@mcp-audit-gateway/core 0.1.0

package/dist/types.d.ts

@@ -0,0 +1,477 @@
+import { z } from "zod";
+export declare const UpstreamConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    namespace: z.ZodString;
+    transport: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+        type: z.ZodLiteral<"stdio">;
+        command: z.ZodString;
+        args: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        type: "stdio";
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    }, {
+        type: "stdio";
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"streamable-http">;
+        url: z.ZodString;
+        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        type: "streamable-http";
+        url: string;
+        headers?: Record<string, string> | undefined;
+    }, {
+        type: "streamable-http";
+        url: string;
+        headers?: Record<string, string> | undefined;
+    }>]>;
+    healthCheckIntervalMs: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    namespace: string;
+    transport: {
+        type: "stdio";
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    } | {
+        type: "streamable-http";
+        url: string;
+        headers?: Record<string, string> | undefined;
+    };
+    healthCheckIntervalMs?: number | undefined;
+}, {
+    name: string;
+    namespace: string;
+    transport: {
+        type: "stdio";
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+    } | {
+        type: "streamable-http";
+        url: string;
+        headers?: Record<string, string> | undefined;
+    };
+    healthCheckIntervalMs?: number | undefined;
+}>;
+export declare const PolicyRuleSchema: z.ZodObject<{
+    effect: z.ZodEnum<["allow", "deny"]>;
+    principals: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    namespaces: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    rateLimit: z.ZodOptional<z.ZodObject<{
+        maxPerMinute: z.ZodOptional<z.ZodNumber>;
+        maxPerHour: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        maxPerMinute?: number | undefined;
+        maxPerHour?: number | undefined;
+    }, {
+        maxPerMinute?: number | undefined;
+        maxPerHour?: number | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    effect: "allow" | "deny";
+    principals?: string[] | undefined;
+    tools?: string[] | undefined;
+    namespaces?: string[] | undefined;
+    rateLimit?: {
+        maxPerMinute?: number | undefined;
+        maxPerHour?: number | undefined;
+    } | undefined;
+}, {
+    effect: "allow" | "deny";
+    principals?: string[] | undefined;
+    tools?: string[] | undefined;
+    namespaces?: string[] | undefined;
+    rateLimit?: {
+        maxPerMinute?: number | undefined;
+        maxPerHour?: number | undefined;
+    } | undefined;
+}>;
+export declare const AttestationConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    algorithm: z.ZodDefault<z.ZodEnum<["ed25519", "hmac-sha256"]>>;
+    keyPath: z.ZodOptional<z.ZodString>;
+    secret: z.ZodOptional<z.ZodString>;
+    includeParams: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    includeResult: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    algorithm: "ed25519" | "hmac-sha256";
+    includeParams: boolean;
+    includeResult: boolean;
+    keyPath?: string | undefined;
+    secret?: string | undefined;
+}, {
+    enabled?: boolean | undefined;
+    algorithm?: "ed25519" | "hmac-sha256" | undefined;
+    keyPath?: string | undefined;
+    secret?: string | undefined;
+    includeParams?: boolean | undefined;
+    includeResult?: boolean | undefined;
+}>;
+export declare const TelemetryConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    exporterEndpoint: z.ZodOptional<z.ZodString>;
+    serviceName: z.ZodDefault<z.ZodString>;
+    sampleRate: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    serviceName: string;
+    sampleRate: number;
+    exporterEndpoint?: string | undefined;
+}, {
+    enabled?: boolean | undefined;
+    exporterEndpoint?: string | undefined;
+    serviceName?: string | undefined;
+    sampleRate?: number | undefined;
+}>;
+export declare const GatewayConfigSchema: z.ZodObject<{
+    name: z.ZodDefault<z.ZodString>;
+    version: z.ZodDefault<z.ZodString>;
+    listen: z.ZodDefault<z.ZodObject<{
+        transport: z.ZodDefault<z.ZodEnum<["stdio", "streamable-http"]>>;
+        port: z.ZodDefault<z.ZodNumber>;
+        host: z.ZodDefault<z.ZodString>;
+        principalHeader: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        transport: "stdio" | "streamable-http";
+        port: number;
+        host: string;
+        principalHeader?: string | undefined;
+    }, {
+        transport?: "stdio" | "streamable-http" | undefined;
+        port?: number | undefined;
+        host?: string | undefined;
+        principalHeader?: string | undefined;
+    }>>;
+    upstreams: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        namespace: z.ZodString;
+        transport: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+            type: z.ZodLiteral<"stdio">;
+            command: z.ZodString;
+            args: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            type: "stdio";
+            command: string;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+        }, {
+            type: "stdio";
+            command: string;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"streamable-http">;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            type: "streamable-http";
+            url: string;
+            headers?: Record<string, string> | undefined;
+        }, {
+            type: "streamable-http";
+            url: string;
+            headers?: Record<string, string> | undefined;
+        }>]>;
+        healthCheckIntervalMs: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        namespace: string;
+        transport: {
+            type: "stdio";
+            command: string;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+        } | {
+            type: "streamable-http";
+            url: string;
+            headers?: Record<string, string> | undefined;
+        };
+        healthCheckIntervalMs?: number | undefined;
+    }, {
+        name: string;
+        namespace: string;
+        transport: {
+            type: "stdio";
+            command: string;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+        } | {
+            type: "streamable-http";
+            url: string;
+            headers?: Record<string, string> | undefined;
+        };
+        healthCheckIntervalMs?: number | undefined;
+    }>, "many">;
+    policy: z.ZodDefault<z.ZodObject<{
+        defaultEffect: z.ZodDefault<z.ZodEnum<["allow", "deny"]>>;
+        rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            effect: z.ZodEnum<["allow", "deny"]>;
+            principals: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            namespaces: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            rateLimit: z.ZodOptional<z.ZodObject<{
+                maxPerMinute: z.ZodOptional<z.ZodNumber>;
+                maxPerHour: z.ZodOptional<z.ZodNumber>;
+            }, "strip", z.ZodTypeAny, {
+                maxPerMinute?: number | undefined;
+                maxPerHour?: number | undefined;
+            }, {
+                maxPerMinute?: number | undefined;
+                maxPerHour?: number | undefined;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            effect: "allow" | "deny";
+            principals?: string[] | undefined;
+            tools?: string[] | undefined;
+            namespaces?: string[] | undefined;
+            rateLimit?: {
+                maxPerMinute?: number | undefined;
+                maxPerHour?: number | undefined;
+            } | undefined;
+        }, {
+            effect: "allow" | "deny";
+            principals?: string[] | undefined;
+            tools?: string[] | undefined;
+            namespaces?: string[] | undefined;
+            rateLimit?: {
+                maxPerMinute?: number | undefined;
+                maxPerHour?: number | undefined;
+            } | undefined;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        defaultEffect: "allow" | "deny";
+        rules: {
+            effect: "allow" | "deny";
+            principals?: string[] | undefined;
+            tools?: string[] | undefined;
+            namespaces?: string[] | undefined;
+            rateLimit?: {
+                maxPerMinute?: number | undefined;
+                maxPerHour?: number | undefined;
+            } | undefined;
+        }[];
+    }, {
+        defaultEffect?: "allow" | "deny" | undefined;
+        rules?: {
+            effect: "allow" | "deny";
+            principals?: string[] | undefined;
+            tools?: string[] | undefined;
+            namespaces?: string[] | undefined;
+            rateLimit?: {
+                maxPerMinute?: number | undefined;
+                maxPerHour?: number | undefined;
+            } | undefined;
+        }[] | undefined;
+    }>>;
+    attestation: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        algorithm: z.ZodDefault<z.ZodEnum<["ed25519", "hmac-sha256"]>>;
+        keyPath: z.ZodOptional<z.ZodString>;
+        secret: z.ZodOptional<z.ZodString>;
+        includeParams: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        includeResult: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        algorithm: "ed25519" | "hmac-sha256";
+        includeParams: boolean;
+        includeResult: boolean;
+        keyPath?: string | undefined;
+        secret?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        algorithm?: "ed25519" | "hmac-sha256" | undefined;
+        keyPath?: string | undefined;
+        secret?: string | undefined;
+        includeParams?: boolean | undefined;
+        includeResult?: boolean | undefined;
+    }>>;
+    telemetry: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        exporterEndpoint: z.ZodOptional<z.ZodString>;
+        serviceName: z.ZodDefault<z.ZodString>;
+        sampleRate: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        enabled: boolean;
+        serviceName: string;
+        sampleRate: number;
+        exporterEndpoint?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        exporterEndpoint?: string | undefined;
+        serviceName?: string | undefined;
+        sampleRate?: number | undefined;
+    }>>;
+    auditLog: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        path: z.ZodDefault<z.ZodString>;
+        rotateAfterMb: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        path: string;
+        enabled: boolean;
+        rotateAfterMb: number;
+    }, {
+        path?: string | undefined;
+        enabled?: boolean | undefined;
+        rotateAfterMb?: number | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    version: string;
+    listen: {
+        transport: "stdio" | "streamable-http";
+        port: number;
+        host: string;
+        principalHeader?: string | undefined;
+    };
+    upstreams: {
+        name: string;
+        namespace: string;
+        transport: {
+            type: "stdio";
+            command: string;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+        } | {
+            type: "streamable-http";
+            url: string;
+            headers?: Record<string, string> | undefined;
+        };
+        healthCheckIntervalMs?: number | undefined;
+    }[];
+    policy: {
+        defaultEffect: "allow" | "deny";
+        rules: {
+            effect: "allow" | "deny";
+            principals?: string[] | undefined;
+            tools?: string[] | undefined;
+            namespaces?: string[] | undefined;
+            rateLimit?: {
+                maxPerMinute?: number | undefined;
+                maxPerHour?: number | undefined;
+            } | undefined;
+        }[];
+    };
+    attestation: {
+        enabled: boolean;
+        algorithm: "ed25519" | "hmac-sha256";
+        includeParams: boolean;
+        includeResult: boolean;
+        keyPath?: string | undefined;
+        secret?: string | undefined;
+    };
+    telemetry: {
+        enabled: boolean;
+        serviceName: string;
+        sampleRate: number;
+        exporterEndpoint?: string | undefined;
+    };
+    auditLog: {
+        path: string;
+        enabled: boolean;
+        rotateAfterMb: number;
+    };
+}, {
+    upstreams: {
+        name: string;
+        namespace: string;
+        transport: {
+            type: "stdio";
+            command: string;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+        } | {
+            type: "streamable-http";
+            url: string;
+            headers?: Record<string, string> | undefined;
+        };
+        healthCheckIntervalMs?: number | undefined;
+    }[];
+    name?: string | undefined;
+    version?: string | undefined;
+    listen?: {
+        transport?: "stdio" | "streamable-http" | undefined;
+        port?: number | undefined;
+        host?: string | undefined;
+        principalHeader?: string | undefined;
+    } | undefined;
+    policy?: {
+        defaultEffect?: "allow" | "deny" | undefined;
+        rules?: {
+            effect: "allow" | "deny";
+            principals?: string[] | undefined;
+            tools?: string[] | undefined;
+            namespaces?: string[] | undefined;
+            rateLimit?: {
+                maxPerMinute?: number | undefined;
+                maxPerHour?: number | undefined;
+            } | undefined;
+        }[] | undefined;
+    } | undefined;
+    attestation?: {
+        enabled?: boolean | undefined;
+        algorithm?: "ed25519" | "hmac-sha256" | undefined;
+        keyPath?: string | undefined;
+        secret?: string | undefined;
+        includeParams?: boolean | undefined;
+        includeResult?: boolean | undefined;
+    } | undefined;
+    telemetry?: {
+        enabled?: boolean | undefined;
+        exporterEndpoint?: string | undefined;
+        serviceName?: string | undefined;
+        sampleRate?: number | undefined;
+    } | undefined;
+    auditLog?: {
+        path?: string | undefined;
+        enabled?: boolean | undefined;
+        rotateAfterMb?: number | undefined;
+    } | undefined;
+}>;
+export type UpstreamConfig = z.infer<typeof UpstreamConfigSchema>;
+export type PolicyRule = z.infer<typeof PolicyRuleSchema>;
+export type AttestationConfig = z.infer<typeof AttestationConfigSchema>;
+export type TelemetryConfig = z.infer<typeof TelemetryConfigSchema>;
+export type GatewayConfig = z.infer<typeof GatewayConfigSchema>;
+export interface UpstreamStatus {
+    name: string;
+    namespace: string;
+    status: "healthy" | "degraded" | "unavailable" | "cooldown";
+    toolCount: number;
+    lastSuccessfulContact: string | null;
+    degradedReason?: string;
+    unavailableReason?: string;
+}
+export interface AuditRecord {
+    id: string;
+    timestamp: string;
+    method: string;
+    toolName?: string;
+    namespace?: string;
+    upstream?: string;
+    principal?: string;
+    durationMs: number;
+    success: boolean;
+    errorCode?: number;
+    previousHash?: string;
+    attestation?: string;
+}
+export interface ToolEntry {
+    name: string;
+    originalName: string;
+    namespace: string;
+    upstream: string;
+    description?: string;
+    inputSchema?: unknown;
+    annotations?: Record<string, unknown>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiB/B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAW3B,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;EAOlC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;EAKhC,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqB9B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,aAAa,GAAG,UAAU,CAAC;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC"}

package/dist/types.js

@@ -0,0 +1,68 @@
+import { z } from "zod";
+export const UpstreamConfigSchema = z.object({
+    name: z.string(),
+    namespace: z.string().regex(/^[a-z][a-z0-9_-]{0,63}$/),
+    transport: z.discriminatedUnion("type", [
+        z.object({
+            type: z.literal("stdio"),
+            command: z.string(),
+            args: z.array(z.string()).optional(),
+            env: z.record(z.string()).optional(),
+        }),
+        z.object({
+            type: z.literal("streamable-http"),
+            url: z.string().url(),
+            headers: z.record(z.string()).optional(),
+        }),
+    ]),
+    healthCheckIntervalMs: z.number().positive().optional(),
+});
+export const PolicyRuleSchema = z.object({
+    effect: z.enum(["allow", "deny"]),
+    principals: z.array(z.string()).optional(),
+    tools: z.array(z.string()).optional(),
+    namespaces: z.array(z.string()).optional(),
+    rateLimit: z
+        .object({
+        maxPerMinute: z.number().positive().optional(),
+        maxPerHour: z.number().positive().optional(),
+    })
+        .optional(),
+});
+export const AttestationConfigSchema = z.object({
+    enabled: z.boolean().default(true),
+    algorithm: z.enum(["ed25519", "hmac-sha256"]).default("ed25519"),
+    keyPath: z.string().optional(),
+    secret: z.string().optional(),
+    includeParams: z.boolean().optional().default(false),
+    includeResult: z.boolean().optional().default(false),
+});
+export const TelemetryConfigSchema = z.object({
+    enabled: z.boolean().default(true),
+    exporterEndpoint: z.string().url().optional(),
+    serviceName: z.string().default("mcp-audit-gateway"),
+    sampleRate: z.number().min(0).max(1).default(1.0),
+});
+export const GatewayConfigSchema = z.object({
+    name: z.string().default("mcp-audit-gateway"),
+    version: z.string().default("0.1.0"),
+    listen: z.object({
+        transport: z.enum(["stdio", "streamable-http"]).default("streamable-http"),
+        port: z.number().positive().default(3100),
+        host: z.string().default("127.0.0.1"),
+        principalHeader: z.string().optional(),
+    }).default({}),
+    upstreams: z.array(UpstreamConfigSchema).min(1),
+    policy: z.object({
+        defaultEffect: z.enum(["allow", "deny"]).default("allow"),
+        rules: z.array(PolicyRuleSchema).default([]),
+    }).default({}),
+    attestation: AttestationConfigSchema.default({}),
+    telemetry: TelemetryConfigSchema.default({}),
+    auditLog: z.object({
+        enabled: z.boolean().default(true),
+        path: z.string().default("./audit.jsonl"),
+        rotateAfterMb: z.number().positive().default(100),
+    }).default({}),
+});
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC;IACtD,SAAS,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;QACtC,CAAC,CAAC,MAAM,CAAC;YACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;YACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACpC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SACrC,CAAC;QACF,CAAC,CAAC,MAAM,CAAC;YACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;YAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;YACrB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SACzC,CAAC;KACH,CAAC;IACF,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAC7C,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAChE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpD,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACrD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC1E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACvC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACd,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACzD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KAC7C,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACd,WAAW,EAAE,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,SAAS,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;QACzC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;KAClD,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACf,CAAC,CAAC"}

package/dist/wrap/proxy.d.ts

@@ -0,0 +1,2 @@
+export declare function runWrapProxy(command: string, args: string[]): Promise<void>;
+//# sourceMappingURL=proxy.d.ts.map

package/dist/wrap/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/wrap/proxy.ts"],"names":[],"mappings":"AA6BA,wBAAsB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuFjF"}