attenu-guard 0.1.0

package/dist/cjs/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/evidence.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;AAmGH,0CAwBC;AAGD,8BAkBC;AAsBD,oCAwCC;AAuED,0CAwCC;AAoBD,0BAkCC;AA4BD,oCA8EC;AAGD,kCAEC;AAheD,iDAOwB;AACxB,6CAAyC;AAEzC,yCAAoH;AACpH,iDAA2C;AAI3C;;;;;;;;GAQG;AACU,QAAA,aAAa,GAAwB,IAAI,GAAG,CAAC;IACxD,GAAG;IACH,KAAK;IACL,IAAI;IACJ,OAAO;IACP,WAAW;IACX,MAAM;IACN,UAAU;IACV,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS;IACT,QAAQ;IACR,SAAS;IACT,WAAW;IACX,WAAW;IACX,SAAS;IACT,QAAQ;IACR,SAAS;IACT,SAAS;IACT,MAAM;IACN,aAAa;CACd,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AALD,8CAKC;AAuBD,SAAS,UAAU,CAAC,CAAoB;IACtC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IAClF,MAAM,CAAC,GAAG,MAAM,CAAC,IAAA,sBAAO,EAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzF,OAAO,gBAAgB,CAAC,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,SAAgB,eAAe,CAC7B,OAA+B,EAC/B,gBAA0C;IAE1C,MAAM,KAAK,GAAG,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7G,MAAM,UAAU,GAAyB,EAAE,CAAC;IAC5C,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACvB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,qBAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1B,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,IAAA,sBAAO,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAA0B,CAAC;YAC1D,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClB,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,IAAA,sBAAO,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;oBAClF,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;AACrD,CAAC;AAED,gFAAgF;AAChF,SAAgB,SAAS,CACvB,OAA+B,EAC/B,MAAc,EACd,KAAsB,CAAC;IAEvB,IAAI,GAAW,CAAC;IAChB,IAAI,IAAY,CAAC;IACjB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,GAAG,CAAC,CAAC,CAAC;QACT,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAA,sBAAO,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACpC,GAAG,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/D,IAAI,GAAG,IAAI,CAAC,MAAM,CAAW,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,yBAAc,EAAE,QAAQ,EAAE,IAAA,oBAAS,EAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAChF,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAA,6BAAc,EAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACtG,CAAC;AAWD;;;;;;;;;;GAUG;AACH,SAAgB,YAAY,CAC1B,QAA2C,EAC3C,MAAc,EACd,UAAyB,EAAE;IAE3B,MAAM,MAAM,GAAG,QAAQ,YAAY,mBAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC1E,MAAM,OAAO,GAAkB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7D,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,MAAM,IAAI,CAAC;gBAAE,CAAC,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAU,CAAC;QAC9D,CAAC;QACD,oEAAoE;QACpE,IAAI,IAAI,GAAG,kBAAO,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,CAAC,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;YACtB,MAAM,OAAO,GAAgB,EAAE,CAAC;YAChC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,KAAK,MAAM;oBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACzE,CAAC,CAAC,MAAM,CAAC,GAAG,IAAA,oBAAS,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACrC,IAAI,GAAG,CAAC,CAAC,MAAM,CAAW,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,iBAAiB,CACzB,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,2CAA2C;YACpE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAChD,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,CAAC,QAAQ,GAAG,mBAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,MAA+B,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7F,OAAO;QACL,CAAC,EAAE,yBAAc;QACjB,QAAQ,EAAE,IAAA,oBAAS,EAAC,OAAO,CAAC;QAC5B,OAAO;QACP,MAAM;QACN,SAAS,EAAE,MAAM;QACjB,IAAI,EAAE,yEAAyE;KAChF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,MAAM,CAAC,KAAwB;IACtC,MAAM,KAAK,GAAG,IAAA,sBAAO,EAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5C,CAAC;AAQD;;;GAGG;AACH,SAAS,eAAe,CAAC,OAA+B;IACtD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,IAAA,sBAAO,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAA,sBAAO,EAAC,CAAC,CAAC,MAAM,CAAC,CAAW,CAAC;QAC1C,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,2BAA4B,GAAa,CAAC,OAAO,GAAG,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,IAAI,EAAG,IAAA,sBAAO,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAmB,IAAI,IAAI,CAAC,CAAC;YAClE,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,wBAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,yBAA0B,GAAa,CAAC,OAAO,GAAG,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACpC,CAAC;AAoBD;;;;GAIG;AACH,SAAgB,eAAe,CAAC,MAAuB;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IACrC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,IAAI,GAA8B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,IAAA,sBAAO,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,IAAA,sBAAO,EAAC,CAAC,CAAC,MAAM,CAAC,CAAW,CAAC;QACvC,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,CAAC,CAAC,GAAG;gBACR,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACzB,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBACvB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAC3B,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gCAAiB,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC7D,MAAM,EAAE,CAAC;gBACT,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,KAAK;gBACf,sBAAsB,EAAE,EAAE;aAC3B,CAAC;QACJ,CAAC;aAAM,IAAI,EAAE,KAAK,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM,IAAI,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,EAAE,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM,IAAI,CAAC,CAAC;YACrB,uDAAuD;YACvD,MAAM,CAAC,GAAG,CAAC,IAAA,sBAAO,EAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,IAAA,sBAAO,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,UAAU,CAAW,CAAC;YACtF,IAAI,CAAC,CAAC,CAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACrF,CAAC;aAAM,IAAI,EAAE,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,GAAG,IAAI,CAAC;QAC3B,CAAC;aAAM,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,IAAK,IAAA,sBAAO,EAAC,CAAC,CAAC,SAAS,CAAC,CAAqB,IAAI,EAAE,EAAE,CAAC;gBACjE,IAAI,IAAI,CAAC,CAAC,CAAC;oBAAE,IAAI,CAAC,CAAC,CAAE,CAAC,OAAO,GAAG,IAAI,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAwC,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;QAChC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACnE,CAAC;AAcD;;;;;GAKG;AACH,SAAgB,OAAO,CAAC,MAAuB;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgB,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,IAAA,sBAAO,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/B,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,IAAA,sBAAO,EAAC,CAAC,CAAC,MAAM,CAAC,CAAW,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,IAAA,sBAAO,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM;YAAE,SAAS;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACpG,MAAM,GAAG,GAAG,IAAA,sBAAO,EAAC,CAAC,CAAC,KAAK,CAAC,CAAW,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;gBACZ,IAAI;gBACJ,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,IAAc,CAAC,IAAI,IAAI;gBAC1C,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;gBACvB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACzB,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;gBACrC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAC3B,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,GAAG;gBACd,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;YACpB,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;AAC7E,CAAC;AAkBD;;;;;;;;;GASG;AACH,SAAgB,YAAY,CAAC,MAAuB,EAAE,SAAwB,IAAI;IAChF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAA0B,CAAC;IAC9D,MAAM,MAAM,GAAiB;QAC3B,SAAS,EAAE,KAAK;QAChB,YAAY,EAAE,KAAK;QACnB,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,aAAa;KACtB,CAAC;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,6EAA6E;IAC7E,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,mBAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO;QAAE,QAAQ,CAAC,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,mBAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACxE,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjD,IAAI,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,SAAS,GAAG,OAAO,IAAI,QAAQ,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC;IAC7B,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACnE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;IAExB,8CAA8C;IAC9C,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjD,IAAI,GAAG,KAAK,CAAC;YACb,QAAQ,CAAC,IAAI,CACX,iBAAiB,IAAI,iBAAiB,GAAG,iBAAiB;gBACxD,IAAI,KAAK,CAAC,IAAI,CAAC,gCAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,CAAC,YAAY,GAAG,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;IAEjD,oFAAoF;IACpF,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,IAAA,sBAAO,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,OAAO;YAAE,SAAS;QAC9C,OAAO,IAAI,CAAC,CAAC;QACb,MAAM,IAAI,GAAG,IAAA,sBAAO,EAAC,CAAC,CAAC,MAAM,CAAC,CAAW,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAA,sBAAO,EAAC,CAAC,CAAC,OAAO,CAAC,CAAW,CAAC;QAC5C,MAAM,GAAG,GAAI,IAAA,sBAAO,EAAC,CAAC,CAAC,SAAS,CAAC,CAAoB,IAAI,EAAE,CAAC;QAC5D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,SAAS,GAAG,KAAK,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YACnC,SAAS,GAAG,KAAK,CAAC;YAClB,QAAQ,CAAC,IAAI,CACX,0BAA0B,KAAK,QAAQ,IAAI,yBAAyB;gBAClE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gCAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,CAAC,WAAW,GAAG,SAAS,CAAC;IAE/B,MAAM,EAAE,GACN,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;IACzF,OAAO;QACL,EAAE;QACF,MAAM;QACN,QAAQ;QACR,KAAK,EAAE,IAAI,CAAC,IAAI;QAChB,eAAe,EAAE,OAAO;QACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAgB,WAAW,CAAC,IAAY;IACtC,OAAO,IAAA,wBAAS,EAAC,IAAI,CAAsB,CAAC;AAC9C,CAAC"}

package/dist/cjs/guard.d.ts

@@ -0,0 +1,186 @@
+/**
+ * Guard — the runtime object a developer actually holds.
+ *
+ *   `Guard.issue(...)`  a fresh root Guard, starting a new delegation chain.
+ *   `delegate(...)`     a child Guard whose authority is the attenuated meet of
+ *                       this guard's authority and what was requested. It never
+ *                       widens — there is no method that can. Throws
+ *                       `AuthorityError` on a STRUCTURAL failure (revoked or
+ *                       expired parent, integrity failure, depth/fanout).
+ *   `check(...)`        authorize an action. Returns a `Decision`; it never
+ *                       throws on a policy denial, because a denial is a normal
+ *                       outcome to reason about, not a bug. Every allow and
+ *                       deny is appended to the audit log.
+ *   `enforce(...)`      `check` and throw `AuthorityDenied` if not allowed —
+ *                       the hard-stop gate for callers that want to fail fast.
+ *   `wouldAllow(...)`   the same policy evaluation as `check`, as a pure
+ *                       dry-run: it writes NOTHING to the audit log, so a
+ *                       planner can ask "could I do this?" without leaving a
+ *                       record as though the action had been attempted.
+ *   `revoke(...)`       cascade-revoke a node (by default this one) and its
+ *                       whole subtree.
+ *
+ * `AuthorityError` and `AuthorityDenied` are deliberately distinct: a policy
+ * denial is not an error.
+ *
+ * The audit log's `event` strings keep the original vocabulary
+ * (`spawn`/`spawn_denied`/`kill`) even though the API reads
+ * issue/delegate/revoke. That field is a separately-versioned published wire
+ * contract that verifiers depend on.
+ */
+import type { Json } from "./canonical.js";
+import { Authority } from "./authority.js";
+import { AuditLog, type Sink } from "./audit.js";
+import { type Clock } from "./chain.js";
+import { type Context } from "./ceilings.js";
+import { Decision, Reason } from "./reasons.js";
+import type { StrikePolicy } from "./strikes.js";
+/**
+ * Thrown only by `enforce`. Carries the full `Decision`, so a caller can branch
+ * on `err.decision.reasons[0].code` instead of parsing a message string.
+ */
+export declare class AuthorityDenied extends Error {
+    readonly decision: Decision;
+    constructor(decision: Decision);
+}
+export interface IssueOptions {
+    task?: string;
+    chainId?: string;
+    maxDepth?: number;
+    maxFanout?: number;
+    /** Where to write the `.jsonl` ledger. Omit for an in-memory log. */
+    auditPath?: string | null;
+    clock?: Clock;
+    /** Refuse a metered call that omits a held metered ceiling's context field. */
+    strictMetering?: boolean;
+    strikes?: StrikePolicy | null;
+    auditSinks?: readonly Sink[];
+}
+export interface CheckOptions {
+    context?: Context | null;
+    /** Marks the call as consuming a metered resource; see `strictMetering`. */
+    metered?: boolean;
+    /** The tool label recorded on the ledger entry. */
+    tool?: string | null;
+    /** What the caller knows about WHY this scope would be absent. */
+    disposition?: string | null;
+}
+export interface RecordDenialOptions {
+    scope?: string | null;
+    tool?: string | null;
+    context?: Context | null;
+    disposition?: string | null;
+}
+export declare class Guard {
+    private readonly node;
+    private readonly chain;
+    private readonly audit;
+    private readonly seq;
+    private readonly strict;
+    private readonly strikes;
+    private constructor();
+    /** A fresh root Guard, starting a new delegation chain. */
+    static issue(agentId: string, authority: Authority, options?: IssueOptions): Guard;
+    get nodeId(): string;
+    get chainId(): string;
+    get authority(): Authority;
+    /** The `agentId` this Guard was issued or delegated to. */
+    get agentId(): string;
+    /** Has this node — or an ancestor — been revoked? */
+    get isRevoked(): boolean;
+    /** Has this node's TTL elapsed? */
+    get isExpired(): boolean;
+    /** Did the holder mark this node's work finished? */
+    get isComplete(): boolean;
+    /** Is `other` an ancestor of this guard in the same chain? */
+    isDescendantOf(other: Guard): boolean;
+    /**
+     * Mark this node's work FINISHED — one `done` event, idempotent. Purely a
+     * lifecycle marker for the ledger and downstream analytics (a delegation that
+     * never reached `done` was cut short); it does NOT change authority.
+     * Revocation is the hard stop.
+     */
+    complete(): boolean;
+    /**
+     * Create a child Guard. The child's authority is `this.authority.meet(request)`
+     * — provably narrower than this guard's by construction. A request wider than
+     * what this guard holds comes back narrowed, not refused.
+     *
+     * Throws `AuthorityError` for structural failures (revoked or expired parent,
+     * integrity failure, depth/fanout overflow). Those are invalid calls, not
+     * policy outcomes, so they are not expressed as a Decision.
+     */
+    delegate(agentId: string, request: Authority, task: string): Guard;
+    /**
+     * A pure dry-run of `delegate`'s structural preconditions (revoked or expired
+     * parent, banned agent, depth/fanout ceilings): creates no node, consumes no
+     * fanout, writes nothing. The granted authority would be
+     * `this.authority.meet(request)`.
+     */
+    wouldDelegate(agentId: string, _request?: Authority): Decision;
+    private append;
+    /**
+     * The actual policy evaluation, shared verbatim by `check` and `wouldAllow`.
+     * Node state (integrity, revocation, TTL) is checked before scope and
+     * ceilings, because a compromised or revoked node's scope grants are moot.
+     */
+    private evaluate;
+    private static checkDisposition;
+    private logDecision;
+    private callLimits;
+    /**
+     * Fill in `calls` / `calls[<pattern>]` for every held call ceiling the caller
+     * left undeclared, reading the per-(node, pattern) meter. Returns the limits
+     * that were auto-filled AND apply to this scope, to be counted on allow.
+     */
+    private autoMeter;
+    /**
+     * Authorize an action. Returns a `Decision`; it does not throw on a denial.
+     * Every call — allow or deny — is appended to the audit log.
+     *
+     * Auto-metering: when this node holds a `CallLimit` and the caller did not
+     * supply `calls`, the guard supplies the running count for (node, pattern)
+     * itself, including this call, and increments it on allow. An explicit
+     * `calls` in the context always wins.
+     */
+    check(scope: string, options?: CheckOptions): Decision;
+    /**
+     * `check`, and throw `AuthorityDenied` if not allowed. The hard-stop gate:
+     * use this where a denial should abort the caller rather than be branched on.
+     */
+    enforce(scope: string, options?: CheckOptions): void;
+    /**
+     * A pure dry-run: identical policy evaluation to `check`, but it never throws
+     * and — critically — writes NOTHING to the audit log.
+     */
+    wouldAllow(scope: string, options?: CheckOptions): Decision;
+    /**
+     * Put an ADAPTER-LEVEL refusal on the audit trail as a `deny` event and
+     * return it as a Decision — for denials that happen UPSTREAM of policy
+     * evaluation: an agent the chain never delegated to, a tool with no declared
+     * permissions, unparseable tool arguments. Nothing is evaluated; the caller
+     * has already decided, and this records it in the same tamper-evident log.
+     *
+     * `scope` defaults to `tool` (or "-"), because the published schema requires
+     * a string scope on allow and deny events.
+     */
+    recordDenial(reason: Reason | string, message?: string, options?: RecordDenialOptions): Decision;
+    /** Cascade-revoke a node — by default this one — and its whole subtree. */
+    revoke(nodeId?: string | null): string[];
+    /**
+     * Revoke an agent BY NAME, chain-wide: every node it holds is cascade-revoked
+     * and no node may `delegate` to it again. Use this — not `revoke(nodeId)` —
+     * when the intent is "this principal is done", because frameworks hand off to
+     * the same agent freely and a fresh `delegate` would otherwise mint it clean
+     * authority.
+     */
+    revokeAgent(agentId: string): string[];
+    /**
+     * Is this guard's authority provably narrower than `parent`'s? Exactly the
+     * relation an offline verifier applies to two wire tokens.
+     */
+    isNarrowerThan(parent: Guard): boolean;
+    auditLog(): AuditLog;
+    graph(): Record<string, Json>;
+}
+//# sourceMappingURL=guard.d.ts.map

package/dist/cjs/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAoB,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAyB,KAAK,KAAK,EAAa,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAuC,KAAK,OAAO,EAAE,MAAM,eAAe,CAAC;AAClF,OAAO,EAAgB,QAAQ,EAAe,MAAM,EAAc,MAAM,cAAc,CAAC;AACvF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ;gBAAlB,QAAQ,EAAE,QAAQ;CAIxC;AAeD,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,+EAA+E;IAC/E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,OAAO,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC9B,UAAU,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,qBAAa,KAAK;IAEd,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAN1B,OAAO;IAWP,2DAA2D;IAC3D,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,GAAE,YAAiB,GAAG,KAAK;IAwBtF,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,IAAI,SAAS,IAAI,SAAS,CAEzB;IAED,2DAA2D;IAC3D,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,qDAAqD;IACrD,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,mCAAmC;IACnC,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,qDAAqD;IACrD,IAAI,UAAU,IAAI,OAAO,CAExB;IAED,8DAA8D;IAC9D,cAAc,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO;IAUrC;;;;;OAKG;IACH,QAAQ,IAAI,OAAO;IAanB;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK;IA6BlE;;;;;OAKG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,SAAS,GAAG,QAAQ;IAM9D,OAAO,CAAC,MAAM;IAMd;;;;OAIG;IACH,OAAO,CAAC,QAAQ;IA4DhB,OAAO,CAAC,MAAM,CAAC,gBAAgB;IAS/B,OAAO,CAAC,WAAW;IAmCnB,OAAO,CAAC,UAAU;IAIlB;;;;OAIG;IACH,OAAO,CAAC,SAAS;IAYjB;;;;;;;;OAQG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,QAAQ;IAiC1D;;;OAGG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,IAAI;IAKxD;;;OAGG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,QAAQ;IAM/D;;;;;;;;;OASG;IACH,YAAY,CACV,MAAM,EAAE,MAAM,GAAG,MAAM,EACvB,OAAO,SAAK,EACZ,OAAO,GAAE,mBAAwB,GAChC,QAAQ;IAiBX,2EAA2E;IAC3E,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,EAAE;IAOxC;;;;;;OAMG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE;IAatC;;;OAGG;IACH,cAAc,CAAC,MAAM,EAAE,KAAK,GAAG,OAAO;IAMtC,QAAQ,IAAI,QAAQ;IAIpB,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;CAG9B"}

package/dist/cjs/guard.js

@@ -0,0 +1,432 @@
+"use strict";
+/**
+ * Guard — the runtime object a developer actually holds.
+ *
+ *   `Guard.issue(...)`  a fresh root Guard, starting a new delegation chain.
+ *   `delegate(...)`     a child Guard whose authority is the attenuated meet of
+ *                       this guard's authority and what was requested. It never
+ *                       widens — there is no method that can. Throws
+ *                       `AuthorityError` on a STRUCTURAL failure (revoked or
+ *                       expired parent, integrity failure, depth/fanout).
+ *   `check(...)`        authorize an action. Returns a `Decision`; it never
+ *                       throws on a policy denial, because a denial is a normal
+ *                       outcome to reason about, not a bug. Every allow and
+ *                       deny is appended to the audit log.
+ *   `enforce(...)`      `check` and throw `AuthorityDenied` if not allowed —
+ *                       the hard-stop gate for callers that want to fail fast.
+ *   `wouldAllow(...)`   the same policy evaluation as `check`, as a pure
+ *                       dry-run: it writes NOTHING to the audit log, so a
+ *                       planner can ask "could I do this?" without leaving a
+ *                       record as though the action had been attempted.
+ *   `revoke(...)`       cascade-revoke a node (by default this one) and its
+ *                       whole subtree.
+ *
+ * `AuthorityError` and `AuthorityDenied` are deliberately distinct: a policy
+ * denial is not an error.
+ *
+ * The audit log's `event` strings keep the original vocabulary
+ * (`spawn`/`spawn_denied`/`kill`) even though the API reads
+ * issue/delegate/revoke. That field is a separately-versioned published wire
+ * contract that verifiers depend on.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Guard = exports.AuthorityDenied = void 0;
+const authority_js_1 = require("./authority.js");
+const audit_js_1 = require("./audit.js");
+const chain_js_1 = require("./chain.js");
+const ceilings_js_1 = require("./ceilings.js");
+const reasons_js_1 = require("./reasons.js");
+/**
+ * Thrown only by `enforce`. Carries the full `Decision`, so a caller can branch
+ * on `err.decision.reasons[0].code` instead of parsing a message string.
+ */
+class AuthorityDenied extends Error {
+    decision;
+    constructor(decision) {
+        super(decision.explain());
+        this.decision = decision;
+        this.name = "AuthorityDenied";
+    }
+}
+exports.AuthorityDenied = AuthorityDenied;
+/**
+ * A monotonic integer for audit sequencing, distinct from the wall clock used
+ * for TTL expiry — it keeps the log's ordering deterministic regardless of
+ * clock resolution.
+ */
+class SeqClock {
+    t = 0;
+    now() {
+        this.t += 1;
+        return this.t;
+    }
+}
+class Guard {
+    node;
+    chain;
+    audit;
+    seq;
+    strict;
+    strikes;
+    constructor(node, chain, audit, seq, strict, strikes) {
+        this.node = node;
+        this.chain = chain;
+        this.audit = audit;
+        this.seq = seq;
+        this.strict = strict;
+        this.strikes = strikes;
+    }
+    // ---- factory ----------------------------------------------------------
+    /** A fresh root Guard, starting a new delegation chain. */
+    static issue(agentId, authority, options = {}) {
+        const chainId = options.chainId ?? "chain";
+        const chain = new chain_js_1.Chain(chainId, {
+            maxDepth: options.maxDepth ?? 6,
+            maxFanout: options.maxFanout ?? 16,
+            clock: options.clock ?? new chain_js_1.MonotonicClock(),
+        });
+        const audit = new audit_js_1.AuditLog({
+            path: options.auditPath ?? null,
+            sinks: options.auditSinks ?? [],
+        });
+        const seq = new SeqClock();
+        const node = chain.addRoot(agentId, authority, options.task ?? "root");
+        audit.append("root", seq.now(), {
+            chain_id: chainId,
+            node: node.nodeId,
+            agent: agentId,
+            authority: authority.toWire(),
+        });
+        return new Guard(node, chain, audit, seq, options.strictMetering ?? false, options.strikes ?? null);
+    }
+    // ---- identity ---------------------------------------------------------
+    get nodeId() {
+        return this.node.nodeId;
+    }
+    get chainId() {
+        return this.chain.chainId;
+    }
+    get authority() {
+        return this.node.authority;
+    }
+    /** The `agentId` this Guard was issued or delegated to. */
+    get agentId() {
+        return this.node.agentId;
+    }
+    /** Has this node — or an ancestor — been revoked? */
+    get isRevoked() {
+        return this.chain.isRevoked(this.node.nodeId);
+    }
+    /** Has this node's TTL elapsed? */
+    get isExpired() {
+        return this.chain.isExpired(this.node);
+    }
+    /** Did the holder mark this node's work finished? */
+    get isComplete() {
+        return this.node.complete;
+    }
+    /** Is `other` an ancestor of this guard in the same chain? */
+    isDescendantOf(other) {
+        if (other.chain !== this.chain)
+            return false;
+        let node = this.node;
+        while (node !== undefined && node.parentId !== null) {
+            if (node.parentId === other.node.nodeId)
+                return true;
+            node = this.chain.nodes.get(node.parentId);
+        }
+        return false;
+    }
+    /**
+     * Mark this node's work FINISHED — one `done` event, idempotent. Purely a
+     * lifecycle marker for the ledger and downstream analytics (a delegation that
+     * never reached `done` was cut short); it does NOT change authority.
+     * Revocation is the hard stop.
+     */
+    complete() {
+        if (this.node.complete)
+            return false;
+        this.node.complete = true;
+        this.append("done", {
+            chain_id: this.chainId,
+            node: this.node.nodeId,
+            agent: this.node.agentId,
+        });
+        return true;
+    }
+    // ---- delegation -------------------------------------------------------
+    /**
+     * Create a child Guard. The child's authority is `this.authority.meet(request)`
+     * — provably narrower than this guard's by construction. A request wider than
+     * what this guard holds comes back narrowed, not refused.
+     *
+     * Throws `AuthorityError` for structural failures (revoked or expired parent,
+     * integrity failure, depth/fanout overflow). Those are invalid calls, not
+     * policy outcomes, so they are not expressed as a Decision.
+     */
+    delegate(agentId, request, task) {
+        let child;
+        try {
+            child = this.chain.addChild(this.node.nodeId, agentId, request, task);
+        }
+        catch (e) {
+            if (e instanceof authority_js_1.AuthorityError) {
+                this.append("spawn_denied", {
+                    chain_id: this.chainId,
+                    parent: this.node.nodeId,
+                    agent: agentId,
+                    task,
+                    reason: e.reason,
+                    detail: e.detail,
+                });
+            }
+            throw e;
+        }
+        this.append("spawn", {
+            chain_id: this.chainId,
+            parent: this.node.nodeId,
+            node: child.nodeId,
+            agent: agentId,
+            task,
+            requested: request.toWire(),
+            granted: child.authority.toWire(),
+        });
+        return new Guard(child, this.chain, this.audit, this.seq, this.strict, this.strikes);
+    }
+    /**
+     * A pure dry-run of `delegate`'s structural preconditions (revoked or expired
+     * parent, banned agent, depth/fanout ceilings): creates no node, consumes no
+     * fanout, writes nothing. The granted authority would be
+     * `this.authority.meet(request)`.
+     */
+    wouldDelegate(agentId, _request) {
+        const err = this.chain.delegationError(this.node.nodeId, agentId);
+        if (err === null)
+            return reasons_js_1.Decision.allow(this.node.nodeId);
+        return reasons_js_1.Decision.deny(new reasons_js_1.Reason(err.reason, { message: err.message }), this.node.nodeId);
+    }
+    append(event, fields) {
+        return this.audit.append(event, this.seq.now(), fields);
+    }
+    // ---- policy evaluation ------------------------------------------------
+    /**
+     * The actual policy evaluation, shared verbatim by `check` and `wouldAllow`.
+     * Node state (integrity, revocation, TTL) is checked before scope and
+     * ceilings, because a compromised or revoked node's scope grants are moot.
+     */
+    evaluate(scope, context, metered) {
+        const { node, chain } = this;
+        const auth = node.authority;
+        const nid = node.nodeId;
+        if (!chain.verifyIntegrity(node)) {
+            return reasons_js_1.Decision.deny(new reasons_js_1.Reason(reasons_js_1.ReasonCode.INTEGRITY, { message: "authority state failed its integrity seal" }), nid);
+        }
+        if (chain.isRevoked(nid)) {
+            return reasons_js_1.Decision.deny(new reasons_js_1.Reason(reasons_js_1.ReasonCode.REVOKED, { message: "node has been revoked" }), nid);
+        }
+        if (chain.isExpired(node)) {
+            const age = chain.clock.now() - node.issuedAt;
+            return reasons_js_1.Decision.deny(new reasons_js_1.Reason(reasons_js_1.ReasonCode.EXPIRED, {
+                limit: auth.ttl,
+                requested: age,
+                message: "authority ttl has elapsed",
+            }), nid);
+        }
+        // Strict metering: a call flagged as consuming a metered resource must
+        // DECLARE every metered dimension this node holds a ceiling on; any it
+        // omits is refused rather than silently treated as free. Checked PER
+        // CEILING, not "is the context empty?" — a partial context that mentions
+        // egress but forgets rows would otherwise let the row ceiling go
+        // unevaluated, which is the exact slip a per-tool context function makes.
+        if (this.strict && metered) {
+            const missing = auth.ceilings
+                .filter((c) => (0, ceilings_js_1.isMetered)(c) && !((0, ceilings_js_1.ctxFieldOf)(c) in context))
+                .map((c) => c.key);
+            if (missing.length > 0) {
+                const held = auth.ceilings.filter(ceilings_js_1.isMetered).map((c) => c.key);
+                return reasons_js_1.Decision.deny(new reasons_js_1.Reason(reasons_js_1.ReasonCode.UNMETERED, {
+                    constraint: missing.join(","),
+                    message: `metered=True but context omits [${missing.map((m) => `'${m}'`).join(", ")}]; ` +
+                        `metered ceilings held: [${held.map((m) => `'${m}'`).join(", ")}]`,
+                }), nid);
+            }
+        }
+        const decision = auth.permits(scope, context);
+        if (decision.determiningNode === null) {
+            return new reasons_js_1.Decision(decision.allowed, decision.reasons, nid);
+        }
+        return decision;
+    }
+    static checkDisposition(disposition) {
+        if (disposition !== null && disposition !== undefined && !reasons_js_1.DISPOSITIONS.has(disposition)) {
+            throw new Error(`unknown disposition ${JSON.stringify(disposition)}; expected one of ` +
+                `${Array.from(reasons_js_1.DISPOSITIONS).sort().join(", ")}`);
+        }
+    }
+    logDecision(decision, scope, tool, context, disposition) {
+        const event = decision.allowed ? "allow" : "deny";
+        const fields = {
+            chain_id: this.chainId,
+            node: this.node.nodeId,
+            scope,
+            tool,
+            context: { ...context },
+        };
+        if (!decision.allowed) {
+            // "reason" is a single code string, the shape the published schema
+            // documents and every existing consumer reads. "reasons" is the full
+            // structured list for anyone who wants every violated Reason.
+            const reason = decision.reasons.length > 0 ? decision.reasons[0].code : null;
+            fields["reason"] = reason;
+            fields["reasons"] = decision.reasons.map((r) => r.toDict());
+            // "disposition": WHY the scope was absent — the caller's statement, or,
+            // for a plain scope_not_granted the caller did not explain, the library's
+            // own truth: out_of_authority. Allow entries never carry it.
+            const d = disposition ??
+                (reason === reasons_js_1.ReasonCode.SCOPE_NOT_GRANTED ? reasons_js_1.Disposition.OUT_OF_AUTHORITY : null);
+            if (d !== null)
+                fields["disposition"] = d;
+        }
+        this.append(event, fields);
+    }
+    // ---- enforcement ------------------------------------------------------
+    callLimits() {
+        return this.node.authority.ceilings.filter((c) => String(c.key).startsWith("max_calls"));
+    }
+    /**
+     * Fill in `calls` / `calls[<pattern>]` for every held call ceiling the caller
+     * left undeclared, reading the per-(node, pattern) meter. Returns the limits
+     * that were auto-filled AND apply to this scope, to be counted on allow.
+     */
+    autoMeter(scope, ctx) {
+        const filled = [];
+        for (const c of this.callLimits()) {
+            const field = c.ctxField ?? "calls";
+            if (field in ctx)
+                continue; // an explicit count wins
+            const applies = c.appliesToScope ? c.appliesToScope(scope) : true;
+            ctx[field] = this.chain.callsSoFar(this.node.nodeId, c.meterKey ?? "*") + (applies ? 1 : 0);
+            if (applies)
+                filled.push(c);
+        }
+        return filled;
+    }
+    /**
+     * Authorize an action. Returns a `Decision`; it does not throw on a denial.
+     * Every call — allow or deny — is appended to the audit log.
+     *
+     * Auto-metering: when this node holds a `CallLimit` and the caller did not
+     * supply `calls`, the guard supplies the running count for (node, pattern)
+     * itself, including this call, and increments it on allow. An explicit
+     * `calls` in the context always wins.
+     */
+    check(scope, options = {}) {
+        const disposition = options.disposition ?? null;
+        Guard.checkDisposition(disposition); // refuse before anything reaches the ledger
+        const ctx = { ...(options.context ?? {}) };
+        const filled = this.autoMeter(scope, ctx);
+        const decision = this.evaluate(scope, ctx, options.metered ?? false);
+        if (decision.allowed) {
+            for (const c of filled)
+                this.chain.countCall(this.node.nodeId, c.meterKey ?? "*");
+        }
+        this.logDecision(decision, scope, options.tool ?? null, ctx, disposition);
+        if (!decision.allowed &&
+            this.strikes !== null &&
+            this.strikes.enabled &&
+            !this.chain.isRevoked(this.node.nodeId)) {
+            const count = this.chain.recordStrike(this.strikes.key(this.node.nodeId, scope));
+            if (count >= this.strikes.n) {
+                const revoked = this.chain.revoke(this.node.nodeId);
+                this.append("kill", {
+                    chain_id: this.chainId,
+                    target: this.node.nodeId,
+                    reason: "strike_policy",
+                    scope,
+                    strikes: count,
+                    mode: this.strikes.mode,
+                    revoked,
+                });
+            }
+        }
+        return decision;
+    }
+    /**
+     * `check`, and throw `AuthorityDenied` if not allowed. The hard-stop gate:
+     * use this where a denial should abort the caller rather than be branched on.
+     */
+    enforce(scope, options = {}) {
+        const decision = this.check(scope, options);
+        if (!decision.allowed)
+            throw new AuthorityDenied(decision);
+    }
+    /**
+     * A pure dry-run: identical policy evaluation to `check`, but it never throws
+     * and — critically — writes NOTHING to the audit log.
+     */
+    wouldAllow(scope, options = {}) {
+        const ctx = { ...(options.context ?? {}) };
+        this.autoMeter(scope, ctx); // read the meters, never consume them
+        return this.evaluate(scope, ctx, options.metered ?? false);
+    }
+    /**
+     * Put an ADAPTER-LEVEL refusal on the audit trail as a `deny` event and
+     * return it as a Decision — for denials that happen UPSTREAM of policy
+     * evaluation: an agent the chain never delegated to, a tool with no declared
+     * permissions, unparseable tool arguments. Nothing is evaluated; the caller
+     * has already decided, and this records it in the same tamper-evident log.
+     *
+     * `scope` defaults to `tool` (or "-"), because the published schema requires
+     * a string scope on allow and deny events.
+     */
+    recordDenial(reason, message = "", options = {}) {
+        Guard.checkDisposition(options.disposition ?? null);
+        const r = reason instanceof reasons_js_1.Reason ? reason : new reasons_js_1.Reason(String(reason), { message });
+        const decision = reasons_js_1.Decision.deny(r, this.node.nodeId);
+        const tool = options.tool ?? null;
+        this.logDecision(decision, options.scope ?? tool ?? "-", tool, { ...(options.context ?? {}) }, options.disposition ?? null);
+        return decision;
+    }
+    // ---- chain controls ---------------------------------------------------
+    /** Cascade-revoke a node — by default this one — and its whole subtree. */
+    revoke(nodeId) {
+        const target = nodeId ?? this.node.nodeId;
+        const revoked = this.chain.revoke(target);
+        this.append("kill", { chain_id: this.chainId, target, revoked });
+        return revoked;
+    }
+    /**
+     * Revoke an agent BY NAME, chain-wide: every node it holds is cascade-revoked
+     * and no node may `delegate` to it again. Use this — not `revoke(nodeId)` —
+     * when the intent is "this principal is done", because frameworks hand off to
+     * the same agent freely and a fresh `delegate` would otherwise mint it clean
+     * authority.
+     */
+    revokeAgent(agentId) {
+        const revoked = this.chain.revokeAgent(agentId);
+        this.append("kill", {
+            chain_id: this.chainId,
+            target: this.node.nodeId,
+            agent: agentId,
+            revoked,
+        });
+        return revoked;
+    }
+    // ---- provable narrowing -----------------------------------------------
+    /**
+     * Is this guard's authority provably narrower than `parent`'s? Exactly the
+     * relation an offline verifier applies to two wire tokens.
+     */
+    isNarrowerThan(parent) {
+        return this.authority.isNarrowerThan(parent.authority);
+    }
+    // ---- introspection ----------------------------------------------------
+    auditLog() {
+        return this.audit;
+    }
+    graph() {
+        return this.chain.graph();
+    }
+}
+exports.Guard = Guard;
+//# sourceMappingURL=guard.js.map