@globiguard/contracts 1.0.1

package/dist/authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../src/authority.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,eAAO,MAAM,qCAAqC,EAChD,wBAAiC,CAAC;AAEpC,eAAO,MAAM,8BAA8B,gEAKjC,CAAC;AAEX,MAAM,MAAM,yBAAyB,GACnC,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC;AAElD,eAAO,MAAM,2BAA2B,oFAK9B,CAAC;AAEX,MAAM,MAAM,wBAAwB,GAClC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/C,MAAM,WAAW,+BAA+B;IAC9C,eAAe,EAAE,OAAO,qCAAqC,GAAG,MAAM,CAAC;IACvE,SAAS,EAAE,yBAAyB,CAAC;IACrC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,YAAY,CAAC;CAC7C;AAED,eAAO,MAAM,kCAAkC;;;;CAIrC,CAAC;AAEX,MAAM,WAAW,2BAA2B;IAC1C,cAAc,EAAE,wBAAwB,CAAC;IACzC,WAAW,EAAE,OAAO,CAAC;IACrB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE;QACR,cAAc,EAAE,cAAc,CAAC;QAC/B,WAAW,EAAE,IAAI,CAAC;QAClB,oBAAoB,EAAE,KAAK,CAAC;QAC5B,iBAAiB,EAAE,KAAK,CAAC;KAC1B,CAAC;CACH;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,EAAE;QACR,cAAc,EAAE,kBAAkB,CAAC;QACnC,WAAW,EAAE,KAAK,CAAC;QACnB,oBAAoB,EAAE,IAAI,CAAC;QAC3B,iBAAiB,EAAE,KAAK,CAAC;KAC1B,CAAC;CACH;AAED,eAAO,MAAM,gCAAgC;oBAhBzB,cAAc;iBACjB,IAAI;0BACK,KAAK;uBACR,KAAK;EAmBxB,CAAC;AAEL,eAAO,MAAM,oCAAoC;oBAf7B,kBAAkB;iBACrB,KAAK;0BACI,IAAI;uBACP,KAAK;EAkBxB,CAAC;AAEL,eAAO,MAAM,0BAA0B,uPAW7B,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9C,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;CAChE;AAED,eAAO,MAAM,0CAA0C,EACrD,+BAAwC,CAAC;AAE3C,eAAO,MAAM,0BAA0B,qEAI7B,CAAC;AAEX,MAAM,MAAM,uBAAuB,GACjC,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9C,MAAM,WAAW,2BAA2B;IAC1C,iBAAiB,EAAE,QAAQ,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kCAAkC;IACjD,IAAI,EAAE,uBAAuB,CAAC;IAC9B,kBAAkB,EAAE,KAAK,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,iCAAiC;IAChD,IAAI,EACA,aAAa,GACb,UAAU,GACV,gBAAgB,GAChB,cAAc,GACd,aAAa,GACb,iBAAiB,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gCACf,SAAQ,6BAA6B;IACrC,aAAa,EAAE,OAAO,0CAA0C,GAAG,MAAM,CAAC;IAC1E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,aAAa,CAAC;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE;QACL,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC;IACF,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5D,SAAS,CAAC,EAAE,2BAA2B,CAAC;IACxC,SAAS,EAAE,kCAAkC,CAAC;IAC9C,UAAU,EAAE,iCAAiC,EAAE,CAAC;IAChD,QAAQ,CAAC,EAAE;QACT,QAAQ,EAAE,cAAc,GAAG,YAAY,GAAG,aAAa,CAAC;QACxD,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,kCAAkC;IACjD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,gCAAgC,CAAC;IAC1C,QAAQ,CAAC,EAAE;QACT,QAAQ,EAAE,cAAc,GAAG,YAAY,GAAG,aAAa,CAAC;QACxD,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH"}

package/dist/authority.js

@@ -0,0 +1,49 @@
+export const GLOBIGUARD_AUTHORITY_CONTRACT_VERSION = "2026-05-authority-beta";
+export const GLOBIGUARD_PUBLIC_API_FAMILIES = [
+    "actions.v1",
+    "audit.v1",
+    "queue.v1",
+    "webhooks.v1"
+];
+export const GLOBIGUARD_AUTHORITY_LEVELS = [
+    "browser_read",
+    "server_authority",
+    "webhook_receiver",
+    "internal_only"
+];
+export const GLOBIGUARD_AUTHORITY_COMPATIBILITY = {
+    contractVersion: GLOBIGUARD_AUTHORITY_CONTRACT_VERSION,
+    apiFamilies: GLOBIGUARD_PUBLIC_API_FAMILIES,
+    stability: "beta"
+};
+export const GLOBIGUARD_BROWSER_READ_BOUNDARY = Object.freeze({
+    authorityLevel: "browser_read",
+    browserSafe: true,
+    serverSecretRequired: false,
+    rawPayloadAllowed: false
+});
+export const GLOBIGUARD_SERVER_AUTHORITY_BOUNDARY = Object.freeze({
+    authorityLevel: "server_authority",
+    browserSafe: false,
+    serverSecretRequired: true,
+    rawPayloadAllowed: false
+});
+export const GLOBIGUARD_SDK_ERROR_KINDS = [
+    "POLICY_BLOCKED",
+    "QUEUED_FOR_REVIEW",
+    "STEP_UP_REQUIRED",
+    "PERMISSION_REQUIRED",
+    "EVIDENCE_UNAVAILABLE",
+    "REPLAY_INCOMPLETE",
+    "RATE_LIMITED",
+    "MISCONFIGURED_CLIENT_BOUNDARY",
+    "CONTROL_PLANE_UNAVAILABLE",
+    "WEBHOOK_VERIFICATION_FAILED"
+];
+export const GLOBIGUARD_EVIDENCE_SUMMARY_SCHEMA_VERSION = "2026-05-evidence-summary-beta";
+export const GLOBIGUARD_REDACTION_MODES = [
+    "metadata_only",
+    "masked_fields",
+    "customer_managed_raw"
+];
+//# sourceMappingURL=authority.js.map

package/dist/authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.js","sourceRoot":"","sources":["../src/authority.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,qCAAqC,GAChD,wBAAiC,CAAC;AAEpC,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,YAAY;IACZ,UAAU;IACV,UAAU;IACV,aAAa;CACL,CAAC;AAKX,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,cAAc;IACd,kBAAkB;IAClB,kBAAkB;IAClB,eAAe;CACP,CAAC;AAYX,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,eAAe,EAAE,qCAAqC;IACtD,WAAW,EAAE,8BAA8B;IAC3C,SAAS,EAAE,MAAM;CACT,CAAC;AA2BX,MAAM,CAAC,MAAM,gCAAgC,GAC3C,MAAM,CAAC,MAAM,CAA4C;IACvD,cAAc,EAAE,cAAc;IAC9B,WAAW,EAAE,IAAI;IACjB,oBAAoB,EAAE,KAAK;IAC3B,iBAAiB,EAAE,KAAK;CACzB,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,oCAAoC,GAC/C,MAAM,CAAC,MAAM,CAAgD;IAC3D,cAAc,EAAE,kBAAkB;IAClC,WAAW,EAAE,KAAK;IAClB,oBAAoB,EAAE,IAAI;IAC1B,iBAAiB,EAAE,KAAK;CACzB,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,gBAAgB;IAChB,mBAAmB;IACnB,kBAAkB;IAClB,qBAAqB;IACrB,sBAAsB;IACtB,mBAAmB;IACnB,cAAc;IACd,+BAA+B;IAC/B,2BAA2B;IAC3B,6BAA6B;CACrB,CAAC;AAeX,MAAM,CAAC,MAAM,0CAA0C,GACrD,+BAAwC,CAAC;AAE3C,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,eAAe;IACf,eAAe;IACf,sBAAsB;CACd,CAAC"}

package/dist/bootstrap.d.ts

@@ -0,0 +1,16 @@
+import type { GlobiguardEnvironment } from "./environment.js";
+export declare const GLOBIGUARD_DEPLOYMENT_MODES: readonly ["hosted", "self_hosted", "sovereign"];
+export type GlobiguardDeploymentMode = (typeof GLOBIGUARD_DEPLOYMENT_MODES)[number];
+export declare const GLOBIGUARD_INSTALL_ISSUER_MODES: readonly ["globiguard_issued", "customer_issued"];
+export type GlobiguardInstallIssuerMode = (typeof GLOBIGUARD_INSTALL_ISSUER_MODES)[number];
+export declare const GLOBIGUARD_INSTALL_REPORTING_MODES: readonly ["default", "opt_in", "disabled"];
+export type GlobiguardInstallReportingMode = (typeof GLOBIGUARD_INSTALL_REPORTING_MODES)[number];
+export interface GlobiguardBootstrapProfile {
+    environment: GlobiguardEnvironment;
+    deploymentMode: GlobiguardDeploymentMode;
+    issuerMode: GlobiguardInstallIssuerMode;
+    installReporting: GlobiguardInstallReportingMode;
+    installLabel?: string;
+    installFingerprint?: string;
+}
+//# sourceMappingURL=bootstrap.d.ts.map

package/dist/bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAE9D,eAAO,MAAM,2BAA2B,iDAI9B,CAAC;AAEX,MAAM,MAAM,wBAAwB,GAClC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/C,eAAO,MAAM,+BAA+B,mDAGlC,CAAC;AAEX,MAAM,MAAM,2BAA2B,GACrC,CAAC,OAAO,+BAA+B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,eAAO,MAAM,kCAAkC,4CAIrC,CAAC;AAEX,MAAM,MAAM,8BAA8B,GACxC,CAAC,OAAO,kCAAkC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtD,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,qBAAqB,CAAC;IACnC,cAAc,EAAE,wBAAwB,CAAC;IACzC,UAAU,EAAE,2BAA2B,CAAC;IACxC,gBAAgB,EAAE,8BAA8B,CAAC;IACjD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B"}

package/dist/bootstrap.js

@@ -0,0 +1,15 @@
+export const GLOBIGUARD_DEPLOYMENT_MODES = [
+    "hosted",
+    "self_hosted",
+    "sovereign"
+];
+export const GLOBIGUARD_INSTALL_ISSUER_MODES = [
+    "globiguard_issued",
+    "customer_issued"
+];
+export const GLOBIGUARD_INSTALL_REPORTING_MODES = [
+    "default",
+    "opt_in",
+    "disabled"
+];
+//# sourceMappingURL=bootstrap.js.map

package/dist/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,QAAQ;IACR,aAAa;IACb,WAAW;CACH,CAAC;AAKX,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,mBAAmB;IACnB,iBAAiB;CACT,CAAC;AAKX,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,SAAS;IACT,QAAQ;IACR,UAAU;CACF,CAAC"}

package/dist/decision.d.ts

@@ -0,0 +1,3 @@
+export declare const GLOBIGUARD_DECISIONS: readonly ["ALLOW", "MODIFY", "QUEUE", "BLOCK"];
+export type GlobiguardDecision = (typeof GLOBIGUARD_DECISIONS)[number];
+//# sourceMappingURL=decision.d.ts.map

package/dist/decision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision.d.ts","sourceRoot":"","sources":["../src/decision.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB,gDAKvB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/decision.js

@@ -0,0 +1,7 @@
+export const GLOBIGUARD_DECISIONS = [
+    "ALLOW",
+    "MODIFY",
+    "QUEUE",
+    "BLOCK"
+];
+//# sourceMappingURL=decision.js.map

package/dist/decision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision.js","sourceRoot":"","sources":["../src/decision.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;CACC,CAAC"}

package/dist/entitlements.d.ts

@@ -0,0 +1,53 @@
+import type { GlobiguardDeploymentMode } from "./bootstrap.js";
+import type { GlobiguardEnvironment } from "./environment.js";
+export declare const GLOBIGUARD_ENTITLEMENT_MANIFEST_TYPE: "globiguard.entitlement.v1";
+export declare const GLOBIGUARD_ENTITLEMENT_SIGNING_ALGORITHM: "EdDSA";
+export declare const GLOBIGUARD_ENTITLEMENT_SERIALIZATION: "jws-compact";
+export type GlobiguardCommercialPlanCode = "FREE" | "STARTER" | "GROWTH" | "SCALE" | "ENTERPRISE";
+export type GlobiguardBillingStatusCode = "FREE" | "PILOT" | "ACTIVE" | "GRACE" | "PAST_DUE" | "SUSPENDED" | "CANCELED";
+export type GlobiguardEntitlementOverageMode = "NONE" | "METERED" | "CONTRACT";
+export type GlobiguardOfflineDeploymentMode = Exclude<GlobiguardDeploymentMode, "hosted">;
+export type GlobiguardEntitlementManifestEnvironment = Extract<GlobiguardEnvironment, "sandbox" | "live">;
+export interface GlobiguardEntitlementManifestSubject {
+    orgId: string;
+    workspaceName: string;
+    orgSlug: string;
+    projectId: string;
+    projectSlug: string;
+    environment: GlobiguardEntitlementManifestEnvironment;
+    deploymentMode: GlobiguardOfflineDeploymentMode;
+}
+export interface GlobiguardEntitlementManifestCommercialState {
+    commercialPlan: GlobiguardCommercialPlanCode;
+    billingStatus: GlobiguardBillingStatusCode;
+    pilotActive: boolean;
+}
+export interface GlobiguardEntitlementManifestEntitlements {
+    includedQueriesPerMonth: number | null;
+    frameworkSlots: number | null;
+    overageMode: GlobiguardEntitlementOverageMode;
+}
+export interface GlobiguardEntitlementManifestPayload {
+    manifestType: typeof GLOBIGUARD_ENTITLEMENT_MANIFEST_TYPE;
+    manifestVersion: 1;
+    manifestId: string;
+    issuer: string;
+    issuedAt: string;
+    notBefore: string;
+    expiresAt: string;
+    subject: GlobiguardEntitlementManifestSubject;
+    commercial: GlobiguardEntitlementManifestCommercialState;
+    entitlements: GlobiguardEntitlementManifestEntitlements;
+}
+export interface GlobiguardSignedEntitlementManifestProtectedHeader {
+    alg: typeof GLOBIGUARD_ENTITLEMENT_SIGNING_ALGORITHM;
+    kid: string;
+    typ: typeof GLOBIGUARD_ENTITLEMENT_MANIFEST_TYPE;
+}
+export interface GlobiguardSignedEntitlementManifest {
+    serialization: typeof GLOBIGUARD_ENTITLEMENT_SERIALIZATION;
+    token: string;
+    protected: GlobiguardSignedEntitlementManifestProtectedHeader;
+    payload: GlobiguardEntitlementManifestPayload;
+}
+//# sourceMappingURL=entitlements.d.ts.map

package/dist/entitlements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlements.d.ts","sourceRoot":"","sources":["../src/entitlements.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAE9D,eAAO,MAAM,oCAAoC,EAC/C,2BAAoC,CAAC;AAEvC,eAAO,MAAM,wCAAwC,EAAG,OAAgB,CAAC;AACzE,eAAO,MAAM,oCAAoC,EAAG,aAAsB,CAAC;AAE3E,MAAM,MAAM,4BAA4B,GACpC,MAAM,GACN,SAAS,GACT,QAAQ,GACR,OAAO,GACP,YAAY,CAAC;AAEjB,MAAM,MAAM,2BAA2B,GACnC,MAAM,GACN,OAAO,GACP,QAAQ,GACR,OAAO,GACP,UAAU,GACV,WAAW,GACX,UAAU,CAAC;AAEf,MAAM,MAAM,gCAAgC,GACxC,MAAM,GACN,SAAS,GACT,UAAU,CAAC;AAEf,MAAM,MAAM,+BAA+B,GAAG,OAAO,CACnD,wBAAwB,EACxB,QAAQ,CACT,CAAC;AAEF,MAAM,MAAM,wCAAwC,GAAG,OAAO,CAC5D,qBAAqB,EACrB,SAAS,GAAG,MAAM,CACnB,CAAC;AAEF,MAAM,WAAW,oCAAoC;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,wCAAwC,CAAC;IACtD,cAAc,EAAE,+BAA+B,CAAC;CACjD;AAED,MAAM,WAAW,4CAA4C;IAC3D,cAAc,EAAE,4BAA4B,CAAC;IAC7C,aAAa,EAAE,2BAA2B,CAAC;IAC3C,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,yCAAyC;IACxD,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,gCAAgC,CAAC;CAC/C;AAED,MAAM,WAAW,oCAAoC;IACnD,YAAY,EAAE,OAAO,oCAAoC,CAAC;IAC1D,eAAe,EAAE,CAAC,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,oCAAoC,CAAC;IAC9C,UAAU,EAAE,4CAA4C,CAAC;IACzD,YAAY,EAAE,yCAAyC,CAAC;CACzD;AAED,MAAM,WAAW,kDAAkD;IACjE,GAAG,EAAE,OAAO,wCAAwC,CAAC;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,OAAO,oCAAoC,CAAC;CAClD;AAED,MAAM,WAAW,mCAAmC;IAClD,aAAa,EAAE,OAAO,oCAAoC,CAAC;IAC3D,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,kDAAkD,CAAC;IAC9D,OAAO,EAAE,oCAAoC,CAAC;CAC/C"}

package/dist/entitlements.js

@@ -0,0 +1,4 @@
+export const GLOBIGUARD_ENTITLEMENT_MANIFEST_TYPE = "globiguard.entitlement.v1";
+export const GLOBIGUARD_ENTITLEMENT_SIGNING_ALGORITHM = "EdDSA";
+export const GLOBIGUARD_ENTITLEMENT_SERIALIZATION = "jws-compact";
+//# sourceMappingURL=entitlements.js.map

package/dist/entitlements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlements.js","sourceRoot":"","sources":["../src/entitlements.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,oCAAoC,GAC/C,2BAAoC,CAAC;AAEvC,MAAM,CAAC,MAAM,wCAAwC,GAAG,OAAgB,CAAC;AACzE,MAAM,CAAC,MAAM,oCAAoC,GAAG,aAAsB,CAAC"}

package/dist/environment.d.ts

@@ -0,0 +1,3 @@
+export declare const GLOBIGUARD_ENVIRONMENTS: readonly ["local", "sandbox", "live"];
+export type GlobiguardEnvironment = (typeof GLOBIGUARD_ENVIRONMENTS)[number];
+//# sourceMappingURL=environment.d.ts.map

package/dist/environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../src/environment.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,uCAI1B,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/environment.js

@@ -0,0 +1,6 @@
+export const GLOBIGUARD_ENVIRONMENTS = [
+    "local",
+    "sandbox",
+    "live"
+];
+//# sourceMappingURL=environment.js.map

package/dist/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../src/environment.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,OAAO;IACP,SAAS;IACT,MAAM;CACE,CAAC"}

package/dist/incident-replay.d.ts

@@ -0,0 +1,51 @@
+import type { GlobiguardBrowserSafeContract, GlobiguardEvidenceSourceReference } from "./authority.js";
+import type { GlobiguardDecision } from "./decision.js";
+export declare const GLOBIGUARD_INCIDENT_REPLAY_SCHEMA_VERSION: "2026-05-incident-replay-beta";
+export declare const GLOBIGUARD_INCIDENT_REPLAY_SEGMENT_STATUSES: readonly ["observed", "redacted", "missing", "unverified"];
+export type GlobiguardIncidentReplaySegmentStatus = (typeof GLOBIGUARD_INCIDENT_REPLAY_SEGMENT_STATUSES)[number];
+export declare const GLOBIGUARD_INCIDENT_REPLAY_EVENT_KINDS: readonly ["action_requested", "policy_evaluated", "action_authorized", "queued_for_review", "approval_decided", "action_resumed", "action_blocked", "evidence_exported", "webhook_delivered", "operator_note"];
+export type GlobiguardIncidentReplayEventKind = (typeof GLOBIGUARD_INCIDENT_REPLAY_EVENT_KINDS)[number];
+export interface GlobiguardIncidentReplayLookupRequest {
+    workflowRunId?: string;
+    correlationId?: string;
+    queueEntryId?: string;
+    auditEventId?: string;
+    authorizationId?: string;
+}
+export interface GlobiguardIncidentReplayTimelineEntry {
+    id: string;
+    occurredAt: string;
+    kind: GlobiguardIncidentReplayEventKind;
+    status: GlobiguardIncidentReplaySegmentStatus;
+    title: string;
+    summary?: string;
+    decision?: GlobiguardDecision;
+    actor?: {
+        id?: string;
+        type?: "human" | "agent" | "service" | "workflow";
+        displayName?: string;
+    };
+    refs: GlobiguardEvidenceSourceReference[];
+    missingReason?: string;
+    redactionReason?: string;
+}
+export interface GlobiguardIncidentReplayGap {
+    id: string;
+    status: Extract<GlobiguardIncidentReplaySegmentStatus, "missing" | "unverified">;
+    expectedKind: GlobiguardIncidentReplayEventKind;
+    reason: string;
+    remediation?: string;
+}
+export interface GlobiguardIncidentReplay extends GlobiguardBrowserSafeContract {
+    schemaVersion: typeof GLOBIGUARD_INCIDENT_REPLAY_SCHEMA_VERSION | string;
+    incidentReplayId: string;
+    generatedAt: string;
+    lookup: GlobiguardIncidentReplayLookupRequest;
+    complete: boolean;
+    correlationIds: string[];
+    timeline: GlobiguardIncidentReplayTimelineEntry[];
+    gaps: GlobiguardIncidentReplayGap[];
+    evidencePackageId?: string;
+    disclaimers: string[];
+}
+//# sourceMappingURL=incident-replay.d.ts.map

package/dist/incident-replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"incident-replay.d.ts","sourceRoot":"","sources":["../src/incident-replay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,6BAA6B,EAC7B,iCAAiC,EAClC,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,eAAO,MAAM,yCAAyC,EACpD,8BAAuC,CAAC;AAE1C,eAAO,MAAM,2CAA2C,4DAK9C,CAAC;AAEX,MAAM,MAAM,qCAAqC,GAC/C,CAAC,OAAO,2CAA2C,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,eAAO,MAAM,sCAAsC,gNAWzC,CAAC;AAEX,MAAM,MAAM,iCAAiC,GAC3C,CAAC,OAAO,sCAAsC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,MAAM,WAAW,qCAAqC;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qCAAqC;IACpD,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,iCAAiC,CAAC;IACxC,MAAM,EAAE,qCAAqC,CAAC;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,KAAK,CAAC,EAAE;QACN,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,CAAC;QAClD,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,IAAI,EAAE,iCAAiC,EAAE,CAAC;IAC1C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,CACb,qCAAqC,EACrC,SAAS,GAAG,YAAY,CACzB,CAAC;IACF,YAAY,EAAE,iCAAiC,CAAC;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBACf,SAAQ,6BAA6B;IACrC,aAAa,EAAE,OAAO,yCAAyC,GAAG,MAAM,CAAC;IACzE,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,qCAAqC,CAAC;IAC9C,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,EAAE,qCAAqC,EAAE,CAAC;IAClD,IAAI,EAAE,2BAA2B,EAAE,CAAC;IACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB"}

package/dist/incident-replay.js

@@ -0,0 +1,20 @@
+export const GLOBIGUARD_INCIDENT_REPLAY_SCHEMA_VERSION = "2026-05-incident-replay-beta";
+export const GLOBIGUARD_INCIDENT_REPLAY_SEGMENT_STATUSES = [
+    "observed",
+    "redacted",
+    "missing",
+    "unverified"
+];
+export const GLOBIGUARD_INCIDENT_REPLAY_EVENT_KINDS = [
+    "action_requested",
+    "policy_evaluated",
+    "action_authorized",
+    "queued_for_review",
+    "approval_decided",
+    "action_resumed",
+    "action_blocked",
+    "evidence_exported",
+    "webhook_delivered",
+    "operator_note"
+];
+//# sourceMappingURL=incident-replay.js.map

package/dist/incident-replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"incident-replay.js","sourceRoot":"","sources":["../src/incident-replay.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,yCAAyC,GACpD,8BAAuC,CAAC;AAE1C,MAAM,CAAC,MAAM,2CAA2C,GAAG;IACzD,UAAU;IACV,UAAU;IACV,SAAS;IACT,YAAY;CACJ,CAAC;AAKX,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;IACnB,mBAAmB;IACnB,kBAAkB;IAClB,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,mBAAmB;IACnB,eAAe;CACP,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,19 @@
+export * from "./actions.js";
+export * from "./audit.js";
+export * from "./authority.js";
+export * from "./auth.js";
+export * from "./bootstrap.js";
+export * from "./decision.js";
+export * from "./entitlements.js";
+export * from "./environment.js";
+export * from "./industry.js";
+export * from "./incident-replay.js";
+export * from "./installs.js";
+export * from "./orgs.js";
+export * from "./policies.js";
+export * from "./queue.js";
+export * from "./realtime.js";
+export * from "./service-targets.js";
+export * from "./webhooks.js";
+export * from "./workflows.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,19 @@
+export * from "./actions.js";
+export * from "./audit.js";
+export * from "./authority.js";
+export * from "./auth.js";
+export * from "./bootstrap.js";
+export * from "./decision.js";
+export * from "./entitlements.js";
+export * from "./environment.js";
+export * from "./industry.js";
+export * from "./incident-replay.js";
+export * from "./installs.js";
+export * from "./orgs.js";
+export * from "./policies.js";
+export * from "./queue.js";
+export * from "./realtime.js";
+export * from "./service-targets.js";
+export * from "./webhooks.js";
+export * from "./workflows.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC"}

package/dist/industry.d.ts

@@ -0,0 +1,3 @@
+export declare const GLOBIGUARD_INDUSTRIES: readonly ["INSURANCE", "ACCOUNTING", "LEGAL", "MEDICAL", "FINANCIAL", "HR", "GENERIC"];
+export type GlobiguardIndustry = (typeof GLOBIGUARD_INDUSTRIES)[number];
+//# sourceMappingURL=industry.d.ts.map

package/dist/industry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"industry.d.ts","sourceRoot":"","sources":["../src/industry.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB,wFAQxB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/industry.js

@@ -0,0 +1,10 @@
+export const GLOBIGUARD_INDUSTRIES = [
+    "INSURANCE",
+    "ACCOUNTING",
+    "LEGAL",
+    "MEDICAL",
+    "FINANCIAL",
+    "HR",
+    "GENERIC"
+];
+//# sourceMappingURL=industry.js.map

package/dist/industry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"industry.js","sourceRoot":"","sources":["../src/industry.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,WAAW;IACX,YAAY;IACZ,OAAO;IACP,SAAS;IACT,WAAW;IACX,IAAI;IACJ,SAAS;CACD,CAAC"}

package/dist/installs.d.ts

@@ -0,0 +1,55 @@
+import type { GlobiguardBootstrapProfile, GlobiguardDeploymentMode, GlobiguardInstallIssuerMode, GlobiguardInstallReportingMode } from "./bootstrap.js";
+import type { GlobiguardEnvironment } from "./environment.js";
+export type GlobiguardInstallIntegrationKind = "sdk" | "react" | "n8n" | "workflow" | "custom";
+export type GlobiguardRuntimeKind = "browser" | "node" | "n8n" | "worker" | "service";
+export interface GlobiguardInstallRegistrationRequest {
+    packageName: string;
+    packageVersion: string;
+    integrationKind: GlobiguardInstallIntegrationKind;
+    runtimeKind: GlobiguardRuntimeKind;
+    environment: GlobiguardEnvironment;
+    deploymentMode: GlobiguardDeploymentMode;
+    issuerMode: GlobiguardInstallIssuerMode;
+    installReporting: GlobiguardInstallReportingMode;
+    installLabel?: string;
+    installFingerprint?: string;
+    metadata?: Record<string, string | number | boolean>;
+}
+export interface GlobiguardInstallRegistrationResponse {
+    installId: string;
+}
+export interface GlobiguardInstallHeartbeatRequest {
+    packageVersion: string;
+    runtimeKind: GlobiguardRuntimeKind;
+    environment: GlobiguardEnvironment;
+    deploymentMode: GlobiguardDeploymentMode;
+    issuerMode: GlobiguardInstallIssuerMode;
+    installReporting: GlobiguardInstallReportingMode;
+    installLabel?: string;
+    installFingerprint?: string;
+    metadata?: Record<string, string | number | boolean>;
+}
+export interface GlobiguardInstallHeartbeatResponse {
+    heartbeatId: string;
+}
+export interface GlobiguardInstallsClient {
+    register(request: GlobiguardInstallRegistrationRequest): Promise<GlobiguardInstallRegistrationResponse>;
+    heartbeat(installId: string, request: GlobiguardInstallHeartbeatRequest): Promise<GlobiguardInstallHeartbeatResponse>;
+}
+export interface GlobiguardBuildInstallRegistrationInput {
+    packageName: string;
+    packageVersion: string;
+    integrationKind: GlobiguardInstallIntegrationKind;
+    runtimeKind: GlobiguardRuntimeKind;
+    metadata?: Record<string, string | number | boolean>;
+}
+export interface GlobiguardBuildInstallHeartbeatInput {
+    packageVersion: string;
+    runtimeKind: GlobiguardRuntimeKind;
+    metadata?: Record<string, string | number | boolean>;
+}
+export interface GlobiguardBootstrapValidationResult {
+    installRegistrationAllowed: boolean;
+}
+export type GlobiguardResolvedBootstrapProfile = GlobiguardBootstrapProfile & GlobiguardBootstrapValidationResult;
+//# sourceMappingURL=installs.d.ts.map

package/dist/installs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installs.d.ts","sourceRoot":"","sources":["../src/installs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,wBAAwB,EACxB,2BAA2B,EAC3B,8BAA8B,EAC/B,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAE9D,MAAM,MAAM,gCAAgC,GACxC,KAAK,GACL,OAAO,GACP,KAAK,GACL,UAAU,GACV,QAAQ,CAAC;AAEb,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,MAAM,GACN,KAAK,GACL,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,WAAW,oCAAoC;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,gCAAgC,CAAC;IAClD,WAAW,EAAE,qBAAqB,CAAC;IACnC,WAAW,EAAE,qBAAqB,CAAC;IACnC,cAAc,EAAE,wBAAwB,CAAC;IACzC,UAAU,EAAE,2BAA2B,CAAC;IACxC,gBAAgB,EAAE,8BAA8B,CAAC;IACjD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,qCAAqC;IACpD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iCAAiC;IAChD,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,qBAAqB,CAAC;IACnC,WAAW,EAAE,qBAAqB,CAAC;IACnC,cAAc,EAAE,wBAAwB,CAAC;IACzC,UAAU,EAAE,2BAA2B,CAAC;IACxC,gBAAgB,EAAE,8BAA8B,CAAC;IACjD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,kCAAkC;IACjD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CACN,OAAO,EAAE,oCAAoC,GAC5C,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAClD,SAAS,CACP,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,uCAAuC;IACtD,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,gCAAgC,CAAC;IAClD,WAAW,EAAE,qBAAqB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,oCAAoC;IACnD,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,qBAAqB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,mCAAmC;IAClD,0BAA0B,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,MAAM,kCAAkC,GAAG,0BAA0B,GACzE,mCAAmC,CAAC"}

package/dist/installs.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=installs.js.map

package/dist/installs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installs.js","sourceRoot":"","sources":["../src/installs.ts"],"names":[],"mappings":""}

package/dist/orgs.d.ts

@@ -0,0 +1,57 @@
+import type { GlobiguardIndustry } from "./industry.js";
+export type GlobiguardUuid = `${string}-${string}-${string}-${string}-${string}`;
+export declare const GLOBIGUARD_PLAN_TIERS: readonly ["DEMO", "PILOT", "STARTER", "PROFESSIONAL", "ENTERPRISE"];
+export type GlobiguardPlanTier = (typeof GLOBIGUARD_PLAN_TIERS)[number];
+export declare const GLOBIGUARD_API_KEY_SCOPES: readonly ["ADMIN", "SIDECAR", "READ_ONLY", "DEMO"];
+export type GlobiguardApiKeyScope = (typeof GLOBIGUARD_API_KEY_SCOPES)[number];
+export interface GlobiguardOrg {
+    id: string;
+    name: string;
+    slug: string;
+    industry: GlobiguardIndustry;
+    plan: GlobiguardPlanTier;
+    active: boolean;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface GlobiguardOrgCreateRequest {
+    id?: GlobiguardUuid;
+    name: string;
+    slug: string;
+    industry?: GlobiguardIndustry;
+}
+export interface GlobiguardOrgUpdateRequest {
+    name?: string;
+    industry?: GlobiguardIndustry;
+}
+export interface GlobiguardApiKey {
+    id: string;
+    keyPrefix: string;
+    label: string;
+    scope: GlobiguardApiKeyScope;
+    active: boolean;
+    lastUsedAt?: string | null;
+    expiresAt?: string | null;
+    createdAt: string;
+}
+export interface GlobiguardApiKeyCreateRequest {
+    label: string;
+    scope: GlobiguardApiKeyScope;
+    expiresAt?: string;
+}
+export interface GlobiguardApiKeyCreateResponse {
+    key: string;
+    prefix: string;
+    scope: GlobiguardApiKeyScope;
+    label: string;
+}
+export interface GlobiguardOrgsClient {
+    findBySlug(slug: string): Promise<GlobiguardOrg>;
+    create(request: GlobiguardOrgCreateRequest): Promise<GlobiguardOrg>;
+    get(orgId: string): Promise<GlobiguardOrg>;
+    update(orgId: string, request: GlobiguardOrgUpdateRequest): Promise<GlobiguardOrg>;
+    createApiKey(orgId: string, request: GlobiguardApiKeyCreateRequest): Promise<GlobiguardApiKeyCreateResponse>;
+    listApiKeys(orgId: string): Promise<GlobiguardApiKey[]>;
+    revokeApiKey(orgId: string, apiKeyId: string): Promise<void>;
+}
+//# sourceMappingURL=orgs.d.ts.map

package/dist/orgs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgs.d.ts","sourceRoot":"","sources":["../src/orgs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,MAAM,MAAM,cAAc,GAAG,GAAG,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;AAEjF,eAAO,MAAM,qBAAqB,qEAMxB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,eAAO,MAAM,yBAAyB,oDAK5B,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAC/B,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7C,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,CAAC,EAAE,cAAc,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,qBAAqB,CAAC;IAC7B,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,qBAAqB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,8BAA8B;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,qBAAqB,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACjD,MAAM,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,CACJ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1B,YAAY,CACV,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC3C,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACxD,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9D"}

package/dist/orgs.js

@@ -0,0 +1,14 @@
+export const GLOBIGUARD_PLAN_TIERS = [
+    "DEMO",
+    "PILOT",
+    "STARTER",
+    "PROFESSIONAL",
+    "ENTERPRISE"
+];
+export const GLOBIGUARD_API_KEY_SCOPES = [
+    "ADMIN",
+    "SIDECAR",
+    "READ_ONLY",
+    "DEMO"
+];
+//# sourceMappingURL=orgs.js.map

package/dist/orgs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgs.js","sourceRoot":"","sources":["../src/orgs.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,MAAM;IACN,OAAO;IACP,SAAS;IACT,cAAc;IACd,YAAY;CACJ,CAAC;AAIX,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,OAAO;IACP,SAAS;IACT,WAAW;IACX,MAAM;CACE,CAAC"}

package/dist/policies.d.ts

@@ -0,0 +1,72 @@
+import type { GlobiguardIndustry } from "./industry.js";
+export declare const GLOBIGUARD_SENSITIVITY_TIERS: readonly ["PUBLIC", "RESTRICTED", "CONFIDENTIAL", "BLOCKED"];
+export type GlobiguardSensitivityTier = (typeof GLOBIGUARD_SENSITIVITY_TIERS)[number];
+export declare const GLOBIGUARD_RULE_ACTIONS: readonly ["ALLOW", "MASK", "BLOCK", "REQUIRE_APPROVAL"];
+export type GlobiguardRuleAction = (typeof GLOBIGUARD_RULE_ACTIONS)[number];
+export interface GlobiguardPolicyRule {
+    id: string;
+    policyId: string;
+    fieldName: string;
+    fieldPattern?: string | null;
+    sensitivityTier: GlobiguardSensitivityTier;
+    action: GlobiguardRuleAction;
+    notes?: string | null;
+    order: number;
+}
+export interface GlobiguardPolicyRuleInput {
+    fieldName: string;
+    fieldPattern?: string;
+    sensitivityTier: GlobiguardSensitivityTier;
+    action: GlobiguardRuleAction;
+    notes?: string;
+}
+export interface GlobiguardPolicy {
+    id: string;
+    orgId: string;
+    name: string;
+    industry: GlobiguardIndustry;
+    version: number;
+    active: boolean;
+    templateId?: string | null;
+    createdAt: string;
+    updatedAt: string;
+    rules: GlobiguardPolicyRule[];
+}
+export interface GlobiguardPolicyTemplate {
+    id: string;
+    industry: GlobiguardIndustry;
+    name: string;
+    description: string;
+    version: number;
+    rulesJson: unknown;
+    gatesJson: unknown;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface GlobiguardPolicyListRequest {
+    industry?: GlobiguardIndustry;
+    active: boolean;
+}
+export interface GlobiguardPolicyCreateRequest {
+    name: string;
+    industry?: GlobiguardIndustry;
+    rules?: GlobiguardPolicyRuleInput[];
+}
+export interface GlobiguardPolicyUpdateRequest {
+    name?: string;
+    active?: boolean;
+    rules?: GlobiguardPolicyRuleInput[];
+}
+export interface GlobiguardPoliciesReadClient {
+    list(request: GlobiguardPolicyListRequest): Promise<GlobiguardPolicy[]>;
+    listTemplates(industry?: GlobiguardIndustry): Promise<GlobiguardPolicyTemplate[]>;
+    get(policyId: string): Promise<GlobiguardPolicy>;
+}
+export interface GlobiguardPoliciesClient extends GlobiguardPoliciesReadClient {
+    create(request: GlobiguardPolicyCreateRequest): Promise<GlobiguardPolicy>;
+    createFromTemplate(templateId: string): Promise<GlobiguardPolicy>;
+    update(policyId: string, request: GlobiguardPolicyUpdateRequest): Promise<GlobiguardPolicy>;
+    remove(policyId: string): Promise<void>;
+    activate(policyId: string): Promise<GlobiguardPolicy>;
+}
+//# sourceMappingURL=policies.d.ts.map

package/dist/policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../src/policies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,eAAO,MAAM,4BAA4B,8DAK/B,CAAC;AAEX,MAAM,MAAM,yBAAyB,GACnC,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD,eAAO,MAAM,uBAAuB,yDAK1B,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,yBAAyB,CAAC;IAC3C,MAAM,EAAE,oBAAoB,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,yBAAyB,CAAC;IAC3C,MAAM,EAAE,oBAAoB,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,oBAAoB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,KAAK,CAAC,EAAE,yBAAyB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,yBAAyB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,CAAC,OAAO,EAAE,2BAA2B,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACxE,aAAa,CAAC,QAAQ,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAC;IAClF,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,wBAAyB,SAAQ,4BAA4B;IAC5E,MAAM,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC1E,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClE,MAAM,CACJ,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACvD"}

package/dist/policies.js

@@ -0,0 +1,13 @@
+export const GLOBIGUARD_SENSITIVITY_TIERS = [
+    "PUBLIC",
+    "RESTRICTED",
+    "CONFIDENTIAL",
+    "BLOCKED"
+];
+export const GLOBIGUARD_RULE_ACTIONS = [
+    "ALLOW",
+    "MASK",
+    "BLOCK",
+    "REQUIRE_APPROVAL"
+];
+//# sourceMappingURL=policies.js.map

package/dist/policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.js","sourceRoot":"","sources":["../src/policies.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,SAAS;CACD,CAAC;AAKX,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,OAAO;IACP,MAAM;IACN,OAAO;IACP,kBAAkB;CACV,CAAC"}