@plumpslabs/kuma 2.3.20 → 2.3.23

package/dist/kumaGotchas-XRGFFBTA.js

@@ -1,151 +0,0 @@
-import {
-  appendToLayer,
-  checkFileGotchas,
-  getActiveGotchas
-} from "./chunk-FKRSI5U5.js";
-import {
-  sessionMemory
-} from "./chunk-LVKOGXLC.js";
-import {
-  getDb,
-  saveDb
-} from "./chunk-3BRBJZ7P.js";
-import "./chunk-E2KFPEBT.js";
-
-// src/engine/kumaGotchas.ts
-async function ensureGotchasSchema() {
-  const db = await getDb();
-  db.exec(`
-    CREATE TABLE IF NOT EXISTS known_gotchas (
-      id INTEGER PRIMARY KEY AUTOINCREMENT,
-      file_path TEXT NOT NULL,
-      description TEXT NOT NULL,
-      severity TEXT NOT NULL DEFAULT 'medium'
-        CHECK(severity IN ('low','medium','high','critical')),
-      workaround TEXT,
-      added_by TEXT DEFAULT 'agent',
-      created_at INTEGER NOT NULL DEFAULT (strftime('%s','now')),
-      updated_at INTEGER NOT NULL DEFAULT (strftime('%s','now'))
-    );
-    CREATE INDEX IF NOT EXISTS idx_gotchas_file ON known_gotchas(file_path);
-    CREATE INDEX IF NOT EXISTS idx_gotchas_severity ON known_gotchas(severity);
-  `);
-  saveDb();
-}
-async function addGotcha(entry) {
-  try {
-    await ensureGotchasSchema();
-    const db = await getDb();
-    const severity = entry.severity || "medium";
-    const formatted = [
-      `### ${entry.filePath} \u2014 ${entry.description}`,
-      `- **Issue**: ${entry.description}`,
-      `- **Severity**: ${severity}`,
-      entry.workaround ? `- **Workaround**: ${entry.workaround}` : "",
-      `- **Added**: ${(/* @__PURE__ */ new Date()).toISOString().split("T")[0]}`
-    ].filter(Boolean).join("\n");
-    db.run(
-      `INSERT INTO known_gotchas (file_path, description, severity, workaround) VALUES (?, ?, ?, ?)`,
-      [entry.filePath, entry.description, severity, entry.workaround || null]
-    );
-    const mdResult = appendToLayer("gotcha", formatted);
-    saveDb();
-    sessionMemory.recordToolCall("kuma_gotcha_add", {
-      filePath: entry.filePath,
-      severity
-    });
-    return `\u2705 **Gotcha recorded**: ${entry.filePath} \u2014 ${entry.description}
-${mdResult}`;
-  } catch (err) {
-    return `\u274C Failed to add gotcha: ${err}`;
-  }
-}
-async function listGotchas(params) {
-  try {
-    await ensureGotchasSchema();
-    const db = await getDb();
-    let sql = "SELECT * FROM known_gotchas WHERE 1=1";
-    const bind = [];
-    if (params.filePath) {
-      sql += " AND file_path LIKE ?";
-      bind.push(`%${params.filePath}%`);
-    }
-    if (params.severity) {
-      sql += " AND severity = ?";
-      bind.push(params.severity);
-    }
-    sql += " ORDER BY severity DESC, created_at DESC LIMIT 50";
-    const stmt = db.prepare(sql);
-    stmt.bind(bind);
-    const results = [];
-    while (stmt.step()) results.push(stmt.getAsObject());
-    stmt.free();
-    if (results.length === 0) {
-      return "\u2705 **No gotchas recorded** \u2014 legacy codebase looks clean.";
-    }
-    const lines = [
-      `\u26A0\uFE0F **Known Gotchas** \u2014 ${results.length} recorded`,
-      "\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501",
-      ""
-    ];
-    for (const g of results) {
-      const icon = g.severity === "critical" ? "\u{1F534}" : g.severity === "high" ? "\u{1F7E0}" : g.severity === "medium" ? "\u{1F7E1}" : "\u{1F7E2}";
-      lines.push(`${icon} [${g.severity}] ${g.file_path}`);
-      lines.push(`   \u{1F4DD} ${g.description?.toString().substring(0, 100)}`);
-      if (g.workaround) lines.push(`   \u{1F4A1} ${g.workaround.substring(0, 100)}`);
-      lines.push("");
-    }
-    return lines.join("\n");
-  } catch (err) {
-    return `Error: ${err}`;
-  }
-}
-function checkGotchasForFile(filePath) {
-  const warnings = [];
-  const markdownWarnings = checkFileGotchas(filePath);
-  try {
-    const gotchas = getActiveGotchas();
-    for (const g of gotchas) {
-      if (filePath.includes(g.filePath) || g.filePath.includes(filePath)) {
-        if (!markdownWarnings.some((w) => w.includes(g.description))) {
-          const icon = g.severity === "critical" ? "\u{1F534}" : g.severity === "high" ? "\u{1F7E0}" : g.severity === "medium" ? "\u{1F7E1}" : "\u{1F7E2}";
-          warnings.push(`${icon} **Known Gotcha**: ${g.description} (${g.severity})`);
-        }
-      }
-    }
-  } catch {
-  }
-  return [.../* @__PURE__ */ new Set([...markdownWarnings, ...warnings])];
-}
-async function syncGotchasToDb() {
-  try {
-    await ensureGotchasSchema();
-    const db = await getDb();
-    const gotchas = getActiveGotchas();
-    let synced = 0;
-    for (const g of gotchas) {
-      const checkStmt = db.prepare(
-        `SELECT id FROM known_gotchas WHERE file_path = ? AND description = ?`
-      );
-      checkStmt.bind([g.filePath, g.description]);
-      const exists = checkStmt.step();
-      checkStmt.free();
-      if (exists) continue;
-      db.run(
-        `INSERT INTO known_gotchas (file_path, description, severity) VALUES (?, ?, ?)`,
-        [g.filePath, g.description, g.severity]
-      );
-      synced++;
-    }
-    saveDb();
-    return { synced };
-  } catch {
-    return { synced: 0 };
-  }
-}
-export {
-  addGotcha,
-  checkGotchasForFile,
-  listGotchas,
-  syncGotchasToDb
-};

package/dist/kumaGraph-UMXZNGYF.js

@@ -1,44 +0,0 @@
-import {
-  addEdge,
-  analyzeImpact,
-  buildFromSessionMemory,
-  formatFlow,
-  formatImpact,
-  getGraphStats,
-  listFederatedReferences,
-  nodeId,
-  queryGraph,
-  recordApiRoute,
-  recordDomainFlow,
-  recordFileDefinition,
-  recordFunctionCall,
-  recordImport,
-  recordTestRelation,
-  resolveFederatedNode,
-  searchGraph,
-  traceFlow,
-  upsertNode
-} from "./chunk-PRUTTZBS.js";
-import "./chunk-3BRBJZ7P.js";
-import "./chunk-E2KFPEBT.js";
-export {
-  addEdge,
-  analyzeImpact,
-  buildFromSessionMemory,
-  formatFlow,
-  formatImpact,
-  getGraphStats,
-  listFederatedReferences,
-  nodeId,
-  queryGraph,
-  recordApiRoute,
-  recordDomainFlow,
-  recordFileDefinition,
-  recordFunctionCall,
-  recordImport,
-  recordTestRelation,
-  resolveFederatedNode,
-  searchGraph,
-  traceFlow,
-  upsertNode
-};

package/dist/kumaMemory-FBJMV77G.js

@@ -1,16 +0,0 @@
-import {
-  formatDecisionTemplate,
-  getProactiveMemories,
-  recordDecision,
-  scoreMemoryRelevance,
-  shouldRecordDecision
-} from "./chunk-L7F67KUP.js";
-import "./chunk-LVKOGXLC.js";
-import "./chunk-E2KFPEBT.js";
-export {
-  formatDecisionTemplate,
-  getProactiveMemories,
-  recordDecision,
-  scoreMemoryRelevance,
-  shouldRecordDecision
-};

package/dist/kumaMiner-XJETL7TL.js

@@ -1,176 +0,0 @@
-import {
-  recordDecision
-} from "./chunk-L7F67KUP.js";
-import "./chunk-LVKOGXLC.js";
-import {
-  recordDecisionLog
-} from "./chunk-3BRBJZ7P.js";
-import "./chunk-E2KFPEBT.js";
-
-// src/engine/kumaMiner.ts
-import fs from "fs";
-import path from "path";
-import { execSync } from "child_process";
-import fastGlob from "fast-glob";
-async function mineHistoricalDecisions(options = {}) {
-  const root = process.cwd();
-  const limit = options.limit || 15;
-  const candidates = [];
-  try {
-    const sinceFlag = options.since ? `--since="${options.since}"` : `--since="1 year"`;
-    const gitCmd = `git log ${sinceFlag} -n 100 --pretty=format:"%h|%an|%ad|%s" --date=short`;
-    const gitOutput = execSync(gitCmd, { cwd: root, encoding: "utf-8", timeout: 15e3 });
-    const keywords = ["fix", "revert", "hack", "workaround", "urgent", "hotfix", "don't touch", "temporary", "deprecated", "workaround"];
-    const lines = gitOutput.split("\n").filter(Boolean);
-    const matchingHashes = [];
-    for (const line of lines) {
-      const parts = line.split("|");
-      if (parts.length < 4) continue;
-      const [hash, author, date, subject] = parts;
-      const lowerSubj = subject.toLowerCase();
-      const matchedKeyword = keywords.find((kw) => lowerSubj.includes(kw));
-      if (matchedKeyword) {
-        matchingHashes.push({ hash, author, date, subject, keyword: matchedKeyword });
-        if (matchingHashes.length >= limit) break;
-      }
-    }
-    let changedFilesMap = /* @__PURE__ */ new Map();
-    if (matchingHashes.length > 0) {
-      try {
-        const hashesStr = matchingHashes.map((h) => h.hash).join(" ");
-        const batchOutput = execSync(
-          `git show --name-only --oneline ${hashesStr} 2>/dev/null | head -200`,
-          { cwd: root, encoding: "utf-8", timeout: 1e4, maxBuffer: 256 * 1024 }
-        );
-        let currentHash = "";
-        const files = [];
-        for (const line of batchOutput.split("\n")) {
-          if (matchingHashes.find((h) => line.startsWith(h.hash))) {
-            if (currentHash && files.length > 0) {
-              changedFilesMap.set(currentHash, files.slice(0, 3).join(", "));
-            }
-            currentHash = line.split(" ")[0];
-            files.length = 0;
-          } else if (line.trim() && !line.startsWith("diff")) {
-            files.push(line.trim());
-          }
-        }
-        if (currentHash && files.length > 0) {
-          changedFilesMap.set(currentHash, files.slice(0, 3).join(", "));
-        }
-      } catch {
-      }
-    }
-    for (const { hash, author, date, subject, keyword: matchedKeyword } of matchingHashes) {
-      let changedFiles = changedFilesMap.get(hash) || "";
-      if (!changedFiles) {
-        try {
-          changedFiles = execSync(`git show --name-only --oneline ${hash}`, { cwd: root, encoding: "utf-8", timeout: 5e3 }).split("\n").slice(1).filter(Boolean).slice(0, 3).join(", ");
-        } catch {
-        }
-        candidates.push({
-          id: `git-${hash}`,
-          type: "git_commit",
-          title: `[Git Commit] ${subject}`,
-          context: `Commit ${hash} by ${author} on ${date}.${changedFiles ? ` Files touched: ${changedFiles}` : ""}`,
-          rationale: `Historical signal pattern "${matchedKeyword}" found in commit message.`,
-          commitHash: hash,
-          pattern: matchedKeyword
-        });
-        if (candidates.length >= limit) break;
-      }
-    }
-  } catch {
-  }
-  if (candidates.length < limit) {
-    try {
-      const scopePattern = options.scope ? `**/*${options.scope}*.*` : "**/*.{ts,js,py,go,rs,java,md}";
-      const files = await fastGlob(scopePattern, {
-        cwd: root,
-        ignore: ["node_modules/**", "dist/**", ".kuma/**", ".git/**", "coverage/**"],
-        onlyFiles: true
-      });
-      const commentPatterns = [
-        { tag: "HACK", regex: /\/\/\s*HACK:?\s*(.*)|#\s*HACK:?\s*(.*)/i },
-        { tag: "FIXME", regex: /\/\/\s*FIXME:?\s*(.*)|#\s*FIXME:?\s*(.*)/i },
-        { tag: "TODO", regex: /\/\/\s*TODO:?\s*(.*)|#\s*TODO:?\s*(.*)/i },
-        { tag: "XXX", regex: /\/\/\s*XXX:?\s*(.*)|#\s*XXX:?\s*(.*)/i },
-        { tag: "WARNING", regex: /\/\/\s*WARNING:?\s*(.*)|#\s*WARNING:?\s*(.*)/i }
-      ];
-      for (const file of files.slice(0, 50)) {
-        if (candidates.length >= limit) break;
-        const fullPath = path.join(root, file);
-        if (!fs.existsSync(fullPath)) continue;
-        const content = fs.readFileSync(fullPath, "utf-8");
-        const lines = content.split("\n");
-        for (let i = 0; i < lines.length; i++) {
-          const l = lines[i];
-          for (const cp of commentPatterns) {
-            const match = cp.regex.exec(l);
-            if (match) {
-              const text = (match[1] || match[2] || l).trim();
-              candidates.push({
-                id: `comment-${file}-${i + 1}`,
-                type: "inline_comment",
-                title: `[${cp.tag}] ${file}:${i + 1}`,
-                context: `Inline comment marker "${cp.tag}" found in file "${file}" at line ${i + 1}.`,
-                rationale: text || l.trim(),
-                filePath: file,
-                lineNumber: i + 1,
-                pattern: cp.tag
-              });
-              if (candidates.length >= limit) break;
-            }
-          }
-          if (candidates.length >= limit) break;
-        }
-      }
-    } catch {
-    }
-  }
-  if (options.confirm && candidates.length > 0) {
-    let recordedCount = 0;
-    for (const c of candidates) {
-      await recordDecisionLog({
-        title: c.title,
-        context: c.context,
-        rationale: c.rationale,
-        outcome: `Mined from ${c.type} (${c.pattern})`,
-        status: "proposed"
-      });
-      await recordDecision({
-        title: c.title,
-        context: c.context,
-        options: [],
-        rationale: c.rationale,
-        outcome: `Mined from ${c.type}`,
-        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-      });
-      recordedCount++;
-    }
-    return `\u26CF\uFE0F **Mined & Recorded ${recordedCount} Decisions** into decision log & graph.
-Use \`kuma_memory({ action: 'decision_log' })\` to view all active & proposed decisions.`;
-  }
-  if (candidates.length === 0) {
-    return "\u26CF\uFE0F **Decision Mining**: No significant historical decision markers (HACK/FIXME/git fix) found for the requested scope.";
-  }
-  const report = [
-    `\u26CF\uFE0F **Decision Mining Candidates** (${candidates.length} candidate(s) found)`,
-    "\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501",
-    "Review these draft historical decisions mined from git history & inline comments:",
-    ""
-  ];
-  candidates.forEach((c, idx) => {
-    report.push(`**${idx + 1}. ${c.title}**`);
-    report.push(`  \u2022 **Type**: \`${c.type}\` | **Signal**: \`${c.pattern}\``);
-    report.push(`  \u2022 **Context**: ${c.context}`);
-    report.push(`  \u2022 **Rationale**: ${c.rationale}`);
-    report.push("");
-  });
-  report.push("\u{1F4A1} *To accept and record these mined decisions into knowledge graph & decision.md:*");
-  report.push(`Run: \`kuma_memory({ action: 'mine', confirm: true${options.scope ? `, scope: '${options.scope}'` : ""} })\``);
-  return report.join("\n");
-}
-export {
-  mineHistoricalDecisions
-};

package/dist/kumaPolicyEngine-2QDJDLM7.js

@@ -1,311 +0,0 @@
-import {
-  sessionMemory
-} from "./chunk-LVKOGXLC.js";
-import {
-  getProjectRoot
-} from "./chunk-E2KFPEBT.js";
-
-// src/engine/kumaPolicyEngine.ts
-import fs from "fs";
-import path from "path";
-var DEFAULT_POLICY_CONFIG = {
-  version: 1,
-  name: "Kuma Default Security Policy",
-  description: "Default safety policy for AI coding agents",
-  rules: [
-    {
-      id: "block-rm-rf",
-      description: "Block recursive force deletion",
-      severity: "error",
-      patterns: ["rm -rf", "rm -fr", "rm --recursive --force"],
-      action: "block",
-      requireOverride: true
-    },
-    {
-      id: "block-git-force-push",
-      description: "Block force push to git",
-      severity: "error",
-      patterns: ["git push --force", "git push -f"],
-      action: "block",
-      requireOverride: true
-    },
-    {
-      id: "block-npm-publish",
-      description: "Block package publishing",
-      severity: "error",
-      patterns: ["npm publish", "yarn publish", "pnpm publish"],
-      action: "block",
-      requireOverride: true
-    },
-    {
-      id: "block-pipe-to-shell",
-      description: "Block curl/wget pipe to shell",
-      severity: "error",
-      patterns: ["curl | bash", "curl | sh", "wget -O - | bash", "curl | sudo"],
-      action: "block",
-      requireOverride: true
-    },
-    {
-      id: "warn-destructive-db",
-      description: "Warn about destructive database operations",
-      severity: "warning",
-      patterns: ["DROP DATABASE", "DROP TABLE", "TRUNCATE", "DELETE FROM"],
-      action: "warn"
-    },
-    {
-      id: "block-prod-deploy",
-      description: "Block production deployments without override",
-      severity: "error",
-      patterns: ["deploy --production", "deploy --prod", "deploy:production"],
-      action: "block",
-      requireOverride: true
-    }
-  ],
-  block_commands: [
-    "rm -rf",
-    "rm -fr",
-    "git push --force",
-    "git push -f",
-    "npm publish",
-    "yarn publish",
-    "pnpm publish",
-    "curl | bash",
-    "curl | sh"
-  ],
-  never_touch: [
-    ".env",
-    ".env.local",
-    ".env.production",
-    ".env.development",
-    "package-lock.json",
-    "yarn.lock",
-    "pnpm-lock.yaml",
-    "node_modules/**"
-  ]
-};
-function loadPolicyConfig() {
-  try {
-    const root = getProjectRoot();
-    const policyPath = path.join(root, ".kuma", "POLICY.json");
-    if (fs.existsSync(policyPath)) {
-      const content = fs.readFileSync(policyPath, "utf-8");
-      const config = JSON.parse(content);
-      return { ...DEFAULT_POLICY_CONFIG, ...config };
-    }
-    const ymlPath = path.join(root, ".kuma", "policy.yml");
-    if (fs.existsSync(ymlPath)) {
-      console.error("[PolicyEngine] Found legacy policy.yml \u2014 consider migrating to POLICY.json");
-    }
-  } catch (err) {
-    console.error(`[PolicyEngine] Failed to load policy config: ${err}`);
-  }
-  return DEFAULT_POLICY_CONFIG;
-}
-function savePolicyConfig(config) {
-  try {
-    const root = getProjectRoot();
-    const policyPath = path.join(root, ".kuma", "POLICY.json");
-    const dir = path.dirname(policyPath);
-    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
-    fs.writeFileSync(policyPath, JSON.stringify(config, null, 2), "utf-8");
-    return `\u2705 Policy config saved to .kuma/POLICY.json (${config.rules.length} rules)`;
-  } catch (err) {
-    return `\u274C Failed to save policy: ${err}`;
-  }
-}
-function evaluateCommand(command) {
-  const config = loadPolicyConfig();
-  const warnings = [];
-  const cmdLower = command.toLowerCase();
-  for (const rule of config.rules) {
-    const matches = rule.patterns.some((p) => cmdLower.includes(p.toLowerCase()));
-    if (!matches) continue;
-    if (rule.action === "block" || rule.severity === "error") {
-      return {
-        allowed: false,
-        blockedBy: rule,
-        warnings,
-        requiresOverride: rule.requireOverride ?? false,
-        message: `\u26D4 Policy violation: "${rule.description}" (rule: ${rule.id})`
-      };
-    }
-    if (rule.action === "warn") {
-      warnings.push(rule);
-    }
-  }
-  for (const cmd of config.block_commands || []) {
-    if (cmdLower.includes(cmd.toLowerCase())) {
-      return {
-        allowed: false,
-        blockedBy: {
-          id: "block-command",
-          description: `Blocked command: ${cmd}`,
-          severity: "error",
-          patterns: [cmd],
-          action: "block",
-          requireOverride: true
-        },
-        warnings,
-        requiresOverride: true,
-        message: `\u26D4 Command matches blocked pattern: "${cmd}"`
-      };
-    }
-  }
-  return {
-    allowed: true,
-    blockedBy: null,
-    warnings,
-    requiresOverride: false,
-    message: warnings.length > 0 ? `\u26A0\uFE0F Command allowed with ${warnings.length} warning(s)` : "\u2705 Command allowed by policy"
-  };
-}
-function evaluateFilePath(filePath) {
-  const config = loadPolicyConfig();
-  const filesToCheck = config.never_touch || DEFAULT_POLICY_CONFIG.never_touch || [];
-  for (const pattern of filesToCheck) {
-    if (matchesGlob(pattern, filePath)) {
-      return {
-        allowed: false,
-        blockedBy: {
-          id: "never-touch",
-          description: `File matches never_touch pattern: ${pattern}`,
-          severity: "error",
-          patterns: [pattern],
-          action: "block",
-          requireOverride: true
-        },
-        warnings: [],
-        requiresOverride: true,
-        message: `\u26D4 File "${filePath}" is protected by never_touch policy (pattern: ${pattern}). Use kuma_safety({ action: 'override' }) to bypass.`
-      };
-    }
-  }
-  return {
-    allowed: true,
-    blockedBy: null,
-    warnings: [],
-    requiresOverride: false,
-    message: "\u2705 File allowed by policy"
-  };
-}
-function evaluateDatabaseAction(action) {
-  const cmdLower = action.toLowerCase();
-  if ((cmdLower.includes("drop") || cmdLower.includes("truncate")) && (cmdLower.includes("database") || cmdLower.includes("table") || cmdLower.includes("schema"))) {
-    return {
-      allowed: false,
-      blockedBy: {
-        id: "block-destructive-db",
-        description: "Destructive database operation blocked",
-        severity: "error",
-        patterns: ["DROP DATABASE", "DROP TABLE", "TRUNCATE", "DELETE FROM"],
-        action: "block",
-        requireOverride: true
-      },
-      warnings: [],
-      requiresOverride: true,
-      message: `\u26D4 Destructive database action blocked: "${action}". Use kuma_safety({ action: 'override' }) with a clear reason.`
-    };
-  }
-  return {
-    allowed: true,
-    blockedBy: null,
-    warnings: [],
-    requiresOverride: false,
-    message: "\u2705 Database action allowed by policy"
-  };
-}
-async function processOverride(request) {
-  const { recordAudit } = await import("./safetyAudit-O45SPNTS.js");
-  await recordAudit({
-    timestamp: Math.floor(Date.now() / 1e3),
-    toolName: request.toolName,
-    action: "policy_override",
-    filePath: request.filePath,
-    riskLevel: "high",
-    policyViolations: 1,
-    allowed: true,
-    durationMs: 0,
-    metadata: {
-      override: true,
-      reason: request.reason,
-      command: request.command
-    }
-  });
-  sessionMemory.recordToolCall("kuma_policy_override", {
-    toolName: request.toolName,
-    reason: request.reason,
-    filePath: request.filePath,
-    command: request.command
-  });
-  return [
-    `\u26A0\uFE0F **Policy Override** \u2014 ${request.toolName}`,
-    `\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501`,
-    "",
-    `\u{1F4DD} Reason: ${request.reason}`,
-    request.filePath ? `\u{1F4C4} File: ${request.filePath}` : "",
-    request.command ? `\u{1F4BB} Command: ${request.command}` : "",
-    "",
-    "\u{1F534} This override is recorded in the safety audit trail.",
-    "\u{1F534} Overrides reduce project safety \u2014 use sparingly."
-  ].filter(Boolean).join("\n");
-}
-function formatPolicyStatus() {
-  const config = loadPolicyConfig();
-  const lines = [
-    "\u{1F4DC} **Policy-as-Code Engine**",
-    "\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501",
-    "",
-    `\u{1F4CB} Policy: ${config.name}`,
-    `\u{1F522} Version: ${config.version}`,
-    `\u{1F4DD} Rules: ${config.rules.length}`,
-    "",
-    "**Rules:**"
-  ];
-  for (const rule of config.rules) {
-    const icon = rule.action === "block" ? "\u{1F534}" : rule.action === "warn" ? "\u{1F7E1}" : "\u{1F7E2}";
-    const override = rule.requireOverride ? " \u{1F511} override" : "";
-    lines.push(`  ${icon} [${rule.action}] ${rule.description}${override}`);
-    lines.push(`     Patterns: ${rule.patterns.slice(0, 3).join(", ")}`);
-  }
-  const neverTouch = config.never_touch || [];
-  if (neverTouch.length > 0) {
-    lines.push("", "**Protected Files (never_touch):**");
-    for (const p of neverTouch) {
-      lines.push(`  \u{1F6E1}\uFE0F ${p}`);
-    }
-  }
-  return lines.join("\n");
-}
-function matchesGlob(pattern, filePath) {
-  const normalizedPattern = pattern.replace(/\\/g, "/");
-  const normalizedPath = filePath.replace(/\\/g, "/");
-  let regexStr = "^";
-  for (let i = 0; i < normalizedPattern.length; i++) {
-    const ch = normalizedPattern[i];
-    if (ch === "*" && normalizedPattern[i + 1] === "*" && normalizedPattern[i + 2] === "/") {
-      regexStr += "(.+/)?";
-      i += 2;
-    } else if (ch === "*") {
-      regexStr += "[^/]*";
-    } else if (ch === "?") {
-      regexStr += "[^/]";
-    } else {
-      regexStr += ch.replace(/[.+^${}()|[\]\\]/g, "\\$&");
-    }
-  }
-  regexStr += "$";
-  try {
-    return new RegExp(regexStr).test(normalizedPath);
-  } catch {
-    return false;
-  }
-}
-export {
-  evaluateCommand,
-  evaluateDatabaseAction,
-  evaluateFilePath,
-  formatPolicyStatus,
-  loadPolicyConfig,
-  processOverride,
-  savePolicyConfig
-};