@agenshield/broker 0.4.4 → 0.6.0

package/handlers/events-batch.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Events Batch Handler
+ *
+ * Accepts batches of interceptor events for audit logging.
+ * The interceptor's EventReporter periodically flushes events
+ * to the broker via this RPC method.
+ */
+import type { HandlerContext, HandlerResult } from '../types.js';
+import type { HandlerDependencies } from './types.js';
+export declare function handleEventsBatch(params: Record<string, unknown>, context: HandlerContext, deps: HandlerDependencies): Promise<HandlerResult<{
+    received: number;
+}>>;
+//# sourceMappingURL=events-batch.d.ts.map

package/handlers/events-batch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events-batch.d.ts","sourceRoot":"","sources":["../../src/handlers/events-batch.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAc,MAAM,aAAa,CAAC;AAC7E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAOtD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,aAAa,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAuB9C"}

package/handlers/index.d.ts

@@ -8,5 +8,7 @@ export { handleOpenUrl } from './open-url.js';
 export { handleSecretInject } from './secret-inject.js';
 export { handlePing } from './ping.js';
 export { handleSkillInstall, handleSkillUninstall } from './skill-install.js';
+export { handlePolicyCheck } from './policy-check.js';
+export { handleEventsBatch } from './events-batch.js';
 export type { HandlerDependencies } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/handlers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/handlers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE9E,YAAY,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/handlers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,YAAY,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC"}

package/handlers/policy-check.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Policy Check Handler
+ *
+ * Handles policy_check RPC calls from the interceptor.
+ * The interceptor sends { operation, target } and this handler
+ * evaluates the inner operation against the policy enforcer.
+ */
+import type { HandlerContext, HandlerResult } from '../types.js';
+import type { HandlerDependencies } from './types.js';
+interface PolicyCheckResultData {
+    allowed: boolean;
+    policyId?: string;
+    reason?: string;
+}
+export declare function handlePolicyCheck(params: Record<string, unknown>, context: HandlerContext, deps: HandlerDependencies): Promise<HandlerResult<PolicyCheckResultData>>;
+export {};
+//# sourceMappingURL=policy-check.d.ts.map

package/handlers/policy-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-check.d.ts","sourceRoot":"","sources":["../../src/handlers/policy-check.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAOtD,UAAU,qBAAqB;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC,CA6C/C"}

package/http-fallback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-fallback.d.ts","sourceRoot":"","sources":["../src/http-fallback.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EACV,YAAY,EAIb,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAmBrD,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,YAAY,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,WAAW,CAAc;gBAErB,OAAO,EAAE,yBAAyB;IAM9C;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAY3B;;OAEG;YACW,aAAa;IA6C3B;;OAEG;IACH,OAAO,CAAC,WAAW;IAUnB;;OAEG;YACW,cAAc;IAyH5B;;OAEG;IACH,OAAO,CAAC,UAAU;IAoBlB;;OAEG;IACH,OAAO,CAAC,aAAa;IAWrB;;OAEG;IACH,OAAO,CAAC,aAAa;CAWtB"}
+{"version":3,"file":"http-fallback.d.ts","sourceRoot":"","sources":["../src/http-fallback.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EACV,YAAY,EAIb,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAqBrD,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,YAAY,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,WAAW,CAAc;gBAErB,OAAO,EAAE,yBAAyB;IAM9C;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAY3B;;OAEG;YACW,aAAa;IA6C3B;;OAEG;IACH,OAAO,CAAC,WAAW;IAUnB;;OAEG;YACW,cAAc;IAyH5B;;OAEG;IACH,OAAO,CAAC,UAAU;IAsBlB;;OAEG;IACH,OAAO,CAAC,aAAa;IAWrB;;OAEG;IACH,OAAO,CAAC,aAAa;CAWtB"}

package/index.js

@@ -805,6 +805,70 @@ async function handleSkillUninstall(params, context, deps) {
   }
 }
 
+// libs/shield-broker/src/handlers/policy-check.ts
+async function handlePolicyCheck(params, context, deps) {
+  const { operation, target } = params;
+  if (!operation) {
+    return {
+      success: false,
+      error: { code: -32602, message: "Missing required parameter: operation" }
+    };
+  }
+  let checkParams;
+  switch (operation) {
+    case "http_request":
+    case "open_url":
+      checkParams = { url: target || "" };
+      break;
+    case "file_read":
+    case "file_write":
+    case "file_list":
+      checkParams = { path: target || "" };
+      break;
+    case "exec":
+      checkParams = { command: target || "" };
+      break;
+    case "secret_inject":
+      checkParams = { name: target || "" };
+      break;
+    default:
+      checkParams = { target: target || "" };
+      break;
+  }
+  const result = await deps.policyEnforcer.check(operation, checkParams, context);
+  return {
+    success: true,
+    data: {
+      allowed: result.allowed,
+      policyId: result.policyId,
+      reason: result.reason
+    }
+  };
+}
+
+// libs/shield-broker/src/handlers/events-batch.ts
+async function handleEventsBatch(params, context, deps) {
+  const { events } = params;
+  const eventList = events || [];
+  for (const event of eventList) {
+    const entry = {
+      id: event.id || context.requestId,
+      timestamp: event.timestamp ? new Date(event.timestamp) : /* @__PURE__ */ new Date(),
+      operation: event.operation || "events_batch",
+      channel: "socket",
+      allowed: event.allowed ?? true,
+      target: event.target || "",
+      result: event.allowed === false ? "denied" : "success",
+      durationMs: 0
+    };
+    await deps.auditLogger.log(entry);
+  }
+  return {
+    success: true,
+    data: { received: eventList.length }
+  };
+}
+
 // libs/shield-broker/src/server.ts
 var UnixSocketServer = class {
   server = null;
@@ -990,7 +1054,9 @@ var UnixSocketServer = class {
       secret_inject: handleSecretInject,
       ping: handlePing,
       skill_install: handleSkillInstall,
-      skill_uninstall: handleSkillUninstall
+      skill_uninstall: handleSkillUninstall,
+      policy_check: handlePolicyCheck,
+      events_batch: handleEventsBatch
     };
     return handlerMap[method];
   }
@@ -1021,7 +1087,9 @@ var HTTP_ALLOWED_OPERATIONS = /* @__PURE__ */ new Set([
   "file_read",
   "file_list",
   "open_url",
-  "ping"
+  "ping",
+  "policy_check",
+  "events_batch"
 ]);
 var HTTP_DENIED_OPERATIONS = /* @__PURE__ */ new Set([
   "exec",
@@ -1222,7 +1290,9 @@ var HttpFallbackServer = class {
       file_read: handleFileRead,
       file_list: handleFileList,
       open_url: handleOpenUrl,
-      ping: handlePing
+      ping: handlePing,
+      policy_check: handlePolicyCheck,
+      events_batch: handleEventsBatch
     };
     return handlerMap[method];
   }
@@ -1261,6 +1331,34 @@ var PolicyEnforcer = class {
     this.policies = options.defaultPolicies;
     this.loadPolicies();
   }
+  /**
+   * Normalize a policy rule — infer operations from target when missing,
+   * default priority to 0.
+   */
+  normalizeRule(rule) {
+    const normalized = { ...rule };
+    if (!normalized.priority && normalized.priority !== 0) {
+      normalized.priority = 0;
+    }
+    if (normalized.operations && normalized.operations.length > 0) {
+      return normalized;
+    }
+    switch (normalized.target) {
+      case "url":
+        normalized.operations = ["http_request", "open_url"];
+        break;
+      case "command":
+        normalized.operations = ["exec"];
+        break;
+      case "skill":
+        normalized.operations = ["skill_install", "skill_uninstall"];
+        break;
+      default:
+        normalized.operations = ["*"];
+        break;
+    }
+    return normalized;
+  }
   /**
    * Load policies from disk
    */
@@ -1273,7 +1371,7 @@ var PolicyEnforcer = class {
         this.policies = {
           ...this.policies,
           ...loaded,
-          rules: [...this.policies.rules, ...loaded.rules || []]
+          rules: [...this.policies.rules, ...(loaded.rules || []).map((r) => this.normalizeRule(r))]
         };
         this.lastLoad = Date.now();
       } catch (error) {
@@ -1289,7 +1387,7 @@ var PolicyEnforcer = class {
             const content = fs4.readFileSync(path4.join(customDir, file), "utf-8");
             const custom = JSON.parse(content);
             if (custom.rules) {
-              this.policies.rules.push(...custom.rules);
+              this.policies.rules.push(...custom.rules.map((r) => this.normalizeRule(r)));
             }
           }
         }
@@ -1518,6 +1616,28 @@ var BuiltinPolicies = [
     enabled: true,
     priority: 1e3
   },
+  // Allow interceptor policy checks (internal RPC — must not be subject to policy gate)
+  {
+    id: "builtin-allow-policy-check",
+    name: "Allow interceptor policy checks",
+    action: "allow",
+    target: "command",
+    operations: ["policy_check"],
+    patterns: ["*"],
+    enabled: true,
+    priority: 1e3
+  },
+  // Allow interceptor event reporting (internal RPC)
+  {
+    id: "builtin-allow-events-batch",
+    name: "Allow interceptor event reporting",
+    action: "allow",
+    target: "command",
+    operations: ["events_batch"],
+    patterns: ["*"],
+    enabled: true,
+    priority: 1e3
+  },
   // Allow skill installation/uninstallation (daemon management operations)
   {
     id: "builtin-allow-skill-management",
@@ -1538,9 +1658,13 @@ var BuiltinPolicies = [
     operations: ["http_request"],
     patterns: [
       "http://localhost:*",
+      "http://localhost:*/**",
       "http://127.0.0.1:*",
+      "http://127.0.0.1:*/**",
       "https://localhost:*",
-      "https://127.0.0.1:*"
+      "https://localhost:*/**",
+      "https://127.0.0.1:*",
+      "https://127.0.0.1:*/**"
     ],
     enabled: true,
     priority: 100
@@ -1640,10 +1764,15 @@ var BuiltinPolicies = [
     target: "url",
     operations: ["http_request"],
     patterns: [
+      "https://api.anthropic.com",
       "https://api.anthropic.com/**",
+      "https://api.openai.com",
       "https://api.openai.com/**",
+      "https://api.cohere.ai",
       "https://api.cohere.ai/**",
+      "https://generativelanguage.googleapis.com",
       "https://generativelanguage.googleapis.com/**",
+      "https://api.mistral.ai",
       "https://api.mistral.ai/**"
     ],
     enabled: true,
@@ -1657,10 +1786,15 @@ var BuiltinPolicies = [
     target: "url",
     operations: ["http_request"],
     patterns: [
+      "https://registry.npmjs.org",
       "https://registry.npmjs.org/**",
+      "https://pypi.org",
       "https://pypi.org/**",
+      "https://files.pythonhosted.org",
       "https://files.pythonhosted.org/**",
+      "https://crates.io",
       "https://crates.io/**",
+      "https://rubygems.org",
       "https://rubygems.org/**"
     ],
     enabled: true,
@@ -1674,23 +1808,28 @@ var BuiltinPolicies = [
     target: "url",
     operations: ["http_request"],
     patterns: [
+      "https://github.com",
       "https://github.com/**",
+      "https://api.github.com",
       "https://api.github.com/**",
+      "https://raw.githubusercontent.com",
       "https://raw.githubusercontent.com/**",
+      "https://gist.github.com",
       "https://gist.github.com/**"
     ],
     enabled: true,
     priority: 50
   }
 ];
-function getDefaultPolicies() {
+function getDefaultPolicies(options) {
+  const agentHome = options?.agentHome || process.env["AGENSHIELD_AGENT_HOME"] || "/Users/clawagent";
   return {
     version: "1.0.0",
     defaultAction: "deny",
     rules: [...BuiltinPolicies],
     fsConstraints: {
       allowedPaths: [
-        "/Users/clawagent/workspace",
+        agentHome,
         "/tmp/agenshield"
       ],
       deniedPatterns: [
@@ -2656,6 +2795,7 @@ export {
   SecretVault,
   UnixSocketServer,
   getDefaultPolicies,
+  handleEventsBatch,
   handleExec,
   handleFileList,
   handleFileRead,
@@ -2663,6 +2803,7 @@ export {
   handleHttpRequest,
   handleOpenUrl,
   handlePing,
+  handlePolicyCheck,
   handleSecretInject,
   handleSkillInstall,
   handleSkillUninstall

package/main.js

@@ -807,6 +807,70 @@ async function handleSkillUninstall(params, context, deps) {
   }
 }
 
+// libs/shield-broker/src/handlers/policy-check.ts
+async function handlePolicyCheck(params, context, deps) {
+  const { operation, target } = params;
+  if (!operation) {
+    return {
+      success: false,
+      error: { code: -32602, message: "Missing required parameter: operation" }
+    };
+  }
+  let checkParams;
+  switch (operation) {
+    case "http_request":
+    case "open_url":
+      checkParams = { url: target || "" };
+      break;
+    case "file_read":
+    case "file_write":
+    case "file_list":
+      checkParams = { path: target || "" };
+      break;
+    case "exec":
+      checkParams = { command: target || "" };
+      break;
+    case "secret_inject":
+      checkParams = { name: target || "" };
+      break;
+    default:
+      checkParams = { target: target || "" };
+      break;
+  }
+  const result = await deps.policyEnforcer.check(operation, checkParams, context);
+  return {
+    success: true,
+    data: {
+      allowed: result.allowed,
+      policyId: result.policyId,
+      reason: result.reason
+    }
+  };
+}
+
+// libs/shield-broker/src/handlers/events-batch.ts
+async function handleEventsBatch(params, context, deps) {
+  const { events } = params;
+  const eventList = events || [];
+  for (const event of eventList) {
+    const entry = {
+      id: event.id || context.requestId,
+      timestamp: event.timestamp ? new Date(event.timestamp) : /* @__PURE__ */ new Date(),
+      operation: event.operation || "events_batch",
+      channel: "socket",
+      allowed: event.allowed ?? true,
+      target: event.target || "",
+      result: event.allowed === false ? "denied" : "success",
+      durationMs: 0
+    };
+    await deps.auditLogger.log(entry);
+  }
+  return {
+    success: true,
+    data: { received: eventList.length }
+  };
+}
+
 // libs/shield-broker/src/server.ts
 var UnixSocketServer = class {
   server = null;
@@ -992,7 +1056,9 @@ var UnixSocketServer = class {
       secret_inject: handleSecretInject,
       ping: handlePing,
       skill_install: handleSkillInstall,
-      skill_uninstall: handleSkillUninstall
+      skill_uninstall: handleSkillUninstall,
+      policy_check: handlePolicyCheck,
+      events_batch: handleEventsBatch
     };
     return handlerMap[method];
   }
@@ -1023,7 +1089,9 @@ var HTTP_ALLOWED_OPERATIONS = /* @__PURE__ */ new Set([
   "file_read",
   "file_list",
   "open_url",
-  "ping"
+  "ping",
+  "policy_check",
+  "events_batch"
 ]);
 var HTTP_DENIED_OPERATIONS = /* @__PURE__ */ new Set([
   "exec",
@@ -1224,7 +1292,9 @@ var HttpFallbackServer = class {
       file_read: handleFileRead,
       file_list: handleFileList,
       open_url: handleOpenUrl,
-      ping: handlePing
+      ping: handlePing,
+      policy_check: handlePolicyCheck,
+      events_batch: handleEventsBatch
     };
     return handlerMap[method];
   }
@@ -1263,6 +1333,34 @@ var PolicyEnforcer = class {
     this.policies = options.defaultPolicies;
     this.loadPolicies();
   }
+  /**
+   * Normalize a policy rule — infer operations from target when missing,
+   * default priority to 0.
+   */
+  normalizeRule(rule) {
+    const normalized = { ...rule };
+    if (!normalized.priority && normalized.priority !== 0) {
+      normalized.priority = 0;
+    }
+    if (normalized.operations && normalized.operations.length > 0) {
+      return normalized;
+    }
+    switch (normalized.target) {
+      case "url":
+        normalized.operations = ["http_request", "open_url"];
+        break;
+      case "command":
+        normalized.operations = ["exec"];
+        break;
+      case "skill":
+        normalized.operations = ["skill_install", "skill_uninstall"];
+        break;
+      default:
+        normalized.operations = ["*"];
+        break;
+    }
+    return normalized;
+  }
   /**
    * Load policies from disk
    */
@@ -1275,7 +1373,7 @@ var PolicyEnforcer = class {
         this.policies = {
           ...this.policies,
           ...loaded,
-          rules: [...this.policies.rules, ...loaded.rules || []]
+          rules: [...this.policies.rules, ...(loaded.rules || []).map((r) => this.normalizeRule(r))]
         };
         this.lastLoad = Date.now();
       } catch (error) {
@@ -1291,7 +1389,7 @@ var PolicyEnforcer = class {
             const content = fs4.readFileSync(path4.join(customDir, file), "utf-8");
             const custom = JSON.parse(content);
             if (custom.rules) {
-              this.policies.rules.push(...custom.rules);
+              this.policies.rules.push(...custom.rules.map((r) => this.normalizeRule(r)));
             }
           }
         }
@@ -1520,6 +1618,28 @@ var BuiltinPolicies = [
     enabled: true,
     priority: 1e3
   },
+  // Allow interceptor policy checks (internal RPC — must not be subject to policy gate)
+  {
+    id: "builtin-allow-policy-check",
+    name: "Allow interceptor policy checks",
+    action: "allow",
+    target: "command",
+    operations: ["policy_check"],
+    patterns: ["*"],
+    enabled: true,
+    priority: 1e3
+  },
+  // Allow interceptor event reporting (internal RPC)
+  {
+    id: "builtin-allow-events-batch",
+    name: "Allow interceptor event reporting",
+    action: "allow",
+    target: "command",
+    operations: ["events_batch"],
+    patterns: ["*"],
+    enabled: true,
+    priority: 1e3
+  },
   // Allow skill installation/uninstallation (daemon management operations)
   {
     id: "builtin-allow-skill-management",
@@ -1540,9 +1660,13 @@ var BuiltinPolicies = [
     operations: ["http_request"],
     patterns: [
       "http://localhost:*",
+      "http://localhost:*/**",
       "http://127.0.0.1:*",
+      "http://127.0.0.1:*/**",
       "https://localhost:*",
-      "https://127.0.0.1:*"
+      "https://localhost:*/**",
+      "https://127.0.0.1:*",
+      "https://127.0.0.1:*/**"
     ],
     enabled: true,
     priority: 100
@@ -1642,10 +1766,15 @@ var BuiltinPolicies = [
     target: "url",
     operations: ["http_request"],
     patterns: [
+      "https://api.anthropic.com",
       "https://api.anthropic.com/**",
+      "https://api.openai.com",
       "https://api.openai.com/**",
+      "https://api.cohere.ai",
       "https://api.cohere.ai/**",
+      "https://generativelanguage.googleapis.com",
       "https://generativelanguage.googleapis.com/**",
+      "https://api.mistral.ai",
       "https://api.mistral.ai/**"
     ],
     enabled: true,
@@ -1659,10 +1788,15 @@ var BuiltinPolicies = [
     target: "url",
     operations: ["http_request"],
     patterns: [
+      "https://registry.npmjs.org",
       "https://registry.npmjs.org/**",
+      "https://pypi.org",
       "https://pypi.org/**",
+      "https://files.pythonhosted.org",
       "https://files.pythonhosted.org/**",
+      "https://crates.io",
       "https://crates.io/**",
+      "https://rubygems.org",
       "https://rubygems.org/**"
     ],
     enabled: true,
@@ -1676,23 +1810,28 @@ var BuiltinPolicies = [
     target: "url",
     operations: ["http_request"],
     patterns: [
+      "https://github.com",
       "https://github.com/**",
+      "https://api.github.com",
       "https://api.github.com/**",
+      "https://raw.githubusercontent.com",
       "https://raw.githubusercontent.com/**",
+      "https://gist.github.com",
       "https://gist.github.com/**"
     ],
     enabled: true,
     priority: 50
   }
 ];
-function getDefaultPolicies() {
+function getDefaultPolicies(options) {
+  const agentHome = options?.agentHome || process.env["AGENSHIELD_AGENT_HOME"] || "/Users/clawagent";
   return {
     version: "1.0.0",
     defaultAction: "deny",
     rules: [...BuiltinPolicies],
     fsConstraints: {
       allowedPaths: [
-        "/Users/clawagent/workspace",
+        agentHome,
         "/tmp/agenshield"
       ],
       deniedPatterns: [
@@ -2091,7 +2230,8 @@ function loadConfig() {
     failOpen: process.env["AGENSHIELD_FAIL_OPEN"] === "true" || (fileConfig.failOpen ?? false),
     socketMode: fileConfig.socketMode || 438,
     socketOwner: fileConfig.socketOwner || "clawbroker",
-    socketGroup: fileConfig.socketGroup || "clawshield"
+    socketGroup: fileConfig.socketGroup || "clawshield",
+    agentHome: process.env["AGENSHIELD_AGENT_HOME"] || fileConfig.agentHome
   };
 }
 function ensureDirectories(config) {
@@ -2126,6 +2266,7 @@ async function main() {
   console.log(`Socket owner: ${config.socketOwner}, group: ${config.socketGroup}`);
   console.log(`HTTP Fallback: ${config.httpEnabled ? `${config.httpHost}:${config.httpPort}` : "disabled"}`);
   console.log(`Policies: ${config.policiesPath}`);
+  console.log(`Agent Home: ${config.agentHome || "(env fallback)"}`);
   console.log(`Log Level: ${config.logLevel}`);
   try {
     ensureDirectories(config);
@@ -2139,7 +2280,7 @@ async function main() {
   });
   const policyEnforcer = new PolicyEnforcer({
     policiesPath: config.policiesPath,
-    defaultPolicies: getDefaultPolicies(),
+    defaultPolicies: getDefaultPolicies({ agentHome: config.agentHome }),
     failOpen: config.failOpen
   });
   const secretVault = new SecretVault({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenshield/broker",
-  "version": "0.4.4",
+  "version": "0.6.0",
   "type": "module",
   "description": "AgenShield broker daemon with Unix socket and HTTP fallback",
   "main": "./index.js",
@@ -24,7 +24,7 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@agenshield/ipc": "0.4.4"
+    "@agenshield/ipc": "0.6.0"
   },
   "devDependencies": {
     "@types/node": "^24.0.0",

package/policies/builtin.d.ts

@@ -11,5 +11,7 @@ export declare const BuiltinPolicies: PolicyRule[];
 /**
  * Get default policy configuration
  */
-export declare function getDefaultPolicies(): PolicyConfig;
+export declare function getDefaultPolicies(options?: {
+    agentHome?: string;
+}): PolicyConfig;
 //# sourceMappingURL=builtin.d.ts.map

package/policies/builtin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"builtin.d.ts","sourceRoot":"","sources":["../../src/policies/builtin.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,UAAU,EAyLvC,CAAC;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,CAgCjD"}
+{"version":3,"file":"builtin.d.ts","sourceRoot":"","sources":["../../src/policies/builtin.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE9D;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,UAAU,EAmOvC,CAAC;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,YAAY,CAoCjF"}

package/policies/enforcer.d.ts

@@ -54,6 +54,11 @@ export declare class PolicyEnforcer {
     private lastLoad;
     private reloadInterval;
     constructor(options: PolicyEnforcerOptions);
+    /**
+     * Normalize a policy rule — infer operations from target when missing,
+     * default priority to 0.
+     */
+    private normalizeRule;
     /**
      * Load policies from disk
      */

package/policies/enforcer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enforcer.d.ts","sourceRoot":"","sources":["../../src/policies/enforcer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,CAAC;IACtC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,KAAK,CAAC;IACpC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,OAAO,GAAG,MAAM,CAAC;IAChC,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,aAAa,CAAC,EAAE;QACd,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,cAAc,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;IACF,kBAAkB,CAAC,EAAE;QACnB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,YAAY,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAU;IAC1B,OAAO,CAAC,QAAQ,CAAa;IAC7B,OAAO,CAAC,cAAc,CAAiB;gBAE3B,OAAO,EAAE,qBAAqB;IAQ1C;;OAEG;IACH,OAAO,CAAC,YAAY;IA4CpB;;OAEG;IACH,OAAO,CAAC,WAAW;IAMnB;;OAEG;IACG,KAAK,CACT,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,iBAAiB,CAAC;IAuD7B;;OAEG;IACH,OAAO,CAAC,aAAa;IAmBrB;;OAEG;IACH,OAAO,CAAC,eAAe;IASvB;;OAEG;IACH,OAAO,CAAC,YAAY;IAapB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA8GxB;;OAEG;IACH,WAAW,IAAI,YAAY;IAK3B;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAK/B;;OAEG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;CAQhC"}
+{"version":3,"file":"enforcer.d.ts","sourceRoot":"","sources":["../../src/policies/enforcer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,CAAC;IACtC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,KAAK,CAAC;IACpC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,OAAO,GAAG,MAAM,CAAC;IAChC,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,aAAa,CAAC,EAAE;QACd,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,cAAc,EAAE,MAAM,EAAE,CAAC;KAC1B,CAAC;IACF,kBAAkB,CAAC,EAAE;QACnB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,YAAY,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,YAAY,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAU;IAC1B,OAAO,CAAC,QAAQ,CAAa;IAC7B,OAAO,CAAC,cAAc,CAAiB;gBAE3B,OAAO,EAAE,qBAAqB;IAQ1C;;;OAGG;IACH,OAAO,CAAC,aAAa;IAyBrB;;OAEG;IACH,OAAO,CAAC,YAAY;IA4CpB;;OAEG;IACH,OAAO,CAAC,WAAW;IAMnB;;OAEG;IACG,KAAK,CACT,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,iBAAiB,CAAC;IAuD7B;;OAEG;IACH,OAAO,CAAC,aAAa;IAmBrB;;OAEG;IACH,OAAO,CAAC,eAAe;IASvB;;OAEG;IACH,OAAO,CAAC,YAAY;IAapB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA8GxB;;OAEG;IACH,WAAW,IAAI,YAAY;IAK3B;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAK/B;;OAEG;IACH,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;CAQhC"}

package/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EACV,YAAY,EAIb,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,YAAY,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,WAAW,CAA8B;gBAErC,OAAO,EAAE,uBAAuB;IAO5C;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA4B5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA0B3B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA+BxB;;OAEG;YACW,cAAc;IAoG5B;;OAEG;IACH,OAAO,CAAC,UAAU;IAyBlB;;OAEG;IACH,OAAO,CAAC,aAAa;IAWrB;;OAEG;IACH,OAAO,CAAC,aAAa;CAWtB"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EACV,YAAY,EAIb,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,YAAY,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,WAAW,CAAC;CAC1B;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,WAAW,CAA8B;gBAErC,OAAO,EAAE,uBAAuB;IAO5C;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA4B5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA0B3B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IA+BxB;;OAEG;YACW,cAAc;IAoG5B;;OAEG;IACH,OAAO,CAAC,UAAU;IA2BlB;;OAEG;IACH,OAAO,CAAC,aAAa;IAWrB;;OAEG;IACH,OAAO,CAAC,aAAa;CAWtB"}

package/types.d.ts

@@ -30,6 +30,8 @@ export interface BrokerConfig {
     socketOwner?: string;
     /** Socket owner group */
     socketGroup?: string;
+    /** Agent home directory (for fs policy paths) */
+    agentHome?: string;
 }
 /**
  * Context passed to operation handlers

package/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAc,aAAa,EAAqC,MAAM,iBAAiB,CAAC;AAEpG;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,uBAAuB;IACvB,UAAU,EAAE,MAAM,CAAC;IAEnB,uCAAuC;IACvC,WAAW,EAAE,OAAO,CAAC;IAErB,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IAEjB,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IAEjB,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IAEnB,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;IAErB,wBAAwB;IACxB,YAAY,EAAE,MAAM,CAAC;IAErB,gBAAgB;IAChB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAE9C,iDAAiD;IACjD,QAAQ,EAAE,OAAO,CAAC;IAElB,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;IAEnB,wBAAwB;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAElB,oCAAoC;IACpC,OAAO,EAAE,QAAQ,GAAG,MAAM,CAAC;IAE3B,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,2BAA2B;IAC3B,SAAS,EAAE,IAAI,CAAC;IAEhB,2BAA2B;IAC3B,MAAM,EAAE,YAAY,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,OAAO;IACxC,sCAAsC;IACtC,OAAO,EAAE,OAAO,CAAC;IAEjB,kCAAkC;IAClC,IAAI,CAAC,EAAE,CAAC,CAAC;IAET,oCAAoC;IACpC,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IAEF,qBAAqB;IACrB,KAAK,CAAC,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,sBAAsB;IACtB,EAAE,EAAE,MAAM,CAAC;IAEX,gBAAgB;IAChB,SAAS,EAAE,IAAI,CAAC;IAEhB,qBAAqB;IACrB,SAAS,EAAE,aAAa,CAAC;IAEzB,sBAAsB;IACtB,OAAO,EAAE,QAAQ,GAAG,MAAM,CAAC;IAE3B,qBAAqB;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;IAEjB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IAEf,uBAAuB;IACvB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;IAEvC,8BAA8B;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;IAEnB,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IAEb,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IAEvB,6CAA6C;IAC7C,iBAAiB,EAAE,aAAa,EAAE,CAAC;IAEnC,wBAAwB;IACxB,SAAS,EAAE,IAAI,CAAC;IAEhB,8BAA8B;IAC9B,cAAc,CAAC,EAAE,IAAI,CAAC;IAEtB,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;QACvC,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,0DAA0D;IAC1D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,qCAAqC;IACrC,SAAS,EAAE,OAAO,CAAC;IACnB,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8BAA8B;IAC9B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,uCAAuC;IACvC,WAAW,EAAE,OAAO,CAAC;IACrB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,cAAc,EAAE,OAAO,CAAC;CACzB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAc,aAAa,EAAqC,MAAM,iBAAiB,CAAC;AAEpG;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,uBAAuB;IACvB,UAAU,EAAE,MAAM,CAAC;IAEnB,uCAAuC;IACvC,WAAW,EAAE,OAAO,CAAC;IAErB,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IAEjB,+CAA+C;IAC/C,QAAQ,EAAE,MAAM,CAAC;IAEjB,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IAEnB,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;IAErB,wBAAwB;IACxB,YAAY,EAAE,MAAM,CAAC;IAErB,gBAAgB;IAChB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAE9C,iDAAiD;IACjD,QAAQ,EAAE,OAAO,CAAC;IAElB,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;IAEnB,wBAAwB;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,yBAAyB;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;IAElB,oCAAoC;IACpC,OAAO,EAAE,QAAQ,GAAG,MAAM,CAAC;IAE3B,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,wBAAwB;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,2BAA2B;IAC3B,SAAS,EAAE,IAAI,CAAC;IAEhB,2BAA2B;IAC3B,MAAM,EAAE,YAAY,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,OAAO;IACxC,sCAAsC;IACtC,OAAO,EAAE,OAAO,CAAC;IAEjB,kCAAkC;IAClC,IAAI,CAAC,EAAE,CAAC,CAAC;IAET,oCAAoC;IACpC,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IAEF,qBAAqB;IACrB,KAAK,CAAC,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,sBAAsB;IACtB,EAAE,EAAE,MAAM,CAAC;IAEX,gBAAgB;IAChB,SAAS,EAAE,IAAI,CAAC;IAEhB,qBAAqB;IACrB,SAAS,EAAE,aAAa,CAAC;IAEzB,sBAAsB;IACtB,OAAO,EAAE,QAAQ,GAAG,MAAM,CAAC;IAE3B,qBAAqB;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;IAEjB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IAEf,uBAAuB;IACvB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;IAEvC,8BAA8B;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;IAEnB,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IAEb,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;IAEvB,6CAA6C;IAC7C,iBAAiB,EAAE,aAAa,EAAE,CAAC;IAEnC,wBAAwB;IACxB,SAAS,EAAE,IAAI,CAAC;IAEhB,8BAA8B;IAC9B,cAAc,CAAC,EAAE,IAAI,CAAC;IAEtB,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;QACvC,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,0DAA0D;IAC1D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,qCAAqC;IACrC,SAAS,EAAE,OAAO,CAAC;IACnB,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8BAA8B;IAC9B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,uCAAuC;IACvC,WAAW,EAAE,OAAO,CAAC;IACrB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,cAAc,EAAE,OAAO,CAAC;CACzB"}