feat: publish to MCP Registry + fix TypeScript build

- Add mcpName field for MCP Registry publishing
- Add server.json for official MCP Registry
- Fix TypeScript strict mode errors in mcp-server.ts
- Fix test-mcp.ts spawn reliability (node --import tsx)
- Add tsx as devDependency
- Bump version to 0.5.11

Author: jnMetaCode

package.json

@@ -1,6 +1,7 @@
 {
   "name": "shellward",
-  "version": "0.5.10",
+  "version": "0.5.11",
+  "mcpName": "io.github.jnMetaCode/shellward",
   "description": "AI agent security & MCP security middleware — prompt injection detection, AI firewall, runtime guardrails & data-loss prevention for LLM tool calls. 8-layer defense against data exfiltration & dangerous commands. Zero dependencies. SDK + OpenClaw plugin. Supports LangChain, AutoGPT, Claude Code, Cursor, OpenAI Agents.",
   "keywords": [
     "shellward",
@@ -80,6 +81,7 @@
   },
   "devDependencies": {
     "@types/node": "^25.5.0",
+    "tsx": "^4.21.0",
     "typescript": "^5.9.3"
   }
 }

server.json

@@ -0,0 +1,43 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.jnMetaCode/shellward",
+  "description": "AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.",
+  "repository": {
+    "url": "https://github.com/jnMetaCode/shellward",
+    "source": "github"
+  },
+  "version": "0.5.11",
+  "packages": [
+    {
+      "registryType": "npm",
+      "identifier": "shellward",
+      "version": "0.5.11",
+      "transport": {
+        "type": "stdio"
+      },
+      "environmentVariables": [
+        {
+          "description": "Security mode: enforce (block + log) or audit (log only)",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": false,
+          "name": "SHELLWARD_MODE"
+        },
+        {
+          "description": "Locale: auto, zh, or en",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": false,
+          "name": "SHELLWARD_LOCALE"
+        },
+        {
+          "description": "Injection detection threshold 0-100 (lower = stricter)",
+          "isRequired": false,
+          "format": "string",
+          "isSecret": false,
+          "name": "SHELLWARD_THRESHOLD"
+        }
+      ]
+    }
+  ]
+}

src/mcp-server.ts

@@ -17,7 +17,7 @@
 //     }
 //   }
 
-import { ShellWard } from './core/engine'
+import { ShellWard } from './core/engine.js'
 import { readFileSync } from 'fs'
 import { fileURLToPath } from 'url'
 import { dirname, join } from 'path'
@@ -162,7 +162,7 @@ function executeTool(name: string, args: Record<string, unknown>): unknown {
         safe: result.safe,
         score: result.score,
         threshold: result.threshold,
-        matched_rules: result.matched.map(m => ({
+        matched_rules: result.matched.map((m: any) => ({
           id: m.id,
           name: m.name,
           score: m.score,
@@ -175,7 +175,7 @@ function executeTool(name: string, args: Record<string, unknown>): unknown {
       const result = guard.scanData(String(args.text || ''))
       return {
         has_sensitive_data: result.hasSensitiveData,
-        findings: result.findings.map(f => ({
+        findings: result.findings.map((f: any) => ({
           type: f.id,
           name: f.name,
           count: f.count,

test-mcp.ts

@@ -108,14 +108,25 @@ const tests: TestCase[] = [
 ]
 
 async function runTests() {
-  const child = spawn('npx', ['tsx', 'src/mcp-server.ts'], {
+  const cwd = import.meta.dirname || process.cwd()
+  const child = spawn('node', ['--import', 'tsx', 'src/mcp-server.ts'], {
     stdio: ['pipe', 'pipe', 'pipe'],
-    cwd: import.meta.dirname,
+    cwd,
   })
 
   const responses = new Map<number, any>()
   let buf = Buffer.alloc(0)
 
+  child.stderr.on('data', (chunk: Buffer) => {
+    process.stderr.write(chunk)
+  })
+
+  child.on('exit', (code, sig) => {
+    if (code !== null && code !== 0) {
+      console.error(`  Server exited with code ${code}`)
+    }
+  })
+
   child.stdout.on('data', (chunk: Buffer) => {
     buf = Buffer.concat([buf, chunk])
 
@@ -144,14 +155,17 @@ async function runTests() {
     child.stdin.write(Buffer.concat([header, body]))
   }
 
+  // Wait for server to start
+  await new Promise(r => setTimeout(r, 2000))
+
   // Send all test requests with small delays
   for (const t of tests) {
     sendMsg(t.id, t.request.method, t.request.params as any)
-    await new Promise(r => setTimeout(r, 100))
+    await new Promise(r => setTimeout(r, 150))
   }
 
   // Wait for all responses
-  await new Promise(r => setTimeout(r, 2000))
+  await new Promise(r => setTimeout(r, 3000))
 
   child.stdin.end()
   child.kill()