@buyong/pi-codex-auto-review 0.0.0-stage → 0.2.2

package/dist/context-files.d.ts

@@ -0,0 +1,14 @@
+import { type PermissionProfile } from "./contracts.js";
+import type { GuardSettings } from "./policy/index.js";
+export interface ContextFile {
+    readonly path: string;
+    readonly content: string;
+}
+/** Codex a956835d/core/src/agents_md.rs precedence, traversal and aggregate byte budget. */
+export declare function loadContextFiles(options: {
+    cwd: string;
+    agentDir: string;
+    profile: PermissionProfile;
+    settings: GuardSettings;
+    isProjectTrusted: boolean;
+}): ContextFile[];

package/dist/context-files.js

@@ -0,0 +1,134 @@
+import { closeSync, constants, fstatSync, openSync, readSync, realpathSync, statSync, } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+import { GuardError } from "./contracts.js";
+import { isWithin } from "./policy/paths.js";
+const NAMES = ["AGENTS.override.md", "AGENTS.md"];
+function isMissing(error) {
+    return ["ENOENT", "ENOTDIR"].includes(error.code ?? "");
+}
+function isFilename(name) {
+    return (!!name &&
+        ![".", ".."].includes(name) &&
+        !name.includes("\0") &&
+        basename(name) === name &&
+        (process.platform !== "win32" || !/[\\:]/.test(name)));
+}
+function exists(path) {
+    try {
+        statSync(path);
+        return true;
+    }
+    catch (error) {
+        if (isMissing(error))
+            return false;
+        throw error;
+    }
+}
+function choose(directory, names) {
+    for (const name of names) {
+        const path = join(directory, name);
+        try {
+            if (statSync(path).isFile())
+                return path;
+        }
+        catch (error) {
+            if (!isMissing(error))
+                throw error;
+        }
+    }
+}
+function boundedRead(path, maxBytes, profile, isGlobal, agentDir) {
+    const target = realpathSync(path);
+    // Only the specifically selected global instruction file is an internal controller read.
+    const isGlobalInstruction = isGlobal &&
+        target === join(realpathSync(agentDir), basename(path)) &&
+        NAMES.includes(basename(path));
+    if (!isGlobalInstruction &&
+        (profile.denyRead.some((root) => isWithin(target, root)) ||
+            !profile.readRoots.some((root) => isWithin(target, root)))) {
+        throw new GuardError("CONTEXT_FILE_DENIED", `Instruction file crosses a protected read boundary: ${path}`);
+    }
+    const expected = statSync(target);
+    if (!expected.isFile() || expected.nlink > 1)
+        throw new GuardError("CONTEXT_FILE_DENIED", "Instruction file must be a regular file without hard-link aliases");
+    const fd = openSync(target, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    try {
+        const actual = fstatSync(fd);
+        if (!actual.isFile() ||
+            actual.dev !== expected.dev ||
+            actual.ino !== expected.ino ||
+            actual.nlink > 1 ||
+            realpathSync(path) !== target)
+            throw new GuardError("CONTEXT_FILE_CHANGED", "Instruction file changed during loading");
+        const data = Buffer.alloc(Math.min(actual.size, maxBytes));
+        let count = 0;
+        while (count < data.length) {
+            const read = readSync(fd, data, count, data.length - count, count);
+            if (!read)
+                break;
+            count += read;
+        }
+        const content = data.subarray(0, count).toString("utf8");
+        return content.trim()
+            ? { file: { path, content }, bytesRead: count }
+            : undefined;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Codex a956835d/core/src/agents_md.rs precedence, traversal and aggregate byte budget. */
+export function loadContextFiles(options) {
+    const { settings, profile } = options;
+    const result = [];
+    // The host's agent directory is the Pi equivalent of Codex's instruction home.
+    for (const name of NAMES) {
+        const global = choose(options.agentDir, [name]);
+        if (!global)
+            continue;
+        const file = boundedRead(global, 32768, profile, true, options.agentDir);
+        if (file) {
+            result.push(file.file);
+            break;
+        }
+    }
+    if (!options.isProjectTrusted || settings.projectDocMaxBytes === 0)
+        return result;
+    const cwd = resolve(options.cwd), markers = (settings.projectRootMarkers ?? [".git"]).filter(isFilename);
+    let root;
+    for (let dir = cwd; markers.length; dir = dirname(dir)) {
+        if (markers.some((name) => exists(join(dir, name)))) {
+            root = dir;
+            break;
+        }
+        if (dirname(dir) === dir)
+            break;
+    }
+    const directories = [cwd];
+    if (root)
+        for (let dir = cwd; dir !== root;) {
+            dir = dirname(dir);
+            directories.unshift(dir);
+        }
+    const names = [
+        ...new Set([
+            ...NAMES,
+            ...settings.projectDocFallbackFilenames.filter(isFilename),
+        ]),
+    ];
+    let remaining = settings.projectDocMaxBytes;
+    for (const directory of directories) {
+        if (!remaining)
+            break;
+        const path = choose(directory, names);
+        if (!path || result.some((file) => file.path === path))
+            continue;
+        const file = boundedRead(path, remaining, profile, false, options.agentDir);
+        if (file) {
+            result.push(file.file);
+            remaining = Math.max(0, remaining - file.bytesRead);
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=context-files.js.map

package/dist/context-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-files.js","sourceRoot":"","sources":["../src/context-files.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,QAAQ,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,UAAU,EAA0B,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAM7C,MAAM,KAAK,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;AAClD,SAAS,SAAS,CAAC,KAAc;IAC7B,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAChC,KAA+B,CAAC,IAAI,IAAI,EAAE,CAC9C,CAAC;AACN,CAAC;AACD,SAAS,UAAU,CAAC,IAAY;IAC5B,OAAO,CACH,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC3B,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI;QACvB,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CACxD,CAAC;AACN,CAAC;AACD,SAAS,MAAM,CAAC,IAAY;IACxB,IAAI,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AACD,SAAS,MAAM,CACX,SAAiB,EACjB,KAAwB;IAExB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QACvC,CAAC;IACL,CAAC;AACL,CAAC;AACD,SAAS,WAAW,CAChB,IAAY,EACZ,QAAgB,EAChB,OAA0B,EAC1B,QAAiB,EACjB,QAAgB;IAEhB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,yFAAyF;IACzF,MAAM,mBAAmB,GACrB,QAAQ;QACR,MAAM,KAAK,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvD,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,IACI,CAAC,mBAAmB;QACpB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpD,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAChE,CAAC;QACC,MAAM,IAAI,UAAU,CAChB,qBAAqB,EACrB,uDAAuD,IAAI,EAAE,CAChE,CAAC;IACN,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,GAAG,CAAC;QACxC,MAAM,IAAI,UAAU,CAChB,qBAAqB,EACrB,mEAAmE,CACtE,CAAC;IACN,MAAM,EAAE,GAAG,QAAQ,CACf,MAAM,EACN,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CACnD,CAAC;IACF,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7B,IACI,CAAC,MAAM,CAAC,MAAM,EAAE;YAChB,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;YAC3B,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;YAC3B,MAAM,CAAC,KAAK,GAAG,CAAC;YAChB,YAAY,CAAC,IAAI,CAAC,KAAK,MAAM;YAE7B,MAAM,IAAI,UAAU,CAChB,sBAAsB,EACtB,yCAAyC,CAC5C,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC;YACnE,IAAI,CAAC,IAAI;gBAAE,MAAM;YACjB,KAAK,IAAI,IAAI,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,OAAO,CAAC,IAAI,EAAE;YACjB,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;YAC/C,CAAC,CAAC,SAAS,CAAC;IACpB,CAAC;YAAS,CAAC;QACP,SAAS,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACL,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,OAMhC;IACG,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACtC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,+EAA+E;IAC/E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,IAAI,GAAG,WAAW,CACpB,MAAM,EACN,KAAK,EACL,OAAO,EACP,IAAI,EACJ,OAAO,CAAC,QAAQ,CACnB,CAAC;QACF,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM;QACV,CAAC;IACL,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,QAAQ,CAAC,kBAAkB,KAAK,CAAC;QAC9D,OAAO,MAAM,CAAC;IAClB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAC5B,OAAO,GAAG,CAAC,QAAQ,CAAC,kBAAkB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,IAAwB,CAAC;IAC7B,KAAK,IAAI,GAAG,GAAG,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,IAAI,GAAG,GAAG,CAAC;YACX,MAAM;QACV,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,MAAM;IACpC,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,IAAI;QACJ,KAAK,IAAI,GAAG,GAAG,GAAG,EAAE,GAAG,KAAK,IAAI,GAAI,CAAC;YACjC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YACnB,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;IACL,MAAM,KAAK,GAAG;QACV,GAAG,IAAI,GAAG,CAAC;YACP,GAAG,KAAK;YACR,GAAG,QAAQ,CAAC,2BAA2B,CAAC,MAAM,CAAC,UAAU,CAAC;SAC7D,CAAC;KACL,CAAC;IACF,IAAI,SAAS,GAAG,QAAQ,CAAC,kBAAkB,CAAC;IAC5C,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,CAAC,SAAS;YAAE,MAAM;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,SAAS;QACjE,MAAM,IAAI,GAAG,WAAW,CACpB,IAAI,EACJ,SAAS,EACT,OAAO,EACP,KAAK,EACL,OAAO,CAAC,QAAQ,CACnB,CAAC;QACF,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/contracts.d.ts

@@ -0,0 +1,260 @@
+import type { ReadToolOptions } from "@earendil-works/pi-coding-agent";
+export type Json = null | boolean | number | string | Json[] | {
+    [key: string]: Json;
+};
+export type DecisionKind = "allow" | "ask" | "deny";
+export type ActionSource = "model" | "nested" | "user-bash" | "extension";
+export type EvidenceStatus = "pass" | "fail" | "environment-blocked" | "not-run";
+export type ToolName = "bash" | "read" | "edit" | "write" | "grep" | "find" | "ls";
+export declare const TOOL_NAMES: readonly ToolName[];
+export interface PermissionProfile {
+    readonly mode: "read-only" | "workspace-write";
+    readonly readRoots: readonly string[];
+    readonly writeRoots: readonly string[];
+    readonly denyRead: readonly string[];
+    readonly denyWrite: readonly string[];
+    readonly allowedDomains: readonly string[];
+    readonly deniedDomains: readonly string[];
+    /** Base sandbox metadata protection; unlike denyWrite, eligible exact actions may request review. */
+    readonly readOnlyPaths?: readonly string[];
+}
+export interface PermissionDelta {
+    readonly readPaths: readonly string[];
+    readonly writePaths: readonly string[];
+    readonly domains: readonly string[];
+}
+export declare const EMPTY_DELTA: PermissionDelta;
+export interface GuardAction {
+    readonly schemaVersion: 1;
+    readonly toolCallId: string;
+    readonly tool: string;
+    readonly source: ActionSource;
+    readonly args: Readonly<Record<string, Json>>;
+    readonly cwd: string;
+    readonly sessionId: string;
+    readonly policyRevision: string;
+    readonly permissionDigest: string;
+    readonly digest: string;
+}
+export interface PolicyDecision {
+    readonly kind: DecisionKind;
+    readonly reason: string;
+    readonly actionDigest: string;
+    readonly delta: PermissionDelta;
+    readonly isHardDeny: boolean;
+    readonly approvalCategory?: "sandbox" | "rules" | "mcp_elicitations";
+    readonly requiresFreshReview?: boolean;
+    readonly requiresUserInput?: boolean;
+    readonly authority?: ExecutionAuthority;
+}
+export type ApprovalPolicy = "on-request" | "never" | {
+    readonly sandbox: boolean;
+    readonly rules: boolean;
+    readonly mcp_elicitations?: boolean;
+};
+export type RiskLevel = "low" | "medium" | "high" | "critical";
+export type UserAuthorization = "unknown" | "low" | "medium" | "high";
+/** Field names intentionally match the pinned Codex assessment wire format. */
+export interface ReviewAssessment {
+    readonly risk_level: RiskLevel;
+    readonly user_authorization: UserAuthorization;
+    readonly outcome: "allow" | "deny";
+    readonly rationale: string;
+}
+export type ReviewTerminalState = "approved" | "denied" | "timed-out" | "aborted" | "failed";
+export interface ReviewContextItem {
+    readonly id: string;
+    readonly source: "user" | "developer" | "agents" | "user-confirmation" | "assistant" | "tool-call" | "tool-result";
+    readonly trust: "authorization" | "evidence";
+    readonly content: Json;
+    readonly isTruncated?: boolean;
+}
+export interface ReviewContext {
+    readonly sessionId: string;
+    readonly contextId: string;
+    readonly turnId: string;
+    readonly items: readonly ReviewContextItem[];
+    readonly digest: string;
+}
+export interface ReviewBinding {
+    readonly actionDigest: string;
+    readonly contextDigest: string;
+    readonly policyDigest: string;
+}
+export type ReviewResult = ReviewBinding & ({
+    readonly status: "approved" | "denied";
+    readonly assessment: ReviewAssessment;
+} | {
+    readonly status: "timed-out" | "aborted" | "failed";
+    readonly failure: "timeout" | "cancelled" | "provider" | "invalid-output" | "investigation" | "context";
+    readonly reason: string;
+});
+export type ExecutionAuthority = {
+    readonly kind: "sandbox" | "scoped-permissions";
+    readonly actionDigest: string;
+} | {
+    readonly kind: "command-rule";
+    readonly actionDigest: string;
+    readonly ruleDigest: string;
+} | {
+    readonly kind: "reviewed-command";
+    readonly actionDigest: string;
+};
+export interface RetryAuthorization {
+    readonly id: string;
+    readonly denialId: string;
+    readonly actionIdentity: string;
+    readonly sessionId: string;
+    readonly contextId: string;
+}
+export interface RecentDenial {
+    readonly id: string;
+    readonly action: GuardAction;
+    readonly contextId: string;
+    readonly assessment: ReviewAssessment;
+}
+export interface Grant {
+    readonly id: string;
+    readonly scope: "once" | "session" | "persistent";
+    readonly actionDigest: string;
+    readonly ruleDigest: string;
+    readonly sessionId: string;
+    readonly policyRevision: string;
+    readonly permissionDigest: string;
+    readonly delta: PermissionDelta;
+}
+export interface ToolResult {
+    content: ({
+        type: "text";
+        text: string;
+    } | {
+        type: "image";
+        data: string;
+        mimeType: string;
+    })[];
+    details?: unknown;
+    structuredContent?: Json;
+    isError?: boolean;
+}
+export interface ExecutionOptions {
+    readonly signal?: AbortSignal;
+    /** Pi BashOperations timeout is in seconds. Review and UI deadlines use milliseconds. */
+    readonly timeoutSeconds?: number;
+    readonly env?: NodeJS.ProcessEnv;
+    readonly onData?: (data: Buffer) => void;
+    readonly onUpdate?: (result: ToolResult) => void;
+    /** Execute the original Pi definition after admission, in the same process. */
+    readonly delegate?: (signal: AbortSignal) => Promise<Json>;
+    readonly authority?: ExecutionAuthority;
+    readonly onNetworkRequest?: (request: NetworkApprovalRequest, signal: AbortSignal) => Promise<boolean>;
+}
+export interface NetworkApprovalRequest {
+    readonly host: string;
+    readonly port?: number;
+}
+export type WorkerJob = {
+    kind: "shell";
+    command: string;
+    cwd: string;
+    shellPath?: string;
+    timeoutSeconds?: number;
+    env?: NodeJS.ProcessEnv;
+} | {
+    kind: "tool";
+    tool: ToolName;
+    args: Record<string, Json>;
+    cwd: string;
+    toolCallId: string;
+    options?: Omit<ReadToolOptions, "operations">;
+} | {
+    kind: "file";
+    operation: "read" | "write" | "mkdir" | "access" | "stat" | "list";
+    path: string;
+    content?: string;
+    cwd: string;
+};
+export type WorkerFrame = {
+    schemaVersion: 1;
+    type: "data";
+    data: string;
+} | {
+    schemaVersion: 1;
+    type: "update";
+    result: ToolResult;
+} | {
+    schemaVersion: 1;
+    type: "result";
+    result: Json;
+} | {
+    schemaVersion: 1;
+    type: "error";
+    code: string;
+    message: string;
+};
+/** Only the unsandboxed broker's private IPC channel can send this control frame. */
+export interface BrokerControlFrame {
+    readonly schemaVersion: 1;
+    readonly type: "workload-started";
+    readonly processGroupId: number;
+}
+/** Private controller/broker IPC only. Workload stdout must still reject these frame types. */
+export interface BrokerNetworkRequest {
+    readonly schemaVersion: 1;
+    readonly type: "network-request";
+    readonly requestId: string;
+    readonly destination: NetworkApprovalRequest;
+}
+export interface TestEvidence {
+    readonly schemaVersion?: 1 | 2;
+    readonly runId?: string;
+    readonly artifactPath?: string;
+    readonly provenance?: "executed" | "preserved-legacy" | "synthetic";
+    readonly startedAt?: string;
+    readonly recordedAt?: string;
+    readonly provider?: {
+        readonly package: string;
+        readonly version: string;
+        readonly id: string;
+        readonly model: string;
+    };
+    readonly imageDigest?: string;
+    readonly pluginArtifactDigest?: string;
+    readonly suite: string;
+    readonly status: EvidenceStatus;
+    readonly command: string;
+    readonly testFiles: readonly string[];
+    readonly coveredBehavior: readonly string[];
+    readonly tests: readonly {
+        name: string;
+        status: EvidenceStatus;
+        isSkipped?: boolean;
+    }[];
+    readonly platform: string;
+    readonly sourceDigest: string;
+    readonly contractDigest: string;
+    readonly runtimeVersions: Readonly<Record<string, string>>;
+    readonly evidenceKind: "unit-doubles" | "simulated-provider-ui" | "native-os" | "workflow";
+    readonly nativeControls?: readonly {
+        kind: "allow" | "deny";
+        effect: string;
+        isObserved: boolean;
+        platform: string;
+    }[];
+    readonly blockedReasons: readonly string[];
+}
+export declare class GuardError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string, options?: ErrorOptions);
+}
+export declare function canonicalJson(value: unknown): string;
+export declare function digest(value: unknown): string;
+export declare function immutable<T>(value: T): T;
+export declare function createProfile(input: PermissionProfile): PermissionProfile;
+export declare function createAction(input: Omit<GuardAction, "schemaVersion" | "digest" | "permissionDigest">, profile: PermissionProfile): GuardAction;
+/** Reusable grants still bind exact inputs/cwd/source/profile, but not a previous logical call id. */
+export declare function ruleDigest(action: GuardAction): string;
+/** A retry gets a new invocation ID, but cannot change session, semantics or context. */
+export declare function retryIdentity(action: GuardAction, contextId: string): string;
+export declare function approvalEligible(policy: ApprovalPolicy, category: "sandbox" | "rules" | "mcp_elicitations"): boolean;
+export declare function decision(action: GuardAction, kind: DecisionKind, reason: string, delta?: PermissionDelta, isHardDeny?: boolean): PolicyDecision;
+export declare function validateWorkerFrame(value: unknown): WorkerFrame;

package/dist/contracts.js

@@ -0,0 +1,168 @@
+import { createHash } from "node:crypto";
+import { isAbsolute, resolve } from "node:path";
+import { isDomainPattern, normalizeHost } from "./policy/domains.js";
+export const TOOL_NAMES = Object.freeze([
+    "bash",
+    "read",
+    "edit",
+    "write",
+    "grep",
+    "find",
+    "ls",
+]);
+export const EMPTY_DELTA = Object.freeze({
+    readPaths: Object.freeze([]),
+    writePaths: Object.freeze([]),
+    domains: Object.freeze([]),
+});
+export class GuardError extends Error {
+    code;
+    constructor(code, message, options) {
+        super(message, options);
+        this.code = code;
+        this.name = "GuardError";
+    }
+}
+export function canonicalJson(value) {
+    if (value === null ||
+        typeof value === "string" ||
+        typeof value === "boolean")
+        return JSON.stringify(value);
+    if (typeof value === "number" && Number.isFinite(value))
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(",")}]`;
+    if (typeof value === "object" &&
+        value !== null &&
+        Object.getPrototypeOf(value) === Object.prototype) {
+        return `{${Object.keys(value)
+            .sort()
+            .map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`)
+            .join(",")}}`;
+    }
+    throw new GuardError("INVALID_JSON", "Expected finite JSON data");
+}
+export function digest(value) {
+    return createHash("sha256").update(canonicalJson(value)).digest("hex");
+}
+export function immutable(value) {
+    if (value && typeof value === "object") {
+        for (const item of Object.values(value))
+            immutable(item);
+        Object.freeze(value);
+    }
+    return value;
+}
+export function createProfile(input) {
+    if (!["read-only", "workspace-write"].includes(input.mode))
+        throw new GuardError("INVALID_PROFILE", "Unknown permission mode");
+    for (const key of [
+        "readRoots",
+        "writeRoots",
+        "denyRead",
+        "denyWrite",
+    ]) {
+        if (!Array.isArray(input[key]) ||
+            input[key].some((p) => typeof p !== "string" || !isAbsolute(p) || p.includes("\0")))
+            throw new GuardError("INVALID_PROFILE", `Invalid ${key}`);
+    }
+    if (input.readOnlyPaths !== undefined &&
+        (!Array.isArray(input.readOnlyPaths) ||
+            input.readOnlyPaths.some((path) => typeof path !== "string" ||
+                !isAbsolute(path) ||
+                path.includes("\0"))))
+        throw new GuardError("INVALID_PROFILE", "Invalid readOnlyPaths");
+    if (input.mode === "read-only" && input.writeRoots.length)
+        throw new GuardError("INVALID_PROFILE", "Read-only profiles cannot contain write roots");
+    for (const key of ["allowedDomains", "deniedDomains"]) {
+        if (!Array.isArray(input[key]) ||
+            input[key].some((p) => !isDomainPattern(p)))
+            throw new GuardError("INVALID_PROFILE", `Invalid ${key}`);
+    }
+    return immutable(JSON.parse(canonicalJson({
+        ...input,
+        allowedDomains: input.allowedDomains.map(normalizeHost),
+        deniedDomains: input.deniedDomains.map(normalizeHost),
+    })));
+}
+export function createAction(input, profile) {
+    for (const key of [
+        "toolCallId",
+        "tool",
+        "cwd",
+        "sessionId",
+        "policyRevision",
+    ]) {
+        if (typeof input[key] !== "string" ||
+            !input[key] ||
+            input[key].includes("\0"))
+            throw new GuardError("INVALID_ACTION", `Invalid ${key}`);
+    }
+    if (!["model", "nested", "user-bash", "extension"].includes(input.source))
+        throw new GuardError("INVALID_ACTION", "Invalid action source");
+    if (!input.args ||
+        Array.isArray(input.args) ||
+        typeof input.args !== "object")
+        throw new GuardError("INVALID_ACTION", "Arguments must be an object");
+    const fields = JSON.parse(canonicalJson({
+        ...input,
+        cwd: resolve(input.cwd),
+        schemaVersion: 1,
+        permissionDigest: digest(profile),
+    }));
+    return immutable({ ...fields, digest: digest(fields) });
+}
+/** Reusable grants still bind exact inputs/cwd/source/profile, but not a previous logical call id. */
+export function ruleDigest(action) {
+    const { digest: ignoredDigest, toolCallId: ignoredId, sessionId: ignoredSession, ...fields } = action;
+    return digest(fields);
+}
+/** A retry gets a new invocation ID, but cannot change session, semantics or context. */
+export function retryIdentity(action, contextId) {
+    // A runtime destination belongs to the same semantic command even though its new
+    // invocation necessarily has a different origin digest. Destination/port stay bound.
+    const { originatingActionDigest: ignoredOrigin, ...networkArgs } = action.args;
+    const semantic = action.args.networkDestination && typeof ignoredOrigin === "string"
+        ? { ...action, args: networkArgs }
+        : action;
+    return digest({
+        action: ruleDigest(semantic),
+        sessionId: action.sessionId,
+        contextId,
+    });
+}
+export function approvalEligible(policy, category) {
+    return (policy === "on-request" ||
+        (typeof policy === "object" && policy[category] === true));
+}
+export function decision(action, kind, reason, delta = EMPTY_DELTA, isHardDeny = false) {
+    if (!["allow", "ask", "deny"].includes(kind) ||
+        (isHardDeny && kind !== "deny"))
+        throw new GuardError("INVALID_DECISION", "Invalid decision");
+    return immutable({
+        kind,
+        reason,
+        actionDigest: action.digest,
+        delta: JSON.parse(canonicalJson(delta)),
+        isHardDeny,
+    });
+}
+export function validateWorkerFrame(value) {
+    const frame = value;
+    if (frame?.schemaVersion !== 1 ||
+        !["data", "update", "result", "error"].includes(frame.type))
+        throw new GuardError("INVALID_IPC", "Invalid worker frame");
+    canonicalJson(value);
+    if (frame.type === "data" && typeof frame.data !== "string")
+        throw new GuardError("INVALID_IPC", "Invalid data frame");
+    if (frame.type === "error" &&
+        (typeof frame.code !== "string" || typeof frame.message !== "string"))
+        throw new GuardError("INVALID_IPC", "Invalid error frame");
+    if (frame.type === "result" && !Object.hasOwn(frame, "result"))
+        throw new GuardError("INVALID_IPC", "Missing worker result");
+    if (frame.type === "update" &&
+        (!frame.result || !Array.isArray(frame.result.content)))
+        throw new GuardError("INVALID_IPC", "Invalid update");
+    return frame;
+}
+//# sourceMappingURL=contracts.js.map

package/dist/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAwBrE,MAAM,CAAC,MAAM,UAAU,GAAwB,MAAM,CAAC,MAAM,CAAC;IACzD,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,IAAI;CACP,CAAC,CAAC;AAkBH,MAAM,CAAC,MAAM,WAAW,GAAoB,MAAM,CAAC,MAAM,CAAC;IACtD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;CAC7B,CAAC,CAAC;AA+OH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAEpB;IADb,YACa,IAAY,EACrB,OAAe,EACf,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAJf,SAAI,GAAJ,IAAI,CAAQ;QAKrB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC7B,CAAC;CACJ;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IACxC,IACI,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS;QAE1B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACnD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IACI,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,EACnD,CAAC;QACC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aACxB,IAAI,EAAE;aACN,GAAG,CACA,CAAC,GAAG,EAAE,EAAE,CACJ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,EAAE,CACzF;aACA,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACtB,CAAC;IACD,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;AACtE,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,KAAc;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AACD,MAAM,UAAU,SAAS,CAAI,KAAQ;IACjC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAwB;IAClD,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QACtD,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;IACvE,KAAK,MAAM,GAAG,IAAI;QACd,WAAW;QACX,YAAY;QACZ,UAAU;QACV,WAAW;KACL,EAAE,CAAC;QACT,IACI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CACX,CAAC,CAAC,EAAE,EAAE,CACF,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAClE;YAED,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IACI,KAAK,CAAC,aAAa,KAAK,SAAS;QACjC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;YAChC,KAAK,CAAC,aAAa,CAAC,IAAI,CACpB,CAAC,IAAI,EAAE,EAAE,CACL,OAAO,IAAI,KAAK,QAAQ;gBACxB,CAAC,UAAU,CAAC,IAAI,CAAC;gBACjB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC1B,CAAC;QAEN,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM;QACrD,MAAM,IAAI,UAAU,CAChB,iBAAiB,EACjB,+CAA+C,CAClD,CAAC;IACN,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAU,EAAE,CAAC;QAC7D,IACI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAE3C,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,SAAS,CACZ,IAAI,CAAC,KAAK,CACN,aAAa,CAAC;QACV,GAAG,KAAK;QACR,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC;QACvD,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC;KACxD,CAAC,CACgB,CACzB,CAAC;AACN,CAAC;AACD,MAAM,UAAU,YAAY,CACxB,KAAyE,EACzE,OAA0B;IAE1B,KAAK,MAAM,GAAG,IAAI;QACd,YAAY;QACZ,MAAM;QACN,KAAK;QACL,WAAW;QACX,gBAAgB;KACV,EAAE,CAAC;QACT,IACI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ;YAC9B,CAAC,KAAK,CAAC,GAAG,CAAC;YACX,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAEzB,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACrE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;IACpE,IACI,CAAC,KAAK,CAAC,IAAI;QACX,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QACzB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAE9B,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACrB,aAAa,CAAC;QACV,GAAG,KAAK;QACR,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;QACvB,aAAa,EAAE,CAAC;QAChB,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC;KACpC,CAAC,CACL,CAAC;IACF,OAAO,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC5D,CAAC;AACD,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC1C,MAAM,EACF,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,SAAS,EACrB,SAAS,EAAE,cAAc,EACzB,GAAG,MAAM,EACZ,GAAG,MAAM,CAAC;IACX,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC;AACD,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,MAAmB,EAAE,SAAiB;IAChE,iFAAiF;IACjF,qFAAqF;IACrF,MAAM,EAAE,uBAAuB,EAAE,aAAa,EAAE,GAAG,WAAW,EAAE,GAC5D,MAAM,CAAC,IAAI,CAAC;IAChB,MAAM,QAAQ,GACV,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,OAAO,aAAa,KAAK,QAAQ;QAC/D,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE;QAClC,CAAC,CAAC,MAAM,CAAC;IACjB,OAAO,MAAM,CAAC;QACV,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC;QAC5B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS;KACZ,CAAC,CAAC;AACP,CAAC;AACD,MAAM,UAAU,gBAAgB,CAC5B,MAAsB,EACtB,QAAkD;IAElD,OAAO,CACH,MAAM,KAAK,YAAY;QACvB,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAC5D,CAAC;AACN,CAAC;AACD,MAAM,UAAU,QAAQ,CACpB,MAAmB,EACnB,IAAkB,EAClB,MAAc,EACd,QAAyB,WAAW,EACpC,UAAU,GAAG,KAAK;IAElB,IACI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxC,CAAC,UAAU,IAAI,IAAI,KAAK,MAAM,CAAC;QAE/B,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IACjE,OAAO,SAAS,CAAC;QACb,IAAI;QACJ,MAAM;QACN,YAAY,EAAE,MAAM,CAAC,MAAM;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACvC,UAAU;KACb,CAAC,CAAC;AACP,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAC9C,MAAM,KAAK,GAAG,KAAoB,CAAC;IACnC,IACI,KAAK,EAAE,aAAa,KAAK,CAAC;QAC1B,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAE3D,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IAChE,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QACvD,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAC9D,IACI,KAAK,CAAC,IAAI,KAAK,OAAO;QACtB,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;QAErE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC1D,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IACjE,IACI,KAAK,CAAC,IAAI,KAAK,QAAQ;QACvB,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEvD,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC;AACjB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,28 @@
+import { type BashToolOptions, type ExtensionFactory, type McpExtensionOptions, type ReadToolOptions } from "@earendil-works/pi-coding-agent";
+import type { PermissionProfile } from "./contracts.js";
+import { type GuardSettings } from "./policy/index.js";
+import type { ReviewProvider } from "./reviewer.js";
+import { GuardController } from "./tools/controller.js";
+import { type ToolExecutor } from "./tools/executor.js";
+import { type McpToolPolicies } from "./tools/mcp.js";
+export interface GuardOptions {
+    cwd?: string;
+    agentDir?: string;
+    settings?: Partial<GuardSettings>;
+    settingsPath?: string;
+    profile?: PermissionProfile;
+    executor?: ToolExecutor;
+    provider?: ReviewProvider;
+    bashOptions?: Omit<BashToolOptions, "operations">;
+    readOptions?: Omit<ReadToolOptions, "operations">;
+    /** Trusted code directories are protected against model writes, including imported siblings. */
+    trustedExtensionPaths?: readonly string[];
+    mcp?: McpExtensionOptions | false;
+    mcpToolPolicies?: McpToolPolicies;
+}
+export declare function createGuardExtension(options?: GuardOptions): {
+    factory: ExtensionFactory;
+    assertReady(): GuardController;
+};
+declare const _default: ExtensionFactory;
+export default _default;