{"_id":"governance-sdk","_rev":"36-8b4e8a2cc87737a7ee258bc064acd3cb","name":"governance-sdk","dist-tags":{"latest":"0.20.0"},"versions":{"0.5.0":{"name":"governance-sdk","version":"0.5.0","keywords":["ai-governance","agent-safety","typescript","policy-engine","ai-agents","compliance","audit","eu-ai-act"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.5.0","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heylua.ai/governance","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"3811b730a679d3ea513c5d297cd010458a6b8ca7","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.5.0.tgz","fileCount":387,"integrity":"sha512-Kv/roOw518BMCmyH/6U9p8/qgAZpD8o/6cxNlCAqhS13113kOINgCGTZf8ZEmM4I9m+uWyXmIbKOxRzKOUDQPw==","signatures":[{"sig":"MEYCIQCl/Df5+MgjmAXXHueWS9/pktTDHQtGkmKjrxu9DkOdrQIhAMJyIUMVrC+DwGt9x5rPoa03ei8wvtZ81gmo7k3HsteY","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1234032},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"1b83ae1874409f71284e2f807cffcda4ef9d3afe","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"11.6.1","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"24.11.0","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.5.0_1775151679079_0.7492620337232743","host":"s3://npm-registry-packages-npm-production"}},"0.5.1":{"name":"governance-sdk","version":"0.5.1","keywords":["ai-governance","agent-safety","typescript","policy-engine","ai-agents","compliance","audit","eu-ai-act"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.5.1","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heylua.ai/governance","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"1beb3fbd3866fffea8d05da741d3e81ffadf94a2","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.5.1.tgz","fileCount":195,"integrity":"sha512-YumLp0mD3coTS+S9gNpuGty+LJT9kBwhXbgZ8QDJ9prUE6ob6poKybt62yfjEi9y8/SHxDTYYwIwhFgwIsefxw==","signatures":[{"sig":"MEYCIQCvOk0Sj+euj0gqOuAiHrzRKuFUMnb/jhIcjZS5thSiWwIhAJVxw9NXrrNadMyFYkzpuCo5hE5pOPxNKdwDDBj18A8B","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":740852},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"5e5352187d03cac633a720449facc1ae065c71b9","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.4","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.1","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.5.1_1775204539957_0.6240741625046395","host":"s3://npm-registry-packages-npm-production"}},"0.5.2":{"name":"governance-sdk","version":"0.5.2","keywords":["ai-governance","agent-safety","typescript","policy-engine","ai-agents","compliance","audit","eu-ai-act"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.5.2","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"3bd754e2b1e981d2961e6f207e8e807427ffabe5","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.5.2.tgz","fileCount":195,"integrity":"sha512-gX/Xd1sw7Y1PZnvm+1PcEJGNnkfO4xOfIUCuUQBeuRVV9fnhM1JB7VNq4HgAtKK5vucwjwIt+Uk+oXysNlDX3Q==","signatures":[{"sig":"MEUCIQCG0cvDrSV3BXkHqdXrZPZ0QyIQ04Q4KyVqhhh2eu3iXgIgcQyFMkgcC0hXypiMbK088xpdgL6MM+3GzZCOC4hTBII=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":740836},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"aa9ed20b0413cbcd60c6d0690a696f7a8f8b7556","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.5.2_1775211255369_0.6100030160161671","host":"s3://npm-registry-packages-npm-production"}},"0.6.0":{"name":"governance-sdk","version":"0.6.0","keywords":["ai-governance","agent-safety","typescript","policy-engine","ai-agents","compliance","audit","eu-ai-act"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.6.0","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"a3cf8f665fc086ac2c39d3bbaeea7de9840bee8e","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.6.0.tgz","fileCount":197,"integrity":"sha512-achg7OTf495mP6kETTAIrNGXGAvmUJnMTfpc9dn+ZQSo2IKPG5tqA18YRoaoAarJsXEoamvFboYD9moz84mOSQ==","signatures":[{"sig":"MEUCIQCld2oq57NUy5F2z3pF7VZzFdQzllXHE9LG6bDjcnLuIgIgBazehtPDCUqo0Gs5/fYF5M2TW0HuMndIxRsIJdBOb0I=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":745983},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"20b37426e39fb2389516a9ba6a6f7e13a3727358","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.6.0_1775215371037_0.9286737062125394","host":"s3://npm-registry-packages-npm-production"}},"0.6.1":{"name":"governance-sdk","version":"0.6.1","keywords":["ai-governance","agent-safety","typescript","policy-engine","ai-agents","compliance","audit","eu-ai-act"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.6.1","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"effe51bebca2560c2a0ddb00814498bccdeb4205","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.6.1.tgz","fileCount":197,"integrity":"sha512-HahDmX04XtPAsEuKMJl/o8TlWjIJH+1OCH2rjEGM7pgrVMpejk+ivDQbPV0GkF0n3H5uJx9UZKKgiuweuJOmwQ==","signatures":[{"sig":"MEUCIF9WNJMNjIevDVStg2HoqP6CiVZNkobR3H9TcNvCgsyjAiEA+uGIsXjf7abp9jfOwiVm1smukZxepfZs48BeWEKP2AE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":747256},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"4cedbbb1f41f397f684e8da4cc876ed18c185258","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.4","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.1","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.6.1_1775218935469_0.8040725201292767","host":"s3://npm-registry-packages-npm-production"}},"0.6.2":{"name":"governance-sdk","version":"0.6.2","keywords":["ai-governance","agent-safety","typescript","policy-engine","ai-agents","compliance","audit","eu-ai-act"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.6.2","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"1956cb7e5737fe5d7e0bb6d2d7627704a320f9ca","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.6.2.tgz","fileCount":197,"integrity":"sha512-mVBxNZ29n5FBzaLjNv9eoZvaVsyfOdf4pRyKH42GBqsmnNLao2usmdCrvIQ1alAy2qfCqeSqb1nu+l+aoXfCEg==","signatures":[{"sig":"MEUCIQCEkQVTj4QPP1OuqF9pdoQmF+UflYhtoJ/byjyNSEkWfQIgTEs1Kr+nuB2bqHQq/U6SsrINpPrswBCEQKyrDBY4IQU=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":747437},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"8cdf1ead0107fe49aabeba5486d105e414cf1f1c","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.6.2_1775345678766_0.45522754556223743","host":"s3://npm-registry-packages-npm-production"}},"0.6.3":{"name":"governance-sdk","version":"0.6.3","keywords":["ai-governance","agent-safety","typescript","policy-engine","ai-agents","compliance","audit","eu-ai-act"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.6.3","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"1624614443472eb734f0e8ff51cba20af999eb91","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.6.3.tgz","fileCount":197,"integrity":"sha512-qKQP6eJ3y6EjdrckL5IJc5o9wUFma1mhZNKGKMvXvIn5tylrCQru9DxFcizAJIdT4R+UR/Cr4hGgznrKuuo2AA==","signatures":[{"sig":"MEUCIA0gmjUbV2pP8rbAsf3lLxNfDy+BT940QV1DHFdjZBffAiEAxP3iAJ1KuYQmtw/3QDuxxncxYkrK2VDDGnUpQdBs96Q=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":751698},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"ec79e0f5014b142752164ea1851f1443a342f6aa","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.6.3_1775345967285_0.8481012104661623","host":"s3://npm-registry-packages-npm-production"}},"0.6.4":{"name":"governance-sdk","version":"0.6.4","keywords":["ai-governance","agent-safety","typescript","policy-engine","ai-agents","compliance","audit","eu-ai-act"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.6.4","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"db70f9193e895da47ee71217fe6722b448a9e090","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.6.4.tgz","fileCount":197,"integrity":"sha512-dqgPg+ulxENLmbp+lEVB+IcR7k2D44BtE72NgVUimW//6i/yS46398Oz2v79OCl/1FUifqCcdnCbN/9haOFdiw==","signatures":[{"sig":"MEYCIQD+V2BhPRaryUlzXog0BUqI8sBDPA6S7e7uHVgnoO3+KQIhAKWQrX+0j6GH+g2vuV3D0TrrxfVfnF/rv9V8eFQG/EVU","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":752207},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"9cf0b950b83528f7b96ca30ee423852984b75f7f","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.6.4_1775351021011_0.8227319309682866","host":"s3://npm-registry-packages-npm-production"}},"0.7.0":{"name":"governance-sdk","version":"0.7.0","keywords":["ai-governance","agent-safety","typescript","policy-engine","ai-agents","compliance","audit","eu-ai-act"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.7.0","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"29730824858be7847fa95ecb4e3d2d30d580474e","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.7.0.tgz","fileCount":199,"integrity":"sha512-nG4IciLFWoQw+2fD58AoeR9Wg1aCaBP6plAJ199mXArEab7oyuWQBMr9padnLN7ij+d/oAESAvP6nEmeTFqlEg==","signatures":[{"sig":"MEUCIA9yOT5l0KNQAPM/1Enivpl+KlOnFcgDmCJ9Nz+EF439AiEAvGIGTCmGHmFazbuHbGZbFvelf5Xay/q4ZTEJp1pbexY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":758639},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"9b8fe6a50af5b10556a1c0da5784db4e6ac8e30e","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.7.0_1775357515687_0.15947496709280973","host":"s3://npm-registry-packages-npm-production"}},"0.7.1":{"name":"governance-sdk","version":"0.7.1","keywords":["ai-governance","agent-safety","typescript","policy-engine","ai-agents","compliance","audit","eu-ai-act"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.7.1","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"2eb5c8f173f16262e6a45dd02d76638e072721af","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.7.1.tgz","fileCount":201,"integrity":"sha512-xwxtKqEjVC8qZb83T6S7b9ELLQ6kRHMEbxngTuQyBTmwh/Sa1vG0ZDkNUiPTnhiEGR+0qawlycD1XUZy6DWGPw==","signatures":[{"sig":"MEUCIQDq4j+6L/K0UHPVsCulL7GMph8TUAAldegglLrYBZ1qqQIgMHsIwR8iLHcdFdfCxv5cHxVtz1UPoKrEinZnPJDZe14=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":763241},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"dad8d420450a025df8257b84116a3af044c79935","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.7.1_1775389089508_0.7428541881836472","host":"s3://npm-registry-packages-npm-production"}},"0.7.2":{"name":"governance-sdk","version":"0.7.2","keywords":["ai-governance","agent-safety","typescript","policy-engine","ai-agents","compliance","audit","eu-ai-act"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.7.2","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"78134d3607efbe722350bbac3223dabf7ce59d21","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.7.2.tgz","fileCount":201,"integrity":"sha512-MDeHTK2+vzexKwzjUle6V+gqI7S57hrQ6tYZ18kDq5lMRU+WmuoA7MITfplCEjJcWiNONfU47yLzBPUU/Kc1mA==","signatures":[{"sig":"MEYCIQDEv8jK68FMZK58d8RBUlB5jeYBDguzuhaYyEZ5TtRFTgIhAPfv3EDUrxt9Xw5VaPcV2dH7z1sEurVJFBH6Y1OzlKLT","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":763803},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"704e1b60d1310b4eabe5794f88058f64ef91d9f2","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.7.2_1775474336910_0.07811058904777202","host":"s3://npm-registry-packages-npm-production"}},"0.8.0":{"name":"governance-sdk","version":"0.8.0","keywords":["ai-governance","agent-safety","typescript","policy-engine","ai-agents","compliance","audit","eu-ai-act"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.8.0","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"b021fda8db5c40a312859b84f27fbd2c61b2ef0f","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.8.0.tgz","fileCount":201,"integrity":"sha512-vvwvsfZ9ODdxD22L02fpuxjFSkudx5l9riYZowhrAj13EUPwek/aUwiuI/44mMG8/dNz69lbI7DHSsD1TmWiSg==","signatures":[{"sig":"MEYCIQDkk2cemCgZU5ctP/HH9us+Nk04Wl+yJK/qTeWvV3NCYgIhAPG3OIMoeVx9up7ogkF5OOmB56yTB/0qkgZjG8+1ftGa","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":792001},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"35bead8d6ff2d318b1b895c6f75ca07d81ad6300","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.8.0_1775512631830_0.787088419215801","host":"s3://npm-registry-packages-npm-production"}},"0.8.1":{"name":"governance-sdk","version":"0.8.1","keywords":["ai-governance","agent-safety","typescript","policy-engine","ai-agents","compliance","audit","eu-ai-act"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.8.1","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"7e5bbbb7330f09b2ba542e2a776a2b1df00beca3","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.8.1.tgz","fileCount":205,"integrity":"sha512-rOzvz/mSP42jeOtSqEGEwtZUz9Z5GKLjTOAq2f4OBtOYMCVpHOiyJ8Q37zclP+QQvB9x0V8B3vTEcyrQmyJUEg==","signatures":[{"sig":"MEYCIQCI95OxxUVBBTqcPJHt7EfpCYm16v0PQha+ORs6ge36pgIhAJymdVY1VUI9ST0XJTH2NxSsW+GVAiHHqLsFw/3pnqxK","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":826255},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"04a0424156429fded9ccd4e9c0ff0805e9ce19dd","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.8.1_1775582431980_0.9662509803539008","host":"s3://npm-registry-packages-npm-production"}},"0.8.2":{"name":"governance-sdk","version":"0.8.2","keywords":["ai-governance","agent-safety","typescript","policy-engine","ai-agents","compliance","audit","eu-ai-act"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.8.2","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"881973978b677be18cb3f24de934d647521080e4","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.8.2.tgz","fileCount":205,"integrity":"sha512-I3U7L6I1CRRCSndTxgsQ5V1BM1cpyVflrrx7bApuSpEza5CqcOa9yWIOUgL/pW2zgQtdmfniihxSB1Zeq4Lf/w==","signatures":[{"sig":"MEYCIQCG4bFab6WzVs0wkUKHIKYjmOVX1/JuPBja/6pv97usLAIhAPzVBCBIszLyiw5iTdfghxDR1TlBhWBn3N8DvoiHsa2S","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":829801},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"e599df8eea91e66250bb3ff36fc2f2396befe959","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.8.2_1775602692470_0.306030951265972","host":"s3://npm-registry-packages-npm-production"}},"0.8.3":{"name":"governance-sdk","version":"0.8.3","keywords":["ai-governance","agent-safety","typescript","policy-engine","ai-agents","compliance","audit","eu-ai-act"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.8.3","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"cc73f501bce9c6ff9f10cff588394fae90284fb1","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.8.3.tgz","fileCount":205,"integrity":"sha512-S+QSSLiJpmm19w2DqBIY/qUTDUZ+rBy0q0WdoUzoP8hbicy0d4bYUdENG/bxbXb/P4Yqa9QoHP6Dvetqsf2dwg==","signatures":[{"sig":"MEUCIQCEVRxTmVbZlXu8sO/IWIklaWFjd2oM2z9vq7VuDvQx5gIgAirPg8mGg3tnZ18NYLWEQJgUa9DkcU7f1UvqLkfTQpg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":829804},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"f6ab411bdee7499689dcd0c6335d2f200e14387a","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.8.3_1775607330039_0.491165175933183","host":"s3://npm-registry-packages-npm-production"}},"0.8.4":{"name":"governance-sdk","version":"0.8.4","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","crewai","bedrock","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.8.4","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"b1731c591080be67c4f02ec88ea83edf163d2233","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.8.4.tgz","fileCount":205,"integrity":"sha512-Y0JckcyFaCwUm2ZCTsykKStSaburunRugTaqq4GtEqE196EAX81HMqndtqN+zy8TMay5Jk3qElqKlTPNsdhEaw==","signatures":[{"sig":"MEQCIHe7fGyiIw8n48kJ8amCm09S+39qHk4xHIIwPupMGHhOAiAR92KtvNfZRkUkMeOPDo3NyZ1B92UTYEKNhgYUrfUKhA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":830194},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=18"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/a2a":{"types":"./dist/plugins/a2a.d.ts","import":"./dist/plugins/a2a.js"},"./plugins/e2b":{"types":"./dist/plugins/e2b.d.ts","import":"./dist/plugins/e2b.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./plugins/deno":{"types":"./dist/plugins/deno.d.ts","import":"./dist/plugins/deno.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/crewai":{"types":"./dist/plugins/crewai.d.ts","import":"./dist/plugins/crewai.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/autogen":{"types":"./dist/plugins/autogen.d.ts","import":"./dist/plugins/autogen.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./plugins/composio":{"types":"./dist/plugins/composio.d.ts","import":"./dist/plugins/composio.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/cloudflare-ai":{"types":"./dist/plugins/cloudflare-ai.d.ts","import":"./dist/plugins/cloudflare-ai.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/semantic-kernel":{"types":"./dist/plugins/semantic-kernel.d.ts","import":"./dist/plugins/semantic-kernel.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"9f111247c3e7ae9a2aa9eeb996fe9f82b3a105f8","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","e2b":">=0.16.0","genkit":">=0.5.0","ollama":">=0.5.0","autogen":">=0.1.0","crewai-js":">=0.1.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@cloudflare/ai":">=1.0.0","@composio/core":">=0.6.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@microsoft/semantic-kernel":">=0.1.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"e2b":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"autogen":{"optional":true},"crewai-js":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@cloudflare/ai":{"optional":true},"@composio/core":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@microsoft/semantic-kernel":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.8.4_1775612262120_0.06159617427011499","host":"s3://npm-registry-packages-npm-production"}},"0.9.0":{"name":"governance-sdk","version":"0.9.0","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.9.0","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"56eb5e0aa7941aa9d0391f035d462315b1a31a66","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.9.0.tgz","fileCount":201,"integrity":"sha512-APH3DTRmttPnfCizw/nluxSeAnDYvnWiQzp9Q9hk3Jv42U8RtGS4uFvFIqzsFHSklIVxXRPrZLITqDtRd1C16w==","signatures":[{"sig":"MEUCIQCfYEYrmScm8IRvaf7U0ffIH9+XifVZ+H3e/HqA7HKB8wIgZEZijK0ic9vZb2B6d2Xz8qr8xeIUqVgWel53OvRun9o=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":890797},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./sandbox":{"types":"./dist/sandbox.d.ts","import":"./dist/sandbox.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./federation":{"types":"./dist/federation.d.ts","import":"./dist/federation.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./eval-red-team":{"types":"./dist/eval-red-team.d.ts","import":"./dist/eval-red-team.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"5bb292094782348d5ee6b4d5f0a7c988a7f8321d","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.9.0_1776203856404_0.947357184208315","host":"s3://npm-registry-packages-npm-production"}},"0.10.0":{"name":"governance-sdk","version":"0.10.0","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.10.0","maintainers":[{"name":"scotty595","email":"scott@waddells.co.nz"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"4dee5f60598c2968822480e6a2e10b3559fbdffe","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.10.0.tgz","fileCount":199,"integrity":"sha512-Wdpjw3w47xDU02eM33J4zmsqwMd2XsJoRli+dwTuAcu60w9w2b8MShZd1ZiwBFa+0QHckdBzKDmlGIwkLg9i6w==","signatures":[{"sig":"MEQCIG+HGIREswGgy0QsbEu/7EVWZa7G7iL5krTypj8szHweAiAo8OPmv/7B4U6G5/H/0V+O229cwXK085oCx1ESGlbefA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":913043},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"cd59a244a2967be81a22428af81be5ff838345e4","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@waddells.co.nz"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.10.0_1776252365565_0.7563375298490052","host":"s3://npm-registry-packages-npm-production"}},"0.10.1":{"name":"governance-sdk","version":"0.10.1","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.10.1","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"5b9602a6a0c2209c23ad3435574183545e7d8333","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.10.1.tgz","fileCount":201,"integrity":"sha512-RQZEoWJTE94T8LLSGBcTB8HzSH+rPhQiILKtpF5xn/xnb05WKpfk1+K0RufVUCYP1tOegqGSas73x07GjjSIWw==","signatures":[{"sig":"MEQCID8RdZbMpO4uadwpdlpFLp/Lmk5qveoPT+uqiR93Ng0VAiA+Qge++knJldo2hneNTNFyJRLET1njW/UfD/ZrOEYnTw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":926583},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./eval-trace":{"types":"./dist/eval-trace.d.ts","import":"./dist/eval-trace.js"},"./eval-types":{"types":"./dist/eval-types.d.ts","import":"./dist/eval-types.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./eval-scorer":{"types":"./dist/eval-scorer.d.ts","import":"./dist/eval-scorer.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./supply-chain-sbom":{"types":"./dist/supply-chain-sbom.d.ts","import":"./dist/supply-chain-sbom.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-annotations":{"types":"./dist/plugins/mcp-annotations.d.ts","import":"./dist/plugins/mcp-annotations.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"60d6fa97e7002883158bf9ae50679a3c4680b336","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.10.1_1776254651211_0.007173882684631705","host":"s3://npm-registry-packages-npm-production"}},"0.11.0":{"name":"governance-sdk","version":"0.11.0","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.11.0","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"6d731238eb607440c8b5e2b4c692b37503645f6b","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.11.0.tgz","fileCount":191,"integrity":"sha512-y3d9LAaOduXYRGO4DvnCkp4qNR1HM6KJEIw7AseiE1n5igrW2dIjX8K+WHG9J2Ski1SVaqjqpoWIbI9uSE+rUA==","signatures":[{"sig":"MEUCIQCDWBdwZrH9Y0fmZNzOe8pZlq3ZPPLj8Zu+jtmW6KVqEQIgeTiiNeE/54ZXIJeHKhqx7m0WdI7YnYme7FHUM4yDOJM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":887845},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"b0fb63e0f42d386fb9f65554c014917cfffb32b3","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.11.0_1776292393269_0.8204342684706092","host":"s3://npm-registry-packages-npm-production"}},"0.11.1":{"name":"governance-sdk","version":"0.11.1","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.11.1","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"6f6db438467666bc7b097ec964c89fc0ef26f999","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.11.1.tgz","fileCount":191,"integrity":"sha512-UC1YwFkI7A43hM0jWnf4Hn2qIgtsyENiRYgykJnmJkkwFr8ZtcvNtjz9uKpQL2ExZeOsZANue7wXOwEr71Feiw==","signatures":[{"sig":"MEUCIQCxRAtQSMqzxWAnKrd1Kv2hCQRJtITuIlHciLyiWBtb9gIgcFQLm0Yv0Eo49ucBFKgo0ryz3jb3ho7T/vXOGFqYTsI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":895631},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"5cff57903c705dd8fd7cf7ff126d0d636fba98a6","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.11.1_1776296953291_0.7165105739190061","host":"s3://npm-registry-packages-npm-production"}},"0.11.2":{"name":"governance-sdk","version":"0.11.2","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.11.2","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"cc3d0d66c0b6ae6544d767de8cc5123cc66ab5bf","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.11.2.tgz","fileCount":191,"integrity":"sha512-4wOmKiMEbF+OwZjoWsZtSm57B6JTY+4+JR1FNrErlXvVdpz+lNJHJA0mHCgw4+AjwLMW5gOb2E2O+BZ2BHQtYg==","signatures":[{"sig":"MEQCIAVbWirmatBs9ia0bRzh8AfgZCkYFNQgjO+/J46xjynPAiBAZ06c8YIohSk8pJ+UzoOmKi1IkM7zkT4eff4OHTlPEQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":895669},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"}},"gitHead":"cdea38a365fb0f4355ab18b3d6c077a87d9226f5","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"node ../../scripts/sync-readme.mjs && tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.11.2_1776298431953_0.8627202824569133","host":"s3://npm-registry-packages-npm-production"}},"0.12.0":{"name":"governance-sdk","version":"0.12.0","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.12.0","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"0f433e989cc94ea38d5e5bc163f46e8112763d8f","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.12.0.tgz","fileCount":195,"integrity":"sha512-V35mtIy05rwGtLB0/gOWWxGb2y/pGmc9GUrcN5dGTVFdsYWwvWkthKsKzWY1cMYNLsRuTRpwSpAKOzhBB2j49A==","signatures":[{"sig":"MEQCIDRpIvVlBlMQtnxnhxkG3zJYtKaydjc+pZWtfiT45uyKAiA5Cdd8cEsg2NGW3kjwEpi6i0PvOnuvXUXpwJMH1U66SQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":916033},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/mcp-allowlist":{"types":"./dist/plugins/mcp-allowlist.d.ts","import":"./dist/plugins/mcp-allowlist.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"},"./plugins/mcp-call-recorder":{"types":"./dist/plugins/mcp-call-recorder.d.ts","import":"./dist/plugins/mcp-call-recorder.js"}},"gitHead":"85075e284dd34d494ce55c83a3548cf253e17881","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"node ../../scripts/sync-readme.mjs && tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.12.0_1776358743072_0.4670770343474615","host":"s3://npm-registry-packages-npm-production"}},"0.13.0":{"name":"governance-sdk","version":"0.13.0","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.13.0","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"82054677c5f5cac2d1c44ce6f59367cef0a9e78c","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.13.0.tgz","fileCount":195,"integrity":"sha512-Mk2feI9MPM1wA5DFNIt2O6vU5teKc1j8lYxTErWjwJOpBN+aNl2GSJzIwxey4Ht1iw37E0C468UXVMT6rnxEUA==","signatures":[{"sig":"MEYCIQD6ivVq7Iq2qiJbFKpbfHuWK4A1z+a/CqstB6Xu0+apiQIhAI7wR934jA2TUA1CnavndFAAyyBEY4raJjEqamOQq4TS","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":919834},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/mcp-allowlist":{"types":"./dist/plugins/mcp-allowlist.d.ts","import":"./dist/plugins/mcp-allowlist.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"},"./plugins/mcp-call-recorder":{"types":"./dist/plugins/mcp-call-recorder.d.ts","import":"./dist/plugins/mcp-call-recorder.js"}},"gitHead":"a1a545a43e69b0fdbc5de7109b0d6a3885527564","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"node ../../scripts/sync-readme.mjs && tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.13.0_1776361526715_0.10597047768004475","host":"s3://npm-registry-packages-npm-production"}},"0.13.1":{"name":"governance-sdk","version":"0.13.1","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.13.1","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"a6714170e690c8ff163dfcf2e5a59a715b7ab06a","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.13.1.tgz","fileCount":195,"integrity":"sha512-SFcJplo1sJMFG5fxNxAWES7g62lQMrfeF+kX2N/iHe0Q7YC03zu4o1rfsRCJWKU7uurqm0lXlg8Y8I/15cB4lg==","signatures":[{"sig":"MEUCICJe1qDwRBLcIZYKwqF3OjsztO6Ty0QLgx/8CsCqwhsnAiEA1ZJdlYpOO1ELnlJUBxR49U2OoVb9OWQaBJCKsIrw93c=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":923444},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/mcp-allowlist":{"types":"./dist/plugins/mcp-allowlist.d.ts","import":"./dist/plugins/mcp-allowlist.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"},"./plugins/mcp-call-recorder":{"types":"./dist/plugins/mcp-call-recorder.d.ts","import":"./dist/plugins/mcp-call-recorder.js"}},"gitHead":"b0f1ed52e5e2b950f2f2be30cd2ff37f4967d6c5","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"node ../../scripts/sync-readme.mjs && tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.13.1_1776792190455_0.4953718077746647","host":"s3://npm-registry-packages-npm-production"}},"0.13.2":{"name":"governance-sdk","version":"0.13.2","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.13.2","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"1e0b1bf1e99b72fb8271c4b7c9b0d4dc6b12cde3","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.13.2.tgz","fileCount":195,"integrity":"sha512-vCnXqH4XHfQsq2sWzyu0QDbKOa6rA+1Kp/zZN8VS7X1Re74SzFMUHc1hYTkdvWdvfaXk6OG6CgIIXaIfZR5J2Q==","signatures":[{"sig":"MEUCICj8tGANyUZ9eH6TlRFinQaMoC6rNlCd6u4Zyr8btZZJAiEA5EimuHsu3Olvlm33PZgA8PuXQH+x+xbezgZlVSdE/sk=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":926487},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/mcp-allowlist":{"types":"./dist/plugins/mcp-allowlist.d.ts","import":"./dist/plugins/mcp-allowlist.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"},"./plugins/mcp-call-recorder":{"types":"./dist/plugins/mcp-call-recorder.d.ts","import":"./dist/plugins/mcp-call-recorder.js"}},"gitHead":"ce32af5a8ddf50aee4fcdf659cb301d07ce8559a","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"node ../../scripts/sync-readme.mjs && tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.13.2_1776817335451_0.5588569635041307","host":"s3://npm-registry-packages-npm-production"}},"0.14.0":{"name":"governance-sdk","version":"0.14.0","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.14.0","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"be469e4c46cb5213343c17e48afa3963e6fb1c7f","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.14.0.tgz","fileCount":199,"integrity":"sha512-nXR/69ixV/0Mor1femQVleYq8UtAatuvpjoxZuLJncuNVULKzLROukq76wRB2k68ECci4ZfQU7ghmhWwkOB1hg==","signatures":[{"sig":"MEUCIFamde0Vno4mNPqjD3u9WzZvJkSifqJwCWxp6ypONcL0AiEAxe+B9LDWE9ZPe8sXFnXCLqjrtJGYy/jWLj4b3LYUaH8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":955436},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/mcp-allowlist":{"types":"./dist/plugins/mcp-allowlist.d.ts","import":"./dist/plugins/mcp-allowlist.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"},"./plugins/mcp-call-recorder":{"types":"./dist/plugins/mcp-call-recorder.d.ts","import":"./dist/plugins/mcp-call-recorder.js"}},"gitHead":"b2e1c8f72cd626312c1f7755fcc1a9ead4107688","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"node ../../scripts/sync-readme.mjs && tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.14.0_1777505297833_0.4637122074441369","host":"s3://npm-registry-packages-npm-production"}},"0.14.1":{"name":"governance-sdk","version":"0.14.1","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.14.1","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"09dca6d6eb25201541597d8b923836a40aa7f54b","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.14.1.tgz","fileCount":199,"integrity":"sha512-lMpVE8oxiECA9MRnVdxSZMuT2JnyotMx4KynRQAIaJvlFCozXMbQYHkObU3HtZA4vU34aJGVUKiVNz01OfrSFQ==","signatures":[{"sig":"MEUCIEvTl13oVTDjZsdlPl4Pg1t2OzOlOGOiwqisuDcP20QeAiEA84uHRWiJhi68OKDHQ64GRy6E5vr3CKwxndh3zA+/3gY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":956181},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/mcp-allowlist":{"types":"./dist/plugins/mcp-allowlist.d.ts","import":"./dist/plugins/mcp-allowlist.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"},"./plugins/mcp-call-recorder":{"types":"./dist/plugins/mcp-call-recorder.d.ts","import":"./dist/plugins/mcp-call-recorder.js"}},"gitHead":"13e00616be80e54a06abddc82cb038e16cefb1a5","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"node ../../scripts/sync-readme.mjs && tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.14.1_1777508045704_0.6832339199183115","host":"s3://npm-registry-packages-npm-production"}},"0.15.0":{"name":"governance-sdk","version":"0.15.0","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.15.0","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"0738e496f4291707e817570e9de8cfc6e4040c72","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.15.0.tgz","fileCount":201,"integrity":"sha512-weu9+eWo35eOhoztieVL5BvLULjCkjY2bx9pyhuI8sJdujBDBd3tpL4+re00/LjHy5ww1I5nPfvO3m++NyIINA==","signatures":[{"sig":"MEQCIDTUy2LIPmQbldVR3+zjGBHwuHexp62HBqv7mYC2zJZiAiAOY2QMkLtpULHLrTzw3aOonzmnShmqmq5ongdPxh9rVA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":984001},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./scan/multi-modal":{"types":"./dist/scan/multi-modal.d.ts","import":"./dist/scan/multi-modal.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/mcp-allowlist":{"types":"./dist/plugins/mcp-allowlist.d.ts","import":"./dist/plugins/mcp-allowlist.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"},"./plugins/mcp-call-recorder":{"types":"./dist/plugins/mcp-call-recorder.d.ts","import":"./dist/plugins/mcp-call-recorder.js"}},"gitHead":"988db460ce0c232c7f6b5f13f86f5ac030ff4bc3","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"node ../../scripts/sync-readme.mjs && tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.15.0_1777559296148_0.683695852206325","host":"s3://npm-registry-packages-npm-production"}},"0.16.0":{"name":"governance-sdk","version":"0.16.0","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.16.0","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"0fa41d2c6665f61e38f33155e2a4d22bef843ab6","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.16.0.tgz","fileCount":201,"integrity":"sha512-XhpIAmnSkWw8NGh9mhtXLUwoGsAaaSfIZYGXS4J0rIRhbX+lEUg246wZDe06SvoM7JBRYDUuV7BEDgiKWHixrg==","signatures":[{"sig":"MEQCIHvGDxOPvSfp7YBuklrlopF+TyGBtumzaveyVmtKRWcVAiAUIYqRvJDCmZDfHUjHN5f2H4FXDmCfF5jeT69tPlqAOA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":994294},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./scan/multi-modal":{"types":"./dist/scan/multi-modal.d.ts","import":"./dist/scan/multi-modal.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/mcp-allowlist":{"types":"./dist/plugins/mcp-allowlist.d.ts","import":"./dist/plugins/mcp-allowlist.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"},"./plugins/mcp-call-recorder":{"types":"./dist/plugins/mcp-call-recorder.d.ts","import":"./dist/plugins/mcp-call-recorder.js"}},"gitHead":"2e94d681ad87d9f47cfbfeb18454c37a67a9be05","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"node ../../scripts/sync-readme.mjs && tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.16.0_1777570717361_0.8983861170852037","host":"s3://npm-registry-packages-npm-production"}},"0.17.0":{"name":"governance-sdk","version":"0.17.0","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.17.0","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"1b24d365bd10f7eba2d82eb7a39ce64289e8620d","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.17.0.tgz","fileCount":201,"integrity":"sha512-KwjEE2ihHQ1hwR7amA97zrdLmGlOdQvZvhFuBgYydtAL1v1mrej9oQFNtmuavuO9wWUaW/p8N1eTF9+W3qNITQ==","signatures":[{"sig":"MEQCICSOxB6aUvc+Qe/JExDUi7l6r92gEhPXi1X3IVsQprQEAiAncwbVfeLByqbbEp5GUKjILW8xY8aRpPp+cnnRpz6B/A==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":998049},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./scan/multi-modal":{"types":"./dist/scan/multi-modal.d.ts","import":"./dist/scan/multi-modal.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/mcp-allowlist":{"types":"./dist/plugins/mcp-allowlist.d.ts","import":"./dist/plugins/mcp-allowlist.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"},"./plugins/mcp-call-recorder":{"types":"./dist/plugins/mcp-call-recorder.d.ts","import":"./dist/plugins/mcp-call-recorder.js"}},"gitHead":"6f1992db358d8f668e65cba25bf510f00806e95f","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"node ../../scripts/sync-readme.mjs && tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.7","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.22.2","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.17.0_1778190026218_0.25845543017904316","host":"s3://npm-registry-packages-npm-production"}},"0.18.0":{"name":"governance-sdk","version":"0.18.0","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.18.0","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"e943ebbb3e0b33c76c0203b3dd7605ab59052049","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.18.0.tgz","fileCount":201,"integrity":"sha512-cBPaPr/Cro4GQHRqbxOtES3QjA05fkc62SfaGp6TE7W2oGAmwAz3l7ZyDY/EGR1denqkZjCVZcPbbRI3+FRG3Q==","signatures":[{"sig":"MEYCIQDyTVaJlONcR35FcKGgPoyVQnhW63ZmgW49mEIELJasvgIhAPXM2tHJuaBPSiKg5AYFWXsKbW6osVqCyoacJaNbAuki","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1003988},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./scan/multi-modal":{"types":"./dist/scan/multi-modal.d.ts","import":"./dist/scan/multi-modal.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/mcp-allowlist":{"types":"./dist/plugins/mcp-allowlist.d.ts","import":"./dist/plugins/mcp-allowlist.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"},"./plugins/mcp-call-recorder":{"types":"./dist/plugins/mcp-call-recorder.d.ts","import":"./dist/plugins/mcp-call-recorder.js"}},"gitHead":"0b90cce9835e82d11f60d0a982f4e27bca0cd205","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"node ../../scripts/sync-readme.mjs && tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.8","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.23.0","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.18.0_1782459962372_0.15787275230713727","host":"s3://npm-registry-packages-npm-production"}},"0.18.1":{"name":"governance-sdk","version":"0.18.1","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.18.1","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"7f8703eaa41eeacea342b13e40be3bfef34094e7","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.18.1.tgz","fileCount":201,"integrity":"sha512-4wHbwc/5n3WMZYT7bgO/yRoKOcZnGZEnmfQ4unUVhFfMHbyqwiOOw0uMdSmIUyIrZGvxcubJnMEuMpMdezEyPw==","signatures":[{"sig":"MEYCIQCQGvTyjaKfSB/BvxiPuESo24kf5TSm7B6nu5DZFYmsfgIhAIfce42OiiDhsOUiVS3hGhLzQvdziD0pZl+c49JvhP9o","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1010210},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./scan/multi-modal":{"types":"./dist/scan/multi-modal.d.ts","import":"./dist/scan/multi-modal.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/mcp-allowlist":{"types":"./dist/plugins/mcp-allowlist.d.ts","import":"./dist/plugins/mcp-allowlist.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"},"./plugins/mcp-call-recorder":{"types":"./dist/plugins/mcp-call-recorder.d.ts","import":"./dist/plugins/mcp-call-recorder.js"}},"gitHead":"80d3aaf5c9502a765cb1d1e9efcfca83e5e7686f","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"node ../../scripts/sync-readme.mjs && tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.8","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.23.0","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.18.1_1782469857877_0.5675950879211606","host":"s3://npm-registry-packages-npm-production"}},"0.18.2":{"name":"governance-sdk","version":"0.18.2","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.18.2","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"be83ea08f08f4e4eb7769d02819ad2b863d2f3a4","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.18.2.tgz","fileCount":201,"integrity":"sha512-vThWiyuKI8htJI8d6IWFGdB/uAV4HyVSksa+hRsVRCb6gXnFnuPwz6PjnGwRO3XzISHqa8AW57yyzhvWyaIQDQ==","signatures":[{"sig":"MEUCIQCC/qqcUhR1lmaUS66xARutswiOna9kEBQRcWKm2kCeIwIgT123xWhn6uzi5vcLJ+Bj53QqbuiQkuEnW9Cbig6CEV0=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1028893},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./scan/multi-modal":{"types":"./dist/scan/multi-modal.d.ts","import":"./dist/scan/multi-modal.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/mcp-allowlist":{"types":"./dist/plugins/mcp-allowlist.d.ts","import":"./dist/plugins/mcp-allowlist.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"},"./plugins/mcp-call-recorder":{"types":"./dist/plugins/mcp-call-recorder.d.ts","import":"./dist/plugins/mcp-call-recorder.js"}},"gitHead":"7cc57dc63b1194be08e7b324825e82d849f04ae8","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"node ../../scripts/sync-readme.mjs && tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.8","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.23.1","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.18.2_1784547104211_0.41822805422099907","host":"s3://npm-registry-packages-npm-production"}},"0.19.0":{"name":"governance-sdk","version":"0.19.0","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"url":"https://heylua.ai","name":"Lua","email":"hello@heylua.ai"},"license":"MIT","_id":"governance-sdk@0.19.0","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"homepage":"https://heygovernance.ai","bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"bin":{"governance-sdk":"dist/cli/init.js"},"dist":{"shasum":"7964908819ebe5ba77af28bb02b716e255359335","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.19.0.tgz","fileCount":201,"integrity":"sha512-gaPMCfLwHEYr1s56EOxrPL94Ti76ChdLELLHX+0EeXoV7xNJ2sUYEAMXLcyaOwweWwRhkhPP3jEEBfJaQ1ZwQw==","signatures":[{"sig":"MEQCIDdyLrtwKx7ulXYGL6Y9Fm6rR4ESigBqUYI+Jdlm1DbMAiB1Ev3gUqsKFyKBOCAPH4xKM9e/iPyYVbmMsS+PdBj/pw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1031399},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","engines":{"node":">=20"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./scan/multi-modal":{"types":"./dist/scan/multi-modal.d.ts","import":"./dist/scan/multi-modal.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./plugins/mcp-allowlist":{"types":"./dist/plugins/mcp-allowlist.d.ts","import":"./dist/plugins/mcp-allowlist.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"},"./plugins/mcp-call-recorder":{"types":"./dist/plugins/mcp-call-recorder.d.ts","import":"./dist/plugins/mcp-call-recorder.js"}},"gitHead":"926c326bdf745993a900af1df19674ff72c51138","scripts":{"dev":"tsc --watch","lint":"tsc --noEmit","test":"tsx --test src/*.test.ts src/**/*.test.ts","build":"tsc && node scripts/fix-esm-imports.mjs","prepublishOnly":"node ../../scripts/sync-readme.mjs && tsc"},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"repository":{"url":"git+https://github.com/lua-ai-global/governance.git","type":"git"},"_npmVersion":"10.9.8","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","directories":{},"_nodeVersion":"22.23.1","publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_hasShrinkwrap":false,"devDependencies":{"tsx":"^4.19.0","typescript":"^5.7.0","@types/node":"^25.4.0"},"peerDependencies":{"ai":">=3.0.0","pg":">=8.0.0","genkit":">=0.5.0","ollama":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","@mastra/core":">=1.0.0","openai-agents":">=0.1.0","@anthropic-ai/sdk":">=0.20.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0"},"peerDependenciesMeta":{"ai":{"optional":true},"pg":{"optional":true},"genkit":{"optional":true},"ollama":{"optional":true},"langchain":{"optional":true},"llamaindex":{"optional":true},"@mastra/core":{"optional":true},"openai-agents":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/governance-sdk_0.19.0_1784548490643_0.8123983170525939","host":"s3://npm-registry-packages-npm-production"}},"0.20.0":{"name":"governance-sdk","version":"0.20.0","description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","type":"module","main":"./dist/index.js","types":"./dist/index.d.ts","bin":{"governance-sdk":"dist/cli/init.js"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"},"./policy":{"types":"./dist/policy.d.ts","import":"./dist/policy.js"},"./scorer":{"types":"./dist/scorer.d.ts","import":"./dist/scorer.js"},"./plugins/mastra":{"types":"./dist/plugins/mastra.d.ts","import":"./dist/plugins/mastra.js"},"./plugins/mastra-processor":{"types":"./dist/plugins/mastra-processor.d.ts","import":"./dist/plugins/mastra-processor.js"},"./plugins/vercel-ai":{"types":"./dist/plugins/vercel-ai.d.ts","import":"./dist/plugins/vercel-ai.js"},"./plugins/langchain":{"types":"./dist/plugins/langchain.d.ts","import":"./dist/plugins/langchain.js"},"./audit-integrity":{"types":"./dist/audit-integrity.d.ts","import":"./dist/audit-integrity.js"},"./storage-postgres-schema":{"types":"./dist/storage-postgres-schema.d.ts","import":"./dist/storage-postgres-schema.js"},"./compliance":{"types":"./dist/compliance.d.ts","import":"./dist/compliance.js"},"./kill-switch":{"types":"./dist/kill-switch.d.ts","import":"./dist/kill-switch.js"},"./storage-postgres":{"types":"./dist/storage-postgres.d.ts","import":"./dist/storage-postgres.js"},"./injection-detect":{"types":"./dist/injection-detect.d.ts","import":"./dist/injection-detect.js"},"./behavioral-scorer":{"types":"./dist/behavioral-scorer.d.ts","import":"./dist/behavioral-scorer.js"},"./repo-patterns":{"types":"./dist/repo-patterns.d.ts","import":"./dist/repo-patterns.js"},"./scanner-plugins":{"types":"./dist/scanner-plugins/types.d.ts","import":"./dist/scanner-plugins/types.js"},"./scan/multi-modal":{"types":"./dist/scan/multi-modal.d.ts","import":"./dist/scan/multi-modal.js"},"./policy-compose":{"types":"./dist/policy-compose.d.ts","import":"./dist/policy-compose.js"},"./events":{"types":"./dist/events.d.ts","import":"./dist/events.js"},"./metrics":{"types":"./dist/metrics.d.ts","import":"./dist/metrics.js"},"./plugins/openai-agents":{"types":"./dist/plugins/openai-agents.d.ts","import":"./dist/plugins/openai-agents.js"},"./dry-run":{"types":"./dist/dry-run.d.ts","import":"./dist/dry-run.js"},"./plugins/mcp":{"types":"./dist/plugins/mcp.d.ts","import":"./dist/plugins/mcp.js"},"./plugins/bedrock":{"types":"./dist/plugins/bedrock.d.ts","import":"./dist/plugins/bedrock.js"},"./plugins/genkit":{"types":"./dist/plugins/genkit.d.ts","import":"./dist/plugins/genkit.js"},"./plugins/llamaindex":{"types":"./dist/plugins/llamaindex.d.ts","import":"./dist/plugins/llamaindex.js"},"./plugins/anthropic":{"types":"./dist/plugins/anthropic.d.ts","import":"./dist/plugins/anthropic.js"},"./plugins/mistral":{"types":"./dist/plugins/mistral.d.ts","import":"./dist/plugins/mistral.js"},"./plugins/ollama":{"types":"./dist/plugins/ollama.d.ts","import":"./dist/plugins/ollama.js"},"./owasp-agentic":{"types":"./dist/owasp-agentic.d.ts","import":"./dist/owasp-agentic.js"},"./nist-ai-rmf":{"types":"./dist/nist-ai-rmf.d.ts","import":"./dist/nist-ai-rmf.js"},"./otel-hooks":{"types":"./dist/otel-hooks.d.ts","import":"./dist/otel-hooks.js"},"./agent-identity":{"types":"./dist/agent-identity.d.ts","import":"./dist/agent-identity.js"},"./agent-identity-ed25519":{"types":"./dist/agent-identity-ed25519.d.ts","import":"./dist/agent-identity-ed25519.js"},"./supply-chain":{"types":"./dist/supply-chain.d.ts","import":"./dist/supply-chain.js"},"./supply-chain-cyclonedx":{"types":"./dist/supply-chain-cyclonedx.d.ts","import":"./dist/supply-chain-cyclonedx.js"},"./audit-integrity-verify":{"types":"./dist/audit-integrity-verify.d.ts","import":"./dist/audit-integrity-verify.js"},"./action-recorder":{"types":"./dist/action-recorder.d.ts","import":"./dist/action-recorder.js"},"./plugins/mcp-trust":{"types":"./dist/plugins/mcp-trust.d.ts","import":"./dist/plugins/mcp-trust.js"},"./plugins/mcp-allowlist":{"types":"./dist/plugins/mcp-allowlist.d.ts","import":"./dist/plugins/mcp-allowlist.js"},"./plugins/mcp-chain-audit":{"types":"./dist/plugins/mcp-chain-audit.d.ts","import":"./dist/plugins/mcp-chain-audit.js"},"./plugins/mcp-call-recorder":{"types":"./dist/plugins/mcp-call-recorder.d.ts","import":"./dist/plugins/mcp-call-recorder.js"},"./injection-classifier":{"types":"./dist/injection-classifier.d.ts","import":"./dist/injection-classifier.js"},"./policy-builder":{"types":"./dist/policy-builder.d.ts","import":"./dist/policy-builder.js"},"./policy-yaml":{"types":"./dist/policy-yaml.d.ts","import":"./dist/policy-yaml.js"},"./iso-42001":{"types":"./dist/iso-42001.d.ts","import":"./dist/iso-42001.js"},"./injection-benchmark":{"types":"./dist/injection-benchmark.d.ts","import":"./dist/injection-benchmark.js"},"./token-types":{"types":"./dist/token-types.d.ts","import":"./dist/token-types.js"}},"scripts":{"build":"tsc && node scripts/fix-esm-imports.mjs","dev":"tsc --watch","test":"tsx --test src/*.test.ts src/**/*.test.ts","lint":"tsc --noEmit","prepublishOnly":"node ../../scripts/sync-readme.mjs && tsc"},"keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"author":{"name":"Lua","email":"hello@heylua.ai","url":"https://heylua.ai"},"license":"MIT","publishConfig":{"registry":"https://registry.npmjs.org","access":"public"},"repository":{"type":"git","url":"git+https://github.com/lua-ai-global/governance.git"},"bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"homepage":"https://heygovernance.ai","engines":{"node":">=20"},"peerDependencies":{"@anthropic-ai/sdk":">=0.20.0","@aws-sdk/client-bedrock-agent-runtime":">=3.0.0","@mastra/core":">=1.0.0","@mistralai/mistralai":">=0.1.0","@modelcontextprotocol/sdk":">=1.0.0","ai":">=3.0.0","genkit":">=0.5.0","langchain":">=0.1.0","llamaindex":">=0.1.0","ollama":">=0.5.0","openai-agents":">=0.1.0","pg":">=8.0.0"},"peerDependenciesMeta":{"@mastra/core":{"optional":true},"ai":{"optional":true},"langchain":{"optional":true},"openai-agents":{"optional":true},"pg":{"optional":true},"@modelcontextprotocol/sdk":{"optional":true},"@aws-sdk/client-bedrock-agent-runtime":{"optional":true},"genkit":{"optional":true},"llamaindex":{"optional":true},"@anthropic-ai/sdk":{"optional":true},"@mistralai/mistralai":{"optional":true},"ollama":{"optional":true}},"devDependencies":{"@types/node":"^25.4.0","tsx":"^4.22.4","typescript":"^5.7.0"},"_id":"governance-sdk@0.20.0","gitHead":"8816d91f6cceceb6774795fdf5c84a35c4080011","_nodeVersion":"22.23.1","_npmVersion":"10.9.8","dist":{"integrity":"sha512-q7eBTlGqIEeBQXRrnhk6bhoLRbcIDjjYOfmXbaF81nqYBv7v3EjDK6SFHYjNBNGt1k34wH+WXTPS70VU+4Ppuw==","shasum":"faf80243d529cb47cd3af8661185078e89dbe574","tarball":"https://registry.npmjs.org/governance-sdk/-/governance-sdk-0.20.0.tgz","fileCount":201,"unpackedSize":1033827,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQC8wIpBaA8NwagG2S24bnuVIte3OgpBUMETraFjEloU9wIgUvfko8IXJ5Wnp0A1HbD21gelf7g1YvI59w+RN7MythI="}]},"_npmUser":{"name":"scotty595","email":"scott@heylua.ai"},"directories":{},"maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/governance-sdk_0.20.0_1786269384691_0.4888714216254737"},"_hasShrinkwrap":false}},"time":{"created":"2026-04-02T17:41:18.897Z","modified":"2026-08-09T09:56:24.997Z","0.5.0":"2026-04-02T17:41:19.257Z","0.5.1":"2026-04-03T08:22:20.130Z","0.5.2":"2026-04-03T10:14:15.579Z","0.6.0":"2026-04-03T11:22:51.232Z","0.6.1":"2026-04-03T12:22:15.695Z","0.6.2":"2026-04-04T23:34:38.944Z","0.6.3":"2026-04-04T23:39:27.432Z","0.6.4":"2026-04-05T01:03:41.226Z","0.7.0":"2026-04-05T02:51:55.870Z","0.7.1":"2026-04-05T11:38:09.699Z","0.7.2":"2026-04-06T11:18:57.083Z","0.8.0":"2026-04-06T21:57:12.007Z","0.8.1":"2026-04-07T17:20:32.214Z","0.8.2":"2026-04-07T22:58:12.630Z","0.8.3":"2026-04-08T00:15:30.302Z","0.8.4":"2026-04-08T01:37:42.337Z","0.9.0":"2026-04-14T21:57:36.609Z","0.10.0":"2026-04-15T11:26:05.728Z","0.10.1":"2026-04-15T12:04:11.461Z","0.11.0":"2026-04-15T22:33:13.508Z","0.11.1":"2026-04-15T23:49:13.488Z","0.11.2":"2026-04-16T00:13:52.177Z","0.12.0":"2026-04-16T16:59:03.267Z","0.13.0":"2026-04-16T17:45:26.876Z","0.13.1":"2026-04-21T17:23:10.671Z","0.13.2":"2026-04-22T00:22:15.641Z","0.14.0":"2026-04-29T23:28:18.050Z","0.14.1":"2026-04-30T00:14:05.965Z","0.15.0":"2026-04-30T14:28:16.330Z","0.16.0":"2026-04-30T17:38:37.548Z","0.17.0":"2026-05-07T21:40:26.403Z","0.18.0":"2026-06-26T07:46:02.526Z","0.18.1":"2026-06-26T10:30:58.094Z","0.18.2":"2026-07-20T11:31:44.366Z","0.19.0":"2026-07-20T11:54:50.841Z","0.20.0":"2026-08-09T09:56:24.838Z"},"bugs":{"url":"https://github.com/lua-ai-global/governance/issues"},"author":{"name":"Lua","email":"hello@heylua.ai","url":"https://heylua.ai"},"license":"MIT","homepage":"https://heygovernance.ai","keywords":["ai-governance","ai-agents","agent-safety","agent-security","policy-engine","prompt-injection","injection-detection","compliance","eu-ai-act","owasp","nist","audit-trail","kill-switch","mcp","mcp-governance","langchain","openai","anthropic","vercel-ai","mastra","llamaindex","human-in-the-loop","approval-workflow","tool-governance","ai-safety","guardrails","typescript"],"repository":{"type":"git","url":"git+https://github.com/lua-ai-global/governance.git"},"description":"AI Agent Governance for TypeScript — policy enforcement, scoring, compliance, and audit for AI agents","maintainers":[{"name":"scotty595","email":"scott@heylua.ai"}],"readme":"# governance-sdk\n\n**AI Agent Governance for TypeScript** — policy enforcement, behavioral scoring, injection detection, tamper-evident audit, and standards-mapped compliance for AI agents. **Zero runtime dependencies.**\n\n[![npm version](https://img.shields.io/npm/v/governance-sdk)](https://www.npmjs.com/package/governance-sdk)\n[![CI](https://github.com/lua-ai-global/governance/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/lua-ai-global/governance/actions/workflows/ci.yml)\n[![install size](https://packagephobia.com/badge?p=governance-sdk)](https://packagephobia.com/result?p=governance-sdk)\n[![dependencies](https://img.shields.io/badge/dependencies-0-brightgreen)](https://github.com/lua-ai-global/governance/blob/main/packages/governance/package.json)\n[![types](https://img.shields.io/npm/types/governance-sdk)](https://www.npmjs.com/package/governance-sdk)\n[![license](https://img.shields.io/badge/license-MIT-blue)](https://github.com/lua-ai-global/governance/blob/main/LICENSE)\n\n---\n\n## Why\n\nEvery AI agent framework lets you build agents. None of them **govern what those agents actually do at runtime**. `governance-sdk` adds policy enforcement, behavioral scoring, injection detection, and compliance auditing to any TypeScript agent — regardless of framework.\n\nThree things make governance real, and this SDK does all three:\n\n1. **Point of interception** — sits between the agent and the tool/LLM *before* it fires\n2. **Deterministic agent identity** — knows who's calling (optional Ed25519 signed tokens)\n3. **Ability to block or modify** — not just observe after the fact\n\nEverything downstream (scoring, audit, compliance) follows from those three.\n\n**Proof, not promises — tamper-evident audit by default.** Every `enforce()`\ndecision and `recordOutcome()` outcome can be HMAC hash-chained (opt in with\n`integrityAudit: { signingKey }`). Any edit, deletion, or sequence-renumber\nbreaks chain verification — verifiable offline anywhere with just the\nsecret. No competitor in the comparison table below ships this.\n\n## How it compares\n\n| | governance-sdk | NVIDIA NeMo Guardrails | Guardrails AI | LangChain guardrails |\n|---|:-:|:-:|:-:|:-:|\n| Runtime dependencies | **0** | Python runtime + LLM | Python + validator stack | LangChain |\n| TypeScript-first | **✅** | ❌ (Python) | ❌ (Python) | ✅ |\n| Framework-agnostic | **✅ (12 framework integrations)** | Rails-only | Model-wrapping | LangChain-only |\n| Policy *enforcement* (block/approval/mask) | **✅** | ✅ | ✅ | Partial |\n| Behavioral scoring / trust levels | **✅** | ❌ | ❌ | ❌ |\n| Tamper-evident audit (HMAC chain) | **✅** | ❌ | ❌ | ❌ |\n| Standards mapping (EU AI Act / OWASP / NIST / ISO 42001) | **✅** | ❌ | Partial | ❌ |\n| Ed25519 agent identity | **✅** | ❌ | ❌ | ❌ |\n| Zero-dep embedded use in any TS runtime | **✅** | ❌ | ❌ | ❌ |\n\n`governance-sdk` is the only option that's zero-dep TypeScript, framework-agnostic, and maps to all four major AI-governance standards out of the box.\n\n## Limitations & Honest Scope\n\nThe SDK is a **thin client** for local policy evaluation, scoring, and\ndetection — nothing more. To pre-empt procurement and scope questions, here\nis exactly what it does and does not do:\n\n- **Kill switch is per-process**, not fleet-wide. Distributed halt lives in\n  Lua Governance Cloud or your own pub/sub.\n- **Process isolation is the security model.** The SDK runs as in-process\n  TypeScript — `node:vm` is intentionally **not** used as a sandbox (per Node\n  docs, it's not a security boundary). For untrusted code execution, isolate\n  at the container/VM layer (containers, gVisor, Firecracker). This is a\n  deliberate scope choice: the SDK governs *known-trusted* application code\n  calling LLMs and tools, not arbitrary attacker-supplied JS.\n- **No federation.** Cross-org policy replication and signed posture exchange\n  are not currently shipped in either the SDK or Lua Governance Cloud.\n- **Injection detection is high-precision / low-recall** — regex baseline F1\n  ≈ 0.48 on the 6,931-sample LIB corpus. Layer in an ML classifier via the\n  `InjectionClassifier` interface for production coverage.\n- **Compliance mapping is self-assessment**, not legal advice or certification.\n- **No built-in observability or eval pipeline.** The `metrics` and\n  `otel-hooks` exports produce passive in-memory data structures you serialize\n  to your own monitoring system; they are NOT OpenInference-compliant and NOT\n  a replacement for Phoenix, Langfuse, Braintrust, or a real OpenTelemetry\n  exporter. A first-class OTel/OpenInference exporter is on the roadmap.\n- **No built-in eval store.** `gov.eval.*` was removed in 0.11. Use inspect-ai,\n  PyRIT, Garak, Phoenix, Langfuse, or your harness of choice and route results\n  into your audit stream via `gov.audit.log()`.\n- **Simulator does not replay side effects** — it evaluates policy outcomes\n  against synthetic scenarios, it does not execute tools.\n- **`enforce()` does not hash-chain by default** — opt in with\n  `integrityAudit: { signingKey }` for tamper-evident audit. Since 0.12\n  the chain is persisted durably (survives process restart) when the\n  storage adapter supports `createAuditEventWithIntegrity` (memory and\n  Postgres adapters both do). Since 0.18.2 that chain is also\n  **multi-process-safe** when the adapter implements `appendToAuditChain`\n  (Postgres) — see [Multi-process deployments](#multi-process-deployments).\n  HMAC chains are still only tamper-evident to holders of the signing\n  secret — rotate and pair with an external anchor if you need\n  adversary-grade non-repudiation.\n- **Cloud `register()` is a synthetic confirmation** — the API auto-registers\n  on first `enforce()`.\n- **No built-in red team / jailbreak harness.** Use inspect-ai, PyRIT, or\n  Garak — a policy-only harness would be easily mistaken for model coverage.\n- **Bedrock is entry-gate only.** The Bedrock adapter scans the prompt\n  going into `invokeAgent` and (with a helper) the final response text.\n  Tool executions **inside** AWS action groups are opaque — the adapter\n  cannot see them, let alone block them. Use `guardToolUse()` to enforce\n  at the tool level manually, or push tool calls onto the host side.\n- **Multi-modal scanning is opt-in.** Image, PDF, and audio blocks pass\n  through without injection detection by default. Register a per-modality\n  extractor with `registerModalityScanner()` and call `scanMultiModal()`\n  from `governance-sdk/scan/multi-modal` before `enforce()`; the result's\n  concatenated text feeds the existing cascade. The SDK ships the\n  orchestration only — the actual OCR / PDF parser / ASR is caller-\n  supplied so the zero-dep promise stands. Defaults to text-only;\n  per-block timeouts and fail-closed semantics (`onMissingScanner`,\n  `onExtractError`) are configurable.\n\n## Packages\n\n| Package | Description |\n|---------|-------------|\n| [`governance-sdk`](https://github.com/lua-ai-global/governance/tree/main/packages/governance) | Core SDK — policy engine, scoring, injection detection, audit, compliance, standards mapping, 12 framework integrations (10 featured + MCP toolkit + Bedrock). **0 runtime deps.** |\n| [`governance-sdk-platform`](https://github.com/lua-ai-global/governance/tree/main/packages/governance-platform) | Optional PostgreSQL storage layer — auto-migrating schema, org settings, policy tiers. |\n\n## Quick Start\n\n### Install\n\n```bash\n# Core SDK (zero dependencies)\nnpm install governance-sdk\n\n# PostgreSQL storage (optional)\nnpm install governance-sdk-platform\n```\n\nOr scaffold a project with the CLI:\n\n```bash\nnpx governance-sdk init\n```\n\n### Basic Usage\n\n```typescript\nimport { createGovernance, blockTools, rateLimit } from 'governance-sdk';\n\nconst governance = createGovernance({\n  rules: [\n    blockTools(['shell_exec', 'eval']),\n    rateLimit(100, 60_000),  // 100 actions per 60s — host populates ctx.recentActionCount\n  ],\n});\n\nconst result = await governance.enforce({\n  agentId: 'support-bot',\n  action: 'tool_call',\n  tool: 'send_email',\n  input: { to: 'user@example.com', body: 'Your ticket has been resolved.' },\n});\n\nif (result.outcome === 'block') {\n  console.error(`Blocked: ${result.reason}`);\n} else {\n  // proceed with agent action\n}\n```\n\n### Cloud Mode (Lua Governance API)\n\nConnect to [Lua Governance Cloud](https://heygovernance.ai) for ML-powered injection detection, approval workflows, fleet analytics, and a real-time dashboard.\n\n```typescript\nimport { createGovernance } from 'governance-sdk';\n\nconst gov = createGovernance({\n  serverUrl: 'https://api.heygovernance.ai',\n  apiKey: process.env.GOVERNANCE_API_KEY,\n  fallbackMode: 'allow', // fail-open if API unreachable (default)\n});\n\n// Verify connection at startup\nconst status = await gov.connect();\nconsole.log(status);\n// => { connected: true, mode: 'remote', latencyMs: 45, plan: 'pro', features: [...], agentQuota: { used: 3, limit: 25 } }\n```\n\nThe SDK retries transient failures with exponential backoff (3 attempts) and falls back gracefully when the API is unreachable — your agent never crashes from a governance outage.\n\n### Approval Flows\n\nWhen a policy returns `require_approval`, the SDK provides the approval ID and a polling helper:\n\n```typescript\nconst decision = await gov.enforce({ agentId: 'bot', action: 'deploy', tool: 'prod_deploy' });\n\nif (decision.outcome === 'require_approval') {\n  console.log(`Waiting for approval: ${decision.approval?.pollUrl}`);\n  const result = await gov.waitForApproval(decision.approvalId!, { timeoutMs: 300_000 });\n  if (result === 'approved') {\n    // proceed with deployment\n  }\n}\n```\n\n### Custom Conditions\n\nWhen the built-in condition types aren't enough, register your own evaluators directly on the governance instance — no need to drop down to `createPolicyEngine` for this. Pass them at construction or register them at runtime:\n\n```typescript\nimport { createGovernance } from 'governance-sdk';\n\n// Option A — register at construction time\nconst gov = createGovernance({\n  conditions: [\n    {\n      name: 'geo_fence',\n      description: 'Block actions outside allowed regions',\n      evaluator: (ctx, params) => {\n        const region = (ctx.metadata?.region as string | undefined) ?? '';\n        const allowed = params.allowedRegions as string[];\n        return region.length > 0 && !allowed.includes(region);\n      },\n    },\n  ],\n  rules: [{\n    id: 'geo-rule',\n    name: 'Geo fence',\n    condition: { type: 'geo_fence', params: { allowedRegions: ['us', 'eu'] } },\n    outcome: 'block',\n    reason: 'Region not allowed',\n    priority: 100,\n    enabled: true,\n  }],\n});\n\n// Option B — register after construction\ngov.registerCondition({\n  name: 'high_cost',\n  description: 'Block when session cost exceeds threshold',\n  evaluator: (ctx, params) => (ctx.sessionCost ?? 0) > (params.maxCost as number),\n});\n\ngov.addRule({\n  id: 'cost-check',\n  name: 'Cost check',\n  condition: { type: 'high_cost', params: { maxCost: 10 } },\n  outcome: 'block',\n  reason: 'Session cost over budget',\n  priority: 100,\n  enabled: true,\n});\n```\n\nMirror methods are available on the instance: `registerCondition`, `unregisterCondition`, `getRegisteredCondition`, `getRegisteredConditions`, `clearConditionRegistry`. Custom evaluators must be **synchronous** — the policy engine is sync by design.\n\n### CLI\n\n```bash\n# Scaffold governance in your project\nnpx governance-sdk init\n\n# Test API connectivity and show diagnostics\nGOVERNANCE_API_URL=https://api.heygovernance.ai GOVERNANCE_API_KEY=ak_... npx governance-sdk connect\n```\n\n## Features\n\n### Policy Engine\n\nDefine rules that govern agent behavior at runtime. Policies return one of **five outcomes**: `allow`, `block`, `warn`, `require_approval`, or `mask` (non-blocking redaction).\n\n**Preset policy builders:**\n\n- `blockTools(toolNames)` — block specific tools from being called\n- `allowOnlyTools(toolNames)` — whitelist-only tool access\n- `requireApproval(actionTypes)` — gate action *categories* (`ctx.action`) behind human approval\n- `requireToolApproval(toolNames)` — gate specific tools by name (`ctx.tool`) behind human approval\n- `tokenBudget(limit)` — enforce token consumption limits\n- `rateLimit(config)` — throttle agent requests. **Stateless** — the rule\n  reads `ctx.recentActionCount`, which your host populates. Durable\n  distributed rate limiting belongs in your API layer.\n\n**Extended presets** (also exported from the main package): `inputBlocklist`,\n`inputLength`, `inputPattern`, `networkAllowlist`, `scopeBoundary`,\n`costBudget`, `concurrentLimit`, `outputLength`, `outputPattern`,\n`sensitiveDataFilter`, `maskSensitiveOutput`, `maskOutputPattern`. Most\nrely on the host supplying relevant `ctx.*` fields (token counts, domain,\ncost, etc.) — like `rateLimit`, they are declarative gates, not accumulators.\n- `requireLevel(level)` — require minimum trust level\n- `requireSequence(steps)` — enforce ordered execution steps\n- `timeWindow(config)` — restrict actions to time windows\n- `requireSignedIdentity()` — require Ed25519 signed agent identity tokens\n\nPolicies compose with `policy-compose` for complex rule sets, serialize to YAML (`policy-yaml`), and ship with a fluent `policy-builder`.\n\n### Governance Scoring\n\n7-dimension scoring model quantifying agent trustworthiness: **identity, permissions, observability, guardrails, auditability, compliance, lifecycle.**\n\n```typescript\nimport { assessAgent, getGovernanceLevel } from 'governance-sdk/scorer';\n\nconst assessment = assessAgent('my-agent', {\n  name: 'my-agent', framework: 'mastra', owner: 'platform-team',\n  hasAuth: true, hasGuardrails: true, hasObservability: true, hasAuditLog: true,\n});\n// => { compositeScore: 87, level: 4, dimensions: { identity, permissions, ... } }\n\ngetGovernanceLevel(assessment.compositeScore);\n// => { level: 4, label: 'Certified', description: '...' }\n```\n\nBehavioral signals (block rate, injection hits, approval misses) are\navailable via the optional `behavioral-scorer` module — feed them in to\nadjust the score against how the agent *has* behaved, not just its\nconfigured posture. This is opt-in and not wired by default; we plan to\npromote dynamic trust scoring as a first-class feature in a future\nrelease.\n\n**Weight rationale + inflation risk**: the default weights\n(identity/permissions 1.5; guardrails 1.3; observability 1.2;\nauditability/compliance 1.0; lifecycle 0.8) are opinionated, not\nresearch-validated. Override with a custom weight map if your risk profile\ndiffers. Also: the scorer trusts self-reported `hasAuth`/`hasGuardrails`/\n`hasObservability`/`hasAuditLog` booleans at face value — to defend against\nscore inflation, cross-check callers' claims against\n`scanRepoContents(fileContents)` from `governance-sdk/repo-patterns` and\nflag mismatches. See `src/scorer-dimensions.ts` header comment and\n`src/scorer-inflation.test.ts` for the full pattern.\n\n### Injection Detection\n\n56 regex patterns across 7 categories (instruction override, role manipulation,\ncontext escape, data exfiltration, encoding attack, social engineering,\nobfuscation). Input normalisation includes: zero-width character stripping,\nNFKC Unicode folding (fullwidth/compatibility variants → ASCII), Cyrillic/Greek\nconfusable (homoglyph) folding (`systеm prоmpt` → `system prompt`),\nspaced-character collapsing (`i g n o r e` → `ignore`), markdown-emphasis\nstripping (`ig**no**re` → `ignore`), leetspeak de-obfuscation (`1gn0r3 pr3v10us\n1nstruct10ns` → `ignore previous instructions`), and Base64 decode-and-rescan.\nScoring is max-pattern-weight + multi-pattern and multi-category boosts, capped\nat 1.0.\n\n```typescript\nimport { detectInjection } from 'governance-sdk/injection-detect';\n\nconst result = detectInjection(userInput);\nif (result.detected) {\n  // block or flag the input — score, matched patterns, and category available\n}\n```\n\n**Lua Injection Benchmark (LIB)** — 6,931 labeled samples (2,096 attacks +\n4,835 benign) across 12 sources: TrustAIRLab in-the-wild jailbreak prompts\n(1,779), databricks-dolly-15k (1,490), neuralchemy prompt-injection-dataset\n(990), jackhhao jailbreak-classification (538), reshabhs SPML (537),\nOpenAssistant oasst2 (463), synthesized encoding attacks (458),\nllm-semantic-router jailbreak-detection (371), deepset prompt-injections\n(114), JailbreakBench JBB-Behaviors (106), synthesized hard negatives (75),\nwalledai JailbreakHub (10).\n\n**Shipped regex detector baseline on the full 6,931 samples** (reproducible\nvia `benchmark/scripts/run-full-baseline.ts`; committed report at\n[`benchmark/data/lua-injection-benchmark-v1-regex-baseline.json`](https://github.com/lua-ai-global/governance/blob/main/packages/governance/benchmark/data/lua-injection-benchmark-v1-regex-baseline.json)):\n\n| Metric | Value |\n|---|---|\n| Precision | 68.51% |\n| Recall | 37.26% |\n| F1 | 48.27% |\n| Accuracy | 75.85% |\n| False-positive rate | 7.43% |\n\nReading this honestly: the zero-dep regex detector is a high-precision /\nlow-recall first layer — good for catching common attack phrasings with few\nfalse positives on benign text, but not a replacement for an ML classifier\non adversarial corpora. Layer in an ML detector via the `InjectionClassifier`\ninterface (reference implementation in the `governance-ml` package) if you\nneed stronger recall against in-the-wild jailbreak prompts.\n\n### Tamper-Evident Audit Trail\n\nHMAC-SHA256 hash-chained audit. Each entry's hash covers the **previous hash +\nsequence number + canonicalised event body**, so any edit, deletion, or\nreorder-via-sequence-renumbering breaks verification. Constant-time hash\ncomparison throughout — no timing oracle.\n\n**Opt-in via a single config flag.** Pass `integrityAudit: { signingKey }` to\n`createGovernance()` and every audit write the SDK makes is chained\nautomatically — no separate wrapper, no ceremony:\n\n```typescript\nimport { createGovernance, runWithOutcome } from 'governance-sdk';\nimport { verifyAuditIntegrity } from 'governance-sdk/audit-integrity-verify';\n\nconst gov = createGovernance({\n  rules: [/* ... */],\n  integrityAudit: {\n    signingKey: process.env.AUDIT_SECRET!,\n    onFailure: 'allow',   // or 'block' to fail-closed on chain errors\n  },\n});\n\n// Every one of these is HMAC-chained:\nawait gov.register({ name: 'sales-bot', framework: 'mastra', owner: 'team' });\nawait gov.enforce({ agentId, action: 'tool_call', tool: 'search' });\n\n// Close the decision → outcome loop with runWithOutcome():\nconst result = await runWithOutcome(gov, { agentId, tool: 'search' }, async () => {\n  return await searchApi.query(q);\n});\n// ↑ success (or failure, with error + duration) auto-recorded in the chain\n\n// Verify the chain offline, anywhere, with just the secret:\nconst chain = await gov.integrityChain!.export();\nconst { valid, brokenAt, breakDetail } = await verifyAuditIntegrity(chain, process.env.AUDIT_SECRET!);\n```\n\n**Per-org (multi-tenant) chains.** Since 0.18, chains are scoped per\n`organizationId`: each org gets its own head, its own `1..N` sequence, and\nits own write lock, so one tenant's events never interleave with another's.\nPass the org on the context (or via `metadata.organizationId`) and export /\nverify a single tenant's contiguous chain:\n\n```typescript\nawait gov.enforce({ agentId, organizationId: 'org_acme', action: 'tool_call', tool: 'search' });\n\nconst acme = await gov.integrityChain!.export({ organizationId: 'org_acme' });\nawait verifyAuditIntegrity(acme, process.env.AUDIT_SECRET!); // contiguous, standalone-verifiable\n```\n\nEvents without an `organizationId` share a single org-less chain, byte-for-byte\ncompatible with chains written before 0.18 — no migration needed. The org is\nbound into each event's hash (when present), so an event can't be relabelled\ninto another tenant's chain without breaking verification.\n\n**What gets chained (when `integrityAudit` is set):**\n\n| Event type | Written by | What it captures |\n|---|---|---|\n| `agent_registered` | `gov.register()` | name, framework, owner, initial score |\n| `policy_evaluation` | `gov.enforce()` | agent, action, tool, rule matched, outcome, reason |\n| `policy_evaluation_preprocess` / `_postprocess` | `gov.enforcePreprocess()` / `Postprocess()` | stage-scoped enforcement result |\n| `action_outcome` | `gov.recordOutcome()` or `runWithOutcome()` | success / failure, duration, tokens, output summary, error |\n| `agent_killed` | `killSwitch.kill()` | agent, reason, killedBy |\n| *(caller-supplied)* | `gov.audit.log()` | anything you pass — custom LLM calls, approvals, etc. |\n\n**What is NOT automatically chained:** anything you log directly via\n`storage.createAuditEvent()` (bypasses the chain), anything your host app\ndoes outside governance (raw `fetch()`, filesystem I/O without going through\na governed tool), and anything the agent did between `enforce()` calls that\ndidn't invoke `enforce()` or `recordOutcome()` itself.\n\n**Honest caveats:**\n\n- Plain HMAC chains are only tamper-evident to holders of the signing secret.\n  If the secret leaks, history is rewritable by the leaker. Rotate secrets\n  regularly and pair with an external anchor (periodic checkpoint committed\n  to git / a ledger / an external audit service) if you need defence in\n  depth.\n- Truncation from the tail alone is **NOT** detectable without an external\n  anchor — a chain of N events truncated to N-1 events still verifies as a\n  consistent chain of N-1 events. The adversarial test suite documents this\n  limitation explicitly.\n- `integrityAudit.onFailure: 'allow'` (default) means a storage failure\n  creates a chain gap that `verifyAuditIntegrity` will detect; set\n  `'block'` to reject the enforce() call instead when you can't tolerate\n  gaps.\n\n#### Multi-process deployments\n\nIf more than one process writes to the **same audit store** — Kubernetes\nreplicas, a `pm2` cluster, or serverless instances all pointed at one\nPostgres database — the chain must allocate each event's `sequence` and\n`previousHash` from the **current durable head**, not from process-local\nstate. Otherwise two processes derive the same sequence for the same org\n(one `INSERT` wins, the other is dropped by the unique index) and their\nper-process `previousHash` forks the chain.\n\nThis is the job of the optional storage-contract method\n`appendToAuditChain(event, computeIntegrity)`. The adapter, under a per-org\nlock that spans the whole operation, reads the org's durable head, calls back\ninto the SDK to compute the HMAC (the signing key never leaves the SDK core),\nand persists the event + integrity as one indivisible write:\n\n```typescript\nimport { createGovernance } from 'governance-sdk';\nimport { createPostgresStorage } from 'governance-sdk/storage-postgres';\n\nconst gov = createGovernance({\n  storage: await createPostgresStorage({ pool }), // pg.Pool — real transactions\n  integrityAudit: { signingKey: process.env.AUDIT_SECRET! },\n});\n// Every process using this config appends atomically against the shared DB —\n// no duplicate-sequence drops, no per-process chain fork.\n```\n\n`createGovernance()` uses `appendToAuditChain` automatically whenever the\nstorage adapter provides it. **Support by shipped adapter:**\n\n| Adapter | `appendToAuditChain` | Multi-process safe? |\n|---|---|---|\n| **Postgres** (`createPostgresStorage`) | ✅ per-org `pg_advisory_xact_lock` transaction (falls back to a bounded `23505`-retry loop for query-only pools) | ✅ across processes sharing the database |\n| **Memory** (`createMemoryStorage`) | ✅ per-org in-process async lock | Single process **by design** — memory is not shared across processes |\n| Third-party adapter without the method | — | Falls back to the legacy process-local-sequence path (correct under a **single writer** only) |\n\n**Custom storage adapters:** to be multi-process-safe, implement\n`appendToAuditChain` so the head-read → compute → insert sequence is atomic\nagainst concurrent writers (a row lock, an advisory lock, a serializable\ntransaction, or a compare-and-set retry on your uniqueness constraint). If you\ncan't, leave it unimplemented and run a single writer — the SDK falls back\nsafely and warns.\n\n**`integrityChain.stats()` reads the durable head (async since 0.19).** It\nresolves the latest sequence + hash from `storage.getChainHead()` on every\ncall — so under multiple writers it reports the true tip, including writes made\nby other processes, not just this process's last append. `export()` and\n`verifyAuditIntegrity()` are already durable-backed; as of 0.19 `stats()` joins\nthem and is `async` (was sync ≤0.18) — `await` it. Adapters with no\n`getChainHead` fall back to the process-local cache (single-process only).\n\n```typescript\nconst { latestSequence, latestHash } = await gov.integrityChain!.stats('org_acme');\n```\n\n**The standalone `createIntegrityAudit()` wrapper is single-process only.** It\nkeeps its chain in process memory and never persists integrity metadata, so it\nforks across processes and loses verifiability across restarts. Use it for\nprototyping and tests; use `createGovernance({ integrityAudit })` (above) for\ndurable, multi-process audit.\n\n**Rolling deploys:** the lock only protects writers that take it. During a\nmixed-version window (some processes pre-0.18.2), the old processes still\nallocate from process-local counters and can collide with or fork past the\nlocked writers. Replace all writers together and expect residual\nunique-violation warnings until the last old process drains.\n\n### Kill Switch\n\nEmergency halt for any agent, enforced via a reserved-priority policy rule\n(999). User-supplied rules are clamped to a max priority of 998 by the\nengine, so the kill switch remains unconditionally top priority — no\n\"attacker rule at 1000 beats the kill switch\" hole.\n\n```typescript\nimport { createKillSwitch } from 'governance-sdk/kill-switch';\n\nconst killSwitch = createKillSwitch(gov);\nawait killSwitch.kill('rogue-agent', 'Unauthorized data access');\n```\n\n**Scope: per-process, not distributed.** The authoritative kill state lives\nin-memory on the instance where `kill()` was called. Storage is best-effort\nupdated so other instances can discover the kill, but they do NOT re-query\nstorage on every `enforce()` — that would hurt the thin-client design. For\nfleet-wide guaranteed halt, route through the governance-cloud remote\n`enforce` API or publish kill events over pub/sub and call `kill()` on\nevery instance.\n\n### Standards self-assessments (EU AI Act, OWASP Agentic, NIST AI RMF, ISO 42001)\n\nEach module emits a **self-assessment report** mapping governance state to a\nsubset of the named framework. These are engineering tools for posture\ntracking — **not** legal advice, not regulatory certifications, and not\nsubstitutes for qualified counsel or a chartered auditor. Each report output\nincludes its own disclaimer field so downstream consumers see the caveat.\n\nScope disclosures:\n\n- **EU AI Act** (Reg. (EU) 2024/1689) — covers Arts. 9, 11, 12, 14, 15, 50 only.\n  Does NOT model prohibited practices (Art 5-7), data governance (Art 10), or\n  GPAI obligations beyond transparency (Arts 51-56). Deadlines are computed\n  per-article using the phased enforcement schedule (2025-02-02 prohibited\n  practices, 2025-08-02 GPAI transparency, 2026-08-02 high-risk obligations,\n  2027-08-02 post-market + downstream).\n- **OWASP Agentic** — maps governance state to 10 agentic-threat categories\n  (our \"AA-01…AA-10\" numbering is an internal convention; not the official\n  OWASP Top 10 for LLMs 2025 numbering). Inspired by OWASP work, not endorsed\n  by it.\n- **NIST AI RMF** — 14 subcategories across Govern/Map/Measure/Manage. Does\n  NOT yet cover the NIST AI 600-1 GenAI Profile controls (2024).\n- **ISO/IEC 42001:2023** — clauses 4-6 and 8-10. Does NOT model the 39 Annex A\n  informative controls.\n\n```typescript\nimport { mapToEuAiAct }      from 'governance-sdk/compliance';     // EU AI Act (6 articles) — preferred\nimport { mapToOwaspAgentic } from 'governance-sdk/owasp-agentic';   // alias of assessOwaspAgentic\nimport { mapToNistAiRmf }    from 'governance-sdk/nist-ai-rmf';     // alias of assessNistAiRmf\nimport { mapToIso42001 }     from 'governance-sdk/iso-42001';       // alias of assessIso42001\n\nconst report = await mapToEuAiAct({\n  governance: gov, agents: [agent],\n  auditIntegrity: true, humanOversight: true,\n});\n// report.disclaimer — embedded \"not legal advice\" notice\n// report.phasedDeadlines — { prohibitedPractices, gpaiTransparency, highRiskObligations, postMarketAndDownstream }\n```\n\n### Agent Identity (Ed25519)\n\nCryptographically-signed agent identity tokens using Ed25519 (RFC 8032) via\n`crypto.subtle`. Zero runtime dependencies. Tokens include a nonce (`jti`),\nexpiry (`exp`), optional `kid` for key rotation, and the agent's public key\nso any verifier can re-check the signature.\n\nPair with the `requireSignedIdentity()` policy to guarantee that enforce\ncalls come from an agent that actually holds the private key. Note that the\npolicy checks a boolean (`ctx.identityVerified`) that your host layer sets\nafter calling `verifyAgentIdentity()` — the SDK itself stays zero-state.\n\n```typescript\nimport {\n  createEd25519Identity,\n  signAgentIdentity,\n  verifyAgentIdentity,\n} from 'governance-sdk/agent-identity-ed25519';\n\nconst identity = createEd25519Identity();\nconst keys = await identity.generateKeyPair();\n\nconst token = await signAgentIdentity({\n  agentId: 'sales-bot',\n  keys,\n  ttlSeconds: 3600,\n  kid: 'v2',                  // optional: pick-by-id on rotation\n  capabilities: ['search'],   // optional: capability assertions\n});\n\n// On the receiving side:\nconst result = await verifyAgentIdentity(token, {\n  pinnedPublicKeyHex: pinnedKey,  // optional but recommended — see below\n});\n// => { valid: true, agentId: 'sales-bot' }\n```\n\n**Pin your public keys.** A token self-describes the public key it was signed\nwith, so without pinning you're verifying \"someone signed this\" rather than\n\"the expected agent signed this.\" Use `pinnedPublicKeyHex` whenever you\nalready know which key the agent should be using.\n\n### Dry-Run Simulation\n\nTest policies against scenarios without affecting production.\n\n```typescript\nimport { simulateFleetPolicy } from 'governance-sdk/dry-run';\n\nconst result = await simulateFleetPolicy(gov, scenarios);\n// => { fleetSummary: { agentsAffected: 11, blockRate: 0.12 }, results: [...] }\n```\n\n## Framework Adapters\n\nGovernance needs three things to be real: a **point of interception** (we sit\nbetween the agent and the tool/LLM before it fires), a **deterministic agent\nidentity** (we know who's calling), and the **ability to block or modify**\n(not just observe after the fact). The matrix below is scoped to frameworks\nwhere all three hold.\n\n- **Input pre-scan** — preprocess-stage rules (injection detection, input\n  blocklists, token caps) run on the user prompt **before** the LLM sees it.\n- **Output post-scan** — postprocess-stage rules (PII masking, output pattern\n  blocking, output length) run on the model response **after** generation.\n- **Tool-call** — policy evaluation + audit logging around tool/function execution.\n\n### Featured — full LLM + tool coverage (pre + post + streaming + tools)\n\n| Framework | Import Path | Input pre-scan | Output post-scan | Output streaming | Tool-call |\n|---|---|:-:|:-:|:-:|:-:|\n| Mastra (processor) | `governance-sdk/plugins/mastra-processor` | ✅ | ✅ | ✅ | ✅ |\n| Vercel AI SDK | `governance-sdk/plugins/vercel-ai` | ✅ | ✅ | ✅ | ✅ |\n| OpenAI Agents SDK | `governance-sdk/plugins/openai-agents` | ✅ | ✅ | ✅¹ | ✅ |\n| LangChain | `governance-sdk/plugins/langchain` | ✅ | ✅ | ✅ | ✅ |\n| Anthropic SDK | `governance-sdk/plugins/anthropic` | ✅ | ✅ | ✅ | ✅ |\n| Google Genkit | `governance-sdk/plugins/genkit` | ✅ | ✅ | ✅ | ✅ |\n| LlamaIndex | `governance-sdk/plugins/llamaindex` | ✅ | ✅ | ✅ | ✅ |\n| Mistral | `governance-sdk/plugins/mistral` | ✅ | ✅ | ✅ | ✅ |\n| Ollama | `governance-sdk/plugins/ollama` | ✅ | ✅ | ✅ | ✅ |\n| Mastra (middleware) | `governance-sdk/plugins/mastra` | ✅² | ✅² | ✅² | ✅ |\n\n¹ OpenAI Agents output guardrails fire at stream final assembly (SDK-native behavior).\n² Mastra middleware exposes `scanInput` / `scanOutput` / `scanOutputStream` helpers — explicit calls you make from your runtime loop, rather than automatic lifecycle hooks. Use the `mastra-processor` export if you want automatic hooks via `inputProcessors[]` / `outputProcessors[]`.\n\n### Specialty\n\n| Framework | Import Path | Scope |\n|---|---|---|\n| Model Context Protocol | `governance-sdk/plugins/mcp` | Build a **governed MCP server** — input injection pre-scan on tool arguments + output injection scan + tool-call audit for tools you publish. Not for governing MCP servers you consume (govern those at the agent framework layer). |\n| MCP trust + chain audit | `governance-sdk/plugins/mcp-trust`, `governance-sdk/plugins/mcp-chain-audit` | Declarative trusted-MCP-server registry (allowlist + per-server capability tags — **not** cryptographic pin-trust; signature/TLS pinning is not implemented) + caller-driven chain-of-custody audit across nested MCP invocations (requires manual `recordCall()` per hop; not automatic propagation). |\n| AWS Bedrock Agents | `governance-sdk/plugins/bedrock` | **Entry-gate only** — Bedrock Agents execute tools server-side inside AWS, so we can pre-scan the `InvokeAgent` input and post-scan the assembled output via `scanOutput`, but we can't see individual internal tool calls. |\n\n### Python, edge runtimes, and other languages\n\nIf your agent is **not TypeScript**, use the Lua Governance REST API directly —\nit exposes the same policy, scoring, audit, and injection-detection endpoints\nthe SDK uses locally. Native Python / Go SDKs are not shipped yet; a REST\nclient works everywhere.\n\nThe SDK itself is pure ESM with zero runtime dependencies, so it runs\nunmodified under Node, Deno, Bun, Cloudflare Workers, and other Web-standard\nruntimes — no separate adapter needed.\n\nAll framework dependencies are optional peer dependencies — install only what you use.\n\n### Pre/post usage — four canonical patterns\n\n**Vercel AI SDK** — `experimental_wrapLanguageModel` middleware:\n\n```ts\nimport { experimental_wrapLanguageModel, generateText } from 'ai';\nimport { createGovernance } from 'governance-sdk';\nimport { createGovernanceMiddleware } from 'governance-sdk/plugins/vercel-ai';\n\nconst gov = createGovernance({ rules: [/* ... */] });\nconst { id: agentId } = await gov.register({\n  name: 'sales', framework: 'vercel-ai', owner: 'team',\n});\n\nconst model = experimental_wrapLanguageModel({\n  model: openai('gpt-4o'),\n  middleware: createGovernanceMiddleware(gov, { agentId }),\n});\n```\n\n**OpenAI Agents SDK** — native input/output guardrails:\n\n```ts\nimport { Agent } from '@openai/agents';\nimport {\n  createInputGuardrail,\n  createOutputGuardrail,\n} from 'governance-sdk/plugins/openai-agents';\n\nconst agent = new Agent({\n  name: 'research',\n  instructions: '...',\n  inputGuardrails: [createInputGuardrail(gov, { agentId })],\n  outputGuardrails: [createOutputGuardrail(gov, { agentId })],\n});\n```\n\n**LangChain** — chat model wrapper:\n\n```ts\nimport { ChatOpenAI } from '@langchain/openai';\nimport { wrapChatModel } from 'governance-sdk/plugins/langchain';\n\nconst model = new ChatOpenAI({ model: 'gpt-4o' });\nconst guarded = wrapChatModel(model, gov, { agentId });\nconst res = await guarded.invoke([new HumanMessage('hello')]);\n```\n\n**Anthropic SDK** — `messages.create` wrapper:\n\n```ts\nimport Anthropic from '@anthropic-ai/sdk';\nimport { createGovernedMessages } from 'governance-sdk/plugins/anthropic';\n\nconst client = new Anthropic();\nconst messages = createGovernedMessages(client.messages, gov, { agentId });\nconst res = await messages.create({\n  model: 'claude-sonnet-4-5', max_tokens: 1024,\n  messages: [{ role: 'user', content: 'hi' }],\n});\n```\n\nEvery pre/post adapter accepts `{ preprocess: false }` or `{ postprocess: false }`\nto disable a stage. Both stages are on by default.\n\nAll adapters handle all 5 enforcement outcomes with configurable callbacks:\n\n```typescript\nconst middleware = createGovernanceMiddleware(gov, {\n  agentName: 'my-agent',\n  owner: 'platform-team',\n  framework: 'mastra',\n  onBlocked: (decision, tool) => log.warn(`Blocked: ${tool}`),\n  onWarn: (decision, tool) => log.info(`Warning: ${tool} — ${decision.reason}`),\n  onMask: (decision, tool, masked) => log.info(`Masked output for ${tool}`),\n  onApprovalRequired: (decision, tool) => log.info(`Approval needed: ${tool}`),\n});\n```\n\n## Export Paths\n\nThe SDK ships **47 targeted exports** so you can import only what you need:\n\n```\n# Core\ngovernance-sdk                             createGovernance, enforce, presets\ngovernance-sdk/policy                      policy types and builders\ngovernance-sdk/policy-builder              fluent policy builder\ngovernance-sdk/policy-compose              compose + conflict resolution\ngovernance-sdk/policy-yaml                 serialize/deserialize policies\ngovernance-sdk/dry-run                     simulatePolicy / simulateFleetPolicy\n\n# Scoring\ngovernance-sdk/scorer                      7-dimension governance scoring\ngovernance-sdk/behavioral-scorer           behavioral signal adjustments\ngovernance-sdk/repo-patterns               repository capability detection\n\n# Injection detection\ngovernance-sdk/injection-detect            56-pattern regex detector\ngovernance-sdk/injection-classifier        pluggable ML classifier interface\ngovernance-sdk/injection-benchmark         LIB — 6.9K-sample benchmark runner\n\n# Audit + identity\ngovernance-sdk/audit-integrity             HMAC hash-chain primitives (createIntegrityAudit, verifyAuditIntegrity)\ngovernance-sdk/audit-integrity-verify      standalone chain verifier (for offline audit)\ngovernance-sdk/agent-identity              agent identity tokens\ngovernance-sdk/agent-identity-ed25519      Ed25519 signing + verification\ngovernance-sdk/kill-switch                 priority-999 emergency halt\n\n# Standards / compliance\ngovernance-sdk/compliance                  EU AI Act (6 articles + deadlines)\ngovernance-sdk/owasp-agentic               OWASP Top 10 for LLMs / Agentic\ngovernance-sdk/nist-ai-rmf                 NIST AI RMF (Govern/Map/Measure/Manage)\ngovernance-sdk/iso-42001                   ISO/IEC 42001 controls\n\n# Storage\ngovernance-sdk/storage-postgres            PostgreSQL storage adapter\ngovernance-sdk/storage-postgres-schema     schema DDL + migrations\n\n# Optional observability primitives — passive in-memory, host wires to its own\n# monitoring; NOT OpenInference-compliant. A real OTel exporter is on the roadmap.\ngovernance-sdk/events                      typed event emitter\ngovernance-sdk/metrics                     in-memory counter / timing snapshots\ngovernance-sdk/otel-hooks                  governance-prefixed span shape (passive — user must wire)\n\n# Scanner + type surface\ngovernance-sdk/scanner-plugins             scanner plugin interface\ngovernance-sdk/token-types                 token type guards\n\n# Framework integrations (10 featured + MCP toolkit + Bedrock)\ngovernance-sdk/plugins/mastra\ngovernance-sdk/plugins/mastra-processor\ngovernance-sdk/plugins/vercel-ai\ngovernance-sdk/plugins/openai-agents\ngovernance-sdk/plugins/langchain\ngovernance-sdk/plugins/anthropic\ngovernance-sdk/plugins/genkit\ngovernance-sdk/plugins/llamaindex\ngovernance-sdk/plugins/mistral\ngovernance-sdk/plugins/ollama\ngovernance-sdk/plugins/mcp                  # build a governed MCP server\ngovernance-sdk/plugins/mcp-trust            # trusted-server allowlist + capability tags\ngovernance-sdk/plugins/mcp-allowlist        # tool/resource allowlist enforcement\ngovernance-sdk/plugins/mcp-chain-audit      # caller-driven chain-of-custody audit\ngovernance-sdk/plugins/mcp-call-recorder    # nested-invocation call recorder\ngovernance-sdk/plugins/bedrock              # entry-gate only (action groups opaque)\n```\n\n`runWithOutcome()` (a thin helper around `gov.recordOutcome`) is exposed at the\ntop-level package export — `import { runWithOutcome } from 'governance-sdk'`.\n\n## Project Stats\n\n- **0** runtime dependencies\n- **1,340** tests, 0 failures (`npm test`)\n- **47** export paths — tree-shakeable, import only what you use\n- **TypeScript strict mode**, no `any` types in source\n- **MIT licensed**\n\n## Development\n\n```bash\n# Install dependencies\nnpm install\n\n# Build all packages\nnpm run build\n\n# Run tests\nnpm test\n\n# Type-check without emitting\nnpm run lint\n```\n\n### Requirements\n\n- Node.js **>= 20**\n- TypeScript **>= 5.7**\n\n## Contributing\n\nSee [CONTRIBUTING.md](https://github.com/lua-ai-global/governance/blob/main/CONTRIBUTING.md). Security issues: see [SECURITY.md](https://github.com/lua-ai-global/governance/blob/main/SECURITY.md).\n\n## License\n\n[MIT](https://github.com/lua-ai-global/governance/blob/main/LICENSE)\n\n## Links\n\n- Homepage: [heygovernance.ai](https://heygovernance.ai)\n- Organization: [Lua](https://heylua.ai)\n- Repository: [github.com/lua-ai-global/governance](https://github.com/lua-ai-global/governance)\n","readmeFilename":"README.md"}