@red-codes/agentguard 1.0.0 → 1.1.1

package/dist/commands/config.js

@@ -0,0 +1,368 @@
+// agentguard config — unified configuration management
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { homedir } from 'node:os';
+import { RESET, BOLD, DIM, FG } from '../colors.js';
+import { findDefaultPolicy } from '../policy-resolver.js';
+import { detectExistingHooks } from './auto-setup.js';
+const CONFIG_FILENAME = 'config.yaml';
+const DEFAULT_CONFIG = {
+    storage: 'sqlite',
+    autoSetup: true,
+    viewer: { autoOpen: true },
+};
+/**
+ * Resolve configuration by layering:
+ * 1. Defaults
+ * 2. User-level (~/.agentguard/config.yaml)
+ * 3. Project-level (.agentguard/config.yaml)
+ *
+ * Higher layers override lower layers (project > user > defaults).
+ */
+export function resolveConfig(cwd = process.cwd()) {
+    const config = { ...DEFAULT_CONFIG, viewer: { ...DEFAULT_CONFIG.viewer } };
+    // User-level config
+    const userConfig = loadConfigFile(join(homedir(), '.agentguard', CONFIG_FILENAME));
+    if (userConfig)
+        mergeConfig(config, userConfig);
+    // Project-level config
+    const projectConfig = loadConfigFile(join(cwd, '.agentguard', CONFIG_FILENAME));
+    if (projectConfig)
+        mergeConfig(config, projectConfig);
+    return config;
+}
+/** Load a config file from disk. Returns null if not found or invalid. */
+export function loadConfigFile(filePath) {
+    if (!existsSync(filePath))
+        return null;
+    try {
+        const content = readFileSync(filePath, 'utf8').trim();
+        if (!content)
+            return null;
+        // Simple YAML key-value parser (no external dependency)
+        return parseSimpleYaml(content);
+    }
+    catch {
+        return null;
+    }
+}
+/** Save a config object to a YAML file. */
+export function saveConfigFile(filePath, config) {
+    const dir = dirname(filePath);
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
+    }
+    const yaml = serializeSimpleYaml(config);
+    writeFileSync(filePath, yaml, 'utf8');
+}
+/** Get a nested config value by dot-separated key path. */
+export function getConfigValue(config, key) {
+    const parts = key.split('.');
+    let current = config;
+    for (const part of parts) {
+        if (current === null || current === undefined || typeof current !== 'object') {
+            return undefined;
+        }
+        current = current[part];
+    }
+    return current;
+}
+const PROTOTYPE_POISON_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
+/** Set a nested config value by dot-separated key path. */
+export function setConfigValue(config, key, value) {
+    const parts = key.split('.');
+    let current = config;
+    for (let i = 0; i < parts.length - 1; i++) {
+        const part = parts[i];
+        if (PROTOTYPE_POISON_KEYS.has(part))
+            return;
+        if (!(part in current) || typeof current[part] !== 'object' || current[part] === null) {
+            current[part] = {};
+        }
+        current = current[part];
+    }
+    const lastKey = parts[parts.length - 1];
+    if (PROTOTYPE_POISON_KEYS.has(lastKey))
+        return;
+    // Type coercion for known boolean/number fields
+    if (value === 'true') {
+        current[lastKey] = true;
+    }
+    else if (value === 'false') {
+        current[lastKey] = false;
+    }
+    else {
+        current[lastKey] = value;
+    }
+}
+/** Valid top-level config keys and their descriptions. */
+const CONFIG_KEYS = {
+    storage: 'Storage backend (sqlite)',
+    dbPath: 'SQLite database file path',
+    policy: 'Default policy file path',
+    autoSetup: 'Auto-detect and configure hooks on session start',
+    'viewer.autoOpen': 'Auto-open session viewer in browser',
+};
+/**
+ * CLI handler for `agentguard config` command.
+ *
+ * Subcommands:
+ *   show                Display all resolved config (user + project + defaults)
+ *   get <key>           Get a specific config value
+ *   set <key> <value>   Set a config value (project-level by default, --global for user-level)
+ *   path                Show config file locations
+ *   keys                List available config keys
+ */
+export async function config(args) {
+    const sub = args[0];
+    switch (sub) {
+        case 'show':
+            return showConfig(args.slice(1));
+        case 'get':
+            return getConfig(args.slice(1));
+        case 'set':
+            return setConfig(args.slice(1));
+        case 'path':
+            return showPaths();
+        case 'keys':
+            return showKeys();
+        case 'help':
+        case undefined:
+            return showConfigHelp();
+        default:
+            process.stderr.write(`  ${FG.red}Error:${RESET} Unknown subcommand: ${sub}\n`);
+            process.stderr.write(`  ${DIM}Run "agentguard config help" for usage.${RESET}\n`);
+            return 1;
+    }
+}
+function showConfig(args) {
+    const json = args.includes('--json');
+    const cwd = process.cwd();
+    const resolved = resolveConfig(cwd);
+    // Also detect runtime context
+    const policyPath = resolved.policy ?? findDefaultPolicy() ?? null;
+    const hooksInstalled = detectExistingHooks(cwd);
+    if (json) {
+        console.log(JSON.stringify({ ...resolved, _runtime: { policyPath, hooksInstalled } }, null, 2));
+        return 0;
+    }
+    process.stderr.write('\n');
+    process.stderr.write(`  ${BOLD}AgentGuard Configuration${RESET}\n\n`);
+    process.stderr.write(`  ${BOLD}Settings${RESET}\n`);
+    process.stderr.write(`  ${DIM}storage${RESET}          ${resolved.storage ?? 'sqlite'}\n`);
+    process.stderr.write(`  ${DIM}dbPath${RESET}           ${resolved.dbPath ?? '~/.agentguard/agentguard.db (default)'}\n`);
+    process.stderr.write(`  ${DIM}policy${RESET}           ${policyPath ?? 'none (fail-open)'}\n`);
+    process.stderr.write(`  ${DIM}autoSetup${RESET}        ${resolved.autoSetup !== false ? 'true' : 'false'}\n`);
+    process.stderr.write(`  ${DIM}viewer.autoOpen${RESET}  ${resolved.viewer?.autoOpen !== false ? 'true' : 'false'}\n`);
+    process.stderr.write('\n');
+    process.stderr.write(`  ${BOLD}Runtime${RESET}\n`);
+    const hooksIcon = hooksInstalled ? `${FG.green}✓${RESET}` : `${FG.red}✗${RESET}`;
+    process.stderr.write(`  ${DIM}hooks${RESET}            ${hooksIcon} ${hooksInstalled ? 'installed' : 'not installed'}\n`);
+    process.stderr.write('\n');
+    process.stderr.write(`  ${BOLD}Config files${RESET}\n`);
+    const userPath = join(homedir(), '.agentguard', CONFIG_FILENAME);
+    const projectPath = join(cwd, '.agentguard', CONFIG_FILENAME);
+    process.stderr.write(`  ${DIM}user${RESET}     ${existsSync(userPath) ? FG.green + '●' + RESET : FG.gray + '○' + RESET} ${userPath}\n`);
+    process.stderr.write(`  ${DIM}project${RESET}  ${existsSync(projectPath) ? FG.green + '●' + RESET : FG.gray + '○' + RESET} ${projectPath}\n`);
+    process.stderr.write('\n');
+    return 0;
+}
+function getConfig(args) {
+    const key = args[0];
+    if (!key) {
+        process.stderr.write(`  ${FG.red}Error:${RESET} Missing key. Usage: agentguard config get <key>\n`);
+        return 1;
+    }
+    if (!(key in CONFIG_KEYS)) {
+        process.stderr.write(`  ${FG.red}Error:${RESET} Unknown key: ${key}\n`);
+        process.stderr.write(`  ${DIM}Valid keys: ${Object.keys(CONFIG_KEYS).join(', ')}${RESET}\n`);
+        return 1;
+    }
+    const resolved = resolveConfig();
+    const value = getConfigValue(resolved, key);
+    console.log(value === undefined ? '' : String(value));
+    return 0;
+}
+function setConfig(args) {
+    const isGlobal = args.includes('--global') || args.includes('-g');
+    const filtered = args.filter((a) => a !== '--global' && a !== '-g');
+    const key = filtered[0];
+    const value = filtered[1];
+    if (!key || value === undefined) {
+        process.stderr.write(`  ${FG.red}Error:${RESET} Usage: agentguard config set <key> <value> [--global]\n`);
+        return 1;
+    }
+    if (!(key in CONFIG_KEYS)) {
+        process.stderr.write(`  ${FG.red}Error:${RESET} Unknown key: ${key}\n`);
+        process.stderr.write(`  ${DIM}Valid keys: ${Object.keys(CONFIG_KEYS).join(', ')}${RESET}\n`);
+        return 1;
+    }
+    // Validate storage values
+    if (key === 'storage' && value !== 'sqlite') {
+        process.stderr.write(`  ${FG.red}Error:${RESET} Invalid storage backend: ${value}. Must be "sqlite".\n`);
+        return 1;
+    }
+    const configDir = isGlobal ? join(homedir(), '.agentguard') : join(process.cwd(), '.agentguard');
+    const configPath = join(configDir, CONFIG_FILENAME);
+    // Load existing config or start fresh
+    const existing = loadConfigFile(configPath) ?? {};
+    setConfigValue(existing, key, value);
+    saveConfigFile(configPath, existing);
+    const scope = isGlobal ? 'user' : 'project';
+    process.stderr.write(`  ${FG.green}✓${RESET}  Set ${FG.cyan}${key}${RESET} = ${value} ${DIM}(${scope})${RESET}\n`);
+    return 0;
+}
+function showPaths() {
+    const userPath = join(homedir(), '.agentguard', CONFIG_FILENAME);
+    const projectPath = join(process.cwd(), '.agentguard', CONFIG_FILENAME);
+    process.stderr.write('\n');
+    process.stderr.write(`  ${BOLD}Config file locations${RESET} (higher precedence listed last)\n\n`);
+    process.stderr.write(`  ${DIM}user${RESET}     ${existsSync(userPath) ? FG.green + '●' : FG.gray + '○'}${RESET} ${userPath}\n`);
+    process.stderr.write(`  ${DIM}project${RESET}  ${existsSync(projectPath) ? FG.green + '●' : FG.gray + '○'}${RESET} ${projectPath}\n`);
+    process.stderr.write('\n');
+    return 0;
+}
+function showKeys() {
+    process.stderr.write('\n');
+    process.stderr.write(`  ${BOLD}Available config keys${RESET}\n\n`);
+    for (const [key, desc] of Object.entries(CONFIG_KEYS)) {
+        process.stderr.write(`  ${FG.cyan}${key}${RESET}  ${DIM}${desc}${RESET}\n`);
+    }
+    process.stderr.write('\n');
+    return 0;
+}
+function showConfigHelp() {
+    process.stderr.write(`
+  ${BOLD}agentguard config${RESET} — Manage AgentGuard configuration
+
+  ${BOLD}Usage:${RESET}
+    agentguard config show [--json]          Display resolved configuration
+    agentguard config get <key>              Get a specific value
+    agentguard config set <key> <value>      Set a project-level value
+    agentguard config set <key> <value> -g   Set a user-level value
+    agentguard config path                   Show config file paths
+    agentguard config keys                   List available keys
+
+  ${BOLD}Config layers${RESET} (highest precedence last):
+    1. Built-in defaults
+    2. User:    ~/.agentguard/config.yaml
+    3. Project: .agentguard/config.yaml
+
+  ${BOLD}Examples:${RESET}
+    agentguard config show
+    agentguard config set storage sqlite
+    agentguard config set autoSetup false --global
+    agentguard config get viewer.autoOpen
+`);
+    return 0;
+}
+// --- Simple YAML parser/serializer (no external deps) ---
+function parseSimpleYaml(content) {
+    const config = {};
+    const lines = content.split('\n');
+    let currentSection = null;
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith('#'))
+            continue;
+        // Nested key (2-space indent): belongs to current section
+        if (line.startsWith('  ') && currentSection) {
+            const match = trimmed.match(/^(\w+):\s*(.+)$/);
+            if (match) {
+                const parent = config[currentSection];
+                if (parent && typeof parent === 'object') {
+                    parent[match[1]] = parseYamlValue(match[2]);
+                }
+            }
+            continue;
+        }
+        // Section header (key with no value or object value)
+        const sectionMatch = trimmed.match(/^(\w+):\s*$/);
+        if (sectionMatch) {
+            currentSection = sectionMatch[1];
+            config[currentSection] = {};
+            continue;
+        }
+        // Top-level key: value
+        const kvMatch = trimmed.match(/^(\w+):\s*(.+)$/);
+        if (kvMatch) {
+            currentSection = null;
+            config[kvMatch[1]] = parseYamlValue(kvMatch[2]);
+        }
+    }
+    return config;
+}
+function parseYamlValue(raw) {
+    const trimmed = raw.trim();
+    if (trimmed === 'true')
+        return true;
+    if (trimmed === 'false')
+        return false;
+    if (trimmed === 'null' || trimmed === '~')
+        return undefined;
+    if (/^\d+$/.test(trimmed))
+        return parseInt(trimmed, 10);
+    // Strip quotes
+    if ((trimmed.startsWith('"') && trimmed.endsWith('"')) ||
+        (trimmed.startsWith("'") && trimmed.endsWith("'"))) {
+        return trimmed.slice(1, -1);
+    }
+    return trimmed;
+}
+function serializeSimpleYaml(config) {
+    const lines = [
+        '# AgentGuard configuration',
+        '# Docs: https://github.com/AgentGuardHQ/agent-guard',
+        '',
+    ];
+    const obj = config;
+    for (const [key, value] of Object.entries(obj)) {
+        if (value === undefined)
+            continue;
+        if (typeof value === 'object' && value !== null) {
+            lines.push(`${key}:`);
+            for (const [subKey, subValue] of Object.entries(value)) {
+                if (subValue === undefined)
+                    continue;
+                lines.push(`  ${subKey}: ${formatYamlValue(subValue)}`);
+            }
+        }
+        else {
+            lines.push(`${key}: ${formatYamlValue(value)}`);
+        }
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+function formatYamlValue(value) {
+    if (typeof value === 'boolean')
+        return String(value);
+    if (typeof value === 'number')
+        return String(value);
+    if (typeof value === 'string') {
+        // Quote strings with spaces or special characters
+        if (/[\s:#{}[\],&*?|>!'"%@`\\]/.test(value)) {
+            return `"${value.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
+        }
+        return value;
+    }
+    return String(value);
+}
+function mergeConfig(target, source) {
+    if (source.storage !== undefined)
+        target.storage = source.storage;
+    if (source.dbPath !== undefined)
+        target.dbPath = source.dbPath;
+    if (source.policy !== undefined)
+        target.policy = source.policy;
+    if (source.autoSetup !== undefined)
+        target.autoSetup = source.autoSetup;
+    if (source.viewer) {
+        if (!target.viewer)
+            target.viewer = {};
+        if (source.viewer.autoOpen !== undefined) {
+            target.viewer.autoOpen = source.viewer.autoOpen;
+        }
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/commands/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA,uDAAuD;AAEvD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAatD,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,cAAc,GAAqB;IACvC,OAAO,EAAE,QAAQ;IACjB,SAAS,EAAE,IAAI;IACf,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;CAC3B,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IACvD,MAAM,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,MAAM,EAAE,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;IAE3E,oBAAoB;IACpB,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;IACnF,IAAI,UAAU;QAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAEhD,uBAAuB;IACvB,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;IAChF,IAAI,aAAa;QAAE,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAEtD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,wDAAwD;QACxD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,MAAwB;IACvE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACzC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,cAAc,CAAC,MAAwB,EAAE,GAAW;IAClE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,OAAO,GAAY,MAAM,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7E,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAEjF,2DAA2D;AAC3D,MAAM,UAAU,cAAc,CAAC,MAAwB,EAAE,GAAW,EAAE,KAAa;IACjF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,OAAO,GAA4B,MAAiC,CAAC;IAEzE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAC5C,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACtF,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,IAAI,CAA4B,CAAC;IACrD,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxC,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IAE/C,gDAAgD;IAChD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IAC1B,CAAC;SAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,0DAA0D;AAC1D,MAAM,WAAW,GAA2B;IAC1C,OAAO,EAAE,0BAA0B;IACnC,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,0BAA0B;IAClC,SAAS,EAAE,kDAAkD;IAC7D,iBAAiB,EAAE,qCAAqC;CACzD,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAEpB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,KAAK,KAAK;YACR,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,KAAK;YACR,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,MAAM;YACT,OAAO,SAAS,EAAE,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,QAAQ,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS;YACZ,OAAO,cAAc,EAAE,CAAC;QAC1B;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,SAAS,KAAK,wBAAwB,GAAG,IAAI,CAAC,CAAC;YAC/E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,0CAA0C,KAAK,IAAI,CAAC,CAAC;YAClF,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAEpC,8BAA8B;IAC9B,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,IAAI,iBAAiB,EAAE,IAAI,IAAI,CAAC;IAClE,MAAM,cAAc,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAEhD,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChG,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,2BAA2B,KAAK,MAAM,CAAC,CAAC;IAEtE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,WAAW,KAAK,IAAI,CAAC,CAAC;IACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,UAAU,KAAK,aAAa,QAAQ,CAAC,OAAO,IAAI,QAAQ,IAAI,CAAC,CAAC;IAC3F,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,SAAS,KAAK,cAAc,QAAQ,CAAC,MAAM,IAAI,uCAAuC,IAAI,CACnG,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,KAAK,cAAc,UAAU,IAAI,kBAAkB,IAAI,CAAC,CAAC;IAC/F,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,YAAY,KAAK,WAAW,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CACxF,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,kBAAkB,KAAK,KAAK,QAAQ,CAAC,MAAM,EAAE,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAC/F,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,UAAU,KAAK,IAAI,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC;IACjF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,QAAQ,KAAK,eAAe,SAAS,IAAI,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,IAAI,CACpG,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,eAAe,KAAK,IAAI,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;IAC9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,OAAO,KAAK,QAAQ,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,GAAG,GAAG,KAAK,IAAI,QAAQ,IAAI,CAClH,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,UAAU,KAAK,KAAK,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,GAAG,GAAG,KAAK,IAAI,WAAW,IAAI,CACxH,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,GAAG,SAAS,KAAK,oDAAoD,CAC9E,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,SAAS,KAAK,iBAAiB,GAAG,IAAI,CAAC,CAAC;QACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,eAAe,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;QAC7F,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAE1B,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,GAAG,SAAS,KAAK,0DAA0D,CACpF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,SAAS,KAAK,iBAAiB,GAAG,IAAI,CAAC,CAAC;QACxE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,eAAe,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;QAC7F,OAAO,CAAC,CAAC;IACX,CAAC;IAED,0BAA0B;IAC1B,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,GAAG,SAAS,KAAK,6BAA6B,KAAK,uBAAuB,CACnF,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC;IACjG,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAEpD,sCAAsC;IACtC,MAAM,QAAQ,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAClD,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACrC,cAAc,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAErC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,KAAK,IAAI,KAAK,SAAS,EAAE,CAAC,IAAI,GAAG,GAAG,GAAG,KAAK,MAAM,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,KAAK,IAAI,CAC7F,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;IAExE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,IAAI,wBAAwB,KAAK,sCAAsC,CAC7E,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,OAAO,KAAK,QAAQ,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,GAAG,GAAG,KAAK,IAAI,QAAQ,IAAI,CAC1G,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,UAAU,KAAK,KAAK,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,GAAG,GAAG,KAAK,IAAI,WAAW,IAAI,CAChH,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,wBAAwB,KAAK,MAAM,CAAC,CAAC;IACnE,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,GAAG,GAAG,GAAG,KAAK,KAAK,GAAG,GAAG,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;IACnB,IAAI,oBAAoB,KAAK;;IAE7B,IAAI,SAAS,KAAK;;;;;;;;IAQlB,IAAI,gBAAgB,KAAK;;;;;IAKzB,IAAI,YAAY,KAAK;;;;;CAKxB,CAAC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,2DAA2D;AAE3D,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,cAAc,GAAkB,IAAI,CAAC;IAEzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAElD,0DAA0D;QAC1D,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,cAAc,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC/C,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAwC,CAAC;gBAC7E,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACzC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QAED,qDAAqD;QACrD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,YAAY,EAAE,CAAC;YACjB,cAAc,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,uBAAuB;QACvB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACjD,IAAI,OAAO,EAAE,CAAC;YACZ,cAAc,GAAG,IAAI,CAAC;YACtB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,OAAO,MAA0B,CAAC;AACpC,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACxD,eAAe;IACf,IACE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAClD,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAwB;IACnD,MAAM,KAAK,GAAa;QACtB,4BAA4B;QAC5B,qDAAqD;QACrD,EAAE;KACH,CAAC;IAEF,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAElC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;YACtB,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;gBAClF,IAAI,QAAQ,KAAK,SAAS;oBAAE,SAAS;gBACrC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,KAAK,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,kDAAkD;QAClD,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;QAClE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,WAAW,CAAC,MAAwB,EAAE,MAAwB;IACrE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/D,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACxE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QAClD,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/demo.d.ts

@@ -0,0 +1,2 @@
+export declare function demo(): Promise<number>;
+//# sourceMappingURL=demo.d.ts.map

package/dist/commands/demo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"demo.d.ts","sourceRoot":"","sources":["../../src/commands/demo.ts"],"names":[],"mappings":"AAuEA,wBAAsB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CA4D5C"}

package/dist/commands/demo.js

@@ -0,0 +1,100 @@
+// agentguard demo — showcase governance in action with simulated tool calls
+import { RESET, BOLD, DIM, FG } from '../colors.js';
+const DEMO_ACTIONS = [
+    {
+        tool: 'Read',
+        description: 'Read a source file',
+        input: { file_path: 'src/index.ts' },
+        expected: 'ALLOW',
+        reason: 'file.read — reading is always safe',
+    },
+    {
+        tool: 'Write',
+        description: 'Write a new component',
+        input: { file_path: 'src/utils.ts', content: 'export const add = (a, b) => a + b;' },
+        expected: 'ALLOW',
+        reason: 'file.write — non-sensitive file, allowed by default',
+    },
+    {
+        tool: 'Bash',
+        description: 'Run tests',
+        input: { command: 'npm test' },
+        expected: 'ALLOW',
+        reason: 'shell.exec — safe command, no destructive patterns',
+    },
+    {
+        tool: 'Write',
+        description: 'Modify .env secrets file',
+        input: { file_path: '.env', content: 'API_KEY=sk-leaked-secret' },
+        expected: 'DENY',
+        reason: 'file.write → .env — secrets files must not be modified',
+    },
+    {
+        tool: 'Bash',
+        description: 'Push to main branch',
+        input: { command: 'git push origin main' },
+        expected: 'DENY',
+        reason: 'git.push → main — direct push to protected branch',
+    },
+    {
+        tool: 'Bash',
+        description: 'Force push to rewrite history',
+        input: { command: 'git push --force origin feature' },
+        expected: 'DENY',
+        reason: 'git.force-push — force push rewrites shared history',
+    },
+    {
+        tool: 'Bash',
+        description: 'Delete everything recursively',
+        input: { command: 'rm -rf /' },
+        expected: 'DENY',
+        reason: 'shell.exec → rm -rf — destructive shell command blocked',
+    },
+    {
+        tool: 'Write',
+        description: 'Modify SSH private key',
+        input: { file_path: '~/.ssh/id_rsa', content: 'compromised' },
+        expected: 'DENY',
+        reason: 'file.write → id_rsa — SSH private keys must not be modified',
+    },
+];
+export async function demo() {
+    const write = (s) => process.stderr.write(s);
+    write('\n');
+    write(`  ${BOLD}AgentGuard Demo${RESET} — governance decisions in real time\n`);
+    write(`  ${DIM}Simulating 8 AI agent tool calls against the default policy...${RESET}\n\n`);
+    let allowed = 0;
+    let denied = 0;
+    for (let i = 0; i < DEMO_ACTIONS.length; i++) {
+        const action = DEMO_ACTIONS[i];
+        const num = `${i + 1}`.padStart(2);
+        // Show the tool call
+        const toolColor = action.expected === 'DENY' ? FG.red : FG.green;
+        write(`  ${DIM}${num}.${RESET} ${BOLD}${action.tool}${RESET} ${DIM}→${RESET} ${action.description}\n`);
+        // Show the input
+        const inputStr = action.tool === 'Bash'
+            ? `     ${DIM}$ ${action.input.command}${RESET}\n`
+            : `     ${DIM}${action.input.file_path || ''}${RESET}\n`;
+        write(inputStr);
+        // Show the decision
+        if (action.expected === 'ALLOW') {
+            write(`     ${FG.green}✓ ALLOW${RESET} ${DIM}${action.reason}${RESET}\n`);
+            allowed++;
+        }
+        else {
+            write(`     ${toolColor}✗ DENY${RESET}  ${DIM}${action.reason}${RESET}\n`);
+            denied++;
+        }
+        write('\n');
+    }
+    // Summary
+    write(`  ${BOLD}Summary${RESET}\n`);
+    write(`  ${FG.green}${allowed} allowed${RESET}  ${FG.red}${denied} blocked${RESET}  ${DIM}${DEMO_ACTIONS.length} total actions evaluated${RESET}\n\n`);
+    write(`  ${DIM}Every decision is recorded to ${FG.cyan}.agentguard/${RESET}${DIM} for audit.${RESET}\n`);
+    write(`  ${DIM}Customize rules in ${FG.cyan}agentguard.yaml${RESET}${DIM} to match your project.${RESET}\n\n`);
+    write(`  ${BOLD}Get started:${RESET}\n`);
+    write(`  ${DIM}$ ${FG.cyan}npx agentguard claude-init${RESET}  ${DIM}— install Claude Code hooks${RESET}\n`);
+    write(`  ${DIM}$ ${FG.cyan}agentguard simulate --action git.push --branch main${RESET}  ${DIM}— try a simulation${RESET}\n\n`);
+    return 0;
+}
+//# sourceMappingURL=demo.js.map

package/dist/commands/demo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demo.js","sourceRoot":"","sources":["../../src/commands/demo.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAE5E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAUpD,MAAM,YAAY,GAAiB;IACjC;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,oBAAoB;QACjC,KAAK,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE;QACpC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,oCAAoC;KAC7C;IACD;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,uBAAuB;QACpC,KAAK,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,qCAAqC,EAAE;QACpF,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,qDAAqD;KAC9D;IACD;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,WAAW;QACxB,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE;QAC9B,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,oDAAoD;KAC7D;IACD;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,0BAA0B;QACvC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,EAAE;QACjE,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,wDAAwD;KACjE;IACD;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,qBAAqB;QAClC,KAAK,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;QAC1C,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,mDAAmD;KAC5D;IACD;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,+BAA+B;QAC5C,KAAK,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE;QACrD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,qDAAqD;KAC9D;IACD;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,+BAA+B;QAC5C,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE;QAC9B,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,yDAAyD;KAClE;IACD;QACE,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,wBAAwB;QACrC,KAAK,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE;QAC7D,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,6DAA6D;KACtE;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAErD,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,KAAK,CAAC,KAAK,IAAI,kBAAkB,KAAK,wCAAwC,CAAC,CAAC;IAChF,KAAK,CAAC,KAAK,GAAG,iEAAiE,KAAK,MAAM,CAAC,CAAC;IAE5F,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAEnC,qBAAqB;QACrB,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC;QACjE,KAAK,CACH,KAAK,GAAG,GAAG,GAAG,IAAI,KAAK,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,MAAM,CAAC,WAAW,IAAI,CAChG,CAAC;QAEF,iBAAiB;QACjB,MAAM,QAAQ,GACZ,MAAM,CAAC,IAAI,KAAK,MAAM;YACpB,CAAC,CAAC,QAAQ,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,IAAI;YAClD,CAAC,CAAC,QAAQ,GAAG,GAAI,MAAM,CAAC,KAAK,CAAC,SAAoB,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC;QACzE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEhB,oBAAoB;QACpB,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,UAAU,KAAK,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,CAAC;YAC1E,OAAO,EAAE,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,QAAQ,SAAS,SAAS,KAAK,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,IAAI,CAAC,CAAC;YAC3E,MAAM,EAAE,CAAC;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IAED,UAAU;IACV,KAAK,CAAC,KAAK,IAAI,UAAU,KAAK,IAAI,CAAC,CAAC;IACpC,KAAK,CACH,KAAK,EAAE,CAAC,KAAK,GAAG,OAAO,WAAW,KAAK,KAAK,EAAE,CAAC,GAAG,GAAG,MAAM,WAAW,KAAK,KAAK,GAAG,GAAG,YAAY,CAAC,MAAM,2BAA2B,KAAK,MAAM,CAChJ,CAAC;IAEF,KAAK,CACH,KAAK,GAAG,iCAAiC,EAAE,CAAC,IAAI,eAAe,KAAK,GAAG,GAAG,cAAc,KAAK,IAAI,CAClG,CAAC;IACF,KAAK,CACH,KAAK,GAAG,sBAAsB,EAAE,CAAC,IAAI,kBAAkB,KAAK,GAAG,GAAG,0BAA0B,KAAK,MAAM,CACxG,CAAC;IAEF,KAAK,CAAC,KAAK,IAAI,eAAe,KAAK,IAAI,CAAC,CAAC;IACzC,KAAK,CACH,KAAK,GAAG,KAAK,EAAE,CAAC,IAAI,6BAA6B,KAAK,KAAK,GAAG,8BAA8B,KAAK,IAAI,CACtG,CAAC;IACF,KAAK,CACH,KAAK,GAAG,KAAK,EAAE,CAAC,IAAI,sDAAsD,KAAK,KAAK,GAAG,qBAAqB,KAAK,MAAM,CACxH,CAAC;IAEF,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/diff.d.ts

@@ -0,0 +1,3 @@
+import type { StorageConfig } from '@red-codes/storage';
+export declare function diff(args: string[], storageConfig?: StorageConfig): Promise<void>;
+//# sourceMappingURL=diff.d.ts.map

package/dist/commands/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/commands/diff.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AA0SxD,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,aAAa,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA2FvF"}