muonroi-cli 1.2.0

package/dist/ee/client.js

@@ -0,0 +1,464 @@
+import { enqueue, drainQueue } from "./offline-queue.js";
+const DEFAULT_BASE = "http://localhost:8082";
+/**
+ * Intercept timeout budget (Phase 0 default: 100ms).
+ *
+ * B-4 rationale: intercept is on the hot-path of every tool call. A degraded EE
+ * must NOT silently add 5s/call. 100ms is fast enough to detect a wedged EE
+ * immediately, and slow enough to absorb normal localhost p99 jitter on Windows ConPTY.
+ */
+const DEFAULT_TIMEOUT_MS = 100;
+const DEFAULT_HEALTH_TIMEOUT_MS = 1000;
+// ─── Rate-limited unreachable log ─────────────────────────────────────────────
+let lastUnreachableLogMs = 0;
+const UNREACHABLE_LOG_INTERVAL_MS = 60_000;
+function logUnreachable(reason) {
+    const now = Date.now();
+    if (now - lastUnreachableLogMs > UNREACHABLE_LOG_INTERVAL_MS) {
+        lastUnreachableLogMs = now;
+        console.warn(`[muonroi-cli] EE unreachable (${reason}); intercept short-circuiting to allow.`);
+    }
+}
+const CIRCUIT_FAILURE_THRESHOLD = 3; // consecutive failures before opening
+const CIRCUIT_OPEN_DURATION_MS = 30_000; // stay open for 30s
+const CIRCUIT_RESET_TIMEOUT_MS = 60_000; // reset consecutive counter after 60s idle
+let _circuitState = "closed";
+let _consecutiveFailures = 0;
+let _circuitOpenedAt = 0;
+let _lastFailureAt = 0;
+function recordCircuitSuccess(drainOpts) {
+    _circuitState = "closed";
+    _consecutiveFailures = 0;
+    if (drainOpts) {
+        drainQueue(drainOpts.fetchImpl, drainOpts.headers, drainOpts.baseUrl);
+    }
+}
+function recordCircuitFailure() {
+    const now = Date.now();
+    // Reset counter if last failure was long ago (stale state)
+    if (now - _lastFailureAt > CIRCUIT_RESET_TIMEOUT_MS)
+        _consecutiveFailures = 0;
+    _lastFailureAt = now;
+    _consecutiveFailures++;
+    if (_consecutiveFailures >= CIRCUIT_FAILURE_THRESHOLD) {
+        _circuitState = "open";
+        _circuitOpenedAt = now;
+        console.warn(`[muonroi-cli] EE circuit breaker OPEN after ${_consecutiveFailures} consecutive failures. ` +
+            `Skipping intercept calls for ${CIRCUIT_OPEN_DURATION_MS / 1000}s.`);
+    }
+}
+/**
+ * Returns true if the circuit allows a request through.
+ * Transitions open→half-open after CIRCUIT_OPEN_DURATION_MS.
+ */
+function circuitAllows() {
+    if (_circuitState === "closed")
+        return true;
+    if (_circuitState === "open") {
+        if (Date.now() - _circuitOpenedAt >= CIRCUIT_OPEN_DURATION_MS) {
+            _circuitState = "half-open";
+            return true; // let one probe through
+        }
+        return false;
+    }
+    // half-open: allow exactly one probe
+    return true;
+}
+// ─── Intercept response cache ─────────────────────────────────────────────────
+const CACHE_TTL_MS = 5 * 60_000; // 5 minutes
+const CACHE_MAX_ENTRIES = 200;
+const _interceptCache = new Map();
+function cacheKey(req) {
+    // Normalize toolInput to a stable JSON string (sort keys for maps)
+    try {
+        const inputStr = JSON.stringify(req.toolInput, Object.keys(req.toolInput).sort());
+        return `${req.toolName}|${inputStr}|${JSON.stringify(req.scope)}`;
+    }
+    catch {
+        return `${req.toolName}|__unstringifiable__|${JSON.stringify(req.scope)}`;
+    }
+}
+function getCached(req) {
+    const key = cacheKey(req);
+    const entry = _interceptCache.get(key);
+    if (!entry)
+        return null;
+    if (Date.now() > entry.expiresAt) {
+        _interceptCache.delete(key);
+        return null;
+    }
+    return entry.response;
+}
+function setCached(req, response) {
+    // Only cache allow decisions — block decisions must always re-evaluate
+    if (response.decision !== "allow")
+        return;
+    if (_interceptCache.size >= CACHE_MAX_ENTRIES) {
+        // Evict oldest entry
+        const oldest = _interceptCache.keys().next().value;
+        if (oldest)
+            _interceptCache.delete(oldest);
+    }
+    _interceptCache.set(cacheKey(req), {
+        response,
+        expiresAt: Date.now() + CACHE_TTL_MS,
+    });
+}
+/** Clear intercept cache — for tests and /doctor command. */
+export function clearInterceptCache() {
+    _interceptCache.clear();
+}
+export function getCircuitState() {
+    return _circuitState;
+}
+/** Reset circuit breaker and cache — for tests only. */
+export function resetEEClientState() {
+    _interceptCache.clear();
+    _circuitState = "closed";
+    _consecutiveFailures = 0;
+    _circuitOpenedAt = 0;
+    _lastFailureAt = 0;
+    lastUnreachableLogMs = 0;
+}
+/**
+ * Create an EE HTTP client with intercept cache + circuit breaker.
+ *
+ * Graceful-degradation rules:
+ * - intercept: cache hit → 0ms. Circuit open → 0ms allow. Timeout/error → allow + warn once/min.
+ * - posttool/feedback/touch: fire-and-forget, never block orchestrator (B-4).
+ */
+export function createEEClient(opts = {}) {
+    const baseUrl = opts.baseUrl ?? DEFAULT_BASE;
+    const authToken = opts.authToken;
+    const interceptTimeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const f = opts.fetchImpl ?? fetch;
+    function headers() {
+        const h = { "Content-Type": "application/json" };
+        if (authToken)
+            h.Authorization = `Bearer ${authToken}`;
+        return h;
+    }
+    return {
+        async health() {
+            try {
+                const resp = await f(`${baseUrl}/health`, {
+                    signal: AbortSignal.timeout(DEFAULT_HEALTH_TIMEOUT_MS),
+                });
+                return { ok: resp.ok, status: resp.status };
+            }
+            catch {
+                return { ok: false, status: 0 };
+            }
+        },
+        async intercept(req) {
+            // 1. Cache hit — skip network entirely
+            const cached = getCached(req);
+            if (cached)
+                return cached;
+            // 2. Circuit breaker — skip if open
+            if (!circuitAllows()) {
+                return { decision: "allow", reason: "circuit-open" };
+            }
+            try {
+                const resp = await f(`${baseUrl}/api/intercept`, {
+                    method: "POST",
+                    headers: headers(),
+                    body: JSON.stringify(req),
+                    signal: AbortSignal.timeout(interceptTimeoutMs),
+                });
+                if (!resp.ok) {
+                    if (resp.status === 401) {
+                        return { decision: "allow", reason: "auth-required" };
+                    }
+                    logUnreachable(`status ${resp.status}`);
+                    recordCircuitFailure();
+                    return { decision: "allow", reason: "ee-unreachable" };
+                }
+                const result = (await resp.json());
+                recordCircuitSuccess({ fetchImpl: f, headers: headers(), baseUrl });
+                setCached(req, result);
+                return result;
+            }
+            catch (err) {
+                logUnreachable(err.name ?? "error");
+                recordCircuitFailure();
+                return { decision: "allow", reason: "ee-unreachable" };
+            }
+        },
+        async posttool(payload) {
+            await f(`${baseUrl}/api/posttool`, {
+                method: "POST",
+                headers: headers(),
+                body: JSON.stringify(payload),
+            }).catch(() => {
+                /* fire-and-forget error swallowed */
+            });
+        },
+        async routeModel(req, signal) {
+            try {
+                const ctrl = new AbortController();
+                const t = setTimeout(() => ctrl.abort(), 250);
+                if (signal)
+                    signal.addEventListener("abort", () => ctrl.abort());
+                const resp = await f(`${baseUrl}/api/route-model`, {
+                    method: "POST",
+                    headers: headers(),
+                    body: JSON.stringify(req),
+                    signal: ctrl.signal,
+                });
+                clearTimeout(t);
+                if (!resp.ok)
+                    return null;
+                return (await resp.json());
+            }
+            catch {
+                return null;
+            }
+        },
+        async coldRoute(req, signal) {
+            try {
+                const ctrl = new AbortController();
+                const t = setTimeout(() => ctrl.abort(), 1000);
+                if (signal)
+                    signal.addEventListener("abort", () => ctrl.abort());
+                const resp = await f(`${baseUrl}/api/cold-route`, {
+                    method: "POST",
+                    headers: headers(),
+                    body: JSON.stringify(req),
+                    signal: ctrl.signal,
+                });
+                clearTimeout(t);
+                if (!resp.ok)
+                    return null;
+                return (await resp.json());
+            }
+            catch {
+                return null;
+            }
+        },
+        feedback(payload) {
+            f(`${baseUrl}/api/feedback`, {
+                method: "POST",
+                headers: headers(),
+                body: JSON.stringify(payload),
+            }).catch(() => {
+                void enqueue({ endpoint: "/api/feedback", body: payload, enqueuedAt: Date.now() });
+            });
+        },
+        touch(principle_uuid, tenantId) {
+            f(`${baseUrl}/api/principle/touch?id=${encodeURIComponent(principle_uuid)}`, {
+                method: "POST",
+                headers: headers(),
+                body: JSON.stringify({ tenantId }),
+            }).catch(() => {
+                /* fire-and-forget */
+            });
+        },
+        // ─── P0: Route feedback (fire-and-forget) ─────────────────────────────────
+        routeFeedback(payload) {
+            f(`${baseUrl}/api/route-feedback`, {
+                method: "POST",
+                headers: headers(),
+                body: JSON.stringify(payload),
+            }).catch(() => {
+                /* fire-and-forget */
+            });
+        },
+        // ─── P1: Prompt-stale reconciliation ──────────────────────────────────────
+        async promptStale(req) {
+            try {
+                const resp = await f(`${baseUrl}/api/prompt-stale`, {
+                    method: "POST",
+                    headers: headers(),
+                    body: JSON.stringify(req),
+                    signal: AbortSignal.timeout(2000),
+                });
+                if (!resp.ok) {
+                    void enqueue({ endpoint: "/api/prompt-stale", body: req, enqueuedAt: Date.now() });
+                    return null;
+                }
+                return (await resp.json());
+            }
+            catch {
+                void enqueue({ endpoint: "/api/prompt-stale", body: req, enqueuedAt: Date.now() });
+                return null;
+            }
+        },
+        // ─── P1: Session extract ──────────────────────────────────────────────────
+        async extract(req, signal) {
+            try {
+                const resp = await f(`${baseUrl}/api/extract`, {
+                    method: "POST",
+                    headers: headers(),
+                    body: JSON.stringify(req),
+                    signal: signal ?? AbortSignal.timeout(10_000),
+                });
+                if (!resp.ok) {
+                    void enqueue({ endpoint: "/api/extract", body: req, enqueuedAt: Date.now() });
+                    return null;
+                }
+                return (await resp.json());
+            }
+            catch {
+                void enqueue({ endpoint: "/api/extract", body: req, enqueuedAt: Date.now() });
+                return null;
+            }
+        },
+        // ─── P2: Knowledge visibility endpoints ───────────────────────────────────
+        async stats(since) {
+            try {
+                const qs = since ? `?since=${encodeURIComponent(since)}` : "";
+                const resp = await f(`${baseUrl}/api/stats${qs}`, {
+                    headers: headers(),
+                    signal: AbortSignal.timeout(5000),
+                });
+                if (!resp.ok)
+                    return null;
+                return (await resp.json());
+            }
+            catch {
+                return null;
+            }
+        },
+        async graph(id) {
+            try {
+                const resp = await f(`${baseUrl}/api/graph?id=${encodeURIComponent(id)}`, {
+                    headers: headers(),
+                    signal: AbortSignal.timeout(3000),
+                });
+                if (!resp.ok)
+                    return null;
+                return (await resp.json());
+            }
+            catch {
+                return null;
+            }
+        },
+        async timeline(topic) {
+            try {
+                const resp = await f(`${baseUrl}/api/timeline?topic=${encodeURIComponent(topic)}`, {
+                    headers: headers(),
+                    signal: AbortSignal.timeout(3000),
+                });
+                if (!resp.ok)
+                    return null;
+                return (await resp.json());
+            }
+            catch {
+                return null;
+            }
+        },
+        async gates() {
+            try {
+                const resp = await f(`${baseUrl}/api/gates`, {
+                    headers: headers(),
+                    signal: AbortSignal.timeout(3000),
+                });
+                if (!resp.ok)
+                    return null;
+                return (await resp.json());
+            }
+            catch {
+                return null;
+            }
+        },
+        async evolve(trigger) {
+            try {
+                const resp = await f(`${baseUrl}/api/evolve`, {
+                    method: "POST",
+                    headers: headers(),
+                    body: JSON.stringify({ trigger: trigger ?? "cli" }),
+                    signal: AbortSignal.timeout(15_000),
+                });
+                if (!resp.ok)
+                    return null;
+                return (await resp.json());
+            }
+            catch {
+                return null;
+            }
+        },
+        async sharePrinciple(principleId) {
+            try {
+                const resp = await f(`${baseUrl}/api/principles/share`, {
+                    method: "POST",
+                    headers: headers(),
+                    body: JSON.stringify({ principleId }),
+                    signal: AbortSignal.timeout(3000),
+                });
+                if (!resp.ok)
+                    return null;
+                return (await resp.json());
+            }
+            catch {
+                return null;
+            }
+        },
+        async importPrinciple(data) {
+            try {
+                const resp = await f(`${baseUrl}/api/principles/import`, {
+                    method: "POST",
+                    headers: headers(),
+                    body: JSON.stringify({ principle: data }),
+                    signal: AbortSignal.timeout(5000),
+                });
+                if (!resp.ok)
+                    return null;
+                return (await resp.json());
+            }
+            catch {
+                return null;
+            }
+        },
+        // ─── Task routing ───────────────────────────────────────────────────────
+        async routeTask(req) {
+            try {
+                const resp = await f(`${baseUrl}/api/route-task`, {
+                    method: "POST",
+                    headers: headers(),
+                    body: JSON.stringify(req),
+                    signal: AbortSignal.timeout(3000),
+                });
+                if (!resp.ok)
+                    return null;
+                return (await resp.json());
+            }
+            catch {
+                return null;
+            }
+        },
+        // ─── Semantic search ────────────────────────────────────────────────────
+        async search(query, limit) {
+            try {
+                const resp = await f(`${baseUrl}/api/search`, {
+                    method: "POST",
+                    headers: headers(),
+                    body: JSON.stringify({ query, limit: limit ?? 10 }),
+                    signal: AbortSignal.timeout(3000),
+                });
+                if (!resp.ok)
+                    return null;
+                return (await resp.json());
+            }
+            catch {
+                return null;
+            }
+        },
+        // ─── User identity ──────────────────────────────────────────────────────
+        async user() {
+            try {
+                const resp = await f(`${baseUrl}/api/user`, {
+                    headers: headers(),
+                    signal: AbortSignal.timeout(1000),
+                });
+                if (!resp.ok)
+                    return null;
+                return (await resp.json());
+            }
+            catch {
+                return null;
+            }
+        },
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/ee/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/ee/client.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC,iFAAiF;AACjF,IAAI,oBAAoB,GAAG,CAAC,CAAC;AAC7B,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAE3C,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,GAAG,GAAG,oBAAoB,GAAG,2BAA2B,EAAE,CAAC;QAC7D,oBAAoB,GAAG,GAAG,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,iCAAiC,MAAM,yCAAyC,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAKD,MAAM,yBAAyB,GAAG,CAAC,CAAC,CAAC,sCAAsC;AAC3E,MAAM,wBAAwB,GAAG,MAAM,CAAC,CAAC,oBAAoB;AAC7D,MAAM,wBAAwB,GAAG,MAAM,CAAC,CAAC,2CAA2C;AAEpF,IAAI,aAAa,GAAiB,QAAQ,CAAC;AAC3C,IAAI,oBAAoB,GAAG,CAAC,CAAC;AAC7B,IAAI,gBAAgB,GAAG,CAAC,CAAC;AACzB,IAAI,cAAc,GAAG,CAAC,CAAC;AAEvB,SAAS,oBAAoB,CAAC,SAAyF;IACrH,aAAa,GAAG,QAAQ,CAAC;IACzB,oBAAoB,GAAG,CAAC,CAAC;IACzB,IAAI,SAAS,EAAE,CAAC;QACd,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,2DAA2D;IAC3D,IAAI,GAAG,GAAG,cAAc,GAAG,wBAAwB;QAAE,oBAAoB,GAAG,CAAC,CAAC;IAC9E,cAAc,GAAG,GAAG,CAAC;IACrB,oBAAoB,EAAE,CAAC;IACvB,IAAI,oBAAoB,IAAI,yBAAyB,EAAE,CAAC;QACtD,aAAa,GAAG,MAAM,CAAC;QACvB,gBAAgB,GAAG,GAAG,CAAC;QACvB,OAAO,CAAC,IAAI,CACV,+CAA+C,oBAAoB,yBAAyB;YAC1F,gCAAgC,wBAAwB,GAAG,IAAI,IAAI,CACtE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa;IACpB,IAAI,aAAa,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,IAAI,wBAAwB,EAAE,CAAC;YAC9D,aAAa,GAAG,WAAW,CAAC;YAC5B,OAAO,IAAI,CAAC,CAAC,wBAAwB;QACvC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,qCAAqC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,YAAY;AAC7C,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAO9B,MAAM,eAAe,GAAG,IAAI,GAAG,EAAsB,CAAC;AAEtD,SAAS,QAAQ,CAAC,GAAqB;IACrC,mEAAmE;IACnE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAmB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5F,OAAO,GAAG,GAAG,CAAC,QAAQ,IAAI,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,GAAG,CAAC,QAAQ,wBAAwB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAqB;IACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;QACjC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC;AACxB,CAAC;AAED,SAAS,SAAS,CAAC,GAAqB,EAAE,QAA2B;IACnE,uEAAuE;IACvE,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IAC1C,IAAI,eAAe,CAAC,IAAI,IAAI,iBAAiB,EAAE,CAAC;QAC9C,qBAAqB;QACrB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QACnD,IAAI,MAAM;YAAE,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IACD,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;QACjC,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY;KACrC,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,mBAAmB;IACjC,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,kBAAkB;IAChC,eAAe,CAAC,KAAK,EAAE,CAAC;IACxB,aAAa,GAAG,QAAQ,CAAC;IACzB,oBAAoB,GAAG,CAAC,CAAC;IACzB,gBAAgB,GAAG,CAAC,CAAC;IACrB,cAAc,GAAG,CAAC,CAAC;IACnB,oBAAoB,GAAG,CAAC,CAAC;AAC3B,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAA2B,EAAE;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAChE,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAElC,SAAS,OAAO;QACd,MAAM,CAAC,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QACzE,IAAI,SAAS;YAAE,CAAC,CAAC,aAAa,GAAG,UAAU,SAAS,EAAE,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO;QACL,KAAK,CAAC,MAAM;YACV,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,SAAS,EAAE;oBACxC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,yBAAyB,CAAC;iBACvD,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;YAClC,CAAC;QACH,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,GAAqB;YACnC,uCAAuC;YACvC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YAE1B,oCAAoC;YACpC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;gBACrB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;YACvD,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,gBAAgB,EAAE;oBAC/C,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,OAAO,EAAE;oBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;oBACzB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;iBAChD,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBACb,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBACxB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;oBACxD,CAAC;oBACD,cAAc,CAAC,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;oBACxC,oBAAoB,EAAE,CAAC;oBACvB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;gBACzD,CAAC;gBACD,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAsB,CAAC;gBACxD,oBAAoB,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;gBACpE,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACvB,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,cAAc,CAAE,GAAa,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC;gBAC/C,oBAAoB,EAAE,CAAC;gBACvB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;YACzD,CAAC;QACH,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,OAAwB;YACrC,MAAM,CAAC,CAAC,GAAG,OAAO,eAAe,EAAE;gBACjC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,OAAO,EAAE;gBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;aAC9B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBACZ,qCAAqC;YACvC,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,GAAsB,EAAE,MAAoB;YAC3D,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC9C,IAAI,MAAM;oBAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBACjE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,kBAAkB,EAAE;oBACjD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,OAAO,EAAE;oBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;oBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;gBACH,YAAY,CAAC,CAAC,CAAC,CAAC;gBAChB,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC1B,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAuB,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,GAAqB,EAAE,MAAoB;YACzD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;gBAC/C,IAAI,MAAM;oBAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBACjE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,iBAAiB,EAAE;oBAChD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,OAAO,EAAE;oBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;oBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;gBACH,YAAY,CAAC,CAAC,CAAC,CAAC;gBAChB,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC1B,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAsB,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,OAAwB;YAC/B,CAAC,CAAC,GAAG,OAAO,eAAe,EAAE;gBAC3B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,OAAO,EAAE;gBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;aAC9B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBACZ,KAAK,OAAO,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACrF,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,cAAsB,EAAE,QAAgB;YAC5C,CAAC,CAAC,GAAG,OAAO,2BAA2B,kBAAkB,CAAC,cAAc,CAAC,EAAE,EAAE;gBAC3E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,OAAO,EAAE;gBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;aACnC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBACZ,qBAAqB;YACvB,CAAC,CAAC,CAAC;QACL,CAAC;QAED,6EAA6E;QAC7E,aAAa,CAAC,OAA6B;YACzC,CAAC,CAAC,GAAG,OAAO,qBAAqB,EAAE;gBACjC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,OAAO,EAAE;gBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;aAC9B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBACZ,qBAAqB;YACvB,CAAC,CAAC,CAAC;QACL,CAAC;QAED,6EAA6E;QAC7E,KAAK,CAAC,WAAW,CAAC,GAAuB;YACvC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,mBAAmB,EAAE;oBAClD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,OAAO,EAAE;oBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;oBACzB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBACb,KAAK,OAAO,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACnF,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAwB,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,OAAO,CAAC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACnF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,KAAK,CAAC,OAAO,CAAC,GAAmB,EAAE,MAAoB;YACrD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,cAAc,EAAE;oBAC7C,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,OAAO,EAAE;oBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;oBACzB,MAAM,EAAE,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;iBAC9C,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBACb,KAAK,OAAO,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBAC9E,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAoB,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,OAAO,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC9E,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,KAAK,CAAC,KAAK,CAAC,KAAc;YACxB,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,aAAa,EAAE,EAAE,EAAE;oBAChD,OAAO,EAAE,OAAO,EAAE;oBAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC1B,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAoB,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,EAAU;YACpB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,iBAAiB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE;oBACxE,OAAO,EAAE,OAAO,EAAE;oBAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC1B,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAoB,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,KAAa;YAC1B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,uBAAuB,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE;oBACjF,OAAO,EAAE,OAAO,EAAE;oBAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC1B,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAuB,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK;YACT,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,YAAY,EAAE;oBAC3C,OAAO,EAAE,OAAO,EAAE;oBAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC1B,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAoB,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,OAAgB;YAC3B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,aAAa,EAAE;oBAC5C,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,OAAO,EAAE;oBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,KAAK,EAAE,CAAC;oBACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;iBACpC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC1B,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAqB,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,WAAmB;YACtC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,uBAAuB,EAAE;oBACtD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,OAAO,EAAE;oBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;oBACrC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC1B,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAoB,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,IAAa;YACjC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,wBAAwB,EAAE;oBACvD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,OAAO,EAAE;oBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;oBACzC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC1B,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAqB,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,KAAK,CAAC,SAAS,CAAC,GAAqB;YACnC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,iBAAiB,EAAE;oBAChD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,OAAO,EAAE;oBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;oBACzB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC1B,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAsB,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,KAAc;YACxC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,aAAa,EAAE;oBAC5C,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,OAAO,EAAE;oBAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;oBACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC1B,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAqB,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,KAAK,CAAC,IAAI;YACR,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,OAAO,WAAW,EAAE;oBAC1C,OAAO,EAAE,OAAO,EAAE;oBAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBAClC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC1B,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAmB,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/ee/client.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/ee/client.test.js

@@ -0,0 +1,151 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { createEEClient, resetEEClientState } from "./client.js";
+const mockReq = {
+    toolName: "bash",
+    toolInput: { command: "ls" },
+    cwd: "/tmp",
+    tenantId: "local",
+    scope: { kind: "global" },
+};
+const mockPayload = {
+    toolName: "bash",
+    toolInput: { command: "ls" },
+    outcome: { success: true, exitCode: 0, durationMs: 10 },
+    cwd: "/tmp",
+    tenantId: "local",
+    scope: { kind: "global" },
+};
+describe("EEClient - health", () => {
+    it("Test 1: health 200 returns { ok: true, status: 200 }", async () => {
+        const mockFetch = vi.fn().mockResolvedValue({ ok: true, status: 200 });
+        const ee = createEEClient({ fetchImpl: mockFetch });
+        const result = await ee.health();
+        expect(result).toEqual({ ok: true, status: 200 });
+    });
+    it("Test 2: health 502 returns { ok: false, status: 502 } without throwing", async () => {
+        const mockFetch = vi.fn().mockResolvedValue({ ok: false, status: 502 });
+        const ee = createEEClient({ fetchImpl: mockFetch });
+        const result = await ee.health();
+        expect(result).toEqual({ ok: false, status: 502 });
+    });
+});
+describe("EEClient - intercept", () => {
+    beforeEach(() => {
+        vi.useFakeTimers();
+        resetEEClientState(); // clear cache + circuit between tests
+    });
+    afterEach(() => {
+        vi.useRealTimers();
+    });
+    it("Test 3: intercept allow — returns decision:allow", async () => {
+        const mockFetch = vi.fn().mockResolvedValue({
+            ok: true,
+            status: 200,
+            json: async () => ({ decision: "allow" }),
+        });
+        const ee = createEEClient({ fetchImpl: mockFetch });
+        const result = await ee.intercept(mockReq);
+        expect(result.decision).toBe("allow");
+    });
+    it("Test 4: intercept block — returns decision:block with reason", async () => {
+        const mockFetch = vi.fn().mockResolvedValue({
+            ok: true,
+            status: 200,
+            json: async () => ({ decision: "block", reason: "dangerous command" }),
+        });
+        const ee = createEEClient({ fetchImpl: mockFetch });
+        const result = await ee.intercept(mockReq);
+        expect(result.decision).toBe("block");
+        expect(result.reason).toBe("dangerous command");
+    });
+    it("Test 5: intercept 5xx falls back to { decision: 'allow', reason: 'ee-unreachable' }", async () => {
+        const consoleSpy = vi.spyOn(console, "warn").mockImplementation(() => { });
+        const mockFetch = vi.fn().mockResolvedValue({ ok: false, status: 503 });
+        const ee = createEEClient({ fetchImpl: mockFetch });
+        const result = await ee.intercept(mockReq);
+        expect(result.decision).toBe("allow");
+        expect(result.reason).toBe("ee-unreachable");
+        consoleSpy.mockRestore();
+    });
+    it("Test 6: intercept timeout falls back to { decision: 'allow', reason: 'ee-unreachable' }", async () => {
+        // Simulate a fetch that aborts due to timeout signal
+        const mockFetch = vi.fn().mockImplementation((_url, opts) => {
+            return new Promise((_resolve, reject) => {
+                // Listen to the abort signal and reject when it fires
+                const signal = opts?.signal;
+                if (signal) {
+                    signal.addEventListener("abort", () => {
+                        const err = new DOMException("The operation was aborted.", "AbortError");
+                        reject(err);
+                    });
+                }
+            });
+        });
+        const ee = createEEClient({ fetchImpl: mockFetch, timeoutMs: 50 });
+        // Advance timers to trigger AbortSignal.timeout
+        const resultPromise = ee.intercept(mockReq);
+        await vi.advanceTimersByTimeAsync(200);
+        const result = await resultPromise;
+        expect(result.decision).toBe("allow");
+        expect(result.reason).toBe("ee-unreachable");
+    });
+});
+describe("EEClient - posttool", () => {
+    it("Test 7: posttool is awaitable — returns Promise<void> and fetch is called", async () => {
+        const mockFetch = vi.fn().mockResolvedValue({ ok: true, status: 200 });
+        const ee = createEEClient({ fetchImpl: mockFetch });
+        // posttool is now async (awaitable by PostToolUse handler)
+        const returnValue = ee.posttool(mockPayload);
+        expect(returnValue).toBeInstanceOf(Promise);
+        await returnValue;
+        expect(mockFetch).toHaveBeenCalledOnce();
+    });
+    it("Test 8: posttool swallows errors silently", async () => {
+        const mockFetch = vi.fn().mockRejectedValue(new Error("network error"));
+        const ee = createEEClient({ fetchImpl: mockFetch });
+        // Must not throw even when awaited
+        await expect(ee.posttool(mockPayload)).resolves.toBeUndefined();
+    });
+});
+describe("EEClient - auth", () => {
+    beforeEach(() => {
+        resetEEClientState();
+    });
+    it("Test 9: auth header included when authToken provided", async () => {
+        const mockFetch = vi.fn().mockResolvedValue({
+            ok: true,
+            status: 200,
+            json: async () => ({ decision: "allow" }),
+        });
+        const ee = createEEClient({ authToken: "my-token", fetchImpl: mockFetch });
+        await ee.intercept(mockReq);
+        const [, opts] = mockFetch.mock.calls[0];
+        const headers = opts.headers;
+        expect(headers.Authorization).toBe("Bearer my-token");
+    });
+    it("Test 10: intercept body does NOT contain BYOK provider keys (sk- prefix)", async () => {
+        const mockFetch = vi.fn().mockResolvedValue({
+            ok: true,
+            status: 200,
+            json: async () => ({ decision: "allow" }),
+        });
+        const ee = createEEClient({ fetchImpl: mockFetch });
+        // Even if toolInput somehow contains key-like values, the intercept payload
+        // schema is toolName + toolInput + cwd only — no auth tokens from the CLI config
+        const reqWithNoKeys = {
+            toolName: "bash",
+            toolInput: { command: "echo hello" },
+            cwd: "/home/user",
+            tenantId: "local",
+            scope: { kind: "global" },
+        };
+        await ee.intercept(reqWithNoKeys);
+        const [, opts] = mockFetch.mock.calls[0];
+        const body = opts.body;
+        // The request body must not contain any "sk-" substring
+        expect(body).not.toMatch(/sk-/);
+        // Must not contain "Bearer sk-" form
+        expect(body).not.toMatch(/Bearer sk-/);
+    });
+});
+//# sourceMappingURL=client.test.js.map

package/dist/ee/client.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.test.js","sourceRoot":"","sources":["../../src/ee/client.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGjE,MAAM,OAAO,GAAqB;IAChC,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;IAC5B,GAAG,EAAE,MAAM;IACX,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;CAC1B,CAAC;AAEF,MAAM,WAAW,GAAoB;IACnC,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;IAC5B,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;IACvD,GAAG,EAAE,MAAM;IACX,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;CAC1B,CAAC;AAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,MAAM,EAAE,GAAG,cAAc,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACxE,MAAM,EAAE,GAAG,cAAc,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,kBAAkB,EAAE,CAAC,CAAC,sCAAsC;IAC9D,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC1C,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;SAC1C,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,cAAc,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC1C,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;SACvE,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,cAAc,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACxE,MAAM,EAAE,GAAG,cAAc,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7C,UAAU,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,qDAAqD;QACrD,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,IAAY,EAAE,IAAiB,EAAE,EAAE;YAC/E,OAAO,IAAI,OAAO,CAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBAChD,sDAAsD;gBACtD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAqB,CAAC;gBAC3C,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;wBACpC,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,4BAA4B,EAAE,YAAY,CAAC,CAAC;wBACzE,MAAM,CAAC,GAAG,CAAC,CAAC;oBACd,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,cAAc,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACnE,gDAAgD;QAChD,MAAM,aAAa,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,MAAM,EAAE,GAAG,cAAc,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAEpD,2DAA2D;QAC3D,MAAM,WAAW,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,CAAC,WAAW,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,WAAW,CAAC;QAClB,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;QACxE,MAAM,EAAE,GAAG,cAAc,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAEpD,mCAAmC;QACnC,MAAM,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,UAAU,CAAC,GAAG,EAAE;QACd,kBAAkB,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC1C,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;SAC1C,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,cAAc,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3E,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAE5B,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAA0B,CAAC;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAiC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC1C,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;SAC1C,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,cAAc,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAEpD,4EAA4E;QAC5E,iFAAiF;QACjF,MAAM,aAAa,GAAqB;YACtC,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;YACpC,GAAG,EAAE,YAAY;YACjB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B,CAAC;QACF,MAAM,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAElC,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAA0B,CAAC;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAc,CAAC;QACjC,wDAAwD;QACxD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC,qCAAqC;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/ee/embedding-cache.d.ts

@@ -0,0 +1,7 @@
+export declare function getCachedEmbedding(text: string): number[] | null;
+export declare function setCachedEmbedding(text: string, vector: number[]): void;
+export declare function clearEmbeddingCache(): void;
+export declare function embeddingCacheStats(): {
+    size: number;
+    maxEntries: number;
+};