rax-flow-core 0.2.0 → 2.0.0

package/dist/governance/policy-engine.js

@@ -0,0 +1,446 @@
+const DEFAULT_CONFIG = {
+    maxCostPerRun: 1.0,
+    maxTokensPerRun: 100000,
+    maxLatencyMs: 60000
+};
+export class GovernanceEngine {
+    rules = new Map();
+    config;
+    stats = {
+        totalEvaluations: 0,
+        violationsByType: {},
+        violationsBySeverity: {},
+        blockedCount: 0,
+        allowedCount: 0
+    };
+    rateLimitTracker = new Map();
+    constructor(config = {}) {
+        this.config = { ...DEFAULT_CONFIG, ...config };
+        this.initializeDefaultRules();
+    }
+    initializeDefaultRules() {
+        this.addRule({
+            id: "cost_limit",
+            name: "Cost Limit",
+            description: "Ensures execution cost stays within limits",
+            enabled: true,
+            severity: "high",
+            scope: "output",
+            evaluate: async (ctx) => this.evaluateCostLimit(ctx)
+        });
+        this.addRule({
+            id: "token_limit",
+            name: "Token Limit",
+            description: "Ensures token usage stays within limits",
+            enabled: true,
+            severity: "medium",
+            scope: "output",
+            evaluate: async (ctx) => this.evaluateTokenLimit(ctx)
+        });
+        this.addRule({
+            id: "latency_limit",
+            name: "Latency Limit",
+            description: "Ensures execution time stays within limits",
+            enabled: true,
+            severity: "medium",
+            scope: "output",
+            evaluate: async (ctx) => this.evaluateLatencyLimit(ctx)
+        });
+        this.addRule({
+            id: "blocked_content",
+            name: "Blocked Content",
+            description: "Blocks prompts containing disallowed patterns",
+            enabled: true,
+            severity: "critical",
+            scope: "input",
+            evaluate: async (ctx) => this.evaluateBlockedContent(ctx)
+        });
+        this.addRule({
+            id: "intent_whitelist",
+            name: "Intent Whitelist",
+            description: "Only allows specified intents",
+            enabled: false,
+            severity: "high",
+            scope: "input",
+            evaluate: async (ctx) => this.evaluateIntentWhitelist(ctx)
+        });
+        this.addRule({
+            id: "approval_required",
+            name: "Approval Required",
+            description: "Requires human approval for certain operations",
+            enabled: true,
+            severity: "medium",
+            scope: "both",
+            evaluate: async (ctx) => this.evaluateApprovalRequired(ctx)
+        });
+        this.addRule({
+            id: "rate_limit",
+            name: "Rate Limit",
+            description: "Limits request frequency",
+            enabled: true,
+            severity: "high",
+            scope: "input",
+            evaluate: async (ctx) => this.evaluateRateLimit(ctx)
+        });
+    }
+    addRule(rule) {
+        this.rules.set(rule.id, rule);
+    }
+    removeRule(ruleId) {
+        return this.rules.delete(ruleId);
+    }
+    enableRule(ruleId) {
+        const rule = this.rules.get(ruleId);
+        if (rule) {
+            rule.enabled = true;
+            return true;
+        }
+        return false;
+    }
+    disableRule(ruleId) {
+        const rule = this.rules.get(ruleId);
+        if (rule) {
+            rule.enabled = false;
+            return true;
+        }
+        return false;
+    }
+    async evaluateInput(context) {
+        const allViolations = [];
+        for (const rule of this.rules.values()) {
+            if (!rule.enabled || (rule.scope !== "input" && rule.scope !== "both"))
+                continue;
+            const decision = await rule.evaluate(context);
+            this.updateStats(rule.id, decision);
+            if (!decision.allowed) {
+                allViolations.push(...decision.violations);
+            }
+        }
+        return {
+            allowed: allViolations.length === 0 || !allViolations.some(v => v.severity === "critical"),
+            violations: allViolations
+        };
+    }
+    async evaluateOutput(context) {
+        const allViolations = [];
+        for (const rule of this.rules.values()) {
+            if (!rule.enabled || (rule.scope !== "output" && rule.scope !== "both"))
+                continue;
+            const decision = await rule.evaluate(context);
+            this.updateStats(rule.id, decision);
+            if (!decision.allowed) {
+                allViolations.push(...decision.violations);
+            }
+        }
+        return {
+            allowed: !allViolations.some(v => v.severity === "critical" || v.severity === "high"),
+            violations: allViolations
+        };
+    }
+    async evaluate(context, phase) {
+        this.stats.totalEvaluations++;
+        if (phase === "input") {
+            return this.evaluateInput(context);
+        }
+        return this.evaluateOutput(context);
+    }
+    async evaluateCostLimit(context) {
+        const cost = context.costUsd ?? context.output?.costUsd ?? 0;
+        if (cost > this.config.maxCostPerRun) {
+            return {
+                allowed: false,
+                violations: [{
+                        policy: "cost_limit",
+                        severity: "high",
+                        message: `Cost $${cost.toFixed(4)} exceeds limit $${this.config.maxCostPerRun}`
+                    }]
+            };
+        }
+        if (cost > this.config.maxCostPerRun * 0.8) {
+            return {
+                allowed: true,
+                violations: [{
+                        policy: "cost_limit",
+                        severity: "low",
+                        message: `Cost approaching limit: $${cost.toFixed(4)} / $${this.config.maxCostPerRun}`
+                    }]
+            };
+        }
+        return { allowed: true, violations: [] };
+    }
+    async evaluateTokenLimit(context) {
+        const tokens = context.tokensUsed ?? context.output?.usage?.totalTokens ?? 0;
+        if (tokens > this.config.maxTokensPerRun) {
+            return {
+                allowed: false,
+                violations: [{
+                        policy: "token_limit",
+                        severity: "medium",
+                        message: `Token usage ${tokens} exceeds limit ${this.config.maxTokensPerRun}`
+                    }]
+            };
+        }
+        return { allowed: true, violations: [] };
+    }
+    async evaluateLatencyLimit(context) {
+        const latency = context.latencyMs ?? 0;
+        if (latency > this.config.maxLatencyMs) {
+            return {
+                allowed: false,
+                violations: [{
+                        policy: "latency_limit",
+                        severity: "medium",
+                        message: `Latency ${latency}ms exceeds limit ${this.config.maxLatencyMs}ms`
+                    }]
+            };
+        }
+        return { allowed: true, violations: [] };
+    }
+    async evaluateBlockedContent(context) {
+        const violations = [];
+        const patterns = this.config.blockedPatterns ?? [];
+        if (!context.input?.userPrompt) {
+            return { allowed: true, violations: [] };
+        }
+        const text = context.input.userPrompt.toLowerCase();
+        for (const pattern of patterns) {
+            if (text.includes(pattern.toLowerCase())) {
+                violations.push({
+                    policy: "blocked_content",
+                    severity: "critical",
+                    message: `Prompt contains blocked pattern: ${pattern}`
+                });
+            }
+        }
+        const dangerousPatterns = [
+            "ignore previous instructions",
+            "disregard all",
+            "override safety",
+            "bypass restrictions"
+        ];
+        for (const pattern of dangerousPatterns) {
+            if (text.includes(pattern)) {
+                violations.push({
+                    policy: "blocked_content",
+                    severity: "critical",
+                    message: `Potential prompt injection detected: ${pattern}`
+                });
+            }
+        }
+        return {
+            allowed: violations.length === 0,
+            violations
+        };
+    }
+    async evaluateIntentWhitelist(context) {
+        if (!this.config.allowedIntents || this.config.allowedIntents.length === 0) {
+            return { allowed: true, violations: [] };
+        }
+        const intent = context.metadata?.intent;
+        if (!intent) {
+            return { allowed: true, violations: [] };
+        }
+        if (!this.config.allowedIntents.includes(intent)) {
+            return {
+                allowed: false,
+                violations: [{
+                        policy: "intent_whitelist",
+                        severity: "high",
+                        message: `Intent '${intent}' is not in allowed list`
+                    }]
+            };
+        }
+        return { allowed: true, violations: [] };
+    }
+    async evaluateApprovalRequired(context) {
+        const approvalFor = this.config.requireApprovalFor ?? [];
+        const agent = context.agent ?? context.metadata?.agent;
+        if (!agent || !approvalFor.includes(agent)) {
+            return { allowed: true, violations: [] };
+        }
+        if (context.metadata?.approved === true) {
+            return { allowed: true, violations: [] };
+        }
+        return {
+            allowed: false,
+            violations: [{
+                    policy: "approval_required",
+                    severity: "medium",
+                    message: `Agent '${agent}' requires human approval before execution`
+                }]
+        };
+    }
+    async evaluateRateLimit(context) {
+        if (!this.config.rateLimitPerMinute) {
+            return { allowed: true, violations: [] };
+        }
+        const key = context.metadata?.userId ?? "anonymous";
+        const now = Date.now();
+        const windowStart = now - 60000;
+        let requests = this.rateLimitTracker.get(key) ?? [];
+        requests = requests.filter(t => t > windowStart);
+        if (requests.length >= this.config.rateLimitPerMinute) {
+            return {
+                allowed: false,
+                violations: [{
+                        policy: "rate_limit",
+                        severity: "high",
+                        message: `Rate limit exceeded: ${requests.length} requests in the last minute`
+                    }]
+            };
+        }
+        requests.push(now);
+        this.rateLimitTracker.set(key, requests);
+        return { allowed: true, violations: [] };
+    }
+    updateStats(ruleId, decision) {
+        if (decision.allowed) {
+            this.stats.allowedCount++;
+        }
+        else {
+            this.stats.blockedCount++;
+        }
+        for (const violation of decision.violations) {
+            this.stats.violationsByType[ruleId] = (this.stats.violationsByType[ruleId] ?? 0) + 1;
+            this.stats.violationsBySeverity[violation.severity] = (this.stats.violationsBySeverity[violation.severity] ?? 0) + 1;
+        }
+    }
+    getStats() {
+        return { ...this.stats };
+    }
+    getConfig() {
+        return { ...this.config };
+    }
+    updateConfig(updates) {
+        this.config = { ...this.config, ...updates };
+    }
+    getRules() {
+        return Array.from(this.rules.values());
+    }
+    getRule(id) {
+        return this.rules.get(id);
+    }
+    resetStats() {
+        this.stats = {
+            totalEvaluations: 0,
+            violationsByType: {},
+            violationsBySeverity: {},
+            blockedCount: 0,
+            allowedCount: 0
+        };
+        this.rateLimitTracker.clear();
+    }
+}
+export class CostPolicy {
+    config;
+    name = "CostPolicy";
+    sessionCosts = new Map();
+    dailyCosts = new Map();
+    constructor(config) {
+        this.config = config;
+    }
+    async validateInput(input) {
+        const sessionId = input.context?.sessionId;
+        const today = new Date().toISOString().split("T")[0];
+        const sessionCost = this.sessionCosts.get(sessionId ?? "default") ?? 0;
+        const dailyCost = this.dailyCosts.get(today) ?? 0;
+        const violations = [];
+        if (sessionCost >= this.config.maxPerSession) {
+            violations.push({
+                policy: this.name,
+                severity: "critical",
+                message: `Session cost limit reached: $${sessionCost.toFixed(4)}`
+            });
+        }
+        if (dailyCost >= this.config.maxPerDay) {
+            violations.push({
+                policy: this.name,
+                severity: "critical",
+                message: `Daily cost limit reached: $${dailyCost.toFixed(4)}`
+            });
+        }
+        return {
+            allowed: violations.length === 0,
+            violations
+        };
+    }
+    async validateOutput(output) {
+        const cost = output.costUsd ?? 0;
+        if (cost > this.config.maxPerRequest) {
+            return {
+                allowed: false,
+                violations: [{
+                        policy: this.name,
+                        severity: "high",
+                        message: `Request cost $${cost.toFixed(4)} exceeds limit $${this.config.maxPerRequest}`
+                    }]
+            };
+        }
+        return { allowed: true, violations: [] };
+    }
+    recordCost(sessionId, cost) {
+        const today = new Date().toISOString().split("T")[0];
+        this.sessionCosts.set(sessionId, (this.sessionCosts.get(sessionId) ?? 0) + cost);
+        this.dailyCosts.set(today, (this.dailyCosts.get(today) ?? 0) + cost);
+    }
+    getSessionCost(sessionId) {
+        return this.sessionCosts.get(sessionId) ?? 0;
+    }
+    getDailyCost() {
+        const today = new Date().toISOString().split("T")[0];
+        return this.dailyCosts.get(today) ?? 0;
+    }
+}
+export class TokenPolicy {
+    config;
+    name = "TokenPolicy";
+    sessionTokens = new Map();
+    constructor(config) {
+        this.config = config;
+    }
+    async validateInput(input) {
+        const sessionId = input.context?.sessionId;
+        const estimatedTokens = this.estimateTokens(input.userPrompt);
+        const sessionTokens = this.sessionTokens.get(sessionId ?? "default") ?? 0;
+        const violations = [];
+        if (estimatedTokens > this.config.maxPerRequest) {
+            violations.push({
+                policy: this.name,
+                severity: "high",
+                message: `Request would exceed token limit: ${estimatedTokens} > ${this.config.maxPerRequest}`
+            });
+        }
+        if (sessionTokens + estimatedTokens > this.config.maxPerSession) {
+            violations.push({
+                policy: this.name,
+                severity: "high",
+                message: `Session token limit would be exceeded`
+            });
+        }
+        return {
+            allowed: violations.length === 0,
+            violations
+        };
+    }
+    async validateOutput(output) {
+        const tokens = output.usage?.totalTokens ?? 0;
+        if (tokens > this.config.maxPerRequest) {
+            return {
+                allowed: false,
+                violations: [{
+                        policy: this.name,
+                        severity: "medium",
+                        message: `Token usage ${tokens} exceeds limit ${this.config.maxPerRequest}`
+                    }]
+            };
+        }
+        return { allowed: true, violations: [] };
+    }
+    recordTokens(sessionId, tokens) {
+        this.sessionTokens.set(sessionId, (this.sessionTokens.get(sessionId) ?? 0) + tokens);
+    }
+    estimateTokens(text) {
+        return Math.ceil(text.split(/\s+/).length * 1.3);
+    }
+}
+//# sourceMappingURL=policy-engine.js.map

package/dist/governance/policy-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/governance/policy-engine.ts"],"names":[],"mappings":"AA2CA,MAAM,cAAc,GAAqB;IACvC,aAAa,EAAE,GAAG;IAClB,eAAe,EAAE,MAAM;IACvB,YAAY,EAAE,KAAK;CACpB,CAAC;AAEF,MAAM,OAAO,gBAAgB;IACnB,KAAK,GAAgC,IAAI,GAAG,EAAE,CAAC;IAC/C,MAAM,CAAmB;IACzB,KAAK,GAAoB;QAC/B,gBAAgB,EAAE,CAAC;QACnB,gBAAgB,EAAE,EAAE;QACpB,oBAAoB,EAAE,EAAE;QACxB,YAAY,EAAE,CAAC;QACf,YAAY,EAAE,CAAC;KAChB,CAAC;IACM,gBAAgB,GAA0B,IAAI,GAAG,EAAE,CAAC;IAE5D,YAAY,SAAoC,EAAE;QAChD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAChC,CAAC;IAEO,sBAAsB;QAC5B,IAAI,CAAC,OAAO,CAAC;YACX,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,4CAA4C;YACzD,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;SACrD,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,EAAE,EAAE,aAAa;YACjB,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,yCAAyC;YACtD,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;SACtD,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,EAAE,EAAE,eAAe;YACnB,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,4CAA4C;YACzD,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,EAAE,EAAE,iBAAiB;YACrB,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,+CAA+C;YAC5D,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;SAC1D,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,EAAE,EAAE,kBAAkB;YACtB,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,+BAA+B;YAC5C,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC;SAC3D,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,EAAE,EAAE,mBAAmB;YACvB,IAAI,EAAE,mBAAmB;YACzB,WAAW,EAAE,gDAAgD;YAC7D,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,MAAM;YACb,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC;SAC5D,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,0BAA0B;YACvC,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;SACrD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,IAAoB;QAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,WAAW,CAAC,MAAc;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,MAAM,aAAa,GAAsB,EAAE,CAAC;QAE5C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC;gBAAE,SAAS;YAEjF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEpC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtB,aAAa,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC;YAC1F,UAAU,EAAE,aAAa;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAA0B;QAC7C,MAAM,aAAa,GAAsB,EAAE,CAAC;QAE5C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC;gBAAE,SAAS;YAElF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAEpC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtB,aAAa,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;YACrF,UAAU,EAAE,aAAa;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAA0B,EAAE,KAAyB;QAClE,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAE9B,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,OAA0B;QACxD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,CAAC;QAE7D,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACrC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,CAAC;wBACX,MAAM,EAAE,YAAY;wBACpB,QAAQ,EAAE,MAAM;wBAChB,OAAO,EAAE,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;qBAChF,CAAC;aACH,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,GAAG,EAAE,CAAC;YAC3C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,CAAC;wBACX,MAAM,EAAE,YAAY;wBACpB,QAAQ,EAAE,KAAK;wBACf,OAAO,EAAE,4BAA4B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;qBACvF,CAAC;aACH,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,OAA0B;QACzD,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC;QAE7E,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,CAAC;wBACX,MAAM,EAAE,aAAa;wBACrB,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,eAAe,MAAM,kBAAkB,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE;qBAC9E,CAAC;aACH,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,OAA0B;QAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;QAEvC,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,CAAC;wBACX,MAAM,EAAE,eAAe;wBACvB,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,WAAW,OAAO,oBAAoB,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI;qBAC5E,CAAC;aACH,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,OAA0B;QAC7D,MAAM,UAAU,GAAsB,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;QAEnD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC;YAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QAEpD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACzC,UAAU,CAAC,IAAI,CAAC;oBACd,MAAM,EAAE,iBAAiB;oBACzB,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,oCAAoC,OAAO,EAAE;iBACvD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,iBAAiB,GAAG;YACxB,8BAA8B;YAC9B,eAAe;YACf,iBAAiB;YACjB,qBAAqB;SACtB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC;oBACd,MAAM,EAAE,iBAAiB;oBACzB,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,wCAAwC,OAAO,EAAE;iBAC3D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;YAChC,UAAU;SACX,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,OAA0B;QAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,MAA4B,CAAC;QAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,CAAC;wBACX,MAAM,EAAE,kBAAkB;wBAC1B,QAAQ,EAAE,MAAM;wBAChB,OAAO,EAAE,WAAW,MAAM,0BAA0B;qBACrD,CAAC;aACH,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,OAA0B;QAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,KAA2B,CAAC;QAE7E,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;YACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,CAAC;oBACX,MAAM,EAAE,mBAAmB;oBAC3B,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,UAAU,KAAK,4CAA4C;iBACrE,CAAC;SACH,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,OAA0B;QACxD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,MAAgB,IAAI,WAAW,CAAC;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,GAAG,GAAG,KAAK,CAAC;QAEhC,IAAI,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACpD,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC;QAEjD,IAAI,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACtD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,CAAC;wBACX,MAAM,EAAE,YAAY;wBACpB,QAAQ,EAAE,MAAM;wBAChB,OAAO,EAAE,wBAAwB,QAAQ,CAAC,MAAM,8BAA8B;qBAC/E,CAAC;aACH,CAAC;QACJ,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAEzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAEO,WAAW,CAAC,MAAc,EAAE,QAAwB;QAC1D,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QAC5B,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC5C,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACrF,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvH,CAAC;IACH,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,YAAY,CAAC,OAAkC;QAC7C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;IAC/C,CAAC;IAED,QAAQ;QACN,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,UAAU;QACR,IAAI,CAAC,KAAK,GAAG;YACX,gBAAgB,EAAE,CAAC;YACnB,gBAAgB,EAAE,EAAE;YACpB,oBAAoB,EAAE,EAAE;YACxB,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,CAAC;SAChB,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;CACF;AASD,MAAM,OAAO,UAAU;IAKD;IAJpB,IAAI,GAAG,YAAY,CAAC;IACZ,YAAY,GAAwB,IAAI,GAAG,EAAE,CAAC;IAC9C,UAAU,GAAwB,IAAI,GAAG,EAAE,CAAC;IAEpD,YAAoB,MAAwB;QAAxB,WAAM,GAAN,MAAM,CAAkB;IAAG,CAAC;IAEhD,KAAK,CAAC,aAAa,CAAC,KAAiB;QACnC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,EAAE,SAA+B,CAAC;QACjE,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAErD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAElD,MAAM,UAAU,GAAsB,EAAE,CAAC;QAEzC,IAAI,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC7C,UAAU,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,gCAAgC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;aAClE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACvC,UAAU,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,8BAA8B,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;aAC9D,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;YAChC,UAAU;SACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAmB;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QAEjC,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACrC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,CAAC;wBACX,MAAM,EAAE,IAAI,CAAC,IAAI;wBACjB,QAAQ,EAAE,MAAM;wBAChB,OAAO,EAAE,iBAAiB,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;qBACxF,CAAC;aACH,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAED,UAAU,CAAC,SAAiB,EAAE,IAAY;QACxC,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACjF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvE,CAAC;IAED,cAAc,CAAC,SAAiB;QAC9B,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,YAAY;QACV,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;CACF;AAQD,MAAM,OAAO,WAAW;IAIF;IAHpB,IAAI,GAAG,aAAa,CAAC;IACb,aAAa,GAAwB,IAAI,GAAG,EAAE,CAAC;IAEvD,YAAoB,MAAyB;QAAzB,WAAM,GAAN,MAAM,CAAmB;IAAG,CAAC;IAEjD,KAAK,CAAC,aAAa,CAAC,KAAiB;QACnC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,EAAE,SAA+B,CAAC;QACjE,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAE1E,MAAM,UAAU,GAAsB,EAAE,CAAC;QAEzC,IAAI,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAChD,UAAU,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,qCAAqC,eAAe,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;aAC/F,CAAC,CAAC;QACL,CAAC;QAED,IAAI,aAAa,GAAG,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAChE,UAAU,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,uCAAuC;aACjD,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;YAChC,UAAU;SACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAmB;QACtC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC;QAE9C,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,CAAC;wBACX,MAAM,EAAE,IAAI,CAAC,IAAI;wBACjB,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,eAAe,MAAM,kBAAkB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;qBAC5E,CAAC;aACH,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IAED,YAAY,CAAC,SAAiB,EAAE,MAAc;QAC5C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;IACvF,CAAC;IAEO,cAAc,CAAC,IAAY;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IACnD,CAAC;CACF"}

package/dist/governance/rbac-engine.d.ts

@@ -0,0 +1,59 @@
+export type Role = "admin" | "user" | "viewer";
+export type Permission = "workflow:read" | "workflow:write" | "workflow:execute" | "workflow:delete" | "config:read" | "config:write" | "metrics:read" | "audit:read" | "memory:read" | "memory:write" | "plugins:manage" | "providers:configure";
+export interface User {
+    id: string;
+    name: string;
+    email?: string;
+    role: Role;
+    permissions?: Permission[];
+    metadata?: Record<string, unknown>;
+    createdAt: number;
+}
+export interface RoleDefinition {
+    name: Role;
+    permissions: Permission[];
+    inherits?: Role;
+    description: string;
+}
+export declare class RBACEngine {
+    private roles;
+    private users;
+    private customPermissions;
+    constructor(roles?: RoleDefinition[]);
+    createAdminUser(id: string, name: string, email?: string): User;
+    createUser(id: string, name: string, role: Role, email?: string): User;
+    getUser(id: string): User | undefined;
+    updateUserRole(userId: string, role: Role): boolean;
+    grantPermission(userId: string, permission: Permission): boolean;
+    revokePermission(userId: string, permission: Permission): boolean;
+    hasPermission(userId: string, permission: Permission): boolean;
+    checkPermission(userId: string, permission: Permission): {
+        allowed: boolean;
+        reason?: string;
+    };
+    getUserPermissions(userId: string): Permission[];
+    getRolePermissions(role: Role): Permission[];
+    addRole(definition: RoleDefinition): void;
+    removeRole(role: Role): boolean;
+    listRoles(): RoleDefinition[];
+    listUsers(): User[];
+    deleteUser(userId: string): boolean;
+    validateAccess(userId: string, resource: string, action: string): {
+        allowed: boolean;
+        reason?: string;
+    };
+    canExecuteWorkflow(userId: string): boolean;
+    canModifyConfig(userId: string): boolean;
+    canViewMetrics(userId: string): boolean;
+    canManagePlugins(userId: string): boolean;
+    canConfigureProviders(userId: string): boolean;
+    exportState(): {
+        users: User[];
+        customPermissions: Record<string, Permission[]>;
+    };
+    importState(state: {
+        users: User[];
+        customPermissions?: Record<string, Permission[]>;
+    }): void;
+}
+//# sourceMappingURL=rbac-engine.d.ts.map

package/dist/governance/rbac-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-engine.d.ts","sourceRoot":"","sources":["../../src/governance/rbac-engine.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;AAC/C,MAAM,MAAM,UAAU,GAClB,eAAe,GACf,gBAAgB,GAChB,kBAAkB,GAClB,iBAAiB,GACjB,aAAa,GACb,cAAc,GACd,cAAc,GACd,YAAY,GACZ,aAAa,GACb,cAAc,GACd,gBAAgB,GAChB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,IAAI,CAAC;IACX,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,IAAI,CAAC;IACX,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAkCD,qBAAa,UAAU;IACrB,OAAO,CAAC,KAAK,CAAwC;IACrD,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,iBAAiB,CAAwC;gBAErD,KAAK,GAAE,cAAc,EAAkB;IAMnD,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAI/D,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAYtE,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS;IAIrC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO;IAQnD,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO;IAWhE,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO;IAUjE,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO;IAoB9D,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;IAa9F,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE;IAWhD,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,EAAE;IAK5C,OAAO,CAAC,UAAU,EAAE,cAAc,GAAG,IAAI;IAIzC,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO;IAO/B,SAAS,IAAI,cAAc,EAAE;IAI7B,SAAS,IAAI,IAAI,EAAE;IAInB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAKnC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;IAKvG,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAI3C,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIxC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIvC,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAIzC,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAI9C,WAAW,IAAI;QAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;KAAE;IAOjF,WAAW,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;KAAE,GAAG,IAAI;CAc9F"}