@weave_protocol/ward 0.1.0

package/dist/parser/markdown.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Split a markdown body into a map of `{ "section name": "section body" }`
+ * keyed by H2 headings (`## Section Name`).
+ *
+ * The section name is normalized (lowercased, alphanumeric only) so that
+ * `## Multi-Agent` and `## multi agent` produce the same key.
+ */
+export interface MarkdownSection {
+    /** Original heading text. */
+    title: string;
+    /** Normalized key. */
+    key: string;
+    /** Body of the section (content under the heading, up to the next H2). */
+    body: string;
+}
+export declare function splitSections(body: string): MarkdownSection[];
+export declare function normalizeKey(title: string): string;
+/**
+ * Extract a YAML-like block from a section body. Many WARD sections use the
+ * pattern of bare `key: value` and `-` list items inside markdown, optionally
+ * wrapped in a ```yaml fenced code block.
+ */
+export declare function extractStructuredBlock(sectionBody: string): string;
+//# sourceMappingURL=markdown.d.ts.map

package/dist/parser/markdown.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.d.ts","sourceRoot":"","sources":["../../src/parser/markdown.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,eAAe;IAC9B,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CA6B7D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAOlE"}

package/dist/parser/markdown.js

@@ -0,0 +1,52 @@
+/**
+ * Split a markdown body into a map of `{ "section name": "section body" }`
+ * keyed by H2 headings (`## Section Name`).
+ *
+ * The section name is normalized (lowercased, alphanumeric only) so that
+ * `## Multi-Agent` and `## multi agent` produce the same key.
+ */
+export function splitSections(body) {
+    const lines = body.split("\n");
+    const sections = [];
+    let current = null;
+    let currentLines = [];
+    for (const line of lines) {
+        const h2Match = /^##\s+(.+?)\s*$/.exec(line);
+        if (h2Match) {
+            // Flush previous section
+            if (current) {
+                current.body = currentLines.join("\n").trim();
+                sections.push(current);
+            }
+            const title = h2Match[1].trim();
+            current = { title, key: normalizeKey(title), body: "" };
+            currentLines = [];
+        }
+        else if (current) {
+            currentLines.push(line);
+        }
+        // Lines before the first H2 are ignored (typically just the H1 title)
+    }
+    if (current) {
+        current.body = currentLines.join("\n").trim();
+        sections.push(current);
+    }
+    return sections;
+}
+export function normalizeKey(title) {
+    return title.toLowerCase().replace(/[^a-z0-9]+/g, "");
+}
+/**
+ * Extract a YAML-like block from a section body. Many WARD sections use the
+ * pattern of bare `key: value` and `-` list items inside markdown, optionally
+ * wrapped in a ```yaml fenced code block.
+ */
+export function extractStructuredBlock(sectionBody) {
+    // Prefer explicit fenced yaml block if present
+    const fenced = /```ya?ml\s*\n([\s\S]*?)\n```/i.exec(sectionBody);
+    if (fenced)
+        return fenced[1];
+    // Otherwise just use the section body as-is. Strip code fences.
+    return sectionBody.replace(/```[^\n]*\n?/g, "").trim();
+}
+//# sourceMappingURL=markdown.js.map

package/dist/parser/markdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"markdown.js","sourceRoot":"","sources":["../../src/parser/markdown.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAWH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,IAAI,OAAO,GAA2B,IAAI,CAAC;IAC3C,IAAI,YAAY,GAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACZ,yBAAyB;YACzB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC9C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAChC,OAAO,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YACxD,YAAY,GAAG,EAAE,CAAC;QACpB,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACnB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,sEAAsE;IACxE,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,+CAA+C;IAC/C,MAAM,MAAM,GAAG,+BAA+B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjE,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAE7B,gEAAgE;IAChE,OAAO,WAAW,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACzD,CAAC"}

package/dist/parser/yaml.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Minimal YAML frontmatter extractor.
+ *
+ * We only support the subset of YAML actually used in WARD.md frontmatter:
+ *   - scalar key: value pairs
+ *   - quoted and unquoted strings
+ *   - simple arrays [a, b, c]
+ *   - block arrays with `-` items
+ *
+ * No anchors, no merge keys, no multi-doc. If users need richer YAML they
+ * can put it in markdown sections instead.
+ */
+/** Extract frontmatter block from raw markdown. Returns body if no frontmatter. */
+export declare function splitFrontmatter(source: string): {
+    frontmatter: string | null;
+    body: string;
+};
+/**
+ * Parse a simple YAML block into a JS object.
+ * Handles top-level keys and one level of nested block lists.
+ */
+export declare function parseYAML(yaml: string): Record<string, unknown>;
+//# sourceMappingURL=yaml.d.ts.map

package/dist/parser/yaml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"yaml.d.ts","sourceRoot":"","sources":["../../src/parser/yaml.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG;IAChD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;CACd,CAiBA;AAyCD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA2D/D"}

package/dist/parser/yaml.js

@@ -0,0 +1,134 @@
+/**
+ * Minimal YAML frontmatter extractor.
+ *
+ * We only support the subset of YAML actually used in WARD.md frontmatter:
+ *   - scalar key: value pairs
+ *   - quoted and unquoted strings
+ *   - simple arrays [a, b, c]
+ *   - block arrays with `-` items
+ *
+ * No anchors, no merge keys, no multi-doc. If users need richer YAML they
+ * can put it in markdown sections instead.
+ */
+/** Extract frontmatter block from raw markdown. Returns body if no frontmatter. */
+export function splitFrontmatter(source) {
+    if (!source.startsWith("---"))
+        return { frontmatter: null, body: source };
+    const lines = source.split("\n");
+    let endIdx = -1;
+    for (let i = 1; i < lines.length; i++) {
+        if (lines[i].trim() === "---" || lines[i].trim() === "...") {
+            endIdx = i;
+            break;
+        }
+    }
+    if (endIdx === -1)
+        return { frontmatter: null, body: source };
+    return {
+        frontmatter: lines.slice(1, endIdx).join("\n"),
+        body: lines.slice(endIdx + 1).join("\n"),
+    };
+}
+function unquote(s) {
+    s = s.trim();
+    if ((s.startsWith('"') && s.endsWith('"')) || (s.startsWith("'") && s.endsWith("'"))) {
+        return s.slice(1, -1);
+    }
+    return s;
+}
+function coerce(raw) {
+    const s = raw.trim();
+    if (s === "" || s === "~" || s === "null")
+        return null;
+    if (s === "true")
+        return true;
+    if (s === "false")
+        return false;
+    if (/^-?\d+$/.test(s))
+        return parseInt(s, 10);
+    if (/^-?\d+\.\d+$/.test(s))
+        return parseFloat(s);
+    // Inline array: [a, b, c]
+    if (s.startsWith("[") && s.endsWith("]")) {
+        const inner = s.slice(1, -1).trim();
+        if (inner === "")
+            return [];
+        return inner.split(",").map((part) => coerce(unquote(part)));
+    }
+    // Inline object: {key: value, ...}  (rare in our spec but supported)
+    if (s.startsWith("{") && s.endsWith("}")) {
+        const inner = s.slice(1, -1).trim();
+        const obj = {};
+        if (inner === "")
+            return obj;
+        for (const pair of inner.split(",")) {
+            const colon = pair.indexOf(":");
+            if (colon === -1)
+                continue;
+            obj[unquote(pair.slice(0, colon).trim())] = coerce(unquote(pair.slice(colon + 1).trim()));
+        }
+        return obj;
+    }
+    return unquote(s);
+}
+/**
+ * Parse a simple YAML block into a JS object.
+ * Handles top-level keys and one level of nested block lists.
+ */
+export function parseYAML(yaml) {
+    const result = {};
+    const lines = yaml.split("\n");
+    let i = 0;
+    while (i < lines.length) {
+        const line = lines[i];
+        const trimmed = line.trim();
+        if (trimmed === "" || trimmed.startsWith("#")) {
+            i++;
+            continue;
+        }
+        const indent = line.length - line.trimStart().length;
+        const colon = line.indexOf(":");
+        if (colon === -1) {
+            i++;
+            continue;
+        }
+        const key = line.slice(indent, colon).trim();
+        const rest = line.slice(colon + 1).trim();
+        // Top-level only for frontmatter (we don't try to handle deep nesting here)
+        if (indent !== 0) {
+            i++;
+            continue;
+        }
+        if (rest === "") {
+            // Could be a block list or block mapping starting on next line
+            const items = [];
+            let j = i + 1;
+            while (j < lines.length) {
+                const nextLine = lines[j];
+                const nextTrim = nextLine.trim();
+                if (nextTrim === "" || nextTrim.startsWith("#")) {
+                    j++;
+                    continue;
+                }
+                const nextIndent = nextLine.length - nextLine.trimStart().length;
+                if (nextIndent === 0)
+                    break; // back to top level
+                if (nextTrim.startsWith("- ")) {
+                    items.push(coerce(nextTrim.slice(2)));
+                    j++;
+                    continue;
+                }
+                // Not a list item — abort, treat key as empty
+                break;
+            }
+            result[key] = items;
+            i = j;
+        }
+        else {
+            result[key] = coerce(rest);
+            i++;
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=yaml.js.map

package/dist/parser/yaml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"yaml.js","sourceRoot":"","sources":["../../src/parser/yaml.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAI7C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAE1E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;YAC3D,MAAM,GAAG,CAAC,CAAC;YACX,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAE9D,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9C,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACb,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACrF,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IAEjD,0BAA0B;IAC1B,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,qEAAqE;IACrE,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,GAAG,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,SAAS;YAC3B,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE/B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE1C,4EAA4E;QAC5E,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;YACjB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,+DAA+D;YAC/D,MAAM,KAAK,GAAc,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC1B,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACjC,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChD,CAAC,EAAE,CAAC;oBACJ,SAAS;gBACX,CAAC;gBACD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;gBACjE,IAAI,UAAU,KAAK,CAAC;oBAAE,MAAM,CAAC,oBAAoB;gBACjD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACtC,CAAC,EAAE,CAAC;oBACJ,SAAS;gBACX,CAAC;gBACD,8CAA8C;gBAC9C,MAAM;YACR,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACpB,CAAC,GAAG,CAAC,CAAC;QACR,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,184 @@
+/**
+ * @weave_protocol/ward - Type definitions
+ *
+ * A WARD.md file declares the security policy for an AI agent. It pairs
+ * with AGENTS.md (the agent's purpose) and SKILL.md (the agent's
+ * capabilities) to form the complete infrastructure-as-code definition
+ * for an agentic system.
+ *
+ * Structure:
+ *   - YAML frontmatter for machine-readable metadata
+ *   - Markdown sections for each policy domain
+ *   - Each section parses to a typed sub-policy
+ */
+export type WardVersion = "1.0";
+/**
+ * Top-level parsed WARD policy.
+ */
+export interface WardPolicy {
+    /** Spec version (always "1.0" for now). */
+    version: WardVersion;
+    /** Optional reference to an AGENTS.md file (relative path or ID). */
+    agent?: string;
+    /** Optional human-readable name for the policy. */
+    name?: string;
+    /** Optional description. */
+    description?: string;
+    /** Defines what the agent is permitted to do on the filesystem. */
+    filesystem?: FilesystemPolicy;
+    /** Defines what network endpoints the agent can reach. */
+    network?: NetworkPolicy;
+    /** Defines which tool/capability invocations are allowed. */
+    capabilities?: CapabilitiesPolicy;
+    /** Controls what kinds of data can leave the agent's boundary. */
+    dataBoundaries?: DataBoundariesPolicy;
+    /** Resource limits — iterations, runtime, spend, tokens. */
+    behavioral?: BehavioralPolicy;
+    /** Multi-agent trust and isolation rules. */
+    multiAgent?: MultiAgentPolicy;
+    /** Compliance frameworks that auto-apply additional rules. */
+    compliance?: CompliancePolicy;
+    /** Required verification/attestation parameters. */
+    verification?: VerificationPolicy;
+    /** Threat model declaration. */
+    threatModel?: ThreatModelPolicy;
+    /** What to do when policy is violated. */
+    incidentResponse?: IncidentResponsePolicy;
+    /** Any unrecognized sections preserved as raw text. */
+    raw?: Record<string, string>;
+}
+export interface FilesystemPolicy {
+    allow?: FilesystemRule[];
+    deny?: FilesystemRule[];
+    /** Default action when no rule matches. */
+    default?: "allow" | "deny";
+}
+export interface FilesystemRule {
+    /** Operation: read, write, execute, delete, list. */
+    op: FilesystemOp;
+    /** Glob pattern (e.g., "/workspace/**", "~/Documents/*.txt"). */
+    path: string;
+}
+export type FilesystemOp = "read" | "write" | "execute" | "delete" | "list";
+export interface NetworkPolicy {
+    allow?: NetworkRule[];
+    deny?: NetworkRule[];
+    default?: "allow" | "deny";
+}
+export interface NetworkRule {
+    /** URL pattern with glob support (e.g., "https://api.company.com/**"). */
+    url: string;
+    /** Optional method restriction. */
+    methods?: HttpMethod[];
+}
+export type HttpMethod = "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
+export interface CapabilitiesPolicy {
+    /** Tools that may be called. */
+    allow?: string[];
+    /** Tools that may NOT be called (overrides allow if conflicting). */
+    deny?: string[];
+    /** Tools that require human-in-the-loop approval before execution. */
+    requireApproval?: string[];
+    /** Default action when a tool is not listed. */
+    default?: "allow" | "deny";
+}
+export interface DataBoundariesPolicy {
+    /** Data classifications allowed to leave the agent. */
+    egressAllow?: DataClassification[];
+    /** Data classifications that must never leave the agent. */
+    egressDeny?: DataClassification[];
+    /** Redaction rules to apply to any outbound data. */
+    redact?: RedactionRule[];
+}
+export type DataClassification = "public" | "internal" | "confidential" | "secret" | "pii" | "phi" | "pci" | "credentials";
+export interface RedactionRule {
+    /** Type of data to redact. */
+    type: DataClassification | string;
+    /** Replacement string (e.g., "[REDACTED]"). */
+    replacement?: string;
+}
+export interface BehavioralPolicy {
+    /** Max number of agent loop iterations. */
+    maxIterations?: number;
+    /** Max total runtime in seconds. */
+    maxRuntimeSeconds?: number;
+    /** Max cost in USD (uses provider's reported cost). */
+    maxCostUSD?: number;
+    /** Max total tokens consumed. */
+    maxTokens?: number;
+    /** Max number of tool invocations. */
+    maxToolCalls?: number;
+    /** Max number of distinct external services contacted. */
+    maxExternalServices?: number;
+}
+export interface MultiAgentPolicy {
+    /** Trust chain — which agents can hand work to this one, and vice versa. */
+    trustChain?: TrustChain;
+    /** Isolation level between this agent and others in the harness. */
+    isolation?: IsolationLevel;
+    /** Semantic drift threshold (0-1). If intent drifts more than this between
+     *  agent handoffs, halt and require attestation. */
+    maxSemanticDrift?: number;
+}
+export interface TrustChain {
+    /** Agents that may invoke this agent. */
+    upstream?: string[];
+    /** Agents this agent may invoke. */
+    downstream?: string[];
+}
+export type IsolationLevel = "none" | "soft" | "strict" | "sandboxed";
+export interface CompliancePolicy {
+    /** Frameworks to apply (auto-injects additional rules). */
+    frameworks?: ComplianceFramework[];
+    /** Required to use a specific compliance backend. */
+    backend?: "domere" | "custom";
+}
+export type ComplianceFramework = "soc2" | "hipaa" | "pci-dss" | "iso27001" | "gdpr" | "ccpa" | "fedramp" | "nist-csf";
+export interface VerificationPolicy {
+    /** Whether attestation is required. */
+    required?: boolean;
+    /** Backend to use. */
+    backend?: "domere" | "custom";
+    /** Blockchain to anchor to. */
+    blockchain?: "solana" | "ethereum" | "polygon" | "none";
+    /** How often to attest. */
+    frequency?: AttestationFrequency;
+    /** Public key or DID for the attesting party. */
+    attestor?: string;
+}
+export type AttestationFrequency = "every_action" | "every_handoff" | "every_iteration" | "session_end" | "manual";
+export interface ThreatModelPolicy {
+    /** Threats this policy is designed to defend against. */
+    inScope?: ThreatCategory[];
+    /** Threats explicitly NOT covered (informational). */
+    outOfScope?: ThreatCategory[];
+}
+export type ThreatCategory = "prompt_injection" | "data_exfil" | "credential_theft" | "supply_chain" | "model_extraction" | "jailbreak" | "tool_misuse" | "semantic_drift" | "emergent_behavior" | "side_channel" | "physical_attack" | "denial_of_service" | string;
+export interface IncidentResponsePolicy {
+    /** Actions to take when a violation is detected. */
+    onViolation?: ViolationAction[];
+    /** Severity threshold above which to take action. */
+    severityThreshold?: ViolationSeverity;
+}
+export interface ViolationAction {
+    type: ViolationActionType;
+    /** Only apply this action for violations at or above this severity. */
+    minSeverity?: ViolationSeverity;
+    /** Optional target (email, webhook URL, etc.). */
+    target?: string;
+}
+export type ViolationActionType = "log" | "alert" | "terminate" | "rollback" | "attest_violation" | "notify_human" | "block_further";
+export type ViolationSeverity = "low" | "medium" | "high" | "critical";
+export interface ValidationResult {
+    valid: boolean;
+    errors: ValidationIssue[];
+    warnings: ValidationIssue[];
+    policy?: WardPolicy;
+}
+export interface ValidationIssue {
+    level: "error" | "warning";
+    section?: string;
+    message: string;
+    suggestion?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,MAAM,WAAW,GAAG,KAAK,CAAC;AAEhC;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,2CAA2C;IAC3C,OAAO,EAAE,WAAW,CAAC;IACrB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4BAA4B;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,0DAA0D;IAC1D,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,6DAA6D;IAC7D,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,kEAAkE;IAClE,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,4DAA4D;IAC5D,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,6CAA6C;IAC7C,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,8DAA8D;IAC9D,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,oDAAoD;IACpD,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,gCAAgC;IAChC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,uDAAuD;IACvD,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAMD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC;IACzB,IAAI,CAAC,EAAE,cAAc,EAAE,CAAC;IACxB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,qDAAqD;IACrD,EAAE,EAAE,YAAY,CAAC;IACjB,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;AAM5E,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IACtB,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,0EAA0E;IAC1E,GAAG,EAAE,MAAM,CAAC;IACZ,mCAAmC;IACnC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;CACxB;AAED,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;AAM1F,MAAM,WAAW,kBAAkB;IACjC,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,gDAAgD;IAChD,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC5B;AAMD,MAAM,WAAW,oBAAoB;IACnC,uDAAuD;IACvD,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACnC,4DAA4D;IAC5D,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAClC,qDAAqD;IACrD,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,kBAAkB,GAC1B,QAAQ,GACR,UAAU,GACV,cAAc,GACd,QAAQ,GACR,KAAK,GACL,KAAK,GACL,KAAK,GACL,aAAa,CAAC;AAElB,MAAM,WAAW,aAAa;IAC5B,8BAA8B;IAC9B,IAAI,EAAE,kBAAkB,GAAG,MAAM,CAAC;IAClC,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oCAAoC;IACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sCAAsC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAMD,MAAM,WAAW,gBAAgB;IAC/B,4EAA4E;IAC5E,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,oEAAoE;IACpE,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B;wDACoD;IACpD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,yCAAyC;IACzC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,oCAAoC;IACpC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,CAAC;AAMtE,MAAM,WAAW,gBAAgB;IAC/B,2DAA2D;IAC3D,UAAU,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACnC,qDAAqD;IACrD,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAC/B;AAED,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN,OAAO,GACP,SAAS,GACT,UAAU,GACV,MAAM,GACN,MAAM,GACN,SAAS,GACT,UAAU,CAAC;AAMf,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,sBAAsB;IACtB,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC9B,+BAA+B;IAC/B,UAAU,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;IACxD,2BAA2B;IAC3B,SAAS,CAAC,EAAE,oBAAoB,CAAC;IACjC,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,oBAAoB,GAC5B,cAAc,GACd,eAAe,GACf,iBAAiB,GACjB,aAAa,GACb,QAAQ,CAAC;AAMb,MAAM,WAAW,iBAAiB;IAChC,yDAAyD;IACzD,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAC3B,sDAAsD;IACtD,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED,MAAM,MAAM,cAAc,GACtB,kBAAkB,GAClB,YAAY,GACZ,kBAAkB,GAClB,cAAc,GACd,kBAAkB,GAClB,WAAW,GACX,aAAa,GACb,gBAAgB,GAChB,mBAAmB,GACnB,cAAc,GACd,iBAAiB,GACjB,mBAAmB,GACnB,MAAM,CAAC;AAMX,MAAM,WAAW,sBAAsB;IACrC,oDAAoD;IACpD,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;IAChC,qDAAqD;IACrD,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,uEAAuE;IACvE,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,mBAAmB,GAC3B,KAAK,GACL,OAAO,GACP,WAAW,GACX,UAAU,GACV,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAMvE,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}

package/dist/types.js

@@ -0,0 +1,15 @@
+/**
+ * @weave_protocol/ward - Type definitions
+ *
+ * A WARD.md file declares the security policy for an AI agent. It pairs
+ * with AGENTS.md (the agent's purpose) and SKILL.md (the agent's
+ * capabilities) to form the complete infrastructure-as-code definition
+ * for an agentic system.
+ *
+ * Structure:
+ *   - YAML frontmatter for machine-readable metadata
+ *   - Markdown sections for each policy domain
+ *   - Each section parses to a typed sub-policy
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/examples/basic.WARD.md

@@ -0,0 +1,74 @@
+---
+ward: "1.0"
+agent: my-data-analyzer
+name: Data Analyzer Security Policy
+description: Read-only analytics agent that produces summary reports. No external network, no credential access.
+---
+
+# WARD.md
+
+Security policy for a basic read-only data analyzer.
+
+## Filesystem
+
+allow:
+  - read: /workspace/input/**
+  - write: /workspace/output/**
+  - list: /workspace/**
+deny:
+  - read: /workspace/secrets/**
+  - read: ~/.ssh/**
+  - read: ~/.aws/**
+default: deny
+
+## Network
+
+default: deny
+
+## Capabilities
+
+allow:
+  - file_read
+  - file_write
+  - code_exec
+deny:
+  - shell_exec
+  - ssh
+  - http_request
+default: deny
+
+## Behavioral Limits
+
+maxIterations: 50
+maxRuntimeSeconds: 300
+maxCostUSD: 5.00
+maxTokens: 100000
+
+## Data Boundaries
+
+egressDeny:
+  - credentials
+  - secret
+  - pii
+
+## Verification
+
+required: true
+backend: domere
+blockchain: solana
+frequency: session_end
+
+## Threat Model
+
+inScope:
+  - prompt_injection
+  - data_exfil
+  - tool_misuse
+
+## Incident Response
+
+onViolation:
+  - log
+  - alert
+  - terminate
+severityThreshold: medium

package/examples/compliance.WARD.md

@@ -0,0 +1,108 @@
+---
+ward: "1.0"
+agent: healthcare-records-assistant
+name: HIPAA-Compliant Records Agent
+description: Agent that handles patient records. HIPAA + SOC2. All PII/PHI access attested.
+---
+
+# WARD.md
+
+Compliance-first policy for an agent operating in a regulated healthcare
+context. PHI access is permitted within strict boundaries, but every read,
+write, and transfer is attested to the blockchain.
+
+## Filesystem
+
+allow:
+  - read: /records/active/**
+  - read: /workspace/templates/**
+  - write: /workspace/output/**
+deny:
+  - read: /records/archived/**
+  - read: ~/.ssh/**
+  - write: /records/**
+  - execute: "**"
+default: deny
+
+## Network
+
+allow:
+  - url: "https://ehr.hospital.internal/**"
+    methods: [GET, POST]
+  - url: "https://api.openai.com/v1/chat/**"
+    methods: [POST]
+deny:
+  - url: "**"
+default: deny
+
+## Capabilities
+
+allow:
+  - file_read
+  - file_write
+  - ehr_query
+requireApproval:
+  - phi_export
+  - record_modify
+deny:
+  - shell_exec
+  - http_request
+default: deny
+
+## Data Boundaries
+
+egressAllow:
+  - public
+  - internal
+egressDeny:
+  - phi
+  - pii
+  - credentials
+  - secret
+redact:
+  - type: phi
+    replacement: "[REDACTED PHI]"
+  - type: pii
+    replacement: "[REDACTED PII]"
+
+## Behavioral Limits
+
+maxIterations: 30
+maxRuntimeSeconds: 180
+maxCostUSD: 3.00
+maxTokens: 50000
+maxToolCalls: 25
+
+## Compliance
+
+frameworks:
+  - hipaa
+  - soc2
+  - gdpr
+backend: domere
+
+## Verification
+
+required: true
+backend: domere
+blockchain: ethereum
+frequency: every_action
+
+## Threat Model
+
+inScope:
+  - prompt_injection
+  - data_exfil
+  - credential_theft
+  - tool_misuse
+  - semantic_drift
+
+## Incident Response
+
+onViolation:
+  - log
+  - alert
+  - terminate
+  - attest_violation
+  - notify_human
+severityThreshold: low