@su-record/vibe 2.7.2 → 2.7.5

package/dist/pc/sandbox/ToolPolicy.test.js

@@ -0,0 +1,189 @@
+/**
+ * ToolPolicy Tests — Phase 5-6
+ */
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { matchPattern, ToolPolicyEvaluator, getDefaultSaaSPolicy, getDefaultLocalPolicy } from './ToolPolicy.js';
+// ============================================================================
+// matchPattern tests
+// ============================================================================
+describe('matchPattern', () => {
+    it('정확한 이름 매칭', () => {
+        expect(matchPattern('core_sandbox_exec', 'core_sandbox_exec')).toBe(true);
+        expect(matchPattern('core_sandbox_exec', 'core_sandbox_status')).toBe(false);
+    });
+    it('와일드카드 패턴 매칭', () => {
+        expect(matchPattern('core_browser_*', 'core_browser_snapshot')).toBe(true);
+        expect(matchPattern('core_browser_*', 'core_browser_act')).toBe(true);
+        expect(matchPattern('core_browser_*', 'core_google_auth')).toBe(false);
+    });
+    it('그룹 매칭: group:browser', () => {
+        expect(matchPattern('group:browser', 'core_browser_snapshot')).toBe(true);
+        expect(matchPattern('group:browser', 'core_browser_act')).toBe(true);
+        expect(matchPattern('group:browser', 'core_browser_navigate')).toBe(true);
+        expect(matchPattern('group:browser', 'core_google_auth')).toBe(false);
+    });
+    it('그룹 매칭: group:google', () => {
+        expect(matchPattern('group:google', 'core_google_auth')).toBe(true);
+        expect(matchPattern('group:google', 'core_google_gmail_send')).toBe(true);
+        expect(matchPattern('group:google', 'core_browser_act')).toBe(false);
+    });
+    it('그룹 매칭: group:voice', () => {
+        expect(matchPattern('group:voice', 'core_voice_status')).toBe(true);
+        expect(matchPattern('group:voice', 'core_tts_speak')).toBe(true);
+        expect(matchPattern('group:voice', 'core_stt_transcribe')).toBe(true);
+        expect(matchPattern('group:voice', 'core_browser_act')).toBe(false);
+    });
+    it('그룹 매칭: group:vision', () => {
+        expect(matchPattern('group:vision', 'core_vision_start')).toBe(true);
+        expect(matchPattern('group:vision', 'core_vision_stop')).toBe(true);
+        expect(matchPattern('group:vision', 'core_browser_act')).toBe(false);
+    });
+    it('그룹 매칭: group:fs', () => {
+        expect(matchPattern('group:fs', 'core_find_symbol')).toBe(true);
+        expect(matchPattern('group:fs', 'core_find_references')).toBe(true);
+        expect(matchPattern('group:fs', 'core_analyze_dependency_graph')).toBe(true);
+        expect(matchPattern('group:fs', 'core_browser_act')).toBe(false);
+    });
+    it('그룹 매칭: group:runtime', () => {
+        expect(matchPattern('group:runtime', 'core_sandbox_exec')).toBe(true);
+        expect(matchPattern('group:runtime', 'core_browser_act')).toBe(false);
+    });
+    it('존재하지 않는 그룹', () => {
+        expect(matchPattern('group:nonexistent', 'core_browser_act')).toBe(false);
+    });
+    it('전체 와일드카드', () => {
+        expect(matchPattern('*', 'core_any_tool')).toBe(true);
+        expect(matchPattern('*', 'anything')).toBe(true);
+    });
+});
+// ============================================================================
+// ToolPolicyEvaluator tests
+// ============================================================================
+describe('ToolPolicyEvaluator', () => {
+    let logger;
+    let evaluator;
+    beforeEach(() => {
+        logger = vi.fn();
+        evaluator = new ToolPolicyEvaluator(logger);
+    });
+    describe('기본 정책 평가', () => {
+        it('일치하는 규칙이 없으면 deny', () => {
+            evaluator.setLayers([]);
+            const result = evaluator.evaluate('core_unknown_tool');
+            expect(result.allowed).toBe(false);
+            expect(result.action).toBe('deny');
+        });
+        it('allow 규칙 매칭', () => {
+            evaluator.setLayers([{
+                    level: 'profile',
+                    rules: [{ pattern: 'core_browser_*', action: 'allow' }],
+                }]);
+            const result = evaluator.evaluate('core_browser_snapshot');
+            expect(result.allowed).toBe(true);
+            expect(result.action).toBe('allow');
+            expect(result.matchedLevel).toBe('profile');
+        });
+        it('deny 규칙 매칭', () => {
+            evaluator.setLayers([{
+                    level: 'global',
+                    rules: [{ pattern: 'core_sandbox_exec', action: 'deny', reason: 'blocked' }],
+                }]);
+            const result = evaluator.evaluate('core_sandbox_exec');
+            expect(result.allowed).toBe(false);
+            expect(result.reason).toBe('blocked');
+        });
+        it('ask 규칙 매칭', () => {
+            evaluator.setLayers([{
+                    level: 'global',
+                    rules: [{ pattern: 'core_sandbox_exec', action: 'ask', reason: '승인 필요' }],
+                }]);
+            const result = evaluator.evaluate('core_sandbox_exec');
+            expect(result.allowed).toBe(false);
+            expect(result.action).toBe('ask');
+        });
+    });
+    describe('6단계 체인 평가', () => {
+        it('Profile → Global → User → Channel → Sandbox → SubAgent 순서', () => {
+            // addLayer는 자동 정렬 → profile이 sandbox보다 우선
+            evaluator.addLayer({ level: 'sandbox', rules: [{ pattern: 'core_browser_*', action: 'deny' }] });
+            evaluator.addLayer({ level: 'profile', rules: [{ pattern: 'core_browser_*', action: 'allow' }] });
+            // profile이 먼저 평가됨 → allow
+            const result = evaluator.evaluate('core_browser_snapshot');
+            expect(result.allowed).toBe(true);
+            expect(result.matchedLevel).toBe('profile');
+        });
+        it('첫 번째 매칭 규칙이 결과를 결정', () => {
+            evaluator.setLayers([
+                { level: 'profile', rules: [{ pattern: 'core_google_*', action: 'allow' }] },
+                { level: 'global', rules: [{ pattern: 'core_google_auth', action: 'deny' }] },
+            ]);
+            // profile의 와일드카드가 먼저 매칭
+            const result = evaluator.evaluate('core_google_auth');
+            expect(result.allowed).toBe(true);
+        });
+        it('addLayer로 정렬 유지', () => {
+            evaluator.addLayer({ level: 'sandbox', rules: [{ pattern: '*', action: 'deny' }] });
+            evaluator.addLayer({ level: 'profile', rules: [{ pattern: '*', action: 'allow' }] });
+            // profile이 sandbox보다 우선
+            const result = evaluator.evaluate('any_tool');
+            expect(result.allowed).toBe(true);
+            expect(result.matchedLevel).toBe('profile');
+        });
+    });
+    describe('그룹 규칙', () => {
+        it('그룹 기반 허용', () => {
+            evaluator.setLayers([{
+                    level: 'profile',
+                    rules: [{ pattern: 'group:browser', action: 'allow' }],
+                }]);
+            expect(evaluator.evaluate('core_browser_snapshot').allowed).toBe(true);
+            expect(evaluator.evaluate('core_browser_act').allowed).toBe(true);
+            expect(evaluator.evaluate('core_google_auth').allowed).toBe(false);
+        });
+    });
+    describe('getLayers', () => {
+        it('설정된 레이어를 반환 (복사본)', () => {
+            const layers = [{ level: 'profile', rules: [] }];
+            evaluator.setLayers(layers);
+            const returned = evaluator.getLayers();
+            expect(returned).toEqual(layers);
+            expect(returned).not.toBe(layers); // 복사본
+        });
+    });
+});
+// ============================================================================
+// Default Policies tests
+// ============================================================================
+describe('getDefaultSaaSPolicy', () => {
+    it('browser, google, voice, vision 그룹 허용', () => {
+        const layers = getDefaultSaaSPolicy();
+        expect(layers.length).toBeGreaterThanOrEqual(2);
+        const logger = vi.fn();
+        const evaluator = new ToolPolicyEvaluator(logger);
+        evaluator.setLayers(layers);
+        expect(evaluator.evaluate('core_browser_snapshot').allowed).toBe(true);
+        expect(evaluator.evaluate('core_google_auth').allowed).toBe(true);
+        expect(evaluator.evaluate('core_voice_status').allowed).toBe(true);
+        expect(evaluator.evaluate('core_vision_start').allowed).toBe(true);
+    });
+    it('sandbox_exec는 ask', () => {
+        const layers = getDefaultSaaSPolicy();
+        const logger = vi.fn();
+        const evaluator = new ToolPolicyEvaluator(logger);
+        evaluator.setLayers(layers);
+        const result = evaluator.evaluate('core_sandbox_exec');
+        expect(result.action).toBe('ask');
+    });
+});
+describe('getDefaultLocalPolicy', () => {
+    it('모든 도구 허용', () => {
+        const layers = getDefaultLocalPolicy();
+        const logger = vi.fn();
+        const evaluator = new ToolPolicyEvaluator(logger);
+        evaluator.setLayers(layers);
+        expect(evaluator.evaluate('core_browser_snapshot').allowed).toBe(true);
+        expect(evaluator.evaluate('core_sandbox_exec').allowed).toBe(true);
+        expect(evaluator.evaluate('unknown_tool').allowed).toBe(true);
+    });
+});
+//# sourceMappingURL=ToolPolicy.test.js.map

package/dist/pc/sandbox/ToolPolicy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolPolicy.test.js","sourceRoot":"","sources":["../../../src/pc/sandbox/ToolPolicy.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAGjH,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;QACnB,MAAM,CAAC,YAAY,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,CAAC,YAAY,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;QACrB,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,YAAY,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE;QACzB,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE;QACpB,MAAM,CAAC,YAAY,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;QAClB,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,MAAqB,CAAC;IAC1B,IAAI,SAA8B,CAAC;IAEnC,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACjB,SAAS,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;YAC3B,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACxB,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YACvD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;YACrB,SAAS,CAAC,SAAS,CAAC,CAAC;oBACnB,KAAK,EAAE,SAAS;oBAChB,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;iBACxD,CAAC,CAAC,CAAC;YACJ,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE;YACpB,SAAS,CAAC,SAAS,CAAC,CAAC;oBACnB,KAAK,EAAE,QAAQ;oBACf,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;iBAC7E,CAAC,CAAC,CAAC;YACJ,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YACvD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;YACnB,SAAS,CAAC,SAAS,CAAC,CAAC;oBACnB,KAAK,EAAE,QAAQ;oBACf,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;iBAC1E,CAAC,CAAC,CAAC;YACJ,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YACvD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;QACzB,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;YACnE,0CAA0C;YAC1C,SAAS,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YACjG,SAAS,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YAClG,0BAA0B;YAC1B,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;YAC5B,SAAS,CAAC,SAAS,CAAC;gBAClB,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE;gBAC5E,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE;aAC9E,CAAC,CAAC;YACH,wBAAwB;YACxB,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE;YACzB,SAAS,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YACpF,SAAS,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YAErF,wBAAwB;YACxB,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;QACrB,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;YAClB,SAAS,CAAC,SAAS,CAAC,CAAC;oBACnB,KAAK,EAAE,SAAS;oBAChB,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;iBACvD,CAAC,CAAC,CAAC;YACJ,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;QACzB,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;YAC3B,MAAM,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,SAAkB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1D,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAmB,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAClD,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAE5B,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAmB,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAClD,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAE5B,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;QAClB,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAmB,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAClD,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAE5B,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/pc/sandbox/types.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Docker Sandbox Types — Phase 5
+ *
+ * Container management, security config, tool policy, exec allowlist.
+ */
+export type SandboxScope = 'session' | 'user' | 'shared';
+export type ContainerState = 'creating' | 'running' | 'stopped' | 'removing' | 'error';
+export interface ContainerInfo {
+    containerId: string;
+    userId: string;
+    scope: SandboxScope;
+    state: ContainerState;
+    createdAt: string;
+    lastActivityAt: string;
+    cpuLimit: number;
+    memoryLimitMb: number;
+    pidLimit: number;
+    labels: Record<string, string>;
+}
+export interface ContainerCreateOptions {
+    scope: SandboxScope;
+    image?: string;
+    cpuLimit?: number;
+    memoryLimitMb?: number;
+    pidLimit?: number;
+    networkMode?: string;
+    labels?: Record<string, string>;
+}
+export interface ExecResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    durationMs: number;
+    timedOut: boolean;
+}
+export declare const DEFAULT_CONTAINER_CONFIG: {
+    readonly image: "node:22-slim";
+    readonly cpuLimit: 0.5;
+    readonly memoryLimitMb: 512;
+    readonly pidLimit: 100;
+    readonly execTimeoutMs: 30000;
+    readonly inactivityTimeoutMs: number;
+    readonly maxContainersTotal: 50;
+    readonly maxContainersPerUser: 2;
+    readonly warmPoolSize: 3;
+    readonly createRetries: 2;
+};
+export interface SeccompProfile {
+    defaultAction: string;
+    syscalls: Array<{
+        names: string[];
+        action: string;
+    }>;
+}
+export interface SecurityConfig {
+    readonlyRootfs: boolean;
+    noNewPrivileges: boolean;
+    dropCapabilities: string[];
+    addCapabilities: string[];
+    seccompProfile: SeccompProfile;
+    tmpfsMounts: Array<{
+        destination: string;
+        size: string;
+    }>;
+    userNamespaceRemap: boolean;
+    deviceAccess: boolean;
+}
+export type PolicyLevel = 'profile' | 'global' | 'user' | 'channel' | 'sandbox' | 'subagent';
+export type PolicyAction = 'allow' | 'deny' | 'ask';
+export interface PolicyRule {
+    pattern: string;
+    action: PolicyAction;
+    reason?: string;
+}
+export interface PolicyLayer {
+    level: PolicyLevel;
+    rules: PolicyRule[];
+}
+export interface PolicyEvalResult {
+    allowed: boolean;
+    action: PolicyAction;
+    matchedLevel: PolicyLevel;
+    matchedPattern: string;
+    reason?: string;
+}
+export interface AllowlistEntry {
+    pattern: string;
+    description?: string;
+    addedAt: string;
+    addedBy: 'default' | 'user' | 'auto';
+}
+export type ApprovalStatus = 'pending' | 'approved' | 'denied';
+export interface ApprovalRequest {
+    requestId: string;
+    command: string;
+    userId: string;
+    status: ApprovalStatus;
+    createdAt: string;
+    respondedAt?: string;
+    alwaysAllow: boolean;
+}
+export type SandboxErrorCode = 'DOCKER_NOT_RUNNING' | 'CONTAINER_CREATE_FAILED' | 'CONTAINER_NOT_FOUND' | 'EXEC_FAILED' | 'EXEC_TIMEOUT' | 'EXEC_DENIED' | 'POLICY_DENIED' | 'MAX_CONTAINERS_REACHED' | 'IMAGE_NOT_FOUND';
+export interface SandboxError extends Error {
+    code: SandboxErrorCode;
+}
+export declare function createSandboxError(code: SandboxErrorCode, message: string): SandboxError;
+export type SandboxLogLevel = 'debug' | 'info' | 'warn' | 'error';
+export type SandboxLogger = (level: SandboxLogLevel, message: string, data?: unknown) => void;
+//# sourceMappingURL=types.d.ts.map

package/dist/pc/sandbox/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/pc/sandbox/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEzD,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,CAAC;AAEvF,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,YAAY,CAAC;IACpB,KAAK,EAAE,cAAc,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,YAAY,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAMD,eAAO,MAAM,wBAAwB;;;;;;;;;;;CAW3B,CAAC;AAMX,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,KAAK,CAAC;QACd,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D,kBAAkB,EAAE,OAAO,CAAC;IAC5B,YAAY,EAAE,OAAO,CAAC;CACvB;AAMD,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAE7F,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AAEpD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,YAAY,EAAE,WAAW,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;CACtC;AAED,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE/D,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;CACtB;AAMD,MAAM,MAAM,gBAAgB,GACxB,oBAAoB,GACpB,yBAAyB,GACzB,qBAAqB,GACrB,aAAa,GACb,cAAc,GACd,aAAa,GACb,eAAe,GACf,wBAAwB,GACxB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,YAAa,SAAQ,KAAK;IACzC,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,GAAG,YAAY,CAIxF;AAMD,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAElE,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC"}

package/dist/pc/sandbox/types.js

@@ -0,0 +1,26 @@
+/**
+ * Docker Sandbox Types — Phase 5
+ *
+ * Container management, security config, tool policy, exec allowlist.
+ */
+// ============================================================================
+// Container Config Constants
+// ============================================================================
+export const DEFAULT_CONTAINER_CONFIG = {
+    image: 'node:22-slim',
+    cpuLimit: 0.5,
+    memoryLimitMb: 512,
+    pidLimit: 100,
+    execTimeoutMs: 30_000,
+    inactivityTimeoutMs: 30 * 60 * 1000,
+    maxContainersTotal: 50,
+    maxContainersPerUser: 2,
+    warmPoolSize: 3,
+    createRetries: 2,
+};
+export function createSandboxError(code, message) {
+    const error = new Error(message);
+    error.code = code;
+    return error;
+}
+//# sourceMappingURL=types.js.map

package/dist/pc/sandbox/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/pc/sandbox/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAyCH,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,KAAK,EAAE,cAAc;IACrB,QAAQ,EAAE,GAAG;IACb,aAAa,EAAE,GAAG;IAClB,QAAQ,EAAE,GAAG;IACb,aAAa,EAAE,MAAM;IACrB,mBAAmB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACnC,kBAAkB,EAAE,EAAE;IACtB,oBAAoB,EAAE,CAAC;IACvB,YAAY,EAAE,CAAC;IACf,aAAa,EAAE,CAAC;CACR,CAAC;AA8FX,MAAM,UAAU,kBAAkB,CAAC,IAAsB,EAAE,OAAe;IACxE,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAiB,CAAC;IACjD,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/pc/types.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Integration Types — Phase 6
+ *
+ * Unified Command Layer types for cross-module integration.
+ */
+export type ModuleName = 'browser' | 'google' | 'voice' | 'vision' | 'sandbox';
+export type ModuleState = 'disabled' | 'initializing' | 'enabled' | 'error';
+export interface ModuleInfo {
+    name: ModuleName;
+    state: ModuleState;
+    healthFailCount: number;
+    lastHealthCheck: string | null;
+    errorMessage?: string;
+}
+export interface ModuleHandlers {
+    init: () => Promise<void>;
+    shutdown: () => Promise<void>;
+    healthCheck: () => Promise<boolean>;
+}
+export type IntentCategory = ModuleName | 'general';
+export interface ClassifiedIntent {
+    category: IntentCategory;
+    confidence: number;
+    subcommand?: string;
+    params?: Record<string, unknown>;
+}
+export interface CommandStep {
+    module: IntentCategory;
+    action: string;
+    params: Record<string, unknown>;
+    dependsOnPrevious: boolean;
+}
+export interface CommandResult {
+    success: boolean;
+    module: IntentCategory;
+    data?: unknown;
+    error?: string;
+    durationMs: number;
+}
+export interface CompoundResult {
+    steps: CommandResult[];
+    totalDurationMs: number;
+    partialSuccess: boolean;
+}
+export interface ContextEntry {
+    module: IntentCategory;
+    action: string;
+    summary: string;
+    timestamp: string;
+    data?: unknown;
+}
+export interface UserSession {
+    userId: string;
+    channel: string;
+    history: ContextEntry[];
+    lastActivityAt: string;
+    createdAt: string;
+}
+export type OutputChannel = 'telegram' | 'slack' | 'voice' | 'web';
+export interface FormattedResult {
+    channel: OutputChannel;
+    text: string;
+    markdown?: string;
+    blocks?: unknown[];
+    imageBase64?: string;
+    ttsText?: string;
+}
+export interface AuditEntry {
+    id?: number;
+    userId: string;
+    channel: string;
+    command: string;
+    module: string;
+    result: 'success' | 'denied' | 'error' | 'rate_limited';
+    durationMs: number;
+    timestamp: string;
+}
+export interface RateLimitState {
+    userId: string;
+    timestamps: number[];
+}
+export type IntegrationLogLevel = 'debug' | 'info' | 'warn' | 'error';
+export type IntegrationLogger = (level: IntegrationLogLevel, message: string, data?: unknown) => void;
+//# sourceMappingURL=types.d.ts.map

package/dist/pc/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/pc/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE/E,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,cAAc,GAAG,SAAS,GAAG,OAAO,CAAC;AAE5E,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,WAAW,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,WAAW,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CACrC;AAMD,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,SAAS,CAAC;AAEpD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,cAAc,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;CACzB;AAMD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK,CAAC;AAEnE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,aAAa,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAMD,MAAM,WAAW,UAAU;IACzB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO,GAAG,cAAc,CAAC;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAMD,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAEtE,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC"}

package/dist/pc/types.js

@@ -0,0 +1,7 @@
+/**
+ * Integration Types — Phase 6
+ *
+ * Unified Command Layer types for cross-module integration.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/pc/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/pc/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/policy/Evidence.d.ts

@@ -0,0 +1,30 @@
+/**
+ * EvidenceStore - Record all policy evaluations and decisions
+ * Phase 3: Policy Engine
+ *
+ * SQLite storage with auto-masking of sensitive data
+ */
+import { EvidenceRecord, EvidenceEventType, EvaluationResult } from './types.js';
+import { LogLevel } from '../daemon/types.js';
+export declare class EvidenceStore {
+    private db;
+    private logger;
+    constructor(logger: (level: LogLevel, message: string, data?: unknown) => void, dbPath?: string);
+    /** Record a generic evidence entry */
+    record(entry: Omit<EvidenceRecord, 'id' | 'createdAt'>): number;
+    /** Record a policy evaluation */
+    recordEvaluation(jobId: string, result: EvaluationResult): number;
+    /** Get evidence for a job */
+    getByJob(jobId: string): EvidenceRecord[];
+    /** Get evidence by event type */
+    getByType(eventType: EvidenceEventType, limit?: number): EvidenceRecord[];
+    /** Get recent evidence */
+    getRecent(limit?: number): EvidenceRecord[];
+    /** Cleanup old evidence */
+    cleanup(maxAgeDays?: number): number;
+    close(): void;
+    private initTables;
+    private maskSensitive;
+    private rowToRecord;
+}
+//# sourceMappingURL=Evidence.d.ts.map

package/dist/policy/Evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Evidence.d.ts","sourceRoot":"","sources":["../../src/policy/Evidence.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAgB9C,qBAAa,aAAa;IACxB,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,MAAM,CAA6D;gBAGzE,MAAM,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,IAAI,EAClE,MAAM,CAAC,EAAE,MAAM;IAejB,sCAAsC;IACtC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,MAAM;IAkB/D,iCAAiC;IACjC,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,MAAM;IAejE,6BAA6B;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,EAAE;IAQzC,iCAAiC;IACjC,SAAS,CAAC,SAAS,EAAE,iBAAiB,EAAE,KAAK,GAAE,MAAW,GAAG,cAAc,EAAE;IAQ7E,0BAA0B;IAC1B,SAAS,CAAC,KAAK,GAAE,MAAW,GAAG,cAAc,EAAE;IAQ/C,2BAA2B;IAC3B,OAAO,CAAC,UAAU,GAAE,MAAW,GAAG,MAAM;IAWxC,KAAK,IAAI,IAAI;IAQb,OAAO,CAAC,UAAU;IAmBlB,OAAO,CAAC,aAAa;IAerB,OAAO,CAAC,WAAW;CAYpB"}

package/dist/policy/Evidence.js

@@ -0,0 +1,134 @@
+/**
+ * EvidenceStore - Record all policy evaluations and decisions
+ * Phase 3: Policy Engine
+ *
+ * SQLite storage with auto-masking of sensitive data
+ */
+import Database from 'better-sqlite3';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import * as fs from 'node:fs';
+const VIBE_DIR = path.join(os.homedir(), '.vibe');
+const DEFAULT_DB_PATH = path.join(VIBE_DIR, 'evidence.db');
+/** Patterns for sensitive data masking */
+const SENSITIVE_PATTERNS = [
+    /sk-[a-zA-Z0-9]{20,}/g,
+    /AIza[a-zA-Z0-9_-]{35}/g,
+    /ya29\.[a-zA-Z0-9_-]+/g,
+    /eyJ[a-zA-Z0-9_-]+\.eyJ[a-zA-Z0-9_-]+/g,
+    /nvapi-[a-zA-Z0-9_-]{20,}/g,
+    /ghp_[a-zA-Z0-9]{36}/g,
+    /gho_[a-zA-Z0-9]{36}/g,
+];
+export class EvidenceStore {
+    db;
+    logger;
+    constructor(logger, dbPath) {
+        this.logger = logger;
+        const resolvedPath = dbPath || DEFAULT_DB_PATH;
+        const dir = path.dirname(resolvedPath);
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+        }
+        this.db = new Database(resolvedPath);
+        this.db.pragma('journal_mode = WAL');
+        this.db.pragma('busy_timeout = 5000');
+        this.initTables();
+    }
+    /** Record a generic evidence entry */
+    record(entry) {
+        const payload = this.maskSensitive(entry.payload);
+        const result = this.db.prepare(`
+      INSERT INTO evidence (job_id, event_type, decision, payload, actor, source, created_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?)
+    `).run(entry.jobId, entry.eventType, entry.decision, JSON.stringify(payload), entry.actor, entry.source, new Date().toISOString());
+        return Number(result.lastInsertRowid);
+    }
+    /** Record a policy evaluation */
+    recordEvaluation(jobId, result) {
+        return this.record({
+            jobId,
+            eventType: 'policy_evaluation',
+            decision: result.decision,
+            payload: {
+                riskLevel: result.riskLevel,
+                requiresApproval: result.requiresApproval,
+                reasons: result.reasons,
+            },
+            actor: 'policy_engine',
+            source: 'system',
+        });
+    }
+    /** Get evidence for a job */
+    getByJob(jobId) {
+        const rows = this.db.prepare('SELECT * FROM evidence WHERE job_id = ? ORDER BY created_at ASC').all(jobId);
+        return rows.map(this.rowToRecord);
+    }
+    /** Get evidence by event type */
+    getByType(eventType, limit = 50) {
+        const rows = this.db.prepare('SELECT * FROM evidence WHERE event_type = ? ORDER BY created_at DESC LIMIT ?').all(eventType, limit);
+        return rows.map(this.rowToRecord);
+    }
+    /** Get recent evidence */
+    getRecent(limit = 20) {
+        const rows = this.db.prepare('SELECT * FROM evidence ORDER BY created_at DESC LIMIT ?').all(limit);
+        return rows.map(this.rowToRecord);
+    }
+    /** Cleanup old evidence */
+    cleanup(maxAgeDays = 30) {
+        const cutoff = new Date();
+        cutoff.setDate(cutoff.getDate() - maxAgeDays);
+        const result = this.db.prepare('DELETE FROM evidence WHERE created_at < ?').run(cutoff.toISOString());
+        return result.changes;
+    }
+    close() {
+        this.db.close();
+    }
+    // ========================================================================
+    // Private
+    // ========================================================================
+    initTables() {
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS evidence (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        job_id TEXT NOT NULL,
+        event_type TEXT NOT NULL,
+        decision TEXT NOT NULL,
+        payload TEXT,
+        actor TEXT NOT NULL,
+        source TEXT NOT NULL,
+        created_at TEXT NOT NULL
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_evidence_job ON evidence(job_id);
+      CREATE INDEX IF NOT EXISTS idx_evidence_type ON evidence(event_type);
+      CREATE INDEX IF NOT EXISTS idx_evidence_created ON evidence(created_at);
+    `);
+    }
+    maskSensitive(payload) {
+        const json = JSON.stringify(payload);
+        let masked = json;
+        for (const pattern of SENSITIVE_PATTERNS) {
+            masked = masked.replace(pattern, '***REDACTED***');
+        }
+        try {
+            return JSON.parse(masked);
+        }
+        catch {
+            return payload;
+        }
+    }
+    rowToRecord(row) {
+        return {
+            id: row.id,
+            jobId: row.job_id,
+            eventType: row.event_type,
+            decision: row.decision,
+            payload: row.payload ? JSON.parse(row.payload) : {},
+            actor: row.actor,
+            source: row.source,
+            createdAt: row.created_at,
+        };
+    }
+}
+//# sourceMappingURL=Evidence.js.map

package/dist/policy/Evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Evidence.js","sourceRoot":"","sources":["../../src/policy/Evidence.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAI9B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAClD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AAE3D,0CAA0C;AAC1C,MAAM,kBAAkB,GAAG;IACzB,sBAAsB;IACtB,wBAAwB;IACxB,uBAAuB;IACvB,uCAAuC;IACvC,2BAA2B;IAC3B,sBAAsB;IACtB,sBAAsB;CACvB,CAAC;AAEF,MAAM,OAAO,aAAa;IAChB,EAAE,CAAoB;IACtB,MAAM,CAA6D;IAE3E,YACE,MAAkE,EAClE,MAAe;QAEf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,YAAY,GAAG,MAAM,IAAI,eAAe,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAED,sCAAsC;IACtC,MAAM,CAAC,KAA+C;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAG9B,CAAC,CAAC,GAAG,CACJ,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,QAAQ,EACd,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EACvB,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,MAAM,EACZ,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAC;QAEF,OAAO,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACxC,CAAC;IAED,iCAAiC;IACjC,gBAAgB,CAAC,KAAa,EAAE,MAAwB;QACtD,OAAO,IAAI,CAAC,MAAM,CAAC;YACjB,KAAK;YACL,SAAS,EAAE,mBAAmB;YAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE;gBACP,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB;YACD,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC;IAED,6BAA6B;IAC7B,QAAQ,CAAC,KAAa;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC1B,iEAAiE,CAClE,CAAC,GAAG,CAAC,KAAK,CAA8B,CAAC;QAE1C,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IAED,iCAAiC;IACjC,SAAS,CAAC,SAA4B,EAAE,QAAgB,EAAE;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC1B,8EAA8E,CAC/E,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAA8B,CAAC;QAErD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IAED,0BAA0B;IAC1B,SAAS,CAAC,QAAgB,EAAE;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC1B,yDAAyD,CAC1D,CAAC,GAAG,CAAC,KAAK,CAA8B,CAAC;QAE1C,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IAED,2BAA2B;IAC3B,OAAO,CAAC,aAAqB,EAAE;QAC7B,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QAC1B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,2CAA2C,CAC5C,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAE5B,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAED,2EAA2E;IAC3E,UAAU;IACV,2EAA2E;IAEnE,UAAU;QAChB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;KAeZ,CAAC,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,OAAgC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,GAAG,IAAI,CAAC;QAElB,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,GAA4B;QAC9C,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAY;YACpB,KAAK,EAAE,GAAG,CAAC,MAAgB;YAC3B,SAAS,EAAE,GAAG,CAAC,UAA+B;YAC9C,QAAQ,EAAE,GAAG,CAAC,QAAkB;YAChC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAiB,CAAC,CAAC,CAAC,CAAC,EAAE;YAC7D,KAAK,EAAE,GAAG,CAAC,KAAe;YAC1B,MAAM,EAAE,GAAG,CAAC,MAAgB;YAC5B,SAAS,EAAE,GAAG,CAAC,UAAoB;SACpC,CAAC;IACJ,CAAC;CACF"}