@node9/proxy 1.2.0 → 1.3.1

package/dist/cli.js

@@ -5069,27 +5069,27 @@ function formatBase(activity) {
   const toolName = activity.tool.slice(0, 16).padEnd(16);
   const argsStr = JSON.stringify(activity.args ?? {}).replace(/\s+/g, " ");
   const argsPreview = argsStr.length > 70 ? argsStr.slice(0, 70) + "\u2026" : argsStr;
-  return `${import_chalk13.default.gray(time)} ${icon} ${import_chalk13.default.white.bold(toolName)} ${import_chalk13.default.dim(argsPreview)}`;
+  return `${import_chalk14.default.gray(time)} ${icon} ${import_chalk14.default.white.bold(toolName)} ${import_chalk14.default.dim(argsPreview)}`;
 }
 function renderResult(activity, result) {
   const base = formatBase(activity);
   let status;
   if (result.status === "allow") {
-    status = import_chalk13.default.green("\u2713 ALLOW");
+    status = import_chalk14.default.green("\u2713 ALLOW");
   } else if (result.status === "dlp") {
-    status = import_chalk13.default.bgRed.white.bold(" \u{1F6E1}\uFE0F  DLP ");
+    status = import_chalk14.default.bgRed.white.bold(" \u{1F6E1}\uFE0F  DLP ");
   } else {
-    status = import_chalk13.default.red("\u2717 BLOCK");
+    status = import_chalk14.default.red("\u2717 BLOCK");
   }
   if (process.stdout.isTTY) {
-    import_readline2.default.clearLine(process.stdout, 0);
-    import_readline2.default.cursorTo(process.stdout, 0);
+    import_readline3.default.clearLine(process.stdout, 0);
+    import_readline3.default.cursorTo(process.stdout, 0);
   }
   console.log(`${base}  ${status}`);
 }
 function renderPending(activity) {
   if (!process.stdout.isTTY) return;
-  process.stdout.write(`${formatBase(activity)}  ${import_chalk13.default.yellow("\u25CF \u2026")}\r`);
+  process.stdout.write(`${formatBase(activity)}  ${import_chalk14.default.yellow("\u25CF \u2026")}\r`);
 }
 async function ensureDaemon() {
   let pidPort = null;
@@ -5098,7 +5098,7 @@ async function ensureDaemon() {
       const { port } = JSON.parse(import_fs19.default.readFileSync(PID_FILE, "utf-8"));
       pidPort = port;
     } catch {
-      console.error(import_chalk13.default.dim("\u26A0\uFE0F  Could not read PID file; falling back to default port."));
+      console.error(import_chalk14.default.dim("\u26A0\uFE0F  Could not read PID file; falling back to default port."));
     }
   }
   const checkPort = pidPort ?? DAEMON_PORT;
@@ -5109,8 +5109,8 @@ async function ensureDaemon() {
     if (res.ok) return checkPort;
   } catch {
   }
-  console.log(import_chalk13.default.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon..."));
-  const child = (0, import_child_process12.spawn)(process.execPath, [process.argv[1], "daemon"], {
+  console.log(import_chalk14.default.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon..."));
+  const child = (0, import_child_process13.spawn)(process.execPath, [process.argv[1], "daemon"], {
     detached: true,
     stdio: "ignore",
     env: { ...process.env, NODE9_AUTO_STARTED: "1" }
@@ -5126,7 +5126,7 @@ async function ensureDaemon() {
     } catch {
     }
   }
-  console.error(import_chalk13.default.red("\u274C Daemon failed to start. Try: node9 daemon start"));
+  console.error(import_chalk14.default.red("\u274C Daemon failed to start. Try: node9 daemon start"));
   process.exit(1);
 }
 function postDecisionHttp(id, decision, csrfToken, port) {
@@ -5197,7 +5197,7 @@ async function startTail(options = {}) {
       req2.end();
     });
     if (result.ok) {
-      console.log(import_chalk13.default.green("\u2713 Flight Recorder buffer cleared."));
+      console.log(import_chalk14.default.green("\u2713 Flight Recorder buffer cleared."));
     } else if (result.code === "ECONNREFUSED") {
       throw new Error("Daemon is not running. Start it with: node9 daemon start");
     } else if (result.code === "ETIMEDOUT") {
@@ -5215,7 +5215,7 @@ async function startTail(options = {}) {
   let cardLineCount = 0;
   let cancelActiveCard = null;
   const canApprove = process.stdout.isTTY && process.stdin.isTTY;
-  if (canApprove) import_readline2.default.emitKeypressEvents(process.stdin);
+  if (canApprove) import_readline3.default.emitKeypressEvents(process.stdin);
   function clearCard() {
     if (cardLineCount > 0) {
       process.stdout.write(RESTORE_CURSOR + ERASE_DOWN);
@@ -5268,8 +5268,8 @@ async function startTail(options = {}) {
         } catch {
         }
       });
-      const decisionLabel = decision === "allow" ? import_chalk13.default.green("\u2713 ALLOWED (terminal)") : import_chalk13.default.red("\u2717 DENIED (terminal)");
-      console.log(`${import_chalk13.default.cyan("\u25C6")} ${import_chalk13.default.bold(req2.toolName.padEnd(16))}  ${decisionLabel}`);
+      const decisionLabel = decision === "allow" ? import_chalk14.default.green("\u2713 ALLOWED (terminal)") : import_chalk14.default.red("\u2717 DENIED (terminal)");
+      console.log(`${import_chalk14.default.cyan("\u25C6")} ${import_chalk14.default.bold(req2.toolName.padEnd(16))}  ${decisionLabel}`);
       approvalQueue.shift();
       cardActive = false;
       showNextCard();
@@ -5299,46 +5299,46 @@ async function startTail(options = {}) {
   try {
     const browserEnabled = getConfig().settings.approvers?.browser !== false;
     if (browserEnabled) {
-      if (process.platform === "darwin") (0, import_child_process12.execSync)(`open "${dashboardUrl}"`, { stdio: "ignore" });
+      if (process.platform === "darwin") (0, import_child_process13.execSync)(`open "${dashboardUrl}"`, { stdio: "ignore" });
       else if (process.platform === "win32")
-        (0, import_child_process12.execSync)(`cmd /c start "" "${dashboardUrl}"`, { stdio: "ignore" });
-      else (0, import_child_process12.execSync)(`xdg-open "${dashboardUrl}"`, { stdio: "ignore" });
+        (0, import_child_process13.execSync)(`cmd /c start "" "${dashboardUrl}"`, { stdio: "ignore" });
+      else (0, import_child_process13.execSync)(`xdg-open "${dashboardUrl}"`, { stdio: "ignore" });
     }
   } catch {
   }
-  console.log(import_chalk13.default.cyan.bold(`
-\u{1F6F0}\uFE0F  Node9 tail  `) + import_chalk13.default.dim(`\u2192 ${dashboardUrl}`));
+  console.log(import_chalk14.default.cyan.bold(`
+\u{1F6F0}\uFE0F  Node9 tail  `) + import_chalk14.default.dim(`\u2192 ${dashboardUrl}`));
   if (canApprove) {
-    console.log(import_chalk13.default.dim("Interactive approvals enabled. [A] Allow  [D] Deny"));
+    console.log(import_chalk14.default.dim("Interactive approvals enabled. [A] Allow  [D] Deny"));
   }
   if (options.history) {
-    console.log(import_chalk13.default.dim("Showing history + live events. Press Ctrl+C to exit.\n"));
+    console.log(import_chalk14.default.dim("Showing history + live events. Press Ctrl+C to exit.\n"));
   } else {
     console.log(
-      import_chalk13.default.dim("Showing live events only. Use --history to include past. Press Ctrl+C to exit.\n")
+      import_chalk14.default.dim("Showing live events only. Use --history to include past. Press Ctrl+C to exit.\n")
     );
   }
   process.on("SIGINT", () => {
     clearCard();
     process.stdout.write(SHOW_CURSOR);
     if (process.stdout.isTTY) {
-      import_readline2.default.clearLine(process.stdout, 0);
-      import_readline2.default.cursorTo(process.stdout, 0);
+      import_readline3.default.clearLine(process.stdout, 0);
+      import_readline3.default.cursorTo(process.stdout, 0);
     }
-    console.log(import_chalk13.default.dim("\n\u{1F6F0}\uFE0F  Disconnected."));
+    console.log(import_chalk14.default.dim("\n\u{1F6F0}\uFE0F  Disconnected."));
     process.exit(0);
   });
   const sseUrl = `http://127.0.0.1:${port}/events?capabilities=input`;
   const req = import_http2.default.get(sseUrl, (res) => {
     if (res.statusCode !== 200) {
-      console.error(import_chalk13.default.red(`Failed to connect: HTTP ${res.statusCode}`));
+      console.error(import_chalk14.default.red(`Failed to connect: HTTP ${res.statusCode}`));
       process.exit(1);
     }
     let currentEvent = "";
     let currentData = "";
     res.on("error", () => {
     });
-    const rl = import_readline2.default.createInterface({ input: res, crlfDelay: Infinity });
+    const rl = import_readline3.default.createInterface({ input: res, crlfDelay: Infinity });
     rl.on("error", () => {
     });
     rl.on("line", (line) => {
@@ -5358,10 +5358,10 @@ async function startTail(options = {}) {
       clearCard();
       process.stdout.write(SHOW_CURSOR);
       if (process.stdout.isTTY) {
-        import_readline2.default.clearLine(process.stdout, 0);
-        import_readline2.default.cursorTo(process.stdout, 0);
+        import_readline3.default.clearLine(process.stdout, 0);
+        import_readline3.default.cursorTo(process.stdout, 0);
       }
-      console.log(import_chalk13.default.red("\n\u274C Daemon disconnected."));
+      console.log(import_chalk14.default.red("\n\u274C Daemon disconnected."));
       process.exit(1);
     });
   });
@@ -5441,22 +5441,22 @@ async function startTail(options = {}) {
   }
   req.on("error", (err) => {
     const msg = err.code === "ECONNREFUSED" ? "Daemon is not running. Start it with: node9 daemon start" : err.message;
-    console.error(import_chalk13.default.red(`
+    console.error(import_chalk14.default.red(`
 \u274C ${msg}`));
     process.exit(1);
   });
 }
-var import_http2, import_chalk13, import_fs19, import_os17, import_path20, import_readline2, import_child_process12, PID_FILE, ICONS, RESET, BOLD, RED, YELLOW, CYAN, GRAY, GREEN, HIDE_CURSOR, SHOW_CURSOR, ERASE_DOWN, SAVE_CURSOR, RESTORE_CURSOR;
+var import_http2, import_chalk14, import_fs19, import_os17, import_path20, import_readline3, import_child_process13, PID_FILE, ICONS, RESET, BOLD, RED, YELLOW, CYAN, GRAY, GREEN, HIDE_CURSOR, SHOW_CURSOR, ERASE_DOWN, SAVE_CURSOR, RESTORE_CURSOR;
 var init_tail = __esm({
   "src/tui/tail.ts"() {
     "use strict";
     import_http2 = __toESM(require("http"));
-    import_chalk13 = __toESM(require("chalk"));
+    import_chalk14 = __toESM(require("chalk"));
     import_fs19 = __toESM(require("fs"));
     import_os17 = __toESM(require("os"));
     import_path20 = __toESM(require("path"));
-    import_readline2 = __toESM(require("readline"));
-    import_child_process12 = require("child_process");
+    import_readline3 = __toESM(require("readline"));
+    import_child_process13 = require("child_process");
     init_daemon2();
     init_core();
     PID_FILE = import_path20.default.join(import_os17.default.homedir(), ".node9", "daemon.pid");
@@ -5865,7 +5865,7 @@ async function setupCursor() {
 
 // src/cli.ts
 init_daemon2();
-var import_chalk14 = __toESM(require("chalk"));
+var import_chalk15 = __toESM(require("chalk"));
 var import_fs20 = __toESM(require("fs"));
 var import_path21 = __toESM(require("path"));
 var import_os18 = __toESM(require("os"));
@@ -7397,6 +7397,207 @@ function registerWatchCommand(program2) {
   });
 }
 
+// src/mcp-gateway/index.ts
+var import_readline2 = __toESM(require("readline"));
+var import_chalk13 = __toESM(require("chalk"));
+var import_child_process12 = require("child_process");
+var import_execa3 = require("execa");
+init_orchestrator();
+function sanitize4(value) {
+  return value.replace(/[\x00-\x1F\x7F]/g, "");
+}
+var RPC_INVALID_REQUEST = -32600;
+var RPC_SERVER_ERROR = -32e3;
+function isValidId(id) {
+  return id === null || typeof id === "string" || typeof id === "number";
+}
+function extractMcpServer(toolName) {
+  const match = toolName.match(/^mcp__([^_](?:[^_]|_(?!_))*?)__/i);
+  return match?.[1];
+}
+function tokenize2(cmd) {
+  const tokens = [];
+  let current = "";
+  let inDouble = false;
+  let i = 0;
+  while (i < cmd.length) {
+    const ch = cmd[i];
+    if (inDouble) {
+      if (ch === '"') {
+        inDouble = false;
+      } else if (ch === "\\" && i + 1 < cmd.length) {
+        current += cmd[++i];
+      } else {
+        current += ch;
+      }
+    } else {
+      if (ch === '"') {
+        inDouble = true;
+      } else if (ch === " " || ch === "	") {
+        if (current) {
+          tokens.push(current);
+          current = "";
+        }
+      } else if (ch === "\\" && i + 1 < cmd.length) {
+        current += cmd[++i];
+      } else {
+        current += ch;
+      }
+    }
+    i++;
+  }
+  if (current) tokens.push(current);
+  return tokens;
+}
+async function runMcpGateway(upstreamCommand) {
+  const commandParts = tokenize2(upstreamCommand);
+  const cmd = commandParts[0];
+  const cmdArgs = commandParts.slice(1);
+  let executable = cmd;
+  try {
+    const { stdout } = await (0, import_execa3.execa)("which", [cmd]);
+    if (stdout) executable = stdout.trim();
+  } catch {
+  }
+  console.error(import_chalk13.default.green(`\u{1F680} Node9 MCP Gateway: Monitoring [${upstreamCommand}]`));
+  const UPSTREAM_INJECTOR_VARS = /* @__PURE__ */ new Set([
+    "NODE_OPTIONS",
+    "NODE_PATH",
+    "LD_PRELOAD",
+    "LD_LIBRARY_PATH",
+    "DYLD_INSERT_LIBRARIES",
+    "PYTHONPATH",
+    "PYTHONSTARTUP",
+    "PERL5LIB",
+    "PERL5OPT",
+    "RUBYLIB",
+    "RUBYOPT",
+    "JAVA_TOOL_OPTIONS",
+    "JDK_JAVA_OPTIONS"
+  ]);
+  const safeEnv = Object.fromEntries(
+    Object.entries(process.env).filter(([k]) => !UPSTREAM_INJECTOR_VARS.has(k))
+  );
+  const child = (0, import_child_process12.spawn)(executable, cmdArgs, {
+    stdio: ["pipe", "pipe", "inherit"],
+    // control stdin/stdout; inherit stderr
+    shell: false,
+    env: { ...safeEnv, FORCE_COLOR: "1" }
+  });
+  let authPending = false;
+  let deferredExitCode = null;
+  let deferredStdinEnd = false;
+  const agentIn = import_readline2.default.createInterface({ input: process.stdin, terminal: false });
+  agentIn.on("line", async (line) => {
+    let message;
+    try {
+      const parsed = JSON.parse(line);
+      if ("id" in parsed && !isValidId(parsed.id)) {
+        const errorResponse = {
+          jsonrpc: "2.0",
+          id: null,
+          error: {
+            code: RPC_INVALID_REQUEST,
+            message: "Invalid Request: id must be string, number, or null"
+          }
+        };
+        process.stdout.write(JSON.stringify(errorResponse) + "\n");
+        return;
+      }
+      message = { ...parsed, id: parsed.id };
+    } catch {
+      child.stdin.write(line + "\n");
+      return;
+    }
+    if (message.method === "tools/call" || message.method === "call_tool" || message.method === "use_tool") {
+      agentIn.pause();
+      authPending = true;
+      try {
+        const toolName = sanitize4(
+          String(message.params?.name ?? message.params?.tool_name ?? "unknown")
+        );
+        const toolArgs = message.params?.arguments ?? message.params?.tool_input ?? {};
+        const mcpServer = extractMcpServer(toolName);
+        const result = await authorizeHeadless(toolName, toolArgs, {
+          agent: "MCP-Gateway",
+          mcpServer
+        });
+        if (!result.approved) {
+          console.error(import_chalk13.default.red(`
+\u{1F6D1} Node9 MCP Gateway: Action Blocked`));
+          console.error(import_chalk13.default.gray(`   Tool: ${toolName}`));
+          console.error(import_chalk13.default.gray(`   Reason: ${result.reason ?? "Security Policy"}
+`));
+          const blockedByLabel = result.blockedByLabel ?? result.reason ?? "Security Policy";
+          const isHumanDecision = blockedByLabel.toLowerCase().includes("user") || blockedByLabel.toLowerCase().includes("daemon") || blockedByLabel.toLowerCase().includes("decision");
+          const aiInstruction = buildNegotiationMessage(
+            blockedByLabel,
+            isHumanDecision,
+            result.reason
+          );
+          const errorResponse = {
+            jsonrpc: "2.0",
+            id: message.id ?? null,
+            error: {
+              code: RPC_SERVER_ERROR,
+              message: aiInstruction,
+              data: { reason: result.reason, blockedBy: result.blockedByLabel }
+            }
+          };
+          process.stdout.write(JSON.stringify(errorResponse) + "\n");
+          return;
+        }
+        child.stdin.write(line + "\n");
+      } catch {
+        const errorResponse = {
+          jsonrpc: "2.0",
+          id: message.id ?? null,
+          error: {
+            code: -32e3,
+            message: "Node9: Security engine encountered an error. Action blocked for safety."
+          }
+        };
+        process.stdout.write(JSON.stringify(errorResponse) + "\n");
+        return;
+      } finally {
+        authPending = false;
+        agentIn.resume();
+        if (deferredStdinEnd) child.stdin.end();
+        if (deferredExitCode !== null) process.exit(deferredExitCode);
+      }
+      return;
+    }
+    child.stdin.write(line + "\n");
+  });
+  child.stdout.pipe(process.stdout);
+  process.stdin.on("close", () => {
+    if (authPending) {
+      deferredStdinEnd = true;
+    } else {
+      child.stdin.end();
+    }
+  });
+  child.on("exit", (code) => {
+    if (authPending) {
+      deferredExitCode = code ?? 0;
+    } else {
+      process.exit(code ?? 0);
+    }
+  });
+}
+
+// src/cli/commands/mcp-gateway.ts
+function registerMcpGatewayCommand(program2) {
+  program2.command("mcp-gateway").description(
+    "Run Node9 as an MCP gateway \u2014 intercepts and authorizes tool calls before forwarding to the upstream MCP server"
+  ).requiredOption(
+    "--upstream <command>",
+    'The upstream MCP server command to wrap (e.g. "npx -y @modelcontextprotocol/server-filesystem /workspace")'
+  ).action(async (options) => {
+    await runMcpGateway(options.upstream);
+  });
+}
+
 // src/cli.ts
 var { version } = JSON.parse(
   import_fs20.default.readFileSync(import_path21.default.join(__dirname, "../package.json"), "utf-8")
@@ -7450,31 +7651,31 @@ program.command("login").argument("<apiKey>").option("--local", "Save key for au
     import_fs20.default.writeFileSync(configPath, JSON.stringify(config, null, 2), { mode: 384 });
   }
   if (options.profile && profileName !== "default") {
-    console.log(import_chalk14.default.green(`\u2705 Profile "${profileName}" saved`));
-    console.log(import_chalk14.default.gray(`   Switch to it per-session:  NODE9_PROFILE=${profileName} claude`));
+    console.log(import_chalk15.default.green(`\u2705 Profile "${profileName}" saved`));
+    console.log(import_chalk15.default.gray(`   Switch to it per-session:  NODE9_PROFILE=${profileName} claude`));
   } else if (options.local) {
-    console.log(import_chalk14.default.green(`\u2705 Privacy mode \u{1F6E1}\uFE0F`));
-    console.log(import_chalk14.default.gray(`   All decisions stay on this machine.`));
+    console.log(import_chalk15.default.green(`\u2705 Privacy mode \u{1F6E1}\uFE0F`));
+    console.log(import_chalk15.default.gray(`   All decisions stay on this machine.`));
   } else {
-    console.log(import_chalk14.default.green(`\u2705 Logged in \u2014 agent mode`));
-    console.log(import_chalk14.default.gray(`   Team policy enforced for all calls via Node9 cloud.`));
+    console.log(import_chalk15.default.green(`\u2705 Logged in \u2014 agent mode`));
+    console.log(import_chalk15.default.gray(`   Team policy enforced for all calls via Node9 cloud.`));
   }
 });
 program.command("addto").description("Integrate Node9 with an AI agent").addHelpText("after", "\n  Supported targets:  claude  gemini  cursor").argument("<target>", "The agent to protect: claude | gemini | cursor").action(async (target) => {
   if (target === "gemini") return await setupGemini();
   if (target === "claude") return await setupClaude();
   if (target === "cursor") return await setupCursor();
-  console.error(import_chalk14.default.red(`Unknown target: "${target}". Supported: claude, gemini, cursor`));
+  console.error(import_chalk15.default.red(`Unknown target: "${target}". Supported: claude, gemini, cursor`));
   process.exit(1);
 });
 program.command("setup").description('Alias for "addto" \u2014 integrate Node9 with an AI agent').addHelpText("after", "\n  Supported targets:  claude  gemini  cursor").argument("[target]", "The agent to protect: claude | gemini | cursor").action(async (target) => {
   if (!target) {
-    console.log(import_chalk14.default.cyan("\n\u{1F6E1}\uFE0F  Node9 Setup \u2014 integrate with your AI agent\n"));
-    console.log("  Usage:  " + import_chalk14.default.white("node9 setup <target>") + "\n");
+    console.log(import_chalk15.default.cyan("\n\u{1F6E1}\uFE0F  Node9 Setup \u2014 integrate with your AI agent\n"));
+    console.log("  Usage:  " + import_chalk15.default.white("node9 setup <target>") + "\n");
     console.log("  Targets:");
-    console.log("    " + import_chalk14.default.green("claude") + "   \u2014 Claude Code (hook mode)");
-    console.log("    " + import_chalk14.default.green("gemini") + "   \u2014 Gemini CLI (hook mode)");
-    console.log("    " + import_chalk14.default.green("cursor") + "   \u2014 Cursor (hook mode)");
+    console.log("    " + import_chalk15.default.green("claude") + "   \u2014 Claude Code (hook mode)");
+    console.log("    " + import_chalk15.default.green("gemini") + "   \u2014 Gemini CLI (hook mode)");
+    console.log("    " + import_chalk15.default.green("cursor") + "   \u2014 Cursor (hook mode)");
     console.log("");
     return;
   }
@@ -7482,7 +7683,7 @@ program.command("setup").description('Alias for "addto" \u2014 integrate Node9 w
   if (t === "gemini") return await setupGemini();
   if (t === "claude") return await setupClaude();
   if (t === "cursor") return await setupCursor();
-  console.error(import_chalk14.default.red(`Unknown target: "${target}". Supported: claude, gemini, cursor`));
+  console.error(import_chalk15.default.red(`Unknown target: "${target}". Supported: claude, gemini, cursor`));
   process.exit(1);
 });
 program.command("removefrom").description("Remove Node9 hooks from an AI agent configuration").addHelpText("after", "\n  Supported targets:  claude  gemini  cursor").argument("<target>", "The agent to remove from: claude | gemini | cursor").action((target) => {
@@ -7491,30 +7692,30 @@ program.command("removefrom").description("Remove Node9 hooks from an AI agent c
   else if (target === "gemini") fn = teardownGemini;
   else if (target === "cursor") fn = teardownCursor;
   else {
-    console.error(import_chalk14.default.red(`Unknown target: "${target}". Supported: claude, gemini, cursor`));
+    console.error(import_chalk15.default.red(`Unknown target: "${target}". Supported: claude, gemini, cursor`));
     process.exit(1);
   }
-  console.log(import_chalk14.default.cyan(`
+  console.log(import_chalk15.default.cyan(`
 \u{1F6E1}\uFE0F  Node9: removing hooks from ${target}...
 `));
   try {
     fn();
   } catch (err) {
-    console.error(import_chalk14.default.red(`  \u26A0\uFE0F  Failed: ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_chalk15.default.red(`  \u26A0\uFE0F  Failed: ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
-  console.log(import_chalk14.default.gray("\n  Restart the agent for changes to take effect."));
+  console.log(import_chalk15.default.gray("\n  Restart the agent for changes to take effect."));
 });
 program.command("uninstall").description("Remove all Node9 hooks and optionally delete config files").option("--purge", "Also delete ~/.node9/ directory (config, audit log, credentials)").action(async (options) => {
-  console.log(import_chalk14.default.cyan("\n\u{1F6E1}\uFE0F  Node9 Uninstall\n"));
-  console.log(import_chalk14.default.bold("Stopping daemon..."));
+  console.log(import_chalk15.default.cyan("\n\u{1F6E1}\uFE0F  Node9 Uninstall\n"));
+  console.log(import_chalk15.default.bold("Stopping daemon..."));
   try {
     stopDaemon();
-    console.log(import_chalk14.default.green("  \u2705 Daemon stopped"));
+    console.log(import_chalk15.default.green("  \u2705 Daemon stopped"));
   } catch {
-    console.log(import_chalk14.default.blue("  \u2139\uFE0F  Daemon was not running"));
+    console.log(import_chalk15.default.blue("  \u2139\uFE0F  Daemon was not running"));
   }
-  console.log(import_chalk14.default.bold("\nRemoving hooks..."));
+  console.log(import_chalk15.default.bold("\nRemoving hooks..."));
   let teardownFailed = false;
   for (const [label, fn] of [
     ["Claude", teardownClaude],
@@ -7526,7 +7727,7 @@ program.command("uninstall").description("Remove all Node9 hooks and optionally
     } catch (err) {
       teardownFailed = true;
       console.error(
-        import_chalk14.default.red(
+        import_chalk15.default.red(
           `  \u26A0\uFE0F  Failed to remove ${label} hooks: ${err instanceof Error ? err.message : String(err)}`
         )
       );
@@ -7543,28 +7744,28 @@ program.command("uninstall").description("Remove all Node9 hooks and optionally
         import_fs20.default.rmSync(node9Dir, { recursive: true });
         if (import_fs20.default.existsSync(node9Dir)) {
           console.error(
-            import_chalk14.default.red("\n  \u26A0\uFE0F  ~/.node9/ could not be fully deleted \u2014 remove it manually.")
+            import_chalk15.default.red("\n  \u26A0\uFE0F  ~/.node9/ could not be fully deleted \u2014 remove it manually.")
           );
         } else {
-          console.log(import_chalk14.default.green("\n  \u2705 Deleted ~/.node9/ (config, audit log, credentials)"));
+          console.log(import_chalk15.default.green("\n  \u2705 Deleted ~/.node9/ (config, audit log, credentials)"));
         }
       } else {
-        console.log(import_chalk14.default.yellow("\n  Skipped \u2014 ~/.node9/ was not deleted."));
+        console.log(import_chalk15.default.yellow("\n  Skipped \u2014 ~/.node9/ was not deleted."));
       }
     } else {
-      console.log(import_chalk14.default.blue("\n  \u2139\uFE0F  ~/.node9/ not found \u2014 nothing to delete"));
+      console.log(import_chalk15.default.blue("\n  \u2139\uFE0F  ~/.node9/ not found \u2014 nothing to delete"));
     }
   } else {
     console.log(
-      import_chalk14.default.gray("\n  ~/.node9/ kept \u2014 run with --purge to delete config and audit log")
+      import_chalk15.default.gray("\n  ~/.node9/ kept \u2014 run with --purge to delete config and audit log")
     );
   }
   if (teardownFailed) {
-    console.error(import_chalk14.default.red("\n  \u26A0\uFE0F  Some hooks could not be removed \u2014 see errors above."));
+    console.error(import_chalk15.default.red("\n  \u26A0\uFE0F  Some hooks could not be removed \u2014 see errors above."));
     process.exit(1);
   }
-  console.log(import_chalk14.default.green.bold("\n\u{1F6E1}\uFE0F  Node9 removed. Run: npm uninstall -g @node9/proxy"));
-  console.log(import_chalk14.default.gray("   Restart any open AI agent sessions for changes to take effect.\n"));
+  console.log(import_chalk15.default.green.bold("\n\u{1F6E1}\uFE0F  Node9 removed. Run: npm uninstall -g @node9/proxy"));
+  console.log(import_chalk15.default.gray("   Restart any open AI agent sessions for changes to take effect.\n"));
 });
 registerDoctorCommand(program, version);
 program.command("explain").description(
@@ -7577,7 +7778,7 @@ program.command("explain").description(
       try {
         args = JSON.parse(trimmed);
       } catch {
-        console.error(import_chalk14.default.red(`
+        console.error(import_chalk15.default.red(`
 \u274C Invalid JSON: ${trimmed}
 `));
         process.exit(1);
@@ -7588,54 +7789,54 @@ program.command("explain").description(
   }
   const result = await explainPolicy(tool, args);
   console.log("");
-  console.log(import_chalk14.default.cyan.bold("\u{1F6E1}\uFE0F  Node9 Explain"));
+  console.log(import_chalk15.default.cyan.bold("\u{1F6E1}\uFE0F  Node9 Explain"));
   console.log("");
-  console.log(`   ${import_chalk14.default.bold("Tool:")}    ${import_chalk14.default.white(result.tool)}`);
+  console.log(`   ${import_chalk15.default.bold("Tool:")}    ${import_chalk15.default.white(result.tool)}`);
   if (argsRaw) {
     const preview = argsRaw.length > 80 ? argsRaw.slice(0, 77) + "\u2026" : argsRaw;
-    console.log(`   ${import_chalk14.default.bold("Input:")}   ${import_chalk14.default.gray(preview)}`);
+    console.log(`   ${import_chalk15.default.bold("Input:")}   ${import_chalk15.default.gray(preview)}`);
   }
   console.log("");
-  console.log(import_chalk14.default.bold("Config Sources (Waterfall):"));
+  console.log(import_chalk15.default.bold("Config Sources (Waterfall):"));
   for (const tier of result.waterfall) {
-    const num = import_chalk14.default.gray(`  ${tier.tier}.`);
+    const num = import_chalk15.default.gray(`  ${tier.tier}.`);
     const label = tier.label.padEnd(16);
     let statusStr;
     if (tier.tier === 1) {
-      statusStr = import_chalk14.default.gray(tier.note ?? "");
+      statusStr = import_chalk15.default.gray(tier.note ?? "");
     } else if (tier.status === "active") {
-      const loc = tier.path ? import_chalk14.default.gray(tier.path) : "";
-      const note = tier.note ? import_chalk14.default.gray(`(${tier.note})`) : "";
-      statusStr = import_chalk14.default.green("\u2713 active") + (loc ? "  " + loc : "") + (note ? "  " + note : "");
+      const loc = tier.path ? import_chalk15.default.gray(tier.path) : "";
+      const note = tier.note ? import_chalk15.default.gray(`(${tier.note})`) : "";
+      statusStr = import_chalk15.default.green("\u2713 active") + (loc ? "  " + loc : "") + (note ? "  " + note : "");
     } else {
-      statusStr = import_chalk14.default.gray("\u25CB " + (tier.note ?? "not found"));
+      statusStr = import_chalk15.default.gray("\u25CB " + (tier.note ?? "not found"));
     }
-    console.log(`${num} ${import_chalk14.default.white(label)} ${statusStr}`);
+    console.log(`${num} ${import_chalk15.default.white(label)} ${statusStr}`);
   }
   console.log("");
-  console.log(import_chalk14.default.bold("Policy Evaluation:"));
+  console.log(import_chalk15.default.bold("Policy Evaluation:"));
   for (const step of result.steps) {
     const isFinal = step.isFinal;
     let icon;
-    if (step.outcome === "allow") icon = import_chalk14.default.green("  \u2705");
-    else if (step.outcome === "review") icon = import_chalk14.default.red("  \u{1F534}");
-    else if (step.outcome === "skip") icon = import_chalk14.default.gray("  \u2500 ");
-    else icon = import_chalk14.default.gray("  \u25CB ");
+    if (step.outcome === "allow") icon = import_chalk15.default.green("  \u2705");
+    else if (step.outcome === "review") icon = import_chalk15.default.red("  \u{1F534}");
+    else if (step.outcome === "skip") icon = import_chalk15.default.gray("  \u2500 ");
+    else icon = import_chalk15.default.gray("  \u25CB ");
     const name = step.name.padEnd(18);
-    const nameStr = isFinal ? import_chalk14.default.white.bold(name) : import_chalk14.default.white(name);
-    const detail = isFinal ? import_chalk14.default.white(step.detail) : import_chalk14.default.gray(step.detail);
-    const arrow = isFinal ? import_chalk14.default.yellow("  \u2190 STOP") : "";
+    const nameStr = isFinal ? import_chalk15.default.white.bold(name) : import_chalk15.default.white(name);
+    const detail = isFinal ? import_chalk15.default.white(step.detail) : import_chalk15.default.gray(step.detail);
+    const arrow = isFinal ? import_chalk15.default.yellow("  \u2190 STOP") : "";
     console.log(`${icon} ${nameStr} ${detail}${arrow}`);
   }
   console.log("");
   if (result.decision === "allow") {
-    console.log(import_chalk14.default.green.bold("  Decision: \u2705 ALLOW") + import_chalk14.default.gray("  \u2014 no approval needed"));
+    console.log(import_chalk15.default.green.bold("  Decision: \u2705 ALLOW") + import_chalk15.default.gray("  \u2014 no approval needed"));
   } else {
     console.log(
-      import_chalk14.default.red.bold("  Decision: \u{1F534} REVIEW") + import_chalk14.default.gray("  \u2014 human approval required")
+      import_chalk15.default.red.bold("  Decision: \u{1F534} REVIEW") + import_chalk15.default.gray("  \u2014 human approval required")
     );
     if (result.blockedByLabel) {
-      console.log(import_chalk14.default.gray(`  Reason:   ${result.blockedByLabel}`));
+      console.log(import_chalk15.default.gray(`  Reason:   ${result.blockedByLabel}`));
     }
   }
   console.log("");
@@ -7643,8 +7844,8 @@ program.command("explain").description(
 program.command("init").description("Create ~/.node9/config.json with default policy (safe to run multiple times)").option("--force", "Overwrite existing config").option("-m, --mode <mode>", "Set initial security mode (standard, strict, audit)", "standard").action((options) => {
   const configPath = import_path21.default.join(import_os18.default.homedir(), ".node9", "config.json");
   if (import_fs20.default.existsSync(configPath) && !options.force) {
-    console.log(import_chalk14.default.yellow(`\u2139\uFE0F  Global config already exists: ${configPath}`));
-    console.log(import_chalk14.default.gray(`   Run with --force to overwrite.`));
+    console.log(import_chalk15.default.yellow(`\u2139\uFE0F  Global config already exists: ${configPath}`));
+    console.log(import_chalk15.default.gray(`   Run with --force to overwrite.`));
     return;
   }
   const requestedMode = options.mode.toLowerCase();
@@ -7659,10 +7860,10 @@ program.command("init").description("Create ~/.node9/config.json with default po
   const dir = import_path21.default.dirname(configPath);
   if (!import_fs20.default.existsSync(dir)) import_fs20.default.mkdirSync(dir, { recursive: true });
   import_fs20.default.writeFileSync(configPath, JSON.stringify(configToSave, null, 2));
-  console.log(import_chalk14.default.green(`\u2705 Global config created: ${configPath}`));
-  console.log(import_chalk14.default.cyan(`   Mode set to: ${safeMode}`));
+  console.log(import_chalk15.default.green(`\u2705 Global config created: ${configPath}`));
+  console.log(import_chalk15.default.cyan(`   Mode set to: ${safeMode}`));
   console.log(
-    import_chalk14.default.gray(`   Undo Engine is ENABLED by default. Use 'node9 undo' to revert AI changes.`)
+    import_chalk15.default.gray(`   Undo Engine is ENABLED by default. Use 'node9 undo' to revert AI changes.`)
   );
 });
 registerAuditCommand(program);
@@ -7673,18 +7874,19 @@ program.command("tail").description("Stream live agent activity to the terminal"
   try {
     await startTail2(options);
   } catch (err) {
-    console.error(import_chalk14.default.red(`\u274C ${err instanceof Error ? err.message : String(err)}`));
+    console.error(import_chalk15.default.red(`\u274C ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
 });
 registerWatchCommand(program);
+registerMcpGatewayCommand(program);
 registerCheckCommand(program);
 registerLogCommand(program);
 program.command("pause").description("Temporarily disable Node9 protection for a set duration").option("-d, --duration <duration>", "How long to pause (e.g. 15m, 1h, 30s)", "15m").action((options) => {
   const ms = parseDuration(options.duration);
   if (ms === null) {
     console.error(
-      import_chalk14.default.red(`
+      import_chalk15.default.red(`
 \u274C  Invalid duration: "${options.duration}". Use format like 15m, 1h, 30s.
 `)
     );
@@ -7692,20 +7894,20 @@ program.command("pause").description("Temporarily disable Node9 protection for a
   }
   pauseNode9(ms, options.duration);
   const expiresAt = new Date(Date.now() + ms).toLocaleTimeString();
-  console.log(import_chalk14.default.yellow(`
+  console.log(import_chalk15.default.yellow(`
 \u23F8  Node9 paused until ${expiresAt}`));
-  console.log(import_chalk14.default.gray(`   All tool calls will be allowed without review.`));
-  console.log(import_chalk14.default.gray(`   Run "node9 resume" to re-enable early.
+  console.log(import_chalk15.default.gray(`   All tool calls will be allowed without review.`));
+  console.log(import_chalk15.default.gray(`   Run "node9 resume" to re-enable early.
 `));
 });
 program.command("resume").description("Re-enable Node9 protection immediately").action(() => {
   const { paused } = checkPause();
   if (!paused) {
-    console.log(import_chalk14.default.gray("\nNode9 is already active \u2014 nothing to resume.\n"));
+    console.log(import_chalk15.default.gray("\nNode9 is already active \u2014 nothing to resume.\n"));
     return;
   }
   resumeNode9();
-  console.log(import_chalk14.default.green("\n\u25B6  Node9 resumed \u2014 protection is active.\n"));
+  console.log(import_chalk15.default.green("\n\u25B6  Node9 resumed \u2014 protection is active.\n"));
 });
 var HOOK_BASED_AGENTS = {
   claude: "claude",
@@ -7718,15 +7920,15 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
     if (HOOK_BASED_AGENTS[firstArg2] !== void 0) {
       const target = HOOK_BASED_AGENTS[firstArg2];
       console.error(
-        import_chalk14.default.yellow(`
+        import_chalk15.default.yellow(`
 \u26A0\uFE0F  Node9 proxy mode does not support "${target}" directly.`)
       );
-      console.error(import_chalk14.default.white(`
+      console.error(import_chalk15.default.white(`
    "${target}" uses its own hook system. Use:`));
       console.error(
-        import_chalk14.default.green(`     node9 addto ${target}   `) + import_chalk14.default.gray("# one-time setup")
+        import_chalk15.default.green(`     node9 addto ${target}   `) + import_chalk15.default.gray("# one-time setup")
       );
-      console.error(import_chalk14.default.green(`     ${target}              `) + import_chalk14.default.gray("# run normally"));
+      console.error(import_chalk15.default.green(`     ${target}              `) + import_chalk15.default.gray("# run normally"));
       process.exit(1);
     }
     const runArgs = firstArg2 === "shell" ? commandArgs.slice(1) : commandArgs;
@@ -7743,7 +7945,7 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
       }
     );
     if (result.noApprovalMechanism && !isDaemonRunning() && !process.env.NODE9_NO_AUTO_DAEMON && getConfig().settings.autoStartDaemon) {
-      console.error(import_chalk14.default.cyan("\n\u{1F6E1}\uFE0F  Node9: Starting approval daemon automatically..."));
+      console.error(import_chalk15.default.cyan("\n\u{1F6E1}\uFE0F  Node9: Starting approval daemon automatically..."));
       const daemonReady = await autoStartDaemonAndWait();
       if (daemonReady) result = await authorizeHeadless("shell", { command: fullCommand });
     }
@@ -7756,12 +7958,12 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
     }
     if (!result.approved) {
       console.error(
-        import_chalk14.default.red(`
+        import_chalk15.default.red(`
 \u274C Node9 Blocked: ${result.reason || "Dangerous command detected."}`)
       );
       process.exit(1);
     }
-    console.error(import_chalk14.default.green("\n\u2705 Approved \u2014 running command...\n"));
+    console.error(import_chalk15.default.green("\n\u2705 Approved \u2014 running command...\n"));
     await runProxy(fullCommand);
   } else {
     program.help();