paygate-mcp 0.1.0

package/dist/cli.d.ts

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+/**
+ * PayGate MCP — CLI entry point.
+ *
+ * Usage:
+ *   npx paygate-mcp wrap --server "npx my-mcp-server" --port 3402
+ *   npx paygate-mcp wrap --server "python server.py" --price 2 --rate-limit 30
+ *   npx paygate-mcp keys create --name "my-client" --credits 500
+ *   npx paygate-mcp status
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG"}

package/dist/cli.js

@@ -0,0 +1,178 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * PayGate MCP — CLI entry point.
+ *
+ * Usage:
+ *   npx paygate-mcp wrap --server "npx my-mcp-server" --port 3402
+ *   npx paygate-mcp wrap --server "python server.py" --price 2 --rate-limit 30
+ *   npx paygate-mcp keys create --name "my-client" --credits 500
+ *   npx paygate-mcp status
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const server_1 = require("./server");
+// ─── Helpers ─────────────────────────────────────────────────────────────────
+function parseArgs(argv) {
+    const command = argv[2] || 'help';
+    const flags = {};
+    for (let i = 3; i < argv.length; i++) {
+        const arg = argv[i];
+        if (arg.startsWith('--')) {
+            const key = arg.slice(2);
+            const next = argv[i + 1];
+            if (next && !next.startsWith('--')) {
+                flags[key] = next;
+                i++;
+            }
+            else {
+                flags[key] = 'true';
+            }
+        }
+    }
+    return { command, flags };
+}
+function printUsage() {
+    console.log(`
+  paygate-mcp — Monetize any MCP server with one command.
+
+  USAGE:
+    paygate-mcp wrap --server <command> [options]
+
+  OPTIONS:
+    --server <cmd>      MCP server command to wrap (required)
+                        e.g. "npx @modelcontextprotocol/server-filesystem /"
+    --port <n>          HTTP port (default: 3402)
+    --price <n>         Default credits per tool call (default: 1)
+    --rate-limit <n>    Max calls/min per key (default: 60, 0=unlimited)
+    --name <s>          Server display name (default: "PayGate MCP Server")
+    --shadow            Shadow mode — log but don't enforce payment
+    --admin-key <s>     Set admin key (default: auto-generated)
+    --tool-price <t:n>  Per-tool price override (e.g. "search:5,generate:10")
+    --import-key <k:c>  Import an existing API key with credits (e.g. "pg_abc123:100")
+
+  EXAMPLES:
+    # Wrap a filesystem MCP server
+    paygate-mcp wrap --server "npx @modelcontextprotocol/server-filesystem /tmp"
+
+    # Custom pricing and rate limit
+    paygate-mcp wrap --server "python my-server.py" --price 2 --rate-limit 30
+
+    # Shadow mode (observe without enforcing)
+    paygate-mcp wrap --server "node server.js" --shadow
+
+    # Per-tool pricing
+    paygate-mcp wrap --server "node server.js" --tool-price "search:5,generate:10"
+  `);
+}
+function parseToolPricing(input) {
+    const pricing = {};
+    const pairs = input.split(',');
+    for (const pair of pairs) {
+        const [tool, priceStr] = pair.split(':');
+        if (tool && priceStr) {
+            pricing[tool.trim()] = { creditsPerCall: parseInt(priceStr.trim(), 10) };
+        }
+    }
+    return pricing;
+}
+// ─── Main ────────────────────────────────────────────────────────────────────
+async function main() {
+    const { command, flags } = parseArgs(process.argv);
+    switch (command) {
+        case 'wrap': {
+            const serverCmd = flags['server'];
+            if (!serverCmd) {
+                console.error('Error: --server is required.\n');
+                printUsage();
+                process.exit(1);
+            }
+            // Parse server command into command + args
+            const parts = serverCmd.split(/\s+/);
+            const serverCommand = parts[0];
+            const serverArgs = parts.slice(1);
+            const port = parseInt(flags['port'] || '3402', 10);
+            const price = parseInt(flags['price'] || '1', 10);
+            const rateLimit = parseInt(flags['rate-limit'] || '60', 10);
+            const name = flags['name'] || 'PayGate MCP Server';
+            const shadowMode = flags['shadow'] === 'true' || flags['shadow'] === undefined && 'shadow' in flags;
+            const adminKey = flags['admin-key'];
+            const toolPricing = flags['tool-price'] ? parseToolPricing(flags['tool-price']) : {};
+            const server = new server_1.PayGateServer({
+                serverCommand,
+                serverArgs,
+                port,
+                defaultCreditsPerCall: price,
+                globalRateLimitPerMin: rateLimit,
+                name,
+                shadowMode: !!shadowMode,
+                toolPricing,
+            }, adminKey);
+            // Import keys if specified
+            if (flags['import-key']) {
+                const pairs = flags['import-key'].split(',');
+                for (const pair of pairs) {
+                    const [key, creditsStr] = pair.split(':');
+                    if (key && creditsStr) {
+                        server.gate.store.importKey(key.trim(), 'imported', parseInt(creditsStr.trim(), 10));
+                    }
+                }
+            }
+            // Handle graceful shutdown
+            const shutdown = async () => {
+                console.log('\nShutting down...');
+                await server.stop();
+                process.exit(0);
+            };
+            process.on('SIGINT', shutdown);
+            process.on('SIGTERM', shutdown);
+            try {
+                const result = await server.start();
+                console.log(`
+  ╔══════════════════════════════════════════════════╗
+  ║         PayGate MCP — Server Running             ║
+  ╠══════════════════════════════════════════════════╣
+  ║                                                  ║
+  ║  Endpoint:   http://localhost:${String(result.port).padEnd(5)}              ║
+  ║  Admin Key:  ${result.adminKey.slice(0, 20)}...       ║
+  ║  Wrapping:   ${serverCmd.slice(0, 35).padEnd(35)}║
+  ║                                                  ║
+  ║  Pricing:    ${String(price).padEnd(3)} credit(s) per tool call       ║
+  ║  Rate Limit: ${String(rateLimit).padEnd(3)} calls/min per key          ║
+  ║  Shadow:     ${String(!!shadowMode).padEnd(5)}                            ║
+  ║                                                  ║
+  ╠══════════════════════════════════════════════════╣
+  ║  POST /mcp     — JSON-RPC (X-API-Key header)    ║
+  ║  GET  /status  — Dashboard (X-Admin-Key header)  ║
+  ║  POST /keys    — Create key (X-Admin-Key header) ║
+  ║  POST /topup   — Add credits (X-Admin-Key header)║
+  ╚══════════════════════════════════════════════════╝
+`);
+                console.log(`  Admin key (save this): ${result.adminKey}\n`);
+            }
+            catch (error) {
+                console.error('Failed to start server:', error);
+                process.exit(1);
+            }
+            break;
+        }
+        case 'help':
+        case '--help':
+        case '-h':
+            printUsage();
+            break;
+        case 'version':
+        case '--version':
+        case '-v':
+            console.log('paygate-mcp v0.1.0');
+            break;
+        default:
+            console.error(`Unknown command: ${command}\n`);
+            printUsage();
+            process.exit(1);
+    }
+}
+main().catch((error) => {
+    console.error('Fatal error:', error);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;AACA;;;;;;;;GAQG;;AAEH,qCAAyC;AAGzC,gFAAgF;AAEhF,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAClC,MAAM,KAAK,GAA2B,EAAE,CAAC;IAEzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;gBAClB,CAAC,EAAE,CAAC;YACN,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BX,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAEhF,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAChD,UAAU,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,2CAA2C;YAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAElC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,oBAAoB,CAAC;YACnD,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,QAAQ,IAAI,KAAK,CAAC;YACpG,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;YACpC,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAErF,MAAM,MAAM,GAAG,IAAI,sBAAa,CAAC;gBAC/B,aAAa;gBACb,UAAU;gBACV,IAAI;gBACJ,qBAAqB,EAAE,KAAK;gBAC5B,qBAAqB,EAAE,SAAS;gBAChC,IAAI;gBACJ,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,WAAW;aACZ,EAAE,QAAQ,CAAC,CAAC;YAEb,2BAA2B;YAC3B,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC1C,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC;wBACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;oBACvF,CAAC;gBACH,CAAC;YACH,CAAC;YAED,2BAA2B;YAC3B,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;gBAC1B,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBAClC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC;YACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAEhC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBACpC,OAAO,CAAC,GAAG,CAAC;;;;;oCAKgB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;mBAC9C,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;mBAC5B,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;;mBAEjC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;mBACvB,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;mBAC3B,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;;;;;;;;CAQhD,CAAC,CAAC;gBACK,OAAO,CAAC,GAAG,CAAC,4BAA4B,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;YAC/D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;gBAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM;QACR,CAAC;QAED,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,UAAU,EAAE,CAAC;YACb,MAAM;QAER,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAClC,MAAM;QAER;YACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,IAAI,CAAC,CAAC;YAC/C,UAAU,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/gate.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Gate — The core decision engine.
+ *
+ * Evaluates whether a tool call should be allowed based on:
+ *   1. API key validity
+ *   2. Credit balance
+ *   3. Rate limit
+ *
+ * Fail-closed: any check failure => DENY.
+ * Shadow mode: log but don't enforce (always ALLOW).
+ */
+import { PayGateConfig, GateDecision, ToolCallParams } from './types';
+import { KeyStore } from './store';
+import { RateLimiter } from './rate-limiter';
+import { UsageMeter } from './meter';
+export declare class Gate {
+    readonly store: KeyStore;
+    readonly rateLimiter: RateLimiter;
+    readonly meter: UsageMeter;
+    private readonly config;
+    constructor(config: PayGateConfig);
+    /**
+     * Evaluate a tool call request.
+     */
+    evaluate(apiKey: string | null, toolCall: ToolCallParams): GateDecision;
+    /**
+     * Check if a method is free (no auth required).
+     */
+    isFreeMethod(method: string): boolean;
+    /**
+     * Get price for a tool in credits.
+     */
+    getToolPrice(toolName: string): number;
+    /**
+     * Get full status for dashboard.
+     */
+    getStatus(): {
+        name: string;
+        shadowMode: boolean;
+        activeKeys: number;
+        keys: (Omit<import("./types").ApiKeyRecord, "key"> & {
+            keyPrefix: string;
+        })[];
+        usage: import("./types").UsageSummary;
+        eventCount: number;
+        config: {
+            defaultCreditsPerCall: number;
+            globalRateLimitPerMin: number;
+            toolPricing: Record<string, import("./types").ToolPricing>;
+        };
+    };
+    destroy(): void;
+    private recordEvent;
+}
+//# sourceMappingURL=gate.d.ts.map

package/dist/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAc,cAAc,EAAE,MAAM,SAAS,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,qBAAa,IAAI;IACf,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;gBAE3B,MAAM,EAAE,aAAa;IAOjC;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,QAAQ,EAAE,cAAc,GAAG,YAAY;IAwDvE;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIrC;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAMtC;;OAEG;IACH,SAAS;;;;;;;;;;;;;;;IAgBT,OAAO,IAAI,IAAI;IAIf,OAAO,CAAC,WAAW;CAcpB"}

package/dist/gate.js

@@ -0,0 +1,130 @@
+"use strict";
+/**
+ * Gate — The core decision engine.
+ *
+ * Evaluates whether a tool call should be allowed based on:
+ *   1. API key validity
+ *   2. Credit balance
+ *   3. Rate limit
+ *
+ * Fail-closed: any check failure => DENY.
+ * Shadow mode: log but don't enforce (always ALLOW).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Gate = void 0;
+const store_1 = require("./store");
+const rate_limiter_1 = require("./rate-limiter");
+const meter_1 = require("./meter");
+class Gate {
+    store;
+    rateLimiter;
+    meter;
+    config;
+    constructor(config) {
+        this.config = config;
+        this.store = new store_1.KeyStore();
+        this.rateLimiter = new rate_limiter_1.RateLimiter(config.globalRateLimitPerMin);
+        this.meter = new meter_1.UsageMeter();
+    }
+    /**
+     * Evaluate a tool call request.
+     */
+    evaluate(apiKey, toolCall) {
+        const toolName = toolCall.name;
+        const creditsRequired = this.getToolPrice(toolName);
+        // Step 1: API key present?
+        if (!apiKey) {
+            this.recordEvent(apiKey || 'none', '', toolName, 0, false, 'missing_api_key');
+            if (this.config.shadowMode) {
+                return { allowed: true, reason: 'shadow:missing_api_key', creditsCharged: 0, remainingCredits: 0 };
+            }
+            return { allowed: false, reason: 'missing_api_key', creditsCharged: 0, remainingCredits: 0 };
+        }
+        // Step 2: Valid key?
+        const keyRecord = this.store.getKey(apiKey);
+        if (!keyRecord) {
+            this.recordEvent(apiKey, 'unknown', toolName, 0, false, 'invalid_api_key');
+            if (this.config.shadowMode) {
+                return { allowed: true, reason: 'shadow:invalid_api_key', creditsCharged: 0, remainingCredits: 0 };
+            }
+            return { allowed: false, reason: 'invalid_api_key', creditsCharged: 0, remainingCredits: 0 };
+        }
+        // Step 3: Rate limit?
+        const rateResult = this.rateLimiter.check(apiKey);
+        if (!rateResult.allowed) {
+            this.recordEvent(apiKey, keyRecord.name, toolName, 0, false, rateResult.reason);
+            if (this.config.shadowMode) {
+                return { allowed: true, reason: `shadow:${rateResult.reason}`, creditsCharged: 0, remainingCredits: keyRecord.credits };
+            }
+            return { allowed: false, reason: rateResult.reason, creditsCharged: 0, remainingCredits: keyRecord.credits };
+        }
+        // Step 4: Sufficient credits?
+        if (!this.store.hasCredits(apiKey, creditsRequired)) {
+            this.recordEvent(apiKey, keyRecord.name, toolName, 0, false, 'insufficient_credits');
+            if (this.config.shadowMode) {
+                return { allowed: true, reason: 'shadow:insufficient_credits', creditsCharged: 0, remainingCredits: keyRecord.credits };
+            }
+            return {
+                allowed: false,
+                reason: `insufficient_credits: need ${creditsRequired}, have ${keyRecord.credits}`,
+                creditsCharged: 0,
+                remainingCredits: keyRecord.credits,
+            };
+        }
+        // Step 5: ALLOW — deduct credits and record
+        this.store.deductCredits(apiKey, creditsRequired);
+        this.rateLimiter.record(apiKey);
+        const remaining = this.store.getKey(apiKey)?.credits ?? 0;
+        this.recordEvent(apiKey, keyRecord.name, toolName, creditsRequired, true);
+        return { allowed: true, creditsCharged: creditsRequired, remainingCredits: remaining };
+    }
+    /**
+     * Check if a method is free (no auth required).
+     */
+    isFreeMethod(method) {
+        return this.config.freeMethods.includes(method);
+    }
+    /**
+     * Get price for a tool in credits.
+     */
+    getToolPrice(toolName) {
+        const override = this.config.toolPricing[toolName];
+        if (override)
+            return override.creditsPerCall;
+        return this.config.defaultCreditsPerCall;
+    }
+    /**
+     * Get full status for dashboard.
+     */
+    getStatus() {
+        return {
+            name: this.config.name,
+            shadowMode: this.config.shadowMode,
+            activeKeys: this.store.activeKeyCount,
+            keys: this.store.listKeys(),
+            usage: this.meter.getSummary(),
+            eventCount: this.meter.eventCount,
+            config: {
+                defaultCreditsPerCall: this.config.defaultCreditsPerCall,
+                globalRateLimitPerMin: this.config.globalRateLimitPerMin,
+                toolPricing: this.config.toolPricing,
+            },
+        };
+    }
+    destroy() {
+        this.rateLimiter.destroy();
+    }
+    recordEvent(apiKey, keyName, tool, creditsCharged, allowed, denyReason) {
+        this.meter.record({
+            timestamp: new Date().toISOString(),
+            apiKey: apiKey.slice(0, 10),
+            keyName,
+            tool,
+            creditsCharged,
+            allowed,
+            denyReason,
+        });
+    }
+}
+exports.Gate = Gate;
+//# sourceMappingURL=gate.js.map

package/dist/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAGH,mCAAmC;AACnC,iDAA6C;AAC7C,mCAAqC;AAErC,MAAa,IAAI;IACN,KAAK,CAAW;IAChB,WAAW,CAAc;IACzB,KAAK,CAAa;IACV,MAAM,CAAgB;IAEvC,YAAY,MAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,IAAI,gBAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,WAAW,GAAG,IAAI,0BAAW,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,GAAG,IAAI,kBAAU,EAAE,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,MAAqB,EAAE,QAAwB;QACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC/B,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEpD,2BAA2B;QAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;YAC9E,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,wBAAwB,EAAE,cAAc,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;YACrG,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;QAC/F,CAAC;QAED,qBAAqB;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;YAC3E,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,wBAAwB,EAAE,cAAc,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;YACrG,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;QAC/F,CAAC;QAED,sBAAsB;QACtB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YAChF,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,UAAU,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1H,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;QAC/G,CAAC;QAED,8BAA8B;QAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC;YACrF,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,EAAE,cAAc,EAAE,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1H,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,8BAA8B,eAAe,UAAU,SAAS,CAAC,OAAO,EAAE;gBAClF,cAAc,EAAE,CAAC;gBACjB,gBAAgB,EAAE,SAAS,CAAC,OAAO;aACpC,CAAC;QACJ,CAAC;QAED,4CAA4C;QAC5C,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;QAE1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC;IACzF,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAAc;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,QAAgB;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC,cAAc,CAAC;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAClC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc;YACrC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE;YAC9B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;YACjC,MAAM,EAAE;gBACN,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,qBAAqB;gBACxD,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,qBAAqB;gBACxD,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;aACrC;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;IAEO,WAAW,CACjB,MAAc,EAAE,OAAe,EAAE,IAAY,EAC7C,cAAsB,EAAE,OAAgB,EAAE,UAAmB;QAE7D,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAC3B,OAAO;YACP,IAAI;YACJ,cAAc;YACd,OAAO;YACP,UAAU;SACX,CAAC,CAAC;IACL,CAAC;CACF;AA7HD,oBA6HC"}

package/dist/index.d.ts

@@ -0,0 +1,25 @@
+/**
+ * PayGate MCP — Public API.
+ *
+ * @example
+ * ```ts
+ * import { PayGateServer } from 'paygate-mcp';
+ *
+ * const server = new PayGateServer({
+ *   serverCommand: 'npx',
+ *   serverArgs: ['@modelcontextprotocol/server-filesystem', '/tmp'],
+ *   port: 3402,
+ * });
+ *
+ * const { port, adminKey } = await server.start();
+ * ```
+ */
+export { PayGateServer } from './server';
+export { Gate } from './gate';
+export { McpProxy } from './proxy';
+export { KeyStore } from './store';
+export { UsageMeter } from './meter';
+export { RateLimiter } from './rate-limiter';
+export type { PayGateConfig, JsonRpcRequest, JsonRpcResponse, JsonRpcError, ToolCallParams, ToolInfo, ToolPricing, ApiKeyRecord, UsageEvent, UsageSummary, GateDecision, } from './types';
+export { DEFAULT_CONFIG } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,YAAY,EACV,aAAa,EACb,cAAc,EACd,eAAe,EACf,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,YAAY,GACb,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,34 @@
+"use strict";
+/**
+ * PayGate MCP — Public API.
+ *
+ * @example
+ * ```ts
+ * import { PayGateServer } from 'paygate-mcp';
+ *
+ * const server = new PayGateServer({
+ *   serverCommand: 'npx',
+ *   serverArgs: ['@modelcontextprotocol/server-filesystem', '/tmp'],
+ *   port: 3402,
+ * });
+ *
+ * const { port, adminKey } = await server.start();
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_CONFIG = exports.RateLimiter = exports.UsageMeter = exports.KeyStore = exports.McpProxy = exports.Gate = exports.PayGateServer = void 0;
+var server_1 = require("./server");
+Object.defineProperty(exports, "PayGateServer", { enumerable: true, get: function () { return server_1.PayGateServer; } });
+var gate_1 = require("./gate");
+Object.defineProperty(exports, "Gate", { enumerable: true, get: function () { return gate_1.Gate; } });
+var proxy_1 = require("./proxy");
+Object.defineProperty(exports, "McpProxy", { enumerable: true, get: function () { return proxy_1.McpProxy; } });
+var store_1 = require("./store");
+Object.defineProperty(exports, "KeyStore", { enumerable: true, get: function () { return store_1.KeyStore; } });
+var meter_1 = require("./meter");
+Object.defineProperty(exports, "UsageMeter", { enumerable: true, get: function () { return meter_1.UsageMeter; } });
+var rate_limiter_1 = require("./rate-limiter");
+Object.defineProperty(exports, "RateLimiter", { enumerable: true, get: function () { return rate_limiter_1.RateLimiter; } });
+var types_1 = require("./types");
+Object.defineProperty(exports, "DEFAULT_CONFIG", { enumerable: true, get: function () { return types_1.DEFAULT_CONFIG; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAEH,mCAAyC;AAAhC,uGAAA,aAAa,OAAA;AACtB,+BAA8B;AAArB,4FAAA,IAAI,OAAA;AACb,iCAAmC;AAA1B,iGAAA,QAAQ,OAAA;AACjB,iCAAmC;AAA1B,iGAAA,QAAQ,OAAA;AACjB,iCAAqC;AAA5B,mGAAA,UAAU,OAAA;AACnB,+CAA6C;AAApC,2GAAA,WAAW,OAAA;AAgBpB,iCAAyC;AAAhC,uGAAA,cAAc,OAAA"}

package/dist/meter.d.ts

@@ -0,0 +1,15 @@
+/**
+ * UsageMeter — Tracks all tool call events for billing and analytics.
+ */
+import { UsageEvent, UsageSummary } from './types';
+export declare class UsageMeter {
+    private events;
+    private readonly maxEvents;
+    constructor(maxEvents?: number);
+    record(event: UsageEvent): void;
+    getEvents(since?: string): UsageEvent[];
+    getSummary(since?: string): UsageSummary;
+    clear(): void;
+    get eventCount(): number;
+}
+//# sourceMappingURL=meter.d.ts.map

package/dist/meter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meter.d.ts","sourceRoot":"","sources":["../src/meter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,SAAS,SAAU;IAI/B,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAQ/B,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,EAAE;IAKvC,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,YAAY;IAiDxC,KAAK,IAAI,IAAI;IAIb,IAAI,UAAU,IAAI,MAAM,CAEvB;CACF"}

package/dist/meter.js

@@ -0,0 +1,80 @@
+"use strict";
+/**
+ * UsageMeter — Tracks all tool call events for billing and analytics.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UsageMeter = void 0;
+class UsageMeter {
+    events = [];
+    maxEvents;
+    constructor(maxEvents = 100_000) {
+        this.maxEvents = maxEvents;
+    }
+    record(event) {
+        this.events.push(event);
+        if (this.events.length > this.maxEvents) {
+            const dropCount = Math.floor(this.maxEvents * 0.25);
+            this.events = this.events.slice(dropCount);
+        }
+    }
+    getEvents(since) {
+        if (!since)
+            return [...this.events];
+        return this.events.filter(e => e.timestamp >= since);
+    }
+    getSummary(since) {
+        const events = this.getEvents(since);
+        const summary = {
+            totalCalls: 0,
+            totalCreditsSpent: 0,
+            totalDenied: 0,
+            perTool: {},
+            perKey: {},
+            denyReasons: {},
+        };
+        for (const event of events) {
+            summary.totalCalls++;
+            if (event.allowed) {
+                summary.totalCreditsSpent += event.creditsCharged;
+            }
+            else {
+                summary.totalDenied++;
+                if (event.denyReason) {
+                    summary.denyReasons[event.denyReason] = (summary.denyReasons[event.denyReason] || 0) + 1;
+                }
+            }
+            // Per-tool
+            if (!summary.perTool[event.tool]) {
+                summary.perTool[event.tool] = { calls: 0, credits: 0, denied: 0 };
+            }
+            summary.perTool[event.tool].calls++;
+            if (event.allowed) {
+                summary.perTool[event.tool].credits += event.creditsCharged;
+            }
+            else {
+                summary.perTool[event.tool].denied++;
+            }
+            // Per-key
+            const keyLabel = event.keyName || event.apiKey.slice(0, 10);
+            if (!summary.perKey[keyLabel]) {
+                summary.perKey[keyLabel] = { calls: 0, credits: 0, denied: 0 };
+            }
+            summary.perKey[keyLabel].calls++;
+            if (event.allowed) {
+                summary.perKey[keyLabel].credits += event.creditsCharged;
+            }
+            else {
+                summary.perKey[keyLabel].denied++;
+            }
+        }
+        return summary;
+    }
+    clear() {
+        this.events = [];
+    }
+    get eventCount() {
+        return this.events.length;
+    }
+}
+exports.UsageMeter = UsageMeter;
+//# sourceMappingURL=meter.js.map

package/dist/meter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meter.js","sourceRoot":"","sources":["../src/meter.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAIH,MAAa,UAAU;IACb,MAAM,GAAiB,EAAE,CAAC;IACjB,SAAS,CAAS;IAEnC,YAAY,SAAS,GAAG,OAAO;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,KAAiB;QACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,SAAS,CAAC,KAAc;QACtB,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;IACvD,CAAC;IAED,UAAU,CAAC,KAAc;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,OAAO,GAAiB;YAC5B,UAAU,EAAE,CAAC;YACb,iBAAiB,EAAE,CAAC;YACpB,WAAW,EAAE,CAAC;YACd,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;YACV,WAAW,EAAE,EAAE;SAChB,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO,CAAC,iBAAiB,IAAI,KAAK,CAAC,cAAc,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,WAAW,EAAE,CAAC;gBACtB,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;oBACrB,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC3F,CAAC;YACH,CAAC;YAED,WAAW;YACX,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YACpE,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,cAAc,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACvC,CAAC;YAED,UAAU;YACV,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YACjE,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,cAAc,CAAC;YAC3D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;CACF;AA7ED,gCA6EC"}

package/dist/proxy.d.ts

@@ -0,0 +1,48 @@
+/**
+ * McpProxy — Spawns a wrapped MCP server (stdio) and proxies JSON-RPC
+ * through the PayGate for tool-call gating.
+ *
+ * Architecture:
+ *   HTTP Client <--JSON-RPC over HTTP--> PayGate Proxy <--stdio--> Wrapped MCP Server
+ *
+ * Free methods (initialize, tools/list, ping, etc.) pass through without auth.
+ * tools/call requests are gated: API key + credits + rate limit.
+ */
+import { EventEmitter } from 'events';
+import { JsonRpcRequest, JsonRpcResponse } from './types';
+import { Gate } from './gate';
+export declare class McpProxy extends EventEmitter {
+    private process;
+    private readonly gate;
+    private readonly serverCommand;
+    private readonly serverArgs;
+    private pendingRequests;
+    private buffer;
+    private started;
+    constructor(gate: Gate, serverCommand: string, serverArgs: string[]);
+    /**
+     * Start the wrapped MCP server process.
+     */
+    start(): Promise<void>;
+    /**
+     * Handle an incoming JSON-RPC request from the client.
+     * Gates tools/call through the PayGate. Passes other methods through.
+     */
+    handleRequest(request: JsonRpcRequest, apiKey: string | null): Promise<JsonRpcResponse>;
+    /**
+     * Forward a JSON-RPC request to the wrapped server via stdio.
+     */
+    private forwardToServer;
+    /**
+     * Parse JSON-RPC responses from the server's stdout.
+     * Uses newline-delimited JSON.
+     */
+    private handleServerOutput;
+    /**
+     * Gracefully stop the wrapped server.
+     */
+    stop(): Promise<void>;
+    get isRunning(): boolean;
+    private errorResponse;
+}
+//# sourceMappingURL=proxy.d.ts.map

package/dist/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAkB,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAE9B,qBAAa,QAAS,SAAQ,YAAY;IACxC,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAO;IAC5B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAW;IACtC,OAAO,CAAC,eAAe,CAIlB;IACL,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,OAAO,CAAS;gBAEZ,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE;IAOnE;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAiC5B;;;OAGG;IACG,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,eAAe,CAAC;IAoD7F;;OAEG;IACH,OAAO,CAAC,eAAe;IAwCvB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IA2B1B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB3B,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,OAAO,CAAC,aAAa;CAGtB"}