@globiguard/sdk 1.0.0 → 1.0.1

package/dist/governed-actions.js

@@ -0,0 +1,146 @@
+import { GlobiguardAuthorityError, GlobiguardConfigError } from "./errors.js";
+export function createGovernedActionsClient(config) {
+    return {
+        authorizeAction(request) {
+            return config.actions.authorize(request);
+        },
+        async authorizeActionOrThrow(request) {
+            const decision = await config.actions.authorize(request);
+            if (decision.decision === "BLOCK") {
+                throw new GlobiguardAuthorityError({
+                    kind: "POLICY_BLOCKED",
+                    message: "GlobiGuard blocked the governed action.",
+                    authorizationId: decision.authorizationId,
+                    queueEntryId: decision.queueEntryId,
+                    safeDetails: {
+                        decision: decision.decision,
+                        reason: decision.reason ?? null
+                    }
+                });
+            }
+            if (decision.decision === "QUEUE") {
+                throw new GlobiguardAuthorityError({
+                    kind: "QUEUED_FOR_REVIEW",
+                    message: "GlobiGuard queued the governed action for review; do not perform the downstream business action yet.",
+                    authorizationId: decision.authorizationId,
+                    queueEntryId: decision.queueEntryId,
+                    safeDetails: {
+                        decision: decision.decision,
+                        approvalState: decision.approvalState
+                    }
+                });
+            }
+            return decision;
+        },
+        requestApproval(request) {
+            return config.actions.createApproval(request);
+        },
+        getApprovalStatus(approvalId) {
+            return config.actions.getApproval(approvalId);
+        },
+        getEvidenceReferences(request) {
+            return config.actions.listEvidence(request);
+        },
+        exportEvidencePackage(request) {
+            return config.audit.export(request);
+        },
+        getEvidencePackageSummary(evidencePackageId) {
+            return config.audit.getEvidencePackageSummary(evidencePackageId);
+        },
+        getIncidentReplay(request) {
+            return config.audit.getIncidentReplay(request);
+        },
+        waitForApproval(options) {
+            return waitForApproval(config.queue, options);
+        }
+    };
+}
+export async function deriveActionIdempotencyKey(input) {
+    assertNonEmpty("stableSeed", input.stableSeed);
+    assertNonEmpty("actionType", input.actionType);
+    const payload = JSON.stringify({
+        stableSeed: input.stableSeed,
+        actionType: input.actionType,
+        actorId: input.actorId ?? null,
+        payloadSha256: input.payloadSha256 ?? null,
+        windowBucket: input.windowBucket ?? null
+    });
+    const digest = await digestSha256(payload);
+    return `gg_idem_${digest.slice(0, 48)}`;
+}
+export function generateCorrelationId() {
+    const cryptoImpl = globalThis.crypto;
+    if (!cryptoImpl?.getRandomValues) {
+        throw new GlobiguardConfigError("A Web Crypto getRandomValues implementation is required to generate correlation IDs.");
+    }
+    const bytes = new Uint8Array(16);
+    cryptoImpl.getRandomValues(bytes);
+    return [...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+async function waitForApproval(queue, options) {
+    const maxAttempts = options.maxAttempts ?? 60;
+    const intervalMs = options.intervalMs ?? 1000;
+    if (maxAttempts < 1) {
+        throw new GlobiguardConfigError("maxAttempts must be at least 1.");
+    }
+    for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {
+        if (options.signal?.aborted) {
+            throw new GlobiguardAuthorityError({
+                kind: "QUEUED_FOR_REVIEW",
+                message: "Approval wait was aborted while the action remained queued.",
+                queueEntryId: options.queueEntryId
+            });
+        }
+        const entry = await queue.get(options.queueEntryId);
+        if (entry.status === "APPROVED" || entry.status === "AUTO_APPROVED") {
+            return entry;
+        }
+        if (entry.status === "REJECTED" || entry.status === "EXPIRED") {
+            throw new GlobiguardAuthorityError({
+                kind: "POLICY_BLOCKED",
+                message: `Queued action resolved as ${entry.status}; do not perform the downstream business action.`,
+                queueEntryId: entry.id,
+                safeDetails: {
+                    status: entry.status
+                }
+            });
+        }
+        if (attempt < maxAttempts) {
+            await sleep(intervalMs, options.signal);
+        }
+    }
+    throw new GlobiguardAuthorityError({
+        kind: "QUEUED_FOR_REVIEW",
+        message: "Queued action is still pending after the configured wait attempts; do not perform the downstream business action yet.",
+        queueEntryId: options.queueEntryId
+    });
+}
+async function digestSha256(value) {
+    const cryptoImpl = globalThis.crypto;
+    if (!cryptoImpl?.subtle) {
+        throw new GlobiguardConfigError("A Web Crypto subtle implementation is required to derive idempotency keys.");
+    }
+    const digest = await cryptoImpl.subtle.digest("SHA-256", new TextEncoder().encode(value));
+    return bytesToHex(new Uint8Array(digest));
+}
+function assertNonEmpty(name, value) {
+    if (!value.trim()) {
+        throw new GlobiguardConfigError(`${name} must be a non-empty string.`);
+    }
+}
+function sleep(ms, signal) {
+    return new Promise((resolve, reject) => {
+        const timeout = setTimeout(resolve, ms);
+        signal?.addEventListener("abort", () => {
+            clearTimeout(timeout);
+            reject(new GlobiguardAuthorityError({
+                kind: "QUEUED_FOR_REVIEW",
+                message: "Approval wait was aborted while the action remained queued."
+            }));
+        }, { once: true });
+    });
+}
+function bytesToHex(bytes) {
+    return [...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+//# sourceMappingURL=governed-actions.js.map

package/dist/governed-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governed-actions.js","sourceRoot":"","sources":["../src/governed-actions.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AA+C9E,MAAM,UAAU,2BAA2B,CACzC,MAA6C;IAE7C,OAAO;QACL,eAAe,CAAC,OAAO;YACrB,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QAED,KAAK,CAAC,sBAAsB,CAAC,OAAO;YAClC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACzD,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAClC,MAAM,IAAI,wBAAwB,CAAC;oBACjC,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,yCAAyC;oBAClD,eAAe,EAAE,QAAQ,CAAC,eAAe;oBACzC,YAAY,EAAE,QAAQ,CAAC,YAAY;oBACnC,WAAW,EAAE;wBACX,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,IAAI;qBAChC;iBACF,CAAC,CAAC;YACL,CAAC;YAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAClC,MAAM,IAAI,wBAAwB,CAAC;oBACjC,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EACL,sGAAsG;oBACxG,eAAe,EAAE,QAAQ,CAAC,eAAe;oBACzC,YAAY,EAAE,QAAQ,CAAC,YAAY;oBACnC,WAAW,EAAE;wBACX,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,aAAa,EAAE,QAAQ,CAAC,aAAa;qBACtC;iBACF,CAAC,CAAC;YACL,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,eAAe,CAAC,OAAO;YACrB,OAAO,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC;QAED,iBAAiB,CAAC,UAAU;YAC1B,OAAO,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC;QAED,qBAAqB,CAAC,OAAO;YAC3B,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAED,qBAAqB,CAAC,OAAO;YAC3B,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAED,yBAAyB,CAAC,iBAAiB;YACzC,OAAO,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;QACnE,CAAC;QAED,iBAAiB,CAAC,OAAO;YACvB,OAAO,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC;QAED,eAAe,CAAC,OAAO;YACrB,OAAO,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAoC;IAEpC,cAAc,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,cAAc,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAE/C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;QAC9B,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;QAC1C,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;KACzC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IAE3C,OAAO,WAAW,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC;IACrC,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,CAAC;QACjC,MAAM,IAAI,qBAAqB,CAC7B,sFAAsF,CACvF,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAElC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,KAAgC,EAChC,OAAyC;IAEzC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;IAE9C,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,qBAAqB,CAAC,iCAAiC,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC3D,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,wBAAwB,CAAC;gBACjC,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,6DAA6D;gBACtE,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9D,MAAM,IAAI,wBAAwB,CAAC;gBACjC,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,6BAA6B,KAAK,CAAC,MAAM,kDAAkD;gBACpG,YAAY,EAAE,KAAK,CAAC,EAAE;gBACtB,WAAW,EAAE;oBACX,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB;aACF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;YAC1B,MAAM,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,MAAM,IAAI,wBAAwB,CAAC;QACjC,IAAI,EAAE,mBAAmB;QACzB,OAAO,EACL,uHAAuH;QACzH,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,KAAa;IACvC,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC;IACrC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,qBAAqB,CAC7B,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAC3C,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAChC,CAAC;IAEF,OAAO,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,qBAAqB,CAAC,GAAG,IAAI,8BAA8B,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,EAAE,gBAAgB,CACtB,OAAO,EACP,GAAG,EAAE;YACH,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CACJ,IAAI,wBAAwB,CAAC;gBAC3B,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,6DAA6D;aACvE,CAAC,CACH,CAAC;QACJ,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/E,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+export * from "./client.js";
+export * from "./bootstrap.js";
+export * from "./errors.js";
+export * from "./fetch.js";
+export * from "./realtime.js";
+export * from "./resources/actions.js";
+export * from "./resources/audit.js";
+export * from "./resources/installs.js";
+export * from "./resources/orgs.js";
+export * from "./resources/path-segments.js";
+export * from "./resources/policies.js";
+export * from "./resources/queue.js";
+export * from "./resources/workflows.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC"}

package/dist/index.js

@@ -0,0 +1,14 @@
+export * from "./client.js";
+export * from "./bootstrap.js";
+export * from "./errors.js";
+export * from "./fetch.js";
+export * from "./realtime.js";
+export * from "./resources/actions.js";
+export * from "./resources/audit.js";
+export * from "./resources/installs.js";
+export * from "./resources/orgs.js";
+export * from "./resources/path-segments.js";
+export * from "./resources/policies.js";
+export * from "./resources/queue.js";
+export * from "./resources/workflows.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC"}

package/dist/realtime.d.ts

@@ -0,0 +1,21 @@
+import type { GlobiguardRealtimeClient, GlobiguardRealtimeConnectionConfig } from "@globiguard/contracts";
+export type { GlobiguardRealtimeAuth, GlobiguardRealtimeClient, GlobiguardRealtimeConnectionConfig, GlobiguardRealtimeEvent, GlobiguardRealtimeSubscribeOptions, GlobiguardRealtimeSubscription } from "@globiguard/contracts";
+export interface GlobiguardRealtimeSocketLike {
+    connected: boolean;
+    on(event: string, listener: (payload: unknown) => void): this;
+    off(event: string, listener: (payload: unknown) => void): this;
+    emit(event: string, payload?: unknown): this;
+    connect(): this;
+    disconnect(): this;
+}
+export interface GlobiguardRealtimeSocketFactoryArgs {
+    baseUrl: string;
+    path: string;
+    auth: Record<string, string>;
+}
+export type GlobiguardRealtimeSocketFactory = (args: GlobiguardRealtimeSocketFactoryArgs) => GlobiguardRealtimeSocketLike;
+export interface GlobiguardSdkRealtimeConfig extends GlobiguardRealtimeConnectionConfig {
+    socketFactory?: GlobiguardRealtimeSocketFactory;
+}
+export declare function createRealtimeClient(baseUrl: string, config: GlobiguardSdkRealtimeConfig): GlobiguardRealtimeClient;
+//# sourceMappingURL=realtime.d.ts.map

package/dist/realtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.d.ts","sourceRoot":"","sources":["../src/realtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,wBAAwB,EACxB,kCAAkC,EAInC,MAAM,uBAAuB,CAAC;AAK/B,YAAY,EACV,sBAAsB,EACtB,wBAAwB,EACxB,kCAAkC,EAClC,uBAAuB,EACvB,kCAAkC,EAClC,8BAA8B,EAC/B,MAAM,uBAAuB,CAAC;AAK/B,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,OAAO,CAAC;IACnB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;IAC9D,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;IAC/D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7C,OAAO,IAAI,IAAI,CAAC;IAChB,UAAU,IAAI,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,mCAAmC;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,MAAM,+BAA+B,GAAG,CAC5C,IAAI,EAAE,mCAAmC,KACtC,4BAA4B,CAAC;AAElC,MAAM,WAAW,2BACf,SAAQ,kCAAkC;IAC1C,aAAa,CAAC,EAAE,+BAA+B,CAAC;CACjD;AAwXD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,2BAA2B,GAClC,wBAAwB,CAO1B"}

package/dist/realtime.js

@@ -0,0 +1,265 @@
+import { io } from "socket.io-client";
+import { GlobiguardConfigError } from "./errors.js";
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function defaultSocketFactory({ baseUrl, path, auth }) {
+    return io(baseUrl, {
+        path,
+        transports: ["websocket"],
+        autoConnect: false,
+        auth
+    });
+}
+function extractErrorMessage(payload, fallback) {
+    if (payload instanceof Error && payload.message.trim()) {
+        return payload.message;
+    }
+    if (payload &&
+        typeof payload === "object" &&
+        "message" in payload &&
+        typeof payload.message === "string" &&
+        payload.message.trim()) {
+        return payload.message;
+    }
+    return fallback;
+}
+function validateRealtimePath(path) {
+    const normalizedPath = path?.trim() || "/ws";
+    if (!normalizedPath.startsWith("/")) {
+        throw new GlobiguardConfigError("Realtime path must start with '/'.");
+    }
+    if (normalizedPath.includes("?") || normalizedPath.includes("#")) {
+        throw new GlobiguardConfigError("Realtime path must not include query strings or fragments.");
+    }
+    return normalizedPath;
+}
+function buildRealtimeAuthHeaders(auth) {
+    const token = auth.token?.trim();
+    if (!token) {
+        throw new GlobiguardConfigError("Realtime auth requires a non-empty token.");
+    }
+    switch (auth.kind) {
+        case "bearer":
+            return { token: `Bearer ${token}` };
+        case "apiKey":
+            if (!token.startsWith("gg_")) {
+                throw new GlobiguardConfigError("Realtime API key auth requires a gg_ token.");
+            }
+            return { token };
+        default:
+            throw new GlobiguardConfigError("Realtime auth requires a recognized bearer or apiKey kind.");
+    }
+}
+function assertNonEmptyRealtimeIdentifier(kind, value) {
+    const normalizedValue = value.trim();
+    if (!normalizedValue) {
+        throw new GlobiguardConfigError(`${kind} must be a non-empty string.`);
+    }
+    if (normalizedValue.includes("/") || normalizedValue.includes("?") || normalizedValue.includes("#")) {
+        throw new GlobiguardConfigError(`${kind} must not contain path or URL separators.`);
+    }
+    return normalizedValue;
+}
+function assertRealtimeIdentifier(kind, value) {
+    const normalizedValue = value.trim();
+    if (!UUID_RE.test(normalizedValue)) {
+        throw new GlobiguardConfigError(`${kind} must be a valid UUID.`);
+    }
+    return normalizedValue;
+}
+class SDKRealtimeClient {
+    baseUrl;
+    path;
+    auth;
+    socketFactory;
+    socket = null;
+    listeners = new Map();
+    subscriptions = new Map();
+    hasEstablishedConnection = false;
+    awaitingReconnect = false;
+    handleSocketEvent = (payload) => {
+        if (!payload || typeof payload !== "object") {
+            return;
+        }
+        const eventPayload = payload;
+        if (typeof eventPayload.channel !== "string") {
+            return;
+        }
+        const listeners = this.listeners.get(eventPayload.channel);
+        if (!listeners?.size) {
+            return;
+        }
+        const event = {
+            channel: eventPayload.channel,
+            data: eventPayload.data && typeof eventPayload.data === "object"
+                ? eventPayload.data
+                : {}
+        };
+        listeners.forEach((listener) => {
+            listener.onEvent(event);
+        });
+    };
+    handleSocketError = (payload) => {
+        const error = new Error(extractErrorMessage(payload, "GlobiGuard realtime request failed."));
+        this.listeners.forEach((listeners) => {
+            listeners.forEach((listener) => {
+                listener.onError?.(error);
+            });
+        });
+    };
+    handleSocketConnect = () => {
+        if (!this.socket) {
+            return;
+        }
+        const shouldReplay = this.hasEstablishedConnection;
+        this.hasEstablishedConnection = true;
+        this.awaitingReconnect = false;
+        if (!shouldReplay) {
+            return;
+        }
+        this.subscriptions.forEach((descriptor) => {
+            this.socket?.emit(descriptor.subscribeEvent, descriptor.payload);
+        });
+    };
+    constructor(baseUrl, path, auth, socketFactory) {
+        this.baseUrl = baseUrl;
+        this.path = path;
+        this.auth = auth;
+        this.socketFactory = socketFactory;
+    }
+    subscribeTransparency(sessionId, options) {
+        const normalizedSessionId = assertRealtimeIdentifier("sessionId", sessionId);
+        return this.subscribe({
+            subscribeEvent: "subscribe:transparency",
+            channel: `transparency:${normalizedSessionId}`,
+            payload: {
+                session_id: normalizedSessionId
+            }
+        }, options);
+    }
+    subscribeWorkflow(runId, options) {
+        const normalizedRunId = assertRealtimeIdentifier("runId", runId);
+        return this.subscribe({
+            subscribeEvent: "subscribe:workflow",
+            channel: `workflow:${normalizedRunId}`,
+            payload: {
+                run_id: normalizedRunId
+            }
+        }, options);
+    }
+    subscribeQueue(orgId, options) {
+        const normalizedOrgId = assertRealtimeIdentifier("orgId", orgId);
+        return this.subscribe({
+            subscribeEvent: "subscribe:queue",
+            channel: `queue:${normalizedOrgId}`,
+            payload: {
+                org_id: normalizedOrgId
+            }
+        }, options);
+    }
+    subscribeDecision(authorizationId, options) {
+        const normalizedAuthorizationId = assertNonEmptyRealtimeIdentifier("authorizationId", authorizationId);
+        return this.subscribe({
+            subscribeEvent: "subscribe:decision",
+            channel: `decision:${normalizedAuthorizationId}`,
+            payload: {
+                authorization_id: normalizedAuthorizationId
+            }
+        }, options);
+    }
+    disconnect() {
+        if (this.socket) {
+            this.socket.off("connect", this.handleSocketConnect);
+            this.socket.off("event", this.handleSocketEvent);
+            this.socket.off("error", this.handleSocketError);
+            this.socket.off("connect_error", this.handleSocketError);
+            this.socket.disconnect();
+            this.socket = null;
+        }
+        this.listeners.clear();
+        this.subscriptions.clear();
+        this.hasEstablishedConnection = false;
+        this.awaitingReconnect = false;
+    }
+    rebuildSocket() {
+        if (this.socket) {
+            this.socket.off("connect", this.handleSocketConnect);
+            this.socket.off("event", this.handleSocketEvent);
+            this.socket.off("error", this.handleSocketError);
+            this.socket.off("connect_error", this.handleSocketError);
+            this.socket.disconnect();
+            this.socket = null;
+        }
+        if (this.listeners.size === 0) {
+            this.hasEstablishedConnection = false;
+            this.awaitingReconnect = false;
+            return;
+        }
+        this.hasEstablishedConnection = true;
+        this.awaitingReconnect = true;
+        this.ensureSocket();
+    }
+    subscribe(descriptor, options) {
+        const socket = this.ensureSocket();
+        const listener = {
+            onEvent: options.onEvent,
+            onError: options.onError
+        };
+        const channelListeners = this.listeners.get(descriptor.channel) ?? new Set();
+        const shouldEmitSubscribe = channelListeners.size === 0;
+        channelListeners.add(listener);
+        this.listeners.set(descriptor.channel, channelListeners);
+        if (shouldEmitSubscribe) {
+            this.subscriptions.set(descriptor.channel, descriptor);
+            if (!this.awaitingReconnect && (socket.connected || !this.hasEstablishedConnection)) {
+                socket.emit(descriptor.subscribeEvent, descriptor.payload);
+            }
+        }
+        return {
+            channel: descriptor.channel,
+            unsubscribe: () => {
+                const listeners = this.listeners.get(descriptor.channel);
+                if (!listeners) {
+                    return;
+                }
+                listeners.delete(listener);
+                if (listeners.size === 0) {
+                    this.listeners.delete(descriptor.channel);
+                    this.subscriptions.delete(descriptor.channel);
+                }
+                if (this.listeners.size === 0) {
+                    this.disconnect();
+                }
+                else if (listeners.size === 0) {
+                    this.rebuildSocket();
+                }
+            }
+        };
+    }
+    ensureSocket() {
+        if (this.socket) {
+            if (!this.socket.connected) {
+                if (this.hasEstablishedConnection) {
+                    this.awaitingReconnect = true;
+                }
+                this.socket.connect();
+            }
+            return this.socket;
+        }
+        const socket = this.socketFactory({
+            baseUrl: this.baseUrl,
+            path: this.path,
+            auth: this.auth
+        });
+        this.socket = socket;
+        socket.on("connect", this.handleSocketConnect);
+        socket.on("event", this.handleSocketEvent);
+        socket.on("error", this.handleSocketError);
+        socket.on("connect_error", this.handleSocketError);
+        socket.connect();
+        return socket;
+    }
+}
+export function createRealtimeClient(baseUrl, config) {
+    return new SDKRealtimeClient(baseUrl, validateRealtimePath(config.path), buildRealtimeAuthHeaders(config.auth), config.socketFactory ?? defaultSocketFactory);
+}
+//# sourceMappingURL=realtime.js.map

package/dist/realtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.js","sourceRoot":"","sources":["../src/realtime.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,EAAE,EAAe,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAWpD,MAAM,OAAO,GACX,iEAAiE,CAAC;AAqCpE,SAAS,oBAAoB,CAAC,EAC5B,OAAO,EACP,IAAI,EACJ,IAAI,EACgC;IACpC,OAAO,EAAE,CAAC,OAAO,EAAE;QACjB,IAAI;QACJ,UAAU,EAAE,CAAC,WAAW,CAAC;QACzB,WAAW,EAAE,KAAK;QAClB,IAAI;KACL,CAAsB,CAAC;AAC1B,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgB,EAAE,QAAgB;IAC7D,IAAI,OAAO,YAAY,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACvD,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC;IAED,IACE,OAAO;QACP,OAAO,OAAO,KAAK,QAAQ;QAC3B,SAAS,IAAI,OAAO;QACpB,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;QACnC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EACtB,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAa;IACzC,MAAM,cAAc,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC;IAE7C,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,qBAAqB,CAC7B,oCAAoC,CACrC,CAAC;IACJ,CAAC;IAED,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,qBAAqB,CAC7B,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,wBAAwB,CAAC,IAA4B;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAEjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,qBAAqB,CAC7B,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IAED,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,QAAQ;YACX,OAAO,EAAE,KAAK,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;QACtC,KAAK,QAAQ;YACX,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,qBAAqB,CAC7B,6CAA6C,CAC9C,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB;YACE,MAAM,IAAI,qBAAqB,CAC7B,4DAA4D,CAC7D,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,gCAAgC,CAAC,IAAY,EAAE,KAAa;IACnE,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAErC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,qBAAqB,CAC7B,GAAG,IAAI,8BAA8B,CACtC,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpG,MAAM,IAAI,qBAAqB,CAC7B,GAAG,IAAI,2CAA2C,CACnD,CAAC;IACJ,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY,EAAE,KAAa;IAC3D,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAErC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,qBAAqB,CAC7B,GAAG,IAAI,wBAAwB,CAChC,CAAC;IACJ,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,iBAAiB;IAkEF;IACA;IACA;IACA;IApEX,MAAM,GAAwC,IAAI,CAAC;IAC1C,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;IACnD,aAAa,GAAG,IAAI,GAAG,EAAkC,CAAC;IACnE,wBAAwB,GAAG,KAAK,CAAC;IACjC,iBAAiB,GAAG,KAAK,CAAC;IAEjB,iBAAiB,GAAG,CAAC,OAAgB,EAAE,EAAE;QACxD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,OAA2C,CAAC;QACjE,IAAI,OAAO,YAAY,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAA4B;YACrC,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,IAAI,EACF,YAAY,CAAC,IAAI,IAAI,OAAO,YAAY,CAAC,IAAI,KAAK,QAAQ;gBACxD,CAAC,CAAE,YAAY,CAAC,IAAgC;gBAChD,CAAC,CAAC,EAAE;SACT,CAAC;QAEF,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC7B,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEe,iBAAiB,GAAG,CAAC,OAAgB,EAAE,EAAE;QACxD,MAAM,KAAK,GAAG,IAAI,KAAK,CACrB,mBAAmB,CAAC,OAAO,EAAE,qCAAqC,CAAC,CACpE,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;YACnC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAC7B,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEe,mBAAmB,GAAG,GAAG,EAAE;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,wBAAwB,CAAC;QACnD,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC;QACrC,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;QAE/B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;YACxC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,YACmB,OAAe,EACf,IAAY,EACZ,IAA4B,EAC5B,aAA8C;QAH9C,YAAO,GAAP,OAAO,CAAQ;QACf,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAwB;QAC5B,kBAAa,GAAb,aAAa,CAAiC;IAC9D,CAAC;IAEJ,qBAAqB,CACnB,SAAiB,EACjB,OAA2C;QAE3C,MAAM,mBAAmB,GAAG,wBAAwB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAE7E,OAAO,IAAI,CAAC,SAAS,CACnB;YACE,cAAc,EAAE,wBAAwB;YACxC,OAAO,EAAE,gBAAgB,mBAAmB,EAAE;YAC9C,OAAO,EAAE;gBACP,UAAU,EAAE,mBAAmB;aAChC;SACF,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,iBAAiB,CACf,KAAa,EACb,OAA2C;QAE3C,MAAM,eAAe,GAAG,wBAAwB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAEjE,OAAO,IAAI,CAAC,SAAS,CACnB;YACE,cAAc,EAAE,oBAAoB;YACpC,OAAO,EAAE,YAAY,eAAe,EAAE;YACtC,OAAO,EAAE;gBACP,MAAM,EAAE,eAAe;aACxB;SACF,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,cAAc,CACZ,KAAa,EACb,OAA2C;QAE3C,MAAM,eAAe,GAAG,wBAAwB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAEjE,OAAO,IAAI,CAAC,SAAS,CACnB;YACE,cAAc,EAAE,iBAAiB;YACjC,OAAO,EAAE,SAAS,eAAe,EAAE;YACnC,OAAO,EAAE;gBACP,MAAM,EAAE,eAAe;aACxB;SACF,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,iBAAiB,CACf,eAAuB,EACvB,OAA2C;QAE3C,MAAM,yBAAyB,GAAG,gCAAgC,CAChE,iBAAiB,EACjB,eAAe,CAChB,CAAC;QAEF,OAAO,IAAI,CAAC,SAAS,CACnB;YACE,cAAc,EAAE,oBAAoB;YACpC,OAAO,EAAE,YAAY,yBAAyB,EAAE;YAChD,OAAO,EAAE;gBACP,gBAAgB,EAAE,yBAAyB;aAC5C;SACF,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,UAAU;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,wBAAwB,GAAG,KAAK,CAAC;QACtC,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;IACjC,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,wBAAwB,GAAG,KAAK,CAAC;YACtC,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC;QACrC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,SAAS,CACf,UAAkC,EAClC,OAA2C;QAE3C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAmB;YAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC;QACF,MAAM,gBAAgB,GACpB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAC;QACtE,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,IAAI,KAAK,CAAC,CAAC;QAExD,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACzD,IAAI,mBAAmB,EAAE,CAAC;YACxB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBACpF,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,WAAW,EAAE,GAAG,EAAE;gBAChB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACzD,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO;gBACT,CAAC;gBAED,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC3B,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBACzB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;oBAC1C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBAChD,CAAC;gBAED,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBAC9B,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,CAAC;qBAAM,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBAChC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC3B,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;oBAClC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;gBAChC,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,CAAC;YAED,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC;YAChC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC/C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,EAAE,CAAC;QAEjB,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,MAAmC;IAEnC,OAAO,IAAI,iBAAiB,CAC1B,OAAO,EACP,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,EACjC,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,EACrC,MAAM,CAAC,aAAa,IAAI,oBAAoB,CAC7C,CAAC;AACJ,CAAC"}

package/dist/resources/actions.d.ts

@@ -0,0 +1,5 @@
+import type { GlobiguardActionsClient, GlobiguardActionsReadClient } from "@globiguard/contracts";
+import type { GlobiguardTransport } from "../client.js";
+export declare function createActionsReadClient(transport: GlobiguardTransport): GlobiguardActionsReadClient;
+export declare function createActionsClient(transport: GlobiguardTransport): GlobiguardActionsClient;
+//# sourceMappingURL=actions.d.ts.map

package/dist/resources/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/resources/actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,uBAAuB,EACvB,2BAA2B,EAK5B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGxD,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,mBAAmB,GAC7B,2BAA2B,CAwC7B;AAED,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,mBAAmB,GAC7B,uBAAuB,CAuBzB"}

package/dist/resources/actions.js

@@ -0,0 +1,48 @@
+import { encodePathSegment } from "./path-segments.js";
+export function createActionsReadClient(transport) {
+    return {
+        getAuthorization(authorizationId) {
+            const encodedAuthorizationId = encodePathSegment(authorizationId);
+            return transport.request(`/v1/actions/authorizations/${encodedAuthorizationId}`);
+        },
+        getApproval(approvalId) {
+            const encodedApprovalId = encodePathSegment(approvalId);
+            return transport.request(`/v1/actions/approvals/${encodedApprovalId}`);
+        },
+        listEvidence(request) {
+            const query = request
+                ? {
+                    authorizationId: request.authorizationId,
+                    approvalId: request.approvalId,
+                    workflowRunId: request.workflowRunId
+                }
+                : undefined;
+            return transport.request("/v1/actions/evidence", {
+                query
+            });
+        },
+        getEvidence(evidenceRefId) {
+            const encodedEvidenceRefId = encodePathSegment(evidenceRefId);
+            return transport.request(`/v1/actions/evidence/${encodedEvidenceRefId}`);
+        }
+    };
+}
+export function createActionsClient(transport) {
+    const readClient = createActionsReadClient(transport);
+    return {
+        ...readClient,
+        authorize(request) {
+            return transport.request("/v1/actions/authorize", {
+                method: "POST",
+                body: request
+            });
+        },
+        createApproval(request) {
+            return transport.request("/v1/actions/approvals", {
+                method: "POST",
+                body: request
+            });
+        }
+    };
+}
+//# sourceMappingURL=actions.js.map

package/dist/resources/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/resources/actions.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,UAAU,uBAAuB,CACrC,SAA8B;IAE9B,OAAO;QACL,gBAAgB,CAAC,eAAuB;YACtC,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,eAAe,CAAC,CAAC;YAElE,OAAO,SAAS,CAAC,OAAO,CACtB,8BAA8B,sBAAsB,EAAE,CACvD,CAAC;QACJ,CAAC;QAED,WAAW,CAAC,UAAkB;YAC5B,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAExD,OAAO,SAAS,CAAC,OAAO,CACtB,yBAAyB,iBAAiB,EAAE,CAC7C,CAAC;QACJ,CAAC;QAED,YAAY,CAAC,OAAuC;YAClD,MAAM,KAAK,GAAG,OAAO;gBACnB,CAAC,CAAC;oBACE,eAAe,EAAE,OAAO,CAAC,eAAe;oBACxC,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,OAAO,SAAS,CAAC,OAAO,CAA0B,sBAAsB,EAAE;gBACxE,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAED,WAAW,CAAC,aAAqB;YAC/B,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;YAE9D,OAAO,SAAS,CAAC,OAAO,CACtB,wBAAwB,oBAAoB,EAAE,CAC/C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,SAA8B;IAE9B,MAAM,UAAU,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAEtD,OAAO;QACL,GAAG,UAAU;QAEb,SAAS,CAAC,OAA6C;YACrD,OAAO,SAAS,CAAC,OAAO,CACtB,uBAAuB,EACvB;gBACE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO;aACd,CACF,CAAC;QACJ,CAAC;QAED,cAAc,CAAC,OAAwC;YACrD,OAAO,SAAS,CAAC,OAAO,CAAqB,uBAAuB,EAAE;gBACpE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/resources/audit.d.ts

@@ -0,0 +1,5 @@
+import type { GlobiguardAuditClient, GlobiguardAuditReadClient } from "@globiguard/contracts";
+import type { GlobiguardTransport } from "../client.js";
+export declare function createAuditReadClient(transport: GlobiguardTransport): GlobiguardAuditReadClient;
+export declare function createAuditClient(transport: GlobiguardTransport): GlobiguardAuditClient;
+//# sourceMappingURL=audit.d.ts.map

package/dist/resources/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/resources/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EAOrB,yBAAyB,EAI1B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAaxD,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,mBAAmB,GAC7B,yBAAyB,CA+C3B;AAED,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,mBAAmB,GAC7B,qBAAqB,CAuBvB"}

package/dist/resources/audit.js

@@ -0,0 +1,62 @@
+import { encodePathSegment } from "./path-segments.js";
+export function createAuditReadClient(transport) {
+    return {
+        list(request) {
+            const query = request
+                ? {
+                    from: request.from,
+                    to: request.to,
+                    decision: request.decision,
+                    workflow: request.workflowRunId,
+                    page: request.page,
+                    limit: request.limit
+                }
+                : undefined;
+            return transport.request("/v1/audit", {
+                query
+            });
+        },
+        get(auditEventId) {
+            const encodedAuditEventId = encodePathSegment(auditEventId);
+            return transport.request(`/v1/audit/${encodedAuditEventId}`);
+        },
+        getEvidencePackageSummary(evidencePackageId) {
+            const encodedEvidencePackageId = encodePathSegment(evidencePackageId);
+            return transport.request(`/v1/audit/evidence-packages/${encodedEvidencePackageId}/summary`);
+        },
+        getIncidentReplay(request) {
+            return transport.request("/v1/audit/incident-replay", {
+                query: {
+                    workflowRunId: request.workflowRunId,
+                    correlationId: request.correlationId,
+                    queueEntryId: request.queueEntryId,
+                    auditEventId: request.auditEventId,
+                    authorizationId: request.authorizationId
+                }
+            });
+        }
+    };
+}
+export function createAuditClient(transport) {
+    const readClient = createAuditReadClient(transport);
+    return {
+        ...readClient,
+        export(request) {
+            return transport
+                .request("/v1/audit/export", {
+                method: "POST",
+                body: request ?? {}
+            })
+                .then((response) => ({
+                status: response.status,
+                artifactExportId: response.artifact_export_id,
+                evidencePackageId: response.evidence_package_id,
+                format: response.format,
+                checksum: response.checksum,
+                artifactJson: response.artifact_json,
+                artifact: response.artifact
+            }));
+        }
+    };
+}
+//# sourceMappingURL=audit.js.map

package/dist/resources/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/resources/audit.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAYvD,MAAM,UAAU,qBAAqB,CACnC,SAA8B;IAE9B,OAAO;QACL,IAAI,CAAC,OAAoC;YACvC,MAAM,KAAK,GAAG,OAAO;gBACnB,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,QAAQ,EAAE,OAAO,CAAC,aAAa;oBAC/B,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;iBACrB;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,OAAO,SAAS,CAAC,OAAO,CAA8B,WAAW,EAAE;gBACjE,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAED,GAAG,CAAC,YAAoB;YACtB,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;YAE5D,OAAO,SAAS,CAAC,OAAO,CACtB,aAAa,mBAAmB,EAAE,CACnC,CAAC;QACJ,CAAC;QAED,yBAAyB,CAAC,iBAAyB;YACjD,MAAM,wBAAwB,GAAG,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;YAEtE,OAAO,SAAS,CAAC,OAAO,CACtB,+BAA+B,wBAAwB,UAAU,CAClE,CAAC;QACJ,CAAC;QAED,iBAAiB,CAAC,OAA8C;YAC9D,OAAO,SAAS,CAAC,OAAO,CAA2B,2BAA2B,EAAE;gBAC9E,KAAK,EAAE;oBACL,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,eAAe,EAAE,OAAO,CAAC,eAAe;iBACzC;aACF,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,SAA8B;IAE9B,MAAM,UAAU,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAEpD,OAAO;QACL,GAAG,UAAU;QAEb,MAAM,CAAC,OAAsC;YAC3C,OAAO,SAAS;iBACb,OAAO,CAAmC,kBAAkB,EAAE;gBAC7D,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO,IAAI,EAAE;aACpB,CAAC;iBACD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,gBAAgB,EAAE,QAAQ,CAAC,kBAAkB;gBAC7C,iBAAiB,EAAE,QAAQ,CAAC,mBAAmB;gBAC/C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,YAAY,EAAE,QAAQ,CAAC,aAAa;gBACpC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CAAC,CAAC;QACR,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/resources/installs.d.ts

@@ -0,0 +1,4 @@
+import type { GlobiguardInstallsClient } from "@globiguard/contracts";
+import type { GlobiguardTransport } from "../client.js";
+export declare function createInstallsClient(transport: GlobiguardTransport): GlobiguardInstallsClient;
+//# sourceMappingURL=installs.d.ts.map