@red-codes/agentguard 1.0.0 → 1.1.1

package/dist/session-viewer-html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-viewer-html.js","sourceRoot":"","sources":["../src/session-viewer-html.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,6DAA6D;AAO7D,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,2EAA2E;IAC3E,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,QAAQ,CAAC,EAAU;IAC1B,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;IACvB,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,cAAc,CAAC,EAAU;IAChC,IAAI,EAAE,GAAG,IAAI;QAAE,OAAO,GAAG,EAAE,IAAI,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACzC,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,GAAG,OAAO,GAAG,CAAC;IACxC,OAAO,GAAG,OAAO,KAAK,OAAO,GAAG,EAAE,GAAG,CAAC;AACxC,CAAC;AAOD,MAAM,UAAU,mBAAmB,CACjC,OAAsB,EACtB,OAAwB,EACxB,SAAqC,EACrC,MAA8B,EAC9B,OAA4B;IAE5B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACtF,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE5D,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;IAE3C,+CAA+C;IAC/C,MAAM,YAAY,GAAG,aAAa,CAAC;QACjC,OAAO,EAAE;YACP,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B;QACD,OAAO;QACP,SAAS;QACT,MAAM;QACN,YAAY,EAAE,YAAY,IAAI,IAAI;KACnC,CAAC,CAAC;IAEH,OAAO;;;;;gCAKuB,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wDA4HmB,KAAK;;UAEnD,UAAU,CAAC,SAAS,CAAC;;oBAEX,UAAU,CAAC,QAAQ,CAAC;;;;;;;;0DAQkB,OAAO,CAAC,OAAO,CAAC,YAAY;;;;yEAIb,OAAO,CAAC,OAAO,CAAC,OAAO;;;;yEAIvB,OAAO,CAAC,OAAO,CAAC,MAAM;;;;yEAItB,OAAO,CAAC,mBAAmB;;;;yEAI3B,OAAO,CAAC,WAAW;;;;+DAI7B,OAAO,CAAC,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,MAAM,UAAU,CAAC,OAAO,CAAC,kBAAkB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yCA4CzL,UAAU,CAAC,SAAS,CAAC;;;;;mBAK3C,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA+dvB,CAAC;AACT,CAAC"}

package/dist/templates/ci-only.yaml

@@ -0,0 +1,103 @@
+# AgentGuard Policy — CI-Only
+#
+# Read-only filesystem with test execution allowed. No git mutations, no file
+# writes, no deploys. Designed for CI/CD pipelines where the agent should only
+# build, test, and report — never modify source code or push changes.
+#
+# Best for: CI pipelines, automated review bots, read-only analysis.
+#
+# Scaffolded by: agentguard init --template ci-only
+# Docs: https://github.com/jpleva91/agent-guard#policy
+
+id: ci-only-policy
+name: CI-Only Safety Policy
+description: Read-only with test execution — no mutations, no pushes, no deploys
+severity: 4
+
+rules:
+  # ─── No git mutations ─────────────────────────────────────────────────
+  - action: git.push
+    effect: deny
+    reason: CI pipelines must not push directly
+
+  - action: git.force-push
+    effect: deny
+    reason: Force push prohibited in CI
+
+  - action: git.commit
+    effect: deny
+    reason: CI pipelines must not create commits
+
+  - action: git.reset
+    effect: deny
+    reason: Git reset prohibited in CI
+
+  - action: git.branch.create
+    effect: deny
+    reason: CI pipelines must not create branches
+
+  - action: git.branch.delete
+    effect: deny
+    reason: CI pipelines must not delete branches
+
+  - action: git.merge
+    effect: deny
+    reason: CI pipelines must not merge branches
+
+  # ─── No file mutations ────────────────────────────────────────────────
+  - action: file.write
+    effect: deny
+    reason: CI pipelines must not modify source files
+
+  - action: file.delete
+    effect: deny
+    reason: CI pipelines must not delete files
+
+  - action: file.move
+    effect: deny
+    reason: CI pipelines must not move files
+
+  # ─── No publishing or deployment ──────────────────────────────────────
+  - action: npm.publish
+    effect: deny
+    reason: Publishing must use a dedicated release pipeline
+
+  - action: deploy.trigger
+    effect: deny
+    reason: Deployment must use a dedicated deploy pipeline
+
+  - action: infra.apply
+    effect: deny
+    reason: Infrastructure changes prohibited in CI
+
+  - action: infra.destroy
+    effect: deny
+    reason: Infrastructure destruction prohibited in CI
+
+  # ─── Allowed: read-only and test operations ────────────────────────────
+  - action: file.read
+    effect: allow
+
+  - action: git.diff
+    effect: allow
+
+  - action: git.checkout
+    effect: allow
+
+  - action:
+      - test.run
+      - test.run.unit
+      - test.run.integration
+    effect: allow
+
+  - action: shell.exec
+    effect: allow
+
+  - action: npm.install
+    effect: allow
+
+  - action: npm.script.run
+    effect: allow
+
+  - action: http.request
+    effect: allow

package/dist/templates/development.yaml

@@ -0,0 +1,107 @@
+# AgentGuard Policy — Development
+#
+# Balanced policy for active development. Allows most operations while denying
+# destructive git actions and protecting secrets. A good starting point for
+# teams that want guardrails without excessive restrictions.
+#
+# Best for: team development, feature branches, day-to-day coding with agents.
+#
+# Scaffolded by: agentguard init --template development
+# Docs: https://github.com/jpleva91/agent-guard#policy
+
+id: development-policy
+name: Development Safety Policy
+description: Balanced guardrails for active development — protect branches and secrets
+severity: 3
+
+rules:
+  # ─── Branch protection ────────────────────────────────────────────────
+  # Protect main/master from direct pushes — use feature branches and PRs.
+  - action: git.push
+    effect: deny
+    branches: [main, master, release, production]
+    reason: Direct push to protected branch — use a feature branch
+
+  # Force push is never safe on shared branches.
+  - action: git.force-push
+    effect: deny
+    reason: Force push rewrites shared history
+
+  # ─── Secrets protection ───────────────────────────────────────────────
+  - action: file.write
+    effect: deny
+    target: .env
+    reason: Secrets file must not be modified by agents
+
+  - action: file.write
+    effect: deny
+    target: "*.pem"
+    reason: Certificate files are protected
+
+  - action: file.write
+    effect: deny
+    target: "*.key"
+    reason: Private key files are protected
+
+  # ─── Destructive command protection ────────────────────────────────────
+  - action: shell.exec
+    effect: deny
+    target: rm -rf
+    reason: Recursive delete blocked
+
+  - action: infra.destroy
+    effect: deny
+    reason: Infrastructure destruction requires manual confirmation
+
+  # ─── Blast radius ─────────────────────────────────────────────────────
+  # Limit the scope of changes to prevent runaway modifications.
+  - action: file.write
+    effect: deny
+    limit: 20
+    reason: Blast radius exceeded — max 20 files per action
+
+  # ─── Allowed operations ───────────────────────────────────────────────
+  # Reading is always safe.
+  - action: file.read
+    effect: allow
+
+  # File writes are allowed (subject to blast radius limit above).
+  - action: file.write
+    effect: allow
+
+  # Git operations on non-protected branches.
+  - action: git.push
+    effect: allow
+
+  - action: git.commit
+    effect: allow
+
+  - action: git.diff
+    effect: allow
+
+  - action: git.checkout
+    effect: allow
+
+  - action: git.branch.create
+    effect: allow
+
+  - action: git.merge
+    effect: allow
+
+  # Testing is encouraged.
+  - action:
+      - test.run
+      - test.run.unit
+      - test.run.integration
+    effect: allow
+
+  # Shell commands for builds and scripts.
+  - action: shell.exec
+    effect: allow
+
+  # NPM operations.
+  - action: npm.install
+    effect: allow
+
+  - action: npm.script.run
+    effect: allow

package/dist/templates/permissive.yaml

@@ -0,0 +1,87 @@
+# AgentGuard Policy — Permissive
+#
+# Default-allow with deny rules only for dangerous operations. Gives agents
+# freedom to work while guarding against the most destructive actions.
+#
+# Best for: personal projects, prototyping, trusted development environments.
+#
+# Scaffolded by: agentguard init --template permissive
+# Docs: https://github.com/jpleva91/agent-guard#policy
+
+id: permissive-policy
+name: Permissive Safety Policy
+description: Default-allow with guardrails for dangerous operations only
+severity: 2
+
+rules:
+  # ─── Critical safety only ─────────────────────────────────────────────
+  # These rules catch the most destructive operations that are almost never
+  # intentional when performed by an AI coding agent.
+
+  # Protect main/master from direct pushes.
+  - action: git.push
+    effect: deny
+    branches: [main, master]
+    reason: Direct push to protected branch — use a feature branch
+
+  # Force push rewrites shared history.
+  - action: git.force-push
+    effect: deny
+    reason: Force push rewrites shared history
+
+  # Secrets must never be touched.
+  - action: file.write
+    effect: deny
+    target: .env
+    reason: Secrets file must not be modified
+
+  # Block recursive deletion.
+  - action: shell.exec
+    effect: deny
+    target: rm -rf
+    reason: Recursive delete blocked
+
+  # Block infrastructure destruction.
+  - action: infra.destroy
+    effect: deny
+    reason: Infrastructure destruction requires manual confirmation
+
+  # ─── Everything else is allowed ────────────────────────────────────────
+  - action: file.read
+    effect: allow
+
+  - action: file.write
+    effect: allow
+
+  - action: file.delete
+    effect: allow
+
+  - action: git.push
+    effect: allow
+
+  - action: git.commit
+    effect: allow
+
+  - action: git.diff
+    effect: allow
+
+  - action: git.checkout
+    effect: allow
+
+  - action: git.branch.create
+    effect: allow
+
+  - action: shell.exec
+    effect: allow
+
+  - action:
+      - test.run
+      - test.run.unit
+      - test.run.integration
+    effect: allow
+
+  - action: npm.install
+    effect: allow
+
+  - action: npm.script.run
+    effect: allow

package/dist/templates/strict.yaml

@@ -0,0 +1,112 @@
+# AgentGuard Policy — Strict
+#
+# Maximum guardrails for high-risk environments. Default-deny for all
+# destructive operations. Only read and test operations are allowed by default.
+#
+# Best for: production codebases, security-sensitive projects, regulated environments.
+#
+# Scaffolded by: agentguard init --template strict
+# Docs: https://github.com/jpleva91/agent-guard#policy
+
+id: strict-policy
+name: Strict Safety Policy
+description: Maximum guardrails — deny destructive ops, enforce test-before-push
+severity: 5
+
+rules:
+  # ─── Git safety ───────────────────────────────────────────────────────
+  # All pushes denied — use pull requests instead.
+  - action: git.push
+    effect: deny
+    reason: All pushes denied in strict mode — use pull requests
+
+  # Force push rewrites shared history and is never safe.
+  - action: git.force-push
+    effect: deny
+    reason: Force push rewrites shared history
+
+  # Hard resets discard work; prefer git stash or revert.
+  - action: git.reset
+    effect: deny
+    reason: Git reset is destructive — use revert instead
+
+  # Branch deletion can lose unmerged work.
+  - action: git.branch.delete
+    effect: deny
+    reason: Branch deletion denied in strict mode
+
+  # ─── File safety ──────────────────────────────────────────────────────
+  # Prevent deletion of any files by the agent.
+  - action: file.delete
+    effect: deny
+    reason: File deletion denied in strict mode
+
+  # Secrets and credentials must never be touched.
+  - action: file.write
+    effect: deny
+    target: .env
+    reason: Secrets file modification denied
+
+  - action: file.write
+    effect: deny
+    target: "*.pem"
+    reason: Certificate file modification denied
+
+  - action: file.write
+    effect: deny
+    target: "*.key"
+    reason: Private key file modification denied
+
+  # ─── Shell safety ─────────────────────────────────────────────────────
+  # Block known destructive commands.
+  - action: shell.exec
+    effect: deny
+    target: rm -rf
+    reason: Recursive delete blocked
+
+  - action: shell.exec
+    effect: deny
+    target: "chmod 777"
+    reason: Overly permissive chmod denied
+
+  # ─── Blast radius ─────────────────────────────────────────────────────
+  # Limit the number of files modified in a single action.
+  - action: file.write
+    effect: deny
+    limit: 10
+    reason: Blast radius exceeded — max 10 files per action
+
+  # ─── Package safety ───────────────────────────────────────────────────
+  - action: npm.publish
+    effect: deny
+    reason: Package publishing denied in strict mode
+
+  # ─── Infrastructure ───────────────────────────────────────────────────
+  - action: infra.destroy
+    effect: deny
+    reason: Infrastructure destruction denied
+
+  - action: infra.apply
+    effect: deny
+    reason: Infrastructure changes denied in strict mode
+
+  # ─── Deploy ───────────────────────────────────────────────────────────
+  - action: deploy.trigger
+    effect: deny
+    reason: Deployments denied in strict mode
+
+  # ─── Allowed operations ───────────────────────────────────────────────
+  # Reading files is always safe.
+  - action: file.read
+    effect: allow
+
+  # Running tests is encouraged.
+  - action:
+      - test.run
+      - test.run.unit
+      - test.run.integration
+    effect: allow
+
+  # Viewing diffs is safe.
+  - action: git.diff
+    effect: allow

package/dist/tui.d.ts

@@ -0,0 +1,3 @@
+export type { TuiConfig, PolicyTraceEvent } from '@red-codes/renderers';
+export { renderBanner, renderAction, renderViolations, renderMonitorStatus, renderSimulation, renderDecisionRecord, renderDecisionTable, renderKernelResult, renderActionGraph, renderPolicyTraces, renderEventStream, } from '@red-codes/renderers';
+//# sourceMappingURL=tui.d.ts.map

package/dist/tui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tui.d.ts","sourceRoot":"","sources":["../src/tui.ts"],"names":[],"mappings":"AAEA,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC"}

package/dist/tui.js

@@ -0,0 +1,2 @@
+export { renderBanner, renderAction, renderViolations, renderMonitorStatus, renderSimulation, renderDecisionRecord, renderDecisionTable, renderKernelResult, renderActionGraph, renderPolicyTraces, renderEventStream, } from '@red-codes/renderers';
+//# sourceMappingURL=tui.js.map

package/dist/tui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tui.js","sourceRoot":"","sources":["../src/tui.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC"}

package/package.json

@@ -1,72 +1,61 @@
 {
   "name": "@red-codes/agentguard",
-  "version": "1.0.0",
-  "description": "Runtime governance for AI coding agents — policy enforcement, invariant checking, and audit trails for agent tool calls.",
+  "version": "1.1.1",
+  "description": "Runtime governance for AI coding agents — CLI",
   "type": "module",
+  "license": "Apache-2.0",
+  "private": false,
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
   "bin": {
-    "agentguard": "./dist/cli/bin.js"
+    "agentguard": "./dist/bin.js"
   },
   "files": [
     "dist/",
-    "hooks/",
     "LICENSE",
     "README.md"
   ],
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/jpleva91/agent-guard.git"
+    "url": "https://github.com/AgentGuardHQ/agentguard",
+    "directory": "apps/cli"
   },
-  "homepage": "https://github.com/jpleva91/agent-guard#readme",
-  "bugs": {
-    "url": "https://github.com/jpleva91/agent-guard/issues"
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
   },
-  "author": "jpleva91",
-  "engines": {
-    "node": ">=18"
+  "dependencies": {
+    "commander": "^14.0.3",
+    "pino": "^10.3.1",
+    "chokidar": "^5.0.0"
   },
-  "scripts": {
-    "dev": "node dist/cli/bin.js",
-    "agentguard": "node dist/cli/bin.js",
-    "build:ts": "tsc && tsx esbuild.config.ts",
-    "ts:check": "tsc --noEmit",
-    "test": "node tests/run.js",
-    "ts:test": "vitest run",
-    "ts:test:watch": "vitest",
-    "test:coverage": "c8 --check-coverage --lines 50 node tests/run.js",
-    "lint": "eslint tests/ src/",
-    "lint:fix": "eslint --fix tests/ src/",
-    "format": "prettier --check src/",
-    "format:fix": "prettier --write src/",
-    "prepublishOnly": "npm run build:ts"
+  "optionalDependencies": {
+    "better-sqlite3": "^12.8.0"
   },
-  "keywords": [
-    "agentguard",
-    "ai-governance",
-    "runtime-guardrails",
-    "agent-safety",
-    "policy-enforcement",
-    "invariants",
-    "canonical-events",
-    "audit-trail",
-    "cli",
-    "developer-tools"
-  ],
-  "license": "Apache-2.0",
   "devDependencies": {
-    "@types/node": "^25.4.0",
-    "c8": "^11.0.0",
-    "esbuild": "^0.27.3",
-    "eslint": "^10.0.3",
-    "prettier": "^3.8.1",
-    "terser": "^5.46.0",
-    "tsx": "^4.21.0",
-    "typescript": "^5.9.3",
-    "typescript-eslint": "^8.56.1",
-    "vitest": "^4.0.18"
+    "@types/better-sqlite3": "^7.6.0",
+    "@red-codes/core": "1.0.0",
+    "@red-codes/policy": "0.1.0",
+    "@red-codes/events": "1.0.0",
+    "@red-codes/invariants": "0.1.0",
+    "@red-codes/kernel": "0.1.0",
+    "@red-codes/adapters": "0.1.0",
+    "@red-codes/storage": "0.1.0",
+    "@red-codes/plugins": "0.1.0",
+    "@red-codes/renderers": "0.1.0",
+    "@red-codes/swarm": "0.1.0",
+    "@red-codes/telemetry-client": "0.1.0",
+    "@red-codes/telemetry": "0.1.0"
   },
-  "dependencies": {
-    "chokidar": "^5.0.0",
-    "commander": "^14.0.3",
-    "pino": "^10.3.1"
+  "scripts": {
+    "build": "tsc -b && tsx esbuild.config.ts",
+    "dev": "node dist/bin.js",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "lint": "eslint src/",
+    "ts:check": "tsc --noEmit",
+    "clean": "rm -rf dist"
   }
-}
+}