@onyxsecurity/mcp-gateway 1.0.10 → 1.0.13

package/dist/bin/mcp-gateway.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{AccessControlBlockError as e,Client as t,ConfigurationError as n,ProcessSpawnError as r,ProxyConnectionError as i,ReadBuffer as a,SSEClientTransport as o,Server as s,StdioServerTransport as c,StreamableHTTPClientTransport as l,TransportError as u,__commonJSMin as d,__toESM as f,addBreadcrumbSafe as p,addGlobalTags as m,captureExceptionSafe as h,compressClientInfo as g,config as _,createParser as v,getSessionData as ee,initSentrySafe as y,initializeTrafficMirror as te,logger as b,proxyServer as ne,serializeMessage as x,startHTTPServer as S}from"../stdio-DLhH1AFQ.js";import{createRequire as re}from"node:module";import{readFileSync as ie,readdirSync as ae}from"node:fs";import{basename as oe,dirname as se,extname as ce,join as le,normalize as ue,relative as de,resolve as fe}from"path";import{format as pe,inspect as me}from"util";import{fileURLToPath as he}from"url";import{setTimeout as C}from"node:timers";import ge from"node:util";import{notStrictEqual as _e,strictEqual as ve}from"assert";import{readFileSync as ye,readdirSync as be,statSync as xe,writeFile as Se}from"fs";import{spawn as Ce}from"node:child_process";import{PassThrough as we,Transform as Te}from"node:stream";var Ee=class extends Event{constructor(e,t){super(e),this.code=t?.code??void 0,this.message=t?.message??void 0}[Symbol.for(`nodejs.util.inspect.custom`)](e,t,n){return n(ke(this),t)}[Symbol.for(`Deno.customInspect`)](e,t){return e(ke(this),t)}};function De(e){let t=globalThis.DOMException;return typeof t==`function`?new t(e,`SyntaxError`):SyntaxError(e)}function Oe(e){return e instanceof Error?`errors`in e&&Array.isArray(e.errors)?e.errors.map(Oe).join(`, `):`cause`in e&&e.cause instanceof Error?`${e}: ${Oe(e.cause)}`:e.message:`${e}`}function ke(e){return{type:e.type,message:e.message,code:e.code,defaultPrevented:e.defaultPrevented,cancelable:e.cancelable,timeStamp:e.timeStamp}}var Ae=e=>{throw TypeError(e)},je=(e,t,n)=>t.has(e)||Ae(`Cannot `+n),w=(e,t,n)=>(je(e,t,`read from private field`),n?n.call(e):t.get(e)),T=(e,t,n)=>t.has(e)?Ae(`Cannot add the same private member more than once`):t instanceof WeakSet?t.add(e):t.set(e,n),E=(e,t,n,r)=>(je(e,t,`write to private field`),t.set(e,n),n),Me=(e,t,n)=>(je(e,t,`access private method`),n),D,Ne,Pe,Fe,Ie,Le,Re,ze,Be,Ve,He,Ue,We,O,Ge,Ke,qe,Je,Ye,Xe,Ze,Qe,$e,et=class extends EventTarget{constructor(e,t){super(),T(this,O),this.CONNECTING=0,this.OPEN=1,this.CLOSED=2,T(this,D),T(this,Ne),T(this,Pe),T(this,Fe),T(this,Ie),T(this,Le),T(this,Re),T(this,ze,null),T(this,Be),T(this,Ve),T(this,He,null),T(this,Ue,null),T(this,We,null),T(this,Ke,async e=>{var t;w(this,Ve).reset();let{body:n,redirected:r,status:i,headers:a}=e;if(i===204){Me(this,O,Ze).call(this,`Server sent HTTP 204, not reconnecting`,204),this.close();return}if(r?E(this,Pe,new URL(e.url)):E(this,Pe,void 0),i!==200){Me(this,O,Ze).call(this,`Non-200 status code (${i})`,i);return}if(!(a.get(`content-type`)||``).startsWith(`text/event-stream`)){Me(this,O,Ze).call(this,`Invalid content type, expected "text/event-stream"`,i);return}if(w(this,D)===this.CLOSED)return;E(this,D,this.OPEN);let o=new Event(`open`);if((t=w(this,We))==null||t.call(this,o),this.dispatchEvent(o),typeof n!=`object`||!n||!(`getReader`in n)){Me(this,O,Ze).call(this,`Invalid response body, expected a web ReadableStream`,i),this.close();return}let s=new TextDecoder,c=n.getReader(),l=!0;do{let{done:e,value:t}=await c.read();t&&w(this,Ve).feed(s.decode(t,{stream:!e})),e&&(l=!1,w(this,Ve).reset(),Me(this,O,Qe).call(this))}while(l)}),T(this,qe,e=>{E(this,Be,void 0),!(e.name===`AbortError`||e.type===`aborted`)&&Me(this,O,Qe).call(this,Oe(e))}),T(this,Ye,e=>{typeof e.id==`string`&&E(this,ze,e.id);let t=new MessageEvent(e.event||`message`,{data:e.data,origin:w(this,Pe)?w(this,Pe).origin:w(this,Ne).origin,lastEventId:e.id||``});w(this,Ue)&&(!e.event||e.event===`message`)&&w(this,Ue).call(this,t),this.dispatchEvent(t)}),T(this,Xe,e=>{E(this,Le,e)}),T(this,$e,()=>{E(this,Re,void 0),w(this,D)===this.CONNECTING&&Me(this,O,Ge).call(this)});try{if(e instanceof URL)E(this,Ne,e);else if(typeof e==`string`)E(this,Ne,new URL(e,tt()));else throw Error(`Invalid URL`)}catch{throw De(`An invalid or illegal string was specified`)}E(this,Ve,v({onEvent:w(this,Ye),onRetry:w(this,Xe)})),E(this,D,this.CONNECTING),E(this,Le,3e3),E(this,Ie,t?.fetch??globalThis.fetch),E(this,Fe,t?.withCredentials??!1),Me(this,O,Ge).call(this)}get readyState(){return w(this,D)}get url(){return w(this,Ne).href}get withCredentials(){return w(this,Fe)}get onerror(){return w(this,He)}set onerror(e){E(this,He,e)}get onmessage(){return w(this,Ue)}set onmessage(e){E(this,Ue,e)}get onopen(){return w(this,We)}set onopen(e){E(this,We,e)}addEventListener(e,t,n){let r=t;super.addEventListener(e,r,n)}removeEventListener(e,t,n){let r=t;super.removeEventListener(e,r,n)}close(){w(this,Re)&&clearTimeout(w(this,Re)),w(this,D)!==this.CLOSED&&(w(this,Be)&&w(this,Be).abort(),E(this,D,this.CLOSED),E(this,Be,void 0))}};D=new WeakMap,Ne=new WeakMap,Pe=new WeakMap,Fe=new WeakMap,Ie=new WeakMap,Le=new WeakMap,Re=new WeakMap,ze=new WeakMap,Be=new WeakMap,Ve=new WeakMap,He=new WeakMap,Ue=new WeakMap,We=new WeakMap,O=new WeakSet,Ge=function(){E(this,D,this.CONNECTING),E(this,Be,new AbortController),w(this,Ie)(w(this,Ne),Me(this,O,Je).call(this)).then(w(this,Ke)).catch(w(this,qe))},Ke=new WeakMap,qe=new WeakMap,Je=function(){let e={mode:`cors`,redirect:`follow`,headers:{Accept:`text/event-stream`,...w(this,ze)?{"Last-Event-ID":w(this,ze)}:void 0},cache:`no-store`,signal:w(this,Be)?.signal};return`window`in globalThis&&(e.credentials=this.withCredentials?`include`:`same-origin`),e},Ye=new WeakMap,Xe=new WeakMap,Ze=function(e,t){var n;w(this,D)!==this.CLOSED&&E(this,D,this.CLOSED);let r=new Ee(`error`,{code:t,message:e});(n=w(this,He))==null||n.call(this,r),this.dispatchEvent(r)},Qe=function(e,t){var n;if(w(this,D)===this.CLOSED)return;E(this,D,this.CONNECTING);let r=new Ee(`error`,{code:t,message:e});(n=w(this,He))==null||n.call(this,r),this.dispatchEvent(r),E(this,Re,setTimeout(w(this,$e),w(this,Le)))},$e=new WeakMap,et.CONNECTING=0,et.OPEN=1,et.CLOSED=2;function tt(){let e=`document`in globalThis?globalThis.document:void 0;return e&&typeof e==`object`&&`baseURI`in e&&typeof e.baseURI==`string`?e.baseURI:void 0}const nt={right:st,center:ct};var rt=class{constructor(e){this.width=e.width,this.wrap=e.wrap??!0,this.rows=[]}span(...e){let t=this.div(...e);t.span=!0}resetOutput(){this.rows=[]}div(...e){if(e.length===0&&this.div(``),this.wrap&&this.shouldApplyLayoutDSL(...e)&&typeof e[0]==`string`)return this.applyLayoutDSL(e[0]);let t=e.map(e=>typeof e==`string`?this.colFromString(e):e);return this.rows.push(t),t}shouldApplyLayoutDSL(...e){return e.length===1&&typeof e[0]==`string`&&/[\t\n]/.test(e[0])}applyLayoutDSL(e){let t=e.split(`
+import{AccessControlBlockError as e,Client as t,ConfigurationError as n,ProcessSpawnError as r,ProxyConnectionError as i,ReadBuffer as a,SSEClientTransport as o,Server as s,StdioServerTransport as c,StreamableHTTPClientTransport as l,TransportError as u,__commonJSMin as d,__toESM as f,addBreadcrumbSafe as p,addGlobalTags as m,captureExceptionSafe as h,compressClientInfo as g,config as _,createParser as v,getSessionData as ee,initSentrySafe as y,initializeTrafficMirror as te,logger as b,proxyServer as ne,serializeMessage as x,startHTTPServer as S}from"../stdio-CouJ2ZAc.js";import{createRequire as re}from"node:module";import{readFileSync as ie,readdirSync as ae}from"node:fs";import{basename as oe,dirname as se,extname as ce,join as le,normalize as ue,relative as de,resolve as fe}from"path";import{format as pe,inspect as me}from"util";import{fileURLToPath as he}from"url";import{setTimeout as C}from"node:timers";import ge from"node:util";import{notStrictEqual as _e,strictEqual as ve}from"assert";import{readFileSync as ye,readdirSync as be,statSync as xe,writeFile as Se}from"fs";import{spawn as Ce}from"node:child_process";import{PassThrough as we,Transform as Te}from"node:stream";var Ee=class extends Event{constructor(e,t){super(e),this.code=t?.code??void 0,this.message=t?.message??void 0}[Symbol.for(`nodejs.util.inspect.custom`)](e,t,n){return n(ke(this),t)}[Symbol.for(`Deno.customInspect`)](e,t){return e(ke(this),t)}};function De(e){let t=globalThis.DOMException;return typeof t==`function`?new t(e,`SyntaxError`):SyntaxError(e)}function Oe(e){return e instanceof Error?`errors`in e&&Array.isArray(e.errors)?e.errors.map(Oe).join(`, `):`cause`in e&&e.cause instanceof Error?`${e}: ${Oe(e.cause)}`:e.message:`${e}`}function ke(e){return{type:e.type,message:e.message,code:e.code,defaultPrevented:e.defaultPrevented,cancelable:e.cancelable,timeStamp:e.timeStamp}}var Ae=e=>{throw TypeError(e)},je=(e,t,n)=>t.has(e)||Ae(`Cannot `+n),w=(e,t,n)=>(je(e,t,`read from private field`),n?n.call(e):t.get(e)),T=(e,t,n)=>t.has(e)?Ae(`Cannot add the same private member more than once`):t instanceof WeakSet?t.add(e):t.set(e,n),E=(e,t,n,r)=>(je(e,t,`write to private field`),t.set(e,n),n),Me=(e,t,n)=>(je(e,t,`access private method`),n),D,Ne,Pe,Fe,Ie,Le,Re,ze,Be,Ve,He,Ue,We,O,Ge,Ke,qe,Je,Ye,Xe,Ze,Qe,$e,et=class extends EventTarget{constructor(e,t){super(),T(this,O),this.CONNECTING=0,this.OPEN=1,this.CLOSED=2,T(this,D),T(this,Ne),T(this,Pe),T(this,Fe),T(this,Ie),T(this,Le),T(this,Re),T(this,ze,null),T(this,Be),T(this,Ve),T(this,He,null),T(this,Ue,null),T(this,We,null),T(this,Ke,async e=>{var t;w(this,Ve).reset();let{body:n,redirected:r,status:i,headers:a}=e;if(i===204){Me(this,O,Ze).call(this,`Server sent HTTP 204, not reconnecting`,204),this.close();return}if(r?E(this,Pe,new URL(e.url)):E(this,Pe,void 0),i!==200){Me(this,O,Ze).call(this,`Non-200 status code (${i})`,i);return}if(!(a.get(`content-type`)||``).startsWith(`text/event-stream`)){Me(this,O,Ze).call(this,`Invalid content type, expected "text/event-stream"`,i);return}if(w(this,D)===this.CLOSED)return;E(this,D,this.OPEN);let o=new Event(`open`);if((t=w(this,We))==null||t.call(this,o),this.dispatchEvent(o),typeof n!=`object`||!n||!(`getReader`in n)){Me(this,O,Ze).call(this,`Invalid response body, expected a web ReadableStream`,i),this.close();return}let s=new TextDecoder,c=n.getReader(),l=!0;do{let{done:e,value:t}=await c.read();t&&w(this,Ve).feed(s.decode(t,{stream:!e})),e&&(l=!1,w(this,Ve).reset(),Me(this,O,Qe).call(this))}while(l)}),T(this,qe,e=>{E(this,Be,void 0),!(e.name===`AbortError`||e.type===`aborted`)&&Me(this,O,Qe).call(this,Oe(e))}),T(this,Ye,e=>{typeof e.id==`string`&&E(this,ze,e.id);let t=new MessageEvent(e.event||`message`,{data:e.data,origin:w(this,Pe)?w(this,Pe).origin:w(this,Ne).origin,lastEventId:e.id||``});w(this,Ue)&&(!e.event||e.event===`message`)&&w(this,Ue).call(this,t),this.dispatchEvent(t)}),T(this,Xe,e=>{E(this,Le,e)}),T(this,$e,()=>{E(this,Re,void 0),w(this,D)===this.CONNECTING&&Me(this,O,Ge).call(this)});try{if(e instanceof URL)E(this,Ne,e);else if(typeof e==`string`)E(this,Ne,new URL(e,tt()));else throw Error(`Invalid URL`)}catch{throw De(`An invalid or illegal string was specified`)}E(this,Ve,v({onEvent:w(this,Ye),onRetry:w(this,Xe)})),E(this,D,this.CONNECTING),E(this,Le,3e3),E(this,Ie,t?.fetch??globalThis.fetch),E(this,Fe,t?.withCredentials??!1),Me(this,O,Ge).call(this)}get readyState(){return w(this,D)}get url(){return w(this,Ne).href}get withCredentials(){return w(this,Fe)}get onerror(){return w(this,He)}set onerror(e){E(this,He,e)}get onmessage(){return w(this,Ue)}set onmessage(e){E(this,Ue,e)}get onopen(){return w(this,We)}set onopen(e){E(this,We,e)}addEventListener(e,t,n){let r=t;super.addEventListener(e,r,n)}removeEventListener(e,t,n){let r=t;super.removeEventListener(e,r,n)}close(){w(this,Re)&&clearTimeout(w(this,Re)),w(this,D)!==this.CLOSED&&(w(this,Be)&&w(this,Be).abort(),E(this,D,this.CLOSED),E(this,Be,void 0))}};D=new WeakMap,Ne=new WeakMap,Pe=new WeakMap,Fe=new WeakMap,Ie=new WeakMap,Le=new WeakMap,Re=new WeakMap,ze=new WeakMap,Be=new WeakMap,Ve=new WeakMap,He=new WeakMap,Ue=new WeakMap,We=new WeakMap,O=new WeakSet,Ge=function(){E(this,D,this.CONNECTING),E(this,Be,new AbortController),w(this,Ie)(w(this,Ne),Me(this,O,Je).call(this)).then(w(this,Ke)).catch(w(this,qe))},Ke=new WeakMap,qe=new WeakMap,Je=function(){let e={mode:`cors`,redirect:`follow`,headers:{Accept:`text/event-stream`,...w(this,ze)?{"Last-Event-ID":w(this,ze)}:void 0},cache:`no-store`,signal:w(this,Be)?.signal};return`window`in globalThis&&(e.credentials=this.withCredentials?`include`:`same-origin`),e},Ye=new WeakMap,Xe=new WeakMap,Ze=function(e,t){var n;w(this,D)!==this.CLOSED&&E(this,D,this.CLOSED);let r=new Ee(`error`,{code:t,message:e});(n=w(this,He))==null||n.call(this,r),this.dispatchEvent(r)},Qe=function(e,t){var n;if(w(this,D)===this.CLOSED)return;E(this,D,this.CONNECTING);let r=new Ee(`error`,{code:t,message:e});(n=w(this,He))==null||n.call(this,r),this.dispatchEvent(r),E(this,Re,setTimeout(w(this,$e),w(this,Le)))},$e=new WeakMap,et.CONNECTING=0,et.OPEN=1,et.CLOSED=2;function tt(){let e=`document`in globalThis?globalThis.document:void 0;return e&&typeof e==`object`&&`baseURI`in e&&typeof e.baseURI==`string`?e.baseURI:void 0}const nt={right:st,center:ct};var rt=class{constructor(e){this.width=e.width,this.wrap=e.wrap??!0,this.rows=[]}span(...e){let t=this.div(...e);t.span=!0}resetOutput(){this.rows=[]}div(...e){if(e.length===0&&this.div(``),this.wrap&&this.shouldApplyLayoutDSL(...e)&&typeof e[0]==`string`)return this.applyLayoutDSL(e[0]);let t=e.map(e=>typeof e==`string`?this.colFromString(e):e);return this.rows.push(t),t}shouldApplyLayoutDSL(...e){return e.length===1&&typeof e[0]==`string`&&/[\t\n]/.test(e[0])}applyLayoutDSL(e){let t=e.split(`
 `).map(e=>e.split(`	`)),n=0;return t.forEach(e=>{e.length>1&&k.stringWidth(e[0])>n&&(n=Math.min(Math.floor(this.width*.5),k.stringWidth(e[0])))}),t.forEach(e=>{this.div(...e.map((t,r)=>({text:t.trim(),padding:this.measurePadding(t),width:r===0&&e.length>1?n:void 0})))}),this.rows[this.rows.length-1]}colFromString(e){return{text:e,padding:this.measurePadding(e)}}measurePadding(e){let t=k.stripAnsi(e);return[0,t.match(/\s*$/)[0].length,0,t.match(/^\s*/)[0].length]}toString(){let e=[];return this.rows.forEach(t=>{this.rowToString(t,e)}),e.filter(e=>!e.hidden).map(e=>e.text).join(`
 `)}rowToString(e,t){return this.rasterize(e).forEach((n,r)=>{let i=``;n.forEach((n,a)=>{let{width:o}=e[a],s=this.negatePadding(e[a]),c=n;if(s>k.stringWidth(n)&&(c+=` `.repeat(s-k.stringWidth(n))),e[a].align&&e[a].align!==`left`&&this.wrap){let t=nt[e[a].align];c=t(c,s),k.stringWidth(c)<s&&(c+=` `.repeat((o||0)-k.stringWidth(c)-1))}let l=e[a].padding||[0,0,0,0];l[3]&&(i+=` `.repeat(l[3])),i+=it(e[a],c,`| `),i+=c,i+=it(e[a],c,` |`),l[1]&&(i+=` `.repeat(l[1])),r===0&&t.length>0&&(i=this.renderInline(i,t[t.length-1]))}),t.push({text:i.replace(/ +$/,``),span:e.span})}),t}renderInline(e,t){let n=e.match(/^ */),r=n?n[0].length:0,i=t.text,a=k.stringWidth(i.trimRight());return t.span?this.wrap?r<a?e:(t.hidden=!0,i.trimRight()+` `.repeat(r-a)+e.trimLeft()):(t.hidden=!0,i+e):e}rasterize(e){let t=[],n=this.columnWidths(e),r;return e.forEach((e,i)=>{e.width=n[i],r=this.wrap?k.wrap(e.text,this.negatePadding(e),{hard:!0}).split(`
 `):e.text.split(`