@agentguard-run/spend 0.2.2 → 0.4.0

package/dist/bindings/anthropic.js

@@ -0,0 +1,116 @@
+"use strict";
+/** Native Anthropic binding for AgentGuard Spend. */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withSpendGuardAnthropic = withSpendGuardAnthropic;
+const spend_guard_1 = require("../spend-guard");
+function withSpendGuardAnthropic(
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+client, opts) {
+    const guard = new spend_guard_1.SpendGuard({ policy: opts.policy, ...(opts.config ?? {}) });
+    const originalCreate = client?.messages?.create?.bind(client.messages);
+    if (!originalCreate)
+        throw new Error('withSpendGuardAnthropic: expected client.messages.create');
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    client.messages.create = async (params) => {
+        const call = buildAnthropicCall(params, guard, opts);
+        const { decision } = await guard.decide(call);
+        if (decision.action === 'block')
+            throw new spend_guard_1.AgentGuardBlockedError(decision, opts.scope, opts.config?.locale);
+        const nextParams = decision.action === 'downgrade' && decision.modelResolved !== decision.modelRequested
+            ? { ...params, model: decision.modelResolved }
+            : params;
+        const response = await originalCreate(nextParams);
+        if (nextParams?.stream === true || isAsyncIterable(response)) {
+            return wrapAnthropicStream(response, guard, decision.decisionId, call);
+        }
+        const usage = (0, spend_guard_1.usageCountsFromObject)(response?.usage);
+        if (usage)
+            await guard.settleStreamUsage(decision.decisionId, usage.inputTokens, usage.outputTokens);
+        return response;
+    };
+    const originalStream = client?.messages?.stream?.bind(client.messages);
+    if (originalStream) {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        client.messages.stream = async (params) => {
+            const call = buildAnthropicCall({ ...params, stream: true }, guard, opts);
+            const { decision } = await guard.decide(call);
+            if (decision.action === 'block')
+                throw new spend_guard_1.AgentGuardBlockedError(decision, opts.scope, opts.config?.locale);
+            const nextParams = decision.action === 'downgrade' && decision.modelResolved !== decision.modelRequested
+                ? { ...params, model: decision.modelResolved }
+                : params;
+            const stream = await originalStream(nextParams);
+            return wrapAnthropicStream(stream, guard, decision.decisionId, call);
+        };
+    }
+    client.__agentguard = guard;
+    return client;
+}
+function buildAnthropicCall(params, guard, opts) {
+    const inputText = [(0, spend_guard_1.extractText)(params.system), (0, spend_guard_1.extractText)(params.messages)].filter(Boolean).join('\n');
+    return {
+        provider: 'anthropic',
+        model: String(params.model ?? 'unknown'),
+        inputTokens: guard.estimateTokens(inputText),
+        outputTokens: (0, spend_guard_1.outputTokensFromParams)(params),
+        scope: opts.scope,
+        capabilityClaim: opts.capabilityClaim,
+    };
+}
+function wrapAnthropicStream(stream, guard, decisionId, call) {
+    const tracker = new AnthropicStreamUsageTracker(guard, call);
+    return (0, spend_guard_1.wrapUsageStream)(stream, {
+        onChunk: (chunk) => tracker.observe(chunk),
+        settle: (partial, reason) => {
+            const usage = tracker.usage();
+            return guard.settleStreamUsage(decisionId, usage.inputTokens, usage.outputTokens, { partial, reason });
+        },
+    });
+}
+class AnthropicStreamUsageTracker {
+    guard;
+    call;
+    input = null;
+    output = null;
+    content = '';
+    constructor(guard, call) {
+        this.guard = guard;
+        this.call = call;
+    }
+    observe(event) {
+        const obj = event;
+        const startUsage = (obj?.message?.usage ?? obj?.usage);
+        const input = tokenField(startUsage, ['input_tokens', 'inputTokens', 'prompt_tokens']);
+        const output = tokenField(startUsage, ['output_tokens', 'outputTokens', 'completion_tokens']);
+        if (input !== null)
+            this.input = input;
+        if (output !== null)
+            this.output = output;
+        const delta = obj?.delta;
+        if (typeof delta?.text === 'string')
+            this.content += delta.text;
+        if (typeof delta?.partial_json === 'string')
+            this.content += delta.partial_json;
+    }
+    usage() {
+        return {
+            inputTokens: this.input ?? this.call.inputTokens,
+            outputTokens: this.output ?? this.guard.estimateTokens(this.content),
+        };
+    }
+}
+function tokenField(value, names) {
+    if (!value || typeof value !== 'object')
+        return null;
+    const obj = value;
+    for (const name of names) {
+        const token = obj[name];
+        if (Number.isSafeInteger(token) && token >= 0)
+            return token;
+    }
+    return null;
+}
+function isAsyncIterable(value) {
+    return Boolean(value && typeof value[Symbol.asyncIterator] === 'function');
+}
+//# sourceMappingURL=anthropic.js.map

package/dist/bindings/anthropic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.js","sourceRoot":"","sources":["../../src/bindings/anthropic.ts"],"names":[],"mappings":";AAAA,qDAAqD;;AAqBrD,0DA8CC;AAhED,gDASwB;AASxB,SAAgB,uBAAuB;AACrC,8DAA8D;AAC9D,MAAW,EACX,IAA6B;IAG7B,MAAM,KAAK,GAAG,IAAI,wBAAU,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,MAAM,cAAc,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvE,IAAI,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAEjG,8DAA8D;IAC9D,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,EAAE,MAAW,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO;YAAE,MAAM,IAAI,oCAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAE7G,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,cAAc;YACtG,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,aAAa,EAAE;YAC9C,CAAC,CAAC,MAAM,CAAC;QAEX,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,UAAU,EAAE,MAAM,KAAK,IAAI,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,OAAO,mBAAmB,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,mCAAqB,EAAE,QAAuC,EAAE,KAAK,CAAC,CAAC;QACrF,IAAI,KAAK;YAAE,MAAM,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACrG,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvE,IAAI,cAAc,EAAE,CAAC;QACnB,8DAA8D;QAC9D,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,EAAE,MAAW,EAAE,EAAE;YAC7C,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YAC1E,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO;gBAAE,MAAM,IAAI,oCAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC7G,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,cAAc;gBACtG,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,aAAa,EAAE;gBAC9C,CAAC,CAAC,MAAM,CAAC;YACX,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,CAAC;YAChD,OAAO,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACvE,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CACzB,MAA+B,EAC/B,KAAiB,EACjB,IAA6B;IAE7B,MAAM,SAAS,GAAG,CAAC,IAAA,yBAAW,EAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAA,yBAAW,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxG,OAAO;QACL,QAAQ,EAAE,WAAuB;QACjC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC;QACxC,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC;QAC5C,YAAY,EAAE,IAAA,oCAAsB,EAAC,MAAM,CAAC;QAC5C,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAA8B,EAC9B,KAAiB,EACjB,UAAkB,EAClB,IAAiB;IAEjB,MAAM,OAAO,GAAG,IAAI,2BAA2B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7D,OAAO,IAAA,6BAAe,EAAC,MAAM,EAAE;QAC7B,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1C,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACzG,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,2BAA2B;IAKX;IAA2B;IAJvC,KAAK,GAAkB,IAAI,CAAC;IAC5B,MAAM,GAAkB,IAAI,CAAC;IAC7B,OAAO,GAAG,EAAE,CAAC;IAErB,YAAoB,KAAiB,EAAU,IAAiB;QAA5C,UAAK,GAAL,KAAK,CAAY;QAAU,SAAI,GAAJ,IAAI,CAAa;IAAG,CAAC;IAEpE,OAAO,CAAC,KAAc;QACpB,MAAM,GAAG,GAAG,KAAuC,CAAC;QACpD,MAAM,UAAU,GAAG,CAAE,GAAG,EAAE,OAA+C,EAAE,KAAK,IAAI,GAAG,EAAE,KAAK,CAAY,CAAC;QAC3G,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC,cAAc,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC9F,IAAI,KAAK,KAAK,IAAI;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACvC,IAAI,MAAM,KAAK,IAAI;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAE1C,MAAM,KAAK,GAAG,GAAG,EAAE,KAA4C,CAAC;QAChE,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ;YAAE,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC;QAChE,IAAI,OAAO,KAAK,EAAE,YAAY,KAAK,QAAQ;YAAE,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,YAAY,CAAC;IAClF,CAAC;IAED,KAAK;QACH,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW;YAChD,YAAY,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;SACrE,CAAC;IACJ,CAAC;CACF;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAe;IACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC;YAAE,OAAO,KAAe,CAAC;IACpF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,OAAO,CAAC,KAAK,IAAI,OAAQ,KAA8C,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,UAAU,CAAC,CAAC;AACvH,CAAC"}

package/dist/bindings/bedrock.d.ts

@@ -0,0 +1,11 @@
+/** Native AWS Bedrock binding for AgentGuard Spend. */
+import type { CapabilityTier, SpendPolicy, SpendScope } from '../types';
+import { type SpendGuardConfig } from '../spend-guard';
+export interface BedrockBindingOptions {
+    policy: SpendPolicy;
+    scope: SpendScope;
+    capabilityClaim?: CapabilityTier;
+    config?: Omit<SpendGuardConfig, 'policy'>;
+}
+export declare function withSpendGuardBedrock(client: any, opts: BedrockBindingOptions): any;
+//# sourceMappingURL=bedrock.d.ts.map

package/dist/bindings/bedrock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bedrock.d.ts","sourceRoot":"","sources":["../../src/bindings/bedrock.ts"],"names":[],"mappings":"AAAA,uDAAuD;AAEvD,OAAO,KAAK,EAAE,cAAc,EAAyB,WAAW,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC/F,OAAO,EAGL,KAAK,gBAAgB,EAKtB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,UAAU,CAAC;IAClB,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,MAAM,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;CAC3C;AAOD,wBAAgB,qBAAqB,CAEnC,MAAM,EAAE,GAAG,EACX,IAAI,EAAE,qBAAqB,GAE1B,GAAG,CAgCL"}

package/dist/bindings/bedrock.js

@@ -0,0 +1,177 @@
+"use strict";
+/** Native AWS Bedrock binding for AgentGuard Spend. */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.withSpendGuardBedrock = withSpendGuardBedrock;
+const spend_guard_1 = require("../spend-guard");
+function withSpendGuardBedrock(
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+client, opts) {
+    const guard = new spend_guard_1.SpendGuard({ policy: opts.policy, ...(opts.config ?? {}) });
+    const originalSend = client?.send?.bind(client);
+    if (!originalSend)
+        throw new Error('withSpendGuardBedrock: expected client.send');
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    client.send = async (command, ...args) => {
+        if (!isInvokeModelCommand(command))
+            return originalSend(command, ...args);
+        const call = buildBedrockCall(command, guard, opts);
+        const { decision } = await guard.decide(call);
+        if (decision.action === 'block')
+            throw new spend_guard_1.AgentGuardBlockedError(decision, opts.scope, opts.config?.locale);
+        if (decision.action === 'downgrade' && decision.modelResolved !== decision.modelRequested && command.input) {
+            command.input = { ...command.input, modelId: decision.modelResolved };
+        }
+        const response = await originalSend(command, ...args);
+        if (isStreamingCommand(command) && response?.body) {
+            return {
+                ...response,
+                body: wrapBedrockStream(response.body, guard, decision.decisionId, call),
+            };
+        }
+        const usage = extractBedrockResponseUsage(response, call.model);
+        if (usage)
+            await guard.settleStreamUsage(decision.decisionId, usage.inputTokens, usage.outputTokens);
+        return response;
+    };
+    client.__agentguard = guard;
+    return client;
+}
+function isInvokeModelCommand(command) {
+    const name = command?.constructor?.name;
+    return name === 'InvokeModelCommand' || name === 'InvokeModelWithResponseStreamCommand';
+}
+function isStreamingCommand(command) {
+    return command?.constructor?.name === 'InvokeModelWithResponseStreamCommand';
+}
+function buildBedrockCall(command, guard, opts) {
+    const input = command.input ?? {};
+    const modelId = String(input.modelId ?? 'unknown');
+    const body = parseJsonBody(input.body);
+    const inputText = (0, spend_guard_1.extractText)(body);
+    return {
+        provider: 'bedrock',
+        model: modelId,
+        inputTokens: guard.estimateTokens(inputText),
+        outputTokens: outputTokensFromBody(body),
+        scope: opts.scope,
+        capabilityClaim: opts.capabilityClaim,
+    };
+}
+function wrapBedrockStream(stream, guard, decisionId, call) {
+    const tracker = new BedrockStreamUsageTracker(guard, call);
+    return (0, spend_guard_1.wrapUsageStream)(stream, {
+        onChunk: (event) => tracker.observe(event),
+        settle: (partial, reason) => {
+            const usage = tracker.usage();
+            return guard.settleStreamUsage(decisionId, usage.inputTokens, usage.outputTokens, { partial, reason });
+        },
+    });
+}
+class BedrockStreamUsageTracker {
+    guard;
+    call;
+    input = null;
+    output = null;
+    content = '';
+    constructor(guard, call) {
+        this.guard = guard;
+        this.call = call;
+    }
+    observe(event) {
+        const payload = bedrockEventPayload(event);
+        if (!payload)
+            return;
+        const usage = usageFromBedrockPayload(payload);
+        if (usage) {
+            this.input = usage.inputTokens;
+            this.output = usage.outputTokens;
+        }
+        this.content += textFromBedrockPayload(payload);
+    }
+    usage() {
+        return {
+            inputTokens: this.input ?? this.call.inputTokens,
+            outputTokens: this.output ?? this.guard.estimateTokens(this.content),
+        };
+    }
+}
+function extractBedrockResponseUsage(response, modelId) {
+    const body = response?.body;
+    const parsed = parseJsonBody(body);
+    const usage = usageFromBedrockPayload(parsed);
+    if (usage)
+        return usage;
+    if (modelId.startsWith('amazon.nova.'))
+        return (0, spend_guard_1.usageCountsFromObject)(parsed?.usage);
+    return null;
+}
+function usageFromBedrockPayload(payload) {
+    if (!payload || typeof payload !== 'object')
+        return null;
+    const obj = payload;
+    const direct = (0, spend_guard_1.usageCountsFromObject)(obj.usage);
+    if (direct)
+        return direct;
+    const bedrockMetrics = obj['amazon-bedrock-invocationMetrics'];
+    if (bedrockMetrics && typeof bedrockMetrics === 'object') {
+        const metrics = bedrockMetrics;
+        const input = metrics.inputTokenCount;
+        const output = metrics.outputTokenCount;
+        if (Number.isSafeInteger(input) && Number.isSafeInteger(output)) {
+            return { inputTokens: input, outputTokens: output };
+        }
+    }
+    const nested = (0, spend_guard_1.usageCountsFromObject)(obj.message?.usage);
+    if (nested)
+        return nested;
+    return null;
+}
+function textFromBedrockPayload(payload) {
+    if (!payload || typeof payload !== 'object')
+        return '';
+    const obj = payload;
+    const delta = obj.delta;
+    if (typeof delta?.text === 'string')
+        return delta.text;
+    const contentBlockDelta = obj.contentBlockDelta;
+    const nestedDelta = contentBlockDelta?.delta;
+    if (typeof nestedDelta?.text === 'string')
+        return nestedDelta.text;
+    const output = obj.output;
+    if (output)
+        return (0, spend_guard_1.extractText)(output);
+    return '';
+}
+function outputTokensFromBody(body) {
+    if (!body || typeof body !== 'object')
+        return 512;
+    const obj = body;
+    const value = obj.max_tokens ?? obj.maxTokens ?? obj.max_new_tokens ??
+        obj.inferenceConfig?.maxTokens;
+    return Number.isSafeInteger(value) && value >= 0 ? value : 512;
+}
+function parseJsonBody(body) {
+    if (!body)
+        return {};
+    try {
+        if (typeof body === 'string')
+            return JSON.parse(body);
+        if (body instanceof Uint8Array)
+            return JSON.parse(new TextDecoder().decode(body));
+        if (typeof Buffer !== 'undefined' && Buffer.isBuffer(body))
+            return JSON.parse(body.toString('utf8'));
+        if (typeof body === 'object')
+            return body;
+    }
+    catch {
+        return {};
+    }
+    return {};
+}
+function bedrockEventPayload(event) {
+    const obj = event;
+    const chunk = obj?.chunk;
+    const bytes = chunk?.bytes ?? chunk?.payload ?? obj?.payload;
+    return parseJsonBody(bytes);
+}
+//# sourceMappingURL=bedrock.js.map

package/dist/bindings/bedrock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bedrock.js","sourceRoot":"","sources":["../../src/bindings/bedrock.ts"],"names":[],"mappings":";AAAA,uDAAuD;;AAyBvD,sDAqCC;AA3DD,gDAQwB;AAcxB,SAAgB,qBAAqB;AACnC,8DAA8D;AAC9D,MAAW,EACX,IAA2B;IAG3B,MAAM,KAAK,GAAG,IAAI,wBAAU,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,MAAM,YAAY,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAElF,8DAA8D;IAC9D,MAAM,CAAC,IAAI,GAAG,KAAK,EAAE,OAAuB,EAAE,GAAG,IAAW,EAAE,EAAE;QAC9D,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;YAAE,OAAO,YAAY,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1E,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO;YAAE,MAAM,IAAI,oCAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAE7G,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,cAAc,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAC3G,OAAO,CAAC,KAAK,GAAG,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC;QACxE,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QACtD,IAAI,kBAAkB,CAAC,OAAO,CAAC,IAAI,QAAQ,EAAE,IAAI,EAAE,CAAC;YAClD,OAAO;gBACL,GAAG,QAAQ;gBACX,IAAI,EAAE,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;aACzE,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,2BAA2B,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,KAAK;YAAE,MAAM,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACrG,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAuB;IACnD,MAAM,IAAI,GAAG,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC;IACxC,OAAO,IAAI,KAAK,oBAAoB,IAAI,IAAI,KAAK,sCAAsC,CAAC;AAC1F,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAuB;IACjD,OAAO,OAAO,EAAE,WAAW,EAAE,IAAI,KAAK,sCAAsC,CAAC;AAC/E,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAuB,EAAE,KAAiB,EAAE,IAA2B;IAC/F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAA,yBAAW,EAAC,IAAI,CAAC,CAAC;IACpC,OAAO;QACL,QAAQ,EAAE,SAAqB;QAC/B,KAAK,EAAE,OAAO;QACd,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC;QAC5C,YAAY,EAAE,oBAAoB,CAAC,IAAI,CAAC;QACxC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,MAA8B,EAC9B,KAAiB,EACjB,UAAkB,EAClB,IAAiB;IAEjB,MAAM,OAAO,GAAG,IAAI,yBAAyB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3D,OAAO,IAAA,6BAAe,EAAC,MAAM,EAAE;QAC7B,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1C,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACzG,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,yBAAyB;IAKT;IAA2B;IAJvC,KAAK,GAAkB,IAAI,CAAC;IAC5B,MAAM,GAAkB,IAAI,CAAC;IAC7B,OAAO,GAAG,EAAE,CAAC;IAErB,YAAoB,KAAiB,EAAU,IAAiB;QAA5C,UAAK,GAAL,KAAK,CAAY;QAAU,SAAI,GAAJ,IAAI,CAAa;IAAG,CAAC;IAEpE,OAAO,CAAC,KAAc;QACpB,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC;YAC/B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,OAAO,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,KAAK;QACH,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW;YAChD,YAAY,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;SACrE,CAAC;IACJ,CAAC;CACF;AAED,SAAS,2BAA2B,CAAC,QAAiB,EAAE,OAAe;IACrE,MAAM,IAAI,GAAI,QAAsC,EAAE,IAAI,CAAC;IAC3D,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,IAAA,mCAAqB,EAAE,MAAyC,EAAE,KAAK,CAAC,CAAC;IACxH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAgB;IAC/C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,GAAG,GAAG,OAAkC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAA,mCAAqB,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,cAAc,GAAG,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAC/D,IAAI,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,cAAyC,CAAC;QAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,eAAe,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;QACxC,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,OAAO,EAAE,WAAW,EAAE,KAAe,EAAE,YAAY,EAAE,MAAgB,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,mCAAqB,EAAE,GAAG,CAAC,OAA+C,EAAE,KAAK,CAAC,CAAC;IAClG,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAgB;IAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACvD,MAAM,GAAG,GAAG,OAAkC,CAAC;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAA4C,CAAC;IAC/D,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IACvD,MAAM,iBAAiB,GAAG,GAAG,CAAC,iBAAwD,CAAC;IACvF,MAAM,WAAW,GAAG,iBAAiB,EAAE,KAA4C,CAAC;IACpF,IAAI,OAAO,WAAW,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC,IAAI,CAAC;IACnE,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6C,CAAC;IACjE,IAAI,MAAM;QAAE,OAAO,IAAA,yBAAW,EAAC,MAAM,CAAC,CAAC;IACvC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAa;IACzC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAClD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,cAAc;QAChE,GAAG,CAAC,eAAuD,EAAE,SAAS,CAAC;IAC1E,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC,CAAC,GAAG,CAAC;AACvF,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,IAAI,YAAY,UAAU;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAClF,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACrG,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,GAAG,GAAG,KAAuC,CAAC;IACpD,MAAM,KAAK,GAAG,GAAG,EAAE,KAA4C,CAAC;IAChE,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,KAAK,EAAE,OAAO,IAAI,GAAG,EAAE,OAAO,CAAC;IAC7D,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/dist/cli/auth.d.ts

@@ -0,0 +1,7 @@
+export declare function openRouterKeyPath(): string;
+export declare function keyFingerprint(key: string): string;
+export declare function validateOpenRouterKey(key: string, endpoint?: string): Promise<boolean>;
+export declare function readOpenRouterKey(): string | null;
+export declare function writeOpenRouterKey(key: string): void;
+export declare function runAuth(argv: string[]): Promise<number>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/cli/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/cli/auth.ts"],"names":[],"mappings":"AAWA,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAoE,GAAG,OAAO,CAAC,OAAO,CAAC,CAYvJ;AAED,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAQjD;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAKpD;AAED,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAW7D"}

package/dist/cli/auth.js

@@ -0,0 +1,189 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.openRouterKeyPath = openRouterKeyPath;
+exports.keyFingerprint = keyFingerprint;
+exports.validateOpenRouterKey = validateOpenRouterKey;
+exports.readOpenRouterKey = readOpenRouterKey;
+exports.writeOpenRouterKey = writeOpenRouterKey;
+exports.runAuth = runAuth;
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const http = __importStar(require("http"));
+const https = __importStar(require("https"));
+const path = __importStar(require("path"));
+const readline = __importStar(require("readline"));
+const index_1 = require("../index");
+const colors_1 = require("./colors");
+const OPENROUTER_AUTH_URL = 'https://openrouter.ai/api/v1/auth/key';
+function openRouterKeyPath() {
+    return path.join((0, colors_1.agentguardHome)(), 'openrouter-key');
+}
+function keyFingerprint(key) {
+    return crypto.createHash('sha256').update(key).digest('hex').slice(0, 16);
+}
+async function validateOpenRouterKey(key, endpoint = process.env.AGENTGUARD_OPENROUTER_AUTH_URL || OPENROUTER_AUTH_URL) {
+    if (!key.trim())
+        return false;
+    if (endpoint.startsWith('mock://')) {
+        const expected = new URL(endpoint).searchParams.get('key');
+        return expected === key.trim();
+    }
+    try {
+        const status = await requestStatus(endpoint, key.trim());
+        return status >= 200 && status < 300;
+    }
+    catch {
+        return false;
+    }
+}
+function readOpenRouterKey() {
+    if (process.env.OPENROUTER_API_KEY)
+        return process.env.OPENROUTER_API_KEY;
+    try {
+        const value = fs.readFileSync(openRouterKeyPath(), 'utf8').trim();
+        return value.length > 0 ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+function writeOpenRouterKey(key) {
+    const filePath = openRouterKeyPath();
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+    fs.writeFileSync(filePath, key.trim() + '\n', { mode: 0o600 });
+    try {
+        fs.chmodSync(filePath, 0o600);
+    }
+    catch {
+        return;
+    }
+}
+async function runAuth(argv) {
+    if (argv.includes('--help') || argv.includes('-h')) {
+        console.log('agentguard auth openrouter | status | clear openrouter');
+        return 0;
+    }
+    const sub = argv[0] ?? 'status';
+    if (sub === 'status')
+        return authStatus();
+    if (sub === 'clear' && argv[1] === 'openrouter')
+        return clearOpenRouter();
+    if (sub === 'openrouter')
+        return configureOpenRouter(argv);
+    console.error(`agentguard auth: unknown command '${argv.join(' ')}'`);
+    return 2;
+}
+async function configureOpenRouter(argv) {
+    const flagKey = valueAfter(argv, '--key');
+    const key = flagKey ?? await promptForKey();
+    if (!key) {
+        console.error('No key provided.');
+        return 2;
+    }
+    const ok = await validateOpenRouterKey(key);
+    if (!ok) {
+        console.error('OpenRouter key validation failed.');
+        return 1;
+    }
+    writeOpenRouterKey(key);
+    console.log('');
+    console.log('  ' + (0, colors_1.banner)(index_1.AGENTGUARD_SPEND_VERSION));
+    console.log('');
+    console.log(`  ${(0, colors_1.green)('configured')} openrouter  fingerprint ${keyFingerprint(key)}`);
+    console.log(`  ${(0, colors_1.dim)('saved')} ${openRouterKeyPath()}`);
+    console.log('');
+    return 0;
+}
+function authStatus() {
+    const key = readOpenRouterKey();
+    console.log('');
+    console.log('  ' + (0, colors_1.banner)(index_1.AGENTGUARD_SPEND_VERSION));
+    console.log('');
+    if (key) {
+        console.log(`  ${(0, colors_1.green)('openrouter')} configured  fingerprint ${keyFingerprint(key)}`);
+    }
+    else {
+        console.log(`  ${(0, colors_1.yellow)('openrouter')} not configured`);
+    }
+    console.log('');
+    console.log('  ' + (0, colors_1.statusBar)());
+    console.log('');
+    return 0;
+}
+function clearOpenRouter() {
+    try {
+        fs.unlinkSync(openRouterKeyPath());
+    }
+    catch {
+        return 0;
+    }
+    console.log('OpenRouter key removed.');
+    return 0;
+}
+async function promptForKey() {
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    return new Promise((resolve) => {
+        rl.question('OpenRouter API key: ', (answer) => {
+            rl.close();
+            resolve(answer.trim());
+        });
+    });
+}
+function requestStatus(endpoint, key) {
+    return new Promise((resolve, reject) => {
+        const url = new URL(endpoint);
+        const client = url.protocol === 'http:' ? http : https;
+        const req = client.request({
+            method: 'GET',
+            hostname: url.hostname,
+            port: url.port,
+            path: url.pathname + url.search,
+            headers: { authorization: `Bearer ${key}`, accept: 'application/json' },
+            timeout: 5000,
+        }, (res) => {
+            res.resume();
+            res.on('end', () => resolve(res.statusCode ?? 0));
+        });
+        req.on('error', reject);
+        req.on('timeout', () => req.destroy(new Error('OpenRouter auth validation timed out')));
+        req.end();
+    });
+}
+function valueAfter(argv, flag) {
+    const index = argv.indexOf(flag);
+    return index >= 0 ? argv[index + 1] : undefined;
+}
+//# sourceMappingURL=auth.js.map

package/dist/cli/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/cli/auth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,8CAEC;AAED,wCAEC;AAED,sDAYC;AAED,8CAQC;AAED,gDAKC;AAED,0BAWC;AA7DD,+CAAiC;AACjC,uCAAyB;AACzB,2CAA6B;AAC7B,6CAA+B;AAC/B,2CAA6B;AAC7B,mDAAqC;AACrC,oCAAoD;AACpD,qCAAiF;AAEjF,MAAM,mBAAmB,GAAG,uCAAuC,CAAC;AAEpE,SAAgB,iBAAiB;IAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAA,uBAAc,GAAE,EAAE,gBAAgB,CAAC,CAAC;AACvD,CAAC;AAED,SAAgB,cAAc,CAAC,GAAW;IACxC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAEM,KAAK,UAAU,qBAAqB,CAAC,GAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,mBAAmB;IACnI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3D,OAAO,QAAQ,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB;IAC/B,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,iBAAiB,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO;IAAC,CAAC;AAC1D,CAAC;AAEM,KAAK,UAAU,OAAO,CAAC,IAAc;IAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QACtE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC;IAChC,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,UAAU,EAAE,CAAC;IAC1C,IAAI,GAAG,KAAK,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY;QAAE,OAAO,eAAe,EAAE,CAAC;IAC1E,IAAI,GAAG,KAAK,YAAY;QAAE,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,CAAC,KAAK,CAAC,qCAAqC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAc;IAC/C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,OAAO,IAAI,MAAM,YAAY,EAAE,CAAC;IAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,eAAM,EAAC,gCAAwB,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,cAAK,EAAC,YAAY,CAAC,4BAA4B,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvF,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,YAAG,EAAC,OAAO,CAAC,IAAI,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,eAAM,EAAC,gCAAwB,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,cAAK,EAAC,YAAY,CAAC,4BAA4B,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,IAAA,eAAM,EAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,kBAAS,GAAE,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,eAAe;IACtB,IAAI,CAAC;QAAC,EAAE,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,MAAM,EAAE,EAAE;YAC7C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,GAAW;IAClD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CACxB;YACE,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;YAC/B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;YACvE,OAAO,EAAE,IAAI;SACd,EACD,CAAC,GAAG,EAAE,EAAE;YACN,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC,CAAC;QACxF,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,IAAc,EAAE,IAAY;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC"}

package/dist/cli/coach.d.ts

@@ -0,0 +1,5 @@
+/**
+ * `agentguard coach`: local LLM-driven policy setup.
+ */
+export declare function runCoach(argv: string[]): Promise<number>;
+//# sourceMappingURL=coach.d.ts.map

package/dist/cli/coach.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coach.d.ts","sourceRoot":"","sources":["../../src/cli/coach.ts"],"names":[],"mappings":"AAAA;;GAEG;AAmCH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAgF9D"}