veto-sdk 1.0.0

package/dist/rules/loader.js

@@ -0,0 +1,300 @@
+/**
+ * YAML rule loader and parser.
+ *
+ * Loads rules from YAML files and builds an indexed structure for
+ * efficient rule lookup during validation.
+ *
+ * @module rules/loader
+ */
+import { readFileSync, readdirSync, statSync, existsSync } from 'node:fs';
+import { join, extname } from 'node:path';
+/**
+ * Default YAML parser that throws an error.
+ * Users must provide their own parser.
+ */
+function defaultYamlParser() {
+    throw new Error('No YAML parser provided. Please provide a YAML parser function (e.g., from js-yaml package).');
+}
+/**
+ * Loads and manages YAML-based rules.
+ */
+export class RuleLoader {
+    logger;
+    yamlParser = defaultYamlParser;
+    loadedRules = {
+        ruleSets: [],
+        allRules: [],
+        rulesByTool: new Map(),
+        globalRules: [],
+        sourceFiles: [],
+    };
+    constructor(options) {
+        this.logger = options.logger;
+    }
+    /**
+     * Set the YAML parser to use for loading rules.
+     *
+     * @param parser - YAML parsing function
+     *
+     * @example
+     * ```typescript
+     * import yaml from 'js-yaml';
+     * loader.setYamlParser(yaml.load);
+     * ```
+     */
+    setYamlParser(parser) {
+        this.yamlParser = parser;
+        this.logger.debug('YAML parser configured');
+    }
+    /**
+     * Load rules from a directory containing YAML files.
+     *
+     * @param dirPath - Path to the directory
+     * @param recursive - Whether to search subdirectories
+     * @returns Loaded rules
+     */
+    loadFromDirectory(dirPath, recursive = true) {
+        this.logger.info('Loading rules from directory', { path: dirPath, recursive });
+        if (!existsSync(dirPath)) {
+            this.logger.warn('Rules directory does not exist', { path: dirPath });
+            return this.loadedRules;
+        }
+        const yamlFiles = this.findYamlFiles(dirPath, recursive);
+        this.logger.debug('Found YAML files', { count: yamlFiles.length });
+        for (const filePath of yamlFiles) {
+            try {
+                this.loadFromFile(filePath);
+            }
+            catch (error) {
+                this.logger.error('Failed to load rule file', { path: filePath }, error instanceof Error ? error : new Error(String(error)));
+            }
+        }
+        this.buildIndex();
+        return this.loadedRules;
+    }
+    /**
+     * Load rules from a single YAML file.
+     *
+     * @param filePath - Path to the YAML file
+     */
+    loadFromFile(filePath) {
+        this.logger.debug('Loading rules from file', { path: filePath });
+        const content = readFileSync(filePath, 'utf-8');
+        const parsed = this.yamlParser(content);
+        if (!parsed || typeof parsed !== 'object') {
+            this.logger.warn('Invalid YAML content', { path: filePath });
+            return;
+        }
+        const ruleSet = this.parseRuleSet(parsed, filePath);
+        if (ruleSet) {
+            this.loadedRules.ruleSets.push(ruleSet);
+            this.loadedRules.sourceFiles.push(filePath);
+            this.logger.info('Loaded rule set', {
+                name: ruleSet.name,
+                ruleCount: ruleSet.rules.length,
+                path: filePath,
+            });
+        }
+    }
+    /**
+     * Load rules from a YAML string.
+     *
+     * @param content - YAML content
+     * @param sourceName - Name to identify the source
+     */
+    loadFromString(content, sourceName = 'inline') {
+        this.logger.debug('Loading rules from string', { source: sourceName });
+        const parsed = this.yamlParser(content);
+        if (!parsed || typeof parsed !== 'object') {
+            this.logger.warn('Invalid YAML content', { source: sourceName });
+            return;
+        }
+        const ruleSet = this.parseRuleSet(parsed, sourceName);
+        if (ruleSet) {
+            this.loadedRules.ruleSets.push(ruleSet);
+            this.loadedRules.sourceFiles.push(sourceName);
+            this.buildIndex();
+        }
+    }
+    /**
+     * Add rules directly without YAML parsing.
+     *
+     * @param rules - Rules to add
+     * @param setName - Name for the rule set
+     */
+    addRules(rules, setName = 'programmatic') {
+        const ruleSet = {
+            version: '1.0',
+            name: setName,
+            rules,
+        };
+        this.loadedRules.ruleSets.push(ruleSet);
+        this.buildIndex();
+        this.logger.info('Added rules programmatically', {
+            name: setName,
+            count: rules.length,
+        });
+    }
+    /**
+     * Get all loaded rules.
+     */
+    getRules() {
+        return this.loadedRules;
+    }
+    /**
+     * Get rules applicable to a specific tool.
+     *
+     * @param toolName - Name of the tool
+     * @returns Rules that apply to the tool
+     */
+    getRulesForTool(toolName) {
+        const toolSpecific = this.loadedRules.rulesByTool.get(toolName) ?? [];
+        return [...this.loadedRules.globalRules, ...toolSpecific].filter((rule) => rule.enabled);
+    }
+    /**
+     * Clear all loaded rules.
+     */
+    clear() {
+        this.loadedRules = {
+            ruleSets: [],
+            allRules: [],
+            rulesByTool: new Map(),
+            globalRules: [],
+            sourceFiles: [],
+        };
+        this.logger.debug('Cleared all rules');
+    }
+    /**
+     * Reload rules from previously loaded sources.
+     */
+    reload() {
+        const sources = [...this.loadedRules.sourceFiles];
+        this.clear();
+        for (const source of sources) {
+            if (existsSync(source)) {
+                this.loadFromFile(source);
+            }
+        }
+        this.buildIndex();
+        this.logger.info('Reloaded rules', { sourceCount: sources.length });
+        return this.loadedRules;
+    }
+    /**
+     * Find YAML files in a directory.
+     */
+    findYamlFiles(dirPath, recursive) {
+        const files = [];
+        const entries = readdirSync(dirPath);
+        for (const entry of entries) {
+            const fullPath = join(dirPath, entry);
+            const stat = statSync(fullPath);
+            if (stat.isDirectory() && recursive) {
+                files.push(...this.findYamlFiles(fullPath, recursive));
+            }
+            else if (stat.isFile()) {
+                const ext = extname(entry).toLowerCase();
+                if (ext === '.yaml' || ext === '.yml') {
+                    files.push(fullPath);
+                }
+            }
+        }
+        return files;
+    }
+    /**
+     * Parse a rule set from parsed YAML.
+     */
+    parseRuleSet(data, source) {
+        // Check if this is a rule set format or just a list of rules
+        if (Array.isArray(data)) {
+            // It's just an array of rules
+            return {
+                version: '1.0',
+                name: source,
+                rules: data.map((r, i) => this.parseRule(r, `${source}:rule-${i}`)),
+            };
+        }
+        // Check for rules array in the object
+        const rules = data.rules;
+        if (!rules || !Array.isArray(rules)) {
+            // Maybe it's a single rule
+            if (data.id && data.name) {
+                return {
+                    version: '1.0',
+                    name: source,
+                    rules: [this.parseRule(data, source)],
+                };
+            }
+            this.logger.warn('No rules found in file', { source });
+            return null;
+        }
+        return {
+            version: data.version ?? '1.0',
+            name: data.name ?? source,
+            description: data.description,
+            rules: rules.map((r, i) => this.parseRule(r, `${source}:rule-${i}`)),
+            settings: data.settings,
+        };
+    }
+    /**
+     * Parse a single rule from YAML data.
+     */
+    parseRule(data, source) {
+        if (!data || typeof data !== 'object') {
+            throw new Error(`Invalid rule at ${source}`);
+        }
+        const ruleData = data;
+        return {
+            id: ruleData.id ?? `auto-${Date.now()}-${Math.random().toString(36).slice(2)}`,
+            name: ruleData.name ?? 'Unnamed Rule',
+            description: ruleData.description,
+            enabled: ruleData.enabled !== false, // Default to true
+            severity: ruleData.severity ?? 'medium',
+            action: ruleData.action ?? 'block',
+            tools: ruleData.tools,
+            conditions: ruleData.conditions,
+            condition_groups: ruleData.condition_groups,
+            tags: ruleData.tags,
+            metadata: ruleData.metadata,
+        };
+    }
+    /**
+     * Build the rule index for efficient lookup.
+     */
+    buildIndex() {
+        this.loadedRules.allRules = [];
+        this.loadedRules.rulesByTool = new Map();
+        this.loadedRules.globalRules = [];
+        for (const ruleSet of this.loadedRules.ruleSets) {
+            for (const rule of ruleSet.rules) {
+                this.loadedRules.allRules.push(rule);
+                if (!rule.tools || rule.tools.length === 0) {
+                    // Global rule applies to all tools
+                    this.loadedRules.globalRules.push(rule);
+                }
+                else {
+                    // Tool-specific rule
+                    for (const toolName of rule.tools) {
+                        const existing = this.loadedRules.rulesByTool.get(toolName) ?? [];
+                        existing.push(rule);
+                        this.loadedRules.rulesByTool.set(toolName, existing);
+                    }
+                }
+            }
+        }
+        this.logger.debug('Built rule index', {
+            totalRules: this.loadedRules.allRules.length,
+            globalRules: this.loadedRules.globalRules.length,
+            toolsWithRules: this.loadedRules.rulesByTool.size,
+        });
+    }
+}
+/**
+ * Create a new rule loader.
+ *
+ * @param options - Loader options
+ * @returns RuleLoader instance
+ */
+export function createRuleLoader(options) {
+    return new RuleLoader(options);
+}
+//# sourceMappingURL=loader.js.map

package/dist/rules/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/rules/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoB1C;;;GAGG;AACH,SAAS,iBAAiB;IACxB,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,UAAU;IACJ,MAAM,CAAS;IACxB,UAAU,GAAe,iBAAiB,CAAC;IAC3C,WAAW,GAAgB;QACjC,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,IAAI,GAAG,EAAE;QACtB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,EAAE;KAChB,CAAC;IAEF,YAAY,OAA0B;QACpC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;OAUG;IACH,aAAa,CAAC,MAAkB;QAC9B,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;OAMG;IACH,iBAAiB,CAAC,OAAe,EAAE,SAAS,GAAG,IAAI;QACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAE/E,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC,WAAW,CAAC;QAC1B,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAEnE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,0BAA0B,EAC1B,EAAE,IAAI,EAAE,QAAQ,EAAE,EAClB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,QAAgB;QAC3B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEjE,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,MAAiC,EAAE,QAAQ,CAAC,CAAC;QAC/E,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBAClC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;gBAC/B,IAAI,EAAE,QAAQ;aACf,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,OAAe,EAAE,UAAU,GAAG,QAAQ;QACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAEvE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,MAAiC,EAAE,UAAU,CAAC,CAAC;QACjF,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,KAAa,EAAE,OAAO,GAAG,cAAc;QAC9C,MAAM,OAAO,GAAY;YACvB,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,OAAO;YACb,KAAK;SACN,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;YAC/C,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,KAAK,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,QAAgB;QAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtE,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,GAAG,YAAY,CAAC,CAAC,MAAM,CAC9D,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CACvB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,WAAW,GAAG;YACjB,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE,IAAI,GAAG,EAAE;YACtB,WAAW,EAAE,EAAE;YACf,WAAW,EAAE,EAAE;SAChB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QAEb,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,OAAe,EAAE,SAAkB;QACvD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAErC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAEhC,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,SAAS,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;YACzD,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;gBACzC,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;oBACtC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,YAAY,CAClB,IAA6B,EAC7B,MAAc;QAEd,6DAA6D;QAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,8BAA8B;YAC9B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;aACpE,CAAC;QACJ,CAAC;QAED,sCAAsC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAkB,CAAC;QACtC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,2BAA2B;YAC3B,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACzB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;iBACtC,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,OAAO,EAAG,IAAI,CAAC,OAAkB,IAAI,KAAK;YAC1C,IAAI,EAAG,IAAI,CAAC,IAAe,IAAI,MAAM;YACrC,WAAW,EAAE,IAAI,CAAC,WAAiC;YACnD,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC;YACpE,QAAQ,EAAE,IAAI,CAAC,QAA+B;SAC/C,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,IAAa,EAAE,MAAc;QAC7C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,QAAQ,GAAG,IAA+B,CAAC;QAEjD,OAAO;YACL,EAAE,EAAG,QAAQ,CAAC,EAAa,IAAI,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YAC1F,IAAI,EAAG,QAAQ,CAAC,IAAe,IAAI,cAAc;YACjD,WAAW,EAAE,QAAQ,CAAC,WAAiC;YACvD,OAAO,EAAE,QAAQ,CAAC,OAAO,KAAK,KAAK,EAAE,kBAAkB;YACvD,QAAQ,EAAG,QAAQ,CAAC,QAA6B,IAAI,QAAQ;YAC7D,MAAM,EAAG,QAAQ,CAAC,MAAyB,IAAI,OAAO;YACtD,KAAK,EAAE,QAAQ,CAAC,KAA6B;YAC7C,UAAU,EAAE,QAAQ,CAAC,UAAgC;YACrD,gBAAgB,EAAE,QAAQ,CAAC,gBAA4C;YACvE,IAAI,EAAE,QAAQ,CAAC,IAA4B;YAC3C,QAAQ,EAAE,QAAQ,CAAC,QAA+C;SACnE,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,UAAU;QAChB,IAAI,CAAC,WAAW,CAAC,QAAQ,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,WAAW,CAAC,WAAW,GAAG,IAAI,GAAG,EAAE,CAAC;QACzC,IAAI,CAAC,WAAW,CAAC,WAAW,GAAG,EAAE,CAAC;QAElC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YAChD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACjC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAErC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC3C,mCAAmC;oBACnC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACN,qBAAqB;oBACrB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;wBAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;wBAClE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACpB,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE;YACpC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM;YAC5C,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,MAAM;YAChD,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI;SAClD,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA0B;IACzD,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}

package/dist/rules/rule-validator.d.ts

@@ -0,0 +1,135 @@
+/**
+ * Rule-based validator.
+ *
+ * This validator loads rules from YAML files and validates tool calls
+ * by sending them to an external API.
+ *
+ * @module rules/rule-validator
+ */
+import type { Logger } from '../utils/logger.js';
+import type { ValidationContext, ValidationResult, NamedValidator } from '../types/config.js';
+import type { Rule } from './types.js';
+import { RuleLoader, type YamlParser } from './loader.js';
+import { ValidationAPIClient, type ValidationAPIConfig } from './api-client.js';
+/**
+ * Configuration for the rule-based validator.
+ */
+export interface RuleValidatorConfig {
+    /** API configuration */
+    api: ValidationAPIConfig;
+    /** Path to directory containing rule YAML files */
+    rulesDir?: string;
+    /** YAML parser function (e.g., from js-yaml) */
+    yamlParser?: YamlParser;
+    /** Whether to search subdirectories for rules */
+    recursiveRuleSearch?: boolean;
+    /** Behavior when API is unavailable */
+    failMode?: 'open' | 'closed';
+    /** Session ID for tracking */
+    sessionId?: string;
+    /** Agent ID for tracking */
+    agentId?: string;
+}
+/**
+ * Options for the rule validator.
+ */
+export interface RuleValidatorOptions {
+    /** Configuration */
+    config: RuleValidatorConfig;
+    /** Logger instance */
+    logger: Logger;
+}
+/**
+ * Rule-based validator that uses an external API for decisions.
+ *
+ * This validator:
+ * 1. Loads rules from YAML files
+ * 2. For each tool call, finds applicable rules
+ * 3. Sends the context and rules to an API
+ * 4. Returns the decision from the API
+ */
+export declare class RuleValidator {
+    private readonly logger;
+    private readonly config;
+    private readonly ruleLoader;
+    private readonly apiClient;
+    private readonly sessionId?;
+    private readonly agentId?;
+    private isInitialized;
+    constructor(options: RuleValidatorOptions);
+    /**
+     * Initialize the validator by loading rules.
+     *
+     * Call this before using the validator if rules are loaded from files.
+     */
+    initialize(): Promise<void>;
+    /**
+     * Set the YAML parser.
+     */
+    setYamlParser(parser: YamlParser): void;
+    /**
+     * Add rules programmatically.
+     */
+    addRules(rules: Rule[], setName?: string): void;
+    /**
+     * Load rules from a YAML string.
+     */
+    loadRulesFromString(yamlContent: string, sourceName?: string): void;
+    /**
+     * Get the rule loader for direct access.
+     */
+    getRuleLoader(): RuleLoader;
+    /**
+     * Get the API client for direct access.
+     */
+    getAPIClient(): ValidationAPIClient;
+    /**
+     * Validate a tool call.
+     *
+     * @param context - Validation context from Veto
+     * @returns Validation result
+     */
+    validate(context: ValidationContext): Promise<ValidationResult>;
+    /**
+     * Create a NamedValidator for use with Veto.
+     *
+     * @returns Named validator instance
+     */
+    toNamedValidator(): NamedValidator;
+    /**
+     * Build the API context from the validation context.
+     */
+    private buildToolCallContext;
+    /**
+     * Build a summary of call history for the API.
+     */
+    private buildHistorySummary;
+}
+/**
+ * Create a rule-based validator.
+ *
+ * @param options - Validator options
+ * @returns RuleValidator instance
+ *
+ * @example
+ * ```typescript
+ * import yaml from 'js-yaml';
+ *
+ * const ruleValidator = createRuleValidator({
+ *   config: {
+ *     api: { baseUrl: 'http://localhost:8080' },
+ *     rulesDir: './rules',
+ *     yamlParser: yaml.load,
+ *   },
+ *   logger: createLogger('info'),
+ * });
+ *
+ * await ruleValidator.initialize();
+ *
+ * const veto = new Veto({
+ *   validators: [ruleValidator.toNamedValidator()],
+ * });
+ * ```
+ */
+export declare function createRuleValidator(options: RuleValidatorOptions): RuleValidator;
+//# sourceMappingURL=rule-validator.d.ts.map

package/dist/rules/rule-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-validator.d.ts","sourceRoot":"","sources":["../../src/rules/rule-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EACV,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACf,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,IAAI,EAA2C,MAAM,YAAY,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,KAAK,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEhF;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,wBAAwB;IACxB,GAAG,EAAE,mBAAmB,CAAC;IACzB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,iDAAiD;IACjD,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC7B,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4BAA4B;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,oBAAoB;IACpB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,sBAAsB;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;GAQG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAsB;IAChD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAS;IAClC,OAAO,CAAC,aAAa,CAAS;gBAElB,OAAO,EAAE,oBAAoB;IA2BzC;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAyBjC;;OAEG;IACH,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAIvC;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAI/C;;OAEG;IACH,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAInE;;OAEG;IACH,aAAa,IAAI,UAAU;IAI3B;;OAEG;IACH,YAAY,IAAI,mBAAmB;IAInC;;;;;OAKG;IACG,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAsErE;;;;OAIG;IACH,gBAAgB,IAAI,cAAc;IASlC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAa5B;;OAEG;IACH,OAAO,CAAC,mBAAmB;CAS5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CAEhF"}

package/dist/rules/rule-validator.js

@@ -0,0 +1,239 @@
+/**
+ * Rule-based validator.
+ *
+ * This validator loads rules from YAML files and validates tool calls
+ * by sending them to an external API.
+ *
+ * @module rules/rule-validator
+ */
+import { RuleLoader } from './loader.js';
+import { ValidationAPIClient } from './api-client.js';
+/**
+ * Rule-based validator that uses an external API for decisions.
+ *
+ * This validator:
+ * 1. Loads rules from YAML files
+ * 2. For each tool call, finds applicable rules
+ * 3. Sends the context and rules to an API
+ * 4. Returns the decision from the API
+ */
+export class RuleValidator {
+    logger;
+    config;
+    ruleLoader;
+    apiClient;
+    sessionId;
+    agentId;
+    isInitialized = false;
+    constructor(options) {
+        this.logger = options.logger;
+        this.config = options.config;
+        this.sessionId = options.config.sessionId;
+        this.agentId = options.config.agentId;
+        // Initialize rule loader
+        this.ruleLoader = new RuleLoader({ logger: this.logger });
+        // Set YAML parser if provided
+        if (this.config.yamlParser) {
+            this.ruleLoader.setYamlParser(this.config.yamlParser);
+        }
+        // Initialize API client
+        this.apiClient = new ValidationAPIClient({
+            config: this.config.api,
+            logger: this.logger,
+            failMode: this.config.failMode,
+        });
+        this.logger.info('Rule validator created', {
+            rulesDir: this.config.rulesDir,
+            apiEndpoint: this.config.api.baseUrl + (this.config.api.endpoint ?? '/tool/call/check'),
+        });
+    }
+    /**
+     * Initialize the validator by loading rules.
+     *
+     * Call this before using the validator if rules are loaded from files.
+     */
+    async initialize() {
+        if (this.isInitialized) {
+            return;
+        }
+        if (this.config.rulesDir) {
+            if (!this.config.yamlParser) {
+                this.logger.warn('Rules directory specified but no YAML parser provided. ' +
+                    'Call setYamlParser() before initialize() or use addRules().');
+            }
+            else {
+                this.ruleLoader.loadFromDirectory(this.config.rulesDir, this.config.recursiveRuleSearch ?? true);
+            }
+        }
+        this.isInitialized = true;
+        this.logger.info('Rule validator initialized', {
+            totalRules: this.ruleLoader.getRules().allRules.length,
+        });
+    }
+    /**
+     * Set the YAML parser.
+     */
+    setYamlParser(parser) {
+        this.ruleLoader.setYamlParser(parser);
+    }
+    /**
+     * Add rules programmatically.
+     */
+    addRules(rules, setName) {
+        this.ruleLoader.addRules(rules, setName);
+    }
+    /**
+     * Load rules from a YAML string.
+     */
+    loadRulesFromString(yamlContent, sourceName) {
+        this.ruleLoader.loadFromString(yamlContent, sourceName);
+    }
+    /**
+     * Get the rule loader for direct access.
+     */
+    getRuleLoader() {
+        return this.ruleLoader;
+    }
+    /**
+     * Get the API client for direct access.
+     */
+    getAPIClient() {
+        return this.apiClient;
+    }
+    /**
+     * Validate a tool call.
+     *
+     * @param context - Validation context from Veto
+     * @returns Validation result
+     */
+    async validate(context) {
+        // Auto-initialize if not already done
+        if (!this.isInitialized) {
+            await this.initialize();
+        }
+        // Get applicable rules
+        const rules = this.ruleLoader.getRulesForTool(context.toolName);
+        this.logger.debug('Validating tool call with rules', {
+            toolName: context.toolName,
+            callId: context.callId,
+            applicableRules: rules.length,
+        });
+        // If no rules, allow by default
+        if (rules.length === 0) {
+            this.logger.debug('No rules applicable, allowing by default', {
+                toolName: context.toolName,
+            });
+            return { decision: 'allow' };
+        }
+        // Build API context
+        const apiContext = this.buildToolCallContext(context);
+        // Call the API
+        const response = await this.apiClient.validate(apiContext, rules);
+        // Convert API response to ValidationResult
+        if (response.decision === 'pass') {
+            this.logger.info('Tool call allowed by API', {
+                toolName: context.toolName,
+                callId: context.callId,
+                passWeight: response.should_pass_weight,
+                reasoning: response.reasoning,
+            });
+            return {
+                decision: 'allow',
+                reason: response.reasoning,
+                metadata: {
+                    should_pass_weight: response.should_pass_weight,
+                    should_block_weight: response.should_block_weight,
+                    matched_rules: response.matched_rules,
+                    ...response.metadata,
+                },
+            };
+        }
+        else {
+            this.logger.warn('Tool call blocked by API', {
+                toolName: context.toolName,
+                callId: context.callId,
+                blockWeight: response.should_block_weight,
+                reasoning: response.reasoning,
+                matchedRules: response.matched_rules,
+            });
+            return {
+                decision: 'deny',
+                reason: response.reasoning,
+                metadata: {
+                    should_pass_weight: response.should_pass_weight,
+                    should_block_weight: response.should_block_weight,
+                    matched_rules: response.matched_rules,
+                    ...response.metadata,
+                },
+            };
+        }
+    }
+    /**
+     * Create a NamedValidator for use with Veto.
+     *
+     * @returns Named validator instance
+     */
+    toNamedValidator() {
+        return {
+            name: 'rule-validator',
+            description: 'Validates tool calls using YAML rules and external API',
+            priority: 50, // Run in the middle
+            validate: (context) => this.validate(context),
+        };
+    }
+    /**
+     * Build the API context from the validation context.
+     */
+    buildToolCallContext(context) {
+        return {
+            call_id: context.callId,
+            tool_name: context.toolName,
+            arguments: context.arguments,
+            timestamp: context.timestamp.toISOString(),
+            session_id: this.sessionId,
+            agent_id: this.agentId,
+            call_history: this.buildHistorySummary(context.callHistory),
+            custom: context.custom,
+        };
+    }
+    /**
+     * Build a summary of call history for the API.
+     */
+    buildHistorySummary(history) {
+        return history.slice(-10).map((entry) => ({
+            tool_name: entry.toolName,
+            allowed: entry.validationResult.decision !== 'deny',
+            timestamp: entry.timestamp.toISOString(),
+        }));
+    }
+}
+/**
+ * Create a rule-based validator.
+ *
+ * @param options - Validator options
+ * @returns RuleValidator instance
+ *
+ * @example
+ * ```typescript
+ * import yaml from 'js-yaml';
+ *
+ * const ruleValidator = createRuleValidator({
+ *   config: {
+ *     api: { baseUrl: 'http://localhost:8080' },
+ *     rulesDir: './rules',
+ *     yamlParser: yaml.load,
+ *   },
+ *   logger: createLogger('info'),
+ * });
+ *
+ * await ruleValidator.initialize();
+ *
+ * const veto = new Veto({
+ *   validators: [ruleValidator.toNamedValidator()],
+ * });
+ * ```
+ */
+export function createRuleValidator(options) {
+    return new RuleValidator(options);
+}
+//# sourceMappingURL=rule-validator.js.map