{
  "name": "@conarium-ai/core",
  "version": "0.3.5",
  "mcpName": "io.github.dogrucanemek-alt/conarium",
  "//files-artefakt": "Generated files under examples/ (private key, receipt/audit JSONL) are EXCLUDED. .gitignore does not bind npm: because the allow-list contained 'examples', `npm publish` on a machine that had run the demo was shipping _keys/audit-ed25519.pem (PRIVATE KEY) and the receipts. test/pack_artefakt.mjs locks this. The exclusions are LIMITED to examples/: receipts.jsonl and .pub.pem under test-vectors/ MUST ship, or a third party cannot run the conformance vectors.",
  "//files": "Allow-list of what enters the package. Without it npm sent everything: 296 files / 1.5 MB — CI workflows, gitleaks config, a 137 KB marketing image, the site's api/chat.js. A bank security team opens the tarball and sees those. scripts/ is here ON PURPOSE: conarium-reconcile references scripts/pg-snapshot.sql at runtime; without it the user files a support mail.",
  "files": [
    "dist",
    "bin",
    "scripts",
    "!scripts/conarium_sabah_brief.mjs",
    "!scripts/start-mcp-c1.mjs",
    "docs",
    "!docs/reviews",
    "!docs/teaching",
    "!docs/teaching/**",
    "!docs/superpowers",
    "!docs/superpowers/**",
    "!docs/plans",
    "!docs/plans/**",
    "!docs/specs",
    "!docs/specs/**",
    "!docs/audit",
    "!docs/audit/**",
    "!docs/benchmarks/*.cpuprofile",
    "public",
    "assets",
    "examples",
    "!examples/**/_keys",
    "!examples/**/*.jsonl",
    "!examples/**/*.keyid",
    "!examples/**/conarium.tokens.json",
    "!examples/starter-kit",
    "!examples/starter-kit/**",
    "!examples/missing-record-demo",
    "!examples/missing-record-demo/**",
    "conformance",
    "test-vectors",
    "!test-vectors/jcs/rfc8785",
    "!test-vectors/jcs/rfc8785/**",
    "!**/*.pem",
    "test-vectors/keys/vector-key.pub.pem",
    "deploy",
    "!deploy/hetzner",
    "!deploy/hetzner/**",
    "conarium.config.json",
    "README.md",
    "LICENSE",
    "SECURITY.md",
    "LIMITATIONS.md",
    "LIMITATIONS.tr.md",
    "CHANGELOG.md"
  ],
  "description": "Governed MCP gateway for AI data access: policy enforcement and PII masking, an Ed25519-signed receipt per mediated access that a third party verifies offline (written when a receipt sink is configured, which conarium-init sets), coverage reconciliation against the database's own query counters to surface access that bypassed the gateway, and conformance vectors so the receipt format can be implemented without us. Self-hosted, MIT.",
  "keywords": [
    "mcp",
    "ai",
    "coding-assistant",
    "governance",
    "data-governance",
    "audit",
    "audit-log",
    "verifiable-receipts",
    "tamper-evident",
    "ed25519",
    "bypass-detection",
    "reconciliation",
    "eu-ai-act",
    "pii",
    "cursor",
    "copilot",
    "claude",
    "self-hosted",
    "conformance-vectors",
    "opentimestamps",
    "codex"
  ],
  "homepage": "https://github.com/dogrucanemek-alt/conarium",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/dogrucanemek-alt/conarium.git"
  },
  "bugs": {
    "url": "https://github.com/dogrucanemek-alt/conarium/issues"
  },
  "license": "MIT",
  "type": "module",
  "main": "./dist/index.js",
  "exports": {
    ".": "./dist/index.js",
    "./mask": {
      "types": "./dist/mask.d.ts",
      "default": "./dist/mask.js"
    },
    "./*": "./*"
  },
  "bin": {
    "conarium": "dist/index.js",
    "conarium-doctor": "bin/conarium-doctor.mjs",
    "conarium-init": "bin/conarium-init.mjs",
    "conarium-verify": "bin/conarium-verify.mjs",
    "conarium-countersign-verify": "bin/conarium-countersign-verify.mjs",
    "conarium-coverage": "bin/conarium-coverage.mjs",
    "conarium-reconcile": "bin/conarium-reconcile.mjs",
    "conarium-stamp": "bin/conarium-stamp.mjs",
    "conarium-anchor-service": "bin/conarium-anchor-service.mjs",
    "conarium-anchor-upgrade": "bin/conarium-anchor-upgrade.mjs",
    "conarium-token-sync": "bin/conarium-token-sync.mjs",
    "conarium-console": "bin/conarium-console.mjs",
    "conarium-suggest-policy": "bin/conarium-suggest-policy.mjs"
  },
  "scripts": {
    "build": "tsc && tsc -p tsconfig.mask.json",
    "test": "vitest run",
    "test:anchor-verify": "npm run build && node test/anchor_verify.mjs",
    "test:checks": "npm run build && node test/run-checks.mjs",
    "test:all": "npm run lint && npm run test && npm run test:checks",
    "dev": "tsx watch src/index.ts",
    "start": "node dist/index.js",
    "lint": "tsc --noEmit",
    "prepublishOnly": "npm run build",
    "test:vectors": "node test/vectors_run.mjs",
    "fuzz": "npm run build && node fuzz/run.mjs",
    "fuzz:regression": "npm run build && node fuzz/run.mjs --regression",
    "bench:overhead": "node scripts/benchmark-overhead.mjs"
  },
  "dependencies": {
    "@eslint-community/regexpp": "4.12.2",
    "@guanmingchiu/sqlparser-ts": "^0.62.0",
    "@modelcontextprotocol/sdk": "^1.0.0",
    "express": "^5.2.1",
    "node-sql-parser": "^5.4.0",
    "pgsql-ast-parser": "^12.0.2",
    "postgres": "^3.4.4",
    "re2js": "2.8.7",
    "zod": "4.6.7"
  },
  "devDependencies": {
    "@jazzer.js/core": "^4.0.0",
    "@types/express": "^5.0.6",
    "@types/node": "^26.4.1",
    "fast-check": "^4.9.0",
    "supertest": "^7.2.2",
    "tsx": "^4.23.13",
    "typescript": "^7.0.2",
    "vitest": "^5.0.0"
  },
  "engines": {
    "node": ">=20"
  }
}