{
  "id": "trucore-atf",
  "name": "TruCore ATF",
  "version": "0.2.4",
  "description": "Transaction firewall tools for autonomous finance agents: protect + verify + report savings. ATF evaluates swap, lend, and perps intents against policy before they reach the chain. Never signs. Deny-by-default.",
  "homepage": "https://github.com/trucore-ai/agent-transaction-firewall",
  "main": "index.cjs",
  "extensions": ["index.cjs"],
  "tools": "optional",
  "configSchema": {
    "type": "object",
    "properties": {
      "atfCli": {
        "type": "string",
        "default": "atf",
        "description": "ATF CLI command name or absolute path (e.g. 'atf' or '/usr/local/bin/atf')."
      },
      "atfBaseUrl": {
        "type": "string",
        "description": "Base URL for ATF HTTP API mode (e.g. 'https://api.trucore.xyz'). Optional; required only when prefer='api'."
      },
      "prefer": {
        "type": "string",
        "enum": ["cli", "api"],
        "default": "cli",
        "description": "Whether to call ATF via CLI subprocess or HTTP API."
      },
      "receiptsDir": {
        "type": "string",
        "description": "Directory where ATF receipt JSON files are stored. Used by atf_report_savings."
      },
      "safety": {
        "type": "object",
        "properties": {
          "allowExecuteSafe": {
            "type": "boolean",
            "default": true,
            "description": "Allow atf_bootstrap_execute_safe tool to run bootstrap --execute-safe steps. Non-fatal; no signing."
          },
          "allowNetwork": {
            "type": "boolean",
            "default": false,
            "description": "Allow atf_discover to fetch the ATF manifest over the network. Disabled by default; enable if the agent environment has outbound HTTP access."
          },
          "enableUapPermits": {
            "type": "boolean",
            "default": false,
            "description": "Enable UAP permit-protected execution for atf_protect_intent. When true, every protect_intent call issues a scoped UAP permit first and attaches it to the execution. Requires atfBaseUrl. Fail-closed: if permit issuance fails, execution is blocked."
          }
        },
        "additionalProperties": false
      }
    },
    "additionalProperties": false
  }
}