@phigon/observer 8.0.1

package/dist/src/agent-action-executor.d.ts

@@ -0,0 +1,21 @@
+import { RemoteActionType, type AgentActionCommand, type AgentActionResult } from "./generated/phigon/v1/action_pb.js";
+import type { AgentInventory } from "./generated/phigon/v1/identity_pb.js";
+export type ActionInventoryProvider = () => Promise<AgentInventory>;
+export declare class AgentActionExecutor {
+    #private;
+    constructor(options: {
+        enabled: boolean;
+        commandsEnabled?: boolean;
+        machineID: string;
+        dataDirectory: string;
+        inventory: ActionInventoryProvider;
+    });
+    capabilities(): readonly RemoteActionType[];
+    manifest(): {
+        enabled: boolean;
+        executorVersion: string;
+        actions: RemoteActionType[];
+    };
+    execute(command: AgentActionCommand): Promise<AgentActionResult>;
+}
+//# sourceMappingURL=agent-action-executor.d.ts.map

package/dist/src/agent-action-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-action-executor.d.ts","sourceRoot":"","sources":["../../src/agent-action-executor.ts"],"names":[],"mappings":"AAKA,OAAO,EAIL,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACvB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAS3E,MAAM,MAAM,uBAAuB,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;AAEpE,qBAAa,mBAAmB;;gBAUlB,OAAO,EAAE;QACnB,OAAO,EAAE,OAAO,CAAC;QACjB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,uBAAuB,CAAC;KACpC;IAYD,YAAY,IAAI,SAAS,gBAAgB,EAAE;IAI3C,QAAQ;;;;;IAQF,OAAO,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAgIvE"}

package/dist/src/agent-action-executor.js

@@ -0,0 +1,248 @@
+import { createHash } from "node:crypto";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { create, toBinary } from "@bufbuild/protobuf";
+import { timestampDate, timestampFromDate } from "@bufbuild/protobuf/wkt";
+import { AgentActionResultSchema, AgentActionCommandSchema, RemoteActionResultState, RemoteActionType, } from "./generated/phigon/v1/action_pb.js";
+import { AgentState } from "./generated/phigon/v1/common_pb.js";
+import { requestWindowsGracefulStop } from "./windows-process.js";
+import { killVerifiedWindowsProcess } from "./guardian-native.js";
+import { MachineCommandExecutor, machineActionTypes } from "./machine-command-executor.js";
+import { atomicReplace } from "./atomic-replace.js";
+const executorVersion = "observer-agent-actions-v2";
+const receiptLimit = 256;
+export class AgentActionExecutor {
+    #enabled;
+    #machineID;
+    #inventory;
+    #receipts;
+    #commands;
+    #commandsEnabled;
+    #queue = Promise.resolve();
+    #claimsDirectory;
+    constructor(options) {
+        this.#enabled = options.enabled;
+        this.#machineID = options.machineID;
+        this.#inventory = options.inventory;
+        this.#commandsEnabled = options.commandsEnabled ?? false;
+        this.#claimsDirectory = join(options.dataDirectory, "process-operation-claims");
+        this.#commands = new MachineCommandExecutor({ enabled: this.#commandsEnabled, machineID: options.machineID, dataDirectory: options.dataDirectory });
+        this.#receipts = new ActionReceiptStore(join(options.dataDirectory, "agent-action-receipts.json"));
+    }
+    capabilities() {
+        return [...(this.#enabled ? [RemoteActionType.STOP_AGENT, RemoteActionType.KILL_AGENT] : []), ...(this.#commandsEnabled ? machineActionTypes : [])];
+    }
+    manifest() {
+        return {
+            enabled: this.#enabled || this.#commandsEnabled,
+            executorVersion,
+            actions: [...this.capabilities()],
+        };
+    }
+    async execute(command) {
+        if (machineActionTypes.includes(command.action))
+            return this.#commands.execute(command);
+        const task = this.#queue.then(() => this.#executeProcess(command)).catch((error) => create(AgentActionResultSchema, {
+            actionId: command.actionId, idempotencyKey: command.idempotencyKey, machineId: this.#machineID,
+            state: error instanceof Error && error.message === "idempotency_conflict" ? RemoteActionResultState.REJECTED : RemoteActionResultState.FAILED,
+            resultCode: error instanceof Error && error.message === "idempotency_conflict" ? "idempotency_conflict" : "execution_journal_unavailable",
+            detail: "Execution could not be confirmed from its durable record. Check the target state before issuing another request.",
+            observedAt: timestampFromDate(new Date()), targetStillRunning: true,
+        }));
+        this.#queue = task;
+        return task;
+    }
+    async #executeProcess(command) {
+        const digest = createHash("sha256").update(toBinary(AgentActionCommandSchema, command)).digest("hex");
+        const base = {
+            actionId: command.actionId,
+            idempotencyKey: command.idempotencyKey,
+            machineId: this.#machineID,
+        };
+        const reject = async (resultCode, detail, targetStillRunning = true, state = RemoteActionResultState.REJECTED) => {
+            const receipt = create(AgentActionResultSchema, {
+                ...base,
+                state,
+                resultCode,
+                detail,
+                observedAt: timestampFromDate(new Date()),
+                targetStillRunning,
+            });
+            await this.#receipts.put(receipt, digest, command.expiresAt ? timestampDate(command.expiresAt).toISOString() : undefined);
+            return receipt;
+        };
+        if (command.machineId !== this.#machineID ||
+            !validUUID(command.actionId) || !validUUID(command.idempotencyKey) ||
+            command.expectedStartedAt === undefined || command.expiresAt === undefined ||
+            command.processId < 1n || command.processId > BigInt(Number.MAX_SAFE_INTEGER) ||
+            ![RemoteActionType.STOP_AGENT, RemoteActionType.KILL_AGENT].includes(command.action)) {
+            return create(AgentActionResultSchema, { ...base, state: RemoteActionResultState.REJECTED, resultCode: "invalid_command", detail: "Command identity or capability validation failed.", observedAt: timestampFromDate(new Date()), targetStillRunning: true });
+        }
+        const cached = await this.#receipts.get(command.idempotencyKey, digest);
+        if (cached !== null)
+            return cached;
+        if (!this.#enabled)
+            return await reject("executor_disabled", "Machine owner has not enabled remote agent actions.");
+        if (!Number.isFinite(timestampDate(command.expiresAt).getTime()) || timestampDate(command.expiresAt).getTime() > Date.now() + 330_000)
+            return await reject("invalid_command", "Command expiry is outside the approved execution window.");
+        if (timestampDate(command.expiresAt).getTime() <= Date.now()) {
+            return await reject("command_expired", "The approved command expired before local execution.", true, RemoteActionResultState.EXPIRED);
+        }
+        const inventory = await this.#inventory();
+        const target = inventory.agents.find((agent) => agent.agentId === command.agentId &&
+            agent.processId === command.processId &&
+            agent.state === AgentState.RUNNING &&
+            agent.startedAt !== undefined &&
+            timestampDate(agent.startedAt).getTime() === timestampDate(command.expectedStartedAt).getTime() &&
+            agent.capabilities.includes("process-instance"));
+        if (target === undefined) {
+            return await reject("stale_target", "The exact observed process lifetime is no longer running.", false);
+        }
+        const pid = Number(command.processId);
+        if (pid === process.pid) {
+            return await reject("self_target_rejected", "Observer refuses to terminate its own process.");
+        }
+        if (!processAlive(pid)) {
+            return await reject("target_already_stopped", "The target process is no longer running.", false);
+        }
+        await mkdir(this.#claimsDirectory, { recursive: true, mode: 0o700 });
+        // Exclusive creation also prevents two observer processes from claiming
+        // the same signal. A leftover claim must never trigger another signal.
+        await writeFile(join(this.#claimsDirectory, `${command.idempotencyKey}.claim`), digest, { flag: "wx", mode: 0o600, flush: true });
+        await this.#receipts.put(create(AgentActionResultSchema, {
+            ...base, state: RemoteActionResultState.FAILED, resultCode: "execution_interrupted",
+            detail: "A process signal was claimed without a completion receipt. It will not be repeated automatically.",
+            observedAt: timestampFromDate(new Date()), targetStillRunning: true,
+        }), digest, timestampDate(command.expiresAt).toISOString());
+        try {
+            if (command.action === RemoteActionType.STOP_AGENT &&
+                process.platform === "win32") {
+                await requestWindowsGracefulStop(pid);
+            }
+            else if (process.platform === "win32") {
+                await killVerifiedWindowsProcess(pid, timestampDate(command.expectedStartedAt).toISOString());
+            }
+            else {
+                process.kill(pid, command.action === RemoteActionType.STOP_AGENT ? "SIGTERM" : "SIGKILL");
+            }
+        }
+        catch (error) {
+            return await reject("os_dispatch_failed", safeErrorDetail(error), processAlive(pid), RemoteActionResultState.FAILED);
+        }
+        const stopped = await waitForExit(pid, command.action === RemoteActionType.STOP_AGENT ? 5_000 : 2_000);
+        const receipt = create(AgentActionResultSchema, {
+            ...base,
+            state: stopped
+                ? RemoteActionResultState.SUCCEEDED
+                : RemoteActionResultState.FAILED,
+            resultCode: stopped ? "process_stopped" : "process_still_running",
+            detail: stopped
+                ? "The exact observed process lifetime exited after the approved signal."
+                : "The approved stop request was sent without escalation, but the target still reports running.",
+            observedAt: timestampFromDate(new Date()),
+            targetStillRunning: !stopped,
+        });
+        await this.#receipts.put(receipt, digest, timestampDate(command.expiresAt).toISOString());
+        return receipt;
+    }
+}
+function processAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === "EPERM";
+    }
+}
+async function waitForExit(pid, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        if (!processAlive(pid))
+            return true;
+        await new Promise((resolve) => setTimeout(resolve, 100));
+    }
+    return !processAlive(pid);
+}
+function safeErrorDetail(error) {
+    const code = error instanceof Error && "code" in error
+        ? String(error.code ?? "unknown")
+        : "unknown";
+    return `Operating system rejected the approved process signal (${code.slice(0, 32)}).`;
+}
+function validUUID(value) {
+    return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu.test(value);
+}
+class ActionReceiptStore {
+    #path;
+    constructor(path) {
+        this.#path = path;
+    }
+    async get(idempotencyKey, digest) {
+        const receipts = await this.#load();
+        const receipt = receipts.find((entry) => entry.idempotencyKey === idempotencyKey);
+        if (receipt === undefined)
+            return null;
+        if (receipt.commandDigest !== digest)
+            throw new Error("idempotency_conflict");
+        return create(AgentActionResultSchema, {
+            ...receipt,
+            observedAt: timestampFromDate(new Date(receipt.observedAt)),
+        });
+    }
+    async put(receipt, commandDigest, expiresAt) {
+        const observedAt = receipt.observedAt === undefined
+            ? new Date().toISOString()
+            : timestampDate(receipt.observedAt).toISOString();
+        const receipts = (await this.#load())
+            .filter((entry) => entry.idempotencyKey !== receipt.idempotencyKey &&
+            (entry.expiresAt ? Date.parse(entry.expiresAt) : Date.parse(entry.observedAt) + 600_000) > Date.now());
+        if (receipts.length >= receiptLimit)
+            throw new Error("Execution journal capacity reached");
+        receipts.push({
+            commandDigest, ...(expiresAt ? { expiresAt } : {}),
+            actionId: receipt.actionId,
+            idempotencyKey: receipt.idempotencyKey,
+            machineId: receipt.machineId,
+            state: receipt.state,
+            resultCode: receipt.resultCode,
+            detail: receipt.detail,
+            observedAt,
+            targetStillRunning: receipt.targetStillRunning,
+        });
+        const bounded = receipts.slice(-receiptLimit);
+        await mkdir(dirname(this.#path), { recursive: true, mode: 0o700 });
+        const temporary = `${this.#path}.${createHash("sha256").update(JSON.stringify(bounded)).digest("hex").slice(0, 12)}.tmp`;
+        await writeFile(temporary, `${JSON.stringify(bounded)}\n`, { encoding: "utf8", mode: 0o600, flush: true });
+        await atomicReplace(temporary, this.#path);
+    }
+    async #load() {
+        try {
+            const value = JSON.parse(await readFile(this.#path, "utf8"));
+            if (!Array.isArray(value) || value.length > receiptLimit || !value.every(validStoredReceipt))
+                throw new Error("Invalid execution journal");
+            return value;
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return [];
+            throw error;
+        }
+    }
+}
+function validStoredReceipt(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const record = value;
+    return (record["commandDigest"] === undefined || typeof record["commandDigest"] === "string" && /^[0-9a-f]{64}$/u.test(record["commandDigest"])) &&
+        (record["expiresAt"] === undefined || typeof record["expiresAt"] === "string" && Number.isFinite(Date.parse(record["expiresAt"]))) &&
+        typeof record["actionId"] === "string" && validUUID(record["actionId"]) &&
+        typeof record["idempotencyKey"] === "string" && validUUID(record["idempotencyKey"]) &&
+        typeof record["machineId"] === "string" && validUUID(record["machineId"]) &&
+        typeof record["state"] === "number" &&
+        typeof record["resultCode"] === "string" && record["resultCode"].length <= 64 &&
+        typeof record["detail"] === "string" && record["detail"].length <= 256 &&
+        typeof record["observedAt"] === "string" && Number.isFinite(Date.parse(record["observedAt"])) &&
+        typeof record["targetStillRunning"] === "boolean";
+}
+//# sourceMappingURL=agent-action-executor.js.map

package/dist/src/agent-action-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-action-executor.js","sourceRoot":"","sources":["../../src/agent-action-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,GAGjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAEhE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAC3F,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,eAAe,GAAG,2BAA2B,CAAC;AACpD,MAAM,YAAY,GAAG,GAAG,CAAC;AAIzB,MAAM,OAAO,mBAAmB;IACrB,QAAQ,CAAU;IAClB,UAAU,CAAS;IACnB,UAAU,CAA0B;IACpC,SAAS,CAAqB;IAC9B,SAAS,CAAyB;IAClC,gBAAgB,CAAU;IACnC,MAAM,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IACpC,gBAAgB,CAAS;IAElC,YAAY,OAMX;QACC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC;QACzD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAC;QAChF,IAAI,CAAC,SAAS,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;QACpJ,IAAI,CAAC,SAAS,GAAG,IAAI,kBAAkB,CACrC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAC1D,CAAC;IACJ,CAAC;IAED,YAAY;QACV,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,UAAU,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtJ,CAAC;IAED,QAAQ;QACN,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,gBAAgB;YAC/C,eAAe;YACf,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;SAClC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA2B;QACvC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,uBAAuB,EAAE;YAC3H,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU;YAC9F,KAAK,EAAE,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,sBAAsB,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM;YAC7I,UAAU,EAAE,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,+BAA+B;YACzI,MAAM,EAAE,kHAAkH;YAC1H,UAAU,EAAE,iBAAiB,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,kBAAkB,EAAE,IAAI;SACpE,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAA2B;QAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEtG,MAAM,IAAI,GAAG;YACX,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,SAAS,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,EAClB,UAAkB,EAClB,MAAc,EACd,kBAAkB,GAAG,IAAI,EACzB,KAAK,GAAG,uBAAuB,CAAC,QAAQ,EACxC,EAAE;YACF,MAAM,OAAO,GAAG,MAAM,CAAC,uBAAuB,EAAE;gBAC9C,GAAG,IAAI;gBACP,KAAK;gBACL,UAAU;gBACV,MAAM;gBACN,UAAU,EAAE,iBAAiB,CAAC,IAAI,IAAI,EAAE,CAAC;gBACzC,kBAAkB;aACnB,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC1H,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;QAEF,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,UAAU;YACvC,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC;YAClE,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YAC1E,OAAO,CAAC,SAAS,GAAG,EAAE,IAAI,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAC7E,CAAC,CAAC,gBAAgB,CAAC,UAAU,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACvF,OAAO,MAAM,CAAC,uBAAuB,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,uBAAuB,CAAC,QAAQ,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,EAAE,mDAAmD,EAAE,UAAU,EAAE,iBAAiB,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;QAChQ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACxE,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,MAAM,MAAM,CAAC,mBAAmB,EAAE,qDAAqD,CAAC,CAAC;QACpH,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAAE,OAAO,MAAM,MAAM,CAAC,iBAAiB,EAAE,0DAA0D,CAAC,CAAC;QAC1O,IAAI,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC7D,OAAO,MAAM,MAAM,CACjB,iBAAiB,EACjB,sDAAsD,EACtD,IAAI,EACJ,uBAAuB,CAAC,OAAO,CAChC,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7C,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;YACjC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;YACrC,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC,OAAO;YAClC,KAAK,CAAC,SAAS,KAAK,SAAS;YAC7B,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,KAAK,aAAa,CAAC,OAAO,CAAC,iBAAkB,CAAC,CAAC,OAAO,EAAE;YAChG,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAChD,CAAC;QACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,MAAM,CAAC,cAAc,EAAE,2DAA2D,EAAE,KAAK,CAAC,CAAC;QAC1G,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;YACxB,OAAO,MAAM,MAAM,CAAC,sBAAsB,EAAE,gDAAgD,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,MAAM,MAAM,CAAC,wBAAwB,EAAE,0CAA0C,EAAE,KAAK,CAAC,CAAC;QACnG,CAAC;QAED,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,OAAO,CAAC,cAAc,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClI,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,uBAAuB,EAAE;YACvD,GAAG,IAAI,EAAE,KAAK,EAAE,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,uBAAuB;YACnF,MAAM,EAAE,mGAAmG;YAC3G,UAAU,EAAE,iBAAiB,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,kBAAkB,EAAE,IAAI;SACpE,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC;YACH,IACE,OAAO,CAAC,MAAM,KAAK,gBAAgB,CAAC,UAAU;gBAC9C,OAAO,CAAC,QAAQ,KAAK,OAAO,EAC5B,CAAC;gBACD,MAAM,0BAA0B,CAAC,GAAG,CAAC,CAAC;YACxC,CAAC;iBAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACxC,MAAM,0BAA0B,CAAC,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAChG,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CACV,GAAG,EACH,OAAO,CAAC,MAAM,KAAK,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CACvE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,MAAM,CACjB,oBAAoB,EACpB,eAAe,CAAC,KAAK,CAAC,EACtB,YAAY,CAAC,GAAG,CAAC,EACjB,uBAAuB,CAAC,MAAM,CAC/B,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,KAAK,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvG,MAAM,OAAO,GAAG,MAAM,CAAC,uBAAuB,EAAE;YAC9C,GAAG,IAAI;YACP,KAAK,EAAE,OAAO;gBACZ,CAAC,CAAC,uBAAuB,CAAC,SAAS;gBACnC,CAAC,CAAC,uBAAuB,CAAC,MAAM;YAClC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,uBAAuB;YACjE,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,uEAAuE;gBACzE,CAAC,CAAC,8FAA8F;YAClG,UAAU,EAAE,iBAAiB,CAAC,IAAI,IAAI,EAAE,CAAC;YACzC,kBAAkB,EAAE,CAAC,OAAO;SAC7B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1F,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,SAAiB;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK;QACpD,CAAC,CAAC,MAAM,CAAE,KAA+B,CAAC,IAAI,IAAI,SAAS,CAAC;QAC5D,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,0DAA0D,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;AACzF,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,6EAA6E,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnG,CAAC;AAeD,MAAM,kBAAkB;IACb,KAAK,CAAS;IAEvB,YAAY,IAAY;QACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,cAAsB,EAAE,MAAc;QAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,KAAK,cAAc,CAAC,CAAC;QAClF,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,OAAO,CAAC,aAAa,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC9E,OAAO,MAAM,CAAC,uBAAuB,EAAE;YACrC,GAAG,OAAO;YACV,UAAU,EAAE,iBAAiB,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAA0B,EAAE,aAAqB,EAAE,SAAkB;QAC7E,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS;YACjD,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC1B,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;aAClC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc;YAChE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3G,IAAI,QAAQ,CAAC,MAAM,IAAI,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC3F,QAAQ,CAAC,IAAI,CAAC;YACZ,aAAa,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU;YACV,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;SAC/C,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC;QACzH,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3G,MAAM,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC3I,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;QAC9I,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAClI,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvE,OAAO,MAAM,CAAC,gBAAgB,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACnF,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ;QACnC,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,IAAI,EAAE;QAC7E,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,IAAI,GAAG;QACtE,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QAC7F,OAAO,MAAM,CAAC,oBAAoB,CAAC,KAAK,SAAS,CAAC;AACtD,CAAC"}

package/dist/src/agentic-guardian.d.ts

@@ -0,0 +1,50 @@
+import type { GuardianIntervention } from "./action-policy.js";
+export type GuardianActionContext = Readonly<{
+    taskId?: string;
+    proposalId?: string;
+    planStepId?: string;
+    userPrompt?: string;
+    agentPlan?: string;
+    justification?: string;
+    expectedEffect?: string;
+    recentActivity?: string;
+}>;
+export type GuardianActionProposal = Readonly<{
+    policyDigest: string;
+    agentId: string;
+    processId?: number;
+    processStartedAt?: string;
+    action: string;
+    resource: string;
+    context: GuardianActionContext;
+}>;
+export type GuardianSemanticDecision = Readonly<{
+    decision: "allow" | "deny" | "require_approval";
+    reason: string;
+    risk: "low" | "medium" | "high" | "critical";
+    confidence: number;
+    matchedContractId?: string;
+    adminContract?: string;
+    intervention: "none" | GuardianIntervention;
+    model: string;
+    cached: boolean;
+    latencyMs: number;
+    approvalId?: string;
+    approvalState?: "pending" | "approved" | "rejected" | "consumed" | "expired";
+    approvalExpiresAt?: string;
+}>;
+export declare class GuardianDecisionUnavailableError extends Error {
+}
+export declare class HTTPGuardianDecisionClient {
+    #private;
+    constructor(options: Readonly<{
+        controlPlaneURL: URL;
+        credential: string;
+        timeoutMs: number;
+        fetcher?: typeof fetch;
+    }>);
+    decide(proposal: GuardianActionProposal, signal?: AbortSignal): Promise<GuardianSemanticDecision>;
+}
+export declare function readGuardianActionContext(path: string | undefined): Promise<GuardianActionContext>;
+export declare function semanticDecision(value: unknown, observedLatencyMs: number): GuardianSemanticDecision;
+//# sourceMappingURL=agentic-guardian.d.ts.map

package/dist/src/agentic-guardian.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentic-guardian.d.ts","sourceRoot":"","sources":["../../src/agentic-guardian.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAI/D,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,qBAAqB,CAAC;CAChC,CAAC,CAAC;AAEH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAC;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,GAAG,oBAAoB,CAAC;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IAC7E,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC,CAAC;AAEH,qBAAa,gCAAiC,SAAQ,KAAK;CAAG;AAE9D,qBAAa,0BAA0B;;gBAMzB,OAAO,EAAE,QAAQ,CAAC;QAC5B,eAAe,EAAE,GAAG,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;KACxB,CAAC;IAOI,MAAM,CACV,QAAQ,EAAE,sBAAsB,EAChC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,wBAAwB,CAAC;CA+DrC;AAED,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,MAAM,GAAG,SAAS,GACvB,OAAO,CAAC,qBAAqB,CAAC,CAuChC;AAgBD,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,OAAO,EACd,iBAAiB,EAAE,MAAM,GACxB,wBAAwB,CAwH1B"}

package/dist/src/agentic-guardian.js

@@ -0,0 +1,220 @@
+import { readFile } from "node:fs/promises";
+const maxResponseBytes = 64 << 10;
+export class GuardianDecisionUnavailableError extends Error {
+}
+export class HTTPGuardianDecisionClient {
+    #controlPlaneURL;
+    #credential;
+    #timeoutMs;
+    #fetch;
+    constructor(options) {
+        this.#controlPlaneURL = options.controlPlaneURL;
+        this.#credential = options.credential;
+        this.#timeoutMs = options.timeoutMs;
+        this.#fetch = options.fetcher ?? fetch;
+    }
+    async decide(proposal, signal) {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), this.#timeoutMs);
+        const started = performance.now();
+        try {
+            const endpoint = new URL("/v1/machine/guardian/decisions", this.#controlPlaneURL);
+            const response = await this.#fetch(endpoint, {
+                method: "POST",
+                headers: {
+                    Authorization: `Bearer ${this.#credential}`,
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify({
+                    policy_digest: proposal.policyDigest,
+                    agent_id: proposal.agentId,
+                    process_id: proposal.processId ?? 0,
+                    process_started_at: proposal.processStartedAt ?? "",
+                    action: proposal.action,
+                    resource: proposal.resource,
+                    context: {
+                        task_id: proposal.context.taskId ?? "",
+                        proposal_id: proposal.context.proposalId ?? "",
+                        plan_step_id: proposal.context.planStepId ?? "",
+                        user_prompt: proposal.context.userPrompt ?? "",
+                        agent_plan: proposal.context.agentPlan ?? "",
+                        justification: proposal.context.justification ?? "",
+                        expected_effect: proposal.context.expectedEffect ?? "",
+                        recent_activity: proposal.context.recentActivity ?? "",
+                    },
+                }),
+                signal: signal === undefined ? controller.signal : AbortSignal.any([controller.signal, signal]),
+            });
+            const raw = await response.text();
+            if (Buffer.byteLength(raw, "utf8") > maxResponseBytes) {
+                throw new GuardianDecisionUnavailableError("Guardian decision response was too large.");
+            }
+            if (!response.ok) {
+                throw new GuardianDecisionUnavailableError(`Guardian decision service returned ${response.status}.`);
+            }
+            let value;
+            try {
+                value = JSON.parse(raw);
+            }
+            catch {
+                throw new GuardianDecisionUnavailableError("Guardian decision response was invalid.");
+            }
+            return semanticDecision(value, Math.max(0, Math.round(performance.now() - started)));
+        }
+        catch (error) {
+            if (error instanceof GuardianDecisionUnavailableError)
+                throw error;
+            throw new GuardianDecisionUnavailableError("Guardian semantic decision service was unavailable.");
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+}
+export async function readGuardianActionContext(path) {
+    if (path === undefined)
+        return Object.freeze({});
+    const raw = await readFile(path);
+    if (raw.byteLength > 16 << 10) {
+        throw new Error("Guardian context file must not exceed 16 KiB.");
+    }
+    let value;
+    try {
+        value = JSON.parse(raw.toString("utf8"));
+    }
+    catch {
+        throw new Error("Guardian context file must contain valid UTF-8 JSON.");
+    }
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw new Error("Guardian context file must contain a JSON object.");
+    }
+    const record = value;
+    const allowed = new Set([
+        "task_id",
+        "proposal_id",
+        "plan_step_id",
+        "user_prompt",
+        "agent_plan",
+        "justification",
+        "expected_effect",
+        "recent_activity",
+    ]);
+    if (Object.keys(record).some((key) => !allowed.has(key))) {
+        throw new Error("Guardian context file contains an unsupported field.");
+    }
+    return Object.freeze({
+        ...optionalContext(record, "task_id", "taskId", 128),
+        ...optionalContext(record, "proposal_id", "proposalId", 128),
+        ...optionalContext(record, "plan_step_id", "planStepId", 128),
+        ...optionalContext(record, "user_prompt", "userPrompt", 2_000),
+        ...optionalContext(record, "agent_plan", "agentPlan", 2_000),
+        ...optionalContext(record, "justification", "justification", 1_000),
+        ...optionalContext(record, "expected_effect", "expectedEffect", 1_000),
+        ...optionalContext(record, "recent_activity", "recentActivity", 2_000),
+    });
+}
+function optionalContext(record, source, target, maximum) {
+    const value = record[source];
+    if (value === undefined || value === "")
+        return {};
+    if (typeof value !== "string" || value.length > maximum || /[\u0000]/u.test(value)) {
+        throw new Error(`Guardian context ${source} is invalid.`);
+    }
+    return { [target]: value };
+}
+export function semanticDecision(value, observedLatencyMs) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw new GuardianDecisionUnavailableError("Guardian decision response was invalid.");
+    }
+    const record = value;
+    const decision = record["decision"];
+    const risk = record["risk"];
+    const reason = record["reason"];
+    const confidence = record["confidence"];
+    const contractID = record["matched_contract_id"];
+    const adminContract = record["admin_contract"];
+    const model = record["model"];
+    const intervention = record["intervention"];
+    const approvalID = record["approval_id"];
+    const approvalState = record["approval_state"];
+    const approvalExpiresAt = record["approval_expires_at"];
+    if ((decision !== "allow" && decision !== "deny" && decision !== "require_approval") ||
+        (risk !== "low" && risk !== "medium" && risk !== "high" && risk !== "critical") ||
+        typeof reason !== "string" || reason.trim().length < 1 || reason.length > 256 ||
+        typeof confidence !== "number" || !Number.isFinite(confidence) || confidence < 0 || confidence > 1 ||
+        typeof contractID !== "string" || contractID.length > 128 ||
+        (adminContract !== undefined &&
+            (typeof adminContract !== "string" || adminContract.trim().length < 1 || adminContract.length > 2_000)) ||
+        typeof model !== "string" || !/^[a-z0-9][a-z0-9._-]{0,127}$/iu.test(model) ||
+        (intervention !== "none" && intervention !== "block_action" &&
+            intervention !== "stop_agent" && intervention !== "kill_agent") ||
+        typeof record["cached"] !== "boolean") {
+        throw new GuardianDecisionUnavailableError("Guardian decision response was invalid.");
+    }
+    if (approvalID !== undefined &&
+        (typeof approvalID !== "string" ||
+            !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu.test(approvalID))) {
+        throw new GuardianDecisionUnavailableError("Guardian approval ID was invalid.");
+    }
+    if (approvalState !== undefined && approvalState !== "pending" &&
+        approvalState !== "approved" && approvalState !== "rejected" &&
+        approvalState !== "consumed" && approvalState !== "expired") {
+        throw new GuardianDecisionUnavailableError("Guardian approval state was invalid.");
+    }
+    if (approvalExpiresAt !== undefined &&
+        (typeof approvalExpiresAt !== "string" || !Number.isFinite(Date.parse(approvalExpiresAt)))) {
+        throw new GuardianDecisionUnavailableError("Guardian approval expiry was invalid.");
+    }
+    const hasCompleteApproval = typeof approvalID === "string" &&
+        typeof approvalState === "string" && typeof approvalExpiresAt === "string";
+    if ((decision === "require_approval" &&
+        (!hasCompleteApproval || approvalState === "approved")) ||
+        (decision === "deny" &&
+            (approvalID !== undefined || approvalState !== undefined || approvalExpiresAt !== undefined)) ||
+        (decision === "allow" && approvalID !== undefined &&
+            (!hasCompleteApproval || approvalState !== "consumed" || model !== "admin-approval")) ||
+        ((approvalID === undefined) !== (approvalState === undefined) ||
+            (approvalID === undefined) !== (approvalExpiresAt === undefined))) {
+        throw new GuardianDecisionUnavailableError("Guardian approval response was inconsistent.");
+    }
+    if (decision !== "allow" &&
+        (contractID === "" || typeof adminContract !== "string")) {
+        throw new GuardianDecisionUnavailableError("Guardian blocked an action without a verifiable administrator contract.");
+    }
+    if ((decision === "allow" && intervention !== "none") ||
+        (decision === "deny" && intervention === "none") ||
+        (decision === "require_approval" && intervention !== "block_action")) {
+        throw new GuardianDecisionUnavailableError("Guardian response contained an invalid enforcement decision.");
+    }
+    if (decision === "allow" && approvalID === undefined &&
+        (contractID !== "" || adminContract !== undefined)) {
+        throw new GuardianDecisionUnavailableError("Guardian allow response claimed an unrelated administrator contract.");
+    }
+    if (decision === "allow" && approvalID !== undefined &&
+        (contractID === "" || typeof adminContract !== "string")) {
+        throw new GuardianDecisionUnavailableError("Guardian approval response omitted its authoritative administrator contract.");
+    }
+    return Object.freeze({
+        decision,
+        reason: reason.trim(),
+        risk,
+        confidence,
+        intervention,
+        ...(contractID === ""
+            ? {}
+            : {
+                matchedContractId: contractID,
+                adminContract: adminContract.trim(),
+            }),
+        model,
+        cached: record["cached"],
+        latencyMs: typeof record["latency_ms"] === "number" &&
+            Number.isSafeInteger(record["latency_ms"]) && record["latency_ms"] >= 0
+            ? record["latency_ms"]
+            : observedLatencyMs,
+        ...(approvalID === undefined ? {} : { approvalId: approvalID }),
+        ...(approvalState === undefined ? {} : { approvalState }),
+        ...(approvalExpiresAt === undefined ? {} : { approvalExpiresAt }),
+    });
+}
+//# sourceMappingURL=agentic-guardian.js.map

package/dist/src/agentic-guardian.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentic-guardian.js","sourceRoot":"","sources":["../../src/agentic-guardian.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAG5C,MAAM,gBAAgB,GAAG,EAAE,IAAI,EAAE,CAAC;AAuClC,MAAM,OAAO,gCAAiC,SAAQ,KAAK;CAAG;AAE9D,MAAM,OAAO,0BAA0B;IAC5B,gBAAgB,CAAM;IACtB,WAAW,CAAS;IACpB,UAAU,CAAS;IACnB,MAAM,CAAe;IAE9B,YAAY,OAKV;QACA,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,MAAM,CACV,QAAgC,EAChC,MAAoB;QAEpB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,gCAAgC,EAChC,IAAI,CAAC,gBAAgB,CACtB,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAC3C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE;oBAC3C,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,aAAa,EAAE,QAAQ,CAAC,YAAY;oBACpC,QAAQ,EAAE,QAAQ,CAAC,OAAO;oBAC1B,UAAU,EAAE,QAAQ,CAAC,SAAS,IAAI,CAAC;oBACnC,kBAAkB,EAAE,QAAQ,CAAC,gBAAgB,IAAI,EAAE;oBACnD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,OAAO,EAAE;wBACP,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE;wBACtC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE;wBAC9C,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE;wBAC/C,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE;wBAC9C,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE;wBAC5C,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE;wBACnD,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE;wBACtD,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE;qBACvD;iBACF,CAAC;gBACF,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aAChG,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,gBAAgB,EAAE,CAAC;gBACtD,MAAM,IAAI,gCAAgC,CAAC,2CAA2C,CAAC,CAAC;YAC1F,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,gCAAgC,CACxC,sCAAsC,QAAQ,CAAC,MAAM,GAAG,CACzD,CAAC;YACJ,CAAC;YACD,IAAI,KAAc,CAAC;YACnB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,gCAAgC,CAAC,yCAAyC,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,gBAAgB,CACrB,KAAK,EACL,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CACrD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gCAAgC;gBAAE,MAAM,KAAK,CAAC;YACnE,MAAM,IAAI,gCAAgC,CACxC,qDAAqD,CACtD,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAwB;IAExB,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,GAAG,CAAC,UAAU,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,SAAS;QACT,aAAa;QACb,cAAc;QACd,aAAa;QACb,YAAY;QACZ,eAAe;QACf,iBAAiB;QACjB,iBAAiB;KAClB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC;QACpD,GAAG,eAAe,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,CAAC;QAC5D,GAAG,eAAe,CAAC,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,GAAG,CAAC;QAC7D,GAAG,eAAe,CAAC,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,CAAC;QAC9D,GAAG,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,CAAC;QAC5D,GAAG,eAAe,CAAC,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,KAAK,CAAC;QACnE,GAAG,eAAe,CAAC,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,KAAK,CAAC;QACtE,GAAG,eAAe,CAAC,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,KAAK,CAAC;KACvE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,MAA+B,EAC/B,MAAc,EACd,MAAmC,EACnC,OAAe;IAEf,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,cAAc,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAc,EACd,iBAAyB;IAEzB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,gCAAgC,CAAC,yCAAyC,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACjD,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC/C,MAAM,iBAAiB,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACxD,IACE,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,kBAAkB,CAAC;QAChF,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU,CAAC;QAC/E,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;QAC7E,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC;QAClG,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG;QACzD,CAAC,aAAa,KAAK,SAAS;YAC1B,CAAC,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;QACzG,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1E,CAAC,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,cAAc;YACzD,YAAY,KAAK,YAAY,IAAI,YAAY,KAAK,YAAY,CAAC;QACjE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,SAAS,EACrC,CAAC;QACD,MAAM,IAAI,gCAAgC,CAAC,yCAAyC,CAAC,CAAC;IACxF,CAAC;IACD,IACE,UAAU,KAAK,SAAS;QACxB,CAAC,OAAO,UAAU,KAAK,QAAQ;YAC7B,CAAC,6EAA6E,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAClG,CAAC;QACD,MAAM,IAAI,gCAAgC,CAAC,mCAAmC,CAAC,CAAC;IAClF,CAAC;IACD,IACE,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS;QAC1D,aAAa,KAAK,UAAU,IAAI,aAAa,KAAK,UAAU;QAC5D,aAAa,KAAK,UAAU,IAAI,aAAa,KAAK,SAAS,EAC3D,CAAC;QACD,MAAM,IAAI,gCAAgC,CAAC,sCAAsC,CAAC,CAAC;IACrF,CAAC;IACD,IACE,iBAAiB,KAAK,SAAS;QAC/B,CAAC,OAAO,iBAAiB,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAC1F,CAAC;QACD,MAAM,IAAI,gCAAgC,CAAC,uCAAuC,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,mBAAmB,GAAG,OAAO,UAAU,KAAK,QAAQ;QACxD,OAAO,aAAa,KAAK,QAAQ,IAAI,OAAO,iBAAiB,KAAK,QAAQ,CAAC;IAC7E,IACE,CAAC,QAAQ,KAAK,kBAAkB;QAC9B,CAAC,CAAC,mBAAmB,IAAI,aAAa,KAAK,UAAU,CAAC,CAAC;QACzD,CAAC,QAAQ,KAAK,MAAM;YAClB,CAAC,UAAU,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,IAAI,iBAAiB,KAAK,SAAS,CAAC,CAAC;QAC/F,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,KAAK,SAAS;YAC/C,CAAC,CAAC,mBAAmB,IAAI,aAAa,KAAK,UAAU,IAAI,KAAK,KAAK,gBAAgB,CAAC,CAAC;QACvF,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC;YAC3D,CAAC,UAAU,KAAK,SAAS,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,EACnE,CAAC;QACD,MAAM,IAAI,gCAAgC,CAAC,8CAA8C,CAAC,CAAC;IAC7F,CAAC;IACD,IACE,QAAQ,KAAK,OAAO;QACpB,CAAC,UAAU,KAAK,EAAE,IAAI,OAAO,aAAa,KAAK,QAAQ,CAAC,EACxD,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,IACE,CAAC,QAAQ,KAAK,OAAO,IAAI,YAAY,KAAK,MAAM,CAAC;QACjD,CAAC,QAAQ,KAAK,MAAM,IAAI,YAAY,KAAK,MAAM,CAAC;QAChD,CAAC,QAAQ,KAAK,kBAAkB,IAAI,YAAY,KAAK,cAAc,CAAC,EACpE,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IACE,QAAQ,KAAK,OAAO,IAAI,UAAU,KAAK,SAAS;QAChD,CAAC,UAAU,KAAK,EAAE,IAAI,aAAa,KAAK,SAAS,CAAC,EAClD,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,IACE,QAAQ,KAAK,OAAO,IAAI,UAAU,KAAK,SAAS;QAChD,CAAC,UAAU,KAAK,EAAE,IAAI,OAAO,aAAa,KAAK,QAAQ,CAAC,EACxD,CAAC;QACD,MAAM,IAAI,gCAAgC,CACxC,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ;QACR,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;QACrB,IAAI;QACJ,UAAU;QACV,YAAY;QACZ,GAAG,CAAC,UAAU,KAAK,EAAE;YACnB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,iBAAiB,EAAE,UAAU;gBAC7B,aAAa,EAAG,aAAwB,CAAC,IAAI,EAAE;aAChD,CAAC;QACN,KAAK;QACL,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC;QACxB,SAAS,EAAE,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ;YAC/C,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC;YACzE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;YACtB,CAAC,CAAC,iBAAiB;QACrB,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;QAC/D,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;QACzD,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC;KAClE,CAAC,CAAC;AACL,CAAC"}

package/dist/src/atomic-replace.d.ts

@@ -0,0 +1,4 @@
+import { rename } from "node:fs/promises";
+/** Preserve both files while Windows readers or scanners briefly hold a lock. */
+export declare function atomicReplace(temporary: string, destination: string, replace?: typeof rename): Promise<void>;
+//# sourceMappingURL=atomic-replace.d.ts.map

package/dist/src/atomic-replace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-replace.d.ts","sourceRoot":"","sources":["../../src/atomic-replace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAG1C,iFAAiF;AACjF,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,OAAO,MAAe,GAC9B,OAAO,CAAC,IAAI,CAAC,CAWf"}

package/dist/src/atomic-replace.js

@@ -0,0 +1,18 @@
+import { rename } from "node:fs/promises";
+import { setTimeout as delay } from "node:timers/promises";
+/** Preserve both files while Windows readers or scanners briefly hold a lock. */
+export async function atomicReplace(temporary, destination, replace = rename) {
+    for (let attempt = 0;; attempt++) {
+        try {
+            await replace(temporary, destination);
+            return;
+        }
+        catch (error) {
+            const code = error.code;
+            if (process.platform !== "win32" || attempt >= 5 || !["EPERM", "EACCES", "EBUSY"].includes(code ?? ""))
+                throw error;
+            await delay(20 * 2 ** attempt);
+        }
+    }
+}
+//# sourceMappingURL=atomic-replace.js.map

package/dist/src/atomic-replace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-replace.js","sourceRoot":"","sources":["../../src/atomic-replace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE3D,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,WAAmB,EACnB,UAAyB,MAAM;IAE/B,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAE,MAAM,KAAK,CAAC;YACpH,MAAM,KAAK,CAAC,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/src/cli.d.ts

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import type { Readable } from "node:stream";
+type Output = Readonly<{
+    stdout: (value: string) => void;
+    stderr: (value: string) => void;
+}>;
+export declare function run(argv: readonly string[], environment?: NodeJS.ProcessEnv, output?: Output, input?: Readable): Promise<number>;
+export declare function settleObserverTasks(tasks: readonly Promise<void>[], controller: AbortController, fatalError: () => Error | undefined): Promise<void>;
+export declare function isCliEntryPoint(candidate: string | undefined): boolean;
+export {};
+//# sourceMappingURL=cli.d.ts.map