@oobe-protocol-labs/sap-mcp-server 0.1.0

package/dist/payments/usage-ledger.js

@@ -0,0 +1,126 @@
+/**
+ * @name PaymentUsageLedger
+ * @description Append-only JSONL audit ledger for remote MCP payment decisions and settlements.
+ */
+import { createHash } from 'crypto';
+import { mkdir, appendFile } from 'fs/promises';
+import { dirname, join } from 'path';
+import { getDataDir } from '../config/env.js';
+/**
+ * @name UsageLedger
+ * @description Writes MCP payment events to an append-only local JSONL ledger.
+ */
+export class UsageLedger {
+    ledgerPath;
+    constructor(ledgerPath = join(getDataDir(), 'payments', 'usage-ledger.jsonl')) {
+        this.ledgerPath = ledgerPath;
+    }
+    /**
+     * @name append
+     * @description Appends one payment audit event to the JSONL ledger.
+     */
+    async append(event) {
+        await mkdir(dirname(this.ledgerPath), { recursive: true });
+        await appendFile(this.ledgerPath, `${JSON.stringify(event)}\n`, 'utf-8');
+    }
+    /**
+     * @name recordDecision
+     * @description Records that a request requires payment.
+     */
+    async recordDecision(metadata, decision) {
+        if (!decision.required) {
+            return;
+        }
+        await this.append({
+            event: 'payment_required',
+            timestamp: new Date().toISOString(),
+            requestHash: metadata.requestHash,
+            method: metadata.method,
+            path: metadata.path,
+            toolNames: decision.toolNames,
+            priceUsd: decision.priceUsd,
+            paymentHeaderPresent: metadata.paymentHeaderPresent,
+            remoteAddress: metadata.remoteAddress,
+            userAgent: metadata.userAgent,
+        });
+    }
+    /**
+     * @name recordVerified
+     * @description Records that an x402 payment was accepted before handler execution.
+     */
+    async recordVerified(metadata, decision) {
+        if (!decision.required) {
+            return;
+        }
+        await this.append({
+            event: 'payment_verified',
+            timestamp: new Date().toISOString(),
+            requestHash: metadata.requestHash,
+            method: metadata.method,
+            path: metadata.path,
+            toolNames: decision.toolNames,
+            priceUsd: decision.priceUsd,
+            paymentHeaderPresent: metadata.paymentHeaderPresent,
+            remoteAddress: metadata.remoteAddress,
+            userAgent: metadata.userAgent,
+        });
+    }
+    /**
+     * @name recordCanceled
+     * @description Records that a verified payment was canceled because MCP execution did not complete successfully.
+     */
+    async recordCanceled(metadata, decision, reason, errorMessage) {
+        if (!decision.required) {
+            return;
+        }
+        await this.append({
+            event: 'payment_canceled',
+            timestamp: new Date().toISOString(),
+            requestHash: metadata.requestHash,
+            method: metadata.method,
+            path: metadata.path,
+            toolNames: decision.toolNames,
+            priceUsd: decision.priceUsd,
+            paymentHeaderPresent: metadata.paymentHeaderPresent,
+            remoteAddress: metadata.remoteAddress,
+            userAgent: metadata.userAgent,
+            errorReason: reason,
+            errorMessage,
+        });
+    }
+    /**
+     * @name recordSettlement
+     * @description Records successful or failed x402 settlement without storing payment payload bytes.
+     */
+    async recordSettlement(metadata, decision, settlement) {
+        if (!decision.required) {
+            return;
+        }
+        await this.append({
+            event: settlement.success ? 'payment_settled' : 'payment_failed',
+            timestamp: new Date().toISOString(),
+            requestHash: metadata.requestHash,
+            method: metadata.method,
+            path: metadata.path,
+            toolNames: decision.toolNames,
+            priceUsd: decision.priceUsd,
+            paymentHeaderPresent: metadata.paymentHeaderPresent,
+            remoteAddress: metadata.remoteAddress,
+            userAgent: metadata.userAgent,
+            transaction: settlement.transaction,
+            network: settlement.network,
+            amount: settlement.amount,
+            payer: settlement.payer,
+            errorReason: settlement.errorReason,
+            errorMessage: settlement.errorMessage,
+        });
+    }
+}
+/**
+ * @name hashRequestBody
+ * @description Computes a deterministic SHA-256 hash for request correlation without persisting raw arguments.
+ */
+export function hashRequestBody(body) {
+    return createHash('sha256').update(body).digest('hex');
+}
+//# sourceMappingURL=usage-ledger.js.map

package/dist/payments/usage-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-ledger.js","sourceRoot":"","sources":["../../src/payments/usage-ledger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAErC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAkD9C;;;GAGG;AACH,MAAM,OAAO,WAAW;IACL,UAAU,CAAS;IAEpC,YAAmB,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,oBAAoB,CAAC;QAClF,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,MAAM,CAAC,KAAyB;QAC3C,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,cAAc,CAAC,QAAgC,EAAE,QAAyB;QACrF,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,KAAK,EAAE,kBAAkB;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;YACnD,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,cAAc,CAAC,QAAgC,EAAE,QAAyB;QACrF,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,KAAK,EAAE,kBAAkB;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;YACnD,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,cAAc,CACzB,QAAgC,EAChC,QAAyB,EACzB,MAAc,EACd,YAAqB;QAErB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,KAAK,EAAE,kBAAkB;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;YACnD,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,WAAW,EAAE,MAAM;YACnB,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,gBAAgB,CAC3B,QAAgC,EAChC,QAAyB,EACzB,UAA0B;QAE1B,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,gBAAgB;YAChE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;YACnD,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,YAAY,EAAE,UAAU,CAAC,YAAY;SACtC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC"}

package/dist/policy/bento-policy-engine.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Bento Policy Engine
+ *
+ * Cloud-based policy engine using Bento Guard SDK
+ * Provides AI intent scoring, escalation, and strike system
+ *
+ * Optional integration - only used if API key is provided
+ *
+ * Note: @bentoguard/sdk is an optional dependency.
+ * Install with: npm install @bentoguard/sdk
+ */
+import type { PolicyDecision, PolicyContext } from './local-policy-engine.js';
+type BentoModuleLoader = () => Promise<unknown>;
+/**
+ * @name setBentoModuleLoaderForTests
+ * @description Overrides the Bento SDK loader for deterministic integration tests.
+ * @param loader - Test-controlled module loader.
+ * @returns Cleanup function that restores the previous loader.
+ */
+export declare function setBentoModuleLoaderForTests(loader: BentoModuleLoader): () => void;
+export interface BentoConfig {
+    /** Bento API key from dashboard */
+    apiKey: string;
+    /** Agent ID registered on Bento dashboard */
+    agentId: string;
+    /** Bento API endpoint (optional, defaults to production) */
+    endpoint?: string;
+}
+export declare class BentoPolicyEngine {
+    private client;
+    private config;
+    private protectFn;
+    private initialized;
+    constructor(config: BentoConfig);
+    /**
+     * Initialize Bento SDK lazily (ESM compatible)
+     */
+    private initialize;
+    /**
+     * Validate action using Bento's AI-powered policy engine
+     */
+    validateAction(context: PolicyContext): Promise<PolicyDecision>;
+    /**
+     * Map Bento verdict to our PolicyDecision format
+     */
+    private mapVerdictToDecision;
+    /**
+     * Get agent status from Bento
+     */
+    getAgentStatus(): Promise<{
+        active: boolean;
+        strikeCount: number;
+        reputation: number;
+    }>;
+    /**
+     * Check if Bento is available (ping test)
+     */
+    isAvailable(): Promise<boolean>;
+}
+/**
+ * Error thrown when Bento service is unavailable
+ */
+export declare class BentoUnavailableError extends Error {
+    constructor(message: string);
+}
+/**
+ * Create Bento config from environment variables
+ */
+export declare function createBentoConfigFromEnv(): BentoConfig | null;
+export {};
+//# sourceMappingURL=bento-policy-engine.d.ts.map

package/dist/policy/bento-policy-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bento-policy-engine.d.ts","sourceRoot":"","sources":["../../src/policy/bento-policy-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAqC9E,KAAK,iBAAiB,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;AAiBhD;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,IAAI,CAMlF;AAED,MAAM,WAAW,WAAW;IAC1B,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAoC;IAClD,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,SAAS,CAAqC;IACtD,OAAO,CAAC,WAAW,CAAkB;gBAEzB,MAAM,EAAE,WAAW;IAK/B;;OAEG;YACW,UAAU;IAuBxB;;OAEG;IACG,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAiCrE;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA4D5B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC;QAC9B,MAAM,EAAE,OAAO,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IAuBF;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;CAQtC;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,wBAAgB,wBAAwB,IAAI,WAAW,GAAG,IAAI,CAc7D"}

package/dist/policy/bento-policy-engine.js

@@ -0,0 +1,218 @@
+/**
+ * Bento Policy Engine
+ *
+ * Cloud-based policy engine using Bento Guard SDK
+ * Provides AI intent scoring, escalation, and strike system
+ *
+ * Optional integration - only used if API key is provided
+ *
+ * Note: @bentoguard/sdk is an optional dependency.
+ * Install with: npm install @bentoguard/sdk
+ */
+let bentoModuleLoader = () => import('@bentoguard/sdk');
+/**
+ * @name isBentoModule
+ * @description Validates the optional Bento SDK module shape after dynamic import.
+ * @param value - Imported module namespace.
+ * @returns True when the module exposes BentoClient and protect.
+ */
+function isBentoModule(value) {
+    return Boolean(value)
+        && typeof value === 'object'
+        && typeof value.BentoClient === 'function'
+        && typeof value.protect === 'function';
+}
+/**
+ * @name setBentoModuleLoaderForTests
+ * @description Overrides the Bento SDK loader for deterministic integration tests.
+ * @param loader - Test-controlled module loader.
+ * @returns Cleanup function that restores the previous loader.
+ */
+export function setBentoModuleLoaderForTests(loader) {
+    const previousLoader = bentoModuleLoader;
+    bentoModuleLoader = loader;
+    return () => {
+        bentoModuleLoader = previousLoader;
+    };
+}
+export class BentoPolicyEngine {
+    client = null;
+    config;
+    protectFn = null;
+    initialized = false;
+    constructor(config) {
+        this.config = config;
+        // Don't await in constructor - use lazy initialization
+    }
+    /**
+     * Initialize Bento SDK lazily (ESM compatible)
+     */
+    async initialize() {
+        if (this.initialized)
+            return;
+        try {
+            // Use dynamic import() for ESM compatibility while keeping the SDK optional.
+            const bentoModule = await bentoModuleLoader();
+            if (!isBentoModule(bentoModule)) {
+                throw new Error('Bento SDK does not expose BentoClient and protect');
+            }
+            this.client = new bentoModule.BentoClient({
+                apiKey: this.config.apiKey,
+                agentId: this.config.agentId,
+            });
+            this.protectFn = bentoModule.protect;
+            this.initialized = true;
+        }
+        catch (_error) {
+            throw new Error('Bento Guard SDK not installed. Install with: npm install @bentoguard/sdk');
+        }
+    }
+    /**
+     * Validate action using Bento's AI-powered policy engine
+     */
+    async validateAction(context) {
+        try {
+            // Lazy initialization
+            await this.initialize();
+            if (!this.client || !this.protectFn) {
+                throw new Error('Bento SDK not initialized');
+            }
+            const result = await this.protectFn(this.client, {
+                action: `sap:${context.toolName}`,
+                context: {
+                    args: context.args,
+                    amount: context.amount,
+                    programId: context.programId,
+                    destination: context.destination,
+                    user: context.user,
+                },
+                metadata: {
+                    timestamp: context.timestamp ?? Date.now(),
+                    agentId: this.config.agentId,
+                },
+            });
+            return this.mapVerdictToDecision(result);
+        }
+        catch (error) {
+            // Bento service unavailable - return decision to fallback
+            throw new BentoUnavailableError(`Bento Guard unavailable: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Map Bento verdict to our PolicyDecision format
+     */
+    mapVerdictToDecision(result) {
+        const verdict = result.verdict; // 'ALLOW' | 'BLOCKED' | 'ESCALATED'
+        switch (verdict) {
+            case 'ALLOW':
+                return {
+                    allowed: true,
+                    reason: result.reasoning || 'Bento policy check passed',
+                    rule: 'bento-allow',
+                    metadata: {
+                        provider: 'bento',
+                        verdict,
+                        strikeCount: result.strikeCount,
+                        intentScore: result.intentScore,
+                    },
+                };
+            case 'BLOCKED':
+                return {
+                    allowed: false,
+                    blocked: true,
+                    reason: result.reasoning || 'Blocked by Bento policy',
+                    rule: 'bento-block',
+                    metadata: {
+                        provider: 'bento',
+                        verdict,
+                        strikeCount: result.strikeCount,
+                        intentScore: result.intentScore,
+                    },
+                };
+            case 'ESCALATED':
+                return {
+                    allowed: false,
+                    escalated: true,
+                    reason: result.reasoning || 'Requires human approval',
+                    rule: 'bento-escalate',
+                    metadata: {
+                        provider: 'bento',
+                        verdict,
+                        strikeCount: result.strikeCount,
+                        intentScore: result.intentScore,
+                        escalationType: 'human-review',
+                    },
+                };
+            default:
+                return {
+                    allowed: false,
+                    blocked: true,
+                    reason: `Unknown Bento verdict: ${verdict}`,
+                    rule: 'bento-unknown-verdict',
+                    metadata: {
+                        provider: 'bento',
+                        verdict,
+                    },
+                };
+        }
+    }
+    /**
+     * Get agent status from Bento
+     */
+    async getAgentStatus() {
+        try {
+            await this.initialize();
+            if (!this.client) {
+                throw new Error('Bento SDK not initialized');
+            }
+            if (typeof this.client.getAgentStatus === 'function') {
+                return this.client.getAgentStatus();
+            }
+            if (typeof this.client.status === 'function') {
+                return this.client.status();
+            }
+            throw new Error('Installed Bento SDK does not expose an agent status API');
+        }
+        catch (error) {
+            throw new BentoUnavailableError(`Cannot fetch agent status: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Check if Bento is available (ping test)
+     */
+    async isAvailable() {
+        try {
+            await this.getAgentStatus();
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+/**
+ * Error thrown when Bento service is unavailable
+ */
+export class BentoUnavailableError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'BentoUnavailableError';
+    }
+}
+/**
+ * Create Bento config from environment variables
+ */
+export function createBentoConfigFromEnv() {
+    const apiKey = process.env.SAP_MCP_BENTO_API_KEY;
+    const agentId = process.env.SAP_MCP_BENTO_AGENT_ID || 'sap-mcp-server';
+    const endpoint = process.env.SAP_MCP_BENTO_ENDPOINT;
+    if (!apiKey) {
+        return null; // Bento not configured
+    }
+    return {
+        apiKey,
+        agentId,
+        endpoint,
+    };
+}
+//# sourceMappingURL=bento-policy-engine.js.map

package/dist/policy/bento-policy-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bento-policy-engine.js","sourceRoot":"","sources":["../../src/policy/bento-policy-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAyCH,IAAI,iBAAiB,GAAsB,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAE3E;;;;;GAKG;AACH,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,CAAC,KAAK,CAAC;WAChB,OAAO,KAAK,KAAK,QAAQ;WACzB,OAAQ,KAA8B,CAAC,WAAW,KAAK,UAAU;WACjE,OAAQ,KAA8B,CAAC,OAAO,KAAK,UAAU,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAyB;IACpE,MAAM,cAAc,GAAG,iBAAiB,CAAC;IACzC,iBAAiB,GAAG,MAAM,CAAC;IAC3B,OAAO,GAAG,EAAE;QACV,iBAAiB,GAAG,cAAc,CAAC;IACrC,CAAC,CAAC;AACJ,CAAC;AAWD,MAAM,OAAO,iBAAiB;IACpB,MAAM,GAA+B,IAAI,CAAC;IAC1C,MAAM,CAAc;IACpB,SAAS,GAAgC,IAAI,CAAC;IAC9C,WAAW,GAAY,KAAK,CAAC;IAErC,YAAY,MAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,uDAAuD;IACzD,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU;QACtB,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE7B,IAAI,CAAC;YACH,6EAA6E;YAC7E,MAAM,WAAW,GAAY,MAAM,iBAAiB,EAAE,CAAC;YACvD,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvE,CAAC;YAED,IAAI,CAAC,MAAM,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC;gBACxC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;gBAC1B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;aAC7B,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC;YACrC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,OAAsB;QACzC,IAAI,CAAC;YACH,sBAAsB;YACtB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YAExB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC/C,MAAM,EAAE,OAAO,OAAO,CAAC,QAAQ,EAAE;gBACjC,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,IAAI,EAAE,OAAO,CAAC,IAAI;iBACnB;gBACD,QAAQ,EAAE;oBACR,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;oBAC1C,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;iBAC7B;aACF,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0DAA0D;YAC1D,MAAM,IAAI,qBAAqB,CAC7B,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,MAA2B;QACtD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,oCAAoC;QAEpE,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,OAAO;gBACV,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,MAAM,CAAC,SAAS,IAAI,2BAA2B;oBACvD,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE;wBACR,QAAQ,EAAE,OAAO;wBACjB,OAAO;wBACP,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;qBAChC;iBACF,CAAC;YAEJ,KAAK,SAAS;gBACZ,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,MAAM,CAAC,SAAS,IAAI,yBAAyB;oBACrD,IAAI,EAAE,aAAa;oBACnB,QAAQ,EAAE;wBACR,QAAQ,EAAE,OAAO;wBACjB,OAAO;wBACP,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;qBAChC;iBACF,CAAC;YAEJ,KAAK,WAAW;gBACd,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,SAAS,EAAE,IAAI;oBACf,MAAM,EAAE,MAAM,CAAC,SAAS,IAAI,yBAAyB;oBACrD,IAAI,EAAE,gBAAgB;oBACtB,QAAQ,EAAE;wBACR,QAAQ,EAAE,OAAO;wBACjB,OAAO;wBACP,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,cAAc,EAAE,cAAc;qBAC/B;iBACF,CAAC;YAEJ;gBACE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,0BAA0B,OAAO,EAAE;oBAC3C,IAAI,EAAE,uBAAuB;oBAC7B,QAAQ,EAAE;wBACR,QAAQ,EAAE,OAAO;wBACjB,OAAO;qBACR;iBACF,CAAC;QACN,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc;QAKlB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YAED,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;gBACrD,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACtC,CAAC;YAED,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,qBAAqB,CAC7B,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,gBAAgB,CAAC;IACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAEpD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,CAAC,uBAAuB;IACtC,CAAC;IAED,OAAO;QACL,MAAM;QACN,OAAO;QACP,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/policy/default-policies.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Default policies for SAP MCP Server
+ */
+import type { Policy } from './policy-types.js';
+/**
+ * Shared default policies definition used by the SAP MCP runtime.
+ */
+export declare const defaultPolicies: Policy[];
+//# sourceMappingURL=default-policies.d.ts.map

package/dist/policy/default-policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-policies.d.ts","sourceRoot":"","sources":["../../src/policy/default-policies.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,EA6DnC,CAAC"}

package/dist/policy/default-policies.js

@@ -0,0 +1,69 @@
+/**
+ * Default policies for SAP MCP Server
+ */
+/**
+ * Shared default policies definition used by the SAP MCP runtime.
+ */
+export const defaultPolicies = [
+    {
+        id: 'readonly-default',
+        name: 'Read-Only Default',
+        description: 'Default policy for readonly mode - allows all read operations',
+        rules: [
+            {
+                id: 'allow-read',
+                condition: 'permission.endsWith(":read")',
+                action: 'allow',
+            },
+            {
+                id: 'deny-write',
+                condition: 'permission.endsWith(":write")',
+                action: 'deny',
+            },
+            {
+                id: 'deny-transaction',
+                condition: 'permission === "transaction:submit"',
+                action: 'deny',
+            },
+        ],
+        enabled: true,
+    },
+    {
+        id: 'dev-default',
+        name: 'Development Default',
+        description: 'Default policy for local-dev-keypair mode - allows all operations with limits',
+        rules: [
+            {
+                id: 'allow-all',
+                condition: 'true',
+                action: 'allow',
+                maxAmountSol: 1.0,
+            },
+            {
+                id: 'require-approval-large',
+                condition: 'amountSol > 1.0',
+                action: 'require_approval',
+            },
+        ],
+        enabled: true,
+    },
+    {
+        id: 'hosted-default',
+        name: 'Hosted API Default',
+        description: 'Default policy for hosted-api mode - restricted operations',
+        rules: [
+            {
+                id: 'allow-discovery',
+                condition: 'toolName.startsWith("sap_get_") || toolName.startsWith("sap_list_")',
+                action: 'allow',
+            },
+            {
+                id: 'deny-write',
+                condition: 'true',
+                action: 'deny',
+            },
+        ],
+        enabled: true,
+    },
+];
+//# sourceMappingURL=default-policies.js.map

package/dist/policy/default-policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-policies.js","sourceRoot":"","sources":["../../src/policy/default-policies.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAa;IACvC;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,+DAA+D;QAC5E,KAAK,EAAE;YACL;gBACE,EAAE,EAAE,YAAY;gBAChB,SAAS,EAAE,8BAA8B;gBACzC,MAAM,EAAE,OAAO;aAChB;YACD;gBACE,EAAE,EAAE,YAAY;gBAChB,SAAS,EAAE,+BAA+B;gBAC1C,MAAM,EAAE,MAAM;aACf;YACD;gBACE,EAAE,EAAE,kBAAkB;gBACtB,SAAS,EAAE,qCAAqC;gBAChD,MAAM,EAAE,MAAM;aACf;SACF;QACD,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,+EAA+E;QAC5F,KAAK,EAAE;YACL;gBACE,EAAE,EAAE,WAAW;gBACf,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,OAAO;gBACf,YAAY,EAAE,GAAG;aAClB;YACD;gBACE,EAAE,EAAE,wBAAwB;gBAC5B,SAAS,EAAE,iBAAiB;gBAC5B,MAAM,EAAE,kBAAkB;aAC3B;SACF;QACD,OAAO,EAAE,IAAI;KACd;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,4DAA4D;QACzE,KAAK,EAAE;YACL;gBACE,EAAE,EAAE,iBAAiB;gBACrB,SAAS,EAAE,qEAAqE;gBAChF,MAAM,EAAE,OAAO;aAChB;YACD;gBACE,EAAE,EAAE,YAAY;gBAChB,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,MAAM;aACf;SACF;QACD,OAAO,EAAE,IAAI;KACd;CACF,CAAC"}

package/dist/policy/hybrid-policy-engine.d.ts

@@ -0,0 +1,95 @@
+/**
+ * @name HybridPolicyEngine
+ * @description Combines deterministic local guardrails with optional Bento Guard intent scoring.
+ *
+ * Flow:
+ * 1. Local deterministic guardrails always run in hybrid mode.
+ * 2. Bento runs only after local checks pass.
+ * 3. Bento outages follow the configured fail-open or fail-closed policy.
+ * 4. Local-only mode never depends on external services.
+ */
+import { PolicyConfig, PolicyDecision, PolicyContext } from './local-policy-engine.js';
+import { BentoConfig } from './bento-policy-engine.js';
+/**
+ * @name HybridPolicyConfig
+ * @description Runtime configuration for local, Bento-only, and hybrid policy enforcement.
+ */
+export interface HybridPolicyConfig {
+    /** Local policy configuration. */
+    local: PolicyConfig;
+    /** Optional Bento Guard configuration. */
+    bento?: BentoConfig | null;
+    /** Policy engine mode. */
+    mode: 'local-only' | 'bento-only' | 'hybrid';
+    /** Whether policy decisions should be written to the structured logger. */
+    logging?: boolean;
+    /** Whether Bento outages should allow locally approved requests. */
+    failOpen?: boolean;
+}
+/**
+ * @name HybridPolicyEngine
+ * @description Runtime service that validates tool calls through local and optional Bento policies.
+ */
+export declare class HybridPolicyEngine {
+    private localEngine;
+    private bentoEngine;
+    private config;
+    private bentoAvailable;
+    constructor(config: HybridPolicyConfig);
+    /**
+     * @name checkBentoAvailability
+     * @description Checks Bento Guard availability in the background without blocking server startup.
+     */
+    private checkBentoAvailability;
+    /**
+     * @name validateToolCall
+     * @description Validates a tool call using the configured policy mode.
+     */
+    validateToolCall(context: PolicyContext): Promise<PolicyDecision>;
+    /**
+     * @name validateWithBento
+     * @description Validates a tool call exclusively through Bento Guard.
+     */
+    private validateWithBento;
+    /**
+     * @name validateWithLocal
+     * @description Validates a tool call exclusively through local deterministic policies.
+     */
+    private validateWithLocal;
+    /**
+     * @name validateHybrid
+     * @description Runs local guardrails first and then Bento Guard when configured.
+     */
+    private validateHybrid;
+    /**
+     * @name getEngineUsed
+     * @description Returns the policy engine that is expected to have produced the most recent decision.
+     */
+    private getEngineUsed;
+    /**
+     * @name logDecision
+     * @description Writes a redacted policy decision to the structured logger.
+     */
+    private logDecision;
+    /**
+     * @name getStatus
+     * @description Returns current hybrid policy health without exposing secrets.
+     */
+    getStatus(): {
+        mode: string;
+        bentoConfigured: boolean;
+        bentoAvailable: boolean;
+        localEngineActive: boolean;
+    };
+    /**
+     * @name refreshBentoStatus
+     * @description Forces a Bento Guard availability refresh.
+     */
+    refreshBentoStatus(): Promise<boolean>;
+}
+/**
+ * @name createHybridPolicyConfigFromEnv
+ * @description Creates hybrid policy configuration from SAP MCP environment variables.
+ */
+export declare function createHybridPolicyConfigFromEnv(): Promise<HybridPolicyConfig>;
+//# sourceMappingURL=hybrid-policy-engine.d.ts.map

package/dist/policy/hybrid-policy-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hybrid-policy-engine.d.ts","sourceRoot":"","sources":["../../src/policy/hybrid-policy-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAqB,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC1G,OAAO,EAAqB,WAAW,EAAyB,MAAM,0BAA0B,CAAC;AAGjG;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,kCAAkC;IAClC,KAAK,EAAE,YAAY,CAAC;IACpB,0CAA0C;IAC1C,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC3B,0BAA0B;IAC1B,IAAI,EAAE,YAAY,GAAG,YAAY,GAAG,QAAQ,CAAC;IAC7C,2EAA2E;IAC3E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oEAAoE;IACpE,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;GAGG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,WAAW,CAAkC;IACrD,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,cAAc,CAAkB;gBAErB,MAAM,EAAE,kBAAkB;IAoB7C;;;OAGG;YACW,sBAAsB;IAmBpC;;;OAGG;IACU,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAmE9E;;;OAGG;YACW,iBAAiB;IAQ/B;;;OAGG;YACW,iBAAiB;IAI/B;;;OAGG;YACW,cAAc;IAiE5B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAcrB;;;OAGG;IACH,OAAO,CAAC,WAAW;IAwBnB;;;OAGG;IACI,SAAS,IAAI;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,eAAe,EAAE,OAAO,CAAC;QACzB,cAAc,EAAE,OAAO,CAAC;QACxB,iBAAiB,EAAE,OAAO,CAAC;KAC5B;IASD;;;OAGG;IACU,kBAAkB,IAAI,OAAO,CAAC,OAAO,CAAC;CAIpD;AAED;;;GAGG;AACH,wBAAsB,+BAA+B,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAwBnF"}