@red-codes/agentguard 1.0.0 → 1.1.1

package/dist/commands/status.js

@@ -0,0 +1,212 @@
+// agentguard status — quick health check for AgentGuard governance runtime
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { RESET, BOLD, DIM, FG } from '../colors.js';
+import { findDefaultPolicy } from '../policy-resolver.js';
+import { detectRtk } from '@red-codes/core';
+const HOOK_MARKER = 'claude-hook';
+export async function status(args) {
+    const quiet = args.includes('--quiet') || args.includes('-q');
+    const checks = {
+        hooks: checkHooksInstalled(),
+        policy: checkPolicyFound(),
+        dirs: checkDirsExist(),
+    };
+    const allOk = checks.hooks.ok && checks.policy.ok && checks.dirs.ok;
+    if (quiet) {
+        // Machine-readable: exit 0 if all checks pass, 1 otherwise
+        if (!allOk) {
+            process.stderr.write('AgentGuard: not ready\n');
+            return 1;
+        }
+        process.stderr.write('AgentGuard: ready\n');
+        return 0;
+    }
+    process.stderr.write('\n');
+    process.stderr.write(`  ${BOLD}AgentGuard Status${RESET}\n\n`);
+    // Hooks
+    printCheck(checks.hooks.ok, 'Claude Code hooks', checks.hooks.detail);
+    // Hook integrity (informational — does not affect exit code)
+    const integrityCheck = await checkHookIntegrity();
+    const integrityIcon = integrityCheck.result === 'verified'
+        ? `${FG.green}🛡${RESET}`
+        : integrityCheck.result === 'tampered'
+            ? `${FG.red}⚠${RESET}`
+            : `${DIM}○${RESET}`;
+    process.stderr.write(`  ${integrityIcon}  Hook integrity ${DIM}${integrityCheck.detail}${RESET}\n`);
+    // Policy
+    printCheck(checks.policy.ok, 'Policy file', checks.policy.detail);
+    // Policy trust (informational — does not affect exit code)
+    const policyTrustCheck = await checkPolicyTrust();
+    const policyTrustIcon = policyTrustCheck.ok ? `${FG.green}✓${RESET}` : `${DIM}○${RESET}`;
+    process.stderr.write(`  ${policyTrustIcon}  Policy trust ${DIM}${policyTrustCheck.detail}${RESET}\n`);
+    // Denial insights (informational — does not affect exit code)
+    const denialInsightsCheck = await checkDenialInsights();
+    const denialInsightsIcon = `${DIM}○${RESET}`;
+    process.stderr.write(`  ${denialInsightsIcon}  Denial insights ${DIM}${denialInsightsCheck.detail}${RESET}\n`);
+    // Directories
+    printCheck(checks.dirs.ok, 'Event directories', checks.dirs.detail);
+    // Token optimization (optional — does not affect exit code)
+    const rtkCheck = checkRtkInstalled();
+    const rtkIcon = rtkCheck.ok ? `${FG.cyan}⚡${RESET}` : `${DIM}○${RESET}`;
+    process.stderr.write(`  ${rtkIcon}  Token optimization ${DIM}${rtkCheck.detail}${RESET}\n`);
+    process.stderr.write('\n');
+    if (allOk) {
+        process.stderr.write(`  ${FG.green}${BOLD}AgentGuard is active.${RESET} ${DIM}All tool calls are governed.${RESET}\n`);
+    }
+    else {
+        process.stderr.write(`  ${FG.yellow}${BOLD}AgentGuard is not fully configured.${RESET} ${DIM}Run "agentguard claude-init" to set up.${RESET}\n`);
+    }
+    process.stderr.write('\n');
+    return allOk ? 0 : 1;
+}
+function printCheck(ok, label, detail) {
+    const icon = ok ? `${FG.green}✓${RESET}` : `${FG.red}✗${RESET}`;
+    process.stderr.write(`  ${icon}  ${label} ${DIM}${detail}${RESET}\n`);
+}
+function checkHooksInstalled() {
+    // Check local settings first, then global
+    const localPath = join(process.cwd(), '.claude', 'settings.json');
+    const globalPath = join(homedir(), '.claude', 'settings.json');
+    for (const settingsPath of [localPath, globalPath]) {
+        if (existsSync(settingsPath)) {
+            try {
+                const settings = JSON.parse(readFileSync(settingsPath, 'utf8'));
+                const preToolUse = settings?.hooks?.PreToolUse || [];
+                const hasHook = preToolUse.some((entry) => {
+                    const hooks = entry.hooks || [];
+                    return hooks.some((h) => h.command && h.command.includes(HOOK_MARKER));
+                });
+                if (hasHook) {
+                    const location = settingsPath === localPath ? 'local' : 'global';
+                    return { ok: true, detail: `(${location} .claude/settings.json)` };
+                }
+            }
+            catch {
+                // Continue to next path
+            }
+        }
+    }
+    return { ok: false, detail: '(not found — run "agentguard claude-init")' };
+}
+function checkPolicyFound() {
+    const policyPath = findDefaultPolicy();
+    if (policyPath) {
+        return { ok: true, detail: `(${policyPath})` };
+    }
+    return { ok: false, detail: '(no agentguard.yaml found)' };
+}
+function checkRtkInstalled() {
+    try {
+        const rtk = detectRtk();
+        if (rtk.available) {
+            return {
+                ok: true,
+                detail: `rtk${rtk.version ? ` v${rtk.version}` : ''} (60-90% token savings)`,
+            };
+        }
+    }
+    catch {
+        // Detection failure is non-fatal
+    }
+    return { ok: false, detail: '(optional — brew install rtk)' };
+}
+async function checkHookIntegrity() {
+    // Find the same settings.json as checkHooksInstalled — local first, then global
+    const localPath = join(process.cwd(), '.claude', 'settings.json');
+    const globalPath = join(homedir(), '.claude', 'settings.json');
+    let settingsPath = null;
+    for (const candidate of [localPath, globalPath]) {
+        if (existsSync(candidate)) {
+            settingsPath = candidate;
+            break;
+        }
+    }
+    if (settingsPath === null) {
+        return { result: 'hooks_missing', detail: '(hooks not found)' };
+    }
+    try {
+        const { verifyHookIntegrity } = await import('@red-codes/adapters');
+        const result = verifyHookIntegrity(settingsPath);
+        switch (result) {
+            case 'verified':
+                return { result, detail: '(verified — settings.json matches baseline)' };
+            case 'tampered':
+                return { result, detail: '(TAMPERED — run "agentguard claude-init --refresh")' };
+            case 'no_baseline':
+                return { result, detail: '(no baseline — run "agentguard claude-init --refresh")' };
+            case 'hooks_missing':
+                return { result, detail: '(hooks not found)' };
+        }
+    }
+    catch {
+        return { result: 'no_baseline', detail: '(integrity check unavailable)' };
+    }
+}
+function checkDirsExist() {
+    const required = ['.agentguard/events', '.agentguard/decisions'];
+    const missing = required.filter((dir) => !existsSync(join(process.cwd(), dir)));
+    if (missing.length === 0) {
+        return { ok: true, detail: '(.agentguard/)' };
+    }
+    return { ok: false, detail: `(missing: ${missing.join(', ')})` };
+}
+async function checkPolicyTrust() {
+    const policyPath = findDefaultPolicy();
+    if (!policyPath) {
+        return { ok: false, detail: '(no policy to check)' };
+    }
+    try {
+        const { verifyPolicyTrust } = await import('@red-codes/policy');
+        const result = await verifyPolicyTrust(policyPath);
+        switch (result.status) {
+            case 'trusted':
+                return { ok: true, detail: '(trusted)' };
+            case 'untrusted':
+                return { ok: false, detail: '(untrusted — run "agentguard trust")' };
+            case 'content_changed':
+                return { ok: false, detail: '(content changed since trusted — run "agentguard trust")' };
+        }
+    }
+    catch {
+        return { ok: false, detail: '(trust check unavailable)' };
+    }
+}
+async function checkDenialInsights() {
+    try {
+        const { resolveSqlitePath } = await import('@red-codes/storage');
+        const { existsSync: fsExists } = await import('node:fs');
+        const dbPath = resolveSqlitePath({ backend: 'sqlite' });
+        if (!fsExists(dbPath)) {
+            return { detail: '(no session history yet)' };
+        }
+        const BetterSqlite = await import('better-sqlite3');
+        const Database = BetterSqlite.default ?? BetterSqlite;
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const db = new Database(dbPath, { readonly: true });
+        try {
+            const { queryEventsByKindAcrossRuns } = await import('@red-codes/storage');
+            const denials = queryEventsByKindAcrossRuns(db, 'ActionDenied', { sessionLimit: 10 });
+            if (denials.length === 0) {
+                return { detail: '(no denials in recent sessions)' };
+            }
+            const sessionIds = new Set(denials.map((e) => e.runId));
+            return {
+                detail: `(${denials.length} denial${denials.length !== 1 ? 's' : ''} across ${sessionIds.size} session${sessionIds.size !== 1 ? 's' : ''} — run "agentguard learn")`,
+            };
+        }
+        finally {
+            try {
+                db.close();
+            }
+            catch {
+                // ignore close errors
+            }
+        }
+    }
+    catch {
+        return { detail: '(no session history yet)' };
+    }
+}
+//# sourceMappingURL=status.js.map

package/dist/commands/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAc5C,MAAM,WAAW,GAAG,aAAa,CAAC;AAElC,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG;QACb,KAAK,EAAE,mBAAmB,EAAE;QAC5B,MAAM,EAAE,gBAAgB,EAAE;QAC1B,IAAI,EAAE,cAAc,EAAE;KACvB,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IAEpE,IAAI,KAAK,EAAE,CAAC;QACV,2DAA2D;QAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC5C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,oBAAoB,KAAK,MAAM,CAAC,CAAC;IAE/D,QAAQ;IACR,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEtE,6DAA6D;IAC7D,MAAM,cAAc,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAClD,MAAM,aAAa,GACjB,cAAc,CAAC,MAAM,KAAK,UAAU;QAClC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,KAAK,KAAK,EAAE;QACzB,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,UAAU;YACpC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,KAAK,EAAE;YACtB,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;IAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,aAAa,oBAAoB,GAAG,GAAG,cAAc,CAAC,MAAM,GAAG,KAAK,IAAI,CAC9E,CAAC;IAEF,SAAS;IACT,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAElE,2DAA2D;IAC3D,MAAM,gBAAgB,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAClD,MAAM,eAAe,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;IACzF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,eAAe,kBAAkB,GAAG,GAAG,gBAAgB,CAAC,MAAM,GAAG,KAAK,IAAI,CAChF,CAAC;IAEF,8DAA8D;IAC9D,MAAM,mBAAmB,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACxD,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;IAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,kBAAkB,qBAAqB,GAAG,GAAG,mBAAmB,CAAC,MAAM,GAAG,KAAK,IAAI,CACzF,CAAC;IAEF,cAAc;IACd,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEpE,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC;IACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,wBAAwB,GAAG,GAAG,QAAQ,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,CAAC;IAE5F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE3B,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,KAAK,GAAG,IAAI,wBAAwB,KAAK,IAAI,GAAG,+BAA+B,KAAK,IAAI,CACjG,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,MAAM,GAAG,IAAI,sCAAsC,KAAK,IAAI,GAAG,0CAA0C,KAAK,IAAI,CAC3H,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,UAAU,CAAC,EAAW,EAAE,KAAa,EAAE,MAAc;IAC5D,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC;IAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,GAAG,MAAM,GAAG,KAAK,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,mBAAmB;IAC1B,0CAA0C;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAE/D,KAAK,MAAM,YAAY,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;QACnD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAa,CAAC;gBAC5E,MAAM,UAAU,GAAG,QAAQ,EAAE,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC;gBACrD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;oBACxC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;oBAChC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;gBACzE,CAAC,CAAC,CAAC;gBACH,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,QAAQ,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;oBACjE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,QAAQ,yBAAyB,EAAE,CAAC;gBACrE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACvC,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,UAAU,GAAG,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,iBAAiB;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB;aAC7E,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,kBAAkB;IAI/B,gFAAgF;IAChF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAE/D,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,KAAK,MAAM,SAAS,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,YAAY,GAAG,SAAS,CAAC;YACzB,MAAM;QACR,CAAC;IACH,CAAC;IAED,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAClE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACjD,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,UAAU;gBACb,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;YAC3E,KAAK,UAAU;gBACb,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;YACnF,KAAK,aAAa;gBAChB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;YACtF,KAAK,eAAe;gBAClB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,QAAQ,GAAG,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAChF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACvC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACnD,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,SAAS;gBACZ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YAC3C,KAAK,WAAW;gBACd,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;YACvE,KAAK,iBAAiB;gBACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0DAA0D,EAAE,CAAC;QAC7F,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACjE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QAChD,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,IAAI,YAAY,CAAC;QACtD,8DAA8D;QAC9D,MAAM,EAAE,GAAG,IAAK,QAAgB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7D,IAAI,CAAC;YACH,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAC3E,MAAM,OAAO,GAAG,2BAA2B,CAAC,EAAE,EAAE,cAAc,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;YAEtF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;YACvD,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACxD,OAAO;gBACL,MAAM,EAAE,IAAI,OAAO,CAAC,MAAM,UAAU,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,UAAU,CAAC,IAAI,WAAW,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,4BAA4B;aACrK,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAChD,CAAC;AACH,CAAC"}

package/dist/commands/traces.d.ts

@@ -0,0 +1,24 @@
+import type { PolicyTraceEvent } from '../tui.js';
+import type { StorageConfig } from '@red-codes/storage';
+interface TraceSummary {
+    totalEvaluations: number;
+    allowed: number;
+    denied: number;
+    avgDurationMs: number | null;
+    actionTypes: Record<string, {
+        allowed: number;
+        denied: number;
+    }>;
+    topMatchedRules: Array<{
+        rule: string;
+        policy: string;
+        matchCount: number;
+    }>;
+    phaseBreakdown: Record<string, number>;
+}
+declare function computeSummary(traces: PolicyTraceEvent[]): TraceSummary;
+export declare function renderTracesSummary(summary: TraceSummary): string;
+export { computeSummary };
+export type { TraceSummary };
+export declare function traces(args: string[], storageConfig?: StorageConfig): Promise<number>;
+//# sourceMappingURL=traces.d.ts.map

package/dist/commands/traces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"traces.d.ts","sourceRoot":"","sources":["../../src/commands/traces.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AA2DxD,UAAU,YAAY;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,eAAe,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,iBAAS,cAAc,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,YAAY,CA2DhE;AAoBD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAiEjE;AAMD,OAAO,EAAE,cAAc,EAAE,CAAC;AAC1B,YAAY,EAAE,YAAY,EAAE,CAAC;AAE7B,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,aAAa,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAwH3F"}

package/dist/commands/traces.js

@@ -0,0 +1,282 @@
+// CLI command: agentguard traces — display policy evaluation traces for a run.
+// Supports filtering by action type and decision, summary statistics, and JSON output.
+// Uses SQLite storage backend.
+import { parseArgs } from '../args.js';
+import { renderPolicyTraces } from '../tui.js';
+function isPolicyTraceEvent(e) {
+    return e.kind === 'PolicyTraceRecorded';
+}
+// ---------------------------------------------------------------------------
+// Trace filtering
+// ---------------------------------------------------------------------------
+function filterTraces(traces, actionFilter, decisionFilter) {
+    let result = traces;
+    if (actionFilter) {
+        const pattern = actionFilter.toLowerCase();
+        result = result.filter((t) => {
+            const actionType = t.actionType.toLowerCase();
+            // Support prefix matching (e.g., "git" matches "git.push", "git.commit")
+            return actionType === pattern || actionType.startsWith(pattern + '.');
+        });
+    }
+    if (decisionFilter) {
+        const decision = decisionFilter.toLowerCase();
+        result = result.filter((t) => t.decision.toLowerCase() === decision);
+    }
+    return result;
+}
+// ---------------------------------------------------------------------------
+// JSON output
+// ---------------------------------------------------------------------------
+function formatTracesJson(traces) {
+    const summary = computeSummary(traces);
+    return JSON.stringify({
+        totalEvaluations: traces.length,
+        summary,
+        traces: traces.map((t) => ({
+            actionType: t.actionType,
+            target: t.target,
+            decision: t.decision,
+            phaseThatMatched: t.phaseThatMatched,
+            totalRulesChecked: t.totalRulesChecked,
+            durationMs: t.durationMs,
+            rulesEvaluated: t.rulesEvaluated,
+        })),
+    }, null, 2);
+}
+function computeSummary(traces) {
+    let allowed = 0;
+    let denied = 0;
+    let totalDuration = 0;
+    let durationCount = 0;
+    const actionTypes = {};
+    const ruleMatchCounts = {};
+    const phaseBreakdown = {};
+    for (const trace of traces) {
+        if (trace.decision === 'allow')
+            allowed++;
+        else
+            denied++;
+        if (trace.durationMs !== undefined) {
+            totalDuration += trace.durationMs;
+            durationCount++;
+        }
+        // Action type breakdown
+        if (!actionTypes[trace.actionType]) {
+            actionTypes[trace.actionType] = { allowed: 0, denied: 0 };
+        }
+        if (trace.decision === 'allow')
+            actionTypes[trace.actionType].allowed++;
+        else
+            actionTypes[trace.actionType].denied++;
+        // Phase breakdown
+        const phase = trace.phaseThatMatched || 'none';
+        phaseBreakdown[phase] = (phaseBreakdown[phase] || 0) + 1;
+        // Rule match counting
+        const rules = trace.rulesEvaluated || [];
+        for (const rule of rules) {
+            if (rule.outcome === 'match') {
+                const key = `${rule.policyName}#${rule.ruleIndex}`;
+                if (!ruleMatchCounts[key]) {
+                    const pattern = Array.isArray(rule.actionPattern)
+                        ? rule.actionPattern.join(', ')
+                        : rule.actionPattern;
+                    ruleMatchCounts[key] = { rule: `[${rule.effect}] ${pattern}`, policy: key, count: 0 };
+                }
+                ruleMatchCounts[key].count++;
+            }
+        }
+    }
+    const topMatchedRules = Object.values(ruleMatchCounts)
+        .sort((a, b) => b.count - a.count)
+        .slice(0, 5)
+        .map((r) => ({ rule: r.rule, policy: r.policy, matchCount: r.count }));
+    return {
+        totalEvaluations: traces.length,
+        allowed,
+        denied,
+        avgDurationMs: durationCount > 0 ? totalDuration / durationCount : null,
+        actionTypes,
+        topMatchedRules,
+        phaseBreakdown,
+    };
+}
+// ---------------------------------------------------------------------------
+// Summary rendering
+// ---------------------------------------------------------------------------
+const ANSI = {
+    reset: '\x1b[0m',
+    bold: '\x1b[1m',
+    dim: '\x1b[2m',
+    red: '\x1b[31m',
+    green: '\x1b[32m',
+    gray: '\x1b[90m',
+};
+const ICONS = {
+    allowed: '\u2713', // ✓
+    denied: '\u2717', // ✗
+};
+export function renderTracesSummary(summary) {
+    const lines = [];
+    lines.push('');
+    lines.push(`  ${ANSI.bold}Trace Summary${ANSI.reset} ${ANSI.dim}(${summary.totalEvaluations} evaluations)${ANSI.reset}`);
+    lines.push(`  ${ANSI.dim}${'─'.repeat(60)}${ANSI.reset}`);
+    // Decision breakdown
+    const allowPct = summary.totalEvaluations > 0
+        ? ((summary.allowed / summary.totalEvaluations) * 100).toFixed(0)
+        : '0';
+    const denyPct = summary.totalEvaluations > 0
+        ? ((summary.denied / summary.totalEvaluations) * 100).toFixed(0)
+        : '0';
+    lines.push(`  ${ANSI.green}${ICONS.allowed} Allowed:${ANSI.reset} ${summary.allowed} (${allowPct}%)  ${ANSI.red}${ICONS.denied} Denied:${ANSI.reset} ${summary.denied} (${denyPct}%)`);
+    if (summary.avgDurationMs !== null) {
+        lines.push(`  ${ANSI.dim}Avg evaluation time: ${summary.avgDurationMs.toFixed(2)}ms${ANSI.reset}`);
+    }
+    // Phase breakdown
+    const phases = Object.entries(summary.phaseBreakdown);
+    if (phases.length > 0) {
+        lines.push('');
+        lines.push(`  ${ANSI.bold}Phase Breakdown${ANSI.reset}`);
+        for (const [phase, count] of phases) {
+            const phaseColor = phase === 'deny' ? ANSI.red : phase === 'allow' ? ANSI.green : ANSI.gray;
+            lines.push(`    ${phaseColor}${phase}${ANSI.reset}: ${count}`);
+        }
+    }
+    // Action type breakdown
+    const actionEntries = Object.entries(summary.actionTypes);
+    if (actionEntries.length > 0) {
+        lines.push('');
+        lines.push(`  ${ANSI.bold}Action Types${ANSI.reset}`);
+        for (const [actionType, counts] of actionEntries) {
+            const parts = [];
+            if (counts.allowed > 0)
+                parts.push(`${ANSI.green}${counts.allowed} allowed${ANSI.reset}`);
+            if (counts.denied > 0)
+                parts.push(`${ANSI.red}${counts.denied} denied${ANSI.reset}`);
+            lines.push(`    ${actionType}: ${parts.join(', ')}`);
+        }
+    }
+    // Top matched rules
+    if (summary.topMatchedRules.length > 0) {
+        lines.push('');
+        lines.push(`  ${ANSI.bold}Top Matched Rules${ANSI.reset}`);
+        for (const entry of summary.topMatchedRules) {
+            lines.push(`    ${entry.matchCount}x  ${entry.rule} ${ANSI.dim}(${entry.policy})${ANSI.reset}`);
+        }
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+// ---------------------------------------------------------------------------
+// Public command
+// ---------------------------------------------------------------------------
+export { computeSummary };
+export async function traces(args, storageConfig) {
+    const parsed = parseArgs(args, {
+        boolean: ['--last', '--list', '--summary', '--json', '--help', '-h'],
+        string: ['--action', '--decision', '--store'],
+        alias: { '-a': '--action', '-d': '--decision', '-s': '--summary' },
+    });
+    const showList = parsed.flags['list'] === true;
+    const showLast = parsed.flags['last'] === true;
+    const summaryOnly = parsed.flags['summary'] === true;
+    const jsonOutput = parsed.flags['json'] === true;
+    const actionFilter = parsed.flags['action'];
+    const decisionFilter = parsed.flags['decision'];
+    const targetArg = parsed.positional[0];
+    const config = storageConfig ?? { backend: 'sqlite' };
+    // List runs
+    if (showList || (!targetArg && !showLast)) {
+        const { createStorageBundle } = await import('@red-codes/storage');
+        const storage = await createStorageBundle(config);
+        if (!storage.db) {
+            process.stderr.write('  Error: SQLite storage backend did not initialize database.\n');
+            return 1;
+        }
+        const { listRunIds } = await import('@red-codes/storage');
+        const db = storage.db;
+        const runs = listRunIds(db);
+        storage.close();
+        if (runs.length === 0) {
+            process.stderr.write('\n  \x1b[2mNo runs recorded yet.\x1b[0m\n');
+            process.stderr.write('  Run \x1b[1magentguard guard\x1b[0m to start recording.\n\n');
+            return 0;
+        }
+        process.stderr.write('\n  \x1b[1mRecorded Runs\x1b[0m\n');
+        process.stderr.write(`  \x1b[2m${'─'.repeat(50)}\x1b[0m\n`);
+        for (const id of runs.slice(0, 20)) {
+            process.stderr.write(`  ${id}\n`);
+        }
+        process.stderr.write('\n  Use: agentguard traces <runId> or agentguard traces --last\n\n');
+        return 0;
+    }
+    // Resolve run ID
+    let runId;
+    if (showLast) {
+        const { createStorageBundle } = await import('@red-codes/storage');
+        const storage = await createStorageBundle(config);
+        if (!storage.db) {
+            process.stderr.write('  Error: SQLite storage backend did not initialize database.\n');
+            return 1;
+        }
+        const { getLatestRunId } = await import('@red-codes/storage');
+        const db = storage.db;
+        runId = getLatestRunId(db) ?? undefined;
+        storage.close();
+    }
+    else {
+        runId = targetArg;
+    }
+    if (!runId) {
+        process.stderr.write('\n  \x1b[2mNo runs recorded yet.\x1b[0m\n\n');
+        return 0;
+    }
+    // Load events
+    const { createStorageBundle } = await import('@red-codes/storage');
+    const storage = await createStorageBundle(config);
+    if (!storage.db) {
+        process.stderr.write('  Error: SQLite storage backend did not initialize database.\n');
+        return 1;
+    }
+    const { loadRunEvents } = await import('@red-codes/storage');
+    const db = storage.db;
+    const eventList = loadRunEvents(db, runId);
+    storage.close();
+    // Extract and filter traces
+    let traceEvents = eventList.filter(isPolicyTraceEvent);
+    if (traceEvents.length === 0) {
+        if (jsonOutput) {
+            process.stdout.write(JSON.stringify({ totalEvaluations: 0, traces: [] }, null, 2) + '\n');
+        }
+        else {
+            process.stderr.write(`\n  \x1b[1mRun:\x1b[0m ${runId}\n`);
+            process.stderr.write('\n  \x1b[2mNo policy evaluation traces found for this run.\x1b[0m\n\n');
+        }
+        return 0;
+    }
+    traceEvents = filterTraces(traceEvents, actionFilter, decisionFilter);
+    // JSON output
+    if (jsonOutput) {
+        process.stdout.write(formatTracesJson(traceEvents) + '\n');
+        return 0;
+    }
+    // Terminal output
+    process.stderr.write(`\n  \x1b[1mRun:\x1b[0m ${runId}\n`);
+    if (actionFilter || decisionFilter) {
+        const filters = [];
+        if (actionFilter)
+            filters.push(`action=${actionFilter}`);
+        if (decisionFilter)
+            filters.push(`decision=${decisionFilter}`);
+        process.stderr.write(`  \x1b[2mFilters: ${filters.join(', ')}\x1b[0m\n`);
+    }
+    // Summary
+    const summary = computeSummary(traceEvents);
+    process.stderr.write(renderTracesSummary(summary));
+    // Detailed traces (unless --summary)
+    if (!summaryOnly) {
+        process.stderr.write(renderPolicyTraces(traceEvents));
+    }
+    return 0;
+}
+//# sourceMappingURL=traces.js.map

package/dist/commands/traces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traces.js","sourceRoot":"","sources":["../../src/commands/traces.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,uFAAuF;AACvF,+BAA+B;AAE/B,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAK/C,SAAS,kBAAkB,CAAC,CAAc;IACxC,OAAO,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC;AAC1C,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,SAAS,YAAY,CACnB,MAA0B,EAC1B,YAAqB,EACrB,cAAuB;IAEvB,IAAI,MAAM,GAAG,MAAM,CAAC;IAEpB,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3B,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YAC9C,yEAAyE;YACzE,OAAO,UAAU,KAAK,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,SAAS,gBAAgB,CAAC,MAA0B;IAClD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,gBAAgB,EAAE,MAAM,CAAC,MAAM;QAC/B,OAAO;QACP,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;YACpC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;YACtC,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,cAAc,EAAE,CAAC,CAAC,cAAc;SACjC,CAAC,CAAC;KACJ,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAYD,SAAS,cAAc,CAAC,MAA0B;IAChD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,MAAM,WAAW,GAAwD,EAAE,CAAC;IAC5E,MAAM,eAAe,GAAoE,EAAE,CAAC;IAC5F,MAAM,cAAc,GAA2B,EAAE,CAAC;IAElD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,EAAE,CAAC;;YACrC,MAAM,EAAE,CAAC;QAEd,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACnC,aAAa,IAAI,KAAK,CAAC,UAAU,CAAC;YAClC,aAAa,EAAE,CAAC;QAClB,CAAC;QAED,wBAAwB;QACxB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC5D,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;YAAE,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;;YACnE,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC;QAE5C,kBAAkB;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,gBAAgB,IAAI,MAAM,CAAC;QAC/C,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAEzD,sBAAsB;QACtB,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAC7B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;wBAC/C,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;wBAC/B,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;oBACvB,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBACxF,CAAC;gBACD,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;SACnD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;SACjC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEzE,OAAO;QACL,gBAAgB,EAAE,MAAM,CAAC,MAAM;QAC/B,OAAO;QACP,MAAM;QACN,aAAa,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI;QACvE,WAAW;QACX,eAAe;QACf,cAAc;KACf,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,MAAM,IAAI,GAAG;IACX,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,SAAS;IACd,GAAG,EAAE,UAAU;IACf,KAAK,EAAE,UAAU;IACjB,IAAI,EAAE,UAAU;CACjB,CAAC;AAEF,MAAM,KAAK,GAAG;IACZ,OAAO,EAAE,QAAQ,EAAE,IAAI;IACvB,MAAM,EAAE,QAAQ,EAAE,IAAI;CACvB,CAAC;AAEF,MAAM,UAAU,mBAAmB,CAAC,OAAqB;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,KAAK,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,gBAAgB,gBAAgB,IAAI,CAAC,KAAK,EAAE,CAC7G,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAE1D,qBAAqB;IACrB,MAAM,QAAQ,GACZ,OAAO,CAAC,gBAAgB,GAAG,CAAC;QAC1B,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,GAAG,CAAC;IACV,MAAM,OAAO,GACX,OAAO,CAAC,gBAAgB,GAAG,CAAC;QAC1B,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAChE,CAAC,CAAC,GAAG,CAAC;IAEV,KAAK,CAAC,IAAI,CACR,KAAK,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,YAAY,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,OAAO,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,MAAM,WAAW,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,CAC3K,CAAC;IAEF,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CACR,KAAK,IAAI,CAAC,GAAG,wBAAwB,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CACvF,CAAC;IACJ,CAAC;IAED,kBAAkB;IAClB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,kBAAkB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACzD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5F,KAAK,CAAC,IAAI,CAAC,OAAO,UAAU,GAAG,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1D,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,eAAe,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YACjD,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,WAAW,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC1F,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACrF,KAAK,CAAC,IAAI,CAAC,OAAO,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,oBAAoB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5C,KAAK,CAAC,IAAI,CACR,OAAO,KAAK,CAAC,UAAU,MAAM,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,OAAO,EAAE,cAAc,EAAE,CAAC;AAG1B,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc,EAAE,aAA6B;IACxE,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE;QAC7B,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;QACpE,MAAM,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC;QAC7C,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE;KACnE,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;IACrD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IACjD,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAuB,CAAC;IAClE,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAuB,CAAC;IACtE,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,aAAa,IAAI,EAAE,OAAO,EAAE,QAAiB,EAAE,CAAC;IAE/D,YAAY;IACZ,IAAI,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACvF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC1D,MAAM,EAAE,GAAG,OAAO,CAAC,EAAuC,CAAC;QAC3D,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,EAAE,CAAC;QAEhB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC;YACrF,OAAO,CAAC,CAAC;QACX,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;QAC5D,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;QAC3F,OAAO,CAAC,CAAC;IACX,CAAC;IAED,iBAAiB;IACjB,IAAI,KAAyB,CAAC;IAC9B,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACvF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC9D,MAAM,EAAE,GAAG,OAAO,CAAC,EAAuC,CAAC;QAC3D,KAAK,GAAG,cAAc,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC;QACxC,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,SAAS,CAAC;IACpB,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,cAAc;IACd,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACvF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC7D,MAAM,EAAE,GAAG,OAAO,CAAC,EAAuC,CAAC;IAC3D,MAAM,SAAS,GAAG,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC3C,OAAO,CAAC,KAAK,EAAE,CAAC;IAEhB,4BAA4B;IAC5B,IAAI,WAAW,GAAuB,SAAS,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAE3E,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5F,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,IAAI,CAAC,CAAC;YAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,WAAW,GAAG,YAAY,CAAC,WAAW,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;IAEtE,cAAc;IACd,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,kBAAkB;IAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,IAAI,CAAC,CAAC;IAE1D,IAAI,YAAY,IAAI,cAAc,EAAE,CAAC;QACnC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,YAAY;YAAE,OAAO,CAAC,IAAI,CAAC,UAAU,YAAY,EAAE,CAAC,CAAC;QACzD,IAAI,cAAc;YAAE,OAAO,CAAC,IAAI,CAAC,YAAY,cAAc,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3E,CAAC;IAED,UAAU;IACV,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAEnD,qCAAqC;IACrC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/trust.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Interactive policy trust command.
+ * Reads the policy file, analyzes risks, prompts for confirmation, then records trust.
+ */
+export declare function trust(args: string[]): Promise<number>;
+//# sourceMappingURL=trust.d.ts.map

package/dist/commands/trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../../src/commands/trust.ts"],"names":[],"mappings":"AAsBA;;;GAGG;AACH,wBAAsB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAqI3D"}