@det-acp/core 0.2.0

package/dist/tools/git.js

@@ -0,0 +1,193 @@
+/**
+ * git:diff and git:apply — Scoped git tool adapters.
+ *
+ * git:diff — produces a diff of changes in a repo (read-only).
+ * git:apply — applies a patch to a repo (with rollback via git stash).
+ */
+import { execSync } from 'node:child_process';
+import crypto from 'node:crypto';
+import { z } from 'zod';
+import { ToolAdapter } from './base.js';
+import { evaluateAction } from '../policy/evaluator.js';
+// ---------------------------------------------------------------------------
+// git:diff
+// ---------------------------------------------------------------------------
+export const GitDiffInputSchema = z.object({
+    repo: z.string().min(1, 'Repository path is required'),
+    ref: z.string().default('HEAD'),
+    paths: z.array(z.string()).optional(),
+});
+export class GitDiffAdapter extends ToolAdapter {
+    name = 'git:diff';
+    description = 'Get git diff output for a repository';
+    inputSchema = GitDiffInputSchema;
+    validate(input, policy) {
+        const parsed = GitDiffInputSchema.safeParse(input);
+        if (!parsed.success) {
+            return {
+                verdict: 'deny',
+                tool: this.name,
+                reasons: parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`),
+            };
+        }
+        return evaluateAction({ tool: this.name, input: parsed.data }, policy);
+    }
+    async dryRun(input, _ctx) {
+        const { repo, ref, paths } = input;
+        return {
+            tool: this.name,
+            wouldDo: `git diff ${ref} in ${repo}${paths ? ` -- ${paths.join(' ')}` : ''}`,
+            estimatedChanges: [],
+            warnings: [],
+        };
+    }
+    async execute(input, _ctx) {
+        const start = Date.now();
+        const { repo, ref, paths } = input;
+        try {
+            let cmd = `git diff ${ref}`;
+            if (paths && paths.length > 0) {
+                cmd += ` -- ${paths.join(' ')}`;
+            }
+            const diff = execSync(cmd, {
+                cwd: repo,
+                encoding: 'utf-8',
+                timeout: 30000,
+            });
+            const diffHash = crypto.createHash('sha256').update(diff).digest('hex');
+            return this.success({ diff, linesChanged: diff.split('\n').length }, Date.now() - start, [
+                { type: 'diff', value: diff.slice(0, 8192), description: `git diff ${ref} (truncated)` },
+                { type: 'checksum', value: `sha256:${diffHash}`, description: 'Diff content hash' },
+            ]);
+        }
+        catch (err) {
+            return this.failure(err.message, Date.now() - start);
+        }
+    }
+    async rollback(_input, _ctx) {
+        return {
+            tool: this.name,
+            success: true,
+            description: 'No rollback needed for read-only git diff',
+        };
+    }
+}
+// ---------------------------------------------------------------------------
+// git:apply
+// ---------------------------------------------------------------------------
+export const GitApplyInputSchema = z.object({
+    repo: z.string().min(1, 'Repository path is required'),
+    patch: z.string().min(1, 'Patch content is required'),
+    check: z.boolean().default(false),
+});
+export class GitApplyAdapter extends ToolAdapter {
+    name = 'git:apply';
+    description = 'Apply a git patch to a repository';
+    inputSchema = GitApplyInputSchema;
+    validate(input, policy) {
+        const parsed = GitApplyInputSchema.safeParse(input);
+        if (!parsed.success) {
+            return {
+                verdict: 'deny',
+                tool: this.name,
+                reasons: parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`),
+            };
+        }
+        return evaluateAction({ tool: this.name, input: parsed.data }, policy);
+    }
+    async dryRun(input, _ctx) {
+        const { repo, patch } = input;
+        const patchLines = patch.split('\n').length;
+        // Actually test the patch with --check
+        let warnings = [];
+        try {
+            execSync('git apply --check --stat', {
+                cwd: repo,
+                input: patch,
+                encoding: 'utf-8',
+                timeout: 10000,
+            });
+        }
+        catch (err) {
+            warnings = [`Patch may not apply cleanly: ${err.message}`];
+        }
+        return {
+            tool: this.name,
+            wouldDo: `Apply ${patchLines}-line patch to ${repo}`,
+            estimatedChanges: [`Patch applied to ${repo}`],
+            warnings,
+        };
+    }
+    async execute(input, ctx) {
+        const start = Date.now();
+        const { repo, patch } = input;
+        try {
+            // Stash any existing changes as a safety net
+            const stashOutput = execSync('git stash push -m "det-acp-pre-apply-backup"', {
+                cwd: repo,
+                encoding: 'utf-8',
+                timeout: 10000,
+            });
+            const didStash = !stashOutput.includes('No local changes');
+            ctx.rollbackData[`git:apply:${repo}`] = { repo, didStash };
+            // Apply the patch
+            execSync('git apply', {
+                cwd: repo,
+                input: patch,
+                encoding: 'utf-8',
+                timeout: 30000,
+            });
+            const patchHash = crypto.createHash('sha256').update(patch).digest('hex');
+            ctx.budget.filesChanged++;
+            return this.success({ applied: true, repo }, Date.now() - start, [
+                { type: 'diff', value: patch.slice(0, 8192), description: 'Applied patch (truncated)' },
+                { type: 'checksum', value: `sha256:${patchHash}`, description: 'Patch content hash' },
+            ]);
+        }
+        catch (err) {
+            return this.failure(err.message, Date.now() - start);
+        }
+    }
+    async rollback(input, ctx) {
+        const { repo } = input;
+        const rollbackData = ctx.rollbackData[`git:apply:${repo}`];
+        if (!rollbackData) {
+            return {
+                tool: this.name,
+                success: false,
+                description: 'No rollback data available',
+                error: 'Rollback data not found',
+            };
+        }
+        try {
+            // Revert to pre-apply state
+            execSync('git checkout .', {
+                cwd: rollbackData.repo,
+                encoding: 'utf-8',
+                timeout: 10000,
+            });
+            // Restore stashed changes if we stashed them
+            if (rollbackData.didStash) {
+                execSync('git stash pop', {
+                    cwd: rollbackData.repo,
+                    encoding: 'utf-8',
+                    timeout: 10000,
+                });
+            }
+            return {
+                tool: this.name,
+                success: true,
+                description: `Reverted patch in ${rollbackData.repo}${rollbackData.didStash ? ' and restored stashed changes' : ''}`,
+            };
+        }
+        catch (err) {
+            return {
+                tool: this.name,
+                success: false,
+                description: `Failed to rollback git apply in ${rollbackData.repo}`,
+                error: err.message,
+            };
+        }
+    }
+}
+//# sourceMappingURL=git.js.map

package/dist/tools/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/tools/git.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAUxD,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,6BAA6B,CAAC;IACtD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAIH,MAAM,OAAO,cAAe,SAAQ,WAAW;IACpC,IAAI,GAAG,UAAU,CAAC;IAClB,WAAW,GAAG,sCAAsC,CAAC;IACrD,WAAW,GAAG,kBAAkB,CAAC;IAE1C,QAAQ,CAAC,KAAc,EAAE,MAAc;QACrC,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7E,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,CACnB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,EACvC,MAAM,CACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B,EAAE,IAAsB;QACjE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,KAAqB,CAAC;QACnD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,YAAY,GAAG,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC7E,gBAAgB,EAAE,EAAE;YACpB,QAAQ,EAAE,EAAE;SACb,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,IAAsB;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,KAAqB,CAAC;QAEnD,IAAI,CAAC;YACH,IAAI,GAAG,GAAG,YAAY,GAAG,EAAE,CAAC;YAC5B,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,GAAG,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,CAAC;YAED,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE;gBACzB,GAAG,EAAE,IAAI;gBACT,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAExE,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAC/C,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAClB;gBACE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,YAAY,GAAG,cAAc,EAAE;gBACxF,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,QAAQ,EAAE,EAAE,WAAW,EAAE,mBAAmB,EAAE;aACpF,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,OAAO,CAAE,GAAa,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAA+B,EAAE,IAAsB;QACpE,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,2CAA2C;SACzD,CAAC;IACJ,CAAC;CACF;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,6BAA6B,CAAC;IACtD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,2BAA2B,CAAC;IACrD,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAClC,CAAC,CAAC;AAIH,MAAM,OAAO,eAAgB,SAAQ,WAAW;IACrC,IAAI,GAAG,WAAW,CAAC;IACnB,WAAW,GAAG,mCAAmC,CAAC;IAClD,WAAW,GAAG,mBAAmB,CAAC;IAE3C,QAAQ,CAAC,KAAc,EAAE,MAAc;QACrC,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7E,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,CACnB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,EACvC,MAAM,CACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B,EAAE,IAAsB;QACjE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAsB,CAAC;QAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAE5C,uCAAuC;QACvC,IAAI,QAAQ,GAAa,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,QAAQ,CAAC,0BAA0B,EAAE;gBACnC,GAAG,EAAE,IAAI;gBACT,KAAK,EAAE,KAAK;gBACZ,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,GAAG,CAAC,gCAAiC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,SAAS,UAAU,kBAAkB,IAAI,EAAE;YACpD,gBAAgB,EAAE,CAAC,oBAAoB,IAAI,EAAE,CAAC;YAC9C,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,GAAqB;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAsB,CAAC;QAE/C,IAAI,CAAC;YACH,6CAA6C;YAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,8CAA8C,EAAE;gBAC3E,GAAG,EAAE,IAAI;gBACT,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YAC3D,GAAG,CAAC,YAAY,CAAC,aAAa,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAE3D,kBAAkB;YAClB,QAAQ,CAAC,WAAW,EAAE;gBACpB,GAAG,EAAE,IAAI;gBACT,KAAK,EAAE,KAAK;gBACZ,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE1E,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAE1B,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EACvB,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAClB;gBACE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE;gBACvF,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,SAAS,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE;aACtF,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,OAAO,CAAE,GAAa,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA8B,EAAE,GAAqB;QAClE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAsB,CAAC;QACxC,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,aAAa,IAAI,EAAE,CAG5C,CAAC;QAEd,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,4BAA4B;gBACzC,KAAK,EAAE,yBAAyB;aACjC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,4BAA4B;YAC5B,QAAQ,CAAC,gBAAgB,EAAE;gBACzB,GAAG,EAAE,YAAY,CAAC,IAAI;gBACtB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YAEH,6CAA6C;YAC7C,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,QAAQ,CAAC,eAAe,EAAE;oBACxB,GAAG,EAAE,YAAY,CAAC,IAAI;oBACtB,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,KAAK;iBACf,CAAC,CAAC;YACL,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,qBAAqB,YAAY,CAAC,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,EAAE,EAAE;aACrH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,mCAAmC,YAAY,CAAC,IAAI,EAAE;gBACnE,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/tools/http-request.d.ts

@@ -0,0 +1,48 @@
+/**
+ * http:request — Allow-listed HTTP request tool adapter.
+ *
+ * Makes HTTP requests with strict domain and method allow-listing.
+ */
+import { z } from 'zod';
+import { ToolAdapter } from './base.js';
+import type { DryRunResult, ExecutionContext, ExecutionResult, Policy, RollbackResult, ValidationResult } from '../types.js';
+export declare const HttpRequestInputSchema: z.ZodObject<{
+    url: z.ZodString;
+    method: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        GET: "GET";
+        POST: "POST";
+        PUT: "PUT";
+        PATCH: "PATCH";
+        DELETE: "DELETE";
+        HEAD: "HEAD";
+        OPTIONS: "OPTIONS";
+    }>>>;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    body: z.ZodOptional<z.ZodString>;
+    timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+}, z.core.$strip>;
+export type HttpRequestInput = z.infer<typeof HttpRequestInputSchema>;
+export declare class HttpRequestAdapter extends ToolAdapter {
+    readonly name = "http:request";
+    readonly description = "Make HTTP requests to allow-listed domains";
+    readonly inputSchema: z.ZodObject<{
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+            GET: "GET";
+            POST: "POST";
+            PUT: "PUT";
+            PATCH: "PATCH";
+            DELETE: "DELETE";
+            HEAD: "HEAD";
+            OPTIONS: "OPTIONS";
+        }>>>;
+        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        body: z.ZodOptional<z.ZodString>;
+        timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    }, z.core.$strip>;
+    validate(input: unknown, policy: Policy): ValidationResult;
+    dryRun(input: Record<string, unknown>, _ctx: ExecutionContext): Promise<DryRunResult>;
+    execute(input: Record<string, unknown>, ctx: ExecutionContext): Promise<ExecutionResult>;
+    rollback(_input: Record<string, unknown>, _ctx: ExecutionContext): Promise<RollbackResult>;
+}
+//# sourceMappingURL=http-request.d.ts.map

package/dist/tools/http-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-request.d.ts","sourceRoot":"","sources":["../../src/tools/http-request.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,MAAM,EACN,cAAc,EACd,gBAAgB,EACjB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;iBAMjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,qBAAa,kBAAmB,SAAQ,WAAW;IACjD,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,WAAW,gDAAgD;IACpE,QAAQ,CAAC,WAAW;;;;;;;;;;;;;;sBAA0B;IAE9C,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB;IAgBpD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IAYrF,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAmDxF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC;CAOjG"}

package/dist/tools/http-request.js

@@ -0,0 +1,91 @@
+/**
+ * http:request — Allow-listed HTTP request tool adapter.
+ *
+ * Makes HTTP requests with strict domain and method allow-listing.
+ */
+import crypto from 'node:crypto';
+import { z } from 'zod';
+import { ToolAdapter } from './base.js';
+import { evaluateAction } from '../policy/evaluator.js';
+export const HttpRequestInputSchema = z.object({
+    url: z.string().url('Must be a valid URL'),
+    method: z.enum(['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD', 'OPTIONS']).optional().default('GET'),
+    headers: z.record(z.string(), z.string()).optional(),
+    body: z.string().optional(),
+    timeout: z.number().positive().optional().default(30000),
+});
+export class HttpRequestAdapter extends ToolAdapter {
+    name = 'http:request';
+    description = 'Make HTTP requests to allow-listed domains';
+    inputSchema = HttpRequestInputSchema;
+    validate(input, policy) {
+        const parsed = HttpRequestInputSchema.safeParse(input);
+        if (!parsed.success) {
+            return {
+                verdict: 'deny',
+                tool: this.name,
+                reasons: parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`),
+            };
+        }
+        return evaluateAction({ tool: this.name, input: parsed.data }, policy);
+    }
+    async dryRun(input, _ctx) {
+        const { url, method, body } = input;
+        const parsed = new URL(url);
+        return {
+            tool: this.name,
+            wouldDo: `${method} ${parsed.hostname}${parsed.pathname}`,
+            estimatedChanges: method !== 'GET' && method !== 'HEAD' ? [`HTTP ${method} to ${parsed.hostname}`] : [],
+            warnings: body ? [`Request has a body (${Buffer.byteLength(body)} bytes)`] : [],
+        };
+    }
+    async execute(input, ctx) {
+        const start = Date.now();
+        const { url, method, headers, body, timeout } = input;
+        try {
+            const controller = new AbortController();
+            const timeoutId = setTimeout(() => controller.abort(), timeout);
+            const response = await fetch(url, {
+                method,
+                headers: headers ? new Headers(headers) : undefined,
+                body: body ?? undefined,
+                signal: controller.signal,
+            });
+            clearTimeout(timeoutId);
+            const responseBody = await response.text();
+            const bodyHash = crypto.createHash('sha256').update(responseBody).digest('hex');
+            const payloadHash = body
+                ? crypto.createHash('sha256').update(body).digest('hex')
+                : 'none';
+            ctx.budget.totalOutputBytes += Buffer.byteLength(responseBody);
+            return this.success({
+                status: response.status,
+                statusText: response.statusText,
+                headers: Object.fromEntries(response.headers.entries()),
+                body: responseBody,
+            }, Date.now() - start, [
+                {
+                    type: 'log',
+                    value: `${method} ${url} → ${response.status} ${response.statusText}`,
+                    description: 'HTTP request/response',
+                },
+                {
+                    type: 'checksum',
+                    value: `request:sha256:${payloadHash} response:sha256:${bodyHash}`,
+                    description: 'Payload hashes',
+                },
+            ]);
+        }
+        catch (err) {
+            return this.failure(err.message, Date.now() - start);
+        }
+    }
+    async rollback(_input, _ctx) {
+        return {
+            tool: this.name,
+            success: false,
+            description: 'HTTP requests cannot be automatically rolled back. Define compensation actions at the job level.',
+        };
+    }
+}
+//# sourceMappingURL=http-request.js.map

package/dist/tools/http-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-request.js","sourceRoot":"","sources":["../../src/tools/http-request.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAUxD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtG,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACzD,CAAC,CAAC;AAIH,MAAM,OAAO,kBAAmB,SAAQ,WAAW;IACxC,IAAI,GAAG,cAAc,CAAC;IACtB,WAAW,GAAG,4CAA4C,CAAC;IAC3D,WAAW,GAAG,sBAAsB,CAAC;IAE9C,QAAQ,CAAC,KAAc,EAAE,MAAc;QACrC,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7E,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,CACnB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,EACvC,MAAM,CACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B,EAAE,IAAsB;QACjE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAyB,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAE5B,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,GAAG,MAAM,IAAI,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE;YACzD,gBAAgB,EAAE,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,MAAM,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;YACvG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,uBAAuB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE;SAChF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,GAAqB;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAyB,CAAC;QAE1E,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;YAEhE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM;gBACN,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAiC,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC7E,IAAI,EAAE,IAAI,IAAI,SAAS;gBACvB,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,YAAY,CAAC,SAAS,CAAC,CAAC;YAExB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChF,MAAM,WAAW,GAAG,IAAI;gBACtB,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACxD,CAAC,CAAC,MAAM,CAAC;YAEX,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAE/D,OAAO,IAAI,CAAC,OAAO,CACjB;gBACE,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACvD,IAAI,EAAE,YAAY;aACnB,EACD,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAClB;gBACE;oBACE,IAAI,EAAE,KAAK;oBACX,KAAK,EAAE,GAAG,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE;oBACrE,WAAW,EAAE,uBAAuB;iBACrC;gBACD;oBACE,IAAI,EAAE,UAAU;oBAChB,KAAK,EAAE,kBAAkB,WAAW,oBAAoB,QAAQ,EAAE;oBAClE,WAAW,EAAE,gBAAgB;iBAC9B;aACF,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,OAAO,CAAE,GAAa,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAA+B,EAAE,IAAsB;QACpE,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,kGAAkG;SAChH,CAAC;IACJ,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,257 @@
+/**
+ * Core types for the Deterministic Agent Control Protocol.
+ *
+ * These types are the shared vocabulary used across the entire framework:
+ * policy engine, tool adapters, session manager, ledger, and gateway runtime.
+ */
+export type ToolName = 'file:read' | 'file:write' | 'file:delete' | 'command:run' | 'http:request' | 'git:diff' | 'git:apply' | (string & {});
+export type ApprovalMode = 'auto' | 'human' | 'webhook';
+export type RiskLevel = 'low' | 'medium' | 'high' | 'critical';
+export interface CapabilityScope {
+    /** Glob patterns for allowed file paths */
+    paths?: string[];
+    /** Allowed binary names for command execution */
+    binaries?: string[];
+    /** Allowed domain names for HTTP requests */
+    domains?: string[];
+    /** Allowed HTTP methods */
+    methods?: string[];
+    /** Allowed git repository paths */
+    repos?: string[];
+}
+export interface Capability {
+    tool: ToolName;
+    scope: CapabilityScope;
+}
+export interface Gate {
+    action: ToolName;
+    approval: ApprovalMode;
+    risk_level?: RiskLevel;
+    condition?: string;
+}
+export interface Limits {
+    max_runtime_ms?: number;
+    max_output_bytes?: number;
+    max_files_changed?: number;
+    max_retries?: number;
+    max_cost_usd?: number;
+}
+export interface EvidenceConfig {
+    require: string[];
+    format: 'jsonl';
+}
+export interface ForbiddenPattern {
+    pattern: string;
+}
+export interface RemediationRule {
+    match: string;
+    action: string;
+}
+export interface Remediation {
+    rules: RemediationRule[];
+    fallback_chain?: string[];
+}
+export interface RateLimitConfig {
+    max_per_minute: number;
+}
+export interface EscalationRule {
+    /** Trigger after N actions evaluated */
+    after_actions?: number;
+    /** Trigger after N minutes elapsed */
+    after_minutes?: number;
+    /** What to require when triggered */
+    require: 'human_checkin';
+}
+export interface SessionConstraints {
+    /** Maximum actions per session */
+    max_actions?: number;
+    /** Terminate session after N denials */
+    max_denials?: number;
+    /** Rate limiting for actions */
+    rate_limit?: RateLimitConfig;
+    /** Escalation rules based on thresholds */
+    escalation?: EscalationRule[];
+}
+export interface Policy {
+    version: string;
+    name: string;
+    description?: string;
+    capabilities: Capability[];
+    limits: Limits;
+    gates: Gate[];
+    evidence: EvidenceConfig;
+    forbidden: ForbiddenPattern[];
+    remediation?: Remediation;
+    /** Session-level constraints for the gateway model */
+    session?: SessionConstraints;
+}
+export interface ActionRequest {
+    /** The tool to invoke, e.g. "file:read" */
+    tool: ToolName;
+    /** Tool-specific input parameters */
+    input: Record<string, unknown>;
+    /** Optional idempotency key provided by caller */
+    idempotencyKey?: string;
+}
+export type ValidationVerdict = 'allow' | 'deny' | 'gate';
+export interface ValidationResult {
+    verdict: ValidationVerdict;
+    tool: ToolName;
+    reasons: string[];
+    /** If verdict is 'gate', which gate triggered */
+    gate?: Gate;
+}
+export interface DryRunResult {
+    tool: ToolName;
+    wouldDo: string;
+    estimatedChanges?: string[];
+    warnings?: string[];
+}
+export interface ExecutionResult {
+    tool: ToolName;
+    success: boolean;
+    output?: unknown;
+    artifacts?: ExecutionArtifact[];
+    error?: string;
+    durationMs: number;
+}
+export interface ExecutionArtifact {
+    type: 'diff' | 'checksum' | 'log' | 'snapshot' | 'exit_code';
+    value: string;
+    description?: string;
+}
+export interface RollbackResult {
+    tool: ToolName;
+    success: boolean;
+    description: string;
+    error?: string;
+}
+export interface ExecutionContext {
+    sessionId: string;
+    actionIndex: number;
+    dryRun: boolean;
+    policy: Policy;
+    /** Scratch data that tools can use to stash rollback info (e.g. backup paths) */
+    rollbackData: Record<string, unknown>;
+    /** Runtime budget tracking */
+    budget: BudgetTracker;
+}
+export interface BudgetTracker {
+    startedAt: number;
+    filesChanged: number;
+    totalOutputBytes: number;
+    retries: number;
+    costUsd: number;
+    /** Number of actions evaluated in this session */
+    actionsEvaluated: number;
+    /** Number of actions denied in this session */
+    actionsDenied: number;
+}
+export type SessionState = 'active' | 'paused' | 'terminated';
+export interface Session {
+    id: string;
+    policy: Policy;
+    state: SessionState;
+    budget: BudgetTracker;
+    actions: SessionAction[];
+    /** Optional metadata about the agent/source */
+    metadata?: Record<string, unknown>;
+    createdAt: string;
+    updatedAt: string;
+    terminatedAt?: string;
+    terminationReason?: string;
+}
+export interface SessionAction {
+    id: string;
+    index: number;
+    request: ActionRequest;
+    validation: ValidationResult;
+    /** Recorded after external execution */
+    result?: ActionResult;
+    timestamp: string;
+}
+export interface ActionResult {
+    success: boolean;
+    output?: unknown;
+    artifacts?: ExecutionArtifact[];
+    error?: string;
+    durationMs?: number;
+}
+export interface EvaluateRequest {
+    sessionId: string;
+    action: ActionRequest;
+}
+export interface BudgetSnapshot {
+    runtimeMs: number;
+    filesChanged: number;
+    totalOutputBytes: number;
+    actionsEvaluated: number;
+    actionsDenied: number;
+    costUsd: number;
+}
+export interface EvaluateResponse {
+    actionId: string;
+    decision: ValidationVerdict;
+    reasons: string[];
+    gate?: Gate;
+    budgetRemaining?: BudgetSnapshot;
+    warnings?: string[];
+}
+export interface RecordResultRequest {
+    sessionId: string;
+    actionId: string;
+    result: ActionResult;
+}
+export interface SessionReport {
+    sessionId: string;
+    state: SessionState;
+    totalActions: number;
+    allowed: number;
+    denied: number;
+    gated: number;
+    durationMs: number;
+    budgetUsed: BudgetTracker;
+    actions: SessionAction[];
+}
+export type LedgerEventType = 'session:start' | 'session:state_change' | 'session:terminate' | 'action:evaluate' | 'action:result' | 'action:rollback' | 'gate:requested' | 'gate:approved' | 'gate:rejected' | 'budget:warning' | 'budget:exceeded' | 'escalation:triggered';
+export interface LedgerEntry {
+    seq: number;
+    ts: string;
+    hash: string;
+    prev: string;
+    sessionId: string;
+    type: LedgerEventType;
+    data: Record<string, unknown>;
+}
+export type GateDecision = 'approved' | 'rejected' | 'pending';
+export interface GateRequest {
+    sessionId: string;
+    actionId: string;
+    action: ActionRequest;
+    gate: Gate;
+    requestedAt: string;
+}
+export interface GateResponse {
+    decision: GateDecision;
+    respondedBy?: string;
+    respondedAt?: string;
+    reason?: string;
+}
+export interface CreateSessionRequest {
+    policy: string;
+    metadata?: Record<string, unknown>;
+}
+export interface SessionStatusResponse {
+    session: Session;
+}
+export interface ApproveRequest {
+    actionId: string;
+    respondedBy?: string;
+    reason?: string;
+}
+export interface RejectRequest {
+    actionId: string;
+    respondedBy?: string;
+    reason: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,YAAY,GAAG,aAAa,GAAG,aAAa,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE9I,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;AAExD,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE/D,MAAM,WAAW,eAAe;IAC9B,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,2BAA2B;IAC3B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,WAAW,IAAI;IACnB,MAAM,EAAE,QAAQ,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;IACvB,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,MAAM;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAMD,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sCAAsC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qCAAqC;IACrC,OAAO,EAAE,eAAe,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gCAAgC;IAChC,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,2CAA2C;IAC3C,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;CAC/B;AAMD,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,UAAU,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,QAAQ,EAAE,cAAc,CAAC;IACzB,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,sDAAsD;IACtD,OAAO,CAAC,EAAE,kBAAkB,CAAC;CAC9B;AAMD,MAAM,WAAW,aAAa;IAC5B,2CAA2C;IAC3C,IAAI,EAAE,QAAQ,CAAC;IACf,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,kDAAkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iDAAiD;IACjD,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,KAAK,GAAG,UAAU,GAAG,WAAW,CAAC;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,8BAA8B;IAC9B,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,gBAAgB,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,aAAa,EAAE,MAAM,CAAC;CACvB;AAMD,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,CAAC;AAE9D,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,YAAY,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,wCAAwC;IACxC,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,aAAa,CAAC;IAC1B,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B;AAMD,MAAM,MAAM,eAAe,GACvB,eAAe,GACf,sBAAsB,GACtB,mBAAmB,GACnB,iBAAiB,GACjB,eAAe,GACf,iBAAiB,GACjB,gBAAgB,GAChB,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,iBAAiB,GACjB,sBAAsB,CAAC;AAE3B,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,eAAe,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAMD,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;AAE/D,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,IAAI,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,YAAY,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB"}

package/dist/types.js

@@ -0,0 +1,8 @@
+/**
+ * Core types for the Deterministic Agent Control Protocol.
+ *
+ * These types are the shared vocabulary used across the entire framework:
+ * policy engine, tool adapters, session manager, ledger, and gateway runtime.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}