@permission-protocol/mcp-guard 0.1.0

package/dist/src/cli.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.main = main;
+const config_js_1 = require("./config.js");
+const proxy_js_1 = require("./proxy.js");
+const node_path_1 = require("node:path");
+const node_child_process_1 = require("node:child_process");
+function main() {
+    const args = process.argv.slice(2);
+    if (args[0] === 'demo') {
+        // When running via npx @permission-protocol/mcp-guard demo
+        const scriptPath = (0, node_path_1.join)(__dirname, '../../example/test.sh');
+        const result = (0, node_child_process_1.spawnSync)('bash', [scriptPath], { stdio: 'inherit' });
+        process.exit(result.status ?? 0);
+    }
+    let configPath = './pp.config.yaml';
+    let agentId = 'unknown';
+    let modeOverride;
+    let approvalPort;
+    let serverCommand = [];
+    const dashDashIndex = args.indexOf('--');
+    const cliArgs = dashDashIndex >= 0 ? args.slice(0, dashDashIndex) : args;
+    serverCommand = dashDashIndex >= 0 ? args.slice(dashDashIndex + 1) : [];
+    for (let i = 0; i < cliArgs.length; i++) {
+        if (cliArgs[i] === '--config' && cliArgs[i + 1]) {
+            configPath = cliArgs[++i];
+        }
+        else if (cliArgs[i] === '--agent-id' && cliArgs[i + 1]) {
+            agentId = cliArgs[++i];
+        }
+        else if (cliArgs[i] === '--mode' && cliArgs[i + 1]) {
+            const m = cliArgs[++i];
+            if (m === 'enforce' || m === 'observe')
+                modeOverride = m;
+        }
+        else if (cliArgs[i] === '--approval-port' && cliArgs[i + 1]) {
+            approvalPort = parseInt(cliArgs[++i], 10);
+            if (isNaN(approvalPort)) {
+                process.stderr.write('[mcp-guard] Error: --approval-port must be a number\n');
+                process.exit(1);
+            }
+        }
+        else if (cliArgs[i] === '--help' || cliArgs[i] === '-h') {
+            printHelp();
+            process.exit(0);
+        }
+    }
+    if (serverCommand.length === 0) {
+        process.stderr.write('[mcp-guard] Error: No server command. Use: mcp-guard [options] -- <server command>\n');
+        process.exit(1);
+    }
+    const config = (0, config_js_1.loadConfig)(configPath);
+    if (modeOverride)
+        config.mode = modeOverride;
+    process.stderr.write(`[mcp-guard] Loaded ${config.rules.length} rules (default: ${config.default_action}, mode: ${config.mode})\n`);
+    process.stderr.write(`[mcp-guard] Starting server: ${serverCommand.join(' ')}\n`);
+    (0, proxy_js_1.startProxy)(config, agentId, serverCommand, approvalPort);
+}
+function printHelp() {
+    const help = `
+mcp-guard — MCP tool-call policy proxy
+
+Usage:
+  mcp-guard [options] -- <server command>
+
+Options:
+  --config <path>         Path to config file (default: ./pp.config.yaml)
+  --agent-id <id>         Agent identifier for receipts (default: "unknown")
+  --mode <mode>           enforce or observe (overrides config; default: enforce)
+  --approval-port <port>  Enable approval UI on this port (e.g. 3100)
+  -h, --help              Show this help
+
+Example:
+  mcp-guard --config pp.config.yaml -- node my-mcp-server.js
+
+  # With approval UI:
+  mcp-guard --config pp.config.yaml --approval-port 3100 -- node my-mcp-server.js
+`.trim();
+    console.log(help);
+}
+main();
+//# sourceMappingURL=cli.js.map

package/dist/src/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":";;AAOA,oBAmDC;AA1DD,2CAAyC;AACzC,yCAAwC;AACxC,yCAAiC;AACjC,2DAA+C;AAI/C,SAAgB,IAAI;IAClB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACvB,2DAA2D;QAC3D,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAA,8BAAS,EAAC,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,UAAU,GAAG,kBAAkB,CAAC;IACpC,IAAI,OAAO,GAAG,SAAS,CAAC;IACxB,IAAI,YAA+C,CAAC;IACpD,IAAI,YAAgC,CAAC;IACrC,IAAI,aAAa,GAAa,EAAE,CAAC;IAEjC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,aAAa,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,aAAa,GAAG,aAAa,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAExE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAChD,UAAU,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,CAAC;aAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACzD,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS;gBAAE,YAAY,GAAG,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,iBAAiB,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC9D,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1C,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;gBAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1D,SAAS,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sFAAsF,CAAC,CAAC;QAC7G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,sBAAU,EAAC,UAAU,CAAC,CAAC;IACtC,IAAI,YAAY;QAAE,MAAM,CAAC,IAAI,GAAG,YAAY,CAAC;IAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,MAAM,CAAC,KAAK,CAAC,MAAM,oBAAoB,MAAM,CAAC,cAAc,WAAW,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;IACpI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAElF,IAAA,qBAAU,EAAC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;CAkBd,CAAC,IAAI,EAAE,CAAC;IACP,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/src/config.d.ts

@@ -0,0 +1,13 @@
+export type Action = 'allow' | 'block' | 'require_approval';
+export interface Rule {
+    id: string;
+    tool: string;
+    action: Action;
+}
+export type Mode = 'enforce' | 'observe';
+export interface Config {
+    default_action: Action;
+    mode: Mode;
+    rules: Rule[];
+}
+export declare function loadConfig(configPath: string): Config;

package/dist/src/config.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadConfig = loadConfig;
+const node_fs_1 = require("node:fs");
+const yaml_1 = require("yaml");
+const VALID_ACTIONS = ['allow', 'block', 'require_approval'];
+function loadConfig(configPath) {
+    let raw;
+    try {
+        raw = (0, node_fs_1.readFileSync)(configPath, 'utf-8');
+    }
+    catch (err) {
+        throw new Error(`Failed to read config file: ${configPath} (${err.code ?? err.message})`);
+    }
+    const parsed = (0, yaml_1.parse)(raw);
+    if (!parsed || typeof parsed !== 'object') {
+        throw new Error('Config must be a YAML object');
+    }
+    if (!VALID_ACTIONS.includes(parsed.default_action)) {
+        throw new Error(`Invalid default_action: "${parsed.default_action}". Must be one of: ${VALID_ACTIONS.join(', ')}`);
+    }
+    const VALID_MODES = ['enforce', 'observe'];
+    const mode = parsed.mode ?? 'enforce';
+    if (!VALID_MODES.includes(mode)) {
+        throw new Error(`Invalid mode: "${parsed.mode}". Must be one of: ${VALID_MODES.join(', ')}`);
+    }
+    if (!Array.isArray(parsed.rules)) {
+        throw new Error('Config must include a "rules" array');
+    }
+    const rules = parsed.rules.map((r, i) => {
+        if (!r.id || typeof r.id !== 'string') {
+            throw new Error(`Rule ${i} missing valid "id"`);
+        }
+        if (!r.tool || typeof r.tool !== 'string') {
+            throw new Error(`Rule ${i} missing valid "tool"`);
+        }
+        if (!VALID_ACTIONS.includes(r.action)) {
+            throw new Error(`Rule ${i} has invalid action: "${r.action}"`);
+        }
+        return { id: r.id, tool: r.tool, action: r.action };
+    });
+    return {
+        default_action: parsed.default_action,
+        mode,
+        rules,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/src/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":";;AAqBA,gCA8CC;AAnED,qCAAuC;AACvC,+BAA6B;AAkB7B,MAAM,aAAa,GAAa,CAAC,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAEvE,SAAgB,UAAU,CAAC,UAAkB;IAC3C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,sBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,+BAA+B,UAAU,KAAK,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,YAAK,EAAC,GAAG,CAAC,CAAC;IAE1B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,cAAc,sBAAsB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrH,CAAC;IAED,MAAM,WAAW,GAAW,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,IAAI,GAAS,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC;IAC5C,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,CAAC,IAAI,sBAAsB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,KAAK,GAAW,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,CAAS,EAAE,EAAE;QAC3D,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAgB,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,cAAwB;QAC/C,IAAI;QACJ,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/src/engine.d.ts

@@ -0,0 +1,7 @@
+import type { Config } from './config.js';
+export interface Decision {
+    decision: 'allowed' | 'blocked' | 'held_for_approval';
+    rule_id: string | null;
+    reason: string;
+}
+export declare function evaluate(toolName: string, _toolArgs: Record<string, unknown> | undefined, config: Config): Decision;

package/dist/src/engine.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.evaluate = evaluate;
+const ACTION_TO_DECISION = {
+    allow: 'allowed',
+    block: 'blocked',
+    require_approval: 'held_for_approval',
+};
+function evaluate(toolName, _toolArgs, config) {
+    for (const rule of config.rules) {
+        if (rule.tool === toolName) {
+            return {
+                decision: ACTION_TO_DECISION[rule.action],
+                rule_id: rule.id,
+                reason: `Matched rule "${rule.id}"`,
+            };
+        }
+    }
+    return {
+        decision: ACTION_TO_DECISION[config.default_action],
+        rule_id: null,
+        reason: `No matching rule; default action "${config.default_action}"`,
+    };
+}
+//# sourceMappingURL=engine.js.map

package/dist/src/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/engine.ts"],"names":[],"mappings":";;AAcA,4BAgBC;AAtBD,MAAM,kBAAkB,GAAG;IACzB,KAAK,EAAE,SAAS;IAChB,KAAK,EAAE,SAAS;IAChB,gBAAgB,EAAE,mBAAmB;CAC7B,CAAC;AAEX,SAAgB,QAAQ,CAAC,QAAgB,EAAE,SAA8C,EAAE,MAAc;IACvG,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,OAAO;gBACL,QAAQ,EAAE,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;gBACzC,OAAO,EAAE,IAAI,CAAC,EAAE;gBAChB,MAAM,EAAE,iBAAiB,IAAI,CAAC,EAAE,GAAG;aACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,cAAc,CAAC;QACnD,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,qCAAqC,MAAM,CAAC,cAAc,GAAG;KACtE,CAAC;AACJ,CAAC"}

package/dist/src/pending.d.ts

@@ -0,0 +1,20 @@
+export interface PendingAction {
+    id: string;
+    timestamp: string;
+    tool_name: string;
+    tool_args: any;
+    agent_id: string;
+    rule_id: string;
+    status: 'pending' | 'approved' | 'denied';
+    /** The original JSON-RPC line to forward on approval */
+    originalLine: string;
+    /** The JSON-RPC request id for matching child responses */
+    jsonrpcId: string | number | null;
+    /** Resolver — call with the response line (or error JSON) to unblock the proxy */
+    resolve: (responseLine: string) => void;
+}
+export declare function addPending(toolName: string, toolArgs: any, agentId: string, ruleId: string, originalLine: string, jsonrpcId: string | number | null, resolve: (responseLine: string) => void): PendingAction;
+export declare function getPending(): PendingAction[];
+export declare function getAction(id: string): PendingAction | undefined;
+export declare function resolveAction(id: string, status: 'approved' | 'denied'): PendingAction | undefined;
+export declare function recentResolved(limit?: number): PendingAction[];

package/dist/src/pending.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.addPending = addPending;
+exports.getPending = getPending;
+exports.getAction = getAction;
+exports.resolveAction = resolveAction;
+exports.recentResolved = recentResolved;
+const uuid_1 = require("uuid");
+const queue = new Map();
+function addPending(toolName, toolArgs, agentId, ruleId, originalLine, jsonrpcId, resolve) {
+    const action = {
+        id: (0, uuid_1.v4)(),
+        timestamp: new Date().toISOString(),
+        tool_name: toolName,
+        tool_args: toolArgs,
+        agent_id: agentId,
+        rule_id: ruleId,
+        status: 'pending',
+        originalLine,
+        jsonrpcId,
+        resolve,
+    };
+    queue.set(action.id, action);
+    return action;
+}
+function getPending() {
+    return Array.from(queue.values()).filter(a => a.status === 'pending');
+}
+function getAction(id) {
+    return queue.get(id);
+}
+function resolveAction(id, status) {
+    const action = queue.get(id);
+    if (!action || action.status !== 'pending')
+        return undefined;
+    action.status = status;
+    return action;
+}
+function recentResolved(limit = 50) {
+    return Array.from(queue.values())
+        .filter(a => a.status !== 'pending')
+        .slice(-limit);
+}
+//# sourceMappingURL=pending.js.map

package/dist/src/pending.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending.js","sourceRoot":"","sources":["../../src/pending.ts"],"names":[],"mappings":";;AAoBA,gCAuBC;AAED,gCAEC;AAED,8BAEC;AAED,sCAKC;AAED,wCAIC;AAhED,+BAAoC;AAkBpC,MAAM,KAAK,GAA+B,IAAI,GAAG,EAAE,CAAC;AAEpD,SAAgB,UAAU,CACxB,QAAgB,EAChB,QAAa,EACb,OAAe,EACf,MAAc,EACd,YAAoB,EACpB,SAAiC,EACjC,OAAuC;IAEvC,MAAM,MAAM,GAAkB;QAC5B,EAAE,EAAE,IAAA,SAAM,GAAE;QACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,SAAS;QACjB,YAAY;QACZ,SAAS;QACT,OAAO;KACR,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,UAAU;IACxB,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;AACxE,CAAC;AAED,SAAgB,SAAS,CAAC,EAAU;IAClC,OAAO,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACvB,CAAC;AAED,SAAgB,aAAa,CAAC,EAAU,EAAE,MAA6B;IACrE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7D,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,cAAc,CAAC,QAAgB,EAAE;IAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;SAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;SACnC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC"}

package/dist/src/proxy.d.ts

@@ -0,0 +1,2 @@
+import type { Config } from './config.js';
+export declare function startProxy(config: Config, agentId: string, serverCommand: string[], approvalPort?: number): void;

package/dist/src/proxy.js

@@ -0,0 +1,147 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startProxy = startProxy;
+const node_child_process_1 = require("node:child_process");
+const node_readline_1 = require("node:readline");
+const engine_js_1 = require("./engine.js");
+const receipt_js_1 = require("./receipt.js");
+const pending_js_1 = require("./pending.js");
+const approval_server_js_1 = require("./approval-server.js");
+function startProxy(config, agentId, serverCommand, approvalPort) {
+    if (serverCommand.length === 0) {
+        process.stderr.write('[mcp-guard] Error: no server command provided after --\n');
+        process.exit(1);
+    }
+    const approvalEnabled = approvalPort !== undefined;
+    // Start approval server if enabled
+    if (approvalEnabled) {
+        (0, approval_server_js_1.startApprovalServer)(approvalPort);
+    }
+    const child = (0, node_child_process_1.spawn)(serverCommand[0], serverCommand.slice(1), {
+        stdio: ['pipe', 'pipe', 'inherit'],
+    });
+    child.on('error', (err) => {
+        process.stderr.write(`[mcp-guard] Failed to start server: ${err.message}\n`);
+        process.exit(1);
+    });
+    child.on('exit', (code) => {
+        process.stderr.write(`[mcp-guard] Server exited with code ${code}\n`);
+        process.exit(code ?? 1);
+    });
+    // Track pending approval responses waiting for child stdout
+    const pendingChildResponses = new Map();
+    // Forward child stdout → our stdout (or to pending resolver)
+    const childOut = (0, node_readline_1.createInterface)({ input: child.stdout });
+    childOut.on('line', (line) => {
+        // Check if this is a response to a forwarded approval
+        try {
+            const parsed = JSON.parse(line);
+            const id = parsed.id;
+            if (id != null && pendingChildResponses.has(id)) {
+                const resolver = pendingChildResponses.get(id);
+                pendingChildResponses.delete(id);
+                resolver(line);
+                return;
+            }
+        }
+        catch {
+            // not JSON, pass through
+        }
+        process.stdout.write(line + '\n');
+    });
+    // Set up approval callback — when UI approves, forward original request to child
+    if (approvalEnabled) {
+        (0, approval_server_js_1.setOnApprove)((actionId) => {
+            const action = (0, pending_js_1.getAction)(actionId);
+            if (!action)
+                return;
+            // Register a listener for the child's response
+            if (action.jsonrpcId != null) {
+                pendingChildResponses.set(action.jsonrpcId, (responseLine) => {
+                    action.resolve(responseLine);
+                });
+            }
+            // Forward the original request to the child server
+            child.stdin.write(action.originalLine + '\n');
+        });
+    }
+    // Read our stdin, inspect, and forward or reject
+    const stdinRL = (0, node_readline_1.createInterface)({ input: process.stdin });
+    stdinRL.on('line', (line) => {
+        if (!line.trim())
+            return;
+        let msg;
+        try {
+            msg = JSON.parse(line);
+        }
+        catch {
+            // Not valid JSON — forward as-is
+            child.stdin.write(line + '\n');
+            return;
+        }
+        if (msg.method === 'tools/call') {
+            const toolName = msg.params?.name ?? 'unknown';
+            const toolArgs = msg.params?.arguments;
+            const decision = (0, engine_js_1.evaluate)(toolName, toolArgs, config);
+            const serverName = serverCommand.join(' ');
+            const receipt = (0, receipt_js_1.createReceipt)(agentId, toolName, decision, msg.params, serverName, config.mode);
+            (0, receipt_js_1.emitReceipt)(receipt);
+            if (approvalEnabled)
+                (0, approval_server_js_1.pushReceipt)(receipt);
+            // In observe mode, always forward (log only, don't block)
+            if (config.mode === 'observe') {
+                if (decision.decision !== 'allowed') {
+                    process.stderr.write(`[mcp-guard] OBSERVE: would ${decision.decision === 'blocked' ? 'block' : 'hold'} "${toolName}" but forwarding (observe mode)\n`);
+                }
+                child.stdin.write(line + '\n');
+            }
+            else if (decision.decision === 'allowed') {
+                child.stdin.write(line + '\n');
+            }
+            else if (decision.decision === 'blocked') {
+                const errResp = {
+                    jsonrpc: '2.0',
+                    id: msg.id ?? null,
+                    error: {
+                        code: -32001,
+                        message: `Blocked: ${decision.reason}`,
+                    },
+                };
+                process.stdout.write(JSON.stringify(errResp) + '\n');
+            }
+            else {
+                // held_for_approval
+                if (approvalEnabled) {
+                    // Hold the response — add to pending queue
+                    const pending = (0, pending_js_1.addPending)(toolName, toolArgs, agentId, decision.rule_id ?? 'unknown', line, msg.id ?? null, (responseLine) => {
+                        process.stdout.write(responseLine + '\n');
+                    });
+                    process.stderr.write(`[mcp-guard] Held "${toolName}" for approval (${pending.id}) — approve at UI\n`);
+                }
+                else {
+                    // No approval server — return error immediately (original behavior)
+                    const errResp = {
+                        jsonrpc: '2.0',
+                        id: msg.id ?? null,
+                        error: {
+                            code: -32002,
+                            message: `Held for approval: ${decision.reason}`,
+                        },
+                    };
+                    process.stdout.write(JSON.stringify(errResp) + '\n');
+                }
+            }
+        }
+        else {
+            // Pass through all non-tools/call methods
+            child.stdin.write(line + '\n');
+        }
+    });
+    stdinRL.on('close', () => {
+        child.stdin.end();
+    });
+    // Handle signals gracefully
+    process.on('SIGINT', () => child.kill('SIGINT'));
+    process.on('SIGTERM', () => child.kill('SIGTERM'));
+}
+//# sourceMappingURL=proxy.js.map

package/dist/src/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/proxy.ts"],"names":[],"mappings":";;AAwBA,gCAoJC;AA5KD,2DAA8D;AAC9D,iDAAgD;AAEhD,2CAAuC;AACvC,6CAA0D;AAC1D,6CAAqD;AACrD,6DAAsF;AAkBtF,SAAgB,UAAU,CAAC,MAAc,EAAE,OAAe,EAAE,aAAuB,EAAE,YAAqB;IACxG,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,eAAe,GAAG,YAAY,KAAK,SAAS,CAAC;IAEnD,mCAAmC;IACnC,IAAI,eAAe,EAAE,CAAC;QACpB,IAAA,wCAAmB,EAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,KAAK,GAAiB,IAAA,0BAAK,EAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QAC1E,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC;KACnC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,IAAI,IAAI,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,4DAA4D;IAC5D,MAAM,qBAAqB,GAAiD,IAAI,GAAG,EAAE,CAAC;IAEtF,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,IAAA,+BAAe,EAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAO,EAAE,CAAC,CAAC;IAC3D,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC3B,sDAAsD;QACtD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;YACrB,IAAI,EAAE,IAAI,IAAI,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;gBAChD,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACjC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACf,OAAO;YACT,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,iFAAiF;IACjF,IAAI,eAAe,EAAE,CAAC;QACpB,IAAA,iCAAY,EAAC,CAAC,QAAgB,EAAE,EAAE;YAChC,MAAM,MAAM,GAAG,IAAA,sBAAS,EAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,+CAA+C;YAC/C,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;gBAC7B,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,YAAoB,EAAE,EAAE;oBACnE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBAC/B,CAAC,CAAC,CAAC;YACL,CAAC;YACD,mDAAmD;YACnD,KAAK,CAAC,KAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iDAAiD;IACjD,MAAM,OAAO,GAAG,IAAA,+BAAe,EAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1D,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO;QAEzB,IAAI,GAAmB,CAAC;QACxB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;YACjC,KAAK,CAAC,KAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAW,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,SAAS,CAAC;YACvD,MAAM,QAAQ,GAAwC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC;YAC5E,MAAM,QAAQ,GAAG,IAAA,oBAAQ,EAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAChG,IAAA,wBAAW,EAAC,OAAO,CAAC,CAAC;YACrB,IAAI,eAAe;gBAAE,IAAA,gCAAW,EAAC,OAAO,CAAC,CAAC;YAE1C,0DAA0D;YAC1D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,mCAAmC,CAAC,CAAC;gBACzJ,CAAC;gBACD,KAAK,CAAC,KAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YAClC,CAAC;iBAAM,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3C,KAAK,CAAC,KAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YAClC,CAAC;iBAAM,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3C,MAAM,OAAO,GAAiB;oBAC5B,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,IAAI;oBAClB,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,YAAY,QAAQ,CAAC,MAAM,EAAE;qBACvC;iBACF,CAAC;gBACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,oBAAoB;gBACpB,IAAI,eAAe,EAAE,CAAC;oBACpB,2CAA2C;oBAC3C,MAAM,OAAO,GAAG,IAAA,uBAAU,EACxB,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,QAAQ,CAAC,OAAO,IAAI,SAAS,EAC7B,IAAI,EACJ,GAAG,CAAC,EAAE,IAAI,IAAI,EACd,CAAC,YAAoB,EAAE,EAAE;wBACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;oBAC5C,CAAC,CACF,CAAC;oBACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,QAAQ,mBAAmB,OAAO,CAAC,EAAE,qBAAqB,CAAC,CAAC;gBACxG,CAAC;qBAAM,CAAC;oBACN,oEAAoE;oBACpE,MAAM,OAAO,GAAiB;wBAC5B,OAAO,EAAE,KAAK;wBACd,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,IAAI;wBAClB,KAAK,EAAE;4BACL,IAAI,EAAE,CAAC,KAAK;4BACZ,OAAO,EAAE,sBAAsB,QAAQ,CAAC,MAAM,EAAE;yBACjD;qBACF,CAAC;oBACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,0CAA0C;YAC1C,KAAK,CAAC,KAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACvB,KAAK,CAAC,KAAM,CAAC,GAAG,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,4BAA4B;IAC5B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AACrD,CAAC"}

package/dist/src/receipt.d.ts

@@ -0,0 +1,15 @@
+import type { Decision } from './engine.js';
+export interface Receipt {
+    receipt_id: string;
+    timestamp: string;
+    agent_id: string;
+    tool_name: string;
+    decision: Decision['decision'];
+    reason: string;
+    rule_id: string | null;
+    request_payload_hash: string;
+    target_server: string;
+    mode: 'enforce' | 'observe';
+}
+export declare function createReceipt(agentId: string, toolName: string, decision: Decision, requestPayload: unknown, targetServer?: string, mode?: 'enforce' | 'observe'): Receipt;
+export declare function emitReceipt(receipt: Receipt, receiptsPath?: string): void;

package/dist/src/receipt.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createReceipt = createReceipt;
+exports.emitReceipt = emitReceipt;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const uuid_1 = require("uuid");
+function createReceipt(agentId, toolName, decision, requestPayload, targetServer = 'unknown', mode = 'enforce') {
+    const payloadStr = JSON.stringify(requestPayload ?? {});
+    const hash = (0, node_crypto_1.createHash)('sha256').update(payloadStr).digest('hex');
+    return {
+        receipt_id: (0, uuid_1.v4)(),
+        timestamp: new Date().toISOString(),
+        agent_id: agentId,
+        tool_name: toolName,
+        decision: decision.decision,
+        reason: decision.reason,
+        rule_id: decision.rule_id,
+        request_payload_hash: hash,
+        target_server: targetServer,
+        mode,
+    };
+}
+function emitReceipt(receipt, receiptsPath = 'pp-receipts.jsonl') {
+    const json = JSON.stringify(receipt);
+    process.stderr.write(`[mcp-guard] receipt: ${json}\n`);
+    try {
+        (0, node_fs_1.appendFileSync)(receiptsPath, json + '\n');
+    }
+    catch {
+        // Best effort — don't crash the proxy if file write fails
+    }
+}
+//# sourceMappingURL=receipt.js.map

package/dist/src/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../src/receipt.ts"],"names":[],"mappings":";;AAkBA,sCAuBC;AAED,kCAQC;AAnDD,6CAAyC;AACzC,qCAAyC;AACzC,+BAAoC;AAgBpC,SAAgB,aAAa,CAC3B,OAAe,EACf,QAAgB,EAChB,QAAkB,EAClB,cAAuB,EACvB,eAAuB,SAAS,EAChC,OAA8B,SAAS;IAEvC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEnE,OAAO;QACL,UAAU,EAAE,IAAA,SAAM,GAAE;QACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,QAAQ;QACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,oBAAoB,EAAE,IAAI;QAC1B,aAAa,EAAE,YAAY;QAC3B,IAAI;KACL,CAAC;AACJ,CAAC;AAED,SAAgB,WAAW,CAAC,OAAgB,EAAE,eAAuB,mBAAmB;IACtF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,IAAI,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,IAAA,wBAAc,EAAC,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;AACH,CAAC"}

package/dist/src/tests/config.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/src/tests/config.test.js

@@ -0,0 +1,63 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const node_os_1 = require("node:os");
+const config_js_1 = require("../config.js");
+(0, node_test_1.describe)('Config Parser', () => {
+    (0, node_test_1.it)('parses a valid config', () => {
+        const dir = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'mcp-guard-test-'));
+        const path = (0, node_path_1.join)(dir, 'config.yaml');
+        (0, node_fs_1.writeFileSync)(path, `
+default_action: allow
+rules:
+  - id: block-delete
+    tool: delete_user_data
+    action: block
+  - id: hold-deploy
+    tool: deploy_production
+    action: require_approval
+`);
+        const config = (0, config_js_1.loadConfig)(path);
+        strict_1.default.equal(config.default_action, 'allow');
+        strict_1.default.equal(config.rules.length, 2);
+        strict_1.default.equal(config.rules[0].id, 'block-delete');
+        strict_1.default.equal(config.rules[0].tool, 'delete_user_data');
+        strict_1.default.equal(config.rules[0].action, 'block');
+        strict_1.default.equal(config.rules[1].action, 'require_approval');
+        strict_1.default.equal(config.mode, 'enforce'); // default
+        (0, node_fs_1.unlinkSync)(path);
+    });
+    (0, node_test_1.it)('rejects invalid config (bad action)', () => {
+        const dir = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'mcp-guard-test-'));
+        const path = (0, node_path_1.join)(dir, 'config.yaml');
+        (0, node_fs_1.writeFileSync)(path, `
+default_action: allow
+rules:
+  - id: bad
+    tool: foo
+    action: nuke_it
+`);
+        strict_1.default.throws(() => (0, config_js_1.loadConfig)(path), /invalid action/i);
+        (0, node_fs_1.unlinkSync)(path);
+    });
+    (0, node_test_1.it)('throws on missing file', () => {
+        strict_1.default.throws(() => (0, config_js_1.loadConfig)('/tmp/nonexistent-mcp-guard-config.yaml'), /Failed to read config/);
+    });
+    (0, node_test_1.it)('rejects config with invalid default_action', () => {
+        const dir = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'mcp-guard-test-'));
+        const path = (0, node_path_1.join)(dir, 'config.yaml');
+        (0, node_fs_1.writeFileSync)(path, `
+default_action: yolo
+rules: []
+`);
+        strict_1.default.throws(() => (0, config_js_1.loadConfig)(path), /Invalid default_action/);
+        (0, node_fs_1.unlinkSync)(path);
+    });
+});
+//# sourceMappingURL=config.test.js.map

package/dist/src/tests/config.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../../../src/tests/config.test.ts"],"names":[],"mappings":";;;;;AAAA,yCAAyC;AACzC,gEAAwC;AACxC,qCAAiE;AACjE,yCAAiC;AACjC,qCAAiC;AACjC,4CAA0C;AAE1C,IAAA,oBAAQ,EAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAA,cAAE,EAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,GAAG,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACtC,IAAA,uBAAa,EAAC,IAAI,EAAE;;;;;;;;;CASvB,CAAC,CAAC;QACC,MAAM,MAAM,GAAG,IAAA,sBAAU,EAAC,IAAI,CAAC,CAAC;QAChC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC7C,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QACjD,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;QACvD,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9C,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACzD,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU;QAChD,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,GAAG,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACtC,IAAA,uBAAa,EAAC,IAAI,EAAE;;;;;;CAMvB,CAAC,CAAC;QACC,gBAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACzD,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,gBAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAU,EAAC,wCAAwC,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,GAAG,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACtC,IAAA,uBAAa,EAAC,IAAI,EAAE;;;CAGvB,CAAC,CAAC;QACC,gBAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAChE,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/tests/engine.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/src/tests/engine.test.js

@@ -0,0 +1,46 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const strict_1 = __importDefault(require("node:assert/strict"));
+const engine_js_1 = require("../engine.js");
+(0, node_test_1.describe)('Decision Engine', () => {
+    const config = {
+        default_action: 'allow',
+        mode: 'enforce',
+        rules: [
+            { id: 'block-delete', tool: 'delete_user_data', action: 'block' },
+            { id: 'hold-deploy', tool: 'deploy_production', action: 'require_approval' },
+            { id: 'allow-email', tool: 'send_email', action: 'allow' },
+        ],
+    };
+    (0, node_test_1.it)('matches a block rule', () => {
+        const d = (0, engine_js_1.evaluate)('delete_user_data', undefined, config);
+        strict_1.default.equal(d.decision, 'blocked');
+        strict_1.default.equal(d.rule_id, 'block-delete');
+    });
+    (0, node_test_1.it)('matches a require_approval rule', () => {
+        const d = (0, engine_js_1.evaluate)('deploy_production', undefined, config);
+        strict_1.default.equal(d.decision, 'held_for_approval');
+        strict_1.default.equal(d.rule_id, 'hold-deploy');
+    });
+    (0, node_test_1.it)('matches an allow rule', () => {
+        const d = (0, engine_js_1.evaluate)('send_email', undefined, config);
+        strict_1.default.equal(d.decision, 'allowed');
+        strict_1.default.equal(d.rule_id, 'allow-email');
+    });
+    (0, node_test_1.it)('falls back to default_action: allow', () => {
+        const d = (0, engine_js_1.evaluate)('unknown_tool', undefined, config);
+        strict_1.default.equal(d.decision, 'allowed');
+        strict_1.default.equal(d.rule_id, null);
+    });
+    (0, node_test_1.it)('falls back to default_action: block', () => {
+        const blockConfig = { default_action: 'block', mode: 'enforce', rules: [] };
+        const d = (0, engine_js_1.evaluate)('any_tool', undefined, blockConfig);
+        strict_1.default.equal(d.decision, 'blocked');
+        strict_1.default.equal(d.rule_id, null);
+    });
+});
+//# sourceMappingURL=engine.test.js.map

package/dist/src/tests/engine.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.test.js","sourceRoot":"","sources":["../../../src/tests/engine.test.ts"],"names":[],"mappings":";;;;;AAAA,yCAAyC;AACzC,gEAAwC;AACxC,4CAAwC;AAGxC,IAAA,oBAAQ,EAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,MAAM,MAAM,GAAW;QACrB,cAAc,EAAE,OAAO;QACvB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE;YACL,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE;YACjE,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC5E,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE;SAC3D;KACF,CAAC;IAEF,IAAA,cAAE,EAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,GAAG,IAAA,oBAAQ,EAAC,kBAAkB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC1D,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpC,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAG,IAAA,oBAAQ,EAAC,mBAAmB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3D,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAC9C,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,GAAG,IAAA,oBAAQ,EAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACpD,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpC,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,IAAA,oBAAQ,EAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACtD,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpC,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,WAAW,GAAW,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACpF,MAAM,CAAC,GAAG,IAAA,oBAAQ,EAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QACvD,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpC,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/tests/receipt.test.d.ts

@@ -0,0 +1 @@
+export {};