@armoriq/sdk-dev 0.2.13 → 0.2.14

package/dist/session.d.ts

@@ -1,152 +0,0 @@
-/**
- * ArmorIQSession — the core primitive for framework integrations.
- *
- * Two modes:
- *
- * 1. Observe mode (default, new) — MCP stays on the agent side:
- *      await session.startPlan(toolCalls)                // capture plan + mint token
- *      const decision = await session.enforce(toolName, toolArgs)  // check policy
- *      // ... framework calls MCP directly ...
- *      await session.report(toolName, toolArgs, result)  // audit
- *
- * 2. Proxy mode (legacy) — routes through the Armoriq proxy:
- *      await session.startPlan(toolCalls)
- *      return session.dispatch(toolName, toolArgs)       // proxy handles everything
- */
-import { ArmorIQClient } from './client';
-import { IntentToken, ToolCall } from './models';
-import { ToolNameParser } from './plan-builder';
-export type SessionMode = 'local' | 'proxy';
-export interface SessionOptions {
-    toolNameParser?: ToolNameParser;
-    defaultMcpName?: string;
-    validitySeconds?: number;
-    llm?: string;
-    /**
-     * Where the policy decision is evaluated.
-     *  - 'local' (default): SDK verifies the intent token signature in-process
-     *    and evaluates the policy snapshot locally. NO network call to the
-     *    proxy on the tool-call hot path.
-     *  - 'proxy': SDK calls the proxy with enforce_only=true. Useful when
-     *    you want centralized real-time policy decisions or shared rate limits.
-     */
-    mode?: SessionMode;
-}
-export interface EnforceResult {
-    allowed: boolean;
-    action: 'allow' | 'block' | 'hold';
-    reason?: string;
-    delegationId?: string;
-    matchedPolicy?: string;
-}
-export interface ReportOptions {
-    status?: 'success' | 'failed' | 'error';
-    errorMessage?: string;
-    durationMs?: number;
-    isDelegated?: boolean;
-    delegatedBy?: string;
-    delegatedTo?: string;
-}
-export declare class ArmorIQSession {
-    private client;
-    private toolNameParser;
-    private defaultMcpName?;
-    private validitySeconds;
-    private llm;
-    private mode;
-    private stepIndex;
-    private currentPlanHash;
-    private currentTokenValue;
-    private mcpByAction;
-    private declaredTools;
-    private static publicKeyCache;
-    constructor(client: ArmorIQClient, opts?: SessionOptions);
-    /**
-     * Capture a plan from the LLM's tool calls and mint an intent token.
-     * Idempotent: if called again with the same tool-calls list (by SHA),
-     * skips the mint and returns the cached token.
-     */
-    startPlan(toolCalls: ToolCall[], opts?: {
-        goal?: string;
-    }): Promise<IntentToken>;
-    /**
-     * Local-mode enforcement.
-     * Verifies the intent token's lifetime, plan-binding, and the
-     * policy snapshot — all in-process. NO network call to the proxy.
-     *
-     * Returns { allowed, action, reason }. Plugin uses this to short-
-     * circuit the framework's tool dispatch on a deny.
-     */
-    enforceLocal(toolName: string, toolArgs: Record<string, unknown>): Promise<EnforceResult>;
-    /**
-     * Check policy for a tool call BEFORE the agent executes it.
-     * Calls POST /iap/enforce on the backend.
-     * Returns { allowed, action, reason }. The framework plugin uses this
-     * to block or let through — the MCP call itself happens on the agent side.
-     */
-    enforce(toolName: string, toolArgs: Record<string, unknown>): Promise<EnforceResult>;
-    /**
-     * Report a tool execution to the audit log AFTER the agent calls the MCP.
-     * Calls POST /iap/audit on the backend.
-     */
-    report(toolName: string, toolArgs: Record<string, unknown>, result: unknown, opts?: ReportOptions): Promise<void>;
-    /**
-     * [Proxy mode] Route a tool call through the Armoriq proxy.
-     * Returns the raw result so the framework can short-circuit
-     * its native dispatch. Use this when the proxy handles the
-     * upstream MCP connection (e.g. Claude Desktop, Cursor).
-     */
-    dispatch(toolName: string, toolArgs: Record<string, unknown>): Promise<unknown>;
-    /**
-     * Mode-aware enforcement entry point. Plugins should call this and
-     * not branch themselves — `mode` on the session decides the path.
-     *
-     * Behavior by mode:
-     *   - 'local'  → allow / block ONLY. In-process, no network calls.
-     *                A 'hold' threshold violation is reported as 'block'
-     *                with an explanatory reason. Use proxy mode if you
-     *                need delegation/approval workflows.
-     *   - 'proxy'  → allow / block / hold. The proxy resolves the hold
-     *                via the delegation pipeline (request → approve → re-run).
-     */
-    check(toolName: string, toolArgs: Record<string, unknown>, opts?: {
-        userEmail?: string;
-    }): Promise<EnforceResult>;
-    /**
-     * Handle a 'hold' decision: check for prior approval, otherwise
-     * create a delegation request. Returns either:
-     *   - allowed: true (prior approval found within window)
-     *   - allowed: false, action: 'hold', delegationId (request created or pending)
-     */
-    private handleHold;
-    /**
-     * Best-effort extraction of an amount field from arbitrary tool args.
-     * Used as a FALLBACK when the platform hasn't declared per-tool
-     * metadata. Fully MCP-agnostic — only checks generic field names.
-     */
-    private extractAmount;
-    /**
-     * Resolve the canonical "amount" for a tool call:
-     *   1. Try platform-declared tool metadata (amountFields + amountUnit)
-     *      — same source the proxy uses (toolMetadata column on MCPServer,
-     *      authored in the armorpay UI). MCP-specific units like 'cents'
-     *      are normalized HERE, not in the SDK.
-     *   2. Fall back to the generic candidate-field extractor.
-     */
-    private resolveCanonicalAmount;
-    /**
-     * Evaluate an amount-threshold rule from the policy snapshot against
-     * the tool args. Returns:
-     *   - undefined if no threshold or amount-not-applicable
-     *   - { allowed: false, action: 'block' } if amount > maxPerTransaction
-     *   - { allowed: false, action: 'hold'  } if amount > requireApprovalAbove
-     */
-    private evaluateAmountThreshold;
-    /** Drop cached plan + token so the next startPlan() always mints fresh. */
-    reset(): void;
-    /** Inspect the currently held intent token (for debugging / audit). */
-    get currentToken(): IntentToken | null;
-    /** Current session mode ('local' default, 'proxy' opt-in). */
-    get currentMode(): SessionMode;
-}
-//# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAuB,QAAQ,EAAE,MAAM,UAAU,CAAC;AACtE,OAAO,EACL,cAAc,EAIf,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,OAAO,CAAC;AAE5C,MAAM,WAAW,cAAc;IAC7B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,cAAc,CAAC,CAAS;IAChC,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,IAAI,CAAc;IAC1B,OAAO,CAAC,SAAS,CAAa;IAE9B,OAAO,CAAC,eAAe,CAAuB;IAC9C,OAAO,CAAC,iBAAiB,CAA4B;IACrD,OAAO,CAAC,WAAW,CAAkC;IAKrD,OAAO,CAAC,aAAa,CAA0B;IAG/C,OAAO,CAAC,MAAM,CAAC,cAAc,CAGf;gBAEF,MAAM,EAAE,aAAa,EAAE,IAAI,GAAE,cAAmB;IAU5D;;;;OAIG;IACG,SAAS,CACb,SAAS,EAAE,QAAQ,EAAE,EACrB,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAC3B,OAAO,CAAC,WAAW,CAAC;IA0CvB;;;;;;;OAOG;IACG,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC,aAAa,CAAC;IAsJzB;;;;;OAKG;IACG,OAAO,CACX,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC,aAAa,CAAC;IA2EzB;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,MAAM,EAAE,OAAO,EACf,IAAI,GAAE,aAAkB,GACvB,OAAO,CAAC,IAAI,CAAC;IA2ChB;;;;;OAKG;IACG,QAAQ,CACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC,OAAO,CAAC;IAoBnB;;;;;;;;;;;OAWG;IACG,KAAK,CACT,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAChC,OAAO,CAAC,aAAa,CAAC;IAuBzB;;;;;OAKG;YACW,UAAU;IA4ExB;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAUrB;;;;;;;OAOG;YACW,sBAAsB;IAsBpC;;;;;;OAMG;YACW,uBAAuB;IAiCrC,2EAA2E;IAC3E,KAAK,IAAI,IAAI;IAQb,uEAAuE;IACvE,IAAI,YAAY,IAAI,WAAW,GAAG,IAAI,CAErC;IAED,8DAA8D;IAC9D,IAAI,WAAW,IAAI,WAAW,CAE7B;CACF"}