@permission-protocol/mcp-guard 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (59) hide show
  1. package/README.md +224 -0
  2. package/assets/demo.gif +0 -0
  3. package/bin/mcp-guard +2 -0
  4. package/demo/_demo-scenario.sh +43 -0
  5. package/dist/example/server.d.ts +1 -0
  6. package/dist/example/server.js +54 -0
  7. package/dist/example/server.js.map +1 -0
  8. package/dist/src/approval-server.d.ts +4 -0
  9. package/dist/src/approval-server.js +128 -0
  10. package/dist/src/approval-server.js.map +1 -0
  11. package/dist/src/approval-ui.d.ts +1 -0
  12. package/dist/src/approval-ui.js +158 -0
  13. package/dist/src/approval-ui.js.map +1 -0
  14. package/dist/src/cli.d.ts +1 -0
  15. package/dist/src/cli.js +82 -0
  16. package/dist/src/cli.js.map +1 -0
  17. package/dist/src/config.d.ts +13 -0
  18. package/dist/src/config.js +48 -0
  19. package/dist/src/config.js.map +1 -0
  20. package/dist/src/engine.d.ts +7 -0
  21. package/dist/src/engine.js +25 -0
  22. package/dist/src/engine.js.map +1 -0
  23. package/dist/src/pending.d.ts +20 -0
  24. package/dist/src/pending.js +44 -0
  25. package/dist/src/pending.js.map +1 -0
  26. package/dist/src/proxy.d.ts +2 -0
  27. package/dist/src/proxy.js +147 -0
  28. package/dist/src/proxy.js.map +1 -0
  29. package/dist/src/receipt.d.ts +15 -0
  30. package/dist/src/receipt.js +34 -0
  31. package/dist/src/receipt.js.map +1 -0
  32. package/dist/src/tests/config.test.d.ts +1 -0
  33. package/dist/src/tests/config.test.js +63 -0
  34. package/dist/src/tests/config.test.js.map +1 -0
  35. package/dist/src/tests/engine.test.d.ts +1 -0
  36. package/dist/src/tests/engine.test.js +46 -0
  37. package/dist/src/tests/engine.test.js.map +1 -0
  38. package/dist/src/tests/receipt.test.d.ts +1 -0
  39. package/dist/src/tests/receipt.test.js +44 -0
  40. package/dist/src/tests/receipt.test.js.map +1 -0
  41. package/docs/index.html +771 -0
  42. package/example/README.md +38 -0
  43. package/example/pp.config.yaml +15 -0
  44. package/example/server.ts +52 -0
  45. package/example/test.sh +64 -0
  46. package/package.json +29 -0
  47. package/permission-protocol-mcp-guard-0.1.0.tgz +0 -0
  48. package/src/approval-server.ts +136 -0
  49. package/src/approval-ui.ts +154 -0
  50. package/src/cli.ts +84 -0
  51. package/src/config.ts +68 -0
  52. package/src/engine.ts +31 -0
  53. package/src/pending.ts +65 -0
  54. package/src/proxy.ts +173 -0
  55. package/src/receipt.ts +52 -0
  56. package/src/tests/config.test.ts +61 -0
  57. package/src/tests/engine.test.ts +47 -0
  58. package/src/tests/receipt.test.ts +44 -0
  59. package/tsconfig.json +16 -0
@@ -0,0 +1,44 @@
1
+ "use strict";
2
+ var __importDefault = (this && this.__importDefault) || function (mod) {
3
+ return (mod && mod.__esModule) ? mod : { "default": mod };
4
+ };
5
+ Object.defineProperty(exports, "__esModule", { value: true });
6
+ const node_test_1 = require("node:test");
7
+ const strict_1 = __importDefault(require("node:assert/strict"));
8
+ const receipt_js_1 = require("../receipt.js");
9
+ (0, node_test_1.describe)('Receipt Emitter', () => {
10
+ (0, node_test_1.it)('generates a valid receipt with all fields', () => {
11
+ const decision = {
12
+ decision: 'blocked',
13
+ rule_id: 'block-delete',
14
+ reason: 'Matched rule "block-delete"',
15
+ };
16
+ const receipt = (0, receipt_js_1.createReceipt)('agent-1', 'delete_user_data', decision, { name: 'delete_user_data', arguments: {} });
17
+ strict_1.default.ok(receipt.receipt_id, 'has receipt_id');
18
+ strict_1.default.match(receipt.receipt_id, /^[0-9a-f-]{36}$/, 'receipt_id is UUID');
19
+ strict_1.default.ok(receipt.timestamp, 'has timestamp');
20
+ strict_1.default.doesNotThrow(() => new Date(receipt.timestamp), 'timestamp is valid ISO');
21
+ strict_1.default.equal(receipt.agent_id, 'agent-1');
22
+ strict_1.default.equal(receipt.tool_name, 'delete_user_data');
23
+ strict_1.default.equal(receipt.decision, 'blocked');
24
+ strict_1.default.equal(receipt.reason, 'Matched rule "block-delete"');
25
+ strict_1.default.equal(receipt.rule_id, 'block-delete');
26
+ strict_1.default.equal(typeof receipt.request_payload_hash, 'string');
27
+ strict_1.default.equal(receipt.request_payload_hash.length, 64, 'SHA-256 hex is 64 chars');
28
+ strict_1.default.equal(receipt.target_server, 'unknown');
29
+ strict_1.default.equal(receipt.mode, 'enforce');
30
+ });
31
+ (0, node_test_1.it)('hashes different payloads differently', () => {
32
+ const decision = { decision: 'allowed', rule_id: null, reason: 'test' };
33
+ const r1 = (0, receipt_js_1.createReceipt)('a', 'tool', decision, { foo: 1 });
34
+ const r2 = (0, receipt_js_1.createReceipt)('a', 'tool', decision, { foo: 2 });
35
+ strict_1.default.notEqual(r1.request_payload_hash, r2.request_payload_hash);
36
+ });
37
+ (0, node_test_1.it)('generates unique receipt IDs', () => {
38
+ const decision = { decision: 'allowed', rule_id: null, reason: 'test' };
39
+ const r1 = (0, receipt_js_1.createReceipt)('a', 'tool', decision, {});
40
+ const r2 = (0, receipt_js_1.createReceipt)('a', 'tool', decision, {});
41
+ strict_1.default.notEqual(r1.receipt_id, r2.receipt_id);
42
+ });
43
+ });
44
+ //# sourceMappingURL=receipt.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"receipt.test.js","sourceRoot":"","sources":["../../../src/tests/receipt.test.ts"],"names":[],"mappings":";;;;;AAAA,yCAAyC;AACzC,gEAAwC;AACxC,8CAA8C;AAG9C,IAAA,oBAAQ,EAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAA,cAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,QAAQ,GAAa;YACzB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,6BAA6B;SACtC,CAAC;QAEF,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,SAAS,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAEpH,gBAAM,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAChD,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;QAC1E,gBAAM,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC9C,gBAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,wBAAwB,CAAC,CAAC;QACjF,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1C,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACpD,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1C,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;QAC5D,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC9C,gBAAM,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QAC5D,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;QACjF,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC/C,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,QAAQ,GAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClF,MAAM,EAAE,GAAG,IAAA,0BAAa,EAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,IAAA,0BAAa,EAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,gBAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,oBAAoB,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,QAAQ,GAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClF,MAAM,EAAE,GAAG,IAAA,0BAAa,EAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,IAAA,0BAAa,EAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpD,gBAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}