@agentguard-run/spend 0.13.0 → 0.13.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (41) hide show
  1. package/CHANGELOG.md +11 -0
  2. package/dist/decision-log.d.ts.map +1 -1
  3. package/dist/decision-log.js +4 -1
  4. package/dist/decision-log.js.map +1 -1
  5. package/dist/frameworks/claude-code.d.ts +32 -0
  6. package/dist/frameworks/claude-code.d.ts.map +1 -0
  7. package/dist/frameworks/claude-code.js +75 -0
  8. package/dist/frameworks/claude-code.js.map +1 -0
  9. package/dist/frameworks/common.d.ts +51 -0
  10. package/dist/frameworks/common.d.ts.map +1 -0
  11. package/dist/frameworks/common.js +168 -0
  12. package/dist/frameworks/common.js.map +1 -0
  13. package/dist/frameworks/hermes.d.ts +34 -0
  14. package/dist/frameworks/hermes.d.ts.map +1 -0
  15. package/dist/frameworks/hermes.js +50 -0
  16. package/dist/frameworks/hermes.js.map +1 -0
  17. package/dist/frameworks/index.d.ts +6 -0
  18. package/dist/frameworks/index.d.ts.map +1 -0
  19. package/dist/frameworks/index.js +22 -0
  20. package/dist/frameworks/index.js.map +1 -0
  21. package/dist/frameworks/openrouter.d.ts +19 -0
  22. package/dist/frameworks/openrouter.d.ts.map +1 -0
  23. package/dist/frameworks/openrouter.js +85 -0
  24. package/dist/frameworks/openrouter.js.map +1 -0
  25. package/dist/frameworks/vercel-ai.d.ts +27 -0
  26. package/dist/frameworks/vercel-ai.d.ts.map +1 -0
  27. package/dist/frameworks/vercel-ai.js +96 -0
  28. package/dist/frameworks/vercel-ai.js.map +1 -0
  29. package/dist/index.d.ts +2 -1
  30. package/dist/index.d.ts.map +1 -1
  31. package/dist/index.js +2 -1
  32. package/dist/index.js.map +1 -1
  33. package/dist/telemetry.js +1 -1
  34. package/package.json +33 -3
  35. package/src/frameworks/README.md +44 -0
  36. package/src/frameworks/claude-code.ts +108 -0
  37. package/src/frameworks/common.ts +208 -0
  38. package/src/frameworks/hermes.ts +83 -0
  39. package/src/frameworks/index.ts +5 -0
  40. package/src/frameworks/openrouter.ts +90 -0
  41. package/src/frameworks/vercel-ai.ts +118 -0
package/CHANGELOG.md CHANGED
@@ -1,3 +1,14 @@
1
+ ## 0.13.2
2
+
3
+ - Added thin framework adapters for Vercel AI SDK middleware, Claude Code hooks, Hermes hooks, and OpenRouter OpenAI-compatible clients.
4
+ - Kept all adapter receipts metadata-only: prompts, completions, provider keys, signing keys, and policy details stay in the customer runtime.
5
+ - Added TS and Python parity tests for pre-dispatch enforcement, post-dispatch signed receipts, and data-plane redaction.
6
+
7
+ ## 0.13.1
8
+
9
+ - Hardened `builderCode` receipt verification so legacy-hash fallback is unavailable when attribution metadata is present.
10
+ - Kept `builderCode` as partner attribution metadata only.
11
+
1
12
  ## 0.13.0
2
13
 
3
14
  - Added optional `builderCode` partner attribution metadata to SpendGuard config, call contexts, signed decisions, and DAG-normalized receipt nodes.
@@ -1 +1 @@
1
- {"version":3,"file":"decision-log.d.ts","sourceRoot":"","sources":["../src/decision-log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,OAAO,KAAK,EACV,sBAAsB,EACtB,aAAa,EACb,gBAAgB,EACjB,MAAM,SAAS,CAAC;AAKjB,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,QAAiB,CAAC;AAEpD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAcpD;AAED,sDAAsD;AACtD,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAST;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAGtE;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,UAAU,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAoBlC;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,KAAK,EAAE,sBAAsB,EAC7B,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,OAAO,CAAC,CAqBlB;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,sBAAsB,EAAE,EACjC,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA2CzE;AAED;;;;GAIG;AACH,qBAAa,wBAAyB,YAAW,gBAAgB;IAC/D,OAAO,CAAC,OAAO,CAAgC;IAEzC,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpD,SAAS,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAQ7E,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAS9G,mEAAmE;IACnE,QAAQ,IAAI,sBAAsB,EAAE;CAGrC"}
1
+ {"version":3,"file":"decision-log.d.ts","sourceRoot":"","sources":["../src/decision-log.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,OAAO,KAAK,EACV,sBAAsB,EACtB,aAAa,EACb,gBAAgB,EACjB,MAAM,SAAS,CAAC;AAKjB,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,QAAiB,CAAC;AAEpD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAcpD;AAED,sDAAsD;AACtD,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAST;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAGtE;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,aAAa,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,UAAU,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAoBlC;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,KAAK,EAAE,sBAAsB,EAC7B,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,OAAO,CAAC,CAuBlB;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,sBAAsB,EAAE,EACjC,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA2CzE;AAED;;;;GAIG;AACH,qBAAa,wBAAyB,YAAW,gBAAgB;IAC/D,OAAO,CAAC,OAAO,CAAgC;IAEzC,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpD,SAAS,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAQ7E,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAS9G,mEAAmE;IACnE,QAAQ,IAAI,sBAAsB,EAAE;CAGrC"}
@@ -154,13 +154,16 @@ async function signDecision(args) {
154
154
  async function verifyEntry(entry, publicKey) {
155
155
  if (computeSignerFingerprint(publicKey) !== entry.signerFingerprint)
156
156
  return false;
157
+ const builderCode = sanitizeBuilderCode(entry.builderCode);
157
158
  const expectedHash = computeEntryHash({
158
159
  sequence: entry.sequence,
159
160
  decision: entry.decision,
160
161
  previousHash: entry.previousHash,
161
162
  signerFingerprint: entry.signerFingerprint,
162
- builderCode: sanitizeBuilderCode(entry.builderCode),
163
+ builderCode,
163
164
  });
165
+ if (builderCode && expectedHash !== entry.entryHash)
166
+ return false;
164
167
  const legacyHash = computeEntryHash({
165
168
  sequence: entry.sequence,
166
169
  decision: entry.decision,
@@ -1 +1 @@
1
- {"version":3,"file":"decision-log.js","sourceRoot":"","sources":["../src/decision-log.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBH,sCAcC;AAGD,8BAEC;AAMD,4CAeC;AAMD,4DAGC;AAQD,oCA2BC;AAQD,kCAwBC;AAWD,kCA8CC;AA/LD,mCAAoC;AACpC,mDAAqC;AAOrC,yEAAyE;AACzE,2EAA2E;AAE3E,yEAAyE;AAC5D,QAAA,qBAAqB,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEpD;;;GAGG;AACH,SAAgB,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACxD,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACrC,CAAC;AAED,sDAAsD;AACtD,SAAgB,SAAS,CAAC,KAAa;IACrC,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,IAMhC;IACC,MAAM,OAAO,GAA4B;QACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC;IACF,IAAI,IAAI,CAAC,iBAAiB;QAAE,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;IAC/E,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAC7D,OAAO,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,SAAgB,wBAAwB,CAAC,SAAqB;IAC5D,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,YAAY,CAAC,IAOlC;IACC,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,gBAAgB,CAAC;QACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,iBAAiB;QACjB,WAAW,EAAE,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC;KACnD,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxD,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,SAAS;QACT,SAAS;QACT,iBAAiB;QACjB,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1G,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,WAAW,CAC/B,KAA6B,EAC7B,SAAqB;IAErB,IAAI,wBAAwB,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAClF,MAAM,YAAY,GAAG,gBAAgB,CAAC;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,WAAW,EAAE,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC;KACpD,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,gBAAgB,CAAC;QAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,IAAI,YAAY,KAAK,KAAK,CAAC,SAAS,IAAI,UAAU,KAAK,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACrF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,WAAW,CAC/B,OAAiC,EACjC,SAAqB;IAErB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC;YACpC,MAAM,EAAE,uCAAuC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,SAAS,EAAE;SACnF,CAAC;IACJ,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,yBAAyB,GAAG,CAAC,EAAE,CAAC;QAC3E,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACnC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,0BAA0B,WAAW,SAAS,KAAK,CAAC,QAAQ,EAAE;aACvE,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAChB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,6BAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,SAAS,CAAC;QAC9D,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YACxC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,qCAAqC,KAAK,CAAC,QAAQ,cAAc,YAAY,SAAS,KAAK,CAAC,YAAY,EAAE;aACnH,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,yCAAyC,KAAK,CAAC,QAAQ,EAAE;aAClE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAa,wBAAwB;IAC3B,OAAO,GAA6B,EAAE,CAAC;IAE/C,KAAK,CAAC,MAAM,CAAC,KAA6B;QACxC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,iBAA0B;QACxC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,KAAK,IAAI,CAAC,CAAC,iBAAiB,IAAI,KAAK,CAAC,iBAAiB,KAAK,iBAAiB,CAAC;gBAAE,OAAO,KAAK,CAAC;QACnG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,YAAoB,EAAE,KAAa,EAAE,iBAA0B;QACxE,MAAM,QAAQ,GAAG,iBAAiB;YAChC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,KAAK,iBAAiB,CAAC;YACvE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QACjB,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,mEAAmE;IACnE,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;CACF;AA5BD,4DA4BC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChF,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC"}
1
+ {"version":3,"file":"decision-log.js","sourceRoot":"","sources":["../src/decision-log.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBH,sCAcC;AAGD,8BAEC;AAMD,4CAeC;AAMD,4DAGC;AAQD,oCA2BC;AAQD,kCA0BC;AAWD,kCA8CC;AAjMD,mCAAoC;AACpC,mDAAqC;AAOrC,yEAAyE;AACzE,2EAA2E;AAE3E,yEAAyE;AAC5D,QAAA,qBAAqB,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEpD;;;GAGG;AACH,SAAgB,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACxD,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACrC,CAAC;AAED,sDAAsD;AACtD,SAAgB,SAAS,CAAC,KAAa;IACrC,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,IAMhC;IACC,MAAM,OAAO,GAA4B;QACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC;IACF,IAAI,IAAI,CAAC,iBAAiB;QAAE,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;IAC/E,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAC7D,OAAO,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,SAAgB,wBAAwB,CAAC,SAAqB;IAC5D,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,YAAY,CAAC,IAOlC;IACC,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,gBAAgB,CAAC;QACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,iBAAiB;QACjB,WAAW,EAAE,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC;KACnD,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxD,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,SAAS;QACT,SAAS;QACT,iBAAiB;QACjB,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1G,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,WAAW,CAC/B,KAA6B,EAC7B,SAAqB;IAErB,IAAI,wBAAwB,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAClF,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,gBAAgB,CAAC;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,WAAW;KACZ,CAAC,CAAC;IACH,IAAI,WAAW,IAAI,YAAY,KAAK,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,UAAU,GAAG,gBAAgB,CAAC;QAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,IAAI,YAAY,KAAK,KAAK,CAAC,SAAS,IAAI,UAAU,KAAK,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACrF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,WAAW,CAC/B,OAAiC,EACjC,SAAqB;IAErB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC;YACpC,MAAM,EAAE,uCAAuC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,SAAS,EAAE;SACnF,CAAC;IACJ,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,yBAAyB,GAAG,CAAC,EAAE,CAAC;QAC3E,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACnC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,0BAA0B,WAAW,SAAS,KAAK,CAAC,QAAQ,EAAE;aACvE,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAChB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,6BAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,SAAS,CAAC;QAC9D,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YACxC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,qCAAqC,KAAK,CAAC,QAAQ,cAAc,YAAY,SAAS,KAAK,CAAC,YAAY,EAAE;aACnH,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,yCAAyC,KAAK,CAAC,QAAQ,EAAE;aAClE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAa,wBAAwB;IAC3B,OAAO,GAA6B,EAAE,CAAC;IAE/C,KAAK,CAAC,MAAM,CAAC,KAA6B;QACxC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,iBAA0B;QACxC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,KAAK,IAAI,CAAC,CAAC,iBAAiB,IAAI,KAAK,CAAC,iBAAiB,KAAK,iBAAiB,CAAC;gBAAE,OAAO,KAAK,CAAC;QACnG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,YAAoB,EAAE,KAAa,EAAE,iBAA0B;QACxE,MAAM,QAAQ,GAAG,iBAAiB;YAChC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,KAAK,iBAAiB,CAAC;YACvE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QACjB,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,mEAAmE;IACnE,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;CACF;AA5BD,4DA4BC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChF,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC"}
@@ -0,0 +1,32 @@
1
+ import type { SpendGuard } from '../spend-guard';
2
+ import { type FrameworkAdapterOptions } from './common';
3
+ export interface ClaudeCodeHookInput {
4
+ session_id?: string;
5
+ transcript_path?: string;
6
+ cwd?: string;
7
+ hook_event_name?: string;
8
+ tool_name?: string;
9
+ tool_input?: Record<string, unknown>;
10
+ tool_response?: Record<string, unknown>;
11
+ }
12
+ export interface ClaudeCodeHookOutput {
13
+ continue?: boolean;
14
+ suppressOutput?: boolean;
15
+ systemMessage?: string;
16
+ hookSpecificOutput?: {
17
+ hookEventName: 'PreToolUse' | 'PostToolUse';
18
+ permissionDecision?: 'allow' | 'deny' | 'ask';
19
+ permissionDecisionReason?: string;
20
+ additionalContext?: string;
21
+ };
22
+ }
23
+ export interface ClaudeCodeHooks {
24
+ guard: SpendGuard;
25
+ handlePreToolUse(input: ClaudeCodeHookInput): Promise<ClaudeCodeHookOutput>;
26
+ handlePostToolUse(input: ClaudeCodeHookInput): Promise<ClaudeCodeHookOutput>;
27
+ handleHookInput(input: ClaudeCodeHookInput): Promise<ClaudeCodeHookOutput>;
28
+ settingsSnippet(command: string): Record<string, unknown>;
29
+ }
30
+ export declare function createClaudeCodeHooks(opts: FrameworkAdapterOptions): ClaudeCodeHooks;
31
+ export declare const createAgentGuardClaudeCodeHooks: typeof createClaudeCodeHooks;
32
+ //# sourceMappingURL=claude-code.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../src/frameworks/claude-code.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAgG,KAAK,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAEtJ,MAAM,WAAW,mBAAmB;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE;QACnB,aAAa,EAAE,YAAY,GAAG,aAAa,CAAC;QAC5C,kBAAkB,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;QAC9C,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,UAAU,CAAC;IAClB,gBAAgB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC5E,iBAAiB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC7E,eAAe,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC3E,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3D;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,uBAAuB,GAAG,eAAe,CAiBpF;AAED,eAAO,MAAM,+BAA+B,8BAAwB,CAAC"}
@@ -0,0 +1,75 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.createAgentGuardClaudeCodeHooks = void 0;
4
+ exports.createClaudeCodeHooks = createClaudeCodeHooks;
5
+ const common_1 = require("./common");
6
+ function createClaudeCodeHooks(opts) {
7
+ const guard = (0, common_1.createFrameworkGuard)({ ...opts, framework: 'claude-code' });
8
+ return {
9
+ guard,
10
+ handlePreToolUse: (input) => handlePreToolUse(guard, opts, input),
11
+ handlePostToolUse: (input) => handlePostToolUse(guard, input),
12
+ handleHookInput: async (input) => {
13
+ if (input.hook_event_name === 'PostToolUse')
14
+ return handlePostToolUse(guard, input);
15
+ return handlePreToolUse(guard, opts, input);
16
+ },
17
+ settingsSnippet: (command) => ({
18
+ hooks: {
19
+ PreToolUse: [{ matcher: '*', hooks: [{ type: 'command', command }] }],
20
+ PostToolUse: [{ matcher: '*', hooks: [{ type: 'command', command }] }],
21
+ },
22
+ }),
23
+ };
24
+ }
25
+ exports.createAgentGuardClaudeCodeHooks = createClaudeCodeHooks;
26
+ async function handlePreToolUse(guard, opts, input) {
27
+ const toolName = (0, common_1.stringValue)(input.tool_name) ?? 'unknown_tool';
28
+ const cleanArgs = (0, common_1.redactDataPlane)(input.tool_input ?? {});
29
+ try {
30
+ const gate = await guard.guardToolCall({
31
+ toolName,
32
+ toolArgs: (0, common_1.safeRequestShape)(cleanArgs),
33
+ workflowId: input.session_id,
34
+ scope: opts.scope,
35
+ });
36
+ if (!gate.approved) {
37
+ return deny('AgentGuard blocked tool call: ' + gate.decision.reasons.join('; '));
38
+ }
39
+ if (gate.matchedPattern) {
40
+ return {
41
+ hookSpecificOutput: {
42
+ hookEventName: 'PreToolUse',
43
+ permissionDecision: 'ask',
44
+ permissionDecisionReason: 'AgentGuard matched ' + gate.matchedPattern + '. Confirm before tool execution.',
45
+ },
46
+ };
47
+ }
48
+ return { continue: true, suppressOutput: true };
49
+ }
50
+ catch (error) {
51
+ return deny(error instanceof Error ? error.message : 'AgentGuard hook failed closed');
52
+ }
53
+ }
54
+ async function handlePostToolUse(guard, input) {
55
+ await (0, common_1.recordFrameworkReceipt)(guard, 'claude-code', {
56
+ event: 'PostToolUse',
57
+ sessionId: input.session_id ?? null,
58
+ toolName: input.tool_name ?? 'unknown_tool',
59
+ cwd: input.cwd ?? null,
60
+ toolInput: (0, common_1.redactDataPlane)(input.tool_input ?? {}),
61
+ toolResponse: (0, common_1.redactDataPlane)(input.tool_response ?? {}),
62
+ });
63
+ return { continue: true, suppressOutput: true };
64
+ }
65
+ function deny(reason) {
66
+ return {
67
+ continue: true,
68
+ hookSpecificOutput: {
69
+ hookEventName: 'PreToolUse',
70
+ permissionDecision: 'deny',
71
+ permissionDecisionReason: reason,
72
+ },
73
+ };
74
+ }
75
+ //# sourceMappingURL=claude-code.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"claude-code.js","sourceRoot":"","sources":["../../src/frameworks/claude-code.ts"],"names":[],"mappings":";;;AAiCA,sDAiBC;AAjDD,qCAAsJ;AAgCtJ,SAAgB,qBAAqB,CAAC,IAA6B;IACjE,MAAM,KAAK,GAAG,IAAA,6BAAoB,EAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;IAC1E,OAAO;QACL,KAAK;QACL,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;QACjE,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC;QAC7D,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YAC/B,IAAI,KAAK,CAAC,eAAe,KAAK,aAAa;gBAAE,OAAO,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACpF,OAAO,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC7B,KAAK,EAAE;gBACL,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;gBACrE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;aACvE;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAEY,QAAA,+BAA+B,GAAG,qBAAqB,CAAC;AAErE,KAAK,UAAU,gBAAgB,CAC7B,KAAiB,EACjB,IAA6B,EAC7B,KAA0B;IAE1B,MAAM,QAAQ,GAAG,IAAA,oBAAW,EAAC,KAAK,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC;IAChE,MAAM,SAAS,GAAG,IAAA,wBAAe,EAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAA4B,CAAC;IACrF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC;YACrC,QAAQ;YACR,QAAQ,EAAE,IAAA,yBAAgB,EAAC,SAAS,CAAC;YACrC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,gCAAgC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO;gBACL,kBAAkB,EAAE;oBAClB,aAAa,EAAE,YAAY;oBAC3B,kBAAkB,EAAE,KAAK;oBACzB,wBAAwB,EAAE,qBAAqB,GAAG,IAAI,CAAC,cAAc,GAAG,kCAAkC;iBAC3G;aACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,KAAiB,EAAE,KAA0B;IAC5E,MAAM,IAAA,+BAAsB,EAAC,KAAK,EAAE,aAAa,EAAE;QACjD,KAAK,EAAE,aAAa;QACpB,SAAS,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;QACnC,QAAQ,EAAE,KAAK,CAAC,SAAS,IAAI,cAAc;QAC3C,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI;QACtB,SAAS,EAAE,IAAA,wBAAe,EAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC;QAClD,YAAY,EAAE,IAAA,wBAAe,EAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;KACzD,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,IAAI,CAAC,MAAc;IAC1B,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,kBAAkB,EAAE;YAClB,aAAa,EAAE,YAAY;YAC3B,kBAAkB,EAAE,MAAM;YAC1B,wBAAwB,EAAE,MAAM;SACjC;KACF,CAAC;AACJ,CAAC"}
@@ -0,0 +1,51 @@
1
+ import type { CapabilityTier, CallContext, Provider, SignedDecisionLogEntry, SpendDecision, SpendPolicy, SpendScope } from '../types';
2
+ import { SpendGuard, type SpendGuardConfig } from '../spend-guard';
3
+ export interface FrameworkAdapterOptions {
4
+ policy: SpendPolicy;
5
+ scope: SpendScope;
6
+ capabilityClaim?: CapabilityTier;
7
+ config?: Omit<SpendGuardConfig, 'policy'>;
8
+ licenseKey?: string;
9
+ defaultModel?: string;
10
+ defaultOutputTokens?: number;
11
+ framework?: string;
12
+ }
13
+ export interface FrameworkPreflight {
14
+ guard: SpendGuard;
15
+ call: CallContext;
16
+ decision: SpendDecision;
17
+ signed: SignedDecisionLogEntry | null;
18
+ }
19
+ export interface FrameworkCallInput {
20
+ framework: string;
21
+ model?: string;
22
+ provider?: Provider;
23
+ params?: unknown;
24
+ requestShape?: Record<string, unknown>;
25
+ metadata?: Record<string, unknown>;
26
+ workflowId?: string;
27
+ subagentId?: string;
28
+ toolName?: string;
29
+ outputTokens?: number;
30
+ }
31
+ export declare function createFrameworkGuard(opts: FrameworkAdapterOptions): SpendGuard;
32
+ export declare function safeRequestShape(value: unknown): Record<string, unknown>;
33
+ export declare function redactDataPlane(value: unknown): unknown;
34
+ export declare function estimateInputTokens(guard: SpendGuard, value: unknown): number;
35
+ export declare function outputTokensFromParams(params: unknown, fallback?: number): number;
36
+ export declare function modelFromUnknown(model: unknown, fallback?: string): string;
37
+ export declare function providerFromModel(model: string, provider?: Provider): Provider;
38
+ export declare function buildFrameworkCall(guard: SpendGuard, opts: FrameworkAdapterOptions, input: FrameworkCallInput): CallContext;
39
+ export declare function preflightFrameworkCall(guard: SpendGuard, opts: FrameworkAdapterOptions, input: FrameworkCallInput): Promise<FrameworkPreflight>;
40
+ export declare function settleFrameworkCall(preflight: FrameworkPreflight, result: unknown, partial?: boolean): Promise<void>;
41
+ export declare function recordFrameworkReceipt(guard: SpendGuard, framework: string, receipt: Record<string, unknown>): Promise<{
42
+ decision: SpendDecision;
43
+ signed: SignedDecisionLogEntry | null;
44
+ }>;
45
+ export declare function usageFromResult(result: unknown): {
46
+ inputTokens: number;
47
+ outputTokens: number;
48
+ } | null;
49
+ export declare function objectRecord(value: unknown): Record<string, unknown> | null;
50
+ export declare function stringValue(value: unknown): string | undefined;
51
+ //# sourceMappingURL=common.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/frameworks/common.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,sBAAsB,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAGtI,OAAO,EAA0B,UAAU,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAE3F,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,UAAU,CAAC;IAClB,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,MAAM,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,UAAU,CAAC;IAClB,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,uBAAuB,GAAG,UAAU,CAM9E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMxE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAevD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAG7E;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,SAAM,GAAG,MAAM,CAS9E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,SAAY,GAAG,MAAM,CAQ7E;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAE9E;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,uBAAuB,EAC7B,KAAK,EAAE,kBAAkB,GACxB,WAAW,CAoBb;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,uBAAuB,EAC7B,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAO7B;AAED,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CASxH;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,UAAU,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC;IAAE,QAAQ,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,sBAAsB,GAAG,IAAI,CAAA;CAAE,CAAC,CAO7E;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAcrG;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAI3E;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE9D"}
@@ -0,0 +1,168 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.createFrameworkGuard = createFrameworkGuard;
4
+ exports.safeRequestShape = safeRequestShape;
5
+ exports.redactDataPlane = redactDataPlane;
6
+ exports.estimateInputTokens = estimateInputTokens;
7
+ exports.outputTokensFromParams = outputTokensFromParams;
8
+ exports.modelFromUnknown = modelFromUnknown;
9
+ exports.providerFromModel = providerFromModel;
10
+ exports.buildFrameworkCall = buildFrameworkCall;
11
+ exports.preflightFrameworkCall = preflightFrameworkCall;
12
+ exports.settleFrameworkCall = settleFrameworkCall;
13
+ exports.recordFrameworkReceipt = recordFrameworkReceipt;
14
+ exports.usageFromResult = usageFromResult;
15
+ exports.objectRecord = objectRecord;
16
+ exports.stringValue = stringValue;
17
+ const cost_table_1 = require("../cost-table");
18
+ const governance_1 = require("../governance");
19
+ const spend_guard_1 = require("../spend-guard");
20
+ const DATA_PLANE_KEYS = /^(prompt|completion|content|messages|input|output|text|raw)$/i;
21
+ function createFrameworkGuard(opts) {
22
+ return new spend_guard_1.SpendGuard({
23
+ policy: opts.policy,
24
+ ...(opts.config ?? {}),
25
+ licenseKey: opts.licenseKey ?? opts.config?.licenseKey,
26
+ });
27
+ }
28
+ function safeRequestShape(value) {
29
+ const redacted = redactDataPlane(value);
30
+ if (redacted && typeof redacted === 'object' && !Array.isArray(redacted)) {
31
+ return (0, governance_1.sanitizeMetadata)(redacted);
32
+ }
33
+ return { valueType: typeof value };
34
+ }
35
+ function redactDataPlane(value) {
36
+ if (value == null)
37
+ return value;
38
+ if (Array.isArray(value))
39
+ return value.map((child) => redactDataPlane(child));
40
+ if (typeof value !== 'object')
41
+ return value;
42
+ const out = {};
43
+ for (const [key, child] of Object.entries(value)) {
44
+ if (DATA_PLANE_KEYS.test(key)) {
45
+ out[key + '_present'] = child != null;
46
+ out[key + '_type'] = Array.isArray(child) ? 'array' : typeof child;
47
+ if (Array.isArray(child))
48
+ out[key + '_items'] = child.length;
49
+ continue;
50
+ }
51
+ out[key] = redactDataPlane(child);
52
+ }
53
+ return out;
54
+ }
55
+ function estimateInputTokens(guard, value) {
56
+ const serialized = typeof value === 'string' ? value : stableJson(value ?? {});
57
+ return Math.max(1, guard.estimateTokens(serialized));
58
+ }
59
+ function outputTokensFromParams(params, fallback = 512) {
60
+ const record = objectRecord(params);
61
+ const value = record?.max_tokens ??
62
+ record?.maxTokens ??
63
+ record?.maxOutputTokens ??
64
+ record?.max_completion_tokens ??
65
+ record?.maxCompletionTokens;
66
+ return Number.isSafeInteger(value) && value >= 0 ? value : fallback;
67
+ }
68
+ function modelFromUnknown(model, fallback = 'unknown') {
69
+ if (typeof model === 'string' && model.trim())
70
+ return model.trim();
71
+ const record = objectRecord(model);
72
+ for (const key of ['modelId', 'model_id', 'id', 'name']) {
73
+ const value = record?.[key];
74
+ if (typeof value === 'string' && value.trim())
75
+ return value.trim();
76
+ }
77
+ return fallback;
78
+ }
79
+ function providerFromModel(model, provider) {
80
+ return provider ?? (0, cost_table_1.inferProvider)(model);
81
+ }
82
+ function buildFrameworkCall(guard, opts, input) {
83
+ const model = modelFromUnknown(input.model, opts.defaultModel ?? 'unknown');
84
+ const metadata = (0, governance_1.sanitizeMetadata)(redactDataPlane(input.metadata ?? {}));
85
+ const requestShape = (0, governance_1.sanitizeMetadata)({
86
+ framework: input.framework,
87
+ ...(input.requestShape ?? safeRequestShape(input.params)),
88
+ });
89
+ return {
90
+ provider: providerFromModel(model, input.provider),
91
+ model,
92
+ inputTokens: estimateInputTokens(guard, input.params),
93
+ outputTokens: input.outputTokens ?? outputTokensFromParams(input.params, opts.defaultOutputTokens ?? 512),
94
+ scope: opts.scope,
95
+ capabilityClaim: opts.capabilityClaim,
96
+ workflowId: input.workflowId ?? stringValue(metadata.workflowId) ?? stringValue(metadata.workflow_id),
97
+ subagentId: input.subagentId ?? stringValue(metadata.subagentId) ?? stringValue(metadata.subagent_id),
98
+ label: stringValue(metadata.label) ?? input.framework,
99
+ toolName: input.toolName,
100
+ requestShape,
101
+ };
102
+ }
103
+ async function preflightFrameworkCall(guard, opts, input) {
104
+ const call = buildFrameworkCall(guard, opts, input);
105
+ const { decision, signed } = await guard.decide(call);
106
+ if (decision.action === 'block') {
107
+ throw new spend_guard_1.AgentGuardBlockedError(decision, opts.scope, opts.config?.locale);
108
+ }
109
+ return { guard, call, decision, signed };
110
+ }
111
+ async function settleFrameworkCall(preflight, result, partial = false) {
112
+ const usage = usageFromResult(result);
113
+ if (!usage)
114
+ return;
115
+ await preflight.guard.settleStreamUsage(preflight.decision.decisionId, usage.inputTokens, usage.outputTokens, { partial });
116
+ }
117
+ async function recordFrameworkReceipt(guard, framework, receipt) {
118
+ return guard.recordOutcomeReceipt({
119
+ type: 'framework_adapter',
120
+ framework,
121
+ totalCostCents: safeInteger(receipt.totalCostCents),
122
+ ...(0, governance_1.sanitizeMetadata)(redactDataPlane(receipt)),
123
+ });
124
+ }
125
+ function usageFromResult(result) {
126
+ const candidates = [
127
+ objectRecord(result)?.usage,
128
+ objectRecord(objectRecord(result)?.response)?.usage,
129
+ objectRecord(objectRecord(result)?.rawResponse)?.usage,
130
+ ];
131
+ for (const candidate of candidates) {
132
+ const usage = objectRecord(candidate);
133
+ if (!usage)
134
+ continue;
135
+ const input = firstInteger(usage.inputTokens, usage.promptTokens, usage.prompt_tokens, usage.input_tokens);
136
+ const output = firstInteger(usage.outputTokens, usage.completionTokens, usage.completion_tokens, usage.output_tokens);
137
+ if (input !== null && output !== null)
138
+ return { inputTokens: input, outputTokens: output };
139
+ }
140
+ return null;
141
+ }
142
+ function objectRecord(value) {
143
+ return value && typeof value === 'object' && !Array.isArray(value)
144
+ ? value
145
+ : null;
146
+ }
147
+ function stringValue(value) {
148
+ return typeof value === 'string' && value.trim() ? value.trim() : undefined;
149
+ }
150
+ function firstInteger(...values) {
151
+ for (const value of values) {
152
+ if (Number.isSafeInteger(value) && value >= 0)
153
+ return value;
154
+ }
155
+ return null;
156
+ }
157
+ function safeInteger(value) {
158
+ return Number.isSafeInteger(value) && value >= 0 ? value : 0;
159
+ }
160
+ function stableJson(value) {
161
+ try {
162
+ return JSON.stringify(value);
163
+ }
164
+ catch {
165
+ return String(value);
166
+ }
167
+ }
168
+ //# sourceMappingURL=common.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/frameworks/common.ts"],"names":[],"mappings":";;AAsCA,oDAMC;AAED,4CAMC;AAED,0CAeC;AAED,kDAGC;AAED,wDASC;AAED,4CAQC;AAED,8CAEC;AAED,gDAwBC;AAED,wDAWC;AAED,kDASC;AAED,wDAWC;AAED,0CAcC;AAED,oCAIC;AAED,kCAEC;AA3LD,8CAA8C;AAC9C,8CAAiD;AACjD,gDAA2F;AAiC3F,MAAM,eAAe,GAAG,+DAA+D,CAAC;AAExF,SAAgB,oBAAoB,CAAC,IAA6B;IAChE,OAAO,IAAI,wBAAU,CAAC;QACpB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QACtB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,EAAE,UAAU;KACvD,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,IAAA,6BAAgB,EAAC,QAAmC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,KAAK,EAAE,CAAC;AACrC,CAAC;AAED,SAAgB,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC;YACtC,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC;YACnE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,mBAAmB,CAAC,KAAiB,EAAE,KAAc;IACnE,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAgB,sBAAsB,CAAC,MAAe,EAAE,QAAQ,GAAG,GAAG;IACpE,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,KAAK,GACT,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,qBAAqB;QAC7B,MAAM,EAAE,mBAAmB,CAAC;IAC9B,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC5F,CAAC;AAED,SAAgB,gBAAgB,CAAC,KAAc,EAAE,QAAQ,GAAG,SAAS;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAa,EAAE,QAAmB;IAClE,OAAO,QAAQ,IAAI,IAAA,0BAAa,EAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,SAAgB,kBAAkB,CAChC,KAAiB,EACjB,IAA6B,EAC7B,KAAyB;IAEzB,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,IAAI,SAAS,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAA,6BAAgB,EAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC,CAAC;IACpG,MAAM,YAAY,GAAG,IAAA,6BAAgB,EAAC;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;KAC1D,CAAC,CAAC;IACH,OAAO;QACL,QAAQ,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC;QAClD,KAAK;QACL,WAAW,EAAE,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;QACrD,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,sBAAsB,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,mBAAmB,IAAI,GAAG,CAAC;QACzG,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrG,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrG,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS;QACrD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,YAAY;KACb,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAC1C,KAAiB,EACjB,IAA6B,EAC7B,KAAyB;IAEzB,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,oCAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC3C,CAAC;AAEM,KAAK,UAAU,mBAAmB,CAAC,SAA6B,EAAE,MAAe,EAAE,OAAO,GAAG,KAAK;IACvG,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,SAAS,CAAC,KAAK,CAAC,iBAAiB,CACrC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAC7B,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,YAAY,EAClB,EAAE,OAAO,EAAE,CACZ,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAC1C,KAAiB,EACjB,SAAiB,EACjB,OAAgC;IAEhC,OAAO,KAAK,CAAC,oBAAoB,CAAC;QAChC,IAAI,EAAE,mBAAmB;QACzB,SAAS;QACT,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC;QACnD,GAAG,IAAA,6BAAgB,EAAC,eAAe,CAAC,OAAO,CAA4B,CAAC;KACzE,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,eAAe,CAAC,MAAe;IAC7C,MAAM,UAAU,GAAG;QACjB,YAAY,CAAC,MAAM,CAAC,EAAE,KAAK;QAC3B,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,EAAE,KAAK;QACnD,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,EAAE,KAAK;KACvD,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAC3G,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QACtH,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IAC7F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,YAAY,CAAC,KAAc;IACzC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAC,KAAgC;QAClC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAgB,WAAW,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,GAAG,MAAiB;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC;YAAE,OAAO,KAAe,CAAC;IACpF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}
@@ -0,0 +1,34 @@
1
+ import type { SpendGuard } from '../spend-guard';
2
+ import { type FrameworkAdapterOptions } from './common';
3
+ export interface HermesToolEvent {
4
+ toolName?: string;
5
+ name?: string;
6
+ args?: Record<string, unknown>;
7
+ toolArgs?: Record<string, unknown>;
8
+ workflowId?: string;
9
+ sessionId?: string;
10
+ metadata?: Record<string, unknown>;
11
+ result?: Record<string, unknown>;
12
+ }
13
+ export interface HermesHookResult {
14
+ allow: boolean;
15
+ approved?: boolean;
16
+ reason?: string;
17
+ receiptId?: string;
18
+ editedArgs?: Record<string, unknown>;
19
+ }
20
+ export interface HermesPlugin {
21
+ name: 'agentguard-spend';
22
+ guard: SpendGuard;
23
+ hooks: {
24
+ 'pre-tool-call': (event: HermesToolEvent) => Promise<HermesHookResult>;
25
+ approval: (event: HermesToolEvent) => Promise<HermesHookResult>;
26
+ 'post-tool-call': (event: HermesToolEvent) => Promise<HermesHookResult>;
27
+ };
28
+ preToolCall(event: HermesToolEvent): Promise<HermesHookResult>;
29
+ approval(event: HermesToolEvent): Promise<HermesHookResult>;
30
+ postToolCall(event: HermesToolEvent): Promise<HermesHookResult>;
31
+ }
32
+ export declare function createHermesPlugin(opts: FrameworkAdapterOptions): HermesPlugin;
33
+ export declare const agentguardHermesPlugin: typeof createHermesPlugin;
34
+ //# sourceMappingURL=hermes.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"hermes.d.ts","sourceRoot":"","sources":["../../src/frameworks/hermes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAgG,KAAK,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAEtJ,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE;QACL,eAAe,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACvE,QAAQ,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAChE,gBAAgB,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;KACzE,CAAC;IACF,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/D,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5D,YAAY,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACjE;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,uBAAuB,GAAG,YAAY,CAe9E;AAED,eAAO,MAAM,sBAAsB,2BAAqB,CAAC"}
@@ -0,0 +1,50 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.agentguardHermesPlugin = void 0;
4
+ exports.createHermesPlugin = createHermesPlugin;
5
+ const common_1 = require("./common");
6
+ function createHermesPlugin(opts) {
7
+ const guard = (0, common_1.createFrameworkGuard)({ ...opts, framework: 'hermes' });
8
+ const plugin = {
9
+ name: 'agentguard-spend',
10
+ guard,
11
+ hooks: {
12
+ 'pre-tool-call': (event) => preToolCall(guard, opts, event),
13
+ approval: (event) => approval(guard, opts, event),
14
+ 'post-tool-call': (event) => postToolCall(guard, event),
15
+ },
16
+ preToolCall: (event) => preToolCall(guard, opts, event),
17
+ approval: (event) => approval(guard, opts, event),
18
+ postToolCall: (event) => postToolCall(guard, event),
19
+ };
20
+ return plugin;
21
+ }
22
+ exports.agentguardHermesPlugin = createHermesPlugin;
23
+ async function preToolCall(guard, opts, event) {
24
+ const gate = await guard.guardToolCall({
25
+ toolName: toolName(event),
26
+ toolArgs: (0, common_1.safeRequestShape)((0, common_1.redactDataPlane)(event.toolArgs ?? event.args ?? {})),
27
+ workflowId: event.workflowId ?? event.sessionId,
28
+ scope: opts.scope,
29
+ });
30
+ if (!gate.approved)
31
+ return { allow: false, approved: false, reason: gate.decision.reasons.join('; ') };
32
+ return { allow: true, approved: true, editedArgs: gate.editedArgs };
33
+ }
34
+ async function approval(guard, opts, event) {
35
+ return preToolCall(guard, opts, event);
36
+ }
37
+ async function postToolCall(guard, event) {
38
+ const { decision } = await (0, common_1.recordFrameworkReceipt)(guard, 'hermes', {
39
+ event: 'post-tool-call',
40
+ toolName: toolName(event),
41
+ workflowId: event.workflowId ?? event.sessionId ?? null,
42
+ metadata: (0, common_1.redactDataPlane)(event.metadata ?? {}),
43
+ result: (0, common_1.redactDataPlane)(event.result ?? {}),
44
+ });
45
+ return { allow: true, approved: true, receiptId: decision.decisionId };
46
+ }
47
+ function toolName(event) {
48
+ return (0, common_1.stringValue)(event.toolName) ?? (0, common_1.stringValue)(event.name) ?? 'unknown_tool';
49
+ }
50
+ //# sourceMappingURL=hermes.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"hermes.js","sourceRoot":"","sources":["../../src/frameworks/hermes.ts"],"names":[],"mappings":";;;AAmCA,gDAeC;AAjDD,qCAAsJ;AAkCtJ,SAAgB,kBAAkB,CAAC,IAA6B;IAC9D,MAAM,KAAK,GAAG,IAAA,6BAAoB,EAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrE,MAAM,MAAM,GAAiB;QAC3B,IAAI,EAAE,kBAAkB;QACxB,KAAK;QACL,KAAK,EAAE;YACL,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;YAC3D,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;YACjD,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC;SACxD;QACD,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;QACvD,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;QACjD,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC;KACpD,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAEY,QAAA,sBAAsB,GAAG,kBAAkB,CAAC;AAEzD,KAAK,UAAU,WAAW,CAAC,KAAiB,EAAE,IAA6B,EAAE,KAAsB;IACjG,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC;QACrC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC;QACzB,QAAQ,EAAE,IAAA,yBAAgB,EAAC,IAAA,wBAAe,EAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC/E,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS;QAC/C,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACvG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,KAAiB,EAAE,IAA6B,EAAE,KAAsB;IAC9F,OAAO,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,KAAiB,EAAE,KAAsB;IACnE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAA,+BAAsB,EAAC,KAAK,EAAE,QAAQ,EAAE;QACjE,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC;QACzB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI;QACvD,QAAQ,EAAE,IAAA,wBAAe,EAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC/C,MAAM,EAAE,IAAA,wBAAe,EAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;KAC5C,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAsB;IACtC,OAAO,IAAA,oBAAW,EAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAA,oBAAW,EAAC,KAAK,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC;AAClF,CAAC"}
@@ -0,0 +1,6 @@
1
+ export * from './common';
2
+ export * from './openrouter';
3
+ export * from './vercel-ai';
4
+ export * from './claude-code';
5
+ export * from './hermes';
6
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/frameworks/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC"}
@@ -0,0 +1,22 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __exportStar = (this && this.__exportStar) || function(m, exports) {
14
+ for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
15
+ };
16
+ Object.defineProperty(exports, "__esModule", { value: true });
17
+ __exportStar(require("./common"), exports);
18
+ __exportStar(require("./openrouter"), exports);
19
+ __exportStar(require("./vercel-ai"), exports);
20
+ __exportStar(require("./claude-code"), exports);
21
+ __exportStar(require("./hermes"), exports);
22
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/frameworks/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,+CAA6B;AAC7B,8CAA4B;AAC5B,gDAA8B;AAC9B,2CAAyB"}
@@ -0,0 +1,19 @@
1
+ import { type SpendGuardConfig } from '../spend-guard';
2
+ import type { CapabilityTier, SpendPolicy, SpendScope } from '../types';
3
+ import { type FrameworkAdapterOptions } from './common';
4
+ export interface OpenRouterBindingOptions {
5
+ policy: SpendPolicy;
6
+ scope: SpendScope;
7
+ capabilityClaim?: CapabilityTier;
8
+ config?: Omit<SpendGuardConfig, 'policy'>;
9
+ licenseKey?: string;
10
+ openRouterBaseUrl?: string;
11
+ }
12
+ export declare function withSpendGuardOpenRouter<TClient>(client: TClient, opts: OpenRouterBindingOptions): TClient;
13
+ export declare function withOpenRouterSpendGuard<TClient>(client: TClient, opts: OpenRouterBindingOptions): TClient;
14
+ export interface OpenRouterFetchOptions extends FrameworkAdapterOptions {
15
+ fetchImpl?: (url: string, init?: Record<string, unknown>) => Promise<unknown>;
16
+ endpoint?: string;
17
+ }
18
+ export declare function createOpenRouterFetch(opts: OpenRouterFetchOptions): (url: string, init?: Record<string, unknown>) => Promise<unknown>;
19
+ //# sourceMappingURL=openrouter.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"openrouter.d.ts","sourceRoot":"","sources":["../../src/frameworks/openrouter.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6C,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClG,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACxE,OAAO,EAAqE,KAAK,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAE3H,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,UAAU,CAAC;IAClB,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,MAAM,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAa1G;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAE1G;AAED,MAAM,WAAW,sBAAuB,SAAQ,uBAAuB;IACrE,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,sBAAsB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CA6BrI"}