@oobe-protocol-labs/sap-mcp-server 0.1.0

package/dist/policy/hybrid-policy-engine.js

@@ -0,0 +1,297 @@
+/**
+ * @name HybridPolicyEngine
+ * @description Combines deterministic local guardrails with optional Bento Guard intent scoring.
+ *
+ * Flow:
+ * 1. Local deterministic guardrails always run in hybrid mode.
+ * 2. Bento runs only after local checks pass.
+ * 3. Bento outages follow the configured fail-open or fail-closed policy.
+ * 4. Local-only mode never depends on external services.
+ */
+import { LocalPolicyEngine } from './local-policy-engine.js';
+import { BentoPolicyEngine, BentoUnavailableError } from './bento-policy-engine.js';
+import { logger } from '../core/logger.js';
+/**
+ * @name HybridPolicyEngine
+ * @description Runtime service that validates tool calls through local and optional Bento policies.
+ */
+export class HybridPolicyEngine {
+    localEngine;
+    bentoEngine = null;
+    config;
+    bentoAvailable = false;
+    constructor(config) {
+        this.config = {
+            ...config,
+            logging: config.logging ?? true,
+            failOpen: config.failOpen ?? false,
+        };
+        this.localEngine = new LocalPolicyEngine(config.local);
+        if (config.bento && config.mode !== 'local-only') {
+            try {
+                this.bentoEngine = new BentoPolicyEngine(config.bento);
+                void this.checkBentoAvailability();
+            }
+            catch (error) {
+                logger.warn('Hybrid policy failed to initialize Bento', { error });
+                this.bentoEngine = null;
+            }
+        }
+    }
+    /**
+     * @name checkBentoAvailability
+     * @description Checks Bento Guard availability in the background without blocking server startup.
+     */
+    async checkBentoAvailability() {
+        if (!this.bentoEngine) {
+            this.bentoAvailable = false;
+            return;
+        }
+        try {
+            this.bentoAvailable = await this.bentoEngine.isAvailable();
+            if (this.bentoAvailable && this.config.logging) {
+                logger.info('Hybrid policy Bento Guard available');
+            }
+        }
+        catch (error) {
+            this.bentoAvailable = false;
+            if (this.config.logging) {
+                logger.warn('Hybrid policy Bento Guard unavailable', { error });
+            }
+        }
+    }
+    /**
+     * @name validateToolCall
+     * @description Validates a tool call using the configured policy mode.
+     */
+    async validateToolCall(context) {
+        const startTime = Date.now();
+        let decision;
+        try {
+            // Determine which engine to use
+            switch (this.config.mode) {
+                case 'bento-only':
+                    decision = await this.validateWithBento(context);
+                    break;
+                case 'local-only':
+                    decision = await this.validateWithLocal(context);
+                    break;
+                case 'hybrid':
+                default:
+                    decision = await this.validateHybrid(context);
+                    break;
+            }
+            // Add timing metadata
+            decision.metadata = {
+                ...decision.metadata,
+                validationTimeMs: Date.now() - startTime,
+                engine: this.getEngineUsed(),
+            };
+            // Log decision
+            if (this.config.logging) {
+                this.logDecision(context, decision);
+            }
+            return decision;
+        }
+        catch (error) {
+            // Unexpected error - handle based on failOpen setting
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            if (this.config.logging) {
+                logger.error('Hybrid policy unexpected error', { error: errorMessage });
+            }
+            if (this.config.failOpen) {
+                return {
+                    allowed: true,
+                    reason: `Policy engine error, failing open: ${errorMessage}`,
+                    rule: 'error-fail-open',
+                    metadata: {
+                        error: errorMessage,
+                        failOpen: true,
+                    },
+                };
+            }
+            else {
+                return {
+                    allowed: false,
+                    blocked: true,
+                    reason: `Policy engine error, failing closed: ${errorMessage}`,
+                    rule: 'error-fail-closed',
+                    metadata: {
+                        error: errorMessage,
+                        failOpen: false,
+                    },
+                };
+            }
+        }
+    }
+    /**
+     * @name validateWithBento
+     * @description Validates a tool call exclusively through Bento Guard.
+     */
+    async validateWithBento(context) {
+        if (!this.bentoEngine) {
+            throw new Error('Bento engine not initialized');
+        }
+        return this.bentoEngine.validateAction(context);
+    }
+    /**
+     * @name validateWithLocal
+     * @description Validates a tool call exclusively through local deterministic policies.
+     */
+    async validateWithLocal(context) {
+        return this.localEngine.validateToolCall(context);
+    }
+    /**
+     * @name validateHybrid
+     * @description Runs local guardrails first and then Bento Guard when configured.
+     */
+    async validateHybrid(context) {
+        const localDecision = await this.localEngine.validateToolCall(context);
+        if (!localDecision.allowed || localDecision.blocked || localDecision.escalated) {
+            return {
+                ...localDecision,
+                metadata: {
+                    ...localDecision.metadata,
+                    provider: 'local',
+                    hybridStage: 'local-guardrail',
+                },
+            };
+        }
+        // Try Bento after deterministic local guardrails pass.
+        if (this.bentoEngine) {
+            try {
+                const bentoDecision = await this.bentoEngine.validateAction(context);
+                this.bentoAvailable = true;
+                return {
+                    ...bentoDecision,
+                    metadata: {
+                        ...bentoDecision.metadata,
+                        localDecision: localDecision.reason,
+                        hybridStage: 'bento-after-local',
+                    },
+                };
+            }
+            catch (error) {
+                if (error instanceof BentoUnavailableError) {
+                    this.bentoAvailable = false;
+                    if (!this.config.failOpen) {
+                        return {
+                            allowed: false,
+                            blocked: true,
+                            reason: error.message,
+                            rule: 'bento-unavailable-fail-closed',
+                            metadata: {
+                                provider: 'bento',
+                                failOpen: false,
+                                localDecision: localDecision.reason,
+                            },
+                        };
+                    }
+                    if (this.config.logging) {
+                        logger.warn('Hybrid policy Bento unavailable; using local allow because failOpen=true');
+                    }
+                    return {
+                        ...localDecision,
+                        metadata: {
+                            ...localDecision.metadata,
+                            provider: 'local',
+                            bentoUnavailable: true,
+                            failOpen: true,
+                        },
+                    };
+                }
+                else {
+                    // Other error - rethrow
+                    throw error;
+                }
+            }
+        }
+        return localDecision;
+    }
+    /**
+     * @name getEngineUsed
+     * @description Returns the policy engine that is expected to have produced the most recent decision.
+     */
+    getEngineUsed() {
+        if (this.config.mode === 'local-only') {
+            return 'local';
+        }
+        if (this.config.mode === 'bento-only') {
+            return 'bento';
+        }
+        // Hybrid mode
+        if (this.bentoEngine && this.bentoAvailable) {
+            return 'bento';
+        }
+        return 'local';
+    }
+    /**
+     * @name logDecision
+     * @description Writes a redacted policy decision to the structured logger.
+     */
+    logDecision(context, decision) {
+        const message = decision.blocked
+            ? 'BLOCKED'
+            : decision.escalated
+                ? 'ESCALATED'
+                : decision.allowed
+                    ? 'ALLOWED'
+                    : 'UNKNOWN';
+        const payload = {
+            user: context.user,
+            reason: decision.reason,
+            rule: decision.rule,
+            engine: this.getEngineUsed(),
+        };
+        if (decision.blocked || decision.escalated) {
+            logger.warn(`Policy ${message} - ${context.toolName}`, payload);
+            return;
+        }
+        logger.info(`Policy ${message} - ${context.toolName}`, payload);
+    }
+    /**
+     * @name getStatus
+     * @description Returns current hybrid policy health without exposing secrets.
+     */
+    getStatus() {
+        return {
+            mode: this.config.mode,
+            bentoConfigured: this.bentoEngine !== null,
+            bentoAvailable: this.bentoAvailable,
+            localEngineActive: true,
+        };
+    }
+    /**
+     * @name refreshBentoStatus
+     * @description Forces a Bento Guard availability refresh.
+     */
+    async refreshBentoStatus() {
+        await this.checkBentoAvailability();
+        return this.bentoAvailable;
+    }
+}
+/**
+ * @name createHybridPolicyConfigFromEnv
+ * @description Creates hybrid policy configuration from SAP MCP environment variables.
+ */
+export async function createHybridPolicyConfigFromEnv() {
+    const { createPolicyConfigFromEnv } = await import('./local-policy-engine.js');
+    const { createBentoConfigFromEnv } = await import('./bento-policy-engine.js');
+    const localConfig = createPolicyConfigFromEnv();
+    const bentoConfig = createBentoConfigFromEnv();
+    // Determine mode from env
+    const modeEnv = process.env.SAP_MCP_POLICY_MODE || 'hybrid';
+    const mode = modeEnv;
+    const failOpenEnv = process.env.SAP_MCP_POLICY_FAIL_OPEN || 'true';
+    const failOpen = failOpenEnv.toLowerCase() === 'true';
+    const loggingEnv = process.env.SAP_MCP_POLICY_LOGGING || 'true';
+    const logging = loggingEnv.toLowerCase() === 'true';
+    return {
+        local: localConfig,
+        bento: bentoConfig,
+        mode,
+        failOpen,
+        logging,
+    };
+}
+//# sourceMappingURL=hybrid-policy-engine.js.map

package/dist/policy/hybrid-policy-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hybrid-policy-engine.js","sourceRoot":"","sources":["../../src/policy/hybrid-policy-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,iBAAiB,EAA+C,MAAM,0BAA0B,CAAC;AAC1G,OAAO,EAAE,iBAAiB,EAAe,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjG,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAmB3C;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IACrB,WAAW,CAAoB;IAC/B,WAAW,GAA6B,IAAI,CAAC;IAC7C,MAAM,CAAqB;IAC3B,cAAc,GAAY,KAAK,CAAC;IAExC,YAAmB,MAA0B;QAC3C,IAAI,CAAC,MAAM,GAAG;YACZ,GAAG,MAAM;YACT,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK;SACnC,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEvD,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACjD,IAAI,CAAC;gBACH,IAAI,CAAC,WAAW,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvD,KAAK,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,sBAAsB;QAClC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;YAC3D,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/C,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;YAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,gBAAgB,CAAC,OAAsB;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,QAAwB,CAAC;QAE7B,IAAI,CAAC;YACH,gCAAgC;YAChC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACzB,KAAK,YAAY;oBACf,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;oBACjD,MAAM;gBAER,KAAK,YAAY;oBACf,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;oBACjD,MAAM;gBAER,KAAK,QAAQ,CAAC;gBACd;oBACE,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;oBAC9C,MAAM;YACV,CAAC;YAED,sBAAsB;YACtB,QAAQ,CAAC,QAAQ,GAAG;gBAClB,GAAG,QAAQ,CAAC,QAAQ;gBACpB,gBAAgB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBACxC,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE;aAC7B,CAAC;YAEF,eAAe;YACf,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACtC,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sDAAsD;YACtD,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE5E,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YAC1E,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACzB,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,sCAAsC,YAAY,EAAE;oBAC5D,IAAI,EAAE,iBAAiB;oBACvB,QAAQ,EAAE;wBACR,KAAK,EAAE,YAAY;wBACnB,QAAQ,EAAE,IAAI;qBACf;iBACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,wCAAwC,YAAY,EAAE;oBAC9D,IAAI,EAAE,mBAAmB;oBACzB,QAAQ,EAAE;wBACR,KAAK,EAAE,YAAY;wBACnB,QAAQ,EAAE,KAAK;qBAChB;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,iBAAiB,CAAC,OAAsB;QACpD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,iBAAiB,CAAC,OAAsB;QACpD,OAAO,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,cAAc,CAAC,OAAsB;QACjD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACvE,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,aAAa,CAAC,OAAO,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;YAC/E,OAAO;gBACL,GAAG,aAAa;gBAChB,QAAQ,EAAE;oBACR,GAAG,aAAa,CAAC,QAAQ;oBACzB,QAAQ,EAAE,OAAO;oBACjB,WAAW,EAAE,iBAAiB;iBAC/B;aACF,CAAC;QACJ,CAAC;QAED,uDAAuD;QACvD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;gBACrE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC3B,OAAO;oBACL,GAAG,aAAa;oBAChB,QAAQ,EAAE;wBACR,GAAG,aAAa,CAAC,QAAQ;wBACzB,aAAa,EAAE,aAAa,CAAC,MAAM;wBACnC,WAAW,EAAE,mBAAmB;qBACjC;iBACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;oBAC3C,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;oBAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;wBAC1B,OAAO;4BACL,OAAO,EAAE,KAAK;4BACd,OAAO,EAAE,IAAI;4BACb,MAAM,EAAE,KAAK,CAAC,OAAO;4BACrB,IAAI,EAAE,+BAA+B;4BACrC,QAAQ,EAAE;gCACR,QAAQ,EAAE,OAAO;gCACjB,QAAQ,EAAE,KAAK;gCACf,aAAa,EAAE,aAAa,CAAC,MAAM;6BACpC;yBACF,CAAC;oBACJ,CAAC;oBAED,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACxB,MAAM,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;oBAC1F,CAAC;oBACD,OAAO;wBACL,GAAG,aAAa;wBAChB,QAAQ,EAAE;4BACR,GAAG,aAAa,CAAC,QAAQ;4BACzB,QAAQ,EAAE,OAAO;4BACjB,gBAAgB,EAAE,IAAI;4BACtB,QAAQ,EAAE,IAAI;yBACf;qBACF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,wBAAwB;oBACxB,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;;OAGG;IACK,aAAa;QACnB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACtC,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACtC,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,cAAc;QACd,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACK,WAAW,CAAC,OAAsB,EAAE,QAAwB;QAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO;YAC9B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,QAAQ,CAAC,SAAS;gBAClB,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,QAAQ,CAAC,OAAO;oBAChB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,SAAS,CAAC;QAElB,MAAM,OAAO,GAAG;YACd,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE;SAC7B,CAAC;QAEF,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,UAAU,OAAO,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,UAAU,OAAO,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;;OAGG;IACI,SAAS;QAMd,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,eAAe,EAAE,IAAI,CAAC,WAAW,KAAK,IAAI;YAC1C,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,iBAAiB,EAAE,IAAI;SACxB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,kBAAkB;QAC7B,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B;IACnD,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC/E,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAE9E,MAAM,WAAW,GAAG,yBAAyB,EAAE,CAAC;IAChD,MAAM,WAAW,GAAG,wBAAwB,EAAE,CAAC;IAE/C,0BAA0B;IAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,QAAQ,CAAC;IAC5D,MAAM,IAAI,GAAG,OAAiD,CAAC;IAE/D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,MAAM,CAAC;IACnE,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;IAEtD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,MAAM,CAAC;IAChE,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;IAEpD,OAAO;QACL,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE,WAAW;QAClB,IAAI;QACJ,QAAQ;QACR,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/policy/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Policy Engine Module
+ *
+ * Hybrid policy engine for SAP MCP Server
+ * Combines local deterministic policies with optional Bento Guard integration
+ */
+export { LocalPolicyEngine, type PolicyConfig, type PolicyDecision, type PolicyContext, createPolicyConfigFromEnv, } from './local-policy-engine.js';
+export { BentoPolicyEngine, type BentoConfig, BentoUnavailableError, createBentoConfigFromEnv, } from './bento-policy-engine.js';
+export { HybridPolicyEngine, type HybridPolicyConfig, createHybridPolicyConfigFromEnv, } from './hybrid-policy-engine.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/policy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/policy/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,kBAAkB,EAClB,KAAK,kBAAkB,EACvB,+BAA+B,GAChC,MAAM,2BAA2B,CAAC"}

package/dist/policy/index.js

@@ -0,0 +1,10 @@
+/**
+ * Policy Engine Module
+ *
+ * Hybrid policy engine for SAP MCP Server
+ * Combines local deterministic policies with optional Bento Guard integration
+ */
+export { LocalPolicyEngine, createPolicyConfigFromEnv, } from './local-policy-engine.js';
+export { BentoPolicyEngine, BentoUnavailableError, createBentoConfigFromEnv, } from './bento-policy-engine.js';
+export { HybridPolicyEngine, createHybridPolicyConfigFromEnv, } from './hybrid-policy-engine.js';
+//# sourceMappingURL=index.js.map

package/dist/policy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/policy/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,iBAAiB,EAIjB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,iBAAiB,EAEjB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,kBAAkB,EAElB,+BAA+B,GAChC,MAAM,2BAA2B,CAAC"}

package/dist/policy/local-policy-engine.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Local Policy Engine
+ *
+ * Deterministic security policies for SAP MCP Server
+ * Runs entirely locally - no external dependencies
+ *
+ * Features:
+ * - Spend limits per tool/operation
+ * - Program whitelist/blacklist
+ * - Address whitelist/blacklist
+ * - Rate limiting per user
+ * - Time-based restrictions
+ */
+export interface PolicyConfig {
+    /** Maximum amount (in lamports) per tool call */
+    spendLimits: Record<string, number>;
+    /** Allowed program IDs */
+    programWhitelist: string[];
+    /** Blocked program IDs */
+    programBlacklist: string[];
+    /** Allowed destination addresses */
+    addressWhitelist: string[];
+    /** Blocked destination addresses */
+    addressBlacklist: string[];
+    /** Max calls per minute per user */
+    rateLimits: Record<string, number>;
+    /** Tools that require escalation (human approval) */
+    escalationTools: string[];
+    /** Time windows when operations are allowed (UTC hours) */
+    allowedHours?: {
+        start: number;
+        end: number;
+    };
+}
+/**
+ * Contract describing policy decision data used by the SAP MCP runtime.
+ */
+export interface PolicyDecision {
+    /** Whether the operation is allowed */
+    allowed: boolean;
+    /** Whether the operation is explicitly blocked */
+    blocked?: boolean;
+    /** Whether the operation requires human escalation */
+    escalated?: boolean;
+    /** Reason for the decision */
+    reason: string;
+    /** Policy rule that was triggered */
+    rule?: string;
+    /** Metadata for logging/auditing */
+    metadata?: Record<string, unknown>;
+}
+/**
+ * Contract describing policy context data used by the SAP MCP runtime.
+ */
+export interface PolicyContext {
+    /** Tool/function being called */
+    toolName: string;
+    /** Tool arguments */
+    args: Record<string, unknown>;
+    /** User/wallet identifier */
+    user: string;
+    /** Amount involved (if applicable, in lamports) */
+    amount?: number;
+    /** Program ID being interacted with */
+    programId?: string;
+    /** Destination address (if applicable) */
+    destination?: string;
+    /** Current timestamp */
+    timestamp?: number;
+}
+/**
+ * Runtime service that implements local policy engine behavior.
+ */
+export declare class LocalPolicyEngine {
+    private config;
+    private callHistory;
+    constructor(config: PolicyConfig);
+    /**
+     * Validate a tool call against all policy rules
+     */
+    validateToolCall(context: PolicyContext): Promise<PolicyDecision>;
+    /**
+     * Check if program or address is blacklisted
+     */
+    private checkBlacklist;
+    /**
+     * Check if program or address is whitelisted (if whitelist is configured)
+     */
+    private checkWhitelist;
+    /**
+     * Check if amount exceeds spend limits
+     */
+    private checkSpendLimits;
+    /**
+     * Check rate limiting per user
+     */
+    private checkRateLimits;
+    /**
+     * Check if tool requires human escalation
+     */
+    private checkEscalation;
+    /**
+     * Check if operation is within allowed time window
+     */
+    private checkTimeWindow;
+    /**
+     * Get current policy configuration
+     */
+    getConfig(): PolicyConfig;
+    /**
+     * Clear call history (useful for testing)
+     */
+    clearHistory(): void;
+}
+/**
+ * Create policy config from environment variables
+ */
+export declare function createPolicyConfigFromEnv(): PolicyConfig;
+//# sourceMappingURL=local-policy-engine.d.ts.map

package/dist/policy/local-policy-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-policy-engine.d.ts","sourceRoot":"","sources":["../../src/policy/local-policy-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,0BAA0B;IAC1B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,0BAA0B;IAC1B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,oCAAoC;IACpC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,oCAAoC;IACpC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,qDAAqD;IACrD,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,2DAA2D;IAC3D,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,uCAAuC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,kDAAkD;IAClD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,sDAAsD;IACtD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,WAAW,CAAiE;gBAExE,MAAM,EAAE,YAAY;IAIhC;;OAEG;IACG,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAyDvE;;OAEG;IACH,OAAO,CAAC,cAAc;IAwBtB;;OAEG;IACH,OAAO,CAAC,cAAc;IA2BtB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAsCxB;;OAEG;IACH,OAAO,CAAC,eAAe;IAuCvB;;OAEG;IACH,OAAO,CAAC,eAAe;IAiBvB;;OAEG;IACH,OAAO,CAAC,eAAe;IAmCvB;;OAEG;IACH,SAAS,IAAI,YAAY;IAIzB;;OAEG;IACH,YAAY,IAAI,IAAI;CAGrB;AAED;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,YAAY,CA2DxD"}