@agentdeck/bridge 1.2.0 → 1.2.1

package/dist/apme/task-gradeability.js

@@ -0,0 +1,126 @@
+/**
+ * Which closed tasks the judge may score at all.
+ *
+ * The task rollup judge used to run on anything that carried text, and "text"
+ * included the user's own prompts — so a task whose agent never answered was
+ * scored against silence, a task whose only turn ended in a usage-limit abort
+ * was scored on the abort notice ("Failed to send notifications due to
+ * repeated session limits", 0%), and a `hello` was scored as a failed
+ * planning task. Measured over one week (2026-09-03): 69 of 182 judged tasks
+ * held no agent reply, at a mean 0.59 that then ranked beside real work on
+ * the scorecard and floated to the top of the Work board's attention sort.
+ *
+ * A verdict about the agent's work needs the agent's work. This is the ONE
+ * place that says what counts, so the runner and the reaper's enqueue gate
+ * cannot drift apart. Reasons are surfaced on the task row rather than
+ * silently skipped — a task the judge declined must say why, or "unjudged"
+ * reads as a backlog.
+ */
+/** A task with no captured reply is still the agent's work when its tool
+ *  trajectory says so: this many tool calls, or any file written. Headless
+ *  and workflow agents (`claude -p`, subagents) routinely end on a Write or
+ *  a Bash with no closing prose, and the judge reads their trajectory — the
+ *  first cut of this rule declined 67 such tasks as "no reply" and withdrew
+ *  verdicts that had been sound. */
+export const WORK_EVIDENCE_MIN_TOOL_CALLS = 3;
+/** Longest prompt AND longest reply, in characters, for a tool-less
+ *  single-turn task to still count as a greeting rather than a task. Twelve
+ *  covers "hello", "thanks", "안녕", "테스트" and stops short of the shortest
+ *  real instruction seen ("add a feature", 13). */
+export const TRIVIAL_PROMPT_MAX_CHARS = 12;
+export const TRIVIAL_REPLY_MAX_CHARS = 200;
+const CLIENT_ENDED = new Set(['aborted']);
+function text(v) {
+    return typeof v === 'string' ? v.trim() : '';
+}
+function toolCalls(t) {
+    return typeof t.tool_calls === 'number' ? t.tool_calls : 0;
+}
+function filesTouched(t) {
+    const m = typeof t.files_modified === 'number' ? t.files_modified : 0;
+    const c = typeof t.files_created === 'number' ? t.files_created : 0;
+    return m + c;
+}
+/** `response_kind` as the collector tagged it, else derived from the row. */
+function hasTextReply(t) {
+    const raw = t.efficiency_json;
+    if (typeof raw === 'string' && raw.length > 0) {
+        try {
+            const k = JSON.parse(raw).response_kind;
+            if (k === 'tool_only' || k === 'empty')
+                return false;
+            if (k === 'text')
+                return text(t.response).length > 0;
+        }
+        catch { /* fall through */ }
+    }
+    return text(t.response).length > 0;
+}
+export function taskGradeability(turns) {
+    if (turns.length === 0)
+        return { gradeable: false, reason: 'no_reply' };
+    const worked = turns.filter((t) => !CLIENT_ENDED.has(t.end_source));
+    if (worked.length === 0)
+        return { gradeable: false, reason: 'aborted_only' };
+    const replied = worked.filter(hasTextReply);
+    if (replied.length === 0) {
+        const tools = worked.reduce((n, t) => n + toolCalls(t), 0);
+        const files = worked.reduce((n, t) => n + filesTouched(t), 0);
+        if (tools < WORK_EVIDENCE_MIN_TOOL_CALLS && files === 0)
+            return { gradeable: false, reason: 'no_reply' };
+    }
+    if (worked.length === 1 &&
+        toolCalls(worked[0]) === 0 &&
+        text(worked[0].prompt).length <= TRIVIAL_PROMPT_MAX_CHARS &&
+        text(worked[0].response).length <= TRIVIAL_REPLY_MAX_CHARS) {
+        return { gradeable: false, reason: 'trivial' };
+    }
+    return { gradeable: true };
+}
+/** Withdraw every verdict in the window that the gradeability rule would not
+ *  have allowed — the judge's own past output, re-read under the rule it now
+ *  applies. Idempotent: a retracted row carries `notGradeable` and is not
+ *  offered again. Returns how many were withdrawn, by reason. */
+export function retractUngradeableVerdicts(store, sinceMs) {
+    const out = { no_reply: 0, aborted_only: 0, trivial: 0, readmitted: 0 };
+    for (const { id } of store.listJudgedTasks(sinceMs)) {
+        const g = taskGradeability(store.listTurnsForTask(id));
+        if (g.gradeable)
+            continue;
+        store.retractTaskVerdict(id, g.reason);
+        out[g.reason]++;
+    }
+    // The rule can also LOOSEN (it did once — see WORK_EVIDENCE_MIN_TOOL_CALLS):
+    // a task declined under the stricter reading goes back to the backlog.
+    for (const { id } of store.listDeclinedTasks(sinceMs)) {
+        if (!taskGradeability(store.listTurnsForTask(id)).gradeable)
+            continue;
+        store.readmitTask(id);
+        out.readmitted++;
+    }
+    return out;
+}
+/** What the Work board prints beside a task the judge declined. */
+export const NOT_GRADEABLE_LABEL = {
+    no_reply: 'no reply captured',
+    aborted_only: 'ended by the client (limit / auth / API)',
+    trivial: 'trivial exchange',
+};
+/** The `notes_json` shape written for a declined task, so the row can say
+ *  why. Kept separate from the judge's `{reasoning, done, missed}` shape. */
+export function notGradeableNotes(reason) {
+    return JSON.stringify({ notGradeable: reason });
+}
+/** Read the reason back off a task row's `notes_json`, if that is what it holds. */
+export function readNotGradeable(notesJson) {
+    if (typeof notesJson !== 'string' || notesJson.length === 0)
+        return null;
+    try {
+        const r = JSON.parse(notesJson).notGradeable;
+        return r === 'no_reply' || r === 'aborted_only' || r === 'trivial' ? r : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=task-gradeability.js.map

package/dist/apme/task-gradeability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-gradeability.js","sourceRoot":"","sources":["../../src/apme/task-gradeability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AA6BH;;;;;oCAKoC;AACpC,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAE9C;;;mDAGmD;AACnD,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C,MAAM,YAAY,GAA+B,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAEtE,SAAS,IAAI,CAAC,CAAU;IACtB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,SAAS,CAAC,CAAmB;IACpC,OAAO,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,YAAY,CAAC,CAAmB;IACvC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,SAAS,YAAY,CAAC,CAAmB;IACvC,MAAM,GAAG,GAAG,CAAC,CAAC,eAAe,CAAC;IAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,CAAC,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiC,CAAC,aAAa,CAAC;YACzE,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,OAAO;gBAAE,OAAO,KAAK,CAAC;YACrD,IAAI,CAAC,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAkC;IACjE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACxE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,UAA2B,CAAC,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,KAAK,GAAG,4BAA4B,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC3G,CAAC;IACD,IACE,MAAM,CAAC,MAAM,KAAK,CAAC;QACnB,SAAS,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,wBAAwB;QAC1D,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,MAAM,IAAI,uBAAuB,EAC3D,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED;;;iEAGiE;AACjE,MAAM,UAAU,0BAA0B,CACxC,KAMC,EACD,OAAe;IAEf,MAAM,GAAG,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IACxE,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC,SAAS;YAAE,SAAS;QAC1B,KAAK,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACvC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IAClB,CAAC;IACD,6EAA6E;IAC7E,uEAAuE;IACvE,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;YAAE,SAAS;QACtE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtB,GAAG,CAAC,UAAU,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,mBAAmB,GAAuC;IACrE,QAAQ,EAAE,mBAAmB;IAC7B,YAAY,EAAE,0CAA0C;IACxD,OAAO,EAAE,kBAAkB;CAC5B,CAAC;AAEF;6EAC6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,MAA0B;IAC1D,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,SAAkB;IACjD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,CAAC,GAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAgC,CAAC,YAAY,CAAC;QAC7E,OAAO,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/awaiting-overlay.d.ts

@@ -30,6 +30,12 @@ export interface AwaitingEntry {
     kind: AwaitingKind;
     state: 'awaiting_permission' | 'awaiting_option';
     question: string;
+    /** Not subject to the transcript-recency drop in
+     *  `applyAwaitingOverlayToObserved`. That drop is a Claude ESC heuristic
+     *  (the transcript freezes while Claude waits); an agent whose record keeps
+     *  moving during its wait (a Codex rollout) sets this and relies on its own
+     *  hook clears + the TTL instead. */
+    sticky?: boolean;
     /** Structured AskUserQuestion choices for the ACTIVE group. Pressable only
      *  when the daemon can deliver the answer (terminal injection or a held
      *  ask-gate) — otherwise devices direct the user back to the terminal. */
@@ -64,7 +70,9 @@ export interface AwaitingEntry {
     requestId?: string;
     updatedAt: number;
 }
-export declare function setAwaitingOverlay(sessionId: string, question: string, requestId?: string): void;
+export declare function setAwaitingOverlay(sessionId: string, question: string, requestId?: string, opts?: {
+    sticky?: boolean;
+}): void;
 /** Notification permission prompts arrive several seconds after
  * AskUserQuestion's structured PreToolUse. Preserve an existing option
  * interaction instead of downgrading it to generic permission copy. */
@@ -166,29 +174,8 @@ export declare function looksLikePermissionMessage(message: string): boolean;
  * `DaemonServer.isPermissionNotification`.
  */
 export declare function isPermissionNotification(notificationType: string | undefined, message: string): boolean;
-/**
- * Should the daemon HOLD a gated PreToolUse for device approval, given the
- * session's `permission_mode`?
- *
- * Claude's PreToolUse hook fires for EVERY tool call regardless of mode or
- * allowlist — even when Claude will auto-approve and never prompt the user.
- * `permission_mode` is the session's global decision posture, so gate only in
- * modes where Claude could still surface its own prompt; otherwise the device
- * nags for a decision the agent never asked for (the reported false-attention
- * bug). Mirrors the Swift `DaemonServer.shouldGate(permissionMode:tool:)`.
- *
- *  - `bypassPermissions` / `dontAsk` → never prompts            → don't gate
- *  - `auto`                          → policy engine auto-approves; its
- *    decisions live outside the settings allowlist files, so the rule
- *    predictor can't see them and every unlisted call would false-hold.
- *    The rare genuine prompt still surfaces via the Notification
- *    `permission_prompt` overlay                                 → don't gate
- *  - `plan`                          → tools don't execute       → don't gate
- *  - `acceptEdits`                   → edits auto-approved, Bash still prompts
- *  - `default` / unknown             → Claude may prompt         → gate
- *
- * Unknown/absent mode is treated as `default` (gate) to preserve behavior on
- * older Claude versions that don't send the field.
- */
-export declare function shouldGatePreToolUse(permissionMode: string | undefined, tool: string): boolean;
+/** Mode gate for the PreToolUse device-approval hold — SSOT in
+ *  @agentdeck/shared (generated into the Swift daemon). Re-exported here for
+ *  the daemon's existing import path. */
+export { shouldGatePreToolUse } from '@agentdeck/shared';
 //# sourceMappingURL=awaiting-overlay.d.ts.map

package/dist/awaiting-overlay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"awaiting-overlay.d.ts","sourceRoot":"","sources":["../src/awaiting-overlay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGtD;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,QAAQ,CAAC;AAEnD;;8CAE8C;AAC9C,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,UAAU,CAAC,EAAE,cAAc,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,qBAAqB,GAAG,iBAAiB,CAAC;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB;;8EAE0E;IAC1E,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B;;;;uFAImF;IACnF,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;wEAGoE;IACpE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;iFAC6E;IAC7E,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD;;;uEAGmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;+DAE2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AA4BD,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAShG;AAED;;uEAEuE;AACvE,wBAAgB,gCAAgC,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAI7F;AAoCD;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC7C,OAAO,CAsBT;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,GACb,UAAU,GAAG,UAAU,GAAG,SAAS,CAuBrC;AAED,+EAA+E;AAC/E,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,GAChB,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAI5C;AAED;;uEAEuE;AACvE,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,GAChB,aAAa,GAAG,SAAS,CAa3B;AAED;;;2EAG2E;AAC3E,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED;gFACgF;AAChF,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAOT;AAED,8BAA8B;AAC9B,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,8BAA8B,CAC5C,CAAC,SAAS;IACR,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,EACD,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAoCpB;AAMD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAGnE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,gBAAgB,EAAE,MAAM,GAAG,SAAS,EACpC,OAAO,EAAE,MAAM,GACd,OAAO,CAKT;AAKD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAY9F"}
+{"version":3,"file":"awaiting-overlay.d.ts","sourceRoot":"","sources":["../src/awaiting-overlay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGtD;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,QAAQ,CAAC;AAEnD;;8CAE8C;AAC9C,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,UAAU,CAAC,EAAE,cAAc,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,qBAAqB,GAAG,iBAAiB,CAAC;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;yCAIqC;IACrC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;8EAE0E;IAC1E,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B;;;;uFAImF;IACnF,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;wEAGoE;IACpE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;iFAC6E;IAC7E,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD;;;uEAGmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;+DAE2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AA4BD,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9B,IAAI,CAUN;AAED;;uEAEuE;AACvE,wBAAgB,gCAAgC,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAI7F;AAoCD;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC7C,OAAO,CAsBT;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,MAAM,GACb,UAAU,GAAG,UAAU,GAAG,SAAS,CAuBrC;AAED,+EAA+E;AAC/E,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,GAChB,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAI5C;AAED;;uEAEuE;AACvE,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,GAChB,aAAa,GAAG,SAAS,CAa3B;AAED;;;2EAG2E;AAC3E,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED;gFACgF;AAChF,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,OAAO,CAOT;AAED,8BAA8B;AAC9B,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,8BAA8B,CAC5C,CAAC,SAAS;IACR,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,EACD,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAqCpB;AAMD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAGnE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,gBAAgB,EAAE,MAAM,GAAG,SAAS,EACpC,OAAO,EAAE,MAAM,GACd,OAAO,CAKT;AAED;;yCAEyC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/awaiting-overlay.js

@@ -21,7 +21,7 @@ const RESOLVED_ACTIVITY_MARGIN_MS = 1_000;
 /** Cap question length at the source so every sessions_list broadcast stays small. */
 const MAX_QUESTION_LEN = 120;
 const overlay = new Map();
-export function setAwaitingOverlay(sessionId, question, requestId) {
+export function setAwaitingOverlay(sessionId, question, requestId, opts = {}) {
     const trimmed = (question || '').replace(/\s+/g, ' ').trim().slice(0, MAX_QUESTION_LEN);
     overlay.set(sessionId, {
         kind: 'permission',
@@ -29,6 +29,7 @@ export function setAwaitingOverlay(sessionId, question, requestId) {
         question: trimmed,
         requestId,
         updatedAt: Date.now(),
+        ...(opts.sticky ? { sticky: true } : {}),
     });
 }
 /** Notification permission prompts arrive several seconds after
@@ -218,6 +219,7 @@ export function applyAwaitingOverlayToObserved(sessions) {
         // overlay was set → answered or ESC-dismissed. Drop it (no hook will).
         if (ov.kind === 'permission' &&
             !ov.requestId &&
+            !ov.sticky &&
             typeof s.lastActivityAt === 'number' &&
             s.lastActivityAt > ov.updatedAt + RESOLVED_ACTIVITY_MARGIN_MS) {
             clearAwaitingOverlay(uuid);
@@ -288,43 +290,8 @@ export function isPermissionNotification(notificationType, message) {
     }
     return looksLikePermissionMessage(message);
 }
-/** Edit-family tools that Claude auto-approves in `acceptEdits` mode. */
-const EDIT_FAMILY_TOOLS = new Set(['Write', 'Edit', 'MultiEdit', 'NotebookEdit']);
-/**
- * Should the daemon HOLD a gated PreToolUse for device approval, given the
- * session's `permission_mode`?
- *
- * Claude's PreToolUse hook fires for EVERY tool call regardless of mode or
- * allowlist — even when Claude will auto-approve and never prompt the user.
- * `permission_mode` is the session's global decision posture, so gate only in
- * modes where Claude could still surface its own prompt; otherwise the device
- * nags for a decision the agent never asked for (the reported false-attention
- * bug). Mirrors the Swift `DaemonServer.shouldGate(permissionMode:tool:)`.
- *
- *  - `bypassPermissions` / `dontAsk` → never prompts            → don't gate
- *  - `auto`                          → policy engine auto-approves; its
- *    decisions live outside the settings allowlist files, so the rule
- *    predictor can't see them and every unlisted call would false-hold.
- *    The rare genuine prompt still surfaces via the Notification
- *    `permission_prompt` overlay                                 → don't gate
- *  - `plan`                          → tools don't execute       → don't gate
- *  - `acceptEdits`                   → edits auto-approved, Bash still prompts
- *  - `default` / unknown             → Claude may prompt         → gate
- *
- * Unknown/absent mode is treated as `default` (gate) to preserve behavior on
- * older Claude versions that don't send the field.
- */
-export function shouldGatePreToolUse(permissionMode, tool) {
-    switch ((permissionMode || 'default').trim()) {
-        case 'bypassPermissions':
-        case 'dontAsk':
-        case 'auto':
-        case 'plan':
-            return false;
-        case 'acceptEdits':
-            return !EDIT_FAMILY_TOOLS.has(tool);
-        default:
-            return true;
-    }
-}
+/** Mode gate for the PreToolUse device-approval hold — SSOT in
+ *  @agentdeck/shared (generated into the Swift daemon). Re-exported here for
+ *  the daemon's existing import path. */
+export { shouldGatePreToolUse } from '@agentdeck/shared';
 //# sourceMappingURL=awaiting-overlay.js.map

package/dist/awaiting-overlay.js.map

@@ -1 +1 @@
-{"version":3,"file":"awaiting-overlay.js","sourceRoot":"","sources":["../src/awaiting-overlay.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAoEjD;;;;;;2DAM2D;AAC3D,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,UAAU;AAElD;;;;;;;;;oCASoC;AACpC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAE1C,sFAAsF;AACtF,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEjD,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,QAAgB,EAAE,SAAkB;IACxF,MAAM,OAAO,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE;QACrB,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,qBAAqB;QAC5B,QAAQ,EAAE,OAAO;QACjB,SAAS;QACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;AACL,CAAC;AAED;;uEAEuE;AACvE,MAAM,UAAU,gCAAgC,CAAC,SAAiB,EAAE,QAAgB;IAClF,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5D,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;sDACsD;AACtD,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACrF,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEhC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,OAAO,GAAmB,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACnE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,OAAO,CAAC;gBACN,KAAK,EAAE,CAAC,EAAE,0DAA0D;gBACpE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC;aACxC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3C,OAAO;QACL,QAAQ;QACR,OAAO;QACP,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,cAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,YAAY,CAAC,KAAoB,EAAE,KAAe;IACzD,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,KAAK,CAAC,UAAU;QAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;;QACrD,OAAO,KAAK,CAAC,UAAU,CAAC;AAC/B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAAiB,EACjB,SAA6B,EAC7B,SAA8C;IAE9C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,MAAM,GAAG,YAAY;SACxB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;SAChC,MAAM,CAAC,CAAC,KAAK,EAAqB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEtC,MAAM,KAAK,GAAkB;QAC3B,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,EAAE;QACZ,MAAM;QACN,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,YAAY,CAAC,MAAM;QAClC,OAAO,EAAE,EAAE;QACX,SAAS;QACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;IACF,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAAiB,EACjB,KAAc;IAEd,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM;QAAE,OAAO,SAAS,CAAC;IACjF,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;IACtC,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,iEAAiE;IACjE,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,UAAU,CAAC;IACrD,KAAK,CAAC,OAAO,GAAG;QACd,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACxB,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE;KACnF,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC;IACxB,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAChC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;QACzB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;IACzB,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,yBAAyB,CACvC,SAAiB;IAEjB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;uEAEuE;AACvE,MAAM,UAAU,kBAAkB,CAChC,SAAiB;IAEjB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,GAAG,cAAc,EAAE,CAAC;QAClD,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,GAAG,KAAK;QACR,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACxD,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACpD,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;;2EAG2E;AAC3E,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,2BAA2B,CACzC,SAAiB,EACjB,SAA6B;IAE7B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,KAAK,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;IAChE,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,qBAAqB;IACnC,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,8BAA8B,CAY5C,QAAa;IACb,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC;QAClB,2EAA2E;QAC3E,uEAAuE;QACvE,IACE,EAAE,CAAC,IAAI,KAAK,YAAY;YACxB,CAAC,EAAE,CAAC,SAAS;YACb,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;YACpC,CAAC,CAAC,cAAc,GAAG,EAAE,CAAC,SAAS,GAAG,2BAA2B,EAC7D,CAAC;YACD,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,CAAC;QACX,CAAC;QACD,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO;YACL,GAAG,CAAC;YACJ,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,UAAU;gBACZ,CAAC,CAAC;oBACA,oEAAoE;oBACpE,uCAAuC;oBACvC,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,EAAE,EAAE,CAAC,MAAO,CAAC,MAAM,GAAG,CAAC,CAAC;oBACnE,aAAa,EAAE,EAAE,CAAC,MAAO,CAAC,MAAM;iBACjC;gBACD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,iEAAiE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,gBAAoC,EACpC,OAAe;IAEf,IAAI,OAAO,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,OAAO,gBAAgB,KAAK,mBAAmB,CAAC;IAClD,CAAC;IACD,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,yEAAyE;AACzE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;AAElF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,oBAAoB,CAAC,cAAkC,EAAE,IAAY;IACnF,QAAQ,CAAC,cAAc,IAAI,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,KAAK,mBAAmB,CAAC;QACzB,KAAK,SAAS,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,KAAK,CAAC;QACf,KAAK,aAAa;YAChB,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}
+{"version":3,"file":"awaiting-overlay.js","sourceRoot":"","sources":["../src/awaiting-overlay.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AA0EjD;;;;;;2DAM2D;AAC3D,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,UAAU;AAElD;;;;;;;;;oCASoC;AACpC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAE1C,sFAAsF;AACtF,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEjD,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,QAAgB,EAChB,SAAkB,EAClB,OAA6B,EAAE;IAE/B,MAAM,OAAO,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE;QACrB,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,qBAAqB;QAC5B,QAAQ,EAAE,OAAO;QACjB,SAAS;QACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CAAC,CAAC;AACL,CAAC;AAED;;uEAEuE;AACvE,MAAM,UAAU,gCAAgC,CAAC,SAAiB,EAAE,QAAgB;IAClF,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5D,kBAAkB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;sDACsD;AACtD,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACrF,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEhC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,OAAO,GAAmB,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACnE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,OAAO,CAAC;gBACN,KAAK,EAAE,CAAC,EAAE,0DAA0D;gBACpE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC;aACxC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3C,OAAO;QACL,QAAQ;QACR,OAAO;QACP,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,cAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,YAAY,CAAC,KAAoB,EAAE,KAAe;IACzD,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,KAAK,CAAC,UAAU;QAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;;QACrD,OAAO,KAAK,CAAC,UAAU,CAAC;AAC/B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAAiB,EACjB,SAA6B,EAC7B,SAA8C;IAE9C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,MAAM,GAAG,YAAY;SACxB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;SAChC,MAAM,CAAC,CAAC,KAAK,EAAqB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEtC,MAAM,KAAK,GAAkB;QAC3B,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,EAAE;QACZ,MAAM;QACN,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,YAAY,CAAC,MAAM;QAClC,OAAO,EAAE,EAAE;QACX,SAAS;QACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;IACF,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAAiB,EACjB,KAAc;IAEd,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM;QAAE,OAAO,SAAS,CAAC;IACjF,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;IACtC,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,iEAAiE;IACjE,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,UAAU,CAAC;IACrD,KAAK,CAAC,OAAO,GAAG;QACd,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACxB,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE;KACnF,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,CAAC;IACxB,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAChC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;QACzB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;IACzB,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,yBAAyB,CACvC,SAAiB;IAEjB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;uEAEuE;AACvE,MAAM,UAAU,kBAAkB,CAChC,SAAiB;IAEjB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,GAAG,cAAc,EAAE,CAAC;QAClD,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,GAAG,KAAK;QACR,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACxD,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACpD,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;;2EAG2E;AAC3E,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,2BAA2B,CACzC,SAAiB,EACjB,SAA6B;IAE7B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,KAAK,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;IAChE,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,qBAAqB;IACnC,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,8BAA8B,CAY5C,QAAa;IACb,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC;QAClB,2EAA2E;QAC3E,uEAAuE;QACvE,IACE,EAAE,CAAC,IAAI,KAAK,YAAY;YACxB,CAAC,EAAE,CAAC,SAAS;YACb,CAAC,EAAE,CAAC,MAAM;YACV,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;YACpC,CAAC,CAAC,cAAc,GAAG,EAAE,CAAC,SAAS,GAAG,2BAA2B,EAC7D,CAAC;YACD,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,CAAC;QACX,CAAC;QACD,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,UAAU,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO;YACL,GAAG,CAAC;YACJ,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,UAAU;gBACZ,CAAC,CAAC;oBACA,oEAAoE;oBACpE,uCAAuC;oBACvC,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,EAAE,EAAE,CAAC,MAAO,CAAC,MAAM,GAAG,CAAC,CAAC;oBACnE,aAAa,EAAE,EAAE,CAAC,MAAO,CAAC,MAAM;iBACjC;gBACD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,iEAAiE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,gBAAoC,EACpC,OAAe;IAEf,IAAI,OAAO,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,OAAO,gBAAgB,KAAK,mBAAmB,CAAC;IAClD,CAAC;IACD,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;yCAEyC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/claude-permission-rules.d.ts

@@ -1,35 +1,25 @@
 /**
- * Conservative predictor for "would Claude Code actually prompt the user for
- * this tool call?" — the precision guard for the observed-session PreToolUse
- * device-approval gate.
+ * Loader half of the observed-session PreToolUse device-approval gate.
+ *
+ * The PREDICTION ("would Claude Code actually prompt for this call?") lives in
+ * `@agentdeck/shared` (`shared/src/claude-permission-rules.ts`), generated
+ * into the Swift daemon and pinned by shared/claude-permission-vectors.json.
+ * This module only reads the settings files Claude Code reads for a cwd and
+ * hands the merged rules to that predictor.
  *
  * HISTORY (why precision-first): the first PreToolUse gate held EVERY gated
  * tool call, so tools Claude auto-approves (allowlist rules, acceptEdits,
  * session "always allow") still popped Allow/Deny on devices — the reported
  * false-attention bug that got the gate removed (DEVELOPMENT_LOG 2026-05).
- * This module exists so the reinstated gate only ever holds calls we are
- * CONFIDENT Claude will prompt for. Every uncertainty resolves to "don't
- * hold": a missed hold just means the user answers in the terminal (the
- * pre-gate status quo), while a false hold nags the user with a popup Claude
- * never asked for.
- *
- * Rule semantics mirror Claude Code `permissions.allow/deny/ask` entries:
- *   "Bash"                → every Bash call
- *   "Bash(git status)"    → exact command
- *   "Bash(git status:*)"  → command prefix
- *   "Read(...)"/"WebFetch(domain:x)"/"mcp__srv__tool" → tool + spec
- * Matching is deliberately asymmetric:
- *   - allow/deny rules match LOOSELY (tool-name match with any spec counts)
- *     because a loose match only suppresses a hold (safe direction).
- *   - ask rules match STRICTLY (tool-only, or exact/prefix Bash) because an
- *     ask match *causes* a hold and must not fire on a spec we can't parse.
+ * The reinstated gate only ever holds calls the shared predictor is CONFIDENT
+ * Claude will prompt for. Every uncertainty resolves to "don't hold": a
+ * missed hold just means the user answers in the terminal (the pre-gate
+ * status quo), while a false hold nags the user with a popup Claude never
+ * asked for AND stalls the agent for the whole hold timeout.
  */
-export type RuleVerdict = 'allow' | 'deny' | 'ask' | 'none' | 'unknown';
-interface MergedRules {
-    allow: string[];
-    deny: string[];
-    ask: string[];
-}
+import { type MergedPermissionRules, type PermissionRuleVerdict } from '@agentdeck/shared';
+export type RuleVerdict = PermissionRuleVerdict;
+type MergedRules = MergedPermissionRules;
 export declare function isNeverPromptTool(tool: string): boolean;
 export declare function isPromptProneTool(tool: string): boolean;
 export declare function _setHomeOverrideForTests(path: string | null): void;
@@ -43,13 +33,11 @@ export declare function loadMergedPermissionRules(cwd: string | undefined): Merg
 /** Test helper. */
 export declare function _clearRulesCache(): void;
 /**
- * Predict Claude's permission-rule verdict for a tool call.
- *   'deny'    → a deny rule may match: Claude auto-denies (or prompts) — don't hold
- *   'allow'   → an allow rule may match: Claude may auto-approve — don't hold
- *   'ask'     → an ask rule definitely matches: Claude will prompt — hold-eligible
- *   'none'    → no rule matches: default behavior for the tool applies
- *   'unknown' → settings unreadable: don't hold
+ * Predict Claude's permission-rule verdict for a tool call against the
+ * settings files that apply to `cwd`. See the shared predictor for the
+ * verdict semantics; `permissionMode` lets it apply the `acceptEdits`
+ * filesystem auto-approvals.
  */
-export declare function evaluatePermissionRules(tool: string, toolInput: Record<string, unknown> | undefined, cwd: string | undefined): RuleVerdict;
+export declare function evaluatePermissionRules(tool: string, toolInput: Record<string, unknown> | undefined, cwd: string | undefined, permissionMode?: string): RuleVerdict;
 export {};
 //# sourceMappingURL=claude-permission-rules.d.ts.map

package/dist/claude-permission-rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-permission-rules.d.ts","sourceRoot":"","sources":["../src/claude-permission-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAOH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAExE,UAAU,WAAW;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,EAAE,CAAC;CACf;AAkBD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAYD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAGlE;AAiBD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,IAAI,CA+BrF;AAED,mBAAmB;AACnB,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AA6CD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC9C,GAAG,EAAE,MAAM,GAAG,SAAS,GACtB,WAAW,CAkBb"}
+{"version":3,"file":"claude-permission-rules.d.ts","sourceRoot":"","sources":["../src/claude-permission-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,OAAO,EAIL,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC3B,MAAM,mBAAmB,CAAC;AAG3B,MAAM,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAChD,KAAK,WAAW,GAAG,qBAAqB,CAAC;AAEzC,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAYD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAGlE;AAiBD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,IAAI,CA+BrF;AAED,mBAAmB;AACnB,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC9C,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,cAAc,CAAC,EAAE,MAAM,GACtB,WAAW,CAGb"}

package/dist/claude-permission-rules.js

@@ -1,47 +1,27 @@
 /**
- * Conservative predictor for "would Claude Code actually prompt the user for
- * this tool call?" — the precision guard for the observed-session PreToolUse
- * device-approval gate.
+ * Loader half of the observed-session PreToolUse device-approval gate.
+ *
+ * The PREDICTION ("would Claude Code actually prompt for this call?") lives in
+ * `@agentdeck/shared` (`shared/src/claude-permission-rules.ts`), generated
+ * into the Swift daemon and pinned by shared/claude-permission-vectors.json.
+ * This module only reads the settings files Claude Code reads for a cwd and
+ * hands the merged rules to that predictor.
  *
  * HISTORY (why precision-first): the first PreToolUse gate held EVERY gated
  * tool call, so tools Claude auto-approves (allowlist rules, acceptEdits,
  * session "always allow") still popped Allow/Deny on devices — the reported
  * false-attention bug that got the gate removed (DEVELOPMENT_LOG 2026-05).
- * This module exists so the reinstated gate only ever holds calls we are
- * CONFIDENT Claude will prompt for. Every uncertainty resolves to "don't
- * hold": a missed hold just means the user answers in the terminal (the
- * pre-gate status quo), while a false hold nags the user with a popup Claude
- * never asked for.
- *
- * Rule semantics mirror Claude Code `permissions.allow/deny/ask` entries:
- *   "Bash"                → every Bash call
- *   "Bash(git status)"    → exact command
- *   "Bash(git status:*)"  → command prefix
- *   "Read(...)"/"WebFetch(domain:x)"/"mcp__srv__tool" → tool + spec
- * Matching is deliberately asymmetric:
- *   - allow/deny rules match LOOSELY (tool-name match with any spec counts)
- *     because a loose match only suppresses a hold (safe direction).
- *   - ask rules match STRICTLY (tool-only, or exact/prefix Bash) because an
- *     ask match *causes* a hold and must not fire on a spec we can't parse.
+ * The reinstated gate only ever holds calls the shared predictor is CONFIDENT
+ * Claude will prompt for. Every uncertainty resolves to "don't hold": a
+ * missed hold just means the user answers in the terminal (the pre-gate
+ * status quo), while a false hold nags the user with a popup Claude never
+ * asked for AND stalls the agent for the whole hold timeout.
  */
 import { readFileSync, statSync } from 'fs';
 import { join } from 'path';
 import { homedir } from 'os';
+import { evaluatePermissionRules as evaluateSharedRules, NEVER_PROMPT_TOOLS, PROMPT_PRONE_TOOLS, } from '@agentdeck/shared';
 import { debug } from './logger.js';
-/** Tools that never trigger a permission prompt — holding them can only ever
- *  be a false positive. Kept intentionally tight (unknown tools are excluded
- *  by the prompt-prone check below, not this list). */
-const NEVER_PROMPT_TOOLS = new Set([
-    'Read', 'Glob', 'Grep', 'LS',
-    'TodoWrite', 'TodoRead', 'NotebookRead',
-    'Task', 'TaskOutput', 'BashOutput',
-]);
-/** Tools that DO prompt in default/auto permission mode unless allowlisted.
- *  Anything outside this set (including every mcp__* tool, whose per-server
- *  trust state we cannot see) is never held. */
-const PROMPT_PRONE_TOOLS = new Set([
-    'Bash', 'Write', 'Edit', 'MultiEdit', 'NotebookEdit', 'WebFetch', 'WebSearch',
-]);
 export function isNeverPromptTool(tool) {
     return NEVER_PROMPT_TOOLS.has(tool);
 }
@@ -121,77 +101,14 @@ export function loadMergedPermissionRules(cwd) {
 export function _clearRulesCache() {
     rulesCache.clear();
 }
-function parseRule(rule) {
-    const m = /^([A-Za-z][A-Za-z0-9_]*)(?:\((.*)\))?$/.exec(rule.trim());
-    if (!m)
-        return null;
-    return { tool: m[1], spec: m[2] };
-}
-function bashSpecMatches(spec, command) {
-    if (spec === '*')
-        return true;
-    if (spec.endsWith(':*'))
-        return command.startsWith(spec.slice(0, -2));
-    return command === spec;
-}
-/** Loose match (allow/deny direction): a tool-name match with ANY spec counts,
- *  except Bash specs which we can compare precisely. */
-function matchesLoose(rule, tool, command) {
-    if (rule.tool !== tool)
-        return false;
-    if (rule.spec === undefined)
-        return true;
-    if (tool === 'Bash') {
-        if (command === undefined)
-            return true; // malformed input — assume covered
-        return bashSpecMatches(rule.spec, command)
-            // Compound commands: Claude prompts unless every segment is allowed; we
-            // only need "might be auto-approved", so a prefix match on the first
-            // segment is enough to suppress the hold.
-            || bashSpecMatches(rule.spec, command.split(/&&|\|\||;|\|/)[0]?.trim() ?? command);
-    }
-    // Non-Bash specs (paths, domains, globs): we don't replicate the matcher —
-    // any spec on the right tool MIGHT match, so treat it as covered.
-    return true;
-}
-/** Strict match (ask direction): only patterns we can evaluate exactly. */
-function matchesStrict(rule, tool, command) {
-    if (rule.tool !== tool)
-        return false;
-    if (rule.spec === undefined)
-        return true;
-    if (tool === 'Bash' && command !== undefined)
-        return bashSpecMatches(rule.spec, command);
-    return false;
-}
 /**
- * Predict Claude's permission-rule verdict for a tool call.
- *   'deny'    → a deny rule may match: Claude auto-denies (or prompts) — don't hold
- *   'allow'   → an allow rule may match: Claude may auto-approve — don't hold
- *   'ask'     → an ask rule definitely matches: Claude will prompt — hold-eligible
- *   'none'    → no rule matches: default behavior for the tool applies
- *   'unknown' → settings unreadable: don't hold
+ * Predict Claude's permission-rule verdict for a tool call against the
+ * settings files that apply to `cwd`. See the shared predictor for the
+ * verdict semantics; `permissionMode` lets it apply the `acceptEdits`
+ * filesystem auto-approvals.
  */
-export function evaluatePermissionRules(tool, toolInput, cwd) {
-    const rules = loadMergedPermissionRules(cwd);
-    if (rules === null)
-        return 'unknown';
+export function evaluatePermissionRules(tool, toolInput, cwd, permissionMode) {
     const command = typeof toolInput?.command === 'string' ? toolInput.command : undefined;
-    for (const r of rules.deny) {
-        const parsed = parseRule(r);
-        if (parsed && matchesLoose(parsed, tool, command))
-            return 'deny';
-    }
-    for (const r of rules.allow) {
-        const parsed = parseRule(r);
-        if (parsed && matchesLoose(parsed, tool, command))
-            return 'allow';
-    }
-    for (const r of rules.ask) {
-        const parsed = parseRule(r);
-        if (parsed && matchesStrict(parsed, tool, command))
-            return 'ask';
-    }
-    return 'none';
+    return evaluateSharedRules(tool, command, loadMergedPermissionRules(cwd), { permissionMode });
 }
 //# sourceMappingURL=claude-permission-rules.js.map

package/dist/claude-permission-rules.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude-permission-rules.js","sourceRoot":"","sources":["../src/claude-permission-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAUpC;;uDAEuD;AACvD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI;IAC5B,WAAW,EAAE,UAAU,EAAE,cAAc;IACvC,MAAM,EAAE,YAAY,EAAE,YAAY;CACnC,CAAC,CAAC;AAEH;;gDAEgD;AAChD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW;CAC9E,CAAC,CAAC;AAEH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAOD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;AAEjD,4EAA4E;AAC5E,IAAI,YAAY,GAAkB,IAAI,CAAC;AACvC,MAAM,UAAU,wBAAwB,CAAC,IAAmB;IAC1D,YAAY,GAAG,IAAI,CAAC;IACpB,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAuB;IACjD,MAAM,IAAI,GAAG,YAAY,IAAI,OAAO,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG;QACZ,+EAA+E;QAC/E,+DAA+D;QAC/D,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,CAAC;KAC7C,CAAC;IACF,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAuB;IAC/D,MAAM,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,kBAAkB;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IAErF,MAAM,MAAM,GAAgB,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,GAAG,KAAK,CAAC;QAAC,CAAC;QACnE,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA4B,CAAC;YAClF,MAAM,KAAK,GAAG,MAAM,EAAE,WAAkD,CAAC;YACzE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvC,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAU,EAAE,CAAC;oBACvD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;wBACvB,KAAK,MAAM,CAAC,IAAI,GAAG;4BAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;gCAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACzE,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,YAAY,EAAE,0BAA0B,IAAI,8BAA8B,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;YAC9F,OAAO,GAAG,IAAI,CAAC;YACf,MAAM;QACR,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACtC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mBAAmB;AACnB,MAAM,UAAU,gBAAgB;IAC9B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAOD,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,CAAC,GAAG,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,OAAe;IACpD,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,OAAO,KAAK,IAAI,CAAC;AAC1B,CAAC;AAED;wDACwD;AACxD,SAAS,YAAY,CAAC,IAAgB,EAAE,IAAY,EAAE,OAA2B;IAC/E,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,CAAC,mCAAmC;QAC3E,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YACxC,wEAAwE;YACxE,qEAAqE;YACrE,0CAA0C;eACvC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,CAAC;IACvF,CAAC;IACD,2EAA2E;IAC3E,kEAAkE;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,SAAS,aAAa,CAAC,IAAgB,EAAE,IAAY,EAAE,OAA2B;IAChF,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,SAA8C,EAC9C,GAAuB;IAEvB,MAAM,KAAK,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,OAAO,GAAG,OAAO,SAAS,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAEvF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,MAAM,CAAC;IACnE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;IACpE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,MAAM,IAAI,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"claude-permission-rules.js","sourceRoot":"","sources":["../src/claude-permission-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EACL,uBAAuB,IAAI,mBAAmB,EAC9C,kBAAkB,EAClB,kBAAkB,GAGnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAKpC,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAOD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;AAEjD,4EAA4E;AAC5E,IAAI,YAAY,GAAkB,IAAI,CAAC;AACvC,MAAM,UAAU,wBAAwB,CAAC,IAAmB;IAC1D,YAAY,GAAG,IAAI,CAAC;IACpB,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAuB;IACjD,MAAM,IAAI,GAAG,YAAY,IAAI,OAAO,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG;QACZ,+EAA+E;QAC/E,+DAA+D;QAC/D,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,CAAC;KAC7C,CAAC;IACF,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAuB;IAC/D,MAAM,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,kBAAkB;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IAErF,MAAM,MAAM,GAAgB,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,GAAG,KAAK,CAAC;QAAC,CAAC;QACnE,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA4B,CAAC;YAClF,MAAM,KAAK,GAAG,MAAM,EAAE,WAAkD,CAAC;YACzE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvC,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAU,EAAE,CAAC;oBACvD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;wBACvB,KAAK,MAAM,CAAC,IAAI,GAAG;4BAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;gCAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACzE,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,YAAY,EAAE,0BAA0B,IAAI,8BAA8B,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;YAC9F,OAAO,GAAG,IAAI,CAAC;YACf,MAAM;QACR,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACtC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mBAAmB;AACnB,MAAM,UAAU,gBAAgB;IAC9B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,SAA8C,EAC9C,GAAuB,EACvB,cAAuB;IAEvB,MAAM,OAAO,GAAG,OAAO,SAAS,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,OAAO,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,yBAAyB,CAAC,GAAG,CAAC,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;AAChG,CAAC"}

package/dist/claude-usage-recovery.d.ts

@@ -0,0 +1,54 @@
+export declare const CLAUDE_USAGE_RECOVERY_FILE: string;
+/** Claude owns the rotating refresh token and its interprocess lock. Never copy,
+ * rotate, or write those credentials ourselves. This bounded turn may consume a
+ * small amount of subscription quota; it carries no workspace or user content.
+ * --bare is NOT appropriate: that mode explicitly disables OAuth/keychain reads.
+ * An older CLI rejecting --safe-mode fails closed rather than loading hooks.
+ */
+export declare const CLAUDE_USAGE_RECOVERY_ARGS: string[];
+/** Keep the recovery CLI on the same credential store as usage-api.ts.
+ * On macOS that reader targets the default Keychain service; a custom config
+ * directory can select a DIFFERENT Keychain namespace in Claude. Fail closed
+ * rather than spend quota or renew an unrelated account. On other platforms,
+ * resolve relative paths before the child changes cwd to the temporary folder.
+ */
+export declare function buildClaudeUsageRecoveryEnv(source?: NodeJS.ProcessEnv, platform?: NodeJS.Platform, home?: string): NodeJS.ProcessEnv | null;
+/** `execFile` runs one executable — it does not search PATHEXT and (since the
+ * Node 20.12/18.20 spawn hardening) will not run a `.cmd`/`.bat` shim without a
+ * shell. A bare `'claude'` was therefore ENOENT on every Windows install, and a
+ * LaunchAgent carries the installing shell's PATH, which may not contain the
+ * CLI at all — both surfaced only as a recurring generic failure line. Resolve
+ * the real file once so the unavailable case can SAY it is unavailable.
+ * Returns `{ shim: true }` for a Windows shell shim: shell-quoting a JSON
+ * argument through cmd.exe is a worse failure than declining, so recovery is
+ * skipped there and says so. */
+export declare function resolveClaudeCli(env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): {
+    path: string;
+    shim: boolean;
+} | null;
+export declare function runClaudeUsageRecovery(): Promise<void>;
+/** Kill any in-flight recovery child. Called from the daemon's shutdown path;
+ *  safe to call with none running. */
+export declare function stopClaudeUsageRecoveryChildren(): void;
+interface RecoveryRecord {
+    credentialHash: string;
+    attempts: number;
+    nextAttemptAt: number;
+}
+interface RecoveryDependencies {
+    now: () => number;
+    read: () => RecoveryRecord | null;
+    write: (record: RecoveryRecord) => void;
+    run: () => Promise<void>;
+}
+/** Single daemon owner; persisted cooldown also survives daemon restart. */
+export declare class ClaudeUsageRecovery {
+    private deps;
+    private pending;
+    private record;
+    constructor(deps: RecoveryDependencies);
+    recover(accessToken: string): Promise<void>;
+}
+export declare const claudeUsageRecovery: ClaudeUsageRecovery;
+export {};
+//# sourceMappingURL=claude-usage-recovery.d.ts.map

package/dist/claude-usage-recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-usage-recovery.d.ts","sourceRoot":"","sources":["../src/claude-usage-recovery.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,0BAA0B,QAAoD,CAAC;AAE5F;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,UAMtC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,GAAE,MAAM,CAAC,UAAwB,EACvC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,IAAI,SAAY,GACf,MAAM,CAAC,UAAU,GAAG,IAAI,CAe1B;AAED;;;;;;;;gCAQgC;AAChC,wBAAgB,gBAAgB,CAC9B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAgBxC;AASD,wBAAgB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAqCtD;AAMD;sCACsC;AACtC,wBAAgB,+BAA+B,IAAI,IAAI,CAKtD;AAED,UAAU,cAAc;IAAG,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE;AAC5F,UAAU,oBAAoB;IAC5B,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,cAAc,GAAG,IAAI,CAAC;IAClC,KAAK,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,CAAC;IACxC,GAAG,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,4EAA4E;AAC5E,qBAAa,mBAAmB;IAGlB,OAAO,CAAC,IAAI;IAFxB,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,MAAM,CAA+B;gBACzB,IAAI,EAAE,oBAAoB;IAExC,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAclD;AAED,eAAO,MAAM,mBAAmB,qBAkB9B,CAAC"}