palaryn 0.1.0 → 0.3.2

package/dist/src/interceptor/provider-interceptor.js

@@ -0,0 +1,302 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProviderInterceptor = void 0;
+const DEFAULT_URL_PATTERNS = [
+    'api\\.anthropic\\.com',
+    'api\\.openai\\.com',
+    'generativelanguage\\.googleapis\\.com',
+];
+const CLAUDE_TOOL_TYPES = {
+    computer_20241022: 'computer_use',
+    str_replace_editor: 'text_editor',
+    bash_20241022: 'bash',
+};
+const OPENAI_TOOL_TYPES = new Set([
+    'code_interpreter',
+    'file_search',
+    'web_search',
+]);
+const GEMINI_TOOL_TYPES = new Set([
+    'code_execution',
+    'google_search',
+]);
+class ProviderInterceptor {
+    constructor(config) {
+        const patterns = config.provider_url_patterns?.length
+            ? config.provider_url_patterns
+            : DEFAULT_URL_PATTERNS;
+        this.urlPatterns = patterns.map((p) => new RegExp(p));
+        this.scanInputs = config.scan_inputs;
+        this.scanOutputs = config.scan_outputs;
+    }
+    /** Check if a URL matches any provider pattern */
+    matchesProvider(url) {
+        return this.urlPatterns.some((re) => re.test(url));
+    }
+    /** Detect which provider a URL belongs to */
+    detectProvider(url) {
+        if (/api\.anthropic\.com/.test(url))
+            return 'claude';
+        if (/api\.openai\.com/.test(url))
+            return 'openai';
+        if (/generativelanguage\.googleapis\.com/.test(url))
+            return 'gemini';
+        return 'unknown';
+    }
+    /** Extract tool blocks from a request body (pre-execution) */
+    extractFromRequest(body, provider) {
+        if (!this.scanInputs || !body || typeof body !== 'object')
+            return [];
+        try {
+            switch (provider) {
+                case 'claude': return this.extractClaudeRequest(body);
+                case 'openai': return this.extractOpenAIRequest(body);
+                case 'gemini': return this.extractGeminiRequest(body);
+                default: return [];
+            }
+        }
+        catch {
+            return [];
+        }
+    }
+    /** Extract tool blocks from a response body (post-execution) */
+    extractFromResponse(body, provider) {
+        if (!this.scanOutputs || !body || typeof body !== 'object')
+            return [];
+        try {
+            switch (provider) {
+                case 'claude': return this.extractClaudeResponse(body);
+                case 'openai': return this.extractOpenAIResponse(body);
+                case 'gemini': return this.extractGeminiResponse(body);
+                default: return [];
+            }
+        }
+        catch {
+            return [];
+        }
+    }
+    /** Get all inputs as a flat object for DLP scanning */
+    flattenInputsForDLP(blocks) {
+        const result = {};
+        for (const block of blocks) {
+            for (const [key, value] of Object.entries(block.inputs)) {
+                result[`${block.tool_name}.${key}`] = value;
+            }
+        }
+        return result;
+    }
+    /** Get all outputs as a flat object for DLP scanning */
+    flattenOutputsForDLP(blocks) {
+        const result = {};
+        for (const block of blocks) {
+            if (block.outputs !== undefined) {
+                result[`${block.tool_name}.output`] = block.outputs;
+            }
+        }
+        return result;
+    }
+    // --- Claude extraction ---
+    extractClaudeRequest(body) {
+        const blocks = [];
+        const messages = getArray(body, 'messages');
+        let index = 0;
+        for (const msg of messages) {
+            const content = getArray(msg, 'content');
+            for (const part of content) {
+                if (!isObject(part))
+                    continue;
+                const type = getString(part, 'type');
+                if (type === 'tool_use') {
+                    const name = getString(part, 'name') || 'unknown';
+                    blocks.push({
+                        provider: 'claude',
+                        tool_name: name,
+                        tool_type: resolveClaudeToolType(name),
+                        inputs: isObject(part.input) ? part.input : {},
+                        block_index: index++,
+                    });
+                }
+                else if (type === 'tool_result') {
+                    const toolUseId = getString(part, 'tool_use_id') || 'unknown';
+                    blocks.push({
+                        provider: 'claude',
+                        tool_name: `tool_result:${toolUseId}`,
+                        tool_type: 'tool_result',
+                        inputs: {},
+                        outputs: part.content,
+                        block_index: index++,
+                    });
+                }
+            }
+        }
+        return blocks;
+    }
+    extractClaudeResponse(body) {
+        const blocks = [];
+        const content = getArray(body, 'content');
+        let index = 0;
+        for (const part of content) {
+            if (!isObject(part))
+                continue;
+            if (getString(part, 'type') === 'tool_use') {
+                const name = getString(part, 'name') || 'unknown';
+                blocks.push({
+                    provider: 'claude',
+                    tool_name: name,
+                    tool_type: resolveClaudeToolType(name),
+                    inputs: isObject(part.input) ? part.input : {},
+                    block_index: index++,
+                });
+            }
+        }
+        return blocks;
+    }
+    // --- OpenAI extraction ---
+    extractOpenAIRequest(body) {
+        const blocks = [];
+        const messages = getArray(body, 'messages');
+        let index = 0;
+        for (const msg of messages) {
+            const toolCalls = getArray(msg, 'tool_calls');
+            for (const tc of toolCalls) {
+                if (!isObject(tc))
+                    continue;
+                const fn = isObject(tc.function) ? tc.function : null;
+                if (!fn)
+                    continue;
+                const name = getString(fn, 'name') || 'unknown';
+                const args = parseJsonString(getString(fn, 'arguments'));
+                blocks.push({
+                    provider: 'openai',
+                    tool_name: name,
+                    tool_type: resolveOpenAIToolType(name),
+                    inputs: args,
+                    block_index: index++,
+                });
+            }
+        }
+        return blocks;
+    }
+    extractOpenAIResponse(body) {
+        const blocks = [];
+        const choices = getArray(body, 'choices');
+        let index = 0;
+        for (const choice of choices) {
+            if (!isObject(choice))
+                continue;
+            const message = isObject(choice.message) ? choice.message : null;
+            if (!message)
+                continue;
+            const toolCalls = getArray(message, 'tool_calls');
+            for (const tc of toolCalls) {
+                if (!isObject(tc))
+                    continue;
+                const fn = isObject(tc.function) ? tc.function : null;
+                if (!fn)
+                    continue;
+                const name = getString(fn, 'name') || 'unknown';
+                const args = parseJsonString(getString(fn, 'arguments'));
+                blocks.push({
+                    provider: 'openai',
+                    tool_name: name,
+                    tool_type: resolveOpenAIToolType(name),
+                    inputs: args,
+                    block_index: index++,
+                });
+            }
+        }
+        return blocks;
+    }
+    // --- Gemini extraction ---
+    extractGeminiRequest(body) {
+        const blocks = [];
+        const contents = getArray(body, 'contents');
+        let index = 0;
+        for (const content of contents) {
+            if (!isObject(content))
+                continue;
+            const parts = getArray(content, 'parts');
+            for (const part of parts) {
+                if (!isObject(part))
+                    continue;
+                const fc = isObject(part.functionCall) ? part.functionCall : null;
+                if (!fc)
+                    continue;
+                const name = getString(fc, 'name') || 'unknown';
+                blocks.push({
+                    provider: 'gemini',
+                    tool_name: name,
+                    tool_type: resolveGeminiToolType(name),
+                    inputs: isObject(fc.args) ? fc.args : {},
+                    block_index: index++,
+                });
+            }
+        }
+        return blocks;
+    }
+    extractGeminiResponse(body) {
+        const blocks = [];
+        const candidates = getArray(body, 'candidates');
+        let index = 0;
+        for (const candidate of candidates) {
+            if (!isObject(candidate))
+                continue;
+            const content = isObject(candidate.content) ? candidate.content : null;
+            if (!content)
+                continue;
+            const parts = getArray(content, 'parts');
+            for (const part of parts) {
+                if (!isObject(part))
+                    continue;
+                const fc = isObject(part.functionCall) ? part.functionCall : null;
+                if (!fc)
+                    continue;
+                const name = getString(fc, 'name') || 'unknown';
+                blocks.push({
+                    provider: 'gemini',
+                    tool_name: name,
+                    tool_type: resolveGeminiToolType(name),
+                    inputs: isObject(fc.args) ? fc.args : {},
+                    block_index: index++,
+                });
+            }
+        }
+        return blocks;
+    }
+}
+exports.ProviderInterceptor = ProviderInterceptor;
+// --- Helpers ---
+function isObject(val) {
+    return val !== null && typeof val === 'object' && !Array.isArray(val);
+}
+function getArray(obj, key) {
+    if (!isObject(obj))
+        return [];
+    const val = obj[key];
+    return Array.isArray(val) ? val : [];
+}
+function getString(obj, key) {
+    const val = obj[key];
+    return typeof val === 'string' ? val : '';
+}
+function parseJsonString(str) {
+    if (!str)
+        return {};
+    try {
+        const parsed = JSON.parse(str);
+        return isObject(parsed) ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+function resolveClaudeToolType(name) {
+    return CLAUDE_TOOL_TYPES[name] || 'function';
+}
+function resolveOpenAIToolType(name) {
+    return OPENAI_TOOL_TYPES.has(name) ? name : 'function';
+}
+function resolveGeminiToolType(name) {
+    return GEMINI_TOOL_TYPES.has(name) ? name : 'function';
+}
+//# sourceMappingURL=provider-interceptor.js.map

package/dist/src/interceptor/provider-interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-interceptor.js","sourceRoot":"","sources":["../../../src/interceptor/provider-interceptor.ts"],"names":[],"mappings":";;;AAaA,MAAM,oBAAoB,GAAG;IAC3B,uBAAuB;IACvB,oBAAoB;IACpB,uCAAuC;CACxC,CAAC;AAEF,MAAM,iBAAiB,GAA2B;IAChD,iBAAiB,EAAE,cAAc;IACjC,kBAAkB,EAAE,aAAa;IACjC,aAAa,EAAE,MAAM;CACtB,CAAC;AAEF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,kBAAkB;IAClB,aAAa;IACb,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,gBAAgB;IAChB,eAAe;CAChB,CAAC,CAAC;AAEH,MAAa,mBAAmB;IAK9B,YAAY,MAA+B;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,qBAAqB,EAAE,MAAM;YACnD,CAAC,CAAC,MAAM,CAAC,qBAAqB;YAC9B,CAAC,CAAC,oBAAoB,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,CAAC;IAED,kDAAkD;IAClD,eAAe,CAAC,GAAW;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,6CAA6C;IAC7C,cAAc,CAAC,GAAW;QACxB,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC;QACrD,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC;QAClD,IAAI,qCAAqC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC;QACrE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,8DAA8D;IAC9D,kBAAkB,CAAC,IAAa,EAAE,QAAgB;QAChD,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACrE,IAAI,CAAC;YACH,QAAQ,QAAQ,EAAE,CAAC;gBACjB,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBACtD,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBACtD,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBACtD,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,mBAAmB,CAAC,IAAa,EAAE,QAAgB;QACjD,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACtE,IAAI,CAAC;YACH,QAAQ,QAAQ,EAAE,CAAC;gBACjB,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;gBACvD,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;gBACvD,KAAK,QAAQ,CAAC,CAAC,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;gBACvD,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,mBAAmB,CAAC,MAA2B;QAC7C,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxD,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,wDAAwD;IACxD,oBAAoB,CAAC,MAA2B;QAC9C,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,SAAS,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,4BAA4B;IAEpB,oBAAoB,CAAC,IAAa;QACxC,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACzC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC3B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACrC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;oBACxB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC;oBAClD,MAAM,CAAC,IAAI,CAAC;wBACV,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,IAAI;wBACf,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC;wBACtC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE;wBACzE,WAAW,EAAE,KAAK,EAAE;qBACrB,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;oBAClC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,SAAS,CAAC;oBAC9D,MAAM,CAAC,IAAI,CAAC;wBACV,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE,eAAe,SAAS,EAAE;wBACrC,SAAS,EAAE,aAAa;wBACxB,MAAM,EAAE,EAAE;wBACV,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,WAAW,EAAE,KAAK,EAAE;qBACrB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,qBAAqB,CAAC,IAAa;QACzC,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC9B,IAAI,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC;oBACtC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE;oBACzE,WAAW,EAAE,KAAK,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,4BAA4B;IAEpB,oBAAoB,CAAC,IAAa;QACxC,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAC9C,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC5B,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAmC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACjF,IAAI,CAAC,EAAE;oBAAE,SAAS;gBAClB,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC;gBAChD,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;gBACzD,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC;oBACtC,MAAM,EAAE,IAAI;oBACZ,WAAW,EAAE,KAAK,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,qBAAqB,CAAC,IAAa;QACzC,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,SAAS;YAChC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAkC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5F,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAClD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC5B,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAmC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACjF,IAAI,CAAC,EAAE;oBAAE,SAAS;gBAClB,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC;gBAChD,MAAM,IAAI,GAAG,eAAe,CAAC,SAAS,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;gBACzD,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC;oBACtC,MAAM,EAAE,IAAI;oBACZ,WAAW,EAAE,KAAK,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,4BAA4B;IAEpB,oBAAoB,CAAC,IAAa;QACxC,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC9B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAuC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC7F,IAAI,CAAC,EAAE;oBAAE,SAAS;gBAClB,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC;oBACtC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAA+B,CAAC,CAAC,CAAC,EAAE;oBACnE,WAAW,EAAE,KAAK,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,qBAAqB,CAAC,IAAa;QACzC,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAChD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS;YACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAkC,CAAC,CAAC,CAAC,IAAI,CAAC;YAClG,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,SAAS;gBAC9B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAuC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC7F,IAAI,CAAC,EAAE;oBAAE,SAAS;gBAClB,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC;oBACtC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAA+B,CAAC,CAAC,CAAC,EAAE;oBACnE,WAAW,EAAE,KAAK,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AA/OD,kDA+OC;AAED,kBAAkB;AAElB,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY,EAAE,GAAW;IACzC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,SAAS,CAAC,GAA4B,EAAE,GAAW;IAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC;AAC/C,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;AACzD,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;AACzD,CAAC"}

package/dist/src/mcp/auth-verifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-verifier.d.ts","sourceRoot":"","sources":["../../../src/mcp/auth-verifier.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,MAAM,gDAAgD,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,qBAAa,mBAAoB,YAAW,kBAAkB;IAC5D,OAAO,CAAC,aAAa,CAAC,CAAuB;IAC7C,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,eAAe,CAAC,CAAkB;gBAE9B,IAAI,EAAE,kBAAkB;IAMpC;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAcpB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;CAmG1D"}
+{"version":3,"file":"auth-verifier.d.ts","sourceRoot":"","sources":["../../../src/mcp/auth-verifier.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,MAAM,gDAAgD,CAAC;AAE1E,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,qBAAa,mBAAoB,YAAW,kBAAkB;IAC5D,OAAO,CAAC,aAAa,CAAC,CAAuB;IAC7C,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,eAAe,CAAC,CAAkB;gBAE9B,IAAI,EAAE,kBAAkB;IAMpC;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAcpB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;CAmG1D"}

package/dist/src/mcp/auth-verifier.js

@@ -43,6 +43,7 @@ exports.HybridTokenVerifier = void 0;
  * `--header "Authorization: Bearer <api-key>"` usage still works.
  */
 const crypto = __importStar(require("crypto"));
+const errors_js_1 = require("@modelcontextprotocol/sdk/server/auth/errors.js");
 const auth_1 = require("../middleware/auth");
 class HybridTokenVerifier {
     constructor(deps) {
@@ -83,7 +84,7 @@ class HybridTokenVerifier {
                 if (keyConfig.expires_at) {
                     const expiresAt = new Date(keyConfig.expires_at);
                     if (expiresAt.getTime() <= Date.now()) {
-                        throw new Error('API key has expired');
+                        throw new errors_js_1.InvalidTokenError('API key has expired');
                     }
                 }
                 // Fire-and-forget: update last_used_at
@@ -155,7 +156,7 @@ class HybridTokenVerifier {
                 },
             };
         }
-        throw new Error('Invalid access token');
+        throw new errors_js_1.InvalidTokenError('Invalid access token');
     }
 }
 exports.HybridTokenVerifier = HybridTokenVerifier;

package/dist/src/mcp/auth-verifier.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-verifier.js","sourceRoot":"","sources":["../../../src/mcp/auth-verifier.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;GAOG;AACH,+CAAiC;AAKjC,6CAAwD;AASxD,MAAa,mBAAmB;IAK9B,YAAY,IAAwB;QAClC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,KAAa;QACtC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QACrE,IAAI,OAA2B,CAAC;QAEhC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;YACjE,IAAI,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,OAAO,GAAG,GAAG,CAAC;YAChB,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACnC,uDAAuD;QACvD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,+CAA+C;YACjD,CAAC;QACH,CAAC;QAED,8EAA8E;QAC9E,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBACpC,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;oBACzB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;oBACjD,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;wBACtC,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;oBACzC,CAAC;gBACH,CAAC;gBAED,uCAAuC;gBACvC,SAAS,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAElD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;gBACpC,MAAM,WAAW,GAAG,IAAA,yBAAkB,EAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAEpE,OAAO;oBACL,KAAK;oBACL,QAAQ,EAAE,SAAS;oBACnB,MAAM,EAAE,CAAC,WAAW,CAAC;oBACrB,SAAS,EAAE,SAAS,CAAC,UAAU;wBAC7B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;wBAC7D,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,EAAE,wBAAwB;oBACnE,KAAK,EAAE;wBACL,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,QAAQ,EAAE,UAAU,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;wBAC1F,KAAK;wBACL,WAAW;wBACX,WAAW,EAAE,SAAS;qBACvB;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,+EAA+E;QAC/E,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,IAAI,OAA6D,CAAC;YAClE,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;gBACrC,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxE,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBAChC,uCAAuC;gBACvC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBAEpF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;gBAClC,MAAM,WAAW,GAAG,IAAA,yBAAkB,EAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAEpE,OAAO;oBACL,KAAK;oBACL,QAAQ,EAAE,SAAS;oBACnB,MAAM,EAAE,CAAC,WAAW,CAAC;oBACrB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,EAAE,MAAM;oBACxD,KAAK,EAAE;wBACL,YAAY,EAAE,OAAO,CAAC,YAAY;wBAClC,QAAQ,EAAE,UAAU,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;wBAC1F,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,KAAK;wBACL,WAAW;wBACX,WAAW,EAAE,SAAS;wBACtB,YAAY,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;qBACjF;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO;gBACL,KAAK;gBACL,QAAQ,EAAE,WAAW;gBACrB,MAAM,EAAE,CAAC,WAAW,CAAC;gBACrB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK;gBAChD,KAAK,EAAE;oBACL,YAAY,EAAE,YAAY;oBAC1B,QAAQ,EAAE,WAAW;oBACrB,KAAK,EAAE,EAAE;oBACT,WAAW,EAAE,EAAE;oBACf,WAAW,EAAE,MAAM;iBACpB;aACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;CACF;AAhID,kDAgIC"}
+{"version":3,"file":"auth-verifier.js","sourceRoot":"","sources":["../../../src/mcp/auth-verifier.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;GAOG;AACH,+CAAiC;AAGjC,+EAAoF;AAGpF,6CAAwD;AASxD,MAAa,mBAAmB;IAK9B,YAAY,IAAwB;QAClC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACK,kBAAkB,CAAC,KAAa;QACtC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QACrE,IAAI,OAA2B,CAAC;QAEhC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;YACjE,IAAI,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;gBAC/C,OAAO,GAAG,GAAG,CAAC;YAChB,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACnC,uDAAuD;QACvD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,+CAA+C;YACjD,CAAC;QACH,CAAC;QAED,8EAA8E;QAC9E,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBACpC,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;oBACzB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;oBACjD,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;wBACtC,MAAM,IAAI,6BAAiB,CAAC,qBAAqB,CAAC,CAAC;oBACrD,CAAC;gBACH,CAAC;gBAED,uCAAuC;gBACvC,SAAS,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAElD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;gBACpC,MAAM,WAAW,GAAG,IAAA,yBAAkB,EAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAEpE,OAAO;oBACL,KAAK;oBACL,QAAQ,EAAE,SAAS;oBACnB,MAAM,EAAE,CAAC,WAAW,CAAC;oBACrB,SAAS,EAAE,SAAS,CAAC,UAAU;wBAC7B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;wBAC7D,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,EAAE,wBAAwB;oBACnE,KAAK,EAAE;wBACL,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,QAAQ,EAAE,UAAU,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;wBAC1F,KAAK;wBACL,WAAW;wBACX,WAAW,EAAE,SAAS;qBACvB;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,+EAA+E;QAC/E,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,IAAI,OAA6D,CAAC;YAClE,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;gBACrC,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxE,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBAChC,uCAAuC;gBACvC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBAEpF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;gBAClC,MAAM,WAAW,GAAG,IAAA,yBAAkB,EAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAEpE,OAAO;oBACL,KAAK;oBACL,QAAQ,EAAE,SAAS;oBACnB,MAAM,EAAE,CAAC,WAAW,CAAC;oBACrB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,EAAE,MAAM;oBACxD,KAAK,EAAE;wBACL,YAAY,EAAE,OAAO,CAAC,YAAY;wBAClC,QAAQ,EAAE,UAAU,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;wBAC1F,OAAO,EAAE,OAAO,CAAC,OAAO;wBACxB,KAAK;wBACL,WAAW;wBACX,WAAW,EAAE,SAAS;wBACtB,YAAY,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;qBACjF;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO;gBACL,KAAK;gBACL,QAAQ,EAAE,WAAW;gBACrB,MAAM,EAAE,CAAC,WAAW,CAAC;gBACrB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK;gBAChD,KAAK,EAAE;oBACL,YAAY,EAAE,YAAY;oBAC1B,QAAQ,EAAE,WAAW;oBACrB,KAAK,EAAE,EAAE;oBACT,WAAW,EAAE,EAAE;oBACf,WAAW,EAAE,MAAM;iBACpB;aACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,6BAAiB,CAAC,sBAAsB,CAAC,CAAC;IACtD,CAAC;CACF;AAhID,kDAgIC"}

package/dist/src/mcp/bridge.d.ts

@@ -2,6 +2,7 @@ import { Readable, Writable } from 'stream';
 import { Gateway } from '../server/gateway';
 import { Actor, Source } from '../types/tool-call';
 import { GatewayConfig } from '../types/config';
+import { MCPToolHandler } from './tool-definitions';
 /**
  * Configuration for the MCP bridge defaults.
  * These values are used when MCP tool calls do not supply them explicitly.
@@ -22,10 +23,9 @@ export interface MCPBridgeConfig {
  *
  * Communication uses JSON-RPC 2.0 over stdio (line-delimited).
  *
- * It exposes three MCP tools:
- * - `http_request` - Execute any HTTP request through the gateway
- * - `http_get` - Shorthand for GET requests
- * - `http_post` - Shorthand for POST requests
+ * Tools are managed via a registry pattern. By default, HTTP tools are
+ * registered (http_request, http_get, http_post). Additional tools
+ * (file, sql, shell) can be registered dynamically.
  *
  * Each tool constructs a proper ToolCall, runs it through the full gateway
  * pipeline (policy, DLP, budget, rate limiting, execution), and returns
@@ -43,7 +43,16 @@ export declare class MCPBridge {
     private bridgeConfig;
     private transport;
     private initialized;
+    private toolRegistry;
     constructor(gateway: Gateway, bridgeConfig?: MCPBridgeConfig);
+    /**
+     * Register a single tool handler in the registry.
+     */
+    registerTool(handler: MCPToolHandler): void;
+    /**
+     * Register multiple tool handlers in the registry.
+     */
+    registerTools(handlers: MCPToolHandler[]): void;
     /**
      * Connect via stdio transport (reads from stdin, writes to stdout).
      * This is the standard way to run an MCP server for CLI-based clients.
@@ -74,14 +83,9 @@ export declare class MCPBridge {
     private handleToolsList;
     /** Handle `tools/call` - execute a tool through the gateway. */
     private handleToolsCall;
-    /** Execute `http_request` tool - arbitrary HTTP method. */
-    private executeHttpRequest;
-    /** Execute `http_get` tool - GET request shorthand. */
-    private executeHttpGet;
-    /** Execute `http_post` tool - POST request shorthand. */
-    private executeHttpPost;
     /**
      * Build a ToolCall from MCP tool arguments, applying bridge defaults.
+     * Kept for backward compatibility with tests that access it via reflection.
      */
     private buildToolCall;
     /**

package/dist/src/mcp/bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../../src/mcp/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAE5C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAA0B,KAAK,EAAE,MAAM,EAAY,MAAM,oBAAoB,CAAC;AAErF,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAiEhD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA6RD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,YAAY,CAA4B;IAChD,OAAO,CAAC,SAAS,CAA+B;IAChD,OAAO,CAAC,WAAW,CAAkB;gBAEzB,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,eAAe;IAQ5D;;;;OAIG;IACG,YAAY,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAKtE;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ5B;;OAEG;IACH,UAAU,IAAI,OAAO;IAIrB;;OAEG;IACH,aAAa,IAAI,OAAO;IAQxB,qEAAqE;IACrE,OAAO,CAAC,aAAa;IAarB,6DAA6D;IAC7D,OAAO,CAAC,kBAAkB;IAS1B,qDAAqD;YACvC,aAAa;IAwB3B,gDAAgD;IAChD,OAAO,CAAC,gBAAgB;IAcxB,oEAAoE;IACpE,OAAO,CAAC,eAAe;IAMvB,gEAAgE;YAClD,eAAe;IAgD7B,2DAA2D;YAC7C,kBAAkB;IA8BhC,uDAAuD;YACzC,cAAc;IA0B5B,yDAAyD;YAC3C,eAAe;IA+B7B;;OAEG;IACH,OAAO,CAAC,aAAa;IA+CrB;;OAEG;YACW,gBAAgB;IA0B9B;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IA+CpB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAiB1B;;OAEG;IACH,OAAO,CAAC,SAAS;IAQjB;;OAEG;IACH,OAAO,CAAC,SAAS;IAOjB;;OAEG;IACH,OAAO,CAAC,UAAU;IAUlB;;OAEG;IACH,OAAO,CAAC,SAAS;CASlB;AAMD;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,aAAa,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,EACtC,YAAY,CAAC,EAAE,eAAe,GAC7B,OAAO,CAAC,SAAS,CAAC,CAyBpB"}
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../../src/mcp/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAE5C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAA0B,KAAK,EAAE,MAAM,EAAY,MAAM,oBAAoB,CAAC;AAErF,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,OAAO,EACL,cAAc,EAOf,MAAM,oBAAoB,CAAC;AAoD5B;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,0CAA0C;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAqJD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,YAAY,CAA4B;IAChD,OAAO,CAAC,SAAS,CAA+B;IAChD,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,YAAY,CAA0C;gBAElD,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,eAAe;IAW5D;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAI3C;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,IAAI;IAM/C;;;;OAIG;IACG,YAAY,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAKtE;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ5B;;OAEG;IACH,UAAU,IAAI,OAAO;IAIrB;;OAEG;IACH,aAAa,IAAI,OAAO;IAQxB,qEAAqE;IACrE,OAAO,CAAC,aAAa;IAarB,6DAA6D;IAC7D,OAAO,CAAC,kBAAkB;IAS1B,qDAAqD;YACvC,aAAa;IAwB3B,gDAAgD;IAChD,OAAO,CAAC,gBAAgB;IAcxB,oEAAoE;IACpE,OAAO,CAAC,eAAe;IAKvB,gEAAgE;YAClD,eAAe;IAgD7B;;;OAGG;IACH,OAAO,CAAC,aAAa;IA+CrB;;OAEG;YACW,gBAAgB;IA0B9B;;;;;;;OAOG;IACH,OAAO,CAAC,YAAY;IAmDpB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAiB1B;;OAEG;IACH,OAAO,CAAC,SAAS;IAQjB;;OAEG;IACH,OAAO,CAAC,SAAS;IAOjB;;OAEG;IACH,OAAO,CAAC,UAAU;IAUlB;;OAEG;IACH,OAAO,CAAC,SAAS;CASlB;AAMD;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,aAAa,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,EACtC,YAAY,CAAC,EAAE,eAAe,GAC7B,OAAO,CAAC,SAAS,CAAC,CAoCpB"}