@red-codes/agentguard 1.0.0 → 1.1.1

package/dist/kernel/replay-engine.js

@@ -1,241 +0,0 @@
-// Replay Engine — reconstructs governance sessions from persisted JSONL event streams.
-//
-// Loads domain events from .agentguard/events/<runId>.jsonl, groups them into
-// action encounters (REQUESTED → ALLOWED/DENIED → EXECUTED/FAILED), and provides
-// a programmatic API for session analysis, comparators, and CLI display.
-import { readFileSync, existsSync, readdirSync } from 'node:fs';
-import { join } from 'node:path';
-import { ACTION_REQUESTED, ACTION_ALLOWED, ACTION_DENIED, ACTION_ESCALATED, ACTION_EXECUTED, ACTION_FAILED, DECISION_RECORDED, SIMULATION_COMPLETED, POLICY_DENIED, INVARIANT_VIOLATION, BLAST_RADIUS_EXCEEDED, MERGE_GUARD_FAILURE, RUN_STARTED, RUN_ENDED, } from '../events/schema.js';
-// ---------------------------------------------------------------------------
-// Constants
-// ---------------------------------------------------------------------------
-const DEFAULT_BASE_DIR = '.agentguard';
-const EVENTS_DIR = 'events';
-/** Event kinds that represent governance violations/denials. */
-const GOVERNANCE_EVENT_KINDS = new Set([
-    POLICY_DENIED,
-    INVARIANT_VIOLATION,
-    BLAST_RADIUS_EXCEEDED,
-    MERGE_GUARD_FAILURE,
-]);
-/** Event kinds that represent action lifecycle decisions. */
-const DECISION_EVENT_KINDS = new Set([ACTION_ALLOWED, ACTION_DENIED]);
-/** Event kinds that represent action execution outcomes. */
-const EXECUTION_EVENT_KINDS = new Set([ACTION_EXECUTED, ACTION_FAILED]);
-// ---------------------------------------------------------------------------
-// JSONL Loading
-// ---------------------------------------------------------------------------
-/**
- * Load domain events from a JSONL file.
- * Each line is a JSON-serialized DomainEvent.
- * Malformed lines are silently skipped.
- */
-export function loadEventsFromJsonl(filePath) {
-    if (!existsSync(filePath)) {
-        return [];
-    }
-    const content = readFileSync(filePath, 'utf8');
-    const events = [];
-    for (const line of content.split('\n')) {
-        const trimmed = line.trim();
-        if (!trimmed)
-            continue;
-        try {
-            events.push(JSON.parse(trimmed));
-        }
-        catch {
-            // Skip malformed lines
-        }
-    }
-    return events;
-}
-/**
- * Resolve the JSONL file path for a given run ID.
- */
-export function resolveEventFilePath(runId, baseDir) {
-    return join(baseDir || DEFAULT_BASE_DIR, EVENTS_DIR, `${runId}.jsonl`);
-}
-/**
- * List all available run IDs that have stored events.
- */
-export function listRunIds(baseDir) {
-    const eventsDir = join(baseDir || DEFAULT_BASE_DIR, EVENTS_DIR);
-    if (!existsSync(eventsDir))
-        return [];
-    return readdirSync(eventsDir)
-        .filter((f) => f.endsWith('.jsonl'))
-        .map((f) => f.replace('.jsonl', ''))
-        .sort()
-        .reverse();
-}
-// ---------------------------------------------------------------------------
-// Event Grouping
-// ---------------------------------------------------------------------------
-/**
- * Group a flat list of events into action encounters.
- * Events are correlated by their position in the stream — each ActionRequested
- * event starts a new encounter, and subsequent events are attached to it until
- * the next ActionRequested.
- */
-function groupEventsIntoActions(events) {
-    const actions = [];
-    let currentActionEvents = [];
-    let actionIndex = 0;
-    function flushAction() {
-        if (currentActionEvents.length === 0)
-            return;
-        const requested = currentActionEvents.find((e) => e.kind === ACTION_REQUESTED) || null;
-        if (!requested) {
-            // No ActionRequested — these are orphan events, skip
-            currentActionEvents = [];
-            return;
-        }
-        const decisionEvent = currentActionEvents.find((e) => DECISION_EVENT_KINDS.has(e.kind)) || null;
-        const executionEvent = currentActionEvents.find((e) => EXECUTION_EVENT_KINDS.has(e.kind)) || null;
-        const simulationEvent = currentActionEvents.find((e) => e.kind === SIMULATION_COMPLETED) || null;
-        const decisionRecordEvent = currentActionEvents.find((e) => e.kind === DECISION_RECORDED) || null;
-        const escalationEvent = currentActionEvents.find((e) => e.kind === ACTION_ESCALATED) || null;
-        const governanceEvents = currentActionEvents.filter((e) => GOVERNANCE_EVENT_KINDS.has(e.kind));
-        const allowed = decisionEvent?.kind === ACTION_ALLOWED;
-        const executed = executionEvent !== null;
-        const succeeded = executionEvent?.kind === ACTION_EXECUTED;
-        actions.push({
-            index: actionIndex++,
-            requestedEvent: requested,
-            decisionEvent,
-            executionEvent,
-            simulationEvent,
-            decisionRecordEvent,
-            escalationEvent,
-            governanceEvents,
-            allowed,
-            executed,
-            succeeded,
-            actionType: requested.actionType || 'unknown',
-            target: requested.target || '',
-        });
-        currentActionEvents = [];
-    }
-    for (const event of events) {
-        if (event.kind === ACTION_REQUESTED && currentActionEvents.length > 0) {
-            flushAction();
-        }
-        currentActionEvents.push(event);
-    }
-    // Flush the last action
-    flushAction();
-    return actions;
-}
-// ---------------------------------------------------------------------------
-// Summary Generation
-// ---------------------------------------------------------------------------
-function buildSummary(events, actions) {
-    const actionTypes = {};
-    const denialReasons = [];
-    let violations = 0;
-    let escalations = 0;
-    let simulationsRun = 0;
-    for (const action of actions) {
-        const type = action.actionType;
-        actionTypes[type] = (actionTypes[type] || 0) + 1;
-        if (!action.allowed && action.decisionEvent) {
-            const reason = action.decisionEvent.reason || 'unknown';
-            denialReasons.push(reason);
-        }
-        violations += action.governanceEvents.length;
-        if (action.escalationEvent)
-            escalations++;
-        if (action.simulationEvent)
-            simulationsRun++;
-    }
-    const timestamps = events.map((e) => e.timestamp);
-    const durationMs = timestamps.length >= 2 ? Math.max(...timestamps) - Math.min(...timestamps) : 0;
-    return {
-        totalActions: actions.length,
-        allowed: actions.filter((a) => a.allowed).length,
-        denied: actions.filter((a) => !a.allowed).length,
-        executed: actions.filter((a) => a.executed).length,
-        failed: actions.filter((a) => a.executed && !a.succeeded).length,
-        violations,
-        escalations,
-        simulationsRun,
-        durationMs,
-        actionTypes,
-        denialReasons,
-    };
-}
-// ---------------------------------------------------------------------------
-// Replay Engine API
-// ---------------------------------------------------------------------------
-/**
- * Load a replay session from a JSONL event file by run ID.
- * Returns null if the file does not exist.
- */
-export function loadReplaySession(runId, options = {}) {
-    const filePath = resolveEventFilePath(runId, options.baseDir);
-    const events = loadEventsFromJsonl(filePath);
-    if (events.length === 0)
-        return null;
-    return buildReplaySession(runId, events);
-}
-/**
- * Build a replay session from an in-memory event array.
- * Useful for testing and when events are already loaded.
- */
-export function buildReplaySession(runId, events) {
-    // Sort events by timestamp for deterministic ordering
-    const sorted = [...events].sort((a, b) => a.timestamp - b.timestamp);
-    const startEvent = sorted.find((e) => e.kind === RUN_STARTED) || null;
-    const endEvent = sorted.find((e) => e.kind === RUN_ENDED) || null;
-    const actions = groupEventsIntoActions(sorted);
-    const summary = buildSummary(sorted, actions);
-    return {
-        runId,
-        events: sorted,
-        actions,
-        summary,
-        startEvent,
-        endEvent,
-    };
-}
-/**
- * Iterator for stepping through action encounters one at a time.
- * Yields ReplayAction objects in chronological order.
- */
-export function* iterateActions(session) {
-    for (const action of session.actions) {
-        yield action;
-    }
-}
-/**
- * Filter a replay session's actions by a predicate.
- * Returns a new session with only matching actions (events are not filtered).
- */
-export function filterActions(session, predicate) {
-    const filteredActions = session.actions.filter(predicate);
-    const summary = buildSummary(session.events, filteredActions);
-    return {
-        ...session,
-        actions: filteredActions,
-        summary,
-    };
-}
-/**
- * Get the most recent run ID from stored events.
- * Returns null if no runs exist.
- */
-export function getLatestRunId(baseDir) {
-    const runIds = listRunIds(baseDir);
-    return runIds.length > 0 ? runIds[0] : null;
-}
-/**
- * Extract the event kinds present in a session as a frequency map.
- */
-export function getEventKindCounts(session) {
-    const counts = {};
-    for (const event of session.events) {
-        counts[event.kind] = (counts[event.kind] || 0) + 1;
-    }
-    return counts;
-}
-//# sourceMappingURL=replay-engine.js.map

package/dist/kernel/replay-engine.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"replay-engine.js","sourceRoot":"","sources":["../../src/kernel/replay-engine.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,EAAE;AACF,8EAA8E;AAC9E,iFAAiF;AACjF,yEAAyE;AAEzE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,EACX,SAAS,GACV,MAAM,qBAAqB,CAAC;AAyE7B,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG,aAAa,CAAC;AACvC,MAAM,UAAU,GAAG,QAAQ,CAAC;AAE5B,gEAAgE;AAChE,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IAC1D,aAAa;IACb,mBAAmB;IACnB,qBAAqB;IACrB,mBAAmB;CACpB,CAAC,CAAC;AAEH,6DAA6D;AAC7D,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;AAE3F,4DAA4D;AAC5D,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC;AAE7F,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,OAAgB;IAClE,OAAO,IAAI,CAAC,OAAO,IAAI,gBAAgB,EAAE,UAAU,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,OAAgB;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,EAAE,UAAU,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtC,OAAO,WAAW,CAAC,SAAS,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SACnC,IAAI,EAAE;SACN,OAAO,EAAE,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,MAA8B;IAC5D,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,IAAI,mBAAmB,GAAkB,EAAE,CAAC;IAC5C,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,SAAS,WAAW;QAClB,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAE7C,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,IAAI,IAAI,CAAC;QACvF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,qDAAqD;YACrD,mBAAmB,GAAG,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC;QAChG,MAAM,cAAc,GAClB,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC;QAC7E,MAAM,eAAe,GACnB,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,IAAI,IAAI,CAAC;QAC3E,MAAM,mBAAmB,GACvB,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,IAAI,IAAI,CAAC;QACxE,MAAM,eAAe,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,IAAI,IAAI,CAAC;QAC7F,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/F,MAAM,OAAO,GAAG,aAAa,EAAE,IAAI,KAAK,cAAc,CAAC;QACvD,MAAM,QAAQ,GAAG,cAAc,KAAK,IAAI,CAAC;QACzC,MAAM,SAAS,GAAG,cAAc,EAAE,IAAI,KAAK,eAAe,CAAC;QAE3D,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,WAAW,EAAE;YACpB,cAAc,EAAE,SAAS;YACzB,aAAa;YACb,cAAc;YACd,eAAe;YACf,mBAAmB;YACnB,eAAe;YACf,gBAAgB;YAChB,OAAO;YACP,QAAQ;YACR,SAAS;YACT,UAAU,EAAG,SAAS,CAAC,UAAqB,IAAI,SAAS;YACzD,MAAM,EAAG,SAAS,CAAC,MAAiB,IAAI,EAAE;SAC3C,CAAC,CAAC;QAEH,mBAAmB,GAAG,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtE,WAAW,EAAE,CAAC;QAChB,CAAC;QACD,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,wBAAwB;IACxB,WAAW,EAAE,CAAC;IAEd,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,SAAS,YAAY,CACnB,MAA8B,EAC9B,OAAgC;IAEhC,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;QAC/B,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAEjD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAI,MAAM,CAAC,aAAa,CAAC,MAAiB,IAAI,SAAS,CAAC;YACpE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QAED,UAAU,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAC7C,IAAI,MAAM,CAAC,eAAe;YAAE,WAAW,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,eAAe;YAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAElG,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;QAChD,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;QAChD,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM;QAClD,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM;QAChE,UAAU;QACV,WAAW;QACX,cAAc;QACd,UAAU;QACV,WAAW;QACX,aAAa;KACd,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,UAA6B,EAAE;IAE/B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAE7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,OAAO,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,MAAqB;IACrE,sDAAsD;IACtD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IAErE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,IAAI,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,IAAI,CAAC;IAElE,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE9C,OAAO;QACL,KAAK;QACL,MAAM,EAAE,MAAM;QACd,OAAO;QACP,OAAO;QACP,UAAU;QACV,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,SAAS,CAAC,CAAC,cAAc,CAAC,OAAsB;IACpD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAsB,EACtB,SAA4C;IAE5C,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAE9D,OAAO;QACL,GAAG,OAAO;QACV,OAAO,EAAE,eAAe;QACxB,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAsB;IACvD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAmC,CAAC;AAC7C,CAAC"}

package/dist/kernel/replay-processor.d.ts

@@ -1,109 +0,0 @@
-import type { DomainEvent } from '../core/types.js';
-import type { ReplayAction, ReplaySession } from './replay-engine.js';
-/**
- * A replay processor observes a replay event stream and produces results.
- *
- * Processors are read-only observers — they MUST NOT mutate the session,
- * events, or actions passed to them. The pipeline freezes inputs before
- * dispatching to enforce this contract at runtime.
- *
- * Lifecycle:
- *   onSessionStart → onEvent (per event) → onAction (per action) → onSessionEnd
- *
- * All methods are optional. Implement only the hooks you need.
- *
- * Example:
- * ```ts
- * const counter: ReplayProcessor = {
- *   id: 'denial-counter',
- *   name: 'Denial Counter',
- *   onAction(action) {
- *     if (!action.allowed) this._count++;
- *   },
- *   getResults() {
- *     return { denials: this._count };
- *   },
- * };
- * ```
- */
-export interface ReplayProcessor {
-    /** Unique identifier for this processor. */
-    readonly id: string;
-    /** Human-readable name. */
-    readonly name: string;
-    /** Optional description of what this processor does. */
-    readonly description?: string;
-    /** Called once when session replay begins. */
-    onSessionStart?(session: ReplaySession): void | Promise<void>;
-    /** Called for each event in the session, in timestamp order. */
-    onEvent?(event: DomainEvent): void | Promise<void>;
-    /** Called for each reconstructed action encounter, in order. */
-    onAction?(action: ReplayAction): void | Promise<void>;
-    /** Called once when session replay ends. */
-    onSessionEnd?(session: ReplaySession): void | Promise<void>;
-    /** Return accumulated results after processing. */
-    getResults?(): Record<string, unknown>;
-}
-/** Registry for managing replay processors. */
-export interface ReplayProcessorRegistry {
-    /** Register a processor. Throws if a processor with the same id exists. */
-    register(processor: ReplayProcessor): void;
-    /** Remove a processor by id. Returns true if found and removed. */
-    unregister(processorId: string): boolean;
-    /** Get a processor by id. Returns undefined if not found. */
-    get(processorId: string): ReplayProcessor | undefined;
-    /** List all registered processors in registration order. */
-    list(): readonly ReplayProcessor[];
-    /** Check if a processor is registered. */
-    has(processorId: string): boolean;
-    /** Number of registered processors. */
-    count(): number;
-}
-/** Create a new replay processor registry. */
-export declare function createReplayProcessorRegistry(): ReplayProcessorRegistry;
-/** Result of a single processor's execution. */
-export interface ProcessorResult {
-    /** Processor id. */
-    readonly processorId: string;
-    /** Processor name. */
-    readonly processorName: string;
-    /** Whether the processor completed without errors. */
-    readonly success: boolean;
-    /** Error message if the processor failed. */
-    readonly error?: string;
-    /** Results returned by getResults(), if available. */
-    readonly data: Readonly<Record<string, unknown>>;
-    /** Time taken by this processor in milliseconds. */
-    readonly durationMs: number;
-}
-/** Aggregate result of running all processors in the pipeline. */
-export interface ReplayProcessorPipelineResult {
-    /** The session that was processed. */
-    readonly sessionId: string;
-    /** Total number of processors that ran. */
-    readonly processorsRun: number;
-    /** Number of processors that completed successfully. */
-    readonly successes: number;
-    /** Number of processors that failed. */
-    readonly failures: number;
-    /** Per-processor results, in execution order. */
-    readonly results: readonly ProcessorResult[];
-    /** Collected error messages from failed processors. */
-    readonly errors: readonly string[];
-    /** Total pipeline duration in milliseconds. */
-    readonly durationMs: number;
-}
-/**
- * Run all registered processors against a replay session.
- *
- * Processors are invoked in registration order. Each processor receives:
- *   1. onSessionStart(session)
- *   2. onEvent(event) for each event in timestamp order
- *   3. onAction(action) for each action encounter in order
- *   4. onSessionEnd(session)
- *
- * Processor failures are isolated — a failing processor does not prevent
- * others from running. Errors are collected in the pipeline result.
- */
-export declare function runReplayProcessorPipeline(session: ReplaySession, registry: ReplayProcessorRegistry): Promise<ReplayProcessorPipelineResult>;
-//# sourceMappingURL=replay-processor.d.ts.map

package/dist/kernel/replay-processor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"replay-processor.d.ts","sourceRoot":"","sources":["../../src/kernel/replay-processor.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAMtE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,WAAW,eAAe;IAC9B,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B,8CAA8C;IAC9C,cAAc,CAAC,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,gEAAgE;IAChE,OAAO,CAAC,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,gEAAgE;IAChE,QAAQ,CAAC,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,4CAA4C;IAC5C,YAAY,CAAC,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,mDAAmD;IACnD,UAAU,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAMD,+CAA+C;AAC/C,MAAM,WAAW,uBAAuB;IACtC,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAAC;IAC3C,mEAAmE;IACnE,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IACzC,6DAA6D;IAC7D,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAAC;IACtD,4DAA4D;IAC5D,IAAI,IAAI,SAAS,eAAe,EAAE,CAAC;IACnC,0CAA0C;IAC1C,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC,uCAAuC;IACvC,KAAK,IAAI,MAAM,CAAC;CACjB;AAED,8CAA8C;AAC9C,wBAAgB,6BAA6B,IAAI,uBAAuB,CAqCvE;AAMD,gDAAgD;AAChD,MAAM,WAAW,eAAe;IAC9B,oBAAoB;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,sBAAsB;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,sDAAsD;IACtD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,sDAAsD;IACtD,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjD,oDAAoD;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,kEAAkE;AAClE,MAAM,WAAW,6BAA6B;IAC5C,sCAAsC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,2CAA2C;IAC3C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,wDAAwD;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wCAAwC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,+CAA+C;IAC/C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAMD;;;;;;;;;;;GAWG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,uBAAuB,GAChC,OAAO,CAAC,6BAA6B,CAAC,CAkExC"}

package/dist/kernel/replay-processor.js

@@ -1,118 +0,0 @@
-// Replay Processor Plugin Interface — allows third-party extensions to observe
-// and analyze replay event streams without modifying them.
-//
-// Processors are registered in a pipeline and invoked in order during session
-// replay. Each processor receives session lifecycle callbacks (start, event,
-// action, end) and can accumulate results for downstream consumption.
-//
-// This is the foundation for custom replay visualizations, analytics,
-// compliance reporters, and transformation pipelines.
-/** Create a new replay processor registry. */
-export function createReplayProcessorRegistry() {
-    const processors = new Map();
-    return {
-        register(processor) {
-            if (!processor.id || typeof processor.id !== 'string') {
-                throw new Error('Processor must have a non-empty string id');
-            }
-            if (!processor.name || typeof processor.name !== 'string') {
-                throw new Error('Processor must have a non-empty string name');
-            }
-            if (processors.has(processor.id)) {
-                throw new Error(`Processor "${processor.id}" is already registered`);
-            }
-            processors.set(processor.id, processor);
-        },
-        unregister(processorId) {
-            return processors.delete(processorId);
-        },
-        get(processorId) {
-            return processors.get(processorId);
-        },
-        list() {
-            return [...processors.values()];
-        },
-        has(processorId) {
-            return processors.has(processorId);
-        },
-        count() {
-            return processors.size;
-        },
-    };
-}
-// ---------------------------------------------------------------------------
-// Pipeline
-// ---------------------------------------------------------------------------
-/**
- * Run all registered processors against a replay session.
- *
- * Processors are invoked in registration order. Each processor receives:
- *   1. onSessionStart(session)
- *   2. onEvent(event) for each event in timestamp order
- *   3. onAction(action) for each action encounter in order
- *   4. onSessionEnd(session)
- *
- * Processor failures are isolated — a failing processor does not prevent
- * others from running. Errors are collected in the pipeline result.
- */
-export async function runReplayProcessorPipeline(session, registry) {
-    const pipelineStart = Date.now();
-    const processors = registry.list();
-    const results = [];
-    const errors = [];
-    for (const processor of processors) {
-        const processorStart = Date.now();
-        let success = true;
-        let error;
-        let data = {};
-        try {
-            // 1. Session start
-            if (processor.onSessionStart) {
-                await processor.onSessionStart(session);
-            }
-            // 2. Per-event callbacks
-            if (processor.onEvent) {
-                for (const event of session.events) {
-                    await processor.onEvent(event);
-                }
-            }
-            // 3. Per-action callbacks
-            if (processor.onAction) {
-                for (const action of session.actions) {
-                    await processor.onAction(action);
-                }
-            }
-            // 4. Session end
-            if (processor.onSessionEnd) {
-                await processor.onSessionEnd(session);
-            }
-            // 5. Collect results
-            if (processor.getResults) {
-                data = processor.getResults();
-            }
-        }
-        catch (err) {
-            success = false;
-            error = err instanceof Error ? err.message : String(err);
-            errors.push(`Processor "${processor.id}": ${error}`);
-        }
-        results.push({
-            processorId: processor.id,
-            processorName: processor.name,
-            success,
-            error,
-            data,
-            durationMs: Date.now() - processorStart,
-        });
-    }
-    return {
-        sessionId: session.runId,
-        processorsRun: processors.length,
-        successes: results.filter((r) => r.success).length,
-        failures: results.filter((r) => !r.success).length,
-        results,
-        errors,
-        durationMs: Date.now() - pipelineStart,
-    };
-}
-//# sourceMappingURL=replay-processor.js.map

package/dist/kernel/replay-processor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"replay-processor.js","sourceRoot":"","sources":["../../src/kernel/replay-processor.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2DAA2D;AAC3D,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,sEAAsE;AACtE,EAAE;AACF,sEAAsE;AACtE,sDAAsD;AA2EtD,8CAA8C;AAC9C,MAAM,UAAU,6BAA6B;IAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEtD,OAAO;QACL,QAAQ,CAAC,SAA0B;YACjC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,OAAO,SAAS,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,cAAc,SAAS,CAAC,EAAE,yBAAyB,CAAC,CAAC;YACvE,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC1C,CAAC;QAED,UAAU,CAAC,WAAmB;YAC5B,OAAO,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;QAED,GAAG,CAAC,WAAmB;YACrB,OAAO,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;QAED,IAAI;YACF,OAAO,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAClC,CAAC;QAED,GAAG,CAAC,WAAmB;YACrB,OAAO,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;QAED,KAAK;YACH,OAAO,UAAU,CAAC,IAAI,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAwCD,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAsB,EACtB,QAAiC;IAEjC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,IAAI,KAAyB,CAAC;QAC9B,IAAI,IAAI,GAA4B,EAAE,CAAC;QAEvC,IAAI,CAAC;YACH,mBAAmB;YACnB,IAAI,SAAS,CAAC,cAAc,EAAE,CAAC;gBAC7B,MAAM,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAC1C,CAAC;YAED,yBAAyB;YACzB,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;gBACtB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnC,MAAM,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;YAED,0BAA0B;YAC1B,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACvB,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBACrC,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;YAED,iBAAiB;YACjB,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;gBAC3B,MAAM,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACxC,CAAC;YAED,qBAAqB;YACrB,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;gBACzB,IAAI,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,KAAK,CAAC;YAChB,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,cAAc,SAAS,CAAC,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,aAAa,EAAE,SAAS,CAAC,IAAI;YAC7B,OAAO;YACP,KAAK;YACL,IAAI;YACJ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc;SACxC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,KAAK;QACxB,aAAa,EAAE,UAAU,CAAC,MAAM;QAChC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;QAClD,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;QAClD,OAAO;QACP,MAAM;QACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa;KACvC,CAAC;AACJ,CAAC"}

package/dist/kernel/simulation/filesystem-simulator.d.ts

@@ -1,3 +0,0 @@
-import type { ActionSimulator } from './types.js';
-export declare function createFilesystemSimulator(): ActionSimulator;
-//# sourceMappingURL=filesystem-simulator.d.ts.map

package/dist/kernel/simulation/filesystem-simulator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"filesystem-simulator.d.ts","sourceRoot":"","sources":["../../../src/kernel/simulation/filesystem-simulator.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAoB,MAAM,YAAY,CAAC;AA4DpE,wBAAgB,yBAAyB,IAAI,eAAe,CAsC3D"}

package/dist/kernel/simulation/filesystem-simulator.js

@@ -1,81 +0,0 @@
-// Filesystem simulator — predicts impact of file operations.
-// Evaluates path sensitivity without touching the filesystem.
-const FILE_ACTIONS = new Set(['file.write', 'file.delete']);
-// Reuses sensitive path patterns from no-secret-exposure invariant
-const SENSITIVE_PATTERNS = ['.env', 'credentials', '.pem', '.key', 'secret', 'token'];
-const CONFIG_PATTERNS = [
-    'package.json',
-    'tsconfig.json',
-    'eslint',
-    '.prettierrc',
-    'webpack.config',
-    'vite.config',
-    'next.config',
-    'jest.config',
-    'vitest.config',
-    '.babelrc',
-    'babel.config',
-];
-const LOCKFILE_PATTERNS = ['package-lock.json', 'yarn.lock', 'pnpm-lock.yaml'];
-const CI_PATTERNS = ['.github/', '.gitlab-ci', 'Jenkinsfile', '.circleci/', 'Dockerfile'];
-function assessPathRisk(target) {
-    const lower = target.toLowerCase();
-    const reasons = [];
-    let riskLevel = 'low';
-    // Check sensitive files (highest risk)
-    if (SENSITIVE_PATTERNS.some((p) => lower.includes(p))) {
-        riskLevel = 'high';
-        reasons.push(`Sensitive file: ${target}`);
-    }
-    // Check lockfiles
-    if (LOCKFILE_PATTERNS.some((p) => lower.includes(p))) {
-        riskLevel = riskLevel === 'high' ? 'high' : 'medium';
-        reasons.push(`Lockfile modification: ${target}`);
-    }
-    // Check CI/CD configs
-    if (CI_PATTERNS.some((p) => lower.includes(p))) {
-        riskLevel = riskLevel === 'high' ? 'high' : 'medium';
-        reasons.push(`CI/CD config: ${target}`);
-    }
-    // Check project configs
-    if (CONFIG_PATTERNS.some((p) => lower.includes(p))) {
-        riskLevel = riskLevel === 'low' ? 'medium' : riskLevel;
-        reasons.push(`Project config: ${target}`);
-    }
-    return { riskLevel, reasons };
-}
-export function createFilesystemSimulator() {
-    return {
-        id: 'filesystem-simulator',
-        supports(intent) {
-            return FILE_ACTIONS.has(intent.action);
-        },
-        async simulate(intent) {
-            const start = Date.now();
-            const target = intent.target || '';
-            const { riskLevel, reasons } = assessPathRisk(target);
-            const predictedChanges = [];
-            const details = {};
-            if (intent.action === 'file.delete') {
-                predictedChanges.push(`Delete: ${target}`);
-                details.operation = 'delete';
-            }
-            else {
-                predictedChanges.push(`Write: ${target}`);
-                details.operation = 'write';
-            }
-            predictedChanges.push(...reasons);
-            details.pathRisk = riskLevel;
-            details.sensitiveMatch = SENSITIVE_PATTERNS.some((p) => target.toLowerCase().includes(p));
-            return {
-                predictedChanges,
-                blastRadius: intent.filesAffected || 1,
-                riskLevel,
-                details,
-                simulatorId: 'filesystem-simulator',
-                durationMs: Date.now() - start,
-            };
-        },
-    };
-}
-//# sourceMappingURL=filesystem-simulator.js.map

package/dist/kernel/simulation/filesystem-simulator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"filesystem-simulator.js","sourceRoot":"","sources":["../../../src/kernel/simulation/filesystem-simulator.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,8DAA8D;AAK9D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC;AAE5D,mEAAmE;AACnE,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAEtF,MAAM,eAAe,GAAG;IACtB,cAAc;IACd,eAAe;IACf,QAAQ;IACR,aAAa;IACb,gBAAgB;IAChB,aAAa;IACb,aAAa;IACb,aAAa;IACb,eAAe;IACf,UAAU;IACV,cAAc;CACf,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,mBAAmB,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;AAE/E,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AAE1F,SAAS,cAAc,CAAC,MAAc;IAIpC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,SAAS,GAA8B,KAAK,CAAC;IAEjD,uCAAuC;IACvC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,SAAS,GAAG,MAAM,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,kBAAkB;IAClB,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,SAAS,GAAG,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,sBAAsB;IACtB,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,SAAS,GAAG,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrD,OAAO,CAAC,IAAI,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,wBAAwB;IACxB,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,SAAS,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,EAAE,EAAE,sBAAsB;QAE1B,QAAQ,CAAC,MAAwB;YAC/B,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,MAAwB;YACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YACnC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YAEtD,MAAM,gBAAgB,GAAa,EAAE,CAAC;YACtC,MAAM,OAAO,GAA4B,EAAE,CAAC;YAE5C,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;gBACpC,gBAAgB,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;gBAC3C,OAAO,CAAC,SAAS,GAAG,QAAQ,CAAC;YAC/B,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,IAAI,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;gBAC1C,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC;YAC9B,CAAC;YAED,gBAAgB,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;YAClC,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;YAC7B,OAAO,CAAC,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAE1F,OAAO;gBACL,gBAAgB;gBAChB,WAAW,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC;gBACtC,SAAS;gBACT,OAAO;gBACP,WAAW,EAAE,sBAAsB;gBACnC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC/B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/kernel/simulation/git-simulator.d.ts

@@ -1,5 +0,0 @@
-import type { ActionSimulator } from './types.js';
-/** Validate a branch name to prevent command injection */
-export declare function isValidBranchName(name: string): boolean;
-export declare function createGitSimulator(): ActionSimulator;
-//# sourceMappingURL=git-simulator.d.ts.map

package/dist/kernel/simulation/git-simulator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"git-simulator.d.ts","sourceRoot":"","sources":["../../../src/kernel/simulation/git-simulator.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAoB,MAAM,YAAY,CAAC;AAOpE,0DAA0D;AAC1D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMvD;AAED,wBAAgB,kBAAkB,IAAI,eAAe,CAqGpD"}