@plumbus/core 0.1.0

package/dist/governance/rules/ai.js

@@ -0,0 +1,88 @@
+// ── Built-in AI Governance Rules ──
+import { GovernanceSeverity } from '../../types/enums.js';
+/** Prompts without output validation schemas */
+export const rulePromptMissingOutputSchema = {
+    id: 'ai.prompt-missing-output-schema',
+    category: 'ai',
+    severity: GovernanceSeverity.Warning,
+    description: 'Prompts should define output schemas for validated responses',
+    evaluate(inventory) {
+        return inventory.prompts
+            .filter((prompt) => !prompt.output)
+            .map((prompt) => ({
+            severity: GovernanceSeverity.Warning,
+            rule: 'ai.prompt-missing-output-schema',
+            description: `Prompt "${prompt.name}" has no output schema defined`,
+            affectedComponent: `prompt:${prompt.name}`,
+            remediation: 'Add an output Zod schema to enable response validation',
+        }));
+    },
+};
+/** Prompts without model configuration */
+export const rulePromptMissingModelConfig = {
+    id: 'ai.prompt-missing-model-config',
+    category: 'ai',
+    severity: GovernanceSeverity.Info,
+    description: 'Prompts should specify model configuration for reproducibility',
+    evaluate(inventory) {
+        return inventory.prompts
+            .filter((prompt) => !prompt.model)
+            .map((prompt) => ({
+            severity: GovernanceSeverity.Info,
+            rule: 'ai.prompt-missing-model-config',
+            description: `Prompt "${prompt.name}" has no model configuration — default will be used`,
+            affectedComponent: `prompt:${prompt.name}`,
+            remediation: 'Add a model configuration (provider, name, temperature, maxTokens)',
+        }));
+    },
+};
+/** Capabilities using AI without explanation enabled */
+export const ruleAIWithoutExplanation = {
+    id: 'ai.missing-explanation',
+    category: 'ai',
+    severity: GovernanceSeverity.Warning,
+    description: 'Capabilities using AI should enable explanation tracking',
+    evaluate(inventory) {
+        return inventory.capabilities
+            .filter((cap) => cap.effects.ai && !cap.explanation?.enabled)
+            .map((cap) => ({
+            severity: GovernanceSeverity.Warning,
+            rule: 'ai.missing-explanation',
+            description: `Capability "${cap.name}" uses AI but does not have explanation tracking enabled`,
+            affectedComponent: `capability:${cap.name}`,
+            remediation: 'Add `explanation: { enabled: true }` to the capability contract',
+        }));
+    },
+};
+/** Excessive AI usage — too many capabilities relying on AI */
+export const ruleExcessiveAIUsage = {
+    id: 'ai.excessive-usage',
+    category: 'ai',
+    severity: GovernanceSeverity.Info,
+    description: 'A high proportion of capabilities using AI may indicate over-reliance',
+    evaluate(inventory) {
+        if (inventory.capabilities.length === 0)
+            return [];
+        const aiCount = inventory.capabilities.filter((c) => c.effects.ai).length;
+        const ratio = aiCount / inventory.capabilities.length;
+        if (ratio > 0.7 && aiCount > 3) {
+            return [
+                {
+                    severity: GovernanceSeverity.Info,
+                    rule: 'ai.excessive-usage',
+                    description: `${aiCount} of ${inventory.capabilities.length} capabilities (${Math.round(ratio * 100)}%) use AI — consider if all need AI`,
+                    affectedComponent: 'system',
+                    remediation: 'Review capabilities to ensure AI is being used where it adds genuine value',
+                },
+            ];
+        }
+        return [];
+    },
+};
+export const aiRules = [
+    rulePromptMissingOutputSchema,
+    rulePromptMissingModelConfig,
+    ruleAIWithoutExplanation,
+    ruleExcessiveAIUsage,
+];
+//# sourceMappingURL=ai.js.map

package/dist/governance/rules/ai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.js","sourceRoot":"","sources":["../../../src/governance/rules/ai.ts"],"names":[],"mappings":"AAAA,qCAAqC;AAErC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,gDAAgD;AAChD,MAAM,CAAC,MAAM,6BAA6B,GAAmB;IAC3D,EAAE,EAAE,iCAAiC;IACrC,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,kBAAkB,CAAC,OAAO;IACpC,WAAW,EAAE,8DAA8D;IAC3E,QAAQ,CAAC,SAAS;QAChB,OAAO,SAAS,CAAC,OAAO;aACrB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;aAClC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChB,QAAQ,EAAE,kBAAkB,CAAC,OAAO;YACpC,IAAI,EAAE,iCAAiC;YACvC,WAAW,EAAE,WAAW,MAAM,CAAC,IAAI,gCAAgC;YACnE,iBAAiB,EAAE,UAAU,MAAM,CAAC,IAAI,EAAE;YAC1C,WAAW,EAAE,wDAAwD;SACtE,CAAC,CAAC,CAAC;IACR,CAAC;CACF,CAAC;AAEF,0CAA0C;AAC1C,MAAM,CAAC,MAAM,4BAA4B,GAAmB;IAC1D,EAAE,EAAE,gCAAgC;IACpC,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,kBAAkB,CAAC,IAAI;IACjC,WAAW,EAAE,gEAAgE;IAC7E,QAAQ,CAAC,SAAS;QAChB,OAAO,SAAS,CAAC,OAAO;aACrB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aACjC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChB,QAAQ,EAAE,kBAAkB,CAAC,IAAI;YACjC,IAAI,EAAE,gCAAgC;YACtC,WAAW,EAAE,WAAW,MAAM,CAAC,IAAI,qDAAqD;YACxF,iBAAiB,EAAE,UAAU,MAAM,CAAC,IAAI,EAAE;YAC1C,WAAW,EAAE,oEAAoE;SAClF,CAAC,CAAC,CAAC;IACR,CAAC;CACF,CAAC;AAEF,wDAAwD;AACxD,MAAM,CAAC,MAAM,wBAAwB,GAAmB;IACtD,EAAE,EAAE,wBAAwB;IAC5B,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,kBAAkB,CAAC,OAAO;IACpC,WAAW,EAAE,0DAA0D;IACvE,QAAQ,CAAC,SAAS;QAChB,OAAO,SAAS,CAAC,YAAY;aAC1B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC;aAC5D,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACb,QAAQ,EAAE,kBAAkB,CAAC,OAAO;YACpC,IAAI,EAAE,wBAAwB;YAC9B,WAAW,EAAE,eAAe,GAAG,CAAC,IAAI,0DAA0D;YAC9F,iBAAiB,EAAE,cAAc,GAAG,CAAC,IAAI,EAAE;YAC3C,WAAW,EAAE,iEAAiE;SAC/E,CAAC,CAAC,CAAC;IACR,CAAC;CACF,CAAC;AAEF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAmB;IAClD,EAAE,EAAE,oBAAoB;IACxB,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,kBAAkB,CAAC,IAAI;IACjC,WAAW,EAAE,uEAAuE;IACpF,QAAQ,CAAC,SAAS;QAChB,IAAI,SAAS,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;QAC1E,MAAM,KAAK,GAAG,OAAO,GAAG,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC;QACtD,IAAI,KAAK,GAAG,GAAG,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL;oBACE,QAAQ,EAAE,kBAAkB,CAAC,IAAI;oBACjC,IAAI,EAAE,oBAAoB;oBAC1B,WAAW,EAAE,GAAG,OAAO,OAAO,SAAS,CAAC,YAAY,CAAC,MAAM,kBAAkB,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,qCAAqC;oBACzI,iBAAiB,EAAE,QAAQ;oBAC3B,WAAW,EAAE,4EAA4E;iBAC1F;aACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAqB;IACvC,6BAA6B;IAC7B,4BAA4B;IAC5B,wBAAwB;IACxB,oBAAoB;CACrB,CAAC"}

package/dist/governance/rules/architecture.d.ts

@@ -0,0 +1,13 @@
+import type { GovernanceRule } from '../rule-engine.js';
+/** Capabilities with too many side effects */
+export declare const ruleExcessiveEffects: GovernanceRule;
+/** Flows with excessive branching */
+export declare const ruleExcessiveFlowBranching: GovernanceRule;
+/** Missing audit on action/job capabilities */
+export declare const ruleMissingAuditConfig: GovernanceRule;
+/** Large number of flow steps */
+export declare const ruleExcessiveFlowSteps: GovernanceRule;
+/** Entity without description */
+export declare const ruleEntityMissingDescription: GovernanceRule;
+export declare const architectureRules: GovernanceRule[];
+//# sourceMappingURL=architecture.d.ts.map

package/dist/governance/rules/architecture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"architecture.d.ts","sourceRoot":"","sources":["../../../src/governance/rules/architecture.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,8CAA8C;AAC9C,eAAO,MAAM,oBAAoB,EAAE,cAwBlC,CAAC;AAEF,qCAAqC;AACrC,eAAO,MAAM,0BAA0B,EAAE,cAsBxC,CAAC;AAEF,+CAA+C;AAC/C,eAAO,MAAM,sBAAsB,EAAE,cAkBpC,CAAC;AAEF,iCAAiC;AACjC,eAAO,MAAM,sBAAsB,EAAE,cAgBpC,CAAC;AAEF,iCAAiC;AACjC,eAAO,MAAM,4BAA4B,EAAE,cAgB1C,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,cAAc,EAM7C,CAAC"}

package/dist/governance/rules/architecture.js

@@ -0,0 +1,114 @@
+// ── Built-in Architecture Governance Rules ──
+import { GovernanceSeverity } from '../../types/enums.js';
+/** Capabilities with too many side effects */
+export const ruleExcessiveEffects = {
+    id: 'architecture.excessive-effects',
+    category: 'architecture',
+    severity: GovernanceSeverity.Warning,
+    description: 'Capabilities should not have excessive side effects',
+    evaluate(inventory) {
+        return inventory.capabilities
+            .filter((cap) => {
+            const e = cap.effects;
+            const total = (e.data?.length ?? 0) + (e.events?.length ?? 0) + (e.external?.length ?? 0);
+            return total > 10;
+        })
+            .map((cap) => {
+            const e = cap.effects;
+            const total = (e.data?.length ?? 0) + (e.events?.length ?? 0) + (e.external?.length ?? 0);
+            return {
+                severity: GovernanceSeverity.Warning,
+                rule: 'architecture.excessive-effects',
+                description: `Capability "${cap.name}" declares ${total} effects — consider splitting`,
+                affectedComponent: `capability:${cap.name}`,
+                remediation: 'Break the capability into smaller, focused capabilities',
+            };
+        });
+    },
+};
+/** Flows with excessive branching */
+export const ruleExcessiveFlowBranching = {
+    id: 'architecture.excessive-flow-branching',
+    category: 'architecture',
+    severity: GovernanceSeverity.Warning,
+    description: 'Flows should not have excessive conditional branching',
+    evaluate(inventory) {
+        return inventory.flows
+            .filter((flow) => {
+            const conditionalCount = flow.steps.filter((s) => s.type === 'conditional').length;
+            return conditionalCount > 5;
+        })
+            .map((flow) => {
+            const conditionalCount = flow.steps.filter((s) => s.type === 'conditional').length;
+            return {
+                severity: GovernanceSeverity.Warning,
+                rule: 'architecture.excessive-flow-branching',
+                description: `Flow "${flow.name}" has ${conditionalCount} conditional branches — consider simplifying`,
+                affectedComponent: `flow:${flow.name}`,
+                remediation: 'Break the flow into smaller sub-flows or reduce conditional complexity',
+            };
+        });
+    },
+};
+/** Missing audit on action/job capabilities */
+export const ruleMissingAuditConfig = {
+    id: 'architecture.missing-audit',
+    category: 'architecture',
+    severity: GovernanceSeverity.Warning,
+    description: 'Action and job capabilities should have audit logging enabled',
+    evaluate(inventory) {
+        return inventory.capabilities
+            .filter((cap) => (cap.kind === 'action' || cap.kind === 'job') && cap.audit?.enabled === false)
+            .map((cap) => ({
+            severity: GovernanceSeverity.Warning,
+            rule: 'architecture.missing-audit',
+            description: `Capability "${cap.name}" (${cap.kind}) has audit logging disabled`,
+            affectedComponent: `capability:${cap.name}`,
+            remediation: 'Enable audit logging for action and job capabilities',
+        }));
+    },
+};
+/** Large number of flow steps */
+export const ruleExcessiveFlowSteps = {
+    id: 'architecture.excessive-flow-steps',
+    category: 'architecture',
+    severity: GovernanceSeverity.Info,
+    description: 'Flows with many steps may be difficult to maintain',
+    evaluate(inventory) {
+        return inventory.flows
+            .filter((flow) => flow.steps.length > 20)
+            .map((flow) => ({
+            severity: GovernanceSeverity.Info,
+            rule: 'architecture.excessive-flow-steps',
+            description: `Flow "${flow.name}" has ${flow.steps.length} steps — consider decomposing into sub-flows`,
+            affectedComponent: `flow:${flow.name}`,
+            remediation: 'Break large flows into smaller, composable sub-flows',
+        }));
+    },
+};
+/** Entity without description */
+export const ruleEntityMissingDescription = {
+    id: 'architecture.entity-missing-description',
+    category: 'architecture',
+    severity: GovernanceSeverity.Info,
+    description: 'Entities should have descriptions for documentation and agent usage',
+    evaluate(inventory) {
+        return inventory.entities
+            .filter((entity) => !entity.description)
+            .map((entity) => ({
+            severity: GovernanceSeverity.Info,
+            rule: 'architecture.entity-missing-description',
+            description: `Entity "${entity.name}" is missing a description`,
+            affectedComponent: `entity:${entity.name}`,
+            remediation: 'Add a description to the entity definition',
+        }));
+    },
+};
+export const architectureRules = [
+    ruleExcessiveEffects,
+    ruleExcessiveFlowBranching,
+    ruleMissingAuditConfig,
+    ruleExcessiveFlowSteps,
+    ruleEntityMissingDescription,
+];
+//# sourceMappingURL=architecture.js.map

package/dist/governance/rules/architecture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"architecture.js","sourceRoot":"","sources":["../../../src/governance/rules/architecture.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAE/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,8CAA8C;AAC9C,MAAM,CAAC,MAAM,oBAAoB,GAAmB;IAClD,EAAE,EAAE,gCAAgC;IACpC,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,kBAAkB,CAAC,OAAO;IACpC,WAAW,EAAE,qDAAqD;IAClE,QAAQ,CAAC,SAAS;QAChB,OAAO,SAAS,CAAC,YAAY;aAC1B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YACd,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;YACtB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;YAC1F,OAAO,KAAK,GAAG,EAAE,CAAC;QACpB,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACX,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;YACtB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;YAC1F,OAAO;gBACL,QAAQ,EAAE,kBAAkB,CAAC,OAAO;gBACpC,IAAI,EAAE,gCAAgC;gBACtC,WAAW,EAAE,eAAe,GAAG,CAAC,IAAI,cAAc,KAAK,+BAA+B;gBACtF,iBAAiB,EAAE,cAAc,GAAG,CAAC,IAAI,EAAE;gBAC3C,WAAW,EAAE,yDAAyD;aACvE,CAAC;QACJ,CAAC,CAAC,CAAC;IACP,CAAC;CACF,CAAC;AAEF,qCAAqC;AACrC,MAAM,CAAC,MAAM,0BAA0B,GAAmB;IACxD,EAAE,EAAE,uCAAuC;IAC3C,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,kBAAkB,CAAC,OAAO;IACpC,WAAW,EAAE,uDAAuD;IACpE,QAAQ,CAAC,SAAS;QAChB,OAAO,SAAS,CAAC,KAAK;aACnB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACf,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,MAAM,CAAC;YACnF,OAAO,gBAAgB,GAAG,CAAC,CAAC;QAC9B,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,MAAM,CAAC;YACnF,OAAO;gBACL,QAAQ,EAAE,kBAAkB,CAAC,OAAO;gBACpC,IAAI,EAAE,uCAAuC;gBAC7C,WAAW,EAAE,SAAS,IAAI,CAAC,IAAI,SAAS,gBAAgB,8CAA8C;gBACtG,iBAAiB,EAAE,QAAQ,IAAI,CAAC,IAAI,EAAE;gBACtC,WAAW,EAAE,wEAAwE;aACtF,CAAC;QACJ,CAAC,CAAC,CAAC;IACP,CAAC;CACF,CAAC;AAEF,+CAA+C;AAC/C,MAAM,CAAC,MAAM,sBAAsB,GAAmB;IACpD,EAAE,EAAE,4BAA4B;IAChC,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,kBAAkB,CAAC,OAAO;IACpC,WAAW,EAAE,+DAA+D;IAC5E,QAAQ,CAAC,SAAS;QAChB,OAAO,SAAS,CAAC,YAAY;aAC1B,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,CACvF;aACA,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACb,QAAQ,EAAE,kBAAkB,CAAC,OAAO;YACpC,IAAI,EAAE,4BAA4B;YAClC,WAAW,EAAE,eAAe,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,8BAA8B;YAChF,iBAAiB,EAAE,cAAc,GAAG,CAAC,IAAI,EAAE;YAC3C,WAAW,EAAE,sDAAsD;SACpE,CAAC,CAAC,CAAC;IACR,CAAC;CACF,CAAC;AAEF,iCAAiC;AACjC,MAAM,CAAC,MAAM,sBAAsB,GAAmB;IACpD,EAAE,EAAE,mCAAmC;IACvC,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,kBAAkB,CAAC,IAAI;IACjC,WAAW,EAAE,oDAAoD;IACjE,QAAQ,CAAC,SAAS;QAChB,OAAO,SAAS,CAAC,KAAK;aACnB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;aACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACd,QAAQ,EAAE,kBAAkB,CAAC,IAAI;YACjC,IAAI,EAAE,mCAAmC;YACzC,WAAW,EAAE,SAAS,IAAI,CAAC,IAAI,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,8CAA8C;YACvG,iBAAiB,EAAE,QAAQ,IAAI,CAAC,IAAI,EAAE;YACtC,WAAW,EAAE,sDAAsD;SACpE,CAAC,CAAC,CAAC;IACR,CAAC;CACF,CAAC;AAEF,iCAAiC;AACjC,MAAM,CAAC,MAAM,4BAA4B,GAAmB;IAC1D,EAAE,EAAE,yCAAyC;IAC7C,QAAQ,EAAE,cAAc;IACxB,QAAQ,EAAE,kBAAkB,CAAC,IAAI;IACjC,WAAW,EAAE,qEAAqE;IAClF,QAAQ,CAAC,SAAS;QAChB,OAAO,SAAS,CAAC,QAAQ;aACtB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;aACvC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChB,QAAQ,EAAE,kBAAkB,CAAC,IAAI;YACjC,IAAI,EAAE,yCAAyC;YAC/C,WAAW,EAAE,WAAW,MAAM,CAAC,IAAI,4BAA4B;YAC/D,iBAAiB,EAAE,UAAU,MAAM,CAAC,IAAI,EAAE;YAC1C,WAAW,EAAE,4CAA4C;SAC1D,CAAC,CAAC,CAAC;IACR,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAqB;IACjD,oBAAoB;IACpB,0BAA0B;IAC1B,sBAAsB;IACtB,sBAAsB;IACtB,4BAA4B;CAC7B,CAAC"}

package/dist/governance/rules/index.d.ts

@@ -0,0 +1,5 @@
+export { aiRules, ruleAIWithoutExplanation, ruleExcessiveAIUsage, rulePromptMissingModelConfig, rulePromptMissingOutputSchema, } from './ai.js';
+export { architectureRules, ruleEntityMissingDescription, ruleExcessiveEffects, ruleExcessiveFlowBranching, ruleExcessiveFlowSteps, ruleMissingAuditConfig, } from './architecture.js';
+export { privacyRules, ruleExcessiveDataRetention, ruleMissingFieldClassification, rulePersonalDataInLogs, ruleSensitiveFieldUnencrypted, } from './privacy.js';
+export { ruleCapabilityMissingAccessPolicy, ruleCrossTenantDataAccess, ruleEntityTenantIsolation, ruleOverlyPermissiveRoles, securityRules, } from './security.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/governance/rules/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/governance/rules/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,OAAO,EACP,wBAAwB,EACxB,oBAAoB,EACpB,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,YAAY,EACZ,0BAA0B,EAC1B,8BAA8B,EAC9B,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,iCAAiC,EACjC,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,aAAa,GACd,MAAM,eAAe,CAAC"}

package/dist/governance/rules/index.js

@@ -0,0 +1,6 @@
+// ── Rules barrel ──
+export { aiRules, ruleAIWithoutExplanation, ruleExcessiveAIUsage, rulePromptMissingModelConfig, rulePromptMissingOutputSchema, } from './ai.js';
+export { architectureRules, ruleEntityMissingDescription, ruleExcessiveEffects, ruleExcessiveFlowBranching, ruleExcessiveFlowSteps, ruleMissingAuditConfig, } from './architecture.js';
+export { privacyRules, ruleExcessiveDataRetention, ruleMissingFieldClassification, rulePersonalDataInLogs, ruleSensitiveFieldUnencrypted, } from './privacy.js';
+export { ruleCapabilityMissingAccessPolicy, ruleCrossTenantDataAccess, ruleEntityTenantIsolation, ruleOverlyPermissiveRoles, securityRules, } from './security.js';
+//# sourceMappingURL=index.js.map

package/dist/governance/rules/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/governance/rules/index.ts"],"names":[],"mappings":"AAAA,qBAAqB;AACrB,OAAO,EACL,OAAO,EACP,wBAAwB,EACxB,oBAAoB,EACpB,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,YAAY,EACZ,0BAA0B,EAC1B,8BAA8B,EAC9B,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,iCAAiC,EACjC,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,aAAa,GACd,MAAM,eAAe,CAAC"}

package/dist/governance/rules/privacy.d.ts

@@ -0,0 +1,11 @@
+import type { GovernanceRule } from '../rule-engine.js';
+/** Highly_sensitive fields stored unencrypted */
+export declare const ruleSensitiveFieldUnencrypted: GovernanceRule;
+/** Personal data in logs (not masked) */
+export declare const rulePersonalDataInLogs: GovernanceRule;
+/** Missing data classification on fields with sensitive-looking names */
+export declare const ruleMissingFieldClassification: GovernanceRule;
+/** Excessive data retention — entities with personal data without retention policies */
+export declare const ruleExcessiveDataRetention: GovernanceRule;
+export declare const privacyRules: GovernanceRule[];
+//# sourceMappingURL=privacy.d.ts.map

package/dist/governance/rules/privacy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.d.ts","sourceRoot":"","sources":["../../../src/governance/rules/privacy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAKxD,iDAAiD;AACjD,eAAO,MAAM,6BAA6B,EAAE,cA2B3C,CAAC;AAEF,yCAAyC;AACzC,eAAO,MAAM,sBAAsB,EAAE,cA4BpC,CAAC;AAEF,yEAAyE;AACzE,eAAO,MAAM,8BAA8B,EAAE,cAqB5C,CAAC;AAEF,wFAAwF;AACxF,eAAO,MAAM,0BAA0B,EAAE,cAwBxC,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,cAAc,EAKxC,CAAC"}

package/dist/governance/rules/privacy.js

@@ -0,0 +1,97 @@
+// ── Built-in Privacy Governance Rules ──
+import { FieldClassification, GovernanceSeverity } from '../../types/enums.js';
+const sensitiveNamePattern = /email|password|ssn|social_security|credit_card|phone|address|dob|date_of_birth|name|salary|medical|health|tax|bank/i;
+/** Highly_sensitive fields stored unencrypted */
+export const ruleSensitiveFieldUnencrypted = {
+    id: 'privacy.sensitive-field-unencrypted',
+    category: 'privacy',
+    severity: GovernanceSeverity.High,
+    description: 'Sensitive and highly_sensitive fields must be encrypted',
+    evaluate(inventory) {
+        const highClassifications = [
+            FieldClassification.Sensitive,
+            FieldClassification.HighlySensitive,
+        ];
+        return inventory.entities.flatMap((entity) => Object.entries(entity.fields)
+            .filter(([, fieldDef]) => fieldDef.options.classification &&
+            highClassifications.includes(fieldDef.options.classification) &&
+            !fieldDef.options.encrypted)
+            .map(([fieldName, fieldDef]) => ({
+            severity: GovernanceSeverity.High,
+            rule: 'privacy.sensitive-field-unencrypted',
+            description: `Entity "${entity.name}" field "${fieldName}" is classified as ${fieldDef.options.classification} but not encrypted`,
+            affectedComponent: `entity:${entity.name}.${fieldName}`,
+            remediation: 'Add `encrypted: true` to the field definition',
+        })));
+    },
+};
+/** Personal data in logs (not masked) */
+export const rulePersonalDataInLogs = {
+    id: 'privacy.personal-data-in-logs',
+    category: 'privacy',
+    severity: GovernanceSeverity.Warning,
+    description: 'Personal and sensitive fields should be masked in logs',
+    evaluate(inventory) {
+        const loggableClassifications = [
+            FieldClassification.Personal,
+            FieldClassification.Sensitive,
+            FieldClassification.HighlySensitive,
+        ];
+        return inventory.entities.flatMap((entity) => Object.entries(entity.fields)
+            .filter(([, fieldDef]) => fieldDef.options.classification &&
+            loggableClassifications.includes(fieldDef.options.classification) &&
+            !fieldDef.options.maskedInLogs)
+            .map(([fieldName]) => ({
+            severity: GovernanceSeverity.Warning,
+            rule: 'privacy.personal-data-in-logs',
+            description: `Entity "${entity.name}" field "${fieldName}" contains personal/sensitive data but is not masked in logs`,
+            affectedComponent: `entity:${entity.name}.${fieldName}`,
+            remediation: 'Add `maskedInLogs: true` to the field definition',
+        })));
+    },
+};
+/** Missing data classification on fields with sensitive-looking names */
+export const ruleMissingFieldClassification = {
+    id: 'privacy.missing-field-classification',
+    category: 'privacy',
+    severity: GovernanceSeverity.Warning,
+    description: 'Fields with sensitive-looking names should have classification metadata',
+    evaluate(inventory) {
+        return inventory.entities.flatMap((entity) => Object.entries(entity.fields)
+            .filter(([fieldName, fieldDef]) => sensitiveNamePattern.test(fieldName) && !fieldDef.options.classification)
+            .map(([fieldName]) => ({
+            severity: GovernanceSeverity.Warning,
+            rule: 'privacy.missing-field-classification',
+            description: `Entity "${entity.name}" field "${fieldName}" appears sensitive but has no classification`,
+            affectedComponent: `entity:${entity.name}.${fieldName}`,
+            remediation: `Add classification (e.g., personal, sensitive) to field "${fieldName}"`,
+        })));
+    },
+};
+/** Excessive data retention — entities with personal data without retention policies */
+export const ruleExcessiveDataRetention = {
+    id: 'privacy.excessive-data-retention',
+    category: 'privacy',
+    severity: GovernanceSeverity.Warning,
+    description: 'Entities with personal data should define retention policies',
+    evaluate(inventory) {
+        return inventory.entities
+            .filter((entity) => Object.values(entity.fields).some((f) => f.options.classification === FieldClassification.Personal ||
+            f.options.classification === FieldClassification.Sensitive ||
+            f.options.classification === FieldClassification.HighlySensitive) && !entity.retention)
+            .map((entity) => ({
+            severity: GovernanceSeverity.Warning,
+            rule: 'privacy.excessive-data-retention',
+            description: `Entity "${entity.name}" contains personal/sensitive data but has no retention policy`,
+            affectedComponent: `entity:${entity.name}`,
+            remediation: 'Add a retention policy with an appropriate duration',
+        }));
+    },
+};
+export const privacyRules = [
+    ruleSensitiveFieldUnencrypted,
+    rulePersonalDataInLogs,
+    ruleMissingFieldClassification,
+    ruleExcessiveDataRetention,
+];
+//# sourceMappingURL=privacy.js.map

package/dist/governance/rules/privacy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.js","sourceRoot":"","sources":["../../../src/governance/rules/privacy.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAE1C,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG/E,MAAM,oBAAoB,GACxB,qHAAqH,CAAC;AAExH,iDAAiD;AACjD,MAAM,CAAC,MAAM,6BAA6B,GAAmB;IAC3D,EAAE,EAAE,qCAAqC;IACzC,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,kBAAkB,CAAC,IAAI;IACjC,WAAW,EAAE,yDAAyD;IACtE,QAAQ,CAAC,SAAS;QAChB,MAAM,mBAAmB,GAA0B;YACjD,mBAAmB,CAAC,SAAS;YAC7B,mBAAmB,CAAC,eAAe;SACpC,CAAC;QACF,OAAO,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC3C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;aAC1B,MAAM,CACL,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CACf,QAAQ,CAAC,OAAO,CAAC,cAAc;YAC/B,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC;YAC7D,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAC9B;aACA,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,QAAQ,EAAE,kBAAkB,CAAC,IAAI;YACjC,IAAI,EAAE,qCAAqC;YAC3C,WAAW,EAAE,WAAW,MAAM,CAAC,IAAI,YAAY,SAAS,sBAAsB,QAAQ,CAAC,OAAO,CAAC,cAAc,oBAAoB;YACjI,iBAAiB,EAAE,UAAU,MAAM,CAAC,IAAI,IAAI,SAAS,EAAE;YACvD,WAAW,EAAE,+CAA+C;SAC7D,CAAC,CAAC,CACN,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,yCAAyC;AACzC,MAAM,CAAC,MAAM,sBAAsB,GAAmB;IACpD,EAAE,EAAE,+BAA+B;IACnC,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,kBAAkB,CAAC,OAAO;IACpC,WAAW,EAAE,wDAAwD;IACrE,QAAQ,CAAC,SAAS;QAChB,MAAM,uBAAuB,GAA0B;YACrD,mBAAmB,CAAC,QAAQ;YAC5B,mBAAmB,CAAC,SAAS;YAC7B,mBAAmB,CAAC,eAAe;SACpC,CAAC;QACF,OAAO,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC3C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;aAC1B,MAAM,CACL,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE,CACf,QAAQ,CAAC,OAAO,CAAC,cAAc;YAC/B,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC;YACjE,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CACjC;aACA,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YACrB,QAAQ,EAAE,kBAAkB,CAAC,OAAO;YACpC,IAAI,EAAE,+BAA+B;YACrC,WAAW,EAAE,WAAW,MAAM,CAAC,IAAI,YAAY,SAAS,8DAA8D;YACtH,iBAAiB,EAAE,UAAU,MAAM,CAAC,IAAI,IAAI,SAAS,EAAE;YACvD,WAAW,EAAE,kDAAkD;SAChE,CAAC,CAAC,CACN,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,8BAA8B,GAAmB;IAC5D,EAAE,EAAE,sCAAsC;IAC1C,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,kBAAkB,CAAC,OAAO;IACpC,WAAW,EAAE,yEAAyE;IACtF,QAAQ,CAAC,SAAS;QAChB,OAAO,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC3C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;aAC1B,MAAM,CACL,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,CACxB,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAC3E;aACA,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YACrB,QAAQ,EAAE,kBAAkB,CAAC,OAAO;YACpC,IAAI,EAAE,sCAAsC;YAC5C,WAAW,EAAE,WAAW,MAAM,CAAC,IAAI,YAAY,SAAS,+CAA+C;YACvG,iBAAiB,EAAE,UAAU,MAAM,CAAC,IAAI,IAAI,SAAS,EAAE;YACvD,WAAW,EAAE,4DAA4D,SAAS,GAAG;SACtF,CAAC,CAAC,CACN,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,wFAAwF;AACxF,MAAM,CAAC,MAAM,0BAA0B,GAAmB;IACxD,EAAE,EAAE,kCAAkC;IACtC,QAAQ,EAAE,SAAS;IACnB,QAAQ,EAAE,kBAAkB,CAAC,OAAO;IACpC,WAAW,EAAE,8DAA8D;IAC3E,QAAQ,CAAC,SAAS;QAChB,OAAO,SAAS,CAAC,QAAQ;aACtB,MAAM,CACL,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,OAAO,CAAC,cAAc,KAAK,mBAAmB,CAAC,QAAQ;YACzD,CAAC,CAAC,OAAO,CAAC,cAAc,KAAK,mBAAmB,CAAC,SAAS;YAC1D,CAAC,CAAC,OAAO,CAAC,cAAc,KAAK,mBAAmB,CAAC,eAAe,CACnE,IAAI,CAAC,MAAM,CAAC,SAAS,CACzB;aACA,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChB,QAAQ,EAAE,kBAAkB,CAAC,OAAO;YACpC,IAAI,EAAE,kCAAkC;YACxC,WAAW,EAAE,WAAW,MAAM,CAAC,IAAI,gEAAgE;YACnG,iBAAiB,EAAE,UAAU,MAAM,CAAC,IAAI,EAAE;YAC1C,WAAW,EAAE,qDAAqD;SACnE,CAAC,CAAC,CAAC;IACR,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAqB;IAC5C,6BAA6B;IAC7B,sBAAsB;IACtB,8BAA8B;IAC9B,0BAA0B;CAC3B,CAAC"}

package/dist/governance/rules/security.d.ts

@@ -0,0 +1,11 @@
+import type { GovernanceRule } from '../rule-engine.js';
+/** Capabilities without access policies */
+export declare const ruleCapabilityMissingAccessPolicy: GovernanceRule;
+/** Overly permissive roles (wildcard or admin-only) */
+export declare const ruleOverlyPermissiveRoles: GovernanceRule;
+/** Cross-tenant data access risk — capabilities accessing data without tenant isolation */
+export declare const ruleCrossTenantDataAccess: GovernanceRule;
+/** Missing tenant isolation on entities */
+export declare const ruleEntityTenantIsolation: GovernanceRule;
+export declare const securityRules: GovernanceRule[];
+//# sourceMappingURL=security.d.ts.map

package/dist/governance/rules/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/governance/rules/security.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,2CAA2C;AAC3C,eAAO,MAAM,iCAAiC,EAAE,cAoB/C,CAAC;AAEF,uDAAuD;AACvD,eAAO,MAAM,yBAAyB,EAAE,cAiBvC,CAAC;AAEF,2FAA2F;AAC3F,eAAO,MAAM,yBAAyB,EAAE,cAuBvC,CAAC;AAEF,2CAA2C;AAC3C,eAAO,MAAM,yBAAyB,EAAE,cAgBvC,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,cAAc,EAKzC,CAAC"}

package/dist/governance/rules/security.js

@@ -0,0 +1,83 @@
+// ── Built-in Security Governance Rules ──
+import { GovernanceSeverity } from '../../types/enums.js';
+/** Capabilities without access policies */
+export const ruleCapabilityMissingAccessPolicy = {
+    id: 'security.capability-access-policy',
+    category: 'security',
+    severity: GovernanceSeverity.High,
+    description: 'All capabilities must have access policies defined',
+    evaluate(inventory) {
+        return inventory.capabilities
+            .filter((cap) => !cap.access ||
+            (!cap.access.roles?.length && !cap.access.scopes?.length && !cap.access.public))
+            .map((cap) => ({
+            severity: GovernanceSeverity.High,
+            rule: 'security.capability-access-policy',
+            description: `Capability "${cap.name}" has no access policy defined`,
+            affectedComponent: `capability:${cap.name}`,
+            remediation: 'Add an access policy with roles, scopes, or mark as public',
+        }));
+    },
+};
+/** Overly permissive roles (wildcard or admin-only) */
+export const ruleOverlyPermissiveRoles = {
+    id: 'security.overly-permissive-roles',
+    category: 'security',
+    severity: GovernanceSeverity.Warning,
+    description: "Capabilities should not use overly permissive roles like '*' or empty role arrays with public access",
+    evaluate(inventory) {
+        return inventory.capabilities
+            .filter((cap) => cap.access?.roles?.includes('*'))
+            .map((cap) => ({
+            severity: GovernanceSeverity.Warning,
+            rule: 'security.overly-permissive-roles',
+            description: `Capability "${cap.name}" uses wildcard role '*'`,
+            affectedComponent: `capability:${cap.name}`,
+            remediation: 'Replace wildcard role with specific role names',
+        }));
+    },
+};
+/** Cross-tenant data access risk — capabilities accessing data without tenant isolation */
+export const ruleCrossTenantDataAccess = {
+    id: 'security.cross-tenant-data-access',
+    category: 'security',
+    severity: GovernanceSeverity.High,
+    description: 'Capabilities that access entity data should use tenant-scoped entities',
+    evaluate(inventory) {
+        const nonTenantEntityNames = new Set(inventory.entities.filter((e) => !e.tenantScoped).map((e) => e.name));
+        return inventory.capabilities
+            .filter((cap) => cap.effects.data?.some((d) => nonTenantEntityNames.has(d)) && cap.access?.tenantScoped)
+            .map((cap) => ({
+            severity: GovernanceSeverity.High,
+            rule: 'security.cross-tenant-data-access',
+            description: `Capability "${cap.name}" is tenant-scoped but accesses non-tenant-scoped entities: ${cap.effects.data.filter((d) => nonTenantEntityNames.has(d)).join(', ')}`,
+            affectedComponent: `capability:${cap.name}`,
+            remediation: 'Set tenantScoped: true on the accessed entities or remove tenant scope from the capability',
+        }));
+    },
+};
+/** Missing tenant isolation on entities */
+export const ruleEntityTenantIsolation = {
+    id: 'security.no-tenant-isolation',
+    category: 'security',
+    severity: GovernanceSeverity.Info,
+    description: 'Entities holding tenant-specific data should be tenant-scoped',
+    evaluate(inventory) {
+        return inventory.entities
+            .filter((entity) => !entity.tenantScoped)
+            .map((entity) => ({
+            severity: GovernanceSeverity.Info,
+            rule: 'security.no-tenant-isolation',
+            description: `Entity "${entity.name}" is not tenant-scoped`,
+            affectedComponent: `entity:${entity.name}`,
+            remediation: 'Set tenantScoped: true if this entity holds tenant-specific data',
+        }));
+    },
+};
+export const securityRules = [
+    ruleCapabilityMissingAccessPolicy,
+    ruleOverlyPermissiveRoles,
+    ruleCrossTenantDataAccess,
+    ruleEntityTenantIsolation,
+];
+//# sourceMappingURL=security.js.map

package/dist/governance/rules/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/governance/rules/security.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAE3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG1D,2CAA2C;AAC3C,MAAM,CAAC,MAAM,iCAAiC,GAAmB;IAC/D,EAAE,EAAE,mCAAmC;IACvC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,kBAAkB,CAAC,IAAI;IACjC,WAAW,EAAE,oDAAoD;IACjE,QAAQ,CAAC,SAAS;QAChB,OAAO,SAAS,CAAC,YAAY;aAC1B,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,GAAG,CAAC,MAAM;YACX,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAClF;aACA,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACb,QAAQ,EAAE,kBAAkB,CAAC,IAAI;YACjC,IAAI,EAAE,mCAAmC;YACzC,WAAW,EAAE,eAAe,GAAG,CAAC,IAAI,gCAAgC;YACpE,iBAAiB,EAAE,cAAc,GAAG,CAAC,IAAI,EAAE;YAC3C,WAAW,EAAE,4DAA4D;SAC1E,CAAC,CAAC,CAAC;IACR,CAAC;CACF,CAAC;AAEF,uDAAuD;AACvD,MAAM,CAAC,MAAM,yBAAyB,GAAmB;IACvD,EAAE,EAAE,kCAAkC;IACtC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,kBAAkB,CAAC,OAAO;IACpC,WAAW,EACT,sGAAsG;IACxG,QAAQ,CAAC,SAAS;QAChB,OAAO,SAAS,CAAC,YAAY;aAC1B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;aACjD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACb,QAAQ,EAAE,kBAAkB,CAAC,OAAO;YACpC,IAAI,EAAE,kCAAkC;YACxC,WAAW,EAAE,eAAe,GAAG,CAAC,IAAI,0BAA0B;YAC9D,iBAAiB,EAAE,cAAc,GAAG,CAAC,IAAI,EAAE;YAC3C,WAAW,EAAE,gDAAgD;SAC9D,CAAC,CAAC,CAAC;IACR,CAAC;CACF,CAAC;AAEF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,yBAAyB,GAAmB;IACvD,EAAE,EAAE,mCAAmC;IACvC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,kBAAkB,CAAC,IAAI;IACjC,WAAW,EAAE,wEAAwE;IACrF,QAAQ,CAAC,SAAS;QAChB,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAClC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CACrE,CAAC;QACF,OAAO,SAAS,CAAC,YAAY;aAC1B,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,YAAY,CACzF;aACA,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACb,QAAQ,EAAE,kBAAkB,CAAC,IAAI;YACjC,IAAI,EAAE,mCAAmC;YACzC,WAAW,EAAE,eAAe,GAAG,CAAC,IAAI,+DAA+D,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC3K,iBAAiB,EAAE,cAAc,GAAG,CAAC,IAAI,EAAE;YAC3C,WAAW,EACT,4FAA4F;SAC/F,CAAC,CAAC,CAAC;IACR,CAAC;CACF,CAAC;AAEF,2CAA2C;AAC3C,MAAM,CAAC,MAAM,yBAAyB,GAAmB;IACvD,EAAE,EAAE,8BAA8B;IAClC,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,kBAAkB,CAAC,IAAI;IACjC,WAAW,EAAE,+DAA+D;IAC5E,QAAQ,CAAC,SAAS;QAChB,OAAO,SAAS,CAAC,QAAQ;aACtB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;aACxC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChB,QAAQ,EAAE,kBAAkB,CAAC,IAAI;YACjC,IAAI,EAAE,8BAA8B;YACpC,WAAW,EAAE,WAAW,MAAM,CAAC,IAAI,wBAAwB;YAC3D,iBAAiB,EAAE,UAAU,MAAM,CAAC,IAAI,EAAE;YAC1C,WAAW,EAAE,kEAAkE;SAChF,CAAC,CAAC,CAAC;IACR,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAqB;IAC7C,iCAAiC;IACjC,yBAAyB;IACzB,yBAAyB;IACzB,yBAAyB;CAC1B,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,40 @@
+export type { AICostRecord, AIExplainabilityTracker, AIInvocationRecord, AIProviderAdapter, AISecurityConfig, AIServiceConfig, AnthropicAdapterConfig, BudgetCheckResult, BudgetConfig, ChunkConfig, CostTracker, DailyUsage, DocumentChunk, EmbeddingRequest, EmbeddingResponse, ExplainabilityConfig, IngestDocumentInput, OpenAIAdapterConfig, ProviderRequest, ProviderResponse, ProviderStreamEvent, RAGPipeline, RAGPipelineConfig, RetrievalQuery, SecurityCheckResult, SecurityWarning, StoredChunk, TokenUsage, UsageAPIClient, UsageClientConfig, UsageData, UsageEntry, UsageSyncResult, ValidatedResponse, ValidationRetryConfig, VectorStore, } from './ai/index.js';
+export { PromptRegistry, UsageAPIError, checkPromptSecurity, chunkDocument, createAIService, createAnthropicAdapter, createCostTracker, createExplainabilityTracker, createInMemoryVectorStore, createOpenAIAdapter, createProviderAdapter, createRAGPipeline, createUsageAPIClient, documentChunksTable, documentsTable, generateWithValidation, singleProviderConfig, } from './ai/index.js';
+export type { RouteGeneratorConfig } from './api/index.js';
+export { registerAllRoutes, registerCapabilityRoute } from './api/index.js';
+export type { AuditServiceConfig } from './audit/index.js';
+export { auditRecords, createAuditService } from './audit/index.js';
+export type { AuthAdapter, JwtAdapterConfig, JwtClaimMapping, OidcAdapterConfig, OidcJwk, PasswordHashOptions, SamlAdapterConfig, ScimEmail, ScimError, ScimListResponse, ScimService, ScimServiceConfig, ScimUser, ScimUserRepository, ScimUserResource, SignJwtOptions, } from './auth/index.js';
+export { createJwtAdapter, createOidcAdapter, createSamlAdapter, createScimService, hashPassword, signJwt, verifyPassword, } from './auth/index.js';
+export type { ConfigLoadOptions, ConfigValidationResult } from './config/index.js';
+export { loadConfig, validateConfig } from './config/index.js';
+export type { MigrationConfig, MigrationRecord, RepositoryOptions } from './data/index.js';
+export { EntityRegistry, applyMigrations, collectSchemas, createRepository, generateDrizzleSchema, generateSchemas, rollbackLastMigration, } from './data/index.js';
+export { defineCapability } from './define/defineCapability.js';
+export { defineEntity } from './define/defineEntity.js';
+export { defineEvent } from './define/defineEvent.js';
+export { defineFlow } from './define/defineFlow.js';
+export { definePrompt } from './define/definePrompt.js';
+export { errorToHttpResponse, errorToHttpStatus } from './errors/http.js';
+export { createErrorService, isPlumbusError } from './errors/index.js';
+export type { DispatcherConfig, EventConsumer, EventConsumerHandler, EventEmitterConfig, EventQueue, IdempotencyService, RedisClient, RedisQueueConfig, WorkerConfig, } from './events/index.js';
+export { ConsumerRegistry, EventRegistry, createEventEmitter, createEventWorker, createIdempotencyService, createInMemoryQueue, createOutboxDispatcher, createRedisQueue, deadLetterTable, idempotencyTable, outboxTable, } from './events/index.js';
+export type { AuthorizationResult, CapabilityResult, ContextDependencies, ExecutionFailure, ExecutionResult, } from './execution/index.js';
+export { CapabilityRegistry, createExecutionContext, evaluateAccess, executeCapability, } from './execution/index.js';
+export type { AIInvocationExplanation, AuthorizationExplanation, ExplanationFilter, ExplanationRecord, ExplanationTracker, ExplanationTrackerConfig, ExplanationType, FlowBranchExplanation, GovernanceExplanation, } from './explanation/index.js';
+export { createExplanationTracker } from './explanation/index.js';
+export { field } from './fields/index.js';
+export type { FlowEngineConfig, SchedulerConfig, StepExecutorDeps, StepHistoryEntry, StepResult, } from './flows/index.js';
+export { FlowRegistry, FlowStatus, StepStatus, assertTransition, buildHistoryEntry, computeNextRun, computeRetryDelay, createFlowEngine, createFlowScheduler, createFlowService, createFlowTriggerHandler, deadLetterFlow, executeStep, flowDeadLetterTable, flowExecutionsTable, flowSchedulesTable, isTerminal, isValidTransition, sweepFailedFlows, } from './flows/index.js';
+export type { Counter, Histogram, MetricLabels, MetricsRegistry, PlumbusMetrics, Span, SpanExporter, SpanKind, SpanOptions, SpanStatusCode, StructuredLogEntry, StructuredLoggerConfig, TraceContext, Tracer, W3CTraceContext, } from './observability/index.js';
+export { createChildSpan, createMetricsRegistry, createPlumbusMetrics, createStructuredLogger, createTraceContext, createTracer, extractTraceFromHeaders, formatTraceparent, generateSpanId, generateTraceId, injectTraceHeaders, parseTraceparent, } from './observability/index.js';
+export type { PlumbusServer, ServerConfig } from './server/index.js';
+export { createServer } from './server/index.js';
+export * from './types/index.js';
+export type { WorkerPool, WorkerPoolConfig } from './worker/index.js';
+export { createWorkerPool } from './worker/index.js';
+export type { AgentFormat, CreateOptions, DevOptions, DoctorCheck, InitOptions, PolicyContext, PolicyRule, } from './cli/index.js';
+export { capabilityTemplate, capabilityTestTemplate, checkAppStructure, checkConfig, checkNodeVersion, checkPackageJson, checkPlumbusCore, checkPostgreSQL, checkRedis, checkTypeScript, createCli, entityTemplate, evaluatePolicy, eventTemplate, flowTemplate, generateAgentsMd, generateAll, generateCapabilityBrief, generateClientFunction, generateCopilotInstructions, generateCursorCapabilityRule, generateCursorRule, generateEntityBrief, generateManifestEntry, generateOpenApiPath, generateProjectBrief, generateProjectBriefFromResources, generateProjectStructure, generateReactHook, promptTemplate, ruleCapabilityAccessPolicy, ruleCapabilityEffects, ruleEncryptedSensitiveFields, ruleEntityFieldClassification, ruleEntityTenantIsolation, runDev, runDoctorChecks, runFullDoctorChecks, runGovernanceRules, startDevServer, toCamelCase, toKebabCase, toPascalCase, writeAgentFiles, } from './cli/index.js';
+export type { GovernanceResult, GovernanceRule, GovernanceRuleEngine, OverrideEntry, OverrideStore, PolicyProfileDefinition, PolicyProfileRule, ReportOptions, RuleCategory, SystemInventory, } from './governance/index.js';
+export { aiRules, applyOverrides, architectureRules, builtInProfiles, createGovernanceRuleEngine, createOverrideStore, evaluatePolicyProfile, formatPolicyReport, generateAllPolicyReports, generatePolicyReport, ruleCapabilityMissingAccessPolicy as govRuleCapabilityMissingAccessPolicy, ruleEntityTenantIsolation as govRuleEntityTenantIsolation, privacyRules, ruleAIWithoutExplanation, ruleCrossTenantDataAccess, ruleEntityMissingDescription, ruleExcessiveAIUsage, ruleExcessiveDataRetention, ruleExcessiveEffects, ruleExcessiveFlowBranching, ruleExcessiveFlowSteps, ruleMissingAuditConfig, ruleMissingFieldClassification, ruleOverlyPermissiveRoles, rulePersonalDataInLogs, ruleSensitiveFieldUnencrypted, securityRules, } from './governance/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAoBA,YAAY,EACV,YAAY,EACZ,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,eAAe,EACf,WAAW,EACX,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,SAAS,EACT,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,GACZ,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,2BAA2B,EAC3B,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACpE,YAAY,EACV,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,OAAO,EACP,mBAAmB,EACnB,iBAAiB,EACjB,SAAS,EACT,SAAS,EACT,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,QAAQ,EACR,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,GACf,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,OAAO,EACP,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAEnF,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC/D,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE3F,OAAO,EACL,cAAc,EACd,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACvE,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EAClB,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,cAAc,EACd,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,uBAAuB,EACvB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAElE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,GACX,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,YAAY,EACZ,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,wBAAwB,EACxB,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,OAAO,EACP,SAAS,EACT,YAAY,EACZ,eAAe,EACf,cAAc,EACd,IAAI,EACJ,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,YAAY,EACZ,MAAM,EACN,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,YAAY,EACZ,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAErE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,cAAc,kBAAkB,CAAC;AACjC,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAWrD,YAAY,EACV,WAAW,EACX,aAAa,EACb,UAAU,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,UAAU,GACX,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAEL,kBAAkB,EAClB,sBAAsB,EAEtB,iBAAiB,EACjB,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,UAAU,EACV,eAAe,EACf,SAAS,EACT,cAAc,EAEd,cAAc,EACd,aAAa,EACb,YAAY,EAEZ,gBAAgB,EAEhB,WAAW,EAEX,uBAAuB,EACvB,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,iCAAiC,EAEjC,wBAAwB,EACxB,iBAAiB,EACjB,cAAc,EAEd,0BAA0B,EAC1B,qBAAqB,EACrB,4BAA4B,EAC5B,6BAA6B,EAC7B,yBAAyB,EAEzB,MAAM,EACN,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EAEd,WAAW,EACX,WAAW,EACX,YAAY,EACZ,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,OAAO,EACP,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,0BAA0B,EAC1B,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,iCAAiC,IAAI,oCAAoC,EACzE,yBAAyB,IAAI,4BAA4B,EACzD,YAAY,EACZ,wBAAwB,EACxB,yBAAyB,EACzB,4BAA4B,EAC5B,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,8BAA8B,EAC9B,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,EAC7B,aAAa,GACd,MAAM,uBAAuB,CAAC"}