veto-leash 0.1.3 → 1.0.1

package/dist/native/opencode.js

@@ -14,8 +14,20 @@ const POLICIES_FILE = join(VETO_LEASH_CONFIG_DIR, 'policies.json');
  */
 function policyToOpenCodeRules(policy) {
     const rules = {};
+    // === COMMAND RULES (Phase 1) ===
+    // Convert commandRules to OpenCode bash permission rules
+    if (policy.commandRules && policy.commandRules.length > 0) {
+        for (const rule of policy.commandRules) {
+            for (const pattern of rule.block) {
+                // Convert veto-leash command patterns to OpenCode format
+                // "npm install*" -> "npm install*" (same format)
+                rules[pattern] = 'deny';
+            }
+        }
+    }
+    // === FILE RULES ===
     // Generate bash permission rules based on action and patterns
-    if (policy.action === 'delete') {
+    if (policy.action === 'delete' && policy.include.length > 0) {
         // Block rm commands for protected files
         for (const pattern of policy.include) {
             // Convert glob to OpenCode wildcard format
@@ -39,7 +51,7 @@ function policyToOpenCodeRules(policy) {
             rules[`rm -rf ${ocPattern}`] = 'allow';
         }
     }
-    if (policy.action === 'modify') {
+    if (policy.action === 'modify' && policy.include.length > 0) {
         // Block modification commands for protected files
         for (const pattern of policy.include) {
             const ocPattern = pattern
@@ -49,7 +61,7 @@ function policyToOpenCodeRules(policy) {
             rules[`cp * ${ocPattern}`] = 'deny';
         }
     }
-    if (policy.action === 'execute') {
+    if (policy.action === 'execute' && policy.include.length > 0) {
         // Block execution for protected patterns
         for (const pattern of policy.include) {
             const ocPattern = pattern

package/dist/native/opencode.js.map

@@ -1 +1 @@
-{"version":3,"file":"opencode.js","sourceRoot":"","sources":["../../src/native/opencode.ts"],"names":[],"mappings":"AAAA,yBAAyB;AACzB,yCAAyC;AACzC,iEAAiE;AAEjE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,sBAAsB,GAAG,IAAI,CACjC,OAAO,EAAE,EACT,SAAS,EACT,UAAU,EACV,eAAe,CAChB,CAAC;AACF,MAAM,uBAAuB,GAAG,eAAe,CAAC;AAChD,MAAM,qBAAqB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AACvE,MAAM,aAAa,GAAG,IAAI,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC;AAmBnE;;GAEG;AACH,SAAS,qBAAqB,CAAC,MAAc;IAC3C,MAAM,KAAK,GAA2B,EAAE,CAAC;IAEzC,8DAA8D;IAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,wCAAwC;QACxC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,2CAA2C;YAC3C,MAAM,SAAS,GAAG,OAAO;iBACtB,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAE,YAAY;iBACtC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAI,UAAU;YAEvC,KAAK,CAAC,MAAM,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC;YAClC,KAAK,CAAC,SAAS,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC;YACrC,KAAK,CAAC,UAAU,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC;YACtC,KAAK,CAAC,SAAS,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC;YACrC,KAAK,CAAC,UAAU,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC;YACtC,KAAK,CAAC,aAAa,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC;QAC3C,CAAC;QAED,0BAA0B;QAC1B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,OAAO;iBACtB,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;iBACxB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAEzB,KAAK,CAAC,MAAM,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC;YACnC,KAAK,CAAC,SAAS,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC;YACtC,KAAK,CAAC,UAAU,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC;QACzC,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,kDAAkD;QAClD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,OAAO;iBACtB,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;iBACxB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAEzB,KAAK,CAAC,MAAM,SAAS,IAAI,CAAC,GAAG,MAAM,CAAC;YACpC,KAAK,CAAC,QAAQ,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC;QACtC,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,yCAAyC;QACzC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,OAAO;iBACtB,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;iBACxB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAEzB,kDAAkD;YAClD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,KAAK,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC;gBAC5B,KAAK,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC;gBAClC,KAAK,CAAC,qBAAqB,CAAC,GAAG,MAAM,CAAC;gBACtC,KAAK,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,SAA+B,SAAS;IAExC,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,IAAI,uCAAuC,MAAM,OAAO,MAAM,CAAC,KAAK,IAAI,CACrF,CAAC;IAEF,yBAAyB;IACzB,MAAM,cAAc,GAAG,kBAAkB,EAAE,CAAC;IAC5C,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,CACT,GAAG,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,0CAA0C,MAAM,CAAC,KAAK,EAAE,CAC5F,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,sCAAsC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,6BAA6B;IAC7B,MAAM,UAAU,GACd,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAEzE,uBAAuB;IACvB,IAAI,MAAM,GAAmB;QAC3B,OAAO,EAAE,iCAAiC;KAC3C,CAAC;IAEF,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;IACzB,CAAC;IAED,8DAA8D;IAC9D,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;QACxC,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IAC7C,CAAC;SAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,EAAE,CAAC;IAC9B,CAAC;IAED,6CAA6C;IAC7C,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG;YACvB,GAAI,MAAM,CAAC,UAAU,CAAC,IAA+B;YACrD,GAAG,KAAK;SACT,CAAC;IACJ,CAAC;IAED,eAAe;IACf,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,aAAa,UAAU,EAAE,CAC9E,CAAC;IAEF,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,iDAAiD,MAAM,CAAC,KAAK,IAAI,CACvG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,qEAAqE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9G,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,sDAAsD,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;AACnG,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B;IACxC,MAAM,cAAc,GAAG,kBAAkB,EAAE,CAAC;IAE5C,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,0CAA0C,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAC3F,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,8BAA8B,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAE5C,KAAK,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,UAAU,MAAM,CAAC,KAAK,KAAK,WAAW,GAAG,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,UAAU,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QAEtE,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,mBAAmB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,mCAAmC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;AAClF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,SAA+B,SAAS;IAExC,MAAM,UAAU,GACd,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAEzE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,2BAA2B,UAAU,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CACvC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAClC,CAAC;QAEF,kEAAkE;QAClE,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAA8B,CAAC;YAC9D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,IACE,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;oBACrB,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;oBACzB,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;oBACrB,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EACrB,CAAC;oBACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;QAED,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CACT,GAAG,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,kCAAkC,UAAU,GAAG,MAAM,CAAC,KAAK,EAAE,CACjG,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CACT,GAAG,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,+BAA+B,MAAM,CAAC,KAAK,EAAE,CACjF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,WAAmB,EAAE,MAAc;IAC5D,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IAEpC,sBAAsB;IACtB,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CACrC,CAAC;IAEF,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,SAAS,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IAEpC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,sBAAsB,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,kBAAkB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,IAAI,WAAW,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,UAAU,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,eAAe,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;IACrF,CAAC;AACH,CAAC"}
+{"version":3,"file":"opencode.js","sourceRoot":"","sources":["../../src/native/opencode.ts"],"names":[],"mappings":"AAAA,yBAAyB;AACzB,yCAAyC;AACzC,iEAAiE;AAEjE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,sBAAsB,GAAG,IAAI,CACjC,OAAO,EAAE,EACT,SAAS,EACT,UAAU,EACV,eAAe,CAChB,CAAC;AACF,MAAM,uBAAuB,GAAG,eAAe,CAAC;AAChD,MAAM,qBAAqB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AACvE,MAAM,aAAa,GAAG,IAAI,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC;AAmBnE;;GAEG;AACH,SAAS,qBAAqB,CAAC,MAAc;IAC3C,MAAM,KAAK,GAA2B,EAAE,CAAC;IAEzC,kCAAkC;IAClC,yDAAyD;IACzD,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACvC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACjC,yDAAyD;gBACzD,iDAAiD;gBACjD,KAAK,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,8DAA8D;IAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,wCAAwC;QACxC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,2CAA2C;YAC3C,MAAM,SAAS,GAAG,OAAO;iBACtB,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAE,YAAY;iBACtC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAI,UAAU;YAEvC,KAAK,CAAC,MAAM,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC;YAClC,KAAK,CAAC,SAAS,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC;YACrC,KAAK,CAAC,UAAU,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC;YACtC,KAAK,CAAC,SAAS,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC;YACrC,KAAK,CAAC,UAAU,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC;YACtC,KAAK,CAAC,aAAa,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC;QAC3C,CAAC;QAED,0BAA0B;QAC1B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,OAAO;iBACtB,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;iBACxB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAEzB,KAAK,CAAC,MAAM,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC;YACnC,KAAK,CAAC,SAAS,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC;YACtC,KAAK,CAAC,UAAU,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC;QACzC,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,kDAAkD;QAClD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,OAAO;iBACtB,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;iBACxB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAEzB,KAAK,CAAC,MAAM,SAAS,IAAI,CAAC,GAAG,MAAM,CAAC;YACpC,KAAK,CAAC,QAAQ,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC;QACtC,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,yCAAyC;QACzC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,OAAO;iBACtB,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;iBACxB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAEzB,kDAAkD;YAClD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,KAAK,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC;gBAC5B,KAAK,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC;gBAClC,KAAK,CAAC,qBAAqB,CAAC,GAAG,MAAM,CAAC;gBACtC,KAAK,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,SAA+B,SAAS;IAExC,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,IAAI,uCAAuC,MAAM,OAAO,MAAM,CAAC,KAAK,IAAI,CACrF,CAAC;IAEF,yBAAyB;IACzB,MAAM,cAAc,GAAG,kBAAkB,EAAE,CAAC;IAC5C,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,CACT,GAAG,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,0CAA0C,MAAM,CAAC,KAAK,EAAE,CAC5F,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,sCAAsC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,6BAA6B;IAC7B,MAAM,UAAU,GACd,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAEzE,uBAAuB;IACvB,IAAI,MAAM,GAAmB;QAC3B,OAAO,EAAE,iCAAiC;KAC3C,CAAC;IAEF,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;IACzB,CAAC;IAED,8DAA8D;IAC9D,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;QACxC,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IAC7C,CAAC;SAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,EAAE,CAAC;IAC9B,CAAC;IAED,6CAA6C;IAC7C,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG;YACvB,GAAI,MAAM,CAAC,UAAU,CAAC,IAA+B;YACrD,GAAG,KAAK;SACT,CAAC;IACJ,CAAC;IAED,eAAe;IACf,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,aAAa,UAAU,EAAE,CAC9E,CAAC;IAEF,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,iDAAiD,MAAM,CAAC,KAAK,IAAI,CACvG,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,qEAAqE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9G,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,sDAAsD,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;AACnG,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B;IACxC,MAAM,cAAc,GAAG,kBAAkB,EAAE,CAAC;IAE5C,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,0CAA0C,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAC3F,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,8BAA8B,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAE5C,KAAK,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,UAAU,MAAM,CAAC,KAAK,KAAK,WAAW,GAAG,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,UAAU,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QAEtE,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,mBAAmB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,mCAAmC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;AAClF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,SAA+B,SAAS;IAExC,MAAM,UAAU,GACd,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAEzE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,2BAA2B,UAAU,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CACvC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAClC,CAAC;QAEF,kEAAkE;QAClE,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAA8B,CAAC;YAC9D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,IACE,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;oBACrB,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;oBACzB,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;oBACrB,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EACrB,CAAC;oBACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;QAED,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CACT,GAAG,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,kCAAkC,UAAU,GAAG,MAAM,CAAC,KAAK,EAAE,CACjG,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CACT,GAAG,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,+BAA+B,MAAM,CAAC,KAAK,EAAE,CACjF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,WAAmB,EAAE,MAAc;IAC5D,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IAEpC,sBAAsB;IACtB,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CACrC,CAAC;IAEF,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,SAAS,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IAEpC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,sBAAsB,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,kBAAkB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,IAAI,WAAW,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,UAAU,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,eAAe,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;IACrF,CAAC;AACH,CAAC"}

package/dist/native/validator.d.ts

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+/**
+ * veto-leash validator for Claude Code PreToolUse hooks.
+ *
+ * Input (via stdin): JSON with tool_name, tool_input, cwd, session_id
+ * Output (via stdout): JSON with hookSpecificOutput.permissionDecision and systemMessage
+ * Exit code: 0 always (decision communicated via JSON)
+ *
+ * Supports:
+ * - Command-level policies (commandRules with block patterns)
+ * - Content-level policies (AST-based with zero false positives)
+ * - File-level policies (include/exclude patterns)
+ */
+export {};
+//# sourceMappingURL=validator.d.ts.map

package/dist/native/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/native/validator.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG"}

package/dist/native/validator.js

@@ -0,0 +1,368 @@
+#!/usr/bin/env node
+/**
+ * veto-leash validator for Claude Code PreToolUse hooks.
+ *
+ * Input (via stdin): JSON with tool_name, tool_input, cwd, session_id
+ * Output (via stdout): JSON with hookSpecificOutput.permissionDecision and systemMessage
+ * Exit code: 0 always (decision communicated via JSON)
+ *
+ * Supports:
+ * - Command-level policies (commandRules with block patterns)
+ * - Content-level policies (AST-based with zero false positives)
+ * - File-level policies (include/exclude patterns)
+ */
+import { existsSync, readdirSync, readFileSync } from 'fs';
+import { join, dirname, basename, relative, isAbsolute } from 'path';
+import { fileURLToPath } from 'url';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+// AST modules - loaded dynamically to avoid crashes if not available
+let astAvailable = false;
+let checkContentAST = null;
+let initParser = null;
+let loadLanguage = null;
+let detectLanguage = null;
+async function loadASTModules() {
+    try {
+        // @ts-ignore - Dynamic imports for deployed standalone module
+        const checker = await import('./ast/checker.js');
+        // @ts-ignore - Dynamic imports for deployed standalone module
+        const parser = await import('./ast/parser.js');
+        checkContentAST = checker.checkContentAST;
+        initParser = parser.initParser;
+        loadLanguage = parser.loadLanguage;
+        detectLanguage = parser.detectLanguage;
+        astAvailable = true;
+    }
+    catch {
+        // AST modules not available - will use regex-only content checking
+        astAvailable = false;
+    }
+}
+// Common command aliases for matching
+const COMMAND_ALIASES = {
+    'npm i': ['npm install'],
+    'npm ci': ['npm clean-install'],
+    'npm r': ['npm remove', 'npm uninstall'],
+    'npm rm': ['npm remove', 'npm uninstall'],
+    'pnpm i': ['pnpm install'],
+    'bun i': ['bun install'],
+    'bun a': ['bun add'],
+    'git co': ['git checkout'],
+};
+function outputAllow() {
+    const output = {
+        hookSpecificOutput: { permissionDecision: 'allow' },
+    };
+    console.log(JSON.stringify(output));
+    process.exit(0);
+}
+function outputDeny(reason, opts) {
+    let message = `veto-leash: BLOCKED\n\nReason: ${reason}`;
+    if (opts?.line)
+        message += `\nLine: ${opts.line}`;
+    if (opts?.match)
+        message += `\nMatch: ${opts.match}`;
+    if (opts?.suggest)
+        message += `\n\nSuggested alternative: ${opts.suggest}`;
+    message += '\n\nThe action was blocked by a veto-leash policy. Please follow the suggested alternative or modify your approach.';
+    const output = {
+        hookSpecificOutput: { permissionDecision: 'deny' },
+        systemMessage: message,
+    };
+    console.log(JSON.stringify(output));
+    process.exit(0);
+}
+function loadPolicies(policiesDir) {
+    if (!existsSync(policiesDir))
+        return [];
+    const policies = [];
+    for (const file of readdirSync(policiesDir)) {
+        if (!file.endsWith('.json'))
+            continue;
+        try {
+            const content = readFileSync(join(policiesDir, file), 'utf-8');
+            policies.push(JSON.parse(content));
+        }
+        catch {
+            // Skip invalid files
+        }
+    }
+    return policies;
+}
+function normalizeCommand(cmd) {
+    return cmd.toLowerCase().split(/\s+/).join(' ');
+}
+function expandCommandAliases(command) {
+    const normalized = normalizeCommand(command);
+    const expanded = [normalized];
+    for (const [alias, expansions] of Object.entries(COMMAND_ALIASES)) {
+        if (normalized.startsWith(alias)) {
+            const suffix = normalized.slice(alias.length);
+            for (const expansion of expansions) {
+                expanded.push(expansion + suffix);
+            }
+        }
+    }
+    return expanded;
+}
+function matchesGlob(text, pattern) {
+    // Simple glob matching: * matches any characters
+    const regex = new RegExp('^' + pattern.replace(/[.+^${}()|[\]\\]/g, '\\$&').replace(/\*/g, '.*').replace(/\?/g, '.') + '$');
+    return regex.test(text);
+}
+function commandMatchesPattern(command, pattern) {
+    const cmd = normalizeCommand(command);
+    const pat = normalizeCommand(pattern);
+    // Exact match
+    if (cmd === pat)
+        return true;
+    // No wildcards - prefix match
+    if (!pat.includes('*') && !pat.includes('?')) {
+        return cmd.startsWith(pat + ' ') || cmd === pat;
+    }
+    // Wildcards - glob match
+    if (!pat.startsWith('*')) {
+        const firstStar = pat.indexOf('*');
+        const prefix = pat.slice(0, firstStar);
+        if (!cmd.startsWith(prefix))
+            return false;
+    }
+    return matchesGlob(cmd, pat);
+}
+function checkCommandRules(command, policy) {
+    if (!policy.commandRules?.length)
+        return null;
+    const variations = expandCommandAliases(command);
+    for (const rule of policy.commandRules) {
+        for (const pattern of rule.block) {
+            for (const variation of variations) {
+                if (commandMatchesPattern(variation, pattern)) {
+                    return { reason: rule.reason, suggest: rule.suggest };
+                }
+            }
+        }
+    }
+    return null;
+}
+function fileMatchesPatterns(filePath, patterns) {
+    if (!patterns.length)
+        return true;
+    const normalized = filePath.replace(/\\/g, '/');
+    const name = basename(normalized);
+    for (const pattern of patterns) {
+        // Simple extension match: "*.ts"
+        if (pattern.startsWith('*.') && !pattern.includes('/')) {
+            if (name.endsWith(pattern.slice(1)))
+                return true;
+            continue;
+        }
+        // Full glob match
+        if (matchesGlob(normalized, pattern) || matchesGlob(name, pattern))
+            return true;
+    }
+    return false;
+}
+function isProtected(target, policy) {
+    if (!policy.include.length)
+        return false;
+    const normalized = target.replace(/\\/g, '/');
+    const name = basename(normalized);
+    const matchesInclude = policy.include.some((p) => matchesGlob(normalized, p) || matchesGlob(name, p));
+    if (!matchesInclude)
+        return false;
+    const matchesExclude = policy.exclude.some((p) => matchesGlob(normalized, p) || matchesGlob(name, p));
+    return !matchesExclude;
+}
+function parseBashTargets(command, action) {
+    const targets = [];
+    if (action === 'delete') {
+        const rmMatch = command.match(/\brm\s+(?:-[rfiv]+\s+)*(.+)/);
+        if (rmMatch) {
+            for (const arg of rmMatch[1].split(/\s+/)) {
+                if (!arg.startsWith('-'))
+                    targets.push(arg);
+            }
+        }
+        const gitRmMatch = command.match(/\bgit\s+rm\s+(?:-[rf]+\s+)*(.+)/);
+        if (gitRmMatch) {
+            for (const arg of gitRmMatch[1].split(/\s+/)) {
+                if (!arg.startsWith('-'))
+                    targets.push(arg);
+            }
+        }
+    }
+    else if (action === 'modify') {
+        const mvMatch = command.match(/\b(mv|cp)\s+(?:-[a-z]+\s+)*(.+)/);
+        if (mvMatch) {
+            for (const arg of mvMatch[2].split(/\s+/)) {
+                if (!arg.startsWith('-')) {
+                    targets.push(arg);
+                    break;
+                }
+            }
+        }
+    }
+    return targets;
+}
+function getActionsForTool(toolName) {
+    const mapping = {
+        Bash: ['delete', 'modify', 'execute'],
+        Write: ['modify'],
+        Edit: ['modify'],
+        MultiEdit: ['modify'],
+        Read: ['read'],
+    };
+    return mapping[toolName] || [];
+}
+async function readStdin() {
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(chunk);
+    }
+    return Buffer.concat(chunks).toString('utf-8');
+}
+async function main() {
+    try {
+        // Try to load AST modules (may fail if dependencies not available)
+        await loadASTModules();
+        const inputText = await readStdin();
+        if (!inputText.trim()) {
+            outputAllow();
+            return;
+        }
+        let input;
+        try {
+            input = JSON.parse(inputText);
+        }
+        catch {
+            outputAllow();
+            return;
+        }
+        const { tool_name: toolName, tool_input: toolInput, cwd } = input;
+        // Determine policies directory (sibling to this script when installed)
+        const policiesDir = join(__dirname, 'policies');
+        const policies = loadPolicies(policiesDir);
+        if (!policies.length) {
+            outputAllow();
+            return;
+        }
+        // === COMMAND-LEVEL CHECKING (for Bash tool) ===
+        if (toolName === 'Bash') {
+            const command = String(toolInput.command || '');
+            for (const policy of policies) {
+                const result = checkCommandRules(command, policy);
+                if (result) {
+                    outputDeny(result.reason, { suggest: result.suggest });
+                    return;
+                }
+            }
+        }
+        // === CONTENT-LEVEL CHECKING WITH AST (for Write/Edit tools) ===
+        if (['Write', 'Edit', 'MultiEdit'].includes(toolName)) {
+            const filePath = String(toolInput.file_path || '');
+            let content = '';
+            if (toolName === 'Write') {
+                content = String(toolInput.content || '');
+            }
+            else if (toolName === 'Edit') {
+                content = String(toolInput.new_string || '');
+            }
+            else if (toolName === 'MultiEdit') {
+                const edits = toolInput.edits || [];
+                content = edits.map((e) => e.new_string || '').join('\n');
+            }
+            if (filePath && content) {
+                // Check if AST modules loaded and file is a supported language
+                if (astAvailable && detectLanguage) {
+                    const language = detectLanguage(filePath);
+                    if (language && initParser && loadLanguage && checkContentAST) {
+                        // Initialize parser and load language
+                        await initParser();
+                        await loadLanguage(language);
+                        // Check each policy with AST
+                        for (const policy of policies) {
+                            const result = await checkContentAST(content, filePath, policy);
+                            if (!result.allowed && result.match) {
+                                outputDeny(result.match.reason, {
+                                    suggest: result.match.suggest,
+                                    line: result.match.line,
+                                    match: result.match.text.slice(0, 50),
+                                });
+                                return;
+                            }
+                        }
+                    }
+                }
+                // Fallback: check regex contentRules for non-AST files or as backup
+                for (const policy of policies) {
+                    if (!policy.contentRules?.length)
+                        continue;
+                    for (const rule of policy.contentRules) {
+                        if (!fileMatchesPatterns(filePath, rule.fileTypes))
+                            continue;
+                        try {
+                            const regex = new RegExp(rule.pattern, 'm');
+                            const match = regex.exec(content);
+                            if (match) {
+                                const beforeMatch = content.slice(0, match.index);
+                                const lineNum = (beforeMatch.match(/\n/g) || []).length + 1;
+                                outputDeny(rule.reason, {
+                                    suggest: rule.suggest,
+                                    line: lineNum,
+                                    match: match[0].slice(0, 50),
+                                });
+                                return;
+                            }
+                        }
+                        catch {
+                            // Invalid regex, skip
+                        }
+                    }
+                }
+            }
+        }
+        // === FILE-LEVEL CHECKING ===
+        const targets = [];
+        if (toolName === 'Bash') {
+            const command = String(toolInput.command || '');
+            for (const policy of policies) {
+                targets.push(...parseBashTargets(command, policy.action));
+            }
+        }
+        else if (['Write', 'Edit', 'MultiEdit'].includes(toolName)) {
+            const filePath = String(toolInput.file_path || '');
+            if (filePath)
+                targets.push(filePath);
+        }
+        for (const target of targets) {
+            let relTarget;
+            try {
+                if (isAbsolute(target)) {
+                    relTarget = relative(cwd, target);
+                }
+                else {
+                    relTarget = target;
+                }
+            }
+            catch {
+                relTarget = target;
+            }
+            for (const policy of policies) {
+                const toolActions = getActionsForTool(toolName);
+                if (toolActions.includes(policy.action)) {
+                    if (isProtected(relTarget, policy)) {
+                        outputDeny(`${policy.description}: ${relTarget}`);
+                        return;
+                    }
+                }
+            }
+        }
+        outputAllow();
+    }
+    catch (error) {
+        // Fail open on errors
+        outputAllow();
+    }
+}
+main();
+//# sourceMappingURL=validator.js.map

package/dist/native/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../src/native/validator.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAuB1D,qEAAqE;AACrE,IAAI,YAAY,GAAG,KAAK,CAAC;AACzB,IAAI,eAAe,GAA6K,IAAI,CAAC;AACrM,IAAI,UAAU,GAAiC,IAAI,CAAC;AACpD,IAAI,YAAY,GAAgD,IAAI,CAAC;AACrE,IAAI,cAAc,GAAiD,IAAI,CAAC;AAExE,KAAK,UAAU,cAAc;IAC3B,IAAI,CAAC;QACH,8DAA8D;QAC9D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACjD,8DAA8D;QAC9D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC/C,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC1C,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QAC/B,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACnC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QACvC,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,YAAY,GAAG,KAAK,CAAC;IACvB,CAAC;AACH,CAAC;AAED,sCAAsC;AACtC,MAAM,eAAe,GAA6B;IAChD,OAAO,EAAE,CAAC,aAAa,CAAC;IACxB,QAAQ,EAAE,CAAC,mBAAmB,CAAC;IAC/B,OAAO,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC;IACxC,QAAQ,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC;IACzC,QAAQ,EAAE,CAAC,cAAc,CAAC;IAC1B,OAAO,EAAE,CAAC,aAAa,CAAC;IACxB,OAAO,EAAE,CAAC,SAAS,CAAC;IACpB,QAAQ,EAAE,CAAC,cAAc,CAAC;CAC3B,CAAC;AAgBF,SAAS,WAAW;IAClB,MAAM,MAAM,GAAe;QACzB,kBAAkB,EAAE,EAAE,kBAAkB,EAAE,OAAO,EAAE;KACpD,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,IAA0D;IAC5F,IAAI,OAAO,GAAG,kCAAkC,MAAM,EAAE,CAAC;IACzD,IAAI,IAAI,EAAE,IAAI;QAAE,OAAO,IAAI,WAAW,IAAI,CAAC,IAAI,EAAE,CAAC;IAClD,IAAI,IAAI,EAAE,KAAK;QAAE,OAAO,IAAI,YAAY,IAAI,CAAC,KAAK,EAAE,CAAC;IACrD,IAAI,IAAI,EAAE,OAAO;QAAE,OAAO,IAAI,8BAA8B,IAAI,CAAC,OAAO,EAAE,CAAC;IAC3E,OAAO,IAAI,qHAAqH,CAAC;IAEjI,MAAM,MAAM,GAAe;QACzB,kBAAkB,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE;QAClD,aAAa,EAAE,OAAO;KACvB,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB;IACvC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAExC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAC/D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAW,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,CAAC;IAE9B,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAClE,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,QAAQ,CAAC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,OAAe;IAChD,iDAAiD;IACjD,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,GAAG,CAClG,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,OAAe;IAC7D,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEtC,cAAc;IACd,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAE7B,8BAA8B;IAC9B,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,GAAG,KAAK,GAAG,CAAC;IAClD,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;IAC5C,CAAC;IAED,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,MAAc;IACxD,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC;IAE9C,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAEjD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACvC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACjC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;oBAC9C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB,EAAE,QAAkB;IAC/D,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAElC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,iCAAiC;QACjC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjD,SAAS;QACX,CAAC;QAED,kBAAkB;QAClB,IAAI,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAClF,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,MAAc;IACjD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAEzC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAElC,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CACxC,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAClE,CAAC;IACF,IAAI,CAAC,cAAc;QAAE,OAAO,KAAK,CAAC;IAElC,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CACxC,CAAC,CAAS,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAClE,CAAC;IACF,OAAO,CAAC,cAAc,CAAC;AACzB,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe,EAAE,MAAc;IACvD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC7D,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACpE,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjE,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAClB,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,MAAM,OAAO,GAA6B;QACxC,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC;QACrC,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,IAAI,EAAE,CAAC,QAAQ,CAAC;QAChB,SAAS,EAAE,CAAC,QAAQ,CAAC;QACrB,IAAI,EAAE,CAAC,MAAM,CAAC;KACf,CAAC;IACF,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC;QACH,mEAAmE;QACnE,MAAM,cAAc,EAAE,CAAC;QAEvB,MAAM,SAAS,GAAG,MAAM,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YACtB,WAAW,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,IAAI,KAAgB,CAAC;QACrB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAc,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;QAElE,uEAAuE;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QAE3C,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrB,WAAW,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,iDAAiD;QACjD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAChD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAClD,IAAI,MAAM,EAAE,CAAC;oBACX,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;oBACvD,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;QAED,iEAAiE;QACjE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YACnD,IAAI,OAAO,GAAG,EAAE,CAAC;YAEjB,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACzB,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAC5C,CAAC;iBAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC/B,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAC/C,CAAC;iBAAM,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACpC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAuC,IAAI,EAAE,CAAC;gBACtE,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5D,CAAC;YAED,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;gBACxB,+DAA+D;gBAC/D,IAAI,YAAY,IAAI,cAAc,EAAE,CAAC;oBACnC,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;oBAE1C,IAAI,QAAQ,IAAI,UAAU,IAAI,YAAY,IAAI,eAAe,EAAE,CAAC;wBAC9D,sCAAsC;wBACtC,MAAM,UAAU,EAAE,CAAC;wBACnB,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;wBAE7B,6BAA6B;wBAC7B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;4BAC9B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;4BAChE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gCACpC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE;oCAC9B,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;oCAC7B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;oCACvB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iCACtC,CAAC,CAAC;gCACH,OAAO;4BACT,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,oEAAoE;gBACpE,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;oBAC9B,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM;wBAAE,SAAS;oBAE3C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;wBACvC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;4BAAE,SAAS;wBAE7D,IAAI,CAAC;4BACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;4BAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;4BAClC,IAAI,KAAK,EAAE,CAAC;gCACV,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gCAClD,MAAM,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gCAC5D,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE;oCACtB,OAAO,EAAE,IAAI,CAAC,OAAO;oCACrB,IAAI,EAAE,OAAO;oCACb,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;iCAC7B,CAAC,CAAC;gCACH,OAAO;4BACT,CAAC;wBACH,CAAC;wBAAC,MAAM,CAAC;4BACP,sBAAsB;wBACxB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAChD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,OAAO,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YACnD,IAAI,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,SAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvB,SAAS,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACpC,CAAC;qBAAM,CAAC;oBACN,SAAS,GAAG,MAAM,CAAC;gBACrB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,GAAG,MAAM,CAAC;YACrB,CAAC;YAED,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBAChD,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxC,IAAI,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;wBACnC,UAAU,CAAC,GAAG,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC,CAAC;wBAClD,OAAO;oBACT,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,WAAW,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sBAAsB;QACtB,WAAW,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/types.d.ts

@@ -1,16 +1,130 @@
+/**
+ * Command rule for intercepting specific shell commands.
+ * Patterns use glob-style matching:
+ * - "npm install" matches exact command
+ * - "npm *" matches any npm subcommand
+ * - "npm install *" matches npm install with any args
+ */
+export interface CommandRule {
+    /** Glob patterns for commands to block */
+    block: string[];
+    /** Optional suggestion to show user (e.g., "Use: pnpm install") */
+    suggest?: string;
+    /** Human-readable reason for the block */
+    reason: string;
+}
+/**
+ * AST-based rule for precise code pattern matching.
+ * Uses tree-sitter S-expression queries for zero false positives.
+ */
+export interface ASTRule {
+    /** Unique identifier for this rule */
+    id: string;
+    /** Tree-sitter S-expression query */
+    query: string;
+    /** Languages this rule applies to */
+    languages: ('typescript' | 'javascript')[];
+    /** Human-readable reason for blocking */
+    reason: string;
+    /** Optional suggestion for alternative */
+    suggest?: string;
+    /** Optional regex for fast pre-filtering (skip AST if no match) */
+    regexPreFilter?: string;
+}
+/**
+ * Result of checking content against AST rules
+ */
+export interface ASTCheckResult {
+    allowed: boolean;
+    match?: {
+        line: number;
+        column: number;
+        text: string;
+        reason: string;
+        suggest?: string;
+        ruleId: string;
+    };
+    /** Which method was used for checking */
+    method: 'ast' | 'regex' | 'skipped';
+    /** Performance timing in milliseconds */
+    timing?: {
+        parseMs: number;
+        queryMs: number;
+    };
+}
+/**
+ * Content rule for matching patterns within file contents.
+ * Used to prevent banned imports, patterns, or coding styles.
+ * NOTE: Legacy regex-based rules - prefer ASTRule for accuracy.
+ */
+export interface ContentRule {
+    /** Regex pattern to match in file content */
+    pattern: string;
+    /** File patterns where this rule applies (e.g., ["*.ts", "*.js"]) */
+    fileTypes: string[];
+    /** Human-readable reason for blocking */
+    reason: string;
+    /** Optional suggestion for alternative */
+    suggest?: string;
+    /**
+     * Validation mode:
+     * - 'fast': Direct regex match (default, may have false positives in comments/strings)
+     * - 'strict': Strip comments/strings before matching (fewer false positives)
+     * - 'semantic': LLM validates match context (slowest, most accurate)
+     */
+    mode?: 'fast' | 'strict' | 'semantic';
+    /**
+     * Negative patterns - if ANY of these match, the rule is NOT violated.
+     * Used to prevent false positives (e.g., don't flag 'any' in variable names)
+     */
+    exceptions?: string[];
+}
+/**
+ * Result of checking content against content rules
+ */
+export interface ContentCheckResult {
+    blocked: boolean;
+    rule?: ContentRule;
+    /** Line number where match was found (1-indexed) */
+    line?: number;
+    /** The matched text */
+    match?: string;
+}
 export interface Policy {
     action: 'delete' | 'modify' | 'execute' | 'read';
+    /** File patterns to protect (glob) */
     include: string[];
+    /** File patterns to allow (exceptions) */
     exclude: string[];
     description: string;
+    /** Optional command-level rules (Phase 1) */
+    commandRules?: CommandRule[];
+    /** Optional content-level rules (Phase 2 - regex-based, legacy) */
+    contentRules?: ContentRule[];
+    /** Optional AST-based rules (Phase 2.1 - preferred, zero false positives) */
+    astRules?: ASTRule[];
 }
 export interface CheckRequest {
     action: string;
     target: string;
+    /** Full command string for command-level checking */
+    command?: string;
+    /** File content for content-level checking */
+    content?: string;
 }
 export interface CheckResponse {
     allowed: boolean;
     reason?: string;
+    /** Suggestion if command was blocked */
+    suggest?: string;
+}
+/**
+ * Result of checking a command against command rules
+ */
+export interface CommandCheckResult {
+    blocked: boolean;
+    rule?: CommandRule;
+    matchedPattern?: string;
 }
 export interface SessionState {
     pid: number;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,MAAM;IACrB,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACjD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,MAAM;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,eAAO,MAAM,cAAc,EAAE,MAQ5B,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,0CAA0C;IAC1C,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB,sCAAsC;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,SAAS,EAAE,CAAC,YAAY,GAAG,YAAY,CAAC,EAAE,CAAC;IAC3C,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,yCAAyC;IACzC,MAAM,EAAE,KAAK,GAAG,OAAO,GAAG,SAAS,CAAC;IACpC,yCAAyC;IACzC,MAAM,CAAC,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;IACtC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,MAAM;IACrB,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACjD,sCAAsC;IACtC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,0CAA0C;IAC1C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,mEAAmE;IACnE,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,MAAM;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,eAAO,MAAM,cAAc,EAAE,MAQ5B,CAAC"}

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,eAAe;AAuCf,MAAM,CAAC,MAAM,cAAc,GAAW;IACpC,UAAU,EAAE,IAAI;IAChB,kBAAkB,EAAE,IAAI;IACxB,iBAAiB,EAAE,IAAI;IACvB,gBAAgB,EAAE,KAAK;IACvB,kBAAkB,EAAE,GAAG,GAAG,IAAI;IAC9B,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;CACf,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,eAAe;AA+Jf,MAAM,CAAC,MAAM,cAAc,GAAW;IACpC,UAAU,EAAE,IAAI;IAChB,kBAAkB,EAAE,IAAI;IACxB,iBAAiB,EAAE,IAAI;IACvB,gBAAgB,EAAE,KAAK;IACvB,kBAAkB,EAAE,GAAG,GAAG,IAAI;IAC9B,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;CACf,CAAC"}

package/dist/wrapper/daemon.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../src/wrapper/daemon.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,MAAM,EACN,YAAY,EACZ,aAAa,EACb,YAAY,EACb,MAAM,aAAa,CAAC;AAMrB,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,KAAK,CAAS;gBAEV,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,GAAE,MAAW;IAe7D,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAsC9B,KAAK,CAAC,GAAG,EAAE,YAAY,GAAG,aAAa;IAqCvC,QAAQ,IAAI,YAAY;IAIxB,IAAI,IAAI,IAAI;CA0Bb"}
+{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../src/wrapper/daemon.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,MAAM,EACN,YAAY,EACZ,aAAa,EACb,YAAY,EACb,MAAM,aAAa,CAAC;AAMrB,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,KAAK,CAAS;gBAEV,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,GAAE,MAAW;IAe7D,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAsC9B,KAAK,CAAC,GAAG,EAAE,YAAY,GAAG,aAAa;IA4EvC,QAAQ,IAAI,YAAY;IAIxB,IAAI,IAAI,IAAI;CA0Bb"}