agentlock-shared 0.1.0 → 0.3.0

package/dist/__tests__/billing.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=billing.test.d.ts.map

package/dist/__tests__/billing.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/billing.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/billing.test.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const billing_js_1 = require("../billing.js");
+(0, vitest_1.describe)('stripe billing status helpers', () => {
+    (0, vitest_1.it)('treats active and trialing subscriptions as entitled', () => {
+        (0, vitest_1.expect)((0, billing_js_1.isEntitledStripeSubscriptionStatus)('active')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isEntitledStripeSubscriptionStatus)('trialing')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isEntitledStripeSubscriptionStatus)('past_due')).toBe(false);
+    });
+    (0, vitest_1.it)('keeps recoverable subscriptions attached to the existing customer flow', () => {
+        (0, vitest_1.expect)((0, billing_js_1.isRecoverableStripeSubscriptionStatus)('active')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isRecoverableStripeSubscriptionStatus)('trialing')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isRecoverableStripeSubscriptionStatus)('past_due')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isRecoverableStripeSubscriptionStatus)('unpaid')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isRecoverableStripeSubscriptionStatus)('incomplete')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isRecoverableStripeSubscriptionStatus)('paused')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isRecoverableStripeSubscriptionStatus)('incomplete_expired')).toBe(false);
+    });
+    (0, vitest_1.it)('only allows a fresh checkout for terminal subscriptions', () => {
+        (0, vitest_1.expect)((0, billing_js_1.isTerminalStripeSubscriptionStatus)('canceled')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isTerminalStripeSubscriptionStatus)('incomplete_expired')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isTerminalStripeSubscriptionStatus)('past_due')).toBe(false);
+        (0, vitest_1.expect)((0, billing_js_1.canStartNewCheckoutForStripeSubscriptionStatus)('canceled')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.canStartNewCheckoutForStripeSubscriptionStatus)('incomplete_expired')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.canStartNewCheckoutForStripeSubscriptionStatus)('active')).toBe(false);
+        (0, vitest_1.expect)((0, billing_js_1.canStartNewCheckoutForStripeSubscriptionStatus)('paused')).toBe(false);
+        (0, vitest_1.expect)((0, billing_js_1.canStartNewCheckoutForStripeSubscriptionStatus)('unknown_future_status')).toBe(false);
+    });
+});
+//# sourceMappingURL=billing.test.js.map

package/dist/__tests__/billing.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.test.js","sourceRoot":"","sources":["../../src/__tests__/billing.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,8CAKuB;AAEvB,IAAA,iBAAQ,EAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,IAAA,WAAE,EAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,IAAA,eAAM,EAAC,IAAA,+CAAkC,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,IAAA,eAAM,EAAC,IAAA,+CAAkC,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,IAAA,eAAM,EAAC,IAAA,+CAAkC,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,IAAA,eAAM,EAAC,IAAA,kDAAqC,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,IAAA,eAAM,EAAC,IAAA,kDAAqC,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,IAAA,eAAM,EAAC,IAAA,kDAAqC,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,IAAA,eAAM,EAAC,IAAA,kDAAqC,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,IAAA,eAAM,EAAC,IAAA,kDAAqC,EAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,IAAA,eAAM,EAAC,IAAA,kDAAqC,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,IAAA,eAAM,EAAC,IAAA,kDAAqC,EAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,IAAA,eAAM,EAAC,IAAA,+CAAkC,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,IAAA,eAAM,EAAC,IAAA,+CAAkC,EAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5E,IAAA,eAAM,EAAC,IAAA,+CAAkC,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnE,IAAA,eAAM,EAAC,IAAA,2DAA8C,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAA,eAAM,EAAC,IAAA,2DAA8C,EAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxF,IAAA,eAAM,EAAC,IAAA,2DAA8C,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,IAAA,eAAM,EAAC,IAAA,2DAA8C,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,IAAA,eAAM,EAAC,IAAA,2DAA8C,EAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/crypto.test.js

@@ -1,53 +1,143 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 const vitest_1 = require("vitest");
-const crypto_1 = require("../crypto");
-(0, vitest_1.describe)('crypto', () => {
-    (0, vitest_1.describe)('encrypt / decrypt', () => {
-        (0, vitest_1.it)('roundtrips plaintext', () => {
-            const key = (0, crypto_1.generateKey)();
-            const plaintext = 'Hello, world!';
-            const encrypted = (0, crypto_1.encrypt)(plaintext, key);
-            (0, vitest_1.expect)((0, crypto_1.decrypt)(encrypted, key)).toBe(plaintext);
-        });
-        (0, vitest_1.it)('throws with wrong key', () => {
-            const key = (0, crypto_1.generateKey)();
-            const wrongKey = (0, crypto_1.generateKey)();
-            const encrypted = (0, crypto_1.encrypt)('secret', key);
-            (0, vitest_1.expect)(() => (0, crypto_1.decrypt)(encrypted, wrongKey)).toThrow('Decryption failed');
-        });
-        (0, vitest_1.it)('handles JSON payloads', () => {
-            const key = (0, crypto_1.generateKey)();
-            const data = JSON.stringify({ foo: 'bar', num: 42, arr: [1, 2, 3] });
-            const encrypted = (0, crypto_1.encrypt)(data, key);
-            (0, vitest_1.expect)(JSON.parse((0, crypto_1.decrypt)(encrypted, key))).toEqual(JSON.parse(data));
-        });
-    });
-    (0, vitest_1.describe)('encryptDEK / decryptDEK', () => {
-        (0, vitest_1.it)('roundtrips a DEK through master key', () => {
-            const masterKey = (0, crypto_1.generateKey)();
-            const dek = (0, crypto_1.generateKey)();
-            const encrypted = (0, crypto_1.encryptDEK)(dek, masterKey);
-            const decrypted = (0, crypto_1.decryptDEK)(encrypted, masterKey);
-            (0, vitest_1.expect)(Buffer.from(decrypted).equals(Buffer.from(dek))).toBe(true);
-        });
-    });
-    (0, vitest_1.describe)('encryptCredential / decryptCredential', () => {
-        (0, vitest_1.it)('roundtrips a credential payload', () => {
-            const masterKey = (0, crypto_1.generateKey)();
-            const payload = { api_key: 'sk-test-123', endpoint: 'https://api.example.com' };
-            const { encryptedDEK, encryptedPayload } = (0, crypto_1.encryptCredential)(payload, masterKey);
-            (0, vitest_1.expect)(typeof encryptedDEK).toBe('string');
-            (0, vitest_1.expect)(typeof encryptedPayload).toBe('string');
-            const decrypted = (0, crypto_1.decryptCredential)(encryptedDEK, encryptedPayload, masterKey);
-            (0, vitest_1.expect)(decrypted).toEqual(payload);
-        });
-        (0, vitest_1.it)('fails with wrong master key', () => {
-            const masterKey = (0, crypto_1.generateKey)();
-            const wrongKey = (0, crypto_1.generateKey)();
-            const { encryptedDEK, encryptedPayload } = (0, crypto_1.encryptCredential)({ secret: 'value' }, masterKey);
-            (0, vitest_1.expect)(() => (0, crypto_1.decryptCredential)(encryptedDEK, encryptedPayload, wrongKey)).toThrow();
-        });
+const tweetnacl_1 = __importDefault(require("tweetnacl"));
+const crypto_js_1 = require("../crypto.js");
+// Deterministic test key (not from env -- tests must not depend on MASTER_KEY)
+const testMasterKey = tweetnacl_1.default.randomBytes(32);
+(0, vitest_1.describe)('encrypt / decrypt (low-level)', () => {
+    (0, vitest_1.it)('round-trips a string', () => {
+        const data = 'hello world';
+        const encrypted = (0, crypto_js_1.encrypt)(data, testMasterKey);
+        (0, vitest_1.expect)(encrypted).not.toBe(data);
+        (0, vitest_1.expect)((0, crypto_js_1.decrypt)(encrypted, testMasterKey)).toBe(data);
+    });
+    (0, vitest_1.it)('produces different ciphertext each call (random nonce)', () => {
+        const data = 'deterministic?';
+        const a = (0, crypto_js_1.encrypt)(data, testMasterKey);
+        const b = (0, crypto_js_1.encrypt)(data, testMasterKey);
+        (0, vitest_1.expect)(a).not.toBe(b);
+    });
+    (0, vitest_1.it)('rejects wrong key', () => {
+        const data = 'secret';
+        const encrypted = (0, crypto_js_1.encrypt)(data, testMasterKey);
+        const wrongKey = tweetnacl_1.default.randomBytes(32);
+        (0, vitest_1.expect)(() => (0, crypto_js_1.decrypt)(encrypted, wrongKey)).toThrow('Decryption failed');
+    });
+    (0, vitest_1.it)('handles empty string', () => {
+        const encrypted = (0, crypto_js_1.encrypt)('', testMasterKey);
+        (0, vitest_1.expect)((0, crypto_js_1.decrypt)(encrypted, testMasterKey)).toBe('');
+    });
+    (0, vitest_1.it)('handles unicode', () => {
+        const data = 'Hello unicode world';
+        const encrypted = (0, crypto_js_1.encrypt)(data, testMasterKey);
+        (0, vitest_1.expect)((0, crypto_js_1.decrypt)(encrypted, testMasterKey)).toBe(data);
+    });
+});
+(0, vitest_1.describe)('envelopeEncrypt / envelopeDecrypt', () => {
+    (0, vitest_1.it)('round-trips a string', () => {
+        const data = 'envelope test data';
+        const encrypted = (0, crypto_js_1.envelopeEncrypt)(data, testMasterKey);
+        (0, vitest_1.expect)(encrypted).toMatch(/^env1:/);
+        (0, vitest_1.expect)((0, crypto_js_1.envelopeDecrypt)(encrypted, testMasterKey)).toBe(data);
+    });
+    (0, vitest_1.it)('produces different ciphertext each call (fresh DEK + nonce)', () => {
+        const data = 'same data';
+        const a = (0, crypto_js_1.envelopeEncrypt)(data, testMasterKey);
+        const b = (0, crypto_js_1.envelopeEncrypt)(data, testMasterKey);
+        (0, vitest_1.expect)(a).not.toBe(b);
+    });
+    (0, vitest_1.it)('rejects wrong master key', () => {
+        const data = 'secret';
+        const encrypted = (0, crypto_js_1.envelopeEncrypt)(data, testMasterKey);
+        const wrongKey = tweetnacl_1.default.randomBytes(32);
+        (0, vitest_1.expect)(() => (0, crypto_js_1.envelopeDecrypt)(encrypted, wrongKey)).toThrow();
+    });
+    (0, vitest_1.it)('handles empty string', () => {
+        const encrypted = (0, crypto_js_1.envelopeEncrypt)('', testMasterKey);
+        (0, vitest_1.expect)((0, crypto_js_1.envelopeDecrypt)(encrypted, testMasterKey)).toBe('');
+    });
+    (0, vitest_1.it)('handles large data', () => {
+        const data = 'x'.repeat(100_000);
+        const encrypted = (0, crypto_js_1.envelopeEncrypt)(data, testMasterKey);
+        (0, vitest_1.expect)((0, crypto_js_1.envelopeDecrypt)(encrypted, testMasterKey)).toBe(data);
+    });
+    (0, vitest_1.it)('handles JSON data', () => {
+        const obj = { tool: 'http', payload: { url: 'https://example.com' }, nested: [1, 2, 3] };
+        const data = JSON.stringify(obj);
+        const encrypted = (0, crypto_js_1.envelopeEncrypt)(data, testMasterKey);
+        const decrypted = JSON.parse((0, crypto_js_1.envelopeDecrypt)(encrypted, testMasterKey));
+        (0, vitest_1.expect)(decrypted).toEqual(obj);
+    });
+    (0, vitest_1.it)('envelopeDecrypt rejects non-envelope data', () => {
+        const legacy = (0, crypto_js_1.encrypt)('legacy data', testMasterKey);
+        (0, vitest_1.expect)(() => (0, crypto_js_1.envelopeDecrypt)(legacy, testMasterKey)).toThrow('missing env1: prefix');
+    });
+    (0, vitest_1.it)('rejects malformed envelope (no separator)', () => {
+        (0, vitest_1.expect)(() => (0, crypto_js_1.envelopeDecrypt)('env1:nodatahere', testMasterKey)).toThrow('missing DEK/payload separator');
+    });
+    (0, vitest_1.it)('rejects malformed envelope (empty parts)', () => {
+        // env1:: has withoutPrefix=":" where lastIndexOf(':') returns 0,
+        // caught by the separatorIndex <= 0 check
+        (0, vitest_1.expect)(() => (0, crypto_js_1.envelopeDecrypt)('env1::', testMasterKey)).toThrow('missing DEK/payload separator');
+        // env1:abc: has empty payload after separator
+        (0, vitest_1.expect)(() => (0, crypto_js_1.envelopeDecrypt)('env1:abc:', testMasterKey)).toThrow('empty DEK or payload');
+    });
+});
+(0, vitest_1.describe)('decrypt() backward compatibility', () => {
+    (0, vitest_1.it)('transparently decrypts envelope-encrypted data', () => {
+        const data = 'new envelope data';
+        const encrypted = (0, crypto_js_1.envelopeEncrypt)(data, testMasterKey);
+        // decrypt() should auto-detect the env1: prefix and handle it
+        (0, vitest_1.expect)((0, crypto_js_1.decrypt)(encrypted, testMasterKey)).toBe(data);
+    });
+    (0, vitest_1.it)('still decrypts legacy direct-encrypted data', () => {
+        const data = 'legacy direct data';
+        const encrypted = (0, crypto_js_1.encrypt)(data, testMasterKey);
+        // Legacy data should still work with decrypt()
+        (0, vitest_1.expect)((0, crypto_js_1.decrypt)(encrypted, testMasterKey)).toBe(data);
+    });
+    (0, vitest_1.it)('handles mixed legacy and envelope data in sequence', () => {
+        const legacyData = 'old format';
+        const envelopeData = 'new format';
+        const legacyEncrypted = (0, crypto_js_1.encrypt)(legacyData, testMasterKey);
+        const envelopeEncrypted = (0, crypto_js_1.envelopeEncrypt)(envelopeData, testMasterKey);
+        // Both should decrypt through the same decrypt() function
+        (0, vitest_1.expect)((0, crypto_js_1.decrypt)(legacyEncrypted, testMasterKey)).toBe(legacyData);
+        (0, vitest_1.expect)((0, crypto_js_1.decrypt)(envelopeEncrypted, testMasterKey)).toBe(envelopeData);
+    });
+});
+(0, vitest_1.describe)('encryptCredential / decryptCredential (existing DEK pattern)', () => {
+    (0, vitest_1.it)('still works correctly after envelope changes', () => {
+        const payload = { api_key: 'sk-test-12345', name: 'test-cred' };
+        const { encryptedDEK, encryptedPayload } = (0, crypto_js_1.encryptCredential)(payload, testMasterKey);
+        const decrypted = (0, crypto_js_1.decryptCredential)(encryptedDEK, encryptedPayload, testMasterKey);
+        (0, vitest_1.expect)(decrypted).toEqual(payload);
+    });
+});
+(0, vitest_1.describe)('envelope format structure', () => {
+    (0, vitest_1.it)('has exactly the env1:wrappedDEK:payload format', () => {
+        const encrypted = (0, crypto_js_1.envelopeEncrypt)('test', testMasterKey);
+        const parts = encrypted.split(':');
+        // Should be: "env1", wrappedDEK (base64), payload (base64)
+        (0, vitest_1.expect)(parts[0]).toBe('env1');
+        (0, vitest_1.expect)(parts.length).toBe(3);
+        // Both parts after prefix should be valid base64
+        (0, vitest_1.expect)(parts[1].length).toBeGreaterThan(0);
+        (0, vitest_1.expect)(parts[2].length).toBeGreaterThan(0);
+    });
+    (0, vitest_1.it)('base64 parts do not contain colons', () => {
+        // Run multiple times to catch edge cases with different random nonces
+        for (let i = 0; i < 20; i++) {
+            const encrypted = (0, crypto_js_1.envelopeEncrypt)(`test data ${i}`, testMasterKey);
+            const withoutPrefix = encrypted.slice(5); // remove "env1:"
+            const colonCount = (withoutPrefix.match(/:/g) || []).length;
+            // Exactly one colon separating wrappedDEK and payload
+            (0, vitest_1.expect)(colonCount).toBe(1);
+        }
     });
 });
 //# sourceMappingURL=crypto.test.js.map

package/dist/__tests__/crypto.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.test.js","sourceRoot":"","sources":["../../src/__tests__/crypto.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,sCAQmB;AAEnB,IAAA,iBAAQ,EAAC,QAAQ,EAAE,GAAG,EAAE;IACtB,IAAA,iBAAQ,EAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,IAAA,WAAE,EAAC,sBAAsB,EAAE,GAAG,EAAE;YAC9B,MAAM,GAAG,GAAG,IAAA,oBAAW,GAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,eAAe,CAAC;YAClC,MAAM,SAAS,GAAG,IAAA,gBAAO,EAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAC1C,IAAA,eAAM,EAAC,IAAA,gBAAO,EAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,uBAAuB,EAAE,GAAG,EAAE;YAC/B,MAAM,GAAG,GAAG,IAAA,oBAAW,GAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,IAAA,oBAAW,GAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,IAAA,gBAAO,EAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACzC,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,gBAAO,EAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,uBAAuB,EAAE,GAAG,EAAE;YAC/B,MAAM,GAAG,GAAG,IAAA,oBAAW,GAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACrE,MAAM,SAAS,GAAG,IAAA,gBAAO,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACrC,IAAA,eAAM,EAAC,IAAI,CAAC,KAAK,CAAC,IAAA,gBAAO,EAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,yBAAyB,EAAE,GAAG,EAAE;QACvC,IAAA,WAAE,EAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,SAAS,GAAG,IAAA,oBAAW,GAAE,CAAC;YAChC,MAAM,GAAG,GAAG,IAAA,oBAAW,GAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,IAAA,mBAAU,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC7C,MAAM,SAAS,GAAG,IAAA,mBAAU,EAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACnD,IAAA,eAAM,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,uCAAuC,EAAE,GAAG,EAAE;QACrD,IAAA,WAAE,EAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,SAAS,GAAG,IAAA,oBAAW,GAAE,CAAC;YAChC,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,yBAAyB,EAAE,CAAC;YAChF,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,IAAA,0BAAiB,EAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAEjF,IAAA,eAAM,EAAC,OAAO,YAAY,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAA,eAAM,EAAC,OAAO,gBAAgB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAE/C,MAAM,SAAS,GAAG,IAAA,0BAAiB,EAAC,YAAY,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;YAC/E,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,SAAS,GAAG,IAAA,oBAAW,GAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,IAAA,oBAAW,GAAE,CAAC;YAC/B,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,IAAA,0BAAiB,EAC1D,EAAE,MAAM,EAAE,OAAO,EAAE,EACnB,SAAS,CACV,CAAC;YACF,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,0BAAiB,EAAC,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACtF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"crypto.test.js","sourceRoot":"","sources":["../../src/__tests__/crypto.test.ts"],"names":[],"mappings":";;;;;AAAA,mCAA8C;AAC9C,0DAA6B;AAE7B,4CAQsB;AAEtB,+EAA+E;AAC/E,MAAM,aAAa,GAAG,mBAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AAE3C,IAAA,iBAAQ,EAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,IAAA,WAAE,EAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,IAAI,GAAG,aAAa,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAA,mBAAO,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC/C,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,IAAA,eAAM,EAAC,IAAA,mBAAO,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,IAAI,GAAG,gBAAgB,CAAC;QAC9B,MAAM,CAAC,GAAG,IAAA,mBAAO,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,IAAA,mBAAO,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACvC,IAAA,eAAM,EAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC;QACtB,MAAM,SAAS,GAAG,IAAA,mBAAO,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,mBAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtC,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,mBAAO,EAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,SAAS,GAAG,IAAA,mBAAO,EAAC,EAAE,EAAE,aAAa,CAAC,CAAC;QAC7C,IAAA,eAAM,EAAC,IAAA,mBAAO,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iBAAiB,EAAE,GAAG,EAAE;QACzB,MAAM,IAAI,GAAG,qBAAqB,CAAC;QACnC,MAAM,SAAS,GAAG,IAAA,mBAAO,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC/C,IAAA,eAAM,EAAC,IAAA,mBAAO,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,IAAA,WAAE,EAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,IAAI,GAAG,oBAAoB,CAAC;QAClC,MAAM,SAAS,GAAG,IAAA,2BAAe,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAA,eAAM,EAAC,IAAA,2BAAe,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,IAAI,GAAG,WAAW,CAAC;QACzB,MAAM,CAAC,GAAG,IAAA,2BAAe,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,IAAA,2BAAe,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC/C,IAAA,eAAM,EAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC;QACtB,MAAM,SAAS,GAAG,IAAA,2BAAe,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,mBAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtC,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,2BAAe,EAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,SAAS,GAAG,IAAA,2BAAe,EAAC,EAAE,EAAE,aAAa,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,IAAA,2BAAe,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,IAAA,2BAAe,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,IAAA,2BAAe,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,qBAAqB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,IAAA,2BAAe,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,2BAAe,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;QACxE,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,IAAA,mBAAO,EAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,2BAAe,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,2BAAe,EAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,iEAAiE;QACjE,0CAA0C;QAC1C,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,2BAAe,EAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QAChG,8CAA8C;QAC9C,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAA,2BAAe,EAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,IAAA,WAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,IAAI,GAAG,mBAAmB,CAAC;QACjC,MAAM,SAAS,GAAG,IAAA,2BAAe,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACvD,8DAA8D;QAC9D,IAAA,eAAM,EAAC,IAAA,mBAAO,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,IAAI,GAAG,oBAAoB,CAAC;QAClC,MAAM,SAAS,GAAG,IAAA,mBAAO,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC/C,+CAA+C;QAC/C,IAAA,eAAM,EAAC,IAAA,mBAAO,EAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,UAAU,GAAG,YAAY,CAAC;QAChC,MAAM,YAAY,GAAG,YAAY,CAAC;QAElC,MAAM,eAAe,GAAG,IAAA,mBAAO,EAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAC3D,MAAM,iBAAiB,GAAG,IAAA,2BAAe,EAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAEvE,0DAA0D;QAC1D,IAAA,eAAM,EAAC,IAAA,mBAAO,EAAC,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjE,IAAA,eAAM,EAAC,IAAA,mBAAO,EAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,8DAA8D,EAAE,GAAG,EAAE;IAC5E,IAAA,WAAE,EAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAChE,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,IAAA,6BAAiB,EAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACrF,MAAM,SAAS,GAAG,IAAA,6BAAiB,EAAC,YAAY,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;QACnF,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,IAAA,WAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,SAAS,GAAG,IAAA,2BAAe,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,2DAA2D;QAC3D,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAA,eAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,iDAAiD;QACjD,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,sEAAsE;QACtE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAA,2BAAe,EAAC,aAAa,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;YACnE,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB;YAC3D,MAAM,UAAU,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAC5D,sDAAsD;YACtD,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/dns-pinning.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dns-pinning.test.d.ts.map

package/dist/__tests__/dns-pinning.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-pinning.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/dns-pinning.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/dns-pinning.test.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const dns_pinning_js_1 = require("../dns-pinning.js");
+(0, vitest_1.describe)('createPinnedLookup', () => {
+    (0, vitest_1.it)('returns a literal IPv4 as-is via the resolver (no DNS round-trip)', async () => {
+        const lookup = (0, dns_pinning_js_1.createPinnedLookup)();
+        const ips = await lookup.resolver('203.0.113.7');
+        (0, vitest_1.expect)(ips).toEqual(['203.0.113.7']);
+    });
+    (0, vitest_1.it)('hands the connect path the same address the resolver validated (pin)', async () => {
+        // The SSRF check calls `.resolver(host)`; undici's connect calls the
+        // lookup itself. Both must agree on one address or the pin is voided.
+        const lookup = (0, dns_pinning_js_1.createPinnedLookup)();
+        const viaResolver = await lookup.resolver('198.51.100.42');
+        const viaLookup = await new Promise((resolve, reject) => {
+            lookup('198.51.100.42', { family: 4 }, (err, address) => (err ? reject(err) : resolve(address)));
+        });
+        (0, vitest_1.expect)(viaResolver).toEqual(['198.51.100.42']);
+        (0, vitest_1.expect)(viaLookup).toBe('198.51.100.42');
+    });
+    (0, vitest_1.it)('honors undici\'s { all: true } callback shape', async () => {
+        // Node >=20 / undici invoke the lookup with { all: true } and expect
+        // callback(null, [{ address, family }]). The 3-arg form silently breaks
+        // there and voids the pin, so this shape must be supported.
+        const lookup = (0, dns_pinning_js_1.createPinnedLookup)();
+        const result = await new Promise((resolve, reject) => {
+            lookup('192.0.2.10', { all: true }, ((err, addrs) => err ? reject(err) : resolve(addrs)));
+        });
+        (0, vitest_1.expect)(result).toEqual([{ address: '192.0.2.10', family: 4 }]);
+    });
+});
+//# sourceMappingURL=dns-pinning.test.js.map

package/dist/__tests__/dns-pinning.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-pinning.test.js","sourceRoot":"","sources":["../../src/__tests__/dns-pinning.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,sDAAuD;AAEvD,IAAA,iBAAQ,EAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAA,WAAE,EAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,MAAM,GAAG,IAAA,mCAAkB,GAAE,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,qEAAqE;QACrE,sEAAsE;QACtE,MAAM,MAAM,GAAG,IAAA,mCAAkB,GAAE,CAAC;QACpC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9D,MAAM,CACJ,eAAe,EACf,EAAE,MAAM,EAAE,CAAC,EAA4C,EACvD,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CACzD,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QAC/C,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,qEAAqE;QACrE,wEAAwE;QACxE,4DAA4D;QAC5D,MAAM,MAAM,GAAG,IAAA,mCAAkB,GAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAC9B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClB,MAAM,CACJ,YAAY,EACZ,EAAE,GAAG,EAAE,IAAI,EAA4C,EACvD,CAAC,CAAC,GAAiC,EAAE,KAAiD,EAAE,EAAE,CACxF,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAI3B,CACV,CAAC;QACJ,CAAC,CACF,CAAC;QACF,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/llm-classifier-cache-store.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=llm-classifier-cache-store.test.d.ts.map

package/dist/__tests__/llm-classifier-cache-store.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-classifier-cache-store.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/llm-classifier-cache-store.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/llm-classifier-cache-store.test.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const llm_classifier_cache_store_js_1 = require("../llm-classifier-cache-store.js");
+const SAMPLE = {
+    category: 'admin',
+    reason: 'tool name suggests privileged operation',
+    confidence: 0.95,
+    model: 'google/gemini-2.5-flash-lite',
+};
+(0, vitest_1.describe)('InMemoryCacheStore', () => {
+    let store;
+    (0, vitest_1.beforeEach)(() => {
+        store = new llm_classifier_cache_store_js_1.InMemoryCacheStore({ ttlMs: 1000 * 60 * 60 });
+    });
+    (0, vitest_1.it)('returns null on cache miss', async () => {
+        (0, vitest_1.expect)(await store.get('missing-key')).toBeNull();
+    });
+    (0, vitest_1.it)('returns stored classification marked as cached', async () => {
+        await store.set('k1', SAMPLE);
+        const got = await store.get('k1');
+        (0, vitest_1.expect)(got).not.toBeNull();
+        (0, vitest_1.expect)(got.category).toBe('admin');
+        (0, vitest_1.expect)(got.cached).toBe(true);
+    });
+    (0, vitest_1.it)('does not return expired entries', async () => {
+        const shortLived = new llm_classifier_cache_store_js_1.InMemoryCacheStore({ ttlMs: 5 });
+        await shortLived.set('k1', SAMPLE);
+        await new Promise((resolve) => setTimeout(resolve, 20));
+        (0, vitest_1.expect)(await shortLived.get('k1')).toBeNull();
+    });
+    (0, vitest_1.it)('overwrites existing entries', async () => {
+        await store.set('k1', SAMPLE);
+        await store.set('k1', { ...SAMPLE, category: 'financial', reason: 'updated' });
+        const got = await store.get('k1');
+        (0, vitest_1.expect)(got.category).toBe('financial');
+    });
+    (0, vitest_1.it)('does not throw on errors from get or set', async () => {
+        await (0, vitest_1.expect)(store.get('k1')).resolves.not.toThrow();
+        await (0, vitest_1.expect)(store.set('k1', SAMPLE)).resolves.not.toThrow();
+    });
+});
+(0, vitest_1.describe)('classifier cache store singleton', () => {
+    (0, vitest_1.beforeEach)(() => {
+        (0, llm_classifier_cache_store_js_1.resetClassifierCacheStoreForTest)();
+    });
+    (0, vitest_1.it)('returns a default InMemoryCacheStore if nothing was set', () => {
+        const store = (0, llm_classifier_cache_store_js_1.getClassifierCacheStore)();
+        (0, vitest_1.expect)(store).toBeInstanceOf(llm_classifier_cache_store_js_1.InMemoryCacheStore);
+    });
+    (0, vitest_1.it)('returns the store that was injected via setClassifierCacheStore', () => {
+        const custom = {
+            get: async () => null,
+            set: async () => { },
+        };
+        (0, llm_classifier_cache_store_js_1.setClassifierCacheStore)(custom);
+        (0, vitest_1.expect)((0, llm_classifier_cache_store_js_1.getClassifierCacheStore)()).toBe(custom);
+    });
+    (0, vitest_1.it)('resetClassifierCacheStoreForTest clears the injected store', () => {
+        (0, llm_classifier_cache_store_js_1.setClassifierCacheStore)({ get: async () => null, set: async () => { } });
+        (0, llm_classifier_cache_store_js_1.resetClassifierCacheStoreForTest)();
+        (0, vitest_1.expect)((0, llm_classifier_cache_store_js_1.getClassifierCacheStore)()).toBeInstanceOf(llm_classifier_cache_store_js_1.InMemoryCacheStore);
+    });
+});
+//# sourceMappingURL=llm-classifier-cache-store.test.js.map

package/dist/__tests__/llm-classifier-cache-store.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-classifier-cache-store.test.js","sourceRoot":"","sources":["../../src/__tests__/llm-classifier-cache-store.test.ts"],"names":[],"mappings":";;AAAA,mCAA0D;AAC1D,oFAM0C;AAE1C,MAAM,MAAM,GAAG;IACb,QAAQ,EAAE,OAAgB;IAC1B,MAAM,EAAE,yCAAyC;IACjD,UAAU,EAAE,IAAI;IAChB,KAAK,EAAE,8BAA8B;CACtC,CAAC;AAEF,IAAA,iBAAQ,EAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,KAAiB,CAAC;IAEtB,IAAA,mBAAU,EAAC,GAAG,EAAE;QACd,KAAK,GAAG,IAAI,kDAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,IAAA,eAAM,EAAC,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC3B,IAAA,eAAM,EAAC,GAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,IAAA,eAAM,EAAC,GAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,UAAU,GAAG,IAAI,kDAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,IAAA,eAAM,EAAC,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAA,eAAM,EAAC,GAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,IAAA,eAAM,EAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACrD,MAAM,IAAA,eAAM,EAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,IAAA,mBAAU,EAAC,GAAG,EAAE;QACd,IAAA,gEAAgC,GAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,KAAK,GAAG,IAAA,uDAAuB,GAAE,CAAC;QACxC,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,cAAc,CAAC,kDAAkB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,MAAM,GAAe;YACzB,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;YACrB,GAAG,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACpB,CAAC;QACF,IAAA,uDAAuB,EAAC,MAAM,CAAC,CAAC;QAChC,IAAA,eAAM,EAAC,IAAA,uDAAuB,GAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,IAAA,uDAAuB,EAAC,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;QACxE,IAAA,gEAAgC,GAAE,CAAC;QACnC,IAAA,eAAM,EAAC,IAAA,uDAAuB,GAAE,CAAC,CAAC,cAAc,CAAC,kDAAkB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/llm-classifier-cache.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=llm-classifier-cache.test.d.ts.map

package/dist/__tests__/llm-classifier-cache.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-classifier-cache.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/llm-classifier-cache.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/llm-classifier-cache.test.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const llm_classifier_cache_js_1 = require("../llm-classifier-cache.js");
+(0, vitest_1.describe)('llm-classifier-cache', () => {
+    (0, vitest_1.describe)('buildCacheKey', () => {
+        (0, vitest_1.it)('produces the same key for identical tool + payload shape', () => {
+            const k1 = (0, llm_classifier_cache_js_1.buildCacheKey)('notion.delete_page', { pageId: 'abc', permanent: true });
+            const k2 = (0, llm_classifier_cache_js_1.buildCacheKey)('notion.delete_page', { pageId: 'xyz', permanent: false });
+            (0, vitest_1.expect)(k1).toBe(k2);
+        });
+        (0, vitest_1.it)('produces the same key regardless of key ordering', () => {
+            const k1 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool.name', { a: 1, b: 2, c: 3 });
+            const k2 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool.name', { c: 3, a: 1, b: 2 });
+            (0, vitest_1.expect)(k1).toBe(k2);
+        });
+        (0, vitest_1.it)('produces different keys for different tool names', () => {
+            const k1 = (0, llm_classifier_cache_js_1.buildCacheKey)('notion.delete_page', { pageId: 'abc' });
+            const k2 = (0, llm_classifier_cache_js_1.buildCacheKey)('notion.archive_page', { pageId: 'abc' });
+            (0, vitest_1.expect)(k1).not.toBe(k2);
+        });
+        (0, vitest_1.it)('produces different keys for different payload shapes', () => {
+            const k1 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool', { a: 1, b: 2 });
+            const k2 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool', { a: 1, b: 2, c: 3 });
+            (0, vitest_1.expect)(k1).not.toBe(k2);
+        });
+        (0, vitest_1.it)('is case-insensitive on tool name (matches static floor behavior)', () => {
+            const k1 = (0, llm_classifier_cache_js_1.buildCacheKey)('Notion.Delete_Page', {});
+            const k2 = (0, llm_classifier_cache_js_1.buildCacheKey)('notion.delete_page', {});
+            (0, vitest_1.expect)(k1).toBe(k2);
+        });
+        (0, vitest_1.it)('strips values but preserves nested structure', () => {
+            const k1 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool', { nested: { x: 1, y: 2 } });
+            const k2 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool', { nested: { x: 999, y: 'different' } });
+            (0, vitest_1.expect)(k1).toBe(k2);
+        });
+        (0, vitest_1.it)('treats arrays by structure of first element', () => {
+            const k1 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool', { items: [{ id: 1 }] });
+            const k2 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool', { items: [{ id: 2 }, { id: 3 }] });
+            (0, vitest_1.expect)(k1).toBe(k2);
+        });
+    });
+});
+//# sourceMappingURL=llm-classifier-cache.test.js.map

package/dist/__tests__/llm-classifier-cache.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-classifier-cache.test.js","sourceRoot":"","sources":["../../src/__tests__/llm-classifier-cache.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,wEAA2D;AAE3D,IAAA,iBAAQ,EAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAA,iBAAQ,EAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,IAAA,WAAE,EAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACpF,IAAA,eAAM,EAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5D,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5D,IAAA,eAAM,EAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,IAAA,eAAM,EAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACjD,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACvD,IAAA,eAAM,EAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,kEAAkE,EAAE,GAAG,EAAE;YAC1E,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;YACnD,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;YACnD,IAAA,eAAM,EAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7D,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YACzE,IAAA,eAAM,EAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACzD,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACpE,IAAA,eAAM,EAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/llm-classifier.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=llm-classifier.test.d.ts.map

package/dist/__tests__/llm-classifier.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-classifier.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/llm-classifier.test.ts"],"names":[],"mappings":""}