@agent-wall/core 0.1.0

package/.turbo/turbo-build.log

@@ -0,0 +1,17 @@
+
+> @agent-wall/core@0.1.0 build /home/runner/work/agent-wall/agent-wall/packages/core
+> tsup
+
+CLI Building entry: src/index.ts
+CLI Using tsconfig: tsconfig.json
+CLI tsup v8.5.1
+CLI Using tsup config: /home/runner/work/agent-wall/agent-wall/packages/core/tsup.config.ts
+CLI Target: es2022
+CLI Cleaning output folder
+ESM Build start
+ESM dist/index.js     93.05 KB
+ESM dist/index.js.map 196.28 KB
+ESM ⚡️ Build success in 81ms
+DTS Build start
+DTS ⚡️ Build success in 4268ms
+DTS dist/index.d.ts 41.75 KB

package/.turbo/turbo-test.log

@@ -0,0 +1,30 @@
+
+> @agent-wall/core@0.1.0 test /home/runner/work/agent-wall/agent-wall/packages/core
+> vitest run
+
+
+ RUN  v3.2.4 /home/runner/work/agent-wall/agent-wall/packages/core
+
+ ✓ src/response-scanner.test.ts (40 tests) 28ms
+ ✓ src/policy-engine.test.ts (25 tests) 35ms
+ ✓ src/dashboard-server.test.ts (16 tests) 2533ms
+   ✓ DashboardServer > should broadcast to multiple clients  403ms
+   ✓ DashboardServer > should handle client disconnect without errors  604ms
+ ✓ src/injection-detector.test.ts (21 tests) 10ms
+ ✓ src/policy-engine-security.test.ts (21 tests) 12ms
+ ✓ src/audit-logger-security.test.ts (8 tests) 12ms
+ ✓ src/policy-loader.test.ts (15 tests) 16ms
+ ✓ src/egress-control.test.ts (17 tests) 8ms
+ ✓ src/chain-detector.test.ts (10 tests) 6ms
+ ✓ src/read-buffer.test.ts (12 tests) 10ms
+ ✓ src/types.test.ts (12 tests) 6ms
+ ✓ src/kill-switch.test.ts (7 tests) 457ms
+   ✓ KillSwitch > file-based activation > should deactivate when kill file is removed  301ms
+ ✓ src/audit-logger.test.ts (5 tests) 6ms
+ ✓ src/read-buffer-security.test.ts (7 tests) 7ms
+
+ Test Files  14 passed (14)
+      Tests  216 passed (216)
+   Start at  10:27:35
+   Duration  6.44s (transform 389ms, setup 0ms, collect 634ms, tests 3.15s, environment 2ms, prepare 1.07s)
+

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026-present Agent Wall Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,80 @@
+# @agent-wall/core
+
+Core proxy engine and security modules for [Agent Wall](https://github.com/agent-wall/agent-wall) — a security firewall for AI agents.
+
+[![npm](https://img.shields.io/npm/v/@agent-wall/core)](https://www.npmjs.com/package/@agent-wall/core)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://github.com/agent-wall/agent-wall/blob/main/LICENSE)
+
+> **Most users should install [`agent-wall`](https://www.npmjs.com/package/agent-wall) (the CLI) instead.** This package is for programmatic usage — embedding Agent Wall into your own tools.
+
+## Install
+
+```bash
+npm install @agent-wall/core
+```
+
+## What's Inside
+
+| Module | Description |
+|--------|-------------|
+| `StdioProxy` | Two-way MCP protocol interception proxy |
+| `PolicyEngine` | First-match-wins rule evaluator (glob, rate limiting, strict mode) |
+| `ResponseScanner` | Secret/PII detection with ReDoS protection |
+| `InjectionDetector` | 30+ prompt injection patterns |
+| `EgressControl` | URL/SSRF protection (RFC1918, metadata, IP obfuscation) |
+| `KillSwitch` | Emergency deny-all (file, signal, programmatic) |
+| `ChainDetector` | Multi-step attack pattern detection |
+| `AuditLogger` | HMAC-SHA256 signed JSON lines with rotation |
+| `PolicyLoader` | YAML config with Zod validation and hot-reload |
+| `DashboardServer` | WebSocket + HTTP server for real-time dashboard |
+
+## Usage
+
+```typescript
+import {
+  StdioProxy,
+  PolicyEngine,
+  ResponseScanner,
+  InjectionDetector,
+  EgressControl,
+  KillSwitch,
+  ChainDetector,
+  AuditLogger,
+  loadPolicy,
+} from "@agent-wall/core";
+
+// Load policy from YAML
+const { config } = loadPolicy("./agent-wall.yaml");
+
+// Create security modules
+const policyEngine = new PolicyEngine(config);
+const scanner = new ResponseScanner(config.responseScanning);
+const injectionDetector = new InjectionDetector();
+const egressControl = new EgressControl();
+const killSwitch = new KillSwitch();
+const chainDetector = new ChainDetector();
+
+// Create proxy
+const proxy = new StdioProxy({
+  command: "npx",
+  args: ["@modelcontextprotocol/server-filesystem", "/home/user"],
+  policyEngine,
+  responseScanner: scanner,
+  injectionDetector,
+  egressControl,
+  killSwitch,
+  chainDetector,
+});
+
+await proxy.start();
+```
+
+## Documentation
+
+Full docs: [agent-wall.github.io/agent-wall](https://agent-wall.github.io/agent-wall/)
+
+API reference: [agent-wall.github.io/agent-wall/api/core](https://agent-wall.github.io/agent-wall/api/core)
+
+## License
+
+[MIT](https://github.com/agent-wall/agent-wall/blob/main/LICENSE)