@aicqtools/guardrail 1.0.0-alpha.2

package/dist/rules-default/verify-pg-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-pg-response.d.ts","sourceRoot":"","sources":["../../src/rules-default/verify-pg-response.ts"],"names":[],"mappings":";AA0BA,wBAYG"}

package/dist/rules-default/verify-pg-response.js

@@ -0,0 +1,37 @@
+import { defineRule } from '@aicqtools/rule-sdk';
+/**
+ * PCI DSS / payment-domain best practice: external PG (payment gateway)
+ * responses must be verified (signature/hash/checksum) before being
+ * trusted for downstream state changes.
+ *
+ * Heuristic: function bodies that contain a PG-domain HTTP call
+ * (`/payments`, `/pay`, `pg.`) and proceed without invoking
+ * `signature` / `hash` / `checksum` / `verify`.
+ *
+ * Limitation: false negatives if verification is delegated to a wrapper
+ * function. Severity is `warning` to limit noise.
+ */
+const PG_CALL = /\b(axios|fetch|got|http\.(get|post)|httpClient)\b.*\b(payments?|pg|inicis|toss|kakao|naver)\b/i;
+const VERIFICATION = /\b(signature|hash|checksum|verify|hmac|hmacSha)\b/i;
+function check(node, ctx) {
+    const text = ctx.textOf(node);
+    if (!PG_CALL.test(text))
+        return;
+    if (VERIFICATION.test(text))
+        return;
+    ctx.report({ node });
+}
+export default defineRule({
+    id: 'verify-pg-response',
+    language: ['typescript', 'tsx'],
+    severity: 'warning',
+    message: 'Payment gateway response is consumed without signature/hash verification (PCI DSS § 6.2.4 — input validation; payment-domain best practice).',
+    messageKo: '결제 게이트웨이 응답을 서명/해시 검증 없이 사용합니다 (PCI DSS § 6.2.4 — 입력 검증; 결제 도메인 권장 사항).',
+    docs: 'https://github.com/aicqtools/aicqtools/blob/main/docs/rules/verify-pg-response.md',
+    visitors: {
+        function_declaration: check,
+        arrow_function: check,
+        method_definition: check,
+    },
+});
+//# sourceMappingURL=verify-pg-response.js.map

package/dist/rules-default/verify-pg-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-pg-response.js","sourceRoot":"","sources":["../../src/rules-default/verify-pg-response.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGjD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,GAAG,gGAAgG,CAAC;AACjH,MAAM,YAAY,GAAG,oDAAoD,CAAC;AAE1E,SAAS,KAAK,CAAC,IAAuB,EAAE,GAAgB;IACtD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO;IAChC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO;IACpC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;AACvB,CAAC;AAED,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,oBAAoB;IACxB,QAAQ,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC;IAC/B,QAAQ,EAAE,SAAS;IACnB,OAAO,EAAE,8IAA8I;IACvJ,SAAS,EAAE,yEAAyE;IACpF,IAAI,EAAE,mFAAmF;IACzF,QAAQ,EAAE;QACR,oBAAoB,EAAE,KAAK;QAC3B,cAAc,EAAE,KAAK;QACrB,iBAAiB,EAAE,KAAK;KACzB;CACF,CAAC,CAAC"}

package/dist/rules-default/won-format-thousands.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@aicqtools/rule-sdk").FunctionRule;
+export default _default;
+//# sourceMappingURL=won-format-thousands.d.ts.map

package/dist/rules-default/won-format-thousands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"won-format-thousands.d.ts","sourceRoot":"","sources":["../../src/rules-default/won-format-thousands.ts"],"names":[],"mappings":";AAWA,wBAYG"}

package/dist/rules-default/won-format-thousands.js

@@ -0,0 +1,24 @@
+import { defineRule } from '@aicqtools/rule-sdk';
+/**
+ * Detect string literals like `"5000원"` or `"50000원"` (≥4 digits) without a thousands
+ * separator. UX best practice in Korea: always show ₩ amounts as `5,000원`.
+ *
+ * Known limitation: doesn't catch programmatically-formatted amounts (template literals
+ * with computed values are intentionally skipped to avoid false positives).
+ */
+const WON_NUMBER_PATTERN = /["'`](\d{4,})원["'`]/;
+export default defineRule({
+    id: 'won-format-thousands',
+    language: ['typescript', 'javascript', 'tsx'],
+    severity: 'info',
+    message: 'Won amount should use thousands separator: `5,000원` instead of `5000원`.',
+    messageKo: '원화 금액은 천단위 콤마 권장: `5000원` → `5,000원`.',
+    visitors: {
+        string(node, ctx) {
+            const text = ctx.textOf(node);
+            if (WON_NUMBER_PATTERN.test(text))
+                ctx.report({ node });
+        },
+    },
+});
+//# sourceMappingURL=won-format-thousands.js.map

package/dist/rules-default/won-format-thousands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"won-format-thousands.js","sourceRoot":"","sources":["../../src/rules-default/won-format-thousands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEjD,eAAe,UAAU,CAAC;IACxB,EAAE,EAAE,sBAAsB;IAC1B,QAAQ,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,CAAC;IAC7C,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,yEAAyE;IAClF,SAAS,EAAE,uCAAuC;IAClD,QAAQ,EAAE;QACR,MAAM,CAAC,IAAI,EAAE,GAAG;YACd,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;KACF;CACF,CAAC,CAAC"}

package/dist/runner/context.d.ts

@@ -0,0 +1,12 @@
+import type Parser from 'tree-sitter';
+import type { Diagnostic, Language, Range } from '@aicqtools/core';
+import type { RuleContext, RuleMeta } from '@aicqtools/rule-sdk';
+export declare function rangeOfNode(node: Parser.SyntaxNode): Range;
+export interface RunContext {
+    readonly filePath: string;
+    readonly source: string;
+    readonly language: Language;
+    readonly diagnostics: Diagnostic[];
+}
+export declare function makeRuleContext(run: RunContext, meta: RuleMeta): RuleContext;
+//# sourceMappingURL=context.d.ts.map

package/dist/runner/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/runner/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAY,MAAM,iBAAiB,CAAC;AAC7E,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAc,MAAM,qBAAqB,CAAC;AAE7E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,GAAG,KAAK,CAK1D;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC;CACpC;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,GAAG,WAAW,CA0B5E"}

package/dist/runner/context.js

@@ -0,0 +1,34 @@
+export function rangeOfNode(node) {
+    return {
+        start: { line: node.startPosition.row + 1, column: node.startPosition.column + 1 },
+        end: { line: node.endPosition.row + 1, column: node.endPosition.column + 1 },
+    };
+}
+export function makeRuleContext(run, meta) {
+    return {
+        filePath: run.filePath,
+        source: run.source,
+        language: run.language,
+        textOf(node) {
+            return run.source.slice(node.startIndex, node.endIndex);
+        },
+        rangeOf(node) {
+            return rangeOfNode(node);
+        },
+        report(args) {
+            const diagnostic = {
+                ruleId: meta.id,
+                severity: meta.severity,
+                message: args.message ?? meta.message,
+                ...(args.messageKo ?? meta.messageKo
+                    ? { messageKo: args.messageKo ?? meta.messageKo }
+                    : {}),
+                file: run.filePath,
+                range: rangeOfNode(args.node),
+                ...(meta.docs ? { docs: meta.docs } : {}),
+            };
+            run.diagnostics.push(diagnostic);
+        },
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/runner/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/runner/context.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,WAAW,CAAC,IAAuB;IACjD,OAAO;QACL,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE;QAClF,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE;KAC7E,CAAC;AACJ,CAAC;AASD,MAAM,UAAU,eAAe,CAAC,GAAe,EAAE,IAAc;IAC7D,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,CAAC,IAAI;YACT,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,CAAC,IAAI;YACV,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,CAAC,IAAgB;YACrB,MAAM,UAAU,GAAe;gBAC7B,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAoB;gBACnC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;gBACrC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS;oBAClC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,EAAE;oBACjD,CAAC,CAAC,EAAE,CAAC;gBACP,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC7B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5B,CAAC;YAChB,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runner/index.d.ts

@@ -0,0 +1,7 @@
+export { runFile, runFileWithSource } from './run-file.js';
+export { runProject } from './run-project.js';
+export { runRule } from './run-rule.js';
+export { ruleSignature, rulesetSignature } from './ruleset-signature.js';
+export type { RunFileResult } from './run-file.js';
+export type { RunProjectOptions } from './run-project.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/runner/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runner/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACzE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/runner/index.js

@@ -0,0 +1,5 @@
+export { runFile, runFileWithSource } from './run-file.js';
+export { runProject } from './run-project.js';
+export { runRule } from './run-rule.js';
+export { ruleSignature, rulesetSignature } from './ruleset-signature.js';
+//# sourceMappingURL=index.js.map

package/dist/runner/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runner/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/runner/ruleset-signature.d.ts

@@ -0,0 +1,4 @@
+import type { Rule } from '@aicqtools/rule-sdk';
+export declare function ruleSignature(rule: Rule): string;
+export declare function rulesetSignature(rules: readonly Rule[]): string[];
+//# sourceMappingURL=ruleset-signature.d.ts.map

package/dist/runner/ruleset-signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ruleset-signature.d.ts","sourceRoot":"","sources":["../../src/runner/ruleset-signature.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAEhD,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAMhD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,GAAG,MAAM,EAAE,CAEjE"}

package/dist/runner/ruleset-signature.js

@@ -0,0 +1,11 @@
+export function ruleSignature(rule) {
+    if (rule.kind === 'pattern') {
+        return `pattern:${rule.id}:${rule.severity}:${rule.query}`;
+    }
+    const visitorKeys = Object.keys(rule.visitors).sort().join(',');
+    return `function:${rule.id}:${rule.severity}:${visitorKeys}`;
+}
+export function rulesetSignature(rules) {
+    return rules.map(ruleSignature);
+}
+//# sourceMappingURL=ruleset-signature.js.map

package/dist/runner/ruleset-signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ruleset-signature.js","sourceRoot":"","sources":["../../src/runner/ruleset-signature.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,aAAa,CAAC,IAAU;IACtC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,WAAW,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;IAC7D,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChE,OAAO,YAAY,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,QAAQ,IAAI,WAAW,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAsB;IACrD,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAClC,CAAC"}

package/dist/runner/run-file.d.ts

@@ -0,0 +1,10 @@
+import type { Diagnostic, Language } from '@aicqtools/core';
+import type { Rule } from '@aicqtools/rule-sdk';
+export interface RunFileResult {
+    readonly filePath: string;
+    readonly language: Language | null;
+    readonly diagnostics: readonly Diagnostic[];
+}
+export declare function runFile(filePath: string, rules: readonly Rule[]): Promise<RunFileResult>;
+export declare function runFileWithSource(filePath: string, source: string, language: Language, rules: readonly Rule[]): RunFileResult;
+//# sourceMappingURL=run-file.d.ts.map

package/dist/runner/run-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-file.d.ts","sourceRoot":"","sources":["../../src/runner/run-file.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE5D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAGhD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,SAAS,UAAU,EAAE,CAAC;CAC7C;AAED,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,IAAI,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAM9F;AAED,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,SAAS,IAAI,EAAE,GACrB,aAAa,CAQf"}

package/dist/runner/run-file.js

@@ -0,0 +1,20 @@
+import { readFile } from 'node:fs/promises';
+import { detectLanguage, parseSource } from '@aicqtools/core';
+import { runRule } from './run-rule.js';
+export async function runFile(filePath, rules) {
+    const language = detectLanguage(filePath);
+    if (!language)
+        return { filePath, language: null, diagnostics: [] };
+    const source = await readFile(filePath, 'utf-8');
+    return runFileWithSource(filePath, source, language, rules);
+}
+export function runFileWithSource(filePath, source, language, rules) {
+    const tree = parseSource(language, source);
+    const diagnostics = [];
+    const run = { filePath, source, language, diagnostics };
+    for (const rule of rules) {
+        runRule(rule, run, tree);
+    }
+    return { filePath, language, diagnostics };
+}
+//# sourceMappingURL=run-file.js.map

package/dist/runner/run-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-file.js","sourceRoot":"","sources":["../../src/runner/run-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAQxC,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,QAAgB,EAAE,KAAsB;IACpE,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAEpE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjD,OAAO,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,MAAc,EACd,QAAkB,EAClB,KAAsB;IAEtB,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AAC7C,CAAC"}

package/dist/runner/run-project.d.ts

@@ -0,0 +1,12 @@
+import type { CheckResult } from '@aicqtools/core';
+import { FileCache } from '@aicqtools/core';
+import type { Rule } from '@aicqtools/rule-sdk';
+export interface RunProjectOptions {
+    readonly cwd: string;
+    readonly include: readonly string[];
+    readonly exclude: readonly string[];
+    readonly rules: readonly Rule[];
+    readonly cache?: FileCache;
+}
+export declare function runProject(opts: RunProjectOptions): Promise<CheckResult>;
+//# sourceMappingURL=run-project.d.ts.map

package/dist/runner/run-project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-project.d.ts","sourceRoot":"","sources":["../../src/runner/run-project.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAwB,MAAM,iBAAiB,CAAC;AAClE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAIhD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;CAC5B;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CAqD9E"}

package/dist/runner/run-project.js

@@ -0,0 +1,55 @@
+import fastGlob from 'fast-glob';
+import { stat } from 'node:fs/promises';
+import { FileCache, hashRulesetSignature } from '@aicqtools/core';
+import { runFile } from './run-file.js';
+import { rulesetSignature } from './ruleset-signature.js';
+export async function runProject(opts) {
+    const start = Date.now();
+    const files = await fastGlob([...opts.include], {
+        cwd: opts.cwd,
+        ignore: [...opts.exclude],
+        absolute: true,
+        onlyFiles: true,
+        dot: false,
+    });
+    const cache = opts.cache;
+    const rulesHash = cache ? hashRulesetSignature(rulesetSignature(opts.rules)) : '';
+    const diagnostics = [];
+    for (const file of files) {
+        if (cache) {
+            try {
+                const st = await stat(file);
+                const cached = cache.get({
+                    filePath: file,
+                    mtime: Math.floor(st.mtimeMs),
+                    size: st.size,
+                    rulesHash,
+                });
+                if (cached) {
+                    diagnostics.push(...cached);
+                    continue;
+                }
+                const result = await runFile(file, opts.rules);
+                cache.set({
+                    filePath: file,
+                    mtime: Math.floor(st.mtimeMs),
+                    size: st.size,
+                    rulesHash,
+                }, result.diagnostics);
+                diagnostics.push(...result.diagnostics);
+                continue;
+            }
+            catch {
+                // fall through to non-cached path
+            }
+        }
+        const result = await runFile(file, opts.rules);
+        diagnostics.push(...result.diagnostics);
+    }
+    return {
+        diagnostics,
+        filesScanned: files.length,
+        durationMs: Date.now() - start,
+    };
+}
+//# sourceMappingURL=run-project.js.map

package/dist/runner/run-project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-project.js","sourceRoot":"","sources":["../../src/runner/run-project.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAExC,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAElE,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAU1D,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAuB;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE;QAC9C,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;QACzB,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,IAAI;QACf,GAAG,EAAE,KAAK;KACX,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,MAAM,WAAW,GAAiB,EAAE,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC;oBACvB,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC;oBAC7B,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,SAAS;iBACV,CAAC,CAAC;gBACH,IAAI,MAAM,EAAE,CAAC;oBACX,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;oBAC5B,SAAS;gBACX,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC/C,KAAK,CAAC,GAAG,CACP;oBACE,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC;oBAC7B,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,SAAS;iBACV,EACD,MAAM,CAAC,WAAW,CACnB,CAAC;gBACF,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;gBACxC,SAAS;YACX,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO;QACL,WAAW;QACX,YAAY,EAAE,KAAK,CAAC,MAAM;QAC1B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC/B,CAAC;AACJ,CAAC"}

package/dist/runner/run-rule.d.ts

@@ -0,0 +1,5 @@
+import Parser from 'tree-sitter';
+import type { Rule } from '@aicqtools/rule-sdk';
+import { type RunContext } from './context.js';
+export declare function runRule(rule: Rule, run: RunContext, tree: Parser.Tree): void;
+//# sourceMappingURL=run-rule.d.ts.map

package/dist/runner/run-rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-rule.d.ts","sourceRoot":"","sources":["../../src/runner/run-rule.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,OAAO,KAAK,EAAE,IAAI,EAA6B,MAAM,qBAAqB,CAAC;AAE3E,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AA4BhE,wBAAgB,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAI5E"}

package/dist/runner/run-rule.js

@@ -0,0 +1,37 @@
+import Parser from 'tree-sitter';
+import { traverse } from '../matcher/traverse.js';
+import { makeRuleContext } from './context.js';
+import { getParser } from '@aicqtools/core';
+function ruleAppliesTo(rule, language) {
+    const langs = Array.isArray(rule.language) ? rule.language : [rule.language];
+    return langs.includes(language);
+}
+function runFunctionRule(rule, run, tree) {
+    const ctx = makeRuleContext(run, rule);
+    traverse(tree.rootNode, (node) => {
+        const visitor = rule.visitors[node.type];
+        if (visitor)
+            visitor(node, ctx);
+    });
+}
+function runPatternRule(rule, run, tree) {
+    const parser = getParser(run.language);
+    const lang = parser.getLanguage();
+    const query = new Parser.Query(lang, rule.query);
+    const matches = query.matches(tree.rootNode);
+    const ctx = makeRuleContext(run, rule);
+    for (const match of matches) {
+        const target = match.captures[0]?.node;
+        if (target)
+            ctx.report({ node: target });
+    }
+}
+export function runRule(rule, run, tree) {
+    if (!ruleAppliesTo(rule, run.language))
+        return;
+    if (rule.kind === 'function')
+        runFunctionRule(rule, run, tree);
+    else
+        runPatternRule(rule, run, tree);
+}
+//# sourceMappingURL=run-rule.js.map

package/dist/runner/run-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-rule.js","sourceRoot":"","sources":["../../src/runner/run-rule.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAmB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,SAAS,aAAa,CAAC,IAAU,EAAE,QAAkB;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7E,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,IAAkB,EAAE,GAAe,EAAE,IAAiB;IAC7E,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO;YAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,IAAiB,EAAE,GAAe,EAAE,IAAiB;IAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QACvC,IAAI,MAAM;YAAE,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAU,EAAE,GAAe,EAAE,IAAiB;IACpE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO;IAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;QAAE,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;;QAC1D,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC"}

package/dist/sync/index.d.ts

@@ -0,0 +1,5 @@
+export { renderRules, injectIntoMarkdown, MARKER_START, MARKER_END, } from './render.js';
+export type { RenderOptions } from './render.js';
+export { syncAiRules } from './sync-files.js';
+export type { SyncOptions, SyncTarget } from './sync-files.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/sync/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sync/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/sync/index.js

@@ -0,0 +1,3 @@
+export { renderRules, injectIntoMarkdown, MARKER_START, MARKER_END, } from './render.js';
+export { syncAiRules } from './sync-files.js';
+//# sourceMappingURL=index.js.map

package/dist/sync/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sync/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,YAAY,EACZ,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/sync/render.d.ts

@@ -0,0 +1,9 @@
+import type { Rule } from '@aicqtools/rule-sdk';
+export interface RenderOptions {
+    readonly locale: 'ko' | 'en';
+}
+export declare function renderRules(rules: readonly Rule[], opts: RenderOptions): string;
+export declare const MARKER_START = "<!-- aicq:rules:start -->";
+export declare const MARKER_END = "<!-- aicq:rules:end -->";
+export declare function injectIntoMarkdown(existing: string | null, body: string): string;
+//# sourceMappingURL=render.d.ts.map

package/dist/sync/render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../src/sync/render.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAEhD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;CAC9B;AAoCD,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,GAAG,MAAM,CAmB/E;AAED,eAAO,MAAM,YAAY,8BAA8B,CAAC;AACxD,eAAO,MAAM,UAAU,4BAA4B,CAAC;AAEpD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAUhF"}

package/dist/sync/render.js

@@ -0,0 +1,70 @@
+function severityOrder(s) {
+    if (s === 'error')
+        return 0;
+    if (s === 'warning')
+        return 1;
+    return 2;
+}
+function sectionTitle(locale, s) {
+    if (locale === 'ko') {
+        if (s === 'error')
+            return '## 오류 (반드시 지킬 것)';
+        if (s === 'warning')
+            return '## 경고';
+        return '## 정보';
+    }
+    if (s === 'error')
+        return '## Errors (must not violate)';
+    if (s === 'warning')
+        return '## Warnings';
+    return '## Info';
+}
+function header(locale) {
+    if (locale === 'ko') {
+        return `# AI 코딩 가이드라인\n\n아래 규칙은 aicq가 커밋 단계에서 강제합니다. 자동 생성된 내용 — 수정은 \`aicq/rules/\` 에서.`;
+    }
+    return `# AI Coding Guidelines\n\nThe rules below are enforced by aicq at commit time. Generated automatically — edit \`aicq/rules/\` to change.`;
+}
+function getMessage(rule, locale) {
+    if (locale === 'ko' && rule.messageKo)
+        return rule.messageKo;
+    return rule.message;
+}
+function renderRule(rule, locale) {
+    const langs = Array.isArray(rule.language) ? rule.language : [rule.language];
+    return `### ${rule.id}\n${getMessage(rule, locale)}\n- Languages: ${langs.join(', ')}`;
+}
+export function renderRules(rules, opts) {
+    const sorted = [...rules].sort((a, b) => {
+        const sev = severityOrder(a.severity) - severityOrder(b.severity);
+        return sev !== 0 ? sev : a.id.localeCompare(b.id);
+    });
+    const lines = [header(opts.locale), ''];
+    let lastSeverity = null;
+    for (const rule of sorted) {
+        if (rule.severity !== lastSeverity) {
+            lines.push('');
+            lines.push(sectionTitle(opts.locale, rule.severity));
+            lines.push('');
+            lastSeverity = rule.severity;
+        }
+        lines.push(renderRule(rule, opts.locale));
+        lines.push('');
+    }
+    return lines.join('\n').trimEnd() + '\n';
+}
+export const MARKER_START = '<!-- aicq:rules:start -->';
+export const MARKER_END = '<!-- aicq:rules:end -->';
+export function injectIntoMarkdown(existing, body) {
+    const block = `${MARKER_START}\n${body}${MARKER_END}\n`;
+    if (existing === null || existing.length === 0)
+        return block;
+    const startIdx = existing.indexOf(MARKER_START);
+    const endIdx = existing.indexOf(MARKER_END);
+    if (startIdx === -1 || endIdx === -1 || endIdx < startIdx) {
+        const sep = existing.endsWith('\n') ? '\n' : '\n\n';
+        return `${existing}${sep}${block}`;
+    }
+    return `${existing.slice(0, startIdx)}${block}${existing.slice(endIdx + MARKER_END.length).replace(/^\n/, '')}`;
+}
+//# sourceMappingURL=render.js.map

package/dist/sync/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../../src/sync/render.ts"],"names":[],"mappings":"AAOA,SAAS,aAAa,CAAC,CAAW;IAChC,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,YAAY,CAAC,MAAmB,EAAE,CAAW;IACpD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,OAAO;YAAE,OAAO,kBAAkB,CAAC;QAC7C,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QACpC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,8BAA8B,CAAC;IACzD,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAC1C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,MAAM,CAAC,MAAmB;IACjC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,kFAAkF,CAAC;IAC5F,CAAC;IACD,OAAO,0IAA0I,CAAC;AACpJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAU,EAAE,MAAmB;IACjD,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC;IAC7D,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,IAAU,EAAE,MAAmB;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7E,OAAO,OAAO,IAAI,CAAC,EAAE,KAAK,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,kBAAkB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAsB,EAAE,IAAmB;IACrE,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAa,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,YAAY,GAAoB,IAAI,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,2BAA2B,CAAC;AACxD,MAAM,CAAC,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAEpD,MAAM,UAAU,kBAAkB,CAAC,QAAuB,EAAE,IAAY;IACtE,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,IAAI,GAAG,UAAU,IAAI,CAAC;IACxD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QACpD,OAAO,GAAG,QAAQ,GAAG,GAAG,GAAG,KAAK,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;AAClH,CAAC"}

package/dist/sync/sync-files.d.ts

@@ -0,0 +1,12 @@
+import type { Rule } from '@aicqtools/rule-sdk';
+export interface SyncTarget {
+    readonly path: string;
+    readonly markdown: boolean;
+}
+export interface SyncOptions {
+    readonly cwd: string;
+    readonly locale: 'ko' | 'en';
+    readonly targets?: readonly SyncTarget[];
+}
+export declare function syncAiRules(rules: readonly Rule[], opts: SyncOptions): Promise<string[]>;
+//# sourceMappingURL=sync-files.d.ts.map

package/dist/sync/sync-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-files.d.ts","sourceRoot":"","sources":["../../src/sync/sync-files.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAGhD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;CAC1C;AAOD,wBAAsB,WAAW,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAmB9F"}

package/dist/sync/sync-files.js

@@ -0,0 +1,29 @@
+import { readFile, writeFile } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { injectIntoMarkdown, renderRules } from './render.js';
+const DEFAULT_TARGETS = [
+    { path: '.cursorrules', markdown: false },
+    { path: 'CLAUDE.md', markdown: true },
+];
+export async function syncAiRules(rules, opts) {
+    const cwd = resolve(opts.cwd);
+    const body = renderRules(rules, { locale: opts.locale });
+    const targets = opts.targets ?? DEFAULT_TARGETS;
+    const written = [];
+    for (const t of targets) {
+        const fullPath = resolve(cwd, t.path);
+        let next;
+        if (t.markdown) {
+            const existing = existsSync(fullPath) ? await readFile(fullPath, 'utf-8') : null;
+            next = injectIntoMarkdown(existing, body);
+        }
+        else {
+            next = body;
+        }
+        await writeFile(fullPath, next, 'utf-8');
+        written.push(fullPath);
+    }
+    return written;
+}
+//# sourceMappingURL=sync-files.js.map

package/dist/sync/sync-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-files.js","sourceRoot":"","sources":["../../src/sync/sync-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAa9D,MAAM,eAAe,GAA0B;IAC7C,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE;IACzC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE;CACtC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAsB,EAAE,IAAiB;IACzE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACjF,IAAI,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/package.json

@@ -0,0 +1,62 @@
+{
+  "name": "@aicqtools/guardrail",
+  "version": "1.0.0-alpha.2",
+  "type": "module",
+  "description": "Deterministic AI code guardrail engine — 37 built-in rules, hybrid YAML/function DSL, MCP server, .cursorrules sync, sqlite cache.",
+  "keywords": [
+    "aicq",
+    "aicqtools",
+    "guardrail",
+    "ai-code-quality",
+    "tree-sitter",
+    "linter",
+    "mcp",
+    "code-review"
+  ],
+  "homepage": "https://github.com/aicqtools/aicqtools/tree/main/modules/guardrail",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aicqtools/aicqtools.git",
+    "directory": "modules/guardrail"
+  },
+  "bugs": "https://github.com/aicqtools/aicqtools/issues",
+  "author": "Eom Sik <neuralflux3@gmail.com>",
+  "license": "MIT",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js",
+    "./runner": "./dist/runner/index.js",
+    "./matcher": "./dist/matcher/index.js",
+    "./mcp": "./dist/mcp/index.js",
+    "./sync": "./dist/sync/index.js"
+  },
+  "files": [
+    "dist/",
+    "scripts/",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "fast-glob": "^3.3.2",
+    "tree-sitter": "~0.21.1",
+    "yaml": "^2.6.1",
+    "zod": "^3.23.8",
+    "@aicqtools/core": "1.0.0-alpha.2",
+    "@aicqtools/rule-sdk": "1.0.0-alpha.2"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "typescript": "^5.7.2",
+    "vitest": "^2.1.8"
+  },
+  "scripts": {
+    "build": "tsc && node scripts/copy-yaml-rules.mjs",
+    "test": "vitest run --passWithNoTests",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist .turbo"
+  }
+}

package/scripts/copy-yaml-rules.mjs

@@ -0,0 +1,19 @@
+import { readdir, mkdir, copyFile } from 'node:fs/promises';
+import { dirname, extname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const here = dirname(fileURLToPath(import.meta.url));
+const src = resolve(here, '../src/rules-default');
+const dest = resolve(here, '../dist/rules-default');
+
+await mkdir(dest, { recursive: true });
+const entries = await readdir(src);
+let copied = 0;
+for (const entry of entries) {
+  const ext = extname(entry);
+  if (ext === '.yaml' || ext === '.yml') {
+    await copyFile(join(src, entry), join(dest, entry));
+    copied += 1;
+  }
+}
+process.stdout.write(`copy-yaml-rules: ${copied} file(s)\n`);