@driftgard/node 1.13.0 → 1.15.0

package/dist/control-pack-cache.d.ts

@@ -19,6 +19,7 @@ export interface ControlPackCacheConfig {
         version?: number;
         error?: string;
         stale?: boolean;
+        orgSuspended?: boolean;
     }) => void;
 }
 export declare class ControlPackCache {
@@ -29,6 +30,8 @@ export declare class ControlPackCache {
     private lastRefreshedAt;
     private refreshTimer;
     private stale;
+    private _orgSuspended;
+    private _orgStatus;
     constructor(config: ControlPackCacheConfig);
     /** Fetch the active control pack. Must be called before evaluating. */
     init(): Promise<void>;
@@ -43,6 +46,10 @@ export declare class ControlPackCache {
         stale: boolean;
         last_refreshed_at: string | null;
     };
+    /** Check if the org is suspended/cancelled. */
+    isOrgSuspended(): boolean;
+    /** Get the org status if suspended. */
+    getOrgStatus(): string | null;
     /** Refresh the control pack from the API. */
     private refresh;
 }

package/dist/control-pack-cache.js

@@ -16,6 +16,8 @@ class ControlPackCache {
         this.lastRefreshedAt = null;
         this.refreshTimer = null;
         this.stale = false;
+        this._orgSuspended = false;
+        this._orgStatus = null;
         this.config = config;
     }
     /** Fetch the active control pack. Must be called before evaluating. */
@@ -56,6 +58,14 @@ class ControlPackCache {
             last_refreshed_at: this.lastRefreshedAt,
         };
     }
+    /** Check if the org is suspended/cancelled. */
+    isOrgSuspended() {
+        return this._orgSuspended;
+    }
+    /** Get the org status if suspended. */
+    getOrgStatus() {
+        return this._orgStatus;
+    }
     /** Refresh the control pack from the API. */
     async refresh() {
         const { apiKey, baseUrl, projectId, timeout = 10000 } = this.config;
@@ -69,6 +79,20 @@ class ControlPackCache {
                 },
                 signal: controller.signal,
             });
+            // Detect org suspension (403 with org_suspended error)
+            if (res.status === 403) {
+                const payload = await res.json().catch(() => ({}));
+                if (payload?.error === "org_suspended") {
+                    this._orgSuspended = true;
+                    this._orgStatus = String(payload?.org_status || "suspended");
+                    this.config.onRefresh?.({
+                        success: false,
+                        error: String(payload?.message || "Organisation suspended"),
+                        orgSuspended: true,
+                    });
+                    throw new Error(String(payload?.message || "Your organisation has been suspended. Contact support."));
+                }
+            }
             if (!res.ok) {
                 throw new Error(`HTTP ${res.status}: ${res.statusText}`);
             }
@@ -82,6 +106,9 @@ class ControlPackCache {
             this.controlPackVersion = Number(cp.version || 0);
             this.lastRefreshedAt = new Date().toISOString();
             this.stale = false;
+            // Clear suspension flag on successful refresh (org reactivated)
+            this._orgSuspended = false;
+            this._orgStatus = null;
             this.config.onRefresh?.({
                 success: true,
                 version: this.controlPackVersion,
@@ -90,7 +117,7 @@ class ControlPackCache {
         catch (e) {
             const msg = e instanceof Error ? e.message : String(e);
             // If we have a cached pack, mark as stale but keep using it
-            if (this.controlPack) {
+            if (this.controlPack && !this._orgSuspended) {
                 this.stale = true;
                 this.config.onRefresh?.({
                     success: false,
@@ -99,7 +126,7 @@ class ControlPackCache {
                     version: this.controlPackVersion,
                 });
             }
-            else {
+            else if (!this._orgSuspended) {
                 // No cached pack — this is fatal for local mode
                 this.config.onRefresh?.({
                     success: false,

package/dist/errors.d.ts

@@ -18,3 +18,7 @@ export declare class ChainDepthExceededError extends DriftgardError {
     max: number;
     constructor(message?: string, depth?: number, max?: number);
 }
+export declare class OrgSuspendedError extends DriftgardError {
+    orgStatus: string;
+    constructor(message?: string, orgStatus?: string);
+}

package/dist/errors.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ChainDepthExceededError = exports.FeatureNotAvailableError = exports.RateLimitError = exports.AuthError = exports.DriftgardError = void 0;
+exports.OrgSuspendedError = exports.ChainDepthExceededError = exports.FeatureNotAvailableError = exports.RateLimitError = exports.AuthError = exports.DriftgardError = void 0;
 class DriftgardError extends Error {
     constructor(message, status, code) {
         super(message);
@@ -41,3 +41,11 @@ class ChainDepthExceededError extends DriftgardError {
     }
 }
 exports.ChainDepthExceededError = ChainDepthExceededError;
+class OrgSuspendedError extends DriftgardError {
+    constructor(message = "Your organisation has been suspended. Contact support.", orgStatus = "suspended") {
+        super(message, 403, "org_suspended");
+        this.name = "OrgSuspendedError";
+        this.orgStatus = orgStatus;
+    }
+}
+exports.OrgSuspendedError = OrgSuspendedError;

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { DriftgardConfig, EvaluateRequest, EvaluateResponse, ToolCallRequest, OutcomeRequest } from "./types";
 export { DriftgardConfig, EvaluateRequest, EvaluateResponse, CircuitBreakerConfig, ToolCallRequest, OutcomeRequest } from "./types";
 export { Violation, EvaluationResult, FallbackResponse, HitlInfo } from "./types";
-export { DriftgardError, AuthError, RateLimitError, FeatureNotAvailableError, ChainDepthExceededError } from "./errors";
+export { DriftgardError, AuthError, RateLimitError, FeatureNotAvailableError, ChainDepthExceededError, OrgSuspendedError } from "./errors";
 export { evaluateLocal } from "./local-evaluator";
 export { ControlPackCache } from "./control-pack-cache";
 type CircuitState = "closed" | "open" | "half-open";

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Driftgard = exports.ControlPackCache = exports.evaluateLocal = exports.ChainDepthExceededError = exports.FeatureNotAvailableError = exports.RateLimitError = exports.AuthError = exports.DriftgardError = void 0;
+exports.Driftgard = exports.ControlPackCache = exports.evaluateLocal = exports.OrgSuspendedError = exports.ChainDepthExceededError = exports.FeatureNotAvailableError = exports.RateLimitError = exports.AuthError = exports.DriftgardError = void 0;
 const errors_1 = require("./errors");
 const local_evaluator_1 = require("./local-evaluator");
 const control_pack_cache_1 = require("./control-pack-cache");
@@ -10,6 +10,7 @@ Object.defineProperty(exports, "AuthError", { enumerable: true, get: function ()
 Object.defineProperty(exports, "RateLimitError", { enumerable: true, get: function () { return errors_2.RateLimitError; } });
 Object.defineProperty(exports, "FeatureNotAvailableError", { enumerable: true, get: function () { return errors_2.FeatureNotAvailableError; } });
 Object.defineProperty(exports, "ChainDepthExceededError", { enumerable: true, get: function () { return errors_2.ChainDepthExceededError; } });
+Object.defineProperty(exports, "OrgSuspendedError", { enumerable: true, get: function () { return errors_2.OrgSuspendedError; } });
 var local_evaluator_2 = require("./local-evaluator");
 Object.defineProperty(exports, "evaluateLocal", { enumerable: true, get: function () { return local_evaluator_2.evaluateLocal; } });
 var control_pack_cache_2 = require("./control-pack-cache");
@@ -86,6 +87,10 @@ class Driftgard {
             throw new Error("Local mode not configured");
         if (!this.initialized)
             throw new Error("Call init() before evaluate() in local mode");
+        // Check if org is suspended — block all evaluations
+        if (this.cpCache.isOrgSuspended()) {
+            throw new errors_1.OrgSuspendedError("Your organisation has been suspended. Contact support.", this.cpCache.getOrgStatus() || "suspended");
+        }
         const cp = this.cpCache.getControlPack();
         const meta = this.cpCache.getMeta();
         const timestamp = req.timestamp || new Date().toISOString();
@@ -207,9 +212,10 @@ class Driftgard {
             return result;
         }
         catch (e) {
-            // Auth, rate limit, chain depth, feature errors are real errors — don't trigger circuit breaker
+            // Auth, rate limit, chain depth, feature, org suspended errors are real errors — don't trigger circuit breaker
             if (e instanceof errors_1.AuthError || e instanceof errors_1.RateLimitError ||
-                e instanceof errors_1.ChainDepthExceededError || e instanceof errors_1.FeatureNotAvailableError) {
+                e instanceof errors_1.ChainDepthExceededError || e instanceof errors_1.FeatureNotAvailableError ||
+                e instanceof errors_1.OrgSuspendedError) {
                 throw e;
             }
             // Network/server error — increment circuit breaker
@@ -344,6 +350,9 @@ class Driftgard {
                 if (payload?.error === "feature_not_available") {
                     throw new errors_1.FeatureNotAvailableError(payload.message, payload.tier);
                 }
+                if (payload?.error === "org_suspended") {
+                    throw new errors_1.OrgSuspendedError(payload?.message, payload?.org_status || "suspended");
+                }
                 throw new errors_1.DriftgardError(payload?.message || "Forbidden", 403, "forbidden");
             }
             // Retry on 5xx

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@driftgard/node",
-  "version": "1.13.0",
+  "version": "1.15.0",
   "description": "Official DriftGard Node.js SDK — evaluate LLM interactions against your compliance policy",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -10,6 +10,7 @@
   ],
   "scripts": {
     "build": "tsc && rm -rf dist/wasm && cp -r src/wasm dist/wasm",
+    "test": "jest --verbose",
     "prepublishOnly": "npm run build"
   },
   "keywords": [
@@ -33,7 +34,10 @@
     "node": ">=18.0.0"
   },
   "devDependencies": {
+    "@types/jest": "^30.0.0",
     "@types/node": "^25.6.0",
+    "jest": "^30.3.0",
+    "ts-jest": "^29.4.9",
     "typescript": "^5.0.0"
   }
 }