open-agentpay 0.1.0 → 0.2.5

package/dist/integrations/mcp.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Model Context Protocol (MCP) integration for AgentPay.
+ *
+ * Provides MCP server tool handlers and client fetch adapters for autonomous 402 payment negotiation.
+ */
+import { AgentPayClient } from '../client/client.js';
+import { type AgentPayClientOptions } from '../client/transport.js';
+export interface McpContentItem {
+    type: string;
+    text?: string;
+    data?: string;
+    mimeType?: string;
+    [key: string]: unknown;
+}
+export interface McpToolResponse {
+    isError?: boolean;
+    content: McpContentItem[];
+    [key: string]: unknown;
+}
+export interface PaidMcpToolOptions {
+    handlePolicyViolation?: boolean;
+}
+export type McpToolHandler<TArgs = Record<string, unknown>> = (args: TArgs, extra?: {
+    client: AgentPayClient;
+    [key: string]: unknown;
+}) => Promise<McpToolResponse | unknown>;
+export declare function createPaidMcpToolHandler<TArgs = Record<string, unknown>>(client: AgentPayClient, handler: McpToolHandler<TArgs>, options?: PaidMcpToolOptions): (args: TArgs, extra?: any) => Promise<McpToolResponse>;
+export declare function createPaidMcpFetch(clientOrOptions: AgentPayClient | AgentPayClientOptions): typeof globalThis.fetch;
+//# sourceMappingURL=mcp.d.ts.map

package/dist/integrations/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/integrations/mcp.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAuB,KAAK,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAIzF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,MAAM,cAAc,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAC5D,IAAI,EAAE,KAAK,EACX,KAAK,CAAC,EAAE;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,KACvD,OAAO,CAAC,eAAe,GAAG,OAAO,CAAC,CAAC;AAExC,wBAAgB,wBAAwB,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtE,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,EAC9B,OAAO,CAAC,EAAE,kBAAkB,GAC3B,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,eAAe,CAAC,CA2DxD;AAED,wBAAgB,kBAAkB,CAChC,eAAe,EAAE,cAAc,GAAG,qBAAqB,GACtD,OAAO,UAAU,CAAC,KAAK,CAKzB"}

package/dist/integrations/mcp.js

@@ -0,0 +1,73 @@
+/**
+ * Model Context Protocol (MCP) integration for AgentPay.
+ *
+ * Provides MCP server tool handlers and client fetch adapters for autonomous 402 payment negotiation.
+ */
+import { AgentPayClient } from '../client/client.js';
+import { createAgentPayFetch } from '../client/transport.js';
+import { X402Error } from '../core/errors.js';
+import { PolicyViolationError } from '../policy/errors.js';
+export function createPaidMcpToolHandler(client, handler, options) {
+    const handlePolicyViolation = options?.handlePolicyViolation ?? true;
+    return async (args, extra) => {
+        const context = {
+            client,
+            ...(extra && typeof extra === 'object' ? extra : {}),
+        };
+        try {
+            const result = await handler(args, context);
+            if (result &&
+                typeof result === 'object' &&
+                'content' in result &&
+                Array.isArray(result.content)) {
+                return result;
+            }
+            return {
+                content: [
+                    {
+                        type: 'text',
+                        text: typeof result === 'string' ? result : JSON.stringify(result),
+                    },
+                ],
+            };
+        }
+        catch (err) {
+            if (err instanceof PolicyViolationError) {
+                if (handlePolicyViolation) {
+                    return {
+                        isError: true,
+                        content: [
+                            {
+                                type: 'text',
+                                text: `AgentPay Firewall Rejected: [${err.code}] ${err.detail || err.message}`,
+                            },
+                        ],
+                    };
+                }
+                throw err;
+            }
+            if (err instanceof X402Error) {
+                if (handlePolicyViolation) {
+                    return {
+                        isError: true,
+                        content: [
+                            {
+                                type: 'text',
+                                text: `AgentPay x402 Protocol Error: ${err.message}`,
+                            },
+                        ],
+                    };
+                }
+                throw err;
+            }
+            throw err;
+        }
+    };
+}
+export function createPaidMcpFetch(clientOrOptions) {
+    if (clientOrOptions instanceof AgentPayClient) {
+        return clientOrOptions.asFetch();
+    }
+    return createAgentPayFetch(clientOrOptions);
+}
+//# sourceMappingURL=mcp.js.map

package/dist/integrations/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/integrations/mcp.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAA8B,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAyB3D,MAAM,UAAU,wBAAwB,CACtC,MAAsB,EACtB,OAA8B,EAC9B,OAA4B;IAE5B,MAAM,qBAAqB,GAAG,OAAO,EAAE,qBAAqB,IAAI,IAAI,CAAC;IAErE,OAAO,KAAK,EAAE,IAAW,EAAE,KAAW,EAA4B,EAAE;QAClE,MAAM,OAAO,GAAG;YACd,MAAM;YACN,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC5C,IACE,MAAM;gBACN,OAAO,MAAM,KAAK,QAAQ;gBAC1B,SAAS,IAAI,MAAM;gBACnB,KAAK,CAAC,OAAO,CAAE,MAA0B,CAAC,OAAO,CAAC,EAClD,CAAC;gBACD,OAAO,MAAyB,CAAC;YACnC,CAAC;YACD,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;qBACnE;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;gBACxC,IAAI,qBAAqB,EAAE,CAAC;oBAC1B,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,gCAAgC,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE;6BAC/E;yBACF;qBACF,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;gBAC7B,IAAI,qBAAqB,EAAE,CAAC;oBAC1B,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,iCAAiC,GAAG,CAAC,OAAO,EAAE;6BACrD;yBACF;qBACF,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,eAAuD;IAEvD,IAAI,eAAe,YAAY,cAAc,EAAE,CAAC;QAC9C,OAAO,eAAe,CAAC,OAAO,EAAE,CAAC;IACnC,CAAC;IACD,OAAO,mBAAmB,CAAC,eAAe,CAAC,CAAC;AAC9C,CAAC"}

package/dist/integrations/vercel-ai.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Vercel AI SDK integration for AgentPay.
+ *
+ * Wraps tool definitions with autonomous AgentPayClient execution context,
+ * intercepting financial policy rejections to return structured tool error responses.
+ */
+import type { AgentPayClient } from '../client/client.js';
+export interface PaidVercelToolOptions<TParams = any, TResult = any> {
+    description?: string;
+    parameters: any;
+    client?: AgentPayClient;
+    handlePolicyViolation?: boolean;
+    execute: (args: TParams, context?: {
+        client?: AgentPayClient;
+        [key: string]: any;
+    }) => Promise<TResult>;
+}
+export interface PaidVercelToolError {
+    error: true;
+    code: string;
+    message: string;
+}
+export interface PaidVercelTool<TParams = any, TResult = any> {
+    description?: string;
+    parameters: any;
+    client?: AgentPayClient;
+    execute: (args: TParams, context?: any) => Promise<TResult | PaidVercelToolError>;
+}
+export declare function paidVercelTool<TParams = any, TResult = any>(options: PaidVercelToolOptions<TParams, TResult>): PaidVercelTool<TParams, TResult>;
+export declare const createVercelPaidTool: typeof paidVercelTool;
+//# sourceMappingURL=vercel-ai.d.ts.map

package/dist/integrations/vercel-ai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-ai.d.ts","sourceRoot":"","sources":["../../src/integrations/vercel-ai.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAI1D,MAAM,WAAW,qBAAqB,CAAC,OAAO,GAAG,GAAG,EAAE,OAAO,GAAG,GAAG;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,GAAG,CAAC;IAChB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,cAAc,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACzG;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,IAAI,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc,CAAC,OAAO,GAAG,GAAG,EAAE,OAAO,GAAG,GAAG;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,GAAG,CAAC;IAChB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,GAAG,mBAAmB,CAAC,CAAC;CACnF;AAED,wBAAgB,cAAc,CAAC,OAAO,GAAG,GAAG,EAAE,OAAO,GAAG,GAAG,EACzD,OAAO,EAAE,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,GAC/C,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAwClC;AAED,eAAO,MAAM,oBAAoB,uBAAiB,CAAC"}

package/dist/integrations/vercel-ai.js

@@ -0,0 +1,50 @@
+/**
+ * Vercel AI SDK integration for AgentPay.
+ *
+ * Wraps tool definitions with autonomous AgentPayClient execution context,
+ * intercepting financial policy rejections to return structured tool error responses.
+ */
+import { X402Error } from '../core/errors.js';
+import { PolicyViolationError } from '../policy/errors.js';
+export function paidVercelTool(options) {
+    const handlePolicyViolation = options.handlePolicyViolation ?? true;
+    return {
+        description: options.description,
+        parameters: options.parameters,
+        client: options.client,
+        execute: async (args, context) => {
+            const execContext = {
+                client: options.client,
+                ...(context && typeof context === 'object' ? context : {}),
+            };
+            try {
+                return await options.execute(args, execContext);
+            }
+            catch (err) {
+                if (err instanceof PolicyViolationError) {
+                    if (handlePolicyViolation) {
+                        return {
+                            error: true,
+                            code: err.code,
+                            message: `AgentPay Firewall Rejected: [${err.code}] ${err.detail || err.message}`,
+                        };
+                    }
+                    throw err;
+                }
+                if (err instanceof X402Error) {
+                    if (handlePolicyViolation) {
+                        return {
+                            error: true,
+                            code: 'X402_ERROR',
+                            message: `AgentPay x402 Protocol Error: ${err.message}`,
+                        };
+                    }
+                    throw err;
+                }
+                throw err;
+            }
+        },
+    };
+}
+export const createVercelPaidTool = paidVercelTool;
+//# sourceMappingURL=vercel-ai.js.map

package/dist/integrations/vercel-ai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-ai.js","sourceRoot":"","sources":["../../src/integrations/vercel-ai.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAuB3D,MAAM,UAAU,cAAc,CAC5B,OAAgD;IAEhD,MAAM,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,IAAI,IAAI,CAAC;IAEpE,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,KAAK,EAAE,IAAa,EAAE,OAAa,EAAE,EAAE;YAC9C,MAAM,WAAW,GAAG;gBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC;YAEF,IAAI,CAAC;gBACH,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;oBACxC,IAAI,qBAAqB,EAAE,CAAC;wBAC1B,OAAO;4BACL,KAAK,EAAE,IAAI;4BACX,IAAI,EAAE,GAAG,CAAC,IAAI;4BACd,OAAO,EAAE,gCAAgC,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE;yBAClF,CAAC;oBACJ,CAAC;oBACD,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;oBAC7B,IAAI,qBAAqB,EAAE,CAAC;wBAC1B,OAAO;4BACL,KAAK,EAAE,IAAI;4BACX,IAAI,EAAE,YAAY;4BAClB,OAAO,EAAE,iCAAiC,GAAG,CAAC,OAAO,EAAE;yBACxD,CAAC;oBACJ,CAAC;oBACD,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC"}

package/dist/policy/db.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Database connection utilities and connection factory for AgentPay.
+ *
+ * Enforces:
+ * - Foreign key constraint enforcement on EVERY connection (PRAGMA foreign_keys = ON)
+ * - WAL journal mode for concurrent read/write isolation (PRAGMA journal_mode = WAL)
+ * - Busy timeout configuration to wait during concurrent write contention
+ * - Canonical buyer schema initialization helper
+ * - defaultSafeIntegers(true) for 64-bit BigInt precision
+ */
+import { type Database as DatabaseInstance } from 'better-sqlite3';
+export declare function createBuyerConnection(dbPath: string, busyTimeoutMs?: number): DatabaseInstance;
+export declare function initBuyerDatabase(db: DatabaseInstance): void;
+//# sourceMappingURL=db.d.ts.map

package/dist/policy/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/policy/db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAiB,EAAE,KAAK,QAAQ,IAAI,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAE7E,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,aAAa,SAAO,GACnB,gBAAgB,CAclB;AAED,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,gBAAgB,GAAG,IAAI,CA6D5D"}

package/dist/policy/db.js

@@ -0,0 +1,86 @@
+/**
+ * Database connection utilities and connection factory for AgentPay.
+ *
+ * Enforces:
+ * - Foreign key constraint enforcement on EVERY connection (PRAGMA foreign_keys = ON)
+ * - WAL journal mode for concurrent read/write isolation (PRAGMA journal_mode = WAL)
+ * - Busy timeout configuration to wait during concurrent write contention
+ * - Canonical buyer schema initialization helper
+ * - defaultSafeIntegers(true) for 64-bit BigInt precision
+ */
+import Database from 'better-sqlite3';
+export function createBuyerConnection(dbPath, busyTimeoutMs = 5000) {
+    const db = new Database(dbPath, {
+        timeout: busyTimeoutMs,
+    });
+    db.defaultSafeIntegers(true);
+    db.pragma('foreign_keys = ON');
+    db.pragma(`busy_timeout = ${busyTimeoutMs}`);
+    if (dbPath !== ':memory:') {
+        db.pragma('journal_mode = WAL');
+    }
+    return db;
+}
+export function initBuyerDatabase(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS ap_policy (
+        id TEXT PRIMARY KEY,
+        name TEXT NOT NULL,
+        wallet_address TEXT NOT NULL,
+        max_per_tx_base_units INTEGER NOT NULL CHECK (max_per_tx_base_units > 0),
+        rolling_budget_24h_base_units INTEGER NOT NULL CHECK (rolling_budget_24h_base_units > 0),
+        lifetime_budget_base_units INTEGER CHECK (lifetime_budget_base_units > 0),
+        whitelist_mode TEXT NOT NULL DEFAULT 'simple' CHECK (whitelist_mode IN ('strict', 'simple')),
+        whitelist_payees_json TEXT NOT NULL DEFAULT '[]',
+        whitelist_assets_json TEXT NOT NULL DEFAULT '[]',
+        whitelist_networks_json TEXT NOT NULL DEFAULT '[]',
+        whitelist_domains_json TEXT NOT NULL DEFAULT '[]',
+        circuit_max_rpm INTEGER NOT NULL DEFAULT 15,
+        circuit_consecutive_failures INTEGER NOT NULL DEFAULT 5,
+        circuit_cooldown_seconds INTEGER NOT NULL DEFAULT 300,
+        consecutive_failures INTEGER NOT NULL DEFAULT 0,
+        breaker_state TEXT NOT NULL DEFAULT 'CLOSED' CHECK (breaker_state IN ('CLOSED', 'OPEN', 'HALF_OPEN')),
+        tripped_at INTEGER,
+        is_frozen INTEGER NOT NULL DEFAULT 0 CHECK (is_frozen IN (0, 1)),
+        created_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL
+    );
+
+    CREATE TABLE IF NOT EXISTS ap_budget_ledger (
+        id TEXT PRIMARY KEY,
+        policy_id TEXT NOT NULL REFERENCES ap_policy(id),
+        wallet_address TEXT NOT NULL,
+        intent_id TEXT NOT NULL UNIQUE,
+        amount_base_units INTEGER NOT NULL CHECK (amount_base_units > 0 AND typeof(amount_base_units) = 'integer'),
+        state TEXT NOT NULL CHECK (state IN ('RESERVED', 'COMMITTED', 'RELEASED')),
+        created_at INTEGER NOT NULL,
+        expires_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL
+    );
+
+    CREATE TABLE IF NOT EXISTS ap_buyer_intent (
+        intent_id TEXT PRIMARY KEY,
+        policy_id TEXT NOT NULL REFERENCES ap_policy(id),
+        idempotency_key TEXT NOT NULL,
+        payer_address TEXT NOT NULL,
+        payee_address TEXT NOT NULL,
+        asset_address TEXT NOT NULL,
+        network_id TEXT NOT NULL,
+        amount_base_units INTEGER NOT NULL CHECK (amount_base_units > 0 AND typeof(amount_base_units) = 'integer'),
+        status TEXT NOT NULL CHECK (status IN ('CREATED', 'AUTHORIZED', 'PROCESSING', 'SIGNATURE_SENT', 'COMPLETED', 'SUCCEEDED', 'REJECTED', 'EXPIRED', 'CANCELLED', 'RECOVERY_HOLD')),
+        nonce TEXT,
+        valid_after INTEGER,
+        valid_before INTEGER,
+        raw_signature TEXT,
+        created_at INTEGER NOT NULL,
+        updated_at INTEGER NOT NULL
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_budget_rolling_sum 
+    ON ap_budget_ledger (policy_id, state, created_at, expires_at);
+
+    CREATE UNIQUE INDEX IF NOT EXISTS uq_buyer_intent_idempotency 
+    ON ap_buyer_intent (payer_address, idempotency_key);
+  `);
+}
+//# sourceMappingURL=db.js.map

package/dist/policy/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/policy/db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,QAA+C,MAAM,gBAAgB,CAAC;AAE7E,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,aAAa,GAAG,IAAI;IAEpB,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE;QAC9B,OAAO,EAAE,aAAa;KACvB,CAAC,CAAC;IAEH,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC7B,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC/B,EAAE,CAAC,MAAM,CAAC,kBAAkB,aAAa,EAAE,CAAC,CAAC;IAE7C,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1B,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAoB;IACpD,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DP,CAAC,CAAC;AACL,CAAC"}

package/dist/policy/errors.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Standardized policy engine error codes and exception types.
+ *
+ * All error codes are defined in policy-engine-spec.md §2 and are language-agnostic
+ * uppercase string constants.
+ */
+export declare enum PolicyErrorCode {
+    POLICY_FROZEN = "POLICY_FROZEN",
+    CIRCUIT_BREAKER_OPEN = "CIRCUIT_BREAKER_OPEN",
+    INVALID_AMOUNT_FORMAT = "INVALID_AMOUNT_FORMAT",
+    INVALID_REQUEST = "INVALID_REQUEST",
+    NETWORK_NOT_WHITELISTED = "NETWORK_NOT_WHITELISTED",
+    ASSET_NOT_WHITELISTED = "ASSET_NOT_WHITELISTED",
+    PAYEE_NOT_WHITELISTED = "PAYEE_NOT_WHITELISTED",
+    DOMAIN_NOT_WHITELISTED = "DOMAIN_NOT_WHITELISTED",
+    SINGLE_TX_CAP_EXCEEDED = "SINGLE_TX_CAP_EXCEEDED",
+    LIFETIME_BUDGET_EXCEEDED = "LIFETIME_BUDGET_EXCEEDED",
+    DAILY_BUDGET_EXCEEDED = "DAILY_BUDGET_EXCEEDED",
+    RESERVATION_EXPIRED = "RESERVATION_EXPIRED",
+    RESERVATION_ALREADY_FINALIZED = "RESERVATION_ALREADY_FINALIZED",
+    UNMETERED_CREDENTIAL = "UNMETERED_CREDENTIAL",
+    DUPLICATE_INTENT = "DUPLICATE_INTENT",
+    POLICY_SYSTEM_ERROR = "POLICY_SYSTEM_ERROR"
+}
+export declare class PolicyViolationError extends Error {
+    readonly code: PolicyErrorCode;
+    readonly detail: string;
+    constructor(code: PolicyErrorCode, detail?: string);
+    toString(): string;
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/policy/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/policy/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,oBAAY,eAAe;IAEzB,aAAa,kBAAkB;IAG/B,oBAAoB,yBAAyB;IAG7C,qBAAqB,0BAA0B;IAC/C,eAAe,oBAAoB;IAGnC,uBAAuB,4BAA4B;IACnD,qBAAqB,0BAA0B;IAC/C,qBAAqB,0BAA0B;IAC/C,sBAAsB,2BAA2B;IAGjD,sBAAsB,2BAA2B;IAGjD,wBAAwB,6BAA6B;IAGrD,qBAAqB,0BAA0B;IAG/C,mBAAmB,wBAAwB;IAC3C,6BAA6B,kCAAkC;IAC/D,oBAAoB,yBAAyB;IAC7C,gBAAgB,qBAAqB;IACrC,mBAAmB,wBAAwB;CAC5C;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,IAAI,EAAE,eAAe,EAAE,MAAM,SAAK;IAQrC,QAAQ,IAAI,MAAM;CAG5B"}

package/dist/policy/errors.js

@@ -0,0 +1,48 @@
+/**
+ * Standardized policy engine error codes and exception types.
+ *
+ * All error codes are defined in policy-engine-spec.md §2 and are language-agnostic
+ * uppercase string constants.
+ */
+export var PolicyErrorCode;
+(function (PolicyErrorCode) {
+    // 1. Administrative lock
+    PolicyErrorCode["POLICY_FROZEN"] = "POLICY_FROZEN";
+    // 2. Circuit breaker
+    PolicyErrorCode["CIRCUIT_BREAKER_OPEN"] = "CIRCUIT_BREAKER_OPEN";
+    // 3. Request format validation
+    PolicyErrorCode["INVALID_AMOUNT_FORMAT"] = "INVALID_AMOUNT_FORMAT";
+    PolicyErrorCode["INVALID_REQUEST"] = "INVALID_REQUEST";
+    // 4. Whitelist matrix (evaluated in order: network → asset → payee → domain)
+    PolicyErrorCode["NETWORK_NOT_WHITELISTED"] = "NETWORK_NOT_WHITELISTED";
+    PolicyErrorCode["ASSET_NOT_WHITELISTED"] = "ASSET_NOT_WHITELISTED";
+    PolicyErrorCode["PAYEE_NOT_WHITELISTED"] = "PAYEE_NOT_WHITELISTED";
+    PolicyErrorCode["DOMAIN_NOT_WHITELISTED"] = "DOMAIN_NOT_WHITELISTED";
+    // 5. Single-transaction cap
+    PolicyErrorCode["SINGLE_TX_CAP_EXCEEDED"] = "SINGLE_TX_CAP_EXCEEDED";
+    // 6. Lifetime budget
+    PolicyErrorCode["LIFETIME_BUDGET_EXCEEDED"] = "LIFETIME_BUDGET_EXCEEDED";
+    // 7. Rolling 24h budget
+    PolicyErrorCode["DAILY_BUDGET_EXCEEDED"] = "DAILY_BUDGET_EXCEEDED";
+    // Reservation lifecycle & system errors
+    PolicyErrorCode["RESERVATION_EXPIRED"] = "RESERVATION_EXPIRED";
+    PolicyErrorCode["RESERVATION_ALREADY_FINALIZED"] = "RESERVATION_ALREADY_FINALIZED";
+    PolicyErrorCode["UNMETERED_CREDENTIAL"] = "UNMETERED_CREDENTIAL";
+    PolicyErrorCode["DUPLICATE_INTENT"] = "DUPLICATE_INTENT";
+    PolicyErrorCode["POLICY_SYSTEM_ERROR"] = "POLICY_SYSTEM_ERROR";
+})(PolicyErrorCode || (PolicyErrorCode = {}));
+export class PolicyViolationError extends Error {
+    code;
+    detail;
+    constructor(code, detail = '') {
+        const message = detail ? `${code}: ${detail}` : code;
+        super(message);
+        this.name = 'PolicyViolationError';
+        this.code = code;
+        this.detail = detail;
+    }
+    toString() {
+        return `PolicyViolationError(code=${this.code}, detail=${JSON.stringify(this.detail)})`;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/policy/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/policy/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAN,IAAY,eAgCX;AAhCD,WAAY,eAAe;IACzB,yBAAyB;IACzB,kDAA+B,CAAA;IAE/B,qBAAqB;IACrB,gEAA6C,CAAA;IAE7C,+BAA+B;IAC/B,kEAA+C,CAAA;IAC/C,sDAAmC,CAAA;IAEnC,6EAA6E;IAC7E,sEAAmD,CAAA;IACnD,kEAA+C,CAAA;IAC/C,kEAA+C,CAAA;IAC/C,oEAAiD,CAAA;IAEjD,4BAA4B;IAC5B,oEAAiD,CAAA;IAEjD,qBAAqB;IACrB,wEAAqD,CAAA;IAErD,wBAAwB;IACxB,kEAA+C,CAAA;IAE/C,wCAAwC;IACxC,8DAA2C,CAAA;IAC3C,kFAA+D,CAAA;IAC/D,gEAA6C,CAAA;IAC7C,wDAAqC,CAAA;IACrC,8DAA2C,CAAA;AAC7C,CAAC,EAhCW,eAAe,KAAf,eAAe,QAgC1B;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,CAAkB;IACtB,MAAM,CAAS;IAExB,YAAY,IAAqB,EAAE,MAAM,GAAG,EAAE;QAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACrD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAEQ,QAAQ;QACf,OAAO,6BAA6B,IAAI,CAAC,IAAI,YAAY,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;IAC1F,CAAC;CACF"}

package/dist/policy/evaluator.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Static rule evaluation logic for AgentPay Policy Engine.
+ *
+ * Evaluates deterministic static guardrails according to specs/policy-engine-spec.md §3:
+ *   1. Administrative lock (is_frozen) -> POLICY_FROZEN
+ *   2. Request format -> INVALID_AMOUNT_FORMAT (for amount) / INVALID_REQUEST (for other fields)
+ *   3. Whitelist matrix (Order: Network -> Asset -> Payee -> Domain)
+ *   4. Single-Transaction Cap -> SINGLE_TX_CAP_EXCEEDED
+ *   5. Lifetime Budget Ceiling -> LIFETIME_BUDGET_EXCEEDED
+ *
+ * Pure in-memory rule validation without external database calls.
+ */
+import { PolicyErrorCode } from './errors.js';
+import { PaymentRequest, PolicyConfig } from './models.js';
+export interface StaticEvaluationResult {
+    readonly passed: boolean;
+    readonly errorCode?: PolicyErrorCode | null;
+    readonly reason?: string | null;
+}
+export declare function evaluateStaticRules(config: PolicyConfig, request: PaymentRequest, lifetimeSpent?: bigint): StaticEvaluationResult;
+export declare function evaluateMeteredRules(config: PolicyConfig, amount: bigint, domain: string | null | undefined, lifetimeSpent?: bigint): StaticEvaluationResult;
+//# sourceMappingURL=evaluator.d.ts.map

package/dist/policy/evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../src/policy/evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,cAAc,EACd,YAAY,EAIb,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,cAAc,EACvB,aAAa,SAAK,GACjB,sBAAsB,CAwGxB;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACjC,aAAa,SAAK,GACjB,sBAAsB,CAsDxB"}

package/dist/policy/evaluator.js

@@ -0,0 +1,152 @@
+/**
+ * Static rule evaluation logic for AgentPay Policy Engine.
+ *
+ * Evaluates deterministic static guardrails according to specs/policy-engine-spec.md §3:
+ *   1. Administrative lock (is_frozen) -> POLICY_FROZEN
+ *   2. Request format -> INVALID_AMOUNT_FORMAT (for amount) / INVALID_REQUEST (for other fields)
+ *   3. Whitelist matrix (Order: Network -> Asset -> Payee -> Domain)
+ *   4. Single-Transaction Cap -> SINGLE_TX_CAP_EXCEEDED
+ *   5. Lifetime Budget Ceiling -> LIFETIME_BUDGET_EXCEEDED
+ *
+ * Pure in-memory rule validation without external database calls.
+ */
+import { PolicyErrorCode } from './errors.js';
+import { SQLITE_MAX_INT, WhitelistMode, normalizeDomainHost, } from './models.js';
+export function evaluateStaticRules(config, request, lifetimeSpent = 0n) {
+    // 1. Administrative lock (is_frozen)
+    if (config.isFrozen) {
+        return {
+            passed: false,
+            errorCode: PolicyErrorCode.POLICY_FROZEN,
+            reason: `Policy ${config.id} is administratively frozen`,
+        };
+    }
+    // 2. Format validation (Amount must be strictly positive bigint within SQLite 64-bit bounds)
+    if (typeof request.amount !== 'bigint' || request.amount <= 0n || request.amount > SQLITE_MAX_INT) {
+        return {
+            passed: false,
+            errorCode: PolicyErrorCode.INVALID_AMOUNT_FORMAT,
+            reason: `Invalid payment amount: ${String(request.amount)}`,
+        };
+    }
+    if (typeof request.intentId !== 'string' ||
+        !request.intentId.trim() ||
+        typeof request.ttlSeconds !== 'number' ||
+        !Number.isInteger(request.ttlSeconds) ||
+        request.ttlSeconds <= 0 ||
+        request.ttlSeconds > 86400) {
+        return {
+            passed: false,
+            errorCode: PolicyErrorCode.INVALID_REQUEST,
+            reason: 'Invalid payment request parameters',
+        };
+    }
+    // 3. Whitelist Matrix (EVM only). AgentPay internal wallet ledger uses required gateway domain.
+    const isStrict = config.whitelistMode === WhitelistMode.STRICT;
+    if (!request.isAgentpayWallet) {
+        if ((isStrict || config.whitelistNetworks.size > 0) && !config.whitelistNetworks.has(request.network)) {
+            return {
+                passed: false,
+                errorCode: PolicyErrorCode.NETWORK_NOT_WHITELISTED,
+                reason: `Network ${request.network} is not in whitelisted networks`,
+            };
+        }
+        if ((isStrict || config.whitelistAssets.size > 0) && !config.whitelistAssets.has(request.asset)) {
+            return {
+                passed: false,
+                errorCode: PolicyErrorCode.ASSET_NOT_WHITELISTED,
+                reason: `Asset ${request.asset} is not in whitelisted assets`,
+            };
+        }
+        if ((isStrict || config.whitelistPayees.size > 0) && !config.whitelistPayees.has(request.payee)) {
+            return {
+                passed: false,
+                errorCode: PolicyErrorCode.PAYEE_NOT_WHITELISTED,
+                reason: `Payee ${request.payee} is not in whitelisted payees`,
+            };
+        }
+    }
+    if (request.isAgentpayWallet && request.domain === null) {
+        return {
+            passed: false,
+            errorCode: PolicyErrorCode.DOMAIN_NOT_WHITELISTED,
+            reason: 'AgentPay wallet requests require a whitelisted gateway domain',
+        };
+    }
+    if (request.domain !== null) {
+        const enforceDomain = request.isAgentpayWallet || isStrict || config.whitelistDomains.size > 0;
+        if (enforceDomain && !config.whitelistDomains.has(request.domain)) {
+            return {
+                passed: false,
+                errorCode: PolicyErrorCode.DOMAIN_NOT_WHITELISTED,
+                reason: `Domain ${request.domain} is not in whitelisted domains`,
+            };
+        }
+    }
+    // 4. Single-Transaction Cap
+    if (request.amount > config.maxPerTxBaseUnits) {
+        return {
+            passed: false,
+            errorCode: PolicyErrorCode.SINGLE_TX_CAP_EXCEEDED,
+            reason: `Amount ${request.amount.toString()} exceeds single transaction cap of ${config.maxPerTxBaseUnits.toString()}`,
+        };
+    }
+    // 5. Lifetime Budget Ceiling (if configured)
+    if (config.lifetimeBudgetBaseUnits !== null &&
+        lifetimeSpent + request.amount > config.lifetimeBudgetBaseUnits) {
+        return {
+            passed: false,
+            errorCode: PolicyErrorCode.LIFETIME_BUDGET_EXCEEDED,
+            reason: `Lifetime spend (${lifetimeSpent.toString()} + ${request.amount.toString()}) exceeds limit of ${config.lifetimeBudgetBaseUnits.toString()}`,
+        };
+    }
+    return { passed: true };
+}
+export function evaluateMeteredRules(config, amount, domain, lifetimeSpent = 0n) {
+    if (config.isFrozen) {
+        return {
+            passed: false,
+            errorCode: PolicyErrorCode.POLICY_FROZEN,
+            reason: `Policy ${config.id} is administratively frozen`,
+        };
+    }
+    if (typeof amount !== 'bigint' || amount <= 0n || amount > SQLITE_MAX_INT) {
+        return {
+            passed: false,
+            errorCode: PolicyErrorCode.INVALID_AMOUNT_FORMAT,
+            reason: `Invalid estimated amount: ${String(amount)}`,
+        };
+    }
+    if (domain !== undefined && domain !== null && typeof domain !== 'string') {
+        return {
+            passed: false,
+            errorCode: PolicyErrorCode.INVALID_REQUEST,
+            reason: `Invalid domain type: ${typeof domain}`,
+        };
+    }
+    const host = typeof domain === 'string' ? normalizeDomainHost(domain) : '';
+    if (!host || !config.whitelistDomains.has(host)) {
+        return {
+            passed: false,
+            errorCode: PolicyErrorCode.DOMAIN_NOT_WHITELISTED,
+            reason: `Domain ${JSON.stringify(domain)} is not in whitelisted domains`,
+        };
+    }
+    if (amount > config.maxPerTxBaseUnits) {
+        return {
+            passed: false,
+            errorCode: PolicyErrorCode.SINGLE_TX_CAP_EXCEEDED,
+            reason: `Amount ${amount.toString()} exceeds single transaction cap of ${config.maxPerTxBaseUnits.toString()}`,
+        };
+    }
+    if (config.lifetimeBudgetBaseUnits !== null &&
+        lifetimeSpent + amount > config.lifetimeBudgetBaseUnits) {
+        return {
+            passed: false,
+            errorCode: PolicyErrorCode.LIFETIME_BUDGET_EXCEEDED,
+            reason: `Lifetime spend (${lifetimeSpent.toString()} + ${amount.toString()}) exceeds limit of ${config.lifetimeBudgetBaseUnits.toString()}`,
+        };
+    }
+    return { passed: true };
+}
+//# sourceMappingURL=evaluator.js.map

package/dist/policy/evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.js","sourceRoot":"","sources":["../../src/policy/evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAGL,cAAc,EACd,aAAa,EACb,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAQrB,MAAM,UAAU,mBAAmB,CACjC,MAAoB,EACpB,OAAuB,EACvB,aAAa,GAAG,EAAE;IAElB,qCAAqC;IACrC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,eAAe,CAAC,aAAa;YACxC,MAAM,EAAE,UAAU,MAAM,CAAC,EAAE,6BAA6B;SACzD,CAAC;IACJ,CAAC;IAED,6FAA6F;IAC7F,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QAClG,OAAO;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,eAAe,CAAC,qBAAqB;YAChD,MAAM,EAAE,2BAA2B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;SAC5D,CAAC;IACJ,CAAC;IAED,IACE,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QACpC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE;QACxB,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ;QACtC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC;QACrC,OAAO,CAAC,UAAU,IAAI,CAAC;QACvB,OAAO,CAAC,UAAU,GAAG,KAAK,EAC1B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,eAAe,CAAC,eAAe;YAC1C,MAAM,EAAE,oCAAoC;SAC7C,CAAC;IACJ,CAAC;IAED,gGAAgG;IAChG,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,KAAK,aAAa,CAAC,MAAM,CAAC;IAE/D,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC9B,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACtG,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,eAAe,CAAC,uBAAuB;gBAClD,MAAM,EAAE,WAAW,OAAO,CAAC,OAAO,iCAAiC;aACpE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChG,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,eAAe,CAAC,qBAAqB;gBAChD,MAAM,EAAE,SAAS,OAAO,CAAC,KAAK,+BAA+B;aAC9D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChG,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,eAAe,CAAC,qBAAqB;gBAChD,MAAM,EAAE,SAAS,OAAO,CAAC,KAAK,+BAA+B;aAC9D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACxD,OAAO;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,eAAe,CAAC,sBAAsB;YACjD,MAAM,EAAE,+DAA+D;SACxE,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC5B,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,IAAI,QAAQ,IAAI,MAAM,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;QAC/F,IAAI,aAAa,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,eAAe,CAAC,sBAAsB;gBACjD,MAAM,EAAE,UAAU,OAAO,CAAC,MAAM,gCAAgC;aACjE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC9C,OAAO;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,eAAe,CAAC,sBAAsB;YACjD,MAAM,EAAE,UAAU,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,sCAAsC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE;SACvH,CAAC;IACJ,CAAC;IAED,6CAA6C;IAC7C,IACE,MAAM,CAAC,uBAAuB,KAAK,IAAI;QACvC,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,uBAAuB,EAC/D,CAAC;QACD,OAAO;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,eAAe,CAAC,wBAAwB;YACnD,MAAM,EAAE,mBAAmB,aAAa,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,sBAAsB,MAAM,CAAC,uBAAuB,CAAC,QAAQ,EAAE,EAAE;SACpJ,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAoB,EACpB,MAAc,EACd,MAAiC,EACjC,aAAa,GAAG,EAAE;IAElB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,eAAe,CAAC,aAAa;YACxC,MAAM,EAAE,UAAU,MAAM,CAAC,EAAE,6BAA6B;SACzD,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,GAAG,cAAc,EAAE,CAAC;QAC1E,OAAO;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,eAAe,CAAC,qBAAqB;YAChD,MAAM,EAAE,6BAA6B,MAAM,CAAC,MAAM,CAAC,EAAE;SACtD,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1E,OAAO;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,eAAe,CAAC,eAAe;YAC1C,MAAM,EAAE,wBAAwB,OAAO,MAAM,EAAE;SAChD,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,OAAO;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,eAAe,CAAC,sBAAsB;YACjD,MAAM,EAAE,UAAU,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gCAAgC;SACzE,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACtC,OAAO;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,eAAe,CAAC,sBAAsB;YACjD,MAAM,EAAE,UAAU,MAAM,CAAC,QAAQ,EAAE,sCAAsC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE;SAC/G,CAAC;IACJ,CAAC;IAED,IACE,MAAM,CAAC,uBAAuB,KAAK,IAAI;QACvC,aAAa,GAAG,MAAM,GAAG,MAAM,CAAC,uBAAuB,EACvD,CAAC;QACD,OAAO;YACL,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,eAAe,CAAC,wBAAwB;YACnD,MAAM,EAAE,mBAAmB,aAAa,CAAC,QAAQ,EAAE,MAAM,MAAM,CAAC,QAAQ,EAAE,sBAAsB,MAAM,CAAC,uBAAuB,CAAC,QAAQ,EAAE,EAAE;SAC5I,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC"}

package/dist/policy/index.d.ts

@@ -0,0 +1,7 @@
+export * from './errors.js';
+export * from './models.js';
+export * from './interfaces.js';
+export * from './evaluator.js';
+export * from './db.js';
+export * from './sqlite-engine.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/policy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/policy/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,SAAS,CAAC;AACxB,cAAc,oBAAoB,CAAC"}

package/dist/policy/index.js

@@ -0,0 +1,7 @@
+export * from './errors.js';
+export * from './models.js';
+export * from './interfaces.js';
+export * from './evaluator.js';
+export * from './db.js';
+export * from './sqlite-engine.js';
+//# sourceMappingURL=index.js.map

package/dist/policy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/policy/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,SAAS,CAAC;AACxB,cAAc,oBAAoB,CAAC"}