mcp-lint 0.3.0 → 0.4.0

package/README.md

@@ -440,6 +440,116 @@ const fixed = applyFixes(tools, diagnostics);
 
 ---
 
+## `mcp-lint preflight` — Runtime Decision Firewall
+
+**Lint catches bad schemas. Preflight catches bad actions.**
+
+At runtime, your agent is about to call a tool — delete a file, send a request, charge a card. Preflight sits between the agent and the action and answers:
+
+- Is it allowed?
+- How risky is it? (0.0–1.0 deterministic score)
+- Is it reversible?
+- Does it need human approval?
+- Is there a safer alternative?
+
+```bash
+$ mcp-lint preflight action.json --policy preflight.yml
+
+Preflight Decision
+────────────────────────────────────────
+Decision:      DENY
+Risk score:    1.00
+Reversibility: irreversible
+Policies:      block-destructive-prod
+Reasons:       base_shell, destructive_pattern, sensitive_target, irreversible_operation
+```
+
+### Action format
+
+```json
+{
+  "tool_type": "shell",
+  "tool_name": "bash",
+  "action": "rm -rf /prod/data",
+  "target": "/prod/data",
+  "context": { "environment": "prod" }
+}
+```
+
+### Policy file (YAML)
+
+```yaml
+version: 1
+defaults:
+  approval_threshold: 0.70
+  block_threshold: 0.92
+
+rules:
+  - id: block-prod-delete
+    when:
+      tool_type: shell
+      action_matches: ["rm -rf"]
+      target_matches: ["/prod", "/etc"]
+    effect: deny
+
+  - id: rewrite-tmp-delete
+    when:
+      tool_type: shell
+      action_matches: ["rm -rf ./tmp"]
+    effect: allow_with_rewrite
+    rewrite:
+      tool_type: file_delete
+      action: move_to_trash
+      target: ./tmp
+
+  - id: approval-payments
+    when:
+      tool_type: payment
+    effect: require_approval
+```
+
+Sample policies in `examples/policies/`: `default.yml`, `strict.yml`, `permissive-dev.yml`.
+
+### SDK — embed in your MCP server or agent runtime
+
+```typescript
+import { preflight, loadPolicy } from 'mcp-lint/preflight';
+
+const policy = await loadPolicy('./preflight.yml');
+
+const decision = preflight(
+  {
+    tool_type: 'shell',
+    tool_name: 'bash',
+    action: 'rm -rf /tmp',
+    target: '/tmp',
+  },
+  policy,
+);
+
+if (decision.decision === 'deny') {
+  throw new Error(`Blocked: ${decision.reasons.join(', ')}`);
+}
+if (decision.decision === 'require_approval') {
+  await askUser(decision);
+}
+if (decision.decision === 'allow_with_rewrite') {
+  return executeSafer(decision.safe_alternative);
+}
+```
+
+### Exit codes
+
+| Code | Meaning |
+|------|---------|
+| `0`  | allow / allow_with_rewrite |
+| `1`  | require_approval |
+| `2`  | deny / error |
+
+Use them directly in shell wrappers or CI gates.
+
+---
+
 ## License
 
 MIT © Robert

package/dist/cli/commands/preflight.d.ts

@@ -0,0 +1,2 @@
+import type { Command } from 'commander';
+export declare function registerPreflightCommand(program: Command): void;

package/dist/cli/commands/preflight.js

@@ -0,0 +1,109 @@
+import { readFile } from 'node:fs/promises';
+import chalk from 'chalk';
+import { preflight } from '../../preflight/engine.js';
+import { loadPolicy } from '../../preflight/policy.js';
+export function registerPreflightCommand(program) {
+    program
+        .command('preflight [action-file]')
+        .description('Evaluate a proposed agent action against a policy before execution')
+        .option('--policy <path>', 'Path to preflight policy YAML file')
+        .option('--format <format>', 'Output format: terminal|json', 'terminal')
+        .option('--no-color', 'Disable terminal colors')
+        .option('--stdin', 'Read action JSON from stdin')
+        .action(async (actionFile, options) => {
+        if (!options.color)
+            chalk.level = 0;
+        try {
+            const action = await readAction(actionFile, options.stdin ?? false);
+            const policy = options.policy ? await loadPolicy(options.policy) : undefined;
+            const decision = preflight(action, policy);
+            if (options.format === 'json') {
+                process.stdout.write(JSON.stringify(decision, null, 2) + '\n');
+            }
+            else {
+                process.stdout.write(renderTerminal(decision));
+            }
+            const exitCode = decisionExitCode(decision);
+            process.exit(exitCode);
+        }
+        catch (err) {
+            process.stderr.write(`Error: ${err.message}\n`);
+            process.exit(2);
+        }
+    });
+}
+async function readAction(path, stdin) {
+    let raw;
+    if (stdin || !path) {
+        if (process.stdin.isTTY && !stdin) {
+            throw new Error('Specify an action file or use --stdin');
+        }
+        raw = await readStdin();
+    }
+    else {
+        raw = await readFile(path, 'utf8');
+    }
+    return JSON.parse(raw);
+}
+async function readStdin() {
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+    }
+    return Buffer.concat(chunks).toString('utf8');
+}
+function decisionExitCode(d) {
+    switch (d.decision) {
+        case 'allow':
+        case 'allow_with_rewrite':
+            return 0;
+        case 'require_approval':
+            return 1;
+        case 'deny':
+            return 2;
+    }
+}
+function renderTerminal(d) {
+    const lines = [];
+    const decisionColor = d.decision === 'deny'
+        ? chalk.red
+        : d.decision === 'require_approval'
+            ? chalk.yellow
+            : d.decision === 'allow_with_rewrite'
+                ? chalk.cyan
+                : chalk.green;
+    lines.push('');
+    lines.push(chalk.bold('Preflight Decision'));
+    lines.push('─'.repeat(40));
+    lines.push(`Decision:      ${decisionColor(d.decision.toUpperCase())}`);
+    lines.push(`Risk score:    ${riskColor(d.risk_score)}`);
+    lines.push(`Reversibility: ${d.reversibility}`);
+    lines.push(`Est. cost:     $${d.estimated_cost_usd.toFixed(2)}`);
+    if (d.matched_policies.length > 0) {
+        lines.push(`Policies:      ${d.matched_policies.join(', ')}`);
+    }
+    if (d.reasons.length > 0) {
+        lines.push(`Reasons:       ${d.reasons.join(', ')}`);
+    }
+    if (d.safe_alternative) {
+        lines.push('');
+        lines.push(chalk.bold('Safe alternative:'));
+        lines.push(`  ${d.safe_alternative.tool_type} → ${d.safe_alternative.action}`);
+        if (d.safe_alternative.target) {
+            lines.push(`  target: ${d.safe_alternative.target}`);
+        }
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+function riskColor(score) {
+    const s = score.toFixed(2);
+    if (score >= 0.9)
+        return chalk.red(s);
+    if (score >= 0.7)
+        return chalk.yellow(s);
+    if (score >= 0.4)
+        return chalk.cyan(s);
+    return chalk.green(s);
+}
+//# sourceMappingURL=preflight.js.map

package/dist/cli/commands/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../../src/cli/commands/preflight.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAGvD,MAAM,UAAU,wBAAwB,CAAC,OAAgB;IACvD,OAAO;SACJ,OAAO,CAAC,yBAAyB,CAAC;SAClC,WAAW,CAAC,oEAAoE,CAAC;SACjF,MAAM,CAAC,iBAAiB,EAAE,oCAAoC,CAAC;SAC/D,MAAM,CAAC,mBAAmB,EAAE,8BAA8B,EAAE,UAAU,CAAC;SACvE,MAAM,CAAC,YAAY,EAAE,yBAAyB,CAAC;SAC/C,MAAM,CAAC,SAAS,EAAE,6BAA6B,CAAC;SAChD,MAAM,CACL,KAAK,EACH,UAA8B,EAC9B,OAA6E,EAC7E,EAAE;QACF,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7E,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAE3C,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACjE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjD,CAAC;YAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAW,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CACF,CAAC;AACN,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAwB,EAAE,KAAc;IAChE,IAAI,GAAW,CAAC;IAChB,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAW,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAW;IACnC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnB,KAAK,OAAO,CAAC;QACb,KAAK,oBAAoB;YACvB,OAAO,CAAC,CAAC;QACX,KAAK,kBAAkB;YACrB,OAAO,CAAC,CAAC;QACX,KAAK,MAAM;YACT,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,CAAW;IACjC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,aAAa,GACjB,CAAC,CAAC,QAAQ,KAAK,MAAM;QACnB,CAAC,CAAC,KAAK,CAAC,GAAG;QACX,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,kBAAkB;YACjC,CAAC,CAAC,KAAK,CAAC,MAAM;YACd,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,oBAAoB;gBACnC,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IAEtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,kBAAkB,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IACxE,KAAK,CAAC,IAAI,CAAC,kBAAkB,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,SAAS,MAAM,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,KAAK,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC"}

package/dist/index.js

@@ -6,16 +6,18 @@ import { registerInitCommand } from './cli/commands/init.js';
 import { registerCompatCommand } from './cli/commands/compat.js';
 import { registerExplainCommand } from './cli/commands/explain.js';
 import { registerDiffCommand } from './cli/commands/diff.js';
+import { registerPreflightCommand } from './cli/commands/preflight.js';
 const program = new Command();
 program
     .name('mcp-lint')
     .description('Lint MCP server tool schemas for cross-client compatibility')
-    .version('0.3.0');
+    .version('0.4.0');
 registerCheckCommand(program);
 registerFixCommand(program);
 registerInitCommand(program);
 registerCompatCommand(program);
 registerExplainCommand(program);
 registerDiffCommand(program);
+registerPreflightCommand(program);
 program.parse();
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,6DAA6D,CAAC;KAC1E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC5B,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAE7B,OAAO,CAAC,KAAK,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEvE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,6DAA6D,CAAC;KAC1E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,oBAAoB,CAAC,OAAO,CAAC,CAAC;AAC9B,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC5B,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAChC,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAC7B,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAElC,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/preflight/engine.d.ts

@@ -0,0 +1,2 @@
+import type { Action, Decision, Policy } from './types.js';
+export declare function preflight(action: Action, policy?: Policy): Decision;

package/dist/preflight/engine.js

@@ -0,0 +1,73 @@
+import { matchRule } from './policy.js';
+import { scoreAction } from './scorer.js';
+const DEFAULT_APPROVAL_THRESHOLD = 0.7;
+const DEFAULT_BLOCK_THRESHOLD = 0.92;
+export function preflight(action, policy) {
+    validateAction(action);
+    const { score, reasons, reversibility } = scoreAction(action);
+    const approvalThreshold = policy?.defaults?.approval_threshold ?? DEFAULT_APPROVAL_THRESHOLD;
+    const blockThreshold = policy?.defaults?.block_threshold ?? DEFAULT_BLOCK_THRESHOLD;
+    const matched = [];
+    if (policy) {
+        for (const rule of policy.rules) {
+            if (matchRule(rule, action, score)) {
+                matched.push(rule);
+            }
+        }
+    }
+    let decision = null;
+    let safeAlternative = undefined;
+    const policyReasons = [];
+    for (const rule of matched) {
+        if (rule.reason)
+            policyReasons.push(rule.reason);
+        if (rule.effect === 'deny') {
+            decision = 'deny';
+            break;
+        }
+        if (rule.effect === 'require_approval') {
+            decision = 'require_approval';
+        }
+        else if (rule.effect === 'allow_with_rewrite' && decision === null) {
+            decision = 'allow_with_rewrite';
+            safeAlternative = rule.rewrite;
+        }
+        else if (rule.effect === 'allow' && decision === null) {
+            decision = 'allow';
+        }
+    }
+    if (decision === null) {
+        if (score >= blockThreshold) {
+            decision = 'deny';
+            policyReasons.push('risk_above_block_threshold');
+        }
+        else if (score >= approvalThreshold) {
+            decision = 'require_approval';
+            policyReasons.push('risk_above_approval_threshold');
+        }
+        else {
+            decision = 'allow';
+        }
+    }
+    return {
+        decision,
+        risk_score: Number(score.toFixed(2)),
+        reversibility,
+        estimated_cost_usd: action.estimated_cost_usd ?? 0,
+        matched_policies: matched.map((r) => r.id),
+        reasons: [...reasons, ...policyReasons],
+        safe_alternative: safeAlternative,
+    };
+}
+function validateAction(action) {
+    if (!action || typeof action !== 'object') {
+        throw new Error('Action must be an object');
+    }
+    if (!action.tool_type)
+        throw new Error('Action missing tool_type');
+    if (!action.tool_name)
+        throw new Error('Action missing tool_name');
+    if (typeof action.action !== 'string')
+        throw new Error('Action missing action string');
+}
+//# sourceMappingURL=engine.js.map

package/dist/preflight/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/preflight/engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,MAAe;IACvD,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAE9D,MAAM,iBAAiB,GAAG,MAAM,EAAE,QAAQ,EAAE,kBAAkB,IAAI,0BAA0B,CAAC;IAC7F,MAAM,cAAc,GAAG,MAAM,EAAE,QAAQ,EAAE,eAAe,IAAI,uBAAuB,CAAC;IAEpF,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAwB,IAAI,CAAC;IACzC,IAAI,eAAe,GAAG,SAAS,CAAC;IAChC,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM;YAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEjD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,QAAQ,GAAG,MAAM,CAAC;YAClB,MAAM;QACR,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YACvC,QAAQ,GAAG,kBAAkB,CAAC;QAChC,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,oBAAoB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACrE,QAAQ,GAAG,oBAAoB,CAAC;YAChC,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC;QACjC,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACxD,QAAQ,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,IAAI,KAAK,IAAI,cAAc,EAAE,CAAC;YAC5B,QAAQ,GAAG,MAAM,CAAC;YAClB,aAAa,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACnD,CAAC;aAAM,IAAI,KAAK,IAAI,iBAAiB,EAAE,CAAC;YACtC,QAAQ,GAAG,kBAAkB,CAAC;YAC9B,aAAa,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ;QACR,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpC,aAAa;QACb,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,CAAC;QAClD,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,aAAa,CAAC;QACvC,gBAAgB,EAAE,eAAe;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACnE,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AACzF,CAAC"}

package/dist/preflight/index.d.ts

@@ -0,0 +1,4 @@
+export { preflight } from './engine.js';
+export { loadPolicy, parsePolicy, matchRule } from './policy.js';
+export { scoreAction } from './scorer.js';
+export type { Action, Decision, DecisionType, Effect, Policy, PolicyRule, Rewrite, Reversibility, ToolType, } from './types.js';

package/dist/preflight/index.js

@@ -0,0 +1,4 @@
+export { preflight } from './engine.js';
+export { loadPolicy, parsePolicy, matchRule } from './policy.js';
+export { scoreAction } from './scorer.js';
+//# sourceMappingURL=index.js.map

package/dist/preflight/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/preflight/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/preflight/policy.d.ts

@@ -0,0 +1,4 @@
+import type { Action, Policy, PolicyRule } from './types.js';
+export declare function loadPolicy(path: string): Promise<Policy>;
+export declare function parsePolicy(yaml: string): Policy;
+export declare function matchRule(rule: PolicyRule, action: Action, riskScore: number): boolean;

package/dist/preflight/policy.js

@@ -0,0 +1,97 @@
+import { readFile } from 'node:fs/promises';
+import YAML from 'yaml';
+export async function loadPolicy(path) {
+    const raw = await readFile(path, 'utf8');
+    const parsed = YAML.parse(raw);
+    return normalizePolicy(parsed);
+}
+export function parsePolicy(yaml) {
+    const parsed = YAML.parse(yaml);
+    return normalizePolicy(parsed);
+}
+function normalizePolicy(parsed) {
+    if (!parsed || typeof parsed !== 'object') {
+        throw new Error('Policy file is empty or not an object');
+    }
+    const rules = Array.isArray(parsed.rules) ? parsed.rules : [];
+    for (const [idx, rule] of rules.entries()) {
+        if (!rule.id)
+            throw new Error(`Policy rule #${idx} missing "id"`);
+        if (!rule.when)
+            throw new Error(`Policy rule "${rule.id}" missing "when"`);
+        if (!rule.effect)
+            throw new Error(`Policy rule "${rule.id}" missing "effect"`);
+    }
+    return {
+        version: parsed.version ?? 1,
+        defaults: parsed.defaults ?? {},
+        budgets: parsed.budgets ?? {},
+        rules,
+    };
+}
+export function matchRule(rule, action, riskScore) {
+    const w = rule.when;
+    if (w.tool_type) {
+        const types = Array.isArray(w.tool_type) ? w.tool_type : [w.tool_type];
+        if (!types.includes(action.tool_type))
+            return false;
+    }
+    if (w.tool_name) {
+        const names = Array.isArray(w.tool_name) ? w.tool_name : [w.tool_name];
+        if (!names.includes(action.tool_name))
+            return false;
+    }
+    if (w.action_matches && w.action_matches.length > 0) {
+        const hit = w.action_matches.some((m) => action.action.includes(m));
+        if (!hit)
+            return false;
+    }
+    if (w.target_matches && w.target_matches.length > 0) {
+        const target = action.target ?? '';
+        const hit = w.target_matches.some((m) => matchesGlob(target, m));
+        if (!hit)
+            return false;
+    }
+    if (w.domain_not_in_allowlist) {
+        const domain = extractDomain(action);
+        const allow = w.allowlist ?? [];
+        if (!domain)
+            return false;
+        if (allow.includes(domain))
+            return false;
+    }
+    if (typeof w.min_risk === 'number') {
+        if (riskScore < w.min_risk)
+            return false;
+    }
+    if (typeof w.max_cost_usd === 'number') {
+        const cost = action.estimated_cost_usd ?? 0;
+        if (cost <= w.max_cost_usd)
+            return false;
+    }
+    return true;
+}
+function matchesGlob(value, pattern) {
+    if (pattern.includes('**') || pattern.includes('*')) {
+        const regex = new RegExp('^' +
+            pattern
+                .replace(/[.+?^${}()|[\]\\]/g, '\\$&')
+                .replace(/\*\*/g, '§§')
+                .replace(/\*/g, '[^/]*')
+                .replace(/§§/g, '.*') +
+            '$');
+        return regex.test(value);
+    }
+    return value.includes(pattern);
+}
+function extractDomain(action) {
+    const candidate = action.target ?? action.action;
+    const match = candidate.match(/https?:\/\/([^/\s]+)/i);
+    if (match)
+        return match[1].toLowerCase();
+    if (action.context && typeof action.context.domain === 'string') {
+        return action.context.domain.toLowerCase();
+    }
+    return null;
+}
+//# sourceMappingURL=policy.js.map

package/dist/preflight/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/preflight/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;IAClD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;IACnD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,eAAe,CAAC,MAAuB;IAC9C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,eAAe,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,EAAE,oBAAoB,CAAC,CAAC;IACjF,CAAC;IACD,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,CAAC;QAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;QAC/B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC7B,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAgB,EAAE,MAAc,EAAE,SAAiB;IAC3E,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IAEpB,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;IACtD,CAAC;IAED,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;IACtD,CAAC;IAED,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;IACzB,CAAC;IAED,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;IACzB,CAAC;IAED,IAAI,CAAC,CAAC,uBAAuB,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;IAC3C,CAAC;IAED,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,SAAS,GAAG,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;IAC3C,CAAC;IAED,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,IAAI,CAAC,CAAC;QAC5C,IAAI,IAAI,IAAI,CAAC,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;IAC3C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,OAAe;IACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,GAAG;YACD,OAAO;iBACJ,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC;iBACrC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;iBACtB,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;iBACvB,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;YACvB,GAAG,CACN,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;IACjD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACvD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChE,OAAQ,MAAM,CAAC,OAAO,CAAC,MAAiB,CAAC,WAAW,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/preflight/scorer.d.ts

@@ -0,0 +1,7 @@
+import type { Action, Reversibility } from './types.js';
+export interface ScoreBreakdown {
+    score: number;
+    reasons: string[];
+    reversibility: Reversibility;
+}
+export declare function scoreAction(action: Action): ScoreBreakdown;

package/dist/preflight/scorer.js

@@ -0,0 +1,121 @@
+const BASE_SCORES = {
+    file_read: 0.1,
+    file_write: 0.35,
+    file_delete: 0.75,
+    shell: 0.5,
+    http: 0.35,
+    mcp_tool: 0.3,
+    email: 0.6,
+    payment: 0.95,
+    database: 0.7,
+    other: 0.4,
+};
+const DESTRUCTIVE_PATTERNS = [
+    /\brm\s+-rf\b/i,
+    /\brmdir\s+\/s\b/i,
+    /\bdel\s+\/s\b/i,
+    /\bdrop\s+table\b/i,
+    /\btruncate\s+table\b/i,
+    /\bformat\s+\/\w+/i,
+    /\bmkfs\b/i,
+    /\b:\(\)\{\s*:\|:&\s*\};:/,
+    /\bgit\s+push\s+.*--force\b/i,
+    /\bgit\s+reset\s+--hard\b/i,
+];
+const SENSITIVE_TARGETS = [
+    /\/etc\b/,
+    /\/prod\b/,
+    /\/production\b/,
+    /\/app\/data\b/,
+    /\.env(\.|$)/,
+    /\bsecrets?\b/i,
+    /\bcredentials?\b/i,
+    /\/root\b/,
+    /\bC:\\Windows\b/i,
+];
+const MASS_OPERATION_PATTERNS = [
+    /\*\*\/\*/,
+    /\brecursive\b/i,
+    /\s+-r\b/,
+    /\s+-R\b/,
+    /\bALL\b/,
+];
+export function scoreAction(action) {
+    const reasons = [];
+    let score = BASE_SCORES[action.tool_type] ?? 0.4;
+    reasons.push(`base_${action.tool_type}`);
+    const actionText = action.action ?? '';
+    const targetText = action.target ?? '';
+    const haystack = `${actionText} ${targetText}`;
+    let destructive = false;
+    for (const pattern of DESTRUCTIVE_PATTERNS) {
+        if (pattern.test(haystack)) {
+            destructive = true;
+            score += 0.25;
+            reasons.push('destructive_pattern');
+            break;
+        }
+    }
+    if (action.tool_type === 'file_delete') {
+        destructive = true;
+    }
+    for (const pattern of SENSITIVE_TARGETS) {
+        if (pattern.test(haystack)) {
+            score += 0.2;
+            reasons.push('sensitive_target');
+            break;
+        }
+    }
+    for (const pattern of MASS_OPERATION_PATTERNS) {
+        if (pattern.test(haystack)) {
+            score += 0.1;
+            reasons.push('mass_operation');
+            break;
+        }
+    }
+    if (action.context?.environment === 'prod' || action.context?.environment === 'production') {
+        score += 0.15;
+        reasons.push('prod_environment');
+    }
+    const cost = action.estimated_cost_usd ?? 0;
+    if (cost >= 10) {
+        score += 0.15;
+        reasons.push('high_cost');
+    }
+    else if (cost >= 1) {
+        score += 0.05;
+        reasons.push('nontrivial_cost');
+    }
+    score = Math.min(1, Math.max(0, score));
+    const reversibility = computeReversibility(action, destructive);
+    if (reversibility === 'irreversible') {
+        reasons.push('irreversible_operation');
+    }
+    return { score, reasons, reversibility };
+}
+function computeReversibility(action, destructive) {
+    if (destructive)
+        return 'irreversible';
+    switch (action.tool_type) {
+        case 'file_read':
+            return 'reversible';
+        case 'file_write':
+            return 'partially_reversible';
+        case 'file_delete':
+            return 'irreversible';
+        case 'payment':
+        case 'email':
+            return 'irreversible';
+        case 'http':
+            return 'partially_reversible';
+        case 'database':
+            return 'partially_reversible';
+        case 'shell':
+            return 'partially_reversible';
+        case 'mcp_tool':
+            return 'partially_reversible';
+        default:
+            return 'partially_reversible';
+    }
+}
+//# sourceMappingURL=scorer.js.map

package/dist/preflight/scorer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scorer.js","sourceRoot":"","sources":["../../src/preflight/scorer.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,GAA6B;IAC5C,SAAS,EAAE,GAAG;IACd,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE,IAAI;IACjB,KAAK,EAAE,GAAG;IACV,IAAI,EAAE,IAAI;IACV,QAAQ,EAAE,GAAG;IACb,KAAK,EAAE,GAAG;IACV,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,GAAG;IACb,KAAK,EAAE,GAAG;CACX,CAAC;AAEF,MAAM,oBAAoB,GAAa;IACrC,eAAe;IACf,kBAAkB;IAClB,gBAAgB;IAChB,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;IACnB,WAAW;IACX,0BAA0B;IAC1B,6BAA6B;IAC7B,2BAA2B;CAC5B,CAAC;AAEF,MAAM,iBAAiB,GAAa;IAClC,SAAS;IACT,UAAU;IACV,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,eAAe;IACf,mBAAmB;IACnB,UAAU;IACV,kBAAkB;CACnB,CAAC;AAEF,MAAM,uBAAuB,GAAa;IACxC,UAAU;IACV,gBAAgB;IAChB,SAAS;IACT,SAAS;IACT,SAAS;CACV,CAAC;AAQF,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAEzC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAG,UAAU,IAAI,UAAU,EAAE,CAAC;IAE/C,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,WAAW,GAAG,IAAI,CAAC;YACnB,KAAK,IAAI,IAAI,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACpC,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,aAAa,EAAE,CAAC;QACvC,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,KAAK,IAAI,GAAG,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACjC,MAAM;QACR,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,uBAAuB,EAAE,CAAC;QAC9C,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,KAAK,IAAI,GAAG,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC/B,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,WAAW,KAAK,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,WAAW,KAAK,YAAY,EAAE,CAAC;QAC3F,KAAK,IAAI,IAAI,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,kBAAkB,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;QACf,KAAK,IAAI,IAAI,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;QACrB,KAAK,IAAI,IAAI,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAExC,MAAM,aAAa,GAAG,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEhE,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc,EAAE,WAAoB;IAChE,IAAI,WAAW;QAAE,OAAO,cAAc,CAAC;IACvC,QAAQ,MAAM,CAAC,SAAS,EAAE,CAAC;QACzB,KAAK,WAAW;YACd,OAAO,YAAY,CAAC;QACtB,KAAK,YAAY;YACf,OAAO,sBAAsB,CAAC;QAChC,KAAK,aAAa;YAChB,OAAO,cAAc,CAAC;QACxB,KAAK,SAAS,CAAC;QACf,KAAK,OAAO;YACV,OAAO,cAAc,CAAC;QACxB,KAAK,MAAM;YACT,OAAO,sBAAsB,CAAC;QAChC,KAAK,UAAU;YACb,OAAO,sBAAsB,CAAC;QAChC,KAAK,OAAO;YACV,OAAO,sBAAsB,CAAC;QAChC,KAAK,UAAU;YACb,OAAO,sBAAsB,CAAC;QAChC;YACE,OAAO,sBAAsB,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/preflight/types.d.ts

@@ -0,0 +1,57 @@
+export type ToolType = 'shell' | 'file_read' | 'file_write' | 'file_delete' | 'http' | 'mcp_tool' | 'email' | 'payment' | 'database' | 'other';
+export type Reversibility = 'reversible' | 'partially_reversible' | 'irreversible';
+export type DecisionType = 'allow' | 'deny' | 'require_approval' | 'allow_with_rewrite';
+export type Effect = 'allow' | 'deny' | 'require_approval' | 'allow_with_rewrite';
+export interface Action {
+    actor_id?: string;
+    workspace_id?: string;
+    tool_type: ToolType;
+    tool_name: string;
+    action: string;
+    target?: string;
+    context?: Record<string, unknown>;
+    estimated_cost_usd?: number;
+}
+export interface Rewrite {
+    tool_type: ToolType;
+    tool_name?: string;
+    action: string;
+    target?: string;
+}
+export interface PolicyRule {
+    id: string;
+    when: {
+        tool_type?: ToolType | ToolType[];
+        tool_name?: string | string[];
+        action_matches?: string[];
+        target_matches?: string[];
+        domain_not_in_allowlist?: boolean;
+        allowlist?: string[];
+        min_risk?: number;
+        max_cost_usd?: number;
+    };
+    effect: Effect;
+    rewrite?: Rewrite;
+    reason?: string;
+}
+export interface Policy {
+    version: number;
+    defaults?: {
+        approval_threshold?: number;
+        block_threshold?: number;
+    };
+    budgets?: {
+        max_http_cost_usd_per_action?: number;
+        max_model_cost_usd_per_action?: number;
+    };
+    rules: PolicyRule[];
+}
+export interface Decision {
+    decision: DecisionType;
+    risk_score: number;
+    reversibility: Reversibility;
+    estimated_cost_usd: number;
+    matched_policies: string[];
+    reasons: string[];
+    safe_alternative?: Rewrite;
+}

package/dist/preflight/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/preflight/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/preflight/types.ts"],"names":[],"mappings":""}

package/examples/actions/destructive-delete.json

@@ -0,0 +1,11 @@
+{
+  "actor_id": "agent:claude-code",
+  "workspace_id": "team-alpha",
+  "tool_type": "shell",
+  "tool_name": "bash",
+  "action": "rm -rf /prod/data",
+  "target": "/prod/data",
+  "context": {
+    "environment": "prod"
+  }
+}

package/examples/actions/rewrite-tmp.json

@@ -0,0 +1,8 @@
+{
+  "actor_id": "agent:claude-code",
+  "workspace_id": "team-alpha",
+  "tool_type": "shell",
+  "tool_name": "bash",
+  "action": "rm -rf ./tmp",
+  "target": "./tmp"
+}

package/examples/actions/safe-read.json

@@ -0,0 +1,8 @@
+{
+  "actor_id": "agent:claude-code",
+  "workspace_id": "team-alpha",
+  "tool_type": "file_read",
+  "tool_name": "read",
+  "action": "cat package.json",
+  "target": "./package.json"
+}

package/examples/github-action.yml

@@ -0,0 +1,23 @@
+name: MCP Schema Lint (example)
+
+# Example workflow showing how to use mcp-lint in CI.
+# Copy this to your own repo and adjust the `input` path.
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Lint MCP tool schemas
+        uses: robert19001-cmyk/mcp-lint@v0.3.0
+        with:
+          input: tools.json
+          severity: warning
+          score: 'true'
+          fail_on: error

package/examples/policies/default.yml

@@ -0,0 +1,59 @@
+version: 1
+
+defaults:
+  approval_threshold: 0.70
+  block_threshold: 0.92
+
+budgets:
+  max_http_cost_usd_per_action: 2
+  max_model_cost_usd_per_action: 1
+
+rules:
+  - id: block-destructive-prod
+    when:
+      tool_type: shell
+      action_matches: ["rm -rf", "rmdir /s", "del /s"]
+      target_matches: ["/prod", "/etc", "/app/data", "C:\\Windows"]
+    effect: deny
+    reason: Destructive operations on production paths are forbidden
+
+  - id: approval-sensitive-write
+    when:
+      tool_type: file_write
+      target_matches: ["**/.env*", "**/secrets*", "**/credentials*"]
+    effect: require_approval
+    reason: Writing to sensitive files requires approval
+
+  - id: rewrite-tmp-delete
+    when:
+      tool_type: shell
+      action_matches: ["rm -rf ./tmp", "rm -rf ./cache", "rm -rf ./build"]
+    effect: allow_with_rewrite
+    rewrite:
+      tool_type: file_delete
+      action: move_to_trash
+      target: ./tmp
+    reason: Prefer moving to trash over hard delete
+
+  - id: allow-workspace-writes
+    when:
+      tool_type: file_write
+      target_matches: ["./workspace/**", "./src/**", "./tests/**"]
+    effect: allow
+
+  - id: allow-local-reads
+    when:
+      tool_type: file_read
+    effect: allow
+
+  - id: approval-payments
+    when:
+      tool_type: payment
+    effect: require_approval
+    reason: All payments require human approval
+
+  - id: approval-external-email
+    when:
+      tool_type: email
+    effect: require_approval
+    reason: Outgoing email requires approval

package/examples/policies/permissive-dev.yml

@@ -0,0 +1,33 @@
+version: 1
+
+defaults:
+  approval_threshold: 0.85
+  block_threshold: 0.98
+
+rules:
+  - id: block-prod-paths
+    when:
+      target_matches: ["/prod/**", "/production/**"]
+    effect: deny
+    reason: Never touch production paths from dev
+
+  - id: allow-all-reads
+    when:
+      tool_type: file_read
+    effect: allow
+
+  - id: allow-workspace
+    when:
+      tool_type: file_write
+      target_matches: ["./**"]
+    effect: allow
+
+  - id: rewrite-destructive-delete
+    when:
+      tool_type: shell
+      action_matches: ["rm -rf"]
+    effect: allow_with_rewrite
+    rewrite:
+      tool_type: file_delete
+      action: move_to_trash
+    reason: Use trash instead of hard delete even in dev

package/examples/policies/strict.yml

@@ -0,0 +1,42 @@
+version: 1
+
+defaults:
+  approval_threshold: 0.40
+  block_threshold: 0.80
+
+rules:
+  - id: approval-all-shell
+    when:
+      tool_type: shell
+    effect: require_approval
+    reason: All shell commands require approval under strict policy
+
+  - id: approval-all-http
+    when:
+      tool_type: http
+      domain_not_in_allowlist: true
+      allowlist:
+        - api.github.com
+        - api.anthropic.com
+        - api.openai.com
+    effect: require_approval
+    reason: HTTP calls outside the allowlist require approval
+
+  - id: block-destructive
+    when:
+      tool_type: shell
+      action_matches: ["rm -rf", "drop table", "truncate"]
+    effect: deny
+    reason: Destructive commands are never allowed
+
+  - id: block-secrets
+    when:
+      action_matches: [".env", "secrets", "credentials", "id_rsa"]
+    effect: deny
+    reason: Secrets must never be touched by an agent
+
+  - id: approval-payment
+    when:
+      tool_type: payment
+    effect: deny
+    reason: Agents cannot make payments in strict mode

package/package.json

@@ -1,22 +1,41 @@
 {
   "name": "mcp-lint",
-  "version": "0.3.0",
-  "description": "Lint MCP server tool schemas for cross-client compatibility",
+  "version": "0.4.0",
+  "description": "Lint MCP server tool schemas for cross-client compatibility + runtime preflight for agent tool calls",
   "type": "module",
   "bin": {
     "mcp-lint": "./dist/index.js"
   },
   "main": "./dist/core/engine.js",
   "types": "./dist/core/engine.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/core/engine.d.ts",
+      "default": "./dist/core/engine.js"
+    },
+    "./preflight": {
+      "types": "./dist/preflight/index.d.ts",
+      "default": "./dist/preflight/index.js"
+    },
+    "./rules": {
+      "types": "./dist/rules/index.d.ts",
+      "default": "./dist/rules/index.js"
+    }
+  },
   "files": [
-    "dist/"
+    "dist/",
+    "examples/"
   ],
   "keywords": [
     "mcp",
     "model-context-protocol",
     "lint",
     "schema",
-    "validation"
+    "validation",
+    "preflight",
+    "agent-safety",
+    "policy",
+    "guardrails"
   ],
   "license": "MIT",
   "engines": {