soturail 0.2.1

package/dist/core/native-runner-adapter.js

@@ -0,0 +1,60 @@
+import { spawn } from "node:child_process";
+export class NativeRunnerAdapter {
+    async run(options) {
+        const cwd = options.cwd ?? process.cwd();
+        const stdoutTarget = options.terminalStdout ?? process.stdout;
+        const stderrTarget = options.terminalStderr ?? process.stderr;
+        const chunks = [];
+        return new Promise((resolve, reject) => {
+            const child = spawn(options.command, {
+                cwd,
+                shell: true,
+                stdio: ["pipe", "pipe", "pipe"],
+                env: options.env ?? process.env,
+                windowsHide: !options.interactive
+            });
+            const tee = (chunk, target) => {
+                chunks.push(Buffer.from(chunk));
+                options.rawLogStream.write(chunk);
+                target.write(chunk);
+            };
+            child.stdout?.on("data", (chunk) => tee(chunk, stdoutTarget));
+            child.stderr?.on("data", (chunk) => tee(chunk, stderrTarget));
+            if (options.interactive && child.stdin && process.stdin.readable) {
+                if (process.stdin.isTTY) {
+                    process.stdin.resume();
+                }
+                process.stdin.pipe(child.stdin);
+            }
+            else {
+                child.stdin?.end();
+            }
+            const forwardSigint = () => {
+                child.kill("SIGINT");
+            };
+            process.once("SIGINT", forwardSigint);
+            child.once("error", (error) => {
+                process.off("SIGINT", forwardSigint);
+                if (options.interactive && child.stdin) {
+                    process.stdin.unpipe(child.stdin);
+                }
+                options.rawLogStream.end();
+                reject(error);
+            });
+            child.once("close", (code, signal) => {
+                process.off("SIGINT", forwardSigint);
+                if (options.interactive && child.stdin) {
+                    process.stdin.unpipe(child.stdin);
+                }
+                options.rawLogStream.end(() => {
+                    resolve({
+                        exitCode: code ?? (signal ? 130 : 1),
+                        signal,
+                        rawText: Buffer.concat(chunks).toString("utf8")
+                    });
+                });
+            });
+        });
+    }
+}
+//# sourceMappingURL=native-runner-adapter.js.map

package/dist/core/native-runner-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-runner-adapter.js","sourceRoot":"","sources":["../../src/core/native-runner-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAmB3C,MAAM,OAAO,mBAAmB;IAC9B,KAAK,CAAC,GAAG,CAAC,OAAsB;QAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;QAC9D,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;QAC9D,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,OAAO,IAAI,OAAO,CAAe,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE;gBACnC,GAAG;gBACH,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;gBAC/B,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW;aAClC,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,MAAgB,EAAQ,EAAE;gBACpD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAChC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAClC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC;YAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;YACtE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;YAEtE,IAAI,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACjE,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBACxB,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACzB,CAAC;gBACD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;YACrB,CAAC;YAED,MAAM,aAAa,GAAG,GAAS,EAAE;gBAC/B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC,CAAC;YAEF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAEtC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC5B,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;gBACrC,IAAI,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;oBACvC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;gBAC3B,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBACnC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;gBACrC,IAAI,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;oBACvC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE;oBAC5B,OAAO,CAAC;wBACN,QAAQ,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;wBACpC,MAAM;wBACN,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;qBAChD,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/core/raw-store.d.ts

@@ -0,0 +1,28 @@
+import type { WriteStream } from "node:fs";
+export interface RawRunRecord {
+    raw_id: string;
+    path: string;
+    command: string;
+    exit_code: number;
+    created_at: string;
+    compressor: string;
+    raw_tokens_estimated: number;
+    compressed_tokens_estimated: number;
+}
+export interface RawLogHandle {
+    rawId: string;
+    absolutePath: string;
+    relativePath: string;
+    createdAt: string;
+    stream: WriteStream;
+}
+export declare class RawStore {
+    private readonly root;
+    constructor(root?: string);
+    createLog(command: string, date?: Date): Promise<RawLogHandle>;
+    appendRunRecord(record: RawRunRecord): Promise<void>;
+    readManifest(): Promise<RawRunRecord[]>;
+    find(rawId: string): Promise<RawRunRecord | null>;
+    readRaw(rawId: string): Promise<Buffer | null>;
+    getAbsolutePath(record: RawRunRecord): string;
+}

package/dist/core/raw-store.js

@@ -0,0 +1,57 @@
+import { createWriteStream, promises as fs } from "node:fs";
+import path from "node:path";
+import { randomBytes } from "node:crypto";
+import { appendJsonl, getWorkspacePaths, readJsonl, relativeToRoot } from "./config.js";
+function dayStamp(date) {
+    return date.toISOString().slice(0, 10);
+}
+function fileStamp(date) {
+    return date.toISOString().replace(/[-:.]/g, "").replace("T", "T").replace("Z", "Z");
+}
+export class RawStore {
+    root;
+    constructor(root = process.cwd()) {
+        this.root = root;
+    }
+    async createLog(command, date = new Date()) {
+        const paths = getWorkspacePaths(this.root);
+        const rawId = randomBytes(4).toString("hex");
+        const dir = path.resolve(paths.rawDir, dayStamp(date));
+        await fs.mkdir(dir, { recursive: true });
+        const absolutePath = path.resolve(dir, `${fileStamp(date)}-${rawId}.log`);
+        const stream = createWriteStream(absolutePath, { flags: "wx" });
+        return {
+            rawId,
+            absolutePath,
+            relativePath: relativeToRoot(paths.root, absolutePath),
+            createdAt: date.toISOString(),
+            stream
+        };
+    }
+    async appendRunRecord(record) {
+        const paths = getWorkspacePaths(this.root);
+        await appendJsonl(paths.rawIndex, record);
+    }
+    async readManifest() {
+        const paths = getWorkspacePaths(this.root);
+        return readJsonl(paths.rawIndex);
+    }
+    async find(rawId) {
+        const records = await this.readManifest();
+        return records.find((record) => record.raw_id === rawId) ?? null;
+    }
+    async readRaw(rawId) {
+        const record = await this.find(rawId);
+        if (!record) {
+            return null;
+        }
+        const paths = getWorkspacePaths(this.root);
+        const absolutePath = path.resolve(paths.root, record.path);
+        return fs.readFile(absolutePath);
+    }
+    getAbsolutePath(record) {
+        const paths = getWorkspacePaths(this.root);
+        return path.resolve(paths.root, record.path);
+    }
+}
+//# sourceMappingURL=raw-store.js.map

package/dist/core/raw-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raw-store.js","sourceRoot":"","sources":["../../src/core/raw-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAqBxF,SAAS,QAAQ,CAAC,IAAU;IAC1B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,SAAS,CAAC,IAAU;IAC3B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,OAAO,QAAQ;IACU;IAA7B,YAA6B,OAAO,OAAO,CAAC,GAAG,EAAE;QAApB,SAAI,GAAJ,IAAI,CAAgB;IAAG,CAAC;IAErD,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,IAAI,GAAG,IAAI,IAAI,EAAE;QAChD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,iBAAiB,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,OAAO;YACL,KAAK;YACL,YAAY;YACZ,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC;YACtD,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE;YAC7B,MAAM;SACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAoB;QACxC,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAe,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3D,OAAO,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IAED,eAAe,CAAC,MAAoB;QAClC,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;CACF"}

package/dist/core/response-policy.d.ts

@@ -0,0 +1,11 @@
+export type ResponseMode = "normal" | "concise" | "ultra" | "review" | "commit" | "debug" | "docs";
+export declare const responseModes: ResponseMode[];
+export interface ResponsePolicy {
+    mode: ResponseMode;
+    preserveCodeBlocks: boolean;
+    preserveCommands: boolean;
+    preservePaths: boolean;
+    preserveSecurityWarnings: boolean;
+}
+export declare function buildResponsePolicy(mode: ResponseMode): ResponsePolicy;
+export declare function isResponseMode(value: string): value is ResponseMode;

package/dist/core/response-policy.js

@@ -0,0 +1,14 @@
+export const responseModes = ["normal", "concise", "ultra", "review", "commit", "debug", "docs"];
+export function buildResponsePolicy(mode) {
+    return {
+        mode,
+        preserveCodeBlocks: true,
+        preserveCommands: true,
+        preservePaths: true,
+        preserveSecurityWarnings: true
+    };
+}
+export function isResponseMode(value) {
+    return responseModes.includes(value);
+}
+//# sourceMappingURL=response-policy.js.map

package/dist/core/response-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-policy.js","sourceRoot":"","sources":["../../src/core/response-policy.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,aAAa,GAAmB,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAUjH,MAAM,UAAU,mBAAmB,CAAC,IAAkB;IACpD,OAAO;QACL,IAAI;QACJ,kBAAkB,EAAE,IAAI;QACxB,gBAAgB,EAAE,IAAI;QACtB,aAAa,EAAE,IAAI;QACnB,wBAAwB,EAAE,IAAI;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,aAAa,CAAC,QAAQ,CAAC,KAAqB,CAAC,CAAC;AACvD,CAAC"}

package/dist/core/rule-extractor.d.ts

@@ -0,0 +1,18 @@
+import type { IngestedDocument } from "./document-ingest.js";
+export type RuleSeverity = "low" | "medium" | "high";
+export type ValidationType = "package_json_check" | "required_file" | "forbidden_file" | "readme_section" | "ci_workflow" | "documentation_presence" | "manual_check";
+export interface ExtractedRule {
+    id: string;
+    title: string;
+    description: string;
+    source_file: string;
+    source_section: string;
+    severity: RuleSeverity;
+    validation_type: ValidationType;
+    suggested_validator_name: string;
+    created_at: string;
+    content_hash: string;
+}
+export declare function extractRules(document: IngestedDocument, now?: string): ExtractedRule[];
+export declare function rulesToYaml(rules: ExtractedRule[]): string;
+export declare function parseRulesYaml(yaml: string): ExtractedRule[];

package/dist/core/rule-extractor.js

@@ -0,0 +1,116 @@
+import { createHash } from "node:crypto";
+const RULE_SIGNAL = /\b(must|shall|required|requires|should|forbid|forbidden|never|minimum|include|presence|license|changelog|readme|node\.?js|ci workflow|agents\.md|claude\.md|gemini\.md)\b/i;
+export function extractRules(document, now = new Date().toISOString()) {
+    const rules = [];
+    for (const section of document.sections) {
+        const candidates = section.content
+            .split(/\r?\n/)
+            .map((line) => line.trim().replace(/^[-*]\s+/, "").replace(/^\d+[.)]\s+/, ""))
+            .filter((line) => line.length > 0 && RULE_SIGNAL.test(line));
+        candidates.forEach((candidate) => {
+            const validationType = inferValidationType(candidate);
+            const title = titleFrom(candidate);
+            const id = stableId(`${document.source_file}:${section.title}:${candidate}`);
+            rules.push({
+                id,
+                title,
+                description: candidate,
+                source_file: document.source_file,
+                source_section: section.title,
+                severity: inferSeverity(candidate),
+                validation_type: validationType,
+                suggested_validator_name: validatorName(validationType, title),
+                created_at: now,
+                content_hash: createHash("sha256").update(candidate).digest("hex")
+            });
+        });
+    }
+    return dedupeRules(rules);
+}
+function stableId(input) {
+    return createHash("sha256").update(input).digest("hex").slice(0, 12);
+}
+function titleFrom(line) {
+    const clean = line.replace(/[`*_]/g, "").replace(/[.:;]$/, "");
+    const words = clean.split(/\s+/).slice(0, 8).join(" ");
+    return words.charAt(0).toUpperCase() + words.slice(1);
+}
+function inferSeverity(line) {
+    if (/\b(must|shall|required|never|forbidden|security|minimum)\b/i.test(line)) {
+        return "high";
+    }
+    if (/\b(should|recommended|include)\b/i.test(line)) {
+        return "medium";
+    }
+    return "low";
+}
+function inferValidationType(line) {
+    if (/\bpackage\.json|node\.?js|version|engines\b/i.test(line)) {
+        return "package_json_check";
+    }
+    if (/\b(readme section|section named|README required sections)\b/i.test(line)) {
+        return "readme_section";
+    }
+    if (/\bci workflow|\.github\/workflows|github actions\b/i.test(line)) {
+        return "ci_workflow";
+    }
+    if (/\b(forbidden file|must not include|never commit)\b/i.test(line)) {
+        return "forbidden_file";
+    }
+    if (/\b(README|LICENSE|CHANGELOG|AGENTS\.md|CLAUDE\.md|GEMINI\.md|SECURITY\.md|CONTRIBUTING\.md)\b/.test(line)) {
+        return "required_file";
+    }
+    if (/\bdocs|documentation|changelog|license\b/i.test(line)) {
+        return "documentation_presence";
+    }
+    return "manual_check";
+}
+function validatorName(type, title) {
+    const safe = title.toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "").slice(0, 40);
+    return `${type}_${safe || "rule"}`;
+}
+function dedupeRules(rules) {
+    const seen = new Set();
+    const result = [];
+    for (const rule of rules) {
+        if (!seen.has(rule.id)) {
+            seen.add(rule.id);
+            result.push(rule);
+        }
+    }
+    return result;
+}
+export function rulesToYaml(rules) {
+    return `${rules
+        .map((rule) => [
+        `- id: ${rule.id}`,
+        `  title: ${yamlString(rule.title)}`,
+        `  description: ${yamlString(rule.description)}`,
+        `  source_file: ${yamlString(rule.source_file)}`,
+        `  source_section: ${yamlString(rule.source_section)}`,
+        `  severity: ${rule.severity}`,
+        `  validation_type: ${rule.validation_type}`,
+        `  suggested_validator_name: ${rule.suggested_validator_name}`,
+        `  created_at: ${rule.created_at}`,
+        `  content_hash: ${rule.content_hash}`
+    ].join("\n"))
+        .join("\n")}\n`;
+}
+function yamlString(value) {
+    return JSON.stringify(value);
+}
+export function parseRulesYaml(yaml) {
+    const blocks = yaml.split(/\n(?=- id: )/).filter((block) => block.trim().length > 0);
+    return blocks.map((block) => {
+        const record = {};
+        for (const line of block.split(/\r?\n/)) {
+            const match = line.match(/^\s*-?\s*([a-z_]+):\s*(.*)$/);
+            if (match?.[1]) {
+                const value = match[2] ?? "";
+                record[match[1]] = value.startsWith("\"") ? JSON.parse(value) : value;
+            }
+        }
+        return record;
+    });
+}
+//# sourceMappingURL=rule-extractor.js.map

package/dist/core/rule-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-extractor.js","sourceRoot":"","sources":["../../src/core/rule-extractor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA0BzC,MAAM,WAAW,GAAG,4KAA4K,CAAC;AAEjM,MAAM,UAAU,YAAY,CAAC,QAA0B,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IACrF,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO;aAC/B,KAAK,CAAC,OAAO,CAAC;aACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;aAC7E,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;YAC/B,MAAM,cAAc,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;YACnC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,QAAQ,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC;gBACT,EAAE;gBACF,KAAK;gBACL,WAAW,EAAE,SAAS;gBACtB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,cAAc,EAAE,OAAO,CAAC,KAAK;gBAC7B,QAAQ,EAAE,aAAa,CAAC,SAAS,CAAC;gBAClC,eAAe,EAAE,cAAc;gBAC/B,wBAAwB,EAAE,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC;gBAC9D,UAAU,EAAE,GAAG;gBACf,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aACnE,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,6DAA6D,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7E,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9D,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,IAAI,8DAA8D,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IAAI,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IAAI,+FAA+F,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/G,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,OAAO,wBAAwB,CAAC;IAClC,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,aAAa,CAAC,IAAoB,EAAE,KAAa;IACxD,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClG,OAAO,GAAG,IAAI,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAAC,KAAsB;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAsB;IAChD,OAAO,GAAG,KAAK;SACZ,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ;QACE,SAAS,IAAI,CAAC,EAAE,EAAE;QAClB,YAAY,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;QACpC,kBAAkB,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;QAChD,kBAAkB,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;QAChD,qBAAqB,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE;QACtD,eAAe,IAAI,CAAC,QAAQ,EAAE;QAC9B,sBAAsB,IAAI,CAAC,eAAe,EAAE;QAC5C,+BAA+B,IAAI,CAAC,wBAAwB,EAAE;QAC9D,iBAAiB,IAAI,CAAC,UAAU,EAAE;QAClC,mBAAmB,IAAI,CAAC,YAAY,EAAE;KACvC,CAAC,IAAI,CAAC,IAAI,CAAC,CACb;SACA,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1B,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACxD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACf,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAW,CAAC,CAAC,CAAC,KAAK,CAAC;YAClF,CAAC;QACH,CAAC;QACD,OAAO,MAAkC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/rule-validator.d.ts

@@ -0,0 +1,9 @@
+import type { ExtractedRule } from "./rule-extractor.js";
+export interface RuleCheckResult {
+    rule_id: string;
+    title: string;
+    ok: boolean;
+    validation_type: string;
+    message: string;
+}
+export declare function validateRules(rules: ExtractedRule[], root?: string): Promise<RuleCheckResult[]>;

package/dist/core/rule-validator.js

@@ -0,0 +1,85 @@
+import { promises as fs } from "node:fs";
+import path from "node:path";
+async function exists(root, relativePath) {
+    try {
+        await fs.access(path.resolve(root, relativePath));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function validateRules(rules, root = process.cwd()) {
+    const results = [];
+    for (const rule of rules) {
+        results.push(await validateRule(rule, root));
+    }
+    return results;
+}
+async function validateRule(rule, root) {
+    const text = `${rule.title} ${rule.description}`;
+    switch (rule.validation_type) {
+        case "package_json_check":
+            return validatePackageJson(rule, root);
+        case "required_file":
+        case "documentation_presence":
+            return validateRequiredFile(rule, root, text);
+        case "forbidden_file":
+            return validateForbiddenFile(rule, root, text);
+        case "readme_section":
+            return validateReadmeSections(rule, root, text);
+        case "ci_workflow":
+            return result(rule, await exists(root, ".github/workflows/ci.yml"), "checked .github/workflows/ci.yml");
+        case "manual_check":
+            return result(rule, true, "manual check recorded; no deterministic validator available");
+    }
+}
+async function validatePackageJson(rule, root) {
+    try {
+        const pkg = JSON.parse(await fs.readFile(path.resolve(root, "package.json"), "utf8"));
+        const node = pkg.engines?.node ?? "";
+        const ok = /20|>=20|22|24/.test(node);
+        return result(rule, ok, `package.json engines.node is ${node || "missing"}`);
+    }
+    catch {
+        return result(rule, false, "package.json missing or invalid");
+    }
+}
+async function validateRequiredFile(rule, root, text) {
+    const candidates = ["README.md", "LICENSE", "CHANGELOG.md", "AGENTS.md", "CLAUDE.md", "GEMINI.md", "SECURITY.md", "CONTRIBUTING.md"]
+        .filter((file) => text.includes(file));
+    if (candidates.length === 0) {
+        return result(rule, true, "no exact required file name detected; manual review may still apply");
+    }
+    const missing = [];
+    for (const file of candidates) {
+        if (!(await exists(root, file))) {
+            missing.push(file);
+        }
+    }
+    return result(rule, missing.length === 0, missing.length === 0 ? `found ${candidates.join(", ")}` : `missing ${missing.join(", ")}`);
+}
+async function validateForbiddenFile(rule, root, text) {
+    const match = text.match(/(?:file|include|commit)\s+([.\w/-]+)/i);
+    const file = match?.[1];
+    if (!file) {
+        return result(rule, true, "no exact forbidden file detected; manual review may still apply");
+    }
+    return result(rule, !(await exists(root, file)), `checked ${file}`);
+}
+async function validateReadmeSections(rule, root, text) {
+    const readme = await fs.readFile(path.resolve(root, "README.md"), "utf8").catch(() => "");
+    const sectionMatch = text.match(/section named\s+["']?([^"'.]+)["']?/i);
+    const required = sectionMatch?.[1]?.trim();
+    if (!required) {
+        return result(rule, readme.length > 0, "README.md exists; specific section not detected");
+    }
+    return result(rule, new RegExp(`^#+\\s+${escapeRegExp(required)}\\s*$`, "im").test(readme), `checked README section ${required}`);
+}
+function result(rule, ok, message) {
+    return { rule_id: rule.id, title: rule.title, ok, validation_type: rule.validation_type, message };
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//# sourceMappingURL=rule-validator.js.map

package/dist/core/rule-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-validator.js","sourceRoot":"","sources":["../../src/core/rule-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAW7B,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,YAAoB;IACtD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAsB,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE;IAC9E,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAmB,EAAE,IAAY;IAC3D,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;IACjD,QAAQ,IAAI,CAAC,eAAe,EAAE,CAAC;QAC7B,KAAK,oBAAoB;YACvB,OAAO,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,KAAK,eAAe,CAAC;QACrB,KAAK,wBAAwB;YAC3B,OAAO,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAChD,KAAK,gBAAgB;YACnB,OAAO,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACjD,KAAK,gBAAgB;YACnB,OAAO,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAClD,KAAK,aAAa;YAChB,OAAO,MAAM,CAAC,IAAI,EAAE,MAAM,MAAM,CAAC,IAAI,EAAE,0BAA0B,CAAC,EAAE,kCAAkC,CAAC,CAAC;QAC1G,KAAK,cAAc;YACjB,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,6DAA6D,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAmB,EAAE,IAAY;IAClE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAoC,CAAC;QACzH,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,gCAAgC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,iCAAiC,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAmB,EAAE,IAAY,EAAE,IAAY;IACjF,MAAM,UAAU,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,iBAAiB,CAAC;SACjI,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,qEAAqE,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACvI,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,IAAmB,EAAE,IAAY,EAAE,IAAY;IAClF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,iEAAiE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAAmB,EAAE,IAAY,EAAE,IAAY;IACnF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1F,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,iDAAiD,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,UAAU,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,0BAA0B,QAAQ,EAAE,CAAC,CAAC;AACpI,CAAC;AAED,SAAS,MAAM,CAAC,IAAmB,EAAE,EAAW,EAAE,OAAe;IAC/D,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,CAAC;AACrG,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC"}

package/dist/core/safety-policy.d.ts

@@ -0,0 +1,10 @@
+export declare const UNSAFE_CONFIRMATION = "I_UNDERSTAND_THIS_CAN_DESTROY_DATA";
+export interface ValidationResult {
+    ok: boolean;
+    blocked: boolean;
+    bypassed: boolean;
+    reason?: string;
+    matchedPattern?: string;
+}
+export declare function isDangerousCommand(command: string): boolean;
+export declare function validateCommand(command: string, unsafeConfirm?: string): ValidationResult;

package/dist/core/safety-policy.js

@@ -0,0 +1,69 @@
+export const UNSAFE_CONFIRMATION = "I_UNDERSTAND_THIS_CAN_DESTROY_DATA";
+const dangerousPatterns = [
+    {
+        name: "rm -rf",
+        pattern: /\brm\s+(?:-[^\s]*r[^\s]*f|-[^\s]*f[^\s]*r)\b/i,
+        reason: "recursive forced deletion is blocked by default"
+    },
+    {
+        name: "sudo",
+        pattern: /(^|[;&|]\s*)sudo\b/i,
+        reason: "privileged commands are blocked by default"
+    },
+    {
+        name: "format",
+        pattern: /(^|[;&|]\s*)format(?:\.com)?\b/i,
+        reason: "disk formatting commands are blocked by default"
+    },
+    {
+        name: "dd if=",
+        pattern: /\bdd\s+[^\n\r]*\bif=/i,
+        reason: "raw disk copy commands are blocked by default"
+    },
+    {
+        name: "curl | sh",
+        pattern: /\bcurl\b[^\n\r|]*\|\s*(?:sh|bash|zsh|fish)\b/i,
+        reason: "piping downloaded scripts into a shell is blocked by default"
+    },
+    {
+        name: "wget | sh",
+        pattern: /\bwget\b[^\n\r|]*\|\s*(?:sh|bash|zsh|fish)\b/i,
+        reason: "piping downloaded scripts into a shell is blocked by default"
+    },
+    {
+        name: "del /s",
+        pattern: /(^|[;&|]\s*)del\s+\/s\b/i,
+        reason: "recursive Windows deletion is blocked by default"
+    },
+    {
+        name: "git push",
+        pattern: /(^|[;&|]\s*)git\s+push\b/i,
+        reason: "automatic git push is blocked by SotuRail"
+    }
+];
+export function isDangerousCommand(command) {
+    return dangerousPatterns.some((entry) => entry.pattern.test(command));
+}
+export function validateCommand(command, unsafeConfirm) {
+    const match = dangerousPatterns.find((entry) => entry.pattern.test(command));
+    if (!match) {
+        return { ok: true, blocked: false, bypassed: false };
+    }
+    if (unsafeConfirm === UNSAFE_CONFIRMATION) {
+        return {
+            ok: true,
+            blocked: false,
+            bypassed: true,
+            reason: match.reason,
+            matchedPattern: match.name
+        };
+    }
+    return {
+        ok: false,
+        blocked: true,
+        bypassed: false,
+        reason: `${match.reason}. To bypass, pass --unsafe-confirm "${UNSAFE_CONFIRMATION}" exactly.`,
+        matchedPattern: match.name
+    };
+}
+//# sourceMappingURL=safety-policy.js.map

package/dist/core/safety-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-policy.js","sourceRoot":"","sources":["../../src/core/safety-policy.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG,oCAAoC,CAAC;AAUxE,MAAM,iBAAiB,GAA6D;IAClF;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE,iDAAiD;KAC1D;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,qBAAqB;QAC9B,MAAM,EAAE,4CAA4C;KACrD;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,iCAAiC;QAC1C,MAAM,EAAE,iDAAiD;KAC1D;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,uBAAuB;QAChC,MAAM,EAAE,+CAA+C;KACxD;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE,8DAA8D;KACvE;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE,8DAA8D;KACvE;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,0BAA0B;QACnC,MAAM,EAAE,kDAAkD;KAC3D;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,2BAA2B;QACpC,MAAM,EAAE,2CAA2C;KACpD;CACF,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,aAAsB;IACrE,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,aAAa,KAAK,mBAAmB,EAAE,CAAC;QAC1C,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,KAAK,CAAC,IAAI;SAC3B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,uCAAuC,mBAAmB,YAAY;QAC7F,cAAc,EAAE,KAAK,CAAC,IAAI;KAC3B,CAAC;AACJ,CAAC"}

package/dist/core/token-estimator.d.ts

@@ -0,0 +1,2 @@
+export declare function estimateTokens(text: string): number;
+export declare function tokenEstimateNote(): string;

package/dist/core/token-estimator.js

@@ -0,0 +1,7 @@
+export function estimateTokens(text) {
+    return Math.ceil(text.length / 4);
+}
+export function tokenEstimateNote() {
+    return "Token counts are deterministic local estimates using Math.ceil(text.length / 4); they are not provider billing numbers.";
+}
+//# sourceMappingURL=token-estimator.js.map

package/dist/core/token-estimator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-estimator.js","sourceRoot":"","sources":["../../src/core/token-estimator.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,yHAAyH,CAAC;AACnI,CAAC"}

package/dist/types/index.d.ts

@@ -0,0 +1,4 @@
+export type JsonPrimitive = string | number | boolean | null;
+export type JsonValue = JsonPrimitive | JsonValue[] | {
+    [key: string]: JsonValue;
+};

package/dist/types/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":""}

package/docs/architecture.md

@@ -0,0 +1,47 @@
+# Architecture
+
+SotuRail v0.2.1 is a TypeScript/Node.js local-first CLI. It stores all runtime state in `.soturail/` inside the repository. An optional Rust reducer and runner binary can be used when present, but TypeScript remains the orchestration and fallback layer.
+
+## Runtime Areas
+
+- `.soturail/config/config.json` - validated Zod config.
+- `.soturail/indexes/` - Heuristic Repo Map artifacts.
+- `.soturail/raw/` - raw command logs and manifest.
+- `.soturail/metrics/events.jsonl` - append-only local events.
+- `.soturail/specs/` - Spec-Driven Development artifacts.
+- `.soturail/memory/memory.jsonl` - Git-linked local memory.
+- `.soturail/memory/pending.jsonl` and `approved.jsonl` - memory approval workflow.
+- `.soturail/cache/blocks.jsonl` - stable prompt block manifest.
+- `.soturail/rules/` - extracted rules, checklists and citations.
+- `.soturail/hooks/hosts.json` - installed hook registry.
+
+## Flow
+
+```mermaid
+sequenceDiagram
+  participant User
+  participant CLI as soturail
+  participant Policy as safety-policy
+  participant Runner as NativeRunnerAdapter
+  participant Raw as raw-store
+  participant Reducer as compressors
+  User->>CLI: soturail run npm test
+  CLI->>Policy: validate command
+  Policy-->>CLI: ok
+  CLI->>Raw: create log file
+  CLI->>Runner: spawn shell command with pipes
+  Runner-->>User: live stdout/stderr
+  Runner-->>Raw: same chunks
+  Runner-->>CLI: exit code and captured text
+  CLI->>Reducer: compress summary
+  CLI->>Raw: append manifest
+  CLI-->>User: summary + raw_id
+```
+
+## Native Runner Boundary
+
+`NativeRunnerAdapter` remains the TypeScript command execution seam. The optional `soturail-native` crate implements reducer paths and a native tee-stream runner hot path. Future versions can package prebuilt native binaries for npm.
+
+## Repo Map
+
+The indexer is intentionally a Heuristic Repo Map. It uses regex-based MVP extraction for TypeScript/JavaScript, Python and Java symbols. It does not claim full AST support.

package/docs/assets/screenshots/README.md

@@ -0,0 +1,18 @@
+# Screenshots
+
+Place release screenshots and Markdown previews here.
+
+Suggested captures:
+
+- `soturail init`
+- `soturail index`
+- `soturail run npm test`
+- `soturail stats`
+
+Included SVG examples:
+
+- `init.svg`
+- `run-expand.svg`
+- `stats.svg`
+
+These are static documentation examples and do not contain benchmark claims.

package/docs/assets/screenshots/init.svg

@@ -0,0 +1,13 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 760 340" role="img" aria-labelledby="title desc">
+  <title id="title">SotuRail init documentation example</title>
+  <desc id="desc">Static terminal-style documentation example for soturail init.</desc>
+  <rect width="760" height="340" rx="14" fill="#0f172a"/>
+  <circle cx="28" cy="26" r="7" fill="#ef4444"/><circle cx="52" cy="26" r="7" fill="#f59e0b"/><circle cx="76" cy="26" r="7" fill="#22c55e"/>
+  <text x="28" y="70" fill="#e2e8f0" font-family="Consolas, monospace" font-size="18">$ soturail init</text>
+  <text x="28" y="108" fill="#fb923c" font-family="Consolas, monospace" font-size="18">SotuRail workspace initialized.</text>
+  <text x="28" y="150" fill="#e2e8f0" font-family="Consolas, monospace" font-size="16">Created paths:</text>
+  <text x="48" y="180" fill="#86efac" font-family="Consolas, monospace" font-size="16">+ .soturail/config/config.json</text>
+  <text x="48" y="208" fill="#86efac" font-family="Consolas, monospace" font-size="16">+ .soturail/raw/index.jsonl</text>
+  <text x="48" y="236" fill="#86efac" font-family="Consolas, monospace" font-size="16">+ docs/architecture.md</text>
+  <text x="28" y="286" fill="#94a3b8" font-family="Consolas, monospace" font-size="14">Documentation example; exact paths depend on your workspace.</text>
+</svg>