anantham-v2 2.0.0-alpha.1 → 2.0.2

package/dist/search/universal-content-search-engine.js

@@ -0,0 +1,243 @@
+import { z } from "zod";
+import { SensitivityLevelSchema } from "../domain/security.js";
+export const ContentModalitySchema = z.enum([
+    "code",
+    "document",
+    "transcript",
+    "memory",
+    "artifact",
+    "event",
+]);
+export const UnifiedSearchQuerySchema = z.object({
+    query: z.string().min(1),
+    projectId: z.string().min(1),
+    sessionId: z.string().optional(),
+    modalities: z.array(ContentModalitySchema).optional(),
+    timeRange: z
+        .object({
+        from: z.string().optional(),
+        to: z.string().optional(),
+    })
+        .optional(),
+    sensitivityCap: SensitivityLevelSchema.default("secret"),
+    limit: z.number().int().positive().default(20),
+    offset: z.number().int().nonnegative().default(0),
+});
+export const SearchResultItemSchema = z.object({
+    id: z.string().min(1),
+    modality: ContentModalitySchema,
+    projectId: z.string().min(1),
+    sessionId: z.string().optional(),
+    title: z.string().min(1),
+    snippet: z.string().min(1),
+    uri: z.string().optional(),
+    relevanceScore: z.number().min(0).max(1),
+    sensitivity: SensitivityLevelSchema,
+    timestamp: z.string().min(1),
+    metadata: z.record(z.unknown()).optional(),
+});
+export const UnifiedSearchResultSchema = z.object({
+    query: z.string(),
+    totalHits: z.number().int().nonnegative(),
+    results: z.array(SearchResultItemSchema),
+    modalitiesSearched: z.array(ContentModalitySchema),
+    durationMs: z.number().nonnegative(),
+});
+const SENSITIVITY_RANK = {
+    public: 0,
+    normal: 1,
+    sensitive: 2,
+    secret: 3,
+};
+export class UniversalContentSearchEngine {
+    engine;
+    constructor(options) {
+        this.engine = options.engine;
+    }
+    computeScore(query, text) {
+        const q = query.toLowerCase();
+        const t = text.toLowerCase();
+        if (t === q)
+            return 1.0;
+        if (t.startsWith(q))
+            return 0.9;
+        if (t.includes(q))
+            return 0.75;
+        const terms = q.split(/\s+/).filter((w) => w.length > 2);
+        if (terms.length === 0)
+            return 0.5;
+        let matched = 0;
+        for (const term of terms) {
+            if (t.includes(term))
+                matched++;
+        }
+        return 0.3 + 0.4 * (matched / terms.length);
+    }
+    makeSnippet(query, text, maxLen = 160) {
+        const idx = text.toLowerCase().indexOf(query.toLowerCase());
+        if (idx === -1) {
+            return text.slice(0, maxLen) + (text.length > maxLen ? "..." : "");
+        }
+        const start = Math.max(0, idx - 40);
+        const end = Math.min(text.length, idx + query.length + 80);
+        let snippet = text.slice(start, end).trim();
+        if (start > 0)
+            snippet = "..." + snippet;
+        if (end < text.length)
+            snippet = snippet + "...";
+        return snippet;
+    }
+    async searchMemories(projectId, term, maxSensitivity = "secret") {
+        const results = [];
+        try {
+            const sql = `
+        SELECT * FROM memory_items
+        WHERE (project_id = ? OR project_id IS NULL)
+          AND (LOWER(content) LIKE ? OR LOWER(type) LIKE ? OR LOWER(tags_json) LIKE ?)
+        ORDER BY confidence DESC
+        LIMIT 50;
+      `;
+            const pattern = "%" + term.toLowerCase() + "%";
+            const rows = this.engine.raw.prepare(sql).all(projectId, pattern, pattern, pattern);
+            const capRank = SENSITIVITY_RANK[maxSensitivity] ?? 3;
+            for (const r of rows) {
+                const sens = r.sensitivity || "normal";
+                if (SENSITIVITY_RANK[sens] > capRank)
+                    continue;
+                const score = this.computeScore(term, r.content);
+                results.push({
+                    id: r.id,
+                    modality: "memory",
+                    projectId: r.project_id || projectId,
+                    sessionId: r.session_id || undefined,
+                    title: "Memory: " + r.type,
+                    snippet: this.makeSnippet(term, r.content),
+                    relevanceScore: score,
+                    sensitivity: sens,
+                    timestamp: r.created_at,
+                    metadata: { confidence: r.confidence, priority: r.priority },
+                });
+            }
+        }
+        catch { }
+        return results;
+    }
+    async searchEvents(projectId, term) {
+        const results = [];
+        try {
+            const sql = `
+        SELECT * FROM events
+        WHERE project_id = ?
+          AND (LOWER(type) LIKE ? OR LOWER(actor) LIKE ? OR LOWER(payload_json) LIKE ?)
+        ORDER BY timestamp DESC
+        LIMIT 50;
+      `;
+            const pattern = "%" + term.toLowerCase() + "%";
+            const rows = this.engine.raw.prepare(sql).all(projectId, pattern, pattern, pattern);
+            for (const r of rows) {
+                const text = r.type + " " + r.actor + " " + r.payload_json;
+                const score = this.computeScore(term, text);
+                results.push({
+                    id: r.id,
+                    modality: "event",
+                    projectId: r.project_id,
+                    sessionId: r.session_id || undefined,
+                    title: "Event: " + r.type,
+                    snippet: this.makeSnippet(term, text),
+                    relevanceScore: score,
+                    sensitivity: "normal",
+                    timestamp: r.timestamp,
+                });
+            }
+        }
+        catch { }
+        return results;
+    }
+    async searchArtifacts(projectId, term) {
+        const results = [];
+        try {
+            const sql = `
+        SELECT * FROM artifacts
+        WHERE project_id = ?
+          AND (LOWER(type) LIKE ? OR LOWER(content_uri) LIKE ? OR LOWER(metadata_json) LIKE ?)
+        ORDER BY created_at DESC
+        LIMIT 50;
+      `;
+            const pattern = "%" + term.toLowerCase() + "%";
+            const rows = this.engine.raw.prepare(sql).all(projectId, pattern, pattern, pattern);
+            for (const r of rows) {
+                let title = r.type;
+                if (r.metadata_json) {
+                    try {
+                        const meta = JSON.parse(r.metadata_json);
+                        if (meta.title)
+                            title = meta.title;
+                    }
+                    catch { }
+                }
+                const text = r.type + " " + r.content_uri + " " + (r.metadata_json || "");
+                const score = this.computeScore(term, text);
+                results.push({
+                    id: r.id,
+                    modality: "artifact",
+                    projectId: r.project_id,
+                    sessionId: r.session_id || undefined,
+                    title: "Artifact: " + title,
+                    snippet: this.makeSnippet(term, text),
+                    uri: r.content_uri,
+                    relevanceScore: score,
+                    sensitivity: "normal",
+                    timestamp: r.created_at,
+                });
+            }
+        }
+        catch { }
+        return results;
+    }
+    async search(query) {
+        const start = Date.now();
+        const validated = UnifiedSearchQuerySchema.parse(query);
+        const modalities = validated.modalities ?? ["memory", "event", "artifact"];
+        const allResults = [];
+        if (modalities.includes("memory")) {
+            const mems = await this.searchMemories(validated.projectId, validated.query, validated.sensitivityCap);
+            allResults.push(...mems);
+        }
+        if (modalities.includes("event")) {
+            const evts = await this.searchEvents(validated.projectId, validated.query);
+            allResults.push(...evts);
+        }
+        if (modalities.includes("artifact")) {
+            const arts = await this.searchArtifacts(validated.projectId, validated.query);
+            allResults.push(...arts);
+        }
+        // Time filter
+        let filtered = allResults;
+        if (validated.timeRange) {
+            if (validated.timeRange.from) {
+                const fromMs = new Date(validated.timeRange.from).getTime();
+                filtered = filtered.filter((r) => new Date(r.timestamp).getTime() >= fromMs);
+            }
+            if (validated.timeRange.to) {
+                const toMs = new Date(validated.timeRange.to).getTime();
+                filtered = filtered.filter((r) => new Date(r.timestamp).getTime() <= toMs);
+            }
+        }
+        // Sort by relevance score descending, then timestamp descending
+        filtered.sort((a, b) => {
+            if (b.relevanceScore !== a.relevanceScore) {
+                return b.relevanceScore - a.relevanceScore;
+            }
+            return new Date(b.timestamp).getTime() - new Date(a.timestamp).getTime();
+        });
+        const paginated = filtered.slice(validated.offset, validated.offset + validated.limit);
+        return {
+            query: validated.query,
+            totalHits: filtered.length,
+            results: paginated,
+            modalitiesSearched: modalities,
+            durationMs: Date.now() - start,
+        };
+    }
+}
+//# sourceMappingURL=universal-content-search-engine.js.map

package/dist/search/universal-content-search-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"universal-content-search-engine.js","sourceRoot":"","sources":["../../src/search/universal-content-search-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,sBAAsB,EAAyB,MAAM,uBAAuB,CAAC;AAEtF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC1C,MAAM;IACN,UAAU;IACV,YAAY;IACZ,QAAQ;IACR,UAAU;IACV,OAAO;CACR,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACrD,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC1B,CAAC;SACD,QAAQ,EAAE;IACb,cAAc,EAAE,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC;IACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CAClD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,QAAQ,EAAE,qBAAqB;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,WAAW,EAAE,sBAAsB;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;IACxC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAClD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;CACrC,CAAC,CAAC;AAGH,MAAM,gBAAgB,GAAqC;IACzD,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,SAAS,EAAE,CAAC;IACZ,MAAM,EAAE,CAAC;CACV,CAAC;AAQF,MAAM,OAAO,4BAA4B;IACtB,MAAM,CAAe;IAEtC,YAAY,OAA4C;QACtD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IACvB,CAAC;IAED,YAAY,CAAC,KAAa,EAAE,IAAY;QAC9C,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;QACxB,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;QAChC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAE/B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;QACnC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,CAAC;QAClC,CAAC;QACD,OAAO,GAAG,GAAG,GAAG,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAEO,WAAW,CAAC,KAAa,EAAE,IAAY,EAAE,SAAiB,GAAG;QACnE,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5D,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC3D,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,GAAG,KAAK,GAAG,OAAO,CAAC;QACzC,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM;YAAE,OAAO,GAAG,OAAO,GAAG,KAAK,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEM,KAAK,CAAC,cAAc,CACzB,SAAiB,EACjB,IAAY,EACZ,iBAAmC,QAAQ;QAE3C,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG;;;;;;OAMX,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;YAE7F,MAAM,OAAO,GAAG,gBAAgB,CAAC,cAAkC,CAAC,IAAI,CAAC,CAAC;YAE1E,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAI,CAAC,CAAC,WAAgC,IAAI,QAAQ,CAAC;gBAC7D,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,OAAO;oBAAE,SAAS;gBAE/C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC;oBACX,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,SAAS;oBACpC,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,SAAS;oBACpC,KAAK,EAAE,UAAU,GAAG,CAAC,CAAC,IAAI;oBAC1B,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;oBAC1C,cAAc,EAAE,KAAK;oBACrB,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,CAAC,CAAC,UAAU;oBACvB,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;iBAC7D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,OAAO,OAAO,CAAC;IACjB,CAAC;IAEM,KAAK,CAAC,YAAY,CACvB,SAAiB,EACjB,IAAY;QAEZ,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG;;;;;;OAMX,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;YAE7F,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC;gBAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC5C,OAAO,CAAC,IAAI,CAAC;oBACX,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,QAAQ,EAAE,OAAO;oBACjB,SAAS,EAAE,CAAC,CAAC,UAAU;oBACvB,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,SAAS;oBACpC,KAAK,EAAE,SAAS,GAAG,CAAC,CAAC,IAAI;oBACzB,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;oBACrC,cAAc,EAAE,KAAK;oBACrB,WAAW,EAAE,QAAQ;oBACrB,SAAS,EAAE,CAAC,CAAC,SAAS;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,OAAO,OAAO,CAAC;IACjB,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,SAAiB,EACjB,IAAY;QAEZ,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG;;;;;;OAMX,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;YAE7F,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;oBACpB,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;wBACzC,IAAI,IAAI,CAAC,KAAK;4BAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;oBACrC,CAAC;oBAAC,MAAM,CAAC,CAAA,CAAC;gBACZ,CAAC;gBAED,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,WAAW,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;gBAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC5C,OAAO,CAAC,IAAI,CAAC;oBACX,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,QAAQ,EAAE,UAAU;oBACpB,SAAS,EAAE,CAAC,CAAC,UAAU;oBACvB,SAAS,EAAE,CAAC,CAAC,UAAU,IAAI,SAAS;oBACpC,KAAK,EAAE,YAAY,GAAG,KAAK;oBAC3B,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;oBACrC,GAAG,EAAE,CAAC,CAAC,WAAW;oBAClB,cAAc,EAAE,KAAK;oBACrB,WAAW,EAAE,QAAQ;oBACrB,SAAS,EAAE,CAAC,CAAC,UAAU;iBACxB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,OAAO,OAAO,CAAC;IACjB,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,KAAyB;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAExD,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAuB,EAAE,CAAC;QAE1C,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC;YACvG,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3E,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9E,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3B,CAAC;QAED,cAAc;QACd,IAAI,QAAQ,GAAG,UAAU,CAAC;QAC1B,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;YACxB,IAAI,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC5D,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,CAAC;YAC/E,CAAC;YACD,IAAI,SAAS,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;gBACxD,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACrB,IAAI,CAAC,CAAC,cAAc,KAAK,CAAC,CAAC,cAAc,EAAE,CAAC;gBAC1C,OAAO,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC;YAC7C,CAAC;YACD,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAEvF,OAAO;YACL,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,SAAS,EAAE,QAAQ,CAAC,MAAM;YAC1B,OAAO,EAAE,SAAS;YAClB,kBAAkB,EAAE,UAAU;YAC9B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC/B,CAAC;IACJ,CAAC;CACF"}

package/dist/security/dangerous-command-heuristics.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Dangerous Command Heuristics & Blocklist Engine
+ * PRD-SEC-005: Dangerous Command Heuristics & Blocklist Engine
+ */
+export interface DangerousCommandAnalysis {
+    isDangerous: boolean;
+    severity: "critical" | "high" | "medium" | "safe";
+    matchedRule?: string;
+    reason?: string;
+}
+export declare class DangerousCommandHeuristics {
+    private static readonly CRITICAL_PATTERNS;
+    private static readonly HIGH_PATTERNS;
+    private static readonly MEDIUM_PATTERNS;
+    analyzeCommand(command: string): DangerousCommandAnalysis;
+}
+//# sourceMappingURL=dangerous-command-heuristics.d.ts.map

package/dist/security/dangerous-command-heuristics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dangerous-command-heuristics.d.ts","sourceRoot":"","sources":["../../src/security/dangerous-command-heuristics.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,0BAA0B;IACrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CASvC;IAEF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAQnC;IAEF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAIrC;IAEK,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,wBAAwB;CA4CjE"}

package/dist/security/dangerous-command-heuristics.js

@@ -0,0 +1,71 @@
+/**
+ * Dangerous Command Heuristics & Blocklist Engine
+ * PRD-SEC-005: Dangerous Command Heuristics & Blocklist Engine
+ */
+export class DangerousCommandHeuristics {
+    static CRITICAL_PATTERNS = [
+        { pattern: /\brm\s+(-rf|-fr|--recursive)\s+(\/|~|\$HOME|\.\.)(?:\s|$|[;&|])/i, rule: "ROOT_OR_HOME_RECURSIVE_DELETE" },
+        { pattern: /\b(del|rd|rmdir)\s+\/s\s+\/q\s+[a-z]:\\/i, rule: "WINDOWS_ROOT_RECURSIVE_DELETE" },
+        { pattern: /\bformat\s+[a-z]:/i, rule: "DISK_FORMAT" },
+        { pattern: /\bmkfs(\.[a-z0-9]+)?\s+/i, rule: "FILESYSTEM_CREATE" },
+        { pattern: /\bdd\s+if=.*of=\/dev\/(sd[a-z]|nvme|hd[a-z]|zero)/i, rule: "RAW_DISK_OVERWRITE" },
+        { pattern: /:\(\)\s*\{\s*:\s*\|\s*:\s*&\s*\}\s*;\s*:/, rule: "BASH_FORK_BOMB" },
+        { pattern: /while\s*\(\$true\)\s*\{\s*start-process\s+/i, rule: "POWERSHELL_FORK_BOMB" },
+        { pattern: />\s*\/dev\/(sda|hda|nvme)/i, rule: "DIRECT_DEVICE_REDIRECT" },
+    ];
+    static HIGH_PATTERNS = [
+        { pattern: /\b(sudo|su\s+-|runas)\b/i, rule: "PRIVILEGE_ESCALATION" },
+        { pattern: /\bchmod\s+(-R\s+)?777\b/i, rule: "PERMISSIVE_CHMOD_777" },
+        { pattern: /\bcurl\s+.*\s*\|\s*(bash|sh|pwsh|powershell)\b/i, rule: "REMOTE_CODE_EXEC_PIPE" },
+        { pattern: /\bwget\s+.*\s*\|\s*(bash|sh|pwsh|powershell)\b/i, rule: "REMOTE_CODE_EXEC_PIPE_WGET" },
+        { pattern: /\bpowershell.*(-enc|-encodedcommand)\s+[a-z0-9+/=]{16,}/i, rule: "ENCODED_POWERSHELL_PAYLOAD" },
+        { pattern: /\becho\s+[a-z0-9+/=]{20,}\s*\|\s*base64\s+-d\s*\|\s*(sh|bash)/i, rule: "BASE64_OBFUSCATED_SHELL" },
+        { pattern: /\bchown\s+-R\s+root\b/i, rule: "ROOT_OWNERSHIP_CHANGE" },
+    ];
+    static MEDIUM_PATTERNS = [
+        { pattern: /\bgit\s+reset\s+--hard\b/i, rule: "GIT_RESET_HARD" },
+        { pattern: /\bgit\s+clean\s+-fdx\b/i, rule: "GIT_CLEAN_FORCE" },
+        { pattern: /\bkill\s+-9\s+-1\b/i, rule: "KILL_ALL_PROCESSES" },
+    ];
+    analyzeCommand(command) {
+        const trimmed = command.trim();
+        // Check Critical
+        for (const rule of DangerousCommandHeuristics.CRITICAL_PATTERNS) {
+            if (rule.pattern.test(trimmed)) {
+                return {
+                    isDangerous: true,
+                    severity: "critical",
+                    matchedRule: rule.rule,
+                    reason: `Critical danger detected by heuristic rule: ${rule.rule}`,
+                };
+            }
+        }
+        // Check High
+        for (const rule of DangerousCommandHeuristics.HIGH_PATTERNS) {
+            if (rule.pattern.test(trimmed)) {
+                return {
+                    isDangerous: true,
+                    severity: "high",
+                    matchedRule: rule.rule,
+                    reason: `High risk detected by heuristic rule: ${rule.rule}`,
+                };
+            }
+        }
+        // Check Medium
+        for (const rule of DangerousCommandHeuristics.MEDIUM_PATTERNS) {
+            if (rule.pattern.test(trimmed)) {
+                return {
+                    isDangerous: true,
+                    severity: "medium",
+                    matchedRule: rule.rule,
+                    reason: `Medium risk detected by heuristic rule: ${rule.rule}`,
+                };
+            }
+        }
+        return {
+            isDangerous: false,
+            severity: "safe",
+        };
+    }
+}
+//# sourceMappingURL=dangerous-command-heuristics.js.map

package/dist/security/dangerous-command-heuristics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dangerous-command-heuristics.js","sourceRoot":"","sources":["../../src/security/dangerous-command-heuristics.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,MAAM,OAAO,0BAA0B;IAC7B,MAAM,CAAU,iBAAiB,GAAG;QAC1C,EAAE,OAAO,EAAE,kEAAkE,EAAE,IAAI,EAAE,+BAA+B,EAAE;QACtH,EAAE,OAAO,EAAE,0CAA0C,EAAE,IAAI,EAAE,+BAA+B,EAAE;QAC9F,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,aAAa,EAAE;QACtD,EAAE,OAAO,EAAE,0BAA0B,EAAE,IAAI,EAAE,mBAAmB,EAAE;QAClE,EAAE,OAAO,EAAE,oDAAoD,EAAE,IAAI,EAAE,oBAAoB,EAAE;QAC7F,EAAE,OAAO,EAAE,0CAA0C,EAAE,IAAI,EAAE,gBAAgB,EAAE;QAC/E,EAAE,OAAO,EAAE,6CAA6C,EAAE,IAAI,EAAE,sBAAsB,EAAE;QACxF,EAAE,OAAO,EAAE,4BAA4B,EAAE,IAAI,EAAE,wBAAwB,EAAE;KAC1E,CAAC;IAEM,MAAM,CAAU,aAAa,GAAG;QACtC,EAAE,OAAO,EAAE,0BAA0B,EAAE,IAAI,EAAE,sBAAsB,EAAE;QACrE,EAAE,OAAO,EAAE,0BAA0B,EAAE,IAAI,EAAE,sBAAsB,EAAE;QACrE,EAAE,OAAO,EAAE,iDAAiD,EAAE,IAAI,EAAE,uBAAuB,EAAE;QAC7F,EAAE,OAAO,EAAE,iDAAiD,EAAE,IAAI,EAAE,4BAA4B,EAAE;QAClG,EAAE,OAAO,EAAE,0DAA0D,EAAE,IAAI,EAAE,4BAA4B,EAAE;QAC3G,EAAE,OAAO,EAAE,gEAAgE,EAAE,IAAI,EAAE,yBAAyB,EAAE;QAC9G,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,uBAAuB,EAAE;KACrE,CAAC;IAEM,MAAM,CAAU,eAAe,GAAG;QACxC,EAAE,OAAO,EAAE,2BAA2B,EAAE,IAAI,EAAE,gBAAgB,EAAE;QAChE,EAAE,OAAO,EAAE,yBAAyB,EAAE,IAAI,EAAE,iBAAiB,EAAE;QAC/D,EAAE,OAAO,EAAE,qBAAqB,EAAE,IAAI,EAAE,oBAAoB,EAAE;KAC/D,CAAC;IAEK,cAAc,CAAC,OAAe;QACnC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAE/B,iBAAiB;QACjB,KAAK,MAAM,IAAI,IAAI,0BAA0B,CAAC,iBAAiB,EAAE,CAAC;YAChE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,WAAW,EAAE,IAAI;oBACjB,QAAQ,EAAE,UAAU;oBACpB,WAAW,EAAE,IAAI,CAAC,IAAI;oBACtB,MAAM,EAAE,+CAA+C,IAAI,CAAC,IAAI,EAAE;iBACnE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,aAAa;QACb,KAAK,MAAM,IAAI,IAAI,0BAA0B,CAAC,aAAa,EAAE,CAAC;YAC5D,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,WAAW,EAAE,IAAI;oBACjB,QAAQ,EAAE,MAAM;oBAChB,WAAW,EAAE,IAAI,CAAC,IAAI;oBACtB,MAAM,EAAE,yCAAyC,IAAI,CAAC,IAAI,EAAE;iBAC7D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,eAAe;QACf,KAAK,MAAM,IAAI,IAAI,0BAA0B,CAAC,eAAe,EAAE,CAAC;YAC9D,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,WAAW,EAAE,IAAI;oBACjB,QAAQ,EAAE,QAAQ;oBAClB,WAAW,EAAE,IAAI,CAAC,IAAI;oBACtB,MAAM,EAAE,2CAA2C,IAAI,CAAC,IAAI,EAAE;iBAC/D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO;YACL,WAAW,EAAE,KAAK;YAClB,QAAQ,EAAE,MAAM;SACjB,CAAC;IACJ,CAAC"}

package/dist/security/policy-hierarchy-resolver.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Hierarchical Dynamic Security Policy Resolution & Inheritance Engine
+ * PRD-SEC-004: Dynamic Security Policy Resolution & Inheritance
+ */
+import type { ExecutionRiskLevel, SandboxType } from "../execution/types.js";
+export type PolicyScope = "enterprise" | "org" | "project" | "session" | "agent";
+export interface PolicyLayer {
+    scope: PolicyScope;
+    allowedTools?: string[];
+    blockedTools?: string[];
+    maxRiskLevelWithoutApproval?: ExecutionRiskLevel;
+    allowNetwork?: boolean;
+    allowDestructive?: boolean;
+    enforceZeroKnowledge?: boolean;
+    allowedSandboxTypes?: SandboxType[];
+}
+export interface ResolvedPolicy {
+    allowedTools: string[];
+    blockedTools: string[];
+    maxRiskLevelWithoutApproval: ExecutionRiskLevel;
+    allowNetwork: boolean;
+    allowDestructive: boolean;
+    enforceZeroKnowledge: boolean;
+    allowedSandboxTypes: SandboxType[];
+    hierarchyTrace: Array<{
+        scope: PolicyScope;
+        tightenedFields: string[];
+    }>;
+}
+export declare class PolicyHierarchyResolver {
+    private static readonly RISK_ORDER;
+    private static readonly SCOPE_PRECEDENCE;
+    resolveHierarchy(layers: PolicyLayer[]): ResolvedPolicy;
+}
+//# sourceMappingURL=policy-hierarchy-resolver.d.ts.map

package/dist/security/policy-hierarchy-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-hierarchy-resolver.d.ts","sourceRoot":"","sources":["../../src/security/policy-hierarchy-resolver.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAE7E,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAEjF,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,WAAW,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,2BAA2B,CAAC,EAAE,kBAAkB,CAAC;IACjD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,2BAA2B,EAAE,kBAAkB,CAAC;IAChD,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,mBAAmB,EAAE,WAAW,EAAE,CAAC;IACnC,cAAc,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,eAAe,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAC1E;AAED,qBAAa,uBAAuB;IAClC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAMhC;IAEF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAMtC;IAEK,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,cAAc;CAwG/D"}

package/dist/security/policy-hierarchy-resolver.js

@@ -0,0 +1,110 @@
+/**
+ * Hierarchical Dynamic Security Policy Resolution & Inheritance Engine
+ * PRD-SEC-004: Dynamic Security Policy Resolution & Inheritance
+ */
+export class PolicyHierarchyResolver {
+    static RISK_ORDER = {
+        read: 1,
+        write: 2,
+        execute: 3,
+        network: 4,
+        destructive: 5,
+    };
+    static SCOPE_PRECEDENCE = [
+        "enterprise",
+        "org",
+        "project",
+        "session",
+        "agent",
+    ];
+    resolveHierarchy(layers) {
+        // Sort layers by precedence: enterprise -> org -> project -> session -> agent
+        const sortedLayers = [...layers].sort((a, b) => {
+            return (PolicyHierarchyResolver.SCOPE_PRECEDENCE.indexOf(a.scope) -
+                PolicyHierarchyResolver.SCOPE_PRECEDENCE.indexOf(b.scope));
+        });
+        // Default base policy (enterprise level baseline)
+        let allowedTools = ["*"];
+        const blockedTools = new Set();
+        let maxRiskLevel = "destructive";
+        let allowNetwork = true;
+        let allowDestructive = true; // Tightened monotonically if any layer sets false
+        let enforceZeroKnowledge = false;
+        let allowedSandboxTypes = [
+            "local_direct",
+            "local_virtualized",
+            "container",
+            "cloud",
+        ];
+        const hierarchyTrace = [];
+        for (const layer of sortedLayers) {
+            const tightenedFields = [];
+            // 1. Blocked tools: UNION of all blocked tools (monotonic restriction)
+            if (layer.blockedTools && layer.blockedTools.length > 0) {
+                for (const bt of layer.blockedTools) {
+                    if (!blockedTools.has(bt)) {
+                        blockedTools.add(bt);
+                        tightenedFields.push(`blockedTools(+${bt})`);
+                    }
+                }
+            }
+            // 2. Allowed tools: INTERSECTION (monotonic narrowing)
+            if (layer.allowedTools && !layer.allowedTools.includes("*")) {
+                if (allowedTools.includes("*")) {
+                    allowedTools = [...layer.allowedTools];
+                    tightenedFields.push(`allowedTools(scoped)`);
+                }
+                else {
+                    const narrowed = allowedTools.filter((t) => layer.allowedTools.includes(t));
+                    if (narrowed.length < allowedTools.length) {
+                        allowedTools = narrowed;
+                        tightenedFields.push(`allowedTools(narrowed)`);
+                    }
+                }
+            }
+            // 3. Max Risk Level Without Approval: Monotonically strictly lower risk
+            if (layer.maxRiskLevelWithoutApproval) {
+                if (PolicyHierarchyResolver.RISK_ORDER[layer.maxRiskLevelWithoutApproval] <
+                    PolicyHierarchyResolver.RISK_ORDER[maxRiskLevel]) {
+                    maxRiskLevel = layer.maxRiskLevelWithoutApproval;
+                    tightenedFields.push(`maxRiskLevel(${maxRiskLevel})`);
+                }
+            }
+            // 4. Allow Network: Monotonically false (if any parent or child bans network, it stays banned)
+            if (layer.allowNetwork === false && allowNetwork) {
+                allowNetwork = false;
+                tightenedFields.push("allowNetwork(false)");
+            }
+            // 5. Allow Destructive: Monotonically false
+            if (layer.allowDestructive === false && allowDestructive) {
+                allowDestructive = false;
+                tightenedFields.push("allowDestructive(false)");
+            }
+            // 6. Zero Knowledge: Monotonically true (if any layer enforces ZK, all must adhere)
+            if (layer.enforceZeroKnowledge === true && !enforceZeroKnowledge) {
+                enforceZeroKnowledge = true;
+                tightenedFields.push("enforceZeroKnowledge(true)");
+            }
+            // 7. Allowed Sandbox Types: INTERSECTION
+            if (layer.allowedSandboxTypes) {
+                const narrowed = allowedSandboxTypes.filter((st) => layer.allowedSandboxTypes.includes(st));
+                if (narrowed.length < allowedSandboxTypes.length) {
+                    allowedSandboxTypes = narrowed;
+                    tightenedFields.push("allowedSandboxTypes(narrowed)");
+                }
+            }
+            hierarchyTrace.push({ scope: layer.scope, tightenedFields });
+        }
+        return {
+            allowedTools,
+            blockedTools: Array.from(blockedTools),
+            maxRiskLevelWithoutApproval: maxRiskLevel,
+            allowNetwork,
+            allowDestructive,
+            enforceZeroKnowledge,
+            allowedSandboxTypes,
+            hierarchyTrace,
+        };
+    }
+}
+//# sourceMappingURL=policy-hierarchy-resolver.js.map

package/dist/security/policy-hierarchy-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-hierarchy-resolver.js","sourceRoot":"","sources":["../../src/security/policy-hierarchy-resolver.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA4BH,MAAM,OAAO,uBAAuB;IAC1B,MAAM,CAAU,UAAU,GAAuC;QACvE,IAAI,EAAE,CAAC;QACP,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,CAAC;KACf,CAAC;IAEM,MAAM,CAAU,gBAAgB,GAAkB;QACxD,YAAY;QACZ,KAAK;QACL,SAAS;QACT,SAAS;QACT,OAAO;KACR,CAAC;IAEK,gBAAgB,CAAC,MAAqB;QAC3C,8EAA8E;QAC9E,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC7C,OAAO,CACL,uBAAuB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;gBACzD,uBAAuB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAC1D,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,kDAAkD;QAClD,IAAI,YAAY,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QACvC,IAAI,YAAY,GAAuB,aAAa,CAAC;QACrD,IAAI,YAAY,GAAY,IAAI,CAAC;QACjC,IAAI,gBAAgB,GAAY,IAAI,CAAC,CAAC,kDAAkD;QACxF,IAAI,oBAAoB,GAAY,KAAK,CAAC;QAC1C,IAAI,mBAAmB,GAAkB;YACvC,cAAc;YACd,mBAAmB;YACnB,WAAW;YACX,OAAO;SACR,CAAC;QAEF,MAAM,cAAc,GAA6D,EAAE,CAAC;QAEpF,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,MAAM,eAAe,GAAa,EAAE,CAAC;YAErC,uEAAuE;YACvE,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxD,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;oBACpC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;wBAC1B,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBACrB,eAAe,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;oBAC/C,CAAC;gBACH,CAAC;YACH,CAAC;YAED,uDAAuD;YACvD,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5D,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/B,YAAY,GAAG,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;oBACvC,eAAe,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBAC/C,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,YAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC7E,IAAI,QAAQ,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;wBAC1C,YAAY,GAAG,QAAQ,CAAC;wBACxB,eAAe,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;oBACjD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,wEAAwE;YACxE,IAAI,KAAK,CAAC,2BAA2B,EAAE,CAAC;gBACtC,IACE,uBAAuB,CAAC,UAAU,CAAC,KAAK,CAAC,2BAA2B,CAAC;oBACrE,uBAAuB,CAAC,UAAU,CAAC,YAAY,CAAC,EAChD,CAAC;oBACD,YAAY,GAAG,KAAK,CAAC,2BAA2B,CAAC;oBACjD,eAAe,CAAC,IAAI,CAAC,gBAAgB,YAAY,GAAG,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;YAED,+FAA+F;YAC/F,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,IAAI,YAAY,EAAE,CAAC;gBACjD,YAAY,GAAG,KAAK,CAAC;gBACrB,eAAe,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAC9C,CAAC;YAED,4CAA4C;YAC5C,IAAI,KAAK,CAAC,gBAAgB,KAAK,KAAK,IAAI,gBAAgB,EAAE,CAAC;gBACzD,gBAAgB,GAAG,KAAK,CAAC;gBACzB,eAAe,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAClD,CAAC;YAED,oFAAoF;YACpF,IAAI,KAAK,CAAC,oBAAoB,KAAK,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBACjE,oBAAoB,GAAG,IAAI,CAAC;gBAC5B,eAAe,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YACrD,CAAC;YAED,yCAAyC;YACzC,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC7F,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,CAAC;oBACjD,mBAAmB,GAAG,QAAQ,CAAC;oBAC/B,eAAe,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;YAED,cAAc,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO;YACL,YAAY;YACZ,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC;YACtC,2BAA2B,EAAE,YAAY;YACzC,YAAY;YACZ,gBAAgB;YAChB,oBAAoB;YACpB,mBAAmB;YACnB,cAAc;SACf,CAAC;IACJ,CAAC"}

package/dist/security/windows-boundary-guard.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Native Windows Host Execution Boundaries Guard
+ * PRD-PART2-108: Native Windows Host Execution Boundaries
+ */
+export interface WindowsPathValidation {
+    isSafe: boolean;
+    violationType?: "DOS_DEVICE" | "ALTERNATE_DATA_STREAM" | "TRAILING_DOT_OR_SPACE" | "RESERVED_NAME";
+    reason?: string;
+}
+export declare class WindowsBoundaryGuard {
+    private static readonly DOS_DEVICES;
+    validateWindowsPath(filePath: string): WindowsPathValidation;
+    detectShellType(shellCommand: string): "pwsh" | "powershell" | "cmd" | "bash" | "unknown";
+    sanitizeWindowsShellArgs(args: string[], shell: "pwsh" | "powershell" | "cmd"): string[];
+}
+//# sourceMappingURL=windows-boundary-guard.d.ts.map

package/dist/security/windows-boundary-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-boundary-guard.d.ts","sourceRoot":"","sources":["../../src/security/windows-boundary-guard.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,CAAC,EAAE,YAAY,GAAG,uBAAuB,GAAG,uBAAuB,GAAG,eAAe,CAAC;IACnG,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAIhC;IAEI,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,qBAAqB;IAoC5D,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS;IASzF,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,KAAK,GAAG,MAAM,EAAE;CAQhG"}

package/dist/security/windows-boundary-guard.js

@@ -0,0 +1,64 @@
+/**
+ * Native Windows Host Execution Boundaries Guard
+ * PRD-PART2-108: Native Windows Host Execution Boundaries
+ */
+import { basename } from "node:path";
+export class WindowsBoundaryGuard {
+    static DOS_DEVICES = new Set([
+        "con", "prn", "aux", "nul",
+        "com1", "com2", "com3", "com4", "com5", "com6", "com7", "com8", "com9",
+        "lpt1", "lpt2", "lpt3", "lpt4", "lpt5", "lpt6", "lpt7", "lpt8", "lpt9",
+    ]);
+    validateWindowsPath(filePath) {
+        const name = basename(filePath);
+        // 1. Check for NTFS Alternate Data Stream (colon in path after drive letter)
+        // Example: C:\path\file.txt:hidden_stream or file.txt:$DATA
+        const pathWithoutDrive = filePath.replace(/^[a-zA-Z]:/, "");
+        if (pathWithoutDrive.includes(":")) {
+            return {
+                isSafe: false,
+                violationType: "ALTERNATE_DATA_STREAM",
+                reason: `NTFS Alternate Data Stream detected in path: '${filePath}'`,
+            };
+        }
+        // 2. Check for DOS reserved device names (e.g. CON, NUL, AUX, COM1, etc.)
+        const nameWithoutExt = name.split(".")[0]?.toLowerCase() ?? "";
+        if (WindowsBoundaryGuard.DOS_DEVICES.has(nameWithoutExt)) {
+            return {
+                isSafe: false,
+                violationType: "DOS_DEVICE",
+                reason: `DOS reserved device name detected: '${nameWithoutExt}' in '${filePath}'`,
+            };
+        }
+        // 3. Check for trailing dots or spaces which Windows API silently truncates
+        if (name.endsWith(".") || name.endsWith(" ")) {
+            return {
+                isSafe: false,
+                violationType: "TRAILING_DOT_OR_SPACE",
+                reason: `Path component ends with trailing dot or space: '${name}' in '${filePath}'`,
+            };
+        }
+        return { isSafe: true };
+    }
+    detectShellType(shellCommand) {
+        const lower = shellCommand.toLowerCase();
+        if (lower.includes("pwsh"))
+            return "pwsh";
+        if (lower.includes("powershell"))
+            return "powershell";
+        if (lower.includes("cmd.exe") || lower === "cmd")
+            return "cmd";
+        if (lower.includes("bash") || lower.includes("sh"))
+            return "bash";
+        return "unknown";
+    }
+    sanitizeWindowsShellArgs(args, shell) {
+        if (shell === "cmd") {
+            // In cmd.exe, characters like &, |, ^, %, <, > have dangerous interpolation semantics
+            return args.map((arg) => arg.replace(/[%^&|<>]/g, "^$&"));
+        }
+        // For PowerShell, single-quote literals to prevent expansion
+        return args;
+    }
+}
+//# sourceMappingURL=windows-boundary-guard.js.map

package/dist/security/windows-boundary-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-boundary-guard.js","sourceRoot":"","sources":["../../src/security/windows-boundary-guard.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAQrC,MAAM,OAAO,oBAAoB;IACvB,MAAM,CAAU,WAAW,GAAG,IAAI,GAAG,CAAC;QAC5C,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;QAC1B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;QACtE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;KACvE,CAAC,CAAC;IAEI,mBAAmB,CAAC,QAAgB;QACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEhC,6EAA6E;QAC7E,4DAA4D;QAC5D,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,aAAa,EAAE,uBAAuB;gBACtC,MAAM,EAAE,iDAAiD,QAAQ,GAAG;aACrE,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC/D,IAAI,oBAAoB,CAAC,WAAW,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACzD,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,aAAa,EAAE,YAAY;gBAC3B,MAAM,EAAE,uCAAuC,cAAc,SAAS,QAAQ,GAAG;aAClF,CAAC;QACJ,CAAC;QAED,4EAA4E;QAC5E,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,aAAa,EAAE,uBAAuB;gBACtC,MAAM,EAAE,oDAAoD,IAAI,SAAS,QAAQ,GAAG;aACrF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAEM,eAAe,CAAC,YAAoB;QACzC,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,OAAO,YAAY,CAAC;QACtD,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QAC/D,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC;QAClE,OAAO,SAAS,CAAC;IACnB,CAAC;IAEM,wBAAwB,CAAC,IAAc,EAAE,KAAoC;QAClF,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACpB,sFAAsF;YACtF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,6DAA6D;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC"}

package/dist/security/zero-knowledge-enforcer.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Zero-Knowledge & Local-Only Execution Mode Enforcer
+ * PRD-SEC-006: Zero-Knowledge & Local-Only Execution Modes
+ */
+export interface ZeroKnowledgeConfig {
+    localOnly: boolean;
+    enforceZeroKnowledge: boolean;
+    encryptionKey?: Buffer;
+    allowedOutboundHosts?: string[];
+}
+export declare class ZeroKnowledgeEnforcer {
+    private config;
+    private encryptionKey;
+    constructor(config?: Partial<ZeroKnowledgeConfig>);
+    isLocalOnly(): boolean;
+    isZeroKnowledge(): boolean;
+    validateNetworkEgress(targetUrl: string): {
+        allowed: boolean;
+        reason?: string;
+    };
+    encryptLocalPayload(payload: string): {
+        iv: string;
+        authTag: string;
+        ciphertext: string;
+    };
+    decryptLocalPayload(encrypted: {
+        iv: string;
+        authTag: string;
+        ciphertext: string;
+    }): string;
+}
+//# sourceMappingURL=zero-knowledge-enforcer.d.ts.map

package/dist/security/zero-knowledge-enforcer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zero-knowledge-enforcer.d.ts","sourceRoot":"","sources":["../../src/security/zero-knowledge-enforcer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,aAAa,CAAS;gBAElB,MAAM,GAAE,OAAO,CAAC,mBAAmB,CAAM;IAS9C,WAAW,IAAI,OAAO;IAItB,eAAe,IAAI,OAAO;IAI1B,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;IAgC/E,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE;IAczF,mBAAmB,CAAC,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;CASnG"}