@armoriq/policy-ir 0.1.2 → 0.1.4

package/dist/index.d.cts

@@ -1,105 +1,5 @@
-/**
- * `armor.policy.v2` intermediate representation.
- *
- * Data, never a program: the same JSON is evaluated by conmap, the Armor CLI
- * daemon, the SDK pre-check and OPA. The document is the hashing and signing
- * boundary, so every field here is part of `policyHash` except `policyHash`.
- */
-declare const SCHEMA_VERSION: "armor.policy.v2";
-type Verdict = 'allow' | 'hold' | 'block';
-/** Where a document sits in the layering ladder. A boundary is a floor: it can only tighten. */
-type Layer = 'floor' | 'group' | 'agent' | 'member' | 'local';
-type PolicyTarget = {
-    org: '*';
-} | {
-    group: string;
-} | {
-    agent: string;
-    mcpServers?: string[];
-} | {
-    device: 'local';
-    products?: string[];
-};
-interface Defaults {
-    tools: Verdict;
-    network: Verdict;
-    files: Verdict;
-    skills: Verdict;
-}
-interface Capture {
-    arguments: boolean;
-    redact: string[];
-    maxBytesPerCall: number;
-    sample: number;
-}
-type KeyTier = 'exact' | 'glob';
-type StatementMatch = {
-    tool: string;
-    keyTier: KeyTier;
-    order: number;
-} | {
-    capability: string;
-};
-type ConditionOp = 'eq' | 'ne' | 'gt' | 'gte' | 'lt' | 'lte' | 'in' | 'notIn' | 'glob' | 'regex' | 'notRegex' | 'startsWith' | 'exists';
-interface SchemaBinding {
-    /** `sha256:` of the tool's canonical input schema at compile time; null when the inventory had none. */
-    schemaHash: string | null;
-}
-interface Condition {
-    /** Dotpath into the call: `args.amount`, `args.command.program`, `path`. */
-    field: string;
-    op: ConditionOp;
-    value?: unknown;
-    schemaBinding?: SchemaBinding;
-}
-interface Approval {
-    approvers: number;
-    roles?: string[];
-    members?: string[];
-    anyMember?: boolean;
-}
-/** Who a statement applies to. Absent means everyone the document targets. */
-type Subject = {
-    membershipId: string;
-} | {
-    email: string;
-} | {
-    group: string;
-} | {
-    product: string;
-};
-interface Provenance {
-    ruleKey: string;
-    variant: number;
-    source: 'yaml' | 'converter' | 'compose' | 'settings-import';
-    layer: Layer;
-}
-interface Statement {
-    id: string;
-    subject: Subject | null;
-    match: StatementMatch;
-    effect: Verdict;
-    conditions: Condition[];
-    approval?: Approval;
-    /** ISO date-time, or the literal `never`. Always present. */
-    expiresAt: string | 'never';
-    controls?: string[];
-    provenance: Provenance;
-}
-interface PolicyDocument {
-    schemaVersion: typeof SCHEMA_VERSION;
-    policyId: string;
-    /** `sha256:` over the canonical document without this field. */
-    policyHash?: string;
-    target: PolicyTarget;
-    layer: Layer;
-    defaults: Defaults;
-    capture: Capture;
-    /** ISO date-time, or the literal `never`. Always present. */
-    expiresAt: string | 'never';
-    statements: Statement[];
-}
-declare function layerOfTarget(target: PolicyTarget): Layer;
+import { P as PolicyDocument, V as Verdict, A as Approval, L as Layer, C as Condition, S as Statement, a as SourceTarget, b as PolicySource, D as Diagnostics } from './document-entry-CDOQVeis.cjs';
+export { c as Capture, d as ConditionOp, e as ConditionSpec, f as Defaults, g as Diagnostic, K as KeyTier, N as NEVER, h as NetworkEntry, O as Overlay, i as ParseResult, j as PolicySpec, k as PolicyTarget, l as Provenance, R as RuleValue, m as RuleVariant, n as SCHEMA_VERSION, o as SOURCE_OPERATORS, p as SchemaBinding, q as Severity, r as SourceOperator, s as StatementMatch, t as Subject, T as ToolsSection, u as VERDICTS, v as layerOfTarget, w as parseDocument, x as parseYaml, y as serialize, z as validate } from './document-entry-CDOQVeis.cjs';
 
 /**
  * Canonical JSON: sorted keys, no whitespace, ASCII escapes for anything
@@ -228,123 +128,6 @@ declare function conditionHolds(input: CallInput, condition: Condition): boolean
  */
 declare function selectRuleKey(statements: Statement[], tool: string): string | null;
 
-type Severity = 'error' | 'warning';
-interface Diagnostic {
-    code: string;
-    severity: Severity;
-    /** JSON-pointer-like path into the source document, `/spec/tools/rules/Bash/0`. */
-    path: string;
-    message: string;
-}
-declare class Diagnostics {
-    readonly items: Diagnostic[];
-    error(code: string, path: string, message: string): void;
-    warning(code: string, path: string, message: string): void;
-    get hasErrors(): boolean;
-}
-
-/** The `armor.io/v2` source document after strict parsing, before lowering. */
-interface PolicySource {
-    apiVersion: 'armor.io/v2';
-    kind: 'Policy';
-    metadata: {
-        name: string;
-        description?: string;
-        orgId?: string;
-        labels?: Record<string, string>;
-    };
-    target: SourceTarget;
-    precedence?: 'device-first' | 'agent-first';
-    spec: PolicySpec;
-}
-type SourceTarget = {
-    agent: string;
-    mcpServers?: string[];
-} | {
-    group: string;
-} | {
-    org: '*';
-} | {
-    device: 'local';
-};
-interface PolicySpec {
-    tools: ToolsSection;
-    files?: {
-        deny?: string[];
-        allowOutsideWorkspace?: boolean;
-    };
-    network?: {
-        default?: Verdict;
-        allow?: NetworkEntry[];
-        deny?: NetworkEntry[];
-    };
-    skills?: {
-        default?: Verdict;
-        hold?: string[];
-        block?: string[];
-    };
-    secrets?: {
-        envBlocklist?: string[];
-    };
-    members?: Record<string, Overlay>;
-    products?: Record<string, Overlay>;
-    capture?: {
-        arguments?: boolean;
-        redact?: string[];
-        maxBytesPerCall?: number;
-        sample?: number;
-    };
-    approvalDefaults?: Approval;
-    expiresAt: string;
-}
-type NetworkEntry = string | {
-    host: string;
-    reason?: string;
-};
-interface ToolsSection {
-    default: Verdict;
-    rules?: Record<string, RuleValue>;
-}
-interface Overlay {
-    tools?: {
-        default?: Verdict;
-        rules?: Record<string, RuleValue>;
-    };
-    expiresAt: string;
-}
-/** A scalar verdict is shorthand for one unconditional variant. */
-type RuleValue = Verdict | RuleVariant[];
-interface RuleVariant {
-    action: Verdict;
-    when?: Record<string, ConditionSpec>;
-    approval?: Approval;
-    reason?: string;
-    controls?: string[];
-    expiresAt: string;
-}
-/** `{gt: 5000}`, `{in: [a, b]}`, `{matches: '^x'}`, `{exists: true}`. Exactly one operator. */
-type ConditionSpec = Partial<Record<SourceOperator, unknown>>;
-declare const SOURCE_OPERATORS: readonly ["eq", "neq", "in", "notIn", "gt", "gte", "lt", "lte", "matches", "notMatches", "startsWith", "glob", "withinWorkspace", "exists"];
-type SourceOperator = (typeof SOURCE_OPERATORS)[number];
-declare const VERDICTS: readonly Verdict[];
-declare const NEVER = "never";
-
-interface ParseResult {
-    source: PolicySource | null;
-    diagnostics: Diagnostics;
-}
-/** Parse `armor.io/v2` YAML text strictly. */
-declare function parseYaml(text: string): ParseResult;
-/** Parse an already-loaded YAML/JSON value strictly. */
-declare function parseDocument(value: unknown): ParseResult;
-
-/**
- * Everything that can be checked without an inventory. Inventory-dependent
- * checks (roster clamp, glob collisions on real tools, schema binding) live in
- * the compiler.
- */
-declare function validate(source: PolicySource): Diagnostics;
-
 /** One tool the target can reach, as the inventory knows it. */
 interface InventoryTool {
     /** The wire name the model sees; for an MCP tool the host may also supply the qualified `mcp__<server>__<tool>` form as `qualifiedName`. */
@@ -394,14 +177,6 @@ interface CompileResult {
 declare function compile(source: PolicySource, inventory: InventoryTool[], options: CompileOptions): CompileResult;
 declare function compileWithPort(source: PolicySource, port: InventoryPort, options: CompileOptions): Promise<CompileResult>;
 
-/**
- * PolicySource back to YAML such that `parse(serialize(x))` equals `x`
- * (VC-10). A single unconditional variant with no other fields is written as
- * the scalar shorthand; `expiresAt: never` is written only where the parser
- * would not materialize it identically anyway (everywhere), so it is kept.
- */
-declare function serialize(source: PolicySource): string;
-
 type KeyKind = 'exact' | 'glob' | 'capability';
 interface ResolvedKey {
     kind: KeyKind;
@@ -423,4 +198,4 @@ declare function checkArgumentKeys(fields: string[], tool: InventoryTool, diag:
 
 declare const KNOWN_CONTROLS: ReadonlySet<string>;
 
-export { type Approval, type BoundDocuments, CAPABILITY_KEYS, type CallInput, type Capture, type CompileOptions, type CompileResult, type Condition, type ConditionOp, type ConditionSpec, type Defaults, type Diagnostic, Diagnostics, type Enforceability, type EnforceabilityReport, type Evaluation, HASH_PREFIX, type InventoryPort, type InventoryTool, KNOWN_CONTROLS, type KeyTier, type Layer, NEVER, type NetworkEntry, type Obligation, type Overlay, type ParseResult, type PolicyDocument, type PolicySource, type PolicySpec, type PolicyTarget, type Principal, type Provenance, type RuleValue, type RuleVariant, SCHEMA_VERSION, SOURCE_OPERATORS, type SchemaBinding, type SchemaDriftObligation, type Section, type Severity, type SourceOperator, type SourceTarget, type Statement, type StatementMatch, type Subject, type ToolsSection, VERDICTS, VERDICT_RANK, type Verdict, type VerdictProvenance, canonicalJson, checkArgumentKeys, checkGlobCollisions, compile, compileWithPort, conditionHolds, conditionsHold, enforceabilityReport, evaluate, globToRegExp, isGlob, layerOfTarget, matchGlob, parseDocument, parseYaml, policyHash, resolveField, resolveKey, schemaHash, selectRuleKey, serialize, sha256Canonical, stricter, validate, verifyPolicyHash };
+export { Approval, type BoundDocuments, CAPABILITY_KEYS, type CallInput, type CompileOptions, type CompileResult, Condition, Diagnostics, type Enforceability, type EnforceabilityReport, type Evaluation, HASH_PREFIX, type InventoryPort, type InventoryTool, KNOWN_CONTROLS, Layer, type Obligation, PolicyDocument, PolicySource, type Principal, type SchemaDriftObligation, type Section, SourceTarget, Statement, VERDICT_RANK, Verdict, type VerdictProvenance, canonicalJson, checkArgumentKeys, checkGlobCollisions, compile, compileWithPort, conditionHolds, conditionsHold, enforceabilityReport, evaluate, globToRegExp, isGlob, matchGlob, policyHash, resolveField, resolveKey, schemaHash, selectRuleKey, sha256Canonical, stricter, verifyPolicyHash };

package/dist/index.d.ts

@@ -1,105 +1,5 @@
-/**
- * `armor.policy.v2` intermediate representation.
- *
- * Data, never a program: the same JSON is evaluated by conmap, the Armor CLI
- * daemon, the SDK pre-check and OPA. The document is the hashing and signing
- * boundary, so every field here is part of `policyHash` except `policyHash`.
- */
-declare const SCHEMA_VERSION: "armor.policy.v2";
-type Verdict = 'allow' | 'hold' | 'block';
-/** Where a document sits in the layering ladder. A boundary is a floor: it can only tighten. */
-type Layer = 'floor' | 'group' | 'agent' | 'member' | 'local';
-type PolicyTarget = {
-    org: '*';
-} | {
-    group: string;
-} | {
-    agent: string;
-    mcpServers?: string[];
-} | {
-    device: 'local';
-    products?: string[];
-};
-interface Defaults {
-    tools: Verdict;
-    network: Verdict;
-    files: Verdict;
-    skills: Verdict;
-}
-interface Capture {
-    arguments: boolean;
-    redact: string[];
-    maxBytesPerCall: number;
-    sample: number;
-}
-type KeyTier = 'exact' | 'glob';
-type StatementMatch = {
-    tool: string;
-    keyTier: KeyTier;
-    order: number;
-} | {
-    capability: string;
-};
-type ConditionOp = 'eq' | 'ne' | 'gt' | 'gte' | 'lt' | 'lte' | 'in' | 'notIn' | 'glob' | 'regex' | 'notRegex' | 'startsWith' | 'exists';
-interface SchemaBinding {
-    /** `sha256:` of the tool's canonical input schema at compile time; null when the inventory had none. */
-    schemaHash: string | null;
-}
-interface Condition {
-    /** Dotpath into the call: `args.amount`, `args.command.program`, `path`. */
-    field: string;
-    op: ConditionOp;
-    value?: unknown;
-    schemaBinding?: SchemaBinding;
-}
-interface Approval {
-    approvers: number;
-    roles?: string[];
-    members?: string[];
-    anyMember?: boolean;
-}
-/** Who a statement applies to. Absent means everyone the document targets. */
-type Subject = {
-    membershipId: string;
-} | {
-    email: string;
-} | {
-    group: string;
-} | {
-    product: string;
-};
-interface Provenance {
-    ruleKey: string;
-    variant: number;
-    source: 'yaml' | 'converter' | 'compose' | 'settings-import';
-    layer: Layer;
-}
-interface Statement {
-    id: string;
-    subject: Subject | null;
-    match: StatementMatch;
-    effect: Verdict;
-    conditions: Condition[];
-    approval?: Approval;
-    /** ISO date-time, or the literal `never`. Always present. */
-    expiresAt: string | 'never';
-    controls?: string[];
-    provenance: Provenance;
-}
-interface PolicyDocument {
-    schemaVersion: typeof SCHEMA_VERSION;
-    policyId: string;
-    /** `sha256:` over the canonical document without this field. */
-    policyHash?: string;
-    target: PolicyTarget;
-    layer: Layer;
-    defaults: Defaults;
-    capture: Capture;
-    /** ISO date-time, or the literal `never`. Always present. */
-    expiresAt: string | 'never';
-    statements: Statement[];
-}
-declare function layerOfTarget(target: PolicyTarget): Layer;
+import { P as PolicyDocument, V as Verdict, A as Approval, L as Layer, C as Condition, S as Statement, a as SourceTarget, b as PolicySource, D as Diagnostics } from './document-entry-CDOQVeis.js';
+export { c as Capture, d as ConditionOp, e as ConditionSpec, f as Defaults, g as Diagnostic, K as KeyTier, N as NEVER, h as NetworkEntry, O as Overlay, i as ParseResult, j as PolicySpec, k as PolicyTarget, l as Provenance, R as RuleValue, m as RuleVariant, n as SCHEMA_VERSION, o as SOURCE_OPERATORS, p as SchemaBinding, q as Severity, r as SourceOperator, s as StatementMatch, t as Subject, T as ToolsSection, u as VERDICTS, v as layerOfTarget, w as parseDocument, x as parseYaml, y as serialize, z as validate } from './document-entry-CDOQVeis.js';
 
 /**
  * Canonical JSON: sorted keys, no whitespace, ASCII escapes for anything
@@ -228,123 +128,6 @@ declare function conditionHolds(input: CallInput, condition: Condition): boolean
  */
 declare function selectRuleKey(statements: Statement[], tool: string): string | null;
 
-type Severity = 'error' | 'warning';
-interface Diagnostic {
-    code: string;
-    severity: Severity;
-    /** JSON-pointer-like path into the source document, `/spec/tools/rules/Bash/0`. */
-    path: string;
-    message: string;
-}
-declare class Diagnostics {
-    readonly items: Diagnostic[];
-    error(code: string, path: string, message: string): void;
-    warning(code: string, path: string, message: string): void;
-    get hasErrors(): boolean;
-}
-
-/** The `armor.io/v2` source document after strict parsing, before lowering. */
-interface PolicySource {
-    apiVersion: 'armor.io/v2';
-    kind: 'Policy';
-    metadata: {
-        name: string;
-        description?: string;
-        orgId?: string;
-        labels?: Record<string, string>;
-    };
-    target: SourceTarget;
-    precedence?: 'device-first' | 'agent-first';
-    spec: PolicySpec;
-}
-type SourceTarget = {
-    agent: string;
-    mcpServers?: string[];
-} | {
-    group: string;
-} | {
-    org: '*';
-} | {
-    device: 'local';
-};
-interface PolicySpec {
-    tools: ToolsSection;
-    files?: {
-        deny?: string[];
-        allowOutsideWorkspace?: boolean;
-    };
-    network?: {
-        default?: Verdict;
-        allow?: NetworkEntry[];
-        deny?: NetworkEntry[];
-    };
-    skills?: {
-        default?: Verdict;
-        hold?: string[];
-        block?: string[];
-    };
-    secrets?: {
-        envBlocklist?: string[];
-    };
-    members?: Record<string, Overlay>;
-    products?: Record<string, Overlay>;
-    capture?: {
-        arguments?: boolean;
-        redact?: string[];
-        maxBytesPerCall?: number;
-        sample?: number;
-    };
-    approvalDefaults?: Approval;
-    expiresAt: string;
-}
-type NetworkEntry = string | {
-    host: string;
-    reason?: string;
-};
-interface ToolsSection {
-    default: Verdict;
-    rules?: Record<string, RuleValue>;
-}
-interface Overlay {
-    tools?: {
-        default?: Verdict;
-        rules?: Record<string, RuleValue>;
-    };
-    expiresAt: string;
-}
-/** A scalar verdict is shorthand for one unconditional variant. */
-type RuleValue = Verdict | RuleVariant[];
-interface RuleVariant {
-    action: Verdict;
-    when?: Record<string, ConditionSpec>;
-    approval?: Approval;
-    reason?: string;
-    controls?: string[];
-    expiresAt: string;
-}
-/** `{gt: 5000}`, `{in: [a, b]}`, `{matches: '^x'}`, `{exists: true}`. Exactly one operator. */
-type ConditionSpec = Partial<Record<SourceOperator, unknown>>;
-declare const SOURCE_OPERATORS: readonly ["eq", "neq", "in", "notIn", "gt", "gte", "lt", "lte", "matches", "notMatches", "startsWith", "glob", "withinWorkspace", "exists"];
-type SourceOperator = (typeof SOURCE_OPERATORS)[number];
-declare const VERDICTS: readonly Verdict[];
-declare const NEVER = "never";
-
-interface ParseResult {
-    source: PolicySource | null;
-    diagnostics: Diagnostics;
-}
-/** Parse `armor.io/v2` YAML text strictly. */
-declare function parseYaml(text: string): ParseResult;
-/** Parse an already-loaded YAML/JSON value strictly. */
-declare function parseDocument(value: unknown): ParseResult;
-
-/**
- * Everything that can be checked without an inventory. Inventory-dependent
- * checks (roster clamp, glob collisions on real tools, schema binding) live in
- * the compiler.
- */
-declare function validate(source: PolicySource): Diagnostics;
-
 /** One tool the target can reach, as the inventory knows it. */
 interface InventoryTool {
     /** The wire name the model sees; for an MCP tool the host may also supply the qualified `mcp__<server>__<tool>` form as `qualifiedName`. */
@@ -394,14 +177,6 @@ interface CompileResult {
 declare function compile(source: PolicySource, inventory: InventoryTool[], options: CompileOptions): CompileResult;
 declare function compileWithPort(source: PolicySource, port: InventoryPort, options: CompileOptions): Promise<CompileResult>;
 
-/**
- * PolicySource back to YAML such that `parse(serialize(x))` equals `x`
- * (VC-10). A single unconditional variant with no other fields is written as
- * the scalar shorthand; `expiresAt: never` is written only where the parser
- * would not materialize it identically anyway (everywhere), so it is kept.
- */
-declare function serialize(source: PolicySource): string;
-
 type KeyKind = 'exact' | 'glob' | 'capability';
 interface ResolvedKey {
     kind: KeyKind;
@@ -423,4 +198,4 @@ declare function checkArgumentKeys(fields: string[], tool: InventoryTool, diag:
 
 declare const KNOWN_CONTROLS: ReadonlySet<string>;
 
-export { type Approval, type BoundDocuments, CAPABILITY_KEYS, type CallInput, type Capture, type CompileOptions, type CompileResult, type Condition, type ConditionOp, type ConditionSpec, type Defaults, type Diagnostic, Diagnostics, type Enforceability, type EnforceabilityReport, type Evaluation, HASH_PREFIX, type InventoryPort, type InventoryTool, KNOWN_CONTROLS, type KeyTier, type Layer, NEVER, type NetworkEntry, type Obligation, type Overlay, type ParseResult, type PolicyDocument, type PolicySource, type PolicySpec, type PolicyTarget, type Principal, type Provenance, type RuleValue, type RuleVariant, SCHEMA_VERSION, SOURCE_OPERATORS, type SchemaBinding, type SchemaDriftObligation, type Section, type Severity, type SourceOperator, type SourceTarget, type Statement, type StatementMatch, type Subject, type ToolsSection, VERDICTS, VERDICT_RANK, type Verdict, type VerdictProvenance, canonicalJson, checkArgumentKeys, checkGlobCollisions, compile, compileWithPort, conditionHolds, conditionsHold, enforceabilityReport, evaluate, globToRegExp, isGlob, layerOfTarget, matchGlob, parseDocument, parseYaml, policyHash, resolveField, resolveKey, schemaHash, selectRuleKey, serialize, sha256Canonical, stricter, validate, verifyPolicyHash };
+export { Approval, type BoundDocuments, CAPABILITY_KEYS, type CallInput, type CompileOptions, type CompileResult, Condition, Diagnostics, type Enforceability, type EnforceabilityReport, type Evaluation, HASH_PREFIX, type InventoryPort, type InventoryTool, KNOWN_CONTROLS, Layer, type Obligation, PolicyDocument, PolicySource, type Principal, type SchemaDriftObligation, type Section, SourceTarget, Statement, VERDICT_RANK, Verdict, type VerdictProvenance, canonicalJson, checkArgumentKeys, checkGlobCollisions, compile, compileWithPort, conditionHolds, conditionsHold, enforceabilityReport, evaluate, globToRegExp, isGlob, matchGlob, policyHash, resolveField, resolveKey, schemaHash, selectRuleKey, sha256Canonical, stricter, verifyPolicyHash };

package/dist/index.js

@@ -173,11 +173,11 @@ function escapeRegExp(ch) {
 // src/evaluate/conditions.ts
 function resolveField(input, field) {
   const [root, ...rest] = field.split(".");
-  const base = root === "args" ? input.arguments : input.derived?.[root ?? ""];
+  const base = root === "args" ? input.arguments : childOf2(input.derived, root ?? "");
   return rest.reduce(childOf2, base);
 }
 function childOf2(node, key) {
-  if (node === null || typeof node !== "object") return void 0;
+  if (node === null || typeof node !== "object" || !Object.hasOwn(node, key)) return void 0;
   return node[key];
 }
 function conditionsHold(input, conditions) {
@@ -769,6 +769,119 @@ function parseCapture(r, value) {
   return out;
 }
 
+// src/document/portable-regex.ts
+function isPortablePattern(pattern) {
+  if (typeof pattern !== "string") return false;
+  try {
+    new RegExp(pattern);
+  } catch {
+    return false;
+  }
+  const parser = new Parser(pattern);
+  return parser.alternatives() && parser.done();
+}
+var ESCAPED_PUNCTUATION = new Set("\\/.*+?()[]{}|^$-");
+var CONTROL_ESCAPES = new Set("tnrfv");
+var SET_ESCAPES = new Set("dwsDWS");
+var CLASS_SET_ESCAPES = new Set("dws");
+var BARE_SPECIALS = new Set("]{}*+?");
+var QUANTIFIER = /^\{\d+(,\d*)?\}/;
+var Parser = class {
+  constructor(p) {
+    this.p = p;
+  }
+  p;
+  i = 0;
+  done() {
+    return this.i === this.p.length;
+  }
+  alternatives() {
+    while (!this.done() && this.p[this.i] !== ")") {
+      if (this.p[this.i] === "|") this.i++;
+      else if (!this.term()) return false;
+    }
+    return true;
+  }
+  term() {
+    const atom = this.atom();
+    return atom !== null && this.quantifier(atom === "quantifiable");
+  }
+  atom() {
+    const c = this.p[this.i++];
+    if (c === "^" || c === "$") return "assertion";
+    if (c === "\\") return this.escape();
+    if (c === "[") return this.charClass() ? "quantifiable" : null;
+    if (c === "(") return this.group() ? "quantifiable" : null;
+    return BARE_SPECIALS.has(c) ? null : "quantifiable";
+  }
+  escape() {
+    const e = this.p[this.i++] ?? "";
+    if (e === "b" || e === "B") return "assertion";
+    if (SET_ESCAPES.has(e) || CONTROL_ESCAPES.has(e) || ESCAPED_PUNCTUATION.has(e)) return "quantifiable";
+    return this.hexEscape(e) ? "quantifiable" : null;
+  }
+  hexEscape(e) {
+    const width = e === "x" ? 2 : e === "u" ? 4 : 0;
+    const digits = this.p.slice(this.i, this.i + width);
+    if (width === 0 || !/^[0-9a-fA-F]+$/.test(digits) || digits.length !== width) return false;
+    this.i += width;
+    return true;
+  }
+  group() {
+    if (this.p[this.i] === "?") {
+      if (this.p[this.i + 1] !== ":") return false;
+      this.i += 2;
+    }
+    if (!this.alternatives() || this.p[this.i] !== ")") return false;
+    this.i++;
+    return true;
+  }
+  charClass() {
+    if (this.p[this.i] === "^") this.i++;
+    if (this.p[this.i] === "]") return false;
+    while (!this.done() && this.p[this.i] !== "]") {
+      if (!this.classItem()) return false;
+    }
+    if (this.done()) return false;
+    this.i++;
+    return true;
+  }
+  classItem() {
+    const start = this.classAtom();
+    if (start === null) return false;
+    if (this.p[this.i] !== "-" || this.p[this.i + 1] === "]") return true;
+    this.i++;
+    return start === "char" && this.classAtom() === "char";
+  }
+  classAtom() {
+    const c = this.p[this.i++];
+    if (c === "[") return null;
+    if (c !== "\\") return isSurrogate(c) ? null : "char";
+    const e = this.p[this.i++] ?? "";
+    if (CLASS_SET_ESCAPES.has(e)) return "set";
+    if (CONTROL_ESCAPES.has(e) || ESCAPED_PUNCTUATION.has(e)) return "char";
+    return this.hexEscape(e) ? "char" : null;
+  }
+  quantifier(quantifiable) {
+    const length = this.quantifierLength();
+    if (length === 0) return true;
+    if (length < 0 || !quantifiable) return false;
+    this.i += length;
+    if (this.p[this.i] === "?") this.i++;
+    return true;
+  }
+  quantifierLength() {
+    const c = this.p[this.i];
+    if (c === "*" || c === "+" || c === "?") return 1;
+    if (c !== "{") return 0;
+    return QUANTIFIER.exec(this.p.slice(this.i))?.[0].length ?? -1;
+  }
+};
+function isSurrogate(c) {
+  const code = c.charCodeAt(0);
+  return code >= 55296 && code <= 57343;
+}
+
 // src/document/validate.ts
 function validate(source) {
   const diag = new Diagnostics();
@@ -835,8 +948,8 @@ var OPERANDS = {
   gte: [isNumber, "a number"],
   lt: [isNumber, "a number"],
   lte: [isNumber, "a number"],
-  matches: [isRe2Pattern, "an RE2-compatible regular expression"],
-  notMatches: [isRe2Pattern, "an RE2-compatible regular expression"],
+  matches: [isPortablePattern, "a regular expression in the portable subset"],
+  notMatches: [isPortablePattern, "a regular expression in the portable subset"],
   startsWith: [isString, "a string"],
   glob: [isString, "a glob"],
   withinWorkspace: [isBoolean, "true or false"],
@@ -856,16 +969,6 @@ function isString(v) {
 function isBoolean(v) {
   return typeof v === "boolean";
 }
-function isRe2Pattern(v) {
-  if (typeof v !== "string") return false;
-  if (/\\[1-9]|\(\?[=!<]/.test(v)) return false;
-  try {
-    new RegExp(v);
-    return true;
-  } catch {
-    return false;
-  }
-}
 function validateOverlays(ctx, overlays2, path) {
   for (const [key, overlay] of Object.entries(overlays2 ?? {})) {
     const opath = `${path}/${key}`;
@@ -1108,7 +1211,25 @@ var HIPAA = [
   "164.312(d)",
   "164.312(e)(1)"
 ].map((c) => `HIPAA-${c}`);
-var KNOWN_CONTROLS = /* @__PURE__ */ new Set([...SOC2, ...HIPAA]);
+var FERPA = ["99.10", "99.20", "99.30", "99.31", "99.32", "99.33", "99.34", "99.35", "99.36", "99.37"].map((c) => `FERPA-${c}`);
+var ITAR = [
+  "120.11",
+  "120.31",
+  "120.32",
+  "120.33",
+  "120.34",
+  "120.43",
+  "120.50",
+  "120.51",
+  "120.52",
+  "120.54",
+  "120.55",
+  "120.56",
+  "120.62",
+  "120.63"
+].map((c) => `ITAR-${c}`);
+var EAR = ["734.3", "734.7", "734.8", "734.9", "734.13", "734.14", "734.15", "734.16", "734.17", "734.18", "734.19", "734.20"].map((c) => `EAR-${c}`);
+var KNOWN_CONTROLS = /* @__PURE__ */ new Set([...SOC2, ...HIPAA, ...FERPA, ...ITAR, ...EAR]);
 
 // src/compile/lower-rules.ts
 function lowerRules(rules, ctx, path, subject, scopeExpiry) {