@flowdot.ai/guardian-agent 0.1.0

package/dist/estop/middleware.js

@@ -0,0 +1,40 @@
+/**
+ * createEStopMiddleware — Express/Connect/Fastify-compatible middleware that
+ * returns HTTP 423 Locked when the resolved user is currently pressed.
+ * SPEC §5.4.
+ *
+ * Framework-agnostic: the middleware signature is `(req, res, next)` which
+ * Express, Connect, and Fastify (with middleware mode) all accept.
+ */
+export function createEStopMiddleware(hub, options) {
+    const exclude = options.exclude;
+    const bodyFactory = options.lockedResponseBody ?? defaultLockedBody;
+    return async (req, res, next) => {
+        if (exclude && exclude(req)) {
+            return next();
+        }
+        const userId = options.resolveUserId(req);
+        if (userId === null) {
+            return next();
+        }
+        const pressed = await hub.isPressed(userId);
+        if (!pressed) {
+            return next();
+        }
+        const state = await hub.status(userId);
+        res.statusCode = 423;
+        res.setHeader('content-type', 'application/json');
+        res.end(JSON.stringify(bodyFactory({ pressedAt: state.pressedAt }, userId)));
+    };
+}
+function defaultLockedBody(state, _userId) {
+    // pressedAt is always defined when middleware reaches this — the 423 path
+    // is only taken when hub.isPressed() returned true, which implies a
+    // press state row exists. Treated as required to keep coverage clean.
+    return {
+        error: 'estop_active',
+        message: 'An emergency stop is active for your account. Outbound actions are blocked until cleared.',
+        pressed_at: state.pressedAt,
+    };
+}
+//# sourceMappingURL=middleware.js.map

package/dist/estop/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/estop/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA+BH,MAAM,UAAU,qBAAqB,CACnC,GAAa,EACb,OAA+B;IAE/B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,WAAW,GAAG,OAAO,CAAC,kBAAkB,IAAI,iBAAiB,CAAC;IAEpE,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9B,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA6B,EAC7B,OAAe;IAEf,0EAA0E;IAC1E,oEAAoE;IACpE,sEAAsE;IACtE,OAAO;QACL,KAAK,EAAE,cAAc;QACrB,OAAO,EACL,2FAA2F;QAC7F,UAAU,EAAE,KAAK,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC"}

package/dist/estop/poller.d.ts

@@ -0,0 +1,36 @@
+/**
+ * createEStopPoller — pull-based safety net. SPEC §5.4.
+ *
+ * Polls a status endpoint every N seconds; fires `onPress` / `onClear` on
+ * transitions. Belt-and-braces alongside push notifications (FlowDot's
+ * comms_daemon_commands fan-out).
+ */
+import type { EStopState } from './types.js';
+export interface EStopPollerOptions {
+    /** GET endpoint returning an EStopState as JSON. */
+    statusUrl: string;
+    onPress: (state: EStopState) => void | Promise<void>;
+    onClear: (state: EStopState) => void | Promise<void>;
+    /** Poll interval. SPEC §5.4 default = 5000. */
+    intervalMs?: number;
+    /** Headers for auth. */
+    headers?: Record<string, string>;
+    /** Override fetch for testing. */
+    fetch?: typeof fetch;
+    /** Callback for poll errors. Default: no-op (logging is host's responsibility). */
+    onError?: (err: unknown) => void;
+}
+export declare class EStopPoller {
+    private readonly options;
+    private readonly fetchImpl;
+    private timer;
+    private lastPressed;
+    private running;
+    constructor(options: EStopPollerOptions);
+    start(): void;
+    stop(): Promise<void>;
+    /** Single poll iteration. Exposed for tests. */
+    poll(): Promise<void>;
+}
+export declare function createEStopPoller(options: EStopPollerOptions): EStopPoller;
+//# sourceMappingURL=poller.d.ts.map

package/dist/estop/poller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"poller.d.ts","sourceRoot":"","sources":["../../src/estop/poller.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,WAAW,kBAAkB;IACjC,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wBAAwB;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,kCAAkC;IAClC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,mFAAmF;IACnF,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;CAClC;AAID,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,WAAW,CAAkC;IACrD,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,EAAE,kBAAkB;IAKvC,KAAK,IAAI,IAAI;IASP,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAS3B,gDAAgD;IAC1C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CA8B5B;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CAE1E"}

package/dist/estop/poller.js

@@ -0,0 +1,85 @@
+/**
+ * createEStopPoller — pull-based safety net. SPEC §5.4.
+ *
+ * Polls a status endpoint every N seconds; fires `onPress` / `onClear` on
+ * transitions. Belt-and-braces alongside push notifications (FlowDot's
+ * comms_daemon_commands fan-out).
+ */
+const DEFAULT_INTERVAL_MS = 5000;
+export class EStopPoller {
+    options;
+    fetchImpl;
+    timer = null;
+    lastPressed = undefined;
+    running = false;
+    constructor(options) {
+        this.options = options;
+        this.fetchImpl = options.fetch ?? fetch;
+    }
+    start() {
+        if (this.running)
+            return;
+        this.running = true;
+        const interval = this.options.intervalMs ?? DEFAULT_INTERVAL_MS;
+        // Kick off immediately so transitions are observed without waiting one tick.
+        void this.poll();
+        this.timer = setInterval(() => void this.poll(), interval);
+    }
+    async stop() {
+        if (!this.running)
+            return;
+        this.running = false;
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+    /** Single poll iteration. Exposed for tests. */
+    async poll() {
+        try {
+            const resp = await this.fetchImpl(this.options.statusUrl, {
+                headers: this.options.headers,
+            });
+            if (!resp.ok) {
+                this.options.onError?.(new Error(`status_${resp.status}`));
+                return;
+            }
+            const body = (await resp.json());
+            if (!isEStopState(body)) {
+                this.options.onError?.(new Error('invalid_state_shape'));
+                return;
+            }
+            const previous = this.lastPressed;
+            this.lastPressed = body.pressed;
+            if (previous === undefined) {
+                // First poll: never fire on the initial observation.
+                return;
+            }
+            if (!previous && body.pressed) {
+                await this.options.onPress(body);
+            }
+            else if (previous && !body.pressed) {
+                await this.options.onClear(body);
+            }
+        }
+        catch (err) {
+            this.options.onError?.(err);
+        }
+    }
+}
+export function createEStopPoller(options) {
+    return new EStopPoller(options);
+}
+function isEStopState(v) {
+    if (typeof v !== 'object' || v === null)
+        return false;
+    const obj = v;
+    if (typeof obj.pressed !== 'boolean')
+        return false;
+    if (obj.pressedAt !== undefined && typeof obj.pressedAt !== 'string')
+        return false;
+    if (obj.clearedAt !== undefined && typeof obj.clearedAt !== 'string')
+        return false;
+    return true;
+}
+//# sourceMappingURL=poller.js.map

package/dist/estop/poller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"poller.js","sourceRoot":"","sources":["../../src/estop/poller.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAmBH,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,MAAM,OAAO,WAAW;IACL,OAAO,CAAqB;IAC5B,SAAS,CAAe;IACjC,KAAK,GAA0C,IAAI,CAAC;IACpD,WAAW,GAAwB,SAAS,CAAC;IAC7C,OAAO,GAAG,KAAK,CAAC;IAExB,YAAY,OAA2B;QACrC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IAC1C,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAChE,6EAA6E;QAC7E,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;gBACxD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAY,CAAC;YAC5C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;gBACzD,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC;YAClC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC;YAEhC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,qDAAqD;gBACrD,OAAO;YACT,CAAC;YACD,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC9B,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;iBAAM,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACrC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,CAA4B,CAAC;IACzC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACnF,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACnF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/estop/types.d.ts

@@ -0,0 +1,31 @@
+/**
+ * EStop types. SPEC §5.
+ */
+import type { AuditRecordInitiator } from '../types.js';
+export interface EStopPressOptions {
+    reason: string;
+    operatorId?: string;
+    initiator?: AuditRecordInitiator;
+    /** Free-form structured details (IP, user-agent, etc.) recorded on the audit row. */
+    detail?: Record<string, unknown>;
+}
+export interface EStopClearOptions {
+    operatorId?: string;
+    initiator?: AuditRecordInitiator;
+    detail?: Record<string, unknown>;
+}
+export interface EStopState {
+    pressed: boolean;
+    pressedAt?: string;
+    pressedReason?: string;
+    pressedOperatorId?: string;
+    clearedAt?: string;
+}
+export interface EStopPressResult {
+    state: EStopState;
+}
+export interface EStopClearResult {
+    state: EStopState;
+    authRequired?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/estop/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/estop/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAExD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,oBAAoB,CAAC;IACjC,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,oBAAoB,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,UAAU,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB"}

package/dist/estop/types.js

@@ -0,0 +1,5 @@
+/**
+ * EStop types. SPEC §5.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/estop/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/estop/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/gate/async-callback.d.ts

@@ -0,0 +1,27 @@
+/**
+ * asyncCallbackGate — POSTs the GateRequest to a callback URL, awaits a JSON
+ * GateResponse. SPEC §4.3.
+ */
+import type { ApprovalGate } from './types.js';
+export interface AsyncCallbackGateOptions {
+    /** Endpoint URL to POST GateRequest payloads at. */
+    url: string;
+    /** Default timeout in ms. May be overridden per-request via `timeout_ms`. */
+    timeoutMs?: number;
+    /** Additional headers (e.g., Authorization). */
+    headers?: Record<string, string>;
+    /** Override fetch (for testing). */
+    fetch?: typeof fetch;
+}
+/**
+ * Build an async-callback gate. The returned function POSTs the
+ * GateRequest as JSON and parses the response.
+ *
+ * Failure modes — all yield `decision: 'deny'` with reason in the response:
+ *   - Network error or non-2xx HTTP status
+ *   - Timeout (per-request or default)
+ *   - JSON parse failure
+ *   - Response shape doesn't match GateResponse
+ */
+export declare function asyncCallbackGate(options: AsyncCallbackGateOptions): ApprovalGate;
+//# sourceMappingURL=async-callback.d.ts.map

package/dist/gate/async-callback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"async-callback.d.ts","sourceRoot":"","sources":["../../src/gate/async-callback.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,YAAY,EAA6B,MAAM,YAAY,CAAC;AAE1E,MAAM,WAAW,wBAAwB;IACvC,oDAAoD;IACpD,GAAG,EAAE,MAAM,CAAC;IACZ,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,oCAAoC;IACpC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAID;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,YAAY,CAcjF"}

package/dist/gate/async-callback.js

@@ -0,0 +1,79 @@
+/**
+ * asyncCallbackGate — POSTs the GateRequest to a callback URL, awaits a JSON
+ * GateResponse. SPEC §4.3.
+ */
+const DEFAULT_TIMEOUT_MS = 600_000; // 10 minutes (matches SPEC §4.6 default)
+/**
+ * Build an async-callback gate. The returned function POSTs the
+ * GateRequest as JSON and parses the response.
+ *
+ * Failure modes — all yield `decision: 'deny'` with reason in the response:
+ *   - Network error or non-2xx HTTP status
+ *   - Timeout (per-request or default)
+ *   - JSON parse failure
+ *   - Response shape doesn't match GateResponse
+ */
+export function asyncCallbackGate(options) {
+    const fetchImpl = options.fetch ?? fetch;
+    const defaultTimeout = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const baseHeaders = options.headers ?? {};
+    return async (request) => {
+        const timeoutMs = request.timeout_ms ?? defaultTimeout;
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        const result = await runRequest(fetchImpl, options.url, request, controller, baseHeaders);
+        clearTimeout(timer);
+        return result;
+    };
+}
+async function runRequest(fetchImpl, url, request, controller, baseHeaders) {
+    try {
+        const resp = await fetchImpl(url, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json', ...baseHeaders },
+            body: JSON.stringify(request),
+            signal: controller.signal,
+        });
+        if (!resp.ok) {
+            return denyWithReason(request, `callback_status_${resp.status}`);
+        }
+        const body = (await resp.json());
+        if (!isGateResponse(body)) {
+            return denyWithReason(request, 'callback_invalid_response');
+        }
+        return body;
+    }
+    catch (err) {
+        if (err instanceof Error && err.name === 'AbortError') {
+            return denyWithReason(request, 'gate_timeout');
+        }
+        const msg = err instanceof Error ? err.message : String(err);
+        return denyWithReason(request, `callback_error:${msg}`);
+    }
+}
+function denyWithReason(request, reason) {
+    return {
+        decision: 'deny',
+        reason,
+        granularity: request.granularity,
+    };
+}
+function isGateResponse(v) {
+    if (typeof v !== 'object' || v === null)
+        return false;
+    const obj = v;
+    const validDecisions = ['allow', 'allow_session', 'allow_forever', 'deny', 'ban_forever'];
+    if (typeof obj.decision !== 'string' || !validDecisions.includes(obj.decision)) {
+        return false;
+    }
+    const validGranularities = ['tool', 'toolkit', 'category'];
+    if (typeof obj.granularity !== 'string' || !validGranularities.includes(obj.granularity)) {
+        return false;
+    }
+    if (obj.reason !== undefined && typeof obj.reason !== 'string')
+        return false;
+    if (obj.operator_id !== undefined && typeof obj.operator_id !== 'string')
+        return false;
+    return true;
+}
+//# sourceMappingURL=async-callback.js.map

package/dist/gate/async-callback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"async-callback.js","sourceRoot":"","sources":["../../src/gate/async-callback.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAeH,MAAM,kBAAkB,GAAG,OAAO,CAAC,CAAC,yCAAyC;AAE7E;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAiC;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACzC,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC/D,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IAE1C,OAAO,KAAK,EAAE,OAAoB,EAAyB,EAAE;QAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC;QACvD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QAC1F,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,SAAuB,EACvB,GAAW,EACX,OAAoB,EACpB,UAA2B,EAC3B,WAAmC;IAEnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,WAAW,EAAE;YAC/D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,cAAc,CAAC,OAAO,EAAE,mBAAmB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAY,CAAC;QAC5C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,cAAc,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACtD,OAAO,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,cAAc,CAAC,OAAO,EAAE,kBAAkB,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,OAAoB,EAAE,MAAc;IAC1D,OAAO;QACL,QAAQ,EAAE,MAAM;QAChB,MAAM;QACN,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,CAA4B,CAAC;IACzC,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1F,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC3D,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACzF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/gate/cli.d.ts

@@ -0,0 +1,29 @@
+/**
+ * cliApprovalGate — synchronous-feeling stdin prompt. SPEC §4.3.
+ */
+import type { ApprovalGate, GateResponse } from './types.js';
+export interface CliGateOptions {
+    /** Read line source. Defaults to process.stdin. */
+    input?: NodeJS.ReadableStream;
+    /** Write target for prompt output. Defaults to process.stderr. */
+    output?: NodeJS.WritableStream;
+    /** Identifier recorded on every gate response. */
+    operatorId?: string;
+}
+/**
+ * Build a CLI approval gate. The returned function is reusable across many
+ * calls but is not concurrency-safe: only one prompt at a time.
+ */
+export declare function cliApprovalGate(options?: CliGateOptions): ApprovalGate;
+/**
+ * Parse the user's input. Accepts:
+ *   1 / once / allow      → allow
+ *   2 / session           → allow_session
+ *   3 / forever / always  → allow_forever
+ *   4 / deny / no         → deny
+ *   5 / ban / never       → ban_forever
+ *
+ * Any other input falls through to `deny` (fail-closed).
+ */
+export declare function parseCliAnswer(answer: string): GateResponse['decision'];
+//# sourceMappingURL=cli.d.ts.map

package/dist/gate/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/gate/cli.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,YAAY,EAAe,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1E,MAAM,WAAW,cAAc;IAC7B,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC9B,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IAC/B,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,GAAE,cAAmB,GAAG,YAAY,CAqB1E;AAsBD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAgBvE"}

package/dist/gate/cli.js

@@ -0,0 +1,83 @@
+/**
+ * cliApprovalGate — synchronous-feeling stdin prompt. SPEC §4.3.
+ */
+import { createInterface } from 'node:readline';
+/**
+ * Build a CLI approval gate. The returned function is reusable across many
+ * calls but is not concurrency-safe: only one prompt at a time.
+ */
+export function cliApprovalGate(options = {}) {
+    const input = options.input ?? process.stdin;
+    const output = options.output ?? process.stderr;
+    const operatorId = options.operatorId;
+    return async (request) => {
+        const rl = createInterface({ input, output });
+        try {
+            writePrompt(output, request);
+            const answer = await prompt(rl, '> ');
+            const decision = parseCliAnswer(answer.trim());
+            const out = {
+                decision,
+                granularity: request.granularity,
+            };
+            if (operatorId !== undefined)
+                out.operator_id = operatorId;
+            return out;
+        }
+        finally {
+            rl.close();
+        }
+    };
+}
+function writePrompt(out, request) {
+    const lines = [
+        '',
+        '── guardian-agent approval required ──',
+        `Tool:      ${request.tool_name}`,
+        `Agent:     ${request.agent_id}`,
+        `Session:   ${request.session_id}`,
+        `Args:      ${JSON.stringify(request.tool_args)}`,
+    ];
+    if (request.model) {
+        lines.push(`Model:     ${request.model.provider}/${request.model.id}`);
+    }
+    if (request.context) {
+        lines.push(`Context:   ${request.context}`);
+    }
+    lines.push(`Choose:    1=once, 2=session, 3=forever, 4=deny, 5=ban`);
+    lines.push('');
+    out.write(lines.join('\n') + '\n');
+}
+/**
+ * Parse the user's input. Accepts:
+ *   1 / once / allow      → allow
+ *   2 / session           → allow_session
+ *   3 / forever / always  → allow_forever
+ *   4 / deny / no         → deny
+ *   5 / ban / never       → ban_forever
+ *
+ * Any other input falls through to `deny` (fail-closed).
+ */
+export function parseCliAnswer(answer) {
+    const a = answer.toLowerCase();
+    if (a === '1' || a === 'once' || a === 'allow' || a === 'y' || a === 'yes') {
+        return 'allow';
+    }
+    if (a === '2' || a === 'session') {
+        return 'allow_session';
+    }
+    if (a === '3' || a === 'forever' || a === 'always' || a === 'always_allow') {
+        return 'allow_forever';
+    }
+    if (a === '5' || a === 'ban' || a === 'never' || a === 'ban_forever') {
+        return 'ban_forever';
+    }
+    // Default: deny (fail-closed). Includes `4`, `deny`, `no`, and unknown input.
+    return 'deny';
+}
+function prompt(rl, question) {
+    return new Promise((resolve) => {
+        rl.question(question, (answer) => resolve(answer));
+    });
+}
+//# sourceMappingURL=cli.js.map

package/dist/gate/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/gate/cli.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAAa,MAAM,eAAe,CAAC;AAa3D;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,UAA0B,EAAE;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAEtC,OAAO,KAAK,EAAE,OAAoB,EAAyB,EAAE;QAC3D,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/C,MAAM,GAAG,GAAiB;gBACxB,QAAQ;gBACR,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC,CAAC;YACF,IAAI,UAAU,KAAK,SAAS;gBAAE,GAAG,CAAC,WAAW,GAAG,UAAU,CAAC;YAC3D,OAAO,GAAG,CAAC;QACb,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAA0B,EAAE,OAAoB;IACnE,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,wCAAwC;QACxC,cAAc,OAAO,CAAC,SAAS,EAAE;QACjC,cAAc,OAAO,CAAC,QAAQ,EAAE;QAChC,cAAc,OAAO,CAAC,UAAU,EAAE;QAClC,cAAc,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;KAClD,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACrE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;QAC3E,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,cAAc,EAAE,CAAC;QAC3E,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;QACrE,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,8EAA8E;IAC9E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,EAAa,EAAE,QAAgB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/gate/data-channel.d.ts

@@ -0,0 +1,41 @@
+/**
+ * dataChannelGate — frame encode/decode for LiveKit-style data-channel
+ * transports. SPEC §4.3 / §4.4.
+ *
+ * Wire shape (matches FlowDot's voice/live agent worker contract):
+ *   { kind: 'tool_permission_request', requestId, toolName, toolArgs, ... }
+ *   { kind: 'tool_permission_response', requestId, decision, granularity, ... }
+ *
+ * The library does not own the transport; it provides:
+ *   - `encodeRequest(GateRequest)` → Uint8Array frame to send on the channel
+ *   - `decodeResponse(Uint8Array)` → GateResponse (or null on parse failure)
+ *   - `dataChannelGate(send, on)` → ApprovalGate wired to a channel handle
+ */
+import type { ApprovalGate, GateRequest, GateResponse } from './types.js';
+export type DataChannelSend = (frame: Uint8Array) => void | Promise<void>;
+export type DataChannelOnResponse = (handler: (frame: Uint8Array) => void) => () => void;
+export interface DataChannelGateOptions {
+    send: DataChannelSend;
+    /** Subscribe to incoming frames; returns an unsubscribe function. */
+    onResponse: DataChannelOnResponse;
+    /** Default per-call timeout in ms. SPEC §4.6 default = 600_000. */
+    timeoutMs?: number;
+}
+/** Encode a GateRequest to a wire frame (UTF-8 JSON). */
+export declare function encodeRequest(request: GateRequest): Uint8Array;
+/**
+ * Decode a wire frame. Returns null if the frame is not a valid
+ * tool_permission_response for any request.
+ */
+export declare function decodeResponse(frame: Uint8Array): {
+    requestId: string;
+    response: GateResponse;
+} | null;
+/**
+ * Build a data-channel approval gate. The runtime sends a request frame and
+ * waits for a matching response frame (matched by `event_id` / `requestId`).
+ *
+ * On timeout: returns a `deny` response with reason 'gate_timeout' per SPEC §4.6.
+ */
+export declare function dataChannelGate(options: DataChannelGateOptions): ApprovalGate;
+//# sourceMappingURL=data-channel.d.ts.map

package/dist/gate/data-channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-channel.d.ts","sourceRoot":"","sources":["../../src/gate/data-channel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1E,MAAM,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAC1E,MAAM,MAAM,qBAAqB,GAAG,CAClC,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,KACjC,MAAM,IAAI,CAAC;AAEhB,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,eAAe,CAAC;IACtB,qEAAqE;IACrE,UAAU,EAAE,qBAAqB,CAAC;IAClC,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD,yDAAyD;AACzD,wBAAgB,aAAa,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,CAe9D;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,UAAU,GAChB;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,YAAY,CAAA;CAAE,GAAG,IAAI,CA8BtD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,YAAY,CA0D7E"}

package/dist/gate/data-channel.js

@@ -0,0 +1,132 @@
+/**
+ * dataChannelGate — frame encode/decode for LiveKit-style data-channel
+ * transports. SPEC §4.3 / §4.4.
+ *
+ * Wire shape (matches FlowDot's voice/live agent worker contract):
+ *   { kind: 'tool_permission_request', requestId, toolName, toolArgs, ... }
+ *   { kind: 'tool_permission_response', requestId, decision, granularity, ... }
+ *
+ * The library does not own the transport; it provides:
+ *   - `encodeRequest(GateRequest)` → Uint8Array frame to send on the channel
+ *   - `decodeResponse(Uint8Array)` → GateResponse (or null on parse failure)
+ *   - `dataChannelGate(send, on)` → ApprovalGate wired to a channel handle
+ */
+const DEFAULT_TIMEOUT_MS = 600_000;
+const encoder = new TextEncoder();
+const decoder = new TextDecoder('utf-8');
+/** Encode a GateRequest to a wire frame (UTF-8 JSON). */
+export function encodeRequest(request) {
+    return encoder.encode(JSON.stringify({
+        kind: 'tool_permission_request',
+        requestId: request.event_id,
+        toolName: request.tool_name,
+        toolArgs: request.tool_args,
+        agentId: request.agent_id,
+        sessionId: request.session_id,
+        granularity: request.granularity,
+        ...(request.model === undefined ? {} : { model: request.model }),
+        ...(request.context === undefined ? {} : { context: request.context }),
+        ...(request.timeout_ms === undefined ? {} : { timeoutMs: request.timeout_ms }),
+    }));
+}
+/**
+ * Decode a wire frame. Returns null if the frame is not a valid
+ * tool_permission_response for any request.
+ */
+export function decodeResponse(frame) {
+    let parsed;
+    try {
+        parsed = JSON.parse(decoder.decode(frame));
+    }
+    catch {
+        return null;
+    }
+    if (typeof parsed !== 'object' || parsed === null)
+        return null;
+    const obj = parsed;
+    if (obj.kind !== 'tool_permission_response')
+        return null;
+    if (typeof obj.requestId !== 'string')
+        return null;
+    const validDecisions = ['allow', 'allow_session', 'allow_forever', 'deny', 'ban_forever'];
+    if (typeof obj.decision !== 'string' || !validDecisions.includes(obj.decision)) {
+        return null;
+    }
+    const validGranularities = ['tool', 'toolkit', 'category'];
+    if (typeof obj.granularity !== 'string' || !validGranularities.includes(obj.granularity)) {
+        return null;
+    }
+    if (obj.reason !== undefined && typeof obj.reason !== 'string')
+        return null;
+    if (obj.operatorId !== undefined && typeof obj.operatorId !== 'string')
+        return null;
+    const response = {
+        decision: obj.decision,
+        granularity: obj.granularity,
+    };
+    if (typeof obj.reason === 'string')
+        response.reason = obj.reason;
+    if (typeof obj.operatorId === 'string')
+        response.operator_id = obj.operatorId;
+    return { requestId: obj.requestId, response };
+}
+/**
+ * Build a data-channel approval gate. The runtime sends a request frame and
+ * waits for a matching response frame (matched by `event_id` / `requestId`).
+ *
+ * On timeout: returns a `deny` response with reason 'gate_timeout' per SPEC §4.6.
+ */
+export function dataChannelGate(options) {
+    const defaultTimeout = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const pending = new Map();
+    const unsubscribe = options.onResponse((frame) => {
+        const decoded = decodeResponse(frame);
+        if (!decoded)
+            return;
+        const resolver = pending.get(decoded.requestId);
+        if (resolver) {
+            pending.delete(decoded.requestId);
+            resolver(decoded.response);
+        }
+    });
+    const gate = async (request) => {
+        const timeoutMs = request.timeout_ms ?? defaultTimeout;
+        return new Promise((resolve) => {
+            const timer = setTimeout(() => {
+                pending.delete(request.event_id);
+                resolve({
+                    decision: 'deny',
+                    reason: 'gate_timeout',
+                    granularity: request.granularity,
+                });
+            }, timeoutMs);
+            pending.set(request.event_id, (response) => {
+                clearTimeout(timer);
+                resolve(response);
+            });
+            // Fire the request frame. Synchronous AND asynchronous failures both
+            // surface as deny with reason; wrap via Promise.resolve().then(...)
+            // (catches sync throws via the inner function).
+            void Promise.resolve()
+                .then(() => options.send(encodeRequest(request)))
+                .catch((err) => {
+                clearTimeout(timer);
+                pending.delete(request.event_id);
+                const msg = err instanceof Error ? err.message : String(err);
+                resolve({
+                    decision: 'deny',
+                    reason: `data_channel_send_error:${msg}`,
+                    granularity: request.granularity,
+                });
+            });
+        });
+    };
+    // Expose a dispose method on the gate for callers that want to detach the
+    // underlying subscription. Attach as a non-enumerable property.
+    Object.defineProperty(gate, 'dispose', {
+        value: unsubscribe,
+        enumerable: false,
+    });
+    return gate;
+}
+//# sourceMappingURL=data-channel.js.map

package/dist/gate/data-channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-channel.js","sourceRoot":"","sources":["../../src/gate/data-channel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAiBH,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;AAEzC,yDAAyD;AACzD,MAAM,UAAU,aAAa,CAAC,OAAoB;IAChD,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,CAAC,SAAS,CAAC;QACb,IAAI,EAAE,yBAAyB;QAC/B,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,QAAQ,EAAE,OAAO,CAAC,SAAS;QAC3B,QAAQ,EAAE,OAAO,CAAC,SAAS;QAC3B,OAAO,EAAE,OAAO,CAAC,QAAQ;QACzB,SAAS,EAAE,OAAO,CAAC,UAAU;QAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACtE,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;KAC/E,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAiB;IAEjB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,IAAI,GAAG,CAAC,IAAI,KAAK,0BAA0B;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnD,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1F,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC3D,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACzF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5E,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEpF,MAAM,QAAQ,GAAiB;QAC7B,QAAQ,EAAE,GAAG,CAAC,QAAoC;QAClD,WAAW,EAAE,GAAG,CAAC,WAA0C;KAC5D,CAAC;IACF,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IACjE,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAAE,QAAQ,CAAC,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC;IAC9E,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAA+B;IAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4C,CAAC;IAEpE,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,KAAiB,EAAE,EAAE;QAC3D,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAClC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAiB,KAAK,EAAE,OAAO,EAAE,EAAE;QAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,IAAI,cAAc,CAAC;QAEvD,OAAO,IAAI,OAAO,CAAe,CAAC,OAAO,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACjC,OAAO,CAAC;oBACN,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,cAAc;oBACtB,WAAW,EAAE,OAAO,CAAC,WAAW;iBACjC,CAAC,CAAC;YACL,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE;gBACzC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,QAAQ,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC;YAEH,qEAAqE;YACrE,oEAAoE;YACpE,gDAAgD;YAChD,KAAK,OAAO,CAAC,OAAO,EAAE;iBACnB,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;iBAChD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACtB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACjC,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,CAAC;oBACN,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,2BAA2B,GAAG,EAAE;oBACxC,WAAW,EAAE,OAAO,CAAC,WAAW;iBACjC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,0EAA0E;IAC1E,gEAAgE;IAChE,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE;QACrC,KAAK,EAAE,WAAW;QAClB,UAAU,EAAE,KAAK;KAClB,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC"}