@onyxsecurity/mcp-gateway 2.1.83 → 2.1.85

package/dist/{logger-wCk0bPsH.js → logger-ZEYfS5St.js}

@@ -1 +1 @@
-import"./proxyFetch-D-Q_Jjd3.js";import"./env-D95zpGvD.js";import{LOG_DIR as e,LOG_LEVEL as t,extractTraceIdFromHeaders as n,flushLogs as r,gatewayCorrelationId as i,logger as a,runWithTraceContext as o,runWithTraceContextAsync as s}from"./logger-18ShMXcA.js";export{e as LOG_DIR,t as LOG_LEVEL,n as extractTraceIdFromHeaders,r as flushLogs,i as gatewayCorrelationId,a as logger,o as runWithTraceContext,s as runWithTraceContextAsync};
+import"./proxyFetch-BUcZ46OB.js";import"./env-CiVcATPG.js";import{LOG_DIR as e,LOG_LEVEL as t,extractTraceIdFromHeaders as n,flushLogs as r,gatewayCorrelationId as i,logger as a,runWithTraceContext as o,runWithTraceContextAsync as s}from"./logger-B8X7VmRa.js";export{e as LOG_DIR,t as LOG_LEVEL,n as extractTraceIdFromHeaders,r as flushLogs,i as gatewayCorrelationId,a as logger,o as runWithTraceContext,s as runWithTraceContextAsync};

package/dist/{main-DFOVp-no.js → main-Pq-KY6XI.js}

@@ -1,6 +1,6 @@
-import{proxiedFetch as e}from"./proxyFetch-D-Q_Jjd3.js";import{AccessControlBlockError as t,ConfigurationError as n,ProtocolEraMismatchError as r,ProxyConnectionError as i,Server as a,StdioServerTransport as o,compressClientInfo as s,getSessionData as c,initializeTrafficMirror as l,isUsableSerial as u,logRequestCounts as d,proxyServer as f,redactCliArgs as p,serveStdio as ee,startHTTPServer as m,upstreamVersionNegotiation as te}from"./upstreamNegotiation-CiSuLQ2i.js";import{config as h}from"./env-D95zpGvD.js";import{chownToRealUser as g,extractTraceIdFromHeaders as ne,flushLogs as re,gatewayCorrelationId as _,logger as v}from"./logger-18ShMXcA.js";import{Client as ie,ProtocolError as y,ReadBuffer as b,UnauthorizedError as x,createParser as ae,normalizeUrl as S,serializeMessage as oe}from"./normalizeUrl-DUUGubD4.js";import{emitKeychainOutcomeLog as se,emitProxySetupLog as ce,hideBin as le,probeOperatorProxyForChild as ue,restoreOperatorProxyEnv as de,yargs_default as fe}from"./helpers-DTj4CC4q.js";import"./providers-DJn8F574.js";import{initializeOAuthProviders as pe}from"./oauthProvidersClient-BBP5fstL.js";import"./pkce-DUsFn3Kw.js";import{connectWithTransportFallback as me,discoverAuthServer as he,performOAuthFlow as ge,tryRefreshCachedToken as _e}from"./transportDetection-C_rcxnMB.js";import{homedir as ve}from"node:os";import{isAbsolute as C,join as w}from"node:path";import{createHash as T}from"node:crypto";import{accessSync as E,constants as ye}from"node:fs";import{chmod as be,mkdir as D,readFile as xe,rm as Se,writeFile as Ce}from"node:fs/promises";import{execFileSync as we,spawn as Te,spawnSync as O}from"node:child_process";import{StringDecoder as Ee}from"node:string_decoder";import{clearInterval as k,setInterval as A,setTimeout as De}from"node:timers";import Oe from"node:util";import{createInterface as ke}from"node:readline";import{PassThrough as Ae,Transform as je}from"node:stream";var j=class extends Event{constructor(e,t){super(e),this.code=t?.code??void 0,this.message=t?.message??void 0}[Symbol.for(`nodejs.util.inspect.custom`)](e,t,n){return n(Ne(this),t)}[Symbol.for(`Deno.customInspect`)](e,t){return e(Ne(this),t)}};function Me(e){let t=globalThis.DOMException;return typeof t==`function`?new t(e,`SyntaxError`):SyntaxError(e)}function M(e){return e instanceof Error?`errors`in e&&Array.isArray(e.errors)?e.errors.map(M).join(`, `):`cause`in e&&e.cause instanceof Error?`${e}: ${M(e.cause)}`:e.message:`${e}`}function Ne(e){return{type:e.type,message:e.message,code:e.code,defaultPrevented:e.defaultPrevented,cancelable:e.cancelable,timeStamp:e.timeStamp}}var Pe=e=>{throw TypeError(e)},Fe=(e,t,n)=>t.has(e)||Pe(`Cannot `+n),N=(e,t,n)=>(Fe(e,t,`read from private field`),n?n.call(e):t.get(e)),P=(e,t,n)=>t.has(e)?Pe(`Cannot add the same private member more than once`):t instanceof WeakSet?t.add(e):t.set(e,n),F=(e,t,n,r)=>(Fe(e,t,`write to private field`),t.set(e,n),n),I=(e,t,n)=>(Fe(e,t,`access private method`),n),L,R,z,Ie,B,V,H,U,W,G,K,q,J,Y,Le,Re,ze,Be,Ve,He,X,Ue,We,Ge=class extends EventTarget{constructor(e,t){super(),P(this,Y),this.CONNECTING=0,this.OPEN=1,this.CLOSED=2,P(this,L),P(this,R),P(this,z),P(this,Ie),P(this,B),P(this,V),P(this,H),P(this,U,null),P(this,W),P(this,G),P(this,K,null),P(this,q,null),P(this,J,null),P(this,Re,async e=>{var t;N(this,G).reset();let{body:n,redirected:r,status:i,headers:a}=e;if(i===204){I(this,Y,X).call(this,`Server sent HTTP 204, not reconnecting`,204),this.close();return}if(r?F(this,z,new URL(e.url)):F(this,z,void 0),i!==200){I(this,Y,X).call(this,`Non-200 status code (${i})`,i);return}if(!(a.get(`content-type`)||``).startsWith(`text/event-stream`)){I(this,Y,X).call(this,`Invalid content type, expected "text/event-stream"`,i);return}if(N(this,L)===this.CLOSED)return;F(this,L,this.OPEN);let o=new Event(`open`);if((t=N(this,J))==null||t.call(this,o),this.dispatchEvent(o),typeof n!=`object`||!n||!(`getReader`in n)){I(this,Y,X).call(this,`Invalid response body, expected a web ReadableStream`,i),this.close();return}let s=new TextDecoder,c=n.getReader(),l=!0;do{let{done:e,value:t}=await c.read();t&&N(this,G).feed(s.decode(t,{stream:!e})),e&&(l=!1,N(this,G).reset(),I(this,Y,Ue).call(this))}while(l)}),P(this,ze,e=>{F(this,W,void 0),!(e.name===`AbortError`||e.type===`aborted`)&&I(this,Y,Ue).call(this,M(e))}),P(this,Ve,e=>{typeof e.id==`string`&&F(this,U,e.id);let t=new MessageEvent(e.event||`message`,{data:e.data,origin:N(this,z)?N(this,z).origin:N(this,R).origin,lastEventId:e.id||``});N(this,q)&&(!e.event||e.event===`message`)&&N(this,q).call(this,t),this.dispatchEvent(t)}),P(this,He,e=>{F(this,V,e)}),P(this,We,()=>{F(this,H,void 0),N(this,L)===this.CONNECTING&&I(this,Y,Le).call(this)});try{if(e instanceof URL)F(this,R,e);else if(typeof e==`string`)F(this,R,new URL(e,Ke()));else throw Error(`Invalid URL`)}catch{throw Me(`An invalid or illegal string was specified`)}F(this,G,ae({onEvent:N(this,Ve),onRetry:N(this,He)})),F(this,L,this.CONNECTING),F(this,V,3e3),F(this,B,t?.fetch??globalThis.fetch),F(this,Ie,t?.withCredentials??!1),I(this,Y,Le).call(this)}get readyState(){return N(this,L)}get url(){return N(this,R).href}get withCredentials(){return N(this,Ie)}get onerror(){return N(this,K)}set onerror(e){F(this,K,e)}get onmessage(){return N(this,q)}set onmessage(e){F(this,q,e)}get onopen(){return N(this,J)}set onopen(e){F(this,J,e)}addEventListener(e,t,n){let r=t;super.addEventListener(e,r,n)}removeEventListener(e,t,n){let r=t;super.removeEventListener(e,r,n)}close(){N(this,H)&&clearTimeout(N(this,H)),N(this,L)!==this.CLOSED&&(N(this,W)&&N(this,W).abort(),F(this,L,this.CLOSED),F(this,W,void 0))}};L=new WeakMap,R=new WeakMap,z=new WeakMap,Ie=new WeakMap,B=new WeakMap,V=new WeakMap,H=new WeakMap,U=new WeakMap,W=new WeakMap,G=new WeakMap,K=new WeakMap,q=new WeakMap,J=new WeakMap,Y=new WeakSet,Le=function(){F(this,L,this.CONNECTING),F(this,W,new AbortController),N(this,B)(N(this,R),I(this,Y,Be).call(this)).then(N(this,Re)).catch(N(this,ze))},Re=new WeakMap,ze=new WeakMap,Be=function(){let e={mode:`cors`,redirect:`follow`,headers:{Accept:`text/event-stream`,...N(this,U)?{"Last-Event-ID":N(this,U)}:void 0},cache:`no-store`,signal:N(this,W)?.signal};return`window`in globalThis&&(e.credentials=this.withCredentials?`include`:`same-origin`),e},Ve=new WeakMap,He=new WeakMap,X=function(e,t){var n;N(this,L)!==this.CLOSED&&F(this,L,this.CLOSED);let r=new j(`error`,{code:t,message:e});(n=N(this,K))==null||n.call(this,r),this.dispatchEvent(r)},Ue=function(e,t){var n;if(N(this,L)===this.CLOSED)return;F(this,L,this.CONNECTING);let r=new j(`error`,{code:t,message:e});(n=N(this,K))==null||n.call(this,r),this.dispatchEvent(r),F(this,H,setTimeout(N(this,We),N(this,V)))},We=new WeakMap,Ge.CONNECTING=0,Ge.OPEN=1,Ge.CLOSED=2;function Ke(){let e=`document`in globalThis?globalThis.document:void 0;return e&&typeof e==`object`&&`baseURI`in e&&typeof e.baseURI==`string`?e.baseURI:void 0}var qe=class{client;enabled;lastBlockReason;serverName;constructor(e){this.enabled=e.enabled,this.client=e.client,this.serverName=e.serverName,v.info(`AccessControlAuthorizer initialized`,{enabled:this.enabled,hasClient:!!this.client,serverName:this.serverName})}getBlockReason(){return this.lastBlockReason?this.lastBlockReason:`MCP server${this.serverName?` '${this.serverName}'`:``} is not authorized for use in your organization and has been blocked by Onyx.`}async isAllowed(){if(!this.enabled)return!0;if(this.client)try{let e=await this.client.authorize();return e.action===`block`?(e.reason?this.lastBlockReason=e.reason:this.lastBlockReason=`MCP server${this.serverName?` '${this.serverName}'`:``} is not authorized for use in your organization and has been blocked by Onyx.`,!1):!0}catch(e){return v.error(`Access control authorization failed with unexpected error`,{error:String(e)}),!0}return v.warn(`No access control client configured, allowing by default`),!0}},Je=class{clientInfoBase64;config;constructor(e){this.config=e,this.clientInfoBase64=this.getClientInfoBase64(),v.info(`AccessControlClient initialized`,{timeoutMs:e.timeoutMs,url:e.url})}async authorize(){try{let e=await this.sendAuthorizeRequest();return v.debug(`Access control check successful`,{action:e.action}),e}catch(e){return v.warn(`Access control check failed, failing open (allowing by default)`,{error:String(e)}),{action:`allow`}}}getClientInfoBase64(){return s(this.config.sessionData)}async sendAuthorizeRequest(){let t=new AbortController,n=setTimeout(()=>t.abort(),this.config.timeoutMs);try{let n=`${this.config.url}/${this.config.apiKey}/mcp/${this.clientInfoBase64}`,r=await e(n,{headers:{...this.config.headers},method:`POST`,signal:t.signal});if(!r.ok)throw Error(`Access control service returned ${r.status}: ${r.statusText}`);let i=await r.json();if(!i.action||![`allow`,`block`].includes(i.action))throw Error(`Invalid access control response format: action="${i.action}"`);return i}catch(e){throw e instanceof Error&&e.name===`AbortError`?Error(`Access control check timed out after ${this.config.timeoutMs}ms`):e}finally{clearTimeout(n)}}},Ye=class{storageDir;constructor(e){this.storageDir=e.storageDir}async delete(e){let t=S(e),n=this.getFilePath(t);try{await Se(n),v.debug(`Deleted stored credentials`,{filePath:n,serverUrl:t})}catch(e){e.code!==`ENOENT`&&v.warn(`Failed to delete stored credentials`,{error:String(e),filePath:n,serverUrl:t})}}hasRefreshToken(e){return!!e.tokens?.refresh_token}hasValidAccessToken(e){return!!e.tokens?.access_token&&!this.isAccessTokenExpired(e)}isAccessTokenExpired(e){if(!e.tokens||!e.tokensObtainedAt)return!0;let{expires_in:t}=e.tokens;if(!t)return!1;let n=new Date(e.tokensObtainedAt).getTime()+t*1e3,r=Date.now(),i=r>=n-3e4;return v.debug(`Checked access token expiration`,{expiresAt:new Date(n).toISOString(),expiresIn:t,isExpired:i,now:new Date(r).toISOString(),obtainedAt:e.tokensObtainedAt}),i}async load(e){let t=S(e),n=this.getFilePath(t);try{let e=await xe(n,`utf-8`),r=JSON.parse(e);if(S(r.serverUrl)!==t){v.warn(`Credential file server URL mismatch`,{expected:t,filePath:n,found:r.serverUrl});return}return v.debug(`Loaded stored credentials`,{clientId:r.clientInfo?.client_id,hasRefreshToken:!!r.tokens?.refresh_token,hasTokens:!!r.tokens,serverUrl:t}),r}catch(e){if(e.code===`ENOENT`){v.debug(`No stored credentials found`,{serverUrl:t});return}v.warn(`Failed to load stored credentials`,{error:String(e),filePath:n,serverUrl:t});return}}async save(e){await this.ensureStorageDir();let t=this.getFilePath(e.serverUrl),n=JSON.stringify(e,null,2);try{await Ce(t,n,{encoding:`utf-8`,mode:384}),await be(t,384),v.debug(`Saved credentials to disk`,{clientId:e.clientInfo?.client_id,filePath:t,hasTokens:!!e.tokens,serverUrl:e.serverUrl})}catch(n){throw v.error(`Failed to save credentials`,{error:String(n),filePath:t,serverUrl:e.serverUrl}),n}}async update(e,t){let n=S(e),r=await this.load(n),i=new Date().toISOString(),a=r?{...r,...t,serverUrl:n,updatedAt:i}:{createdAt:i,serverUrl:n,updatedAt:i,...t};return await this.save(a),a}async ensureStorageDir(){try{await D(this.storageDir,{mode:448,recursive:!0})}catch(e){if(e.code!==`EEXIST`)throw e}try{await g(this.storageDir)}catch(e){v.warn(`Failed to fix OAuth storage directory ownership`,{error:String(e),storageDir:this.storageDir})}}generateKey(e){return T(`sha256`).update(e).digest(`hex`).substring(0,16)}getFilePath(e){let t=this.generateKey(e);return w(this.storageDir,`${t}.json`)}};function Xe(t,n=e){return async(e,r)=>{let i=new Headers(r?.headers).has(`Authorization`),a=e=>{let t=new Headers(r?.headers);return e?t.set(`Authorization`,`Bearer ${e}`):i||t.delete(`Authorization`),{...r,headers:t}},o=t.getCurrentBearer(),s=await n(e,a(o));if(!s.ok){let t=``;try{t=(await s.clone().text()).slice(0,500)}catch{}let n={bodySnippet:t,contentType:s.headers.get(`content-type`)??void 0,eventType:`mcp_upstream_non_2xx`,method:String(r?.method??`GET`).toUpperCase(),requestAccept:new Headers(r?.headers).get(`accept`)??void 0,requestHadAuth:!!o||i,status:s.status,url:Qe(e),wwwAuthenticate:s.headers.get(`www-authenticate`)??void 0};s.status===401?v.info(`Upstream returned non-2xx (auth challenge)`,n):v.warn(`Upstream returned non-2xx`,n)}if(s.status===401&&o){v.info(`Upstream returned 401; attempting mid-session silent refresh`,{eventType:`mcp_auth_mid_session_refresh_attempt`});let r=await t.refreshIfPossible(o);r&&r!==o?(v.info(`Silent refresh succeeded mid-session; retrying request`,{eventType:`mcp_auth_mid_session_refresh_succeeded`}),s=await n(e,a(r))):v.warn(`Silent refresh produced no new bearer; passing 401 through`,{eventType:`mcp_auth_mid_session_refresh_failed`})}return s}}function Ze(e,t,n){let r=n,i=null;return{getCurrentBearer:()=>r,refreshIfPossible:n=>i||(i=(async()=>{try{let i=(await t.load(e))?.tokens?.access_token;if(i&&i!==n)return v.info(`Adopting newer access_token from disk (other process refreshed)`,{eventType:`mcp_auth_disk_bearer_adopted`,serverUrl:e}),r=i,i;let a=await _e(e,t);return a?.tokens.access_token?(r=a.tokens.access_token,r):void 0}finally{i=null}})(),i),setBearer:e=>{r=e}}}function Qe(e){try{let t=typeof e==`string`?e:String(e),n=new URL(t);return`${n.origin}${n.pathname}`}catch{return`[unparseable-url]`}}function $e(e){if(typeof e!=`object`||!e)return;let t=e.code;return typeof t==`number`?t:void 0}function Z(e){return e instanceof Error?e.message??``:typeof e==`string`?e:e&&typeof e==`object`&&`message`in e?String(e.message??``):``}const Q=[`2024-11-05`,`2025-03-26`,`2025-06-18`,`2025-11-25`],et=-32601,tt=new Set([-32004,-32022]),nt=/\binitialize\b/i,rt=/method not found[^\w]*\binitialize\b|\binitialize\b[^\w]*method not found/,it=/unsupported protocol version|protocol version is not supported/,at=e=>RegExp(`${rt.source}|${it.source}`,`i`).test(e);function ot(e,t){let n=`this gateway speaks the handshake era (${Q[0]} … ${Q[Q.length-1]})`;return t===void 0||ct(t)?`the MCP server at ${e} does not implement the \`initialize\` handshake, which means it speaks only protocol revision 2026-07-28 or later (the stateless "modern era" removed \`initialize\`), while ${n}`:`the MCP server at ${e} rejected the protocol revision this gateway offered (${Z(t)||`no detail given`}); ${n}`}function st(e){let t=Z(e),n=$e(e);return n!==void 0&&tt.has(n)||n===et&&nt.test(t)?!0:t.length>0&&at(t)}function ct(e){let t=Z(e);return $e(e)===et&&nt.test(t)?!0:new RegExp(rt.source,`i`).test(t)}const lt=/^(ctx7sk|tvly|sk|pat|gh[posu]|github_pat|glpat|xox[abprs]|AKIA|Bearer)[-_]/i,ut=e=>e.length>=12||lt.test(e),dt=e=>{try{return decodeURIComponent(e)}catch{return``}},ft=e=>{try{return encodeURIComponent(e)}catch{return``}},pt=e=>{try{return new URL(e).origin}catch{return e}},mt=e=>{let t;try{t=new URL(e)}catch{return[e]}let n=new Set([e]);t.username&&n.add(t.username),t.password&&n.add(t.password);let r=e=>{for(let t of[e,dt(e),ft(e)])t&&ut(t)&&n.add(t)};if(t.search){let e=t.search.replace(/^\?/,``);n.add(e);for(let t of e.split(`&`)){let e=t.indexOf(`=`);e>=0&&r(t.slice(e+1))}for(let e of t.searchParams.values())r(e)}if(t.pathname&&t.pathname!==`/`){n.add(`${t.pathname}${t.search}`),n.add(t.pathname);for(let e of t.pathname.split(`/`))e&&r(e)}return[...n].filter(e=>e.length>0).sort((e,t)=>t.length-e.length)},ht=(e,t)=>{if(!t)return e;let n=pt(t),r=`\0onyx-origin\0`,i=n?e.split(n).join(r):e;for(let e of mt(t)){if(e===n)continue;i=i.split(e).join(`[REDACTED]`)}return i.split(r).join(n)};async function gt(e,t={}){let n=t.code??-32603,r=t.timeoutMs??4e3,i=t.input??process.stdin,a=t.output??process.stdout;return i.isTTY?!1:new Promise(t=>{let o=!1,s=!1,c=!1,l=ke({input:i}),u=()=>{o||(o=!0,clearTimeout(d),l.removeAllListeners(`line`),l.close(),t(s))},d=setTimeout(u,r);d.unref?.(),l.on(`line`,t=>{if(c)return;let r=t.trim();if(!r)return;let i;try{i=JSON.parse(r)}catch{return}i&&i.id!==void 0&&i.id!==null&&(c=!0,s=!0,l.removeAllListeners(`line`),a.write(`${JSON.stringify({error:{code:n,message:e},id:i.id,jsonrpc:`2.0`})}\n`,()=>{u()}))}),i.once(`end`,u),i.once(`error`,u)})}function _t(e){let t=!1,n;return h.logIngest.enabled&&e().then(e=>{if(t)return;let r=e.systemSerialNumber,i=e.deviceName?.trim(),a=u(r)?`serial:${r.trim()}`:i&&i!==`unknown-device`?`hostname:${i}`:void 0;if(!a)return;let o=T(`sha256`).update(a).digest(`hex`),s={system:0,user:0},c=process.hrtime.bigint()-BigInt(Math.round(process.uptime()*1e9)),l=()=>{try{let e=process.cpuUsage(),t=process.hrtime.bigint(),n=Number(t-c)/1e3,r=e.user+e.system-s.user-s.system;if(s=e,c=t,n<=0||r<0)return;v.info(`MCP gateway resource usage`,{event:`mcp_gateway_resources`,gateway_instance_id:_,gateway_metrics:{cpu_percent:100*r/n,instances:1,memory_bytes:process.memoryUsage.rss()},gateway_version:h.appVersion,machine_id:o})}catch{}};l(),n=setInterval(l,6e4),n.unref()}).catch(()=>{}),()=>{t=!0,clearInterval(n)}}const vt=new Set([`EAI_AGAIN`,`ECONNABORTED`,`ECONNREFUSED`,`ECONNRESET`,`EHOSTDOWN`,`EHOSTUNREACH`,`ENETDOWN`,`ENETUNREACH`,`ENOTFOUND`,`EPIPE`,`EPROTO`,`ETIMEDOUT`,`UND_ERR_BODY_TIMEOUT`,`UND_ERR_CONNECT_TIMEOUT`,`UND_ERR_HEADERS_TIMEOUT`,`UND_ERR_SOCKET`]),yt=new Set([`EAI_AGAIN`,`ECONNREFUSED`,`EHOSTDOWN`,`EHOSTUNREACH`,`ENETDOWN`,`ENETUNREACH`,`ENOTFOUND`,`UND_ERR_CONNECT_TIMEOUT`]),bt=/\bfetch failed\b|socket hang up|other side closed|\bterminated\b|network (?:error|is unreachable)|econnrefused|econnreset|econnaborted|etimedout|enotfound|eai_again|enetunreach|ehostunreach|und_err|not connected|transport (?:is )?closed|connection closed/i,xt=/\bnot connected\b|transport (?:is )?closed/i,St=/session (?:not found|expired|has expired|is invalid|invalid|mismatch|does not|no longer)|no valid session|unknown session|mcp-session-id/i,Ct=/no valid session|unknown session|mcp-session-id|session not found/i;function $(e){return kt(e,new WeakSet)}function wt(e){return At(e,new WeakSet)}function Tt(e){if(e instanceof x)return!0;if(e&&typeof e==`object`){let t=e.status,n=e.code,r=e.message;if(t===401||n===401||r&&/\bunauthorized\b|\b(?:http|status)(?:\s+(?:status|code))?\s*[:=]?\s*401\b/i.test(String(r)))return!0}return!1}function Et(e){if(e instanceof y)return!1;let t=$(e);return t&&yt.has(t)||Ot(e)?!0:xt.test(Z(e))}function Dt(e){if(e instanceof t||e instanceof r||st(e)||Tt(e))return!1;let n=$(e);if(n&&vt.has(n)||Ot(e))return!0;let i=wt(e);if(i!==void 0&&i>=500)return!0;let a=Z(e);return!!(a.length>0&&bt.test(a))}function Ot(e){let t=Z(e);if(e instanceof y)return Ct.test(t);let n=wt(e);return n===404||n===400&&St.test(t)?!0:St.test(t)}function kt(e,t){if(typeof e!=`object`||!e||t.has(e))return;t.add(e);let n=e.code;if(typeof n==`string`&&/^[A-Z][A-Z0-9_]*$/.test(n))return n;for(let n of[`cause`,`response`,`data`,`body`]){let r=kt(e[n],t);if(r)return r}}function At(e,t){if(typeof e!=`object`||!e||t.has(e))return;t.add(e);let n=e instanceof y?[`status`,`statusCode`]:[`status`,`statusCode`,`code`];for(let t of n){let n=e[t];if(typeof n==`number`&&n>=100&&n<=599)return n}for(let n of[`cause`,`response`,`data`,`body`]){let r=At(e[n],t);if(r!==void 0)return r}}const jt=e=>new Promise(t=>setTimeout(t,e));async function Mt(e,t,n={}){let r=n.isRetryable??Dt,i=n.sleep??jt,a=n.now??Date.now,o=a(),s=0;for(;;)try{return await e()}catch(e){if(s+=1,s>t.maxRetries||!r(e))throw e;let c=Nt(s,t);if(t.maxElapsedMs>0){let n=t.maxElapsedMs-(a()-o);if(n<=0)throw e;c=Math.min(c,n)}n.onRetry?.({attempt:s,delayMs:c,error:e}),await i(c)}}function Nt(e,t){let n=Math.min(t.initialDelayMs*2**(e-1),t.maxDelayMs),r=n*.2*(Math.random()*2-1);return Math.max(0,Math.round(n+r))}function Pt(e){let t=e.now??Date.now,n=e.initial,r=0,i=-1/0,a=null,o=!1,s=!1,c=[],l=async()=>{v.info(`Upstream connection lost mid-session; reconnecting`,{eventType:`mcp_upstream_reconnect_attempt`}),s&&v.warn(`Reconnecting with resource subscriptions active; they will not survive the new session`,{eventType:`mcp_upstream_reconnect_subscriptions_dropped`});try{let t=await e.reconnect();if(o)return await Promise.resolve().then(()=>t.close()).catch(()=>{}),!1;for(let e of c)t.setNotificationHandler(...e);let i=n;return n=t,r+=1,Promise.resolve().then(()=>i.close()).catch(()=>{}),v.info(`Upstream reconnected`,{eventType:`mcp_upstream_reconnect_succeeded`}),!0}catch(e){return v.warn(`Upstream reconnect failed`,{errno:$(e),error:e instanceof Error?e.message:String(e),eventType:`mcp_upstream_reconnect_failed`}),!1}},u=n=>r>n?Promise.resolve(!0):a||(t()-i<e.cooldownMs?Promise.resolve(!1):(i=t(),a=l().finally(()=>{a=null}),a)),d=async(e,t)=>{let i=r;try{return await t(n)}catch(a){if(o||!(r>i)&&!Dt(a))throw a;if(await u(i)&&(e||Et(a)))return await t(n);throw a}};return{callTool:(...e)=>d(!1,t=>t.callTool(...e)),close:(...e)=>(o=!0,n.close(...e)),complete:(...e)=>d(!0,t=>t.complete(...e)),getPrompt:(...e)=>d(!0,t=>t.getPrompt(...e)),listPrompts:(...e)=>d(!0,t=>t.listPrompts(...e)),listResources:(...e)=>d(!0,t=>t.listResources(...e)),listResourceTemplates:(...e)=>d(!0,t=>t.listResourceTemplates(...e)),listTools:(...e)=>d(!0,t=>t.listTools(...e)),notification:(...e)=>d(!1,t=>t.notification(...e)),readResource:(...e)=>d(!0,t=>t.readResource(...e)),setNotificationHandler:(...e)=>(c.push(e),n.setNotificationHandler(...e)),subscribeResource:(...e)=>(s=!0,d(!0,t=>t.subscribeResource(...e))),unsubscribeResource:(...e)=>d(!0,t=>t.unsubscribeResource(...e))}}var Ft=class extends je{buffer=``;droppedLinesLogged=0;constructor(){super({objectMode:!1})}_flush(e){this.buffer.trim().startsWith(`{`)?e(null,Buffer.from(this.buffer)):(this.buffer.trim().length>0&&this.logDroppedLine(this.buffer),e(null,null))}_transform(e,t,n){this.buffer+=e.toString();let r=this.buffer.split(`
+import{proxiedFetch as e}from"./proxyFetch-BUcZ46OB.js";import{AccessControlBlockError as t,ConfigurationError as n,ProtocolEraMismatchError as r,ProxyConnectionError as i,Server as a,StdioServerTransport as o,compressClientInfo as s,getSessionData as c,initializeTrafficMirror as l,isUsableSerial as u,logRequestCounts as d,proxyServer as f,redactCliArgs as p,serveStdio as ee,startHTTPServer as m,upstreamVersionNegotiation as te}from"./upstreamNegotiation-1-8T2QG0.js";import{config as h}from"./env-CiVcATPG.js";import{chownToRealUser as g,extractTraceIdFromHeaders as ne,flushLogs as re,gatewayCorrelationId as _,logger as v}from"./logger-B8X7VmRa.js";import{Client as ie,ProtocolError as y,ReadBuffer as b,UnauthorizedError as x,createParser as ae,normalizeUrl as S,serializeMessage as oe}from"./normalizeUrl-DUUGubD4.js";import{emitKeychainOutcomeLog as se,emitProxySetupLog as ce,hideBin as le,probeOperatorProxyForChild as ue,restoreOperatorProxyEnv as de,yargs_default as fe}from"./helpers-Pzfo8khM.js";import"./providers-rG1Lwwr5.js";import{initializeOAuthProviders as pe}from"./oauthProvidersClient-D23fjfI5.js";import"./pkce-DUsFn3Kw.js";import{connectWithTransportFallback as me,discoverAuthServer as he,performOAuthFlow as ge,tryRefreshCachedToken as _e}from"./transportDetection-CMWgT7SA.js";import{homedir as ve}from"node:os";import{isAbsolute as C,join as w}from"node:path";import{createHash as T}from"node:crypto";import{accessSync as E,constants as ye}from"node:fs";import{chmod as be,mkdir as D,readFile as xe,rm as Se,writeFile as Ce}from"node:fs/promises";import{execFileSync as we,spawn as Te,spawnSync as O}from"node:child_process";import{StringDecoder as Ee}from"node:string_decoder";import{clearInterval as k,setInterval as A,setTimeout as De}from"node:timers";import Oe from"node:util";import{createInterface as ke}from"node:readline";import{PassThrough as Ae,Transform as je}from"node:stream";var j=class extends Event{constructor(e,t){super(e),this.code=t?.code??void 0,this.message=t?.message??void 0}[Symbol.for(`nodejs.util.inspect.custom`)](e,t,n){return n(Ne(this),t)}[Symbol.for(`Deno.customInspect`)](e,t){return e(Ne(this),t)}};function Me(e){let t=globalThis.DOMException;return typeof t==`function`?new t(e,`SyntaxError`):SyntaxError(e)}function M(e){return e instanceof Error?`errors`in e&&Array.isArray(e.errors)?e.errors.map(M).join(`, `):`cause`in e&&e.cause instanceof Error?`${e}: ${M(e.cause)}`:e.message:`${e}`}function Ne(e){return{type:e.type,message:e.message,code:e.code,defaultPrevented:e.defaultPrevented,cancelable:e.cancelable,timeStamp:e.timeStamp}}var Pe=e=>{throw TypeError(e)},Fe=(e,t,n)=>t.has(e)||Pe(`Cannot `+n),N=(e,t,n)=>(Fe(e,t,`read from private field`),n?n.call(e):t.get(e)),P=(e,t,n)=>t.has(e)?Pe(`Cannot add the same private member more than once`):t instanceof WeakSet?t.add(e):t.set(e,n),F=(e,t,n,r)=>(Fe(e,t,`write to private field`),t.set(e,n),n),I=(e,t,n)=>(Fe(e,t,`access private method`),n),L,R,z,Ie,B,V,H,U,W,G,K,q,J,Y,Le,Re,ze,Be,Ve,He,X,Ue,We,Ge=class extends EventTarget{constructor(e,t){super(),P(this,Y),this.CONNECTING=0,this.OPEN=1,this.CLOSED=2,P(this,L),P(this,R),P(this,z),P(this,Ie),P(this,B),P(this,V),P(this,H),P(this,U,null),P(this,W),P(this,G),P(this,K,null),P(this,q,null),P(this,J,null),P(this,Re,async e=>{var t;N(this,G).reset();let{body:n,redirected:r,status:i,headers:a}=e;if(i===204){I(this,Y,X).call(this,`Server sent HTTP 204, not reconnecting`,204),this.close();return}if(r?F(this,z,new URL(e.url)):F(this,z,void 0),i!==200){I(this,Y,X).call(this,`Non-200 status code (${i})`,i);return}if(!(a.get(`content-type`)||``).startsWith(`text/event-stream`)){I(this,Y,X).call(this,`Invalid content type, expected "text/event-stream"`,i);return}if(N(this,L)===this.CLOSED)return;F(this,L,this.OPEN);let o=new Event(`open`);if((t=N(this,J))==null||t.call(this,o),this.dispatchEvent(o),typeof n!=`object`||!n||!(`getReader`in n)){I(this,Y,X).call(this,`Invalid response body, expected a web ReadableStream`,i),this.close();return}let s=new TextDecoder,c=n.getReader(),l=!0;do{let{done:e,value:t}=await c.read();t&&N(this,G).feed(s.decode(t,{stream:!e})),e&&(l=!1,N(this,G).reset(),I(this,Y,Ue).call(this))}while(l)}),P(this,ze,e=>{F(this,W,void 0),!(e.name===`AbortError`||e.type===`aborted`)&&I(this,Y,Ue).call(this,M(e))}),P(this,Ve,e=>{typeof e.id==`string`&&F(this,U,e.id);let t=new MessageEvent(e.event||`message`,{data:e.data,origin:N(this,z)?N(this,z).origin:N(this,R).origin,lastEventId:e.id||``});N(this,q)&&(!e.event||e.event===`message`)&&N(this,q).call(this,t),this.dispatchEvent(t)}),P(this,He,e=>{F(this,V,e)}),P(this,We,()=>{F(this,H,void 0),N(this,L)===this.CONNECTING&&I(this,Y,Le).call(this)});try{if(e instanceof URL)F(this,R,e);else if(typeof e==`string`)F(this,R,new URL(e,Ke()));else throw Error(`Invalid URL`)}catch{throw Me(`An invalid or illegal string was specified`)}F(this,G,ae({onEvent:N(this,Ve),onRetry:N(this,He)})),F(this,L,this.CONNECTING),F(this,V,3e3),F(this,B,t?.fetch??globalThis.fetch),F(this,Ie,t?.withCredentials??!1),I(this,Y,Le).call(this)}get readyState(){return N(this,L)}get url(){return N(this,R).href}get withCredentials(){return N(this,Ie)}get onerror(){return N(this,K)}set onerror(e){F(this,K,e)}get onmessage(){return N(this,q)}set onmessage(e){F(this,q,e)}get onopen(){return N(this,J)}set onopen(e){F(this,J,e)}addEventListener(e,t,n){let r=t;super.addEventListener(e,r,n)}removeEventListener(e,t,n){let r=t;super.removeEventListener(e,r,n)}close(){N(this,H)&&clearTimeout(N(this,H)),N(this,L)!==this.CLOSED&&(N(this,W)&&N(this,W).abort(),F(this,L,this.CLOSED),F(this,W,void 0))}};L=new WeakMap,R=new WeakMap,z=new WeakMap,Ie=new WeakMap,B=new WeakMap,V=new WeakMap,H=new WeakMap,U=new WeakMap,W=new WeakMap,G=new WeakMap,K=new WeakMap,q=new WeakMap,J=new WeakMap,Y=new WeakSet,Le=function(){F(this,L,this.CONNECTING),F(this,W,new AbortController),N(this,B)(N(this,R),I(this,Y,Be).call(this)).then(N(this,Re)).catch(N(this,ze))},Re=new WeakMap,ze=new WeakMap,Be=function(){let e={mode:`cors`,redirect:`follow`,headers:{Accept:`text/event-stream`,...N(this,U)?{"Last-Event-ID":N(this,U)}:void 0},cache:`no-store`,signal:N(this,W)?.signal};return`window`in globalThis&&(e.credentials=this.withCredentials?`include`:`same-origin`),e},Ve=new WeakMap,He=new WeakMap,X=function(e,t){var n;N(this,L)!==this.CLOSED&&F(this,L,this.CLOSED);let r=new j(`error`,{code:t,message:e});(n=N(this,K))==null||n.call(this,r),this.dispatchEvent(r)},Ue=function(e,t){var n;if(N(this,L)===this.CLOSED)return;F(this,L,this.CONNECTING);let r=new j(`error`,{code:t,message:e});(n=N(this,K))==null||n.call(this,r),this.dispatchEvent(r),F(this,H,setTimeout(N(this,We),N(this,V)))},We=new WeakMap,Ge.CONNECTING=0,Ge.OPEN=1,Ge.CLOSED=2;function Ke(){let e=`document`in globalThis?globalThis.document:void 0;return e&&typeof e==`object`&&`baseURI`in e&&typeof e.baseURI==`string`?e.baseURI:void 0}var qe=class{client;enabled;lastBlockReason;serverName;constructor(e){this.enabled=e.enabled,this.client=e.client,this.serverName=e.serverName,v.info(`AccessControlAuthorizer initialized`,{enabled:this.enabled,hasClient:!!this.client,serverName:this.serverName})}getBlockReason(){return this.lastBlockReason?this.lastBlockReason:`MCP server${this.serverName?` '${this.serverName}'`:``} is not authorized for use in your organization and has been blocked by Onyx.`}async isAllowed(){if(!this.enabled)return!0;if(this.client)try{let e=await this.client.authorize();return e.action===`block`?(e.reason?this.lastBlockReason=e.reason:this.lastBlockReason=`MCP server${this.serverName?` '${this.serverName}'`:``} is not authorized for use in your organization and has been blocked by Onyx.`,!1):!0}catch(e){return v.error(`Access control authorization failed with unexpected error`,{error:String(e)}),!0}return v.warn(`No access control client configured, allowing by default`),!0}},Je=class{clientInfoBase64;config;constructor(e){this.config=e,this.clientInfoBase64=this.getClientInfoBase64(),v.info(`AccessControlClient initialized`,{timeoutMs:e.timeoutMs,url:e.url})}async authorize(){try{let e=await this.sendAuthorizeRequest();return v.debug(`Access control check successful`,{action:e.action}),e}catch(e){return v.warn(`Access control check failed, failing open (allowing by default)`,{error:String(e)}),{action:`allow`}}}getClientInfoBase64(){return s(this.config.sessionData)}async sendAuthorizeRequest(){let t=new AbortController,n=setTimeout(()=>t.abort(),this.config.timeoutMs);try{let n=`${this.config.url}/${this.config.apiKey}/mcp/${this.clientInfoBase64}`,r=await e(n,{headers:{...this.config.headers},method:`POST`,signal:t.signal});if(!r.ok)throw Error(`Access control service returned ${r.status}: ${r.statusText}`);let i=await r.json();if(!i.action||![`allow`,`block`].includes(i.action))throw Error(`Invalid access control response format: action="${i.action}"`);return i}catch(e){throw e instanceof Error&&e.name===`AbortError`?Error(`Access control check timed out after ${this.config.timeoutMs}ms`):e}finally{clearTimeout(n)}}},Ye=class{storageDir;constructor(e){this.storageDir=e.storageDir}async delete(e){let t=S(e),n=this.getFilePath(t);try{await Se(n),v.debug(`Deleted stored credentials`,{filePath:n,serverUrl:t})}catch(e){e.code!==`ENOENT`&&v.warn(`Failed to delete stored credentials`,{error:String(e),filePath:n,serverUrl:t})}}hasRefreshToken(e){return!!e.tokens?.refresh_token}hasValidAccessToken(e){return!!e.tokens?.access_token&&!this.isAccessTokenExpired(e)}isAccessTokenExpired(e){if(!e.tokens||!e.tokensObtainedAt)return!0;let{expires_in:t}=e.tokens;if(!t)return!1;let n=new Date(e.tokensObtainedAt).getTime()+t*1e3,r=Date.now(),i=r>=n-3e4;return v.debug(`Checked access token expiration`,{expiresAt:new Date(n).toISOString(),expiresIn:t,isExpired:i,now:new Date(r).toISOString(),obtainedAt:e.tokensObtainedAt}),i}async load(e){let t=S(e),n=this.getFilePath(t);try{let e=await xe(n,`utf-8`),r=JSON.parse(e);if(S(r.serverUrl)!==t){v.warn(`Credential file server URL mismatch`,{expected:t,filePath:n,found:r.serverUrl});return}return v.debug(`Loaded stored credentials`,{clientId:r.clientInfo?.client_id,hasRefreshToken:!!r.tokens?.refresh_token,hasTokens:!!r.tokens,serverUrl:t}),r}catch(e){if(e.code===`ENOENT`){v.debug(`No stored credentials found`,{serverUrl:t});return}v.warn(`Failed to load stored credentials`,{error:String(e),filePath:n,serverUrl:t});return}}async save(e){await this.ensureStorageDir();let t=this.getFilePath(e.serverUrl),n=JSON.stringify(e,null,2);try{await Ce(t,n,{encoding:`utf-8`,mode:384}),await be(t,384),v.debug(`Saved credentials to disk`,{clientId:e.clientInfo?.client_id,filePath:t,hasTokens:!!e.tokens,serverUrl:e.serverUrl})}catch(n){throw v.error(`Failed to save credentials`,{error:String(n),filePath:t,serverUrl:e.serverUrl}),n}}async update(e,t){let n=S(e),r=await this.load(n),i=new Date().toISOString(),a=r?{...r,...t,serverUrl:n,updatedAt:i}:{createdAt:i,serverUrl:n,updatedAt:i,...t};return await this.save(a),a}async ensureStorageDir(){try{await D(this.storageDir,{mode:448,recursive:!0})}catch(e){if(e.code!==`EEXIST`)throw e}try{await g(this.storageDir)}catch(e){v.warn(`Failed to fix OAuth storage directory ownership`,{error:String(e),storageDir:this.storageDir})}}generateKey(e){return T(`sha256`).update(e).digest(`hex`).substring(0,16)}getFilePath(e){let t=this.generateKey(e);return w(this.storageDir,`${t}.json`)}};function Xe(t,n=e){return async(e,r)=>{let i=new Headers(r?.headers).has(`Authorization`),a=e=>{let t=new Headers(r?.headers);return e?t.set(`Authorization`,`Bearer ${e}`):i||t.delete(`Authorization`),{...r,headers:t}},o=t.getCurrentBearer(),s=await n(e,a(o));if(!s.ok){let t=``;try{t=(await s.clone().text()).slice(0,500)}catch{}let n={bodySnippet:t,contentType:s.headers.get(`content-type`)??void 0,eventType:`mcp_upstream_non_2xx`,method:String(r?.method??`GET`).toUpperCase(),requestAccept:new Headers(r?.headers).get(`accept`)??void 0,requestHadAuth:!!o||i,status:s.status,url:Qe(e),wwwAuthenticate:s.headers.get(`www-authenticate`)??void 0};s.status===401?v.info(`Upstream returned non-2xx (auth challenge)`,n):v.warn(`Upstream returned non-2xx`,n)}if(s.status===401&&o){v.info(`Upstream returned 401; attempting mid-session silent refresh`,{eventType:`mcp_auth_mid_session_refresh_attempt`});let r=await t.refreshIfPossible(o);r&&r!==o?(v.info(`Silent refresh succeeded mid-session; retrying request`,{eventType:`mcp_auth_mid_session_refresh_succeeded`}),s=await n(e,a(r))):v.warn(`Silent refresh produced no new bearer; passing 401 through`,{eventType:`mcp_auth_mid_session_refresh_failed`})}return s}}function Ze(e,t,n){let r=n,i=null;return{getCurrentBearer:()=>r,refreshIfPossible:n=>i||(i=(async()=>{try{let i=(await t.load(e))?.tokens?.access_token;if(i&&i!==n)return v.info(`Adopting newer access_token from disk (other process refreshed)`,{eventType:`mcp_auth_disk_bearer_adopted`,serverUrl:e}),r=i,i;let a=await _e(e,t);return a?.tokens.access_token?(r=a.tokens.access_token,r):void 0}finally{i=null}})(),i),setBearer:e=>{r=e}}}function Qe(e){try{let t=typeof e==`string`?e:String(e),n=new URL(t);return`${n.origin}${n.pathname}`}catch{return`[unparseable-url]`}}function $e(e){if(typeof e!=`object`||!e)return;let t=e.code;return typeof t==`number`?t:void 0}function Z(e){return e instanceof Error?e.message??``:typeof e==`string`?e:e&&typeof e==`object`&&`message`in e?String(e.message??``):``}const Q=[`2024-11-05`,`2025-03-26`,`2025-06-18`,`2025-11-25`],et=-32601,tt=new Set([-32004,-32022]),nt=/\binitialize\b/i,rt=/method not found[^\w]*\binitialize\b|\binitialize\b[^\w]*method not found/,it=/unsupported protocol version|protocol version is not supported/,at=e=>RegExp(`${rt.source}|${it.source}`,`i`).test(e);function ot(e,t){let n=`this gateway speaks the handshake era (${Q[0]} … ${Q[Q.length-1]})`;return t===void 0||ct(t)?`the MCP server at ${e} does not implement the \`initialize\` handshake, which means it speaks only protocol revision 2026-07-28 or later (the stateless "modern era" removed \`initialize\`), while ${n}`:`the MCP server at ${e} rejected the protocol revision this gateway offered (${Z(t)||`no detail given`}); ${n}`}function st(e){let t=Z(e),n=$e(e);return n!==void 0&&tt.has(n)||n===et&&nt.test(t)?!0:t.length>0&&at(t)}function ct(e){let t=Z(e);return $e(e)===et&&nt.test(t)?!0:new RegExp(rt.source,`i`).test(t)}const lt=/^(ctx7sk|tvly|sk|pat|gh[posu]|github_pat|glpat|xox[abprs]|AKIA|Bearer)[-_]/i,ut=e=>e.length>=12||lt.test(e),dt=e=>{try{return decodeURIComponent(e)}catch{return``}},ft=e=>{try{return encodeURIComponent(e)}catch{return``}},pt=e=>{try{return new URL(e).origin}catch{return e}},mt=e=>{let t;try{t=new URL(e)}catch{return[e]}let n=new Set([e]);t.username&&n.add(t.username),t.password&&n.add(t.password);let r=e=>{for(let t of[e,dt(e),ft(e)])t&&ut(t)&&n.add(t)};if(t.search){let e=t.search.replace(/^\?/,``);n.add(e);for(let t of e.split(`&`)){let e=t.indexOf(`=`);e>=0&&r(t.slice(e+1))}for(let e of t.searchParams.values())r(e)}if(t.pathname&&t.pathname!==`/`){n.add(`${t.pathname}${t.search}`),n.add(t.pathname);for(let e of t.pathname.split(`/`))e&&r(e)}return[...n].filter(e=>e.length>0).sort((e,t)=>t.length-e.length)},ht=(e,t)=>{if(!t)return e;let n=pt(t),r=`\0onyx-origin\0`,i=n?e.split(n).join(r):e;for(let e of mt(t)){if(e===n)continue;i=i.split(e).join(`[REDACTED]`)}return i.split(r).join(n)};async function gt(e,t={}){let n=t.code??-32603,r=t.timeoutMs??4e3,i=t.input??process.stdin,a=t.output??process.stdout;return i.isTTY?!1:new Promise(t=>{let o=!1,s=!1,c=!1,l=ke({input:i}),u=()=>{o||(o=!0,clearTimeout(d),l.removeAllListeners(`line`),l.close(),t(s))},d=setTimeout(u,r);d.unref?.(),l.on(`line`,t=>{if(c)return;let r=t.trim();if(!r)return;let i;try{i=JSON.parse(r)}catch{return}i&&i.id!==void 0&&i.id!==null&&(c=!0,s=!0,l.removeAllListeners(`line`),a.write(`${JSON.stringify({error:{code:n,message:e},id:i.id,jsonrpc:`2.0`})}\n`,()=>{u()}))}),i.once(`end`,u),i.once(`error`,u)})}function _t(e){let t=!1,n;return h.logIngest.enabled&&e().then(e=>{if(t)return;let r=e.systemSerialNumber,i=e.deviceName?.trim(),a=u(r)?`serial:${r.trim()}`:i&&i!==`unknown-device`?`hostname:${i}`:void 0;if(!a)return;let o=T(`sha256`).update(a).digest(`hex`),s={system:0,user:0},c=process.hrtime.bigint()-BigInt(Math.round(process.uptime()*1e9)),l=()=>{try{let e=process.cpuUsage(),t=process.hrtime.bigint(),n=Number(t-c)/1e3,r=e.user+e.system-s.user-s.system;if(s=e,c=t,n<=0||r<0)return;v.info(`MCP gateway resource usage`,{event:`mcp_gateway_resources`,gateway_instance_id:_,gateway_metrics:{cpu_percent:100*r/n,instances:1,memory_bytes:process.memoryUsage.rss()},gateway_version:h.appVersion,machine_id:o})}catch{}};l(),n=setInterval(l,6e4),n.unref()}).catch(()=>{}),()=>{t=!0,clearInterval(n)}}const vt=new Set([`EAI_AGAIN`,`ECONNABORTED`,`ECONNREFUSED`,`ECONNRESET`,`EHOSTDOWN`,`EHOSTUNREACH`,`ENETDOWN`,`ENETUNREACH`,`ENOTFOUND`,`EPIPE`,`EPROTO`,`ETIMEDOUT`,`UND_ERR_BODY_TIMEOUT`,`UND_ERR_CONNECT_TIMEOUT`,`UND_ERR_HEADERS_TIMEOUT`,`UND_ERR_SOCKET`]),yt=new Set([`EAI_AGAIN`,`ECONNREFUSED`,`EHOSTDOWN`,`EHOSTUNREACH`,`ENETDOWN`,`ENETUNREACH`,`ENOTFOUND`,`UND_ERR_CONNECT_TIMEOUT`]),bt=/\bfetch failed\b|socket hang up|other side closed|\bterminated\b|network (?:error|is unreachable)|econnrefused|econnreset|econnaborted|etimedout|enotfound|eai_again|enetunreach|ehostunreach|und_err|not connected|transport (?:is )?closed|connection closed/i,xt=/\bnot connected\b|transport (?:is )?closed/i,St=/session (?:not found|expired|has expired|is invalid|invalid|mismatch|does not|no longer)|no valid session|unknown session|mcp-session-id/i,Ct=/no valid session|unknown session|mcp-session-id|session not found/i;function $(e){return kt(e,new WeakSet)}function wt(e){return At(e,new WeakSet)}function Tt(e){if(e instanceof x)return!0;if(e&&typeof e==`object`){let t=e.status,n=e.code,r=e.message;if(t===401||n===401||r&&/\bunauthorized\b|\b(?:http|status)(?:\s+(?:status|code))?\s*[:=]?\s*401\b/i.test(String(r)))return!0}return!1}function Et(e){if(e instanceof y)return!1;let t=$(e);return t&&yt.has(t)||Ot(e)?!0:xt.test(Z(e))}function Dt(e){if(e instanceof t||e instanceof r||st(e)||Tt(e))return!1;let n=$(e);if(n&&vt.has(n)||Ot(e))return!0;let i=wt(e);if(i!==void 0&&i>=500)return!0;let a=Z(e);return!!(a.length>0&&bt.test(a))}function Ot(e){let t=Z(e);if(e instanceof y)return Ct.test(t);let n=wt(e);return n===404||n===400&&St.test(t)?!0:St.test(t)}function kt(e,t){if(typeof e!=`object`||!e||t.has(e))return;t.add(e);let n=e.code;if(typeof n==`string`&&/^[A-Z][A-Z0-9_]*$/.test(n))return n;for(let n of[`cause`,`response`,`data`,`body`]){let r=kt(e[n],t);if(r)return r}}function At(e,t){if(typeof e!=`object`||!e||t.has(e))return;t.add(e);let n=e instanceof y?[`status`,`statusCode`]:[`status`,`statusCode`,`code`];for(let t of n){let n=e[t];if(typeof n==`number`&&n>=100&&n<=599)return n}for(let n of[`cause`,`response`,`data`,`body`]){let r=At(e[n],t);if(r!==void 0)return r}}const jt=e=>new Promise(t=>setTimeout(t,e));async function Mt(e,t,n={}){let r=n.isRetryable??Dt,i=n.sleep??jt,a=n.now??Date.now,o=a(),s=0;for(;;)try{return await e()}catch(e){if(s+=1,s>t.maxRetries||!r(e))throw e;let c=Nt(s,t);if(t.maxElapsedMs>0){let n=t.maxElapsedMs-(a()-o);if(n<=0)throw e;c=Math.min(c,n)}n.onRetry?.({attempt:s,delayMs:c,error:e}),await i(c)}}function Nt(e,t){let n=Math.min(t.initialDelayMs*2**(e-1),t.maxDelayMs),r=n*.2*(Math.random()*2-1);return Math.max(0,Math.round(n+r))}function Pt(e){let t=e.now??Date.now,n=e.initial,r=0,i=-1/0,a=null,o=!1,s=!1,c=[],l=async()=>{v.info(`Upstream connection lost mid-session; reconnecting`,{eventType:`mcp_upstream_reconnect_attempt`}),s&&v.warn(`Reconnecting with resource subscriptions active; they will not survive the new session`,{eventType:`mcp_upstream_reconnect_subscriptions_dropped`});try{let t=await e.reconnect();if(o)return await Promise.resolve().then(()=>t.close()).catch(()=>{}),!1;for(let e of c)t.setNotificationHandler(...e);let i=n;return n=t,r+=1,Promise.resolve().then(()=>i.close()).catch(()=>{}),v.info(`Upstream reconnected`,{eventType:`mcp_upstream_reconnect_succeeded`}),!0}catch(e){return v.warn(`Upstream reconnect failed`,{errno:$(e),error:e instanceof Error?e.message:String(e),eventType:`mcp_upstream_reconnect_failed`}),!1}},u=n=>r>n?Promise.resolve(!0):a||(t()-i<e.cooldownMs?Promise.resolve(!1):(i=t(),a=l().finally(()=>{a=null}),a)),d=async(e,t)=>{let i=r;try{return await t(n)}catch(a){if(o||!(r>i)&&!Dt(a))throw a;if(await u(i)&&(e||Et(a)))return await t(n);throw a}};return{callTool:(...e)=>d(!1,t=>t.callTool(...e)),close:(...e)=>(o=!0,n.close(...e)),complete:(...e)=>d(!0,t=>t.complete(...e)),getPrompt:(...e)=>d(!0,t=>t.getPrompt(...e)),listPrompts:(...e)=>d(!0,t=>t.listPrompts(...e)),listResources:(...e)=>d(!0,t=>t.listResources(...e)),listResourceTemplates:(...e)=>d(!0,t=>t.listResourceTemplates(...e)),listTools:(...e)=>d(!0,t=>t.listTools(...e)),notification:(...e)=>d(!1,t=>t.notification(...e)),readResource:(...e)=>d(!0,t=>t.readResource(...e)),setNotificationHandler:(...e)=>(c.push(e),n.setNotificationHandler(...e)),subscribeResource:(...e)=>(s=!0,d(!0,t=>t.subscribeResource(...e))),unsubscribeResource:(...e)=>d(!0,t=>t.unsubscribeResource(...e))}}var Ft=class extends je{buffer=``;droppedLinesLogged=0;constructor(){super({objectMode:!1})}_flush(e){this.buffer.trim().startsWith(`{`)?e(null,Buffer.from(this.buffer)):(this.buffer.trim().length>0&&this.logDroppedLine(this.buffer),e(null,null))}_transform(e,t,n){this.buffer+=e.toString();let r=this.buffer.split(`
 `);this.buffer=r.pop()||``;let i=[];for(let e of r)e.trim().startsWith(`{`)?i.push(e):e.trim().length>0&&this.logDroppedLine(e);if(i.length>0){let e=`${i.join(`
 `)}\n`;n(null,Buffer.from(e))}else n(null,null)}logDroppedLine(e){if(!(this.droppedLinesLogged>50)){if(this.droppedLinesLogged===50){this.droppedLinesLogged+=1,v.info(`Suppressing further non-JSON stdout lines`,{eventType:`mcp_server_stdout_dropped_suppressed`,loggedSoFar:50});return}this.droppedLinesLogged+=1,v.info(`MCP server stdout (non-JSON, dropped)`,{eventType:`mcp_server_stdout_dropped`,line:e.length>1024?`${e.slice(0,1024)}…`:e})}}},It=class{onclose;onerror;onmessage;get pid(){return this._process?.pid??null}get spawnedServerPid(){return this._spawnedPid}get spawnedServerStartedAt(){return this._spawnedAt}get stderr(){return this._stderrStream?this._stderrStream:this._process?.stderr??null}_abortController=new AbortController;_process;_readBuffer=new b;_serverParams;_spawnedAt;_spawnedPid;_stderrStream=null;onEvent;constructor(e){this._serverParams=e,(e.stderr===`pipe`||e.stderr===`overlapped`)&&(this._stderrStream=new Ae),this.onEvent=e.onEvent}async close(){if(this.onEvent?.({type:`close`}),this._process?.pid)try{if(process.platform===`win32`){let e=O(`taskkill`,[`/PID`,String(this._process.pid),`/T`,`/F`],{stdio:`ignore`});if(e.error)throw e.error;if(e.status!==0)throw Error(`taskkill exited with status ${e.status}`)}else process.kill(-this._process.pid,`SIGTERM`)}catch(e){v.debug(`Process tree cleanup failed (process may already be dead)`,{error:e.message,pid:this._process.pid})}this._abortController.abort(),this._process=void 0,this._readBuffer.clear()}send(e){return new Promise(t=>{if(!this._process?.stdin)throw Error(`Not connected`);let n=oe(e);this._process.stdin.write(n)?t():this._process.stdin.once(`drain`,t)})}async start(){if(this._process)throw Error(`StdioClientTransport already started! If using Client class, note that connect() calls start() automatically.`);return new Promise((e,t)=>{let n=this._serverParams.shell??!1,r=n&&process.platform===`win32`,i=r?Lt(this._serverParams.command):this._serverParams.command,a=r?(this._serverParams.args??[]).map(Lt):this._serverParams.args??[];this._process=Te(i,a,{cwd:this._serverParams.cwd,detached:process.platform!==`win32`,env:this._serverParams.env,shell:n,signal:this._abortController.signal,stdio:[`pipe`,`pipe`,this._serverParams.stderr??`inherit`]}),this._process.on(`error`,e=>{if(e.name===`AbortError`){this.onclose?.();return}v.error(`Process spawn error`,{args:this._serverParams.args?p(this._serverParams.args):void 0,command:this._serverParams.command,cwd:this._serverParams.cwd,error:e.message,errorCode:e.code,errorErrno:e.errno,errorSyscall:e.syscall,operation:`spawn`,shell:this._serverParams.shell,transportType:`stdio`}),t(e),this.onerror?.(e)});let o,s;this._process.on(`spawn`,()=>{o=Date.now(),s=this._process?.pid,this._spawnedAt=o,this._spawnedPid=s,v.info(`MCP server process spawned`,{argCount:this._serverParams.args?.length,command:this._serverParams.command,eventType:`mcp_server_process_spawned`,pid:s}),e()}),this._process.on(`close`,(e,t)=>{let n=o===void 0?void 0:Date.now()-o;v[e===0&&t===null?`info`:`warn`](`MCP server process closed`,{argCount:this._serverParams.args?.length,code:e,command:this._serverParams.command,eventType:`mcp_server_process_closed`,pid:s,signal:t,uptimeMs:n}),this.onEvent?.({type:`close`}),this._process=void 0,this.onclose?.()}),this._process.stdin?.on(`error`,e=>{v.error(`Stdin error`,{command:this._serverParams.command,error:e.message,operation:`write`,pid:this._process?.pid,transportType:`stdio`}),this.onEvent?.({error:e,type:`error`}),this.onerror?.(e)});let c=new Ft;this._process.stdout?.pipe(c),c.on(`data`,e=>{this.onEvent?.({chunk:e.toString(),type:`data`}),this._readBuffer.append(e),this.processReadBuffer()}),c.on(`error`,e=>{v.error(`JSON filter error`,{command:this._serverParams.command,error:e.message,operation:`parse`,pid:this._process?.pid,transportType:`stdio`}),this.onEvent?.({error:e,type:`error`}),this.onerror?.(e)}),this._stderrStream&&this._process.stderr&&this._process.stderr.pipe(this._stderrStream)})}processReadBuffer(){for(;;)try{let e=this._readBuffer.readMessage();if(e===null)break;this.onEvent?.({message:e,type:`message`}),this.onmessage?.(e)}catch(e){let t=`unknown`;try{let e=this._readBuffer.readMessage();e&&(t=typeof e)}catch{}v.error(`Message processing error`,{command:this._serverParams.command,error:e.message,messageType:t,operation:`process`,pid:this._process?.pid,transportType:`stdio`}),this.onEvent?.({error:e,type:`error`}),this.onerror?.(e)}}};function Lt(e){return e.length===0||!/[\s"&|<>^()]/.test(e)?e:`"${e.replace(/"/g,`""`).replace(/(\\+)$/,`$1$1`)}"`}const Rt=[`$`,"`",`;`,`|`,`&`,`>`,`<`,`(`,`)`,`{`,`}`,`'`,`"`,`\\`,`!`,`*`,`?`,`~`,`#`],zt=`[a-z0-9]+`,Bt=`${zt}(?:(?:[._]|__|-+)${zt})*`,Vt=`(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])`,Ht=`(?:${`(?:${`${Vt}(?:\\.${Vt})*`}|\\[[a-fA-F0-9:]+\\])(?::[0-9]+)?`}/)?${Bt}(?:/${Bt})*`,Ut=RegExp(`^${Ht}(?::[A-Za-z0-9_][A-Za-z0-9_.-]{0,127})?(?:@[a-z0-9]+(?:[.+_-][a-z0-9]+)*:[0-9a-fA-F]{32,})?$`);function Wt(e){return typeof e!=`string`||e.trim()===``?{reason:`empty image reference`,valid:!1}:e.length>512?{reason:`image reference longer than 512 characters`,valid:!1}:Ut.test(e)?{valid:!0}:{reason:Gt(e),valid:!1}}function Gt(e){if(/[\u0000-\u001f\u007f]/.test(e))return`contains a control character`;if(/\s/.test(e))return`contains whitespace`;let t=Rt.find(t=>e.includes(t));return t?`contains the shell metacharacter ${t}`:e.startsWith(`-`)?`starts with '-' and would be parsed as a runtime option`:`does not match the OCI image-reference grammar`}function Kt(e){let t=e.toLowerCase().split(/[/\\]/).pop()||``;return t===`docker`||t===`docker.exe`?`docker`:t===`podman`||t===`podman.exe`?`podman`:t===`nerdctl`||t===`nerdctl.exe`?`nerdctl`:t===`finch`||t===`finch.exe`?`finch`:`unknown`}function qt(e){let t=e.indexOf(`run`);if(t===-1)return;let n=e.slice(t+1),r=new Set(`--add-host.--annotation.--arch.--attach.--blkio-weight.--blkio-weight-device.--cap-add.--cap-drop.--cgroup-parent.--cgroupns.--cidfile.--cosign-key.--cpu-period.--cpu-quota.--cpu-rt-period.--cpu-rt-runtime.--cpu-shares.--cpus.--cpuset-cpus.--cpuset-mems.--decryption-key.--device.--device-cgroup-rule.--device-read-bps.--device-read-iops.--device-write-bps.--device-write-iops.--dns.--dns-option.--dns-search.--domainname.--entrypoint.--env.--env-file.--env-host.--expose.--gidmap.--gpus.--group-add.--health-cmd.--health-interval.--health-retries.--health-start-period.--health-timeout.--hostname.--image-volume.--ip.--ip6.--ipc.--isolation.--kernel-memory.--label.--label-file.--link.--link-local-ip.--log-driver.--log-opt.--mac-address.--memory.--memory-reservation.--memory-swap.--memory-swappiness.--mount.--name.--network.--network-alias.--oom-kill-disable.--oom-score-adj.--os.--pid.--pidfile.--pids-limit.--platform.--pod.--privileged.--publish.--publish-all.--pull.--requires.--restart.--rootfs.--runtime.--secret.--security-opt.--shm-size.--stop-signal.--stop-timeout.--storage-opt.--subgidname.--subuidname.--sysctl.--systemd.--timeout.--tmpfs.--tz.--uidmap.--ulimit.--user.--userns.--uts.--variant.--volume.--volume-driver.--volumes-from.--workdir.-a.-c.-e.-h.-l.-m.-p.-P.-u.-v.-w`.split(`.`)),i=0;for(;i<n.length;){let e=n[i];if(e.startsWith(`-`)){if(e.includes(`=`)){i++;continue}if(r.has(e)){i+=2;continue}i++;continue}return e}}function Jt(e,t){let n=Kt(e);if(n===`unknown`)return{imageName:``,isContainerMCP:!1,runtime:`unknown`};if(!t||!t.includes(`run`))return{imageName:``,isContainerMCP:!1,runtime:n};let r=qt(t);return r?{imageName:r,isContainerMCP:!0,runtime:n}:(v.debug(`Container command detected but could not extract image name`,{args:t,command:e,runtime:n}),{imageName:``,isContainerMCP:!0,runtime:n})}function Yt(e,t){let n=t===`unknown`?`docker`:t,r=Wt(e);if(!r.valid)return v.warn(`Rejected container image reference; skipping digest lookup`,{eventType:`mcp_container_image_ref_rejected`,imageName:e,reason:r.reason,runtime:n}),[];let i;try{i=we(n,[`image`,`inspect`,`--format`,`{{json .RepoDigests}}`,e],{encoding:`utf-8`,stdio:[`pipe`,`pipe`,`pipe`],timeout:5e3})}catch(t){return v.warn(`Container image digest lookup failed`,{error:t instanceof Error?t.message:String(t),eventType:`mcp_container_image_digest_lookup_failed`,imageName:e,runtime:n}),[]}let a=i.trim(),o;try{o=JSON.parse(a)}catch{return v.warn(`Could not parse RepoDigests JSON`,{eventType:`mcp_container_image_digest_lookup_failed`,imageName:e,result:a,runtime:n}),[]}if(!Array.isArray(o))return v.warn(`RepoDigests was not a JSON array`,{eventType:`mcp_container_image_digest_lookup_failed`,imageName:e,result:a,runtime:n}),[];let s=o,c=[];for(let e of s){if(typeof e!=`string`)continue;let t=e.match(/sha256:[a-f0-9]{64}/i);t&&c.push(t[0])}return c.length>0?(v.info(`Container image digests resolved`,{digests:c,eventType:`mcp_container_image_digests_resolved`,imageName:e,runtime:n}),c):(v.info(`No container image digests available (image may be locally built)`,{eventType:`mcp_container_image_digests_empty`,imageName:e,runtime:n}),[])}const Xt=/^[0-9a-f]{64}$/,Zt=new Set([`java`,`javaw`]),Qt=new Set([`--class-path`,`--classpath`,`-classpath`,`-cp`]),$t=(e,t)=>{let n=(e.trim().split(/[/\\]/).pop()??``).toLowerCase().replace(/\.(?:exe|cmd|bat)$/,``);if(!Zt.has(n))return!1;let r=t.findIndex(e=>Qt.has(e.toLowerCase()));return r===-1||r+1>=t.length?!1:!t.slice(0,r).some(e=>e.toLowerCase()===`-jar`)},en=()=>{let e=h.scanner.binPath?.trim(),t=process.platform===`win32`?`onyx-scanner.exe`:`onyx-scanner`,n=ve();return[...e?[e]:[],w(n,`.claude`,`onyx`,t),w(n,`.cursor`,`onyx`,t),w(n,`.codex`,`onyx`,t),w(n,`.copilot`,`onyx`,t),w(n,`.config`,`opencode`,`plugin`,`onyx`,t),w(n,`.openclaw`,`extensions`,`onyx-guard`,`onyx`,t)]};let tn;const nn=()=>{if(tn!==void 0)return tn??void 0;for(let e of en()){if(!C(e)){v.warn(`Skipping a non-absolute onyx-scanner path; it must not be resolved through PATH`,{candidate:e,eventType:`mcp_file_fingerprint_scanner_path_not_absolute`});continue}try{return E(e,ye.X_OK),tn=e,e}catch{}}tn=null},rn=(e,t)=>{if(!e)return;if($t(e,t)){v.debug(`Class-path JVM launch: version comes from the command, sending no file hash`,{eventType:`mcp_file_fingerprint_classpath_skipped`});return}let n=nn();if(!n){v.debug(`No onyx-scanner found; sending no file content hash`,{eventType:`mcp_file_fingerprint_scanner_missing`});return}let r;try{r=we(n,[`mcp-fingerprint`],{encoding:`utf-8`,input:JSON.stringify({args:t,command:e}),stdio:[`pipe`,`pipe`,`pipe`],timeout:h.scanner.fingerprintTimeoutMs})}catch(e){v.warn(`File content fingerprint lookup failed; sending no hash`,{error:e instanceof Error?e.message:String(e),eventType:`mcp_file_fingerprint_failed`,scanner:n});return}let i;try{i=JSON.parse(r)}catch{v.warn(`File content fingerprint output was not JSON; sending no hash`,{eventType:`mcp_file_fingerprint_unparseable`,scanner:n});return}let a=i.file_content_hash?.trim().toLowerCase();if(!a){v.debug(`No file content hash for this server`,{eventType:`mcp_file_fingerprint_absent`,source:i.source});return}if(!Xt.test(a)){v.warn(`File content fingerprint was not a sha256; sending no hash`,{eventType:`mcp_file_fingerprint_malformed`,length:a.length});return}return v.debug(`Resolved file content hash`,{eventType:`mcp_file_fingerprint_resolved`,fileContentHash:a,source:i.source}),a};let an;const on=()=>({pid:an?.spawnedServerPid,startedAtMs:an?.spawnedServerStartedAt});Oe.inspect.defaultOptions.depth=8,`EventSource`in global||(global.EventSource=Ge);const sn=async e=>{v.error(e.logMessage,e.meta),await new Promise(t=>{process.stderr.write(`${e.stderrLine}\n`,()=>t())}),e.respondToClient&&await gt(e.reason);let t=A(()=>{},50);try{await re(2e3)}catch{}finally{k(t)}process.exit(e.exitCode)},cn=e=>{let t=e.header?`HTTP header "${e.header}"`:`the bearer token`,n=`Onyx MCP gateway: required auth env var "${e.envVar}" for ${t} is empty or unset. Export the source value your agent config references (e.g. the {env:...} / \${...} token) in the launch environment.`;return sn({exitCode:78,logMessage:e.logMessage,meta:{envVar:e.envVar,eventType:e.eventType,...e.header?{header:e.header}:{}},reason:n,respondToClient:e.respondToClient,stderrLine:`[mcp-gateway] FATAL: ${n}`})},ln=e=>{let t=Z(e.error),n=pt(e.subject),i=t=>ht(t,e.url),a=i(t),o=Object.fromEntries(Object.entries(e.extra??{}).map(([e,t])=>[e,typeof t==`string`?i(pt(t)):t]));throw v.error(e.logMessage,{eventType:`mcp_protocol_era_mismatch`,originalError:a,supportedEra:`${Q[0]}..${Q[Q.length-1]}`,...o}),new r(i(ot(n,e.error)),e.url,{originalError:a,...o})},un=async()=>{ce(v),se(v);let e=await fe(le(process.argv)).scriptName(`mcp-gateway`).command(`stdio [command] [args...]`,`Run a local command with stdio transport (default)`,e=>e.positional(`command`,{describe:`The command to run`,type:`string`}).positional(`args`,{array:!0,describe:`The arguments to pass to the command`,type:`string`})).command(`remote`,`Connect to a remote MCP server`,e=>e.options({"bearer-token-env":{describe:`Environment variable name containing a bearer token for remote authentication`,type:`string`},"env-http-headers":{describe:`HTTP headers resolved from environment variables (format: HeaderName:ENV_VAR_NAME)`,string:!0,type:`array`},headers:{deprecated:`Use --env-http-headers with env var names instead. --headers exposes values in process listings.`,describe:`Legacy: headers with literal values (format: key:value)`,string:!0,type:`array`},"remote-transport":{choices:[`sse`,`stream`],deprecated:`Transport is now auto-detected per MCP spec. This option is ignored.`,describe:`(Deprecated) The transport type - now auto-detected`,type:`string`},url:{demandOption:!0,describe:`The URL of the remote MCP server`,type:`string`}})).command(`$0 [command] [args...]`,`Run a command with MCP arguments (backward compatible)`,e=>e.positional(`command`,{describe:`The command to run`,type:`string`}).positional(`args`,{array:!0,describe:`The arguments to pass to the command`,type:`string`})).env(`MCP_GATEWAY`).parserConfiguration({"populate--":!0,"unknown-options-as-args":!0}).options({"access-control-url":{describe:`URL of the access control service (overrides MCP_GATEWAY_ACCESS_CONTROL_URL)`,type:`string`},debug:{default:!1,describe:`Enable debug logging`,type:`boolean`},env:{describe:`Environment variables to pass to the command (format: KEY=value)`,string:!0,type:`array`},gracefulShutdownTimeout:{default:5e3,describe:`The timeout (in milliseconds) for graceful shutdown`,type:`number`},"oauth-providers-url":{describe:`URL of the OAuth providers config endpoint (overrides MCP_GATEWAY_OAUTH_PROVIDERS_URL)`,type:`string`},port:{describe:`Run as HTTP server on the specified port instead of stdio`,type:`number`},"scanner-api-key":{describe:`API key for scanner authentication (overrides MCP_GATEWAY_SCANNER_API_KEY)`,type:`string`},"scanner-fail-open":{describe:`Allow requests when scanner is unavailable (overrides MCP_GATEWAY_SCANNER_FAIL_OPEN)`,type:`boolean`},"scanner-timeout-ms":{describe:`Scanner request timeout in milliseconds (overrides MCP_GATEWAY_SCANNER_TIMEOUT_MS)`,type:`number`},"scanner-url":{describe:`URL of the scanner/evaluator service (overrides MCP_GATEWAY_SCANNER_URL)`,type:`string`},shell:{default:process.platform===`win32`,describe:`Spawn the server via the user's shell (defaults to true on Windows)`,type:`boolean`}}).help().parseAsync();await pe(h.oauthProviders);let s,u=!1,g,_,y,b,x={},ae={};if(e.env)for(let t of e.env){let[e,...n]=t.split(`=`);e&&n.length>0&&(ae[e.trim()]=n.join(`=`).trim())}let oe=e=>{if(e.includes("${")){let t,n=e.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g,(e,n)=>process.env[n]||(t=n,``));return t?{missingVar:t,resolved:``}:{resolved:n}}let t=process.env[e];return t?{resolved:t}:{missingVar:e,resolved:``}};if(e.headers)for(let t of e.headers){let[e,...n]=t.split(`:`);e&&n.length>0&&(x[e.trim()]=n.join(`:`).trim())}if(e.bearerTokenEnv){let t=e.bearerTokenEnv,{missingVar:n,resolved:r}=oe(t);n&&await cn({envVar:n,eventType:`mcp_auth_bearer_env_missing`,logMessage:`Bearer token env var specified but not set`,respondToClient:!e.port}),x.Authorization=`Bearer ${r}`,v.info(`Bearer token loaded from environment variable`,{authType:`bearer_token`,envVar:t,eventType:`mcp_auth_bearer_env`,remoteUrl:e.url})}if(e.envHttpHeaders)for(let t of e.envHttpHeaders){let[n,...r]=t.split(`:`),i=r.join(`:`).trim();if(n&&i){let t=n.trim(),{missingVar:r,resolved:a}=oe(i);r&&await cn({envVar:r,eventType:`mcp_auth_env_header_missing`,header:t,logMessage:`Env var for HTTP header not set`,respondToClient:!e.port}),x[t]=a,v.info(`HTTP header loaded from environment`,{eventType:`mcp_auth_env_header`,header:t,remoteUrl:e.url})}}let _e=ne(x);if(_e&&v.setTraceId(_e),x.Authorization){let t=x.Authorization.startsWith(`Bearer `)?`bearer_token`:x.Authorization.startsWith(`Basic `)?`basic`:`api_key`;v.info(`Authorization header provided`,{authType:t,eventType:`mcp_auth_header_provided`,remoteUrl:e.url})}let ve={...h.scanner.headers};v.debug(`Initializing traffic scanner`,{failOpen:h.scanner.failOpen,hasApiKey:!!h.scanner.apiKey,scannerEnabled:h.scanner.enabled,scannerUrl:h.scanner.url,timeoutMs:h.scanner.timeoutMs});let C=async a=>{let o=!e.port&&!u,c=y?(()=>{try{return new URL(y).origin}catch{return`[invalid remote URL]`}})():void 0,l=e=>y&&c?e.split(y).join(c):e;if(a instanceof t){let e=a.message||`This MCP server has been blocked by your organization's Onyx access-control policy. Contact your administrator if you believe this is an error.`,t=[``,`❌ ACCESS DENIED`,`━`.repeat(60),e,`Please contact your administrator if you believe this is an error.`,``].join(`
 `);return sn({exitCode:1,logMessage:`MCP server blocked by access control policy`,meta:{error:a.message,eventType:`mcp_access_control_block`,reason:a.reason},reason:e,respondToClient:o,stderrLine:t})}let d=l(a instanceof n?`Onyx MCP gateway: configuration error — ${a.message}`:a instanceof r?`Onyx MCP gateway: unsupported MCP protocol era — ${a.message}`:a instanceof i?`Onyx MCP gateway: cannot reach the upstream MCP server${c?` at ${c}`:``} — ${a.message}`:`Onyx MCP gateway: failed to start — ${a instanceof Error?a.message:String(a)}`);return sn({exitCode:1,logMessage:`MCP server failed to start`,meta:{args:_?p(_):void 0,command:g,errno:$(a),error:l(`Could not start the proxy: ${a}`),eventType:`mcp_server_start_failed`,proxyType:s,remoteUrl:c,transport:b},reason:d,respondToClient:o,stderrLine:`[mcp-gateway] FATAL: ${d}`})};if(e._[0]===`remote`){s=`remote`,e[`remote-transport`]&&v.warn(`The --remote-transport option is deprecated and will be ignored. Transport is now auto-detected per MCP spec (Streamable HTTP with SSE fallback).`,{providedTransport:e[`remote-transport`]});let t=e.url;t||await C(new n(`Remote URL is required for remote proxy type`,`url`)),y=S(t),y!==t&&v.debug(`Normalized remote URL`,{normalizedUrl:y,originalUrl:t})}else{if(s=`stdio`,e[`--`]&&e[`--`].length>0){let t=e[`--`];g=t[0],_=t.slice(1).map(String)}else g=e.command,_=(e.args||[]).map(String);g||await C(new n(`No command specified for stdio proxy`,`command`))}let w;s===`stdio`&&g&&(w=Jt(g,_),w.isContainerMCP&&v.info(`Container MCP detected`,{imageName:w.imageName,runtime:w.runtime}));let T,E,ye=async()=>{E??=c(),v.setSessionData({...await E,proxyType:s})},be=async()=>{T!==void 0||!w?.isContainerMCP||!w.imageName||(await ye(),T=Yt(w.imageName,w.runtime))},D,xe=!1,Se=()=>xe||s!==`stdio`||!g?D:(xe=!0,D=rn(g,_??[]),D),Ce=()=>s===`stdio`?{args:_,command:g,dockerImageDigests:T,dockerImageName:w?.imageName,fileContentHash:Se(),proxyType:s}:{proxyType:s,url:y},we;if(h.accessControl.url&&h.scanner.apiKey){let e=Ce();await ye();let t=await E,n=e.proxyType===`stdio`?{...t,fileContentHash:e.fileContentHash,proxyType:`stdio`,stdioCliArgs:{...e,args:p(e.args)}}:{...t,proxyType:`remote`,remoteCliArgs:e};we=new Je({apiKey:h.scanner.apiKey,headers:h.accessControl.headers,sessionData:n,timeoutMs:h.accessControl.timeoutMs,url:h.accessControl.url})}let Te=s===`remote`?y:g,O=new qe({client:we,enabled:h.accessControl.enabled,serverName:Te}),k=new Ye({storageDir:h.oauthDir}),A=()=>new ie({name:`mcp-gateway`,version:h.appVersion},{capabilities:{},versionNegotiation:te()}),Oe=async(n,{allowInteractiveAuth:a=!0}={})=>{if(!await O.isAllowed()){let e=O.getBlockReason();throw v.warn(`MCP server blocked by access control`,{proxyType:s,reason:e}),new t(e,`policy_block`)}if(v.info(`MCP server allowed by access control`),await be(),s===`stdio`){let t=await ue(process.env);if(t.proxyHost!==void 0){let e=t.reachability===`unreachable`;v.info(e?`Operator proxy is unreachable; withholding it from the wrapped server so it goes direct instead of hanging`:`Handing the operator proxy to the wrapped server`,{event:`proxy_child_restore`,op:`spawn`,outcome:e?`withheld`:`restored`,platform:process.platform,proxy_host:t.proxyHost,reachability:t.reachability})}let r={...de(process.env,t.reachability),...ae},a=new It({args:_,command:g,env:r,onEvent:t=>{e.debug&&v.debug(`Transport event`,{event:t})},shell:e.shell,stderr:`pipe`});an=a;let o=1024;o*8;let c=e=>e.length>o?`${e.slice(0,o)}…`:e,l=``,u=[],d=e=>{let t=c(e);u.push(t),u.length>100&&u.shift(),v.info(`MCP server stderr`,{command:g,eventType:`mcp_server_stderr`,line:t})},f=()=>{l.length!==0&&(d(l),l=``)},p=new Ee(`utf8`),ee=!1,m=()=>{if(ee)return;ee=!0;let e=p.end();e&&(l+=e),f()};a.stderr?.on(`data`,e=>{process.stderr.write(e),l+=p.write(e);let t=l.split(`
 `);l=t.pop()??``;for(let e of t){if(e.length===0)continue;d(e)}l.length>8192&&f()}),a.stderr?.once(`end`,m),a.stderr?.once(`close`,m);try{return await n.connect(a),n}catch(e){throw m(),v.warn(`Failed original server access`,{command:g,errno:$(e),error:e instanceof Error?e.message:String(e),eventType:`mcp_server_access_failed`,proxyType:s,stderrTail:u.slice(-20)}),await a.close().catch(()=>{}),st(e)&&ln({error:e,extra:{command:g},logMessage:`Spawned MCP server speaks a different protocol era; cannot negotiate a session`,subject:g??`the spawned MCP server`}),new i(`Failed to connect to stdio process: ${e}`,void 0,`stdio`,{argCount:_?.length,command:g},e)}}else if(s===`remote`){let e=y,t=()=>{let e={...x};return Object.keys(e).length>0?{headers:e}:void 0},n=async()=>{let t=await ge(e,{credentialStore:k});return v.info(`Authentication performed`,{authType:`oauth`,eventType:`mcp_auth_performed`,fromCache:t.fromCache,remoteUrl:e}),t.tokens.access_token},o;try{let r=await k.load(e),i=r&&k.hasValidAccessToken(r)?r.tokens?.access_token:void 0,s=Ze(e,k,i),c=Xe(s),l=!1;try{let n=await me(A,e,t(),c);o=n.client,b=n.transportType,v.info(`Connected to remote server`,{hasAuth:!!i,transport:b})}catch(r){if(st(r)&&ln({error:r,extra:{remoteUrl:e},logMessage:`Upstream speaks a different MCP protocol era; cannot negotiate a session`,subject:e,url:e}),Tt(r)){if(l)throw r;if(s.getCurrentBearer()??i?(v.info(`Cached + refresh both rejected; falling back to full OAuth flow`),await k.update(e,{tokensObtainedAt:void 0})):v.info(`Server requires OAuth, starting authentication flow...`),!a)throw v.info(`Skipping interactive OAuth on reconnect; surfacing 401`,{eventType:`mcp_reconnect_skip_interactive_auth`}),r;let u=await n();s.setBearer(u),l=!0;let d=await me(A,e,t(),c);o=d.client,b=d.transportType,v.info(`Connected to remote server with OAuth`,{transport:b})}else if(!l&&!(s.getCurrentBearer()??i)&&!new Headers(x).has(`Authorization`)){let i=!1,u;try{let{authMetadata:t}=await he(new URL(e),{logger:v});i=!!t}catch(e){u=e instanceof Error?e.message:String(e)}if(!i)throw v.warn(`Non-401 failure and no discoverable OAuth metadata; propagating original error`,{discoveryError:u,eventType:`mcp_non401_no_oauth_discovery`,originalError:r instanceof Error?r.message:String(r),remoteUrl:e}),r;if(v.info(`Cold-start non-401 but server advertises OAuth; attempting OAuth flow`,{originalError:r instanceof Error?r.message:String(r)}),!a)throw v.info(`Skipping interactive OAuth on reconnect; surfacing error`,{eventType:`mcp_reconnect_skip_interactive_auth`}),r;let d=await n();s.setBearer(d),l=!0;let f=await me(A,e,t(),c);o=f.client,b=f.transportType,v.info(`Connected to remote server with OAuth (recovered from non-401)`,{transport:b})}else throw r}return o}catch(t){throw v.warn(`Failed original server access`,{errno:$(t),error:t instanceof Error?t.message:String(t),eventType:`mcp_server_access_failed`,proxyType:s,remoteUrl:e}),t instanceof i||t instanceof r?t:(st(t)&&ln({error:t,extra:{remoteUrl:e},logMessage:`Upstream speaks a different MCP protocol era; cannot negotiate a session`,subject:e,url:e}),new i(`Failed to connect to remote server: ${t instanceof Error?t.message:String(t)}`,e,b,{headerCount:Object.keys(x).length},t))}}return n},ke=()=>Mt(()=>Oe(A()),h.upstream.connect,{onRetry:({attempt:e,delayMs:t,error:n})=>{v.warn(`Upstream connect failed; retrying`,{attempt:e,delayMs:t,errno:$(n),error:n instanceof Error?n.message:String(n),eventType:`mcp_upstream_connect_retry`,proxyType:s})}}),Ae=s===`remote`?h.upstream.reconnect.enabled:h.upstream.reconnect.enabledForStdio,je=e=>Ae?Pt({cooldownMs:h.upstream.reconnect.cooldownMs,initial:e,reconnect:()=>Oe(A(),{allowInteractiveAuth:!1})}):e,j,Me=()=>(j??=l({cliArgs:Ce(),scanApiKey:h.scanner.apiKey,scanEnabled:h.scanner.enabled,scanFailOpen:h.scanner.failOpen,scanHeaders:ve,scanTimeoutMs:h.scanner.timeoutMs,scanUrl:h.scanner.url||``,spawnedServerInfoProvider:on}),j),M=e=>{v.info(`Upstream protocol era negotiated`,{era:e.getProtocolEra(),eventType:`mcp_upstream_era_negotiated`,negotiation:h.supportNewMcpProtocol?`auto`:`legacy`,protocolVersion:e.getNegotiatedProtocolVersion()})},Ne=async()=>{if(e.port){let t,n=await m({createServer:async()=>{let e=await ke();M(e),await Me();let n=e.getServerVersion(),r=e.getServerCapabilities();t=je(e);let i=new a(n,{capabilities:r});return f({authorizer:O,client:t,server:i,serverCapabilities:r}),i},onClose:async e=>{t&&await t.close(),await e.close()},port:e.port});return v.info(`MCP gateway started`,{eventType:`mcp_gateway_started`,mode:`http`,port:e.port,proxyType:s}),s===`stdio`?v.info(`MCP server configuration`,{args:p(_??[]).join(` `),command:g,eventType:`mcp_server_config`,proxyType:s}):v.info(`MCP server configuration`,{eventType:`mcp_server_config`,proxyType:s,remoteUrl:y}),{close:()=>n.close()}}let t=await ke();M(t);let n=t.getServerVersion(),r=t.getServerCapabilities(),i=je(t),c=new a(n,{capabilities:r});f({authorizer:O,client:i,server:c,serverCapabilities:r}),await Me();let l=()=>{v.info(`MCP gateway started`,{eventType:`mcp_gateway_started`,mode:`stdio`,proxyType:s}),v.info(`MCP server configuration`,{capabilities:Object.keys(r||{}),eventType:`mcp_server_config`,proxyType:s,serverName:n?.name,serverVersion:n?.version,...s===`stdio`?{args:p(_??[]).join(` `),command:g}:{remoteUrl:y,transport:b}})};if(h.supportNewMcpProtocol){let e=ee(()=>c,{legacy:`serve`});return u=!0,l(),{close:async()=>{await e.close(),await i.close()}}}let d=new o;return await c.connect(d),u=!0,l(),{close:()=>i.close()}},Pe=({server:e,stopResourceMetrics:t,timeout:n})=>{let r=!1,i=async i=>{if(!r){r=!0,t(),v.info(`MCP gateway stopping`,{eventType:`mcp_gateway_stopping`,signal:i});try{await e.close(),d(),await re(2e3),process.exit(0)}catch(e){let t=`Error during shutdown: ${e}`;v.error(`Error during shutdown`,{error:t,eventType:`mcp_gateway_stopped`,shutdownTimeout:n}),await re(2e3),process.exit(1)}}},a=e=>async()=>{De(()=>{v.error(`Graceful shutdown timeout exceeded, forcing exit`),process.exit(1)},n).unref(),await i(e)};return process.once(`SIGTERM`,a(`SIGTERM`)),process.once(`SIGINT`,a(`SIGINT`)),process.stdin.once(`end`,a(`stdin-end`)),()=>e.close()};v.info(`MCP gateway starting`,{command:g,eventType:`mcp_gateway_starting`,proxyType:s,transport:s===`remote`?`auto-detect`:`stdio`,url:y});try{let t=await Ne();Pe({server:t,stopResourceMetrics:_t(()=>E??=c()),timeout:e.gracefulShutdownTimeout})}catch(e){await C(e)}};export{un as main};
-//# sourceMappingURL=main-DFOVp-no.js.map
+//# sourceMappingURL=main-Pq-KY6XI.js.map