agentcert 0.2.7 → 0.4.0

package/dist/vendor/onegent-runtime/stripe-test-readonly.js

@@ -0,0 +1,163 @@
+import { createBoundedVendorSandboxEgress, VendorSandboxEgressError, } from "./vendor-sandbox-egress.js";
+export const STRIPE_TEST_API_ORIGIN = "https://api.stripe.com";
+export const STRIPE_SANDBOX_TIMEOUT_MS = 5_000;
+export const STRIPE_SANDBOX_MAX_REQUESTS_PER_MINUTE = 10;
+export const STRIPE_PAYMENT_INTENT_RETRIEVE = "stripe.payment_intent.retrieve";
+export const STRIPE_PAYMENT_INTENT_LIST = "stripe.payment_intent.list";
+const STRIPE_RESOURCES = Object.freeze([
+    Object.freeze({
+        id: STRIPE_PAYMENT_INTENT_RETRIEVE,
+        method: "GET",
+        pathPattern: /^\/v1\/payment_intents\/pi_[A-Za-z0-9]{8,128}$/,
+    }),
+    Object.freeze({
+        id: STRIPE_PAYMENT_INTENT_LIST,
+        method: "GET",
+        pathPattern: /^\/v1\/payment_intents\?limit=(?:[1-9]|10)$/,
+    }),
+]);
+export function createStripeTestModeReadOnlyAdapter(options) {
+    const apiKey = options.restrictedApiKey.trim();
+    if (!/^rk_test_[A-Za-z0-9_]{8,}$/.test(apiKey)) {
+        throw new Error("Stripe read-only reference adapter requires an rk_test_ restricted test-mode key.");
+    }
+    const timeoutMs = options.timeoutMs ?? STRIPE_SANDBOX_TIMEOUT_MS;
+    const maxRequestsPerMinute = options.maxRequestsPerMinute ?? STRIPE_SANDBOX_MAX_REQUESTS_PER_MINUTE;
+    const egress = createBoundedVendorSandboxEgress({
+        policy: {
+            vendor: "stripe",
+            allowedOrigin: STRIPE_TEST_API_ORIGIN,
+            resources: STRIPE_RESOURCES,
+            timeoutMs,
+            maxRequestsPerMinute,
+        },
+        fetch: options.fetch,
+        now: options.now,
+    });
+    const get = (resource, path) => egress.requestJson({
+        resource,
+        method: "GET",
+        path,
+        headers: {
+            authorization: `Bearer ${apiKey}`,
+            accept: "application/json",
+            "user-agent": "agentcert-onegent-runtime/stripe-sandbox-readonly-v0.4",
+        },
+    });
+    return Object.freeze({
+        name: "stripe-test-mode-readonly",
+        safety: Object.freeze({
+            mode: "sandbox",
+            access: "read-only",
+            vendor: "stripe",
+            allowedOrigins: Object.freeze([STRIPE_TEST_API_ORIGIN]),
+            allowedMethods: Object.freeze(["GET"]),
+            allowedResources: Object.freeze([STRIPE_PAYMENT_INTENT_RETRIEVE, STRIPE_PAYMENT_INTENT_LIST]),
+            timeoutMs,
+            maxRequestsPerMinute,
+        }),
+        retrievePaymentIntent: async (id) => {
+            if (!/^pi_[A-Za-z0-9]{8,128}$/.test(id))
+                throw new Error("Stripe PaymentIntent ID is invalid.");
+            return paymentIntentSnapshot(await get(STRIPE_PAYMENT_INTENT_RETRIEVE, `/v1/payment_intents/${encodeURIComponent(id)}`));
+        },
+        listPaymentIntents: async (limit = 10) => {
+            if (!Number.isSafeInteger(limit) || limit < 1 || limit > 10)
+                throw new Error("Stripe read-only list limit must be an integer from 1 to 10.");
+            const payload = await get(STRIPE_PAYMENT_INTENT_LIST, `/v1/payment_intents?limit=${limit}`);
+            if (!isRecord(payload) || payload.object !== "list" || !Array.isArray(payload.data)) {
+                throw new Error("Stripe returned an invalid PaymentIntent list response.");
+            }
+            return payload.data.map(paymentIntentSnapshot);
+        },
+        getRequestAudit: () => egress.getAuditLog(),
+    });
+}
+export async function runStripeSandboxReadOnlyCertification(options) {
+    const generatedAt = new Date((options.now ?? Date.now)()).toISOString();
+    const timeoutMs = options.timeoutMs ?? STRIPE_SANDBOX_TIMEOUT_MS;
+    const maxRequestsPerMinute = options.maxRequestsPerMinute ?? STRIPE_SANDBOX_MAX_REQUESTS_PER_MINUTE;
+    const checks = [];
+    let adapter;
+    let observation;
+    try {
+        adapter = createStripeTestModeReadOnlyAdapter(options);
+        checks.push(passed("restricted-test-key", "Credential format is restricted to Stripe rk_test_ keys and is not retained."), passed("fixed-egress-policy", "Egress is fixed to Stripe HTTPS, GET, and allowlisted PaymentIntent resources."));
+        observation = await adapter.retrievePaymentIntent(options.paymentIntentId);
+        checks.push(passed("bounded-read", "The allowlisted PaymentIntent read completed within the configured bounds."), passed("test-mode-response", "Stripe explicitly returned livemode=false."), passed("evidence-redaction", "The evidence snapshot excludes credentials, client_secret, metadata, and raw response bytes."));
+    }
+    catch (error) {
+        if (!adapter) {
+            checks.push(failed("restricted-test-key", "A valid Stripe rk_test_ restricted test-mode key was not available."), failed("fixed-egress-policy", "The request was not attempted because credential validation failed."));
+        }
+        else {
+            checks.push(failed("bounded-read", safeStripeFailure(error)));
+        }
+        checks.push(failed("test-mode-response", "No validated Stripe test-mode observation was produced."), failed("evidence-redaction", "No successful redacted observation was produced."));
+    }
+    const passedCount = checks.filter((check) => check.status === "passed").length;
+    const report = {
+        schemaVersion: "agentcert.sandbox_vendor_egress.v0.4",
+        kind: "agentcert.sandbox_vendor_egress",
+        implementation: "stripe-payment-intent-readonly",
+        vendor: "stripe",
+        environment: "sandbox",
+        generatedAt,
+        verdict: { passed: passedCount === checks.length, score: Math.round((passedCount / checks.length) * 100) },
+        summary: { passed: passedCount, failed: checks.length - passedCount, total: checks.length },
+        checks,
+        policy: {
+            allowedOrigins: [STRIPE_TEST_API_ORIGIN],
+            allowedMethods: ["GET"],
+            allowedResources: [STRIPE_PAYMENT_INTENT_RETRIEVE, STRIPE_PAYMENT_INTENT_LIST],
+            timeoutMs,
+            maxRequestsPerMinute,
+        },
+        audit: adapter?.getRequestAudit() ?? [],
+        ...(observation ? { observation } : {}),
+        disclaimer: "Stripe sandbox read-only evidence proves this bounded test-mode observation only. It does not authorize writes, attest Stripe controls, or certify production behavior.",
+    };
+    return structuredClone(report);
+}
+function paymentIntentSnapshot(value) {
+    if (!isRecord(value) || value.object !== "payment_intent" || typeof value.id !== "string") {
+        throw new Error("Stripe returned an invalid PaymentIntent response.");
+    }
+    if (value.livemode !== false)
+        throw new Error("Stripe read-only adapter refuses responses that are not explicitly test mode.");
+    return {
+        id: value.id,
+        object: "payment_intent",
+        livemode: false,
+        ...numberField(value, "amount", "amount"),
+        ...numberField(value, "amount_capturable", "amountCapturable"),
+        ...numberField(value, "amount_received", "amountReceived"),
+        ...stringField(value, "currency", "currency"),
+        ...stringField(value, "status", "status"),
+        ...numberField(value, "created", "created"),
+    };
+}
+function safeStripeFailure(error) {
+    if (error instanceof VendorSandboxEgressError)
+        return `Stripe sandbox read failed (${error.code}).`;
+    if (error instanceof Error && error.message.includes("not explicitly test mode"))
+        return "Stripe response was not explicitly test mode.";
+    if (error instanceof Error && error.message.includes("invalid PaymentIntent"))
+        return "Stripe returned an invalid PaymentIntent response.";
+    return "Stripe sandbox read failed before a validated observation was produced.";
+}
+function passed(id, message) {
+    return { id, status: "passed", message };
+}
+function failed(id, message) {
+    return { id, status: "failed", message };
+}
+function numberField(value, source, target) {
+    return typeof value[source] === "number" && Number.isFinite(value[source]) ? { [target]: value[source] } : {};
+}
+function stringField(value, source, target) {
+    return typeof value[source] === "string" ? { [target]: value[source] } : {};
+}
+function isRecord(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}

package/dist/vendor/onegent-runtime/types.d.ts

@@ -0,0 +1,284 @@
+export type ActionType = "SUBMIT" | "PAY" | "SEND" | "UPDATE";
+export type ActionEnvironment = "demo" | "staging" | "production";
+export type ActionIntentStatus = "CAPTURED" | "NEEDS_REVIEW" | "APPROVED" | "REJECTED" | "EXECUTED" | "VERIFIED" | "FAILED_VERIFICATION" | "ROLLED_BACK" | "ROLLBACK_FAILED" | "CANCELLED";
+export type RiskLevel = "LOW" | "MEDIUM" | "HIGH" | "CRITICAL";
+export type PolicyEffect = "ALLOW" | "REQUIRE_APPROVAL" | "BLOCK";
+export type ApprovalStatus = "PENDING" | "APPROVED" | "REJECTED" | "EXPIRED";
+export type VerificationMethod = "MOCK" | "LOCAL_MOCK_ERP" | "LOCAL_ADAPTER";
+export interface ActionFieldChange {
+    field: string;
+    before?: unknown;
+    after?: unknown;
+}
+export interface AgentPrincipal {
+    id: string;
+    type: "agent" | "service";
+    version?: string;
+    owner?: string;
+}
+export interface ActionIntent {
+    id: string;
+    idempotencyKey: string;
+    workspaceId: string;
+    workflowId: string;
+    sourceAgentName: string;
+    sourceAgentRunId?: string;
+    principal: AgentPrincipal;
+    requestedPermissions: string[];
+    actionType: ActionType;
+    targetSystem: string;
+    targetUrl?: string;
+    environment: ActionEnvironment;
+    title: string;
+    description: string;
+    businessObjectType: string;
+    businessObjectId: string;
+    amount?: number;
+    currency?: string;
+    recipient?: string;
+    vendorName?: string;
+    beforeState: Record<string, unknown>;
+    proposedAfterState: Record<string, unknown>;
+    fieldsChanged: ActionFieldChange[];
+    rawAgentReasoningSummary?: string;
+    createdAt: string;
+    status: ActionIntentStatus;
+}
+export interface CreateActionIntentInput {
+    idempotencyKey?: string;
+    workspaceId?: string;
+    workflowId?: string;
+    sourceAgentName: string;
+    sourceAgentRunId?: string;
+    principal?: AgentPrincipal;
+    requestedPermissions?: string[];
+    actionType: ActionType;
+    targetSystem: string;
+    targetUrl?: string;
+    environment?: ActionEnvironment;
+    title: string;
+    description: string;
+    businessObjectType: string;
+    businessObjectId: string;
+    amount?: number;
+    currency?: string;
+    recipient?: string;
+    vendorName?: string;
+    beforeState?: Record<string, unknown>;
+    proposedAfterState?: Record<string, unknown>;
+    fieldsChanged?: ActionFieldChange[];
+    rawAgentReasoningSummary?: string;
+}
+export interface RiskAssessment {
+    id: string;
+    actionIntentId: string;
+    riskLevel: RiskLevel;
+    riskScore: number;
+    reasons: string[];
+    triggeredPolicies: string[];
+    requiresHumanApproval: boolean;
+    createdAt: string;
+}
+export interface PolicyRule {
+    id: string;
+    name: string;
+    description: string;
+    actionTypes: ActionType[];
+    effect: PolicyEffect;
+    enabled: boolean;
+    conditions?: PolicyCondition[];
+}
+export interface PolicyCondition {
+    field: string;
+    operator: "equals" | "notEquals" | "greaterThan" | "greaterThanOrEqual" | "lessThan" | "lessThanOrEqual" | "includes";
+    value: unknown;
+}
+export interface PolicyConfig {
+    schemaVersion: "1";
+    rules: PolicyRule[];
+}
+export interface PolicyEvaluation {
+    effect: PolicyEffect;
+    triggeredPolicies: string[];
+    reasons: string[];
+    requiresHumanApproval: boolean;
+    blocked: boolean;
+}
+export interface PolicyEngine {
+    evaluate(action: ActionIntent, risk: RiskAssessment, rules: PolicyRule[]): PolicyEvaluation;
+}
+export interface AuthorizationPolicyResult {
+    allowed: boolean;
+    grantedPermissions: string[];
+    policyVersion?: string;
+    reason: string;
+}
+export interface AuthorizationPolicy {
+    name: string;
+    authorize(action: ActionIntent): AuthorizationPolicyResult;
+}
+export interface AuthorizationDecision {
+    id: string;
+    actionIntentId: string;
+    principalId: string;
+    decision: "ALLOW" | "DENY";
+    requestedPermissions: string[];
+    grantedPermissions: string[];
+    policyName: string;
+    policyVersion?: string;
+    reason: string;
+    createdAt: string;
+}
+export interface ApprovalRequest {
+    id: string;
+    actionIntentId: string;
+    riskAssessmentId: string;
+    requestedBy: string;
+    assignedTo: string;
+    status: ApprovalStatus;
+    reviewerComment?: string;
+    createdAt: string;
+    reviewedAt?: string;
+}
+export interface ApprovalAdapterDecision {
+    approved?: boolean;
+    reviewerId?: string;
+    reviewerComment?: string;
+    decisionId?: string;
+    decidedAt?: string;
+    expiresAt?: string;
+}
+export interface ApprovalAdapterRequest {
+    action: ActionIntent;
+    risk: RiskAssessment;
+    policy: PolicyEvaluation;
+    approvalRequest: ApprovalRequest;
+}
+export interface ApprovalAdapter {
+    name: string;
+    requestApproval(input: ApprovalAdapterRequest): ApprovalAdapterDecision | void | Promise<ApprovalAdapterDecision | void>;
+}
+export interface VerificationResult {
+    id: string;
+    actionIntentId: string;
+    expectedState: Record<string, unknown>;
+    observedState: Record<string, unknown>;
+    success: boolean;
+    differences: string[];
+    verificationMethod: VerificationMethod;
+    createdAt: string;
+}
+export type AuditEventType = "ACTION_CAPTURED" | "AUTHORIZATION_CHECKED" | "RISK_ASSESSED" | "POLICY_EVALUATED" | "APPROVAL_REQUESTED" | "ACTION_APPROVED" | "ACTION_REJECTED" | "MOCK_EXECUTION_STARTED" | "MOCK_EXECUTION_COMPLETED" | "EXECUTION_REUSED" | "ROLLBACK_STARTED" | "ROLLBACK_COMPLETED" | "ROLLBACK_FAILED" | "VERIFICATION_PASSED" | "VERIFICATION_FAILED" | "AUDIT_PACKET_GENERATED";
+export interface AuditEvent {
+    id: string;
+    actionIntentId: string;
+    eventType: AuditEventType;
+    actorType: "AGENT" | "HUMAN" | "SYSTEM";
+    actorId: string;
+    message: string;
+    metadata?: Record<string, unknown>;
+    createdAt: string;
+}
+export interface MockPurchaseOrder {
+    id: string;
+    vendor: string;
+    amount: number;
+    currency: string;
+    status: "DRAFT" | "SUBMITTED";
+    vendorApproved: boolean;
+    lineItem: string;
+    lastUpdatedAt: string;
+    actionIntentId?: string;
+}
+export interface ActionReview {
+    action: ActionIntent;
+    riskAssessment: RiskAssessment;
+    authorizationDecision?: AuthorizationDecision;
+    approvalRequest?: ApprovalRequest;
+    verificationResult?: VerificationResult;
+    auditEvents: AuditEvent[];
+    policyRules: PolicyRule[];
+    blocked: boolean;
+}
+export interface ActionExecutionSummary {
+    method: VerificationMethod;
+    status: "NOT_EXECUTED" | "COMPLETED";
+    targetSystem: string;
+    previousState?: Record<string, unknown>;
+    observedState?: Record<string, unknown>;
+    rollbackToken?: string;
+}
+export interface LocalActionAdapterResult {
+    method?: VerificationMethod;
+    targetSystem?: string;
+    previousState?: Record<string, unknown>;
+    observedState: Record<string, unknown>;
+    rollbackToken?: string;
+}
+export interface LocalActionAdapterSafety {
+    mode: "sandbox";
+    allowedTargetSystems: string[];
+    networkAccess: false;
+}
+export interface ActionExecutionContext {
+    idempotencyKey: string;
+    attempt: number;
+}
+export interface ActionRollbackContext {
+    idempotencyKey: string;
+    reason: string;
+    rollbackToken?: string;
+}
+export interface ActionRollbackResult {
+    success: boolean;
+    observedState: Record<string, unknown>;
+    message?: string;
+}
+export interface LocalActionAdapter {
+    name: string;
+    safety?: LocalActionAdapterSafety;
+    execute(action: ActionIntent, context?: ActionExecutionContext): LocalActionAdapterResult | Promise<LocalActionAdapterResult>;
+    rollback?(action: ActionIntent, execution: ActionExecutionSummary, context: ActionRollbackContext): ActionRollbackResult | Promise<ActionRollbackResult>;
+}
+export interface ActionExecutionReceipt {
+    idempotencyKey: string;
+    actionIntentId: string;
+    adapterName: string;
+    status: "COMPLETED" | "ROLLED_BACK" | "ROLLBACK_FAILED";
+    execution: ActionExecutionSummary;
+    rollbackToken?: string;
+    executedAt: string;
+    rollback?: ActionRollbackResult & {
+        attemptedAt: string;
+        reason: string;
+    };
+}
+export interface ExecutionStore {
+    name: string;
+    get(idempotencyKey: string): ActionExecutionReceipt | undefined | Promise<ActionExecutionReceipt | undefined>;
+    put(receipt: ActionExecutionReceipt): void | Promise<void>;
+}
+export interface ActionAuditPacket {
+    demo: true;
+    product: "AgentCert Onegent Runtime";
+    scenario: string;
+    actionIntent: ActionIntent;
+    riskAssessment: RiskAssessment;
+    authorizationDecision?: AuthorizationDecision;
+    triggeredPolicies: PolicyRule[];
+    approvalRequest?: ApprovalRequest;
+    execution: ActionExecutionSummary;
+    verificationResult?: VerificationResult;
+    auditEvents: AuditEvent[];
+    disclaimer: string;
+}
+export interface AuditStore {
+    name: string;
+    writeAuditPacket(packet: ActionAuditPacket): void | Promise<void>;
+}
+export interface ProcurementWalkthroughState {
+    purchaseOrder: MockPurchaseOrder;
+    review: ActionReview;
+    auditPacket?: ActionAuditPacket;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/vendor/onegent-runtime/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE9D,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,SAAS,GAAG,YAAY,CAAC;AAElE,MAAM,MAAM,kBAAkB,GAC1B,UAAU,GACV,cAAc,GACd,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,qBAAqB,GACrB,aAAa,GACb,iBAAiB,GACjB,WAAW,CAAC;AAEhB,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE/D,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,kBAAkB,GAAG,OAAO,CAAC;AAElE,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;AAE7E,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,gBAAgB,GAAG,eAAe,CAAC;AAE7E,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,cAAc,CAAC;IAC1B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,aAAa,EAAE,iBAAiB,EAAE,CAAC;IACnC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,aAAa,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACpC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,GAAG,WAAW,GAAG,aAAa,GAAG,oBAAoB,GAAG,UAAU,GAAG,iBAAiB,GAAG,UAAU,CAAC;IACtH,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,GAAG,CAAC;IACnB,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,gBAAgB,CAAC;CAC7F;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,yBAAyB,CAAC;CAC5D;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,cAAc,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,gBAAgB,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,KAAK,EAAE,sBAAsB,GAAG,uBAAuB,GAAG,IAAI,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;CAC1H;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,cAAc,GACtB,iBAAiB,GACjB,uBAAuB,GACvB,eAAe,GACf,kBAAkB,GAClB,oBAAoB,GACpB,iBAAiB,GACjB,iBAAiB,GACjB,wBAAwB,GACxB,0BAA0B,GAC1B,kBAAkB,GAClB,kBAAkB,GAClB,oBAAoB,GACpB,iBAAiB,GACjB,qBAAqB,GACrB,qBAAqB,GACrB,wBAAwB,CAAC;AAE7B,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,cAAc,CAAC;IAC1B,SAAS,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,GAAG,WAAW,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,EAAE,cAAc,GAAG,WAAW,CAAC;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,SAAS,CAAC;IAChB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,aAAa,EAAE,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC9H,QAAQ,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,sBAAsB,EAAE,OAAO,EAAE,qBAAqB,GAAG,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAC1J;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,GAAG,aAAa,GAAG,iBAAiB,CAAC;IACxD,SAAS,EAAE,sBAAsB,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,oBAAoB,GAAG;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,cAAc,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS,GAAG,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IAC9G,GAAG,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,IAAI,CAAC;IACX,OAAO,EAAE,2BAA2B,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,cAAc,CAAC;IAC/B,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,iBAAiB,EAAE,UAAU,EAAE,CAAC;IAChC,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,SAAS,EAAE,sBAAsB,CAAC;IAClC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,2BAA2B;IAC1C,aAAa,EAAE,iBAAiB,CAAC;IACjC,MAAM,EAAE,YAAY,CAAC;IACrB,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC"}

package/dist/vendor/onegent-runtime/types.js

@@ -0,0 +1 @@
+export {};

package/dist/vendor/onegent-runtime/vendor-sandbox-egress.d.ts

@@ -0,0 +1,49 @@
+export type VendorSandboxHttpMethod = "GET";
+export interface VendorSandboxResourceRule {
+    id: string;
+    method: VendorSandboxHttpMethod;
+    pathPattern: RegExp;
+}
+export interface VendorSandboxEgressPolicy {
+    vendor: string;
+    allowedOrigin: string;
+    resources: readonly VendorSandboxResourceRule[];
+    timeoutMs: number;
+    maxRequestsPerMinute: number;
+}
+export type VendorSandboxAuditOutcome = "allowed" | "denied" | "rate_limited" | "timeout" | "http_error" | "failed";
+export interface VendorSandboxRequestAudit {
+    requestId: string;
+    timestamp: string;
+    vendor: string;
+    resource: string;
+    method: VendorSandboxHttpMethod;
+    origin: string;
+    outcome: VendorSandboxAuditOutcome;
+    durationMs: number;
+    status?: number;
+    errorCode?: VendorSandboxEgressErrorCode;
+}
+export type VendorSandboxEgressErrorCode = "ORIGIN_DENIED" | "METHOD_DENIED" | "RESOURCE_DENIED" | "RATE_LIMITED" | "TIMEOUT" | "HTTP_ERROR" | "REQUEST_FAILED";
+export declare class VendorSandboxEgressError extends Error {
+    readonly code: VendorSandboxEgressErrorCode;
+    readonly status?: number | undefined;
+    constructor(code: VendorSandboxEgressErrorCode, message: string, status?: number | undefined);
+}
+export interface VendorSandboxEgressRequest {
+    resource: string;
+    method: VendorSandboxHttpMethod;
+    path: string;
+    headers?: HeadersInit;
+}
+export interface BoundedVendorSandboxEgress {
+    requestJson(request: VendorSandboxEgressRequest): Promise<unknown>;
+    getAuditLog(): VendorSandboxRequestAudit[];
+}
+export interface BoundedVendorSandboxEgressOptions {
+    policy: VendorSandboxEgressPolicy;
+    fetch?: typeof fetch;
+    now?: () => number;
+}
+export declare function createBoundedVendorSandboxEgress(options: BoundedVendorSandboxEgressOptions): BoundedVendorSandboxEgress;
+//# sourceMappingURL=vendor-sandbox-egress.d.ts.map

package/dist/vendor/onegent-runtime/vendor-sandbox-egress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendor-sandbox-egress.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/vendor-sandbox-egress.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAE5C,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,uBAAuB,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,yBAAyB,GACjC,SAAS,GACT,QAAQ,GACR,cAAc,GACd,SAAS,GACT,YAAY,GACZ,QAAQ,CAAC;AAEb,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,yBAAyB,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,4BAA4B,CAAC;CAC1C;AAED,MAAM,MAAM,4BAA4B,GACpC,eAAe,GACf,eAAe,GACf,iBAAiB,GACjB,cAAc,GACd,SAAS,GACT,YAAY,GACZ,gBAAgB,CAAC;AAErB,qBAAa,wBAAyB,SAAQ,KAAK;aAE/B,IAAI,EAAE,4BAA4B;aAElC,MAAM,CAAC,EAAE,MAAM;gBAFf,IAAI,EAAE,4BAA4B,EAClD,OAAO,EAAE,MAAM,EACC,MAAM,CAAC,EAAE,MAAM,YAAA;CAKlC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,uBAAuB,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnE,WAAW,IAAI,yBAAyB,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,iCAAiC;IAChD,MAAM,EAAE,yBAAyB,CAAC;IAClC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAID,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,iCAAiC,GACzC,0BAA0B,CA+G5B"}

package/dist/vendor/onegent-runtime/vendor-sandbox-egress.js

@@ -0,0 +1,152 @@
+export class VendorSandboxEgressError extends Error {
+    code;
+    status;
+    constructor(code, message, status) {
+        super(message);
+        this.code = code;
+        this.status = status;
+        this.name = "VendorSandboxEgressError";
+    }
+}
+const MAX_AUDIT_ENTRIES = 100;
+export function createBoundedVendorSandboxEgress(options) {
+    const policy = validatePolicy(options.policy);
+    const requestFetch = options.fetch ?? fetch;
+    const now = options.now ?? Date.now;
+    const audit = [];
+    let requestSequence = 0;
+    let windowStartedAt = now();
+    let requestsInWindow = 0;
+    const record = (entry) => {
+        audit.push(Object.freeze({ ...entry }));
+        if (audit.length > MAX_AUDIT_ENTRIES)
+            audit.splice(0, audit.length - MAX_AUDIT_ENTRIES);
+    };
+    return Object.freeze({
+        requestJson: async (request) => {
+            const startedAt = now();
+            const requestId = `${policy.vendor}-${++requestSequence}`;
+            const method = request.method;
+            const url = safeUrl(request.path, policy.allowedOrigin);
+            const baseAudit = {
+                requestId,
+                timestamp: new Date(startedAt).toISOString(),
+                vendor: policy.vendor,
+                resource: request.resource,
+                method,
+                origin: url?.origin ?? policy.allowedOrigin,
+            };
+            const deny = (error) => {
+                record({ ...baseAudit, outcome: "denied", durationMs: elapsed(now, startedAt), errorCode: error.code });
+                throw error;
+            };
+            if (!url || url.origin !== policy.allowedOrigin || url.protocol !== "https:" || url.username || url.password || url.hash) {
+                return deny(new VendorSandboxEgressError("ORIGIN_DENIED", "Vendor sandbox request origin is not allowlisted."));
+            }
+            const resource = policy.resources.find((entry) => entry.id === request.resource);
+            if (!resource) {
+                return deny(new VendorSandboxEgressError("RESOURCE_DENIED", "Vendor sandbox resource is not allowlisted."));
+            }
+            if (method !== resource.method) {
+                return deny(new VendorSandboxEgressError("METHOD_DENIED", "Vendor sandbox HTTP method is not allowlisted for this resource."));
+            }
+            resource.pathPattern.lastIndex = 0;
+            if (!resource.pathPattern.test(`${url.pathname}${url.search}`)) {
+                return deny(new VendorSandboxEgressError("RESOURCE_DENIED", "Vendor sandbox path is not allowlisted for this resource."));
+            }
+            const current = now();
+            if (current - windowStartedAt >= 60_000) {
+                windowStartedAt = current;
+                requestsInWindow = 0;
+            }
+            if (requestsInWindow >= policy.maxRequestsPerMinute) {
+                const error = new VendorSandboxEgressError("RATE_LIMITED", "Vendor sandbox request limit exceeded. Retry after the current one-minute window.");
+                record({ ...baseAudit, outcome: "rate_limited", durationMs: elapsed(now, startedAt), errorCode: error.code });
+                throw error;
+            }
+            requestsInWindow += 1;
+            const controller = new AbortController();
+            let timedOut = false;
+            let timeout;
+            const operation = (async () => {
+                const response = await requestFetch(url, {
+                    method,
+                    headers: request.headers,
+                    redirect: "error",
+                    signal: controller.signal,
+                });
+                if (!response.ok) {
+                    throw new VendorSandboxEgressError("HTTP_ERROR", `Vendor sandbox returned HTTP ${response.status}.`, response.status);
+                }
+                return { payload: await response.json(), status: response.status };
+            })();
+            const timeoutOperation = new Promise((_, reject) => {
+                timeout = setTimeout(() => {
+                    timedOut = true;
+                    controller.abort();
+                    reject(new VendorSandboxEgressError("TIMEOUT", `Vendor sandbox request exceeded ${policy.timeoutMs} ms.`));
+                }, policy.timeoutMs);
+            });
+            try {
+                const result = await Promise.race([operation, timeoutOperation]);
+                record({ ...baseAudit, outcome: "allowed", durationMs: elapsed(now, startedAt), status: result.status });
+                return result.payload;
+            }
+            catch (cause) {
+                const error = cause instanceof VendorSandboxEgressError
+                    ? cause
+                    : timedOut
+                        ? new VendorSandboxEgressError("TIMEOUT", `Vendor sandbox request exceeded ${policy.timeoutMs} ms.`)
+                        : new VendorSandboxEgressError("REQUEST_FAILED", "Vendor sandbox request failed.");
+                record({
+                    ...baseAudit,
+                    outcome: error.code === "TIMEOUT" ? "timeout" : error.code === "HTTP_ERROR" ? "http_error" : "failed",
+                    durationMs: elapsed(now, startedAt),
+                    status: error.status,
+                    errorCode: error.code,
+                });
+                throw error;
+            }
+            finally {
+                if (timeout)
+                    clearTimeout(timeout);
+            }
+        },
+        getAuditLog: () => audit.map((entry) => ({ ...entry })),
+    });
+}
+function validatePolicy(policy) {
+    const origin = new URL(policy.allowedOrigin);
+    if (origin.protocol !== "https:" || origin.origin !== policy.allowedOrigin || origin.pathname !== "/" || origin.search || origin.hash) {
+        throw new Error("Vendor sandbox allowedOrigin must be an exact HTTPS origin without a path.");
+    }
+    if (!policy.vendor.trim())
+        throw new Error("Vendor sandbox policy vendor is required.");
+    if (!Number.isSafeInteger(policy.timeoutMs) || policy.timeoutMs < 100 || policy.timeoutMs > 30_000) {
+        throw new Error("Vendor sandbox timeoutMs must be an integer from 100 to 30000.");
+    }
+    if (!Number.isSafeInteger(policy.maxRequestsPerMinute) || policy.maxRequestsPerMinute < 1 || policy.maxRequestsPerMinute > 60) {
+        throw new Error("Vendor sandbox maxRequestsPerMinute must be an integer from 1 to 60.");
+    }
+    if (policy.resources.length === 0 || new Set(policy.resources.map((entry) => entry.id)).size !== policy.resources.length) {
+        throw new Error("Vendor sandbox policy requires unique resource rules.");
+    }
+    return Object.freeze({
+        ...policy,
+        resources: Object.freeze(policy.resources.map((entry) => Object.freeze({
+            ...entry,
+            pathPattern: new RegExp(entry.pathPattern.source, entry.pathPattern.flags),
+        }))),
+    });
+}
+function safeUrl(path, origin) {
+    try {
+        return new URL(path, `${origin}/`);
+    }
+    catch {
+        return undefined;
+    }
+}
+function elapsed(now, startedAt) {
+    return Math.max(0, Math.round(now() - startedAt));
+}