@su-record/vibe 2.7.8 → 2.7.10

package/dist/infra/policy/PolicyEngine.js

@@ -1,219 +0,0 @@
-/**
- * PolicyEngine - Evaluate ActionPlans against policies
- * Phase 3: Policy Engine
- *
- * Two-stage evaluation:
- * 1. Safety policies (built-in): reject = immediate block
- * 2. Configuration policies: project > user > built-in
- */
-import { maxRisk, } from './types.js';
-import { RiskCalculator } from './RiskCalculator.js';
-const MAX_REGEX_LENGTH = 100;
-const REGEX_TIMEOUT_MS = 10;
-export class PolicyEngine {
-    store;
-    calculator;
-    evidence;
-    logger;
-    constructor(store, evidence, logger) {
-        this.store = store;
-        this.calculator = new RiskCalculator();
-        this.evidence = evidence;
-        this.logger = logger;
-    }
-    /** Load policies */
-    loadPolicies(projectPath) {
-        this.store.loadAll(projectPath);
-    }
-    /** Evaluate an action plan against all active policies */
-    evaluate(context, jobId) {
-        const reasons = [];
-        const suggestions = [];
-        let overallRisk = 'none';
-        let decision = 'approve';
-        // Stage 1: Safety policies (Deny-Override)
-        const safetyPolicies = this.store.getSafetyPolicies();
-        for (const policy of safetyPolicies) {
-            for (const rule of policy.rules) {
-                const matched = this.evaluateRule(rule, context, policy.type);
-                if (matched) {
-                    reasons.push(matched);
-                    overallRisk = maxRisk(overallRisk, matched.severity);
-                    if (matched.effect === 'reject') {
-                        decision = 'reject'; // Safety reject cannot be overridden
-                    }
-                    else if (matched.effect === 'warn' && decision !== 'reject') {
-                        decision = 'warn';
-                    }
-                }
-            }
-        }
-        // Stage 2: Configuration policies (project > user > built-in)
-        if (decision !== 'reject') {
-            const configPolicies = this.store.getConfigPolicies();
-            for (const policy of configPolicies) {
-                for (const rule of policy.rules) {
-                    const matched = this.evaluateRule(rule, context, policy.type);
-                    if (matched) {
-                        reasons.push(matched);
-                        overallRisk = maxRisk(overallRisk, matched.severity);
-                        if (matched.effect === 'reject' && decision !== 'reject') {
-                            decision = 'reject';
-                        }
-                        else if (matched.effect === 'warn' && decision === 'approve') {
-                            decision = 'warn';
-                        }
-                    }
-                }
-            }
-        }
-        // Calculate risk from actions
-        const calculatedRisk = this.calculator.calculate({
-            actions: context.actions,
-            estimatedFiles: context.metadata?.estimatedFiles,
-        });
-        overallRisk = maxRisk(overallRisk, calculatedRisk);
-        // Critical risk always requires approval
-        const requiresApproval = decision === 'warn' ||
-            overallRisk === 'critical' ||
-            overallRisk === 'high';
-        if (reasons.length > 0) {
-            suggestions.push('Review the policy evaluation reasons before proceeding');
-        }
-        const result = {
-            decision,
-            riskLevel: overallRisk,
-            reasons,
-            requiresApproval,
-            suggestions,
-        };
-        // Record evidence
-        if (jobId) {
-            this.evidence.recordEvaluation(jobId, result);
-        }
-        this.logger('info', `Policy evaluation: ${decision} (risk: ${overallRisk})`, {
-            reasons: reasons.length,
-            requiresApproval,
-        });
-        return result;
-    }
-    /** Get the policy store */
-    getPolicyStore() {
-        return this.store;
-    }
-    // ========================================================================
-    // Private
-    // ========================================================================
-    /** Evaluate a single rule against context */
-    evaluateRule(rule, context, policyType) {
-        const matched = this.matchCondition(rule.condition, context, policyType);
-        if (matched) {
-            return {
-                rule: rule.description,
-                ruleId: rule.id,
-                message: rule.message,
-                severity: rule.severity || 'medium',
-                effect: rule.effect,
-            };
-        }
-        return null;
-    }
-    /** Match a condition against context */
-    matchCondition(condition, context, policyType) {
-        // Handle $or
-        if (condition.$or) {
-            return condition.$or.some((c) => this.matchCondition(c, context, policyType));
-        }
-        // Handle $not
-        if (condition.$not) {
-            return !this.matchCondition(condition.$not, context, policyType);
-        }
-        // All other fields are implicit AND
-        for (const [field, expected] of Object.entries(condition)) {
-            if (field.startsWith('$'))
-                continue;
-            // For action-level fields, check against each action
-            if (field.startsWith('action.')) {
-                const actionField = field.slice(7); // Remove 'action.' prefix
-                const anyMatch = context.actions.some((action) => {
-                    const value = action[actionField];
-                    if (value === undefined) {
-                        // Action-level: missing field = no match (pattern checks need a value)
-                        return false;
-                    }
-                    return this.matchValue(String(value), expected);
-                });
-                if (!anyMatch)
-                    return false;
-            }
-            else {
-                // Top-level field
-                const value = this.getContextValue(context, field);
-                if (value === undefined) {
-                    return policyType === 'safety'; // Missing = fail-closed for safety
-                }
-                if (!this.matchValue(String(value), expected))
-                    return false;
-            }
-        }
-        return true;
-    }
-    /** Match a value against an expected pattern */
-    matchValue(value, expected) {
-        if (typeof expected === 'string') {
-            return value === expected;
-        }
-        if (typeof expected === 'number') {
-            return Number(value) === expected;
-        }
-        if (typeof expected === 'object' && expected !== null) {
-            const ops = expected;
-            if (ops.equals !== undefined)
-                return value === String(ops.equals);
-            if (ops.contains !== undefined)
-                return value.includes(String(ops.contains));
-            if (ops.gt !== undefined)
-                return Number(value) > Number(ops.gt);
-            if (ops.lt !== undefined)
-                return Number(value) < Number(ops.lt);
-            if (ops.in !== undefined && Array.isArray(ops.in)) {
-                return ops.in.map(String).includes(value);
-            }
-            if (ops.not !== undefined)
-                return !this.matchValue(value, ops.not);
-            if (ops.regex !== undefined) {
-                const pattern = String(ops.regex);
-                if (pattern.length > MAX_REGEX_LENGTH) {
-                    this.logger('warn', `Regex too long (${pattern.length} > ${MAX_REGEX_LENGTH})`);
-                    return false;
-                }
-                try {
-                    const regex = new RegExp(pattern, 'i');
-                    return regex.test(value);
-                }
-                catch {
-                    this.logger('warn', `Invalid regex: ${pattern}`);
-                    return false;
-                }
-            }
-        }
-        return false;
-    }
-    /** Get a value from the evaluation context by dotted path */
-    getContextValue(context, field) {
-        const parts = field.split('.');
-        let current = context;
-        for (const part of parts) {
-            if (current === null || current === undefined)
-                return undefined;
-            if (typeof current === 'object') {
-                current = current[part];
-            }
-            else {
-                return undefined;
-            }
-        }
-        return current;
-    }
-}
-//# sourceMappingURL=PolicyEngine.js.map

package/dist/infra/policy/PolicyEngine.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PolicyEngine.js","sourceRoot":"","sources":["../../../src/infra/policy/PolicyEngine.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAWL,OAAO,GACR,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAIrD,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,MAAM,OAAO,YAAY;IACf,KAAK,CAAc;IACnB,UAAU,CAAiB;IAC3B,QAAQ,CAAgB;IACxB,MAAM,CAA6D;IAE3E,YACE,KAAkB,EAClB,QAAuB,EACvB,MAAkE;QAElE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,IAAI,cAAc,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,oBAAoB;IACpB,YAAY,CAAC,WAAoB;QAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IAED,0DAA0D;IAC1D,QAAQ,CAAC,OAAoB,EAAE,KAAc;QAC3C,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,IAAI,WAAW,GAAc,MAAM,CAAC;QACpC,IAAI,QAAQ,GAAmB,SAAS,CAAC;QAEzC,2CAA2C;QAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACtD,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAChC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9D,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACtB,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAErD,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;wBAChC,QAAQ,GAAG,QAAQ,CAAC,CAAC,qCAAqC;oBAC5D,CAAC;yBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAC9D,QAAQ,GAAG,MAAM,CAAC;oBACpB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;YACtD,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;gBACpC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBAChC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC9D,IAAI,OAAO,EAAE,CAAC;wBACZ,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBACtB,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;wBAErD,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;4BACzD,QAAQ,GAAG,QAAQ,CAAC;wBACtB,CAAC;6BAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;4BAC/D,QAAQ,GAAG,MAAM,CAAC;wBACpB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAC/C,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE,cAAoC;SACvE,CAAC,CAAC;QACH,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QAEnD,yCAAyC;QACzC,MAAM,gBAAgB,GAAG,QAAQ,KAAK,MAAM;YAC1C,WAAW,KAAK,UAAU;YAC1B,WAAW,KAAK,MAAM,CAAC;QAEzB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,WAAW,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,MAAM,GAAqB;YAC/B,QAAQ;YACR,SAAS,EAAE,WAAW;YACtB,OAAO;YACP,gBAAgB;YAChB,WAAW;SACZ,CAAC;QAEF,kBAAkB;QAClB,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,QAAQ,WAAW,WAAW,GAAG,EAAE;YAC3E,OAAO,EAAE,OAAO,CAAC,MAAM;YACvB,gBAAgB;SACjB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,2BAA2B;IAC3B,cAAc;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,2EAA2E;IAC3E,UAAU;IACV,2EAA2E;IAE3E,6CAA6C;IACrC,YAAY,CAClB,IAAgB,EAChB,OAAoB,EACpB,UAAsC;QAEtC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAEzE,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,WAAW;gBACtB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,QAAQ;gBACnC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wCAAwC;IAChC,cAAc,CACpB,SAA0B,EAC1B,OAAoB,EACpB,UAAsC;QAEtC,aAAa;QACb,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;YAClB,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QAChF,CAAC;QAED,cAAc;QACd,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACnE,CAAC;QAED,oCAAoC;QACpC,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1D,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAEpC,qDAAqD;YACrD,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B;gBAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;oBAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;oBAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;wBACxB,uEAAuE;wBACvE,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAClD,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ;oBAAE,OAAO,KAAK,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,kBAAkB;gBAClB,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACnD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,mCAAmC;gBACrE,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;oBAAE,OAAO,KAAK,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gDAAgD;IACxC,UAAU,CAAC,KAAa,EAAE,QAAiB;QACjD,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAC5B,CAAC;QAED,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC;QACpC,CAAC;QAED,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,QAAmC,CAAC;YAEhD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,KAAK,KAAK,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClE,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC5E,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChE,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChE,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAClD,OAAO,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS;gBAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YAEnE,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAClC,IAAI,OAAO,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;oBACtC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,OAAO,CAAC,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC;oBAChF,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;oBACvC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,OAAO,EAAE,CAAC,CAAC;oBACjD,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6DAA6D;IACrD,eAAe,CAAC,OAAoB,EAAE,KAAa;QACzD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,OAAO,GAAY,OAAO,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAChE,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/infra/policy/PolicyStore.d.ts

@@ -1,36 +0,0 @@
-/**
- * PolicyStore - Load and manage policies
- * Phase 3: Policy Engine
- *
- * Priority: project > user > built-in
- */
-import { PolicyFile } from './types.js';
-import { LogLevel } from '../../daemon/types.js';
-export declare class PolicyStore {
-    private policies;
-    private disabledPolicies;
-    private logger;
-    constructor(logger: (level: LogLevel, message: string, data?: unknown) => void);
-    /** Load all policies in order: builtin → user → project */
-    loadAll(projectPath?: string): void;
-    /** Get all loaded policies */
-    getAll(): PolicyFile[];
-    /** Get active policies (enabled + not disabled by user) */
-    getActive(): PolicyFile[];
-    /** Get safety policies (cannot be disabled) */
-    getSafetyPolicies(): PolicyFile[];
-    /** Get configuration policies */
-    getConfigPolicies(): PolicyFile[];
-    /** Get policy by name */
-    getPolicy(name: string): PolicyFile | undefined;
-    /** Disable a policy (config only, safety cannot be disabled) */
-    disablePolicy(name: string): boolean;
-    /** Enable a previously disabled policy */
-    enablePolicy(name: string): boolean;
-    /** Check if a policy is enabled */
-    isEnabled(name: string): boolean;
-    private loadBuiltinPolicies;
-    private loadPoliciesFromDir;
-    private validatePolicy;
-}
-//# sourceMappingURL=PolicyStore.d.ts.map

package/dist/infra/policy/PolicyStore.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PolicyStore.d.ts","sourceRoot":"","sources":["../../../src/infra/policy/PolicyStore.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,EAAU,UAAU,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAKjD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAsC;IACtD,OAAO,CAAC,gBAAgB,CAA0B;IAClD,OAAO,CAAC,MAAM,CAA6D;gBAE/D,MAAM,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,IAAI;IAI9E,2DAA2D;IAC3D,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI;IAkBnC,8BAA8B;IAC9B,MAAM,IAAI,UAAU,EAAE;IAItB,2DAA2D;IAC3D,SAAS,IAAI,UAAU,EAAE;IAMzB,+CAA+C;IAC/C,iBAAiB,IAAI,UAAU,EAAE;IAIjC,iCAAiC;IACjC,iBAAiB,IAAI,UAAU,EAAE;IAIjC,yBAAyB;IACzB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAI/C,gEAAgE;IAChE,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAWpC,0CAA0C;IAC1C,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAInC,mCAAmC;IACnC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAWhC,OAAO,CAAC,mBAAmB;IAkB3B,OAAO,CAAC,mBAAmB;IAsC3B,OAAO,CAAC,cAAc;CAgCvB"}

package/dist/infra/policy/PolicyStore.js

@@ -1,160 +0,0 @@
-/**
- * PolicyStore - Load and manage policies
- * Phase 3: Policy Engine
- *
- * Priority: project > user > built-in
- */
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-import * as os from 'node:os';
-import * as url from 'node:url';
-const VIBE_DIR = path.join(os.homedir(), '.vibe');
-const USER_POLICIES_DIR = path.join(VIBE_DIR, 'policies');
-export class PolicyStore {
-    policies = new Map();
-    disabledPolicies = new Set();
-    logger;
-    constructor(logger) {
-        this.logger = logger;
-    }
-    /** Load all policies in order: builtin → user → project */
-    loadAll(projectPath) {
-        this.policies.clear();
-        // 1. Built-in policies
-        this.loadBuiltinPolicies();
-        // 2. User policies (~/.vibe/policies/)
-        this.loadPoliciesFromDir(USER_POLICIES_DIR, 'user');
-        // 3. Project policies (.vibe/policies/)
-        if (projectPath) {
-            const projectPoliciesDir = path.join(projectPath, '.vibe', 'policies');
-            this.loadPoliciesFromDir(projectPoliciesDir, 'project');
-        }
-        this.logger('info', `Loaded ${this.policies.size} policies`);
-    }
-    /** Get all loaded policies */
-    getAll() {
-        return Array.from(this.policies.values());
-    }
-    /** Get active policies (enabled + not disabled by user) */
-    getActive() {
-        return Array.from(this.policies.values()).filter((p) => p.enabled && !this.disabledPolicies.has(p.name));
-    }
-    /** Get safety policies (cannot be disabled) */
-    getSafetyPolicies() {
-        return Array.from(this.policies.values()).filter((p) => p.type === 'safety');
-    }
-    /** Get configuration policies */
-    getConfigPolicies() {
-        return this.getActive().filter((p) => p.type === 'configuration');
-    }
-    /** Get policy by name */
-    getPolicy(name) {
-        return this.policies.get(name);
-    }
-    /** Disable a policy (config only, safety cannot be disabled) */
-    disablePolicy(name) {
-        const policy = this.policies.get(name);
-        if (!policy)
-            return false;
-        if (policy.type === 'safety') {
-            this.logger('warn', `Cannot disable safety policy: ${name}`);
-            return false;
-        }
-        this.disabledPolicies.add(name);
-        return true;
-    }
-    /** Enable a previously disabled policy */
-    enablePolicy(name) {
-        return this.disabledPolicies.delete(name);
-    }
-    /** Check if a policy is enabled */
-    isEnabled(name) {
-        const policy = this.policies.get(name);
-        if (!policy)
-            return false;
-        if (policy.type === 'safety')
-            return true; // Always enabled
-        return policy.enabled && !this.disabledPolicies.has(name);
-    }
-    // ========================================================================
-    // Private
-    // ========================================================================
-    loadBuiltinPolicies() {
-        const __dirname = path.dirname(url.fileURLToPath(import.meta.url));
-        const builtinDir = path.join(__dirname, 'builtin');
-        if (!fs.existsSync(builtinDir)) {
-            // In dist/: look relative to compiled location
-            const altDir = path.join(__dirname, '..', '..', 'src', 'policy', 'builtin');
-            if (fs.existsSync(altDir)) {
-                this.loadPoliciesFromDir(altDir, 'builtin');
-                return;
-            }
-            this.logger('warn', 'Built-in policies directory not found');
-            return;
-        }
-        this.loadPoliciesFromDir(builtinDir, 'builtin');
-    }
-    loadPoliciesFromDir(dir, source) {
-        if (!fs.existsSync(dir))
-            return;
-        try {
-            const files = fs.readdirSync(dir).filter((f) => f.endsWith('.json'));
-            for (const file of files) {
-                const filePath = path.join(dir, file);
-                try {
-                    const content = fs.readFileSync(filePath, 'utf-8');
-                    const policy = JSON.parse(content);
-                    if (!this.validatePolicy(policy, filePath)) {
-                        continue;
-                    }
-                    const policyFile = {
-                        ...policy,
-                        filePath,
-                        source,
-                    };
-                    // Higher priority source overwrites lower
-                    this.policies.set(policy.name, policyFile);
-                    this.logger('debug', `Loaded policy: ${policy.name} (${source})`);
-                }
-                catch (err) {
-                    this.logger('warn', `Failed to load policy file: ${filePath}`, {
-                        error: err instanceof Error ? err.message : String(err),
-                    });
-                }
-            }
-        }
-        catch (err) {
-            this.logger('warn', `Failed to read policy directory: ${dir}`, {
-                error: err instanceof Error ? err.message : String(err),
-            });
-        }
-    }
-    validatePolicy(policy, filePath) {
-        if (!policy || typeof policy !== 'object') {
-            this.logger('warn', `Invalid policy format: ${filePath}`);
-            return false;
-        }
-        const p = policy;
-        if (typeof p.name !== 'string' || !p.name) {
-            this.logger('warn', `Policy missing name: ${filePath}`);
-            return false;
-        }
-        if (!Array.isArray(p.rules)) {
-            this.logger('warn', `Policy missing rules array: ${filePath}`);
-            return false;
-        }
-        const validEffects = ['approve', 'warn', 'reject', 'ignore'];
-        for (const rule of p.rules) {
-            if (typeof rule.id !== 'string') {
-                this.logger('warn', `Rule missing id in ${filePath}`);
-                return false;
-            }
-            if (typeof rule.effect !== 'string' || !validEffects.includes(rule.effect)) {
-                this.logger('warn', `Invalid effect "${rule.effect}" in rule ${rule.id} of ${filePath}`);
-                return false;
-            }
-        }
-        return true;
-    }
-}
-//# sourceMappingURL=PolicyStore.js.map

package/dist/infra/policy/PolicyStore.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PolicyStore.js","sourceRoot":"","sources":["../../../src/infra/policy/PolicyStore.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAIhC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAClD,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAE1D,MAAM,OAAO,WAAW;IACd,QAAQ,GAA4B,IAAI,GAAG,EAAE,CAAC;IAC9C,gBAAgB,GAAgB,IAAI,GAAG,EAAE,CAAC;IAC1C,MAAM,CAA6D;IAE3E,YAAY,MAAkE;QAC5E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,2DAA2D;IAC3D,OAAO,CAAC,WAAoB;QAC1B,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEtB,uBAAuB;QACvB,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAE3B,uCAAuC;QACvC,IAAI,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAEpD,wCAAwC;QACxC,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YACvE,IAAI,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,IAAI,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,CAAC;IAC/D,CAAC;IAED,8BAA8B;IAC9B,MAAM;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,2DAA2D;IAC3D,SAAS;QACP,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CACvD,CAAC;IACJ,CAAC;IAED,+CAA+C;IAC/C,iBAAiB;QACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC/E,CAAC;IAED,iCAAiC;IACjC,iBAAiB;QACf,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;IACpE,CAAC;IAED,yBAAyB;IACzB,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,gEAAgE;IAChE,aAAa,CAAC,IAAY;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,iCAAiC,IAAI,EAAE,CAAC,CAAC;YAC7D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0CAA0C;IAC1C,YAAY,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,mCAAmC;IACnC,SAAS,CAAC,IAAY;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB;QAC5D,OAAO,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC;IAED,2EAA2E;IAC3E,UAAU;IACV,2EAA2E;IAEnE,mBAAmB;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAEnD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,+CAA+C;YAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC5E,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC5C,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,uCAAuC,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC;IAEO,mBAAmB,CAAC,GAAW,EAAE,MAA4B;QACnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO;QAEhC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAErE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACtC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAW,CAAC;oBAE7C,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;wBAC3C,SAAS;oBACX,CAAC;oBAED,MAAM,UAAU,GAAe;wBAC7B,GAAG,MAAM;wBACT,QAAQ;wBACR,MAAM;qBACP,CAAC;oBAEF,0CAA0C;oBAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;oBAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,MAAM,CAAC,IAAI,KAAK,MAAM,GAAG,CAAC,CAAC;gBACpE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,+BAA+B,QAAQ,EAAE,EAAE;wBAC7D,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACxD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,oCAAoC,GAAG,EAAE,EAAE;gBAC7D,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,MAAe,EAAE,QAAgB;QACtD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,QAAQ,EAAE,CAAC,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,CAAC,GAAG,MAAiC,CAAC;QAE5C,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,wBAAwB,QAAQ,EAAE,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,+BAA+B,QAAQ,EAAE,CAAC,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAuC,EAAE,CAAC;YAC7D,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAChC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,QAAQ,EAAE,CAAC,CAAC;gBACtD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAgB,CAAC,EAAE,CAAC;gBACrF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,IAAI,CAAC,MAAM,aAAa,IAAI,CAAC,EAAE,OAAO,QAAQ,EAAE,CAAC,CAAC;gBACzF,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/infra/policy/RiskCalculator.d.ts

@@ -1,20 +0,0 @@
-/**
- * RiskCalculator - Analyze ActionPlan risk
- * Phase 3: Policy Engine
- */
-import { RiskLevel } from './types.js';
-export interface RiskInput {
-    actions: Array<{
-        type: string;
-        target: string;
-        command?: string;
-    }>;
-    estimatedFiles?: number;
-}
-export declare class RiskCalculator {
-    /** Calculate overall risk from actions */
-    calculate(input: RiskInput): RiskLevel;
-    private assessTargetRisk;
-    private assessCommandRisk;
-}
-//# sourceMappingURL=RiskCalculator.d.ts.map

package/dist/infra/policy/RiskCalculator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"RiskCalculator.d.ts","sourceRoot":"","sources":["../../../src/infra/policy/RiskCalculator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAuB,MAAM,YAAY,CAAC;AAE5D,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAcD,qBAAa,cAAc;IACzB,0CAA0C;IAC1C,SAAS,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS;IA0BtC,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,iBAAiB;CAQ1B"}

package/dist/infra/policy/RiskCalculator.js

@@ -1,64 +0,0 @@
-/**
- * RiskCalculator - Analyze ActionPlan risk
- * Phase 3: Policy Engine
- */
-import { maxRisk } from './types.js';
-const ACTION_TYPE_RISK = {
-    analyze_codebase: 'none',
-    review: 'none',
-    create_spec: 'none',
-    test: 'low',
-    implement: 'medium',
-    refactor: 'medium',
-    modify_config: 'medium',
-    deploy: 'high',
-    delete: 'high',
-};
-export class RiskCalculator {
-    /** Calculate overall risk from actions */
-    calculate(input) {
-        let overall = 'none';
-        for (const action of input.actions) {
-            const actionRisk = ACTION_TYPE_RISK[action.type] || 'low';
-            overall = maxRisk(overall, actionRisk);
-            // Check target for additional risk
-            const targetRisk = this.assessTargetRisk(action.target);
-            overall = maxRisk(overall, targetRisk);
-            // Check command for additional risk
-            if (action.command) {
-                const cmdRisk = this.assessCommandRisk(action.command);
-                overall = maxRisk(overall, cmdRisk);
-            }
-        }
-        // Large number of files increases risk
-        if (input.estimatedFiles && input.estimatedFiles > 10) {
-            overall = maxRisk(overall, 'medium');
-        }
-        return overall;
-    }
-    assessTargetRisk(target) {
-        if (/^\/(etc|usr|bin|sbin|var|boot)\//.test(target))
-            return 'critical';
-        if (target.includes('.ssh/'))
-            return 'critical';
-        if (/\.(env|credentials|secrets)/.test(target))
-            return 'high';
-        if (/\.(config|rc|yml|yaml)$/.test(target))
-            return 'medium';
-        return 'none';
-    }
-    assessCommandRisk(command) {
-        if (/rm\s+.*-.*r.*f/i.test(command))
-            return 'critical';
-        if (/^\s*sudo\s/i.test(command))
-            return 'critical';
-        if (/chmod\s+777/i.test(command))
-            return 'high';
-        if (/git\s+push\s+.*--force/i.test(command))
-            return 'high';
-        if (/npm\s+publish/i.test(command))
-            return 'medium';
-        return 'none';
-    }
-}
-//# sourceMappingURL=RiskCalculator.js.map

package/dist/infra/policy/RiskCalculator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"RiskCalculator.js","sourceRoot":"","sources":["../../../src/infra/policy/RiskCalculator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAyB,OAAO,EAAE,MAAM,YAAY,CAAC;AAW5D,MAAM,gBAAgB,GAA8B;IAClD,gBAAgB,EAAE,MAAM;IACxB,MAAM,EAAE,MAAM;IACd,WAAW,EAAE,MAAM;IACnB,IAAI,EAAE,KAAK;IACX,SAAS,EAAE,QAAQ;IACnB,QAAQ,EAAE,QAAQ;IAClB,aAAa,EAAE,QAAQ;IACvB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,MAAM;CACf,CAAC;AAEF,MAAM,OAAO,cAAc;IACzB,0CAA0C;IAC1C,SAAS,CAAC,KAAgB;QACxB,IAAI,OAAO,GAAc,MAAM,CAAC;QAEhC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;YAC1D,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAEvC,mCAAmC;YACnC,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACxD,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAEvC,oCAAoC;YACpC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvD,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,GAAG,EAAE,EAAE,CAAC;YACtD,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,gBAAgB,CAAC,MAAc;QACrC,IAAI,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,UAAU,CAAC;QACvE,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,UAAU,CAAC;QAChD,IAAI,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QAC9D,IAAI,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC5D,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,iBAAiB,CAAC,OAAe;QACvC,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,UAAU,CAAC;QACvD,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,UAAU,CAAC;QACnD,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,MAAM,CAAC;QAChD,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,MAAM,CAAC;QAC3D,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,QAAQ,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/infra/policy/default-policies.d.ts

@@ -1,13 +0,0 @@
-/**
- * Default Safety and Configuration Policies
- * Phase 2: Policy Integration
- *
- * Safety policies (deny-override): dangerous command block, SSRF prevention
- * Configuration policies: rate limiting info
- */
-import type { PolicyFile } from './types.js';
-/** Get default safety policies (deny-override) */
-export declare function getDefaultSafetyPolicies(): PolicyFile[];
-/** Get default configuration policies */
-export declare function getDefaultConfigPolicies(): PolicyFile[];
-//# sourceMappingURL=default-policies.d.ts.map

package/dist/infra/policy/default-policies.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"default-policies.d.ts","sourceRoot":"","sources":["../../../src/infra/policy/default-policies.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,kDAAkD;AAClD,wBAAgB,wBAAwB,IAAI,UAAU,EAAE,CAiEvD;AAED,yCAAyC;AACzC,wBAAgB,wBAAwB,IAAI,UAAU,EAAE,CAsBvD"}

package/dist/infra/policy/default-policies.js

@@ -1,99 +0,0 @@
-/**
- * Default Safety and Configuration Policies
- * Phase 2: Policy Integration
- *
- * Safety policies (deny-override): dangerous command block, SSRF prevention
- * Configuration policies: rate limiting info
- */
-/** Get default safety policies (deny-override) */
-export function getDefaultSafetyPolicies() {
-    return [
-        {
-            name: 'dangerous-command-block',
-            version: '1.0.0',
-            type: 'safety',
-            enabled: true,
-            source: 'builtin',
-            rules: [
-                {
-                    id: 'safety-dangerous-cmd',
-                    description: 'Block dangerous system commands in claude_code',
-                    condition: {
-                        'action.type': 'tool_call',
-                        'action.target': 'claude_code',
-                        'action.command': { regex: '(rm\\s+-rf|sudo\\s+|chmod\\s+777|mkfs|dd\\s+if=)' },
-                    },
-                    effect: 'reject',
-                    message: 'Dangerous command blocked by safety policy',
-                    severity: 'critical',
-                },
-            ],
-        },
-        {
-            name: 'send-tool-warning',
-            version: '1.0.0',
-            type: 'safety',
-            enabled: true,
-            source: 'builtin',
-            rules: [
-                {
-                    id: 'safety-send-warn',
-                    description: 'Warn when using send_* tools',
-                    condition: {
-                        'action.type': 'tool_call',
-                        'action.target': { regex: '^send_' },
-                    },
-                    effect: 'warn',
-                    message: 'Message sending tool detected — verify target is in allowlist',
-                    severity: 'medium',
-                },
-            ],
-        },
-        {
-            name: 'ssrf-prevention',
-            version: '1.0.0',
-            type: 'safety',
-            enabled: true,
-            source: 'builtin',
-            rules: [
-                {
-                    id: 'safety-ssrf-block',
-                    description: 'Block web_browse to private IP ranges',
-                    condition: {
-                        'action.type': 'tool_call',
-                        'action.target': 'web_browse',
-                        'action.command': { regex: '(10\\.|172\\.(1[6-9]|2[0-9]|3[01])\\.|192\\.168\\.|127\\.|localhost)' },
-                    },
-                    effect: 'reject',
-                    message: 'Private IP address access blocked by SSRF prevention policy',
-                    severity: 'high',
-                },
-            ],
-        },
-    ];
-}
-/** Get default configuration policies */
-export function getDefaultConfigPolicies() {
-    return [
-        {
-            name: 'rate-limit-info',
-            version: '1.0.0',
-            type: 'configuration',
-            enabled: true,
-            source: 'builtin',
-            rules: [
-                {
-                    id: 'config-rate-limit-info',
-                    description: 'Rate limits: claude_code 10/min, web_browse 20/min, others 30/min',
-                    condition: {
-                        'action.type': 'tool_call',
-                    },
-                    effect: 'warn',
-                    message: 'Tool call subject to rate limiting',
-                    severity: 'low',
-                },
-            ],
-        },
-    ];
-}
-//# sourceMappingURL=default-policies.js.map

package/dist/infra/policy/default-policies.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"default-policies.js","sourceRoot":"","sources":["../../../src/infra/policy/default-policies.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,kDAAkD;AAClD,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL;YACE,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,sBAAsB;oBAC1B,WAAW,EAAE,gDAAgD;oBAC7D,SAAS,EAAE;wBACT,aAAa,EAAE,WAAW;wBAC1B,eAAe,EAAE,aAAa;wBAC9B,gBAAgB,EAAE,EAAE,KAAK,EAAE,kDAAkD,EAAE;qBAChF;oBACD,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,4CAA4C;oBACrD,QAAQ,EAAE,UAAU;iBACrB;aACF;SACF;QACD;YACE,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,kBAAkB;oBACtB,WAAW,EAAE,8BAA8B;oBAC3C,SAAS,EAAE;wBACT,aAAa,EAAE,WAAW;wBAC1B,eAAe,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;qBACrC;oBACD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,+DAA+D;oBACxE,QAAQ,EAAE,QAAQ;iBACnB;aACF;SACF;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,mBAAmB;oBACvB,WAAW,EAAE,uCAAuC;oBACpD,SAAS,EAAE;wBACT,aAAa,EAAE,WAAW;wBAC1B,eAAe,EAAE,YAAY;wBAC7B,gBAAgB,EAAE,EAAE,KAAK,EAAE,sEAAsE,EAAE;qBACpG;oBACD,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,6DAA6D;oBACtE,QAAQ,EAAE,MAAM;iBACjB;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL;YACE,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,wBAAwB;oBAC5B,WAAW,EAAE,mEAAmE;oBAChF,SAAS,EAAE;wBACT,aAAa,EAAE,WAAW;qBAC3B;oBACD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,oCAAoC;oBAC7C,QAAQ,EAAE,KAAK;iBAChB;aACF;SACF;KACF,CAAC;AACJ,CAAC"}