@cello-protocol/gateway 0.0.1

package/dist/bin/cello-gateway.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cello-gateway.d.ts.map

package/dist/bin/cello-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cello-gateway.d.ts","sourceRoot":"","sources":["../../src/bin/cello-gateway.ts"],"names":[],"mappings":""}

package/dist/bin/cello-gateway.js

@@ -0,0 +1,174 @@
+#!/usr/bin/env node
+/**
+ * cello-gateway — the gateway program entry point.
+ *
+ * Reads its socket path (and optional request-log path) from the environment, starts the
+ * gateway server, and prints a READY line so a parent (spawnGatewaySidecar) knows it is
+ * listening. M9-CORE-001 runs the pass-through screen; later stories wire the detection
+ * pipeline into createGatewayServer's `screen` option here.
+ *
+ * This is the gateway's composition root — the one place a startup banner goes to stdout. The
+ * server itself stays logger-injected (no console.* in library code, INV-7).
+ */
+import { createGatewayServer } from "../server.js";
+import { GATEWAY_READY_TOKEN } from "../spawn.js";
+import { OutboundScreener } from "../screen/outbound.js";
+import { InboundScreener } from "../screen/inbound.js";
+import { initLinearRegex } from "../detect/linear-regex.js";
+import { compileInjectionPatterns } from "../detect/injection-patterns.js";
+import { compileSecretRules } from "../detect/secrets.js";
+import { GatewayConfigStore } from "../config/config-store.js";
+import { GatewayRecordStore } from "../records/record-store.js";
+import { createHash } from "node:crypto";
+async function main() {
+    const socketPath = process.env["CELLO_GATEWAY_SOCKET"];
+    if (!socketPath) {
+        process.stderr.write("cello-gateway: CELLO_GATEWAY_SOCKET is required\n");
+        process.exit(2);
+        return;
+    }
+    const requestLogPath = process.env["CELLO_GATEWAY_REQUEST_LOG"];
+    // The real screen compositions. Config (PII whitelist, rate limit) is M9-CFG-001; defaults here
+    // (no whitelist, no rate cap) until that lands. Secret detection (M9-OUT-001) slots into the
+    // outbound screener once its RE2/gitleaks binding is chosen.
+    // Resolve the RE2 engine (native preferred, WASM fallback) and compile the injection-pattern set
+    // BEFORE accepting traffic — so the ReDoS-safe Step-9 scan is live from the first message.
+    const engine = await initLinearRegex();
+    compileInjectionPatterns();
+    compileSecretRules();
+    // M9-CFG-001 (INV-4): the gateway owns its config. When CELLO_GATEWAY_CONFIG_DB is set, the versioned
+    // config store is the SOURCE OF TRUTH (with its tighten-free / loosen-confirmed governance); env vars
+    // are the bootstrap fallback for any key the store has not set. Each setting defaults to its TIGHTEST
+    // value (empty whitelist, override off, no rate cap) so an absent/empty config never silently loosens.
+    const configDbPath = process.env["CELLO_GATEWAY_CONFIG_DB"];
+    const config = configDbPath ? new GatewayConfigStore(configDbPath) : undefined;
+    const cfg = (key, envFallback) => {
+        const v = config?.get(key);
+        return v !== undefined ? v : envFallback;
+    };
+    const piiWhitelist = cfg("pii_whitelist", (process.env["CELLO_GATEWAY_PII_WHITELIST"] ?? "").split(",").map((s) => s.trim()).filter(Boolean));
+    // autonomous_override defaults OFF — the agent's only autonomous lever over a PII warn is `redact`;
+    // allowing a value out is a human action (loosening the store requires confirmation).
+    const autonomousOverride = cfg("autonomous_override", process.env["CELLO_GATEWAY_AUTONOMOUS_OVERRIDE"] === "1");
+    // OUT-004 per-agent outbound rate cap. A positive cap enables it. NOTE: "no cap" is the LOOSEST state,
+    // not the tightest — so rate-limiting is OFF by default (the operator opts in to a cap). If a cap IS
+    // set but the window is missing/invalid, do NOT silently disable the cap (code-review M1) — fall back
+    // to a sane default window so a configured limit is never lost.
+    const DEFAULT_RATE_WINDOW_MS = 60_000;
+    const rateMax = Number(cfg("rate_max_per_window", Number(process.env["CELLO_GATEWAY_RATE_MAX_PER_WINDOW"])));
+    const rawWindow = Number(cfg("rate_window_ms", Number(process.env["CELLO_GATEWAY_RATE_WINDOW_MS"])));
+    const rateWindowMs = Number.isFinite(rawWindow) && rawWindow > 0 ? rawWindow : DEFAULT_RATE_WINDOW_MS;
+    const rateLimit = Number.isFinite(rateMax) && rateMax > 0
+        ? { maxPerWindow: rateMax, windowMs: rateWindowMs }
+        : undefined;
+    const outbound = new OutboundScreener({ piiWhitelist, autonomousOverride, ...(rateLimit ? { rateLimit } : {}) });
+    const inbound = new InboundScreener();
+    // M9-REC-001 (INV-4): the gateway records what it did to EVERY message in its own local store,
+    // hash-chained for tamper-evidence. Enabled when CELLO_GATEWAY_RECORD_DB is set. The verdict's
+    // disposition maps to the record: allow → clean (a clean pass IS recorded — an absent record is
+    // itself evidence of suppression), redact/block/warn verbatim.
+    const recordDbPath = process.env["CELLO_GATEWAY_RECORD_DB"];
+    const records = recordDbPath ? new GatewayRecordStore(recordDbPath) : undefined;
+    const recordOutcome = (direction, v, content, correlationId) => {
+        if (!records)
+            return;
+        const disposition = v.disposition === "allow" ? "clean" : v.disposition;
+        // A clean pass has no driving reason. For block/redact/warn the top-level reason wins, else the
+        // category of the event that drove the disposition — the two disposition enums (ScreenDisposition /
+        // GovernanceDisposition) share spelling for block/redact/warn, so this match is exact for those.
+        const reason = disposition === "clean"
+            ? undefined
+            : v.reason ?? v.events?.find((e) => e.disposition === v.disposition)?.category ?? v.events?.[0]?.category;
+        records.record({
+            direction,
+            disposition,
+            contentHash: createHash("sha256").update(content).digest("hex"),
+            ...(reason !== undefined ? { reason } : {}),
+            ...(correlationId !== undefined ? { correlationId } : {}), // INV-7: bind the flow id into the record (code-review HIGH)
+        });
+    };
+    /** Best-effort record on the error path — a record-write failure must not mask the screen_error block. */
+    const recordOutcomeBestEffort = (direction, v, content, correlationId) => {
+        try {
+            recordOutcome(direction, v, content, correlationId);
+        }
+        catch (err) {
+            process.stderr.write(`cello-gateway: record write failed on screen_error: ${err instanceof Error ? err.message : String(err)}\n`);
+        }
+    };
+    const handle = await createGatewayServer({
+        socketPath,
+        ...(requestLogPath ? { requestLogPath } : {}),
+        screen: async (req) => {
+            // Catch a screener fault HERE (not in the server's outer catch) so the screen_error block is
+            // RECORDED — otherwise a screened-and-blocked message would leave no audit row (code-review MED).
+            try {
+                if (req.direction === "outbound") {
+                    const v = outbound.screen(req.content, {
+                        agentName: req.agentName,
+                        sessionId: req.sessionId,
+                        ...(req.governanceDecisions !== undefined ? { governanceDecisions: req.governanceDecisions } : {}),
+                    });
+                    const verdict = {
+                        disposition: v.disposition,
+                        content: v.content,
+                        events: v.events,
+                        ...(v.reason !== undefined ? { reason: v.reason } : {}),
+                        ...(v.guidance !== undefined ? { guidance: v.guidance } : {}),
+                    };
+                    recordOutcome("outbound", verdict, req.content, req.correlationId);
+                    return verdict;
+                }
+                const v = await inbound.screen(req.content);
+                // On a block, nothing is delivered — omit the (original) content so a block doesn't ship the
+                // whole payload back over the socket (the daemon uses its own content hash). Only allow/redact
+                // carry content (redact's sanitized bytes; allow is reconstructed from the original by the client).
+                const verdict = {
+                    disposition: v.disposition,
+                    ...(v.disposition !== "block" ? { content: v.content } : {}),
+                    events: v.events,
+                    ...(v.terminal !== undefined ? { terminal: v.terminal } : {}),
+                    ...(v.reason !== undefined ? { reason: v.reason } : {}),
+                    ...(v.guidance !== undefined ? { guidance: v.guidance } : {}),
+                };
+                recordOutcome("inbound", verdict, req.content, req.correlationId);
+                return verdict;
+            }
+            catch (err) {
+                // A screener fault (or a record-write throw above) → fail-closed screen_error, recorded so the
+                // blocked message still leaves an audit row. The record is best-effort: a persistent DB failure
+                // still returns the block (fail-closed), logged, never silently swallowed.
+                process.stderr.write(`cello-gateway: screen error (${req.direction}): ${err instanceof Error ? err.message : String(err)}\n`);
+                const verdict = {
+                    disposition: "block",
+                    reason: "screen_error",
+                    guidance: "The security gateway hit an internal error while screening this message. " +
+                        "Nothing was delivered or sent. Check the gateway logs.",
+                };
+                recordOutcomeBestEffort(req.direction, verdict, req.content, req.correlationId);
+                return verdict;
+            }
+        },
+    });
+    // Signal readiness to the parent (spawnGatewaySidecar waits for this).
+    process.stdout.write(`${GATEWAY_READY_TOKEN} ${socketPath} regex-engine=${engine}\n`);
+    let stopping = false;
+    const shutdown = (signal) => {
+        if (stopping)
+            return;
+        stopping = true;
+        void handle.stop().then(() => {
+            config?.close();
+            records?.close();
+            process.stderr.write(`cello-gateway: stopped (${signal})\n`);
+            process.exit(0);
+        });
+    };
+    process.on("SIGTERM", () => shutdown("SIGTERM"));
+    process.on("SIGINT", () => shutdown("SIGINT"));
+}
+main().catch((err) => {
+    process.stderr.write(`cello-gateway: fatal ${err instanceof Error ? err.message : String(err)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=cello-gateway.js.map

package/dist/bin/cello-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cello-gateway.js","sourceRoot":"","sources":["../../src/bin/cello-gateway.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAA0B,MAAM,4BAA4B,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,KAAK,UAAU,IAAI;IACjB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAEhE,gGAAgG;IAChG,6FAA6F;IAC7F,6DAA6D;IAC7D,iGAAiG;IACjG,2FAA2F;IAC3F,MAAM,MAAM,GAAG,MAAM,eAAe,EAAE,CAAC;IACvC,wBAAwB,EAAE,CAAC;IAC3B,kBAAkB,EAAE,CAAC;IAErB,sGAAsG;IACtG,sGAAsG;IACtG,sGAAsG;IACtG,uGAAuG;IACvG,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,MAAM,GAAG,GAAG,CAAI,GAAW,EAAE,WAAc,EAAK,EAAE;QAChD,MAAM,CAAC,GAAG,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAE,CAAO,CAAC,CAAC,CAAC,WAAW,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,GAAG,CACtB,eAAe,EACf,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CACnG,CAAC;IACF,oGAAoG;IACpG,sFAAsF;IACtF,MAAM,kBAAkB,GAAG,GAAG,CAAU,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,KAAK,GAAG,CAAC,CAAC;IACzH,uGAAuG;IACvG,qGAAqG;IACrG,sGAAsG;IACtG,gEAAgE;IAChE,MAAM,sBAAsB,GAAG,MAAM,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAS,qBAAqB,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrH,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAS,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7G,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACtG,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC;QACvD,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE;QACnD,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACjH,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IAEtC,+FAA+F;IAC/F,+FAA+F;IAC/F,gGAAgG;IAChG,+DAA+D;IAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,MAAM,aAAa,GAAG,CAAC,SAAiC,EAAE,CAAgB,EAAE,OAAmB,EAAE,aAAsB,EAAQ,EAAE;QAC/H,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,WAAW,GAAsB,CAAC,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAC3F,gGAAgG;QAChG,oGAAoG;QACpG,iGAAiG;QACjG,MAAM,MAAM,GAAG,WAAW,KAAK,OAAO;YACpC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;QAC5G,OAAO,CAAC,MAAM,CAAC;YACb,SAAS;YACT,WAAW;YACX,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC/D,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,6DAA6D;SACzH,CAAC,CAAC;IACL,CAAC,CAAC;IACF,0GAA0G;IAC1G,MAAM,uBAAuB,GAAG,CAAC,SAAiC,EAAE,CAAgB,EAAE,OAAmB,EAAE,aAAsB,EAAQ,EAAE;QACzI,IAAI,CAAC;YAAC,aAAa,CAAC,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;QAAC,CAAC;QAC5D,OAAO,GAAG,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;IACpJ,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;QACvC,UAAU;QACV,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,MAAM,EAAE,KAAK,EAAE,GAAG,EAA0B,EAAE;YAC5C,6FAA6F;YAC7F,kGAAkG;YAClG,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;oBACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE;wBACrC,SAAS,EAAE,GAAG,CAAC,SAAS;wBACxB,SAAS,EAAE,GAAG,CAAC,SAAS;wBACxB,GAAG,CAAC,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACnG,CAAC,CAAC;oBACH,MAAM,OAAO,GAAkB;wBAC7B,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvD,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC9D,CAAC;oBACF,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;oBACnE,OAAO,OAAO,CAAC;gBACjB,CAAC;gBACD,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,6FAA6F;gBAC7F,+FAA+F;gBAC/F,oGAAoG;gBACpG,MAAM,OAAO,GAAkB;oBAC7B,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5D,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7D,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvD,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9D,CAAC;gBACF,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;gBAClE,OAAO,OAAO,CAAC;YACjB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,+FAA+F;gBAC/F,gGAAgG;gBAChG,2EAA2E;gBAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,GAAG,CAAC,SAAS,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC9H,MAAM,OAAO,GAAkB;oBAC7B,WAAW,EAAE,OAAO;oBACpB,MAAM,EAAE,cAAc;oBACtB,QAAQ,EAAE,2EAA2E;wBACnF,wDAAwD;iBAC3D,CAAC;gBACF,uBAAuB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;gBAChF,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,uEAAuE;IACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,mBAAmB,IAAI,UAAU,iBAAiB,MAAM,IAAI,CAAC,CAAC;IAEtF,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;QAClC,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,KAAK,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,MAAM,KAAK,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,16 @@
+import { type ScreenContext, type ScreenVerdict, type SecurityGatewayClient } from "./types.js";
+import type { GatewayLogger } from "./server.js";
+export interface LocalSidecarGatewayClientOptions {
+    socketPath: string;
+    /** Per-call deadline. A call that does not get a verdict within this window fails closed. */
+    deadlineMs?: number;
+    logger?: GatewayLogger;
+}
+export declare class LocalSidecarGatewayClient implements SecurityGatewayClient {
+    #private;
+    constructor(opts: LocalSidecarGatewayClientOptions);
+    screenOutbound(content: Uint8Array, ctx: ScreenContext): Promise<ScreenVerdict>;
+    screenInbound(content: Uint8Array, ctx: ScreenContext): Promise<ScreenVerdict>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAyC,KAAK,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACvI,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAYjD,MAAM,WAAW,gCAAgC;IAC/C,UAAU,EAAE,MAAM,CAAC;IACnB,6FAA6F;IAC7F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,qBAAa,yBAA0B,YAAW,qBAAqB;;gBAUzD,IAAI,EAAE,gCAAgC;IAMlD,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAI/E,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAIxE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CA6I7B"}

package/dist/client.js

@@ -0,0 +1,182 @@
+/**
+ * LocalSidecarGatewayClient — the daemon's adapter to a gateway running as a local sidecar.
+ *
+ * Connects to the gateway's Unix domain socket and screens over the length-prefixed JSON
+ * protocol. Every call resolves to a terminal verdict within a deadline: a connect failure, a
+ * socket error, or a timeout all resolve to a fail-closed `block` (gateway_unavailable) — never
+ * a hang and never a silent allow (INV-6 / SI-001 / DB-001).
+ *
+ * Phase 2's remote gateway is a sibling implementation of SecurityGatewayClient that swaps this
+ * Unix socket for an mTLS connection; the daemon code and the message shapes are unchanged.
+ */
+import { connect } from "node:net";
+import { FrameDecoder, encodeFrame, SCREEN_OUTBOUND, SCREEN_INBOUND, } from "./protocol.js";
+import { failClosedVerdict, GOVERNANCE_TIMEOUT } from "./types.js";
+const NOOP_LOGGER = { info() { }, warn() { }, error() { } };
+const DEFAULT_DEADLINE_MS = 5_000;
+export class LocalSidecarGatewayClient {
+    #socketPath;
+    #deadlineMs;
+    #logger;
+    #socket = null;
+    #connecting = null;
+    #pending = new Map();
+    #nextId = 1;
+    #closed = false;
+    constructor(opts) {
+        this.#socketPath = opts.socketPath;
+        this.#deadlineMs = opts.deadlineMs ?? DEFAULT_DEADLINE_MS;
+        this.#logger = opts.logger ?? NOOP_LOGGER;
+    }
+    screenOutbound(content, ctx) {
+        return this.#screen(SCREEN_OUTBOUND, content, ctx);
+    }
+    screenInbound(content, ctx) {
+        return this.#screen(SCREEN_INBOUND, content, ctx);
+    }
+    async close() {
+        this.#closed = true;
+        const sock = this.#socket;
+        this.#socket = null;
+        if (sock)
+            await new Promise((resolve) => { sock.end(() => resolve()); });
+        // Any still-pending calls fail closed rather than hang on a closing client.
+        for (const [, p] of this.#pending) {
+            clearTimeout(p.timer);
+            p.resolve(failClosedVerdict(p.direction));
+        }
+        this.#pending.clear();
+    }
+    async #screen(method, content, ctx) {
+        const direction = method === SCREEN_OUTBOUND ? "outbound" : "inbound";
+        if (this.#closed)
+            return failClosedVerdict(direction);
+        let socket;
+        try {
+            socket = await this.#ensureConnected();
+        }
+        catch (err) {
+            this.#logger.warn("gateway.connect.failed", {
+                direction,
+                error: err instanceof Error ? err.message : String(err),
+            });
+            return failClosedVerdict(direction);
+        }
+        const id = this.#nextId++;
+        const request = {
+            id,
+            method,
+            content: Buffer.from(content).toString("base64"),
+            ctx: {
+                direction,
+                agentName: ctx.agentName,
+                sessionId: ctx.sessionId,
+                ...(ctx.correlationId !== undefined ? { correlationId: ctx.correlationId } : {}),
+                ...(ctx.governanceDecisions !== undefined ? { governanceDecisions: ctx.governanceDecisions } : {}),
+            },
+        };
+        return new Promise((resolve) => {
+            const timer = setTimeout(() => {
+                if (this.#pending.delete(id)) {
+                    this.#logger.warn("gateway.screen.timeout", { direction, deadlineMs: this.#deadlineMs });
+                    // Connected but no verdict within the deadline → governance_timeout (distinct from the
+                    // unreachable case). A timeout is a verdict, not a hang (INV-6 / AC-005).
+                    resolve(failClosedVerdict(direction, GOVERNANCE_TIMEOUT));
+                }
+            }, this.#deadlineMs);
+            if (typeof timer.unref === "function")
+                timer.unref();
+            this.#pending.set(id, { resolve, timer, direction, original: content });
+            try {
+                socket.write(encodeFrame(request));
+            }
+            catch (err) {
+                if (this.#pending.delete(id)) {
+                    clearTimeout(timer);
+                    this.#logger.warn("gateway.write.failed", {
+                        direction,
+                        error: err instanceof Error ? err.message : String(err),
+                    });
+                    resolve(failClosedVerdict(direction));
+                }
+            }
+        });
+    }
+    #ensureConnected() {
+        if (this.#socket && !this.#socket.destroyed)
+            return Promise.resolve(this.#socket);
+        if (this.#connecting)
+            return this.#connecting;
+        this.#connecting = new Promise((resolve, reject) => {
+            const sock = connect(this.#socketPath);
+            // L2: bound the CONNECT too — a stalled connect must fail closed, not hang (INV-6 is
+            // unconditional). A UDS connect normally settles immediately; this guards the pathological case.
+            const connectTimer = setTimeout(() => {
+                sock.destroy();
+                this.#connecting = null;
+                reject(new Error(`gateway connect timed out after ${this.#deadlineMs}ms`));
+            }, this.#deadlineMs);
+            if (typeof connectTimer.unref === "function")
+                connectTimer.unref();
+            const onError = (err) => {
+                clearTimeout(connectTimer);
+                sock.destroy();
+                this.#connecting = null;
+                reject(err);
+            };
+            sock.once("error", onError);
+            sock.once("connect", () => {
+                clearTimeout(connectTimer);
+                sock.off("error", onError);
+                this.#connecting = null;
+                this.#socket = sock;
+                const decoder = new FrameDecoder((obj) => this.#onResponse(obj), (err) => {
+                    this.#logger.warn("gateway.response.decode.failed", { error: err.message });
+                    sock.destroy();
+                });
+                sock.on("data", (chunk) => decoder.push(chunk));
+                // A dropped connection resolves every in-flight call fail-closed — never a hang.
+                const onClose = () => {
+                    if (this.#socket === sock)
+                        this.#socket = null;
+                    for (const [, p] of this.#pending) {
+                        clearTimeout(p.timer);
+                        p.resolve(failClosedVerdict(p.direction));
+                    }
+                    this.#pending.clear();
+                };
+                sock.once("close", onClose);
+                sock.on("error", (err) => this.#logger.warn("gateway.socket.error", { error: err.message }));
+                resolve(sock);
+            });
+        });
+        return this.#connecting;
+    }
+    #onResponse(res) {
+        const pending = this.#pending.get(res.id);
+        if (!pending)
+            return; // already timed out / unknown id
+        this.#pending.delete(res.id);
+        clearTimeout(pending.timer);
+        const wire = res.verdict;
+        const verdict = { disposition: wire.disposition };
+        if (wire.disposition === "allow") {
+            // On allow the gateway omits content to keep the wire small; the daemon acts on the
+            // original bytes it submitted.
+            verdict.content = wire.content !== undefined ? Buffer.from(wire.content, "base64") : pending.original;
+        }
+        else if (wire.content !== undefined) {
+            verdict.content = Buffer.from(wire.content, "base64");
+        }
+        if (wire.reason !== undefined)
+            verdict.reason = wire.reason;
+        if (wire.guidance !== undefined)
+            verdict.guidance = wire.guidance;
+        if (wire.events !== undefined)
+            verdict.events = wire.events;
+        if (wire.terminal !== undefined)
+            verdict.terminal = wire.terminal;
+        pending.resolve(verdict);
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,OAAO,EAAe,MAAM,UAAU,CAAC;AAChD,OAAO,EACL,YAAY,EACZ,WAAW,EACX,eAAe,EACf,cAAc,GAIf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAsE,MAAM,YAAY,CAAC;AAGvI,MAAM,WAAW,GAAkB,EAAE,IAAI,KAAI,CAAC,EAAE,IAAI,KAAI,CAAC,EAAE,KAAK,KAAI,CAAC,EAAE,CAAC;AACxE,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAgBlC,MAAM,OAAO,yBAAyB;IAC3B,WAAW,CAAS;IACpB,WAAW,CAAS;IACpB,OAAO,CAAgB;IAChC,OAAO,GAAkB,IAAI,CAAC;IAC9B,WAAW,GAA2B,IAAI,CAAC;IAC3C,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,OAAO,GAAG,CAAC,CAAC;IACZ,OAAO,GAAG,KAAK,CAAC;IAEhB,YAAY,IAAsC;QAChD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC1D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC;IAC5C,CAAC;IAED,cAAc,CAAC,OAAmB,EAAE,GAAkB;QACpD,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;IAED,aAAa,CAAC,OAAmB,EAAE,GAAkB;QACnD,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,IAAI;YAAE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,4EAA4E;QAC5E,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAoB,EAAE,OAAmB,EAAE,GAAkB;QACzE,MAAM,SAAS,GAAG,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAEtD,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBAC1C,SAAS;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;YACH,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAsB;YACjC,EAAE;YACF,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAChD,GAAG,EAAE;gBACH,SAAS;gBACT,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,GAAG,CAAC,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnG;SACF,CAAC;QAEF,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;YAC5C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;oBACzF,uFAAuF;oBACvF,0EAA0E;oBAC1E,OAAO,CAAC,iBAAiB,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACrB,IAAI,OAAQ,KAAgC,CAAC,KAAK,KAAK,UAAU;gBAAG,KAA+B,CAAC,KAAK,EAAE,CAAC;YAC5G,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC7B,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE;wBACxC,SAAS;wBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACxD,CAAC,CAAC;oBACH,OAAO,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB;QACd,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClF,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC;QAE9C,IAAI,CAAC,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACvC,qFAAqF;YACrF,iGAAiG;YACjG,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;gBACnC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;YAC7E,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACrB,IAAI,OAAQ,YAAuC,CAAC,KAAK,KAAK,UAAU;gBAAG,YAAsC,CAAC,KAAK,EAAE,CAAC;YAC1H,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE;gBAC7B,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;gBACxB,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC3B,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBAEpB,MAAM,OAAO,GAAG,IAAI,YAAY,CAC9B,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAyB,CAAC,EACpD,CAAC,GAAG,EAAE,EAAE;oBACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,CAAC,CACF,CAAC;gBACF,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACxD,iFAAiF;gBACjF,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;wBAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;oBAC/C,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;wBAClC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;wBACtB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;oBAC5C,CAAC;oBACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACxB,CAAC,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC5B,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACpG,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,WAAW,CAAC,GAAuB;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,iCAAiC;QACvD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAE5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC;QACzB,MAAM,OAAO,GAAkB,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjE,IAAI,IAAI,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;YACjC,oFAAoF;YACpF,+BAA+B;YAC/B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACxG,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAClE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAClE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;CACF"}

package/dist/config/config-store.d.ts

@@ -0,0 +1,42 @@
+/** Whether a config change makes the gateway more restrictive (tighten), less (loosen), or neither. */
+export type ConfigDirection = "tighten" | "loosen" | "neutral";
+export type SetResult = {
+    ok: true;
+    version: number;
+    direction: ConfigDirection;
+    fingerprint: string;
+} | {
+    ok: false;
+    reason: "needs_confirmation";
+    direction: "loosen";
+};
+export interface ConfigVersionRow {
+    version: number;
+    value: unknown;
+    direction: ConfigDirection;
+    confirmed: boolean;
+    fingerprint: string;
+}
+export declare class GatewayConfigStore {
+    #private;
+    constructor(dbPath: string);
+    /** Set `key` to `value`. Loosening requires `opts.confirmed`; tightening/neutral is free. The FIRST
+     *  set of a key is classified against the per-key TIGHTEST baseline, not treated as free (B1). */
+    set(key: string, value: unknown, opts?: {
+        confirmed?: boolean;
+    }): SetResult;
+    /** The current (latest-version) value for `key`, or undefined if never set. */
+    get(key: string): unknown;
+    /** The full append-only version history for `key`, oldest first. */
+    history(key: string): ConfigVersionRow[];
+    /**
+     * Recompute the hash chain for `key` and confirm every stored fingerprint + prev-link matches
+     * (catches an edited value, a flipped `confirmed`, a relabelled `direction`, a deleted/reordered row).
+     * NOT resistant to a full consistent rewrite or tail truncation by an actor with DB write access +
+     * the (unkeyed) hash — that needs the Phase-2 attested head on the directory (M9-ATTEST-001); this is
+     * the local half (code-review M3, recorded).
+     */
+    verifyChain(key: string): boolean;
+    close(): void;
+}
+//# sourceMappingURL=config-store.d.ts.map

package/dist/config/config-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.d.ts","sourceRoot":"","sources":["../../src/config/config-store.ts"],"names":[],"mappings":"AAuBA,uGAAuG;AACvG,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE/D,MAAM,MAAM,SAAS,GACjB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,eAAe,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC9E;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,QAAQ,CAAA;CAAE,CAAC;AAErE,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,eAAe,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AA4FD,qBAAa,kBAAkB;;gBAIjB,MAAM,EAAE,MAAM;IAM1B;sGACkG;IAClG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,SAAS;IA2C/E,+EAA+E;IAC/E,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAKzB,oEAAoE;IACpE,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,EAAE;IAaxC;;;;;;OAMG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAcjC,KAAK,IAAI,IAAI;CAWd"}