@node9/proxy 1.2.0 → 1.3.1

package/dist/cli.mjs

@@ -5033,12 +5033,12 @@ __export(tail_exports, {
   startTail: () => startTail
 });
 import http2 from "http";
-import chalk13 from "chalk";
+import chalk14 from "chalk";
 import fs19 from "fs";
 import os17 from "os";
 import path20 from "path";
-import readline2 from "readline";
-import { spawn as spawn8, execSync as execSync3 } from "child_process";
+import readline3 from "readline";
+import { spawn as spawn9, execSync as execSync3 } from "child_process";
 function getIcon(tool) {
   const t = tool.toLowerCase();
   for (const [k, v] of Object.entries(ICONS)) {
@@ -5052,27 +5052,27 @@ function formatBase(activity) {
   const toolName = activity.tool.slice(0, 16).padEnd(16);
   const argsStr = JSON.stringify(activity.args ?? {}).replace(/\s+/g, " ");
   const argsPreview = argsStr.length > 70 ? argsStr.slice(0, 70) + "\u2026" : argsStr;
-  return `${chalk13.gray(time)} ${icon} ${chalk13.white.bold(toolName)} ${chalk13.dim(argsPreview)}`;
+  return `${chalk14.gray(time)} ${icon} ${chalk14.white.bold(toolName)} ${chalk14.dim(argsPreview)}`;
 }
 function renderResult(activity, result) {
   const base = formatBase(activity);
   let status;
   if (result.status === "allow") {
-    status = chalk13.green("\u2713 ALLOW");
+    status = chalk14.green("\u2713 ALLOW");
   } else if (result.status === "dlp") {
-    status = chalk13.bgRed.white.bold(" \u{1F6E1}\uFE0F  DLP ");
+    status = chalk14.bgRed.white.bold(" \u{1F6E1}\uFE0F  DLP ");
   } else {
-    status = chalk13.red("\u2717 BLOCK");
+    status = chalk14.red("\u2717 BLOCK");
   }
   if (process.stdout.isTTY) {
-    readline2.clearLine(process.stdout, 0);
-    readline2.cursorTo(process.stdout, 0);
+    readline3.clearLine(process.stdout, 0);
+    readline3.cursorTo(process.stdout, 0);
   }
   console.log(`${base}  ${status}`);
 }
 function renderPending(activity) {
   if (!process.stdout.isTTY) return;
-  process.stdout.write(`${formatBase(activity)}  ${chalk13.yellow("\u25CF \u2026")}\r`);
+  process.stdout.write(`${formatBase(activity)}  ${chalk14.yellow("\u25CF \u2026")}\r`);
 }
 async function ensureDaemon() {
   let pidPort = null;
@@ -5081,7 +5081,7 @@ async function ensureDaemon() {
       const { port } = JSON.parse(fs19.readFileSync(PID_FILE, "utf-8"));
       pidPort = port;
     } catch {
-      console.error(chalk13.dim("\u26A0\uFE0F  Could not read PID file; falling back to default port."));
+      console.error(chalk14.dim("\u26A0\uFE0F  Could not read PID file; falling back to default port."));
     }
   }
   const checkPort = pidPort ?? DAEMON_PORT;
@@ -5092,8 +5092,8 @@ async function ensureDaemon() {
     if (res.ok) return checkPort;
   } catch {
   }
-  console.log(chalk13.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon..."));
-  const child = spawn8(process.execPath, [process.argv[1], "daemon"], {
+  console.log(chalk14.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon..."));
+  const child = spawn9(process.execPath, [process.argv[1], "daemon"], {
     detached: true,
     stdio: "ignore",
     env: { ...process.env, NODE9_AUTO_STARTED: "1" }
@@ -5109,7 +5109,7 @@ async function ensureDaemon() {
     } catch {
     }
   }
-  console.error(chalk13.red("\u274C Daemon failed to start. Try: node9 daemon start"));
+  console.error(chalk14.red("\u274C Daemon failed to start. Try: node9 daemon start"));
   process.exit(1);
 }
 function postDecisionHttp(id, decision, csrfToken, port) {
@@ -5180,7 +5180,7 @@ async function startTail(options = {}) {
       req2.end();
     });
     if (result.ok) {
-      console.log(chalk13.green("\u2713 Flight Recorder buffer cleared."));
+      console.log(chalk14.green("\u2713 Flight Recorder buffer cleared."));
     } else if (result.code === "ECONNREFUSED") {
       throw new Error("Daemon is not running. Start it with: node9 daemon start");
     } else if (result.code === "ETIMEDOUT") {
@@ -5198,7 +5198,7 @@ async function startTail(options = {}) {
   let cardLineCount = 0;
   let cancelActiveCard = null;
   const canApprove = process.stdout.isTTY && process.stdin.isTTY;
-  if (canApprove) readline2.emitKeypressEvents(process.stdin);
+  if (canApprove) readline3.emitKeypressEvents(process.stdin);
   function clearCard() {
     if (cardLineCount > 0) {
       process.stdout.write(RESTORE_CURSOR + ERASE_DOWN);
@@ -5251,8 +5251,8 @@ async function startTail(options = {}) {
         } catch {
         }
       });
-      const decisionLabel = decision === "allow" ? chalk13.green("\u2713 ALLOWED (terminal)") : chalk13.red("\u2717 DENIED (terminal)");
-      console.log(`${chalk13.cyan("\u25C6")} ${chalk13.bold(req2.toolName.padEnd(16))}  ${decisionLabel}`);
+      const decisionLabel = decision === "allow" ? chalk14.green("\u2713 ALLOWED (terminal)") : chalk14.red("\u2717 DENIED (terminal)");
+      console.log(`${chalk14.cyan("\u25C6")} ${chalk14.bold(req2.toolName.padEnd(16))}  ${decisionLabel}`);
       approvalQueue.shift();
       cardActive = false;
       showNextCard();
@@ -5289,39 +5289,39 @@ async function startTail(options = {}) {
     }
   } catch {
   }
-  console.log(chalk13.cyan.bold(`
-\u{1F6F0}\uFE0F  Node9 tail  `) + chalk13.dim(`\u2192 ${dashboardUrl}`));
+  console.log(chalk14.cyan.bold(`
+\u{1F6F0}\uFE0F  Node9 tail  `) + chalk14.dim(`\u2192 ${dashboardUrl}`));
   if (canApprove) {
-    console.log(chalk13.dim("Interactive approvals enabled. [A] Allow  [D] Deny"));
+    console.log(chalk14.dim("Interactive approvals enabled. [A] Allow  [D] Deny"));
   }
   if (options.history) {
-    console.log(chalk13.dim("Showing history + live events. Press Ctrl+C to exit.\n"));
+    console.log(chalk14.dim("Showing history + live events. Press Ctrl+C to exit.\n"));
   } else {
     console.log(
-      chalk13.dim("Showing live events only. Use --history to include past. Press Ctrl+C to exit.\n")
+      chalk14.dim("Showing live events only. Use --history to include past. Press Ctrl+C to exit.\n")
     );
   }
   process.on("SIGINT", () => {
     clearCard();
     process.stdout.write(SHOW_CURSOR);
     if (process.stdout.isTTY) {
-      readline2.clearLine(process.stdout, 0);
-      readline2.cursorTo(process.stdout, 0);
+      readline3.clearLine(process.stdout, 0);
+      readline3.cursorTo(process.stdout, 0);
     }
-    console.log(chalk13.dim("\n\u{1F6F0}\uFE0F  Disconnected."));
+    console.log(chalk14.dim("\n\u{1F6F0}\uFE0F  Disconnected."));
     process.exit(0);
   });
   const sseUrl = `http://127.0.0.1:${port}/events?capabilities=input`;
   const req = http2.get(sseUrl, (res) => {
     if (res.statusCode !== 200) {
-      console.error(chalk13.red(`Failed to connect: HTTP ${res.statusCode}`));
+      console.error(chalk14.red(`Failed to connect: HTTP ${res.statusCode}`));
       process.exit(1);
     }
     let currentEvent = "";
     let currentData = "";
     res.on("error", () => {
     });
-    const rl = readline2.createInterface({ input: res, crlfDelay: Infinity });
+    const rl = readline3.createInterface({ input: res, crlfDelay: Infinity });
     rl.on("error", () => {
     });
     rl.on("line", (line) => {
@@ -5341,10 +5341,10 @@ async function startTail(options = {}) {
       clearCard();
       process.stdout.write(SHOW_CURSOR);
       if (process.stdout.isTTY) {
-        readline2.clearLine(process.stdout, 0);
-        readline2.cursorTo(process.stdout, 0);
+        readline3.clearLine(process.stdout, 0);
+        readline3.cursorTo(process.stdout, 0);
       }
-      console.log(chalk13.red("\n\u274C Daemon disconnected."));
+      console.log(chalk14.red("\n\u274C Daemon disconnected."));
       process.exit(1);
     });
   });
@@ -5424,7 +5424,7 @@ async function startTail(options = {}) {
   }
   req.on("error", (err) => {
     const msg = err.code === "ECONNREFUSED" ? "Daemon is not running. Start it with: node9 daemon start" : err.message;
-    console.error(chalk13.red(`
+    console.error(chalk14.red(`
 \u274C ${msg}`));
     process.exit(1);
   });
@@ -5841,7 +5841,7 @@ async function setupCursor() {
 
 // src/cli.ts
 init_daemon2();
-import chalk14 from "chalk";
+import chalk15 from "chalk";
 import fs20 from "fs";
 import path21 from "path";
 import os18 from "os";
@@ -7373,6 +7373,207 @@ function registerWatchCommand(program2) {
   });
 }
 
+// src/mcp-gateway/index.ts
+init_orchestrator();
+import readline2 from "readline";
+import chalk13 from "chalk";
+import { spawn as spawn8 } from "child_process";
+import { execa as execa2 } from "execa";
+function sanitize4(value) {
+  return value.replace(/[\x00-\x1F\x7F]/g, "");
+}
+var RPC_INVALID_REQUEST = -32600;
+var RPC_SERVER_ERROR = -32e3;
+function isValidId(id) {
+  return id === null || typeof id === "string" || typeof id === "number";
+}
+function extractMcpServer(toolName) {
+  const match = toolName.match(/^mcp__([^_](?:[^_]|_(?!_))*?)__/i);
+  return match?.[1];
+}
+function tokenize2(cmd) {
+  const tokens = [];
+  let current = "";
+  let inDouble = false;
+  let i = 0;
+  while (i < cmd.length) {
+    const ch = cmd[i];
+    if (inDouble) {
+      if (ch === '"') {
+        inDouble = false;
+      } else if (ch === "\\" && i + 1 < cmd.length) {
+        current += cmd[++i];
+      } else {
+        current += ch;
+      }
+    } else {
+      if (ch === '"') {
+        inDouble = true;
+      } else if (ch === " " || ch === "	") {
+        if (current) {
+          tokens.push(current);
+          current = "";
+        }
+      } else if (ch === "\\" && i + 1 < cmd.length) {
+        current += cmd[++i];
+      } else {
+        current += ch;
+      }
+    }
+    i++;
+  }
+  if (current) tokens.push(current);
+  return tokens;
+}
+async function runMcpGateway(upstreamCommand) {
+  const commandParts = tokenize2(upstreamCommand);
+  const cmd = commandParts[0];
+  const cmdArgs = commandParts.slice(1);
+  let executable = cmd;
+  try {
+    const { stdout } = await execa2("which", [cmd]);
+    if (stdout) executable = stdout.trim();
+  } catch {
+  }
+  console.error(chalk13.green(`\u{1F680} Node9 MCP Gateway: Monitoring [${upstreamCommand}]`));
+  const UPSTREAM_INJECTOR_VARS = /* @__PURE__ */ new Set([
+    "NODE_OPTIONS",
+    "NODE_PATH",
+    "LD_PRELOAD",
+    "LD_LIBRARY_PATH",
+    "DYLD_INSERT_LIBRARIES",
+    "PYTHONPATH",
+    "PYTHONSTARTUP",
+    "PERL5LIB",
+    "PERL5OPT",
+    "RUBYLIB",
+    "RUBYOPT",
+    "JAVA_TOOL_OPTIONS",
+    "JDK_JAVA_OPTIONS"
+  ]);
+  const safeEnv = Object.fromEntries(
+    Object.entries(process.env).filter(([k]) => !UPSTREAM_INJECTOR_VARS.has(k))
+  );
+  const child = spawn8(executable, cmdArgs, {
+    stdio: ["pipe", "pipe", "inherit"],
+    // control stdin/stdout; inherit stderr
+    shell: false,
+    env: { ...safeEnv, FORCE_COLOR: "1" }
+  });
+  let authPending = false;
+  let deferredExitCode = null;
+  let deferredStdinEnd = false;
+  const agentIn = readline2.createInterface({ input: process.stdin, terminal: false });
+  agentIn.on("line", async (line) => {
+    let message;
+    try {
+      const parsed = JSON.parse(line);
+      if ("id" in parsed && !isValidId(parsed.id)) {
+        const errorResponse = {
+          jsonrpc: "2.0",
+          id: null,
+          error: {
+            code: RPC_INVALID_REQUEST,
+            message: "Invalid Request: id must be string, number, or null"
+          }
+        };
+        process.stdout.write(JSON.stringify(errorResponse) + "\n");
+        return;
+      }
+      message = { ...parsed, id: parsed.id };
+    } catch {
+      child.stdin.write(line + "\n");
+      return;
+    }
+    if (message.method === "tools/call" || message.method === "call_tool" || message.method === "use_tool") {
+      agentIn.pause();
+      authPending = true;
+      try {
+        const toolName = sanitize4(
+          String(message.params?.name ?? message.params?.tool_name ?? "unknown")
+        );
+        const toolArgs = message.params?.arguments ?? message.params?.tool_input ?? {};
+        const mcpServer = extractMcpServer(toolName);
+        const result = await authorizeHeadless(toolName, toolArgs, {
+          agent: "MCP-Gateway",
+          mcpServer
+        });
+        if (!result.approved) {
+          console.error(chalk13.red(`
+\u{1F6D1} Node9 MCP Gateway: Action Blocked`));
+          console.error(chalk13.gray(`   Tool: ${toolName}`));
+          console.error(chalk13.gray(`   Reason: ${result.reason ?? "Security Policy"}
+`));
+          const blockedByLabel = result.blockedByLabel ?? result.reason ?? "Security Policy";
+          const isHumanDecision = blockedByLabel.toLowerCase().includes("user") || blockedByLabel.toLowerCase().includes("daemon") || blockedByLabel.toLowerCase().includes("decision");
+          const aiInstruction = buildNegotiationMessage(
+            blockedByLabel,
+            isHumanDecision,
+            result.reason
+          );
+          const errorResponse = {
+            jsonrpc: "2.0",
+            id: message.id ?? null,
+            error: {
+              code: RPC_SERVER_ERROR,
+              message: aiInstruction,
+              data: { reason: result.reason, blockedBy: result.blockedByLabel }
+            }
+          };
+          process.stdout.write(JSON.stringify(errorResponse) + "\n");
+          return;
+        }
+        child.stdin.write(line + "\n");
+      } catch {
+        const errorResponse = {
+          jsonrpc: "2.0",
+          id: message.id ?? null,
+          error: {
+            code: -32e3,
+            message: "Node9: Security engine encountered an error. Action blocked for safety."
+          }
+        };
+        process.stdout.write(JSON.stringify(errorResponse) + "\n");
+        return;
+      } finally {
+        authPending = false;
+        agentIn.resume();
+        if (deferredStdinEnd) child.stdin.end();
+        if (deferredExitCode !== null) process.exit(deferredExitCode);
+      }
+      return;
+    }
+    child.stdin.write(line + "\n");
+  });
+  child.stdout.pipe(process.stdout);
+  process.stdin.on("close", () => {
+    if (authPending) {
+      deferredStdinEnd = true;
+    } else {
+      child.stdin.end();
+    }
+  });
+  child.on("exit", (code) => {
+    if (authPending) {
+      deferredExitCode = code ?? 0;
+    } else {
+      process.exit(code ?? 0);
+    }
+  });
+}
+
+// src/cli/commands/mcp-gateway.ts
+function registerMcpGatewayCommand(program2) {
+  program2.command("mcp-gateway").description(
+    "Run Node9 as an MCP gateway \u2014 intercepts and authorizes tool calls before forwarding to the upstream MCP server"
+  ).requiredOption(
+    "--upstream <command>",
+    'The upstream MCP server command to wrap (e.g. "npx -y @modelcontextprotocol/server-filesystem /workspace")'
+  ).action(async (options) => {
+    await runMcpGateway(options.upstream);
+  });
+}
+
 // src/cli.ts
 var { version } = JSON.parse(
   fs20.readFileSync(path21.join(__dirname, "../package.json"), "utf-8")
@@ -7426,31 +7627,31 @@ program.command("login").argument("<apiKey>").option("--local", "Save key for au
     fs20.writeFileSync(configPath, JSON.stringify(config, null, 2), { mode: 384 });
   }
   if (options.profile && profileName !== "default") {
-    console.log(chalk14.green(`\u2705 Profile "${profileName}" saved`));
-    console.log(chalk14.gray(`   Switch to it per-session:  NODE9_PROFILE=${profileName} claude`));
+    console.log(chalk15.green(`\u2705 Profile "${profileName}" saved`));
+    console.log(chalk15.gray(`   Switch to it per-session:  NODE9_PROFILE=${profileName} claude`));
   } else if (options.local) {
-    console.log(chalk14.green(`\u2705 Privacy mode \u{1F6E1}\uFE0F`));
-    console.log(chalk14.gray(`   All decisions stay on this machine.`));
+    console.log(chalk15.green(`\u2705 Privacy mode \u{1F6E1}\uFE0F`));
+    console.log(chalk15.gray(`   All decisions stay on this machine.`));
   } else {
-    console.log(chalk14.green(`\u2705 Logged in \u2014 agent mode`));
-    console.log(chalk14.gray(`   Team policy enforced for all calls via Node9 cloud.`));
+    console.log(chalk15.green(`\u2705 Logged in \u2014 agent mode`));
+    console.log(chalk15.gray(`   Team policy enforced for all calls via Node9 cloud.`));
   }
 });
 program.command("addto").description("Integrate Node9 with an AI agent").addHelpText("after", "\n  Supported targets:  claude  gemini  cursor").argument("<target>", "The agent to protect: claude | gemini | cursor").action(async (target) => {
   if (target === "gemini") return await setupGemini();
   if (target === "claude") return await setupClaude();
   if (target === "cursor") return await setupCursor();
-  console.error(chalk14.red(`Unknown target: "${target}". Supported: claude, gemini, cursor`));
+  console.error(chalk15.red(`Unknown target: "${target}". Supported: claude, gemini, cursor`));
   process.exit(1);
 });
 program.command("setup").description('Alias for "addto" \u2014 integrate Node9 with an AI agent').addHelpText("after", "\n  Supported targets:  claude  gemini  cursor").argument("[target]", "The agent to protect: claude | gemini | cursor").action(async (target) => {
   if (!target) {
-    console.log(chalk14.cyan("\n\u{1F6E1}\uFE0F  Node9 Setup \u2014 integrate with your AI agent\n"));
-    console.log("  Usage:  " + chalk14.white("node9 setup <target>") + "\n");
+    console.log(chalk15.cyan("\n\u{1F6E1}\uFE0F  Node9 Setup \u2014 integrate with your AI agent\n"));
+    console.log("  Usage:  " + chalk15.white("node9 setup <target>") + "\n");
     console.log("  Targets:");
-    console.log("    " + chalk14.green("claude") + "   \u2014 Claude Code (hook mode)");
-    console.log("    " + chalk14.green("gemini") + "   \u2014 Gemini CLI (hook mode)");
-    console.log("    " + chalk14.green("cursor") + "   \u2014 Cursor (hook mode)");
+    console.log("    " + chalk15.green("claude") + "   \u2014 Claude Code (hook mode)");
+    console.log("    " + chalk15.green("gemini") + "   \u2014 Gemini CLI (hook mode)");
+    console.log("    " + chalk15.green("cursor") + "   \u2014 Cursor (hook mode)");
     console.log("");
     return;
   }
@@ -7458,7 +7659,7 @@ program.command("setup").description('Alias for "addto" \u2014 integrate Node9 w
   if (t === "gemini") return await setupGemini();
   if (t === "claude") return await setupClaude();
   if (t === "cursor") return await setupCursor();
-  console.error(chalk14.red(`Unknown target: "${target}". Supported: claude, gemini, cursor`));
+  console.error(chalk15.red(`Unknown target: "${target}". Supported: claude, gemini, cursor`));
   process.exit(1);
 });
 program.command("removefrom").description("Remove Node9 hooks from an AI agent configuration").addHelpText("after", "\n  Supported targets:  claude  gemini  cursor").argument("<target>", "The agent to remove from: claude | gemini | cursor").action((target) => {
@@ -7467,30 +7668,30 @@ program.command("removefrom").description("Remove Node9 hooks from an AI agent c
   else if (target === "gemini") fn = teardownGemini;
   else if (target === "cursor") fn = teardownCursor;
   else {
-    console.error(chalk14.red(`Unknown target: "${target}". Supported: claude, gemini, cursor`));
+    console.error(chalk15.red(`Unknown target: "${target}". Supported: claude, gemini, cursor`));
     process.exit(1);
   }
-  console.log(chalk14.cyan(`
+  console.log(chalk15.cyan(`
 \u{1F6E1}\uFE0F  Node9: removing hooks from ${target}...
 `));
   try {
     fn();
   } catch (err) {
-    console.error(chalk14.red(`  \u26A0\uFE0F  Failed: ${err instanceof Error ? err.message : String(err)}`));
+    console.error(chalk15.red(`  \u26A0\uFE0F  Failed: ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
-  console.log(chalk14.gray("\n  Restart the agent for changes to take effect."));
+  console.log(chalk15.gray("\n  Restart the agent for changes to take effect."));
 });
 program.command("uninstall").description("Remove all Node9 hooks and optionally delete config files").option("--purge", "Also delete ~/.node9/ directory (config, audit log, credentials)").action(async (options) => {
-  console.log(chalk14.cyan("\n\u{1F6E1}\uFE0F  Node9 Uninstall\n"));
-  console.log(chalk14.bold("Stopping daemon..."));
+  console.log(chalk15.cyan("\n\u{1F6E1}\uFE0F  Node9 Uninstall\n"));
+  console.log(chalk15.bold("Stopping daemon..."));
   try {
     stopDaemon();
-    console.log(chalk14.green("  \u2705 Daemon stopped"));
+    console.log(chalk15.green("  \u2705 Daemon stopped"));
   } catch {
-    console.log(chalk14.blue("  \u2139\uFE0F  Daemon was not running"));
+    console.log(chalk15.blue("  \u2139\uFE0F  Daemon was not running"));
   }
-  console.log(chalk14.bold("\nRemoving hooks..."));
+  console.log(chalk15.bold("\nRemoving hooks..."));
   let teardownFailed = false;
   for (const [label, fn] of [
     ["Claude", teardownClaude],
@@ -7502,7 +7703,7 @@ program.command("uninstall").description("Remove all Node9 hooks and optionally
     } catch (err) {
       teardownFailed = true;
       console.error(
-        chalk14.red(
+        chalk15.red(
           `  \u26A0\uFE0F  Failed to remove ${label} hooks: ${err instanceof Error ? err.message : String(err)}`
         )
       );
@@ -7519,28 +7720,28 @@ program.command("uninstall").description("Remove all Node9 hooks and optionally
         fs20.rmSync(node9Dir, { recursive: true });
         if (fs20.existsSync(node9Dir)) {
           console.error(
-            chalk14.red("\n  \u26A0\uFE0F  ~/.node9/ could not be fully deleted \u2014 remove it manually.")
+            chalk15.red("\n  \u26A0\uFE0F  ~/.node9/ could not be fully deleted \u2014 remove it manually.")
           );
         } else {
-          console.log(chalk14.green("\n  \u2705 Deleted ~/.node9/ (config, audit log, credentials)"));
+          console.log(chalk15.green("\n  \u2705 Deleted ~/.node9/ (config, audit log, credentials)"));
         }
       } else {
-        console.log(chalk14.yellow("\n  Skipped \u2014 ~/.node9/ was not deleted."));
+        console.log(chalk15.yellow("\n  Skipped \u2014 ~/.node9/ was not deleted."));
       }
     } else {
-      console.log(chalk14.blue("\n  \u2139\uFE0F  ~/.node9/ not found \u2014 nothing to delete"));
+      console.log(chalk15.blue("\n  \u2139\uFE0F  ~/.node9/ not found \u2014 nothing to delete"));
     }
   } else {
     console.log(
-      chalk14.gray("\n  ~/.node9/ kept \u2014 run with --purge to delete config and audit log")
+      chalk15.gray("\n  ~/.node9/ kept \u2014 run with --purge to delete config and audit log")
     );
   }
   if (teardownFailed) {
-    console.error(chalk14.red("\n  \u26A0\uFE0F  Some hooks could not be removed \u2014 see errors above."));
+    console.error(chalk15.red("\n  \u26A0\uFE0F  Some hooks could not be removed \u2014 see errors above."));
     process.exit(1);
   }
-  console.log(chalk14.green.bold("\n\u{1F6E1}\uFE0F  Node9 removed. Run: npm uninstall -g @node9/proxy"));
-  console.log(chalk14.gray("   Restart any open AI agent sessions for changes to take effect.\n"));
+  console.log(chalk15.green.bold("\n\u{1F6E1}\uFE0F  Node9 removed. Run: npm uninstall -g @node9/proxy"));
+  console.log(chalk15.gray("   Restart any open AI agent sessions for changes to take effect.\n"));
 });
 registerDoctorCommand(program, version);
 program.command("explain").description(
@@ -7553,7 +7754,7 @@ program.command("explain").description(
       try {
         args = JSON.parse(trimmed);
       } catch {
-        console.error(chalk14.red(`
+        console.error(chalk15.red(`
 \u274C Invalid JSON: ${trimmed}
 `));
         process.exit(1);
@@ -7564,54 +7765,54 @@ program.command("explain").description(
   }
   const result = await explainPolicy(tool, args);
   console.log("");
-  console.log(chalk14.cyan.bold("\u{1F6E1}\uFE0F  Node9 Explain"));
+  console.log(chalk15.cyan.bold("\u{1F6E1}\uFE0F  Node9 Explain"));
   console.log("");
-  console.log(`   ${chalk14.bold("Tool:")}    ${chalk14.white(result.tool)}`);
+  console.log(`   ${chalk15.bold("Tool:")}    ${chalk15.white(result.tool)}`);
   if (argsRaw) {
     const preview = argsRaw.length > 80 ? argsRaw.slice(0, 77) + "\u2026" : argsRaw;
-    console.log(`   ${chalk14.bold("Input:")}   ${chalk14.gray(preview)}`);
+    console.log(`   ${chalk15.bold("Input:")}   ${chalk15.gray(preview)}`);
   }
   console.log("");
-  console.log(chalk14.bold("Config Sources (Waterfall):"));
+  console.log(chalk15.bold("Config Sources (Waterfall):"));
   for (const tier of result.waterfall) {
-    const num = chalk14.gray(`  ${tier.tier}.`);
+    const num = chalk15.gray(`  ${tier.tier}.`);
     const label = tier.label.padEnd(16);
     let statusStr;
     if (tier.tier === 1) {
-      statusStr = chalk14.gray(tier.note ?? "");
+      statusStr = chalk15.gray(tier.note ?? "");
     } else if (tier.status === "active") {
-      const loc = tier.path ? chalk14.gray(tier.path) : "";
-      const note = tier.note ? chalk14.gray(`(${tier.note})`) : "";
-      statusStr = chalk14.green("\u2713 active") + (loc ? "  " + loc : "") + (note ? "  " + note : "");
+      const loc = tier.path ? chalk15.gray(tier.path) : "";
+      const note = tier.note ? chalk15.gray(`(${tier.note})`) : "";
+      statusStr = chalk15.green("\u2713 active") + (loc ? "  " + loc : "") + (note ? "  " + note : "");
     } else {
-      statusStr = chalk14.gray("\u25CB " + (tier.note ?? "not found"));
+      statusStr = chalk15.gray("\u25CB " + (tier.note ?? "not found"));
     }
-    console.log(`${num} ${chalk14.white(label)} ${statusStr}`);
+    console.log(`${num} ${chalk15.white(label)} ${statusStr}`);
   }
   console.log("");
-  console.log(chalk14.bold("Policy Evaluation:"));
+  console.log(chalk15.bold("Policy Evaluation:"));
   for (const step of result.steps) {
     const isFinal = step.isFinal;
     let icon;
-    if (step.outcome === "allow") icon = chalk14.green("  \u2705");
-    else if (step.outcome === "review") icon = chalk14.red("  \u{1F534}");
-    else if (step.outcome === "skip") icon = chalk14.gray("  \u2500 ");
-    else icon = chalk14.gray("  \u25CB ");
+    if (step.outcome === "allow") icon = chalk15.green("  \u2705");
+    else if (step.outcome === "review") icon = chalk15.red("  \u{1F534}");
+    else if (step.outcome === "skip") icon = chalk15.gray("  \u2500 ");
+    else icon = chalk15.gray("  \u25CB ");
     const name = step.name.padEnd(18);
-    const nameStr = isFinal ? chalk14.white.bold(name) : chalk14.white(name);
-    const detail = isFinal ? chalk14.white(step.detail) : chalk14.gray(step.detail);
-    const arrow = isFinal ? chalk14.yellow("  \u2190 STOP") : "";
+    const nameStr = isFinal ? chalk15.white.bold(name) : chalk15.white(name);
+    const detail = isFinal ? chalk15.white(step.detail) : chalk15.gray(step.detail);
+    const arrow = isFinal ? chalk15.yellow("  \u2190 STOP") : "";
     console.log(`${icon} ${nameStr} ${detail}${arrow}`);
   }
   console.log("");
   if (result.decision === "allow") {
-    console.log(chalk14.green.bold("  Decision: \u2705 ALLOW") + chalk14.gray("  \u2014 no approval needed"));
+    console.log(chalk15.green.bold("  Decision: \u2705 ALLOW") + chalk15.gray("  \u2014 no approval needed"));
   } else {
     console.log(
-      chalk14.red.bold("  Decision: \u{1F534} REVIEW") + chalk14.gray("  \u2014 human approval required")
+      chalk15.red.bold("  Decision: \u{1F534} REVIEW") + chalk15.gray("  \u2014 human approval required")
     );
     if (result.blockedByLabel) {
-      console.log(chalk14.gray(`  Reason:   ${result.blockedByLabel}`));
+      console.log(chalk15.gray(`  Reason:   ${result.blockedByLabel}`));
     }
   }
   console.log("");
@@ -7619,8 +7820,8 @@ program.command("explain").description(
 program.command("init").description("Create ~/.node9/config.json with default policy (safe to run multiple times)").option("--force", "Overwrite existing config").option("-m, --mode <mode>", "Set initial security mode (standard, strict, audit)", "standard").action((options) => {
   const configPath = path21.join(os18.homedir(), ".node9", "config.json");
   if (fs20.existsSync(configPath) && !options.force) {
-    console.log(chalk14.yellow(`\u2139\uFE0F  Global config already exists: ${configPath}`));
-    console.log(chalk14.gray(`   Run with --force to overwrite.`));
+    console.log(chalk15.yellow(`\u2139\uFE0F  Global config already exists: ${configPath}`));
+    console.log(chalk15.gray(`   Run with --force to overwrite.`));
     return;
   }
   const requestedMode = options.mode.toLowerCase();
@@ -7635,10 +7836,10 @@ program.command("init").description("Create ~/.node9/config.json with default po
   const dir = path21.dirname(configPath);
   if (!fs20.existsSync(dir)) fs20.mkdirSync(dir, { recursive: true });
   fs20.writeFileSync(configPath, JSON.stringify(configToSave, null, 2));
-  console.log(chalk14.green(`\u2705 Global config created: ${configPath}`));
-  console.log(chalk14.cyan(`   Mode set to: ${safeMode}`));
+  console.log(chalk15.green(`\u2705 Global config created: ${configPath}`));
+  console.log(chalk15.cyan(`   Mode set to: ${safeMode}`));
   console.log(
-    chalk14.gray(`   Undo Engine is ENABLED by default. Use 'node9 undo' to revert AI changes.`)
+    chalk15.gray(`   Undo Engine is ENABLED by default. Use 'node9 undo' to revert AI changes.`)
   );
 });
 registerAuditCommand(program);
@@ -7649,18 +7850,19 @@ program.command("tail").description("Stream live agent activity to the terminal"
   try {
     await startTail2(options);
   } catch (err) {
-    console.error(chalk14.red(`\u274C ${err instanceof Error ? err.message : String(err)}`));
+    console.error(chalk15.red(`\u274C ${err instanceof Error ? err.message : String(err)}`));
     process.exit(1);
   }
 });
 registerWatchCommand(program);
+registerMcpGatewayCommand(program);
 registerCheckCommand(program);
 registerLogCommand(program);
 program.command("pause").description("Temporarily disable Node9 protection for a set duration").option("-d, --duration <duration>", "How long to pause (e.g. 15m, 1h, 30s)", "15m").action((options) => {
   const ms = parseDuration(options.duration);
   if (ms === null) {
     console.error(
-      chalk14.red(`
+      chalk15.red(`
 \u274C  Invalid duration: "${options.duration}". Use format like 15m, 1h, 30s.
 `)
     );
@@ -7668,20 +7870,20 @@ program.command("pause").description("Temporarily disable Node9 protection for a
   }
   pauseNode9(ms, options.duration);
   const expiresAt = new Date(Date.now() + ms).toLocaleTimeString();
-  console.log(chalk14.yellow(`
+  console.log(chalk15.yellow(`
 \u23F8  Node9 paused until ${expiresAt}`));
-  console.log(chalk14.gray(`   All tool calls will be allowed without review.`));
-  console.log(chalk14.gray(`   Run "node9 resume" to re-enable early.
+  console.log(chalk15.gray(`   All tool calls will be allowed without review.`));
+  console.log(chalk15.gray(`   Run "node9 resume" to re-enable early.
 `));
 });
 program.command("resume").description("Re-enable Node9 protection immediately").action(() => {
   const { paused } = checkPause();
   if (!paused) {
-    console.log(chalk14.gray("\nNode9 is already active \u2014 nothing to resume.\n"));
+    console.log(chalk15.gray("\nNode9 is already active \u2014 nothing to resume.\n"));
     return;
   }
   resumeNode9();
-  console.log(chalk14.green("\n\u25B6  Node9 resumed \u2014 protection is active.\n"));
+  console.log(chalk15.green("\n\u25B6  Node9 resumed \u2014 protection is active.\n"));
 });
 var HOOK_BASED_AGENTS = {
   claude: "claude",
@@ -7694,15 +7896,15 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
     if (HOOK_BASED_AGENTS[firstArg2] !== void 0) {
       const target = HOOK_BASED_AGENTS[firstArg2];
       console.error(
-        chalk14.yellow(`
+        chalk15.yellow(`
 \u26A0\uFE0F  Node9 proxy mode does not support "${target}" directly.`)
       );
-      console.error(chalk14.white(`
+      console.error(chalk15.white(`
    "${target}" uses its own hook system. Use:`));
       console.error(
-        chalk14.green(`     node9 addto ${target}   `) + chalk14.gray("# one-time setup")
+        chalk15.green(`     node9 addto ${target}   `) + chalk15.gray("# one-time setup")
       );
-      console.error(chalk14.green(`     ${target}              `) + chalk14.gray("# run normally"));
+      console.error(chalk15.green(`     ${target}              `) + chalk15.gray("# run normally"));
       process.exit(1);
     }
     const runArgs = firstArg2 === "shell" ? commandArgs.slice(1) : commandArgs;
@@ -7719,7 +7921,7 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
       }
     );
     if (result.noApprovalMechanism && !isDaemonRunning() && !process.env.NODE9_NO_AUTO_DAEMON && getConfig().settings.autoStartDaemon) {
-      console.error(chalk14.cyan("\n\u{1F6E1}\uFE0F  Node9: Starting approval daemon automatically..."));
+      console.error(chalk15.cyan("\n\u{1F6E1}\uFE0F  Node9: Starting approval daemon automatically..."));
       const daemonReady = await autoStartDaemonAndWait();
       if (daemonReady) result = await authorizeHeadless("shell", { command: fullCommand });
     }
@@ -7732,12 +7934,12 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
     }
     if (!result.approved) {
       console.error(
-        chalk14.red(`
+        chalk15.red(`
 \u274C Node9 Blocked: ${result.reason || "Dangerous command detected."}`)
       );
       process.exit(1);
     }
-    console.error(chalk14.green("\n\u2705 Approved \u2014 running command...\n"));
+    console.error(chalk15.green("\n\u2705 Approved \u2014 running command...\n"));
     await runProxy(fullCommand);
   } else {
     program.help();