@prism-llm-labs/mcp-proxy 0.1.0

package/dist/index.js

@@ -0,0 +1,269 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  PrismMcpProxy: () => PrismMcpProxy
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/proxy.ts
+var import_server = require("@modelcontextprotocol/sdk/server/index.js");
+var import_stdio = require("@modelcontextprotocol/sdk/server/stdio.js");
+var import_client = require("@modelcontextprotocol/sdk/client/index.js");
+var import_stdio2 = require("@modelcontextprotocol/sdk/client/stdio.js");
+var import_types = require("@modelcontextprotocol/sdk/types.js");
+var import_mcp_sdk = require("@prism-llm-labs/mcp-sdk");
+var DEFAULT_REDACT_KEYS = ["password", "token", "key", "secret", "api_key", "authorization"];
+function redactObject(obj, keys) {
+  if (typeof obj !== "object" || obj === null) return obj;
+  if (Array.isArray(obj)) return obj.map((v) => redactObject(v, keys));
+  const out = {};
+  for (const [k, v] of Object.entries(obj)) {
+    out[k] = keys.some((r) => k.toLowerCase().includes(r.toLowerCase())) ? "[REDACTED]" : redactObject(v, keys);
+  }
+  return out;
+}
+function safeJson(val, redactKeys, maxLen) {
+  try {
+    const s = JSON.stringify(redactObject(val, redactKeys));
+    return s.length <= maxLen ? s : s.slice(0, maxLen) + "\u2026";
+  } catch {
+    return "[unserializable]";
+  }
+}
+function orgFromKey(key) {
+  const parts = key.split("_");
+  return parts.length >= 4 ? parts[2] ?? "" : "";
+}
+function ts() {
+  return (/* @__PURE__ */ new Date()).toISOString().replace("T", " ").slice(0, 23);
+}
+var PrismMcpProxy = class {
+  constructor(targetCommand, targetArgs, options = {}) {
+    this.targetCommand = targetCommand;
+    this.targetArgs = targetArgs;
+    const key = options.prismKey ?? process.env["PRISM_API_KEY"] ?? "";
+    if (!key) {
+      process.stderr.write("[prism-proxy] PRISM_API_KEY not set \u2014 telemetry disabled\n");
+    }
+    this.opts = {
+      prismKey: key,
+      serverName: options.serverName ?? targetCommand.split(/[\\/]/).pop() ?? "mcp-server",
+      project: options.project ?? process.env["PRISM_PROJECT"] ?? "",
+      team: options.team ?? process.env["PRISM_TEAM"] ?? "",
+      environment: options.environment ?? process.env["PRISM_ENVIRONMENT"] ?? "production",
+      sessionId: options.sessionId ?? crypto.randomUUID(),
+      sessionBudgetUsd: options.sessionBudgetUsd,
+      maxToolCallsPerSession: options.maxToolCallsPerSession,
+      captureInputs: options.captureInputs ?? false,
+      captureOutputs: options.captureOutputs ?? false,
+      costOverrides: options.costOverrides ?? {}
+    };
+    this.redactKeys = options.redactKeys ?? DEFAULT_REDACT_KEYS;
+    this.tracker = new import_mcp_sdk.McpEventTracker(key, this.opts.serverName, options.ingestUrl);
+    this.budget = new import_mcp_sdk.SessionBudgetChecker(orgFromKey(key));
+  }
+  /**
+   * Start the proxy. Blocks until the AI client disconnects.
+   * Spawn the target server, connect both transports, then wait.
+   */
+  async run() {
+    const targetTransport = new import_stdio2.StdioClientTransport({
+      command: this.targetCommand,
+      args: this.targetArgs,
+      stderr: "pipe"
+      // don't let target's stderr pollute our stdout
+    });
+    const targetClient = new import_client.Client(
+      { name: "prism-proxy-client", version: "1.0.0" },
+      { capabilities: {} }
+    );
+    await targetClient.connect(targetTransport);
+    const caps = targetClient.getServerCapabilities() ?? {};
+    const hasTools = !!caps.tools;
+    const hasResources = !!caps.resources;
+    const hasPrompts = !!caps.prompts;
+    const proxyCaps = {};
+    if (hasTools) proxyCaps.tools = {};
+    if (hasResources) proxyCaps.resources = { listChanged: false, subscribe: false };
+    if (hasPrompts) proxyCaps.prompts = { listChanged: false };
+    const proxyServer = new import_server.Server(
+      { name: this.opts.serverName, version: "1.0.0" },
+      { capabilities: proxyCaps }
+    );
+    if (hasTools) {
+      proxyServer.setRequestHandler(
+        import_types.ListToolsRequestSchema,
+        () => targetClient.listTools()
+      );
+      proxyServer.setRequestHandler(
+        import_types.CallToolRequestSchema,
+        (req) => this._handleToolCall(req.params.name, req.params.arguments ?? {}, targetClient)
+      );
+    }
+    if (hasResources) {
+      proxyServer.setRequestHandler(
+        import_types.ListResourcesRequestSchema,
+        () => targetClient.listResources()
+      );
+      proxyServer.setRequestHandler(
+        import_types.ListResourceTemplatesRequestSchema,
+        async () => {
+          try {
+            return await targetClient.listResourceTemplates();
+          } catch {
+            return { resourceTemplates: [] };
+          }
+        }
+      );
+      proxyServer.setRequestHandler(
+        import_types.ReadResourceRequestSchema,
+        (req) => this._handleResourceRead(req.params.uri, targetClient)
+      );
+    }
+    if (hasPrompts) {
+      proxyServer.setRequestHandler(
+        import_types.ListPromptsRequestSchema,
+        () => targetClient.listPrompts()
+      );
+      proxyServer.setRequestHandler(
+        import_types.GetPromptRequestSchema,
+        (req) => this._handlePromptGet(
+          req.params.name,
+          req.params.arguments,
+          targetClient
+        )
+      );
+    }
+    const proxyTransport = new import_stdio.StdioServerTransport();
+    await proxyServer.connect(proxyTransport);
+    await new Promise((resolve) => {
+      proxyTransport.onclose = resolve;
+    });
+    try {
+      await targetClient.close();
+    } catch {
+    }
+  }
+  // ── Private: tool call intercept ──────────────────────────────────────────
+  async _handleToolCall(name, args, target) {
+    await this._checkBudget();
+    const estimatedCost = (0, import_mcp_sdk.lookupToolCost)(name, this.opts.costOverrides);
+    const start = Date.now();
+    const eventTags = {};
+    if (this.opts.captureInputs) {
+      eventTags["tool_input"] = safeJson(args, this.redactKeys, 1e3);
+    }
+    let status = "ok";
+    let errorMsg = "";
+    let result;
+    try {
+      result = await target.callTool({ name, arguments: args });
+    } catch (err) {
+      status = "error";
+      errorMsg = err instanceof Error ? err.message : String(err);
+      this._ship("tool", name, Date.now() - start, estimatedCost, "estimated", status, errorMsg, eventTags);
+      throw err;
+    }
+    const latencyMs = Date.now() - start;
+    if (result.isError) {
+      status = "error";
+      const content = result.content;
+      const errBlock = Array.isArray(content) ? content.find((c) => c?.type === "text") : null;
+      errorMsg = errBlock?.text ?? "Tool returned error";
+    }
+    if (this.opts.captureOutputs) {
+      eventTags["tool_output"] = safeJson(result.content, this.redactKeys, 1e3);
+    }
+    this._ship("tool", name, latencyMs, estimatedCost, "estimated", status, errorMsg, eventTags);
+    return result;
+  }
+  // ── Private: resource read intercept ─────────────────────────────────────
+  async _handleResourceRead(uri, target) {
+    await this._checkBudget();
+    const start = Date.now();
+    let status = "ok";
+    let errorMsg = "";
+    let result;
+    try {
+      result = await target.readResource({ uri });
+    } catch (err) {
+      status = "error";
+      errorMsg = err instanceof Error ? err.message : String(err);
+      this._ship("resource", uri, Date.now() - start, 0, "estimated", status, errorMsg, {});
+      throw err;
+    }
+    this._ship("resource", uri, Date.now() - start, 0, "estimated", status, errorMsg, {});
+    return result;
+  }
+  // ── Private: prompt get intercept ────────────────────────────────────────
+  async _handlePromptGet(name, args, target) {
+    await this._checkBudget();
+    const start = Date.now();
+    let status = "ok";
+    let errorMsg = "";
+    let result;
+    try {
+      result = await target.getPrompt({ name, arguments: args });
+    } catch (err) {
+      status = "error";
+      errorMsg = err instanceof Error ? err.message : String(err);
+      this._ship("prompt", name, Date.now() - start, 0, "estimated", status, errorMsg, {});
+      throw err;
+    }
+    this._ship("prompt", name, Date.now() - start, 0, "estimated", status, errorMsg, {});
+    return result;
+  }
+  // ── Private: shared helpers ───────────────────────────────────────────────
+  async _checkBudget() {
+    await this.budget.checkOrThrow(
+      this.opts.sessionId,
+      this.opts.sessionBudgetUsd,
+      this.opts.maxToolCallsPerSession
+    );
+  }
+  _ship(primitiveType, toolName, latencyMs, costUsd, costStatus, status, errorMessage, tags) {
+    this.tracker.capture({
+      timestamp: ts(),
+      session_id: this.opts.sessionId,
+      project_id: this.opts.project,
+      team_id: this.opts.team,
+      user_id: "",
+      environment: this.opts.environment,
+      tool_name: toolName,
+      downstream_resource: "",
+      execution_latency_ms: latencyMs,
+      tool_cost_usd: costUsd,
+      cost_status: costStatus,
+      status,
+      error_message: errorMessage,
+      llm_request_id: "",
+      primitive_type: primitiveType,
+      tags
+    }).catch(() => {
+    });
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  PrismMcpProxy
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/proxy.ts"],"sourcesContent":["export { PrismMcpProxy } from \"./proxy.js\";\nexport type { ProxyOptions } from \"./types.js\";\n","/**\n * PrismMcpProxy — transparent process-level MCP proxy.\n *\n * Architecture:\n *   AI Client (Claude Desktop, Cline, etc.)\n *       ↕  MCP / stdio\n *   PrismMcpProxy                ← this package\n *       ↕  MCP / stdio\n *   Target MCP server (any server, unmodified)\n *\n * The proxy:\n *  1. Spawns the target as a child process via StdioClientTransport\n *  2. Discovers what capabilities the target declares (tools / resources / prompts)\n *  3. Creates a proxy Server that re-advertises those same capabilities\n *  4. Intercepts every tool call, resource read, and prompt get:\n *       – checks session budget + loop limits (pre-call)\n *       – forwards the request to the target\n *       – measures wall-clock latency\n *       – ships a fire-and-forget McpEvent to /api/mcp/ingest\n *       – returns the target's response unchanged\n *  5. Connects the proxy Server to the caller via StdioServerTransport\n */\n\nimport { Server }               from \"@modelcontextprotocol/sdk/server/index.js\";\nimport { StdioServerTransport } from \"@modelcontextprotocol/sdk/server/stdio.js\";\nimport { Client }               from \"@modelcontextprotocol/sdk/client/index.js\";\nimport { StdioClientTransport } from \"@modelcontextprotocol/sdk/client/stdio.js\";\nimport {\n  CallToolRequestSchema,\n  GetPromptRequestSchema,\n  ListPromptsRequestSchema,\n  ListResourcesRequestSchema,\n  ListResourceTemplatesRequestSchema,\n  ListToolsRequestSchema,\n  ReadResourceRequestSchema,\n  type ServerCapabilities,\n} from \"@modelcontextprotocol/sdk/types.js\";\nimport { McpEventTracker, SessionBudgetChecker, lookupToolCost } from \"@prism-llm-labs/mcp-sdk\";\nimport type { McpPrimitiveType } from \"@prism-llm-labs/mcp-sdk\";\nimport type { ProxyOptions } from \"./types.js\";\n\n// ── Helpers ───────────────────────────────────────────────────────────────────\n\nconst DEFAULT_REDACT_KEYS = [\"password\", \"token\", \"key\", \"secret\", \"api_key\", \"authorization\"];\n\nfunction redactObject(obj: unknown, keys: string[]): unknown {\n  if (typeof obj !== \"object\" || obj === null) return obj;\n  if (Array.isArray(obj)) return obj.map((v) => redactObject(v, keys));\n  const out: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(obj as Record<string, unknown>)) {\n    out[k] = keys.some((r) => k.toLowerCase().includes(r.toLowerCase()))\n      ? \"[REDACTED]\"\n      : redactObject(v, keys);\n  }\n  return out;\n}\n\nfunction safeJson(val: unknown, redactKeys: string[], maxLen: number): string {\n  try {\n    const s = JSON.stringify(redactObject(val, redactKeys));\n    return s.length <= maxLen ? s : s.slice(0, maxLen) + \"…\";\n  } catch {\n    return \"[unserializable]\";\n  }\n}\n\nfunction orgFromKey(key: string): string {\n  const parts = key.split(\"_\");\n  return parts.length >= 4 ? (parts[2] ?? \"\") : \"\";\n}\n\nfunction ts(): string {\n  return new Date().toISOString().replace(\"T\", \" \").slice(0, 23);\n}\n\n// ── Core class ────────────────────────────────────────────────────────────────\n\nexport class PrismMcpProxy {\n  private readonly opts: {\n    prismKey:              string;\n    serverName:            string;\n    project:               string;\n    team:                  string;\n    environment:           string;\n    sessionId:             string;\n    sessionBudgetUsd?:     number;\n    maxToolCallsPerSession?: number;\n    captureInputs:         boolean;\n    captureOutputs:        boolean;\n    costOverrides:         Record<string, number>;\n  };\n  private readonly tracker:    McpEventTracker;\n  private readonly budget:     SessionBudgetChecker;\n  private readonly redactKeys: string[];\n\n  constructor(\n    private readonly targetCommand: string,\n    private readonly targetArgs:    string[],\n    options: ProxyOptions = {},\n  ) {\n    const key = options.prismKey ?? process.env[\"PRISM_API_KEY\"] ?? \"\";\n    if (!key) {\n      process.stderr.write(\"[prism-proxy] PRISM_API_KEY not set — telemetry disabled\\n\");\n    }\n\n    this.opts = {\n      prismKey:              key,\n      serverName:            options.serverName     ?? targetCommand.split(/[\\\\/]/).pop() ?? \"mcp-server\",\n      project:               options.project        ?? process.env[\"PRISM_PROJECT\"]     ?? \"\",\n      team:                  options.team           ?? process.env[\"PRISM_TEAM\"]        ?? \"\",\n      environment:           options.environment    ?? process.env[\"PRISM_ENVIRONMENT\"] ?? \"production\",\n      sessionId:             options.sessionId      ?? crypto.randomUUID(),\n      sessionBudgetUsd:      options.sessionBudgetUsd,\n      maxToolCallsPerSession: options.maxToolCallsPerSession,\n      captureInputs:         options.captureInputs  ?? false,\n      captureOutputs:        options.captureOutputs ?? false,\n      costOverrides:         options.costOverrides  ?? {},\n    };\n\n    this.redactKeys = options.redactKeys ?? DEFAULT_REDACT_KEYS;\n    this.tracker    = new McpEventTracker(key, this.opts.serverName, options.ingestUrl);\n    this.budget     = new SessionBudgetChecker(orgFromKey(key));\n  }\n\n  /**\n   * Start the proxy. Blocks until the AI client disconnects.\n   * Spawn the target server, connect both transports, then wait.\n   */\n  async run(): Promise<void> {\n    // ── 1. Connect to target server ──────────────────────────────────────────\n    const targetTransport = new StdioClientTransport({\n      command: this.targetCommand,\n      args:    this.targetArgs,\n      stderr:  \"pipe\",   // don't let target's stderr pollute our stdout\n    });\n\n    const targetClient = new Client(\n      { name: \"prism-proxy-client\", version: \"1.0.0\" },\n      { capabilities: {} },\n    );\n\n    await targetClient.connect(targetTransport);\n\n    const caps: ServerCapabilities = targetClient.getServerCapabilities() ?? {};\n    const hasTools     = !!caps.tools;\n    const hasResources = !!caps.resources;\n    const hasPrompts   = !!caps.prompts;\n\n    // ── 2. Build proxy server ────────────────────────────────────────────────\n    const proxyCaps: ServerCapabilities = {};\n    if (hasTools)     proxyCaps.tools     = {};\n    if (hasResources) proxyCaps.resources = { listChanged: false, subscribe: false };\n    if (hasPrompts)   proxyCaps.prompts   = { listChanged: false };\n\n    const proxyServer = new Server(\n      { name: this.opts.serverName, version: \"1.0.0\" },\n      { capabilities: proxyCaps },\n    );\n\n    // ── 3. Register handlers ─────────────────────────────────────────────────\n\n    if (hasTools) {\n      proxyServer.setRequestHandler(\n        ListToolsRequestSchema,\n        () => targetClient.listTools(),\n      );\n\n      proxyServer.setRequestHandler(\n        CallToolRequestSchema,\n        (req) => this._handleToolCall(req.params.name, req.params.arguments ?? {}, targetClient),\n      );\n    }\n\n    if (hasResources) {\n      proxyServer.setRequestHandler(\n        ListResourcesRequestSchema,\n        () => targetClient.listResources(),\n      );\n\n      // Resource templates — not all servers support this; ignore if unavailable\n      proxyServer.setRequestHandler(\n        ListResourceTemplatesRequestSchema,\n        async () => {\n          try {\n            return await targetClient.listResourceTemplates();\n          } catch {\n            return { resourceTemplates: [] };\n          }\n        },\n      );\n\n      proxyServer.setRequestHandler(\n        ReadResourceRequestSchema,\n        (req) => this._handleResourceRead(req.params.uri, targetClient),\n      );\n    }\n\n    if (hasPrompts) {\n      proxyServer.setRequestHandler(\n        ListPromptsRequestSchema,\n        () => targetClient.listPrompts(),\n      );\n\n      proxyServer.setRequestHandler(\n        GetPromptRequestSchema,\n        (req) => this._handlePromptGet(\n          req.params.name,\n          req.params.arguments as Record<string, string> | undefined,\n          targetClient,\n        ),\n      );\n    }\n\n    // ── 4. Connect proxy to the AI client via stdio ──────────────────────────\n    const proxyTransport = new StdioServerTransport();\n    await proxyServer.connect(proxyTransport);\n\n    // ── 5. Wait for disconnect ───────────────────────────────────────────────\n    await new Promise<void>((resolve) => {\n      proxyTransport.onclose = resolve;\n    });\n\n    try { await targetClient.close(); } catch { /* ignore */ }\n  }\n\n  // ── Private: tool call intercept ──────────────────────────────────────────\n\n  private async _handleToolCall(\n    name:   string,\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    args:   Record<string, any>,\n    target: Client,\n  ) {\n    await this._checkBudget();\n\n    const estimatedCost = lookupToolCost(name, this.opts.costOverrides);\n    const start         = Date.now();\n    const eventTags: Record<string, string> = {};\n\n    if (this.opts.captureInputs) {\n      eventTags[\"tool_input\"] = safeJson(args, this.redactKeys, 1000);\n    }\n\n    let status:   \"ok\" | \"error\" | \"timeout\" = \"ok\";\n    let errorMsg  = \"\";\n\n    let result: Awaited<ReturnType<Client[\"callTool\"]>>;\n    try {\n      result = await target.callTool({ name, arguments: args });\n    } catch (err) {\n      status   = \"error\";\n      errorMsg = err instanceof Error ? err.message : String(err);\n      this._ship(\"tool\", name, Date.now() - start, estimatedCost, \"estimated\", status, errorMsg, eventTags);\n      throw err;\n    }\n\n    const latencyMs = Date.now() - start;\n\n    // MCP tool errors are returned in the result (not thrown) with isError=true\n    if (result.isError) {\n      status = \"error\";\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const content = result.content as any[];\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const errBlock = Array.isArray(content) ? content.find((c: any) => c?.type === \"text\") : null;\n      errorMsg = (errBlock as { text?: string } | null)?.text ?? \"Tool returned error\";\n    }\n\n    if (this.opts.captureOutputs) {\n      eventTags[\"tool_output\"] = safeJson(result.content, this.redactKeys, 1000);\n    }\n\n    this._ship(\"tool\", name, latencyMs, estimatedCost, \"estimated\", status, errorMsg, eventTags);\n    return result;\n  }\n\n  // ── Private: resource read intercept ─────────────────────────────────────\n\n  private async _handleResourceRead(uri: string, target: Client) {\n    await this._checkBudget();\n\n    const start = Date.now();\n    let status: \"ok\" | \"error\" | \"timeout\" = \"ok\";\n    let errorMsg = \"\";\n\n    let result: Awaited<ReturnType<Client[\"readResource\"]>>;\n    try {\n      result = await target.readResource({ uri });\n    } catch (err) {\n      status   = \"error\";\n      errorMsg = err instanceof Error ? err.message : String(err);\n      this._ship(\"resource\", uri, Date.now() - start, 0, \"estimated\", status, errorMsg, {});\n      throw err;\n    }\n\n    this._ship(\"resource\", uri, Date.now() - start, 0, \"estimated\", status, errorMsg, {});\n    return result;\n  }\n\n  // ── Private: prompt get intercept ────────────────────────────────────────\n\n  private async _handlePromptGet(\n    name:   string,\n    args:   Record<string, string> | undefined,\n    target: Client,\n  ) {\n    await this._checkBudget();\n\n    const start = Date.now();\n    let status: \"ok\" | \"error\" | \"timeout\" = \"ok\";\n    let errorMsg = \"\";\n\n    let result: Awaited<ReturnType<Client[\"getPrompt\"]>>;\n    try {\n      result = await target.getPrompt({ name, arguments: args });\n    } catch (err) {\n      status   = \"error\";\n      errorMsg = err instanceof Error ? err.message : String(err);\n      this._ship(\"prompt\", name, Date.now() - start, 0, \"estimated\", status, errorMsg, {});\n      throw err;\n    }\n\n    this._ship(\"prompt\", name, Date.now() - start, 0, \"estimated\", status, errorMsg, {});\n    return result;\n  }\n\n  // ── Private: shared helpers ───────────────────────────────────────────────\n\n  private async _checkBudget(): Promise<void> {\n    await this.budget.checkOrThrow(\n      this.opts.sessionId,\n      this.opts.sessionBudgetUsd,\n      this.opts.maxToolCallsPerSession,\n    );\n  }\n\n  private _ship(\n    primitiveType: McpPrimitiveType,\n    toolName:      string,\n    latencyMs:     number,\n    costUsd:       number,\n    costStatus:    \"estimated\" | \"actual\",\n    status:        \"ok\" | \"error\" | \"timeout\",\n    errorMessage:  string,\n    tags:          Record<string, string>,\n  ): void {\n    this.tracker.capture({\n      timestamp:            ts(),\n      session_id:           this.opts.sessionId,\n      project_id:           this.opts.project,\n      team_id:              this.opts.team,\n      user_id:              \"\",\n      environment:          this.opts.environment,\n      tool_name:            toolName,\n      downstream_resource:  \"\",\n      execution_latency_ms: latencyMs,\n      tool_cost_usd:        costUsd,\n      cost_status:          costStatus,\n      status,\n      error_message:        errorMessage,\n      llm_request_id:       \"\",\n      primitive_type:       primitiveType,\n      tags,\n    }).catch(() => {});\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACuBA,oBAAqC;AACrC,mBAAqC;AACrC,oBAAqC;AACrC,IAAAA,gBAAqC;AACrC,mBASO;AACP,qBAAsE;AAMtE,IAAM,sBAAsB,CAAC,YAAY,SAAS,OAAO,UAAU,WAAW,eAAe;AAE7F,SAAS,aAAa,KAAc,MAAyB;AAC3D,MAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM,QAAO;AACpD,MAAI,MAAM,QAAQ,GAAG,EAAG,QAAO,IAAI,IAAI,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AACnE,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAA8B,GAAG;AACnE,QAAI,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,IAC/D,eACA,aAAa,GAAG,IAAI;AAAA,EAC1B;AACA,SAAO;AACT;AAEA,SAAS,SAAS,KAAc,YAAsB,QAAwB;AAC5E,MAAI;AACF,UAAM,IAAI,KAAK,UAAU,aAAa,KAAK,UAAU,CAAC;AACtD,WAAO,EAAE,UAAU,SAAS,IAAI,EAAE,MAAM,GAAG,MAAM,IAAI;AAAA,EACvD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,WAAW,KAAqB;AACvC,QAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,SAAO,MAAM,UAAU,IAAK,MAAM,CAAC,KAAK,KAAM;AAChD;AAEA,SAAS,KAAa;AACpB,UAAO,oBAAI,KAAK,GAAE,YAAY,EAAE,QAAQ,KAAK,GAAG,EAAE,MAAM,GAAG,EAAE;AAC/D;AAIO,IAAM,gBAAN,MAAoB;AAAA,EAkBzB,YACmB,eACA,YACjB,UAAwB,CAAC,GACzB;AAHiB;AACA;AAGjB,UAAM,MAAM,QAAQ,YAAY,QAAQ,IAAI,eAAe,KAAK;AAChE,QAAI,CAAC,KAAK;AACR,cAAQ,OAAO,MAAM,iEAA4D;AAAA,IACnF;AAEA,SAAK,OAAO;AAAA,MACV,UAAuB;AAAA,MACvB,YAAuB,QAAQ,cAAkB,cAAc,MAAM,OAAO,EAAE,IAAI,KAAK;AAAA,MACvF,SAAuB,QAAQ,WAAkB,QAAQ,IAAI,eAAe,KAAS;AAAA,MACrF,MAAuB,QAAQ,QAAkB,QAAQ,IAAI,YAAY,KAAY;AAAA,MACrF,aAAuB,QAAQ,eAAkB,QAAQ,IAAI,mBAAmB,KAAK;AAAA,MACrF,WAAuB,QAAQ,aAAkB,OAAO,WAAW;AAAA,MACnE,kBAAuB,QAAQ;AAAA,MAC/B,wBAAwB,QAAQ;AAAA,MAChC,eAAuB,QAAQ,iBAAkB;AAAA,MACjD,gBAAuB,QAAQ,kBAAkB;AAAA,MACjD,eAAuB,QAAQ,iBAAkB,CAAC;AAAA,IACpD;AAEA,SAAK,aAAa,QAAQ,cAAc;AACxC,SAAK,UAAa,IAAI,+BAAgB,KAAK,KAAK,KAAK,YAAY,QAAQ,SAAS;AAClF,SAAK,SAAa,IAAI,oCAAqB,WAAW,GAAG,CAAC;AAAA,EAC5D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,MAAqB;AAEzB,UAAM,kBAAkB,IAAI,mCAAqB;AAAA,MAC/C,SAAS,KAAK;AAAA,MACd,MAAS,KAAK;AAAA,MACd,QAAS;AAAA;AAAA,IACX,CAAC;AAED,UAAM,eAAe,IAAI;AAAA,MACvB,EAAE,MAAM,sBAAsB,SAAS,QAAQ;AAAA,MAC/C,EAAE,cAAc,CAAC,EAAE;AAAA,IACrB;AAEA,UAAM,aAAa,QAAQ,eAAe;AAE1C,UAAM,OAA2B,aAAa,sBAAsB,KAAK,CAAC;AAC1E,UAAM,WAAe,CAAC,CAAC,KAAK;AAC5B,UAAM,eAAe,CAAC,CAAC,KAAK;AAC5B,UAAM,aAAe,CAAC,CAAC,KAAK;AAG5B,UAAM,YAAgC,CAAC;AACvC,QAAI,SAAc,WAAU,QAAY,CAAC;AACzC,QAAI,aAAc,WAAU,YAAY,EAAE,aAAa,OAAO,WAAW,MAAM;AAC/E,QAAI,WAAc,WAAU,UAAY,EAAE,aAAa,MAAM;AAE7D,UAAM,cAAc,IAAI;AAAA,MACtB,EAAE,MAAM,KAAK,KAAK,YAAY,SAAS,QAAQ;AAAA,MAC/C,EAAE,cAAc,UAAU;AAAA,IAC5B;AAIA,QAAI,UAAU;AACZ,kBAAY;AAAA,QACV;AAAA,QACA,MAAM,aAAa,UAAU;AAAA,MAC/B;AAEA,kBAAY;AAAA,QACV;AAAA,QACA,CAAC,QAAQ,KAAK,gBAAgB,IAAI,OAAO,MAAM,IAAI,OAAO,aAAa,CAAC,GAAG,YAAY;AAAA,MACzF;AAAA,IACF;AAEA,QAAI,cAAc;AAChB,kBAAY;AAAA,QACV;AAAA,QACA,MAAM,aAAa,cAAc;AAAA,MACnC;AAGA,kBAAY;AAAA,QACV;AAAA,QACA,YAAY;AACV,cAAI;AACF,mBAAO,MAAM,aAAa,sBAAsB;AAAA,UAClD,QAAQ;AACN,mBAAO,EAAE,mBAAmB,CAAC,EAAE;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAEA,kBAAY;AAAA,QACV;AAAA,QACA,CAAC,QAAQ,KAAK,oBAAoB,IAAI,OAAO,KAAK,YAAY;AAAA,MAChE;AAAA,IACF;AAEA,QAAI,YAAY;AACd,kBAAY;AAAA,QACV;AAAA,QACA,MAAM,aAAa,YAAY;AAAA,MACjC;AAEA,kBAAY;AAAA,QACV;AAAA,QACA,CAAC,QAAQ,KAAK;AAAA,UACZ,IAAI,OAAO;AAAA,UACX,IAAI,OAAO;AAAA,UACX;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,UAAM,iBAAiB,IAAI,kCAAqB;AAChD,UAAM,YAAY,QAAQ,cAAc;AAGxC,UAAM,IAAI,QAAc,CAAC,YAAY;AACnC,qBAAe,UAAU;AAAA,IAC3B,CAAC;AAED,QAAI;AAAE,YAAM,aAAa,MAAM;AAAA,IAAG,QAAQ;AAAA,IAAe;AAAA,EAC3D;AAAA;AAAA,EAIA,MAAc,gBACZ,MAEA,MACA,QACA;AACA,UAAM,KAAK,aAAa;AAExB,UAAM,oBAAgB,+BAAe,MAAM,KAAK,KAAK,aAAa;AAClE,UAAM,QAAgB,KAAK,IAAI;AAC/B,UAAM,YAAoC,CAAC;AAE3C,QAAI,KAAK,KAAK,eAAe;AAC3B,gBAAU,YAAY,IAAI,SAAS,MAAM,KAAK,YAAY,GAAI;AAAA,IAChE;AAEA,QAAI,SAAuC;AAC3C,QAAI,WAAY;AAEhB,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,OAAO,SAAS,EAAE,MAAM,WAAW,KAAK,CAAC;AAAA,IAC1D,SAAS,KAAK;AACZ,eAAW;AACX,iBAAW,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC1D,WAAK,MAAM,QAAQ,MAAM,KAAK,IAAI,IAAI,OAAO,eAAe,aAAa,QAAQ,UAAU,SAAS;AACpG,YAAM;AAAA,IACR;AAEA,UAAM,YAAY,KAAK,IAAI,IAAI;AAG/B,QAAI,OAAO,SAAS;AAClB,eAAS;AAET,YAAM,UAAU,OAAO;AAEvB,YAAM,WAAW,MAAM,QAAQ,OAAO,IAAI,QAAQ,KAAK,CAAC,MAAW,GAAG,SAAS,MAAM,IAAI;AACzF,iBAAY,UAAuC,QAAQ;AAAA,IAC7D;AAEA,QAAI,KAAK,KAAK,gBAAgB;AAC5B,gBAAU,aAAa,IAAI,SAAS,OAAO,SAAS,KAAK,YAAY,GAAI;AAAA,IAC3E;AAEA,SAAK,MAAM,QAAQ,MAAM,WAAW,eAAe,aAAa,QAAQ,UAAU,SAAS;AAC3F,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,MAAc,oBAAoB,KAAa,QAAgB;AAC7D,UAAM,KAAK,aAAa;AAExB,UAAM,QAAQ,KAAK,IAAI;AACvB,QAAI,SAAqC;AACzC,QAAI,WAAW;AAEf,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,OAAO,aAAa,EAAE,IAAI,CAAC;AAAA,IAC5C,SAAS,KAAK;AACZ,eAAW;AACX,iBAAW,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC1D,WAAK,MAAM,YAAY,KAAK,KAAK,IAAI,IAAI,OAAO,GAAG,aAAa,QAAQ,UAAU,CAAC,CAAC;AACpF,YAAM;AAAA,IACR;AAEA,SAAK,MAAM,YAAY,KAAK,KAAK,IAAI,IAAI,OAAO,GAAG,aAAa,QAAQ,UAAU,CAAC,CAAC;AACpF,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,MAAc,iBACZ,MACA,MACA,QACA;AACA,UAAM,KAAK,aAAa;AAExB,UAAM,QAAQ,KAAK,IAAI;AACvB,QAAI,SAAqC;AACzC,QAAI,WAAW;AAEf,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,OAAO,UAAU,EAAE,MAAM,WAAW,KAAK,CAAC;AAAA,IAC3D,SAAS,KAAK;AACZ,eAAW;AACX,iBAAW,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC1D,WAAK,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,GAAG,aAAa,QAAQ,UAAU,CAAC,CAAC;AACnF,YAAM;AAAA,IACR;AAEA,SAAK,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,GAAG,aAAa,QAAQ,UAAU,CAAC,CAAC;AACnF,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,MAAc,eAA8B;AAC1C,UAAM,KAAK,OAAO;AAAA,MAChB,KAAK,KAAK;AAAA,MACV,KAAK,KAAK;AAAA,MACV,KAAK,KAAK;AAAA,IACZ;AAAA,EACF;AAAA,EAEQ,MACN,eACA,UACA,WACA,SACA,YACA,QACA,cACA,MACM;AACN,SAAK,QAAQ,QAAQ;AAAA,MACnB,WAAsB,GAAG;AAAA,MACzB,YAAsB,KAAK,KAAK;AAAA,MAChC,YAAsB,KAAK,KAAK;AAAA,MAChC,SAAsB,KAAK,KAAK;AAAA,MAChC,SAAsB;AAAA,MACtB,aAAsB,KAAK,KAAK;AAAA,MAChC,WAAsB;AAAA,MACtB,qBAAsB;AAAA,MACtB,sBAAsB;AAAA,MACtB,eAAsB;AAAA,MACtB,aAAsB;AAAA,MACtB;AAAA,MACA,eAAsB;AAAA,MACtB,gBAAsB;AAAA,MACtB,gBAAsB;AAAA,MACtB;AAAA,IACF,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACnB;AACF;","names":["import_stdio"]}

package/dist/index.mjs

@@ -0,0 +1,250 @@
+// src/proxy.ts
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
+import {
+  CallToolRequestSchema,
+  GetPromptRequestSchema,
+  ListPromptsRequestSchema,
+  ListResourcesRequestSchema,
+  ListResourceTemplatesRequestSchema,
+  ListToolsRequestSchema,
+  ReadResourceRequestSchema
+} from "@modelcontextprotocol/sdk/types.js";
+import { McpEventTracker, SessionBudgetChecker, lookupToolCost } from "@prism-llm-labs/mcp-sdk";
+var DEFAULT_REDACT_KEYS = ["password", "token", "key", "secret", "api_key", "authorization"];
+function redactObject(obj, keys) {
+  if (typeof obj !== "object" || obj === null) return obj;
+  if (Array.isArray(obj)) return obj.map((v) => redactObject(v, keys));
+  const out = {};
+  for (const [k, v] of Object.entries(obj)) {
+    out[k] = keys.some((r) => k.toLowerCase().includes(r.toLowerCase())) ? "[REDACTED]" : redactObject(v, keys);
+  }
+  return out;
+}
+function safeJson(val, redactKeys, maxLen) {
+  try {
+    const s = JSON.stringify(redactObject(val, redactKeys));
+    return s.length <= maxLen ? s : s.slice(0, maxLen) + "\u2026";
+  } catch {
+    return "[unserializable]";
+  }
+}
+function orgFromKey(key) {
+  const parts = key.split("_");
+  return parts.length >= 4 ? parts[2] ?? "" : "";
+}
+function ts() {
+  return (/* @__PURE__ */ new Date()).toISOString().replace("T", " ").slice(0, 23);
+}
+var PrismMcpProxy = class {
+  constructor(targetCommand, targetArgs, options = {}) {
+    this.targetCommand = targetCommand;
+    this.targetArgs = targetArgs;
+    const key = options.prismKey ?? process.env["PRISM_API_KEY"] ?? "";
+    if (!key) {
+      process.stderr.write("[prism-proxy] PRISM_API_KEY not set \u2014 telemetry disabled\n");
+    }
+    this.opts = {
+      prismKey: key,
+      serverName: options.serverName ?? targetCommand.split(/[\\/]/).pop() ?? "mcp-server",
+      project: options.project ?? process.env["PRISM_PROJECT"] ?? "",
+      team: options.team ?? process.env["PRISM_TEAM"] ?? "",
+      environment: options.environment ?? process.env["PRISM_ENVIRONMENT"] ?? "production",
+      sessionId: options.sessionId ?? crypto.randomUUID(),
+      sessionBudgetUsd: options.sessionBudgetUsd,
+      maxToolCallsPerSession: options.maxToolCallsPerSession,
+      captureInputs: options.captureInputs ?? false,
+      captureOutputs: options.captureOutputs ?? false,
+      costOverrides: options.costOverrides ?? {}
+    };
+    this.redactKeys = options.redactKeys ?? DEFAULT_REDACT_KEYS;
+    this.tracker = new McpEventTracker(key, this.opts.serverName, options.ingestUrl);
+    this.budget = new SessionBudgetChecker(orgFromKey(key));
+  }
+  /**
+   * Start the proxy. Blocks until the AI client disconnects.
+   * Spawn the target server, connect both transports, then wait.
+   */
+  async run() {
+    const targetTransport = new StdioClientTransport({
+      command: this.targetCommand,
+      args: this.targetArgs,
+      stderr: "pipe"
+      // don't let target's stderr pollute our stdout
+    });
+    const targetClient = new Client(
+      { name: "prism-proxy-client", version: "1.0.0" },
+      { capabilities: {} }
+    );
+    await targetClient.connect(targetTransport);
+    const caps = targetClient.getServerCapabilities() ?? {};
+    const hasTools = !!caps.tools;
+    const hasResources = !!caps.resources;
+    const hasPrompts = !!caps.prompts;
+    const proxyCaps = {};
+    if (hasTools) proxyCaps.tools = {};
+    if (hasResources) proxyCaps.resources = { listChanged: false, subscribe: false };
+    if (hasPrompts) proxyCaps.prompts = { listChanged: false };
+    const proxyServer = new Server(
+      { name: this.opts.serverName, version: "1.0.0" },
+      { capabilities: proxyCaps }
+    );
+    if (hasTools) {
+      proxyServer.setRequestHandler(
+        ListToolsRequestSchema,
+        () => targetClient.listTools()
+      );
+      proxyServer.setRequestHandler(
+        CallToolRequestSchema,
+        (req) => this._handleToolCall(req.params.name, req.params.arguments ?? {}, targetClient)
+      );
+    }
+    if (hasResources) {
+      proxyServer.setRequestHandler(
+        ListResourcesRequestSchema,
+        () => targetClient.listResources()
+      );
+      proxyServer.setRequestHandler(
+        ListResourceTemplatesRequestSchema,
+        async () => {
+          try {
+            return await targetClient.listResourceTemplates();
+          } catch {
+            return { resourceTemplates: [] };
+          }
+        }
+      );
+      proxyServer.setRequestHandler(
+        ReadResourceRequestSchema,
+        (req) => this._handleResourceRead(req.params.uri, targetClient)
+      );
+    }
+    if (hasPrompts) {
+      proxyServer.setRequestHandler(
+        ListPromptsRequestSchema,
+        () => targetClient.listPrompts()
+      );
+      proxyServer.setRequestHandler(
+        GetPromptRequestSchema,
+        (req) => this._handlePromptGet(
+          req.params.name,
+          req.params.arguments,
+          targetClient
+        )
+      );
+    }
+    const proxyTransport = new StdioServerTransport();
+    await proxyServer.connect(proxyTransport);
+    await new Promise((resolve) => {
+      proxyTransport.onclose = resolve;
+    });
+    try {
+      await targetClient.close();
+    } catch {
+    }
+  }
+  // ── Private: tool call intercept ──────────────────────────────────────────
+  async _handleToolCall(name, args, target) {
+    await this._checkBudget();
+    const estimatedCost = lookupToolCost(name, this.opts.costOverrides);
+    const start = Date.now();
+    const eventTags = {};
+    if (this.opts.captureInputs) {
+      eventTags["tool_input"] = safeJson(args, this.redactKeys, 1e3);
+    }
+    let status = "ok";
+    let errorMsg = "";
+    let result;
+    try {
+      result = await target.callTool({ name, arguments: args });
+    } catch (err) {
+      status = "error";
+      errorMsg = err instanceof Error ? err.message : String(err);
+      this._ship("tool", name, Date.now() - start, estimatedCost, "estimated", status, errorMsg, eventTags);
+      throw err;
+    }
+    const latencyMs = Date.now() - start;
+    if (result.isError) {
+      status = "error";
+      const content = result.content;
+      const errBlock = Array.isArray(content) ? content.find((c) => c?.type === "text") : null;
+      errorMsg = errBlock?.text ?? "Tool returned error";
+    }
+    if (this.opts.captureOutputs) {
+      eventTags["tool_output"] = safeJson(result.content, this.redactKeys, 1e3);
+    }
+    this._ship("tool", name, latencyMs, estimatedCost, "estimated", status, errorMsg, eventTags);
+    return result;
+  }
+  // ── Private: resource read intercept ─────────────────────────────────────
+  async _handleResourceRead(uri, target) {
+    await this._checkBudget();
+    const start = Date.now();
+    let status = "ok";
+    let errorMsg = "";
+    let result;
+    try {
+      result = await target.readResource({ uri });
+    } catch (err) {
+      status = "error";
+      errorMsg = err instanceof Error ? err.message : String(err);
+      this._ship("resource", uri, Date.now() - start, 0, "estimated", status, errorMsg, {});
+      throw err;
+    }
+    this._ship("resource", uri, Date.now() - start, 0, "estimated", status, errorMsg, {});
+    return result;
+  }
+  // ── Private: prompt get intercept ────────────────────────────────────────
+  async _handlePromptGet(name, args, target) {
+    await this._checkBudget();
+    const start = Date.now();
+    let status = "ok";
+    let errorMsg = "";
+    let result;
+    try {
+      result = await target.getPrompt({ name, arguments: args });
+    } catch (err) {
+      status = "error";
+      errorMsg = err instanceof Error ? err.message : String(err);
+      this._ship("prompt", name, Date.now() - start, 0, "estimated", status, errorMsg, {});
+      throw err;
+    }
+    this._ship("prompt", name, Date.now() - start, 0, "estimated", status, errorMsg, {});
+    return result;
+  }
+  // ── Private: shared helpers ───────────────────────────────────────────────
+  async _checkBudget() {
+    await this.budget.checkOrThrow(
+      this.opts.sessionId,
+      this.opts.sessionBudgetUsd,
+      this.opts.maxToolCallsPerSession
+    );
+  }
+  _ship(primitiveType, toolName, latencyMs, costUsd, costStatus, status, errorMessage, tags) {
+    this.tracker.capture({
+      timestamp: ts(),
+      session_id: this.opts.sessionId,
+      project_id: this.opts.project,
+      team_id: this.opts.team,
+      user_id: "",
+      environment: this.opts.environment,
+      tool_name: toolName,
+      downstream_resource: "",
+      execution_latency_ms: latencyMs,
+      tool_cost_usd: costUsd,
+      cost_status: costStatus,
+      status,
+      error_message: errorMessage,
+      llm_request_id: "",
+      primitive_type: primitiveType,
+      tags
+    }).catch(() => {
+    });
+  }
+};
+export {
+  PrismMcpProxy
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/proxy.ts"],"sourcesContent":["/**\n * PrismMcpProxy — transparent process-level MCP proxy.\n *\n * Architecture:\n *   AI Client (Claude Desktop, Cline, etc.)\n *       ↕  MCP / stdio\n *   PrismMcpProxy                ← this package\n *       ↕  MCP / stdio\n *   Target MCP server (any server, unmodified)\n *\n * The proxy:\n *  1. Spawns the target as a child process via StdioClientTransport\n *  2. Discovers what capabilities the target declares (tools / resources / prompts)\n *  3. Creates a proxy Server that re-advertises those same capabilities\n *  4. Intercepts every tool call, resource read, and prompt get:\n *       – checks session budget + loop limits (pre-call)\n *       – forwards the request to the target\n *       – measures wall-clock latency\n *       – ships a fire-and-forget McpEvent to /api/mcp/ingest\n *       – returns the target's response unchanged\n *  5. Connects the proxy Server to the caller via StdioServerTransport\n */\n\nimport { Server }               from \"@modelcontextprotocol/sdk/server/index.js\";\nimport { StdioServerTransport } from \"@modelcontextprotocol/sdk/server/stdio.js\";\nimport { Client }               from \"@modelcontextprotocol/sdk/client/index.js\";\nimport { StdioClientTransport } from \"@modelcontextprotocol/sdk/client/stdio.js\";\nimport {\n  CallToolRequestSchema,\n  GetPromptRequestSchema,\n  ListPromptsRequestSchema,\n  ListResourcesRequestSchema,\n  ListResourceTemplatesRequestSchema,\n  ListToolsRequestSchema,\n  ReadResourceRequestSchema,\n  type ServerCapabilities,\n} from \"@modelcontextprotocol/sdk/types.js\";\nimport { McpEventTracker, SessionBudgetChecker, lookupToolCost } from \"@prism-llm-labs/mcp-sdk\";\nimport type { McpPrimitiveType } from \"@prism-llm-labs/mcp-sdk\";\nimport type { ProxyOptions } from \"./types.js\";\n\n// ── Helpers ───────────────────────────────────────────────────────────────────\n\nconst DEFAULT_REDACT_KEYS = [\"password\", \"token\", \"key\", \"secret\", \"api_key\", \"authorization\"];\n\nfunction redactObject(obj: unknown, keys: string[]): unknown {\n  if (typeof obj !== \"object\" || obj === null) return obj;\n  if (Array.isArray(obj)) return obj.map((v) => redactObject(v, keys));\n  const out: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(obj as Record<string, unknown>)) {\n    out[k] = keys.some((r) => k.toLowerCase().includes(r.toLowerCase()))\n      ? \"[REDACTED]\"\n      : redactObject(v, keys);\n  }\n  return out;\n}\n\nfunction safeJson(val: unknown, redactKeys: string[], maxLen: number): string {\n  try {\n    const s = JSON.stringify(redactObject(val, redactKeys));\n    return s.length <= maxLen ? s : s.slice(0, maxLen) + \"…\";\n  } catch {\n    return \"[unserializable]\";\n  }\n}\n\nfunction orgFromKey(key: string): string {\n  const parts = key.split(\"_\");\n  return parts.length >= 4 ? (parts[2] ?? \"\") : \"\";\n}\n\nfunction ts(): string {\n  return new Date().toISOString().replace(\"T\", \" \").slice(0, 23);\n}\n\n// ── Core class ────────────────────────────────────────────────────────────────\n\nexport class PrismMcpProxy {\n  private readonly opts: {\n    prismKey:              string;\n    serverName:            string;\n    project:               string;\n    team:                  string;\n    environment:           string;\n    sessionId:             string;\n    sessionBudgetUsd?:     number;\n    maxToolCallsPerSession?: number;\n    captureInputs:         boolean;\n    captureOutputs:        boolean;\n    costOverrides:         Record<string, number>;\n  };\n  private readonly tracker:    McpEventTracker;\n  private readonly budget:     SessionBudgetChecker;\n  private readonly redactKeys: string[];\n\n  constructor(\n    private readonly targetCommand: string,\n    private readonly targetArgs:    string[],\n    options: ProxyOptions = {},\n  ) {\n    const key = options.prismKey ?? process.env[\"PRISM_API_KEY\"] ?? \"\";\n    if (!key) {\n      process.stderr.write(\"[prism-proxy] PRISM_API_KEY not set — telemetry disabled\\n\");\n    }\n\n    this.opts = {\n      prismKey:              key,\n      serverName:            options.serverName     ?? targetCommand.split(/[\\\\/]/).pop() ?? \"mcp-server\",\n      project:               options.project        ?? process.env[\"PRISM_PROJECT\"]     ?? \"\",\n      team:                  options.team           ?? process.env[\"PRISM_TEAM\"]        ?? \"\",\n      environment:           options.environment    ?? process.env[\"PRISM_ENVIRONMENT\"] ?? \"production\",\n      sessionId:             options.sessionId      ?? crypto.randomUUID(),\n      sessionBudgetUsd:      options.sessionBudgetUsd,\n      maxToolCallsPerSession: options.maxToolCallsPerSession,\n      captureInputs:         options.captureInputs  ?? false,\n      captureOutputs:        options.captureOutputs ?? false,\n      costOverrides:         options.costOverrides  ?? {},\n    };\n\n    this.redactKeys = options.redactKeys ?? DEFAULT_REDACT_KEYS;\n    this.tracker    = new McpEventTracker(key, this.opts.serverName, options.ingestUrl);\n    this.budget     = new SessionBudgetChecker(orgFromKey(key));\n  }\n\n  /**\n   * Start the proxy. Blocks until the AI client disconnects.\n   * Spawn the target server, connect both transports, then wait.\n   */\n  async run(): Promise<void> {\n    // ── 1. Connect to target server ──────────────────────────────────────────\n    const targetTransport = new StdioClientTransport({\n      command: this.targetCommand,\n      args:    this.targetArgs,\n      stderr:  \"pipe\",   // don't let target's stderr pollute our stdout\n    });\n\n    const targetClient = new Client(\n      { name: \"prism-proxy-client\", version: \"1.0.0\" },\n      { capabilities: {} },\n    );\n\n    await targetClient.connect(targetTransport);\n\n    const caps: ServerCapabilities = targetClient.getServerCapabilities() ?? {};\n    const hasTools     = !!caps.tools;\n    const hasResources = !!caps.resources;\n    const hasPrompts   = !!caps.prompts;\n\n    // ── 2. Build proxy server ────────────────────────────────────────────────\n    const proxyCaps: ServerCapabilities = {};\n    if (hasTools)     proxyCaps.tools     = {};\n    if (hasResources) proxyCaps.resources = { listChanged: false, subscribe: false };\n    if (hasPrompts)   proxyCaps.prompts   = { listChanged: false };\n\n    const proxyServer = new Server(\n      { name: this.opts.serverName, version: \"1.0.0\" },\n      { capabilities: proxyCaps },\n    );\n\n    // ── 3. Register handlers ─────────────────────────────────────────────────\n\n    if (hasTools) {\n      proxyServer.setRequestHandler(\n        ListToolsRequestSchema,\n        () => targetClient.listTools(),\n      );\n\n      proxyServer.setRequestHandler(\n        CallToolRequestSchema,\n        (req) => this._handleToolCall(req.params.name, req.params.arguments ?? {}, targetClient),\n      );\n    }\n\n    if (hasResources) {\n      proxyServer.setRequestHandler(\n        ListResourcesRequestSchema,\n        () => targetClient.listResources(),\n      );\n\n      // Resource templates — not all servers support this; ignore if unavailable\n      proxyServer.setRequestHandler(\n        ListResourceTemplatesRequestSchema,\n        async () => {\n          try {\n            return await targetClient.listResourceTemplates();\n          } catch {\n            return { resourceTemplates: [] };\n          }\n        },\n      );\n\n      proxyServer.setRequestHandler(\n        ReadResourceRequestSchema,\n        (req) => this._handleResourceRead(req.params.uri, targetClient),\n      );\n    }\n\n    if (hasPrompts) {\n      proxyServer.setRequestHandler(\n        ListPromptsRequestSchema,\n        () => targetClient.listPrompts(),\n      );\n\n      proxyServer.setRequestHandler(\n        GetPromptRequestSchema,\n        (req) => this._handlePromptGet(\n          req.params.name,\n          req.params.arguments as Record<string, string> | undefined,\n          targetClient,\n        ),\n      );\n    }\n\n    // ── 4. Connect proxy to the AI client via stdio ──────────────────────────\n    const proxyTransport = new StdioServerTransport();\n    await proxyServer.connect(proxyTransport);\n\n    // ── 5. Wait for disconnect ───────────────────────────────────────────────\n    await new Promise<void>((resolve) => {\n      proxyTransport.onclose = resolve;\n    });\n\n    try { await targetClient.close(); } catch { /* ignore */ }\n  }\n\n  // ── Private: tool call intercept ──────────────────────────────────────────\n\n  private async _handleToolCall(\n    name:   string,\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    args:   Record<string, any>,\n    target: Client,\n  ) {\n    await this._checkBudget();\n\n    const estimatedCost = lookupToolCost(name, this.opts.costOverrides);\n    const start         = Date.now();\n    const eventTags: Record<string, string> = {};\n\n    if (this.opts.captureInputs) {\n      eventTags[\"tool_input\"] = safeJson(args, this.redactKeys, 1000);\n    }\n\n    let status:   \"ok\" | \"error\" | \"timeout\" = \"ok\";\n    let errorMsg  = \"\";\n\n    let result: Awaited<ReturnType<Client[\"callTool\"]>>;\n    try {\n      result = await target.callTool({ name, arguments: args });\n    } catch (err) {\n      status   = \"error\";\n      errorMsg = err instanceof Error ? err.message : String(err);\n      this._ship(\"tool\", name, Date.now() - start, estimatedCost, \"estimated\", status, errorMsg, eventTags);\n      throw err;\n    }\n\n    const latencyMs = Date.now() - start;\n\n    // MCP tool errors are returned in the result (not thrown) with isError=true\n    if (result.isError) {\n      status = \"error\";\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const content = result.content as any[];\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const errBlock = Array.isArray(content) ? content.find((c: any) => c?.type === \"text\") : null;\n      errorMsg = (errBlock as { text?: string } | null)?.text ?? \"Tool returned error\";\n    }\n\n    if (this.opts.captureOutputs) {\n      eventTags[\"tool_output\"] = safeJson(result.content, this.redactKeys, 1000);\n    }\n\n    this._ship(\"tool\", name, latencyMs, estimatedCost, \"estimated\", status, errorMsg, eventTags);\n    return result;\n  }\n\n  // ── Private: resource read intercept ─────────────────────────────────────\n\n  private async _handleResourceRead(uri: string, target: Client) {\n    await this._checkBudget();\n\n    const start = Date.now();\n    let status: \"ok\" | \"error\" | \"timeout\" = \"ok\";\n    let errorMsg = \"\";\n\n    let result: Awaited<ReturnType<Client[\"readResource\"]>>;\n    try {\n      result = await target.readResource({ uri });\n    } catch (err) {\n      status   = \"error\";\n      errorMsg = err instanceof Error ? err.message : String(err);\n      this._ship(\"resource\", uri, Date.now() - start, 0, \"estimated\", status, errorMsg, {});\n      throw err;\n    }\n\n    this._ship(\"resource\", uri, Date.now() - start, 0, \"estimated\", status, errorMsg, {});\n    return result;\n  }\n\n  // ── Private: prompt get intercept ────────────────────────────────────────\n\n  private async _handlePromptGet(\n    name:   string,\n    args:   Record<string, string> | undefined,\n    target: Client,\n  ) {\n    await this._checkBudget();\n\n    const start = Date.now();\n    let status: \"ok\" | \"error\" | \"timeout\" = \"ok\";\n    let errorMsg = \"\";\n\n    let result: Awaited<ReturnType<Client[\"getPrompt\"]>>;\n    try {\n      result = await target.getPrompt({ name, arguments: args });\n    } catch (err) {\n      status   = \"error\";\n      errorMsg = err instanceof Error ? err.message : String(err);\n      this._ship(\"prompt\", name, Date.now() - start, 0, \"estimated\", status, errorMsg, {});\n      throw err;\n    }\n\n    this._ship(\"prompt\", name, Date.now() - start, 0, \"estimated\", status, errorMsg, {});\n    return result;\n  }\n\n  // ── Private: shared helpers ───────────────────────────────────────────────\n\n  private async _checkBudget(): Promise<void> {\n    await this.budget.checkOrThrow(\n      this.opts.sessionId,\n      this.opts.sessionBudgetUsd,\n      this.opts.maxToolCallsPerSession,\n    );\n  }\n\n  private _ship(\n    primitiveType: McpPrimitiveType,\n    toolName:      string,\n    latencyMs:     number,\n    costUsd:       number,\n    costStatus:    \"estimated\" | \"actual\",\n    status:        \"ok\" | \"error\" | \"timeout\",\n    errorMessage:  string,\n    tags:          Record<string, string>,\n  ): void {\n    this.tracker.capture({\n      timestamp:            ts(),\n      session_id:           this.opts.sessionId,\n      project_id:           this.opts.project,\n      team_id:              this.opts.team,\n      user_id:              \"\",\n      environment:          this.opts.environment,\n      tool_name:            toolName,\n      downstream_resource:  \"\",\n      execution_latency_ms: latencyMs,\n      tool_cost_usd:        costUsd,\n      cost_status:          costStatus,\n      status,\n      error_message:        errorMessage,\n      llm_request_id:       \"\",\n      primitive_type:       primitiveType,\n      tags,\n    }).catch(() => {});\n  }\n}\n"],"mappings":";AAuBA,SAAS,cAA4B;AACrC,SAAS,4BAA4B;AACrC,SAAS,cAA4B;AACrC,SAAS,4BAA4B;AACrC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,iBAAiB,sBAAsB,sBAAsB;AAMtE,IAAM,sBAAsB,CAAC,YAAY,SAAS,OAAO,UAAU,WAAW,eAAe;AAE7F,SAAS,aAAa,KAAc,MAAyB;AAC3D,MAAI,OAAO,QAAQ,YAAY,QAAQ,KAAM,QAAO;AACpD,MAAI,MAAM,QAAQ,GAAG,EAAG,QAAO,IAAI,IAAI,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AACnE,QAAM,MAA+B,CAAC;AACtC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAA8B,GAAG;AACnE,QAAI,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,IAC/D,eACA,aAAa,GAAG,IAAI;AAAA,EAC1B;AACA,SAAO;AACT;AAEA,SAAS,SAAS,KAAc,YAAsB,QAAwB;AAC5E,MAAI;AACF,UAAM,IAAI,KAAK,UAAU,aAAa,KAAK,UAAU,CAAC;AACtD,WAAO,EAAE,UAAU,SAAS,IAAI,EAAE,MAAM,GAAG,MAAM,IAAI;AAAA,EACvD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,WAAW,KAAqB;AACvC,QAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,SAAO,MAAM,UAAU,IAAK,MAAM,CAAC,KAAK,KAAM;AAChD;AAEA,SAAS,KAAa;AACpB,UAAO,oBAAI,KAAK,GAAE,YAAY,EAAE,QAAQ,KAAK,GAAG,EAAE,MAAM,GAAG,EAAE;AAC/D;AAIO,IAAM,gBAAN,MAAoB;AAAA,EAkBzB,YACmB,eACA,YACjB,UAAwB,CAAC,GACzB;AAHiB;AACA;AAGjB,UAAM,MAAM,QAAQ,YAAY,QAAQ,IAAI,eAAe,KAAK;AAChE,QAAI,CAAC,KAAK;AACR,cAAQ,OAAO,MAAM,iEAA4D;AAAA,IACnF;AAEA,SAAK,OAAO;AAAA,MACV,UAAuB;AAAA,MACvB,YAAuB,QAAQ,cAAkB,cAAc,MAAM,OAAO,EAAE,IAAI,KAAK;AAAA,MACvF,SAAuB,QAAQ,WAAkB,QAAQ,IAAI,eAAe,KAAS;AAAA,MACrF,MAAuB,QAAQ,QAAkB,QAAQ,IAAI,YAAY,KAAY;AAAA,MACrF,aAAuB,QAAQ,eAAkB,QAAQ,IAAI,mBAAmB,KAAK;AAAA,MACrF,WAAuB,QAAQ,aAAkB,OAAO,WAAW;AAAA,MACnE,kBAAuB,QAAQ;AAAA,MAC/B,wBAAwB,QAAQ;AAAA,MAChC,eAAuB,QAAQ,iBAAkB;AAAA,MACjD,gBAAuB,QAAQ,kBAAkB;AAAA,MACjD,eAAuB,QAAQ,iBAAkB,CAAC;AAAA,IACpD;AAEA,SAAK,aAAa,QAAQ,cAAc;AACxC,SAAK,UAAa,IAAI,gBAAgB,KAAK,KAAK,KAAK,YAAY,QAAQ,SAAS;AAClF,SAAK,SAAa,IAAI,qBAAqB,WAAW,GAAG,CAAC;AAAA,EAC5D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,MAAqB;AAEzB,UAAM,kBAAkB,IAAI,qBAAqB;AAAA,MAC/C,SAAS,KAAK;AAAA,MACd,MAAS,KAAK;AAAA,MACd,QAAS;AAAA;AAAA,IACX,CAAC;AAED,UAAM,eAAe,IAAI;AAAA,MACvB,EAAE,MAAM,sBAAsB,SAAS,QAAQ;AAAA,MAC/C,EAAE,cAAc,CAAC,EAAE;AAAA,IACrB;AAEA,UAAM,aAAa,QAAQ,eAAe;AAE1C,UAAM,OAA2B,aAAa,sBAAsB,KAAK,CAAC;AAC1E,UAAM,WAAe,CAAC,CAAC,KAAK;AAC5B,UAAM,eAAe,CAAC,CAAC,KAAK;AAC5B,UAAM,aAAe,CAAC,CAAC,KAAK;AAG5B,UAAM,YAAgC,CAAC;AACvC,QAAI,SAAc,WAAU,QAAY,CAAC;AACzC,QAAI,aAAc,WAAU,YAAY,EAAE,aAAa,OAAO,WAAW,MAAM;AAC/E,QAAI,WAAc,WAAU,UAAY,EAAE,aAAa,MAAM;AAE7D,UAAM,cAAc,IAAI;AAAA,MACtB,EAAE,MAAM,KAAK,KAAK,YAAY,SAAS,QAAQ;AAAA,MAC/C,EAAE,cAAc,UAAU;AAAA,IAC5B;AAIA,QAAI,UAAU;AACZ,kBAAY;AAAA,QACV;AAAA,QACA,MAAM,aAAa,UAAU;AAAA,MAC/B;AAEA,kBAAY;AAAA,QACV;AAAA,QACA,CAAC,QAAQ,KAAK,gBAAgB,IAAI,OAAO,MAAM,IAAI,OAAO,aAAa,CAAC,GAAG,YAAY;AAAA,MACzF;AAAA,IACF;AAEA,QAAI,cAAc;AAChB,kBAAY;AAAA,QACV;AAAA,QACA,MAAM,aAAa,cAAc;AAAA,MACnC;AAGA,kBAAY;AAAA,QACV;AAAA,QACA,YAAY;AACV,cAAI;AACF,mBAAO,MAAM,aAAa,sBAAsB;AAAA,UAClD,QAAQ;AACN,mBAAO,EAAE,mBAAmB,CAAC,EAAE;AAAA,UACjC;AAAA,QACF;AAAA,MACF;AAEA,kBAAY;AAAA,QACV;AAAA,QACA,CAAC,QAAQ,KAAK,oBAAoB,IAAI,OAAO,KAAK,YAAY;AAAA,MAChE;AAAA,IACF;AAEA,QAAI,YAAY;AACd,kBAAY;AAAA,QACV;AAAA,QACA,MAAM,aAAa,YAAY;AAAA,MACjC;AAEA,kBAAY;AAAA,QACV;AAAA,QACA,CAAC,QAAQ,KAAK;AAAA,UACZ,IAAI,OAAO;AAAA,UACX,IAAI,OAAO;AAAA,UACX;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,UAAM,iBAAiB,IAAI,qBAAqB;AAChD,UAAM,YAAY,QAAQ,cAAc;AAGxC,UAAM,IAAI,QAAc,CAAC,YAAY;AACnC,qBAAe,UAAU;AAAA,IAC3B,CAAC;AAED,QAAI;AAAE,YAAM,aAAa,MAAM;AAAA,IAAG,QAAQ;AAAA,IAAe;AAAA,EAC3D;AAAA;AAAA,EAIA,MAAc,gBACZ,MAEA,MACA,QACA;AACA,UAAM,KAAK,aAAa;AAExB,UAAM,gBAAgB,eAAe,MAAM,KAAK,KAAK,aAAa;AAClE,UAAM,QAAgB,KAAK,IAAI;AAC/B,UAAM,YAAoC,CAAC;AAE3C,QAAI,KAAK,KAAK,eAAe;AAC3B,gBAAU,YAAY,IAAI,SAAS,MAAM,KAAK,YAAY,GAAI;AAAA,IAChE;AAEA,QAAI,SAAuC;AAC3C,QAAI,WAAY;AAEhB,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,OAAO,SAAS,EAAE,MAAM,WAAW,KAAK,CAAC;AAAA,IAC1D,SAAS,KAAK;AACZ,eAAW;AACX,iBAAW,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC1D,WAAK,MAAM,QAAQ,MAAM,KAAK,IAAI,IAAI,OAAO,eAAe,aAAa,QAAQ,UAAU,SAAS;AACpG,YAAM;AAAA,IACR;AAEA,UAAM,YAAY,KAAK,IAAI,IAAI;AAG/B,QAAI,OAAO,SAAS;AAClB,eAAS;AAET,YAAM,UAAU,OAAO;AAEvB,YAAM,WAAW,MAAM,QAAQ,OAAO,IAAI,QAAQ,KAAK,CAAC,MAAW,GAAG,SAAS,MAAM,IAAI;AACzF,iBAAY,UAAuC,QAAQ;AAAA,IAC7D;AAEA,QAAI,KAAK,KAAK,gBAAgB;AAC5B,gBAAU,aAAa,IAAI,SAAS,OAAO,SAAS,KAAK,YAAY,GAAI;AAAA,IAC3E;AAEA,SAAK,MAAM,QAAQ,MAAM,WAAW,eAAe,aAAa,QAAQ,UAAU,SAAS;AAC3F,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,MAAc,oBAAoB,KAAa,QAAgB;AAC7D,UAAM,KAAK,aAAa;AAExB,UAAM,QAAQ,KAAK,IAAI;AACvB,QAAI,SAAqC;AACzC,QAAI,WAAW;AAEf,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,OAAO,aAAa,EAAE,IAAI,CAAC;AAAA,IAC5C,SAAS,KAAK;AACZ,eAAW;AACX,iBAAW,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC1D,WAAK,MAAM,YAAY,KAAK,KAAK,IAAI,IAAI,OAAO,GAAG,aAAa,QAAQ,UAAU,CAAC,CAAC;AACpF,YAAM;AAAA,IACR;AAEA,SAAK,MAAM,YAAY,KAAK,KAAK,IAAI,IAAI,OAAO,GAAG,aAAa,QAAQ,UAAU,CAAC,CAAC;AACpF,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,MAAc,iBACZ,MACA,MACA,QACA;AACA,UAAM,KAAK,aAAa;AAExB,UAAM,QAAQ,KAAK,IAAI;AACvB,QAAI,SAAqC;AACzC,QAAI,WAAW;AAEf,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,OAAO,UAAU,EAAE,MAAM,WAAW,KAAK,CAAC;AAAA,IAC3D,SAAS,KAAK;AACZ,eAAW;AACX,iBAAW,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC1D,WAAK,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,GAAG,aAAa,QAAQ,UAAU,CAAC,CAAC;AACnF,YAAM;AAAA,IACR;AAEA,SAAK,MAAM,UAAU,MAAM,KAAK,IAAI,IAAI,OAAO,GAAG,aAAa,QAAQ,UAAU,CAAC,CAAC;AACnF,WAAO;AAAA,EACT;AAAA;AAAA,EAIA,MAAc,eAA8B;AAC1C,UAAM,KAAK,OAAO;AAAA,MAChB,KAAK,KAAK;AAAA,MACV,KAAK,KAAK;AAAA,MACV,KAAK,KAAK;AAAA,IACZ;AAAA,EACF;AAAA,EAEQ,MACN,eACA,UACA,WACA,SACA,YACA,QACA,cACA,MACM;AACN,SAAK,QAAQ,QAAQ;AAAA,MACnB,WAAsB,GAAG;AAAA,MACzB,YAAsB,KAAK,KAAK;AAAA,MAChC,YAAsB,KAAK,KAAK;AAAA,MAChC,SAAsB,KAAK,KAAK;AAAA,MAChC,SAAsB;AAAA,MACtB,aAAsB,KAAK,KAAK;AAAA,MAChC,WAAsB;AAAA,MACtB,qBAAsB;AAAA,MACtB,sBAAsB;AAAA,MACtB,eAAsB;AAAA,MACtB,aAAsB;AAAA,MACtB;AAAA,MACA,eAAsB;AAAA,MACtB,gBAAsB;AAAA,MACtB,gBAAsB;AAAA,MACtB;AAAA,IACF,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACnB;AACF;","names":[]}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@prism-llm-labs/mcp-proxy",
+  "version": "0.1.0",
+  "description": "Transparent MCP proxy for Prism LLM observability — wraps any MCP server with zero code changes",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "mcp-proxy": "./dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "@prism-llm-labs/mcp-sdk": "0.3.0"
+  },
+  "peerDependencies": {
+    "@modelcontextprotocol/sdk": ">=1.0.0"
+  },
+  "devDependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0",
+    "@types/node": "^20",
+    "tsup": "^8.0.0",
+    "typescript": "^5",
+    "vitest": "^1.0.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "test": "vitest run",
+    "lint": "tsc --noEmit"
+  }
+}