@ahamie/connector-proxy
v0.1.1
Published
Standalone Hono server: token holding, allowlist, MCP-inside, HMAC ingress, audit. Five non-negotiable invariants (I1-I5).
Readme
@ahamie/connector-proxy
The trust boundary. Standalone Hono process; the only code that decrypts credentials. Five non-negotiable invariants:
| | |
|---|---|
| I1 | credentials resolved server-side; agent process never sees the raw token |
| I2 | per-connector (method, path) allowlist; 403 on miss |
| I3 | caller Authorization stripped before upstream forward |
| I4 | response auth headers stripped before return |
| I5 | HMAC-verified inbound webhooks; mismatch → 401 + audit row |
The CLI binary ahamie-proxy is spawned by ahamie dev as a child process so the agent runtime and the credential layer have separate process spaces.
import { createProxyApp } from "@ahamie/connector-proxy";
const app = createProxyApp({ db, bearer, credentialResolver, adapters });