@guardion/guardion 0.2.0 → 0.3.0

package/dist/config.d.ts

@@ -1,28 +1,143 @@
 import { z } from 'zod';
+declare const GatewaySchema: z.ZodObject<{
+    /** Base URL of the Guardion gateway container / cloud endpoint */
+    url: z.ZodDefault<z.ZodString>;
+    /** MCP proxy base URL */
+    mcp_url: z.ZodDefault<z.ZodString>;
+    /** LLM provider the gateway will forward to */
+    provider: z.ZodDefault<z.ZodEnum<["anthropic", "vertex-ai", "bedrock", "openai"]>>;
+    /** Vertex AI only */
+    vertex_project_id: z.ZodDefault<z.ZodString>;
+    vertex_region: z.ZodDefault<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    url: string;
+    mcp_url: string;
+    provider: "anthropic" | "vertex-ai" | "bedrock" | "openai";
+    vertex_project_id: string;
+    vertex_region: string;
+}, {
+    url?: string | undefined;
+    mcp_url?: string | undefined;
+    provider?: "anthropic" | "vertex-ai" | "bedrock" | "openai" | undefined;
+    vertex_project_id?: string | undefined;
+    vertex_region?: string | undefined;
+}>;
+declare const HooksConfigSchema: z.ZodObject<{
+    /**
+     * Subset of Claude Code hook events to register.
+     * Defaults to all supported events when omitted.
+     * Security teams can narrow this list via MDM config.
+     */
+    events: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Milliseconds to wait for Guard API before giving up (fire-and-forget) */
+    timeout_ms: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    events: string[];
+    timeout_ms: number;
+}, {
+    events?: string[] | undefined;
+    timeout_ms?: number | undefined;
+}>;
 declare const ConfigSchema: z.ZodObject<{
     version: z.ZodLiteral<1>;
-    tier: z.ZodEnum<["hooks"]>;
+    /**
+     * Deployment tier:
+     *   hooks — fire-and-forget hook events to Guard API, no LLM proxy
+     *   full  — route all LLM traffic through Guardion gateway + hook events
+     */
+    tier: z.ZodEnum<["hooks", "full"]>;
+    /** Guard API base URL */
     api_url: z.ZodString;
+    /** Policy slug to evaluate hook events against */
     policy: z.ZodString;
+    /** Application label attached to every event in the console */
     application: z.ZodString;
+    /** Gateway proxy settings (full tier only) */
+    gateway: z.ZodOptional<z.ZodObject<{
+        /** Base URL of the Guardion gateway container / cloud endpoint */
+        url: z.ZodDefault<z.ZodString>;
+        /** MCP proxy base URL */
+        mcp_url: z.ZodDefault<z.ZodString>;
+        /** LLM provider the gateway will forward to */
+        provider: z.ZodDefault<z.ZodEnum<["anthropic", "vertex-ai", "bedrock", "openai"]>>;
+        /** Vertex AI only */
+        vertex_project_id: z.ZodDefault<z.ZodString>;
+        vertex_region: z.ZodDefault<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        url: string;
+        mcp_url: string;
+        provider: "anthropic" | "vertex-ai" | "bedrock" | "openai";
+        vertex_project_id: string;
+        vertex_region: string;
+    }, {
+        url?: string | undefined;
+        mcp_url?: string | undefined;
+        provider?: "anthropic" | "vertex-ai" | "bedrock" | "openai" | undefined;
+        vertex_project_id?: string | undefined;
+        vertex_region?: string | undefined;
+    }>>;
+    /** Hook event configuration */
+    hooks: z.ZodOptional<z.ZodObject<{
+        /**
+         * Subset of Claude Code hook events to register.
+         * Defaults to all supported events when omitted.
+         * Security teams can narrow this list via MDM config.
+         */
+        events: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /** Milliseconds to wait for Guard API before giving up (fire-and-forget) */
+        timeout_ms: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        events: string[];
+        timeout_ms: number;
+    }, {
+        events?: string[] | undefined;
+        timeout_ms?: number | undefined;
+    }>>;
 }, "strip", z.ZodTypeAny, {
     version: 1;
-    tier: "hooks";
+    tier: "hooks" | "full";
     api_url: string;
     policy: string;
     application: string;
+    hooks?: {
+        events: string[];
+        timeout_ms: number;
+    } | undefined;
+    gateway?: {
+        url: string;
+        mcp_url: string;
+        provider: "anthropic" | "vertex-ai" | "bedrock" | "openai";
+        vertex_project_id: string;
+        vertex_region: string;
+    } | undefined;
 }, {
     version: 1;
-    tier: "hooks";
+    tier: "hooks" | "full";
     api_url: string;
     policy: string;
     application: string;
+    hooks?: {
+        events?: string[] | undefined;
+        timeout_ms?: number | undefined;
+    } | undefined;
+    gateway?: {
+        url?: string | undefined;
+        mcp_url?: string | undefined;
+        provider?: "anthropic" | "vertex-ai" | "bedrock" | "openai" | undefined;
+        vertex_project_id?: string | undefined;
+        vertex_region?: string | undefined;
+    } | undefined;
 }>;
 export type GuardionConfig = z.infer<typeof ConfigSchema>;
+export type GatewayConfig = z.infer<typeof GatewaySchema>;
+export type HooksConfig = z.infer<typeof HooksConfigSchema>;
+export declare const DEFAULT_GATEWAY: GatewayConfig;
+export declare const DEFAULT_HOOKS_CONFIG: HooksConfig;
 export declare const DEFAULT_CONFIG: GuardionConfig;
+/** Resolved hooks events — falls back to all events when not configured */
+export declare function resolvedHookEvents(cfg: GuardionConfig): readonly string[];
 export declare function readConfig(): GuardionConfig | null;
 export declare function readConfigOrDefault(): GuardionConfig;
 export declare function writeConfig(cfg: GuardionConfig): void;
-export declare function devConfig(overrides?: Partial<GuardionConfig>): GuardionConfig;
 export {};
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;EAMhB,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE1D,eAAO,MAAM,cAAc,EAAE,cAM5B,CAAC;AAIF,wBAAgB,UAAU,IAAI,cAAc,GAAG,IAAI,CAQlD;AAED,wBAAgB,mBAAmB,IAAI,cAAc,CAEpD;AAID,wBAAgB,WAAW,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAgBrD;AAID,wBAAgB,SAAS,CAAC,SAAS,GAAE,OAAO,CAAC,cAAc,CAAM,GAAG,cAAc,CAMjF"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,QAAA,MAAM,aAAa;IACjB,kEAAkE;;IAElE,yBAAyB;;IAEzB,+CAA+C;;IAE/C,qBAAqB;;;;;;;;;;;;;;;EAGrB,CAAC;AAEH,QAAA,MAAM,iBAAiB;IACrB;;;;OAIG;;IAEH,4EAA4E;;;;;;;;EAE5E,CAAC;AAIH,QAAA,MAAM,YAAY;;IAEhB;;;;OAIG;;IAEH,yBAAyB;;IAEzB,kDAAkD;;IAElD,+DAA+D;;IAE/D,8CAA8C;;QAtC9C,kEAAkE;;QAElE,yBAAyB;;QAEzB,+CAA+C;;QAE/C,qBAAqB;;;;;;;;;;;;;;;;IAkCrB,+BAA+B;;QA5B/B;;;;WAIG;;QAEH,4EAA4E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwB5E,CAAC;AAEH,MAAM,MAAM,cAAc,GAAK,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAC5D,MAAM,MAAM,aAAa,GAAM,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC7D,MAAM,MAAM,WAAW,GAAQ,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAIjE,eAAO,MAAM,eAAe,EAAE,aAM7B,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,WAGlC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,cAM5B,CAAC;AAEF,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,cAAc,GAAG,SAAS,MAAM,EAAE,CAKzE;AAID,wBAAgB,UAAU,IAAI,cAAc,GAAG,IAAI,CASlD;AAED,wBAAgB,mBAAmB,IAAI,cAAc,CAEpD;AAID,wBAAgB,WAAW,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAerD"}

package/dist/config.js

@@ -1,15 +1,61 @@
 import fs from 'node:fs';
 import yaml from 'js-yaml';
 import { z } from 'zod';
-import { GUARDION_DIR, CONFIG_YAML_PATH, CONFIG_JSON_PATH, DEFAULT_API_URL, } from './constants.js';
-// ── Schema ────────────────────────────────────────────────────────────────────
+import { GUARDION_DIR, CONFIG_YAML_PATH, CONFIG_JSON_PATH, DEFAULT_API_URL, DEFAULT_GATEWAY_URL, DEFAULT_MCP_URL, ALL_HOOK_EVENTS, } from './constants.js';
+// ── Sub-schemas ───────────────────────────────────────────────────────────────
+const GatewaySchema = z.object({
+    /** Base URL of the Guardion gateway container / cloud endpoint */
+    url: z.string().url().default(DEFAULT_GATEWAY_URL),
+    /** MCP proxy base URL */
+    mcp_url: z.string().url().default(DEFAULT_MCP_URL),
+    /** LLM provider the gateway will forward to */
+    provider: z.enum(['anthropic', 'vertex-ai', 'bedrock', 'openai']).default('anthropic'),
+    /** Vertex AI only */
+    vertex_project_id: z.string().default(''),
+    vertex_region: z.string().default(''),
+});
+const HooksConfigSchema = z.object({
+    /**
+     * Subset of Claude Code hook events to register.
+     * Defaults to all supported events when omitted.
+     * Security teams can narrow this list via MDM config.
+     */
+    events: z.array(z.string()).default([...ALL_HOOK_EVENTS]),
+    /** Milliseconds to wait for Guard API before giving up (fire-and-forget) */
+    timeout_ms: z.number().int().positive().default(3000),
+});
+// ── Root schema ───────────────────────────────────────────────────────────────
 const ConfigSchema = z.object({
     version: z.literal(1),
-    tier: z.enum(['hooks']), // expand union when new tiers land
+    /**
+     * Deployment tier:
+     *   hooks — fire-and-forget hook events to Guard API, no LLM proxy
+     *   full  — route all LLM traffic through Guardion gateway + hook events
+     */
+    tier: z.enum(['hooks', 'full']),
+    /** Guard API base URL */
     api_url: z.string().url(),
+    /** Policy slug to evaluate hook events against */
     policy: z.string().min(1),
+    /** Application label attached to every event in the console */
     application: z.string().min(1),
+    /** Gateway proxy settings (full tier only) */
+    gateway: GatewaySchema.optional(),
+    /** Hook event configuration */
+    hooks: HooksConfigSchema.optional(),
 });
+// ── Defaults ──────────────────────────────────────────────────────────────────
+export const DEFAULT_GATEWAY = {
+    url: DEFAULT_GATEWAY_URL,
+    mcp_url: DEFAULT_MCP_URL,
+    provider: 'anthropic',
+    vertex_project_id: '',
+    vertex_region: '',
+};
+export const DEFAULT_HOOKS_CONFIG = {
+    events: [...ALL_HOOK_EVENTS],
+    timeout_ms: 3000,
+};
 export const DEFAULT_CONFIG = {
     version: 1,
     tier: 'hooks',
@@ -17,16 +63,25 @@ export const DEFAULT_CONFIG = {
     policy: 'prompt-defense',
     application: 'claude-code',
 };
+/** Resolved hooks events — falls back to all events when not configured */
+export function resolvedHookEvents(cfg) {
+    const events = cfg.hooks?.events;
+    if (!events || events.length === 0)
+        return ALL_HOOK_EVENTS;
+    // Filter to only known events to prevent config injection
+    return events.filter(e => ALL_HOOK_EVENTS.includes(e));
+}
 // ── Read ──────────────────────────────────────────────────────────────────────
 export function readConfig() {
-    try {
-        const raw = fs.readFileSync(CONFIG_YAML_PATH, 'utf-8');
-        const parsed = yaml.load(raw);
-        return ConfigSchema.parse(parsed);
-    }
-    catch {
-        return null;
+    for (const p of [CONFIG_YAML_PATH, CONFIG_YAML_PATH.replace('.yaml', '.json')]) {
+        try {
+            const raw = fs.readFileSync(p, 'utf-8');
+            const parsed = p.endsWith('.json') ? JSON.parse(raw) : yaml.load(raw);
+            return ConfigSchema.parse(parsed);
+        }
+        catch { /* try next */ }
     }
+    return null;
 }
 export function readConfigOrDefault() {
     return readConfig() ?? DEFAULT_CONFIG;
@@ -35,25 +90,17 @@ export function readConfigOrDefault() {
 export function writeConfig(cfg) {
     const validated = ConfigSchema.parse(cfg);
     fs.mkdirSync(GUARDION_DIR, { recursive: true });
-    // Write human-editable YAML
-    const yamlContent = [
-        '# Guardion config — generated by `npx guardion init`',
-        `# Edit api_url to switch environments. Token lives in your OS keychain.`,
+    // Human-editable YAML
+    const header = [
+        '# Guardion config — edit freely, generated by `npx guardion init`',
+        '# Token is stored in your OS keychain, not here.',
+        '# Docs: https://guardion.ai/docs/claude-code',
         '',
-        yaml.dump(validated, { indent: 2 }),
     ].join('\n');
-    writeAtomic(CONFIG_YAML_PATH, yamlContent);
-    // Write JSON for the CJS hook (no YAML parser dependency)
+    writeAtomic(CONFIG_YAML_PATH, header + yaml.dump(validated, { indent: 2 }));
+    // JSON for the CJS hook (zero-dep, no YAML parser)
     writeAtomic(CONFIG_JSON_PATH, JSON.stringify(validated, null, 2) + '\n');
 }
-// ── Dev helper ────────────────────────────────────────────────────────────────
-export function devConfig(overrides = {}) {
-    return {
-        ...DEFAULT_CONFIG,
-        api_url: 'http://localhost:8082',
-        ...overrides,
-    };
-}
 // ── Atomic write ──────────────────────────────────────────────────────────────
 function writeAtomic(filePath, content) {
     const tmp = filePath + '.tmp';

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAQ,SAAS,CAAC;AAG3B,OAAO,IAAI,MAAO,SAAS,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,gBAAgB,CAAC;AAExB,iFAAiF;AAEjF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,OAAO,EAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACzB,IAAI,EAAS,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,EAAI,mCAAmC;IACrE,OAAO,EAAM,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC7B,MAAM,EAAO,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C,OAAO,EAAM,CAAC;IACd,IAAI,EAAS,OAAO;IACpB,OAAO,EAAM,eAAe;IAC5B,MAAM,EAAO,gBAAgB;IAC7B,WAAW,EAAE,aAAa;CAC3B,CAAC;AAEF,iFAAiF;AAEjF,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,UAAU,EAAE,IAAI,cAAc,CAAC;AACxC,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,WAAW,CAAC,GAAmB;IAC7C,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE1C,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhD,4BAA4B;IAC5B,MAAM,WAAW,GAAG;QAClB,sDAAsD;QACtD,yEAAyE;QACzE,EAAE;QACF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;KACpC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,WAAW,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IAE3C,0DAA0D;IAC1D,WAAW,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,SAAS,CAAC,YAAqC,EAAE;IAC/D,OAAO;QACL,GAAG,cAAc;QACjB,OAAO,EAAE,uBAAuB;QAChC,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,SAAS,WAAW,CAAC,QAAgB,EAAE,OAAe;IACpD,MAAM,GAAG,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC9B,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAQ,SAAS,CAAC;AAC3B,OAAO,IAAI,MAAO,SAAS,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,eAAe,GAChB,MAAM,gBAAgB,CAAC;AAExB,iFAAiF;AAEjF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,kEAAkE;IAClE,GAAG,EAAgB,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC;IAChE,yBAAyB;IACzB,OAAO,EAAY,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;IAC5D,+CAA+C;IAC/C,QAAQ,EAAW,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC/F,qBAAqB;IACrB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,aAAa,EAAM,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC;;;;OAIG;IACH,MAAM,EAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC;IAC7D,4EAA4E;IAC5E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACtD,CAAC,CAAC;AAEH,iFAAiF;AAEjF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,OAAO,EAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACzB;;;;OAIG;IACH,IAAI,EAAS,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,yBAAyB;IACzB,OAAO,EAAM,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC7B,kDAAkD;IAClD,MAAM,EAAO,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,+DAA+D;IAC/D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,8CAA8C;IAC9C,OAAO,EAAM,aAAa,CAAC,QAAQ,EAAE;IACrC,+BAA+B;IAC/B,KAAK,EAAQ,iBAAiB,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAMH,iFAAiF;AAEjF,MAAM,CAAC,MAAM,eAAe,GAAkB;IAC5C,GAAG,EAAgB,mBAAmB;IACtC,OAAO,EAAY,eAAe;IAClC,QAAQ,EAAW,WAAW;IAC9B,iBAAiB,EAAE,EAAE;IACrB,aAAa,EAAM,EAAE;CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAC/C,MAAM,EAAM,CAAC,GAAG,eAAe,CAAC;IAChC,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C,OAAO,EAAM,CAAC;IACd,IAAI,EAAS,OAAO;IACpB,OAAO,EAAM,eAAe;IAC5B,MAAM,EAAO,gBAAgB;IAC7B,WAAW,EAAE,aAAa;CAC3B,CAAC;AAEF,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,GAAmB;IACpD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC;IACjC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC;IAC3D,0DAA0D;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAE,eAAqC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,UAAU;IACxB,KAAK,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,GAAG,GAAM,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtE,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,UAAU,EAAE,IAAI,cAAc,CAAC;AACxC,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,WAAW,CAAC,GAAmB;IAC7C,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhD,sBAAsB;IACtB,MAAM,MAAM,GAAG;QACb,mEAAmE;QACnE,kDAAkD;QAClD,8CAA8C;QAC9C,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,WAAW,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5E,mDAAmD;IACnD,WAAW,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,iFAAiF;AAEjF,SAAS,WAAW,CAAC,QAAgB,EAAE,OAAe;IACpD,MAAM,GAAG,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC9B,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC/B,CAAC"}

package/dist/constants.d.ts

@@ -1,4 +1,4 @@
-export declare const GUARDION_VERSION = "0.2.0";
+export declare const GUARDION_VERSION = "0.3.0";
 export declare const TOKEN_PREFIX = "grd_";
 export declare const BACKUP_KEEP = 5;
 export declare const DEFAULT_API_URL = "https://api.guardion.ai";
@@ -21,6 +21,11 @@ export declare const CLAUDE_SETTINGS_PATH: string;
 export declare const BACKUP_SUFFIX = ".guardion";
 export declare const KEYCHAIN_SERVICE = "guardion";
 export declare const KEYCHAIN_ACCOUNT = "token";
-export declare const HOOK_EVENTS: readonly ["SessionStart", "SessionEnd", "UserPromptSubmit", "PreToolUse", "PostToolUse", "PostToolUseFailure", "PostToolBatch", "SubagentStart", "SubagentStop", "Stop", "StopFailure", "PermissionDenied"];
-export type HookEvent = (typeof HOOK_EVENTS)[number];
+export declare const ALL_HOOK_EVENTS: readonly ["SessionStart", "SessionEnd", "UserPromptSubmit", "PreToolUse", "PostToolUse", "PostToolUseFailure", "PostToolBatch", "SubagentStart", "SubagentStop", "Stop", "StopFailure", "PermissionDenied"];
+export type HookEvent = (typeof ALL_HOOK_EVENTS)[number];
+export declare const HEADER_API_KEY = "x-guardion-api-key";
+export declare const HEADER_PROVIDER = "x-guardion-provider";
+export declare const HEADER_POLICY = "x-guardion-policy";
+export declare const HEADER_TRACE_ID = "x-guardion-trace-id";
+export declare const HEADER_METADATA = "x-guardion-metadata";
 //# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,gBAAgB,UAAU,CAAC;AACxC,eAAO,MAAM,YAAY,SAAa,CAAC;AACvC,eAAO,MAAM,WAAW,IAAS,CAAC;AAGlC,eAAO,MAAM,eAAe,4BAAgC,CAAC;AAC7D,eAAO,MAAM,mBAAmB,gCAAgC,CAAC;AACjE,eAAO,MAAM,eAAe,4BAAgC,CAAC;AAG7D,eAAO,MAAM,WAAW,0BAA8B,CAAC;AACvD,eAAO,MAAM,eAAe,0BAA0B,CAAC;AACvD,eAAO,MAAM,WAAW,8BAAkC,CAAC;AAE3D,eAAO,MAAM,gBAAgB,qBAAsB,CAAC;AACpD,eAAO,MAAM,WAAW,YAAkB,CAAC;AAG3C,eAAO,MAAM,QAAQ,QAA0B,CAAC;AAChD,eAAO,MAAM,YAAY,QAA0C,CAAC;AACpE,eAAO,MAAM,gBAAgB,QAA4C,CAAC;AAC1E,eAAO,MAAM,gBAAgB,QAA4C,CAAC;AAC1E,eAAO,MAAM,eAAe,QAAuC,CAAC;AACpE,eAAO,MAAM,kBAAkB,8BAA+B,CAAC;AAC/D,eAAO,MAAM,iBAAiB,wBAA0B,CAAC;AAEzD,eAAO,MAAM,UAAU,QAA2C,CAAC;AACnE,eAAO,MAAM,oBAAoB,QAAyC,CAAC;AAC3E,eAAO,MAAM,aAAa,cAAqB,CAAC;AAEhD,eAAO,MAAM,gBAAgB,aAAa,CAAC;AAC3C,eAAO,MAAM,gBAAgB,UAAU,CAAC;AAGxC,eAAO,MAAM,WAAW,6MAad,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,gBAAgB,UAAU,CAAC;AACxC,eAAO,MAAM,YAAY,SAAa,CAAC;AACvC,eAAO,MAAM,WAAW,IAAS,CAAC;AAGlC,eAAO,MAAM,eAAe,4BAAgC,CAAC;AAC7D,eAAO,MAAM,mBAAmB,gCAAgC,CAAC;AACjE,eAAO,MAAM,eAAe,4BAAgC,CAAC;AAG7D,eAAO,MAAM,WAAW,0BAA8B,CAAC;AACvD,eAAO,MAAM,eAAe,0BAA0B,CAAC;AACvD,eAAO,MAAM,WAAW,8BAAkC,CAAC;AAG3D,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD,eAAO,MAAM,WAAW,YAAiB,CAAC;AAG1C,eAAO,MAAM,QAAQ,QAA2B,CAAC;AACjD,eAAO,MAAM,YAAY,QAA2C,CAAC;AACrE,eAAO,MAAM,gBAAgB,QAA6C,CAAC;AAC3E,eAAO,MAAM,gBAAgB,QAA6C,CAAC;AAC3E,eAAO,MAAM,eAAe,QAAwC,CAAC;AACrE,eAAO,MAAM,kBAAkB,8BAAgC,CAAC;AAChE,eAAO,MAAM,iBAAiB,wBAA2B,CAAC;AAE1D,eAAO,MAAM,UAAU,QAA2C,CAAC;AACnE,eAAO,MAAM,oBAAoB,QAAyC,CAAC;AAC3E,eAAO,MAAM,aAAa,cAAqB,CAAC;AAGhD,eAAO,MAAM,gBAAgB,aAAa,CAAC;AAC3C,eAAO,MAAM,gBAAgB,UAAU,CAAC;AAKxC,eAAO,MAAM,eAAe,6MAalB,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAGzD,eAAO,MAAM,cAAc,uBAAyB,CAAC;AACrD,eAAO,MAAM,eAAe,wBAAyB,CAAC;AACtD,eAAO,MAAM,aAAa,sBAAyB,CAAC;AACpD,eAAO,MAAM,eAAe,wBAAyB,CAAC;AACtD,eAAO,MAAM,eAAe,wBAAyB,CAAC"}

package/dist/constants.js

@@ -1,19 +1,20 @@
 import path from 'node:path';
 import os from 'node:os';
-export const GUARDION_VERSION = '0.2.0';
+export const GUARDION_VERSION = '0.3.0';
 export const TOKEN_PREFIX = 'grd_';
 export const BACKUP_KEEP = 5;
-// Production URLs
+// ── Production URLs ───────────────────────────────────────────────────────────
 export const DEFAULT_API_URL = 'https://api.guardion.ai';
 export const DEFAULT_GATEWAY_URL = 'https://gateway.guardion.ai';
 export const DEFAULT_MCP_URL = 'https://mcp.guardion.ai';
-// Local dev (--dev flag or api_url in config pointing at localhost)
-export const DEV_API_URL = 'http://localhost:8082';
-export const DEV_GATEWAY_URL = 'http://localhost:8788';
+// ── Local dev (Docker stack) ──────────────────────────────────────────────────
+export const DEV_API_URL = 'http://localhost:8082'; // guardion-guard
+export const DEV_GATEWAY_URL = 'http://localhost:8788'; // guardion-gateway
 export const DEV_MCP_URL = 'http://localhost:8082/mcp';
+// ── Endpoint paths ────────────────────────────────────────────────────────────
 export const HOOK_EVENTS_PATH = '/v1/hooks/events';
 export const HEALTH_PATH = '/health';
-// Filesystem paths
+// ── Filesystem paths ──────────────────────────────────────────────────────────
 export const HOME_DIR = os.homedir();
 export const GUARDION_DIR = path.join(HOME_DIR, '.guardion');
 export const CONFIG_YAML_PATH = path.join(GUARDION_DIR, 'config.yaml');
@@ -24,10 +25,13 @@ export const SYSTEM_TOKEN_PATH = '/etc/guardion/token';
 export const CLAUDE_DIR = path.join(HOME_DIR, '.claude');
 export const CLAUDE_SETTINGS_PATH = path.join(CLAUDE_DIR, 'settings.json');
 export const BACKUP_SUFFIX = '.guardion';
+// ── Keychain ──────────────────────────────────────────────────────────────────
 export const KEYCHAIN_SERVICE = 'guardion';
 export const KEYCHAIN_ACCOUNT = 'token';
-// Hook events captured in MVP (monitoring only)
-export const HOOK_EVENTS = [
+// ── Hook events ───────────────────────────────────────────────────────────────
+// Complete list of Claude Code hook events Guardion can register.
+// The active subset is controlled by config.yaml hooks.events.
+export const ALL_HOOK_EVENTS = [
     'SessionStart',
     'SessionEnd',
     'UserPromptSubmit',
@@ -41,4 +45,10 @@ export const HOOK_EVENTS = [
     'StopFailure',
     'PermissionDenied',
 ];
+// ── Gateway header names ──────────────────────────────────────────────────────
+export const HEADER_API_KEY = 'x-guardion-api-key';
+export const HEADER_PROVIDER = 'x-guardion-provider';
+export const HEADER_POLICY = 'x-guardion-policy';
+export const HEADER_TRACE_ID = 'x-guardion-trace-id';
+export const HEADER_METADATA = 'x-guardion-metadata';
 //# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAQ,SAAS,CAAC;AAE3B,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC,MAAM,CAAC,MAAM,YAAY,GAAO,MAAM,CAAC;AACvC,MAAM,CAAC,MAAM,WAAW,GAAQ,CAAC,CAAC;AAElC,kBAAkB;AAClB,MAAM,CAAC,MAAM,eAAe,GAAO,yBAAyB,CAAC;AAC7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AACjE,MAAM,CAAC,MAAM,eAAe,GAAO,yBAAyB,CAAC;AAE7D,oEAAoE;AACpE,MAAM,CAAC,MAAM,WAAW,GAAO,uBAAuB,CAAC;AACvD,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAC;AACvD,MAAM,CAAC,MAAM,WAAW,GAAO,2BAA2B,CAAC;AAE3D,MAAM,CAAC,MAAM,gBAAgB,GAAI,kBAAkB,CAAC;AACpD,MAAM,CAAC,MAAM,WAAW,GAAS,SAAS,CAAC;AAE3C,mBAAmB;AACnB,MAAM,CAAC,MAAM,QAAQ,GAAc,EAAE,CAAC,OAAO,EAAE,CAAC;AAChD,MAAM,CAAC,MAAM,YAAY,GAAU,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AACpE,MAAM,CAAC,MAAM,gBAAgB,GAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;AAC1E,MAAM,CAAC,MAAM,gBAAgB,GAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;AAC1E,MAAM,CAAC,MAAM,eAAe,GAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;AACpE,MAAM,CAAC,MAAM,kBAAkB,GAAI,2BAA2B,CAAC;AAC/D,MAAM,CAAC,MAAM,iBAAiB,GAAK,qBAAqB,CAAC;AAEzD,MAAM,CAAC,MAAM,UAAU,GAAa,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,aAAa,GAAU,WAAW,CAAC;AAEhD,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAC3C,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAExC,gDAAgD;AAChD,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,cAAc;IACd,YAAY;IACZ,kBAAkB;IAClB,YAAY;IACZ,aAAa;IACb,oBAAoB;IACpB,eAAe;IACf,eAAe;IACf,cAAc;IACd,MAAM;IACN,aAAa;IACb,kBAAkB;CACV,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAQ,SAAS,CAAC;AAE3B,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC,MAAM,CAAC,MAAM,YAAY,GAAO,MAAM,CAAC;AACvC,MAAM,CAAC,MAAM,WAAW,GAAQ,CAAC,CAAC;AAElC,iFAAiF;AACjF,MAAM,CAAC,MAAM,eAAe,GAAO,yBAAyB,CAAC;AAC7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AACjE,MAAM,CAAC,MAAM,eAAe,GAAO,yBAAyB,CAAC;AAE7D,iFAAiF;AACjF,MAAM,CAAC,MAAM,WAAW,GAAO,uBAAuB,CAAC,CAAG,iBAAiB;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAC,CAAG,mBAAmB;AAC7E,MAAM,CAAC,MAAM,WAAW,GAAO,2BAA2B,CAAC;AAE3D,iFAAiF;AACjF,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AACnD,MAAM,CAAC,MAAM,WAAW,GAAQ,SAAS,CAAC;AAE1C,iFAAiF;AACjF,MAAM,CAAC,MAAM,QAAQ,GAAe,EAAE,CAAC,OAAO,EAAE,CAAC;AACjD,MAAM,CAAC,MAAM,YAAY,GAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,gBAAgB,GAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAQ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAK,2BAA2B,CAAC;AAChE,MAAM,CAAC,MAAM,iBAAiB,GAAM,qBAAqB,CAAC;AAE1D,MAAM,CAAC,MAAM,UAAU,GAAa,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,aAAa,GAAU,WAAW,CAAC;AAEhD,iFAAiF;AACjF,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAAC;AAC3C,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAExC,iFAAiF;AACjF,kEAAkE;AAClE,+DAA+D;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,cAAc;IACd,YAAY;IACZ,kBAAkB;IAClB,YAAY;IACZ,aAAa;IACb,oBAAoB;IACpB,eAAe;IACf,eAAe;IACf,cAAc;IACd,MAAM;IACN,aAAa;IACb,kBAAkB;CACV,CAAC;AAIX,iFAAiF;AACjF,MAAM,CAAC,MAAM,cAAc,GAAK,oBAAoB,CAAC;AACrD,MAAM,CAAC,MAAM,eAAe,GAAI,qBAAqB,CAAC;AACtD,MAAM,CAAC,MAAM,aAAa,GAAM,mBAAmB,CAAC;AACpD,MAAM,CAAC,MAAM,eAAe,GAAI,qBAAqB,CAAC;AACtD,MAAM,CAAC,MAAM,eAAe,GAAI,qBAAqB,CAAC"}

package/dist/installer.d.ts

@@ -1,7 +1,8 @@
 import type { ClaudeSettings, ScanResult } from './scanner.js';
-import type { GuardionConfig } from './config.js';
+import { type GuardionConfig } from './config.js';
 export interface PatchOptions {
     config: GuardionConfig;
+    token: string;
     dev?: boolean;
     dryRun?: boolean;
 }

package/dist/installer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AA0DlD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAI,cAAc,CAAC;IACzB,GAAG,CAAC,EAAM,OAAO,CAAC;IAClB,MAAM,CAAC,EAAG,OAAO,CAAC;CACnB;AAED,wBAAgB,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,GAAG,cAAc,CAS1E;AAID,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,CAM9E;AAID,wBAAgB,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS1D;AAqBD,wBAAgB,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAoB3D;AAID,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,GAAG,cAAc,CA0B9E"}
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAmB,MAAM,cAAc,CAAC;AAChF,OAAO,EACL,KAAK,cAAc,EAGpB,MAAM,aAAa,CAAC;AAwGrB,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAG,cAAc,CAAC;IACxB,KAAK,EAAI,MAAM,CAAC;IAChB,GAAG,CAAC,EAAK,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,GAAG,cAAc,CAmB1E;AAID,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,CAM9E;AAID,wBAAgB,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAO1D;AAmBD,wBAAgB,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAgB3D;AAID,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,GAAG,cAAc,CAmC9E"}

package/dist/installer.js

@@ -1,11 +1,11 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { BACKUP_SUFFIX, BACKUP_KEEP, HOOK_EVENTS, } from './constants.js';
-// Production hook command — uses the published scoped package
+import { BACKUP_SUFFIX, BACKUP_KEEP, HEADER_API_KEY, HEADER_PROVIDER, HEADER_POLICY, } from './constants.js';
+import { DEFAULT_GATEWAY, resolvedHookEvents, } from './config.js';
+// Production hook command — scoped npm package, works everywhere
 const HOOK_COMMAND_NPX = 'npx --yes @guardion/guardion hook';
-// Resolve the absolute path to the CJS hook for local dev usage.
-// Works from both src/ (tsx) and dist/ (compiled) layouts.
+// Resolve absolute path to the CJS hook for local dev (no npm needed)
 function resolveLocalHookPath() {
     const here = path.dirname(fileURLToPath(import.meta.url));
     const candidates = [
@@ -18,36 +18,83 @@ function resolveLocalHookPath() {
     }
     return candidates[0];
 }
-function buildHooks(dev) {
-    // dev: use absolute path to local CJS hook (no npm registry lookup)
-    // prod: use npx (once published) or the resolved global binary path
-    const command = dev
-        ? `node ${resolveLocalHookPath()}`
-        : HOOK_COMMAND_NPX;
-    const hooks = {};
-    for (const event of HOOK_EVENTS) {
-        hooks[event] = [{
-                matcher: '',
-                hooks: [{ type: 'command', command }],
-            }];
+function hookCommand(dev) {
+    return dev ? `node ${resolveLocalHookPath()}` : HOOK_COMMAND_NPX;
+}
+function buildHooks(cfg, dev) {
+    const command = hookCommand(dev);
+    const events = resolvedHookEvents(cfg);
+    const result = {};
+    for (const event of events) {
+        result[event] = [{ matcher: '', hooks: [{ type: 'command', command }] }];
     }
-    return hooks;
+    return result;
 }
-// ── Env block (hooks tier — no ANTHROPIC_BASE_URL) ───────────────────────────
-function buildEnv(cfg) {
-    return {
+// ── Env block ─────────────────────────────────────────────────────────────────
+function buildEnv(cfg, token) {
+    const base = {
         GUARDION_TIER: cfg.tier,
         GUARDION_API_URL: cfg.api_url,
         GUARDION_POLICY: cfg.policy,
         GUARDION_APPLICATION: cfg.application,
     };
+    if (cfg.tier === 'full') {
+        const gw = { ...DEFAULT_GATEWAY, ...cfg.gateway };
+        const provider = gw.provider;
+        // Custom headers sent on every LLM request through the gateway.
+        // Lines are newline-separated "Key: value" pairs.
+        const customHeaders = [
+            `${HEADER_API_KEY}: ${token}`,
+            `${HEADER_PROVIDER}: ${provider}`,
+            `${HEADER_POLICY}: ${cfg.policy}`,
+        ];
+        if (provider === 'vertex-ai') {
+            if (gw.vertex_project_id)
+                customHeaders.push(`x-guardion-vertex-project-id: ${gw.vertex_project_id}`);
+            if (gw.vertex_region)
+                customHeaders.push(`x-guardion-vertex-region: ${gw.vertex_region}`);
+        }
+        base.ANTHROPIC_BASE_URL = gw.url;
+        base.ANTHROPIC_CUSTOM_HEADERS = customHeaders.join('\n');
+        base.GUARDION_GATEWAY_URL = gw.url;
+        base.GUARDION_MCP_URL = gw.mcp_url;
+    }
+    return base;
+}
+// ── MCP rewriting (full tier only) ───────────────────────────────────────────
+// Existing MCP servers are proxied through the Guardion MCP gateway so that
+// tool call traffic is also evaluated for policy violations.
+function rewriteMcpServers(servers, mcpBaseUrl) {
+    const out = {};
+    for (const [name, cfg] of Object.entries(servers)) {
+        // Skip servers that are already pointing at a Guardion endpoint
+        if (typeof cfg.url === 'string' && cfg.url.includes('guardion')) {
+            out[name] = cfg;
+            continue;
+        }
+        out[name] = {
+            type: 'http',
+            url: `${mcpBaseUrl}/${name}/mcp`,
+            headers: { Authorization: 'Bearer $GUARDION_TOKEN' },
+        };
+    }
+    return out;
 }
 export function patch(scan, opts) {
     const base = scan.settings
-        ? JSON.parse(JSON.stringify(scan.settings)) // deep clone
+        ? JSON.parse(JSON.stringify(scan.settings))
         : {};
-    base.env = { ...(base.env ?? {}), ...buildEnv(opts.config) };
-    base.hooks = { ...(base.hooks ?? {}), ...buildHooks(opts.dev ?? false) };
+    base.env = { ...(base.env ?? {}), ...buildEnv(opts.config, opts.token) };
+    base.hooks = { ...(base.hooks ?? {}), ...buildHooks(opts.config, opts.dev ?? false) };
+    // Full tier: proxy MCP servers through the Guardion MCP gateway
+    if (opts.config.tier === 'full' && Object.keys(scan.mcpServers).length > 0) {
+        const mcpUrl = opts.config.gateway?.mcp_url
+            ?? (opts.dev ? 'http://localhost:8082/mcp' : DEFAULT_GATEWAY.mcp_url);
+        base.mcpServers = {
+            ...(base.mcpServers ?? {}),
+            ...rewriteMcpServers(scan.mcpServers, mcpUrl),
+        };
+    }
     return base;
 }
 // ── Write ─────────────────────────────────────────────────────────────────────
@@ -91,8 +138,7 @@ export function restore(settingsPath) {
     try {
         const backups = fs.readdirSync(dir)
             .filter(f => f.startsWith(prefix) && f.endsWith('.bak'))
-            .sort()
-            .reverse();
+            .sort().reverse();
         if (backups.length === 0)
             return null;
         const latest = path.join(dir, backups[0]);
@@ -104,24 +150,31 @@ export function restore(settingsPath) {
         return null;
     }
 }
-// ── Remove Guardion entries (uninstall without backup) ────────────────────────
+// ── Remove Guardion entries ───────────────────────────────────────────────────
 export function removeGuardionEntries(settings) {
     const cleaned = JSON.parse(JSON.stringify(settings));
-    // Remove Guardion env keys
     if (cleaned.env) {
         for (const key of Object.keys(cleaned.env)) {
-            if (key.startsWith('GUARDION_'))
+            if (key.startsWith('GUARDION_') || key === 'ANTHROPIC_BASE_URL') {
                 delete cleaned.env[key];
+            }
+        }
+        // Remove Guardion-injected custom headers but preserve ANTHROPIC_CUSTOM_HEADERS
+        // if the user had their own headers before Guardion was installed
+        if (cleaned.env.ANTHROPIC_CUSTOM_HEADERS) {
+            const lines = cleaned.env.ANTHROPIC_CUSTOM_HEADERS.split('\n')
+                .filter((l) => !l.startsWith('x-guardion-'));
+            if (lines.length === 0)
+                delete cleaned.env.ANTHROPIC_CUSTOM_HEADERS;
+            else
+                cleaned.env.ANTHROPIC_CUSTOM_HEADERS = lines.join('\n');
         }
     }
-    // Remove Guardion hooks — entries whose nested hooks array contains a guardion command
     if (cleaned.hooks) {
         for (const [event, hookList] of Object.entries(cleaned.hooks)) {
             const filtered = hookList.filter(entry => {
-                // settings.json format: { matcher, hooks: [{ command }] }
                 if (entry.hooks)
                     return !entry.hooks.some(h => h.command?.includes('guardion'));
-                // legacy flat format: { type, command }
                 return !entry.command?.includes('guardion');
             });
             if (filtered.length === 0)

package/dist/installer.js.map

@@ -1 +1 @@
-{"version":3,"file":"installer.js","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAQ,SAAS,CAAC;AAC3B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAEL,aAAa,EACb,WAAW,EACX,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAIxB,8DAA8D;AAC9D,MAAM,gBAAgB,GAAG,mCAAmC,CAAC;AAE7D,iEAAiE;AACjE,2DAA2D;AAC3D,SAAS,oBAAoB;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC;QACtD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC;KAC7D,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAWD,SAAS,UAAU,CAAC,GAAY;IAC9B,oEAAoE;IACpE,oEAAoE;IACpE,MAAM,OAAO,GAAG,GAAG;QACjB,CAAC,CAAC,QAAQ,oBAAoB,EAAE,EAAE;QAClC,CAAC,CAAC,gBAAgB,CAAC;IAErB,MAAM,KAAK,GAAwC,EAAE,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;gBACd,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;aACtC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAEhF,SAAS,QAAQ,CAAC,GAAmB;IACnC,OAAO;QACL,aAAa,EAAS,GAAG,CAAC,IAAI;QAC9B,gBAAgB,EAAM,GAAG,CAAC,OAAO;QACjC,eAAe,EAAO,GAAG,CAAC,MAAM;QAChC,oBAAoB,EAAE,GAAG,CAAC,WAAW;KACtC,CAAC;AACJ,CAAC;AAUD,MAAM,UAAU,KAAK,CAAC,IAAgB,EAAE,IAAkB;IACxD,MAAM,IAAI,GAAmB,IAAI,CAAC,QAAQ;QACxC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAG,aAAa;QAC3D,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,CAAC,GAAG,GAAK,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACjE,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC;IAEzE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,QAAwB;IACtE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC9B,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACzE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,MAAM,CAAC,YAAoB;IACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9C,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,GAAG,YAAY,GAAG,aAAa,IAAI,EAAE,MAAM,CAAC;IAC/D,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAE1C,YAAY,CAAC,YAAY,CAAC,CAAC;IAC3B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB;IACxC,MAAM,GAAG,GAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAK,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,aAAa,GAAG,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aACvD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;aACtE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAErC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7C,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;AAChC,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,OAAO,CAAC,YAAoB;IAC1C,MAAM,GAAG,GAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAK,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,aAAa,GAAG,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aACvD,IAAI,EAAE;aACN,OAAO,EAAE,CAAC;QAEb,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACtC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,qBAAqB,CAAC,QAAwB;IAC5D,MAAM,OAAO,GAAmB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAErE,2BAA2B;IAC3B,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,uFAAuF;IACvF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,QAAQ,GAAI,QAA6E,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBAC7G,0DAA0D;gBAC1D,IAAI,KAAK,CAAC,KAAK;oBAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;gBAChF,wCAAwC;gBACxC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;;gBAClD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;QACvC,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC;IACpE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../src/installer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAQ,SAAS,CAAC;AAC3B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAEL,aAAa,EACb,WAAW,EACX,cAAc,EACd,eAAe,EACf,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAEL,eAAe,EACf,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,iEAAiE;AACjE,MAAM,gBAAgB,GAAG,mCAAmC,CAAC;AAE7D,sEAAsE;AACtE,SAAS,oBAAoB;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC;QACtD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC;KAC7D,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAUD,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,oBAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CACjB,GAAmB,EACnB,GAAY;IAEZ,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAwC,EAAE,CAAC;IACvD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iFAAiF;AAEjF,SAAS,QAAQ,CAAC,GAAmB,EAAE,KAAa;IAClD,MAAM,IAAI,GAA2B;QACnC,aAAa,EAAS,GAAG,CAAC,IAAI;QAC9B,gBAAgB,EAAM,GAAG,CAAC,OAAO;QACjC,eAAe,EAAO,GAAG,CAAC,MAAM;QAChC,oBAAoB,EAAE,GAAG,CAAC,WAAW;KACtC,CAAC;IAEF,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,EAAE,GAAS,EAAE,GAAG,eAAe,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;QAE7B,gEAAgE;QAChE,kDAAkD;QAClD,MAAM,aAAa,GAAa;YAC9B,GAAG,cAAc,KAAK,KAAK,EAAE;YAC7B,GAAG,eAAe,KAAK,QAAQ,EAAE;YACjC,GAAG,aAAa,KAAK,GAAG,CAAC,MAAM,EAAE;SAClC,CAAC;QACF,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,EAAE,CAAC,iBAAiB;gBAAE,aAAa,CAAC,IAAI,CAAC,iCAAiC,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC;YACtG,IAAI,EAAE,CAAC,aAAa;gBAAM,aAAa,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,CAAC,kBAAkB,GAAS,EAAE,CAAC,GAAG,CAAC;QACvC,IAAI,CAAC,wBAAwB,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,oBAAoB,GAAO,EAAE,CAAC,GAAG,CAAC;QACvC,IAAI,CAAC,gBAAgB,GAAW,EAAE,CAAC,OAAO,CAAC;IAC7C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,4EAA4E;AAC5E,6DAA6D;AAE7D,SAAS,iBAAiB,CACxB,OAAwC,EACxC,UAAkB;IAElB,MAAM,GAAG,GAAoC,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,gEAAgE;QAChE,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;YAChB,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG;YACV,IAAI,EAAK,MAAM;YACf,GAAG,EAAM,GAAG,UAAU,IAAI,IAAI,MAAM;YACpC,OAAO,EAAE,EAAE,aAAa,EAAE,wBAAwB,EAAE;SACrD,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAWD,MAAM,UAAU,KAAK,CAAC,IAAgB,EAAE,IAAkB;IACxD,MAAM,IAAI,GAAmB,IAAI,CAAC,QAAQ;QACxC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,CAAC,GAAG,GAAK,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7E,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC;IAEtF,gEAAgE;IAChE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO;eACtC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC,UAAU,GAAG;YAChB,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;YAC1B,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC;SAC9C,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,QAAwB;IACtE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC9B,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACzE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,MAAM,CAAC,YAAoB;IACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,EAAE,GAAW,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,GAAG,YAAY,GAAG,aAAa,IAAI,EAAE,MAAM,CAAC;IAC/D,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC1C,YAAY,CAAC,YAAY,CAAC,CAAC;IAC3B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB;IACxC,MAAM,GAAG,GAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAK,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,aAAa,GAAG,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aACvD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;aACtE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7C,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;AAChC,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,OAAO,CAAC,YAAoB;IAC1C,MAAM,GAAG,GAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAK,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,aAAa,GAAG,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aACvD,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACtC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,qBAAqB,CAAC,QAAwB;IAC5D,MAAM,OAAO,GAAmB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAErE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,GAAG,KAAK,oBAAoB,EAAE,CAAC;gBAChE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,gFAAgF;QAChF,kEAAkE;QAClE,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC;iBAC3D,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;YACvD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;;gBAC/D,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,QAAQ,GAAI,QAGf,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBACjB,IAAI,KAAK,CAAC,KAAK;oBAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;gBAChF,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;;gBAClD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;QACvC,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC;IACpE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/keychain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keychain.d.ts","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAQA,wBAAgB,QAAQ,IAAI,MAAM,CA6BjC;AAID,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAmB5C;AAED,wBAAgB,UAAU,IAAI,IAAI,CAUjC"}
+{"version":3,"file":"keychain.d.ts","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAaA,wBAAgB,QAAQ,IAAI,MAAM,CAiCjC;AAID,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAsB5C;AAED,wBAAgB,UAAU,IAAI,IAAI,CAwBjC"}