@red-codes/agentguard 1.0.0 → 1.1.2

package/dist/kernel/simulation/git-simulator.js

@@ -1,115 +0,0 @@
-// Git simulator — predicts impact of git operations.
-// Runs git commands to assess risk without modifying state.
-import { execFileSync } from 'node:child_process';
-const GIT_ACTIONS = new Set(['git.push', 'git.force-push', 'git.merge', 'git.branch.delete']);
-/** Valid git ref characters: alphanumeric, hyphens, underscores, dots, slashes */
-const SAFE_BRANCH_RE = /^[a-zA-Z0-9._\-/]+$/;
-/** Validate a branch name to prevent command injection */
-export function isValidBranchName(name) {
-    if (!name || name.length > 255)
-        return false;
-    if (!SAFE_BRANCH_RE.test(name))
-        return false;
-    // Reject directory traversal and git special refs
-    if (name.includes('..') || name.startsWith('-') || name.endsWith('.lock'))
-        return false;
-    return true;
-}
-export function createGitSimulator() {
-    return {
-        id: 'git-simulator',
-        supports(intent) {
-            return GIT_ACTIONS.has(intent.action);
-        },
-        async simulate(intent, context) {
-            const start = Date.now();
-            const predictedChanges = [];
-            const details = {};
-            let blastRadius = 0;
-            let riskLevel = 'low';
-            // Force push is always high risk
-            if (intent.action === 'git.force-push') {
-                riskLevel = 'high';
-                predictedChanges.push('Force push will rewrite remote history');
-                details.forcePush = true;
-                blastRadius = 100; // Maximum blast radius signal
-            }
-            // Count unpushed commits
-            const branch = intent.branch || intent.target || '';
-            if (branch && (intent.action === 'git.push' || intent.action === 'git.force-push')) {
-                if (!isValidBranchName(branch)) {
-                    details.invalidBranch = true;
-                    riskLevel = 'high';
-                    predictedChanges.push(`Rejected invalid branch name: ${branch}`);
-                }
-                else
-                    try {
-                        const count = execFileSync('git', ['rev-list', '--count', `origin/${branch}..HEAD`], {
-                            encoding: 'utf8',
-                            timeout: 5000,
-                        }).trim();
-                        const unpushed = parseInt(count, 10);
-                        if (!isNaN(unpushed)) {
-                            details.unpushedCommits = unpushed;
-                            blastRadius = Math.max(blastRadius, unpushed);
-                            predictedChanges.push(`${unpushed} unpushed commit(s) to ${branch}`);
-                            if (unpushed > 10)
-                                riskLevel = riskLevel === 'high' ? 'high' : 'medium';
-                        }
-                    }
-                    catch {
-                        // Branch may not have a remote — not an error
-                        details.remoteTrackingError = true;
-                    }
-            }
-            // Check for protected branch push
-            const protectedBranches = context.protectedBranches || ['main', 'master'];
-            if (branch && protectedBranches.includes(branch)) {
-                riskLevel = riskLevel === 'low' ? 'medium' : riskLevel;
-                predictedChanges.push(`Push targets protected branch: ${branch}`);
-                details.protectedBranch = true;
-            }
-            // Git merge: check for conflicts
-            if (intent.action === 'git.merge' && branch) {
-                if (!isValidBranchName(branch)) {
-                    details.invalidBranch = true;
-                    riskLevel = 'high';
-                    predictedChanges.push(`Rejected invalid branch name: ${branch}`);
-                }
-                else
-                    try {
-                        const diffStat = execFileSync('git', ['diff', '--stat', `HEAD...${branch}`], {
-                            encoding: 'utf8',
-                            timeout: 5000,
-                        }).trim();
-                        const fileCount = (diffStat.match(/\d+ files? changed/)?.[0] || '').match(/\d+/)?.[0];
-                        if (fileCount) {
-                            const count = parseInt(fileCount, 10);
-                            blastRadius = Math.max(blastRadius, count);
-                            predictedChanges.push(`Merge would affect ${count} file(s)`);
-                            if (count > 20)
-                                riskLevel = riskLevel === 'high' ? 'high' : 'medium';
-                        }
-                    }
-                    catch {
-                        details.mergeSimError = true;
-                    }
-            }
-            // Branch delete
-            if (intent.action === 'git.branch.delete') {
-                predictedChanges.push(`Delete branch: ${branch}`);
-                riskLevel = protectedBranches.includes(branch) ? 'high' : 'low';
-                blastRadius = protectedBranches.includes(branch) ? 100 : 1;
-            }
-            return {
-                predictedChanges,
-                blastRadius,
-                riskLevel,
-                details,
-                simulatorId: 'git-simulator',
-                durationMs: Date.now() - start,
-            };
-        },
-    };
-}
-//# sourceMappingURL=git-simulator.js.map

package/dist/kernel/simulation/git-simulator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"git-simulator.js","sourceRoot":"","sources":["../../../src/kernel/simulation/git-simulator.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,4DAA4D;AAE5D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIlD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAE9F,kFAAkF;AAClF,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAE7C,0DAA0D;AAC1D,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,kDAAkD;IAClD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO;QACL,EAAE,EAAE,eAAe;QAEnB,QAAQ,CAAC,MAAwB;YAC/B,OAAO,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;QAED,KAAK,CAAC,QAAQ,CACZ,MAAwB,EACxB,OAAgC;YAEhC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,MAAM,gBAAgB,GAAa,EAAE,CAAC;YACtC,MAAM,OAAO,GAA4B,EAAE,CAAC;YAC5C,IAAI,WAAW,GAAG,CAAC,CAAC;YACpB,IAAI,SAAS,GAA8B,KAAK,CAAC;YAEjD,iCAAiC;YACjC,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBACvC,SAAS,GAAG,MAAM,CAAC;gBACnB,gBAAgB,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;gBAChE,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;gBACzB,WAAW,GAAG,GAAG,CAAC,CAAC,8BAA8B;YACnD,CAAC;YAED,yBAAyB;YACzB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YACpD,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC,EAAE,CAAC;gBACnF,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;oBAC7B,SAAS,GAAG,MAAM,CAAC;oBACnB,gBAAgB,CAAC,IAAI,CAAC,iCAAiC,MAAM,EAAE,CAAC,CAAC;gBACnE,CAAC;;oBACC,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,MAAM,QAAQ,CAAC,EAAE;4BACnF,QAAQ,EAAE,MAAM;4BAChB,OAAO,EAAE,IAAI;yBACd,CAAC,CAAC,IAAI,EAAE,CAAC;wBACV,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBACrC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;4BACrB,OAAO,CAAC,eAAe,GAAG,QAAQ,CAAC;4BACnC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;4BAC9C,gBAAgB,CAAC,IAAI,CAAC,GAAG,QAAQ,0BAA0B,MAAM,EAAE,CAAC,CAAC;4BACrE,IAAI,QAAQ,GAAG,EAAE;gCAAE,SAAS,GAAG,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;wBAC1E,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,8CAA8C;wBAC9C,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;oBACrC,CAAC;YACL,CAAC;YAED,kCAAkC;YAClC,MAAM,iBAAiB,GAAI,OAAO,CAAC,iBAA8B,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACxF,IAAI,MAAM,IAAI,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,SAAS,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvD,gBAAgB,CAAC,IAAI,CAAC,kCAAkC,MAAM,EAAE,CAAC,CAAC;gBAClE,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;YACjC,CAAC;YAED,iCAAiC;YACjC,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,EAAE,CAAC;gBAC5C,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;oBAC7B,SAAS,GAAG,MAAM,CAAC;oBACnB,gBAAgB,CAAC,IAAI,CAAC,iCAAiC,MAAM,EAAE,CAAC,CAAC;gBACnE,CAAC;;oBACC,IAAI,CAAC;wBACH,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,MAAM,EAAE,CAAC,EAAE;4BAC3E,QAAQ,EAAE,MAAM;4BAChB,OAAO,EAAE,IAAI;yBACd,CAAC,CAAC,IAAI,EAAE,CAAC;wBACV,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;wBACtF,IAAI,SAAS,EAAE,CAAC;4BACd,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;4BACtC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;4BAC3C,gBAAgB,CAAC,IAAI,CAAC,sBAAsB,KAAK,UAAU,CAAC,CAAC;4BAC7D,IAAI,KAAK,GAAG,EAAE;gCAAE,SAAS,GAAG,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;wBACvE,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;oBAC/B,CAAC;YACL,CAAC;YAED,gBAAgB;YAChB,IAAI,MAAM,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;gBAC1C,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;gBAClD,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;gBAChE,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,CAAC;YAED,OAAO;gBACL,gBAAgB;gBAChB,WAAW;gBACX,SAAS;gBACT,OAAO;gBACP,WAAW,EAAE,eAAe;gBAC5B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC/B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/kernel/simulation/package-simulator.d.ts

@@ -1,5 +0,0 @@
-import type { ActionSimulator } from './types.js';
-/** Parse npm install command into safe argument list, rejecting dangerous inputs */
-export declare function parseNpmInstallArgs(command: string): string[];
-export declare function createPackageSimulator(): ActionSimulator;
-//# sourceMappingURL=package-simulator.d.ts.map

package/dist/kernel/simulation/package-simulator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"package-simulator.d.ts","sourceRoot":"","sources":["../../../src/kernel/simulation/package-simulator.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAoB,MAAM,YAAY,CAAC;AAwCpE,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CA4B7D;AAiCD,wBAAgB,sBAAsB,IAAI,eAAe,CAyExD"}

package/dist/kernel/simulation/package-simulator.js

@@ -1,164 +0,0 @@
-// Package simulator — predicts impact of package management operations.
-// Uses `npm install --dry-run` to preview dependency changes.
-import { execFileSync } from 'node:child_process';
-const INSTALL_PATTERNS = [
-    /\bnpm\s+install\b/,
-    /\bnpm\s+i\b/,
-    /\byarn\s+add\b/,
-    /\bpnpm\s+add\b/,
-    /\bpnpm\s+install\b/,
-    /\bnpm\s+uninstall\b/,
-    /\bnpm\s+remove\b/,
-    /\byarn\s+remove\b/,
-    /\bpnpm\s+remove\b/,
-];
-function isPackageCommand(command) {
-    if (!command)
-        return false;
-    return INSTALL_PATTERNS.some((p) => p.test(command));
-}
-/** Safe characters for npm package specifiers: @scope/name@version */
-const SAFE_NPM_ARG_RE = /^[@a-zA-Z0-9._\-/^~>=<]+$/;
-/** Allowed npm flags for dry-run simulation (no shell metacharacters) */
-const ALLOWED_NPM_FLAGS = new Set([
-    '-D',
-    '--save-dev',
-    '-E',
-    '--save-exact',
-    '-O',
-    '--save-optional',
-    '-g',
-    '--global',
-    '--legacy-peer-deps',
-    '--no-save',
-    '--save',
-]);
-/** Characters that indicate shell operators — stop processing if found */
-const SHELL_META_RE = /[;|&$`'"\\(){}!<>]/;
-/** Parse npm install command into safe argument list, rejecting dangerous inputs */
-export function parseNpmInstallArgs(command) {
-    // Split on whitespace and drop the leading 'npm install' / 'npm i'
-    const tokens = command.trim().split(/\s+/);
-    const args = [];
-    let pastCommand = false;
-    for (const token of tokens) {
-        // Skip 'npm' and 'install'/'i'
-        if (!pastCommand) {
-            if (token === 'npm' || token === 'install' || token === 'i')
-                continue;
-            pastCommand = true;
-        }
-        // Stop entirely if any token contains shell metacharacters
-        if (SHELL_META_RE.test(token))
-            break;
-        // Accept known flags
-        if (token.startsWith('-') && ALLOWED_NPM_FLAGS.has(token)) {
-            args.push(token);
-            continue;
-        }
-        // Accept safe package specifiers (reject shell metacharacters)
-        if (!token.startsWith('-') && SAFE_NPM_ARG_RE.test(token)) {
-            args.push(token);
-            continue;
-        }
-        // Reject anything else (unknown flags, etc.)
-    }
-    return args;
-}
-function parseNpmDryRunOutput(output) {
-    let added = 0;
-    let removed = 0;
-    let changed = 0;
-    const packages = [];
-    // Parse "added X packages" style output
-    const addedMatch = output.match(/added\s+(\d+)\s+package/);
-    if (addedMatch)
-        added = parseInt(addedMatch[1], 10);
-    const removedMatch = output.match(/removed\s+(\d+)\s+package/);
-    if (removedMatch)
-        removed = parseInt(removedMatch[1], 10);
-    const changedMatch = output.match(/changed\s+(\d+)\s+package/);
-    if (changedMatch)
-        changed = parseInt(changedMatch[1], 10);
-    // Extract package names from lines like "+ package@version"
-    const lines = output.split('\n');
-    for (const line of lines) {
-        const pkgMatch = line.match(/[+\-]\s+(\S+@\S+)/);
-        if (pkgMatch)
-            packages.push(pkgMatch[1]);
-    }
-    return { added, removed, changed, packages };
-}
-export function createPackageSimulator() {
-    return {
-        id: 'package-simulator',
-        supports(intent) {
-            return intent.action === 'shell.exec' && isPackageCommand(intent.command);
-        },
-        async simulate(intent) {
-            const start = Date.now();
-            const command = intent.command || '';
-            const predictedChanges = [];
-            const details = {};
-            let blastRadius = 0;
-            let riskLevel = 'low';
-            // Try npm install --dry-run to preview changes
-            if (/\bnpm\s+(install|i)\b/.test(command)) {
-                const args = parseNpmInstallArgs(command);
-                try {
-                    const output = execFileSync('npm', ['install', '--dry-run', ...args], {
-                        encoding: 'utf8',
-                        timeout: 30000,
-                        env: { ...process.env, npm_config_fund: 'false', npm_config_audit: 'false' },
-                    });
-                    const parsed = parseNpmDryRunOutput(output);
-                    details.npmDryRun = parsed;
-                    blastRadius = parsed.added + parsed.removed + parsed.changed;
-                    if (parsed.added > 0)
-                        predictedChanges.push(`${parsed.added} packages added`);
-                    if (parsed.removed > 0)
-                        predictedChanges.push(`${parsed.removed} packages removed`);
-                    if (parsed.changed > 0)
-                        predictedChanges.push(`${parsed.changed} packages changed`);
-                    if (parsed.packages.length > 0) {
-                        details.affectedPackages = parsed.packages;
-                    }
-                }
-                catch {
-                    // Dry-run failed — estimate from command
-                    details.dryRunFailed = true;
-                    predictedChanges.push('Package installation (dry-run unavailable)');
-                    blastRadius = 10; // Conservative estimate
-                }
-            }
-            else {
-                // For yarn/pnpm or remove commands, do basic analysis
-                predictedChanges.push(`Package operation: ${command}`);
-                blastRadius = 5; // Conservative estimate
-                details.estimatedOnly = true;
-            }
-            // Risk assessment
-            if (blastRadius > 50) {
-                riskLevel = 'high';
-            }
-            else if (blastRadius > 10) {
-                riskLevel = 'medium';
-            }
-            // Check for global installs (always medium+ risk)
-            if (/\s-g\b|\s--global\b/.test(command)) {
-                riskLevel = riskLevel === 'high' ? 'high' : 'medium';
-                predictedChanges.push('Global package installation');
-                details.globalInstall = true;
-            }
-            return {
-                predictedChanges,
-                blastRadius,
-                riskLevel,
-                details,
-                simulatorId: 'package-simulator',
-                durationMs: Date.now() - start,
-            };
-        },
-    };
-}
-//# sourceMappingURL=package-simulator.js.map

package/dist/kernel/simulation/package-simulator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"package-simulator.js","sourceRoot":"","sources":["../../../src/kernel/simulation/package-simulator.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,8DAA8D;AAE9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIlD,MAAM,gBAAgB,GAAG;IACvB,mBAAmB;IACnB,aAAa;IACb,gBAAgB;IAChB,gBAAgB;IAChB,oBAAoB;IACpB,qBAAqB;IACrB,kBAAkB;IAClB,mBAAmB;IACnB,mBAAmB;CACpB,CAAC;AAEF,SAAS,gBAAgB,CAAC,OAA2B;IACnD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,sEAAsE;AACtE,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAEpD,yEAAyE;AACzE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,IAAI;IACJ,YAAY;IACZ,IAAI;IACJ,cAAc;IACd,IAAI;IACJ,iBAAiB;IACjB,IAAI;IACJ,UAAU;IACV,oBAAoB;IACpB,WAAW;IACX,QAAQ;CACT,CAAC,CAAC;AAEH,0EAA0E;AAC1E,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAE3C,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,mEAAmE;IACnE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,+BAA+B;QAC/B,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,GAAG;gBAAE,SAAS;YACtE,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,2DAA2D;QAC3D,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM;QACrC,qBAAqB;QACrB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,+DAA+D;QAC/D,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,6CAA6C;IAC/C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc;IAM1C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,wCAAwC;IACxC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC3D,IAAI,UAAU;QAAE,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEpD,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/D,IAAI,YAAY;QAAE,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE1D,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/D,IAAI,YAAY;QAAE,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE1D,4DAA4D;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACjD,IAAI,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,EAAE,EAAE,mBAAmB;QAEvB,QAAQ,CAAC,MAAwB;YAC/B,OAAO,MAAM,CAAC,MAAM,KAAK,YAAY,IAAI,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5E,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,MAAwB;YACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;YACrC,MAAM,gBAAgB,GAAa,EAAE,CAAC;YACtC,MAAM,OAAO,GAA4B,EAAE,CAAC;YAC5C,IAAI,WAAW,GAAG,CAAC,CAAC;YACpB,IAAI,SAAS,GAA8B,KAAK,CAAC;YAEjD,+CAA+C;YAC/C,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;gBAC1C,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,EAAE;wBACpE,QAAQ,EAAE,MAAM;wBAChB,OAAO,EAAE,KAAK;wBACd,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE;qBAC7E,CAAC,CAAC;oBAEH,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;oBAC5C,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC;oBAC3B,WAAW,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;oBAE7D,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC;wBAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,iBAAiB,CAAC,CAAC;oBAC9E,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC;wBAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;oBACpF,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC;wBAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;oBACpF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC/B,OAAO,CAAC,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC;oBAC7C,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,yCAAyC;oBACzC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;oBAC5B,gBAAgB,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;oBACpE,WAAW,GAAG,EAAE,CAAC,CAAC,wBAAwB;gBAC5C,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,sDAAsD;gBACtD,gBAAgB,CAAC,IAAI,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC;gBACvD,WAAW,GAAG,CAAC,CAAC,CAAC,wBAAwB;gBACzC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;YAC/B,CAAC;YAED,kBAAkB;YAClB,IAAI,WAAW,GAAG,EAAE,EAAE,CAAC;gBACrB,SAAS,GAAG,MAAM,CAAC;YACrB,CAAC;iBAAM,IAAI,WAAW,GAAG,EAAE,EAAE,CAAC;gBAC5B,SAAS,GAAG,QAAQ,CAAC;YACvB,CAAC;YAED,kDAAkD;YAClD,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxC,SAAS,GAAG,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACrD,gBAAgB,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;gBACrD,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;YAC/B,CAAC;YAED,OAAO;gBACL,gBAAgB;gBAChB,WAAW;gBACX,SAAS;gBACT,OAAO;gBACP,WAAW,EAAE,mBAAmB;gBAChC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC/B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/kernel/simulation/registry.d.ts

@@ -1,3 +0,0 @@
-import type { SimulatorRegistry } from './types.js';
-export declare function createSimulatorRegistry(): SimulatorRegistry;
-//# sourceMappingURL=registry.d.ts.map

package/dist/kernel/simulation/registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/kernel/simulation/registry.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAmB,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAErE,wBAAgB,uBAAuB,IAAI,iBAAiB,CAqB3D"}

package/dist/kernel/simulation/registry.js

@@ -1,24 +0,0 @@
-// Simulator registry — routes intents to the correct ActionSimulator.
-// Same array-based pattern as AdapterRegistry.
-export function createSimulatorRegistry() {
-    const simulators = [];
-    return {
-        register(simulator) {
-            // Prevent duplicate registration
-            if (simulators.some((s) => s.id === simulator.id))
-                return;
-            simulators.push(simulator);
-        },
-        find(intent) {
-            for (const simulator of simulators) {
-                if (simulator.supports(intent))
-                    return simulator;
-            }
-            return null;
-        },
-        all() {
-            return [...simulators];
-        },
-    };
-}
-//# sourceMappingURL=registry.js.map

package/dist/kernel/simulation/registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/kernel/simulation/registry.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,+CAA+C;AAK/C,MAAM,UAAU,uBAAuB;IACrC,MAAM,UAAU,GAAsB,EAAE,CAAC;IAEzC,OAAO;QACL,QAAQ,CAAC,SAA0B;YACjC,iCAAiC;YACjC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC;gBAAE,OAAO;YAC1D,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,MAAwB;YAC3B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAAE,OAAO,SAAS,CAAC;YACnD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,GAAG;YACD,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/kernel/simulation/types.d.ts

@@ -1,35 +0,0 @@
-import type { NormalizedIntent } from '../../policy/evaluator.js';
-/** Result of simulating an action before execution */
-export interface SimulationResult {
-    /** Human-readable list of predicted changes */
-    predictedChanges: string[];
-    /** Estimated number of files/entities affected */
-    blastRadius: number;
-    /** Overall risk assessment */
-    riskLevel: 'low' | 'medium' | 'high';
-    /** Simulator-specific details */
-    details: Record<string, unknown>;
-    /** Which simulator produced this result */
-    simulatorId: string;
-    /** How long the simulation took (ms) */
-    durationMs: number;
-}
-/** An action simulator predicts the impact of an action before execution */
-export interface ActionSimulator {
-    /** Unique simulator identifier */
-    readonly id: string;
-    /** Check if this simulator can handle the given intent */
-    supports(intent: NormalizedIntent): boolean;
-    /** Simulate the action and predict its impact */
-    simulate(intent: NormalizedIntent, context: Record<string, unknown>): Promise<SimulationResult>;
-}
-/** Registry of action simulators, routes intents to the correct simulator */
-export interface SimulatorRegistry {
-    /** Register a simulator */
-    register(simulator: ActionSimulator): void;
-    /** Find a simulator that supports the given intent */
-    find(intent: NormalizedIntent): ActionSimulator | null;
-    /** Get all registered simulators */
-    all(): ActionSimulator[];
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/kernel/simulation/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/kernel/simulation/types.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAElE,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,+CAA+C;IAC/C,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,8BAA8B;IAC9B,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,2CAA2C;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B,kCAAkC;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC;IAC5C,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACjG;AAED,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB;IAChC,2BAA2B;IAC3B,QAAQ,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAAC;IAC3C,sDAAsD;IACtD,IAAI,CAAC,MAAM,EAAE,gBAAgB,GAAG,eAAe,GAAG,IAAI,CAAC;IACvD,oCAAoC;IACpC,GAAG,IAAI,eAAe,EAAE,CAAC;CAC1B"}

package/dist/kernel/simulation/types.js

@@ -1,4 +0,0 @@
-// Simulation types — pre-execution impact prediction interfaces.
-// Pure type definitions. No DOM, no Node.js-specific APIs.
-export {};
-//# sourceMappingURL=types.js.map

package/dist/kernel/simulation/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/kernel/simulation/types.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,2DAA2D"}

package/dist/plugins/discovery.d.ts

@@ -1,45 +0,0 @@
-import type { PluginType } from './types.js';
-/** A discovered plugin that has not yet been installed */
-export interface DiscoveredPlugin {
-    /** Package or directory name */
-    readonly name: string;
-    /** Plugin version */
-    readonly version: string;
-    /** Brief description */
-    readonly description: string;
-    /** Plugin type if determinable */
-    readonly type?: PluginType;
-    /** Where this plugin was discovered */
-    readonly source: 'npm' | 'local';
-    /** Source-specific identifier (npm package name or file path) */
-    readonly sourceId: string;
-}
-/** Options for npm registry search */
-export interface NpmSearchOptions {
-    /** npm registry URL (default: https://registry.npmjs.org) */
-    readonly registryUrl?: string;
-    /** Search keyword (default: "agentguard-plugin") */
-    readonly keyword?: string;
-    /** Maximum results to return (default: 20) */
-    readonly limit?: number;
-}
-/** Options for local directory search */
-export interface LocalSearchOptions {
-    /** Directory to scan for plugins */
-    readonly directory: string;
-}
-/**
- * Search the npm registry for AgentGuard plugins.
- *
- * Searches for packages with the "agentguard-plugin" keyword.
- * Uses the npm registry search API (/-/v1/search).
- */
-export declare function searchNpmPlugins(query?: string, options?: NpmSearchOptions): Promise<readonly DiscoveredPlugin[]>;
-/**
- * Search a local directory for AgentGuard plugins.
- *
- * Scans subdirectories for package.json files that contain
- * an "agentguard" field with plugin manifest data.
- */
-export declare function searchLocalPlugins(options: LocalSearchOptions): readonly DiscoveredPlugin[];
-//# sourceMappingURL=discovery.d.ts.map

package/dist/plugins/discovery.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../src/plugins/discovery.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,0DAA0D;AAC1D,MAAM,WAAW,gBAAgB;IAC/B,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qBAAqB;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,wBAAwB;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,kCAAkC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;IAC3B,uCAAuC;IACvC,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC;IACjC,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,sCAAsC;AACtC,MAAM,WAAW,gBAAgB;IAC/B,6DAA6D;IAC7D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,oDAAoD;IACpD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,yCAAyC;AACzC,MAAM,WAAW,kBAAkB;IACjC,oCAAoC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,CAAC,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CA0BtC;AAcD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,kBAAkB,GAAG,SAAS,gBAAgB,EAAE,CA4C3F"}

package/dist/plugins/discovery.js

@@ -1,89 +0,0 @@
-// Plugin discovery — search for available AgentGuard plugins.
-//
-// Supports two discovery sources:
-// 1. npm registry — search for packages with "agentguard-plugin" keyword
-// 2. Local directory — scan a directory for plugin manifests
-//
-// Discovery is read-only — it finds plugins but does not install them.
-// Use the PluginRegistry to install discovered plugins.
-import { readdirSync, readFileSync, existsSync, statSync } from 'node:fs';
-import { join } from 'node:path';
-/**
- * Search the npm registry for AgentGuard plugins.
- *
- * Searches for packages with the "agentguard-plugin" keyword.
- * Uses the npm registry search API (/-/v1/search).
- */
-export async function searchNpmPlugins(query, options) {
-    const registryUrl = options?.registryUrl ?? 'https://registry.npmjs.org';
-    const keyword = options?.keyword ?? 'agentguard-plugin';
-    const limit = options?.limit ?? 20;
-    const searchTerms = query ? `${keyword} ${query}` : keyword;
-    const url = `${registryUrl}/-/v1/search?text=keywords:${encodeURIComponent(searchTerms)}&size=${limit}`;
-    try {
-        const response = await fetch(url);
-        if (!response.ok) {
-            return [];
-        }
-        const data = (await response.json());
-        return (data.objects ?? []).map((obj) => ({
-            name: obj.package.name,
-            version: obj.package.version,
-            description: obj.package.description ?? '',
-            source: 'npm',
-            sourceId: obj.package.name,
-        }));
-    }
-    catch {
-        // Network error or invalid response — return empty
-        return [];
-    }
-}
-/**
- * Search a local directory for AgentGuard plugins.
- *
- * Scans subdirectories for package.json files that contain
- * an "agentguard" field with plugin manifest data.
- */
-export function searchLocalPlugins(options) {
-    const { directory } = options;
-    if (!existsSync(directory)) {
-        return [];
-    }
-    const results = [];
-    try {
-        const entries = readdirSync(directory);
-        for (const entry of entries) {
-            const entryPath = join(directory, entry);
-            const stat = statSync(entryPath);
-            if (!stat.isDirectory())
-                continue;
-            const pkgPath = join(entryPath, 'package.json');
-            if (!existsSync(pkgPath))
-                continue;
-            try {
-                const raw = readFileSync(pkgPath, 'utf8');
-                const pkg = JSON.parse(raw);
-                // Check for agentguard manifest in package.json
-                if (pkg.agentguard) {
-                    results.push({
-                        name: pkg.name ?? entry,
-                        version: pkg.version ?? '0.0.0',
-                        description: pkg.description ?? '',
-                        type: pkg.agentguard.type,
-                        source: 'local',
-                        sourceId: entryPath,
-                    });
-                }
-            }
-            catch {
-                // Invalid package.json — skip
-            }
-        }
-    }
-    catch {
-        // Directory read error — return what we have
-    }
-    return results;
-}
-//# sourceMappingURL=discovery.js.map

package/dist/plugins/discovery.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../src/plugins/discovery.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,kCAAkC;AAClC,yEAAyE;AACzE,6DAA6D;AAC7D,EAAE;AACF,uEAAuE;AACvE,wDAAwD;AAExD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAmCjC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAc,EACd,OAA0B;IAE1B,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,4BAA4B,CAAC;IACzE,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,mBAAmB,CAAC;IACxD,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;IAEnC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5D,MAAM,GAAG,GAAG,GAAG,WAAW,8BAA8B,kBAAkB,CAAC,WAAW,CAAC,SAAS,KAAK,EAAE,CAAC;IAExG,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI;YACtB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE;YAC1C,MAAM,EAAE,KAAc;YACtB,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI;SAC3B,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;QACnD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA2B;IAC5D,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAE9B,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAEvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,SAAS;YAElC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAChD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,SAAS;YAEnC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;gBAEhD,gDAAgD;gBAChD,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;oBACnB,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,KAAK;wBACvB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,OAAO;wBAC/B,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;wBAClC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,IAA8B;wBACnD,MAAM,EAAE,OAAO;wBACf,QAAQ,EAAE,SAAS;qBACpB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,8BAA8B;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/plugins/index.d.ts

@@ -1,10 +0,0 @@
-export type { PluginType, PluginCapability, PluginManifest, PluginValidationError, PluginValidationResult, SandboxViolation, SandboxConfig, } from './types.js';
-export { VALID_CAPABILITIES } from './types.js';
-export { validateManifest, validatePlugin, checkApiVersionCompatibility } from './validator.js';
-export type { PluginSandbox, SandboxExecutionResult, SandboxRegistry } from './sandbox.js';
-export { createPluginSandbox, createSandboxRegistry } from './sandbox.js';
-export type { InstalledPlugin, PluginRegistry, PluginRegistryOptions } from './registry.js';
-export { createPluginRegistry } from './registry.js';
-export type { DiscoveredPlugin, NpmSearchOptions, LocalSearchOptions } from './discovery.js';
-export { searchNpmPlugins, searchLocalPlugins } from './discovery.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/plugins/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAEA,YAAY,EACV,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAEhG,YAAY,EAAE,aAAa,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE3F,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAE1E,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAE7F,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/plugins/index.js

@@ -1,7 +0,0 @@
-// Plugin system — re-exports for public API.
-export { VALID_CAPABILITIES } from './types.js';
-export { validateManifest, validatePlugin, checkApiVersionCompatibility } from './validator.js';
-export { createPluginSandbox, createSandboxRegistry } from './sandbox.js';
-export { createPluginRegistry } from './registry.js';
-export { searchNpmPlugins, searchLocalPlugins } from './discovery.js';
-//# sourceMappingURL=index.js.map

package/dist/plugins/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/plugins/index.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAY7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAIhG,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAI1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAIrD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/plugins/registry.d.ts

@@ -1,52 +0,0 @@
-import type { PluginManifest, PluginType, PluginValidationResult } from './types.js';
-/** Metadata stored for each installed plugin */
-export interface InstalledPlugin {
-    /** The validated plugin manifest */
-    readonly manifest: PluginManifest;
-    /** Where the plugin was installed from (local path, npm package name) */
-    readonly source: string;
-    /** ISO timestamp of when the plugin was installed */
-    readonly installedAt: string;
-    /** Whether the plugin is currently enabled */
-    readonly enabled: boolean;
-}
-/** Options for creating a plugin registry */
-export interface PluginRegistryOptions {
-    /** Directory to store the registry file (default: .agentguard) */
-    readonly storageDir?: string;
-    /** Host API version for compatibility checks (default: "1.0.0") */
-    readonly hostVersion?: string;
-}
-/** Plugin registry — manages installed plugin lifecycle */
-export interface PluginRegistry {
-    /** Install a plugin from a manifest and source. Validates before registering. */
-    install(manifest: PluginManifest, source: string): PluginValidationResult;
-    /** Remove a plugin by ID. Returns true if found and removed. */
-    remove(pluginId: string): boolean;
-    /** Get an installed plugin by ID */
-    get(pluginId: string): InstalledPlugin | undefined;
-    /** Check if a plugin is installed */
-    has(pluginId: string): boolean;
-    /** Enable a plugin. Returns false if not found. */
-    enable(pluginId: string): boolean;
-    /** Disable a plugin. Returns false if not found. */
-    disable(pluginId: string): boolean;
-    /** List all installed plugins */
-    list(): readonly InstalledPlugin[];
-    /** List plugins filtered by type */
-    listByType(type: PluginType): readonly InstalledPlugin[];
-    /** Number of installed plugins */
-    count(): number;
-    /** Persist the registry to disk */
-    save(): void;
-    /** Reload the registry from disk */
-    reload(): void;
-}
-/**
- * Create a plugin registry backed by a JSON file.
- *
- * The registry validates manifests at install time using the existing
- * plugin validator and persists the installed plugin list to disk.
- */
-export declare function createPluginRegistry(options?: PluginRegistryOptions): PluginRegistry;
-//# sourceMappingURL=registry.d.ts.map

package/dist/plugins/registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/plugins/registry.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAGrF,gDAAgD;AAChD,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAQD,6CAA6C;AAC7C,MAAM,WAAW,qBAAqB;IACpC,kEAAkE;IAClE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,OAAO,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,sBAAsB,CAAC;IAE1E,gEAAgE;IAChE,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAElC,oCAAoC;IACpC,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAAC;IAEnD,qCAAqC;IACrC,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAE/B,mDAAmD;IACnD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAElC,oDAAoD;IACpD,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAEnC,iCAAiC;IACjC,IAAI,IAAI,SAAS,eAAe,EAAE,CAAC;IAEnC,oCAAoC;IACpC,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,eAAe,EAAE,CAAC;IAEzD,kCAAkC;IAClC,KAAK,IAAI,MAAM,CAAC;IAEhB,mCAAmC;IACnC,IAAI,IAAI,IAAI,CAAC;IAEb,oCAAoC;IACpC,MAAM,IAAI,IAAI,CAAC;CAChB;AAKD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE,qBAAqB,GAAG,cAAc,CAoJpF"}