agent-recorder 0.0.1

package/vendor/node_modules/@agent-recorder/service/mcp/proxy.d.ts

@@ -0,0 +1,26 @@
+/**
+ * MCP Proxy using Streamable HTTP transport.
+ * Handles POST requests only, returns application/json responses.
+ * Records tools/call events to the database.
+ */
+import { type FastifyInstance } from "fastify";
+import type Database from "better-sqlite3";
+import type { Config } from "@agent-recorder/core";
+export interface McpProxyOptions {
+    db: Database.Database;
+    config: Config;
+    /** Session ID to use for recording events. If null, events won't be recorded. */
+    sessionId: string | null;
+    /** Request timeout in milliseconds (default: 60000) */
+    timeoutMs?: number;
+}
+export interface CreateMcpProxyResult {
+    app: FastifyInstance;
+    start: () => Promise<void>;
+    close: () => Promise<void>;
+}
+/**
+ * Create an MCP proxy server.
+ */
+export declare function createMcpProxy(options: McpProxyOptions): Promise<CreateMcpProxyResult>;
+//# sourceMappingURL=proxy.d.ts.map

package/vendor/node_modules/@agent-recorder/service/mcp/proxy.d.ts 2.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/mcp/proxy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AA2BnD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,eAAe,CAAC;IACrB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAyDD;;GAEG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,oBAAoB,CAAC,CA+K/B"}

package/vendor/node_modules/@agent-recorder/service/mcp/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/mcp/proxy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AA2BnD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,eAAe,CAAC;IACrB,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAyDD;;GAEG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,oBAAoB,CAAC,CA+K/B"}

package/vendor/node_modules/@agent-recorder/service/mcp/proxy.js

@@ -0,0 +1,223 @@
+/**
+ * MCP Proxy using Streamable HTTP transport.
+ * Handles POST requests only, returns application/json responses.
+ * Records tools/call events to the database.
+ */
+import Fastify, {} from "fastify";
+import { isToolsCallRequest, isErrorResponse, } from "./types.js";
+import { recordToolCall } from "./recorder.js";
+/** Default request timeout in milliseconds */
+const DEFAULT_TIMEOUT_MS = 60_000;
+/** Hop-by-hop headers that should not be forwarded */
+const HOP_BY_HOP_HEADERS = new Set([
+    "host",
+    "connection",
+    "content-length",
+    "transfer-encoding",
+    "keep-alive",
+    "upgrade",
+    "proxy-connection",
+    "proxy-authenticate",
+    "proxy-authorization",
+    "te",
+    "trailer",
+]);
+/**
+ * Validate minimal JSON-RPC 2.0 request shape.
+ * Returns error message if invalid, null if valid.
+ */
+function validateJsonRpcRequest(body) {
+    if (body === null || typeof body !== "object" || Array.isArray(body)) {
+        return "Request body must be an object";
+    }
+    const obj = body;
+    if (obj.jsonrpc !== "2.0") {
+        return "Invalid JSON-RPC version (expected 2.0)";
+    }
+    if (typeof obj.method !== "string" || obj.method.length === 0) {
+        return "Missing or invalid method";
+    }
+    return null;
+}
+/**
+ * Build headers to forward to downstream, preserving safe headers.
+ */
+function buildForwardHeaders(requestHeaders) {
+    const headers = {
+        "Content-Type": "application/json",
+        Accept: "application/json",
+    };
+    for (const [key, value] of Object.entries(requestHeaders)) {
+        const lowerKey = key.toLowerCase();
+        // Skip hop-by-hop headers
+        if (HOP_BY_HOP_HEADERS.has(lowerKey)) {
+            continue;
+        }
+        // Skip content-type and accept (we set our own)
+        if (lowerKey === "content-type" || lowerKey === "accept") {
+            continue;
+        }
+        // Preserve authorization and other safe headers
+        if (value !== undefined) {
+            headers[key] = Array.isArray(value) ? value.join(", ") : value;
+        }
+    }
+    return headers;
+}
+/**
+ * Create an MCP proxy server.
+ */
+export async function createMcpProxy(options) {
+    const { db, config, sessionId, timeoutMs = DEFAULT_TIMEOUT_MS } = options;
+    const { downstreamMcpUrl, redactKeys, mcpProxyPort, debugProxy } = config;
+    const app = Fastify({ logger: false });
+    // Health check endpoint
+    app.get("/health", async () => {
+        return { status: "ok", proxy: true };
+    });
+    // MCP POST handler
+    app.post("/", async (request, reply) => {
+        // Validate downstream URL is configured
+        if (!downstreamMcpUrl) {
+            return reply.code(503).send({
+                jsonrpc: "2.0",
+                error: {
+                    code: -32000,
+                    message: "Downstream MCP server not configured",
+                },
+                id: null,
+            });
+        }
+        // Validate minimal JSON-RPC shape
+        const validationError = validateJsonRpcRequest(request.body);
+        if (validationError) {
+            return reply.code(400).send({
+                jsonrpc: "2.0",
+                error: {
+                    code: -32600,
+                    message: validationError,
+                },
+                id: null,
+            });
+        }
+        const body = request.body;
+        // Check if this is a tools/call request
+        const isToolCall = isToolsCallRequest(body);
+        const startedAt = new Date().toISOString();
+        let toolName = null;
+        let toolInput = null;
+        if (isToolCall) {
+            const params = body.params;
+            toolName = params.name;
+            toolInput = params.arguments ?? {};
+        }
+        // Build headers to forward
+        const forwardHeaders = buildForwardHeaders(request.headers);
+        // Create abort controller for timeout
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
+        // Forward request to downstream
+        let downstreamResponse;
+        try {
+            downstreamResponse = await fetch(downstreamMcpUrl, {
+                method: "POST",
+                headers: forwardHeaders,
+                body: JSON.stringify(body),
+                signal: controller.signal,
+            });
+        }
+        catch (error) {
+            clearTimeout(timeoutId);
+            // Check if this was a timeout
+            if (error instanceof Error && error.name === "AbortError") {
+                const endedAt = new Date().toISOString();
+                // Record timeout if this was a tools/call
+                if (isToolCall && toolName && sessionId) {
+                    recordToolCall({
+                        db,
+                        sessionId,
+                        toolName,
+                        mcpMethod: "tools/call",
+                        input: toolInput,
+                        output: { error: "Request timeout" },
+                        status: "timeout",
+                        startedAt,
+                        endedAt,
+                        redactKeys,
+                        debugProxy,
+                    });
+                }
+                return reply.code(504).send({
+                    jsonrpc: "2.0",
+                    error: {
+                        code: -32000,
+                        message: "Request timeout",
+                        data: { category: "timeout" },
+                    },
+                    id: body.id ?? null,
+                });
+            }
+            // Log without potentially sensitive data
+            console.error("Failed to forward request to downstream");
+            return reply.code(502).send({
+                jsonrpc: "2.0",
+                error: {
+                    code: -32000,
+                    message: "Failed to connect to downstream MCP server",
+                },
+                id: body.id ?? null,
+            });
+        }
+        clearTimeout(timeoutId);
+        // Parse downstream response
+        let responseBody;
+        try {
+            responseBody = (await downstreamResponse.json());
+        }
+        catch {
+            console.error("Failed to parse downstream response");
+            return reply.code(502).send({
+                jsonrpc: "2.0",
+                error: {
+                    code: -32000,
+                    message: "Invalid response from downstream MCP server",
+                },
+                id: body.id ?? null,
+            });
+        }
+        const endedAt = new Date().toISOString();
+        // Record tool call event if this was a tools/call request and we have a session
+        if (isToolCall && toolName && sessionId) {
+            const status = isErrorResponse(responseBody) ? "error" : "success";
+            const output = isErrorResponse(responseBody)
+                ? responseBody.error
+                : responseBody.result;
+            recordToolCall({
+                db,
+                sessionId,
+                toolName,
+                mcpMethod: "tools/call",
+                input: toolInput,
+                output,
+                status,
+                startedAt,
+                endedAt,
+                redactKeys,
+                debugProxy,
+            });
+        }
+        // Preserve downstream HTTP status code and return response unchanged
+        reply.code(downstreamResponse.status);
+        reply.header("Content-Type", "application/json");
+        return reply.send(responseBody);
+    });
+    const start = async () => {
+        await app.listen({ port: mcpProxyPort, host: "127.0.0.1" });
+        console.log(`MCP proxy listening on http://127.0.0.1:${mcpProxyPort}`);
+    };
+    const close = async () => {
+        await app.close();
+    };
+    return { app, start, close };
+}
+//# sourceMappingURL=proxy.js.map

package/vendor/node_modules/@agent-recorder/service/mcp/proxy.js 2.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/mcp/proxy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,OAAO,EAAE,EAAwB,MAAM,SAAS,CAAC;AAGxD,OAAO,EAGL,kBAAkB,EAClB,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,8CAA8C;AAC9C,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,sDAAsD;AACtD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM;IACN,YAAY;IACZ,gBAAgB;IAChB,mBAAmB;IACnB,YAAY;IACZ,SAAS;IACT,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;IACrB,IAAI;IACJ,SAAS;CACV,CAAC,CAAC;AAiBH;;;GAGG;AACH,SAAS,sBAAsB,CAAC,IAAa;IAC3C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,gCAAgC,CAAC;IAC1C,CAAC;IAED,MAAM,GAAG,GAAG,IAA+B,CAAC;IAE5C,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,yCAAyC,CAAC;IACnD,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO,2BAA2B,CAAC;IACrC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,cAA6D;IAE7D,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,kBAAkB;KAC3B,CAAC;IAEF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAEnC,0BAA0B;QAC1B,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,SAAS;QACX,CAAC;QAED,gDAAgD;QAChD,IAAI,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACzD,SAAS;QACX,CAAC;QAED,gDAAgD;QAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACjE,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAwB;IAExB,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,kBAAkB,EAAE,GAAG,OAAO,CAAC;IAC1E,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAE1E,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAEvC,wBAAwB;IACxB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC5B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,mBAAmB;IACnB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACrC,wCAAwC;QACxC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,sCAAsC;iBAChD;gBACD,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;QACL,CAAC;QAED,kCAAkC;QAClC,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,eAAe;iBACzB;gBACD,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAsB,CAAC;QAE5C,wCAAwC;QACxC,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,SAAS,GAAY,IAAI,CAAC;QAE9B,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAI,CAAC,MAA+C,CAAC;YACpE,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;YACvB,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;QACrC,CAAC;QAED,2BAA2B;QAC3B,MAAM,cAAc,GAAG,mBAAmB,CACxC,OAAO,CAAC,OAAwD,CACjE,CAAC;QAEF,sCAAsC;QACtC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAElE,gCAAgC;QAChC,IAAI,kBAA4B,CAAC;QACjC,IAAI,CAAC;YACH,kBAAkB,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;gBACjD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,cAAc;gBACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,8BAA8B;YAC9B,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAEzC,0CAA0C;gBAC1C,IAAI,UAAU,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;oBACxC,cAAc,CAAC;wBACb,EAAE;wBACF,SAAS;wBACT,QAAQ;wBACR,SAAS,EAAE,YAAY;wBACvB,KAAK,EAAE,SAAS;wBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE;wBACpC,MAAM,EAAE,SAAS;wBACjB,SAAS;wBACT,OAAO;wBACP,UAAU;wBACV,UAAU;qBACX,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC1B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,iBAAiB;wBAC1B,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE;qBAC9B;oBACD,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;iBACpB,CAAC,CAAC;YACL,CAAC;YAED,yCAAyC;YACzC,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACzD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,4CAA4C;iBACtD;gBACD,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;aACpB,CAAC,CAAC;QACL,CAAC;QAED,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,4BAA4B;QAC5B,IAAI,YAA6B,CAAC;QAClC,IAAI,CAAC;YACH,YAAY,GAAG,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,CAAoB,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACrD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,6CAA6C;iBACvD;gBACD,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;aACpB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEzC,gFAAgF;QAChF,IAAI,UAAU,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACnE,MAAM,MAAM,GAAG,eAAe,CAAC,YAAY,CAAC;gBAC1C,CAAC,CAAC,YAAY,CAAC,KAAK;gBACpB,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;YAExB,cAAc,CAAC;gBACb,EAAE;gBACF,SAAS;gBACT,QAAQ;gBACR,SAAS,EAAE,YAAY;gBACvB,KAAK,EAAE,SAAS;gBAChB,MAAM;gBACN,MAAM;gBACN,SAAS;gBACT,OAAO;gBACP,UAAU;gBACV,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QAED,qEAAqE;QACrE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACtC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,2CAA2C,YAAY,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC;IAEF,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC"}

package/vendor/node_modules/@agent-recorder/service/mcp/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/mcp/proxy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,OAAO,EAAE,EAAwB,MAAM,SAAS,CAAC;AAGxD,OAAO,EAGL,kBAAkB,EAClB,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,8CAA8C;AAC9C,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,sDAAsD;AACtD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM;IACN,YAAY;IACZ,gBAAgB;IAChB,mBAAmB;IACnB,YAAY;IACZ,SAAS;IACT,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;IACrB,IAAI;IACJ,SAAS;CACV,CAAC,CAAC;AAiBH;;;GAGG;AACH,SAAS,sBAAsB,CAAC,IAAa;IAC3C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,gCAAgC,CAAC;IAC1C,CAAC;IAED,MAAM,GAAG,GAAG,IAA+B,CAAC;IAE5C,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,yCAAyC,CAAC;IACnD,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO,2BAA2B,CAAC;IACrC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,cAA6D;IAE7D,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,kBAAkB;KAC3B,CAAC;IAEF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAEnC,0BAA0B;QAC1B,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,SAAS;QACX,CAAC;QAED,gDAAgD;QAChD,IAAI,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACzD,SAAS;QACX,CAAC;QAED,gDAAgD;QAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACjE,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAwB;IAExB,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,kBAAkB,EAAE,GAAG,OAAO,CAAC;IAC1E,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAE1E,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAEvC,wBAAwB;IACxB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC5B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,mBAAmB;IACnB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACrC,wCAAwC;QACxC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,sCAAsC;iBAChD;gBACD,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;QACL,CAAC;QAED,kCAAkC;QAClC,MAAM,eAAe,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,eAAe;iBACzB;gBACD,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAsB,CAAC;QAE5C,wCAAwC;QACxC,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,QAAQ,GAAkB,IAAI,CAAC;QACnC,IAAI,SAAS,GAAY,IAAI,CAAC;QAE9B,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAI,CAAC,MAA+C,CAAC;YACpE,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;YACvB,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;QACrC,CAAC;QAED,2BAA2B;QAC3B,MAAM,cAAc,GAAG,mBAAmB,CACxC,OAAO,CAAC,OAAwD,CACjE,CAAC;QAEF,sCAAsC;QACtC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAElE,gCAAgC;QAChC,IAAI,kBAA4B,CAAC;QACjC,IAAI,CAAC;YACH,kBAAkB,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;gBACjD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,cAAc;gBACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,8BAA8B;YAC9B,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAEzC,0CAA0C;gBAC1C,IAAI,UAAU,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;oBACxC,cAAc,CAAC;wBACb,EAAE;wBACF,SAAS;wBACT,QAAQ;wBACR,SAAS,EAAE,YAAY;wBACvB,KAAK,EAAE,SAAS;wBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE;wBACpC,MAAM,EAAE,SAAS;wBACjB,SAAS;wBACT,OAAO;wBACP,UAAU;wBACV,UAAU;qBACX,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC1B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,iBAAiB;wBAC1B,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE;qBAC9B;oBACD,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;iBACpB,CAAC,CAAC;YACL,CAAC;YAED,yCAAyC;YACzC,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACzD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,4CAA4C;iBACtD;gBACD,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;aACpB,CAAC,CAAC;QACL,CAAC;QAED,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,4BAA4B;QAC5B,IAAI,YAA6B,CAAC;QAClC,IAAI,CAAC;YACH,YAAY,GAAG,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,CAAoB,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACrD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,6CAA6C;iBACvD;gBACD,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;aACpB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEzC,gFAAgF;QAChF,IAAI,UAAU,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YACnE,MAAM,MAAM,GAAG,eAAe,CAAC,YAAY,CAAC;gBAC1C,CAAC,CAAC,YAAY,CAAC,KAAK;gBACpB,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;YAExB,cAAc,CAAC;gBACb,EAAE;gBACF,SAAS;gBACT,QAAQ;gBACR,SAAS,EAAE,YAAY;gBACvB,KAAK,EAAE,SAAS;gBAChB,MAAM;gBACN,MAAM;gBACN,SAAS;gBACT,OAAO;gBACP,UAAU;gBACV,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QAED,qEAAqE;QACrE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACtC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,2CAA2C,YAAY,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC,CAAC;IAEF,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC"}

package/vendor/node_modules/@agent-recorder/service/mcp/proxy.test.d 2.ts

@@ -0,0 +1,5 @@
+/**
+ * Integration tests for MCP proxy.
+ */
+export {};
+//# sourceMappingURL=proxy.test.d.ts.map

package/vendor/node_modules/@agent-recorder/service/mcp/proxy.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Integration tests for MCP proxy.
+ */
+export {};
+//# sourceMappingURL=proxy.test.d.ts.map

package/vendor/node_modules/@agent-recorder/service/mcp/proxy.test.d.ts 2.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.test.d.ts","sourceRoot":"","sources":["../../src/mcp/proxy.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/vendor/node_modules/@agent-recorder/service/mcp/proxy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.test.d.ts","sourceRoot":"","sources":["../../src/mcp/proxy.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/vendor/node_modules/@agent-recorder/service/mcp/proxy.test.js

@@ -0,0 +1,367 @@
+/**
+ * Integration tests for MCP proxy.
+ */
+import { describe, it, expect, beforeAll, afterAll, beforeEach, afterEach, } from "vitest";
+import Fastify, {} from "fastify";
+import { openMemoryDatabase, runMigrations, createSession, getEventsBySession, loadConfig, } from "@agent-recorder/core";
+import { createMcpProxy } from "./proxy.js";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { randomUUID } from "node:crypto";
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+describe("MCP Proxy", () => {
+    let downstreamServer;
+    let downstreamPort;
+    let db;
+    let proxy;
+    let config;
+    let sessionId;
+    // Track requests received by downstream
+    let lastDownstreamRequest = null;
+    beforeAll(async () => {
+        // Create fake downstream MCP server
+        downstreamServer = Fastify({ logger: false });
+        // Echo back tools/call requests with a success response
+        downstreamServer.post("/", async (request) => {
+            lastDownstreamRequest = request.body;
+            const body = request.body;
+            if (body.method === "tools/call") {
+                return {
+                    jsonrpc: "2.0",
+                    result: {
+                        content: [{ type: "text", text: "Tool executed successfully" }],
+                    },
+                    id: body.id ?? null,
+                };
+            }
+            // Echo other methods
+            return {
+                jsonrpc: "2.0",
+                result: { echo: body },
+                id: body.id ?? null,
+            };
+        });
+        // Start downstream server on random port
+        await downstreamServer.listen({ port: 0, host: "127.0.0.1" });
+        const address = downstreamServer.server.address();
+        downstreamPort =
+            typeof address === "object" && address ? address.port : 3000;
+    });
+    afterAll(async () => {
+        await downstreamServer.close();
+    });
+    beforeEach(async () => {
+        // Reset state
+        lastDownstreamRequest = null;
+        // Create fresh in-memory database
+        db = openMemoryDatabase();
+        const migrationsDir = join(__dirname, "..", "..", "..", "core", "migrations");
+        runMigrations(db, migrationsDir);
+        // Create a session
+        sessionId = randomUUID();
+        createSession(db, sessionId, new Date().toISOString());
+        // Create config pointing to our fake downstream
+        config = {
+            ...loadConfig(),
+            mcpProxyPort: 0, // Let OS pick a port
+            downstreamMcpUrl: `http://127.0.0.1:${downstreamPort}`,
+        };
+        // Create and start proxy
+        proxy = await createMcpProxy({
+            db,
+            config,
+            sessionId,
+        });
+        await proxy.app.ready();
+    });
+    afterAll(async () => {
+        if (proxy) {
+            await proxy.close();
+        }
+        if (db) {
+            db.close();
+        }
+    });
+    it("forwards requests to downstream and returns response unchanged", async () => {
+        const request = {
+            jsonrpc: "2.0",
+            method: "test/method",
+            params: { foo: "bar" },
+            id: 1,
+        };
+        const response = await proxy.app.inject({
+            method: "POST",
+            url: "/",
+            payload: request,
+        });
+        expect(response.statusCode).toBe(200);
+        expect(response.headers["content-type"]).toContain("application/json");
+        const body = response.json();
+        expect(body.jsonrpc).toBe("2.0");
+        expect(body.id).toBe(1);
+        expect(body.result.echo).toEqual(request);
+        // Verify downstream received exact request
+        expect(lastDownstreamRequest).toEqual(request);
+    });
+    it("records tools/call events with correct tool name and metadata", async () => {
+        const request = {
+            jsonrpc: "2.0",
+            method: "tools/call",
+            params: {
+                name: "read_file",
+                arguments: { path: "/test/file.txt" },
+            },
+            id: 42,
+        };
+        const response = await proxy.app.inject({
+            method: "POST",
+            url: "/",
+            payload: request,
+        });
+        expect(response.statusCode).toBe(200);
+        // Check event was recorded
+        const events = getEventsBySession(db, sessionId);
+        expect(events).toHaveLength(1);
+        const event = events[0];
+        expect(event.eventType).toBe("tool_call");
+        expect(event.agentName).toBe("claude-code"); // Stable agent identifier
+        expect(event.toolName).toBe("read_file"); // Tool name in dedicated column
+        expect(event.mcpMethod).toBe("tools/call"); // MCP method recorded
+        expect(event.status).toBe("success");
+        expect(event.sessionId).toBe(sessionId);
+        expect(event.sequence).toBe(1);
+        // Verify input was recorded (as JSON string)
+        const inputJson = JSON.parse(event.inputJson);
+        expect(inputJson.path).toBe("/test/file.txt");
+        // Verify output was recorded
+        const outputJson = JSON.parse(event.outputJson);
+        expect(outputJson.content).toBeDefined();
+    });
+    it("increments sequence numbers atomically", async () => {
+        // Send multiple tool calls
+        for (let i = 0; i < 3; i++) {
+            await proxy.app.inject({
+                method: "POST",
+                url: "/",
+                payload: {
+                    jsonrpc: "2.0",
+                    method: "tools/call",
+                    params: { name: `tool_${i}`, arguments: {} },
+                    id: i,
+                },
+            });
+        }
+        const events = getEventsBySession(db, sessionId);
+        expect(events).toHaveLength(3);
+        // Verify sequences are 1, 2, 3
+        expect(events[0].sequence).toBe(1);
+        expect(events[1].sequence).toBe(2);
+        expect(events[2].sequence).toBe(3);
+    });
+    it("does not record non-tools/call requests", async () => {
+        await proxy.app.inject({
+            method: "POST",
+            url: "/",
+            payload: {
+                jsonrpc: "2.0",
+                method: "other/method",
+                params: {},
+                id: 1,
+            },
+        });
+        const events = getEventsBySession(db, sessionId);
+        expect(events).toHaveLength(0);
+    });
+    it("returns health check", async () => {
+        const response = await proxy.app.inject({
+            method: "GET",
+            url: "/health",
+        });
+        expect(response.statusCode).toBe(200);
+        expect(response.json()).toEqual({ status: "ok", proxy: true });
+    });
+    it("redacts sensitive keys from input", async () => {
+        const request = {
+            jsonrpc: "2.0",
+            method: "tools/call",
+            params: {
+                name: "api_call",
+                arguments: {
+                    url: "https://api.example.com",
+                    authorization: "Bearer secret-token-123",
+                    api_key: "sk-12345",
+                },
+            },
+            id: 1,
+        };
+        await proxy.app.inject({
+            method: "POST",
+            url: "/",
+            payload: request,
+        });
+        const events = getEventsBySession(db, sessionId);
+        expect(events).toHaveLength(1);
+        const inputJson = JSON.parse(events[0].inputJson);
+        expect(inputJson.url).toBe("https://api.example.com");
+        expect(inputJson.authorization).toBe("[REDACTED]");
+        expect(inputJson.api_key).toBe("[REDACTED]");
+    });
+});
+describe("MCP Proxy - Error Handling", () => {
+    let db;
+    beforeEach(() => {
+        db = openMemoryDatabase();
+        const migrationsDir = join(__dirname, "..", "..", "..", "core", "migrations");
+        runMigrations(db, migrationsDir);
+    });
+    afterEach(() => {
+        db.close();
+    });
+    it("health endpoint works when downstream URL is not configured", async () => {
+        const config = {
+            ...loadConfig(),
+            mcpProxyPort: 0,
+            downstreamMcpUrl: null,
+        };
+        const proxy = await createMcpProxy({
+            db,
+            config,
+            sessionId: null,
+        });
+        await proxy.app.ready();
+        const response = await proxy.app.inject({
+            method: "GET",
+            url: "/health",
+        });
+        expect(response.statusCode).toBe(200);
+        expect(response.json()).toEqual({ status: "ok", proxy: true });
+        await proxy.close();
+    });
+    it("returns 503 when downstream URL is not configured", async () => {
+        const config = {
+            ...loadConfig(),
+            mcpProxyPort: 0,
+            downstreamMcpUrl: null,
+        };
+        const proxy = await createMcpProxy({
+            db,
+            config,
+            sessionId: null,
+        });
+        await proxy.app.ready();
+        const response = await proxy.app.inject({
+            method: "POST",
+            url: "/",
+            payload: {
+                jsonrpc: "2.0",
+                method: "test",
+                id: 1,
+            },
+        });
+        expect(response.statusCode).toBe(503);
+        expect(response.json().error.message).toContain("not configured");
+        await proxy.close();
+    });
+    it("returns 502 when downstream is unreachable", async () => {
+        const config = {
+            ...loadConfig(),
+            mcpProxyPort: 0,
+            downstreamMcpUrl: "http://127.0.0.1:59999", // Unlikely to be in use
+        };
+        const proxy = await createMcpProxy({
+            db,
+            config,
+            sessionId: null,
+        });
+        await proxy.app.ready();
+        const response = await proxy.app.inject({
+            method: "POST",
+            url: "/",
+            payload: {
+                jsonrpc: "2.0",
+                method: "test",
+                id: 1,
+            },
+        });
+        expect(response.statusCode).toBe(502);
+        expect(response.json().error.message).toContain("Failed to connect");
+        await proxy.close();
+    });
+    it("returns 400 for invalid JSON-RPC version", async () => {
+        const config = {
+            ...loadConfig(),
+            mcpProxyPort: 0,
+            downstreamMcpUrl: "http://127.0.0.1:59999",
+        };
+        const proxy = await createMcpProxy({
+            db,
+            config,
+            sessionId: null,
+        });
+        await proxy.app.ready();
+        const response = await proxy.app.inject({
+            method: "POST",
+            url: "/",
+            payload: {
+                jsonrpc: "1.0", // Invalid version
+                method: "test",
+                id: 1,
+            },
+        });
+        expect(response.statusCode).toBe(400);
+        expect(response.json().error.code).toBe(-32600);
+        expect(response.json().error.message).toContain("JSON-RPC version");
+        await proxy.close();
+    });
+    it("returns 400 for missing method", async () => {
+        const config = {
+            ...loadConfig(),
+            mcpProxyPort: 0,
+            downstreamMcpUrl: "http://127.0.0.1:59999",
+        };
+        const proxy = await createMcpProxy({
+            db,
+            config,
+            sessionId: null,
+        });
+        await proxy.app.ready();
+        const response = await proxy.app.inject({
+            method: "POST",
+            url: "/",
+            payload: {
+                jsonrpc: "2.0",
+                // Missing method
+                id: 1,
+            },
+        });
+        expect(response.statusCode).toBe(400);
+        expect(response.json().error.code).toBe(-32600);
+        expect(response.json().error.message).toContain("method");
+        await proxy.close();
+    });
+    it("returns 400 for non-object body", async () => {
+        const config = {
+            ...loadConfig(),
+            mcpProxyPort: 0,
+            downstreamMcpUrl: "http://127.0.0.1:59999",
+        };
+        const proxy = await createMcpProxy({
+            db,
+            config,
+            sessionId: null,
+        });
+        await proxy.app.ready();
+        // Send an array (valid JSON but not a valid JSON-RPC request object)
+        const response = await proxy.app.inject({
+            method: "POST",
+            url: "/",
+            payload: [1, 2, 3],
+        });
+        expect(response.statusCode).toBe(400);
+        expect(response.json().error.code).toBe(-32600);
+        expect(response.json().error.message).toContain("object");
+        await proxy.close();
+    });
+});
+//# sourceMappingURL=proxy.test.js.map