB,CAAC;wBACD,UAAU,EAAE,CAAC;oBACf,CAAC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,uEAAuE;oBACvE,MAAM,MAAM,GAAa,EAAE,CAAC;oBAC5B,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;wBACvC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACrB,CAAC,CAAC,CAAC;oBACH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;wBACzB,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;wBAC3C,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;wBACrD,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;wBAC1B,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;wBACtB,OAAO,CAAC;4BACN,UAAU;4BACV,WAAW,EAAE,KAAK;4BAClB,iBAAiB,EAAE,YAAY,CAAC,MAAM;4BACtC,iBAAiB;yBAClB,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;oBACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;wBAC9B,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBAChE,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;wBACtE,IAAI,gBAAgB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;4BAC/C,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;wBACxB,CAAC;6BAAM,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;4BAC9B,sEAAsE;4BACtE,4EAA4E;4BAC5E,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;4BAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;wBAC7E,CAAC;wBACD,OAAO,CAAC;4BACN,UAAU;4BACV,WAAW,EAAE,KAAK;4BAClB,iBAAiB,EAAE,gBAAgB;4BACnC,iBAAiB;yBAClB,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CACF,CAAC;YAEF,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBAC7B,WAAW,CAAC,OAAO,CACjB,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,IAAI,qBAAqB,IAAI,CAAC,SAAS,IAAI,CAAC,CACzE,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC9B,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;gBACpD,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACpF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;oBACvB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBACnF,CAAC;gBACD,OAAO,CAAC;oBACN,UAAU,EAAE,GAAG;oBACf,WAAW,EAAE,KAAK;oBAClB,iBAAiB,EAAE,CAAC;oBACpB,iBAAiB;iBAClB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,8BAA8B;YAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,GAAG,EAAE,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/proxy/upstream-stdio.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Stdio Upstream — bridges HTTP to a stdio-based MCP server.
+ *
+ * Spawns a child process via the MCP SDK Client + StdioClientTransport,
+ * parses incoming JSON-RPC from HTTP, dispatches through the Client, and
+ * serializes the response back to the HTTP response.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { ForwardResult, ProxyUpstream, UpstreamConfig } from './types.js';
+export declare const DANGEROUS_ENV_KEYS: Set<string>;
+export declare function sanitizeEnv(env: Record<string, string> | undefined, upstreamName: string): Record<string, string> | undefined;
+export declare function validateCommand(upstreamName: string, command: string, allowBareCommand: boolean): void;
+export declare class StdioUpstream implements ProxyUpstream {
+    readonly name: string;
+    readonly transportType: "stdio";
+    private client;
+    private transport;
+    private readonly config;
+    constructor(config: UpstreamConfig);
+    connect(): Promise<void>;
+    disconnect(): Promise<void>;
+    forward(_req: IncomingMessage, res: ServerResponse, body: Buffer): Promise<ForwardResult>;
+    private dispatchToClient;
+}
+//# sourceMappingURL=upstream-stdio.d.ts.map

package/dist/proxy/upstream-stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstream-stdio.d.ts","sourceRoot":"","sources":["../../src/proxy/upstream-stdio.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAOjE,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAY/E,eAAO,MAAM,kBAAkB,aAM7B,CAAC;AAEH,wBAAgB,WAAW,CACzB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EACvC,YAAY,EAAE,MAAM,GACnB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAmBpC;AAMD,wBAAgB,eAAe,CAC7B,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,OAAO,GACxB,IAAI,CAQN;AAuED,qBAAa,aAAc,YAAW,aAAa;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAG,OAAO,CAAU;IAC1C,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,SAAS,CAAqC;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;gBAE5B,MAAM,EAAE,cAAc;IAQ5B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IA+BxB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAuC3B,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;YAsDjF,gBAAgB;CAiD/B"}

package/dist/proxy/upstream-stdio.js

@@ -0,0 +1,256 @@
+/**
+ * Stdio Upstream — bridges HTTP to a stdio-based MCP server.
+ *
+ * Spawns a child process via the MCP SDK Client + StdioClientTransport,
+ * parses incoming JSON-RPC from HTTP, dispatches through the Client, and
+ * serializes the response back to the HTTP response.
+ */
+import { isAbsolute } from 'node:path';
+import { performance } from 'node:perf_hooks';
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
+import { z } from 'zod';
+import { createLogger } from '../shared/index.js';
+const logger = createLogger('proxy-stdio');
+// ---------------------------------------------------------------------------
+// Env sanitization — strips keys that enable dynamic-linker or Node injection.
+// Note: PATH is intentionally NOT listed here. StdioClientTransport (MCP SDK)
+// spreads getDefaultEnvironment() before applying this env, so stripping PATH
+// from the caller-supplied env has no effect — PATH always flows through.
+// PATH hijacking is prevented instead by validateCommand requiring absolute paths.
+// ---------------------------------------------------------------------------
+export const DANGEROUS_ENV_KEYS = new Set([
+    'LD_PRELOAD',
+    'LD_LIBRARY_PATH',
+    'DYLD_INSERT_LIBRARIES',
+    'DYLD_LIBRARY_PATH',
+    'NODE_OPTIONS',
+]);
+export function sanitizeEnv(env, upstreamName) {
+    if (!env)
+        return undefined;
+    const sanitized = {};
+    const stripped = [];
+    for (const [key, value] of Object.entries(env)) {
+        if (DANGEROUS_ENV_KEYS.has(key)) {
+            stripped.push(key);
+        }
+        else {
+            sanitized[key] = value;
+        }
+    }
+    if (stripped.length > 0) {
+        logger.warn(`StdioUpstream "${upstreamName}": stripped dangerous env keys`, { keys: stripped });
+    }
+    return sanitized;
+}
+// ---------------------------------------------------------------------------
+// Command validation — requires absolute paths to prevent PATH hijacking
+// ---------------------------------------------------------------------------
+export function validateCommand(upstreamName, command, allowBareCommand) {
+    if (!allowBareCommand && !isAbsolute(command)) {
+        throw new Error(`StdioUpstream "${upstreamName}": command "${command}" must be an absolute path ` +
+            `(bare names can be hijacked via PATH manipulation). ` +
+            `Use the full path (e.g. /usr/bin/node) or set allowBareCommand for development.`);
+    }
+}
+const DISCONNECT_TIMEOUT_MS = 5_000;
+const DISPATCH_TIMEOUT_MS = 30_000;
+function parseJsonRpc(body) {
+    try {
+        const parsed = JSON.parse(body.toString('utf-8'));
+        if (typeof parsed === 'object' &&
+            parsed !== null &&
+            'method' in parsed &&
+            typeof parsed.method === 'string') {
+            return parsed;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+function writeJsonRpcResponse(res, id, result) {
+    const body = JSON.stringify({ jsonrpc: '2.0', id: id ?? null, result });
+    res.writeHead(200, {
+        'content-type': 'application/json',
+        'content-length': String(Buffer.byteLength(body)),
+    });
+    res.end(body);
+    return Buffer.byteLength(body);
+}
+function writeJsonRpcError(res, id, code, message) {
+    const body = JSON.stringify({
+        jsonrpc: '2.0',
+        id: id ?? null,
+        error: { code, message },
+    });
+    const statusCode = code === -32700 ? 400 : 500;
+    res.writeHead(statusCode, {
+        'content-type': 'application/json',
+        'content-length': String(Buffer.byteLength(body)),
+    });
+    res.end(body);
+    return Buffer.byteLength(body);
+}
+// ---------------------------------------------------------------------------
+// StdioUpstream
+// ---------------------------------------------------------------------------
+export class StdioUpstream {
+    name;
+    transportType = 'stdio';
+    client = null;
+    transport = null;
+    config;
+    constructor(config) {
+        if (!config.command) {
+            throw new Error(`StdioUpstream "${config.name}" requires a command`);
+        }
+        this.name = config.name;
+        this.config = config;
+    }
+    async connect() {
+        const command = this.config.command;
+        validateCommand(this.name, command, this.config.allowBareCommand ?? false);
+        logger.info(`Stdio upstream "${this.name}" starting`, { command, args: this.config.args });
+        this.transport = new StdioClientTransport({
+            command,
+            args: this.config.args,
+            env: sanitizeEnv(this.config.env, this.name),
+            stderr: 'pipe',
+        });
+        this.client = new Client({ name: `proxy-${this.name}`, version: '1.0.0' });
+        await this.client.connect(this.transport);
+        logger.info(`Stdio upstream "${this.name}" connected`, { command, args: this.config.args });
+        // Detect unexpected child process exit so subsequent requests fail fast
+        // instead of hanging on a dead client.
+        this.transport.onclose = () => {
+            if (this.client !== null) {
+                logger.warn(`Stdio upstream "${this.name}" process exited unexpectedly — marking disconnected`);
+                this.client = null;
+                this.transport = null;
+            }
+        };
+    }
+    async disconnect() {
+        if (!this.client)
+            return;
+        const client = this.client;
+        const transport = this.transport;
+        this.client = null;
+        this.transport = null;
+        let timeoutId = null;
+        try {
+            await Promise.race([
+                client.close(),
+                new Promise((_, reject) => {
+                    timeoutId = setTimeout(() => reject(new Error('disconnect timeout')), DISCONNECT_TIMEOUT_MS);
+                    timeoutId.unref();
+                }),
+            ]);
+            if (timeoutId !== null)
+                clearTimeout(timeoutId);
+        }
+        catch {
+            if (timeoutId !== null)
+                clearTimeout(timeoutId);
+            logger.warn(`Stdio upstream "${this.name}" close timed out after ${DISCONNECT_TIMEOUT_MS}ms — force-killing process`);
+            // Access the child process via the MCP SDK's private field. If the field
+            // is renamed in a future SDK version, the optional-chain gracefully no-ops
+            // rather than throwing, and the OS will clean up the orphaned child when
+            // this process exits.
+            const maybeProc = transport['_process'];
+            maybeProc?.kill('SIGKILL');
+        }
+        logger.info(`Stdio upstream "${this.name}" disconnected`);
+    }
+    async forward(_req, res, body) {
+        if (!this.client) {
+            const size = writeJsonRpcError(res, undefined, -32603, 'Upstream not connected');
+            return {
+                statusCode: 500,
+                isStreaming: false,
+                responseSizeBytes: size,
+                upstreamLatencyMs: 0,
+            };
+        }
+        const rpc = parseJsonRpc(body);
+        if (!rpc) {
+            const size = writeJsonRpcError(res, undefined, -32700, 'Parse error: invalid JSON-RPC');
+            return {
+                statusCode: 400,
+                isStreaming: false,
+                responseSizeBytes: size,
+                upstreamLatencyMs: 0,
+            };
+        }
+        const start = performance.now();
+        try {
+            const result = await this.dispatchToClient(rpc);
+            const upstreamLatencyMs = performance.now() - start;
+            const size = writeJsonRpcResponse(res, rpc.id, result);
+            return {
+                statusCode: 200,
+                isStreaming: false,
+                responseSizeBytes: size,
+                upstreamLatencyMs,
+            };
+        }
+        catch (err) {
+            const upstreamLatencyMs = performance.now() - start;
+            const message = err instanceof Error ? err.message : String(err);
+            logger.error('Stdio upstream error', {
+                upstream: this.name,
+                method: rpc.method,
+                error: message,
+            });
+            const size = writeJsonRpcError(res, rpc.id, -32603, message);
+            return {
+                statusCode: 500,
+                isStreaming: false,
+                responseSizeBytes: size,
+                upstreamLatencyMs,
+            };
+        }
+    }
+    async dispatchToClient(rpc) {
+        const client = this.client;
+        const params = rpc.params ?? {};
+        // Wrap the dispatch in a timeout so a hung child process doesn't hold
+        // the HTTP connection open indefinitely.
+        const timeoutPromise = new Promise((_, reject) => {
+            const t = setTimeout(() => reject(new Error(`Stdio dispatch timeout after ${DISPATCH_TIMEOUT_MS}ms`)), DISPATCH_TIMEOUT_MS);
+            t.unref();
+        });
+        let dispatchPromise;
+        switch (rpc.method) {
+            case 'tools/call':
+                dispatchPromise = client.callTool(params);
+                break;
+            case 'tools/list':
+                dispatchPromise = client.listTools(params);
+                break;
+            case 'resources/list':
+                dispatchPromise = client.listResources(params);
+                break;
+            case 'resources/read':
+                dispatchPromise = client.readResource(params);
+                break;
+            case 'ping':
+                dispatchPromise = client.ping();
+                break;
+            case 'initialize':
+                // The Client has already initialized; return current server info synchronously.
+                return {
+                    protocolVersion: '2025-03-26',
+                    capabilities: client.getServerCapabilities() ?? {},
+                    serverInfo: client.getServerVersion() ?? { name: this.name, version: '0.0.0' },
+                };
+            default:
+                dispatchPromise = client.request({ method: rpc.method, params }, z.any());
+        }
+        return Promise.race([dispatchPromise, timeoutPromise]);
+    }
+}
+//# sourceMappingURL=upstream-stdio.js.map

package/dist/proxy/upstream-stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upstream-stdio.js","sourceRoot":"","sources":["../../src/proxy/upstream-stdio.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;AAE3C,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,mFAAmF;AACnF,8EAA8E;AAE9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACxC,YAAY;IACZ,iBAAiB;IACjB,uBAAuB;IACvB,mBAAmB;IACnB,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,UAAU,WAAW,CACzB,GAAuC,EACvC,YAAoB;IAEpB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,kBAAkB,YAAY,gCAAgC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAE9E,MAAM,UAAU,eAAe,CAC7B,YAAoB,EACpB,OAAe,EACf,gBAAyB;IAEzB,IAAI,CAAC,gBAAgB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,kBAAkB,YAAY,eAAe,OAAO,6BAA6B;YAC/E,sDAAsD;YACtD,iFAAiF,CACpF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAanC,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAY,CAAC;QAC7D,IACE,OAAO,MAAM,KAAK,QAAQ;YAC1B,MAAM,KAAK,IAAI;YACf,QAAQ,IAAI,MAAM;YAClB,OAAQ,MAAkC,CAAC,MAAM,KAAK,QAAQ,EAC9D,CAAC;YACD,OAAO,MAAwB,CAAC;QAClC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAmB,EACnB,EAA+B,EAC/B,MAAe;IAEf,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;KAClD,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CACxB,GAAmB,EACnB,EAA+B,EAC/B,IAAY,EACZ,OAAe;IAEf,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,OAAO,EAAE,KAAK;QACd,EAAE,EAAE,EAAE,IAAI,IAAI;QACd,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;KACzB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/C,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE;QACxB,cAAc,EAAE,kBAAkB;QAClC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;KAClD,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,OAAO,aAAa;IACf,IAAI,CAAS;IACb,aAAa,GAAG,OAAgB,CAAC;IAClC,MAAM,GAAkB,IAAI,CAAC;IAC7B,SAAS,GAAgC,IAAI,CAAC;IACrC,MAAM,CAAiB;IAExC,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,CAAC,IAAI,sBAAsB,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAQ,CAAC;QACrC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,KAAK,CAAC,CAAC;QAE3E,MAAM,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,IAAI,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAE3F,IAAI,CAAC,SAAS,GAAG,IAAI,oBAAoB,CAAC;YACxC,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC;YAC5C,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAE3E,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,IAAI,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAE5F,wEAAwE;QACxE,uCAAuC;QACvC,IAAI,CAAC,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;YAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CACT,mBAAmB,IAAI,CAAC,IAAI,sDAAsD,CACnF,CAAC;gBACF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACxB,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QAEzB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAEtB,IAAI,SAAS,GAAyC,IAAI,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,MAAM,CAAC,KAAK,EAAE;gBACd,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAC/B,SAAS,GAAG,UAAU,CACpB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAC7C,qBAAqB,CACtB,CAAC;oBACF,SAAS,CAAC,KAAK,EAAE,CAAC;gBACpB,CAAC,CAAC;aACH,CAAC,CAAC;YACH,IAAI,SAAS,KAAK,IAAI;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,SAAS,KAAK,IAAI;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YAChD,MAAM,CAAC,IAAI,CACT,mBAAmB,IAAI,CAAC,IAAI,2BAA2B,qBAAqB,4BAA4B,CACzG,CAAC;YACF,yEAAyE;YACzE,2EAA2E;YAC3E,yEAAyE;YACzE,sBAAsB;YACtB,MAAM,SAAS,GAAI,SAAgD,CAAC,UAAU,CAEjE,CAAC;YACd,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,IAAI,gBAAgB,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAqB,EAAE,GAAmB,EAAE,IAAY;QACpE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;YACjF,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,WAAW,EAAE,KAAK;gBAClB,iBAAiB,EAAE,IAAI;gBACvB,iBAAiB,EAAE,CAAC;aACrB,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;YACxF,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,WAAW,EAAE,KAAK;gBAClB,iBAAiB,EAAE,IAAI;gBACvB,iBAAiB,EAAE,CAAC;aACrB,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEhC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YACpD,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAEvD,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,WAAW,EAAE,KAAK;gBAClB,iBAAiB,EAAE,IAAI;gBACvB,iBAAiB;aAClB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YACpD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;gBACnC,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC7D,OAAO;gBACL,UAAU,EAAE,GAAG;gBACf,WAAW,EAAE,KAAK;gBAClB,iBAAiB,EAAE,IAAI;gBACvB,iBAAiB;aAClB,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,GAAmB;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAO,CAAC;QAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QAEhC,sEAAsE;QACtE,yCAAyC;QACzC,MAAM,cAAc,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YACtD,MAAM,CAAC,GAAG,UAAU,CAClB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,mBAAmB,IAAI,CAAC,CAAC,EAChF,mBAAmB,CACpB,CAAC;YACF,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QAEH,IAAI,eAAiC,CAAC;QACtC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,YAAY;gBACf,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,MAA+C,CAAC,CAAC;gBACnF,MAAM;YACR,KAAK,YAAY;gBACf,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,MAAgD,CAAC,CAAC;gBACrF,MAAM;YACR,KAAK,gBAAgB;gBACnB,eAAe,GAAG,MAAM,CAAC,aAAa,CACpC,MAAoD,CACrD,CAAC;gBACF,MAAM;YACR,KAAK,gBAAgB;gBACnB,eAAe,GAAG,MAAM,CAAC,YAAY,CAAC,MAAmD,CAAC,CAAC;gBAC3F,MAAM;YACR,KAAK,MAAM;gBACT,eAAe,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChC,MAAM;YACR,KAAK,YAAY;gBACf,gFAAgF;gBAChF,OAAO;oBACL,eAAe,EAAE,YAAY;oBAC7B,YAAY,EAAE,MAAM,CAAC,qBAAqB,EAAE,IAAI,EAAE;oBAClD,UAAU,EAAE,MAAM,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE;iBAC/E,CAAC;YACJ;gBACE,eAAe,GAAG,MAAM,CAAC,OAAO,CAC9B,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAA0C,EACtE,CAAC,CAAC,GAAG,EAAE,CACR,CAAC;QACN,CAAC;QAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/security/audit-trail.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Security Audit Trail — classifies tool calls into audit events, detects
+ * sensitive file access and destructive commands, and emits NR events for
+ * alerting.
+ */
+import type { NrEventData } from '../shared/index.js';
+import type { ToolCallRecord } from '../storage/types.js';
+import type { ProxyToolCallRecord } from '../proxy/types.js';
+import type { LocalStore } from '../storage/local-store.js';
+export type AuditAction = 'FileRead' | 'FileWrite' | 'FileEdit' | 'BashCommand' | 'McpToolCall' | 'AgentSpawn' | 'Search' | 'Other';
+export type AlertSeverity = 'critical' | 'high' | 'medium';
+export interface SecurityAlert {
+    readonly severity: AlertSeverity;
+    readonly alertType: string;
+    readonly description: string;
+}
+export interface AuditRecord {
+    readonly timestamp: number;
+    readonly sessionId: string | null;
+    readonly action: AuditAction;
+    readonly tool: string;
+    readonly detail: string;
+    readonly developer: string;
+    readonly filePath?: string;
+    readonly command?: string;
+    readonly securityAlert?: SecurityAlert;
+}
+export interface AuditMetrics {
+    readonly totalEntries: number;
+    readonly securityAlerts: number;
+    readonly alertsBySeverity: Record<string, number>;
+}
+export declare const DEFAULT_SENSITIVE_FILE_PATTERNS: RegExp[];
+export declare const DEFAULT_DESTRUCTIVE_COMMAND_PATTERNS: RegExp[];
+export declare const DEFAULT_NETWORK_COMMAND_PATTERNS: RegExp[];
+export declare function auditRecordToNrEvent(record: AuditRecord, attrs?: {
+    teamId?: string | null;
+    projectId?: string | null;
+    orgId?: string | null;
+}): NrEventData;
+export declare function securityAlertToNrEvent(record: AuditRecord, attrs?: {
+    teamId?: string | null;
+    projectId?: string | null;
+    orgId?: string | null;
+}): NrEventData;
+export interface AuditTrailManagerOptions {
+    developer: string;
+    sessionId: string | null;
+    sensitivePatterns?: RegExp[];
+    destructivePatterns?: RegExp[];
+    networkPatterns?: RegExp[];
+    /** Optional local store for persisting each audit record to disk immediately. */
+    localStore?: LocalStore;
+}
+export declare class AuditTrailManager {
+    private readonly developer;
+    private sessionId;
+    private readonly sensitivePatterns;
+    private readonly destructivePatterns;
+    private readonly networkPatterns;
+    private readonly localStore;
+    private entries;
+    private sensitiveAccessLog;
+    private static readonly MAX_ENTRIES;
+    constructor(options: AuditTrailManagerOptions);
+    recordToolCall(record: ToolCallRecord): AuditRecord;
+    recordProxyCall(record: ProxyToolCallRecord): AuditRecord;
+    getAuditLog(): readonly AuditRecord[];
+    getSensitiveAccessLog(): readonly AuditRecord[];
+    getMetrics(): AuditMetrics;
+    reset(sessionId?: string | null): void;
+    private persistToDisk;
+}
+//# sourceMappingURL=audit-trail.d.ts.map

package/dist/security/audit-trail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-trail.d.ts","sourceRoot":"","sources":["../../src/security/audit-trail.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAU5D,MAAM,MAAM,WAAW,GACnB,UAAU,GACV,WAAW,GACX,UAAU,GACV,aAAa,GACb,aAAa,GACb,YAAY,GACZ,QAAQ,GACR,OAAO,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE3D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnD;AAMD,eAAO,MAAM,+BAA+B,EAAE,MAAM,EAanD,CAAC;AAEF,eAAO,MAAM,oCAAoC,EAAE,MAAM,EAmBxD,CAAC;AAEF,eAAO,MAAM,gCAAgC,EAAE,MAAM,EAKpD,CAAC;AA6GF,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,WAAW,EACnB,KAAK,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACnF,WAAW,CA2Bb;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,WAAW,EACnB,KAAK,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACnF,WAAW,CAsBb;AAMD,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,iFAAiF;IACjF,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAoB;IACxD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAoB;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAE/C,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAU;gBAEjC,OAAO,EAAE,wBAAwB;IAS7C,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,WAAW;IA6CnD,eAAe,CAAC,MAAM,EAAE,mBAAmB,GAAG,WAAW;IA2CzD,WAAW,IAAI,SAAS,WAAW,EAAE;IAIrC,qBAAqB,IAAI,SAAS,WAAW,EAAE;IAI/C,UAAU,IAAI,YAAY;IAmB1B,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAQtC,OAAO,CAAC,aAAa;CAgBtB"}