daystrom 0.1.0

package/dist/cli/commands/resume.js

@@ -0,0 +1,95 @@
+import { SdkManagementService } from '../../airs/management.js';
+import { AirsScanService } from '../../airs/scanner.js';
+import { loadConfig } from '../../config/loader.js';
+import { runLoop } from '../../core/loop.js';
+import { createLlmProvider } from '../../llm/provider.js';
+import { LangChainLlmService } from '../../llm/service.js';
+import { JsonFileStore } from '../../persistence/store.js';
+import { renderAnalysis, renderError, renderHeader, renderIterationStart, renderIterationSummary, renderLoopComplete, renderMetrics, renderTestProgress, renderTopic, } from '../renderer.js';
+export function registerResumeCommand(program) {
+    program
+        .command('resume <runId>')
+        .description('Resume a paused or failed run')
+        .option('--max-iterations <n>', 'Additional iterations to run', '10')
+        .action(async (runId, opts) => {
+        try {
+            renderHeader();
+            const config = await loadConfig();
+            const store = new JsonFileStore(config.dataDir);
+            const existingRun = await store.load(runId);
+            if (!existingRun) {
+                renderError(`Run ${runId} not found`);
+                process.exit(1);
+            }
+            if (existingRun.status === 'completed') {
+                renderError('Run is already completed');
+                process.exit(1);
+            }
+            const additionalIterations = Number.parseInt(opts.maxIterations, 10);
+            // Resume with updated max iterations
+            const userInput = {
+                ...existingRun.userInput,
+                maxIterations: existingRun.currentIteration + additionalIterations,
+            };
+            const model = await createLlmProvider({
+                provider: config.llmProvider,
+                model: config.llmModel,
+                anthropicApiKey: config.anthropicApiKey,
+                googleApiKey: config.googleApiKey,
+                googleCloudProject: config.googleCloudProject,
+                googleCloudLocation: config.googleCloudLocation,
+                awsRegion: config.awsRegion,
+                awsAccessKeyId: config.awsAccessKeyId,
+                awsSecretAccessKey: config.awsSecretAccessKey,
+            });
+            const llm = new LangChainLlmService(model);
+            if (!config.airsApiKey)
+                throw new Error('PANW_AI_SEC_API_KEY is required');
+            const scanner = new AirsScanService(config.airsApiKey);
+            const management = new SdkManagementService({
+                clientId: config.mgmtClientId,
+                clientSecret: config.mgmtClientSecret,
+                tsgId: config.mgmtTsgId,
+                apiEndpoint: config.mgmtEndpoint,
+                tokenEndpoint: config.mgmtTokenEndpoint,
+            });
+            console.log(`  Resuming run ${runId} from iteration ${existingRun.currentIteration}...`);
+            for await (const event of runLoop(userInput, {
+                llm,
+                management,
+                scanner,
+                propagationDelayMs: config.propagationDelayMs,
+            })) {
+                switch (event.type) {
+                    case 'iteration:start':
+                        renderIterationStart(event.iteration);
+                        break;
+                    case 'generate:complete':
+                        renderTopic(event.topic);
+                        break;
+                    case 'test:progress':
+                        renderTestProgress(event.completed, event.total);
+                        break;
+                    case 'evaluate:complete':
+                        renderMetrics(event.metrics);
+                        break;
+                    case 'analyze:complete':
+                        renderAnalysis(event.analysis);
+                        break;
+                    case 'iteration:complete':
+                        renderIterationSummary(event.result);
+                        break;
+                    case 'loop:complete':
+                        await store.save(event.runState);
+                        renderLoopComplete(event.runState);
+                        break;
+                }
+            }
+        }
+        catch (err) {
+            renderError(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=resume.js.map

package/dist/cli/commands/resume.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.js","sourceRoot":"","sources":["../../../src/cli/commands/resume.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EACL,cAAc,EACd,WAAW,EACX,YAAY,EACZ,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAExB,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,sBAAsB,EAAE,8BAA8B,EAAE,IAAI,CAAC;SACpE,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,IAAI,EAAE,EAAE;QACpC,IAAI,CAAC;YACH,YAAY,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAE5C,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,WAAW,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACvC,WAAW,CAAC,0BAA0B,CAAC,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,MAAM,oBAAoB,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YAErE,qCAAqC;YACrC,MAAM,SAAS,GAAG;gBAChB,GAAG,WAAW,CAAC,SAAS;gBACxB,aAAa,EAAE,WAAW,CAAC,gBAAgB,GAAG,oBAAoB;aACnE,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC;gBACpC,QAAQ,EAAE,MAAM,CAAC,WAAW;gBAC5B,KAAK,EAAE,MAAM,CAAC,QAAQ;gBACtB,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;gBAC7C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;gBAC/C,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;aAC9C,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAC3E,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACvD,MAAM,UAAU,GAAG,IAAI,oBAAoB,CAAC;gBAC1C,QAAQ,EAAE,MAAM,CAAC,YAAY;gBAC7B,YAAY,EAAE,MAAM,CAAC,gBAAgB;gBACrC,KAAK,EAAE,MAAM,CAAC,SAAS;gBACvB,WAAW,EAAE,MAAM,CAAC,YAAY;gBAChC,aAAa,EAAE,MAAM,CAAC,iBAAiB;aACxC,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,mBAAmB,WAAW,CAAC,gBAAgB,KAAK,CAAC,CAAC;YAEzF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,SAAS,EAAE;gBAC3C,GAAG;gBACH,UAAU;gBACV,OAAO;gBACP,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;aAC9C,CAAC,EAAE,CAAC;gBACH,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;oBACnB,KAAK,iBAAiB;wBACpB,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;wBACtC,MAAM;oBACR,KAAK,mBAAmB;wBACtB,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;wBACzB,MAAM;oBACR,KAAK,eAAe;wBAClB,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;wBACjD,MAAM;oBACR,KAAK,mBAAmB;wBACtB,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;wBAC7B,MAAM;oBACR,KAAK,kBAAkB;wBACrB,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;wBAC/B,MAAM;oBACR,KAAK,oBAAoB;wBACvB,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;wBACrC,MAAM;oBACR,KAAK,eAAe;wBAClB,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;wBACjC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;wBACnC,MAAM;gBACV,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AAEA,OAAO,eAAe,CAAC"}

package/dist/cli/index.js

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+import { Command } from 'commander';
+import { registerGenerateCommand } from './commands/generate.js';
+import { registerListCommand } from './commands/list.js';
+import { registerReportCommand } from './commands/report.js';
+import { registerResumeCommand } from './commands/resume.js';
+const program = new Command();
+program
+    .name('daystrom')
+    .description('Automated Prisma AIRS custom topic guardrail generator')
+    .version('0.1.0');
+registerGenerateCommand(program);
+registerResumeCommand(program);
+registerReportCommand(program);
+registerListCommand(program);
+program.parse();
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AAEA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,UAAU,CAAC;KAChB,WAAW,CAAC,wDAAwD,CAAC;KACrE,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACjC,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC/B,mBAAmB,CAAC,OAAO,CAAC,CAAC;AAE7B,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/cli/prompts.d.ts

@@ -0,0 +1,6 @@
+import type { LlmProvider } from '../config/schema.js';
+import type { UserInput } from '../core/types.js';
+export declare function collectUserInput(): Promise<UserInput>;
+export declare function selectLlmProvider(): Promise<LlmProvider>;
+export declare function confirmContinue(iteration: number, coverage: number): Promise<boolean>;
+//# sourceMappingURL=prompts.d.ts.map

package/dist/cli/prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../../src/cli/prompts.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,SAAS,CAAC,CA4D3D;AAED,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,WAAW,CAAC,CAY9D;AAED,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAK3F"}

package/dist/cli/prompts.js

@@ -0,0 +1,72 @@
+import { confirm, input, number, select } from '@inquirer/prompts';
+export async function collectUserInput() {
+    const topicDescription = await input({
+        message: 'Describe the topic to create a guardrail for:',
+        validate: (v) => (v.trim().length > 0 ? true : 'Description is required'),
+    });
+    const intent = await select({
+        message: 'Should this topic be blocked or allowed?',
+        choices: [
+            { name: 'Block', value: 'block' },
+            { name: 'Allow', value: 'allow' },
+        ],
+    });
+    const profileName = await input({
+        message: 'AIRS security profile name:',
+        validate: (v) => (v.trim().length > 0 ? true : 'Profile name is required'),
+    });
+    const hasSeedExamples = await confirm({
+        message: 'Do you have seed examples to provide?',
+        default: false,
+    });
+    let seedExamples;
+    if (hasSeedExamples) {
+        const examplesRaw = await input({
+            message: 'Enter examples (one per line, empty line to finish):\nPaste examples separated by newlines:',
+        });
+        seedExamples = examplesRaw
+            .split('\n')
+            .map((s) => s.trim())
+            .filter((s) => s.length > 0);
+    }
+    const maxIterations = (await number({
+        message: 'Max iterations (default 20):',
+        default: 20,
+        min: 1,
+        max: 100,
+    })) ?? 20;
+    const targetCoverageRaw = (await number({
+        message: 'Target coverage % (default 90):',
+        default: 90,
+        min: 10,
+        max: 100,
+    })) ?? 90;
+    return {
+        topicDescription,
+        intent,
+        profileName,
+        seedExamples,
+        maxIterations,
+        targetCoverage: targetCoverageRaw / 100,
+    };
+}
+export async function selectLlmProvider() {
+    return select({
+        message: 'Select LLM provider:',
+        choices: [
+            { name: 'Claude API', value: 'claude-api' },
+            { name: 'Claude (Vertex AI)', value: 'claude-vertex' },
+            { name: 'Claude (Bedrock)', value: 'claude-bedrock' },
+            { name: 'Gemini API', value: 'gemini-api' },
+            { name: 'Gemini (Vertex AI)', value: 'gemini-vertex' },
+            { name: 'Gemini (Bedrock)', value: 'gemini-bedrock' },
+        ],
+    });
+}
+export async function confirmContinue(iteration, coverage) {
+    return confirm({
+        message: `Iteration ${iteration} complete (coverage: ${(coverage * 100).toFixed(1)}%). Continue refining?`,
+        default: true,
+    });
+}
+//# sourceMappingURL=prompts.js.map

package/dist/cli/prompts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.js","sourceRoot":"","sources":["../../src/cli/prompts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAInE,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC;QACnC,OAAO,EAAE,+CAA+C;QACxD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC;KAC1E,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAoB;QAC7C,OAAO,EAAE,0CAA0C;QACnD,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;YACjC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;SAClC;KACF,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC;QAC9B,OAAO,EAAE,6BAA6B;QACtC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,CAAC;KAC3E,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC;QACpC,OAAO,EAAE,uCAAuC;QAChD,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IAEH,IAAI,YAAkC,CAAC;IACvC,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC;YAC9B,OAAO,EACL,6FAA6F;SAChG,CAAC,CAAC;QACH,YAAY,GAAG,WAAW;aACvB,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,aAAa,GACjB,CAAC,MAAM,MAAM,CAAC;QACZ,OAAO,EAAE,8BAA8B;QACvC,OAAO,EAAE,EAAE;QACX,GAAG,EAAE,CAAC;QACN,GAAG,EAAE,GAAG;KACT,CAAC,CAAC,IAAI,EAAE,CAAC;IAEZ,MAAM,iBAAiB,GACrB,CAAC,MAAM,MAAM,CAAC;QACZ,OAAO,EAAE,iCAAiC;QAC1C,OAAO,EAAE,EAAE;QACX,GAAG,EAAE,EAAE;QACP,GAAG,EAAE,GAAG;KACT,CAAC,CAAC,IAAI,EAAE,CAAC;IAEZ,OAAO;QACL,gBAAgB;QAChB,MAAM;QACN,WAAW;QACX,YAAY;QACZ,aAAa;QACb,cAAc,EAAE,iBAAiB,GAAG,GAAG;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,OAAO,MAAM,CAAc;QACzB,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EAAE;YACP,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE;YAC3C,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,eAAe,EAAE;YACtD,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,gBAAgB,EAAE;YACrD,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE;YAC3C,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,eAAe,EAAE;YACtD,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,gBAAgB,EAAE;SACtD;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB,EAAE,QAAgB;IACvE,OAAO,OAAO,CAAC;QACb,OAAO,EAAE,aAAa,SAAS,wBAAwB,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;QAC1G,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/renderer.d.ts

@@ -0,0 +1,15 @@
+import type { AnalysisReport, CustomTopic, EfficacyMetrics, IterationResult, RunState } from '../core/types.js';
+import type { RunStateSummary } from '../persistence/types.js';
+export declare function renderHeader(): void;
+export declare function renderIterationStart(iteration: number): void;
+export declare function renderTopic(topic: CustomTopic): void;
+export declare function renderTestProgress(completed: number, total: number): void;
+export declare function renderMetrics(metrics: EfficacyMetrics): void;
+export declare function renderAnalysis(analysis: AnalysisReport): void;
+export declare function renderLoopComplete(runState: RunState): void;
+export declare function renderRunList(runs: RunStateSummary[]): void;
+export declare function renderError(message: string): void;
+export declare function renderIterationSummary(result: IterationResult): void;
+export declare function renderMemoryLoaded(learningCount: number): void;
+export declare function renderMemoryExtracted(learningCount: number): void;
+//# sourceMappingURL=renderer.d.ts.map

package/dist/cli/renderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderer.d.ts","sourceRoot":"","sources":["../../src/cli/renderer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,cAAc,EACd,WAAW,EACX,eAAe,EACf,eAAe,EACf,QAAQ,EACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,wBAAgB,YAAY,IAAI,IAAI,CAGnC;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAE5D;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAQpD;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAKzE;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAe5D;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAe7D;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAW3D;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,IAAI,CAsB3D;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAEjD;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAUpE;AAED,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAM9D;AAED,wBAAgB,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAEjE"}

package/dist/cli/renderer.js

@@ -0,0 +1,103 @@
+import chalk from 'chalk';
+export function renderHeader() {
+    console.log(chalk.bold.cyan('\n  Prisma AIRS Guardrail Generator'));
+    console.log(chalk.dim('  Iterative custom topic refinement\n'));
+}
+export function renderIterationStart(iteration) {
+    console.log(chalk.bold(`\n━━━ Iteration ${iteration} ━━━`));
+}
+export function renderTopic(topic) {
+    console.log(chalk.bold('  Topic:'));
+    console.log(`    Name: ${chalk.white(topic.name)}`);
+    console.log(`    Desc: ${chalk.white(topic.description)}`);
+    console.log('    Examples:');
+    for (const ex of topic.examples) {
+        console.log(`      ${chalk.dim('•')} ${ex}`);
+    }
+}
+export function renderTestProgress(completed, total) {
+    const pct = Math.round((completed / total) * 100);
+    const bar = '█'.repeat(Math.round(pct / 5)) + '░'.repeat(20 - Math.round(pct / 5));
+    process.stdout.write(`\r  Scanning: ${bar} ${pct}% (${completed}/${total})`);
+    if (completed === total)
+        console.log();
+}
+export function renderMetrics(metrics) {
+    const coverageColor = metrics.coverage >= 0.9 ? chalk.green : metrics.coverage >= 0.7 ? chalk.yellow : chalk.red;
+    console.log(chalk.bold('\n  Metrics:'));
+    console.log(`    Coverage:  ${coverageColor(`${(metrics.coverage * 100).toFixed(1)}%`)}`);
+    console.log(`    Accuracy:  ${(metrics.accuracy * 100).toFixed(1)}%`);
+    console.log(`    TPR:       ${(metrics.truePositiveRate * 100).toFixed(1)}%`);
+    console.log(`    TNR:       ${(metrics.trueNegativeRate * 100).toFixed(1)}%`);
+    console.log(`    F1 Score:  ${metrics.f1Score.toFixed(3)}`);
+    console.log(chalk.dim(`    TP: ${metrics.truePositives}  TN: ${metrics.trueNegatives}  FP: ${metrics.falsePositives}  FN: ${metrics.falseNegatives}`));
+}
+export function renderAnalysis(analysis) {
+    console.log(chalk.bold('\n  Analysis:'));
+    console.log(`    ${analysis.summary}`);
+    if (analysis.falsePositivePatterns.length > 0) {
+        console.log(chalk.yellow('    FP patterns:'));
+        for (const p of analysis.falsePositivePatterns) {
+            console.log(`      ${chalk.dim('•')} ${p}`);
+        }
+    }
+    if (analysis.falseNegativePatterns.length > 0) {
+        console.log(chalk.red('    FN patterns:'));
+        for (const p of analysis.falseNegativePatterns) {
+            console.log(`      ${chalk.dim('•')} ${p}`);
+        }
+    }
+}
+export function renderLoopComplete(runState) {
+    const best = runState.iterations[runState.bestIteration - 1];
+    console.log(chalk.bold.green('\n━━━ Complete ━━━'));
+    console.log(`  Best iteration: ${runState.bestIteration} (coverage: ${(runState.bestCoverage * 100).toFixed(1)}%)`);
+    console.log(`  Total iterations: ${runState.iterations.length}`);
+    if (best) {
+        renderTopic(best.topic);
+    }
+    console.log(`\n  Run ID: ${chalk.dim(runState.id)}\n`);
+}
+export function renderRunList(runs) {
+    if (runs.length === 0) {
+        console.log(chalk.dim('  No saved runs found.\n'));
+        return;
+    }
+    console.log(chalk.bold('\n  Saved Runs:\n'));
+    for (const run of runs) {
+        const statusColor = run.status === 'completed'
+            ? chalk.green
+            : run.status === 'running'
+                ? chalk.blue
+                : run.status === 'paused'
+                    ? chalk.yellow
+                    : chalk.red;
+        console.log(`  ${chalk.dim(run.id)}`);
+        console.log(`    Status: ${statusColor(run.status)}  Coverage: ${(run.bestCoverage * 100).toFixed(1)}%  Iterations: ${run.currentIteration}`);
+        console.log(`    Topic: ${run.topicDescription}`);
+        console.log(`    Created: ${run.createdAt}\n`);
+    }
+}
+export function renderError(message) {
+    console.error(chalk.red(`\n  Error: ${message}\n`));
+}
+export function renderIterationSummary(result) {
+    const coverageColor = result.metrics.coverage >= 0.9
+        ? chalk.green
+        : result.metrics.coverage >= 0.7
+            ? chalk.yellow
+            : chalk.red;
+    console.log(`  ${chalk.dim(`[${result.durationMs}ms]`)} Coverage: ${coverageColor(`${(result.metrics.coverage * 100).toFixed(1)}%`)} | Accuracy: ${(result.metrics.accuracy * 100).toFixed(1)}%`);
+}
+export function renderMemoryLoaded(learningCount) {
+    if (learningCount > 0) {
+        console.log(chalk.cyan(`  Memory: loaded ${learningCount} learnings from previous runs`));
+    }
+    else {
+        console.log(chalk.dim('  Memory: no previous learnings found'));
+    }
+}
+export function renderMemoryExtracted(learningCount) {
+    console.log(chalk.cyan(`  Memory: extracted ${learningCount} learnings from this run`));
+}
+//# sourceMappingURL=renderer.js.map

package/dist/cli/renderer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderer.js","sourceRoot":"","sources":["../../src/cli/renderer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAU1B,MAAM,UAAU,YAAY;IAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,SAAS,MAAM,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAkB;IAC5C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7B,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,KAAa;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACnF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,IAAI,GAAG,MAAM,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC;IAC7E,IAAI,SAAS,KAAK,KAAK;QAAE,OAAO,CAAC,GAAG,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAwB;IACpD,MAAM,aAAa,GACjB,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;IAE7F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,kBAAkB,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1F,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,gBAAgB,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,gBAAgB,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,kBAAkB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,WAAW,OAAO,CAAC,aAAa,SAAS,OAAO,CAAC,aAAa,SAAS,OAAO,CAAC,cAAc,SAAS,OAAO,CAAC,cAAc,EAAE,CAC/H,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAwB;IACrD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,OAAO,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,qBAAqB,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,qBAAqB,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAkB;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CACT,qBAAqB,QAAQ,CAAC,aAAa,eAAe,CAAC,QAAQ,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACvG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,uBAAuB,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IACjE,IAAI,IAAI,EAAE,CAAC;QACT,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAuB;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,WAAW,GACf,GAAG,CAAC,MAAM,KAAK,WAAW;YACxB,CAAC,CAAC,KAAK,CAAC,KAAK;YACb,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS;gBACxB,CAAC,CAAC,KAAK,CAAC,IAAI;gBACZ,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ;oBACvB,CAAC,CAAC,KAAK,CAAC,MAAM;oBACd,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CACT,eAAe,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,GAAG,CAAC,gBAAgB,EAAE,CACjI,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,OAAO,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAuB;IAC5D,MAAM,aAAa,GACjB,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG;QAC5B,CAAC,CAAC,KAAK,CAAC,KAAK;QACb,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG;YAC9B,CAAC,CAAC,KAAK,CAAC,MAAM;YACd,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;IAClB,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,cAAc,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CACrL,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,aAAqB;IACtD,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,aAAa,+BAA+B,CAAC,CAAC,CAAC;IAC5F,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,aAAqB;IACzD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,aAAa,0BAA0B,CAAC,CAAC,CAAC;AAC1F,CAAC"}

package/dist/config/loader.d.ts

@@ -0,0 +1,3 @@
+import { type Config } from './schema.js';
+export declare function loadConfig(cliOverrides?: Record<string, unknown>, configFilePath?: string): Promise<Config>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/config/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,MAAM,EAAgB,MAAM,aAAa,CAAC;AA8CxD,wBAAsB,UAAU,CAC9B,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAC1C,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,MAAM,CAAC,CAmBjB"}

package/dist/config/loader.js

@@ -0,0 +1,63 @@
+import { readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { ConfigSchema } from './schema.js';
+function expandHome(p) {
+    return p.startsWith('~') ? join(homedir(), p.slice(1)) : p;
+}
+function fromEnv() {
+    const env = process.env;
+    return {
+        llmProvider: env.LLM_PROVIDER,
+        llmModel: env.LLM_MODEL,
+        anthropicApiKey: env.ANTHROPIC_API_KEY,
+        googleApiKey: env.GOOGLE_API_KEY,
+        googleCloudProject: env.GOOGLE_CLOUD_PROJECT,
+        googleCloudLocation: env.GOOGLE_CLOUD_LOCATION,
+        awsRegion: env.AWS_REGION,
+        awsAccessKeyId: env.AWS_ACCESS_KEY_ID,
+        awsSecretAccessKey: env.AWS_SECRET_ACCESS_KEY,
+        airsApiKey: env.PANW_AI_SEC_API_KEY,
+        mgmtClientId: env.PANW_MGMT_CLIENT_ID,
+        mgmtClientSecret: env.PANW_MGMT_CLIENT_SECRET,
+        mgmtTsgId: env.PANW_MGMT_TSG_ID,
+        mgmtEndpoint: env.PANW_MGMT_ENDPOINT,
+        mgmtTokenEndpoint: env.PANW_MGMT_TOKEN_ENDPOINT,
+        scanConcurrency: env.SCAN_CONCURRENCY,
+        propagationDelayMs: env.PROPAGATION_DELAY_MS,
+        dataDir: env.DATA_DIR,
+        memoryEnabled: env.MEMORY_ENABLED,
+        memoryDir: env.MEMORY_DIR,
+        maxMemoryChars: env.MAX_MEMORY_CHARS,
+    };
+}
+async function fromFile(path) {
+    try {
+        const data = await readFile(path, 'utf-8');
+        return JSON.parse(data);
+    }
+    catch {
+        return {};
+    }
+}
+function stripUndefined(obj) {
+    return Object.fromEntries(Object.entries(obj).filter(([, v]) => v !== undefined && v !== ''));
+}
+export async function loadConfig(cliOverrides = {}, configFilePath) {
+    const filePath = configFilePath ?? join(homedir(), '.daystrom', 'config.json');
+    const fileConfig = await fromFile(filePath);
+    const envConfig = fromEnv();
+    // Priority: CLI > env > file > defaults
+    const merged = {
+        ...stripUndefined(fileConfig),
+        ...stripUndefined(envConfig),
+        ...stripUndefined(cliOverrides),
+    };
+    const config = ConfigSchema.parse(merged);
+    return {
+        ...config,
+        dataDir: expandHome(config.dataDir),
+        memoryDir: expandHome(config.memoryDir),
+    };
+}
+//# sourceMappingURL=loader.js.map

package/dist/config/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAe,YAAY,EAAE,MAAM,aAAa,CAAC;AAExD,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,OAAO;IACd,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,eAAe,EAAE,GAAG,CAAC,iBAAiB;QACtC,YAAY,EAAE,GAAG,CAAC,cAAc;QAChC,kBAAkB,EAAE,GAAG,CAAC,oBAAoB;QAC5C,mBAAmB,EAAE,GAAG,CAAC,qBAAqB;QAC9C,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,cAAc,EAAE,GAAG,CAAC,iBAAiB;QACrC,kBAAkB,EAAE,GAAG,CAAC,qBAAqB;QAC7C,UAAU,EAAE,GAAG,CAAC,mBAAmB;QACnC,YAAY,EAAE,GAAG,CAAC,mBAAmB;QACrC,gBAAgB,EAAE,GAAG,CAAC,uBAAuB;QAC7C,SAAS,EAAE,GAAG,CAAC,gBAAgB;QAC/B,YAAY,EAAE,GAAG,CAAC,kBAAkB;QACpC,iBAAiB,EAAE,GAAG,CAAC,wBAAwB;QAC/C,eAAe,EAAE,GAAG,CAAC,gBAAgB;QACrC,kBAAkB,EAAE,GAAG,CAAC,oBAAoB;QAC5C,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,cAAc,EAAE,GAAG,CAAC,gBAAgB;KACrC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAA4B;IAClD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,eAAwC,EAAE,EAC1C,cAAuB;IAEvB,MAAM,QAAQ,GAAG,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,OAAO,EAAE,CAAC;IAE5B,wCAAwC;IACxC,MAAM,MAAM,GAAG;QACb,GAAG,cAAc,CAAC,UAAU,CAAC;QAC7B,GAAG,cAAc,CAAC,SAAS,CAAC;QAC5B,GAAG,cAAc,CAAC,YAAY,CAAC;KAChC,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAE1C,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;QACnC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC;KACxC,CAAC;AACJ,CAAC"}

package/dist/config/schema.d.ts

@@ -0,0 +1,72 @@
+import { z } from 'zod';
+export declare const LlmProviderSchema: z.ZodEnum<["claude-api", "claude-vertex", "claude-bedrock", "gemini-api", "gemini-vertex", "gemini-bedrock"]>;
+export type LlmProvider = z.infer<typeof LlmProviderSchema>;
+export declare const ConfigSchema: z.ZodObject<{
+    llmProvider: z.ZodDefault<z.ZodEnum<["claude-api", "claude-vertex", "claude-bedrock", "gemini-api", "gemini-vertex", "gemini-bedrock"]>>;
+    llmModel: z.ZodOptional<z.ZodString>;
+    anthropicApiKey: z.ZodOptional<z.ZodString>;
+    googleApiKey: z.ZodOptional<z.ZodString>;
+    googleCloudProject: z.ZodOptional<z.ZodString>;
+    googleCloudLocation: z.ZodDefault<z.ZodString>;
+    awsRegion: z.ZodDefault<z.ZodString>;
+    awsAccessKeyId: z.ZodOptional<z.ZodString>;
+    awsSecretAccessKey: z.ZodOptional<z.ZodString>;
+    airsApiKey: z.ZodOptional<z.ZodString>;
+    mgmtClientId: z.ZodOptional<z.ZodString>;
+    mgmtClientSecret: z.ZodOptional<z.ZodString>;
+    mgmtTsgId: z.ZodOptional<z.ZodString>;
+    mgmtEndpoint: z.ZodOptional<z.ZodString>;
+    mgmtTokenEndpoint: z.ZodOptional<z.ZodString>;
+    scanConcurrency: z.ZodDefault<z.ZodNumber>;
+    propagationDelayMs: z.ZodDefault<z.ZodNumber>;
+    dataDir: z.ZodDefault<z.ZodString>;
+    memoryEnabled: z.ZodDefault<z.ZodBoolean>;
+    memoryDir: z.ZodDefault<z.ZodString>;
+    maxMemoryChars: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    llmProvider: "claude-api" | "claude-vertex" | "claude-bedrock" | "gemini-api" | "gemini-vertex" | "gemini-bedrock";
+    googleCloudLocation: string;
+    awsRegion: string;
+    scanConcurrency: number;
+    propagationDelayMs: number;
+    dataDir: string;
+    memoryEnabled: boolean;
+    memoryDir: string;
+    maxMemoryChars: number;
+    llmModel?: string | undefined;
+    anthropicApiKey?: string | undefined;
+    googleApiKey?: string | undefined;
+    googleCloudProject?: string | undefined;
+    awsAccessKeyId?: string | undefined;
+    awsSecretAccessKey?: string | undefined;
+    airsApiKey?: string | undefined;
+    mgmtClientId?: string | undefined;
+    mgmtClientSecret?: string | undefined;
+    mgmtTsgId?: string | undefined;
+    mgmtEndpoint?: string | undefined;
+    mgmtTokenEndpoint?: string | undefined;
+}, {
+    llmProvider?: "claude-api" | "claude-vertex" | "claude-bedrock" | "gemini-api" | "gemini-vertex" | "gemini-bedrock" | undefined;
+    llmModel?: string | undefined;
+    anthropicApiKey?: string | undefined;
+    googleApiKey?: string | undefined;
+    googleCloudProject?: string | undefined;
+    googleCloudLocation?: string | undefined;
+    awsRegion?: string | undefined;
+    awsAccessKeyId?: string | undefined;
+    awsSecretAccessKey?: string | undefined;
+    airsApiKey?: string | undefined;
+    mgmtClientId?: string | undefined;
+    mgmtClientSecret?: string | undefined;
+    mgmtTsgId?: string | undefined;
+    mgmtEndpoint?: string | undefined;
+    mgmtTokenEndpoint?: string | undefined;
+    scanConcurrency?: number | undefined;
+    propagationDelayMs?: number | undefined;
+    dataDir?: string | undefined;
+    memoryEnabled?: boolean | undefined;
+    memoryDir?: string | undefined;
+    maxMemoryChars?: number | undefined;
+}>;
+export type Config = z.infer<typeof ConfigSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/config/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,iBAAiB,+GAO5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwCvB,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/config/schema.js

@@ -0,0 +1,42 @@
+import { z } from 'zod';
+export const LlmProviderSchema = z.enum([
+    'claude-api',
+    'claude-vertex',
+    'claude-bedrock',
+    'gemini-api',
+    'gemini-vertex',
+    'gemini-bedrock',
+]);
+export const ConfigSchema = z.object({
+    llmProvider: LlmProviderSchema.default('claude-api'),
+    llmModel: z.string().optional(),
+    // Claude API
+    anthropicApiKey: z.string().optional(),
+    // Google AI
+    googleApiKey: z.string().optional(),
+    // Google Vertex
+    googleCloudProject: z.string().optional(),
+    googleCloudLocation: z.string().default('us-central1'),
+    // AWS Bedrock
+    awsRegion: z.string().default('us-east-1'),
+    awsAccessKeyId: z.string().optional(),
+    awsSecretAccessKey: z.string().optional(),
+    // AIRS Scanner
+    airsApiKey: z.string().optional(),
+    // AIRS Management (SDK v2 — OAuth2 client credentials)
+    mgmtClientId: z.string().optional(),
+    mgmtClientSecret: z.string().optional(),
+    mgmtTsgId: z.string().optional(),
+    mgmtEndpoint: z.string().optional(),
+    mgmtTokenEndpoint: z.string().optional(),
+    // Tuning
+    scanConcurrency: z.coerce.number().int().min(1).max(20).default(5),
+    propagationDelayMs: z.coerce.number().int().min(0).default(10000),
+    // Persistence
+    dataDir: z.string().default('~/.daystrom/runs'),
+    // Memory
+    memoryEnabled: z.coerce.boolean().default(true),
+    memoryDir: z.string().default('~/.daystrom/memory'),
+    maxMemoryChars: z.coerce.number().int().min(500).max(10000).default(3000),
+});
+//# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IACtC,YAAY;IACZ,eAAe;IACf,gBAAgB;IAChB,YAAY;IACZ,eAAe;IACf,gBAAgB;CACjB,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAE/B,aAAa;IACb,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEtC,YAAY;IACZ,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEnC,gBAAgB;IAChB,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC;IAEtD,cAAc;IACd,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IAC1C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEzC,eAAe;IACf,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEjC,uDAAuD;IACvD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAExC,SAAS;IACT,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAEjE,cAAc;IACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC;IAE/C,SAAS;IACT,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACnD,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CAC1E,CAAC,CAAC"}

package/dist/core/constraints.d.ts

@@ -0,0 +1,16 @@
+import type { CustomTopic } from './types.js';
+export interface ValidationError {
+    field: string;
+    message: string;
+}
+export declare const MAX_NAME_LENGTH = 100;
+export declare const MAX_DESCRIPTION_LENGTH = 250;
+export declare const MAX_EXAMPLE_LENGTH = 250;
+export declare const MAX_EXAMPLES = 5;
+export declare const MAX_COMBINED_LENGTH = 1000;
+export declare function validateName(name: string): ValidationError[];
+export declare function validateDescription(description: string): ValidationError[];
+export declare function validateExample(example: string, index: number): ValidationError[];
+export declare function validateExamples(examples: string[]): ValidationError[];
+export declare function validateTopic(topic: CustomTopic): ValidationError[];
+//# sourceMappingURL=constraints.d.ts.map

package/dist/core/constraints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constraints.d.ts","sourceRoot":"","sources":["../../src/core/constraints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,eAAe,MAAM,CAAC;AACnC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,eAAO,MAAM,YAAY,IAAI,CAAC;AAC9B,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAUxC,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAQ5D;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,eAAe,EAAE,CAW1E;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe,EAAE,CAWjF;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,eAAe,EAAE,CAYtE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,WAAW,GAAG,eAAe,EAAE,CAmBnE"}