@agentwares/agentguard 0.1.9 → 0.1.10

package/CHANGELOG.md

@@ -3,6 +3,39 @@
 `@agentwares/agentguard`, the CLI and MCP proxy. A tag `agentguard-v<version>` publishes the
 GitHub Release for a version with its section below as the notes.
 
+## 0.1.10 — 2026-10-08
+
+### Changed
+
+- **agentguard is now okgate.** "Nothing irreversible without an OK." The CLI calls itself
+  `okgate`, and npm serves it as a second bin of this package until `@agentwares/okgate` is
+  published: `npx -p @agentwares/agentguard okgate init`. Everything it writes from now on uses
+  the new names: `okgate.yaml`, `.okgate/`, `OKGATE_*`, the `okgate` MCP server entry, the
+  `okgate_get_status` / `okgate_get_report` / `okgate_verify_audit_log` tools, `X-Okgate-Key`,
+  and hook commands that run `npx -y -p @agentwares/agentguard@<version> okgate hook pre-tool-use`.
+- The server registers in the MCP Registry as `io.github.agentwares/okgate` (`mcpName`).
+
+### Kept working (until at least 2027-01-15)
+
+- The `agentguard` bin, and `npx @agentwares/agentguard`, which runs it.
+- `agentguard.yaml` is read when there is no `okgate.yaml`, including walking up from a coding
+  agent's working directory; creating an `okgate.yaml` beside it counts as editing the guard.
+- An existing `.agentguard/` stays the state directory when there is no `.okgate/`, so counters,
+  pending approvals and the audit log's hash chain carry on: `okgate verify` passes across the
+  rename. Both directories are the guard's own and refused to a coding agent.
+- Each `AGENTGUARD_*` variable applies when its `OKGATE_*` twin is unset. **`AGENTGUARD_KILL=1`
+  and `OKGATE_KILL=1` both halt everything, whatever `kill.env` the policy names**, and a KILL
+  file under either directory halts; `okgate kill` writes both that exist and `resume` clears both.
+- `hooks status`, `hooks uninstall` and `hooks install` recognise agentguard-era hook entries
+  (install replaces one, it never adds a second); `init` recognises the old `agentguard` MCP entry
+  and `init --undo` restores a `*.agentguard-backup`; `connect` replaces an `agentguard` entry.
+- `tools/list` shows only `okgate_*`; a `tools/call` for an `agentguard_*` name runs its twin with
+  a deprecation note in `_meta["okgate/deprecation"]` until 2027-01-15, then answers
+  `TOOL_RENAMED` (`retryable: false`, with the new name in `fix`). Tool results carry the verdict
+  under `_meta.okgate` and, for the window, `_meta.agentguard`.
+- `<!-- agentguard: … -->` inline checks, `X-Agentguard-Key`, and `_meta["agentguard/runId"]`.
+- `permission-diff` (and the GitHub Action) diffs `okgate.yaml` and `agentguard.yaml` alike.
+
 ## 0.1.9 — 2026-10-07
 
 ### Added

package/dist/audit-5LUDXZLG.js

@@ -0,0 +1,18 @@
+import {
+  TEAM_HISTORY_LINE,
+  TEAM_HISTORY_URL,
+  auditCommand,
+  parseSince
+} from "./chunk-YBVD6HTT.js";
+import "./chunk-F73VDY3W.js";
+import "./chunk-2QDPPTPY.js";
+import "./chunk-XPNBYSIN.js";
+import "./chunk-4WTFMFRY.js";
+import "./chunk-5WRI5ZAA.js";
+export {
+  TEAM_HISTORY_LINE,
+  TEAM_HISTORY_URL,
+  auditCommand,
+  parseSince
+};
+//# sourceMappingURL=audit-5LUDXZLG.js.map

package/dist/chunk-2QDPPTPY.js

@@ -0,0 +1,179 @@
+// src/hooks/clients.ts
+import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { dirname, join } from "path";
+import {
+  LEGACY_POLICY_FILE,
+  LEGACY_STATE_DIR,
+  POLICY_FILE,
+  STATE_DIR
+} from "@agentwares/agentguard-core";
+var MATCHERS = {
+  "claude-code": "^(Bash|PowerShell|Write|Edit|MultiEdit|NotebookEdit)$|^mcp__",
+  codex: "^(Bash|apply_patch)$|^mcp__",
+  "gemini-cli": "^(run_shell_command|write_file|replace)$|^mcp_"
+};
+var CLIENT_ALIASES = {
+  claude: "claude-code",
+  "claude-code": "claude-code",
+  codex: "codex",
+  gemini: "gemini-cli",
+  "gemini-cli": "gemini-cli"
+};
+function hookTarget(client, scope, where, command, timeoutS = 30) {
+  const root = scope === "project" ? where.cwd : where.home;
+  if (client === "claude-code")
+    return {
+      client,
+      label: "Claude Code",
+      scope,
+      settingsPath: join(root, ".claude", "settings.json"),
+      event: "PreToolUse",
+      matcher: MATCHERS[client],
+      handler: { type: "command", command, timeout: timeoutS, statusMessage: "okgate" }
+    };
+  if (client === "codex")
+    return {
+      client,
+      label: "Codex CLI",
+      scope,
+      settingsPath: join(root, ".codex", "hooks.json"),
+      event: "PreToolUse",
+      matcher: MATCHERS[client],
+      handler: { type: "command", command, timeout: timeoutS, statusMessage: "okgate" },
+      note: "Codex runs a new hook only after you trust it: open /hooks in Codex and trust the okgate entry."
+    };
+  return {
+    client,
+    label: "Gemini CLI",
+    scope,
+    settingsPath: join(root, ".gemini", "settings.json"),
+    event: "BeforeTool",
+    matcher: MATCHERS[client],
+    handler: {
+      name: "okgate",
+      type: "command",
+      command,
+      timeout: timeoutS * 1e3,
+      description: "okgate: one rulebook for shell commands and file edits"
+    },
+    note: scope === "project" ? "Gemini CLI fingerprints project hooks: confirm the okgate hook the first time it asks." : void 0
+  };
+}
+function isGuardHookCommand(command) {
+  return typeof command === "string" && /okgate|agentguard/.test(command) && /\bhook\s+pre-tool-use\b/.test(command);
+}
+function backupFor(path) {
+  const legacy = `${path}.agentguard-backup`;
+  const next = `${path}.okgate-backup`;
+  return { existing: [legacy, next].find((b) => existsSync(b)), next };
+}
+function readSettings(path) {
+  if (!existsSync(path)) return {};
+  const text = readFileSync(path, "utf8");
+  if (!text.trim()) return {};
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch (err) {
+    throw new Error(
+      `${path} is not valid JSON (${err instanceof Error ? err.message : String(err)}); fix it or move it aside \u2014 okgate will not overwrite it`,
+      { cause: err }
+    );
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+    throw new Error(`${path} is not a JSON object; okgate will not overwrite it`);
+  return parsed;
+}
+function groupsOf(settings, event) {
+  const hooks = settings.hooks;
+  if (!hooks || typeof hooks !== "object") return [];
+  const groups = hooks[event];
+  return Array.isArray(groups) ? groups : [];
+}
+function installedHandlers(target) {
+  const settings = readSettings(target.settingsPath);
+  return groupsOf(settings, target.event).flatMap(
+    (g) => (g.hooks ?? []).filter((h) => isGuardHookCommand(h.command))
+  );
+}
+function installHook(target) {
+  const existed = existsSync(target.settingsPath);
+  const settings = readSettings(target.settingsPath);
+  const hooks = settings.hooks && typeof settings.hooks === "object" ? settings.hooks : {};
+  const groups = groupsOf(settings, target.event);
+  const isOurs = (h) => isGuardHookCommand(h.command);
+  const ours = groups.flatMap((g) => (g.hooks ?? []).filter(isOurs));
+  const exact = groups.some(
+    (g) => g.matcher === target.matcher && g.hooks?.length === 1 && JSON.stringify(g.hooks[0]) === JSON.stringify(target.handler)
+  );
+  if (exact && ours.length === 1) return { status: "unchanged" };
+  const kept = [];
+  for (const group of groups) {
+    if (!(group.hooks ?? []).some(isOurs)) {
+      kept.push(group);
+      continue;
+    }
+    const others = (group.hooks ?? []).filter((h) => !isOurs(h));
+    if (others.length > 0) kept.push({ ...group, hooks: others });
+  }
+  kept.push({ matcher: target.matcher, hooks: [target.handler] });
+  const status = ours.length > 0 ? "updated" : "added";
+  hooks[target.event] = kept;
+  settings.hooks = hooks;
+  let backup;
+  if (existed) {
+    const { existing, next } = backupFor(target.settingsPath);
+    backup = existing ?? next;
+    if (!existing) copyFileSync(target.settingsPath, backup);
+  }
+  mkdirSync(dirname(target.settingsPath), { recursive: true });
+  writeFileSync(target.settingsPath, JSON.stringify(settings, null, 2) + "\n");
+  return { status, backup };
+}
+function uninstallHook(target) {
+  if (!existsSync(target.settingsPath)) return 0;
+  const settings = readSettings(target.settingsPath);
+  const groups = groupsOf(settings, target.event);
+  let removed = 0;
+  const kept = [];
+  for (const group of groups) {
+    const others = (group.hooks ?? []).filter((h) => !isGuardHookCommand(h.command));
+    removed += (group.hooks ?? []).length - others.length;
+    if (others.length > 0) kept.push({ ...group, hooks: others });
+  }
+  if (removed === 0) return 0;
+  const hooks = settings.hooks;
+  if (kept.length > 0) hooks[target.event] = kept;
+  else delete hooks[target.event];
+  if (Object.keys(hooks).length === 0) delete settings.hooks;
+  writeFileSync(target.settingsPath, JSON.stringify(settings, null, 2) + "\n");
+  return removed;
+}
+function hookSettingsFiles(where) {
+  const out = [];
+  for (const root of [where.cwd, where.home]) {
+    out.push(
+      join(root, ".claude", "settings.json"),
+      join(root, ".claude", "settings.local.json"),
+      join(root, ".codex", "hooks.json"),
+      join(root, ".codex", "config.toml"),
+      join(root, ".gemini", "settings.json")
+    );
+  }
+  out.push(
+    join(where.home, STATE_DIR, POLICY_FILE),
+    join(where.home, LEGACY_STATE_DIR, LEGACY_POLICY_FILE)
+  );
+  return out;
+}
+
+export {
+  CLIENT_ALIASES,
+  hookTarget,
+  backupFor,
+  installedHandlers,
+  installHook,
+  uninstallHook,
+  hookSettingsFiles
+};
+//# sourceMappingURL=chunk-2QDPPTPY.js.map

package/dist/chunk-2QDPPTPY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/hooks/clients.ts"],"sourcesContent":["/**\n * Where each coding agent reads its pre-execution hooks, and the entry okgate writes there.\n * Verified 7 October 2026 against:\n *\n * - Claude Code: https://code.claude.com/docs/en/hooks — `hooks.PreToolUse[]` in\n *   `.claude/settings.json` (project) or `~/.claude/settings.json` (user); a matcher with\n *   characters beyond letters, digits, `_`, `-`, `,` and `|` is an unanchored regex; `timeout`\n *   in seconds.\n * - Codex CLI: https://developers.openai.com/codex/hooks — `hooks.PreToolUse[]` in\n *   `.codex/hooks.json` or `~/.codex/hooks.json`; the matcher is a regex over the tool name\n *   (`Bash`, `apply_patch`, `mcp__…`); `timeout` in seconds; a new hook runs only after the user\n *   trusts it in `/hooks`.\n * - Gemini CLI: https://github.com/google-gemini/gemini-cli/blob/main/docs/hooks/reference.md —\n *   `hooks.BeforeTool[]` in `.gemini/settings.json` or `~/.gemini/settings.json`; regex matcher\n *   over `run_shell_command`, `write_file`, `replace`, `mcp_…`; `timeout` in milliseconds.\n */\nimport { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport {\n  LEGACY_POLICY_FILE,\n  LEGACY_STATE_DIR,\n  POLICY_FILE,\n  STATE_DIR,\n  type HookClient,\n} from \"@agentwares/agentguard-core\";\n\nexport type InstallScope = \"project\" | \"user\";\n\nexport interface HookTarget {\n  client: HookClient;\n  label: string;\n  scope: InstallScope;\n  settingsPath: string;\n  event: \"PreToolUse\" | \"BeforeTool\";\n  matcher: string;\n  handler: Record<string, unknown>;\n  /** what the user has to do in the client before the hook runs */\n  note?: string;\n}\n\n/** Tools worth a check: the shell, file writes and MCP tools. Reads are left alone. */\nexport const MATCHERS: Record<HookClient, string> = {\n  \"claude-code\": \"^(Bash|PowerShell|Write|Edit|MultiEdit|NotebookEdit)$|^mcp__\",\n  codex: \"^(Bash|apply_patch)$|^mcp__\",\n  \"gemini-cli\": \"^(run_shell_command|write_file|replace)$|^mcp_\",\n};\n\nexport const CLIENT_ALIASES: Record<string, HookClient> = {\n  claude: \"claude-code\",\n  \"claude-code\": \"claude-code\",\n  codex: \"codex\",\n  gemini: \"gemini-cli\",\n  \"gemini-cli\": \"gemini-cli\",\n};\n\nexport function hookTarget(\n  client: HookClient,\n  scope: InstallScope,\n  where: { cwd: string; home: string },\n  command: string,\n  timeoutS = 30,\n): HookTarget {\n  const root = scope === \"project\" ? where.cwd : where.home;\n  if (client === \"claude-code\")\n    return {\n      client,\n      label: \"Claude Code\",\n      scope,\n      settingsPath: join(root, \".claude\", \"settings.json\"),\n      event: \"PreToolUse\",\n      matcher: MATCHERS[client],\n      handler: { type: \"command\", command, timeout: timeoutS, statusMessage: \"okgate\" },\n    };\n  if (client === \"codex\")\n    return {\n      client,\n      label: \"Codex CLI\",\n      scope,\n      settingsPath: join(root, \".codex\", \"hooks.json\"),\n      event: \"PreToolUse\",\n      matcher: MATCHERS[client],\n      handler: { type: \"command\", command, timeout: timeoutS, statusMessage: \"okgate\" },\n      note: \"Codex runs a new hook only after you trust it: open /hooks in Codex and trust the okgate entry.\",\n    };\n  return {\n    client,\n    label: \"Gemini CLI\",\n    scope,\n    settingsPath: join(root, \".gemini\", \"settings.json\"),\n    event: \"BeforeTool\",\n    matcher: MATCHERS[client],\n    handler: {\n      name: \"okgate\",\n      type: \"command\",\n      command,\n      timeout: timeoutS * 1000,\n      description: \"okgate: one rulebook for shell commands and file edits\",\n    },\n    note:\n      scope === \"project\"\n        ? \"Gemini CLI fingerprints project hooks: confirm the okgate hook the first time it asks.\"\n        : undefined,\n  };\n}\n\n/** Is this hook command one okgate wrote, under either name (agentguard before the rename)? */\nexport function isGuardHookCommand(command: unknown): boolean {\n  return (\n    typeof command === \"string\" &&\n    /okgate|agentguard/.test(command) &&\n    /\\bhook\\s+pre-tool-use\\b/.test(command)\n  );\n}\n\n/**\n * The backup of a file okgate rewrites: `<file>.okgate-backup`, or the `<file>.agentguard-backup`\n * an okgate-era install left, which holds the older original and so wins.\n */\nexport function backupFor(path: string): { existing?: string; next: string } {\n  const legacy = `${path}.agentguard-backup`;\n  const next = `${path}.okgate-backup`;\n  return { existing: [legacy, next].find((b) => existsSync(b)), next };\n}\n\ntype Json = Record<string, unknown>;\ninterface MatcherGroup {\n  matcher?: string;\n  hooks?: Json[];\n  [k: string]: unknown;\n}\n\nfunction readSettings(path: string): Json {\n  if (!existsSync(path)) return {};\n  const text = readFileSync(path, \"utf8\");\n  if (!text.trim()) return {};\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text);\n  } catch (err) {\n    throw new Error(\n      `${path} is not valid JSON (${err instanceof Error ? err.message : String(err)}); fix it or move it aside — okgate will not overwrite it`,\n      { cause: err },\n    );\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed))\n    throw new Error(`${path} is not a JSON object; okgate will not overwrite it`);\n  return parsed as Json;\n}\n\nfunction groupsOf(settings: Json, event: string): MatcherGroup[] {\n  const hooks = settings.hooks;\n  if (!hooks || typeof hooks !== \"object\") return [];\n  const groups = (hooks as Json)[event];\n  return Array.isArray(groups) ? (groups as MatcherGroup[]) : [];\n}\n\n/** The okgate handlers currently in a settings file. */\nexport function installedHandlers(target: HookTarget): Json[] {\n  const settings = readSettings(target.settingsPath);\n  return groupsOf(settings, target.event).flatMap((g) =>\n    (g.hooks ?? []).filter((h) => isGuardHookCommand(h.command)),\n  );\n}\n\n/**\n * Write (or update in place) the okgate entry, keeping every other setting and hook. The\n * first change to an existing file leaves a `*.okgate-backup` next to it (or keeps an agentguard-era `*.agentguard-backup`).\n */\nexport function installHook(target: HookTarget): {\n  status: \"added\" | \"updated\" | \"unchanged\";\n  backup?: string;\n} {\n  const existed = existsSync(target.settingsPath);\n  const settings = readSettings(target.settingsPath);\n  const hooks = (\n    settings.hooks && typeof settings.hooks === \"object\" ? settings.hooks : {}\n  ) as Json;\n  const groups = groupsOf(settings, target.event);\n  const isOurs = (h: Json): boolean => isGuardHookCommand(h.command);\n  const ours = groups.flatMap((g) => (g.hooks ?? []).filter(isOurs));\n  const exact = groups.some(\n    (g) =>\n      g.matcher === target.matcher &&\n      g.hooks?.length === 1 &&\n      JSON.stringify(g.hooks[0]) === JSON.stringify(target.handler),\n  );\n  if (exact && ours.length === 1) return { status: \"unchanged\" };\n  const kept: MatcherGroup[] = [];\n  for (const group of groups) {\n    if (!(group.hooks ?? []).some(isOurs)) {\n      kept.push(group);\n      continue;\n    }\n    const others = (group.hooks ?? []).filter((h) => !isOurs(h));\n    if (others.length > 0) kept.push({ ...group, hooks: others });\n  }\n  kept.push({ matcher: target.matcher, hooks: [target.handler] });\n  const status = ours.length > 0 ? \"updated\" : \"added\";\n  hooks[target.event] = kept;\n  settings.hooks = hooks;\n  let backup: string | undefined;\n  if (existed) {\n    const { existing, next } = backupFor(target.settingsPath);\n    backup = existing ?? next;\n    if (!existing) copyFileSync(target.settingsPath, backup);\n  }\n  mkdirSync(dirname(target.settingsPath), { recursive: true });\n  writeFileSync(target.settingsPath, JSON.stringify(settings, null, 2) + \"\\n\");\n  return { status, backup };\n}\n\n/** Remove okgate's entries; other hooks and settings stay. Returns how many were removed. */\nexport function uninstallHook(target: HookTarget): number {\n  if (!existsSync(target.settingsPath)) return 0;\n  const settings = readSettings(target.settingsPath);\n  const groups = groupsOf(settings, target.event);\n  let removed = 0;\n  const kept: MatcherGroup[] = [];\n  for (const group of groups) {\n    const others = (group.hooks ?? []).filter((h) => !isGuardHookCommand(h.command));\n    removed += (group.hooks ?? []).length - others.length;\n    if (others.length > 0) kept.push({ ...group, hooks: others });\n  }\n  if (removed === 0) return 0;\n  const hooks = settings.hooks as Json;\n  if (kept.length > 0) hooks[target.event] = kept;\n  else delete hooks[target.event];\n  if (Object.keys(hooks).length === 0) delete settings.hooks;\n  writeFileSync(target.settingsPath, JSON.stringify(settings, null, 2) + \"\\n\");\n  return removed;\n}\n\n/** Every settings file that can hold a hook, project and user level: edits to them are guard-config. */\nexport function hookSettingsFiles(where: { cwd: string; home: string }): string[] {\n  const out: string[] = [];\n  for (const root of [where.cwd, where.home]) {\n    out.push(\n      join(root, \".claude\", \"settings.json\"),\n      join(root, \".claude\", \"settings.local.json\"),\n      join(root, \".codex\", \"hooks.json\"),\n      join(root, \".codex\", \"config.toml\"),\n      join(root, \".gemini\", \"settings.json\"),\n    );\n  }\n  out.push(\n    join(where.home, STATE_DIR, POLICY_FILE),\n    join(where.home, LEGACY_STATE_DIR, LEGACY_POLICY_FILE),\n  );\n  return out;\n}\n"],"mappings":";AAgBA,SAAS,cAAc,YAAY,WAAW,cAAc,qBAAqB;AACjF,SAAS,SAAS,YAAY;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAiBA,IAAM,WAAuC;AAAA,EAClD,eAAe;AAAA,EACf,OAAO;AAAA,EACP,cAAc;AAChB;AAEO,IAAM,iBAA6C;AAAA,EACxD,QAAQ;AAAA,EACR,eAAe;AAAA,EACf,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,cAAc;AAChB;AAEO,SAAS,WACd,QACA,OACA,OACA,SACA,WAAW,IACC;AACZ,QAAM,OAAO,UAAU,YAAY,MAAM,MAAM,MAAM;AACrD,MAAI,WAAW;AACb,WAAO;AAAA,MACL;AAAA,MACA,OAAO;AAAA,MACP;AAAA,MACA,cAAc,KAAK,MAAM,WAAW,eAAe;AAAA,MACnD,OAAO;AAAA,MACP,SAAS,SAAS,MAAM;AAAA,MACxB,SAAS,EAAE,MAAM,WAAW,SAAS,SAAS,UAAU,eAAe,SAAS;AAAA,IAClF;AACF,MAAI,WAAW;AACb,WAAO;AAAA,MACL;AAAA,MACA,OAAO;AAAA,MACP;AAAA,MACA,cAAc,KAAK,MAAM,UAAU,YAAY;AAAA,MAC/C,OAAO;AAAA,MACP,SAAS,SAAS,MAAM;AAAA,MACxB,SAAS,EAAE,MAAM,WAAW,SAAS,SAAS,UAAU,eAAe,SAAS;AAAA,MAChF,MAAM;AAAA,IACR;AACF,SAAO;AAAA,IACL;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA,cAAc,KAAK,MAAM,WAAW,eAAe;AAAA,IACnD,OAAO;AAAA,IACP,SAAS,SAAS,MAAM;AAAA,IACxB,SAAS;AAAA,MACP,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,MACA,SAAS,WAAW;AAAA,MACpB,aAAa;AAAA,IACf;AAAA,IACA,MACE,UAAU,YACN,2FACA;AAAA,EACR;AACF;AAGO,SAAS,mBAAmB,SAA2B;AAC5D,SACE,OAAO,YAAY,YACnB,oBAAoB,KAAK,OAAO,KAChC,0BAA0B,KAAK,OAAO;AAE1C;AAMO,SAAS,UAAU,MAAmD;AAC3E,QAAM,SAAS,GAAG,IAAI;AACtB,QAAM,OAAO,GAAG,IAAI;AACpB,SAAO,EAAE,UAAU,CAAC,QAAQ,IAAI,EAAE,KAAK,CAAC,MAAM,WAAW,CAAC,CAAC,GAAG,KAAK;AACrE;AASA,SAAS,aAAa,MAAoB;AACxC,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO,CAAC;AAC/B,QAAM,OAAO,aAAa,MAAM,MAAM;AACtC,MAAI,CAAC,KAAK,KAAK,EAAG,QAAO,CAAC;AAC1B,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,IAAI;AAAA,EAC1B,SAAS,KAAK;AACZ,UAAM,IAAI;AAAA,MACR,GAAG,IAAI,uBAAuB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,MAC9E,EAAE,OAAO,IAAI;AAAA,IACf;AAAA,EACF;AACA,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM;AAC/D,UAAM,IAAI,MAAM,GAAG,IAAI,qDAAqD;AAC9E,SAAO;AACT;AAEA,SAAS,SAAS,UAAgB,OAA+B;AAC/D,QAAM,QAAQ,SAAS;AACvB,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO,CAAC;AACjD,QAAM,SAAU,MAAe,KAAK;AACpC,SAAO,MAAM,QAAQ,MAAM,IAAK,SAA4B,CAAC;AAC/D;AAGO,SAAS,kBAAkB,QAA4B;AAC5D,QAAM,WAAW,aAAa,OAAO,YAAY;AACjD,SAAO,SAAS,UAAU,OAAO,KAAK,EAAE;AAAA,IAAQ,CAAC,OAC9C,EAAE,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,mBAAmB,EAAE,OAAO,CAAC;AAAA,EAC7D;AACF;AAMO,SAAS,YAAY,QAG1B;AACA,QAAM,UAAU,WAAW,OAAO,YAAY;AAC9C,QAAM,WAAW,aAAa,OAAO,YAAY;AACjD,QAAM,QACJ,SAAS,SAAS,OAAO,SAAS,UAAU,WAAW,SAAS,QAAQ,CAAC;AAE3E,QAAM,SAAS,SAAS,UAAU,OAAO,KAAK;AAC9C,QAAM,SAAS,CAAC,MAAqB,mBAAmB,EAAE,OAAO;AACjE,QAAM,OAAO,OAAO,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,OAAO,MAAM,CAAC;AACjE,QAAM,QAAQ,OAAO;AAAA,IACnB,CAAC,MACC,EAAE,YAAY,OAAO,WACrB,EAAE,OAAO,WAAW,KACpB,KAAK,UAAU,EAAE,MAAM,CAAC,CAAC,MAAM,KAAK,UAAU,OAAO,OAAO;AAAA,EAChE;AACA,MAAI,SAAS,KAAK,WAAW,EAAG,QAAO,EAAE,QAAQ,YAAY;AAC7D,QAAM,OAAuB,CAAC;AAC9B,aAAW,SAAS,QAAQ;AAC1B,QAAI,EAAE,MAAM,SAAS,CAAC,GAAG,KAAK,MAAM,GAAG;AACrC,WAAK,KAAK,KAAK;AACf;AAAA,IACF;AACA,UAAM,UAAU,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3D,QAAI,OAAO,SAAS,EAAG,MAAK,KAAK,EAAE,GAAG,OAAO,OAAO,OAAO,CAAC;AAAA,EAC9D;AACA,OAAK,KAAK,EAAE,SAAS,OAAO,SAAS,OAAO,CAAC,OAAO,OAAO,EAAE,CAAC;AAC9D,QAAM,SAAS,KAAK,SAAS,IAAI,YAAY;AAC7C,QAAM,OAAO,KAAK,IAAI;AACtB,WAAS,QAAQ;AACjB,MAAI;AACJ,MAAI,SAAS;AACX,UAAM,EAAE,UAAU,KAAK,IAAI,UAAU,OAAO,YAAY;AACxD,aAAS,YAAY;AACrB,QAAI,CAAC,SAAU,cAAa,OAAO,cAAc,MAAM;AAAA,EACzD;AACA,YAAU,QAAQ,OAAO,YAAY,GAAG,EAAE,WAAW,KAAK,CAAC;AAC3D,gBAAc,OAAO,cAAc,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI,IAAI;AAC3E,SAAO,EAAE,QAAQ,OAAO;AAC1B;AAGO,SAAS,cAAc,QAA4B;AACxD,MAAI,CAAC,WAAW,OAAO,YAAY,EAAG,QAAO;AAC7C,QAAM,WAAW,aAAa,OAAO,YAAY;AACjD,QAAM,SAAS,SAAS,UAAU,OAAO,KAAK;AAC9C,MAAI,UAAU;AACd,QAAM,OAAuB,CAAC;AAC9B,aAAW,SAAS,QAAQ;AAC1B,UAAM,UAAU,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,CAAC;AAC/E,gBAAY,MAAM,SAAS,CAAC,GAAG,SAAS,OAAO;AAC/C,QAAI,OAAO,SAAS,EAAG,MAAK,KAAK,EAAE,GAAG,OAAO,OAAO,OAAO,CAAC;AAAA,EAC9D;AACA,MAAI,YAAY,EAAG,QAAO;AAC1B,QAAM,QAAQ,SAAS;AACvB,MAAI,KAAK,SAAS,EAAG,OAAM,OAAO,KAAK,IAAI;AAAA,MACtC,QAAO,MAAM,OAAO,KAAK;AAC9B,MAAI,OAAO,KAAK,KAAK,EAAE,WAAW,EAAG,QAAO,SAAS;AACrD,gBAAc,OAAO,cAAc,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI,IAAI;AAC3E,SAAO;AACT;AAGO,SAAS,kBAAkB,OAAgD;AAChF,QAAM,MAAgB,CAAC;AACvB,aAAW,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG;AAC1C,QAAI;AAAA,MACF,KAAK,MAAM,WAAW,eAAe;AAAA,MACrC,KAAK,MAAM,WAAW,qBAAqB;AAAA,MAC3C,KAAK,MAAM,UAAU,YAAY;AAAA,MACjC,KAAK,MAAM,UAAU,aAAa;AAAA,MAClC,KAAK,MAAM,WAAW,eAAe;AAAA,IACvC;AAAA,EACF;AACA,MAAI;AAAA,IACF,KAAK,MAAM,MAAM,WAAW,WAAW;AAAA,IACvC,KAAK,MAAM,MAAM,kBAAkB,kBAAkB;AAAA,EACvD;AACA,SAAO;AACT;","names":[]}

package/dist/{chunk-SUXQTT3X.js → chunk-4WTFMFRY.js}

@@ -1031,7 +1031,7 @@ async function sendWebhook(url, payload, opts = {}) {
 function approvalSlackMessage(event, url) {
   const a = event.approval;
   const argsText = JSON.stringify(a.args ?? {}, null, 2).slice(0, 1500);
-  const text = `[agentguard] approval needed: ${a.tool} (run ${a.run_id}) \u2014 run \`agentguard approve ${a.id}\`${url ? ` or open ${url}` : ""}`;
+  const text = `[okgate] approval needed: ${a.tool} (run ${a.run_id}) \u2014 run \`okgate approve ${a.id}\`${url ? ` or open ${url}` : ""}`;
   const blocks = [
     { type: "header", text: { type: "plain_text", text: `Approval needed: ${a.tool}` } },
     {
@@ -1047,7 +1047,7 @@ function approvalSlackMessage(event, url) {
       elements: [
         {
           type: "mrkdwn",
-          text: `Approve: \`agentguard approve ${a.id}\` \xB7 Deny: \`agentguard deny ${a.id}\` \xB7 expires ${a.expires_at}`
+          text: `Approve: \`okgate approve ${a.id}\` \xB7 Deny: \`okgate deny ${a.id}\` \xB7 expires ${a.expires_at}`
         }
       ]
     }
@@ -1070,7 +1070,7 @@ function approvalSlackMessage(event, url) {
 }
 function haltSlackMessage(event) {
   const cause = event.error?.cause ?? "";
-  const text = `[agentguard] ${event.type}: ${event.tool} (run ${event.runId}) \u2014 ${cause}`;
+  const text = `[okgate] ${event.type}: ${event.tool} (run ${event.runId}) \u2014 ${cause}`;
   return {
     text,
     blocks: [
@@ -1087,7 +1087,7 @@ ${cause}`
         elements: [
           {
             type: "mrkdwn",
-            text: `\`agentguard report --run ${event.runId}\` for the full picture${event.type === "KILLED" ? "" : " \xB7 `agentguard kill` to stop everything"}`
+            text: `\`okgate report --run ${event.runId}\` for the full picture${event.type === "KILLED" ? "" : " \xB7 `okgate kill` to stop everything"}`
           }
         ]
       }
@@ -1119,7 +1119,7 @@ function createAlerter(opts) {
           webhook,
           {
             event: event.type,
-            product: "agentguard",
+            product: "okgate",
             subject: message.text,
             summary: event.error?.cause ?? "",
             occurredAt: event.at,
@@ -1143,18 +1143,22 @@ function createAlerter(opts) {
 
 // src/context.ts
 import { existsSync } from "fs";
-import { resolve } from "path";
-import { Guard } from "@agentwares/agentguard-core";
+import { basename, resolve } from "path";
+import {
+  Guard,
+  POLICY_FILE,
+  envTwin
+} from "@agentwares/agentguard-core";
 import {
   FileApprovalStore,
   FileAuditSink,
-  FileKillSwitch,
   FileStateStore,
+  findPolicyFile,
+  killSwitchFor,
   loadPolicyFile
 } from "@agentwares/agentguard-core/node";
 import { existsSync as exists, readFileSync as readFileSync2 } from "fs";
 import { homedir } from "os";
-var DEFAULT_POLICY_FILE = "agentguard.yaml";
 function readStdin(maxBytes = 16 * 1024 * 1024, timeoutMs = 1e4) {
   if (process.stdin.isTTY) return Promise.resolve("");
   return new Promise((resolveText) => {
@@ -1190,10 +1194,8 @@ function defaultIo() {
   };
 }
 function policyPathFrom(args, io) {
-  return resolve(
-    io.cwd,
-    flagString(args, "config") ?? io.env.AGENTGUARD_CONFIG ?? DEFAULT_POLICY_FILE
-  );
+  const named = flagString(args, "config") ?? envTwin(io.env, "CONFIG");
+  return named !== void 0 ? resolve(io.cwd, named) : findPolicyFile(io.cwd);
 }
 function loadPolicyFor(args, io, opts = {}) {
   return loadPolicyFile(policyPathFrom(args, io), {
@@ -1202,7 +1204,7 @@ function loadPolicyFor(args, io, opts = {}) {
   });
 }
 function createFileGuard(loaded, opts = {}) {
-  const kill = new FileKillSwitch(loaded.killPath);
+  const kill = killSwitchFor(loaded);
   const audit = new FileAuditSink(loaded.auditPath);
   const approvals = new FileApprovalStore(loaded.stateDir);
   const alerter = opts.alerts === false ? void 0 : createAlerter({ policy: loaded.policy, approvalUrl: opts.approvalUrl, log: opts.log });
@@ -1213,6 +1215,7 @@ function createFileGuard(loaded, opts = {}) {
     kill,
     approvals,
     env: opts.env ?? process.env,
+    policyFile: basename(loaded.path),
     approvalUrl: opts.approvalUrl,
     onEvent: async (event) => {
       await opts.onEvent?.(event);
@@ -1255,7 +1258,6 @@ export {
   approvalSlackMessage,
   haltSlackMessage,
   createAlerter,
-  DEFAULT_POLICY_FILE,
   homeFrom,
   defaultIo,
   policyPathFrom,
@@ -1265,4 +1267,4 @@ export {
   approvalUrlFor,
   describeError
 };
-//# sourceMappingURL=chunk-SUXQTT3X.js.map
+//# sourceMappingURL=chunk-4WTFMFRY.js.map