@vurb/core 3.2.0

package/dist/server/startServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startServer.js","sourceRoot":"","sources":["../../src/server/startServer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,cAAc,EAAsB,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACjG,OAAO,EAAE,kBAAkB,EAA6B,MAAM,kCAAkC,CAAC;AA2DjG,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC7B,OAAqC;IAErC,MAAM,EACF,IAAI,EACJ,OAAO,GAAG,OAAO,EACjB,QAAQ,EACR,OAAO,EACP,cAAc,EACd,SAAS,GAAG,IAAI,EAChB,MAAM,GAAG,EAAE,GACd,GAAG,OAAO,CAAC;IAEZ,wEAAwE;IACxE,qDAAqD;IACrD,0DAA0D;IAC1D,kDAAkD;IAClD,2DAA2D;IAC3D,wDAAwD;IACxD,8DAA8D;IAC9D,MAAM,CAAC,GAAG,UAAiB,CAAC;IAC5B,IAAI,OAAO,CAAC,CAAC,0BAA0B,KAAK,WAAW,EAAE,CAAC;QACtD,MAAM,KAAK,GAAiD,EAAE,CAAC;QAC/D,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC;gBACP,UAAU,EAAE,CAAC,CAAC,mBAAmB,EAAE;gBACnC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;aACpB,CAAC,CAAC;QACP,CAAC;QAED,uCAAuC;QACvC,CAAC,CAAC,0BAA0B,CAAC,SAAS,CAAC,SAAS,EAAE;YAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;SACvD,CAAC,CAAC;QAEH,oEAAoE;QACpE,uEAAuE;QACvE,CAAC,CAAC,uBAAuB,GAAG,KAAK,EAC7B,QAAgB,EAChB,IAA6B,EAC/B,EAAE;YACA,IAAI,CAAC;gBACD,MAAM,GAAG,GAAG,cAAc;oBACtB,CAAC,CAAC,MAAM,cAAc,CAAC,SAAS,CAAC;oBACjC,CAAC,CAAC,oBAAgC,CAAC;gBACvC,OAAO,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,CAAU,EAAE,CAAC;gBAClB,mDAAmD;gBACnD,4CAA4C;gBAC5C,MAAM,GAAG,GAAG,CAAyC,CAAC;gBACtD,OAAO;oBACH,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,CAAC;4BACN,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,GAAG,EAAE,OAAO,IAAI,CAAC,CAAC;yBAChD,CAAC;iBACL,CAAC;YACN,CAAC;QACL,CAAC,CAAC;QAEF,+DAA+D;QAC/D,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC,EAAE,CAAC;IACnD,CAAC;IAED,wEAAwE;IAExE,0CAA0C;IAC1C,sEAAsE;IACtE,wDAAwD;IACxD,IAAI,GAAqC,CAAC;IAC1C,IAAI,SAAS,EAAE,CAAC;QACZ,IAAI,CAAC;YACD,wCAAwC;YACxC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;YAC/C,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC1B,KAAK,MAAM,SAAS,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;oBACzC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;oBACzC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACrB,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAChC,CAAC;YACL,CAAC;YAED,GAAG,GAAG,MAAM,kBAAkB,CAAC;gBAC3B,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;oBACd,IAAI,EAAE,UAAmB;oBACzB,UAAU,EAAE,IAAI;oBAChB,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,KAAK,EAAE,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC9E,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACxB,CAAC;aACL,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACL,8DAA8D;QAClE,CAAC;IACL,CAAC;IAED,yBAAyB;IACzB,MAAM,MAAM,GAAG,IAAI,MAAM,CACrB,EAAE,IAAI,EAAE,OAAO,EAAE,EACjB,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACvE,CAAC;IAEF,qBAAqB;IACrB,MAAM,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE;QAClC,GAAG,MAAM;QACT,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACf,CAAC,CAAC;IAE9B,6BAA6B;IAC7B,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,qBAAqB,CAAC,CAAC;IAErD,kBAAkB;IAClB,KAAK,UAAU,KAAK;QAChB,IAAI,GAAG;YAAE,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAsB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACpD,IAAI,GAAG;QAAG,MAAyC,CAAC,GAAG,GAAG,GAAG,CAAC;IAC9D,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/state-sync/CausalEngine.d.ts

@@ -0,0 +1,28 @@
+/**
+ * CausalEngine — Mutation Detection + isError Guard
+ *
+ * Pure function. Single responsibility: given a resolved policy
+ * and the tool call outcome, determine which domain patterns
+ * should be invalidated.
+ *
+ * Safety rules:
+ * 1. If the response has `isError: true` → no invalidation (mutation failed, state unchanged)
+ * 2. If the policy has `invalidates` → return those patterns
+ * 3. Otherwise → empty array (no invalidation needed)
+ *
+ * @module
+ */
+import type { ResolvedPolicy } from './types.js';
+/**
+ * Resolve which domain patterns should be invalidated after a tool call.
+ *
+ * The `isError` guard is critical: a failed mutation means the database
+ * state didn't change, so invalidating caches would be incorrect and
+ * would force unnecessary re-reads.
+ *
+ * @param policy  - The resolved policy for the tool that was called
+ * @param isError - Whether the tool call returned an error
+ * @returns Array of glob patterns to invalidate, or empty if none
+ */
+export declare function resolveInvalidations(policy: ResolvedPolicy | null, isError: boolean): readonly string[];
+//# sourceMappingURL=CausalEngine.d.ts.map

package/dist/state-sync/CausalEngine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CausalEngine.d.ts","sourceRoot":"","sources":["../../src/state-sync/CausalEngine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAChC,MAAM,EAAE,cAAc,GAAG,IAAI,EAC7B,OAAO,EAAE,OAAO,GACjB,SAAS,MAAM,EAAE,CAGnB"}

package/dist/state-sync/CausalEngine.js

@@ -0,0 +1,17 @@
+/**
+ * Resolve which domain patterns should be invalidated after a tool call.
+ *
+ * The `isError` guard is critical: a failed mutation means the database
+ * state didn't change, so invalidating caches would be incorrect and
+ * would force unnecessary re-reads.
+ *
+ * @param policy  - The resolved policy for the tool that was called
+ * @param isError - Whether the tool call returned an error
+ * @returns Array of glob patterns to invalidate, or empty if none
+ */
+export function resolveInvalidations(policy, isError) {
+    if (isError)
+        return [];
+    return policy?.invalidates ?? [];
+}
+//# sourceMappingURL=CausalEngine.js.map

package/dist/state-sync/CausalEngine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CausalEngine.js","sourceRoot":"","sources":["../../src/state-sync/CausalEngine.ts"],"names":[],"mappings":"AAgBA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAChC,MAA6B,EAC7B,OAAgB;IAEhB,IAAI,OAAO;QAAE,OAAO,EAAE,CAAC;IACvB,OAAO,MAAM,EAAE,WAAW,IAAI,EAAE,CAAC;AACrC,CAAC"}

package/dist/state-sync/DescriptionDecorator.d.ts

@@ -0,0 +1,31 @@
+/**
+ * DescriptionDecorator — Cache-Control Directive Injection
+ *
+ * Pure function. Single responsibility: append a `[Cache-Control: X]`
+ * suffix to a tool's description based on its resolved policy.
+ *
+ * Idempotent: if the description already ends with a Cache-Control
+ * directive, it is replaced (not duplicated).
+ *
+ * @example
+ * ```
+ * Before: "Manage sprints."
+ * After:  "Manage sprints. [Cache-Control: no-store]"
+ * ```
+ *
+ * @module
+ */
+import { type Tool as McpTool } from '@modelcontextprotocol/sdk/types.js';
+import type { ResolvedPolicy } from './types.js';
+/**
+ * Decorate a tool's description with its Cache-Control directive.
+ *
+ * Returns a shallow copy with the decorated description.
+ * If the policy has no `cacheControl`, returns the tool unchanged.
+ *
+ * @param tool   - Original MCP tool definition
+ * @param policy - Resolved policy for this tool (may be null)
+ * @returns The tool with an appended `[Cache-Control: X]` suffix, or unchanged
+ */
+export declare function decorateDescription(tool: McpTool, policy: ResolvedPolicy | null): McpTool;
+//# sourceMappingURL=DescriptionDecorator.d.ts.map

package/dist/state-sync/DescriptionDecorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DescriptionDecorator.d.ts","sourceRoot":"","sources":["../../src/state-sync/DescriptionDecorator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,KAAK,IAAI,IAAI,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAKjD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAC/B,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,cAAc,GAAG,IAAI,GAC9B,OAAO,CAOT"}

package/dist/state-sync/DescriptionDecorator.js

@@ -0,0 +1,38 @@
+/**
+ * DescriptionDecorator — Cache-Control Directive Injection
+ *
+ * Pure function. Single responsibility: append a `[Cache-Control: X]`
+ * suffix to a tool's description based on its resolved policy.
+ *
+ * Idempotent: if the description already ends with a Cache-Control
+ * directive, it is replaced (not duplicated).
+ *
+ * @example
+ * ```
+ * Before: "Manage sprints."
+ * After:  "Manage sprints. [Cache-Control: no-store]"
+ * ```
+ *
+ * @module
+ */
+import {} from '@modelcontextprotocol/sdk/types.js';
+/** Regex to detect an existing Cache-Control directive at the end of a description. */
+const CACHE_CONTROL_PATTERN = /\s*\[Cache-Control:\s*\w[^\]]*\]$/;
+/**
+ * Decorate a tool's description with its Cache-Control directive.
+ *
+ * Returns a shallow copy with the decorated description.
+ * If the policy has no `cacheControl`, returns the tool unchanged.
+ *
+ * @param tool   - Original MCP tool definition
+ * @param policy - Resolved policy for this tool (may be null)
+ * @returns The tool with an appended `[Cache-Control: X]` suffix, or unchanged
+ */
+export function decorateDescription(tool, policy) {
+    if (!policy?.cacheControl)
+        return tool;
+    const tag = `[Cache-Control: ${policy.cacheControl}]`;
+    const base = (tool.description ?? '').replace(CACHE_CONTROL_PATTERN, '');
+    return { ...tool, description: base.length > 0 ? `${base} ${tag}` : tag };
+}
+//# sourceMappingURL=DescriptionDecorator.js.map

package/dist/state-sync/DescriptionDecorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DescriptionDecorator.js","sourceRoot":"","sources":["../../src/state-sync/DescriptionDecorator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAwB,MAAM,oCAAoC,CAAC;AAG1E,uFAAuF;AACvF,MAAM,qBAAqB,GAAG,mCAAmC,CAAC;AAElE;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAC/B,IAAa,EACb,MAA6B;IAE7B,IAAI,CAAC,MAAM,EAAE,YAAY;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,GAAG,GAAG,mBAAmB,MAAM,CAAC,YAAY,GAAG,CAAC;IACtD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;IAEzE,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC9E,CAAC"}

package/dist/state-sync/GlobMatcher.d.ts

@@ -0,0 +1,29 @@
+/**
+ * GlobMatcher — Dot-Separated Glob Pattern Matching
+ *
+ * Pure function. Single responsibility: match a dot-separated tool name
+ * against a glob pattern.
+ *
+ * - `*`  matches exactly one segment
+ * - `**` matches zero or more segments
+ *
+ * Uses an iterative approach with explicit stack to avoid stack overflow
+ * on deeply nested patterns and to cap worst-case complexity.
+ *
+ * @example
+ * ```typescript
+ * matchGlob('sprints.*', 'sprints.get');       // true
+ * matchGlob('sprints.*', 'sprints.tasks.get'); // false
+ * matchGlob('**', 'anything.at.all');          // true
+ * ```
+ *
+ * @module
+ */
+/**
+ * Match a dot-separated name against a glob pattern.
+ *
+ * Splits both pattern and name by `.` and performs iterative matching
+ * with bounded backtracking to prevent exponential blowup.
+ */
+export declare function matchGlob(pattern: string, name: string): boolean;
+//# sourceMappingURL=GlobMatcher.d.ts.map

package/dist/state-sync/GlobMatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GlobMatcher.d.ts","sourceRoot":"","sources":["../../src/state-sync/GlobMatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAWH;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAKhE"}

package/dist/state-sync/GlobMatcher.js

@@ -0,0 +1,79 @@
+/**
+ * GlobMatcher — Dot-Separated Glob Pattern Matching
+ *
+ * Pure function. Single responsibility: match a dot-separated tool name
+ * against a glob pattern.
+ *
+ * - `*`  matches exactly one segment
+ * - `**` matches zero or more segments
+ *
+ * Uses an iterative approach with explicit stack to avoid stack overflow
+ * on deeply nested patterns and to cap worst-case complexity.
+ *
+ * @example
+ * ```typescript
+ * matchGlob('sprints.*', 'sprints.get');       // true
+ * matchGlob('sprints.*', 'sprints.tasks.get'); // false
+ * matchGlob('**', 'anything.at.all');          // true
+ * ```
+ *
+ * @module
+ */
+/**
+ * Maximum number of backtrack iterations to prevent exponential blowup
+ * on adversarial patterns (e.g. `**.**.**.**` against long names).
+ *
+ * 1024 is generous enough for any real-world MCP tool name hierarchy
+ * while capping worst-case CPU usage.
+ */
+const MAX_ITERATIONS = 1024;
+/**
+ * Match a dot-separated name against a glob pattern.
+ *
+ * Splits both pattern and name by `.` and performs iterative matching
+ * with bounded backtracking to prevent exponential blowup.
+ */
+export function matchGlob(pattern, name) {
+    const patternSegs = pattern.split('.');
+    const nameSegs = name.split('.');
+    return matchIterative(patternSegs, nameSegs);
+}
+// ── Iterative Matching with Bounded Backtracking ─────────
+function matchIterative(pattern, name) {
+    let pi = 0;
+    let ni = 0;
+    // Bookmarks for `**` backtracking: the position to retry from
+    let starPi = -1;
+    let starNi = -1;
+    let iterations = 0;
+    while (ni < name.length) {
+        if (++iterations > MAX_ITERATIONS)
+            return false;
+        if (pi < pattern.length && (pattern[pi] === '*' || pattern[pi] === name[ni])) {
+            // `*` or exact match — consume one segment from both
+            pi++;
+            ni++;
+        }
+        else if (pi < pattern.length && pattern[pi] === '**') {
+            // `**` — bookmark this position, try consuming zero segments first
+            starPi = pi;
+            starNi = ni;
+            pi++;
+        }
+        else if (starPi !== -1) {
+            // Backtrack: the last `**` consumes one more segment
+            pi = starPi + 1;
+            starNi++;
+            ni = starNi;
+        }
+        else {
+            return false;
+        }
+    }
+    // Skip trailing `**` segments in the pattern
+    while (pi < pattern.length && pattern[pi] === '**') {
+        pi++;
+    }
+    return pi === pattern.length;
+}
+//# sourceMappingURL=GlobMatcher.js.map

package/dist/state-sync/GlobMatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GlobMatcher.js","sourceRoot":"","sources":["../../src/state-sync/GlobMatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;;;GAMG;AACH,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,IAAY;IACnD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEjC,OAAO,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED,4DAA4D;AAE5D,SAAS,cAAc,CACnB,OAA0B,EAC1B,IAAuB;IAEvB,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,EAAE,GAAG,CAAC,CAAC;IAEX,8DAA8D;IAC9D,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC;IAEhB,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,IAAI,EAAE,UAAU,GAAG,cAAc;YAAE,OAAO,KAAK,CAAC;QAEhD,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC3E,qDAAqD;YACrD,EAAE,EAAE,CAAC;YACL,EAAE,EAAE,CAAC;QACT,CAAC;aAAM,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,mEAAmE;YACnE,MAAM,GAAG,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,CAAC;YACZ,EAAE,EAAE,CAAC;QACT,CAAC;aAAM,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YACvB,qDAAqD;YACrD,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC;YAChB,MAAM,EAAE,CAAC;YACT,EAAE,GAAG,MAAM,CAAC;QAChB,CAAC;aAAM,CAAC;YACJ,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED,6CAA6C;IAC7C,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QACjD,EAAE,EAAE,CAAC;IACT,CAAC;IAED,OAAO,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC;AACjC,CAAC"}

package/dist/state-sync/PolicyEngine.d.ts

@@ -0,0 +1,75 @@
+/**
+ * PolicyEngine — First-Match-Wins Policy Resolution
+ *
+ * Single responsibility: resolve a tool name to its applicable policy.
+ * Delegates glob matching to GlobMatcher and validation to PolicyValidator.
+ *
+ * Stateless after construction. Resolution results are cached in a Map
+ * for O(1) repeat lookups — the glob iteration only happens once per
+ * unique tool name.
+ *
+ * Cache is bounded to {@link MAX_CACHE_SIZE} entries to prevent unbounded
+ * memory growth from dynamic tool names.
+ *
+ * @example
+ * ```typescript
+ * const engine = new PolicyEngine(
+ *     [{ match: 'sprints.*', cacheControl: 'no-store' }],
+ *     { cacheControl: 'no-store' },
+ * );
+ *
+ * engine.resolve('sprints.get');    // { cacheControl: 'no-store' }
+ * engine.resolve('sprints.get');    // O(1) — cached
+ * engine.resolve('unknown.tool');   // { cacheControl: 'no-store' } — default
+ * ```
+ *
+ * @module
+ */
+import type { SyncPolicy, ResolvedPolicy, CacheDirective } from './types.js';
+export declare class PolicyEngine {
+    private readonly _policies;
+    private readonly _defaultCacheControl;
+    /**
+     * Resolution cache: avoids repeated glob iteration for the same tool name.
+     * Key = tool name, Value = resolved policy or null (no match, no default).
+     */
+    private readonly _cache;
+    /**
+     * Pre-computed resolved policies, one per policy entry.
+     * Built once at construction time so multiple tool names matching
+     * the same policy share the same frozen object reference.
+     */
+    private readonly _resolvedByIndex;
+    /**
+     * Pre-frozen default-only resolution. Created once at construction
+     * if defaults are configured, reused for every unmatched tool name.
+     */
+    private readonly _defaultResolved;
+    /**
+     * Construct a PolicyEngine with eager validation.
+     *
+     * @param policies - Policy rules, evaluated in declaration order
+     * @param defaults - Fallback applied when no policy matches
+     * @throws {Error} If any policy or default is invalid
+     */
+    constructor(policies: readonly SyncPolicy[], defaults?: {
+        readonly cacheControl?: CacheDirective;
+    });
+    /**
+     * Resolve the applicable policy for a tool name.
+     *
+     * First matching policy wins. Falls back to defaults if no match.
+     * Returns `null` if no policy matches and no defaults are configured.
+     *
+     * Results are cached — repeated calls for the same tool name are O(1).
+     */
+    resolve(toolName: string): ResolvedPolicy | null;
+    private _resolveUncached;
+    /**
+     * Build a frozen ResolvedPolicy from a SyncPolicy.
+     * Merges policy cacheControl with the default as fallback.
+     * Called once per policy at construction time.
+     */
+    private _buildResolved;
+}
+//# sourceMappingURL=PolicyEngine.d.ts.map

package/dist/state-sync/PolicyEngine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PolicyEngine.d.ts","sourceRoot":"","sources":["../../src/state-sync/PolicyEngine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAc7E,qBAAa,YAAY;IACrB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAClD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA6B;IAElE;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4C;IAEnE;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuC;IAExE;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAkC;IAEnE;;;;;;OAMG;gBAEC,QAAQ,EAAE,SAAS,UAAU,EAAE,EAC/B,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,cAAc,CAAA;KAAE;IAoBzD;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAmBhD,OAAO,CAAC,gBAAgB;IAWxB;;;;OAIG;IACH,OAAO,CAAC,cAAc;CAmBzB"}

package/dist/state-sync/PolicyEngine.js

@@ -0,0 +1,107 @@
+import { matchGlob } from './GlobMatcher.js';
+import { validatePolicies, validateDefaults } from './PolicyValidator.js';
+/**
+ * Maximum number of cached resolutions.
+ *
+ * In practice, MCP servers have a finite set of tools (~10-200).
+ * This cap exists purely as a safety net against adversarial
+ * or dynamically-generated tool names that could grow unboundedly.
+ * When hit, the cache is cleared (full eviction) to avoid memory leak.
+ */
+const MAX_CACHE_SIZE = 2048;
+export class PolicyEngine {
+    _policies;
+    _defaultCacheControl;
+    /**
+     * Resolution cache: avoids repeated glob iteration for the same tool name.
+     * Key = tool name, Value = resolved policy or null (no match, no default).
+     */
+    _cache = new Map();
+    /**
+     * Pre-computed resolved policies, one per policy entry.
+     * Built once at construction time so multiple tool names matching
+     * the same policy share the same frozen object reference.
+     */
+    _resolvedByIndex;
+    /**
+     * Pre-frozen default-only resolution. Created once at construction
+     * if defaults are configured, reused for every unmatched tool name.
+     */
+    _defaultResolved;
+    /**
+     * Construct a PolicyEngine with eager validation.
+     *
+     * @param policies - Policy rules, evaluated in declaration order
+     * @param defaults - Fallback applied when no policy matches
+     * @throws {Error} If any policy or default is invalid
+     */
+    constructor(policies, defaults) {
+        validatePolicies(policies);
+        validateDefaults(defaults);
+        this._policies = Object.freeze([...policies]);
+        this._defaultCacheControl = defaults?.cacheControl;
+        // Pre-freeze default resolution to avoid repeated object allocation
+        this._defaultResolved = this._defaultCacheControl
+            ? Object.freeze({ cacheControl: this._defaultCacheControl })
+            : null;
+        // Pre-compute a frozen ResolvedPolicy for each policy entry.
+        // This way, N tool names matching the same policy share one object.
+        this._resolvedByIndex = Object.freeze(this._policies.map(p => this._buildResolved(p)));
+    }
+    /**
+     * Resolve the applicable policy for a tool name.
+     *
+     * First matching policy wins. Falls back to defaults if no match.
+     * Returns `null` if no policy matches and no defaults are configured.
+     *
+     * Results are cached — repeated calls for the same tool name are O(1).
+     */
+    resolve(toolName) {
+        const cached = this._cache.get(toolName);
+        if (cached !== undefined)
+            return cached;
+        const result = this._resolveUncached(toolName);
+        // Bounded cache: evict all when hitting the cap.
+        // In practice this never triggers for normal MCP servers,
+        // but prevents unbounded growth from adversarial input.
+        if (this._cache.size >= MAX_CACHE_SIZE) {
+            this._cache.clear();
+        }
+        this._cache.set(toolName, result);
+        return result;
+    }
+    // ── Private ──────────────────────────────────────────
+    _resolveUncached(toolName) {
+        for (let i = 0; i < this._policies.length; i++) {
+            if (matchGlob(this._policies[i].match, toolName)) {
+                return this._resolvedByIndex[i];
+            }
+        }
+        // No policy matched — return pre-frozen default (or null)
+        return this._defaultResolved;
+    }
+    /**
+     * Build a frozen ResolvedPolicy from a SyncPolicy.
+     * Merges policy cacheControl with the default as fallback.
+     * Called once per policy at construction time.
+     */
+    _buildResolved(policy) {
+        const cacheControl = policy.cacheControl ?? this._defaultCacheControl;
+        const invalidates = policy.invalidates;
+        const hasInvalidates = (invalidates?.length ?? 0) > 0;
+        // No effective policy — nothing to do
+        if (!cacheControl && !hasInvalidates)
+            return null;
+        // Build the object conditionally to satisfy strict typing.
+        // Each branch freezes only the properties that are defined.
+        if (cacheControl && hasInvalidates) {
+            return Object.freeze({ cacheControl, invalidates: invalidates });
+        }
+        if (cacheControl) {
+            return Object.freeze({ cacheControl });
+        }
+        // hasInvalidates is true here (guard above ensures at least one)
+        return Object.freeze({ invalidates: invalidates });
+    }
+}
+//# sourceMappingURL=PolicyEngine.js.map

package/dist/state-sync/PolicyEngine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PolicyEngine.js","sourceRoot":"","sources":["../../src/state-sync/PolicyEngine.ts"],"names":[],"mappings":"AA4BA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,MAAM,OAAO,YAAY;IACJ,SAAS,CAAwB;IACjC,oBAAoB,CAA6B;IAElE;;;OAGG;IACc,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAC;IAEnE;;;;OAIG;IACc,gBAAgB,CAAuC;IAExE;;;OAGG;IACc,gBAAgB,CAAkC;IAEnE;;;;;;OAMG;IACH,YACI,QAA+B,EAC/B,QAAqD;QAErD,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAE3B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,oBAAoB,GAAG,QAAQ,EAAE,YAAY,CAAC;QAEnD,oEAAoE;QACpE,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,oBAAoB;YAC7C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5D,CAAC,CAAC,IAAI,CAAC;QAEX,6DAA6D;QAC7D,oEAAoE;QACpE,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,MAAM,CACjC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAClD,CAAC;IACN,CAAC;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,QAAgB;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAExC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAE/C,iDAAiD;QACjD,0DAA0D;QAC1D,wDAAwD;QACxD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClC,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,wDAAwD;IAEhD,gBAAgB,CAAC,QAAgB;QACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAChD,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAE,CAAC;YACrC,CAAC;QACL,CAAC;QAED,0DAA0D;QAC1D,OAAO,IAAI,CAAC,gBAAgB,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,MAAkB;QACrC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,oBAAoB,CAAC;QACtE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACvC,MAAM,cAAc,GAAG,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAEtD,sCAAsC;QACtC,IAAI,CAAC,YAAY,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC;QAElD,2DAA2D;QAC3D,4DAA4D;QAC5D,IAAI,YAAY,IAAI,cAAc,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,WAAY,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,iEAAiE;QACjE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,WAAY,EAAE,CAAC,CAAC;IACxD,CAAC;CACJ"}

package/dist/state-sync/PolicyValidator.d.ts

@@ -0,0 +1,67 @@
+/**
+ * PolicyValidator — Fail-Fast Policy Validation
+ *
+ * Pure functions. Single responsibility: validate SyncPolicy arrays
+ * and default config at construction time.
+ *
+ * Every validation error is caught eagerly — no invalid configuration
+ * survives past PolicyEngine construction.
+ *
+ * @module
+ */
+import type { SyncPolicy, CacheDirective } from './types.js';
+/** Valid cache directives — binary vocabulary, no max-age. */
+export declare const VALID_DIRECTIVES: ReadonlySet<string>;
+/**
+ * Validate an array of policies. Throws on the first invalid entry.
+ *
+ * Called at PolicyEngine construction time for fail-fast behavior.
+ *
+ * @throws {Error} Descriptive error identifying the invalid policy
+ */
+export declare function validatePolicies(policies: readonly SyncPolicy[]): void;
+/**
+ * Validate the defaults config. Throws if cacheControl is invalid.
+ *
+ * @throws {Error} If the default cacheControl directive is not recognized
+ */
+export declare function validateDefaults(defaults?: {
+    readonly cacheControl?: CacheDirective;
+}): void;
+/**
+ * Warning produced when two policies potentially overlap.
+ *
+ * Overlapping policies are not an error (first-match-wins is deterministic),
+ * but they can cause subtle configuration bugs when the user expects a
+ * more-specific policy to fire but a broader one shadows it.
+ *
+ * @example
+ * ```typescript
+ * const warnings = detectOverlaps(policies);
+ * warnings.forEach(w => console.warn(`[StateSync] ${w.message}`));
+ * ```
+ */
+export interface OverlapWarning {
+    /** Human-readable description of the overlap. */
+    readonly message: string;
+    /** Index of the shadowing (earlier) policy. */
+    readonly shadowingIndex: number;
+    /** Index of the shadowed (later) policy. */
+    readonly shadowedIndex: number;
+}
+/**
+ * Detect potentially overlapping glob policies.
+ *
+ * Checks if a broader policy at index `i` could shadow a more-specific
+ * policy at index `j > i`. Uses GlobMatcher to test if the earlier
+ * pattern matches the later pattern's literal segments.
+ *
+ * This is a heuristic: it only catches cases where the later policy's
+ * `match` string (treated as a literal tool name) would match the
+ * earlier policy's glob. It does NOT do full set-intersection analysis.
+ *
+ * @param policies - The policies array to analyze
+ * @returns Array of overlap warnings (empty if no overlaps detected)
+ */
+export declare function detectOverlaps(policies: readonly SyncPolicy[]): readonly OverlapWarning[];
+//# sourceMappingURL=PolicyValidator.d.ts.map

package/dist/state-sync/PolicyValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PolicyValidator.d.ts","sourceRoot":"","sources":["../../src/state-sync/PolicyValidator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAK7D,8DAA8D;AAC9D,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAsC,CAAC;AAiExF;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,GAAG,IAAI,CAetE;AAID;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC5B,QAAQ,CAAC,EAAE;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,cAAc,CAAA;CAAE,GACtD,IAAI,CAON;AAID;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,cAAc;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,4CAA4C;IAC5C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,GAAG,SAAS,cAAc,EAAE,CAuBzF"}

package/dist/state-sync/PolicyValidator.js

@@ -0,0 +1,122 @@
+import { matchGlob } from './GlobMatcher.js';
+// ── Constants ────────────────────────────────────────────
+/** Valid cache directives — binary vocabulary, no max-age. */
+export const VALID_DIRECTIVES = new Set(['no-store', 'immutable']);
+/** Valid glob segment: alphanumeric, `_`, `-`, `*`, `**`. */
+const VALID_SEGMENT = /^(\*{1,2}|[a-zA-Z0-9_-]+)$/;
+// ── Private Helpers ──────────────────────────────────────
+/**
+ * Assert that a glob pattern string is non-empty and has valid segments.
+ *
+ * @param pattern - The glob pattern to validate
+ * @param label   - Human-readable label for the error message (e.g. "'match'")
+ * @param prefix  - Context prefix for error grouping (e.g. "policy[0]")
+ * @throws {Error} If the pattern is empty or contains invalid segments
+ */
+function assertValidGlob(pattern, label, prefix) {
+    if (pattern === '' || typeof pattern !== 'string') {
+        throw new Error(`${prefix}: ${label} must be a non-empty string.`);
+    }
+    for (const seg of pattern.split('.')) {
+        if (!VALID_SEGMENT.test(seg)) {
+            throw new Error(`${prefix}: ${label} pattern "${pattern}" has invalid segment "${seg}". ` +
+                `Allowed: alphanumeric, "_", "-", "*", "**".`);
+        }
+    }
+}
+/**
+ * Assert that a cache directive is one of the recognized values.
+ *
+ * @param directive - The directive value to check
+ * @param prefix    - Context prefix for error grouping
+ * @throws {Error} If the directive is not recognized
+ */
+function assertValidDirective(directive, prefix) {
+    if (!VALID_DIRECTIVES.has(directive)) {
+        throw new Error(`${prefix}: invalid cacheControl "${directive}". ` +
+            `Allowed: "no-store", "immutable".`);
+    }
+}
+/**
+ * Assert that an invalidation list contains only valid glob patterns.
+ *
+ * @param invalidates - The array of invalidation patterns
+ * @param prefix      - Context prefix for error grouping
+ * @throws {Error} If any entry is not a valid glob string
+ */
+function assertValidInvalidates(invalidates, prefix) {
+    if (!Array.isArray(invalidates)) {
+        throw new Error(`${prefix}: 'invalidates' must be an array.`);
+    }
+    for (const pattern of invalidates) {
+        assertValidGlob(pattern, "'invalidates' entries must be non-empty strings. Entry", prefix);
+    }
+}
+// ── Validate Policies ────────────────────────────────────
+/**
+ * Validate an array of policies. Throws on the first invalid entry.
+ *
+ * Called at PolicyEngine construction time for fail-fast behavior.
+ *
+ * @throws {Error} Descriptive error identifying the invalid policy
+ */
+export function validatePolicies(policies) {
+    for (let i = 0; i < policies.length; i++) {
+        const p = policies[i];
+        const prefix = `StateSync policy[${i}]`;
+        assertValidGlob(p.match, "'match'", prefix);
+        if (p.cacheControl !== undefined) {
+            assertValidDirective(p.cacheControl, prefix);
+        }
+        if (p.invalidates !== undefined) {
+            assertValidInvalidates(p.invalidates, prefix);
+        }
+    }
+}
+// ── Validate Defaults ────────────────────────────────────
+/**
+ * Validate the defaults config. Throws if cacheControl is invalid.
+ *
+ * @throws {Error} If the default cacheControl directive is not recognized
+ */
+export function validateDefaults(defaults) {
+    if (defaults?.cacheControl !== undefined && !VALID_DIRECTIVES.has(defaults.cacheControl)) {
+        throw new Error(`StateSync default cacheControl "${defaults.cacheControl}" is invalid. ` +
+            `Allowed: "no-store", "immutable".`);
+    }
+}
+/**
+ * Detect potentially overlapping glob policies.
+ *
+ * Checks if a broader policy at index `i` could shadow a more-specific
+ * policy at index `j > i`. Uses GlobMatcher to test if the earlier
+ * pattern matches the later pattern's literal segments.
+ *
+ * This is a heuristic: it only catches cases where the later policy's
+ * `match` string (treated as a literal tool name) would match the
+ * earlier policy's glob. It does NOT do full set-intersection analysis.
+ *
+ * @param policies - The policies array to analyze
+ * @returns Array of overlap warnings (empty if no overlaps detected)
+ */
+export function detectOverlaps(policies) {
+    const warnings = [];
+    for (let i = 0; i < policies.length; i++) {
+        for (let j = i + 1; j < policies.length; j++) {
+            const earlier = policies[i].match;
+            const later = policies[j].match;
+            // If the later policy's match pattern (as a literal name)
+            // would be caught by the earlier policy's glob, it's shadowed.
+            if (matchGlob(earlier, later)) {
+                warnings.push({
+                    message: `policy[${i}] (match: "${earlier}") shadows policy[${j}] (match: "${later}"). ` +
+                        `The later policy will never match because first-match-wins applies.`,
+                    shadowingIndex: i,
+                    shadowedIndex: j,
+                });
+            }
+        }
+    }
+    return warnings;
+}
+//# sourceMappingURL=PolicyValidator.js.map

package/dist/state-sync/PolicyValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PolicyValidator.js","sourceRoot":"","sources":["../../src/state-sync/PolicyValidator.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,4DAA4D;AAE5D,8DAA8D;AAC9D,MAAM,CAAC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;AAExF,6DAA6D;AAC7D,MAAM,aAAa,GAAG,4BAA4B,CAAC;AAEnD,4DAA4D;AAE5D;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc;IACnE,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,KAAK,KAAK,8BAA8B,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACX,GAAG,MAAM,KAAK,KAAK,aAAa,OAAO,0BAA0B,GAAG,KAAK;gBACzE,6CAA6C,CAChD,CAAC;QACN,CAAC;IACL,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,SAAiB,EAAE,MAAc;IAC3D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACX,GAAG,MAAM,2BAA2B,SAAS,KAAK;YAClD,mCAAmC,CACtC,CAAC;IACN,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,WAAoB,EAAE,MAAc;IAChE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,mCAAmC,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,WAAuB,EAAE,CAAC;QAC5C,eAAe,CAAC,OAAO,EAAE,wDAAwD,EAAE,MAAM,CAAC,CAAC;IAC/F,CAAC;AACL,CAAC;AAED,4DAA4D;AAE5D;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA+B;IAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC;QAExC,eAAe,CAAC,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAE5C,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,oBAAoB,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,sBAAsB,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;IACL,CAAC;AACL,CAAC;AAED,4DAA4D;AAE5D;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC5B,QAAqD;IAErD,IAAI,QAAQ,EAAE,YAAY,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CACX,mCAAmC,QAAQ,CAAC,YAAY,gBAAgB;YACxE,mCAAmC,CACtC,CAAC;IACN,CAAC;AACL,CAAC;AA0BD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,QAA+B;IAC1D,MAAM,QAAQ,GAAqB,EAAE,CAAC;IAEtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;YACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;YAEjC,0DAA0D;YAC1D,+DAA+D;YAC/D,IAAI,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC;oBACV,OAAO,EACH,UAAU,CAAC,cAAc,OAAO,qBAAqB,CAAC,cAAc,KAAK,MAAM;wBAC/E,qEAAqE;oBACzE,cAAc,EAAE,CAAC;oBACjB,aAAa,EAAE,CAAC;iBACnB,CAAC,CAAC;YACP,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,QAAQ,CAAC;AACpB,CAAC"}