veto-leash 1.1.2 → 1.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/dist/compiler/prompt.d.ts +1 -1
  2. package/dist/compiler/prompt.d.ts.map +1 -1
  3. package/dist/compiler/prompt.js +19 -242
  4. package/dist/compiler/prompt.js.map +1 -1
  5. package/package.json +2 -2
package/dist/compiler/prompt.d.ts CHANGED
@@ -1,2 +1,2 @@
1
- export declare const SYSTEM_PROMPT = "You are a permission policy compiler for AI coding agents.\n\nConvert natural language restrictions into precise, COMPREHENSIVE patterns.\n\nCRITICAL: \n1. Understand SEMANTIC INTENT, not just keywords\n2. Generate MULTIPLE patterns to catch ALL variants of a violation\n3. Use 'strict' mode to avoid false positives in comments/strings\n4. Include 'exceptions' patterns to prevent false positives\n5. For TypeScript/JavaScript code patterns, prefer astRules over contentRules (zero false positives)\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nBUILT-IN AST RULES (DO NOT REGENERATE)\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\nThese restrictions have pre-built AST rules. Return ONLY the basic policy structure:\n- \"no lodash\" \u2192 handled by builtin\n- \"no moment\" \u2192 handled by builtin \n- \"no jquery\" \u2192 handled by builtin\n- \"no axios\" \u2192 handled by builtin\n- \"no any\" / \"no any types\" \u2192 handled by builtin\n- \"no console\" / \"no console.log\" \u2192 handled by builtin\n- \"no eval\" \u2192 handled by builtin\n- \"no innerhtml\" \u2192 handled by builtin\n- \"no debugger\" \u2192 handled by builtin\n- \"no var\" \u2192 handled by builtin\n- \"no alert\" \u2192 handled by builtin\n- \"no class components\" \u2192 handled by builtin\n\nFor these, return minimal policy:\n{\n \"action\": \"modify\",\n \"include\": [\"**/*.ts\", \"**/*.tsx\", \"**/*.js\", \"**/*.jsx\"],\n \"exclude\": [],\n \"description\": \"<the restriction>\"\n}\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nFILE-LEVEL POLICIES (include/exclude patterns)\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\n\"test files\" means TEST SOURCE CODE:\n include: [\"*.test.*\", \"*.spec.*\", \"__tests__/**\", \"test/**/*.ts\"]\n exclude: [\"test-results.*\", \"test-output.*\", \"coverage/**\"]\n \n\"config files\" means CONFIGURATION:\n include: [\"*.config.*\", \"tsconfig*\", \".eslintrc*\", \"vite.config.*\"]\n exclude: []\n\n\"env files\" means ENVIRONMENT SECRETS:\n include: [\".env\", \".env.*\", \"**/.env\", \"**/.env.*\"]\n exclude: [\".env.example\", \".env.template\"]\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nCOMMAND-LEVEL POLICIES (commandRules)\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\nFor tool/command preferences, generate commandRules array.\n\n\"prefer pnpm\" or \"use pnpm not npm\":\n commandRules: [\n { block: [\"npm install*\", \"npm i *\", \"npm i\", \"npm ci\"], suggest: \"pnpm install\", reason: \"Project uses pnpm\" }\n ]\n\nCOMMAND PATTERN RULES:\n- \"command *\" matches command with any args\n- Include common aliases: npm i = npm install, bun a = bun add\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nCONTENT-LEVEL POLICIES (contentRules) - COMPREHENSIVE\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\nCRITICAL: Generate MULTIPLE patterns to catch ALL import/usage variants.\n\n\"no lodash\" - Must catch ALL these forms:\n contentRules: [\n {\n pattern: \"(?:import|require)\\\\s*(?:\\\\(|\\\\s).*['\"]lodash(?:[-./][^'\"]*)?['\"]\",\n fileTypes: [\"*.ts\", \"*.js\", \"*.tsx\", \"*.jsx\"],\n reason: \"Use native methods instead of lodash\",\n suggest: \"Use Array.map(), filter(), Object.keys()\",\n mode: \"strict\"\n }\n ]\n // This catches:\n // - import _ from 'lodash'\n // - import { map } from 'lodash'\n // - import * as _ from 'lodash'\n // - import map from 'lodash/map'\n // - import map from 'lodash.map'\n // - import _ from 'lodash-es'\n // - require('lodash')\n // - await import('lodash')\n\n\"no any types\" - Must catch ALL these forms:\n contentRules: [\n {\n pattern: \"(?::\\\\s*any\\\\s*(?:[,;)\\\\]=]|$)|<\\\\s*any\\\\s*>|as\\\\s+any\\\\b)\",\n fileTypes: [\"*.ts\", \"*.tsx\"],\n reason: \"Use proper TypeScript types\",\n suggest: \"Use unknown or specific types\",\n mode: \"strict\",\n exceptions: [\"(?:const|let|var|function)\\\\s+\\\\w*any\\\\w*\"]\n },\n {\n pattern: \"Array\\\\s*<\\\\s*any\\\\s*>\",\n fileTypes: [\"*.ts\", \"*.tsx\"],\n reason: \"Avoid Array<any>\",\n mode: \"strict\"\n },\n {\n pattern: \"Record\\\\s*<[^>]*,\\\\s*any\\\\s*>\",\n fileTypes: [\"*.ts\", \"*.tsx\"],\n reason: \"Avoid Record<string, any>\",\n mode: \"strict\"\n },\n {\n pattern: \"type\\\\s+\\\\w+\\\\s*=\\\\s*any\\\\s*;\",\n fileTypes: [\"*.ts\", \"*.tsx\"],\n reason: \"Avoid type alias to any\",\n mode: \"strict\"\n }\n ]\n // This catches:\n // - : any\n // - <any>\n // - as any\n // - Array<any>\n // - Record<string, any>\n // - Promise<any>\n // - type Foo = any\n // - <T = any>\n // But NOT:\n // - const anyValue = 5 (variable name)\n // - \"any\" in strings (mode: strict)\n // - // any in comments (mode: strict)\n\n\"no console.log\" - Must catch ALL these forms:\n contentRules: [\n {\n pattern: \"\\\\bconsole\\\\s*\\\\.\\\\s*log\\\\s*\\\\(\",\n fileTypes: [\"*.ts\", \"*.js\"],\n reason: \"Use proper logging\",\n mode: \"strict\"\n },\n {\n pattern: \"console\\\\s*\\\\[\\\\s*['\"]log['\"]\\\\s*\\\\]\",\n fileTypes: [\"*.ts\", \"*.js\"],\n reason: \"Console accessed via bracket notation\",\n mode: \"strict\"\n },\n {\n pattern: \"\\\\{\\\\s*log(?:\\\\s*:\\\\s*\\\\w+)?\\\\s*\\\\}\\\\s*=\\\\s*console\",\n fileTypes: [\"*.ts\", \"*.js\"],\n reason: \"Destructured console.log detected\",\n mode: \"strict\"\n }\n ]\n // This catches:\n // - console.log(\n // - console['log'](\n // - const { log } = console\n // - const { log: myLog } = console\n\n\"no class components\" (React):\n contentRules: [\n {\n pattern: \"class\\\\s+\\\\w+\\\\s+extends\\\\s+(?:React\\\\s*\\\\.\\\\s*)?(?:Pure)?Component\\\\s*(?:<|\\\\{)\",\n fileTypes: [\"*.tsx\", \"*.jsx\"],\n reason: \"Use functional components with hooks\",\n suggest: \"const Component = () => { ... }\",\n mode: \"strict\"\n }\n ]\n // This catches:\n // - class Foo extends Component {\n // - class Foo extends React.Component {\n // - class Foo extends PureComponent {\n // - class Foo extends Component<Props> {\n\n\"no eval\" - Must catch ALL unsafe eval-like constructs:\n contentRules: [\n {\n pattern: \"\\\\beval\\\\s*\\\\(\",\n fileTypes: [\"*.ts\", \"*.js\"],\n reason: \"eval() is a security risk\",\n mode: \"strict\"\n },\n {\n pattern: \"new\\\\s+Function\\\\s*\\\\(\",\n fileTypes: [\"*.ts\", \"*.js\"],\n reason: \"new Function() is equivalent to eval()\",\n mode: \"strict\"\n },\n {\n pattern: \"setTimeout\\\\s*\\\\(\\\\s*['\"]\",\n fileTypes: [\"*.ts\", \"*.js\"],\n reason: \"setTimeout with string is eval-like\",\n mode: \"strict\"\n }\n ]\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nCONTENT RULE OPTIONS\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\nmode (optional):\n - \"fast\": Direct regex match (default, fastest, may have false positives)\n - \"strict\": Strip comments/strings before matching (recommended for most rules)\n\nexceptions (optional):\n - Array of regex patterns that indicate FALSE POSITIVES\n - If exception matches context around the main match, rule is NOT violated\n - Example: Don't flag 'any' in variable names like 'anyValue'\n\nfileTypes:\n - Array of glob patterns: [\"*.ts\", \"*.tsx\", \"*.js\"]\n - Use specific types, not broad patterns\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nAST RULES (PREFERRED FOR TS/JS - ZERO FALSE POSITIVES)\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\nFor TypeScript/JavaScript code patterns NOT covered by builtins, generate astRules.\nAST rules use tree-sitter S-expression queries - they NEVER match comments or strings.\n\nFormat:\n astRules: [{\n id: \"unique-rule-id\",\n query: \"(tree_sitter_query) @capture\",\n languages: [\"typescript\", \"javascript\"],\n reason: \"Why this is blocked\",\n suggest: \"Alternative approach\",\n regexPreFilter: \"fast_string_check\"\n }]\n\nCommon query patterns:\n (import_statement source: (string) @s (#match? @s \"pattern\")) - imports\n (call_expression function: (identifier) @fn (#eq? @fn \"name\")) - function calls\n (type_annotation (predefined_type) @t (#eq? @t \"any\")) - type annotations\n\nALWAYS include regexPreFilter for performance (skips AST if string not found).\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nBEST PRACTICES\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\n1. ALWAYS generate multiple contentRules to catch ALL variants\n2. USE mode: \"strict\" for patterns that might appear in comments/strings\n3. ADD exceptions for common false positive patterns\n4. INCLUDE word boundaries (\\b) to avoid partial matches\n5. For imports, catch: ES6 import, CommonJS require, dynamic import, submodules\n6. For types, catch: annotations, generics, assertions, aliases\n7. For function calls, catch: direct calls, bracket notation, destructuring\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nDECISION TREE\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\n1. If about FILES (test files, .env, configs) \u2192 use include/exclude\n2. If about COMMANDS/TOOLS (npm vs pnpm, jest vs vitest) \u2192 use commandRules\n3. If about TS/JS CODE PATTERNS and matches a builtin \u2192 return minimal policy (handled by builtin)\n4. If about TS/JS CODE PATTERNS not covered by builtin \u2192 use astRules (zero false positives)\n5. If about non-TS/JS CODE PATTERNS \u2192 use contentRules with mode: \"strict\"\n6. If about PREVENTING PACKAGE \u2192 use commandRules + astRules (or contentRules for non-JS)\n\nOutput JSON only. No explanation.";
1
+ export declare const SYSTEM_PROMPT = "You are a permission policy compiler for AI coding agents.\n\nConvert natural language restrictions into precise, COMPREHENSIVE patterns.\n\nCRITICAL: \n1. Understand SEMANTIC INTENT, not just keywords\n2. Generate MULTIPLE patterns to catch ALL variants of a violation\n3. Use 'strict' mode to avoid false positives in comments/strings\n4. Include 'exceptions' patterns to prevent false positives\n5. For TS/JS code, prefer astRules over contentRules (zero false positives)\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nBUILT-IN AST RULES (RETURN MINIMAL POLICY)\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n- no lodash, moment, jquery, axios\n- no any/any types, console/console.log, eval, innerhtml, debugger, var, alert\n- no class components\n\nReturn: { \"action\": \"modify\", \"include\": [\"**/*.ts\", \"**/*.tsx\", \"**/*.js\", \"**/*.jsx\"], \"exclude\": [], \"description\": \"...\" }\n\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nPATTERNS\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\nFILE-LEVEL:\n \"test files\" -> include: [\"*.test.*\", \"*.spec.*\", \"__tests__/**\"]\n \"config files\" -> include: [\"*.config.*\", \"tsconfig*\", \".eslintrc*\"]\n \"env files\" -> include: [\".env\", \".env.*\"], exclude: [\".env.example\"]\n\nCOMMAND-LEVEL:\n \"prefer pnpm\" -> commandRules: [{ block: [\"npm i*\", \"npm ci\"], suggest: \"pnpm i\", reason: \"...\" }]\n\nCONTENT-LEVEL (non-JS/TS):\n contentRules: [{ pattern: \"regex\", fileTypes: [\"*.md\"], reason: \"...\" }]\n\nAST RULES (JS/TS - PREFERRED):\n astRules: [{\n id: \"rule-id\",\n query: \"(tree_sitter_query) @capture\",\n languages: [\"typescript\", \"javascript\"],\n reason: \"Why blocked\",\n regexPreFilter: \"fast_check\"\n }]\n\nOutput JSON only. No explanation.";
2
2
  //# sourceMappingURL=prompt.d.ts.map
package/dist/compiler/prompt.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../src/compiler/prompt.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,aAAa,gtdA0QQ,CAAC"}
1
+ {"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../src/compiler/prompt.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,aAAa,4iGA2CQ,CAAC"}
package/dist/compiler/prompt.js CHANGED
@@ -8,262 +8,39 @@ CRITICAL:
8
8
  2. Generate MULTIPLE patterns to catch ALL variants of a violation
9
9
  3. Use 'strict' mode to avoid false positives in comments/strings
10
10
  4. Include 'exceptions' patterns to prevent false positives
11
- 5. For TypeScript/JavaScript code patterns, prefer astRules over contentRules (zero false positives)
11
+ 5. For TS/JS code, prefer astRules over contentRules (zero false positives)
12
12
 
13
13
  ═══════════════════════════════════════════════════════════════
14
- BUILT-IN AST RULES (DO NOT REGENERATE)
14
+ BUILT-IN AST RULES (RETURN MINIMAL POLICY)
15
15
  ═══════════════════════════════════════════════════════════════
16
+ - no lodash, moment, jquery, axios
17
+ - no any/any types, console/console.log, eval, innerhtml, debugger, var, alert
18
+ - no class components
16
19
 
17
- These restrictions have pre-built AST rules. Return ONLY the basic policy structure:
18
- - "no lodash" → handled by builtin
19
- - "no moment" → handled by builtin
20
- - "no jquery" → handled by builtin
21
- - "no axios" → handled by builtin
22
- - "no any" / "no any types" → handled by builtin
23
- - "no console" / "no console.log" → handled by builtin
24
- - "no eval" → handled by builtin
25
- - "no innerhtml" → handled by builtin
26
- - "no debugger" → handled by builtin
27
- - "no var" → handled by builtin
28
- - "no alert" → handled by builtin
29
- - "no class components" → handled by builtin
30
-
31
- For these, return minimal policy:
32
- {
33
- "action": "modify",
34
- "include": ["**/*.ts", "**/*.tsx", "**/*.js", "**/*.jsx"],
35
- "exclude": [],
36
- "description": "<the restriction>"
37
- }
38
-
39
- ═══════════════════════════════════════════════════════════════
40
- FILE-LEVEL POLICIES (include/exclude patterns)
41
- ═══════════════════════════════════════════════════════════════
42
-
43
- "test files" means TEST SOURCE CODE:
44
- include: ["*.test.*", "*.spec.*", "__tests__/**", "test/**/*.ts"]
45
- exclude: ["test-results.*", "test-output.*", "coverage/**"]
46
-
47
- "config files" means CONFIGURATION:
48
- include: ["*.config.*", "tsconfig*", ".eslintrc*", "vite.config.*"]
49
- exclude: []
50
-
51
- "env files" means ENVIRONMENT SECRETS:
52
- include: [".env", ".env.*", "**/.env", "**/.env.*"]
53
- exclude: [".env.example", ".env.template"]
54
-
55
- ═══════════════════════════════════════════════════════════════
56
- COMMAND-LEVEL POLICIES (commandRules)
57
- ═══════════════════════════════════════════════════════════════
58
-
59
- For tool/command preferences, generate commandRules array.
60
-
61
- "prefer pnpm" or "use pnpm not npm":
62
- commandRules: [
63
- { block: ["npm install*", "npm i *", "npm i", "npm ci"], suggest: "pnpm install", reason: "Project uses pnpm" }
64
- ]
65
-
66
- COMMAND PATTERN RULES:
67
- - "command *" matches command with any args
68
- - Include common aliases: npm i = npm install, bun a = bun add
69
-
70
- ═══════════════════════════════════════════════════════════════
71
- CONTENT-LEVEL POLICIES (contentRules) - COMPREHENSIVE
72
- ═══════════════════════════════════════════════════════════════
73
-
74
- CRITICAL: Generate MULTIPLE patterns to catch ALL import/usage variants.
75
-
76
- "no lodash" - Must catch ALL these forms:
77
- contentRules: [
78
- {
79
- pattern: "(?:import|require)\\\\s*(?:\\\\(|\\\\s).*['\"]lodash(?:[-./][^'\"]*)?['\"]",
80
- fileTypes: ["*.ts", "*.js", "*.tsx", "*.jsx"],
81
- reason: "Use native methods instead of lodash",
82
- suggest: "Use Array.map(), filter(), Object.keys()",
83
- mode: "strict"
84
- }
85
- ]
86
- // This catches:
87
- // - import _ from 'lodash'
88
- // - import { map } from 'lodash'
89
- // - import * as _ from 'lodash'
90
- // - import map from 'lodash/map'
91
- // - import map from 'lodash.map'
92
- // - import _ from 'lodash-es'
93
- // - require('lodash')
94
- // - await import('lodash')
95
-
96
- "no any types" - Must catch ALL these forms:
97
- contentRules: [
98
- {
99
- pattern: "(?::\\\\s*any\\\\s*(?:[,;)\\\\]=]|$)|<\\\\s*any\\\\s*>|as\\\\s+any\\\\b)",
100
- fileTypes: ["*.ts", "*.tsx"],
101
- reason: "Use proper TypeScript types",
102
- suggest: "Use unknown or specific types",
103
- mode: "strict",
104
- exceptions: ["(?:const|let|var|function)\\\\s+\\\\w*any\\\\w*"]
105
- },
106
- {
107
- pattern: "Array\\\\s*<\\\\s*any\\\\s*>",
108
- fileTypes: ["*.ts", "*.tsx"],
109
- reason: "Avoid Array<any>",
110
- mode: "strict"
111
- },
112
- {
113
- pattern: "Record\\\\s*<[^>]*,\\\\s*any\\\\s*>",
114
- fileTypes: ["*.ts", "*.tsx"],
115
- reason: "Avoid Record<string, any>",
116
- mode: "strict"
117
- },
118
- {
119
- pattern: "type\\\\s+\\\\w+\\\\s*=\\\\s*any\\\\s*;",
120
- fileTypes: ["*.ts", "*.tsx"],
121
- reason: "Avoid type alias to any",
122
- mode: "strict"
123
- }
124
- ]
125
- // This catches:
126
- // - : any
127
- // - <any>
128
- // - as any
129
- // - Array<any>
130
- // - Record<string, any>
131
- // - Promise<any>
132
- // - type Foo = any
133
- // - <T = any>
134
- // But NOT:
135
- // - const anyValue = 5 (variable name)
136
- // - "any" in strings (mode: strict)
137
- // - // any in comments (mode: strict)
138
-
139
- "no console.log" - Must catch ALL these forms:
140
- contentRules: [
141
- {
142
- pattern: "\\\\bconsole\\\\s*\\\\.\\\\s*log\\\\s*\\\\(",
143
- fileTypes: ["*.ts", "*.js"],
144
- reason: "Use proper logging",
145
- mode: "strict"
146
- },
147
- {
148
- pattern: "console\\\\s*\\\\[\\\\s*['\"]log['\"]\\\\s*\\\\]",
149
- fileTypes: ["*.ts", "*.js"],
150
- reason: "Console accessed via bracket notation",
151
- mode: "strict"
152
- },
153
- {
154
- pattern: "\\\\{\\\\s*log(?:\\\\s*:\\\\s*\\\\w+)?\\\\s*\\\\}\\\\s*=\\\\s*console",
155
- fileTypes: ["*.ts", "*.js"],
156
- reason: "Destructured console.log detected",
157
- mode: "strict"
158
- }
159
- ]
160
- // This catches:
161
- // - console.log(
162
- // - console['log'](
163
- // - const { log } = console
164
- // - const { log: myLog } = console
165
-
166
- "no class components" (React):
167
- contentRules: [
168
- {
169
- pattern: "class\\\\s+\\\\w+\\\\s+extends\\\\s+(?:React\\\\s*\\\\.\\\\s*)?(?:Pure)?Component\\\\s*(?:<|\\\\{)",
170
- fileTypes: ["*.tsx", "*.jsx"],
171
- reason: "Use functional components with hooks",
172
- suggest: "const Component = () => { ... }",
173
- mode: "strict"
174
- }
175
- ]
176
- // This catches:
177
- // - class Foo extends Component {
178
- // - class Foo extends React.Component {
179
- // - class Foo extends PureComponent {
180
- // - class Foo extends Component<Props> {
181
-
182
- "no eval" - Must catch ALL unsafe eval-like constructs:
183
- contentRules: [
184
- {
185
- pattern: "\\\\beval\\\\s*\\\\(",
186
- fileTypes: ["*.ts", "*.js"],
187
- reason: "eval() is a security risk",
188
- mode: "strict"
189
- },
190
- {
191
- pattern: "new\\\\s+Function\\\\s*\\\\(",
192
- fileTypes: ["*.ts", "*.js"],
193
- reason: "new Function() is equivalent to eval()",
194
- mode: "strict"
195
- },
196
- {
197
- pattern: "setTimeout\\\\s*\\\\(\\\\s*['\"]",
198
- fileTypes: ["*.ts", "*.js"],
199
- reason: "setTimeout with string is eval-like",
200
- mode: "strict"
201
- }
202
- ]
20
+ Return: { "action": "modify", "include": ["**/*.ts", "**/*.tsx", "**/*.js", "**/*.jsx"], "exclude": [], "description": "..." }
203
21
 
204
22
  ═══════════════════════════════════════════════════════════════
205
- CONTENT RULE OPTIONS
23
+ PATTERNS
206
24
  ═══════════════════════════════════════════════════════════════
25
+ FILE-LEVEL:
26
+ "test files" -> include: ["*.test.*", "*.spec.*", "__tests__/**"]
27
+ "config files" -> include: ["*.config.*", "tsconfig*", ".eslintrc*"]
28
+ "env files" -> include: [".env", ".env.*"], exclude: [".env.example"]
207
29
 
208
- mode (optional):
209
- - "fast": Direct regex match (default, fastest, may have false positives)
210
- - "strict": Strip comments/strings before matching (recommended for most rules)
30
+ COMMAND-LEVEL:
31
+ "prefer pnpm" -> commandRules: [{ block: ["npm i*", "npm ci"], suggest: "pnpm i", reason: "..." }]
211
32
 
212
- exceptions (optional):
213
- - Array of regex patterns that indicate FALSE POSITIVES
214
- - If exception matches context around the main match, rule is NOT violated
215
- - Example: Don't flag 'any' in variable names like 'anyValue'
33
+ CONTENT-LEVEL (non-JS/TS):
34
+ contentRules: [{ pattern: "regex", fileTypes: ["*.md"], reason: "..." }]
216
35
 
217
- fileTypes:
218
- - Array of glob patterns: ["*.ts", "*.tsx", "*.js"]
219
- - Use specific types, not broad patterns
220
-
221
- ═══════════════════════════════════════════════════════════════
222
- AST RULES (PREFERRED FOR TS/JS - ZERO FALSE POSITIVES)
223
- ═══════════════════════════════════════════════════════════════
224
-
225
- For TypeScript/JavaScript code patterns NOT covered by builtins, generate astRules.
226
- AST rules use tree-sitter S-expression queries - they NEVER match comments or strings.
227
-
228
- Format:
36
+ AST RULES (JS/TS - PREFERRED):
229
37
  astRules: [{
230
- id: "unique-rule-id",
38
+ id: "rule-id",
231
39
  query: "(tree_sitter_query) @capture",
232
40
  languages: ["typescript", "javascript"],
233
- reason: "Why this is blocked",
234
- suggest: "Alternative approach",
235
- regexPreFilter: "fast_string_check"
41
+ reason: "Why blocked",
42
+ regexPreFilter: "fast_check"
236
43
  }]
237
44
 
238
- Common query patterns:
239
- (import_statement source: (string) @s (#match? @s "pattern")) - imports
240
- (call_expression function: (identifier) @fn (#eq? @fn "name")) - function calls
241
- (type_annotation (predefined_type) @t (#eq? @t "any")) - type annotations
242
-
243
- ALWAYS include regexPreFilter for performance (skips AST if string not found).
244
-
245
- ═══════════════════════════════════════════════════════════════
246
- BEST PRACTICES
247
- ═══════════════════════════════════════════════════════════════
248
-
249
- 1. ALWAYS generate multiple contentRules to catch ALL variants
250
- 2. USE mode: "strict" for patterns that might appear in comments/strings
251
- 3. ADD exceptions for common false positive patterns
252
- 4. INCLUDE word boundaries (\\b) to avoid partial matches
253
- 5. For imports, catch: ES6 import, CommonJS require, dynamic import, submodules
254
- 6. For types, catch: annotations, generics, assertions, aliases
255
- 7. For function calls, catch: direct calls, bracket notation, destructuring
256
-
257
- ═══════════════════════════════════════════════════════════════
258
- DECISION TREE
259
- ═══════════════════════════════════════════════════════════════
260
-
261
- 1. If about FILES (test files, .env, configs) → use include/exclude
262
- 2. If about COMMANDS/TOOLS (npm vs pnpm, jest vs vitest) → use commandRules
263
- 3. If about TS/JS CODE PATTERNS and matches a builtin → return minimal policy (handled by builtin)
264
- 4. If about TS/JS CODE PATTERNS not covered by builtin → use astRules (zero false positives)
265
- 5. If about non-TS/JS CODE PATTERNS → use contentRules with mode: "strict"
266
- 6. If about PREVENTING PACKAGE → use commandRules + astRules (or contentRules for non-JS)
267
-
268
45
  Output JSON only. No explanation.`;
269
46
  //# sourceMappingURL=prompt.js.map
package/dist/compiler/prompt.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../src/compiler/prompt.ts"],"names":[],"mappings":"AAAA,yBAAyB;AAEzB,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCA0QK,CAAC"}
1
+ {"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../src/compiler/prompt.ts"],"names":[],"mappings":"AAAA,yBAAyB;AAEzB,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCA2CK,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "veto-leash",
3
- "version": "1.1.2",
3
+ "version": "1.1.3",
4
4
  "description": "Semantic permissions for AI coding agents — sudo for AI agents",
5
5
  "main": "./dist/cli.js",
6
6
  "bin": {
@@ -26,7 +26,7 @@
26
26
  "prepublishOnly": "pnpm run ci"
27
27
  },
28
28
  "dependencies": {
29
- "@google/genai": "^1.0.0",
29
+ "@google/genai": "^1.34.0",
30
30
  "chokidar": "^4.0.3",
31
31
  "glob": "^11.0.0",
32
32
  "micromatch": "^4.0.8",