contextguard 0.2.0 → 0.2.2

package/dist/agent.js

@@ -309,6 +309,13 @@ const createAgent = (serverCommand, policyConfig = {}, supabaseConfig) => {
                 }
                 // Update agent status to online
                 await supabaseClient.updateAgentStatus(supabaseConfig.agentId, "online");
+                // Send periodic heartbeats every 30 seconds
+                const heartbeatInterval = setInterval(() => {
+                    supabaseClient
+                        .updateAgentStatus(supabaseConfig.agentId, "online")
+                        .catch(() => { });
+                }, 30000);
+                heartbeatInterval.unref();
             }
             state.process = (0, child_process_1.spawn)(serverCommand[0], serverCommand.slice(1), {
                 stdio: ["pipe", "pipe", "pipe"],

package/dist/cli.js

@@ -42,6 +42,7 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.main = main;
 const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
 const agent_1 = require("./agent");
 const sse_proxy_1 = require("./sse-proxy");
 const policy_1 = require("./policy");
@@ -250,8 +251,37 @@ async function main() {
             agentId: process.env.AGENT_ID || "default-agent",
         }
         : undefined;
-    if (supabaseConfig) {
-        console.log(`✓ Supabase integration enabled (Agent ID: ${supabaseConfig.agentId})`);
+    // Supabase integration is configured silently to avoid polluting stderr
+    // Start REST-based heartbeat if CONTEXTGUARD_API_KEY is set
+    const cgApiKey = process.env.CONTEXTGUARD_API_KEY;
+    if (cgApiKey) {
+        const baseUrl = process.env.CONTEXTGUARD_BASE_URL || "https://contextguard.dev";
+        const agentId = process.env.AGENT_ID || `${os.hostname()}-${process.pid}`;
+        const sendHeartbeat = async () => {
+            try {
+                await fetch(`${baseUrl}/api/agents/heartbeat`, {
+                    method: "POST",
+                    headers: {
+                        "Content-Type": "application/json",
+                        Authorization: `Bearer ${cgApiKey}`,
+                    },
+                    body: JSON.stringify({
+                        agent_id: agentId,
+                        name: agentId,
+                        hostname: os.hostname(),
+                        version: process.env.npm_package_version || "unknown",
+                        mcp_server_command: serverCommand,
+                    }),
+                });
+            }
+            catch {
+                // silently ignore — don't break the agent if dashboard is unreachable
+            }
+        };
+        sendHeartbeat();
+        const interval = setInterval(sendHeartbeat, 30000);
+        interval.unref();
+        // Heartbeat configured silently to avoid polluting stderr
     }
     // Create and start agent
     const agent = (0, agent_1.createAgent)(parseCommand(serverCommand), config, supabaseConfig);

package/dist/init.d.ts

@@ -4,4 +4,4 @@
  * contextguard init — automatically patch claude_desktop_config.json
  * so that every MCP server is wrapped with ContextGuard.
  */
-export declare function runInit(argv: string[]): Promise<void>;
+export declare function runInit(argv: string[]): void;

package/dist/init.js

@@ -68,9 +68,13 @@ function findConfigPath() {
 }
 // ── Wrapping helpers ─────────────────────────────────────────────────────────
 function isAlreadyWrapped(server) {
-    if (server.command === "contextguard")
+    if (server.command === "npx" && server.args?.[1] === "contextguard") {
         return true;
-    return (server.args ?? []).includes("contextguard");
+    }
+    if (server.command === "contextguard") {
+        return true;
+    }
+    return false;
 }
 /**
  * Wrap an MCP server entry:
@@ -106,7 +110,7 @@ function parseInitArgs(argv) {
     return { apiKey, configPath, dryRun };
 }
 // ── Main ─────────────────────────────────────────────────────────────────────
-async function runInit(argv) {
+function runInit(argv) {
     const { apiKey, configPath: customPath, dryRun } = parseInitArgs(argv);
     if (!apiKey) {
         console.error("\n❌  Missing required argument: --api-key <key>\n" +
@@ -126,8 +130,9 @@ async function runInit(argv) {
     try {
         config = JSON.parse(fs.readFileSync(configPath, "utf-8"));
     }
-    catch {
-        console.error(`\n❌  Failed to parse config: ${configPath}\n`);
+    catch (err) {
+        console.error(`\n❌  Failed to parse config: ${configPath}`);
+        console.error(`    Error: ${err instanceof Error ? err.message : String(err)}\n`);
         process.exit(1);
     }
     const servers = { ...(config.mcpServers ?? {}) };

package/dist/lib/supabase-client.js

@@ -76,7 +76,7 @@ const createSupabaseClient = (config) => {
                 const statusData = {
                     agent_id: agentId,
                     status: status,
-                    last_seen: new Date().toISOString(),
+                    last_heartbeat: new Date().toISOString(),
                 };
                 const { error } = await supabase
                     .from("agents")

package/dist/logger.js

@@ -41,6 +41,8 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createLogger = void 0;
 const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
 const MAX_STORED_EVENTS = 1000;
 /**
  * Count events by a specific field
@@ -77,7 +79,7 @@ const fireWebhookAlert = (webhookUrl, event) => {
  * @param alertOnSeverity - Severity levels that trigger webhook alerts
  * @returns Logger functions
  */
-const createLogger = (logFile = "mcp_security.log", supabaseClient, agentId = "", alertWebhook, alertOnSeverity = ["HIGH", "CRITICAL"]) => {
+const createLogger = (logFile = path.join(os.homedir(), ".contextguard", "mcp_security.log"), supabaseClient, agentId = "", alertWebhook, alertOnSeverity = ["HIGH", "CRITICAL"]) => {
     let events = [];
     return {
         /**
@@ -99,12 +101,14 @@ const createLogger = (logFile = "mcp_security.log", supabaseClient, agentId = ""
             if (events.length > MAX_STORED_EVENTS) {
                 events = events.slice(-MAX_STORED_EVENTS);
             }
-            // Write to log file
+            // Write to log file (silently fail if filesystem is read-only)
             try {
+                fs.mkdirSync(path.dirname(logFile), { recursive: true });
                 fs.appendFileSync(logFile, JSON.stringify(event) + "\n");
             }
-            catch (error) {
-                console.error("Failed to write to log file:", error);
+            catch {
+                // Silently ignore filesystem errors to avoid polluting stderr
+                // This can happen in read-only environments like Claude Desktop
             }
             // Alert on high/critical severity
             if (severity === "HIGH" || severity === "CRITICAL") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "contextguard",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Security monitoring wrapper for MCP servers with enterprise features",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -67,4 +67,4 @@
     "@anthropic-ai/sdk": "^0.54.0",
     "@supabase/supabase-js": "^2.79.0"
   }
-}
+}