open-multi-agent-kit 0.96.2 → 0.98.0

package/dist/core/tools/omp-pure-seams.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"omp-pure-seams.js","sourceRoot":"","sources":["../../../src/core/tools/omp-pure-seams.ts"],"names":[],"mappings":";;;;;;;;AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAKxD,sDAAsD;AACtD,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC9B,IAAI,CAAoB;IAEjC,YAAY,IAAuB,EAAE,OAAe,EAAE;QACrD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAAA,CACjB;CACD;AAaD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAwC,EAAW;IACpF,MAAM,MAAM,GAAuC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACtE,OAAO,MAAM,CAAC,aAAa,KAAK,GAAG,CAAC;AAAA,CACpC;AAED,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAClD,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AACjG,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAsB;IACzE,IAAI,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,kBAAkB,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACd,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAOD,SAAS,QAAQ,CAAC,MAAe,EAAoB;IACpD,OAAO,OAAO,MAAM,KAAK,UAAU,CAAC;AAAA,CACpC;AAED,SAAS,gBAAgB,CAAC,MAAe,EAA4B;IACpE,OAAO,OAAO,MAAM,KAAK,UAAU,CAAC;AAAA,CACpC;AAED,SAAS,QAAQ,CAAmB,MAAe,EAAE,KAA6B,EAAE,IAAY,EAAK;IACpG,IAAI,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACjC,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,qCAAqC,IAAI,EAAE,CAAC,CAAC;AAAA,CACrF;AAED,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AACjF,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;AAEzE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAGtC,EAAyB;IACzB,MAAM,GAAG,GAAuC,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAC5E,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,aAAa,CACtB,UAAU,EACV,2FAA2F,CAC3F,CAAC;IACH,CAAC;IAED,IAAI,SAAS,GAAuB,OAAO,EAAE,SAAS,IAAI,GAAG,CAAC,kBAAkB,CAAC;IACjF,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,aAAa,CACtB,kBAAkB,EAClB,mEAAmE,CACnE,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,aAAa,CACtB,kBAAkB,EAClB,mEAAmE,CACnE,CAAC;QACH,CAAC;QACD,SAAS,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,kCAAkC,SAAS,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;IAEvE,MAAM,OAAO,GAAG,MAAM,MAAM,kCAAC,OAAO,EAAC,CAAC;IACtC,MAAM,SAAS,GAAG,MAAM,MAAM,kCAAC,SAAS,EAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,MAAM,MAAM,kCAAC,WAAW,EAAC,CAAC;IAE9C,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,QAAQ,GAA8C;QAC3D,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC9B,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC;QACpC,CAAC,SAAS,CAAC,UAAU,EAAE,YAAY,CAAC;QACpC,CAAC,SAAS,CAAC,aAAa,EAAE,eAAe,CAAC;QAC1C,CAAC,WAAW,CAAC,qBAAqB,EAAE,uBAAuB,CAAC;QAC5D,CAAC,WAAW,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QAClD,CAAC,WAAW,CAAC,kBAAkB,EAAE,oBAAoB,CAAC;KACtD,CAAC;IACF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACvC,IAAI,OAAO,MAAM,KAAK,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,sCAAsC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,MAAM,GAAG,GAAiB;QACzB,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC;QAC1D,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC;QACnE,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC;QAClE,aAAa,EAAE,QAAQ,CAAC,SAAS,CAAC,aAAa,EAAE,QAAQ,EAAE,eAAe,CAAC;QAC3E,qBAAqB,EAAE,QAAQ,CAAC,WAAW,CAAC,qBAAqB,EAAE,QAAQ,EAAE,uBAAuB,CAAC;QACrG,gBAAgB,EAAE,QAAQ,CAAC,WAAW,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,CAAC;QAC9F,kBAAkB,EAAE,QAAQ,CAAC,WAAW,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,oBAAoB,CAAC;KACpG,CAAC;IACF,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,GAAG,CAAC;AAAA,CACX","sourcesContent":["/**\n * Flag-gated loader for the vendored oh-my-pi \"pure\" read/search/hashline seams.\n *\n * These seams are pure data/proposal-only functions (planning + presentation +\n * hashline parsing). They do NOT touch edit/write/file-mutation paths. The\n * loader is enabled by default and opts out via OMK_OMP_SEAMS=0 (ADR-OMP-009);\n * when disabled it throws DISABLED and tool behavior falls back to the\n * pre-seam implementation byte-identically.\n *\n * The file is erasable TypeScript: no `enum`, no parameter properties, no `as`,\n * no non-null assertions, no `any` annotations, and no runtime dependencies\n * beyond the Node.js standard library.\n */\nimport { existsSync } from \"node:fs\";\nimport { dirname, isAbsolute, join, resolve } from \"node:path\";\nimport { fileURLToPath, pathToFileURL } from \"node:url\";\n\n/** Error categories raised by the OMP pure-seam loader. */\nexport type OmpSeamsErrorCode = \"DISABLED\" | \"VENDOR_NOT_FOUND\" | \"INVALID_SEAM\";\n\n/** Typed error thrown by {@link loadOmpPureSeams}. */\nexport class OmpSeamsError extends Error {\n\treadonly code: OmpSeamsErrorCode;\n\n\tconstructor(code: OmpSeamsErrorCode, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"OmpSeamsError\";\n\t\tthis.code = code;\n\t}\n}\n\n/** The validated set of pure oh-my-pi seams (data/proposal-only). */\nexport interface OmpPureSeams {\n\tplanRead(input: unknown): unknown;\n\tpresentRead(plan: unknown, file: unknown): unknown;\n\tplanSearch(input: unknown): unknown;\n\tpresentSearch(plan: unknown, matches: unknown, sourceDigests?: unknown): unknown;\n\tparseHashlineProposal(text: string): unknown;\n\thashProposalLine(text: string): Promise<string>;\n\thashProposalSource(text: string): Promise<string>;\n}\n\n/**\n * Returns true unless the seams feature is explicitly disabled\n * (OMK_OMP_SEAMS === \"0\"). Enabled by default per ADR-OMP-009.\n * Reads `process.env` when no record is supplied.\n */\nexport function isOmpSeamsEnabled(env?: Record<string, string | undefined>): boolean {\n\tconst source: Record<string, string | undefined> = env ?? process.env;\n\treturn source.OMK_OMP_SEAMS !== \"0\";\n}\n\nconst VENDOR_SEGMENT = join(\"vendor\", \"oh-my-pi\");\nconst VENDOR_MARKER = join(VENDOR_SEGMENT, \"packages\", \"coding-agent\", \"src\", \"pure\", \"read.ts\");\nconst MAX_WALK_UP_LEVELS = 8;\n\n/**\n * Walks up from `startDir` (inclusive) looking for a `vendor/oh-my-pi`\n * directory that contains the pure read seam marker file. Returns the absolute\n * vendor directory path, or `undefined` when none is found within the level cap.\n */\nexport function resolveOmpVendorDir(startDir: string): string | undefined {\n\tlet dir = isAbsolute(startDir) ? startDir : resolve(startDir);\n\tfor (let level = 0; level <= MAX_WALK_UP_LEVELS; level += 1) {\n\t\tif (existsSync(join(dir, VENDOR_MARKER))) {\n\t\t\treturn join(dir, VENDOR_SEGMENT);\n\t\t}\n\t\tconst parent = dirname(dir);\n\t\tif (parent === dir) break;\n\t\tdir = parent;\n\t}\n\treturn undefined;\n}\n\n// --- internal narrowing helpers (no `as`; type guards carry the signatures) ---\n\ntype SeamFn = (...args: never[]) => unknown;\ntype SeamAsyncStrFn = (...args: never[]) => Promise<string>;\n\nfunction isSeamFn(member: unknown): member is SeamFn {\n\treturn typeof member === \"function\";\n}\n\nfunction isSeamAsyncStrFn(member: unknown): member is SeamAsyncStrFn {\n\treturn typeof member === \"function\";\n}\n\nfunction expectFn<T extends SeamFn>(member: unknown, guard: (m: unknown) => m is T, name: string): T {\n\tif (guard(member)) return member;\n\tthrow new OmpSeamsError(\"INVALID_SEAM\", `OMP seam missing or non-function: ${name}`);\n}\n\nconst READ_SEAM = join(\"packages\", \"coding-agent\", \"src\", \"pure\", \"read.ts\");\nconst SEARCH_SEAM = join(\"packages\", \"coding-agent\", \"src\", \"pure\", \"search.ts\");\nconst PROPOSAL_SEAM = join(\"packages\", \"hashline\", \"src\", \"proposal.ts\");\n\n/**\n * Loads and validates the three pure seam modules from the vendored oh-my-pi\n * tree and returns a frozen {@link OmpPureSeams} record. Throws\n * {@link OmpSeamsError} with code DISABLED when the feature is off,\n * VENDOR_NOT_FOUND when the vendor tree cannot be located, or INVALID_SEAM when\n * any expected export is missing or not a function.\n */\nexport async function loadOmpPureSeams(options?: {\n\tvendorDir?: string;\n\tenv?: Record<string, string | undefined>;\n}): Promise<OmpPureSeams> {\n\tconst env: Record<string, string | undefined> = options?.env ?? process.env;\n\tif (!isOmpSeamsEnabled(env)) {\n\t\tthrow new OmpSeamsError(\n\t\t\t\"DISABLED\",\n\t\t\t\"OMP pure seams are disabled (OMK_OMP_SEAMS=0; unset or set to any other value to enable).\",\n\t\t);\n\t}\n\n\tlet vendorDir: string | undefined = options?.vendorDir ?? env.OMK_OMP_VENDOR_DIR;\n\tif (!vendorDir) {\n\t\tconst moduleUrl = new URL(\".\", import.meta.url);\n\t\tif (moduleUrl.protocol !== \"file:\") {\n\t\t\tthrow new OmpSeamsError(\n\t\t\t\t\"VENDOR_NOT_FOUND\",\n\t\t\t\t\"OMP vendor dir was not provided and the module is not a file URL.\",\n\t\t\t);\n\t\t}\n\t\tconst found = resolveOmpVendorDir(fileURLToPath(moduleUrl));\n\t\tif (!found) {\n\t\t\tthrow new OmpSeamsError(\n\t\t\t\t\"VENDOR_NOT_FOUND\",\n\t\t\t\t\"OMP vendor dir not found by walking up from the module directory.\",\n\t\t\t);\n\t\t}\n\t\tvendorDir = found;\n\t}\n\tif (!existsSync(vendorDir)) {\n\t\tthrow new OmpSeamsError(\"VENDOR_NOT_FOUND\", `OMP vendor dir does not exist: ${vendorDir}`);\n\t}\n\n\tconst readUrl = pathToFileURL(join(vendorDir, READ_SEAM)).href;\n\tconst searchUrl = pathToFileURL(join(vendorDir, SEARCH_SEAM)).href;\n\tconst proposalUrl = pathToFileURL(join(vendorDir, PROPOSAL_SEAM)).href;\n\n\tconst readMod = await import(readUrl);\n\tconst searchMod = await import(searchUrl);\n\tconst proposalMod = await import(proposalUrl);\n\n\t// Validate every expected member up front so the INVALID_SEAM error lists\n\t// ALL missing/non-function exports, not just the first one encountered.\n\tconst expected: ReadonlyArray<readonly [unknown, string]> = [\n\t\t[readMod.planRead, \"planRead\"],\n\t\t[readMod.presentRead, \"presentRead\"],\n\t\t[searchMod.planSearch, \"planSearch\"],\n\t\t[searchMod.presentSearch, \"presentSearch\"],\n\t\t[proposalMod.parseHashlineProposal, \"parseHashlineProposal\"],\n\t\t[proposalMod.hashProposalLine, \"hashProposalLine\"],\n\t\t[proposalMod.hashProposalSource, \"hashProposalSource\"],\n\t];\n\tconst missing: string[] = [];\n\tfor (const [member, name] of expected) {\n\t\tif (typeof member !== \"function\") missing.push(name);\n\t}\n\tif (missing.length > 0) {\n\t\tthrow new OmpSeamsError(\"INVALID_SEAM\", `OMP seams missing or non-function: ${missing.join(\", \")}`);\n\t}\n\n\tconst rec: OmpPureSeams = {\n\t\tplanRead: expectFn(readMod.planRead, isSeamFn, \"planRead\"),\n\t\tpresentRead: expectFn(readMod.presentRead, isSeamFn, \"presentRead\"),\n\t\tplanSearch: expectFn(searchMod.planSearch, isSeamFn, \"planSearch\"),\n\t\tpresentSearch: expectFn(searchMod.presentSearch, isSeamFn, \"presentSearch\"),\n\t\tparseHashlineProposal: expectFn(proposalMod.parseHashlineProposal, isSeamFn, \"parseHashlineProposal\"),\n\t\thashProposalLine: expectFn(proposalMod.hashProposalLine, isSeamAsyncStrFn, \"hashProposalLine\"),\n\t\thashProposalSource: expectFn(proposalMod.hashProposalSource, isSeamAsyncStrFn, \"hashProposalSource\"),\n\t};\n\tObject.freeze(rec);\n\treturn rec;\n}\n"]}

package/dist/core/tools/omp-seam-runtime.d.ts

@@ -1,100 +0,0 @@
-/**
- * Typed runtime facade over the flag-gated OMP pure-seam loader.
- *
- * Wiring boundary for I2 (ADR-OMP-008/009): the read and grep tools delegate
- * request validation and output presentation to the vendored OMP pure seams.
- * Enabled by default; `OMK_OMP_SEAMS=0` opts out and tool behavior falls back
- * byte-identically to the pre-seam implementation.
- *
- * The loader exposes unknown-in/unknown-out signatures; all structural
- * assertions live in this single file so tool code stays clean.
- */
-import { type OmpPureSeams } from "./omp-pure-seams.ts";
-export interface OmpIssue {
-    readonly field: string;
-    readonly code: string;
-    readonly message: string;
-}
-export interface OmpReadPlan {
-    readonly path: string;
-    readonly offset: number;
-    readonly limit: number;
-}
-export type OmpReadPlanResult = {
-    readonly ok: true;
-    readonly plan: OmpReadPlan;
-} | {
-    readonly ok: false;
-    readonly issues: readonly OmpIssue[];
-};
-export interface OmpReadPresentation {
-    readonly text: string;
-    readonly window: {
-        readonly startLine: number;
-        readonly endLine: number;
-        readonly totalLines: number;
-        readonly truncated: boolean;
-    };
-}
-export type OmpReadPresentResult = {
-    readonly ok: true;
-    readonly presentation: OmpReadPresentation;
-} | {
-    readonly ok: false;
-    readonly conflicts: readonly unknown[];
-};
-export interface OmpSearchPlan {
-    readonly pattern: string;
-    readonly path: string;
-    readonly glob?: string;
-    readonly ignoreCase: boolean;
-    readonly literal: boolean;
-    readonly context: number;
-    readonly limit: number;
-}
-export type OmpSearchPlanResult = {
-    readonly ok: true;
-    readonly plan: OmpSearchPlan;
-} | {
-    readonly ok: false;
-    readonly issues: readonly OmpIssue[];
-};
-export interface OmpSearchHostMatch {
-    readonly file: string;
-    readonly line: number;
-    readonly column?: number;
-    readonly text: string;
-    readonly expectedLineHash?: string;
-}
-export interface OmpSearchPresentation {
-    readonly text: string;
-    readonly totalMatches: number;
-    readonly omittedMatches: number;
-    readonly truncated: boolean;
-}
-export type OmpSearchPresentResult = {
-    readonly ok: true;
-    readonly presentation: OmpSearchPresentation;
-} | {
-    readonly ok: false;
-    readonly conflicts: readonly unknown[];
-};
-/**
- * Returns the memoized seam set unless `OMK_OMP_SEAMS=0`; `undefined` when
- * opted out. Loader errors (VENDOR_NOT_FOUND, INVALID_SEAM) propagate to
- * the caller of the returned promise.
- */
-export declare function getOmpSeams(): Promise<OmpPureSeams> | undefined;
-export declare function planRead(seams: OmpPureSeams, input: unknown): OmpReadPlanResult;
-export declare function presentRead(seams: OmpPureSeams, plan: OmpReadPlan, file: {
-    text: string;
-    sourceDigest?: string;
-    lineDigests?: readonly {
-        line: number;
-        digest: string;
-    }[];
-}): OmpReadPresentResult;
-export declare function planSearch(seams: OmpPureSeams, input: unknown): OmpSearchPlanResult;
-export declare function presentSearch(seams: OmpPureSeams, plan: OmpSearchPlan, matches: readonly OmpSearchHostMatch[]): OmpSearchPresentResult;
-export declare function formatOmpIssues(issues: readonly OmpIssue[]): string;
-//# sourceMappingURL=omp-seam-runtime.d.ts.map

package/dist/core/tools/omp-seam-runtime.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"omp-seam-runtime.d.ts","sourceRoot":"","sources":["../../../src/core/tools/omp-seam-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAuC,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE7F,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,iBAAiB,GAC1B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GACjD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,CAAA;CAAE,CAAC;AAEhE,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE;QAChB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;KAC5B,CAAC;CACF;AAED,MAAM,MAAM,oBAAoB,GAC7B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAA;CAAE,GACjE;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,OAAO,EAAE,CAAA;CAAE,CAAC;AAElE,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,mBAAmB,GAC5B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,CAAA;CAAE,CAAC;AAEhE,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,MAAM,sBAAsB,GAC/B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAA;CAAE,GACnE;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,OAAO,EAAE,CAAA;CAAE,CAAC;AAIlE;;;;GAIG;AACH,wBAAgB,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC,GAAG,SAAS,CAI/D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAE/E;AAED,wBAAgB,WAAW,CAC1B,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GACtG,oBAAoB,CAEtB;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAEnF;AAED,wBAAgB,aAAa,CAC5B,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,SAAS,kBAAkB,EAAE,GACpC,sBAAsB,CAExB;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,GAAG,MAAM,CAEnE","sourcesContent":["/**\n * Typed runtime facade over the flag-gated OMP pure-seam loader.\n *\n * Wiring boundary for I2 (ADR-OMP-008/009): the read and grep tools delegate\n * request validation and output presentation to the vendored OMP pure seams.\n * Enabled by default; `OMK_OMP_SEAMS=0` opts out and tool behavior falls back\n * byte-identically to the pre-seam implementation.\n *\n * The loader exposes unknown-in/unknown-out signatures; all structural\n * assertions live in this single file so tool code stays clean.\n */\nimport { isOmpSeamsEnabled, loadOmpPureSeams, type OmpPureSeams } from \"./omp-pure-seams.ts\";\n\nexport interface OmpIssue {\n\treadonly field: string;\n\treadonly code: string;\n\treadonly message: string;\n}\n\nexport interface OmpReadPlan {\n\treadonly path: string;\n\treadonly offset: number;\n\treadonly limit: number;\n}\n\nexport type OmpReadPlanResult =\n\t| { readonly ok: true; readonly plan: OmpReadPlan }\n\t| { readonly ok: false; readonly issues: readonly OmpIssue[] };\n\nexport interface OmpReadPresentation {\n\treadonly text: string;\n\treadonly window: {\n\t\treadonly startLine: number;\n\t\treadonly endLine: number;\n\t\treadonly totalLines: number;\n\t\treadonly truncated: boolean;\n\t};\n}\n\nexport type OmpReadPresentResult =\n\t| { readonly ok: true; readonly presentation: OmpReadPresentation }\n\t| { readonly ok: false; readonly conflicts: readonly unknown[] };\n\nexport interface OmpSearchPlan {\n\treadonly pattern: string;\n\treadonly path: string;\n\treadonly glob?: string;\n\treadonly ignoreCase: boolean;\n\treadonly literal: boolean;\n\treadonly context: number;\n\treadonly limit: number;\n}\n\nexport type OmpSearchPlanResult =\n\t| { readonly ok: true; readonly plan: OmpSearchPlan }\n\t| { readonly ok: false; readonly issues: readonly OmpIssue[] };\n\nexport interface OmpSearchHostMatch {\n\treadonly file: string;\n\treadonly line: number;\n\treadonly column?: number;\n\treadonly text: string;\n\treadonly expectedLineHash?: string;\n}\n\nexport interface OmpSearchPresentation {\n\treadonly text: string;\n\treadonly totalMatches: number;\n\treadonly omittedMatches: number;\n\treadonly truncated: boolean;\n}\n\nexport type OmpSearchPresentResult =\n\t| { readonly ok: true; readonly presentation: OmpSearchPresentation }\n\t| { readonly ok: false; readonly conflicts: readonly unknown[] };\n\nlet cached: Promise<OmpPureSeams> | undefined;\n\n/**\n * Returns the memoized seam set unless `OMK_OMP_SEAMS=0`; `undefined` when\n * opted out. Loader errors (VENDOR_NOT_FOUND, INVALID_SEAM) propagate to\n * the caller of the returned promise.\n */\nexport function getOmpSeams(): Promise<OmpPureSeams> | undefined {\n\tif (!isOmpSeamsEnabled()) return undefined;\n\tcached ??= loadOmpPureSeams();\n\treturn cached;\n}\n\nexport function planRead(seams: OmpPureSeams, input: unknown): OmpReadPlanResult {\n\treturn seams.planRead(input) as OmpReadPlanResult;\n}\n\nexport function presentRead(\n\tseams: OmpPureSeams,\n\tplan: OmpReadPlan,\n\tfile: { text: string; sourceDigest?: string; lineDigests?: readonly { line: number; digest: string }[] },\n): OmpReadPresentResult {\n\treturn seams.presentRead(plan, file) as OmpReadPresentResult;\n}\n\nexport function planSearch(seams: OmpPureSeams, input: unknown): OmpSearchPlanResult {\n\treturn seams.planSearch(input) as OmpSearchPlanResult;\n}\n\nexport function presentSearch(\n\tseams: OmpPureSeams,\n\tplan: OmpSearchPlan,\n\tmatches: readonly OmpSearchHostMatch[],\n): OmpSearchPresentResult {\n\treturn seams.presentSearch(plan, matches) as OmpSearchPresentResult;\n}\n\nexport function formatOmpIssues(issues: readonly OmpIssue[]): string {\n\treturn issues.map((issue) => `${issue.field}: ${issue.message}`).join(\"; \");\n}\n"]}

package/dist/core/tools/omp-seam-runtime.js

@@ -1,40 +0,0 @@
-/**
- * Typed runtime facade over the flag-gated OMP pure-seam loader.
- *
- * Wiring boundary for I2 (ADR-OMP-008/009): the read and grep tools delegate
- * request validation and output presentation to the vendored OMP pure seams.
- * Enabled by default; `OMK_OMP_SEAMS=0` opts out and tool behavior falls back
- * byte-identically to the pre-seam implementation.
- *
- * The loader exposes unknown-in/unknown-out signatures; all structural
- * assertions live in this single file so tool code stays clean.
- */
-import { isOmpSeamsEnabled, loadOmpPureSeams } from "./omp-pure-seams.js";
-let cached;
-/**
- * Returns the memoized seam set unless `OMK_OMP_SEAMS=0`; `undefined` when
- * opted out. Loader errors (VENDOR_NOT_FOUND, INVALID_SEAM) propagate to
- * the caller of the returned promise.
- */
-export function getOmpSeams() {
-    if (!isOmpSeamsEnabled())
-        return undefined;
-    cached ??= loadOmpPureSeams();
-    return cached;
-}
-export function planRead(seams, input) {
-    return seams.planRead(input);
-}
-export function presentRead(seams, plan, file) {
-    return seams.presentRead(plan, file);
-}
-export function planSearch(seams, input) {
-    return seams.planSearch(input);
-}
-export function presentSearch(seams, plan, matches) {
-    return seams.presentSearch(plan, matches);
-}
-export function formatOmpIssues(issues) {
-    return issues.map((issue) => `${issue.field}: ${issue.message}`).join("; ");
-}
-//# sourceMappingURL=omp-seam-runtime.js.map

package/dist/core/tools/omp-seam-runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"omp-seam-runtime.js","sourceRoot":"","sources":["../../../src/core/tools/omp-seam-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAqB,MAAM,qBAAqB,CAAC;AAiE7F,IAAI,MAAyC,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,WAAW,GAAsC;IAChE,IAAI,CAAC,iBAAiB,EAAE;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,KAAK,gBAAgB,EAAE,CAAC;IAC9B,OAAO,MAAM,CAAC;AAAA,CACd;AAED,MAAM,UAAU,QAAQ,CAAC,KAAmB,EAAE,KAAc,EAAqB;IAChF,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAsB,CAAC;AAAA,CAClD;AAED,MAAM,UAAU,WAAW,CAC1B,KAAmB,EACnB,IAAiB,EACjB,IAAwG,EACjF;IACvB,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAyB,CAAC;AAAA,CAC7D;AAED,MAAM,UAAU,UAAU,CAAC,KAAmB,EAAE,KAAc,EAAuB;IACpF,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,CAAwB,CAAC;AAAA,CACtD;AAED,MAAM,UAAU,aAAa,CAC5B,KAAmB,EACnB,IAAmB,EACnB,OAAsC,EACb;IACzB,OAAO,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAA2B,CAAC;AAAA,CACpE;AAED,MAAM,UAAU,eAAe,CAAC,MAA2B,EAAU;IACpE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAAA,CAC5E","sourcesContent":["/**\n * Typed runtime facade over the flag-gated OMP pure-seam loader.\n *\n * Wiring boundary for I2 (ADR-OMP-008/009): the read and grep tools delegate\n * request validation and output presentation to the vendored OMP pure seams.\n * Enabled by default; `OMK_OMP_SEAMS=0` opts out and tool behavior falls back\n * byte-identically to the pre-seam implementation.\n *\n * The loader exposes unknown-in/unknown-out signatures; all structural\n * assertions live in this single file so tool code stays clean.\n */\nimport { isOmpSeamsEnabled, loadOmpPureSeams, type OmpPureSeams } from \"./omp-pure-seams.ts\";\n\nexport interface OmpIssue {\n\treadonly field: string;\n\treadonly code: string;\n\treadonly message: string;\n}\n\nexport interface OmpReadPlan {\n\treadonly path: string;\n\treadonly offset: number;\n\treadonly limit: number;\n}\n\nexport type OmpReadPlanResult =\n\t| { readonly ok: true; readonly plan: OmpReadPlan }\n\t| { readonly ok: false; readonly issues: readonly OmpIssue[] };\n\nexport interface OmpReadPresentation {\n\treadonly text: string;\n\treadonly window: {\n\t\treadonly startLine: number;\n\t\treadonly endLine: number;\n\t\treadonly totalLines: number;\n\t\treadonly truncated: boolean;\n\t};\n}\n\nexport type OmpReadPresentResult =\n\t| { readonly ok: true; readonly presentation: OmpReadPresentation }\n\t| { readonly ok: false; readonly conflicts: readonly unknown[] };\n\nexport interface OmpSearchPlan {\n\treadonly pattern: string;\n\treadonly path: string;\n\treadonly glob?: string;\n\treadonly ignoreCase: boolean;\n\treadonly literal: boolean;\n\treadonly context: number;\n\treadonly limit: number;\n}\n\nexport type OmpSearchPlanResult =\n\t| { readonly ok: true; readonly plan: OmpSearchPlan }\n\t| { readonly ok: false; readonly issues: readonly OmpIssue[] };\n\nexport interface OmpSearchHostMatch {\n\treadonly file: string;\n\treadonly line: number;\n\treadonly column?: number;\n\treadonly text: string;\n\treadonly expectedLineHash?: string;\n}\n\nexport interface OmpSearchPresentation {\n\treadonly text: string;\n\treadonly totalMatches: number;\n\treadonly omittedMatches: number;\n\treadonly truncated: boolean;\n}\n\nexport type OmpSearchPresentResult =\n\t| { readonly ok: true; readonly presentation: OmpSearchPresentation }\n\t| { readonly ok: false; readonly conflicts: readonly unknown[] };\n\nlet cached: Promise<OmpPureSeams> | undefined;\n\n/**\n * Returns the memoized seam set unless `OMK_OMP_SEAMS=0`; `undefined` when\n * opted out. Loader errors (VENDOR_NOT_FOUND, INVALID_SEAM) propagate to\n * the caller of the returned promise.\n */\nexport function getOmpSeams(): Promise<OmpPureSeams> | undefined {\n\tif (!isOmpSeamsEnabled()) return undefined;\n\tcached ??= loadOmpPureSeams();\n\treturn cached;\n}\n\nexport function planRead(seams: OmpPureSeams, input: unknown): OmpReadPlanResult {\n\treturn seams.planRead(input) as OmpReadPlanResult;\n}\n\nexport function presentRead(\n\tseams: OmpPureSeams,\n\tplan: OmpReadPlan,\n\tfile: { text: string; sourceDigest?: string; lineDigests?: readonly { line: number; digest: string }[] },\n): OmpReadPresentResult {\n\treturn seams.presentRead(plan, file) as OmpReadPresentResult;\n}\n\nexport function planSearch(seams: OmpPureSeams, input: unknown): OmpSearchPlanResult {\n\treturn seams.planSearch(input) as OmpSearchPlanResult;\n}\n\nexport function presentSearch(\n\tseams: OmpPureSeams,\n\tplan: OmpSearchPlan,\n\tmatches: readonly OmpSearchHostMatch[],\n): OmpSearchPresentResult {\n\treturn seams.presentSearch(plan, matches) as OmpSearchPresentResult;\n}\n\nexport function formatOmpIssues(issues: readonly OmpIssue[]): string {\n\treturn issues.map((issue) => `${issue.field}: ${issue.message}`).join(\"; \");\n}\n"]}

package/dist/guardrails/audit-logger.d.ts

@@ -1,4 +0,0 @@
-import type { GuardrailAuditEvent } from "../types/guardrails.ts";
-export declare function appendAuditEvent(auditPath: string, event: GuardrailAuditEvent): Promise<void>;
-export declare function readAuditEvents(auditPath: string): GuardrailAuditEvent[];
-//# sourceMappingURL=audit-logger.d.ts.map

package/dist/guardrails/audit-logger.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-logger.d.ts","sourceRoot":"","sources":["../../src/guardrails/audit-logger.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAElE,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAc7F;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAOxE","sourcesContent":["import { appendFileSync, existsSync, mkdirSync, readFileSync } from \"node:fs\";\nimport { dirname } from \"node:path\";\nimport type { GuardrailAuditEvent } from \"../types/guardrails.ts\";\n\nexport function appendAuditEvent(auditPath: string, event: GuardrailAuditEvent): Promise<void> {\n\treturn new Promise((resolve, reject) => {\n\t\ttry {\n\t\t\tconst dir = dirname(auditPath);\n\t\t\tif (!existsSync(dir)) {\n\t\t\t\tmkdirSync(dir, { recursive: true });\n\t\t\t}\n\t\t\tconst line = `${JSON.stringify(event)}\\n`;\n\t\t\tappendFileSync(auditPath, line, \"utf-8\");\n\t\t\tresolve();\n\t\t} catch (err) {\n\t\t\treject(err);\n\t\t}\n\t});\n}\n\nexport function readAuditEvents(auditPath: string): GuardrailAuditEvent[] {\n\tif (!existsSync(auditPath)) return [];\n\tconst content = readFileSync(auditPath, \"utf-8\");\n\treturn content\n\t\t.split(\"\\n\")\n\t\t.filter((line) => line.trim().length > 0)\n\t\t.map((line) => JSON.parse(line) as GuardrailAuditEvent);\n}\n"]}

package/dist/guardrails/audit-logger.js

@@ -1,28 +0,0 @@
-import { appendFileSync, existsSync, mkdirSync, readFileSync } from "node:fs";
-import { dirname } from "node:path";
-export function appendAuditEvent(auditPath, event) {
-    return new Promise((resolve, reject) => {
-        try {
-            const dir = dirname(auditPath);
-            if (!existsSync(dir)) {
-                mkdirSync(dir, { recursive: true });
-            }
-            const line = `${JSON.stringify(event)}\n`;
-            appendFileSync(auditPath, line, "utf-8");
-            resolve();
-        }
-        catch (err) {
-            reject(err);
-        }
-    });
-}
-export function readAuditEvents(auditPath) {
-    if (!existsSync(auditPath))
-        return [];
-    const content = readFileSync(auditPath, "utf-8");
-    return content
-        .split("\n")
-        .filter((line) => line.trim().length > 0)
-        .map((line) => JSON.parse(line));
-}
-//# sourceMappingURL=audit-logger.js.map

package/dist/guardrails/audit-logger.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-logger.js","sourceRoot":"","sources":["../../src/guardrails/audit-logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,KAA0B,EAAiB;IAC9F,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1C,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YACzC,OAAO,EAAE,CAAC;QACX,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IAAA,CACD,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAyB;IACzE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACjD,OAAO,OAAO;SACZ,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,CAAC,CAAC;AAAA,CACzD","sourcesContent":["import { appendFileSync, existsSync, mkdirSync, readFileSync } from \"node:fs\";\nimport { dirname } from \"node:path\";\nimport type { GuardrailAuditEvent } from \"../types/guardrails.ts\";\n\nexport function appendAuditEvent(auditPath: string, event: GuardrailAuditEvent): Promise<void> {\n\treturn new Promise((resolve, reject) => {\n\t\ttry {\n\t\t\tconst dir = dirname(auditPath);\n\t\t\tif (!existsSync(dir)) {\n\t\t\t\tmkdirSync(dir, { recursive: true });\n\t\t\t}\n\t\t\tconst line = `${JSON.stringify(event)}\\n`;\n\t\t\tappendFileSync(auditPath, line, \"utf-8\");\n\t\t\tresolve();\n\t\t} catch (err) {\n\t\t\treject(err);\n\t\t}\n\t});\n}\n\nexport function readAuditEvents(auditPath: string): GuardrailAuditEvent[] {\n\tif (!existsSync(auditPath)) return [];\n\tconst content = readFileSync(auditPath, \"utf-8\");\n\treturn content\n\t\t.split(\"\\n\")\n\t\t.filter((line) => line.trim().length > 0)\n\t\t.map((line) => JSON.parse(line) as GuardrailAuditEvent);\n}\n"]}

package/dist/guardrails/freedomd-adapter.d.ts

@@ -1,16 +0,0 @@
-import type { FreedomdAdapter, GuardrailDecision } from "../types/guardrails.ts";
-export declare class UnifiedFreedomdAdapter implements FreedomdAdapter {
-    private policy;
-    private goalId?;
-    private auditPath?;
-    constructor(options?: {
-        policyPath?: string;
-        goalId?: string;
-        auditPath?: string;
-    });
-    evaluate(toolName: string, toolInput: unknown): Promise<GuardrailDecision>;
-    private sanitizeInput;
-    private suggestAlternative;
-    private log;
-}
-//# sourceMappingURL=freedomd-adapter.d.ts.map

package/dist/guardrails/freedomd-adapter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"freedomd-adapter.d.ts","sourceRoot":"","sources":["../../src/guardrails/freedomd-adapter.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACX,eAAe,EAEf,iBAAiB,EAGjB,MAAM,wBAAwB,CAAC;AAahC,qBAAa,sBAAuB,YAAW,eAAe;IAC7D,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,SAAS,CAAC,CAAS;IAE3B,YAAY,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAMjF;IAEK,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAqB/E;IAED,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,kBAAkB;YAeZ,GAAG;CAWjB","sourcesContent":["import { readFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport YAML from \"yaml\";\nimport type {\n\tFreedomdAdapter,\n\tGuardrailAuditEvent,\n\tGuardrailDecision,\n\tGuardrailPolicy,\n\tGuardrailRule,\n} from \"../types/guardrails.ts\";\nimport { appendAuditEvent } from \"./audit-logger.ts\";\n\nfunction getCurrentDir(): string {\n\ttry {\n\t\treturn dirname(fileURLToPath(import.meta.url));\n\t} catch {\n\t\treturn __dirname;\n\t}\n}\n\nconst DEFAULT_POLICY_PATH = join(getCurrentDir(), \"policy.yaml\");\n\nexport class UnifiedFreedomdAdapter implements FreedomdAdapter {\n\tprivate policy: GuardrailPolicy;\n\tprivate goalId?: string;\n\tprivate auditPath?: string;\n\n\tconstructor(options?: { policyPath?: string; goalId?: string; auditPath?: string }) {\n\t\tconst path = options?.policyPath ?? DEFAULT_POLICY_PATH;\n\t\tconst raw = readFileSync(path, \"utf-8\");\n\t\tthis.policy = YAML.parse(raw) as GuardrailPolicy;\n\t\tthis.goalId = options?.goalId;\n\t\tthis.auditPath = options?.auditPath;\n\t}\n\n\tasync evaluate(toolName: string, toolInput: unknown): Promise<GuardrailDecision> {\n\t\tconst inputText = this.sanitizeInput(toolInput);\n\n\t\tfor (const rule of this.policy.rules) {\n\t\t\tif (!rule.enabled) continue;\n\t\t\tif (rule.toolName && rule.toolName !== toolName) continue;\n\t\t\tif (rule.pattern && !new RegExp(rule.pattern, \"i\").test(inputText)) continue;\n\n\t\t\tconst decision: GuardrailDecision = {\n\t\t\t\tallowed: false,\n\t\t\t\trule,\n\t\t\t\treason: `Blocked by rule \"${rule.id}\": ${rule.description}`,\n\t\t\t\tsuggestion: this.suggestAlternative(rule),\n\t\t\t};\n\t\t\tawait this.log(toolName, inputText, decision);\n\t\t\treturn decision;\n\t\t}\n\n\t\tconst allow: GuardrailDecision = { allowed: true };\n\t\tawait this.log(toolName, inputText, allow);\n\t\treturn allow;\n\t}\n\n\tprivate sanitizeInput(input: unknown): string {\n\t\tif (input === null || input === undefined) return \"\";\n\t\tif (typeof input === \"string\") return input;\n\t\ttry {\n\t\t\treturn JSON.stringify(input);\n\t\t} catch {\n\t\t\treturn String(input);\n\t\t}\n\t}\n\n\tprivate suggestAlternative(rule: GuardrailRule): string | undefined {\n\t\tswitch (rule.category) {\n\t\t\tcase \"network\":\n\t\t\t\treturn \"Use context-mode_ctx_fetch_and_index or context-mode_ctx_execute instead of shell networking.\";\n\t\t\tcase \"destructive\":\n\t\t\t\treturn \"Use targeted rm of specific files or confirm destructive operations interactively.\";\n\t\t\tcase \"privilege_escalation\":\n\t\t\t\treturn \"Run the command without sudo or use a dedicated privileged lane grant.\";\n\t\t\tcase \"secret_exposure\":\n\t\t\t\treturn \"Avoid reading secret files; use environment-variable references with $ prefix.\";\n\t\t\tdefault:\n\t\t\t\treturn undefined;\n\t\t}\n\t}\n\n\tprivate async log(toolName: string, toolInput: string, decision: GuardrailDecision): Promise<void> {\n\t\tif (!this.auditPath) return;\n\t\tconst event: GuardrailAuditEvent = {\n\t\t\ttimestamp: new Date().toISOString(),\n\t\t\tgoalId: this.goalId,\n\t\t\ttoolName,\n\t\t\ttoolInput,\n\t\t\tdecision,\n\t\t};\n\t\tawait appendAuditEvent(this.auditPath, event);\n\t}\n}\n"]}

package/dist/guardrails/freedomd-adapter.js

@@ -1,87 +0,0 @@
-import { readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-import YAML from "yaml";
-import { appendAuditEvent } from "./audit-logger.js";
-function getCurrentDir() {
-    try {
-        return dirname(fileURLToPath(import.meta.url));
-    }
-    catch {
-        return __dirname;
-    }
-}
-const DEFAULT_POLICY_PATH = join(getCurrentDir(), "policy.yaml");
-export class UnifiedFreedomdAdapter {
-    policy;
-    goalId;
-    auditPath;
-    constructor(options) {
-        const path = options?.policyPath ?? DEFAULT_POLICY_PATH;
-        const raw = readFileSync(path, "utf-8");
-        this.policy = YAML.parse(raw);
-        this.goalId = options?.goalId;
-        this.auditPath = options?.auditPath;
-    }
-    async evaluate(toolName, toolInput) {
-        const inputText = this.sanitizeInput(toolInput);
-        for (const rule of this.policy.rules) {
-            if (!rule.enabled)
-                continue;
-            if (rule.toolName && rule.toolName !== toolName)
-                continue;
-            if (rule.pattern && !new RegExp(rule.pattern, "i").test(inputText))
-                continue;
-            const decision = {
-                allowed: false,
-                rule,
-                reason: `Blocked by rule "${rule.id}": ${rule.description}`,
-                suggestion: this.suggestAlternative(rule),
-            };
-            await this.log(toolName, inputText, decision);
-            return decision;
-        }
-        const allow = { allowed: true };
-        await this.log(toolName, inputText, allow);
-        return allow;
-    }
-    sanitizeInput(input) {
-        if (input === null || input === undefined)
-            return "";
-        if (typeof input === "string")
-            return input;
-        try {
-            return JSON.stringify(input);
-        }
-        catch {
-            return String(input);
-        }
-    }
-    suggestAlternative(rule) {
-        switch (rule.category) {
-            case "network":
-                return "Use context-mode_ctx_fetch_and_index or context-mode_ctx_execute instead of shell networking.";
-            case "destructive":
-                return "Use targeted rm of specific files or confirm destructive operations interactively.";
-            case "privilege_escalation":
-                return "Run the command without sudo or use a dedicated privileged lane grant.";
-            case "secret_exposure":
-                return "Avoid reading secret files; use environment-variable references with $ prefix.";
-            default:
-                return undefined;
-        }
-    }
-    async log(toolName, toolInput, decision) {
-        if (!this.auditPath)
-            return;
-        const event = {
-            timestamp: new Date().toISOString(),
-            goalId: this.goalId,
-            toolName,
-            toolInput,
-            decision,
-        };
-        await appendAuditEvent(this.auditPath, event);
-    }
-}
-//# sourceMappingURL=freedomd-adapter.js.map

package/dist/guardrails/freedomd-adapter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"freedomd-adapter.js","sourceRoot":"","sources":["../../src/guardrails/freedomd-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,IAAI,MAAM,MAAM,CAAC;AAQxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,SAAS,aAAa,GAAW;IAChC,IAAI,CAAC;QACJ,OAAO,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AAAA,CACD;AAED,MAAM,mBAAmB,GAAG,IAAI,CAAC,aAAa,EAAE,EAAE,aAAa,CAAC,CAAC;AAEjE,MAAM,OAAO,sBAAsB;IAC1B,MAAM,CAAkB;IACxB,MAAM,CAAU;IAChB,SAAS,CAAU;IAE3B,YAAY,OAAsE,EAAE;QACnF,MAAM,IAAI,GAAG,OAAO,EAAE,UAAU,IAAI,mBAAmB,CAAC;QACxD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;IAAA,CACpC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,SAAkB,EAA8B;QAChF,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAEhD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAC5B,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;gBAAE,SAAS;YAC1D,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,SAAS;YAE7E,MAAM,QAAQ,GAAsB;gBACnC,OAAO,EAAE,KAAK;gBACd,IAAI;gBACJ,MAAM,EAAE,oBAAoB,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,WAAW,EAAE;gBAC3D,UAAU,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;aACzC,CAAC;YACF,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC9C,OAAO,QAAQ,CAAC;QACjB,CAAC;QAED,MAAM,KAAK,GAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACnD,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC;IAAA,CACb;IAEO,aAAa,CAAC,KAAc,EAAU;QAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IAAA,CACD;IAEO,kBAAkB,CAAC,IAAmB,EAAsB;QACnE,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvB,KAAK,SAAS;gBACb,OAAO,+FAA+F,CAAC;YACxG,KAAK,aAAa;gBACjB,OAAO,oFAAoF,CAAC;YAC7F,KAAK,sBAAsB;gBAC1B,OAAO,wEAAwE,CAAC;YACjF,KAAK,iBAAiB;gBACrB,OAAO,gFAAgF,CAAC;YACzF;gBACC,OAAO,SAAS,CAAC;QACnB,CAAC;IAAA,CACD;IAEO,KAAK,CAAC,GAAG,CAAC,QAAgB,EAAE,SAAiB,EAAE,QAA2B,EAAiB;QAClG,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,MAAM,KAAK,GAAwB;YAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ;YACR,SAAS;YACT,QAAQ;SACR,CAAC;QACF,MAAM,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAAA,CAC9C;CACD","sourcesContent":["import { readFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport YAML from \"yaml\";\nimport type {\n\tFreedomdAdapter,\n\tGuardrailAuditEvent,\n\tGuardrailDecision,\n\tGuardrailPolicy,\n\tGuardrailRule,\n} from \"../types/guardrails.ts\";\nimport { appendAuditEvent } from \"./audit-logger.ts\";\n\nfunction getCurrentDir(): string {\n\ttry {\n\t\treturn dirname(fileURLToPath(import.meta.url));\n\t} catch {\n\t\treturn __dirname;\n\t}\n}\n\nconst DEFAULT_POLICY_PATH = join(getCurrentDir(), \"policy.yaml\");\n\nexport class UnifiedFreedomdAdapter implements FreedomdAdapter {\n\tprivate policy: GuardrailPolicy;\n\tprivate goalId?: string;\n\tprivate auditPath?: string;\n\n\tconstructor(options?: { policyPath?: string; goalId?: string; auditPath?: string }) {\n\t\tconst path = options?.policyPath ?? DEFAULT_POLICY_PATH;\n\t\tconst raw = readFileSync(path, \"utf-8\");\n\t\tthis.policy = YAML.parse(raw) as GuardrailPolicy;\n\t\tthis.goalId = options?.goalId;\n\t\tthis.auditPath = options?.auditPath;\n\t}\n\n\tasync evaluate(toolName: string, toolInput: unknown): Promise<GuardrailDecision> {\n\t\tconst inputText = this.sanitizeInput(toolInput);\n\n\t\tfor (const rule of this.policy.rules) {\n\t\t\tif (!rule.enabled) continue;\n\t\t\tif (rule.toolName && rule.toolName !== toolName) continue;\n\t\t\tif (rule.pattern && !new RegExp(rule.pattern, \"i\").test(inputText)) continue;\n\n\t\t\tconst decision: GuardrailDecision = {\n\t\t\t\tallowed: false,\n\t\t\t\trule,\n\t\t\t\treason: `Blocked by rule \"${rule.id}\": ${rule.description}`,\n\t\t\t\tsuggestion: this.suggestAlternative(rule),\n\t\t\t};\n\t\t\tawait this.log(toolName, inputText, decision);\n\t\t\treturn decision;\n\t\t}\n\n\t\tconst allow: GuardrailDecision = { allowed: true };\n\t\tawait this.log(toolName, inputText, allow);\n\t\treturn allow;\n\t}\n\n\tprivate sanitizeInput(input: unknown): string {\n\t\tif (input === null || input === undefined) return \"\";\n\t\tif (typeof input === \"string\") return input;\n\t\ttry {\n\t\t\treturn JSON.stringify(input);\n\t\t} catch {\n\t\t\treturn String(input);\n\t\t}\n\t}\n\n\tprivate suggestAlternative(rule: GuardrailRule): string | undefined {\n\t\tswitch (rule.category) {\n\t\t\tcase \"network\":\n\t\t\t\treturn \"Use context-mode_ctx_fetch_and_index or context-mode_ctx_execute instead of shell networking.\";\n\t\t\tcase \"destructive\":\n\t\t\t\treturn \"Use targeted rm of specific files or confirm destructive operations interactively.\";\n\t\t\tcase \"privilege_escalation\":\n\t\t\t\treturn \"Run the command without sudo or use a dedicated privileged lane grant.\";\n\t\t\tcase \"secret_exposure\":\n\t\t\t\treturn \"Avoid reading secret files; use environment-variable references with $ prefix.\";\n\t\t\tdefault:\n\t\t\t\treturn undefined;\n\t\t}\n\t}\n\n\tprivate async log(toolName: string, toolInput: string, decision: GuardrailDecision): Promise<void> {\n\t\tif (!this.auditPath) return;\n\t\tconst event: GuardrailAuditEvent = {\n\t\t\ttimestamp: new Date().toISOString(),\n\t\t\tgoalId: this.goalId,\n\t\t\ttoolName,\n\t\t\ttoolInput,\n\t\t\tdecision,\n\t\t};\n\t\tawait appendAuditEvent(this.auditPath, event);\n\t}\n}\n"]}

package/dist/orchestration/lane-grant-auditor.d.ts

@@ -1,4 +0,0 @@
-import type { LaneGrant, LaneGrantAuditReport } from "../types/lane-grant.ts";
-export declare function auditLaneGrants(grants: LaneGrant[], evidencePath: string): LaneGrantAuditReport;
-export declare function formatAuditReport(report: LaneGrantAuditReport): string;
-//# sourceMappingURL=lane-grant-auditor.d.ts.map

package/dist/orchestration/lane-grant-auditor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"lane-grant-auditor.d.ts","sourceRoot":"","sources":["../../src/orchestration/lane-grant-auditor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,oBAAoB,EAAgB,MAAM,wBAAwB,CAAC;AAsB5F,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,oBAAoB,CA+C/F;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAuBtE","sourcesContent":["import { minimatch } from \"minimatch\";\nimport type { LaneGrant, LaneGrantAuditReport, PathConflict } from \"../types/lane-grant.ts\";\n\nfunction pathsOverlap(a: string, b: string): boolean {\n\tconst normalizedA = a.replace(/\\\\/g, \"/\").replace(/\\/$/, \"\");\n\tconst normalizedB = b.replace(/\\\\/g, \"/\").replace(/\\/$/, \"\");\n\tif (normalizedA === normalizedB) return true;\n\tif (minimatch(normalizedA, normalizedB) || minimatch(normalizedB, normalizedA)) return true;\n\tif (normalizedA.startsWith(`${normalizedB}/`) || normalizedB.startsWith(`${normalizedA}/`)) return true;\n\treturn false;\n}\n\nfunction hasOverlap(scopesA: string[], scopesB: string[]): { overlaps: boolean; path: string } {\n\tfor (const a of scopesA) {\n\t\tfor (const b of scopesB) {\n\t\t\tif (pathsOverlap(a, b)) {\n\t\t\t\treturn { overlaps: true, path: a };\n\t\t\t}\n\t\t}\n\t}\n\treturn { overlaps: false, path: \"\" };\n}\n\nexport function auditLaneGrants(grants: LaneGrant[], evidencePath: string): LaneGrantAuditReport {\n\tconst conflicts: PathConflict[] = [];\n\n\tfor (let i = 0; i < grants.length; i++) {\n\t\tfor (let j = i + 1; j < grants.length; j++) {\n\t\t\tconst a = grants[i];\n\t\t\tconst b = grants[j];\n\n\t\t\t// Only writers can conflict with each other.\n\t\t\tif (a.authority !== \"write-scoped\" || b.authority !== \"write-scoped\") continue;\n\n\t\t\tconst writeA = a.allowedPaths;\n\t\t\tconst writeB = b.allowedPaths;\n\t\t\tconst overlap = hasOverlap(writeA, writeB);\n\n\t\t\tif (overlap.overlaps) {\n\t\t\t\tconflicts.push({\n\t\t\t\t\tlanes: [a.laneId, b.laneId],\n\t\t\t\t\toverlappingPath: overlap.path,\n\t\t\t\t\tseverity: \"merge-blocked\",\n\t\t\t\t\tsuggestion: `Serialize lanes ${a.laneId} and ${b.laneId}, or split write scopes so they do not overlap at ${overlap.path}.`,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\n\t\t// Any grant writing to a blocked path is a merge-blocker.\n\t\tconst grant = grants[i];\n\t\tfor (const allowed of grant.allowedPaths) {\n\t\t\tfor (const blocked of grant.blockedPaths) {\n\t\t\t\tif (pathsOverlap(allowed, blocked)) {\n\t\t\t\t\tconflicts.push({\n\t\t\t\t\t\tlanes: [grant.laneId, grant.laneId],\n\t\t\t\t\t\toverlappingPath: blocked,\n\t\t\t\t\t\tseverity: \"merge-blocked\",\n\t\t\t\t\t\tsuggestion: `Remove ${blocked} from allowedPaths or add an exception; it overlaps blockedPaths in ${grant.laneId}.`,\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\treturn {\n\t\tgrants,\n\t\tconflicts,\n\t\tmergeBlocked: conflicts.some((c) => c.severity === \"merge-blocked\"),\n\t\tevidencePath,\n\t};\n}\n\nexport function formatAuditReport(report: LaneGrantAuditReport): string {\n\tconst lines: string[] = [\n\t\t`# Lane Grant Audit Report`,\n\t\t\"\",\n\t\t`- Lanes audited: ${report.grants.length}`,\n\t\t`- Conflicts detected: ${report.conflicts.length}`,\n\t\t`- Merge blocked: ${report.mergeBlocked ? \"YES\" : \"NO\"}`,\n\t\t\"\",\n\t];\n\n\tif (report.conflicts.length === 0) {\n\t\tlines.push(\"No path conflicts detected.\");\n\t} else {\n\t\tlines.push(\"## Conflicts\");\n\t\tfor (const conflict of report.conflicts) {\n\t\t\tlines.push(\n\t\t\t\t`- **${conflict.severity.toUpperCase()}** \\`${conflict.lanes.join(\" ↔ \")}\\` at \\`${conflict.overlappingPath}\\``,\n\t\t\t);\n\t\t\tlines.push(`  - Suggestion: ${conflict.suggestion}`);\n\t\t}\n\t}\n\n\treturn lines.join(\"\\n\");\n}\n"]}

package/dist/orchestration/lane-grant-auditor.js

@@ -1,87 +0,0 @@
-import { minimatch } from "minimatch";
-function pathsOverlap(a, b) {
-    const normalizedA = a.replace(/\\/g, "/").replace(/\/$/, "");
-    const normalizedB = b.replace(/\\/g, "/").replace(/\/$/, "");
-    if (normalizedA === normalizedB)
-        return true;
-    if (minimatch(normalizedA, normalizedB) || minimatch(normalizedB, normalizedA))
-        return true;
-    if (normalizedA.startsWith(`${normalizedB}/`) || normalizedB.startsWith(`${normalizedA}/`))
-        return true;
-    return false;
-}
-function hasOverlap(scopesA, scopesB) {
-    for (const a of scopesA) {
-        for (const b of scopesB) {
-            if (pathsOverlap(a, b)) {
-                return { overlaps: true, path: a };
-            }
-        }
-    }
-    return { overlaps: false, path: "" };
-}
-export function auditLaneGrants(grants, evidencePath) {
-    const conflicts = [];
-    for (let i = 0; i < grants.length; i++) {
-        for (let j = i + 1; j < grants.length; j++) {
-            const a = grants[i];
-            const b = grants[j];
-            // Only writers can conflict with each other.
-            if (a.authority !== "write-scoped" || b.authority !== "write-scoped")
-                continue;
-            const writeA = a.allowedPaths;
-            const writeB = b.allowedPaths;
-            const overlap = hasOverlap(writeA, writeB);
-            if (overlap.overlaps) {
-                conflicts.push({
-                    lanes: [a.laneId, b.laneId],
-                    overlappingPath: overlap.path,
-                    severity: "merge-blocked",
-                    suggestion: `Serialize lanes ${a.laneId} and ${b.laneId}, or split write scopes so they do not overlap at ${overlap.path}.`,
-                });
-            }
-        }
-        // Any grant writing to a blocked path is a merge-blocker.
-        const grant = grants[i];
-        for (const allowed of grant.allowedPaths) {
-            for (const blocked of grant.blockedPaths) {
-                if (pathsOverlap(allowed, blocked)) {
-                    conflicts.push({
-                        lanes: [grant.laneId, grant.laneId],
-                        overlappingPath: blocked,
-                        severity: "merge-blocked",
-                        suggestion: `Remove ${blocked} from allowedPaths or add an exception; it overlaps blockedPaths in ${grant.laneId}.`,
-                    });
-                }
-            }
-        }
-    }
-    return {
-        grants,
-        conflicts,
-        mergeBlocked: conflicts.some((c) => c.severity === "merge-blocked"),
-        evidencePath,
-    };
-}
-export function formatAuditReport(report) {
-    const lines = [
-        `# Lane Grant Audit Report`,
-        "",
-        `- Lanes audited: ${report.grants.length}`,
-        `- Conflicts detected: ${report.conflicts.length}`,
-        `- Merge blocked: ${report.mergeBlocked ? "YES" : "NO"}`,
-        "",
-    ];
-    if (report.conflicts.length === 0) {
-        lines.push("No path conflicts detected.");
-    }
-    else {
-        lines.push("## Conflicts");
-        for (const conflict of report.conflicts) {
-            lines.push(`- **${conflict.severity.toUpperCase()}** \`${conflict.lanes.join(" ↔ ")}\` at \`${conflict.overlappingPath}\``);
-            lines.push(`  - Suggestion: ${conflict.suggestion}`);
-        }
-    }
-    return lines.join("\n");
-}
-//# sourceMappingURL=lane-grant-auditor.js.map

package/dist/orchestration/lane-grant-auditor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"lane-grant-auditor.js","sourceRoot":"","sources":["../../src/orchestration/lane-grant-auditor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS,EAAW;IACpD,MAAM,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,WAAW,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5F,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxG,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,UAAU,CAAC,OAAiB,EAAE,OAAiB,EAAuC;IAC9F,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACzB,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACxB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACpC,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAAA,CACrC;AAED,MAAM,UAAU,eAAe,CAAC,MAAmB,EAAE,YAAoB,EAAwB;IAChG,MAAM,SAAS,GAAmB,EAAE,CAAC;IAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAEpB,6CAA6C;YAC7C,IAAI,CAAC,CAAC,SAAS,KAAK,cAAc,IAAI,CAAC,CAAC,SAAS,KAAK,cAAc;gBAAE,SAAS;YAE/E,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC;YAC9B,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC;YAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAE3C,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,SAAS,CAAC,IAAI,CAAC;oBACd,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;oBAC3B,eAAe,EAAE,OAAO,CAAC,IAAI;oBAC7B,QAAQ,EAAE,eAAe;oBACzB,UAAU,EAAE,mBAAmB,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,MAAM,qDAAqD,OAAO,CAAC,IAAI,GAAG;iBAC3H,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,0DAA0D;QAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YAC1C,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;gBAC1C,IAAI,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;oBACpC,SAAS,CAAC,IAAI,CAAC;wBACd,KAAK,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;wBACnC,eAAe,EAAE,OAAO;wBACxB,QAAQ,EAAE,eAAe;wBACzB,UAAU,EAAE,UAAU,OAAO,uEAAuE,KAAK,CAAC,MAAM,GAAG;qBACnH,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO;QACN,MAAM;QACN,SAAS;QACT,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC;QACnE,YAAY;KACZ,CAAC;AAAA,CACF;AAED,MAAM,UAAU,iBAAiB,CAAC,MAA4B,EAAU;IACvE,MAAM,KAAK,GAAa;QACvB,2BAA2B;QAC3B,EAAE;QACF,oBAAoB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;QAC1C,yBAAyB,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE;QAClD,oBAAoB,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QACxD,EAAE;KACF,CAAC;IAEF,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3B,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CACT,OAAO,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAK,CAAC,WAAW,QAAQ,CAAC,eAAe,IAAI,CAC/G,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACtD,CAAC;IACF,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAAA,CACxB","sourcesContent":["import { minimatch } from \"minimatch\";\nimport type { LaneGrant, LaneGrantAuditReport, PathConflict } from \"../types/lane-grant.ts\";\n\nfunction pathsOverlap(a: string, b: string): boolean {\n\tconst normalizedA = a.replace(/\\\\/g, \"/\").replace(/\\/$/, \"\");\n\tconst normalizedB = b.replace(/\\\\/g, \"/\").replace(/\\/$/, \"\");\n\tif (normalizedA === normalizedB) return true;\n\tif (minimatch(normalizedA, normalizedB) || minimatch(normalizedB, normalizedA)) return true;\n\tif (normalizedA.startsWith(`${normalizedB}/`) || normalizedB.startsWith(`${normalizedA}/`)) return true;\n\treturn false;\n}\n\nfunction hasOverlap(scopesA: string[], scopesB: string[]): { overlaps: boolean; path: string } {\n\tfor (const a of scopesA) {\n\t\tfor (const b of scopesB) {\n\t\t\tif (pathsOverlap(a, b)) {\n\t\t\t\treturn { overlaps: true, path: a };\n\t\t\t}\n\t\t}\n\t}\n\treturn { overlaps: false, path: \"\" };\n}\n\nexport function auditLaneGrants(grants: LaneGrant[], evidencePath: string): LaneGrantAuditReport {\n\tconst conflicts: PathConflict[] = [];\n\n\tfor (let i = 0; i < grants.length; i++) {\n\t\tfor (let j = i + 1; j < grants.length; j++) {\n\t\t\tconst a = grants[i];\n\t\t\tconst b = grants[j];\n\n\t\t\t// Only writers can conflict with each other.\n\t\t\tif (a.authority !== \"write-scoped\" || b.authority !== \"write-scoped\") continue;\n\n\t\t\tconst writeA = a.allowedPaths;\n\t\t\tconst writeB = b.allowedPaths;\n\t\t\tconst overlap = hasOverlap(writeA, writeB);\n\n\t\t\tif (overlap.overlaps) {\n\t\t\t\tconflicts.push({\n\t\t\t\t\tlanes: [a.laneId, b.laneId],\n\t\t\t\t\toverlappingPath: overlap.path,\n\t\t\t\t\tseverity: \"merge-blocked\",\n\t\t\t\t\tsuggestion: `Serialize lanes ${a.laneId} and ${b.laneId}, or split write scopes so they do not overlap at ${overlap.path}.`,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\n\t\t// Any grant writing to a blocked path is a merge-blocker.\n\t\tconst grant = grants[i];\n\t\tfor (const allowed of grant.allowedPaths) {\n\t\t\tfor (const blocked of grant.blockedPaths) {\n\t\t\t\tif (pathsOverlap(allowed, blocked)) {\n\t\t\t\t\tconflicts.push({\n\t\t\t\t\t\tlanes: [grant.laneId, grant.laneId],\n\t\t\t\t\t\toverlappingPath: blocked,\n\t\t\t\t\t\tseverity: \"merge-blocked\",\n\t\t\t\t\t\tsuggestion: `Remove ${blocked} from allowedPaths or add an exception; it overlaps blockedPaths in ${grant.laneId}.`,\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\treturn {\n\t\tgrants,\n\t\tconflicts,\n\t\tmergeBlocked: conflicts.some((c) => c.severity === \"merge-blocked\"),\n\t\tevidencePath,\n\t};\n}\n\nexport function formatAuditReport(report: LaneGrantAuditReport): string {\n\tconst lines: string[] = [\n\t\t`# Lane Grant Audit Report`,\n\t\t\"\",\n\t\t`- Lanes audited: ${report.grants.length}`,\n\t\t`- Conflicts detected: ${report.conflicts.length}`,\n\t\t`- Merge blocked: ${report.mergeBlocked ? \"YES\" : \"NO\"}`,\n\t\t\"\",\n\t];\n\n\tif (report.conflicts.length === 0) {\n\t\tlines.push(\"No path conflicts detected.\");\n\t} else {\n\t\tlines.push(\"## Conflicts\");\n\t\tfor (const conflict of report.conflicts) {\n\t\t\tlines.push(\n\t\t\t\t`- **${conflict.severity.toUpperCase()}** \\`${conflict.lanes.join(\" ↔ \")}\\` at \\`${conflict.overlappingPath}\\``,\n\t\t\t);\n\t\t\tlines.push(`  - Suggestion: ${conflict.suggestion}`);\n\t\t}\n\t}\n\n\treturn lines.join(\"\\n\");\n}\n"]}

package/dist/types/guardrails.d.ts

@@ -1,61 +0,0 @@
-/**
- * Unified guardrail types for OMK hard-fork runtime.
- *
- * Integrates Freedomd strict policy with OMK native extension-based
- * safety hooks (formerly hooks/). All tool/block decisions flow through
- * a single `GuardrailDecision` produced by the `FreedomdAdapter`.
- */
-export type ToolCategory = "destructive" | "network" | "secret_exposure" | "privilege_escalation" | "filesystem" | "shell" | "unknown";
-export type BlockOrigin = "freedomd" | "omk_extension" | "unified_policy";
-export interface GuardrailRule {
-    /** Unique rule identifier (kebab-case). */
-    id: string;
-    /** Human-readable description of what is being blocked. */
-    description: string;
-    /** Risk category for audit logs. */
-    category: ToolCategory;
-    /** Where this rule originated. */
-    origin: BlockOrigin;
-    /** Optional glob or regex matched against tool input. */
-    pattern?: string;
-    /** Optional exact tool name to match. */
-    toolName?: string;
-    /** When true the rule is active. */
-    enabled: boolean;
-}
-export interface GuardrailPolicy {
-    version: string;
-    /** Default action when no rule matches. */
-    defaultAction: "allow" | "deny";
-    /** Ordered list of unified rules. */
-    rules: GuardrailRule[];
-}
-export interface GuardrailDecision {
-    allowed: boolean;
-    /** Matched rule, if any. */
-    rule?: GuardrailRule;
-    /** Human-readable reason for the decision. */
-    reason?: string;
-    /** Suggested safe alternative, if blocked. */
-    suggestion?: string;
-}
-export interface GuardrailAuditEvent {
-    /** ISO-8601 timestamp. */
-    timestamp: string;
-    /** Goal or session identifier. */
-    goalId?: string;
-    /** Tool name that was evaluated. */
-    toolName: string;
-    /** Tool input that was evaluated (sanitized, no secrets). */
-    toolInput: string;
-    /** Final decision. */
-    decision: GuardrailDecision;
-}
-export interface FreedomdAdapter {
-    /**
-     * Evaluate a tool call against the unified policy.
-     * @returns a `GuardrailDecision` and optionally emits an audit event.
-     */
-    evaluate(toolName: string, toolInput: unknown): Promise<GuardrailDecision>;
-}
-//# sourceMappingURL=guardrails.d.ts.map

package/dist/types/guardrails.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"guardrails.d.ts","sourceRoot":"","sources":["../../src/types/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,YAAY,GACrB,aAAa,GACb,SAAS,GACT,iBAAiB,GACjB,sBAAsB,GACtB,YAAY,GACZ,OAAO,GACP,SAAS,CAAC;AAEb,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAE1E,MAAM,WAAW,aAAa;IAC7B,2CAA2C;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,QAAQ,EAAE,YAAY,CAAC;IACvB,kCAAkC;IAClC,MAAM,EAAE,WAAW,CAAC;IACpB,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,aAAa,EAAE,OAAO,GAAG,MAAM,CAAC;IAChC,qCAAqC;IACrC,KAAK,EAAE,aAAa,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,4BAA4B;IAC5B,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IACnC,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,QAAQ,EAAE,iBAAiB,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC/B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC3E","sourcesContent":["/**\n * Unified guardrail types for OMK hard-fork runtime.\n *\n * Integrates Freedomd strict policy with OMK native extension-based\n * safety hooks (formerly hooks/). All tool/block decisions flow through\n * a single `GuardrailDecision` produced by the `FreedomdAdapter`.\n */\n\nexport type ToolCategory =\n\t| \"destructive\"\n\t| \"network\"\n\t| \"secret_exposure\"\n\t| \"privilege_escalation\"\n\t| \"filesystem\"\n\t| \"shell\"\n\t| \"unknown\";\n\nexport type BlockOrigin = \"freedomd\" | \"omk_extension\" | \"unified_policy\";\n\nexport interface GuardrailRule {\n\t/** Unique rule identifier (kebab-case). */\n\tid: string;\n\t/** Human-readable description of what is being blocked. */\n\tdescription: string;\n\t/** Risk category for audit logs. */\n\tcategory: ToolCategory;\n\t/** Where this rule originated. */\n\torigin: BlockOrigin;\n\t/** Optional glob or regex matched against tool input. */\n\tpattern?: string;\n\t/** Optional exact tool name to match. */\n\ttoolName?: string;\n\t/** When true the rule is active. */\n\tenabled: boolean;\n}\n\nexport interface GuardrailPolicy {\n\tversion: string;\n\t/** Default action when no rule matches. */\n\tdefaultAction: \"allow\" | \"deny\";\n\t/** Ordered list of unified rules. */\n\trules: GuardrailRule[];\n}\n\nexport interface GuardrailDecision {\n\tallowed: boolean;\n\t/** Matched rule, if any. */\n\trule?: GuardrailRule;\n\t/** Human-readable reason for the decision. */\n\treason?: string;\n\t/** Suggested safe alternative, if blocked. */\n\tsuggestion?: string;\n}\n\nexport interface GuardrailAuditEvent {\n\t/** ISO-8601 timestamp. */\n\ttimestamp: string;\n\t/** Goal or session identifier. */\n\tgoalId?: string;\n\t/** Tool name that was evaluated. */\n\ttoolName: string;\n\t/** Tool input that was evaluated (sanitized, no secrets). */\n\ttoolInput: string;\n\t/** Final decision. */\n\tdecision: GuardrailDecision;\n}\n\nexport interface FreedomdAdapter {\n\t/**\n\t * Evaluate a tool call against the unified policy.\n\t * @returns a `GuardrailDecision` and optionally emits an audit event.\n\t */\n\tevaluate(toolName: string, toolInput: unknown): Promise<GuardrailDecision>;\n}\n"]}

package/dist/types/guardrails.js

@@ -1,9 +0,0 @@
-/**
- * Unified guardrail types for OMK hard-fork runtime.
- *
- * Integrates Freedomd strict policy with OMK native extension-based
- * safety hooks (formerly hooks/). All tool/block decisions flow through
- * a single `GuardrailDecision` produced by the `FreedomdAdapter`.
- */
-export {};
-//# sourceMappingURL=guardrails.js.map

package/dist/types/guardrails.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"guardrails.js","sourceRoot":"","sources":["../../src/types/guardrails.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG","sourcesContent":["/**\n * Unified guardrail types for OMK hard-fork runtime.\n *\n * Integrates Freedomd strict policy with OMK native extension-based\n * safety hooks (formerly hooks/). All tool/block decisions flow through\n * a single `GuardrailDecision` produced by the `FreedomdAdapter`.\n */\n\nexport type ToolCategory =\n\t| \"destructive\"\n\t| \"network\"\n\t| \"secret_exposure\"\n\t| \"privilege_escalation\"\n\t| \"filesystem\"\n\t| \"shell\"\n\t| \"unknown\";\n\nexport type BlockOrigin = \"freedomd\" | \"omk_extension\" | \"unified_policy\";\n\nexport interface GuardrailRule {\n\t/** Unique rule identifier (kebab-case). */\n\tid: string;\n\t/** Human-readable description of what is being blocked. */\n\tdescription: string;\n\t/** Risk category for audit logs. */\n\tcategory: ToolCategory;\n\t/** Where this rule originated. */\n\torigin: BlockOrigin;\n\t/** Optional glob or regex matched against tool input. */\n\tpattern?: string;\n\t/** Optional exact tool name to match. */\n\ttoolName?: string;\n\t/** When true the rule is active. */\n\tenabled: boolean;\n}\n\nexport interface GuardrailPolicy {\n\tversion: string;\n\t/** Default action when no rule matches. */\n\tdefaultAction: \"allow\" | \"deny\";\n\t/** Ordered list of unified rules. */\n\trules: GuardrailRule[];\n}\n\nexport interface GuardrailDecision {\n\tallowed: boolean;\n\t/** Matched rule, if any. */\n\trule?: GuardrailRule;\n\t/** Human-readable reason for the decision. */\n\treason?: string;\n\t/** Suggested safe alternative, if blocked. */\n\tsuggestion?: string;\n}\n\nexport interface GuardrailAuditEvent {\n\t/** ISO-8601 timestamp. */\n\ttimestamp: string;\n\t/** Goal or session identifier. */\n\tgoalId?: string;\n\t/** Tool name that was evaluated. */\n\ttoolName: string;\n\t/** Tool input that was evaluated (sanitized, no secrets). */\n\ttoolInput: string;\n\t/** Final decision. */\n\tdecision: GuardrailDecision;\n}\n\nexport interface FreedomdAdapter {\n\t/**\n\t * Evaluate a tool call against the unified policy.\n\t * @returns a `GuardrailDecision` and optionally emits an audit event.\n\t */\n\tevaluate(toolName: string, toolInput: unknown): Promise<GuardrailDecision>;\n}\n"]}