protect-mcp 0.7.5 → 0.7.6

package/dist/cli.js

@@ -8294,7 +8294,7 @@ Usage:
   protect-mcp status [--dir <path>]
   protect-mcp digest [--today] [--dir <path>]
   protect-mcp receipts [--last <n>] [--dir <path>]
-  protect-mcp record [--dir <path>] [--no-open]
+  protect-mcp record [--dir <path>] [--live] [--no-open]
   protect-mcp bundle [--output <path>] [--dir <path>]
   protect-mcp simulate --policy <path> [--log <path>] [--tier <tier>] [--json]
   protect-mcp report [--period <days>d] [--format md|json] [--output <path>] [--dir <path>]
@@ -10236,48 +10236,99 @@ async function handleRecord(argv) {
   if (di !== -1 && argv[di + 1]) dir = argv[di + 1];
   const recPath = join8(dir, ".protect-mcp-receipts.jsonl");
   const logPath = join8(dir, ".protect-mcp-log.jsonl");
-  const chosen = existsSync9(recPath) ? recPath : existsSync9(logPath) ? logPath : null;
+  const pick = () => existsSync9(recPath) ? recPath : existsSync9(logPath) ? logPath : null;
+  const chosen = pick();
   if (!chosen) {
     process.stderr.write(`
 ${bold("protect-mcp record")}
 
 No record found in ${dir}.
 Start the gate with ${bold("npx protect-mcp serve")}, use your agent, then run this again.
+`);
+    process.stderr.write(`Tip: run this in the directory where your gate is signing (where .protect-mcp-receipts.jsonl lives), or pass ${bold("--dir <path>")}.
 
 `);
     process.exit(0);
     return;
   }
-  const raw = readFileSync11(chosen, "utf-8");
-  const recs = raw.split(/\r?\n/).map((l) => l.trim()).filter(Boolean).map((l) => {
+  const readRecs = (file) => readFileSync11(file, "utf-8").split(/\r?\n/).map((l) => l.trim()).filter(Boolean).map((l) => {
     try {
       return JSON.parse(l);
     } catch {
       return null;
     }
   }).filter((x) => x !== null).map(mapRecordEntry);
-  const meta = { file: chosen, signed: chosen === recPath, count: recs.length };
-  const html = RECORD_HTML.replace("__DATA__", () => JSON.stringify(recs)).replace("__META__", () => JSON.stringify(meta));
-  const out = join8(osMod.tmpdir(), "protect-mcp-record-" + Date.now() + ".html");
-  writeFileSync4(out, html);
-  if (!argv.includes("--no-open")) {
+  const openTarget = (target) => {
+    if (argv.includes("--no-open")) return;
     const platform = process.platform;
     const opener = platform === "darwin" ? "open" : platform === "win32" ? "cmd" : "xdg-open";
-    const openArgs = platform === "win32" ? ["/c", "start", "", out] : [out];
+    const openArgs = platform === "win32" ? ["/c", "start", "", target] : [target];
     try {
       const child = cp.spawn(opener, openArgs, { stdio: "ignore", detached: true });
       child.unref();
     } catch {
     }
+  };
+  if (argv.includes("--live") || argv.includes("--watch")) {
+    const http = await import("http");
+    const pi = argv.indexOf("--port");
+    const port = pi !== -1 && argv[pi + 1] ? parseInt(argv[pi + 1], 10) : 9378;
+    const server = http.createServer((req, res) => {
+      if (req.url && req.url.indexOf("/data") === 0) {
+        let recs2 = [];
+        const f = pick();
+        try {
+          if (f) recs2 = readRecs(f);
+        } catch {
+        }
+        res.writeHead(200, { "content-type": "application/json", "cache-control": "no-store" });
+        res.end(JSON.stringify({ recs: recs2, signed: f === recPath }));
+        return;
+      }
+      const meta2 = { file: chosen, signed: pick() === recPath, count: 0, live: true };
+      const page = RECORD_HTML.replace("__DATA__", () => "[]").replace("__META__", () => JSON.stringify(meta2));
+      res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
+      res.end(page);
+    });
+    server.on("error", (e) => {
+      process.stderr.write(`
+protect-mcp record --live: could not start on port ${port}${e && e.code ? ` (${e.code})` : ""}. Try ${bold("--port <n>")}.
+
+`);
+      process.exit(1);
+    });
+    server.listen(port, "127.0.0.1", () => {
+      const url = `http://127.0.0.1:${port}`;
+      openTarget(url);
+      process.stdout.write(`
+${bold("\u{1F6E1}\uFE0F  Your record")} ${dim("\xB7")} live at ${url}
+`);
+      process.stdout.write(`  Updates as your agent runs. All local, nothing uploaded. ${dim("Ctrl-C to stop.")}
+
+`);
+    });
+    return;
   }
+  const recs = readRecs(chosen);
+  const meta = { file: chosen, signed: chosen === recPath, count: recs.length, live: false };
+  const html = RECORD_HTML.replace("__DATA__", () => JSON.stringify(recs)).replace("__META__", () => JSON.stringify(meta));
+  const out = join8(osMod.tmpdir(), "protect-mcp-record-" + Date.now() + ".html");
+  writeFileSync4(out, html);
+  openTarget(out);
   process.stdout.write(`
-${bold("\u{1F6E1}\uFE0F  Your record")}  ${recs.length} decision${recs.length === 1 ? "" : "s"}
-`);
-  process.stdout.write(`  Opened a searchable view in your browser. Everything stayed on this machine.
+${bold("\u{1F6E1}\uFE0F  Your record")} ${dim("\xB7")} ${recs.length} decision${recs.length === 1 ? "" : "s"}, all on this machine
 `);
   if (!meta.signed) process.stdout.write(`  ${dim("(decision log; signed receipts appear in .protect-mcp-receipts.jsonl once signing is on)")}
 `);
-  process.stdout.write(`  ${dim("If it did not open, open this file: " + out)}
+  const fileUrl = "file://" + encodeURI(out);
+  if (process.stdout.isTTY) {
+    process.stdout.write(`  Opened in your browser. If it did not open, click: \x1B]8;;${fileUrl}\x1B\\${bold("your record")}\x1B]8;;\x1B\\
+`);
+  } else {
+    process.stdout.write(`  Opened in your browser. If it did not open, open: ${out}
+`);
+  }
+  process.stdout.write(`  ${dim("Want it to update live as your agent runs? npx protect-mcp record --live")}
 
 `);
   process.exit(0);
@@ -10323,7 +10374,7 @@ function when(ts){if(!ts)return"";var d=new Date(ts);return d.toLocaleDateString
 function fvals(key){var m={};RECORDS.forEach(function(r){var v=key==="Decision"?vlabel(r.verdict):r[key.toLowerCase()];if(v){m[v]=(m[v]||0)+1}});return Object.keys(m).sort(function(a,b){return m[b]-m[a]}).slice(0,8).map(function(v){return[v,m[v]]})}
 function match(r){if(ACT.Decision&&vlabel(r.verdict)!==ACT.Decision)return false;if(ACT.Tool&&r.tool!==ACT.Tool)return false;if(ACT.Reason&&r.reason!==ACT.Reason)return false;if(Q){var h=(r.tool+" "+r.reason+" "+vlabel(r.verdict)+" "+r.hook).toLowerCase();if(h.indexOf(Q)<0)return false}return true}
 function render(){
-document.getElementById("meta").textContent=META.count+" decisions from "+META.file+(META.signed?" (signed)":" (decision log)")+" - all local";
+document.getElementById("meta").textContent=META.count+" decisions from "+META.file+(META.signed?" (signed)":" (decision log)")+" - all local"+(META.live?" \xB7 live, updating":"");
 var chips="";["Decision","Tool","Reason"].forEach(function(key){fvals(key).forEach(function(p){var on=ACT[key]===p[0];chips+='<span class="chip'+(on?" on":"")+'" data-k="'+key+'" data-v="'+esc(p[0])+'">'+esc(p[0])+" "+p[1]+"</span>"})});
 document.getElementById("chips").innerHTML=chips;
 var rows=RECORDS.filter(match);
@@ -10334,6 +10385,7 @@ document.getElementById("q").addEventListener("input",function(e){Q=e.target.val
 document.getElementById("chips").addEventListener("click",function(e){var c=e.target.closest(".chip");if(!c)return;var k=c.getAttribute("data-k"),v=c.getAttribute("data-v");ACT[k]=ACT[k]===v?undefined:v;render()});
 document.getElementById("list").addEventListener("click",function(e){var row=e.target.closest(".row");if(row)row.classList.toggle("open")});
 render();
+if(META.live){var poll=function(){fetch('/data',{cache:'no-store'}).then(function(r){return r.json()}).then(function(d){RECORDS=d.recs||[];META.count=RECORDS.length;if(typeof d.signed==='boolean')META.signed=d.signed;render()}).catch(function(){})};poll();setInterval(poll,2000);}
 </script></body></html>`;
 async function handleBundle(argv) {
   const { readFileSync: readFileSync11, writeFileSync: writeFileSync4, existsSync: existsSync9 } = await import("fs");
@@ -11830,7 +11882,7 @@ async function main() {
   }
   if (args[0] === "record") {
     await handleRecord(args.slice(1));
-    process.exit(0);
+    return;
   }
   if (args[0] === "init-hooks") {
     await handleInitHooks(args.slice(1));

package/dist/cli.mjs

@@ -59,7 +59,7 @@ Usage:
   protect-mcp status [--dir <path>]
   protect-mcp digest [--today] [--dir <path>]
   protect-mcp receipts [--last <n>] [--dir <path>]
-  protect-mcp record [--dir <path>] [--no-open]
+  protect-mcp record [--dir <path>] [--live] [--no-open]
   protect-mcp bundle [--output <path>] [--dir <path>]
   protect-mcp simulate --policy <path> [--log <path>] [--tier <tier>] [--json]
   protect-mcp report [--period <days>d] [--format md|json] [--output <path>] [--dir <path>]
@@ -2001,48 +2001,99 @@ async function handleRecord(argv) {
   if (di !== -1 && argv[di + 1]) dir = argv[di + 1];
   const recPath = join(dir, ".protect-mcp-receipts.jsonl");
   const logPath = join(dir, ".protect-mcp-log.jsonl");
-  const chosen = existsSync(recPath) ? recPath : existsSync(logPath) ? logPath : null;
+  const pick = () => existsSync(recPath) ? recPath : existsSync(logPath) ? logPath : null;
+  const chosen = pick();
   if (!chosen) {
     process.stderr.write(`
 ${bold("protect-mcp record")}
 
 No record found in ${dir}.
 Start the gate with ${bold("npx protect-mcp serve")}, use your agent, then run this again.
+`);
+    process.stderr.write(`Tip: run this in the directory where your gate is signing (where .protect-mcp-receipts.jsonl lives), or pass ${bold("--dir <path>")}.
 
 `);
     process.exit(0);
     return;
   }
-  const raw = readFileSync(chosen, "utf-8");
-  const recs = raw.split(/\r?\n/).map((l) => l.trim()).filter(Boolean).map((l) => {
+  const readRecs = (file) => readFileSync(file, "utf-8").split(/\r?\n/).map((l) => l.trim()).filter(Boolean).map((l) => {
     try {
       return JSON.parse(l);
     } catch {
       return null;
     }
   }).filter((x) => x !== null).map(mapRecordEntry);
-  const meta = { file: chosen, signed: chosen === recPath, count: recs.length };
-  const html = RECORD_HTML.replace("__DATA__", () => JSON.stringify(recs)).replace("__META__", () => JSON.stringify(meta));
-  const out = join(osMod.tmpdir(), "protect-mcp-record-" + Date.now() + ".html");
-  writeFileSync(out, html);
-  if (!argv.includes("--no-open")) {
+  const openTarget = (target) => {
+    if (argv.includes("--no-open")) return;
     const platform = process.platform;
     const opener = platform === "darwin" ? "open" : platform === "win32" ? "cmd" : "xdg-open";
-    const openArgs = platform === "win32" ? ["/c", "start", "", out] : [out];
+    const openArgs = platform === "win32" ? ["/c", "start", "", target] : [target];
     try {
       const child = cp.spawn(opener, openArgs, { stdio: "ignore", detached: true });
       child.unref();
     } catch {
     }
+  };
+  if (argv.includes("--live") || argv.includes("--watch")) {
+    const http = await import("http");
+    const pi = argv.indexOf("--port");
+    const port = pi !== -1 && argv[pi + 1] ? parseInt(argv[pi + 1], 10) : 9378;
+    const server = http.createServer((req, res) => {
+      if (req.url && req.url.indexOf("/data") === 0) {
+        let recs2 = [];
+        const f = pick();
+        try {
+          if (f) recs2 = readRecs(f);
+        } catch {
+        }
+        res.writeHead(200, { "content-type": "application/json", "cache-control": "no-store" });
+        res.end(JSON.stringify({ recs: recs2, signed: f === recPath }));
+        return;
+      }
+      const meta2 = { file: chosen, signed: pick() === recPath, count: 0, live: true };
+      const page = RECORD_HTML.replace("__DATA__", () => "[]").replace("__META__", () => JSON.stringify(meta2));
+      res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
+      res.end(page);
+    });
+    server.on("error", (e) => {
+      process.stderr.write(`
+protect-mcp record --live: could not start on port ${port}${e && e.code ? ` (${e.code})` : ""}. Try ${bold("--port <n>")}.
+
+`);
+      process.exit(1);
+    });
+    server.listen(port, "127.0.0.1", () => {
+      const url = `http://127.0.0.1:${port}`;
+      openTarget(url);
+      process.stdout.write(`
+${bold("\u{1F6E1}\uFE0F  Your record")} ${dim("\xB7")} live at ${url}
+`);
+      process.stdout.write(`  Updates as your agent runs. All local, nothing uploaded. ${dim("Ctrl-C to stop.")}
+
+`);
+    });
+    return;
   }
+  const recs = readRecs(chosen);
+  const meta = { file: chosen, signed: chosen === recPath, count: recs.length, live: false };
+  const html = RECORD_HTML.replace("__DATA__", () => JSON.stringify(recs)).replace("__META__", () => JSON.stringify(meta));
+  const out = join(osMod.tmpdir(), "protect-mcp-record-" + Date.now() + ".html");
+  writeFileSync(out, html);
+  openTarget(out);
   process.stdout.write(`
-${bold("\u{1F6E1}\uFE0F  Your record")}  ${recs.length} decision${recs.length === 1 ? "" : "s"}
-`);
-  process.stdout.write(`  Opened a searchable view in your browser. Everything stayed on this machine.
+${bold("\u{1F6E1}\uFE0F  Your record")} ${dim("\xB7")} ${recs.length} decision${recs.length === 1 ? "" : "s"}, all on this machine
 `);
   if (!meta.signed) process.stdout.write(`  ${dim("(decision log; signed receipts appear in .protect-mcp-receipts.jsonl once signing is on)")}
 `);
-  process.stdout.write(`  ${dim("If it did not open, open this file: " + out)}
+  const fileUrl = "file://" + encodeURI(out);
+  if (process.stdout.isTTY) {
+    process.stdout.write(`  Opened in your browser. If it did not open, click: \x1B]8;;${fileUrl}\x1B\\${bold("your record")}\x1B]8;;\x1B\\
+`);
+  } else {
+    process.stdout.write(`  Opened in your browser. If it did not open, open: ${out}
+`);
+  }
+  process.stdout.write(`  ${dim("Want it to update live as your agent runs? npx protect-mcp record --live")}
 
 `);
   process.exit(0);
@@ -2088,7 +2139,7 @@ function when(ts){if(!ts)return"";var d=new Date(ts);return d.toLocaleDateString
 function fvals(key){var m={};RECORDS.forEach(function(r){var v=key==="Decision"?vlabel(r.verdict):r[key.toLowerCase()];if(v){m[v]=(m[v]||0)+1}});return Object.keys(m).sort(function(a,b){return m[b]-m[a]}).slice(0,8).map(function(v){return[v,m[v]]})}
 function match(r){if(ACT.Decision&&vlabel(r.verdict)!==ACT.Decision)return false;if(ACT.Tool&&r.tool!==ACT.Tool)return false;if(ACT.Reason&&r.reason!==ACT.Reason)return false;if(Q){var h=(r.tool+" "+r.reason+" "+vlabel(r.verdict)+" "+r.hook).toLowerCase();if(h.indexOf(Q)<0)return false}return true}
 function render(){
-document.getElementById("meta").textContent=META.count+" decisions from "+META.file+(META.signed?" (signed)":" (decision log)")+" - all local";
+document.getElementById("meta").textContent=META.count+" decisions from "+META.file+(META.signed?" (signed)":" (decision log)")+" - all local"+(META.live?" \xB7 live, updating":"");
 var chips="";["Decision","Tool","Reason"].forEach(function(key){fvals(key).forEach(function(p){var on=ACT[key]===p[0];chips+='<span class="chip'+(on?" on":"")+'" data-k="'+key+'" data-v="'+esc(p[0])+'">'+esc(p[0])+" "+p[1]+"</span>"})});
 document.getElementById("chips").innerHTML=chips;
 var rows=RECORDS.filter(match);
@@ -2099,6 +2150,7 @@ document.getElementById("q").addEventListener("input",function(e){Q=e.target.val
 document.getElementById("chips").addEventListener("click",function(e){var c=e.target.closest(".chip");if(!c)return;var k=c.getAttribute("data-k"),v=c.getAttribute("data-v");ACT[k]=ACT[k]===v?undefined:v;render()});
 document.getElementById("list").addEventListener("click",function(e){var row=e.target.closest(".row");if(row)row.classList.toggle("open")});
 render();
+if(META.live){var poll=function(){fetch('/data',{cache:'no-store'}).then(function(r){return r.json()}).then(function(d){RECORDS=d.recs||[];META.count=RECORDS.length;if(typeof d.signed==='boolean')META.signed=d.signed;render()}).catch(function(){})};poll();setInterval(poll,2000);}
 </script></body></html>`;
 async function handleBundle(argv) {
   const { readFileSync, writeFileSync, existsSync } = await import("fs");
@@ -3595,7 +3647,7 @@ async function main() {
   }
   if (args[0] === "record") {
     await handleRecord(args.slice(1));
-    process.exit(0);
+    return;
   }
   if (args[0] === "init-hooks") {
     await handleInitHooks(args.slice(1));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "protect-mcp",
-  "version": "0.7.5",
+  "version": "0.7.6",
   "mcpName": "com.scopeblind/protect-mcp",
   "description": "Fail-closed Cedar policy gate + Ed25519 signed receipts for AI agent tool calls. Denies on any policy error, proves the gate is live with a startup self-test, and turns every decision into a local searchable record you own. The open gate behind Legate by ScopeBlind. scopeblind.com",
   "main": "dist/index.js",

package/policies/agent.cedar

@@ -0,0 +1,50 @@
+// Generated by protect-mcp init-hooks
+// Customize these policies to match your security requirements.
+// Cedar deny decisions are AUTHORITATIVE — they cannot be overridden.
+
+// Allow all read-only tools by default
+permit(
+  principal,
+  action == Action::"MCP::Tool::call",
+  resource == Tool::"Read"
+);
+
+permit(
+  principal,
+  action == Action::"MCP::Tool::call",
+  resource == Tool::"Glob"
+);
+
+permit(
+  principal,
+  action == Action::"MCP::Tool::call",
+  resource == Tool::"Grep"
+);
+
+// Allow write/edit tools (remove these to require explicit approval)
+permit(
+  principal,
+  action == Action::"MCP::Tool::call",
+  resource == Tool::"Write"
+);
+
+permit(
+  principal,
+  action == Action::"MCP::Tool::call",
+  resource == Tool::"Edit"
+);
+
+// Allow Bash with caution (Cedar evaluates before hook patterns)
+permit(
+  principal,
+  action == Action::"MCP::Tool::call",
+  resource == Tool::"Bash"
+);
+
+// Block dangerous tools entirely
+// Uncomment any of these to block specific tools:
+// forbid(
+//   principal,
+//   action == Action::"MCP::Tool::call",
+//   resource == Tool::"delete_file"
+// );