@phigon/observer 8.1.0 → 8.3.0

package/dist/src/generated/phigon/v1/identity_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity_pb.js","sourceRoot":"","sources":["../../../../../src/generated/phigon/v1/identity_pb.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,mFAAmF;AACnF,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAExE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAGvD;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAY,aAAa,CAC3D,QAAQ,CAAC,gpDAAgpD,EAAE,CAAC,8BAA8B,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAkEttD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;AA4E1C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;AAoC1C;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;AAqE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"identity_pb.js","sourceRoot":"","sources":["../../../../../src/generated/phigon/v1/identity_pb.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,mFAAmF;AACnF,oBAAoB;AAGpB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAExE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAGvD;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAY,aAAa,CAC3D,QAAQ,CAAC,6sDAA6sD,EAAE,CAAC,8BAA8B,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAkEnxD;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAgC,aAAa,CAC7E,WAAW,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;AA4E1C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA8B,aAAa,CACzE,WAAW,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;AAoC1C;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA+B,aAAa,CAC3E,WAAW,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;AA6E1C;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA0B,aAAa,CACjE,WAAW,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC"}

package/dist/src/guardian-containment.d.ts

@@ -1,5 +1,6 @@
 import type { AgentInventory } from "./generated/phigon/v1/identity_pb.js";
 import type { GuardianIntervention } from "./action-policy.js";
+import { type ProcessTreeControl } from "./process-tree.js";
 export type GuardianContainmentRequest = Readonly<{
     intervention: GuardianIntervention;
     agentId: string;
@@ -12,19 +13,14 @@ export type GuardianContainmentResult = Readonly<{
     detail: string;
     targetStillRunning?: boolean;
 }>;
-type ProcessSignal = "SIGTERM" | "SIGKILL";
 export declare class GuardianContainmentExecutor {
     #private;
     constructor(options: Readonly<{
         enabled: boolean;
         inventory: () => Promise<AgentInventory>;
-        platform?: NodeJS.Platform;
         observerProcessID?: number;
-        signal?: (processID: number, signal: ProcessSignal | 0) => void;
-        sleep?: (milliseconds: number) => Promise<void>;
-        windowsGracefulStop?: (processID: number, startedAt: string) => Promise<void>;
+        processControl?: ProcessTreeControl;
     }>);
     execute(request: GuardianContainmentRequest): Promise<GuardianContainmentResult>;
 }
-export {};
 //# sourceMappingURL=guardian-containment.d.ts.map

package/dist/src/guardian-containment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guardian-containment.d.ts","sourceRoot":"","sources":["../../src/guardian-containment.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAI/D,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAChD,YAAY,EAAE,oBAAoB,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,KAAK,EAAE,eAAe,GAAG,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC,CAAC;AAEH,KAAK,aAAa,GAAG,SAAS,GAAG,SAAS,CAAC;AAE3C,qBAAa,2BAA2B;;gBAU1B,OAAO,EAAE,QAAQ,CAAC;QAC5B,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;QACzC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;QAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,CAAC,KAAK,IAAI,CAAC;QAChE,KAAK,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,mBAAmB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC/E,CAAC;IAcI,OAAO,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAmFvF"}
+{"version":3,"file":"guardian-containment.d.ts","sourceRoot":"","sources":["../../src/guardian-containment.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAGL,KAAK,kBAAkB,EAExB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAChD,YAAY,EAAE,oBAAoB,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,KAAK,EAAE,eAAe,GAAG,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC,CAAC;AAEH,qBAAa,2BAA2B;;gBAM1B,OAAO,EAAE,QAAQ,CAAC;QAC5B,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;QACzC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,cAAc,CAAC,EAAE,kBAAkB,CAAC;KACrC,CAAC;IAOI,OAAO,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAmDvF"}

package/dist/src/guardian-containment.js

@@ -1,26 +1,16 @@
 import { timestampDate } from "@bufbuild/protobuf/wkt";
 import { AgentState } from "./generated/phigon/v1/common_pb.js";
-import { requestWindowsGracefulStop } from "./windows-process.js";
-import { killVerifiedWindowsProcess } from "./guardian-native.js";
+import { defaultProcessTreeControl, describeTreeOutcome, } from "./process-tree.js";
 export class GuardianContainmentExecutor {
     #enabled;
     #inventory;
-    #platform;
     #observerProcessID;
-    #signal;
-    #sleep;
-    #windowsGracefulStop;
-    #nativeKill;
+    #processes;
     constructor(options) {
         this.#enabled = options.enabled;
-        this.#nativeKill = options.signal === undefined && options.platform === undefined;
         this.#inventory = options.inventory;
-        this.#platform = options.platform ?? process.platform;
         this.#observerProcessID = options.observerProcessID ?? process.pid;
-        this.#signal = options.signal ?? ((processID, signal) => process.kill(processID, signal));
-        this.#sleep = options.sleep ?? ((milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)));
-        this.#windowsGracefulStop = options.windowsGracefulStop ??
-            requestWindowsGracefulStop;
+        this.#processes = options.processControl ?? defaultProcessTreeControl();
     }
     async execute(request) {
         if (!["block_action", "stop_agent", "kill_agent"].includes(request.intervention)) {
@@ -54,60 +44,19 @@ export class GuardianContainmentExecutor {
         if (target === undefined) {
             return result("rejected", "stale_target", "The exact discovered agent process lifetime is no longer running.", false);
         }
-        if (!this.#processAlive(processID)) {
-            return result("rejected", "target_already_stopped", "The target process is no longer running.", false);
+        // Same exact-lifetime, whole-tree controller as administrator actions.
+        const graceful = request.intervention === "stop_agent";
+        const outcome = await this.#processes.stop({ processId: processID, startedAt: new Date(expectedStartedAt) }, graceful ? "stop" : "kill").catch(() => ({ outcome: "failed", code: "unknown" }));
+        const receipt = describeTreeOutcome(outcome, graceful);
+        if (receipt.code === "process_stopped") {
+            return result("succeeded", receipt.code, graceful
+                ? "This agent was stopped by Phigon Guardian under administrator policy."
+                : "This agent was force-stopped by Phigon Guardian under administrator policy.", false);
         }
-        try {
-            if (request.intervention === "stop_agent" && this.#platform === "win32") {
-                await this.#windowsGracefulStop(processID, request.expectedStartedAt);
-            }
-            else if (request.intervention === "kill_agent" && this.#platform === "win32" && this.#nativeKill) {
-                await killVerifiedWindowsProcess(processID, request.expectedStartedAt);
-                return result("succeeded", "process_stopped", "This agent was force-stopped by Phigon Guardian under administrator policy.", false);
-            }
-            else {
-                const signal = request.intervention === "stop_agent"
-                    ? "SIGTERM"
-                    : "SIGKILL";
-                this.#signal(processID, signal);
-            }
-        }
-        catch (error) {
-            return result("failed", "os_dispatch_failed", safeSignalFailure(error), this.#processAlive(processID));
-        }
-        const stopped = await this.#waitForExit(processID, request.intervention === "stop_agent" ? 5_000 : 2_000);
-        return stopped
-            ? result("succeeded", "process_stopped", request.intervention === "kill_agent"
-                ? "This agent was force-stopped by Phigon Guardian under administrator policy."
-                : "This agent was stopped by Phigon Guardian under administrator policy.", false)
-            : result("failed", "process_still_running", "The containment request was sent without escalation, but the exact process still reports running.", true);
-    }
-    #processAlive(processID) {
-        try {
-            this.#signal(processID, 0);
-            return true;
-        }
-        catch (error) {
-            return error.code === "EPERM";
-        }
-    }
-    async #waitForExit(processID, timeoutMs) {
-        const attempts = Math.ceil(timeoutMs / 100);
-        for (let attempt = 0; attempt < attempts; attempt += 1) {
-            if (!this.#processAlive(processID))
-                return true;
-            await this.#sleep(100);
-        }
-        return !this.#processAlive(processID);
+        return result(receipt.state, receipt.code, receipt.detail, receipt.targetStillRunning);
     }
 }
 function result(state, code, detail, targetStillRunning) {
     return Object.freeze({ state, code, detail, ...(targetStillRunning === undefined ? {} : { targetStillRunning }) });
 }
-function safeSignalFailure(error) {
-    const code = error instanceof Error && "code" in error
-        ? String(error.code ?? "unknown")
-        : "unknown";
-    return `Operating system rejected the Guardian process signal (${code.slice(0, 32)}).`;
-}
 //# sourceMappingURL=guardian-containment.js.map

package/dist/src/guardian-containment.js.map

@@ -1 +1 @@
-{"version":3,"file":"guardian-containment.js","sourceRoot":"","sources":["../../src/guardian-containment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAGhE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAkBlE,MAAM,OAAO,2BAA2B;IAC7B,QAAQ,CAAU;IAClB,UAAU,CAAgC;IAC1C,SAAS,CAAkB;IAC3B,kBAAkB,CAAS;IAC3B,OAAO,CAAyD;IAChE,MAAM,CAA0C;IAChD,oBAAoB,CAA0D;IAC9E,WAAW,CAAU;IAE9B,YAAY,OAQV;QACA,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC;QAClF,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QACtD,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC;QACnE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CAC/C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAC5D,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,mBAAmB;YACrD,0BAA0B,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAmC;QAC/C,IAAI,CAAC,CAAC,cAAc,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACjF,OAAO,MAAM,CAAC,UAAU,EAAE,sBAAsB,EAAE,4CAA4C,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,KAAK,cAAc,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,eAAe,EAAE,gBAAgB,EAAE,0EAA0E,CAAC,CAAC;QAC/H,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,MAAM,CAAC,UAAU,EAAE,sBAAsB,EAAE,+DAA+D,EAAE,IAAI,CAAC,CAAC;QAC3H,CAAC;QACD,IACE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;YAC7D,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAC5C,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC;YACxE,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACvC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,EACvD,CAAC;YACD,OAAO,MAAM,CAAC,UAAU,EAAE,uBAAuB,EAAE,6EAA6E,EAAE,IAAI,CAAC,CAAC;QAC1I,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAmB,CAAC;QAC9C,IAAI,SAAS,KAAK,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,UAAU,EAAE,sBAAsB,EAAE,qDAAqD,EAAE,IAAI,CAAC,CAAC;QACjH,CAAC;QACD,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,iBAA2B,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7C,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;YACjC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC;YACrC,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC,OAAO;YAClC,KAAK,CAAC,SAAS,KAAK,SAAS;YAC7B,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,KAAK,iBAAiB;YAC9D,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAChD,CAAC;QACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,UAAU,EAAE,cAAc,EAAE,mEAAmE,EAAE,KAAK,CAAC,CAAC;QACxH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,OAAO,MAAM,CAAC,UAAU,EAAE,wBAAwB,EAAE,0CAA0C,EAAE,KAAK,CAAC,CAAC;QACzG,CAAC;QAED,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,YAAY,KAAK,YAAY,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;gBACxE,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACxE,CAAC;iBAAM,IAAI,OAAO,CAAC,YAAY,KAAK,YAAY,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnG,MAAM,0BAA0B,CAAC,SAAS,EAAE,OAAO,CAAC,iBAA2B,CAAC,CAAC;gBACjF,OAAO,MAAM,CAAC,WAAW,EAAE,iBAAiB,EAAE,6EAA6E,EAAE,KAAK,CAAC,CAAC;YACtI,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAkB,OAAO,CAAC,YAAY,KAAK,YAAY;oBACjE,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,QAAQ,EAAE,oBAAoB,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QACzG,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CACrC,SAAS,EACT,OAAO,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CACtD,CAAC;QACF,OAAO,OAAO;YACZ,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,iBAAiB,EAAE,OAAO,CAAC,YAAY,KAAK,YAAY;gBAC5E,CAAC,CAAC,6EAA6E;gBAC/E,CAAC,CAAC,uEAAuE,EAAE,KAAK,CAAC;YACnF,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,uBAAuB,EAAE,mGAAmG,EAAE,IAAI,CAAC,CAAC;IAC3J,CAAC;IAED,aAAa,CAAC,SAAiB;QAC7B,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,SAAiB;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;QAC5C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC;YAChD,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;CACF;AAED,SAAS,MAAM,CACb,KAAyC,EACzC,IAAY,EACZ,MAAc,EACd,kBAA4B;IAE5B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC,CAAC;AACrH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK;QACpD,CAAC,CAAC,MAAM,CAAE,KAA+B,CAAC,IAAI,IAAI,SAAS,CAAC;QAC5D,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,0DAA0D,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;AACzF,CAAC"}
+{"version":3,"file":"guardian-containment.js","sourceRoot":"","sources":["../../src/guardian-containment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAGhE,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GAGpB,MAAM,mBAAmB,CAAC;AAgB3B,MAAM,OAAO,2BAA2B;IAC7B,QAAQ,CAAU;IAClB,UAAU,CAAgC;IAC1C,kBAAkB,CAAS;IAC3B,UAAU,CAAqB;IAExC,YAAY,OAKV;QACA,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC;QACnE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,cAAc,IAAI,yBAAyB,EAAE,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAmC;QAC/C,IAAI,CAAC,CAAC,cAAc,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACjF,OAAO,MAAM,CAAC,UAAU,EAAE,sBAAsB,EAAE,4CAA4C,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,KAAK,cAAc,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,eAAe,EAAE,gBAAgB,EAAE,0EAA0E,CAAC,CAAC;QAC/H,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,MAAM,CAAC,UAAU,EAAE,sBAAsB,EAAE,+DAA+D,EAAE,IAAI,CAAC,CAAC;QAC3H,CAAC;QACD,IACE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;YAC7D,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAC5C,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC;YACxE,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACvC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,EACvD,CAAC;YACD,OAAO,MAAM,CAAC,UAAU,EAAE,uBAAuB,EAAE,6EAA6E,EAAE,IAAI,CAAC,CAAC;QAC1I,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAmB,CAAC;QAC9C,IAAI,SAAS,KAAK,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,UAAU,EAAE,sBAAsB,EAAE,qDAAqD,EAAE,IAAI,CAAC,CAAC;QACjH,CAAC;QACD,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,iBAA2B,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7C,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;YACjC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC;YACrC,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC,OAAO;YAClC,KAAK,CAAC,SAAS,KAAK,SAAS;YAC7B,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,KAAK,iBAAiB;YAC9D,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAChD,CAAC;QACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,UAAU,EAAE,cAAc,EAAE,mEAAmE,EAAE,KAAK,CAAC,CAAC;QACxH,CAAC;QAED,uEAAuE;QACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,KAAK,YAAY,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CACxC,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAChE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAC3B,CAAC,KAAK,CAAC,GAAoB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACvC,OAAO,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ;gBAC/C,CAAC,CAAC,uEAAuE;gBACzE,CAAC,CAAC,6EAA6E,EAAE,KAAK,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACzF,CAAC;CACF;AAED,SAAS,MAAM,CACb,KAAyC,EACzC,IAAY,EACZ,MAAc,EACd,kBAA4B;IAE5B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC,CAAC;AACrH,CAAC"}

package/dist/src/guardian-decision-journal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guardian-decision-journal.d.ts","sourceRoot":"","sources":["../../src/guardian-decision-journal.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAE3E,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC,CAAC;AAEH,qBAAa,uBAAuB;;gBAGtB,aAAa,EAAE,MAAM;IAI3B,MAAM,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;CA4C5D"}
+{"version":3,"file":"guardian-decision-journal.d.ts","sourceRoot":"","sources":["../../src/guardian-decision-journal.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAEnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAE3E,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC,CAAC;AAEH,qBAAa,uBAAuB;;gBAGtB,aAAa,EAAE,MAAM;IAI3B,MAAM,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;CA+B5D"}

package/dist/src/guardian-decision-journal.js

@@ -1,18 +1,11 @@
 import { randomUUID } from "node:crypto";
-import { chmod, mkdir, open } from "node:fs/promises";
-import { join } from "node:path";
+import { SegmentedJournal, guardianDecisionJournal } from "./bridge-journal.js";
 export class GuardianDecisionJournal {
-    #dataDirectory;
+    #journal;
     constructor(dataDirectory) {
-        this.#dataDirectory = dataDirectory;
+        this.#journal = new SegmentedJournal(dataDirectory, guardianDecisionJournal);
     }
     async append(record) {
-        const directory = join(this.#dataDirectory, "bridges", "generic");
-        await mkdir(directory, { recursive: true, mode: 0o700 });
-        await chmod(this.#dataDirectory, 0o700);
-        await chmod(join(this.#dataDirectory, "bridges"), 0o700);
-        await chmod(directory, 0o700);
-        const path = join(directory, "guardian-decisions.jsonl");
         const value = JSON.stringify({
             type: "phigon_guardian_decision",
             decision_id: randomUUID(),
@@ -41,15 +34,7 @@ export class GuardianDecisionJournal {
         if (Buffer.byteLength(value, "utf8") > 32 << 10) {
             throw new Error("Guardian decision record exceeded its storage bound.");
         }
-        const handle = await open(path, "a", 0o600);
-        try {
-            await handle.write(`${value}\n`);
-            await handle.sync();
-        }
-        finally {
-            await handle.close();
-        }
-        await chmod(path, 0o600);
+        await this.#journal.append(value, { sync: true });
     }
 }
 //# sourceMappingURL=guardian-decision-journal.js.map

package/dist/src/guardian-decision-journal.js.map

@@ -1 +1 @@
-{"version":3,"file":"guardian-decision-journal.js","sourceRoot":"","sources":["../../src/guardian-decision-journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA0BjC,MAAM,OAAO,uBAAuB;IACzB,cAAc,CAAS;IAEhC,YAAY,aAAqB;QAC/B,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA8B;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAClE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3B,IAAI,EAAE,0BAA0B;YAChC,WAAW,EAAE,UAAU,EAAE;YACzB,iBAAiB,EAAE,iBAAiB;YACpC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,YAAY,MAAM,CAAC,OAAO,IAAI,SAAS,EAAE;YAC9E,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,gBAAgB,EAAE,MAAM,CAAC,OAAO;YAChC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,cAAc,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;YAC1C,eAAe,EAAE,MAAM,CAAC,cAAc;YACtC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;YACvB,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YACrC,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,aAAa,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;YACxC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;YACvC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACvC,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;YACpC,cAAc,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;YAC1C,mBAAmB,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE;SACpD,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;YACjC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"guardian-decision-journal.js","sourceRoot":"","sources":["../../src/guardian-decision-journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAyBhF,MAAM,OAAO,uBAAuB;IACzB,QAAQ,CAAmB;IAEpC,YAAY,aAAqB;QAC/B,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA8B;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3B,IAAI,EAAE,0BAA0B;YAChC,WAAW,EAAE,UAAU,EAAE;YACzB,iBAAiB,EAAE,iBAAiB;YACpC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,YAAY,MAAM,CAAC,OAAO,IAAI,SAAS,EAAE;YAC9E,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,gBAAgB,EAAE,MAAM,CAAC,OAAO;YAChC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,cAAc,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;YAC1C,eAAe,EAAE,MAAM,CAAC,cAAc;YACtC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;YACvB,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;YACrC,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,aAAa,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;YACxC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;YACvC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;YACvC,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;YACpC,cAAc,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;YAC1C,mBAAmB,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE;SACpD,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/src/guardian-managed-exec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guardian-managed-exec.d.ts","sourceRoot":"","sources":["../../src/guardian-managed-exec.ts"],"names":[],"mappings":"AAMA,OAAO,EAA2B,KAAK,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAInG,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAEH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC5D,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC;IAC/B,KAAK,CAAC,EAAE,QAAQ,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;KAAE,CAAC,CAAC;IACrG,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA2InC"}
+{"version":3,"file":"guardian-managed-exec.d.ts","sourceRoot":"","sources":["../../src/guardian-managed-exec.ts"],"names":[],"mappings":"AAOA,OAAO,EAA2B,KAAK,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAInG,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAEH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC5D,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC;IAC/B,KAAK,CAAC,EAAE,QAAQ,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;KAAE,CAAC,CAAC;IACrG,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA2InC"}

package/dist/src/guardian-managed-exec.js

@@ -1,7 +1,8 @@
 import { randomUUID } from "node:crypto";
 import { constants } from "node:fs";
-import { chmod, mkdir, open, unlink } from "node:fs/promises";
-import { join, resolve as resolvePath } from "node:path";
+import { open, unlink } from "node:fs/promises";
+import { resolve as resolvePath } from "node:path";
+import { SegmentedJournal, managedCommandJournal } from "./bridge-journal.js";
 import { guardianRunnerPath } from "./guardian-native.js";
 import { access } from "node:fs/promises";
 import { verifyExecutionManifest } from "./guardian-execution-manifest.js";
@@ -203,17 +204,11 @@ async function waitForTerminal(pending, signal) {
     }
 }
 class ManagedCommandJournal {
-    #dataDirectory;
+    #journal;
     constructor(dataDirectory) {
-        this.#dataDirectory = dataDirectory;
+        this.#journal = new SegmentedJournal(dataDirectory, managedCommandJournal);
     }
     async append(record) {
-        const directory = join(this.#dataDirectory, "bridges", "generic");
-        await mkdir(directory, { recursive: true, mode: 0o700 });
-        await chmod(this.#dataDirectory, 0o700);
-        await chmod(join(this.#dataDirectory, "bridges"), 0o700);
-        await chmod(directory, 0o700);
-        const path = join(directory, "guardian-managed-commands.jsonl");
         const encoded = JSON.stringify({
             type: "phigon_managed_command",
             timestamp: new Date().toISOString(),
@@ -230,14 +225,7 @@ class ManagedCommandJournal {
         if (Buffer.byteLength(encoded, "utf8") > 96 << 10) {
             throw new Error("Managed command telemetry chunk exceeded 96 KiB.");
         }
-        const handle = await open(path, "a", 0o600);
-        try {
-            await handle.write(`${encoded}\n`);
-        }
-        finally {
-            await handle.close();
-        }
-        await chmod(path, 0o600);
+        await this.#journal.append(encoded);
     }
 }
 function safeExecutionError(error) {

package/dist/src/guardian-managed-exec.js.map

@@ -1 +1 @@
-{"version":3,"file":"guardian-managed-exec.js","sourceRoot":"","sources":["../../src/guardian-managed-exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAA0B,MAAM,kCAAkC,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAO9D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAU1C;IACA,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,MAAM,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,uBAAuB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACvG,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACjE,MAAM,OAAO,CAAC,MAAM,CAAC;QACnB,YAAY;QACZ,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,WAAW;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAEvG,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,EAAE,kBAAkB,UAAU,EAAE,OAAO,CAAC,CAAC;IACtI,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC3D,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,IAAI,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACpH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAChD,YAAY,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;QAC1E,CAAC;QACD,OAAO,MAAM,IAAI,OAAO,CAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnE,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,EAAE,SAAS,IAAI,EAAE;gBAC/O,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;gBACnE,KAAK,EAAE,KAAK;gBACZ,WAAW,EAAE,IAAI;gBACjB,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBACvC,GAAG,EAAE,OAAO,CAAC,WAAW;gBACxB,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;aACnC,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,SAAS,EAAE,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBACxD,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAC5C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC/C,CAAC,CAAC;YACF,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;YAC1C,IAAI,cAA0C,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;gBACtB,sEAAsE;gBACtE,oEAAoE;gBACpE,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;YAChE,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,MAA2B,EAAE,MAAc,EAAE,GAAY,EAAE,EAAE;gBAC3E,IAAI,MAAM,KAAK,EAAE,IAAI,GAAG,KAAK,SAAS;oBAAE,OAAO;gBAC/C,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;gBAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;gBAC7C,MAAM,KAAK,GAAkB,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBAClD,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,EAAE,CAAC;wBAC7D,MAAM,OAAO,CAAC,MAAM,CAAC;4BACnB,YAAY;4BACZ,OAAO,EAAE,OAAO,CAAC,OAAO;4BACxB,SAAS,EAAE,OAAO,CAAC,SAAS;4BAC5B,KAAK,EAAE,SAAS;4BAChB,UAAU,EAAE,OAAO,CAAC,UAAU;4BAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;4BAC5B,MAAM;4BACN,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;yBAC7C,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACrD,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;wBAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;4BACrI,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;wBAC5B,CAAC;wBACD,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;oBAC7C,CAAC;gBACH,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;oBACX,kEAAkE;oBAClE,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;wBAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;wBAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;oBAAC,CAAC;gBAC3E,CAAC,CAAC,CAAC;gBACH,MAAM,GAAG,KAAK,CAAC;gBACf,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAChH,CAAC,CAAC;YACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC5B,IAAI,MAAM;oBAAE,OAAO;gBACnB,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM,EAAE,CAAC;gBACT,WAAW,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;oBAC/B,YAAY;oBACZ,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,KAAK,EAAE,QAAQ;oBACf,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC;oBACjC,QAAQ,EAAE,CAAC;iBACZ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC;YACpF,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBACnC,IAAI,MAAM;oBAAE,OAAO;gBACnB,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM,EAAE,CAAC;gBACT,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;gBAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;oBAC/B,YAAY;oBACZ,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,KAAK,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;oBAC9C,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,wBAAwB,MAAM,GAAG,EAAE,CAAC;oBACzE,QAAQ;iBACT,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC;YAC1G,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE;YAAE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE;YAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAClH,IAAI,CAAC;YAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;gBACrE,CAAC;YAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QACnC,IAAI,SAAS,KAAK,SAAS,IAAI,YAAY,EAAE,CAAC;YAC5C,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjH,CAAC;IACH,CAAC;AACH,CAAC;AAID,4EAA4E;AAC5E,4EAA4E;AAC5E,mDAAmD;AACnD,SAAS,WAAW,CAAC,MAAc,EAAE,EAAU,EAAE,GAAW,EAAE,WAA8B;IAC1F,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtH,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAoD,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9H,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;YAC7D,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO;YAC3B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACpD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBACtF,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,CAAC,CAAC,CAAC;YACH,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC,EAAE,CAAC;AACN,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAsB,EAAE,MAAmB;IACxE,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO;IAC3B,IAAI,KAAK,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IACrB,MAAM,SAAS,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,KAAK,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChI,IAAI,CAAC;QAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IAAC,CAAC;YACzC,CAAC;QAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;AACzD,CAAC;AAcD,MAAM,qBAAqB;IAChB,cAAc,CAAS;IAEhC,YAAY,aAAqB;QAC/B,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA4B;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAClE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,IAAI,EAAE,wBAAwB;YAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,SAAS,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;SACnC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QACrC,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK;QACpD,CAAC,CAAC,MAAM,CAAE,KAA+B,CAAC,IAAI,IAAI,SAAS,CAAC;QAC5D,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,uCAAuC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;AACtE,CAAC"}
+{"version":3,"file":"guardian-managed-exec.js","sourceRoot":"","sources":["../../src/guardian-managed-exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAA0B,MAAM,kCAAkC,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAO9D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAU1C;IACA,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,MAAM,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,uBAAuB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACvG,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACjE,MAAM,OAAO,CAAC,MAAM,CAAC;QACnB,YAAY;QACZ,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,WAAW;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAEvG,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,EAAE,kBAAkB,UAAU,EAAE,OAAO,CAAC,CAAC;IACtI,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC3D,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,IAAI,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACpH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAChD,YAAY,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;QAC1E,CAAC;QACD,OAAO,MAAM,IAAI,OAAO,CAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnE,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,EAAE,SAAS,IAAI,EAAE;gBAC/O,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;gBACnE,KAAK,EAAE,KAAK;gBACZ,WAAW,EAAE,IAAI;gBACjB,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBACvC,GAAG,EAAE,OAAO,CAAC,WAAW;gBACxB,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;aACnC,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,SAAS,EAAE,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBACxD,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAC5C,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC/C,CAAC,CAAC;YACF,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;YAChD,IAAI,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,MAAM,WAAW,GAAG,IAAI,eAAe,EAAE,CAAC;YAC1C,IAAI,cAA0C,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;gBACtB,sEAAsE;gBACtE,oEAAoE;gBACpE,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;YAChE,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,MAA2B,EAAE,MAAc,EAAE,GAAY,EAAE,EAAE;gBAC3E,IAAI,MAAM,KAAK,EAAE,IAAI,GAAG,KAAK,SAAS;oBAAE,OAAO;gBAC/C,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;gBAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;gBAC7C,MAAM,KAAK,GAAkB,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;oBAClD,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,KAAK,EAAE,CAAC;wBAC7D,MAAM,OAAO,CAAC,MAAM,CAAC;4BACnB,YAAY;4BACZ,OAAO,EAAE,OAAO,CAAC,OAAO;4BACxB,SAAS,EAAE,OAAO,CAAC,SAAS;4BAC5B,KAAK,EAAE,SAAS;4BAChB,UAAU,EAAE,OAAO,CAAC,UAAU;4BAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;4BAC5B,MAAM;4BACN,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;yBAC7C,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACrD,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;wBAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;4BACX,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;4BACrI,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;wBAC5B,CAAC;wBACD,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;oBAC7C,CAAC;gBACH,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;oBACX,kEAAkE;oBAClE,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;wBAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;wBAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;oBAAC,CAAC;gBAC3E,CAAC,CAAC,CAAC;gBACH,MAAM,GAAG,KAAK,CAAC;gBACf,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAChH,CAAC,CAAC;YACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC5B,IAAI,MAAM;oBAAE,OAAO;gBACnB,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM,EAAE,CAAC;gBACT,WAAW,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;oBAC/B,YAAY;oBACZ,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,KAAK,EAAE,QAAQ;oBACf,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC;oBACjC,QAAQ,EAAE,CAAC;iBACZ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC;YACpF,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBACnC,IAAI,MAAM;oBAAE,OAAO;gBACnB,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM,EAAE,CAAC;gBACT,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;gBAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;oBAC/B,YAAY;oBACZ,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,KAAK,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;oBAC9C,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,wBAAwB,MAAM,GAAG,EAAE,CAAC;oBACzE,QAAQ;iBACT,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC;YAC1G,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE;YAAE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE;YAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAClH,IAAI,CAAC;YAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;gBACrE,CAAC;YAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QACnC,IAAI,SAAS,KAAK,SAAS,IAAI,YAAY,EAAE,CAAC;YAC5C,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE,GAAG,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjH,CAAC;IACH,CAAC;AACH,CAAC;AAID,4EAA4E;AAC5E,4EAA4E;AAC5E,mDAAmD;AACnD,SAAS,WAAW,CAAC,MAAc,EAAE,EAAU,EAAE,GAAW,EAAE,WAA8B;IAC1F,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtH,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAoD,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9H,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;YAC7D,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO;YAC3B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACpD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBACtF,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,CAAC,CAAC,CAAC;YACH,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC,EAAE,CAAC;AACN,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAsB,EAAE,MAAmB;IACxE,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO;IAC3B,IAAI,KAAK,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IACrB,MAAM,SAAS,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,KAAK,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChI,IAAI,CAAC;QAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IAAC,CAAC;YACzC,CAAC;QAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;AACzD,CAAC;AAcD,MAAM,qBAAqB;IAChB,QAAQ,CAAmB;IAEpC,YAAY,aAAqB;QAC/B,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA4B;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC7B,IAAI,EAAE,wBAAwB;YAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,SAAS,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;SACnC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK;QACpD,CAAC,CAAC,MAAM,CAAE,KAA+B,CAAC,IAAI,IAAI,SAAS,CAAC;QAC5D,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,uCAAuC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;AACtE,CAAC"}

package/dist/src/guardian-model-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guardian-model-bridge.d.ts","sourceRoot":"","sources":["../../src/guardian-model-bridge.ts"],"names":[],"mappings":"AAIA,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC/D,eAAe,EAAE,GAAG,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAC5E,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAAC,CAyDrF"}
+{"version":3,"file":"guardian-model-bridge.d.ts","sourceRoot":"","sources":["../../src/guardian-model-bridge.ts"],"names":[],"mappings":"AAIA,wBAAsB,wBAAwB,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC/D,eAAe,EAAE,GAAG,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAC5E,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAAC,CA0DrF"}

package/dist/src/guardian-model-bridge.js

@@ -12,7 +12,8 @@ export async function startGuardianModelBridge(options) {
             const presented = request.headers.authorization?.replace(/^Bearer /u, "") ?? request.headers["x-api-key"];
             const supplied = typeof presented === "string" ? Buffer.from(presented) : Buffer.alloc(0);
             if (request.method !== "POST" || request.headers.origin !== undefined || supplied.length !== token.length || !timingSafeEqual(supplied, Buffer.from(token)) ||
-                !["/v1/chat/completions", "/v1/responses", "/v1/embeddings", "/v1/messages"].includes(request.url ?? "")) {
+                // Clients such as Anthropic's send query strings (/v1/messages?beta=true).
+                !["/v1/chat/completions", "/v1/responses", "/v1/embeddings", "/v1/messages"].includes((request.url ?? "").split("?")[0])) {
                 response.writeHead(403, { Connection: "close" });
                 response.end("Phigon Guardian: model gateway access denied.");
                 return;

package/dist/src/guardian-model-bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"guardian-model-bridge.js","sourceRoot":"","sources":["../../src/guardian-model-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEnC,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAI7C;IACA,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,qBAAqB,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1H,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,2BAA2B,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QACxF,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC1G,MAAM,QAAQ,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1F,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvJ,CAAC,CAAC,sBAAsB,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC7G,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;gBAAC,QAAQ,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;gBAAC,OAAO;YAC1H,CAAC;YACD,2EAA2E;YAC3E,IAAI,QAAQ,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC7B,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;gBACzG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,0DAA0D,EAAE,EAAE,CAAC,CAAC,CAAC;gBACnJ,OAAO;YACT,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACnE,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAa,EAAE,CAAC;gBAAC,IAAI,IAAI,GAAG,CAAC,CAAC;gBAC1C,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAClC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;oBAC3E,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC;oBACpB,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;wBAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;wBAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;wBAAC,OAAO;oBAAC,CAAC;oBACjG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpB,CAAC;gBACD,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO;gBACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,+BAA+B,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,eAAe,CAAC,EAAE;oBACnJ,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,OAAO,CAAC,OAAO,EAAE;oBACvK,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;iBACxG,CAAC,CAAC;gBACH,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;gBACjJ,IAAI,QAAQ,CAAC,IAAI;oBAAE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;wBAC3D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;4BAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC3F,CAAC;gBACD,QAAQ,CAAC,GAAG,EAAE,CAAC;YACjB,CAAC;oBAAS,CAAC;gBAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;QAChE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YACd,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;YACrF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,OAAO,EAAE,+EAA+E,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7K,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAAC,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/D,MAAM,CAAC,cAAc,GAAG,OAAO,GAAG,CAAC,CAAC;IACpC,IAAI,OAAkC,CAAC;IACvC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAAC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC9I,OAAO,EAAE,OAAO,EAAE,oBAAoB,OAAO,CAAC,IAAI,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE;YAC1E,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;YAC5B,KAAK,MAAM,UAAU,IAAI,QAAQ;gBAAE,UAAU,CAAC,KAAK,EAAE,CAAC;YACtD,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3I,OAAO,OAAO,CAAC;QACjB,CAAC,EAAE,CAAC;AACN,CAAC"}
+{"version":3,"file":"guardian-model-bridge.js","sourceRoot":"","sources":["../../src/guardian-model-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEnC,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAI7C;IACA,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,qBAAqB,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1H,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,2BAA2B,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QACxF,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC1G,MAAM,QAAQ,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1F,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACvJ,2EAA2E;gBAC3E,CAAC,CAAC,sBAAsB,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;gBAC9H,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;gBAAC,QAAQ,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;gBAAC,OAAO;YAC1H,CAAC;YACD,2EAA2E;YAC3E,IAAI,QAAQ,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC7B,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;gBACzG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,0DAA0D,EAAE,EAAE,CAAC,CAAC,CAAC;gBACnJ,OAAO;YACT,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACnE,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAa,EAAE,CAAC;gBAAC,IAAI,IAAI,GAAG,CAAC,CAAC;gBAC1C,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAClC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;oBAC3E,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC;oBACpB,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;wBAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;wBAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;wBAAC,OAAO;oBAAC,CAAC;oBACjG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpB,CAAC;gBACD,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO;gBACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,+BAA+B,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,eAAe,CAAC,EAAE;oBACnJ,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,OAAO,CAAC,OAAO,EAAE;oBACvK,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;iBACxG,CAAC,CAAC;gBACH,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;gBACjJ,IAAI,QAAQ,CAAC,IAAI;oBAAE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;wBAC3D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;4BAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC3F,CAAC;gBACD,QAAQ,CAAC,GAAG,EAAE,CAAC;YACjB,CAAC;oBAAS,CAAC;gBAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;QAChE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YACd,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;YACrF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,OAAO,EAAE,+EAA+E,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7K,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAAC,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/D,MAAM,CAAC,cAAc,GAAG,OAAO,GAAG,CAAC,CAAC;IACpC,IAAI,OAAkC,CAAC;IACvC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAAC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC9I,OAAO,EAAE,OAAO,EAAE,oBAAoB,OAAO,CAAC,IAAI,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE;YAC1E,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;YAC5B,KAAK,MAAM,UAAU,IAAI,QAAQ;gBAAE,UAAU,CAAC,KAAK,EAAE,CAAC;YACtD,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3I,OAAO,OAAO,CAAC;QACjB,CAAC,EAAE,CAAC;AACN,CAAC"}

package/dist/src/guardian-native.d.ts

@@ -1,3 +1,2 @@
 export declare function guardianRunnerPath(): string;
-export declare function killVerifiedWindowsProcess(processId: number, startedAt: string): Promise<void>;
 //# sourceMappingURL=guardian-native.d.ts.map

package/dist/src/guardian-native.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guardian-native.d.ts","sourceRoot":"","sources":["../../src/guardian-native.ts"],"names":[],"mappings":"AAGA,wBAAgB,kBAAkB,IAAI,MAAM,CAI3C;AACD,wBAAsB,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIpG"}
+{"version":3,"file":"guardian-native.d.ts","sourceRoot":"","sources":["../../src/guardian-native.ts"],"names":[],"mappings":"AAEA,wBAAgB,kBAAkB,IAAI,MAAM,CAI3C"}

package/dist/src/guardian-native.js

@@ -1,13 +1,7 @@
-import { execFile } from "node:child_process";
 import { fileURLToPath } from "node:url";
 export function guardianRunnerPath() {
     const os = process.platform === "win32" ? "windows" : process.platform;
     const arch = process.arch === "x64" ? "amd64" : process.arch;
     return fileURLToPath(new URL(`../bin/guardian-runner-${os}-${arch}${os === "windows" ? ".exe" : ""}`, import.meta.url));
 }
-export async function killVerifiedWindowsProcess(processId, startedAt) {
-    await new Promise((resolve, reject) => execFile(guardianRunnerPath(), ["--kill-pid", String(processId), "--started-at", startedAt], {
-        windowsHide: true, timeout: 8_000, maxBuffer: 4096,
-    }, (error) => error ? reject(error) : resolve()));
-}
 //# sourceMappingURL=guardian-native.js.map

package/dist/src/guardian-native.js.map

@@ -1 +1 @@
-{"version":3,"file":"guardian-native.js","sourceRoot":"","sources":["../../src/guardian-native.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,UAAU,kBAAkB;IAChC,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACvE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC7D,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,0BAA0B,EAAE,IAAI,IAAI,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1H,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,SAAiB,EAAE,SAAiB;IACnF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE;QACxI,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI;KACnD,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACpD,CAAC"}
+{"version":3,"file":"guardian-native.js","sourceRoot":"","sources":["../../src/guardian-native.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,UAAU,kBAAkB;IAChC,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACvE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC7D,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,0BAA0B,EAAE,IAAI,IAAI,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1H,CAAC"}

package/dist/src/guardian-process-monitor.d.ts

@@ -4,6 +4,7 @@ import type { HTTPGuardianDecisionClient } from "./agentic-guardian.js";
 import type { GuardianContainmentExecutor } from "./guardian-containment.js";
 import type { GuardianDecisionJournal } from "./guardian-decision-journal.js";
 import type { GuardianHostedClient } from "./guardian-hosted-client.js";
+import { type UserNotices } from "./user-notices.js";
 export declare class GuardianProcessMonitor {
     #private;
     private readonly options;
@@ -15,6 +16,9 @@ export declare class GuardianProcessMonitor {
         journal: Pick<GuardianDecisionJournal, "append">;
         onStatus: (message: string) => void;
         coverageClient?: Pick<GuardianHostedClient, "post">;
+        /** Tells the person at this computer when an agent was stopped. */
+        notices?: Pick<UserNotices, "agentStopped" | "agentBlocked">;
+        now?: () => number;
     }>);
     review(inventory: AgentInventory, parentSignal: AbortSignal): Promise<void>;
     private reviewWithinDeadline;

package/dist/src/guardian-process-monitor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guardian-process-monitor.d.ts","sourceRoot":"","sources":["../../src/guardian-process-monitor.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAIxE,qBAAa,sBAAsB;;IAErB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,QAAQ,CAAC;QAC7C,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,IAAI,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QACnD,cAAc,EAAE,IAAI,CAAC,0BAA0B,EAAE,QAAQ,CAAC,CAAC;QAC3D,WAAW,EAAE,IAAI,CAAC,2BAA2B,EAAE,SAAS,CAAC,CAAC;QAC1D,OAAO,EAAE,IAAI,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAC;QACjD,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;QACpC,cAAc,CAAC,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;KACrD,CAAC;IAEI,MAAM,CAAC,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;YASnE,oBAAoB;CA0FnC"}
+{"version":3,"file":"guardian-process-monitor.d.ts","sourceRoot":"","sources":["../../src/guardian-process-monitor.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAC3E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAYtE,qBAAa,sBAAsB;;IAOrB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,QAAQ,CAAC;QAC7C,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,IAAI,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QACnD,cAAc,EAAE,IAAI,CAAC,0BAA0B,EAAE,QAAQ,CAAC,CAAC;QAC3D,WAAW,EAAE,IAAI,CAAC,2BAA2B,EAAE,SAAS,CAAC,CAAC;QAC1D,OAAO,EAAE,IAAI,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAC;QACjD,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;QACpC,cAAc,CAAC,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;QACpD,mEAAmE;QACnE,OAAO,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,GAAG,cAAc,CAAC,CAAC;QAC7D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;KACpB,CAAC;IAII,MAAM,CAAC,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;YASnE,oBAAoB;CAqHnC"}

package/dist/src/guardian-process-monitor.js

@@ -1,12 +1,26 @@
 import { timestampDate } from "@bufbuild/protobuf/wkt";
 import { AgentState } from "./generated/phigon/v1/common_pb.js";
+import { noticeAgentName } from "./user-notices.js";
+// A running process the policy allowed is asked about again only after this
+// long. An administrator's agent block does not change the policy digest,
+// so an allow must expire for a new block to reach agents already running.
+const allowCacheMs = 60_000;
+// An unchanged coverage report is sent again after this long. The server
+// shows coverage as stale two minutes after the last report.
+const coverageRefreshMs = 60_000;
 // Discovery is a detection boundary, not a pre-execution sandbox. It can contain
 // agents launched outside the managed CLI only after a central admin decision.
 export class GuardianProcessMonitor {
     options;
     #reviewOffset = 0;
+    // Allowed process lifetimes under #allowedDigest, and when each was allowed.
+    #allowed = new Map();
+    #allowedDigest;
+    #lastCoverage;
+    #now;
     constructor(options) {
         this.options = options;
+        this.#now = options.now ?? Date.now;
     }
     async review(inventory, parentSignal) {
         if (parentSignal.aborted)
@@ -33,16 +47,26 @@ export class GuardianProcessMonitor {
         let unverified = 0;
         if (inventory.partial)
             this.options.onStatus("Guardian discovery is incomplete; process protection coverage is degraded.");
+        if (this.#allowedDigest !== policy.policyDigest) {
+            this.#allowed.clear();
+            this.#allowedDigest = policy.policyDigest;
+        }
+        const allowedRecently = (agent) => {
+            const at = this.#allowed.get(lifetimeKey(agent));
+            return at !== undefined && this.#now() - at < allowCacheMs;
+        };
         const reviewAgent = async (agent) => {
             if (signal.aborted)
                 return;
-            if (agent.state !== AgentState.RUNNING || agent.startedAt === undefined ||
-                agent.processId < 1n || agent.processId > BigInt(Number.MAX_SAFE_INTEGER) ||
-                !agent.capabilities.includes("process-instance")) {
+            if (!reviewable(agent)) {
                 if (agent.state === AgentState.RUNNING)
                     unverified++;
                 return;
             }
+            if (allowedRecently(agent)) {
+                reviewed++;
+                return;
+            }
             const resource = JSON.stringify({
                 claimed_agent_id: agent.agentId,
                 display_name: agent.displayName,
@@ -62,6 +86,10 @@ export class GuardianProcessMonitor {
                 if (signal.aborted)
                     return;
                 reviewed++;
+                if (decision.decision === "allow")
+                    this.#allowed.set(lifetimeKey(agent), this.#now());
+                else
+                    this.#allowed.delete(lifetimeKey(agent));
                 const containment = decision.decision === "deny" && decision.intervention !== "none" && decision.intervention !== "block_action"
                     ? await this.options.containment.execute({
                         intervention: decision.intervention, agentId: agent.agentId,
@@ -69,6 +97,13 @@ export class GuardianProcessMonitor {
                     }) : undefined;
                 // Allows are already audited centrally. Report denied running processes
                 // even when the admin authorized only action blocking, never escalation.
+                if (containment?.state === "succeeded") {
+                    const notice = { key: `${agent.agentId}:${agent.processId}`, agent: noticeAgentName(agent.displayName), reason: decision.reason };
+                    if (decision.model === "agent-block")
+                        this.options.notices?.agentBlocked(notice);
+                    else
+                        this.options.notices?.agentStopped({ ...notice, forced: decision.intervention === "kill_agent" });
+                }
                 if (decision.decision !== "allow") {
                     denied++;
                     if (containment !== undefined && containment.state !== "succeeded")
@@ -96,17 +131,12 @@ export class GuardianProcessMonitor {
         const offset = discovered.length ? this.#reviewOffset % discovered.length : 0;
         const running = [...discovered.slice(offset), ...discovered.slice(0, offset)];
         // Publish degraded coverage before a potentially slow provider review.
-        if (running.length > 0 && this.options.coverageClient) {
-            try {
-                await this.options.coverageClient.post("/v1/machine/guardian/coverage", {
-                    policy_digest: policy.policyDigest, platform: process.platform,
-                    process_review: "degraded", discovery_partial: inventory.partial === true,
-                    reviewed: 0, denied: 0, containment_failed: 0, unverified: running.length,
-                }, coverageSignal, 5_000);
-            }
-            catch {
-                this.options.onStatus("Guardian review coverage could not be delivered.");
-            }
+        if (running.some((agent) => reviewable(agent) && !allowedRecently(agent))) {
+            await this.#reportCoverage({
+                policy_digest: policy.policyDigest, platform: process.platform,
+                process_review: "degraded", discovery_partial: inventory.partial === true,
+                reviewed: 0, denied: 0, containment_failed: 0, unverified: running.length,
+            }, coverageSignal, "Guardian review coverage could not be delivered.");
         }
         let next = 0;
         await Promise.all(Array.from({ length: Math.min(4, running.length) }, async () => {
@@ -116,21 +146,47 @@ export class GuardianProcessMonitor {
             }
         }));
         this.#reviewOffset = running.length ? (offset + next) % running.length : 0;
+        // Forget processes that are no longer running.
+        const live = new Set(running.filter(reviewable).map(lifetimeKey));
+        for (const key of this.#allowed.keys())
+            if (!live.has(key))
+                this.#allowed.delete(key);
         unverified = Math.max(unverified, running.length - reviewed);
-        if (!coverageSignal.aborted && this.options.coverageClient) {
-            try {
-                await this.options.coverageClient.post("/v1/machine/guardian/coverage", {
-                    policy_digest: policy.policyDigest, platform: process.platform,
-                    process_review: inventory.partial || unverified > 0 || containmentFailed > 0 ? "degraded" : "active",
-                    discovery_partial: inventory.partial === true,
-                    reviewed, denied, containment_failed: containmentFailed, unverified,
-                }, coverageSignal, 5_000);
-            }
-            catch {
-                this.options.onStatus("Guardian could not deliver its coverage report; central protection status will become stale.");
-            }
+        if (!coverageSignal.aborted) {
+            await this.#reportCoverage({
+                policy_digest: policy.policyDigest, platform: process.platform,
+                process_review: inventory.partial || unverified > 0 || containmentFailed > 0 ? "degraded" : "active",
+                discovery_partial: inventory.partial === true,
+                reviewed, denied, containment_failed: containmentFailed, unverified,
+            }, coverageSignal, "Guardian could not deliver its coverage report; central protection status will become stale.");
         }
     }
+    /** Sends a coverage report that changed, or an unchanged one once a minute. */
+    async #reportCoverage(report, signal, failure) {
+        if (this.options.coverageClient === undefined)
+            return;
+        const encoded = JSON.stringify(report);
+        const now = this.#now();
+        if (this.#lastCoverage?.report === encoded && now - this.#lastCoverage.at < coverageRefreshMs)
+            return;
+        try {
+            await this.options.coverageClient.post("/v1/machine/guardian/coverage", report, signal, 5_000);
+            this.#lastCoverage = { report: encoded, at: now };
+        }
+        catch {
+            this.options.onStatus(failure);
+        }
+    }
+}
+/** A running agent with an exact process lifetime that a decision can name. */
+function reviewable(agent) {
+    return agent.state === AgentState.RUNNING && agent.startedAt !== undefined &&
+        agent.processId >= 1n && agent.processId <= BigInt(Number.MAX_SAFE_INTEGER) &&
+        agent.capabilities.includes("process-instance");
+}
+function lifetimeKey(agent) {
+    const startedAt = agent.startedAt === undefined ? "" : timestampDate(agent.startedAt).toISOString();
+    return `${agent.agentId}\u0000${agent.processId}\u0000${startedAt}`;
 }
 function abortable(work, signal) {
     if (signal.aborted) {