@armoriq/sdk-dev 0.2.15 → 0.3.1

package/dist/session.d.ts

@@ -0,0 +1,87 @@
+/**
+ * ArmorIQSession — the core primitive for framework integrations.
+ *
+ * Mirrors armoriq_sdk/session.py. Two main usage shapes:
+ *
+ * 1. Observe mode (default, local) — MCP stays on the agent side:
+ *      session.startPlan(toolCalls);
+ *      const decision = session.enforce(toolName, toolArgs);
+ *      // ... framework calls MCP directly ...
+ *      await session.report(toolName, toolArgs, result);
+ *
+ * 2. Proxy mode — routes through the Armoriq proxy:
+ *      session.startPlan(toolCalls);
+ *      return session.dispatch(toolName, toolArgs);
+ */
+import { ArmorIQClient } from './client';
+import { IntentToken, ToolCall } from './models';
+import { ToolNameParser } from './plan_builder';
+export type SessionMode = 'local' | 'proxy' | 'sdk';
+export interface SessionOptions {
+    toolNameParser?: ToolNameParser;
+    defaultMcpName?: string;
+    validitySeconds?: number;
+    llm?: string;
+    mode?: SessionMode;
+    /**
+     * Per-call HTTP timeout for `enforceSdk` and `enforce` (proxy) checks.
+     * Default 10000ms. Bump for staging deployments where the backend is
+     * slow under load (e.g. public-IP DB without connection pooling).
+     */
+    checkTimeoutMs?: number;
+    /**
+     * HTTP timeout for `report()` audit POSTs. Default 5000ms.
+     */
+    reportTimeoutMs?: number;
+}
+export interface EnforceResult {
+    allowed: boolean;
+    action: 'allow' | 'block' | 'hold';
+    reason?: string;
+    delegationId?: string;
+    matchedPolicy?: string;
+}
+export interface ReportOptions {
+    status?: 'success' | 'failed' | 'error';
+    errorMessage?: string;
+    durationMs?: number;
+    isDelegated?: boolean;
+    delegatedBy?: string;
+    delegatedTo?: string;
+}
+type ToolCallInput = ToolCall | {
+    name: string;
+    args?: Record<string, unknown>;
+};
+export declare class ArmorIQSession {
+    userEmail?: string;
+    private client;
+    private toolNameParser;
+    private defaultMcpName?;
+    private validitySeconds;
+    private llm;
+    private mode;
+    private checkTimeoutMs;
+    private reportTimeoutMs;
+    private stepIndex;
+    private currentPlanHash?;
+    private currentToken?;
+    private mcpByAction;
+    private declaredTools;
+    constructor(client: ArmorIQClient, opts?: SessionOptions);
+    startPlan(toolCalls: ToolCallInput[], goal?: string): Promise<IntentToken>;
+    enforceLocal(toolName: string, toolArgs: Record<string, unknown>): EnforceResult;
+    enforceSdk(toolName: string, toolArgs: Record<string, unknown>, userEmail?: string): Promise<EnforceResult>;
+    enforce(toolName: string, toolArgs: Record<string, unknown>): Promise<EnforceResult>;
+    check(toolName: string, toolArgs: Record<string, unknown>, userEmail?: string): Promise<EnforceResult>;
+    report(toolName: string, toolArgs: Record<string, unknown>, result: unknown, opts?: ReportOptions): Promise<void>;
+    dispatch(toolName: string, toolArgs: Record<string, unknown>): Promise<unknown>;
+    private handleHold;
+    private static extractAmount;
+    private evaluateAmountThreshold;
+    reset(): void;
+    get currentTokenValue(): IntentToken | undefined;
+    get currentMode(): SessionMode;
+}
+export {};
+//# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EACL,cAAc,EAIf,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK,CAAC;AAEpD,MAAM,WAAW,cAAc;IAC7B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,KAAK,aAAa,GAAG,QAAQ,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC;AAEjF,qBAAa,cAAc;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,cAAc,CAAC,CAAS;IAChC,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,IAAI,CAAc;IAC1B,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,eAAe,CAAC,CAAS;IACjC,OAAO,CAAC,YAAY,CAAC,CAAc;IACnC,OAAO,CAAC,WAAW,CAAkC;IACrD,OAAO,CAAC,aAAa,CAA0B;gBAEnC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,cAAc;IAclD,SAAS,CAAC,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAqChF,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,aAAa;IAiI1E,UAAU,CACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,CAAC;IAmEnB,OAAO,CACX,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAAC,aAAa,CAAC;IAyEnB,KAAK,CACT,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,CAAC;IAwBnB,MAAM,CACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,MAAM,EAAE,OAAO,EACf,IAAI,CAAC,EAAE,aAAa,GACnB,OAAO,CAAC,IAAI,CAAC;IA2CV,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;YAavE,UAAU;IA8DxB,OAAO,CAAC,MAAM,CAAC,aAAa;IAW5B,OAAO,CAAC,uBAAuB;IAgC/B,KAAK,IAAI,IAAI;IAQb,IAAI,iBAAiB,IAAI,WAAW,GAAG,SAAS,CAE/C;IAED,IAAI,WAAW,IAAI,WAAW,CAE7B;CACF"}

package/dist/session.js

@@ -0,0 +1,490 @@
+"use strict";
+/**
+ * ArmorIQSession — the core primitive for framework integrations.
+ *
+ * Mirrors armoriq_sdk/session.py. Two main usage shapes:
+ *
+ * 1. Observe mode (default, local) — MCP stays on the agent side:
+ *      session.startPlan(toolCalls);
+ *      const decision = session.enforce(toolName, toolArgs);
+ *      // ... framework calls MCP directly ...
+ *      await session.report(toolName, toolArgs, result);
+ *
+ * 2. Proxy mode — routes through the Armoriq proxy:
+ *      session.startPlan(toolCalls);
+ *      return session.dispatch(toolName, toolArgs);
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ArmorIQSession = void 0;
+const models_1 = require("./models");
+const plan_builder_1 = require("./plan_builder");
+class ArmorIQSession {
+    userEmail;
+    client;
+    toolNameParser;
+    defaultMcpName;
+    validitySeconds;
+    llm;
+    mode;
+    checkTimeoutMs;
+    reportTimeoutMs;
+    stepIndex = 0;
+    currentPlanHash;
+    currentToken;
+    mcpByAction = new Map();
+    declaredTools = new Set();
+    constructor(client, opts) {
+        this.client = client;
+        const o = opts ?? {};
+        this.defaultMcpName = o.defaultMcpName;
+        this.toolNameParser = o.toolNameParser ?? (0, plan_builder_1.defaultToolNameParser)(this.defaultMcpName);
+        this.validitySeconds = o.validitySeconds ?? 3600;
+        this.llm = o.llm ?? 'agent';
+        this.mode = o.mode ?? 'local';
+        this.checkTimeoutMs = o.checkTimeoutMs ?? 10000;
+        this.reportTimeoutMs = o.reportTimeoutMs ?? 5000;
+    }
+    // ─── Plan capture ──────────────────────────────────────────────
+    async startPlan(toolCalls, goal) {
+        if (!toolCalls || toolCalls.length === 0) {
+            throw new Error('startPlan called with no tool calls.');
+        }
+        const h = (0, plan_builder_1.hashToolCalls)(toolCalls);
+        if (this.currentToken && this.currentPlanHash === h) {
+            return this.currentToken;
+        }
+        const plan = (0, plan_builder_1.buildPlanFromToolCalls)(toolCalls, goal, this.toolNameParser, this.defaultMcpName);
+        this.mcpByAction.clear();
+        this.declaredTools.clear();
+        for (const step of plan.steps) {
+            this.mcpByAction.set(step.action, step.mcp);
+            this.declaredTools.add(step.action);
+            this.declaredTools.add(`${step.mcp}__${step.action}`);
+        }
+        for (const tc of toolCalls) {
+            this.declaredTools.add(tc.name);
+        }
+        const planCapture = this.client.capturePlan(this.llm, goal ?? this.llm, plan);
+        const token = await this.client.getIntentToken(planCapture, undefined, this.validitySeconds);
+        this.currentPlanHash = h;
+        this.currentToken = token;
+        this.stepIndex = 0;
+        return token;
+    }
+    // ─── Policy enforcement ────────────────────────────────────────
+    enforceLocal(toolName, toolArgs) {
+        if (!this.currentToken) {
+            return {
+                allowed: false,
+                action: 'block',
+                reason: 'No intent token — call startPlan() first',
+            };
+        }
+        if (models_1.IntentToken.isExpired(this.currentToken)) {
+            return { allowed: false, action: 'block', reason: 'token-expired' };
+        }
+        const { mcp, action } = this.toolNameParser(toolName);
+        const inPlan = this.declaredTools.has(toolName) ||
+            this.declaredTools.has(action) ||
+            this.declaredTools.has(`${mcp}__${action}`);
+        if (!inPlan) {
+            return {
+                allowed: false,
+                action: 'block',
+                reason: `tool-not-in-plan: '${toolName}' was not declared in the captured plan`,
+            };
+        }
+        const pv = (this.currentToken.policyValidation ?? {});
+        const snapshot = (this.currentToken.policySnapshot ?? []);
+        const ruleOf = (entry) => {
+            if (!entry || typeof entry !== 'object')
+                return entry;
+            return entry.memberRule ?? entry.clientRule ?? entry.rules ?? entry;
+        };
+        let governingEntry;
+        if (Array.isArray(snapshot)) {
+            for (const entry of snapshot) {
+                const r = ruleOf(entry);
+                if (!r)
+                    continue;
+                const allowed = r.allowedTools ?? [];
+                if (!Array.isArray(allowed))
+                    continue;
+                if (allowed.includes(action) || allowed.includes(toolName)) {
+                    governingEntry = entry;
+                    break;
+                }
+                if (allowed.some((t) => t === '*' || t.endsWith('/*') || t.endsWith('*'))) {
+                    governingEntry = entry;
+                    break;
+                }
+                const target = String(entry.targetName ?? entry.policyName ?? '').toLowerCase();
+                if (mcp && target.includes(mcp.toLowerCase())) {
+                    governingEntry = entry;
+                    break;
+                }
+            }
+        }
+        const governingRule = governingEntry ? ruleOf(governingEntry) : undefined;
+        const governingPolicyName = governingEntry?.policyName;
+        const notAllowedAction = governingEntry?.defaultEnforcementAction ?? pv.default_enforcement_action ?? 'block';
+        const deniedTools = pv.denied_tools;
+        if (Array.isArray(deniedTools)) {
+            if (deniedTools.includes(toolName) || deniedTools.includes(action)) {
+                const deniedReasons = pv.denied_reasons ?? [];
+                const reasonFromBackend = deniedReasons.find((r) => r.startsWith(`${action}:`) || r.startsWith(`${toolName}:`));
+                const reason = reasonFromBackend ??
+                    (governingPolicyName
+                        ? `Tool '${action}' is denied by policy '${governingPolicyName}'`
+                        : `Tool '${action}' is denied by policy`);
+                return {
+                    allowed: false,
+                    action: notAllowedAction === 'hold' ? 'hold' : 'block',
+                    reason,
+                    matchedPolicy: governingPolicyName,
+                };
+            }
+        }
+        if (governingRule) {
+            const allowed = governingRule.allowedTools ?? [];
+            if (Array.isArray(allowed) && allowed.length > 0) {
+                const ok = allowed.includes('*') ||
+                    allowed.includes(action) ||
+                    allowed.includes(toolName);
+                if (!ok) {
+                    return {
+                        allowed: false,
+                        action: notAllowedAction === 'hold' ? 'hold' : 'block',
+                        reason: `Tool '${action}' is not in the allowed tools for policy '${governingPolicyName}'`,
+                        matchedPolicy: governingPolicyName,
+                    };
+                }
+            }
+        }
+        else if (Array.isArray(snapshot) && snapshot.length > 0) {
+            const allowedTools = pv.allowed_tools;
+            if (Array.isArray(allowedTools) && allowedTools.length === 0) {
+                return {
+                    allowed: false,
+                    action: 'block',
+                    reason: `Tool '${action}' is not allowed by any policy in scope`,
+                };
+            }
+        }
+        if (governingRule) {
+            const thresholdDecision = this.evaluateAmountThreshold(governingRule, toolArgs, action, mcp);
+            if (thresholdDecision) {
+                thresholdDecision.matchedPolicy = governingPolicyName;
+                return thresholdDecision;
+            }
+        }
+        return {
+            allowed: true,
+            action: 'allow',
+            reason: 'Allowed by local policy evaluation',
+            matchedPolicy: governingPolicyName,
+        };
+    }
+    async enforceSdk(toolName, toolArgs, userEmail) {
+        if (!this.currentToken) {
+            throw new Error(`enforceSdk("${toolName}") called before startPlan().`);
+        }
+        const { mcp, action } = this.toolNameParser(toolName);
+        const resolvedMcp = this.mcpByAction.get(action) ?? mcp;
+        const inPlan = this.declaredTools.has(toolName) ||
+            this.declaredTools.has(action) ||
+            this.declaredTools.has(`${resolvedMcp}__${action}`);
+        if (!inPlan) {
+            return {
+                allowed: false,
+                action: 'block',
+                reason: `tool-not-in-plan: '${toolName}' was not declared in the captured plan`,
+            };
+        }
+        const internals = this.client._sessionInternals();
+        try {
+            const response = await internals.httpClient.post(`${internals.backendEndpoint}/iap/sdk/enforce`, {
+                tool: action,
+                arguments: toolArgs,
+                intent_token: this.currentToken.rawToken,
+                policy_snapshot: this.currentToken.policySnapshot,
+                user_email: userEmail,
+            }, {
+                headers: { 'X-API-Key': internals.apiKey, 'Content-Type': 'application/json' },
+                timeout: this.checkTimeoutMs,
+            });
+            const data = response.data ?? {};
+            const allowed = data.allowed !== false;
+            const actionDecision = data.enforcementAction ?? (allowed ? 'allow' : 'block');
+            const matched = typeof data.matchedPolicy === 'object'
+                ? data.matchedPolicy?.name
+                : data.matchedPolicy;
+            if (actionDecision === 'hold') {
+                return this.handleHold(toolName, toolArgs, {
+                    allowed: false,
+                    action: 'hold',
+                    reason: data.reason ?? data.message,
+                    matchedPolicy: matched,
+                }, userEmail);
+            }
+            return {
+                allowed,
+                action: actionDecision,
+                reason: data.reason ?? data.message,
+                matchedPolicy: matched,
+            };
+        }
+        catch (e) {
+            console.warn(`enforceSdk() failed: ${e.message}. Allowing tool call.`);
+            return { allowed: true, action: 'allow', reason: 'enforce-unavailable' };
+        }
+    }
+    async enforce(toolName, toolArgs) {
+        if (!this.currentToken) {
+            throw new Error(`enforce("${toolName}") called before startPlan().`);
+        }
+        const { mcp, action } = this.toolNameParser(toolName);
+        const resolvedMcp = this.mcpByAction.get(action) ?? mcp;
+        const inPlan = this.declaredTools.has(toolName) ||
+            this.declaredTools.has(action) ||
+            this.declaredTools.has(`${resolvedMcp}__${action}`);
+        if (!inPlan) {
+            return {
+                allowed: false,
+                action: 'block',
+                reason: `tool-not-in-plan: '${toolName}' was not declared in the captured plan`,
+            };
+        }
+        const internals = this.client._sessionInternals();
+        try {
+            const payload = {
+                enforce_only: true,
+                mcp: resolvedMcp,
+                tool: action,
+                action,
+                params: toolArgs,
+                arguments: toolArgs,
+                intent_token: this.currentToken.rawToken,
+                plan: (this.currentToken.rawToken ?? {}).plan,
+            };
+            if (this.currentToken.policySnapshot) {
+                payload.policy_snapshot = this.currentToken.policySnapshot;
+            }
+            const response = await internals.httpClient.post(`${internals.defaultProxyEndpoint}/invoke`, payload, {
+                headers: { 'X-API-Key': internals.apiKey, 'Content-Type': 'application/json' },
+                timeout: this.checkTimeoutMs,
+            });
+            if (response.status === 403) {
+                const data = response.data ?? {};
+                return {
+                    allowed: false,
+                    action: data.action ?? 'block',
+                    reason: data.reason ?? data.message,
+                    matchedPolicy: typeof data.matched_policy === 'object'
+                        ? data.matched_policy?.name
+                        : data.matched_policy,
+                };
+            }
+            const data = response.data ?? {};
+            const rawPolicy = data.matched_policy ?? data.matchedPolicy;
+            const policyName = rawPolicy && typeof rawPolicy === 'object' ? rawPolicy.name : rawPolicy;
+            const allowedFlag = data.allowed !== false;
+            const actionDecision = data.enforcementAction ?? data.action ?? (allowedFlag ? 'allow' : 'block');
+            return {
+                allowed: allowedFlag,
+                action: actionDecision,
+                reason: data.reason,
+                delegationId: data.delegation_id,
+                matchedPolicy: policyName,
+            };
+        }
+        catch (e) {
+            console.warn(`enforce() failed: ${e.message}. Allowing tool call.`);
+            return { allowed: true, action: 'allow', reason: 'enforce-unavailable' };
+        }
+    }
+    async check(toolName, toolArgs, userEmail) {
+        if (this.mode === 'sdk') {
+            return this.enforceSdk(toolName, toolArgs, userEmail);
+        }
+        if (this.mode === 'local') {
+            const decision = this.enforceLocal(toolName, toolArgs);
+            if (decision.action === 'hold') {
+                return {
+                    ...decision,
+                    action: 'block',
+                    reason: (decision.reason ?? 'requires approval') +
+                        ' — switch ARMORIQ_MODE=proxy to enable approval workflows for this action.',
+                };
+            }
+            return decision;
+        }
+        const decision = await this.enforce(toolName, toolArgs);
+        if (decision.action !== 'hold')
+            return decision;
+        return this.handleHold(toolName, toolArgs, decision, userEmail);
+    }
+    // ─── Report / dispatch ─────────────────────────────────────────
+    async report(toolName, toolArgs, result, opts) {
+        const o = opts ?? {};
+        const { mcp, action } = this.toolNameParser(toolName);
+        const resolvedMcp = this.mcpByAction.get(action) ?? mcp;
+        const internals = this.client._sessionInternals();
+        try {
+            const token = this.currentToken;
+            const userEmail = this.userEmail ?? this.client.userEmailOverride;
+            let output = result;
+            if (typeof result === 'string')
+                output = { text: result };
+            else if (result === null || result === undefined)
+                output = {};
+            await internals.httpClient.post(`${internals.backendEndpoint}/iap/audit`, {
+                token: token?.jwtToken ?? token?.tokenId ?? 'unknown',
+                plan_id: token?.planId ?? token?.tokenId ?? 'unknown',
+                step_index: this.stepIndex,
+                action,
+                tool: action,
+                mcp: resolvedMcp,
+                input: toolArgs,
+                output,
+                status: o.status ?? 'success',
+                error_message: o.errorMessage,
+                duration_ms: o.durationMs,
+                is_delegated: o.isDelegated,
+                delegated_by: o.delegatedBy,
+                user_email: userEmail,
+                delegated_to: o.delegatedTo,
+                executed_at: new Date().toISOString(),
+            }, {
+                headers: { 'X-API-Key': internals.apiKey, 'Content-Type': 'application/json' },
+                timeout: this.reportTimeoutMs,
+            });
+        }
+        catch (e) {
+            console.warn(`report() failed: ${e.message}`);
+        }
+        this.stepIndex += 1;
+    }
+    async dispatch(toolName, toolArgs) {
+        if (!this.currentToken) {
+            throw new Error(`dispatch("${toolName}") called before startPlan().`);
+        }
+        const { mcp, action } = this.toolNameParser(toolName);
+        const resolvedMcp = this.mcpByAction.get(action) ?? mcp;
+        const result = await this.client.invoke(resolvedMcp, action, this.currentToken, toolArgs);
+        this.stepIndex += 1;
+        return result.result;
+    }
+    // ─── Helpers ────────────────────────────────────────────────────
+    async handleHold(toolName, toolArgs, holdDecision, userEmail) {
+        const internals = this.client._sessionInternals();
+        const email = userEmail ?? internals.userId ?? 'unknown@armoriq';
+        const { mcp, action } = this.toolNameParser(toolName);
+        const resolvedMcp = this.mcpByAction.get(action) ?? mcp;
+        const amount = ArmorIQSession.extractAmount(toolArgs) ?? 0;
+        try {
+            const approved = await this.client.checkApprovedDelegation(email, action, amount);
+            if (approved) {
+                try {
+                    if (approved.delegationId) {
+                        await this.client.markDelegationExecuted(email, approved.delegationId);
+                    }
+                }
+                catch {
+                    // best-effort
+                }
+                return {
+                    allowed: true,
+                    action: 'allow',
+                    reason: `Allowed by approved delegation ${approved.delegationId ?? ''}`.trim(),
+                    delegationId: approved.delegationId,
+                    matchedPolicy: holdDecision.matchedPolicy,
+                };
+            }
+        }
+        catch {
+            // best-effort
+        }
+        let delegationId;
+        try {
+            const result = await this.client.createDelegationRequest({
+                tool: action,
+                action,
+                arguments: toolArgs,
+                amount: amount || undefined,
+                requesterEmail: email,
+                domain: resolvedMcp,
+                planId: this.currentToken?.planId,
+                intentReference: this.currentToken?.tokenId,
+                merkleRoot: (this.currentToken?.rawToken ?? {}).merkle_root,
+                reason: holdDecision.reason,
+            });
+            delegationId = result.delegationId;
+        }
+        catch (e) {
+            console.warn(`createDelegationRequest failed: ${e.message}`);
+        }
+        return {
+            allowed: false,
+            action: 'hold',
+            reason: holdDecision.reason ?? 'Pending approval',
+            delegationId,
+            matchedPolicy: holdDecision.matchedPolicy,
+        };
+    }
+    static extractAmount(args) {
+        if (!args || typeof args !== 'object')
+            return undefined;
+        for (const k of ['amount', 'value', 'total', 'price', 'cost']) {
+            const v = args[k];
+            if (v === undefined || v === null)
+                continue;
+            const n = typeof v === 'number' ? v : Number(v);
+            if (Number.isFinite(n))
+                return n;
+        }
+        return undefined;
+    }
+    evaluateAmountThreshold(rule, toolArgs, action, mcp) {
+        const fin = rule.financialRule?.amountThreshold ?? rule.amountThreshold;
+        if (!fin || typeof fin !== 'object')
+            return undefined;
+        const amount = ArmorIQSession.extractAmount(toolArgs);
+        if (amount === undefined)
+            return undefined;
+        const currency = fin.currency ?? '';
+        const maxPer = fin.maxPerTransaction;
+        const reqApproval = fin.requireApprovalAbove;
+        if (typeof maxPer === 'number' && amount > maxPer) {
+            return {
+                allowed: false,
+                action: 'block',
+                reason: `Amount ${amount} ${currency} exceeds maxPerTransaction (${maxPer})`.trim(),
+            };
+        }
+        if (typeof reqApproval === 'number' && amount > reqApproval) {
+            return {
+                allowed: false,
+                action: 'hold',
+                reason: `Amount ${amount} ${currency} requires approval (threshold: ${reqApproval})`.trim(),
+            };
+        }
+        return undefined;
+    }
+    // ─── Session state ────────────────────────────────────────────
+    reset() {
+        this.currentPlanHash = undefined;
+        this.currentToken = undefined;
+        this.mcpByAction.clear();
+        this.declaredTools.clear();
+        this.stepIndex = 0;
+    }
+    get currentTokenValue() {
+        return this.currentToken;
+    }
+    get currentMode() {
+        return this.mode;
+    }
+}
+exports.ArmorIQSession = ArmorIQSession;
+//# sourceMappingURL=session.js.map

package/dist/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAGH,qCAAiD;AACjD,iDAKwB;AAyCxB,MAAa,cAAc;IAClB,SAAS,CAAU;IAClB,MAAM,CAAgB;IACtB,cAAc,CAAiB;IAC/B,cAAc,CAAU;IACxB,eAAe,CAAS;IACxB,GAAG,CAAS;IACZ,IAAI,CAAc;IAClB,cAAc,CAAS;IACvB,eAAe,CAAS;IACxB,SAAS,GAAG,CAAC,CAAC;IACd,eAAe,CAAU;IACzB,YAAY,CAAe;IAC3B,WAAW,GAAwB,IAAI,GAAG,EAAE,CAAC;IAC7C,aAAa,GAAgB,IAAI,GAAG,EAAE,CAAC;IAE/C,YAAY,MAAqB,EAAE,IAAqB;QACtD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,IAAI,IAAA,oCAAqB,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACrF,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,IAAI,IAAI,CAAC;QACjD,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC;QAC9B,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,IAAI,KAAK,CAAC;QAChD,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,IAAI,IAAI,CAAC;IACnD,CAAC;IAED,kEAAkE;IAElE,KAAK,CAAC,SAAS,CAAC,SAA0B,EAAE,IAAa;QACvD,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,CAAC,GAAG,IAAA,4BAAa,EAAC,SAAS,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,qCAAsB,EACjC,SAAS,EACT,IAAI,EACJ,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,cAAc,CACpB,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7F,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,kEAAkE;IAElE,YAAY,CAAC,QAAgB,EAAE,QAAiC;QAC9D,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,0CAA0C;aACnD,CAAC;QACJ,CAAC;QACD,IAAI,oBAAW,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACtE,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,MAAM,GACV,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;YAChC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;YAC9B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,MAAM,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,sBAAsB,QAAQ,yCAAyC;aAChF,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,IAAI,EAAE,CAAwB,CAAC;QAC7E,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,IAAI,EAAE,CAA+B,CAAC;QAExF,MAAM,MAAM,GAAG,CAAC,KAAU,EAAO,EAAE;YACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACtD,OAAO,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC;QACtE,CAAC,CAAC;QAEF,IAAI,cAA+C,CAAC;QACpD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxB,IAAI,CAAC,CAAC;oBAAE,SAAS;gBACjB,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;oBAAE,SAAS;gBACtC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC3D,cAAc,GAAG,KAAK,CAAC;oBACvB,MAAM;gBACR,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;oBAClF,cAAc,GAAG,KAAK,CAAC;oBACvB,MAAM;gBACR,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBAChF,IAAI,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBAC9C,cAAc,GAAG,KAAK,CAAC;oBACvB,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,mBAAmB,GAAuB,cAAc,EAAE,UAAU,CAAC;QAC3E,MAAM,gBAAgB,GACpB,cAAc,EAAE,wBAAwB,IAAI,EAAE,CAAC,0BAA0B,IAAI,OAAO,CAAC;QAEvF,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC;QACpC,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,IAAI,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,MAAM,aAAa,GAAa,EAAE,CAAC,cAAc,IAAI,EAAE,CAAC;gBACxD,MAAM,iBAAiB,GAAG,aAAa,CAAC,IAAI,CAC1C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,CAClE,CAAC;gBACF,MAAM,MAAM,GACV,iBAAiB;oBACjB,CAAC,mBAAmB;wBAClB,CAAC,CAAC,SAAS,MAAM,0BAA0B,mBAAmB,GAAG;wBACjE,CAAC,CAAC,SAAS,MAAM,uBAAuB,CAAC,CAAC;gBAC9C,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,gBAAgB,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;oBACtD,MAAM;oBACN,aAAa,EAAE,mBAAmB;iBACnC,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,IAAI,EAAE,CAAC;YACjD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjD,MAAM,EAAE,GACN,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;oBACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC7B,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,gBAAgB,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;wBACtD,MAAM,EAAE,SAAS,MAAM,6CAA6C,mBAAmB,GAAG;wBAC1F,aAAa,EAAE,mBAAmB;qBACnC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,YAAY,GAAG,EAAE,CAAC,aAAa,CAAC;YACtC,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7D,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,SAAS,MAAM,yCAAyC;iBACjE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,iBAAiB,GAAG,IAAI,CAAC,uBAAuB,CACpD,aAAa,EACb,QAAQ,EACR,MAAM,EACN,GAAG,CACJ,CAAC;YACF,IAAI,iBAAiB,EAAE,CAAC;gBACtB,iBAAiB,CAAC,aAAa,GAAG,mBAAmB,CAAC;gBACtD,OAAO,iBAAiB,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,oCAAoC;YAC5C,aAAa,EAAE,mBAAmB;SACnC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CACd,QAAgB,EAChB,QAAiC,EACjC,SAAkB;QAElB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,eAAe,QAAQ,+BAA+B,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QACxD,MAAM,MAAM,GACV,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;YAChC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;YAC9B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,WAAW,KAAK,MAAM,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,sBAAsB,QAAQ,yCAAyC;aAChF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,IAAI,CAC9C,GAAG,SAAS,CAAC,eAAe,kBAAkB,EAC9C;gBACE,IAAI,EAAE,MAAM;gBACZ,SAAS,EAAE,QAAQ;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ;gBACxC,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,cAAc;gBACjD,UAAU,EAAE,SAAS;aACtB,EACD;gBACE,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC9E,OAAO,EAAE,IAAI,CAAC,cAAc;aAC7B,CACF,CAAC;YACF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC;YACvC,MAAM,cAAc,GAClB,IAAI,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC1D,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;gBACpC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI;gBAC1B,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;YACzB,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC,UAAU,CACpB,QAAQ,EACR,QAAQ,EACR;oBACE,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO;oBACnC,aAAa,EAAE,OAAO;iBACvB,EACD,SAAS,CACV,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO;gBACP,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO;gBACnC,aAAa,EAAE,OAAO;aACvB,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,wBAAyB,CAAW,CAAC,OAAO,uBAAuB,CAAC,CAAC;YAClF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CACX,QAAgB,EAChB,QAAiC;QAEjC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,YAAY,QAAQ,+BAA+B,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QACxD,MAAM,MAAM,GACV,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;YAChC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC;YAC9B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,WAAW,KAAK,MAAM,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,sBAAsB,QAAQ,yCAAyC;aAChF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,OAAO,GAA4B;gBACvC,YAAY,EAAE,IAAI;gBAClB,GAAG,EAAE,WAAW;gBAChB,IAAI,EAAE,MAAM;gBACZ,MAAM;gBACN,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,QAAQ;gBACnB,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ;gBACxC,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI;aAC9C,CAAC;YACF,IAAI,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;gBACrC,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC;YAC7D,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,IAAI,CAC9C,GAAG,SAAS,CAAC,oBAAoB,SAAS,EAC1C,OAAO,EACP;gBACE,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC9E,OAAO,EAAE,IAAI,CAAC,cAAc;aAC7B,CACF,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;gBACjC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,OAAO;oBAC9B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO;oBACnC,aAAa,EACX,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ;wBACrC,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI;wBAC3B,CAAC,CAAC,IAAI,CAAC,cAAc;iBAC1B,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,aAAa,CAAC;YAC5D,MAAM,UAAU,GACd,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC;YAC3C,MAAM,cAAc,GAClB,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC7E,OAAO;gBACL,OAAO,EAAE,WAAW;gBACpB,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,IAAI,CAAC,aAAa;gBAChC,aAAa,EAAE,UAAU;aAC1B,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,qBAAsB,CAAW,CAAC,OAAO,uBAAuB,CAAC,CAAC;YAC/E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CACT,QAAgB,EAChB,QAAiC,EACjC,SAAkB;QAElB,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC/B,OAAO;oBACL,GAAG,QAAQ;oBACX,MAAM,EAAE,OAAO;oBACf,MAAM,EACJ,CAAC,QAAQ,CAAC,MAAM,IAAI,mBAAmB,CAAC;wBACxC,4EAA4E;iBAC/E,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,QAAQ,CAAC;QAChD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAClE,CAAC;IAED,kEAAkE;IAElE,KAAK,CAAC,MAAM,CACV,QAAgB,EAChB,QAAiC,EACjC,MAAe,EACf,IAAoB;QAEpB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;YAClE,IAAI,MAAM,GAAY,MAAM,CAAC;YAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;iBACrD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,GAAG,EAAE,CAAC;YAE9D,MAAM,SAAS,CAAC,UAAU,CAAC,IAAI,CAC7B,GAAG,SAAS,CAAC,eAAe,YAAY,EACxC;gBACE,KAAK,EAAE,KAAK,EAAE,QAAQ,IAAI,KAAK,EAAE,OAAO,IAAI,SAAS;gBACrD,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,KAAK,EAAE,OAAO,IAAI,SAAS;gBACrD,UAAU,EAAE,IAAI,CAAC,SAAS;gBAC1B,MAAM;gBACN,IAAI,EAAE,MAAM;gBACZ,GAAG,EAAE,WAAW;gBAChB,KAAK,EAAE,QAAQ;gBACf,MAAM;gBACN,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;gBAC7B,aAAa,EAAE,CAAC,CAAC,YAAY;gBAC7B,WAAW,EAAE,CAAC,CAAC,UAAU;gBACzB,YAAY,EAAE,CAAC,CAAC,WAAW;gBAC3B,YAAY,EAAE,CAAC,CAAC,WAAW;gBAC3B,UAAU,EAAE,SAAS;gBACrB,YAAY,EAAE,CAAC,CAAC,WAAW;gBAC3B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,EACD;gBACE,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC9E,OAAO,EAAE,IAAI,CAAC,eAAe;aAC9B,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,oBAAqB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,QAAiC;QAChE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,+BAA+B,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAED,mEAAmE;IAE3D,KAAK,CAAC,UAAU,CACtB,QAAgB,EAChB,QAAiC,EACjC,YAA2B,EAC3B,SAAkB;QAElB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,SAAS,IAAI,SAAS,CAAC,MAAM,IAAI,iBAAiB,CAAC;QACjE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QACxD,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAE3D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAClF,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC;oBACH,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;wBAC1B,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;oBACzE,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,cAAc;gBAChB,CAAC;gBACD,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,kCAAkC,QAAQ,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;oBAC9E,YAAY,EAAE,QAAQ,CAAC,YAAY;oBACnC,aAAa,EAAE,YAAY,CAAC,aAAa;iBAC1C,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QAED,IAAI,YAAgC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;gBACvD,IAAI,EAAE,MAAM;gBACZ,MAAM;gBACN,SAAS,EAAE,QAAQ;gBACnB,MAAM,EAAE,MAAM,IAAI,SAAS;gBAC3B,cAAc,EAAE,KAAK;gBACrB,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM;gBACjC,eAAe,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO;gBAC3C,UAAU,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW;gBAC3D,MAAM,EAAE,YAAY,CAAC,MAAM;aAC5B,CAAC,CAAC;YACH,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACrC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,mCAAoC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,YAAY,CAAC,MAAM,IAAI,kBAAkB;YACjD,YAAY;YACZ,aAAa,EAAE,YAAY,CAAC,aAAa;SAC1C,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,aAAa,CAAC,IAA6B;QACxD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAC9D,MAAM,CAAC,GAAI,IAAgC,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;gBAAE,SAAS;YAC5C,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,uBAAuB,CAC7B,IAAyB,EACzB,QAAiC,EACjC,MAAc,EACd,GAAW;QAEX,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,EAAE,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC;QACxE,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACtD,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,GAAG,CAAC,iBAAiB,CAAC;QACrC,MAAM,WAAW,GAAG,GAAG,CAAC,oBAAoB,CAAC;QAC7C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC;YAClD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,UAAU,MAAM,IAAI,QAAQ,+BAA+B,MAAM,GAAG,CAAC,IAAI,EAAE;aACpF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,MAAM,GAAG,WAAW,EAAE,CAAC;YAC5D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,UAAU,MAAM,IAAI,QAAQ,kCAAkC,WAAW,GAAG,CAAC,IAAI,EAAE;aAC5F,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,iEAAiE;IAEjE,KAAK;QACH,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;QACjC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAC9B,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF;AAxiBD,wCAwiBC"}

package/package.json

@@ -1,13 +1,18 @@
 {
   "name": "@armoriq/sdk-dev",
-  "version": "0.2.15",
+  "version": "0.3.1",
   "description": "ArmorIQ SDK - Build secure AI agents with cryptographic intent verification.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "bin": {
+    "armoriq": "dist/cli/index.js"
+  },
   "scripts": {
     "build": "tsc",
     "dev": "tsc --watch",
     "test": "jest",
+    "test:unit": "jest --testPathIgnorePatterns=/tests/e2e/",
+    "test:e2e": "jest tests/e2e",
     "lint": "eslint 'src/**/*.ts'",
     "format": "prettier --write \"src/**/*.ts\"",
     "prepublishOnly": "npm run build"
@@ -38,10 +43,12 @@
     "LICENSE"
   ],
   "dependencies": {
-    "axios": "^1.7.0"
+    "axios": "^1.7.0",
+    "js-yaml": "^4.1.1"
   },
   "devDependencies": {
     "@types/jest": "^29.5.0",
+    "@types/js-yaml": "^4.0.9",
     "@types/node": "^20.0.0",
     "@typescript-eslint/eslint-plugin": "^7.0.0",
     "@typescript-eslint/parser": "^7.0.0",