veto-sdk 1.17.0 → 2.0.0

package/dist/cli/compile.js

@@ -2,12 +2,14 @@ import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
 import { resolve, dirname, basename, extname } from 'node:path';
 import { stringify } from 'yaml';
 import { PROVIDER_ENV_VARS, PROVIDER_BASE_URLS, CustomError, } from '../custom/types.js';
+import { createSafeRegex } from '../rules/condition-evaluator.js';
 const COMPILE_SYSTEM_PROMPT = `You are a policy compiler for Veto, an AI agent tool-call guardrail system.
 
-Your task: convert a natural language policy description into deterministic YAML constraint rules.
+Your task: convert a natural language policy description into deterministic YAML rules.
 
-The output MUST be a valid JSON object with two fields:
-- "rules": an array of rule objects (the compiled rules)
+The output MUST be a valid JSON object with three fields:
+- "rules": an array of input rule objects (the compiled rules)
+- "output_rules": an optional array of output visibility rules
 - "notes": a string with any caveats or suggestions (empty string if none)
 
 Each rule object MUST have these fields:
@@ -32,9 +34,37 @@ Common patterns:
 - Time windows: use "outside_hours" or "within_hours" on "context.time" with value:
   {"start":"HH:MM","end":"HH:MM","timezone":"IANA/Zone","days":["mon","tue","wed","thu","fri"]}
 
+If the policy is about HIDING, REDACTING, FILTERING, or NOT SHOWING data in tool outputs, generate output_rules.
+
+Each output rule object MUST have these fields:
+- "id": kebab-case unique identifier
+- "name": short human-readable name
+- "action": one of "block", "redact", "log"
+- "tools": array of tool name strings this applies to
+- "output_conditions": array of condition objects using:
+  - "field": usually "output" or an output subfield like "output.rows"
+  - "operator": one of ${Array.from(new Set(['equals', 'not_equals', 'contains', 'not_contains', 'starts_with', 'ends_with', 'matches', 'greater_than', 'less_than', 'length_greater_than', 'in', 'not_in', 'outside_hours', 'within_hours'])).map((operator) => `"${operator}"`).join(', ')}
+  - "value": the value to compare against
+- "redact_with": replacement string when action is "redact"
+
+Output rule guidance:
+- Use output_rules for phrases like "do not show", "hide", "redact", "don't reveal", "mask"
+- Expand named entities into safe, case-insensitive regex patterns when appropriate
+- Example: "Acme Inc." -> "(?i)\\bacme\\b(?:\\s+(?:inc|corp|llc))?\\.?"
+- When both input restrictions and output visibility restrictions apply, generate both "rules" and "output_rules"
+
 If the policy CANNOT be fully expressed as deterministic rules, include an explanation in the "notes" field describing what aspects require LLM-based evaluation.
 
 Respond with ONLY a JSON object. No markdown, no explanation outside the JSON.`;
+const VALID_OPERATORS = new Set([
+    'equals', 'not_equals', 'contains', 'not_contains',
+    'starts_with', 'ends_with', 'matches',
+    'greater_than', 'less_than', 'length_greater_than', 'in', 'not_in',
+    'outside_hours', 'within_hours',
+]);
+const VALID_ACTIONS = new Set(['block', 'warn', 'log', 'allow', 'require_approval']);
+const VALID_OUTPUT_ACTIONS = new Set(['block', 'redact', 'log']);
+const VALID_SEVERITIES = new Set(['critical', 'high', 'medium', 'low', 'info']);
 function buildUserPrompt(policyText) {
     return `Convert this natural language policy into deterministic YAML rules:\n\n${policyText}`;
 }
@@ -144,6 +174,42 @@ async function callLLM(config, policyText) {
             throw new CompileError(`Unsupported provider: ${config.provider}`);
     }
 }
+function validateConditionCollection(ruleId, conditions, label) {
+    if (!Array.isArray(conditions)) {
+        return;
+    }
+    for (const condition of conditions) {
+        validateCondition(ruleId, condition, label);
+    }
+}
+function validateConditionGroups(ruleId, groups, label) {
+    if (!Array.isArray(groups)) {
+        return;
+    }
+    for (const group of groups) {
+        if (!Array.isArray(group)) {
+            throw new CompileError(`Rule "${ruleId}" has invalid ${label} group`);
+        }
+        for (const condition of group) {
+            validateCondition(ruleId, condition, label);
+        }
+    }
+}
+function validateCondition(ruleId, condition, label) {
+    if (!condition || typeof condition !== 'object') {
+        throw new CompileError(`Rule "${ruleId}" has invalid ${label}`);
+    }
+    const parsedCondition = condition;
+    if (typeof parsedCondition.operator !== 'string'
+        || !VALID_OPERATORS.has(parsedCondition.operator)) {
+        throw new CompileError(`Rule "${ruleId}" has invalid operator: ${parsedCondition.operator}`);
+    }
+    if (parsedCondition.operator === 'matches') {
+        if (typeof parsedCondition.value !== 'string' || !createSafeRegex(parsedCondition.value)) {
+            throw new CompileError(`Rule "${ruleId}" has unsafe regex: ${parsedCondition.value}`);
+        }
+    }
+}
 function extractJSON(raw) {
     const start = raw.indexOf('{');
     if (start === -1)
@@ -179,14 +245,6 @@ function parseAndValidateLLMOutput(raw) {
     if (!Array.isArray(obj.rules)) {
         throw new CompileError('LLM response missing "rules" array');
     }
-    const VALID_OPERATORS = new Set([
-        'equals', 'not_equals', 'contains', 'not_contains',
-        'starts_with', 'ends_with', 'matches',
-        'greater_than', 'less_than', 'length_greater_than', 'in', 'not_in',
-        'outside_hours', 'within_hours',
-    ]);
-    const VALID_ACTIONS = new Set(['block', 'warn', 'log', 'allow', 'require_approval']);
-    const VALID_SEVERITIES = new Set(['critical', 'high', 'medium', 'low', 'info']);
     for (const rule of obj.rules) {
         if (!rule || typeof rule !== 'object') {
             throw new CompileError('Invalid rule in LLM output');
@@ -204,20 +262,36 @@ function parseAndValidateLLMOutput(raw) {
         if (r.severity && !VALID_SEVERITIES.has(r.severity)) {
             throw new CompileError(`Rule "${r.id}" has invalid severity: ${r.severity}`);
         }
-        if (Array.isArray(r.conditions)) {
-            for (const cond of r.conditions) {
-                if (!cond || typeof cond !== 'object') {
-                    throw new CompileError(`Rule "${r.id}" has invalid condition`);
-                }
-                const c = cond;
-                if (typeof c.operator !== 'string' || !VALID_OPERATORS.has(c.operator)) {
-                    throw new CompileError(`Rule "${r.id}" has invalid operator: ${c.operator}`);
-                }
+        validateConditionCollection(r.id, r.conditions, 'condition');
+        validateConditionGroups(r.id, r.condition_groups, 'condition');
+    }
+    if (Array.isArray(obj.output_rules)) {
+        for (const outputRule of obj.output_rules) {
+            if (!outputRule || typeof outputRule !== 'object') {
+                throw new CompileError('Invalid output rule in LLM output');
+            }
+            const r = outputRule;
+            if (typeof r.id !== 'string' || !r.id) {
+                throw new CompileError('Output rule missing "id" field');
+            }
+            if (typeof r.name !== 'string' || !r.name) {
+                throw new CompileError(`Output rule "${r.id}" missing "name" field`);
+            }
+            if (typeof r.action !== 'string' || !VALID_OUTPUT_ACTIONS.has(r.action)) {
+                throw new CompileError(`Output rule "${r.id}" has invalid output action: ${r.action}`);
+            }
+            if (r.severity && !VALID_SEVERITIES.has(r.severity)) {
+                throw new CompileError(`Output rule "${r.id}" has invalid severity: ${r.severity}`);
             }
+            validateConditionCollection(r.id, r.output_conditions, 'output condition');
+            validateConditionGroups(r.id, r.output_condition_groups, 'output condition');
         }
     }
     return {
         rules: obj.rules,
+        output_rules: Array.isArray(obj.output_rules)
+            ? obj.output_rules
+            : undefined,
         notes: typeof obj.notes === 'string' ? obj.notes : '',
     };
 }
@@ -227,6 +301,7 @@ function toYaml(output, policyText) {
         name: 'compiled-rules',
         description: `Compiled from: ${policyText.slice(0, 100)}${policyText.length > 100 ? '...' : ''}`,
         rules: output.rules,
+        ...(output.output_rules ? { output_rules: output.output_rules } : {}),
     };
     return stringify(ruleSet, { lineWidth: 120 });
 }
@@ -319,7 +394,11 @@ export async function compile(options) {
     writeFileSync(finalPath, yaml, 'utf-8');
     result.outputPath = finalPath;
     result.success = true;
-    log(`  Generated ${output.rules.length} rule(s)`, quiet);
+    const outputRuleCount = output.output_rules?.length ?? 0;
+    const generatedSummary = outputRuleCount > 0
+        ? `  Generated ${output.rules.length} input rule(s), ${outputRuleCount} output rule(s)`
+        : `  Generated ${output.rules.length} rule(s)`;
+    log(generatedSummary, quiet);
     log(`  Output: ${finalPath}`, quiet);
     if (output.notes) {
         log('', quiet);

package/dist/cli/compile.js.map

@@ -1 +1 @@
-{"version":3,"file":"compile.js","sourceRoot":"","sources":["../../src/cli/compile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAyB5B,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+EAgCiD,CAAC;AAEhF,SAAS,eAAe,CAAC,UAAkB;IACzC,OAAO,0EAA0E,UAAU,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,eAAe,CAAC,OAAuB;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,YAAY,CACpB,yGAAyG,CAC1G,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,YAAY,CACpB,wBAAwB,MAAM,wBAAwB,CACvD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ;QACR,KAAK;QACL,MAAM;QACN,OAAO,EAAE,kBAAkB,CAAC,QAAQ,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAAE,OAAO,WAAW,CAAC;IACtD,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAAE,OAAO,YAAY,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,QAAwB;IAC5C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC/B,KAAK,WAAW,CAAC,CAAC,OAAO,4BAA4B,CAAC;QACtD,KAAK,QAAQ,CAAC,CAAC,OAAO,kBAAkB,CAAC;QACzC,KAAK,YAAY,CAAC,CAAC,OAAO,eAAe,CAAC;QAC1C,OAAO,CAAC,CAAC,MAAM,IAAI,YAAY,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,MAAM,OAAO,YAAa,SAAQ,WAAW;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,KAAK,UAAU,OAAO,CACpB,MAA6B,EAC7B,UAAkB;IAElB,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAE/C,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,QAAQ,CAAC;QACd,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;gBACxB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBACpD,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE;oBACR,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE;oBAClD,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE;iBACtC;gBACD,WAAW,EAAE,GAAG;gBAChB,UAAU,EAAE,IAAI;gBAChB,eAAe,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;aACzC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC;YACtD,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;YAChE,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,SAAS,GAAG,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC5C,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,qBAAqB;gBAC7B,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;gBACjD,WAAW,EAAE,GAAG;gBAChB,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpC,MAAM,IAAI,YAAY,CAAC,oCAAoC,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC;gBAC/C,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,GAAG,qBAAqB,OAAO,UAAU,EAAE;gBACrD,MAAM,EAAE;oBACN,WAAW,EAAE,GAAG;oBAChB,eAAe,EAAE,IAAI;oBACrB,gBAAgB,EAAE,kBAAkB;iBACrC;aACF,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC3B,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,YAAY,CAAC,4BAA4B,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;QAED;YACE,MAAM,IAAI,YAAY,CAAC,yBAAyB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAsBD,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,+BAA+B,CAAC,CAAC;IAC1E,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACvB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;QACjC,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,YAAY,CAAC,+BAA+B,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAW;IAC5C,IAAI,MAAe,CAAC;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,YAAY,CAAC,8BAA8B,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,YAAY,CAAC,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,YAAY,CAAC,oCAAoC,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;QAC9B,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc;QAClD,aAAa,EAAE,WAAW,EAAE,SAAS;QACrC,cAAc,EAAE,WAAW,EAAE,qBAAqB,EAAE,IAAI,EAAE,QAAQ;QAClE,eAAe,EAAE,cAAc;KAChC,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACrF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhF,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,YAAY,CAAC,4BAA4B,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAkB,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;gBAChC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtC,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC;gBACjE,CAAC;gBACD,MAAM,CAAC,GAAG,IAA+B,CAAC;gBAC1C,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACvE,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC/E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAuB;QAClC,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,MAAiB,EAAE,UAAkB;IACnD,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,kBAAkB,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QAChG,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;IACF,OAAO,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,GAAG,CAAC,OAAe,EAAE,KAAc;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAuB;IACnD,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAClC,MAAM,MAAM,GAAkB;QAC5B,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,IAAI,UAAkB,CAAC;IACvB,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC;IAC7B,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,0BAA0B,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC;YACjD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,UAAU,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAClD,GAAG,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC7C,GAAG,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,GAAG,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;IAEzD,IAAI,cAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,cAAc,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,GAAG,CAAC,UAAU,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,GAAG,CAAC,eAAe,cAAc,CAAC,QAAQ,KAAK,cAAc,CAAC,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC;IAE/E,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;QAChD,GAAG,CAAC,2BAA2B,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,MAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC,8BAA8B,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IAEnB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEtC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,SAAiB,CAAC;IACtB,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,MAAM,EAAE,CAAC;QACtE,SAAS,GAAG,UAAU,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI;YACvB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/C,CAAC,CAAC,UAAU,CAAC;QACf,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAEtB,GAAG,CAAC,eAAe,MAAM,CAAC,KAAK,CAAC,MAAM,UAAU,EAAE,KAAK,CAAC,CAAC;IACzD,GAAG,CAAC,aAAa,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;IAErC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACf,GAAG,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;QACrC,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,EAAE,CAAC"}
+{"version":3,"file":"compile.js","sourceRoot":"","sources":["../../src/cli/compile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAyBlE,MAAM,qBAAqB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAwCL,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,qBAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;;+EAY7M,CAAC;AAEhF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc;IAClD,aAAa,EAAE,WAAW,EAAE,SAAS;IACrC,cAAc,EAAE,WAAW,EAAE,qBAAqB,EAAE,IAAI,EAAE,QAAQ;IAClE,eAAe,EAAE,cAAc;CAChC,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;AACrF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AACjE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAEhF,SAAS,eAAe,CAAC,UAAkB;IACzC,OAAO,0EAA0E,UAAU,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,eAAe,CAAC,OAAuB;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,YAAY,CACpB,yGAAyG,CAC1G,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,YAAY,CACpB,wBAAwB,MAAM,wBAAwB,CACvD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ;QACR,KAAK;QACL,MAAM;QACN,OAAO,EAAE,kBAAkB,CAAC,QAAQ,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAAE,OAAO,WAAW,CAAC;IACtD,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,QAAQ,CAAC;IAChD,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAAE,OAAO,YAAY,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,QAAwB;IAC5C,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC/B,KAAK,WAAW,CAAC,CAAC,OAAO,4BAA4B,CAAC;QACtD,KAAK,QAAQ,CAAC,CAAC,OAAO,kBAAkB,CAAC;QACzC,KAAK,YAAY,CAAC,CAAC,OAAO,eAAe,CAAC;QAC1C,OAAO,CAAC,CAAC,MAAM,IAAI,YAAY,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,MAAM,OAAO,YAAa,SAAQ,WAAW;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,KAAK,UAAU,OAAO,CACpB,MAA6B,EAC7B,UAAkB;IAElB,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAE/C,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,QAAQ,CAAC;QACd,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;gBACxB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBACpD,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE;oBACR,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE;oBAClD,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE;iBACtC;gBACD,WAAW,EAAE,GAAG;gBAChB,UAAU,EAAE,IAAI;gBAChB,eAAe,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;aACzC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC;YACtD,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;YAChE,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,SAAS,GAAG,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC5C,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,qBAAqB;gBAC7B,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;gBACjD,WAAW,EAAE,GAAG;gBAChB,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpC,MAAM,IAAI,YAAY,CAAC,oCAAoC,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;YACtD,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC;gBAC/C,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,GAAG,qBAAqB,OAAO,UAAU,EAAE;gBACrD,MAAM,EAAE;oBACN,WAAW,EAAE,GAAG;oBAChB,eAAe,EAAE,IAAI;oBACrB,gBAAgB,EAAE,kBAAkB;iBACrC;aACF,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC3B,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,YAAY,CAAC,4BAA4B,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC;QAED;YACE,MAAM,IAAI,YAAY,CAAC,yBAAyB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AA4CD,SAAS,2BAA2B,CAClC,MAAc,EACd,UAAmB,EACnB,KAAuC;IAEvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAAc,EACd,MAAe,EACf,KAAuC;IAEvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,YAAY,CAAC,SAAS,MAAM,iBAAiB,KAAK,QAAQ,CAAC,CAAC;QACxE,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;YAC9B,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAc,EACd,SAAkB,EAClB,KAAuC;IAEvC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,YAAY,CAAC,SAAS,MAAM,iBAAiB,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,eAAe,GAAG,SAAoC,CAAC;IAC7D,IACE,OAAO,eAAe,CAAC,QAAQ,KAAK,QAAQ;WACzC,CAAC,eAAe,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,EACjD,CAAC;QACD,MAAM,IAAI,YAAY,CACpB,SAAS,MAAM,2BAA2B,eAAe,CAAC,QAAQ,EAAE,CACrE,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3C,IAAI,OAAO,eAAe,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YACzF,MAAM,IAAI,YAAY,CAAC,SAAS,MAAM,uBAAuB,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,+BAA+B,CAAC,CAAC;IAC1E,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;aACvB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAC;QACjC,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,YAAY,CAAC,+BAA+B,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAW;IAC5C,IAAI,MAAe,CAAC;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,YAAY,CAAC,8BAA8B,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,YAAY,CAAC,+BAA+B,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,YAAY,CAAC,oCAAoC,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,YAAY,CAAC,4BAA4B,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,YAAY,CAAC,yBAAyB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAkB,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,2BAA2B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC7D,uBAAuB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,KAAK,MAAM,UAAU,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YAC1C,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAClD,MAAM,IAAI,YAAY,CAAC,mCAAmC,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,CAAC,GAAG,UAAqC,CAAC;YAChD,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,IAAI,YAAY,CAAC,gCAAgC,CAAC,CAAC;YAC3D,CAAC;YACD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC1C,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxE,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAkB,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,2BAA2B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;YAC3E,uBAAuB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAuB;QAClC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YAC3C,CAAC,CAAC,GAAG,CAAC,YAAoC;YAC1C,CAAC,CAAC,SAAS;QACb,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,MAAiB,EAAE,UAAkB;IACnD,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,kBAAkB,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QAChG,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;IACF,OAAO,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,GAAG,CAAC,OAAe,EAAE,KAAc;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAuB;IACnD,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAClC,MAAM,MAAM,GAAkB;QAC5B,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,IAAI,UAAkB,CAAC;IACvB,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC;IAC7B,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,0BAA0B,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC;YACjD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,UAAU,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAClD,GAAG,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC7C,GAAG,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,GAAG,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;IAEzD,IAAI,cAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,cAAc,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,GAAG,CAAC,UAAU,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,GAAG,CAAC,eAAe,cAAc,CAAC,QAAQ,KAAK,cAAc,CAAC,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC;IAE/E,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;QAChD,GAAG,CAAC,2BAA2B,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,MAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC,8BAA8B,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IAEnB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEtC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,SAAiB,CAAC;IACtB,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,MAAM,EAAE,CAAC;QACtE,SAAS,GAAG,UAAU,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI;YACvB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/C,CAAC,CAAC,UAAU,CAAC;QACf,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAEtB,MAAM,eAAe,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,CAAC;IACzD,MAAM,gBAAgB,GAAG,eAAe,GAAG,CAAC;QAC1C,CAAC,CAAC,eAAe,MAAM,CAAC,KAAK,CAAC,MAAM,mBAAmB,eAAe,iBAAiB;QACvF,CAAC,CAAC,eAAe,MAAM,CAAC,KAAK,CAAC,MAAM,UAAU,CAAC;IACjD,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAC7B,GAAG,CAAC,aAAa,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;IAErC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACf,GAAG,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;QACrC,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,EAAE,CAAC"}

package/dist/cli/diff.d.ts

@@ -1,6 +1,6 @@
 import type { Rule } from '../rules/types.js';
+import { type ReplayDecision, type DecisionCounts } from './replay-engine.js';
 type ReportFormat = 'text' | 'json';
-type RuleDecision = 'allow' | 'deny' | 'require_approval';
 type ComparableRuleField = 'action' | 'enabled' | 'severity' | 'tools' | 'conditions' | 'condition_groups' | 'blocked_by' | 'requires' | 'description' | 'name';
 interface DiffSources {
     mode: 'implicit-git-file' | 'explicit-file' | 'explicit-directory';
@@ -19,11 +19,6 @@ interface RuleFieldChange {
     oldValue: unknown;
     newValue: unknown;
 }
-interface DecisionCounts {
-    allow: number;
-    deny: number;
-    require_approval: number;
-}
 export interface DiffOptions {
     directory?: string;
     quiet?: boolean;
@@ -50,24 +45,7 @@ export interface StructuralDiff {
     changesByScope: ScopeChanges[];
     unchangedTools: string[];
 }
-export interface ReplayCall {
-    index: number;
-    line: number;
-    tool: string;
-    arguments: Record<string, unknown>;
-    timestamp: string;
-    sessionId?: string;
-    agentId?: string;
-    userId?: string;
-    role?: string;
-    custom?: Record<string, unknown>;
-}
-export interface ReplayDecision {
-    decision: RuleDecision;
-    ruleId?: string;
-    ruleName?: string;
-    reason?: string;
-}
+export type { ReplayCall, ReplayDecision } from './replay-engine.js';
 export interface ImpactReport {
     logPath: string;
     totalLines: number;
@@ -116,5 +94,4 @@ export interface DiffResult {
     errors: string[];
 }
 export declare function diff(options?: DiffOptions): Promise<DiffResult>;
-export {};
 //# sourceMappingURL=diff.d.ts.map

package/dist/cli/diff.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/cli/diff.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAiB,MAAM,mBAAmB,CAAC;AAG7D,KAAK,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC;AACpC,KAAK,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAC;AAG1D,KAAK,mBAAmB,GACpB,QAAQ,GACR,SAAS,GACT,UAAU,GACV,OAAO,GACP,YAAY,GACZ,kBAAkB,GAClB,YAAY,GACZ,UAAU,GACV,aAAa,GACb,MAAM,CAAC;AAUX,UAAU,WAAW;IACnB,IAAI,EAAE,mBAAmB,GAAG,eAAe,GAAG,oBAAoB,CAAC;IACnE,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,UAAU,YAAY;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,QAAQ,EAAE,UAAU,EAAE,CAAC;CACxB;AAED,UAAU,eAAe;IACvB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAgBD,UAAU,cAAc;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAwBD,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,UAAU,CAAC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,OAAO,CAAC,EAAE,IAAI,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,YAAY,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,iBAAiB,EAAE,cAAc,CAAC;IAClC,iBAAiB,EAAE,cAAc,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,yBAAyB,EAAE,MAAM,CAAC;IAClC,aAAa,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,OAAO,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,cAAc,CAAC;QAC5B,WAAW,EAAE,cAAc,CAAC;KAC7B,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,WAAW,CAAC;IACrB,UAAU,EAAE,cAAc,CAAC;IAC3B,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AA+kCD,wBAAsB,IAAI,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAoEzE"}
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/cli/diff.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAiB,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EASL,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AAE5B,KAAK,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC;AAEpC,KAAK,mBAAmB,GACpB,QAAQ,GACR,SAAS,GACT,UAAU,GACV,OAAO,GACP,YAAY,GACZ,kBAAkB,GAClB,YAAY,GACZ,UAAU,GACV,aAAa,GACb,MAAM,CAAC;AAEX,UAAU,WAAW;IACnB,IAAI,EAAE,mBAAmB,GAAG,eAAe,GAAG,oBAAoB,CAAC;IACnE,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,UAAU,YAAY;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,QAAQ,EAAE,UAAU,EAAE,CAAC;CACxB;AAED,UAAU,eAAe;IACvB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAkBD,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,UAAU,CAAC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,eAAe,EAAE,CAAC;IAChC,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,OAAO,CAAC,EAAE,IAAI,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAErE,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,iBAAiB,EAAE,cAAc,CAAC;IAClC,iBAAiB,EAAE,cAAc,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,yBAAyB,EAAE,MAAM,CAAC;IAClC,aAAa,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,OAAO,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,cAAc,CAAC;QAC5B,WAAW,EAAE,cAAc,CAAC;KAC7B,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,WAAW,CAAC;IACrB,UAAU,EAAE,cAAc,CAAC;IAC3B,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAsqBD,wBAAsB,IAAI,CAAC,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAoEzE"}

package/dist/cli/diff.js

@@ -1,11 +1,7 @@
 import { execFileSync } from 'node:child_process';
-import { existsSync, readFileSync, realpathSync, statSync } from 'node:fs';
+import { existsSync, realpathSync } from 'node:fs';
 import { isAbsolute, relative, resolve, sep } from 'node:path';
-import { parse as parseYaml } from 'yaml';
-import { compile, evaluate } from '../compiler/index.js';
-import { RuleLoader } from '../rules/loader.js';
-import { evaluateConditionCollections } from '../rules/condition-evaluator.js';
-import { silentLogger } from '../utils/logger.js';
+import { parseReplayLog, replayCalls, countDecisions, createRuleLoader, getPathType, createSnapshotFromLoader, loadPolicySnapshot as loadPolicySnapshotFromEngine, } from './replay-engine.js';
 const COMPARABLE_RULE_FIELDS = [
     'action',
     'enabled',
@@ -19,50 +15,7 @@ const COMPARABLE_RULE_FIELDS = [
     'name',
 ];
 const NUMERIC_OPERATORS = new Set(['greater_than', 'less_than', 'length_greater_than']);
-const DEFAULT_SYNTHETIC_BASE_MS = Date.parse('2000-01-01T00:00:00.000Z');
 const MAX_IMPACT_SAMPLES = 10;
-function createRuleLoader() {
-    const loader = new RuleLoader({ logger: silentLogger });
-    loader.setYamlParser(parseYaml);
-    return loader;
-}
-function getPathType(inputPath) {
-    if (!existsSync(inputPath)) {
-        throw new Error(`Path not found: ${inputPath}`);
-    }
-    const stats = statSync(inputPath);
-    if (stats.isFile())
-        return 'file';
-    if (stats.isDirectory())
-        return 'directory';
-    throw new Error(`Path must be a file or directory: ${inputPath}`);
-}
-function createSnapshotFromLoader(kind, source, loader) {
-    const loaded = loader.getRules();
-    const rulesByTool = new Map();
-    for (const [toolName, rules] of loaded.rulesByTool.entries()) {
-        rulesByTool.set(toolName, [...rules]);
-    }
-    return {
-        kind,
-        source,
-        rules: [...loaded.allRules],
-        rulesByTool,
-        globalRules: [...loaded.globalRules],
-    };
-}
-function loadPolicySnapshotFromFileOrDirectory(inputPath) {
-    const resolvedPath = resolve(inputPath);
-    const pathType = getPathType(resolvedPath);
-    const loader = createRuleLoader();
-    if (pathType === 'file') {
-        const content = readFileSync(resolvedPath, 'utf-8');
-        loader.loadFromString(content, resolvedPath);
-        return createSnapshotFromLoader('file', resolvedPath, loader);
-    }
-    loader.loadFromDirectory(resolvedPath, true);
-    return createSnapshotFromLoader('directory', resolvedPath, loader);
-}
 function toPosixPath(pathValue) {
     return pathValue.split(sep).join('/');
 }
@@ -418,281 +371,6 @@ function buildStructuralDiff(oldRules, newRules) {
         unchangedTools,
     };
 }
-function isPlainObject(value) {
-    return Boolean(value)
-        && typeof value === 'object'
-        && !Array.isArray(value)
-        && (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
-}
-function normalizeOptionalString(value) {
-    if (typeof value !== 'string') {
-        return undefined;
-    }
-    const trimmed = value.trim();
-    return trimmed.length > 0 ? trimmed : undefined;
-}
-function normalizeTimestamp(raw) {
-    if (raw instanceof Date) {
-        return Number.isNaN(raw.getTime()) ? null : raw.toISOString();
-    }
-    if (typeof raw === 'string' || typeof raw === 'number') {
-        const parsed = new Date(raw);
-        return Number.isNaN(parsed.getTime()) ? null : parsed.toISOString();
-    }
-    return null;
-}
-function parseReplayLog(logPath) {
-    if (!existsSync(logPath)) {
-        throw new Error(`Log file not found: ${logPath}`);
-    }
-    const content = readFileSync(logPath, 'utf-8');
-    const lines = content.split(/\r?\n/);
-    const calls = [];
-    const invalidLineNumbers = [];
-    let totalLines = 0;
-    let syntheticCounter = 0;
-    for (let lineIndex = 0; lineIndex < lines.length; lineIndex++) {
-        const lineNumber = lineIndex + 1;
-        const rawLine = lines[lineIndex].trim();
-        if (!rawLine) {
-            continue;
-        }
-        totalLines += 1;
-        let parsed;
-        try {
-            parsed = JSON.parse(rawLine);
-        }
-        catch {
-            invalidLineNumbers.push(lineNumber);
-            continue;
-        }
-        if (!isPlainObject(parsed)) {
-            invalidLineNumbers.push(lineNumber);
-            continue;
-        }
-        const tool = normalizeOptionalString(parsed.toolName ?? parsed.tool_name ?? parsed.tool ?? parsed.name);
-        const argumentsValue = parsed.arguments ?? parsed.args;
-        if (!tool || !isPlainObject(argumentsValue)) {
-            invalidLineNumbers.push(lineNumber);
-            continue;
-        }
-        let timestamp = normalizeTimestamp(parsed.timestamp);
-        if (!timestamp) {
-            if (parsed.timestamp === undefined) {
-                timestamp = new Date(DEFAULT_SYNTHETIC_BASE_MS + (syntheticCounter * 1000)).toISOString();
-                syntheticCounter += 1;
-            }
-            else {
-                invalidLineNumbers.push(lineNumber);
-                continue;
-            }
-        }
-        calls.push({
-            index: calls.length + 1,
-            line: lineNumber,
-            tool,
-            arguments: argumentsValue,
-            timestamp,
-            sessionId: normalizeOptionalString(parsed.sessionId ?? parsed.session_id),
-            agentId: normalizeOptionalString(parsed.agentId ?? parsed.agent_id),
-            userId: normalizeOptionalString(parsed.userId ?? parsed.user_id),
-            role: normalizeOptionalString(parsed.role),
-            custom: isPlainObject(parsed.custom) ? parsed.custom : undefined,
-        });
-    }
-    if (calls.length === 0) {
-        throw new Error(`No valid replay calls found in log file: ${logPath}`);
-    }
-    return {
-        calls,
-        totalLines,
-        invalidLines: invalidLineNumbers.length,
-        invalidLineNumbers,
-    };
-}
-function evaluateExpressionSafely(expression, context, cache) {
-    let ast = cache.get(expression);
-    if (!ast) {
-        try {
-            ast = compile(expression);
-            cache.set(expression, ast);
-        }
-        catch {
-            return false;
-        }
-    }
-    try {
-        return Boolean(evaluate(ast, context));
-    }
-    catch {
-        return false;
-    }
-}
-function matchesRuleAgentScope(rule, agentId) {
-    if (!rule.agents) {
-        return true;
-    }
-    if (Array.isArray(rule.agents)) {
-        const includeOnly = rule.agents.filter((value) => typeof value === 'string');
-        return agentId !== undefined && includeOnly.includes(agentId);
-    }
-    const excluded = rule.agents.not.filter((value) => typeof value === 'string');
-    return agentId === undefined || !excluded.includes(agentId);
-}
-function buildReplayCallContext(call) {
-    return {
-        ...call.arguments,
-        tool_name: call.tool,
-        arguments: call.arguments,
-        session_id: call.sessionId,
-        agent_id: call.agentId,
-        user_id: call.userId,
-        role: call.role,
-        custom: call.custom,
-    };
-}
-function buildHistoricalContext(entry) {
-    return {
-        ...entry.arguments,
-        tool_name: entry.toolName,
-        arguments: entry.arguments,
-        decision: entry.decision,
-        timestamp: entry.timestamp.toISOString(),
-    };
-}
-function hasMatchingHistoryEntry(constraint, history, now, expressionCache) {
-    const nowMs = now.getTime();
-    const withinMs = typeof constraint.within === 'number'
-        ? Math.max(0, constraint.within) * 1000
-        : null;
-    return history.some((entry) => {
-        if (entry.toolName !== constraint.tool) {
-            return false;
-        }
-        if (entry.decision === 'deny') {
-            return false;
-        }
-        if (withinMs !== null) {
-            const ageMs = nowMs - entry.timestamp.getTime();
-            if (ageMs < 0 || ageMs > withinMs) {
-                return false;
-            }
-        }
-        return evaluateConditionCollections(constraint.conditions, constraint.condition_groups, buildHistoricalContext(entry), {
-            now: entry.timestamp,
-            evaluateExpression: (expression, context) => evaluateExpressionSafely(expression, context, expressionCache),
-        });
-    });
-}
-function matchesSequenceConstraints(rule, history, now, expressionCache) {
-    const blockedBy = rule.blocked_by ?? [];
-    const requires = rule.requires ?? [];
-    if (blockedBy.length === 0 && requires.length === 0) {
-        return true;
-    }
-    const blockedByMatched = blockedBy.some((constraint) => hasMatchingHistoryEntry(constraint, history, now, expressionCache));
-    const missingRequirement = requires.some((constraint) => !hasMatchingHistoryEntry(constraint, history, now, expressionCache));
-    return blockedByMatched || missingRequirement;
-}
-function matchesReplayRule(rule, call, history, expressionCache) {
-    if (!matchesRuleAgentScope(rule, call.agentId)) {
-        return false;
-    }
-    const callTime = new Date(call.timestamp);
-    const context = buildReplayCallContext(call);
-    const conditionsMatch = evaluateConditionCollections(rule.conditions, rule.condition_groups, context, {
-        now: callTime,
-        evaluateExpression: (expression, evaluationContext) => evaluateExpressionSafely(expression, evaluationContext, expressionCache),
-    });
-    if (!conditionsMatch) {
-        return false;
-    }
-    return matchesSequenceConstraints(rule, history, callTime, expressionCache);
-}
-function buildReplaySnapshot(snapshot) {
-    const globalRules = snapshot.globalRules.filter((rule) => rule.enabled !== false);
-    const rulesByTool = new Map();
-    for (const [toolName, rules] of snapshot.rulesByTool.entries()) {
-        const enabledRules = rules.filter((rule) => rule.enabled !== false);
-        if (enabledRules.length > 0) {
-            rulesByTool.set(toolName, enabledRules);
-        }
-    }
-    return {
-        globalRules,
-        rulesByTool,
-    };
-}
-function decideReplayCall(replaySnapshot, call, history, expressionCache) {
-    const toolRules = replaySnapshot.rulesByTool.get(call.tool) ?? [];
-    const rules = [...replaySnapshot.globalRules, ...toolRules];
-    if (rules.length === 0) {
-        return { decision: 'allow' };
-    }
-    let firstAllowRule = null;
-    for (const rule of rules) {
-        if (!matchesReplayRule(rule, call, history, expressionCache)) {
-            continue;
-        }
-        const reason = rule.description ?? `Matched rule: ${rule.name}`;
-        if (rule.action === 'require_approval') {
-            return {
-                decision: 'require_approval',
-                ruleId: rule.id,
-                ruleName: rule.name,
-                reason,
-            };
-        }
-        if (rule.action === 'block') {
-            return {
-                decision: 'deny',
-                ruleId: rule.id,
-                ruleName: rule.name,
-                reason,
-            };
-        }
-        if (rule.action === 'allow' && !firstAllowRule) {
-            firstAllowRule = rule;
-        }
-    }
-    if (firstAllowRule) {
-        return {
-            decision: 'allow',
-            ruleId: firstAllowRule.id,
-            ruleName: firstAllowRule.name,
-            reason: firstAllowRule.description ?? `Allowed by rule: ${firstAllowRule.name}`,
-        };
-    }
-    return { decision: 'allow' };
-}
-function replayCalls(snapshot, calls) {
-    const replaySnapshot = buildReplaySnapshot(snapshot);
-    const expressionCache = new Map();
-    const history = [];
-    const decisions = [];
-    for (const call of calls) {
-        const decision = decideReplayCall(replaySnapshot, call, history, expressionCache);
-        decisions.push(decision);
-        history.push({
-            toolName: call.tool,
-            arguments: call.arguments,
-            decision: decision.decision,
-            timestamp: new Date(call.timestamp),
-        });
-    }
-    return decisions;
-}
-function countDecisions(decisions) {
-    const counts = {
-        allow: 0,
-        deny: 0,
-        require_approval: 0,
-    };
-    for (const decision of decisions) {
-        counts[decision.decision] += 1;
-    }
-    return counts;
-}
 function buildImpactReport(logPath, oldSnapshot, newSnapshot) {
     const parsedLog = parseReplayLog(logPath);
     const oldDecisions = replayCalls(oldSnapshot, parsedLog.calls);
@@ -854,8 +532,8 @@ function resolveSources(projectDir, options) {
         if (oldType !== newType) {
             throw new Error('Explicit diff mode requires both paths to be files or both directories.');
         }
-        const oldSnapshot = loadPolicySnapshotFromFileOrDirectory(oldPath);
-        const newSnapshot = loadPolicySnapshotFromFileOrDirectory(newPath);
+        const oldSnapshot = loadPolicySnapshotFromEngine(oldPath);
+        const newSnapshot = loadPolicySnapshotFromEngine(newPath);
         return {
             oldSnapshot,
             newSnapshot,
@@ -875,7 +553,7 @@ function resolveSources(projectDir, options) {
         throw new Error('Implicit diff mode supports file input only. Use --old and --new for directories.');
     }
     const oldSnapshot = loadPolicySnapshotFromGitHead(resolvedPolicyPath, projectDir);
-    const newSnapshot = loadPolicySnapshotFromFileOrDirectory(resolvedPolicyPath);
+    const newSnapshot = loadPolicySnapshotFromEngine(resolvedPolicyPath);
     return {
         oldSnapshot,
         newSnapshot,