@shield-agent/kya 0.1.0

package/dist/commands/eval-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval-tool.d.ts","sourceRoot":"","sources":["../../src/commands/eval-tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAEL,aAAa,EACb,KAAK,sBAAsB,EAC5B,MAAM,cAAc,CAAC;AAItB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAsB,WAAW,CAC/B,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE;IACL,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,EACD,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,cAAc,CAAC,CAoDzB;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,UAAU,GAAG;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;IACd,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;CAClB,CAqBA;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAc9D"}

package/dist/commands/eval-tool.js

@@ -0,0 +1,87 @@
+import { buildEvaluateFromToolArgs, KyaHttpClient, } from "../client.js";
+import { UsageError } from "../errors.js";
+import { evaluateOffline } from "../offline-evaluate.js";
+import { findSampleTool } from "../sample-tools.js";
+import { flagBool, flagString } from "../parse-args.js";
+export async function runEvalTool(config, input, client) {
+    if (!input.toolId?.trim()) {
+        throw new UsageError("eval-tool requires --tool-id");
+    }
+    const toolId = input.toolId.trim();
+    const sample = findSampleTool(toolId);
+    const irreversible = input.irreversible ?? sample?.irreversible ?? false;
+    const actionClass = sample?.actionClass;
+    const req = buildEvaluateFromToolArgs({
+        toolId,
+        args: input.args ?? {},
+        irreversible,
+        host: config.host,
+        agentId: config.agentId,
+        sessionRisk: input.sessionRisk,
+        approvalStatus: input.approvalStatus,
+    });
+    // Prefer sample actionClass for offline + HTTP when known
+    const request = actionClass !== undefined
+        ? { ...req, actionClass, dataClass: sample?.dataClass }
+        : req;
+    if (input.offline || config.offline) {
+        const response = evaluateOffline(request, config.host);
+        return {
+            response,
+            toolId,
+            argsHash: response.argsHash ?? request.argsHash,
+            offline: true,
+        };
+    }
+    const http = client ??
+        new KyaHttpClient({
+            baseUrl: config.baseUrl,
+            apiKey: config.apiKey,
+            host: config.host,
+            agentId: config.agentId,
+        });
+    const response = await http.evaluatePolicy(request);
+    return {
+        response,
+        toolId,
+        argsHash: response.argsHash ?? request.argsHash,
+        offline: false,
+    };
+}
+export function evalToolInputFromArgs(parsed) {
+    const toolId = flagString(parsed.flags, "tool-id", "toolId");
+    if (!toolId) {
+        throw new UsageError("eval-tool requires --tool-id <id> [--args '{}'] [--irreversible] [--offline]");
+    }
+    const argsRaw = flagString(parsed.flags, "args");
+    let args = {};
+    if (argsRaw) {
+        try {
+            args = JSON.parse(argsRaw);
+        }
+        catch {
+            throw new UsageError("--args must be valid JSON");
+        }
+    }
+    const irreversible = flagBool(parsed.flags, "irreversible");
+    const sessionRisk = flagString(parsed.flags, "session-risk", "risk");
+    const approvalStatus = flagString(parsed.flags, "approval-status");
+    const offline = flagBool(parsed.flags, "offline");
+    return { toolId, args, irreversible, sessionRisk, approvalStatus, offline };
+}
+export function formatEvalHuman(result) {
+    const r = result.response;
+    return [
+        `verdict: ${r.verdict}`,
+        `reasonCode: ${r.reasonCode}`,
+        r.toolId ? `toolId: ${r.toolId}` : `toolId: ${result.toolId}`,
+        result.argsHash ? `argsHash: ${result.argsHash}` : undefined,
+        r.localVerdict ? `localVerdict: ${r.localVerdict}` : undefined,
+        r.sessionRisk ? `sessionRisk: ${r.sessionRisk}` : undefined,
+        r.host ? `host: ${r.host}` : undefined,
+        result.offline ? `mode: offline-sample (not production PEP)` : undefined,
+    ]
+        .filter(Boolean)
+        .join("\n");
+}
+//# sourceMappingURL=eval-tool.js.map

package/dist/commands/eval-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval-tool.js","sourceRoot":"","sources":["../../src/commands/eval-tool.ts"],"names":[],"mappings":"AACA,OAAO,EACL,yBAAyB,EACzB,aAAa,GAEd,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AASxD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAsB,EACtB,KAOC,EACD,MAAsB;IAEtB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,UAAU,CAAC,8BAA8B,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,YAAY,GAChB,KAAK,CAAC,YAAY,IAAI,MAAM,EAAE,YAAY,IAAI,KAAK,CAAC;IACtD,MAAM,WAAW,GAAG,MAAM,EAAE,WAAW,CAAC;IAExC,MAAM,GAAG,GAAG,yBAAyB,CAAC;QACpC,MAAM;QACN,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;QACtB,YAAY;QACZ,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,0DAA0D;IAC1D,MAAM,OAAO,GACX,WAAW,KAAK,SAAS;QACvB,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;QACvD,CAAC,CAAC,GAAG,CAAC;IAEV,IAAI,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACvD,OAAO;YACL,QAAQ;YACR,MAAM;YACN,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;YAC/C,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GACR,MAAM;QACN,IAAI,aAAa,CAAC;YAChB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;IAEL,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO;QACL,QAAQ;QACR,MAAM;QACN,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC/C,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAkB;IAQtD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,UAAU,CAClB,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,IAAI,GAAY,EAAE,CAAC;IACvB,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,UAAU,CAAC,2BAA2B,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAClD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAsB;IACpD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC1B,OAAO;QACL,YAAY,CAAC,CAAC,OAAO,EAAE;QACvB,eAAe,CAAC,CAAC,UAAU,EAAE;QAC7B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE;QAC7D,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;QAC5D,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS;QAC9D,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;QAC3D,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;QACtC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,SAAS;KACzE;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/commands/init.d.ts

@@ -0,0 +1,19 @@
+import type { Host } from "../config.js";
+import type { ParsedArgs } from "../parse-args.js";
+export interface InitResult {
+    readonly cwd: string;
+    readonly configPath: string;
+    readonly toolsPath: string;
+    readonly envExamplePath: string;
+    readonly created: readonly string[];
+    readonly skipped: readonly string[];
+}
+export interface InitOptions {
+    readonly cwd?: string;
+    readonly baseUrl?: string;
+    readonly host?: Host;
+    readonly force?: boolean;
+}
+export declare function runInit(options?: InitOptions): InitResult;
+export declare function initFromArgs(parsed: ParsedArgs, cwd?: string): InitResult;
+//# sourceMappingURL=init.d.ts.map

package/dist/commands/init.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAGzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,OAAO,CAAC,OAAO,GAAE,WAAgB,GAAG,UAAU,CAyC7D;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,UAAU,EAClB,GAAG,SAAgB,GAClB,UAAU,CAOZ"}

package/dist/commands/init.js

@@ -0,0 +1,69 @@
+import { existsSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { mkdirSync } from "node:fs";
+import { configDir, writeFileConfig } from "../config.js";
+import { SAMPLE_TOOLS } from "../sample-tools.js";
+import { flagString } from "../parse-args.js";
+export function runInit(options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    const dir = configDir(cwd);
+    mkdirSync(dir, { recursive: true });
+    const created = [];
+    const skipped = [];
+    const configPath = join(dir, "config.json");
+    const toolsPath = join(dir, "tools.sample.json");
+    const envExamplePath = join(cwd, ".env.example");
+    const baseUrl = options.baseUrl ?? "http://127.0.0.1:8090";
+    const host = options.host ?? "ide";
+    if (!existsSync(configPath) || options.force) {
+        writeFileConfig(cwd, { baseUrl, host });
+        created.push(configPath);
+    }
+    else {
+        skipped.push(configPath);
+    }
+    if (!existsSync(toolsPath) || options.force) {
+        writeFileSync(toolsPath, `${JSON.stringify({ tools: SAMPLE_TOOLS, packsRequired: false }, null, 2)}\n`, "utf8");
+        created.push(toolsPath);
+    }
+    else {
+        skipped.push(toolsPath);
+    }
+    if (!existsSync(envExamplePath) || options.force) {
+        writeFileSync(envExamplePath, ENV_EXAMPLE, "utf8");
+        created.push(envExamplePath);
+    }
+    else {
+        skipped.push(envExamplePath);
+    }
+    return { cwd, configPath, toolsPath, envExamplePath, created, skipped };
+}
+export function initFromArgs(parsed, cwd = process.cwd()) {
+    const baseUrl = flagString(parsed.flags, "base-url");
+    const hostRaw = flagString(parsed.flags, "host");
+    const host = hostRaw === "runtime" || hostRaw === "ide" ? hostRaw : undefined;
+    const force = parsed.flags["force"] === true || parsed.flags["force"] === "true";
+    return runInit({ cwd, baseUrl, host, force });
+}
+const ENV_EXAMPLE = `# Shield KYA light install — copy to .env (never commit secrets)
+# Docs: docs/guides/kya-light-install.md
+
+# Control plane origin (hosted or local free console)
+KYA_BASE_URL=http://127.0.0.1:8090
+
+# API key when the plane requires auth (empty key → CLI fails closed)
+KYA_API_KEY=
+
+# Dual-plane host: ide (authoring) | runtime (production)
+KYA_HOST=ide
+
+# Filled by: npx @shield-agent/kya register-agent
+# KYA_AGENT_ID=
+
+# Local MCP gate port (serve-mcp)
+KYA_MCP_PORT=3920
+
+# Optional tenant label for local logs only (server binds tenant from auth)
+# KYA_TENANT_HINT=
+`;
+//# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAkB9C,MAAM,UAAU,OAAO,CAAC,UAAuB,EAAE;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAEjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,uBAAuB,CAAC;IAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC;IAEnC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAC7C,eAAe,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAC5C,aAAa,CACX,SAAS,EACT,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAC7E,MAAM,CACP,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjD,aAAa,CAAC,cAAc,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,MAAkB,EAClB,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAEnB,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,IAAI,GACR,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC;IACjF,OAAO,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;CAoBnB,CAAC"}

package/dist/commands/orr.d.ts

@@ -0,0 +1,81 @@
+/**
+ * kya orr run — Phase O1 read-only ORR board emitter.
+ * Reporting orchestrator only: not a second PEP; never mints principals or allows side effects.
+ */
+import type { ParsedArgs } from "../parse-args.js";
+export type OrrRating = "green" | "amber" | "red";
+export type OrrDisposition = "go" | "conditional" | "no_go";
+export type OrrSeverity = "critical" | "high" | "medium" | "low" | "info";
+export interface OrrFinding {
+    readonly id: string;
+    readonly category: string;
+    readonly severity: OrrSeverity;
+    readonly title: string;
+    readonly detail: string;
+    readonly evidence?: string;
+}
+export interface OrrCategory {
+    readonly id: string;
+    readonly label: string;
+    readonly rating: OrrRating;
+    readonly tldr: string;
+}
+export interface OrrCoverageGap {
+    readonly adapter_id: string;
+    readonly reason: string;
+}
+export interface OrrReport {
+    readonly rubric_version: "0";
+    readonly generated_at: string;
+    readonly target: {
+        readonly name: string;
+        readonly path: string;
+        readonly commit_sha?: string;
+        readonly kind: "path" | "repo";
+    };
+    readonly scope: {
+        readonly description: string;
+        readonly disabled_categories: readonly string[];
+        readonly producers_requested: readonly string[];
+    };
+    readonly overall: OrrRating;
+    readonly disposition: OrrDisposition;
+    readonly primary_failure_mode: string;
+    readonly most_urgent_fix: string;
+    readonly categories: readonly OrrCategory[];
+    readonly scorecards: readonly {
+        readonly category: string;
+        readonly name: string;
+        readonly result: "pass" | "fail" | "partial" | "not_evaluated";
+        readonly hardness: "hard" | "soft";
+        readonly note?: string;
+    }[];
+    readonly findings: readonly OrrFinding[];
+    readonly coverage_gaps: readonly OrrCoverageGap[];
+}
+export interface OrrRunOptions {
+    readonly path: string;
+    readonly out: string;
+    readonly name?: string;
+    readonly rubric: string;
+    readonly disableCategories: readonly string[];
+    readonly formats: readonly ("json" | "md")[];
+    readonly commitSha?: string;
+    readonly producers: readonly string[];
+    readonly skipOptionalProducers: boolean;
+    readonly failOn?: "no_go" | "conditional";
+    readonly quiet: boolean;
+    readonly jsonStdout: boolean;
+}
+export declare function orrRunOptionsFromArgs(parsed: ParsedArgs): OrrRunOptions;
+export interface OrrRunResult {
+    readonly report: OrrReport;
+    readonly reportJsonPath?: string;
+    readonly reportMdPath?: string;
+    readonly exitCode: number;
+}
+export declare function runOrr(options: OrrRunOptions): OrrRunResult;
+/** SA first-party probes: evidence only; scanners never ALLOW. */
+export declare function runSaFirstPartyProbes(root: string): OrrFinding[];
+export declare function formatOrrMarkdown(report: OrrReport): string;
+//# sourceMappingURL=orr.d.ts.map

package/dist/commands/orr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orr.d.ts","sourceRoot":"","sources":["../../src/commands/orr.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnD,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK,CAAC;AAClD,MAAM,MAAM,cAAc,GAAG,IAAI,GAAG,aAAa,GAAG,OAAO,CAAC;AAC5D,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAE1E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;QAChD,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;KACjD,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,SAAS,WAAW,EAAE,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,SAAS;QAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,eAAe,CAAC;QAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;KACxB,EAAE,CAAC;IACJ,QAAQ,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,SAAS,cAAc,EAAE,CAAC;CACnD;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IAC7C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAgBD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,UAAU,GAAG,aAAa,CAwCvE;AAcD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,YAAY,CAkG3D;AAED,kEAAkE;AAClE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,CAiIhE;AAoGD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAoD3D"}