@agent-assembly/sdk 0.0.1-alpha.3

package/dist/esm/native/client.js

@@ -0,0 +1,150 @@
+import { createRequire } from "node:module";
+import path from "node:path";
+const NATIVE_BINDING_SINGLETON_KEY = Symbol.for("@agent-assembly/sdk/native-binding");
+const ERROR_CONNECT = "AA_ERR_CONNECT";
+const ERROR_SEND_EVENT = "AA_ERR_SEND_EVENT";
+const ERROR_QUERY_POLICY = "AA_ERR_QUERY_POLICY";
+const ERROR_DISCONNECT = "AA_ERR_DISCONNECT";
+export class NativeConnectError extends Error {
+    code = ERROR_CONNECT;
+}
+export class NativeSendEventError extends Error {
+    code = ERROR_SEND_EVENT;
+}
+export class NativeQueryPolicyError extends Error {
+    code = ERROR_QUERY_POLICY;
+}
+export class NativeDisconnectError extends Error {
+    code = ERROR_DISCONNECT;
+}
+function mapNativeError(error) {
+    if (!(error instanceof Error)) {
+        return new Error(String(error));
+    }
+    const [code, ...rest] = error.message.split(":");
+    const detail = rest.join(":").trim() || error.message;
+    if (code === ERROR_CONNECT) {
+        return new NativeConnectError(detail);
+    }
+    if (code === ERROR_SEND_EVENT) {
+        return new NativeSendEventError(detail);
+    }
+    if (code === ERROR_QUERY_POLICY) {
+        return new NativeQueryPolicyError(detail);
+    }
+    if (code === ERROR_DISCONNECT) {
+        return new NativeDisconnectError(detail);
+    }
+    return error;
+}
+function loadNativeBinding() {
+    const shouldUseCache = process.env.VITEST !== "true";
+    const globalObject = globalThis;
+    const cachedBinding = shouldUseCache
+        ? globalObject[NATIVE_BINDING_SINGLETON_KEY]
+        : undefined;
+    if (cachedBinding) {
+        return cachedBinding;
+    }
+    const requireFromHere = createRequire(path.resolve(process.cwd(), "package.json"));
+    const candidates = [
+        "../../native/aa-ffi-node/index.cjs",
+        "../../../native/aa-ffi-node/index.cjs",
+        `${process.cwd()}/native/aa-ffi-node/index.cjs`
+    ];
+    let lastError;
+    for (const candidate of candidates) {
+        try {
+            const binding = requireFromHere(candidate);
+            if (shouldUseCache) {
+                globalObject[NATIVE_BINDING_SINGLETON_KEY] = binding;
+            }
+            return binding;
+        }
+        catch (error) {
+            lastError = error;
+        }
+    }
+    throw new NativeConnectError(`Failed to load native binding from known paths: ${String(lastError)}`);
+}
+export function createNativeClient(options) {
+    const mode = options.mode ?? "grpc-sidecar";
+    if (mode !== "napi-inprocess") {
+        return {
+            mode,
+            close: async () => undefined,
+            sendEvent: () => undefined,
+            queryPolicy: async () => ({ denied: false, pending: false })
+        };
+    }
+    const binding = loadNativeBinding();
+    const socketPath = options.gateway;
+    let handlePromise;
+    let activeHandle;
+    let pendingSendError;
+    const getHandle = async () => {
+        if (!handlePromise) {
+            handlePromise = binding
+                .connect(socketPath)
+                .then((handle) => {
+                activeHandle = handle;
+                return handle;
+            })
+                .catch((error) => {
+                handlePromise = undefined;
+                activeHandle = undefined;
+                throw mapNativeError(error);
+            });
+        }
+        return handlePromise;
+    };
+    return {
+        mode,
+        close: async () => {
+            if (pendingSendError) {
+                const error = pendingSendError;
+                pendingSendError = undefined;
+                throw error;
+            }
+            if (!handlePromise) {
+                return;
+            }
+            const handle = await getHandle();
+            await binding.disconnect(handle).catch((error) => {
+                throw mapNativeError(error);
+            });
+            handlePromise = undefined;
+            activeHandle = undefined;
+        },
+        sendEvent: (event) => {
+            if (activeHandle) {
+                try {
+                    binding.sendEvent(activeHandle, event);
+                }
+                catch (error) {
+                    pendingSendError = mapNativeError(error);
+                }
+                return;
+            }
+            void getHandle()
+                .then((handle) => {
+                binding.sendEvent(handle, event);
+            })
+                .catch((error) => {
+                pendingSendError = mapNativeError(error);
+            });
+        },
+        queryPolicy: async (action) => {
+            if (pendingSendError) {
+                const error = pendingSendError;
+                pendingSendError = undefined;
+                throw error;
+            }
+            const handle = await getHandle();
+            return binding.queryPolicy(handle, action).catch((error) => {
+                throw mapNativeError(error);
+            });
+        }
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/esm/native/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/native/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAgB7B,MAAM,4BAA4B,GAAG,MAAM,CAAC,GAAG,CAC7C,oCAAoC,CACrC,CAAC;AAMF,MAAM,aAAa,GAAG,gBAAgB,CAAC;AACvC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAC7C,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AACjD,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAE7C,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,IAAI,GAAG,aAAa,CAAC;CAC/B;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,GAAG,gBAAgB,CAAC;CAClC;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,GAAG,kBAAkB,CAAC;CACpC;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,GAAG,gBAAgB,CAAC;CAClC;AASD,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC;IAEtD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,OAAO,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QAChC,OAAO,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,OAAO,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB;IACxB,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;IACrD,MAAM,YAAY,GAAG,UAAqC,CAAC;IAC3D,MAAM,aAAa,GAAG,cAAc;QAClC,CAAC,CAAC,YAAY,CAAC,4BAA4B,CAAC;QAC5C,CAAC,CAAC,SAAS,CAAC;IAEd,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,eAAe,GAAG,aAAa,CACnC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAC5C,CAAC;IACF,MAAM,UAAU,GAAG;QACjB,oCAAoC;QACpC,uCAAuC;QACvC,GAAG,OAAO,CAAC,GAAG,EAAE,+BAA+B;KAChD,CAAC;IAEF,IAAI,SAAkB,CAAC;IACvB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,CAAkB,CAAC;YAC5D,IAAI,cAAc,EAAE,CAAC;gBACnB,YAAY,CAAC,4BAA4B,CAAC,GAAG,OAAO,CAAC;YACvD,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,kBAAkB,CAC1B,mDAAmD,MAAM,CAAC,SAAS,CAAC,EAAE,CACvE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC;IAE5C,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;YAC5B,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS;YAC1B,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IAEnC,IAAI,aAA0C,CAAC;IAC/C,IAAI,YAAgC,CAAC;IACrC,IAAI,gBAAmC,CAAC;IAExC,MAAM,SAAS,GAAG,KAAK,IAAqB,EAAE;QAC5C,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,aAAa,GAAG,OAAO;iBACpB,OAAO,CAAC,UAAU,CAAC;iBACnB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBACf,YAAY,GAAG,MAAM,CAAC;gBACtB,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACxB,aAAa,GAAG,SAAS,CAAC;gBAC1B,YAAY,GAAG,SAAS,CAAC;gBACzB,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;QACP,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,gBAAgB,CAAC;gBAC/B,gBAAgB,GAAG,SAAS,CAAC;gBAC7B,MAAM,KAAK,CAAC;YACd,CAAC;YAED,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACxD,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,aAAa,GAAG,SAAS,CAAC;YAC1B,YAAY,GAAG,SAAS,CAAC;QAC3B,CAAC;QACD,SAAS,EAAE,CAAC,KAAc,EAAE,EAAE;YAC5B,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC;oBACH,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;gBACzC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,gBAAgB,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC3C,CAAC;gBACD,OAAO;YACT,CAAC;YAED,KAAK,SAAS,EAAE;iBACb,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBACf,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACnC,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACxB,gBAAgB,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;QACP,CAAC;QACD,WAAW,EAAE,KAAK,EAAE,MAAe,EAAE,EAAE;YACrC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,gBAAgB,CAAC;gBAC/B,gBAAgB,GAAG,SAAS,CAAC;gBAC7B,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAClE,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/esm/op-control.js

@@ -0,0 +1,147 @@
+/**
+ * Gateway → SDK op-control consumer (AAASM-1422 PR-F / AAASM-1655).
+ *
+ * Subscribes to `PolicyService.OpControlStream` and exposes a per-`op_id`
+ * cooperative-pause / fast-fail-terminate state machine through
+ * {@link OpControlSubscriber.waitForOp}.
+ *
+ * State machine per op_id:
+ * - `OP_CONTROL_SIGNAL_PAUSE`     → `waitForOp` blocks until RESUME arrives.
+ * - `OP_CONTROL_SIGNAL_RESUME`    → `waitForOp` resolves immediately.
+ * - `OP_CONTROL_SIGNAL_TERMINATE` → `waitForOp` rejects with `OpTerminatedError`.
+ *
+ * Signals that arrive for an `op_id` no one is currently awaiting are
+ * buffered into the per-op slot so the next `waitForOp` sees them.
+ *
+ * Out of scope for PR-F (deferred):
+ *   - Reconnection / heartbeat on stream close (caller observes
+ *     `streamAlive` and re-instantiates if desired).
+ *   - Auto-wiring into the existing `GatewayClient` / adapter hooks
+ *     (separate sub-task when the adapter surface is stable).
+ */
+import { credentials as grpcCredentials, } from "@grpc/grpc-js";
+import { OpTerminatedError } from "./errors/op-terminated-error.js";
+import { OpControlSignal, PolicyServiceClient, } from "./proto/generated/policy.js";
+export class OpControlSubscriber {
+    client;
+    agent;
+    ops = new Map();
+    call = null;
+    alive = true;
+    constructor(client, agent) {
+        this.client = client;
+        this.agent = agent;
+    }
+    /** Open the gRPC channel + subscription stream and start the reader. */
+    static connect(gatewayUrl, opts) {
+        const agent = {
+            orgId: opts.orgId,
+            teamId: opts.teamId,
+            agentId: opts.agentId,
+        };
+        const client = opts.clientFactory
+            ? opts.clientFactory()
+            : new PolicyServiceClient(gatewayUrl, opts.credentials ?? grpcCredentials.createInsecure());
+        const subscriber = new OpControlSubscriber(client, agent);
+        subscriber.start();
+        return subscriber;
+    }
+    /** Open the stream and wire reader handlers. Public so tests can call
+     * directly after constructing with a hand-rolled client.
+     */
+    start() {
+        this.call = this.client.opControlStream({ agentId: this.agent });
+        this.call.on("data", (msg) => this.dispatch(msg));
+        this.call.on("error", () => this.markStreamDead());
+        this.call.on("end", () => this.markStreamDead());
+    }
+    dispatch(msg) {
+        const state = this.slot(msg.opId);
+        switch (msg.signal) {
+            case OpControlSignal.OP_CONTROL_SIGNAL_PAUSE:
+                state.paused = true;
+                break;
+            case OpControlSignal.OP_CONTROL_SIGNAL_RESUME:
+                state.paused = false;
+                this.flushResolvers(state);
+                break;
+            case OpControlSignal.OP_CONTROL_SIGNAL_TERMINATE:
+                state.terminated = true;
+                this.flushResolvers(state);
+                break;
+            default:
+                // UNSPECIFIED / UNRECOGNIZED — drop on the floor.
+                break;
+        }
+    }
+    slot(opId) {
+        let state = this.ops.get(opId);
+        if (!state) {
+            state = { paused: false, terminated: false, resolvers: [] };
+            this.ops.set(opId, state);
+        }
+        return state;
+    }
+    flushResolvers(state) {
+        const pending = state.resolvers;
+        state.resolvers = [];
+        for (const resolve of pending)
+            resolve();
+    }
+    markStreamDead() {
+        this.alive = false;
+        // Wake any blocked waiters so they can re-check state.
+        for (const state of this.ops.values())
+            this.flushResolvers(state);
+    }
+    /**
+     * Block until `opId` is runnable, or reject on terminate.
+     *
+     * Resolves immediately when the op is not currently paused. When paused,
+     * waits up to `timeoutMs` for a resume signal. Rejects with
+     * {@link OpTerminatedError} if the op has been (or becomes) terminated.
+     *
+     * A timeout resolves normally — the caller can inspect {@link isPaused}
+     * or retry. Matches the cooperative-pause expectation in the architecture
+     * doc (the SDK yields, it doesn't deadline-enforce).
+     */
+    async waitForOp(opId, opts = {}) {
+        const state = this.slot(opId);
+        if (state.terminated) {
+            throw new OpTerminatedError(`op ${opId} was terminated by the gateway`, opId);
+        }
+        if (!state.paused)
+            return;
+        await new Promise((resolve) => {
+            state.resolvers.push(resolve);
+            if (opts.timeoutMs !== undefined) {
+                setTimeout(() => {
+                    // Remove this resolver from the queue + resolve so the await unblocks.
+                    const idx = state.resolvers.indexOf(resolve);
+                    if (idx !== -1)
+                        state.resolvers.splice(idx, 1);
+                    resolve();
+                }, opts.timeoutMs);
+            }
+        });
+        if (state.terminated) {
+            throw new OpTerminatedError(`op ${opId} was terminated by the gateway`, opId);
+        }
+    }
+    isPaused(opId) {
+        return this.ops.get(opId)?.paused ?? false;
+    }
+    isTerminated(opId) {
+        return this.ops.get(opId)?.terminated ?? false;
+    }
+    streamAlive() {
+        return this.alive;
+    }
+    /** Cancel the stream and clean up. */
+    close() {
+        this.call?.cancel();
+        this.client.close?.();
+        this.markStreamDead();
+    }
+}
+//# sourceMappingURL=op-control.js.map

package/dist/esm/op-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"op-control.js","sourceRoot":"","sources":["../../src/op-control.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAGL,WAAW,IAAI,eAAe,GAC/B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAEpE,OAAO,EAEL,eAAe,EAEf,mBAAmB,GACpB,MAAM,6BAA6B,CAAC;AAmCrC,MAAM,OAAO,mBAAmB;IACb,MAAM,CAAkB;IACxB,KAAK,CAAU;IACf,GAAG,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjD,IAAI,GAAkD,IAAI,CAAC;IAC3D,KAAK,GAAG,IAAI,CAAC;IAErB,YAAoB,MAAuB,EAAE,KAAc;QACzD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,wEAAwE;IACjE,MAAM,CAAC,OAAO,CACnB,UAAkB,EAClB,IAAgC;QAEhC,MAAM,KAAK,GAAY;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa;YAC/B,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE;YACtB,CAAC,CAAE,IAAI,mBAAmB,CACtB,UAAU,EACV,IAAI,CAAC,WAAW,IAAI,eAAe,CAAC,cAAc,EAAE,CACI,CAAC;QAC/D,MAAM,UAAU,GAAG,IAAI,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC1D,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACI,KAAK;QACV,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,GAAqB,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACnD,CAAC;IAEO,QAAQ,CAAC,GAAqB;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,eAAe,CAAC,uBAAuB;gBAC1C,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;gBACpB,MAAM;YACR,KAAK,eAAe,CAAC,wBAAwB;gBAC3C,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;gBACrB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC3B,MAAM;YACR,KAAK,eAAe,CAAC,2BAA2B;gBAC9C,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;gBACxB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;gBAC3B,MAAM;YACR;gBACE,kDAAkD;gBAClD,MAAM;QACV,CAAC;IACH,CAAC;IAEO,IAAI,CAAC,IAAY;QACvB,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;YAC5D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,cAAc,CAAC,KAAqB;QAC1C,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC;QAChC,KAAK,CAAC,SAAS,GAAG,EAAE,CAAC;QACrB,KAAK,MAAM,OAAO,IAAI,OAAO;YAAE,OAAO,EAAE,CAAC;IAC3C,CAAC;IAEO,cAAc;QACpB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,uDAAuD;QACvD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;IAED;;;;;;;;;;OAUG;IACI,KAAK,CAAC,SAAS,CACpB,IAAY,EACZ,OAA+B,EAAE;QAEjC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,iBAAiB,CAAC,MAAM,IAAI,gCAAgC,EAAE,IAAI,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO;QAE1B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACjC,UAAU,CAAC,GAAG,EAAE;oBACd,uEAAuE;oBACvE,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBAC7C,IAAI,GAAG,KAAK,CAAC,CAAC;wBAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;oBAC/C,OAAO,EAAE,CAAC;gBACZ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,iBAAiB,CAAC,MAAM,IAAI,gCAAgC,EAAE,IAAI,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAEM,QAAQ,CAAC,IAAY;QAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,KAAK,CAAC;IAC7C,CAAC;IAEM,YAAY,CAAC,IAAY;QAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,IAAI,KAAK,CAAC;IACjD,CAAC;IAEM,WAAW;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,sCAAsC;IAC/B,KAAK;QACV,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;CACF"}

package/dist/esm/proto/generated/common.js

@@ -0,0 +1,357 @@
+// AUTO-GENERATED by scripts/gen-proto.mjs from ../agent-assembly/proto/. Do not edit by hand.
+// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
+// versions:
+//   protoc-gen-ts_proto  v2.11.8
+//   protoc               v3.19.1
+// source: common.proto
+/* eslint-disable */
+import { BinaryReader, BinaryWriter } from "@bufbuild/protobuf/wire";
+export const protobufPackage = "assembly.common.v1";
+/**
+ * Decision is the outcome of a policy evaluation. Used by policy.proto and
+ * mirrored in audit.proto to keep audit self-contained.
+ */
+export var Decision;
+(function (Decision) {
+    Decision[Decision["DECISION_UNSPECIFIED"] = 0] = "DECISION_UNSPECIFIED";
+    /** ALLOW - Action is permitted immediately. */
+    Decision[Decision["ALLOW"] = 1] = "ALLOW";
+    /** DENY - Action is blocked; no further recourse. */
+    Decision[Decision["DENY"] = 2] = "DENY";
+    /** PENDING - Action is held — a human reviewer must approve or reject it. */
+    Decision[Decision["PENDING"] = 3] = "PENDING";
+    /** REDACT - Action is permitted but sensitive fields must be redacted first. */
+    Decision[Decision["REDACT"] = 4] = "REDACT";
+    Decision[Decision["UNRECOGNIZED"] = -1] = "UNRECOGNIZED";
+})(Decision || (Decision = {}));
+export function decisionFromJSON(object) {
+    switch (object) {
+        case 0:
+        case "DECISION_UNSPECIFIED":
+            return Decision.DECISION_UNSPECIFIED;
+        case 1:
+        case "ALLOW":
+            return Decision.ALLOW;
+        case 2:
+        case "DENY":
+            return Decision.DENY;
+        case 3:
+        case "PENDING":
+            return Decision.PENDING;
+        case 4:
+        case "REDACT":
+            return Decision.REDACT;
+        case -1:
+        case "UNRECOGNIZED":
+        default:
+            return Decision.UNRECOGNIZED;
+    }
+}
+export function decisionToJSON(object) {
+    switch (object) {
+        case Decision.DECISION_UNSPECIFIED:
+            return "DECISION_UNSPECIFIED";
+        case Decision.ALLOW:
+            return "ALLOW";
+        case Decision.DENY:
+            return "DENY";
+        case Decision.PENDING:
+            return "PENDING";
+        case Decision.REDACT:
+            return "REDACT";
+        case Decision.UNRECOGNIZED:
+        default:
+            return "UNRECOGNIZED";
+    }
+}
+/**
+ * ActionType classifies what kind of operation the agent is attempting.
+ * Drives both policy rule matching and audit event categorisation.
+ */
+export var ActionType;
+(function (ActionType) {
+    ActionType[ActionType["ACTION_UNSPECIFIED"] = 0] = "ACTION_UNSPECIFIED";
+    /** LLM_CALL - Call a large-language model (e.g. GPT-4o, Claude, Gemini). */
+    ActionType[ActionType["LLM_CALL"] = 1] = "LLM_CALL";
+    /** TOOL_CALL - Invoke a tool or MCP server function. */
+    ActionType[ActionType["TOOL_CALL"] = 2] = "TOOL_CALL";
+    /** FILE_OPERATION - Read, write, delete, or create a local file. */
+    ActionType[ActionType["FILE_OPERATION"] = 3] = "FILE_OPERATION";
+    /** NETWORK_CALL - Make an outbound network request. */
+    ActionType[ActionType["NETWORK_CALL"] = 4] = "NETWORK_CALL";
+    /** PROCESS_EXEC - Execute a subprocess. */
+    ActionType[ActionType["PROCESS_EXEC"] = 5] = "PROCESS_EXEC";
+    /** AGENT_SPAWN - Spawn a child agent. */
+    ActionType[ActionType["AGENT_SPAWN"] = 6] = "AGENT_SPAWN";
+    ActionType[ActionType["UNRECOGNIZED"] = -1] = "UNRECOGNIZED";
+})(ActionType || (ActionType = {}));
+export function actionTypeFromJSON(object) {
+    switch (object) {
+        case 0:
+        case "ACTION_UNSPECIFIED":
+            return ActionType.ACTION_UNSPECIFIED;
+        case 1:
+        case "LLM_CALL":
+            return ActionType.LLM_CALL;
+        case 2:
+        case "TOOL_CALL":
+            return ActionType.TOOL_CALL;
+        case 3:
+        case "FILE_OPERATION":
+            return ActionType.FILE_OPERATION;
+        case 4:
+        case "NETWORK_CALL":
+            return ActionType.NETWORK_CALL;
+        case 5:
+        case "PROCESS_EXEC":
+            return ActionType.PROCESS_EXEC;
+        case 6:
+        case "AGENT_SPAWN":
+            return ActionType.AGENT_SPAWN;
+        case -1:
+        case "UNRECOGNIZED":
+        default:
+            return ActionType.UNRECOGNIZED;
+    }
+}
+export function actionTypeToJSON(object) {
+    switch (object) {
+        case ActionType.ACTION_UNSPECIFIED:
+            return "ACTION_UNSPECIFIED";
+        case ActionType.LLM_CALL:
+            return "LLM_CALL";
+        case ActionType.TOOL_CALL:
+            return "TOOL_CALL";
+        case ActionType.FILE_OPERATION:
+            return "FILE_OPERATION";
+        case ActionType.NETWORK_CALL:
+            return "NETWORK_CALL";
+        case ActionType.PROCESS_EXEC:
+            return "PROCESS_EXEC";
+        case ActionType.AGENT_SPAWN:
+            return "AGENT_SPAWN";
+        case ActionType.UNRECOGNIZED:
+        default:
+            return "UNRECOGNIZED";
+    }
+}
+/** RiskTier classifies an agent or policy by the risk level it operates at. */
+export var RiskTier;
+(function (RiskTier) {
+    RiskTier[RiskTier["RISK_UNSPECIFIED"] = 0] = "RISK_UNSPECIFIED";
+    /** LOW - Low risk: log-only enforcement; no blocking. */
+    RiskTier[RiskTier["LOW"] = 1] = "LOW";
+    /** MEDIUM - Medium risk: block-and-optionally-approve enforcement. */
+    RiskTier[RiskTier["MEDIUM"] = 2] = "MEDIUM";
+    /** HIGH - High risk: always block; human review mandatory. */
+    RiskTier[RiskTier["HIGH"] = 3] = "HIGH";
+    /** CRITICAL - Critical risk: immediate kill + incident escalation. */
+    RiskTier[RiskTier["CRITICAL"] = 4] = "CRITICAL";
+    RiskTier[RiskTier["UNRECOGNIZED"] = -1] = "UNRECOGNIZED";
+})(RiskTier || (RiskTier = {}));
+export function riskTierFromJSON(object) {
+    switch (object) {
+        case 0:
+        case "RISK_UNSPECIFIED":
+            return RiskTier.RISK_UNSPECIFIED;
+        case 1:
+        case "LOW":
+            return RiskTier.LOW;
+        case 2:
+        case "MEDIUM":
+            return RiskTier.MEDIUM;
+        case 3:
+        case "HIGH":
+            return RiskTier.HIGH;
+        case 4:
+        case "CRITICAL":
+            return RiskTier.CRITICAL;
+        case -1:
+        case "UNRECOGNIZED":
+        default:
+            return RiskTier.UNRECOGNIZED;
+    }
+}
+export function riskTierToJSON(object) {
+    switch (object) {
+        case RiskTier.RISK_UNSPECIFIED:
+            return "RISK_UNSPECIFIED";
+        case RiskTier.LOW:
+            return "LOW";
+        case RiskTier.MEDIUM:
+            return "MEDIUM";
+        case RiskTier.HIGH:
+            return "HIGH";
+        case RiskTier.CRITICAL:
+            return "CRITICAL";
+        case RiskTier.UNRECOGNIZED:
+        default:
+            return "UNRECOGNIZED";
+    }
+}
+function createBaseAgentId() {
+    return { orgId: "", teamId: "", agentId: "" };
+}
+export const AgentId = {
+    encode(message, writer = new BinaryWriter()) {
+        if (message.orgId !== "") {
+            writer.uint32(10).string(message.orgId);
+        }
+        if (message.teamId !== "") {
+            writer.uint32(18).string(message.teamId);
+        }
+        if (message.agentId !== "") {
+            writer.uint32(26).string(message.agentId);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseAgentId();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.orgId = reader.string();
+                    continue;
+                }
+                case 2: {
+                    if (tag !== 18) {
+                        break;
+                    }
+                    message.teamId = reader.string();
+                    continue;
+                }
+                case 3: {
+                    if (tag !== 26) {
+                        break;
+                    }
+                    message.agentId = reader.string();
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            orgId: isSet(object.orgId)
+                ? globalThis.String(object.orgId)
+                : isSet(object.org_id)
+                    ? globalThis.String(object.org_id)
+                    : "",
+            teamId: isSet(object.teamId)
+                ? globalThis.String(object.teamId)
+                : isSet(object.team_id)
+                    ? globalThis.String(object.team_id)
+                    : "",
+            agentId: isSet(object.agentId)
+                ? globalThis.String(object.agentId)
+                : isSet(object.agent_id)
+                    ? globalThis.String(object.agent_id)
+                    : "",
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.orgId !== "") {
+            obj.orgId = message.orgId;
+        }
+        if (message.teamId !== "") {
+            obj.teamId = message.teamId;
+        }
+        if (message.agentId !== "") {
+            obj.agentId = message.agentId;
+        }
+        return obj;
+    },
+    create(base) {
+        return AgentId.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseAgentId();
+        message.orgId = object.orgId ?? "";
+        message.teamId = object.teamId ?? "";
+        message.agentId = object.agentId ?? "";
+        return message;
+    },
+};
+function createBaseTimestamp() {
+    return { unixMs: 0 };
+}
+export const Timestamp = {
+    encode(message, writer = new BinaryWriter()) {
+        if (message.unixMs !== 0) {
+            writer.uint32(8).int64(message.unixMs);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseTimestamp();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 8) {
+                        break;
+                    }
+                    message.unixMs = longToNumber(reader.int64());
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            unixMs: isSet(object.unixMs)
+                ? globalThis.Number(object.unixMs)
+                : isSet(object.unix_ms)
+                    ? globalThis.Number(object.unix_ms)
+                    : 0,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.unixMs !== 0) {
+            obj.unixMs = Math.round(message.unixMs);
+        }
+        return obj;
+    },
+    create(base) {
+        return Timestamp.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseTimestamp();
+        message.unixMs = object.unixMs ?? 0;
+        return message;
+    },
+};
+function longToNumber(int64) {
+    const num = globalThis.Number(int64.toString());
+    if (num > globalThis.Number.MAX_SAFE_INTEGER) {
+        throw new globalThis.Error("Value is larger than Number.MAX_SAFE_INTEGER");
+    }
+    if (num < globalThis.Number.MIN_SAFE_INTEGER) {
+        throw new globalThis.Error("Value is smaller than Number.MIN_SAFE_INTEGER");
+    }
+    return num;
+}
+function isSet(value) {
+    return value !== null && value !== undefined;
+}
+//# sourceMappingURL=common.js.map