@dotsetlabs/tollgate 0.1.0

package/dist/templates.js

@@ -0,0 +1,451 @@
+/**
+ * Server Templates Library for Tollgate
+ *
+ * Extended collection of MCP server templates for quick configuration.
+ * These templates provide recommended policies for popular MCP servers.
+ *
+ * Usage via CLI:
+ *   tollgate templates list              # List all available templates
+ *   tollgate templates show <name>       # Show template details
+ *   tollgate templates apply <name>      # Add template to tollgate.yaml
+ *
+ * @module templates
+ */
+/**
+ * Complete template library.
+ */
+export const TEMPLATE_LIBRARY = [
+    // ---------------------------------------------------------------------------
+    // Database Templates
+    // ---------------------------------------------------------------------------
+    {
+        name: 'postgres',
+        displayName: 'PostgreSQL',
+        description: 'PostgreSQL database access via SQL queries',
+        command: 'npx',
+        args: ['-y', '@modelcontextprotocol/server-postgres'],
+        envVars: [
+            {
+                key: 'DATABASE_URL',
+                description: 'PostgreSQL connection string',
+                example: 'postgresql://user:pass@localhost/dbname',
+            },
+        ],
+        recommendedPolicies: {
+            read: ['query'],
+            write: ['execute'],
+            destructive: [],
+        },
+        analyzer: 'sql',
+        category: 'database',
+        tags: ['database', 'sql', 'postgres', 'postgresql'],
+        docsUrl: 'https://github.com/modelcontextprotocol/servers/tree/main/src/postgres',
+        verified: true,
+    },
+    {
+        name: 'sqlite',
+        displayName: 'SQLite',
+        description: 'SQLite database access for local databases',
+        command: 'npx',
+        args: ['-y', '@modelcontextprotocol/server-sqlite'],
+        envVars: [
+            {
+                key: 'SQLITE_PATH',
+                description: 'Path to SQLite database file',
+                example: './database.db',
+            },
+        ],
+        recommendedPolicies: {
+            read: ['query', 'list_tables', 'describe_table'],
+            write: ['execute'],
+            destructive: [],
+        },
+        analyzer: 'sql',
+        category: 'database',
+        tags: ['database', 'sql', 'sqlite', 'local'],
+        docsUrl: 'https://github.com/modelcontextprotocol/servers/tree/main/src/sqlite',
+        verified: true,
+    },
+    // ---------------------------------------------------------------------------
+    // Filesystem Templates
+    // ---------------------------------------------------------------------------
+    {
+        name: 'filesystem',
+        displayName: 'Filesystem',
+        description: 'Local filesystem access (read/write files)',
+        command: 'npx',
+        args: ['-y', '@anthropic/mcp-server-filesystem'],
+        recommendedPolicies: {
+            read: ['read_file', 'read_multiple_files', 'list_directory', 'get_file_info', 'search_files'],
+            write: ['write_file', 'create_directory', 'move_file'],
+            destructive: ['delete_file'],
+        },
+        analyzer: 'filesystem',
+        category: 'filesystem',
+        tags: ['filesystem', 'files', 'local', 'disk'],
+        docsUrl: 'https://github.com/anthropics/anthropic-cookbook/tree/main/mcp/servers/filesystem',
+        verified: true,
+    },
+    {
+        name: 'google-drive',
+        displayName: 'Google Drive',
+        description: 'Access and manage Google Drive files',
+        command: 'npx',
+        args: ['-y', '@anthropic/mcp-server-google-drive'],
+        envVars: [
+            {
+                key: 'GOOGLE_APPLICATION_CREDENTIALS',
+                description: 'Path to Google service account JSON',
+                example: './service-account.json',
+            },
+        ],
+        recommendedPolicies: {
+            read: ['list_files', 'get_file', 'search', 'get_*'],
+            write: ['create_file', 'update_file', 'upload', 'move_*'],
+            destructive: ['delete_file', 'trash_*'],
+        },
+        category: 'filesystem',
+        tags: ['cloud', 'storage', 'google', 'drive', 'files'],
+        docsUrl: 'https://github.com/anthropics/anthropic-cookbook/tree/main/mcp/servers/google-drive',
+        verified: true,
+    },
+    // ---------------------------------------------------------------------------
+    // Web & Browser Templates
+    // ---------------------------------------------------------------------------
+    {
+        name: 'puppeteer',
+        displayName: 'Puppeteer (Web Browser)',
+        description: 'Web browsing and scraping via headless Chrome',
+        command: 'npx',
+        args: ['-y', '@anthropic/mcp-server-puppeteer'],
+        recommendedPolicies: {
+            read: ['screenshot', 'get_page_content', 'evaluate', 'get_*'],
+            write: ['navigate', 'click', 'type', 'fill', 'select', 'scroll'],
+            destructive: [],
+        },
+        analyzer: 'http',
+        category: 'web',
+        tags: ['browser', 'web', 'scraping', 'automation', 'chrome', 'puppeteer'],
+        docsUrl: 'https://github.com/anthropics/anthropic-cookbook/tree/main/mcp/servers/puppeteer',
+        verified: true,
+    },
+    {
+        name: 'fetch',
+        displayName: 'Fetch (HTTP Requests)',
+        description: 'Make HTTP requests to external APIs',
+        command: 'npx',
+        args: ['-y', '@anthropic/mcp-server-fetch'],
+        recommendedPolicies: {
+            read: ['fetch'],
+            write: [],
+            destructive: [],
+        },
+        analyzer: 'http',
+        category: 'web',
+        tags: ['http', 'api', 'fetch', 'requests', 'web'],
+        docsUrl: 'https://github.com/anthropics/anthropic-cookbook/tree/main/mcp/servers/fetch',
+        verified: true,
+    },
+    {
+        name: 'brave-search',
+        displayName: 'Brave Search',
+        description: 'Web search using Brave Search API',
+        command: 'npx',
+        args: ['-y', '@anthropic/mcp-server-brave-search'],
+        envVars: [
+            {
+                key: 'BRAVE_API_KEY',
+                description: 'Brave Search API key',
+                example: 'BSA_xxxxxxxxxxxxxxxxxxxxxxxx',
+            },
+        ],
+        recommendedPolicies: {
+            read: ['search', 'web_search', 'local_search'],
+            write: [],
+            destructive: [],
+        },
+        category: 'web',
+        tags: ['search', 'web', 'brave', 'internet'],
+        docsUrl: 'https://github.com/anthropics/anthropic-cookbook/tree/main/mcp/servers/brave-search',
+        verified: true,
+    },
+    // ---------------------------------------------------------------------------
+    // Productivity Templates
+    // ---------------------------------------------------------------------------
+    {
+        name: 'slack',
+        displayName: 'Slack',
+        description: 'Interact with Slack workspaces',
+        command: 'npx',
+        args: ['-y', '@anthropic/mcp-server-slack'],
+        envVars: [
+            {
+                key: 'SLACK_BOT_TOKEN',
+                description: 'Slack Bot User OAuth Token',
+                example: 'xoxb-xxxxxxxxxxxx-xxxxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxxxxx',
+            },
+        ],
+        recommendedPolicies: {
+            read: ['list_channels', 'get_channel_history', 'search_*', 'get_*'],
+            write: ['post_message', 'reply_*', 'update_*'],
+            destructive: ['delete_message'],
+        },
+        category: 'communication',
+        tags: ['slack', 'chat', 'messaging', 'team', 'communication'],
+        docsUrl: 'https://github.com/anthropics/anthropic-cookbook/tree/main/mcp/servers/slack',
+        verified: true,
+    },
+    {
+        name: 'notion',
+        displayName: 'Notion',
+        description: 'Access and manage Notion workspaces',
+        command: 'npx',
+        args: ['-y', '@modelcontextprotocol/server-notion'],
+        envVars: [
+            {
+                key: 'NOTION_API_KEY',
+                description: 'Notion integration token',
+                example: 'secret_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
+            },
+        ],
+        recommendedPolicies: {
+            read: ['search', 'get_page', 'get_database', 'query_database', 'get_*', 'list_*'],
+            write: ['create_page', 'update_page', 'append_*', 'create_*'],
+            destructive: ['delete_page', 'archive_*'],
+        },
+        category: 'productivity',
+        tags: ['notion', 'notes', 'wiki', 'database', 'productivity'],
+        docsUrl: 'https://github.com/modelcontextprotocol/servers/tree/main/src/notion',
+        verified: true,
+    },
+    {
+        name: 'memory',
+        displayName: 'Memory',
+        description: 'Persistent memory and knowledge storage',
+        command: 'npx',
+        args: ['-y', '@modelcontextprotocol/server-memory'],
+        recommendedPolicies: {
+            read: ['retrieve', 'search', 'get_*', 'list_*'],
+            write: ['store', 'update', 'create_*'],
+            destructive: ['delete', 'clear'],
+        },
+        category: 'ai',
+        tags: ['memory', 'storage', 'knowledge', 'persistent', 'ai'],
+        docsUrl: 'https://github.com/modelcontextprotocol/servers/tree/main/src/memory',
+        verified: true,
+    },
+    // ---------------------------------------------------------------------------
+    // Developer Templates
+    // ---------------------------------------------------------------------------
+    {
+        name: 'github',
+        displayName: 'GitHub',
+        description: 'GitHub repository operations',
+        command: 'npx',
+        args: ['-y', '@modelcontextprotocol/server-github'],
+        envVars: [
+            {
+                key: 'GITHUB_TOKEN',
+                description: 'GitHub personal access token',
+                example: 'ghp_xxxxxxxxxxxx',
+            },
+        ],
+        recommendedPolicies: {
+            read: ['get_file_contents', 'list_commits', 'search_*', 'get_*', 'list_*'],
+            write: ['create_issue', 'create_pull_request', 'push_files', 'create_*', 'update_*'],
+            destructive: ['delete_*'],
+        },
+        category: 'developer',
+        tags: ['github', 'git', 'vcs', 'code', 'repository'],
+        docsUrl: 'https://github.com/modelcontextprotocol/servers/tree/main/src/github',
+        verified: true,
+    },
+    {
+        name: 'gitlab',
+        displayName: 'GitLab',
+        description: 'GitLab repository and CI/CD operations',
+        command: 'npx',
+        args: ['-y', '@modelcontextprotocol/server-gitlab'],
+        envVars: [
+            {
+                key: 'GITLAB_TOKEN',
+                description: 'GitLab personal access token',
+                example: 'glpat-xxxxxxxxxxxxxxxxxxxx',
+            },
+            {
+                key: 'GITLAB_URL',
+                description: 'GitLab instance URL (optional)',
+                example: 'https://gitlab.com',
+            },
+        ],
+        recommendedPolicies: {
+            read: ['get_file', 'list_projects', 'search_*', 'get_*', 'list_*'],
+            write: ['create_issue', 'create_merge_request', 'push_*', 'create_*', 'update_*'],
+            destructive: ['delete_*'],
+        },
+        category: 'developer',
+        tags: ['gitlab', 'git', 'vcs', 'code', 'cicd'],
+        docsUrl: 'https://github.com/modelcontextprotocol/servers/tree/main/src/gitlab',
+        verified: true,
+    },
+    {
+        name: 'sentry',
+        displayName: 'Sentry',
+        description: 'Monitor and debug application errors',
+        command: 'npx',
+        args: ['-y', '@modelcontextprotocol/server-sentry'],
+        envVars: [
+            {
+                key: 'SENTRY_AUTH_TOKEN',
+                description: 'Sentry authentication token',
+                example: 'sntrys_xxxxxxxxxxxxxxxxxxxx',
+            },
+            {
+                key: 'SENTRY_ORG',
+                description: 'Sentry organization slug',
+                example: 'my-org',
+            },
+        ],
+        recommendedPolicies: {
+            read: ['list_issues', 'get_issue', 'search_*', 'get_*', 'list_*'],
+            write: ['resolve_issue', 'assign_issue', 'update_*'],
+            destructive: ['delete_*'],
+        },
+        category: 'developer',
+        tags: ['sentry', 'errors', 'monitoring', 'debugging', 'observability'],
+        docsUrl: 'https://github.com/modelcontextprotocol/servers/tree/main/src/sentry',
+        verified: true,
+    },
+];
+// ============================================================================
+// Template Utilities
+// ============================================================================
+/**
+ * Get all templates.
+ */
+export function getAllTemplates() {
+    return TEMPLATE_LIBRARY;
+}
+/**
+ * Get templates by category.
+ */
+export function getTemplatesByCategory(category) {
+    return TEMPLATE_LIBRARY.filter((t) => t.category === category);
+}
+/**
+ * Get template by name.
+ */
+export function getTemplateByName(name) {
+    return TEMPLATE_LIBRARY.find((t) => t.name.toLowerCase() === name.toLowerCase());
+}
+/**
+ * Search templates by keyword.
+ */
+export function searchTemplates(query) {
+    const lowerQuery = query.toLowerCase();
+    return TEMPLATE_LIBRARY.filter((t) => t.name.toLowerCase().includes(lowerQuery) ||
+        t.displayName.toLowerCase().includes(lowerQuery) ||
+        t.description.toLowerCase().includes(lowerQuery) ||
+        t.tags.some((tag) => tag.includes(lowerQuery)));
+}
+/**
+ * Get unique categories.
+ */
+export function getCategories() {
+    return [...new Set(TEMPLATE_LIBRARY.map((t) => t.category))];
+}
+/**
+ * Generate YAML configuration for a template.
+ */
+export function generateTemplateYaml(template, policyPreset = 'balanced') {
+    const lines = [];
+    // Policy mappings
+    const presets = {
+        strict: { read: 'prompt', write: 'deny', destructive: 'deny' },
+        balanced: { read: 'allow', write: 'prompt', destructive: 'deny' },
+        permissive: { read: 'allow', write: 'prompt', destructive: 'prompt' },
+    };
+    const preset = presets[policyPreset];
+    lines.push(`  # ${template.displayName}`);
+    lines.push(`  # ${template.description}`);
+    lines.push(`  ${template.name}:`);
+    lines.push(`    command: "${template.command}"`);
+    if (template.args.length > 0) {
+        lines.push(`    args: [${template.args.map((a) => `"${a}"`).join(', ')}]`);
+    }
+    // Environment variables
+    if (template.envVars && template.envVars.length > 0) {
+        lines.push('    env:');
+        for (const env of template.envVars) {
+            lines.push(`      ${env.key}: "\${${env.key}}"  # ${env.description}`);
+        }
+    }
+    // Analyzer if applicable
+    if (template.analyzer) {
+        lines.push('    defaults:');
+        lines.push(`      analyzer: ${template.analyzer}`);
+    }
+    // Tool policies
+    lines.push('    tools:');
+    // Read operations
+    if (template.recommendedPolicies.read && template.recommendedPolicies.read.length > 0) {
+        lines.push('      # Read operations');
+        for (const pattern of template.recommendedPolicies.read) {
+            lines.push(`      "${pattern}":`);
+            lines.push(`        action: ${preset.read}`);
+        }
+    }
+    // Write operations
+    if (template.recommendedPolicies.write && template.recommendedPolicies.write.length > 0) {
+        lines.push('      # Write operations');
+        for (const pattern of template.recommendedPolicies.write) {
+            lines.push(`      "${pattern}":`);
+            lines.push(`        action: ${preset.write}`);
+        }
+    }
+    // Destructive operations
+    if (template.recommendedPolicies.destructive && template.recommendedPolicies.destructive.length > 0) {
+        lines.push('      # Destructive operations');
+        for (const pattern of template.recommendedPolicies.destructive) {
+            lines.push(`      "${pattern}":`);
+            lines.push(`        action: ${preset.destructive}`);
+            if (preset.destructive === 'deny') {
+                lines.push('        reason: "Destructive operations are disabled for safety"');
+            }
+        }
+    }
+    // Catch-all
+    lines.push('      # Catch-all for unmatched tools');
+    lines.push('      "*":');
+    lines.push('        action: prompt');
+    return lines.join('\n');
+}
+/**
+ * Generate full config file from multiple templates.
+ */
+export function generateFullConfig(templateNames, policyPreset = 'balanced') {
+    const lines = [
+        '# Tollgate Configuration',
+        '# Generated by `tollgate templates apply`',
+        '# https://github.com/dotsetlabs/tollgate',
+        '',
+        'version: "1"',
+        '',
+        '# Default action when no policy matches',
+        'defaults:',
+        '  action: prompt',
+        '  timeout: 60000',
+        '',
+        '# MCP Server configurations',
+        'servers:',
+    ];
+    for (const name of templateNames) {
+        const template = getTemplateByName(name);
+        if (template) {
+            lines.push(generateTemplateYaml(template, policyPreset));
+            lines.push('');
+        }
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=templates.js.map

package/dist/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../src/templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAkCH;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAuB;IAChD,8EAA8E;IAC9E,qBAAqB;IACrB,8EAA8E;IAC9E;QACI,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,4CAA4C;QACzD,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,uCAAuC,CAAC;QACrD,OAAO,EAAE;YACL;gBACI,GAAG,EAAE,cAAc;gBACnB,WAAW,EAAE,8BAA8B;gBAC3C,OAAO,EAAE,yCAAyC;aACrD;SACJ;QACD,mBAAmB,EAAE;YACjB,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,KAAK,EAAE,CAAC,SAAS,CAAC;YAClB,WAAW,EAAE,EAAE;SAClB;QACD,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC;QACnD,OAAO,EAAE,wEAAwE;QACjF,QAAQ,EAAE,IAAI;KACjB;IACD;QACI,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,4CAA4C;QACzD,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,qCAAqC,CAAC;QACnD,OAAO,EAAE;YACL;gBACI,GAAG,EAAE,aAAa;gBAClB,WAAW,EAAE,8BAA8B;gBAC3C,OAAO,EAAE,eAAe;aAC3B;SACJ;QACD,mBAAmB,EAAE;YACjB,IAAI,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,gBAAgB,CAAC;YAChD,KAAK,EAAE,CAAC,SAAS,CAAC;YAClB,WAAW,EAAE,EAAE;SAClB;QACD,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;QAC5C,OAAO,EAAE,sEAAsE;QAC/E,QAAQ,EAAE,IAAI;KACjB;IAED,8EAA8E;IAC9E,uBAAuB;IACvB,8EAA8E;IAC9E;QACI,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,4CAA4C;QACzD,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,kCAAkC,CAAC;QAChD,mBAAmB,EAAE;YACjB,IAAI,EAAE,CAAC,WAAW,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,CAAC;YAC7F,KAAK,EAAE,CAAC,YAAY,EAAE,kBAAkB,EAAE,WAAW,CAAC;YACtD,WAAW,EAAE,CAAC,aAAa,CAAC;SAC/B;QACD,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE,YAAY;QACtB,IAAI,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC;QAC9C,OAAO,EAAE,mFAAmF;QAC5F,QAAQ,EAAE,IAAI;KACjB;IACD;QACI,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,oCAAoC,CAAC;QAClD,OAAO,EAAE;YACL;gBACI,GAAG,EAAE,gCAAgC;gBACrC,WAAW,EAAE,qCAAqC;gBAClD,OAAO,EAAE,wBAAwB;aACpC;SACJ;QACD,mBAAmB,EAAE;YACjB,IAAI,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC;YACnD,KAAK,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC;YACzD,WAAW,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC;SAC1C;QACD,QAAQ,EAAE,YAAY;QACtB,IAAI,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;QACtD,OAAO,EAAE,qFAAqF;QAC9F,QAAQ,EAAE,IAAI;KACjB;IAED,8EAA8E;IAC9E,0BAA0B;IAC1B,8EAA8E;IAC9E;QACI,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,yBAAyB;QACtC,WAAW,EAAE,+CAA+C;QAC5D,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,iCAAiC,CAAC;QAC/C,mBAAmB,EAAE;YACjB,IAAI,EAAE,CAAC,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,OAAO,CAAC;YAC7D,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;YAChE,WAAW,EAAE,EAAE;SAClB;QACD,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC;QACzE,OAAO,EAAE,kFAAkF;QAC3F,QAAQ,EAAE,IAAI;KACjB;IACD;QACI,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,uBAAuB;QACpC,WAAW,EAAE,qCAAqC;QAClD,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,6BAA6B,CAAC;QAC3C,mBAAmB,EAAE;YACjB,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,KAAK,EAAE,EAAE;YACT,WAAW,EAAE,EAAE;SAClB;QACD,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC;QACjD,OAAO,EAAE,8EAA8E;QACvF,QAAQ,EAAE,IAAI;KACjB;IACD;QACI,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,mCAAmC;QAChD,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,oCAAoC,CAAC;QAClD,OAAO,EAAE;YACL;gBACI,GAAG,EAAE,eAAe;gBACpB,WAAW,EAAE,sBAAsB;gBACnC,OAAO,EAAE,8BAA8B;aAC1C;SACJ;QACD,mBAAmB,EAAE;YACjB,IAAI,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,cAAc,CAAC;YAC9C,KAAK,EAAE,EAAE;YACT,WAAW,EAAE,EAAE;SAClB;QACD,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC;QAC5C,OAAO,EAAE,qFAAqF;QAC9F,QAAQ,EAAE,IAAI;KACjB;IAED,8EAA8E;IAC9E,yBAAyB;IACzB,8EAA8E;IAC9E;QACI,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,gCAAgC;QAC7C,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,6BAA6B,CAAC;QAC3C,OAAO,EAAE;YACL;gBACI,GAAG,EAAE,iBAAiB;gBACtB,WAAW,EAAE,4BAA4B;gBACzC,OAAO,EAAE,yDAAyD;aACrE;SACJ;QACD,mBAAmB,EAAE;YACjB,IAAI,EAAE,CAAC,eAAe,EAAE,qBAAqB,EAAE,UAAU,EAAE,OAAO,CAAC;YACnE,KAAK,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,UAAU,CAAC;YAC9C,WAAW,EAAE,CAAC,gBAAgB,CAAC;SAClC;QACD,QAAQ,EAAE,eAAe;QACzB,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,CAAC;QAC7D,OAAO,EAAE,8EAA8E;QACvF,QAAQ,EAAE,IAAI;KACjB;IACD;QACI,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,qCAAqC;QAClD,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,qCAAqC,CAAC;QACnD,OAAO,EAAE;YACL;gBACI,GAAG,EAAE,gBAAgB;gBACrB,WAAW,EAAE,0BAA0B;gBACvC,OAAO,EAAE,iDAAiD;aAC7D;SACJ;QACD,mBAAmB,EAAE;YACjB,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,CAAC;YACjF,KAAK,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,CAAC;YAC7D,WAAW,EAAE,CAAC,aAAa,EAAE,WAAW,CAAC;SAC5C;QACD,QAAQ,EAAE,cAAc;QACxB,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC;QAC7D,OAAO,EAAE,sEAAsE;QAC/E,QAAQ,EAAE,IAAI;KACjB;IACD;QACI,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,qCAAqC,CAAC;QACnD,mBAAmB,EAAE;YACjB,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;YAC/C,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC;YACtC,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;SACnC;QACD,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC;QAC5D,OAAO,EAAE,sEAAsE;QAC/E,QAAQ,EAAE,IAAI;KACjB;IAED,8EAA8E;IAC9E,sBAAsB;IACtB,8EAA8E;IAC9E;QACI,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,8BAA8B;QAC3C,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,qCAAqC,CAAC;QACnD,OAAO,EAAE;YACL;gBACI,GAAG,EAAE,cAAc;gBACnB,WAAW,EAAE,8BAA8B;gBAC3C,OAAO,EAAE,kBAAkB;aAC9B;SACJ;QACD,mBAAmB,EAAE;YACjB,IAAI,EAAE,CAAC,mBAAmB,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC;YAC1E,KAAK,EAAE,CAAC,cAAc,EAAE,qBAAqB,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,CAAC;YACpF,WAAW,EAAE,CAAC,UAAU,CAAC;SAC5B;QACD,QAAQ,EAAE,WAAW;QACrB,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC;QACpD,OAAO,EAAE,sEAAsE;QAC/E,QAAQ,EAAE,IAAI;KACjB;IACD;QACI,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,wCAAwC;QACrD,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,qCAAqC,CAAC;QACnD,OAAO,EAAE;YACL;gBACI,GAAG,EAAE,cAAc;gBACnB,WAAW,EAAE,8BAA8B;gBAC3C,OAAO,EAAE,4BAA4B;aACxC;YACD;gBACI,GAAG,EAAE,YAAY;gBACjB,WAAW,EAAE,gCAAgC;gBAC7C,OAAO,EAAE,oBAAoB;aAChC;SACJ;QACD,mBAAmB,EAAE;YACjB,IAAI,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC;YAClE,KAAK,EAAE,CAAC,cAAc,EAAE,sBAAsB,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC;YACjF,WAAW,EAAE,CAAC,UAAU,CAAC;SAC5B;QACD,QAAQ,EAAE,WAAW;QACrB,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;QAC9C,OAAO,EAAE,sEAAsE;QAC/E,QAAQ,EAAE,IAAI;KACjB;IACD;QACI,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,qCAAqC,CAAC;QACnD,OAAO,EAAE;YACL;gBACI,GAAG,EAAE,mBAAmB;gBACxB,WAAW,EAAE,6BAA6B;gBAC1C,OAAO,EAAE,6BAA6B;aACzC;YACD;gBACI,GAAG,EAAE,YAAY;gBACjB,WAAW,EAAE,0BAA0B;gBACvC,OAAO,EAAE,QAAQ;aACpB;SACJ;QACD,mBAAmB,EAAE;YACjB,IAAI,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC;YACjE,KAAK,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,UAAU,CAAC;YACpD,WAAW,EAAE,CAAC,UAAU,CAAC;SAC5B;QACD,QAAQ,EAAE,WAAW;QACrB,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,CAAC;QACtE,OAAO,EAAE,sEAAsE;QAC/E,QAAQ,EAAE,IAAI;KACjB;CACJ,CAAC;AAEF,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,eAAe;IAC3B,OAAO,gBAAgB,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAA0B;IAC7D,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC1C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AACrF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IACzC,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO,gBAAgB,CAAC,MAAM,CAC1B,CAAC,CAAC,EAAE,EAAE,CACF,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;QACzC,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;QAChD,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CACrD,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IACzB,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAChC,QAA0B,EAC1B,eAAqD,UAAU;IAE/D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,kBAAkB;IAClB,MAAM,OAAO,GAAG;QACZ,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE;QAC9D,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE;QACjE,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE;KACxE,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAErC,KAAK,CAAC,IAAI,CAAC,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,iBAAiB,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC;IAEjD,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,cAAc,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;IAED,wBAAwB;IACxB,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,GAAG,SAAS,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3E,CAAC;IACL,CAAC;IAED,yBAAyB;IACzB,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,gBAAgB;IAChB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAEzB,kBAAkB;IAClB,IAAI,QAAQ,CAAC,mBAAmB,CAAC,IAAI,IAAI,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpF,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,IAAI,CAAC,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;IACL,CAAC;IAED,mBAAmB;IACnB,IAAI,QAAQ,CAAC,mBAAmB,CAAC,KAAK,IAAI,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtF,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACvC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,IAAI,CAAC,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAClD,CAAC;IACL,CAAC;IAED,yBAAyB;IACzB,IAAI,QAAQ,CAAC,mBAAmB,CAAC,WAAW,IAAI,QAAQ,CAAC,mBAAmB,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClG,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC7C,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,mBAAmB,CAAC,WAAW,EAAE,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,IAAI,CAAC,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;YACnF,CAAC;QACL,CAAC;IACL,CAAC;IAED,YAAY;IACZ,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAErC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAC9B,aAAuB,EACvB,eAAqD,UAAU;IAE/D,MAAM,KAAK,GAAa;QACpB,0BAA0B;QAC1B,2CAA2C;QAC3C,0CAA0C;QAC1C,EAAE;QACF,cAAc;QACd,EAAE;QACF,yCAAyC;QACzC,WAAW;QACX,kBAAkB;QAClB,kBAAkB;QAClB,EAAE;QACF,6BAA6B;QAC7B,UAAU;KACb,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/utils/config.d.ts

@@ -0,0 +1,57 @@
+import type { TollgateConfig } from '../policy/types.js';
+/**
+ * Loads and parses the Tollgate configuration file.
+ *
+ * Searches for configuration in the following order:
+ * 1. Explicitly provided path
+ * 2. ./tollgate.yaml
+ * 3. ./tollgate.yml
+ * 4. ~/.config/tollgate/config.yaml
+ * 5. ~/.tollgate.yaml
+ *
+ * @param configPath - Optional explicit path to the configuration file
+ * @returns The parsed Tollgate configuration
+ * @throws {ConfigError} If no configuration file is found or parsing fails
+ *
+ * @example
+ * ```typescript
+ * const config = await loadConfig('./my-config.yaml');
+ * ```
+ */
+export declare function loadConfig(configPath?: string): Promise<TollgateConfig>;
+/**
+ * Expands environment variable placeholders in a string.
+ *
+ * Replaces `${VAR_NAME}` patterns with the corresponding environment
+ * variable value. Undefined variables are replaced with an empty string.
+ *
+ * @param value - The string containing environment variable placeholders
+ * @returns The string with all placeholders expanded
+ *
+ * @example
+ * ```typescript
+ * // With HOME=/Users/alice
+ * expandEnvVars('${HOME}/.config') // Returns '/Users/alice/.config'
+ *
+ * // Undefined variables become empty
+ * expandEnvVars('${UNDEFINED_VAR}') // Returns ''
+ * ```
+ */
+export declare function expandEnvVars(value: string): string;
+/**
+ * Returns the Tollgate data directory path.
+ *
+ * The data directory is used for storing:
+ * - Audit logs (SQLite database)
+ * - Session data (when persistent sessions are enabled)
+ * - Other runtime data
+ *
+ * @returns The path to the Tollgate data directory (`~/.tollgate`)
+ *
+ * @example
+ * ```typescript
+ * const dataDir = getDataDir(); // Returns '/Users/alice/.tollgate'
+ * ```
+ */
+export declare function getDataDir(): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/utils/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AASzD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CA0B7E;AAWD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAInD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAGnC"}

package/dist/utils/config.js

@@ -0,0 +1,104 @@
+import { existsSync } from 'node:fs';
+import { readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { load as loadYaml } from 'js-yaml';
+import { ConfigError } from './errors.js';
+const DEFAULT_CONFIG_PATHS = [
+    './tollgate.yaml',
+    './tollgate.yml',
+    join(homedir(), '.config', 'tollgate', 'config.yaml'),
+    join(homedir(), '.tollgate.yaml'),
+];
+/**
+ * Loads and parses the Tollgate configuration file.
+ *
+ * Searches for configuration in the following order:
+ * 1. Explicitly provided path
+ * 2. ./tollgate.yaml
+ * 3. ./tollgate.yml
+ * 4. ~/.config/tollgate/config.yaml
+ * 5. ~/.tollgate.yaml
+ *
+ * @param configPath - Optional explicit path to the configuration file
+ * @returns The parsed Tollgate configuration
+ * @throws {ConfigError} If no configuration file is found or parsing fails
+ *
+ * @example
+ * ```typescript
+ * const config = await loadConfig('./my-config.yaml');
+ * ```
+ */
+export async function loadConfig(configPath) {
+    const path = configPath ?? findConfigFile();
+    if (!path) {
+        throw new ConfigError('No configuration file found. Create tollgate.yaml or specify --config', { searchedPaths: DEFAULT_CONFIG_PATHS });
+    }
+    try {
+        const content = await readFile(path, 'utf-8');
+        const config = loadYaml(content);
+        if (!config || typeof config !== 'object') {
+            throw new ConfigError('Invalid configuration: must be a YAML object');
+        }
+        return config;
+    }
+    catch (error) {
+        if (error instanceof ConfigError)
+            throw error;
+        throw new ConfigError(`Failed to load config from ${path}`, {
+            path,
+            error: error instanceof Error ? error.message : String(error),
+        });
+    }
+}
+function findConfigFile() {
+    for (const path of DEFAULT_CONFIG_PATHS) {
+        if (existsSync(path)) {
+            return path;
+        }
+    }
+    return undefined;
+}
+/**
+ * Expands environment variable placeholders in a string.
+ *
+ * Replaces `${VAR_NAME}` patterns with the corresponding environment
+ * variable value. Undefined variables are replaced with an empty string.
+ *
+ * @param value - The string containing environment variable placeholders
+ * @returns The string with all placeholders expanded
+ *
+ * @example
+ * ```typescript
+ * // With HOME=/Users/alice
+ * expandEnvVars('${HOME}/.config') // Returns '/Users/alice/.config'
+ *
+ * // Undefined variables become empty
+ * expandEnvVars('${UNDEFINED_VAR}') // Returns ''
+ * ```
+ */
+export function expandEnvVars(value) {
+    return value.replace(/\$\{(\w+)\}/g, (_, name) => {
+        return process.env[name] ?? '';
+    });
+}
+/**
+ * Returns the Tollgate data directory path.
+ *
+ * The data directory is used for storing:
+ * - Audit logs (SQLite database)
+ * - Session data (when persistent sessions are enabled)
+ * - Other runtime data
+ *
+ * @returns The path to the Tollgate data directory (`~/.tollgate`)
+ *
+ * @example
+ * ```typescript
+ * const dataDir = getDataDir(); // Returns '/Users/alice/.tollgate'
+ * ```
+ */
+export function getDataDir() {
+    const dir = join(homedir(), '.tollgate');
+    return dir;
+}
+//# sourceMappingURL=config.js.map

package/dist/utils/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,MAAM,oBAAoB,GAAG;IAC3B,iBAAiB;IACjB,gBAAgB;IAChB,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC;CAClC,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAmB;IAClD,MAAM,IAAI,GAAG,UAAU,IAAI,cAAc,EAAE,CAAC;IAE5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,WAAW,CACnB,uEAAuE,EACvE,EAAE,aAAa,EAAE,oBAAoB,EAAE,CACxC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAmB,CAAC;QAEnD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,WAAW,CAAC,8CAA8C,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,MAAM,IAAI,WAAW,CAAC,8BAA8B,IAAI,EAAE,EAAE;YAC1D,IAAI;YACJ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;QACxC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE;QACvD,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/utils/errors.d.ts

@@ -0,0 +1,18 @@
+export declare class TollgateError extends Error {
+    code: string;
+    details?: Record<string, unknown> | undefined;
+    constructor(message: string, code: string, details?: Record<string, unknown> | undefined);
+}
+export declare class PolicyError extends TollgateError {
+    constructor(message: string, details?: Record<string, unknown>);
+}
+export declare class ConfigError extends TollgateError {
+    constructor(message: string, details?: Record<string, unknown>);
+}
+export declare class ProxyError extends TollgateError {
+    constructor(message: string, details?: Record<string, unknown>);
+}
+export declare class UpstreamError extends TollgateError {
+    constructor(message: string, details?: Record<string, unknown>);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/utils/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,aAAc,SAAQ,KAAK;IAG7B,IAAI,EAAE,MAAM;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFxC,OAAO,EAAE,MAAM,EACR,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAK3C;AAED,qBAAa,WAAY,SAAQ,aAAa;gBAChC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED,qBAAa,WAAY,SAAQ,aAAa;gBAChC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED,qBAAa,UAAW,SAAQ,aAAa;gBAC/B,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED,qBAAa,aAAc,SAAQ,aAAa;gBAClC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D"}