@goplus/agentguard 1.0.0

package/dist/index.d.ts

@@ -0,0 +1,31 @@
+/**
+ * GoPlus AgentGuard - Security guard for AI agents
+ *
+ * Three-module security framework:
+ * - Skill Scanner: Static analysis of skill code
+ * - Skill Registry: Trust level and capability management
+ * - Action Scanner: Runtime action decision engine
+ */
+export * from './types/index.js';
+export { SkillScanner, type ScannerOptions } from './scanner/index.js';
+export { SkillRegistry, RegistryStorage, type RegistryOptions, type StorageOptions, type LookupResult, type AttestResult, } from './registry/index.js';
+export { ActionScanner, GoPlusClient, type ActionScannerOptions, } from './action/index.js';
+export { DEFAULT_POLICIES, RESTRICTIVE_CAPABILITY, PERMISSIVE_CAPABILITY, CAPABILITY_PRESETS, type PolicyConfig, } from './policy/default.js';
+export { containsSensitiveData, maskSensitiveData, extractDomain, isDomainAllowed, SENSITIVE_PATTERNS, } from './utils/patterns.js';
+import { SkillScanner } from './scanner/index.js';
+import { SkillRegistry } from './registry/index.js';
+import { ActionScanner } from './action/index.js';
+/**
+ * Create a complete AgentGuard instance with all modules
+ */
+export declare function createAgentGuard(options?: {
+    registryPath?: string;
+    useExternalScanner?: boolean;
+}): {
+    scanner: SkillScanner;
+    registry: SkillRegistry;
+    actionScanner: ActionScanner;
+};
+export declare const createGuardSkills: typeof createAgentGuard;
+export default createAgentGuard;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,cAAc,kBAAkB,CAAC;AAGjC,OAAO,EAAE,YAAY,EAAE,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EACL,aAAa,EACb,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,YAAY,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,aAAa,EACb,YAAY,EACZ,KAAK,oBAAoB,GAC1B,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,KAAK,YAAY,GAClB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;;;;EAgBA;AAID,eAAO,MAAM,iBAAiB,yBAAmB,CAAC;AAGlD,eAAe,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,77 @@
+"use strict";
+/**
+ * GoPlus AgentGuard - Security guard for AI agents
+ *
+ * Three-module security framework:
+ * - Skill Scanner: Static analysis of skill code
+ * - Skill Registry: Trust level and capability management
+ * - Action Scanner: Runtime action decision engine
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createGuardSkills = exports.SENSITIVE_PATTERNS = exports.isDomainAllowed = exports.extractDomain = exports.maskSensitiveData = exports.containsSensitiveData = exports.CAPABILITY_PRESETS = exports.PERMISSIVE_CAPABILITY = exports.RESTRICTIVE_CAPABILITY = exports.DEFAULT_POLICIES = exports.GoPlusClient = exports.ActionScanner = exports.RegistryStorage = exports.SkillRegistry = exports.SkillScanner = void 0;
+exports.createAgentGuard = createAgentGuard;
+// Export types
+__exportStar(require("./types/index.js"), exports);
+// Export modules
+var index_js_1 = require("./scanner/index.js");
+Object.defineProperty(exports, "SkillScanner", { enumerable: true, get: function () { return index_js_1.SkillScanner; } });
+var index_js_2 = require("./registry/index.js");
+Object.defineProperty(exports, "SkillRegistry", { enumerable: true, get: function () { return index_js_2.SkillRegistry; } });
+Object.defineProperty(exports, "RegistryStorage", { enumerable: true, get: function () { return index_js_2.RegistryStorage; } });
+var index_js_3 = require("./action/index.js");
+Object.defineProperty(exports, "ActionScanner", { enumerable: true, get: function () { return index_js_3.ActionScanner; } });
+Object.defineProperty(exports, "GoPlusClient", { enumerable: true, get: function () { return index_js_3.GoPlusClient; } });
+// Export policy presets
+var default_js_1 = require("./policy/default.js");
+Object.defineProperty(exports, "DEFAULT_POLICIES", { enumerable: true, get: function () { return default_js_1.DEFAULT_POLICIES; } });
+Object.defineProperty(exports, "RESTRICTIVE_CAPABILITY", { enumerable: true, get: function () { return default_js_1.RESTRICTIVE_CAPABILITY; } });
+Object.defineProperty(exports, "PERMISSIVE_CAPABILITY", { enumerable: true, get: function () { return default_js_1.PERMISSIVE_CAPABILITY; } });
+Object.defineProperty(exports, "CAPABILITY_PRESETS", { enumerable: true, get: function () { return default_js_1.CAPABILITY_PRESETS; } });
+// Export utility functions
+var patterns_js_1 = require("./utils/patterns.js");
+Object.defineProperty(exports, "containsSensitiveData", { enumerable: true, get: function () { return patterns_js_1.containsSensitiveData; } });
+Object.defineProperty(exports, "maskSensitiveData", { enumerable: true, get: function () { return patterns_js_1.maskSensitiveData; } });
+Object.defineProperty(exports, "extractDomain", { enumerable: true, get: function () { return patterns_js_1.extractDomain; } });
+Object.defineProperty(exports, "isDomainAllowed", { enumerable: true, get: function () { return patterns_js_1.isDomainAllowed; } });
+Object.defineProperty(exports, "SENSITIVE_PATTERNS", { enumerable: true, get: function () { return patterns_js_1.SENSITIVE_PATTERNS; } });
+// Convenience factory functions
+const index_js_4 = require("./scanner/index.js");
+const index_js_5 = require("./registry/index.js");
+const index_js_6 = require("./action/index.js");
+/**
+ * Create a complete AgentGuard instance with all modules
+ */
+function createAgentGuard(options) {
+    const registry = new index_js_5.SkillRegistry({
+        filePath: options?.registryPath,
+    });
+    const scanner = new index_js_4.SkillScanner({
+        useExternalScanner: options?.useExternalScanner ?? true,
+    });
+    const actionScanner = new index_js_6.ActionScanner({ registry });
+    return {
+        scanner,
+        registry,
+        actionScanner,
+    };
+}
+// Default export
+// Backwards compatibility alias
+exports.createGuardSkills = createAgentGuard;
+// Default export
+exports.default = createAgentGuard;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;AA+CH,4CAmBC;AAhED,eAAe;AACf,mDAAiC;AAEjC,iBAAiB;AACjB,+CAAuE;AAA9D,wGAAA,YAAY,OAAA;AACrB,gDAO6B;AAN3B,yGAAA,aAAa,OAAA;AACb,2GAAA,eAAe,OAAA;AAMjB,8CAI2B;AAHzB,yGAAA,aAAa,OAAA;AACb,wGAAA,YAAY,OAAA;AAId,wBAAwB;AACxB,kDAM6B;AAL3B,8GAAA,gBAAgB,OAAA;AAChB,oHAAA,sBAAsB,OAAA;AACtB,mHAAA,qBAAqB,OAAA;AACrB,gHAAA,kBAAkB,OAAA;AAIpB,2BAA2B;AAC3B,mDAM6B;AAL3B,oHAAA,qBAAqB,OAAA;AACrB,gHAAA,iBAAiB,OAAA;AACjB,4GAAA,aAAa,OAAA;AACb,8GAAA,eAAe,OAAA;AACf,iHAAA,kBAAkB,OAAA;AAGpB,gCAAgC;AAChC,iDAAkD;AAClD,kDAAoD;AACpD,gDAAkD;AAElD;;GAEG;AACH,SAAgB,gBAAgB,CAAC,OAGhC;IACC,MAAM,QAAQ,GAAG,IAAI,wBAAa,CAAC;QACjC,QAAQ,EAAE,OAAO,EAAE,YAAY;KAChC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,uBAAY,CAAC;QAC/B,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,IAAI,IAAI;KACxD,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,IAAI,wBAAa,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEtD,OAAO;QACL,OAAO;QACP,QAAQ;QACR,aAAa;KACd,CAAC;AACJ,CAAC;AAED,iBAAiB;AACjB,gCAAgC;AACnB,QAAA,iBAAiB,GAAG,gBAAgB,CAAC;AAElD,iBAAiB;AACjB,kBAAe,gBAAgB,CAAC"}

package/dist/mcp-server.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=mcp-server.d.ts.map

package/dist/mcp-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.d.ts","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":""}

package/dist/mcp-server.js

@@ -0,0 +1,410 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const index_js_1 = require("@modelcontextprotocol/sdk/server/index.js");
+const stdio_js_1 = require("@modelcontextprotocol/sdk/server/stdio.js");
+const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
+const zod_1 = require("zod");
+const commander_1 = require("commander");
+const index_js_2 = require("./scanner/index.js");
+const index_js_3 = require("./registry/index.js");
+const index_js_4 = require("./action/index.js");
+// Module instances (initialized in createServer)
+let scanner;
+let registry;
+let actionScanner;
+// Zod schemas for validation
+const SkillIdentitySchema = zod_1.z.object({
+    id: zod_1.z.string(),
+    source: zod_1.z.string(),
+    version_ref: zod_1.z.string(),
+    artifact_hash: zod_1.z.string(),
+});
+const CapabilityModelSchema = zod_1.z.object({
+    network_allowlist: zod_1.z.array(zod_1.z.string()),
+    filesystem_allowlist: zod_1.z.array(zod_1.z.string()),
+    exec: zod_1.z.enum(['allow', 'deny']),
+    secrets_allowlist: zod_1.z.array(zod_1.z.string()),
+    web3: zod_1.z.object({
+        chains_allowlist: zod_1.z.array(zod_1.z.number()),
+        rpc_allowlist: zod_1.z.array(zod_1.z.string()),
+        tx_policy: zod_1.z.enum(['allow', 'confirm_high_risk', 'deny']),
+    }).optional(),
+});
+/**
+ * Create and configure the MCP server
+ */
+function createServer(options) {
+    scanner = new index_js_2.SkillScanner();
+    registry = new index_js_3.SkillRegistry({ filePath: options?.registryPath });
+    actionScanner = new index_js_4.ActionScanner({ registry });
+    const server = new index_js_1.Server({
+        name: 'agentguard',
+        version: '1.0.0',
+    }, {
+        capabilities: {
+            tools: {},
+        },
+    });
+    // List all available tools
+    server.setRequestHandler(types_js_1.ListToolsRequestSchema, async () => {
+        return {
+            tools: [
+                // Scanner tools
+                {
+                    name: 'skill_scanner_scan',
+                    description: 'Scan a skill directory for security risks. Returns risk level, tags, and evidence.',
+                    inputSchema: {
+                        type: 'object',
+                        properties: {
+                            skill: {
+                                type: 'object',
+                                properties: {
+                                    id: { type: 'string', description: 'Skill identifier' },
+                                    source: { type: 'string', description: 'Source repository' },
+                                    version_ref: { type: 'string', description: 'Version reference' },
+                                    artifact_hash: { type: 'string', description: 'Artifact hash' },
+                                },
+                                required: ['id', 'source', 'version_ref', 'artifact_hash'],
+                            },
+                            path: { type: 'string', description: 'Path to skill directory' },
+                            deep: { type: 'boolean', description: 'Enable deep analysis', default: false },
+                        },
+                        required: ['skill', 'path'],
+                    },
+                },
+                // Registry tools
+                {
+                    name: 'registry_lookup',
+                    description: 'Look up a skill\'s trust record in the registry.',
+                    inputSchema: {
+                        type: 'object',
+                        properties: {
+                            skill: {
+                                type: 'object',
+                                properties: {
+                                    id: { type: 'string' },
+                                    source: { type: 'string' },
+                                    version_ref: { type: 'string' },
+                                    artifact_hash: { type: 'string' },
+                                },
+                                required: ['id', 'source', 'version_ref', 'artifact_hash'],
+                            },
+                        },
+                        required: ['skill'],
+                    },
+                },
+                {
+                    name: 'registry_attest',
+                    description: 'Add or update a skill\'s trust record. May require confirmation for upgrades.',
+                    inputSchema: {
+                        type: 'object',
+                        properties: {
+                            skill: {
+                                type: 'object',
+                                properties: {
+                                    id: { type: 'string' },
+                                    source: { type: 'string' },
+                                    version_ref: { type: 'string' },
+                                    artifact_hash: { type: 'string' },
+                                },
+                                required: ['id', 'source', 'version_ref', 'artifact_hash'],
+                            },
+                            trust_level: {
+                                type: 'string',
+                                enum: ['untrusted', 'restricted', 'trusted'],
+                            },
+                            capabilities: {
+                                type: 'object',
+                                properties: {
+                                    network_allowlist: { type: 'array', items: { type: 'string' } },
+                                    filesystem_allowlist: { type: 'array', items: { type: 'string' } },
+                                    exec: { type: 'string', enum: ['allow', 'deny'] },
+                                    secrets_allowlist: { type: 'array', items: { type: 'string' } },
+                                },
+                                required: ['network_allowlist', 'filesystem_allowlist', 'exec', 'secrets_allowlist'],
+                            },
+                            reviewed_by: { type: 'string', description: 'Reviewer identifier' },
+                            notes: { type: 'string', description: 'Review notes' },
+                            expires_at: { type: 'string', description: 'Expiration date (ISO 8601)' },
+                            force: { type: 'boolean', description: 'Force attest without confirmation', default: false },
+                        },
+                        required: ['skill', 'trust_level', 'capabilities', 'reviewed_by', 'notes'],
+                    },
+                },
+                {
+                    name: 'registry_revoke',
+                    description: 'Revoke trust for skills matching the criteria.',
+                    inputSchema: {
+                        type: 'object',
+                        properties: {
+                            source: { type: 'string', description: 'Source pattern (supports wildcards)' },
+                            version_ref: { type: 'string', description: 'Version to revoke' },
+                            record_key: { type: 'string', description: 'Specific record key' },
+                            reason: { type: 'string', description: 'Revocation reason' },
+                        },
+                        required: ['reason'],
+                    },
+                },
+                {
+                    name: 'registry_list',
+                    description: 'List trust records with optional filters.',
+                    inputSchema: {
+                        type: 'object',
+                        properties: {
+                            trust_level: { type: 'string', enum: ['untrusted', 'restricted', 'trusted'] },
+                            status: { type: 'string', enum: ['active', 'revoked'] },
+                            source_pattern: { type: 'string', description: 'Filter by source pattern' },
+                            include_expired: { type: 'boolean', default: false },
+                        },
+                    },
+                },
+                // Action scanner tools
+                {
+                    name: 'action_scanner_decide',
+                    description: 'Evaluate a runtime action and return allow/deny/confirm decision.',
+                    inputSchema: {
+                        type: 'object',
+                        properties: {
+                            actor: {
+                                type: 'object',
+                                properties: {
+                                    skill: {
+                                        type: 'object',
+                                        properties: {
+                                            id: { type: 'string' },
+                                            source: { type: 'string' },
+                                            version_ref: { type: 'string' },
+                                            artifact_hash: { type: 'string' },
+                                        },
+                                        required: ['id', 'source', 'version_ref', 'artifact_hash'],
+                                    },
+                                },
+                                required: ['skill'],
+                            },
+                            action: {
+                                type: 'object',
+                                properties: {
+                                    type: {
+                                        type: 'string',
+                                        enum: ['network_request', 'exec_command', 'read_file', 'write_file', 'secret_access', 'web3_tx', 'web3_sign'],
+                                    },
+                                    data: { type: 'object', description: 'Action-specific data' },
+                                },
+                                required: ['type', 'data'],
+                            },
+                            context: {
+                                type: 'object',
+                                properties: {
+                                    session_id: { type: 'string' },
+                                    user_present: { type: 'boolean' },
+                                    env: { type: 'string', enum: ['prod', 'dev', 'test'] },
+                                },
+                                required: ['session_id', 'user_present', 'env'],
+                            },
+                        },
+                        required: ['actor', 'action', 'context'],
+                    },
+                },
+                {
+                    name: 'action_scanner_simulate_web3',
+                    description: 'Simulate a Web3 transaction using GoPlus API. Returns risk analysis.',
+                    inputSchema: {
+                        type: 'object',
+                        properties: {
+                            chain_id: { type: 'number', description: 'Chain ID (e.g., 1 for Ethereum)' },
+                            from: { type: 'string', description: 'Sender address' },
+                            to: { type: 'string', description: 'Target address' },
+                            value: { type: 'string', description: 'Value in wei' },
+                            data: { type: 'string', description: 'Transaction calldata' },
+                            origin: { type: 'string', description: 'DApp origin URL' },
+                        },
+                        required: ['chain_id', 'from', 'to', 'value'],
+                    },
+                },
+            ],
+        };
+    });
+    // Handle tool calls
+    server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
+        const { name, arguments: args } = request.params;
+        try {
+            switch (name) {
+                // Scanner: scan
+                case 'skill_scanner_scan': {
+                    const skill = SkillIdentitySchema.parse(args?.skill);
+                    const path = args?.path;
+                    const deep = args?.deep || false;
+                    const result = await scanner.scan({
+                        skill,
+                        payload: { type: 'dir', ref: path },
+                        options: { deep },
+                    });
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: JSON.stringify(result, null, 2),
+                            },
+                        ],
+                    };
+                }
+                // Registry: lookup
+                case 'registry_lookup': {
+                    const skill = SkillIdentitySchema.parse(args?.skill);
+                    const result = await registry.lookup(skill);
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: JSON.stringify(result, null, 2),
+                            },
+                        ],
+                    };
+                }
+                // Registry: attest
+                case 'registry_attest': {
+                    const skill = SkillIdentitySchema.parse(args?.skill);
+                    const trustLevel = args?.trust_level;
+                    const capabilities = CapabilityModelSchema.parse(args?.capabilities);
+                    const reviewedBy = args?.reviewed_by;
+                    const notes = args?.notes;
+                    const expiresAt = args?.expires_at;
+                    const force = args?.force || false;
+                    const attestFn = force ? registry.forceAttest.bind(registry) : registry.attest.bind(registry);
+                    const result = await attestFn({
+                        skill,
+                        trust_level: trustLevel,
+                        capabilities,
+                        expires_at: expiresAt,
+                        review: {
+                            reviewed_by: reviewedBy,
+                            evidence_refs: [],
+                            notes,
+                        },
+                    });
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: JSON.stringify(result, null, 2),
+                            },
+                        ],
+                    };
+                }
+                // Registry: revoke
+                case 'registry_revoke': {
+                    const source = args?.source;
+                    const versionRef = args?.version_ref;
+                    const recordKey = args?.record_key;
+                    const reason = args?.reason;
+                    const count = await registry.revoke({ source, version_ref: versionRef, record_key: recordKey }, reason);
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: JSON.stringify({ revoked_count: count }, null, 2),
+                            },
+                        ],
+                    };
+                }
+                // Registry: list
+                case 'registry_list': {
+                    const filters = {
+                        trust_level: args?.trust_level,
+                        status: args?.status,
+                        source_pattern: args?.source_pattern,
+                        include_expired: args?.include_expired || false,
+                    };
+                    const records = await registry.list(filters);
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: JSON.stringify({ count: records.length, records }, null, 2),
+                            },
+                        ],
+                    };
+                }
+                // Action scanner: decide
+                case 'action_scanner_decide': {
+                    const envelope = args;
+                    envelope.context.time = new Date().toISOString();
+                    const result = await actionScanner.decide(envelope);
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: JSON.stringify(result, null, 2),
+                            },
+                        ],
+                    };
+                }
+                // Action scanner: simulate_web3
+                case 'action_scanner_simulate_web3': {
+                    const intent = {
+                        chain_id: args?.chain_id,
+                        from: args?.from,
+                        to: args?.to,
+                        value: args?.value,
+                        data: args?.data,
+                        origin: args?.origin,
+                        kind: 'tx',
+                    };
+                    const result = await actionScanner.simulateWeb3(intent);
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: JSON.stringify(result, null, 2),
+                            },
+                        ],
+                    };
+                }
+                default:
+                    throw new Error(`Unknown tool: ${name}`);
+            }
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: JSON.stringify({ error: errorMessage }),
+                    },
+                ],
+                isError: true,
+            };
+        }
+    });
+    return server;
+}
+/**
+ * Main entry point
+ */
+async function main() {
+    const program = new commander_1.Command();
+    program
+        .name('agentguard')
+        .description('Security skill MCP server for AI agents')
+        .version('1.0.0')
+        .option('--registry-path <path>', 'Path to registry file')
+        .action(async (options) => {
+        // Create server
+        const server = createServer({
+            registryPath: options.registryPath,
+        });
+        // Connect via stdio
+        const transport = new stdio_js_1.StdioServerTransport();
+        await server.connect(transport);
+        console.error('GoPlus AgentGuard MCP server started');
+    });
+    await program.parseAsync(process.argv);
+}
+// Run if executed directly
+main().catch((error) => {
+    console.error('Fatal error:', error);
+    process.exit(1);
+});
+//# sourceMappingURL=mcp-server.js.map

package/dist/mcp-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.js","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":";;;AAEA,wEAAmE;AACnE,wEAAiF;AACjF,iEAG4C;AAC5C,6BAAwB;AACxB,yCAAoC;AAEpC,iDAAkD;AAClD,kDAAoD;AACpD,gDAAkD;AAKlD,iDAAiD;AACjD,IAAI,OAAqB,CAAC;AAC1B,IAAI,QAAuB,CAAC;AAC5B,IAAI,aAA4B,CAAC;AAEjC,6BAA6B;AAC7B,MAAM,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;CAC1B,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IACrC,iBAAiB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;IACtC,oBAAoB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;IACzC,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/B,iBAAiB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;IACtC,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC;QACb,gBAAgB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;QACrC,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;QAClC,SAAS,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;KAC1D,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH;;GAEG;AACH,SAAS,YAAY,CAAC,OAAmC;IACvD,OAAO,GAAG,IAAI,uBAAY,EAAE,CAAC;IAC7B,QAAQ,GAAG,IAAI,wBAAa,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAClE,aAAa,GAAG,IAAI,wBAAa,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEhD,MAAM,MAAM,GAAG,IAAI,iBAAM,CACvB;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;KACjB,EACD;QACE,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE;SACV;KACF,CACF,CAAC;IAEF,2BAA2B;IAC3B,MAAM,CAAC,iBAAiB,CAAC,iCAAsB,EAAE,KAAK,IAAI,EAAE;QAC1D,OAAO;YACL,KAAK,EAAE;gBACL,gBAAgB;gBAChB;oBACE,IAAI,EAAE,oBAAoB;oBAC1B,WAAW,EAAE,oFAAoF;oBACjG,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;oCACvD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;oCAC5D,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;oCACjE,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE;iCAChE;gCACD,QAAQ,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,CAAC;6BAC3D;4BACD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yBAAyB,EAAE;4BAChE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,sBAAsB,EAAE,OAAO,EAAE,KAAK,EAAE;yBAC/E;wBACD,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;qBAC5B;iBACF;gBAED,iBAAiB;gBACjB;oBACE,IAAI,EAAE,iBAAiB;oBACvB,WAAW,EAAE,kDAAkD;oBAC/D,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oCACtB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oCAC1B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oCAC/B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iCAClC;gCACD,QAAQ,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,CAAC;6BAC3D;yBACF;wBACD,QAAQ,EAAE,CAAC,OAAO,CAAC;qBACpB;iBACF;gBACD;oBACE,IAAI,EAAE,iBAAiB;oBACvB,WAAW,EAAE,+EAA+E;oBAC5F,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oCACtB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oCAC1B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oCAC/B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iCAClC;gCACD,QAAQ,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,CAAC;6BAC3D;4BACD,WAAW,EAAE;gCACX,IAAI,EAAE,QAAQ;gCACd,IAAI,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,CAAC;6BAC7C;4BACD,YAAY,EAAE;gCACZ,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,iBAAiB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;oCAC/D,oBAAoB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;oCAClE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE;oCACjD,iBAAiB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;iCAChE;gCACD,QAAQ,EAAE,CAAC,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,EAAE,mBAAmB,CAAC;6BACrF;4BACD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;4BACnE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;4BACtD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4BAA4B,EAAE;4BACzE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mCAAmC,EAAE,OAAO,EAAE,KAAK,EAAE;yBAC7F;wBACD,QAAQ,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC;qBAC3E;iBACF;gBACD;oBACE,IAAI,EAAE,iBAAiB;oBACvB,WAAW,EAAE,gDAAgD;oBAC7D,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;4BAC9E,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;4BACjE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;4BAClE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;yBAC7D;wBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;qBACrB;iBACF;gBACD;oBACE,IAAI,EAAE,eAAe;oBACrB,WAAW,EAAE,2CAA2C;oBACxD,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE;4BAC7E,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;4BACvD,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE;4BAC3E,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;yBACrD;qBACF;iBACF;gBAED,uBAAuB;gBACvB;oBACE,IAAI,EAAE,uBAAuB;oBAC7B,WAAW,EAAE,mEAAmE;oBAChF,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,KAAK,EAAE;wCACL,IAAI,EAAE,QAAQ;wCACd,UAAU,EAAE;4CACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4CACtB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4CAC1B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;4CAC/B,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;yCAClC;wCACD,QAAQ,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,CAAC;qCAC3D;iCACF;gCACD,QAAQ,EAAE,CAAC,OAAO,CAAC;6BACpB;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,IAAI,EAAE;wCACJ,IAAI,EAAE,QAAQ;wCACd,IAAI,EAAE,CAAC,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,WAAW,CAAC;qCAC9G;oCACD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;iCAC9D;gCACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;6BAC3B;4BACD,OAAO,EAAE;gCACP,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oCAC9B,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oCACjC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE;iCACvD;gCACD,QAAQ,EAAE,CAAC,YAAY,EAAE,cAAc,EAAE,KAAK,CAAC;6BAChD;yBACF;wBACD,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC;qBACzC;iBACF;gBACD;oBACE,IAAI,EAAE,8BAA8B;oBACpC,WAAW,EAAE,sEAAsE;oBACnF,WAAW,EAAE;wBACX,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;4BAC5E,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE;4BACvD,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;4BACtD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;4BAC7D,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iBAAiB,EAAE;yBAC3D;wBACD,QAAQ,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC;qBAC9C;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,oBAAoB;IACpB,MAAM,CAAC,iBAAiB,CAAC,gCAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAEjD,IAAI,CAAC;YACH,QAAQ,IAAI,EAAE,CAAC;gBACb,gBAAgB;gBAChB,KAAK,oBAAoB,CAAC,CAAC,CAAC;oBAC1B,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBACrD,MAAM,IAAI,GAAG,IAAI,EAAE,IAAc,CAAC;oBAClC,MAAM,IAAI,GAAG,IAAI,EAAE,IAAe,IAAI,KAAK,CAAC;oBAE5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;wBAChC,KAAK;wBACL,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE;wBACnC,OAAO,EAAE,EAAE,IAAI,EAAE;qBAClB,CAAC,CAAC;oBAEH,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;6BACtC;yBACF;qBACF,CAAC;gBACJ,CAAC;gBAED,mBAAmB;gBACnB,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACvB,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBACrD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAE5C,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;6BACtC;yBACF;qBACF,CAAC;gBACJ,CAAC;gBAED,mBAAmB;gBACnB,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACvB,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBACrD,MAAM,UAAU,GAAG,IAAI,EAAE,WAAyB,CAAC;oBACnD,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;oBACrE,MAAM,UAAU,GAAG,IAAI,EAAE,WAAqB,CAAC;oBAC/C,MAAM,KAAK,GAAG,IAAI,EAAE,KAAe,CAAC;oBACpC,MAAM,SAAS,GAAG,IAAI,EAAE,UAAgC,CAAC;oBACzD,MAAM,KAAK,GAAG,IAAI,EAAE,KAAgB,IAAI,KAAK,CAAC;oBAE9C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAE9F,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;wBAC5B,KAAK;wBACL,WAAW,EAAE,UAAU;wBACvB,YAAY;wBACZ,UAAU,EAAE,SAAS;wBACrB,MAAM,EAAE;4BACN,WAAW,EAAE,UAAU;4BACvB,aAAa,EAAE,EAAE;4BACjB,KAAK;yBACN;qBACF,CAAC,CAAC;oBAEH,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;6BACtC;yBACF;qBACF,CAAC;gBACJ,CAAC;gBAED,mBAAmB;gBACnB,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACvB,MAAM,MAAM,GAAG,IAAI,EAAE,MAA4B,CAAC;oBAClD,MAAM,UAAU,GAAG,IAAI,EAAE,WAAiC,CAAC;oBAC3D,MAAM,SAAS,GAAG,IAAI,EAAE,UAAgC,CAAC;oBACzD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAgB,CAAC;oBAEtC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,CACjC,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,EAC1D,MAAM,CACP,CAAC;oBAEF,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;6BACxD;yBACF;qBACF,CAAC;gBACJ,CAAC;gBAED,iBAAiB;gBACjB,KAAK,eAAe,CAAC,CAAC,CAAC;oBACrB,MAAM,OAAO,GAAG;wBACd,WAAW,EAAE,IAAI,EAAE,WAAqC;wBACxD,MAAM,EAAE,IAAI,EAAE,MAA0C;wBACxD,cAAc,EAAE,IAAI,EAAE,cAAoC;wBAC1D,eAAe,EAAE,IAAI,EAAE,eAA0B,IAAI,KAAK;qBAC3D,CAAC;oBAEF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAE7C,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;6BAClE;yBACF;qBACF,CAAC;gBACJ,CAAC;gBAED,yBAAyB;gBACzB,KAAK,uBAAuB,CAAC,CAAC,CAAC;oBAC7B,MAAM,QAAQ,GAAG,IAAiC,CAAC;oBACnD,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBAEjD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAEpD,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;6BACtC;yBACF;qBACF,CAAC;gBACJ,CAAC;gBAED,gCAAgC;gBAChC,KAAK,8BAA8B,CAAC,CAAC,CAAC;oBACpC,MAAM,MAAM,GAAe;wBACzB,QAAQ,EAAE,IAAI,EAAE,QAAkB;wBAClC,IAAI,EAAE,IAAI,EAAE,IAAc;wBAC1B,EAAE,EAAE,IAAI,EAAE,EAAY;wBACtB,KAAK,EAAE,IAAI,EAAE,KAAe;wBAC5B,IAAI,EAAE,IAAI,EAAE,IAA0B;wBACtC,MAAM,EAAE,IAAI,EAAE,MAA4B;wBAC1C,IAAI,EAAE,IAAI;qBACX,CAAC;oBAEF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;oBAExD,OAAO;wBACL,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;6BACtC;yBACF;qBACF,CAAC;gBACJ,CAAC;gBAED;oBACE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9E,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;qBAC9C;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,YAAY,CAAC;SAClB,WAAW,CAAC,yCAAyC,CAAC;SACtD,OAAO,CAAC,OAAO,CAAC;SAChB,MAAM,CAAC,wBAAwB,EAAE,uBAAuB,CAAC;SACzD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,gBAAgB;QAChB,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;QAEH,oBAAoB;QACpB,MAAM,SAAS,GAAG,IAAI,+BAAoB,EAAE,CAAC;QAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEhC,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEL,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,2BAA2B;AAC3B,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/policy/default.d.ts

@@ -0,0 +1,77 @@
+import type { CapabilityModel } from '../types/skill.js';
+/**
+ * Default policy configuration
+ */
+export interface PolicyConfig {
+    /** Default action for secret exfiltration */
+    secret_exfil: {
+        private_key: 'deny' | 'confirm';
+        mnemonic: 'deny' | 'confirm';
+        api_secret: 'deny' | 'confirm';
+    };
+    /** Default action for command execution */
+    exec_command: 'allow' | 'deny' | 'confirm';
+    /** Web3 policies */
+    web3: {
+        unlimited_approval: 'allow' | 'deny' | 'confirm';
+        unknown_spender: 'allow' | 'deny' | 'confirm';
+        user_not_present: 'allow' | 'deny' | 'confirm';
+    };
+    /** Network policies */
+    network: {
+        untrusted_domain: 'allow' | 'deny' | 'confirm';
+        body_contains_secret: 'allow' | 'deny' | 'confirm';
+    };
+}
+/**
+ * Default policies - most restrictive
+ */
+export declare const DEFAULT_POLICIES: PolicyConfig;
+/**
+ * Restrictive capability model
+ */
+export declare const RESTRICTIVE_CAPABILITY: CapabilityModel;
+/**
+ * Permissive capability model (for trusted skills)
+ */
+export declare const PERMISSIVE_CAPABILITY: CapabilityModel;
+/**
+ * Common capability presets
+ */
+export declare const CAPABILITY_PRESETS: {
+    /** No capabilities */
+    none: CapabilityModel;
+    /** Read-only local access */
+    read_only: {
+        filesystem_allowlist: string[];
+        network_allowlist: string[];
+        exec: "allow" | "deny";
+        secrets_allowlist: string[];
+        web3?: import("../types/skill.js").Web3Capability;
+    };
+    /** Trading bot preset */
+    trading_bot: {
+        network_allowlist: string[];
+        filesystem_allowlist: string[];
+        exec: "deny";
+        secrets_allowlist: string[];
+        web3: {
+            chains_allowlist: number[];
+            rpc_allowlist: string[];
+            tx_policy: "confirm_high_risk";
+        };
+    };
+    /** DeFi interaction preset */
+    defi: {
+        network_allowlist: string[];
+        filesystem_allowlist: never[];
+        exec: "deny";
+        secrets_allowlist: never[];
+        web3: {
+            chains_allowlist: number[];
+            rpc_allowlist: string[];
+            tx_policy: "confirm_high_risk";
+        };
+    };
+};
+//# sourceMappingURL=default.d.ts.map

package/dist/policy/default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default.d.ts","sourceRoot":"","sources":["../../src/policy/default.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,6CAA6C;IAC7C,YAAY,EAAE;QACZ,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;QAChC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;KAChC,CAAC;IACF,2CAA2C;IAC3C,YAAY,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IAC3C,oBAAoB;IACpB,IAAI,EAAE;QACJ,kBAAkB,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;QACjD,eAAe,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;QAC9C,gBAAgB,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;KAChD,CAAC;IACF,uBAAuB;IACvB,OAAO,EAAE;QACP,gBAAgB,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;QAC/C,oBAAoB,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;KACpD,CAAC;CACH;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,YAuB9B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,eAKpC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,eAUnC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB;IAC7B,sBAAsB;;IAGtB,6BAA6B;;;;;;;;IAM7B,yBAAyB;;;;;;;;;;;;IAoBzB,8BAA8B;;;;;;;;;;;;CAY/B,CAAC"}