@agent-beam/beam 0.2.38 → 0.2.40

package/dist/agents.js

@@ -1,188 +1,34 @@
+import { HOOK_CATALOG, hookKind } from "./hook-catalog.js";
+import { mergeHookSpec, unmergeHookSpec } from "./hook-config.js";
 import { join } from "node:path";
-function obj(v) { return v && typeof v === "object" && !Array.isArray(v) ? v : {}; }
-function arr(v) { return Array.isArray(v) ? v : []; }
-// Claude Code, Codex, Cursor, and Gemini CLI all install into a `hooks.<Event>` array of
-// `{ matcher, hooks: [{ type: "command", command }] }` entries (Claude Code's own shape, which
-// Gemini CLI's settings.json also uses verbatim per geminicli.com/docs/hooks/reference).
-// A handful of events -- UserPromptSubmit (Claude/Codex) and BeforeAgent (Gemini) among them --
-// have no matcher concept at all (they always fire); the docs' own examples omit the field there
-// entirely rather than sending an empty string, so this does the same to avoid relying on an
-// "ignored" field being tolerated rather than rejected.
-const CLAUDE_STYLE_EVENTS_WITHOUT_MATCHER = new Set(["UserPromptSubmit", "BeforeAgent"]);
-function mergeClaudeStyleHooks(event) {
-    const supportsMatcher = !CLAUDE_STYLE_EVENTS_WITHOUT_MATCHER.has(event);
-    return (existing, command) => {
-        const hooks = obj(existing.hooks);
-        const list = arr(hooks[event]).map(obj);
-        const alreadyInstalled = list.some(entry => arr(entry.hooks).map(obj).some(h => h.command === command));
-        if (!alreadyInstalled)
-            list.push({ ...(supportsMatcher ? { matcher: "" } : {}), hooks: [{ type: "command", command }] });
-        return { ...existing, hooks: { ...hooks, [event]: list } };
-    };
-}
-// Cursor's own hooks.json instead nests `{ command, matcher }` directly under the event array.
-function mergeCursorHooks(event) {
-    return (existing, command) => {
-        const hooks = obj(existing.hooks);
-        const list = arr(hooks[event]).map(obj);
-        if (!list.some(entry => entry.command === command))
-            list.push({ command, matcher: ".*" });
-        return { version: existing.version ?? 1, ...existing, hooks: { ...hooks, [event]: list } };
-    };
-}
-// Copilot CLI's dedicated hook file uses `{ type: "command", bash, timeoutSec }` entries.
-function mergeCopilotHooks(event) {
-    return (existing, command) => {
-        const hooks = obj(existing.hooks);
-        const list = arr(hooks[event]).map(obj);
-        if (!list.some(entry => entry.bash === command))
-            list.push({ type: "command", bash: command, timeoutSec: 30 });
-        return { version: existing.version ?? 1, ...existing, hooks: { ...hooks, [event]: list } };
-    };
-}
-// Reverse of mergeClaudeStyleHooks: drops beam's command out of each entry's inner hooks array
-// (rather than the whole entry), so a user-added hook sharing the same matcher is left alone.
-function unmergeClaudeStyleHooks(event) {
-    return (existing, isOwnCommand) => {
-        const hooks = obj(existing.hooks);
-        if (!(event in hooks))
-            return existing;
-        const list = arr(hooks[event]).map(obj)
-            .map(entry => ({ ...entry, hooks: arr(entry.hooks).map(obj).filter(h => !isOwnCommand(String(h.command ?? ""))) }))
-            .filter(entry => arr(entry.hooks).length > 0);
-        return { ...existing, hooks: { ...hooks, [event]: list } };
-    };
-}
-// Reverse of mergeCursorHooks.
-function unmergeCursorHooks(event) {
-    return (existing, isOwnCommand) => {
-        const hooks = obj(existing.hooks);
-        if (!(event in hooks))
-            return existing;
-        const list = arr(hooks[event]).map(obj).filter(entry => !isOwnCommand(String(entry.command ?? "")));
-        return { ...existing, hooks: { ...hooks, [event]: list } };
-    };
-}
-// Reverse of mergeCopilotHooks.
-function unmergeCopilotHooks(event) {
-    return (existing, isOwnCommand) => {
-        const hooks = obj(existing.hooks);
-        if (!(event in hooks))
-            return existing;
-        const list = arr(hooks[event]).map(obj).filter(entry => !isOwnCommand(String(entry.bash ?? "")));
-        return { ...existing, hooks: { ...hooks, [event]: list } };
-    };
-}
-// Installs beam into more than one hook event (e.g. the tool-call gate *and* the prompt-submit
-// gate) by folding each single-event merger over the config in turn. A disabled agent only ever
-// reliably stops at the pre-action gate if that agent never calls a tool in a turn (pure chat) --
-// registering the prompt-submit event too means a disabled agent's policy.disabledAgents block
-// (see policy.ts's evaluate()) fires before the prompt is even processed, not just before a tool
-// call that may never come.
-function mergeAll(mergers) {
-    return (existing, command) => mergers.reduce((acc, merge) => merge(acc, command), existing);
-}
-function unmergeAll(unmergers) {
-    return (existing, isOwnCommand) => unmergers.reduce((acc, unmerge) => unmerge(acc, isOwnCommand), existing);
-}
-export const AGENTS = [
-    {
-        id: "claude-code", name: "Claude Code",
-        configs: [".claude/settings.json"], artifacts: [".claude/projects"],
-        hookConfigPath: ".claude/settings.json", hookEventName: "PreToolUse",
-        mergeHookConfig: mergeAll([mergeClaudeStyleHooks("PreToolUse"), mergeClaudeStyleHooks("UserPromptSubmit")]),
-        unmergeHookConfig: unmergeAll([unmergeClaudeStyleHooks("PreToolUse"), unmergeClaudeStyleHooks("UserPromptSubmit")]),
-        adapter: "passthrough", verifiedPayload: true,
-        notes: "Payload verified against code.claude.com/docs/en/hooks. Also installs UserPromptSubmit (same hookSpecificOutput.permissionDecision contract, just hookEventName: \"UserPromptSubmit\") so a disabled agent is stopped before the prompt is processed, not only at its first tool call."
-    },
-    {
-        id: "codex", name: "Codex",
-        configs: [".codex/config.toml"], artifacts: [".codex/sessions", ".codex/archived_sessions"],
-        hookConfigPath: ".codex/hooks.json", hookEventName: "PreToolUse",
-        mergeHookConfig: mergeAll([mergeClaudeStyleHooks("PreToolUse"), mergeClaudeStyleHooks("UserPromptSubmit")]),
-        unmergeHookConfig: unmergeAll([unmergeClaudeStyleHooks("PreToolUse"), unmergeClaudeStyleHooks("UserPromptSubmit")]),
-        adapter: "passthrough", verifiedPayload: true,
-        notes: "Same hooks.json shape and stdin payload fields as Claude Code (session_id, cwd, hook_event_name, tool_name, tool_input, tool_use_id). Also installs UserPromptSubmit for the same disabled-agent-at-prompt-time reason."
-    },
-    {
-        id: "cursor", name: "Cursor",
-        // ".cursor/hooks.json" is the file beam itself writes on install, so it can never be used to
-        // detect a pre-existing Cursor install (circular). The bare ".cursor" directory is what
-        // Cursor itself creates just from being used, so it's a real presence signal.
-        configs: [".cursor"], artifacts: [".cursor/projects"],
-        hookConfigPath: ".cursor/hooks.json", hookEventName: "preToolUse",
-        mergeHookConfig: mergeAll([mergeCursorHooks("preToolUse"), mergeCursorHooks("beforeSubmitPrompt")]),
-        unmergeHookConfig: unmergeAll([unmergeCursorHooks("preToolUse"), unmergeCursorHooks("beforeSubmitPrompt")]),
-        adapter: "passthrough", verifiedPayload: true,
-        notes: "Payload verified against cursor.com/docs/hooks; extra fields (model, conversation_id, ...) are ignored, not misread. Also installs beforeSubmitPrompt -- unlike preToolUse's permission field, that event's block contract is {continue: false, user_message} (see client.ts emitDeny)."
-    },
-    {
-        id: "copilot-cli", name: "GitHub Copilot CLI",
-        // Same circularity as Cursor above: ".copilot/hooks/beam.json" is our own output.
-        // ".copilot/config.json" is what the real Copilot CLI writes on its own first run.
-        configs: [".copilot/config.json"], artifacts: [".copilot/session-state"],
-        hookConfigPath: ".copilot/hooks/beam.json", hookEventName: "preToolUse",
-        mergeHookConfig: mergeAll([mergeCopilotHooks("preToolUse"), mergeCopilotHooks("userPromptSubmitted")]),
-        unmergeHookConfig: unmergeAll([unmergeCopilotHooks("preToolUse"), unmergeCopilotHooks("userPromptSubmitted")]),
-        adapter: "copilot-camel", verifiedPayload: true,
-        notes: "Payload verified against docs.github.com Copilot hooks reference (camelCase: sessionId, cwd, toolName, toolArgs). userPromptSubmitted is also installed for observation/audit only -- GitHub's docs state its stdout is ignored (no blocking contract), so a disabled agent is only actually stopped at its first preToolUse call."
-    },
-    {
-        id: "gemini", name: "Gemini CLI",
-        // ".gemini/settings.json" is our own write target (circular, like Cursor/Copilot above); the
-        // bare ".gemini" directory (created by any use of the Gemini CLI, e.g. mcp_config.json,
-        // projects/) is the reliable presence signal instead.
-        configs: [".gemini"], artifacts: [".gemini/tmp"],
-        hookConfigPath: ".gemini/settings.json", hookEventName: "BeforeTool",
-        // BeforeTool/BeforeAgent use the exact same {matcher, hooks: [{type, command}]} array shape
-        // as Claude Code's PreToolUse/UserPromptSubmit (geminicli.com/docs/hooks/reference) --
-        // beam previously targeted ".agents/hooks.json" with a "pre_tool_execution" event and a
-        // "beam-security" wrapper, which is actually the unrelated Gemini API "Managed Agents"
-        // sandbox hook contract (ai.google.dev/gemini-api/docs/agent-hooks), not Gemini CLI's own.
-        mergeHookConfig: mergeAll([mergeClaudeStyleHooks("BeforeTool"), mergeClaudeStyleHooks("BeforeAgent")]),
-        unmergeHookConfig: unmergeAll([unmergeClaudeStyleHooks("BeforeTool"), unmergeClaudeStyleHooks("BeforeAgent")]),
-        adapter: "gemini", verifiedPayload: true,
-        notes: "Payload verified against geminicli.com/docs/hooks/reference: stdin is flat (session_id, cwd, hook_event_name, tool_name, tool_input, prompt), not the nested tool_call shape the \"gemini\" adapter also tolerates as a defensive fallback. Also installs BeforeAgent so a disabled agent is stopped before the prompt reaches the model, not only at its first tool call; both events accept {decision: \"deny\", reason} and both also honor exit code 2 (see client.ts's EXIT_2_FAILS_CLOSED)."
-    },
-    {
-        id: "opencode", name: "OpenCode",
-        configs: [".config/opencode/opencode.json", ".config/opencode/opencode.jsonc"], artifacts: [".local/share/opencode"],
-        hookConfigPath: null, pluginPath: ".opencode/plugins/beam.ts", hookEventName: "tool.execute.before",
-        mergeHookConfig: null, unmergeHookConfig: null, adapter: "passthrough", verifiedPayload: true,
-        notes: "Uses OpenCode's native tool.execute.before plugin hook."
-    },
-    {
-        id: "hermes", name: "Hermes Agent",
-        configs: [".hermes"], artifacts: [],
-        hookConfigPath: ".hermes/config.yaml", hookEventName: "pre_tool_call",
-        mergeHookConfig: null, unmergeHookConfig: null, customInstall: true,
-        adapter: "pre-tool-alias", verifiedPayload: true,
-        notes: "Installs a shell hook under hooks.pre_tool_call in ~/.hermes/config.yaml (default profile), between beam:begin/beam:end comments. Stdin fields (hook_event_name, tool_name, tool_input, session_id, cwd) and the block contract ({decision: \"block\", reason} or exit 2) verified against hermes-agent.nousresearch.com/docs/user-guide/features/hooks; tool_input shapes per Hermes tool are not. Hermes asks you to approve the hook on first use, and a hook that errors or times out fails open unless fail_closed is set."
-    },
-    {
-        id: "openclaw", name: "OpenClaw",
-        configs: [".openclaw"], artifacts: [],
-        hookConfigPath: null, hookEventName: "before_tool_call",
-        mergeHookConfig: null, unmergeHookConfig: null, customInstall: true,
-        adapter: "pre-tool-alias", verifiedPayload: false,
-        notes: "OpenClaw has no hook config file: beam writes a small plugin that registers api.on(\"before_tool_call\") and links it with 'openclaw plugins install --link' and 'openclaw plugins enable'. Registration and the { block, blockReason } return follow docs.openclaw.ai/plugins/hooks and published plugins, but the event field names are not printed in a reference, so the plugin reads them defensively; treat enforcement as unverified until you see a real event."
-    },
-    {
-        id: "jev", name: "Jev (TypeSafe AI)",
-        // TypeSafe's own Jev tooling and at least half a dozen independent third-party CLIs
-        // (jev-cli, jev-axi, jev-guard, ...) each pick their own config layout, so unlike the
-        // agents above there's no single vendor-documented directory or hook contract to target.
-        // These are the paths seen across that ecosystem as of Sept 2026; treat as best-effort.
-        configs: [".config/jev", ".config/jev-axi", ".jev"], artifacts: [".config/jev-axi/stats"],
-        hookConfigPath: null, hookEventName: null,
-        mergeHookConfig: null, unmergeHookConfig: null,
-        adapter: "generic", verifiedPayload: false, unverifiedEcosystem: true,
-        notes: "Jev is TypeSafe AI's non-generative 'System One' judgment model (launched 2026-09-15), " +
-            "increasingly wired into other agents' tool-call gating (e.g. jev-guard) rather than run as " +
-            "a coding agent itself. No single vendor hook contract exists yet across the many third-party " +
-            "CLIs wrapping it, so this entry is discovery-only (config/artifact presence), not installable."
-    },
-];
+export const AGENTS = HOOK_CATALOG.map(spec => ({
+    id: spec.id, name: spec.name, configs: spec.id === "copilot-cli" ? [".copilot/config.json"] : [spec.detect], artifacts: { "claude-code": [".claude/projects"], codex: [".codex/sessions", ".codex/archived_sessions"], cursor: [".cursor/projects"], "copilot-cli": [".copilot/session-state"], gemini: [".gemini/tmp"], opencode: [".local/share/opencode"] }[spec.id] ?? [],
+    hookConfigPath: spec.format === "plugin" ? null : spec.path,
+    pluginPath: spec.format === "plugin" ? spec.path : null,
+    hookEventName: spec.events.find(e => hookKind(e) === "pre") ?? null,
+    hookEvents: spec.events,
+    customInstall: true,
+    mergeHookConfig: (existing, command) => mergeHookSpec(spec, existing, command),
+    unmergeHookConfig: (existing, own) => unmergeHookSpec(spec, existing, own),
+    adapter: ["claude-code", "codex", "cursor"].includes(spec.id) ? "passthrough" : spec.id === "hermes" ? "pre-tool-alias" : spec.id === "copilot-cli" || spec.id === "vscode" ? "copilot-camel" : spec.id === "gemini" ? "gemini" : "generic",
+    verifiedPayload: ["claude-code", "codex", "cursor", "copilot-cli", "gemini", "hermes"].includes(spec.id),
+    notes: "Configuration and payload mapping based on Numbat's host contracts; validate with a live session on your agent version. See docs/agent-hooks.md.",
+}));
+AGENTS.push({
+    id: "jev", name: "Jev (TypeSafe AI)",
+    // TypeSafe's own Jev tooling and at least half a dozen independent third-party CLIs
+    // (jev-cli, jev-axi, jev-guard, ...) each pick their own config layout, so unlike the
+    // agents above there's no single vendor-documented directory or hook contract to target.
+    // These are the paths seen across that ecosystem as of Sept 2026; treat as best-effort.
+    configs: [".config/jev", ".config/jev-axi", ".jev"], artifacts: [".config/jev-axi/stats"],
+    hookConfigPath: null, hookEventName: null,
+    mergeHookConfig: null, unmergeHookConfig: null,
+    adapter: "generic", verifiedPayload: false, unverifiedEcosystem: true,
+    notes: "Jev is TypeSafe AI's non-generative 'System One' judgment model (launched 2026-09-15), " +
+        "increasingly wired into other agents' tool-call gating (e.g. jev-guard) rather than run as " +
+        "a coding agent itself. No single vendor hook contract exists yet across the many third-party " +
+        "CLIs wrapping it, so this entry is discovery-only (config/artifact presence), not installable."
+});
 export function findAgent(id) {
     return AGENTS.find(a => a.id === id);
 }

package/dist/agents.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents.js","sourceRoot":"","sources":["../src/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA8CjC,SAAS,GAAG,CAAC,CAAU,IAAS,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACzG,SAAS,GAAG,CAAC,CAAU,IAAe,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAEzE,yFAAyF;AACzF,+FAA+F;AAC/F,yFAAyF;AACzF,gGAAgG;AAChG,iGAAiG;AACjG,6FAA6F;AAC7F,wDAAwD;AACxD,MAAM,mCAAmC,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC,CAAC;AACzF,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,eAAe,GAAG,CAAC,mCAAmC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxE,OAAO,CAAC,QAAa,EAAE,OAAe,EAAO,EAAE;QAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC;QACxG,IAAI,CAAC,gBAAgB;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACzH,OAAO,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;IAC7D,CAAC,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,CAAC,QAAa,EAAE,OAAe,EAAO,EAAE;QAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;IAC7F,CAAC,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,CAAC,QAAa,EAAE,OAAe,EAAO,EAAE;QAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/G,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;IAC7F,CAAC,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,8FAA8F;AAC9F,SAAS,uBAAuB,CAAC,KAAa;IAC5C,OAAO,CAAC,QAAa,EAAE,YAA0C,EAAO,EAAE;QACxE,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QACvC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;aACpC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAClH,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChD,OAAO,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;IAC7D,CAAC,CAAC;AACJ,CAAC;AAED,+BAA+B;AAC/B,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,CAAC,QAAa,EAAE,YAA0C,EAAO,EAAE;QACxE,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QACvC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACpG,OAAO,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;IAC7D,CAAC,CAAC;AACJ,CAAC;AAED,gCAAgC;AAChC,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,CAAC,QAAa,EAAE,YAA0C,EAAO,EAAE;QACxE,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QACvC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjG,OAAO,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;IAC7D,CAAC,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,gGAAgG;AAChG,kGAAkG;AAClG,+FAA+F;AAC/F,iGAAiG;AACjG,4BAA4B;AAC5B,SAAS,QAAQ,CAAC,OAAuD;IACvE,OAAO,CAAC,QAAa,EAAE,OAAe,EAAO,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAChH,CAAC;AACD,SAAS,UAAU,CAAC,SAAoF;IACtG,OAAO,CAAC,QAAa,EAAE,YAA0C,EAAO,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;AACtJ,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAsB;IACvC;QACE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa;QACtC,OAAO,EAAE,CAAC,uBAAuB,CAAC,EAAE,SAAS,EAAE,CAAC,kBAAkB,CAAC;QACnE,cAAc,EAAE,uBAAuB,EAAE,aAAa,EAAE,YAAY;QACpE,eAAe,EAAE,QAAQ,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC3G,iBAAiB,EAAE,UAAU,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,uBAAuB,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACnH,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,IAAI;QAC7C,KAAK,EAAE,wRAAwR;KAChS;IACD;QACE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO;QAC1B,OAAO,EAAE,CAAC,oBAAoB,CAAC,EAAE,SAAS,EAAE,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;QAC3F,cAAc,EAAE,mBAAmB,EAAE,aAAa,EAAE,YAAY;QAChE,eAAe,EAAE,QAAQ,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC3G,iBAAiB,EAAE,UAAU,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,uBAAuB,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACnH,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,IAAI;QAC7C,KAAK,EAAE,yNAAyN;KACjO;IACD;QACE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ;QAC5B,6FAA6F;QAC7F,wFAAwF;QACxF,8EAA8E;QAC9E,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,kBAAkB,CAAC;QACrD,cAAc,EAAE,oBAAoB,EAAE,aAAa,EAAE,YAAY;QACjE,eAAe,EAAE,QAAQ,CAAC,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACnG,iBAAiB,EAAE,UAAU,CAAC,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC3G,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,IAAI;QAC7C,KAAK,EAAE,yRAAyR;KACjS;IACD;QACE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,oBAAoB;QAC7C,kFAAkF;QAClF,mFAAmF;QACnF,OAAO,EAAE,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,CAAC,wBAAwB,CAAC;QACxE,cAAc,EAAE,0BAA0B,EAAE,aAAa,EAAE,YAAY;QACvE,eAAe,EAAE,QAAQ,CAAC,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,iBAAiB,CAAC,qBAAqB,CAAC,CAAC,CAAC;QACtG,iBAAiB,EAAE,UAAU,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC9G,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,IAAI;QAC/C,KAAK,EAAE,oUAAoU;KAC5U;IACD;QACE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY;QAChC,6FAA6F;QAC7F,wFAAwF;QACxF,sDAAsD;QACtD,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC;QAChD,cAAc,EAAE,uBAAuB,EAAE,aAAa,EAAE,YAAY;QACpE,4FAA4F;QAC5F,uFAAuF;QACvF,wFAAwF;QACxF,uFAAuF;QACvF,2FAA2F;QAC3F,eAAe,EAAE,QAAQ,CAAC,CAAC,qBAAqB,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC,aAAa,CAAC,CAAC,CAAC;QACtG,iBAAiB,EAAE,UAAU,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,uBAAuB,CAAC,aAAa,CAAC,CAAC,CAAC;QAC9G,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI;QACxC,KAAK,EAAE,meAAme;KAC3e;IACD;QACE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU;QAChC,OAAO,EAAE,CAAC,gCAAgC,EAAE,iCAAiC,CAAC,EAAE,SAAS,EAAE,CAAC,uBAAuB,CAAC;QACpH,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,2BAA2B,EAAE,aAAa,EAAE,qBAAqB;QACnG,eAAe,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,IAAI;QAC7F,KAAK,EAAE,yDAAyD;KACjE;IACD;QACE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc;QAClC,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE;QACnC,cAAc,EAAE,qBAAqB,EAAE,aAAa,EAAE,eAAe;QACrE,eAAe,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI;QACnE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,IAAI;QAChD,KAAK,EAAE,igBAAigB;KACzgB;IACD;QACE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU;QAChC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,EAAE;QACrC,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,kBAAkB;QACvD,eAAe,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI;QACnE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,KAAK;QACjD,KAAK,EAAE,ycAAyc;KACjd;IACD;QACE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB;QACpC,oFAAoF;QACpF,sFAAsF;QACtF,yFAAyF;QACzF,wFAAwF;QACxF,OAAO,EAAE,CAAC,aAAa,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,uBAAuB,CAAC;QACzF,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI;QACzC,eAAe,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI;QAC9C,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI;QACrE,KAAK,EAAE,yFAAyF;YAC9F,6FAA6F;YAC7F,+FAA+F;YAC/F,gGAAgG;KACnG;CACF,CAAC;AAEF,MAAM,UAAU,SAAS,CAAC,EAAU;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAsB,EAAE,IAAY;IACrE,IAAI,CAAC,KAAK,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,yCAAyC,CAAC,CAAC;IACnG,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../src/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA+CjC,MAAM,CAAC,MAAM,MAAM,GAAsB,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAG,EAAE,aAAa,EAAE,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,iBAAiB,EAAE,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC,kBAAkB,CAAC,EAAE,aAAa,EAAE,CAAC,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAC,uBAAuB,CAAC,EAA+B,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE;IAC3Y,cAAc,EAAE,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI;IAC3D,UAAU,EAAE,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;IACvD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI;IACnE,UAAU,EAAE,IAAI,CAAC,MAAM;IACvB,aAAa,EAAE,IAAI;IACnB,eAAe,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC;IAC9E,iBAAiB,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC;IAC1E,OAAO,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,aAAa,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;IAC3O,eAAe,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACxG,KAAK,EAAE,kJAAkJ;CAC1J,CAAC,CAAC,CAAC;AACJ,MAAM,CAAC,IAAI,CACX;IACI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB;IACpC,oFAAoF;IACpF,sFAAsF;IACtF,yFAAyF;IACzF,wFAAwF;IACxF,OAAO,EAAE,CAAC,aAAa,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,uBAAuB,CAAC;IACzF,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI;IACzC,eAAe,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI;IAC9C,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI;IACrE,KAAK,EAAE,yFAAyF;QAC9F,6FAA6F;QAC7F,+FAA+F;QAC/F,gGAAgG;CACnG,CAAC,CAAC;AAEL,MAAM,UAAU,SAAS,CAAC,EAAU;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAsB,EAAE,IAAY;IACrE,IAAI,CAAC,KAAK,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,yCAAyC,CAAC,CAAC;IACnG,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;AAC1C,CAAC"}

package/dist/approvals.d.ts

@@ -33,6 +33,14 @@ export interface ApprovalRequest {
     status: ApprovalStatus;
     decision?: ApprovalDecision;
     fingerprint: string;
+    /** Why the requester says it needs this access. Shown to the approver; not itself a grant. */
+    reason?: string;
+    /** The approver's own explanation, set when the decision is applied (see applyApproval()). */
+    decision_reason?: string;
+    /** How long an APPROVED decision grants: the approver's choice, 10-60 minutes. Only meaningful
+     * alongside status "APPROVED"; unset on every other status. Drives the local TTL on the
+     * requesting device's approved-actions.json (see beam-cli's approved-actions.ts). */
+    grant_minutes?: number;
 }
 export interface ApprovalPolicy {
     level: ApprovalLevel;
@@ -61,5 +69,9 @@ export declare function createApprovalRequest(input: Omit<ApprovalRequest, "requ
 export declare function validateApprovalRequest(request: ApprovalRequest): boolean;
 export declare function approvalAuditEvent(previous: ApprovalRequest, next: ApprovalRequest, approver: string): string;
 export declare function formatApprovalRequest(request: ApprovalRequest): string;
-export declare function applyApproval(request: ApprovalRequest, decision: ApprovalDecision, approver: string, now?: number): ApprovalRequest;
+export declare const MIN_GRANT_MINUTES = 10;
+export declare const MAX_GRANT_MINUTES = 60;
+export declare const DEFAULT_GRANT_MINUTES = 15;
+export declare function clampGrantMinutes(minutes: number | undefined): number;
+export declare function applyApproval(request: ApprovalRequest, decision: ApprovalDecision, approver: string, now?: number, decisionReason?: string, grantMinutes?: number): ApprovalRequest;
 export declare function approvalStillValid(request: ApprovalRequest, current: Omit<ApprovalRequest, "request_id" | "created_at" | "expires_at" | "status" | "fingerprint">, now?: number): boolean;

package/dist/approvals.js

@@ -65,7 +65,15 @@ export function formatApprovalRequest(request) {
     const resource = request.path || request.url || request.command || request.tool;
     return `[${request.level}] ${request.agent} ${request.tool}: ${resource} (risk ${request.risk_score}/100 ${request.risk_level})`;
 }
-export function applyApproval(request, decision, approver, now = Date.now()) {
+export const MIN_GRANT_MINUTES = 10;
+export const MAX_GRANT_MINUTES = 60;
+export const DEFAULT_GRANT_MINUTES = 15;
+export function clampGrantMinutes(minutes) {
+    if (!Number.isFinite(minutes))
+        return DEFAULT_GRANT_MINUTES;
+    return Math.min(MAX_GRANT_MINUTES, Math.max(MIN_GRANT_MINUTES, Math.round(minutes)));
+}
+export function applyApproval(request, decision, approver, now = Date.now(), decisionReason, grantMinutes) {
     if (!validateApprovalRequest(request))
         return { ...request, status: "DENIED", decision: "DENY" };
     if (Date.parse(request.expires_at) <= now || decision === "EXPIRE")
@@ -74,11 +82,14 @@ export function applyApproval(request, decision, approver, now = Date.now()) {
         return { ...request, status: "DENIED", decision: "DENY" };
     if (!request.approver.includes(approver))
         return { ...request, status: "DENIED", decision: "DENY" };
+    // decisionReason/grantMinutes only ever reflect a genuine decision made below by an authorized
+    // approver on a still-pending request -- never attached to the fail-closed guard rejections
+    // above, which aren't a real person's explanation and shouldn't be presented as one.
     if (decision === "DENY")
-        return { ...request, status: "DENIED", decision };
+        return { ...request, status: "DENIED", decision, decision_reason: decisionReason };
     if (request.status !== "PENDING")
         return request;
-    return { ...request, status: "APPROVED", decision };
+    return { ...request, status: "APPROVED", decision, decision_reason: decisionReason, grant_minutes: clampGrantMinutes(grantMinutes) };
 }
 export function approvalStillValid(request, current, now = Date.now()) {
     return request.status === "APPROVED" && Date.parse(request.expires_at) > now && request.fingerprint === approvalFingerprint(current);

package/dist/approvals.js.map

@@ -1 +1 @@
-{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAgBrD,MAAM,OAAO,qBAAqB;IACH;IAAsD;IAAnF,YAA6B,KAAmC,EAAmB,aAAoD,EAAE;QAA5G,UAAK,GAAL,KAAK,CAA8B;QAAmB,eAAU,GAAV,UAAU,CAA4C;IAAG,CAAC;IAC7I,UAAU,CAAC,IAAY,IAAwB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAClF,YAAY,CAAC,OAAwB,EAAE,MAAsB;QAC3D,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClI,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1K,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,UAAU,CAAC,KAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3J,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AACD,MAAM,UAAU,SAAS,CAAC,KAAa,IAAmC,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACpK,MAAM,UAAU,mBAAmB,CAAC,KAAmG;IACrI,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,KAAmG,EAAE,SAAS,GAAG,MAAM;IAC3J,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,SAA2B,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC/M,OAAO,CAAC,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAAC,OAAO,OAAO,CAAC;AACnE,CAAC;AACD,SAAS,qBAAqB,CAAC,KAA6F;IAC1H,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IAClM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACpK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;AAC1K,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,OAAwB;IAC9D,IAAI,CAAC;QAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACjP,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,QAAyB,EAAE,IAAqB,EAAE,QAAgB;IACnG,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAClE,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC;IAC1G,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,KAAK,QAAQ,CAAC,IAAI;QAAE,OAAO,wBAAwB,CAAC;IAC9G,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,yBAAyB,CAAC;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,iBAAiB,CAAC;IACvD,OAAO,UAAU,CAAC;AACpB,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,OAAwB;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAChF,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,UAAU,OAAO,CAAC,UAAU,QAAQ,OAAO,CAAC,UAAU,GAAG,CAAC;AACnI,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,QAA0B,EAAE,QAAgB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACpH,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACjG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACjI,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,KAAK,OAAO,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACrH,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACpG,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACjD,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,OAAwB,EAAE,OAAqG,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAClL,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,OAAO,CAAC,WAAW,KAAK,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACvI,CAAC"}
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAwBrD,MAAM,OAAO,qBAAqB;IACH;IAAsD;IAAnF,YAA6B,KAAmC,EAAmB,aAAoD,EAAE;QAA5G,UAAK,GAAL,KAAK,CAA8B;QAAmB,eAAU,GAAV,UAAU,CAA4C;IAAG,CAAC;IAC7I,UAAU,CAAC,IAAY,IAAwB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAClF,YAAY,CAAC,OAAwB,EAAE,MAAsB;QAC3D,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClI,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1K,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,UAAU,CAAC,KAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3J,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AACD,MAAM,UAAU,SAAS,CAAC,KAAa,IAAmC,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACpK,MAAM,UAAU,mBAAmB,CAAC,KAAmG;IACrI,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,KAAmG,EAAE,SAAS,GAAG,MAAM;IAC3J,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,SAA2B,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC/M,OAAO,CAAC,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAAC,OAAO,OAAO,CAAC;AACnE,CAAC;AACD,SAAS,qBAAqB,CAAC,KAA6F;IAC1H,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IAClM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACpK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;AAC1K,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,OAAwB;IAC9D,IAAI,CAAC;QAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACjP,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,QAAyB,EAAE,IAAqB,EAAE,QAAgB;IACnG,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAClE,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,kBAAkB,CAAC;IAC1G,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,KAAK,QAAQ,CAAC,IAAI;QAAE,OAAO,wBAAwB,CAAC;IAC9G,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,yBAAyB,CAAC;IAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,iBAAiB,CAAC;IACvD,OAAO,UAAU,CAAC;AACpB,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,OAAwB;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAChF,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,UAAU,OAAO,CAAC,UAAU,QAAQ,OAAO,CAAC,UAAU,GAAG,CAAC;AACnI,CAAC;AACD,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,qBAAqB,CAAC;IAC5D,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,OAAQ,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,OAAwB,EAAE,QAA0B,EAAE,QAAgB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,cAAuB,EAAE,YAAqB;IACpK,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACjG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACjI,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,KAAK,OAAO,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACrH,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACpG,+FAA+F;IAC/F,4FAA4F;IAC5F,qFAAqF;IACrF,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;IAC5G,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACjD,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;AACvI,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,OAAwB,EAAE,OAAqG,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAClL,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,OAAO,CAAC,WAAW,KAAK,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACvI,CAAC"}

package/dist/approved-actions.d.ts

@@ -0,0 +1,11 @@
+export interface ApprovedActionTarget {
+    agent: string;
+    tool: string;
+    command?: string;
+    path?: string;
+    url?: string;
+}
+export declare function approvedActionsFile(): string;
+export declare function approvedActionFingerprint(target: ApprovedActionTarget): string;
+export declare function recordApprovedAction(target: ApprovedActionTarget, ttlMs?: number): Promise<void>;
+export declare function consumeApprovedAction(target: ApprovedActionTarget): Promise<boolean>;

package/dist/approved-actions.js

@@ -0,0 +1,53 @@
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { createHash } from "node:crypto";
+import { getDataDirectory } from "./config.js";
+export function approvedActionsFile() { return join(getDataDirectory(), "approved-actions.json"); }
+export function approvedActionFingerprint(target) {
+    return createHash("sha256").update(JSON.stringify({
+        agent: target.agent.toLowerCase(),
+        tool: target.tool.toLowerCase(),
+        command: target.command || "",
+        path: target.path || "",
+        url: target.url || "",
+    })).digest("hex");
+}
+async function readApprovedActions() {
+    try {
+        const parsed = JSON.parse(await readFile(approvedActionsFile(), "utf8"));
+        return Array.isArray(parsed)
+            ? parsed.filter((e) => Boolean(e) && typeof e === "object" && typeof e.fingerprint === "string" && typeof e.expiresAt === "string")
+            : [];
+    }
+    catch {
+        return [];
+    }
+}
+async function writeApprovedActions(entries) {
+    const dir = getDataDirectory();
+    await mkdir(dir, { recursive: true, mode: 0o700 });
+    const file = approvedActionsFile();
+    const temp = `${file}.tmp`;
+    await writeFile(temp, JSON.stringify(entries) + "\n", { mode: 0o600 });
+    await rename(temp, file);
+}
+// Bounded (default 15 minutes) -- an approval is permission to proceed now, not a standing
+// exception. Capped at 200 entries so a burst of asks can't grow this file unbounded.
+export async function recordApprovedAction(target, ttlMs = 15 * 60_000) {
+    const live = (await readApprovedActions()).filter(e => Date.parse(e.expiresAt) > Date.now());
+    live.push({ fingerprint: approvedActionFingerprint(target), expiresAt: new Date(Date.now() + ttlMs).toISOString() });
+    await writeApprovedActions(live.slice(-200));
+}
+// Single-use: APPROVE_ONCE semantics (see approvals.ts) -- a match is removed on read so it can't
+// silently re-authorize a later, unrelated repeat of the same command without asking again.
+export async function consumeApprovedAction(target) {
+    const fingerprint = approvedActionFingerprint(target);
+    const now = Date.now();
+    const entries = await readApprovedActions();
+    const match = entries.find(e => e.fingerprint === fingerprint && Date.parse(e.expiresAt) > now);
+    if (!match)
+        return false;
+    await writeApprovedActions(entries.filter(e => e !== match && Date.parse(e.expiresAt) > now));
+    return true;
+}
+//# sourceMappingURL=approved-actions.js.map

package/dist/approved-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approved-actions.js","sourceRoot":"","sources":["../src/approved-actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAa/C,MAAM,UAAU,mBAAmB,KAAa,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC;AAE3G,MAAM,UAAU,yBAAyB,CAAC,MAA4B;IACpE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QAChD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE;QACjC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;QAC/B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;QACvB,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,EAAE;KACtB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,mBAAmB,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAA4B,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC;YAC7J,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,OAA8B;IAChE,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,IAAI,MAAM,CAAC;IAC3B,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,2FAA2F;AAC3F,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAA4B,EAAE,KAAK,GAAG,EAAE,GAAG,MAAM;IAC1F,MAAM,IAAI,GAAG,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7F,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,yBAAyB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrH,MAAM,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,kGAAkG;AAClG,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAA4B;IACtE,MAAM,WAAW,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC;IAChG,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC9F,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/behavioral-anomaly.d.ts

@@ -0,0 +1,16 @@
+/** The rolling window an action burst is measured over. */
+export declare const ANOMALY_WINDOW_MS: number;
+/** High/critical-severity actions within the window that count as a burst. */
+export declare const ANOMALY_THRESHOLD = 5;
+export interface AnomalyResult {
+    triggered: boolean;
+    count: number;
+    windowMinutes: number;
+}
+/**
+ * Records one HIGH/CRITICAL-severity action for `sessionId` (a LOW/MEDIUM `riskLevel` is a
+ * no-op: it still prunes/persists housekeeping but never adds an event or can trigger), and
+ * reports whether this session has hit `ANOMALY_THRESHOLD` such actions within
+ * `ANOMALY_WINDOW_MS`. `home` is the beam data directory (injectable for tests).
+ */
+export declare function recordAndCheckAnomaly(sessionId: string, riskLevel: string, home?: string): Promise<AnomalyResult>;

package/dist/behavioral-anomaly.js

@@ -0,0 +1,66 @@
+// Behavioral anomaly detection: flags a burst of high/critical-severity actions from one agent
+// session within a short window, independent of whether any single action was individually
+// blocked. An agent that's been talked into a chain of risky actions (prompt injection, a
+// compromised skill, a confused multi-step plan) often shows this shape even when each step
+// individually only rates "ask" rather than "deny" -- worth a human's attention as a pattern,
+// not just as isolated findings. Node-only (fs-backed session state), called from the CLI hook
+// path in client.ts only -- same separation from data-detectors.ts/rule-catalog.ts as
+// entity-redaction.ts, which stay pure so they can keep backing the edge-runtime SDK path.
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { getDataDirectory } from "./config.js";
+import { withFileLock } from "./file-lock.js";
+function activityPath(home) {
+    return join(home, "behavioral-activity.json");
+}
+async function readActivity(home) {
+    try {
+        return JSON.parse(await readFile(activityPath(home), "utf8"));
+    }
+    catch {
+        return {};
+    }
+}
+async function writeActivity(map, home) {
+    const path = activityPath(home);
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    await writeFile(path, `${JSON.stringify(map, null, 2)}\n`, { mode: 0o600 });
+}
+/** The rolling window an action burst is measured over. */
+export const ANOMALY_WINDOW_MS = 10 * 60 * 1000; // 10 minutes
+/** High/critical-severity actions within the window that count as a burst. */
+export const ANOMALY_THRESHOLD = 5;
+// A session with no new high/critical event in this long is dropped entirely, so the file
+// doesn't grow forever -- only timestamps live here, nothing sensitive either way.
+const SESSION_TTL_MS = 24 * 60 * 60 * 1000;
+/**
+ * Records one HIGH/CRITICAL-severity action for `sessionId` (a LOW/MEDIUM `riskLevel` is a
+ * no-op: it still prunes/persists housekeeping but never adds an event or can trigger), and
+ * reports whether this session has hit `ANOMALY_THRESHOLD` such actions within
+ * `ANOMALY_WINDOW_MS`. `home` is the beam data directory (injectable for tests).
+ */
+export async function recordAndCheckAnomaly(sessionId, riskLevel, home = getDataDirectory()) {
+    if (!sessionId)
+        return { triggered: false, count: 0, windowMinutes: ANOMALY_WINDOW_MS / 60_000 };
+    // Locked end-to-end (read, mutate, write) so concurrent tool calls in the same turn -- each
+    // spawning its own `beam hook` process -- don't lose each other's increments to a read-write
+    // race (see file-lock.ts). Without this, a genuine 5-action parallel burst could collapse to
+    // a single persisted event, since every process would independently read "0 prior events".
+    return withFileLock(activityPath(home), async () => {
+        const map = await readActivity(home);
+        const now = Date.now();
+        for (const [id, session] of Object.entries(map)) {
+            const last = session.events.at(-1) ?? 0;
+            if (now - last > SESSION_TTL_MS)
+                delete map[id];
+        }
+        const session = map[sessionId] ?? { events: [] };
+        if (riskLevel === "HIGH" || riskLevel === "CRITICAL")
+            session.events.push(now);
+        session.events = session.events.filter(at => now - at <= ANOMALY_WINDOW_MS);
+        map[sessionId] = session;
+        await writeActivity(map, home).catch(() => { });
+        return { triggered: session.events.length >= ANOMALY_THRESHOLD, count: session.events.length, windowMinutes: ANOMALY_WINDOW_MS / 60_000 };
+    });
+}
+//# sourceMappingURL=behavioral-anomaly.js.map

package/dist/behavioral-anomaly.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"behavioral-anomaly.js","sourceRoot":"","sources":["../src/behavioral-anomaly.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,2FAA2F;AAC3F,0FAA0F;AAC1F,4FAA4F;AAC5F,8FAA8F;AAC9F,+FAA+F;AAC/F,sFAAsF;AACtF,2FAA2F;AAC3F,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAK9C,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAiB,CAAC;IAAC,CAAC;IACtF,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAiB,EAAE,IAAY;IAC1D,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAC9D,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,0FAA0F;AAC1F,mFAAmF;AACnF,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAI3C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EAAE,SAAiB,EAAE,IAAI,GAAG,gBAAgB,EAAE;IAE/D,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,aAAa,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAAC;IAEjG,4FAA4F;IAC5F,6FAA6F;IAC7F,6FAA6F;IAC7F,2FAA2F;IAC3F,OAAO,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,GAAG,GAAG,IAAI,GAAG,cAAc;gBAAE,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,OAAO,GAAoB,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAClE,IAAI,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,UAAU;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/E,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,IAAI,iBAAiB,CAAC,CAAC;QAC5E,GAAG,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;QAEzB,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAwE,CAAC,CAAC,CAAC;QAErH,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,iBAAiB,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,iBAAiB,GAAG,MAAM,EAAE,CAAC;IAC5I,CAAC,CAAC,CAAC;AACL,CAAC"}