@agentbouncr/core 0.1.0

package/dist/core/policy-schema.d.ts

@@ -0,0 +1,50 @@
+/**
+ * @agentbouncr/core — Policy Validation Schema
+ *
+ * Zod schemas for runtime validation of Policy JSON.
+ * validatePolicy() calls process.exit(1) on invalid input (Fail-Secure).
+ */
+import { z } from 'zod/v4';
+import type pino from 'pino';
+export declare const policyConditionSchema: z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>]>>>;
+export declare const policyRuleSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    tool: z.ZodString;
+    effect: z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>;
+    condition: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>]>>>>;
+    reason: z.ZodOptional<z.ZodString>;
+    rateLimit: z.ZodOptional<z.ZodObject<{
+        maxPerMinute: z.ZodNumber;
+    }, z.core.$strip>>;
+    requireApproval: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const policySchema: z.ZodObject<{
+    name: z.ZodString;
+    version: z.ZodString;
+    agentId: z.ZodOptional<z.ZodString>;
+    rules: z.ZodArray<z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        tool: z.ZodString;
+        effect: z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+        }>;
+        condition: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>]>>>>;
+        reason: z.ZodOptional<z.ZodString>;
+        rateLimit: z.ZodOptional<z.ZodObject<{
+            maxPerMinute: z.ZodNumber;
+        }, z.core.$strip>>;
+        requireApproval: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+/**
+ * Validate a policy object. Returns the validated Policy on success.
+ * Calls process.exit(1) on failure — invalid policy = agent MUST NOT start.
+ */
+export declare function validatePolicy(input: unknown, logger: pino.Logger): z.infer<typeof policySchema>;
+//# sourceMappingURL=policy-schema.d.ts.map

package/dist/core/policy-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-schema.d.ts","sourceRoot":"","sources":["../../src/core/policy-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AA0B7B,eAAO,MAAM,qBAAqB,gLAGjC,CAAC;AAUF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;iBAQ3B,CAAC;AAIH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;iBAOvB,CAAC;AAIH;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,IAAI,CAAC,MAAM,GAClB,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAU9B"}

package/dist/core/policy-schema.js

@@ -0,0 +1,59 @@
+/**
+ * @agentbouncr/core — Policy Validation Schema
+ *
+ * Zod schemas for runtime validation of Policy JSON.
+ * validatePolicy() calls process.exit(1) on invalid input (Fail-Secure).
+ */
+import { z } from 'zod/v4';
+// --- Condition Schema ---
+const conditionOperandSchema = z.union([
+    z.string(),
+    z.number(),
+    z.boolean(),
+    z.array(z.union([z.string(), z.number()])),
+]);
+const VALID_OPERATORS = new Set([
+    'equals', 'notEquals',
+    'startsWith', 'endsWith', 'contains',
+    'gt', 'lt', 'gte', 'lte',
+    'in', 'matches',
+]);
+const conditionEntrySchema = z.record(z.string(), conditionOperandSchema).refine((obj) => Object.keys(obj).every((key) => VALID_OPERATORS.has(key)), { message: 'Invalid condition operator. Valid: equals, notEquals, startsWith, endsWith, contains, gt, lt, gte, lte, in, matches' });
+export const policyConditionSchema = z.record(z.string(), conditionEntrySchema);
+// --- Rate Limit Schema (Stub for Stufe 2) ---
+const rateLimitSchema = z.object({
+    maxPerMinute: z.number().positive(),
+});
+// --- Policy Rule Schema ---
+export const policyRuleSchema = z.object({
+    name: z.string().optional(),
+    tool: z.string().min(1),
+    effect: z.enum(['allow', 'deny']),
+    condition: policyConditionSchema.optional(),
+    reason: z.string().optional(),
+    rateLimit: rateLimitSchema.optional(),
+    requireApproval: z.boolean().optional(),
+});
+// --- Policy Schema ---
+export const policySchema = z.object({
+    name: z.string().min(1),
+    version: z.string().min(1),
+    agentId: z.string().optional(),
+    rules: z.array(policyRuleSchema).min(1).max(1000),
+    createdAt: z.string(),
+    updatedAt: z.string(),
+});
+// --- Validate-or-exit function (Fail-Secure) ---
+/**
+ * Validate a policy object. Returns the validated Policy on success.
+ * Calls process.exit(1) on failure — invalid policy = agent MUST NOT start.
+ */
+export function validatePolicy(input, logger) {
+    const result = policySchema.safeParse(input);
+    if (!result.success) {
+        logger.error({ errors: result.error.issues }, 'Invalid policy — agent cannot start (Fail-Secure)');
+        process.exit(1);
+    }
+    return result.data;
+}
+//# sourceMappingURL=policy-schema.js.map

package/dist/core/policy-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-schema.js","sourceRoot":"","sources":["../../src/core/policy-schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAG3B,2BAA2B;AAE3B,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC;IACrC,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,OAAO,EAAE;IACX,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,QAAQ,EAAE,WAAW;IACrB,YAAY,EAAE,UAAU,EAAE,UAAU;IACpC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK;IACxB,IAAI,EAAE,SAAS;CAChB,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CACnC,CAAC,CAAC,MAAM,EAAE,EACV,sBAAsB,CACvB,CAAC,MAAM,CACN,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAClE,EAAE,OAAO,EAAE,qHAAqH,EAAE,CACnI,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAC3C,CAAC,CAAC,MAAM,EAAE,EACV,oBAAoB,CACrB,CAAC;AAEF,+CAA+C;AAE/C,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH,6BAA6B;AAE7B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjC,SAAS,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;IACrC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH,wBAAwB;AAExB,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,kDAAkD;AAElD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAc,EACd,MAAmB;IAEnB,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,KAAK,CACV,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAC/B,mDAAmD,CACpD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/dist/core/tool-registry.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @agentbouncr/core — Tool Registry
+ *
+ * Manages tool registrations and provides vendor-agnostic tool definitions.
+ * Uses dependency injection (no singletons).
+ */
+import type pino from 'pino';
+import type { GovernanceTool } from '../schema/tool-schema.js';
+export interface ProviderToolDefinition {
+    name: string;
+    description: string;
+    input_schema: Record<string, unknown>;
+}
+export declare class ToolRegistry {
+    private readonly logger;
+    private readonly tools;
+    constructor(logger: pino.Logger);
+    register(tool: GovernanceTool): void;
+    get(name: string): GovernanceTool | undefined;
+    has(name: string): boolean;
+    getAll(): GovernanceTool[];
+    getToolsForAgent(allowedTools: string[]): GovernanceTool[];
+    /**
+     * Convert tools to provider-agnostic JSON Schema format.
+     * Adapters (Vercel AI SDK, OpenAI, etc.) consume this format.
+     */
+    toProviderTools(allowedTools: string[]): ProviderToolDefinition[];
+    count(): number;
+    clear(): void;
+}
+//# sourceMappingURL=tool-registry.d.ts.map

package/dist/core/tool-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registry.d.ts","sourceRoot":"","sources":["../../src/core/tool-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,qBAAa,YAAY;IAGX,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqC;gBAE9B,MAAM,EAAE,IAAI,CAAC,MAAM;IAEhD,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAQpC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI7C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B,MAAM,IAAI,cAAc,EAAE;IAI1B,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,cAAc,EAAE;IAM1D;;;OAGG;IACH,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,sBAAsB,EAAE;IAQjE,KAAK,IAAI,MAAM;IAIf,KAAK,IAAI,IAAI;CAGd"}

package/dist/core/tool-registry.js

@@ -0,0 +1,53 @@
+/**
+ * @agentbouncr/core — Tool Registry
+ *
+ * Manages tool registrations and provides vendor-agnostic tool definitions.
+ * Uses dependency injection (no singletons).
+ */
+import { parametersToJsonSchema } from '../schema/tool-schema.js';
+export class ToolRegistry {
+    logger;
+    tools = new Map();
+    constructor(logger) {
+        this.logger = logger;
+    }
+    register(tool) {
+        if (this.tools.has(tool.name)) {
+            this.logger.warn({ tool: tool.name }, 'Tool already registered, overwriting');
+        }
+        this.tools.set(tool.name, tool);
+        this.logger.info({ tool: tool.name, riskLevel: tool.riskLevel }, 'Tool registered');
+    }
+    get(name) {
+        return this.tools.get(name);
+    }
+    has(name) {
+        return this.tools.has(name);
+    }
+    getAll() {
+        return Array.from(this.tools.values());
+    }
+    getToolsForAgent(allowedTools) {
+        return allowedTools
+            .map((name) => this.tools.get(name))
+            .filter((tool) => tool !== undefined);
+    }
+    /**
+     * Convert tools to provider-agnostic JSON Schema format.
+     * Adapters (Vercel AI SDK, OpenAI, etc.) consume this format.
+     */
+    toProviderTools(allowedTools) {
+        return this.getToolsForAgent(allowedTools).map((tool) => ({
+            name: tool.name,
+            description: tool.description ?? '',
+            input_schema: parametersToJsonSchema(tool.parameters),
+        }));
+    }
+    count() {
+        return this.tools.size;
+    }
+    clear() {
+        this.tools.clear();
+    }
+}
+//# sourceMappingURL=tool-registry.js.map

package/dist/core/tool-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registry.js","sourceRoot":"","sources":["../../src/core/tool-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAQlE,MAAM,OAAO,YAAY;IAGM;IAFZ,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE3D,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAEpD,QAAQ,CAAC,IAAoB;QAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,sCAAsC,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACtF,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,gBAAgB,CAAC,YAAsB;QACrC,OAAO,YAAY;aAChB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aACnC,MAAM,CAAC,CAAC,IAAI,EAA0B,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAClE,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,YAAsB;QACpC,OAAO,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;YACnC,YAAY,EAAE,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC;SACtD,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/detection/injection-detector.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @agentbouncr/core — Injection Detection
+ *
+ * Detects prompt injection patterns in incoming messages.
+ * IMPORTANT: Injection is NEVER auto-blocked — only logged as warning.
+ * Reason: False-positive risk. Blocking decisions are left to the policy layer.
+ */
+import type { InjectionDetectionResult } from '../types/index.js';
+export interface InjectionPattern {
+    name: string;
+    pattern: RegExp;
+}
+export interface InjectionDetectionOptions {
+    /** Pattern names to skip during detection */
+    disabledPatterns?: string[];
+    /** Optional logger for DI (defaults to securityLogger) */
+    logger?: import('pino').Logger;
+}
+export declare const DEFAULT_INJECTION_PATTERNS: InjectionPattern[];
+export declare function detectInjection(text: string, options?: InjectionDetectionOptions): InjectionDetectionResult;
+//# sourceMappingURL=injection-detector.d.ts.map

package/dist/detection/injection-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection-detector.d.ts","sourceRoot":"","sources":["../../src/detection/injection-detector.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAElE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,yBAAyB;IACxC,6CAA6C;IAC7C,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,0DAA0D;IAC1D,MAAM,CAAC,EAAE,OAAO,MAAM,EAAE,MAAM,CAAC;CAChC;AAED,eAAO,MAAM,0BAA0B,EAAE,gBAAgB,EA8BxD,CAAC;AAEF,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,yBAAyB,GAClC,wBAAwB,CA2B1B"}

package/dist/detection/injection-detector.js

@@ -0,0 +1,61 @@
+/**
+ * @agentbouncr/core — Injection Detection
+ *
+ * Detects prompt injection patterns in incoming messages.
+ * IMPORTANT: Injection is NEVER auto-blocked — only logged as warning.
+ * Reason: False-positive risk. Blocking decisions are left to the policy layer.
+ */
+import { securityLogger } from '../utils/logger.js';
+export const DEFAULT_INJECTION_PATTERNS = [
+    {
+        name: 'ignore_previous_instructions',
+        pattern: /ignor(e|ier).*?(previous|vorherige|bisherige|alle).*?(instruction|anweisung|regeln)/i,
+    },
+    {
+        name: 'system_prompt_override',
+        pattern: /```system\b/i,
+    },
+    {
+        name: 'admin_mode',
+        pattern: /(admin[- ]?mod(e|us)|developer[- ]?mod(e|us)|debug[- ]?mod(e|us))/i,
+    },
+    {
+        name: 'reveal_instructions',
+        pattern: /(show|reveal|display|zeig|gib).*?(system[- ]?prompt|instruction|api[- ]?key|secret|password|passwort)/i,
+    },
+    {
+        name: 'role_hijack',
+        pattern: /(you are now|du bist jetzt|ab jetzt bist du|from now on you are)/i,
+    },
+    {
+        name: 'instruction_delimiter',
+        pattern: /(\[INST\]|\[\/INST\]|<\|im_start\|>|<\|im_end\|>|<\/?system>)/i,
+    },
+    {
+        name: 'execute_command',
+        pattern: /(execute_shell|run_command|exec\(|eval\(|child_process)/i,
+    },
+];
+export function detectInjection(text, options) {
+    const log = options?.logger ?? securityLogger;
+    const matched = [];
+    const disabled = new Set(options?.disabledPatterns ?? []);
+    for (const { name, pattern } of DEFAULT_INJECTION_PATTERNS) {
+        if (disabled.has(name))
+            continue;
+        if (pattern.test(text)) {
+            matched.push(name);
+        }
+    }
+    const result = {
+        detected: matched.length > 0,
+        patterns: matched,
+        text,
+    };
+    if (result.detected) {
+        // Log WARNING only — NEVER block (Fail-Open for injection, event emitted separately)
+        log.warn({ patterns: matched, event: 'injection_detected' }, 'Injection pattern detected in incoming message');
+    }
+    return result;
+}
+//# sourceMappingURL=injection-detector.js.map

package/dist/detection/injection-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection-detector.js","sourceRoot":"","sources":["../../src/detection/injection-detector.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAepD,MAAM,CAAC,MAAM,0BAA0B,GAAuB;IAC5D;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,sFAAsF;KAChG;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,cAAc;KACxB;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,oEAAoE;KAC9E;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EACL,wGAAwG;KAC3G;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,mEAAmE;KAC7E;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,gEAAgE;KAC1E;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,0DAA0D;KACpE;CACF,CAAC;AAEF,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,OAAmC;IAEnC,MAAM,GAAG,GAAG,OAAO,EAAE,MAAM,IAAI,cAAc,CAAC;IAC9C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAE1D,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,0BAA0B,EAAE,CAAC;QAC3D,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACjC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAA6B;QACvC,QAAQ,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;QAC5B,QAAQ,EAAE,OAAO;QACjB,IAAI;KACL,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,qFAAqF;QACrF,GAAG,CAAC,IAAI,CACN,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAClD,gDAAgD,CACjD,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/events/event-emitter.d.ts

@@ -0,0 +1,44 @@
+/**
+ * @agentbouncr/core — Event System
+ *
+ * Async in-process event dispatch via process.nextTick.
+ * 20 event types, 100ms timeout per listener.
+ * Listeners must NEVER block the governance check.
+ */
+import type pino from 'pino';
+export type GovernanceEventType = 'tool_call.allowed' | 'tool_call.denied' | 'tool_call.error' | 'approval.requested' | 'approval.granted' | 'approval.rejected' | 'approval.timeout' | 'agent.started' | 'agent.stopped' | 'agent.error' | 'agent.config_changed' | 'injection.detected' | 'killswitch.activated' | 'killswitch.deactivated' | 'audit.integrity_violation' | 'audit.write_failure' | 'policy.created' | 'policy.updated' | 'policy.deleted' | 'rate_limit.exceeded';
+export interface GovernanceEvent<T = Record<string, unknown>> {
+    type: GovernanceEventType;
+    timestamp: string;
+    traceId?: string;
+    agentId?: string;
+    tenantId?: string;
+    data: T;
+}
+export type GovernanceEventListener<T = Record<string, unknown>> = (event: GovernanceEvent<T>) => void | Promise<void>;
+export declare class GovernanceEventEmitter {
+    private readonly logger;
+    private readonly traceIdResolver?;
+    private readonly listeners;
+    constructor(logger: pino.Logger, traceIdResolver?: (() => string | undefined) | undefined);
+    on(type: GovernanceEventType, listener: GovernanceEventListener): void;
+    off(type: GovernanceEventType, listener: GovernanceEventListener): void;
+    /**
+     * Emit event asynchronously via process.nextTick.
+     * Listeners are fire-and-forget — they NEVER block the caller.
+     * Each listener gets max 100ms before timeout warning.
+     *
+     * Defensive: Invalid input is logged and silently ignored (JS callers without TS).
+     */
+    emit(type: GovernanceEventType, data?: Record<string, unknown>): void;
+    /**
+     * Emit with full event object (when traceId/agentId are known).
+     *
+     * Defensive: Missing fields are filled with defaults (JS callers without TS).
+     */
+    emitEvent(event: GovernanceEvent): void;
+    listenerCount(type: GovernanceEventType): number;
+    removeAllListeners(type?: GovernanceEventType): void;
+    private executeListener;
+}
+//# sourceMappingURL=event-emitter.d.ts.map

package/dist/events/event-emitter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-emitter.d.ts","sourceRoot":"","sources":["../../src/events/event-emitter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAI7B,MAAM,MAAM,mBAAmB,GAC3B,mBAAmB,GACnB,kBAAkB,GAClB,iBAAiB,GACjB,oBAAoB,GACpB,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,GAClB,eAAe,GACf,eAAe,GACf,aAAa,GACb,sBAAsB,GACtB,oBAAoB,GACpB,sBAAsB,GACtB,wBAAwB,GACxB,2BAA2B,GAC3B,qBAAqB,GACrB,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,qBAAqB,CAAC;AAI1B,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC1D,IAAI,EAAE,mBAAmB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,CAAC,CAAC;CACT;AAID,MAAM,MAAM,uBAAuB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CACjE,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,KACtB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAM1B,qBAAa,sBAAsB;IAI/B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;IAJnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA6D;gBAGpE,MAAM,EAAE,IAAI,CAAC,MAAM,EACnB,eAAe,CAAC,GAAE,MAAM,MAAM,GAAG,SAAS,aAAA;IAG7D,EAAE,CAAC,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,uBAAuB,GAAG,IAAI;IAMtE,GAAG,CAAC,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,uBAAuB,GAAG,IAAI;IAUvE;;;;;;OAMG;IACH,IAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IA8BzE;;;;OAIG;IACH,SAAS,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAyBvC,aAAa,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM;IAIhD,kBAAkB,CAAC,IAAI,CAAC,EAAE,mBAAmB,GAAG,IAAI;IAQpD,OAAO,CAAC,eAAe;CA8BxB"}

package/dist/events/event-emitter.js

@@ -0,0 +1,119 @@
+/**
+ * @agentbouncr/core — Event System
+ *
+ * Async in-process event dispatch via process.nextTick.
+ * 20 event types, 100ms timeout per listener.
+ * Listeners must NEVER block the governance check.
+ */
+// --- Event Emitter ---
+const LISTENER_TIMEOUT_MS = 100;
+export class GovernanceEventEmitter {
+    logger;
+    traceIdResolver;
+    listeners = new Map();
+    constructor(logger, traceIdResolver) {
+        this.logger = logger;
+        this.traceIdResolver = traceIdResolver;
+    }
+    on(type, listener) {
+        const existing = this.listeners.get(type) ?? [];
+        existing.push(listener);
+        this.listeners.set(type, existing);
+    }
+    off(type, listener) {
+        const existing = this.listeners.get(type);
+        if (!existing)
+            return;
+        const index = existing.indexOf(listener);
+        if (index !== -1) {
+            existing.splice(index, 1);
+        }
+    }
+    /**
+     * Emit event asynchronously via process.nextTick.
+     * Listeners are fire-and-forget — they NEVER block the caller.
+     * Each listener gets max 100ms before timeout warning.
+     *
+     * Defensive: Invalid input is logged and silently ignored (JS callers without TS).
+     */
+    emit(type, data = {}) {
+        if (!type || typeof type !== 'string') {
+            this.logger.warn({ type }, 'emit() called with invalid event type — ignored');
+            return;
+        }
+        const listeners = this.listeners.get(type);
+        if (!listeners?.length)
+            return;
+        let traceId;
+        try {
+            traceId = this.traceIdResolver?.();
+        }
+        catch (err) {
+            this.logger.warn({ error: String(err) }, 'traceIdResolver threw — ignored');
+        }
+        const event = {
+            type,
+            timestamp: new Date().toISOString(),
+            traceId,
+            data: data && typeof data === 'object' ? data : {},
+        };
+        for (const listener of listeners) {
+            process.nextTick(() => {
+                this.executeListener(type, listener, event);
+            });
+        }
+    }
+    /**
+     * Emit with full event object (when traceId/agentId are known).
+     *
+     * Defensive: Missing fields are filled with defaults (JS callers without TS).
+     */
+    emitEvent(event) {
+        if (!event || typeof event !== 'object' || !event.type) {
+            this.logger.warn({ event }, 'emitEvent() called with invalid event — ignored');
+            return;
+        }
+        const safeEvent = {
+            type: event.type,
+            timestamp: event.timestamp || new Date().toISOString(),
+            traceId: event.traceId,
+            agentId: event.agentId,
+            tenantId: event.tenantId,
+            data: event.data && typeof event.data === 'object' ? event.data : {},
+        };
+        const listeners = this.listeners.get(safeEvent.type);
+        if (!listeners?.length)
+            return;
+        for (const listener of listeners) {
+            process.nextTick(() => {
+                this.executeListener(safeEvent.type, listener, safeEvent);
+            });
+        }
+    }
+    listenerCount(type) {
+        return this.listeners.get(type)?.length ?? 0;
+    }
+    removeAllListeners(type) {
+        if (type) {
+            this.listeners.delete(type);
+        }
+        else {
+            this.listeners.clear();
+        }
+    }
+    executeListener(type, listener, event) {
+        try {
+            const result = listener(event);
+            if (result instanceof Promise) {
+                const timeout = new Promise((_, reject) => setTimeout(() => reject(new Error(`Event listener timeout (${LISTENER_TIMEOUT_MS}ms)`)), LISTENER_TIMEOUT_MS));
+                void Promise.race([result, timeout]).catch((err) => {
+                    this.logger.warn({ eventType: type, error: String(err) }, 'Event listener failed or timed out');
+                });
+            }
+        }
+        catch (err) {
+            this.logger.warn({ eventType: type, error: String(err) }, 'Event listener threw synchronously');
+        }
+    }
+}
+//# sourceMappingURL=event-emitter.js.map

package/dist/events/event-emitter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-emitter.js","sourceRoot":"","sources":["../../src/events/event-emitter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA6CH,wBAAwB;AAExB,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,MAAM,OAAO,sBAAsB;IAId;IACA;IAJF,SAAS,GAAG,IAAI,GAAG,EAAkD,CAAC;IAEvF,YACmB,MAAmB,EACnB,eAA0C;QAD1C,WAAM,GAAN,MAAM,CAAa;QACnB,oBAAe,GAAf,eAAe,CAA2B;IAC1D,CAAC;IAEJ,EAAE,CAAC,IAAyB,EAAE,QAAiC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,GAAG,CAAC,IAAyB,EAAE,QAAiC;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ;YAAE,OAAO;QAEtB,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,IAAI,CAAC,IAAyB,EAAE,OAAgC,EAAE;QAChE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,iDAAiD,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,EAAE,MAAM;YAAE,OAAO;QAE/B,IAAI,OAA2B,CAAC;QAChC,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,iCAAiC,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,KAAK,GAAoB;YAC7B,IAAI;YACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO;YACP,IAAI,EAAE,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;SACnD,CAAC;QAEF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE;gBACpB,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,KAAsB;QAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,iDAAiD,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAoB;YACjC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;SACrE,CAAC;QAEF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS,EAAE,MAAM;YAAE,OAAO;QAE/B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE;gBACpB,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,aAAa,CAAC,IAAyB;QACrC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,kBAAkB,CAAC,IAA0B;QAC3C,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,eAAe,CACrB,IAAyB,EACzB,QAAiC,EACjC,KAAsB;QAEtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAE/B,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC/C,UAAU,CACR,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,mBAAmB,KAAK,CAAC,CAAC,EAC5E,mBAAmB,CACpB,CACF,CAAC;gBAEF,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;oBAC1D,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EACvC,oCAAoC,CACrC,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EACvC,oCAAoC,CACrC,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/importers/json-schema-converter.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @agentbouncr/core — JSON Schema → GovernanceToolParameter Converter
+ *
+ * Reverse of parametersToJsonSchema() (tool-schema.ts).
+ * Converts standard JSON Schema objects to the canonical GovernanceToolParameter[] format.
+ * Used by all import adapters (MCP, OpenAI, LangChain).
+ */
+import type { GovernanceToolParameter } from '../schema/tool-schema.js';
+/**
+ * Convert a JSON Schema object to GovernanceToolParameter[].
+ *
+ * Expects a top-level `{ type: "object", properties: {...}, required: [...] }` schema.
+ * Returns empty array for non-object schemas or missing properties.
+ */
+export declare function jsonSchemaToParameters(schema: Record<string, unknown>): GovernanceToolParameter[];
+//# sourceMappingURL=json-schema-converter.d.ts.map

package/dist/importers/json-schema-converter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema-converter.d.ts","sourceRoot":"","sources":["../../src/importers/json-schema-converter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAA4B,MAAM,0BAA0B,CAAC;AAiBlG;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,uBAAuB,EAAE,CAc3B"}

package/dist/importers/json-schema-converter.js

@@ -0,0 +1,95 @@
+/**
+ * @agentbouncr/core — JSON Schema → GovernanceToolParameter Converter
+ *
+ * Reverse of parametersToJsonSchema() (tool-schema.ts).
+ * Converts standard JSON Schema objects to the canonical GovernanceToolParameter[] format.
+ * Used by all import adapters (MCP, OpenAI, LangChain).
+ */
+// --- Prototype pollution protection ---
+const RESERVED_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
+// --- Type mapping ---
+const JSON_SCHEMA_TYPE_MAP = {
+    string: 'string',
+    number: 'number',
+    integer: 'number',
+    boolean: 'boolean',
+    object: 'object',
+    array: 'array',
+};
+/**
+ * Convert a JSON Schema object to GovernanceToolParameter[].
+ *
+ * Expects a top-level `{ type: "object", properties: {...}, required: [...] }` schema.
+ * Returns empty array for non-object schemas or missing properties.
+ */
+export function jsonSchemaToParameters(schema) {
+    if (!schema || typeof schema !== 'object')
+        return [];
+    const schemaType = schema.type;
+    if (schemaType !== 'object' && schemaType !== undefined)
+        return [];
+    const properties = schema.properties;
+    if (!properties || typeof properties !== 'object')
+        return [];
+    const requiredFields = Array.isArray(schema.required) ? schema.required : [];
+    return Object.entries(properties)
+        .filter(([name]) => !RESERVED_KEYS.has(name))
+        .map(([name, prop]) => convertProperty(name, prop, requiredFields.includes(name)));
+}
+function convertProperty(name, prop, required) {
+    const rawType = prop.type;
+    const type = JSON_SCHEMA_TYPE_MAP[rawType ?? ''] ?? 'string';
+    const param = { name, type, required };
+    if (typeof prop.description === 'string') {
+        param.description = prop.description;
+    }
+    if (prop.default !== undefined) {
+        param.default = prop.default;
+    }
+    const constraints = extractConstraints(prop);
+    if (constraints) {
+        param.constraints = constraints;
+    }
+    // Nested object → recursive children
+    if (type === 'object' && prop.properties) {
+        param.children = jsonSchemaToParameters(prop);
+    }
+    // Array → items as single child
+    if (type === 'array' && prop.items && typeof prop.items === 'object') {
+        const items = prop.items;
+        const itemType = JSON_SCHEMA_TYPE_MAP[items.type ?? ''] ?? 'string';
+        param.children = [{
+                name: 'items',
+                type: itemType,
+                required: false,
+                ...(typeof items.description === 'string' ? { description: items.description } : {}),
+            }];
+    }
+    return param;
+}
+function extractConstraints(prop) {
+    const constraints = {};
+    let hasConstraints = false;
+    if (Array.isArray(prop.enum)) {
+        constraints.enum = prop.enum;
+        hasConstraints = true;
+    }
+    if (typeof prop.minimum === 'number') {
+        constraints.min = prop.minimum;
+        hasConstraints = true;
+    }
+    if (typeof prop.maximum === 'number') {
+        constraints.max = prop.maximum;
+        hasConstraints = true;
+    }
+    if (typeof prop.maxLength === 'number') {
+        constraints.maxLength = prop.maxLength;
+        hasConstraints = true;
+    }
+    if (typeof prop.pattern === 'string') {
+        constraints.pattern = prop.pattern;
+        hasConstraints = true;
+    }
+    return hasConstraints ? constraints : undefined;
+}
+//# sourceMappingURL=json-schema-converter.js.map

package/dist/importers/json-schema-converter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema-converter.js","sourceRoot":"","sources":["../../src/importers/json-schema-converter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,yCAAyC;AAEzC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAEzE,uBAAuB;AAEvB,MAAM,oBAAoB,GAAoD;IAC5E,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,QAAQ;IACjB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;CACf,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA+B;IAE/B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAErD,MAAM,UAAU,GAAG,MAAM,CAAC,IAA0B,CAAC;IACrD,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAEnE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAiE,CAAC;IAC5F,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAE7D,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,QAAqB,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3F,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;SAC9B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,IAA6B,EAC7B,QAAiB;IAEjB,MAAM,OAAO,GAAG,IAAI,CAAC,IAA0B,CAAC;IAChD,MAAM,IAAI,GAAoC,oBAAoB,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC;IAE9F,MAAM,KAAK,GAA4B,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAEhE,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACzC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACvC,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC/B,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IAClC,CAAC;IAED,qCAAqC;IACrC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACzC,KAAK,CAAC,QAAQ,GAAG,sBAAsB,CAAC,IAA+B,CAAC,CAAC;IAC3E,CAAC;IAED,gCAAgC;IAChC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAgC,CAAC;QACpD,MAAM,QAAQ,GACZ,oBAAoB,CAAC,KAAK,CAAC,IAAc,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC;QAC/D,KAAK,CAAC,QAAQ,GAAG,CAAC;gBAChB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,KAAK;gBACf,GAAG,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CACzB,IAA6B;IAE7B,MAAM,WAAW,GAA6B,EAAE,CAAC;IACjD,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,IAA2B,CAAC;QACpD,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,WAAW,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;QAC/B,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,WAAW,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;QAC/B,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACvC,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,WAAW,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QACnC,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,OAAO,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC"}

package/dist/importers/mcp-importer.d.ts

@@ -0,0 +1,30 @@
+/**
+ * @agentbouncr/core — MCP Import Adapter
+ *
+ * Converts MCP tool definitions (from tools/list response) to GovernanceTool[].
+ * MCP = Model Context Protocol — emerging standard for agent tool definitions.
+ *
+ * Import priority: MCP first.
+ */
+import type pino from 'pino';
+import type { GovernanceTool } from '../schema/tool-schema.js';
+import type { RiskLevel } from '../schema/tool-schema.js';
+export interface MCPToolDefinition {
+    name: string;
+    description?: string;
+    inputSchema?: Record<string, unknown>;
+}
+export interface MCPImportOptions {
+    /** Default risk level for imported tools. Default: 'medium' */
+    defaultRiskLevel?: RiskLevel;
+    /** Logger for skip-warnings on invalid tools */
+    logger?: pino.Logger;
+}
+/**
+ * Convert MCP tool definitions to GovernanceTool[].
+ *
+ * Invalid tools (missing/empty name) are skipped with a warning.
+ * Empty input returns empty array.
+ */
+export declare function importMCPTools(toolList: MCPToolDefinition[], options?: MCPImportOptions): GovernanceTool[];
+//# sourceMappingURL=mcp-importer.d.ts.map

package/dist/importers/mcp-importer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-importer.d.ts","sourceRoot":"","sources":["../../src/importers/mcp-importer.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAK1D,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,gBAAgB,CAAC,EAAE,SAAS,CAAC;IAC7B,gDAAgD;IAChD,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,iBAAiB,EAAE,EAC7B,OAAO,CAAC,EAAE,gBAAgB,GACzB,cAAc,EAAE,CAkClB"}