opena2a-cli 0.1.2 → 0.2.0

package/dist/commands/guard-snapshots.js

@@ -0,0 +1,346 @@
+"use strict";
+/**
+ * ConfigGuard Snapshots -- timestamped snapshots of signature state for rollback.
+ *
+ * Stores snapshots in .opena2a/guard/snapshots/ as ISO-timestamped JSON files.
+ * Supports create, list, restore, and automatic pruning at 20 snapshots.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports._internals = void 0;
+exports.guardResign = guardResign;
+exports.guardSnapshot = guardSnapshot;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+// --- Constants ---
+const STORE_DIR = '.opena2a/guard';
+const STORE_FILE = 'signatures.json';
+const SNAPSHOTS_DIR = '.opena2a/guard/snapshots';
+const MAX_SNAPSHOTS = 20;
+// --- Core ---
+function createSnapshot(targetDir) {
+    const storePath = path.join(targetDir, STORE_DIR, STORE_FILE);
+    if (!fs.existsSync(storePath)) {
+        throw new Error('No signature store found. Run: opena2a guard sign');
+    }
+    const storeContent = fs.readFileSync(storePath, 'utf-8');
+    const store = JSON.parse(storeContent);
+    const now = new Date();
+    const id = now.toISOString().replace(/:/g, '-').replace(/\.\d+Z$/, 'Z');
+    const snapshotsDir = path.join(targetDir, SNAPSHOTS_DIR);
+    fs.mkdirSync(snapshotsDir, { recursive: true });
+    const snapshotPath = path.join(snapshotsDir, `${id}.json`);
+    fs.writeFileSync(snapshotPath, storeContent, 'utf-8');
+    pruneSnapshots(snapshotsDir);
+    return {
+        id,
+        path: snapshotPath,
+        fileCount: store.signatures?.length ?? 0,
+    };
+}
+function listSnapshots(targetDir) {
+    const snapshotsDir = path.join(targetDir, SNAPSHOTS_DIR);
+    if (!fs.existsSync(snapshotsDir))
+        return [];
+    const entries = fs.readdirSync(snapshotsDir).filter(f => f.endsWith('.json'));
+    const snapshots = [];
+    for (const entry of entries) {
+        const fullPath = path.join(snapshotsDir, entry);
+        try {
+            const content = fs.readFileSync(fullPath, 'utf-8');
+            const store = JSON.parse(content);
+            const id = entry.replace(/\.json$/, '');
+            // Reconstruct ISO date from ID: 2026-03-03T01-12-55Z -> 2026-03-03T01:12:55.000Z
+            const createdAt = id.replace(/-(?=\d{2}-\d{2}Z)/g, ':').replace(/-(?=\d{2}Z)/g, ':').replace(/Z$/, '.000Z');
+            snapshots.push({
+                id,
+                createdAt,
+                fileCount: store.signatures?.length ?? 0,
+                path: fullPath,
+            });
+        }
+        catch {
+            // Skip corrupt snapshot files
+        }
+    }
+    // Sort newest first
+    snapshots.sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+    return snapshots;
+}
+function restoreSnapshot(targetDir, snapshotId) {
+    const snapshotsDir = path.join(targetDir, SNAPSHOTS_DIR);
+    const snapshotPath = path.join(snapshotsDir, `${snapshotId}.json`);
+    if (!fs.existsSync(snapshotPath)) {
+        throw new Error(`Snapshot not found: ${snapshotId}`);
+    }
+    const storePath = path.join(targetDir, STORE_DIR, STORE_FILE);
+    // Track previous snapshot ID if there is an existing store
+    let previousId = null;
+    if (fs.existsSync(storePath)) {
+        try {
+            // Create a safety snapshot of current state before restoring
+            const safetyResult = createSnapshot(targetDir);
+            previousId = safetyResult.id;
+        }
+        catch {
+            // No current store to snapshot -- that is fine
+        }
+    }
+    const snapshotContent = fs.readFileSync(snapshotPath, 'utf-8');
+    const store = JSON.parse(snapshotContent);
+    fs.mkdirSync(path.join(targetDir, STORE_DIR), { recursive: true });
+    fs.writeFileSync(storePath, snapshotContent, 'utf-8');
+    return {
+        restored: true,
+        fileCount: store.signatures?.length ?? 0,
+        previousId,
+    };
+}
+// --- Pruning ---
+function pruneSnapshots(snapshotsDir) {
+    const entries = fs.readdirSync(snapshotsDir)
+        .filter(f => f.endsWith('.json'))
+        .sort();
+    if (entries.length <= MAX_SNAPSHOTS)
+        return;
+    const toRemove = entries.slice(0, entries.length - MAX_SNAPSHOTS);
+    for (const entry of toRemove) {
+        try {
+            fs.unlinkSync(path.join(snapshotsDir, entry));
+        }
+        catch {
+            // Best-effort pruning
+        }
+    }
+}
+async function guardResign(targetDir, options) {
+    const isJson = options.format === 'json';
+    const isCi = options.ci ?? false;
+    // Load store
+    const storePath = path.join(targetDir, STORE_DIR, STORE_FILE);
+    if (!fs.existsSync(storePath)) {
+        if (isJson) {
+            process.stdout.write(JSON.stringify({ error: 'No signature store found. Run: opena2a guard sign' }, null, 2) + '\n');
+        }
+        else {
+            process.stderr.write('No signature store found. Run: opena2a guard sign\n');
+        }
+        return 1;
+    }
+    const store = JSON.parse(fs.readFileSync(storePath, 'utf-8'));
+    const { createHash } = await import('node:crypto');
+    const os = await import('node:os');
+    const tampered = [];
+    for (let i = 0; i < store.signatures.length; i++) {
+        const sig = store.signatures[i];
+        const fullPath = path.join(targetDir, sig.filePath);
+        if (!fs.existsSync(fullPath))
+            continue;
+        const content = fs.readFileSync(fullPath);
+        const currentHash = 'sha256:' + createHash('sha256').update(content).digest('hex');
+        if (currentHash !== sig.hash) {
+            tampered.push({ filePath: sig.filePath, sizeChange: content.length - sig.fileSize, sigIndex: i });
+        }
+    }
+    if (tampered.length === 0) {
+        if (isJson) {
+            process.stdout.write(JSON.stringify({ resigned: 0, files: [] }, null, 2) + '\n');
+        }
+        else {
+            process.stdout.write('All signed files are up to date. Nothing to re-sign.\n');
+        }
+        return 0;
+    }
+    // Show changes
+    if (!isJson) {
+        process.stdout.write(`Found ${tampered.length} modified file${tampered.length === 1 ? '' : 's'}:\n`);
+        for (const entry of tampered) {
+            const sign = entry.sizeChange > 0 ? '+' : '';
+            const sizeInfo = entry.sizeChange !== 0 ? ` (${sign}${entry.sizeChange}b)` : '';
+            process.stdout.write(`  CHANGED ${entry.filePath}${sizeInfo}\n`);
+        }
+    }
+    // Confirm in interactive mode
+    if (!isCi && !isJson) {
+        const confirmed = await confirmAction();
+        if (!confirmed) {
+            process.stdout.write('Re-sign cancelled.\n');
+            return 1;
+        }
+    }
+    // Create safety snapshot before re-signing
+    try {
+        const snapshot = createSnapshot(targetDir);
+        if (!isJson) {
+            process.stdout.write(`Safety snapshot created: ${snapshot.id}\n`);
+        }
+    }
+    catch {
+        // Snapshot creation failed -- proceed anyway
+    }
+    // Re-sign only the changed files
+    const now = new Date().toISOString();
+    const signedBy = os.userInfo().username + '@opena2a-cli';
+    for (const entry of tampered) {
+        const fullPath = path.join(targetDir, entry.filePath);
+        const content = fs.readFileSync(fullPath);
+        const hash = 'sha256:' + createHash('sha256').update(content).digest('hex');
+        const stat = fs.statSync(fullPath);
+        store.signatures[entry.sigIndex].hash = hash;
+        store.signatures[entry.sigIndex].signedAt = now;
+        store.signatures[entry.sigIndex].signedBy = signedBy;
+        store.signatures[entry.sigIndex].fileSize = stat.size;
+    }
+    store.updatedAt = now;
+    // Write updated store
+    fs.mkdirSync(path.join(targetDir, STORE_DIR), { recursive: true });
+    fs.writeFileSync(storePath, JSON.stringify(store, null, 2) + '\n', 'utf-8');
+    // Emit shield event
+    try {
+        const { writeEvent } = await import('../shield/events.js');
+        writeEvent({
+            source: 'configguard', category: 'config.resigned', severity: 'info',
+            agent: null, sessionId: null, action: 'guard.resign', target: targetDir,
+            outcome: 'allowed', detail: { fileCount: tampered.length, files: tampered.map(t => t.filePath) },
+            orgId: null, managed: false, agentId: null,
+        });
+    }
+    catch { /* Shield module not available */ }
+    if (isJson) {
+        process.stdout.write(JSON.stringify({ resigned: tampered.length, files: tampered.map(t => t.filePath) }, null, 2) + '\n');
+    }
+    else {
+        process.stdout.write(`Re-signed ${tampered.length} file${tampered.length === 1 ? '' : 's'}.\n`);
+    }
+    return 0;
+}
+function confirmAction() {
+    return new Promise((resolve) => {
+        process.stdout.write('\nConfirm re-sign? [y/N] ');
+        const { createInterface } = require('node:readline');
+        const rl = createInterface({ input: process.stdin, output: process.stdout, terminal: false });
+        rl.once('line', (answer) => {
+            rl.close();
+            resolve(answer.trim().toLowerCase() === 'y' || answer.trim().toLowerCase() === 'yes');
+        });
+        rl.once('close', () => resolve(false));
+    });
+}
+async function guardSnapshot(targetDir, options) {
+    const isJson = options.format === 'json';
+    const action = options.args?.[0] ?? 'list';
+    if (action === 'create') {
+        try {
+            const result = createSnapshot(targetDir);
+            if (isJson) {
+                process.stdout.write(JSON.stringify(result, null, 2) + '\n');
+            }
+            else {
+                process.stdout.write(`Snapshot created: ${result.id} (${result.fileCount} files)\n`);
+            }
+            return 0;
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            if (isJson) {
+                process.stdout.write(JSON.stringify({ error: msg }, null, 2) + '\n');
+            }
+            else {
+                process.stderr.write(`Error: ${msg}\n`);
+            }
+            return 1;
+        }
+    }
+    if (action === 'list') {
+        const snapshots = listSnapshots(targetDir);
+        if (isJson) {
+            process.stdout.write(JSON.stringify({ snapshots }, null, 2) + '\n');
+        }
+        else if (snapshots.length === 0) {
+            process.stdout.write('No snapshots found.\n');
+        }
+        else {
+            for (const s of snapshots) {
+                process.stdout.write(`  ${s.id}  (${s.fileCount} files)\n`);
+            }
+            process.stdout.write(`Total: ${snapshots.length} snapshot${snapshots.length === 1 ? '' : 's'}\n`);
+        }
+        return 0;
+    }
+    if (action === 'restore') {
+        const id = options.args?.[1];
+        if (!id) {
+            if (isJson) {
+                process.stdout.write(JSON.stringify({ error: 'Snapshot ID required. Usage: opena2a guard snapshot restore <id>' }, null, 2) + '\n');
+            }
+            else {
+                process.stderr.write('Snapshot ID required. Usage: opena2a guard snapshot restore <id>\n');
+            }
+            return 1;
+        }
+        try {
+            const result = restoreSnapshot(targetDir, id);
+            if (isJson) {
+                process.stdout.write(JSON.stringify(result, null, 2) + '\n');
+            }
+            else {
+                process.stdout.write(`Restored snapshot: ${id} (${result.fileCount} files)\n`);
+                if (result.previousId) {
+                    process.stdout.write(`Previous state saved as: ${result.previousId}\n`);
+                }
+            }
+            return 0;
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            if (isJson) {
+                process.stdout.write(JSON.stringify({ error: msg }, null, 2) + '\n');
+            }
+            else {
+                process.stderr.write(`Error: ${msg}\n`);
+            }
+            return 1;
+        }
+    }
+    process.stderr.write(`Unknown snapshot action: ${action}\nUsage: opena2a guard snapshot <create|list|restore> [id]\n`);
+    return 1;
+}
+// --- Testable internals ---
+exports._internals = {
+    createSnapshot, listSnapshots, restoreSnapshot, pruneSnapshots,
+    guardResign, guardSnapshot, confirmAction,
+    STORE_DIR, STORE_FILE, SNAPSHOTS_DIR, MAX_SNAPSHOTS,
+};
+//# sourceMappingURL=guard-snapshots.js.map

package/dist/commands/guard-snapshots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard-snapshots.js","sourceRoot":"","sources":["../../src/commands/guard-snapshots.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0JH,kCAmGC;AAqBD,sCAsDC;AAtUD,4CAA8B;AAC9B,gDAAkC;AAuBlC,oBAAoB;AAEpB,MAAM,SAAS,GAAG,gBAAgB,CAAC;AACnC,MAAM,UAAU,GAAG,iBAAiB,CAAC;AACrC,MAAM,aAAa,GAAG,0BAA0B,CAAC;AACjD,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,eAAe;AAEf,SAAS,cAAc,CAAC,SAAiB;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAEvC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACzD,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3D,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAEtD,cAAc,CAAC,YAAY,CAAC,CAAC;IAE7B,OAAO;QACL,EAAE;QACF,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IAE5C,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAmB,EAAE,CAAC;IAErC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACxC,iFAAiF;YACjF,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC5G,SAAS,CAAC,IAAI,CAAC;gBACb,EAAE;gBACF,SAAS;gBACT,SAAS,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;gBACxC,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACjE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB,EAAE,UAAkB;IAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;IAEnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,uBAAuB,UAAU,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAE9D,2DAA2D;IAC3D,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,6DAA6D;YAC7D,MAAM,YAAY,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;YAC/C,UAAU,GAAG,YAAY,CAAC,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAE1C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;IAEtD,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;QACxC,UAAU;KACX,CAAC;AACJ,CAAC;AAED,kBAAkB;AAElB,SAAS,cAAc,CAAC,YAAoB;IAC1C,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC;SACzC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAChC,IAAI,EAAE,CAAC;IAEV,IAAI,OAAO,CAAC,MAAM,IAAI,aAAa;QAAE,OAAO;IAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC;IAClE,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;AACH,CAAC;AAUM,KAAK,UAAU,WAAW,CAAC,SAAiB,EAAE,OAAsB;IACzE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,IAAI,KAAK,CAAC;IAEjC,aAAa;IACb,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,IAAI,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mDAAmD,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAAC,CAAC;aAChI,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAAC,CAAC;QACrF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAInC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QACvC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnF,IAAI,WAAW,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,IAAI,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAAC,CAAC;aAC5F,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAAC,CAAC;QACxF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,eAAe;IACf,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,QAAQ,CAAC,MAAM,iBAAiB,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QACrG,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,KAAK,CAAC,QAAQ,GAAG,QAAQ,IAAI,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,MAAM,aAAa,EAAE,CAAC;QACxC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC7C,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IAED,iCAAiC;IACjC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,GAAG,cAAc,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;QAC7C,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC;QAChD,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACrD,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;IACxD,CAAC;IACD,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC;IAEtB,sBAAsB;IACtB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAE5E,oBAAoB;IACpB,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC3D,UAAU,CAAC;YACT,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM;YACpE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS;YACvE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE;YAChG,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI;SAC3C,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC;IAE7C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5H,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,QAAQ,CAAC,MAAM,QAAQ,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAClD,MAAM,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,eAAe,CAAmC,CAAC;QACvF,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9F,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAc,EAAE,EAAE;YACjC,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAQM,KAAK,UAAU,aAAa,CAAC,SAAiB,EAAE,OAAwB;IAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAE3C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,MAAM,EAAE,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC;iBACxE,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,SAAS,WAAW,CAAC,CAAC;YAAC,CAAC;YAC9F,OAAO,CAAC,CAAC;QACX,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,MAAM,EAAE,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC;iBAChF,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC;YACjD,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,MAAM,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAAC,CAAC;aAC/E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAAC,CAAC;aAC9E,CAAC;YACJ,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC;YAAC,CAAC;YAC3F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,SAAS,CAAC,MAAM,YAAY,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACpG,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,IAAI,MAAM,EAAE,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kEAAkE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC;iBAC/I,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;YAAC,CAAC;YACpG,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,MAAM,EAAE,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC;iBACxE,CAAC;gBACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,MAAM,CAAC,SAAS,WAAW,CAAC,CAAC;gBAC/E,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;oBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;gBAAC,CAAC;YACrG,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,MAAM,EAAE,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC;iBAChF,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC;YACjD,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,MAAM,8DAA8D,CAAC,CAAC;IACvH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,6BAA6B;AAEhB,QAAA,UAAU,GAAG;IACxB,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc;IAC9D,WAAW,EAAE,aAAa,EAAE,aAAa;IACzC,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa;CACpD,CAAC"}

package/dist/commands/guard.d.ts

@@ -2,17 +2,27 @@
  * opena2a guard -- ConfigGuard: config file integrity signing and verification.
  *
  * Subcommands:
- * - sign:   Hash all detected config files, store in signatures.json
- * - verify: Check all signed files for tampering (hash mismatch)
- * - status: Summary of signed, unsigned, and tampered files
+ * - sign:    Hash all detected config files, store in signatures.json
+ * - verify:  Check all signed files for tampering (hash mismatch)
+ * - status:  Summary of signed, unsigned, and tampered files
+ * - watch:   Monitor signed files for changes in real-time
+ * - diff:     Show detailed changes between current files and signed baseline
+ * - policy:   Manage guard policy (signing requirements, heartbeat disable)
+ * - hook:     Install/uninstall git pre-commit hook for automatic verification
+ * - resign:   Re-sign modified files after confirming changes are intentional
+ * - snapshot: Create, list, or restore timestamped signature snapshots
  */
 export interface GuardOptions {
-    subcommand: 'sign' | 'verify' | 'status';
+    subcommand: 'sign' | 'verify' | 'status' | 'watch' | 'diff' | 'policy' | 'hook' | 'resign' | 'snapshot';
     files?: string[];
     targetDir?: string;
     ci?: boolean;
     format?: 'text' | 'json';
     verbose?: boolean;
+    enforce?: boolean;
+    skills?: boolean;
+    heartbeats?: boolean;
+    args?: string[];
 }
 interface ConfigSignature {
     filePath: string;
@@ -26,13 +36,59 @@ interface SignatureStore {
     signatures: ConfigSignature[];
     updatedAt: string;
 }
+export interface GuardResult {
+    filePath: string;
+    status: 'pass' | 'tampered' | 'unsigned' | 'missing';
+    currentHash?: string;
+    expectedHash?: string;
+    diff?: FileDiff;
+}
+interface FileDiff {
+    type: 'json' | 'text';
+    sizeChange: number;
+    added?: string[];
+    removed?: string[];
+    modified?: string[];
+}
+export interface GuardReport {
+    subcommand: string;
+    directory: string;
+    results: GuardResult[];
+    passed: number;
+    tampered: number;
+    unsigned: number;
+    missing: number;
+    totalSigned: number;
+}
+export interface ConfigIntegritySummary {
+    filesMonitored: number;
+    tamperedFiles: string[];
+    signatureStatus: 'valid' | 'tampered' | 'unsigned';
+}
+declare function emitEvent(category: string, action: string, target: string, severity: 'info' | 'low' | 'medium' | 'high' | 'critical', outcome: 'allowed' | 'blocked' | 'monitored', detail: Record<string, unknown>): Promise<void>;
 export declare function guard(options: GuardOptions): Promise<number>;
+export declare function verifyConfigIntegrity(targetDir?: string): ConfigIntegritySummary;
+declare function computeFileDiff(fullPath: string, sig: ConfigSignature, currentContent: Buffer): FileDiff;
+declare function diffJsonKeys(original: Record<string, unknown>, current: Record<string, unknown>): {
+    added: string[];
+    removed: string[];
+    modified: string[];
+};
+declare function flattenKeys(obj: unknown, prefix?: string): string[];
 declare function resolveFiles(targetDir: string, customFiles?: string[]): string[];
 declare function loadStore(targetDir: string): SignatureStore | null;
 export declare const _internals: {
     resolveFiles: typeof resolveFiles;
     loadStore: typeof loadStore;
+    computeFileDiff: typeof computeFileDiff;
+    diffJsonKeys: typeof diffJsonKeys;
+    flattenKeys: typeof flattenKeys;
+    emitEvent: typeof emitEvent;
+    verifyConfigIntegrity: typeof verifyConfigIntegrity;
     GUARD_FILES: string[];
+    STORE_DIR: string;
+    STORE_FILE: string;
+    EXIT_QUARANTINE: number;
 };
 export {};
 //# sourceMappingURL=guard.d.ts.map

package/dist/commands/guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/commands/guard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACzC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,UAAU,eAAe;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,cAAc;IACtB,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AAsCD,wBAAsB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBlE;AA+LD,iBAAS,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAKzE;AAED,iBAAS,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAU3D;AAmDD,eAAO,MAAM,UAAU;;;;CAItB,CAAC"}
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/commands/guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAWH,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;IACxG,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,UAAU,eAAe;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,cAAc;IACtB,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,UAAU,QAAQ;IAChB,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;CACpD;AAqBD,iBAAe,SAAS,CACtB,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAChD,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,EACzD,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,EAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,IAAI,CAAC,CAWf;AAID,wBAAsB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAoClE;AAkXD,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,sBAAsB,CAchF;AAID,iBAAS,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,GAAG,QAAQ,CAMjG;AAED,iBAAS,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAOrJ;AAED,iBAAS,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,SAAK,GAAG,MAAM,EAAE,CASxD;AAID,iBAAS,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAGzE;AAED,iBAAS,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAI3D;AAsCD,eAAO,MAAM,UAAU;;;;;;;;;;;;CAGtB,CAAC"}