@phigon/observer 8.0.1

package/README.md

@@ -0,0 +1,303 @@
+<p align="center">
+  <a href="https://phigon.online">
+    <picture>
+      <source media="(prefers-color-scheme: dark)" srcset="https://phigon.online/brand/phigon-white.svg" />
+      <img src="https://phigon.online/brand/phigon-black.svg" alt="Phigon" width="72" />
+    </picture>
+  </a>
+</p>
+
+# Phigon Observer
+
+Connect your AI coding agents to [Phigon](https://phigon.online), the
+consent-based supervision workspace for authorized AI activity.
+
+Phigon helps you see:
+
+- which approved machines are connected;
+- which AI agents are installed or running;
+- current activity and agent health;
+- saved agent threads and history when sharing is approved.
+
+Phigon is consent-based. The observer starts with privacy-safe metadata only,
+and sensitive activity remains protected unless the machine owner approves it.
+
+## Install and connect
+
+Requires **Node.js 24 or newer** with npm. Releases include Guardian runners for
+Windows, macOS, and Linux on x64 and ARM64. Go is not required to install.
+
+```sh
+npm install --global @phigon/observer
+```
+
+1. Sign in to [Phigon](https://phigon.online) and select **Connect machine**.
+2. Choose **Metadata** or **Full activity**, then generate a one-time code.
+3. Run the pairing and monitoring commands shown in the connection dialog on
+   the machine you administer. The machine owner reviews and accepts the scope.
+
+For metadata-only monitoring:
+
+```sh
+phigon-observer pair --code YOUR-CODE --consent-profile metadata
+phigon-observer run --profile metadata
+```
+
+For supported conversations, commands, outputs, and past-history import, select
+Full activity in Phigon and use the matching profile:
+
+```sh
+phigon-observer pair --code YOUR-CODE --consent-profile full
+phigon-observer run --profile full
+```
+
+`YOUR-CODE` is the one-time code from your workspace. Keep the observer process
+running for live collection. Closing the dashboard does not stop capture;
+stopping the observer does. Full activity still requires matching workspace
+policy and local consent, and secrets are redacted before delivery.
+
+Check installation and connection health with:
+
+```sh
+phigon-observer doctor --json
+```
+
+### Upgrade from the previous npm package
+
+The maintained package is now **`@phigon/observer`**, published under the
+`phigon` npm account. The executable is still **`phigon-observer`**.
+The old unscoped package will not automatically switch to the new package.
+
+Stop your observer process or managed service, then run:
+
+```sh
+npm uninstall --global phigon-observer
+npm install --global @phigon/observer
+phigon-observer doctor --json
+```
+
+Restart with the same collection profile and environment as before. Keep your
+existing Phigon data directory: npm package replacement does not require a new
+pairing or removal of machine credentials. Managed-service installations may
+need their executable path updated to the new global install location. To
+update future releases, run `npm install --global @phigon/observer@latest`.
+
+To monitor an agent that does not have a built-in adapter, register its local
+signals once. Definitions are reloaded on every discovery and activity scan:
+
+```sh
+phigon-observer agent add \
+  --id release-bot \
+  --name "Release Bot" \
+  --executable release-bot \
+  --process release-bot-worker \
+  --config-path ~/.release-bot \
+  --activity-dir ~/.release-bot/sessions
+```
+
+Use `phigon-observer agent list` to inspect the active definitions and
+`phigon-observer agent remove --id release-bot` to stop using one. Custom
+activity remains visibly source-isolated unless independent process-lifetime
+evidence proves one exact match. Activity directories accept bounded JSONL and
+expand `~/` against the current user's home directory. Paths must be absolute
+or home-relative, activity roots must be narrowly scoped, and overlapping
+identity or activity signals are rejected instead of guessed.
+
+To disconnect and unregister the paired machine from that machine itself:
+
+```sh
+phigon-observer remove-machine
+```
+
+The command requires local confirmation, revokes the machine credential, and
+clears it only after the control plane confirms removal. Workspace retention
+and administrator-managed historical data deletion remain separate controls.
+
+Return to [Phigon](https://phigon.online) to view the machine, grouped AI
+agents, live status, health, and available history.
+
+## Past conversations and live capture
+
+When a machine owner pairs with Full activity consent and runs with `--profile
+full`, the observer automatically imports supported past conversations. It
+resumes that import after a restart. Past chats appear directly in Conversations;
+new prompts, replies, and tool activity are captured independently in real time.
+Administrators can request another archive scan through the authenticated
+`POST /v1/machines/{id}/history-syncs` API. A manual scan reports success only
+after the server acknowledges its final event. Only permitted, locally redacted
+source content is collected; private provider-encrypted reasoning is not decoded.
+
+The dashboard does not need to stay open. Normal live monitoring and queued
+history jobs are driven by the observer process. Local state is limited to
+source checkpoints and an encrypted delivery spool; hosted history remains on
+the server and duplicate source records are suppressed across retries.
+
+## Optional agent actions
+
+Remote agent actions are disabled on every machine by default. A machine owner
+may opt in to the typed Action Center executor before starting the observer:
+
+```sh
+PHIGON_REMOTE_ACTIONS_ENABLED=true phigon-observer run
+```
+
+This capability accepts graceful stop and force stop for one exact reported
+agent process lifetime. An operator proposal and separate administrator
+confirmation are required, commands expire quickly, the observer refreshes
+local discovery before signaling, and it persists an idempotent terminal
+receipt. This setting does not enable shell commands, file access, screen or
+camera capture, or general remote control. Windows graceful stop uses
+`taskkill.exe /PID` without the force flag and never silently escalates;
+Unix-like systems use `SIGTERM`. Force stop remains a separately approved
+capability on every supported platform.
+
+To additionally enroll this machine for administrator-reviewed system operations,
+set `PHIGON_REMOTE_COMMANDS_ENABLED=true` before starting the observer. This
+separate capability enables executable/argument commands, current system
+inspection, and scheduled shutdown/restart through Actions and Cortex. Commands
+run as the observer account, require an exact administrator review, expire before
+dispatch, have a 1–120 second limit, and return at most 32 KB of redacted output.
+A durable execution journal prevents retrying a previously claimed command after
+a crash. A power receipt means a one-minute change was scheduled, not that the
+machine already powered off. See [the administration guide](https://github.com/imthegoodboy/Phigon/blob/imp/docs/admin-controls-upgrade.md).
+
+Managed agent integrations can request the hosted fail-closed Guardian decision
+before performing an action:
+
+```sh
+phigon-observer authorize-action \
+  --agent codex:worker-1 \
+  --action command.execute \
+  --resource "git status" \
+  --context-file ./phigon-action-context.json \
+  --json
+```
+
+The optional context file is bounded JSON with `task_id`, `proposal_id`,
+`plan_step_id`, `user_prompt`, `agent_plan`, `justification`,
+`expected_effect`, and `recent_activity` fields. These are explicit integration
+evidence, not private model chain-of-thought. The gateway
+returns exit code 0 only for an allow. A deny, approval requirement, or
+unavailable semantic decision returns exit code 77, together with a message
+for the agent. A deny or approval also carries the exact authoritative
+administrator contract returned by the control plane. Every decision is appended
+to the observer's generic activity bridge so normal background telemetry can
+store it even when the dashboard is closed.
+
+For a running agent, integrations should also pass the discovered
+`--process-id` and `--process-started-at` together. The control plane binds that
+pair to fresh machine inventory before honoring agent-specific scope. Without
+that proof it evaluates conservatively across all potentially relevant
+agent-scoped contracts; a caller-supplied agent label cannot remove a policy.
+
+When a semantic contract requires approval, the hosted control plane creates a
+durable request bound to the exact policy digest, action, resource, contract,
+and evidence envelope. An administrator can approve or reject it in Guardian.
+Retrying the unchanged proposal after approval consumes a single-use grant;
+another execution requires a new `proposal_id`.
+
+For CLI agents, run commands through the managed execution boundary so the
+same pre-action decision is mandatory and command input, streamed output, and
+the final exit are captured by the normal background telemetry pipeline:
+
+```sh
+phigon-observer guardian exec \
+  --agent codex:worker-1 \
+  --context-file ./phigon-action-context.json \
+  -- npm test
+```
+
+To govern the agent product and model before it starts, use the managed agent
+launcher:
+
+```sh
+phigon-observer guardian launch \
+  --agent claude-code:worker-1 \
+  --model anthropic:claude-sonnet-4-5 \
+  --context-file ./phigon-action-context.json \
+  -- claude
+```
+
+The launcher requires an explicit model claim and obtains one short-lived,
+single-use grant covering `agent.start`, `model.use`, and `command.execute`.
+The grant binds the executable and input file hashes, arguments, working
+directory, environment, and current company policy. The native supervisor
+contains the managed process tree and stops it if its online lease cannot renew.
+It renews directly with the control plane, so an observer event-loop stall does
+not disable policy revocation. Its private credential bootstrap is removed before
+the workload starts and is excluded from command arguments and activity journals.
+Pending administrator approval holds the complete launch; any denied or
+unavailable check prevents it from starting.
+`guardian exec` also checks `agent.start` when no model is declared. Before either
+launch mode creates its manifest, it retrieves the company's assigned OS profiles.
+Linux profiles enforce filesystem permissions and optional denial of all sockets
+through Landlock/seccomp; unsupported assigned protections block launch. Profiles
+also support Windows/Linux memory, CPU and process limits, runtime deadlines,
+and Linux workload UID/GID separation when the required protected launcher and
+cgroup are provisioned. macOS currently accepts runtime deadlines only. Profiles
+are checked again during grant consumption and online lease renewal. An all-socket
+deny profile also blocks the loopback model gateway.
+
+Compatible agents receive a temporary loopback model gateway credential and
+provider base URLs. The hosted gateway checks every forwarded model request,
+maps only administrator-approved models, and keeps company provider keys on
+the server. Direct provider traffic requires company network controls.
+
+The executable is launched directly without a shell. A held or blocked action
+never starts and returns exit code 77; an allowed command returns its own exit
+code. Programs launched outside this managed boundary still require their own
+Phigon integration or an operating-system application-control policy. A
+business that must prevent direct executable or API bypass also needs OS/MDM
+application control and a controlled model-provider proxy.
+
+Guardian is centrally managed. `phigon-observer guardian status` reports the
+management authority. Local on/off and containment switches have been removed;
+old `guardian-control.json` files are ignored. Administrator policies alone
+specify the allowed intervention, and the executor verifies the exact process
+lifetime before stopping it.
+
+While `phigon-observer run` is active, discovered running process instances are
+also submitted for periodic central review, including agents started outside
+`guardian launch`. A policy-authorized stop or force-stop is dispatched against
+that exact instance and its receipt enters hosted telemetry. Discovery is
+post-launch detection: it cannot undo activity before discovery or contain
+undetected agents. Block-only policies never become background process kills.
+
+For exact model/agent lists, central decision auditing, and enterprise rollout
+boundaries, see [Guardian runtime](https://github.com/imthegoodboy/Phigon/blob/imp/docs/guardian-runtime.md), the
+[business policy catalog](https://github.com/imthegoodboy/Phigon/blob/imp/docs/enterprise-guard-policies.md), and
+[deployment requirements](https://github.com/imthegoodboy/Phigon/blob/imp/docs/guardian-deployment.md).
+Deployment guidance includes the central Linux profile format and generated
+Windows AppLocker build/review/apply/verify/rollback package. Saving a plain-language
+rule does not automatically install machine-wide application controls.
+
+Building from source requires Node 24+ and Go 1.26. `npm run build` produces the
+current platform's native runner. `npm run build:platforms` adds Windows, Linux,
+and macOS x64/ARM64 binaries before release packaging. Installed releases include
+the runner; endpoint users do not need Go.
+
+Phigon includes optimized support for Codex, Claude Code, Cursor, GitHub
+Copilot, OpenCode, Gemini CLI, and more, while the dynamic registry and custom
+NDJSON bridge support locally authorized custom agents without a code change.
+
+## Troubleshooting
+
+- **Command not found:** ensure npm's global executable directory is on `PATH`,
+  then reopen your terminal.
+- **Expired pairing code:** generate another code in Connect machine and retry.
+- **No conversations:** metadata excludes content. Check the accepted profile,
+  workspace policy, and adapter coverage with `doctor --profile full --json`.
+- **Disconnected machine:** keep the observer running and allow its configured
+  HTTPS and telemetry endpoints. Already delivered history stays on the server;
+  queued permitted activity is retried when connectivity returns.
+- **Unsupported source:** Phigon shows missing or limited evidence. It does not
+  fabricate conversations or decrypt provider-private reasoning.
+
+[Setup guide](https://phigon.online/docs/get-started) ·
+[Documentation](https://phigon.online/docs) ·
+[Report an issue](https://github.com/imthegoodboy/Phigon/issues)
+
+## License
+
+This package is proprietary (`UNLICENSED`). Public npm availability does not
+grant an open-source license.

package/dist/src/action-policy.d.ts

@@ -0,0 +1,38 @@
+import { ManagedAction, type ActionGuardrailPolicy } from "./generated/phigon/v1/policy_pb.js";
+export declare const managedActionNames: readonly ["file.read", "file.write", "file.delete", "command.execute", "process.launch", "network.connect", "browser.navigate", "credential.access", "agent.start", "model.use"];
+export type ManagedActionName = typeof managedActionNames[number];
+export type GuardianIntervention = "block_action" | "stop_agent" | "kill_agent";
+export type StoredActionRule = Readonly<{
+    ruleId: string;
+    action: ManagedActionName;
+    effect: "deny" | "require_approval";
+    intervention: GuardianIntervention;
+    resourcePattern: string;
+    agentPattern: string;
+    reason: string;
+    sourceText: string;
+}>;
+export type StoredActionPolicy = Readonly<{
+    machineId: string;
+    policyDigest: string;
+    defaultEffect: "allow";
+    rules: readonly StoredActionRule[];
+    receivedAt: string;
+}>;
+export interface ActionPolicyPersistence {
+    invalidate(machineId: string): number;
+    save(machineId: string, policy: ActionGuardrailPolicy, generation?: number): Promise<StoredActionPolicy>;
+    load(machineId: string): Promise<StoredActionPolicy | null>;
+}
+export declare class ActionPolicySupersededError extends Error {
+}
+export declare class FileActionPolicyStore implements ActionPolicyPersistence {
+    #private;
+    constructor(dataDirectory: string);
+    save(machineId: string, policy: ActionGuardrailPolicy, generation?: number): Promise<StoredActionPolicy>;
+    invalidate(machineId: string): number;
+    load(machineId: string): Promise<StoredActionPolicy | null>;
+}
+export declare function policyForStorage(machineId: string, policy: ActionGuardrailPolicy): StoredActionPolicy;
+export declare function actionName(action: ManagedAction): ManagedActionName;
+//# sourceMappingURL=action-policy.d.ts.map

package/dist/src/action-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-policy.d.ts","sourceRoot":"","sources":["../../src/action-policy.ts"],"names":[],"mappings":"AAWA,OAAO,EAGL,aAAa,EACb,KAAK,qBAAqB,EAC3B,MAAM,oCAAoC,CAAC;AAE5C,eAAO,MAAM,kBAAkB,kLAWpB,CAAC;AAIZ,MAAM,MAAM,iBAAiB,GAAG,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AAClE,MAAM,MAAM,oBAAoB,GAAG,cAAc,GAAG,YAAY,GAAG,YAAY,CAAC;AAEhF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,kBAAkB,CAAC;IACpC,YAAY,EAAE,oBAAoB,CAAC;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC,CAAC;AAEH,MAAM,WAAW,uBAAuB;IACtC,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IACtC,IAAI,CACF,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,qBAAqB,EAC7B,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/B,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;CAC7D;AAED,qBAAa,2BAA4B,SAAQ,KAAK;CAAG;AAEzD,qBAAa,qBAAsB,YAAW,uBAAuB;;gBAKvD,aAAa,EAAE,MAAM;IAK3B,IAAI,CACR,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,qBAAqB,EAC7B,UAAU,SAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC;IA6B9B,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAW/B,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;CAqBlE;AAED,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,qBAAqB,GAC5B,kBAAkB,CAoDpB;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,iBAAiB,CAgBnE"}

package/dist/src/action-policy.js

@@ -0,0 +1,269 @@
+import { randomUUID } from "node:crypto";
+import { unlinkSync } from "node:fs";
+import { chmod, mkdir, readFile, rename, unlink, writeFile, } from "node:fs/promises";
+import { join } from "node:path";
+import { GuardrailEffect, GuardrailIntervention, ManagedAction, } from "./generated/phigon/v1/policy_pb.js";
+export const managedActionNames = Object.freeze([
+    "file.read",
+    "file.write",
+    "file.delete",
+    "command.execute",
+    "process.launch",
+    "network.connect",
+    "browser.navigate",
+    "credential.access",
+    "agent.start",
+    "model.use",
+]);
+const maxPolicyRules = 256;
+export class ActionPolicySupersededError extends Error {
+}
+export class FileActionPolicyStore {
+    #dataDirectory;
+    #path;
+    #generation = 0;
+    constructor(dataDirectory) {
+        this.#dataDirectory = dataDirectory;
+        this.#path = join(dataDirectory, "action-policy.json");
+    }
+    async save(machineId, policy, generation = this.#generation) {
+        const value = policyForStorage(machineId, policy);
+        this.#requireCurrentGeneration(generation);
+        await mkdir(this.#dataDirectory, { recursive: true, mode: 0o700 });
+        await chmod(this.#dataDirectory, 0o700);
+        const temporaryPath = `${this.#path}.${process.pid}.${randomUUID()}.tmp`;
+        let promoted = false;
+        try {
+            await writeFile(temporaryPath, `${JSON.stringify(value)}\n`, { encoding: "utf8", flag: "wx", mode: 0o600 });
+            this.#requireCurrentGeneration(generation);
+            await rename(temporaryPath, this.#path);
+            promoted = true;
+            this.#requireCurrentGeneration(generation);
+            await chmod(this.#path, 0o600);
+        }
+        catch (error) {
+            try {
+                await unlink(promoted ? this.#path : temporaryPath);
+            }
+            catch {
+                // The temporary file may not exist or invalidation may have removed it.
+            }
+            throw error;
+        }
+        return value;
+    }
+    invalidate(machineId) {
+        validateMachineId(machineId);
+        this.#generation += 1;
+        try {
+            unlinkSync(this.#path);
+        }
+        catch (error) {
+            if (!isNodeError(error) || error.code !== "ENOENT")
+                throw error;
+        }
+        return this.#generation;
+    }
+    async load(machineId) {
+        let raw;
+        try {
+            raw = await readFile(this.#path, "utf8");
+        }
+        catch (error) {
+            if (isNodeError(error) && error.code === "ENOENT")
+                return null;
+            throw error;
+        }
+        const value = JSON.parse(raw);
+        upgradeStoredPolicy(value);
+        validateStoredPolicy(value, machineId);
+        return value;
+    }
+    #requireCurrentGeneration(generation) {
+        if (generation !== this.#generation) {
+            throw new ActionPolicySupersededError("Action policy was superseded before persistence completed.");
+        }
+    }
+}
+export function policyForStorage(machineId, policy) {
+    validateMachineId(machineId);
+    if (!/^[a-f0-9]{64}$/u.test(policy.policyDigest)) {
+        throw new Error("Action policy digest is invalid.");
+    }
+    if (policy.defaultEffect !== "allow") {
+        throw new Error("Action policy default effect is invalid.");
+    }
+    if (policy.rules.length > maxPolicyRules) {
+        throw new Error("Action policy contains too many rules.");
+    }
+    const seen = new Set();
+    const rules = policy.rules.map((rule) => {
+        if (!validRuleId(rule.ruleId) || seen.has(rule.ruleId)) {
+            throw new Error("Action policy rule identity is invalid.");
+        }
+        seen.add(rule.ruleId);
+        const action = actionName(rule.action);
+        const effect = effectName(rule.effect);
+        const intervention = interventionName(rule.intervention);
+        if (effect === "require_approval" && intervention !== "block_action") {
+            throw new Error("Action policy approval rule cannot terminate an agent.");
+        }
+        if (rule.resourcePattern.length < 1 ||
+            Buffer.byteLength(rule.resourcePattern, "utf8") > 512 ||
+            Buffer.byteLength(rule.agentPattern.trim(), "utf8") > 128 ||
+            rule.reason.trim().length < 1 ||
+            Buffer.byteLength(rule.reason, "utf8") > 256 ||
+            Buffer.byteLength(rule.sourceText.trim(), "utf8") > 2_000) {
+            throw new Error("Action policy rule bounds are invalid.");
+        }
+        compileGlob(rule.resourcePattern);
+        return Object.freeze({
+            ruleId: rule.ruleId,
+            action,
+            effect,
+            intervention,
+            resourcePattern: rule.resourcePattern,
+            agentPattern: rule.agentPattern.trim(),
+            reason: rule.reason.trim(),
+            sourceText: rule.sourceText.trim(),
+        });
+    });
+    return Object.freeze({
+        machineId,
+        policyDigest: policy.policyDigest,
+        defaultEffect: "allow",
+        rules: Object.freeze(rules),
+        receivedAt: new Date().toISOString(),
+    });
+}
+export function actionName(action) {
+    const values = {
+        [ManagedAction.FILE_READ]: "file.read",
+        [ManagedAction.FILE_WRITE]: "file.write",
+        [ManagedAction.FILE_DELETE]: "file.delete",
+        [ManagedAction.COMMAND_EXECUTE]: "command.execute",
+        [ManagedAction.PROCESS_LAUNCH]: "process.launch",
+        [ManagedAction.NETWORK_CONNECT]: "network.connect",
+        [ManagedAction.BROWSER_NAVIGATE]: "browser.navigate",
+        [ManagedAction.CREDENTIAL_ACCESS]: "credential.access",
+        [ManagedAction.AGENT_START]: "agent.start",
+        [ManagedAction.MODEL_USE]: "model.use",
+    };
+    const value = values[action];
+    if (value === undefined)
+        throw new Error("Action policy action is invalid.");
+    return value;
+}
+function effectName(effect) {
+    if (effect === GuardrailEffect.DENY)
+        return "deny";
+    if (effect === GuardrailEffect.REQUIRE_APPROVAL)
+        return "require_approval";
+    throw new Error("Action policy effect is invalid.");
+}
+function validateStoredPolicy(value, machineId) {
+    if (typeof value !== "object" || value === null ||
+        !("machineId" in value) || value.machineId !== machineId ||
+        !("policyDigest" in value) || typeof value.policyDigest !== "string" ||
+        !/^[a-f0-9]{64}$/u.test(value.policyDigest) ||
+        !("defaultEffect" in value) || value.defaultEffect !== "allow" ||
+        !("receivedAt" in value) || typeof value.receivedAt !== "string" ||
+        !Number.isFinite(Date.parse(value.receivedAt)) ||
+        !("rules" in value) || !Array.isArray(value.rules) || value.rules.length > maxPolicyRules) {
+        throw new Error("Stored action policy is invalid.");
+    }
+    const seen = new Set();
+    for (const rule of value.rules) {
+        if (typeof rule !== "object" || rule === null ||
+            !("ruleId" in rule) || typeof rule.ruleId !== "string" ||
+            !validRuleId(rule.ruleId) || seen.has(rule.ruleId) ||
+            !("action" in rule) || typeof rule.action !== "string" ||
+            !managedActionNames.includes(rule.action) ||
+            !("effect" in rule) ||
+            (rule.effect !== "deny" && rule.effect !== "require_approval") ||
+            !("intervention" in rule) ||
+            (rule.intervention !== "block_action" &&
+                rule.intervention !== "stop_agent" &&
+                rule.intervention !== "kill_agent") ||
+            !("resourcePattern" in rule) || typeof rule.resourcePattern !== "string" ||
+            rule.resourcePattern.length < 1 || Buffer.byteLength(rule.resourcePattern, "utf8") > 512 ||
+            !("agentPattern" in rule) || typeof rule.agentPattern !== "string" ||
+            Buffer.byteLength(rule.agentPattern, "utf8") > 128 ||
+            !("reason" in rule) || typeof rule.reason !== "string" ||
+            rule.reason.trim().length < 1 || Buffer.byteLength(rule.reason, "utf8") > 256 ||
+            !("sourceText" in rule) || typeof rule.sourceText !== "string" ||
+            Buffer.byteLength(rule.sourceText, "utf8") > 2_000) {
+            throw new Error("Stored action policy rule is invalid.");
+        }
+        if (rule.effect === "require_approval" && rule.intervention !== "block_action") {
+            throw new Error("Stored action policy approval rule cannot terminate an agent.");
+        }
+        compileGlob(rule.resourcePattern);
+        if (rule.agentPattern.trim() !== "")
+            compileGlob(rule.agentPattern.trim());
+        if (rule.agentPattern !== "")
+            compileGlob(rule.agentPattern);
+        seen.add(rule.ruleId);
+    }
+}
+function interventionName(intervention) {
+    if (intervention === GuardrailIntervention.STOP_AGENT)
+        return "stop_agent";
+    if (intervention === GuardrailIntervention.KILL_AGENT)
+        return "kill_agent";
+    if (intervention === GuardrailIntervention.BLOCK_ACTION ||
+        intervention === GuardrailIntervention.UNSPECIFIED)
+        return "block_action";
+    throw new Error("Action policy intervention is invalid.");
+}
+function upgradeStoredPolicy(value) {
+    if (typeof value !== "object" || value === null || !("rules" in value) ||
+        !Array.isArray(value.rules))
+        return;
+    for (const item of value.rules) {
+        if (typeof item === "object" && item !== null && !("agentPattern" in item)) {
+            item["agentPattern"] = "";
+        }
+        if (typeof item === "object" && item !== null && !("sourceText" in item)) {
+            item["sourceText"] = "";
+        }
+        if (typeof item === "object" && item !== null && !("intervention" in item)) {
+            item["intervention"] = "block_action";
+        }
+    }
+}
+function compileGlob(pattern) {
+    let expression = "^";
+    for (let index = 0; index < pattern.length; index++) {
+        const character = pattern[index];
+        if (character === "*" && pattern[index + 1] === "*") {
+            expression += ".*";
+            index++;
+        }
+        else if (character === "*") {
+            expression += "[^/]*";
+        }
+        else if (character === "?") {
+            expression += "[^/]";
+        }
+        else if (character === "[") {
+            throw new Error("Character classes are not supported in action policy globs.");
+        }
+        else {
+            expression += character.replace(/[\\^$+?.()|{}]/gu, "\\$&");
+        }
+    }
+    return new RegExp(`${expression}$`, "u");
+}
+function validRuleId(value) {
+    return /^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][a-f0-9]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$/iu.test(value);
+}
+function validateMachineId(value) {
+    if (value.length < 1 || value.length > 128 || !/^[A-Za-z0-9._:-]+$/u.test(value)) {
+        throw new Error("Machine ID is invalid.");
+    }
+}
+function isNodeError(error) {
+    return error instanceof Error && "code" in error;
+}
+//# sourceMappingURL=action-policy.js.map

package/dist/src/action-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-policy.js","sourceRoot":"","sources":["../../src/action-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EACL,KAAK,EACL,KAAK,EACL,QAAQ,EACR,MAAM,EACN,MAAM,EACN,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,aAAa,GAEd,MAAM,oCAAoC,CAAC;AAE5C,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,WAAW;IACX,YAAY;IACZ,aAAa;IACb,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;IACjB,kBAAkB;IAClB,mBAAmB;IACnB,aAAa;IACb,WAAW;CACH,CAAC,CAAC;AAEZ,MAAM,cAAc,GAAG,GAAG,CAAC;AAkC3B,MAAM,OAAO,2BAA4B,SAAQ,KAAK;CAAG;AAEzD,MAAM,OAAO,qBAAqB;IACvB,cAAc,CAAS;IACvB,KAAK,CAAS;IACvB,WAAW,GAAG,CAAC,CAAC;IAEhB,YAAY,aAAqB;QAC/B,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,IAAI,CACR,SAAiB,EACjB,MAA6B,EAC7B,UAAU,GAAG,IAAI,CAAC,WAAW;QAE7B,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,aAAa,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;QACzE,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,SAAS,CACb,aAAa,EACb,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAC5B,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAC9C,CAAC;YACF,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC;YAC3C,MAAM,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACxC,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC;YAC3C,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,wEAAwE;YAC1E,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC7B,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAClE,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC/D,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC3B,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yBAAyB,CAAC,UAAkB;QAC1C,IAAI,UAAU,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,IAAI,2BAA2B,CACnC,4DAA4D,CAC7D,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,MAA6B;IAE7B,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAoB,EAAE;QACxD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,MAAM,KAAK,kBAAkB,IAAI,YAAY,KAAK,cAAc,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,IACE,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;YAC/B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,GAAG,GAAG;YACrD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,GAAG,GAAG;YACzD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAC7B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,GAAG;YAC5C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,GAAG,KAAK,EACzD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM;YACN,MAAM;YACN,YAAY;YACZ,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;YACtC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAC1B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS;QACT,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,aAAa,EAAE,OAAO;QACtB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAC3B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAqB;IAC9C,MAAM,MAAM,GAAsD;QAChE,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,WAAW;QACtC,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,YAAY;QACxC,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,aAAa;QAC1C,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,iBAAiB;QAClD,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,gBAAgB;QAChD,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,iBAAiB;QAClD,CAAC,aAAa,CAAC,gBAAgB,CAAC,EAAE,kBAAkB;QACpD,CAAC,aAAa,CAAC,iBAAiB,CAAC,EAAE,mBAAmB;QACtD,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,aAAa;QAC1C,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,WAAW;KACvC,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC7E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,MAAuB;IACzC,IAAI,MAAM,KAAK,eAAe,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC;IACnD,IAAI,MAAM,KAAK,eAAe,CAAC,gBAAgB;QAAE,OAAO,kBAAkB,CAAC;IAC3E,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAc,EACd,SAAiB;IAEjB,IACE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAC3C,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QACxD,CAAC,CAAC,cAAc,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACpE,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QAC3C,CAAC,CAAC,eAAe,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO;QAC9D,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QAChE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,cAAc,EACzF,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IACE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YACzC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YACtD,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YAClD,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YACtD,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,MAA2B,CAAC;YAC9D,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC;YACnB,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,CAAC;YAC9D,CAAC,CAAC,cAAc,IAAI,IAAI,CAAC;YACzB,CAAC,IAAI,CAAC,YAAY,KAAK,cAAc;gBACnC,IAAI,CAAC,YAAY,KAAK,YAAY;gBAClC,IAAI,CAAC,YAAY,KAAK,YAAY,CAAC;YACrC,CAAC,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;YACxE,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,GAAG,GAAG;YACxF,CAAC,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YAClE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,GAAG;YAClD,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YACtD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,GAAG;YAC7E,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YAC9D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,KAAK,EAClD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,IAAI,IAAI,CAAC,YAAY,KAAK,cAAc,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,YAAY,KAAK,EAAE;YAAE,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,YAAmC;IAC3D,IAAI,YAAY,KAAK,qBAAqB,CAAC,UAAU;QAAE,OAAO,YAAY,CAAC;IAC3E,IAAI,YAAY,KAAK,qBAAqB,CAAC,UAAU;QAAE,OAAO,YAAY,CAAC;IAC3E,IACE,YAAY,KAAK,qBAAqB,CAAC,YAAY;QACnD,YAAY,KAAK,qBAAqB,CAAC,WAAW;QAClD,OAAO,cAAc,CAAC;IACxB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC;QACpE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE,CAAC;YAC1E,IAAgC,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;QACzD,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,EAAE,CAAC;YACxE,IAAgC,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE,CAAC;YAC1E,IAAgC,CAAC,cAAc,CAAC,GAAG,cAAc,CAAC;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,UAAU,GAAG,GAAG,CAAC;IACrB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAW,CAAC;QAC3C,IAAI,SAAS,KAAK,GAAG,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACpD,UAAU,IAAI,IAAI,CAAC;YACnB,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAC7B,UAAU,IAAI,OAAO,CAAC;QACxB,CAAC;aAAM,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAC7B,UAAU,IAAI,MAAM,CAAC;QACvB,CAAC;aAAM,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;aAAM,CAAC;YACN,UAAU,IAAI,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,GAAG,UAAU,GAAG,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,6EAA6E,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}

package/dist/src/activity/adapters/claude.d.ts

@@ -0,0 +1,3 @@
+import type { VendorActivityAdapter } from "../types.js";
+export declare const claudeActivityAdapter: VendorActivityAdapter;
+//# sourceMappingURL=claude.d.ts.map

package/dist/src/activity/adapters/claude.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../../../src/activity/adapters/claude.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAGV,qBAAqB,EACtB,MAAM,aAAa,CAAC;AA2GrB,eAAO,MAAM,qBAAqB,EAAE,qBACP,CAAC"}