artifact-contracts 0.1.1 → 0.2.1

package/dist/generated/policy-runtime.d.ts

@@ -0,0 +1,114 @@
+export type RiskLevel = "low" | "medium" | "high" | "critical";
+export type ExecutionMode = "normal" | "long-running" | "watch" | "interactive" | "background";
+interface EffectWrite {
+    target: string;
+    description?: string;
+    overwrite?: boolean;
+    destructive?: boolean;
+    idempotent?: boolean;
+    idempotencyKey?: string;
+    idempotentNote?: string;
+}
+interface EffectRead {
+    target: string;
+    description?: string;
+}
+interface NetworkEffect {
+    description?: string;
+    domains?: string[];
+    idempotent?: boolean;
+    idempotencyKey?: string;
+    idempotentNote?: string;
+}
+interface Effects {
+    riskLevel?: RiskLevel;
+    reads?: EffectRead[];
+    writes?: EffectWrite[];
+    network?: NetworkEffect | boolean;
+    executionMode?: ExecutionMode;
+    requiresConfirmation?: boolean;
+}
+interface FileContract {
+    mode: "read" | "write" | "append" | "readWrite";
+}
+interface Option {
+    name: string;
+    schema?: {
+        type?: string;
+        [key: string]: unknown;
+    };
+    file?: FileContract;
+    effects?: Effects;
+    repeatable?: boolean;
+}
+interface EnvVar {
+    sensitive?: boolean;
+}
+export type DerivedReadEffect = {
+    kind: "option-file";
+    option: string;
+    path?: string;
+    source: string;
+} | {
+    kind: "semantic";
+    target: string;
+    description?: string;
+    source: string;
+};
+export type DerivedWriteEffect = {
+    kind: "option-file";
+    option: string;
+    path?: string;
+    mode: string;
+    source: string;
+} | {
+    kind: "semantic";
+    target: string;
+    description?: string;
+    overwrite?: boolean;
+    destructive?: boolean;
+    idempotent?: boolean;
+    idempotencyKey?: string;
+    idempotentNote?: string;
+    source: string;
+};
+export interface DerivedNetworkEffect {
+    description?: string;
+    domains?: string[];
+    idempotent?: boolean;
+    idempotencyKey?: string;
+    idempotentNote?: string;
+    source: string;
+}
+export interface DerivedPolicy {
+    riskLevel: RiskLevel;
+    requiresConfirmation: boolean;
+    idempotent: boolean;
+    sideEffects: string[];
+    reads: DerivedReadEffect[];
+    writes: DerivedWriteEffect[];
+    network?: DerivedNetworkEffect[];
+    executionMode?: ExecutionMode;
+    requiresSecrets?: string[];
+}
+export interface IntrospectionResult {
+    command: string;
+    activeOptions: string[];
+    policy: DerivedPolicy;
+}
+export interface OptionInput {
+    value: unknown;
+    specified: boolean;
+}
+export interface PolicyDerivationInput {
+    commandId: string;
+    commandEffects?: Effects;
+    options: Record<string, OptionInput & {
+        definition: Option;
+    }>;
+    env?: Record<string, EnvVar>;
+}
+export declare function isOptionActive(definition: Option, value: unknown, specified: boolean): boolean;
+export declare function derivePolicy(input: PolicyDerivationInput): DerivedPolicy;
+export {};
+//# sourceMappingURL=policy-runtime.d.ts.map

package/dist/generated/policy-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-runtime.d.ts","sourceRoot":"","sources":["../../src/generated/policy-runtime.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAC/D,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,cAAc,GAAG,OAAO,GAAG,aAAa,GAAG,YAAY,CAAC;AAE/F,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,aAAa;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,OAAO;IACf,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC;IAClC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,UAAU,YAAY;IACpB,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAC;CACjD;AAED,UAAU,MAAM;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACnD,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,UAAU,MAAM;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAID,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E,MAAM,MAAM,kBAAkB,GAC1B;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEN,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,SAAS,CAAC;IACrB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACjC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,MAAM,CACb,MAAM,EACN,WAAW,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CACrC,CAAC;IACF,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAuBD,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,OAAO,GACjB,OAAO,CAYT;AAID,wBAAgB,YAAY,CAAC,KAAK,EAAE,qBAAqB,GAAG,aAAa,CA0LxE"}

package/dist/generated/policy-runtime.js

@@ -0,0 +1,195 @@
+// Standalone policy runtime. Copied by cli-contracts generate.
+// This file is self-contained — no imports from cli-contracts internals.
+// ─── Risk Level Ordering ────────────────────────────────────────
+const RISK_ORDER = {
+    low: 0,
+    medium: 1,
+    high: 2,
+    critical: 3,
+};
+function maxRiskLevel(...levels) {
+    let max = "low";
+    for (const level of levels) {
+        if (RISK_ORDER[level] > RISK_ORDER[max]) {
+            max = level;
+        }
+    }
+    return max;
+}
+// ─── Active Determination ───────────────────────────────────────
+export function isOptionActive(definition, value, specified) {
+    const schemaType = definition.schema?.type;
+    if (schemaType === "boolean") {
+        return value === true;
+    }
+    if (definition.repeatable) {
+        return specified && Array.isArray(value) && value.length > 0;
+    }
+    return specified && value != null;
+}
+// ─── Derive Policy ─────────────────────────────────────────────
+export function derivePolicy(input) {
+    const sideEffects = new Set();
+    const reads = [];
+    const writes = [];
+    const networkEffects = [];
+    const riskLevels = [];
+    let executionMode;
+    let explicitConfirmation;
+    if (input.commandEffects) {
+        const ce = input.commandEffects;
+        riskLevels.push(ce.riskLevel ?? "low");
+        if (ce.writes) {
+            sideEffects.add("file_write");
+            for (const w of ce.writes) {
+                writes.push({
+                    kind: "semantic",
+                    target: w.target,
+                    description: w.description,
+                    overwrite: w.overwrite,
+                    destructive: w.destructive,
+                    ...(w.idempotent !== undefined ? { idempotent: w.idempotent } : {}),
+                    ...(w.idempotencyKey ? { idempotencyKey: w.idempotencyKey } : {}),
+                    ...(w.idempotentNote ? { idempotentNote: w.idempotentNote } : {}),
+                    source: `command:${input.commandId}`,
+                });
+            }
+        }
+        if (ce.reads) {
+            for (const r of ce.reads) {
+                reads.push({
+                    kind: "semantic",
+                    target: r.target,
+                    description: r.description,
+                    source: `command:${input.commandId}`,
+                });
+            }
+        }
+        if (ce.network) {
+            sideEffects.add("network");
+            if (typeof ce.network === "object") {
+                networkEffects.push({
+                    ...(ce.network.description ? { description: ce.network.description } : {}),
+                    ...(ce.network.domains ? { domains: ce.network.domains } : {}),
+                    ...(ce.network.idempotent !== undefined ? { idempotent: ce.network.idempotent } : {}),
+                    ...(ce.network.idempotencyKey ? { idempotencyKey: ce.network.idempotencyKey } : {}),
+                    ...(ce.network.idempotentNote ? { idempotentNote: ce.network.idempotentNote } : {}),
+                    source: `command:${input.commandId}`,
+                });
+            }
+        }
+        if (ce.executionMode) {
+            executionMode = ce.executionMode;
+        }
+        if (ce.requiresConfirmation !== undefined) {
+            explicitConfirmation = ce.requiresConfirmation;
+        }
+    }
+    for (const [optName, optInput] of Object.entries(input.options)) {
+        const { definition, value, specified } = optInput;
+        const active = isOptionActive(definition, value, specified);
+        if (!active)
+            continue;
+        if (definition.file) {
+            const filePath = typeof value === "string" ? value : undefined;
+            const mode = definition.file.mode;
+            if (mode === "read" || mode === "readWrite") {
+                reads.push({
+                    kind: "option-file",
+                    option: optName,
+                    path: filePath,
+                    source: `option:${optName}`,
+                });
+            }
+            if (mode === "write" || mode === "append" || mode === "readWrite") {
+                sideEffects.add("file_write");
+                writes.push({
+                    kind: "option-file",
+                    option: optName,
+                    path: filePath,
+                    mode,
+                    source: `option:${optName}`,
+                });
+            }
+        }
+        if (definition.effects) {
+            const eff = definition.effects;
+            riskLevels.push(eff.riskLevel ?? "low");
+            if (eff.writes) {
+                sideEffects.add("file_write");
+                for (const w of eff.writes) {
+                    writes.push({
+                        kind: "semantic",
+                        target: w.target,
+                        description: w.description,
+                        overwrite: w.overwrite,
+                        destructive: w.destructive,
+                        ...(w.idempotent !== undefined ? { idempotent: w.idempotent } : {}),
+                        ...(w.idempotencyKey ? { idempotencyKey: w.idempotencyKey } : {}),
+                        ...(w.idempotentNote ? { idempotentNote: w.idempotentNote } : {}),
+                        source: `option:${optName}`,
+                    });
+                }
+            }
+            if (eff.reads) {
+                for (const r of eff.reads) {
+                    reads.push({
+                        kind: "semantic",
+                        target: r.target,
+                        description: r.description,
+                        source: `option:${optName}`,
+                    });
+                }
+            }
+            if (eff.network) {
+                sideEffects.add("network");
+                if (typeof eff.network === "object") {
+                    networkEffects.push({
+                        ...(eff.network.description ? { description: eff.network.description } : {}),
+                        ...(eff.network.domains ? { domains: eff.network.domains } : {}),
+                        ...(eff.network.idempotent !== undefined ? { idempotent: eff.network.idempotent } : {}),
+                        ...(eff.network.idempotencyKey ? { idempotencyKey: eff.network.idempotencyKey } : {}),
+                        ...(eff.network.idempotentNote ? { idempotentNote: eff.network.idempotentNote } : {}),
+                        source: `option:${optName}`,
+                    });
+                }
+            }
+            if (eff.executionMode && !executionMode) {
+                executionMode = eff.executionMode;
+            }
+            if (eff.requiresConfirmation !== undefined && explicitConfirmation === undefined) {
+                explicitConfirmation = eff.requiresConfirmation;
+            }
+        }
+    }
+    const finalRiskLevel = riskLevels.length > 0 ? maxRiskLevel(...riskLevels) : "low";
+    const requiresConfirmation = explicitConfirmation ??
+        (finalRiskLevel === "high" || finalRiskLevel === "critical");
+    let requiresSecrets;
+    if (input.env) {
+        const secrets = [];
+        for (const [envName, envVar] of Object.entries(input.env)) {
+            if (envVar.sensitive) {
+                secrets.push(envName);
+            }
+        }
+        if (secrets.length > 0) {
+            requiresSecrets = secrets;
+        }
+    }
+    const semanticWrites = writes.filter((w) => w.kind === "semantic");
+    const idempotent = semanticWrites.every((w) => w.idempotent === true) &&
+        networkEffects.every((n) => n.idempotent === true);
+    return {
+        riskLevel: finalRiskLevel,
+        requiresConfirmation,
+        idempotent,
+        sideEffects: [...sideEffects],
+        reads,
+        writes,
+        ...(networkEffects.length > 0 ? { network: networkEffects } : {}),
+        ...(executionMode ? { executionMode } : {}),
+        ...(requiresSecrets ? { requiresSecrets } : {}),
+    };
+}
+//# sourceMappingURL=policy-runtime.js.map

package/dist/generated/policy-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-runtime.js","sourceRoot":"","sources":["../../src/generated/policy-runtime.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,yEAAyE;AA2HzE,mEAAmE;AAEnE,MAAM,UAAU,GAA8B;IAC5C,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,SAAS,YAAY,CAAC,GAAG,MAAmB;IAC1C,IAAI,GAAG,GAAc,KAAK,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,GAAG,GAAG,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mEAAmE;AAEnE,MAAM,UAAU,cAAc,CAC5B,UAAkB,EAClB,KAAc,EACd,SAAkB;IAElB,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC;IAE3C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,KAAK,KAAK,IAAI,CAAC;IACxB,CAAC;IAED,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,OAAO,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,SAAS,IAAI,KAAK,IAAI,IAAI,CAAC;AACpC,CAAC;AAED,kEAAkE;AAElE,MAAM,UAAU,YAAY,CAAC,KAA4B;IACvD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,MAAM,cAAc,GAA2B,EAAE,CAAC;IAClD,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,aAAwC,CAAC;IAC7C,IAAI,oBAAyC,CAAC;IAE9C,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,KAAK,CAAC,cAAc,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;QAEvC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;YACd,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjE,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjE,MAAM,EAAE,WAAW,KAAK,CAAC,SAAS,EAAE;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,MAAM,EAAE,WAAW,KAAK,CAAC,SAAS,EAAE;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YACf,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC3B,IAAI,OAAO,EAAE,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACnC,cAAc,CAAC,IAAI,CAAC;oBAClB,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1E,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9D,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrF,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnF,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnF,MAAM,EAAE,WAAW,KAAK,CAAC,SAAS,EAAE;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC,aAAa,EAAE,CAAC;YACrB,aAAa,GAAG,EAAE,CAAC,aAAa,CAAC;QACnC,CAAC;QAED,IAAI,EAAE,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAC1C,oBAAoB,GAAG,EAAE,CAAC,oBAAoB,CAAC;QACjD,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;QAClD,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM;YAAE,SAAS;QAEtB,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,MAAM,QAAQ,GACZ,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAChD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAElC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC5C,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,QAAQ;oBACd,MAAM,EAAE,UAAU,OAAO,EAAE;iBAC5B,CAAC,CAAC;YACL,CAAC;YACD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBAClE,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,QAAQ;oBACd,IAAI;oBACJ,MAAM,EAAE,UAAU,OAAO,EAAE;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;YAExC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBACf,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAC9B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;oBAC3B,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,UAAU;wBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;wBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnE,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjE,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjE,MAAM,EAAE,UAAU,OAAO,EAAE;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACd,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;oBAC1B,KAAK,CAAC,IAAI,CAAC;wBACT,IAAI,EAAE,UAAU;wBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,MAAM,EAAE,UAAU,OAAO,EAAE;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAChB,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC3B,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACpC,cAAc,CAAC,IAAI,CAAC;wBAClB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5E,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAChE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvF,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACrF,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACrF,MAAM,EAAE,UAAU,OAAO,EAAE;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,GAAG,CAAC,aAAa,IAAI,CAAC,aAAa,EAAE,CAAC;gBACxC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;YACpC,CAAC;YAED,IAAI,GAAG,CAAC,oBAAoB,KAAK,SAAS,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;gBACjF,oBAAoB,GAAG,GAAG,CAAC,oBAAoB,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAClB,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAE9D,MAAM,oBAAoB,GACxB,oBAAoB;QACpB,CAAC,cAAc,KAAK,MAAM,IAAI,cAAc,KAAK,UAAU,CAAC,CAAC;IAE/D,IAAI,eAAqC,CAAC;IAC1C,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,eAAe,GAAG,OAAO,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IACnE,MAAM,UAAU,GACd,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC;QAClD,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;IAErD,OAAO;QACL,SAAS,EAAE,cAAc;QACzB,oBAAoB;QACpB,UAAU;QACV,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;QAC7B,KAAK;QACL,MAAM;QACN,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC;AACJ,CAAC"}

package/dist/generated/policy.d.ts

@@ -0,0 +1,146 @@
+import type { DerivedPolicy, IntrospectionResult } from "./policy-runtime.js";
+export type { DerivedPolicy, IntrospectionResult };
+export declare const commandDefinitions: {
+    readonly validate: {
+        readonly effects: {
+            readonly riskLevel: "low";
+            readonly reads: readonly [{
+                readonly target: "artifact-definitions";
+                readonly description: "artifact-contracts.yaml and config";
+            }, {
+                readonly target: "repository-files";
+                readonly description: "All tracked files via git ls-files. Only read when --check-files is specified.";
+            }];
+            readonly executionMode: "normal";
+        };
+        readonly options: readonly [{
+            readonly name: "config";
+        }, {
+            readonly name: "check-files";
+            readonly schema: {
+                readonly type: "boolean";
+            };
+        }];
+    };
+    readonly resolve: {
+        readonly effects: {
+            readonly riskLevel: "low";
+            readonly reads: readonly [{
+                readonly target: "artifact-definitions";
+                readonly description: "artifact-contracts.yaml and config";
+            }];
+            readonly executionMode: "normal";
+        };
+        readonly options: readonly [{
+            readonly name: "config";
+        }, {
+            readonly name: "format";
+            readonly schema: {
+                readonly type: "string";
+                readonly enum: readonly ["yaml", "json"];
+            };
+        }];
+    };
+    readonly list: {
+        readonly effects: {
+            readonly riskLevel: "low";
+            readonly reads: readonly [{
+                readonly target: "artifact-definitions";
+                readonly description: "artifact-contracts.yaml and config";
+            }];
+            readonly executionMode: "normal";
+        };
+        readonly options: readonly [{
+            readonly name: "config";
+        }, {
+            readonly name: "authority";
+            readonly schema: {
+                readonly type: "string";
+                readonly enum: readonly ["canonical", "derived", "generated", "control"];
+            };
+        }, {
+            readonly name: "path";
+        }, {
+            readonly name: "format";
+            readonly schema: {
+                readonly type: "string";
+                readonly enum: readonly ["text", "json", "yaml"];
+            };
+        }];
+    };
+    readonly explain: {
+        readonly effects: {
+            readonly riskLevel: "low";
+            readonly reads: readonly [{
+                readonly target: "artifact-definitions";
+                readonly description: "artifact-contracts.yaml and config";
+            }];
+            readonly executionMode: "normal";
+        };
+        readonly options: readonly [{
+            readonly name: "config";
+        }, {
+            readonly name: "format";
+            readonly schema: {
+                readonly type: "string";
+                readonly enum: readonly ["text", "json", "yaml"];
+            };
+        }];
+    };
+    readonly audit: {
+        readonly effects: {
+            readonly riskLevel: "medium";
+            readonly reads: readonly [{
+                readonly target: "artifact-definitions";
+                readonly description: "artifact-contracts.yaml and config";
+            }];
+            readonly writes: readonly [{
+                readonly target: "output-file";
+                readonly description: "Written only when --output is specified";
+                readonly overwrite: true;
+            }];
+            readonly network: {
+                readonly description: "LLM API calls to configured provider";
+                readonly idempotent: false;
+            };
+            readonly executionMode: "normal";
+        };
+        readonly options: readonly [{
+            readonly name: "config";
+        }, {
+            readonly name: "adapter";
+            readonly schema: {
+                readonly type: "string";
+                readonly enum: readonly ["mock", "cursor", "openai", "claude", "gemini"];
+            };
+        }, {
+            readonly name: "model";
+        }, {
+            readonly name: "show-prompt";
+            readonly schema: {
+                readonly type: "boolean";
+            };
+        }, {
+            readonly name: "dry-run";
+            readonly schema: {
+                readonly type: "boolean";
+            };
+        }, {
+            readonly name: "fail-on";
+            readonly schema: {
+                readonly type: "string";
+                readonly enum: readonly ["info", "warning", "error", "critical"];
+            };
+        }, {
+            readonly name: "output";
+        }, {
+            readonly name: "report-format";
+            readonly schema: {
+                readonly type: "string";
+                readonly enum: readonly ["text", "json", "yaml"];
+            };
+        }];
+    };
+};
+export declare function deriveCommandPolicy(commandId: string, optionValues: Record<string, unknown>): IntrospectionResult;
+//# sourceMappingURL=policy.d.ts.map

package/dist/generated/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/generated/policy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE9E,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,CAAC;AAEnD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgNrB,CAAC;AAEX,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,mBAAmB,CA0BrB"}