toolgovern-cli 0.1.0

package/dist/cli.d.ts

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+/**
+ * toolgovern-cli -- validate policy files and audit local gate traces without needing the
+ * hosted dashboard.
+ *
+ *   toolgovern-cli validate ./toolgovern.policy.yml
+ *   toolgovern-cli audit ./toolgovern-trace.jsonl --since 24h --decision deny
+ *
+ * Every command function below returns a `CliResult` (exit code + stdout/stderr text) instead of
+ * writing to `process.stdout`/`process.stderr` directly, so the command logic is testable in
+ * isolation -- `main()` is the only place that touches the real process streams.
+ */
+export interface CliResult {
+    readonly code: number;
+    readonly stdout: string;
+    readonly stderr: string;
+}
+export interface ParsedFlags {
+    readonly positional: readonly string[];
+    readonly flags: Readonly<Record<string, string | boolean>>;
+}
+export declare function parseArgs(argv: readonly string[]): ParsedFlags;
+export declare const USAGE: string;
+export declare function validateCommand(policyFile: string | undefined): CliResult;
+export declare function auditCommand(traceFile: string | undefined, flags: ParsedFlags['flags']): Promise<CliResult>;
+export declare function runCommand(argv: readonly string[]): Promise<CliResult>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG;AAcH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAC5D;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,CAoB9D;AAED,eAAO,MAAM,KAAK,QASN,CAAC;AAEb,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAuBzE;AAID,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,GAC1B,OAAO,CAAC,SAAS,CAAC,CA4EpB;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAiB5E"}

package/dist/cli.js

@@ -0,0 +1,176 @@
+#!/usr/bin/env node
+/**
+ * toolgovern-cli -- validate policy files and audit local gate traces without needing the
+ * hosted dashboard.
+ *
+ *   toolgovern-cli validate ./toolgovern.policy.yml
+ *   toolgovern-cli audit ./toolgovern-trace.jsonl --since 24h --decision deny
+ *
+ * Every command function below returns a `CliResult` (exit code + stdout/stderr text) instead of
+ * writing to `process.stdout`/`process.stderr` directly, so the command logic is testable in
+ * isolation -- `main()` is the only place that touches the real process streams.
+ */
+import { readFileSync } from 'node:fs';
+import { pathToFileURL } from 'node:url';
+import { parse as parseYaml } from 'yaml';
+import { validatePolicy, filterTrace, readTrace, verifyChain, } from 'toolgovern';
+export function parseArgs(argv) {
+    const positional = [];
+    const flags = {};
+    for (let i = 0; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === undefined)
+            continue;
+        if (arg.startsWith('--')) {
+            const key = arg.slice(2);
+            const next = argv[i + 1];
+            if (next !== undefined && !next.startsWith('--')) {
+                flags[key] = next;
+                i += 1;
+            }
+            else {
+                flags[key] = true;
+            }
+        }
+        else {
+            positional.push(arg);
+        }
+    }
+    return { positional, flags };
+}
+export const USAGE = [
+    'Usage:',
+    '  toolgovern-cli validate <policy-file>',
+    '  toolgovern-cli audit <trace-file> [--since <window>] [--decision <allow|deny|require-approval>] [--agent <id>] [--rule <ruleId>] [--verify-chain] [--key-file <path>]',
+    '',
+    '  --key-file  Path to the secret key file used to verify hmac-sha256-signed trace entries.',
+    '              Only needed if the trace was written with a TraceWriter secretKey. Entries',
+    '              signed with the default unkeyed sha256 scheme verify without it.',
+    '',
+].join('\n');
+export function validateCommand(policyFile) {
+    if (!policyFile) {
+        return { code: 2, stdout: '', stderr: `validate requires a <policy-file> argument.\n${USAGE}` };
+    }
+    let raw;
+    try {
+        raw = parseYaml(readFileSync(policyFile, 'utf8'));
+    }
+    catch (error) {
+        return {
+            code: 1,
+            stdout: '',
+            stderr: `Failed to read/parse "${policyFile}": ${error.message}\n`,
+        };
+    }
+    const result = validatePolicy(raw);
+    if (result.valid) {
+        return { code: 0, stdout: `OK  ${policyFile} is a valid toolgovern policy.\n`, stderr: '' };
+    }
+    const stderr = [`INVALID  ${policyFile}`, ...result.errors.map((e) => `  - ${e}`), ''].join('\n');
+    return { code: 1, stdout: '', stderr };
+}
+const VALID_DECISIONS = new Set(['allow', 'deny', 'require-approval']);
+export async function auditCommand(traceFile, flags) {
+    if (!traceFile) {
+        return { code: 2, stdout: '', stderr: `audit requires a <trace-file> argument.\n${USAGE}` };
+    }
+    let entries;
+    try {
+        entries = await readTrace(traceFile);
+    }
+    catch (error) {
+        return {
+            code: 1,
+            stdout: '',
+            stderr: `Failed to read trace file "${traceFile}": ${error.message}\n`,
+        };
+    }
+    let stdout = '';
+    if (flags['verify-chain']) {
+        let secretKey;
+        if (typeof flags['key-file'] === 'string') {
+            try {
+                secretKey = readFileSync(flags['key-file']);
+            }
+            catch (error) {
+                return {
+                    code: 1,
+                    stdout: '',
+                    stderr: `Failed to read --key-file "${flags['key-file']}": ${error.message}\n`,
+                };
+            }
+        }
+        const verification = verifyChain(entries, { secretKey });
+        if (!verification.valid) {
+            const stderr = [
+                `CHAIN INVALID  ${traceFile}`,
+                ...verification.issues.map((issue) => `  - ${issue.traceId}: ${issue.reason}`),
+                '',
+            ].join('\n');
+            return { code: 1, stdout: '', stderr };
+        }
+        stdout += `Chain OK -- ${entries.length} entries verified.\n`;
+    }
+    const decisionFlag = typeof flags.decision === 'string' ? flags.decision : undefined;
+    if (decisionFlag && !VALID_DECISIONS.has(decisionFlag)) {
+        return {
+            code: 2,
+            stdout: '',
+            stderr: `--decision must be one of: allow, deny, require-approval (got "${decisionFlag}")\n`,
+        };
+    }
+    const query = {
+        since: typeof flags.since === 'string' ? flags.since : undefined,
+        decision: decisionFlag,
+        agentId: typeof flags.agent === 'string' ? flags.agent : undefined,
+        ruleId: typeof flags.rule === 'string' ? flags.rule : undefined,
+    };
+    // filterTrace() throws on a malformed --since value (e.g. an unsupported unit like "1s") --
+    // that is a user input-validation error, not an unexpected crash, so it gets the same clean,
+    // no-stack-trace treatment as an invalid --decision above (exit code 2), not the generic
+    // "Unexpected error" handler in main().
+    let filtered;
+    try {
+        filtered = filterTrace(entries, query);
+    }
+    catch (error) {
+        return { code: 2, stdout: '', stderr: `${error.message}\n` };
+    }
+    for (const entry of filtered) {
+        const rules = entry.rule_fired.length > 0 ? entry.rule_fired.join(', ') : '(no rule fired)';
+        stdout += `${entry.decision.toUpperCase().padEnd(16)} ${entry.agent_id} -> ${entry.tool}  [${rules}]  ${entry.timestamp}\n`;
+    }
+    stdout += `\n${filtered.length} of ${entries.length} trace entries matched.\n`;
+    return { code: 0, stdout, stderr: '' };
+}
+export async function runCommand(argv) {
+    const [command, ...rest] = argv;
+    const { positional, flags } = parseArgs(rest);
+    if (!command || command === '--help' || command === '-h') {
+        return { code: command ? 0 : 2, stdout: command ? USAGE : '', stderr: command ? '' : USAGE };
+    }
+    if (command === 'validate') {
+        return validateCommand(positional[0]);
+    }
+    if (command === 'audit') {
+        return auditCommand(positional[0], flags);
+    }
+    return { code: 2, stdout: '', stderr: `Unknown command "${command}".\n${USAGE}` };
+}
+async function main() {
+    const result = await runCommand(process.argv.slice(2));
+    if (result.stdout)
+        process.stdout.write(result.stdout);
+    if (result.stderr)
+        process.stderr.write(result.stderr);
+    process.exitCode = result.code;
+}
+const isMainModule = process.argv[1] !== undefined && import.meta.url === pathToFileURL(process.argv[1]).href;
+if (isMainModule) {
+    main().catch((error) => {
+        process.stderr.write(`Unexpected error: ${error.stack ?? String(error)}\n`);
+        process.exitCode = 1;
+    });
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EACL,cAAc,EACd,WAAW,EACX,SAAS,EACT,WAAW,GAGZ,MAAM,YAAY,CAAC;AAapB,MAAM,UAAU,SAAS,CAAC,IAAuB;IAC/C,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,KAAK,GAAqC,EAAE,CAAC;IACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjD,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;gBAClB,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,QAAQ;IACR,yCAAyC;IACzC,yKAAyK;IACzK,EAAE;IACF,4FAA4F;IAC5F,0FAA0F;IAC1F,gFAAgF;IAChF,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,UAAU,eAAe,CAAC,UAA8B;IAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,gDAAgD,KAAK,EAAE,EAAE,CAAC;IAClG,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,yBAAyB,UAAU,MAAO,KAAe,CAAC,OAAO,IAAI;SAC9E,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,UAAU,kCAAkC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC9F,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,YAAY,UAAU,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClG,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAEvE,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAA6B,EAC7B,KAA2B;IAE3B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,4CAA4C,KAAK,EAAE,EAAE,CAAC;IAC9F,CAAC;IAED,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,8BAA8B,SAAS,MAAO,KAAe,CAAC,OAAO,IAAI;SAClF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,IAAI,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1B,IAAI,SAA6B,CAAC;QAClC,IAAI,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACH,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,IAAI,EAAE,CAAC;oBACP,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,8BAA8B,KAAK,CAAC,UAAU,CAAC,MAAO,KAAe,CAAC,OAAO,IAAI;iBAC1F,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG;gBACb,kBAAkB,SAAS,EAAE;gBAC7B,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC9E,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;QACzC,CAAC;QACD,MAAM,IAAI,eAAe,OAAO,CAAC,MAAM,sBAAsB,CAAC;IAChE,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,IAAI,YAAY,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACvD,OAAO;YACL,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,kEAAkE,YAAY,MAAM;SAC7F,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAe;QACxB,KAAK,EAAE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAChE,QAAQ,EAAE,YAAsC;QAChD,OAAO,EAAE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAClE,MAAM,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;KAChE,CAAC;IAEF,4FAA4F;IAC5F,6FAA6F;IAC7F,yFAAyF;IACzF,wCAAwC;IACxC,IAAI,QAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAI,KAAe,CAAC,OAAO,IAAI,EAAE,CAAC;IAC1E,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC5F,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,QAAQ,OAAO,KAAK,CAAC,IAAI,MAAM,KAAK,MAAM,KAAK,CAAC,SAAS,IAAI,CAAC;IAC9H,CAAC;IACD,MAAM,IAAI,KAAK,QAAQ,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,2BAA2B,CAAC;IAE/E,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAuB;IACtD,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAChC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE9C,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/F,CAAC;IAED,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,oBAAoB,OAAO,OAAO,KAAK,EAAE,EAAE,CAAC;AACpF,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,YAAY,GAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3F,IAAI,YAAY,EAAE,CAAC;IACjB,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAsB,KAAe,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "toolgovern-cli",
+  "version": "0.1.0",
+  "description": "CLI for toolgovern -- validate policy files and audit local gate traces.",
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "./dist/cli.js",
+  "types": "./dist/cli.d.ts",
+  "bin": {
+    "toolgovern-cli": "./dist/cli.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/RudrenduPaul/toolgovern.git",
+    "directory": "packages/toolgovern-cli"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit --strict",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "toolgovern": "0.1.0",
+    "yaml": "^2.6.1"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.2"
+  }
+}