yenop 0.0.0 → 0.1.0

package/dist/core/ids.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../src/core/ids.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;GAIG;AACH,IAAI,MAAM,GAAG,CAAC,CAAC;AACf,IAAI,GAAG,GAAG,CAAC,CAAC;AAEZ,MAAM,UAAU,MAAM,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;IAC7C,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,CAAC;QACb,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,mDAAmD;IACnG,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5B,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACf,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,oEAAoE;IAC9F,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC;IAClB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC,CAAY,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,mBAAmB;IAC5D,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AACnG,CAAC;AAED,0HAA0H;AAC1H,MAAM,UAAU,WAAW,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;IAClD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,KAAK,GAAG,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,OAAO,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC"}

package/dist/core/index.d.ts

@@ -0,0 +1,40 @@
+import { type YenopConfig } from "./config.js";
+import type { Decision, DecisionRequest, Outcome, OutcomeReceipt, ReceiptSink, RunStateStore } from "./types.js";
+export * from "./types.js";
+export { classifyTool } from "./tools.js";
+export { loadConfig, DEFAULT_BUDGETS, type Mode, type YenopConfig, type PolicyLayer } from "./config.js";
+export { loadPolicies, checkPolicies, evaluate, toCedarValue } from "./policy.js";
+export { RECEIPT_VERSION } from "./types.js";
+export { decide } from "./engine.js";
+export { uuidv7, uuidv7Time, newTenantId } from "./ids.js";
+export { analyzeShell, matchesSecretPattern, isInternalHost, isControlPlanePath, DEFAULT_SECRET_PATTERNS, type ShellFacts } from "./shell.js";
+export { loadSchema, validateAgainstSchema } from "./policy.js";
+export { CONFIG_VERSION, resolveTenant, localTenantId } from "./config.js";
+export { STATE_VERSION, REPLAY_WINDOW_MS } from "./state.js";
+export { SqliteRunState, MemoryRunState } from "./state.js";
+export { buildReport, renderReport, type Report } from "./report.js";
+export { readTelemetry, writeTelemetry, enableTelemetry, disableTelemetry, resetInstallId, toTelemetry, sendTelemetry, dueForDaily, hookedRuntimes, DEFAULT_TELEMETRY_ENDPOINT, type TelemetryState, type TelemetryPayload } from "./telemetry.js";
+export { JsonlReceipts, NullReceipts, readReceipts, readAllReceipts, answersFor, isOutcome, summarizeCall, verifyReceipts, RECEIPT_GENESIS, type ChainCheck } from "./receipts.js";
+/** Directory of the default policy pack shipped with the package. */
+export declare function builtinPoliciesDir(): string;
+export interface Yenop {
+    config: YenopConfig;
+    /** Set when the policies could not be loaded or do not match the vocabulary. Every decision is then a deny. */
+    policyError?: string;
+    decide(req: DecisionRequest): Decision;
+    /** Record what the runtime reported about a call Yenop asked about: it ran, failed, or was refused. */
+    recordOutcome(runId: string, callId: string, tool: string, outcome: Outcome, detail?: string): OutcomeReceipt | undefined;
+    /** End a run now, because the runtime said the session ended. The next call on this id starts fresh. */
+    endRun(runId: string): void;
+    close(): void;
+}
+/** Wire the local, single-machine configuration: SQLite state, JSONL receipts, policies from disk. */
+export interface OpenOptions {
+    cwd?: string;
+    home?: string;
+    /** Dry run: same policies and config, but nothing is counted or recorded. */
+    dryRun?: boolean;
+    state?: RunStateStore;
+    receipts?: ReceiptSink;
+}
+export declare function openYenop(opts?: OpenOptions): Yenop;

package/dist/core/index.js

@@ -0,0 +1,73 @@
+import { fileURLToPath } from "node:url";
+import { dirname, join } from "node:path";
+import { loadConfig, ensureHome } from "./config.js";
+import { loadPolicies } from "./policy.js";
+import { SqliteRunState, MemoryRunState, RUN_IDLE_MS } from "./state.js";
+import { JsonlReceipts, NullReceipts } from "./receipts.js";
+import { decide, recordOutcome } from "./engine.js";
+export * from "./types.js";
+export { classifyTool } from "./tools.js";
+export { loadConfig, DEFAULT_BUDGETS } from "./config.js";
+export { loadPolicies, checkPolicies, evaluate, toCedarValue } from "./policy.js";
+export { RECEIPT_VERSION } from "./types.js";
+export { decide } from "./engine.js";
+export { uuidv7, uuidv7Time, newTenantId } from "./ids.js";
+export { analyzeShell, matchesSecretPattern, isInternalHost, isControlPlanePath, DEFAULT_SECRET_PATTERNS } from "./shell.js";
+export { loadSchema, validateAgainstSchema } from "./policy.js";
+export { CONFIG_VERSION, resolveTenant, localTenantId } from "./config.js";
+export { STATE_VERSION, REPLAY_WINDOW_MS } from "./state.js";
+export { SqliteRunState, MemoryRunState } from "./state.js";
+export { buildReport, renderReport } from "./report.js";
+export { readTelemetry, writeTelemetry, enableTelemetry, disableTelemetry, resetInstallId, toTelemetry, sendTelemetry, dueForDaily, hookedRuntimes, DEFAULT_TELEMETRY_ENDPOINT } from "./telemetry.js";
+export { JsonlReceipts, NullReceipts, readReceipts, readAllReceipts, answersFor, isOutcome, summarizeCall, verifyReceipts, RECEIPT_GENESIS } from "./receipts.js";
+/** Directory of the default policy pack shipped with the package. */
+export function builtinPoliciesDir() {
+    // dist/core/index.js -> ../../policies ; src/core/index.ts -> ../../policies
+    return join(dirname(fileURLToPath(import.meta.url)), "..", "..", "policies");
+}
+export function openYenop(opts = {}) {
+    const cfgOpts = { builtinPoliciesDir: builtinPoliciesDir() };
+    if (opts.cwd !== undefined)
+        cfgOpts.cwd = opts.cwd;
+    if (opts.home !== undefined)
+        cfgOpts.home = opts.home;
+    const config = loadConfig(cfgOpts);
+    ensureHome(config.home);
+    // A guard that cannot read its rules must not wave everything through. Load errors become a standing deny,
+    // and the instance still opens so `yenop check`, `status` and `receipts` can show a person what is wrong.
+    let policies = { permit: {}, approve: {}, origins: {}, disabled: {}, layers: [], warnings: [] };
+    let policyError;
+    try {
+        policies = loadPolicies(config.policyLayers, { disabled: config.disabledPolicies });
+    }
+    catch (e) {
+        policyError = e.message.replace(/^yenop: /, "");
+    }
+    const idleMs = config.runIdleMs ?? RUN_IDLE_MS;
+    const deps = {
+        idleMs,
+        tenant: config.tenant,
+        mode: config.mode,
+        policies,
+        ...(policyError !== undefined ? { policyError } : {}),
+        secretPatterns: config.secretPatterns,
+        sensitivePatterns: config.sensitivePatterns,
+        trustedServers: config.trustedServers,
+        sensitiveServers: config.sensitiveServers,
+        budgets: config.budgets,
+        state: opts.state ?? (opts.dryRun ? new MemoryRunState() : new SqliteRunState(config.statePath)),
+        receipts: opts.receipts ?? (opts.dryRun ? new NullReceipts() : new JsonlReceipts(config.receiptsPath)),
+    };
+    return {
+        config,
+        ...(policyError !== undefined ? { policyError } : {}),
+        decide: (req) => decide(deps, req),
+        recordOutcome: (runId, callId, tool, outcome, detail) => recordOutcome(deps, runId, callId, tool, outcome, detail),
+        endRun: (runId) => deps.state.endRun(deps.tenant.id, runId),
+        close: () => {
+            deps.state.close();
+            deps.receipts.close();
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAoB,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,aAAa,EAAmB,MAAM,aAAa,CAAC;AAGrE,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAiD,MAAM,aAAa,CAAC;AACzG,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,cAAc,EAAE,kBAAkB,EAAE,uBAAuB,EAAmB,MAAM,YAAY,CAAC;AAC9I,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAe,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,0BAA0B,EAA8C,MAAM,gBAAgB,CAAC;AACnP,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAmB,MAAM,eAAe,CAAC;AAEnL,qEAAqE;AACrE,MAAM,UAAU,kBAAkB;IAChC,6EAA6E;IAC7E,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AAC/E,CAAC;AAwBD,MAAM,UAAU,SAAS,CAAC,OAAoB,EAAE;IAC9C,MAAM,OAAO,GAAqC,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,EAAE,CAAC;IAC/F,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACnD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACtD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxB,2GAA2G;IAC3G,0GAA0G;IAC1G,IAAI,QAAQ,GAAiB,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC9G,IAAI,WAA+B,CAAC;IACpC,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,WAAW,GAAI,CAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,IAAI,WAAW,CAAC;IAC/C,MAAM,IAAI,GAAe;QACvB,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ;QACR,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChG,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;KACvG,CAAC;IACF,OAAO;QACL,MAAM;QACN,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC;QAClC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC;QAClH,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC;QAC3D,KAAK,EAAE,GAAG,EAAE;YACV,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/policy.d.ts

@@ -0,0 +1,41 @@
+import * as cedar from "@cedar-policy/cedar-wasm/nodejs";
+import type { DecisionRequest, FlowFacts, PolicyBundle, RunFacts } from "./types.js";
+import type { PolicyLayer } from "./config.js";
+import type { ShellFacts } from "./shell.js";
+/** The policy vocabulary, shipped next to the baseline policies. */
+export declare function loadSchema(baselineDir: string): string;
+/** Validate a policy set against the vocabulary. Errors are returned as readable strings. */
+export declare function validateAgainstSchema(schema: string, policies: Record<string, string>): {
+    errors: string[];
+    warnings: string[];
+};
+/**
+ * Load every layer, in order. The baseline ships with the package and is always first;
+ * customer layers add to it. Ids listed in `disabled` are skipped wherever they appear.
+ */
+export declare function loadPolicies(layers: PolicyLayer[], opts?: {
+    disabled?: string[];
+    validate?: boolean;
+}): PolicyBundle;
+/** Cedar only accepts integers as numbers; coerce anything else to a safe JSON shape. */
+export declare function toCedarValue(v: unknown, depth?: number): cedar.CedarValueJson;
+export interface EvalResult {
+    decision: "allow" | "deny";
+    reasons: string[];
+    errors: string[];
+}
+export interface EvalInput {
+    req: DecisionRequest;
+    /** What the run has done before this call, with `steps` already counting this one. */
+    run: RunFacts;
+    /** What this call does. */
+    flow: FlowFacts;
+    /** Derived facts we compute so policies stay simple. */
+    derived: Record<string, cedar.CedarValueJson>;
+    /** Parsed shell facts when the tool runs a shell command. */
+    shell?: ShellFacts;
+}
+/** Evaluate one policy set. Any evaluation error is reported; the engine fails closed on errors. */
+export declare function evaluate(input: EvalInput, policies: Record<string, string>): EvalResult;
+/** Parse-check a bundle without evaluating. Throws with a readable message on the first problem. */
+export declare function checkPolicies(bundle: PolicyBundle): void;

package/dist/core/policy.js

@@ -0,0 +1,205 @@
+import { readdirSync, readFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import * as cedar from "@cedar-policy/cedar-wasm/nodejs";
+/** The policy vocabulary, shipped next to the baseline policies. */
+export function loadSchema(baselineDir) {
+    return readFileSync(join(baselineDir, "schema.cedarschema"), "utf8");
+}
+/** Validate a policy set against the vocabulary. Errors are returned as readable strings. */
+export function validateAgainstSchema(schema, policies) {
+    if (Object.keys(policies).length === 0)
+        return { errors: [], warnings: [] };
+    const r = cedar.validate({ schema, policies: { staticPolicies: policies }, validationSettings: { mode: "strict" } });
+    if (r.type === "failure")
+        return { errors: r.errors.map((e) => e.message), warnings: [] };
+    const fmt = (v) => `${v.policyId}: ${v.error.message}${v.error.help ? ` (${v.error.help})` : ""}`;
+    // A policy that can never apply is a mistake (usually a misspelled attribute behind a `has` guard).
+    const impossible = r.validationWarnings.filter((w) => /impossible/i.test(w.error.message));
+    const rest = r.validationWarnings.filter((w) => !/impossible/i.test(w.error.message));
+    return {
+        errors: [...r.validationErrors.map(fmt), ...impossible.map((w) => `${fmt(w)} (check the attribute names against the vocabulary)`)],
+        warnings: rest.map(fmt),
+    };
+}
+/** Split a .cedar file into individual policies keyed by their @id annotation (or file:index). */
+function splitPolicies(text, origin) {
+    const parts = cedar.policySetTextToParts(text);
+    if (parts.type === "failure") {
+        const msg = parts.errors.map((e) => e.message).join("; ");
+        throw new Error(`yenop: cannot parse ${origin}: ${msg}`);
+    }
+    const out = {};
+    parts.policies.forEach((p, i) => {
+        let id = `${origin}#${i}`;
+        const json = cedar.policyToJson(p);
+        if (json.type === "success") {
+            const ann = json.json.annotations;
+            if (ann && typeof ann["id"] === "string" && ann["id"].length > 0)
+                id = ann["id"];
+        }
+        if (out[id])
+            throw new Error(`yenop: duplicate policy id "${id}" in ${origin}`);
+        out[id] = p;
+    });
+    return out;
+}
+/** Structural equality: formatting and comments do not count. */
+function samePolicy(a, b) {
+    const ja = cedar.policyToJson(a);
+    const jb = cedar.policyToJson(b);
+    if (ja.type !== "success" || jb.type !== "success")
+        return a === b;
+    return JSON.stringify(ja.json) === JSON.stringify(jb.json);
+}
+function loadDir(layer, bundle, which, disabled) {
+    const sub = join(layer.dir, which);
+    if (!existsSync(sub))
+        return 0;
+    let count = 0;
+    for (const f of readdirSync(sub).filter((n) => n.endsWith(".cedar")).sort()) {
+        const path = join(sub, f);
+        const policies = splitPolicies(readFileSync(path, "utf8"), `${which}/${f}`);
+        for (const [id, text] of Object.entries(policies)) {
+            const origin = `${layer.name}:${path}`;
+            if (disabled.has(id)) {
+                bundle.disabled[id] = origin;
+                continue;
+            }
+            const existing = bundle[which][id];
+            if (existing !== undefined) {
+                // A copy of a policy already loaded (typically an old init that copied the baseline) is harmless.
+                if (samePolicy(existing, text))
+                    continue;
+                throw new Error(`yenop: policy id "${id}" is defined in ${bundle.origins[id]} and again, differently, in ${origin}. ` +
+                    `Give the new one its own @id, or switch the first one off with "disabledPolicies": ["${id}"] in config.json.`);
+            }
+            bundle[which][id] = text;
+            bundle.origins[id] = origin;
+            count++;
+        }
+    }
+    return count;
+}
+/**
+ * Load every layer, in order. The baseline ships with the package and is always first;
+ * customer layers add to it. Ids listed in `disabled` are skipped wherever they appear.
+ */
+export function loadPolicies(layers, opts = {}) {
+    const disabled = new Set(opts.disabled ?? []);
+    const bundle = { permit: {}, approve: {}, origins: {}, disabled: {}, layers: [], warnings: [] };
+    for (const layer of layers) {
+        const permit = loadDir(layer, bundle, "permit", disabled);
+        const approve = loadDir(layer, bundle, "approve", disabled);
+        bundle.layers.push({ name: layer.name, dir: layer.dir, permit, approve });
+    }
+    if (opts.validate !== false) {
+        const baseline = layers.find((l) => l.name === "baseline");
+        if (baseline) {
+            const schema = loadSchema(baseline.dir);
+            for (const which of ["permit", "approve"]) {
+                const { errors, warnings } = validateAgainstSchema(schema, bundle[which]);
+                if (errors.length) {
+                    const where = errors.map((e) => `  ${e}  [${bundle.origins[e.split(":")[0] ?? ""] ?? which}]`).join("\n");
+                    throw new Error(`yenop: ${which} policies do not match the policy vocabulary (policies/schema.cedarschema):\n${where}`);
+                }
+                bundle.warnings.push(...warnings);
+            }
+        }
+    }
+    return bundle;
+}
+/** Cedar only accepts integers as numbers; coerce anything else to a safe JSON shape. */
+export function toCedarValue(v, depth = 0) {
+    if (depth > 8)
+        return "[nested]";
+    if (v === null || v === undefined)
+        return null;
+    if (typeof v === "string" || typeof v === "boolean")
+        return v;
+    if (typeof v === "number")
+        return Number.isInteger(v) ? v : String(v);
+    if (typeof v === "bigint")
+        return String(v);
+    if (Array.isArray(v))
+        return v.map((x) => toCedarValue(x, depth + 1));
+    if (typeof v === "object") {
+        const out = {};
+        for (const [k, x] of Object.entries(v))
+            out[k] = toCedarValue(x, depth + 1);
+        return out;
+    }
+    return String(v);
+}
+/** Every argument as a string tag on the Call entity, for policies on tools with untyped arguments. */
+function argTags(args) {
+    const out = {};
+    for (const [k, v] of Object.entries(args)) {
+        if (!/^[A-Za-z_][A-Za-z0-9_-]*$/.test(k))
+            continue;
+        const s = typeof v === "string" ? v : JSON.stringify(v) ?? "";
+        out[k] = s.length > 4000 ? s.slice(0, 4000) : s;
+    }
+    return out;
+}
+function buildCall(input, policies) {
+    const { req } = input;
+    const principal = { type: "Yenop::Agent", id: `${req.principal.runtime}/${req.principal.agent}` };
+    const action = { type: "Yenop::Action", id: "call" };
+    const resource = { type: "Yenop::Tool", id: req.tool.name };
+    const call = { type: "Yenop::Call", id: req.callId ?? "call" };
+    const toolAttrs = {
+        name: req.tool.name,
+        kind: req.tool.kind,
+        readOnly: req.tool.readOnly,
+    };
+    if (req.tool.server)
+        toolAttrs["server"] = req.tool.server;
+    const context = {
+        args: toCedarValue(req.args),
+        call: { __entity: call },
+        run: { ...input.run },
+        flow: { ...input.flow },
+        cwd: req.cwd ?? "",
+        permissionMode: req.permissionMode ?? "",
+        derived: input.derived,
+    };
+    if (input.shell)
+        context["shell"] = { ...input.shell };
+    return {
+        principal,
+        action,
+        resource,
+        context,
+        policies: { staticPolicies: policies },
+        entities: [
+            { uid: principal, attrs: { runtime: req.principal.runtime, agent: req.principal.agent, user: req.principal.user }, parents: [] },
+            { uid: action, attrs: {}, parents: [] },
+            { uid: resource, attrs: toolAttrs, parents: [] },
+            { uid: call, attrs: {}, parents: [], tags: argTags(req.args) },
+        ],
+    };
+}
+/** Evaluate one policy set. Any evaluation error is reported; the engine fails closed on errors. */
+export function evaluate(input, policies) {
+    if (Object.keys(policies).length === 0)
+        return { decision: "deny", reasons: [], errors: [] };
+    const answer = cedar.isAuthorized(buildCall(input, policies));
+    if (answer.type === "failure") {
+        return { decision: "deny", reasons: [], errors: answer.errors.map((e) => e.message) };
+    }
+    const { decision, diagnostics } = answer.response;
+    return {
+        decision,
+        reasons: diagnostics.reason,
+        errors: diagnostics.errors.map((e) => `${e.policyId}: ${e.error.message}`),
+    };
+}
+/** Parse-check a bundle without evaluating. Throws with a readable message on the first problem. */
+export function checkPolicies(bundle) {
+    for (const which of ["permit", "approve"]) {
+        const r = cedar.checkParsePolicySet({ staticPolicies: bundle[which] });
+        if (r.type === "failure")
+            throw new Error(`yenop: ${which} policies do not parse: ${r.errors.map((e) => e.message).join("; ")}`);
+    }
+}
+//# sourceMappingURL=policy.js.map

package/dist/core/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/core/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,KAAK,KAAK,MAAM,iCAAiC,CAAC;AAKzD,oEAAoE;AACpE,MAAM,UAAU,UAAU,CAAC,WAAmB;IAC5C,OAAO,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;AACvE,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,QAAgC;IACpF,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC5E,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACrH,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1F,MAAM,GAAG,GAAG,CAAC,CAAwB,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACzH,oGAAoG;IACpG,MAAM,UAAU,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACtF,OAAO;QACL,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC;QAClI,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;KACxB,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,SAAS,aAAa,CAAC,IAAY,EAAE,MAAc;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC9B,IAAI,EAAE,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAiD,CAAC;YACxE,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,EAAE,QAAQ,MAAM,EAAE,CAAC,CAAC;QAChF,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iEAAiE;AACjE,SAAS,UAAU,CAAC,CAAS,EAAE,CAAS;IACtC,MAAM,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,OAAO,CAAC,KAAkB,EAAE,MAAoB,EAAE,KAA2B,EAAE,QAAqB;IAC3G,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1B,MAAM,QAAQ,GAAG,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5E,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;YACvC,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACnC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,kGAAkG;gBAClG,IAAI,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC;oBAAE,SAAS;gBACzC,MAAM,IAAI,KAAK,CACb,qBAAqB,EAAE,mBAAmB,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,+BAA+B,MAAM,IAAI;oBACnG,wFAAwF,EAAE,oBAAoB,CACjH,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;YACzB,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;YAC5B,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAqB,EAAE,OAAoD,EAAE;IACxG,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAiB,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC9G,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;QAC3D,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACxC,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;gBACnD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC1E,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC1G,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,gFAAgF,KAAK,EAAE,CAAC,CAAC;gBAC1H,CAAC;gBACD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,YAAY,CAAC,CAAU,EAAE,KAAK,GAAG,CAAC;IAChD,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IACjC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAyC,EAAE,CAAC;QACrD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACvG,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAoBD,uGAAuG;AACvG,SAAS,OAAO,CAAC,IAA6B;IAC5C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,SAAS;QACnD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9D,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,KAAgB,EAAE,QAAgC;IACnE,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IACtB,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;IAClG,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;IACrD,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;IAC/D,MAAM,SAAS,GAAyC;QACtD,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;QACnB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;QACnB,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ;KAC5B,CAAC;IACF,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM;QAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;IAC3D,MAAM,OAAO,GAAyC;QACpD,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;QAC5B,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;QACxB,GAAG,EAAE,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE;QACrB,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;QACvB,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE;QAClB,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,EAAE;QACxC,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;IACF,IAAI,KAAK,CAAC,KAAK;QAAE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IACvD,OAAO;QACL,SAAS;QACT,MAAM;QACN,QAAQ;QACR,OAAO;QACP,QAAQ,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE;QACtC,QAAQ,EAAE;YACR,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YAChI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YACvC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE;YAChD,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;SAC/D;KACF,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,QAAQ,CAAC,KAAgB,EAAE,QAAgC;IACzE,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC7F,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IAClD,OAAO;QACL,QAAQ;QACR,OAAO,EAAE,WAAW,CAAC,MAAM;QAC3B,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,aAAa,CAAC,MAAoB;IAChD,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAU,EAAE,CAAC;QACnD,MAAM,CAAC,GAAG,KAAK,CAAC,mBAAmB,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,2BAA2B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnI,CAAC;AACH,CAAC"}

package/dist/core/receipts.d.ts

@@ -0,0 +1,47 @@
+import type { OutcomeReceipt, Receipt, ReceiptSink } from "./types.js";
+/** One short line describing a call: the command, path, URL or query. */
+export declare function summarizeCall(args: unknown, max?: number): string;
+/** Trim long strings so a receipt never balloons; structure is preserved. */
+export declare function trimForReceipt(v: unknown, depth?: number): unknown;
+/** Append-only JSON Lines file. One line per decision, written synchronously so a crash never loses it. */
+/** The chain's anchor: the "hash before the first line". A fixed, public constant. */
+export declare const RECEIPT_GENESIS = "yenop-receipts-v1";
+/**
+ * Appends receipts as a hash chain: each line carries `prev`, the SHA-256 of the previous line's exact bytes.
+ * Editing, deleting or reordering any line makes the next line's `prev` wrong, so tampering is detectable with
+ * `verifyReceipts`. The hash is over the literal line, so there is no canonical-form step to get wrong. This is
+ * local tamper-evidence, not a signature: it catches changes to the recorded history, and truncation of the
+ * tail is caught by anchoring the head elsewhere (the control plane, later). Documented as such.
+ */
+export declare class JsonlReceipts implements ReceiptSink {
+    private path;
+    private prevHash;
+    constructor(path: string);
+    append(receipt: Receipt | OutcomeReceipt): void;
+    close(): void;
+}
+export interface ChainCheck {
+    ok: boolean;
+    lines: number;
+    /** 1-based line number where the chain first breaks, if any. */
+    brokenAt?: number;
+    reason?: string;
+}
+/** Walk the receipts file and confirm every line's `prev` matches the hash of the line before it. */
+export declare function verifyReceipts(path: string): ChainCheck;
+/** Every line of the receipts file: decisions and outcomes, oldest first. */
+export declare function readAllReceipts(path: string): (Receipt | OutcomeReceipt)[];
+export declare function isOutcome(r: Receipt | OutcomeReceipt): r is OutcomeReceipt;
+/** Decisions only, the last `last` of them. */
+export declare function readReceipts(path: string, last?: number): Receipt[];
+export type Answer = "approved, ran" | "approved, failed" | "refused by the permission system" | "not run: rejected or abandoned" | "awaiting an answer";
+/**
+ * What became of each ask. The runtime reports when a call ran or was refused by its own permission system;
+ * a person clicking Deny produces no event, so an ask that is followed by later steps with no run recorded was rejected or abandoned.
+ */
+export declare function answersFor(all: (Receipt | OutcomeReceipt)[]): Map<string, Answer>;
+/** Discards receipts. Only for dry runs that must leave no trace. */
+export declare class NullReceipts implements ReceiptSink {
+    append(): void;
+    close(): void;
+}

package/dist/core/receipts.js

@@ -0,0 +1,137 @@
+import { appendFileSync, mkdirSync, existsSync, readFileSync } from "node:fs";
+import { createHash } from "node:crypto";
+import { dirname } from "node:path";
+/** One short line describing a call: the command, path, URL or query. */
+export function summarizeCall(args, max = 80) {
+    if (!args || typeof args !== "object")
+        return "";
+    const a = args;
+    const key = ["command", "file_path", "path", "notebook_path", "url", "query", "pattern"].find((k) => typeof a[k] === "string");
+    const v = (key ? String(a[key]) : JSON.stringify(a)).replace(/\s+/g, " ").trim();
+    return v.length > max ? v.slice(0, max - 3) + "..." : v;
+}
+const MAX_STRING = 4000;
+/** Trim long strings so a receipt never balloons; structure is preserved. */
+export function trimForReceipt(v, depth = 0) {
+    if (depth > 8)
+        return "[nested]";
+    if (typeof v === "string")
+        return v.length > MAX_STRING ? v.slice(0, MAX_STRING) + `…[${v.length - MAX_STRING} more]` : v;
+    if (Array.isArray(v))
+        return v.slice(0, 200).map((x) => trimForReceipt(x, depth + 1));
+    if (v && typeof v === "object") {
+        const out = {};
+        for (const [k, x] of Object.entries(v))
+            out[k] = trimForReceipt(x, depth + 1);
+        return out;
+    }
+    return v;
+}
+/** Append-only JSON Lines file. One line per decision, written synchronously so a crash never loses it. */
+/** The chain's anchor: the "hash before the first line". A fixed, public constant. */
+export const RECEIPT_GENESIS = "yenop-receipts-v1";
+function sha256(s) {
+    return createHash("sha256").update(s, "utf8").digest("hex");
+}
+/**
+ * Appends receipts as a hash chain: each line carries `prev`, the SHA-256 of the previous line's exact bytes.
+ * Editing, deleting or reordering any line makes the next line's `prev` wrong, so tampering is detectable with
+ * `verifyReceipts`. The hash is over the literal line, so there is no canonical-form step to get wrong. This is
+ * local tamper-evidence, not a signature: it catches changes to the recorded history, and truncation of the
+ * tail is caught by anchoring the head elsewhere (the control plane, later). Documented as such.
+ */
+export class JsonlReceipts {
+    path;
+    prevHash;
+    constructor(path) {
+        this.path = path;
+        const dir = dirname(path);
+        if (!existsSync(dir))
+            mkdirSync(dir, { recursive: true });
+        this.prevHash = lastLineHash(path);
+    }
+    append(receipt) {
+        const line = JSON.stringify({ ...receipt, prev: this.prevHash });
+        appendFileSync(this.path, line + "\n", "utf8");
+        this.prevHash = sha256(line);
+    }
+    close() { }
+}
+/** The chain hash to continue from: SHA-256 of the last line, or the genesis anchor for an empty/new file. */
+function lastLineHash(path) {
+    if (!existsSync(path))
+        return RECEIPT_GENESIS;
+    const lines = readFileSync(path, "utf8").split("\n").filter((l) => l.length > 0);
+    const last = lines[lines.length - 1];
+    return last ? sha256(last) : RECEIPT_GENESIS;
+}
+/** Walk the receipts file and confirm every line's `prev` matches the hash of the line before it. */
+export function verifyReceipts(path) {
+    if (!existsSync(path))
+        return { ok: true, lines: 0 };
+    const lines = readFileSync(path, "utf8").split("\n").filter((l) => l.length > 0);
+    let expected = RECEIPT_GENESIS;
+    for (let i = 0; i < lines.length; i++) {
+        const text = lines[i];
+        let parsed;
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            return { ok: false, lines: lines.length, brokenAt: i + 1, reason: "line is not valid JSON" };
+        }
+        const prev = parsed.prev ?? RECEIPT_GENESIS; // older unchained lines read as genesis-anchored
+        if (prev !== expected) {
+            return { ok: false, lines: lines.length, brokenAt: i + 1, reason: `prev hash does not match the line before it (a line was edited, removed, or reordered)` };
+        }
+        expected = sha256(text);
+    }
+    return { ok: true, lines: lines.length };
+}
+/** Every line of the receipts file: decisions and outcomes, oldest first. */
+export function readAllReceipts(path) {
+    if (!existsSync(path))
+        return [];
+    return readFileSync(path, "utf8")
+        .split("\n")
+        .filter((l) => l.length > 0)
+        .map((l) => JSON.parse(l));
+}
+export function isOutcome(r) {
+    return r.kind === "outcome";
+}
+/** Decisions only, the last `last` of them. */
+export function readReceipts(path, last = 20) {
+    return readAllReceipts(path).filter((r) => !isOutcome(r)).slice(-last);
+}
+/**
+ * What became of each ask. The runtime reports when a call ran or was refused by its own permission system;
+ * a person clicking Deny produces no event, so an ask that is followed by later steps with no run recorded was rejected or abandoned.
+ */
+export function answersFor(all) {
+    const outcomes = new Map();
+    for (const r of all)
+        if (isOutcome(r))
+            outcomes.set(r.decisionId, r);
+    const decisions = all.filter((r) => !isOutcome(r));
+    const lastStep = new Map();
+    for (const d of decisions)
+        lastStep.set(d.runId, Math.max(lastStep.get(d.runId) ?? 0, d.steps));
+    const out = new Map();
+    for (const d of decisions) {
+        if (d.effect !== "ask" || d.mode === "observe")
+            continue;
+        const o = outcomes.get(d.id);
+        if (o)
+            out.set(d.id, o.outcome === "ran" ? "approved, ran" : o.outcome === "failed" ? "approved, failed" : "refused by the permission system");
+        else
+            out.set(d.id, (lastStep.get(d.runId) ?? 0) > d.steps ? "not run: rejected or abandoned" : "awaiting an answer");
+    }
+    return out;
+}
+/** Discards receipts. Only for dry runs that must leave no trace. */
+export class NullReceipts {
+    append() { }
+    close() { }
+}
+//# sourceMappingURL=receipts.js.map

package/dist/core/receipts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts.js","sourceRoot":"","sources":["../../src/core/receipts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,IAAa,EAAE,GAAG,GAAG,EAAE;IACnD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC/H,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,CAAC;AAExB,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,CAAU,EAAE,KAAK,GAAG,CAAC;IAClD,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IACjC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,GAAG,UAAU,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1H,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACzG,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,2GAA2G;AAC3G,sFAAsF;AACtF,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAEnD,SAAS,MAAM,CAAC,CAAS;IACvB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IAEJ;IADZ,QAAQ,CAAS;IACzB,YAAoB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;QAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,CAAC,OAAiC;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjE,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,KAAK,KAAU,CAAC;CACjB;AAED,8GAA8G;AAC9G,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,eAAe,CAAC;IAC9C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;AAC/C,CAAC;AAUD,qGAAqG;AACrG,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjF,IAAI,QAAQ,GAAG,eAAe,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,MAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QAC/F,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,eAAe,CAAC,CAAC,iDAAiD;QAC9F,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,wFAAwF,EAAE,CAAC;QAC/J,CAAC;QACD,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC;SAC9B,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAA6B,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAA2B;IACnD,OAAQ,CAAoB,CAAC,IAAI,KAAK,SAAS,CAAC;AAClD,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,IAAI,GAAG,EAAE;IAClD,OAAQ,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAe,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;AACxF,CAAC;AAID;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAiC;IAC1D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,IAAI,SAAS,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAc,CAAC;IAChE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS;QACzD,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC;;YAC1I,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;IACvH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qEAAqE;AACrE,MAAM,OAAO,YAAY;IACvB,MAAM,KAAU,CAAC;IACjB,KAAK,KAAU,CAAC;CACjB"}

package/dist/core/report.d.ts

@@ -0,0 +1,51 @@
+/**
+ * `yenop report`: what your agents did, in aggregate, from the receipts on this machine.
+ *
+ * Two audiences. A developer reads it after a week in observe mode to see what would have been stopped, and
+ * whether the asks were the right asks. And, with the person's explicit consent, the same numbers with every
+ * piece of content removed are what Yenop's telemetry sends. The report is built once; telemetry is the
+ * report minus everything that could identify a project, a file, a command, or a person.
+ *
+ * The number that matters most is the ASK calibration: of the calls Yenop held for a person, how many did the
+ * person then allow? Near 100 % means the baseline asks too often (fatigue); near 0 % means the asks were
+ * real. That ratio, per rule, is how the baseline gets tuned by evidence instead of opinion.
+ */
+import type { YenopConfig } from "./config.js";
+import { type Answer } from "./receipts.js";
+export interface Report {
+    /** ISO timestamps bounding the period, and the number of days requested. */
+    from: string;
+    to: string;
+    days: number;
+    /** Which tenant's receipts, or "all". Never sent in telemetry. */
+    scope: string;
+    runs: number;
+    actions: number;
+    allow: number;
+    ask: number;
+    deny: number;
+    /** What became of the asks. */
+    askOutcomes: Record<Answer, number>;
+    /** Of asks that got an answer, the share the person allowed. undefined when no ask was answered. */
+    askApprovalRate?: number;
+    /** Approval rule id -> {asked, allowed, refused}; the calibration table. */
+    askByRule: Record<string, {
+        asked: number;
+        allowed: number;
+        refused: number;
+    }>;
+    /** Deny rule id -> count. */
+    denyByRule: Record<string, number>;
+    /** Runtime -> action count (claude-code, cursor, codex, mcp, ...). */
+    byRuntime: Record<string, number>;
+    /** Tool kind -> action count (shell, write, read, mcp, web, unknown). */
+    byToolKind: Record<string, number>;
+    /** Observe-mode share of actions: how much of this was recorded without being enforced. */
+    observedOnly: number;
+}
+export declare function buildReport(config: YenopConfig, opts?: {
+    days?: number;
+    all?: boolean;
+}): Report;
+/** The report as a person reads it. */
+export declare function renderReport(r: Report): string;