@buyong/pi-codex-auto-review 0.0.0-stage → 0.2.2

package/dist/index.js

@@ -0,0 +1,191 @@
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+import { createBashToolDefinition, createEditToolDefinition, createFindToolDefinition, createGrepToolDefinition, createLsToolDefinition, createReadToolDefinition, createWriteToolDefinition, } from "@earendil-works/pi-coding-agent";
+import { registerApprovalCommands } from "./approval-commands.js";
+import { ApprovalSettingsStore } from "./approval-settings.js";
+import { ApprovalManager, FileGrantPersistence } from "./approvals.js";
+import { AuditLog } from "./audit.js";
+import { createProfile } from "./contracts.js";
+import { defaultProfile } from "./policy/index.js";
+import { AUTHORIZATION_ENTRY, REVIEW_CONTEXT_ENTRY, safeEvidence, } from "./review/context.js";
+import { GuardController } from "./tools/controller.js";
+import { PiExecutor } from "./tools/executor.js";
+import { createGuardedMcpExtension, } from "./tools/mcp.js";
+export function createGuardExtension(options = {}) {
+    let controller;
+    const factory = async (pi) => {
+        const previous = controller;
+        controller = undefined;
+        await previous?.close();
+        const cwd = options.cwd ?? process.cwd();
+        const agentDir = options.agentDir ??
+            process.env.PI_CODING_AGENT_DIR ??
+            join(homedir(), ".pi", "agent");
+        const controlDir = join(agentDir, "guard");
+        const settingsPath = options.settingsPath
+            ? resolve(options.settingsPath)
+            : join(controlDir, "settings.json");
+        const settingsStore = new ApprovalSettingsStore(settingsPath, options.settings, Boolean(options.settingsPath));
+        const settings = await settingsStore.load();
+        const baseline = await defaultProfile(cwd, settings, [agentDir, settingsPath], options.trustedExtensionPaths);
+        const profile = options.profile
+            ? createProfile({
+                ...options.profile,
+                denyRead: [
+                    ...new Set([
+                        ...options.profile.denyRead,
+                        ...baseline.denyRead,
+                    ]),
+                ],
+                denyWrite: [
+                    ...new Set([
+                        ...options.profile.denyWrite,
+                        ...baseline.denyWrite,
+                    ]),
+                ],
+            })
+            : baseline;
+        const audit = new AuditLog(join(controlDir, "audit.jsonl"));
+        const approvals = new ApprovalManager({
+            reviewTimeoutMs: settings.reviewTimeoutMs,
+            approvalTimeoutMs: settings.approvalTimeoutMs,
+            approvalPolicy: settings.approvalPolicy,
+            approvalsReviewer: settings.approvalsReviewer,
+            audit,
+            persistence: new FileGrantPersistence(join(controlDir, "grants.json")),
+        });
+        controller = new GuardController({
+            profile,
+            settings,
+            executor: options.executor ?? new PiExecutor(),
+            approvals,
+            audit,
+            provider: options.provider,
+            shellPath: options.bashOptions?.shellPath,
+            persistContext: (item) => pi.appendEntry(REVIEW_CONTEXT_ENTRY, item),
+        });
+        try {
+            await controller.initialize(cwd);
+        }
+        catch (error) {
+            await controller.close();
+            controller = undefined;
+            throw error;
+        }
+        const guard = controller;
+        pi.registerTool(guard.wrapTool(createBashToolDefinition(cwd, options.bashOptions), options.bashOptions));
+        pi.registerTool(guard.wrapTool(createReadToolDefinition(cwd, options.readOptions), options.readOptions));
+        pi.registerTool(guard.wrapTool(createEditToolDefinition(cwd)));
+        pi.registerTool(guard.wrapTool(createWriteToolDefinition(cwd)));
+        pi.registerTool(guard.wrapTool(createGrepToolDefinition(cwd)));
+        pi.registerTool(guard.wrapTool(createFindToolDefinition(cwd)));
+        pi.registerTool(guard.wrapTool(createLsToolDefinition(cwd)));
+        pi.on("session_start", (_event, context) => {
+            guard.assertReady();
+            guard.reset(context.sessionManager.getSessionId(), context.sessionManager);
+        });
+        pi.on("session_tree", (_event, context) => {
+            guard.reset(context.sessionManager.getSessionId(), context.sessionManager);
+        });
+        pi.on("session_compact", (event) => {
+            guard.reviewContext.summary(event.compactionEntry.summary, event.compactionEntry.id);
+        });
+        pi.on("input", (event) => {
+            if (event.source === "interactive" || event.source === "rpc") {
+                guard.authorizeUser(event.text);
+                pi.appendEntry(AUTHORIZATION_ENTRY, {
+                    text: safeEvidence(event.text),
+                    source: event.source,
+                });
+            }
+        });
+        pi.on("before_agent_start", (event) => {
+            guard.reviewContext.instructions(event);
+        });
+        pi.on("agent_start", (_event, context) => {
+            guard.startTurn(context);
+        });
+        pi.on("message_end", (event) => {
+            guard.reviewContext.message(event.message);
+        });
+        pi.on("tool_call", (event) => {
+            guard.assertReady();
+            guard.noteCall(event);
+            if (![
+                "bash",
+                "read",
+                "edit",
+                "write",
+                "grep",
+                "find",
+                "ls",
+                "codemode",
+                ...guard.options.settings.trustedTools,
+            ].includes(event.toolName) &&
+                !guard.isExternalTool(event.toolName))
+                return {
+                    block: true,
+                    reason: "Unknown tool needs an explicit trusted adapter",
+                };
+        });
+        pi.on("tool_execution_end", (event) => {
+            const result = event.result ?? {}, callIdentity = guard.reviewContext.callIdentity(event.toolCallId);
+            guard.reviewContext.toolResult({
+                tool: event.toolName,
+                toolCallId: event.toolCallId,
+                callIdentity,
+                isError: event.isError,
+                content: (result.content ?? [])
+                    .filter((item) => item.type === "text")
+                    .map((item) => ({
+                    type: "text",
+                    text: item.text,
+                })),
+                ...(result.structuredContent !== undefined
+                    ? {
+                        structuredContent: JSON.parse(JSON.stringify(result.structuredContent)),
+                    }
+                    : {}),
+                ...(event.parentToolCallId
+                    ? {
+                        parentToolCallId: event.parentToolCallId,
+                        parentCallIdentity: guard.reviewContext.callIdentity(event.parentToolCallId),
+                    }
+                    : {}),
+            }, callIdentity);
+            guard.completeCall(event.toolCallId);
+        });
+        pi.on("user_bash", (event, context) => {
+            guard.assertReady();
+            return {
+                operations: guard.userBashOperations(context, event.command),
+            };
+        });
+        pi.on("session_shutdown", async () => {
+            await guard.close();
+        });
+        registerApprovalCommands(pi, guard, settingsStore);
+        if (options.mcp !== false) {
+            try {
+                const mcp = await createGuardedMcpExtension(agentDir, () => guard, options.mcp, options.mcpToolPolicies);
+                await (typeof mcp === "function" ? mcp : mcp.factory)(pi);
+            }
+            catch (error) {
+                await guard.close();
+                controller = undefined;
+                throw error;
+            }
+        }
+    };
+    return {
+        factory,
+        assertReady() {
+            if (!controller)
+                throw new Error("pi-codex-auto-review extension failed to load");
+            controller.assertReady();
+            return controller;
+        },
+    };
+}
+export default createGuardExtension().factory;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAEH,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,GAI5B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAsB,MAAM,mBAAmB,CAAC;AACvE,OAAO,EACH,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,GACf,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAqB,MAAM,qBAAqB,CAAC;AACpE,OAAO,EACH,yBAAyB,GAE5B,MAAM,gBAAgB,CAAC;AAgBxB,MAAM,UAAU,oBAAoB,CAAC,UAAwB,EAAE;IAC3D,IAAI,UAAuC,CAAC;IAC5C,MAAM,OAAO,GAAqB,KAAK,EAAE,EAAE,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC5B,UAAU,GAAG,SAAS,CAAC;QACvB,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,QAAQ,GACV,OAAO,CAAC,QAAQ;YAChB,OAAO,CAAC,GAAG,CAAC,mBAAmB;YAC/B,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY;YACrC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;YAC/B,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QACxC,MAAM,aAAa,GAAG,IAAI,qBAAqB,CAC3C,YAAY,EACZ,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAChC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,cAAc,CACjC,GAAG,EACH,QAAQ,EACR,CAAC,QAAQ,EAAE,YAAY,CAAC,EACxB,OAAO,CAAC,qBAAqB,CAChC,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;YAC3B,CAAC,CAAC,aAAa,CAAC;gBACV,GAAG,OAAO,CAAC,OAAO;gBAClB,QAAQ,EAAE;oBACN,GAAG,IAAI,GAAG,CAAC;wBACP,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ;wBAC3B,GAAG,QAAQ,CAAC,QAAQ;qBACvB,CAAC;iBACL;gBACD,SAAS,EAAE;oBACP,GAAG,IAAI,GAAG,CAAC;wBACP,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS;wBAC5B,GAAG,QAAQ,CAAC,SAAS;qBACxB,CAAC;iBACL;aACJ,CAAC;YACJ,CAAC,CAAC,QAAQ,CAAC;QACf,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;YAClC,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,KAAK;YACL,WAAW,EAAE,IAAI,oBAAoB,CACjC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAClC;SACJ,CAAC,CAAC;QACH,UAAU,GAAG,IAAI,eAAe,CAAC;YAC7B,OAAO;YACP,QAAQ;YACR,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,UAAU,EAAE;YAC9C,SAAS;YACT,KAAK;YACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS;YACzC,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CACrB,EAAE,CAAC,WAAW,CAAC,oBAAoB,EAAE,IAAI,CAAC;SACjD,CAAC,CAAC;QACH,IAAI,CAAC;YACD,MAAM,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;YACzB,UAAU,GAAG,SAAS,CAAC;YACvB,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC;QACzB,EAAE,CAAC,YAAY,CACX,KAAK,CAAC,QAAQ,CACV,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,EAClD,OAAO,CAAC,WAAW,CACtB,CACJ,CAAC;QACF,EAAE,CAAC,YAAY,CACX,KAAK,CAAC,QAAQ,CACV,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,EAClD,OAAO,CAAC,WAAW,CACtB,CACJ,CAAC;QACF,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/D,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/D,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/D,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7D,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;YACvC,KAAK,CAAC,WAAW,EAAE,CAAC;YACpB,KAAK,CAAC,KAAK,CACP,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,EACrC,OAAO,CAAC,cAAc,CACzB,CAAC;QACN,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;YACtC,KAAK,CAAC,KAAK,CACP,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,EACrC,OAAO,CAAC,cAAc,CACzB,CAAC;QACN,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC/B,KAAK,CAAC,aAAa,CAAC,OAAO,CACvB,KAAK,CAAC,eAAe,CAAC,OAAO,EAC7B,KAAK,CAAC,eAAe,CAAC,EAAE,CAC3B,CAAC;QACN,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACrB,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC3D,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,EAAE,CAAC,WAAW,CAAC,mBAAmB,EAAE;oBAChC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;oBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;iBACvB,CAAC,CAAC;YACP,CAAC;QACL,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE;YAClC,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;YACrC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,KAAK,CAAC,WAAW,EAAE,CAAC;YACpB,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACtB,IACI,CAAC;gBACG,MAAM;gBACN,MAAM;gBACN,MAAM;gBACN,OAAO;gBACP,MAAM;gBACN,MAAM;gBACN,IAAI;gBACJ,UAAU;gBACV,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY;aACzC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC1B,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAErC,OAAO;oBACH,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,gDAAgD;iBAC3D,CAAC;QACV,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE;YAClC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,EAC7B,YAAY,GAAG,KAAK,CAAC,aAAa,CAAC,YAAY,CAC3C,KAAK,CAAC,UAAU,CACnB,CAAC;YACN,KAAK,CAAC,aAAa,CAAC,UAAU,CAC1B;gBACI,IAAI,EAAE,KAAK,CAAC,QAAQ;gBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,YAAY;gBACZ,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;qBAC1B,MAAM,CACH,CAAC,IAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CACnD;qBACA,GAAG,CAAC,CAAC,IAAsB,EAAE,EAAE,CAAC,CAAC;oBAC9B,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;iBAClB,CAAC,CAAC;gBACP,GAAG,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS;oBACtC,CAAC,CAAC;wBACI,iBAAiB,EAAE,IAAI,CAAC,KAAK,CACzB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAC3C;qBACJ;oBACH,CAAC,CAAC,EAAE,CAAC;gBACT,GAAG,CAAC,KAAK,CAAC,gBAAgB;oBACtB,CAAC,CAAC;wBACI,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;wBACxC,kBAAkB,EACd,KAAK,CAAC,aAAa,CAAC,YAAY,CAC5B,KAAK,CAAC,gBAAgB,CACzB;qBACR;oBACH,CAAC,CAAC,EAAE,CAAC;aACZ,EACD,YAAY,CACf,CAAC;YACF,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAClC,KAAK,CAAC,WAAW,EAAE,CAAC;YACpB,OAAO;gBACH,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;aAC/D,CAAC;QACN,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;YACjC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,wBAAwB,CAAC,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,yBAAyB,CACvC,QAAQ,EACR,GAAG,EAAE,CAAC,KAAK,EACX,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,eAAe,CAC1B,CAAC;gBACF,MAAM,CAAC,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,UAAU,GAAG,SAAS,CAAC;gBACvB,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC;IACL,CAAC,CAAC;IACF,OAAO;QACH,OAAO;QACP,WAAW;YACP,IAAI,CAAC,UAAU;gBACX,MAAM,IAAI,KAAK,CACX,+CAA+C,CAClD,CAAC;YACN,UAAU,CAAC,WAAW,EAAE,CAAC;YACzB,OAAO,UAAU,CAAC;QACtB,CAAC;KACJ,CAAC;AACN,CAAC;AACD,eAAe,oBAAoB,EAAE,CAAC,OAAO,CAAC"}

package/dist/pi-host.d.ts

@@ -0,0 +1,2 @@
+/** Resolve the SDK supplied by Pi's extension loader, including global installs. */
+export declare function getPiSDKEntryPath(): string;

package/dist/pi-host.js

@@ -0,0 +1,7 @@
+import { resolve } from "node:path";
+import { getPackageDir } from "@earendil-works/pi-coding-agent";
+/** Resolve the SDK supplied by Pi's extension loader, including global installs. */
+export function getPiSDKEntryPath() {
+    return resolve(getPackageDir(), "dist/index.js");
+}
+//# sourceMappingURL=pi-host.js.map

package/dist/pi-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-host.js","sourceRoot":"","sources":["../src/pi-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAEhE,oFAAoF;AACpF,MAAM,UAAU,iBAAiB;IAC7B,OAAO,OAAO,CAAC,aAAa,EAAE,EAAE,eAAe,CAAC,CAAC;AACrD,CAAC"}

package/dist/policy/domains.d.ts

@@ -0,0 +1,5 @@
+export declare function normalizeHost(host: string): string;
+export declare function isNetworkHost(host: unknown): boolean;
+export declare function isDomainPattern(pattern: unknown): pattern is string;
+/** Shared with the native configuration so policy and transport agree on subdomains. */
+export declare function matchesDomain(host: string, pattern: string): boolean;

package/dist/policy/domains.js

@@ -0,0 +1,28 @@
+import { isIP } from "node:net";
+export function normalizeHost(host) {
+    const value = host.toLowerCase().replace(/\.+$/, "");
+    const literal = value.startsWith("[") && value.endsWith("]")
+        ? value.slice(1, -1)
+        : value;
+    return isIP(literal) === 6
+        ? new URL(`http://[${literal}]/`).hostname.slice(1, -1)
+        : value;
+}
+export function isNetworkHost(host) {
+    return (typeof host === "string" &&
+        (isIP(normalizeHost(host)) === 6 || /^[a-z0-9][a-z0-9.-]*$/i.test(host)));
+}
+export function isDomainPattern(pattern) {
+    return (typeof pattern === "string" &&
+        (isNetworkHost(pattern) ||
+            (pattern.startsWith("*.") &&
+                /^[a-z0-9][a-z0-9.-]*$/i.test(pattern.slice(2)))));
+}
+/** Shared with the native configuration so policy and transport agree on subdomains. */
+export function matchesDomain(host, pattern) {
+    const value = normalizeHost(host), rule = normalizeHost(pattern);
+    return rule.startsWith("*.")
+        ? value.endsWith(rule.slice(1)) && value !== rule.slice(2)
+        : value === rule;
+}
+//# sourceMappingURL=domains.js.map

package/dist/policy/domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.js","sourceRoot":"","sources":["../../src/policy/domains.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,MAAM,UAAU,aAAa,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,OAAO,GACT,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACxC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpB,CAAC,CAAC,KAAK,CAAC;IAChB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,KAAK,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,IAAa;IACvC,OAAO,CACH,OAAO,IAAI,KAAK,QAAQ;QACxB,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAC3E,CAAC;AACN,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC5C,OAAO,CACH,OAAO,OAAO,KAAK,QAAQ;QAC3B,CAAC,aAAa,CAAC,OAAO,CAAC;YACnB,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;gBACrB,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC5D,CAAC;AACN,CAAC;AACD,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAe;IACvD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,EAC7B,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACxB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC;AACzB,CAAC"}

package/dist/policy/index.d.ts

@@ -0,0 +1,55 @@
+import { type ApprovalPolicy, type GuardAction, type PermissionProfile, type PolicyDecision } from "../contracts.js";
+import { canonicalPath, isWithin, resolveToolPath } from "./paths.js";
+import { analyzeShell, matchesPrefix } from "./shell.js";
+export { analyzeShell, canonicalPath, isWithin, matchesPrefix, resolveToolPath, };
+export interface CommandRule {
+    readonly prefix: readonly string[];
+    readonly decision: "allow" | "ask" | "deny";
+}
+export interface GuardSettings {
+    readonly mode: "read-only" | "workspace-write";
+    readonly commandRules: readonly CommandRule[];
+    readonly allowedDomains: readonly string[];
+    readonly reviewTimeoutMs: number;
+    readonly approvalTimeoutMs: number;
+    readonly executionTimeoutSeconds: number;
+    readonly trustedTools: readonly string[];
+    readonly approvalPolicy: ApprovalPolicy;
+    readonly approvalsReviewer: "auto_review" | "user";
+    readonly reviewModel: {
+        readonly provider: string;
+        readonly id: string;
+    } | null;
+    /** Replaces only the tenant policy; intrinsic risk, trust and outcome rules remain enforced. */
+    readonly reviewPolicy: string | null;
+    readonly reviewMaxRounds: number;
+    readonly reviewMaxOutputTokens: number;
+    readonly reviewContextChars: number;
+    readonly ruleFiles: readonly string[];
+    readonly writableRoots: readonly string[];
+    readonly excludeSlashTmp: boolean;
+    readonly excludeTmpdir: boolean;
+    readonly projectDocMaxBytes: number;
+    readonly projectDocFallbackFilenames: readonly string[];
+    readonly projectRootMarkers: readonly string[] | null;
+}
+export declare const DEFAULT_SETTINGS: GuardSettings;
+export declare function validateSettings(value: unknown): GuardSettings;
+export declare function loadSettings(path: string): Promise<GuardSettings>;
+export declare function defaultProfile(cwd: string, settings: GuardSettings, controlPaths?: readonly string[], trustedExtensionPaths?: readonly string[]): Promise<PermissionProfile>;
+export declare class PolicyEngine {
+    readonly settings: GuardSettings;
+    private rules;
+    private isInitialized;
+    private ruleSources;
+    private compiledRules?;
+    private readonly matchCache;
+    private effectiveProfile;
+    get profile(): PermissionProfile;
+    get revision(): string;
+    constructor(settings: GuardSettings, profile: PermissionProfile);
+    initialize(cwd?: string): Promise<void>;
+    evaluate(action: GuardAction, signal?: AbortSignal): Promise<PolicyDecision>;
+    private shellDecision;
+    private resolvedProfile;
+}