veto-sdk 2.0.0 → 2.2.1

package/dist/economic/types.d.ts

@@ -0,0 +1,188 @@
+/**
+ * Economic authorization types.
+ *
+ * Protocol-agnostic types for cost-aware agent authorization
+ * across x402, Stripe MPP, Google AP2, and custom protocols.
+ *
+ * @module economic/types
+ */
+/**
+ * Supported payment protocols.
+ */
+export type EconomicProtocol = 'x402' | 'mpp' | 'ap2' | 'custom';
+/**
+ * Normalized economic context produced by protocol connectors.
+ *
+ * This is the single interface between connectors and the policy engine.
+ * Connectors parse protocol-specific responses into this shape;
+ * the policy engine evaluates it without knowing which protocol produced it.
+ */
+export interface EconomicContext {
+    /** Resolved cost of this action in the budget currency */
+    cost: number;
+    /** Currency code (USD, EUR, etc.) */
+    currency: string;
+    /** Identified payer (wallet address, Stripe customer, mandate signer) */
+    payer?: string;
+    /** Which payment protocol produced this context */
+    protocol: EconomicProtocol;
+    /** Protocol-specific metadata (chain, token, mandate ID, session ID, etc.) */
+    protocol_metadata?: Record<string, unknown>;
+}
+/**
+ * Denial reason codes for economic authorization failures.
+ */
+export type EconomicDenialReason = 'budget_exceeded' | 'approval_required' | 'payer_missing' | 'payer_unauthorized' | 'currency_mismatch' | 'invalid_cost' | 'connector_error';
+/**
+ * Machine-readable details for economic authorization denials.
+ *
+ * Attached to GuardResult when an economic policy denies a tool call.
+ * Enables developers to programmatically handle different denial types.
+ */
+export interface EconomicDenialDetails {
+    reason: EconomicDenialReason;
+    cost: number;
+    currency: string;
+    budget_scope: string;
+    budget_limit: number;
+    budget_spent: number;
+    budget_remaining: number;
+    /** The approval threshold that was exceeded (for approval_required denials) */
+    approval_threshold?: number;
+    payer?: string;
+    protocol?: string;
+    /** Rendered denial message from template (if configured) */
+    message?: string;
+    /** Connector name + raw error for connector_error reason */
+    connector_name?: string;
+    raw_error?: string;
+}
+/**
+ * Budget scope levels.
+ *
+ * - session: in-memory, SDK-only (LocalBudgetEngine)
+ * - agent/user/global: require platform (CloudBudgetEngine via Convex)
+ */
+export type BudgetScope = 'session' | 'agent' | 'user' | 'global';
+/**
+ * Budget configuration from policy YAML.
+ */
+export interface EconomicBudgetConfig {
+    scope: BudgetScope;
+    limit: number;
+    currency: string;
+    /** Require approval above this amount (within budget) */
+    approval_threshold?: number;
+    /** Budget window — 'session' for SDK-only, timed windows require platform */
+    window: 'session' | '1h' | '24h' | '30d';
+}
+/**
+ * Cost extraction configuration from policy YAML.
+ */
+export interface CostExtractionConfig {
+    /** Default dot-path to extract cost from tool call context */
+    default: string;
+    /** Per-tool overrides */
+    overrides?: Record<string, string>;
+}
+/**
+ * Payer validation configuration from policy YAML.
+ */
+export interface PayerConfig {
+    /** Block if no payer identified */
+    required: boolean;
+    /** Optional payer allowlist */
+    approved?: string[];
+}
+/**
+ * Custom denial message templates.
+ */
+export interface DenialReasonTemplates {
+    budget_exceeded?: string;
+    approval_required?: string;
+    payer_missing?: string;
+    payer_unauthorized?: string;
+}
+/**
+ * Top-level economic policy configuration from YAML.
+ */
+export interface EconomicPolicyConfig {
+    budgets?: EconomicBudgetConfig[];
+    cost_extraction?: CostExtractionConfig;
+    payer?: PayerConfig;
+    denial_reasons?: DenialReasonTemplates;
+}
+/**
+ * Result of a budget check.
+ *
+ * Return-based (not throw-based) to compose cleanly with guard() flow.
+ */
+export interface BudgetCheckResult {
+    allowed: boolean;
+    decision: 'allow' | 'deny' | 'require_approval';
+    denial?: EconomicDenialDetails;
+}
+/**
+ * Current budget status for a scope.
+ */
+export interface EconomicBudgetStatus {
+    scope: BudgetScope;
+    spent: number;
+    limit: number;
+    remaining: number;
+    currency: string;
+}
+/**
+ * Budget engine interface.
+ *
+ * SDK defines the contract; implementations vary by deployment:
+ * - LocalBudgetEngine: in-memory, session scope only
+ * - CloudBudgetEngine: Convex-backed, all scopes (platform)
+ *
+ *   BudgetEngine (interface)
+ *   ├── LocalBudgetEngine   (SDK, in-memory, session scope only)
+ *   └── CloudBudgetEngine   (platform, Convex-backed, all scopes)
+ */
+export interface BudgetEngine {
+    /** Check if a cost is within budget and below approval threshold */
+    check(cost: number, currency: string, scope: BudgetScope): BudgetCheckResult;
+    /** Reserve budget (atomic check + deduct) */
+    reserve(cost: number, currency: string, scope: BudgetScope): BudgetCheckResult;
+    /** Record a committed charge */
+    record(cost: number, currency: string, scope: BudgetScope): void;
+    /** Refund a previously reserved/recorded amount */
+    refund(amount: number, scope: BudgetScope): void;
+    /** Get current budget status for a scope */
+    getStatus(scope: BudgetScope): EconomicBudgetStatus | null;
+    /** Reset budget state for a scope */
+    reset(scope: BudgetScope): void;
+}
+/**
+ * Protocol connector interface.
+ *
+ * Connectors parse protocol-specific responses into EconomicContext.
+ * Two modes:
+ * - extract(): manual — developer calls explicitly (works in any framework)
+ * - wrapFetch(): automatic — wraps fetch to auto-detect protocol signals
+ */
+export interface ProtocolConnector {
+    /** Which protocol this connector handles */
+    protocol: EconomicProtocol;
+    /** Protocol version this connector was built against */
+    protocolVersion: string;
+    /**
+     * Parse a response into economic context (manual/callback mode).
+     * Returns null if the response is not a protocol signal.
+     */
+    extract(response: Response | Record<string, unknown>): EconomicContext | null;
+    /**
+     * Wrap a fetch function to auto-detect protocol signals (auto mode).
+     * Optional — not all connectors support auto-wrapping.
+     */
+    wrapFetch?(fetchFn: typeof fetch): typeof fetch;
+}
+/**
+ * Economic webhook event types (extends base webhook events).
+ */
+export type EconomicWebhookEventType = 'budget_warning' | 'approval_triggered' | 'spend_committed' | 'protocol_detected';
+//# sourceMappingURL=types.d.ts.map

package/dist/economic/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/economic/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEjE;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAC5B,iBAAiB,GACjB,mBAAmB,GACnB,eAAe,GACf,oBAAoB,GACpB,mBAAmB,GACnB,cAAc,GACd,iBAAiB,CAAC;AAEtB;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;AAElE;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,6EAA6E;IAC7E,MAAM,EAAE,SAAS,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;IAChB,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mCAAmC;IACnC,QAAQ,EAAE,OAAO,CAAC;IAClB,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACjC,eAAe,CAAC,EAAE,oBAAoB,CAAC;IACvC,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,cAAc,CAAC,EAAE,qBAAqB,CAAC;CACxC;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAC;IAChD,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,iBAAiB,CAAC;IAC7E,6CAA6C;IAC7C,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,iBAAiB,CAAC;IAC/E,gCAAgC;IAChC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IACjE,mDAAmD;IACnD,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IACjD,4CAA4C;IAC5C,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,oBAAoB,GAAG,IAAI,CAAC;IAC3D,qCAAqC;IACrC,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,wDAAwD;IACxD,eAAe,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,OAAO,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,GAAG,IAAI,CAAC;IAC9E;;;OAGG;IACH,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,GAAG,OAAO,KAAK,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAChC,gBAAgB,GAChB,oBAAoB,GACpB,iBAAiB,GACjB,mBAAmB,CAAC"}

package/dist/economic/types.js

@@ -0,0 +1,10 @@
+/**
+ * Economic authorization types.
+ *
+ * Protocol-agnostic types for cost-aware agent authorization
+ * across x402, Stripe MPP, Google AP2, and custom protocols.
+ *
+ * @module economic/types
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/economic/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/economic/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/extractors/content.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Content extractor — deterministic regex-based entity extraction from text.
+ *
+ * Detects prices (multi-currency), emails, phone numbers, salary/compensation
+ * figures, equity percentages, government IDs, credit cards, and API keys.
+ *
+ * Pure string processing with no browser dependencies.
+ *
+ * @module extractors/content
+ */
+export interface ExtractedEntities {
+    prices: number[];
+    max_price: number;
+    min_price: number;
+    emails: string[];
+    phone_numbers: string[];
+    salary_figures: number[];
+    has_salary_figures: boolean;
+    equity_percentages: number[];
+    has_equity_info: boolean;
+    sensitive_terms: string[];
+    has_sensitive_pii: boolean;
+    has_credit_cards: boolean;
+    has_gov_ids: boolean;
+    has_api_keys: boolean;
+}
+export interface ExtractEntitiesOptions {
+    maxPrices?: number;
+    maxEmails?: number;
+    maxPhones?: number;
+    maxSalaryFigures?: number;
+    maxEquityPercentages?: number;
+    textCap?: number;
+}
+/**
+ * Extract structured entities from arbitrary text.
+ *
+ * Returns prices, emails, phone numbers, salary figures, equity percentages,
+ * and boolean flags for credit cards, government IDs, and API keys.
+ */
+export declare function extractEntities(text: string, options?: ExtractEntitiesOptions): ExtractedEntities;
+//# sourceMappingURL=content.d.ts.map

package/dist/extractors/content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.d.ts","sourceRoot":"","sources":["../../src/extractors/content.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAmED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,sBAAsB,GAC/B,iBAAiB,CAoGnB"}

package/dist/extractors/content.js

@@ -0,0 +1,171 @@
+/**
+ * Content extractor — deterministic regex-based entity extraction from text.
+ *
+ * Detects prices (multi-currency), emails, phone numbers, salary/compensation
+ * figures, equity percentages, government IDs, credit cards, and API keys.
+ *
+ * Pure string processing with no browser dependencies.
+ *
+ * @module extractors/content
+ */
+const PRICE_REGEX = /(?:[$€£¥₹₩]|(?:USD|EUR|GBP|JPY|INR|CHF|AUD|CAD|CNY)\s?)\s?([\d,]+(?:\.\d{1,2})?)/gi;
+const EMAIL_REGEX = /[a-zA-Z0-9._%+-]{1,64}@[a-zA-Z0-9.-]{1,255}\.[a-zA-Z]{2,}/g;
+const PHONE_REGEX = /(?:\+\d{1,3}[-.\s]?)?(?:\(?\d{2,4}\)?[-.\s]?)?\d{3,4}[-.\s]?\d{3,4}/g;
+const SALARY_REGEX = /\b(?:salary\b|salaries\b|compensation\b|comp\b|pay\b|wage\b|wages\b|income\b|earning\b|base\b|total\s*comp\b|ote\b|ctc\b)[:\s]*(?:[$€£¥₹]|(?:USD|EUR|GBP)\s?)?\s?([\d,]+(?:\.\d{1,2})?)\s*(?:k|K|pa|p\.a\.)?/gi;
+const SALARY_AMOUNT_REGEX = /(?:[$€£¥₹])\s?([\d,]+(?:\.\d{1,2})?)\s*(?:k|K)\s*(?:\/yr|\/year|per\s*(?:year|annum)|salary|comp|annual|base)/gi;
+const EQUITY_REGEX = /([\d.]+)\s*%\s*(?:equity|vesting|options|ownership|stake|shares|stock|rsus?|esop)/gi;
+const GOV_ID_REGEX = /\b\d{3}-\d{2}-\d{4}\b|\b[A-Z]{2}\s?\d{2}\s?\d{2}\s?\d{2}\s?[A-Z]\b|\b\d{2}-\d{7}\b/g;
+const CREDIT_CARD_REGEX = /\b(?:\d{4}[-\s]?){3}\d{4}\b/g;
+const API_KEY_REGEX = /\b(?:sk|pk|api|key|token|secret|bearer)[-_][a-zA-Z0-9_-]{20,}\b/gi;
+const GOV_ID_KEYWORD_REGEX = /\b(?:ssn|social\s*security|ein|tax\s*id|national\s*id|identity|passport|license|licence|id\s*number)\b/i;
+// eslint-disable-next-line no-misleading-character-class
+const ZERO_WIDTH_REGEX = /[\u200B\u200C\u200D\uFEFF]/g;
+function normalizeUnicode(text) {
+    return text
+        .replace(/\u00A0/g, ' ')
+        .replace(ZERO_WIDTH_REGEX, '')
+        .replace(/[\uFF10-\uFF19]/g, (ch) => String.fromCharCode(ch.charCodeAt(0) - 0xFF10 + 0x30));
+}
+function hasGovIdKeywordNearby(text, matchIndex, matchLength) {
+    const windowSize = 30;
+    const start = Math.max(0, matchIndex - windowSize);
+    const end = Math.min(text.length, matchIndex + matchLength + windowSize);
+    const window = text.slice(start, end);
+    return GOV_ID_KEYWORD_REGEX.test(window);
+}
+function parsePrice(match) {
+    return Number.parseFloat(match.replace(/,/g, ''));
+}
+function dedup(arr) {
+    return [...new Set(arr)];
+}
+function passesLuhn(digits) {
+    let sum = 0;
+    let alternate = false;
+    for (let i = digits.length - 1; i >= 0; i--) {
+        let n = parseInt(digits[i], 10);
+        if (alternate) {
+            n *= 2;
+            if (n > 9)
+                n -= 9;
+        }
+        sum += n;
+        alternate = !alternate;
+    }
+    return sum % 10 === 0;
+}
+function isLikelyPhoneNumber(value) {
+    const normalized = value.trim();
+    const digits = normalized.replace(/\D/g, '');
+    if (normalized.startsWith('+')) {
+        return digits.length >= 8;
+    }
+    return digits.length >= 10;
+}
+/**
+ * Extract structured entities from arbitrary text.
+ *
+ * Returns prices, emails, phone numbers, salary figures, equity percentages,
+ * and boolean flags for credit cards, government IDs, and API keys.
+ */
+export function extractEntities(text, options) {
+    if (!text || text.length < 3)
+        return {
+            prices: [],
+            max_price: 0,
+            min_price: 0,
+            emails: [],
+            phone_numbers: [],
+            salary_figures: [],
+            has_salary_figures: false,
+            equity_percentages: [],
+            has_equity_info: false,
+            sensitive_terms: [],
+            has_sensitive_pii: false,
+            has_credit_cards: false,
+            has_gov_ids: false,
+            has_api_keys: false,
+        };
+    const maxPrices = options?.maxPrices ?? 100;
+    const maxEmails = options?.maxEmails ?? 50;
+    const maxPhones = options?.maxPhones ?? 50;
+    const maxSalaryFigures = options?.maxSalaryFigures ?? 50;
+    const maxEquityPercentages = options?.maxEquityPercentages ?? 50;
+    const textCap = options?.textCap ?? 200_000;
+    const raw = text.length > textCap ? text.slice(0, textCap) : text;
+    const capped = normalizeUnicode(raw);
+    const prices = [];
+    for (const match of capped.matchAll(PRICE_REGEX)) {
+        const price = parsePrice(match[1]);
+        if (price > 0 && price < 1_000_000) {
+            prices.push(price);
+        }
+        if (prices.length >= maxPrices)
+            break;
+    }
+    const emails = dedup([...capped.matchAll(EMAIL_REGEX)].map(m => m[0].toLowerCase())).slice(0, maxEmails);
+    const phoneNumbers = dedup([...capped.matchAll(PHONE_REGEX)]
+        .map(m => m[0].trim())
+        .filter(isLikelyPhoneNumber)
+        .slice(0, maxPhones));
+    const salaryFigures = [];
+    for (const regex of [SALARY_REGEX, SALARY_AMOUNT_REGEX]) {
+        regex.lastIndex = 0;
+        for (const match of capped.matchAll(regex)) {
+            const raw = match[1].replace(/,/g, '');
+            let amount = Number.parseFloat(raw);
+            if (match[0].toLowerCase().includes('k'))
+                amount *= 1000;
+            if (amount > 1000 && amount < 10_000_000) {
+                salaryFigures.push(amount);
+            }
+            if (salaryFigures.length >= maxSalaryFigures)
+                break;
+        }
+    }
+    const equityPercentages = [];
+    for (const match of capped.matchAll(EQUITY_REGEX)) {
+        const pct = Number.parseFloat(match[1]);
+        if (pct > 0 && pct <= 100)
+            equityPercentages.push(pct);
+        if (equityPercentages.length >= maxEquityPercentages)
+            break;
+    }
+    const govIdMatches = [...capped.matchAll(GOV_ID_REGEX)];
+    const govIdCount = govIdMatches.filter(m => hasGovIdKeywordNearby(capped, m.index, m[0].length)).length;
+    const creditCardMatches = [...capped.matchAll(CREDIT_CARD_REGEX)];
+    const creditCardCount = creditCardMatches.filter(m => passesLuhn(m[0].replace(/\D/g, ''))).length;
+    const apiKeyCount = [...capped.matchAll(API_KEY_REGEX)].length;
+    const sensitiveTerms = [];
+    if (salaryFigures.length > 0)
+        sensitiveTerms.push('salary');
+    if (equityPercentages.length > 0)
+        sensitiveTerms.push('equity');
+    if (govIdCount > 0)
+        sensitiveTerms.push('gov_id');
+    if (creditCardCount > 0)
+        sensitiveTerms.push('credit_card');
+    if (apiKeyCount > 0)
+        sensitiveTerms.push('api_key');
+    if (emails.length > 0)
+        sensitiveTerms.push('email');
+    if (phoneNumbers.length > 0)
+        sensitiveTerms.push('phone');
+    return {
+        prices,
+        max_price: prices.length > 0 ? prices.reduce((a, b) => a > b ? a : b, -Infinity) : 0,
+        min_price: prices.length > 0 ? prices.reduce((a, b) => a < b ? a : b, Infinity) : 0,
+        emails,
+        phone_numbers: phoneNumbers,
+        salary_figures: salaryFigures,
+        has_salary_figures: salaryFigures.length > 0,
+        equity_percentages: equityPercentages,
+        has_equity_info: equityPercentages.length > 0,
+        sensitive_terms: sensitiveTerms,
+        has_sensitive_pii: sensitiveTerms.length > 0,
+        has_credit_cards: creditCardCount > 0,
+        has_gov_ids: govIdCount > 0,
+        has_api_keys: apiKeyCount > 0,
+    };
+}
+//# sourceMappingURL=content.js.map

package/dist/extractors/content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.js","sourceRoot":"","sources":["../../src/extractors/content.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA4BH,MAAM,WAAW,GAAG,oFAAoF,CAAC;AACzG,MAAM,WAAW,GAAG,4DAA4D,CAAC;AACjF,MAAM,WAAW,GAAG,sEAAsE,CAAC;AAC3F,MAAM,YAAY,GAChB,gNAAgN,CAAC;AACnN,MAAM,mBAAmB,GACvB,iHAAiH,CAAC;AACpH,MAAM,YAAY,GAAG,qFAAqF,CAAC;AAC3G,MAAM,YAAY,GAAG,qFAAqF,CAAC;AAC3G,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;AACzD,MAAM,aAAa,GAAG,mEAAmE,CAAC;AAC1F,MAAM,oBAAoB,GAAG,yGAAyG,CAAC;AAEvI,yDAAyD;AACzD,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AAEvD,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,IAAI;SACR,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;SAC7B,OAAO,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY,EAAE,UAAkB,EAAE,WAAmB;IAClF,MAAM,UAAU,GAAG,EAAE,CAAC;IACtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,UAAU,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtC,OAAO,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,KAAK,CAAC,GAAa;IAC1B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,MAAc;IAChC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,IAAI,SAAS,EAAE,CAAC;YACd,CAAC,IAAI,CAAC,CAAC;YACP,IAAI,CAAC,GAAG,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,GAAG,IAAI,CAAC,CAAC;QACT,SAAS,GAAG,CAAC,SAAS,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE7C,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,OAAgC;IAEhC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO;YACnC,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,EAAE;YACV,aAAa,EAAE,EAAE;YACjB,cAAc,EAAE,EAAE;YAClB,kBAAkB,EAAE,KAAK;YACzB,kBAAkB,EAAE,EAAE;YACtB,eAAe,EAAE,KAAK;YACtB,eAAe,EAAE,EAAE;YACnB,iBAAiB,EAAE,KAAK;YACxB,gBAAgB,EAAE,KAAK;YACvB,WAAW,EAAE,KAAK;YAClB,YAAY,EAAE,KAAK;SACpB,CAAC;IAEF,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,GAAG,CAAC;IAC5C,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;IAC3C,MAAM,gBAAgB,GAAG,OAAO,EAAE,gBAAgB,IAAI,EAAE,CAAC;IACzD,MAAM,oBAAoB,GAAG,OAAO,EAAE,oBAAoB,IAAI,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC;IAE5C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAErC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS;YAAE,MAAM;IACxC,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAClB,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAC/D,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAEtB,MAAM,YAAY,GAAG,KAAK,CACxB,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACrB,MAAM,CAAC,mBAAmB,CAAC;SAC3B,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CACvB,CAAC;IAEF,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,EAAE,CAAC;QACxD,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvC,IAAI,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,IAAI,CAAC;YACzD,IAAI,MAAM,GAAG,IAAI,IAAI,MAAM,GAAG,UAAU,EAAE,CAAC;gBACzC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;YACD,IAAI,aAAa,CAAC,MAAM,IAAI,gBAAgB;gBAAE,MAAM;QACtD,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG;YAAE,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,iBAAiB,CAAC,MAAM,IAAI,oBAAoB;YAAE,MAAM;IAC9D,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,qBAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,KAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACzG,MAAM,iBAAiB,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAClE,MAAM,eAAe,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAClG,MAAM,WAAW,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;IAE/D,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;QAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC;QAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,UAAU,GAAG,CAAC;QAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,eAAe,GAAG,CAAC;QAAE,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5D,IAAI,WAAW,GAAG,CAAC;QAAE,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE1D,OAAO;QACL,MAAM;QACN,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,MAAM;QACN,aAAa,EAAE,YAAY;QAC3B,cAAc,EAAE,aAAa;QAC7B,kBAAkB,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC;QAC5C,kBAAkB,EAAE,iBAAiB;QACrC,eAAe,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC;QAC7C,eAAe,EAAE,cAAc;QAC/B,iBAAiB,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC;QAC5C,gBAAgB,EAAE,eAAe,GAAG,CAAC;QACrC,WAAW,EAAE,UAAU,GAAG,CAAC;QAC3B,YAAY,EAAE,WAAW,GAAG,CAAC;KAC9B,CAAC;AACJ,CAAC"}

package/dist/extractors/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Entity extraction utilities.
+ *
+ * @module extractors
+ */
+export { extractEntities, type ExtractedEntities, type ExtractEntitiesOptions, } from './content.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/extractors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/extractors/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,eAAe,EACf,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,cAAc,CAAC"}

package/dist/extractors/index.js

@@ -0,0 +1,7 @@
+/**
+ * Entity extraction utilities.
+ *
+ * @module extractors
+ */
+export { extractEntities, } from './content.js';
+//# sourceMappingURL=index.js.map

package/dist/extractors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/extractors/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,eAAe,GAGhB,MAAM,cAAc,CAAC"}

package/dist/index.d.ts

@@ -34,11 +34,12 @@
 export { Veto, ToolCallDeniedError, type VetoOptions, type VetoMode, type ValidationMode, type WrappedTools, type WrappedHandler, type GuardContext, type GuardResult, } from './core/veto.js';
 export { protect, type ProtectOptions, type ProtectMode, } from './core/protect.js';
 export type { ToolDefinition, ToolCall, ToolResult, ToolHandler, ExecutableTool, ToolInputSchema, JsonSchemaType, JsonSchemaProperty, } from './types/tool.js';
-export type { LogLevel, ValidationDecision, ValidationResult, ValidationContext, Validator, NamedValidator, ToolCallHistoryEntry, DecisionExportFormat, DecisionExportRecord, } from './types/config.js';
+export type { LogLevel, StreamLogMode, ValidationDecision, ValidationResult, ValidationContext, Validator, NamedValidator, ToolCallHistoryEntry, DecisionExportFormat, DecisionExportRecord, } from './types/config.js';
 export type { Rule, RuleSet, RuleCondition, RuleAgentsScope, RuleAction, OutputRule, OutputRuleAction, RuleSeverity, ValidationAPIResponse, } from './rules/types.js';
 export type { CustomConfig, CustomProvider, CustomResponse, CustomToolCall, } from './custom/types.js';
 export { CustomClient } from './custom/client.js';
-export type { VetoCloudConfig, CloudValidationResponse, FailedConstraint, ApprovalData, ApprovalPollOptions, } from './cloud/types.js';
+export type { VetoCloudConfig, CloudValidationResponse, FailedConstraint, ApprovalData, ApprovalPollOptions, SessionState, } from './cloud/types.js';
+export type { ArgumentConstraint, SessionConstraints, SessionCounterConfig, CumulativeLimit, DeterministicPolicy, LocalValidationResult, } from './deterministic/types.js';
 export { VetoCloudClient, ApprovalTimeoutError } from './cloud/client.js';
 export type { InterceptionResult, DenialDetails } from './core/interceptor.js';
 export type { HistoryStats } from './core/history.js';
@@ -46,10 +47,15 @@ export type { OutputValidationResult } from './core/output-validator.js';
 export type { EventWebhookConfig, VetoWebhookEvent, VetoWebhookEventType, VetoWebhookFormat, } from './core/events.js';
 export { formatSlackPayload, formatPagerDutyPayload, formatGenericPayload, formatCefPayload, resolveEventWebhookConfig, } from './core/events.js';
 export { BudgetTracker, BudgetExceededError, type BudgetConfig, type ToolCostMap, type BudgetStatus, } from './core/budget.js';
-export { toOpenAI, fromOpenAI, fromOpenAIToolCall, toOpenAITools, toAnthropic, fromAnthropic, fromAnthropicToolUse, toAnthropicTools, toGoogleTool, fromGoogleFunctionCall, toMCP, fromMCP, fromMCPToolCall, toMCPTools, isMCPTool, } from './providers/adapters.js';
+export { LocalBudgetEngine, EconomicEvaluator, createX402Connector, createMPPConnector, createAP2Connector, buildX402ConnectorError, buildMPPConnectorError, buildAP2ConnectorError, } from './economic/index.js';
+export type { EconomicContext, EconomicDenialDetails, EconomicDenialReason, EconomicProtocol, BudgetEngine, BudgetCheckResult, BudgetScope, EconomicBudgetStatus, EconomicPolicyConfig, EconomicBudgetConfig, CostExtractionConfig, PayerConfig, ProtocolConnector, EconomicWebhookEventType, } from './economic/index.js';
+export { toOpenAI, fromOpenAI, fromOpenAIToolCall, toOpenAITools, toAnthropic, fromAnthropic, fromAnthropicToolUse, toAnthropicTools, toGoogleTool, fromGoogleFunctionCall, toMCP, fromMCP, fromMCPToolCall, toMCPTools, isMCPTool, extractMCPEconomicContext, } from './providers/adapters.js';
 export type { OpenAITool, OpenAIToolCall, AnthropicTool, AnthropicToolUse, GoogleTool, GoogleFunctionCall, MCPTool, MCPToolCallArgs, MCPToolResult, MCPServerClient, } from './providers/types.js';
 export { compile, evaluate, typeCheck } from './compiler/index.js';
 export type { ASTNode, EvalContext, TypeCheckResult } from './compiler/index.js';
 export { OUTPUT_PATTERNS, OUTPUT_PATTERN_SSN, OUTPUT_PATTERN_CREDIT_CARD, OUTPUT_PATTERN_OPENAI_API_KEY, OUTPUT_PATTERN_GITHUB_API_KEY, OUTPUT_PATTERN_AWS_API_KEY, OUTPUT_PATTERN_EMAIL, OUTPUT_PATTERN_US_PHONE, } from './rules/patterns.js';
+export { extractEntities, type ExtractedEntities, type ExtractEntitiesOptions, } from './extractors/content.js';
+export { evaluateRulesLocally, evaluateCondition as evaluateConditionLocally, resolveFieldPath as resolveLocalFieldPath, type LocalEvalResult, } from './rules/local-evaluator.js';
+export { BROWSER_AGENT_SYSTEM_PROMPT, getPolicyOutputSchema, sanitizeGeneratedRules, validatePolicyOutput, tryInstantGeneration, looksLikePolicyDeclaration, reviewPolicyRequest, type PolicyGenerationResult, type PolicyClarificationRequest, } from './policy/generator.js';
 export { init, isInitialized } from './cli/init.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,EACL,IAAI,EACJ,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,OAAO,EACP,KAAK,cAAc,EACnB,KAAK,WAAW,GACjB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EACV,cAAc,EACd,QAAQ,EACR,UAAU,EACV,WAAW,EACX,cAAc,EACd,eAAe,EACf,cAAc,EACd,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,QAAQ,EACR,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EACV,IAAI,EACJ,OAAO,EACP,aAAa,EACb,eAAe,EACf,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,YAAY,EACV,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAG1E,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC/E,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,YAAY,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACzE,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,YAAY,GAClB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,EACtB,KAAK,EACL,OAAO,EACP,eAAe,EACf,UAAU,EACV,SAAS,GACV,MAAM,yBAAyB,CAAC;AAEjC,YAAY,EACV,UAAU,EACV,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,kBAAkB,EAClB,OAAO,EACP,eAAe,EACf,aAAa,EACb,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACnE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGjF,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,EACL,IAAI,EACJ,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,OAAO,EACP,KAAK,cAAc,EACnB,KAAK,WAAW,GACjB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EACV,cAAc,EACd,QAAQ,EACR,UAAU,EACV,WAAW,EACX,cAAc,EACd,eAAe,EACf,cAAc,EACd,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,QAAQ,EACR,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,cAAc,EACd,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EACV,IAAI,EACJ,OAAO,EACP,aAAa,EACb,eAAe,EACf,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,YAAY,EACV,eAAe,EACf,uBAAuB,EACvB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,YAAY,GACb,MAAM,kBAAkB,CAAC;AAG1B,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAG1E,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC/E,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,YAAY,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACzE,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,YAAY,GAClB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,WAAW,EACX,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,WAAW,EACX,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,EACtB,KAAK,EACL,OAAO,EACP,eAAe,EACf,UAAU,EACV,SAAS,EACT,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAEjC,YAAY,EACV,UAAU,EACV,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,kBAAkB,EAClB,OAAO,EACP,eAAe,EACf,aAAa,EACb,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACnE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGjF,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,eAAe,EACf,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,oBAAoB,EACpB,iBAAiB,IAAI,wBAAwB,EAC7C,gBAAgB,IAAI,qBAAqB,EACzC,KAAK,eAAe,GACrB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,EACnB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,GAChC,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -37,14 +37,22 @@ export { protect, } from './core/protect.js';
 export { CustomClient } from './custom/client.js';
 export { VetoCloudClient, ApprovalTimeoutError } from './cloud/client.js';
 export { formatSlackPayload, formatPagerDutyPayload, formatGenericPayload, formatCefPayload, resolveEventWebhookConfig, } from './core/events.js';
-// Budget
+// Budget (legacy — use economic module for new code)
 export { BudgetTracker, BudgetExceededError, } from './core/budget.js';
+// Economic authorization (x402, MPP, AP2)
+export { LocalBudgetEngine, EconomicEvaluator, createX402Connector, createMPPConnector, createAP2Connector, buildX402ConnectorError, buildMPPConnectorError, buildAP2ConnectorError, } from './economic/index.js';
 // Provider adapters (for converting to/from provider formats)
-export { toOpenAI, fromOpenAI, fromOpenAIToolCall, toOpenAITools, toAnthropic, fromAnthropic, fromAnthropicToolUse, toAnthropicTools, toGoogleTool, fromGoogleFunctionCall, toMCP, fromMCP, fromMCPToolCall, toMCPTools, isMCPTool, } from './providers/adapters.js';
+export { toOpenAI, fromOpenAI, fromOpenAIToolCall, toOpenAITools, toAnthropic, fromAnthropic, fromAnthropicToolUse, toAnthropicTools, toGoogleTool, fromGoogleFunctionCall, toMCP, fromMCP, fromMCPToolCall, toMCPTools, isMCPTool, extractMCPEconomicContext, } from './providers/adapters.js';
 // Compiler (AST-based policy expressions)
 export { compile, evaluate, typeCheck } from './compiler/index.js';
 // Common output redaction patterns (reference only, not auto-applied)
 export { OUTPUT_PATTERNS, OUTPUT_PATTERN_SSN, OUTPUT_PATTERN_CREDIT_CARD, OUTPUT_PATTERN_OPENAI_API_KEY, OUTPUT_PATTERN_GITHUB_API_KEY, OUTPUT_PATTERN_AWS_API_KEY, OUTPUT_PATTERN_EMAIL, OUTPUT_PATTERN_US_PHONE, } from './rules/patterns.js';
+// Content extractors
+export { extractEntities, } from './extractors/content.js';
+// Local rule evaluator
+export { evaluateRulesLocally, evaluateCondition as evaluateConditionLocally, resolveFieldPath as resolveLocalFieldPath, } from './rules/local-evaluator.js';
+// Policy generator utilities
+export { BROWSER_AGENT_SYSTEM_PROMPT, getPolicyOutputSchema, sanitizeGeneratedRules, validatePolicyOutput, tryInstantGeneration, looksLikePolicyDeclaration, reviewPolicyRequest, } from './policy/generator.js';
 // CLI init function (for programmatic use)
 export { init, isInitialized } from './cli/init.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,cAAc;AACd,OAAO,EACL,IAAI,EACJ,mBAAmB,GAQpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,OAAO,GAGR,MAAM,mBAAmB,CAAC;AA8C3B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAUlD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAY1E,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAE1B,SAAS;AACT,OAAO,EACL,aAAa,EACb,mBAAmB,GAIpB,MAAM,kBAAkB,CAAC;AAE1B,8DAA8D;AAC9D,OAAO,EACL,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,EACtB,KAAK,EACL,OAAO,EACP,eAAe,EACf,UAAU,EACV,SAAS,GACV,MAAM,yBAAyB,CAAC;AAejC,0CAA0C;AAC1C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGnE,sEAAsE;AACtE,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAE7B,2CAA2C;AAC3C,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,cAAc;AACd,OAAO,EACL,IAAI,EACJ,mBAAmB,GAQpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,OAAO,GAGR,MAAM,mBAAmB,CAAC;AA+C3B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAqBlD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAY1E,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAE1B,qDAAqD;AACrD,OAAO,EACL,aAAa,EACb,mBAAmB,GAIpB,MAAM,kBAAkB,CAAC;AAE1B,0CAA0C;AAC1C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAkB7B,8DAA8D;AAC9D,OAAO,EACL,QAAQ,EACR,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,YAAY,EACZ,sBAAsB,EACtB,KAAK,EACL,OAAO,EACP,eAAe,EACf,UAAU,EACV,SAAS,EACT,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AAejC,0CAA0C;AAC1C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGnE,sEAAsE;AACtE,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,EAC7B,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAE7B,qBAAqB;AACrB,OAAO,EACL,eAAe,GAGhB,MAAM,yBAAyB,CAAC;AAEjC,uBAAuB;AACvB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,IAAI,wBAAwB,EAC7C,gBAAgB,IAAI,qBAAqB,GAE1C,MAAM,4BAA4B,CAAC;AAEpC,6BAA6B;AAC7B,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,GAGpB,MAAM,uBAAuB,CAAC;AAE/B,2CAA2C;AAC3C,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}