@agent-assembly/sdk 0.0.1-beta.3 → 0.0.1-beta.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (75) hide show
  1. package/README.md +36 -23
  2. package/dist/cjs/core/gateway-resolver.js +73 -3
  3. package/dist/cjs/core/init-assembly.js +155 -33
  4. package/dist/cjs/core/redact.js +63 -0
  5. package/dist/cjs/gateway/client.js +63 -1
  6. package/dist/cjs/gateway/index.js +2 -1
  7. package/dist/cjs/hooks/ai-sdk.js +46 -10
  8. package/dist/cjs/hooks/langchain.js +12 -3
  9. package/dist/cjs/hooks/mastra.js +10 -6
  10. package/dist/cjs/hooks/openai-agents.js +1 -3
  11. package/dist/cjs/index.js +9 -1
  12. package/dist/cjs/native/client.js +94 -25
  13. package/dist/cjs/op-control.js +159 -17
  14. package/dist/cjs/runtime.js +73 -7
  15. package/dist/cjs/wrappers/with-assembly.js +89 -32
  16. package/dist/esm/core/gateway-resolver.js +72 -3
  17. package/dist/esm/core/gateway-resolver.js.map +1 -1
  18. package/dist/esm/core/init-assembly.js +154 -32
  19. package/dist/esm/core/init-assembly.js.map +1 -1
  20. package/dist/esm/core/redact.js +59 -0
  21. package/dist/esm/core/redact.js.map +1 -0
  22. package/dist/esm/gateway/client.js +62 -1
  23. package/dist/esm/gateway/client.js.map +1 -1
  24. package/dist/esm/gateway/index.js +1 -1
  25. package/dist/esm/gateway/index.js.map +1 -1
  26. package/dist/esm/hooks/ai-sdk.js +46 -10
  27. package/dist/esm/hooks/ai-sdk.js.map +1 -1
  28. package/dist/esm/hooks/langchain.js +12 -3
  29. package/dist/esm/hooks/langchain.js.map +1 -1
  30. package/dist/esm/hooks/mastra.js +10 -6
  31. package/dist/esm/hooks/mastra.js.map +1 -1
  32. package/dist/esm/hooks/openai-agents.js +1 -3
  33. package/dist/esm/hooks/openai-agents.js.map +1 -1
  34. package/dist/esm/index.js +6 -0
  35. package/dist/esm/index.js.map +1 -1
  36. package/dist/esm/native/client.js +91 -24
  37. package/dist/esm/native/client.js.map +1 -1
  38. package/dist/esm/op-control.js +124 -17
  39. package/dist/esm/op-control.js.map +1 -1
  40. package/dist/esm/runtime.js +72 -7
  41. package/dist/esm/runtime.js.map +1 -1
  42. package/dist/esm/wrappers/with-assembly.js +89 -32
  43. package/dist/esm/wrappers/with-assembly.js.map +1 -1
  44. package/dist/types/core/gateway-resolver.d.ts +18 -1
  45. package/dist/types/core/gateway-resolver.d.ts.map +1 -1
  46. package/dist/types/core/init-assembly.d.ts +2 -1
  47. package/dist/types/core/init-assembly.d.ts.map +1 -1
  48. package/dist/types/core/redact.d.ts +28 -0
  49. package/dist/types/core/redact.d.ts.map +1 -0
  50. package/dist/types/gateway/client.d.ts +17 -0
  51. package/dist/types/gateway/client.d.ts.map +1 -1
  52. package/dist/types/gateway/index.d.ts +1 -1
  53. package/dist/types/gateway/index.d.ts.map +1 -1
  54. package/dist/types/hooks/ai-sdk.d.ts +13 -0
  55. package/dist/types/hooks/ai-sdk.d.ts.map +1 -1
  56. package/dist/types/hooks/langchain.d.ts +11 -0
  57. package/dist/types/hooks/langchain.d.ts.map +1 -1
  58. package/dist/types/hooks/mastra.d.ts.map +1 -1
  59. package/dist/types/hooks/openai-agents.d.ts.map +1 -1
  60. package/dist/types/index.d.ts +4 -1
  61. package/dist/types/index.d.ts.map +1 -1
  62. package/dist/types/native/client.d.ts +44 -0
  63. package/dist/types/native/client.d.ts.map +1 -1
  64. package/dist/types/op-control.d.ts +71 -7
  65. package/dist/types/op-control.d.ts.map +1 -1
  66. package/dist/types/runtime.d.ts +27 -5
  67. package/dist/types/runtime.d.ts.map +1 -1
  68. package/dist/types/types/assembly-config.d.ts +6 -0
  69. package/dist/types/types/assembly-config.d.ts.map +1 -1
  70. package/dist/types/wrappers/index.d.ts +1 -1
  71. package/dist/types/wrappers/index.d.ts.map +1 -1
  72. package/dist/types/wrappers/with-assembly.d.ts +25 -0
  73. package/dist/types/wrappers/with-assembly.d.ts.map +1 -1
  74. package/native/aa-ffi-node/index.d.ts +82 -1
  75. package/package.json +18 -5
@@ -1,6 +1,7 @@
1
1
  import { createRequire } from "node:module";
2
- import { createNoopGatewayClient } from "../gateway/client.js";
2
+ import { createNativeGatewayClient, createNoopGatewayClient } from "../gateway/client.js";
3
3
  import { createNativeClient } from "../native/client.js";
4
+ import { ConfigurationError } from "../errors/index.js";
4
5
  import { ENFORCEMENT_MODES } from "../types/enforcement-mode.js";
5
6
  import { hasVercelAiSdk } from "../hooks/ai-sdk-detection.js";
6
7
  import { patchVercelAiSdk } from "../hooks/ai-sdk.js";
@@ -12,6 +13,7 @@ import { hasOpenAIAgentsSDK } from "../hooks/openai-agents-detection.js";
12
13
  import { patchOpenAIAgents } from "../hooks/openai-agents.js";
13
14
  import { currentAgentId } from "../lineage/index.js";
14
15
  import { resolveApiKey, resolveGatewayUrl } from "./gateway-resolver.js";
16
+ import { redactErrorMessage } from "./redact.js";
15
17
  const requireFromCwd = createRequire(`${process.cwd()}/`);
16
18
  /** Env-var fallback for ``gatewayUrl`` read at ``initAssembly`` entry. */
17
19
  export const ENV_GATEWAY_URL = "AA_GATEWAY_URL";
@@ -35,14 +37,73 @@ function buildRegistrationEvent(config) {
35
37
  event.enforcement_mode = config.enforcementMode;
36
38
  return event;
37
39
  }
38
- export function createClient(config) {
40
+ /**
41
+ * Build the {@link RegisterOptions} for the native `register` gRPC call
42
+ * (AAASM-3400) from the resolved config and the detected frameworks. `name`
43
+ * falls back to `agentId`; `framework` is the first detected framework (or
44
+ * `"none"` when running without an adapter); `gatewayEndpoint` is set only when
45
+ * a gateway URL was resolved so the native default endpoint resolution is
46
+ * preserved when it was not. `teamId` / `parentAgentId` carry the agent's
47
+ * team-budget scoping and topology lineage to the gateway (AAASM-3415); each is
48
+ * set only when present so an unset field stays absent.
49
+ */
50
+ function buildRegisterOptions(config, frameworks) {
51
+ const agentId = config.agentId ?? "";
52
+ return {
53
+ agentId,
54
+ name: config.name ?? agentId,
55
+ framework: frameworks[0] ?? "none",
56
+ ...(config.gatewayUrl ? { gatewayEndpoint: config.gatewayUrl } : {}),
57
+ ...(config.teamId ? { teamId: config.teamId } : {}),
58
+ ...(config.parentAgentId ? { parentAgentId: config.parentAgentId } : {})
59
+ };
60
+ }
61
+ /**
62
+ * The only built-in {@link AssemblyMode} for which {@link createClient}
63
+ * constructs a gateway client whose `check()` consults a real authoritative
64
+ * verdict (the native `queryPolicy` against a reachable `aa-runtime`). Every
65
+ * other mode falls back to the allow-all no-op client.
66
+ */
67
+ const CHECK_CAPABLE_MODE = "napi-inprocess";
68
+ export function createClient(config, nativeClientOverride) {
39
69
  const mode = config.mode ?? "auto";
40
70
  if (config.gatewayClient) {
41
71
  return config.gatewayClient;
42
72
  }
73
+ // AAASM-3105 (fail closed): the no-op gateway client's `check()` is allow-all,
74
+ // so registering under live `"enforce"` while routing through it would let a
75
+ // policy-denied action proceed unchecked — a silent fail-open. When the caller
76
+ // explicitly asks for `"enforce"` but supplies no check-capable mode (and no
77
+ // own `gatewayClient`), refuse loudly instead of pretending to enforce. An
78
+ // omitted `enforcementMode` keeps the pre-feature behavior (server-side
79
+ // default), and `"observe"` / `"disabled"` intentionally let actions through.
80
+ if (config.enforcementMode === "enforce" && mode !== CHECK_CAPABLE_MODE) {
81
+ throw new ConfigurationError(`enforcementMode "enforce" requires a check-capable client, but mode "${mode}" ` +
82
+ `routes through the allow-all no-op gateway client, which cannot block a ` +
83
+ `denied action. Use mode "${CHECK_CAPABLE_MODE}", supply your own ` +
84
+ `gatewayClient, or set enforcementMode to "observe"/"disabled".`);
85
+ }
43
86
  // HTTP routes use controlPlaneUrl when set, otherwise fall back to the
44
87
  // resolved gatewayUrl so pre-feature callers keep their existing base URL.
45
88
  const httpBaseUrl = config.controlPlaneUrl ?? config.gatewayUrl;
89
+ // AAASM-3050: in napi-inprocess mode, route `check()` through the native
90
+ // runtime so a reachable aa-runtime's DENY actually blocks a tool. The
91
+ // native primitive fails open when the runtime is absent or slow, and the
92
+ // gateway client swallows local faults, so this never blocks without a
93
+ // runtime — preserving the pre-feature fail-open behavior.
94
+ if (mode === "napi-inprocess") {
95
+ // Reuse the caller-supplied native client when present so the registered
96
+ // session (the one `register()` stored the gateway token on) is the same
97
+ // session `queryPolicy` runs against. Standalone callers (and the routing
98
+ // tests) get a freshly-built client instead.
99
+ const nativeClient = nativeClientOverride ??
100
+ createNativeClient({
101
+ gateway: config.gatewayUrl ?? "",
102
+ apiKey: config.apiKey ?? "",
103
+ mode: "napi-inprocess"
104
+ });
105
+ return createNativeGatewayClient(mode, nativeClient, config.agentId, httpBaseUrl);
106
+ }
46
107
  return createNoopGatewayClient(mode, httpBaseUrl);
47
108
  }
48
109
  function isPackageInstalled(packageName) {
@@ -136,7 +197,7 @@ async function patchDetectedVercelAiSdk(client, frameworks, agentId) {
136
197
  }
137
198
  return patchVercelAiSdk({
138
199
  gatewayClient: client,
139
- ...(agentId !== undefined ? { agentId } : {})
200
+ ...(agentId === undefined ? {} : { agentId })
140
201
  });
141
202
  }
142
203
  async function patchDetectedLangGraph(frameworks, agentId) {
@@ -157,7 +218,13 @@ async function patchDetectedOpenAIAgents(client, frameworks) {
157
218
  }
158
219
  return patchOpenAIAgents({ gatewayClient: client });
159
220
  }
160
- export async function initAssembly(config = {}) {
221
+ /**
222
+ * Validate caller-supplied `initAssembly` config, throwing `RangeError` on the
223
+ * two fields that can arrive malformed from non-TS callers (plain JS, JSON
224
+ * config, dynamic input). Extracted to keep `initAssembly` below the cognitive
225
+ * complexity threshold; behaviour-preserving.
226
+ */
227
+ function validateConfig(config) {
161
228
  if (config.delegationReason !== undefined && config.delegationReason.length > 256) {
162
229
  throw new RangeError("delegationReason must be <= 256 characters");
163
230
  }
@@ -167,6 +234,48 @@ export async function initAssembly(config = {}) {
167
234
  if (config.enforcementMode !== undefined && !ENFORCEMENT_MODES.includes(config.enforcementMode)) {
168
235
  throw new RangeError(`enforcementMode must be one of: ${ENFORCEMENT_MODES.join(", ")} (got: ${String(config.enforcementMode)})`);
169
236
  }
237
+ }
238
+ /**
239
+ * Run every framework detect-and-patch path for the resolved config. Extracted
240
+ * from `initAssembly` to keep its cognitive complexity below threshold;
241
+ * behaviour-preserving (same calls, same order).
242
+ */
243
+ async function applyFrameworkPatches(config, client, frameworks) {
244
+ const langChainHandler = await registerLangChainHandler(config, client, frameworks);
245
+ const wrappedLangChainTools = await wrapLangChainTools(config, client, frameworks);
246
+ const vercelAiSdkPatched = await patchDetectedVercelAiSdk(client, frameworks, config.agentId);
247
+ const openAIAgentsPatched = await patchDetectedOpenAIAgents(client, frameworks);
248
+ const langGraphPatched = await patchDetectedLangGraph(frameworks, config.agentId);
249
+ const mastraPatched = await patchDetectedMastra(frameworks, config.agentId);
250
+ return {
251
+ langChainHandler,
252
+ wrappedLangChainTools,
253
+ vercelAiSdkPatched,
254
+ openAIAgentsPatched,
255
+ langGraphPatched,
256
+ mastraPatched
257
+ };
258
+ }
259
+ /**
260
+ * Build the deduped list of active adapter ids from the registered adapters plus
261
+ * whichever framework patches actually took effect. Extracted from
262
+ * `initAssembly` to keep its cognitive complexity below threshold.
263
+ */
264
+ function buildActiveAdapters(adapters, patches) {
265
+ return [
266
+ ...new Set([
267
+ ...adapters.map((adapter) => adapter.id),
268
+ ...(patches.langChainHandler ? ["langchain-js"] : []),
269
+ ...(patches.wrappedLangChainTools.length > 0 ? ["langchain-js"] : []),
270
+ ...(patches.vercelAiSdkPatched ? ["vercel-ai-sdk"] : []),
271
+ ...(patches.openAIAgentsPatched ? ["openai-agents"] : []),
272
+ ...(patches.langGraphPatched ? ["langgraph-js"] : []),
273
+ ...(patches.mastraPatched ? ["mastra"] : [])
274
+ ])
275
+ ];
276
+ }
277
+ export async function initAssembly(config = {}) {
278
+ validateConfig(config);
170
279
  // Auto-populate parentAgentId from the async context store when not explicitly provided.
171
280
  // This allows child agents spawned inside framework hooks to inherit lineage automatically.
172
281
  const resolvedParentAgentId = config.parentAgentId ?? currentAgentId();
@@ -180,47 +289,60 @@ export async function initAssembly(config = {}) {
180
289
  ...config,
181
290
  gatewayUrl: resolvedGatewayUrl,
182
291
  apiKey: resolvedApiKey,
183
- ...(controlPlaneUrlInput !== undefined ? { controlPlaneUrl: controlPlaneUrlInput } : {}),
292
+ ...(controlPlaneUrlInput === undefined ? {} : { controlPlaneUrl: controlPlaneUrlInput }),
184
293
  ...(resolvedParentAgentId ? { parentAgentId: resolvedParentAgentId } : {})
185
294
  };
186
- const client = createClient(resolvedConfig);
187
295
  const frameworks = detectFrameworks();
188
- const adapters = await registerAdapters(frameworks);
189
- await startNetworkLayerIfNeeded(client, resolvedConfig);
190
- // Send topology registration event through the native transport on every boot
191
- // except sdk-only mode (which has no sidecar to register with).
296
+ // Build the native transport up front (every mode except sdk-only, which has
297
+ // no sidecar) so the same session backs both the gateway client's `check()`
298
+ // and the agent registration the gateway token `register()` stores on the
299
+ // session is then attached to every subsequent `queryPolicy` request.
192
300
  let nativeClient;
193
301
  if (resolvedConfig.mode !== "sdk-only") {
194
302
  nativeClient = createNativeClient({
195
303
  gateway: resolvedGatewayUrl,
196
304
  apiKey: resolvedApiKey,
197
- mode: resolvedConfig.mode === "napi-inprocess" ? "napi-inprocess" : "grpc-sidecar",
305
+ mode: resolvedConfig.mode === "napi-inprocess" ? "napi-inprocess" : "grpc-sidecar"
198
306
  });
307
+ }
308
+ const client = createClient(resolvedConfig, nativeClient);
309
+ const adapters = await registerAdapters(frameworks);
310
+ await startNetworkLayerIfNeeded(client, resolvedConfig);
311
+ if (nativeClient !== undefined) {
312
+ // AAASM-3403: register the agent over the native SDK→gateway gRPC call so
313
+ // the gateway issues a credential token (stored on this session) that
314
+ // unblocks subsequent policy queries. Advisory: a failed registration must
315
+ // not abort init — the agent proceeds unregistered and the proxy / eBPF
316
+ // layers remain authoritative.
317
+ try {
318
+ await nativeClient.register(buildRegisterOptions(resolvedConfig, frameworks));
319
+ }
320
+ catch (error) {
321
+ // Redact any Bearer/auth credential the error message might carry before
322
+ // it reaches the console — the apiKey/credentialToken must never be logged
323
+ // (AAASM-3645).
324
+ console.warn(`[agent-assembly] agent registration failed; proceeding unregistered: ${redactErrorMessage(error)}`);
325
+ }
326
+ // Topology lineage metadata still flows as an audit event (parent / team /
327
+ // delegation), which `register` does not carry.
199
328
  nativeClient.sendEvent(buildRegistrationEvent(resolvedConfig));
200
329
  }
201
- const langChainHandler = await registerLangChainHandler(resolvedConfig, client, frameworks);
202
- const wrappedLangChainTools = await wrapLangChainTools(resolvedConfig, client, frameworks);
203
- const vercelAiSdkPatched = await patchDetectedVercelAiSdk(client, frameworks, resolvedConfig.agentId);
204
- const openAIAgentsPatched = await patchDetectedOpenAIAgents(client, frameworks);
205
- const langGraphPatched = await patchDetectedLangGraph(frameworks, resolvedConfig.agentId);
206
- const mastraPatched = await patchDetectedMastra(frameworks, resolvedConfig.agentId);
330
+ const patches = await applyFrameworkPatches(resolvedConfig, client, frameworks);
207
331
  return {
208
- activeAdapters: [
209
- ...new Set([
210
- ...adapters.map((adapter) => adapter.id),
211
- ...(langChainHandler ? ["langchain-js"] : []),
212
- ...(wrappedLangChainTools.length > 0 ? ["langchain-js"] : []),
213
- ...(vercelAiSdkPatched ? ["vercel-ai-sdk"] : []),
214
- ...(openAIAgentsPatched ? ["openai-agents"] : []),
215
- ...(langGraphPatched ? ["langgraph-js"] : []),
216
- ...(mastraPatched ? ["mastra"] : [])
217
- ])
218
- ],
219
- ...(resolvedConfig.parentAgentId !== undefined && { parentAgentId: resolvedConfig.parentAgentId }),
332
+ activeAdapters: buildActiveAdapters(adapters, patches),
333
+ ...(resolvedConfig.parentAgentId !== undefined && {
334
+ parentAgentId: resolvedConfig.parentAgentId
335
+ }),
220
336
  ...(resolvedConfig.teamId !== undefined && { teamId: resolvedConfig.teamId }),
221
- ...(resolvedConfig.delegationReason !== undefined && { delegationReason: resolvedConfig.delegationReason }),
222
- ...(resolvedConfig.spawnedByTool !== undefined && { spawnedByTool: resolvedConfig.spawnedByTool }),
223
- ...(resolvedConfig.enforcementMode !== undefined && { enforcementMode: resolvedConfig.enforcementMode }),
337
+ ...(resolvedConfig.delegationReason !== undefined && {
338
+ delegationReason: resolvedConfig.delegationReason
339
+ }),
340
+ ...(resolvedConfig.spawnedByTool !== undefined && {
341
+ spawnedByTool: resolvedConfig.spawnedByTool
342
+ }),
343
+ ...(resolvedConfig.enforcementMode !== undefined && {
344
+ enforcementMode: resolvedConfig.enforcementMode
345
+ }),
224
346
  shutdown: async () => {
225
347
  for (const adapter of adapters) {
226
348
  await adapter.shutdown?.();
@@ -1 +1 @@
1
- {"version":3,"file":"init-assembly.js","sourceRoot":"","sources":["../../../src/core/init-assembly.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAM5C,OAAO,EAAE,uBAAuB,EAAsB,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAqB,MAAM,qBAAqB,CAAC;AAG5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAKjE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAEzE,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAE1D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAChD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAE5D,SAAS,sBAAsB,CAAC,MAAsB;IACpD,MAAM,KAAK,GAA2B,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IACjE,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;QAAE,KAAK,CAAC,eAAe,GAAG,MAAM,CAAC,aAAa,CAAC;IACrF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/D,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS;QAAE,KAAK,CAAC,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAC7F,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;QAAE,KAAK,CAAC,eAAe,GAAG,MAAM,CAAC,aAAa,CAAC;IACrF,sEAAsE;IACtE,4EAA4E;IAC5E,yEAAyE;IACzE,qEAAqE;IACrE,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS;QAAE,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,eAAe,CAAC;IAC1F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAsB;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC;IACnC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,aAAa,CAAC;IAC9B,CAAC;IAED,uEAAuE;IACvE,2EAA2E;IAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,UAAU,CAAC;IAChE,OAAO,uBAAuB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,IAAI,CAAC;QACH,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,cAAc,EAAE,EAAE,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,kBAAkB,EAAE,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,YAAY,EAAE,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,SAAS,EAAE,EAAE,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,EAAU;IAC/B,OAAO;QACL,EAAE;QACF,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAA6B;IAClE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IACzE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAqB,EACrB,MAAsB;IAEtB,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAsB;IACtD,MAAM,CAAC,SAAS,KAAK,EAAE,CAAC;IACxB,MAAM,CAAC,SAAS,CAAC,SAAS,KAAK,EAAE,CAAC;IAElC,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;AACpC,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAsB;IAClD,MAAM,CAAC,SAAS,KAAK,EAAE,CAAC;IACxB,MAAM,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC;IAE9B,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,MAAsB,EACtB,MAAqB,EACrB,UAA6B;IAE7B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC9D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,+EAA+E;IAC/E,gFAAgF;IAChF,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACpD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAsB,EACtB,MAAqB,EACrB,UAA6B;IAE7B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,cAAc,GAAgC;QAClD,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB;YACrC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,SAAS,CAAC,iBAAiB,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,MAAqB,EACrB,UAA6B,EAC7B,OAAgB;IAEhB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,gBAAgB,CAAC;QACtB,aAAa,EAAE,MAAM;QACrB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,UAA6B,EAC7B,OAAgB;IAEhB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,UAA6B,EAC7B,OAAgB;IAEhB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,MAAqB,EACrB,UAA6B;IAE7B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,iBAAiB,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAyB,EAAE;IAC5D,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAClF,MAAM,IAAI,UAAU,CAAC,4CAA4C,CAAC,CAAC;IACrE,CAAC;IACD,wEAAwE;IACxE,uEAAuE;IACvE,mEAAmE;IACnE,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,UAAU,CAClB,mCAAmC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAC3G,CAAC;IACJ,CAAC;IACD,yFAAyF;IACzF,4FAA4F;IAC5F,MAAM,qBAAqB,GAAG,MAAM,CAAC,aAAa,IAAI,cAAc,EAAE,CAAC;IACvE,yEAAyE;IACzE,6EAA6E;IAC7E,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC1E,MAAM,oBAAoB,GAAG,MAAM,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC1F,MAAM,kBAAkB,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAmB;QACrC,GAAG,MAAM;QACT,UAAU,EAAE,kBAAkB;QAC9B,MAAM,EAAE,cAAc;QACtB,GAAG,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAEpD,MAAM,yBAAyB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAExD,8EAA8E;IAC9E,gEAAgE;IAChE,IAAI,YAAsC,CAAC;IAC3C,IAAI,cAAc,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACvC,YAAY,GAAG,kBAAkB,CAAC;YAChC,OAAO,EAAE,kBAAkB;YAC3B,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,cAAc,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc;SACnF,CAAC,CAAC;QACH,YAAY,CAAC,SAAS,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,wBAAwB,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5F,MAAM,qBAAqB,GAAG,MAAM,kBAAkB,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAC3F,MAAM,kBAAkB,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IACtG,MAAM,mBAAmB,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAChF,MAAM,gBAAgB,GAAG,MAAM,sBAAsB,CAAC,UAAU,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IAC1F,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IAEpF,OAAO;QACL,cAAc,EAAE;YACd,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,GAAG,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChD,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACrC,CAAC;SACH;QACD,GAAG,CAAC,cAAc,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,cAAc,CAAC,aAAa,EAAE,CAAC;QAClG,GAAG,CAAC,cAAc,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;QAC7E,GAAG,CAAC,cAAc,CAAC,gBAAgB,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,cAAc,CAAC,gBAAgB,EAAE,CAAC;QAC3G,GAAG,CAAC,cAAc,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,cAAc,CAAC,aAAa,EAAE,CAAC;QAClG,GAAG,CAAC,cAAc,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,eAAe,EAAE,cAAc,CAAC,eAAe,EAAE,CAAC;QACxG,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC7B,CAAC;YACD,MAAM,YAAY,EAAE,KAAK,EAAE,CAAC;YAC5B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"init-assembly.js","sourceRoot":"","sources":["../../../src/core/init-assembly.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAM5C,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EAExB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,kBAAkB,EAGnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAIxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAKjE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAE1D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAChD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAE5D,SAAS,sBAAsB,CAAC,MAAsB;IACpD,MAAM,KAAK,GAA2B,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IACjE,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;QAAE,KAAK,CAAC,eAAe,GAAG,MAAM,CAAC,aAAa,CAAC;IACrF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/D,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS;QAAE,KAAK,CAAC,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,CAAC;IAC7F,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;QAAE,KAAK,CAAC,eAAe,GAAG,MAAM,CAAC,aAAa,CAAC;IACrF,sEAAsE;IACtE,4EAA4E;IAC5E,yEAAyE;IACzE,qEAAqE;IACrE,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS;QAAE,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,eAAe,CAAC;IAC1F,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAC3B,MAAsB,EACtB,UAA6B;IAE7B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IACrC,OAAO;QACL,OAAO;QACP,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,OAAO;QAC5B,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,MAAM;QAClC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,kBAAkB,GAAiB,gBAAgB,CAAC;AAE1D,MAAM,UAAU,YAAY,CAC1B,MAAsB,EACtB,oBAAmC;IAEnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC;IACnC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,aAAa,CAAC;IAC9B,CAAC;IAED,+EAA+E;IAC/E,6EAA6E;IAC7E,+EAA+E;IAC/E,6EAA6E;IAC7E,2EAA2E;IAC3E,wEAAwE;IACxE,8EAA8E;IAC9E,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACxE,MAAM,IAAI,kBAAkB,CAC1B,wEAAwE,IAAI,IAAI;YAC9E,0EAA0E;YAC1E,4BAA4B,kBAAkB,qBAAqB;YACnE,gEAAgE,CACnE,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,2EAA2E;IAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,UAAU,CAAC;IAEhE,yEAAyE;IACzE,uEAAuE;IACvE,0EAA0E;IAC1E,uEAAuE;IACvE,2DAA2D;IAC3D,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,6CAA6C;QAC7C,MAAM,YAAY,GAChB,oBAAoB;YACpB,kBAAkB,CAAC;gBACjB,OAAO,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;gBAChC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;gBAC3B,IAAI,EAAE,gBAAgB;aACvB,CAAC,CAAC;QACL,OAAO,yBAAyB,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACpF,CAAC;IAED,OAAO,uBAAuB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,IAAI,CAAC;QACH,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,cAAc,EAAE,EAAE,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,kBAAkB,EAAE,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,YAAY,EAAE,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,SAAS,EAAE,EAAE,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,EAAU;IAC/B,OAAO;QACL,EAAE;QACF,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAA6B;IAClE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IACzE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAqB,EACrB,MAAsB;IAEtB,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAsB;IACtD,MAAM,CAAC,SAAS,KAAK,EAAE,CAAC;IACxB,MAAM,CAAC,SAAS,CAAC,SAAS,KAAK,EAAE,CAAC;IAElC,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;AACpC,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAsB;IAClD,MAAM,CAAC,SAAS,KAAK,EAAE,CAAC;IACxB,MAAM,CAAC,SAAS,CAAC,KAAK,KAAK,EAAE,CAAC;IAE9B,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,MAAsB,EACtB,MAAqB,EACrB,UAA6B;IAE7B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC9D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,+EAA+E;IAC/E,gFAAgF;IAChF,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACpD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,MAAsB,EACtB,MAAqB,EACrB,UAA6B;IAE7B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,cAAc,GAAgC;QAClD,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB;YACrC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,SAAS,CAAC,iBAAiB,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,MAAqB,EACrB,UAA6B,EAC7B,OAAgB;IAEhB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,gBAAgB,CAAC;QACtB,aAAa,EAAE,MAAM;QACrB,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,UAA6B,EAC7B,OAAgB;IAEhB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,UAA6B,EAC7B,OAAgB;IAEhB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,MAAqB,EACrB,UAA6B;IAE7B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,iBAAiB,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,MAAsB;IAC5C,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAClF,MAAM,IAAI,UAAU,CAAC,4CAA4C,CAAC,CAAC;IACrE,CAAC;IACD,wEAAwE;IACxE,uEAAuE;IACvE,mEAAmE;IACnE,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,UAAU,CAClB,mCAAmC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAC3G,CAAC;IACJ,CAAC;AACH,CAAC;AAYD;;;;GAIG;AACH,KAAK,UAAU,qBAAqB,CAClC,MAAsB,EACtB,MAAqB,EACrB,UAA6B;IAE7B,MAAM,gBAAgB,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACpF,MAAM,qBAAqB,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACnF,MAAM,kBAAkB,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9F,MAAM,mBAAmB,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAChF,MAAM,gBAAgB,GAAG,MAAM,sBAAsB,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAClF,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAE5E,OAAO;QACL,gBAAgB;QAChB,qBAAqB;QACrB,kBAAkB;QAClB,mBAAmB;QACnB,gBAAgB;QAChB,aAAa;KACd,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,QAA4B,EAAE,OAA6B;IACtF,OAAO;QACL,GAAG,IAAI,GAAG,CAAC;YACT,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAyB,EAAE;IAC5D,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,yFAAyF;IACzF,4FAA4F;IAC5F,MAAM,qBAAqB,GAAG,MAAM,CAAC,aAAa,IAAI,cAAc,EAAE,CAAC;IACvE,yEAAyE;IACzE,6EAA6E;IAC7E,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC1E,MAAM,oBAAoB,GAAG,MAAM,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC1F,MAAM,kBAAkB,GAAG,MAAM,iBAAiB,CAAC,eAAe,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,cAAc,GAAmB;QACrC,GAAG,MAAM;QACT,UAAU,EAAE,kBAAkB;QAC9B,MAAM,EAAE,cAAc;QACtB,GAAG,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC;QACxF,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC;IAEF,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IAEtC,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,sEAAsE;IACtE,IAAI,YAAsC,CAAC;IAC3C,IAAI,cAAc,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACvC,YAAY,GAAG,kBAAkB,CAAC;YAChC,OAAO,EAAE,kBAAkB;YAC3B,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,cAAc,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc;SACnF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAEpD,MAAM,yBAAyB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAExD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,0EAA0E;QAC1E,sEAAsE;QACtE,2EAA2E;QAC3E,wEAAwE;QACxE,+BAA+B;QAC/B,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,QAAQ,CAAC,oBAAoB,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yEAAyE;YACzE,2EAA2E;YAC3E,gBAAgB;YAChB,OAAO,CAAC,IAAI,CACV,wEAAwE,kBAAkB,CAAC,KAAK,CAAC,EAAE,CACpG,CAAC;QACJ,CAAC;QACD,2EAA2E;QAC3E,gDAAgD;QAChD,YAAY,CAAC,SAAS,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAEhF,OAAO;QACL,cAAc,EAAE,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC;QACtD,GAAG,CAAC,cAAc,CAAC,aAAa,KAAK,SAAS,IAAI;YAChD,aAAa,EAAE,cAAc,CAAC,aAAa;SAC5C,CAAC;QACF,GAAG,CAAC,cAAc,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;QAC7E,GAAG,CAAC,cAAc,CAAC,gBAAgB,KAAK,SAAS,IAAI;YACnD,gBAAgB,EAAE,cAAc,CAAC,gBAAgB;SAClD,CAAC;QACF,GAAG,CAAC,cAAc,CAAC,aAAa,KAAK,SAAS,IAAI;YAChD,aAAa,EAAE,cAAc,CAAC,aAAa;SAC5C,CAAC;QACF,GAAG,CAAC,cAAc,CAAC,eAAe,KAAK,SAAS,IAAI;YAClD,eAAe,EAAE,cAAc,CAAC,eAAe;SAChD,CAAC;QACF,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC7B,CAAC;YACD,MAAM,YAAY,EAAE,KAAK,EAAE,CAAC;YAC5B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC"}
@@ -0,0 +1,59 @@
1
+ /**
2
+ * Secret-redaction helpers for diagnostic / log output (AAASM-3645).
3
+ *
4
+ * The resolved `apiKey` and the proto `credentialToken` must never reach
5
+ * `console.*` or an accidental `JSON.stringify` dump. These helpers give the
6
+ * SDK a single, audited way to render config/diagnostics for logging with the
7
+ * credential fields stripped.
8
+ *
9
+ * NOTE: the generated `CheckActionRequest.toJSON()` (src/proto/generated) is
10
+ * wire-only — it serializes `credentialToken` for transport and must never be
11
+ * passed to a logger. Use {@link redactSecrets} on any object you intend to log.
12
+ */
13
+ /**
14
+ * Object keys (lower-cased) whose values are credentials and must never be
15
+ * logged. Matching is case-insensitive, so list the lower-case form only —
16
+ * `apiKey`, `apikey`, `API_KEY` all match `"apikey"`.
17
+ */
18
+ const SECRET_KEYS = new Set([
19
+ "apikey",
20
+ "api_key",
21
+ "credentialtoken",
22
+ "credential_token",
23
+ "authorization",
24
+ "token"
25
+ ]);
26
+ /** Placeholder substituted for any redacted credential value. */
27
+ export const REDACTED = "<redacted>";
28
+ /**
29
+ * Return a deep copy of `value` with every credential-bearing field replaced by
30
+ * {@link REDACTED}, safe to pass to `console.*` / `JSON.stringify`. Matching is
31
+ * case-insensitive on the key name. Non-object inputs are returned unchanged.
32
+ */
33
+ export function redactSecrets(value) {
34
+ if (Array.isArray(value)) {
35
+ return value.map((item) => redactSecrets(item));
36
+ }
37
+ if (value !== null && typeof value === "object") {
38
+ const out = {};
39
+ for (const [key, val] of Object.entries(value)) {
40
+ out[key] = SECRET_KEYS.has(key.toLowerCase()) ? REDACTED : redactSecrets(val);
41
+ }
42
+ return out;
43
+ }
44
+ return value;
45
+ }
46
+ /**
47
+ * Render an unknown error for a log message with any `Bearer <token>` / API-key
48
+ * substring scrubbed. Defends the registration-failure warning path: a wrapped
49
+ * transport error could in principle carry an auth header in its message, so we
50
+ * strip the bearer credential before it reaches `console.*` (AAASM-3645).
51
+ */
52
+ export function redactErrorMessage(error) {
53
+ const raw = String(error);
54
+ // Replace the credential that follows a `Bearer ` / `Authorization:` marker.
55
+ return raw
56
+ .replace(/(Bearer\s+)[\w.\-+/=]+/gi, `$1${REDACTED}`)
57
+ .replace(/(Authorization\s*[:=]\s*)\S+/gi, `$1${REDACTED}`);
58
+ }
59
+ //# sourceMappingURL=redact.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"redact.js","sourceRoot":"","sources":["../../../src/core/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;GAIG;AACH,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC;IAC/C,QAAQ;IACR,SAAS;IACT,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,OAAO;CACR,CAAC,CAAC;AAEH,iEAAiE;AACjE,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,6EAA6E;IAC7E,OAAO,GAAG;SACP,OAAO,CAAC,0BAA0B,EAAE,KAAK,QAAQ,EAAE,CAAC;SACpD,OAAO,CAAC,gCAAgC,EAAE,KAAK,QAAQ,EAAE,CAAC,CAAC;AAChE,CAAC"}
@@ -1,7 +1,7 @@
1
1
  export function createNoopGatewayClient(mode, httpBaseUrl) {
2
2
  return {
3
3
  mode,
4
- ...(httpBaseUrl !== undefined ? { httpBaseUrl } : {}),
4
+ ...(httpBaseUrl === undefined ? {} : { httpBaseUrl }),
5
5
  start: async () => undefined,
6
6
  close: async () => undefined,
7
7
  check: async () => ({ denied: false, pending: false }),
@@ -11,4 +11,65 @@ export function createNoopGatewayClient(mode, httpBaseUrl) {
11
11
  scanPrompts: async () => undefined
12
12
  };
13
13
  }
14
+ /**
15
+ * Translate a governance check request into the native `queryPolicy` query
16
+ * shape (AAASM-3047). The runtime reads `agent_id`, `action_type`, and — for
17
+ * tool calls — `tool_name` / `args`.
18
+ */
19
+ function toNativeQuery(request, agentId) {
20
+ const query = {
21
+ agent_id: agentId ?? "",
22
+ action_type: request.action
23
+ };
24
+ if (request.toolName !== undefined) {
25
+ query.tool_name = request.toolName;
26
+ }
27
+ if (request.args !== undefined) {
28
+ query.args = request.args;
29
+ }
30
+ return query;
31
+ }
32
+ /**
33
+ * Gateway client backed by the in-process native runtime (AAASM-3050).
34
+ *
35
+ * `check()` asks a reachable `aa-runtime` for an authoritative verdict via the
36
+ * native `queryPolicy` primitive and maps it onto a `GatewayDecision`:
37
+ * - `deny` → `{ denied: true }` (the wrapper throws `PolicyViolationError`)
38
+ * - `pending` → `{ pending: true }` (routes to the approval path)
39
+ * - allow / redact / unspecified → `{ denied: false }`
40
+ *
41
+ * **Fail-open (security-critical):** the SDK is advisory, not a security
42
+ * boundary. The native primitive already returns `allow` when the runtime is
43
+ * unreachable or too slow; on top of that, any local fault while querying is
44
+ * swallowed here and resolves neutral, so a missing or degraded runtime never
45
+ * blocks the agent. The proxy / eBPF layers remain authoritative.
46
+ */
47
+ export function createNativeGatewayClient(mode, nativeClient, agentId, httpBaseUrl) {
48
+ return {
49
+ mode,
50
+ ...(httpBaseUrl === undefined ? {} : { httpBaseUrl }),
51
+ start: async () => undefined,
52
+ close: async () => {
53
+ await nativeClient.close();
54
+ },
55
+ check: async (request) => {
56
+ try {
57
+ const verdict = await nativeClient.queryPolicy(toNativeQuery(request, agentId));
58
+ return {
59
+ denied: verdict.denied ?? false,
60
+ pending: verdict.pending ?? false,
61
+ ...(verdict.reason === undefined ? {} : { reason: verdict.reason })
62
+ };
63
+ }
64
+ catch {
65
+ // Fail open: a local fault talking to the runtime must never block.
66
+ return { denied: false, pending: false };
67
+ }
68
+ },
69
+ waitForApproval: async () => ({ denied: false }),
70
+ record: async () => undefined,
71
+ recordResult: async () => undefined,
72
+ scanPrompts: async () => undefined
73
+ };
74
+ }
14
75
  //# sourceMappingURL=client.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/gateway/client.ts"],"names":[],"mappings":"AA+BA,MAAM,UAAU,uBAAuB,CACrC,IAAkB,EAClB,WAAoB;IAEpB,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QAC5B,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QAC5B,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACtD,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAChD,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QAC7B,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QACnC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;KACnC,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/gateway/client.ts"],"names":[],"mappings":"AAgCA,MAAM,UAAU,uBAAuB,CAAC,IAAkB,EAAE,WAAoB;IAC9E,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QAC5B,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QAC5B,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACtD,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAChD,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QAC7B,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QACnC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;KACnC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CACpB,OAA4B,EAC5B,OAA2B;IAE3B,MAAM,KAAK,GAA4B;QACrC,QAAQ,EAAE,OAAO,IAAI,EAAE;QACvB,WAAW,EAAE,OAAO,CAAC,MAAM;KAC5B,CAAC;IACF,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAAkB,EAClB,YAA0B,EAC1B,OAAgB,EAChB,WAAoB;IAEpB,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QAC5B,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;QAC7B,CAAC;QACD,KAAK,EAAE,KAAK,EAAE,OAA4B,EAA4B,EAAE;YACtE,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBAChF,OAAO;oBACL,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;oBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK;oBACjC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;iBACpE,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;gBACpE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAChD,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QAC7B,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QACnC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;KACnC,CAAC;AACJ,CAAC"}
@@ -1,2 +1,2 @@
1
- export { createNoopGatewayClient } from "./client.js";
1
+ export { createNativeGatewayClient, createNoopGatewayClient } from "./client.js";
2
2
  //# sourceMappingURL=index.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/gateway/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/gateway/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC"}
@@ -3,16 +3,15 @@ import { runWithAgentId } from "../lineage/agent-context-store.js";
3
3
  export const vercelAiSdkPatchState = {
4
4
  isPatched: false,
5
5
  originalToolFactory: undefined,
6
- patchedModule: undefined
6
+ patchedModule: undefined,
7
+ mutatedOriginal: false
7
8
  };
8
9
  export function captureOriginalToolFactory(module) {
9
10
  const candidate = module.tool;
10
11
  if (typeof candidate !== "function") {
11
12
  return undefined;
12
13
  }
13
- if (!vercelAiSdkPatchState.originalToolFactory) {
14
- vercelAiSdkPatchState.originalToolFactory = candidate;
15
- }
14
+ vercelAiSdkPatchState.originalToolFactory ??= candidate;
16
15
  return vercelAiSdkPatchState.originalToolFactory;
17
16
  }
18
17
  export function recordToolResultNonBlocking(gatewayClient, runId, output) {
@@ -34,7 +33,7 @@ export function createWrappedExecute(originalExecute, description, gatewayClient
34
33
  decision = await gatewayClient.check({
35
34
  action: "tool_call",
36
35
  toolName: description,
37
- args: args,
36
+ args,
38
37
  runId
39
38
  });
40
39
  }
@@ -72,6 +71,35 @@ export function createPatchedToolFactory(originalToolFactory, gatewayClient, opt
72
71
  };
73
72
  };
74
73
  }
74
+ /**
75
+ * Install `governed` as the module's `tool` factory without ever assigning to a
76
+ * frozen ESM namespace.
77
+ *
78
+ * A real `ai` package loaded via `import()` is an ES module: its namespace is an
79
+ * exotic object whose named exports are non-writable, so `module.tool = …` throws
80
+ * `Cannot assign to read only property 'tool'` (AAASM-3532). We therefore attempt
81
+ * the in-place assignment only as a fast path for writable plain objects (the
82
+ * shape used by the unit suite's `loadModule` fakes) and fall back to a mutable
83
+ * **shim copy** for the frozen-namespace case — the same `{ tool: aiModule.tool }`
84
+ * shim the AAASM-3525 integration driver proved works. The returned module is what
85
+ * downstream consumers read the governed factory from (`patchedModule.tool`).
86
+ */
87
+ function applyGovernedToolFactory(module, governed) {
88
+ if (Object.isExtensible(module)) {
89
+ try {
90
+ module.tool = governed;
91
+ return { patchedModule: module, mutatedOriginal: true };
92
+ }
93
+ catch {
94
+ // Some non-extensible-but-reported-extensible exotic objects still reject
95
+ // the write; fall through to the shim copy below.
96
+ }
97
+ }
98
+ return {
99
+ patchedModule: { ...module, tool: governed },
100
+ mutatedOriginal: false
101
+ };
102
+ }
75
103
  async function loadVercelAiSdkModule() {
76
104
  try {
77
105
  const moduleName = "ai";
@@ -95,13 +123,15 @@ export async function patchVercelAiSdk(options) {
95
123
  if (!originalToolFactory) {
96
124
  return false;
97
125
  }
98
- module.tool = createPatchedToolFactory(originalToolFactory, options.gatewayClient, {
126
+ const governed = createPatchedToolFactory(originalToolFactory, options.gatewayClient, {
99
127
  approvalTimeoutMs: options.approvalTimeoutMs ?? 30_000,
100
128
  fallbackRunId: options.fallbackRunId ?? "vercel-ai-sdk",
101
- ...(options.agentId !== undefined ? { agentId: options.agentId } : {})
129
+ ...(options.agentId === undefined ? {} : { agentId: options.agentId })
102
130
  });
131
+ const { patchedModule, mutatedOriginal } = applyGovernedToolFactory(module, governed);
103
132
  vercelAiSdkPatchState.isPatched = true;
104
- vercelAiSdkPatchState.patchedModule = module;
133
+ vercelAiSdkPatchState.patchedModule = patchedModule;
134
+ vercelAiSdkPatchState.mutatedOriginal = mutatedOriginal;
105
135
  return true;
106
136
  }
107
137
  export function unpatchVercelAiSdk() {
@@ -114,10 +144,16 @@ export function unpatchVercelAiSdk() {
114
144
  if (!vercelAiSdkPatchState.originalToolFactory) {
115
145
  return false;
116
146
  }
117
- vercelAiSdkPatchState.patchedModule.tool =
118
- vercelAiSdkPatchState.originalToolFactory;
147
+ // Only restore when we mutated a writable module in place. For the frozen-ESM
148
+ // shim path the original `ai` namespace was never touched, so there is nothing
149
+ // to write back — and attempting it would re-throw the AAASM-3532 crash.
150
+ if (vercelAiSdkPatchState.mutatedOriginal) {
151
+ vercelAiSdkPatchState.patchedModule.tool =
152
+ vercelAiSdkPatchState.originalToolFactory;
153
+ }
119
154
  vercelAiSdkPatchState.isPatched = false;
120
155
  vercelAiSdkPatchState.patchedModule = undefined;
156
+ vercelAiSdkPatchState.mutatedOriginal = false;
121
157
  return true;
122
158
  }
123
159
  //# sourceMappingURL=ai-sdk.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"ai-sdk.js","sourceRoot":"","sources":["../../../src/hooks/ai-sdk.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAYnE,MAAM,CAAC,MAAM,qBAAqB,GAA0B;IAC1D,SAAS,EAAE,KAAK;IAChB,mBAAmB,EAAE,SAAS;IAC9B,aAAa,EAAE,SAAS;CACzB,CAAC;AAEF,MAAM,UAAU,0BAA0B,CACxC,MAAyB;IAEzB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;IAC9B,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,EAAE,CAAC;QAC/C,qBAAqB,CAAC,mBAAmB,GAAG,SAAS,CAAC;IACxD,CAAC;IAED,OAAO,qBAAqB,CAAC,mBAAmB,CAAC;AACnD,CAAC;AASD,MAAM,UAAU,2BAA2B,CACzC,aAA4B,EAC5B,KAAa,EACb,MAAe;IAEf,KAAK,aAAa,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,eAAyF,EACzF,WAAmB,EACnB,aAA4B,EAC5B,OAAoC;IAEpC,OAAO,KAAK,UAAU,cAAc,CAClC,IAAW,EACX,gBAA8C;QAE9C,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,IAAI,OAAO,CAAC,aAAa,CAAC;QAEnE,MAAM,eAAe,GAAG,KAAK,IAAsB,EAAE;YACnD,MAAM,GAAG,GAAG,KAAK,IAAsB,EAAE;gBACvC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBAC7D,2BAA2B,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC1D,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC;YACF,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACxE,CAAC,CAAC;QAEF,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC;gBACnC,MAAM,EAAE,WAAW;gBACnB,QAAQ,EAAE,WAAW;gBACrB,IAAI,EAAE,IAA+B;gBACrC,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,eAAe,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,oBAAoB,CAC5B,sCAAsC,QAAQ,CAAC,MAAM,IAAI,QAAQ,EAAE,CACpE,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,QAAQ,CAAC;YACb,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,aAAa,CAAC,eAAe,CAC5C,WAAW,EACX,KAAK,EACL,OAAO,CAAC,iBAAiB,CAC1B,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,eAAe,EAAE,CAAC;YAC3B,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,oBAAoB,CAC5B,sBAAsB,QAAQ,CAAC,MAAM,IAAI,UAAU,EAAE,CACtD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,eAAe,EAAE,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,wBAAwB,CACtC,mBAAwC,EACxC,aAA4B,EAC5B,OAAwC;IAExC,OAAO,SAAS,WAAW,CACzB,UAAkD;QAElD,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAEnD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,IAAI,cAAc,CAAC;QAE7D,OAAO;YACL,GAAG,UAAU;YACb,OAAO,EAAE,oBAAoB,CAC3B,UAAU,CAAC,OAAO,EAClB,WAAW,EACX,aAAa,EACb,OAAO,CACR;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAUD,KAAK,UAAU,qBAAqB;IAClC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC;QACxB,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAsB,CAAC;QAC/D,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgC;IAEhC,IAAI,qBAAqB,CAAC,SAAS,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,qBAAqB,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,IAAI,GAAG,wBAAwB,CACpC,mBAAmB,EACnB,OAAO,CAAC,aAAa,EACrB;QACE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,MAAM;QACtD,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,eAAe;QACvD,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CACF,CAAC;IACF,qBAAqB,CAAC,SAAS,GAAG,IAAI,CAAC;IACvC,qBAAqB,CAAC,aAAa,GAAG,MAAM,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,qBAAqB,CAAC,aAAa,CAAC,IAAI;QACtC,qBAAqB,CAAC,mBAAmB,CAAC;IAC5C,qBAAqB,CAAC,SAAS,GAAG,KAAK,CAAC;IACxC,qBAAqB,CAAC,aAAa,GAAG,SAAS,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC"}
1
+ {"version":3,"file":"ai-sdk.js","sourceRoot":"","sources":["../../../src/hooks/ai-sdk.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAyBnE,MAAM,CAAC,MAAM,qBAAqB,GAA0B;IAC1D,SAAS,EAAE,KAAK;IAChB,mBAAmB,EAAE,SAAS;IAC9B,aAAa,EAAE,SAAS;IACxB,eAAe,EAAE,KAAK;CACvB,CAAC;AAEF,MAAM,UAAU,0BAA0B,CACxC,MAAyB;IAEzB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;IAC9B,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,qBAAqB,CAAC,mBAAmB,KAAK,SAAS,CAAC;IAExD,OAAO,qBAAqB,CAAC,mBAAmB,CAAC;AACnD,CAAC;AASD,MAAM,UAAU,2BAA2B,CACzC,aAA4B,EAC5B,KAAa,EACb,MAAe;IAEf,KAAK,aAAa,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,eAAyF,EACzF,WAAmB,EACnB,aAA4B,EAC5B,OAAoC;IAEpC,OAAO,KAAK,UAAU,cAAc,CAClC,IAAW,EACX,gBAA8C;QAE9C,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,IAAI,OAAO,CAAC,aAAa,CAAC;QAEnE,MAAM,eAAe,GAAG,KAAK,IAAsB,EAAE;YACnD,MAAM,GAAG,GAAG,KAAK,IAAsB,EAAE;gBACvC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBAC7D,2BAA2B,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC1D,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC;YACF,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACxE,CAAC,CAAC;QAEF,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC;gBACnC,MAAM,EAAE,WAAW;gBACnB,QAAQ,EAAE,WAAW;gBACrB,IAAI;gBACJ,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,eAAe,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,oBAAoB,CAC5B,sCAAsC,QAAQ,CAAC,MAAM,IAAI,QAAQ,EAAE,CACpE,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,QAAQ,CAAC;YACb,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,aAAa,CAAC,eAAe,CAC5C,WAAW,EACX,KAAK,EACL,OAAO,CAAC,iBAAiB,CAC1B,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,eAAe,EAAE,CAAC;YAC3B,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,oBAAoB,CAC5B,sBAAsB,QAAQ,CAAC,MAAM,IAAI,UAAU,EAAE,CACtD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,eAAe,EAAE,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,wBAAwB,CACtC,mBAAwC,EACxC,aAA4B,EAC5B,OAAwC;IAExC,OAAO,SAAS,WAAW,CACzB,UAAkD;QAElD,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAEnD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,IAAI,cAAc,CAAC;QAE7D,OAAO;YACL,GAAG,UAAU;YACb,OAAO,EAAE,oBAAoB,CAC3B,UAAU,CAAC,OAAO,EAClB,WAAW,EACX,aAAa,EACb,OAAO,CACR;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAUD;;;;;;;;;;;;GAYG;AACH,SAAS,wBAAwB,CAC/B,MAAyB,EACzB,QAA6B;IAE7B,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;YACvB,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,kDAAkD;QACpD,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC5C,eAAe,EAAE,KAAK;KACvB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB;IAClC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC;QACxB,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAsB,CAAC;QAC/D,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAgC;IAEhC,IAAI,qBAAqB,CAAC,SAAS,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,qBAAqB,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,wBAAwB,CACvC,mBAAmB,EACnB,OAAO,CAAC,aAAa,EACrB;QACE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,MAAM;QACtD,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,eAAe;QACvD,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;KACvE,CACF,CAAC;IAEF,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,wBAAwB,CACjE,MAAM,EACN,QAAQ,CACT,CAAC;IAEF,qBAAqB,CAAC,SAAS,GAAG,IAAI,CAAC;IACvC,qBAAqB,CAAC,aAAa,GAAG,aAAa,CAAC;IACpD,qBAAqB,CAAC,eAAe,GAAG,eAAe,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,EAAE,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8EAA8E;IAC9E,+EAA+E;IAC/E,yEAAyE;IACzE,IAAI,qBAAqB,CAAC,eAAe,EAAE,CAAC;QAC1C,qBAAqB,CAAC,aAAa,CAAC,IAAI;YACtC,qBAAqB,CAAC,mBAAmB,CAAC;IAC9C,CAAC;IACD,qBAAqB,CAAC,SAAS,GAAG,KAAK,CAAC;IACxC,qBAAqB,CAAC,aAAa,GAAG,SAAS,CAAC;IAChD,qBAAqB,CAAC,eAAe,GAAG,KAAK,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC"}
@@ -1,7 +1,16 @@
1
+ /**
2
+ * Intentional no-op stub: native-transport LangChain patching is not
3
+ * implemented. LangChain enforcement is performed in the SDK's callback layer
4
+ * (post-execution redaction) and wrapper layer (pre-execution deny) wired by
5
+ * `initAssembly`, not through this native hook — so there is nothing to patch
6
+ * here yet. Returns `false` (nothing patched) for every mode.
7
+ *
8
+ * The `client` parameter is retained to keep the adapter-registry hook
9
+ * signature (and the public `patchLangChain` export) uniform with the other
10
+ * `patch*` hooks; it is deliberately unused until native patching lands.
11
+ */
12
+ // eslint-disable-next-line @typescript-eslint/no-unused-vars -- stub param kept for signature stability; see TSDoc above
1
13
  export async function patchLangChain(client) {
2
- if (client.mode === "grpc-sidecar" || client.mode === "napi-inprocess") {
3
- return false;
4
- }
5
14
  return false;
6
15
  }
7
16
  //# sourceMappingURL=langchain.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"langchain.js","sourceRoot":"","sources":["../../../src/hooks/langchain.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAoB;IACvD,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACvE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
1
+ {"version":3,"file":"langchain.js","sourceRoot":"","sources":["../../../src/hooks/langchain.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,yHAAyH;AACzH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAoB;IACvD,OAAO,KAAK,CAAC;AACf,CAAC"}