@sonnevhq/gate 0.0.0-stage → 0.1.0

package/dist/errors.js

@@ -0,0 +1,70 @@
+export class GateError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "GateError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+/**
+ * Thrown when the SONNEV Gate API cannot be reached.
+ * Enforcement fails closed: tool is NEVER executed.
+ */
+export class GateUnreachableError extends GateError {
+    constructor(message = "SONNEV Gate is unreachable. Failing closed to prevent unauthorized tool execution.") {
+        super(message);
+        this.name = "GateUnreachableError";
+    }
+}
+/**
+ * Thrown when an action is denied by deterministic policy evaluation.
+ */
+export class PolicyDeniedError extends GateError {
+    actionId;
+    reason;
+    matchedRule;
+    constructor(reason, actionId, matchedRule) {
+        super(`Action blocked by policy: ${reason}`);
+        this.name = "PolicyDeniedError";
+        this.actionId = actionId;
+        this.reason = reason;
+        this.matchedRule = matchedRule;
+    }
+}
+/**
+ * Thrown when an approval request times out without human authorization.
+ */
+export class ApprovalTimeoutError extends GateError {
+    actionId;
+    constructor(message, actionId) {
+        super(message);
+        this.name = "ApprovalTimeoutError";
+        this.actionId = actionId;
+    }
+}
+/**
+ * Thrown when a human approver explicitly rejects the requested action.
+ */
+export class ApprovalRejectedError extends GateError {
+    actionId;
+    reason;
+    constructor(actionId, reason) {
+        super(`Action rejected by approver: ${reason || "No rejection reason provided"}`);
+        this.name = "ApprovalRejectedError";
+        this.actionId = actionId;
+        this.reason = reason;
+    }
+}
+/**
+ * Thrown when tool post-execution verification fails intent checking.
+ */
+export class VerificationFailedError extends GateError {
+    actionId;
+    reason;
+    constructor(reason, actionId) {
+        super(`Tool output failed post-execution verification: ${reason}`);
+        this.name = "VerificationFailedError";
+        this.actionId = actionId;
+        this.reason = reason;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,SAAU,SAAQ,KAAK;IAClC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,oBAAqB,SAAQ,SAAS;IACjD,YAAY,UAAkB,oFAAoF;QAChH,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IAC9B,QAAQ,CAAU;IAClB,MAAM,CAAS;IACf,WAAW,CAKzB;IAEF,YACE,MAAc,EACd,QAAiB,EACjB,WAA4E;QAE5E,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,SAAS;IACjC,QAAQ,CAAS;IAEjC,YAAY,OAAe,EAAE,QAAgB;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,qBAAsB,SAAQ,SAAS;IAClC,QAAQ,CAAS;IACjB,MAAM,CAAU;IAEhC,YAAY,QAAgB,EAAE,MAAe;QAC3C,KAAK,CAAC,gCAAgC,MAAM,IAAI,8BAA8B,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,SAAS;IACpC,QAAQ,CAAU;IAClB,MAAM,CAAS;IAE/B,YAAY,MAAc,EAAE,QAAiB;QAC3C,KAAK,CAAC,mDAAmD,MAAM,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF"}

package/dist/gate.d.ts

@@ -0,0 +1,138 @@
+import { z } from "zod";
+import { type SignedReceipt, type ReceiptVerificationResult } from "@sonnevhq/core";
+import type { ActionStatusResponse, CheckActionResponse, GateConfig, WrapOptions } from "./types.js";
+export declare const CheckActionResponseSchema: z.ZodObject<{
+    id: z.ZodString;
+    decision: z.ZodEnum<["allow", "deny", "pending_approval"]>;
+    shadowMode: z.ZodOptional<z.ZodBoolean>;
+    shadowDecision: z.ZodOptional<z.ZodEnum<["allow", "deny", "pending_approval"]>>;
+    reason: z.ZodOptional<z.ZodString>;
+    matchedRule: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        priority: z.ZodOptional<z.ZodNumber>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        name: string;
+        reason?: string | undefined;
+        priority?: number | undefined;
+    }, {
+        id: string;
+        name: string;
+        reason?: string | undefined;
+        priority?: number | undefined;
+    }>>;
+    approvalId: z.ZodOptional<z.ZodString>;
+    rateLimitRemaining: z.ZodOptional<z.ZodNumber>;
+    receipt: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    decision: "allow" | "pending_approval" | "deny";
+    shadowMode?: boolean | undefined;
+    shadowDecision?: "allow" | "pending_approval" | "deny" | undefined;
+    reason?: string | undefined;
+    matchedRule?: {
+        id: string;
+        name: string;
+        reason?: string | undefined;
+        priority?: number | undefined;
+    } | undefined;
+    approvalId?: string | undefined;
+    rateLimitRemaining?: number | undefined;
+    receipt?: Record<string, unknown> | undefined;
+}, {
+    id: string;
+    decision: "allow" | "pending_approval" | "deny";
+    shadowMode?: boolean | undefined;
+    shadowDecision?: "allow" | "pending_approval" | "deny" | undefined;
+    reason?: string | undefined;
+    matchedRule?: {
+        id: string;
+        name: string;
+        reason?: string | undefined;
+        priority?: number | undefined;
+    } | undefined;
+    approvalId?: string | undefined;
+    rateLimitRemaining?: number | undefined;
+    receipt?: Record<string, unknown> | undefined;
+}>;
+export declare const ActionStatusResponseSchema: z.ZodObject<{
+    id: z.ZodString;
+    status: z.ZodEnum<["pending", "approved", "rejected", "executed", "failed", "expired"]>;
+    decision: z.ZodOptional<z.ZodEnum<["allow", "deny", "pending_approval"]>>;
+    reason: z.ZodOptional<z.ZodString>;
+    tool: z.ZodOptional<z.ZodString>;
+    action: z.ZodOptional<z.ZodString>;
+    params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    approval: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    status: "pending" | "approved" | "rejected" | "expired" | "executed" | "failed";
+    decision?: "allow" | "pending_approval" | "deny" | undefined;
+    params?: Record<string, unknown> | undefined;
+    reason?: string | undefined;
+    tool?: string | undefined;
+    action?: string | undefined;
+    approval?: Record<string, unknown> | undefined;
+}, {
+    id: string;
+    status: "pending" | "approved" | "rejected" | "expired" | "executed" | "failed";
+    decision?: "allow" | "pending_approval" | "deny" | undefined;
+    params?: Record<string, unknown> | undefined;
+    reason?: string | undefined;
+    tool?: string | undefined;
+    action?: string | undefined;
+    approval?: Record<string, unknown> | undefined;
+}>;
+export declare class SonnevGate {
+    private readonly apiKey;
+    private readonly endpoint;
+    private readonly timeoutMs;
+    private readonly pollIntervalMs;
+    private readonly approvalTimeoutMs;
+    constructor(config?: GateConfig);
+    /**
+     * Pre-execution policy check.
+     * Fails closed if the gateway is unreachable.
+     */
+    checkAction(params: {
+        tool: string;
+        action?: string;
+        params?: Record<string, unknown>;
+    }): Promise<CheckActionResponse>;
+    /**
+     * Queries status of an action request.
+     */
+    getActionStatus(actionId: string): Promise<ActionStatusResponse>;
+    /**
+     * Waits for a pending approval action until approved, rejected, or expired.
+     * Retries transient network/5xx errors while polling until approval timeout expires.
+     */
+    waitForApproval(actionId: string, options?: {
+        timeoutMs?: number;
+        pollIntervalMs?: number;
+    }): Promise<ActionStatusResponse>;
+    /**
+     * Reports execution outcome back to the gateway.
+     */
+    reportResult(actionId: string, result: {
+        status: "success" | "failure" | "failed_verification" | "recovered";
+        output?: unknown;
+        error?: string;
+        durationMs?: number;
+    }): Promise<void>;
+    /**
+     * Wraps an arbitrary tool execution function with policy check, human approval,
+     * verification, and outcome reporting.
+     *
+     * @param toolFn Function implementing the tool logic
+     * @param options Policy options including tool name, verification, and recovery
+     */
+    wrap<TParams = any, TResult = any>(toolFn: (params: TParams) => Promise<TResult> | TResult, options: WrapOptions<TParams, TResult>): (params: TParams) => Promise<TResult>;
+    /**
+     * Verifies an Ed25519 signed receipt offline without network calls.
+     */
+    verifyReceipt(receipt: SignedReceipt, expectedPublicKey?: string): ReceiptVerificationResult;
+}
+//# sourceMappingURL=gate.d.ts.map

package/dist/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,yBAAyB,EAC/B,MAAM,gBAAgB,CAAC;AAUxB,OAAO,KAAK,EACV,oBAAoB,EACpB,mBAAmB,EACnB,UAAU,EACV,WAAW,EACZ,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiBpC,CAAC;AAGH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;EASrC,CAAC;AAEH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;gBAE/B,MAAM,GAAE,UAAe;IAwBnC;;;OAGG;IACU,WAAW,CAAC,MAAM,EAAE;QAC/B,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA0DhC;;OAEG;IACU,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAoC7E;;;OAGG;IACU,eAAe,CAC1B,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GACxD,OAAO,CAAC,oBAAoB,CAAC;IAqChC;;OAEG;IACU,YAAY,CACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE;QACN,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,qBAAqB,GAAG,WAAW,CAAC;QACpE,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GACA,OAAO,CAAC,IAAI,CAAC;IAkBhB;;;;;;OAMG;IACI,IAAI,CAAC,OAAO,GAAG,GAAG,EAAE,OAAO,GAAG,GAAG,EACtC,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,EACvD,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,GACrC,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC;IAkIxC;;OAEG;IACI,aAAa,CAClB,OAAO,EAAE,aAAa,EACtB,iBAAiB,CAAC,EAAE,MAAM,GACzB,yBAAyB;CAG7B"}

package/dist/gate.js

@@ -0,0 +1,308 @@
+import { z } from "zod";
+import { verifySignedReceipt, } from "@sonnevhq/core";
+import { ApprovalRejectedError, ApprovalTimeoutError, GateError, GateUnreachableError, PolicyDeniedError, VerificationFailedError, } from "./errors.js";
+export const CheckActionResponseSchema = z.object({
+    id: z.string().min(1),
+    decision: z.enum(["allow", "deny", "pending_approval"]),
+    shadowMode: z.boolean().optional(),
+    shadowDecision: z.enum(["allow", "deny", "pending_approval"]).optional(),
+    reason: z.string().optional(),
+    matchedRule: z
+        .object({
+        id: z.string(),
+        name: z.string(),
+        priority: z.number().optional(),
+        reason: z.string().optional(),
+    })
+        .optional(),
+    approvalId: z.string().optional(),
+    rateLimitRemaining: z.number().optional(),
+    receipt: z.record(z.unknown()).optional(),
+});
+export const ActionStatusResponseSchema = z.object({
+    id: z.string().min(1),
+    status: z.enum(["pending", "approved", "rejected", "executed", "failed", "expired"]),
+    decision: z.enum(["allow", "deny", "pending_approval"]).optional(),
+    reason: z.string().optional(),
+    tool: z.string().optional(),
+    action: z.string().optional(),
+    params: z.record(z.unknown()).optional(),
+    approval: z.record(z.unknown()).optional(),
+});
+export class SonnevGate {
+    apiKey;
+    endpoint;
+    timeoutMs;
+    pollIntervalMs;
+    approvalTimeoutMs;
+    constructor(config = {}) {
+        const key = config.apiKey ||
+            (typeof process !== "undefined" ? process.env?.["SONNEV_GATE_API_KEY"] : undefined);
+        if (!key) {
+            throw new GateError("SONNEV Gate API key is required. Set SONNEV_GATE_API_KEY environment variable or pass apiKey in constructor.");
+        }
+        this.apiKey = key;
+        this.endpoint = (config.endpoint ||
+            (typeof process !== "undefined" ? process.env?.["SONNEV_GATE_URL"] : undefined) ||
+            "http://localhost:3000").replace(/\/$/, "");
+        this.timeoutMs = config.timeoutMs ?? 5000;
+        this.pollIntervalMs = config.pollIntervalMs ?? 1000;
+        this.approvalTimeoutMs = config.approvalTimeoutMs ?? 900_000; // 15 mins
+    }
+    /**
+     * Pre-execution policy check.
+     * Fails closed if the gateway is unreachable.
+     */
+    async checkAction(params) {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), this.timeoutMs);
+        try {
+            const headers = {
+                Authorization: `Bearer ${this.apiKey}`,
+                "Content-Type": "application/json",
+                "User-Agent": "SONNEV-Gate-SDK/0.1.0",
+            };
+            const response = await fetch(`${this.endpoint}/api/v1/actions/check`, {
+                method: "POST",
+                headers,
+                body: JSON.stringify({
+                    tool: params.tool,
+                    action: params.action,
+                    params: params.params || {},
+                }),
+                signal: controller.signal,
+            });
+            if (response.status === 401 || response.status === 403) {
+                const errorData = await response.json().catch(() => ({}));
+                throw new GateError(errorData.error || `Authentication failed with status ${response.status}`);
+            }
+            if (!response.ok) {
+                throw new GateUnreachableError(`Gateway returned non-success HTTP status ${response.status}. Failing closed.`);
+            }
+            const json = await response.json().catch(() => ({}));
+            const parseResult = CheckActionResponseSchema.safeParse(json);
+            if (!parseResult.success) {
+                throw new GateUnreachableError(`Gateway returned invalid response format: ${parseResult.error.message}. Failing closed.`);
+            }
+            return parseResult.data;
+        }
+        catch (err) {
+            if (err instanceof GateError) {
+                throw err;
+            }
+            // Any network drop, DNS failure, or aborted timeout fails closed
+            throw new GateUnreachableError(`Failed to reach SONNEV Gate at ${this.endpoint}: ${err.message}. Failing closed.`);
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+    /**
+     * Queries status of an action request.
+     */
+    async getActionStatus(actionId) {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), this.timeoutMs);
+        try {
+            const response = await fetch(`${this.endpoint}/api/v1/actions/${actionId}`, {
+                method: "GET",
+                headers: {
+                    Authorization: `Bearer ${this.apiKey}`,
+                },
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                throw new GateUnreachableError(`Failed to get action status (${response.status})`);
+            }
+            const json = await response.json().catch(() => ({}));
+            const parseResult = ActionStatusResponseSchema.safeParse(json);
+            if (!parseResult.success) {
+                throw new GateUnreachableError(`Gateway returned invalid status format: ${parseResult.error.message}`);
+            }
+            return parseResult.data;
+        }
+        catch (err) {
+            if (err instanceof GateError)
+                throw err;
+            throw new GateUnreachableError(`Gateway unreachable: ${err.message}`);
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+    /**
+     * Waits for a pending approval action until approved, rejected, or expired.
+     * Retries transient network/5xx errors while polling until approval timeout expires.
+     */
+    async waitForApproval(actionId, options) {
+        const maxWait = options?.timeoutMs ?? this.approvalTimeoutMs;
+        const interval = options?.pollIntervalMs ?? this.pollIntervalMs;
+        const startTime = Date.now();
+        while (Date.now() - startTime < maxWait) {
+            await sleep(interval);
+            let status;
+            try {
+                status = await this.getActionStatus(actionId);
+            }
+            catch (err) {
+                // Retry transient errors while polling until maxWait expires
+                if (Date.now() - startTime < maxWait) {
+                    continue;
+                }
+                throw err;
+            }
+            if (status.status === "approved" || (status.decision === "allow" && status.status !== "pending")) {
+                return status;
+            }
+            if (status.status === "rejected" || status.decision === "deny") {
+                throw new ApprovalRejectedError(actionId, status.reason);
+            }
+            if (status.status === "expired") {
+                throw new ApprovalTimeoutError("Approval request expired", actionId);
+            }
+        }
+        throw new ApprovalTimeoutError(`Approval wait timed out after ${maxWait}ms`, actionId);
+    }
+    /**
+     * Reports execution outcome back to the gateway.
+     */
+    async reportResult(actionId, result) {
+        try {
+            await fetch(`${this.endpoint}/api/v1/actions/${actionId}/result`, {
+                method: "POST",
+                headers: {
+                    Authorization: `Bearer ${this.apiKey}`,
+                    "Content-Type": "application/json",
+                },
+                body: JSON.stringify(result),
+            });
+        }
+        catch (err) {
+            console.warn(`[SONNEV Gate] Failed to report action result for ${actionId}:`, err.message);
+        }
+    }
+    /**
+     * Wraps an arbitrary tool execution function with policy check, human approval,
+     * verification, and outcome reporting.
+     *
+     * @param toolFn Function implementing the tool logic
+     * @param options Policy options including tool name, verification, and recovery
+     */
+    wrap(toolFn, options) {
+        return async (params) => {
+            // 1. Pre-execution policy check (fails closed if unreachable)
+            const check = await this.checkAction({
+                tool: options.tool,
+                action: options.action,
+                params: params || {},
+            });
+            // 2. Immediate Deny (only in enforce mode)
+            if (check.decision === "deny" && !check.shadowMode) {
+                throw new PolicyDeniedError(check.reason, check.id, check.matchedRule);
+            }
+            // 3. Human Approval Wait (only in enforce mode)
+            let approvedStatus = null;
+            if (check.decision === "pending_approval" && !check.shadowMode) {
+                approvedStatus = await this.waitForApproval(check.id, {
+                    timeoutMs: options.approvalTimeoutMs,
+                    pollIntervalMs: options.pollIntervalMs,
+                });
+            }
+            // 4. Execution ONLY if strictly authorized or shadow mode
+            const isAllowed = check.decision === "allow" || check.shadowMode === true;
+            const isApproved = approvedStatus?.status === "approved" || approvedStatus?.decision === "allow";
+            if (!isAllowed && !isApproved) {
+                throw new PolicyDeniedError(check.reason || "Action was not authorized for execution", check.id, check.matchedRule);
+            }
+            // 5. Execution
+            const startTime = Date.now();
+            let result;
+            try {
+                result = await toolFn(params);
+            }
+            catch (execError) {
+                const durationMs = Date.now() - startTime;
+                await this.reportResult(check.id, {
+                    status: "failure",
+                    error: execError.message || String(execError),
+                    durationMs,
+                });
+                if (options.recover) {
+                    const recovered = await options.recover(execError, params);
+                    if (recovered !== undefined) {
+                        await this.reportResult(check.id, {
+                            status: "recovered",
+                            output: recovered,
+                            durationMs,
+                        });
+                        return recovered;
+                    }
+                }
+                throw execError;
+            }
+            const durationMs = Date.now() - startTime;
+            // 5. Post-Execution Verification Hook
+            if (options.verify) {
+                let isValid = true;
+                let failureReason = "Verification criteria not satisfied";
+                try {
+                    const verifyOutput = await options.verify(result, params);
+                    if (typeof verifyOutput === "boolean") {
+                        isValid = verifyOutput;
+                    }
+                    else if (verifyOutput && typeof verifyOutput === "object") {
+                        isValid = verifyOutput.valid;
+                        if (verifyOutput.reason)
+                            failureReason = verifyOutput.reason;
+                    }
+                }
+                catch (verifyErr) {
+                    isValid = false;
+                    failureReason = `Verification hook threw: ${verifyErr.message}`;
+                }
+                if (!isValid) {
+                    await this.reportResult(check.id, {
+                        status: "failed_verification",
+                        error: failureReason,
+                        output: result,
+                        durationMs,
+                    });
+                    if (options.recover) {
+                        try {
+                            const recovered = await options.recover(new Error(failureReason), params);
+                            if (recovered !== undefined) {
+                                await this.reportResult(check.id, {
+                                    status: "recovered",
+                                    output: recovered,
+                                    durationMs,
+                                });
+                                return recovered;
+                            }
+                        }
+                        catch (recoverErr) {
+                            console.warn("[SONNEV Gate] Recovery hook threw after verification failure:", recoverErr);
+                        }
+                    }
+                    throw new VerificationFailedError(failureReason, check.id);
+                }
+            }
+            // 6. Report Success Outcome
+            await this.reportResult(check.id, {
+                status: "success",
+                output: result,
+                durationMs,
+            });
+            return result;
+        };
+    }
+    /**
+     * Verifies an Ed25519 signed receipt offline without network calls.
+     */
+    verifyReceipt(receipt, expectedPublicKey) {
+        return verifySignedReceipt(receipt, expectedPublicKey);
+    }
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=gate.js.map

package/dist/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,mBAAmB,GAGpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,SAAS,EACT,oBAAoB,EACpB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAQrB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACvD,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,CAAC;SACX,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC9B,CAAC;SACD,QAAQ,EAAE;IACb,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACpF,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAEH,MAAM,OAAO,UAAU;IACJ,MAAM,CAAS;IACf,QAAQ,CAAS;IACjB,SAAS,CAAS;IAClB,cAAc,CAAS;IACvB,iBAAiB,CAAS;IAE3C,YAAY,SAAqB,EAAE;QACjC,MAAM,GAAG,GACP,MAAM,CAAC,MAAM;YACb,CAAC,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAEtF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,SAAS,CACjB,8GAA8G,CAC/G,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;QAElB,IAAI,CAAC,QAAQ,GAAG,CACd,MAAM,CAAC,QAAQ;YACf,CAAC,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/E,uBAAuB,CACxB,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAErB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;QAC1C,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;QACpD,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,OAAO,CAAC,CAAC,UAAU;IAC1E,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,WAAW,CAAC,MAIxB;QACC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAErE,IAAI,CAAC;YACH,MAAM,OAAO,GAA2B;gBACtC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;gBACtC,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,uBAAuB;aACtC,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,uBAAuB,EAAE;gBACpE,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;iBAC5B,CAAC;gBACF,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC1D,MAAM,IAAI,SAAS,CACjB,SAAS,CAAC,KAAK,IAAI,qCAAqC,QAAQ,CAAC,MAAM,EAAE,CAC1E,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,oBAAoB,CAC5B,4CAA4C,QAAQ,CAAC,MAAM,mBAAmB,CAC/E,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACrD,MAAM,WAAW,GAAG,yBAAyB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC9D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBACzB,MAAM,IAAI,oBAAoB,CAC5B,6CAA6C,WAAW,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAC1F,CAAC;YACJ,CAAC;YAED,OAAO,WAAW,CAAC,IAA2B,CAAC;QACjD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;gBAC7B,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,iEAAiE;YACjE,MAAM,IAAI,oBAAoB,CAC5B,kCAAkC,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,OAAO,mBAAmB,CACnF,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAGD;;OAEG;IACI,KAAK,CAAC,eAAe,CAAC,QAAgB;QAC3C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAErE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,mBAAmB,QAAQ,EAAE,EAAE;gBAC1E,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;iBACvC;gBACD,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,oBAAoB,CAC5B,gCAAgC,QAAQ,CAAC,MAAM,GAAG,CACnD,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACrD,MAAM,WAAW,GAAG,0BAA0B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBACzB,MAAM,IAAI,oBAAoB,CAC5B,2CAA2C,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,CACvE,CAAC;YACJ,CAAC;YAED,OAAO,WAAW,CAAC,IAA4B,CAAC;QAClD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,YAAY,SAAS;gBAAE,MAAM,GAAG,CAAC;YACxC,MAAM,IAAI,oBAAoB,CAAC,wBAAwB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACxE,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,eAAe,CAC1B,QAAgB,EAChB,OAAyD;QAEzD,MAAM,OAAO,GAAG,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC,iBAAiB,CAAC;QAC7D,MAAM,QAAQ,GAAG,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC,cAAc,CAAC;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAAC;YACxC,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;YACtB,IAAI,MAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,6DAA6D;gBAC7D,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAAC;oBACrC,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;gBACjG,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC/D,MAAM,IAAI,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3D,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,oBAAoB,CAAC,0BAA0B,EAAE,QAAQ,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,MAAM,IAAI,oBAAoB,CAC5B,iCAAiC,OAAO,IAAI,EAC5C,QAAQ,CACT,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY,CACvB,QAAgB,EAChB,MAKC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ,mBAAmB,QAAQ,SAAS,EAAE;gBAChE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;oBACtC,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,CACV,oDAAoD,QAAQ,GAAG,EAC/D,GAAG,CAAC,OAAO,CACZ,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACI,IAAI,CACT,MAAuD,EACvD,OAAsC;QAEtC,OAAO,KAAK,EAAE,MAAe,EAAoB,EAAE;YACjD,8DAA8D;YAC9D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;gBACnC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAG,MAAkC,IAAI,EAAE;aAClD,CAAC,CAAC;YAEH,2CAA2C;YAC3C,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;gBACnD,MAAM,IAAI,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YACzE,CAAC;YAED,gDAAgD;YAChD,IAAI,cAAc,GAAgC,IAAI,CAAC;YACvD,IAAI,KAAK,CAAC,QAAQ,KAAK,kBAAkB,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC/D,cAAc,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE;oBACpD,SAAS,EAAE,OAAO,CAAC,iBAAiB;oBACpC,cAAc,EAAE,OAAO,CAAC,cAAc;iBACvC,CAAC,CAAC;YACL,CAAC;YAED,0DAA0D;YAC1D,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;YAC1E,MAAM,UAAU,GAAG,cAAc,EAAE,MAAM,KAAK,UAAU,IAAI,cAAc,EAAE,QAAQ,KAAK,OAAO,CAAC;YAEjG,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC9B,MAAM,IAAI,iBAAiB,CACzB,KAAK,CAAC,MAAM,IAAI,yCAAyC,EACzD,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,WAAW,CAClB,CAAC;YACJ,CAAC;YAGD,eAAe;YACf,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,IAAI,MAAe,CAAC;YAEpB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,SAAc,EAAE,CAAC;gBACxB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAC1C,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE;oBAChC,MAAM,EAAE,SAAS;oBACjB,KAAK,EAAE,SAAS,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC;oBAC7C,UAAU;iBACX,CAAC,CAAC;gBAEH,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBACpB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;oBAC3D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;wBAC5B,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE;4BAChC,MAAM,EAAE,WAAW;4BACnB,MAAM,EAAE,SAAS;4BACjB,UAAU;yBACX,CAAC,CAAC;wBACH,OAAO,SAAS,CAAC;oBACnB,CAAC;gBACH,CAAC;gBAED,MAAM,SAAS,CAAC;YAClB,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE1C,sCAAsC;YACtC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,IAAI,OAAO,GAAG,IAAI,CAAC;gBACnB,IAAI,aAAa,GAAG,qCAAqC,CAAC;gBAE1D,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAC1D,IAAI,OAAO,YAAY,KAAK,SAAS,EAAE,CAAC;wBACtC,OAAO,GAAG,YAAY,CAAC;oBACzB,CAAC;yBAAM,IAAI,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;wBAC5D,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC;wBAC7B,IAAI,YAAY,CAAC,MAAM;4BAAE,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC;oBAC/D,CAAC;gBACH,CAAC;gBAAC,OAAO,SAAc,EAAE,CAAC;oBACxB,OAAO,GAAG,KAAK,CAAC;oBAChB,aAAa,GAAG,4BAA4B,SAAS,CAAC,OAAO,EAAE,CAAC;gBAClE,CAAC;gBAED,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE;wBAChC,MAAM,EAAE,qBAAqB;wBAC7B,KAAK,EAAE,aAAa;wBACpB,MAAM,EAAE,MAAM;wBACd,UAAU;qBACX,CAAC,CAAC;oBAEH,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;wBACpB,IAAI,CAAC;4BACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CACrC,IAAI,KAAK,CAAC,aAAa,CAAC,EACxB,MAAM,CACP,CAAC;4BACF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gCAC5B,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE;oCAChC,MAAM,EAAE,WAAW;oCACnB,MAAM,EAAE,SAAS;oCACjB,UAAU;iCACX,CAAC,CAAC;gCACH,OAAO,SAAS,CAAC;4BACnB,CAAC;wBACH,CAAC;wBAAC,OAAO,UAAU,EAAE,CAAC;4BACpB,OAAO,CAAC,IAAI,CACV,+DAA+D,EAC/D,UAAU,CACX,CAAC;wBACJ,CAAC;oBACH,CAAC;oBAED,MAAM,IAAI,uBAAuB,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;YAED,4BAA4B;YAC5B,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE;gBAChC,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,MAAM;gBACd,UAAU;aACX,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,aAAa,CAClB,OAAsB,EACtB,iBAA0B;QAE1B,OAAO,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACzD,CAAC;CACF;AAGD,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { SonnevGate } from "./gate.js";
+export * from "./errors.js";
+export * from "./types.js";
+export * from "./adapters/index.js";
+export { verifySignedReceipt, exportReceiptToJson, parseReceiptFromJson, generateReceiptKeyPair, createSignedReceipt, type SignedReceipt, type SignedReceiptPayload, type ReceiptVerificationResult, } from "@sonnevhq/core";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,GAC/B,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,6 @@
+export { SonnevGate } from "./gate.js";
+export * from "./errors.js";
+export * from "./types.js";
+export * from "./adapters/index.js";
+export { verifySignedReceipt, exportReceiptToJson, parseReceiptFromJson, generateReceiptKeyPair, createSignedReceipt, } from "@sonnevhq/core";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,GAIpB,MAAM,gBAAgB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,96 @@
+export interface GateConfig {
+    /**
+     * Agent API key. Defaults to process.env.SONNEV_GATE_API_KEY
+     */
+    apiKey?: string;
+    /**
+     * Gateway Base URL. Defaults to process.env.SONNEV_GATE_URL || "http://localhost:3000"
+     */
+    endpoint?: string;
+    /**
+     * Request timeout for gateway communication in ms (default: 5000ms).
+     */
+    timeoutMs?: number;
+    /**
+     * Polling frequency in ms when waiting on human approvals (default: 1000ms).
+     */
+    pollIntervalMs?: number;
+    /**
+     * Maximum duration in ms to wait for an approval before timing out (default: 900,000ms = 15m).
+     */
+    approvalTimeoutMs?: number;
+}
+export interface WrapOptions<TParams, TResult> {
+    /**
+     * Tool identifier as registered in SONNEV Gate policies (e.g. "send_payment").
+     */
+    tool: string;
+    /**
+     * Optional specific action name within the tool (e.g. "create", "delete").
+     */
+    action?: string;
+    /**
+     * Override polling interval for this tool in ms.
+     */
+    pollIntervalMs?: number;
+    /**
+     * Override approval wait timeout for this tool in ms.
+     */
+    approvalTimeoutMs?: number;
+    /**
+     * Post-execution verification hook.
+     * Runs immediately after the tool function returns.
+     * Return false or { valid: false, reason: "..." } to mark action failed_verification,
+     * alert the incident room, and trigger an automated agent pause.
+     */
+    verify?: (result: TResult, params: TParams) => Promise<boolean | {
+        valid: boolean;
+        reason?: string;
+    }> | boolean | {
+        valid: boolean;
+        reason?: string;
+    };
+    /**
+     * Optional recovery hook called when execution or verification fails.
+     */
+    recover?: (error: unknown, params: TParams) => Promise<TResult | void> | TResult | void;
+}
+export interface CheckActionParams {
+    tool: string;
+    action?: string;
+    params?: Record<string, unknown>;
+    shadowMode?: boolean;
+}
+import type { SignedReceipt } from "@sonnevhq/core";
+export interface CheckActionResponse {
+    id: string;
+    decision: "allow" | "pending_approval" | "deny";
+    shadowMode?: boolean;
+    shadowDecision?: "allow" | "pending_approval" | "deny";
+    reason: string;
+    matchedRule?: {
+        id: string;
+        name: string;
+        priority: number;
+        reason: string;
+    };
+    approvalId?: string;
+    expiresAt?: string;
+    receipt?: SignedReceipt;
+}
+export interface ActionStatusResponse {
+    id: string;
+    tool: string;
+    action?: string;
+    decision: "allow" | "pending_approval" | "deny";
+    status: "allowed" | "pending" | "approved" | "rejected" | "expired" | "executed" | "failed_verification";
+    reason?: string;
+    approval?: {
+        id: string;
+        status: string;
+        approverEmail?: string;
+        note?: string;
+        expiresAt: string;
+    };
+}
+//# sourceMappingURL=types.d.ts.map