@private.me/xbind 1.3.5 → 3.0.0

package/dist-standalone/cjs/event-emitter.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.XBindEventEmitter=void 0,exports.createScopedEmitter=createScopedEmitter;const shared_1=require("../_deps/shared/index.js");class XBindEventEmitter{listeners=new Map;parent;disposed=!1;eventCounter=0;maxListeners=10;warningsEnabled=!0;constructor(e){this.parent=e}on(e,t,s={}){if(this.checkDisposed(),"function"!=typeof t)throw new Error("Listener must be a function");const r=this.listeners.get(e)??[],n={listener:t,once:s.once??!1,priority:s.priority??0};return r.push(n),r.sort((e,t)=>t.priority-e.priority),this.listeners.set(e,r),this.warningsEnabled&&this.maxListeners>0&&r.length>this.maxListeners&&console.warn(`[xBind EventEmitter] Possible memory leak detected: ${r.length} listeners for event '${e}'. Use emitter.setMaxListeners() to increase limit.`),this}once(e,t,s={}){return this.on(e,t,{...s,once:!0})}off(e,t){this.checkDisposed();const s=this.listeners.get(e);if(!s)return this;const r=s.filter(e=>e.listener!==t);return 0===r.length?this.listeners.delete(e):this.listeners.set(e,r),this}removeAllListeners(e){return this.checkDisposed(),e?this.listeners.delete(e):this.listeners.clear(),this}async emit(e,t,s={}){this.checkDisposed();const r={...t,eventId:s.eventId??this.generateEventId(),timestamp:(new Date).toISOString()},n=this.listeners.get(e);if(n&&n.length>0){const t=[...n];for(const n of t)try{if(await n.listener(r),n.once&&this.off(e,n.listener),s.stopPropagation)return(0,shared_1.ok)(void 0)}catch(t){return console.error(`[xBind EventEmitter] Error in listener for '${e}':`,t),(0,shared_1.err)("LISTENER_ERROR")}}return!1!==s.bubble&&this.parent?this.parent.emit(e,t,{...s,bubble:!0}):(0,shared_1.ok)(void 0)}hasListeners(e){const t=this.listeners.get(e);return void 0!==t&&t.length>0}listenerCount(e){const t=this.listeners.get(e);return t?.length??0}eventNames(){return Array.from(this.listeners.keys())}setMaxListeners(e){if(e<0||!Number.isInteger(e))throw new Error("Max listeners must be a non-negative integer");return this.maxListeners=e,this}getMaxListeners(){return this.maxListeners}setWarningsEnabled(e){return this.warningsEnabled=e,this}setParent(e){return this.parent=e,this}getParent(){return this.parent}waitFor(e,t){return new Promise((s,r)=>{let n;const i=e=>{n&&clearTimeout(n),s(e)};this.once(e,i),void 0!==t&&t>0&&(n=setTimeout(()=>{this.off(e,i),r(new Error(`Timeout waiting for event '${e}' after ${t}ms`))},t))})}dispose(){this.disposed=!0,this.listeners.clear(),this.parent=void 0}isDisposed(){return this.disposed}checkDisposed(){if(this.disposed)throw new Error("EventEmitter has been disposed")}generateEventId(){return`evt-${Date.now()}-${++this.eventCounter}`}}function createScopedEmitter(e,t){const s=new XBindEventEmitter(e),r=new Set(t);return{on:(e,t,n)=>{if(!r.has(e))throw new Error(`Event type '${String(e)}' not allowed in scoped emitter`);return s.on(e,t,n)},once:(e,t,n)=>{if(!r.has(e))throw new Error(`Event type '${String(e)}' not allowed in scoped emitter`);return s.once(e,t,n)},off:(e,t)=>s.off(e,t),emit:(e,t,n)=>r.has(e)?s.emit(e,t,n):Promise.resolve((0,shared_1.err)("INVALID_EVENT_TYPE")),hasListeners:e=>s.hasListeners(e),listenerCount:e=>s.listenerCount(e),dispose:()=>s.dispose()}}exports.XBindEventEmitter=XBindEventEmitter;

package/dist-standalone/cjs/gateway-state.js

@@ -1,55 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GatewayConnectionState = void 0;
-/**
- * Gateway connection state manager.
- *
- * Online-only model: State evaporates immediately on disconnect.
- * No 12-hour windows, no persistent state.
- *
- * Note: WebSocket type is runtime-dependent (browser WebSocket or 'ws' package).
- */
-class GatewayConnectionState {
-    connections = new Map(); // did → socket
-    /**
-     * Register agent connection.
-     *
-     * @param did - DID of the connecting agent
-     * @param socket - WebSocket connection (browser or Node.js 'ws' package)
-     */
-    connect(did, socket) {
-        this.connections.set(did, socket);
-        // Handle close event (works for both browser and Node.js ws)
-        if (typeof socket.on === 'function') {
-            // Node.js 'ws' package style
-            socket.on('close', () => {
-                this.connections.delete(did); // Immediate evaporation
-            });
-        }
-        else if (socket.addEventListener) {
-            // Browser WebSocket style
-            socket.addEventListener('close', () => {
-                this.connections.delete(did);
-            });
-        }
-    }
-    /**
-     * Check if agent is currently online.
-     */
-    isOnline(did) {
-        return this.connections.has(did);
-    }
-    /**
-     * Get WebSocket for online agent (or null if offline).
-     */
-    getSocket(did) {
-        return this.connections.get(did) ?? null;
-    }
-    /**
-     * Get all online DIDs.
-     */
-    getOnlineDids() {
-        return Array.from(this.connections.keys());
-    }
-}
-exports.GatewayConnectionState = GatewayConnectionState;
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.GatewayConnectionState=void 0;class GatewayConnectionState{connections=new Map;connect(e,n){this.connections.set(e,n),"function"==typeof n.on?n.on("close",()=>{this.connections.delete(e)}):n.addEventListener&&n.addEventListener("close",()=>{this.connections.delete(e)})}isOnline(e){return this.connections.has(e)}getSocket(e){return this.connections.get(e)??null}getOnlineDids(){return Array.from(this.connections.keys())}}exports.GatewayConnectionState=GatewayConnectionState;

package/dist-standalone/cjs/gateway-transport.js

@@ -1,120 +1 @@
-"use strict";
-/**
- * Gateway transport adapter for delivering envelopes to Xail inbox users.
- *
- * Sends envelopes via POST /gateway/deliver on the hosted gateway API.
- * For agent-to-agent (M2M), use HttpsTransportAdapter with direct URLs.
- * Optionally polls for incoming messages.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GatewayTransport = void 0;
-const shared_1 = require("../_deps/shared/index.js");
-/**
- * Transport adapter for the Xail Gateway.
- *
- * Sends envelopes via POST /gateway/deliver with API key auth.
- * Optionally polls GET /gateway/messages/:did for incoming messages.
- */
-class GatewayTransport {
-    apiKey;
-    gateway;
-    timeoutMs;
-    fetchFn;
-    pollIntervalMs;
-    handlers = [];
-    pollTimer = null;
-    senderDid = null;
-    constructor(opts) {
-        this.apiKey = opts.apiKey;
-        this.gateway = opts.gateway.replace(/\/$/, '');
-        this.timeoutMs = opts.timeoutMs ?? 15_000;
-        this.fetchFn = opts.fetch ?? globalThis.fetch.bind(globalThis);
-        this.pollIntervalMs = opts.pollIntervalMs ?? 0;
-    }
-    /**
-     * Send a signed envelope to a recipient via the gateway.
-     * @param envelope - The signed transport envelope.
-     * @param _recipientDid - Recipient DID (already in envelope.recipient).
-     * @returns Success or transport error.
-     */
-    async send(envelope, _recipientDid) {
-        const url = `${this.gateway}/gateway/deliver`;
-        try {
-            const controller = new AbortController();
-            const timer = setTimeout(() => controller.abort(), this.timeoutMs);
-            const response = await this.fetchFn(url, {
-                method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json',
-                    'Authorization': `Bearer ${this.apiKey}`,
-                },
-                body: JSON.stringify(envelope),
-                signal: controller.signal,
-            });
-            clearTimeout(timer);
-            if (!response.ok) {
-                return (0, shared_1.err)(response.status === 404
-                    ? 'RECIPIENT_UNREACHABLE'
-                    : 'SEND_FAILED');
-            }
-            return (0, shared_1.ok)(undefined);
-        }
-        catch (e) {
-            if (e instanceof DOMException && e.name === 'AbortError') {
-                return (0, shared_1.err)('TIMEOUT');
-            }
-            return (0, shared_1.err)('NETWORK_ERROR');
-        }
-    }
-    /** Register a handler for incoming envelopes. */
-    onReceive(handler) {
-        this.handlers.push(handler);
-    }
-    /**
-     * Start polling for incoming messages.
-     * Must be called after Agent.create() sets the sender DID.
-     * @param did - The agent's own DID for polling.
-     */
-    startPolling(did) {
-        this.senderDid = did;
-        if (this.pollIntervalMs > 0 && !this.pollTimer) {
-            this.pollTimer = setInterval(() => void this.poll(), this.pollIntervalMs);
-        }
-    }
-    /** Shut down the transport (stop polling, clear handlers). */
-    dispose() {
-        if (this.pollTimer) {
-            clearInterval(this.pollTimer);
-            this.pollTimer = null;
-        }
-        this.handlers = [];
-    }
-    /** Poll for incoming messages and dispatch to handlers. */
-    async poll() {
-        if (!this.senderDid)
-            return;
-        try {
-            const url = `${this.gateway}/gateway/messages/${encodeURIComponent(this.senderDid)}`;
-            const res = await this.fetchFn(url, {
-                headers: { Authorization: `Bearer ${this.apiKey}` },
-            });
-            if (!res.ok)
-                return;
-            const data = (await res.json());
-            for (const msg of data.messages) {
-                for (const handler of this.handlers) {
-                    handler(msg.envelope);
-                }
-                // Ack delivery
-                await this.fetchFn(`${this.gateway}/gateway/ack/${msg.id}`, {
-                    method: 'POST',
-                    headers: { Authorization: `Bearer ${this.apiKey}` },
-                });
-            }
-        }
-        catch {
-            // Silent failure — polling errors are non-fatal
-        }
-    }
-}
-exports.GatewayTransport = GatewayTransport;
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.GatewayTransport=void 0;const shared_1=require("../_deps/shared/index.js");class GatewayTransport{apiKey;gateway;timeoutMs;fetchFn;pollIntervalMs;handlers=[];pollTimer=null;senderDid=null;constructor(e){this.apiKey=e.apiKey,this.gateway=e.gateway.replace(/\/$/,""),this.timeoutMs=e.timeoutMs??15e3,this.fetchFn=e.fetch??globalThis.fetch.bind(globalThis),this.pollIntervalMs=e.pollIntervalMs??0}async send(e,t){const s=`${this.gateway}/gateway/deliver`;try{const t=new AbortController,a=setTimeout(()=>t.abort(),this.timeoutMs),r=await this.fetchFn(s,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${this.apiKey}`},body:JSON.stringify(e),signal:t.signal});return clearTimeout(a),r.ok?(0,shared_1.ok)(void 0):(0,shared_1.err)(404===r.status?"RECIPIENT_UNREACHABLE":"SEND_FAILED")}catch(e){return e instanceof DOMException&&"AbortError"===e.name?(0,shared_1.err)("TIMEOUT"):(0,shared_1.err)("NETWORK_ERROR")}}onReceive(e){this.handlers.push(e)}startPolling(e){this.senderDid=e,this.pollIntervalMs>0&&!this.pollTimer&&(this.pollTimer=setInterval(()=>{this.poll()},this.pollIntervalMs))}dispose(){this.pollTimer&&(clearInterval(this.pollTimer),this.pollTimer=null),this.handlers=[]}async poll(){if(this.senderDid)try{const e=`${this.gateway}/gateway/messages/${encodeURIComponent(this.senderDid)}`,t=await this.fetchFn(e,{headers:{Authorization:`Bearer ${this.apiKey}`}});if(!t.ok)return;const s=await t.json();for(const e of s.messages){for(const t of this.handlers)t(e.envelope);await this.fetchFn(`${this.gateway}/gateway/ack/${e.id}`,{method:"POST",headers:{Authorization:`Bearer ${this.apiKey}`}})}}catch{}}}exports.GatewayTransport=GatewayTransport;

package/dist-standalone/cjs/graceful-degradation.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.GracefulDegradationManager=void 0,exports.registryLookupWithFallback=registryLookupWithFallback,exports.sendWithTransportFallback=sendWithTransportFallback,exports.enhanceError=enhanceError;const shared_1=require("../_deps/shared/index.js"),ux_helpers_1=require("../_deps/ux-helpers/index.js"),DEFAULT_CACHE_CONFIG={defaultTTL:3e5,maxSize:1e3,allowStale:!0,maxStaleMs:36e5},DEFAULT_RETRY_CONFIG={maxAttempts:3,initialDelayMs:1e3,backoffMultiplier:2,maxDelayMs:3e4,jitter:!0};class GracefulDegradationManager{cacheConfig;retryConfig;cache=new Map;serviceStatus=new Map;constructor(e,t){this.cacheConfig={...DEFAULT_CACHE_CONFIG,...e},this.retryConfig={...DEFAULT_RETRY_CONFIG,...t}}getCached(e,t){const r=this.cache.get(e);if(!r)return;const a=Date.now()-r.cachedAt,s=a<=r.ttl,i=a>r.ttl&&a<=this.cacheConfig.maxStaleMs;return"CRITICAL"===t||"HIGH"===t?s?r.value:void 0:this.cacheConfig.allowStale&&(s||i)?(r.usageCount++,r.value):s?r.value:void 0}setCached(e,t,r){if(this.cache.size>=this.cacheConfig.maxSize){const e=this.cache.keys().next().value;e&&this.cache.delete(e)}this.cache.set(e,{value:t,cachedAt:Date.now(),ttl:r??this.cacheConfig.defaultTTL,usageCount:0})}invalidate(e){this.cache.delete(e)}clearCache(){this.cache.clear()}getCacheStats(){const e=Date.now(),t=Array.from(this.cache.entries()).map(([t,r])=>({key:t,age:e-r.cachedAt,usageCount:r.usageCount}));return{size:this.cache.size,maxSize:this.cacheConfig.maxSize,entries:t}}recordSuccess(e){const t=this.serviceStatus.get(e)||{health:"HEALTHY",lastSuccess:0,failureCount:0};t.health="HEALTHY",t.lastSuccess=Date.now(),t.failureCount=0,t.lastError=void 0,this.serviceStatus.set(e,t)}recordFailure(e,t){const r=this.serviceStatus.get(e)||{health:"HEALTHY",lastSuccess:0,failureCount:0};r.failureCount++,r.lastError=t,r.failureCount>=5?r.health="UNAVAILABLE":r.failureCount>=2&&(r.health="DEGRADED"),this.serviceStatus.set(e,r)}getServiceHealth(e){return this.serviceStatus.get(e)?.health??"HEALTHY"}getServiceStatus(e){return this.serviceStatus.get(e)}resetServiceHealth(e){e?this.serviceStatus.delete(e):this.serviceStatus.clear()}async withRetry(e,t){const r=this.getMaxAttempts(t.qos);let a;for(let t=1;t<=r;t++){const s=await e();if(s.ok)return s;if(a=s.error,t<r){const e=this.calculateBackoff(t);await this.sleep(e)}}return(0,shared_1.err)(a)}getMaxAttempts(e){switch(e){case"CRITICAL":case"LOW":return 1;case"HIGH":return this.retryConfig.maxAttempts;case"NORMAL":return Math.max(1,this.retryConfig.maxAttempts-1)}}calculateBackoff(e){const t=this.retryConfig.initialDelayMs*Math.pow(this.retryConfig.backoffMultiplier,e-1),r=Math.min(t,this.retryConfig.maxDelayMs);if(!this.retryConfig.jitter)return r;const a=new Uint8Array(4);crypto.getRandomValues(a);const s=.75+.5*(new DataView(a.buffer).getUint32(0)/4294967295);return Math.floor(r*s)}sleep(e){return new Promise(t=>setTimeout(t,e))}}async function registryLookupWithFallback(e,t,r,a){const s=`registry:${t}`;if("LOW"===r.qos){const e=a.getCached(s,r.qos);if(e)return(0,shared_1.ok)(e)}const i=await a.withRetry(()=>e.getEntry(t),r);if(i.ok){a.recordSuccess("registry");const e={publicKey:Buffer.from(i.value.publicKey).toString("base64")};return a.setCached(s,e),(0,shared_1.ok)(e)}if(a.recordFailure("registry",String(i.error)),"HIGH"===r.qos||"NORMAL"===r.qos){const e=a.getCached(s,r.qos);if(e)return(0,shared_1.ok)(e)}return(0,shared_1.err)((0,ux_helpers_1.createDetailedError)("REGISTRY_UNAVAILABLE",`Failed to resolve DID: ${t}`,{hint:"UNAVAILABLE"===a.getServiceHealth("registry")?"Registry service is currently unavailable. Using cached data may help.":"Registry lookup failed after retries. Check network connectivity.",suggested_action:"CRITICAL"===r.qos?"Wait for registry service to recover before retrying critical operations.":"Lower QoS level to NORMAL or LOW to use cached data.",docs:"https://private.me/docs/xbind/registry-fallback",severity:"CRITICAL"===r.qos?"critical":"error"}))}async function sendWithTransportFallback(e,t,r,a,s){if(0===e.length)return(0,shared_1.err)((0,ux_helpers_1.createDetailedError)("NO_TRANSPORT","No transport adapters configured",{hint:"Configure at least one transport adapter for envelope delivery.",suggested_action:"Add HttpsTransportAdapter or custom transport to agent configuration.",docs:"https://private.me/docs/xbind/transport",severity:"critical"}));const i=[];for(let o=0;o<e.length;o++){const c=e[o];if(!c)continue;const n=await s.withRetry(()=>c.send(t,r),a);if(n.ok)return s.recordSuccess(`transport:${o}`),(0,shared_1.ok)(void 0);i.push({transport:o,error:n.error}),s.recordFailure(`transport:${o}`,n.error)}const o=i[0]?.error??"SEND_FAILED";return(0,shared_1.err)((0,ux_helpers_1.createDetailedError)("TRANSPORT_EXHAUSTED",`All transport adapters failed: ${i.map(e=>e.error).join(", ")}`,{hint:"NETWORK_ERROR"===o?"Network connectivity issue detected. Check internet connection.":"TIMEOUT"===o?"Transport timeout occurred. Recipient may be unreachable or overloaded.":"RECIPIENT_UNREACHABLE"===o?"Recipient DID not found or offline.":"Transport layer failure. Check transport configuration.",suggested_action:"Verify recipient endpoint and network connectivity. Consider increasing timeout or adding fallback transports.",docs:"https://private.me/docs/xbind/transport-fallback",severity:"CRITICAL"===a.qos?"critical":"error"}))}function enhanceError(e,t,r){const a=r.getServiceHealth(t.type.split(":")[0]??"unknown"),s="DEGRADED"===a?" Service is experiencing degraded performance.":"UNAVAILABLE"===a?" Service is currently unavailable.":"",i="CRITICAL"===t.qos?" Consider retrying when service recovers.":"HIGH"===t.qos?" Cached data may be used if available.":" Using cached data regardless of staleness.";return{...e,hint:(e.hint??"")+s+i}}exports.GracefulDegradationManager=GracefulDegradationManager;

package/dist-standalone/cjs/guardrails.js

@@ -1,223 +1 @@
-"use strict";
-/**
- * @module guardrails
- * Enhanced error messages with actionable suggestions for policy violations
- *
- * When policies deny requests, guardrails provide specific, actionable
- * guidance on how to fix the issue or what to request from admins.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Guardrails = exports.PolicyDenied = void 0;
-exports.extractSuggestion = extractSuggestion;
-exports.toPolicyDenied = toPolicyDenied;
-/**
- * Policy violation error with actionable suggestions
- */
-class PolicyDenied extends Error {
-    rule;
-    allowed;
-    requested;
-    suggestion;
-    details;
-    constructor(
-    /** Which policy rule was violated */
-    rule, 
-    /** What the policy allows */
-    allowed, 
-    /** What was requested */
-    requested, 
-    /** Actionable suggestion for how to fix */
-    suggestion, 
-    /** Full policy violation details */
-    details) {
-        super(`Policy violation: ${rule}`);
-        this.rule = rule;
-        this.allowed = allowed;
-        this.requested = requested;
-        this.suggestion = suggestion;
-        this.details = details;
-        this.name = 'PolicyDenied';
-    }
-    /**
-     * Format error for AI agent consumption
-     *
-     * Structured format optimized for LLM parsing
-     */
-    toAgentFormat() {
-        return [
-            `POLICY_VIOLATION: ${this.rule}`,
-            `REQUESTED: ${JSON.stringify(this.requested)}`,
-            `ALLOWED: ${JSON.stringify(this.allowed)}`,
-            `SUGGESTION: ${this.suggestion}`,
-        ].join('\n');
-    }
-    /**
-     * Format error for human consumption
-     *
-     * User-friendly format with clear next steps
-     */
-    toUserFormat() {
-        return [
-            `❌ Policy Violation: ${this.rule}`,
-            '',
-            `You requested: ${this.formatValue(this.requested)}`,
-            `Policy allows: ${this.formatValue(this.allowed)}`,
-            '',
-            `💡 Suggestion: ${this.suggestion}`,
-        ].join('\n');
-    }
-    /**
-     * Format error for logs (structured JSON)
-     */
-    toLogFormat() {
-        return {
-            error: 'PolicyDenied',
-            rule: this.rule,
-            allowed: this.allowed,
-            requested: this.requested,
-            suggestion: this.suggestion,
-            details: this.details,
-            timestamp: new Date().toISOString(),
-        };
-    }
-    formatValue(value) {
-        if (typeof value === 'number') {
-            // Format currency if it looks like money
-            if (this.rule.includes('amount') || this.rule.includes('Amount')) {
-                return `$${value.toLocaleString()}`;
-            }
-            return value.toLocaleString();
-        }
-        if (Array.isArray(value)) {
-            return value.map((v) => `"${String(v)}"`).join(', ');
-        }
-        return JSON.stringify(value);
-    }
-}
-exports.PolicyDenied = PolicyDenied;
-/**
- * Guardrail builder - fluent API for creating policy errors with suggestions
- *
- * @example
- * ```typescript
- * const error = Guardrails.amountExceeded({
- *   requested: 5000,
- *   limit: 1000,
- *   type: 'per-transaction'
- * });
- *
- * throw error;
- * // ❌ Policy Violation: maxAmount
- * // You requested: $5,000
- * // Policy allows: $1,000
- * // 💡 Suggestion: Reduce amount to $1,000 or request policy update from admin
- * ```
- */
-class Guardrails {
-    /**
-     * Amount exceeded (per-transaction limit)
-     */
-    static amountExceeded(options) {
-        let rule;
-        let suggestion;
-        switch (options.type) {
-            case 'per-transaction':
-                rule = 'maxAmount';
-                suggestion = `Reduce amount to $${options.limit.toLocaleString()} or request policy update from admin`;
-                break;
-            case 'daily':
-                rule = 'dailyAmount';
-                suggestion = `Reduce amount to stay within daily limit of $${options.limit.toLocaleString()}, or wait until tomorrow`;
-                break;
-            case 'monthly':
-                rule = 'monthlyAmount';
-                suggestion = `Reduce amount to stay within monthly limit of $${options.limit.toLocaleString()}, or wait until next month`;
-                break;
-        }
-        return new PolicyDenied(rule, options.limit, options.requested, suggestion);
-    }
-    /**
-     * Rate limit exceeded
-     */
-    static rateLimitExceeded(options) {
-        const windowSec = options.windowMs / 1000;
-        const suggestion = windowSec >= 60
-            ? `Wait ${Math.ceil(windowSec / 60)} minutes before making additional calls`
-            : `Wait ${windowSec} seconds before making additional calls`;
-        return new PolicyDenied('callsPerMinute', options.limit, options.current + 1, suggestion);
-    }
-    /**
-     * Tool not allowed
-     */
-    static toolDenied(options) {
-        const [service] = options.tool.split(':');
-        const suggestion = options.allowed.length === 0
-            ? `No tools are currently allowed. Request approval from admin to enable "${options.tool}"`
-            : `Request approval from admin to add "${options.tool}" or "${service}:*" to allowed tools`;
-        return new PolicyDenied('allowedTools', options.allowed, options.tool, suggestion);
-    }
-    /**
-     * Scope not allowed
-     */
-    static scopeDenied(options) {
-        const suggestion = options.allowed.length === 0
-            ? `No scopes are currently allowed. Request approval from admin to enable "${options.scope}"`
-            : `Request approval from admin to add "${options.scope}" to allowed scopes`;
-        return new PolicyDenied('allowedScopes', options.allowed, options.scope, suggestion);
-    }
-    /**
-     * Field filter denied (data access restriction)
-     */
-    static fieldDenied(options) {
-        const suggestion = `Field "${options.field}" is restricted. Contact admin to update policy.fieldFilters for "${options.tool}"`;
-        return new PolicyDenied('fieldFilters', options.allowed, options.field, suggestion);
-    }
-    /**
-     * Time window restriction
-     */
-    static timeWindowDenied(options) {
-        const suggestion = `Actions are only allowed between ${options.allowedStart} and ${options.allowedEnd}. Current time is ${options.current.toTimeString()}`;
-        return new PolicyDenied('timeWindow', `${options.allowedStart} - ${options.allowedEnd}`, options.current.toTimeString(), suggestion);
-    }
-    /**
-     * Generic policy violation
-     */
-    static custom(options) {
-        return new PolicyDenied(options.rule, options.allowed, options.requested, options.suggestion);
-    }
-}
-exports.Guardrails = Guardrails;
-/**
- * Helper: Extract actionable suggestion from AgentError details
- *
- * Used by agent.call() to convert PolicyViolationDetails into PolicyDenied
- */
-function extractSuggestion(details) {
-    return details.fix ?? 'Contact administrator to update policy';
-}
-/**
- * Helper: Convert PolicyViolationDetails to PolicyDenied
- */
-function toPolicyDenied(details) {
-    let rule;
-    switch (details.constraint) {
-        case 'amountPerTxn':
-            rule = 'maxAmount';
-            break;
-        case 'dailyAmount':
-            rule = 'dailyAmount';
-            break;
-        case 'callsPerMinute':
-            rule = 'callsPerMinute';
-            break;
-        case 'scope':
-            rule = 'allowedScopes';
-            break;
-        case 'tool':
-            rule = 'allowedTools';
-            break;
-        default:
-            rule = String(details.constraint);
-    }
-    return new PolicyDenied(rule, details.allowed, details.requested, details.fix, details);
-}
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.Guardrails=exports.PolicyDenied=void 0,exports.extractSuggestion=extractSuggestion,exports.toPolicyDenied=toPolicyDenied;class PolicyDenied extends Error{rule;allowed;requested;suggestion;details;constructor(e,t,o,i,l){super(`Policy violation: ${e}`),this.rule=e,this.allowed=t,this.requested=o,this.suggestion=i,this.details=l,this.name="PolicyDenied"}toAgentFormat(){return[`POLICY_VIOLATION: ${this.rule}`,`REQUESTED: ${JSON.stringify(this.requested)}`,`ALLOWED: ${JSON.stringify(this.allowed)}`,`SUGGESTION: ${this.suggestion}`].join("\n")}toUserFormat(){return[`❌ Policy Violation: ${this.rule}`,"",`You requested: ${this.formatValue(this.requested)}`,`Policy allows: ${this.formatValue(this.allowed)}`,"",`💡 Suggestion: ${this.suggestion}`].join("\n")}toLogFormat(){return{error:"PolicyDenied",rule:this.rule,allowed:this.allowed,requested:this.requested,suggestion:this.suggestion,details:this.details,timestamp:(new Date).toISOString()}}formatValue(e){return"number"==typeof e?this.rule.includes("amount")||this.rule.includes("Amount")?`$${e.toLocaleString()}`:e.toLocaleString():Array.isArray(e)?e.map(e=>`"${String(e)}"`).join(", "):JSON.stringify(e)}}exports.PolicyDenied=PolicyDenied;class Guardrails{static amountExceeded(e){let t,o;switch(e.type){case"per-transaction":t="maxAmount",o=`Reduce amount to $${e.limit.toLocaleString()} or request policy update from admin`;break;case"daily":t="dailyAmount",o=`Reduce amount to stay within daily limit of $${e.limit.toLocaleString()}, or wait until tomorrow`;break;case"monthly":t="monthlyAmount",o=`Reduce amount to stay within monthly limit of $${e.limit.toLocaleString()}, or wait until next month`}return new PolicyDenied(t,e.limit,e.requested,o)}static rateLimitExceeded(e){const t=e.windowMs/1e3,o=t>=60?`Wait ${Math.ceil(t/60)} minutes before making additional calls`:`Wait ${t} seconds before making additional calls`;return new PolicyDenied("callsPerMinute",e.limit,e.current+1,o)}static toolDenied(e){const[t]=e.tool.split(":"),o=0===e.allowed.length?`No tools are currently allowed. Request approval from admin to enable "${e.tool}"`:`Request approval from admin to add "${e.tool}" or "${t}:*" to allowed tools`;return new PolicyDenied("allowedTools",e.allowed,e.tool,o)}static scopeDenied(e){const t=0===e.allowed.length?`No scopes are currently allowed. Request approval from admin to enable "${e.scope}"`:`Request approval from admin to add "${e.scope}" to allowed scopes`;return new PolicyDenied("allowedScopes",e.allowed,e.scope,t)}static fieldDenied(e){const t=`Field "${e.field}" is restricted. Contact admin to update policy.fieldFilters for "${e.tool}"`;return new PolicyDenied("fieldFilters",e.allowed,e.field,t)}static timeWindowDenied(e){const t=`Actions are only allowed between ${e.allowedStart} and ${e.allowedEnd}. Current time is ${e.current.toTimeString()}`;return new PolicyDenied("timeWindow",`${e.allowedStart} - ${e.allowedEnd}`,e.current.toTimeString(),t)}static custom(e){return new PolicyDenied(e.rule,e.allowed,e.requested,e.suggestion)}}function extractSuggestion(e){return e.fix??"Contact administrator to update policy"}function toPolicyDenied(e){let t;switch(e.constraint){case"amountPerTxn":t="maxAmount";break;case"dailyAmount":t="dailyAmount";break;case"callsPerMinute":t="callsPerMinute";break;case"scope":t="allowedScopes";break;case"tool":t="allowedTools";break;default:t=String(e.constraint)}return new PolicyDenied(t,e.allowed,e.requested,e.fix,e)}exports.Guardrails=Guardrails;

package/dist-standalone/cjs/health-check.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.createHealthChecker=createHealthChecker,exports.healthEndpoint=healthEndpoint;class HealthCheckerImpl{startTime;registry;transport;serviceName;version;environment;timeoutMs;enableStartupProbe;startupComplete=!1;constructor(t={}){this.startTime=Date.now(),this.registry=t.registry,this.transport=t.transport,this.serviceName=t.serviceName,this.version=t.version,this.environment=t.environment,this.timeoutMs=t.timeoutMs??5e3,this.enableStartupProbe=t.enableStartupProbe??!0}markStartupComplete(){this.startupComplete=!0}isStartupComplete(){return this.startupComplete}async check(t="readiness"){const e=(new Date).toISOString(),s=Math.floor((Date.now()-this.startTime)/1e3);if("startup"===t&&this.enableStartupProbe){const t=[{name:"startup",status:this.startupComplete?"healthy":"unhealthy",message:this.startupComplete?"Initialization complete":"Waiting for startup completion (call markStartupComplete())",lastCheck:e}];return{healthy:this.startupComplete,timestamp:e,uptimeSeconds:s,components:t,metadata:this.buildMetadata()}}if("liveness"===t){return{healthy:!0,timestamp:e,uptimeSeconds:s,components:[{name:"self",status:"healthy",message:"Service responsive",lastCheck:e}],metadata:this.buildMetadata()}}const a=[];if(this.registry){const t=await this.checkRegistry();a.push(t)}if(this.transport){const t=await this.checkTransport();a.push(t)}0===a.length&&a.push({name:"self",status:"healthy",message:"No dependencies configured",lastCheck:e});return{healthy:a.every(t=>"healthy"===t.status),timestamp:e,uptimeSeconds:s,components:a,metadata:this.buildMetadata()}}buildMetadata(){const t={};return this.serviceName&&(t.service=this.serviceName),this.version&&(t.version=this.version),this.environment&&(t.environment=this.environment),Object.keys(t).length>0?t:void 0}async checkRegistry(){const t=Date.now(),e=(new Date).toISOString();try{if(!this.registry)return{name:"registry",status:"unhealthy",message:"Registry not configured",lastCheck:e};const s=await this.withTimeout(this.registry.resolve("did:xail:health_check_probe"),this.timeoutMs),a=Date.now()-t;if(s&&"object"==typeof s&&"ok"in s){if(s.ok)return{name:"registry",status:"healthy",message:"Registry responding",latencyMs:a,lastCheck:e};{const t="string"==typeof s.error?s.error:"UNKNOWN";return t.includes("NOT_FOUND")?{name:"registry",status:"healthy",message:"Registry responding",latencyMs:a,lastCheck:e}:{name:"registry",status:"unhealthy",message:`Registry error: ${t}`,latencyMs:a,lastCheck:e}}}return{name:"registry",status:"healthy",message:"Registry responding",latencyMs:a,lastCheck:e}}catch(s){const a=Date.now()-t,r=s instanceof Error?s.message:"Unknown error";return r.toLowerCase().includes("timeout")?{name:"registry",status:"degraded",message:`Registry slow (>${this.timeoutMs}ms)`,latencyMs:a,lastCheck:e}:{name:"registry",status:"unhealthy",message:`Registry error: ${r}`,latencyMs:a,lastCheck:e}}}async checkTransport(){const t=Date.now(),e=(new Date).toISOString();try{if(!this.transport)return{name:"transport",status:"unhealthy",message:"Transport not configured",lastCheck:e};return{name:"transport",status:"healthy",message:"Transport adapter available",latencyMs:Date.now()-t,lastCheck:e}}catch(s){const a=Date.now()-t;return{name:"transport",status:"unhealthy",message:`Transport error: ${s instanceof Error?s.message:"Unknown error"}`,latencyMs:a,lastCheck:e}}}async withTimeout(t,e){return Promise.race([t,new Promise((t,s)=>setTimeout(()=>s(new Error("Health check timeout")),e))])}}function createHealthChecker(t){return new HealthCheckerImpl(t)}function healthEndpoint(t,e="readiness"){return async(s,a)=>{try{const s=await t.check(e),r=s.healthy?200:503;a.status(r).json(s)}catch(t){const e=t instanceof Error?t.message:"Unknown error";a.status(503).json({healthy:!1,timestamp:(new Date).toISOString(),uptimeSeconds:0,components:[{name:"health-check",status:"unhealthy",message:`Health check failed: ${e}`,lastCheck:(new Date).toISOString()}]})}}}