@axonflow/sdk 8.3.0 → 8.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (51) hide show
  1. package/dist/cjs/client.d.ts +69 -0
  2. package/dist/cjs/client.d.ts.map +1 -1
  3. package/dist/cjs/client.js +193 -0
  4. package/dist/cjs/client.js.map +1 -1
  5. package/dist/cjs/errors.d.ts +30 -0
  6. package/dist/cjs/errors.d.ts.map +1 -1
  7. package/dist/cjs/errors.js +36 -1
  8. package/dist/cjs/errors.js.map +1 -1
  9. package/dist/cjs/index.d.ts +4 -2
  10. package/dist/cjs/index.d.ts.map +1 -1
  11. package/dist/cjs/index.js +18 -1
  12. package/dist/cjs/index.js.map +1 -1
  13. package/dist/cjs/pep.d.ts +176 -0
  14. package/dist/cjs/pep.d.ts.map +1 -0
  15. package/dist/cjs/pep.js +125 -0
  16. package/dist/cjs/pep.js.map +1 -0
  17. package/dist/cjs/types/connector.d.ts +37 -0
  18. package/dist/cjs/types/connector.d.ts.map +1 -1
  19. package/dist/cjs/types/connector.js.map +1 -1
  20. package/dist/cjs/types/decisions.d.ts +21 -0
  21. package/dist/cjs/types/decisions.d.ts.map +1 -1
  22. package/dist/cjs/types/gateway.d.ts +17 -2
  23. package/dist/cjs/types/gateway.d.ts.map +1 -1
  24. package/dist/cjs/version.d.ts +1 -1
  25. package/dist/cjs/version.js +1 -1
  26. package/dist/esm/client.d.ts +69 -0
  27. package/dist/esm/client.d.ts.map +1 -1
  28. package/dist/esm/client.js +194 -1
  29. package/dist/esm/client.js.map +1 -1
  30. package/dist/esm/errors.d.ts +30 -0
  31. package/dist/esm/errors.d.ts.map +1 -1
  32. package/dist/esm/errors.js +34 -0
  33. package/dist/esm/errors.js.map +1 -1
  34. package/dist/esm/index.d.ts +4 -2
  35. package/dist/esm/index.d.ts.map +1 -1
  36. package/dist/esm/index.js +5 -1
  37. package/dist/esm/index.js.map +1 -1
  38. package/dist/esm/pep.d.ts +176 -0
  39. package/dist/esm/pep.d.ts.map +1 -0
  40. package/dist/esm/pep.js +119 -0
  41. package/dist/esm/pep.js.map +1 -0
  42. package/dist/esm/types/connector.d.ts +37 -0
  43. package/dist/esm/types/connector.d.ts.map +1 -1
  44. package/dist/esm/types/connector.js.map +1 -1
  45. package/dist/esm/types/decisions.d.ts +21 -0
  46. package/dist/esm/types/decisions.d.ts.map +1 -1
  47. package/dist/esm/types/gateway.d.ts +17 -2
  48. package/dist/esm/types/gateway.d.ts.map +1 -1
  49. package/dist/esm/version.d.ts +1 -1
  50. package/dist/esm/version.js +1 -1
  51. package/package.json +1 -1
@@ -92,6 +92,36 @@ export declare class PolicyViolationError extends AxonFlowError {
92
92
  export declare class AuthenticationError extends AxonFlowError {
93
93
  constructor(message?: string);
94
94
  }
95
+ /**
96
+ * Error thrown when a Decision Mode obligation cannot be discharged through
97
+ * the engine (the PEP fail-closed signal — ADR-056, epic #2563).
98
+ *
99
+ * Raised by the PEP fulfillment path ({@link AxonFlow.fulfillRequest} /
100
+ * {@link AxonFlow.decideAndFulfill}) when a `redact_pii` obligation named no
101
+ * request-phase fulfillment endpoint, named an endpoint the client will not
102
+ * call, advertised a content-type the PEP is not holding, the engine endpoint
103
+ * failed, or the engine reported the redactor did not run
104
+ * (`redaction_evaluated=false`).
105
+ *
106
+ * This is a FAIL-CLOSED signal: the caller MUST block the request, never
107
+ * forward the unredacted content. The PEP contains no local redaction path,
108
+ * so it cannot silently substitute its own masking.
109
+ *
110
+ * @example
111
+ * ```typescript
112
+ * try {
113
+ * const [content] = await axonflow.fulfillRequest(decision, statement);
114
+ * forward(content);
115
+ * } catch (e) {
116
+ * if (e instanceof ObligationNotFulfillableError) {
117
+ * block(); // fail closed — never forward the original statement
118
+ * }
119
+ * }
120
+ * ```
121
+ */
122
+ export declare class ObligationNotFulfillableError extends AxonFlowError {
123
+ constructor(message?: string);
124
+ }
95
125
  /**
96
126
  * Error thrown when rate limit is exceeded.
97
127
  * Includes limit, remaining count, and reset time.
@@ -1 +1 @@
1
- {"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAgB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAErC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAM/D;AAED;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,SAAQ,aAAa;gBACvC,OAAO,EAAE,MAAM;CAK5B;AAED;;;;;;;;GAQG;AACH,qBAAa,eAAgB,SAAQ,aAAa;IAChD,SAAgB,KAAK,CAAC,EAAE,KAAK,CAAC;gBAElB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAM3C;AAED;;;;;;;;GAQG;AACH,qBAAa,cAAe,SAAQ,aAAa;IAC/C,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnC,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;gBAEvB,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM;CAOpE;AAED;;;;;;;;GAQG;AACH,qBAAa,kBAAmB,SAAQ,aAAa;IACnD,SAAgB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChC,SAAgB,IAAI,CAAC,EAAE,MAAM,CAAC;gBAElB,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAO5D;AAED;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,SAAQ,aAAa;IACrD,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;gBAExB,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE;CAUrD;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAoB,SAAQ,aAAa;gBACxC,OAAO,GAAE,MAAgC;CAKtD;AAED;;;;;;;;GAQG;AACH;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,cAAe,SAAQ,aAAa;IAC/C,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,OAAO,EAAE,IAAI,CAAC;IAC9B;8EAC0E;IAC1E,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnC,SAAgB,IAAI,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAgB,OAAO,CAAC,EAAE,WAAW,CAAC;gBAGpC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,IAAI,EACb,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,WAAW,CAAA;KAAE;IAgBvE;;;;;OAKG;IACH,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE;QAChC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE;YACR,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB,CAAC;KACH,GAAG,cAAc;CAsBnB;AAED;;;;;;;;GAQG;AACH,qBAAa,YAAa,SAAQ,aAAa;IAC7C,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAEtB,SAAS,EAAE,MAAM;CAM9B;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,oBAAqB,SAAQ,aAAa;IACrD,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,eAAe,EAAE,MAAM,CAAC;IACxC,SAAgB,cAAc,CAAC,EAAE,MAAM,CAAC;gBAE5B,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM;CAY7E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,2BAA4B,SAAQ,aAAa;IAC5D,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,sBAAsB,EAAE,MAAM,CAAC;IAC/C,SAAgB,sBAAsB,EAAE,MAAM,CAAC;gBAG7C,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,sBAAsB,EAAE,MAAM,EAC9B,sBAAsB,EAAE,MAAM;CAejC;AAED;;;;;;;;GAQG;AACH,qBAAa,QAAS,SAAQ,aAAa;IACzC,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,IAAI,EAAE,MAAM,CAAC;gBAEjB,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAYjE"}
1
+ {"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,SAAgB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAErC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAM/D;AAED;;;;;;;;;GASG;AACH,qBAAa,kBAAmB,SAAQ,aAAa;gBACvC,OAAO,EAAE,MAAM;CAK5B;AAED;;;;;;;;GAQG;AACH,qBAAa,eAAgB,SAAQ,aAAa;IAChD,SAAgB,KAAK,CAAC,EAAE,KAAK,CAAC;gBAElB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAM3C;AAED;;;;;;;;GAQG;AACH,qBAAa,cAAe,SAAQ,aAAa;IAC/C,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnC,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;gBAEvB,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM;CAOpE;AAED;;;;;;;;GAQG;AACH,qBAAa,kBAAmB,SAAQ,aAAa;IACnD,SAAgB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChC,SAAgB,IAAI,CAAC,EAAE,MAAM,CAAC;gBAElB,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAO5D;AAED;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,SAAQ,aAAa;IACrD,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;gBAExB,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE;CAUrD;AAED;;;;;;;;GAQG;AACH,qBAAa,mBAAoB,SAAQ,aAAa;gBACxC,OAAO,GAAE,MAAgC;CAKtD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,6BAA8B,SAAQ,aAAa;gBAClD,OAAO,GAAE,MAA4C;CAKlE;AAED;;;;;;;;GAQG;AACH;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,cAAe,SAAQ,aAAa;IAC/C,SAAgB,KAAK,EAAE,MAAM,CAAC;IAC9B,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,OAAO,EAAE,IAAI,CAAC;IAC9B;8EAC0E;IAC1E,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnC,SAAgB,IAAI,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAgB,OAAO,CAAC,EAAE,WAAW,CAAC;gBAGpC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,IAAI,EACb,MAAM,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,WAAW,CAAA;KAAE;IAgBvE;;;;;OAKG;IACH,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE;QAChC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE;YACR,IAAI,CAAC,EAAE,MAAM,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB,CAAC;KACH,GAAG,cAAc;CAsBnB;AAED;;;;;;;;GAQG;AACH,qBAAa,YAAa,SAAQ,aAAa;IAC7C,SAAgB,SAAS,EAAE,MAAM,CAAC;gBAEtB,SAAS,EAAE,MAAM;CAM9B;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,oBAAqB,SAAQ,aAAa;IACrD,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,eAAe,EAAE,MAAM,CAAC;IACxC,SAAgB,cAAc,CAAC,EAAE,MAAM,CAAC;gBAE5B,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM;CAY7E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,2BAA4B,SAAQ,aAAa;IAC5D,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,sBAAsB,EAAE,MAAM,CAAC;IAC/C,SAAgB,sBAAsB,EAAE,MAAM,CAAC;gBAG7C,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,sBAAsB,EAAE,MAAM,EAC9B,sBAAsB,EAAE,MAAM;CAejC;AAED;;;;;;;;GAQG;AACH,qBAAa,QAAS,SAAQ,aAAa;IACzC,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,UAAU,EAAE,MAAM,CAAC;IACnC,SAAgB,IAAI,EAAE,MAAM,CAAC;gBAEjB,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAYjE"}
@@ -123,6 +123,40 @@ export class AuthenticationError extends AxonFlowError {
123
123
  Object.setPrototypeOf(this, AuthenticationError.prototype);
124
124
  }
125
125
  }
126
+ /**
127
+ * Error thrown when a Decision Mode obligation cannot be discharged through
128
+ * the engine (the PEP fail-closed signal — ADR-056, epic #2563).
129
+ *
130
+ * Raised by the PEP fulfillment path ({@link AxonFlow.fulfillRequest} /
131
+ * {@link AxonFlow.decideAndFulfill}) when a `redact_pii` obligation named no
132
+ * request-phase fulfillment endpoint, named an endpoint the client will not
133
+ * call, advertised a content-type the PEP is not holding, the engine endpoint
134
+ * failed, or the engine reported the redactor did not run
135
+ * (`redaction_evaluated=false`).
136
+ *
137
+ * This is a FAIL-CLOSED signal: the caller MUST block the request, never
138
+ * forward the unredacted content. The PEP contains no local redaction path,
139
+ * so it cannot silently substitute its own masking.
140
+ *
141
+ * @example
142
+ * ```typescript
143
+ * try {
144
+ * const [content] = await axonflow.fulfillRequest(decision, statement);
145
+ * forward(content);
146
+ * } catch (e) {
147
+ * if (e instanceof ObligationNotFulfillableError) {
148
+ * block(); // fail closed — never forward the original statement
149
+ * }
150
+ * }
151
+ * ```
152
+ */
153
+ export class ObligationNotFulfillableError extends AxonFlowError {
154
+ constructor(message = 'Obligation not engine-fulfillable') {
155
+ super(message);
156
+ this.name = 'ObligationNotFulfillableError';
157
+ Object.setPrototypeOf(this, ObligationNotFulfillableError.prototype);
158
+ }
159
+ }
126
160
  export class RateLimitError extends AxonFlowError {
127
161
  constructor(limit, remaining, resetAt, extras) {
128
162
  super(`Rate limit exceeded: ${remaining}/${limit} remaining, resets at ${resetAt.toISOString()}`, { limit, remaining, resetAt: resetAt.toISOString() });
@@ -1 +1 @@
1
- {"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAGtC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;QAC7B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,kBAAmB,SAAQ,aAAa;IACnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAgB,SAAQ,aAAa;IAGhD,YAAY,OAAe,EAAE,KAAa;QACxC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,cAAe,SAAQ,aAAa;IAI/C,YAAY,OAAe,EAAE,SAAkB,EAAE,SAAkB;QACjE,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAmB,SAAQ,aAAa;IAInD,YAAY,OAAe,EAAE,MAAe,EAAE,IAAa;QACzD,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,oBAAqB,SAAQ,aAAa;IAIrD,YAAY,WAAmB,EAAE,QAAmB;QAClD,KAAK,CAAC,8BAA8B,WAAW,EAAE,EAAE;YACjD,WAAW;YACX,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAoB,SAAQ,aAAa;IACpD,YAAY,UAAkB,uBAAuB;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC;CACF;AA6BD,MAAM,OAAO,cAAe,SAAQ,aAAa;IAU/C,YACE,KAAa,EACb,SAAiB,EACjB,OAAa,EACb,MAAqE;QAErE,KAAK,CACH,wBAAwB,SAAS,IAAI,KAAK,yBAAyB,OAAO,CAAC,WAAW,EAAE,EAAE,EAC1F,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CACrD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,MAAM,EAAE,SAAS,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,MAAM,EAAE,IAAI,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC;QAC/B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,gBAAgB,CAAC,QAYvB;QACC,MAAM,OAAO,GAA4B,QAAQ,CAAC,OAAO;YACvD,CAAC,CAAC;gBACE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE;gBACjC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE;gBACvC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE;gBAC9C,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE;aACvC;YACH,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,EAAE,QAAQ,CAAC,SAAS,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,EAAE;YACvF,SAAS,EAAE,QAAQ,CAAC,UAAU;YAC9B,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO;SACR,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,0DAA0D;YAC1D,4DAA4D;YAC5D,qBAAqB;YACpB,GAA2B,CAAC,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC;QACxD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,YAAa,SAAQ,aAAa;IAG7C,YAAY,SAAiB;QAC3B,KAAK,CAAC,2BAA2B,SAAS,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,oBAAqB,SAAQ,aAAa;IAKrD,YAAY,MAAc,EAAE,eAAuB,EAAE,cAAuB;QAC1E,KAAK,CAAC,6BAA6B,MAAM,sBAAsB,eAAe,EAAE,EAAE;YAChF,MAAM;YACN,eAAe;YACf,cAAc;SACf,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,2BAA4B,SAAQ,aAAa;IAM5D,YACE,OAAe,EACf,UAAkB,EAClB,MAAc,EACd,sBAA8B,EAC9B,sBAA8B;QAE9B,KAAK,CAAC,OAAO,EAAE;YACb,UAAU;YACV,MAAM;YACN,sBAAsB;YACtB,sBAAsB;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;QACrD,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;QACrD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACrE,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,QAAS,SAAQ,aAAa;IAKzC,YAAY,UAAkB,EAAE,UAAkB,EAAE,IAAY;QAC9D,KAAK,CAAC,cAAc,UAAU,IAAI,UAAU,MAAM,IAAI,EAAE,EAAE;YACxD,UAAU;YACV,UAAU;YACV,IAAI;SACL,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACF"}
1
+ {"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAGtC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;QAC7B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,kBAAmB,SAAQ,aAAa;IACnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAgB,SAAQ,aAAa;IAGhD,YAAY,OAAe,EAAE,KAAa;QACxC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,cAAe,SAAQ,aAAa;IAI/C,YAAY,OAAe,EAAE,SAAkB,EAAE,SAAkB;QACjE,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,kBAAmB,SAAQ,aAAa;IAInD,YAAY,OAAe,EAAE,MAAe,EAAE,IAAa;QACzD,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,oBAAqB,SAAQ,aAAa;IAIrD,YAAY,WAAmB,EAAE,QAAmB;QAClD,KAAK,CAAC,8BAA8B,WAAW,EAAE,EAAE;YACjD,WAAW;YACX,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,mBAAoB,SAAQ,aAAa;IACpD,YAAY,UAAkB,uBAAuB;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC7D,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,OAAO,6BAA8B,SAAQ,aAAa;IAC9D,YAAY,UAAkB,mCAAmC;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,6BAA6B,CAAC,SAAS,CAAC,CAAC;IACvE,CAAC;CACF;AA6BD,MAAM,OAAO,cAAe,SAAQ,aAAa;IAU/C,YACE,KAAa,EACb,SAAiB,EACjB,OAAa,EACb,MAAqE;QAErE,KAAK,CACH,wBAAwB,SAAS,IAAI,KAAK,yBAAyB,OAAO,CAAC,WAAW,EAAE,EAAE,EAC1F,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CACrD,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,MAAM,EAAE,SAAS,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,MAAM,EAAE,IAAI,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC;QAC/B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,gBAAgB,CAAC,QAYvB;QACC,MAAM,OAAO,GAA4B,QAAQ,CAAC,OAAO;YACvD,CAAC,CAAC;gBACE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE;gBACjC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE;gBACvC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE;gBAC9C,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE;aACvC;YACH,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,EAAE,QAAQ,CAAC,SAAS,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,EAAE;YACvF,SAAS,EAAE,QAAQ,CAAC,UAAU;YAC9B,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,OAAO;SACR,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,0DAA0D;YAC1D,4DAA4D;YAC5D,qBAAqB;YACpB,GAA2B,CAAC,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC;QACxD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,YAAa,SAAQ,aAAa;IAG7C,YAAY,SAAiB;QAC3B,KAAK,CAAC,2BAA2B,SAAS,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;CACF;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,oBAAqB,SAAQ,aAAa;IAKrD,YAAY,MAAc,EAAE,eAAuB,EAAE,cAAuB;QAC1E,KAAK,CAAC,6BAA6B,MAAM,sBAAsB,eAAe,EAAE,EAAE;YAChF,MAAM;YACN,eAAe;YACf,cAAc;SACf,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,2BAA4B,SAAQ,aAAa;IAM5D,YACE,OAAe,EACf,UAAkB,EAClB,MAAc,EACd,sBAA8B,EAC9B,sBAA8B;QAE9B,KAAK,CAAC,OAAO,EAAE;YACb,UAAU;YACV,MAAM;YACN,sBAAsB;YACtB,sBAAsB;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;QACrD,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;QACrD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACrE,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,QAAS,SAAQ,aAAa;IAKzC,YAAY,UAAkB,EAAE,UAAkB,EAAE,IAAY;QAC9D,KAAK,CAAC,cAAc,UAAU,IAAI,UAAU,MAAM,IAAI,EAAE,EAAE;YACxD,UAAU;YACV,UAAU;YACV,IAAI;SACL,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;CACF"}
@@ -51,9 +51,11 @@
51
51
  export { AxonFlow } from './client';
52
52
  export { wasRedacted } from './types/connector';
53
53
  export type { ConnectorResponse, ConnectorMetadata, ConnectorInstallRequest, PolicyMatchInfo, DynamicPolicyInfo, DynamicPolicyMatch, ConnectorHealthStatus, PolicyInfo, MCPPolicyInfo, ExfiltrationCheckInfo, MCPCheckInputOptions, MCPCheckInputResponse, MCPCheckOutputOptions, MCPCheckOutputResponse, MCPExplainPolicy, } from './types/connector';
54
- export { AxonFlowError, ConfigurationError, ConnectionError, ConnectorError, PlanExecutionError, VersionConflictError, PolicyViolationError, AuthenticationError, RateLimitError, TimeoutError, IdempotencyKeyMismatchError, APIError, } from './errors';
54
+ export { AxonFlowError, ConfigurationError, ConnectionError, ConnectorError, PlanExecutionError, VersionConflictError, PolicyViolationError, AuthenticationError, RateLimitError, TimeoutError, IdempotencyKeyMismatchError, APIError, ObligationNotFulfillableError, } from './errors';
55
55
  export type { UpgradeInfo } from './errors';
56
- export type { AxonFlowConfig, AIRequest, GovernanceRequest, GovernanceResponse, PolicyDecision, Violation, Policy, PolicyRule, TokenUsage, RateLimitInfo, PolicyApprovalResult, PolicyApprovalOptions, AuditResult, AuditOptions, AuditSearchRequest, AuditQueryOptions, AuditLogEntry, AuditSearchResponse, AuditToolCallRequest, AuditToolCallResponse, CircuitBreakerCircuit, CircuitBreakerStatusResponse, CircuitBreakerHistoryEntry, CircuitBreakerHistoryResponse, CircuitBreakerConfig, CircuitBreakerConfigUpdate, RequestType, ProxyPolicyInfo, PolicyInfoLegacyProxyShape, CodeArtifact, HealthStatus, PlatformCapability, SDKCompatibility, DecisionExplanation, ExplainPolicy, ExplainRule, DecisionSummary, ListDecisionsOptions, } from './types';
56
+ export { OBLIGATION_REDACT_PII, PHASE_REQUEST, PHASE_RESPONSE, CONTENT_TYPE_TEXT, VERDICT_ALLOW, VERDICT_DENY, VERDICT_NEEDS_APPROVAL, REQUEST_REDACTION_PATH, RESPONSE_REDACTION_PATH, DECIDE_PATH, hasRequestRedaction, endpointPathMatches, } from './pep';
57
+ export type { DecideRequest, DecideResponse, Obligation, ObligationFulfillment, DecisionCallerIdentity, DecisionTarget, } from './pep';
58
+ export type { AxonFlowConfig, AIRequest, GovernanceRequest, GovernanceResponse, PolicyDecision, Violation, Policy, PolicyRule, TokenUsage, RateLimitInfo, PolicyApprovalResult, PolicyApprovalOptions, AuditResult, AuditOptions, AuditSearchRequest, AuditQueryOptions, AuditLogEntry, AuditSearchResponse, TransferBasis, AuditToolCallRequest, AuditToolCallResponse, CircuitBreakerCircuit, CircuitBreakerStatusResponse, CircuitBreakerHistoryEntry, CircuitBreakerHistoryResponse, CircuitBreakerConfig, CircuitBreakerConfigUpdate, RequestType, ProxyPolicyInfo, PolicyInfoLegacyProxyShape, CodeArtifact, HealthStatus, PlatformCapability, SDKCompatibility, DecisionExplanation, ExplainPolicy, ExplainRule, DecisionSummary, ListDecisionsOptions, } from './types';
57
59
  export type { PolicyCategory, PolicyTier, PolicyAction, PolicySeverity, OverrideAction, StaticPolicy, CreateStaticPolicyRequest, UpdateStaticPolicyRequest, ListStaticPoliciesOptions, PolicyOverride, CreatePolicyOverrideRequest, DynamicPolicy, DynamicPolicyAction, DynamicPolicyCondition, CreateDynamicPolicyRequest, UpdateDynamicPolicyRequest, ListDynamicPoliciesOptions, TestPatternResult, TestPatternMatch, PolicyVersion, EffectivePoliciesOptions, EffectivePoliciesResponse, PaginatedResponse, } from './types/policies';
58
60
  export { CATEGORY_MEDIA_SAFETY, CATEGORY_MEDIA_BIOMETRIC, CATEGORY_MEDIA_DOCUMENT, CATEGORY_MEDIA_PII, } from './types/policies';
59
61
  export type { PlanStep, PlanResponse, PlanExecutionResponse, PlanExecutionStatus, PolicyMatch, PolicyEvaluationResult, ExecutionMode, GeneratePlanOptions, CancelPlanResponse, UpdatePlanRequest, UpdatePlanResponse, PlanVersionEntry, PlanVersionsResponse, ResumePlanResponse, RollbackPlanResponse, } from './types/planning';
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGpC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EAKrB,UAAU,EACV,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EAKtB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,QAAQ,GACT,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAG5C,YAAY,EACV,cAAc,EACd,SAAS,EACT,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,SAAS,EACT,MAAM,EACN,UAAU,EAEV,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,WAAW,EACX,YAAY,EAEZ,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EAEnB,oBAAoB,EACpB,qBAAqB,EAErB,qBAAqB,EACrB,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,oBAAoB,EACpB,0BAA0B,EAE1B,WAAW,EAKX,eAAe,EACf,0BAA0B,EAC1B,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAEhB,mBAAmB,EACnB,aAAa,EACb,WAAW,EACX,eAAe,EACf,oBAAoB,GACrB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACV,cAAc,EACd,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,YAAY,EACZ,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,2BAA2B,EAC3B,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,QAAQ,EACR,YAAY,EACZ,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,EACX,sBAAsB,EACtB,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,eAAe,EACf,UAAU,EACV,QAAQ,EACR,2BAA2B,EAC3B,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,cAAc,GACf,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAGlC,YAAY,EACV,WAAW,EACX,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,MAAM,EACN,eAAe,EACf,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,uBAAuB,EACvB,WAAW,EACX,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAG/B,YAAY,EACV,cAAc,EACd,cAAc,EACd,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EAExB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,wBAAwB,EACxB,uBAAuB,EAEvB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EAEpB,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACrE,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAGpF,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAG9B,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,kCAAkC,GACnC,MAAM,eAAe,CAAC;AAGvB,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,SAAS,GACV,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,4BAA4B,EAC5B,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrD,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG/D,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAGhD,YAAY,EACV,yBAAyB,EACzB,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,OAAO,EACP,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,EACtB,UAAU,EACV,eAAe,EACf,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,eAAe,QAAQ,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGpC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,EAKrB,UAAU,EACV,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EAKtB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,QAAQ,EACR,6BAA6B,GAC9B,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAK5C,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,OAAO,CAAC;AACf,YAAY,EACV,aAAa,EACb,cAAc,EACd,UAAU,EACV,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,GACf,MAAM,OAAO,CAAC;AAGf,YAAY,EACV,cAAc,EACd,SAAS,EACT,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,SAAS,EACT,MAAM,EACN,UAAU,EAEV,UAAU,EACV,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,WAAW,EACX,YAAY,EAEZ,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EAEnB,aAAa,EAEb,oBAAoB,EACpB,qBAAqB,EAErB,qBAAqB,EACrB,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,oBAAoB,EACpB,0BAA0B,EAE1B,WAAW,EAKX,eAAe,EACf,0BAA0B,EAC1B,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAEhB,mBAAmB,EACnB,aAAa,EACb,WAAW,EACX,eAAe,EACf,oBAAoB,GACrB,MAAM,SAAS,CAAC;AAGjB,YAAY,EACV,cAAc,EACd,UAAU,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,YAAY,EACZ,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,cAAc,EACd,2BAA2B,EAC3B,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,QAAQ,EACR,YAAY,EACZ,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,EACX,sBAAsB,EACtB,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,eAAe,EACf,UAAU,EACV,QAAQ,EACR,2BAA2B,EAC3B,4BAA4B,EAC5B,0BAA0B,EAC1B,2BAA2B,EAC3B,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,cAAc,GACf,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAGlC,YAAY,EACV,WAAW,EACX,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,MAAM,EACN,eAAe,EACf,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,uBAAuB,EACvB,WAAW,EACX,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAG/B,YAAY,EACV,cAAc,EACd,cAAc,EACd,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,wBAAwB,EAExB,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,wBAAwB,EACxB,uBAAuB,EAEvB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EAEpB,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGpD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACrE,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAGpF,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAG9B,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,kCAAkC,GACnC,MAAM,eAAe,CAAC;AAGvB,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,SAAS,GACV,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,4BAA4B,EAC5B,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrD,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAG/D,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAGhD,YAAY,EACV,yBAAyB,EACzB,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,OAAO,EACP,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,EACtB,UAAU,EACV,eAAe,EACf,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAGnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,eAAe,QAAQ,CAAC"}
package/dist/esm/index.js CHANGED
@@ -52,7 +52,11 @@ export { AxonFlow } from './client.js';
52
52
  // Export connector utilities
53
53
  export { wasRedacted } from './types/connector.js';
54
54
  // Export error classes for proper error handling
55
- export { AxonFlowError, ConfigurationError, ConnectionError, ConnectorError, PlanExecutionError, VersionConflictError, PolicyViolationError, AuthenticationError, RateLimitError, TimeoutError, IdempotencyKeyMismatchError, APIError, } from './errors.js';
55
+ export { AxonFlowError, ConfigurationError, ConnectionError, ConnectorError, PlanExecutionError, VersionConflictError, PolicyViolationError, AuthenticationError, RateLimitError, TimeoutError, IdempotencyKeyMismatchError, APIError, ObligationNotFulfillableError, } from './errors.js';
56
+ // Export Decision Mode PEP contract: decide -> fulfill -> forward
57
+ // (ADR-056, epic #2563). Types, constants, and the pure helpers a PEP uses
58
+ // to branch on a verdict before fulfilling.
59
+ export { OBLIGATION_REDACT_PII, PHASE_REQUEST, PHASE_RESPONSE, CONTENT_TYPE_TEXT, VERDICT_ALLOW, VERDICT_DENY, VERDICT_NEEDS_APPROVAL, REQUEST_REDACTION_PATH, RESPONSE_REDACTION_PATH, DECIDE_PATH, hasRequestRedaction, endpointPathMatches, } from './pep.js';
56
60
  export { CATEGORY_MEDIA_SAFETY, CATEGORY_MEDIA_BIOMETRIC, CATEGORY_MEDIA_DOCUMENT, CATEGORY_MEDIA_PII, } from './types/policies.js';
57
61
  export { WorkflowHelpers } from './types/workflows.js';
58
62
  // Export GovernedTool adapter (framework-agnostic tool governance)
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,6BAA6B;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA6BhD,iDAAiD;AACjD,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,QAAQ,GACT,MAAM,UAAU,CAAC;AAiFlB,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAkH1B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,mEAAmE;AACnE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGrE,2BAA2B;AAC3B,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AA6C9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAsDrD,4CAA4C;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,iBAAiB;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,iCAAiC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,eAAe,QAAQ,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEpC,6BAA6B;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AA6BhD,iDAAiD;AACjD,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,2BAA2B,EAC3B,QAAQ,EACR,6BAA6B,GAC9B,MAAM,UAAU,CAAC;AAGlB,kEAAkE;AAClE,2EAA2E;AAC3E,4CAA4C;AAC5C,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,OAAO,CAAC;AA0Ff,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAkH1B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,mEAAmE;AACnE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGrE,2BAA2B;AAC3B,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AA6C9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAsDrD,4CAA4C;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,iBAAiB;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,iCAAiC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,eAAe,QAAQ,CAAC"}
@@ -0,0 +1,176 @@
1
+ /**
2
+ * Decision Mode PEP (Policy Enforcement Point) contract: types, constants,
3
+ * and pure helpers.
4
+ *
5
+ * A PEP follows one path: **decide → fulfill → forward** (ADR-056, epic #2563).
6
+ *
7
+ * - decide: ask the PDP (`POST /api/v1/decide`) for a verdict on a request.
8
+ * - fulfill: for every obligation the verdict carries, call the ENGINE
9
+ * endpoint named in the obligation's `fulfillment` block to obtain
10
+ * engine-redacted content.
11
+ * - forward: forward the (possibly redacted) content, or block, per verdict.
12
+ *
13
+ * The structural guarantee #2563 demands: a PEP built on this SDK contains NO
14
+ * redaction logic of its own. The ONLY way it discharges a `redact_pii`
15
+ * obligation is by POSTing the source content to the engine endpoint the
16
+ * obligation names ({@link AxonFlow.fulfillRequest} /
17
+ * {@link AxonFlow.decideAndFulfill}) and forwarding what the engine returns. If
18
+ * an obligation arrives without a fulfillable engine endpoint — or the engine
19
+ * reports the redactor did not run — the helper throws
20
+ * {@link ObligationNotFulfillableError} and the caller MUST fail closed
21
+ * (block), never forward unredacted.
22
+ *
23
+ * This mirrors `platform/shared/pep` (the Go reference PEP) and the Python SDK
24
+ * so the SDK PEP cannot reimplement redaction the way a hand-rolled regex would.
25
+ */
26
+ /**
27
+ * The obligation a PEP discharges by replacing request content with
28
+ * engine-redacted content before forwarding.
29
+ */
30
+ export declare const OBLIGATION_REDACT_PII = "redact_pii";
31
+ /**
32
+ * Fulfillment phases. `/decide` runs pre-call so it only emits request-phase
33
+ * obligations; the response-phase value is part of the contract for PEP helpers
34
+ * that fan out to the response-redaction endpoint after the backend call.
35
+ */
36
+ export declare const PHASE_REQUEST = "request";
37
+ export declare const PHASE_RESPONSE = "response";
38
+ /**
39
+ * The only redaction content-type wired today. The contract is content-type
40
+ * agnostic — a PEP holding content of a type not advertised by an obligation's
41
+ * `content_types` must fail closed rather than forward it unredacted.
42
+ */
43
+ export declare const CONTENT_TYPE_TEXT = "text/plain";
44
+ export declare const VERDICT_ALLOW = "allow";
45
+ export declare const VERDICT_DENY = "deny";
46
+ export declare const VERDICT_NEEDS_APPROVAL = "needs_approval";
47
+ export declare const REQUEST_REDACTION_PATH = "/api/v1/mcp/check-input";
48
+ export declare const RESPONSE_REDACTION_PATH = "/api/v1/mcp/check-output";
49
+ export declare const DECIDE_PATH = "/api/v1/decide";
50
+ /**
51
+ * Names the engine call a PEP makes to discharge an obligation.
52
+ *
53
+ * Fulfillment is a property of the contract, not of PEP-author discipline: a
54
+ * conforming PEP POSTs the obligation's source content to `endpoint` and
55
+ * forwards the engine-redacted content the endpoint returns.
56
+ *
57
+ * `content_types` advertises the mime-types the endpoint's detectors can handle
58
+ * today. The contract is content-type-agnostic: a PEP holding content of a type
59
+ * NOT in this list must fail closed rather than forward it unredacted. Mirrors
60
+ * platform ObligationFulfillment (snake_case wire shape).
61
+ */
62
+ export interface ObligationFulfillment {
63
+ /** Engine path, e.g. "/api/v1/mcp/check-input". */
64
+ endpoint: string;
65
+ /** HTTP method, e.g. "POST". */
66
+ method?: string;
67
+ /** "request" | "response". */
68
+ phase: string;
69
+ /** Mime-types the endpoint can redact today. */
70
+ content_types?: string[];
71
+ }
72
+ /**
73
+ * A self-describing, engine-fulfillable PEP requirement on an allow verdict.
74
+ *
75
+ * Obligations are SELF-DESCRIBING and ENGINE-FULFILLABLE (ADR-056, #2563):
76
+ * `/decide` is a pure PDP and never mutates content, so a `redact_pii`
77
+ * obligation is not "go redact this yourself with your own patterns" — it is
78
+ * "call the AxonFlow engine endpoint named in `fulfillment` to obtain
79
+ * engine-redacted content." There is no other blessed way to satisfy it;
80
+ * client-side redaction is forbidden. Mirrors platform DecisionObligation
81
+ * (snake_case wire shape).
82
+ */
83
+ export interface Obligation {
84
+ /** Obligation type, e.g. "redact_pii". */
85
+ type: string;
86
+ /** Human-readable detail for audit logs. */
87
+ detail?: string;
88
+ /** How a PEP discharges this obligation via the engine. */
89
+ fulfillment?: ObligationFulfillment;
90
+ }
91
+ /**
92
+ * Gateway-asserted identity for a /decide request.
93
+ *
94
+ * org_id / tenant_id are optional in the body — the auth-derived identity is
95
+ * authoritative; body-supplied values are accepted only when they match.
96
+ * Mirrors platform DecisionCallerIdentity (snake_case wire shape).
97
+ */
98
+ export interface DecisionCallerIdentity {
99
+ gateway_id?: string;
100
+ org_id?: string;
101
+ tenant_id?: string;
102
+ }
103
+ /**
104
+ * Describes what the gateway is about to call. Mirrors platform DecisionTarget
105
+ * (snake_case wire shape).
106
+ */
107
+ export interface DecisionTarget {
108
+ /** "llm" | "tool" | "agent". */
109
+ type?: string;
110
+ /** When type=llm. */
111
+ model?: string;
112
+ /** When type=llm. */
113
+ provider?: string;
114
+ /** When type=tool. */
115
+ tool?: string;
116
+ }
117
+ /**
118
+ * Inbound contract for `POST /api/v1/decide`. Mirrors platform DecideRequest
119
+ * (snake_case wire shape).
120
+ *
121
+ * Required: `stage` (one of "llm" | "tool" | "agent") and `query`.
122
+ * `user_token` is optional — a PEP that supplies one gets the validated-user
123
+ * record on the audit row; one that doesn't gets a synthesized service user.
124
+ */
125
+ export interface DecideRequest {
126
+ stage: string;
127
+ query: string;
128
+ caller_identity?: DecisionCallerIdentity;
129
+ target?: DecisionTarget;
130
+ user_token?: string;
131
+ context?: Record<string, unknown>;
132
+ }
133
+ /**
134
+ * PDP verdict returned by `POST /api/v1/decide`. Mirrors platform DecideResponse
135
+ * (snake_case wire shape).
136
+ *
137
+ * `obligations` is normalized to an array by the client so PEP code can iterate
138
+ * without a null-check. `trace_id` is W3C-format (32 lowercase hex chars).
139
+ * `error` is set on the deny path when the request was malformed.
140
+ */
141
+ export interface DecideResponse {
142
+ verdict: string;
143
+ decision_id?: string;
144
+ trace_id?: string;
145
+ reasons?: string[];
146
+ obligations: Obligation[];
147
+ evaluated_policies?: string[];
148
+ stage?: string;
149
+ expires_at?: string;
150
+ error?: string;
151
+ }
152
+ /**
153
+ * Reports whether any obligation requires request-phase PII redaction.
154
+ *
155
+ * Exposed so a PEP can branch ("does this verdict carry work for me?") before
156
+ * calling {@link AxonFlow.fulfillRequest}.
157
+ */
158
+ export declare function hasRequestRedaction(obligations: Obligation[]): boolean;
159
+ /**
160
+ * Returns a shallow copy of `obj` with every key whose value is `undefined`
161
+ * removed, so a serialized `DecideRequest` omits empty optional fields
162
+ * (`user_token`, `context`) on the wire per the spec. Nested objects
163
+ * (`caller_identity`, `target`) are likewise stripped of undefined keys; a
164
+ * nested object that becomes empty is dropped entirely.
165
+ */
166
+ export declare function stripUndefined(obj: object): Record<string, unknown>;
167
+ /**
168
+ * Reports whether `endpoint` is the expected engine path.
169
+ *
170
+ * Tolerates an absolute URL whose path component matches (some PDPs return a
171
+ * fully-qualified obligation endpoint); a blank endpoint never matches. Refusing
172
+ * any other endpoint stops a malformed verdict from steering the PEP into
173
+ * calling an arbitrary URL.
174
+ */
175
+ export declare function endpointPathMatches(endpoint: string, expected: string): boolean;
176
+ //# sourceMappingURL=pep.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"pep.d.ts","sourceRoot":"","sources":["../../src/pep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH;;;GAGG;AACH,eAAO,MAAM,qBAAqB,eAAe,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,aAAa,YAAY,CAAC;AACvC,eAAO,MAAM,cAAc,aAAa,CAAC;AAEzC;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAG9C,eAAO,MAAM,aAAa,UAAU,CAAC;AACrC,eAAO,MAAM,YAAY,SAAS,CAAC;AACnC,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AAKvD,eAAO,MAAM,sBAAsB,4BAA4B,CAAC;AAChE,eAAO,MAAM,uBAAuB,6BAA6B,CAAC;AAElE,eAAO,MAAM,WAAW,mBAAmB,CAAC;AAE5C;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,qBAAqB;IACpC,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,UAAU;IACzB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,qBAAqB,CAAC;CACrC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,gCAAgC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,CAOtE;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBnE;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAoB/E"}
@@ -0,0 +1,119 @@
1
+ /**
2
+ * Decision Mode PEP (Policy Enforcement Point) contract: types, constants,
3
+ * and pure helpers.
4
+ *
5
+ * A PEP follows one path: **decide → fulfill → forward** (ADR-056, epic #2563).
6
+ *
7
+ * - decide: ask the PDP (`POST /api/v1/decide`) for a verdict on a request.
8
+ * - fulfill: for every obligation the verdict carries, call the ENGINE
9
+ * endpoint named in the obligation's `fulfillment` block to obtain
10
+ * engine-redacted content.
11
+ * - forward: forward the (possibly redacted) content, or block, per verdict.
12
+ *
13
+ * The structural guarantee #2563 demands: a PEP built on this SDK contains NO
14
+ * redaction logic of its own. The ONLY way it discharges a `redact_pii`
15
+ * obligation is by POSTing the source content to the engine endpoint the
16
+ * obligation names ({@link AxonFlow.fulfillRequest} /
17
+ * {@link AxonFlow.decideAndFulfill}) and forwarding what the engine returns. If
18
+ * an obligation arrives without a fulfillable engine endpoint — or the engine
19
+ * reports the redactor did not run — the helper throws
20
+ * {@link ObligationNotFulfillableError} and the caller MUST fail closed
21
+ * (block), never forward unredacted.
22
+ *
23
+ * This mirrors `platform/shared/pep` (the Go reference PEP) and the Python SDK
24
+ * so the SDK PEP cannot reimplement redaction the way a hand-rolled regex would.
25
+ */
26
+ // --- Obligation contract constants (mirror platform/agent decision handler) ---
27
+ /**
28
+ * The obligation a PEP discharges by replacing request content with
29
+ * engine-redacted content before forwarding.
30
+ */
31
+ export const OBLIGATION_REDACT_PII = 'redact_pii';
32
+ /**
33
+ * Fulfillment phases. `/decide` runs pre-call so it only emits request-phase
34
+ * obligations; the response-phase value is part of the contract for PEP helpers
35
+ * that fan out to the response-redaction endpoint after the backend call.
36
+ */
37
+ export const PHASE_REQUEST = 'request';
38
+ export const PHASE_RESPONSE = 'response';
39
+ /**
40
+ * The only redaction content-type wired today. The contract is content-type
41
+ * agnostic — a PEP holding content of a type not advertised by an obligation's
42
+ * `content_types` must fail closed rather than forward it unredacted.
43
+ */
44
+ export const CONTENT_TYPE_TEXT = 'text/plain';
45
+ // --- Verdict values returned by the PDP ---
46
+ export const VERDICT_ALLOW = 'allow';
47
+ export const VERDICT_DENY = 'deny';
48
+ export const VERDICT_NEEDS_APPROVAL = 'needs_approval';
49
+ // --- Engine endpoints a PEP will POST content to for fulfillment ---
50
+ // An obligation whose fulfillment endpoint is not one of these is rejected — a
51
+ // PEP must not be steered into calling an arbitrary URL by a malformed verdict.
52
+ export const REQUEST_REDACTION_PATH = '/api/v1/mcp/check-input';
53
+ export const RESPONSE_REDACTION_PATH = '/api/v1/mcp/check-output';
54
+ export const DECIDE_PATH = '/api/v1/decide';
55
+ /**
56
+ * Reports whether any obligation requires request-phase PII redaction.
57
+ *
58
+ * Exposed so a PEP can branch ("does this verdict carry work for me?") before
59
+ * calling {@link AxonFlow.fulfillRequest}.
60
+ */
61
+ export function hasRequestRedaction(obligations) {
62
+ return obligations.some(o => o.type === OBLIGATION_REDACT_PII &&
63
+ o.fulfillment != null &&
64
+ o.fulfillment.phase === PHASE_REQUEST);
65
+ }
66
+ /**
67
+ * Returns a shallow copy of `obj` with every key whose value is `undefined`
68
+ * removed, so a serialized `DecideRequest` omits empty optional fields
69
+ * (`user_token`, `context`) on the wire per the spec. Nested objects
70
+ * (`caller_identity`, `target`) are likewise stripped of undefined keys; a
71
+ * nested object that becomes empty is dropped entirely.
72
+ */
73
+ export function stripUndefined(obj) {
74
+ const out = {};
75
+ for (const [k, v] of Object.entries(obj)) {
76
+ if (v === undefined) {
77
+ continue;
78
+ }
79
+ if (v !== null && typeof v === 'object' && !Array.isArray(v)) {
80
+ const nested = stripUndefined(v);
81
+ if (Object.keys(nested).length > 0) {
82
+ out[k] = nested;
83
+ }
84
+ continue;
85
+ }
86
+ out[k] = v;
87
+ }
88
+ return out;
89
+ }
90
+ /**
91
+ * Reports whether `endpoint` is the expected engine path.
92
+ *
93
+ * Tolerates an absolute URL whose path component matches (some PDPs return a
94
+ * fully-qualified obligation endpoint); a blank endpoint never matches. Refusing
95
+ * any other endpoint stops a malformed verdict from steering the PEP into
96
+ * calling an arbitrary URL.
97
+ */
98
+ export function endpointPathMatches(endpoint, expected) {
99
+ const e = (endpoint || '').trim();
100
+ if (e === expected) {
101
+ return true;
102
+ }
103
+ const marker = '://';
104
+ const idx = e.indexOf(marker);
105
+ if (idx >= 0) {
106
+ const rest = e.slice(idx + marker.length);
107
+ const slash = rest.indexOf('/');
108
+ if (slash >= 0) {
109
+ let path = rest.slice(slash);
110
+ const q = path.indexOf('?');
111
+ if (q >= 0) {
112
+ path = path.slice(0, q);
113
+ }
114
+ return path === expected;
115
+ }
116
+ }
117
+ return false;
118
+ }
119
+ //# sourceMappingURL=pep.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"pep.js","sourceRoot":"","sources":["../../src/pep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAElD;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AACvC,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;AAEzC;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAE9C,6CAA6C;AAC7C,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AACrC,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;AACnC,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AAEvD,sEAAsE;AACtE,+EAA+E;AAC/E,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AAChE,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAElE,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAgB,CAAC;AA8G5C;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAyB;IAC3D,OAAO,WAAW,CAAC,IAAI,CACrB,CAAC,CAAC,EAAE,CACF,CAAC,CAAC,IAAI,KAAK,qBAAqB;QAChC,CAAC,CAAC,WAAW,IAAI,IAAI;QACrB,CAAC,CAAC,WAAW,CAAC,KAAK,KAAK,aAAa,CACxC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,MAAM,MAAM,GAAG,cAAc,CAAC,CAA4B,CAAC,CAAC;YAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;YAClB,CAAC;YACD,SAAS;QACX,CAAC;QACD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,QAAgB;IACpE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC;IACrB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACX,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,CAAC;YACD,OAAO,IAAI,KAAK,QAAQ,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
@@ -144,6 +144,15 @@ export interface MCPCheckInputOptions {
144
144
  statement: string;
145
145
  parameters?: Record<string, any>;
146
146
  operation?: string;
147
+ /**
148
+ * Selects the request-redaction detector (ADR-056 / #2563 addendum).
149
+ * Maps to the snake_case `content_type` field on the wire. `undefined`
150
+ * defaults to "text/plain" server-side. A content_type with no registered
151
+ * detector is rejected (415) so a PEP fulfilling a `redact_pii` obligation
152
+ * fails closed rather than forwarding content the engine cannot govern.
153
+ * Source of truth: platform/agent MCPCheckInputRequest.
154
+ */
155
+ contentType?: string;
147
156
  }
148
157
  /**
149
158
  * Per-policy explainability record on MCP responses (snake_case wire shape).
@@ -202,6 +211,24 @@ export interface MCPCheckInputResponse {
202
211
  policy_matches?: MCPExplainPolicy[];
203
212
  override_available?: boolean;
204
213
  override_existing_id?: string;
214
+ /**
215
+ * Request-phase redaction (ADR-056 / #2563). When an allowed statement
216
+ * carries PII under a redact (not block) policy, the engine returns the
217
+ * masked statement here so a PEP can forward redacted content WITHOUT
218
+ * hand-rolling its own patterns — this is what makes a /decide `redact_pii`
219
+ * obligation engine-fulfillable. Source of truth: platform/agent
220
+ * MCPCheckInputResponse.
221
+ */
222
+ redacted?: boolean;
223
+ redacted_statement?: string;
224
+ /**
225
+ * Reports whether the redaction detector actually RAN (regardless of whether
226
+ * it masked anything). A PEP fulfilling a `redact_pii` obligation MUST fail
227
+ * closed when this is `false`/absent — it means the redactor did not run
228
+ * (detection disabled), so `redacted:false` would otherwise be
229
+ * indistinguishable from "looked, found nothing" (#2563 B1).
230
+ */
231
+ redaction_evaluated?: boolean;
205
232
  }
206
233
  /**
207
234
  * Options for validating MCP response data against policies.
@@ -244,6 +271,16 @@ export interface MCPCheckOutputResponse {
244
271
  */
245
272
  decision_id?: string;
246
273
  policy_matches?: MCPExplainPolicy[];
274
+ /**
275
+ * Mirrors the check-input field for the response phase (ADR-056 / #2563).
276
+ * A PEP fulfilling a response-phase `redact_pii` obligation MUST fail closed
277
+ * when this is `false`/absent — the redactor did not run, so absence of
278
+ * redacted output cannot be trusted as "nothing to mask". The agent does not
279
+ * populate this on every path today; default-absent keeps a PEP fail-closed
280
+ * when the platform predates the field. Source of truth: platform/agent
281
+ * MCPCheckOutputResponse.
282
+ */
283
+ redaction_evaluated?: boolean;
247
284
  }
248
285
  /**
249
286
  * Returns true if the connector response had any fields redacted by policy evaluation.
@@ -1 +1 @@
1
- {"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../../../src/types/connector.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC,kDAAkD;IAClD,kBAAkB,CAAC,EAAE,qBAAqB,CAAC;IAC3C,qDAAqD;IACrD,mBAAmB,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAED;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,UAAU,CAAC;AAEvC;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,qCAAqC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IACvC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACxC,6CAA6C;IAC7C,sBAAsB,EAAE,OAAO,CAAC;IAChC,+CAA+C;IAC/C,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,GAAG,CAAC;IACV,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gEAAgE;IAChE,WAAW,CAAC,EAAE,aAAa,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACpD,sDAAsD;IACtD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oDAAoD;IACpD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACpD,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACpC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IAC1C,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACrC;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAEhE;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}
1
+ {"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../../../src/types/connector.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC,kDAAkD;IAClD,kBAAkB,CAAC,EAAE,qBAAqB,CAAC;IAC3C,qDAAqD;IACrD,mBAAmB,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAED;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,UAAU,CAAC;AAEvC;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,qCAAqC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IACvC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACxC,6CAA6C;IAC7C,sBAAsB,EAAE,OAAO,CAAC;IAChC,+CAA+C;IAC/C,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,GAAG,CAAC;IACV,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gEAAgE;IAChE,WAAW,CAAC,EAAE,aAAa,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,UAAU,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACpD,sDAAsD;IACtD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,oDAAoD;IACpD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACpD,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACpC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IAC1C,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACpC;;;;;;;;OAQG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAEhE;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}
@@ -1 +1 @@
1
- {"version":3,"file":"connector.js","sourceRoot":"","sources":["../../../src/types/connector.ts"],"names":[],"mappings":"AAAA;;GAEG;AAoQH;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,QAA2B;IACrD,OAAO,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC;AACpC,CAAC"}
1
+ {"version":3,"file":"connector.js","sourceRoot":"","sources":["../../../src/types/connector.ts"],"names":[],"mappings":"AAAA;;GAEG;AAySH;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,QAA2B;IACrD,OAAO,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC;AACpC,CAAC"}
@@ -44,6 +44,18 @@ export interface DecisionExplanation {
44
44
  historicalHitCountSession: number;
45
45
  policySourceLink?: string;
46
46
  toolSignature?: string;
47
+ /**
48
+ * The FULL sanitized request context the PEP attached to the decision
49
+ * (canonical lower_snake_case keys, string values), read from the audit
50
+ * row's `policy_details->'context'`. Unlike {@link DecisionSummary} (which
51
+ * truncates to 5 keys), explain returns every persisted key up to the
52
+ * platform's 10-key cap (e.g. `x_ai_agent`, `x_session_id`,
53
+ * `x_leader_identity`, `x-bukuwarung-*`). Absent for pre-v8.4.0 audit rows.
54
+ * (platform #2509 / epic #2508)
55
+ */
56
+ context?: Record<string, string>;
57
+ /** True when the agent dropped surplus context keys at write time. */
58
+ contextTruncated?: boolean;
47
59
  }
48
60
  /**
49
61
  * Slim 5-field row returned by {@link AxonFlowClient.listDecisions}.
@@ -65,6 +77,15 @@ export interface DecisionSummary {
65
77
  decision: string;
66
78
  policyId?: string;
67
79
  toolSignature?: string;
80
+ /**
81
+ * The sanitized request context the PEP attached to the decision (canonical
82
+ * lower_snake_case keys, string values), surfaced from the audit row's
83
+ * `policy_details->'context'`. The list summary is truncated by the platform
84
+ * to the 5 most-correlated keys; the full map is available via
85
+ * {@link AxonFlowClient.explainDecision}. Absent for pre-v8.4.0 audit rows or
86
+ * decisions with no context. (platform #2509 / epic #2508)
87
+ */
88
+ context?: Record<string, string>;
68
89
  }
69
90
  /**
70
91
  * Optional filters for {@link AxonFlowClient.listDecisions}.
@@ -1 +1 @@
1
- {"version":3,"file":"decisions.d.ts","sourceRoot":"","sources":["../../../src/types/decisions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,uDAAuD;AACvD,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,aAAa,EAAE,aAAa,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,yBAAyB,EAAE,MAAM,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}
1
+ {"version":3,"file":"decisions.d.ts","sourceRoot":"","sources":["../../../src/types/decisions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,uDAAuD;AACvD,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,aAAa,EAAE,aAAa,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,yBAAyB,EAAE,MAAM,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}