{
  "name": "agent-recon",
  "version": "1.2.1",
  "description": "Agent Recon™ — real-time observability dashboard for AI coding agents",
  "license": "SEE LICENSE IN LICENSE",
  "bin": {
    "agent-recon": "./installer/cli.js"
  },
  "main": "server/start.js",
  "engines": {
    "node": ">=22.0.0"
  },
  "os": [
    "darwin",
    "linux",
    "win32"
  ],
  "comment:allowScripts": "SUPPLY-CHAIN TRUST ALLOWLIST (npm >= 12). npm 12 blocks dependency install scripts by default; anything not listed here never executes code at install time. better-sqlite3 is a native addon whose install script (prebuild-install || node-gyp rebuild) is the only way its binding gets built — granting it is a deliberate, reviewed trust decision, not a convenience. Keep the key UNPINNED (name only): a name@version key stops matching when the semver range floats, which silently re-breaks the native build. Pinned by server/tests/unit/packaging.test.js. NOTE: this field governs THIS repo's own installs (CI + dev). It does NOT protect end users who install agent-recon as a dependency — for them the load-bearing file is server/package.json, which ships in files[] and is the project root for the runtime rebuild in server/start.js.",
  "allowScripts": {
    "better-sqlite3": true
  },
  "comment:files": "FAIL-CLOSED publish allowlist (AR-SEC-001). Only paths listed here ship to npm; new internal/working files can never leak by default. .npmignore is kept as defense-in-depth within these dirs. The tarball-contents test in server/tests/unit/packaging.test.js pins this set — update both together. server/ ships only the bundled start.js + the installer's external runtime deps (platform.js) + on-disk assets (rules/, fixtures/); all other server modules are inlined into start.js by build-server.js.",
  "files": [
    "server/start.js",
    "server/platform.js",
    "server/package.json",
    "server/rules/",
    "server/fixtures/",
    "public/index.html",
    "installer/*.js",
    "installer/steps/*.js",
    "installer/package.json",
    ".claude/hooks/*.js",
    "service/",
    "setup.ps1",
    "setup-wsl.sh",
    "setup-macos.sh",
    "setup-linux.sh",
    "install-service.ps1",
    "start-agent-recon.bat",
    "README.md",
    "INSTALL.md",
    "PRIVACY.md",
    "SECURITY.md",
    "TERMS.md",
    "EULA.md",
    "CHANGELOG.md",
    "CODE_OF_CONDUCT.md",
    "CONTRIBUTING.md",
    "LICENSE",
    "LICENSE-COMMERCIAL"
  ],
  "scripts": {
    "build": "node build.js",
    "start": "node server/start.js",
    "test": "cd server && npm test",
    "test:unit": "cd server && npm run test:unit",
    "test:fe": "cd server && npm run test:fe",
    "prepare": "node scripts/install-hooks.js",
    "prepublishOnly": "bash scripts/release-build.sh --no-pack",
    "prepack": "node build-server.js && cp server/start.js server/start.js.src && cp server/start.bundle.js server/start.js",
    "postpack": "[ -f server/start.js.src ] && mv server/start.js.src server/start.js; rm -f server/start.bundle.js",
    "postinstall": "node -e \"try{require('child_process').execSync('cd server && npm rebuild better-sqlite3',{stdio:'ignore'})}catch(e){}\""
  },
  "dependencies": {
    "@inquirer/prompts": "^8.6.0",
    "@litko/yara-x": "^0.7.1",
    "better-sqlite3": "^13.0.3",
    "express": "^5.2.1",
    "ws": "^8.20.0"
  },
  "optionalDependencies": {
    "@litko/yara-x-darwin-arm64": "0.7.1",
    "@litko/yara-x-darwin-x64": "0.7.1",
    "@litko/yara-x-linux-x64-gnu": "0.7.1",
    "@litko/yara-x-win32-x64-msvc": "0.7.1"
  },
  "devDependencies": {
    "c8": "^12.0.0",
    "esbuild": "^0.28.2",
    "terser": "^5.50.0"
  },
  "keywords": [
    "observability",
    "dashboard",
    "claude-code",
    "agent",
    "hooks",
    "security",
    "monitoring"
  ],
  "repository": {
    "type": "git",
    "url": "https://github.com/genxcoder1999/agent-recon-community"
  },
  "bugs": {
    "url": "https://github.com/genxcoder1999/agent-recon-community/issues"
  },
  "homepage": "https://www.agent-recon.net",
  "publishConfig": {
    "access": "public"
  }
}