palaryn 0.1.0

package/dist/tests/unit/oauth.test.js

@@ -0,0 +1,281 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const pkce_1 = require("../../src/auth/pkce");
+const session_1 = require("../../src/auth/session");
+const providers_1 = require("../../src/auth/providers");
+// ===========================================================================
+// PKCE
+// ===========================================================================
+describe('PKCE', () => {
+    describe('generateCodeVerifier', () => {
+        it('returns a string of 43 characters (base64url of 32 bytes)', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            expect(typeof verifier).toBe('string');
+            // base64url encoding of 32 bytes = 43 chars
+            expect(verifier.length).toBe(43);
+        });
+        it('only contains base64url-safe characters', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            expect(verifier).toMatch(/^[A-Za-z0-9_-]+$/);
+        });
+        it('generates unique values on each call', () => {
+            const a = (0, pkce_1.generateCodeVerifier)();
+            const b = (0, pkce_1.generateCodeVerifier)();
+            expect(a).not.toBe(b);
+        });
+    });
+    describe('generateCodeChallenge', () => {
+        it('returns a base64url-encoded SHA-256 hash of the verifier', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            const challenge = (0, pkce_1.generateCodeChallenge)(verifier);
+            expect(typeof challenge).toBe('string');
+            expect(challenge).toMatch(/^[A-Za-z0-9_-]+$/);
+        });
+        it('is deterministic (same verifier produces same challenge)', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            const c1 = (0, pkce_1.generateCodeChallenge)(verifier);
+            const c2 = (0, pkce_1.generateCodeChallenge)(verifier);
+            expect(c1).toBe(c2);
+        });
+        it('produces different challenges for different verifiers', () => {
+            const v1 = (0, pkce_1.generateCodeVerifier)();
+            const v2 = (0, pkce_1.generateCodeVerifier)();
+            expect((0, pkce_1.generateCodeChallenge)(v1)).not.toBe((0, pkce_1.generateCodeChallenge)(v2));
+        });
+        it('returns a 43-char challenge (SHA-256 = 32 bytes -> base64url)', () => {
+            const verifier = 'test-verifier-value';
+            const challenge = (0, pkce_1.generateCodeChallenge)(verifier);
+            expect(challenge.length).toBe(43);
+        });
+    });
+    describe('generateNonce', () => {
+        it('returns a hex string of length 64 (32 bytes)', () => {
+            const nonce = (0, pkce_1.generateNonce)();
+            expect(typeof nonce).toBe('string');
+            expect(nonce.length).toBe(64);
+            expect(nonce).toMatch(/^[0-9a-f]+$/);
+        });
+        it('generates unique values on each call', () => {
+            const a = (0, pkce_1.generateNonce)();
+            const b = (0, pkce_1.generateNonce)();
+            expect(a).not.toBe(b);
+        });
+    });
+});
+// ===========================================================================
+// Session Encryption
+// ===========================================================================
+describe('Session Encryption', () => {
+    const SECRET = 'test-encryption-secret-key-for-aes';
+    describe('encryptState / decryptState', () => {
+        it('round-trips a state object correctly', () => {
+            const state = {
+                provider: 'google',
+                code_verifier: 'abc123',
+                nonce: 'nonce-xyz',
+                redirect_uri: 'https://example.com/callback',
+                created_at: Date.now(),
+            };
+            const encrypted = (0, session_1.encryptState)(state, SECRET);
+            const decrypted = (0, session_1.decryptState)(encrypted, SECRET);
+            expect(decrypted).toEqual(state);
+        });
+        it('produces a base64url-encoded string', () => {
+            const state = {
+                provider: 'github',
+                nonce: 'nonce-abc',
+                redirect_uri: 'https://app.test/cb',
+                created_at: Date.now(),
+            };
+            const encrypted = (0, session_1.encryptState)(state, SECRET);
+            expect(typeof encrypted).toBe('string');
+            // base64url chars
+            expect(encrypted).toMatch(/^[A-Za-z0-9_-]+$/);
+        });
+        it('produces different ciphertext for the same plaintext (random IV)', () => {
+            const state = {
+                provider: 'google',
+                nonce: 'same-nonce',
+                redirect_uri: 'https://example.com/cb',
+                created_at: 1000,
+            };
+            const e1 = (0, session_1.encryptState)(state, SECRET);
+            const e2 = (0, session_1.encryptState)(state, SECRET);
+            expect(e1).not.toBe(e2);
+        });
+        it('throws when decrypting with the wrong key', () => {
+            const state = {
+                provider: 'google',
+                nonce: 'nonce',
+                redirect_uri: 'https://example.com',
+                created_at: Date.now(),
+            };
+            const encrypted = (0, session_1.encryptState)(state, SECRET);
+            expect(() => (0, session_1.decryptState)(encrypted, 'wrong-secret-key')).toThrow();
+        });
+        it('throws when decrypting tampered ciphertext', () => {
+            const state = {
+                provider: 'google',
+                nonce: 'nonce',
+                redirect_uri: 'https://example.com',
+                created_at: Date.now(),
+            };
+            const encrypted = (0, session_1.encryptState)(state, SECRET);
+            // Tamper with a character
+            const tampered = encrypted.slice(0, -1) + (encrypted.endsWith('A') ? 'B' : 'A');
+            expect(() => (0, session_1.decryptState)(tampered, SECRET)).toThrow();
+        });
+    });
+    describe('encryptToken / decryptToken', () => {
+        it('round-trips a token string correctly', () => {
+            const token = 'ya29.some-google-oauth-access-token';
+            const encrypted = (0, session_1.encryptToken)(token, SECRET);
+            const decrypted = (0, session_1.decryptToken)(encrypted, SECRET);
+            expect(decrypted).toBe(token);
+        });
+        it('produces a base64-encoded string', () => {
+            const encrypted = (0, session_1.encryptToken)('my-token', SECRET);
+            expect(typeof encrypted).toBe('string');
+            // base64 chars (includes + / =)
+            expect(encrypted).toMatch(/^[A-Za-z0-9+/=]+$/);
+        });
+        it('produces different ciphertext for the same token (random IV)', () => {
+            const token = 'same-token-value';
+            const e1 = (0, session_1.encryptToken)(token, SECRET);
+            const e2 = (0, session_1.encryptToken)(token, SECRET);
+            expect(e1).not.toBe(e2);
+        });
+        it('throws when decrypting with the wrong key', () => {
+            const encrypted = (0, session_1.encryptToken)('secret-token', SECRET);
+            expect(() => (0, session_1.decryptToken)(encrypted, 'wrong-key')).toThrow();
+        });
+        it('handles empty string', () => {
+            const encrypted = (0, session_1.encryptToken)('', SECRET);
+            const decrypted = (0, session_1.decryptToken)(encrypted, SECRET);
+            expect(decrypted).toBe('');
+        });
+        it('handles long tokens', () => {
+            const longToken = 'x'.repeat(10000);
+            const encrypted = (0, session_1.encryptToken)(longToken, SECRET);
+            const decrypted = (0, session_1.decryptToken)(encrypted, SECRET);
+            expect(decrypted).toBe(longToken);
+        });
+    });
+});
+// ===========================================================================
+// Provider URL Building
+// ===========================================================================
+describe('Provider URL Building', () => {
+    describe('buildGoogleAuthUrl', () => {
+        const config = {
+            client_id: 'google-client-id-123',
+            client_secret: 'google-client-secret-456',
+        };
+        const redirectUri = 'https://app.example.com/auth/google/callback';
+        const state = 'test-state-string';
+        it('returns an object with url, code_verifier, and code_challenge', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            const result = (0, providers_1.buildGoogleAuthUrl)(config, redirectUri, state, verifier);
+            expect(result).toHaveProperty('url');
+            expect(result).toHaveProperty('code_verifier');
+            expect(result).toHaveProperty('code_challenge');
+        });
+        it('builds a URL targeting accounts.google.com', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            const result = (0, providers_1.buildGoogleAuthUrl)(config, redirectUri, state, verifier);
+            expect(result.url).toContain('https://accounts.google.com/o/oauth2/v2/auth');
+        });
+        it('includes client_id parameter', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            const result = (0, providers_1.buildGoogleAuthUrl)(config, redirectUri, state, verifier);
+            expect(result.url).toContain('client_id=google-client-id-123');
+        });
+        it('includes redirect_uri parameter', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            const result = (0, providers_1.buildGoogleAuthUrl)(config, redirectUri, state, verifier);
+            expect(result.url).toContain('redirect_uri=' + encodeURIComponent(redirectUri));
+        });
+        it('includes response_type=code', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            const result = (0, providers_1.buildGoogleAuthUrl)(config, redirectUri, state, verifier);
+            expect(result.url).toContain('response_type=code');
+        });
+        it('includes scope with openid email profile', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            const result = (0, providers_1.buildGoogleAuthUrl)(config, redirectUri, state, verifier);
+            expect(result.url).toContain('scope=openid+email+profile');
+        });
+        it('includes the state parameter', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            const result = (0, providers_1.buildGoogleAuthUrl)(config, redirectUri, state, verifier);
+            expect(result.url).toContain('state=test-state-string');
+        });
+        it('includes PKCE code_challenge and code_challenge_method=S256', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            const result = (0, providers_1.buildGoogleAuthUrl)(config, redirectUri, state, verifier);
+            expect(result.url).toContain('code_challenge=');
+            expect(result.url).toContain('code_challenge_method=S256');
+        });
+        it('code_challenge matches the challenge derived from the verifier', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            const result = (0, providers_1.buildGoogleAuthUrl)(config, redirectUri, state, verifier);
+            const expectedChallenge = (0, pkce_1.generateCodeChallenge)(verifier);
+            expect(result.code_challenge).toBe(expectedChallenge);
+            expect(result.url).toContain(`code_challenge=${expectedChallenge}`);
+        });
+        it('uses the passed code_verifier', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            const result = (0, providers_1.buildGoogleAuthUrl)(config, redirectUri, state, verifier);
+            expect(result.code_verifier).toBe(verifier);
+        });
+        it('includes access_type=offline', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            const result = (0, providers_1.buildGoogleAuthUrl)(config, redirectUri, state, verifier);
+            expect(result.url).toContain('access_type=offline');
+        });
+        it('includes prompt=consent', () => {
+            const verifier = (0, pkce_1.generateCodeVerifier)();
+            const result = (0, providers_1.buildGoogleAuthUrl)(config, redirectUri, state, verifier);
+            expect(result.url).toContain('prompt=consent');
+        });
+    });
+    describe('buildGitHubAuthUrl', () => {
+        const config = {
+            client_id: 'github-client-id-789',
+            client_secret: 'github-client-secret-012',
+        };
+        const redirectUri = 'https://app.example.com/auth/github/callback';
+        const state = 'github-state-abc';
+        it('returns a string URL', () => {
+            const url = (0, providers_1.buildGitHubAuthUrl)(config, redirectUri, state);
+            expect(typeof url).toBe('string');
+        });
+        it('builds a URL targeting github.com/login/oauth/authorize', () => {
+            const url = (0, providers_1.buildGitHubAuthUrl)(config, redirectUri, state);
+            expect(url).toContain('https://github.com/login/oauth/authorize');
+        });
+        it('includes client_id parameter', () => {
+            const url = (0, providers_1.buildGitHubAuthUrl)(config, redirectUri, state);
+            expect(url).toContain('client_id=github-client-id-789');
+        });
+        it('includes redirect_uri parameter', () => {
+            const url = (0, providers_1.buildGitHubAuthUrl)(config, redirectUri, state);
+            expect(url).toContain('redirect_uri=' + encodeURIComponent(redirectUri));
+        });
+        it('includes scope with read:user and user:email', () => {
+            const url = (0, providers_1.buildGitHubAuthUrl)(config, redirectUri, state);
+            // URL-encoded space between scopes
+            expect(url).toContain('scope=read%3Auser+user%3Aemail');
+        });
+        it('includes the state parameter', () => {
+            const url = (0, providers_1.buildGitHubAuthUrl)(config, redirectUri, state);
+            expect(url).toContain('state=github-state-abc');
+        });
+        it('does not include PKCE parameters (GitHub does not support PKCE)', () => {
+            const url = (0, providers_1.buildGitHubAuthUrl)(config, redirectUri, state);
+            expect(url).not.toContain('code_challenge');
+            expect(url).not.toContain('code_verifier');
+        });
+    });
+});
+//# sourceMappingURL=oauth.test.js.map

package/dist/tests/unit/oauth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.test.js","sourceRoot":"","sources":["../../../tests/unit/oauth.test.ts"],"names":[],"mappings":";;AAAA,8CAAiG;AACjG,oDAAgG;AAChG,wDAAkF;AAGlF,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;IACpB,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,CAAC,OAAO,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvC,4CAA4C;YAC5C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,CAAC,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACjC,MAAM,CAAC,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACjC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,SAAS,GAAG,IAAA,4BAAqB,EAAC,QAAQ,CAAC,CAAC;YAClD,MAAM,CAAC,OAAO,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,EAAE,GAAG,IAAA,4BAAqB,EAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,EAAE,GAAG,IAAA,4BAAqB,EAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,EAAE,GAAG,IAAA,2BAAoB,GAAE,CAAC;YAClC,MAAM,EAAE,GAAG,IAAA,2BAAoB,GAAE,CAAC;YAClC,MAAM,CAAC,IAAA,4BAAqB,EAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAA,4BAAqB,EAAC,EAAE,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;YACvE,MAAM,QAAQ,GAAG,qBAAqB,CAAC;YACvC,MAAM,SAAS,GAAG,IAAA,4BAAqB,EAAC,QAAQ,CAAC,CAAC;YAClD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,KAAK,GAAG,IAAA,oBAAa,GAAE,CAAC;YAC9B,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,CAAC,GAAG,IAAA,oBAAa,GAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,IAAA,oBAAa,GAAE,CAAC;YAC1B,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,MAAM,GAAG,oCAAoC,CAAC;IAEpD,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,KAAK,GAAmB;gBAC5B,QAAQ,EAAE,QAAQ;gBAClB,aAAa,EAAE,QAAQ;gBACvB,KAAK,EAAE,WAAW;gBAClB,YAAY,EAAE,8BAA8B;gBAC5C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;aACvB,CAAC;YACF,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,KAAK,GAAmB;gBAC5B,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,WAAW;gBAClB,YAAY,EAAE,qBAAqB;gBACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;aACvB,CAAC;YACF,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9C,MAAM,CAAC,OAAO,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxC,kBAAkB;YAClB,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;YAC1E,MAAM,KAAK,GAAmB;gBAC5B,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,YAAY;gBACnB,YAAY,EAAE,wBAAwB;gBACtC,UAAU,EAAE,IAAI;aACjB,CAAC;YACF,MAAM,EAAE,GAAG,IAAA,sBAAY,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,EAAE,GAAG,IAAA,sBAAY,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,KAAK,GAAmB;gBAC5B,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,OAAO;gBACd,YAAY,EAAE,qBAAqB;gBACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;aACvB,CAAC;YACF,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9C,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAY,EAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,KAAK,GAAmB;gBAC5B,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,OAAO;gBACd,YAAY,EAAE,qBAAqB;gBACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;aACvB,CAAC;YACF,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9C,0BAA0B;YAC1B,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAChF,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;YAC9C,MAAM,KAAK,GAAG,qCAAqC,CAAC;YACpD,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,CAAC,OAAO,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxC,gCAAgC;YAChC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;YACtE,MAAM,KAAK,GAAG,kBAAkB,CAAC;YACjC,MAAM,EAAE,GAAG,IAAA,sBAAY,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,EAAE,GAAG,IAAA,sBAAY,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YACvD,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAY,EAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;YAC9B,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;YAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,KAAM,CAAC,CAAC;YACrC,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,IAAA,sBAAY,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,MAAM,MAAM,GAAwB;YAClC,SAAS,EAAE,sBAAsB;YACjC,aAAa,EAAE,0BAA0B;SAC1C,CAAC;QACF,MAAM,WAAW,GAAG,8CAA8C,CAAC;QACnE,MAAM,KAAK,GAAG,mBAAmB,CAAC;QAElC,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;YACvE,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YAC/C,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,8CAA8C,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,eAAe,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAChD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;YACxE,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,iBAAiB,GAAG,IAAA,4BAAqB,EAAC,QAAQ,CAAC,CAAC;YAC1D,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,kBAAkB,iBAAiB,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;YACjC,MAAM,QAAQ,GAAG,IAAA,2BAAoB,GAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,MAAM,MAAM,GAAwB;YAClC,SAAS,EAAE,sBAAsB;YACjC,aAAa,EAAE,0BAA0B;SAC1C,CAAC;QACF,MAAM,WAAW,GAAG,8CAA8C,CAAC;QACnE,MAAM,KAAK,GAAG,kBAAkB,CAAC;QAEjC,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;YAC9B,MAAM,GAAG,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YACjE,MAAM,GAAG,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,MAAM,GAAG,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,GAAG,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,eAAe,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,GAAG,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YAC3D,mCAAmC;YACnC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,gCAAgC,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,MAAM,GAAG,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,MAAM,GAAG,GAAG,IAAA,8BAAkB,EAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/unit/opa-circuit-breaker.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=opa-circuit-breaker.test.d.ts.map

package/dist/tests/unit/opa-circuit-breaker.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opa-circuit-breaker.test.d.ts","sourceRoot":"","sources":["../../../tests/unit/opa-circuit-breaker.test.ts"],"names":[],"mappings":""}

package/dist/tests/unit/opa-circuit-breaker.test.js

@@ -0,0 +1,297 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const opa_engine_1 = require("../../src/policy/opa-engine");
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function buildToolCall(overrides = {}) {
+    return {
+        tool_call_id: 'tc-cb-001',
+        task_id: 'task-cb-001',
+        workspace_id: 'ws-default',
+        actor: {
+            type: 'agent',
+            id: 'agent-1',
+            ...(overrides.actor || {}),
+        },
+        source: {
+            platform: 'langgraph',
+            ...(overrides.source || {}),
+        },
+        tool: {
+            name: 'http.request',
+            capability: 'read',
+            ...(overrides.tool || {}),
+        },
+        args: {
+            method: 'GET',
+            url: 'https://api.github.com/repos',
+            ...(overrides.args || {}),
+        },
+        context: overrides.context,
+        constraints: overrides.constraints,
+        timestamp: overrides.timestamp,
+    };
+}
+// ---------------------------------------------------------------------------
+// Circuit Breaker Tests
+// ---------------------------------------------------------------------------
+describe('OPAEngine - Circuit breaker', () => {
+    let engine;
+    beforeEach(() => {
+        engine = new opa_engine_1.OPAEngine({
+            enabled: true,
+            server_url: 'http://127.0.0.1:9999', // non-existent, we'll mock httpPost
+            timeout_ms: 500,
+            fallback_decision: 'deny',
+        });
+    });
+    // -------------------------------------------------------------------------
+    // Normal operation
+    // -------------------------------------------------------------------------
+    describe('normal operation', () => {
+        test('circuit stays closed on successful OPA responses', async () => {
+            jest.spyOn(engine, 'httpPost').mockResolvedValue({
+                result: { decision: 'allow', rule_id: 'test_rule' },
+            });
+            const result = await engine.evaluate(buildToolCall());
+            expect(result.decision).toBe('allow');
+            const state = engine.getCircuitState();
+            expect(state.state).toBe('closed');
+            expect(state.failures).toBe(0);
+        });
+        test('circuit stays closed after multiple successes', async () => {
+            jest.spyOn(engine, 'httpPost').mockResolvedValue({
+                result: { decision: 'allow' },
+            });
+            for (let i = 0; i < 10; i++) {
+                await engine.evaluate(buildToolCall());
+            }
+            const state = engine.getCircuitState();
+            expect(state.state).toBe('closed');
+            expect(state.failures).toBe(0);
+        });
+    });
+    // -------------------------------------------------------------------------
+    // Progressive failures
+    // -------------------------------------------------------------------------
+    describe('progressive failures', () => {
+        test('1 failure: circuit stays closed', async () => {
+            jest.spyOn(engine, 'httpPost').mockRejectedValue(new Error('connection refused'));
+            await engine.evaluate(buildToolCall());
+            const state = engine.getCircuitState();
+            expect(state.state).toBe('closed');
+            expect(state.failures).toBe(1);
+        });
+        test('2 failures: circuit stays closed', async () => {
+            jest.spyOn(engine, 'httpPost').mockRejectedValue(new Error('connection refused'));
+            await engine.evaluate(buildToolCall());
+            await engine.evaluate(buildToolCall());
+            const state = engine.getCircuitState();
+            expect(state.state).toBe('closed');
+            expect(state.failures).toBe(2);
+        });
+        test('3 failures: circuit opens', async () => {
+            jest.spyOn(engine, 'httpPost').mockRejectedValue(new Error('connection refused'));
+            await engine.evaluate(buildToolCall());
+            await engine.evaluate(buildToolCall());
+            await engine.evaluate(buildToolCall());
+            const state = engine.getCircuitState();
+            expect(state.state).toBe('open');
+            expect(state.failures).toBe(3);
+        });
+        test('failures reset to 0 on success', async () => {
+            const mockHttpPost = jest.spyOn(engine, 'httpPost');
+            // 2 failures
+            mockHttpPost.mockRejectedValue(new Error('connection refused'));
+            await engine.evaluate(buildToolCall());
+            await engine.evaluate(buildToolCall());
+            expect(engine.getCircuitState().failures).toBe(2);
+            // 1 success resets
+            mockHttpPost.mockResolvedValue({ result: { decision: 'allow' } });
+            await engine.evaluate(buildToolCall());
+            expect(engine.getCircuitState().failures).toBe(0);
+            expect(engine.getCircuitState().state).toBe('closed');
+        });
+    });
+    // -------------------------------------------------------------------------
+    // Open circuit: immediate fallback
+    // -------------------------------------------------------------------------
+    describe('open circuit', () => {
+        test('returns fallback immediately without making HTTP call', async () => {
+            const mockHttpPost = jest.spyOn(engine, 'httpPost');
+            // Trip the circuit with 3 failures
+            mockHttpPost.mockRejectedValue(new Error('connection refused'));
+            await engine.evaluate(buildToolCall());
+            await engine.evaluate(buildToolCall());
+            await engine.evaluate(buildToolCall());
+            expect(engine.getCircuitState().state).toBe('open');
+            // Clear mock call count
+            mockHttpPost.mockClear();
+            // Next call should NOT invoke httpPost
+            const result = await engine.evaluate(buildToolCall());
+            expect(result.decision).toBe('deny');
+            expect(result.rule_id).toBe('opa_fallback');
+            expect(result.reasons[0]).toContain('circuit breaker open');
+            expect(mockHttpPost).not.toHaveBeenCalled();
+        });
+        test('multiple calls while open all return fallback without HTTP calls', async () => {
+            const mockHttpPost = jest.spyOn(engine, 'httpPost');
+            // Trip the circuit
+            mockHttpPost.mockRejectedValue(new Error('connection refused'));
+            for (let i = 0; i < 3; i++) {
+                await engine.evaluate(buildToolCall());
+            }
+            mockHttpPost.mockClear();
+            // Several calls while open
+            for (let i = 0; i < 5; i++) {
+                const result = await engine.evaluate(buildToolCall());
+                expect(result.decision).toBe('deny');
+                expect(result.reasons[0]).toContain('circuit breaker open');
+            }
+            expect(mockHttpPost).not.toHaveBeenCalled();
+        });
+    });
+    // -------------------------------------------------------------------------
+    // Half-open recovery
+    // -------------------------------------------------------------------------
+    describe('half-open recovery', () => {
+        test('transitions to half-open after recovery time, then closes on success', async () => {
+            const mockHttpPost = jest.spyOn(engine, 'httpPost');
+            // Trip the circuit
+            mockHttpPost.mockRejectedValue(new Error('connection refused'));
+            for (let i = 0; i < 3; i++) {
+                await engine.evaluate(buildToolCall());
+            }
+            expect(engine.getCircuitState().state).toBe('open');
+            // Simulate recovery time passing by manipulating lastFailureTime via Date.now mock
+            const realDateNow = Date.now;
+            Date.now = jest.fn(() => realDateNow() + 31000); // 31s in the future
+            // Next call should go through (half-open probe)
+            mockHttpPost.mockResolvedValue({ result: { decision: 'allow' } });
+            const result = await engine.evaluate(buildToolCall());
+            expect(result.decision).toBe('allow');
+            expect(engine.getCircuitState().state).toBe('closed');
+            expect(engine.getCircuitState().failures).toBe(0);
+            Date.now = realDateNow;
+        });
+        test('transitions back to open if half-open probe fails', async () => {
+            const mockHttpPost = jest.spyOn(engine, 'httpPost');
+            // Trip the circuit
+            mockHttpPost.mockRejectedValue(new Error('connection refused'));
+            for (let i = 0; i < 3; i++) {
+                await engine.evaluate(buildToolCall());
+            }
+            expect(engine.getCircuitState().state).toBe('open');
+            // Simulate recovery time passing
+            const realDateNow = Date.now;
+            Date.now = jest.fn(() => realDateNow() + 31000);
+            // Half-open probe fails
+            mockHttpPost.mockRejectedValue(new Error('still down'));
+            const result = await engine.evaluate(buildToolCall());
+            expect(result.decision).toBe('deny');
+            expect(result.reasons[0]).toContain('OPA server error');
+            // Circuit should be back to open (failures >= threshold)
+            expect(engine.getCircuitState().state).toBe('open');
+            Date.now = realDateNow;
+        });
+        test('does not transition to half-open before recovery time', async () => {
+            const mockHttpPost = jest.spyOn(engine, 'httpPost');
+            // Trip the circuit
+            mockHttpPost.mockRejectedValue(new Error('connection refused'));
+            for (let i = 0; i < 3; i++) {
+                await engine.evaluate(buildToolCall());
+            }
+            mockHttpPost.mockClear();
+            // Only 10s in the future (recovery is 30s)
+            const realDateNow = Date.now;
+            Date.now = jest.fn(() => realDateNow() + 10000);
+            const result = await engine.evaluate(buildToolCall());
+            expect(result.decision).toBe('deny');
+            expect(result.reasons[0]).toContain('circuit breaker open');
+            expect(mockHttpPost).not.toHaveBeenCalled();
+            Date.now = realDateNow;
+        });
+    });
+    // -------------------------------------------------------------------------
+    // State introspection
+    // -------------------------------------------------------------------------
+    describe('getCircuitState()', () => {
+        test('returns initial state', () => {
+            const state = engine.getCircuitState();
+            expect(state.state).toBe('closed');
+            expect(state.failures).toBe(0);
+            expect(state.lastFailure).toBe(0);
+        });
+        test('reflects failures after errors', async () => {
+            jest.spyOn(engine, 'httpPost').mockRejectedValue(new Error('fail'));
+            await engine.evaluate(buildToolCall());
+            const state = engine.getCircuitState();
+            expect(state.state).toBe('closed');
+            expect(state.failures).toBe(1);
+            expect(state.lastFailure).toBeGreaterThan(0);
+        });
+        test('reflects open state', async () => {
+            jest.spyOn(engine, 'httpPost').mockRejectedValue(new Error('fail'));
+            for (let i = 0; i < 3; i++) {
+                await engine.evaluate(buildToolCall());
+            }
+            const state = engine.getCircuitState();
+            expect(state.state).toBe('open');
+            expect(state.failures).toBe(3);
+            expect(state.lastFailure).toBeGreaterThan(0);
+        });
+    });
+    // -------------------------------------------------------------------------
+    // resetCircuit()
+    // -------------------------------------------------------------------------
+    describe('resetCircuit()', () => {
+        test('resets open circuit back to closed', async () => {
+            jest.spyOn(engine, 'httpPost').mockRejectedValue(new Error('fail'));
+            for (let i = 0; i < 3; i++) {
+                await engine.evaluate(buildToolCall());
+            }
+            expect(engine.getCircuitState().state).toBe('open');
+            engine.resetCircuit();
+            const state = engine.getCircuitState();
+            expect(state.state).toBe('closed');
+            expect(state.failures).toBe(0);
+            expect(state.lastFailure).toBe(0);
+        });
+        test('after reset, HTTP calls resume', async () => {
+            const mockHttpPost = jest.spyOn(engine, 'httpPost');
+            // Trip the circuit
+            mockHttpPost.mockRejectedValue(new Error('fail'));
+            for (let i = 0; i < 3; i++) {
+                await engine.evaluate(buildToolCall());
+            }
+            mockHttpPost.mockClear();
+            // Reset
+            engine.resetCircuit();
+            // Now httpPost should be called again
+            mockHttpPost.mockResolvedValue({ result: { decision: 'allow' } });
+            const result = await engine.evaluate(buildToolCall());
+            expect(result.decision).toBe('allow');
+            expect(mockHttpPost).toHaveBeenCalled();
+        });
+    });
+    // -------------------------------------------------------------------------
+    // Circuit breaker only applies to remote OPA
+    // -------------------------------------------------------------------------
+    describe('local Rego is unaffected', () => {
+        test('local evaluation does not use circuit breaker', async () => {
+            const localEngine = new opa_engine_1.OPAEngine({
+                enabled: true,
+                rego_policy: `
+          package palaryn.policy
+          default decision = "allow"
+        `,
+            });
+            // Local evaluation should always work regardless of circuit state
+            const result = await localEngine.evaluate(buildToolCall());
+            expect(result.decision).toBe('allow');
+            expect(localEngine.getCircuitState().state).toBe('closed');
+        });
+    });
+});
+//# sourceMappingURL=opa-circuit-breaker.test.js.map

package/dist/tests/unit/opa-circuit-breaker.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opa-circuit-breaker.test.js","sourceRoot":"","sources":["../../../tests/unit/opa-circuit-breaker.test.ts"],"names":[],"mappings":";;AAAA,4DAAwD;AAGxD,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,aAAa,CAAC,YAA+B,EAAE;IACtD,OAAO;QACL,YAAY,EAAE,WAAW;QACzB,OAAO,EAAE,aAAa;QACtB,YAAY,EAAE,YAAY;QAC1B,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,EAAE,EAAE,SAAS;YACb,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;SAC3B;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,WAAW;YACrB,GAAG,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;SAC5B;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,MAAM;YAClB,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;SAC1B;QACD,IAAI,EAAE;YACJ,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,8BAA8B;YACnC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC;SAC1B;QACD,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,SAAS,EAAE,SAAS,CAAC,SAAS;KACnB,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAC9E,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,IAAI,MAAiB,CAAC;IAEtB,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,IAAI,sBAAS,CAAC;YACrB,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,uBAAuB,EAAE,oCAAoC;YACzE,UAAU,EAAE,GAAG;YACf,iBAAiB,EAAE,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,mBAAmB;IACnB,4EAA4E;IAC5E,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAClE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,iBAAiB,CAAC;gBAC/C,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE;aACpD,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEtC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC/D,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,iBAAiB,CAAC;gBAC/C,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;aAC9B,CAAC,CAAC;YAEH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACzC,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,uBAAuB;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,IAAI,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;YACjD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAElF,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YAEvC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAClD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAElF,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACvC,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YAEvC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;YAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAElF,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACvC,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACvC,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YAEvC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAEpD,aAAa;YACb,YAAY,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAChE,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACvC,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAElD,mBAAmB;YACnB,YAAY,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAClE,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,mCAAmC;IACnC,4EAA4E;IAC5E,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,IAAI,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAEpD,mCAAmC;YACnC,YAAY,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAChE,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACvC,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACvC,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEpD,wBAAwB;YACxB,YAAY,CAAC,SAAS,EAAE,CAAC;YAEzB,uCAAuC;YACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC5C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;YAC5D,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;YAClF,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAEpD,mBAAmB;YACnB,YAAY,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAChE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,YAAY,CAAC,SAAS,EAAE,CAAC;YAEzB,2BAA2B;YAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;gBACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,qBAAqB;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,IAAI,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;YACtF,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAEpD,mBAAmB;YACnB,YAAY,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAChE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEpD,mFAAmF;YACnF,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC;YAC7B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,oBAAoB;YAErE,gDAAgD;YAChD,YAAY,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAClE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAElD,IAAI,CAAC,GAAG,GAAG,WAAW,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAEpD,mBAAmB;YACnB,YAAY,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAChE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEpD,iCAAiC;YACjC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC;YAC7B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,CAAC;YAEhD,wBAAwB;YACxB,YAAY,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;YAExD,yDAAyD;YACzD,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEpD,IAAI,CAAC,GAAG,GAAG,WAAW,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAEpD,mBAAmB;YACnB,YAAY,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YAChE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,YAAY,CAAC,SAAS,EAAE,CAAC;YAEzB,2CAA2C;YAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC;YAC7B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,CAAC;YAEhD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;YAC5D,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAE5C,IAAI,CAAC,GAAG,GAAG,WAAW,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,sBAAsB;IACtB,4EAA4E;IAC5E,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE;YACjC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAChD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAEpE,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,qBAAqB,EAAE,KAAK,IAAI,EAAE;YACrC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAEpE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACzC,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,iBAAiB;IACjB,4EAA4E;IAC5E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,IAAI,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YACpD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAEpE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEpD,MAAM,CAAC,YAAY,EAAE,CAAC;YAEtB,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAEpD,mBAAmB;YACnB,YAAY,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,YAAY,CAAC,SAAS,EAAE,CAAC;YAEzB,QAAQ;YACR,MAAM,CAAC,YAAY,EAAE,CAAC;YAEtB,sCAAsC;YACtC,YAAY,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAClE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,CAAC,YAAY,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,6CAA6C;IAC7C,4EAA4E;IAC5E,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,WAAW,GAAG,IAAI,sBAAS,CAAC;gBAChC,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE;;;SAGZ;aACF,CAAC,CAAC;YAEH,kEAAkE;YAClE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/unit/opa-engine.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=opa-engine.test.d.ts.map

package/dist/tests/unit/opa-engine.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opa-engine.test.d.ts","sourceRoot":"","sources":["../../../tests/unit/opa-engine.test.ts"],"names":[],"mappings":""}