@namzu/sdk 0.1.3 → 0.1.4-rc.2

package/dist/types/verification/index.d.ts

@@ -0,0 +1,219 @@
+import { z } from 'zod';
+export type GateDecision = 'allow' | 'deny' | 'review';
+export interface GateEvaluationResult {
+    readonly decision: GateDecision;
+    readonly matchedRule: VerificationRule | null;
+    readonly reason: string;
+}
+export type VerificationRule = {
+    type: 'allow_read_only';
+} | {
+    type: 'deny_dangerous_patterns';
+} | {
+    type: 'allow_by_category';
+    categories: string[];
+} | {
+    type: 'allow_by_name';
+    toolNames: string[];
+} | {
+    type: 'deny_by_name';
+    toolNames: string[];
+} | {
+    type: 'custom_pattern';
+    pattern: string;
+    target: 'name' | 'args' | 'both';
+    decision: 'allow' | 'deny';
+} | {
+    type: 'allow_by_tier';
+    tiers: string[];
+};
+export declare const VerificationRuleSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    type: z.ZodLiteral<"allow_read_only">;
+}, "strip", z.ZodTypeAny, {
+    type: "allow_read_only";
+}, {
+    type: "allow_read_only";
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"deny_dangerous_patterns">;
+}, "strip", z.ZodTypeAny, {
+    type: "deny_dangerous_patterns";
+}, {
+    type: "deny_dangerous_patterns";
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"allow_by_category">;
+    categories: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    categories: string[];
+    type: "allow_by_category";
+}, {
+    categories: string[];
+    type: "allow_by_category";
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"allow_by_name">;
+    toolNames: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    type: "allow_by_name";
+    toolNames: string[];
+}, {
+    type: "allow_by_name";
+    toolNames: string[];
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"deny_by_name">;
+    toolNames: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    type: "deny_by_name";
+    toolNames: string[];
+}, {
+    type: "deny_by_name";
+    toolNames: string[];
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"custom_pattern">;
+    pattern: z.ZodString;
+    target: z.ZodEnum<["name", "args", "both"]>;
+    decision: z.ZodEnum<["allow", "deny"]>;
+}, "strip", z.ZodTypeAny, {
+    type: "custom_pattern";
+    decision: "allow" | "deny";
+    target: "name" | "args" | "both";
+    pattern: string;
+}, {
+    type: "custom_pattern";
+    decision: "allow" | "deny";
+    target: "name" | "args" | "both";
+    pattern: string;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"allow_by_tier">;
+    tiers: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    type: "allow_by_tier";
+    tiers: string[];
+}, {
+    type: "allow_by_tier";
+    tiers: string[];
+}>]>;
+export declare const VerificationGateConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    rules: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+        type: z.ZodLiteral<"allow_read_only">;
+    }, "strip", z.ZodTypeAny, {
+        type: "allow_read_only";
+    }, {
+        type: "allow_read_only";
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"deny_dangerous_patterns">;
+    }, "strip", z.ZodTypeAny, {
+        type: "deny_dangerous_patterns";
+    }, {
+        type: "deny_dangerous_patterns";
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"allow_by_category">;
+        categories: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        categories: string[];
+        type: "allow_by_category";
+    }, {
+        categories: string[];
+        type: "allow_by_category";
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"allow_by_name">;
+        toolNames: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        type: "allow_by_name";
+        toolNames: string[];
+    }, {
+        type: "allow_by_name";
+        toolNames: string[];
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"deny_by_name">;
+        toolNames: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        type: "deny_by_name";
+        toolNames: string[];
+    }, {
+        type: "deny_by_name";
+        toolNames: string[];
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"custom_pattern">;
+        pattern: z.ZodString;
+        target: z.ZodEnum<["name", "args", "both"]>;
+        decision: z.ZodEnum<["allow", "deny"]>;
+    }, "strip", z.ZodTypeAny, {
+        type: "custom_pattern";
+        decision: "allow" | "deny";
+        target: "name" | "args" | "both";
+        pattern: string;
+    }, {
+        type: "custom_pattern";
+        decision: "allow" | "deny";
+        target: "name" | "args" | "both";
+        pattern: string;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"allow_by_tier">;
+        tiers: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        type: "allow_by_tier";
+        tiers: string[];
+    }, {
+        type: "allow_by_tier";
+        tiers: string[];
+    }>]>, "many">>;
+    allowReadOnlyTools: z.ZodDefault<z.ZodBoolean>;
+    denyDangerousPatterns: z.ZodDefault<z.ZodBoolean>;
+    logDecisions: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    rules: ({
+        type: "allow_read_only";
+    } | {
+        type: "deny_dangerous_patterns";
+    } | {
+        categories: string[];
+        type: "allow_by_category";
+    } | {
+        type: "allow_by_name";
+        toolNames: string[];
+    } | {
+        type: "deny_by_name";
+        toolNames: string[];
+    } | {
+        type: "custom_pattern";
+        decision: "allow" | "deny";
+        target: "name" | "args" | "both";
+        pattern: string;
+    } | {
+        type: "allow_by_tier";
+        tiers: string[];
+    })[];
+    allowReadOnlyTools: boolean;
+    denyDangerousPatterns: boolean;
+    logDecisions: boolean;
+}, {
+    enabled?: boolean | undefined;
+    rules?: ({
+        type: "allow_read_only";
+    } | {
+        type: "deny_dangerous_patterns";
+    } | {
+        categories: string[];
+        type: "allow_by_category";
+    } | {
+        type: "allow_by_name";
+        toolNames: string[];
+    } | {
+        type: "deny_by_name";
+        toolNames: string[];
+    } | {
+        type: "custom_pattern";
+        decision: "allow" | "deny";
+        target: "name" | "args" | "both";
+        pattern: string;
+    } | {
+        type: "allow_by_tier";
+        tiers: string[];
+    })[] | undefined;
+    allowReadOnlyTools?: boolean | undefined;
+    denyDangerousPatterns?: boolean | undefined;
+    logDecisions?: boolean | undefined;
+}>;
+export type VerificationGateConfig = z.infer<typeof VerificationGateConfigSchema>;
+//# sourceMappingURL=index.d.ts.map

package/dist/types/verification/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/verification/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAA;AAEtD,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;IAC/B,QAAQ,CAAC,WAAW,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,MAAM,gBAAgB,GACzB;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,GAC3B;IAAE,IAAI,EAAE,yBAAyB,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GAC7C;IACA,IAAI,EAAE,gBAAgB,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAA;IAChC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAA;CACzB,GACD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AA2B7C,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAQjC,CAAA;AAEF,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMvC,CAAA;AAEF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAA"}

package/dist/types/verification/index.js

@@ -0,0 +1,43 @@
+import { z } from 'zod';
+import { MAX_CUSTOM_PATTERN_LENGTH } from '../../constants/verification/index.js';
+const AllowReadOnlySchema = z.object({ type: z.literal('allow_read_only') });
+const DenyDangerousPatternsSchema = z.object({ type: z.literal('deny_dangerous_patterns') });
+const AllowByCategorySchema = z.object({
+    type: z.literal('allow_by_category'),
+    categories: z.array(z.string()),
+});
+const AllowByNameSchema = z.object({
+    type: z.literal('allow_by_name'),
+    toolNames: z.array(z.string()),
+});
+const DenyByNameSchema = z.object({
+    type: z.literal('deny_by_name'),
+    toolNames: z.array(z.string()),
+});
+const CustomPatternSchema = z.object({
+    type: z.literal('custom_pattern'),
+    pattern: z.string().max(MAX_CUSTOM_PATTERN_LENGTH),
+    target: z.enum(['name', 'args', 'both']),
+    decision: z.enum(['allow', 'deny']),
+});
+const AllowByTierSchema = z.object({
+    type: z.literal('allow_by_tier'),
+    tiers: z.array(z.string()),
+});
+export const VerificationRuleSchema = z.discriminatedUnion('type', [
+    AllowReadOnlySchema,
+    DenyDangerousPatternsSchema,
+    AllowByCategorySchema,
+    AllowByNameSchema,
+    DenyByNameSchema,
+    CustomPatternSchema,
+    AllowByTierSchema,
+]);
+export const VerificationGateConfigSchema = z.object({
+    enabled: z.boolean().default(false),
+    rules: z.array(VerificationRuleSchema).default([]),
+    allowReadOnlyTools: z.boolean().default(false),
+    denyDangerousPatterns: z.boolean().default(false),
+    logDecisions: z.boolean().default(true),
+});
+//# sourceMappingURL=index.js.map

package/dist/types/verification/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/verification/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAA;AAwBjF,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA;AAC5E,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAA;AAC5F,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC/B,CAAC,CAAA;AACF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC9B,CAAC,CAAA;AACF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC9B,CAAC,CAAA;AACF,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;CACnC,CAAC,CAAA;AACF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC1B,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAClE,mBAAmB;IACnB,2BAA2B;IAC3B,qBAAqB;IACrB,iBAAiB;IACjB,gBAAgB;IAChB,mBAAmB;IACnB,iBAAiB;CACjB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClD,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9C,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACjD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACvC,CAAC,CAAA"}

package/dist/utils/id.d.ts

@@ -1,4 +1,4 @@
-import type { ActivityId, CheckpointId, ChunkId, ConnectorId, ConnectorInstanceId, CredentialId, DocumentId, EnvironmentId, ExecutionContextId, KnowledgeBaseId, MCPClientId, MCPServerId, MCPSessionId, MessageId, PlanId, RunId, SessionId, TaskId, TenantId, ThreadId, ToolCallId } from '../types/ids/index.js';
+import type { ActivityId, AdvisoryCallId, AdvisoryId, CheckpointId, ChunkId, ConnectorId, ConnectorInstanceId, CredentialId, DocumentId, EmergencySaveId, EnvironmentId, ExecutionContextId, KnowledgeBaseId, MCPClientId, MCPServerId, MCPSessionId, MemoryId, MessageId, PlanId, PluginId, RunId, SessionId, TaskId, TenantId, ThreadId, ToolCallId } from '../types/ids/index.js';
 export declare function generateThreadId(): ThreadId;
 export declare function generateRunId(): RunId;
 export declare function generateMessageId(): MessageId;
@@ -20,7 +20,13 @@ export declare function generateMCPClientId(): MCPClientId;
 export declare function generateMCPSessionId(): MCPSessionId;
 export declare function generateEnvironmentId(): EnvironmentId;
 export declare function generateCheckpointId(): CheckpointId;
+export declare function generateAdvisoryId(): AdvisoryId;
+export declare function generateAdvisoryCallId(): AdvisoryCallId;
+export declare function generateEmergencySaveId(): EmergencySaveId;
+export declare function generateMemoryId(): MemoryId;
+export declare function generatePluginId(): PluginId;
 export declare function parseThreadId(raw: string): ThreadId;
 export declare function parseRunId(raw: string): RunId;
 export declare function parseConnectorInstanceId(raw: string): ConnectorInstanceId;
+export declare function parsePluginId(raw: string): PluginId;
 //# sourceMappingURL=id.d.ts.map

package/dist/utils/id.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"id.d.ts","sourceRoot":"","sources":["../../src/utils/id.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACX,UAAU,EACV,YAAY,EACZ,OAAO,EACP,WAAW,EACX,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,WAAW,EACX,YAAY,EACZ,SAAS,EACT,MAAM,EACN,KAAK,EACL,SAAS,EACT,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,MAAM,uBAAuB,CAAA;AAsB9B,wBAAgB,gBAAgB,IAAI,QAAQ,CAE3C;AAED,wBAAgB,aAAa,IAAI,KAAK,CAErC;AAED,wBAAgB,iBAAiB,IAAI,SAAS,CAE7C;AAED,wBAAgB,iBAAiB,IAAI,SAAS,CAE7C;AAED,wBAAgB,kBAAkB,IAAI,UAAU,CAE/C;AAED,wBAAgB,kBAAkB,IAAI,UAAU,CAE/C;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,uBAAuB,IAAI,eAAe,CAEzD;AAED,wBAAgB,kBAAkB,IAAI,UAAU,CAE/C;AAED,wBAAgB,eAAe,IAAI,OAAO,CAEzC;AAED,wBAAgB,mBAAmB,IAAI,WAAW,CAEjD;AAED,wBAAgB,2BAA2B,IAAI,mBAAmB,CAEjE;AAED,wBAAgB,gBAAgB,IAAI,QAAQ,CAE3C;AAED,wBAAgB,oBAAoB,IAAI,YAAY,CAEnD;AAED,wBAAgB,0BAA0B,IAAI,kBAAkB,CAE/D;AAED,wBAAgB,mBAAmB,IAAI,WAAW,CAEjD;AAED,wBAAgB,mBAAmB,IAAI,WAAW,CAEjD;AAED,wBAAgB,oBAAoB,IAAI,YAAY,CAEnD;AAED,wBAAgB,qBAAqB,IAAI,aAAa,CAErD;AAED,wBAAgB,oBAAoB,IAAI,YAAY,CAEnD;AASD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,CAEnD;AACD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,CAE7C;AACD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,CAEzE"}
+{"version":3,"file":"id.d.ts","sourceRoot":"","sources":["../../src/utils/id.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACX,UAAU,EACV,cAAc,EACd,UAAU,EACV,YAAY,EACZ,OAAO,EACP,WAAW,EACX,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,SAAS,EACT,MAAM,EACN,QAAQ,EACR,KAAK,EACL,SAAS,EACT,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,MAAM,uBAAuB,CAAA;AAsB9B,wBAAgB,gBAAgB,IAAI,QAAQ,CAE3C;AAED,wBAAgB,aAAa,IAAI,KAAK,CAErC;AAED,wBAAgB,iBAAiB,IAAI,SAAS,CAE7C;AAED,wBAAgB,iBAAiB,IAAI,SAAS,CAE7C;AAED,wBAAgB,kBAAkB,IAAI,UAAU,CAE/C;AAED,wBAAgB,kBAAkB,IAAI,UAAU,CAE/C;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,uBAAuB,IAAI,eAAe,CAEzD;AAED,wBAAgB,kBAAkB,IAAI,UAAU,CAE/C;AAED,wBAAgB,eAAe,IAAI,OAAO,CAEzC;AAED,wBAAgB,mBAAmB,IAAI,WAAW,CAEjD;AAED,wBAAgB,2BAA2B,IAAI,mBAAmB,CAEjE;AAED,wBAAgB,gBAAgB,IAAI,QAAQ,CAE3C;AAED,wBAAgB,oBAAoB,IAAI,YAAY,CAEnD;AAED,wBAAgB,0BAA0B,IAAI,kBAAkB,CAE/D;AAED,wBAAgB,mBAAmB,IAAI,WAAW,CAEjD;AAED,wBAAgB,mBAAmB,IAAI,WAAW,CAEjD;AAED,wBAAgB,oBAAoB,IAAI,YAAY,CAEnD;AAED,wBAAgB,qBAAqB,IAAI,aAAa,CAErD;AAED,wBAAgB,oBAAoB,IAAI,YAAY,CAEnD;AAED,wBAAgB,kBAAkB,IAAI,UAAU,CAE/C;AAED,wBAAgB,sBAAsB,IAAI,cAAc,CAEvD;AAED,wBAAgB,uBAAuB,IAAI,eAAe,CAEzD;AAED,wBAAgB,gBAAgB,IAAI,QAAQ,CAE3C;AAED,wBAAgB,gBAAgB,IAAI,QAAQ,CAE3C;AASD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,CAEnD;AACD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,CAE7C;AACD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,CAEzE;AACD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,CAEnD"}

package/dist/utils/id.js

@@ -81,6 +81,21 @@ export function generateEnvironmentId() {
 export function generateCheckpointId() {
     return generateId('cp_');
 }
+export function generateAdvisoryId() {
+    return generateId('adv_');
+}
+export function generateAdvisoryCallId() {
+    return generateId('advc_');
+}
+export function generateEmergencySaveId() {
+    return generateId('esave_');
+}
+export function generateMemoryId() {
+    return generateId('mem_');
+}
+export function generatePluginId() {
+    return generateId('plg_');
+}
 function parseId(raw, prefix, typeName) {
     if (!raw.startsWith(prefix)) {
         throw new Error(`Invalid ${typeName}: expected "${prefix}" prefix, got "${raw}"`);
@@ -96,4 +111,7 @@ export function parseRunId(raw) {
 export function parseConnectorInstanceId(raw) {
     return parseId(raw, 'ci_', 'ConnectorInstanceId');
 }
+export function parsePluginId(raw) {
+    return parseId(raw, 'plg_', 'PluginId');
+}
 //# sourceMappingURL=id.js.map

package/dist/utils/id.js.map

@@ -1 +1 @@
-{"version":3,"file":"id.js","sourceRoot":"","sources":["../../src/utils/id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAyBzC,MAAM,QAAQ,GAAG,sCAAsC,CAAA;AACvD,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAA;AACpC,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,YAAY,CAAA;AAEtE,SAAS,UAAU,CAAmB,MAAS,EAAE,MAAM,GAAG,EAAE;IAC3D,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,SAAS,GAAG,MAAM,CAAA;IACtB,OAAO,SAAS,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;QACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,SAAS,IAAI,CAAC;gBAAE,MAAK;YACzB,IAAI,IAAI,GAAG,gBAAgB,EAAE,CAAC;gBAC7B,MAAM,IAAI,QAAQ,CAAC,IAAI,GAAG,YAAY,CAAC,CAAA;gBACvC,SAAS,EAAE,CAAA;YACZ,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,GAAG,MAAM,GAAG,MAAM,EAAqB,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC/B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,aAAa;IAC5B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB;IAChC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB;IAChC,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,kBAAkB;IACjC,OAAO,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;AAC9B,CAAC;AAED,MAAM,UAAU,kBAAkB;IACjC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,cAAc;IAC7B,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,cAAc;IAC7B,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,uBAAuB;IACtC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,kBAAkB;IACjC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,eAAe;IAC9B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,mBAAmB;IAClC,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,2BAA2B;IAC1C,OAAO,UAAU,CAAC,KAAK,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC/B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,oBAAoB;IACnC,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,0BAA0B;IACzC,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,mBAAmB;IAClC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,mBAAmB;IAClC,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,oBAAoB;IACnC,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,qBAAqB;IACpC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,oBAAoB;IACnC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAA;AACzB,CAAC;AAED,SAAS,OAAO,CAAmB,GAAW,EAAE,MAAc,EAAE,QAAgB;IAC/E,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,WAAW,QAAQ,eAAe,MAAM,kBAAkB,GAAG,GAAG,CAAC,CAAA;IAClF,CAAC;IACD,OAAO,GAAQ,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW;IACxC,OAAO,OAAO,CAAW,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;AAClD,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,GAAW;IACrC,OAAO,OAAO,CAAQ,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;AAC5C,CAAC;AACD,MAAM,UAAU,wBAAwB,CAAC,GAAW;IACnD,OAAO,OAAO,CAAsB,GAAG,EAAE,KAAK,EAAE,qBAAqB,CAAC,CAAA;AACvE,CAAC"}
+{"version":3,"file":"id.js","sourceRoot":"","sources":["../../src/utils/id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AA8BzC,MAAM,QAAQ,GAAG,sCAAsC,CAAA;AACvD,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAA;AACpC,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,YAAY,CAAA;AAEtE,SAAS,UAAU,CAAmB,MAAS,EAAE,MAAM,GAAG,EAAE;IAC3D,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,SAAS,GAAG,MAAM,CAAA;IACtB,OAAO,SAAS,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,GAAG,CAAC,CAAC,CAAA;QACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,SAAS,IAAI,CAAC;gBAAE,MAAK;YACzB,IAAI,IAAI,GAAG,gBAAgB,EAAE,CAAC;gBAC7B,MAAM,IAAI,QAAQ,CAAC,IAAI,GAAG,YAAY,CAAC,CAAA;gBACvC,SAAS,EAAE,CAAA;YACZ,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,GAAG,MAAM,GAAG,MAAM,EAAqB,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC/B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,aAAa;IAC5B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB;IAChC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB;IAChC,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,kBAAkB;IACjC,OAAO,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;AAC9B,CAAC;AAED,MAAM,UAAU,kBAAkB;IACjC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,cAAc;IAC7B,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,cAAc;IAC7B,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,uBAAuB;IACtC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,kBAAkB;IACjC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,eAAe;IAC9B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,mBAAmB;IAClC,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,2BAA2B;IAC1C,OAAO,UAAU,CAAC,KAAK,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC/B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,oBAAoB;IACnC,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,0BAA0B;IACzC,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,mBAAmB;IAClC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,mBAAmB;IAClC,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,oBAAoB;IACnC,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,qBAAqB;IACpC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,oBAAoB;IACnC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,kBAAkB;IACjC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,sBAAsB;IACrC,OAAO,UAAU,CAAC,OAAO,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,uBAAuB;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC/B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC/B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAA;AAC1B,CAAC;AAED,SAAS,OAAO,CAAmB,GAAW,EAAE,MAAc,EAAE,QAAgB;IAC/E,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,WAAW,QAAQ,eAAe,MAAM,kBAAkB,GAAG,GAAG,CAAC,CAAA;IAClF,CAAC;IACD,OAAO,GAAQ,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW;IACxC,OAAO,OAAO,CAAW,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;AAClD,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,GAAW;IACrC,OAAO,OAAO,CAAQ,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;AAC5C,CAAC;AACD,MAAM,UAAU,wBAAwB,CAAC,GAAW;IACnD,OAAO,OAAO,CAAsB,GAAG,EAAE,KAAK,EAAE,qBAAqB,CAAC,CAAA;AACvE,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,GAAW;IACxC,OAAO,OAAO,CAAW,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;AAClD,CAAC"}

package/dist/utils/shell-compress.d.ts

@@ -0,0 +1,13 @@
+export interface ShellCompressResult {
+    text: string;
+    original: string | null;
+}
+export interface ShellCompressOptions {
+    minLines?: number;
+    minReductionPercent?: number;
+    maxStackFrames?: number;
+    maxPassLines?: number;
+}
+export declare function compressShellOutputFull(raw: string, options?: ShellCompressOptions): ShellCompressResult;
+export declare function compressShellOutput(raw: string, options?: ShellCompressOptions): string;
+//# sourceMappingURL=shell-compress.d.ts.map

package/dist/utils/shell-compress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-compress.d.ts","sourceRoot":"","sources":["../../src/utils/shell-compress.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,mBAAmB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,YAAY,CAAC,EAAE,MAAM,CAAA;CACrB;AAgCD,wBAAgB,uBAAuB,CACtC,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,oBAAoB,GAC5B,mBAAmB,CAyErB;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAEvF"}

package/dist/utils/shell-compress.js

@@ -0,0 +1,97 @@
+const STACK_FRAME_RE = /^\s+at\s+|^\s+File\s+"[^"]+",\s+line\s+\d+|^\s+at\s+[\w.$]+\(|^\s+\d+:\s+\w|^\s+from\s+\//;
+const PASS_LINE_RE = /[\s✓✔√●∙·►▸▹]+\s*(PASS|pass|ok|OK|✓|✔|√)\s|^\s*(PASS|ok)\s+[\w/.-]+|^ok\s+\d+\s|PASSED\s*$|^---\s*PASS:|^test\s+\S+\s+\.\.\.\s+ok\s*$/;
+const NOISE_RE = /^\s*[\\\/|─━░▓█▒■□◻◼⠋⠙⠹⠸⠼⠴⠦⠧⠇⠏⣾⣽⣻⢿⡿⣟⣯⣷]+\s*$|^\s*\d+%\s*[|█▓░]+|^(Downloading|Fetching|Installing|Resolving|Compiling)\b.*\.\.\./;
+const DEFAULT_MIN_LINES = 20;
+const DEFAULT_MIN_REDUCTION = 0.1;
+const DEFAULT_MAX_STACK_FRAMES = 5;
+const DEFAULT_MAX_PASS_LINES = 3;
+function normalizeLine(line) {
+    return line.replace(/^\s*\d+[\s:.|)]+/, '').replace(/\d+/g, 'N');
+}
+function collapseRepeated(lines) {
+    const result = [];
+    let prevNorm = '';
+    let repeatCount = 0;
+    for (const line of lines) {
+        const norm = normalizeLine(line);
+        if (norm === prevNorm && norm.trim().length > 0) {
+            repeatCount++;
+        }
+        else {
+            if (repeatCount > 0) {
+                result.push(`... ${repeatCount} similar line${repeatCount === 1 ? '' : 's'} omitted`);
+            }
+            result.push(line);
+            prevNorm = norm;
+            repeatCount = 0;
+        }
+    }
+    if (repeatCount > 0) {
+        result.push(`... ${repeatCount} similar line${repeatCount === 1 ? '' : 's'} omitted`);
+    }
+    return result;
+}
+export function compressShellOutputFull(raw, options) {
+    const minLines = options?.minLines ?? DEFAULT_MIN_LINES;
+    const minReduction = options?.minReductionPercent ?? DEFAULT_MIN_REDUCTION;
+    const maxStackFrames = options?.maxStackFrames ?? DEFAULT_MAX_STACK_FRAMES;
+    const maxPassLines = options?.maxPassLines ?? DEFAULT_MAX_PASS_LINES;
+    const lines = raw.split('\n');
+    if (lines.length < minLines) {
+        return { text: raw, original: null };
+    }
+    // Pass 1: stack frame compression, pass test suppression, noise removal
+    const pass1 = [];
+    let stackCount = 0;
+    let passCount = 0;
+    for (const line of lines) {
+        // Noise removal
+        if (NOISE_RE.test(line)) {
+            continue;
+        }
+        // Stack frame compression
+        if (STACK_FRAME_RE.test(line)) {
+            stackCount++;
+            if (stackCount <= maxStackFrames) {
+                pass1.push(line);
+            }
+            continue;
+        }
+        if (stackCount > maxStackFrames) {
+            pass1.push(`... ${stackCount - maxStackFrames} more frames`);
+        }
+        stackCount = 0;
+        // Pass test suppression
+        if (PASS_LINE_RE.test(line)) {
+            passCount++;
+            if (passCount <= maxPassLines) {
+                pass1.push(line);
+            }
+            continue;
+        }
+        if (passCount > maxPassLines) {
+            pass1.push(`... ${passCount - maxPassLines} passing tests omitted`);
+        }
+        passCount = 0;
+        pass1.push(line);
+    }
+    // Flush trailing counters
+    if (stackCount > maxStackFrames) {
+        pass1.push(`... ${stackCount - maxStackFrames} more frames`);
+    }
+    if (passCount > maxPassLines) {
+        pass1.push(`... ${passCount - maxPassLines} passing tests omitted`);
+    }
+    // Pass 2: collapse repeated lines
+    const pass2 = collapseRepeated(pass1);
+    const compressed = pass2.join('\n');
+    const reduction = 1 - compressed.length / raw.length;
+    if (reduction < minReduction) {
+        return { text: raw, original: null };
+    }
+    return { text: compressed, original: raw };
+}
+export function compressShellOutput(raw, options) {
+    return compressShellOutputFull(raw, options).text;
+}
+//# sourceMappingURL=shell-compress.js.map

package/dist/utils/shell-compress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-compress.js","sourceRoot":"","sources":["../../src/utils/shell-compress.ts"],"names":[],"mappings":"AAAA,MAAM,cAAc,GACnB,2FAA2F,CAAA;AAE5F,MAAM,YAAY,GACjB,uIAAuI,CAAA;AAExI,MAAM,QAAQ,GACb,kIAAkI,CAAA;AAEnI,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAC5B,MAAM,qBAAqB,GAAG,GAAG,CAAA;AACjC,MAAM,wBAAwB,GAAG,CAAC,CAAA;AAClC,MAAM,sBAAsB,GAAG,CAAC,CAAA;AAchC,SAAS,aAAa,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAe;IACxC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,QAAQ,GAAG,EAAE,CAAA;IACjB,IAAI,WAAW,GAAG,CAAC,CAAA;IAEnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,WAAW,EAAE,CAAA;QACd,CAAC;aAAM,CAAC;YACP,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,OAAO,WAAW,gBAAgB,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAA;YACtF,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,QAAQ,GAAG,IAAI,CAAA;YACf,WAAW,GAAG,CAAC,CAAA;QAChB,CAAC;IACF,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,OAAO,WAAW,gBAAgB,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAA;IACtF,CAAC;IAED,OAAO,MAAM,CAAA;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CACtC,GAAW,EACX,OAA8B;IAE9B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,iBAAiB,CAAA;IACvD,MAAM,YAAY,GAAG,OAAO,EAAE,mBAAmB,IAAI,qBAAqB,CAAA;IAC1E,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,wBAAwB,CAAA;IAC1E,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,sBAAsB,CAAA;IAEpE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAE7B,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IACrC,CAAC;IAED,wEAAwE;IACxE,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,UAAU,GAAG,CAAC,CAAA;IAClB,IAAI,SAAS,GAAG,CAAC,CAAA;IAEjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,gBAAgB;QAChB,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,SAAQ;QACT,CAAC;QAED,0BAA0B;QAC1B,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,UAAU,EAAE,CAAA;YACZ,IAAI,UAAU,IAAI,cAAc,EAAE,CAAC;gBAClC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,CAAC;YACD,SAAQ;QACT,CAAC;QAED,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,OAAO,UAAU,GAAG,cAAc,cAAc,CAAC,CAAA;QAC7D,CAAC;QACD,UAAU,GAAG,CAAC,CAAA;QAEd,wBAAwB;QACxB,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,SAAS,EAAE,CAAA;YACX,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,CAAC;YACD,SAAQ;QACT,CAAC;QAED,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,OAAO,SAAS,GAAG,YAAY,wBAAwB,CAAC,CAAA;QACpE,CAAC;QACD,SAAS,GAAG,CAAC,CAAA;QAEb,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjB,CAAC;IAED,0BAA0B;IAC1B,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,OAAO,UAAU,GAAG,cAAc,cAAc,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,OAAO,SAAS,GAAG,YAAY,wBAAwB,CAAC,CAAA;IACpE,CAAC;IAED,kCAAkC;IAClC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;IAErC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,SAAS,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;IAEpD,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IACrC,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAA;AAC3C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,OAA8B;IAC9E,OAAO,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,CAAA;AAClD,CAAC"}

package/dist/verification/gate.d.ts

@@ -0,0 +1,19 @@
+import type { ToolDefinition } from '../types/tool/index.js';
+import type { GateEvaluationResult, VerificationGateConfig } from '../types/verification/index.js';
+import type { Logger } from '../utils/logger.js';
+export interface ToolCallContext {
+    readonly toolName: string;
+    readonly toolInput: unknown;
+    readonly toolDef: ToolDefinition | undefined;
+}
+export declare class VerificationGate {
+    private readonly rules;
+    private readonly compiledPatterns;
+    private readonly nameSets;
+    private readonly log;
+    private readonly logDecisions;
+    private readonly enabled;
+    constructor(config: VerificationGateConfig, log: Logger);
+    evaluate(ctx: ToolCallContext): GateEvaluationResult;
+}
+//# sourceMappingURL=gate.d.ts.map

package/dist/verification/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../src/verification/gate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,KAAK,EACX,oBAAoB,EACpB,sBAAsB,EAEtB,MAAM,gCAAgC,CAAA;AAEvC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAGhD,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,CAAA;CAC5C;AAED,qBAAa,gBAAgB;IAC5B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoB;IAC1C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IACtD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA0B;IACnD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAC5B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,EAAE,sBAAsB,EAAE,GAAG,EAAE,MAAM;IAsDvD,QAAQ,CAAC,GAAG,EAAE,eAAe,GAAG,oBAAoB;CAwDpD"}

package/dist/verification/gate.js

@@ -0,0 +1,103 @@
+import { MAX_CUSTOM_PATTERN_LENGTH } from '../constants/verification/index.js';
+import { VerificationGateConfigSchema } from '../types/verification/index.js';
+import { evaluateRule } from './rules.js';
+export class VerificationGate {
+    rules;
+    compiledPatterns;
+    nameSets;
+    log;
+    logDecisions;
+    enabled;
+    constructor(config, log) {
+        const parsed = VerificationGateConfigSchema.parse(config);
+        this.log = log.child({ component: 'VerificationGate' });
+        this.logDecisions = parsed.logDecisions;
+        this.enabled = parsed.enabled;
+        const expandedRules = [];
+        if (parsed.denyDangerousPatterns) {
+            expandedRules.push({ type: 'deny_dangerous_patterns' });
+        }
+        if (parsed.allowReadOnlyTools) {
+            expandedRules.push({ type: 'allow_read_only' });
+        }
+        expandedRules.push(...parsed.rules);
+        this.rules = expandedRules;
+        this.compiledPatterns = new Map();
+        this.nameSets = new Map();
+        for (let i = 0; i < this.rules.length; i++) {
+            const rule = this.rules[i];
+            if (!rule)
+                continue;
+            if (rule.type === 'custom_pattern') {
+                if (rule.pattern.length > MAX_CUSTOM_PATTERN_LENGTH) {
+                    this.log.warn('Custom pattern exceeds max length, skipping', {
+                        index: i,
+                        length: rule.pattern.length,
+                        maxLength: MAX_CUSTOM_PATTERN_LENGTH,
+                    });
+                    continue;
+                }
+                try {
+                    this.compiledPatterns.set(i, new RegExp(rule.pattern));
+                }
+                catch (err) {
+                    this.log.warn('Invalid custom pattern regex, skipping', {
+                        index: i,
+                        pattern: rule.pattern,
+                        error: err instanceof Error ? err.message : String(err),
+                    });
+                }
+            }
+            if (rule.type === 'allow_by_name') {
+                this.nameSets.set(i, new Set(rule.toolNames));
+            }
+            if (rule.type === 'deny_by_name') {
+                this.nameSets.set(i, new Set(rule.toolNames));
+            }
+        }
+    }
+    evaluate(ctx) {
+        if (!this.enabled) {
+            return {
+                decision: 'review',
+                matchedRule: null,
+                reason: 'Gate disabled',
+            };
+        }
+        for (let i = 0; i < this.rules.length; i++) {
+            const rule = this.rules[i];
+            if (!rule)
+                continue;
+            const decision = evaluateRule(rule, ctx.toolName, ctx.toolInput, ctx.toolDef, this.compiledPatterns.get(i), this.nameSets.get(i));
+            if (decision !== null) {
+                const result = {
+                    decision,
+                    matchedRule: rule,
+                    reason: `Matched rule: ${rule.type}`,
+                };
+                if (this.logDecisions) {
+                    this.log.debug('Gate decision', {
+                        toolName: ctx.toolName,
+                        decision,
+                        ruleType: rule.type,
+                        ruleIndex: i,
+                    });
+                }
+                return result;
+            }
+        }
+        const result = {
+            decision: 'review',
+            matchedRule: null,
+            reason: 'No matching rule found',
+        };
+        if (this.logDecisions) {
+            this.log.debug('Gate decision (default)', {
+                toolName: ctx.toolName,
+                decision: 'review',
+            });
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=gate.js.map

package/dist/verification/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../src/verification/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAA;AAO9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAA;AAE7E,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAQzC,MAAM,OAAO,gBAAgB;IACX,KAAK,CAAoB;IACzB,gBAAgB,CAAqB;IACrC,QAAQ,CAA0B;IAClC,GAAG,CAAQ;IACX,YAAY,CAAS;IACrB,OAAO,CAAS;IAEjC,YAAY,MAA8B,EAAE,GAAW;QACtD,MAAM,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACzD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAA;QACvD,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAA;QACvC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;QAE7B,MAAM,aAAa,GAAuB,EAAE,CAAA;QAE5C,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAClC,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAA;QACxD,CAAC;QACD,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC/B,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;QAChD,CAAC;QAED,aAAa,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QACnC,IAAI,CAAC,KAAK,GAAG,aAAa,CAAA;QAE1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,GAAG,EAAE,CAAA;QACjC,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAA;QAEzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC1B,IAAI,CAAC,IAAI;gBAAE,SAAQ;YAEnB,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACpC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;oBACrD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,6CAA6C,EAAE;wBAC5D,KAAK,EAAE,CAAC;wBACR,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;wBAC3B,SAAS,EAAE,yBAAyB;qBACpC,CAAC,CAAA;oBACF,SAAQ;gBACT,CAAC;gBACD,IAAI,CAAC;oBACJ,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;gBACvD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,wCAAwC,EAAE;wBACvD,KAAK,EAAE,CAAC;wBACR,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACvD,CAAC,CAAA;gBACH,CAAC;YACF,CAAC;YAED,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;YAC9C,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAClC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;YAC9C,CAAC;QACF,CAAC;IACF,CAAC;IAED,QAAQ,CAAC,GAAoB;QAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;gBACN,QAAQ,EAAE,QAAQ;gBAClB,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,eAAe;aACvB,CAAA;QACF,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC1B,IAAI,CAAC,IAAI;gBAAE,SAAQ;YACnB,MAAM,QAAQ,GAAG,YAAY,CAC5B,IAAI,EACJ,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,OAAO,EACX,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CACpB,CAAA;YAED,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAyB;oBACpC,QAAQ;oBACR,WAAW,EAAE,IAAI;oBACjB,MAAM,EAAE,iBAAiB,IAAI,CAAC,IAAI,EAAE;iBACpC,CAAA;gBAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACvB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE;wBAC/B,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,QAAQ;wBACR,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,SAAS,EAAE,CAAC;qBACZ,CAAC,CAAA;gBACH,CAAC;gBAED,OAAO,MAAM,CAAA;YACd,CAAC;QACF,CAAC;QAED,MAAM,MAAM,GAAyB;YACpC,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,IAAI;YACjB,MAAM,EAAE,wBAAwB;SAChC,CAAA;QAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACzC,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,QAAQ,EAAE,QAAQ;aAClB,CAAC,CAAA;QACH,CAAC;QAED,OAAO,MAAM,CAAA;IACd,CAAC;CACD"}

package/dist/verification/index.d.ts

@@ -0,0 +1,3 @@
+export { VerificationGate, type ToolCallContext } from './gate.js';
+export { evaluateRule } from './rules.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/verification/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/verification/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,WAAW,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA"}

package/dist/verification/index.js

@@ -0,0 +1,3 @@
+export { VerificationGate } from './gate.js';
+export { evaluateRule } from './rules.js';
+//# sourceMappingURL=index.js.map

package/dist/verification/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/verification/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAwB,MAAM,WAAW,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA"}

package/dist/verification/rules.d.ts

@@ -0,0 +1,4 @@
+import type { ToolDefinition } from '../types/tool/index.js';
+import type { GateDecision, VerificationRule } from '../types/verification/index.js';
+export declare function evaluateRule(rule: VerificationRule, toolName: string, toolInput: unknown, toolDef: ToolDefinition | undefined, compiledPattern?: RegExp, nameSet?: Set<string>): GateDecision | null;
+//# sourceMappingURL=rules.d.ts.map

package/dist/verification/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../src/verification/rules.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AAEpF,wBAAgB,YAAY,CAC3B,IAAI,EAAE,gBAAgB,EACtB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,OAAO,EAClB,OAAO,EAAE,cAAc,GAAG,SAAS,EACnC,eAAe,CAAC,EAAE,MAAM,EACxB,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GACnB,YAAY,GAAG,IAAI,CAkErB"}