@archpilotlabs/archpilot 0.2.2 → 0.2.3

package/dist/core/src/policy/effectivePolicyResolver.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveEffectivePolicy = resolveEffectivePolicy;
+function isValidationSeverity(value) {
+    return value === 'error' || value === 'warning' || value === 'info';
+}
+function deepMergeRecord(base, override) {
+    const merged = {};
+    const keys = [...new Set([...Object.keys(base), ...Object.keys(override)])].sort((left, right) => left.localeCompare(right));
+    for (const key of keys) {
+        const baseValue = base[key];
+        const overrideValue = override[key];
+        if (baseValue &&
+            overrideValue &&
+            typeof baseValue === 'object' &&
+            typeof overrideValue === 'object' &&
+            !Array.isArray(baseValue) &&
+            !Array.isArray(overrideValue)) {
+            merged[key] = deepMergeRecord(baseValue, overrideValue);
+            continue;
+        }
+        if (overrideValue !== undefined) {
+            merged[key] = overrideValue;
+            continue;
+        }
+        merged[key] = baseValue;
+    }
+    return merged;
+}
+function normalizeDependencyRulesConfig(value) {
+    const modulesRaw = value.modules;
+    if (!modulesRaw || typeof modulesRaw !== 'object' || Array.isArray(modulesRaw)) {
+        return undefined;
+    }
+    const modules = Object.entries(modulesRaw)
+        .sort(([left], [right]) => left.localeCompare(right))
+        .reduce((accumulator, [moduleName, moduleRules]) => {
+        if (!moduleRules || typeof moduleRules !== 'object' || Array.isArray(moduleRules)) {
+            return accumulator;
+        }
+        const typed = moduleRules;
+        const allowedDependencies = Array.isArray(typed.allowedDependencies)
+            ? typed.allowedDependencies
+                .filter((item) => typeof item === 'string')
+                .sort((left, right) => left.localeCompare(right))
+            : undefined;
+        const publicEntrypointsOnly = typeof typed.publicEntrypointsOnly === 'boolean'
+            ? typed.publicEntrypointsOnly
+            : undefined;
+        accumulator[moduleName] = {
+            ...(allowedDependencies ? { allowedDependencies } : {}),
+            ...(publicEntrypointsOnly !== undefined
+                ? { publicEntrypointsOnly }
+                : {}),
+        };
+        return accumulator;
+    }, {});
+    return { modules };
+}
+function resolveEffectivePolicy(input) {
+    const knownRuleIdSet = new Set(input.knownRuleIds);
+    const localSeverities = {
+        ...(input.localValidationConfig.severityOverrides ?? {}),
+    };
+    const remoteRulesApplied = Object.entries(input.remotePolicy?.rules ?? {})
+        .filter(([ruleId, severity]) => knownRuleIdSet.has(ruleId) && isValidationSeverity(severity))
+        .sort(([left], [right]) => left.localeCompare(right))
+        .reduce((accumulator, [ruleId, severity]) => {
+        accumulator[ruleId] = severity;
+        return accumulator;
+    }, {});
+    const mergedSeverities = {
+        ...localSeverities,
+        ...remoteRulesApplied,
+    };
+    const mergedDependencyRulesRaw = deepMergeRecord(input.localDependencyRulesRaw ?? {}, input.remotePolicy?.dependencyRules ?? {});
+    return {
+        effectiveValidationConfig: {
+            ...(input.localValidationConfig.disabledRules
+                ? { disabledRules: input.localValidationConfig.disabledRules }
+                : {}),
+            ...(Object.keys(mergedSeverities).length > 0
+                ? { severityOverrides: mergedSeverities }
+                : {}),
+        },
+        effectiveDependencyRulesRaw: mergedDependencyRulesRaw,
+        effectiveDependencyRulesConfig: normalizeDependencyRulesConfig(mergedDependencyRulesRaw),
+        remoteRulesApplied,
+    };
+}
+//# sourceMappingURL=effectivePolicyResolver.js.map

package/dist/core/src/policy/effectivePolicyResolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effectivePolicyResolver.js","sourceRoot":"","sources":["../../../../../core/src/policy/effectivePolicyResolver.ts"],"names":[],"mappings":";;AAwFA,wDA0CC;AAvHD,SAAS,oBAAoB,CAAC,KAAa;IAC1C,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,CAAC;AACrE,CAAC;AAED,SAAS,eAAe,CACvB,IAA6B,EAC7B,QAAiC;IAEjC,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAChG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CACzB,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACpC,IACC,SAAS;YACT,aAAa;YACb,OAAO,SAAS,KAAK,QAAQ;YAC7B,OAAO,aAAa,KAAK,QAAQ;YACjC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YACzB,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAC5B,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,GAAG,eAAe,CAC5B,SAAoC,EACpC,aAAwC,CACxC,CAAC;YACF,SAAS;QACV,CAAC;QACD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC;YAC5B,SAAS;QACV,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;IACzB,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,8BAA8B,CACtC,KAA8B;IAE9B,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC;IACjC,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAChF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAqC,CAAC;SACnE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD,MAAM,CACN,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE;QAC1C,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACnF,OAAO,WAAW,CAAC;QACpB,CAAC;QACD,MAAM,KAAK,GAAG,WAAsC,CAAC;QACrD,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;YACnE,CAAC,CAAC,KAAK,CAAC,mBAAmB;iBACxB,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;iBAC1D,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACnD,CAAC,CAAC,SAAS,CAAC;QACb,MAAM,qBAAqB,GAC1B,OAAO,KAAK,CAAC,qBAAqB,KAAK,SAAS;YAC/C,CAAC,CAAC,KAAK,CAAC,qBAAqB;YAC7B,CAAC,CAAC,SAAS,CAAC;QACd,WAAW,CAAC,UAAU,CAAC,GAAG;YACzB,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,qBAAqB,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE,qBAAqB,EAAE;gBAC3B,CAAC,CAAC,EAAE,CAAC;SACN,CAAC;QACF,OAAO,WAAW,CAAC;IACpB,CAAC,EACD,EAAE,CACF,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,CAAC;AACpB,CAAC;AAED,SAAgB,sBAAsB,CAAC,KAKtC;IACA,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,eAAe,GAAG;QACvB,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,iBAAiB,IAAI,EAAE,CAAC;KAClB,CAAC;IACxC,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC;SACxE,MAAM,CACN,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,oBAAoB,CAAC,QAAQ,CAAC,CACpF;SACA,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD,MAAM,CAAqC,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE;QAC/E,WAAW,CAAC,MAAM,CAAC,GAAG,QAA8B,CAAC;QACrD,OAAO,WAAW,CAAC;IACpB,CAAC,EAAE,EAAE,CAAC,CAAC;IACR,MAAM,gBAAgB,GAAgD;QACrE,GAAG,eAAe;QAClB,GAAG,kBAAkB;KACrB,CAAC;IAEF,MAAM,wBAAwB,GAAG,eAAe,CAC/C,KAAK,CAAC,uBAAuB,IAAI,EAAE,EACnC,KAAK,CAAC,YAAY,EAAE,eAAe,IAAI,EAAE,CACzC,CAAC;IAEF,OAAO;QACN,yBAAyB,EAAE;YAC1B,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,aAAa;gBAC5C,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,qBAAqB,CAAC,aAAa,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,GAAG,CAAC;gBAC3C,CAAC,CAAC,EAAE,iBAAiB,EAAE,gBAAyD,EAAE;gBAClF,CAAC,CAAC,EAAE,CAAC;SACN;QACD,2BAA2B,EAAE,wBAAwB;QACrD,8BAA8B,EAAE,8BAA8B,CAAC,wBAAwB,CAAC;QACxF,kBAAkB;KAClB,CAAC;AACH,CAAC"}

package/dist/core/src/policy/exceptionLoader.js

@@ -0,0 +1,285 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getExceptionsFilePath = getExceptionsFilePath;
+exports.buildDefaultExceptionsTemplate = buildDefaultExceptionsTemplate;
+exports.ensureExceptionsFile = ensureExceptionsFile;
+exports.exceptionsFileExists = exceptionsFileExists;
+exports.loadExceptions = loadExceptions;
+exports.isExceptionExpired = isExceptionExpired;
+exports.findMatchingException = findMatchingException;
+exports.shouldIgnoreViolationDueToException = shouldIgnoreViolationDueToException;
+const path = __importStar(require("node:path"));
+const node_fs_1 = require("node:fs");
+const exceptionsFileRelativePath = '.archpilot/exceptions.json';
+function normalizeExceptionEntry(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        return undefined;
+    }
+    const typed = value;
+    if (typeof typed.ruleId !== 'string' ||
+        typeof typed.reason !== 'string' ||
+        typeof typed.approvedBy !== 'string' ||
+        typeof typed.createdAt !== 'string') {
+        return undefined;
+    }
+    return {
+        ruleId: typed.ruleId.trim(),
+        ...(typeof typed.module === 'string' && typed.module.trim().length > 0
+            ? { module: typed.module.trim() }
+            : {}),
+        ...(typeof typed.target === 'string' && typed.target.trim().length > 0
+            ? { target: typed.target.trim() }
+            : {}),
+        ...(typeof typed.filePath === 'string' && typed.filePath.trim().length > 0
+            ? { filePath: typed.filePath.trim() }
+            : {}),
+        ...(typeof typed.table === 'string' && typed.table.trim().length > 0
+            ? { table: typed.table.trim() }
+            : {}),
+        ...(typeof typed.api === 'string' && typed.api.trim().length > 0
+            ? { api: typed.api.trim() }
+            : {}),
+        reason: typed.reason.trim(),
+        approvedBy: typed.approvedBy.trim(),
+        createdAt: typed.createdAt.trim(),
+        ...(typeof typed.expiresAt === 'string' && typed.expiresAt.trim().length > 0
+            ? { expiresAt: typed.expiresAt.trim() }
+            : {}),
+    };
+}
+function normalizeExceptions(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
+        return undefined;
+    }
+    const typed = raw;
+    if (!Array.isArray(typed.exceptions)) {
+        return undefined;
+    }
+    return typed.exceptions
+        .map((entry) => normalizeExceptionEntry(entry))
+        .filter((entry) => !!entry)
+        .sort((left, right) => {
+        const ruleCompare = left.ruleId.localeCompare(right.ruleId);
+        if (ruleCompare !== 0) {
+            return ruleCompare;
+        }
+        const moduleCompare = (left.module ?? '').localeCompare(right.module ?? '');
+        if (moduleCompare !== 0) {
+            return moduleCompare;
+        }
+        const targetCompare = (left.target ?? '').localeCompare(right.target ?? '');
+        if (targetCompare !== 0) {
+            return targetCompare;
+        }
+        const filePathCompare = (left.filePath ?? '').localeCompare(right.filePath ?? '');
+        if (filePathCompare !== 0) {
+            return filePathCompare;
+        }
+        const tableCompare = (left.table ?? '').localeCompare(right.table ?? '');
+        if (tableCompare !== 0) {
+            return tableCompare;
+        }
+        const apiCompare = (left.api ?? '').localeCompare(right.api ?? '');
+        if (apiCompare !== 0) {
+            return apiCompare;
+        }
+        const expiryCompare = (left.expiresAt ?? '').localeCompare(right.expiresAt ?? '');
+        if (expiryCompare !== 0) {
+            return expiryCompare;
+        }
+        return left.reason.localeCompare(right.reason);
+    });
+}
+function normalizeToken(value) {
+    return value.trim().toLowerCase();
+}
+function normalizePathToken(value) {
+    return value.replace(/\\/g, '/').trim().toLowerCase();
+}
+function buildExceptionMatchContext(result) {
+    return {
+        ruleId: result.id,
+        ...(result.module ? { module: result.module } : {}),
+        ...(result.target ? { target: result.target } : {}),
+        ...(result.filePath
+            ? { filePath: result.filePath }
+            : result.sourceFile
+                ? { filePath: result.sourceFile }
+                : {}),
+        ...(result.table ? { table: result.table } : {}),
+        ...(result.api ? { api: result.api } : {}),
+    };
+}
+function getExceptionsFilePath(workspaceRoot) {
+    return path.join(workspaceRoot, '.archpilot', 'exceptions.json');
+}
+function buildDefaultExceptionsTemplate() {
+    return `${JSON.stringify({ exceptions: [] }, null, 2)}\n`;
+}
+async function ensureExceptionsFile(workspaceRoot) {
+    const exceptionsPath = getExceptionsFilePath(workspaceRoot);
+    await node_fs_1.promises.mkdir(path.dirname(exceptionsPath), { recursive: true });
+    try {
+        await node_fs_1.promises.access(exceptionsPath);
+        return { path: exceptionsPath, created: false };
+    }
+    catch {
+        // File missing; create deterministic template.
+    }
+    await node_fs_1.promises.writeFile(exceptionsPath, buildDefaultExceptionsTemplate(), { encoding: 'utf8' });
+    return { path: exceptionsPath, created: true };
+}
+async function exceptionsFileExists(workspaceRoot) {
+    try {
+        await node_fs_1.promises.access(getExceptionsFilePath(workspaceRoot));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function loadExceptions(workspaceRoot) {
+    const exceptionsPath = getExceptionsFilePath(workspaceRoot);
+    let content;
+    try {
+        content = await node_fs_1.promises.readFile(exceptionsPath, { encoding: 'utf8' });
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            return { exceptions: [], source: 'default' };
+        }
+        return {
+            exceptions: [],
+            source: 'fallback-default',
+            configError: error instanceof Error
+                ? `ArchPilot exceptions configuration could not be read. ${error.message}`
+                : `ArchPilot exceptions configuration could not be read. Please verify ${exceptionsFileRelativePath}.`,
+        };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(content);
+    }
+    catch {
+        return {
+            exceptions: [],
+            source: 'fallback-default',
+            configError: 'ArchPilot exceptions configuration is invalid JSON. Please fix .archpilot/exceptions.json.',
+        };
+    }
+    const normalized = normalizeExceptions(parsed);
+    if (!normalized) {
+        return {
+            exceptions: [],
+            source: 'fallback-default',
+            configError: 'ArchPilot exceptions configuration is invalid: .archpilot/exceptions.json must define an exceptions array.',
+        };
+    }
+    return {
+        exceptions: normalized,
+        source: 'exceptions-file',
+    };
+}
+function isExceptionExpired(exception, nowIso = new Date().toISOString()) {
+    if (!exception.expiresAt) {
+        return false;
+    }
+    const expiresAtMs = Date.parse(exception.expiresAt);
+    const nowMs = Date.parse(nowIso);
+    if (Number.isNaN(expiresAtMs) || Number.isNaN(nowMs)) {
+        return false;
+    }
+    return expiresAtMs < nowMs;
+}
+function findMatchingException(context, exceptions) {
+    return exceptions.find((entry) => {
+        if (entry.ruleId !== context.ruleId) {
+            return false;
+        }
+        if (isExceptionExpired(entry)) {
+            return false;
+        }
+        if (entry.module) {
+            if (!context.module) {
+                return false;
+            }
+            if (normalizeToken(entry.module) !== normalizeToken(context.module)) {
+                return false;
+            }
+        }
+        if (entry.target) {
+            if (!context.target) {
+                return false;
+            }
+            if (normalizeToken(entry.target) !== normalizeToken(context.target)) {
+                return false;
+            }
+        }
+        if (entry.filePath) {
+            if (!context.filePath) {
+                return false;
+            }
+            if (normalizePathToken(entry.filePath) !== normalizePathToken(context.filePath)) {
+                return false;
+            }
+        }
+        if (entry.table) {
+            if (!context.table) {
+                return false;
+            }
+            if (normalizeToken(entry.table) !== normalizeToken(context.table)) {
+                return false;
+            }
+        }
+        if (entry.api) {
+            if (!context.api) {
+                return false;
+            }
+            if (normalizeToken(entry.api) !== normalizeToken(context.api)) {
+                return false;
+            }
+        }
+        return true;
+    });
+}
+function shouldIgnoreViolationDueToException(result, exceptions) {
+    if (result.passed) {
+        return undefined;
+    }
+    const context = buildExceptionMatchContext(result);
+    return findMatchingException(context, exceptions);
+}
+//# sourceMappingURL=exceptionLoader.js.map

package/dist/core/src/policy/exceptionLoader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exceptionLoader.js","sourceRoot":"","sources":["../../../../../core/src/policy/exceptionLoader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2JA,sDAEC;AAED,wEAEC;AAED,oDAaC;AAED,oDAOC;AAED,wCA6CC;AAED,gDAaC;AAED,sDAqDC;AAED,kFASC;AAzTD,gDAAkC;AAClC,qCAAyC;AA4CzC,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AAEhE,SAAS,uBAAuB,CAC/B,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,IACC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAClC,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO;QACN,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;QAC3B,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACrE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;YACjC,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACrE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;YACjC,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACzE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE;YACrC,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACnE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE;YAC/B,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAC/D,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE;YAC3B,CAAC,CAAC,EAAE,CAAC;QACN,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;QAC3B,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE;QACnC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE;QACjC,GAAG,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAC3E,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE;YACvC,CAAC,CAAC,EAAE,CAAC;KACN,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY;IACxC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,GAA+B,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC,UAAU;SACrB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;SAC9C,MAAM,CAAC,CAAC,KAAK,EAAuC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;SAC/D,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,WAAW,CAAC;QACpB,CAAC;QACD,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC5E,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,aAAa,CAAC;QACtB,CAAC;QACD,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC5E,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,aAAa,CAAC;QACtB,CAAC;QACD,MAAM,eAAe,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAClF,IAAI,eAAe,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,eAAe,CAAC;QACxB,CAAC;QACD,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACzE,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,YAAY,CAAC;QACrB,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACnE,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,UAAU,CAAC;QACnB,CAAC;QACD,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAClF,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,aAAa,CAAC;QACtB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,0BAA0B,CAAC,MAA4B;IAC/D,OAAO;QACN,MAAM,EAAE,MAAM,CAAC,EAAE;QACjB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,QAAQ;YAClB,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;YAC/B,CAAC,CAAC,MAAM,CAAC,UAAU;gBAClB,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE;gBACjC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;AACH,CAAC;AAED,SAAgB,qBAAqB,CAAC,aAAqB;IAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC;AAClE,CAAC;AAED,SAAgB,8BAA8B;IAC7C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAEM,KAAK,UAAU,oBAAoB,CACzC,aAAqB;IAErB,MAAM,cAAc,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC;QACJ,MAAM,kBAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACR,+CAA+C;IAChD,CAAC;IACD,MAAM,kBAAE,CAAC,SAAS,CAAC,cAAc,EAAE,8BAA8B,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3F,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChD,CAAC;AAEM,KAAK,UAAU,oBAAoB,CAAC,aAAqB;IAC/D,IAAI,CAAC;QACJ,MAAM,kBAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAEM,KAAK,UAAU,cAAc,CACnC,aAAqB;IAErB,MAAM,cAAc,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAC5D,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxD,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9C,CAAC;QACD,OAAO;YACN,UAAU,EAAE,EAAE;YACd,MAAM,EAAE,kBAAkB;YAC1B,WAAW,EACV,KAAK,YAAY,KAAK;gBACrB,CAAC,CAAC,yDAAyD,KAAK,CAAC,OAAO,EAAE;gBAC1E,CAAC,CAAC,uEAAuE,0BAA0B,GAAG;SACxG,CAAC;IACH,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO;YACN,UAAU,EAAE,EAAE;YACd,MAAM,EAAE,kBAAkB;YAC1B,WAAW,EACV,4FAA4F;SAC7F,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO;YACN,UAAU,EAAE,EAAE;YACd,MAAM,EAAE,kBAAkB;YAC1B,WAAW,EACV,4GAA4G;SAC7G,CAAC;IACH,CAAC;IACD,OAAO;QACN,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,iBAAiB;KACzB,CAAC;AACH,CAAC;AAED,SAAgB,kBAAkB,CACjC,SAAwD,EACxD,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAEjC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,WAAW,GAAG,KAAK,CAAC;AAC5B,CAAC;AAED,SAAgB,qBAAqB,CACpC,OAA8B,EAC9B,UAAiD;IAEjD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAChC,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACrB,OAAO,KAAK,CAAC;YACd,CAAC;YACD,IAAI,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrE,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBACrB,OAAO,KAAK,CAAC;YACd,CAAC;YACD,IAAI,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrE,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC;YACd,CAAC;YACD,IAAI,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjF,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACpB,OAAO,KAAK,CAAC;YACd,CAAC;YACD,IAAI,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnE,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAClB,OAAO,KAAK,CAAC;YACd,CAAC;YACD,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/D,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,mCAAmC,CAClD,MAA4B,EAC5B,UAAiD;IAEjD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,qBAAqB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC"}

package/dist/core/src/policy/remotePolicyLoader.js

@@ -0,0 +1,227 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadRemotePolicyWithStatus = loadRemotePolicyWithStatus;
+exports.loadRemotePolicy = loadRemotePolicy;
+const https = __importStar(require("node:https"));
+const node_net_1 = require("node:net");
+const operationalLogging_1 = require("../operationalLogging");
+function isPrivateHostName(hostname) {
+    const lower = hostname.toLowerCase();
+    if (lower === 'localhost') {
+        return true;
+    }
+    if (lower === '::1' || lower === '[::1]') {
+        return true;
+    }
+    if (lower.endsWith('.local')) {
+        return true;
+    }
+    const ipVersion = (0, node_net_1.isIP)(lower);
+    if (ipVersion === 4) {
+        const parts = lower.split('.').map((segment) => Number(segment));
+        const [a, b] = parts;
+        if (a === 10) {
+            return true;
+        }
+        if (a === 127) {
+            return true;
+        }
+        if (a === 192 && b === 168) {
+            return true;
+        }
+        if (a === 172 && b >= 16 && b <= 31) {
+            return true;
+        }
+        if (a === 169 && b === 254) {
+            return true;
+        }
+    }
+    if (ipVersion === 6) {
+        if (lower === '::1') {
+            return true;
+        }
+        if (lower.startsWith('fc') || lower.startsWith('fd')) {
+            return true;
+        }
+        if (lower.startsWith('fe80:')) {
+            return true;
+        }
+    }
+    return false;
+}
+function validatePolicySourceUrl(value) {
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        return { valid: false, message: 'Remote policy source URL is invalid. Using local policy only.' };
+    }
+    if (parsed.protocol === 'file:') {
+        return {
+            valid: false,
+            message: 'Remote policy source URL cannot use file://. Using local policy only.',
+        };
+    }
+    if (parsed.protocol !== 'https:') {
+        return {
+            valid: false,
+            message: 'Remote policy source URL must use HTTPS. Using local policy only.',
+        };
+    }
+    if (isPrivateHostName(parsed.hostname)) {
+        return {
+            valid: false,
+            message: 'Remote policy source URL host is not allowed for security reasons. Using local policy only.',
+        };
+    }
+    return { valid: true, url: parsed };
+}
+function normalizeRemotePolicy(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        return undefined;
+    }
+    const typed = value;
+    if (typed.rules !== undefined &&
+        (typed.rules === null || typeof typed.rules !== 'object' || Array.isArray(typed.rules))) {
+        return undefined;
+    }
+    if (typed.dependencyRules !== undefined &&
+        (typed.dependencyRules === null ||
+            typeof typed.dependencyRules !== 'object' ||
+            Array.isArray(typed.dependencyRules))) {
+        return undefined;
+    }
+    const rules = typed.rules && typeof typed.rules === 'object'
+        ? Object.entries(typed.rules)
+            .filter(([, severity]) => typeof severity === 'string')
+            .sort(([left], [right]) => left.localeCompare(right))
+            .reduce((accumulator, [ruleId, severity]) => {
+            accumulator[ruleId] = severity;
+            return accumulator;
+        }, {})
+        : undefined;
+    const dependencyRules = typed.dependencyRules && typeof typed.dependencyRules === 'object'
+        ? Object.entries(typed.dependencyRules)
+            .sort(([left], [right]) => left.localeCompare(right))
+            .reduce((accumulator, [key, valueEntry]) => {
+            accumulator[key] = valueEntry;
+            return accumulator;
+        }, {})
+        : undefined;
+    return {
+        ...(rules ? { rules } : {}),
+        ...(dependencyRules ? { dependencyRules } : {}),
+    };
+}
+async function loadRemotePolicyWithStatus(policySourceUrl, options) {
+    const validated = validatePolicySourceUrl(policySourceUrl);
+    if (!validated.valid) {
+        (0, operationalLogging_1.emitOperationalMessage)(options?.onOperationalMessage, 'warn', validated.message);
+        return {
+            message: validated.message,
+        };
+    }
+    (0, operationalLogging_1.emitOperationalMessage)(options?.onOperationalMessage, 'info', `Remote policy configured. Loading policy from ${policySourceUrl}.`);
+    return new Promise((resolve) => {
+        const request = https.request({
+            protocol: validated.url.protocol,
+            hostname: validated.url.hostname,
+            port: validated.url.port,
+            path: `${validated.url.pathname}${validated.url.search}`,
+            method: 'GET',
+            headers: {
+                'User-Agent': 'archpilot-cli',
+                Accept: 'application/json',
+            },
+        }, (response) => {
+            const chunks = [];
+            response.on('data', (chunk) => {
+                chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+            });
+            response.on('end', () => {
+                const body = Buffer.concat(chunks).toString('utf8');
+                const statusCode = response.statusCode ?? 0;
+                if (statusCode < 200 || statusCode >= 300) {
+                    (0, operationalLogging_1.emitOperationalMessage)(options?.onOperationalMessage, 'warn', `Remote policy request failed with HTTP ${statusCode}. Using local policy only.`);
+                    resolve({
+                        message: `Remote policy request failed with HTTP ${statusCode}. Using local policy only.`,
+                    });
+                    return;
+                }
+                let parsed;
+                try {
+                    parsed = JSON.parse(body);
+                }
+                catch {
+                    (0, operationalLogging_1.emitOperationalMessage)(options?.onOperationalMessage, 'warn', 'Remote policy payload is invalid JSON. Using local policy only.');
+                    resolve({
+                        message: 'Remote policy payload is invalid JSON. Using local policy only.',
+                    });
+                    return;
+                }
+                const normalized = normalizeRemotePolicy(parsed);
+                if (!normalized) {
+                    (0, operationalLogging_1.emitOperationalMessage)(options?.onOperationalMessage, 'warn', 'Remote policy payload has an invalid structure. Using local policy only.');
+                    resolve({
+                        message: 'Remote policy payload has an invalid structure. Using local policy only.',
+                    });
+                    return;
+                }
+                (0, operationalLogging_1.emitOperationalMessage)(options?.onOperationalMessage, 'info', 'Remote policy loaded successfully.');
+                resolve({
+                    policy: normalized,
+                    message: 'Remote policy loaded successfully.',
+                });
+            });
+        });
+        request.setTimeout(5000, () => {
+            request.destroy(new Error('timeout'));
+        });
+        request.on('error', () => {
+            (0, operationalLogging_1.emitOperationalMessage)(options?.onOperationalMessage, 'warn', 'Remote policy unavailable. Using local policy only.');
+            resolve({
+                message: 'Remote policy unavailable. Using local policy only.',
+            });
+        });
+        request.end();
+    });
+}
+async function loadRemotePolicy(policySourceUrl) {
+    const result = await loadRemotePolicyWithStatus(policySourceUrl);
+    return result.policy;
+}
+//# sourceMappingURL=remotePolicyLoader.js.map

package/dist/core/src/policy/remotePolicyLoader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remotePolicyLoader.js","sourceRoot":"","sources":["../../../../../core/src/policy/remotePolicyLoader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoIA,gEAyGC;AAED,4CAKC;AApPD,kDAAoC;AACpC,uCAAgC;AAChC,8DAA+F;AAQ/F,SAAS,iBAAiB,CAAC,QAAgB;IAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,SAAS,GAAG,IAAA,eAAI,EAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IAED,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACrB,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC7C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,+DAA+D,EAAE,CAAC;IACnG,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO;YACN,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,uEAAuE;SAChF,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACN,KAAK,EAAE,KAAK;YACZ,OAAO,EACN,mEAAmE;SACpE,CAAC;IACH,CAAC;IACD,IAAI,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,OAAO;YACN,KAAK,EAAE,KAAK;YACZ,OAAO,EACN,6FAA6F;SAC9F,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC5C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,IACC,KAAK,CAAC,KAAK,KAAK,SAAS;QACzB,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EACtF,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IACC,KAAK,CAAC,eAAe,KAAK,SAAS;QACnC,CAAC,KAAK,CAAC,eAAe,KAAK,IAAI;YAC9B,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;YACzC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,EACrC,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GACV,KAAK,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC7C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAgC,CAAC;aACrD,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC;aACtD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACpD,MAAM,CAAyB,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE;YACnE,WAAW,CAAC,MAAM,CAAC,GAAG,QAAkB,CAAC;YACzC,OAAO,WAAW,CAAC;QACpB,CAAC,EAAE,EAAE,CAAC;QACR,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,eAAe,GACpB,KAAK,CAAC,eAAe,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;QACjE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,eAA0C,CAAC;aAC/D,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACpD,MAAM,CAA0B,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE;YACnE,WAAW,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;YAC9B,OAAO,WAAW,CAAC;QACpB,CAAC,EAAE,EAAE,CAAC;QACR,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACN,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAC/C,eAAuB,EACvB,OAA8D;IAE9D,MAAM,SAAS,GAAG,uBAAuB,CAAC,eAAe,CAAC,CAAC;IAC3D,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACtB,IAAA,2CAAsB,EAAC,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;QACjF,OAAO;YACN,OAAO,EAAE,SAAS,CAAC,OAAO;SAC1B,CAAC;IACH,CAAC;IACD,IAAA,2CAAsB,EACrB,OAAO,EAAE,oBAAoB,EAC7B,MAAM,EACN,iDAAiD,eAAe,GAAG,CACnE,CAAC;IAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAC5B;YACC,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ;YAChC,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ;YAChC,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI;YACxB,IAAI,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE;YACxD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACR,YAAY,EAAE,eAAe;gBAC7B,MAAM,EAAE,kBAAkB;aAC1B;SACD,EACD,CAAC,QAAQ,EAAE,EAAE;YACZ,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAClE,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACvB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;gBAC5C,IAAI,UAAU,GAAG,GAAG,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;oBAC3C,IAAA,2CAAsB,EACrB,OAAO,EAAE,oBAAoB,EAC7B,MAAM,EACN,0CAA0C,UAAU,4BAA4B,CAChF,CAAC;oBACF,OAAO,CAAC;wBACP,OAAO,EACN,0CAA0C,UAAU,4BAA4B;qBACjF,CAAC,CAAC;oBACH,OAAO;gBACR,CAAC;gBACD,IAAI,MAAe,CAAC;gBACpB,IAAI,CAAC;oBACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACR,IAAA,2CAAsB,EACrB,OAAO,EAAE,oBAAoB,EAC7B,MAAM,EACN,iEAAiE,CACjE,CAAC;oBACF,OAAO,CAAC;wBACP,OAAO,EACN,iEAAiE;qBAClE,CAAC,CAAC;oBACH,OAAO;gBACR,CAAC;gBACD,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;gBACjD,IAAI,CAAC,UAAU,EAAE,CAAC;oBACjB,IAAA,2CAAsB,EACrB,OAAO,EAAE,oBAAoB,EAC7B,MAAM,EACN,0EAA0E,CAC1E,CAAC;oBACF,OAAO,CAAC;wBACP,OAAO,EACN,0EAA0E;qBAC3E,CAAC,CAAC;oBACH,OAAO;gBACR,CAAC;gBACD,IAAA,2CAAsB,EACrB,OAAO,EAAE,oBAAoB,EAC7B,MAAM,EACN,oCAAoC,CACpC,CAAC;gBACF,OAAO,CAAC;oBACP,MAAM,EAAE,UAAU;oBAClB,OAAO,EAAE,oCAAoC;iBAC7C,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;QACJ,CAAC,CACD,CAAC;QACF,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE;YAC7B,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,IAAA,2CAAsB,EACrB,OAAO,EAAE,oBAAoB,EAC7B,MAAM,EACN,qDAAqD,CACrD,CAAC;YACF,OAAO,CAAC;gBACP,OAAO,EAAE,qDAAqD;aAC9D,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACrC,eAAuB;IAEvB,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,eAAe,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,MAAM,CAAC;AACtB,CAAC"}

package/dist/core/src/policy/remotePolicyTypes.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=remotePolicyTypes.js.map

package/dist/core/src/policy/remotePolicyTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remotePolicyTypes.js","sourceRoot":"","sources":["../../../../../core/src/policy/remotePolicyTypes.ts"],"names":[],"mappings":""}