@armoriq/sdk-dev 0.8.7 → 0.8.9

package/dist/observability/policy-lease.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy-lease.d.ts","sourceRoot":"","sources":["../../src/observability/policy-lease.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,2DAA2D;IAC3D,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,2EAA2E;IAC3E,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,uEAAuE;IACvE,QAAQ,CAAC,6BAA6B,EAAE,OAAO,CAAC;IAChD,6EAA6E;IAC7E,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,yEAAyE;IACzE,QAAQ,CAAC,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;CACtC;AAED,oFAAoF;AACpF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,6BAA6B,EAAE,OAAO,CAAC;IAChD,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,KAAK,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAcD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,CA+C9D;AAwBD,wBAAgB,kBAAkB,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAElF;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAU3F;AAoBD,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAQ7B;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,gBAAgB,EACvB,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,GAClB,IAAI,CAEN;AAED,wBAAgB,mBAAmB,IAAI,WAAW,CAYjD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAE1D"}
+{"version":3,"file":"policy-lease.d.ts","sourceRoot":"","sources":["../../src/observability/policy-lease.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,2DAA2D;IAC3D,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,2EAA2E;IAC3E,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,uEAAuE;IACvE,QAAQ,CAAC,6BAA6B,EAAE,OAAO,CAAC;IAChD,6EAA6E;IAC7E,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,yEAAyE;IACzE,QAAQ,CAAC,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;CACtC;AAED,oFAAoF;AACpF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,6BAA6B,EAAE,OAAO,CAAC;IAChD,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,KAAK,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAcD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,WAAW,CA+C9D;AAwBD,wBAAgB,kBAAkB,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAElF;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAU3F;AAoBD,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAQ7B;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,gBAAgB,EACvB,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAgB,mBAAmB,IAAI,WAAW,CAYjD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAE1D"}

package/dist/observability/policy-lease.js

@@ -130,7 +130,7 @@ async function readStoredPolicyLease(store, binding, signal) {
     }
 }
 function writeStoredPolicyLease(store, lease, binding, signal) {
-    void withinStoreDeadline(() => store.write(serializePolicyLease(lease, binding)), signal);
+    return withinStoreDeadline(() => store.write(serializePolicyLease(lease, binding)), signal);
 }
 function fallbackPolicyLease() {
     return Object.freeze({

package/dist/observability/policy-lease.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy-lease.js","sourceRoot":"","sources":["../../src/observability/policy-lease.ts"],"names":[],"mappings":";;AAwDA,4CA+CC;AAwBD,gDAEC;AAED,oDAUC;AAoBD,sDAYC;AAED,wDAOC;AAED,kDAYC;AAED,wCAEC;AAxMD,mCAAoC;AA4CpC,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAc,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,yEAAyE;AACzE,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAErD,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,SAAgB,gBAAgB,CAAC,OAAgB;IAC/C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACnG,MAAM,KAAK,GAAG,OAAkC,CAAC;IACjD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAA0B,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAK,QAAmB,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7G,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC1F,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,qBAAqB,GAAG,KAAK,CAAC,qBAAqB,KAAK,IAAI,CAAC;IACnE,MAAM,6BAA6B,GAAG,KAAK,CAAC,6BAA6B,KAAK,IAAI,CAAC;IACnF,MAAM,cAAc,GAAG,iBAAiB,CAAC,KAAK,CAAC,cAAc,EAAE,oCAAoC,CAAC,CAAC;IACrG,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,iBAAiB,GAAG,WAAW,KAAK,OAAO,IAAI,OAAO,CAAC,cAAc,IAAI,cAAc,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACtH,MAAM,sBAAsB,GAAG,WAAW,KAAK,KAAK;WAC/C,WAAW,KAAK,UAAU;WAC1B,qBAAqB;WACrB,6BAA6B;WAC7B,iBAAiB,CAAC;IACvB,MAAM,iBAAiB,GAAG,YAAY,CAAC;QACrC,WAAW,EAAE,WAA0B;QACvC,qBAAqB;QACrB,6BAA6B;QAC7B,iBAAiB;KAClB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,WAA0B;QACvC,QAAQ,EAAE,QAAkB;QAC5B,SAAS,EAAE,MAAM;QACjB,aAAa,EAAE,IAAI;QACnB,qBAAqB;QACrB,6BAA6B;QAC7B,sBAAsB;QACtB,iBAAiB;QACjB,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,OAAe;IACxD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,YAAY,CAAC,KAKrB;IACC,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK;QAAE,OAAO,kBAAkB,CAAC;IAC3D,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU;QAAE,OAAO,uBAAuB,CAAC;IACrE,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB;QAAE,OAAO,gBAAgB,CAAC;IACvF,IAAI,CAAC,KAAK,CAAC,qBAAqB;QAAE,OAAO,+BAA+B,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,6BAA6B;QAAE,OAAO,2BAA2B,CAAC;IAC7E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAgB,kBAAkB,CAAC,eAAuB,EAAE,MAAc;IACxE,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,eAAe,KAAK,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,SAAgB,oBAAoB,CAAC,KAAkB,EAAE,OAAe;IACtE,OAAO;QACL,OAAO;QACP,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;QACxC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,6BAA6B,EAAE,KAAK,CAAC,6BAA6B;QAClE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,WAAW,EAAE,IAAI,IAAI;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAAsB,EACtB,MAAmB;IAEnB,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,CAAC,KAAS,EAAE,EAAE;YAC3B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAClD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,qBAAqB,CACzC,KAAuB,EACvB,OAAe,EACf,MAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IACrE,IAAK,MAAwD,EAAE,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAChG,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,sBAAsB,CACpC,KAAuB,EACvB,KAAkB,EAClB,OAAe,EACf,MAAmB;IAEnB,KAAK,mBAAmB,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAC5F,CAAC;AAED,SAAgB,mBAAmB;IACjC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,UAAmB;QAChC,QAAQ,EAAE,CAAC;QACX,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;QAC1C,aAAa,EAAE,KAAK;QACpB,qBAAqB,EAAE,KAAK;QAC5B,6BAA6B,EAAE,KAAK;QACpC,sBAAsB,EAAE,KAAK;QAC7B,iBAAiB,EAAE,oBAA6B;QAChD,cAAc,EAAE,IAAI;KACrB,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,cAAc,CAAC,KAAkB;IAC/C,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAChD,CAAC"}
+{"version":3,"file":"policy-lease.js","sourceRoot":"","sources":["../../src/observability/policy-lease.ts"],"names":[],"mappings":";;AAwDA,4CA+CC;AAwBD,gDAEC;AAED,oDAUC;AAoBD,sDAYC;AAED,wDAOC;AAED,kDAYC;AAED,wCAEC;AAxMD,mCAAoC;AA4CpC,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAc,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,yEAAyE;AACzE,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAErD,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,SAAgB,gBAAgB,CAAC,OAAgB;IAC/C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACnG,MAAM,KAAK,GAAG,OAAkC,CAAC;IACjD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAA0B,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAK,QAAmB,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7G,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC1F,4EAA4E;IAC5E,0EAA0E;IAC1E,MAAM,qBAAqB,GAAG,KAAK,CAAC,qBAAqB,KAAK,IAAI,CAAC;IACnE,MAAM,6BAA6B,GAAG,KAAK,CAAC,6BAA6B,KAAK,IAAI,CAAC;IACnF,MAAM,cAAc,GAAG,iBAAiB,CAAC,KAAK,CAAC,cAAc,EAAE,oCAAoC,CAAC,CAAC;IACrG,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,iBAAiB,GAAG,WAAW,KAAK,OAAO,IAAI,OAAO,CAAC,cAAc,IAAI,cAAc,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACtH,MAAM,sBAAsB,GAAG,WAAW,KAAK,KAAK;WAC/C,WAAW,KAAK,UAAU;WAC1B,qBAAqB;WACrB,6BAA6B;WAC7B,iBAAiB,CAAC;IACvB,MAAM,iBAAiB,GAAG,YAAY,CAAC;QACrC,WAAW,EAAE,WAA0B;QACvC,qBAAqB;QACrB,6BAA6B;QAC7B,iBAAiB;KAClB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,WAA0B;QACvC,QAAQ,EAAE,QAAkB;QAC5B,SAAS,EAAE,MAAM;QACjB,aAAa,EAAE,IAAI;QACnB,qBAAqB;QACrB,6BAA6B;QAC7B,sBAAsB;QACtB,iBAAiB;QACjB,cAAc;KACf,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,OAAe;IACxD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,YAAY,CAAC,KAKrB;IACC,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK;QAAE,OAAO,kBAAkB,CAAC;IAC3D,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU;QAAE,OAAO,uBAAuB,CAAC;IACrE,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB;QAAE,OAAO,gBAAgB,CAAC;IACvF,IAAI,CAAC,KAAK,CAAC,qBAAqB;QAAE,OAAO,+BAA+B,CAAC;IACzE,IAAI,CAAC,KAAK,CAAC,6BAA6B;QAAE,OAAO,2BAA2B,CAAC;IAC7E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAgB,kBAAkB,CAAC,eAAuB,EAAE,MAAc;IACxE,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,eAAe,KAAK,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,SAAgB,oBAAoB,CAAC,KAAkB,EAAE,OAAe;IACtE,OAAO;QACL,OAAO;QACP,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;QACxC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,6BAA6B,EAAE,KAAK,CAAC,6BAA6B;QAClE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,WAAW,EAAE,IAAI,IAAI;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAAsB,EACtB,MAAmB;IAEnB,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,CAAC,KAAS,EAAE,EAAE;YAC3B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAClD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,qBAAqB,CACzC,KAAuB,EACvB,OAAe,EACf,MAAmB;IAEnB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IACrE,IAAK,MAAwD,EAAE,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAChG,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,sBAAsB,CACpC,KAAuB,EACvB,KAAkB,EAClB,OAAe,EACf,MAAmB;IAEnB,OAAO,mBAAmB,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAC9F,CAAC;AAED,SAAgB,mBAAmB;IACjC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,UAAmB;QAChC,QAAQ,EAAE,CAAC;QACX,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;QAC1C,aAAa,EAAE,KAAK;QACpB,qBAAqB,EAAE,KAAK;QAC5B,6BAA6B,EAAE,KAAK;QACpC,sBAAsB,EAAE,KAAK;QAC7B,iBAAiB,EAAE,oBAA6B;QAChD,cAAc,EAAE,IAAI;KACrB,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,cAAc,CAAC,KAAkB;IAC/C,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAChD,CAAC"}

package/dist/observability/sensitive-text.d.ts

@@ -0,0 +1,8 @@
+export type Span = readonly [number, number];
+export declare function emailSpans(value: string): Span[];
+export declare function jwtSpans(value: string): Span[];
+export declare function signedUrlSpans(value: string): Span[];
+export declare function replaceSpans(value: string, spans: readonly Span[], replacement: string): string;
+export declare function containsCredential(value: string): boolean;
+export declare function containsEmail(value: string): boolean;
+//# sourceMappingURL=sensitive-text.d.ts.map

package/dist/observability/sensitive-text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive-text.d.ts","sourceRoot":"","sources":["../../src/observability/sensitive-text.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAyB7C,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,CAYhD;AAQD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,CAe9C;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,CASpD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAQ/F;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEpD"}

package/dist/observability/sensitive-text.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.emailSpans = emailSpans;
+exports.jwtSpans = jwtSpans;
+exports.signedUrlSpans = signedUrlSpans;
+exports.replaceSpans = replaceSpans;
+exports.containsCredential = containsCredential;
+exports.containsEmail = containsEmail;
+const CREDENTIAL_TOKEN = /(?:(?<![A-Za-z0-9])(?:ak|sk|pk|rk|ghp|github_pat)_[A-Za-z0-9_-]{12,}\b|-----BEGIN [A-Z0-9 ]+-----)/i;
+const WORD_CHAR = /\w/;
+const EMAIL_LOCAL_CHAR = /[A-Za-z0-9._%+-]/;
+const EMAIL_DOMAIN = /[A-Z0-9.-]+\.[A-Z]{2,}\b/iy;
+const JWT_START = /(?<![A-Za-z0-9])eyJ/gi;
+const JWT_SEGMENT_CHAR = /[A-Za-z0-9_-]/;
+const JWT_TAIL = /\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/y;
+const URL_RUN = /[^\s"'<>]+/g;
+const URL_SCHEME = /https?:\/\//i;
+const URL_SIGNATURE = /[?&](?:x-amz-signature|signature|sig|token|access_token)=/i;
+function wordBoundary(value, index) {
+    return WORD_CHAR.test(value[index - 1] ?? '') !== WORD_CHAR.test(value[index] ?? '');
+}
+function emailStart(value, from, at) {
+    let start = at;
+    while (start > from && EMAIL_LOCAL_CHAR.test(value[start - 1]))
+        start -= 1;
+    while (start < at && !wordBoundary(value, start))
+        start += 1;
+    return start;
+}
+function emailSpans(value) {
+    const spans = [];
+    let searched = 0;
+    for (let at = value.indexOf('@'); at >= 0; at = value.indexOf('@', Math.max(at + 1, searched))) {
+        const start = emailStart(value, searched, at);
+        if (start === at)
+            continue;
+        EMAIL_DOMAIN.lastIndex = at + 1;
+        if (!EMAIL_DOMAIN.test(value))
+            continue;
+        spans.push([start, EMAIL_DOMAIN.lastIndex]);
+        searched = EMAIL_DOMAIN.lastIndex;
+    }
+    return spans;
+}
+function segmentEnd(value, from) {
+    let end = from;
+    while (end < value.length && JWT_SEGMENT_CHAR.test(value[end]))
+        end += 1;
+    return end;
+}
+function jwtSpans(value) {
+    const spans = [];
+    let examined = 0;
+    JWT_START.lastIndex = 0;
+    for (let match = JWT_START.exec(value); match; match = JWT_START.exec(value)) {
+        if (match.index < examined)
+            continue;
+        const headerEnd = segmentEnd(value, match.index + 3);
+        examined = headerEnd;
+        if (headerEnd - match.index < 8)
+            continue;
+        JWT_TAIL.lastIndex = headerEnd;
+        if (!JWT_TAIL.test(value))
+            continue;
+        spans.push([match.index, JWT_TAIL.lastIndex]);
+        JWT_START.lastIndex = JWT_TAIL.lastIndex;
+    }
+    return spans;
+}
+function signedUrlSpans(value) {
+    const spans = [];
+    URL_RUN.lastIndex = 0;
+    for (let run = URL_RUN.exec(value); run; run = URL_RUN.exec(value)) {
+        const scheme = URL_SCHEME.exec(run[0]);
+        if (!scheme || !URL_SIGNATURE.test(run[0].slice(scheme.index + scheme[0].length)))
+            continue;
+        spans.push([run.index + scheme.index, run.index + run[0].length]);
+    }
+    return spans;
+}
+function replaceSpans(value, spans, replacement) {
+    let result = '';
+    let copied = 0;
+    for (const [start, end] of spans) {
+        result += value.slice(copied, start) + replacement;
+        copied = end;
+    }
+    return result + value.slice(copied);
+}
+function containsCredential(value) {
+    return CREDENTIAL_TOKEN.test(value) || jwtSpans(value).length > 0;
+}
+function containsEmail(value) {
+    return emailSpans(value).length > 0;
+}
+//# sourceMappingURL=sensitive-text.js.map

package/dist/observability/sensitive-text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive-text.js","sourceRoot":"","sources":["../../src/observability/sensitive-text.ts"],"names":[],"mappings":";;AAyBA,gCAYC;AAQD,4BAeC;AAED,wCASC;AAED,oCAQC;AAED,gDAEC;AAED,sCAEC;AAvFD,MAAM,gBAAgB,GAAG,qGAAqG,CAAC;AAE/H,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAC5C,MAAM,YAAY,GAAG,4BAA4B,CAAC;AAClD,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAC1C,MAAM,gBAAgB,GAAG,eAAe,CAAC;AACzC,MAAM,QAAQ,GAAG,qCAAqC,CAAC;AACvD,MAAM,OAAO,GAAG,aAAa,CAAC;AAC9B,MAAM,UAAU,GAAG,cAAc,CAAC;AAClC,MAAM,aAAa,GAAG,4DAA4D,CAAC;AAEnF,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,IAAY,EAAE,EAAU;IACzD,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,OAAO,KAAK,GAAG,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAC3E,OAAO,KAAK,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAC7D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,UAAU,CAAC,KAAa;IACtC,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC/F,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,EAAE;YAAE,SAAS;QAC3B,YAAY,CAAC,SAAS,GAAG,EAAE,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACxC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5C,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,IAAY;IAC7C,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,OAAO,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAE,GAAG,IAAI,CAAC,CAAC;IACzE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,QAAQ,CAAC,KAAa;IACpC,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC;IACxB,KAAK,IAAI,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7E,IAAI,KAAK,CAAC,KAAK,GAAG,QAAQ;YAAE,SAAS;QACrC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACrD,QAAQ,GAAG,SAAS,CAAC;QACrB,IAAI,SAAS,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC;YAAE,SAAS;QAC1C,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACpC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9C,SAAS,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,cAAc,CAAC,KAAa;IAC1C,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IACtB,KAAK,IAAI,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAAE,SAAS;QAC5F,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,YAAY,CAAC,KAAa,EAAE,KAAsB,EAAE,WAAmB;IACrF,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,WAAW,CAAC;QACnD,MAAM,GAAG,GAAG,CAAC;IACf,CAAC;IACD,OAAO,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,SAAgB,aAAa,CAAC,KAAa;IACzC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACtC,CAAC"}

package/dist/proxy_error.d.ts

@@ -0,0 +1,3 @@
+export declare function proxyUnreachable(url: string, error: unknown): string;
+export declare function proxyRejected(url: string, status: number, body: unknown): string;
+//# sourceMappingURL=proxy_error.d.ts.map

package/dist/proxy_error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy_error.d.ts","sourceRoot":"","sources":["../src/proxy_error.ts"],"names":[],"mappings":"AAQA,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAGpE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAGhF"}

package/dist/proxy_error.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.proxyUnreachable = proxyUnreachable;
+exports.proxyRejected = proxyRejected;
+const MAX_BODY = 300;
+function bodyText(body) {
+    if (body === undefined || body === null || body === '')
+        return '';
+    const text = typeof body === 'string' ? body.trim() : JSON.stringify(body);
+    return text.length > MAX_BODY ? `${text.slice(0, MAX_BODY)}...` : text;
+}
+function proxyUnreachable(url, error) {
+    const e = error;
+    return `could not reach proxy ${url} (${e?.message || e?.code || String(error)})`;
+}
+function proxyRejected(url, status, body) {
+    const detail = bodyText(body);
+    return `proxy ${url} returned HTTP ${status}${detail ? `: ${detail}` : ''}`;
+}
+//# sourceMappingURL=proxy_error.js.map

package/dist/proxy_error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy_error.js","sourceRoot":"","sources":["../src/proxy_error.ts"],"names":[],"mappings":";;AAQA,4CAGC;AAED,sCAGC;AAhBD,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB,SAAS,QAAQ,CAAC,IAAa;IAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAClE,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAW,EAAE,KAAc;IAC1D,MAAM,CAAC,GAAG,KAAwD,CAAC;IACnE,OAAO,yBAAyB,GAAG,KAAK,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;AACpF,CAAC;AAED,SAAgB,aAAa,CAAC,GAAW,EAAE,MAAc,EAAE,IAAa;IACtE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,SAAS,GAAG,kBAAkB,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC9E,CAAC"}

package/dist/session.d.ts

@@ -5,9 +5,9 @@
  *
  * 1. Observe mode (default, local) — MCP stays on the agent side:
  *      session.startPlan(toolCalls);
- *      const decision = session.enforce(toolName, toolArgs);
+ *      const decision = await session.enforce(toolName, toolArgs);
  *      // ... framework calls MCP directly ...
- *      await session.report(toolName, toolArgs, result);
+ *      await session.report(toolName, toolArgs, result, { toolCallId: decision.toolCallId });
  *
  * 2. Proxy mode — routes through the Armoriq proxy:
  *      session.startPlan(toolCalls);
@@ -17,7 +17,7 @@ import { ArmorIQClient } from './client';
 import { IntentToken, ToolCall } from './models';
 import { ToolNameParser } from './plan_builder';
 import { OtelSession, type ObservabilityOptions, type OtelTerminalStatus, type TelemetryContent } from './observability';
-import type { OperationInput } from './observability/otel-session';
+import type { OperationInput, PolicyResult } from './observability/otel-session';
 export type SessionMode = 'local' | 'proxy' | 'sdk';
 export interface SessionOptions {
     toolNameParser?: ToolNameParser;
@@ -107,7 +107,13 @@ export interface EnforceResult {
      * Defaults to an empty list when the backend does not supply any.
      */
     obligations?: PolicyObligation[];
+    toolCallId?: string;
+    enforcementFailed?: boolean;
+    reasonCode?: string;
 }
+export declare function isEnforcementFailure(decision: Pick<EnforceResult, 'enforcementFailed'>): boolean;
+export declare function enforcementFailureResult(): PolicyResult;
+export declare function policyResultFor(decision: EnforceResult): PolicyResult;
 /**
  * Normalize a policy-authoring default-enforcement-action value into the
  * SDK-facing terminal enum. Mirrors the backend's enforce-boundary normalization
@@ -116,7 +122,10 @@ export interface EnforceResult {
  * Anything unknown fails closed to `block`.
  */
 export declare function normalizeDefaultAction(value: unknown): 'allow' | 'block' | 'hold';
-export interface ReportOptions {
+export interface ToolCallOptions {
+    toolCallId?: string;
+}
+export interface ReportOptions extends ToolCallOptions {
     status?: 'success' | 'failed' | 'error';
     errorMessage?: string;
     durationMs?: number;
@@ -128,7 +137,7 @@ export interface ReportOptions {
     /** A framework lifecycle already owns the native OTel tool span. */
     emitOtel?: boolean;
 }
-interface PolicyTelemetryOptions {
+interface PolicyTelemetryOptions extends ToolCallOptions {
     /** Framework adapters own richer policy span context and suppress the core span. */
     emitOtel?: boolean;
 }
@@ -188,7 +197,7 @@ export declare class ArmorIQSession {
     private getIntentTokenCall;
     startPlan(toolCalls: ToolCallInput[], goal?: string): Promise<IntentToken>;
     private _startPlanImpl;
-    enforceLocal(toolName: string, toolArgs: Record<string, unknown>): EnforceResult;
+    enforceLocal(toolName: string, toolArgs: Record<string, unknown>, options?: ToolCallOptions): EnforceResult;
     private _enforceLocalImpl;
     /**
      * A server named in the tool itself wins; the plan's action map only answers
@@ -207,18 +216,18 @@ export declare class ArmorIQSession {
     /** `toolsSnapshotHash` when this client has an inventory; conmap answers `inventoryUnknown` if it holds no snapshot under it. */
     private snapshotHashField;
     private inventoryFields;
-    enforceSdk(toolName: string, toolArgs: Record<string, unknown>, userEmail?: string): Promise<EnforceResult>;
+    enforceSdk(toolName: string, toolArgs: Record<string, unknown>, userEmail?: string, options?: ToolCallOptions): Promise<EnforceResult>;
     private _enforceSdkImpl;
     /** Declare the tool definitions this session's model calls carry; the OpenAI instrumentation does this automatically. */
     declareModelTools(tools: unknown[]): void;
-    enforce(toolName: string, toolArgs: Record<string, unknown>): Promise<EnforceResult>;
+    enforce(toolName: string, toolArgs: Record<string, unknown>, options?: ToolCallOptions): Promise<EnforceResult>;
     private _enforceImpl;
     check(toolName: string, toolArgs: Record<string, unknown>, userEmail?: string, telemetry?: PolicyTelemetryOptions): Promise<EnforceResult>;
     private recordPolicyDecision;
     private trackPolicyTelemetry;
     private drainPolicyTelemetry;
     report(toolName: string, toolArgs: Record<string, unknown>, result: unknown, opts?: ReportOptions): Promise<void>;
-    dispatch(toolName: string, toolArgs: Record<string, unknown>): Promise<unknown>;
+    dispatch(toolName: string, toolArgs: Record<string, unknown>, options?: ToolCallOptions): Promise<unknown>;
     private handleHold;
     /**
      * Poll a held delegation until it is decided; non-blocking (async).

package/dist/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EACL,cAAc,EAIf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEL,WAAW,EAEX,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK,CAAC;AAEpD,MAAM,WAAW,cAAc;IAC7B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;;;;;;;;;OAeG;IACH,mBAAmB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC3C;;;;OAIG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEvD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAClC;AASD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAajF;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,SAAS,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,iBAAiB,CAAC,CAAC;IACjE,oEAAoE;IACpE,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,UAAU,sBAAsB;IAC9B,oFAAoF;IACpF,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,KAAK,aAAa,GAAG,QAAQ,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC;AAqEjF,qBAAa,cAAc;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAA4B;IACnE,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,cAAc,CAAC,CAAS;IAChC,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,IAAI,CAAc;IAG1B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,YAAY,CAAU;IAC9B,OAAO,CAAC,mBAAmB,CAAuB;IAIlD,OAAO,CAAC,mBAAmB,CAAC,CAAM;IAClC,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,eAAe,CAAC,CAAS;IACjC,OAAO,CAAC,YAAY,CAAC,CAAc;IACnC,OAAO,CAAC,WAAW,CAAkC;IACrD,OAAO,CAAC,aAAa,CAA0B;IAG/C,OAAO,CAAC,cAAc,CAA0B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,IAAI,CAA4B;IACxC,6EAA6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAGxC;IACJ,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAoC;IACjF,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqB;IAC1D;;;;;;;;;;;OAWG;IACH,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAEtB,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,cAAc;IA2CxD,gEAAgE;IAChE,IAAI,WAAW,IAAI,WAAW,GAAG,IAAI,CAEpC;IAED;;;;;OAKG;IACG,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC;YAMnC,YAAY;YASZ,kBAAkB;IAO1B,SAAS,CAAC,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;YAUlE,cAAc;IA+G5B,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,aAAa;IAMhF,OAAO,CAAC,iBAAiB;IAkJzB;;;;;OAKG;IACH,OAAO,CAAC,UAAU;IAKlB;;;;;;OAMG;IACH,iIAAiI;IACjI,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,eAAe;IAejB,UAAU,CACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,CAAC;YAMX,eAAe;IAsF7B,yHAAyH;IACzH,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI;IAInC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;YAM5E,YAAY;IA8EpB,KAAK,CACT,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,GAAE,sBAA2B,GACrC,OAAO,CAAC,aAAa,CAAC;YA4BX,oBAAoB;IAsClC,OAAO,CAAC,oBAAoB;YAOd,oBAAoB;IAM5B,MAAM,CACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,MAAM,EAAE,OAAO,EACf,IAAI,CAAC,EAAE,aAAa,GACnB,OAAO,CAAC,IAAI,CAAC;IA4EV,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;YA4CvE,UAAU;IA4FxB;;;;;;OAMG;IACG,aAAa,CACjB,YAAY,EAAE,MAAM,EACpB,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACrE,OAAO,CAAC,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IAkE/C,OAAO,CAAC,gBAAgB;YAuBV,2BAA2B;IAgDzC,OAAO,CAAC,MAAM,CAAC,aAAa;IAW5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,sBAAsB;IAoB9B;;;;;;OAMG;YACW,gBAAgB;IAY9B,wEAAwE;IACxE,OAAO,CAAC,sBAAsB;IAS9B,OAAO,CAAC,uBAAuB;IAgC/B,KAAK,IAAI,IAAI;IASb;;;;;;;;;;;;OAYG;IACG,aAAa,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA6BpE,IAAI,iBAAiB,IAAI,WAAW,GAAG,SAAS,CAE/C;IAED,IAAI,WAAW,IAAI,WAAW,CAE7B;IAED;;;;;;;OAOG;IACG,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAMzC;;;;;;;;;;OAUG;IACG,KAAK,CACT,MAAM,GAAE,kBAAyB,EACjC,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,GAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAM,GAC7C,OAAO,CAAC,IAAI,CAAC;IAYhB,wEAAwE;IAClE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAIzC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EACL,cAAc,EAIf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEL,WAAW,EAEX,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjF,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK,CAAC;AAEpD,MAAM,WAAW,cAAc;IAC7B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;;;;;;;;;;;OAeG;IACH,mBAAmB,CAAC,EAAE,OAAO,GAAG,UAAU,CAAC;IAC3C;;;;OAIG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEvD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAUD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,mBAAmB,CAAC,GAAG,OAAO,CAEhG;AAoBD,wBAAgB,wBAAwB,IAAI,YAAY,CAEvD;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,aAAa,GAAG,YAAY,CAarE;AASD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAajF;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAc,SAAQ,eAAe;IACpD,MAAM,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,SAAS,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,iBAAiB,CAAC,CAAC;IACjE,oEAAoE;IACpE,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,UAAU,sBAAuB,SAAQ,eAAe;IACtD,oFAAoF;IACpF,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,KAAK,aAAa,GAAG,QAAQ,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC;AAuEjF,qBAAa,cAAc;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAA4B;IACnE,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,cAAc,CAAC,CAAS;IAChC,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,IAAI,CAAc;IAG1B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,YAAY,CAAU;IAC9B,OAAO,CAAC,mBAAmB,CAAuB;IAIlD,OAAO,CAAC,mBAAmB,CAAC,CAAM;IAClC,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,eAAe,CAAC,CAAS;IACjC,OAAO,CAAC,YAAY,CAAC,CAAc;IACnC,OAAO,CAAC,WAAW,CAAkC;IACrD,OAAO,CAAC,aAAa,CAA0B;IAG/C,OAAO,CAAC,cAAc,CAA0B;IAChD,8EAA8E;IAC9E,OAAO,CAAC,IAAI,CAA4B;IACxC,6EAA6E;IAC7E,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAGxC;IACJ,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAoC;IACjF,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqB;IAC1D;;;;;;;;;;;OAWG;IACH,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAEtB,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,cAAc;IA2CxD,gEAAgE;IAChE,IAAI,WAAW,IAAI,WAAW,GAAG,IAAI,CAEpC;IAED;;;;;OAKG;IACG,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC;YAMnC,YAAY;YASZ,kBAAkB;IAO1B,SAAS,CAAC,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;YAUlE,cAAc;IA+G5B,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,GAAE,eAAoB,GAC5B,aAAa;IAMhB,OAAO,CAAC,iBAAiB;IAkJzB;;;;;OAKG;IACH,OAAO,CAAC,UAAU;IAKlB;;;;;;OAMG;IACH,iIAAiI;IACjI,OAAO,CAAC,iBAAiB;IASzB,OAAO,CAAC,eAAe;IAejB,UAAU,CACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC;YASX,eAAe;IAyF7B,yHAAyH;IACzH,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI;IAInC,OAAO,CACX,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,aAAa,CAAC;YAMX,YAAY;IAsFpB,KAAK,CACT,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,GAAE,sBAA2B,GACrC,OAAO,CAAC,aAAa,CAAC;YA6BX,oBAAoB;IAWlC,OAAO,CAAC,oBAAoB;YAOd,oBAAoB;IAM5B,MAAM,CACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,MAAM,EAAE,OAAO,EACf,IAAI,CAAC,EAAE,aAAa,GACnB,OAAO,CAAC,IAAI,CAAC;IA8EV,QAAQ,CACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,OAAO,CAAC;YA6CL,UAAU;IA4FxB;;;;;;OAMG;IACG,aAAa,CACjB,YAAY,EAAE,MAAM,EACpB,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GACrE,OAAO,CAAC,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IAkE/C,OAAO,CAAC,gBAAgB;YAuBV,2BAA2B;IAgDzC,OAAO,CAAC,MAAM,CAAC,aAAa;IAW5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,sBAAsB;IAoB9B;;;;;;OAMG;YACW,gBAAgB;IAY9B,wEAAwE;IACxE,OAAO,CAAC,sBAAsB;IAS9B,OAAO,CAAC,uBAAuB;IAgC/B,KAAK,IAAI,IAAI;IASb;;;;;;;;;;;;OAYG;IACG,aAAa,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA6BpE,IAAI,iBAAiB,IAAI,WAAW,GAAG,SAAS,CAE/C;IAED,IAAI,WAAW,IAAI,WAAW,CAE7B;IAED;;;;;;;OAOG;IACG,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAMzC;;;;;;;;;;OAUG;IACG,KAAK,CACT,MAAM,GAAE,kBAAyB,EACjC,WAAW,CAAC,EAAE,MAAM,EACpB,OAAO,GAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAM,GAC7C,OAAO,CAAC,IAAI,CAAC;IAYhB,wEAAwE;IAClE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B"}

package/dist/session.js

@@ -6,9 +6,9 @@
  *
  * 1. Observe mode (default, local) — MCP stays on the agent side:
  *      session.startPlan(toolCalls);
- *      const decision = session.enforce(toolName, toolArgs);
+ *      const decision = await session.enforce(toolName, toolArgs);
  *      // ... framework calls MCP directly ...
- *      await session.report(toolName, toolArgs, result);
+ *      await session.report(toolName, toolArgs, result, { toolCallId: decision.toolCallId });
  *
  * 2. Proxy mode — routes through the Armoriq proxy:
  *      session.startPlan(toolCalls);
@@ -16,6 +16,9 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ArmorIQSession = void 0;
+exports.isEnforcementFailure = isEnforcementFailure;
+exports.enforcementFailureResult = enforcementFailureResult;
+exports.policyResultFor = policyResultFor;
 exports.normalizeDefaultAction = normalizeDefaultAction;
 const crypto_1 = require("crypto");
 const tool_push_1 = require("./tool_push");
@@ -24,10 +27,52 @@ const openai_1 = require("./integrations/openai");
 const tool_registry_1 = require("./tool_registry");
 const crypto_verify_1 = require("./crypto_verify");
 const exceptions_1 = require("./exceptions");
+const proxy_error_1 = require("./proxy_error");
 const models_1 = require("./models");
 const plan_builder_1 = require("./plan_builder");
 const observability_1 = require("./observability");
 const _version_1 = require("./_version");
+function withToolCallId(decision, options) {
+    return { ...decision, toolCallId: options.toolCallId || mintToolCallId() };
+}
+function mintToolCallId() {
+    return `call-${Array.from({ length: 20 }, () => String.fromCharCode(97 + (0, crypto_1.randomInt)(26))).join('')}`;
+}
+function isEnforcementFailure(decision) {
+    return decision.enforcementFailed === true;
+}
+function textField(value) {
+    return typeof value === 'string' ? value : undefined;
+}
+function enforceEndpointFailure(response) {
+    if (response.status < 400)
+        return undefined;
+    const data = response.data ?? {};
+    return {
+        allowed: false,
+        action: 'block',
+        reason: data.reason ?? data.message ?? `enforce-rejected: HTTP ${response.status}`,
+        enforcementFailed: true,
+    };
+}
+function enforcementFailureResult() {
+    return { error: new Error('policy evaluation failed'), policyReasonCode: 'enforcement_error' };
+}
+function policyResultFor(decision) {
+    if (isEnforcementFailure(decision))
+        return enforcementFailureResult();
+    const policy = decision;
+    return {
+        decision: decision.allowed ? 'allow' : decision.action === 'hold' ? 'hold' : 'block',
+        policyName: decision.matchedPolicy,
+        ...(textField(policy.policyId) ? { policyId: textField(policy.policyId) } : {}),
+        policyVersion: textField(policy.policyVersion),
+        policySource: textField(policy.policySource),
+        policyReasonCode: decision.reasonCode ?? decision.reason,
+        defaultAction: textField(policy.defaultAction),
+        matchedRuleId: textField(policy.matchedRuleId),
+    };
+}
 function isValidUuid(value) {
     return (typeof value === 'string' &&
         /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(value));
@@ -63,7 +108,7 @@ function realIdentity(value) {
     return !value || value === MULTIUSER_PLACEHOLDER ? undefined : value;
 }
 const AUDIT_LABEL = /^[A-Za-z0-9][A-Za-z0-9._:/+-]{0,127}$/;
-const AUDIT_SECRET = /(?:\beyJ[A-Za-z0-9_-]{5,}\.|\b(?:ak|sk|pk|rk|ghp|github_pat)_[A-Za-z0-9_-]{8,}\b|bearer|secret|password|credential|private[_-]?key)/i;
+const AUDIT_SECRET = /(?:(?<![A-Za-z0-9])eyJ[A-Za-z0-9_-]{5,}\.|(?<![A-Za-z0-9])(?:ak|sk|pk|rk|ghp|github_pat)_[A-Za-z0-9_-]{8,}\b|bearer|secret|password|credential|private[_-]?key)/i;
 function safeAuditLabel(value) {
     return typeof value === 'string' && AUDIT_LABEL.test(value) && !AUDIT_SECRET.test(value)
         ? value
@@ -78,6 +123,7 @@ function auditPersistencePayload(input) {
     const action = safeAuditLabel(input.action);
     return {
         plan_id: safeAuditLabel(input.token?.planId),
+        ...(input.agentId ? { agent_id: safeAuditLabel(input.agentId) } : {}),
         step_index: Number.isFinite(input.stepIndex) && input.stepIndex >= 0 ? Math.floor(input.stepIndex) : 0,
         action,
         tool: action,
@@ -313,8 +359,8 @@ class ArmorIQSession {
         return token;
     }
     // ─── Policy enforcement ────────────────────────────────────────
-    enforceLocal(toolName, toolArgs) {
-        const decision = this._enforceLocalImpl(toolName, toolArgs);
+    enforceLocal(toolName, toolArgs, options = {}) {
+        const decision = withToolCallId(this._enforceLocalImpl(toolName, toolArgs), options);
         this.trackPolicyTelemetry(this.recordPolicyDecision(toolName, toolArgs, decision));
         return decision;
     }
@@ -487,8 +533,8 @@ class ArmorIQSession {
         }
         return fields;
     }
-    async enforceSdk(toolName, toolArgs, userEmail) {
-        const decision = await this._enforceSdkImpl(toolName, toolArgs, userEmail);
+    async enforceSdk(toolName, toolArgs, userEmail, options = {}) {
+        const decision = withToolCallId(await this._enforceSdkImpl(toolName, toolArgs, userEmail), options);
         await this.recordPolicyDecision(toolName, toolArgs, decision);
         return decision;
     }
@@ -527,6 +573,9 @@ class ArmorIQSession {
                 headers: { 'X-API-Key': internals.apiKey, 'Content-Type': 'application/json' },
                 timeout: 10000,
             });
+            const failure = enforceEndpointFailure(response);
+            if (failure)
+                return failure;
             const data = response.data ?? {};
             if (data.inventoryUnknown === true)
                 (0, tool_push_1.requestPush)(this.client);
@@ -562,6 +611,7 @@ class ArmorIQSession {
                 allowed: false,
                 action: 'block',
                 reason: `enforce-unavailable: ${e.message}`,
+                enforcementFailed: true,
             };
         }
     }
@@ -569,8 +619,8 @@ class ArmorIQSession {
     declareModelTools(tools) {
         (0, openai_1.declareModelTools)(this.client, tools);
     }
-    async enforce(toolName, toolArgs) {
-        const decision = await this._enforceImpl(toolName, toolArgs);
+    async enforce(toolName, toolArgs, options = {}) {
+        const decision = withToolCallId(await this._enforceImpl(toolName, toolArgs), options);
         await this.recordPolicyDecision(toolName, toolArgs, decision);
         return decision;
     }
@@ -591,6 +641,7 @@ class ArmorIQSession {
             };
         }
         const internals = this.client._sessionInternals();
+        const invokeUrl = `${internals.defaultProxyEndpoint}/invoke`;
         try {
             const payload = {
                 enforce_only: true,
@@ -602,12 +653,19 @@ class ArmorIQSession {
                 intent_token: this.currentToken.rawToken,
                 plan: (this.currentToken.rawToken ?? {}).plan,
             };
+            const agentId = realIdentity(internals.agentId);
+            if (agentId)
+                payload.agent_id = agentId;
             if (this.currentToken.policySnapshot) {
                 payload.policy_snapshot = this.currentToken.policySnapshot;
             }
-            const response = await internals.httpClient.post(`${internals.defaultProxyEndpoint}/invoke`, payload, {
+            const response = await internals.httpClient
+                .post(invokeUrl, payload, {
                 headers: { 'X-API-Key': internals.apiKey, 'Content-Type': 'application/json' },
                 timeout: 10000,
+            })
+                .catch((error) => {
+                throw new Error((0, proxy_error_1.proxyUnreachable)(invokeUrl, error));
             });
             const data = response.data ?? {};
             const rawPolicy = data.matched_policy ?? data.matchedPolicy;
@@ -615,10 +673,14 @@ class ArmorIQSession {
             // Fail closed: only an explicit allow from a 2xx response permits the call.
             // Any error status (403 or otherwise) or an ambiguous body blocks.
             if (response.status >= 400) {
+                const rejected = `enforce-rejected: ${(0, proxy_error_1.proxyRejected)(invokeUrl, response.status, response.data)}`;
+                if (response.status !== 403) {
+                    return { allowed: false, action: 'block', reason: rejected, enforcementFailed: true };
+                }
                 return {
                     allowed: false,
                     action: data.action ?? 'block',
-                    reason: data.reason ?? data.message ?? `enforce-rejected: HTTP ${response.status}`,
+                    reason: data.reason ?? data.message ?? rejected,
                     matchedPolicy: policyName,
                 };
             }
@@ -639,6 +701,7 @@ class ArmorIQSession {
                 allowed: false,
                 action: 'block',
                 reason: `enforce-unavailable: ${e.message}`,
+                enforcementFailed: true,
             };
         }
     }
@@ -654,6 +717,7 @@ class ArmorIQSession {
                 decision = {
                     ...decision,
                     action: 'block',
+                    reasonCode: decision.reason,
                     reason: (decision.reason ?? 'requires approval') +
                         ' — switch ARMORIQ_MODE=proxy to enable approval workflows for this action.',
                 };
@@ -665,40 +729,14 @@ class ArmorIQSession {
                 decision = await this.handleHold(toolName, toolArgs, decision, userEmail);
             }
         }
-        if (telemetry.emitOtel !== false) {
-            await this.recordPolicyDecision(toolName, toolArgs, decision);
-        }
+        if (telemetry.emitOtel === false)
+            return { ...decision, toolCallId: telemetry.toolCallId };
+        decision = withToolCallId(decision, telemetry);
+        await this.recordPolicyDecision(toolName, toolArgs, decision);
         return decision;
     }
     async recordPolicyDecision(toolName, toolArgs, decision) {
-        if (!this.otel)
-            return;
-        const policy = decision;
-        const failed = typeof decision.reason === 'string' && decision.reason.startsWith('enforce-unavailable:');
-        const policyDecision = decision.allowed
-            ? 'allow'
-            : decision.action === 'hold'
-                ? 'hold'
-                : decision.action === 'block'
-                    ? 'block'
-                    : undefined;
-        await this.otel.recordPolicy({ toolName, arguments: toolArgs }, {
-            ...(!failed && policyDecision ? { decision: policyDecision } : {}),
-            policyName: decision.matchedPolicy,
-            ...(typeof policy.policyId === 'string' ? { policyId: policy.policyId } : {}),
-            ...(typeof policy.policyVersion === 'string'
-                ? { policyVersion: policy.policyVersion }
-                : {}),
-            ...(typeof policy.policySource === 'string' ? { policySource: policy.policySource } : {}),
-            ...(typeof policy.matchedRuleId === 'string'
-                ? { matchedRuleId: policy.matchedRuleId }
-                : {}),
-            policyReasonCode: decision.reason,
-            ...(failed ? { error: new Error('policy evaluation failed') } : {}),
-            ...(typeof policy.defaultAction === 'string'
-                ? { defaultAction: policy.defaultAction }
-                : {}),
-        });
+        await this.otel?.recordPolicy({ toolName, toolCallId: decision.toolCallId, arguments: toolArgs }, policyResultFor(decision));
     }
     trackPolicyTelemetry(operation) {
         const tracked = operation
@@ -732,6 +770,7 @@ class ArmorIQSession {
                 const token = this.currentToken;
                 await internals.httpClient.post(`${internals.backendEndpoint}/iap/audit`, auditPersistencePayload({
                     token,
+                    agentId: realIdentity(internals.agentId),
                     stepIndex: this.stepIndex,
                     action,
                     mcp: resolvedMcp,
@@ -757,6 +796,7 @@ class ArmorIQSession {
             if (o.emitOtel !== false) {
                 await this.otel?.recordTool({
                     toolName,
+                    toolCallId: o.toolCallId,
                     itemOrdinal: reportItemOrdinal,
                     arguments: toolArgs,
                     operation: reportOperation,
@@ -769,7 +809,7 @@ class ArmorIQSession {
             }
         }
     }
-    async dispatch(toolName, toolArgs) {
+    async dispatch(toolName, toolArgs, options = {}) {
         let dispatchResult;
         let dispatchStatus = 'ok';
         let dispatchError;
@@ -782,6 +822,7 @@ class ArmorIQSession {
             const resolvedMcp = this.resolveMcp(toolName, mcp, action);
             nativeTool = await this.otel?.beginTool({
                 toolName: action,
+                toolCallId: options.toolCallId,
                 itemOrdinal: this.stepIndex,
                 arguments: toolArgs,
                 operation: {