@det-acp/core 0.2.0

package/dist/policy/schema.d.ts

@@ -0,0 +1,168 @@
+/**
+ * Zod schemas for the Agent Policy YAML DSL.
+ *
+ * These schemas are the source of truth for policy validation.
+ * They mirror (and enforce) the types defined in ../types.ts.
+ */
+import { z } from 'zod';
+export declare const ToolNameSchema: z.ZodString;
+export declare const ApprovalModeSchema: z.ZodEnum<{
+    auto: "auto";
+    human: "human";
+    webhook: "webhook";
+}>;
+export declare const RiskLevelSchema: z.ZodEnum<{
+    low: "low";
+    medium: "medium";
+    high: "high";
+    critical: "critical";
+}>;
+export declare const CapabilityScopeSchema: z.ZodObject<{
+    paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    binaries: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    domains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    methods: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    repos: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export declare const CapabilitySchema: z.ZodObject<{
+    tool: z.ZodString;
+    scope: z.ZodObject<{
+        paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        binaries: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        domains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        methods: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        repos: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const GateSchema: z.ZodObject<{
+    action: z.ZodString;
+    approval: z.ZodEnum<{
+        auto: "auto";
+        human: "human";
+        webhook: "webhook";
+    }>;
+    risk_level: z.ZodOptional<z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+        critical: "critical";
+    }>>;
+    condition: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const LimitsSchema: z.ZodObject<{
+    max_runtime_ms: z.ZodOptional<z.ZodNumber>;
+    max_output_bytes: z.ZodOptional<z.ZodNumber>;
+    max_files_changed: z.ZodOptional<z.ZodNumber>;
+    max_retries: z.ZodOptional<z.ZodNumber>;
+    max_cost_usd: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const EvidenceConfigSchema: z.ZodObject<{
+    require: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    format: z.ZodDefault<z.ZodLiteral<"jsonl">>;
+}, z.core.$strip>;
+export declare const ForbiddenPatternSchema: z.ZodObject<{
+    pattern: z.ZodString;
+}, z.core.$strip>;
+export declare const RemediationRuleSchema: z.ZodObject<{
+    match: z.ZodString;
+    action: z.ZodString;
+}, z.core.$strip>;
+export declare const RemediationSchema: z.ZodObject<{
+    rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        match: z.ZodString;
+        action: z.ZodString;
+    }, z.core.$strip>>>;
+    fallback_chain: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export declare const RateLimitSchema: z.ZodObject<{
+    max_per_minute: z.ZodNumber;
+}, z.core.$strip>;
+export declare const EscalationRuleSchema: z.ZodObject<{
+    after_actions: z.ZodOptional<z.ZodNumber>;
+    after_minutes: z.ZodOptional<z.ZodNumber>;
+    require: z.ZodEnum<{
+        human_checkin: "human_checkin";
+    }>;
+}, z.core.$strip>;
+export declare const SessionConstraintsSchema: z.ZodObject<{
+    max_actions: z.ZodOptional<z.ZodNumber>;
+    max_denials: z.ZodOptional<z.ZodNumber>;
+    rate_limit: z.ZodOptional<z.ZodObject<{
+        max_per_minute: z.ZodNumber;
+    }, z.core.$strip>>;
+    escalation: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        after_actions: z.ZodOptional<z.ZodNumber>;
+        after_minutes: z.ZodOptional<z.ZodNumber>;
+        require: z.ZodEnum<{
+            human_checkin: "human_checkin";
+        }>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export declare const PolicySchema: z.ZodObject<{
+    version: z.ZodDefault<z.ZodString>;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    capabilities: z.ZodArray<z.ZodObject<{
+        tool: z.ZodString;
+        scope: z.ZodObject<{
+            paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            binaries: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            domains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            methods: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            repos: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+    limits: z.ZodDefault<z.ZodObject<{
+        max_runtime_ms: z.ZodOptional<z.ZodNumber>;
+        max_output_bytes: z.ZodOptional<z.ZodNumber>;
+        max_files_changed: z.ZodOptional<z.ZodNumber>;
+        max_retries: z.ZodOptional<z.ZodNumber>;
+        max_cost_usd: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    gates: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        action: z.ZodString;
+        approval: z.ZodEnum<{
+            auto: "auto";
+            human: "human";
+            webhook: "webhook";
+        }>;
+        risk_level: z.ZodOptional<z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+            critical: "critical";
+        }>>;
+        condition: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    evidence: z.ZodDefault<z.ZodObject<{
+        require: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        format: z.ZodDefault<z.ZodLiteral<"jsonl">>;
+    }, z.core.$strip>>;
+    forbidden: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        pattern: z.ZodString;
+    }, z.core.$strip>>>;
+    remediation: z.ZodOptional<z.ZodObject<{
+        rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            match: z.ZodString;
+            action: z.ZodString;
+        }, z.core.$strip>>>;
+        fallback_chain: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    session: z.ZodOptional<z.ZodObject<{
+        max_actions: z.ZodOptional<z.ZodNumber>;
+        max_denials: z.ZodOptional<z.ZodNumber>;
+        rate_limit: z.ZodOptional<z.ZodObject<{
+            max_per_minute: z.ZodNumber;
+        }, z.core.$strip>>;
+        escalation: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            after_actions: z.ZodOptional<z.ZodNumber>;
+            after_minutes: z.ZodOptional<z.ZodNumber>;
+            require: z.ZodEnum<{
+                human_checkin: "human_checkin";
+            }>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type PolicyInput = z.input<typeof PolicySchema>;
+export type PolicyOutput = z.output<typeof PolicySchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/policy/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/policy/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,cAAc,aAAkE,CAAC;AAE9F,eAAO,MAAM,kBAAkB;;;;EAAuC,CAAC;AAEvE,eAAO,MAAM,eAAe;;;;;EAAgD,CAAC;AAM7E,eAAO,MAAM,qBAAqB;;;;;;iBAMe,CAAC;AAElD,eAAO,MAAM,gBAAgB;;;;;;;;;iBAG3B,CAAC;AAMH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;iBAKrB,CAAC;AAMH,eAAO,MAAM,YAAY;;;;;;iBAMc,CAAC;AAMxC,eAAO,MAAM,oBAAoB;;;iBAG/B,CAAC;AAMH,eAAO,MAAM,sBAAsB;;iBAEjC,CAAC;AAMH,eAAO,MAAM,qBAAqB;;;iBAGhC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;iBAG5B,CAAC;AAMH,eAAO,MAAM,eAAe;;iBAE1B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;iBAI/B,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;iBASyB,CAAC;AAM/D,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAWvB,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACvD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/policy/schema.js

@@ -0,0 +1,107 @@
+/**
+ * Zod schemas for the Agent Policy YAML DSL.
+ *
+ * These schemas are the source of truth for policy validation.
+ * They mirror (and enforce) the types defined in ../types.ts.
+ */
+import { z } from 'zod';
+// ---------------------------------------------------------------------------
+// Primitives
+// ---------------------------------------------------------------------------
+export const ToolNameSchema = z.string().min(1).describe('Tool identifier, e.g. "file:read"');
+export const ApprovalModeSchema = z.enum(['auto', 'human', 'webhook']);
+export const RiskLevelSchema = z.enum(['low', 'medium', 'high', 'critical']);
+// ---------------------------------------------------------------------------
+// Capability
+// ---------------------------------------------------------------------------
+export const CapabilityScopeSchema = z.object({
+    paths: z.array(z.string()).optional(),
+    binaries: z.array(z.string()).optional(),
+    domains: z.array(z.string()).optional(),
+    methods: z.array(z.string().toUpperCase()).optional(),
+    repos: z.array(z.string()).optional(),
+}).describe('Scope constraints for a capability');
+export const CapabilitySchema = z.object({
+    tool: ToolNameSchema,
+    scope: CapabilityScopeSchema,
+});
+// ---------------------------------------------------------------------------
+// Gate
+// ---------------------------------------------------------------------------
+export const GateSchema = z.object({
+    action: ToolNameSchema,
+    approval: ApprovalModeSchema,
+    risk_level: RiskLevelSchema.optional(),
+    condition: z.string().optional(),
+});
+// ---------------------------------------------------------------------------
+// Limits
+// ---------------------------------------------------------------------------
+export const LimitsSchema = z.object({
+    max_runtime_ms: z.number().positive().optional(),
+    max_output_bytes: z.number().positive().optional(),
+    max_files_changed: z.number().int().positive().optional(),
+    max_retries: z.number().int().nonnegative().optional(),
+    max_cost_usd: z.number().nonnegative().optional(),
+}).describe('Budget / resource limits');
+// ---------------------------------------------------------------------------
+// Evidence
+// ---------------------------------------------------------------------------
+export const EvidenceConfigSchema = z.object({
+    require: z.array(z.string()).default([]),
+    format: z.literal('jsonl').default('jsonl'),
+});
+// ---------------------------------------------------------------------------
+// Forbidden
+// ---------------------------------------------------------------------------
+export const ForbiddenPatternSchema = z.object({
+    pattern: z.string().min(1),
+});
+// ---------------------------------------------------------------------------
+// Remediation
+// ---------------------------------------------------------------------------
+export const RemediationRuleSchema = z.object({
+    match: z.string().min(1),
+    action: z.string().min(1),
+});
+export const RemediationSchema = z.object({
+    rules: z.array(RemediationRuleSchema).default([]),
+    fallback_chain: z.array(z.string()).optional(),
+});
+// ---------------------------------------------------------------------------
+// Session Constraints
+// ---------------------------------------------------------------------------
+export const RateLimitSchema = z.object({
+    max_per_minute: z.number().int().positive(),
+});
+export const EscalationRuleSchema = z.object({
+    after_actions: z.number().int().positive().optional(),
+    after_minutes: z.number().positive().optional(),
+    require: z.enum(['human_checkin']),
+});
+export const SessionConstraintsSchema = z.object({
+    /** Maximum actions per session */
+    max_actions: z.number().int().positive().optional(),
+    /** Terminate session after N denials */
+    max_denials: z.number().int().positive().optional(),
+    /** Rate limiting for actions */
+    rate_limit: RateLimitSchema.optional(),
+    /** Escalation rules based on thresholds */
+    escalation: z.array(EscalationRuleSchema).optional(),
+}).describe('Session-level constraints for the gateway model');
+// ---------------------------------------------------------------------------
+// Top-level Policy
+// ---------------------------------------------------------------------------
+export const PolicySchema = z.object({
+    version: z.string().default('1.0'),
+    name: z.string().min(1),
+    description: z.string().optional(),
+    capabilities: z.array(CapabilitySchema).min(1, 'At least one capability must be defined'),
+    limits: LimitsSchema.default({}),
+    gates: z.array(GateSchema).default([]),
+    evidence: EvidenceConfigSchema.default({ require: [], format: 'jsonl' }),
+    forbidden: z.array(ForbiddenPatternSchema).default([]),
+    remediation: RemediationSchema.optional(),
+    session: SessionConstraintsSchema.optional(),
+});
+//# sourceMappingURL=schema.js.map

package/dist/policy/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/policy/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;AAE9F,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAEvE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAE7E,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC;AAElD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,qBAAqB;CAC7B,CAAC,CAAC;AAEH,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,MAAM,EAAE,cAAc;IACtB,QAAQ,EAAE,kBAAkB;IAC5B,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACtD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;AAExC,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;CAC5C,CAAC,CAAC;AAEH,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAC;AAEH,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAEH,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,kCAAkC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnD,wCAAwC;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnD,gCAAgC;IAChC,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;IACtC,2CAA2C;IAC3C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC;AAE/D,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,yCAAyC,CAAC;IACzF,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,QAAQ,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,wBAAwB,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC"}

package/dist/proxy/mcp-proxy.d.ts

@@ -0,0 +1,43 @@
+/**
+ * MCP Proxy Server — transparent governance layer for MCP-compatible agents.
+ *
+ * Sits between an MCP client (e.g. Cursor, Claude Code) and backend MCP
+ * tool servers. Every tool call is validated against the session policy
+ * before being forwarded to the real backend.
+ *
+ * Architecture:
+ *   Agent (MCP Client) → MCP Proxy (this) → Backend MCP Servers
+ *
+ * The proxy:
+ *   1. Connects to all configured backend MCP servers
+ *   2. Discovers tools from each backend
+ *   3. Presents aggregated tool list as its own MCP server
+ *   4. On each tool call: evaluate against policy → forward or deny
+ *   5. Records all actions and results in the evidence ledger
+ */
+import type { AgentGateway } from '../engine/runtime.js';
+import type { MCPProxyConfig } from './mcp-types.js';
+export declare class MCPProxyServer {
+    private server;
+    private backends;
+    private toolMap;
+    private gateway;
+    private config;
+    private sessionId;
+    constructor(config: MCPProxyConfig, gateway: AgentGateway);
+    /**
+     * Start the MCP proxy server.
+     */
+    start(): Promise<void>;
+    /**
+     * Stop the MCP proxy server.
+     */
+    stop(): Promise<void>;
+    /**
+     * Get the current session ID.
+     */
+    getSessionId(): string | null;
+    private setupHandlers;
+    private connectBackends;
+}
+//# sourceMappingURL=mcp-proxy.d.ts.map

package/dist/proxy/mcp-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-proxy.d.ts","sourceRoot":"","sources":["../../src/proxy/mcp-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAWH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAiC,MAAM,gBAAgB,CAAC;AASpF,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAA2B;IAC3C,OAAO,CAAC,OAAO,CAAkC;IACjD,OAAO,CAAC,OAAO,CAAe;IAC9B,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,SAAS,CAAuB;gBAE5B,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY;IAmBzD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAsB3B;;OAEG;IACH,YAAY,IAAI,MAAM,GAAG,IAAI;IAQ7B,OAAO,CAAC,aAAa;YA2GP,eAAe;CAyD9B"}

package/dist/proxy/mcp-proxy.js

@@ -0,0 +1,240 @@
+/**
+ * MCP Proxy Server — transparent governance layer for MCP-compatible agents.
+ *
+ * Sits between an MCP client (e.g. Cursor, Claude Code) and backend MCP
+ * tool servers. Every tool call is validated against the session policy
+ * before being forwarded to the real backend.
+ *
+ * Architecture:
+ *   Agent (MCP Client) → MCP Proxy (this) → Backend MCP Servers
+ *
+ * The proxy:
+ *   1. Connects to all configured backend MCP servers
+ *   2. Discovers tools from each backend
+ *   3. Presents aggregated tool list as its own MCP server
+ *   4. On each tool call: evaluate against policy → forward or deny
+ *   5. Records all actions and results in the evidence ledger
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
+import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+export class MCPProxyServer {
+    server;
+    backends = [];
+    toolMap = new Map();
+    gateway;
+    config;
+    sessionId = null;
+    constructor(config, gateway) {
+        this.config = config;
+        this.gateway = gateway;
+        this.server = new Server({
+            name: 'det-acp-proxy',
+            version: '0.1.0',
+        }, {
+            capabilities: {
+                tools: {},
+            },
+        });
+        this.setupHandlers();
+    }
+    /**
+     * Start the MCP proxy server.
+     */
+    async start() {
+        // Connect to all backend MCP servers
+        await this.connectBackends();
+        // Create a session for this proxy connection
+        const session = await this.gateway.createSession(this.config.policy, {
+            source: 'mcp-proxy',
+            ...this.config.sessionMetadata,
+        });
+        this.sessionId = session.id;
+        // Start the proxy server
+        if (this.config.transport === 'stdio') {
+            const transport = new StdioServerTransport();
+            await this.server.connect(transport);
+        }
+        else {
+            throw new Error('SSE transport not yet implemented for MCP proxy server');
+        }
+    }
+    /**
+     * Stop the MCP proxy server.
+     */
+    async stop() {
+        // Terminate the session
+        if (this.sessionId) {
+            try {
+                await this.gateway.terminateSession(this.sessionId, 'MCP proxy stopped');
+            }
+            catch {
+                // Best effort
+            }
+        }
+        // Disconnect backends
+        for (const backend of this.backends) {
+            try {
+                await backend.transport.close();
+            }
+            catch {
+                // Best effort
+            }
+        }
+        await this.server.close();
+    }
+    /**
+     * Get the current session ID.
+     */
+    getSessionId() {
+        return this.sessionId;
+    }
+    // ---------------------------------------------------------------------------
+    // Private: handler setup
+    // ---------------------------------------------------------------------------
+    setupHandlers() {
+        // Handle tools/list — return aggregated tools from all backends
+        this.server.setRequestHandler(ListToolsRequestSchema, async () => {
+            const tools = [];
+            for (const backend of this.backends) {
+                for (const tool of backend.tools) {
+                    tools.push({
+                        name: tool.name,
+                        description: tool.description
+                            ? `[${backend.config.name}] ${tool.description}`
+                            : `Tool from ${backend.config.name}`,
+                        inputSchema: tool.inputSchema ?? { type: 'object', properties: {} },
+                    });
+                }
+            }
+            return { tools };
+        });
+        // Handle tools/call — evaluate against policy, then forward
+        this.server.setRequestHandler(CallToolRequestSchema, async (request) => {
+            const { name: toolName, arguments: toolArgs } = request.params;
+            const mapping = this.toolMap.get(toolName);
+            if (!mapping) {
+                return {
+                    content: [{ type: 'text', text: `Unknown tool: ${toolName}` }],
+                    isError: true,
+                };
+            }
+            if (!this.sessionId) {
+                return {
+                    content: [{ type: 'text', text: 'No active session' }],
+                    isError: true,
+                };
+            }
+            // Evaluate the action against the session policy
+            const evaluation = await this.gateway.evaluate(this.sessionId, {
+                tool: toolName,
+                input: (toolArgs ?? {}),
+            });
+            // If denied, return the denial reasons
+            if (evaluation.decision === 'deny') {
+                return {
+                    content: [{
+                            type: 'text',
+                            text: `Action denied by policy: ${evaluation.reasons.join('; ')}`,
+                        }],
+                    isError: true,
+                };
+            }
+            // If gated and pending, return a message indicating approval is needed
+            if (evaluation.decision === 'gate') {
+                return {
+                    content: [{
+                            type: 'text',
+                            text: `Action requires approval: ${evaluation.reasons.join('; ')}. Waiting for gate resolution.`,
+                        }],
+                    isError: true,
+                };
+            }
+            // Allowed — forward to the backend
+            const backend = this.backends[mapping.backendIndex];
+            try {
+                const result = await backend.client.callTool({
+                    name: toolName,
+                    arguments: toolArgs,
+                });
+                // Record the result
+                const isError = result.isError === true;
+                const resultText = Array.isArray(result.content)
+                    ? result.content.map((c) => c.text ?? '').join('\n')
+                    : String(result.content);
+                await this.gateway.recordResult(this.sessionId, evaluation.actionId, {
+                    success: !isError,
+                    output: resultText,
+                    error: isError ? resultText : undefined,
+                });
+                return result;
+            }
+            catch (err) {
+                const errorMsg = err.message;
+                // Record the failure
+                await this.gateway.recordResult(this.sessionId, evaluation.actionId, {
+                    success: false,
+                    error: errorMsg,
+                });
+                return {
+                    content: [{ type: 'text', text: `Backend error: ${errorMsg}` }],
+                    isError: true,
+                };
+            }
+        });
+    }
+    // ---------------------------------------------------------------------------
+    // Private: backend connections
+    // ---------------------------------------------------------------------------
+    async connectBackends() {
+        for (let i = 0; i < this.config.backends.length; i++) {
+            const backendConfig = this.config.backends[i];
+            if (backendConfig.transport === 'stdio') {
+                if (!backendConfig.command) {
+                    throw new Error(`Backend "${backendConfig.name}" is stdio but has no command`);
+                }
+                const client = new Client({
+                    name: `det-acp-proxy-client-${backendConfig.name}`,
+                    version: '0.1.0',
+                }, {
+                    capabilities: {},
+                });
+                const transport = new StdioClientTransport({
+                    command: backendConfig.command,
+                    args: backendConfig.args,
+                    env: backendConfig.env
+                        ? { ...process.env, ...backendConfig.env }
+                        : undefined,
+                });
+                await client.connect(transport);
+                // Discover tools
+                const toolsResponse = await client.listTools();
+                const tools = toolsResponse.tools.map((t) => ({
+                    name: t.name,
+                    description: t.description,
+                    inputSchema: t.inputSchema,
+                }));
+                // Map tools to this backend
+                for (const tool of tools) {
+                    this.toolMap.set(tool.name, {
+                        toolName: tool.name,
+                        backendName: backendConfig.name,
+                        backendIndex: i,
+                    });
+                }
+                this.backends.push({
+                    config: backendConfig,
+                    client,
+                    transport,
+                    tools,
+                });
+            }
+            else {
+                throw new Error(`SSE transport not yet implemented for backend "${backendConfig.name}"`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=mcp-proxy.js.map

package/dist/proxy/mcp-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-proxy.js","sourceRoot":"","sources":["../../src/proxy/mcp-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAY5C,MAAM,OAAO,cAAc;IACjB,MAAM,CAAS;IACf,QAAQ,GAAwB,EAAE,CAAC;IACnC,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,OAAO,CAAe;IACtB,MAAM,CAAiB;IACvB,SAAS,GAAkB,IAAI,CAAC;IAExC,YAAY,MAAsB,EAAE,OAAqB;QACvD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CACtB;YACE,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,OAAO;SACjB,EACD;YACE,YAAY,EAAE;gBACZ,KAAK,EAAE,EAAE;aACV;SACF,CACF,CAAC;QAEF,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,qCAAqC;QACrC,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAE7B,6CAA6C;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,EAClB;YACE,MAAM,EAAE,WAAW;YACnB,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe;SAC/B,CACF,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC;QAE5B,yBAAyB;QACzB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;YAC7C,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,wBAAwB;QACxB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;YAC3E,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,8EAA8E;IAC9E,yBAAyB;IACzB,8EAA8E;IAEtE,aAAa;QACnB,gEAAgE;QAChE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;oBACjC,KAAK,CAAC,IAAI,CAAC;wBACT,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,WAAW,EAAE,IAAI,CAAC,WAAW;4BAC3B,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE;4BAChD,CAAC,CAAC,aAAa,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;wBACtC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;qBAC7E,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,4DAA4D;QAC5D,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACrE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;YAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,iBAAiB,QAAQ,EAAE,EAAE,CAAC;oBACvE,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;oBAC/D,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,iDAAiD;YACjD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE;gBAC7D,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,CAAC,QAAQ,IAAI,EAAE,CAA4B;aACnD,CAAC,CAAC;YAEH,uCAAuC;YACvC,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACnC,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,4BAA4B,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;yBAClE,CAAC;oBACF,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,uEAAuE;YACvE,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACnC,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,6BAA6B,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC;yBACjG,CAAC;oBACF,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,mCAAmC;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;oBAC3C,IAAI,EAAE,QAAQ;oBACd,SAAS,EAAE,QAAQ;iBACpB,CAAC,CAAC;gBAEH,oBAAoB;gBACpB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;gBACxC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;oBAC9C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBACvE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAE3B,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,QAAQ,EAAE;oBACnE,OAAO,EAAE,CAAC,OAAO;oBACjB,MAAM,EAAE,UAAU;oBAClB,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;iBACxC,CAAC,CAAC;gBAEH,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAI,GAAa,CAAC,OAAO,CAAC;gBAExC,qBAAqB;gBACrB,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,QAAQ,EAAE;oBACnE,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,QAAQ;iBAChB,CAAC,CAAC;gBAEH,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,kBAAkB,QAAQ,EAAE,EAAE,CAAC;oBACxE,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAC9E,+BAA+B;IAC/B,8EAA8E;IAEtE,KAAK,CAAC,eAAe;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAE9C,IAAI,aAAa,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;gBACxC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CAAC,YAAY,aAAa,CAAC,IAAI,+BAA+B,CAAC,CAAC;gBACjF,CAAC;gBAED,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;oBACE,IAAI,EAAE,wBAAwB,aAAa,CAAC,IAAI,EAAE;oBAClD,OAAO,EAAE,OAAO;iBACjB,EACD;oBACE,YAAY,EAAE,EAAE;iBACjB,CACF,CAAC;gBAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC;oBACzC,OAAO,EAAE,aAAa,CAAC,OAAO;oBAC9B,IAAI,EAAE,aAAa,CAAC,IAAI;oBACxB,GAAG,EAAE,aAAa,CAAC,GAAG;wBACpB,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,GAAG,EAA4B;wBACpE,CAAC,CAAC,SAAS;iBACd,CAAC,CAAC;gBAEH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAEhC,iBAAiB;gBACjB,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC/C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC5C,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;iBAC3B,CAAC,CAAC,CAAC;gBAEJ,4BAA4B;gBAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;wBAC1B,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,WAAW,EAAE,aAAa,CAAC,IAAI;wBAC/B,YAAY,EAAE,CAAC;qBAChB,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,MAAM,EAAE,aAAa;oBACrB,MAAM;oBACN,SAAS;oBACT,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,kDAAkD,aAAa,CAAC,IAAI,GAAG,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/proxy/mcp-types.d.ts

@@ -0,0 +1,79 @@
+/**
+ * MCP Proxy configuration types.
+ *
+ * Defines the configuration for the MCP proxy server, including
+ * backend MCP server connections and transport settings.
+ */
+import { z } from 'zod';
+export interface MCPBackendConfig {
+    /** Human-readable name for this backend */
+    name: string;
+    /** Transport type */
+    transport: 'stdio' | 'sse';
+    /** Command to spawn (for stdio transport) */
+    command?: string;
+    /** Arguments for the command (for stdio transport) */
+    args?: string[];
+    /** Environment variables for the command (for stdio transport) */
+    env?: Record<string, string>;
+    /** URL for SSE transport */
+    url?: string;
+}
+export interface MCPProxyConfig {
+    /** Path to policy YAML file or inline YAML */
+    policy: string;
+    /** Directory for evidence ledger files */
+    ledgerDir: string;
+    /** Backend MCP servers to proxy to */
+    backends: MCPBackendConfig[];
+    /** Transport to expose to agents (stdio for local, sse for remote) */
+    transport: 'stdio' | 'sse';
+    /** Port for SSE transport */
+    port?: number;
+    /** Host for SSE transport */
+    host?: string;
+    /** Metadata to attach to sessions */
+    sessionMetadata?: Record<string, unknown>;
+}
+export declare const MCPBackendConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    transport: z.ZodEnum<{
+        stdio: "stdio";
+        sse: "sse";
+    }>;
+    command: z.ZodOptional<z.ZodString>;
+    args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    url: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const MCPProxyConfigSchema: z.ZodObject<{
+    policy: z.ZodString;
+    ledger_dir: z.ZodDefault<z.ZodString>;
+    backends: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        transport: z.ZodEnum<{
+            stdio: "stdio";
+            sse: "sse";
+        }>;
+        command: z.ZodOptional<z.ZodString>;
+        args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    transport: z.ZodDefault<z.ZodEnum<{
+        stdio: "stdio";
+        sse: "sse";
+    }>>;
+    port: z.ZodOptional<z.ZodNumber>;
+    host: z.ZodOptional<z.ZodString>;
+    session_metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+/**
+ * Resolved tool-to-backend mapping.
+ */
+export interface ToolMapping {
+    toolName: string;
+    backendName: string;
+    backendIndex: number;
+}
+//# sourceMappingURL=mcp-types.d.ts.map