@vybestack/llxprt-code-policy 0.10.0-nightly.260613.1adad3b34

package/dist/src/policies/read-only.toml

@@ -0,0 +1,96 @@
+# Priority system for policy rules:
+# - Higher priority numbers win over lower priority numbers
+# - When multiple rules match, the highest priority rule is applied
+# - Rules are evaluated in order of priority (highest first)
+#
+# Priority bands (tiers):
+# - Default policies (TOML): 1 + priority/1000 (e.g., priority 100 → 1.100)
+# - User policies (TOML): 2 + priority/1000 (e.g., priority 100 → 2.100)
+# - Admin policies (TOML): 3 + priority/1000 (e.g., priority 100 → 3.100)
+#
+# This ensures Admin > User > Default hierarchy is always preserved,
+# while allowing user-specified priorities to work within each tier.
+#
+# Settings-based and dynamic rules (all in user tier 2.x):
+#   2.95: Tools that the user has selected as "Always Allow" in the interactive UI
+#   2.9:  MCP servers excluded list (security: persistent server blocks)
+#   2.4:  Command line flag --exclude-tools (explicit temporary blocks)
+#   2.3:  Command line flag --allowed-tools (explicit temporary allows)
+#   2.2:  MCP servers with trust=true (persistent trusted servers)
+#   2.1:  MCP servers allowed list (persistent general server allows)
+#
+# TOML policy priorities (before transformation):
+#   10: Write tools default to ASK_USER (becomes 1.010 in default tier)
+#   15: Auto-edit tool override (becomes 1.015 in default tier)
+#   50: Read-only tools (becomes 1.050 in default tier)
+#   999: YOLO mode allow-all (becomes 1.999 in default tier)
+
+[[rule]]
+toolName = "glob"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "search_file_content"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "list_directory"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "read_file"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "read_many_files"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "read_line_range"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "google_web_search"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "SubagentInvocation"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "exa_web_search"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "task"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "todo_read"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "todo_write"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "todo_pause"
+decision = "allow"
+priority = 50
+
+[[rule]]
+toolName = "list_subagents"
+decision = "allow"
+priority = 50

package/dist/src/policies/write.toml

@@ -0,0 +1,101 @@
+# Priority system for policy rules:
+# - Higher priority numbers win over lower priority numbers
+# - When multiple rules match, the highest priority rule is applied
+# - Rules are evaluated in order of priority (highest first)
+#
+# Priority bands (tiers):
+# - Default policies (TOML): 1 + priority/1000 (e.g., priority 100 → 1.100)
+# - User policies (TOML): 2 + priority/1000 (e.g., priority 100 → 2.100)
+# - Admin policies (TOML): 3 + priority/1000 (e.g., priority 100 → 3.100)
+#
+# This ensures Admin > User > Default hierarchy is always preserved,
+# while allowing user-specified priorities to work within each tier.
+#
+# Settings-based and dynamic rules (all in user tier 2.x):
+#   2.95: Tools that the user has selected as "Always Allow" in the interactive UI
+#   2.9:  MCP servers excluded list (security: persistent server blocks)
+#   2.4:  Command line flag --exclude-tools (explicit temporary blocks)
+#   2.3:  Command line flag --allowed-tools (explicit temporary allows)
+#   2.2:  MCP servers with trust=true (persistent trusted servers)
+#   2.1:  MCP servers allowed list (persistent general server allows)
+#
+# TOML policy priorities (before transformation):
+#   10: Write tools default to ASK_USER (becomes 1.010 in default tier)
+#   15: Auto-edit tool override (becomes 1.015 in default tier)
+#   50: Read-only tools (becomes 1.050 in default tier)
+#   999: YOLO mode allow-all (becomes 1.999 in default tier)
+
+[[rule]]
+toolName = "replace"
+decision = "ask_user"
+priority = 10
+
+[[rule]]
+toolName = "replace"
+decision = "allow"
+priority = 15
+modes = ["autoEdit"]
+
+[[rule]]
+toolName = "save_memory"
+decision = "ask_user"
+priority = 10
+
+[[rule]]
+toolName = "run_shell_command"
+decision = "ask_user"
+priority = 10
+
+[[rule]]
+toolName = "write_file"
+decision = "ask_user"
+priority = 10
+
+[[rule]]
+toolName = "activate_skill"
+decision = "ask_user"
+priority = 10
+
+[[rule]]
+toolName = "write_file"
+decision = "allow"
+priority = 15
+modes = ["autoEdit"]
+
+[[rule]]
+toolName = "web_fetch"
+decision = "ask_user"
+priority = 10
+
+[[rule]]
+toolName = "insert_at_line"
+decision = "ask_user"
+priority = 10
+
+[[rule]]
+toolName = "insert_at_line"
+decision = "allow"
+priority = 15
+modes = ["autoEdit"]
+
+[[rule]]
+toolName = "delete_line_range"
+decision = "ask_user"
+priority = 10
+
+[[rule]]
+toolName = "delete_line_range"
+decision = "allow"
+priority = 15
+modes = ["autoEdit"]
+
+[[rule]]
+toolName = "apply_patch"
+decision = "ask_user"
+priority = 10
+
+[[rule]]
+toolName = "apply_patch"
+decision = "allow"
+priority = 15
+modes = ["autoEdit"]

package/dist/src/policies/yolo.toml

@@ -0,0 +1,10 @@
+# YOLO mode policy - allow everything
+# Priority band: 1.999 (Tier 1 - Default, just below user settings)
+# WARNING: This disables all safety checks. Use only in trusted environments.
+
+[[rule]]
+# No toolName specified = wildcard (matches all tools)
+decision = "allow"
+allow_redirection = true
+priority = 999
+modes = ["yolo"]

package/dist/src/policy-engine.d.ts

@@ -0,0 +1,72 @@
+import { PolicyDecision, type PolicyEngineConfig, type PolicyRule } from './types.js';
+/**
+ * PolicyEngine evaluates tool execution requests against configured rules.
+ * Rules are matched in priority order, with the highest priority rule winning.
+ */
+export declare class PolicyEngine {
+    private readonly rules;
+    private readonly defaultDecision;
+    private readonly nonInteractive;
+    constructor(config?: PolicyEngineConfig);
+    /**
+     * Evaluates a tool execution request and returns a policy decision.
+     *
+     * @param toolName - The name of the tool being executed
+     * @param args - The arguments passed to the tool
+     * @param serverName - Optional MCP server name (for spoofing prevention)
+     * @returns PolicyDecision (ALLOW, DENY, or ASK_USER)
+     */
+    evaluate(toolName: string, args: Record<string, unknown>, serverName?: string): PolicyDecision;
+    private evaluateMatchingRule;
+    /**
+     * Evaluates shell command sub-commands and redirections for an ALLOW rule.
+     * Returns a PolicyDecision if the shell-specific logic resolves, or undefined
+     * to fall through to normal decision handling.
+     */
+    private evaluateShellCommand;
+    private evaluateCompoundCommand;
+    private evaluateDefault;
+    private validateDefaultShellSubcommands;
+    /**
+     * Finds the highest priority rule matching the tool and args.
+     *
+     * @param toolName - The name of the tool
+     * @param args - The tool arguments
+     * @returns The matching rule, or undefined if none match
+     */
+    private findMatchingRule;
+    /**
+     * Validates that a tool name matches its claimed server name.
+     * Returns null if spoofing is detected, otherwise returns the tool name.
+     *
+     * @param toolName - The tool name (may include server prefix)
+     * @param serverName - The claimed server name
+     * @returns The validated tool name, or null if spoofing detected
+     */
+    private validateServerName;
+    /**
+     * Returns all configured rules (for debugging/inspection).
+     *
+     * @returns Array of policy rules
+     */
+    getRules(): readonly PolicyRule[];
+    /**
+     * Returns the default decision used when no rules match.
+     *
+     * @returns PolicyDecision
+     */
+    getDefaultDecision(): PolicyDecision;
+    /**
+     * Returns whether the engine is in non-interactive mode.
+     *
+     * @returns boolean
+     */
+    isNonInteractive(): boolean;
+    /**
+     * Adds a new rule to the policy engine at runtime.
+     * The rule is inserted into the sorted rules list based on its priority.
+     *
+     * @param rule - The policy rule to add
+     */
+    addRule(rule: PolicyRule): void;
+}

package/dist/src/policy-engine.js

@@ -0,0 +1,236 @@
+import { PolicyDecision, } from './types.js';
+import { stableStringify } from './stable-stringify.js';
+import { SHELL_TOOL_NAMES, splitCommands, hasRedirection, } from './utils/shell-utils.js';
+/**
+ * PolicyEngine evaluates tool execution requests against configured rules.
+ * Rules are matched in priority order, with the highest priority rule winning.
+ */
+export class PolicyEngine {
+    rules;
+    defaultDecision;
+    nonInteractive;
+    constructor(config) {
+        this.rules = config?.rules ?? [];
+        this.defaultDecision = config?.defaultDecision ?? PolicyDecision.ASK_USER;
+        this.nonInteractive = config?.nonInteractive ?? false;
+        // Sort rules by priority (highest first)
+        this.rules.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
+    }
+    /**
+     * Evaluates a tool execution request and returns a policy decision.
+     *
+     * @param toolName - The name of the tool being executed
+     * @param args - The arguments passed to the tool
+     * @param serverName - Optional MCP server name (for spoofing prevention)
+     * @returns PolicyDecision (ALLOW, DENY, or ASK_USER)
+     */
+    evaluate(toolName, args, serverName) {
+        // Validate serverName to prevent spoofing
+        if (serverName) {
+            const validatedToolName = this.validateServerName(toolName, serverName);
+            if (validatedToolName === null) {
+                return PolicyDecision.DENY;
+            }
+        }
+        // Find the highest priority matching rule
+        const matchingRule = this.findMatchingRule(toolName, args);
+        if (matchingRule) {
+            return this.evaluateMatchingRule(toolName, args, serverName, matchingRule);
+        }
+        return this.evaluateDefault(toolName, args, serverName);
+    }
+    evaluateMatchingRule(toolName, args, serverName, matchingRule) {
+        const decision = matchingRule.decision;
+        // Special handling for shell commands: validate sub-commands if ALLOW rule
+        if (toolName &&
+            SHELL_TOOL_NAMES.includes(toolName) &&
+            decision === PolicyDecision.ALLOW) {
+            const command = args.command;
+            if (command) {
+                const shellResult = this.evaluateShellCommand(toolName, args, serverName, command, matchingRule);
+                if (shellResult !== undefined) {
+                    return shellResult;
+                }
+            }
+        }
+        // In non-interactive mode, ASK_USER becomes DENY
+        if (this.nonInteractive && decision === PolicyDecision.ASK_USER) {
+            return PolicyDecision.DENY;
+        }
+        return decision;
+    }
+    /**
+     * Evaluates shell command sub-commands and redirections for an ALLOW rule.
+     * Returns a PolicyDecision if the shell-specific logic resolves, or undefined
+     * to fall through to normal decision handling.
+     */
+    evaluateShellCommand(toolName, args, serverName, command, matchingRule) {
+        const subCommands = splitCommands(command);
+        // Parse failure: empty array for non-empty command → fail-safe to ASK_USER
+        if (subCommands.length === 0 && command.trim().length > 0) {
+            return this.nonInteractive
+                ? PolicyDecision.DENY
+                : PolicyDecision.ASK_USER;
+        }
+        // Compound command: recursively validate each sub-command
+        if (subCommands.length > 1) {
+            return this.evaluateCompoundCommand(toolName, args, serverName, command, subCommands);
+        }
+        // Check for redirections in allowed commands
+        if (matchingRule.allowRedirection !== true && hasRedirection(command)) {
+            return this.nonInteractive
+                ? PolicyDecision.DENY
+                : PolicyDecision.ASK_USER;
+        }
+        // Single command: rule match is valid, fall through to normal return
+        return undefined;
+    }
+    evaluateCompoundCommand(toolName, args, serverName, command, subCommands) {
+        let aggregateDecision = PolicyDecision.ALLOW;
+        // eslint-disable-next-line sonarjs/too-many-break-or-continue-in-loop -- Existing structure is intentionally preserved; refactoring this boundary is outside the lint slice.
+        for (const rawSubCmd of subCommands) {
+            const subCmd = rawSubCmd.trim();
+            // Prevent infinite recursion
+            if (subCmd === command)
+                continue;
+            // Preserve dir_path from original args
+            const subResult = this.evaluate(toolName, { ...args, command: subCmd }, serverName);
+            if (subResult === PolicyDecision.DENY) {
+                aggregateDecision = PolicyDecision.DENY;
+                break; // Fail fast: DENY overrides everything
+            }
+            else if (subResult === PolicyDecision.ASK_USER) {
+                aggregateDecision = PolicyDecision.ASK_USER;
+                // Continue checking for DENY (don't short-circuit)
+            }
+        }
+        return this.nonInteractive && aggregateDecision === PolicyDecision.ASK_USER
+            ? PolicyDecision.DENY
+            : aggregateDecision;
+    }
+    evaluateDefault(toolName, args, serverName) {
+        let defaultResult = this.defaultDecision;
+        // Security: even with no matching rule, still validate shell subcommands
+        // to catch compound commands like "git commit && git push" where a subcommand
+        // may match a DENY rule
+        if (toolName &&
+            SHELL_TOOL_NAMES.includes(toolName) &&
+            defaultResult !== PolicyDecision.DENY) {
+            defaultResult = this.validateDefaultShellSubcommands(toolName, args, serverName, defaultResult);
+        }
+        if (this.nonInteractive && defaultResult === PolicyDecision.ASK_USER) {
+            return PolicyDecision.DENY;
+        }
+        return defaultResult;
+    }
+    validateDefaultShellSubcommands(toolName, args, serverName, currentResult) {
+        const command = args.command;
+        if (!command) {
+            return currentResult;
+        }
+        const subCommands = splitCommands(command);
+        if (subCommands.length <= 1) {
+            return currentResult;
+        }
+        let result = currentResult;
+        for (const rawSubCmd of subCommands) {
+            const subCmd = rawSubCmd.trim();
+            if (subCmd === command)
+                continue;
+            const subResult = this.evaluate(toolName, { ...args, command: subCmd }, serverName);
+            if (subResult === PolicyDecision.DENY) {
+                return PolicyDecision.DENY;
+            }
+            else if (subResult === PolicyDecision.ASK_USER) {
+                result = PolicyDecision.ASK_USER;
+            }
+        }
+        return result;
+    }
+    /**
+     * Finds the highest priority rule matching the tool and args.
+     *
+     * @param toolName - The name of the tool
+     * @param args - The tool arguments
+     * @returns The matching rule, or undefined if none match
+     */
+    findMatchingRule(toolName, args) {
+        const argsString = stableStringify(args);
+        // eslint-disable-next-line sonarjs/too-many-break-or-continue-in-loop -- Existing structure is intentionally preserved; refactoring this boundary is outside the lint slice.
+        for (const rule of this.rules) {
+            // Check tool name match
+            const toolMatches = !rule.toolName || rule.toolName === toolName;
+            if (!toolMatches) {
+                continue;
+            }
+            // Check args pattern match
+            const argsMatch = !rule.argsPattern || rule.argsPattern.test(argsString);
+            if (!argsMatch) {
+                continue;
+            }
+            // Both match - return this rule
+            return rule;
+        }
+        return undefined;
+    }
+    /**
+     * Validates that a tool name matches its claimed server name.
+     * Returns null if spoofing is detected, otherwise returns the tool name.
+     *
+     * @param toolName - The tool name (may include server prefix)
+     * @param serverName - The claimed server name
+     * @returns The validated tool name, or null if spoofing detected
+     */
+    validateServerName(toolName, serverName) {
+        // For MCP tools, expect format: "serverName__toolName"
+        const expectedPrefix = `${serverName}__`;
+        if (toolName.startsWith(expectedPrefix)) {
+            return toolName;
+        }
+        // If tool name doesn't have the expected prefix, check if it's a non-MCP tool
+        // Non-MCP tools don't have a server prefix, so if a serverName is provided
+        // but the tool doesn't have the prefix, it's likely spoofing
+        if (!toolName.includes('__')) {
+            // This is a built-in tool, serverName should not be set
+            return null;
+        }
+        // Tool has a different server prefix - spoofing attempt
+        return null;
+    }
+    /**
+     * Returns all configured rules (for debugging/inspection).
+     *
+     * @returns Array of policy rules
+     */
+    getRules() {
+        return [...this.rules];
+    }
+    /**
+     * Returns the default decision used when no rules match.
+     *
+     * @returns PolicyDecision
+     */
+    getDefaultDecision() {
+        return this.defaultDecision;
+    }
+    /**
+     * Returns whether the engine is in non-interactive mode.
+     *
+     * @returns boolean
+     */
+    isNonInteractive() {
+        return this.nonInteractive;
+    }
+    /**
+     * Adds a new rule to the policy engine at runtime.
+     * The rule is inserted into the sorted rules list based on its priority.
+     *
+     * @param rule - The policy rule to add
+     */
+    addRule(rule) {
+        this.rules.push(rule);
+        // Re-sort rules by priority (highest first)
+        this.rules.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
+    }
+}
+//# sourceMappingURL=policy-engine.js.map

package/dist/src/policy-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,GAGf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,cAAc,GACf,MAAM,wBAAwB,CAAC;AAEhC;;;GAGG;AACH,MAAM,OAAO,YAAY;IACN,KAAK,CAAe;IACpB,eAAe,CAAiB;IAChC,cAAc,CAAU;IAEzC,YAAY,MAA2B;QACrC,IAAI,CAAC,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,eAAe,GAAG,MAAM,EAAE,eAAe,IAAI,cAAc,CAAC,QAAQ,CAAC;QAC1E,IAAI,CAAC,cAAc,GAAG,MAAM,EAAE,cAAc,IAAI,KAAK,CAAC;QAEtD,yCAAyC;QACzC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;;OAOG;IACH,QAAQ,CACN,QAAgB,EAChB,IAA6B,EAC7B,UAAmB;QAEnB,0CAA0C;QAC1C,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,iBAAiB,GAAG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACxE,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;gBAC/B,OAAO,cAAc,CAAC,IAAI,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE3D,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,oBAAoB,CAC9B,QAAQ,EACR,IAAI,EACJ,UAAU,EACV,YAAY,CACb,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAC1D,CAAC;IAEO,oBAAoB,CAC1B,QAAgB,EAChB,IAA6B,EAC7B,UAA8B,EAC9B,YAAwB;QAExB,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC;QAEvC,2EAA2E;QAC3E,IACE,QAAQ;YACR,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACnC,QAAQ,KAAK,cAAc,CAAC,KAAK,EACjC,CAAC;YACD,MAAM,OAAO,GAAI,IAA6B,CAAC,OAAO,CAAC;YACvD,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAC3C,QAAQ,EACR,IAAI,EACJ,UAAU,EACV,OAAO,EACP,YAAY,CACb,CAAC;gBACF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC9B,OAAO,WAAW,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;QAED,iDAAiD;QACjD,IAAI,IAAI,CAAC,cAAc,IAAI,QAAQ,KAAK,cAAc,CAAC,QAAQ,EAAE,CAAC;YAChE,OAAO,cAAc,CAAC,IAAI,CAAC;QAC7B,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACK,oBAAoB,CAC1B,QAAgB,EAChB,IAA6B,EAC7B,UAA8B,EAC9B,OAAe,EACf,YAAwB;QAExB,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAE3C,2EAA2E;QAC3E,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC,cAAc;gBACxB,CAAC,CAAC,cAAc,CAAC,IAAI;gBACrB,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC;QAC9B,CAAC;QAED,0DAA0D;QAC1D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,uBAAuB,CACjC,QAAQ,EACR,IAAI,EACJ,UAAU,EACV,OAAO,EACP,WAAW,CACZ,CAAC;QACJ,CAAC;QAED,6CAA6C;QAC7C,IAAI,YAAY,CAAC,gBAAgB,KAAK,IAAI,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC,cAAc;gBACxB,CAAC,CAAC,cAAc,CAAC,IAAI;gBACrB,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC;QAC9B,CAAC;QAED,qEAAqE;QACrE,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,uBAAuB,CAC7B,QAAgB,EAChB,IAA6B,EAC7B,UAA8B,EAC9B,OAAe,EACf,WAAqB;QAErB,IAAI,iBAAiB,GAAG,cAAc,CAAC,KAAK,CAAC;QAE7C,6KAA6K;QAC7K,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;YAChC,6BAA6B;YAC7B,IAAI,MAAM,KAAK,OAAO;gBAAE,SAAS;YAEjC,uCAAuC;YACvC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAC7B,QAAQ,EACR,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAC5B,UAAU,CACX,CAAC;YAEF,IAAI,SAAS,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;gBACtC,iBAAiB,GAAG,cAAc,CAAC,IAAI,CAAC;gBACxC,MAAM,CAAC,uCAAuC;YAChD,CAAC;iBAAM,IAAI,SAAS,KAAK,cAAc,CAAC,QAAQ,EAAE,CAAC;gBACjD,iBAAiB,GAAG,cAAc,CAAC,QAAQ,CAAC;gBAC5C,mDAAmD;YACrD,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,IAAI,iBAAiB,KAAK,cAAc,CAAC,QAAQ;YACzE,CAAC,CAAC,cAAc,CAAC,IAAI;YACrB,CAAC,CAAC,iBAAiB,CAAC;IACxB,CAAC;IAEO,eAAe,CACrB,QAAgB,EAChB,IAA6B,EAC7B,UAA8B;QAE9B,IAAI,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC;QAEzC,yEAAyE;QACzE,8EAA8E;QAC9E,wBAAwB;QACxB,IACE,QAAQ;YACR,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACnC,aAAa,KAAK,cAAc,CAAC,IAAI,EACrC,CAAC;YACD,aAAa,GAAG,IAAI,CAAC,+BAA+B,CAClD,QAAQ,EACR,IAAI,EACJ,UAAU,EACV,aAAa,CACd,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,cAAc,IAAI,aAAa,KAAK,cAAc,CAAC,QAAQ,EAAE,CAAC;YACrE,OAAO,cAAc,CAAC,IAAI,CAAC;QAC7B,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAEO,+BAA+B,CACrC,QAAgB,EAChB,IAA6B,EAC7B,UAA8B,EAC9B,aAA6B;QAE7B,MAAM,OAAO,GAAI,IAA6B,CAAC,OAAO,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,aAAa,CAAC;QACvB,CAAC;QAED,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO,aAAa,CAAC;QACvB,CAAC;QAED,IAAI,MAAM,GAAG,aAAa,CAAC;QAC3B,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,MAAM,KAAK,OAAO;gBAAE,SAAS;YAEjC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAC7B,QAAQ,EACR,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAC5B,UAAU,CACX,CAAC;YAEF,IAAI,SAAS,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;gBACtC,OAAO,cAAc,CAAC,IAAI,CAAC;YAC7B,CAAC;iBAAM,IAAI,SAAS,KAAK,cAAc,CAAC,QAAQ,EAAE,CAAC;gBACjD,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC;YACnC,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACK,gBAAgB,CACtB,QAAgB,EAChB,IAA6B;QAE7B,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAEzC,6KAA6K;QAC7K,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,wBAAwB;YACxB,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;YACjE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,SAAS;YACX,CAAC;YAED,2BAA2B;YAC3B,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YAED,gCAAgC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;OAOG;IACK,kBAAkB,CACxB,QAAgB,EAChB,UAAkB;QAElB,uDAAuD;QACvD,MAAM,cAAc,GAAG,GAAG,UAAU,IAAI,CAAC;QAEzC,IAAI,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACxC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,8EAA8E;QAC9E,2EAA2E;QAC3E,6DAA6D;QAC7D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,wDAAwD;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wDAAwD;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,IAAgB;QACtB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,4CAA4C;QAC5C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;CACF"}

package/dist/src/stable-stringify.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Provides deterministic JSON stringification for pattern matching in policy rules.
+ * Ensures consistent ordering of object keys and handling of special values.
+ */
+type JSONValue = string | number | boolean | null | JSONValue[] | {
+    [key: string]: JSONValue;
+};
+/**
+ * Deterministically stringifies a value for use in pattern matching.
+ * - Object keys are sorted alphabetically
+ * - Arrays maintain their order
+ * - undefined values are omitted
+ * - Functions and symbols are converted to null
+ * - Circular references throw an error
+ *
+ * @param value - The value to stringify
+ * @param space - Optional spacing for readability (default: none)
+ * @returns Deterministic JSON string
+ */
+export declare function stableStringify(value: unknown, space?: string | number): string;
+/**
+ * Parses a stable-stringified JSON string back into a value.
+ * This is just a wrapper around JSON.parse for consistency.
+ *
+ * @param text - The JSON string to parse
+ * @returns Parsed value
+ */
+export declare function stableParse(text: string): JSONValue;
+export {};