@axonflow/sdk 8.3.0 → 8.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/client.d.ts +69 -0
- package/dist/cjs/client.d.ts.map +1 -1
- package/dist/cjs/client.js +193 -0
- package/dist/cjs/client.js.map +1 -1
- package/dist/cjs/errors.d.ts +30 -0
- package/dist/cjs/errors.d.ts.map +1 -1
- package/dist/cjs/errors.js +36 -1
- package/dist/cjs/errors.js.map +1 -1
- package/dist/cjs/index.d.ts +4 -2
- package/dist/cjs/index.d.ts.map +1 -1
- package/dist/cjs/index.js +18 -1
- package/dist/cjs/index.js.map +1 -1
- package/dist/cjs/pep.d.ts +176 -0
- package/dist/cjs/pep.d.ts.map +1 -0
- package/dist/cjs/pep.js +125 -0
- package/dist/cjs/pep.js.map +1 -0
- package/dist/cjs/types/connector.d.ts +37 -0
- package/dist/cjs/types/connector.d.ts.map +1 -1
- package/dist/cjs/types/connector.js.map +1 -1
- package/dist/cjs/types/decisions.d.ts +21 -0
- package/dist/cjs/types/decisions.d.ts.map +1 -1
- package/dist/cjs/types/gateway.d.ts +17 -2
- package/dist/cjs/types/gateway.d.ts.map +1 -1
- package/dist/cjs/version.d.ts +1 -1
- package/dist/cjs/version.js +1 -1
- package/dist/esm/client.d.ts +69 -0
- package/dist/esm/client.d.ts.map +1 -1
- package/dist/esm/client.js +194 -1
- package/dist/esm/client.js.map +1 -1
- package/dist/esm/errors.d.ts +30 -0
- package/dist/esm/errors.d.ts.map +1 -1
- package/dist/esm/errors.js +34 -0
- package/dist/esm/errors.js.map +1 -1
- package/dist/esm/index.d.ts +4 -2
- package/dist/esm/index.d.ts.map +1 -1
- package/dist/esm/index.js +5 -1
- package/dist/esm/index.js.map +1 -1
- package/dist/esm/pep.d.ts +176 -0
- package/dist/esm/pep.d.ts.map +1 -0
- package/dist/esm/pep.js +119 -0
- package/dist/esm/pep.js.map +1 -0
- package/dist/esm/types/connector.d.ts +37 -0
- package/dist/esm/types/connector.d.ts.map +1 -1
- package/dist/esm/types/connector.js.map +1 -1
- package/dist/esm/types/decisions.d.ts +21 -0
- package/dist/esm/types/decisions.d.ts.map +1 -1
- package/dist/esm/types/gateway.d.ts +17 -2
- package/dist/esm/types/gateway.d.ts.map +1 -1
- package/dist/esm/version.d.ts +1 -1
- package/dist/esm/version.js +1 -1
- package/package.json +1 -1
package/dist/esm/errors.d.ts
CHANGED
|
@@ -92,6 +92,36 @@ export declare class PolicyViolationError extends AxonFlowError {
|
|
|
92
92
|
export declare class AuthenticationError extends AxonFlowError {
|
|
93
93
|
constructor(message?: string);
|
|
94
94
|
}
|
|
95
|
+
/**
|
|
96
|
+
* Error thrown when a Decision Mode obligation cannot be discharged through
|
|
97
|
+
* the engine (the PEP fail-closed signal — ADR-056, epic #2563).
|
|
98
|
+
*
|
|
99
|
+
* Raised by the PEP fulfillment path ({@link AxonFlow.fulfillRequest} /
|
|
100
|
+
* {@link AxonFlow.decideAndFulfill}) when a `redact_pii` obligation named no
|
|
101
|
+
* request-phase fulfillment endpoint, named an endpoint the client will not
|
|
102
|
+
* call, advertised a content-type the PEP is not holding, the engine endpoint
|
|
103
|
+
* failed, or the engine reported the redactor did not run
|
|
104
|
+
* (`redaction_evaluated=false`).
|
|
105
|
+
*
|
|
106
|
+
* This is a FAIL-CLOSED signal: the caller MUST block the request, never
|
|
107
|
+
* forward the unredacted content. The PEP contains no local redaction path,
|
|
108
|
+
* so it cannot silently substitute its own masking.
|
|
109
|
+
*
|
|
110
|
+
* @example
|
|
111
|
+
* ```typescript
|
|
112
|
+
* try {
|
|
113
|
+
* const [content] = await axonflow.fulfillRequest(decision, statement);
|
|
114
|
+
* forward(content);
|
|
115
|
+
* } catch (e) {
|
|
116
|
+
* if (e instanceof ObligationNotFulfillableError) {
|
|
117
|
+
* block(); // fail closed — never forward the original statement
|
|
118
|
+
* }
|
|
119
|
+
* }
|
|
120
|
+
* ```
|
|
121
|
+
*/
|
|
122
|
+
export declare class ObligationNotFulfillableError extends AxonFlowError {
|
|
123
|
+
constructor(message?: string);
|
|
124
|
+
}
|
|
95
125
|
/**
|
|
96
126
|
* Error thrown when rate limit is exceeded.
|
|
97
127
|
* Includes limit, remaining count, and reset time.
|
package/dist/esm/errors.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAgB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAErC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAM/D;AAED;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,SAAQ,aAAa;gBACvC,OAAO,EAAE,MAAM;CAK5B;AAED;;;;;;;;GAQG;AACH,qBAAa,eAAgB,SAAQ,aAAa;IAChD,SAAgB,KAAK,CAAC,EAAE,KAAK,CAAC;gBAElB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAM3C;AAED;;;;;;;;GAQG;AACH,qBAAa,cAAe,SAAQ,aAAa;IAC/C,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnC,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;gBAEvB,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM;CAOpE;AAED;;;;;;;;GAQG;AACH,qBAAa,kBAAmB,SAAQ,aAAa;IACnD,SAAgB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChC,SAAgB,IAAI,CAAC,EAAE,MAAM,CAAC;gBAElB,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAO5D;AAED;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,SAAQ,aAAa;IACrD,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;gBAExB,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE;CAUrD;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAoB,SAAQ,aAAa;gBACxC,OAAO,GAAE,MAAgC;CAKtD;AAED;;;;;;;;GAQG;AACH;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,cAAe,SAAQ,aAAa;IAC/C,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,OAAO,EAAE,IAAI,CAAC;IAC9B;8EAC0E;IAC1E,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnC,SAAgB,IAAI,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAgB,OAAO,CAAC,EAAE,WAAW,CAAC;gBAGpC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,IAAI,EACb,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,WAAW,CAAA;KAAE;IAgBvE;;;;;OAKG;IACH,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE;QAChC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE;YACR,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB,CAAC;KACH,GAAG,cAAc;CAsBnB;AAED;;;;;;;;GAQG;AACH,qBAAa,YAAa,SAAQ,aAAa;IAC7C,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAEtB,SAAS,EAAE,MAAM;CAM9B;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,oBAAqB,SAAQ,aAAa;IACrD,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,eAAe,EAAE,MAAM,CAAC;IACxC,SAAgB,cAAc,CAAC,EAAE,MAAM,CAAC;gBAE5B,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM;CAY7E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,2BAA4B,SAAQ,aAAa;IAC5D,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,sBAAsB,EAAE,MAAM,CAAC;IAC/C,SAAgB,sBAAsB,EAAE,MAAM,CAAC;gBAG7C,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,sBAAsB,EAAE,MAAM,EAC9B,sBAAsB,EAAE,MAAM;CAejC;AAED;;;;;;;;GAQG;AACH,qBAAa,QAAS,SAAQ,aAAa;IACzC,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,IAAI,EAAE,MAAM,CAAC;gBAEjB,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAYjE"}
|
|
1
|
+
{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAgB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAErC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAM/D;AAED;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,SAAQ,aAAa;gBACvC,OAAO,EAAE,MAAM;CAK5B;AAED;;;;;;;;GAQG;AACH,qBAAa,eAAgB,SAAQ,aAAa;IAChD,SAAgB,KAAK,CAAC,EAAE,KAAK,CAAC;gBAElB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAM3C;AAED;;;;;;;;GAQG;AACH,qBAAa,cAAe,SAAQ,aAAa;IAC/C,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnC,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;gBAEvB,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM;CAOpE;AAED;;;;;;;;GAQG;AACH,qBAAa,kBAAmB,SAAQ,aAAa;IACnD,SAAgB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChC,SAAgB,IAAI,CAAC,EAAE,MAAM,CAAC;gBAElB,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAO5D;AAED;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,SAAQ,aAAa;IACrD,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;gBAExB,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE;CAUrD;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAoB,SAAQ,aAAa;gBACxC,OAAO,GAAE,MAAgC;CAKtD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,6BAA8B,SAAQ,aAAa;gBAClD,OAAO,GAAE,MAA4C;CAKlE;AAED;;;;;;;;GAQG;AACH;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,cAAe,SAAQ,aAAa;IAC/C,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,OAAO,EAAE,IAAI,CAAC;IAC9B;8EAC0E;IAC1E,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnC,SAAgB,IAAI,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAgB,OAAO,CAAC,EAAE,WAAW,CAAC;gBAGpC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,IAAI,EACb,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,WAAW,CAAA;KAAE;IAgBvE;;;;;OAKG;IACH,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE;QAChC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE;YACR,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB,CAAC;KACH,GAAG,cAAc;CAsBnB;AAED;;;;;;;;GAQG;AACH,qBAAa,YAAa,SAAQ,aAAa;IAC7C,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAEtB,SAAS,EAAE,MAAM;CAM9B;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,oBAAqB,SAAQ,aAAa;IACrD,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,eAAe,EAAE,MAAM,CAAC;IACxC,SAAgB,cAAc,CAAC,EAAE,MAAM,CAAC;gBAE5B,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM;CAY7E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,2BAA4B,SAAQ,aAAa;IAC5D,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,sBAAsB,EAAE,MAAM,CAAC;IAC/C,SAAgB,sBAAsB,EAAE,MAAM,CAAC;gBAG7C,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,sBAAsB,EAAE,MAAM,EAC9B,sBAAsB,EAAE,MAAM;CAejC;AAED;;;;;;;;GAQG;AACH,qBAAa,QAAS,SAAQ,aAAa;IACzC,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,IAAI,EAAE,MAAM,CAAC;gBAEjB,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAYjE"}
|
package/dist/esm/errors.js
CHANGED
|
@@ -123,6 +123,40 @@ export class AuthenticationError extends AxonFlowError {
|
|
|
123
123
|
Object.setPrototypeOf(this, AuthenticationError.prototype);
|
|
124
124
|
}
|
|
125
125
|
}
|
|
126
|
+
/**
|
|
127
|
+
* Error thrown when a Decision Mode obligation cannot be discharged through
|
|
128
|
+
* the engine (the PEP fail-closed signal — ADR-056, epic #2563).
|
|
129
|
+
*
|
|
130
|
+
* Raised by the PEP fulfillment path ({@link AxonFlow.fulfillRequest} /
|
|
131
|
+
* {@link AxonFlow.decideAndFulfill}) when a `redact_pii` obligation named no
|
|
132
|
+
* request-phase fulfillment endpoint, named an endpoint the client will not
|
|
133
|
+
* call, advertised a content-type the PEP is not holding, the engine endpoint
|
|
134
|
+
* failed, or the engine reported the redactor did not run
|
|
135
|
+
* (`redaction_evaluated=false`).
|
|
136
|
+
*
|
|
137
|
+
* This is a FAIL-CLOSED signal: the caller MUST block the request, never
|
|
138
|
+
* forward the unredacted content. The PEP contains no local redaction path,
|
|
139
|
+
* so it cannot silently substitute its own masking.
|
|
140
|
+
*
|
|
141
|
+
* @example
|
|
142
|
+
* ```typescript
|
|
143
|
+
* try {
|
|
144
|
+
* const [content] = await axonflow.fulfillRequest(decision, statement);
|
|
145
|
+
* forward(content);
|
|
146
|
+
* } catch (e) {
|
|
147
|
+
* if (e instanceof ObligationNotFulfillableError) {
|
|
148
|
+
* block(); // fail closed — never forward the original statement
|
|
149
|
+
* }
|
|
150
|
+
* }
|
|
151
|
+
* ```
|
|
152
|
+
*/
|
|
153
|
+
export class ObligationNotFulfillableError extends AxonFlowError {
|
|
154
|
+
constructor(message = 'Obligation not engine-fulfillable') {
|
|
155
|
+
super(message);
|
|
156
|
+
this.name = 'ObligationNotFulfillableError';
|
|
157
|
+
Object.setPrototypeOf(this, ObligationNotFulfillableError.prototype);
|
|
158
|
+
}
|
|
159
|
+
}
|
|
126
160
|
export class RateLimitError extends AxonFlowError {
|
|
127
161
|
constructor(limit, remaining, resetAt, extras) {
|
|
128
162
|
super(`Rate limit exceeded: ${remaining}/${limit} remaining, resets at ${resetAt.toISOString()}`, { limit, remaining, resetAt: resetAt.toISOString() });
|
package/dist/esm/errors.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAGtC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;QAC7B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,kBAAmB,SAAQ,aAAa;IACnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAgB,SAAQ,aAAa;IAGhD,YAAY,OAAe,EAAE,KAAa;QACxC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,cAAe,SAAQ,aAAa;IAI/C,YAAY,OAAe,EAAE,SAAkB,EAAE,SAAkB;QACjE,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAmB,SAAQ,aAAa;IAInD,YAAY,OAAe,EAAE,MAAe,EAAE,IAAa;QACzD,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,oBAAqB,SAAQ,aAAa;IAIrD,YAAY,WAAmB,EAAE,QAAmB;QAClD,KAAK,CAAC,8BAA8B,WAAW,EAAE,EAAE;YACjD,WAAW;YACX,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAoB,SAAQ,aAAa;IACpD,YAAY,UAAkB,uBAAuB;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC;CACF;AA6BD,MAAM,OAAO,cAAe,SAAQ,aAAa;IAU/C,YACE,KAAa,EACb,SAAiB,EACjB,OAAa,EACb,MAAqE;QAErE,KAAK,CACH,wBAAwB,SAAS,IAAI,KAAK,yBAAyB,OAAO,CAAC,WAAW,EAAE,EAAE,EAC1F,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CACrD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,MAAM,EAAE,SAAS,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,MAAM,EAAE,IAAI,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC;QAC/B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,gBAAgB,CAAC,QAYvB;QACC,MAAM,OAAO,GAA4B,QAAQ,CAAC,OAAO;YACvD,CAAC,CAAC;gBACE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE;gBACjC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE;gBACvC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE;gBAC9C,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE;aACvC;YACH,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,EAAE,QAAQ,CAAC,SAAS,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,EAAE;YACvF,SAAS,EAAE,QAAQ,CAAC,UAAU;YAC9B,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO;SACR,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,0DAA0D;YAC1D,4DAA4D;YAC5D,qBAAqB;YACpB,GAA2B,CAAC,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC;QACxD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,YAAa,SAAQ,aAAa;IAG7C,YAAY,SAAiB;QAC3B,KAAK,CAAC,2BAA2B,SAAS,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,oBAAqB,SAAQ,aAAa;IAKrD,YAAY,MAAc,EAAE,eAAuB,EAAE,cAAuB;QAC1E,KAAK,CAAC,6BAA6B,MAAM,sBAAsB,eAAe,EAAE,EAAE;YAChF,MAAM;YACN,eAAe;YACf,cAAc;SACf,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,2BAA4B,SAAQ,aAAa;IAM5D,YACE,OAAe,EACf,UAAkB,EAClB,MAAc,EACd,sBAA8B,EAC9B,sBAA8B;QAE9B,KAAK,CAAC,OAAO,EAAE;YACb,UAAU;YACV,MAAM;YACN,sBAAsB;YACtB,sBAAsB;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;QACrD,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;QACrD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACrE,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,QAAS,SAAQ,aAAa;IAKzC,YAAY,UAAkB,EAAE,UAAkB,EAAE,IAAY;QAC9D,KAAK,CAAC,cAAc,UAAU,IAAI,UAAU,MAAM,IAAI,EAAE,EAAE;YACxD,UAAU;YACV,UAAU;YACV,IAAI;SACL,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACF"}
|
|
1
|
+
{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAGtC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;QAC7B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,kBAAmB,SAAQ,aAAa;IACnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAgB,SAAQ,aAAa;IAGhD,YAAY,OAAe,EAAE,KAAa;QACxC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,cAAe,SAAQ,aAAa;IAI/C,YAAY,OAAe,EAAE,SAAkB,EAAE,SAAkB;QACjE,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAmB,SAAQ,aAAa;IAInD,YAAY,OAAe,EAAE,MAAe,EAAE,IAAa;QACzD,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,oBAAqB,SAAQ,aAAa;IAIrD,YAAY,WAAmB,EAAE,QAAmB;QAClD,KAAK,CAAC,8BAA8B,WAAW,EAAE,EAAE;YACjD,WAAW;YACX,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAoB,SAAQ,aAAa;IACpD,YAAY,UAAkB,uBAAuB;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,OAAO,6BAA8B,SAAQ,aAAa;IAC9D,YAAY,UAAkB,mCAAmC;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,6BAA6B,CAAC,SAAS,CAAC,CAAC;IACvE,CAAC;CACF;AA6BD,MAAM,OAAO,cAAe,SAAQ,aAAa;IAU/C,YACE,KAAa,EACb,SAAiB,EACjB,OAAa,EACb,MAAqE;QAErE,KAAK,CACH,wBAAwB,SAAS,IAAI,KAAK,yBAAyB,OAAO,CAAC,WAAW,EAAE,EAAE,EAC1F,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CACrD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,MAAM,EAAE,SAAS,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,MAAM,EAAE,IAAI,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC;QAC/B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,gBAAgB,CAAC,QAYvB;QACC,MAAM,OAAO,GAA4B,QAAQ,CAAC,OAAO;YACvD,CAAC,CAAC;gBACE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE;gBACjC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE;gBACvC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE;gBAC9C,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE;aACvC;YACH,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,EAAE,QAAQ,CAAC,SAAS,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,EAAE;YACvF,SAAS,EAAE,QAAQ,CAAC,UAAU;YAC9B,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO;SACR,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,0DAA0D;YAC1D,4DAA4D;YAC5D,qBAAqB;YACpB,GAA2B,CAAC,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC;QACxD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,YAAa,SAAQ,aAAa;IAG7C,YAAY,SAAiB;QAC3B,KAAK,CAAC,2BAA2B,SAAS,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,oBAAqB,SAAQ,aAAa;IAKrD,YAAY,MAAc,EAAE,eAAuB,EAAE,cAAuB;QAC1E,KAAK,CAAC,6BAA6B,MAAM,sBAAsB,eAAe,EAAE,EAAE;YAChF,MAAM;YACN,eAAe;YACf,cAAc;SACf,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,2BAA4B,SAAQ,aAAa;IAM5D,YACE,OAAe,EACf,UAAkB,EAClB,MAAc,EACd,sBAA8B,EAC9B,sBAA8B;QAE9B,KAAK,CAAC,OAAO,EAAE;YACb,UAAU;YACV,MAAM;YACN,sBAAsB;YACtB,sBAAsB;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;QACrD,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;QACrD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACrE,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,QAAS,SAAQ,aAAa;IAKzC,YAAY,UAAkB,EAAE,UAAkB,EAAE,IAAY;QAC9D,KAAK,CAAC,cAAc,UAAU,IAAI,UAAU,MAAM,IAAI,EAAE,EAAE;YACxD,UAAU;YACV,UAAU;YACV,IAAI;SACL,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACF"}
|
package/dist/esm/index.d.ts
CHANGED
|
@@ -51,9 +51,11 @@
|
|
|
51
51
|
export { AxonFlow } from './client';
|
|
52
52
|
export { wasRedacted } from './types/connector';
|
|
53
53
|
export type { ConnectorResponse, ConnectorMetadata, ConnectorInstallRequest, PolicyMatchInfo, DynamicPolicyInfo, DynamicPolicyMatch, ConnectorHealthStatus, PolicyInfo, MCPPolicyInfo, ExfiltrationCheckInfo, MCPCheckInputOptions, MCPCheckInputResponse, MCPCheckOutputOptions, MCPCheckOutputResponse, MCPExplainPolicy, } from './types/connector';
|
|
54
|
-
export { AxonFlowError, ConfigurationError, ConnectionError, ConnectorError, PlanExecutionError, VersionConflictError, PolicyViolationError, AuthenticationError, RateLimitError, TimeoutError, IdempotencyKeyMismatchError, APIError, } from './errors';
|
|
54
|
+
export { AxonFlowError, ConfigurationError, ConnectionError, ConnectorError, PlanExecutionError, VersionConflictError, PolicyViolationError, AuthenticationError, RateLimitError, TimeoutError, IdempotencyKeyMismatchError, APIError, ObligationNotFulfillableError, } from './errors';
|
|
55
55
|
export type { UpgradeInfo } from './errors';
|
|
56
|
-
export
|
|
56
|
+
export { OBLIGATION_REDACT_PII, PHASE_REQUEST, PHASE_RESPONSE, CONTENT_TYPE_TEXT, VERDICT_ALLOW, VERDICT_DENY, VERDICT_NEEDS_APPROVAL, REQUEST_REDACTION_PATH, RESPONSE_REDACTION_PATH, DECIDE_PATH, hasRequestRedaction, endpointPathMatches, } from './pep';
|
|
57
|
+
export type { DecideRequest, DecideResponse, Obligation, ObligationFulfillment, DecisionCallerIdentity, DecisionTarget, } from './pep';
|
|
58
|
+
export type { AxonFlowConfig, AIRequest, GovernanceRequest, GovernanceResponse, PolicyDecision, Violation, Policy, PolicyRule, TokenUsage, RateLimitInfo, PolicyApprovalResult, PolicyApprovalOptions, AuditResult, AuditOptions, AuditSearchRequest, AuditQueryOptions, AuditLogEntry, AuditSearchResponse, TransferBasis, AuditToolCallRequest, AuditToolCallResponse, CircuitBreakerCircuit, CircuitBreakerStatusResponse, CircuitBreakerHistoryEntry, CircuitBreakerHistoryResponse, CircuitBreakerConfig, CircuitBreakerConfigUpdate, RequestType, ProxyPolicyInfo, PolicyInfoLegacyProxyShape, CodeArtifact, HealthStatus, PlatformCapability, SDKCompatibility, DecisionExplanation, ExplainPolicy, ExplainRule, DecisionSummary, ListDecisionsOptions, } from './types';
|
|
57
59
|
export type { PolicyCategory, PolicyTier, PolicyAction, PolicySeverity, OverrideAction, StaticPolicy, CreateStaticPolicyRequest, UpdateStaticPolicyRequest, ListStaticPoliciesOptions, PolicyOverride, CreatePolicyOverrideRequest, DynamicPolicy, DynamicPolicyAction, DynamicPolicyCondition, CreateDynamicPolicyRequest, UpdateDynamicPolicyRequest, ListDynamicPoliciesOptions, TestPatternResult, TestPatternMatch, PolicyVersion, EffectivePoliciesOptions, EffectivePoliciesResponse, PaginatedResponse, } from './types/policies';
|
|
58
60
|
export { CATEGORY_MEDIA_SAFETY, CATEGORY_MEDIA_BIOMETRIC, CATEGORY_MEDIA_DOCUMENT, CATEGORY_MEDIA_PII, } from './types/policies';
|
|
59
61
|
export type { PlanStep, PlanResponse, PlanExecutionResponse, PlanExecutionStatus, PolicyMatch, PolicyEvaluationResult, ExecutionMode, GeneratePlanOptions, CancelPlanResponse, UpdatePlanRequest, UpdatePlanResponse, PlanVersionEntry, PlanVersionsResponse, ResumePlanResponse, RollbackPlanResponse, } from './types/planning';
|
package/dist/esm/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGpC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EAKrB,UAAU,EACV,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EAKtB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,QAAQ,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGpC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EAKrB,UAAU,EACV,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EAKtB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,QAAQ,EACR,6BAA6B,GAC9B,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAK5C,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,OAAO,CAAC;AACf,YAAY,EACV,aAAa,EACb,cAAc,EACd,UAAU,EACV,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,GACf,MAAM,OAAO,CAAC;AAGf,YAAY,EACV,cAAc,EACd,SAAS,EACT,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,SAAS,EACT,MAAM,EACN,UAAU,EAEV,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,WAAW,EACX,YAAY,EAEZ,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EAEnB,aAAa,EAEb,oBAAoB,EACpB,qBAAqB,EAErB,qBAAqB,EACrB,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,oBAAoB,EACpB,0BAA0B,EAE1B,WAAW,EAKX,eAAe,EACf,0BAA0B,EAC1B,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAEhB,mBAAmB,EACnB,aAAa,EACb,WAAW,EACX,eAAe,EACf,oBAAoB,GACrB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACV,cAAc,EACd,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,YAAY,EACZ,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,2BAA2B,EAC3B,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,QAAQ,EACR,YAAY,EACZ,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,EACX,sBAAsB,EACtB,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,eAAe,EACf,UAAU,EACV,QAAQ,EACR,2BAA2B,EAC3B,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,cAAc,GACf,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAGlC,YAAY,EACV,WAAW,EACX,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,MAAM,EACN,eAAe,EACf,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,uBAAuB,EACvB,WAAW,EACX,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAG/B,YAAY,EACV,cAAc,EACd,cAAc,EACd,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EAExB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,wBAAwB,EACxB,uBAAuB,EAEvB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EAEpB,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACrE,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAGpF,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAG9B,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,kCAAkC,GACnC,MAAM,eAAe,CAAC;AAGvB,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,SAAS,GACV,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,4BAA4B,EAC5B,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrD,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG/D,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAGhD,YAAY,EACV,yBAAyB,EACzB,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,OAAO,EACP,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,EACtB,UAAU,EACV,eAAe,EACf,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,eAAe,QAAQ,CAAC"}
|
package/dist/esm/index.js
CHANGED
|
@@ -52,7 +52,11 @@ export { AxonFlow } from './client.js';
|
|
|
52
52
|
// Export connector utilities
|
|
53
53
|
export { wasRedacted } from './types/connector.js';
|
|
54
54
|
// Export error classes for proper error handling
|
|
55
|
-
export { AxonFlowError, ConfigurationError, ConnectionError, ConnectorError, PlanExecutionError, VersionConflictError, PolicyViolationError, AuthenticationError, RateLimitError, TimeoutError, IdempotencyKeyMismatchError, APIError, } from './errors.js';
|
|
55
|
+
export { AxonFlowError, ConfigurationError, ConnectionError, ConnectorError, PlanExecutionError, VersionConflictError, PolicyViolationError, AuthenticationError, RateLimitError, TimeoutError, IdempotencyKeyMismatchError, APIError, ObligationNotFulfillableError, } from './errors.js';
|
|
56
|
+
// Export Decision Mode PEP contract: decide -> fulfill -> forward
|
|
57
|
+
// (ADR-056, epic #2563). Types, constants, and the pure helpers a PEP uses
|
|
58
|
+
// to branch on a verdict before fulfilling.
|
|
59
|
+
export { OBLIGATION_REDACT_PII, PHASE_REQUEST, PHASE_RESPONSE, CONTENT_TYPE_TEXT, VERDICT_ALLOW, VERDICT_DENY, VERDICT_NEEDS_APPROVAL, REQUEST_REDACTION_PATH, RESPONSE_REDACTION_PATH, DECIDE_PATH, hasRequestRedaction, endpointPathMatches, } from './pep.js';
|
|
56
60
|
export { CATEGORY_MEDIA_SAFETY, CATEGORY_MEDIA_BIOMETRIC, CATEGORY_MEDIA_DOCUMENT, CATEGORY_MEDIA_PII, } from './types/policies.js';
|
|
57
61
|
export { WorkflowHelpers } from './types/workflows.js';
|
|
58
62
|
// Export GovernedTool adapter (framework-agnostic tool governance)
|
package/dist/esm/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,6BAA6B;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA6BhD,iDAAiD;AACjD,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,QAAQ,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,6BAA6B;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA6BhD,iDAAiD;AACjD,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,QAAQ,EACR,6BAA6B,GAC9B,MAAM,UAAU,CAAC;AAGlB,kEAAkE;AAClE,2EAA2E;AAC3E,4CAA4C;AAC5C,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,OAAO,CAAC;AA0Ff,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAkH1B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,mEAAmE;AACnE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGrE,2BAA2B;AAC3B,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AA6C9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAsDrD,4CAA4C;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,iBAAiB;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,iCAAiC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,eAAe,QAAQ,CAAC"}
|
|
@@ -0,0 +1,176 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Decision Mode PEP (Policy Enforcement Point) contract: types, constants,
|
|
3
|
+
* and pure helpers.
|
|
4
|
+
*
|
|
5
|
+
* A PEP follows one path: **decide → fulfill → forward** (ADR-056, epic #2563).
|
|
6
|
+
*
|
|
7
|
+
* - decide: ask the PDP (`POST /api/v1/decide`) for a verdict on a request.
|
|
8
|
+
* - fulfill: for every obligation the verdict carries, call the ENGINE
|
|
9
|
+
* endpoint named in the obligation's `fulfillment` block to obtain
|
|
10
|
+
* engine-redacted content.
|
|
11
|
+
* - forward: forward the (possibly redacted) content, or block, per verdict.
|
|
12
|
+
*
|
|
13
|
+
* The structural guarantee #2563 demands: a PEP built on this SDK contains NO
|
|
14
|
+
* redaction logic of its own. The ONLY way it discharges a `redact_pii`
|
|
15
|
+
* obligation is by POSTing the source content to the engine endpoint the
|
|
16
|
+
* obligation names ({@link AxonFlow.fulfillRequest} /
|
|
17
|
+
* {@link AxonFlow.decideAndFulfill}) and forwarding what the engine returns. If
|
|
18
|
+
* an obligation arrives without a fulfillable engine endpoint — or the engine
|
|
19
|
+
* reports the redactor did not run — the helper throws
|
|
20
|
+
* {@link ObligationNotFulfillableError} and the caller MUST fail closed
|
|
21
|
+
* (block), never forward unredacted.
|
|
22
|
+
*
|
|
23
|
+
* This mirrors `platform/shared/pep` (the Go reference PEP) and the Python SDK
|
|
24
|
+
* so the SDK PEP cannot reimplement redaction the way a hand-rolled regex would.
|
|
25
|
+
*/
|
|
26
|
+
/**
|
|
27
|
+
* The obligation a PEP discharges by replacing request content with
|
|
28
|
+
* engine-redacted content before forwarding.
|
|
29
|
+
*/
|
|
30
|
+
export declare const OBLIGATION_REDACT_PII = "redact_pii";
|
|
31
|
+
/**
|
|
32
|
+
* Fulfillment phases. `/decide` runs pre-call so it only emits request-phase
|
|
33
|
+
* obligations; the response-phase value is part of the contract for PEP helpers
|
|
34
|
+
* that fan out to the response-redaction endpoint after the backend call.
|
|
35
|
+
*/
|
|
36
|
+
export declare const PHASE_REQUEST = "request";
|
|
37
|
+
export declare const PHASE_RESPONSE = "response";
|
|
38
|
+
/**
|
|
39
|
+
* The only redaction content-type wired today. The contract is content-type
|
|
40
|
+
* agnostic — a PEP holding content of a type not advertised by an obligation's
|
|
41
|
+
* `content_types` must fail closed rather than forward it unredacted.
|
|
42
|
+
*/
|
|
43
|
+
export declare const CONTENT_TYPE_TEXT = "text/plain";
|
|
44
|
+
export declare const VERDICT_ALLOW = "allow";
|
|
45
|
+
export declare const VERDICT_DENY = "deny";
|
|
46
|
+
export declare const VERDICT_NEEDS_APPROVAL = "needs_approval";
|
|
47
|
+
export declare const REQUEST_REDACTION_PATH = "/api/v1/mcp/check-input";
|
|
48
|
+
export declare const RESPONSE_REDACTION_PATH = "/api/v1/mcp/check-output";
|
|
49
|
+
export declare const DECIDE_PATH = "/api/v1/decide";
|
|
50
|
+
/**
|
|
51
|
+
* Names the engine call a PEP makes to discharge an obligation.
|
|
52
|
+
*
|
|
53
|
+
* Fulfillment is a property of the contract, not of PEP-author discipline: a
|
|
54
|
+
* conforming PEP POSTs the obligation's source content to `endpoint` and
|
|
55
|
+
* forwards the engine-redacted content the endpoint returns.
|
|
56
|
+
*
|
|
57
|
+
* `content_types` advertises the mime-types the endpoint's detectors can handle
|
|
58
|
+
* today. The contract is content-type-agnostic: a PEP holding content of a type
|
|
59
|
+
* NOT in this list must fail closed rather than forward it unredacted. Mirrors
|
|
60
|
+
* platform ObligationFulfillment (snake_case wire shape).
|
|
61
|
+
*/
|
|
62
|
+
export interface ObligationFulfillment {
|
|
63
|
+
/** Engine path, e.g. "/api/v1/mcp/check-input". */
|
|
64
|
+
endpoint: string;
|
|
65
|
+
/** HTTP method, e.g. "POST". */
|
|
66
|
+
method?: string;
|
|
67
|
+
/** "request" | "response". */
|
|
68
|
+
phase: string;
|
|
69
|
+
/** Mime-types the endpoint can redact today. */
|
|
70
|
+
content_types?: string[];
|
|
71
|
+
}
|
|
72
|
+
/**
|
|
73
|
+
* A self-describing, engine-fulfillable PEP requirement on an allow verdict.
|
|
74
|
+
*
|
|
75
|
+
* Obligations are SELF-DESCRIBING and ENGINE-FULFILLABLE (ADR-056, #2563):
|
|
76
|
+
* `/decide` is a pure PDP and never mutates content, so a `redact_pii`
|
|
77
|
+
* obligation is not "go redact this yourself with your own patterns" — it is
|
|
78
|
+
* "call the AxonFlow engine endpoint named in `fulfillment` to obtain
|
|
79
|
+
* engine-redacted content." There is no other blessed way to satisfy it;
|
|
80
|
+
* client-side redaction is forbidden. Mirrors platform DecisionObligation
|
|
81
|
+
* (snake_case wire shape).
|
|
82
|
+
*/
|
|
83
|
+
export interface Obligation {
|
|
84
|
+
/** Obligation type, e.g. "redact_pii". */
|
|
85
|
+
type: string;
|
|
86
|
+
/** Human-readable detail for audit logs. */
|
|
87
|
+
detail?: string;
|
|
88
|
+
/** How a PEP discharges this obligation via the engine. */
|
|
89
|
+
fulfillment?: ObligationFulfillment;
|
|
90
|
+
}
|
|
91
|
+
/**
|
|
92
|
+
* Gateway-asserted identity for a /decide request.
|
|
93
|
+
*
|
|
94
|
+
* org_id / tenant_id are optional in the body — the auth-derived identity is
|
|
95
|
+
* authoritative; body-supplied values are accepted only when they match.
|
|
96
|
+
* Mirrors platform DecisionCallerIdentity (snake_case wire shape).
|
|
97
|
+
*/
|
|
98
|
+
export interface DecisionCallerIdentity {
|
|
99
|
+
gateway_id?: string;
|
|
100
|
+
org_id?: string;
|
|
101
|
+
tenant_id?: string;
|
|
102
|
+
}
|
|
103
|
+
/**
|
|
104
|
+
* Describes what the gateway is about to call. Mirrors platform DecisionTarget
|
|
105
|
+
* (snake_case wire shape).
|
|
106
|
+
*/
|
|
107
|
+
export interface DecisionTarget {
|
|
108
|
+
/** "llm" | "tool" | "agent". */
|
|
109
|
+
type?: string;
|
|
110
|
+
/** When type=llm. */
|
|
111
|
+
model?: string;
|
|
112
|
+
/** When type=llm. */
|
|
113
|
+
provider?: string;
|
|
114
|
+
/** When type=tool. */
|
|
115
|
+
tool?: string;
|
|
116
|
+
}
|
|
117
|
+
/**
|
|
118
|
+
* Inbound contract for `POST /api/v1/decide`. Mirrors platform DecideRequest
|
|
119
|
+
* (snake_case wire shape).
|
|
120
|
+
*
|
|
121
|
+
* Required: `stage` (one of "llm" | "tool" | "agent") and `query`.
|
|
122
|
+
* `user_token` is optional — a PEP that supplies one gets the validated-user
|
|
123
|
+
* record on the audit row; one that doesn't gets a synthesized service user.
|
|
124
|
+
*/
|
|
125
|
+
export interface DecideRequest {
|
|
126
|
+
stage: string;
|
|
127
|
+
query: string;
|
|
128
|
+
caller_identity?: DecisionCallerIdentity;
|
|
129
|
+
target?: DecisionTarget;
|
|
130
|
+
user_token?: string;
|
|
131
|
+
context?: Record<string, unknown>;
|
|
132
|
+
}
|
|
133
|
+
/**
|
|
134
|
+
* PDP verdict returned by `POST /api/v1/decide`. Mirrors platform DecideResponse
|
|
135
|
+
* (snake_case wire shape).
|
|
136
|
+
*
|
|
137
|
+
* `obligations` is normalized to an array by the client so PEP code can iterate
|
|
138
|
+
* without a null-check. `trace_id` is W3C-format (32 lowercase hex chars).
|
|
139
|
+
* `error` is set on the deny path when the request was malformed.
|
|
140
|
+
*/
|
|
141
|
+
export interface DecideResponse {
|
|
142
|
+
verdict: string;
|
|
143
|
+
decision_id?: string;
|
|
144
|
+
trace_id?: string;
|
|
145
|
+
reasons?: string[];
|
|
146
|
+
obligations: Obligation[];
|
|
147
|
+
evaluated_policies?: string[];
|
|
148
|
+
stage?: string;
|
|
149
|
+
expires_at?: string;
|
|
150
|
+
error?: string;
|
|
151
|
+
}
|
|
152
|
+
/**
|
|
153
|
+
* Reports whether any obligation requires request-phase PII redaction.
|
|
154
|
+
*
|
|
155
|
+
* Exposed so a PEP can branch ("does this verdict carry work for me?") before
|
|
156
|
+
* calling {@link AxonFlow.fulfillRequest}.
|
|
157
|
+
*/
|
|
158
|
+
export declare function hasRequestRedaction(obligations: Obligation[]): boolean;
|
|
159
|
+
/**
|
|
160
|
+
* Returns a shallow copy of `obj` with every key whose value is `undefined`
|
|
161
|
+
* removed, so a serialized `DecideRequest` omits empty optional fields
|
|
162
|
+
* (`user_token`, `context`) on the wire per the spec. Nested objects
|
|
163
|
+
* (`caller_identity`, `target`) are likewise stripped of undefined keys; a
|
|
164
|
+
* nested object that becomes empty is dropped entirely.
|
|
165
|
+
*/
|
|
166
|
+
export declare function stripUndefined(obj: object): Record<string, unknown>;
|
|
167
|
+
/**
|
|
168
|
+
* Reports whether `endpoint` is the expected engine path.
|
|
169
|
+
*
|
|
170
|
+
* Tolerates an absolute URL whose path component matches (some PDPs return a
|
|
171
|
+
* fully-qualified obligation endpoint); a blank endpoint never matches. Refusing
|
|
172
|
+
* any other endpoint stops a malformed verdict from steering the PEP into
|
|
173
|
+
* calling an arbitrary URL.
|
|
174
|
+
*/
|
|
175
|
+
export declare function endpointPathMatches(endpoint: string, expected: string): boolean;
|
|
176
|
+
//# sourceMappingURL=pep.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"pep.d.ts","sourceRoot":"","sources":["../../src/pep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH;;;GAGG;AACH,eAAO,MAAM,qBAAqB,eAAe,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,aAAa,YAAY,CAAC;AACvC,eAAO,MAAM,cAAc,aAAa,CAAC;AAEzC;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAG9C,eAAO,MAAM,aAAa,UAAU,CAAC;AACrC,eAAO,MAAM,YAAY,SAAS,CAAC;AACnC,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AAKvD,eAAO,MAAM,sBAAsB,4BAA4B,CAAC;AAChE,eAAO,MAAM,uBAAuB,6BAA6B,CAAC;AAElE,eAAO,MAAM,WAAW,mBAAmB,CAAC;AAE5C;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,qBAAqB;IACpC,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,UAAU;IACzB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,qBAAqB,CAAC;CACrC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,gCAAgC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,CAOtE;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBnE;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAoB/E"}
|
package/dist/esm/pep.js
ADDED
|
@@ -0,0 +1,119 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Decision Mode PEP (Policy Enforcement Point) contract: types, constants,
|
|
3
|
+
* and pure helpers.
|
|
4
|
+
*
|
|
5
|
+
* A PEP follows one path: **decide → fulfill → forward** (ADR-056, epic #2563).
|
|
6
|
+
*
|
|
7
|
+
* - decide: ask the PDP (`POST /api/v1/decide`) for a verdict on a request.
|
|
8
|
+
* - fulfill: for every obligation the verdict carries, call the ENGINE
|
|
9
|
+
* endpoint named in the obligation's `fulfillment` block to obtain
|
|
10
|
+
* engine-redacted content.
|
|
11
|
+
* - forward: forward the (possibly redacted) content, or block, per verdict.
|
|
12
|
+
*
|
|
13
|
+
* The structural guarantee #2563 demands: a PEP built on this SDK contains NO
|
|
14
|
+
* redaction logic of its own. The ONLY way it discharges a `redact_pii`
|
|
15
|
+
* obligation is by POSTing the source content to the engine endpoint the
|
|
16
|
+
* obligation names ({@link AxonFlow.fulfillRequest} /
|
|
17
|
+
* {@link AxonFlow.decideAndFulfill}) and forwarding what the engine returns. If
|
|
18
|
+
* an obligation arrives without a fulfillable engine endpoint — or the engine
|
|
19
|
+
* reports the redactor did not run — the helper throws
|
|
20
|
+
* {@link ObligationNotFulfillableError} and the caller MUST fail closed
|
|
21
|
+
* (block), never forward unredacted.
|
|
22
|
+
*
|
|
23
|
+
* This mirrors `platform/shared/pep` (the Go reference PEP) and the Python SDK
|
|
24
|
+
* so the SDK PEP cannot reimplement redaction the way a hand-rolled regex would.
|
|
25
|
+
*/
|
|
26
|
+
// --- Obligation contract constants (mirror platform/agent decision handler) ---
|
|
27
|
+
/**
|
|
28
|
+
* The obligation a PEP discharges by replacing request content with
|
|
29
|
+
* engine-redacted content before forwarding.
|
|
30
|
+
*/
|
|
31
|
+
export const OBLIGATION_REDACT_PII = 'redact_pii';
|
|
32
|
+
/**
|
|
33
|
+
* Fulfillment phases. `/decide` runs pre-call so it only emits request-phase
|
|
34
|
+
* obligations; the response-phase value is part of the contract for PEP helpers
|
|
35
|
+
* that fan out to the response-redaction endpoint after the backend call.
|
|
36
|
+
*/
|
|
37
|
+
export const PHASE_REQUEST = 'request';
|
|
38
|
+
export const PHASE_RESPONSE = 'response';
|
|
39
|
+
/**
|
|
40
|
+
* The only redaction content-type wired today. The contract is content-type
|
|
41
|
+
* agnostic — a PEP holding content of a type not advertised by an obligation's
|
|
42
|
+
* `content_types` must fail closed rather than forward it unredacted.
|
|
43
|
+
*/
|
|
44
|
+
export const CONTENT_TYPE_TEXT = 'text/plain';
|
|
45
|
+
// --- Verdict values returned by the PDP ---
|
|
46
|
+
export const VERDICT_ALLOW = 'allow';
|
|
47
|
+
export const VERDICT_DENY = 'deny';
|
|
48
|
+
export const VERDICT_NEEDS_APPROVAL = 'needs_approval';
|
|
49
|
+
// --- Engine endpoints a PEP will POST content to for fulfillment ---
|
|
50
|
+
// An obligation whose fulfillment endpoint is not one of these is rejected — a
|
|
51
|
+
// PEP must not be steered into calling an arbitrary URL by a malformed verdict.
|
|
52
|
+
export const REQUEST_REDACTION_PATH = '/api/v1/mcp/check-input';
|
|
53
|
+
export const RESPONSE_REDACTION_PATH = '/api/v1/mcp/check-output';
|
|
54
|
+
export const DECIDE_PATH = '/api/v1/decide';
|
|
55
|
+
/**
|
|
56
|
+
* Reports whether any obligation requires request-phase PII redaction.
|
|
57
|
+
*
|
|
58
|
+
* Exposed so a PEP can branch ("does this verdict carry work for me?") before
|
|
59
|
+
* calling {@link AxonFlow.fulfillRequest}.
|
|
60
|
+
*/
|
|
61
|
+
export function hasRequestRedaction(obligations) {
|
|
62
|
+
return obligations.some(o => o.type === OBLIGATION_REDACT_PII &&
|
|
63
|
+
o.fulfillment != null &&
|
|
64
|
+
o.fulfillment.phase === PHASE_REQUEST);
|
|
65
|
+
}
|
|
66
|
+
/**
|
|
67
|
+
* Returns a shallow copy of `obj` with every key whose value is `undefined`
|
|
68
|
+
* removed, so a serialized `DecideRequest` omits empty optional fields
|
|
69
|
+
* (`user_token`, `context`) on the wire per the spec. Nested objects
|
|
70
|
+
* (`caller_identity`, `target`) are likewise stripped of undefined keys; a
|
|
71
|
+
* nested object that becomes empty is dropped entirely.
|
|
72
|
+
*/
|
|
73
|
+
export function stripUndefined(obj) {
|
|
74
|
+
const out = {};
|
|
75
|
+
for (const [k, v] of Object.entries(obj)) {
|
|
76
|
+
if (v === undefined) {
|
|
77
|
+
continue;
|
|
78
|
+
}
|
|
79
|
+
if (v !== null && typeof v === 'object' && !Array.isArray(v)) {
|
|
80
|
+
const nested = stripUndefined(v);
|
|
81
|
+
if (Object.keys(nested).length > 0) {
|
|
82
|
+
out[k] = nested;
|
|
83
|
+
}
|
|
84
|
+
continue;
|
|
85
|
+
}
|
|
86
|
+
out[k] = v;
|
|
87
|
+
}
|
|
88
|
+
return out;
|
|
89
|
+
}
|
|
90
|
+
/**
|
|
91
|
+
* Reports whether `endpoint` is the expected engine path.
|
|
92
|
+
*
|
|
93
|
+
* Tolerates an absolute URL whose path component matches (some PDPs return a
|
|
94
|
+
* fully-qualified obligation endpoint); a blank endpoint never matches. Refusing
|
|
95
|
+
* any other endpoint stops a malformed verdict from steering the PEP into
|
|
96
|
+
* calling an arbitrary URL.
|
|
97
|
+
*/
|
|
98
|
+
export function endpointPathMatches(endpoint, expected) {
|
|
99
|
+
const e = (endpoint || '').trim();
|
|
100
|
+
if (e === expected) {
|
|
101
|
+
return true;
|
|
102
|
+
}
|
|
103
|
+
const marker = '://';
|
|
104
|
+
const idx = e.indexOf(marker);
|
|
105
|
+
if (idx >= 0) {
|
|
106
|
+
const rest = e.slice(idx + marker.length);
|
|
107
|
+
const slash = rest.indexOf('/');
|
|
108
|
+
if (slash >= 0) {
|
|
109
|
+
let path = rest.slice(slash);
|
|
110
|
+
const q = path.indexOf('?');
|
|
111
|
+
if (q >= 0) {
|
|
112
|
+
path = path.slice(0, q);
|
|
113
|
+
}
|
|
114
|
+
return path === expected;
|
|
115
|
+
}
|
|
116
|
+
}
|
|
117
|
+
return false;
|
|
118
|
+
}
|
|
119
|
+
//# sourceMappingURL=pep.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"pep.js","sourceRoot":"","sources":["../../src/pep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAElD;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AACvC,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;AAEzC;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAE9C,6CAA6C;AAC7C,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AACrC,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;AACnC,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AAEvD,sEAAsE;AACtE,+EAA+E;AAC/E,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AAChE,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAElE,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAgB,CAAC;AA8G5C;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAyB;IAC3D,OAAO,WAAW,CAAC,IAAI,CACrB,CAAC,CAAC,EAAE,CACF,CAAC,CAAC,IAAI,KAAK,qBAAqB;QAChC,CAAC,CAAC,WAAW,IAAI,IAAI;QACrB,CAAC,CAAC,WAAW,CAAC,KAAK,KAAK,aAAa,CACxC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,MAAM,MAAM,GAAG,cAAc,CAAC,CAA4B,CAAC,CAAC;YAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;YAClB,CAAC;YACD,SAAS;QACX,CAAC;QACD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,QAAgB;IACpE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC;IACrB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACX,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,CAAC;YACD,OAAO,IAAI,KAAK,QAAQ,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -144,6 +144,15 @@ export interface MCPCheckInputOptions {
|
|
|
144
144
|
statement: string;
|
|
145
145
|
parameters?: Record<string, any>;
|
|
146
146
|
operation?: string;
|
|
147
|
+
/**
|
|
148
|
+
* Selects the request-redaction detector (ADR-056 / #2563 addendum).
|
|
149
|
+
* Maps to the snake_case `content_type` field on the wire. `undefined`
|
|
150
|
+
* defaults to "text/plain" server-side. A content_type with no registered
|
|
151
|
+
* detector is rejected (415) so a PEP fulfilling a `redact_pii` obligation
|
|
152
|
+
* fails closed rather than forwarding content the engine cannot govern.
|
|
153
|
+
* Source of truth: platform/agent MCPCheckInputRequest.
|
|
154
|
+
*/
|
|
155
|
+
contentType?: string;
|
|
147
156
|
}
|
|
148
157
|
/**
|
|
149
158
|
* Per-policy explainability record on MCP responses (snake_case wire shape).
|
|
@@ -202,6 +211,24 @@ export interface MCPCheckInputResponse {
|
|
|
202
211
|
policy_matches?: MCPExplainPolicy[];
|
|
203
212
|
override_available?: boolean;
|
|
204
213
|
override_existing_id?: string;
|
|
214
|
+
/**
|
|
215
|
+
* Request-phase redaction (ADR-056 / #2563). When an allowed statement
|
|
216
|
+
* carries PII under a redact (not block) policy, the engine returns the
|
|
217
|
+
* masked statement here so a PEP can forward redacted content WITHOUT
|
|
218
|
+
* hand-rolling its own patterns — this is what makes a /decide `redact_pii`
|
|
219
|
+
* obligation engine-fulfillable. Source of truth: platform/agent
|
|
220
|
+
* MCPCheckInputResponse.
|
|
221
|
+
*/
|
|
222
|
+
redacted?: boolean;
|
|
223
|
+
redacted_statement?: string;
|
|
224
|
+
/**
|
|
225
|
+
* Reports whether the redaction detector actually RAN (regardless of whether
|
|
226
|
+
* it masked anything). A PEP fulfilling a `redact_pii` obligation MUST fail
|
|
227
|
+
* closed when this is `false`/absent — it means the redactor did not run
|
|
228
|
+
* (detection disabled), so `redacted:false` would otherwise be
|
|
229
|
+
* indistinguishable from "looked, found nothing" (#2563 B1).
|
|
230
|
+
*/
|
|
231
|
+
redaction_evaluated?: boolean;
|
|
205
232
|
}
|
|
206
233
|
/**
|
|
207
234
|
* Options for validating MCP response data against policies.
|
|
@@ -244,6 +271,16 @@ export interface MCPCheckOutputResponse {
|
|
|
244
271
|
*/
|
|
245
272
|
decision_id?: string;
|
|
246
273
|
policy_matches?: MCPExplainPolicy[];
|
|
274
|
+
/**
|
|
275
|
+
* Mirrors the check-input field for the response phase (ADR-056 / #2563).
|
|
276
|
+
* A PEP fulfilling a response-phase `redact_pii` obligation MUST fail closed
|
|
277
|
+
* when this is `false`/absent — the redactor did not run, so absence of
|
|
278
|
+
* redacted output cannot be trusted as "nothing to mask". The agent does not
|
|
279
|
+
* populate this on every path today; default-absent keeps a PEP fail-closed
|
|
280
|
+
* when the platform predates the field. Source of truth: platform/agent
|
|
281
|
+
* MCPCheckOutputResponse.
|
|
282
|
+
*/
|
|
283
|
+
redaction_evaluated?: boolean;
|
|
247
284
|
}
|
|
248
285
|
/**
|
|
249
286
|
* Returns true if the connector response had any fields redacted by policy evaluation.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../../../src/types/connector.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC,kDAAkD;IAClD,kBAAkB,CAAC,EAAE,qBAAqB,CAAC;IAC3C,qDAAqD;IACrD,mBAAmB,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAED;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,UAAU,CAAC;AAEvC;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,qCAAqC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IACvC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACxC,6CAA6C;IAC7C,sBAAsB,EAAE,OAAO,CAAC;IAChC,+CAA+C;IAC/C,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,GAAG,CAAC;IACV,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gEAAgE;IAChE,WAAW,CAAC,EAAE,aAAa,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../../../src/types/connector.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC,kDAAkD;IAClD,kBAAkB,CAAC,EAAE,qBAAqB,CAAC;IAC3C,qDAAqD;IACrD,mBAAmB,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAED;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,UAAU,CAAC;AAEvC;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,qCAAqC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IACvC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACxC,6CAA6C;IAC7C,sBAAsB,EAAE,OAAO,CAAC;IAChC,+CAA+C;IAC/C,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,GAAG,CAAC;IACV,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gEAAgE;IAChE,WAAW,CAAC,EAAE,aAAa,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACpD,sDAAsD;IACtD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oDAAoD;IACpD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACpD,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACpC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IAC1C,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACpC;;;;;;;;OAQG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAEhE;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"connector.js","sourceRoot":"","sources":["../../../src/types/connector.ts"],"names":[],"mappings":"AAAA;;GAEG;
|
|
1
|
+
{"version":3,"file":"connector.js","sourceRoot":"","sources":["../../../src/types/connector.ts"],"names":[],"mappings":"AAAA;;GAEG;AAySH;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,QAA2B;IACrD,OAAO,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC;AACpC,CAAC"}
|
|
@@ -44,6 +44,18 @@ export interface DecisionExplanation {
|
|
|
44
44
|
historicalHitCountSession: number;
|
|
45
45
|
policySourceLink?: string;
|
|
46
46
|
toolSignature?: string;
|
|
47
|
+
/**
|
|
48
|
+
* The FULL sanitized request context the PEP attached to the decision
|
|
49
|
+
* (canonical lower_snake_case keys, string values), read from the audit
|
|
50
|
+
* row's `policy_details->'context'`. Unlike {@link DecisionSummary} (which
|
|
51
|
+
* truncates to 5 keys), explain returns every persisted key up to the
|
|
52
|
+
* platform's 10-key cap (e.g. `x_ai_agent`, `x_session_id`,
|
|
53
|
+
* `x_leader_identity`, `x-bukuwarung-*`). Absent for pre-v8.4.0 audit rows.
|
|
54
|
+
* (platform #2509 / epic #2508)
|
|
55
|
+
*/
|
|
56
|
+
context?: Record<string, string>;
|
|
57
|
+
/** True when the agent dropped surplus context keys at write time. */
|
|
58
|
+
contextTruncated?: boolean;
|
|
47
59
|
}
|
|
48
60
|
/**
|
|
49
61
|
* Slim 5-field row returned by {@link AxonFlowClient.listDecisions}.
|
|
@@ -65,6 +77,15 @@ export interface DecisionSummary {
|
|
|
65
77
|
decision: string;
|
|
66
78
|
policyId?: string;
|
|
67
79
|
toolSignature?: string;
|
|
80
|
+
/**
|
|
81
|
+
* The sanitized request context the PEP attached to the decision (canonical
|
|
82
|
+
* lower_snake_case keys, string values), surfaced from the audit row's
|
|
83
|
+
* `policy_details->'context'`. The list summary is truncated by the platform
|
|
84
|
+
* to the 5 most-correlated keys; the full map is available via
|
|
85
|
+
* {@link AxonFlowClient.explainDecision}. Absent for pre-v8.4.0 audit rows or
|
|
86
|
+
* decisions with no context. (platform #2509 / epic #2508)
|
|
87
|
+
*/
|
|
88
|
+
context?: Record<string, string>;
|
|
68
89
|
}
|
|
69
90
|
/**
|
|
70
91
|
* Optional filters for {@link AxonFlowClient.listDecisions}.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"decisions.d.ts","sourceRoot":"","sources":["../../../src/types/decisions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,uDAAuD;AACvD,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,aAAa,EAAE,aAAa,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,yBAAyB,EAAE,MAAM,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"decisions.d.ts","sourceRoot":"","sources":["../../../src/types/decisions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,uDAAuD;AACvD,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,aAAa,EAAE,aAAa,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,yBAAyB,EAAE,MAAM,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}
|