@parmanasystems/server

Fastify REST API server for the Parmana Systems governance runtime

@parmanasystems/server is the production-ready Fastify server that exposes the Parmana Systems governance runtime as a REST API. It wraps @parmanasystems/execution-runtime and @parmanasystems/verifier behind authenticated HTTP endpoints.

Install

npm install @parmanasystems/server

Running

# Development (hot reload)
npm run dev --workspace=packages/server

# Production
npm run build --workspace=packages/server
node packages/server/dist/index.js

Or via the monorepo root:

npm run dev

Endpoints

Method	Path	Description
POST	/execute	Execute a governed decision, returns ExecutionAttestation
POST	/verify	Verify a signed ExecutionAttestation

See API Reference for full request/response documentation.

Configuration

Environment variables:

Variable	Description	Default
PORT	Server listen port	3000
PARMANA_API_KEY	Enable Bearer token auth	unset (auth disabled)
REDIS_URL	Redis connection string for distributed replay store	unset (uses in-memory)
DATABASE_URL	PostgreSQL for audit-db persistence	unset (audit disabled)
AWS_KMS_KEY_ID	KMS key ARN for production signing	unset (uses local key)

Production hardening

The server ships with production-ready Fastify plugins:

• @fastify/cors — CORS headers
• @fastify/helmet — security headers (CSP, HSTS, etc.)
• @fastify/rate-limit — rate limiting to prevent abuse
• @fastify/swagger — auto-generated OpenAPI schema at /documentation

OpenAPI UI

In development, the Swagger UI is available at:

http://localhost:3000/documentation

The schema is also exported to openapi.json at the project root via:

npm run export:openapi