@vorionsys/platform-core 0.1.0

package/dist/governance/engine.js

@@ -0,0 +1,248 @@
+/**
+ * Governance Engine
+ *
+ * Core engine for evaluating intents against policies and making governance decisions.
+ *
+ * @packageDocumentation
+ */
+import { v4 as uuidv4 } from 'uuid';
+import { createLogger } from '../common/logger.js';
+import { withSpan } from '../common/trace.js';
+import { resolveConflicts, PolicySetManager, } from './policy.js';
+import { RuleEvaluator, } from './evaluator.js';
+const logger = createLogger({ component: 'governance-engine' });
+// =============================================================================
+// GOVERNANCE ENGINE
+// =============================================================================
+/**
+ * GovernanceEngine class for evaluating intents against policies
+ */
+export class GovernanceEngine {
+    ruleEvaluator;
+    policySetManager;
+    options;
+    constructor(options = {}) {
+        this.ruleEvaluator = new RuleEvaluator();
+        this.policySetManager = new PolicySetManager();
+        this.options = {
+            conflictResolution: options.conflictResolution ?? 'deny-overrides',
+            defaultDecision: options.defaultDecision ?? 'allow',
+            enableTracing: options.enableTracing ?? true,
+            proofPlane: options.proofPlane,
+        };
+        logger.info({
+            conflictResolution: this.options.conflictResolution,
+            defaultDecision: this.options.defaultDecision,
+        }, 'Governance engine initialized');
+    }
+    /**
+     * Evaluate an intent against a set of policies
+     */
+    evaluateIntent(intent, policies) {
+        const startTime = performance.now();
+        const context = {
+            intent,
+            context: intent.context,
+        };
+        const policiesEvaluated = [];
+        const matchedPolicies = [];
+        const matchedEffects = [];
+        // Sort policies by priority (lower = higher priority)
+        const sortedPolicies = [...policies].sort((a, b) => a.priority - b.priority);
+        for (const policy of sortedPolicies) {
+            const result = this.ruleEvaluator.evaluatePolicy(policy, context);
+            const auditEntry = this.createPolicyAuditEntry(result);
+            policiesEvaluated.push(auditEntry);
+            if (result.matched) {
+                matchedPolicies.push(auditEntry);
+                matchedEffects.push({
+                    effect: result.effect,
+                    priority: policy.priority,
+                });
+                logger.debug({
+                    policyId: policy.id,
+                    policyName: policy.name,
+                    effect: result.effect,
+                    intentId: intent.id,
+                }, 'Policy matched');
+                // Short-circuit on deny if using deny-overrides
+                if (this.options.conflictResolution === 'deny-overrides' && result.effect === 'deny') {
+                    logger.info({
+                        policyId: policy.id,
+                        policyName: policy.name,
+                        intentId: intent.id,
+                    }, 'Deny policy matched - short-circuiting');
+                    break;
+                }
+            }
+        }
+        // Determine final decision
+        let decision;
+        let reason;
+        if (matchedEffects.length === 0) {
+            // No policies matched, use default
+            decision = this.options.defaultDecision;
+            reason = 'No matching policies found';
+        }
+        else {
+            const finalEffect = resolveConflicts(matchedEffects, this.options.conflictResolution);
+            decision = finalEffect === 'deny' ? 'deny' : 'allow';
+            reason = `Resolved by ${this.options.conflictResolution} strategy`;
+        }
+        const durationMs = performance.now() - startTime;
+        logger.info({
+            intentId: intent.id,
+            decision,
+            policiesEvaluated: policiesEvaluated.length,
+            policiesMatched: matchedPolicies.length,
+            durationMs,
+        }, 'Intent evaluation completed');
+        const result = {
+            intentId: intent.id,
+            decision,
+            reason,
+            permitted: decision === 'allow',
+            policiesEvaluated,
+            matchedPolicies,
+            durationMs,
+            evaluatedAt: new Date().toISOString(),
+        };
+        // Fire-and-forget proof-plane emission
+        if (this.options.proofPlane) {
+            this.emitDecisionProof(result, intent).catch((err) => {
+                logger.warn({ err, intentId: intent.id }, 'Failed to emit decision proof');
+            });
+        }
+        return result;
+    }
+    /**
+     * Evaluate an intent with OpenTelemetry tracing
+     */
+    async evaluateIntentWithTracing(intent, policies) {
+        if (!this.options.enableTracing) {
+            return this.evaluateIntent(intent, policies);
+        }
+        return withSpan('governance.evaluateIntent', async (span) => {
+            span.attributes['intent.id'] = intent.id;
+            span.attributes['intent.goal'] = intent.goal;
+            span.attributes['intent.type'] = intent.intentType ?? 'unknown';
+            span.attributes['policies.count'] = policies.length;
+            const result = this.evaluateIntent(intent, policies);
+            span.attributes['result.decision'] = result.decision;
+            span.attributes['result.permitted'] = result.permitted;
+            span.attributes['result.policiesMatched'] = result.matchedPolicies.length;
+            span.attributes['result.durationMs'] = result.durationMs;
+            return result;
+        }, { 'tenant.id': intent.tenantId });
+    }
+    /**
+     * Load policies from policy sets
+     */
+    loadPoliciesFromSets() {
+        return this.policySetManager.getAllEnabledPolicies();
+    }
+    /**
+     * Add a policy set to the engine
+     */
+    addPolicySet(policySet) {
+        this.policySetManager.addPolicySet(policySet);
+        logger.info({
+            policySetId: policySet.id,
+            policySetName: policySet.name,
+            policiesCount: policySet.policies.length,
+        }, 'Policy set added');
+    }
+    /**
+     * Remove a policy set from the engine
+     */
+    removePolicySet(id) {
+        const removed = this.policySetManager.removePolicySet(id);
+        if (removed) {
+            logger.info({ policySetId: id }, 'Policy set removed');
+        }
+        return removed;
+    }
+    /**
+     * Get all policy sets
+     */
+    getPolicySets() {
+        return this.policySetManager.getAllPolicySets();
+    }
+    /**
+     * Find policies matching specific criteria
+     */
+    findMatchingPolicies(action, resource, intentType) {
+        return this.policySetManager.findMatchingPolicies(action, resource, intentType);
+    }
+    /**
+     * Clear all loaded policies
+     */
+    clearPolicies() {
+        this.policySetManager.clear();
+        logger.info('All policy sets cleared');
+    }
+    /**
+     * Get engine options
+     */
+    getOptions() {
+        return { ...this.options };
+    }
+    /**
+     * Create an audit entry from a policy match result
+     */
+    createPolicyAuditEntry(result) {
+        const ruleAudit = result.ruleGroupResult.ruleResults.map((ruleResult) => ({
+            policyId: result.policy.id,
+            policyName: result.policy.name,
+            field: ruleResult.rule.field,
+            operator: ruleResult.rule.operator,
+            expectedValue: ruleResult.expectedValue,
+            actualValue: ruleResult.actualValue,
+            matched: ruleResult.matched,
+        }));
+        return {
+            policyId: result.policy.id,
+            policyName: result.policy.name,
+            priority: result.policy.priority,
+            matched: result.matched,
+            effect: result.effect,
+            ruleAudit,
+            durationMs: result.durationMs,
+        };
+    }
+    /**
+     * Emit a decision proof event to the proof plane (fire-and-forget)
+     */
+    async emitDecisionProof(result, intent) {
+        const correlationId = intent.correlationId ?? uuidv4();
+        const now = new Date();
+        const expiresAt = new Date(now.getTime() + 24 * 60 * 60 * 1000); // 24h TTL
+        const decision = {
+            decisionId: uuidv4(),
+            intentId: result.intentId,
+            agentId: intent.entityId,
+            correlationId,
+            permitted: result.permitted,
+            trustBand: intent.trustLevel ?? 4, // default T4_STANDARD
+            trustScore: intent.trustScore ?? 0,
+            reasoning: result.reason ? [result.reason] : [],
+            decidedAt: now,
+            expiresAt,
+            latencyMs: result.durationMs,
+            version: 1,
+        };
+        await this.options.proofPlane.logDecisionMade(decision, correlationId);
+        logger.debug({
+            decisionId: decision.decisionId,
+            intentId: result.intentId,
+            correlationId,
+        }, 'Decision proof emitted');
+    }
+}
+/**
+ * Create a new governance engine instance
+ */
+export function createGovernanceEngine(options) {
+    return new GovernanceEngine(options);
+}
+//# sourceMappingURL=engine.js.map

package/dist/governance/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/governance/engine.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAkB,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAKL,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,aAAa,GAId,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;AA0GhE,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACnB,aAAa,CAAgB;IAC7B,gBAAgB,CAAmB;IACnC,OAAO,CAAoC;IAEnD,YAAY,UAAmC,EAAE;QAC/C,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;QACzC,IAAI,CAAC,gBAAgB,GAAG,IAAI,gBAAgB,EAAE,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG;YACb,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,gBAAgB;YAClE,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,OAAO;YACnD,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;YAC5C,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC;YACV,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB;YACnD,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;SAC9C,EAAE,+BAA+B,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAc,EAAE,QAAkB;QAC/C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,OAAO,GAAsB;YACjC,MAAM;YACN,OAAO,EAAE,MAAM,CAAC,OAAkC;SACnD,CAAC;QAEF,MAAM,iBAAiB,GAAuB,EAAE,CAAC;QACjD,MAAM,eAAe,GAAuB,EAAE,CAAC;QAC/C,MAAM,cAAc,GAAiD,EAAE,CAAC;QAExE,sDAAsD;QACtD,MAAM,cAAc,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAE7E,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAClE,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;YACvD,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAEnC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACjC,cAAc,CAAC,IAAI,CAAC;oBAClB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B,CAAC,CAAC;gBAEH,MAAM,CAAC,KAAK,CAAC;oBACX,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,MAAM,CAAC,EAAE;iBACpB,EAAE,gBAAgB,CAAC,CAAC;gBAErB,gDAAgD;gBAChD,IAAI,IAAI,CAAC,OAAO,CAAC,kBAAkB,KAAK,gBAAgB,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBACrF,MAAM,CAAC,IAAI,CAAC;wBACV,QAAQ,EAAE,MAAM,CAAC,EAAE;wBACnB,UAAU,EAAE,MAAM,CAAC,IAAI;wBACvB,QAAQ,EAAE,MAAM,CAAC,EAAE;qBACpB,EAAE,wCAAwC,CAAC,CAAC;oBAC7C,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,IAAI,QAAuB,CAAC;QAC5B,IAAI,MAA0B,CAAC;QAE/B,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,mCAAmC;YACnC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;YACxC,MAAM,GAAG,4BAA4B,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,MAAM,WAAW,GAAG,gBAAgB,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACtF,QAAQ,GAAG,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACrD,MAAM,GAAG,eAAe,IAAI,CAAC,OAAO,CAAC,kBAAkB,WAAW,CAAC;QACrE,CAAC;QAED,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAEjD,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,QAAQ;YACR,iBAAiB,EAAE,iBAAiB,CAAC,MAAM;YAC3C,eAAe,EAAE,eAAe,CAAC,MAAM;YACvC,UAAU;SACX,EAAE,6BAA6B,CAAC,CAAC;QAElC,MAAM,MAAM,GAAqB;YAC/B,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,QAAQ;YACR,MAAM;YACN,SAAS,EAAE,QAAQ,KAAK,OAAO;YAC/B,iBAAiB;YACjB,eAAe;YACf,UAAU;YACV,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;QAEF,uCAAuC;QACvC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACnD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,+BAA+B,CAAC,CAAC;YAC7E,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAAC,MAAc,EAAE,QAAkB;QAChE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,QAAQ,CACb,2BAA2B,EAC3B,KAAK,EAAE,IAAe,EAAE,EAAE;YACxB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;YAC7C,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,UAAU,IAAI,SAAS,CAAC;YAChE,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC;YAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAErD,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;YACrD,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;YACvD,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC;YAC1E,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;YAEzD,OAAO,MAAM,CAAC;QAChB,CAAC,EACD,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,CACjC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,oBAAoB;QAClB,OAAO,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAAoB;QAC/B,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC;YACV,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,aAAa,EAAE,SAAS,CAAC,IAAI;YAC7B,aAAa,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM;SACzC,EAAE,kBAAkB,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,EAAM;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,MAAe,EAAE,QAAiB,EAAE,UAAmB;QAC1E,OAAO,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAClF,CAAC;IAED;;OAEG;IACH,aAAa;QACX,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,MAAyB;QACtD,MAAM,SAAS,GAAqB,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,GAAG,CACxE,CAAC,UAA2B,EAAE,EAAE,CAAC,CAAC;YAChC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;YAC1B,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YAC9B,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK;YAC5B,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ;YAClC,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,OAAO,EAAE,UAAU,CAAC,OAAO;SAC5B,CAAC,CACH,CAAC;QAEF,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;YAC1B,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YAC9B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;YAChC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS;YACT,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAAC,MAAwB,EAAE,MAAc;QACtE,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,MAAM,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU;QAE3E,MAAM,QAAQ,GAAG;YACf,UAAU,EAAE,MAAM,EAAE;YACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,QAAQ;YACxB,aAAa;YACb,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAG,MAAM,CAAC,UAAqB,IAAI,CAAC,EAAE,sBAAsB;YACrE,UAAU,EAAG,MAAM,CAAC,UAAqB,IAAI,CAAC;YAC9C,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/C,SAAS,EAAE,GAAG;YACd,SAAS;YACT,SAAS,EAAE,MAAM,CAAC,UAAU;YAC5B,OAAO,EAAE,CAAC;SACX,CAAC;QAEF,MAAM,IAAI,CAAC,OAAO,CAAC,UAAW,CAAC,eAAe,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAExE,MAAM,CAAC,KAAK,CAAC;YACX,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,aAAa;SACd,EAAE,wBAAwB,CAAC,CAAC;IAC/B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAiC;IACtE,OAAO,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC"}

package/dist/governance/evaluator.d.ts

@@ -0,0 +1,106 @@
+/**
+ * Rule Evaluator
+ *
+ * Evaluates rules against intent context with support for multiple operators.
+ *
+ * @packageDocumentation
+ */
+import type { Intent } from '../common/types.js';
+import type { Rule, RuleGroup, Policy, PolicyEffect } from './policy.js';
+/**
+ * Result of evaluating a single rule
+ */
+export interface RuleMatchResult {
+    /** The rule that was evaluated */
+    rule: Rule;
+    /** Whether the rule matched */
+    matched: boolean;
+    /** Actual field value that was evaluated */
+    actualValue: unknown;
+    /** Expected value from the rule */
+    expectedValue: unknown;
+    /** Evaluation duration in milliseconds */
+    durationMs: number;
+    /** Error message if evaluation failed */
+    error?: string;
+}
+/**
+ * Result of evaluating a rule group
+ */
+export interface RuleGroupResult {
+    /** The rule group that was evaluated */
+    ruleGroup: RuleGroup;
+    /** Whether the group matched */
+    matched: boolean;
+    /** Individual rule results */
+    ruleResults: RuleMatchResult[];
+    /** Total evaluation duration */
+    durationMs: number;
+}
+/**
+ * Result of evaluating a policy
+ */
+export interface PolicyMatchResult {
+    /** The policy that was evaluated */
+    policy: Policy;
+    /** Whether the policy matched */
+    matched: boolean;
+    /** The effect of the policy */
+    effect: PolicyEffect;
+    /** Rule group evaluation result */
+    ruleGroupResult: RuleGroupResult;
+    /** Evaluation duration */
+    durationMs: number;
+}
+/**
+ * Context for rule evaluation
+ */
+export interface EvaluationContext {
+    /** The intent being evaluated */
+    intent: Intent;
+    /** Additional context data */
+    context?: Record<string, unknown>;
+    /** Environment data */
+    environment?: {
+        timestamp?: string;
+        timezone?: string;
+    };
+}
+/**
+ * RuleEvaluator class for evaluating rules against intent context
+ */
+export declare class RuleEvaluator {
+    /**
+     * Evaluate a single rule against the context
+     */
+    evaluateRule(rule: Rule, context: EvaluationContext): RuleMatchResult;
+    /**
+     * Evaluate a rule group with AND/OR logic
+     */
+    evaluateRuleGroup(ruleGroup: RuleGroup, context: EvaluationContext): RuleGroupResult;
+    /**
+     * Evaluate a policy against the context
+     */
+    evaluatePolicy(policy: Policy, context: EvaluationContext): PolicyMatchResult;
+    /**
+     * Evaluate a policy with tracing
+     */
+    evaluatePolicyWithTracing(policy: Policy, context: EvaluationContext): Promise<PolicyMatchResult>;
+    /**
+     * Check if policy conditions match the context
+     */
+    private checkPolicyConditions;
+    /**
+     * Resolve a field path from the evaluation context
+     */
+    private resolveFieldPath;
+    /**
+     * Compare values using the specified operator
+     */
+    private compareValues;
+}
+/**
+ * Create a new rule evaluator instance
+ */
+export declare function createRuleEvaluator(): RuleEvaluator;
+//# sourceMappingURL=evaluator.d.ts.map

package/dist/governance/evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../src/governance/evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EACV,IAAI,EACJ,SAAS,EAET,MAAM,EACN,YAAY,EACb,MAAM,aAAa,CAAC;AAQrB;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kCAAkC;IAClC,IAAI,EAAE,IAAI,CAAC;IACX,+BAA+B;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,4CAA4C;IAC5C,WAAW,EAAE,OAAO,CAAC;IACrB,mCAAmC;IACnC,aAAa,EAAE,OAAO,CAAC;IACvB,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,wCAAwC;IACxC,SAAS,EAAE,SAAS,CAAC;IACrB,gCAAgC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,8BAA8B;IAC9B,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,+BAA+B;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,mCAAmC;IACnC,eAAe,EAAE,eAAe,CAAC;IACjC,0BAA0B;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,uBAAuB;IACvB,WAAW,CAAC,EAAE;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAMD;;GAEG;AACH,qBAAa,aAAa;IACxB;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,GAAG,eAAe;IA8CrE;;OAEG;IACH,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,GAAG,eAAe;IAwCpF;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,iBAAiB;IAwD7E;;OAEG;IACG,yBAAyB,CAC7B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,iBAAiB,CAAC;IAoB7B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAsC7B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAiBxB;;OAEG;IACH,OAAO,CAAC,aAAa;CA0DtB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,CAEnD"}

package/dist/governance/evaluator.js

@@ -0,0 +1,277 @@
+/**
+ * Rule Evaluator
+ *
+ * Evaluates rules against intent context with support for multiple operators.
+ *
+ * @packageDocumentation
+ */
+import { createLogger } from '../common/logger.js';
+import { withSpan } from '../common/trace.js';
+const logger = createLogger({ component: 'rule-evaluator' });
+// =============================================================================
+// RULE EVALUATOR
+// =============================================================================
+/**
+ * RuleEvaluator class for evaluating rules against intent context
+ */
+export class RuleEvaluator {
+    /**
+     * Evaluate a single rule against the context
+     */
+    evaluateRule(rule, context) {
+        const startTime = performance.now();
+        try {
+            const actualValue = this.resolveFieldPath(rule.field, context);
+            const matched = this.compareValues(actualValue, rule.operator, rule.value);
+            const durationMs = performance.now() - startTime;
+            logger.debug({
+                field: rule.field,
+                operator: rule.operator,
+                actualValue,
+                expectedValue: rule.value,
+                matched,
+                durationMs,
+            }, 'Rule evaluated');
+            return {
+                rule,
+                matched,
+                actualValue,
+                expectedValue: rule.value,
+                durationMs,
+            };
+        }
+        catch (error) {
+            const durationMs = performance.now() - startTime;
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            logger.warn({
+                field: rule.field,
+                operator: rule.operator,
+                error: errorMessage,
+            }, 'Rule evaluation failed');
+            return {
+                rule,
+                matched: false,
+                actualValue: undefined,
+                expectedValue: rule.value,
+                durationMs,
+                error: errorMessage,
+            };
+        }
+    }
+    /**
+     * Evaluate a rule group with AND/OR logic
+     */
+    evaluateRuleGroup(ruleGroup, context) {
+        const startTime = performance.now();
+        const ruleResults = [];
+        for (const rule of ruleGroup.rules) {
+            const result = this.evaluateRule(rule, context);
+            ruleResults.push(result);
+            // Short-circuit evaluation
+            if (ruleGroup.logic === 'AND' && !result.matched) {
+                // For AND, if any rule fails, the group fails
+                break;
+            }
+            if (ruleGroup.logic === 'OR' && result.matched) {
+                // For OR, if any rule matches, the group matches
+                break;
+            }
+        }
+        const matched = ruleGroup.logic === 'AND'
+            ? ruleResults.every(r => r.matched)
+            : ruleResults.some(r => r.matched);
+        const durationMs = performance.now() - startTime;
+        logger.debug({
+            logic: ruleGroup.logic,
+            rulesCount: ruleGroup.rules.length,
+            matched,
+            durationMs,
+        }, 'Rule group evaluated');
+        return {
+            ruleGroup,
+            matched,
+            ruleResults,
+            durationMs,
+        };
+    }
+    /**
+     * Evaluate a policy against the context
+     */
+    evaluatePolicy(policy, context) {
+        const startTime = performance.now();
+        // Check if policy is enabled
+        if (!policy.enabled) {
+            return {
+                policy,
+                matched: false,
+                effect: policy.effect,
+                ruleGroupResult: {
+                    ruleGroup: policy.rules,
+                    matched: false,
+                    ruleResults: [],
+                    durationMs: 0,
+                },
+                durationMs: 0,
+            };
+        }
+        // Check policy conditions first
+        if (!this.checkPolicyConditions(policy, context)) {
+            return {
+                policy,
+                matched: false,
+                effect: policy.effect,
+                ruleGroupResult: {
+                    ruleGroup: policy.rules,
+                    matched: false,
+                    ruleResults: [],
+                    durationMs: 0,
+                },
+                durationMs: performance.now() - startTime,
+            };
+        }
+        // Evaluate rule group
+        const ruleGroupResult = this.evaluateRuleGroup(policy.rules, context);
+        const durationMs = performance.now() - startTime;
+        logger.debug({
+            policyId: policy.id,
+            policyName: policy.name,
+            matched: ruleGroupResult.matched,
+            effect: policy.effect,
+            durationMs,
+        }, 'Policy evaluated');
+        return {
+            policy,
+            matched: ruleGroupResult.matched,
+            effect: policy.effect,
+            ruleGroupResult,
+            durationMs,
+        };
+    }
+    /**
+     * Evaluate a policy with tracing
+     */
+    async evaluatePolicyWithTracing(policy, context) {
+        return withSpan('governance.evaluatePolicy', async (span) => {
+            span.attributes['policy.id'] = policy.id;
+            span.attributes['policy.name'] = policy.name;
+            span.attributes['policy.priority'] = policy.priority;
+            const result = this.evaluatePolicy(policy, context);
+            span.attributes['policy.matched'] = result.matched;
+            span.attributes['policy.effect'] = result.effect;
+            span.attributes['policy.durationMs'] = result.durationMs;
+            return result;
+        }, { 'intent.id': context.intent.id });
+    }
+    /**
+     * Check if policy conditions match the context
+     */
+    checkPolicyConditions(policy, context) {
+        if (!policy.conditions)
+            return true;
+        const { actions, resources, intentTypes, entityTypes } = policy.conditions;
+        const intent = context.intent;
+        // Check action/goal match
+        if (actions && actions.length > 0) {
+            const goal = intent.goal;
+            const matches = actions.some(a => a === '*' || a === goal || (a.endsWith('*') && goal.startsWith(a.slice(0, -1))));
+            if (!matches)
+                return false;
+        }
+        // Check resource match (from context)
+        if (resources && resources.length > 0) {
+            const resource = intent.context?.resource;
+            if (!resource)
+                return false;
+            const matches = resources.some(r => r === '*' || r === resource || (r.endsWith('*') && resource.startsWith(r.slice(0, -1))));
+            if (!matches)
+                return false;
+        }
+        // Check intent type match
+        if (intentTypes && intentTypes.length > 0) {
+            const intentType = intent.intentType;
+            if (!intentType)
+                return false;
+            const matches = intentTypes.some(t => t === '*' || t === intentType || (t.endsWith('*') && intentType.startsWith(t.slice(0, -1))));
+            if (!matches)
+                return false;
+        }
+        return true;
+    }
+    /**
+     * Resolve a field path from the evaluation context
+     */
+    resolveFieldPath(path, context) {
+        const parts = path.split('.');
+        let current = context;
+        for (const part of parts) {
+            if (current === null || current === undefined) {
+                return undefined;
+            }
+            if (typeof current !== 'object') {
+                return undefined;
+            }
+            current = current[part];
+        }
+        return current;
+    }
+    /**
+     * Compare values using the specified operator
+     */
+    compareValues(actual, operator, expected) {
+        switch (operator) {
+            case 'eq':
+                return actual === expected;
+            case 'ne':
+                return actual !== expected;
+            case 'gt':
+                return typeof actual === 'number' &&
+                    typeof expected === 'number' &&
+                    actual > expected;
+            case 'lt':
+                return typeof actual === 'number' &&
+                    typeof expected === 'number' &&
+                    actual < expected;
+            case 'gte':
+                return typeof actual === 'number' &&
+                    typeof expected === 'number' &&
+                    actual >= expected;
+            case 'lte':
+                return typeof actual === 'number' &&
+                    typeof expected === 'number' &&
+                    actual <= expected;
+            case 'in':
+                if (!Array.isArray(expected)) {
+                    logger.warn({ operator, expected }, 'Invalid "in" operator: expected array');
+                    return false;
+                }
+                return expected.includes(actual);
+            case 'contains':
+                if (typeof actual !== 'string' || typeof expected !== 'string') {
+                    return false;
+                }
+                return actual.includes(expected);
+            case 'matches':
+                if (typeof actual !== 'string' || typeof expected !== 'string') {
+                    return false;
+                }
+                try {
+                    const regex = new RegExp(expected);
+                    return regex.test(actual);
+                }
+                catch (error) {
+                    logger.warn({ pattern: expected, error }, 'Invalid regex pattern');
+                    return false;
+                }
+            default:
+                logger.warn({ operator }, 'Unknown operator');
+                return false;
+        }
+    }
+}
+/**
+ * Create a new rule evaluator instance
+ */
+export function createRuleEvaluator() {
+    return new RuleEvaluator();
+}
+//# sourceMappingURL=evaluator.js.map

package/dist/governance/evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.js","sourceRoot":"","sources":["../../src/governance/evaluator.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAkB,MAAM,oBAAoB,CAAC;AAU9D,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAyE7D,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,aAAa;IACxB;;OAEG;IACH,YAAY,CAAC,IAAU,EAAE,OAA0B;QACjD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAE3E,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAEjD,MAAM,CAAC,KAAK,CAAC;gBACX,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,WAAW;gBACX,aAAa,EAAE,IAAI,CAAC,KAAK;gBACzB,OAAO;gBACP,UAAU;aACX,EAAE,gBAAgB,CAAC,CAAC;YAErB,OAAO;gBACL,IAAI;gBACJ,OAAO;gBACP,WAAW;gBACX,aAAa,EAAE,IAAI,CAAC,KAAK;gBACzB,UAAU;aACX,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACjD,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAE9E,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,YAAY;aACpB,EAAE,wBAAwB,CAAC,CAAC;YAE7B,OAAO;gBACL,IAAI;gBACJ,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,SAAS;gBACtB,aAAa,EAAE,IAAI,CAAC,KAAK;gBACzB,UAAU;gBACV,KAAK,EAAE,YAAY;aACpB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,SAAoB,EAAE,OAA0B;QAChE,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,WAAW,GAAsB,EAAE,CAAC;QAE1C,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAChD,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEzB,2BAA2B;YAC3B,IAAI,SAAS,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjD,8CAA8C;gBAC9C,MAAM;YACR,CAAC;YACD,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC/C,iDAAiD;gBACjD,MAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,KAAK,KAAK;YACvC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACnC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAErC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAEjD,MAAM,CAAC,KAAK,CAAC;YACX,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM;YAClC,OAAO;YACP,UAAU;SACX,EAAE,sBAAsB,CAAC,CAAC;QAE3B,OAAO;YACL,SAAS;YACT,OAAO;YACP,WAAW;YACX,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAc,EAAE,OAA0B;QACvD,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEpC,6BAA6B;QAC7B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,MAAM;gBACN,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,eAAe,EAAE;oBACf,SAAS,EAAE,MAAM,CAAC,KAAK;oBACvB,OAAO,EAAE,KAAK;oBACd,WAAW,EAAE,EAAE;oBACf,UAAU,EAAE,CAAC;iBACd;gBACD,UAAU,EAAE,CAAC;aACd,CAAC;QACJ,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YACjD,OAAO;gBACL,MAAM;gBACN,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,eAAe,EAAE;oBACf,SAAS,EAAE,MAAM,CAAC,KAAK;oBACvB,OAAO,EAAE,KAAK;oBACd,WAAW,EAAE,EAAE;oBACf,UAAU,EAAE,CAAC;iBACd;gBACD,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;aAC1C,CAAC;QACJ,CAAC;QAED,sBAAsB;QACtB,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAEjD,MAAM,CAAC,KAAK,CAAC;YACX,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,OAAO,EAAE,eAAe,CAAC,OAAO;YAChC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU;SACX,EAAE,kBAAkB,CAAC,CAAC;QAEvB,OAAO;YACL,MAAM;YACN,OAAO,EAAE,eAAe,CAAC,OAAO;YAChC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,eAAe;YACf,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAC7B,MAAc,EACd,OAA0B;QAE1B,OAAO,QAAQ,CACb,2BAA2B,EAC3B,KAAK,EAAE,IAAe,EAAE,EAAE;YACxB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;YAC7C,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;YAErD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAEpD,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;YACnD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;YACjD,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;YAEzD,OAAO,MAAM,CAAC;QAChB,CAAC,EACD,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,CACnC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,MAAc,EAAE,OAA0B;QACtE,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAEpC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC;QAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAE9B,0BAA0B;QAC1B,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACzB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC/B,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAChF,CAAC;YACF,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;QAC7B,CAAC;QAED,sCAAsC;QACtC,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAI,MAAM,CAAC,OAAmC,EAAE,QAA8B,CAAC;YAC7F,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC5B,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACjC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CACxF,CAAC;YACF,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;QAC7B,CAAC;QAED,0BAA0B;QAC1B,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YACrC,IAAI,CAAC,UAAU;gBAAE,OAAO,KAAK,CAAC;YAC9B,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACnC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAC5F,CAAC;YACF,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;QAC7B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,IAAY,EAAE,OAA0B;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,OAAO,GAAY,OAAO,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC9C,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,MAAe,EAAE,QAAsB,EAAE,QAAiB;QAC9E,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,IAAI;gBACP,OAAO,MAAM,KAAK,QAAQ,CAAC;YAE7B,KAAK,IAAI;gBACP,OAAO,MAAM,KAAK,QAAQ,CAAC;YAE7B,KAAK,IAAI;gBACP,OAAO,OAAO,MAAM,KAAK,QAAQ;oBAC1B,OAAO,QAAQ,KAAK,QAAQ;oBAC5B,MAAM,GAAG,QAAQ,CAAC;YAE3B,KAAK,IAAI;gBACP,OAAO,OAAO,MAAM,KAAK,QAAQ;oBAC1B,OAAO,QAAQ,KAAK,QAAQ;oBAC5B,MAAM,GAAG,QAAQ,CAAC;YAE3B,KAAK,KAAK;gBACR,OAAO,OAAO,MAAM,KAAK,QAAQ;oBAC1B,OAAO,QAAQ,KAAK,QAAQ;oBAC5B,MAAM,IAAI,QAAQ,CAAC;YAE5B,KAAK,KAAK;gBACR,OAAO,OAAO,MAAM,KAAK,QAAQ;oBAC1B,OAAO,QAAQ,KAAK,QAAQ;oBAC5B,MAAM,IAAI,QAAQ,CAAC;YAE5B,KAAK,IAAI;gBACP,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,uCAAuC,CAAC,CAAC;oBAC7E,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAEnC,KAAK,UAAU;gBACb,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC/D,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAEnC,KAAK,SAAS;gBACZ,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC/D,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;oBACnC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAC;oBACnE,OAAO,KAAK,CAAC;gBACf,CAAC;YAEH;gBACE,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,kBAAkB,CAAC,CAAC;gBAC9C,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,aAAa,EAAE,CAAC;AAC7B,CAAC"}

package/dist/governance/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Governance Engine
+ *
+ * Provides policy-based governance for AI intent evaluation.
+ *
+ * @packageDocumentation
+ */
+export { GovernanceEngine, createGovernanceEngine, type GovernanceEngineOptions, type EvaluationResult, type PolicyAuditEntry, type RuleAuditEntry, } from './engine.js';
+export { type Policy, type PolicySet, type PolicyEffect, type PolicyConditions, type Rule, type RuleGroup, type RuleLogic, type RuleOperator, type ConflictResolutionStrategy, RULE_OPERATORS, PolicySetManager, resolveConflicts, createPolicy, createPolicySet, } from './policy.js';
+export { RuleEvaluator, createRuleEvaluator, type EvaluationContext, type RuleMatchResult, type RuleGroupResult, type PolicyMatchResult, } from './evaluator.js';
+//# sourceMappingURL=index.d.ts.map