@red-codes/agentguard 1.0.0 → 1.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +179 -298
- package/dist/args.d.ts.map +1 -0
- package/dist/args.js.map +1 -0
- package/dist/bin.d.ts.map +1 -0
- package/dist/bin.js +29185 -0
- package/dist/bin.js.map +7 -0
- package/dist/colors.d.ts.map +1 -0
- package/dist/colors.js.map +1 -0
- package/dist/commands/adoption.d.ts +2 -0
- package/dist/commands/adoption.d.ts.map +1 -0
- package/dist/commands/adoption.js +172 -0
- package/dist/commands/adoption.js.map +1 -0
- package/dist/commands/analytics.d.ts +3 -0
- package/dist/commands/analytics.d.ts.map +1 -0
- package/dist/commands/analytics.js +7 -0
- package/dist/commands/analytics.js.map +1 -0
- package/dist/commands/audit-verify.d.ts +3 -0
- package/dist/commands/audit-verify.d.ts.map +1 -0
- package/dist/commands/audit-verify.js +94 -0
- package/dist/commands/audit-verify.js.map +1 -0
- package/dist/commands/auto-setup.d.ts +28 -0
- package/dist/commands/auto-setup.d.ts.map +1 -0
- package/dist/commands/auto-setup.js +146 -0
- package/dist/commands/auto-setup.js.map +1 -0
- package/dist/commands/ci-check.d.ts +13 -0
- package/dist/commands/ci-check.d.ts.map +1 -0
- package/dist/commands/ci-check.js +286 -0
- package/dist/commands/ci-check.js.map +1 -0
- package/dist/commands/claude-hook.d.ts +2 -0
- package/dist/commands/claude-hook.d.ts.map +1 -0
- package/dist/commands/claude-hook.js +254 -0
- package/dist/commands/claude-hook.js.map +1 -0
- package/dist/commands/claude-init.d.ts.map +1 -0
- package/dist/commands/claude-init.js +401 -0
- package/dist/commands/claude-init.js.map +1 -0
- package/dist/commands/config.d.ts +39 -0
- package/dist/commands/config.d.ts.map +1 -0
- package/dist/commands/config.js +368 -0
- package/dist/commands/config.js.map +1 -0
- package/dist/commands/demo.d.ts +2 -0
- package/dist/commands/demo.d.ts.map +1 -0
- package/dist/commands/demo.js +100 -0
- package/dist/commands/demo.js.map +1 -0
- package/dist/commands/diff.d.ts +3 -0
- package/dist/commands/diff.d.ts.map +1 -0
- package/dist/commands/diff.js +364 -0
- package/dist/commands/diff.js.map +1 -0
- package/dist/commands/evidence-pr.d.ts +3 -0
- package/dist/commands/evidence-pr.d.ts.map +1 -0
- package/dist/commands/evidence-pr.js +162 -0
- package/dist/commands/evidence-pr.js.map +1 -0
- package/dist/commands/export.d.ts +22 -0
- package/dist/commands/export.d.ts.map +1 -0
- package/dist/commands/export.js +92 -0
- package/dist/commands/export.js.map +1 -0
- package/dist/commands/guard.d.ts +21 -0
- package/dist/commands/guard.d.ts.map +1 -0
- package/dist/commands/guard.js +272 -0
- package/dist/commands/guard.js.map +1 -0
- package/dist/commands/import.d.ts +3 -0
- package/dist/commands/import.d.ts.map +1 -0
- package/dist/{cli/commands → commands}/import.js +25 -26
- package/dist/commands/import.js.map +1 -0
- package/dist/commands/init.d.ts +5 -0
- package/dist/commands/init.d.ts.map +1 -0
- package/dist/commands/init.js +1288 -0
- package/dist/commands/init.js.map +1 -0
- package/dist/commands/inspect.d.ts +4 -0
- package/dist/commands/inspect.d.ts.map +1 -0
- package/dist/{cli/commands → commands}/inspect.js +97 -70
- package/dist/commands/inspect.js.map +1 -0
- package/dist/commands/learn.d.ts +2 -0
- package/dist/commands/learn.d.ts.map +1 -0
- package/dist/commands/learn.js +264 -0
- package/dist/commands/learn.js.map +1 -0
- package/dist/commands/migrate.d.ts +3 -0
- package/dist/commands/migrate.d.ts.map +1 -0
- package/dist/commands/migrate.js +270 -0
- package/dist/commands/migrate.js.map +1 -0
- package/dist/commands/plugin.d.ts.map +1 -0
- package/dist/{cli/commands → commands}/plugin.js +2 -2
- package/dist/commands/plugin.js.map +1 -0
- package/dist/commands/policy-verify.d.ts +46 -0
- package/dist/commands/policy-verify.d.ts.map +1 -0
- package/dist/commands/policy-verify.js +173 -0
- package/dist/commands/policy-verify.js.map +1 -0
- package/dist/commands/policy.d.ts +27 -0
- package/dist/commands/policy.d.ts.map +1 -0
- package/dist/commands/policy.js +590 -0
- package/dist/commands/policy.js.map +1 -0
- package/dist/{cli/commands → commands}/replay.d.ts +2 -1
- package/dist/commands/replay.d.ts.map +1 -0
- package/dist/{cli/commands → commands}/replay.js +78 -12
- package/dist/commands/replay.js.map +1 -0
- package/dist/commands/session-viewer.d.ts +5 -0
- package/dist/commands/session-viewer.d.ts.map +1 -0
- package/dist/commands/session-viewer.js +462 -0
- package/dist/commands/session-viewer.js.map +1 -0
- package/dist/commands/simulate.d.ts +7 -0
- package/dist/commands/simulate.d.ts.map +1 -0
- package/dist/commands/simulate.js +505 -0
- package/dist/commands/simulate.js.map +1 -0
- package/dist/commands/status.d.ts +2 -0
- package/dist/commands/status.d.ts.map +1 -0
- package/dist/commands/status.js +212 -0
- package/dist/commands/status.js.map +1 -0
- package/dist/commands/traces.d.ts +24 -0
- package/dist/commands/traces.d.ts.map +1 -0
- package/dist/commands/traces.js +282 -0
- package/dist/commands/traces.js.map +1 -0
- package/dist/commands/trust.d.ts +6 -0
- package/dist/commands/trust.d.ts.map +1 -0
- package/dist/commands/trust.js +129 -0
- package/dist/commands/trust.js.map +1 -0
- package/dist/evidence-summary.d.ts +35 -0
- package/dist/evidence-summary.d.ts.map +1 -0
- package/dist/evidence-summary.js +202 -0
- package/dist/evidence-summary.js.map +1 -0
- package/dist/{cli/file-event-store.d.ts → file-event-store.d.ts} +1 -1
- package/dist/file-event-store.d.ts.map +1 -0
- package/dist/{cli/file-event-store.js → file-event-store.js} +1 -1
- package/dist/file-event-store.js.map +1 -0
- package/{hooks → dist/hooks}/post-commit +3 -1
- package/{hooks → dist/hooks}/post-merge +3 -1
- package/dist/hooks/pre-commit +29 -0
- package/dist/policy-resolver.d.ts +32 -0
- package/dist/policy-resolver.d.ts.map +1 -0
- package/dist/policy-resolver.js +171 -0
- package/dist/policy-resolver.js.map +1 -0
- package/dist/{cli/recorder.d.ts → recorder.d.ts} +1 -1
- package/dist/recorder.d.ts.map +1 -0
- package/dist/{cli/recorder.js → recorder.js} +1 -1
- package/dist/recorder.js.map +1 -0
- package/dist/replay-timeline-html.d.ts +21 -0
- package/dist/replay-timeline-html.d.ts.map +1 -0
- package/dist/replay-timeline-html.js +414 -0
- package/dist/replay-timeline-html.js.map +1 -0
- package/dist/replay.d.ts.map +1 -0
- package/dist/{cli/replay.js → replay.js} +92 -1
- package/dist/replay.js.map +1 -0
- package/dist/{cli/session-store.d.ts → session-store.d.ts} +5 -0
- package/dist/session-store.d.ts.map +1 -0
- package/dist/{cli/session-store.js → session-store.js} +1 -0
- package/dist/session-store.js.map +1 -0
- package/dist/session-viewer-html.d.ts +10 -0
- package/dist/session-viewer-html.d.ts.map +1 -0
- package/dist/session-viewer-html.js +737 -0
- package/dist/session-viewer-html.js.map +1 -0
- package/dist/templates/ci-only.yaml +103 -0
- package/dist/templates/development.yaml +107 -0
- package/dist/templates/permissive.yaml +87 -0
- package/dist/templates/strict.yaml +112 -0
- package/dist/tui.d.ts +3 -0
- package/dist/tui.d.ts.map +1 -0
- package/dist/tui.js +2 -0
- package/dist/tui.js.map +1 -0
- package/package.json +42 -53
- package/dist/adapters/claude-code.d.ts +0 -24
- package/dist/adapters/claude-code.d.ts.map +0 -1
- package/dist/adapters/claude-code.js +0 -99
- package/dist/adapters/claude-code.js.map +0 -1
- package/dist/adapters/file.d.ts +0 -3
- package/dist/adapters/file.d.ts.map +0 -1
- package/dist/adapters/file.js +0 -35
- package/dist/adapters/file.js.map +0 -1
- package/dist/adapters/git.d.ts +0 -3
- package/dist/adapters/git.d.ts.map +0 -1
- package/dist/adapters/git.js +0 -61
- package/dist/adapters/git.js.map +0 -1
- package/dist/adapters/registry.d.ts +0 -5
- package/dist/adapters/registry.d.ts.map +0 -1
- package/dist/adapters/registry.js +0 -15
- package/dist/adapters/registry.js.map +0 -1
- package/dist/adapters/shell.d.ts +0 -8
- package/dist/adapters/shell.d.ts.map +0 -1
- package/dist/adapters/shell.js +0 -27
- package/dist/adapters/shell.js.map +0 -1
- package/dist/cli/args.d.ts.map +0 -1
- package/dist/cli/args.js.map +0 -1
- package/dist/cli/bin.d.ts.map +0 -1
- package/dist/cli/bin.js +0 -5769
- package/dist/cli/bin.js.map +0 -7
- package/dist/cli/colors.d.ts.map +0 -1
- package/dist/cli/colors.js.map +0 -1
- package/dist/cli/commands/claude-hook.d.ts +0 -2
- package/dist/cli/commands/claude-hook.d.ts.map +0 -1
- package/dist/cli/commands/claude-hook.js +0 -110
- package/dist/cli/commands/claude-hook.js.map +0 -1
- package/dist/cli/commands/claude-init.d.ts.map +0 -1
- package/dist/cli/commands/claude-init.js +0 -150
- package/dist/cli/commands/claude-init.js.map +0 -1
- package/dist/cli/commands/export.d.ts +0 -11
- package/dist/cli/commands/export.d.ts.map +0 -1
- package/dist/cli/commands/export.js +0 -113
- package/dist/cli/commands/export.js.map +0 -1
- package/dist/cli/commands/guard.d.ts +0 -12
- package/dist/cli/commands/guard.d.ts.map +0 -1
- package/dist/cli/commands/guard.js +0 -145
- package/dist/cli/commands/guard.js.map +0 -1
- package/dist/cli/commands/import.d.ts +0 -2
- package/dist/cli/commands/import.d.ts.map +0 -1
- package/dist/cli/commands/import.js.map +0 -1
- package/dist/cli/commands/inspect.d.ts +0 -3
- package/dist/cli/commands/inspect.d.ts.map +0 -1
- package/dist/cli/commands/inspect.js.map +0 -1
- package/dist/cli/commands/plugin.d.ts.map +0 -1
- package/dist/cli/commands/plugin.js.map +0 -1
- package/dist/cli/commands/replay.d.ts.map +0 -1
- package/dist/cli/commands/replay.js.map +0 -1
- package/dist/cli/file-event-store.d.ts.map +0 -1
- package/dist/cli/file-event-store.js.map +0 -1
- package/dist/cli/policy-resolver.d.ts +0 -4
- package/dist/cli/policy-resolver.d.ts.map +0 -1
- package/dist/cli/policy-resolver.js +0 -62
- package/dist/cli/policy-resolver.js.map +0 -1
- package/dist/cli/recorder.d.ts.map +0 -1
- package/dist/cli/recorder.js.map +0 -1
- package/dist/cli/replay.d.ts.map +0 -1
- package/dist/cli/replay.js.map +0 -1
- package/dist/cli/session-store.d.ts.map +0 -1
- package/dist/cli/session-store.js.map +0 -1
- package/dist/cli/tui.d.ts +0 -24
- package/dist/cli/tui.d.ts.map +0 -1
- package/dist/cli/tui.js +0 -197
- package/dist/cli/tui.js.map +0 -1
- package/dist/core/actions.d.ts +0 -11
- package/dist/core/actions.d.ts.map +0 -1
- package/dist/core/actions.js +0 -112
- package/dist/core/actions.js.map +0 -1
- package/dist/core/adapters.d.ts +0 -19
- package/dist/core/adapters.d.ts.map +0 -1
- package/dist/core/adapters.js +0 -85
- package/dist/core/adapters.js.map +0 -1
- package/dist/core/execution-log/bridge.d.ts +0 -12
- package/dist/core/execution-log/bridge.d.ts.map +0 -1
- package/dist/core/execution-log/bridge.js +0 -112
- package/dist/core/execution-log/bridge.js.map +0 -1
- package/dist/core/execution-log/event-log.d.ts +0 -7
- package/dist/core/execution-log/event-log.d.ts.map +0 -1
- package/dist/core/execution-log/event-log.js +0 -103
- package/dist/core/execution-log/event-log.js.map +0 -1
- package/dist/core/execution-log/event-projections.d.ts +0 -28
- package/dist/core/execution-log/event-projections.d.ts.map +0 -1
- package/dist/core/execution-log/event-projections.js +0 -272
- package/dist/core/execution-log/event-projections.js.map +0 -1
- package/dist/core/execution-log/event-schema.d.ts +0 -56
- package/dist/core/execution-log/event-schema.d.ts.map +0 -1
- package/dist/core/execution-log/event-schema.js +0 -160
- package/dist/core/execution-log/event-schema.js.map +0 -1
- package/dist/core/execution-log/index.d.ts +0 -7
- package/dist/core/execution-log/index.d.ts.map +0 -1
- package/dist/core/execution-log/index.js +0 -13
- package/dist/core/execution-log/index.js.map +0 -1
- package/dist/core/hash.d.ts +0 -5
- package/dist/core/hash.d.ts.map +0 -1
- package/dist/core/hash.js +0 -13
- package/dist/core/hash.js.map +0 -1
- package/dist/core/rng.d.ts +0 -29
- package/dist/core/rng.d.ts.map +0 -1
- package/dist/core/rng.js +0 -48
- package/dist/core/rng.js.map +0 -1
- package/dist/core/types.d.ts +0 -746
- package/dist/core/types.d.ts.map +0 -1
- package/dist/core/types.js +0 -8
- package/dist/core/types.js.map +0 -1
- package/dist/events/bus.d.ts +0 -24
- package/dist/events/bus.d.ts.map +0 -1
- package/dist/events/bus.js +0 -64
- package/dist/events/bus.js.map +0 -1
- package/dist/events/decision-jsonl.d.ts +0 -8
- package/dist/events/decision-jsonl.d.ts.map +0 -1
- package/dist/events/decision-jsonl.js +0 -44
- package/dist/events/decision-jsonl.js.map +0 -1
- package/dist/events/jsonl.d.ts +0 -8
- package/dist/events/jsonl.d.ts.map +0 -1
- package/dist/events/jsonl.js +0 -46
- package/dist/events/jsonl.js.map +0 -1
- package/dist/events/schema.d.ts +0 -59
- package/dist/events/schema.d.ts.map +0 -1
- package/dist/events/schema.js +0 -296
- package/dist/events/schema.js.map +0 -1
- package/dist/events/store.d.ts +0 -7
- package/dist/events/store.d.ts.map +0 -1
- package/dist/events/store.js +0 -64
- package/dist/events/store.js.map +0 -1
- package/dist/invariants/checker.d.ts +0 -15
- package/dist/invariants/checker.d.ts.map +0 -1
- package/dist/invariants/checker.js +0 -52
- package/dist/invariants/checker.js.map +0 -1
- package/dist/invariants/definitions.d.ts +0 -33
- package/dist/invariants/definitions.d.ts.map +0 -1
- package/dist/invariants/definitions.js +0 -168
- package/dist/invariants/definitions.js.map +0 -1
- package/dist/kernel/aab.d.ts +0 -26
- package/dist/kernel/aab.d.ts.map +0 -1
- package/dist/kernel/aab.js +0 -149
- package/dist/kernel/aab.js.map +0 -1
- package/dist/kernel/blast-radius.d.ts +0 -60
- package/dist/kernel/blast-radius.d.ts.map +0 -1
- package/dist/kernel/blast-radius.js +0 -146
- package/dist/kernel/blast-radius.js.map +0 -1
- package/dist/kernel/decision.d.ts +0 -40
- package/dist/kernel/decision.d.ts.map +0 -1
- package/dist/kernel/decision.js +0 -92
- package/dist/kernel/decision.js.map +0 -1
- package/dist/kernel/decisions/factory.d.ts +0 -12
- package/dist/kernel/decisions/factory.d.ts.map +0 -1
- package/dist/kernel/decisions/factory.js +0 -56
- package/dist/kernel/decisions/factory.js.map +0 -1
- package/dist/kernel/decisions/types.d.ts +0 -70
- package/dist/kernel/decisions/types.d.ts.map +0 -1
- package/dist/kernel/decisions/types.js +0 -5
- package/dist/kernel/decisions/types.js.map +0 -1
- package/dist/kernel/evidence.d.ts +0 -29
- package/dist/kernel/evidence.d.ts.map +0 -1
- package/dist/kernel/evidence.js +0 -61
- package/dist/kernel/evidence.js.map +0 -1
- package/dist/kernel/kernel.d.ts +0 -47
- package/dist/kernel/kernel.d.ts.map +0 -1
- package/dist/kernel/kernel.js +0 -377
- package/dist/kernel/kernel.js.map +0 -1
- package/dist/kernel/monitor.d.ts +0 -35
- package/dist/kernel/monitor.d.ts.map +0 -1
- package/dist/kernel/monitor.js +0 -144
- package/dist/kernel/monitor.js.map +0 -1
- package/dist/kernel/replay-comparator.d.ts +0 -72
- package/dist/kernel/replay-comparator.d.ts.map +0 -1
- package/dist/kernel/replay-comparator.js +0 -251
- package/dist/kernel/replay-comparator.js.map +0 -1
- package/dist/kernel/replay-engine.d.ts +0 -108
- package/dist/kernel/replay-engine.d.ts.map +0 -1
- package/dist/kernel/replay-engine.js +0 -241
- package/dist/kernel/replay-engine.js.map +0 -1
- package/dist/kernel/replay-processor.d.ts +0 -109
- package/dist/kernel/replay-processor.d.ts.map +0 -1
- package/dist/kernel/replay-processor.js +0 -118
- package/dist/kernel/replay-processor.js.map +0 -1
- package/dist/kernel/simulation/filesystem-simulator.d.ts +0 -3
- package/dist/kernel/simulation/filesystem-simulator.d.ts.map +0 -1
- package/dist/kernel/simulation/filesystem-simulator.js +0 -81
- package/dist/kernel/simulation/filesystem-simulator.js.map +0 -1
- package/dist/kernel/simulation/git-simulator.d.ts +0 -5
- package/dist/kernel/simulation/git-simulator.d.ts.map +0 -1
- package/dist/kernel/simulation/git-simulator.js +0 -115
- package/dist/kernel/simulation/git-simulator.js.map +0 -1
- package/dist/kernel/simulation/package-simulator.d.ts +0 -5
- package/dist/kernel/simulation/package-simulator.d.ts.map +0 -1
- package/dist/kernel/simulation/package-simulator.js +0 -164
- package/dist/kernel/simulation/package-simulator.js.map +0 -1
- package/dist/kernel/simulation/registry.d.ts +0 -3
- package/dist/kernel/simulation/registry.d.ts.map +0 -1
- package/dist/kernel/simulation/registry.js +0 -24
- package/dist/kernel/simulation/registry.js.map +0 -1
- package/dist/kernel/simulation/types.d.ts +0 -35
- package/dist/kernel/simulation/types.d.ts.map +0 -1
- package/dist/kernel/simulation/types.js +0 -4
- package/dist/kernel/simulation/types.js.map +0 -1
- package/dist/plugins/discovery.d.ts +0 -45
- package/dist/plugins/discovery.d.ts.map +0 -1
- package/dist/plugins/discovery.js +0 -89
- package/dist/plugins/discovery.js.map +0 -1
- package/dist/plugins/index.d.ts +0 -10
- package/dist/plugins/index.d.ts.map +0 -1
- package/dist/plugins/index.js +0 -7
- package/dist/plugins/index.js.map +0 -1
- package/dist/plugins/registry.d.ts +0 -52
- package/dist/plugins/registry.d.ts.map +0 -1
- package/dist/plugins/registry.js +0 -148
- package/dist/plugins/registry.js.map +0 -1
- package/dist/plugins/sandbox.d.ts +0 -87
- package/dist/plugins/sandbox.d.ts.map +0 -1
- package/dist/plugins/sandbox.js +0 -122
- package/dist/plugins/sandbox.js.map +0 -1
- package/dist/plugins/types.d.ts +0 -61
- package/dist/plugins/types.d.ts.map +0 -1
- package/dist/plugins/types.js +0 -16
- package/dist/plugins/types.js.map +0 -1
- package/dist/plugins/validator.d.ts +0 -36
- package/dist/plugins/validator.d.ts.map +0 -1
- package/dist/plugins/validator.js +0 -276
- package/dist/plugins/validator.js.map +0 -1
- package/dist/policy/evaluator.d.ts +0 -41
- package/dist/policy/evaluator.d.ts.map +0 -1
- package/dist/policy/evaluator.js +0 -111
- package/dist/policy/evaluator.js.map +0 -1
- package/dist/policy/loader.d.ts +0 -13
- package/dist/policy/loader.d.ts.map +0 -1
- package/dist/policy/loader.js +0 -118
- package/dist/policy/loader.js.map +0 -1
- package/dist/policy/pack-loader.d.ts +0 -40
- package/dist/policy/pack-loader.d.ts.map +0 -1
- package/dist/policy/pack-loader.js +0 -138
- package/dist/policy/pack-loader.js.map +0 -1
- package/dist/policy/yaml-loader.d.ts +0 -23
- package/dist/policy/yaml-loader.d.ts.map +0 -1
- package/dist/policy/yaml-loader.js +0 -222
- package/dist/policy/yaml-loader.js.map +0 -1
- package/dist/renderers/index.d.ts +0 -6
- package/dist/renderers/index.d.ts.map +0 -1
- package/dist/renderers/index.js +0 -4
- package/dist/renderers/index.js.map +0 -1
- package/dist/renderers/registry.d.ts +0 -39
- package/dist/renderers/registry.d.ts.map +0 -1
- package/dist/renderers/registry.js +0 -97
- package/dist/renderers/registry.js.map +0 -1
- package/dist/renderers/tui-renderer.d.ts +0 -18
- package/dist/renderers/tui-renderer.d.ts.map +0 -1
- package/dist/renderers/tui-renderer.js +0 -57
- package/dist/renderers/tui-renderer.js.map +0 -1
- package/dist/renderers/types.d.ts +0 -52
- package/dist/renderers/types.d.ts.map +0 -1
- package/dist/renderers/types.js +0 -4
- package/dist/renderers/types.js.map +0 -1
- package/dist/telemetry/index.d.ts +0 -3
- package/dist/telemetry/index.d.ts.map +0 -1
- package/dist/telemetry/index.js +0 -2
- package/dist/telemetry/index.js.map +0 -1
- package/dist/telemetry/runtimeLogger.d.ts +0 -9
- package/dist/telemetry/runtimeLogger.d.ts.map +0 -1
- package/dist/telemetry/runtimeLogger.js +0 -68
- package/dist/telemetry/runtimeLogger.js.map +0 -1
- package/dist/telemetry/types.d.ts +0 -22
- package/dist/telemetry/types.d.ts.map +0 -1
- package/dist/telemetry/types.js +0 -4
- package/dist/telemetry/types.js.map +0 -1
- package/hooks/pre-commit +0 -28
- /package/dist/{cli/args.d.ts → args.d.ts} +0 -0
- /package/dist/{cli/args.js → args.js} +0 -0
- /package/dist/{cli/bin.d.ts → bin.d.ts} +0 -0
- /package/dist/{cli/colors.d.ts → colors.d.ts} +0 -0
- /package/dist/{cli/colors.js → colors.js} +0 -0
- /package/dist/{cli/commands → commands}/claude-init.d.ts +0 -0
- /package/dist/{cli/commands → commands}/plugin.d.ts +0 -0
- /package/dist/{cli/replay.d.ts → replay.d.ts} +0 -0
package/dist/cli/colors.d.ts.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"colors.d.ts","sourceRoot":"","sources":["../../src/cli/colors.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,KAAK,QAA4B,CAAC;AAC/C,eAAO,MAAM,IAAI,QAA4B,CAAC;AAC9C,eAAO,MAAM,GAAG,QAA4B,CAAC;AAE7C,eAAO,MAAM,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAUrC,CAAC;AAEF,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAQ9C,CAAC;AAEF,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzC;AAED,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExC;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE1C;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGzD"}
|
package/dist/cli/colors.js.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"colors.js","sourceRoot":"","sources":["../../src/cli/colors.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,uDAAuD;AAEvD,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAEtC,MAAM,GAAG,GAAG,OAAO,CAAC;AACpB,MAAM,CAAC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,MAAM,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9C,MAAM,CAAC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAE7C,MAAM,CAAC,MAAM,EAAE,GAA2B;IACxC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IACjC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IAC/B,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IACjC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IAClC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IAChC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IACnC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IAChC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;IACjC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE;CACjC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAA2B;IACjD,QAAQ,EAAE,MAAM;IAChB,OAAO,EAAE,KAAK;IACd,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,OAAO;IAChB,YAAY,EAAE,SAAS;IACvB,QAAQ,EAAE,KAAK;IACf,EAAE,EAAE,MAAM;CACX,CAAC;AAEF,MAAM,UAAU,KAAK,CAAC,IAAY,EAAE,EAAU;IAC5C,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,IAAY;IAC/B,OAAO,GAAG,IAAI,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,IAAY;IAC9B,OAAO,GAAG,GAAG,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,OAAO,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,KAAa;IAC/C,MAAM,IAAI,GAAG,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACjD,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"claude-hook.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/claude-hook.ts"],"names":[],"mappings":"AAOA,wBAAsB,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BjE"}
|
|
@@ -1,110 +0,0 @@
|
|
|
1
|
-
// AgentGuard Claude Code hook — PreToolUse governance + PostToolUse error monitoring.
|
|
2
|
-
// PreToolUse: routes actions through the kernel for policy/invariant enforcement.
|
|
3
|
-
// PostToolUse: reports Bash stderr errors (informational only).
|
|
4
|
-
// Always exits 0 — hooks must never fail.
|
|
5
|
-
export async function claudeHook(hookType) {
|
|
6
|
-
try {
|
|
7
|
-
const input = await readStdin();
|
|
8
|
-
if (!input)
|
|
9
|
-
process.exit(0);
|
|
10
|
-
let data;
|
|
11
|
-
try {
|
|
12
|
-
data = JSON.parse(input);
|
|
13
|
-
}
|
|
14
|
-
catch {
|
|
15
|
-
process.exit(0);
|
|
16
|
-
return;
|
|
17
|
-
}
|
|
18
|
-
// Determine hook type: explicit CLI arg > payload field > inference from tool_output
|
|
19
|
-
const isPreToolUse = hookType === 'pre' || data.hook === 'PreToolUse' || (!hookType && !data.tool_output);
|
|
20
|
-
if (isPreToolUse) {
|
|
21
|
-
// Resolve session_id: payload field > environment variable > undefined
|
|
22
|
-
const sessionId = data.session_id || process.env.CLAUDE_SESSION_ID || undefined;
|
|
23
|
-
const payload = { ...data, session_id: sessionId };
|
|
24
|
-
await handlePreToolUse(payload);
|
|
25
|
-
}
|
|
26
|
-
else {
|
|
27
|
-
handlePostToolUse(data);
|
|
28
|
-
}
|
|
29
|
-
}
|
|
30
|
-
catch {
|
|
31
|
-
// Swallow all errors — hooks must never fail
|
|
32
|
-
}
|
|
33
|
-
process.exit(0);
|
|
34
|
-
}
|
|
35
|
-
async function handlePreToolUse(payload) {
|
|
36
|
-
const { processClaudeCodeHook, formatHookResponse } = await import('../../adapters/claude-code.js');
|
|
37
|
-
const { createKernel } = await import('../../kernel/kernel.js');
|
|
38
|
-
const { createJsonlSink } = await import('../../events/jsonl.js');
|
|
39
|
-
const { createDecisionJsonlSink } = await import('../../events/decision-jsonl.js');
|
|
40
|
-
const { createTelemetryDecisionSink } = await import('../../telemetry/runtimeLogger.js');
|
|
41
|
-
const { loadPolicyDefs } = await import('../policy-resolver.js');
|
|
42
|
-
// Ensure hook field is set
|
|
43
|
-
const normalizedPayload = {
|
|
44
|
-
...payload,
|
|
45
|
-
hook: 'PreToolUse',
|
|
46
|
-
};
|
|
47
|
-
// Load policy (fail-open: empty policy if none found)
|
|
48
|
-
let policyDefs = [];
|
|
49
|
-
try {
|
|
50
|
-
policyDefs = loadPolicyDefs();
|
|
51
|
-
}
|
|
52
|
-
catch {
|
|
53
|
-
// Policy loading failure is non-fatal — continue with no policy (allow all)
|
|
54
|
-
}
|
|
55
|
-
// Generate run ID
|
|
56
|
-
const runId = `hook_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
|
|
57
|
-
// Create sinks (swallow errors — directories may not exist yet)
|
|
58
|
-
let jsonlSink, decisionSink, telemetrySink;
|
|
59
|
-
try {
|
|
60
|
-
jsonlSink = createJsonlSink({ runId });
|
|
61
|
-
decisionSink = createDecisionJsonlSink({ runId });
|
|
62
|
-
telemetrySink = createTelemetryDecisionSink();
|
|
63
|
-
}
|
|
64
|
-
catch {
|
|
65
|
-
// Sink creation failure is non-fatal
|
|
66
|
-
}
|
|
67
|
-
// Build kernel — dryRun: true because Claude Code handles execution
|
|
68
|
-
const kernel = createKernel({
|
|
69
|
-
runId,
|
|
70
|
-
policyDefs,
|
|
71
|
-
dryRun: true,
|
|
72
|
-
sinks: jsonlSink ? [jsonlSink] : [],
|
|
73
|
-
decisionSinks: [decisionSink, telemetrySink].filter(Boolean),
|
|
74
|
-
});
|
|
75
|
-
const result = await processClaudeCodeHook(kernel, normalizedPayload);
|
|
76
|
-
kernel.shutdown();
|
|
77
|
-
// If denied, output to stdout — this tells Claude Code to block the action
|
|
78
|
-
if (!result.allowed) {
|
|
79
|
-
const response = formatHookResponse(result);
|
|
80
|
-
if (response) {
|
|
81
|
-
process.stdout.write(response);
|
|
82
|
-
}
|
|
83
|
-
}
|
|
84
|
-
}
|
|
85
|
-
function handlePostToolUse(data) {
|
|
86
|
-
if (data.tool_name !== 'Bash')
|
|
87
|
-
return;
|
|
88
|
-
const output = (data.tool_output || {});
|
|
89
|
-
const exitCode = (output.exit_code ?? output.exitCode ?? 0);
|
|
90
|
-
const stderr = (output.stderr || '');
|
|
91
|
-
if (exitCode !== 0 && stderr.trim()) {
|
|
92
|
-
process.stdout.write('\n');
|
|
93
|
-
process.stdout.write(` \x1b[1m\x1b[31mError detected:\x1b[0m ${stderr.trim().split('\n')[0].slice(0, 80)}\n`);
|
|
94
|
-
process.stdout.write('\n');
|
|
95
|
-
}
|
|
96
|
-
}
|
|
97
|
-
function readStdin() {
|
|
98
|
-
return new Promise((resolve) => {
|
|
99
|
-
let input = '';
|
|
100
|
-
process.stdin.setEncoding('utf8');
|
|
101
|
-
process.stdin.on('data', (chunk) => {
|
|
102
|
-
input += chunk;
|
|
103
|
-
});
|
|
104
|
-
process.stdin.on('end', () => resolve(input));
|
|
105
|
-
process.stdin.on('error', () => resolve(''));
|
|
106
|
-
if (process.stdin.isTTY)
|
|
107
|
-
resolve('');
|
|
108
|
-
});
|
|
109
|
-
}
|
|
110
|
-
//# sourceMappingURL=claude-hook.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"claude-hook.js","sourceRoot":"","sources":["../../../src/cli/commands/claude-hook.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,kFAAkF;AAClF,gEAAgE;AAChE,0CAA0C;AAI1C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAiB;IAChD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAE5B,IAAI,IAA6B,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAA4B,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,OAAO;QACT,CAAC;QAED,qFAAqF;QACrF,MAAM,YAAY,GAChB,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAEvF,IAAI,YAAY,EAAE,CAAC;YACjB,uEAAuE;YACvE,MAAM,SAAS,GACZ,IAAI,CAAC,UAAiC,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS,CAAC;YACxF,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,SAAS,EAAsC,CAAC;YACvF,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,OAA8B;IAC5D,MAAM,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,GACjD,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;IAChD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAChE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAClE,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;IACnF,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;IACzF,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAEjE,2BAA2B;IAC3B,MAAM,iBAAiB,GAA0B;QAC/C,GAAG,OAAO;QACV,IAAI,EAAE,YAAY;KACnB,CAAC;IAEF,sDAAsD;IACtD,IAAI,UAAU,GAAc,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,UAAU,GAAG,cAAc,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;IAC9E,CAAC;IAED,kBAAkB;IAClB,MAAM,KAAK,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAE7E,gEAAgE;IAChE,IAAI,SAAS,EAAE,YAAY,EAAE,aAAa,CAAC;IAC3C,IAAI,CAAC;QACH,SAAS,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACvC,YAAY,GAAG,uBAAuB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,aAAa,GAAG,2BAA2B,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IAED,oEAAoE;IACpE,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,KAAK;QACL,UAAU;QACV,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE;QACnC,aAAa,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC,MAAM,CACjD,OAAO,CACoD;KAC9D,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtE,MAAM,CAAC,QAAQ,EAAE,CAAC;IAElB,2EAA2E;IAC3E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAA6B;IACtD,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO;IAEtC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAA4B,CAAC;IACnE,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAW,CAAC;IACtE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAW,CAAC;IAE/C,IAAI,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2CAA2C,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CACzF,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,KAAK,IAAI,KAAK,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"claude-init.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/claude-init.ts"],"names":[],"mappings":"AA6BA,wBAAsB,UAAU,CAAC,IAAI,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAgHnE"}
|
|
@@ -1,150 +0,0 @@
|
|
|
1
|
-
// agentguard claude-init — set up Claude Code integration
|
|
2
|
-
import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'node:fs';
|
|
3
|
-
import { execSync } from 'node:child_process';
|
|
4
|
-
import { join, resolve } from 'node:path';
|
|
5
|
-
import { fileURLToPath } from 'node:url';
|
|
6
|
-
import { dirname } from 'node:path';
|
|
7
|
-
import { homedir } from 'node:os';
|
|
8
|
-
import { RESET, BOLD, DIM, FG } from '../colors.js';
|
|
9
|
-
const __filename = fileURLToPath(import.meta.url);
|
|
10
|
-
const __dirname = dirname(__filename);
|
|
11
|
-
const HOOK_MARKER = 'claude-hook';
|
|
12
|
-
export async function claudeInit(args = []) {
|
|
13
|
-
const isGlobal = args.includes('--global') || args.includes('-g');
|
|
14
|
-
const isRemove = args.includes('--remove') || args.includes('--uninstall');
|
|
15
|
-
const hookScript = resolve(__dirname, 'claude-hook.js');
|
|
16
|
-
const settingsDir = isGlobal ? join(homedir(), '.claude') : join(process.cwd(), '.claude');
|
|
17
|
-
const settingsPath = join(settingsDir, 'settings.json');
|
|
18
|
-
const settingsLabel = isGlobal ? '~/.claude/settings.json' : '.claude/settings.json';
|
|
19
|
-
process.stderr.write('\n');
|
|
20
|
-
process.stderr.write(` ${BOLD}AgentGuard Claude Code Integration${RESET}\n\n`);
|
|
21
|
-
if (isRemove) {
|
|
22
|
-
removeHook(settingsPath, settingsLabel);
|
|
23
|
-
return;
|
|
24
|
-
}
|
|
25
|
-
if (!existsSync(settingsDir)) {
|
|
26
|
-
mkdirSync(settingsDir, { recursive: true });
|
|
27
|
-
}
|
|
28
|
-
let settings = {};
|
|
29
|
-
if (existsSync(settingsPath)) {
|
|
30
|
-
try {
|
|
31
|
-
settings = JSON.parse(readFileSync(settingsPath, 'utf8'));
|
|
32
|
-
}
|
|
33
|
-
catch {
|
|
34
|
-
process.stderr.write(` ${FG.yellow}Warning:${RESET} Could not parse ${settingsLabel}, creating fresh config.\n`);
|
|
35
|
-
settings = {};
|
|
36
|
-
}
|
|
37
|
-
}
|
|
38
|
-
if (hasAgentGuardHook(settings)) {
|
|
39
|
-
process.stderr.write(` ${FG.yellow}Already configured.${RESET} AgentGuard hook found in ${settingsLabel}.\n`);
|
|
40
|
-
process.stderr.write(` ${DIM}Use --remove to uninstall.${RESET}\n\n`);
|
|
41
|
-
return;
|
|
42
|
-
}
|
|
43
|
-
if (!settings.hooks)
|
|
44
|
-
settings.hooks = {};
|
|
45
|
-
// PreToolUse — governance enforcement (routes all tool calls through the kernel)
|
|
46
|
-
if (!settings.hooks.PreToolUse)
|
|
47
|
-
settings.hooks.PreToolUse = [];
|
|
48
|
-
settings.hooks.PreToolUse.push({
|
|
49
|
-
hooks: [
|
|
50
|
-
{
|
|
51
|
-
type: 'command',
|
|
52
|
-
command: `node ${hookScript} pre`,
|
|
53
|
-
},
|
|
54
|
-
],
|
|
55
|
-
});
|
|
56
|
-
// PostToolUse — error monitoring (Bash stderr reporting)
|
|
57
|
-
if (!settings.hooks.PostToolUse)
|
|
58
|
-
settings.hooks.PostToolUse = [];
|
|
59
|
-
settings.hooks.PostToolUse.push({
|
|
60
|
-
matcher: 'Bash',
|
|
61
|
-
hooks: [
|
|
62
|
-
{
|
|
63
|
-
type: 'command',
|
|
64
|
-
command: `node ${hookScript} post`,
|
|
65
|
-
},
|
|
66
|
-
],
|
|
67
|
-
});
|
|
68
|
-
writeFileSync(settingsPath, JSON.stringify(settings, null, 2), 'utf8');
|
|
69
|
-
process.stderr.write(` ${FG.green}✓${RESET} Hooks installed in ${FG.cyan}${settingsLabel}${RESET}\n`);
|
|
70
|
-
process.stderr.write(` ${DIM}PreToolUse: governance enforcement (all tools)${RESET}\n`);
|
|
71
|
-
process.stderr.write(` ${DIM}PostToolUse: error monitoring (Bash)${RESET}\n\n`);
|
|
72
|
-
// Set core.hooksPath so git uses the repo's hooks/ directory
|
|
73
|
-
// (pre-commit auto-stages telemetry, post-commit tracks dev activity)
|
|
74
|
-
try {
|
|
75
|
-
const currentHooksPath = execSync('git config core.hooksPath', { encoding: 'utf8' }).trim();
|
|
76
|
-
if (currentHooksPath !== 'hooks') {
|
|
77
|
-
execSync('git config core.hooksPath hooks');
|
|
78
|
-
process.stderr.write(` ${FG.green}✓${RESET} Git hooks path set to ${FG.cyan}hooks/${RESET}\n`);
|
|
79
|
-
}
|
|
80
|
-
}
|
|
81
|
-
catch {
|
|
82
|
-
// Not in a git repo, or no hooksPath set yet
|
|
83
|
-
try {
|
|
84
|
-
execSync('git config core.hooksPath hooks');
|
|
85
|
-
process.stderr.write(` ${FG.green}✓${RESET} Git hooks path set to ${FG.cyan}hooks/${RESET}\n`);
|
|
86
|
-
}
|
|
87
|
-
catch {
|
|
88
|
-
process.stderr.write(` ${FG.yellow}Warning:${RESET} Could not set git hooks path. Run: git config core.hooksPath hooks\n`);
|
|
89
|
-
}
|
|
90
|
-
}
|
|
91
|
-
// Ensure telemetry directories exist
|
|
92
|
-
const dirs = ['.agentguard/events', '.agentguard/decisions', 'logs'];
|
|
93
|
-
for (const dir of dirs) {
|
|
94
|
-
const dirPath = join(process.cwd(), dir);
|
|
95
|
-
if (!existsSync(dirPath)) {
|
|
96
|
-
mkdirSync(dirPath, { recursive: true });
|
|
97
|
-
}
|
|
98
|
-
}
|
|
99
|
-
process.stderr.write(` ${FG.green}${BOLD}Done!${RESET} AgentGuard governance will enforce policies on all Claude Code actions.\n`);
|
|
100
|
-
process.stderr.write(` ${DIM}Run "agentguard inspect --last" to view action history.${RESET}\n`);
|
|
101
|
-
process.stderr.write(` ${DIM}Use "agentguard claude-init --remove" to uninstall.${RESET}\n\n`);
|
|
102
|
-
}
|
|
103
|
-
function removeHook(settingsPath, settingsLabel) {
|
|
104
|
-
if (!existsSync(settingsPath)) {
|
|
105
|
-
process.stderr.write(` ${DIM}No settings file found at ${settingsLabel}. Nothing to remove.${RESET}\n\n`);
|
|
106
|
-
return;
|
|
107
|
-
}
|
|
108
|
-
let settings;
|
|
109
|
-
try {
|
|
110
|
-
settings = JSON.parse(readFileSync(settingsPath, 'utf8'));
|
|
111
|
-
}
|
|
112
|
-
catch {
|
|
113
|
-
process.stderr.write(` ${FG.red}Error:${RESET} Could not parse ${settingsLabel}.\n\n`);
|
|
114
|
-
return;
|
|
115
|
-
}
|
|
116
|
-
if (!hasAgentGuardHook(settings)) {
|
|
117
|
-
process.stderr.write(` ${DIM}No AgentGuard hook found in ${settingsLabel}. Nothing to remove.${RESET}\n\n`);
|
|
118
|
-
return;
|
|
119
|
-
}
|
|
120
|
-
const filterAgentGuard = (entries) => entries.filter((entry) => {
|
|
121
|
-
const hooks = entry.hooks || [];
|
|
122
|
-
return !hooks.some((h) => h.command && h.command.includes(HOOK_MARKER));
|
|
123
|
-
});
|
|
124
|
-
const preToolUse = settings.hooks?.PreToolUse || [];
|
|
125
|
-
settings.hooks.PreToolUse = filterAgentGuard(preToolUse);
|
|
126
|
-
if (settings.hooks.PreToolUse.length === 0) {
|
|
127
|
-
delete settings.hooks.PreToolUse;
|
|
128
|
-
}
|
|
129
|
-
const postToolUse = settings.hooks?.PostToolUse || [];
|
|
130
|
-
settings.hooks.PostToolUse = filterAgentGuard(postToolUse);
|
|
131
|
-
if (settings.hooks.PostToolUse.length === 0) {
|
|
132
|
-
delete settings.hooks.PostToolUse;
|
|
133
|
-
}
|
|
134
|
-
if (Object.keys(settings.hooks).length === 0) {
|
|
135
|
-
delete settings.hooks;
|
|
136
|
-
}
|
|
137
|
-
writeFileSync(settingsPath, JSON.stringify(settings, null, 2), 'utf8');
|
|
138
|
-
process.stderr.write(` ${FG.green}✓${RESET} Hook removed from ${FG.cyan}${settingsLabel}${RESET}\n`);
|
|
139
|
-
process.stderr.write(` ${DIM}AgentGuard governance will no longer monitor in Claude Code.${RESET}\n\n`);
|
|
140
|
-
}
|
|
141
|
-
function hasAgentGuardHook(settings) {
|
|
142
|
-
const preToolUse = settings?.hooks?.PreToolUse || [];
|
|
143
|
-
const postToolUse = settings?.hooks?.PostToolUse || [];
|
|
144
|
-
const allEntries = [...preToolUse, ...postToolUse];
|
|
145
|
-
return allEntries.some((entry) => {
|
|
146
|
-
const hooks = entry.hooks || [];
|
|
147
|
-
return hooks.some((h) => h.command && h.command.includes(HOOK_MARKER));
|
|
148
|
-
});
|
|
149
|
-
}
|
|
150
|
-
//# sourceMappingURL=claude-init.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"claude-init.js","sourceRoot":"","sources":["../../../src/cli/commands/claude-init.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAE1D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC,MAAM,WAAW,GAAG,aAAa,CAAC;AAgBlC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAiB,EAAE;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAE3E,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAExD,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;IAC3F,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAErF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,qCAAqC,KAAK,MAAM,CAAC,CAAC;IAEhF,IAAI,QAAQ,EAAE,CAAC;QACb,UAAU,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,QAAQ,GAAa,EAAE,CAAC;IAC5B,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAa,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,MAAM,WAAW,KAAK,oBAAoB,aAAa,4BAA4B,CAC5F,CAAC;YACF,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAED,IAAI,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,MAAM,sBAAsB,KAAK,6BAA6B,aAAa,KAAK,CACzF,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,6BAA6B,KAAK,MAAM,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK;QAAE,QAAQ,CAAC,KAAK,GAAG,EAAE,CAAC;IAEzC,iFAAiF;IACjF,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU;QAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC;IAC/D,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAC7B,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,QAAQ,UAAU,MAAM;aAClC;SACF;KACF,CAAC,CAAC;IAEH,yDAAyD;IACzD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW;QAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC;IACjE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC;QAC9B,OAAO,EAAE,MAAM;QACf,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,QAAQ,UAAU,OAAO;aACnC;SACF;KACF,CAAC,CAAC;IAEH,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAEvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,KAAK,IAAI,KAAK,wBAAwB,EAAE,CAAC,IAAI,GAAG,aAAa,GAAG,KAAK,IAAI,CAClF,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,kDAAkD,KAAK,IAAI,CAAC,CAAC;IAC1F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,uCAAuC,KAAK,MAAM,CAAC,CAAC;IACjF,6DAA6D;IAC7D,sEAAsE;IACtE,IAAI,CAAC;QACH,MAAM,gBAAgB,GAAG,QAAQ,CAAC,2BAA2B,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5F,IAAI,gBAAgB,KAAK,OAAO,EAAE,CAAC;YACjC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;YAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,KAAK,IAAI,KAAK,2BAA2B,EAAE,CAAC,IAAI,SAAS,KAAK,IAAI,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;QAC7C,IAAI,CAAC;YACH,QAAQ,CAAC,iCAAiC,CAAC,CAAC;YAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,KAAK,IAAI,KAAK,2BAA2B,EAAE,CAAC,IAAI,SAAS,KAAK,IAAI,CAC3E,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,MAAM,WAAW,KAAK,uEAAuE,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,MAAM,IAAI,GAAG,CAAC,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACrE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,KAAK,GAAG,IAAI,QAAQ,KAAK,4EAA4E,CAC9G,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,0DAA0D,KAAK,IAAI,CAAC,CAAC;IAClG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,sDAAsD,KAAK,MAAM,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,UAAU,CAAC,YAAoB,EAAE,aAAqB;IAC7D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,6BAA6B,aAAa,uBAAuB,KAAK,MAAM,CACrF,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAa,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,SAAS,KAAK,oBAAoB,aAAa,OAAO,CAAC,CAAC;QACxF,OAAO;IACT,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,+BAA+B,aAAa,uBAAuB,KAAK,MAAM,CACvF,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,gBAAgB,GAAG,CAAC,OAAoB,EAAE,EAAE,CAChD,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEL,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC;IACpD,QAAQ,CAAC,KAAM,CAAC,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,QAAQ,CAAC,KAAM,CAAC,UAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,QAAQ,CAAC,KAAM,CAAC,UAAU,CAAC;IACpC,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,EAAE,WAAW,IAAI,EAAE,CAAC;IACtD,QAAQ,CAAC,KAAM,CAAC,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,KAAM,CAAC,WAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,QAAQ,CAAC,KAAM,CAAC,WAAW,CAAC;IACrC,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAED,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAEvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,EAAE,CAAC,KAAK,IAAI,KAAK,uBAAuB,EAAE,CAAC,IAAI,GAAG,aAAa,GAAG,KAAK,IAAI,CACjF,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,GAAG,+DAA+D,KAAK,MAAM,CACnF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAkB;IAC3C,MAAM,UAAU,GAAG,QAAQ,EAAE,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC;IACrD,MAAM,WAAW,GAAG,QAAQ,EAAE,KAAK,EAAE,WAAW,IAAI,EAAE,CAAC;IACvD,MAAM,UAAU,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,WAAW,CAAC,CAAC;IACnD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -1,11 +0,0 @@
|
|
|
1
|
-
/** Metadata header written as the first line of an exported governance session. */
|
|
2
|
-
export interface GovernanceExportHeader {
|
|
3
|
-
readonly __agentguard_export: true;
|
|
4
|
-
readonly version: 1;
|
|
5
|
-
readonly runId: string;
|
|
6
|
-
readonly exportedAt: number;
|
|
7
|
-
readonly eventCount: number;
|
|
8
|
-
readonly decisionCount: number;
|
|
9
|
-
}
|
|
10
|
-
export declare function exportSession(args: string[]): Promise<void>;
|
|
11
|
-
//# sourceMappingURL=export.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"export.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/export.ts"],"names":[],"mappings":"AAaA,mFAAmF;AACnF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,mBAAmB,EAAE,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AA+CD,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgEjE"}
|
|
@@ -1,113 +0,0 @@
|
|
|
1
|
-
// CLI command: agentguard export — export a governance session to a portable JSONL file.
|
|
2
|
-
import { readFileSync, writeFileSync, existsSync, readdirSync } from 'node:fs';
|
|
3
|
-
import { join, resolve } from 'node:path';
|
|
4
|
-
import { parseArgs } from '../args.js';
|
|
5
|
-
import { getEventFilePath } from '../../events/jsonl.js';
|
|
6
|
-
import { getDecisionFilePath } from '../../events/decision-jsonl.js';
|
|
7
|
-
const BASE_DIR = '.agentguard';
|
|
8
|
-
const EVENTS_DIR = join(BASE_DIR, 'events');
|
|
9
|
-
function listRuns() {
|
|
10
|
-
if (!existsSync(EVENTS_DIR))
|
|
11
|
-
return [];
|
|
12
|
-
return readdirSync(EVENTS_DIR)
|
|
13
|
-
.filter((f) => f.endsWith('.jsonl'))
|
|
14
|
-
.map((f) => f.replace('.jsonl', ''))
|
|
15
|
-
.sort()
|
|
16
|
-
.reverse();
|
|
17
|
-
}
|
|
18
|
-
function loadRunEvents(runId) {
|
|
19
|
-
const filePath = getEventFilePath(runId);
|
|
20
|
-
if (!existsSync(filePath))
|
|
21
|
-
return [];
|
|
22
|
-
const events = [];
|
|
23
|
-
const content = readFileSync(filePath, 'utf8');
|
|
24
|
-
for (const line of content.split('\n')) {
|
|
25
|
-
const trimmed = line.trim();
|
|
26
|
-
if (!trimmed)
|
|
27
|
-
continue;
|
|
28
|
-
try {
|
|
29
|
-
events.push(JSON.parse(trimmed));
|
|
30
|
-
}
|
|
31
|
-
catch {
|
|
32
|
-
// Skip malformed lines
|
|
33
|
-
}
|
|
34
|
-
}
|
|
35
|
-
return events;
|
|
36
|
-
}
|
|
37
|
-
function loadRunDecisions(runId) {
|
|
38
|
-
const filePath = getDecisionFilePath(runId);
|
|
39
|
-
if (!existsSync(filePath))
|
|
40
|
-
return [];
|
|
41
|
-
const records = [];
|
|
42
|
-
const content = readFileSync(filePath, 'utf8');
|
|
43
|
-
for (const line of content.split('\n')) {
|
|
44
|
-
const trimmed = line.trim();
|
|
45
|
-
if (!trimmed)
|
|
46
|
-
continue;
|
|
47
|
-
try {
|
|
48
|
-
records.push(JSON.parse(trimmed));
|
|
49
|
-
}
|
|
50
|
-
catch {
|
|
51
|
-
// Skip malformed lines
|
|
52
|
-
}
|
|
53
|
-
}
|
|
54
|
-
return records;
|
|
55
|
-
}
|
|
56
|
-
export async function exportSession(args) {
|
|
57
|
-
const parsed = parseArgs(args, {
|
|
58
|
-
boolean: ['--last'],
|
|
59
|
-
string: ['--output', '-o'],
|
|
60
|
-
alias: { '-o': '--output' },
|
|
61
|
-
});
|
|
62
|
-
// Resolve runId
|
|
63
|
-
let runId;
|
|
64
|
-
if (parsed.flags.last) {
|
|
65
|
-
const runs = listRuns();
|
|
66
|
-
runId = runs[0];
|
|
67
|
-
if (!runId) {
|
|
68
|
-
process.stderr.write('\n \x1b[31mError:\x1b[0m No runs recorded yet.\n\n');
|
|
69
|
-
process.exitCode = 1;
|
|
70
|
-
return;
|
|
71
|
-
}
|
|
72
|
-
}
|
|
73
|
-
else {
|
|
74
|
-
runId = parsed.positional[0];
|
|
75
|
-
}
|
|
76
|
-
if (!runId) {
|
|
77
|
-
process.stderr.write('\n Usage: agentguard export <runId> [--output <file>]\n');
|
|
78
|
-
process.stderr.write(' agentguard export --last\n\n');
|
|
79
|
-
process.exitCode = 1;
|
|
80
|
-
return;
|
|
81
|
-
}
|
|
82
|
-
// Load events and decisions
|
|
83
|
-
const events = loadRunEvents(runId);
|
|
84
|
-
if (events.length === 0) {
|
|
85
|
-
process.stderr.write(`\n \x1b[31mError:\x1b[0m Run "${runId}" has no events to export.\n`);
|
|
86
|
-
process.stderr.write(` Expected file: ${getEventFilePath(runId)}\n\n`);
|
|
87
|
-
process.exitCode = 1;
|
|
88
|
-
return;
|
|
89
|
-
}
|
|
90
|
-
const decisions = loadRunDecisions(runId);
|
|
91
|
-
// Determine output path
|
|
92
|
-
const outputPath = resolve(parsed.flags.output || `${runId}.agentguard.jsonl`);
|
|
93
|
-
// Build export file: header + events + decisions
|
|
94
|
-
const header = {
|
|
95
|
-
__agentguard_export: true,
|
|
96
|
-
version: 1,
|
|
97
|
-
runId,
|
|
98
|
-
exportedAt: Date.now(),
|
|
99
|
-
eventCount: events.length,
|
|
100
|
-
decisionCount: decisions.length,
|
|
101
|
-
};
|
|
102
|
-
const lines = [
|
|
103
|
-
JSON.stringify(header),
|
|
104
|
-
...events.map((e) => JSON.stringify(e)),
|
|
105
|
-
...decisions.map((d) => JSON.stringify(d)),
|
|
106
|
-
];
|
|
107
|
-
writeFileSync(outputPath, lines.join('\n') + '\n', 'utf8');
|
|
108
|
-
process.stderr.write(`\n \x1b[32m\u2713\x1b[0m Exported run \x1b[1m${runId}\x1b[0m\n`);
|
|
109
|
-
process.stderr.write(` Events: ${events.length}\n`);
|
|
110
|
-
process.stderr.write(` Decisions: ${decisions.length}\n`);
|
|
111
|
-
process.stderr.write(` Output: ${outputPath}\n\n`);
|
|
112
|
-
}
|
|
113
|
-
//# sourceMappingURL=export.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"export.js","sourceRoot":"","sources":["../../../src/cli/commands/export.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAIrE,MAAM,QAAQ,GAAG,aAAa,CAAC;AAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAY5C,SAAS,QAAQ;IACf,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,WAAW,CAAC,UAAU,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SACnC,IAAI,EAAE;SACN,OAAO,EAAE,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,OAAO,GAA+B,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAA6B,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAc;IAChD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE;QAC7B,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,MAAM,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC;QAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;KAC5B,CAAC,CAAC;IAEH,gBAAgB;IAChB,IAAI,KAAyB,CAAC;IAC9B,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;YAC5E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QACjF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC9D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,4BAA4B;IAC5B,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,KAAK,8BAA8B,CAAC,CAAC;QAC5F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAE1C,wBAAwB;IACxB,MAAM,UAAU,GAAG,OAAO,CAAE,MAAM,CAAC,KAAK,CAAC,MAAiB,IAAI,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAE3F,iDAAiD;IACjD,MAAM,MAAM,GAA2B;QACrC,mBAAmB,EAAE,IAAI;QACzB,OAAO,EAAE,CAAC;QACV,KAAK;QACL,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;QACtB,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,aAAa,EAAE,SAAS,CAAC,MAAM;KAChC,CAAC;IAEF,MAAM,KAAK,GAAG;QACZ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QACtB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACvC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;KAC3C,CAAC;IAEF,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAE3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,KAAK,WAAW,CAAC,CAAC;IACxF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,UAAU,MAAM,CAAC,CAAC;AAC3D,CAAC"}
|
|
@@ -1,12 +0,0 @@
|
|
|
1
|
-
import type { RendererRegistry } from '../../renderers/registry.js';
|
|
2
|
-
export interface GuardOptions {
|
|
3
|
-
policy?: string;
|
|
4
|
-
dryRun?: boolean;
|
|
5
|
-
verbose?: boolean;
|
|
6
|
-
stdin?: boolean;
|
|
7
|
-
simulate?: boolean;
|
|
8
|
-
/** Optional pre-configured renderer registry (for custom renderers) */
|
|
9
|
-
renderers?: RendererRegistry;
|
|
10
|
-
}
|
|
11
|
-
export declare function guard(_args: string[], options?: GuardOptions): Promise<number>;
|
|
12
|
-
//# sourceMappingURL=guard.d.ts.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/guard.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uEAAuE;IACvE,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED,wBAAsB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkExF"}
|
|
@@ -1,145 +0,0 @@
|
|
|
1
|
-
// CLI command: agentguard guard — start the governed action runtime.
|
|
2
|
-
// Reads stdin for action proposals (JSON), evaluates them, writes results to stdout.
|
|
3
|
-
// Uses the renderer plugin system for all human-facing output.
|
|
4
|
-
import { createKernel } from '../../kernel/kernel.js';
|
|
5
|
-
import { createLiveRegistry } from '../../adapters/registry.js';
|
|
6
|
-
import { createJsonlSink } from '../../events/jsonl.js';
|
|
7
|
-
import { createDecisionJsonlSink } from '../../events/decision-jsonl.js';
|
|
8
|
-
import { createTelemetryDecisionSink } from '../../telemetry/runtimeLogger.js';
|
|
9
|
-
import { loadPolicyDefs } from '../policy-resolver.js';
|
|
10
|
-
import { createSimulatorRegistry } from '../../kernel/simulation/registry.js';
|
|
11
|
-
import { createGitSimulator } from '../../kernel/simulation/git-simulator.js';
|
|
12
|
-
import { createFilesystemSimulator } from '../../kernel/simulation/filesystem-simulator.js';
|
|
13
|
-
import { createPackageSimulator } from '../../kernel/simulation/package-simulator.js';
|
|
14
|
-
import { generateSeed, createSeededRng } from '../../core/rng.js';
|
|
15
|
-
import { simpleHash } from '../../core/hash.js';
|
|
16
|
-
import { createRendererRegistry } from '../../renderers/registry.js';
|
|
17
|
-
import { createTuiRenderer } from '../../renderers/tui-renderer.js';
|
|
18
|
-
export async function guard(_args, options = {}) {
|
|
19
|
-
// Resolve policy
|
|
20
|
-
const policyDefs = loadPolicyDefs(options.policy);
|
|
21
|
-
const policyPath = options.policy;
|
|
22
|
-
// Build simulator registry (enabled by default)
|
|
23
|
-
const simulators = createSimulatorRegistry();
|
|
24
|
-
if (options.simulate !== false) {
|
|
25
|
-
simulators.register(createGitSimulator());
|
|
26
|
-
simulators.register(createFilesystemSimulator());
|
|
27
|
-
simulators.register(createPackageSimulator());
|
|
28
|
-
}
|
|
29
|
-
// Create seeded RNG — seed is stored in session metadata for deterministic replay
|
|
30
|
-
const seed = generateSeed();
|
|
31
|
-
const rng = createSeededRng(seed);
|
|
32
|
-
// Generate run ID using seeded RNG so both sinks share it
|
|
33
|
-
const runId = `run_${Date.now()}_${simpleHash(rng.random().toString())}`;
|
|
34
|
-
// Create sinks
|
|
35
|
-
const jsonlSink = createJsonlSink({ runId });
|
|
36
|
-
const decisionSink = createDecisionJsonlSink({ runId });
|
|
37
|
-
const telemetrySink = createTelemetryDecisionSink();
|
|
38
|
-
// Build kernel config
|
|
39
|
-
const kernelConfig = {
|
|
40
|
-
runId,
|
|
41
|
-
rng,
|
|
42
|
-
policyDefs,
|
|
43
|
-
dryRun: options.dryRun ?? false,
|
|
44
|
-
adapters: options.dryRun ? undefined : createLiveRegistry(),
|
|
45
|
-
sinks: [jsonlSink],
|
|
46
|
-
decisionSinks: [decisionSink, telemetrySink],
|
|
47
|
-
simulators: simulators.all().length > 0 ? simulators : undefined,
|
|
48
|
-
};
|
|
49
|
-
const kernel = createKernel(kernelConfig);
|
|
50
|
-
// Set up renderer registry — use provided registry or create default with TUI
|
|
51
|
-
const renderers = options.renderers ?? createRendererRegistry();
|
|
52
|
-
if (!options.renderers) {
|
|
53
|
-
renderers.register(createTuiRenderer({ verbose: options.verbose }));
|
|
54
|
-
}
|
|
55
|
-
// Notify renderers: run started
|
|
56
|
-
const policyName = policyPath || 'default (no file)';
|
|
57
|
-
const simCount = simulators.all().length;
|
|
58
|
-
renderers.notifyRunStarted({
|
|
59
|
-
runId,
|
|
60
|
-
policyName,
|
|
61
|
-
invariantCount: 6,
|
|
62
|
-
verbose: options.verbose,
|
|
63
|
-
dryRun: options.dryRun,
|
|
64
|
-
simulatorCount: simCount,
|
|
65
|
-
});
|
|
66
|
-
if (!options.stdin) {
|
|
67
|
-
// Interactive mode prompt
|
|
68
|
-
process.stderr.write(` ${'\x1b[2m'}Listening for actions on stdin (JSON per line)...${'\x1b[0m'}\n`);
|
|
69
|
-
process.stderr.write(` ${'\x1b[2m'}Press Ctrl+C to stop.${'\x1b[0m'}\n\n`);
|
|
70
|
-
}
|
|
71
|
-
return processStdin(kernel, renderers);
|
|
72
|
-
}
|
|
73
|
-
async function processStdin(kernel, renderers) {
|
|
74
|
-
const startTime = Date.now();
|
|
75
|
-
let totalActions = 0;
|
|
76
|
-
let allowedCount = 0;
|
|
77
|
-
let deniedCount = 0;
|
|
78
|
-
let violationCount = 0;
|
|
79
|
-
return new Promise((resolvePromise) => {
|
|
80
|
-
let buffer = '';
|
|
81
|
-
process.stdin.setEncoding('utf8');
|
|
82
|
-
process.stdin.on('data', async (chunk) => {
|
|
83
|
-
buffer += chunk;
|
|
84
|
-
const lines = buffer.split('\n');
|
|
85
|
-
buffer = lines.pop() || '';
|
|
86
|
-
for (const line of lines) {
|
|
87
|
-
const trimmed = line.trim();
|
|
88
|
-
if (!trimmed)
|
|
89
|
-
continue;
|
|
90
|
-
try {
|
|
91
|
-
const rawAction = JSON.parse(trimmed);
|
|
92
|
-
const result = await kernel.propose(rawAction);
|
|
93
|
-
totalActions++;
|
|
94
|
-
if (result.allowed)
|
|
95
|
-
allowedCount++;
|
|
96
|
-
else
|
|
97
|
-
deniedCount++;
|
|
98
|
-
violationCount += result.decision.violations.length;
|
|
99
|
-
// Dispatch to all registered renderers
|
|
100
|
-
renderers.notifyActionResult(result);
|
|
101
|
-
if (result.decisionRecord) {
|
|
102
|
-
renderers.notifyDecisionRecord(result.decisionRecord);
|
|
103
|
-
}
|
|
104
|
-
// Write machine-readable result to stdout
|
|
105
|
-
const output = {
|
|
106
|
-
allowed: result.allowed,
|
|
107
|
-
executed: result.executed,
|
|
108
|
-
action: result.decision.intent.action,
|
|
109
|
-
target: result.decision.intent.target,
|
|
110
|
-
reason: result.decision.decision.reason,
|
|
111
|
-
violations: result.decision.violations.map((v) => v.name),
|
|
112
|
-
runId: result.runId,
|
|
113
|
-
decisionRecordId: result.decisionRecord?.recordId,
|
|
114
|
-
};
|
|
115
|
-
process.stdout.write(JSON.stringify(output) + '\n');
|
|
116
|
-
}
|
|
117
|
-
catch (err) {
|
|
118
|
-
process.stderr.write(` \x1b[31mError:\x1b[0m Invalid JSON input: ${err.message}\n`);
|
|
119
|
-
}
|
|
120
|
-
}
|
|
121
|
-
});
|
|
122
|
-
const shutdown = () => {
|
|
123
|
-
kernel.shutdown();
|
|
124
|
-
renderers.notifyRunEnded({
|
|
125
|
-
runId: kernel.getRunId(),
|
|
126
|
-
totalActions,
|
|
127
|
-
allowed: allowedCount,
|
|
128
|
-
denied: deniedCount,
|
|
129
|
-
violations: violationCount,
|
|
130
|
-
durationMs: Date.now() - startTime,
|
|
131
|
-
});
|
|
132
|
-
renderers.disposeAll();
|
|
133
|
-
};
|
|
134
|
-
process.stdin.on('end', () => {
|
|
135
|
-
shutdown();
|
|
136
|
-
resolvePromise(0);
|
|
137
|
-
});
|
|
138
|
-
process.on('SIGINT', () => {
|
|
139
|
-
shutdown();
|
|
140
|
-
process.stderr.write('\n \x1b[33mAgentGuard stopped.\x1b[0m\n\n');
|
|
141
|
-
resolvePromise(0);
|
|
142
|
-
});
|
|
143
|
-
});
|
|
144
|
-
}
|
|
145
|
-
//# sourceMappingURL=guard.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/cli/commands/guard.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,qFAAqF;AACrF,+DAA+D;AAE/D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AAEtF,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAYpE,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,KAAe,EAAE,UAAwB,EAAE;IACrE,iBAAiB;IACjB,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAElC,gDAAgD;IAChD,MAAM,UAAU,GAAG,uBAAuB,EAAE,CAAC;IAC7C,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/B,UAAU,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC1C,UAAU,CAAC,QAAQ,CAAC,yBAAyB,EAAE,CAAC,CAAC;QACjD,UAAU,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,kFAAkF;IAClF,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAElC,0DAA0D;IAC1D,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;IAEzE,eAAe;IACf,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,uBAAuB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,2BAA2B,EAAE,CAAC;IAEpD,sBAAsB;IACtB,MAAM,YAAY,GAAiB;QACjC,KAAK;QACL,GAAG;QACH,UAAU;QACV,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,EAAE;QAC3D,KAAK,EAAE,CAAC,SAAS,CAAC;QAClB,aAAa,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;QAC5C,UAAU,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;KACjE,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAE1C,8EAA8E;IAC9E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,sBAAsB,EAAE,CAAC;IAChE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,SAAS,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,gCAAgC;IAChC,MAAM,UAAU,GAAG,UAAU,IAAI,mBAAmB,CAAC;IACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IACzC,SAAS,CAAC,gBAAgB,CAAC;QACzB,KAAK;QACL,UAAU;QACV,cAAc,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,cAAc,EAAE,QAAQ;KACzB,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,0BAA0B;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,SAAS,oDAAoD,SAAS,IAAI,CAChF,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,wBAAwB,SAAS,MAAM,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,MAAuC,EACvC,SAA2B;IAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;QACpC,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;YAC/C,MAAM,IAAI,KAAK,CAAC;YAChB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO;oBAAE,SAAS;gBAEvB,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;oBACxD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBAE/C,YAAY,EAAE,CAAC;oBACf,IAAI,MAAM,CAAC,OAAO;wBAAE,YAAY,EAAE,CAAC;;wBAC9B,WAAW,EAAE,CAAC;oBACnB,cAAc,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;oBAEpD,uCAAuC;oBACvC,SAAS,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;oBAErC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;wBAC1B,SAAS,CAAC,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;oBACxD,CAAC;oBAED,0CAA0C;oBAC1C,MAAM,MAAM,GAAG;wBACb,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM;wBACrC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM;wBACrC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM;wBACvC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;wBACzD,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,gBAAgB,EAAE,MAAM,CAAC,cAAc,EAAE,QAAQ;qBAClD,CAAC;oBACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;gBACtD,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+CAAgD,GAAa,CAAC,OAAO,IAAI,CAC1E,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,GAAG,EAAE;YACpB,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClB,SAAS,CAAC,cAAc,CAAC;gBACvB,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACxB,YAAY;gBACZ,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,WAAW;gBACnB,UAAU,EAAE,cAAc;gBAC1B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC,CAAC;YACH,SAAS,CAAC,UAAU,EAAE,CAAC;QACzB,CAAC,CAAC;QAEF,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAC3B,QAAQ,EAAE,CAAC;YACX,cAAc,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACxB,QAAQ,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YACnE,cAAc,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"import.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/import.ts"],"names":[],"mappings":"AAoBA,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsHjE"}
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"import.js","sourceRoot":"","sources":["../../../src/cli/commands/import.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAE3F,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAKvD,MAAM,QAAQ,GAAG,aAAa,CAAC;AAE/B,SAAS,SAAS,CAAC,OAAe;IAChC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAc;IAChD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE;QAC7B,MAAM,EAAE,CAAC,MAAM,CAAC;KACjB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC/E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,YAAY,MAAM,CAAC,CAAC;QACtF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,0BAA0B;IAC1B,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAE1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC5E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,4BAA4B;IAC5B,IAAI,MAA8B,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAA2B,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC9F,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,mBAAmB,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0FAA0F,CAC3F,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAI,MAAM,CAAC,KAAK,CAAC,EAAa,IAAI,MAAM,CAAC,KAAK,CAAC;IAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2FAA2F,CAC5F,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,uDAAuD;IACvD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAEzD,4BAA4B;IAC5B,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YAC3D,MAAM,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,MAAM,CAAqB,CAAC;YAC5D,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,CAAC,MAAgC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,MAAM,SAAS,GAA+B,EAAE,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC;YAC5D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;QAC5F,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,8BAA8B;IAC9B,MAAM,aAAa,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kCAAkC,KAAK,8CAA8C,CACtF,CAAC;IACJ,CAAC;IAED,eAAe;IACf,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACzE,cAAc,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAEjD,2BAA2B;IAC3B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;QACvC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAC/E,cAAc,CAAC,gBAAgB,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,KAAK,WAAW,CAAC,CAAC;IACxF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,YAAY,MAAM,CAAC,CAAC;AAC7D,CAAC"}
|