@llm-dev-ops/agentics-cli 1.4.32 → 1.4.35

package/dist/bundled-agents/policy-engine-agents/dist/agents/policy-enforcement/handler.js

@@ -0,0 +1,216 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleEvaluate = handleEvaluate;
+exports.handleResolve = handleResolve;
+exports.handleRoute = handleRoute;
+exports.handleInfo = handleInfo;
+exports.handleHealth = handleHealth;
+const uuid_1 = require("uuid");
+const agent_1 = require("./agent");
+const policy_repository_1 = require("../../db/models/policy-repository");
+const executor_1 = require("../../execution/executor");
+const logger_1 = __importDefault(require("@utils/logger"));
+/**
+ * Validate the request body
+ */
+function validateRequest(body) {
+    if (!body || typeof body !== 'object') {
+        return { valid: false, error: 'Request body must be a JSON object' };
+    }
+    const request = body;
+    if (!request.context || typeof request.context !== 'object') {
+        return { valid: false, error: 'context is required and must be an object' };
+    }
+    return { valid: true };
+}
+/**
+ * Create Policy Enforcement Agent instance with loaded policies
+ */
+async function createAgentWithPolicies() {
+    const repository = new policy_repository_1.PolicyRepository();
+    const policies = await repository.findActive();
+    return new agent_1.PolicyEnforcementAgent(policies);
+}
+/**
+ * Decision event artifact extractor for span attachment
+ */
+function extractDecisionArtifact(event) {
+    return {
+        id: event.event_id,
+        type: 'decision_event',
+        reference: event.event_id,
+    };
+}
+/**
+ * Edge Function Handler: POST /agent/evaluate
+ *
+ * Evaluate a request against policy rules.
+ * Requires execution context headers (enforced by middleware).
+ */
+async function handleEvaluate(req, res) {
+    const requestId = req.headers['x-request-id']?.toString() || (0, uuid_1.v4)();
+    const repoSpan = res.locals.repoSpan;
+    logger_1.default.info({ requestId, path: '/agent/evaluate' }, 'Handling evaluate request');
+    try {
+        // Validate request
+        const validation = validateRequest(req.body);
+        if (!validation.valid) {
+            const result = (0, executor_1.buildExecutionResult)(repoSpan, [], undefined, {
+                code: 'INVALID_REQUEST',
+                message: validation.error,
+            });
+            res.status(400).json(result);
+            return;
+        }
+        const body = req.body;
+        // Build input
+        const input = {
+            request_id: requestId,
+            context: body.context,
+            policy_ids: body.policy_ids,
+            dry_run: body.dry_run,
+            trace: body.trace,
+        };
+        // Execute agent with span tracking
+        const { data: decisionEvent, agentSpan } = await (0, executor_1.executeAgent)(repoSpan, agent_1.AGENT_ID, async () => {
+            const agent = await createAgentWithPolicies();
+            return agent.evaluate(input);
+        }, extractDecisionArtifact);
+        const result = (0, executor_1.buildExecutionResult)(repoSpan, [agentSpan], decisionEvent);
+        res.status(200).json(result);
+    }
+    catch (error) {
+        logger_1.default.error({ requestId, error }, 'Evaluate request failed');
+        const result = (0, executor_1.buildExecutionResult)(repoSpan, [], undefined, {
+            code: 'EVALUATION_ERROR',
+            message: error instanceof Error ? error.message : 'Unknown error',
+            details: process.env.NODE_ENV === 'development' ? error : undefined,
+        });
+        res.status(500).json(result);
+    }
+}
+/**
+ * Edge Function Handler: POST /agent/resolve
+ *
+ * Resolve constraint conflicts for a given context.
+ * Always enables trace mode for detailed conflict resolution.
+ * Requires execution context headers (enforced by middleware).
+ */
+async function handleResolve(req, res) {
+    const requestId = req.headers['x-request-id']?.toString() || (0, uuid_1.v4)();
+    const repoSpan = res.locals.repoSpan;
+    logger_1.default.info({ requestId, path: '/agent/resolve' }, 'Handling resolve request');
+    try {
+        // Validate request
+        const validation = validateRequest(req.body);
+        if (!validation.valid) {
+            const result = (0, executor_1.buildExecutionResult)(repoSpan, [], undefined, {
+                code: 'INVALID_REQUEST',
+                message: validation.error,
+            });
+            res.status(400).json(result);
+            return;
+        }
+        const body = req.body;
+        // Build input with trace enabled for resolution
+        const input = {
+            request_id: requestId,
+            context: body.context,
+            policy_ids: body.policy_ids,
+            dry_run: body.dry_run,
+            trace: true, // Always enable trace for resolve
+        };
+        // Execute agent with span tracking
+        const { data: decisionEvent, agentSpan } = await (0, executor_1.executeAgent)(repoSpan, agent_1.AGENT_ID, async () => {
+            const agent = await createAgentWithPolicies();
+            return agent.resolve(input);
+        }, extractDecisionArtifact);
+        const result = (0, executor_1.buildExecutionResult)(repoSpan, [agentSpan], decisionEvent);
+        res.status(200).json(result);
+    }
+    catch (error) {
+        logger_1.default.error({ requestId, error }, 'Resolve request failed');
+        const result = (0, executor_1.buildExecutionResult)(repoSpan, [], undefined, {
+            code: 'RESOLUTION_ERROR',
+            message: error instanceof Error ? error.message : 'Unknown error',
+            details: process.env.NODE_ENV === 'development' ? error : undefined,
+        });
+        res.status(500).json(result);
+    }
+}
+/**
+ * Edge Function Handler: POST /agent/route
+ *
+ * Route a decision to appropriate enforcement layers.
+ * Requires execution context headers (enforced by middleware).
+ */
+async function handleRoute(req, res) {
+    const requestId = req.headers['x-request-id']?.toString() || (0, uuid_1.v4)();
+    const repoSpan = res.locals.repoSpan;
+    logger_1.default.info({ requestId, path: '/agent/route' }, 'Handling route request');
+    try {
+        // Validate request
+        const validation = validateRequest(req.body);
+        if (!validation.valid) {
+            const result = (0, executor_1.buildExecutionResult)(repoSpan, [], undefined, {
+                code: 'INVALID_REQUEST',
+                message: validation.error,
+            });
+            res.status(400).json(result);
+            return;
+        }
+        const body = req.body;
+        // Build input
+        const input = {
+            request_id: requestId,
+            context: body.context,
+            policy_ids: body.policy_ids,
+            dry_run: body.dry_run,
+            trace: body.trace,
+        };
+        // Execute agent with span tracking
+        const { data: decisionEvent, agentSpan } = await (0, executor_1.executeAgent)(repoSpan, agent_1.AGENT_ID, async () => {
+            const agent = await createAgentWithPolicies();
+            return agent.route(input);
+        }, extractDecisionArtifact);
+        const result = (0, executor_1.buildExecutionResult)(repoSpan, [agentSpan], decisionEvent);
+        res.status(200).json(result);
+    }
+    catch (error) {
+        logger_1.default.error({ requestId, error }, 'Route request failed');
+        const result = (0, executor_1.buildExecutionResult)(repoSpan, [], undefined, {
+            code: 'ROUTING_ERROR',
+            message: error instanceof Error ? error.message : 'Unknown error',
+            details: process.env.NODE_ENV === 'development' ? error : undefined,
+        });
+        res.status(500).json(result);
+    }
+}
+/**
+ * Edge Function Handler: GET /agent/info
+ *
+ * Get agent registration information.
+ */
+async function handleInfo(_req, res) {
+    res.status(200).json({
+        success: true,
+        data: agent_1.PolicyEnforcementAgent.getRegistration(),
+    });
+}
+/**
+ * Edge Function Handler: GET /agent/health
+ *
+ * Health check endpoint.
+ */
+async function handleHealth(_req, res) {
+    res.status(200).json({
+        status: 'healthy',
+        agent_id: agent_1.AGENT_ID,
+        agent_version: agent_1.AGENT_VERSION,
+        timestamp: new Date().toISOString(),
+    });
+}
+//# sourceMappingURL=handler.js.map

package/dist/bundled-agents/policy-engine-agents/dist/agents/policy-enforcement/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../../src/agents/policy-enforcement/handler.ts"],"names":[],"mappings":";;;;;AAkFA,wCAoDC;AASD,sCAoDC;AAQD,kCAoDC;AAOD,gCAKC;AAOD,oCAOC;AAxQD,+BAAoC;AACpC,mCAIiB;AAEjB,yEAAqE;AACrE,uDAA8E;AAE9E,2DAAmC;AAYnC;;GAEG;AACH,SAAS,eAAe,CAAC,IAAa;IACpC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;IACvE,CAAC;IAED,MAAM,OAAO,GAAG,IAAuB,CAAC;IAExC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;IAC9E,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,uBAAuB;IACpC,MAAM,UAAU,GAAG,IAAI,oCAAgB,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,CAAC;IAC/C,OAAO,IAAI,8BAAsB,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,KAAoB;IACnD,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,QAAQ;QAClB,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,KAAK,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,cAAc,CAAC,GAAY,EAAE,GAAa;IAC9D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAA,SAAM,GAAE,CAAC;IACtE,MAAM,QAAQ,GAAkB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;IAEpD,gBAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,2BAA2B,CAAC,CAAC;IAEjF,IAAI,CAAC;QACH,mBAAmB;QACnB,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,IAAA,+BAAoB,EAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE;gBAC3D,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,UAAU,CAAC,KAAM;aAC3B,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAAuB,CAAC;QAEzC,cAAc;QACd,MAAM,KAAK,GAA2B;YACpC,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;QAEF,mCAAmC;QACnC,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,IAAA,uBAAY,EAC3D,QAAQ,EACR,gBAAQ,EACR,KAAK,IAAI,EAAE;YACT,MAAM,KAAK,GAAG,MAAM,uBAAuB,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,EACD,uBAAuB,CACxB,CAAC;QAEF,MAAM,MAAM,GAAG,IAAA,+BAAoB,EAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gBAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAG,IAAA,+BAAoB,EAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE;YAC3D,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;YACjE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;SACpE,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,aAAa,CAAC,GAAY,EAAE,GAAa;IAC7D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAA,SAAM,GAAE,CAAC;IACtE,MAAM,QAAQ,GAAkB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;IAEpD,gBAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,0BAA0B,CAAC,CAAC;IAE/E,IAAI,CAAC;QACH,mBAAmB;QACnB,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,IAAA,+BAAoB,EAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE;gBAC3D,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,UAAU,CAAC,KAAM;aAC3B,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAAuB,CAAC;QAEzC,gDAAgD;QAChD,MAAM,KAAK,GAA2B;YACpC,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,EAAE,kCAAkC;SAChD,CAAC;QAEF,mCAAmC;QACnC,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,IAAA,uBAAY,EAC3D,QAAQ,EACR,gBAAQ,EACR,KAAK,IAAI,EAAE;YACT,MAAM,KAAK,GAAG,MAAM,uBAAuB,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC,EACD,uBAAuB,CACxB,CAAC;QAEF,MAAM,MAAM,GAAG,IAAA,+BAAoB,EAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gBAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAG,IAAA,+BAAoB,EAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE;YAC3D,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;YACjE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;SACpE,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,WAAW,CAAC,GAAY,EAAE,GAAa;IAC3D,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAA,SAAM,GAAE,CAAC;IACtE,MAAM,QAAQ,GAAkB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;IAEpD,gBAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAE3E,IAAI,CAAC;QACH,mBAAmB;QACnB,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,IAAA,+BAAoB,EAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE;gBAC3D,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,UAAU,CAAC,KAAM;aAC3B,CAAC,CAAC;YACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAAuB,CAAC;QAEzC,cAAc;QACd,MAAM,KAAK,GAA2B;YACpC,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;QAEF,mCAAmC;QACnC,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,IAAA,uBAAY,EAC3D,QAAQ,EACR,gBAAQ,EACR,KAAK,IAAI,EAAE;YACT,MAAM,KAAK,GAAG,MAAM,uBAAuB,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC,EACD,uBAAuB,CACxB,CAAC;QAEF,MAAM,MAAM,GAAG,IAAA,+BAAoB,EAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gBAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAE3D,MAAM,MAAM,GAAG,IAAA,+BAAoB,EAAC,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE;YAC3D,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;YACjE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;SACpE,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,UAAU,CAAC,IAAa,EAAE,GAAa;IAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,8BAAsB,CAAC,eAAe,EAAE;KAC/C,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,YAAY,CAAC,IAAa,EAAE,GAAa;IAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,gBAAQ;QAClB,aAAa,EAAE,qBAAa;QAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC"}

package/dist/bundled-agents/policy-engine-agents/dist/agents/policy-enforcement/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Policy Enforcement Agent
+ *
+ * Exports the Policy Enforcement Agent for policy evaluation.
+ */
+export * from './agent';
+export * from './handler';
+//# sourceMappingURL=index.d.ts.map

package/dist/bundled-agents/policy-engine-agents/dist/agents/policy-enforcement/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/agents/policy-enforcement/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC"}

package/dist/bundled-agents/policy-engine-agents/dist/agents/policy-enforcement/index.js

@@ -0,0 +1,24 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Policy Enforcement Agent
+ *
+ * Exports the Policy Enforcement Agent for policy evaluation.
+ */
+__exportStar(require("./agent"), exports);
+__exportStar(require("./handler"), exports);
+//# sourceMappingURL=index.js.map

package/dist/bundled-agents/policy-engine-agents/dist/agents/policy-enforcement/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/agents/policy-enforcement/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA;;;;GAIG;AACH,0CAAwB;AACxB,4CAA0B"}

package/dist/bundled-agents/policy-engine-agents/dist/api/middleware/auth.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Authentication Middleware
+ * JWT-based authentication for API endpoints
+ */
+import { Request, Response, NextFunction } from 'express';
+export interface AuthUser {
+    id: string;
+    email: string;
+    roles: string[];
+    permissions: string[];
+}
+export interface AuthRequest extends Request {
+    user?: AuthUser;
+}
+/**
+ * JWT authentication middleware
+ */
+export declare const authenticate: (req: AuthRequest, res: Response, next: NextFunction) => Promise<void>;
+/**
+ * Optional authentication - don't fail if no auth provided
+ */
+export declare const optionalAuth: (req: AuthRequest, _res: Response, next: NextFunction) => Promise<void>;
+/**
+ * Role-based authorization middleware
+ */
+export declare const authorize: (...allowedRoles: string[]) => (req: AuthRequest, res: Response, next: NextFunction) => void;
+/**
+ * Permission-based authorization middleware
+ */
+export declare const requirePermission: (...requiredPermissions: string[]) => (req: AuthRequest, res: Response, next: NextFunction) => void;
+/**
+ * Generate JWT token
+ */
+export declare const generateToken: (user: AuthUser) => string;
+/**
+ * Verify JWT token
+ */
+export declare const verifyToken: (token: string) => AuthUser | null;
+//# sourceMappingURL=auth.d.ts.map

package/dist/bundled-agents/policy-engine-agents/dist/api/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/api/middleware/auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAO1D,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,WAAY,SAAQ,OAAO;IAC1C,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED;;GAEG;AACH,eAAO,MAAM,YAAY,GACvB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,MAAM,YAAY,KACjB,OAAO,CAAC,IAAI,CAuEd,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,GACvB,KAAK,WAAW,EAChB,MAAM,QAAQ,EACd,MAAM,YAAY,KACjB,OAAO,CAAC,IAAI,CA0Bd,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,SAAS,GAAI,GAAG,cAAc,MAAM,EAAE,MACzC,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IA0B/D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,iBAAiB,GAAI,GAAG,qBAAqB,MAAM,EAAE,MACxD,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IAgC/D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,aAAa,GAAI,MAAM,QAAQ,KAAG,MAa9C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,WAAW,GAAI,OAAO,MAAM,KAAG,QAAQ,GAAG,IAatD,CAAC"}

package/dist/bundled-agents/policy-engine-agents/dist/api/middleware/auth.js

@@ -0,0 +1,194 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyToken = exports.generateToken = exports.requirePermission = exports.authorize = exports.optionalAuth = exports.authenticate = void 0;
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const config_1 = require("@utils/config");
+const errors_1 = require("@utils/errors");
+const logger_1 = __importDefault(require("@utils/logger"));
+const api_key_repository_1 = require("@db/models/api-key-repository");
+/**
+ * JWT authentication middleware
+ */
+const authenticate = async (req, res, next) => {
+    try {
+        const authHeader = req.headers.authorization;
+        const apiKey = req.headers[(config_1.config.security.apiKeyHeader || 'X-API-Key').toLowerCase()];
+        // Check for Bearer token
+        if (authHeader && authHeader.startsWith('Bearer ')) {
+            const token = authHeader.substring(7);
+            try {
+                const decoded = jsonwebtoken_1.default.verify(token, config_1.config.security.jwtSecret);
+                req.user = {
+                    id: decoded.sub || decoded.id,
+                    email: decoded.email,
+                    roles: decoded.roles || [],
+                    permissions: decoded.permissions || [],
+                };
+                logger_1.default.debug({ userId: req.user.id }, 'User authenticated via JWT');
+                next();
+                return;
+            }
+            catch (error) {
+                throw new errors_1.AuthenticationError('Invalid or expired token');
+            }
+        }
+        // Check for API key
+        if (apiKey) {
+            // Validate API key against database with bcrypt
+            const validatedKey = await api_key_repository_1.apiKeyRepository.validateApiKey(apiKey);
+            if (!validatedKey) {
+                throw new errors_1.AuthenticationError('Invalid or expired API key');
+            }
+            // Set user context from API key permissions
+            req.user = {
+                id: validatedKey.id,
+                email: `apikey-${validatedKey.key_prefix}@llm-policy-engine.com`,
+                roles: ['api-user'],
+                permissions: validatedKey.permissions,
+            };
+            logger_1.default.debug({
+                keyId: validatedKey.id,
+                keyPrefix: validatedKey.key_prefix,
+                permissions: validatedKey.permissions,
+            }, 'User authenticated via API key');
+            next();
+            return;
+        }
+        throw new errors_1.AuthenticationError('No authentication credentials provided');
+    }
+    catch (error) {
+        if (error instanceof errors_1.AuthenticationError) {
+            res.status(401).json({
+                error: 'Authentication failed',
+                message: error.message,
+            });
+        }
+        else {
+            logger_1.default.error({ error }, 'Authentication error');
+            res.status(401).json({
+                error: 'Authentication failed',
+                message: 'Invalid credentials',
+            });
+        }
+    }
+};
+exports.authenticate = authenticate;
+/**
+ * Optional authentication - don't fail if no auth provided
+ */
+const optionalAuth = async (req, _res, next) => {
+    try {
+        const authHeader = req.headers.authorization;
+        if (authHeader && authHeader.startsWith('Bearer ')) {
+            const token = authHeader.substring(7);
+            try {
+                const decoded = jsonwebtoken_1.default.verify(token, config_1.config.security.jwtSecret);
+                req.user = {
+                    id: decoded.sub || decoded.id,
+                    email: decoded.email,
+                    roles: decoded.roles || [],
+                    permissions: decoded.permissions || [],
+                };
+            }
+            catch (error) {
+                logger_1.default.debug('Optional auth: Invalid token, continuing without auth');
+            }
+        }
+        next();
+    }
+    catch (error) {
+        logger_1.default.error({ error }, 'Optional auth error');
+        next();
+    }
+};
+exports.optionalAuth = optionalAuth;
+/**
+ * Role-based authorization middleware
+ */
+const authorize = (...allowedRoles) => {
+    return (req, res, next) => {
+        if (!req.user) {
+            res.status(401).json({
+                error: 'Authentication required',
+                message: 'You must be authenticated to access this resource',
+            });
+            return;
+        }
+        const hasRole = req.user.roles.some((role) => allowedRoles.includes(role));
+        if (!hasRole) {
+            logger_1.default.warn({ userId: req.user.id, requiredRoles: allowedRoles, userRoles: req.user.roles }, 'Authorization failed: insufficient roles');
+            res.status(403).json({
+                error: 'Forbidden',
+                message: 'You do not have permission to access this resource',
+            });
+            return;
+        }
+        next();
+    };
+};
+exports.authorize = authorize;
+/**
+ * Permission-based authorization middleware
+ */
+const requirePermission = (...requiredPermissions) => {
+    return (req, res, next) => {
+        if (!req.user) {
+            res.status(401).json({
+                error: 'Authentication required',
+                message: 'You must be authenticated to access this resource',
+            });
+            return;
+        }
+        const hasPermission = requiredPermissions.every((permission) => req.user.permissions.includes(permission));
+        if (!hasPermission) {
+            logger_1.default.warn({
+                userId: req.user.id,
+                requiredPermissions,
+                userPermissions: req.user.permissions,
+            }, 'Authorization failed: insufficient permissions');
+            res.status(403).json({
+                error: 'Forbidden',
+                message: 'You do not have permission to perform this action',
+            });
+            return;
+        }
+        next();
+    };
+};
+exports.requirePermission = requirePermission;
+/**
+ * Generate JWT token
+ */
+const generateToken = (user) => {
+    return jsonwebtoken_1.default.sign({
+        sub: user.id,
+        email: user.email,
+        roles: user.roles,
+        permissions: user.permissions,
+    }, config_1.config.security.jwtSecret, {
+        expiresIn: config_1.config.security.jwtExpiresIn,
+    });
+};
+exports.generateToken = generateToken;
+/**
+ * Verify JWT token
+ */
+const verifyToken = (token) => {
+    try {
+        const decoded = jsonwebtoken_1.default.verify(token, config_1.config.security.jwtSecret);
+        return {
+            id: decoded.sub || decoded.id,
+            email: decoded.email,
+            roles: decoded.roles || [],
+            permissions: decoded.permissions || [],
+        };
+    }
+    catch (error) {
+        return null;
+    }
+};
+exports.verifyToken = verifyToken;
+//# sourceMappingURL=auth.js.map

package/dist/bundled-agents/policy-engine-agents/dist/api/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/api/middleware/auth.ts"],"names":[],"mappings":";;;;;;AAKA,gEAA+B;AAC/B,0CAAuC;AACvC,0CAAoD;AACpD,2DAAmC;AACnC,sEAAiE;AAajE;;GAEG;AACI,MAAM,YAAY,GAAG,KAAK,EAC/B,GAAgB,EAChB,GAAa,EACb,IAAkB,EACH,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,eAAM,CAAC,QAAQ,CAAC,YAAY,IAAI,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAExF,yBAAyB;QACzB,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAEtC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,eAAM,CAAC,QAAQ,CAAC,SAAS,CAAQ,CAAC;gBAEpE,GAAG,CAAC,IAAI,GAAG;oBACT,EAAE,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE;oBAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;oBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;iBACvC,CAAC;gBAEF,gBAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,4BAA4B,CAAC,CAAC;gBACpE,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,4BAAmB,CAAC,0BAA0B,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,IAAI,MAAM,EAAE,CAAC;YACX,gDAAgD;YAChD,MAAM,YAAY,GAAG,MAAM,qCAAgB,CAAC,cAAc,CAAC,MAAgB,CAAC,CAAC;YAE7E,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,CAAC,CAAC;YAC9D,CAAC;YAED,4CAA4C;YAC5C,GAAG,CAAC,IAAI,GAAG;gBACT,EAAE,EAAE,YAAY,CAAC,EAAE;gBACnB,KAAK,EAAE,UAAU,YAAY,CAAC,UAAU,wBAAwB;gBAChE,KAAK,EAAE,CAAC,UAAU,CAAC;gBACnB,WAAW,EAAE,YAAY,CAAC,WAAW;aACtC,CAAC;YAEF,gBAAM,CAAC,KAAK,CACV;gBACE,KAAK,EAAE,YAAY,CAAC,EAAE;gBACtB,SAAS,EAAE,YAAY,CAAC,UAAU;gBAClC,WAAW,EAAE,YAAY,CAAC,WAAW;aACtC,EACD,gCAAgC,CACjC,CAAC;YACF,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,IAAI,4BAAmB,CAAC,wCAAwC,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,4BAAmB,EAAE,CAAC;YACzC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,uBAAuB;gBAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,gBAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,sBAAsB,CAAC,CAAC;YAChD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,uBAAuB;gBAC9B,OAAO,EAAE,qBAAqB;aAC/B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AA3EW,QAAA,YAAY,gBA2EvB;AAEF;;GAEG;AACI,MAAM,YAAY,GAAG,KAAK,EAC/B,GAAgB,EAChB,IAAc,EACd,IAAkB,EACH,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;QAE7C,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAEtC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,eAAM,CAAC,QAAQ,CAAC,SAAS,CAAQ,CAAC;gBAEpE,GAAG,CAAC,IAAI,GAAG;oBACT,EAAE,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE;oBAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;oBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;iBACvC,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,gBAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,qBAAqB,CAAC,CAAC;QAC/C,IAAI,EAAE,CAAC;IACT,CAAC;AACH,CAAC,CAAC;AA9BW,QAAA,YAAY,gBA8BvB;AAEF;;GAEG;AACI,MAAM,SAAS,GAAG,CAAC,GAAG,YAAsB,EAAE,EAAE;IACrD,OAAO,CAAC,GAAgB,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QACnE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,yBAAyB;gBAChC,OAAO,EAAE,mDAAmD;aAC7D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAE3E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,gBAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,EAC/E,0CAA0C,CAC3C,CAAC;YAEF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,oDAAoD;aAC9D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC,CAAC;AA3BW,QAAA,SAAS,aA2BpB;AAEF;;GAEG;AACI,MAAM,iBAAiB,GAAG,CAAC,GAAG,mBAA6B,EAAE,EAAE;IACpE,OAAO,CAAC,GAAgB,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QACnE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,yBAAyB;gBAChC,OAAO,EAAE,mDAAmD;aAC7D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAC7D,GAAG,CAAC,IAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAC3C,CAAC;QAEF,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,gBAAM,CAAC,IAAI,CACT;gBACE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;gBACnB,mBAAmB;gBACnB,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW;aACtC,EACD,gDAAgD,CACjD,CAAC;YAEF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,mDAAmD;aAC7D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC,CAAC;AAjCW,QAAA,iBAAiB,qBAiC5B;AAEF;;GAEG;AACI,MAAM,aAAa,GAAG,CAAC,IAAc,EAAU,EAAE;IACtD,OAAO,sBAAG,CAAC,IAAI,CACb;QACE,GAAG,EAAE,IAAI,CAAC,EAAE;QACZ,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,EACD,eAAM,CAAC,QAAQ,CAAC,SAAS,EACzB;QACE,SAAS,EAAE,eAAM,CAAC,QAAQ,CAAC,YAAY;KACrB,CACrB,CAAC;AACJ,CAAC,CAAC;AAbW,QAAA,aAAa,iBAaxB;AAEF;;GAEG;AACI,MAAM,WAAW,GAAG,CAAC,KAAa,EAAmB,EAAE;IAC5D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,eAAM,CAAC,QAAQ,CAAC,SAAS,CAAQ,CAAC;QAEpE,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE;YAC7B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE;SACvC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAbW,QAAA,WAAW,eAatB"}

package/dist/bundled-agents/policy-engine-agents/dist/api/middleware/error-handler.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Error Handling Middleware
+ * Centralized error handling for Express
+ */
+import { Request, Response, NextFunction } from 'express';
+/**
+ * Global error handler
+ */
+export declare const errorHandler: (error: Error, req: Request, res: Response, _next: NextFunction) => void;
+/**
+ * 404 Not Found handler
+ */
+export declare const notFoundHandler: (req: Request, res: Response) => void;
+/**
+ * Async handler wrapper to catch async errors
+ */
+export declare const asyncHandler: (fn: (req: Request, res: Response, next: NextFunction) => Promise<any>) => (req: Request, res: Response, next: NextFunction) => void;
+/**
+ * Request timeout handler
+ */
+export declare const timeoutHandler: (timeoutMs?: number) => (req: Request, res: Response, next: NextFunction) => void;
+//# sourceMappingURL=error-handler.d.ts.map

package/dist/bundled-agents/policy-engine-agents/dist/api/middleware/error-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.d.ts","sourceRoot":"","sources":["../../../src/api/middleware/error-handler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAI1D;;GAEG;AACH,eAAO,MAAM,YAAY,GACvB,OAAO,KAAK,EACZ,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,OAAO,YAAY,KAClB,IAsEF,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe,GAAI,KAAK,OAAO,EAAE,KAAK,QAAQ,KAAG,IAc7D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY,GACvB,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,GAAG,CAAC,MAE7D,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IAG3D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,cAAc,GAAI,YAAW,MAAc,MAC9C,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IAyB3D,CAAC"}

package/dist/bundled-agents/policy-engine-agents/dist/api/middleware/error-handler.js

@@ -0,0 +1,124 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.timeoutHandler = exports.asyncHandler = exports.notFoundHandler = exports.errorHandler = void 0;
+const errors_1 = require("@utils/errors");
+const logger_1 = __importDefault(require("@utils/logger"));
+/**
+ * Global error handler
+ */
+const errorHandler = (error, req, res, _next) => {
+    // Log error
+    logger_1.default.error({
+        error: {
+            name: error.name,
+            message: error.message,
+            stack: error.stack,
+        },
+        request: {
+            method: req.method,
+            path: req.path,
+            query: req.query,
+            body: req.body,
+            ip: req.ip,
+        },
+    }, 'Request error');
+    // Handle PolicyEngineError
+    if (error instanceof errors_1.PolicyEngineError) {
+        res.status(error.statusCode).json({
+            error: error.code,
+            message: error.message,
+            details: error.details,
+        });
+        return;
+    }
+    // Handle validation errors
+    if (error.name === 'ValidationError') {
+        res.status(400).json({
+            error: 'VALIDATION_ERROR',
+            message: error.message,
+        });
+        return;
+    }
+    // Handle JWT errors
+    if (error.name === 'JsonWebTokenError') {
+        res.status(401).json({
+            error: 'INVALID_TOKEN',
+            message: 'Invalid authentication token',
+        });
+        return;
+    }
+    if (error.name === 'TokenExpiredError') {
+        res.status(401).json({
+            error: 'TOKEN_EXPIRED',
+            message: 'Authentication token has expired',
+        });
+        return;
+    }
+    // Handle syntax errors (invalid JSON)
+    if (error instanceof SyntaxError && 'body' in error) {
+        res.status(400).json({
+            error: 'INVALID_JSON',
+            message: 'Invalid JSON in request body',
+        });
+        return;
+    }
+    // Default to 500 Internal Server Error
+    res.status(500).json({
+        error: 'INTERNAL_SERVER_ERROR',
+        message: 'An unexpected error occurred',
+    });
+};
+exports.errorHandler = errorHandler;
+/**
+ * 404 Not Found handler
+ */
+const notFoundHandler = (req, res) => {
+    logger_1.default.debug({
+        method: req.method,
+        path: req.path,
+        ip: req.ip,
+    }, 'Route not found');
+    res.status(404).json({
+        error: 'NOT_FOUND',
+        message: `Route ${req.method} ${req.path} not found`,
+    });
+};
+exports.notFoundHandler = notFoundHandler;
+/**
+ * Async handler wrapper to catch async errors
+ */
+const asyncHandler = (fn) => {
+    return (req, res, next) => {
+        Promise.resolve(fn(req, res, next)).catch(next);
+    };
+};
+exports.asyncHandler = asyncHandler;
+/**
+ * Request timeout handler
+ */
+const timeoutHandler = (timeoutMs = 30000) => {
+    return (req, res, next) => {
+        const timeout = setTimeout(() => {
+            logger_1.default.warn({
+                method: req.method,
+                path: req.path,
+                timeout: timeoutMs,
+            }, 'Request timeout');
+            if (!res.headersSent) {
+                res.status(408).json({
+                    error: 'REQUEST_TIMEOUT',
+                    message: 'Request timed out',
+                });
+            }
+        }, timeoutMs);
+        res.on('finish', () => {
+            clearTimeout(timeout);
+        });
+        next();
+    };
+};
+exports.timeoutHandler = timeoutHandler;
+//# sourceMappingURL=error-handler.js.map