agentlock-shared 0.2.0 → 0.3.0

package/dist/__tests__/billing.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=billing.test.d.ts.map

package/dist/__tests__/billing.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/billing.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/billing.test.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const billing_js_1 = require("../billing.js");
+(0, vitest_1.describe)('stripe billing status helpers', () => {
+    (0, vitest_1.it)('treats active and trialing subscriptions as entitled', () => {
+        (0, vitest_1.expect)((0, billing_js_1.isEntitledStripeSubscriptionStatus)('active')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isEntitledStripeSubscriptionStatus)('trialing')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isEntitledStripeSubscriptionStatus)('past_due')).toBe(false);
+    });
+    (0, vitest_1.it)('keeps recoverable subscriptions attached to the existing customer flow', () => {
+        (0, vitest_1.expect)((0, billing_js_1.isRecoverableStripeSubscriptionStatus)('active')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isRecoverableStripeSubscriptionStatus)('trialing')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isRecoverableStripeSubscriptionStatus)('past_due')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isRecoverableStripeSubscriptionStatus)('unpaid')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isRecoverableStripeSubscriptionStatus)('incomplete')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isRecoverableStripeSubscriptionStatus)('paused')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isRecoverableStripeSubscriptionStatus)('incomplete_expired')).toBe(false);
+    });
+    (0, vitest_1.it)('only allows a fresh checkout for terminal subscriptions', () => {
+        (0, vitest_1.expect)((0, billing_js_1.isTerminalStripeSubscriptionStatus)('canceled')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isTerminalStripeSubscriptionStatus)('incomplete_expired')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.isTerminalStripeSubscriptionStatus)('past_due')).toBe(false);
+        (0, vitest_1.expect)((0, billing_js_1.canStartNewCheckoutForStripeSubscriptionStatus)('canceled')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.canStartNewCheckoutForStripeSubscriptionStatus)('incomplete_expired')).toBe(true);
+        (0, vitest_1.expect)((0, billing_js_1.canStartNewCheckoutForStripeSubscriptionStatus)('active')).toBe(false);
+        (0, vitest_1.expect)((0, billing_js_1.canStartNewCheckoutForStripeSubscriptionStatus)('paused')).toBe(false);
+        (0, vitest_1.expect)((0, billing_js_1.canStartNewCheckoutForStripeSubscriptionStatus)('unknown_future_status')).toBe(false);
+    });
+});
+//# sourceMappingURL=billing.test.js.map

package/dist/__tests__/billing.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.test.js","sourceRoot":"","sources":["../../src/__tests__/billing.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,8CAKuB;AAEvB,IAAA,iBAAQ,EAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,IAAA,WAAE,EAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,IAAA,eAAM,EAAC,IAAA,+CAAkC,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,IAAA,eAAM,EAAC,IAAA,+CAAkC,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,IAAA,eAAM,EAAC,IAAA,+CAAkC,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,IAAA,eAAM,EAAC,IAAA,kDAAqC,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,IAAA,eAAM,EAAC,IAAA,kDAAqC,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,IAAA,eAAM,EAAC,IAAA,kDAAqC,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,IAAA,eAAM,EAAC,IAAA,kDAAqC,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,IAAA,eAAM,EAAC,IAAA,kDAAqC,EAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,IAAA,eAAM,EAAC,IAAA,kDAAqC,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,IAAA,eAAM,EAAC,IAAA,kDAAqC,EAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,IAAA,eAAM,EAAC,IAAA,+CAAkC,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,IAAA,eAAM,EAAC,IAAA,+CAAkC,EAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5E,IAAA,eAAM,EAAC,IAAA,+CAAkC,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnE,IAAA,eAAM,EAAC,IAAA,2DAA8C,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAA,eAAM,EAAC,IAAA,2DAA8C,EAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxF,IAAA,eAAM,EAAC,IAAA,2DAA8C,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,IAAA,eAAM,EAAC,IAAA,2DAA8C,EAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7E,IAAA,eAAM,EAAC,IAAA,2DAA8C,EAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/dns-pinning.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dns-pinning.test.d.ts.map

package/dist/__tests__/dns-pinning.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-pinning.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/dns-pinning.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/dns-pinning.test.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const dns_pinning_js_1 = require("../dns-pinning.js");
+(0, vitest_1.describe)('createPinnedLookup', () => {
+    (0, vitest_1.it)('returns a literal IPv4 as-is via the resolver (no DNS round-trip)', async () => {
+        const lookup = (0, dns_pinning_js_1.createPinnedLookup)();
+        const ips = await lookup.resolver('203.0.113.7');
+        (0, vitest_1.expect)(ips).toEqual(['203.0.113.7']);
+    });
+    (0, vitest_1.it)('hands the connect path the same address the resolver validated (pin)', async () => {
+        // The SSRF check calls `.resolver(host)`; undici's connect calls the
+        // lookup itself. Both must agree on one address or the pin is voided.
+        const lookup = (0, dns_pinning_js_1.createPinnedLookup)();
+        const viaResolver = await lookup.resolver('198.51.100.42');
+        const viaLookup = await new Promise((resolve, reject) => {
+            lookup('198.51.100.42', { family: 4 }, (err, address) => (err ? reject(err) : resolve(address)));
+        });
+        (0, vitest_1.expect)(viaResolver).toEqual(['198.51.100.42']);
+        (0, vitest_1.expect)(viaLookup).toBe('198.51.100.42');
+    });
+    (0, vitest_1.it)('honors undici\'s { all: true } callback shape', async () => {
+        // Node >=20 / undici invoke the lookup with { all: true } and expect
+        // callback(null, [{ address, family }]). The 3-arg form silently breaks
+        // there and voids the pin, so this shape must be supported.
+        const lookup = (0, dns_pinning_js_1.createPinnedLookup)();
+        const result = await new Promise((resolve, reject) => {
+            lookup('192.0.2.10', { all: true }, ((err, addrs) => err ? reject(err) : resolve(addrs)));
+        });
+        (0, vitest_1.expect)(result).toEqual([{ address: '192.0.2.10', family: 4 }]);
+    });
+});
+//# sourceMappingURL=dns-pinning.test.js.map

package/dist/__tests__/dns-pinning.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-pinning.test.js","sourceRoot":"","sources":["../../src/__tests__/dns-pinning.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,sDAAuD;AAEvD,IAAA,iBAAQ,EAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAA,WAAE,EAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,MAAM,GAAG,IAAA,mCAAkB,GAAE,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,qEAAqE;QACrE,sEAAsE;QACtE,MAAM,MAAM,GAAG,IAAA,mCAAkB,GAAE,CAAC;QACpC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9D,MAAM,CACJ,eAAe,EACf,EAAE,MAAM,EAAE,CAAC,EAA4C,EACvD,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CACzD,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QAC/C,IAAA,eAAM,EAAC,SAAS,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,qEAAqE;QACrE,wEAAwE;QACxE,4DAA4D;QAC5D,MAAM,MAAM,GAAG,IAAA,mCAAkB,GAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAC9B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClB,MAAM,CACJ,YAAY,EACZ,EAAE,GAAG,EAAE,IAAI,EAA4C,EACvD,CAAC,CAAC,GAAiC,EAAE,KAAiD,EAAE,EAAE,CACxF,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAI3B,CACV,CAAC;QACJ,CAAC,CACF,CAAC;QACF,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/llm-classifier-cache-store.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=llm-classifier-cache-store.test.d.ts.map

package/dist/__tests__/llm-classifier-cache-store.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-classifier-cache-store.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/llm-classifier-cache-store.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/llm-classifier-cache-store.test.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const llm_classifier_cache_store_js_1 = require("../llm-classifier-cache-store.js");
+const SAMPLE = {
+    category: 'admin',
+    reason: 'tool name suggests privileged operation',
+    confidence: 0.95,
+    model: 'google/gemini-2.5-flash-lite',
+};
+(0, vitest_1.describe)('InMemoryCacheStore', () => {
+    let store;
+    (0, vitest_1.beforeEach)(() => {
+        store = new llm_classifier_cache_store_js_1.InMemoryCacheStore({ ttlMs: 1000 * 60 * 60 });
+    });
+    (0, vitest_1.it)('returns null on cache miss', async () => {
+        (0, vitest_1.expect)(await store.get('missing-key')).toBeNull();
+    });
+    (0, vitest_1.it)('returns stored classification marked as cached', async () => {
+        await store.set('k1', SAMPLE);
+        const got = await store.get('k1');
+        (0, vitest_1.expect)(got).not.toBeNull();
+        (0, vitest_1.expect)(got.category).toBe('admin');
+        (0, vitest_1.expect)(got.cached).toBe(true);
+    });
+    (0, vitest_1.it)('does not return expired entries', async () => {
+        const shortLived = new llm_classifier_cache_store_js_1.InMemoryCacheStore({ ttlMs: 5 });
+        await shortLived.set('k1', SAMPLE);
+        await new Promise((resolve) => setTimeout(resolve, 20));
+        (0, vitest_1.expect)(await shortLived.get('k1')).toBeNull();
+    });
+    (0, vitest_1.it)('overwrites existing entries', async () => {
+        await store.set('k1', SAMPLE);
+        await store.set('k1', { ...SAMPLE, category: 'financial', reason: 'updated' });
+        const got = await store.get('k1');
+        (0, vitest_1.expect)(got.category).toBe('financial');
+    });
+    (0, vitest_1.it)('does not throw on errors from get or set', async () => {
+        await (0, vitest_1.expect)(store.get('k1')).resolves.not.toThrow();
+        await (0, vitest_1.expect)(store.set('k1', SAMPLE)).resolves.not.toThrow();
+    });
+});
+(0, vitest_1.describe)('classifier cache store singleton', () => {
+    (0, vitest_1.beforeEach)(() => {
+        (0, llm_classifier_cache_store_js_1.resetClassifierCacheStoreForTest)();
+    });
+    (0, vitest_1.it)('returns a default InMemoryCacheStore if nothing was set', () => {
+        const store = (0, llm_classifier_cache_store_js_1.getClassifierCacheStore)();
+        (0, vitest_1.expect)(store).toBeInstanceOf(llm_classifier_cache_store_js_1.InMemoryCacheStore);
+    });
+    (0, vitest_1.it)('returns the store that was injected via setClassifierCacheStore', () => {
+        const custom = {
+            get: async () => null,
+            set: async () => { },
+        };
+        (0, llm_classifier_cache_store_js_1.setClassifierCacheStore)(custom);
+        (0, vitest_1.expect)((0, llm_classifier_cache_store_js_1.getClassifierCacheStore)()).toBe(custom);
+    });
+    (0, vitest_1.it)('resetClassifierCacheStoreForTest clears the injected store', () => {
+        (0, llm_classifier_cache_store_js_1.setClassifierCacheStore)({ get: async () => null, set: async () => { } });
+        (0, llm_classifier_cache_store_js_1.resetClassifierCacheStoreForTest)();
+        (0, vitest_1.expect)((0, llm_classifier_cache_store_js_1.getClassifierCacheStore)()).toBeInstanceOf(llm_classifier_cache_store_js_1.InMemoryCacheStore);
+    });
+});
+//# sourceMappingURL=llm-classifier-cache-store.test.js.map

package/dist/__tests__/llm-classifier-cache-store.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-classifier-cache-store.test.js","sourceRoot":"","sources":["../../src/__tests__/llm-classifier-cache-store.test.ts"],"names":[],"mappings":";;AAAA,mCAA0D;AAC1D,oFAM0C;AAE1C,MAAM,MAAM,GAAG;IACb,QAAQ,EAAE,OAAgB;IAC1B,MAAM,EAAE,yCAAyC;IACjD,UAAU,EAAE,IAAI;IAChB,KAAK,EAAE,8BAA8B;CACtC,CAAC;AAEF,IAAA,iBAAQ,EAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,KAAiB,CAAC;IAEtB,IAAA,mBAAU,EAAC,GAAG,EAAE;QACd,KAAK,GAAG,IAAI,kDAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,IAAA,eAAM,EAAC,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC3B,IAAA,eAAM,EAAC,GAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,IAAA,eAAM,EAAC,GAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,UAAU,GAAG,IAAI,kDAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,IAAA,eAAM,EAAC,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAA,eAAM,EAAC,GAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,IAAA,eAAM,EAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACrD,MAAM,IAAA,eAAM,EAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,IAAA,mBAAU,EAAC,GAAG,EAAE;QACd,IAAA,gEAAgC,GAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,KAAK,GAAG,IAAA,uDAAuB,GAAE,CAAC;QACxC,IAAA,eAAM,EAAC,KAAK,CAAC,CAAC,cAAc,CAAC,kDAAkB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,MAAM,GAAe;YACzB,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;YACrB,GAAG,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACpB,CAAC;QACF,IAAA,uDAAuB,EAAC,MAAM,CAAC,CAAC;QAChC,IAAA,eAAM,EAAC,IAAA,uDAAuB,GAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,IAAA,uDAAuB,EAAC,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;QACxE,IAAA,gEAAgC,GAAE,CAAC;QACnC,IAAA,eAAM,EAAC,IAAA,uDAAuB,GAAE,CAAC,CAAC,cAAc,CAAC,kDAAkB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/llm-classifier-cache.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=llm-classifier-cache.test.d.ts.map

package/dist/__tests__/llm-classifier-cache.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-classifier-cache.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/llm-classifier-cache.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/llm-classifier-cache.test.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const llm_classifier_cache_js_1 = require("../llm-classifier-cache.js");
+(0, vitest_1.describe)('llm-classifier-cache', () => {
+    (0, vitest_1.describe)('buildCacheKey', () => {
+        (0, vitest_1.it)('produces the same key for identical tool + payload shape', () => {
+            const k1 = (0, llm_classifier_cache_js_1.buildCacheKey)('notion.delete_page', { pageId: 'abc', permanent: true });
+            const k2 = (0, llm_classifier_cache_js_1.buildCacheKey)('notion.delete_page', { pageId: 'xyz', permanent: false });
+            (0, vitest_1.expect)(k1).toBe(k2);
+        });
+        (0, vitest_1.it)('produces the same key regardless of key ordering', () => {
+            const k1 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool.name', { a: 1, b: 2, c: 3 });
+            const k2 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool.name', { c: 3, a: 1, b: 2 });
+            (0, vitest_1.expect)(k1).toBe(k2);
+        });
+        (0, vitest_1.it)('produces different keys for different tool names', () => {
+            const k1 = (0, llm_classifier_cache_js_1.buildCacheKey)('notion.delete_page', { pageId: 'abc' });
+            const k2 = (0, llm_classifier_cache_js_1.buildCacheKey)('notion.archive_page', { pageId: 'abc' });
+            (0, vitest_1.expect)(k1).not.toBe(k2);
+        });
+        (0, vitest_1.it)('produces different keys for different payload shapes', () => {
+            const k1 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool', { a: 1, b: 2 });
+            const k2 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool', { a: 1, b: 2, c: 3 });
+            (0, vitest_1.expect)(k1).not.toBe(k2);
+        });
+        (0, vitest_1.it)('is case-insensitive on tool name (matches static floor behavior)', () => {
+            const k1 = (0, llm_classifier_cache_js_1.buildCacheKey)('Notion.Delete_Page', {});
+            const k2 = (0, llm_classifier_cache_js_1.buildCacheKey)('notion.delete_page', {});
+            (0, vitest_1.expect)(k1).toBe(k2);
+        });
+        (0, vitest_1.it)('strips values but preserves nested structure', () => {
+            const k1 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool', { nested: { x: 1, y: 2 } });
+            const k2 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool', { nested: { x: 999, y: 'different' } });
+            (0, vitest_1.expect)(k1).toBe(k2);
+        });
+        (0, vitest_1.it)('treats arrays by structure of first element', () => {
+            const k1 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool', { items: [{ id: 1 }] });
+            const k2 = (0, llm_classifier_cache_js_1.buildCacheKey)('tool', { items: [{ id: 2 }, { id: 3 }] });
+            (0, vitest_1.expect)(k1).toBe(k2);
+        });
+    });
+});
+//# sourceMappingURL=llm-classifier-cache.test.js.map

package/dist/__tests__/llm-classifier-cache.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-classifier-cache.test.js","sourceRoot":"","sources":["../../src/__tests__/llm-classifier-cache.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,wEAA2D;AAE3D,IAAA,iBAAQ,EAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAA,iBAAQ,EAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,IAAA,WAAE,EAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACpF,IAAA,eAAM,EAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5D,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5D,IAAA,eAAM,EAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,IAAA,eAAM,EAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACjD,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACvD,IAAA,eAAM,EAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,kEAAkE,EAAE,GAAG,EAAE;YAC1E,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;YACnD,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;YACnD,IAAA,eAAM,EAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7D,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YACzE,IAAA,eAAM,EAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAA,WAAE,EAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACzD,MAAM,EAAE,GAAG,IAAA,uCAAa,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACpE,IAAA,eAAM,EAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/llm-classifier.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=llm-classifier.test.d.ts.map

package/dist/__tests__/llm-classifier.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-classifier.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/llm-classifier.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/llm-classifier.test.js

@@ -0,0 +1,167 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const llm_classifier_js_1 = require("../llm-classifier.js");
+const llm_classifier_cache_store_js_1 = require("../llm-classifier-cache-store.js");
+function mockClassifier(result) {
+    return async () => {
+        if (result instanceof Error)
+            throw result;
+        return result;
+    };
+}
+(0, vitest_1.describe)('classifyWithLLM', () => {
+    (0, vitest_1.beforeEach)(() => {
+        (0, llm_classifier_cache_store_js_1.resetClassifierCacheStoreForTest)();
+        (0, llm_classifier_js_1.__setClassifierForTest)(null); // reset to default
+    });
+    (0, vitest_1.it)('returns null when no API key is configured (env var missing)', async () => {
+        const original = process.env.OPENROUTER_API_KEY;
+        delete process.env.OPENROUTER_API_KEY;
+        try {
+            const result = await (0, llm_classifier_js_1.classifyWithLLM)('unknown.tool', { foo: 'bar' });
+            (0, vitest_1.expect)(result).toBeNull();
+        }
+        finally {
+            if (original !== undefined)
+                process.env.OPENROUTER_API_KEY = original;
+        }
+    });
+    (0, vitest_1.it)('returns classification from injected classifier', async () => {
+        (0, llm_classifier_js_1.__setClassifierForTest)(mockClassifier({
+            category: 'write',
+            reason: 'Tool name suggests a mutation',
+            confidence: 0.88,
+            model: 'google/gemini-2.5-flash-lite',
+        }));
+        const result = await (0, llm_classifier_js_1.classifyWithLLM)('notion.update_page', { pageId: 'abc' });
+        (0, vitest_1.expect)(result).not.toBeNull();
+        (0, vitest_1.expect)(result?.category).toBe('write');
+        (0, vitest_1.expect)(result?.cached).toBe(false);
+    });
+    (0, vitest_1.it)('caches results — same shape hits, different shape misses', async () => {
+        const spy = vitest_1.vi.fn(mockClassifier({
+            category: 'admin',
+            reason: 'Delete user action',
+            confidence: 0.97,
+            model: 'google/gemini-2.5-flash-lite',
+        }));
+        (0, llm_classifier_js_1.__setClassifierForTest)(spy);
+        // Same shape — r2 is a cache hit
+        const r1 = await (0, llm_classifier_js_1.classifyWithLLM)('custom.delete_user', { userId: 'user-1' });
+        const r2 = await (0, llm_classifier_js_1.classifyWithLLM)('custom.delete_user', { userId: 'user-2' });
+        (0, vitest_1.expect)(r1?.cached).toBe(false);
+        (0, vitest_1.expect)(r2?.cached).toBe(true);
+        (0, vitest_1.expect)(r2?.category).toBe('admin');
+        (0, vitest_1.expect)(spy).toHaveBeenCalledTimes(1);
+        // Different shape — r3 is a cache MISS, spy called again
+        const r3 = await (0, llm_classifier_js_1.classifyWithLLM)('custom.delete_user', {
+            userId: 'user-3',
+            force: true,
+        });
+        (0, vitest_1.expect)(r3?.cached).toBe(false);
+        (0, vitest_1.expect)(spy).toHaveBeenCalledTimes(2);
+    });
+    (0, vitest_1.it)('returns null (graceful fallback) when classifier throws', async () => {
+        (0, llm_classifier_js_1.__setClassifierForTest)(mockClassifier(new Error('OpenRouter 503')));
+        const result = await (0, llm_classifier_js_1.classifyWithLLM)('unknown.tool', {});
+        (0, vitest_1.expect)(result).toBeNull();
+    });
+    (0, vitest_1.it)('returns null (graceful fallback) when classifier returns null', async () => {
+        (0, llm_classifier_js_1.__setClassifierForTest)(mockClassifier(null));
+        const result = await (0, llm_classifier_js_1.classifyWithLLM)('unknown.tool', {});
+        (0, vitest_1.expect)(result).toBeNull();
+    });
+    (0, vitest_1.it)('enforces a hard timeout (does not wait forever)', async () => {
+        (0, llm_classifier_js_1.__setClassifierForTest)(async () => {
+            await new Promise((r) => setTimeout(r, 5000));
+            return null;
+        });
+        const start = Date.now();
+        const result = await (0, llm_classifier_js_1.classifyWithLLM)('slow.tool', {}, { timeoutMs: 100 });
+        const elapsed = Date.now() - start;
+        (0, vitest_1.expect)(result).toBeNull();
+        (0, vitest_1.expect)(elapsed).toBeLessThan(200); // timeout was 100ms, give some wiggle room
+    });
+    (0, vitest_1.it)('does not leak errors — just returns null', async () => {
+        (0, llm_classifier_js_1.__setClassifierForTest)(async () => {
+            throw new Error('Unexpected error');
+        });
+        await (0, vitest_1.expect)((0, llm_classifier_js_1.classifyWithLLM)('tool', {})).resolves.toBeNull();
+    });
+    (0, vitest_1.it)('never downgrades — a "read" response is still returned as read', async () => {
+        // The caller (evaluatePolicy) applies max(declared, staticFloor, llmFloor).
+        // This test just confirms the classifier faithfully returns whatever the
+        // LLM said; downgrade protection is a policy-layer concern.
+        (0, llm_classifier_js_1.__setClassifierForTest)(mockClassifier({
+            category: 'read',
+            reason: 'Looks like a read-only lookup',
+            confidence: 0.6,
+            model: 'google/gemini-2.5-flash-lite',
+        }));
+        const result = await (0, llm_classifier_js_1.classifyWithLLM)('some.tool', {});
+        (0, vitest_1.expect)(result?.category).toBe('read');
+    });
+    (0, vitest_1.it)('shapeOnly strips raw values from payloads — no values leak to the LLM', async () => {
+        const { shapeOnly } = await import('../llm-classifier.js');
+        const result = shapeOnly({
+            apiKey: 'sk-live-SECRET-DO-NOT-LEAK',
+            email: 'user@example.com',
+            amount: 999.99,
+            nested: { card: '4242-4242-4242-4242', count: 7 },
+            tags: ['alpha', 'beta'],
+        });
+        const serialized = JSON.stringify(result);
+        // Raw values must not appear
+        (0, vitest_1.expect)(serialized).not.toContain('sk-live-SECRET-DO-NOT-LEAK');
+        (0, vitest_1.expect)(serialized).not.toContain('user@example.com');
+        (0, vitest_1.expect)(serialized).not.toContain('999.99');
+        (0, vitest_1.expect)(serialized).not.toContain('4242');
+        (0, vitest_1.expect)(serialized).not.toContain('alpha');
+        // Keys ARE preserved
+        (0, vitest_1.expect)(serialized).toContain('apiKey');
+        (0, vitest_1.expect)(serialized).toContain('email');
+        (0, vitest_1.expect)(serialized).toContain('nested');
+        // Type descriptors ARE present
+        (0, vitest_1.expect)(serialized).toContain('<string>');
+        (0, vitest_1.expect)(serialized).toContain('<number>');
+    });
+});
+// ---------------------------------------------------------------------------
+// Opt-in integration test — calls the real OpenRouter API.
+// Skipped unless INTEGRATION=1 is set (pnpm test:integration runs with it).
+// ---------------------------------------------------------------------------
+vitest_1.describe.skipIf(process.env.INTEGRATION !== '1')('classifyWithLLM — OpenRouter integration', () => {
+    (0, vitest_1.beforeEach)(() => {
+        (0, llm_classifier_cache_store_js_1.resetClassifierCacheStoreForTest)();
+        (0, llm_classifier_js_1.__setClassifierForTest)(null); // use the real classifier
+    });
+    (0, vitest_1.it)('classifies notion.delete_workspace_page as write or admin', async () => {
+        if (!process.env.OPENROUTER_API_KEY) {
+            throw new Error('OPENROUTER_API_KEY not set — cannot run integration test');
+        }
+        // 5s timeout (vs. the 800ms production default) because cold-start latency
+        // to OpenRouter can exceed 800ms on the first real call of a test run.
+        // This test validates classification correctness, not the timeout mechanism —
+        // that's covered by the mocked unit tests.
+        const result = await (0, llm_classifier_js_1.classifyWithLLM)('notion.delete_workspace_page', {
+            pageId: '<string>',
+            permanent: '<boolean>',
+        }, { timeoutMs: 5000 });
+        (0, vitest_1.expect)(result).not.toBeNull();
+        (0, vitest_1.expect)(['write', 'admin']).toContain(result?.category);
+        (0, vitest_1.expect)(result?.reason.length).toBeGreaterThan(0);
+        (0, vitest_1.expect)(result?.model).toContain('gemini');
+    }, 10_000);
+    (0, vitest_1.it)('classifies unknown.read_user_profile as read', async () => {
+        if (!process.env.OPENROUTER_API_KEY) {
+            throw new Error('OPENROUTER_API_KEY not set — cannot run integration test');
+        }
+        const result = await (0, llm_classifier_js_1.classifyWithLLM)('unknown.read_user_profile', {
+            userId: '<string>',
+        }, { timeoutMs: 5000 });
+        (0, vitest_1.expect)(result).not.toBeNull();
+        (0, vitest_1.expect)(result?.category).toBe('read');
+    }, 10_000);
+});
+//# sourceMappingURL=llm-classifier.test.js.map

package/dist/__tests__/llm-classifier.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-classifier.test.js","sourceRoot":"","sources":["../../src/__tests__/llm-classifier.test.ts"],"names":[],"mappings":";;AAAA,mCAA8D;AAC9D,4DAA+E;AAC/E,oFAAoF;AAKpF,SAAS,cAAc,CAAC,MAAwD;IAC9E,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,MAAM,YAAY,KAAK;YAAE,MAAM,MAAM,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAED,IAAA,iBAAQ,EAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAA,mBAAU,EAAC,GAAG,EAAE;QACd,IAAA,gEAAgC,GAAE,CAAC;QACnC,IAAA,0CAAsB,EAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB;IACnD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAChD,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAe,EAAC,cAAc,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC;gBAAS,CAAC;YACT,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,QAAQ,CAAC;QACxE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,IAAA,0CAAsB,EAAC,cAAc,CAAC;YACpC,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,+BAA+B;YACvC,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,8BAA8B;SACtC,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAe,EAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAA,eAAM,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,IAAA,eAAM,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,GAAG,GAAG,WAAE,CAAC,EAAE,CAAC,cAAc,CAAC;YAC/B,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,8BAA8B;SACtC,CAAC,CAAC,CAAC;QACJ,IAAA,0CAAsB,EAAC,GAAG,CAAC,CAAC;QAE5B,iCAAiC;QACjC,MAAM,EAAE,GAAG,MAAM,IAAA,mCAAe,EAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7E,MAAM,EAAE,GAAG,MAAM,IAAA,mCAAe,EAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE7E,IAAA,eAAM,EAAC,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAA,eAAM,EAAC,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAA,eAAM,EAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAErC,yDAAyD;QACzD,MAAM,EAAE,GAAG,MAAM,IAAA,mCAAe,EAAC,oBAAoB,EAAE;YACrD,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,IAAA,0CAAsB,EAAC,cAAc,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAe,EAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACzD,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,IAAA,0CAAsB,EAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAe,EAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACzD,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,IAAA,0CAAsB,EAAC,KAAK,IAAI,EAAE;YAChC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAe,EAAC,WAAW,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACnC,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1B,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,2CAA2C;IAChF,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,IAAA,0CAAsB,EAAC,KAAK,IAAI,EAAE;YAChC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,MAAM,IAAA,eAAM,EAAC,IAAA,mCAAe,EAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,4EAA4E;QAC5E,yEAAyE;QACzE,4DAA4D;QAC5D,IAAA,0CAAsB,EAAC,cAAc,CAAC;YACpC,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,+BAA+B;YACvC,UAAU,EAAE,GAAG;YACf,KAAK,EAAE,8BAA8B;SACtC,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAe,EAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACtD,IAAA,eAAM,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,SAAS,CAAC;YACvB,MAAM,EAAE,4BAA4B;YACpC,KAAK,EAAE,kBAAkB;YACzB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE;YACjD,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;SACxB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,6BAA6B;QAC7B,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAC/D,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC1C,qBAAqB;QACrB,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACvC,+BAA+B;QAC/B,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,2DAA2D;AAC3D,4EAA4E;AAC5E,8EAA8E;AAC9E,iBAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,0CAA0C,EAAE,GAAG,EAAE;IAChG,IAAA,mBAAU,EAAC,GAAG,EAAE;QACd,IAAA,gEAAgC,GAAE,CAAC;QACnC,IAAA,0CAAsB,EAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B;IAC1D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,2EAA2E;QAC3E,uEAAuE;QACvE,8EAA8E;QAC9E,2CAA2C;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAe,EAClC,8BAA8B,EAC9B;YACE,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,WAAW;SACvB,EACD,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;QACF,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAA,eAAM,EAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,IAAA,WAAE,EAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAe,EAClC,2BAA2B,EAC3B;YACE,MAAM,EAAE,UAAU;SACnB,EACD,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;QACF,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAA,eAAM,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC,CAAC,CAAC"}

package/dist/__tests__/plans-classifier-limits.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=plans-classifier-limits.test.d.ts.map

package/dist/__tests__/plans-classifier-limits.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plans-classifier-limits.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/plans-classifier-limits.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/plans-classifier-limits.test.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const plans_js_1 = require("../plans.js");
+(0, vitest_1.describe)('plans — classifier quota', () => {
+    (0, vitest_1.it)('free plan has 0 classifier calls per month', () => {
+        (0, vitest_1.expect)(plans_js_1.PLANS.free.classifierCallsPerMonth).toBe(0);
+        (0, vitest_1.expect)((0, plans_js_1.getPlanLimits)('free').classifierCallsPerMonth).toBe(0);
+    });
+    (0, vitest_1.it)('pro plan has 1000 classifier calls per month', () => {
+        (0, vitest_1.expect)(plans_js_1.PLANS.pro.classifierCallsPerMonth).toBe(1000);
+        (0, vitest_1.expect)((0, plans_js_1.getPlanLimits)('pro').classifierCallsPerMonth).toBe(1000);
+    });
+    (0, vitest_1.it)('team plan has 10000 classifier calls per month', () => {
+        (0, vitest_1.expect)(plans_js_1.PLANS.team.classifierCallsPerMonth).toBe(10000);
+        (0, vitest_1.expect)((0, plans_js_1.getPlanLimits)('team').classifierCallsPerMonth).toBe(10000);
+    });
+    (0, vitest_1.it)('getPlanLimits falls back to free quota for unknown plans', () => {
+        (0, vitest_1.expect)((0, plans_js_1.getPlanLimits)('mystery').classifierCallsPerMonth).toBe(0);
+    });
+});
+//# sourceMappingURL=plans-classifier-limits.test.js.map

package/dist/__tests__/plans-classifier-limits.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plans-classifier-limits.test.js","sourceRoot":"","sources":["../../src/__tests__/plans-classifier-limits.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,0CAAmD;AAEnD,IAAA,iBAAQ,EAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,IAAA,WAAE,EAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,IAAA,eAAM,EAAC,gBAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnD,IAAA,eAAM,EAAC,IAAA,wBAAa,EAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,IAAA,eAAM,EAAC,gBAAK,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,IAAA,wBAAa,EAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,IAAA,eAAM,EAAC,gBAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,IAAA,wBAAa,EAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,IAAA,eAAM,EAAC,IAAA,wBAAa,EAAC,SAAS,CAAC,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/policy-category-floor.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy-category-floor.test.d.ts.map

package/dist/__tests__/policy-category-floor.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-category-floor.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/policy-category-floor.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/policy-category-floor.test.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const policy_js_1 = require("../policy.js");
+const baseAction = (overrides = {}) => ({
+    action_type: 'read',
+    tool: 'unknown.tool',
+    payload: {},
+    ...overrides,
+});
+// The static category floor is the only anti-downgrade layer (the LLM
+// classifier and its upgrade-only llmFloor option were removed 2026-06-12).
+(0, vitest_1.describe)('evaluatePolicy - static category floor', () => {
+    (0, vitest_1.it)('keeps a known read-floor tool at read', () => {
+        const action = baseAction({ tool: 'mcp.list_tools' });
+        const result = (0, policy_js_1.evaluatePolicy)(action, policy_js_1.DEFAULT_POLICY_RULES);
+        (0, vitest_1.expect)(result.effective_action_type).toBe('read');
+    });
+    (0, vitest_1.it)('floors unrecognised tools to write (fail-closed)', () => {
+        const action = baseAction({ action_type: 'read', tool: 'unknown.tool' });
+        const result = (0, policy_js_1.evaluatePolicy)(action, policy_js_1.DEFAULT_POLICY_RULES);
+        (0, vitest_1.expect)(result.effective_action_type).toBe('write');
+        (0, vitest_1.expect)(result.decision).toBe('REQUIRE_APPROVAL');
+        (0, vitest_1.expect)(result.reason).toContain('category floored');
+    });
+    (0, vitest_1.it)('floors a declared read on a financial tool to financial', () => {
+        const action = baseAction({ action_type: 'read', tool: 'stripe.charge' });
+        const result = (0, policy_js_1.evaluatePolicy)(action, policy_js_1.DEFAULT_POLICY_RULES);
+        (0, vitest_1.expect)(result.effective_action_type).toBe('financial');
+        (0, vitest_1.expect)(result.decision).toBe('REQUIRE_APPROVAL');
+    });
+    (0, vitest_1.it)('never downgrades a declared admin action', () => {
+        const action = baseAction({ action_type: 'admin', tool: 'unknown.tool' });
+        const result = (0, policy_js_1.evaluatePolicy)(action, policy_js_1.DEFAULT_POLICY_RULES);
+        (0, vitest_1.expect)(result.effective_action_type).toBe('admin');
+        (0, vitest_1.expect)(result.decision).toBe('BLOCK');
+    });
+    (0, vitest_1.it)('skipCategoryFloor bypasses the floor (owner opt-in escape hatch)', () => {
+        const action = baseAction({ action_type: 'read', tool: 'stripe.charge' });
+        const result = (0, policy_js_1.evaluatePolicy)(action, policy_js_1.DEFAULT_POLICY_RULES, {
+            skipCategoryFloor: true,
+        });
+        (0, vitest_1.expect)(result.effective_action_type).toBe('read');
+    });
+});
+//# sourceMappingURL=policy-category-floor.test.js.map

package/dist/__tests__/policy-category-floor.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-category-floor.test.js","sourceRoot":"","sources":["../../src/__tests__/policy-category-floor.test.ts"],"names":[],"mappings":";;AAAA,mCAA8C;AAC9C,4CAAoE;AAGpE,MAAM,UAAU,GAAG,CAAC,YAAyC,EAAE,EAAsB,EAAE,CAAC,CAAC;IACvF,WAAW,EAAE,MAAM;IACnB,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,EAAE;IACX,GAAG,SAAS;CACb,CAAC,CAAC;AAEH,sEAAsE;AACtE,4EAA4E;AAC5E,IAAA,iBAAQ,EAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,IAAA,WAAE,EAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,IAAA,0BAAc,EAAC,MAAM,EAAE,gCAAoB,CAAC,CAAC;QAC5D,IAAA,eAAM,EAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,IAAA,0BAAc,EAAC,MAAM,EAAE,gCAAoB,CAAC,CAAC;QAC5D,IAAA,eAAM,EAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAA,0BAAc,EAAC,MAAM,EAAE,gCAAoB,CAAC,CAAC;QAC5D,IAAA,eAAM,EAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvD,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAA,0BAAc,EAAC,MAAM,EAAE,gCAAoB,CAAC,CAAC;QAC5D,IAAA,eAAM,EAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAA,0BAAc,EAAC,MAAM,EAAE,gCAAoB,EAAE;YAC1D,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;QACH,IAAA,eAAM,EAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/policy-claude-bash.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy-claude-bash.test.d.ts.map

package/dist/__tests__/policy-claude-bash.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-claude-bash.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/policy-claude-bash.test.ts"],"names":[],"mappings":""}