@cdot65/prisma-airs-cli 1.0.0

package/dist/config/loader.d.ts

@@ -0,0 +1,3 @@
+import { type Config } from './schema.js';
+export declare function loadConfig(cliOverrides?: Record<string, unknown>, configFilePath?: string): Promise<Config>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/config/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,MAAM,EAAgB,MAAM,aAAa,CAAC;AAgDxD,wBAAsB,UAAU,CAC9B,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAC1C,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,CAmBjB"}

package/dist/config/loader.js

@@ -0,0 +1,65 @@
+import { readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { ConfigSchema } from './schema.js';
+function expandHome(p) {
+    return p.startsWith('~') ? join(homedir(), p.slice(1)) : p;
+}
+function fromEnv() {
+    const env = process.env;
+    return {
+        llmProvider: env.LLM_PROVIDER,
+        llmModel: env.LLM_MODEL,
+        anthropicApiKey: env.ANTHROPIC_API_KEY,
+        googleApiKey: env.GOOGLE_API_KEY,
+        googleCloudProject: env.GOOGLE_CLOUD_PROJECT,
+        googleCloudLocation: env.GOOGLE_CLOUD_LOCATION,
+        awsRegion: env.AWS_REGION,
+        awsAccessKeyId: env.AWS_ACCESS_KEY_ID,
+        awsSecretAccessKey: env.AWS_SECRET_ACCESS_KEY,
+        airsApiKey: env.PANW_AI_SEC_API_KEY,
+        mgmtClientId: env.PANW_MGMT_CLIENT_ID,
+        mgmtClientSecret: env.PANW_MGMT_CLIENT_SECRET,
+        mgmtTsgId: env.PANW_MGMT_TSG_ID,
+        mgmtEndpoint: env.PANW_MGMT_ENDPOINT,
+        mgmtTokenEndpoint: env.PANW_MGMT_TOKEN_ENDPOINT,
+        scanConcurrency: env.SCAN_CONCURRENCY,
+        propagationDelayMs: env.PROPAGATION_DELAY_MS,
+        accumulateTests: env.ACCUMULATE_TESTS,
+        maxAccumulatedTests: env.MAX_ACCUMULATED_TESTS,
+        dataDir: env.DATA_DIR,
+        memoryEnabled: env.MEMORY_ENABLED,
+        memoryDir: env.MEMORY_DIR,
+        maxMemoryChars: env.MAX_MEMORY_CHARS,
+    };
+}
+async function fromFile(path) {
+    try {
+        const data = await readFile(path, 'utf-8');
+        return JSON.parse(data);
+    }
+    catch {
+        return {};
+    }
+}
+function stripUndefined(obj) {
+    return Object.fromEntries(Object.entries(obj).filter(([, v]) => v !== undefined && v !== ''));
+}
+export async function loadConfig(cliOverrides = {}, configFilePath) {
+    const filePath = configFilePath ?? join(homedir(), '.prisma-airs', 'config.json');
+    const fileConfig = await fromFile(filePath);
+    const envConfig = fromEnv();
+    // Priority: CLI > env > file > defaults
+    const merged = {
+        ...stripUndefined(fileConfig),
+        ...stripUndefined(envConfig),
+        ...stripUndefined(cliOverrides),
+    };
+    const config = ConfigSchema.parse(merged);
+    return {
+        ...config,
+        dataDir: expandHome(config.dataDir),
+        memoryDir: expandHome(config.memoryDir),
+    };
+}
+//# sourceMappingURL=loader.js.map

package/dist/config/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAC;AAExD,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,OAAO;IACd,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,eAAe,EAAE,GAAG,CAAC,iBAAiB;QACtC,YAAY,EAAE,GAAG,CAAC,cAAc;QAChC,kBAAkB,EAAE,GAAG,CAAC,oBAAoB;QAC5C,mBAAmB,EAAE,GAAG,CAAC,qBAAqB;QAC9C,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,cAAc,EAAE,GAAG,CAAC,iBAAiB;QACrC,kBAAkB,EAAE,GAAG,CAAC,qBAAqB;QAC7C,UAAU,EAAE,GAAG,CAAC,mBAAmB;QACnC,YAAY,EAAE,GAAG,CAAC,mBAAmB;QACrC,gBAAgB,EAAE,GAAG,CAAC,uBAAuB;QAC7C,SAAS,EAAE,GAAG,CAAC,gBAAgB;QAC/B,YAAY,EAAE,GAAG,CAAC,kBAAkB;QACpC,iBAAiB,EAAE,GAAG,CAAC,wBAAwB;QAC/C,eAAe,EAAE,GAAG,CAAC,gBAAgB;QACrC,kBAAkB,EAAE,GAAG,CAAC,oBAAoB;QAC5C,eAAe,EAAE,GAAG,CAAC,gBAAgB;QACrC,mBAAmB,EAAE,GAAG,CAAC,qBAAqB;QAC9C,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,cAAc,EAAE,GAAG,CAAC,gBAAgB;KACrC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAA4B;IAClD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,eAAwC,EAAE,EAC1C,cAAuB;IAEvB,MAAM,QAAQ,GAAG,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;IAClF,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,OAAO,EAAE,CAAC;IAE5B,wCAAwC;IACxC,MAAM,MAAM,GAAG;QACb,GAAG,cAAc,CAAC,UAAU,CAAC;QAC7B,GAAG,cAAc,CAAC,SAAS,CAAC;QAC5B,GAAG,cAAc,CAAC,YAAY,CAAC;KAChC,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAE1C,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;QACnC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC;KACxC,CAAC;AACJ,CAAC"}

package/dist/config/schema.d.ts

@@ -0,0 +1,78 @@
+import { z } from 'zod';
+export declare const LlmProviderSchema: z.ZodEnum<["claude-api", "claude-vertex", "claude-bedrock", "gemini-api", "gemini-vertex", "gemini-bedrock"]>;
+export type LlmProvider = z.infer<typeof LlmProviderSchema>;
+export declare const ConfigSchema: z.ZodObject<{
+    llmProvider: z.ZodDefault<z.ZodEnum<["claude-api", "claude-vertex", "claude-bedrock", "gemini-api", "gemini-vertex", "gemini-bedrock"]>>;
+    llmModel: z.ZodOptional<z.ZodString>;
+    anthropicApiKey: z.ZodOptional<z.ZodString>;
+    googleApiKey: z.ZodOptional<z.ZodString>;
+    googleCloudProject: z.ZodOptional<z.ZodString>;
+    googleCloudLocation: z.ZodDefault<z.ZodString>;
+    awsRegion: z.ZodDefault<z.ZodString>;
+    awsAccessKeyId: z.ZodOptional<z.ZodString>;
+    awsSecretAccessKey: z.ZodOptional<z.ZodString>;
+    airsApiKey: z.ZodOptional<z.ZodString>;
+    mgmtClientId: z.ZodOptional<z.ZodString>;
+    mgmtClientSecret: z.ZodOptional<z.ZodString>;
+    mgmtTsgId: z.ZodOptional<z.ZodString>;
+    mgmtEndpoint: z.ZodOptional<z.ZodString>;
+    mgmtTokenEndpoint: z.ZodOptional<z.ZodString>;
+    scanConcurrency: z.ZodDefault<z.ZodNumber>;
+    propagationDelayMs: z.ZodDefault<z.ZodNumber>;
+    accumulateTests: z.ZodDefault<z.ZodBoolean>;
+    maxAccumulatedTests: z.ZodOptional<z.ZodNumber>;
+    dataDir: z.ZodDefault<z.ZodString>;
+    memoryEnabled: z.ZodDefault<z.ZodBoolean>;
+    memoryDir: z.ZodDefault<z.ZodString>;
+    maxMemoryChars: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    llmProvider: "claude-api" | "claude-vertex" | "claude-bedrock" | "gemini-api" | "gemini-vertex" | "gemini-bedrock";
+    googleCloudLocation: string;
+    awsRegion: string;
+    scanConcurrency: number;
+    propagationDelayMs: number;
+    accumulateTests: boolean;
+    dataDir: string;
+    memoryEnabled: boolean;
+    memoryDir: string;
+    maxMemoryChars: number;
+    llmModel?: string | undefined;
+    anthropicApiKey?: string | undefined;
+    googleApiKey?: string | undefined;
+    googleCloudProject?: string | undefined;
+    awsAccessKeyId?: string | undefined;
+    awsSecretAccessKey?: string | undefined;
+    airsApiKey?: string | undefined;
+    mgmtClientId?: string | undefined;
+    mgmtClientSecret?: string | undefined;
+    mgmtTsgId?: string | undefined;
+    mgmtEndpoint?: string | undefined;
+    mgmtTokenEndpoint?: string | undefined;
+    maxAccumulatedTests?: number | undefined;
+}, {
+    llmProvider?: "claude-api" | "claude-vertex" | "claude-bedrock" | "gemini-api" | "gemini-vertex" | "gemini-bedrock" | undefined;
+    llmModel?: string | undefined;
+    anthropicApiKey?: string | undefined;
+    googleApiKey?: string | undefined;
+    googleCloudProject?: string | undefined;
+    googleCloudLocation?: string | undefined;
+    awsRegion?: string | undefined;
+    awsAccessKeyId?: string | undefined;
+    awsSecretAccessKey?: string | undefined;
+    airsApiKey?: string | undefined;
+    mgmtClientId?: string | undefined;
+    mgmtClientSecret?: string | undefined;
+    mgmtTsgId?: string | undefined;
+    mgmtEndpoint?: string | undefined;
+    mgmtTokenEndpoint?: string | undefined;
+    scanConcurrency?: number | undefined;
+    propagationDelayMs?: number | undefined;
+    accumulateTests?: boolean | undefined;
+    maxAccumulatedTests?: number | undefined;
+    dataDir?: string | undefined;
+    memoryEnabled?: boolean | undefined;
+    memoryDir?: string | undefined;
+    maxMemoryChars?: number | undefined;
+}>;
+export type Config = z.infer<typeof ConfigSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/config/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,iBAAiB,+GAO5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0CvB,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/config/schema.js

@@ -0,0 +1,44 @@
+import { z } from 'zod';
+export const LlmProviderSchema = z.enum([
+    'claude-api',
+    'claude-vertex',
+    'claude-bedrock',
+    'gemini-api',
+    'gemini-vertex',
+    'gemini-bedrock',
+]);
+export const ConfigSchema = z.object({
+    llmProvider: LlmProviderSchema.default('claude-api'),
+    llmModel: z.string().optional(),
+    // Claude API
+    anthropicApiKey: z.string().optional(),
+    // Google AI
+    googleApiKey: z.string().optional(),
+    // Google Vertex
+    googleCloudProject: z.string().optional(),
+    googleCloudLocation: z.string().default('us-central1'),
+    // AWS Bedrock
+    awsRegion: z.string().default('us-east-1'),
+    awsAccessKeyId: z.string().optional(),
+    awsSecretAccessKey: z.string().optional(),
+    // AIRS Scanner
+    airsApiKey: z.string().optional(),
+    // AIRS Management (SDK v2 — OAuth2 client credentials)
+    mgmtClientId: z.string().optional(),
+    mgmtClientSecret: z.string().optional(),
+    mgmtTsgId: z.string().optional(),
+    mgmtEndpoint: z.string().optional(),
+    mgmtTokenEndpoint: z.string().optional(),
+    // Tuning
+    scanConcurrency: z.coerce.number().int().min(1).max(20).default(5),
+    propagationDelayMs: z.coerce.number().int().min(0).default(10000),
+    accumulateTests: z.coerce.boolean().default(false),
+    maxAccumulatedTests: z.coerce.number().int().min(1).optional(),
+    // Persistence
+    dataDir: z.string().default('~/.prisma-airs/runs'),
+    // Memory
+    memoryEnabled: z.coerce.boolean().default(true),
+    memoryDir: z.string().default('~/.prisma-airs/memory'),
+    maxMemoryChars: z.coerce.number().int().min(500).max(10000).default(3000),
+});
+//# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IACtC,YAAY;IACZ,eAAe;IACf,gBAAgB;IAChB,YAAY;IACZ,eAAe;IACf,gBAAgB;CACjB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE/B,aAAa;IACb,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEtC,YAAY;IACZ,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEnC,gBAAgB;IAChB,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC;IAEtD,cAAc;IACd,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IAC1C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEzC,eAAe;IACf,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEjC,uDAAuD;IACvD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAExC,SAAS;IACT,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACjE,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAClD,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAE9D,cAAc;IACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC;IAElD,SAAS;IACT,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACtD,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CAC1E,CAAC,CAAC"}

package/dist/core/constraints.d.ts

@@ -0,0 +1,18 @@
+import type { CustomTopic } from './types.js';
+export interface ValidationError {
+    field: string;
+    message: string;
+}
+export declare const MAX_NAME_LENGTH = 100;
+export declare const MAX_DESCRIPTION_LENGTH = 250;
+export declare const MAX_EXAMPLE_LENGTH = 250;
+export declare const MAX_EXAMPLES = 5;
+export declare const MAX_COMBINED_LENGTH = 1000;
+/** UTF-8 byte length — AIRS API enforces limits in bytes, not JS characters. */
+export declare function byteLen(s: string): number;
+export declare function validateName(name: string): ValidationError[];
+export declare function validateDescription(description: string): ValidationError[];
+export declare function validateExample(example: string, index: number): ValidationError[];
+export declare function validateExamples(examples: string[]): ValidationError[];
+export declare function validateTopic(topic: CustomTopic): ValidationError[];
+//# sourceMappingURL=constraints.d.ts.map

package/dist/core/constraints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constraints.d.ts","sourceRoot":"","sources":["../../src/core/constraints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,eAAe,MAAM,CAAC;AACnC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,eAAO,MAAM,YAAY,IAAI,CAAC;AAC9B,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAExC,gFAAgF;AAChF,wBAAgB,OAAO,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEzC;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAQ5D;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,eAAe,EAAE,CAW1E;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe,EAAE,CAWjF;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAYtE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,WAAW,GAAG,eAAe,EAAE,CAmBnE"}

package/dist/core/constraints.js

@@ -0,0 +1,75 @@
+export const MAX_NAME_LENGTH = 100;
+export const MAX_DESCRIPTION_LENGTH = 250;
+export const MAX_EXAMPLE_LENGTH = 250;
+export const MAX_EXAMPLES = 5;
+export const MAX_COMBINED_LENGTH = 1000;
+/** UTF-8 byte length — AIRS API enforces limits in bytes, not JS characters. */
+export function byteLen(s) {
+    return Buffer.byteLength(s, 'utf8');
+}
+export function validateName(name) {
+    const errors = [];
+    if (!name || name.length === 0) {
+        errors.push({ field: 'name', message: 'Name is required' });
+    }
+    else if (byteLen(name) > MAX_NAME_LENGTH) {
+        errors.push({ field: 'name', message: `Name must be at most ${MAX_NAME_LENGTH} bytes` });
+    }
+    return errors;
+}
+export function validateDescription(description) {
+    const errors = [];
+    if (!description || description.length === 0) {
+        errors.push({ field: 'description', message: 'Description is required' });
+    }
+    else if (byteLen(description) > MAX_DESCRIPTION_LENGTH) {
+        errors.push({
+            field: 'description',
+            message: `Description must be at most ${MAX_DESCRIPTION_LENGTH} bytes`,
+        });
+    }
+    return errors;
+}
+export function validateExample(example, index) {
+    const errors = [];
+    if (!example || example.length === 0) {
+        errors.push({ field: `examples[${index}]`, message: `Example ${index} is required` });
+    }
+    else if (byteLen(example) > MAX_EXAMPLE_LENGTH) {
+        errors.push({
+            field: `examples[${index}]`,
+            message: `Example ${index} must be at most ${MAX_EXAMPLE_LENGTH} bytes`,
+        });
+    }
+    return errors;
+}
+export function validateExamples(examples) {
+    const errors = [];
+    if (examples.length > MAX_EXAMPLES) {
+        errors.push({
+            field: 'examples',
+            message: `At most ${MAX_EXAMPLES} examples allowed`,
+        });
+    }
+    for (let i = 0; i < examples.length; i++) {
+        errors.push(...validateExample(examples[i], i));
+    }
+    return errors;
+}
+export function validateTopic(topic) {
+    const errors = [];
+    errors.push(...validateName(topic.name));
+    errors.push(...validateDescription(topic.description));
+    errors.push(...validateExamples(topic.examples));
+    const combined = byteLen(topic.name) +
+        byteLen(topic.description) +
+        topic.examples.reduce((sum, ex) => sum + byteLen(ex), 0);
+    if (combined > MAX_COMBINED_LENGTH) {
+        errors.push({
+            field: 'topic',
+            message: `Combined length (${combined}) exceeds ${MAX_COMBINED_LENGTH} bytes`,
+        });
+    }
+    return errors;
+}
+//# sourceMappingURL=constraints.js.map

package/dist/core/constraints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constraints.js","sourceRoot":"","sources":["../../src/core/constraints.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AACnC,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAExC,gFAAgF;AAChF,MAAM,UAAU,OAAO,CAAC,CAAS;IAC/B,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,eAAe,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,wBAAwB,eAAe,QAAQ,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC5E,CAAC;SAAM,IAAI,OAAO,CAAC,WAAW,CAAC,GAAG,sBAAsB,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,+BAA+B,sBAAsB,QAAQ;SACvE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,KAAa;IAC5D,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,KAAK,GAAG,EAAE,OAAO,EAAE,WAAW,KAAK,cAAc,EAAE,CAAC,CAAC;IACxF,CAAC;SAAM,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,kBAAkB,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,YAAY,KAAK,GAAG;YAC3B,OAAO,EAAE,WAAW,KAAK,oBAAoB,kBAAkB,QAAQ;SACxE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAkB;IACjD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,QAAQ,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,WAAW,YAAY,mBAAmB;SACpD,CAAC,CAAC;IACL,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAkB;IAC9C,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,MAAM,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACvD,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEjD,MAAM,QAAQ,GACZ,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAC1B,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAE3D,IAAI,QAAQ,GAAG,mBAAmB,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,OAAO;YACd,OAAO,EAAE,oBAAoB,QAAQ,aAAa,mBAAmB,QAAQ;SAC9E,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/loop.d.ts

@@ -0,0 +1,54 @@
+import type { ManagementService, PromptSetService, ScanService } from '../airs/types.js';
+import type { LearningExtractor } from '../memory/extractor.js';
+import type { AnalysisReport, CategoryBreakdown, CustomTopic, EfficacyMetrics, LoopEvent, TestCase, TestResult, UserInput } from './types.js';
+/** Contract for LLM operations used by the refinement loop. */
+export interface LlmService {
+    /** Generate an initial topic definition from a user description. */
+    generateTopic(description: string, intent: string, seeds?: string[]): Promise<CustomTopic>;
+    /** Generate positive and negative test prompts for a topic. */
+    generateTests(topic: CustomTopic, intent: string, categoryBreakdown?: CategoryBreakdown[]): Promise<{
+        positiveTests: TestCase[];
+        negativeTests: TestCase[];
+    }>;
+    /** Analyze scan results to identify false positive/negative patterns. */
+    analyzeResults(topic: CustomTopic, results: TestResult[], metrics: EfficacyMetrics, intent: string): Promise<AnalysisReport>;
+    /** Simplify a topic that has regressed by removing exclusion clauses and shortening. */
+    simplifyTopic(currentTopic: CustomTopic, bestTopic: CustomTopic, metrics: EfficacyMetrics, analysis: AnalysisReport, intent: string): Promise<CustomTopic>;
+    /** Generate a broad allow companion topic for a block-intent profile. */
+    generateCompanionTopic(blockTopicName: string, blockDescription: string): Promise<CustomTopic>;
+    /** Refine a topic definition based on metrics and analysis from the previous iteration. */
+    improveTopic(topic: CustomTopic, metrics: EfficacyMetrics, analysis: AnalysisReport, results: TestResult[], iteration: number, targetCoverage: number, intent: string, bestContext?: {
+        bestCoverage: number;
+        bestIteration: number;
+        bestTopic?: CustomTopic;
+    }): Promise<CustomTopic>;
+}
+/** Dependencies injected into the refinement loop. */
+export interface LoopDependencies {
+    /** LLM service for topic generation, testing, analysis, and improvement. */
+    llm: LlmService;
+    /** AIRS management service for topic CRUD and profile linking. */
+    management: ManagementService;
+    /** AIRS scan service for batch prompt scanning. */
+    scanner: ScanService;
+    /** Delay (ms) after topic deploy to allow AIRS propagation. Default 10000. */
+    propagationDelayMs?: number;
+    /** Optional memory system for cross-run learning extraction. */
+    memory?: {
+        extractor: LearningExtractor;
+    };
+    /** Optional prompt set service for creating custom prompt sets from test cases. */
+    promptSets?: PromptSetService;
+    /** Interval (ms) between warm-up probe retries. Default 5000. */
+    probeIntervalMs?: number;
+    /** Max warm-up probe attempts on iteration 1. Default 6. */
+    maxProbeAttempts?: number;
+}
+/**
+ * Main refinement loop — generates, deploys, tests, and iteratively improves a topic.
+ * Yields typed {@link LoopEvent} discriminated unions at each stage.
+ * @param input - User input seeding the generation run.
+ * @param deps - Injected service dependencies.
+ */
+export declare function runLoop(input: UserInput, deps: LoopDependencies): AsyncGenerator<LoopEvent>;
+//# sourceMappingURL=loop.d.ts.map

package/dist/core/loop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop.d.ts","sourceRoot":"","sources":["../../src/core/loop.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,eAAe,EAEf,SAAS,EAET,QAAQ,EACR,UAAU,EACV,SAAS,EACV,MAAM,YAAY,CAAC;AAEpB,+DAA+D;AAC/D,MAAM,WAAW,UAAU;IACzB,oEAAoE;IACpE,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3F,+DAA+D;IAC/D,aAAa,CACX,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,MAAM,EACd,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,GACtC,OAAO,CAAC;QAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;QAAC,aAAa,EAAE,QAAQ,EAAE,CAAA;KAAE,CAAC,CAAC;IACrE,yEAAyE;IACzE,cAAc,CACZ,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,UAAU,EAAE,EACrB,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3B,wFAAwF;IACxF,aAAa,CACX,YAAY,EAAE,WAAW,EACzB,SAAS,EAAE,WAAW,EACtB,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB,yEAAyE;IACzE,sBAAsB,CAAC,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/F,2FAA2F;IAC3F,YAAY,CACV,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,UAAU,EAAE,EACrB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,MAAM,EACd,WAAW,CAAC,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,WAAW,CAAA;KAAE,GACrF,OAAO,CAAC,WAAW,CAAC,CAAC;CACzB;AAED,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,4EAA4E;IAC5E,GAAG,EAAE,UAAU,CAAC;IAChB,kEAAkE;IAClE,UAAU,EAAE,iBAAiB,CAAC;IAC9B,mDAAmD;IACnD,OAAO,EAAE,WAAW,CAAC;IACrB,8EAA8E;IAC9E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gEAAgE;IAChE,MAAM,CAAC,EAAE;QAAE,SAAS,EAAE,iBAAiB,CAAA;KAAE,CAAC;IAC1C,mFAAmF;IACnF,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAoBD;;;;;GAKG;AACH,wBAAuB,OAAO,CAC5B,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE,gBAAgB,GACrB,cAAc,CAAC,SAAS,CAAC,CAsiB3B"}