@agent-assembly/sdk 0.0.1-alpha.3

package/dist/cjs/proto/generated/policy.js

@@ -0,0 +1,1418 @@
+"use strict";
+// AUTO-GENERATED by scripts/gen-proto.mjs from ../agent-assembly/proto/. Do not edit by hand.
+// Code generated by protoc-gen-ts_proto. DO NOT EDIT.
+// versions:
+//   protoc-gen-ts_proto  v2.11.8
+//   protoc               v3.19.1
+// source: policy.proto
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PolicyServiceClient = exports.PolicyServiceService = exports.OpControlMessage = exports.OpControlSubscribeRequest = exports.BatchCheckResponse = exports.BatchCheckRequest = exports.RedactRule = exports.RedactInstructions = exports.CheckActionResponse = exports.ProcessExecContext = exports.NetworkCallContext = exports.FileOpContext = exports.ToolCallContext = exports.LLMCallContext = exports.ActionContext = exports.CheckActionRequest = exports.OpControlSignal = exports.protobufPackage = void 0;
+exports.opControlSignalFromJSON = opControlSignalFromJSON;
+exports.opControlSignalToJSON = opControlSignalToJSON;
+/* eslint-disable */
+const wire_1 = require("@bufbuild/protobuf/wire");
+const grpc_js_1 = require("@grpc/grpc-js");
+const common_js_1 = require("./common.js");
+exports.protobufPackage = "assembly.policy.v1";
+/**
+ * OpControlSignal classifies the lifecycle action the gateway is pushing to
+ * the SDK. Mirrors the OpsRegistry transitions in aa-gateway/src/ops/mod.rs.
+ */
+var OpControlSignal;
+(function (OpControlSignal) {
+    /** OP_CONTROL_SIGNAL_UNSPECIFIED - Default — never wired; treated as a malformed message by the SDK. */
+    OpControlSignal[OpControlSignal["OP_CONTROL_SIGNAL_UNSPECIFIED"] = 0] = "OP_CONTROL_SIGNAL_UNSPECIFIED";
+    /**
+     * OP_CONTROL_SIGNAL_PAUSE - Operator paused the op via POST /api/v1/ops/{id}/pause. SDK should
+     * cooperatively yield at the next interruption point and block on resume.
+     */
+    OpControlSignal[OpControlSignal["OP_CONTROL_SIGNAL_PAUSE"] = 1] = "OP_CONTROL_SIGNAL_PAUSE";
+    /** OP_CONTROL_SIGNAL_RESUME - Operator resumed the op via POST /api/v1/ops/{id}/resume. SDK unblocks. */
+    OpControlSignal[OpControlSignal["OP_CONTROL_SIGNAL_RESUME"] = 2] = "OP_CONTROL_SIGNAL_RESUME";
+    /**
+     * OP_CONTROL_SIGNAL_TERMINATE - Operator (or policy deny) terminated the op. SDK fast-fails the in-flight
+     * action with an OpTerminatedError.
+     */
+    OpControlSignal[OpControlSignal["OP_CONTROL_SIGNAL_TERMINATE"] = 3] = "OP_CONTROL_SIGNAL_TERMINATE";
+    OpControlSignal[OpControlSignal["UNRECOGNIZED"] = -1] = "UNRECOGNIZED";
+})(OpControlSignal || (exports.OpControlSignal = OpControlSignal = {}));
+function opControlSignalFromJSON(object) {
+    switch (object) {
+        case 0:
+        case "OP_CONTROL_SIGNAL_UNSPECIFIED":
+            return OpControlSignal.OP_CONTROL_SIGNAL_UNSPECIFIED;
+        case 1:
+        case "OP_CONTROL_SIGNAL_PAUSE":
+            return OpControlSignal.OP_CONTROL_SIGNAL_PAUSE;
+        case 2:
+        case "OP_CONTROL_SIGNAL_RESUME":
+            return OpControlSignal.OP_CONTROL_SIGNAL_RESUME;
+        case 3:
+        case "OP_CONTROL_SIGNAL_TERMINATE":
+            return OpControlSignal.OP_CONTROL_SIGNAL_TERMINATE;
+        case -1:
+        case "UNRECOGNIZED":
+        default:
+            return OpControlSignal.UNRECOGNIZED;
+    }
+}
+function opControlSignalToJSON(object) {
+    switch (object) {
+        case OpControlSignal.OP_CONTROL_SIGNAL_UNSPECIFIED:
+            return "OP_CONTROL_SIGNAL_UNSPECIFIED";
+        case OpControlSignal.OP_CONTROL_SIGNAL_PAUSE:
+            return "OP_CONTROL_SIGNAL_PAUSE";
+        case OpControlSignal.OP_CONTROL_SIGNAL_RESUME:
+            return "OP_CONTROL_SIGNAL_RESUME";
+        case OpControlSignal.OP_CONTROL_SIGNAL_TERMINATE:
+            return "OP_CONTROL_SIGNAL_TERMINATE";
+        case OpControlSignal.UNRECOGNIZED:
+        default:
+            return "UNRECOGNIZED";
+    }
+}
+function createBaseCheckActionRequest() {
+    return { agentId: undefined, credentialToken: "", traceId: "", spanId: "", actionType: 0, context: undefined };
+}
+exports.CheckActionRequest = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        if (message.agentId !== undefined) {
+            common_js_1.AgentId.encode(message.agentId, writer.uint32(10).fork()).join();
+        }
+        if (message.credentialToken !== "") {
+            writer.uint32(18).string(message.credentialToken);
+        }
+        if (message.traceId !== "") {
+            writer.uint32(26).string(message.traceId);
+        }
+        if (message.spanId !== "") {
+            writer.uint32(34).string(message.spanId);
+        }
+        if (message.actionType !== 0) {
+            writer.uint32(40).int32(message.actionType);
+        }
+        if (message.context !== undefined) {
+            exports.ActionContext.encode(message.context, writer.uint32(50).fork()).join();
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseCheckActionRequest();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.agentId = common_js_1.AgentId.decode(reader, reader.uint32());
+                    continue;
+                }
+                case 2: {
+                    if (tag !== 18) {
+                        break;
+                    }
+                    message.credentialToken = reader.string();
+                    continue;
+                }
+                case 3: {
+                    if (tag !== 26) {
+                        break;
+                    }
+                    message.traceId = reader.string();
+                    continue;
+                }
+                case 4: {
+                    if (tag !== 34) {
+                        break;
+                    }
+                    message.spanId = reader.string();
+                    continue;
+                }
+                case 5: {
+                    if (tag !== 40) {
+                        break;
+                    }
+                    message.actionType = reader.int32();
+                    continue;
+                }
+                case 6: {
+                    if (tag !== 50) {
+                        break;
+                    }
+                    message.context = exports.ActionContext.decode(reader, reader.uint32());
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            agentId: isSet(object.agentId)
+                ? common_js_1.AgentId.fromJSON(object.agentId)
+                : isSet(object.agent_id)
+                    ? common_js_1.AgentId.fromJSON(object.agent_id)
+                    : undefined,
+            credentialToken: isSet(object.credentialToken)
+                ? globalThis.String(object.credentialToken)
+                : isSet(object.credential_token)
+                    ? globalThis.String(object.credential_token)
+                    : "",
+            traceId: isSet(object.traceId)
+                ? globalThis.String(object.traceId)
+                : isSet(object.trace_id)
+                    ? globalThis.String(object.trace_id)
+                    : "",
+            spanId: isSet(object.spanId)
+                ? globalThis.String(object.spanId)
+                : isSet(object.span_id)
+                    ? globalThis.String(object.span_id)
+                    : "",
+            actionType: isSet(object.actionType)
+                ? (0, common_js_1.actionTypeFromJSON)(object.actionType)
+                : isSet(object.action_type)
+                    ? (0, common_js_1.actionTypeFromJSON)(object.action_type)
+                    : 0,
+            context: isSet(object.context) ? exports.ActionContext.fromJSON(object.context) : undefined,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.agentId !== undefined) {
+            obj.agentId = common_js_1.AgentId.toJSON(message.agentId);
+        }
+        if (message.credentialToken !== "") {
+            obj.credentialToken = message.credentialToken;
+        }
+        if (message.traceId !== "") {
+            obj.traceId = message.traceId;
+        }
+        if (message.spanId !== "") {
+            obj.spanId = message.spanId;
+        }
+        if (message.actionType !== 0) {
+            obj.actionType = (0, common_js_1.actionTypeToJSON)(message.actionType);
+        }
+        if (message.context !== undefined) {
+            obj.context = exports.ActionContext.toJSON(message.context);
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.CheckActionRequest.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseCheckActionRequest();
+        message.agentId = (object.agentId !== undefined && object.agentId !== null)
+            ? common_js_1.AgentId.fromPartial(object.agentId)
+            : undefined;
+        message.credentialToken = object.credentialToken ?? "";
+        message.traceId = object.traceId ?? "";
+        message.spanId = object.spanId ?? "";
+        message.actionType = object.actionType ?? 0;
+        message.context = (object.context !== undefined && object.context !== null)
+            ? exports.ActionContext.fromPartial(object.context)
+            : undefined;
+        return message;
+    },
+};
+function createBaseActionContext() {
+    return { llmCall: undefined, toolCall: undefined, fileOp: undefined, networkCall: undefined, processExec: undefined };
+}
+exports.ActionContext = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        if (message.llmCall !== undefined) {
+            exports.LLMCallContext.encode(message.llmCall, writer.uint32(10).fork()).join();
+        }
+        if (message.toolCall !== undefined) {
+            exports.ToolCallContext.encode(message.toolCall, writer.uint32(18).fork()).join();
+        }
+        if (message.fileOp !== undefined) {
+            exports.FileOpContext.encode(message.fileOp, writer.uint32(26).fork()).join();
+        }
+        if (message.networkCall !== undefined) {
+            exports.NetworkCallContext.encode(message.networkCall, writer.uint32(34).fork()).join();
+        }
+        if (message.processExec !== undefined) {
+            exports.ProcessExecContext.encode(message.processExec, writer.uint32(42).fork()).join();
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseActionContext();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.llmCall = exports.LLMCallContext.decode(reader, reader.uint32());
+                    continue;
+                }
+                case 2: {
+                    if (tag !== 18) {
+                        break;
+                    }
+                    message.toolCall = exports.ToolCallContext.decode(reader, reader.uint32());
+                    continue;
+                }
+                case 3: {
+                    if (tag !== 26) {
+                        break;
+                    }
+                    message.fileOp = exports.FileOpContext.decode(reader, reader.uint32());
+                    continue;
+                }
+                case 4: {
+                    if (tag !== 34) {
+                        break;
+                    }
+                    message.networkCall = exports.NetworkCallContext.decode(reader, reader.uint32());
+                    continue;
+                }
+                case 5: {
+                    if (tag !== 42) {
+                        break;
+                    }
+                    message.processExec = exports.ProcessExecContext.decode(reader, reader.uint32());
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            llmCall: isSet(object.llmCall)
+                ? exports.LLMCallContext.fromJSON(object.llmCall)
+                : isSet(object.llm_call)
+                    ? exports.LLMCallContext.fromJSON(object.llm_call)
+                    : undefined,
+            toolCall: isSet(object.toolCall)
+                ? exports.ToolCallContext.fromJSON(object.toolCall)
+                : isSet(object.tool_call)
+                    ? exports.ToolCallContext.fromJSON(object.tool_call)
+                    : undefined,
+            fileOp: isSet(object.fileOp)
+                ? exports.FileOpContext.fromJSON(object.fileOp)
+                : isSet(object.file_op)
+                    ? exports.FileOpContext.fromJSON(object.file_op)
+                    : undefined,
+            networkCall: isSet(object.networkCall)
+                ? exports.NetworkCallContext.fromJSON(object.networkCall)
+                : isSet(object.network_call)
+                    ? exports.NetworkCallContext.fromJSON(object.network_call)
+                    : undefined,
+            processExec: isSet(object.processExec)
+                ? exports.ProcessExecContext.fromJSON(object.processExec)
+                : isSet(object.process_exec)
+                    ? exports.ProcessExecContext.fromJSON(object.process_exec)
+                    : undefined,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.llmCall !== undefined) {
+            obj.llmCall = exports.LLMCallContext.toJSON(message.llmCall);
+        }
+        if (message.toolCall !== undefined) {
+            obj.toolCall = exports.ToolCallContext.toJSON(message.toolCall);
+        }
+        if (message.fileOp !== undefined) {
+            obj.fileOp = exports.FileOpContext.toJSON(message.fileOp);
+        }
+        if (message.networkCall !== undefined) {
+            obj.networkCall = exports.NetworkCallContext.toJSON(message.networkCall);
+        }
+        if (message.processExec !== undefined) {
+            obj.processExec = exports.ProcessExecContext.toJSON(message.processExec);
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.ActionContext.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseActionContext();
+        message.llmCall = (object.llmCall !== undefined && object.llmCall !== null)
+            ? exports.LLMCallContext.fromPartial(object.llmCall)
+            : undefined;
+        message.toolCall = (object.toolCall !== undefined && object.toolCall !== null)
+            ? exports.ToolCallContext.fromPartial(object.toolCall)
+            : undefined;
+        message.fileOp = (object.fileOp !== undefined && object.fileOp !== null)
+            ? exports.FileOpContext.fromPartial(object.fileOp)
+            : undefined;
+        message.networkCall = (object.networkCall !== undefined && object.networkCall !== null)
+            ? exports.NetworkCallContext.fromPartial(object.networkCall)
+            : undefined;
+        message.processExec = (object.processExec !== undefined && object.processExec !== null)
+            ? exports.ProcessExecContext.fromPartial(object.processExec)
+            : undefined;
+        return message;
+    },
+};
+function createBaseLLMCallContext() {
+    return { model: "", promptTokens: 0, containsPii: false };
+}
+exports.LLMCallContext = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        if (message.model !== "") {
+            writer.uint32(10).string(message.model);
+        }
+        if (message.promptTokens !== 0) {
+            writer.uint32(16).int32(message.promptTokens);
+        }
+        if (message.containsPii !== false) {
+            writer.uint32(24).bool(message.containsPii);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseLLMCallContext();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.model = reader.string();
+                    continue;
+                }
+                case 2: {
+                    if (tag !== 16) {
+                        break;
+                    }
+                    message.promptTokens = reader.int32();
+                    continue;
+                }
+                case 3: {
+                    if (tag !== 24) {
+                        break;
+                    }
+                    message.containsPii = reader.bool();
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            model: isSet(object.model) ? globalThis.String(object.model) : "",
+            promptTokens: isSet(object.promptTokens)
+                ? globalThis.Number(object.promptTokens)
+                : isSet(object.prompt_tokens)
+                    ? globalThis.Number(object.prompt_tokens)
+                    : 0,
+            containsPii: isSet(object.containsPii)
+                ? globalThis.Boolean(object.containsPii)
+                : isSet(object.contains_pii)
+                    ? globalThis.Boolean(object.contains_pii)
+                    : false,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.model !== "") {
+            obj.model = message.model;
+        }
+        if (message.promptTokens !== 0) {
+            obj.promptTokens = Math.round(message.promptTokens);
+        }
+        if (message.containsPii !== false) {
+            obj.containsPii = message.containsPii;
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.LLMCallContext.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseLLMCallContext();
+        message.model = object.model ?? "";
+        message.promptTokens = object.promptTokens ?? 0;
+        message.containsPii = object.containsPii ?? false;
+        return message;
+    },
+};
+function createBaseToolCallContext() {
+    return { toolName: "", toolSource: "", argsJson: Buffer.alloc(0), targetUrl: "" };
+}
+exports.ToolCallContext = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        if (message.toolName !== "") {
+            writer.uint32(10).string(message.toolName);
+        }
+        if (message.toolSource !== "") {
+            writer.uint32(18).string(message.toolSource);
+        }
+        if (message.argsJson.length !== 0) {
+            writer.uint32(26).bytes(message.argsJson);
+        }
+        if (message.targetUrl !== "") {
+            writer.uint32(34).string(message.targetUrl);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseToolCallContext();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.toolName = reader.string();
+                    continue;
+                }
+                case 2: {
+                    if (tag !== 18) {
+                        break;
+                    }
+                    message.toolSource = reader.string();
+                    continue;
+                }
+                case 3: {
+                    if (tag !== 26) {
+                        break;
+                    }
+                    message.argsJson = Buffer.from(reader.bytes());
+                    continue;
+                }
+                case 4: {
+                    if (tag !== 34) {
+                        break;
+                    }
+                    message.targetUrl = reader.string();
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            toolName: isSet(object.toolName)
+                ? globalThis.String(object.toolName)
+                : isSet(object.tool_name)
+                    ? globalThis.String(object.tool_name)
+                    : "",
+            toolSource: isSet(object.toolSource)
+                ? globalThis.String(object.toolSource)
+                : isSet(object.tool_source)
+                    ? globalThis.String(object.tool_source)
+                    : "",
+            argsJson: isSet(object.argsJson)
+                ? Buffer.from(bytesFromBase64(object.argsJson))
+                : isSet(object.args_json)
+                    ? Buffer.from(bytesFromBase64(object.args_json))
+                    : Buffer.alloc(0),
+            targetUrl: isSet(object.targetUrl)
+                ? globalThis.String(object.targetUrl)
+                : isSet(object.target_url)
+                    ? globalThis.String(object.target_url)
+                    : "",
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.toolName !== "") {
+            obj.toolName = message.toolName;
+        }
+        if (message.toolSource !== "") {
+            obj.toolSource = message.toolSource;
+        }
+        if (message.argsJson.length !== 0) {
+            obj.argsJson = base64FromBytes(message.argsJson);
+        }
+        if (message.targetUrl !== "") {
+            obj.targetUrl = message.targetUrl;
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.ToolCallContext.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseToolCallContext();
+        message.toolName = object.toolName ?? "";
+        message.toolSource = object.toolSource ?? "";
+        message.argsJson = object.argsJson ?? Buffer.alloc(0);
+        message.targetUrl = object.targetUrl ?? "";
+        return message;
+    },
+};
+function createBaseFileOpContext() {
+    return { operation: "", path: "", isSensitivePath: false };
+}
+exports.FileOpContext = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        if (message.operation !== "") {
+            writer.uint32(10).string(message.operation);
+        }
+        if (message.path !== "") {
+            writer.uint32(18).string(message.path);
+        }
+        if (message.isSensitivePath !== false) {
+            writer.uint32(24).bool(message.isSensitivePath);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseFileOpContext();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.operation = reader.string();
+                    continue;
+                }
+                case 2: {
+                    if (tag !== 18) {
+                        break;
+                    }
+                    message.path = reader.string();
+                    continue;
+                }
+                case 3: {
+                    if (tag !== 24) {
+                        break;
+                    }
+                    message.isSensitivePath = reader.bool();
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            operation: isSet(object.operation) ? globalThis.String(object.operation) : "",
+            path: isSet(object.path) ? globalThis.String(object.path) : "",
+            isSensitivePath: isSet(object.isSensitivePath)
+                ? globalThis.Boolean(object.isSensitivePath)
+                : isSet(object.is_sensitive_path)
+                    ? globalThis.Boolean(object.is_sensitive_path)
+                    : false,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.operation !== "") {
+            obj.operation = message.operation;
+        }
+        if (message.path !== "") {
+            obj.path = message.path;
+        }
+        if (message.isSensitivePath !== false) {
+            obj.isSensitivePath = message.isSensitivePath;
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.FileOpContext.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseFileOpContext();
+        message.operation = object.operation ?? "";
+        message.path = object.path ?? "";
+        message.isSensitivePath = object.isSensitivePath ?? false;
+        return message;
+    },
+};
+function createBaseNetworkCallContext() {
+    return { host: "", port: 0, protocol: "", inAllowlist: false };
+}
+exports.NetworkCallContext = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        if (message.host !== "") {
+            writer.uint32(10).string(message.host);
+        }
+        if (message.port !== 0) {
+            writer.uint32(16).int32(message.port);
+        }
+        if (message.protocol !== "") {
+            writer.uint32(26).string(message.protocol);
+        }
+        if (message.inAllowlist !== false) {
+            writer.uint32(32).bool(message.inAllowlist);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseNetworkCallContext();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.host = reader.string();
+                    continue;
+                }
+                case 2: {
+                    if (tag !== 16) {
+                        break;
+                    }
+                    message.port = reader.int32();
+                    continue;
+                }
+                case 3: {
+                    if (tag !== 26) {
+                        break;
+                    }
+                    message.protocol = reader.string();
+                    continue;
+                }
+                case 4: {
+                    if (tag !== 32) {
+                        break;
+                    }
+                    message.inAllowlist = reader.bool();
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            host: isSet(object.host) ? globalThis.String(object.host) : "",
+            port: isSet(object.port) ? globalThis.Number(object.port) : 0,
+            protocol: isSet(object.protocol) ? globalThis.String(object.protocol) : "",
+            inAllowlist: isSet(object.inAllowlist)
+                ? globalThis.Boolean(object.inAllowlist)
+                : isSet(object.in_allowlist)
+                    ? globalThis.Boolean(object.in_allowlist)
+                    : false,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.host !== "") {
+            obj.host = message.host;
+        }
+        if (message.port !== 0) {
+            obj.port = Math.round(message.port);
+        }
+        if (message.protocol !== "") {
+            obj.protocol = message.protocol;
+        }
+        if (message.inAllowlist !== false) {
+            obj.inAllowlist = message.inAllowlist;
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.NetworkCallContext.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseNetworkCallContext();
+        message.host = object.host ?? "";
+        message.port = object.port ?? 0;
+        message.protocol = object.protocol ?? "";
+        message.inAllowlist = object.inAllowlist ?? false;
+        return message;
+    },
+};
+function createBaseProcessExecContext() {
+    return { command: "", args: [] };
+}
+exports.ProcessExecContext = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        if (message.command !== "") {
+            writer.uint32(10).string(message.command);
+        }
+        for (const v of message.args) {
+            writer.uint32(18).string(v);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseProcessExecContext();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.command = reader.string();
+                    continue;
+                }
+                case 2: {
+                    if (tag !== 18) {
+                        break;
+                    }
+                    message.args.push(reader.string());
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            command: isSet(object.command) ? globalThis.String(object.command) : "",
+            args: globalThis.Array.isArray(object?.args) ? object.args.map((e) => globalThis.String(e)) : [],
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.command !== "") {
+            obj.command = message.command;
+        }
+        if (message.args?.length) {
+            obj.args = message.args;
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.ProcessExecContext.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseProcessExecContext();
+        message.command = object.command ?? "";
+        message.args = object.args?.map((e) => e) || [];
+        return message;
+    },
+};
+function createBaseCheckActionResponse() {
+    return { decision: 0, reason: "", policyRule: "", approvalId: "", redact: undefined, decisionLatencyUs: 0 };
+}
+exports.CheckActionResponse = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        if (message.decision !== 0) {
+            writer.uint32(8).int32(message.decision);
+        }
+        if (message.reason !== "") {
+            writer.uint32(18).string(message.reason);
+        }
+        if (message.policyRule !== "") {
+            writer.uint32(26).string(message.policyRule);
+        }
+        if (message.approvalId !== "") {
+            writer.uint32(34).string(message.approvalId);
+        }
+        if (message.redact !== undefined) {
+            exports.RedactInstructions.encode(message.redact, writer.uint32(42).fork()).join();
+        }
+        if (message.decisionLatencyUs !== 0) {
+            writer.uint32(48).int64(message.decisionLatencyUs);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseCheckActionResponse();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 8) {
+                        break;
+                    }
+                    message.decision = reader.int32();
+                    continue;
+                }
+                case 2: {
+                    if (tag !== 18) {
+                        break;
+                    }
+                    message.reason = reader.string();
+                    continue;
+                }
+                case 3: {
+                    if (tag !== 26) {
+                        break;
+                    }
+                    message.policyRule = reader.string();
+                    continue;
+                }
+                case 4: {
+                    if (tag !== 34) {
+                        break;
+                    }
+                    message.approvalId = reader.string();
+                    continue;
+                }
+                case 5: {
+                    if (tag !== 42) {
+                        break;
+                    }
+                    message.redact = exports.RedactInstructions.decode(reader, reader.uint32());
+                    continue;
+                }
+                case 6: {
+                    if (tag !== 48) {
+                        break;
+                    }
+                    message.decisionLatencyUs = longToNumber(reader.int64());
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            decision: isSet(object.decision) ? (0, common_js_1.decisionFromJSON)(object.decision) : 0,
+            reason: isSet(object.reason) ? globalThis.String(object.reason) : "",
+            policyRule: isSet(object.policyRule)
+                ? globalThis.String(object.policyRule)
+                : isSet(object.policy_rule)
+                    ? globalThis.String(object.policy_rule)
+                    : "",
+            approvalId: isSet(object.approvalId)
+                ? globalThis.String(object.approvalId)
+                : isSet(object.approval_id)
+                    ? globalThis.String(object.approval_id)
+                    : "",
+            redact: isSet(object.redact) ? exports.RedactInstructions.fromJSON(object.redact) : undefined,
+            decisionLatencyUs: isSet(object.decisionLatencyUs)
+                ? globalThis.Number(object.decisionLatencyUs)
+                : isSet(object.decision_latency_us)
+                    ? globalThis.Number(object.decision_latency_us)
+                    : 0,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.decision !== 0) {
+            obj.decision = (0, common_js_1.decisionToJSON)(message.decision);
+        }
+        if (message.reason !== "") {
+            obj.reason = message.reason;
+        }
+        if (message.policyRule !== "") {
+            obj.policyRule = message.policyRule;
+        }
+        if (message.approvalId !== "") {
+            obj.approvalId = message.approvalId;
+        }
+        if (message.redact !== undefined) {
+            obj.redact = exports.RedactInstructions.toJSON(message.redact);
+        }
+        if (message.decisionLatencyUs !== 0) {
+            obj.decisionLatencyUs = Math.round(message.decisionLatencyUs);
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.CheckActionResponse.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseCheckActionResponse();
+        message.decision = object.decision ?? 0;
+        message.reason = object.reason ?? "";
+        message.policyRule = object.policyRule ?? "";
+        message.approvalId = object.approvalId ?? "";
+        message.redact = (object.redact !== undefined && object.redact !== null)
+            ? exports.RedactInstructions.fromPartial(object.redact)
+            : undefined;
+        message.decisionLatencyUs = object.decisionLatencyUs ?? 0;
+        return message;
+    },
+};
+function createBaseRedactInstructions() {
+    return { rules: [] };
+}
+exports.RedactInstructions = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        for (const v of message.rules) {
+            exports.RedactRule.encode(v, writer.uint32(10).fork()).join();
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseRedactInstructions();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.rules.push(exports.RedactRule.decode(reader, reader.uint32()));
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            rules: globalThis.Array.isArray(object?.rules) ? object.rules.map((e) => exports.RedactRule.fromJSON(e)) : [],
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.rules?.length) {
+            obj.rules = message.rules.map((e) => exports.RedactRule.toJSON(e));
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.RedactInstructions.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseRedactInstructions();
+        message.rules = object.rules?.map((e) => exports.RedactRule.fromPartial(e)) || [];
+        return message;
+    },
+};
+function createBaseRedactRule() {
+    return { fieldPath: "", replacement: "" };
+}
+exports.RedactRule = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        if (message.fieldPath !== "") {
+            writer.uint32(10).string(message.fieldPath);
+        }
+        if (message.replacement !== "") {
+            writer.uint32(18).string(message.replacement);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseRedactRule();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.fieldPath = reader.string();
+                    continue;
+                }
+                case 2: {
+                    if (tag !== 18) {
+                        break;
+                    }
+                    message.replacement = reader.string();
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            fieldPath: isSet(object.fieldPath)
+                ? globalThis.String(object.fieldPath)
+                : isSet(object.field_path)
+                    ? globalThis.String(object.field_path)
+                    : "",
+            replacement: isSet(object.replacement) ? globalThis.String(object.replacement) : "",
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.fieldPath !== "") {
+            obj.fieldPath = message.fieldPath;
+        }
+        if (message.replacement !== "") {
+            obj.replacement = message.replacement;
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.RedactRule.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseRedactRule();
+        message.fieldPath = object.fieldPath ?? "";
+        message.replacement = object.replacement ?? "";
+        return message;
+    },
+};
+function createBaseBatchCheckRequest() {
+    return { requests: [] };
+}
+exports.BatchCheckRequest = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        for (const v of message.requests) {
+            exports.CheckActionRequest.encode(v, writer.uint32(10).fork()).join();
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseBatchCheckRequest();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.requests.push(exports.CheckActionRequest.decode(reader, reader.uint32()));
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            requests: globalThis.Array.isArray(object?.requests)
+                ? object.requests.map((e) => exports.CheckActionRequest.fromJSON(e))
+                : [],
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.requests?.length) {
+            obj.requests = message.requests.map((e) => exports.CheckActionRequest.toJSON(e));
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.BatchCheckRequest.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseBatchCheckRequest();
+        message.requests = object.requests?.map((e) => exports.CheckActionRequest.fromPartial(e)) || [];
+        return message;
+    },
+};
+function createBaseBatchCheckResponse() {
+    return { responses: [] };
+}
+exports.BatchCheckResponse = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        for (const v of message.responses) {
+            exports.CheckActionResponse.encode(v, writer.uint32(10).fork()).join();
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseBatchCheckResponse();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.responses.push(exports.CheckActionResponse.decode(reader, reader.uint32()));
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            responses: globalThis.Array.isArray(object?.responses)
+                ? object.responses.map((e) => exports.CheckActionResponse.fromJSON(e))
+                : [],
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.responses?.length) {
+            obj.responses = message.responses.map((e) => exports.CheckActionResponse.toJSON(e));
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.BatchCheckResponse.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseBatchCheckResponse();
+        message.responses = object.responses?.map((e) => exports.CheckActionResponse.fromPartial(e)) || [];
+        return message;
+    },
+};
+function createBaseOpControlSubscribeRequest() {
+    return { agentId: undefined };
+}
+exports.OpControlSubscribeRequest = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        if (message.agentId !== undefined) {
+            common_js_1.AgentId.encode(message.agentId, writer.uint32(10).fork()).join();
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseOpControlSubscribeRequest();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.agentId = common_js_1.AgentId.decode(reader, reader.uint32());
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            agentId: isSet(object.agentId)
+                ? common_js_1.AgentId.fromJSON(object.agentId)
+                : isSet(object.agent_id)
+                    ? common_js_1.AgentId.fromJSON(object.agent_id)
+                    : undefined,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.agentId !== undefined) {
+            obj.agentId = common_js_1.AgentId.toJSON(message.agentId);
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.OpControlSubscribeRequest.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseOpControlSubscribeRequest();
+        message.agentId = (object.agentId !== undefined && object.agentId !== null)
+            ? common_js_1.AgentId.fromPartial(object.agentId)
+            : undefined;
+        return message;
+    },
+};
+function createBaseOpControlMessage() {
+    return { opId: "", signal: 0, sequence: 0 };
+}
+exports.OpControlMessage = {
+    encode(message, writer = new wire_1.BinaryWriter()) {
+        if (message.opId !== "") {
+            writer.uint32(10).string(message.opId);
+        }
+        if (message.signal !== 0) {
+            writer.uint32(16).int32(message.signal);
+        }
+        if (message.sequence !== 0) {
+            writer.uint32(24).uint64(message.sequence);
+        }
+        return writer;
+    },
+    decode(input, length) {
+        const reader = input instanceof wire_1.BinaryReader ? input : new wire_1.BinaryReader(input);
+        const end = length === undefined ? reader.len : reader.pos + length;
+        const message = createBaseOpControlMessage();
+        while (reader.pos < end) {
+            const tag = reader.uint32();
+            switch (tag >>> 3) {
+                case 1: {
+                    if (tag !== 10) {
+                        break;
+                    }
+                    message.opId = reader.string();
+                    continue;
+                }
+                case 2: {
+                    if (tag !== 16) {
+                        break;
+                    }
+                    message.signal = reader.int32();
+                    continue;
+                }
+                case 3: {
+                    if (tag !== 24) {
+                        break;
+                    }
+                    message.sequence = longToNumber(reader.uint64());
+                    continue;
+                }
+            }
+            if ((tag & 7) === 4 || tag === 0) {
+                break;
+            }
+            reader.skip(tag & 7);
+        }
+        return message;
+    },
+    fromJSON(object) {
+        return {
+            opId: isSet(object.opId)
+                ? globalThis.String(object.opId)
+                : isSet(object.op_id)
+                    ? globalThis.String(object.op_id)
+                    : "",
+            signal: isSet(object.signal) ? opControlSignalFromJSON(object.signal) : 0,
+            sequence: isSet(object.sequence) ? globalThis.Number(object.sequence) : 0,
+        };
+    },
+    toJSON(message) {
+        const obj = {};
+        if (message.opId !== "") {
+            obj.opId = message.opId;
+        }
+        if (message.signal !== 0) {
+            obj.signal = opControlSignalToJSON(message.signal);
+        }
+        if (message.sequence !== 0) {
+            obj.sequence = Math.round(message.sequence);
+        }
+        return obj;
+    },
+    create(base) {
+        return exports.OpControlMessage.fromPartial(base ?? {});
+    },
+    fromPartial(object) {
+        const message = createBaseOpControlMessage();
+        message.opId = object.opId ?? "";
+        message.signal = object.signal ?? 0;
+        message.sequence = object.sequence ?? 0;
+        return message;
+    },
+};
+exports.PolicyServiceService = {
+    /**
+     * CheckAction evaluates a single action before the agent dispatches it.
+     * Called on every intercepted action — must be as fast as possible.
+     */
+    checkAction: {
+        path: "/assembly.policy.v1.PolicyService/CheckAction",
+        requestStream: false,
+        responseStream: false,
+        requestSerialize: (value) => Buffer.from(exports.CheckActionRequest.encode(value).finish()),
+        requestDeserialize: (value) => exports.CheckActionRequest.decode(value),
+        responseSerialize: (value) => Buffer.from(exports.CheckActionResponse.encode(value).finish()),
+        responseDeserialize: (value) => exports.CheckActionResponse.decode(value),
+    },
+    /**
+     * BatchCheck pre-warms the policy cache for a set of anticipated actions.
+     * Called at agent startup or when entering a new task context.
+     */
+    batchCheck: {
+        path: "/assembly.policy.v1.PolicyService/BatchCheck",
+        requestStream: false,
+        responseStream: false,
+        requestSerialize: (value) => Buffer.from(exports.BatchCheckRequest.encode(value).finish()),
+        requestDeserialize: (value) => exports.BatchCheckRequest.decode(value),
+        responseSerialize: (value) => Buffer.from(exports.BatchCheckResponse.encode(value).finish()),
+        responseDeserialize: (value) => exports.BatchCheckResponse.decode(value),
+    },
+    /**
+     * OpControlStream is the gateway → SDK push channel for op-lifecycle
+     * signals (pause / resume / terminate). The SDK opens the stream once
+     * per agent process at startup; the gateway pushes one OpControlMessage
+     * per OpsRegistry transition matching the subscriber's agent_id. See
+     * AAASM-1653 (PR-D of AAASM-1422); SDK-side consumers ship in PR-E
+     * (Python), PR-F (Node), and PR-G (Go).
+     */
+    opControlStream: {
+        path: "/assembly.policy.v1.PolicyService/OpControlStream",
+        requestStream: false,
+        responseStream: true,
+        requestSerialize: (value) => Buffer.from(exports.OpControlSubscribeRequest.encode(value).finish()),
+        requestDeserialize: (value) => exports.OpControlSubscribeRequest.decode(value),
+        responseSerialize: (value) => Buffer.from(exports.OpControlMessage.encode(value).finish()),
+        responseDeserialize: (value) => exports.OpControlMessage.decode(value),
+    },
+};
+exports.PolicyServiceClient = (0, grpc_js_1.makeGenericClientConstructor)(exports.PolicyServiceService, "assembly.policy.v1.PolicyService");
+function bytesFromBase64(b64) {
+    return Uint8Array.from(globalThis.Buffer.from(b64, "base64"));
+}
+function base64FromBytes(arr) {
+    return globalThis.Buffer.from(arr).toString("base64");
+}
+function longToNumber(int64) {
+    const num = globalThis.Number(int64.toString());
+    if (num > globalThis.Number.MAX_SAFE_INTEGER) {
+        throw new globalThis.Error("Value is larger than Number.MAX_SAFE_INTEGER");
+    }
+    if (num < globalThis.Number.MIN_SAFE_INTEGER) {
+        throw new globalThis.Error("Value is smaller than Number.MIN_SAFE_INTEGER");
+    }
+    return num;
+}
+function isSet(value) {
+    return value !== null && value !== undefined;
+}