internal/

Package api exposes the HTTP approval API (and the server-rendered dashboard that sits on top of it) on the gateway's :8081 listener.

Package app wires the gateway's components (store, approval workflow, proxy, API/dashboard) into one runnable process.

Package approval implements the manifest approval state machine: the hard part of mcp-shield isn't hashing JSON, it's deciding "is this capability change acceptable?" and never letting that decision be bypassed or silently reversed.

Package database provides SQLite-backed storage for servers, manifests, and approval records.

Package diff compares two manifests and reports what was added, removed, or changed so a human approver can judge whether a capability change is safe.

Package manifest builds a canonical, hashable snapshot of an MCP server's advertised tools, prompts, and resources.

Package mcp implements the wire types and transport for the Model Context Protocol's JSON-RPC 2.0 framing, plus a proxy client/server pair used by mcp-shield to sit between an AI client and an upstream MCP server.

Package notify delivers gate events to operators.