@highflame/policy 2.0.8 → 2.0.9

package/dist/parser.test.d.ts

@@ -1,8 +0,0 @@
-/**
- * Parser unit tests
- *
- * Tests the Cedar text → PolicyRule conversion using the official Cedar engine.
- * These tests demonstrate how a client like highflame-authz would use the parser.
- */
-export {};
-//# sourceMappingURL=parser.test.d.ts.map

package/dist/parser.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"parser.test.d.ts","sourceRoot":"","sources":["../src/parser.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/parser.test.js

@@ -1,212 +0,0 @@
-/**
- * Parser unit tests
- *
- * Tests the Cedar text → PolicyRule conversion using the official Cedar engine.
- * These tests demonstrate how a client like highflame-authz would use the parser.
- */
-import { readFileSync } from 'fs';
-import { resolve, dirname } from 'path';
-import { fileURLToPath } from 'url';
-import { describe, it, expect } from 'vitest';
-import { parseCedarToRules } from './parser.js';
-import { rulesToCedar } from './builder.js';
-const __dirname = dirname(fileURLToPath(import.meta.url));
-describe('parseCedarToRules', () => {
-    it('should parse a simple permit policy', () => {
-        const cedarText = `
-      @id("allow-read-files")
-      permit(
-        principal is User,
-        action == Action::"read_file",
-        resource is FilePath
-      );
-    `;
-        const result = parseCedarToRules(cedarText);
-        expect(result.errors).toHaveLength(0);
-        expect(result.rules).toHaveLength(1);
-        expect(result.unstructured).toHaveLength(0);
-        const rule = result.rules[0];
-        expect(rule.annotations.id).toBe('allow-read-files');
-        expect(rule.effect).toBe('permit');
-        expect(rule.principal).toEqual({ type: 'User' });
-        expect(rule.action).toBe('read_file');
-        expect(rule.resource).toEqual({ type: 'FilePath' });
-        expect(rule.enabled).toBe(true);
-    });
-    it('should parse a policy with when conditions', () => {
-        const cedarText = `
-      @id("block-high-risk")
-      forbid(
-        principal,
-        action == Action::"execute_tool",
-        resource
-      )
-      when {
-        context.threat_level == "high"
-      };
-    `;
-        const result = parseCedarToRules(cedarText);
-        expect(result.errors).toHaveLength(0);
-        expect(result.rules).toHaveLength(1);
-        const rule = result.rules[0];
-        expect(rule.annotations.id).toBe('block-high-risk');
-        expect(rule.effect).toBe('forbid');
-        expect(rule.action).toBe('execute_tool');
-        // Check condition was parsed
-        expect(rule.conditions.length).toBeGreaterThanOrEqual(0);
-        // If condition parsing works, it should have the condition
-        // If not, it should be in rawCondition
-        if (rule.conditions.length > 0) {
-            expect(rule.conditions[0].field).toBe('threat_level');
-            expect(rule.conditions[0].operator).toBe('eq');
-            expect(rule.conditions[0].value).toBe('high');
-        }
-        else {
-            expect(rule.rawCondition).toBeDefined();
-        }
-    });
-    it('should return errors for invalid Cedar syntax', () => {
-        const invalidCedar = `
-      permit(
-        principal is User
-        // missing comma and rest of policy
-    `;
-        const result = parseCedarToRules(invalidCedar);
-        expect(result.errors.length).toBeGreaterThan(0);
-    });
-    it('should handle multiple policies', () => {
-        const cedarText = `
-      @id("rule-1")
-      permit(principal, action == Action::"read", resource);
-
-      @id("rule-2")
-      forbid(principal, action == Action::"delete", resource);
-    `;
-        const result = parseCedarToRules(cedarText);
-        expect(result.errors).toHaveLength(0);
-        expect(result.rules).toHaveLength(2);
-        expect(result.rules[0].effect).toBe('permit');
-        expect(result.rules[1].effect).toBe('forbid');
-    });
-    it('should put policies with unless clauses in unstructured', () => {
-        const cedarText = `
-      permit(principal, action, resource)
-      unless {
-        context.is_blocked == true
-      };
-    `;
-        const result = parseCedarToRules(cedarText);
-        // Unless clauses can't be represented as PolicyRule
-        expect(result.rules).toHaveLength(0);
-        expect(result.unstructured.length).toBeGreaterThan(0);
-    });
-    it('should store complex conditions as Cedar text in rawCondition', () => {
-        // Use a condition with boolean AND that can't be mapped to structured format
-        const cedarText = `
-      @id("complex-condition")
-      permit(principal, action, resource)
-      when {
-        context.a == "x" && context.b == "y"
-      };
-    `;
-        const result = parseCedarToRules(cedarText);
-        expect(result.errors).toHaveLength(0);
-        expect(result.rules).toHaveLength(1);
-        const rule = result.rules[0];
-        // The complex && condition should be in rawCondition as readable Cedar text
-        if (rule.rawCondition) {
-            // Verify it's Cedar expression text (not JSON AST)
-            expect(rule.rawCondition).toContain('context.a');
-            expect(rule.rawCondition).toContain('context.b');
-            // Should not be JSON
-            expect(rule.rawCondition.startsWith('[')).toBe(false);
-        }
-        // Either conditions were mapped or rawCondition contains Cedar text
-        expect(rule.conditions.length > 0 || rule.rawCondition).toBeTruthy();
-    });
-    it('should round-trip: parse → remove rule → rebuild → re-parse → add back → verify', () => {
-        // Read shared test fixture (builder output format, sorted by @id, Overwatch namespace)
-        const fixturePath = resolve(__dirname, '../../../test-fixtures/round-trip.cedar');
-        const originalCedar = readFileSync(fixturePath, 'utf-8').trimEnd();
-        // Step 1: Parse original
-        const originalResult = parseCedarToRules(originalCedar);
-        expect(originalResult.errors).toHaveLength(0);
-        expect(originalResult.rules).toHaveLength(4);
-        // Verify we have both simple (structured) and complex (raw) conditions
-        const simpleRule = originalResult.rules.find(r => r.annotations.id === 'simple-block-threats');
-        const complexRule = originalResult.rules.find(r => r.annotations.id === 'complex-block-injection');
-        expect(simpleRule).toBeDefined();
-        expect(complexRule).toBeDefined();
-        expect(simpleRule.conditions.length).toBeGreaterThan(0);
-        expect(complexRule.rawCondition).toBeDefined();
-        // Step 2: Remove complex rule → rebuild → re-parse
-        const remaining = originalResult.rules.filter(r => r.annotations.id !== 'complex-block-injection');
-        const removedRule = complexRule;
-        expect(remaining).toHaveLength(3);
-        const partialCedar = rulesToCedar(remaining);
-        const partialResult = parseCedarToRules(partialCedar);
-        expect(partialResult.errors).toHaveLength(0);
-        expect(partialResult.rules).toHaveLength(3);
-        // Verify each remaining rule is preserved
-        for (const orig of remaining) {
-            const reparsed = partialResult.rules.find(r => r.annotations.id === orig.annotations.id);
-            expect(reparsed).toBeDefined();
-            assertRulesEquivalent(orig, reparsed);
-        }
-        // Step 3: Add back → rebuild → re-parse
-        const allRules = [...partialResult.rules, removedRule];
-        const finalCedar = rulesToCedar(allRules);
-        const finalResult = parseCedarToRules(finalCedar);
-        expect(finalResult.errors).toHaveLength(0);
-        expect(finalResult.rules).toHaveLength(4);
-        // Verify ALL rules match original
-        for (const orig of originalResult.rules) {
-            const final_ = finalResult.rules.find(r => r.annotations.id === orig.annotations.id);
-            expect(final_).toBeDefined();
-            assertRulesEquivalent(orig, final_);
-        }
-        // Step 4: Verify parse→build cycle is idempotent.
-        // The engine may normalize rawCondition text (e.g., adding parens), so we
-        // compare against canonical form (first parse→build) rather than original fixture.
-        const originalSorted = [...originalResult.rules].sort((a, b) => a.annotations.id.localeCompare(b.annotations.id));
-        originalSorted.forEach((r, i) => { r.order = i; });
-        const canonicalCedar = rulesToCedar(originalSorted);
-        const finalSorted = [...finalResult.rules].sort((a, b) => a.annotations.id.localeCompare(b.annotations.id));
-        finalSorted.forEach((r, i) => { r.order = i; });
-        const finalReconstructed = rulesToCedar(finalSorted);
-        expect(finalReconstructed).toBe(canonicalCedar);
-    });
-    it('should warn about duplicate policy IDs', () => {
-        const cedarText = `
-      @id("duplicate-id")
-      permit(principal, action, resource);
-
-      @id("unique-id")
-      forbid(principal, action, resource);
-
-      @id("duplicate-id")
-      permit(principal is User, action, resource);
-    `;
-        const result = parseCedarToRules(cedarText);
-        // All policies should still be parsed
-        expect(result.rules).toHaveLength(3);
-        // Should have a warning about duplicate ID
-        const duplicateError = result.errors.find(e => e.includes("HFP-PARSE-005"));
-        expect(duplicateError).toBeDefined();
-        expect(duplicateError).toContain("duplicate-id");
-        expect(duplicateError).toContain("[0"); // First occurrence at index 0
-        expect(duplicateError).toContain("2"); // Second occurrence at index 2
-    });
-});
-/** Assert two PolicyRules are semantically equivalent after round-trip. */
-function assertRulesEquivalent(a, b) {
-    expect(b.annotations.id).toBe(a.annotations.id);
-    expect(b.annotations.name).toBe(a.annotations.name);
-    expect(b.effect).toBe(a.effect);
-    expect(b.action).toEqual(a.action);
-    expect(b.principal).toEqual(a.principal);
-    expect(b.resource).toEqual(a.resource);
-    expect(b.conditions).toEqual(a.conditions);
-    expect(b.rawCondition).toBe(a.rawCondition);
-}
-//# sourceMappingURL=parser.test.js.map

package/dist/parser.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"parser.test.js","sourceRoot":"","sources":["../src/parser.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAG5C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,SAAS,GAAG;;;;;;;KAOjB,CAAC;QAEF,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAE5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAE5C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,SAAS,GAAG;;;;;;;;;;KAUjB,CAAC;QAEF,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAE5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAErC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAEzC,6BAA6B;QAC7B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACzD,2DAA2D;QAC3D,uCAAuC;QACvC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,YAAY,GAAG;;;;KAIpB,CAAC;QAEF,MAAM,MAAM,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAE/C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,SAAS,GAAG;;;;;;KAMjB,CAAC;QAEF,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAE5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,SAAS,GAAG;;;;;KAKjB,CAAC;QAEF,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAE5C,oDAAoD;QACpD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,6EAA6E;QAC7E,MAAM,SAAS,GAAG;;;;;;KAMjB,CAAC;QAEF,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAE5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAErC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE7B,4EAA4E;QAC5E,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,mDAAmD;YACnD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACjD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACjD,qBAAqB;YACrB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,oEAAoE;QACpE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,uFAAuF;QACvF,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,yCAAyC,CAAC,CAAC;QAClF,MAAM,aAAa,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;QAEnE,yBAAyB;QACzB,MAAM,cAAc,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACxD,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAE7C,uEAAuE;QACvE,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,sBAAsB,CAAC,CAAC;QAC/F,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,yBAAyB,CAAC,CAAC;QACnG,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,CAAC,UAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,WAAY,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QAEhD,mDAAmD;QACnD,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,yBAAyB,CAAC,CAAC;QACnG,MAAM,WAAW,GAAG,WAAY,CAAC;QACjC,MAAM,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAElC,MAAM,YAAY,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,aAAa,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAE5C,0CAA0C;QAC1C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACzF,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YAC/B,qBAAqB,CAAC,IAAI,EAAE,QAAS,CAAC,CAAC;QACzC,CAAC;QAED,wCAAwC;QACxC,MAAM,QAAQ,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAE1C,kCAAkC;QAClC,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACrF,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YAC7B,qBAAqB,CAAC,IAAI,EAAE,MAAO,CAAC,CAAC;QACvC,CAAC;QAED,kDAAkD;QAClD,0EAA0E;QAC1E,mFAAmF;QACnF,MAAM,cAAc,GAAG,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAClH,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,cAAc,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;QAEpD,MAAM,WAAW,GAAG,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5G,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,kBAAkB,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,SAAS,GAAG;;;;;;;;;KASjB,CAAC;QAEF,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAE5C,sCAAsC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAErC,2CAA2C;QAC3C,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACjD,MAAM,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAE,8BAA8B;QACvE,MAAM,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAG,+BAA+B;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,2EAA2E;AAC3E,SAAS,qBAAqB,CAAC,CAAa,EAAE,CAAa;IACzD,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAChD,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;AAC9C,CAAC"}

package/dist/schema.gen.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema.gen.d.ts","sourceRoot":"","sources":["../src/schema.gen.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,eAAO,MAAM,YAAY,y/EA8HxB,CAAC"}

package/dist/schema.gen.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema.gen.js","sourceRoot":"","sources":["../src/schema.gen.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,uCAAuC;AAEvC;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8H3B,CAAC"}

package/dist/schemas.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAaH,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,YAAY,EAAE,mBAAmB,IAAI,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACjG,YAAY,EAAE,kBAAkB,IAAI,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAE9F;;;;;;;GAOG;AACH,eAAO,MAAM,gBAAgB,QAG5B,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,QAG7B,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,QAG3B,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,QAG5B,CAAC"}

package/dist/schemas.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAE3C,mDAAmD;AACnD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AAE3D,0CAA0C;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAI/D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAC7C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,oBAAoB,CAAC,EACzD,OAAO,CACR,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC,YAAY,CAC9C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,cAAc,CAAC,EACnD,OAAO,CACR,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC,YAAY,CAC5C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,oBAAoB,CAAC,EACxD,OAAO,CACR,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAC7C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC,EAClD,OAAO,CACR,CAAC"}

package/dist/schemas.test.d.ts

@@ -1,8 +0,0 @@
-/**
- * Schema validation tests
- *
- * Tests service-specific schema loading and policy validation
- * using Overwatch (Guardian) and Palisade schemas.
- */
-export {};
-//# sourceMappingURL=schemas.test.d.ts.map

package/dist/schemas.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemas.test.d.ts","sourceRoot":"","sources":["../src/schemas.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}