@permission-protocol/mcp-guard 0.1.0 → 0.2.0

package/dist/src/webhook.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Permission Deck Slice 2.5 — GitHub webhook ingestion (the no-agent adoption path).
+ *
+ * A customer points their repo's webhook at the deck. When a PR is opened/labeled
+ * with the trigger label, the deck enqueues it as a Decide card. Approving it mints
+ * the scoped receipt the deploy-gate verifies — so a human authorizes the merge in
+ * the deck without any agent ever calling a tool.
+ *
+ * Pure functions. No I/O. Fully unit-testable.
+ */
+export interface ParsedPrEvent {
+    action: string;
+    pr_number: number;
+    repo: string;
+    head_sha: string;
+    title: string;
+    labels: string[];
+    html_url: string | null;
+}
+export declare const DEFAULT_TRIGGER_LABEL = "needs-authority";
+/**
+ * Verify a GitHub webhook HMAC-SHA256 signature (`X-Hub-Signature-256: sha256=<hex>`).
+ * Constant-time compare. Fails closed when the secret or header is missing.
+ */
+export declare function verifyGithubSignature(secret: string | undefined, rawBody: string | Buffer, signatureHeader: string | undefined): boolean;
+/** Parse a GitHub `pull_request` webhook payload into the fields we gate on. */
+export declare function parsePrEvent(payload: any): ParsedPrEvent | null;
+/** Should this event open an authority gate? A relevant action carrying the trigger label. */
+export declare function shouldGate(ev: ParsedPrEvent, triggerLabel?: string): boolean;
+/** The scope binding a merge receipt must carry to satisfy the deploy-gate for this PR. */
+export declare function scopeForPr(ev: ParsedPrEvent): {
+    scope: string;
+    scope_ref: string;
+    scope_sha: string;
+};

package/dist/src/webhook.js

@@ -0,0 +1,57 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_TRIGGER_LABEL = void 0;
+exports.verifyGithubSignature = verifyGithubSignature;
+exports.parsePrEvent = parsePrEvent;
+exports.shouldGate = shouldGate;
+exports.scopeForPr = scopeForPr;
+const node_crypto_1 = __importDefault(require("node:crypto"));
+exports.DEFAULT_TRIGGER_LABEL = 'needs-authority';
+/**
+ * Verify a GitHub webhook HMAC-SHA256 signature (`X-Hub-Signature-256: sha256=<hex>`).
+ * Constant-time compare. Fails closed when the secret or header is missing.
+ */
+function verifyGithubSignature(secret, rawBody, signatureHeader) {
+    if (!secret || !signatureHeader)
+        return false;
+    const expected = 'sha256=' + node_crypto_1.default.createHmac('sha256', secret).update(rawBody).digest('hex');
+    const a = Buffer.from(signatureHeader);
+    const b = Buffer.from(expected);
+    if (a.length !== b.length)
+        return false;
+    return node_crypto_1.default.timingSafeEqual(a, b);
+}
+/** Parse a GitHub `pull_request` webhook payload into the fields we gate on. */
+function parsePrEvent(payload) {
+    if (!payload || typeof payload !== 'object' || !payload.pull_request)
+        return null;
+    const pr = payload.pull_request;
+    if (pr.number == null)
+        return null;
+    return {
+        action: String(payload.action ?? ''),
+        pr_number: Number(pr.number),
+        repo: String(payload.repository?.full_name ?? ''),
+        head_sha: String(pr.head?.sha ?? ''),
+        title: String(pr.title ?? ''),
+        labels: Array.isArray(pr.labels) ? pr.labels.map((l) => String(l?.name ?? '')).filter(Boolean) : [],
+        html_url: pr.html_url ? String(pr.html_url) : null,
+    };
+}
+/** Should this event open an authority gate? A relevant action carrying the trigger label. */
+function shouldGate(ev, triggerLabel = exports.DEFAULT_TRIGGER_LABEL) {
+    const relevant = ['opened', 'reopened', 'labeled', 'synchronize'].includes(ev.action);
+    return relevant && ev.labels.includes(triggerLabel);
+}
+/** The scope binding a merge receipt must carry to satisfy the deploy-gate for this PR. */
+function scopeForPr(ev) {
+    return {
+        scope: 'github:merge',
+        scope_ref: `refs/pull/${ev.pr_number}/merge`,
+        scope_sha: ev.head_sha,
+    };
+}
+//# sourceMappingURL=webhook.js.map

package/dist/src/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../src/webhook.ts"],"names":[],"mappings":";;;;;;AA6BA,sDAWC;AAGD,oCAaC;AAGD,gCAGC;AAGD,gCAMC;AAvED,8DAAiC;AAuBpB,QAAA,qBAAqB,GAAG,iBAAiB,CAAC;AAEvD;;;GAGG;AACH,SAAgB,qBAAqB,CACnC,MAA0B,EAC1B,OAAwB,EACxB,eAAmC;IAEnC,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,QAAQ,GAAG,SAAS,GAAG,qBAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/F,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,qBAAM,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,gFAAgF;AAChF,SAAgB,YAAY,CAAC,OAAY;IACvC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAClF,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAChC,IAAI,EAAE,CAAC,MAAM,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,IAAI,EAAE,CAAC;QACjD,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;QACpC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;QACxG,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;KACnD,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,SAAgB,UAAU,CAAC,EAAiB,EAAE,eAAuB,6BAAqB;IACxF,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACtF,OAAO,QAAQ,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AACtD,CAAC;AAED,2FAA2F;AAC3F,SAAgB,UAAU,CAAC,EAAiB;IAC1C,OAAO;QACL,KAAK,EAAE,cAAc;QACrB,SAAS,EAAE,aAAa,EAAE,CAAC,SAAS,QAAQ;QAC5C,SAAS,EAAE,EAAE,CAAC,QAAQ;KACvB,CAAC;AACJ,CAAC"}

package/example/test.sh

@@ -8,7 +8,7 @@ echo "=== MCP Guard Demo ==="
 echo ""
 echo "Building..."
 cd "$ROOT_DIR"
-npm run build --silent 2>/dev/null
+[ -f dist/src/cli.js ] || npm run build --silent 2>/dev/null
 
 echo "Sending test requests through mcp-guard proxy..."
 echo ""
@@ -42,14 +42,12 @@ cat "$RESPONSES" | while IFS= read -r line; do
 done
 
 echo ""
-echo "--- Receipts (stderr) ---"
-grep "receipt:" "$RECEIPTS" | sed 's/\[mcp-guard\] receipt: //' | while IFS= read -r line; do
-  echo "$line" | python3 -m json.tool 2>/dev/null || echo "$line"
-done
+echo "--- Receipts (signed; full JSON in pp-receipts.jsonl) ---"
+grep "\[mcp-guard\] receipt " "$RECEIPTS" || true
 
 echo ""
 echo "--- Guard Log ---"
-grep -v "receipt:" "$RECEIPTS" || true
+grep -v "\[mcp-guard\] receipt " "$RECEIPTS" || true
 
 rm -f "$RESPONSES" "$RECEIPTS"
 echo ""
@@ -58,7 +56,7 @@ echo ""
 echo "To try the approval UI, run:"
 echo "  node dist/src/cli.js --config example/pp.config.yaml --approval-port 3100 --agent-id demo-agent -- node dist/example/server.js"
 echo ""
-echo "Then open http://localhost:3100 and send a require_approval tool call."
+echo "Then open the Approval UI URL it prints (it ends with #t=<token>) and send a require_approval tool call."
 echo "The proxy will hold the response until you approve or deny in the UI."
 echo ""
 echo "Done!"

package/package.json

@@ -1,7 +1,11 @@
 {
   "name": "@permission-protocol/mcp-guard",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "MCP Guard blocks dangerous AI agent actions using a simple YAML config file.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/permission-protocol/mcp-guard.git"
+  },
   "publishConfig": {
     "access": "public"
   },
@@ -9,21 +13,43 @@
   "bin": {
     "mcp-guard": "bin/mcp-guard"
   },
+  "files": [
+    "bin",
+    "dist/src",
+    "!dist/src/tests",
+    "dist/example",
+    "example",
+    "templates",
+    "README.md",
+    "CHANGELOG.md",
+    "SECURITY.md",
+    "LICENSE"
+  ],
   "scripts": {
     "build": "tsc",
     "test": "node --test dist/src/tests/*.test.js",
     "demo": "npm run build && bash example/test.sh",
+    "deck": "npm run build && node scripts/deck.mjs",
+    "slice1": "npm run build && node scripts/demo-slice1.mjs",
+    "slice2": "npm run build && node scripts/demo-slice2.mjs",
+    "slice25": "npm run build && node scripts/demo-slice25.mjs",
     "prepublishOnly": "npm run build"
   },
-  "keywords": ["mcp", "guard", "proxy", "ai", "safety", "permission-protocol"],
+  "keywords": [
+    "mcp",
+    "guard",
+    "proxy",
+    "ai",
+    "safety",
+    "permission-protocol"
+  ],
   "license": "MIT",
   "dependencies": {
-    "yaml": "^2.7.0",
-    "uuid": "^11.1.0"
+    "fast-json-stable-stringify": "^2.1.0",
+    "yaml": "^2.7.0"
   },
   "devDependencies": {
-    "@types/node": "^22.0.0",
-    "@types/uuid": "^10.0.0",
-    "typescript": "^5.7.0"
+    "@types/node": "^22.19.15",
+    "typescript": "^5.9.3"
   }
 }

package/templates/github-actions/receipt-gate.yml

@@ -0,0 +1,64 @@
+# mcp-guard receipt gate — reference workflow for a deploy pipeline.
+#
+# A deploy runs only with a signed, unexpired receipt that a HUMAN approved for this
+# exact scope and commit. "No receipt = No deploy. This is intentional."
+#
+# Trust boundaries (each one closes a bypass):
+#   - Verifier code: a pinned npm version. Nothing from a pull request runs before the gate.
+#   - Public key: read from the default branch, never from a pull request. Commit it once
+#     with `npx @permission-protocol/mcp-guard export-key .pp/mcp-guard.pub.pem`.
+#   - Receipt: delivered out of band (the workflow_dispatch input below), never read
+#     from the repository tree, so committing a file cannot satisfy the gate.
+#   - Scope: the receipt must name this environment and the exact commit being deployed.
+#     Receipts released by a countdown or standing rule are refused (human approval only).
+#
+# Wire-up: trigger this workflow with the receipt JSON the approver received, e.g.
+#   gh workflow run deploy.yml -f receipt="$(cat receipt.json)"
+
+name: Deploy (receipt-gated)
+
+on:
+  workflow_dispatch:
+    inputs:
+      receipt:
+        description: Signed mcp-guard receipt JSON for deploy:production at this commit
+        required: true
+
+permissions:
+  contents: read
+
+jobs:
+  receipt-gate:
+    name: mcp-guard receipt gate
+    runs-on: ubuntu-latest
+    steps:
+      - name: Read the pinned public key from the default branch only
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.repository.default_branch }}
+          sparse-checkout: .pp/mcp-guard.pub.pem
+          sparse-checkout-cone-mode: false
+          path: trust
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+
+      - name: Verify the receipt (offline, fail closed)
+        env:
+          RECEIPT: ${{ inputs.receipt }}
+        run: |
+          printf '%s' "$RECEIPT" > "$RUNNER_TEMP/receipt.json"
+          npx --yes @permission-protocol/mcp-guard@0.2.0 verify \
+            --receipt-file "$RUNNER_TEMP/receipt.json" \
+            --pubkey trust/.pp/mcp-guard.pub.pem \
+            --scope deploy:production \
+            --scope-sha "$GITHUB_SHA"
+
+  deploy:
+    needs: receipt-gate
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Deploy
+        run: echo "Deploy $GITHUB_SHA here."

package/demo/_demo-scenario.sh

@@ -1,43 +0,0 @@
-#!/bin/bash
-set -euo pipefail
-
-GREEN='\033[0;32m'
-RED='\033[1;31m'
-BOLD='\033[1m'
-DIM='\033[2m'
-NC='\033[0m'
-BG_RED='\033[41m'
-BG_GREEN='\033[42m'
-BLACK='\033[30m'
-
-clear
-echo ""
-
-# ── BEFORE (red = danger) ──
-echo -e "  ${BG_RED}${BLACK}${BOLD} ✖ WITHOUT MCP GUARD ${NC}"
-echo ""
-sleep 0.6
-echo -e "  ${DIM}\$${NC} call ${BOLD}delete_user_data${NC}"
-sleep 0.4
-echo -e "  ${GREEN}✔ success${NC} — user data deleted"
-echo ""
-sleep 1.5
-
-# ── DIVIDER ──
-echo -e "  ${DIM}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━${NC}"
-echo ""
-sleep 0.4
-
-# ── AFTER (green = safe) ──
-echo -e "  ${BG_GREEN}${BLACK}${BOLD} ✔ WITH MCP GUARD ${NC}"
-echo ""
-sleep 0.6
-echo -e "  ${DIM}\$${NC} call ${BOLD}delete_user_data${NC}"
-sleep 0.4
-echo -e "  ${RED}${BOLD}✖ BLOCKED${NC}"
-echo -e "  ${DIM}rule: block-delete-user-data${NC}"
-echo ""
-sleep 0.5
-echo -e "  ${DIM}{ \"decision\": \"blocked\" }${NC}"
-echo ""
-sleep 2.5

package/dist/src/tests/config.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/src/tests/config.test.js

@@ -1,63 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const node_test_1 = require("node:test");
-const strict_1 = __importDefault(require("node:assert/strict"));
-const node_fs_1 = require("node:fs");
-const node_path_1 = require("node:path");
-const node_os_1 = require("node:os");
-const config_js_1 = require("../config.js");
-(0, node_test_1.describe)('Config Parser', () => {
-    (0, node_test_1.it)('parses a valid config', () => {
-        const dir = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'mcp-guard-test-'));
-        const path = (0, node_path_1.join)(dir, 'config.yaml');
-        (0, node_fs_1.writeFileSync)(path, `
-default_action: allow
-rules:
-  - id: block-delete
-    tool: delete_user_data
-    action: block
-  - id: hold-deploy
-    tool: deploy_production
-    action: require_approval
-`);
-        const config = (0, config_js_1.loadConfig)(path);
-        strict_1.default.equal(config.default_action, 'allow');
-        strict_1.default.equal(config.rules.length, 2);
-        strict_1.default.equal(config.rules[0].id, 'block-delete');
-        strict_1.default.equal(config.rules[0].tool, 'delete_user_data');
-        strict_1.default.equal(config.rules[0].action, 'block');
-        strict_1.default.equal(config.rules[1].action, 'require_approval');
-        strict_1.default.equal(config.mode, 'enforce'); // default
-        (0, node_fs_1.unlinkSync)(path);
-    });
-    (0, node_test_1.it)('rejects invalid config (bad action)', () => {
-        const dir = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'mcp-guard-test-'));
-        const path = (0, node_path_1.join)(dir, 'config.yaml');
-        (0, node_fs_1.writeFileSync)(path, `
-default_action: allow
-rules:
-  - id: bad
-    tool: foo
-    action: nuke_it
-`);
-        strict_1.default.throws(() => (0, config_js_1.loadConfig)(path), /invalid action/i);
-        (0, node_fs_1.unlinkSync)(path);
-    });
-    (0, node_test_1.it)('throws on missing file', () => {
-        strict_1.default.throws(() => (0, config_js_1.loadConfig)('/tmp/nonexistent-mcp-guard-config.yaml'), /Failed to read config/);
-    });
-    (0, node_test_1.it)('rejects config with invalid default_action', () => {
-        const dir = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'mcp-guard-test-'));
-        const path = (0, node_path_1.join)(dir, 'config.yaml');
-        (0, node_fs_1.writeFileSync)(path, `
-default_action: yolo
-rules: []
-`);
-        strict_1.default.throws(() => (0, config_js_1.loadConfig)(path), /Invalid default_action/);
-        (0, node_fs_1.unlinkSync)(path);
-    });
-});
-//# sourceMappingURL=config.test.js.map

package/dist/src/tests/config.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../../../src/tests/config.test.ts"],"names":[],"mappings":";;;;;AAAA,yCAAyC;AACzC,gEAAwC;AACxC,qCAAiE;AACjE,yCAAiC;AACjC,qCAAiC;AACjC,4CAA0C;AAE1C,IAAA,oBAAQ,EAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAA,cAAE,EAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,GAAG,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACtC,IAAA,uBAAa,EAAC,IAAI,EAAE;;;;;;;;;CASvB,CAAC,CAAC;QACC,MAAM,MAAM,GAAG,IAAA,sBAAU,EAAC,IAAI,CAAC,CAAC;QAChC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC7C,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrC,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QACjD,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;QACvD,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9C,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACzD,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,UAAU;QAChD,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,GAAG,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACtC,IAAA,uBAAa,EAAC,IAAI,EAAE;;;;;;CAMvB,CAAC,CAAC;QACC,gBAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACzD,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,gBAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAU,EAAC,wCAAwC,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,GAAG,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACtC,IAAA,uBAAa,EAAC,IAAI,EAAE;;;CAGvB,CAAC,CAAC;QACC,gBAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAChE,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/tests/engine.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/src/tests/engine.test.js

@@ -1,46 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const node_test_1 = require("node:test");
-const strict_1 = __importDefault(require("node:assert/strict"));
-const engine_js_1 = require("../engine.js");
-(0, node_test_1.describe)('Decision Engine', () => {
-    const config = {
-        default_action: 'allow',
-        mode: 'enforce',
-        rules: [
-            { id: 'block-delete', tool: 'delete_user_data', action: 'block' },
-            { id: 'hold-deploy', tool: 'deploy_production', action: 'require_approval' },
-            { id: 'allow-email', tool: 'send_email', action: 'allow' },
-        ],
-    };
-    (0, node_test_1.it)('matches a block rule', () => {
-        const d = (0, engine_js_1.evaluate)('delete_user_data', undefined, config);
-        strict_1.default.equal(d.decision, 'blocked');
-        strict_1.default.equal(d.rule_id, 'block-delete');
-    });
-    (0, node_test_1.it)('matches a require_approval rule', () => {
-        const d = (0, engine_js_1.evaluate)('deploy_production', undefined, config);
-        strict_1.default.equal(d.decision, 'held_for_approval');
-        strict_1.default.equal(d.rule_id, 'hold-deploy');
-    });
-    (0, node_test_1.it)('matches an allow rule', () => {
-        const d = (0, engine_js_1.evaluate)('send_email', undefined, config);
-        strict_1.default.equal(d.decision, 'allowed');
-        strict_1.default.equal(d.rule_id, 'allow-email');
-    });
-    (0, node_test_1.it)('falls back to default_action: allow', () => {
-        const d = (0, engine_js_1.evaluate)('unknown_tool', undefined, config);
-        strict_1.default.equal(d.decision, 'allowed');
-        strict_1.default.equal(d.rule_id, null);
-    });
-    (0, node_test_1.it)('falls back to default_action: block', () => {
-        const blockConfig = { default_action: 'block', mode: 'enforce', rules: [] };
-        const d = (0, engine_js_1.evaluate)('any_tool', undefined, blockConfig);
-        strict_1.default.equal(d.decision, 'blocked');
-        strict_1.default.equal(d.rule_id, null);
-    });
-});
-//# sourceMappingURL=engine.test.js.map

package/dist/src/tests/engine.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"engine.test.js","sourceRoot":"","sources":["../../../src/tests/engine.test.ts"],"names":[],"mappings":";;;;;AAAA,yCAAyC;AACzC,gEAAwC;AACxC,4CAAwC;AAGxC,IAAA,oBAAQ,EAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,MAAM,MAAM,GAAW;QACrB,cAAc,EAAE,OAAO;QACvB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE;YACL,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE;YACjE,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC5E,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE;SAC3D;KACF,CAAC;IAEF,IAAA,cAAE,EAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,GAAG,IAAA,oBAAQ,EAAC,kBAAkB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC1D,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpC,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAG,IAAA,oBAAQ,EAAC,mBAAmB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3D,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAC9C,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,GAAG,IAAA,oBAAQ,EAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACpD,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpC,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,IAAA,oBAAQ,EAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACtD,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpC,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,WAAW,GAAW,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACpF,MAAM,CAAC,GAAG,IAAA,oBAAQ,EAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QACvD,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpC,gBAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/tests/receipt.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/src/tests/receipt.test.js

@@ -1,44 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-const node_test_1 = require("node:test");
-const strict_1 = __importDefault(require("node:assert/strict"));
-const receipt_js_1 = require("../receipt.js");
-(0, node_test_1.describe)('Receipt Emitter', () => {
-    (0, node_test_1.it)('generates a valid receipt with all fields', () => {
-        const decision = {
-            decision: 'blocked',
-            rule_id: 'block-delete',
-            reason: 'Matched rule "block-delete"',
-        };
-        const receipt = (0, receipt_js_1.createReceipt)('agent-1', 'delete_user_data', decision, { name: 'delete_user_data', arguments: {} });
-        strict_1.default.ok(receipt.receipt_id, 'has receipt_id');
-        strict_1.default.match(receipt.receipt_id, /^[0-9a-f-]{36}$/, 'receipt_id is UUID');
-        strict_1.default.ok(receipt.timestamp, 'has timestamp');
-        strict_1.default.doesNotThrow(() => new Date(receipt.timestamp), 'timestamp is valid ISO');
-        strict_1.default.equal(receipt.agent_id, 'agent-1');
-        strict_1.default.equal(receipt.tool_name, 'delete_user_data');
-        strict_1.default.equal(receipt.decision, 'blocked');
-        strict_1.default.equal(receipt.reason, 'Matched rule "block-delete"');
-        strict_1.default.equal(receipt.rule_id, 'block-delete');
-        strict_1.default.equal(typeof receipt.request_payload_hash, 'string');
-        strict_1.default.equal(receipt.request_payload_hash.length, 64, 'SHA-256 hex is 64 chars');
-        strict_1.default.equal(receipt.target_server, 'unknown');
-        strict_1.default.equal(receipt.mode, 'enforce');
-    });
-    (0, node_test_1.it)('hashes different payloads differently', () => {
-        const decision = { decision: 'allowed', rule_id: null, reason: 'test' };
-        const r1 = (0, receipt_js_1.createReceipt)('a', 'tool', decision, { foo: 1 });
-        const r2 = (0, receipt_js_1.createReceipt)('a', 'tool', decision, { foo: 2 });
-        strict_1.default.notEqual(r1.request_payload_hash, r2.request_payload_hash);
-    });
-    (0, node_test_1.it)('generates unique receipt IDs', () => {
-        const decision = { decision: 'allowed', rule_id: null, reason: 'test' };
-        const r1 = (0, receipt_js_1.createReceipt)('a', 'tool', decision, {});
-        const r2 = (0, receipt_js_1.createReceipt)('a', 'tool', decision, {});
-        strict_1.default.notEqual(r1.receipt_id, r2.receipt_id);
-    });
-});
-//# sourceMappingURL=receipt.test.js.map

package/dist/src/tests/receipt.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"receipt.test.js","sourceRoot":"","sources":["../../../src/tests/receipt.test.ts"],"names":[],"mappings":";;;;;AAAA,yCAAyC;AACzC,gEAAwC;AACxC,8CAA8C;AAG9C,IAAA,oBAAQ,EAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAA,cAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,QAAQ,GAAa;YACzB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,6BAA6B;SACtC,CAAC;QAEF,MAAM,OAAO,GAAG,IAAA,0BAAa,EAAC,SAAS,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAEpH,gBAAM,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAChD,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;QAC1E,gBAAM,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAC9C,gBAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,wBAAwB,CAAC,CAAC;QACjF,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1C,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACpD,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1C,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;QAC5D,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAC9C,gBAAM,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QAC5D,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;QACjF,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC/C,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,QAAQ,GAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClF,MAAM,EAAE,GAAG,IAAA,0BAAa,EAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,IAAA,0BAAa,EAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,gBAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,oBAAoB,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,IAAA,cAAE,EAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,QAAQ,GAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClF,MAAM,EAAE,GAAG,IAAA,0BAAa,EAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,IAAA,0BAAa,EAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpD,gBAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}