@agentguard-run/spend 0.1.4 → 0.1.7

package/bin/agentguard.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+// AgentGuard CLI entry point (executable via `agentguard` after npm install).
+require('../dist/cli/main')
+  .main()
+  .then((code) => process.exit(code))
+  .catch((err) => {
+    console.error(err);
+    process.exit(1);
+  });

package/dist/cli/colors.d.ts

@@ -0,0 +1,22 @@
+/**
+ * ANSI color helpers with TTY detection.
+ *
+ * Honors:
+ *   - NO_COLOR=1                (industry standard; https://no-color.org)
+ *   - AGENTGUARD_COLOR=0        (product-specific opt-out)
+ *   - process.stdout.isTTY      (no color when piped to file or non-TTY)
+ */
+export declare const red: (text: string) => string;
+export declare const green: (text: string) => string;
+export declare const yellow: (text: string) => string;
+export declare const cyan: (text: string) => string;
+export declare const brightRed: (text: string) => string;
+export declare const brightGreen: (text: string) => string;
+export declare const brightCyan: (text: string) => string;
+export declare const bold: (text: string) => string;
+export declare const dim: (text: string) => string;
+export declare function cyanBold(text: string): string;
+export declare function redBold(text: string): string;
+export declare function greenBold(text: string): string;
+export declare function banner(version: string): string;
+//# sourceMappingURL=colors.d.ts.map

package/dist/cli/colors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"colors.d.ts","sourceRoot":"","sources":["../../src/cli/colors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAeH,eAAO,MAAM,GAAG,SAJoB,MAAM,KAAK,MAIlB,CAAC;AAC9B,eAAO,MAAM,KAAK,SALkB,MAAM,KAAK,MAKhB,CAAC;AAChC,eAAO,MAAM,MAAM,SANiB,MAAM,KAAK,MAMf,CAAC;AACjC,eAAO,MAAM,IAAI,SAPmB,MAAM,KAAK,MAOjB,CAAC;AAC/B,eAAO,MAAM,SAAS,SARc,MAAM,KAAK,MAQZ,CAAC;AACpC,eAAO,MAAM,WAAW,SATY,MAAM,KAAK,MASV,CAAC;AACtC,eAAO,MAAM,UAAU,SAVa,MAAM,KAAK,MAUX,CAAC;AACrC,eAAO,MAAM,IAAI,SAXmB,MAAM,KAAK,MAWlB,CAAC;AAC9B,eAAO,MAAM,GAAG,SAZoB,MAAM,KAAK,MAYnB,CAAC;AAE7B,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5C;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,wBAAgB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9C"}

package/dist/cli/colors.js

@@ -0,0 +1,52 @@
+"use strict";
+/**
+ * ANSI color helpers with TTY detection.
+ *
+ * Honors:
+ *   - NO_COLOR=1                (industry standard; https://no-color.org)
+ *   - AGENTGUARD_COLOR=0        (product-specific opt-out)
+ *   - process.stdout.isTTY      (no color when piped to file or non-TTY)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dim = exports.bold = exports.brightCyan = exports.brightGreen = exports.brightRed = exports.cyan = exports.yellow = exports.green = exports.red = void 0;
+exports.cyanBold = cyanBold;
+exports.redBold = redBold;
+exports.greenBold = greenBold;
+exports.banner = banner;
+function colorEnabled() {
+    if (typeof process === 'undefined')
+        return false;
+    if (process.env.NO_COLOR)
+        return false;
+    const ag = (process.env.AGENTGUARD_COLOR || '').toLowerCase();
+    if (['0', 'false', 'no', 'off'].includes(ag))
+        return false;
+    if (!process.stdout || !process.stdout.isTTY)
+        return false;
+    return true;
+}
+function wrap(code) {
+    return (text) => (colorEnabled() ? `\x1b[${code}m${text}\x1b[0m` : text);
+}
+exports.red = wrap('31');
+exports.green = wrap('32');
+exports.yellow = wrap('33');
+exports.cyan = wrap('36');
+exports.brightRed = wrap('91');
+exports.brightGreen = wrap('92');
+exports.brightCyan = wrap('96');
+exports.bold = wrap('1');
+exports.dim = wrap('2');
+function cyanBold(text) {
+    return colorEnabled() ? `\x1b[1;36m${text}\x1b[0m` : text;
+}
+function redBold(text) {
+    return colorEnabled() ? `\x1b[1;31m${text}\x1b[0m` : text;
+}
+function greenBold(text) {
+    return colorEnabled() ? `\x1b[1;32m${text}\x1b[0m` : text;
+}
+function banner(version) {
+    return cyanBold(`⬡ AGENTGUARD SPEND  ·  v${version}`);
+}
+//# sourceMappingURL=colors.js.map

package/dist/cli/colors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"colors.js","sourceRoot":"","sources":["../../src/cli/colors.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAyBH,4BAEC;AAED,0BAEC;AAED,8BAEC;AAED,wBAEC;AArCD,SAAS,YAAY;IACnB,IAAI,OAAO,OAAO,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACnF,CAAC;AAEY,QAAA,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,QAAA,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;AACnB,QAAA,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;AACpB,QAAA,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;AAClB,QAAA,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;AACvB,QAAA,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,QAAA,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,QAAA,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;AACjB,QAAA,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;AAE7B,SAAgB,QAAQ,CAAC,IAAY;IACnC,OAAO,YAAY,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED,SAAgB,OAAO,CAAC,IAAY;IAClC,OAAO,YAAY,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED,SAAgB,SAAS,CAAC,IAAY;IACpC,OAAO,YAAY,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED,SAAgB,MAAM,CAAC,OAAe;IACpC,OAAO,QAAQ,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;AACxD,CAAC"}

package/dist/cli/demo.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `agentguard demo` — deterministic simulation with real cryptographic receipt.
+ *
+ * Output matches agentguard.run/the-block/ exactly. Dollar amounts and
+ * agent name are simulated parameters (fixed for reproducibility). The
+ * Ed25519 signature, SHA-256 chain hash, and canonical-JSON
+ * serialization are REAL — the receipt can be verified with
+ * `agentguard verify --trace latest`.
+ *
+ * No network calls. Fully offline. Deterministic across runs.
+ */
+export declare function runDemo(argv: string[]): Promise<number>;
+//# sourceMappingURL=demo.d.ts.map

package/dist/cli/demo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"demo.d.ts","sourceRoot":"","sources":["../../src/cli/demo.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAuBH,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAmI7D"}

package/dist/cli/demo.js

@@ -0,0 +1,173 @@
+"use strict";
+/**
+ * `agentguard demo` — deterministic simulation with real cryptographic receipt.
+ *
+ * Output matches agentguard.run/the-block/ exactly. Dollar amounts and
+ * agent name are simulated parameters (fixed for reproducibility). The
+ * Ed25519 signature, SHA-256 chain hash, and canonical-JSON
+ * serialization are REAL — the receipt can be verified with
+ * `agentguard verify --trace latest`.
+ *
+ * No network calls. Fully offline. Deterministic across runs.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDemo = runDemo;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const ed = __importStar(require("@noble/ed25519"));
+const decision_log_1 = require("../decision-log");
+const i18n_1 = require("../i18n");
+const index_1 = require("../index");
+const colors_1 = require("./colors");
+const DEMO_HOME = path.join(os.homedir(), '.agentguard', 'demo');
+const DEMO_PRIVATE_KEY = path.join(DEMO_HOME, 'demo-private.key');
+const DEMO_PUBLIC_KEY = path.join(DEMO_HOME, 'demo-public.key');
+const DEMO_RECEIPT = path.join(DEMO_HOME, 'latest-receipt.json');
+async function runDemo(argv) {
+    if (argv.includes('--no-color')) {
+        process.env.NO_COLOR = '1';
+    }
+    if (argv.includes('--help') || argv.includes('-h')) {
+        console.log('agentguard demo');
+        console.log('Run a deterministic simulation with a real cryptographic receipt.');
+        console.log('Options:');
+        console.log('  --no-color    Disable colored output (same as NO_COLOR=1).');
+        return 0;
+    }
+    // Simulated parameters - match the marketing screenshot at agentguard.run/the-block/.
+    const agentId = 'agent-finance-bot-v3';
+    const provider = 'anthropic';
+    const modelRequested = 'claude-opus-4-7';
+    const dailyCapCents = 50000; // $500.00
+    const projectedCents = 112241; // $1,122.41
+    const windowSpendBefore = 0;
+    const timestamp = '2026-05-24T18:00:00.000Z';
+    // Deterministic keypair from a fixed seed.
+    // Public + reproducible by design - NEVER use for production.
+    const privateSeed = new Uint8Array(32);
+    for (let i = 0; i < 32; i++)
+        privateSeed[i] = i;
+    const publicKey = await ed.getPublicKeyAsync(privateSeed);
+    const triggeredCap = {
+        amountCents: dailyCapCents,
+        window: 'per_day',
+        action: 'block',
+        reason: `Hard daily ceiling ($${(dailyCapCents / 100).toFixed(2)}/day)`,
+    };
+    const decision = {
+        decisionId: 'agentguard-demo-decision-v1',
+        timestamp,
+        policyId: 'agentguard-demo-policy-v1',
+        policyVersion: 1,
+        enforcementMode: 'enforce',
+        action: 'block',
+        reasons: [`Cap 'per_day=${dailyCapCents}c' exceeded`],
+        provider,
+        modelRequested,
+        modelResolved: modelRequested,
+        projectedCents,
+        windowSpendBefore,
+        windowSpendAfter: windowSpendBefore,
+        triggeredCap,
+        triggeredScopeKey: `tenantId=demo|agentId=${agentId}`,
+    };
+    // REAL Ed25519 signature over REAL canonical JSON.
+    const sequence = 0;
+    const previousHash = decision_log_1.GENESIS_PREVIOUS_HASH;
+    const entryHash = (0, decision_log_1.computeEntryHash)({ sequence, decision, previousHash });
+    void entryHash; // computed for the persisted receipt below
+    const signedEntry = await (0, decision_log_1.signDecision)({
+        sequence,
+        decision,
+        previousHash,
+        privateKey: privateSeed,
+        publicKey,
+    });
+    const signerFingerprint = (0, decision_log_1.computeSignerFingerprint)(publicKey);
+    console.log('');
+    console.log('  ' + (0, colors_1.banner)(index_1.AGENTGUARD_SPEND_VERSION));
+    console.log('');
+    console.log('  ' +
+        (0, colors_1.cyanBold)('AgentGuard Demo') +
+        (0, colors_1.dim)('  ·  ') +
+        (0, colors_1.dim)('[simulated transaction · real cryptographic receipt]'));
+    console.log('');
+    console.log((0, i18n_1.formatBlockedTrace)({
+        policyId: decision.policyId,
+        provider: decision.provider,
+        projectedCents: decision.projectedCents,
+        windowSpendBefore: decision.windowSpendBefore,
+        reasons: decision.reasons,
+        triggeredCap: { amountCents: triggeredCap.amountCents, window: triggeredCap.window },
+        agentId,
+    }));
+    console.log('');
+    // Persist the receipt so `agentguard verify --trace latest` works.
+    try {
+        fs.mkdirSync(DEMO_HOME, { recursive: true });
+        fs.writeFileSync(DEMO_PRIVATE_KEY, Buffer.from(privateSeed), { mode: 0o600 });
+        fs.writeFileSync(DEMO_PUBLIC_KEY, Buffer.from(publicKey));
+        fs.writeFileSync(DEMO_RECEIPT, JSON.stringify({
+            sequence,
+            entryHash,
+            previousHash,
+            signature: signedEntry.signature,
+            signerFingerprint,
+            publicKeyHex: Buffer.from(publicKey).toString('hex'),
+            decision,
+        }, null, 2));
+    }
+    catch {
+        // best-effort persist; demo still prints if disk write fails
+    }
+    const receiptId = entryHash.slice(0, 16);
+    console.log((0, colors_1.dim)('  ───────────────────────────────────────────'));
+    console.log(`  ${(0, colors_1.dim)('receipt   ')} ${receiptId}${(0, colors_1.dim)('...')}`);
+    console.log(`  ${(0, colors_1.dim)('signer    ')} ${signerFingerprint.slice(0, 16)}${(0, colors_1.dim)('...')}`);
+    console.log(`  ${(0, colors_1.dim)('sequence  ')} ${sequence}`);
+    console.log((0, colors_1.dim)('  ───────────────────────────────────────────'));
+    console.log('');
+    console.log('  ' +
+        (0, colors_1.green)('→') +
+        ' ' +
+        (0, colors_1.dim)('verify this receipt:') +
+        ' ' +
+        (0, colors_1.greenBold)('agentguard verify --trace latest'));
+    console.log('');
+    return 0;
+}
+//# sourceMappingURL=demo.js.map

package/dist/cli/demo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demo.js","sourceRoot":"","sources":["../../src/cli/demo.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBH,0BAmIC;AAxJD,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,mDAAqC;AAErC,kDAKyB;AAEzB,kCAA6C;AAC7C,oCAAoD;AACpD,qCAAmE;AAEnE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;AACjE,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;AAClE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAChE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;AAE1D,KAAK,UAAU,OAAO,CAAC,IAAc;IAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC;IAC7B,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;QAC5E,OAAO,CAAC,CAAC;IACX,CAAC;IAED,sFAAsF;IACtF,MAAM,OAAO,GAAG,sBAAsB,CAAC;IACvC,MAAM,QAAQ,GAAG,WAAW,CAAC;IAC7B,MAAM,cAAc,GAAG,iBAAiB,CAAC;IACzC,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,UAAU;IACvC,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,YAAY;IAC3C,MAAM,iBAAiB,GAAG,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAG,0BAA0B,CAAC;IAE7C,2CAA2C;IAC3C,8DAA8D;IAC9D,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;QAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAE1D,MAAM,YAAY,GAAa;QAC7B,WAAW,EAAE,aAAa;QAC1B,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,wBAAwB,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;KACxE,CAAC;IAEF,MAAM,QAAQ,GAAkB;QAC9B,UAAU,EAAE,6BAA6B;QACzC,SAAS;QACT,QAAQ,EAAE,2BAA2B;QACrC,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,SAAS;QAC1B,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,CAAC,gBAAgB,aAAa,aAAa,CAAC;QACrD,QAAQ;QACR,cAAc;QACd,aAAa,EAAE,cAAc;QAC7B,cAAc;QACd,iBAAiB;QACjB,gBAAgB,EAAE,iBAAiB;QACnC,YAAY;QACZ,iBAAiB,EAAE,yBAAyB,OAAO,EAAE;KACtD,CAAC;IAEF,mDAAmD;IACnD,MAAM,QAAQ,GAAG,CAAC,CAAC;IACnB,MAAM,YAAY,GAAG,oCAAqB,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAA,+BAAgB,EAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;IACzE,KAAK,SAAS,CAAC,CAAC,2CAA2C;IAC3D,MAAM,WAAW,GAAG,MAAM,IAAA,2BAAY,EAAC;QACrC,QAAQ;QACR,QAAQ;QACR,YAAY;QACZ,UAAU,EAAE,WAAW;QACvB,SAAS;KACV,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,IAAA,uCAAwB,EAAC,SAAS,CAAC,CAAC;IAE9D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,eAAM,EAAC,gCAAwB,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,IAAI;QACF,IAAA,iBAAQ,EAAC,iBAAiB,CAAC;QAC3B,IAAA,YAAG,EAAC,OAAO,CAAC;QACZ,IAAA,YAAG,EAAC,sDAAsD,CAAC,CAC9D,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,IAAA,yBAAkB,EAAC;QACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,YAAY,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE;QACpF,OAAO;KACR,CAAC,CACH,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,mEAAmE;IACnE,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,EAAE,CAAC,aAAa,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,EAAE,CAAC,aAAa,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1D,EAAE,CAAC,aAAa,CACd,YAAY,EACZ,IAAI,CAAC,SAAS,CACZ;YACE,QAAQ;YACR,SAAS;YACT,YAAY;YACZ,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,iBAAiB;YACjB,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACpD,QAAQ;SACT,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,+CAA+C,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,YAAG,EAAC,YAAY,CAAC,IAAI,SAAS,GAAG,IAAA,YAAG,EAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,YAAG,EAAC,YAAY,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAA,YAAG,EAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,YAAG,EAAC,YAAY,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,+CAA+C,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,IAAI;QACF,IAAA,cAAK,EAAC,GAAG,CAAC;QACV,GAAG;QACH,IAAA,YAAG,EAAC,sBAAsB,CAAC;QAC3B,GAAG;QACH,IAAA,kBAAS,EAAC,kCAAkC,CAAC,CAChD,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/doctor.d.ts

@@ -0,0 +1,5 @@
+/**
+ * `agentguard doctor` — check installation health and configuration.
+ */
+export declare function runDoctor(argv: string[]): Promise<number>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/cli/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":"AAAA;;GAEG;AA+FH,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAyF/D"}

package/dist/cli/doctor.js

@@ -0,0 +1,208 @@
+"use strict";
+/**
+ * `agentguard doctor` — check installation health and configuration.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDoctor = runDoctor;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const index_1 = require("../index");
+const colors_1 = require("./colors");
+function checkRequire(name) {
+    try {
+        const m = require(name);
+        const version = m.VERSION || m.version || '?';
+        return { ok: true, note: `v${version}` };
+    }
+    catch {
+        return { ok: false, note: 'not installed (optional)' };
+    }
+}
+function checkWritable(p) {
+    try {
+        fs.mkdirSync(p, { recursive: true });
+        const testFile = path.join(p, '.doctor-write-test');
+        fs.writeFileSync(testFile, 'ok');
+        fs.unlinkSync(testFile);
+        return { ok: true, note: p };
+    }
+    catch (e) {
+        return { ok: false, note: String(e) };
+    }
+}
+async function checkCrypto() {
+    try {
+        const ed = await Promise.resolve().then(() => __importStar(require('@noble/ed25519')));
+        const priv = new Uint8Array(32);
+        for (let i = 0; i < 32; i++)
+            priv[i] = i;
+        const pub = await ed.getPublicKeyAsync(priv);
+        if (pub.length === 32) {
+            return { ok: true, note: 'Ed25519 key derivation OK (32-byte public key)' };
+        }
+        return { ok: false, note: `unexpected public key size: ${pub.length}` };
+    }
+    catch (e) {
+        return { ok: false, note: `crypto backend failed: ${e}` };
+    }
+}
+async function checkDryRunBlock() {
+    try {
+        const { SpendGuard } = await Promise.resolve().then(() => __importStar(require('../spend-guard')));
+        const { InMemorySpendStore } = await Promise.resolve().then(() => __importStar(require('../store-memory')));
+        const { InMemoryDecisionLogStore } = await Promise.resolve().then(() => __importStar(require('../decision-log')));
+        const ed = await Promise.resolve().then(() => __importStar(require('@noble/ed25519')));
+        const privateKey = new Uint8Array(32);
+        for (let i = 0; i < 32; i++)
+            privateKey[i] = i;
+        const publicKey = await ed.getPublicKeyAsync(privateKey);
+        const policy = {
+            id: 'doctor-v1',
+            name: 'Doctor dry-run policy',
+            scope: { tenantId: 'doctor' },
+            caps: [
+                { amountCents: 0, window: 'per_day', action: 'block', reason: 'doctor check' },
+            ],
+            mode: 'enforce',
+            version: 1,
+            effectiveFrom: '2026-01-01T00:00:00.000Z',
+        };
+        const guard = new SpendGuard({
+            policy,
+            spendStore: new InMemorySpendStore(),
+            logStore: new InMemoryDecisionLogStore(),
+            signingKeys: { privateKey, publicKey },
+        });
+        const result = await guard.decide({
+            provider: 'openai',
+            model: 'gpt-4o',
+            inputTokens: 100,
+            outputTokens: 50,
+            scope: { tenantId: 'doctor', agentId: 'dry-run' },
+        });
+        if (result.decision?.action === 'block') {
+            return { ok: true, note: 'block path fires correctly' };
+        }
+        return {
+            ok: false,
+            note: `expected action=block, got action=${result.decision?.action}`,
+        };
+    }
+    catch (e) {
+        return { ok: false, note: `dry-run block failed: ${e}` };
+    }
+}
+async function runDoctor(argv) {
+    if (argv.includes('--help') || argv.includes('-h')) {
+        console.log('agentguard doctor');
+        return 0;
+    }
+    console.log('');
+    console.log('  ' + (0, colors_1.banner)(index_1.AGENTGUARD_SPEND_VERSION));
+    console.log('');
+    console.log('  ' + (0, colors_1.cyanBold)('agentguard doctor') + (0, colors_1.dim)('  ·  setup health check'));
+    console.log('');
+    const checks = [];
+    // 1. Core package self-check
+    checks.push({
+        name: '@agentguard-run/spend package',
+        ok: true,
+        note: `v${index_1.AGENTGUARD_SPEND_VERSION}`,
+    });
+    // 2. Crypto
+    const cryptoCheck = await checkCrypto();
+    checks.push({ name: 'Ed25519 crypto backend', ...cryptoCheck });
+    // 3. Optional providers
+    for (const provider of ['openai', '@anthropic-ai/sdk', '@aws-sdk/client-bedrock-runtime']) {
+        const r = checkRequire(provider);
+        checks.push({ name: `provider: ${provider}`, ...r, optional: true });
+    }
+    // 4. ~/.agentguard writable
+    checks.push({
+        name: '~/.agentguard/ writable',
+        ...checkWritable(path.join(os.homedir(), '.agentguard')),
+    });
+    // 5. Policy file in cwd
+    const policyPath = path.join(process.cwd(), 'agentguard.policy.yaml');
+    if (fs.existsSync(policyPath)) {
+        checks.push({ name: 'policy file (cwd)', ok: true, note: `found: ${path.basename(policyPath)}` });
+    }
+    else {
+        checks.push({
+            name: 'policy file (cwd)',
+            ok: false,
+            note: `not found in ${path.basename(process.cwd())}/ — run 'agentguard init'`,
+        });
+    }
+    // 6. Dry-run block
+    const dryRun = await checkDryRunBlock();
+    checks.push({ name: 'dry-run block simulation', ...dryRun });
+    const labelWidth = Math.max(...checks.map((c) => c.name.length)) + 2;
+    let passCount = 0;
+    let optionalFailCount = 0;
+    let failCount = 0;
+    for (const c of checks) {
+        let mark;
+        if (c.ok) {
+            mark = (0, colors_1.green)('✓');
+            passCount++;
+        }
+        else if (c.optional) {
+            mark = (0, colors_1.dim)('·');
+            optionalFailCount++;
+        }
+        else {
+            mark = (0, colors_1.redBold)('✗');
+            failCount++;
+        }
+        console.log(`  ${mark} ${c.name.padEnd(labelWidth)}${(0, colors_1.dim)(c.note)}`);
+    }
+    console.log('');
+    console.log((0, colors_1.dim)('  ───────────────────────────────────────────'));
+    if (failCount === 0) {
+        console.log(`  ${(0, colors_1.greenBold)('healthy')}  ` +
+            (0, colors_1.dim)(`(${passCount} passing, ${optionalFailCount} optional providers not installed)`));
+        console.log('');
+        return 0;
+    }
+    console.log(`  ${(0, colors_1.redBold)('issues found')}  ` + (0, colors_1.dim)(`(${failCount} failing, ${passCount} passing)`));
+    console.log('');
+    console.log((0, colors_1.dim)("  fix the ✗ items above, then re-run 'agentguard doctor'."));
+    console.log('');
+    return 1;
+}
+//# sourceMappingURL=doctor.js.map

package/dist/cli/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/cli/doctor.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+FH,8BAyFC;AAtLD,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,oCAAoD;AACpD,qCAA4E;AAE5E,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACpD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,wDAAa,gBAAgB,GAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,gDAAgD,EAAE,CAAC;QAC9E,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,CAAC,EAAE,EAAE,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,wDAAa,gBAAgB,GAAC,CAAC;QACtD,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,iBAAiB,GAAC,CAAC;QAC/D,MAAM,EAAE,wBAAwB,EAAE,GAAG,wDAAa,iBAAiB,GAAC,CAAC;QACrE,MAAM,EAAE,GAAG,wDAAa,gBAAgB,GAAC,CAAC;QAE1C,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAQ;YAClB,EAAE,EAAE,WAAW;YACf,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;YAC7B,IAAI,EAAE;gBACJ,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE;aAC/E;YACD,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,CAAC;YACV,aAAa,EAAE,0BAA0B;SAC1C,CAAC;QAEF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC;YAC3B,MAAM;YACN,UAAU,EAAE,IAAI,kBAAkB,EAAE;YACpC,QAAQ,EAAE,IAAI,wBAAwB,EAAE;YACxC,WAAW,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;SACvC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;YAChC,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,GAAG;YAChB,YAAY,EAAE,EAAE;YAChB,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;SAC3C,CAAC,CAAC;QAEV,IAAK,MAAc,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;YACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,qCAAsC,MAAc,CAAC,QAAQ,EAAE,MAAM,EAAE;SAC9E,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,CAAC,EAAE,EAAE,CAAC;IAC3D,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,SAAS,CAAC,IAAc;IAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,eAAM,EAAC,gCAAwB,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,iBAAQ,EAAC,mBAAmB,CAAC,GAAG,IAAA,YAAG,EAAC,yBAAyB,CAAC,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAGhB,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,6BAA6B;IAC7B,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,+BAA+B;QACrC,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,IAAI,gCAAwB,EAAE;KACrC,CAAC,CAAC;IAEH,YAAY;IACZ,MAAM,WAAW,GAAG,MAAM,WAAW,EAAE,CAAC;IACxC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;IAEhE,wBAAwB;IACxB,KAAK,MAAM,QAAQ,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,iCAAiC,CAAC,EAAE,CAAC;QAC1F,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,QAAQ,EAAE,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,4BAA4B;IAC5B,MAAM,CAAC,IAAI,CAAC;QACV,IAAI,EAAE,yBAAyB;QAC/B,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;KACzD,CAAC,CAAC;IAEH,wBAAwB;IACxB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;IACtE,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;IACpG,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mBAAmB;YACzB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,gBAAgB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,2BAA2B;SAC9E,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB;IACnB,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACxC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IAE7D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;IACrE,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACT,IAAI,GAAG,IAAA,cAAK,EAAC,GAAG,CAAC,CAAC;YAClB,SAAS,EAAE,CAAC;QACd,CAAC;aAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACtB,IAAI,GAAG,IAAA,YAAG,EAAC,GAAG,CAAC,CAAC;YAChB,iBAAiB,EAAE,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,IAAA,gBAAO,EAAC,GAAG,CAAC,CAAC;YACpB,SAAS,EAAE,CAAC;QACd,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAA,YAAG,EAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,+CAA+C,CAAC,CAAC,CAAC;IAClE,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CACT,KAAK,IAAA,kBAAS,EAAC,SAAS,CAAC,IAAI;YAC3B,IAAA,YAAG,EAAC,IAAI,SAAS,aAAa,iBAAiB,oCAAoC,CAAC,CACvF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,gBAAO,EAAC,cAAc,CAAC,IAAI,GAAG,IAAA,YAAG,EAAC,IAAI,SAAS,aAAa,SAAS,WAAW,CAAC,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAA,YAAG,EAAC,2DAA2D,CAAC,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/explain.d.ts

@@ -0,0 +1,5 @@
+/**
+ * `agentguard explain` — decode a signed receipt with cap math + signature breakdown.
+ */
+export declare function runExplain(argv: string[]): Promise<number>;
+//# sourceMappingURL=explain.d.ts.map

package/dist/cli/explain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain.d.ts","sourceRoot":"","sources":["../../src/cli/explain.ts"],"names":[],"mappings":"AAAA;;GAEG;AAoCH,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA6GhE"}