@permission-protocol/mcp-guard 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +224 -0
- package/assets/demo.gif +0 -0
- package/bin/mcp-guard +2 -0
- package/demo/_demo-scenario.sh +43 -0
- package/dist/example/server.d.ts +1 -0
- package/dist/example/server.js +54 -0
- package/dist/example/server.js.map +1 -0
- package/dist/src/approval-server.d.ts +4 -0
- package/dist/src/approval-server.js +128 -0
- package/dist/src/approval-server.js.map +1 -0
- package/dist/src/approval-ui.d.ts +1 -0
- package/dist/src/approval-ui.js +158 -0
- package/dist/src/approval-ui.js.map +1 -0
- package/dist/src/cli.d.ts +1 -0
- package/dist/src/cli.js +82 -0
- package/dist/src/cli.js.map +1 -0
- package/dist/src/config.d.ts +13 -0
- package/dist/src/config.js +48 -0
- package/dist/src/config.js.map +1 -0
- package/dist/src/engine.d.ts +7 -0
- package/dist/src/engine.js +25 -0
- package/dist/src/engine.js.map +1 -0
- package/dist/src/pending.d.ts +20 -0
- package/dist/src/pending.js +44 -0
- package/dist/src/pending.js.map +1 -0
- package/dist/src/proxy.d.ts +2 -0
- package/dist/src/proxy.js +147 -0
- package/dist/src/proxy.js.map +1 -0
- package/dist/src/receipt.d.ts +15 -0
- package/dist/src/receipt.js +34 -0
- package/dist/src/receipt.js.map +1 -0
- package/dist/src/tests/config.test.d.ts +1 -0
- package/dist/src/tests/config.test.js +63 -0
- package/dist/src/tests/config.test.js.map +1 -0
- package/dist/src/tests/engine.test.d.ts +1 -0
- package/dist/src/tests/engine.test.js +46 -0
- package/dist/src/tests/engine.test.js.map +1 -0
- package/dist/src/tests/receipt.test.d.ts +1 -0
- package/dist/src/tests/receipt.test.js +44 -0
- package/dist/src/tests/receipt.test.js.map +1 -0
- package/docs/index.html +771 -0
- package/example/README.md +38 -0
- package/example/pp.config.yaml +15 -0
- package/example/server.ts +52 -0
- package/example/test.sh +64 -0
- package/package.json +29 -0
- package/permission-protocol-mcp-guard-0.1.0.tgz +0 -0
- package/src/approval-server.ts +136 -0
- package/src/approval-ui.ts +154 -0
- package/src/cli.ts +84 -0
- package/src/config.ts +68 -0
- package/src/engine.ts +31 -0
- package/src/pending.ts +65 -0
- package/src/proxy.ts +173 -0
- package/src/receipt.ts +52 -0
- package/src/tests/config.test.ts +61 -0
- package/src/tests/engine.test.ts +47 -0
- package/src/tests/receipt.test.ts +44 -0
- package/tsconfig.json +16 -0
|
@@ -0,0 +1,44 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
3
|
+
return (mod && mod.__esModule) ? mod : { "default": mod };
|
|
4
|
+
};
|
|
5
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
|
+
const node_test_1 = require("node:test");
|
|
7
|
+
const strict_1 = __importDefault(require("node:assert/strict"));
|
|
8
|
+
const receipt_js_1 = require("../receipt.js");
|
|
9
|
+
(0, node_test_1.describe)('Receipt Emitter', () => {
|
|
10
|
+
(0, node_test_1.it)('generates a valid receipt with all fields', () => {
|
|
11
|
+
const decision = {
|
|
12
|
+
decision: 'blocked',
|
|
13
|
+
rule_id: 'block-delete',
|
|
14
|
+
reason: 'Matched rule "block-delete"',
|
|
15
|
+
};
|
|
16
|
+
const receipt = (0, receipt_js_1.createReceipt)('agent-1', 'delete_user_data', decision, { name: 'delete_user_data', arguments: {} });
|
|
17
|
+
strict_1.default.ok(receipt.receipt_id, 'has receipt_id');
|
|
18
|
+
strict_1.default.match(receipt.receipt_id, /^[0-9a-f-]{36}$/, 'receipt_id is UUID');
|
|
19
|
+
strict_1.default.ok(receipt.timestamp, 'has timestamp');
|
|
20
|
+
strict_1.default.doesNotThrow(() => new Date(receipt.timestamp), 'timestamp is valid ISO');
|
|
21
|
+
strict_1.default.equal(receipt.agent_id, 'agent-1');
|
|
22
|
+
strict_1.default.equal(receipt.tool_name, 'delete_user_data');
|
|
23
|
+
strict_1.default.equal(receipt.decision, 'blocked');
|
|
24
|
+
strict_1.default.equal(receipt.reason, 'Matched rule "block-delete"');
|
|
25
|
+
strict_1.default.equal(receipt.rule_id, 'block-delete');
|
|
26
|
+
strict_1.default.equal(typeof receipt.request_payload_hash, 'string');
|
|
27
|
+
strict_1.default.equal(receipt.request_payload_hash.length, 64, 'SHA-256 hex is 64 chars');
|
|
28
|
+
strict_1.default.equal(receipt.target_server, 'unknown');
|
|
29
|
+
strict_1.default.equal(receipt.mode, 'enforce');
|
|
30
|
+
});
|
|
31
|
+
(0, node_test_1.it)('hashes different payloads differently', () => {
|
|
32
|
+
const decision = { decision: 'allowed', rule_id: null, reason: 'test' };
|
|
33
|
+
const r1 = (0, receipt_js_1.createReceipt)('a', 'tool', decision, { foo: 1 });
|
|
34
|
+
const r2 = (0, receipt_js_1.createReceipt)('a', 'tool', decision, { foo: 2 });
|
|
35
|
+
strict_1.default.notEqual(r1.request_payload_hash, r2.request_payload_hash);
|
|
36
|
+
});
|
|
37
|
+
(0, node_test_1.it)('generates unique receipt IDs', () => {
|
|
38
|
+
const decision = { decision: 'allowed', rule_id: null, reason: 'test' };
|
|
39
|
+
const r1 = (0, receipt_js_1.createReceipt)('a', 'tool', decision, {});
|
|
40
|
+
const r2 = (0, receipt_js_1.createReceipt)('a', 'tool', decision, {});
|
|
41
|
+
strict_1.default.notEqual(r1.receipt_id, r2.receipt_id);
|
|
42
|
+
});
|
|
43
|
+
});
|
|
44
|
+
//# sourceMappingURL=receipt.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"receipt.test.js","sourceRoot":"","sources":["../../../src/tests/receipt.test.ts"],"names":[],"mappings":";;;;;AAAA,yCAAyC;AACzC,gEAAwC;AACxC,8CAA8C;AAG9C,IAAA,oBAAQ,EAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAA,cAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,QAAQ,GAAa;YACzB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,6BAA6B;SACtC,CAAC;QAEF,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,SAAS,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAEpH,gBAAM,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAChD,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;QAC1E,gBAAM,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC9C,gBAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,wBAAwB,CAAC,CAAC;QACjF,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1C,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACpD,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1C,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;QAC5D,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC9C,gBAAM,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QAC5D,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;QACjF,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC/C,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,QAAQ,GAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClF,MAAM,EAAE,GAAG,IAAA,0BAAa,EAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,IAAA,0BAAa,EAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,gBAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,oBAAoB,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,QAAQ,GAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClF,MAAM,EAAE,GAAG,IAAA,0BAAa,EAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,IAAA,0BAAa,EAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpD,gBAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|