shield360 1.0.1 → 1.2.0

package/dist/protect/index.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Shield Protect -- enforcement APIs, kept apart from the tracing APIs.
+ *
+ *   protectTool(name, fn, options)   wrap a function the agent may call: its
+ *                                    arguments are checked before it runs,
+ *                                    an optional authorize step is asked,
+ *                                    and its result is checked before it is
+ *                                    returned. In enforced mode every failure
+ *                                    refuses the call.
+ *   authorizeWithShield360(target)   ask Shield360's decision service about a
+ *                                    model or a destination, as the agent
+ *                                    (SHIELD360_AGENT_TOKEN).
+ *   protectReadiness()               what this process can claim.
+ *
+ * `trace`, `startTrace` and the instrumentations record; these refuse.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/protect/__init__.py
+ */
+import { Pipeline } from '../guard/pipeline';
+import { ProtectMode } from './mode';
+export { ProtectDeniedError, ProtectError, ProtectReadinessError, protectReadiness, resolveProtectMode, resolveProtect, PROTECT_MODES, } from './mode';
+export type { ProtectMode, ProtectConfig, ProtectReadiness } from './mode';
+export type ProtectToolOptions<A extends unknown[]> = {
+    /** The pipeline to check with; defaults to the one init() installed. */
+    pipeline?: Pipeline;
+    /** The mode; defaults to the process's. With none set anywhere, deny findings refuse (as a guard's own action says). */
+    mode?: ProtectMode;
+    /** How the arguments are turned into text for the guards. Default: canonical JSON of every argument. */
+    describeArgs?: (...args: A) => string;
+    /** How the result is turned into text for postflight guards. Default: canonical JSON. */
+    describeResult?: (result: unknown) => string;
+    /**
+     * An authorization step asked after the guards and before the call: a
+     * grant lookup, a Shield360 decision (authorizeWithShield360), a budget.
+     * A refusal, a throw or a non-boolean answer refuses the call in enforced
+     * mode; the call never runs on an answer it did not get.
+     */
+    authorize?: (...args: A) => Promise<{
+        allow: boolean;
+        reason?: string;
+    }> | {
+        allow: boolean;
+        reason?: string;
+    };
+};
+export type ProtectDecision = {
+    tool: string;
+    phase: 'preflight' | 'authorize' | 'postflight';
+    outcome: 'allow' | 'deny' | 'observed';
+    reason: string;
+};
+/** Canonical JSON: keys sorted, undefined dropped, so the same call reads the same. */
+export declare function canonicalJson(value: unknown, depth?: number): string;
+/**
+ * Whether a pipeline result stops the call under a mode. With no mode
+ * (legacy), a DENY stops it as before. In observe and warn it is recorded,
+ * and in warn also logged, and the call goes on. In enforced it stops.
+ */
+export declare function findingStops(mode: ProtectMode | undefined, denied: boolean): boolean;
+/**
+ * Wraps a function as a protected tool. Returns a function with the same
+ * signature. Nothing about tracing: the call is recorded as a decision
+ * event on the active span, if any, and that is all.
+ */
+export declare function protectTool<A extends unknown[], R>(name: string, fn: (...args: A) => Promise<R> | R, options?: ProtectToolOptions<A>): (...args: A) => Promise<R>;
+export type AuthorizeTarget = {
+    kind: 'model';
+    model: string;
+    provider?: string;
+    inputTokens?: number;
+    maxOutputTokens?: number;
+    estimatedCostUsd?: number;
+} | {
+    kind: 'destination';
+    host: string;
+    method?: string;
+};
+export type AuthorizeOptions = {
+    /** The agent's token; defaults to SHIELD360_AGENT_TOKEN. */
+    agentToken?: string;
+    /** Shield360's URL; defaults to init()'s shield360Url, then SHIELD360_URL. */
+    url?: string;
+    onBehalfOf?: string;
+    environment?: string;
+    timeoutMs?: number;
+    fetchImpl?: typeof fetch;
+};
+export type AuthorizeAnswer = {
+    allow: boolean;
+    reason: string;
+    outcome?: string;
+    message?: string;
+    policyVersion?: string;
+    decisionId?: string | null;
+};
+/**
+ * Asks Shield360 whether this agent may make a model call or reach a host
+ * (POST /api/agent-authorization/check). The agent's token decides the agent
+ * and its environment. An answer that did not arrive is `allow: false` with
+ * the reason: a caller in enforced mode treats it as a refusal, never a
+ * verdict in the agent's favour.
+ */
+export declare function authorizeWithShield360(target: AuthorizeTarget, options?: AuthorizeOptions): Promise<AuthorizeAnswer>;

package/dist/protect/index.js

@@ -0,0 +1,196 @@
+"use strict";
+/**
+ * Shield Protect -- enforcement APIs, kept apart from the tracing APIs.
+ *
+ *   protectTool(name, fn, options)   wrap a function the agent may call: its
+ *                                    arguments are checked before it runs,
+ *                                    an optional authorize step is asked,
+ *                                    and its result is checked before it is
+ *                                    returned. In enforced mode every failure
+ *                                    refuses the call.
+ *   authorizeWithShield360(target)   ask Shield360's decision service about a
+ *                                    model or a destination, as the agent
+ *                                    (SHIELD360_AGENT_TOKEN).
+ *   protectReadiness()               what this process can claim.
+ *
+ * `trace`, `startTrace` and the instrumentations record; these refuse.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/protect/__init__.py
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PROTECT_MODES = exports.resolveProtect = exports.resolveProtectMode = exports.protectReadiness = exports.ProtectReadinessError = exports.ProtectError = exports.ProtectDeniedError = void 0;
+exports.canonicalJson = canonicalJson;
+exports.findingStops = findingStops;
+exports.protectTool = protectTool;
+exports.authorizeWithShield360 = authorizeWithShield360;
+const api_1 = require("@opentelemetry/api");
+const config_1 = __importDefault(require("../config"));
+const base_1 = require("../guard/base");
+const mode_1 = require("./mode");
+var mode_2 = require("./mode");
+Object.defineProperty(exports, "ProtectDeniedError", { enumerable: true, get: function () { return mode_2.ProtectDeniedError; } });
+Object.defineProperty(exports, "ProtectError", { enumerable: true, get: function () { return mode_2.ProtectError; } });
+Object.defineProperty(exports, "ProtectReadinessError", { enumerable: true, get: function () { return mode_2.ProtectReadinessError; } });
+Object.defineProperty(exports, "protectReadiness", { enumerable: true, get: function () { return mode_2.protectReadiness; } });
+Object.defineProperty(exports, "resolveProtectMode", { enumerable: true, get: function () { return mode_2.resolveProtectMode; } });
+Object.defineProperty(exports, "resolveProtect", { enumerable: true, get: function () { return mode_2.resolveProtect; } });
+Object.defineProperty(exports, "PROTECT_MODES", { enumerable: true, get: function () { return mode_2.PROTECT_MODES; } });
+const MAX_DESCRIBED = 1000000;
+/** Canonical JSON: keys sorted, undefined dropped, so the same call reads the same. */
+function canonicalJson(value, depth = 0) {
+    if (depth > 32)
+        return '"…"';
+    if (Array.isArray(value))
+        return `[${value.map((v) => canonicalJson(v === undefined ? null : v, depth + 1)).join(',')}]`;
+    if (value && typeof value === 'object') {
+        const entries = Object.entries(value)
+            .filter(([, v]) => v !== undefined && typeof v !== 'function')
+            .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+        return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson(v, depth + 1)}`).join(',')}}`;
+    }
+    if (typeof value === 'bigint')
+        return JSON.stringify(String(value));
+    if (typeof value === 'function' || typeof value === 'symbol')
+        return 'null';
+    return JSON.stringify(value ?? null);
+}
+function record(decision) {
+    try {
+        const span = api_1.trace.getActiveSpan();
+        span?.addEvent('shield360.protect.decision', {
+            'shield360.protect.tool': decision.tool,
+            'shield360.protect.phase': decision.phase,
+            'shield360.protect.outcome': decision.outcome,
+            'shield360.protect.reason': decision.reason.slice(0, 500),
+        });
+    }
+    catch {
+        // recording never changes a decision
+    }
+}
+/**
+ * Whether a pipeline result stops the call under a mode. With no mode
+ * (legacy), a DENY stops it as before. In observe and warn it is recorded,
+ * and in warn also logged, and the call goes on. In enforced it stops.
+ */
+function findingStops(mode, denied) {
+    if (!denied)
+        return false;
+    if (mode === undefined)
+        return true;
+    return (0, mode_1.refuses)(mode);
+}
+function evaluateText(pipeline, text, phase, tool, mode) {
+    if (!text)
+        return;
+    const bound = pipeline.scanBound();
+    if ((0, mode_1.refuses)(mode) && bound > 0 && text.length > bound) {
+        record({ tool, phase, outcome: 'deny', reason: `input of ${text.length} characters is over the ${bound}-character scan bound` });
+        throw new mode_1.ProtectDeniedError('oversized', `Shield360 Protect refused ${tool}: ${text.length} characters is more than its guards scan (${bound}); send less.`);
+    }
+    let result;
+    try {
+        result = pipeline.evaluate(text, phase);
+    }
+    catch (e) {
+        if ((0, mode_1.refuses)(mode)) {
+            record({ tool, phase, outcome: 'deny', reason: `guard failed: ${e?.message ?? String(e)}` });
+            throw new mode_1.ProtectDeniedError('guard_failed', `Shield360 Protect refused ${tool}: a guard failed and enforced mode does not run unchecked calls.`);
+        }
+        throw e;
+    }
+    const denied = result.action === base_1.GuardAction.DENY;
+    if (!denied) {
+        record({ tool, phase, outcome: 'allow', reason: result.action });
+        return;
+    }
+    if (findingStops(mode, true)) {
+        record({ tool, phase, outcome: 'deny', reason: result.explanation });
+        throw new base_1.GuardDeniedError(result);
+    }
+    record({ tool, phase, outcome: 'observed', reason: result.explanation });
+    if (mode === 'warn')
+        console.warn(`[shield360] Protect (warn mode): ${tool} would have been refused at ${phase}: ${result.explanation}`);
+}
+/**
+ * Wraps a function as a protected tool. Returns a function with the same
+ * signature. Nothing about tracing: the call is recorded as a decision
+ * event on the active span, if any, and that is all.
+ */
+function protectTool(name, fn, options = {}) {
+    const describeArgs = options.describeArgs ?? ((...args) => canonicalJson(args).slice(0, MAX_DESCRIBED));
+    const describeResult = options.describeResult ?? ((result) => canonicalJson(result).slice(0, MAX_DESCRIBED));
+    return async (...args) => {
+        const mode = options.mode ?? (0, mode_1.currentProtectMode)();
+        const pipeline = options.pipeline ?? config_1.default.guardPipeline;
+        if (!pipeline && (0, mode_1.refuses)(mode)) {
+            throw new mode_1.ProtectDeniedError('guard_failed', `Shield360 Protect refused ${name}: enforced mode has no guard pipeline; pass guards to init() or to protectTool().`);
+        }
+        if (pipeline)
+            evaluateText(pipeline, describeArgs(...args), base_1.GuardPhase.PREFLIGHT, name, mode);
+        if (options.authorize) {
+            let verdict;
+            let failed = false;
+            try {
+                verdict = await options.authorize(...args);
+            }
+            catch (e) {
+                failed = true;
+                record({ tool: name, phase: 'authorize', outcome: (0, mode_1.refuses)(mode) ? 'deny' : 'observed', reason: `authorize failed: ${e?.message ?? String(e)}` });
+                if ((0, mode_1.refuses)(mode))
+                    throw new mode_1.ProtectDeniedError('authorize_failed', `Shield360 Protect refused ${name}: the authorization check failed and enforced mode does not run unchecked calls.`);
+            }
+            if (!failed) {
+                // Anything but an object saying allow: true -- undefined, null, a bare boolean -- is not an answer in the call's favour.
+                const answer = verdict && typeof verdict === 'object' ? verdict : null;
+                const allowed = answer?.allow === true;
+                const reason = typeof answer?.reason === 'string' ? answer.reason : answer ? '' : 'no authorization answer';
+                record({ tool: name, phase: 'authorize', outcome: allowed ? 'allow' : findingStops(mode, true) ? 'deny' : 'observed', reason });
+                if (!allowed && findingStops(mode, true))
+                    throw new mode_1.ProtectDeniedError('not_authorized', `Shield360 Protect refused ${name}: ${reason || 'not authorized'}.`);
+            }
+        }
+        const result = await fn(...args);
+        if (pipeline)
+            evaluateText(pipeline, describeResult(result), base_1.GuardPhase.POSTFLIGHT, name, mode);
+        return result;
+    };
+}
+/**
+ * Asks Shield360 whether this agent may make a model call or reach a host
+ * (POST /api/agent-authorization/check). The agent's token decides the agent
+ * and its environment. An answer that did not arrive is `allow: false` with
+ * the reason: a caller in enforced mode treats it as a refusal, never a
+ * verdict in the agent's favour.
+ */
+async function authorizeWithShield360(target, options = {}) {
+    const token = options.agentToken ?? process.env.SHIELD360_AGENT_TOKEN ?? '';
+    const base = (options.url ?? config_1.default.shield360Url ?? process.env.SHIELD360_URL ?? '').replace(/\/+$/, '');
+    if (!token || !base)
+        return { allow: false, reason: 'shield360_not_configured' };
+    const doFetch = options.fetchImpl ?? fetch;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? 5000);
+    try {
+        const headers = { 'Content-Type': 'application/json', Authorization: `Bearer ${token}` };
+        if (options.onBehalfOf)
+            headers['X-Shield360-On-Behalf-Of'] = options.onBehalfOf;
+        if (options.environment)
+            headers['X-Shield360-Environment'] = options.environment;
+        const res = await doFetch(`${base}/api/agent-authorization/check`, { method: 'POST', headers, body: JSON.stringify(target), signal: controller.signal });
+        if (!res.ok)
+            return { allow: false, reason: `check_http_${res.status}` };
+        const body = (await res.json());
+        return { allow: body.outcome === 'allow', reason: body.reason ?? 'unknown', outcome: body.outcome, message: body.message, policyVersion: body.policyVersion, decisionId: body.decisionId ?? null };
+    }
+    catch (e) {
+        return { allow: false, reason: `check_unreachable: ${e?.message ?? String(e)}` };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/protect/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/protect/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;;;;AA+CH,sCAYC;AAqBD,oCAIC;AAqCD,kCAiCC;AA8BD,wDAoBC;AA1MD,4CAAwD;AACxD,uDAAwC;AACxC,wCAA0E;AAE1E,iCAAsF;AAEtF,+BAQgB;AAPd,0GAAA,kBAAkB,OAAA;AAClB,oGAAA,YAAY,OAAA;AACZ,6GAAA,qBAAqB,OAAA;AACrB,wGAAA,gBAAgB,OAAA;AAChB,0GAAA,kBAAkB,OAAA;AAClB,sGAAA,cAAc,OAAA;AACd,qGAAA,aAAa,OAAA;AA6Bf,MAAM,aAAa,GAAG,OAAS,CAAC;AAEhC,uFAAuF;AACvF,SAAgB,aAAa,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IACrD,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACzH,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,UAAU,CAAC;aAC7D,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACzG,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC5E,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,MAAM,CAAC,QAAyB;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAS,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,EAAE,QAAQ,CAAC,4BAA4B,EAAE;YAC3C,wBAAwB,EAAE,QAAQ,CAAC,IAAI;YACvC,yBAAyB,EAAE,QAAQ,CAAC,KAAK;YACzC,2BAA2B,EAAE,QAAQ,CAAC,OAAO;YAC7C,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SAC1D,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,IAA6B,EAAE,MAAe;IACzE,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,YAAY,CAAC,QAAkB,EAAE,IAAY,EAAE,KAAiB,EAAE,IAAY,EAAE,IAA6B;IACpH,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;IACnC,IAAI,IAAA,cAAO,EAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QACtD,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC,MAAM,2BAA2B,KAAK,uBAAuB,EAAE,CAAC,CAAC;QACjI,MAAM,IAAI,yBAAkB,CAAC,WAAW,EAAE,6BAA6B,IAAI,KAAK,IAAI,CAAC,MAAM,6CAA6C,KAAK,eAAe,CAAC,CAAC;IAChK,CAAC;IACD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,IAAA,cAAO,EAAC,IAAI,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAkB,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxG,MAAM,IAAI,yBAAkB,CAAC,cAAc,EAAE,6BAA6B,IAAI,kEAAkE,CAAC,CAAC;QACpJ,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,kBAAW,CAAC,IAAI,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,uBAAgB,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACzE,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,oCAAoC,IAAI,+BAA+B,KAAK,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AAC3I,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CAAyB,IAAY,EAAE,EAAkC,EAAE,UAAiC,EAAE;IACvI,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,IAAO,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3G,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC,MAAe,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACtH,OAAO,KAAK,EAAE,GAAG,IAAO,EAAc,EAAE;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAA,yBAAkB,GAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAe,CAAC,aAAa,CAAC;QACnE,IAAI,CAAC,QAAQ,IAAI,IAAA,cAAO,EAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,yBAAkB,CAAC,cAAc,EAAE,6BAA6B,IAAI,mFAAmF,CAAC,CAAC;QACrK,CAAC;QACD,IAAI,QAAQ;YAAE,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,EAAE,iBAAU,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9F,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,IAAI,OAAgB,CAAC;YACrB,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,qBAAsB,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5J,IAAI,IAAA,cAAO,EAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,yBAAkB,CAAC,kBAAkB,EAAE,6BAA6B,IAAI,kFAAkF,CAAC,CAAC;YAC3L,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,yHAAyH;gBACzH,MAAM,MAAM,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAE,OAAiD,CAAC,CAAC,CAAC,IAAI,CAAC;gBAClH,MAAM,OAAO,GAAG,MAAM,EAAE,KAAK,KAAK,IAAI,CAAC;gBACvC,MAAM,MAAM,GAAG,OAAO,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,yBAAyB,CAAC;gBAC5G,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;gBAChI,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC;oBAAE,MAAM,IAAI,yBAAkB,CAAC,gBAAgB,EAAE,6BAA6B,IAAI,KAAK,MAAM,IAAI,gBAAgB,GAAG,CAAC,CAAC;YAChK,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACjC,IAAI,QAAQ;YAAE,YAAY,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,iBAAU,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAChG,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAuBD;;;;;;GAMG;AACI,KAAK,UAAU,sBAAsB,CAAC,MAAuB,EAAE,UAA4B,EAAE;IAClG,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC;IAC5E,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,gBAAe,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClH,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACjF,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,SAAS,IAAI,IAAK,CAAC,CAAC;IAC/E,IAAI,CAAC;QACH,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;QACjH,IAAI,OAAO,CAAC,UAAU;YAAE,OAAO,CAAC,0BAA0B,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;QACjF,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,CAAC,yBAAyB,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QAClF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,gCAAgC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACzJ,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgH,CAAC;QAC/I,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;IACrM,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAuB,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC9F,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/protect/mcp.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Shield Protect -- the pre-execution check on an MCP client's tools/call.
+ *
+ * The MCP instrumentation records every call; this is the one place it can
+ * refuse one. The tool's arguments, as canonical JSON, go through the
+ * preflight guards init() installed, under the process's Protect mode:
+ * observe records, warn records and logs, enforced refuses (and refuses when
+ * a guard fails, or when the arguments are past the scan bound). With no
+ * pipeline or no mode, nothing changes: the call is recorded as before.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/protect/_mcp.py
+ */
+export declare function checkMcpToolCall(toolName: string, toolArguments: unknown): void;

package/dist/protect/mcp.js

@@ -0,0 +1,49 @@
+"use strict";
+/**
+ * Shield Protect -- the pre-execution check on an MCP client's tools/call.
+ *
+ * The MCP instrumentation records every call; this is the one place it can
+ * refuse one. The tool's arguments, as canonical JSON, go through the
+ * preflight guards init() installed, under the process's Protect mode:
+ * observe records, warn records and logs, enforced refuses (and refuses when
+ * a guard fails, or when the arguments are past the scan bound). With no
+ * pipeline or no mode, nothing changes: the call is recorded as before.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/protect/_mcp.py
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkMcpToolCall = checkMcpToolCall;
+const config_1 = __importDefault(require("../config"));
+const base_1 = require("../guard/base");
+const index_1 = require("./index");
+const mode_1 = require("./mode");
+function checkMcpToolCall(toolName, toolArguments) {
+    const mode = (0, mode_1.currentProtectMode)();
+    const pipeline = config_1.default.guardPipeline;
+    if (!pipeline || mode === undefined)
+        return;
+    const text = (0, index_1.canonicalJson)(toolArguments ?? {});
+    const bound = pipeline.scanBound();
+    if ((0, mode_1.refuses)(mode) && bound > 0 && text.length > bound) {
+        throw new mode_1.ProtectDeniedError('oversized', `Shield360 Protect refused MCP tool ${toolName}: ${text.length} characters of arguments is more than its guards scan (${bound}).`);
+    }
+    let result;
+    try {
+        result = pipeline.evaluate(text, base_1.GuardPhase.PREFLIGHT);
+    }
+    catch (e) {
+        if ((0, mode_1.refuses)(mode))
+            throw new mode_1.ProtectDeniedError('guard_failed', `Shield360 Protect refused MCP tool ${toolName}: a guard failed and enforced mode does not run unchecked calls.`);
+        throw e;
+    }
+    if (result.action !== base_1.GuardAction.DENY)
+        return;
+    if ((0, mode_1.refuses)(mode))
+        throw new base_1.GuardDeniedError(result);
+    if (mode === 'warn')
+        console.warn(`[shield360] Protect (warn mode): MCP tool ${toolName} would have been refused: ${result.explanation}`);
+}
+//# sourceMappingURL=mcp.js.map

package/dist/protect/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/protect/mcp.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;AAOH,4CAmBC;AAxBD,uDAAwC;AACxC,wCAA0E;AAC1E,mCAAwC;AACxC,iCAAyE;AAEzE,SAAgB,gBAAgB,CAAC,QAAgB,EAAE,aAAsB;IACvE,MAAM,IAAI,GAAG,IAAA,yBAAkB,GAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,gBAAe,CAAC,aAAa,CAAC;IAC/C,IAAI,CAAC,QAAQ,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IAC5C,MAAM,IAAI,GAAG,IAAA,qBAAa,EAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;IACnC,IAAI,IAAA,cAAO,EAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QACtD,MAAM,IAAI,yBAAkB,CAAC,WAAW,EAAE,sCAAsC,QAAQ,KAAK,IAAI,CAAC,MAAM,0DAA0D,KAAK,IAAI,CAAC,CAAC;IAC/K,CAAC;IACD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,iBAAU,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,IAAA,cAAO,EAAC,IAAI,CAAC;YAAE,MAAM,IAAI,yBAAkB,CAAC,cAAc,EAAE,sCAAsC,QAAQ,kEAAkE,CAAC,CAAC;QAClL,MAAM,CAAC,CAAC;IACV,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAW,CAAC,IAAI;QAAE,OAAO;IAC/C,IAAI,IAAA,cAAO,EAAC,IAAI,CAAC;QAAE,MAAM,IAAI,uBAAgB,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,6CAA6C,QAAQ,6BAA6B,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AAC5I,CAAC"}

package/dist/protect/mode.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Shield Protect -- the enforcement mode of this process.
+ *
+ *   observe   every check runs and its finding is recorded (span event,
+ *             decision report); nothing is refused. For seeing what enforced
+ *             mode would stop before turning it on.
+ *   warn      as observe, and the finding is logged as a warning.
+ *   enforced  a finding refuses the call; a guard that throws refuses the
+ *             call (fail closed, whatever guardFailOpen says); a provider
+ *             named in `required` that could not be wrapped stops startup;
+ *             a streamed completion that postflight guards cannot inspect
+ *             is refused; input past the scan bound is refused rather than
+ *             scanned in part.
+ *
+ * The mode set in code is a floor: SHIELD360_PROTECT_MODE can raise it and
+ * never lower it, so an environment variable in a shell or a container
+ * cannot weaken what the application was deployed with. With no mode set
+ * anywhere, guards behave as they always have (each guard's own action,
+ * guardFailOpen as given): that is `legacy`, and nothing changes for an
+ * application that never asked for Protect.
+ *
+ * What this layer can and cannot claim: it runs inside the application's
+ * process. Code that can disable the SDK, import a provider the SDK does
+ * not wrap, or reach a network directly is not stopped by it. The
+ * mandatory boundary is the Shield360 gateway; this layer is monitored or
+ * partially protected, and its readiness report says so.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/protect/_mode.py
+ */
+export type ProtectMode = 'observe' | 'warn' | 'enforced';
+export declare const PROTECT_MODES: readonly ProtectMode[];
+export declare const PROTECT_MODE_ENV = "SHIELD360_PROTECT_MODE";
+export declare const PROTECT_REQUIRED_ENV = "SHIELD360_PROTECT_REQUIRED";
+export declare function isProtectMode(value: unknown): value is ProtectMode;
+/** The stricter of two modes; undefined counts as nothing. */
+export declare function strictestMode(a?: ProtectMode, b?: ProtectMode): ProtectMode | undefined;
+/**
+ * The mode this process runs under: what the code set, raised by the
+ * environment when the environment asks for more. An environment value
+ * that is not a mode is ignored, never a downgrade.
+ */
+export declare function resolveProtectMode(fromCode?: ProtectMode, env?: NodeJS.ProcessEnv): ProtectMode | undefined;
+/** Providers that must be wrapped: the code's list plus the environment's. */
+export declare function resolveRequired(fromCode?: string[], env?: NodeJS.ProcessEnv): string[];
+export type ProtectConfig = {
+    mode?: ProtectMode;
+    /** npm package names whose provider methods must be wrapped, or startup fails in enforced mode: "openai", "@anthropic-ai/sdk". */
+    required?: string[];
+};
+export type ResolvedProtect = {
+    mode?: ProtectMode;
+    required: string[];
+};
+export declare function resolveProtect(config: ProtectConfig | undefined, env?: NodeJS.ProcessEnv): ResolvedProtect;
+export declare const refuses: (mode: ProtectMode | undefined) => boolean;
+export declare class ProtectError extends Error {
+    constructor(message?: string);
+}
+/** A call refused by Protect for a reason that is not a guard finding: oversized input, uninspectable streaming, a failed check. */
+export declare class ProtectDeniedError extends ProtectError {
+    readonly code: 'oversized' | 'streaming' | 'guard_failed' | 'not_authorized' | 'authorize_failed';
+    constructor(code: ProtectDeniedError['code'], message: string);
+}
+/** Enforced mode could not be set up: a required provider is not wrapped, or guards are missing. Thrown from init. */
+export declare class ProtectReadinessError extends ProtectError {
+    readonly missing: string[];
+    constructor(missing: string[], message: string);
+}
+export type ProtectReadiness = {
+    mode: ProtectMode | 'legacy';
+    /** Provider packages whose methods were wrapped. */
+    wrapped: string[];
+    /** Provider packages named as required that were not wrapped. */
+    missing: string[];
+    /** monitored: in-process checks that code in the same process can bypass. Never "enforced": that is the gateway's claim. */
+    level: 'monitored' | 'partially_protected';
+    note: string;
+};
+/** @internal */
+export declare function setProtectState(next: {
+    mode?: ProtectMode;
+    wrapped: string[];
+    missing: string[];
+}): void;
+/** @internal */
+export declare function currentProtectMode(): ProtectMode | undefined;
+export declare function protectReadiness(): ProtectReadiness;
+/** @internal for tests */
+export declare function resetProtectState(): void;

package/dist/protect/mode.js

@@ -0,0 +1,134 @@
+"use strict";
+/**
+ * Shield Protect -- the enforcement mode of this process.
+ *
+ *   observe   every check runs and its finding is recorded (span event,
+ *             decision report); nothing is refused. For seeing what enforced
+ *             mode would stop before turning it on.
+ *   warn      as observe, and the finding is logged as a warning.
+ *   enforced  a finding refuses the call; a guard that throws refuses the
+ *             call (fail closed, whatever guardFailOpen says); a provider
+ *             named in `required` that could not be wrapped stops startup;
+ *             a streamed completion that postflight guards cannot inspect
+ *             is refused; input past the scan bound is refused rather than
+ *             scanned in part.
+ *
+ * The mode set in code is a floor: SHIELD360_PROTECT_MODE can raise it and
+ * never lower it, so an environment variable in a shell or a container
+ * cannot weaken what the application was deployed with. With no mode set
+ * anywhere, guards behave as they always have (each guard's own action,
+ * guardFailOpen as given): that is `legacy`, and nothing changes for an
+ * application that never asked for Protect.
+ *
+ * What this layer can and cannot claim: it runs inside the application's
+ * process. Code that can disable the SDK, import a provider the SDK does
+ * not wrap, or reach a network directly is not stopped by it. The
+ * mandatory boundary is the Shield360 gateway; this layer is monitored or
+ * partially protected, and its readiness report says so.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/protect/_mode.py
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProtectReadinessError = exports.ProtectDeniedError = exports.ProtectError = exports.refuses = exports.PROTECT_REQUIRED_ENV = exports.PROTECT_MODE_ENV = exports.PROTECT_MODES = void 0;
+exports.isProtectMode = isProtectMode;
+exports.strictestMode = strictestMode;
+exports.resolveProtectMode = resolveProtectMode;
+exports.resolveRequired = resolveRequired;
+exports.resolveProtect = resolveProtect;
+exports.setProtectState = setProtectState;
+exports.currentProtectMode = currentProtectMode;
+exports.protectReadiness = protectReadiness;
+exports.resetProtectState = resetProtectState;
+exports.PROTECT_MODES = ['observe', 'warn', 'enforced'];
+const RANK = { observe: 0, warn: 1, enforced: 2 };
+exports.PROTECT_MODE_ENV = 'SHIELD360_PROTECT_MODE';
+exports.PROTECT_REQUIRED_ENV = 'SHIELD360_PROTECT_REQUIRED';
+function isProtectMode(value) {
+    return typeof value === 'string' && exports.PROTECT_MODES.includes(value);
+}
+/** The stricter of two modes; undefined counts as nothing. */
+function strictestMode(a, b) {
+    if (!a)
+        return b;
+    if (!b)
+        return a;
+    return RANK[a] >= RANK[b] ? a : b;
+}
+/**
+ * The mode this process runs under: what the code set, raised by the
+ * environment when the environment asks for more. An environment value
+ * that is not a mode is ignored, never a downgrade.
+ */
+function resolveProtectMode(fromCode, env = process.env) {
+    const raw = (env[exports.PROTECT_MODE_ENV] || '').trim().toLowerCase();
+    const fromEnv = isProtectMode(raw) ? raw : undefined;
+    return strictestMode(fromCode, fromEnv);
+}
+/** Providers that must be wrapped: the code's list plus the environment's. */
+function resolveRequired(fromCode = [], env = process.env) {
+    const fromEnv = (env[exports.PROTECT_REQUIRED_ENV] || '')
+        .split(',')
+        .map((s) => s.trim())
+        .filter(Boolean);
+    return Array.from(new Set([...fromCode, ...fromEnv]));
+}
+function resolveProtect(config, env = process.env) {
+    return { mode: resolveProtectMode(config?.mode, env), required: resolveRequired(config?.required, env) };
+}
+const refuses = (mode) => mode === 'enforced';
+exports.refuses = refuses;
+// ---------------------------------------------------------------------------
+// Errors
+// ---------------------------------------------------------------------------
+class ProtectError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ProtectError';
+    }
+}
+exports.ProtectError = ProtectError;
+/** A call refused by Protect for a reason that is not a guard finding: oversized input, uninspectable streaming, a failed check. */
+class ProtectDeniedError extends ProtectError {
+    constructor(code, message) {
+        super(message);
+        this.name = 'ProtectDeniedError';
+        this.code = code;
+    }
+}
+exports.ProtectDeniedError = ProtectDeniedError;
+/** Enforced mode could not be set up: a required provider is not wrapped, or guards are missing. Thrown from init. */
+class ProtectReadinessError extends ProtectError {
+    constructor(missing, message) {
+        super(message);
+        this.name = 'ProtectReadinessError';
+        this.missing = missing;
+    }
+}
+exports.ProtectReadinessError = ProtectReadinessError;
+let state = { wrapped: [], missing: [] };
+/** @internal */
+function setProtectState(next) {
+    state = { mode: next.mode, wrapped: [...next.wrapped], missing: [...next.missing] };
+}
+/** @internal */
+function currentProtectMode() {
+    return state.mode;
+}
+function protectReadiness() {
+    const mode = state.mode ?? 'legacy';
+    const partial = mode === 'enforced' && state.missing.length === 0 && state.wrapped.length > 0;
+    return {
+        mode,
+        wrapped: [...state.wrapped],
+        missing: [...state.missing],
+        level: partial ? 'partially_protected' : 'monitored',
+        note: partial
+            ? 'Supported provider calls in this process are refused before they leave when a guard finds a violation, and fail closed. Code in this process that bypasses the SDK is not covered; the mandatory boundary is the Shield360 gateway.'
+            : 'Findings are recorded; calls are not refused by this layer. The mandatory boundary is the Shield360 gateway.',
+    };
+}
+/** @internal for tests */
+function resetProtectState() {
+    state = { wrapped: [], missing: [] };
+}
+//# sourceMappingURL=mode.js.map

package/dist/protect/mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mode.js","sourceRoot":"","sources":["../../src/protect/mode.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;AASH,sCAEC;AAGD,sCAIC;AAOD,gDAIC;AAGD,0CAMC;AAUD,wCAEC;AAqDD,0CAEC;AAGD,gDAEC;AAED,4CAYC;AAGD,8CAEC;AA9HY,QAAA,aAAa,GAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AACrF,MAAM,IAAI,GAAgC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAElE,QAAA,gBAAgB,GAAG,wBAAwB,CAAC;AAC5C,QAAA,oBAAoB,GAAG,4BAA4B,CAAC;AAEjE,SAAgB,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,qBAAmC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC3F,CAAC;AAED,8DAA8D;AAC9D,SAAgB,aAAa,CAAC,CAAe,EAAE,CAAe;IAC5D,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACjB,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,QAAsB,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC7F,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,wBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/D,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACrD,OAAO,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,8EAA8E;AAC9E,SAAgB,eAAe,CAAC,WAAqB,EAAE,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC3F,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,4BAAoB,CAAC,IAAI,EAAE,CAAC;SAC9C,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAUD,SAAgB,cAAc,CAAC,MAAiC,EAAE,MAAyB,OAAO,CAAC,GAAG;IACpG,OAAO,EAAE,IAAI,EAAE,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;AAC3G,CAAC;AAEM,MAAM,OAAO,GAAG,CAAC,IAA6B,EAAW,EAAE,CAAC,IAAI,KAAK,UAAU,CAAC;AAA1E,QAAA,OAAO,WAAmE;AAEvF,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAa,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAgB;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AALD,oCAKC;AAED,oIAAoI;AACpI,MAAa,kBAAmB,SAAQ,YAAY;IAElD,YAAY,IAAgC,EAAE,OAAe;QAC3D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAPD,gDAOC;AAED,sHAAsH;AACtH,MAAa,qBAAsB,SAAQ,YAAY;IAErD,YAAY,OAAiB,EAAE,OAAe;QAC5C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAPD,sDAOC;AAiBD,IAAI,KAAK,GAAiE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAEvG,gBAAgB;AAChB,SAAgB,eAAe,CAAC,IAAkE;IAChG,KAAK,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;AACtF,CAAC;AAED,gBAAgB;AAChB,SAAgB,kBAAkB;IAChC,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,SAAgB,gBAAgB;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9F,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;QAC3B,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;QAC3B,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,WAAW;QACpD,IAAI,EAAE,OAAO;YACX,CAAC,CAAC,qOAAqO;YACvO,CAAC,CAAC,8GAA8G;KACnH,CAAC;AACJ,CAAC;AAED,0BAA0B;AAC1B,SAAgB,iBAAiB;IAC/B,KAAK,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACvC,CAAC"}

package/dist/rasp/__tests__/auto-http.test.d.ts

@@ -0,0 +1 @@
+export {};