@windagency/valora 2.0.1

package/dist/mcp/mcp-approval-workflow.js

@@ -0,0 +1,346 @@
+/**
+ * MCP Approval Workflow
+ *
+ * Handles interactive approval for external MCP server connections,
+ * displaying server info, security assessment, and tool listings.
+ */
+import { getColorAdapter } from '../output/color-adapter.interface.js';
+import { getConsoleOutput } from '../output/console-output.js';
+import { getLogger } from '../output/logger.js';
+import { getRenderer } from '../output/markdown.js';
+import { getPromptAdapter } from '../ui/prompt-adapter.interface.js';
+/**
+ * Risk level colors and labels
+ */
+const RISK_LEVEL_CONFIG = {
+    critical: { color: 'red', label: 'CRITICAL' },
+    high: { color: 'red', label: 'HIGH' },
+    low: { color: 'green', label: 'LOW' },
+    medium: { color: 'yellow', label: 'MEDIUM' }
+};
+/**
+ * Maximum tools to display in preview
+ */
+const MAX_PREVIEW_TOOLS = 5;
+/**
+ * MCP Approval Workflow
+ *
+ * Responsibilities:
+ * - Display server info (name, description, requester, reason)
+ * - Show security assessment (risk level, capabilities)
+ * - List available tools from the MCP
+ * - Handle approval decisions (Approve, Session, Configure, Deny)
+ */
+export class MCPApprovalWorkflow {
+    color = getColorAdapter();
+    console = getConsoleOutput();
+    logger = getLogger();
+    promptAdapter = getPromptAdapter();
+    renderer = getRenderer();
+    /**
+     * Request user approval for an external MCP connection
+     */
+    async requestApproval(serverConfig, accessRequest, availableTools) {
+        this.logger.debug('Requesting MCP approval', {
+            requestedBy: accessRequest.requestedBy,
+            serverId: serverConfig.id,
+            toolCount: availableTools.length
+        });
+        // Display the approval UI
+        this.displayApprovalHeader(serverConfig);
+        this.displayRequestDetails(serverConfig, accessRequest);
+        this.displaySecurityAssessment(serverConfig);
+        this.displayAvailableTools(availableTools);
+        // Prompt for decision
+        const decision = await this.promptForDecision(serverConfig);
+        if (decision === 'deny') {
+            this.displayDenialMessage();
+            return {
+                approved: false,
+                decision: 'deny',
+                remember: false,
+                timestamp: new Date()
+            };
+        }
+        if (decision === 'configure') {
+            return this.handleConfigureFlow(serverConfig, availableTools);
+        }
+        // Approve or session
+        const remember = decision === 'approve';
+        this.displayApprovalMessage(serverConfig, remember);
+        return {
+            approved: true,
+            decision,
+            remember,
+            timestamp: new Date()
+        };
+    }
+    /**
+     * Display the approval header
+     */
+    displayApprovalHeader(config) {
+        this.console.blank();
+        this.console.print(this.renderer.box(config.name, 'External MCP Server Request'));
+        this.console.blank();
+    }
+    /**
+     * Display request details
+     */
+    displayRequestDetails(config, request) {
+        this.console.bold('Request Details:');
+        this.console.print(`  Server:       ${config.name}`);
+        this.console.print(`  Description:  ${config.description}`);
+        this.console.print(`  Requested By: ${request.requestedBy}`);
+        this.console.print(`  Reason:       ${request.reason}`);
+        this.console.blank();
+    }
+    /**
+     * Display security assessment
+     */
+    displaySecurityAssessment(config) {
+        const riskConfig = RISK_LEVEL_CONFIG[config.security.risk_level];
+        const riskLabel = this.applyRiskColor(riskConfig.label, config.security.risk_level);
+        const capabilities = config.security.capabilities.join(', ');
+        const auditStatus = config.security.audit_logging ? 'Enabled' : 'Disabled';
+        this.console.bold('Security Assessment:');
+        this.console.print(`  Risk Level:   ${riskLabel}`);
+        this.console.print(`  Capabilities: ${capabilities}`);
+        this.console.print(`  Audit Logging: ${auditStatus}`);
+        if (config.security.max_execution_ms) {
+            this.console.print(`  Max Execution: ${config.security.max_execution_ms}ms`);
+        }
+        if (config.security.tool_blocklist?.length) {
+            this.console.print(`  Blocked Tools: ${config.security.tool_blocklist.join(', ')}`);
+        }
+        this.console.blank();
+        // Display warnings for high/critical risk
+        if (config.security.risk_level === 'high' || config.security.risk_level === 'critical') {
+            this.displayRiskWarning(config);
+        }
+    }
+    /**
+     * Display available tools
+     */
+    displayAvailableTools(tools) {
+        if (tools.length === 0) {
+            this.console.dim('No tools discovered from this server.');
+            this.console.blank();
+            return;
+        }
+        this.console.bold(`Available Tools (${tools.length}):`);
+        const displayTools = tools.slice(0, MAX_PREVIEW_TOOLS);
+        displayTools.forEach((tool, index) => {
+            const truncatedDesc = tool.description.length > 40 ? tool.description.substring(0, 37) + '...' : tool.description;
+            this.console.print(`  ${index + 1}. ${this.color.cyan(tool.name.padEnd(20))} - ${truncatedDesc}`);
+        });
+        if (tools.length > MAX_PREVIEW_TOOLS) {
+            this.console.dim(`  ... and ${tools.length - MAX_PREVIEW_TOOLS} more tools`);
+        }
+        this.console.blank();
+    }
+    /**
+     * Display risk warning for high/critical risk servers
+     */
+    displayRiskWarning(config) {
+        const warningBox = this.renderer.box(`This server has ${config.security.risk_level.toUpperCase()} risk level.\n` +
+            `Capabilities: ${config.security.capabilities.join(', ')}\n` +
+            'Review carefully before approving.', 'Security Warning');
+        this.console.print(this.color.yellow(warningBox));
+        this.console.blank();
+    }
+    /**
+     * Apply risk level color to text
+     */
+    applyRiskColor(text, level) {
+        const riskConfig = RISK_LEVEL_CONFIG[level];
+        switch (riskConfig.color) {
+            case 'cyan':
+                return this.color.cyan(text);
+            case 'green':
+                return this.color.green(text);
+            case 'red':
+                return this.color.red(text);
+            case 'yellow':
+                return this.color.yellow(text);
+            default:
+                return text;
+        }
+    }
+    /**
+     * Prompt for approval decision
+     */
+    async promptForDecision(config) {
+        const answers = await this.promptAdapter.prompt([
+            {
+                choices: [
+                    {
+                        name: '[A]pprove - Connect and remember for future sessions',
+                        value: 'approve'
+                    },
+                    {
+                        name: '[S]ession - Approve for this session only',
+                        value: 'session'
+                    },
+                    {
+                        name: '[C]onfigure - Review and filter available tools',
+                        value: 'configure'
+                    },
+                    {
+                        name: '[D]eny - Block this connection',
+                        value: 'deny'
+                    }
+                ],
+                default: config.security.risk_level === 'low' ? 'session' : 'configure',
+                message: `Allow connection to ${config.name}?`,
+                name: 'decision',
+                type: 'list'
+            }
+        ]);
+        return answers['decision'];
+    }
+    /**
+     * Handle the configure flow for filtering tools
+     */
+    async handleConfigureFlow(_config, tools) {
+        if (tools.length === 0) {
+            this.console.warn('No tools available to configure.');
+            return {
+                approved: false,
+                decision: 'deny',
+                remember: false,
+                timestamp: new Date()
+            };
+        }
+        this.console.blank();
+        this.console.bold('Configure Tool Access');
+        this.console.dim('Select which tools to allow:');
+        this.console.blank();
+        const toolChoices = tools.map((tool) => ({
+            checked: true,
+            name: `${tool.name} - ${tool.description}`,
+            value: tool.name
+        }));
+        const answers = await this.promptAdapter.prompt([
+            {
+                choices: toolChoices,
+                message: 'Select tools to allow:',
+                name: 'allowedTools',
+                pageSize: 15,
+                type: 'checkbox'
+            }
+        ]);
+        const allowedTools = answers['allowedTools'];
+        if (allowedTools.length === 0) {
+            this.console.warn('No tools selected. Connection denied.');
+            return {
+                approved: false,
+                decision: 'deny',
+                remember: false,
+                timestamp: new Date()
+            };
+        }
+        // Ask about remembering the decision
+        const rememberAnswer = await this.promptAdapter.prompt([
+            {
+                default: false,
+                message: 'Remember this configuration for future sessions?',
+                name: 'remember',
+                type: 'confirm'
+            }
+        ]);
+        const remember = rememberAnswer['remember'];
+        this.console.blank();
+        this.console.success(`Approved ${allowedTools.length} of ${tools.length} tools.`);
+        this.console.blank();
+        return {
+            allowedTools,
+            approved: true,
+            decision: 'configure',
+            remember,
+            timestamp: new Date()
+        };
+    }
+    /**
+     * Display denial message
+     */
+    displayDenialMessage() {
+        this.console.blank();
+        this.console.warn('Connection to external MCP server denied.');
+        this.console.blank();
+    }
+    /**
+     * Display approval message
+     */
+    displayApprovalMessage(config, remember) {
+        this.console.blank();
+        this.console.success(`Connection to ${config.name} approved.`);
+        if (remember) {
+            this.console.dim('This approval will be remembered for future sessions.');
+        }
+        else {
+            this.console.dim('This approval is valid for this session only.');
+        }
+        this.console.blank();
+    }
+    /**
+     * Display quick approval info (for auto-approved servers)
+     */
+    displayAutoApproveInfo(config) {
+        this.console.blank();
+        this.console.dim(`Auto-connecting to ${config.name}...`);
+        this.console.print(`  Description: ${config.description}`);
+        this.console.print(`  Risk Level:  ${config.security.risk_level}`);
+        this.console.blank();
+    }
+    /**
+     * Display connection summary
+     */
+    displayConnectionSummary(_serverId, serverName, toolCount, success) {
+        this.console.blank();
+        if (success) {
+            this.console.success(`Connected to ${serverName}`);
+            this.console.print(`  Available tools: ${toolCount}`);
+        }
+        else {
+            this.console.error(`Failed to connect to ${serverName}`);
+        }
+        this.console.blank();
+    }
+    /**
+     * Display disconnection summary
+     */
+    displayDisconnectionSummary(serverName) {
+        this.console.blank();
+        this.console.info(`Disconnected from ${serverName}`);
+        this.console.blank();
+    }
+    /**
+     * Display error message
+     */
+    displayError(message, details) {
+        this.console.blank();
+        this.console.error(message);
+        if (details) {
+            this.console.dim(details);
+        }
+        this.console.blank();
+    }
+}
+/**
+ * Singleton instance
+ */
+let instance = null;
+/**
+ * Get the MCP Approval Workflow instance
+ */
+export function getMCPApprovalWorkflow() {
+    instance ??= new MCPApprovalWorkflow();
+    return instance;
+}
+/**
+ * Reset the singleton (for testing)
+ */
+export function resetMCPApprovalWorkflow() {
+    instance = null;
+}
+//# sourceMappingURL=mcp-approval-workflow.js.map

package/dist/mcp/mcp-approval-workflow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-approval-workflow.js","sourceRoot":"","sources":["../../src/mcp/mcp-approval-workflow.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D;;GAEG;AACH,MAAM,iBAAiB,GAAwF;IAC9G,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE;IAC7C,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE;IACrC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE;IACrC,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;CAC5C,CAAC;AAEF;;GAEG;AACH,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAmB;IACd,KAAK,GAAG,eAAe,EAAE,CAAC;IAC1B,OAAO,GAAG,gBAAgB,EAAE,CAAC;IAC7B,MAAM,GAAG,SAAS,EAAE,CAAC;IACrB,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACnC,QAAQ,GAAG,WAAW,EAAE,CAAC;IAE1C;;OAEG;IACH,KAAK,CAAC,eAAe,CACpB,YAAqC,EACrC,aAA+B,EAC/B,cAAiC;QAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;YAC5C,WAAW,EAAE,aAAa,CAAC,WAAW;YACtC,QAAQ,EAAE,YAAY,CAAC,EAAE;YACzB,SAAS,EAAE,cAAc,CAAC,MAAM;SAChC,CAAC,CAAC;QAEH,0BAA0B;QAC1B,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;QACzC,IAAI,CAAC,qBAAqB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACxD,IAAI,CAAC,yBAAyB,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC;QAE3C,sBAAsB;QACtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAE5D,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,OAAO;gBACN,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,IAAI,IAAI,EAAE;aACrB,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAC/D,CAAC;QAED,qBAAqB;QACrB,MAAM,QAAQ,GAAG,QAAQ,KAAK,SAAS,CAAC;QACxC,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAEpD,OAAO;YACN,QAAQ,EAAE,IAAI;YACd,QAAQ;YACR,QAAQ;YACR,SAAS,EAAE,IAAI,IAAI,EAAE;SACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,MAA+B;QAC5D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,MAA+B,EAAE,OAAyB;QACvF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,yBAAyB,CAAC,MAA+B;QAChE,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACpF,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;QAE3E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,SAAS,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,YAAY,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,WAAW,EAAE,CAAC,CAAC;QAEtD,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YACtC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,MAAM,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAErB,0CAA0C;QAC1C,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACxF,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;IACF,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,KAAwB;QACrD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO;QACR,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QAExD,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACvD,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACpC,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;YAClH,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC;QACnG,CAAC,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,MAAM,GAAG,iBAAiB,aAAa,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,MAA+B;QACzD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CACnC,mBAAmB,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,gBAAgB;YAC1E,iBAAiB,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC5D,oCAAoC,EACrC,kBAAkB,CAClB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,IAAY,EAAE,KAAmB;QACvD,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC5C,QAAQ,UAAU,CAAC,KAAK,EAAE,CAAC;YAC1B,KAAK,MAAM;gBACV,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,KAAK,OAAO;gBACX,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,KAAK,KAAK;gBACT,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7B,KAAK,QAAQ;gBACZ,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAChC;gBACC,OAAO,IAAI,CAAC;QACd,CAAC;IACF,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAC9B,MAA+B;QAE/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAC/C;gBACC,OAAO,EAAE;oBACR;wBACC,IAAI,EAAE,sDAAsD;wBAC5D,KAAK,EAAE,SAAS;qBAChB;oBACD;wBACC,IAAI,EAAE,2CAA2C;wBACjD,KAAK,EAAE,SAAS;qBAChB;oBACD;wBACC,IAAI,EAAE,iDAAiD;wBACvD,KAAK,EAAE,WAAW;qBAClB;oBACD;wBACC,IAAI,EAAE,gCAAgC;wBACtC,KAAK,EAAE,MAAM;qBACb;iBACD;gBACD,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;gBACvE,OAAO,EAAE,uBAAuB,MAAM,CAAC,IAAI,GAAG;gBAC9C,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,MAAM;aACZ;SACD,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC,UAAU,CAAiD,CAAC;IAC5E,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,mBAAmB,CAChC,OAAgC,EAChC,KAAwB;QAExB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YACtD,OAAO;gBACN,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,IAAI,IAAI,EAAE;aACrB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAErB,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxC,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,WAAW,EAAE;YAC1C,KAAK,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC,CAAC;QAEJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAC/C;gBACC,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,wBAAwB;gBACjC,IAAI,EAAE,cAAc;gBACpB,QAAQ,EAAE,EAAE;gBACZ,IAAI,EAAE,UAAU;aAChB;SACD,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,CAAa,CAAC;QAEzD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YAC3D,OAAO;gBACN,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,IAAI,IAAI,EAAE;aACrB,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YACtD;gBACC,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,kDAAkD;gBAC3D,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,SAAS;aACf;SACD,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,cAAc,CAAC,UAAU,CAAY,CAAC;QAEvD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,YAAY,CAAC,MAAM,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;QAClF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAErB,OAAO;YACN,YAAY;YACZ,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,WAAW;YACrB,QAAQ;YACR,SAAS,EAAE,IAAI,IAAI,EAAE;SACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACK,oBAAoB;QAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,MAA+B,EAAE,QAAiB;QAChF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,MAAM,CAAC,IAAI,YAAY,CAAC,CAAC;QAC/D,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,MAA+B;QACrD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,wBAAwB,CAAC,SAAiB,EAAE,UAAkB,EAAE,SAAiB,EAAE,OAAgB;QAClG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,UAAU,EAAE,CAAC,CAAC;YACnD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,wBAAwB,UAAU,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,2BAA2B,CAAC,UAAkB;QAC7C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,OAAe,EAAE,OAAgB;QAC7C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACD;AAED;;GAEG;AACH,IAAI,QAAQ,GAA+B,IAAI,CAAC;AAEhD;;GAEG;AACH,MAAM,UAAU,sBAAsB;IACrC,QAAQ,KAAK,IAAI,mBAAmB,EAAE,CAAC;IACvC,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB;IACvC,QAAQ,GAAG,IAAI,CAAC;AACjB,CAAC"}

package/dist/mcp/mcp-audit-logger.service.d.ts

@@ -0,0 +1,90 @@
+/**
+ * MCP Audit Logger Service
+ *
+ * Logs all external MCP operations for security auditing.
+ * Tracks approval decisions, connections, tool calls, and errors.
+ */
+import type { MCPAuditLogEntry } from '../types/mcp-client.types.js';
+/**
+ * MCP Audit Logger Service
+ *
+ * Responsibilities:
+ * - Log all external MCP operations
+ * - Track approval decisions
+ * - Track connections and disconnections
+ * - Track tool calls with timing
+ * - Support both file-based and memory-based logging
+ */
+export declare class MCPAuditLoggerService {
+    private logPath;
+    private writeToFile;
+    private initialized;
+    private memoryLog;
+    constructor(logPath?: string, writeToFile?: boolean);
+    /**
+     * Initialize the audit logger
+     */
+    initialize(): void;
+    /**
+     * Log an approval decision
+     */
+    logApproval(serverId: string, approved: boolean, decision?: string, notes?: string): Promise<void>;
+    /**
+     * Log a connection attempt
+     */
+    logConnection(serverId: string, success: boolean, error?: string): Promise<void>;
+    /**
+     * Log a disconnection
+     */
+    logDisconnection(serverId: string): Promise<void>;
+    /**
+     * Log a tool call
+     */
+    logToolCall(serverId: string, toolName: string, success: boolean, durationMs: number, error?: string): Promise<void>;
+    /**
+     * Log an error
+     */
+    logError(serverId: string, error: string, details?: Record<string, unknown>): Promise<void>;
+    /**
+     * Get recent audit entries from memory
+     */
+    getRecentEntries(limit?: number): MCPAuditLogEntry[];
+    /**
+     * Get entries for a specific server
+     */
+    getServerEntries(serverId: string, limit?: number): MCPAuditLogEntry[];
+    /**
+     * Get entries by operation type
+     */
+    getEntriesByOperation(operation: MCPAuditLogEntry['operation'], limit?: number): MCPAuditLogEntry[];
+    /**
+     * Get statistics summary
+     */
+    getStats(): {
+        byOperation: Record<string, number>;
+        byServer: Record<string, number>;
+        successRate: number;
+        totalEntries: number;
+    };
+    /**
+     * Load historical entries from file
+     */
+    loadHistoricalEntries(limit?: number): Promise<MCPAuditLogEntry[]>;
+    /**
+     * Clear the in-memory log
+     */
+    clearMemoryLog(): void;
+    /**
+     * Write an entry to both memory and file
+     */
+    private writeEntry;
+}
+/**
+ * Get the MCP Audit Logger service instance
+ */
+export declare function getMCPAuditLogger(logPath?: string, writeToFile?: boolean): MCPAuditLoggerService;
+/**
+ * Reset the singleton (for testing)
+ */
+export declare function resetMCPAuditLogger(): void;
+//# sourceMappingURL=mcp-audit-logger.service.d.ts.map

package/dist/mcp/mcp-audit-logger.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-audit-logger.service.d.ts","sourceRoot":"","sources":["../../src/mcp/mcp-audit-logger.service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAkB/D;;;;;;;;;GASG;AACH,qBAAa,qBAAqB;IAKhC,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,WAAW;IALpB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAA0B;gBAGlC,OAAO,GAAE,MAA+B,EACxC,WAAW,GAAE,OAAc;IAGpC;;OAEG;IACH,UAAU,IAAI,IAAI;IAqBlB;;OAEG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAexG;;OAEG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYtF;;OAEG;IACG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWvD;;OAEG;IACG,WAAW,CAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC;IAchB;;OAEG;IACG,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAajG;;OAEG;IACH,gBAAgB,CAAC,KAAK,GAAE,MAAY,GAAG,gBAAgB,EAAE;IAIzD;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,GAAE,MAAY,GAAG,gBAAgB,EAAE;IAI3E;;OAEG;IACH,qBAAqB,CAAC,SAAS,EAAE,gBAAgB,CAAC,WAAW,CAAC,EAAE,KAAK,GAAE,MAAY,GAAG,gBAAgB,EAAE;IAIxG;;OAEG;IACH,QAAQ,IAAI;QACX,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;KACrB;IAqBD;;OAEG;IACG,qBAAqB,CAAC,KAAK,GAAE,MAAa,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAsC9E;;OAEG;IACH,cAAc,IAAI,IAAI;IAMtB;;OAEG;YACW,UAAU;CAoCxB;AAOD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,qBAAqB,CAGhG;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C"}