@llm-dev-ops/agentics-cli 1.4.29 → 1.4.34

package/dist/bundled-agents/data-vault-agents/dist/agents/data-access-control/agent.d.ts

@@ -1,134 +0,0 @@
-/**
- * LLM-Data-Vault: Data Access Control Agent
- *
- * Core agent implementation for evaluating data access requests
- * using RBAC/ABAC policies and regulatory constraints.
- *
- * CRITICAL CONSTRAINTS:
- * - Agent MUST NOT execute inference
- * - Agent MUST NOT modify prompts or responses
- * - Agent MUST NOT route requests
- * - Agent MUST NOT trigger orchestration
- * - Agent MUST emit exactly ONE DecisionEvent per invocation
- *
- * @module agents/data-access-control/agent
- */
-import { DataVaultAgent, type ExecutionContext } from '../../runtime/agent-base.js';
-import { type AccessAuthorizationRequest, type AccessAuthorizationResponse, type AccessPolicy, type DecisionType, type AppliedConstraint, type ConfidenceBreakdown } from '../../contracts/index.js';
-import { type PolicyEvaluatorConfig, type RegulatoryConstraint, type PolicyEvaluationSummary } from './policy-evaluator.js';
-import type { RuVectorClient } from '../../ruvector-client/index.js';
-/**
- * Agent version - follows semver
- */
-export declare const AGENT_VERSION = "1.0.0";
-/**
- * Agent identifier
- */
-export declare const AGENT_ID = "data-access-control";
-/**
- * Data Access Control Agent configuration
- */
-export interface DataAccessControlAgentConfig {
-    /** Access policies to evaluate */
-    policies: AccessPolicy[];
-    /** Regulatory constraints to enforce */
-    regulatoryConstraints?: RegulatoryConstraint[];
-    /** Policy evaluator configuration */
-    evaluatorConfig?: Partial<PolicyEvaluatorConfig>;
-    /** RuVector client for persisting decisions */
-    ruvectorClient?: RuVectorClient;
-    /** Enable telemetry emission */
-    enableTelemetry?: boolean;
-}
-/**
- * Extended authorization response with evaluation details
- */
-interface AuthorizationResult {
-    response: AccessAuthorizationResponse;
-    evaluation: PolicyEvaluationSummary;
-}
-/**
- * Data Access Control Agent
- *
- * Evaluates data access requests against RBAC/ABAC policies and
- * regulatory constraints, emitting exactly ONE DecisionEvent per invocation.
- */
-export declare class DataAccessControlAgent extends DataVaultAgent<AccessAuthorizationRequest, AccessAuthorizationResponse> {
-    private readonly policyEvaluator;
-    private readonly ruvectorClient;
-    private readonly enableTelemetry;
-    /**
-     * Creates a new DataAccessControlAgent
-     *
-     * @param config - Agent configuration
-     */
-    constructor(config: DataAccessControlAgentConfig);
-    /**
-     * Validate incoming request
-     */
-    protected validateRequest(request: unknown): AccessAuthorizationRequest;
-    /**
-     * Validate outgoing response
-     */
-    protected validateResponse(response: unknown): AccessAuthorizationResponse;
-    /**
-     * Get decision type for this agent
-     */
-    protected getDecisionType(): DecisionType;
-    /**
-     * Execute authorization logic
-     */
-    protected executeCore(request: AccessAuthorizationRequest, context: ExecutionContext): Promise<{
-        response: AccessAuthorizationResponse;
-        confidence: ConfidenceBreakdown;
-        constraints: AppliedConstraint[];
-    }>;
-    /**
-     * Authorize a data access request
-     *
-     * This is the main entry point for authorization decisions.
-     *
-     * @param request - The authorization request
-     * @returns Authorization result with response and evaluation details
-     */
-    authorize(request: AccessAuthorizationRequest): Promise<AuthorizationResult>;
-    /**
-     * Build policy evaluation results from summary
-     */
-    private buildPolicyEvaluations;
-    /**
-     * Build denial reasons from evaluation
-     */
-    private buildDenialReasons;
-    /**
-     * Build access conditions from evaluation
-     */
-    private buildAccessConditions;
-    /**
-     * Build applied constraints from evaluation
-     */
-    private buildConstraints;
-    /**
-     * Calculate cache TTL based on evaluation result
-     */
-    private calculateCacheTTL;
-    /**
-     * Persist decision event to ruvector-service
-     *
-     * This method MUST be called after invoke() to persist the DecisionEvent.
-     * The agent itself does not persist - the handler is responsible for calling this.
-     *
-     * @param decisionEvent - The decision event from invoke() result
-     */
-    persistDecision(decisionEvent: Parameters<RuVectorClient['persistDecisionEvent']>[0]): Promise<void>;
-}
-/**
- * Create a DataAccessControlAgent with default configuration
- *
- * @param policies - Access policies to evaluate
- * @param ruvectorClient - Optional RuVector client for persistence
- * @returns Configured agent instance
- */
-export declare function createDataAccessControlAgent(policies: AccessPolicy[], ruvectorClient?: RuVectorClient): DataAccessControlAgent;
-export {};
-//# sourceMappingURL=agent.d.ts.map

package/dist/bundled-agents/data-vault-agents/dist/agents/data-access-control/agent.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../src/agents/data-access-control/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,cAAc,EAEd,KAAK,gBAAgB,EACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,YAAY,EAEjB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EAGzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAE7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAGrE;;GAEG;AACH,eAAO,MAAM,aAAa,UAAU,CAAC;AAErC;;GAEG;AACH,eAAO,MAAM,QAAQ,wBAAwB,CAAC;AAE9C;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,kCAAkC;IAClC,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,wCAAwC;IACxC,qBAAqB,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAC/C,qCAAqC;IACrC,eAAe,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACjD,+CAA+C;IAC/C,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,gCAAgC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,UAAU,mBAAmB;IAC3B,QAAQ,EAAE,2BAA2B,CAAC;IACtC,UAAU,EAAE,uBAAuB,CAAC;CACrC;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,SAAQ,cAAc,CACxD,0BAA0B,EAC1B,2BAA2B,CAC5B;IACC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAE1C;;;;OAIG;gBACS,MAAM,EAAE,4BAA4B;IAkChD;;OAEG;IACH,SAAS,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,0BAA0B;IAIvE;;OAEG;IACH,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,OAAO,GAAG,2BAA2B;IAI1E;;OAEG;IACH,SAAS,CAAC,eAAe,IAAI,YAAY;IAKzC;;OAEG;cACa,WAAW,CACzB,OAAO,EAAE,0BAA0B,EACnC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC;QACT,QAAQ,EAAE,2BAA2B,CAAC;QACtC,UAAU,EAAE,mBAAmB,CAAC;QAChC,WAAW,EAAE,iBAAiB,EAAE,CAAC;KAClC,CAAC;IA4DF;;;;;;;OAOG;IACU,SAAS,CACpB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,mBAAmB,CAAC;IA0C/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA+C9B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA6C1B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAoC7B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAqExB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAmBzB;;;;;;;OAOG;IACU,eAAe,CAC1B,aAAa,EAAE,UAAU,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,GACnE,OAAO,CAAC,IAAI,CAAC;CAWjB;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,YAAY,EAAE,EACxB,cAAc,CAAC,EAAE,cAAc,GAC9B,sBAAsB,CAMxB"}

package/dist/bundled-agents/data-vault-agents/dist/agents/data-access-control/agent.js

@@ -1,389 +0,0 @@
-/**
- * LLM-Data-Vault: Data Access Control Agent
- *
- * Core agent implementation for evaluating data access requests
- * using RBAC/ABAC policies and regulatory constraints.
- *
- * CRITICAL CONSTRAINTS:
- * - Agent MUST NOT execute inference
- * - Agent MUST NOT modify prompts or responses
- * - Agent MUST NOT route requests
- * - Agent MUST NOT trigger orchestration
- * - Agent MUST emit exactly ONE DecisionEvent per invocation
- *
- * @module agents/data-access-control/agent
- */
-import { DataVaultAgent, } from '../../runtime/agent-base.js';
-import { validateAccessAuthorizationRequest, validateAccessAuthorizationResponse, } from '../../contracts/index.js';
-import { PolicyEvaluator, createDefaultPolicyEvaluator, } from './policy-evaluator.js';
-import { getTelemetry } from '../../telemetry/index.js';
-/**
- * Agent version - follows semver
- */
-export const AGENT_VERSION = '1.0.0';
-/**
- * Agent identifier
- */
-export const AGENT_ID = 'data-access-control';
-/**
- * Data Access Control Agent
- *
- * Evaluates data access requests against RBAC/ABAC policies and
- * regulatory constraints, emitting exactly ONE DecisionEvent per invocation.
- */
-export class DataAccessControlAgent extends DataVaultAgent {
-    policyEvaluator;
-    ruvectorClient;
-    enableTelemetry;
-    /**
-     * Creates a new DataAccessControlAgent
-     *
-     * @param config - Agent configuration
-     */
-    constructor(config) {
-        const metadata = {
-            agent_id: AGENT_ID,
-            agent_version: AGENT_VERSION,
-            classification: 'DATA_ACCESS_CONTROL',
-            name: 'Data Access Control Agent',
-            description: 'Evaluates data access requests using RBAC/ABAC policies and regulatory constraints',
-            supported_operations: [
-                'authorize',
-                'evaluate_policy',
-                'check_regulatory_compliance',
-            ],
-        };
-        super(metadata);
-        // Initialize policy evaluator
-        if (config.regulatoryConstraints) {
-            this.policyEvaluator = new PolicyEvaluator(config.policies, config.regulatoryConstraints, config.evaluatorConfig);
-        }
-        else {
-            this.policyEvaluator = createDefaultPolicyEvaluator(config.policies, config.evaluatorConfig);
-        }
-        this.ruvectorClient = config.ruvectorClient ?? null;
-        this.enableTelemetry = config.enableTelemetry ?? true;
-    }
-    /**
-     * Validate incoming request
-     */
-    validateRequest(request) {
-        return validateAccessAuthorizationRequest(request);
-    }
-    /**
-     * Validate outgoing response
-     */
-    validateResponse(response) {
-        return validateAccessAuthorizationResponse(response);
-    }
-    /**
-     * Get decision type for this agent
-     */
-    getDecisionType() {
-        // Map to appropriate decision type based on result
-        return 'dataset_access_granted'; // Will be updated in executeCore based on actual decision
-    }
-    /**
-     * Execute authorization logic
-     */
-    async executeCore(request, context) {
-        const startTime = performance.now();
-        // Emit telemetry for invocation start
-        if (this.enableTelemetry) {
-            getTelemetry().recordInvocationStart(this.metadata.agent_id, this.metadata.agent_version, context.execution_ref, context.correlation_id, context.tenant_id);
-        }
-        try {
-            // Perform authorization
-            const authResult = await this.authorize(request);
-            // Build constraints list from evaluation
-            const constraints = this.buildConstraints(authResult.evaluation);
-            // Build confidence breakdown
-            const confidence = {
-                policy_match: authResult.evaluation.confidence,
-                detection_confidence: authResult.evaluation.rbac.confidence,
-                model_confidence: authResult.evaluation.abac.confidence,
-            };
-            // Record access decision telemetry
-            if (this.enableTelemetry) {
-                getTelemetry().recordAccessDecision(this.metadata.agent_id, context.execution_ref, authResult.response.decision === 'allow', authResult.evaluation.reasons.join('; '));
-            }
-            return {
-                response: authResult.response,
-                confidence,
-                constraints,
-            };
-        }
-        finally {
-            const duration = performance.now() - startTime;
-            // Emit completion telemetry
-            if (this.enableTelemetry) {
-                getTelemetry().recordInvocationComplete(this.metadata.agent_id, this.metadata.agent_version, context.execution_ref, duration, true, { operation: 'authorize' });
-            }
-        }
-    }
-    /**
-     * Authorize a data access request
-     *
-     * This is the main entry point for authorization decisions.
-     *
-     * @param request - The authorization request
-     * @returns Authorization result with response and evaluation details
-     */
-    async authorize(request) {
-        // Evaluate policies
-        const evaluation = this.policyEvaluator.evaluate(request.subject, request.resource, request.permission, request.context);
-        // Build policy evaluation results
-        const policyEvaluations = this.buildPolicyEvaluations(evaluation);
-        // Build denial reasons if denied
-        const denialReasons = evaluation.decision === 'deny'
-            ? this.buildDenialReasons(evaluation)
-            : [];
-        // Build conditions if conditional access
-        const conditions = this.buildAccessConditions(evaluation);
-        // Determine granted permissions
-        const grantedPermissions = evaluation.decision === 'allow'
-            ? evaluation.rbac.grantedPermissions
-            : [];
-        // Build response
-        const response = {
-            request_id: request.request_id,
-            decision: evaluation.decision === 'allow' ? 'allow' : 'deny',
-            granted_permissions: grantedPermissions,
-            policy_evaluations: policyEvaluations,
-            conditions,
-            denial_reasons: denialReasons,
-            cache_ttl_seconds: this.calculateCacheTTL(evaluation),
-        };
-        return {
-            response,
-            evaluation,
-        };
-    }
-    /**
-     * Build policy evaluation results from summary
-     */
-    buildPolicyEvaluations(evaluation) {
-        const results = [];
-        // Add RBAC evaluation if roles matched
-        if (evaluation.rbac.matchingRoles.length > 0) {
-            results.push({
-                policy_id: crypto.randomUUID(),
-                policy_version: '1.0',
-                rule_id: evaluation.rbac.matchingRoles.join(','),
-                effect: evaluation.rbac.allowed ? 'allow' : 'deny',
-                reason: evaluation.rbac.reason,
-            });
-        }
-        // Add ABAC evaluation if rules matched
-        if (evaluation.abac.matchingRules.length > 0) {
-            results.push({
-                policy_id: crypto.randomUUID(),
-                policy_version: '1.0',
-                rule_id: evaluation.abac.matchingRules.join(','),
-                effect: evaluation.abac.allowed ? 'allow' : 'deny',
-                reason: evaluation.abac.reason,
-            });
-        }
-        // Add regulatory evaluations
-        for (const framework of evaluation.regulatory.applicableFrameworks) {
-            const violations = evaluation.regulatory.violations.filter(v => v.framework === framework);
-            results.push({
-                policy_id: crypto.randomUUID(),
-                policy_version: '1.0',
-                rule_id: framework,
-                effect: violations.some(v => v.severity === 'deny') ? 'deny' : 'allow',
-                reason: violations.length > 0
-                    ? `Violations: ${violations.map(v => v.requirementId).join(', ')}`
-                    : `${framework} compliant`,
-            });
-        }
-        return results;
-    }
-    /**
-     * Build denial reasons from evaluation
-     */
-    buildDenialReasons(evaluation) {
-        const reasons = [];
-        // Add RBAC denial reasons
-        if (!evaluation.rbac.allowed) {
-            reasons.push({
-                code: 'RBAC_DENIED',
-                message: evaluation.rbac.reason,
-            });
-        }
-        // Add ABAC denial reasons
-        if (!evaluation.abac.allowed) {
-            reasons.push({
-                code: 'ABAC_DENIED',
-                message: evaluation.abac.reason,
-            });
-        }
-        // Add regulatory violation reasons
-        for (const violation of evaluation.regulatory.violations) {
-            if (violation.severity === 'deny') {
-                reasons.push({
-                    code: `${violation.framework}_VIOLATION`,
-                    message: violation.description,
-                    rule_id: violation.requirementId,
-                });
-            }
-        }
-        // Add combined reasons
-        for (const reason of evaluation.reasons) {
-            if (!reasons.some(r => r.message === reason)) {
-                reasons.push({
-                    code: 'POLICY_DENIED',
-                    message: reason,
-                });
-            }
-        }
-        return reasons;
-    }
-    /**
-     * Build access conditions from evaluation
-     */
-    buildAccessConditions(evaluation) {
-        const conditions = [];
-        // Add warning-level regulatory violations as conditions
-        for (const violation of evaluation.regulatory.violations) {
-            if (violation.severity === 'warn') {
-                conditions.push({
-                    type: 'regulatory_warning',
-                    requirement: violation.description,
-                    metadata: {
-                        framework: violation.framework,
-                        requirementId: violation.requirementId,
-                    },
-                });
-            }
-        }
-        // Add audit requirements
-        for (const violation of evaluation.regulatory.violations) {
-            if (violation.severity === 'audit') {
-                conditions.push({
-                    type: 'audit_required',
-                    requirement: `Access must be audited for ${violation.framework} compliance`,
-                    metadata: {
-                        framework: violation.framework,
-                        requirementId: violation.requirementId,
-                    },
-                });
-            }
-        }
-        return conditions;
-    }
-    /**
-     * Build applied constraints from evaluation
-     */
-    buildConstraints(evaluation) {
-        const constraints = [];
-        // Add role-based constraints
-        if (evaluation.rbac.matchingRoles.length > 0) {
-            constraints.push({
-                type: 'role_required',
-                description: `Access granted via roles: ${evaluation.rbac.matchingRoles.join(', ')}`,
-                severity: 'info',
-                metadata: { roles: evaluation.rbac.matchingRoles },
-            });
-        }
-        else if (!evaluation.rbac.allowed) {
-            constraints.push({
-                type: 'permission_denied',
-                description: evaluation.rbac.reason,
-                severity: 'error',
-            });
-        }
-        // Add regulatory constraints
-        for (const violation of evaluation.regulatory.violations) {
-            const severityMap = {
-                deny: 'critical',
-                warn: 'warning',
-                audit: 'info',
-            };
-            let constraintType;
-            switch (violation.framework) {
-                case 'GDPR':
-                    constraintType = 'gdpr_compliance';
-                    break;
-                case 'HIPAA':
-                    constraintType = 'hipaa_compliance';
-                    break;
-                case 'CCPA':
-                    constraintType = 'ccpa_compliance';
-                    break;
-                default:
-                    constraintType = 'soc2_compliance';
-            }
-            constraints.push({
-                type: constraintType,
-                description: violation.description,
-                severity: severityMap[violation.severity] ?? 'warning',
-                metadata: {
-                    requirementId: violation.requirementId,
-                    framework: violation.framework,
-                },
-            });
-        }
-        // Add decision source constraint
-        constraints.push({
-            type: 'role_required', // Using as proxy for decision tracking
-            description: `Decision made by: ${evaluation.decisionSource}`,
-            severity: 'info',
-            metadata: {
-                decisionSource: evaluation.decisionSource,
-                confidence: evaluation.confidence,
-            },
-        });
-        return constraints;
-    }
-    /**
-     * Calculate cache TTL based on evaluation result
-     */
-    calculateCacheTTL(evaluation) {
-        // No caching for denied requests
-        if (evaluation.decision === 'deny') {
-            return 0;
-        }
-        // Shorter TTL for lower confidence decisions
-        if (evaluation.confidence < 0.7) {
-            return 60; // 1 minute
-        }
-        if (evaluation.confidence < 0.9) {
-            return 300; // 5 minutes
-        }
-        // Standard TTL for high confidence decisions
-        return 900; // 15 minutes
-    }
-    /**
-     * Persist decision event to ruvector-service
-     *
-     * This method MUST be called after invoke() to persist the DecisionEvent.
-     * The agent itself does not persist - the handler is responsible for calling this.
-     *
-     * @param decisionEvent - The decision event from invoke() result
-     */
-    async persistDecision(decisionEvent) {
-        if (!this.ruvectorClient) {
-            throw new Error('RuVector client not configured - cannot persist decision');
-        }
-        const result = await this.ruvectorClient.persistDecisionEvent(decisionEvent);
-        if (!result.success) {
-            throw new Error(`Failed to persist decision: ${result.error?.message}`);
-        }
-    }
-}
-/**
- * Create a DataAccessControlAgent with default configuration
- *
- * @param policies - Access policies to evaluate
- * @param ruvectorClient - Optional RuVector client for persistence
- * @returns Configured agent instance
- */
-export function createDataAccessControlAgent(policies, ruvectorClient) {
-    return new DataAccessControlAgent({
-        policies,
-        ruvectorClient,
-        enableTelemetry: true,
-    });
-}
-//# sourceMappingURL=agent.js.map

package/dist/bundled-agents/data-vault-agents/dist/agents/data-access-control/agent.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../../src/agents/data-access-control/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,cAAc,GAGf,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAQL,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EAIf,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC;AAErC;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AA0B9C;;;;;GAKG;AACH,MAAM,OAAO,sBAAuB,SAAQ,cAG3C;IACkB,eAAe,CAAkB;IACjC,cAAc,CAAwB;IACtC,eAAe,CAAU;IAE1C;;;;OAIG;IACH,YAAY,MAAoC;QAC9C,MAAM,QAAQ,GAAkB;YAC9B,QAAQ,EAAE,QAAQ;YAClB,aAAa,EAAE,aAAa;YAC5B,cAAc,EAAE,qBAAqB;YACrC,IAAI,EAAE,2BAA2B;YACjC,WAAW,EAAE,oFAAoF;YACjG,oBAAoB,EAAE;gBACpB,WAAW;gBACX,iBAAiB;gBACjB,6BAA6B;aAC9B;SACF,CAAC;QAEF,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEhB,8BAA8B;QAC9B,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YACjC,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CACxC,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,qBAAqB,EAC5B,MAAM,CAAC,eAAe,CACvB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,eAAe,GAAG,4BAA4B,CACjD,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,eAAe,CACvB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;QACpD,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC;IACxD,CAAC;IAED;;OAEG;IACO,eAAe,CAAC,OAAgB;QACxC,OAAO,kCAAkC,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACO,gBAAgB,CAAC,QAAiB;QAC1C,OAAO,mCAAmC,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACO,eAAe;QACvB,mDAAmD;QACnD,OAAO,wBAAwB,CAAC,CAAC,0DAA0D;IAC7F,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,WAAW,CACzB,OAAmC,EACnC,OAAyB;QAMzB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEpC,sCAAsC;QACtC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,YAAY,EAAE,CAAC,qBAAqB,CAClC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EACtB,IAAI,CAAC,QAAQ,CAAC,aAAa,EAC3B,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,SAAS,CAClB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,wBAAwB;YACxB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAEjD,yCAAyC;YACzC,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAEjE,6BAA6B;YAC7B,MAAM,UAAU,GAAwB;gBACtC,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC,UAAU;gBAC9C,oBAAoB,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU;gBAC3D,gBAAgB,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU;aACxD,CAAC;YAEF,mCAAmC;YACnC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,YAAY,EAAE,CAAC,oBAAoB,CACjC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EACtB,OAAO,CAAC,aAAa,EACrB,UAAU,CAAC,QAAQ,CAAC,QAAQ,KAAK,OAAO,EACxC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CACzC,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,UAAU;gBACV,WAAW;aACZ,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE/C,4BAA4B;YAC5B,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBACzB,YAAY,EAAE,CAAC,wBAAwB,CACrC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EACtB,IAAI,CAAC,QAAQ,CAAC,aAAa,EAC3B,OAAO,CAAC,aAAa,EACrB,QAAQ,EACR,IAAI,EACJ,EAAE,SAAS,EAAE,WAAW,EAAE,CAC3B,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,SAAS,CACpB,OAAmC;QAEnC,oBAAoB;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAC9C,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,OAAO,CAChB,CAAC;QAEF,kCAAkC;QAClC,MAAM,iBAAiB,GAAG,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;QAElE,iCAAiC;QACjC,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,KAAK,MAAM;YAClD,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;YACrC,CAAC,CAAC,EAAE,CAAC;QAEP,yCAAyC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAE1D,gCAAgC;QAChC,MAAM,kBAAkB,GAAG,UAAU,CAAC,QAAQ,KAAK,OAAO;YACxD,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB;YACpC,CAAC,CAAC,EAAE,CAAC;QAEP,iBAAiB;QACjB,MAAM,QAAQ,GAAgC;YAC5C,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,UAAU,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YAC5D,mBAAmB,EAAE,kBAAkB;YACvC,kBAAkB,EAAE,iBAAiB;YACrC,UAAU;YACV,cAAc,EAAE,aAAa;YAC7B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC;SACtD,CAAC;QAEF,OAAO;YACL,QAAQ;YACR,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,sBAAsB,CAC5B,UAAmC;QAEnC,MAAM,OAAO,GAA6B,EAAE,CAAC;QAE7C,uCAAuC;QACvC,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE;gBAC9B,cAAc,EAAE,KAAK;gBACrB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;gBAChD,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;gBAClD,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,uCAAuC;QACvC,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE;gBAC9B,cAAc,EAAE,KAAK;gBACrB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;gBAChD,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;gBAClD,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,6BAA6B;QAC7B,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC;YACnE,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CACxD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAC/B,CAAC;YAEF,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE;gBAC9B,cAAc,EAAE,KAAK;gBACrB,OAAO,EAAE,SAAS;gBAClB,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;gBACtE,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;oBAC3B,CAAC,CAAC,eAAe,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBAClE,CAAC,CAAC,GAAG,SAAS,YAAY;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,kBAAkB,CACxB,UAAmC;QAEnC,MAAM,OAAO,GAAkD,EAAE,CAAC;QAElE,0BAA0B;QAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;aAChC,CAAC,CAAC;QACL,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;aAChC,CAAC,CAAC;QACL,CAAC;QAED,mCAAmC;QACnC,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;YACzD,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAClC,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,GAAG,SAAS,CAAC,SAAS,YAAY;oBACxC,OAAO,EAAE,SAAS,CAAC,WAAW;oBAC9B,OAAO,EAAE,SAAS,CAAC,aAAa;iBACjC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,EAAE,CAAC;gBAC7C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,qBAAqB,CAC3B,UAAmC;QAEnC,MAAM,UAAU,GAA8C,EAAE,CAAC;QAEjE,wDAAwD;QACxD,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;YACzD,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAClC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,oBAAoB;oBAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;oBAClC,QAAQ,EAAE;wBACR,SAAS,EAAE,SAAS,CAAC,SAAS;wBAC9B,aAAa,EAAE,SAAS,CAAC,aAAa;qBACvC;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,yBAAyB;QACzB,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;YACzD,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACnC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,gBAAgB;oBACtB,WAAW,EAAE,8BAA8B,SAAS,CAAC,SAAS,aAAa;oBAC3E,QAAQ,EAAE;wBACR,SAAS,EAAE,SAAS,CAAC,SAAS;wBAC9B,aAAa,EAAE,SAAS,CAAC,aAAa;qBACvC;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,gBAAgB,CACtB,UAAmC;QAEnC,MAAM,WAAW,GAAwB,EAAE,CAAC;QAE5C,6BAA6B;QAC7B,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7C,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,eAAe;gBACrB,WAAW,EAAE,6BAA6B,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACpF,QAAQ,EAAE,MAAM;gBAChB,QAAQ,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE;aACnD,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,mBAAmB;gBACzB,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;gBACnC,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;QAED,6BAA6B;QAC7B,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;YACzD,MAAM,WAAW,GAAkD;gBACjE,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,MAAM;aACd,CAAC;YAEF,IAAI,cAAyC,CAAC;YAC9C,QAAQ,SAAS,CAAC,SAAS,EAAE,CAAC;gBAC5B,KAAK,MAAM;oBACT,cAAc,GAAG,iBAAiB,CAAC;oBACnC,MAAM;gBACR,KAAK,OAAO;oBACV,cAAc,GAAG,kBAAkB,CAAC;oBACpC,MAAM;gBACR,KAAK,MAAM;oBACT,cAAc,GAAG,iBAAiB,CAAC;oBACnC,MAAM;gBACR;oBACE,cAAc,GAAG,iBAAiB,CAAC;YACvC,CAAC;YAED,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,cAAc;gBACpB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,QAAQ,EAAE,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,SAAS;gBACtD,QAAQ,EAAE;oBACR,aAAa,EAAE,SAAS,CAAC,aAAa;oBACtC,SAAS,EAAE,SAAS,CAAC,SAAS;iBAC/B;aACF,CAAC,CAAC;QACL,CAAC;QAED,iCAAiC;QACjC,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,eAAe,EAAE,uCAAuC;YAC9D,WAAW,EAAE,qBAAqB,UAAU,CAAC,cAAc,EAAE;YAC7D,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE;gBACR,cAAc,EAAE,UAAU,CAAC,cAAc;gBACzC,UAAU,EAAE,UAAU,CAAC,UAAU;aAClC;SACF,CAAC,CAAC;QAEH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,UAAmC;QAC3D,iCAAiC;QACjC,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACnC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,6CAA6C;QAC7C,IAAI,UAAU,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC,CAAC,WAAW;QACxB,CAAC;QAED,IAAI,UAAU,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,CAAC,YAAY;QAC1B,CAAC;QAED,6CAA6C;QAC7C,OAAO,GAAG,CAAC,CAAC,aAAa;IAC3B,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,eAAe,CAC1B,aAAoE;QAEpE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;QAE7E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAwB,EACxB,cAA+B;IAE/B,OAAO,IAAI,sBAAsB,CAAC;QAChC,QAAQ;QACR,cAAc;QACd,eAAe,EAAE,IAAI;KACtB,CAAC,CAAC;AACL,CAAC"}

package/dist/bundled-agents/data-vault-agents/dist/agents/data-access-control/handler.d.ts

@@ -1,64 +0,0 @@
-/**
- * LLM-Data-Vault: Data Access Control Edge Function Handler
- *
- * Google Cloud Edge Function handler for the Data Access Control Agent.
- * Handles HTTP requests, validates input, invokes the agent, and
- * emits telemetry.
- *
- * CRITICAL:
- * - Exactly ONE DecisionEvent MUST be emitted per invocation
- * - Handler MUST persist DecisionEvent to ruvector-service
- * - Handler MUST return deterministic, machine-readable output
- *
- * @module agents/data-access-control/handler
- */
-import type { Request, Response } from 'express';
-import type { AccessPolicy } from '../../contracts/index.js';
-/**
- * Handler configuration
- */
-export interface HandlerConfig {
-    /** Access policies to evaluate */
-    policies: AccessPolicy[];
-    /** Enable telemetry */
-    enableTelemetry?: boolean;
-    /** Enable request validation */
-    enableValidation?: boolean;
-    /** Enable response caching headers */
-    enableCaching?: boolean;
-    /** Environment (production, staging, development) */
-    environment?: string;
-}
-/**
- * Main Edge Function handler
- *
- * This is the entry point for Google Cloud Functions.
- *
- * @param req - Express-compatible request object
- * @param res - Express-compatible response object
- * @param config - Handler configuration
- */
-export declare function handleDataAccessControl(req: Request, res: Response, config: HandlerConfig): Promise<void>;
-/**
- * Create handler factory for Google Cloud Functions
- *
- * Usage:
- * ```typescript
- * import { createHandler } from './handler';
- *
- * export const dataAccessControl = createHandler({
- *   policies: loadPolicies(),
- *   enableTelemetry: true,
- * });
- * ```
- */
-export declare function createHandler(config: HandlerConfig): (req: Request, res: Response) => Promise<void>;
-/**
- * Health check handler
- */
-export declare function handleHealthCheck(_req: Request, res: Response): Promise<void>;
-/**
- * Reset handler state (for testing)
- */
-export declare function resetHandlerState(): void;
-//# sourceMappingURL=handler.d.ts.map

package/dist/bundled-agents/data-vault-agents/dist/agents/data-access-control/handler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/agents/data-access-control/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAajD,OAAO,KAAK,EACV,YAAY,EAEb,MAAM,0BAA0B,CAAC;AAGlC;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,kCAAkC;IAClC,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,uBAAuB;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gCAAgC;IAChC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,sCAAsC;IACtC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA8GD;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CAqJf;AA4HD;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,aAAa,GACpB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,CAIhD;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,QAAQ,GACZ,OAAO,CAAC,IAAI,CAAC,CAoCf;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAIxC"}