@claudexor/policy 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 joi-lab
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,7 @@
+# @claudexor/policy
+
+Internal package of [Claudexor](https://github.com/razzant/claudexor) — Typed risk classifier + thin policy (path guard, require-human, deny lists). No keyword-regex governance.
+
+Published as part of the Claudexor toolchain; it follows the monorepo's
+lockstep version and has no separate semver contract. Use the `claudexor`
+CLI (or `@claudexor/cli`) as the supported entry point.

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./risk.js";
+export * from "./policy.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export * from "./risk.js";
+export * from "./policy.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}

package/dist/policy.d.ts

@@ -0,0 +1,20 @@
+/** Default path globs whose changes require human approval. */
+export declare const DEFAULT_REQUIRE_HUMAN_PATHS: string[];
+export interface PathGuardResult {
+    allowed: boolean;
+    reason?: string;
+}
+/**
+ * Confine writes to the workspace root (defense-in-depth on top of the native
+ * harness sandbox).
+ */
+export declare function pathGuard(workspaceRoot: string, targetPath: string): PathGuardResult;
+export interface RequireHumanResult {
+    required: boolean;
+    reasons: string[];
+    /** The changed paths that matched a human-approval pattern (structured evidence,
+     * never reconstructed by substring-matching the reason prose). */
+    matchedPaths: string[];
+}
+export declare function requireHuman(changedPaths: string[], patterns?: string[]): RequireHumanResult;
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAGA,+DAA+D;AAC/D,eAAO,MAAM,2BAA2B,UAOvC,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,eAAe,CAQpF;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;sEACkE;IAClE,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,wBAAgB,YAAY,CAC1B,YAAY,EAAE,MAAM,EAAE,EACtB,QAAQ,GAAE,MAAM,EAAgC,GAC/C,kBAAkB,CAUpB"}

package/dist/policy.js

@@ -0,0 +1,36 @@
+import { isAbsolute, relative, resolve } from "node:path";
+import { matchAny } from "@claudexor/context";
+/** Default path globs whose changes require human approval. */
+export const DEFAULT_REQUIRE_HUMAN_PATHS = [
+    "**/auth/**",
+    "**/payment*/**",
+    "**/billing/**",
+    "**/migrations/**",
+    "**/secrets/**",
+    "**/.github/workflows/**",
+];
+/**
+ * Confine writes to the workspace root (defense-in-depth on top of the native
+ * harness sandbox).
+ */
+export function pathGuard(workspaceRoot, targetPath) {
+    const root = resolve(workspaceRoot);
+    const target = isAbsolute(targetPath) ? resolve(targetPath) : resolve(root, targetPath);
+    const rel = relative(root, target);
+    if (rel === "" || rel.startsWith("..") || isAbsolute(rel)) {
+        return { allowed: false, reason: `write to '${targetPath}' resolves outside workspace '${workspaceRoot}'` };
+    }
+    return { allowed: true };
+}
+export function requireHuman(changedPaths, patterns = DEFAULT_REQUIRE_HUMAN_PATHS) {
+    const reasons = [];
+    const matchedPaths = [];
+    for (const p of changedPaths) {
+        if (matchAny(p, patterns)) {
+            reasons.push(`change to ${p} requires human approval`);
+            matchedPaths.push(p);
+        }
+    }
+    return { required: reasons.length > 0, reasons, matchedPaths };
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,YAAY;IACZ,gBAAgB;IAChB,eAAe;IACf,kBAAkB;IAClB,eAAe;IACf,yBAAyB;CAC1B,CAAC;AAOF;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,aAAqB,EAAE,UAAkB;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACxF,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,UAAU,iCAAiC,aAAa,GAAG,EAAE,CAAC;IAC9G,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAUD,MAAM,UAAU,YAAY,CAC1B,YAAsB,EACtB,WAAqB,2BAA2B;IAEhD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,IAAI,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,0BAA0B,CAAC,CAAC;YACvD,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AACjE,CAAC"}

package/dist/risk.d.ts

@@ -0,0 +1,26 @@
+import type { RiskLevel } from "@claudexor/schema";
+/**
+ * Risk is classified from typed diff/path metadata (and optional LLM judgment
+ * layered on top by callers) — never from keyword regex over human text.
+ */
+export interface DiffMeta {
+    changedPaths: string[];
+    additions?: number;
+    deletions?: number;
+    protectedPaths?: string[];
+}
+export interface RiskAssessment {
+    level: RiskLevel;
+    reasons: string[];
+    /** The actual changed paths that triggered this risk level (structured
+     * evidence for the human gate — never reconstructed by string-matching prose). */
+    matchedPaths: string[];
+}
+export declare function classifyRisk(meta: DiffMeta): RiskAssessment;
+/** Review depth implied by risk (callers may still override). */
+export declare function reviewDepthForRisk(level: RiskLevel): {
+    reviewers: number;
+    crossFamily: boolean;
+    humanApproval: boolean;
+};
+//# sourceMappingURL=risk.d.ts.map

package/dist/risk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.d.ts","sourceRoot":"","sources":["../src/risk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAGnD;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;sFACkF;IAClF,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAsCD,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,cAAc,CAsC3D;AAED,iEAAiE;AACjE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,GAAG;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;CACxB,CAWA"}

package/dist/risk.js

@@ -0,0 +1,87 @@
+import { matchAny } from "@claudexor/context";
+const CRITICAL_PATTERNS = [
+    "**/secrets/**",
+    "**/.env",
+    "**/.env.*",
+    "**/*.pem",
+    "**/credentials*",
+    "**/deploy/**/prod*",
+    "**/terraform/**",
+    "**/.github/workflows/release*",
+];
+const HIGH_PATTERNS = [
+    "**/auth/**",
+    "**/payment*/**",
+    "**/billing/**",
+    "**/security/**",
+    "**/migrations/**",
+    "**/*migration*",
+    "**/crypto/**",
+    "**/.github/workflows/**",
+    "**/Dockerfile",
+    "**/k8s/**",
+    "**/charts/**",
+];
+const DEP_PATTERNS = [
+    "**/package.json",
+    "package.json",
+    "**/pnpm-lock.yaml",
+    "pnpm-lock.yaml",
+    "**/requirements*.txt",
+    "**/Cargo.toml",
+    "**/go.mod",
+];
+const LARGE_DIFF_FILES = 20;
+const LARGE_DIFF_LINES = 500;
+export function classifyRisk(meta) {
+    const reasons = [];
+    const paths = meta.changedPaths;
+    const churn = (meta.additions ?? 0) + (meta.deletions ?? 0);
+    const protectedHit = paths.filter((p) => matchAny(p, meta.protectedPaths ?? []));
+    if (protectedHit.length > 0)
+        reasons.push(`touches protected paths: ${protectedHit.slice(0, 3).join(", ")}`);
+    const criticalHit = paths.filter((p) => matchAny(p, CRITICAL_PATTERNS));
+    if (criticalHit.length > 0 || protectedHit.length > 0) {
+        reasons.unshift(criticalHit.length > 0
+            ? `critical paths: ${criticalHit.slice(0, 3).join(", ")}`
+            : "protected-path change");
+        return { level: "critical", reasons, matchedPaths: [...new Set([...criticalHit, ...protectedHit])] };
+    }
+    const highHit = paths.filter((p) => matchAny(p, HIGH_PATTERNS));
+    if (highHit.length > 0) {
+        reasons.unshift(`high-risk paths: ${highHit.slice(0, 3).join(", ")}`);
+        return { level: "high", reasons, matchedPaths: highHit };
+    }
+    const depHit = paths.filter((p) => matchAny(p, DEP_PATTERNS));
+    const large = paths.length >= LARGE_DIFF_FILES || churn >= LARGE_DIFF_LINES;
+    if (depHit.length > 0)
+        reasons.push(`dependency/manifest change: ${depHit.slice(0, 2).join(", ")}`);
+    if (large)
+        reasons.push(`large diff (${paths.length} files, ${churn} lines)`);
+    if (depHit.length > 0 && large)
+        return { level: "high", reasons, matchedPaths: depHit };
+    if (depHit.length > 0 || large)
+        return { level: "medium", reasons, matchedPaths: depHit };
+    if (paths.length === 0)
+        return { level: "low", reasons: ["no file changes"], matchedPaths: [] };
+    if (paths.length <= 2 && churn <= 50) {
+        reasons.push(`small change (${paths.length} files, ${churn} lines)`);
+        return { level: "low", reasons, matchedPaths: [] };
+    }
+    reasons.push(`normal change (${paths.length} files, ${churn} lines)`);
+    return { level: "medium", reasons, matchedPaths: [] };
+}
+/** Review depth implied by risk (callers may still override). */
+export function reviewDepthForRisk(level) {
+    switch (level) {
+        case "low":
+            return { reviewers: 1, crossFamily: false, humanApproval: false };
+        case "medium":
+            return { reviewers: 1, crossFamily: false, humanApproval: false };
+        case "high":
+            return { reviewers: 2, crossFamily: true, humanApproval: false };
+        case "critical":
+            return { reviewers: 2, crossFamily: true, humanApproval: true };
+    }
+}
+//# sourceMappingURL=risk.js.map

package/dist/risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.js","sourceRoot":"","sources":["../src/risk.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAqB9C,MAAM,iBAAiB,GAAG;IACxB,eAAe;IACf,SAAS;IACT,WAAW;IACX,UAAU;IACV,iBAAiB;IACjB,oBAAoB;IACpB,iBAAiB;IACjB,+BAA+B;CAChC,CAAC;AACF,MAAM,aAAa,GAAG;IACpB,YAAY;IACZ,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,cAAc;IACd,yBAAyB;IACzB,eAAe;IACf,WAAW;IACX,cAAc;CACf,CAAC;AACF,MAAM,YAAY,GAAG;IACnB,iBAAiB;IACjB,cAAc;IACd,mBAAmB;IACnB,gBAAgB;IAChB,sBAAsB;IACtB,eAAe;IACf,WAAW;CACZ,CAAC;AAEF,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;IAE5D,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC;IACjF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,4BAA4B,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAE7G,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACxE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,OAAO,CACb,WAAW,CAAC,MAAM,GAAG,CAAC;YACpB,CAAC,CAAC,mBAAmB,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACzD,CAAC,CAAC,uBAAuB,CAC5B,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IACvG,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,OAAO,CAAC,oBAAoB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,gBAAgB,IAAI,KAAK,IAAI,gBAAgB,CAAC;IAC5E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,+BAA+B,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpG,IAAI,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,eAAe,KAAK,CAAC,MAAM,WAAW,KAAK,SAAS,CAAC,CAAC;IAC9E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IACxF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IAE1F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAChG,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,MAAM,WAAW,KAAK,SAAS,CAAC,CAAC;QACrE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,MAAM,WAAW,KAAK,SAAS,CAAC,CAAC;IACtE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AACxD,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,kBAAkB,CAAC,KAAgB;IAKjD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,KAAK;YACR,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QACpE,KAAK,QAAQ;YACX,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QACpE,KAAK,MAAM;YACT,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QACnE,KAAK,UAAU;YACb,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACpE,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@claudexor/policy",
+  "version": "1.0.0",
+  "license": "MIT",
+  "description": "Typed risk classifier + thin policy (path guard, require-human, deny lists). No keyword-regex governance.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@claudexor/context": "1.0.0",
+    "@claudexor/schema": "1.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/razzant/claudexor.git",
+    "directory": "packages/policy"
+  },
+  "homepage": "https://github.com/razzant/claudexor#readme",
+  "bugs": {
+    "url": "https://github.com/razzant/claudexor/issues"
+  },
+  "engines": {
+    "node": ">=20.19"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit"
+  }
+}