mongo.do 0.1.0

package/dist/mcp/server.js

@@ -0,0 +1,278 @@
+/**
+ * MCP Server Factory for mongo.do
+ *
+ * Creates MCP server instances that provide:
+ * - search: Query documents (readonly)
+ * - fetch: Retrieve full documents by ID (readonly)
+ * - do: Execute secure arbitrary code via Worker Loader sandbox (when loader available)
+ */
+/**
+ * Create an MCP server instance for mongo.do
+ *
+ * @param config - Server configuration including database access and optional code loader
+ * @returns Configured MCP server instance
+ */
+export function createMcpServer(config) {
+    const { dbAccess, codeLoader, name, version } = config;
+    const serverName = name ?? 'mongo.do';
+    const serverVersion = version ?? '1.0.0';
+    const tools = new Map();
+    // Create the server instance
+    const server = {
+        name: serverName,
+        version: serverVersion,
+        tool(name, inputSchema, handler, annotations) {
+            const definition = {
+                name,
+                description: annotations?.title ?? name,
+                inputSchema,
+                ...(annotations && { annotations }),
+            };
+            tools.set(name, {
+                definition,
+                handler: handler,
+            });
+        },
+        registerTool(tool) {
+            tools.set(tool.definition.name, tool);
+        },
+        async listTools() {
+            return Array.from(tools.values()).map(t => t.definition);
+        },
+        async callTool(name, args) {
+            const tool = tools.get(name);
+            if (!tool) {
+                return {
+                    content: [{ type: 'text', text: JSON.stringify({ error: `Tool '${name}' not found` }) }],
+                    isError: true,
+                };
+            }
+            try {
+                return await tool.handler(args);
+            }
+            catch (error) {
+                return {
+                    content: [
+                        {
+                            type: 'text',
+                            text: JSON.stringify({
+                                error: error instanceof Error ? error.message : 'Unknown error',
+                            }),
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+        },
+        async handleRequest(request) {
+            const baseResponse = {
+                jsonrpc: '2.0',
+                id: request.id,
+            };
+            // Validate JSON-RPC version
+            if (request.jsonrpc !== '2.0') {
+                return {
+                    ...baseResponse,
+                    error: {
+                        code: -32600,
+                        message: 'Invalid JSON-RPC version',
+                    },
+                };
+            }
+            switch (request.method) {
+                case 'initialize': {
+                    const initReq = request;
+                    return {
+                        ...baseResponse,
+                        result: {
+                            protocolVersion: initReq.params?.protocolVersion ?? '2024-11-05',
+                            capabilities: {
+                                tools: {},
+                            },
+                            serverInfo: {
+                                name: serverName,
+                                version: serverVersion,
+                            },
+                        },
+                    };
+                }
+                case 'tools/list': {
+                    const toolsList = await server.listTools();
+                    return {
+                        ...baseResponse,
+                        result: {
+                            tools: toolsList,
+                        },
+                    };
+                }
+                case 'tools/call': {
+                    const callReq = request;
+                    const result = await server.callTool(callReq.params.name, callReq.params.arguments ?? {});
+                    return {
+                        ...baseResponse,
+                        result,
+                    };
+                }
+                default:
+                    return {
+                        ...baseResponse,
+                        error: {
+                            code: -32601,
+                            message: `Method not found: ${request.method}`,
+                        },
+                    };
+            }
+        },
+    };
+    // Register the search tool (always available, readonly)
+    server.tool('search', {
+        type: 'object',
+        properties: {
+            query: {
+                type: 'string',
+                description: 'Search query string',
+            },
+            database: {
+                type: 'string',
+                description: 'Database to search in',
+            },
+            collection: {
+                type: 'string',
+                description: 'Collection to search in',
+            },
+            limit: {
+                type: 'number',
+                description: 'Maximum number of results (default: 10)',
+            },
+        },
+        required: ['query'],
+    }, async (args) => {
+        // Validate required field
+        if (!args.query) {
+            return {
+                content: [{ type: 'text', text: JSON.stringify({ error: 'Missing required field: query' }) }],
+                isError: true,
+            };
+        }
+        // Placeholder implementation - will be expanded in search tool issue
+        void args.database;
+        void args.collection;
+        void args.limit;
+        void dbAccess;
+        return {
+            content: [{ type: 'text', text: '{"results":[]}' }],
+        };
+    }, {
+        title: 'Search Documents',
+        readOnlyHint: true,
+        openWorldHint: true,
+    });
+    // Register the fetch tool (always available, readonly)
+    server.tool('fetch', {
+        type: 'object',
+        properties: {
+            id: {
+                type: 'string',
+                description: 'Document ID in format db.collection.ObjectId',
+            },
+        },
+        required: ['id'],
+    }, async ({ id }) => {
+        // Placeholder implementation - will be expanded in fetch tool issue
+        void id;
+        void dbAccess;
+        return {
+            content: [{ type: 'text', text: '{}' }],
+        };
+    }, {
+        title: 'Fetch Document',
+        readOnlyHint: true,
+        openWorldHint: true,
+    });
+    // Register the do tool only if codeLoader is available
+    if (codeLoader) {
+        server.tool('do', {
+            type: 'object',
+            properties: {
+                code: {
+                    type: 'string',
+                    description: 'JavaScript code to execute',
+                },
+                description: {
+                    type: 'string',
+                    description: 'What the code does',
+                },
+            },
+            required: ['code'],
+        }, async ({ code, description }) => {
+            // Execute code using the code loader
+            void description;
+            void dbAccess;
+            try {
+                const result = await codeLoader.execute(code);
+                return {
+                    content: [{ type: 'text', text: JSON.stringify(result) }],
+                    isError: !result.success,
+                };
+            }
+            catch (error) {
+                return {
+                    content: [{ type: 'text', text: JSON.stringify({ success: false, error: error instanceof Error ? error.message : 'Unknown error' }) }],
+                    isError: true,
+                };
+            }
+        }, {
+            title: 'Execute Code',
+            readOnlyHint: false,
+            destructiveHint: true,
+        });
+    }
+    return server;
+}
+/**
+ * Create a mock DatabaseAccess for testing
+ */
+export function createMockDatabaseAccess() {
+    return {
+        async findOne() {
+            return null;
+        },
+        async find() {
+            return [];
+        },
+        async insertOne() {
+            return { insertedId: 'mock-id' };
+        },
+        async insertMany() {
+            return { insertedIds: [] };
+        },
+        async updateOne() {
+            return { matchedCount: 0, modifiedCount: 0 };
+        },
+        async updateMany() {
+            return { matchedCount: 0, modifiedCount: 0 };
+        },
+        async deleteOne() {
+            return { deletedCount: 0 };
+        },
+        async deleteMany() {
+            return { deletedCount: 0 };
+        },
+        async aggregate() {
+            return [];
+        },
+        async countDocuments() {
+            return 0;
+        },
+        async listCollections() {
+            return [];
+        },
+        async listDatabases() {
+            return [];
+        },
+        getProxy() {
+            return this;
+        },
+    };
+}
+//# sourceMappingURL=server.js.map

package/dist/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAgFH;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,MAAuB;IACrD,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAA;IACtD,MAAM,UAAU,GAAG,IAAI,IAAI,UAAU,CAAA;IACrC,MAAM,aAAa,GAAG,OAAO,IAAI,OAAO,CAAA;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAA;IAElD,6BAA6B;IAC7B,MAAM,MAAM,GAAc;QACxB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,aAAa;QAEtB,IAAI,CACF,IAAY,EACZ,WAA6C,EAC7C,OAA0B,EAC1B,WAA8C;YAE9C,MAAM,UAAU,GAAsB;gBACpC,IAAI;gBACJ,WAAW,EAAE,WAAW,EAAE,KAAK,IAAI,IAAI;gBACvC,WAAW;gBACX,GAAG,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,CAAC;aACpC,CAAA;YACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;gBACd,UAAU;gBACV,OAAO,EAAE,OAAyB;aACnC,CAAC,CAAA;QACJ,CAAC;QAED,YAAY,CAAC,IAAuB;YAClC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACvC,CAAC;QAED,KAAK,CAAC,SAAS;YACb,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;QAC1D,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAA6B;YACxD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC5B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,aAAa,EAAE,CAAC,EAAE,CAAC;oBACxF,OAAO,EAAE,IAAI;iBACd,CAAA;YACH,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gCACnB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;6BAChE,CAAC;yBACH;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAA;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,OAAmB;YACrC,MAAM,YAAY,GAAG;gBACnB,OAAO,EAAE,KAAc;gBACvB,EAAE,EAAE,OAAO,CAAC,EAAE;aACf,CAAA;YAED,4BAA4B;YAC5B,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBAC9B,OAAO;oBACL,GAAG,YAAY;oBACf,KAAK,EAAE;wBACL,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,0BAA0B;qBACpC;iBACF,CAAA;YACH,CAAC;YAED,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;gBACvB,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,MAAM,OAAO,GAAG,OAA+B,CAAA;oBAC/C,OAAO;wBACL,GAAG,YAAY;wBACf,MAAM,EAAE;4BACN,eAAe,EAAE,OAAO,CAAC,MAAM,EAAE,eAAe,IAAI,YAAY;4BAChE,YAAY,EAAE;gCACZ,KAAK,EAAE,EAAE;6BACV;4BACD,UAAU,EAAE;gCACV,IAAI,EAAE,UAAU;gCAChB,OAAO,EAAE,aAAa;6BACvB;yBACF;qBACF,CAAA;gBACH,CAAC;gBAED,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAA;oBAC1C,OAAO;wBACL,GAAG,YAAY;wBACf,MAAM,EAAE;4BACN,KAAK,EAAE,SAAS;yBACjB;qBACF,CAAA;gBACH,CAAC;gBAED,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,MAAM,OAAO,GAAG,OAA8B,CAAA;oBAC9C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;oBACzF,OAAO;wBACL,GAAG,YAAY;wBACf,MAAM;qBACP,CAAA;gBACH,CAAC;gBAED;oBACE,OAAO;wBACL,GAAG,YAAY;wBACf,KAAK,EAAE;4BACL,IAAI,EAAE,CAAC,KAAK;4BACZ,OAAO,EAAE,qBAAqB,OAAO,CAAC,MAAM,EAAE;yBAC/C;qBACF,CAAA;YACL,CAAC;QACH,CAAC;KACF,CAAA;IAED,wDAAwD;IACxD,MAAM,CAAC,IAAI,CACT,QAAQ,EACR;QACE,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,qBAAqB;aACnC;YACD,QAAQ,EAAE;gBACR,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,uBAAuB;aACrC;YACD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,yBAAyB;aACvC;YACD,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,yCAAyC;aACvD;SACF;QACD,QAAQ,EAAE,CAAC,OAAO,CAAC;KACpB,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,0BAA0B;QAC1B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,EAAE,CAAC;gBAC7F,OAAO,EAAE,IAAI;aACd,CAAA;QACH,CAAC;QACD,qEAAqE;QACrE,KAAK,IAAI,CAAC,QAAQ,CAAA;QAClB,KAAK,IAAI,CAAC,UAAU,CAAA;QACpB,KAAK,IAAI,CAAC,KAAK,CAAA;QACf,KAAK,QAAQ,CAAA;QACb,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;SACpD,CAAA;IACH,CAAC,EACD;QACE,KAAK,EAAE,kBAAkB;QACzB,YAAY,EAAE,IAAI;QAClB,aAAa,EAAE,IAAI;KACpB,CACF,CAAA;IAED,uDAAuD;IACvD,MAAM,CAAC,IAAI,CACT,OAAO,EACP;QACE,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,EAAE,EAAE;gBACF,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,8CAA8C;aAC5D;SACF;QACD,QAAQ,EAAE,CAAC,IAAI,CAAC;KACjB,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;QACf,oEAAoE;QACpE,KAAK,EAAE,CAAA;QACP,KAAK,QAAQ,CAAA;QACb,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;SACxC,CAAA;IACH,CAAC,EACD;QACE,KAAK,EAAE,gBAAgB;QACvB,YAAY,EAAE,IAAI;QAClB,aAAa,EAAE,IAAI;KACpB,CACF,CAAA;IAED,uDAAuD;IACvD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CACT,IAAI,EACJ;YACE,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,4BAA4B;iBAC1C;gBACD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,oBAAoB;iBAClC;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;YAC9B,qCAAqC;YACrC,KAAK,WAAW,CAAA;YAChB,KAAK,QAAQ,CAAA;YACb,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBAC7C,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;oBACzD,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO;iBACzB,CAAA;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,EAAE,CAAC;oBACtI,OAAO,EAAE,IAAI;iBACd,CAAA;YACH,CAAC;QACH,CAAC,EACD;YACE,KAAK,EAAE,cAAc;YACrB,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,IAAI;SACtB,CACF,CAAA;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL,KAAK,CAAC,OAAO;YACX,OAAO,IAAI,CAAA;QACb,CAAC;QACD,KAAK,CAAC,IAAI;YACR,OAAO,EAAE,CAAA;QACX,CAAC;QACD,KAAK,CAAC,SAAS;YACb,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAA;QAClC,CAAC;QACD,KAAK,CAAC,UAAU;YACd,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAA;QAC5B,CAAC;QACD,KAAK,CAAC,SAAS;YACb,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAA;QAC9C,CAAC;QACD,KAAK,CAAC,UAAU;YACd,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAA;QAC9C,CAAC;QACD,KAAK,CAAC,SAAS;YACb,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;QAC5B,CAAC;QACD,KAAK,CAAC,UAAU;YACd,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;QAC5B,CAAC;QACD,KAAK,CAAC,SAAS;YACb,OAAO,EAAE,CAAA;QACX,CAAC;QACD,KAAK,CAAC,cAAc;YAClB,OAAO,CAAC,CAAA;QACV,CAAC;QACD,KAAK,CAAC,eAAe;YACnB,OAAO,EAAE,CAAA;QACX,CAAC;QACD,KAAK,CAAC,aAAa;YACjB,OAAO,EAAE,CAAA;QACX,CAAC;QACD,QAAQ;YACN,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/mcp/tool-call-auditor.d.ts

@@ -0,0 +1,188 @@
+/**
+ * Tool Call Auditor
+ *
+ * Provides auditing functionality to track and log tool invocations
+ * for security and debugging purposes.
+ */
+/**
+ * Types of audit events that can be logged
+ */
+export type AuditEventType = 'invoke' | 'success' | 'error' | 'timeout';
+/**
+ * Severity levels for audit log entries
+ */
+export type AuditLogLevel = 'debug' | 'info' | 'warn' | 'error';
+/**
+ * Error information captured in audit entries
+ */
+export interface AuditError {
+    message: string;
+    code?: string;
+    stack?: string;
+}
+/**
+ * Represents a single audit log entry for a tool call
+ */
+export interface ToolCallAuditEntry {
+    /** Unique identifier for this audit entry */
+    id: string;
+    /** Identifier of the tool call being audited */
+    callId: string;
+    /** Name of the tool being called */
+    tool: string;
+    /** Type of audit event */
+    eventType: AuditEventType;
+    /** When this event occurred */
+    timestamp: Date;
+    /** Severity level of this entry */
+    level: AuditLogLevel;
+    /** Tool input parameters (optional) */
+    inputs?: Record<string, unknown>;
+    /** Tool output results (optional) */
+    outputs?: Record<string, unknown>;
+    /** Duration of the call in milliseconds (optional) */
+    durationMs?: number;
+    /** Error information if eventType is 'error' (optional) */
+    error?: AuditError;
+    /** Additional metadata for context (optional) */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Filter criteria for querying audit entries
+ */
+export interface AuditFilter {
+    /** Filter by tool name */
+    tool?: string;
+    /** Filter by event type */
+    eventType?: AuditEventType;
+    /** Filter by log level */
+    level?: AuditLogLevel;
+    /** Filter by specific call ID */
+    callId?: string;
+    /** Start of time range */
+    from?: Date;
+    /** End of time range */
+    to?: Date;
+    /** Maximum number of entries to return */
+    limit?: number;
+    /** Number of entries to skip */
+    offset?: number;
+}
+/**
+ * Summary statistics for audit entries
+ */
+export interface AuditSummary {
+    /** Total number of tool invocations */
+    totalCalls: number;
+    /** Number of successful completions */
+    successCount: number;
+    /** Number of errors */
+    errorCount: number;
+    /** Number of timeouts */
+    timeoutCount: number;
+}
+/**
+ * Options for clearing audit entries
+ */
+export interface ClearOptions {
+    /** Clear entries older than this date */
+    before?: Date;
+}
+/**
+ * Storage interface for audit entries
+ */
+export interface AuditStorage {
+    /** Store a single audit entry */
+    store(entry: ToolCallAuditEntry): Promise<void>;
+    /** Query audit entries by filter */
+    query(filter: AuditFilter): Promise<ToolCallAuditEntry[]>;
+    /** Count audit entries matching filter */
+    count(filter: AuditFilter): Promise<number>;
+    /** Clear audit entries */
+    clear(options?: ClearOptions): Promise<void>;
+}
+/**
+ * Configuration options for the ToolCallAuditor
+ */
+export interface ToolCallAuditorOptions {
+    /** Storage backend for audit entries */
+    storage: AuditStorage;
+    /** Minimum log level to record (entries below this level are discarded) */
+    minLevel?: AuditLogLevel;
+    /** Whether to redact input parameters */
+    redactInputs?: boolean;
+    /** Whether to redact output results */
+    redactOutputs?: boolean;
+    /** Custom ID generator function */
+    generateId?: () => string;
+    /** Whether auditing is enabled */
+    enabled?: boolean;
+}
+/**
+ * Tool Call Auditor
+ *
+ * Tracks and logs tool invocations for security and debugging purposes.
+ * Provides methods for logging different event types, querying audit history,
+ * and generating summary statistics.
+ */
+export declare class ToolCallAuditor {
+    private storage;
+    private minLevel;
+    private redactInputs;
+    private redactOutputs;
+    private generateId;
+    private enabled;
+    constructor(options: ToolCallAuditorOptions);
+    /**
+     * Check if a log level should be recorded based on minLevel threshold
+     */
+    private shouldLog;
+    /**
+     * Create an audit entry with common fields
+     */
+    private createEntry;
+    /**
+     * Log a tool invocation event
+     */
+    logInvoke(callId: string, tool: string, inputs: Record<string, unknown>, metadata?: Record<string, unknown>): Promise<void>;
+    /**
+     * Log a successful tool completion event
+     */
+    logSuccess(callId: string, tool: string, outputs: Record<string, unknown>, durationMs: number, metadata?: Record<string, unknown>): Promise<void>;
+    /**
+     * Log a tool error event
+     */
+    logError(callId: string, tool: string, error: Error, durationMs: number, metadata?: Record<string, unknown>): Promise<void>;
+    /**
+     * Log a tool timeout event
+     */
+    logTimeout(callId: string, tool: string, durationMs: number, metadata?: Record<string, unknown>): Promise<void>;
+    /**
+     * Query audit entries based on filter criteria
+     */
+    query(filter: AuditFilter): Promise<ToolCallAuditEntry[]>;
+    /**
+     * Get all audit entries for a specific tool call
+     */
+    getCallAuditTrail(callId: string): Promise<ToolCallAuditEntry[]>;
+    /**
+     * Get summary statistics for audit entries
+     */
+    getSummary(filter?: {
+        from?: Date;
+        to?: Date;
+    }): Promise<AuditSummary>;
+    /**
+     * Clear audit entries
+     */
+    clear(options?: ClearOptions): Promise<void>;
+    /**
+     * Wrap a tool function with automatic auditing
+     *
+     * @param toolName - Name of the tool being wrapped
+     * @param toolFn - The tool function to wrap
+     * @returns A wrapped function that automatically logs invoke/success/error events
+     */
+    wrapTool<TInput extends Record<string, unknown>, TOutput>(toolName: string, toolFn: (input: TInput) => Promise<TOutput>): (input: TInput) => Promise<TOutput>;
+}
+//# sourceMappingURL=tool-call-auditor.d.ts.map

package/dist/mcp/tool-call-auditor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-call-auditor.d.ts","sourceRoot":"","sources":["../../src/mcp/tool-call-auditor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAA;AAEvE;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;AAE/D;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,6CAA6C;IAC7C,EAAE,EAAE,MAAM,CAAA;IACV,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAA;IACd,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,0BAA0B;IAC1B,SAAS,EAAE,cAAc,CAAA;IACzB,+BAA+B;IAC/B,SAAS,EAAE,IAAI,CAAA;IACf,mCAAmC;IACnC,KAAK,EAAE,aAAa,CAAA;IACpB,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,2BAA2B;IAC3B,SAAS,CAAC,EAAE,cAAc,CAAA;IAC1B,0BAA0B;IAC1B,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,0BAA0B;IAC1B,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,wBAAwB;IACxB,EAAE,CAAC,EAAE,IAAI,CAAA;IACT,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAA;IAClB,uCAAuC;IACvC,YAAY,EAAE,MAAM,CAAA;IACpB,uBAAuB;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,yBAAyB;IACzB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,yCAAyC;IACzC,MAAM,CAAC,EAAE,IAAI,CAAA;CACd;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,iCAAiC;IACjC,KAAK,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,oCAAoC;IACpC,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAA;IACzD,0CAA0C;IAC1C,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3C,0BAA0B;IAC1B,KAAK,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,wCAAwC;IACxC,OAAO,EAAE,YAAY,CAAA;IACrB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,yCAAyC;IACzC,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,uCAAuC;IACvC,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,MAAM,CAAA;IACzB,kCAAkC;IAClC,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAiBD;;;;;;GAMG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,UAAU,CAAc;IAChC,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,EAAE,sBAAsB;IAS3C;;OAEG;IACH,OAAO,CAAC,SAAS;IAKjB;;OAEG;IACH,OAAO,CAAC,WAAW;IAgBnB;;OAEG;IACG,SAAS,CACb,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC;IAYhB;;OAEG;IACG,UAAU,CACd,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC;IAahB;;OAEG;IACG,QAAQ,CACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,KAAK,EACZ,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC;IAsBhB;;OAEG;IACG,UAAU,CACd,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC;IAYhB;;OAEG;IACG,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAI/D;;OAEG;IACG,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAItE;;OAEG;IACG,UAAU,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,IAAI,CAAC;QAAC,EAAE,CAAC,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IA2B5E;;OAEG;IACG,KAAK,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EACtD,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAC1C,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC;CAmBvC"}

package/dist/mcp/tool-call-auditor.js

@@ -0,0 +1,198 @@
+/**
+ * Tool Call Auditor
+ *
+ * Provides auditing functionality to track and log tool invocations
+ * for security and debugging purposes.
+ */
+import { randomUUID } from 'crypto';
+// Log level ordering for comparison
+const LOG_LEVEL_ORDER = {
+    debug: 0,
+    info: 1,
+    warn: 2,
+    error: 3,
+};
+/**
+ * Generates a unique ID for audit entries
+ */
+function defaultGenerateId() {
+    return `audit_${randomUUID()}`;
+}
+/**
+ * Tool Call Auditor
+ *
+ * Tracks and logs tool invocations for security and debugging purposes.
+ * Provides methods for logging different event types, querying audit history,
+ * and generating summary statistics.
+ */
+export class ToolCallAuditor {
+    storage;
+    minLevel;
+    redactInputs;
+    redactOutputs;
+    generateId;
+    enabled;
+    constructor(options) {
+        this.storage = options.storage;
+        this.minLevel = options.minLevel ?? 'debug';
+        this.redactInputs = options.redactInputs ?? false;
+        this.redactOutputs = options.redactOutputs ?? false;
+        this.generateId = options.generateId ?? defaultGenerateId;
+        this.enabled = options.enabled ?? true;
+    }
+    /**
+     * Check if a log level should be recorded based on minLevel threshold
+     */
+    shouldLog(level) {
+        if (!this.enabled)
+            return false;
+        return LOG_LEVEL_ORDER[level] >= LOG_LEVEL_ORDER[this.minLevel];
+    }
+    /**
+     * Create an audit entry with common fields
+     */
+    createEntry(callId, tool, eventType, level) {
+        return {
+            id: this.generateId(),
+            callId,
+            tool,
+            eventType,
+            timestamp: new Date(),
+            level,
+        };
+    }
+    /**
+     * Log a tool invocation event
+     */
+    async logInvoke(callId, tool, inputs, metadata) {
+        if (!this.shouldLog('info'))
+            return;
+        const entry = this.createEntry(callId, tool, 'invoke', 'info');
+        entry.inputs = this.redactInputs ? '[REDACTED]' : inputs;
+        if (metadata) {
+            entry.metadata = metadata;
+        }
+        await this.storage.store(entry);
+    }
+    /**
+     * Log a successful tool completion event
+     */
+    async logSuccess(callId, tool, outputs, durationMs, metadata) {
+        if (!this.shouldLog('info'))
+            return;
+        const entry = this.createEntry(callId, tool, 'success', 'info');
+        entry.outputs = this.redactOutputs ? '[REDACTED]' : outputs;
+        entry.durationMs = durationMs;
+        if (metadata) {
+            entry.metadata = metadata;
+        }
+        await this.storage.store(entry);
+    }
+    /**
+     * Log a tool error event
+     */
+    async logError(callId, tool, error, durationMs, metadata) {
+        if (!this.shouldLog('error'))
+            return;
+        const entry = this.createEntry(callId, tool, 'error', 'error');
+        const auditError = {
+            message: error.message,
+        };
+        if (error.code) {
+            auditError.code = error.code;
+        }
+        if (error.stack) {
+            auditError.stack = error.stack;
+        }
+        entry.error = auditError;
+        entry.durationMs = durationMs;
+        if (metadata) {
+            entry.metadata = metadata;
+        }
+        await this.storage.store(entry);
+    }
+    /**
+     * Log a tool timeout event
+     */
+    async logTimeout(callId, tool, durationMs, metadata) {
+        if (!this.shouldLog('warn'))
+            return;
+        const entry = this.createEntry(callId, tool, 'timeout', 'warn');
+        entry.durationMs = durationMs;
+        if (metadata) {
+            entry.metadata = metadata;
+        }
+        await this.storage.store(entry);
+    }
+    /**
+     * Query audit entries based on filter criteria
+     */
+    async query(filter) {
+        return this.storage.query(filter);
+    }
+    /**
+     * Get all audit entries for a specific tool call
+     */
+    async getCallAuditTrail(callId) {
+        return this.storage.query({ callId });
+    }
+    /**
+     * Get summary statistics for audit entries
+     */
+    async getSummary(filter) {
+        const buildFilter = (eventType) => {
+            const f = { eventType };
+            if (filter?.from) {
+                f.from = filter.from;
+            }
+            if (filter?.to) {
+                f.to = filter.to;
+            }
+            return f;
+        };
+        const [totalCalls, successCount, errorCount, timeoutCount] = await Promise.all([
+            this.storage.count(buildFilter('invoke')),
+            this.storage.count(buildFilter('success')),
+            this.storage.count(buildFilter('error')),
+            this.storage.count(buildFilter('timeout')),
+        ]);
+        return {
+            totalCalls,
+            successCount,
+            errorCount,
+            timeoutCount,
+        };
+    }
+    /**
+     * Clear audit entries
+     */
+    async clear(options) {
+        await this.storage.clear(options);
+    }
+    /**
+     * Wrap a tool function with automatic auditing
+     *
+     * @param toolName - Name of the tool being wrapped
+     * @param toolFn - The tool function to wrap
+     * @returns A wrapped function that automatically logs invoke/success/error events
+     */
+    wrapTool(toolName, toolFn) {
+        return async (input) => {
+            const callId = this.generateId();
+            const startTime = Date.now();
+            await this.logInvoke(callId, toolName, input);
+            try {
+                const result = await toolFn(input);
+                const durationMs = Date.now() - startTime;
+                await this.logSuccess(callId, toolName, result, durationMs);
+                return result;
+            }
+            catch (error) {
+                const durationMs = Date.now() - startTime;
+                await this.logError(callId, toolName, error, durationMs);
+                throw error;
+            }
+        };
+    }
+}
+//# sourceMappingURL=tool-call-auditor.js.map