@buyong/pi-codex-auto-review 0.0.0-stage → 0.2.2

package/dist/approval-settings.d.ts

@@ -0,0 +1,9 @@
+import { type GuardSettings } from "./policy/index.js";
+export declare class ApprovalSettingsStore {
+    readonly path: string;
+    private readonly defaults;
+    private readonly isRequired;
+    constructor(path: string, defaults?: Partial<GuardSettings>, isRequired?: boolean);
+    load(): Promise<GuardSettings>;
+    save(settings: GuardSettings): Promise<void>;
+}

package/dist/approval-settings.js

@@ -0,0 +1,47 @@
+import { randomUUID } from "node:crypto";
+import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import { canonicalJson, GuardError } from "./contracts.js";
+import { validateSettings } from "./policy/index.js";
+export class ApprovalSettingsStore {
+    path;
+    defaults;
+    isRequired;
+    constructor(path, defaults = {}, isRequired = false) {
+        this.path = path;
+        this.defaults = defaults;
+        this.isRequired = isRequired;
+    }
+    async load() {
+        try {
+            const stored = JSON.parse(await readFile(this.path, "utf8"));
+            validateSettings(stored);
+            return validateSettings({
+                ...this.defaults,
+                ...stored,
+            });
+        }
+        catch (error) {
+            if (!this.isRequired &&
+                error.code === "ENOENT")
+                return validateSettings(this.defaults);
+            throw new GuardError("INVALID_SETTINGS", "Approval settings could not be loaded", { cause: error });
+        }
+    }
+    async save(settings) {
+        validateSettings(settings);
+        await mkdir(dirname(this.path), { recursive: true, mode: 0o700 });
+        const temporary = `${this.path}.${randomUUID()}.tmp`;
+        try {
+            await writeFile(temporary, `${canonicalJson(settings)}\n`, {
+                flag: "wx",
+                mode: 0o600,
+            });
+            await rename(temporary, this.path);
+        }
+        finally {
+            await rm(temporary, { force: true });
+        }
+    }
+}
+//# sourceMappingURL=approval-settings.js.map

package/dist/approval-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-settings.js","sourceRoot":"","sources":["../src/approval-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAsB,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEzE,MAAM,OAAO,qBAAqB;IAEjB;IACQ;IACA;IAHrB,YACa,IAAY,EACJ,WAAmC,EAAE,EACrC,aAAa,KAAK;QAF1B,SAAI,GAAJ,IAAI,CAAQ;QACJ,aAAQ,GAAR,QAAQ,CAA6B;QACrC,eAAU,GAAV,UAAU,CAAQ;IACpC,CAAC;IACJ,KAAK,CAAC,IAAI;QACN,IAAI,CAAC;YACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAC9B,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CACpC,CAAC;YACF,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACzB,OAAO,gBAAgB,CAAC;gBACpB,GAAG,IAAI,CAAC,QAAQ;gBAChB,GAAI,MAAiC;aACxC,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IACI,CAAC,IAAI,CAAC,UAAU;gBACf,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAElD,OAAO,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,IAAI,UAAU,CAChB,kBAAkB,EAClB,uCAAuC,EACvC,EAAE,KAAK,EAAE,KAAK,EAAE,CACnB,CAAC;QACN,CAAC;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,QAAuB;QAC9B,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;QACrD,IAAI,CAAC;YACD,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE;gBACvD,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,KAAK;aACd,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;gBAAS,CAAC;YACP,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;IACL,CAAC;CACJ"}

package/dist/approvals.d.ts

@@ -0,0 +1,73 @@
+import type { AuditLog } from "./audit.js";
+import { type ApprovalPolicy, type ExecutionAuthority, type Grant, type GuardAction, type PermissionDelta, type PolicyDecision, type ReviewContext, type ReviewResult } from "./contracts.js";
+import type { GuardSettings } from "./policy/index.js";
+import { ReviewLifecycle } from "./review/lifecycle.js";
+import { type ReviewExecutionContext, type ReviewProvider } from "./reviewer.js";
+import { type Clock } from "./signals.js";
+export type ApprovalChoice = "deny" | "once" | "session" | "persistent";
+export interface ApprovalUI {
+    select(action: GuardAction, delta: PermissionDelta, options: {
+        signal: AbortSignal;
+        timeoutMs: number;
+    }): Promise<ApprovalChoice | undefined>;
+}
+export interface GrantPersistence {
+    load(): Promise<Grant[]>;
+    save(grants: readonly Grant[]): Promise<void>;
+}
+export declare class FileGrantPersistence implements GrantPersistence {
+    readonly path: string;
+    constructor(path: string);
+    load(): Promise<Grant[]>;
+    save(grants: readonly Grant[]): Promise<void>;
+}
+export interface Admission {
+    readonly isAllowed: boolean;
+    readonly delta: PermissionDelta;
+    readonly reason: string;
+    readonly grant?: Grant;
+    readonly review?: ReviewResult;
+    readonly authority?: ExecutionAuthority;
+    readonly denialId?: string;
+}
+export declare class ApprovalManager {
+    readonly options: {
+        reviewTimeoutMs: number;
+        approvalTimeoutMs: number;
+        audit: AuditLog;
+        persistence?: GrantPersistence;
+        clock?: Clock;
+        approvalPolicy?: ApprovalPolicy;
+        approvalsReviewer?: "auto_review" | "user";
+    };
+    readonly lifecycle: ReviewLifecycle;
+    private grants;
+    private tail;
+    private epoch;
+    private sessionId?;
+    constructor(options: {
+        reviewTimeoutMs: number;
+        approvalTimeoutMs: number;
+        audit: AuditLog;
+        persistence?: GrantPersistence;
+        clock?: Clock;
+        approvalPolicy?: ApprovalPolicy;
+        approvalsReviewer?: "auto_review" | "user";
+    });
+    initialize(): Promise<void>;
+    reset(sessionId?: string): void;
+    invalidate(): void;
+    admit(action: GuardAction, policy: PolicyDecision, context: {
+        provider: ReviewProvider;
+        ui?: ApprovalUI;
+        trustedAuthorization: string;
+        signal?: AbortSignal;
+        reviewContext?: ReviewContext;
+        settings?: GuardSettings;
+        executionContext?: ReviewExecutionContext;
+        onReviewStart?: () => void;
+        onReviewResult?: (result?: ReviewResult) => void;
+        onInterrupt?: () => void;
+    }): Promise<Admission>;
+    settle(): Promise<void>;
+}

package/dist/approvals.js

@@ -0,0 +1,288 @@
+import { randomUUID } from "node:crypto";
+import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import { approvalEligible, canonicalJson, digest, EMPTY_DELTA, GuardError, immutable, ruleDigest, } from "./contracts.js";
+import { ReviewLifecycle } from "./review/lifecycle.js";
+import { reviewAction, } from "./reviewer.js";
+import { deadlineSignal, withSignal } from "./signals.js";
+export class FileGrantPersistence {
+    path;
+    constructor(path) {
+        this.path = path;
+    }
+    async load() {
+        try {
+            const data = JSON.parse(await readFile(this.path, "utf8"));
+            if (!Array.isArray(data) ||
+                data.some((value) => value?.scope !== "persistent" ||
+                    typeof value.ruleDigest !== "string" ||
+                    typeof value.policyRevision !== "string" ||
+                    typeof value.permissionDigest !== "string" ||
+                    !value.delta ||
+                    !["readPaths", "writePaths", "domains"].every((key) => Array.isArray(value.delta[key]) &&
+                        value.delta[key].every((x) => typeof x === "string"))))
+                throw new Error("Invalid persistent rules");
+            return immutable(data);
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return [];
+            throw new GuardError("INVALID_GRANTS", "Persistent rules could not be loaded", { cause: error });
+        }
+    }
+    async save(grants) {
+        await mkdir(dirname(this.path), { recursive: true, mode: 0o700 });
+        const temp = `${this.path}.${randomUUID()}.tmp`;
+        try {
+            await writeFile(temp, `${canonicalJson(grants)}\n`, {
+                mode: 0o600,
+                flag: "wx",
+            });
+            await rename(temp, this.path);
+        }
+        finally {
+            await rm(temp, { force: true });
+        }
+    }
+}
+export class ApprovalManager {
+    options;
+    lifecycle = new ReviewLifecycle();
+    grants = [];
+    tail = Promise.resolve();
+    epoch = new AbortController();
+    sessionId;
+    constructor(options) {
+        this.options = options;
+    }
+    async initialize() {
+        this.grants = (await this.options.persistence?.load()) ?? [];
+    }
+    reset(sessionId) {
+        this.epoch.abort(new GuardError("SESSION_CHANGED", "Session changed"));
+        this.epoch = new AbortController();
+        this.sessionId = sessionId;
+        this.grants = this.grants.filter((grant) => grant.scope === "persistent");
+        this.lifecycle.reset();
+    }
+    invalidate() {
+        this.reset(this.sessionId);
+        this.grants = [];
+    }
+    async admit(action, policy, context) {
+        this.sessionId ??= action.sessionId;
+        const signal = AbortSignal.any([
+            this.epoch.signal,
+            ...(action.source === "user-bash" ? [] : [this.lifecycle.signal]),
+            ...(context.signal ? [context.signal] : []),
+        ]);
+        const deny = (reason) => ({
+            isAllowed: false,
+            delta: EMPTY_DELTA,
+            reason,
+        });
+        if (signal.aborted || action.sessionId !== this.sessionId)
+            return deny("Cancelled or stale session");
+        if (policy.actionDigest !== action.digest ||
+            policy.kind === "deny" ||
+            policy.isHardDeny) {
+            await this.options.audit.record(action, "policy", "deny");
+            return deny(policy.reason);
+        }
+        if (policy.authority && policy.authority.actionDigest !== action.digest)
+            return deny("Authority belongs to another action");
+        if (policy.kind === "allow") {
+            await this.options.audit.record(action, "policy", "allow");
+            return {
+                isAllowed: true,
+                delta: policy.delta,
+                authority: policy.authority,
+                reason: policy.reason,
+            };
+        }
+        if (!approvalEligible(this.options.approvalPolicy ?? "on-request", policy.approvalCategory ?? "sandbox"))
+            return deny("Approval policy disables this request category");
+        const obsolete = this.grants.filter((grant) => grant.permissionDigest !== action.permissionDigest ||
+            grant.policyRevision !== action.policyRevision);
+        if (obsolete.length) {
+            this.grants = this.grants.filter((grant) => !obsolete.includes(grant));
+            await this.options.audit.record(action, "grant", "invalidated-policy-or-profile");
+        }
+        const contextId = context.reviewContext?.contextId ?? "legacy";
+        const retry = this.lifecycle.consumeRetry(action, contextId);
+        let reviewContext = context.reviewContext;
+        if (retry && reviewContext) {
+            const { digest: previousDigest, ...previous } = reviewContext;
+            const fields = {
+                ...previous,
+                items: [
+                    ...reviewContext.items,
+                    {
+                        id: retry.id,
+                        source: "user-confirmation",
+                        trust: "authorization",
+                        content: {
+                            type: "exact-action-retry-approval",
+                            actionIdentity: retry.actionIdentity,
+                            denialId: retry.denialId,
+                            scope: "one retry; fresh policy review required",
+                        },
+                    },
+                ],
+            };
+            reviewContext = immutable({ ...fields, digest: digest(fields) });
+            await this.options.audit.record(action, "retry", "consumed");
+        }
+        const cached = retry ||
+            policy.requiresFreshReview ||
+            policy.requiresUserInput ||
+            policy.authority?.kind === "reviewed-command"
+            ? undefined
+            : this.grants.find((grant) => grant.ruleDigest === ruleDigest(action) &&
+                grant.permissionDigest === action.permissionDigest &&
+                grant.policyRevision === action.policyRevision &&
+                (grant.scope === "persistent" ||
+                    grant.sessionId === action.sessionId));
+        if (cached) {
+            this.lifecycle.record(action, contextId);
+            await this.options.audit.record(action, "grant", cached.scope);
+            return {
+                isAllowed: true,
+                delta: cached.delta,
+                grant: cached,
+                reason: "Bound rule authorized the action",
+            };
+        }
+        context.onReviewStart?.();
+        const review = this.options.approvalsReviewer === "user" ||
+            policy.requiresUserInput
+            ? {
+                decision: "ask",
+                reason: "User review requested",
+                result: undefined,
+            }
+            : await reviewAction({
+                action,
+                policyDecision: policy,
+                provider: context.provider,
+                trustedAuthorization: context.trustedAuthorization,
+                hasUI: Boolean(context.ui),
+                signal,
+                timeoutMs: this.options.reviewTimeoutMs,
+                clock: this.options.clock,
+                context: reviewContext,
+                settings: context.settings,
+                executionContext: context.executionContext,
+            });
+        context.onReviewResult?.(review.result);
+        if (signal.aborted)
+            return { ...deny("Call cancelled"), review: review.result };
+        const recorded = this.lifecycle.record(action, contextId, review.result);
+        if (recorded.shouldInterrupt)
+            context.onInterrupt?.();
+        if (review.result)
+            await this.options.audit.recordReview(action, review.result);
+        if (review.decision === "deny")
+            return {
+                ...deny(review.reason),
+                review: review.result,
+                denialId: recorded.denialId,
+            };
+        if (review.decision === "allow") {
+            if (signal.aborted)
+                return deny("Turn interrupted before approval could execute");
+            if (review.result &&
+                (review.result.status !== "approved" ||
+                    review.result.actionDigest !== action.digest ||
+                    (reviewContext &&
+                        review.result.contextDigest !== reviewContext.digest)))
+                return deny("Review result does not match the bound action and context");
+            if (!review.result && policy.authority?.kind === "reviewed-command")
+                return deny("Full command approval requires a structured assessment");
+            await this.options.audit.record(action, "review", "approved");
+            return {
+                isAllowed: true,
+                delta: policy.delta,
+                authority: policy.authority ?? {
+                    kind: "scoped-permissions",
+                    actionDigest: action.digest,
+                },
+                reason: review.reason,
+                review: review.result,
+            };
+        }
+        if (!context.ui)
+            return deny("Approval UI unavailable");
+        const ui = context.ui;
+        // Queue all dialogs, including compensated persistence, until this decision settles.
+        const pending = this.tail.then(async () => {
+            if (signal.aborted)
+                return deny("Queued approval cancelled");
+            const deadline = deadlineSignal(signal, this.options.approvalTimeoutMs, this.options.clock);
+            try {
+                const choice = await withSignal(ui.select(action, policy.delta, {
+                    signal: deadline.signal,
+                    timeoutMs: this.options.approvalTimeoutMs,
+                }), deadline.signal);
+                deadline.signal.throwIfAborted();
+                if (!choice || choice === "deny")
+                    return deny("User denied the action");
+                if (!["once", "session", "persistent"].includes(choice))
+                    return deny("Invalid approval scope");
+                const persistence = this.options.persistence;
+                if (choice === "persistent" && !persistence)
+                    return deny("Persistent rules are unavailable");
+                if (policy.authority?.kind === "reviewed-command" &&
+                    choice !== "once")
+                    return deny("Full command authority can only be approved for one invocation");
+                if ((policy.requiresFreshReview || policy.requiresUserInput) &&
+                    choice !== "once")
+                    return deny("This request requires a fresh one-use approval");
+                const grant = immutable({
+                    id: randomUUID(),
+                    scope: choice,
+                    actionDigest: action.digest,
+                    ruleDigest: ruleDigest(action),
+                    sessionId: action.sessionId,
+                    policyRevision: action.policyRevision,
+                    permissionDigest: action.permissionDigest,
+                    delta: policy.delta,
+                });
+                if (choice === "persistent" && persistence) {
+                    const prior = this.grants.filter((item) => item.scope === "persistent");
+                    await persistence.save([...prior, grant]);
+                    if (deadline.signal.aborted) {
+                        await persistence.save(prior);
+                        return deny("Persistent approval cancelled and reverted");
+                    }
+                }
+                deadline.signal.throwIfAborted();
+                if (choice !== "once")
+                    this.grants.push(grant);
+                await this.options.audit.record(action, "approval", choice);
+                // Once-grants are consumed at logical admission; helpers share this returned immutable profile.
+                return {
+                    isAllowed: true,
+                    delta: grant.delta,
+                    grant,
+                    authority: policy.authority,
+                    reason: "User authorized the bound action",
+                };
+            }
+            catch {
+                await this.options.audit.record(action, "approval", "cancelled-or-failed");
+                return deny("Approval cancelled or failed");
+            }
+            finally {
+                deadline.dispose();
+            }
+        });
+        this.tail = pending.then(() => { }, () => { });
+        return pending;
+    }
+    async settle() {
+        await this.tail;
+        await this.options.audit.flush();
+    }
+}
+//# sourceMappingURL=approvals.js.map

package/dist/approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAEH,gBAAgB,EAChB,aAAa,EACb,MAAM,EACN,WAAW,EAIX,UAAU,EACV,SAAS,EAKT,UAAU,GACb,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAGH,YAAY,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAc,cAAc,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AActE,MAAM,OAAO,oBAAoB;IACR;IAArB,YAAqB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IACrC,KAAK,CAAC,IAAI;QACN,IAAI,CAAC;YACD,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YACpE,IACI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBACpB,IAAI,CAAC,IAAI,CACL,CAAC,KAAK,EAAE,EAAE,CACN,KAAK,EAAE,KAAK,KAAK,YAAY;oBAC7B,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;oBACpC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;oBACxC,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;oBAC1C,CAAC,KAAK,CAAC,KAAK;oBACZ,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,KAAK,CACzC,CAAC,GAAG,EAAE,EAAE,CACJ,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBAC/B,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAClB,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CACxC,CACR,CACR;gBAED,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAChD,OAAO,SAAS,CAAC,IAAe,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,CAAC;YAClE,MAAM,IAAI,UAAU,CAChB,gBAAgB,EAChB,sCAAsC,EACtC,EAAE,KAAK,EAAE,KAAK,EAAE,CACnB,CAAC;QACN,CAAC;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,MAAwB;QAC/B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;QAChD,IAAI,CAAC;YACD,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE;gBAChD,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,IAAI;aACb,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;gBAAS,CAAC;YACP,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;CACJ;AAUD,MAAM,OAAO,eAAe;IAOX;IANJ,SAAS,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,GAAY,EAAE,CAAC;IACrB,IAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3C,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9B,SAAS,CAAU;IAC3B,YACa,OAQR;QARQ,YAAO,GAAP,OAAO,CAQf;IACF,CAAC;IACJ,KAAK,CAAC,UAAU;QACZ,IAAI,CAAC,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;IACjE,CAAC;IACD,KAAK,CAAC,SAAkB;QACpB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAC5B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,YAAY,CAC1C,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IACD,UAAU;QACN,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IACrB,CAAC;IACD,KAAK,CAAC,KAAK,CACP,MAAmB,EACnB,MAAsB,EACtB,OAWC;QAED,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC;QACpC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,MAAM;YACjB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACjE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAc,EAAa,EAAE,CAAC,CAAC;YACzC,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,WAAW;YAClB,MAAM;SACT,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;YACrD,OAAO,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC9C,IACI,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,MAAM;YACrC,MAAM,CAAC,IAAI,KAAK,MAAM;YACtB,MAAM,CAAC,UAAU,EACnB,CAAC;YACC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,YAAY,KAAK,MAAM,CAAC,MAAM;YACnE,OAAO,IAAI,CAAC,qCAAqC,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC3D,OAAO;gBACH,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;aACxB,CAAC;QACN,CAAC;QACD,IACI,CAAC,gBAAgB,CACb,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,YAAY,EAC3C,MAAM,CAAC,gBAAgB,IAAI,SAAS,CACvC;YAED,OAAO,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAC/B,CAAC,KAAK,EAAE,EAAE,CACN,KAAK,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB;YAClD,KAAK,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,CACrD,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAC5B,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CACvC,CAAC;YACF,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAC3B,MAAM,EACN,OAAO,EACP,+BAA+B,CAClC,CAAC;QACN,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,EAAE,SAAS,IAAI,QAAQ,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC7D,IAAI,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC1C,IAAI,KAAK,IAAI,aAAa,EAAE,CAAC;YACzB,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,QAAQ,EAAE,GAAG,aAAa,CAAC;YAC9D,MAAM,MAAM,GAAG;gBACX,GAAG,QAAQ;gBACX,KAAK,EAAE;oBACH,GAAG,aAAa,CAAC,KAAK;oBACtB;wBACI,EAAE,EAAE,KAAK,CAAC,EAAE;wBACZ,MAAM,EAAE,mBAA4B;wBACpC,KAAK,EAAE,eAAwB;wBAC/B,OAAO,EAAE;4BACL,IAAI,EAAE,6BAA6B;4BACnC,cAAc,EAAE,KAAK,CAAC,cAAc;4BACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;4BACxB,KAAK,EAAE,yCAAyC;yBACnD;qBACJ;iBACJ;aACJ,CAAC;YACF,aAAa,GAAG,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,GACR,KAAK;YACL,MAAM,CAAC,mBAAmB;YAC1B,MAAM,CAAC,iBAAiB;YACxB,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,kBAAkB;YACzC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CACZ,CAAC,KAAK,EAAE,EAAE,CACN,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,MAAM,CAAC;gBACvC,KAAK,CAAC,gBAAgB,KAAK,MAAM,CAAC,gBAAgB;gBAClD,KAAK,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;gBAC9C,CAAC,KAAK,CAAC,KAAK,KAAK,YAAY;oBACzB,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,CAChD,CAAC;QACZ,IAAI,MAAM,EAAE,CAAC;YACT,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACzC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/D,OAAO;gBACH,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,kCAAkC;aAC7C,CAAC;QACN,CAAC;QACD,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;QAC1B,MAAM,MAAM,GACR,IAAI,CAAC,OAAO,CAAC,iBAAiB,KAAK,MAAM;YACzC,MAAM,CAAC,iBAAiB;YACpB,CAAC,CAAC;gBACI,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,uBAAuB;gBAC/B,MAAM,EAAE,SAAS;aACpB;YACH,CAAC,CAAC,MAAM,YAAY,CAAC;gBACf,MAAM;gBACN,cAAc,EAAE,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;gBAClD,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,MAAM;gBACN,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;gBACvC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;gBACzB,OAAO,EAAE,aAAa;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;aAC7C,CAAC,CAAC;QACb,OAAO,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,OAAO;YACd,OAAO,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAClC,MAAM,EACN,SAAS,EACT,MAAM,CAAC,MAAM,CAChB,CAAC;QACF,IAAI,QAAQ,CAAC,eAAe;YAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QACtD,IAAI,MAAM,CAAC,MAAM;YACb,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM;YAC1B,OAAO;gBACH,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBACtB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC9B,CAAC;QACN,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,OAAO;gBACd,OAAO,IAAI,CAAC,gDAAgD,CAAC,CAAC;YAClE,IACI,MAAM,CAAC,MAAM;gBACb,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU;oBAChC,MAAM,CAAC,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,MAAM;oBAC5C,CAAC,aAAa;wBACV,MAAM,CAAC,MAAM,CAAC,aAAa,KAAK,aAAa,CAAC,MAAM,CAAC,CAAC;gBAE9D,OAAO,IAAI,CACP,2DAA2D,CAC9D,CAAC;YACN,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,kBAAkB;gBAC/D,OAAO,IAAI,CACP,wDAAwD,CAC3D,CAAC;YACN,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC9D,OAAO;gBACH,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI;oBAC3B,IAAI,EAAE,oBAAoB;oBAC1B,YAAY,EAAE,MAAM,CAAC,MAAM;iBAC9B;gBACD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;aACxB,CAAC;QACN,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;QACtB,qFAAqF;QACrF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAwB,EAAE;YAC1D,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC7D,MAAM,QAAQ,GAAG,cAAc,CAC3B,MAAM,EACN,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAC9B,IAAI,CAAC,OAAO,CAAC,KAAK,CACrB,CAAC;YACF,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAC3B,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE;oBAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;iBAC5C,CAAC,EACF,QAAQ,CAAC,MAAM,CAClB,CAAC;gBACF,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACjC,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM;oBAC5B,OAAO,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBAC1C,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACnD,OAAO,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC7C,IAAI,MAAM,KAAK,YAAY,IAAI,CAAC,WAAW;oBACvC,OAAO,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBACpD,IACI,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,kBAAkB;oBAC7C,MAAM,KAAK,MAAM;oBAEjB,OAAO,IAAI,CACP,gEAAgE,CACnE,CAAC;gBACN,IACI,CAAC,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAC,iBAAiB,CAAC;oBACxD,MAAM,KAAK,MAAM;oBAEjB,OAAO,IAAI,CACP,gDAAgD,CACnD,CAAC;gBACN,MAAM,KAAK,GAAU,SAAS,CAAC;oBAC3B,EAAE,EAAE,UAAU,EAAE;oBAChB,KAAK,EAAE,MAAM;oBACb,YAAY,EAAE,MAAM,CAAC,MAAM;oBAC3B,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC;oBAC9B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;oBACzC,KAAK,EAAE,MAAM,CAAC,KAAK;iBACtB,CAAC,CAAC;gBACH,IAAI,MAAM,KAAK,YAAY,IAAI,WAAW,EAAE,CAAC;oBACzC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAC5B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,YAAY,CACxC,CAAC;oBACF,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;oBAC1C,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBAC1B,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBAC9B,OAAO,IAAI,CACP,4CAA4C,CAC/C,CAAC;oBACN,CAAC;gBACL,CAAC;gBACD,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACjC,IAAI,MAAM,KAAK,MAAM;oBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC/C,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC5D,gGAAgG;gBAChG,OAAO;oBACH,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,KAAK;oBACL,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,MAAM,EAAE,kCAAkC;iBAC7C,CAAC;YACN,CAAC;YAAC,MAAM,CAAC;gBACL,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAC3B,MAAM,EACN,UAAU,EACV,qBAAqB,CACxB,CAAC;gBACF,OAAO,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAChD,CAAC;oBAAS,CAAC;gBACP,QAAQ,CAAC,OAAO,EAAE,CAAC;YACvB,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CACpB,GAAG,EAAE,GAAE,CAAC,EACR,GAAG,EAAE,GAAE,CAAC,CACX,CAAC;QACF,OAAO,OAAO,CAAC;IACnB,CAAC;IACD,KAAK,CAAC,MAAM;QACR,MAAM,IAAI,CAAC,IAAI,CAAC;QAChB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrC,CAAC;CACJ"}

package/dist/audit.d.ts

@@ -0,0 +1,28 @@
+import type { GuardAction, ReviewResult, ReviewTerminalState, RiskLevel, UserAuthorization } from "./contracts.js";
+interface ReviewAudit {
+    status: ReviewTerminalState;
+    riskLevel?: RiskLevel;
+    userAuthorization?: UserAuthorization;
+    rationale?: string;
+}
+export declare function redact(text: string, markers?: readonly string[]): string;
+export declare class AuditLog {
+    readonly path?: string | undefined;
+    readonly markers: readonly string[];
+    private tail;
+    constructor(path?: string | undefined, markers?: readonly string[]);
+    readonly records: {
+        timestamp: string;
+        actionDigest: string;
+        toolCallId: string;
+        tool: string;
+        sessionId: string;
+        event: string;
+        outcome: string;
+        review?: ReviewAudit;
+    }[];
+    recordReview(action: GuardAction, result: ReviewResult): Promise<void>;
+    record(action: GuardAction, event: string, outcome: string, review?: ReviewAudit): Promise<void>;
+    flush(): Promise<void>;
+}
+export {};

package/dist/audit.js

@@ -0,0 +1,64 @@
+import { appendFile, mkdir } from "node:fs/promises";
+import { dirname } from "node:path";
+export function redact(text, markers = []) {
+    let safe = text
+        .replace(/SYNTHETIC_[A-Z0-9_:-]+/gi, "[REDACTED]")
+        .replace(/\b(Bearer\s+)[^\s"']+/gi, "$1[REDACTED]")
+        .replace(/\b((?:api[_-]?key|token|password|secret)\s*[=:]\s*)(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s,;"']+)/gi, "$1[REDACTED]")
+        .replace(/\b(?:sk-[A-Za-z0-9_-]{8,}|AKIA[A-Z0-9]{16})\b/g, "[REDACTED]");
+    for (const marker of markers)
+        if (marker)
+            safe = safe.split(marker).join("[REDACTED]");
+    return safe;
+}
+export class AuditLog {
+    path;
+    markers;
+    tail = Promise.resolve();
+    constructor(path, markers = []) {
+        this.path = path;
+        this.markers = markers;
+    }
+    records = [];
+    async recordReview(action, result) {
+        const review = "assessment" in result
+            ? {
+                status: result.status,
+                riskLevel: result.assessment.risk_level,
+                userAuthorization: result.assessment.user_authorization,
+                rationale: redact(result.assessment.rationale, this.markers).slice(0, 1000),
+            }
+            : { status: result.status };
+        await this.record(action, "review", result.status, review);
+    }
+    async record(action, event, outcome, review) {
+        // No arguments, command text, content, provider text or worker output enter the audit schema.
+        const record = {
+            timestamp: new Date().toISOString(),
+            actionDigest: action.digest,
+            toolCallId: action.toolCallId,
+            tool: action.tool,
+            sessionId: action.sessionId,
+            event,
+            outcome,
+            ...(review ? { review } : {}),
+        };
+        const safe = JSON.parse(JSON.stringify(record, (_key, value) => typeof value === "string" ? redact(value, this.markers) : value));
+        this.records.push(safe);
+        if (!this.path)
+            return;
+        const path = this.path;
+        const pending = this.tail.then(async () => {
+            await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+            await appendFile(path, `${JSON.stringify(safe)}\n`, {
+                mode: 0o600,
+            });
+        });
+        this.tail = pending.catch(() => { });
+        await pending;
+    }
+    async flush() {
+        await this.tail;
+    }
+}
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBpC,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,UAA6B,EAAE;IAChE,IAAI,IAAI,GAAG,IAAI;SACV,OAAO,CAAC,0BAA0B,EAAE,YAAY,CAAC;SACjD,OAAO,CAAC,yBAAyB,EAAE,cAAc,CAAC;SAClD,OAAO,CACJ,yGAAyG,EACzG,cAAc,CACjB;SACA,OAAO,CACJ,gDAAgD,EAChD,YAAY,CACf,CAAC;IACN,KAAK,MAAM,MAAM,IAAI,OAAO;QACxB,IAAI,MAAM;YAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AAChB,CAAC;AACD,MAAM,OAAO,QAAQ;IAGJ;IACA;IAHL,IAAI,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IACnD,YACa,IAAa,EACb,UAA6B,EAAE;QAD/B,SAAI,GAAJ,IAAI,CAAS;QACb,YAAO,GAAP,OAAO,CAAwB;IACzC,CAAC;IACK,OAAO,GASV,EAAE,CAAC;IACT,KAAK,CAAC,YAAY,CACd,MAAmB,EACnB,MAAoB;QAEpB,MAAM,MAAM,GACR,YAAY,IAAI,MAAM;YAClB,CAAC,CAAC;gBACI,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU;gBACvC,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC,kBAAkB;gBACvD,SAAS,EAAE,MAAM,CACb,MAAM,CAAC,UAAU,CAAC,SAAS,EAC3B,IAAI,CAAC,OAAO,CACf,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;aACnB;YACH,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,CAAC,MAAM,CACR,MAAmB,EACnB,KAAa,EACb,OAAe,EACf,MAAoB;QAEpB,8FAA8F;QAC9F,MAAM,MAAM,GAAG;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,YAAY,EAAE,MAAM,CAAC,MAAM;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK;YACL,OAAO;YACP,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CACnB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,KAAc,EAAE,EAAE,CAC5C,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAClE,CACa,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACtC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE;gBAChD,IAAI,EAAE,KAAK;aACd,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACpC,MAAM,OAAO,CAAC;IAClB,CAAC;IACD,KAAK,CAAC,KAAK;QACP,MAAM,IAAI,CAAC,IAAI,CAAC;IACpB,CAAC;CACJ"}

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export declare function main(argv: string[]): Promise<void>;

package/dist/cli.js

@@ -0,0 +1,99 @@
+#!/usr/bin/env node
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+import { InteractiveMode, runPrintMode, runRpcMode, } from "@earendil-works/pi-coding-agent";
+import { createGuardedRuntime } from "./startup.js";
+export async function main(argv) {
+    let mode = "tui", cwd = process.cwd(), agentDir = process.env.PI_CODING_AGENT_DIR ?? join(homedir(), ".pi", "agent"), settingsPath, isProjectTrusted;
+    let provider, modelId;
+    const prompts = [], trustedExtensionPaths = [];
+    for (let i = 0; i < argv.length; i++) {
+        const item = argv[i];
+        if (item === undefined)
+            continue;
+        if (item === "--help" || item === "-h") {
+            console.log("Usage: pi-codex-auto-review [--cwd path] [--agent-dir path] [--policy file] [--trust-project] [--extension path ...] [--provider provider --model model] [--mode tui|print|json|rpc] [prompt]\n--extension (-e) can be repeated. It trusts each code directory and rejects direct model tool writes to it. Paths are resolved from the invocation directory.");
+            return;
+        }
+        if (item === "--") {
+            prompts.push(...argv.slice(i + 1));
+            break;
+        }
+        if (item === "--trust-project") {
+            isProjectTrusted = true;
+            continue;
+        }
+        if ([
+            "--mode",
+            "--cwd",
+            "--agent-dir",
+            "--policy",
+            "--extension",
+            "-e",
+            "--provider",
+            "--model",
+        ].includes(item)) {
+            const value = argv[++i];
+            if (!value || value.startsWith("--"))
+                throw new Error(`${item}: a value is required`);
+            if (item === "--mode")
+                mode = value;
+            if (item === "--cwd")
+                cwd = value;
+            if (item === "--agent-dir")
+                agentDir = value;
+            if (item === "--policy")
+                settingsPath = value;
+            if (item === "--extension" || item === "-e")
+                trustedExtensionPaths.push(resolve(value));
+            if (item === "--provider")
+                provider = value;
+            if (item === "--model")
+                modelId = value;
+        }
+        else if (item === "-p")
+            mode = "print";
+        else if (item.startsWith("-"))
+            throw new Error(`Unsupported option: ${item}`);
+        else
+            prompts.push(item);
+    }
+    if (!["tui", "print", "json", "rpc"].includes(mode))
+        throw new Error(`Unsupported mode: ${mode}`);
+    if (Boolean(provider) !== Boolean(modelId))
+        throw new Error("--provider and --model must be specified together");
+    const runtime = await createGuardedRuntime({
+        cwd: resolve(cwd),
+        agentDir: resolve(agentDir),
+        settingsPath: settingsPath ? resolve(settingsPath) : undefined,
+        isProjectTrusted,
+        trustedExtensionPaths,
+        ...(provider && modelId
+            ? { modelSelection: { provider, id: modelId } }
+            : {}),
+    });
+    try {
+        if (mode === "rpc")
+            await runRpcMode(runtime);
+        else if (mode === "tui")
+            await new InteractiveMode(runtime, {
+                initialMessage: prompts.join(" ") || undefined,
+            }).run();
+        else
+            process.exitCode = await runPrintMode(runtime, {
+                mode: mode === "json" ? "json" : "text",
+                initialMessage: prompts.join(" ") || undefined,
+            });
+    }
+    finally {
+        await runtime.dispose();
+    }
+}
+if (process.argv[1] &&
+    import.meta.url === pathToFileURL(resolve(process.argv[1])).href)
+    main(process.argv.slice(2)).catch((error) => {
+        console.error(`pi-codex-auto-review: ${error.message}`);
+        process.exitCode = 1;
+    });
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACH,eAAe,EACf,YAAY,EACZ,UAAU,GACb,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc;IACrC,IAAI,IAAI,GAAG,KAAK,EACZ,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EACnB,QAAQ,GACJ,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,EACtE,YAAgC,EAChC,gBAAqC,CAAC;IAC1C,IAAI,QAA4B,EAAE,OAA2B,CAAC;IAC9D,MAAM,OAAO,GAAa,EAAE,EACxB,qBAAqB,GAAa,EAAE,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CACP,8VAA8V,CACjW,CAAC;YACF,OAAO;QACX,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM;QACV,CAAC;QACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC7B,gBAAgB,GAAG,IAAI,CAAC;YACxB,SAAS;QACb,CAAC;QACD,IACI;YACI,QAAQ;YACR,OAAO;YACP,aAAa;YACb,UAAU;YACV,aAAa;YACb,IAAI;YACJ,YAAY;YACZ,SAAS;SACZ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAClB,CAAC;YACC,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC;YACpD,IAAI,IAAI,KAAK,QAAQ;gBAAE,IAAI,GAAG,KAAK,CAAC;YACpC,IAAI,IAAI,KAAK,OAAO;gBAAE,GAAG,GAAG,KAAK,CAAC;YAClC,IAAI,IAAI,KAAK,aAAa;gBAAE,QAAQ,GAAG,KAAK,CAAC;YAC7C,IAAI,IAAI,KAAK,UAAU;gBAAE,YAAY,GAAG,KAAK,CAAC;YAC9C,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,IAAI;gBACvC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,YAAY;gBAAE,QAAQ,GAAG,KAAK,CAAC;YAC5C,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,GAAG,KAAK,CAAC;QAC5C,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI;YAAE,IAAI,GAAG,OAAO,CAAC;aACpC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;;YAC9C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC;QACvC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;QAC3B,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;QAC9D,gBAAgB;QAChB,qBAAqB;QACrB,GAAG,CAAC,QAAQ,IAAI,OAAO;YACnB,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;YAC/C,CAAC,CAAC,EAAE,CAAC;KACZ,CAAC,CAAC;IACH,IAAI,CAAC;QACD,IAAI,IAAI,KAAK,KAAK;YAAE,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;aACzC,IAAI,IAAI,KAAK,KAAK;YACnB,MAAM,IAAI,eAAe,CAAC,OAAO,EAAE;gBAC/B,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS;aACjD,CAAC,CAAC,GAAG,EAAE,CAAC;;YAET,OAAO,CAAC,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;gBAC3C,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBACvC,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS;aACjD,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5B,CAAC;AACL,CAAC;AACD,IACI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACf,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;IAEhE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,OAAO,CAAC,KAAK,CAAC,yBAA0B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC"}