@corenel/harness 0.10.0 → 0.11.0

package/dist/approvals/decisionLog.d.ts

@@ -0,0 +1,21 @@
+import type { DecisionRecord, FileService } from '@corenel/protocol';
+export declare const ACTIVE_SEGMENT = "decisions.jsonl";
+export interface DecisionLogOptions {
+    files: () => Promise<FileService | null>;
+    root: string;
+    segmentLines?: number;
+    maxArchived?: number;
+    flushMs?: number;
+    flushAt?: number;
+    now?: () => number;
+    log?: (line: string) => void;
+}
+export interface DecisionLog {
+    append(rec: DecisionRecord): void;
+    flush(): Promise<void>;
+    tail(limit: number): Promise<DecisionRecord[]>;
+    lineCount(): Promise<number>;
+    clear(): Promise<void>;
+}
+export declare function createDecisionLog(opts: DecisionLogOptions): DecisionLog;
+//# sourceMappingURL=decisionLog.d.ts.map

package/dist/approvals/decisionLog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionLog.d.ts","sourceRoot":"","sources":["../../approvals/decisionLog.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrE,eAAO,MAAM,cAAc,oBAAoB,CAAC;AAGhD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAAC;IAClC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC/C,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAgBD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,GAAG,WAAW,CAmGvE"}

package/dist/approvals/decisionLog.js

@@ -0,0 +1,129 @@
+import { flattenFiles } from '@corenel/protocol';
+export const ACTIVE_SEGMENT = 'decisions.jsonl';
+const ARCHIVE_RE = /^decisions-(\d+)\.jsonl$/;
+function parseLines(text) {
+    const out = [];
+    for (const line of text.split('\n')) {
+        if (!line.trim())
+            continue;
+        try {
+            const v = JSON.parse(line);
+            if (v && v.v === 1 && typeof v.tool === 'string')
+                out.push(v);
+        }
+        catch {
+            /* a torn or hand-edited line is skipped, not fatal */
+        }
+    }
+    return out;
+}
+export function createDecisionLog(opts) {
+    const segmentLines = opts.segmentLines ?? 500;
+    const maxArchived = opts.maxArchived ?? 10;
+    const flushMs = opts.flushMs ?? 1000;
+    const flushAt = opts.flushAt ?? 50;
+    const now = opts.now ?? (() => Date.now());
+    const activePath = `${opts.root}/${ACTIVE_SEGMENT}`;
+    let queue = [];
+    let active = null;
+    let timer = null;
+    let chain = Promise.resolve();
+    let reported = false;
+    const fail = (e) => {
+        if (reported)
+            return;
+        reported = true;
+        opts.log?.(`approvals: decision log write failed (${e instanceof Error ? e.message : String(e)}); further failures are silent`);
+    };
+    async function archivedNames(fs) {
+        const nodes = await fs.list(opts.root).catch(() => []);
+        return flattenFiles(nodes)
+            .map((n) => n.path.split('/').pop() ?? '')
+            .filter((n) => ARCHIVE_RE.test(n))
+            .sort((a, b) => Number(ARCHIVE_RE.exec(a)[1]) - Number(ARCHIVE_RE.exec(b)[1]));
+    }
+    async function loadActive(fs) {
+        if (active)
+            return active;
+        const text = await fs.read(activePath).catch(() => '');
+        active = { text, lines: text.split('\n').filter((l) => l.trim()).length };
+        return active;
+    }
+    async function writeBatch(batch) {
+        const fs = await opts.files();
+        if (!fs)
+            return;
+        let cur = await loadActive(fs);
+        for (const line of batch) {
+            if (cur.lines >= segmentLines) {
+                await fs.write(activePath, cur.text);
+                await fs.rename(activePath, `${opts.root}/decisions-${now()}.jsonl`);
+                const names = await archivedNames(fs);
+                for (const old of names.slice(0, Math.max(0, names.length - maxArchived))) {
+                    await fs.remove(`${opts.root}/${old}`).catch(() => undefined);
+                }
+                cur = active = { text: '', lines: 0 };
+            }
+            cur.text += line;
+            cur.lines += 1;
+        }
+        await fs.write(activePath, cur.text);
+    }
+    function flush() {
+        if (timer) {
+            clearTimeout(timer);
+            timer = null;
+        }
+        const batch = queue;
+        queue = [];
+        if (!batch.length)
+            return chain;
+        chain = chain.then(() => writeBatch(batch)).catch((e) => { active = null; fail(e); });
+        return chain;
+    }
+    return {
+        append(rec) {
+            queue.push(JSON.stringify(rec) + '\n');
+            if (queue.length >= flushAt) {
+                void flush();
+                return;
+            }
+            if (!timer)
+                timer = setTimeout(() => { timer = null; void flush(); }, flushMs);
+        },
+        flush,
+        async tail(limit) {
+            await flush();
+            const fs = await opts.files();
+            if (!fs)
+                return [];
+            const names = await archivedNames(fs);
+            const out = parseLines(await fs.read(activePath).catch(() => ''));
+            for (let i = names.length - 1; i >= 0 && out.length < limit; i--) {
+                out.unshift(...parseLines(await fs.read(`${opts.root}/${names[i]}`).catch(() => '')));
+            }
+            return out.slice(-limit);
+        },
+        async lineCount() {
+            await flush();
+            const fs = await opts.files();
+            if (!fs)
+                return 0;
+            let n = parseLines(await fs.read(activePath).catch(() => '')).length;
+            for (const name of await archivedNames(fs))
+                n += parseLines(await fs.read(`${opts.root}/${name}`).catch(() => '')).length;
+            return n;
+        },
+        async clear() {
+            await flush();
+            const fs = await opts.files();
+            if (!fs)
+                return;
+            for (const name of await archivedNames(fs))
+                await fs.remove(`${opts.root}/${name}`).catch(() => undefined);
+            await fs.remove(activePath).catch(() => undefined);
+            active = { text: '', lines: 0 };
+        },
+    };
+}
+//# sourceMappingURL=decisionLog.js.map

package/dist/approvals/decisionLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisionLog.js","sourceRoot":"","sources":["../../approvals/decisionLog.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAChD,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAqB9C,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAwB;IACxD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,GAAG,CAAC;IAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC;IAEpD,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,MAAM,GAA2C,IAAI,CAAC;IAC1D,IAAI,KAAK,GAAyC,IAAI,CAAC;IACvD,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7C,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,IAAI,GAAG,CAAC,CAAU,EAAQ,EAAE;QAChC,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC,GAAG,EAAE,CAAC,yCAAyC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC;IAClI,CAAC,CAAC;IAEF,KAAK,UAAU,aAAa,CAAC,EAAe;QAC1C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,OAAO,YAAY,CAAC,KAAK,CAAC;aACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;aACzC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,EAAe;QACvC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,KAAe;QACvC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,OAAO;QAChB,IAAI,GAAG,GAAG,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,GAAG,CAAC,KAAK,IAAI,YAAY,EAAE,CAAC;gBAC9B,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrC,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,IAAI,cAAc,GAAG,EAAE,QAAQ,CAAC,CAAC;gBACrE,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,EAAE,CAAC,CAAC;gBACtC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC;oBAC1E,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAChE,CAAC;gBACD,GAAG,GAAG,MAAM,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACxC,CAAC;YACD,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;YACjB,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;QACjB,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,SAAS,KAAK;QACZ,IAAI,KAAK,EAAE,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;QACjD,MAAM,KAAK,GAAG,KAAK,CAAC;QACpB,KAAK,GAAG,EAAE,CAAC;QACX,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAChC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO;QACL,MAAM,CAAC,GAAG;YACR,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,EAAE,CAAC;gBAAC,KAAK,KAAK,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtD,IAAI,CAAC,KAAK;gBAAE,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACjF,CAAC;QACD,KAAK;QACL,KAAK,CAAC,IAAI,CAAC,KAAK;YACd,MAAM,KAAK,EAAE,CAAC;YACd,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,EAAE;gBAAE,OAAO,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,EAAE,CAAC,CAAC;YACtC,MAAM,GAAG,GAAqB,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACpF,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;gBACjE,GAAG,CAAC,OAAO,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,SAAS;YACb,MAAM,KAAK,EAAE,CAAC;YACd,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,EAAE;gBAAE,OAAO,CAAC,CAAC;YAClB,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YACrE,KAAK,MAAM,IAAI,IAAI,MAAM,aAAa,CAAC,EAAE,CAAC;gBAAE,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAC1H,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,KAAK,EAAE,CAAC;YACd,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,EAAE;gBAAE,OAAO;YAChB,KAAK,MAAM,IAAI,IAAI,MAAM,aAAa,CAAC,EAAE,CAAC;gBAAE,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3G,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAClC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/approvals/hooks.d.ts

@@ -0,0 +1,18 @@
+import type { ApprovalSuggestion, DecisionEvent, RecordContext, StandingApprovals } from '@corenel/protocol';
+import type { ApprovalsService } from './service';
+export interface ApprovalsHookOptions {
+    /** False = record only (a non-interactive run): the kernel gets no standing lookup. */
+    standing: boolean;
+    /** Read at decision time, so a session id learned later is recorded. */
+    context: () => RecordContext;
+    /** A suggestion the service produced. A throw is swallowed. */
+    onSuggestion?: (s: ApprovalSuggestion) => void;
+}
+export interface ApprovalsHooks {
+    standing?: StandingApprovals;
+    onDecision: (e: DecisionEvent) => void;
+    /** Resolves once every record started so far has settled. Never rejects. */
+    settled: () => Promise<void>;
+}
+export declare function approvalsHooks(service: ApprovalsService, opts: ApprovalsHookOptions): ApprovalsHooks;
+//# sourceMappingURL=hooks.d.ts.map

package/dist/approvals/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../approvals/hooks.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC7G,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAElD,MAAM,WAAW,oBAAoB;IACnC,uFAAuF;IACvF,QAAQ,EAAE,OAAO,CAAC;IAClB,wEAAwE;IACxE,OAAO,EAAE,MAAM,aAAa,CAAC;IAC7B,+DAA+D;IAC/D,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,kBAAkB,KAAK,IAAI,CAAC;CAChD;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,IAAI,CAAC;IACvC,4EAA4E;IAC5E,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,oBAAoB,GAAG,cAAc,CAgCpG"}

package/dist/approvals/hooks.js

@@ -0,0 +1,34 @@
+export function approvalsHooks(service, opts) {
+    const inflight = new Set();
+    const onDecision = (e) => {
+        let ctx;
+        try {
+            ctx = opts.context();
+        }
+        catch {
+            return;
+        }
+        let started;
+        try {
+            started = service.record(e, ctx);
+        }
+        catch {
+            return;
+        }
+        const p = started.then((s) => {
+            if (!s || !opts.onSuggestion)
+                return;
+            try {
+                opts.onSuggestion(s);
+            }
+            catch { /* a view failure never reaches the run */ }
+        }, () => undefined);
+        inflight.add(p);
+        void p.finally(() => inflight.delete(p));
+    };
+    const settled = async () => {
+        await Promise.allSettled([...inflight]);
+    };
+    return opts.standing ? { standing: service.standing, onDecision, settled } : { onDecision, settled };
+}
+//# sourceMappingURL=hooks.js.map

package/dist/approvals/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../approvals/hooks.ts"],"names":[],"mappings":"AA0BA,MAAM,UAAU,cAAc,CAAC,OAAyB,EAAE,IAA0B;IAClF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiB,CAAC;IAE1C,MAAM,UAAU,GAAG,CAAC,CAAgB,EAAQ,EAAE;QAC5C,IAAI,GAAkB,CAAC;QACvB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,OAA2C,CAAC;QAChD,IAAI,CAAC;YACH,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAkB,OAAO,CAAC,IAAI,CACnC,CAAC,CAAC,EAAE,EAAE;YACJ,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY;gBAAE,OAAO;YACrC,IAAI,CAAC;gBAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;QACpF,CAAC,EACD,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEF,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACvG,CAAC"}

package/dist/approvals/index.d.ts

@@ -0,0 +1,10 @@
+export { summarizeArgs, rawArgs, isPathLike } from './summarize';
+export { createDecisionLog, ACTIVE_SEGMENT, type DecisionLog, type DecisionLogOptions } from './decisionLog';
+export { createStandingStore, subjectMatchesRule, type StandingStore } from './standingStore';
+export { isShellTool, isShellToolKey, isNeverStanding } from './shellTools';
+export { approvalsHooks, type ApprovalsHookOptions, type ApprovalsHooks } from './hooks';
+export type { TextStore } from './textStore';
+export { createSettingsStore, DEFAULT_SETTINGS, type SettingsStore } from './settings';
+export { allowStreak, shouldSuggest, toolKey, type SuggestInput } from './suggest';
+export { createApprovals, isApprovalRelevant, toRecord, type ApprovalsService, type ApprovalsServiceOptions, type ScopeLocation, } from './service';
+//# sourceMappingURL=index.d.ts.map

package/dist/approvals/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../approvals/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC7G,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,KAAK,oBAAoB,EAAE,KAAK,cAAc,EAAE,MAAM,SAAS,CAAC;AACzF,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,eAAe,EAAE,kBAAkB,EAAE,QAAQ,EAC7C,KAAK,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,KAAK,aAAa,GACxE,MAAM,WAAW,CAAC"}

package/dist/approvals/index.js

@@ -0,0 +1,10 @@
+/* Approval suggestions + local permission decision log. */
+export { summarizeArgs, rawArgs, isPathLike } from './summarize.js';
+export { createDecisionLog, ACTIVE_SEGMENT } from './decisionLog.js';
+export { createStandingStore, subjectMatchesRule } from './standingStore.js';
+export { isShellTool, isShellToolKey, isNeverStanding } from './shellTools.js';
+export { approvalsHooks } from './hooks.js';
+export { createSettingsStore, DEFAULT_SETTINGS } from './settings.js';
+export { allowStreak, shouldSuggest, toolKey } from './suggest.js';
+export { createApprovals, isApprovalRelevant, toRecord, } from './service.js';
+//# sourceMappingURL=index.js.map

package/dist/approvals/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../approvals/index.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAA6C,MAAM,eAAe,CAAC;AAC7G,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAsB,MAAM,iBAAiB,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAkD,MAAM,SAAS,CAAC;AAEzF,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAsB,MAAM,YAAY,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAqB,MAAM,WAAW,CAAC;AACnF,OAAO,EACL,eAAe,EAAE,kBAAkB,EAAE,QAAQ,GAE9C,MAAM,WAAW,CAAC"}

package/dist/approvals/service.d.ts

@@ -0,0 +1,46 @@
+import type { ApprovalScope, ApprovalSuggestion, ApprovalsSettings, DecisionEvent, DecisionRecord, FileService, RecordContext, StandingApprovals, StandingRule, SuggestionChoice } from '@corenel/protocol';
+import type { TextStore } from './textStore';
+export interface ScopeLocation {
+    files: () => Promise<FileService | null>;
+    root: string;
+    /** The workspace's identity (its FileService cacheId). Keys workspace-scope
+     * standing rules; absent = no workspace-scope rules for this workspace. */
+    workspaceId?: string;
+}
+export interface ApprovalsServiceOptions {
+    workspace: () => ScopeLocation | null;
+    /** Where the GLOBAL decision log lives. Standing rules and settings do not. */
+    global: ScopeLocation;
+    standing: {
+        global: TextStore;
+        workspace: (id: string) => TextStore;
+    };
+    settings: TextStore;
+    log?: (line: string) => void;
+    now?: () => number;
+}
+export interface ApprovalsService {
+    record(e: DecisionEvent, ctx: RecordContext): Promise<ApprovalSuggestion | null>;
+    standing: StandingApprovals;
+    respond(s: ApprovalSuggestion, choice: SuggestionChoice): Promise<void>;
+    listRules(): Promise<{
+        workspace: StandingRule[];
+        global: StandingRule[];
+    }>;
+    revoke(scope: ApprovalScope, tool: string): Promise<void>;
+    settings(): Promise<ApprovalsSettings>;
+    /** Strict read for a caller about to write the whole settings object back
+     * (final review M5) -- see SettingsStore.readStrict's doc. */
+    settingsStrict(): Promise<ApprovalsSettings>;
+    saveSettings(s: ApprovalsSettings): Promise<void>;
+    logSize(): Promise<{
+        workspace: number;
+        global: number;
+    }>;
+    clearLog(scope: ApprovalScope): Promise<void>;
+    flush(): Promise<void>;
+}
+export declare function isApprovalRelevant(e: DecisionEvent): boolean;
+export declare function toRecord(e: DecisionEvent, ctx: RecordContext, captureRaw: boolean, ts: string): DecisionRecord;
+export declare function createApprovals(opts: ApprovalsServiceOptions): ApprovalsService;
+//# sourceMappingURL=service.d.ts.map

package/dist/approvals/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../approvals/service.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EACV,aAAa,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,EAAE,cAAc,EACnF,WAAW,EAAE,aAAa,EAAE,iBAAiB,EAAE,YAAY,EAAE,gBAAgB,EAC9E,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb;+EAC2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,aAAa,GAAG,IAAI,CAAC;IACtC,+EAA+E;IAC/E,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE;QAAE,MAAM,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,SAAS,CAAA;KAAE,CAAC;IACtE,QAAQ,EAAE,SAAS,CAAC;IACpB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACjF,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,SAAS,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,YAAY,EAAE,CAAC;QAAC,MAAM,EAAE,YAAY,EAAE,CAAA;KAAE,CAAC,CAAC;IAC5E,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,QAAQ,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvC;kEAC8D;IAC9D,cAAc,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7C,YAAY,CAAC,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,OAAO,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,aAAa,GAAG,OAAO,CAE5D;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,cAAc,CAU9G;AASD,wBAAgB,eAAe,CAAC,IAAI,EAAE,uBAAuB,GAAG,gBAAgB,CAyJ/E"}

package/dist/approvals/service.js

@@ -0,0 +1,181 @@
+import { isCheckpointTool } from '@corenel/protocol';
+import { createDecisionLog } from './decisionLog.js';
+import { createSettingsStore } from './settings.js';
+import { isShellTool, isShellToolKey } from './shellTools.js';
+import { createStandingStore } from './standingStore.js';
+import { allowStreak, shouldSuggest, toolKey } from './suggest.js';
+import { rawArgs, summarizeArgs } from './summarize.js';
+export function isApprovalRelevant(e) {
+    return !(e.by === 'policy' && e.decision === 'allow' && e.subject.mutates !== true);
+}
+export function toRecord(e, ctx, captureRaw, ts) {
+    return {
+        v: 1, ts, ...ctx,
+        tool: e.subject.name,
+        ...(e.subject.address ? { address: e.subject.address } : {}),
+        ...(e.subject.mutates !== undefined ? { mutates: e.subject.mutates } : {}),
+        level: e.level, decision: e.decision, by: e.by,
+        args: summarizeArgs(e.input),
+        ...(captureRaw ? { raw: rawArgs(e.input) } : {}),
+    };
+}
+const SEED_TAIL = 500;
+export function createApprovals(opts) {
+    const now = opts.now ?? (() => Date.now());
+    const settingsStore = createSettingsStore({ store: opts.settings });
+    const globalStanding = createStandingStore({ store: opts.standing.global });
+    /* Scope state is keyed by the concrete FileService INSTANCE (plus root) and
+     * its log is bound to that instance. A cached state never re-resolves
+     * loc.files(): that returns whatever is active at CALL time, so a folder
+     * switch inside the log's flush window would write one workspace's queued
+     * records into another's log, and two folders sharing a cacheId (dir:<name>)
+     * would share one state. `all` is only for flush(). */
+    const byInstance = new WeakMap();
+    const noFiles = new Map();
+    const all = new Set();
+    const suggested = new Set();
+    async function stateFor(loc) {
+        const fs = await loc.files();
+        let byRoot = noFiles;
+        if (fs) {
+            byRoot = byInstance.get(fs) ?? new Map();
+            byInstance.set(fs, byRoot);
+        }
+        let s = byRoot.get(loc.root);
+        if (!s) {
+            s = {
+                log: createDecisionLog({ files: async () => fs, root: loc.root, ...(opts.log ? { log: opts.log } : {}) }),
+                streaks: null,
+            };
+            byRoot.set(loc.root, s);
+            all.add(s);
+        }
+        return s;
+    }
+    /** The workspace-scope standing store, or null when the active workspace has
+     * no identity to key it by (or there is no workspace). */
+    function workspaceStanding(ws) {
+        return ws?.workspaceId ? createStandingStore({ store: opts.standing.workspace(ws.workspaceId) }) : null;
+    }
+    /** The standing store for a scope, falling back to global when the workspace
+     * scope has no store. */
+    function standingFor(scope, ws) {
+        return (scope === 'workspace' ? workspaceStanding(ws) : null) ?? globalStanding;
+    }
+    function active() {
+        const ws = opts.workspace();
+        return ws ? { ws, loc: ws, scope: 'workspace' } : { ws, loc: opts.global, scope: 'global' };
+    }
+    async function streaksOf(s) {
+        if (s.streaks)
+            return s.streaks;
+        const tail = await s.log.tail(SEED_TAIL);
+        const m = new Map();
+        for (const key of new Set(tail.map(toolKey)))
+            m.set(key, allowStreak(tail, key));
+        s.streaks = m;
+        return m;
+    }
+    async function anyStanding(subject) {
+        const wsStore = workspaceStanding(opts.workspace());
+        const stores = [globalStanding, ...(wsStore ? [wsStore] : [])];
+        for (const st of stores) {
+            if (await st.matches(subject).catch(() => false))
+                return true;
+        }
+        return false;
+    }
+    // A checkpoint never matches a standing rule, including one written before
+    // checkpoints existed (see CHECKPOINT_TOOLS): only the policy lifts its ask.
+    const standing = {
+        matches: (subject) => (isCheckpointTool(subject) || isShellTool(subject) ? Promise.resolve(false) : anyStanding(subject).catch(() => false)),
+    };
+    return {
+        standing,
+        async record(e, ctx) {
+            try {
+                if (!isApprovalRelevant(e))
+                    return null;
+                const settings = await settingsStore.read();
+                const { ws, loc, scope } = active();
+                const s = await stateFor(loc);
+                const streaks = await streaksOf(s);
+                s.log.append(toRecord(e, ctx, settings.captureRawArgs, new Date(now()).toISOString()));
+                if (e.by !== 'human')
+                    return null;
+                // Never offer to stop asking at a checkpoint or for a shell tool: both are
+                // logged, never suggested.
+                if (isCheckpointTool(e.subject) || isShellTool(e.subject))
+                    return null;
+                const key = toolKey({ tool: e.subject.name, ...(e.subject.address ? { address: e.subject.address } : {}) });
+                const streak = e.decision === 'deny' ? 0 : (streaks.get(key) ?? 0) + 1;
+                streaks.set(key, streak);
+                if (e.decision !== 'allow')
+                    return null;
+                const runKey = `${ctx.runId ?? ''}::${key}`;
+                if (suggested.has(runKey))
+                    return null;
+                const file = await standingFor(scope, ws).read();
+                const dismissal = file.dismissed.find((d) => d.tool === key);
+                const due = shouldSuggest({
+                    key, streak, threshold: settings.threshold,
+                    standing: await anyStanding(e.subject),
+                    ...(dismissal ? { dismissal } : {}),
+                });
+                if (!due)
+                    return null;
+                suggested.add(runKey);
+                return { tool: key, count: streak, scope, scopeChoice: !!workspaceStanding(ws) };
+            }
+            catch {
+                return null;
+            }
+        },
+        async respond(sug, choice) {
+            const ws = opts.workspace();
+            if ((choice === 'workspace' || choice === 'global') && isShellToolKey(sug.tool)) {
+                throw new Error(`shell tools are never always-allowed: ${sug.tool}`);
+            }
+            if (isShellToolKey(sug.tool))
+                return;
+            if (choice === 'workspace' || choice === 'global') {
+                if (isCheckpointTool(sug.tool))
+                    return;
+                await standingFor(choice, ws).addRule(sug.tool, 'suggestion');
+                return;
+            }
+            const threshold = (await settingsStore.read()).threshold;
+            await standingFor(sug.scope, ws).setDismissal(choice === 'never' ? { tool: sug.tool } : { tool: sug.tool, snoozeUntilCount: sug.count + threshold });
+        },
+        async listRules() {
+            const wsStore = workspaceStanding(opts.workspace());
+            return {
+                workspace: wsStore ? (await wsStore.read()).rules : [],
+                global: (await globalStanding.read()).rules,
+            };
+        },
+        async revoke(scope, tool) {
+            await standingFor(scope, opts.workspace()).removeRule(tool);
+        },
+        settings: () => settingsStore.read(),
+        settingsStrict: () => settingsStore.readStrict(),
+        saveSettings: (s) => settingsStore.write(s),
+        async logSize() {
+            const ws = opts.workspace();
+            return {
+                workspace: ws ? await (await stateFor(ws)).log.lineCount() : 0,
+                global: await (await stateFor(opts.global)).log.lineCount(),
+            };
+        },
+        async clearLog(scope) {
+            const ws = opts.workspace();
+            const s = await stateFor(scope === 'workspace' && ws ? ws : opts.global);
+            await s.log.clear();
+            s.streaks = new Map();
+        },
+        async flush() {
+            await Promise.all([...all].map((s) => s.log.flush()));
+        },
+    };
+}
+//# sourceMappingURL=service.js.map

package/dist/approvals/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../approvals/service.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAoB,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAsB,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAqCrD,MAAM,UAAU,kBAAkB,CAAC,CAAgB;IACjD,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,CAAgB,EAAE,GAAkB,EAAE,UAAmB,EAAE,EAAU;IAC5F,OAAO;QACL,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,GAAG;QAChB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;QACpB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;QAC9C,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC;QAC5B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjD,CAAC;AACJ,CAAC;AAOD,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,MAAM,UAAU,eAAe,CAAC,IAA6B;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,aAAa,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5E;;;;;2DAKuD;IACvD,MAAM,UAAU,GAAG,IAAI,OAAO,EAAwC,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAc,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,KAAK,UAAU,QAAQ,CAAC,GAAkB;QACxC,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,MAAM,GAAG,OAAO,CAAC;QACrB,IAAI,EAAE,EAAE,CAAC;YACP,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,EAAsB,CAAC;YAC7D,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG;gBACF,GAAG,EAAE,iBAAiB,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACzG,OAAO,EAAE,IAAI;aACd,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACb,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED;8DAC0D;IAC1D,SAAS,iBAAiB,CAAC,EAAwB;QACjD,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1G,CAAC;IAED;6BACyB;IACzB,SAAS,WAAW,CAAC,KAAoB,EAAE,EAAwB;QACjE,OAAO,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC;IAClF,CAAC;IAED,SAAS,MAAM;QACb,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC9F,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,CAAa;QACpC,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,IAAI,GAAG,EAAkB,CAAC;QACpC,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;QACd,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,OAAiC;QAC1D,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;YACxB,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;QAChE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,QAAQ,GAAsB;QAClC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;KAC7I,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG;YACjB,IAAI,CAAC;gBACH,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACxC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;gBAC5C,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC;gBACpC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC9B,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;gBACnC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;gBACvF,IAAI,CAAC,CAAC,EAAE,KAAK,OAAO;oBAAE,OAAO,IAAI,CAAC;gBAClC,2EAA2E;gBAC3E,2BAA2B;gBAC3B,IAAI,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACvE,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC5G,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACvE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACzB,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO;oBAAE,OAAO,IAAI,CAAC;gBACxC,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBAC5C,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACvC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;gBAC7D,MAAM,GAAG,GAAG,aAAa,CAAC;oBACxB,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC1C,QAAQ,EAAE,MAAM,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;oBACtC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpC,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG;oBAAE,OAAO,IAAI,CAAC;gBACtB,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACtB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,CAAC;YACnF,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM;YACvB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChF,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO;YACrC,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAClD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,OAAO;gBACvC,MAAM,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC;YACzD,MAAM,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,CAAC,KAAK,GAAG,SAAS,EAAE,CAAC,CAAC;QACvJ,CAAC;QACD,KAAK,CAAC,SAAS;YACb,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YACpD,OAAO;gBACL,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBACtD,MAAM,EAAE,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK;aAC5C,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI;YACtB,MAAM,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE;QACpC,cAAc,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE;QAChD,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO;YACX,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO;gBACL,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC9D,MAAM,EAAE,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE;aAC5D,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,KAAK;YAClB,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,KAAK,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACzE,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YACpB,CAAC,CAAC,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;QACxB,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/approvals/settings.d.ts

@@ -0,0 +1,20 @@
+import type { ApprovalsSettings } from '@corenel/protocol';
+import type { TextStore } from './textStore';
+export declare const DEFAULT_SETTINGS: ApprovalsSettings;
+export interface SettingsStore {
+    read(): Promise<ApprovalsSettings>;
+    /** Like `read()`, but a genuine I/O failure PROPAGATES instead of silently
+     * falling back to defaults -- missing (ENOENT) still means defaults, and
+     * malformed-but-READABLE JSON still falls back too (that is a corrupt file,
+     * not an unreadable one). Only for a caller that is about to WRITE the
+     * whole settings object back after changing one field: reading leniently
+     * there would let a transient EBUSY/EACCES silently reset every other
+     * field to its default (final review M5) -- `corenel approvals set` uses
+     * this, `list`'s best-effort display does not. */
+    readStrict(): Promise<ApprovalsSettings>;
+    write(s: ApprovalsSettings): Promise<void>;
+}
+export declare function createSettingsStore(opts: {
+    store: TextStore;
+}): SettingsStore;
+//# sourceMappingURL=settings.d.ts.map

package/dist/approvals/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../approvals/settings.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,eAAO,MAAM,gBAAgB,EAAE,iBAAuE,CAAC;AASvG,MAAM,WAAW,aAAa;IAC5B,IAAI,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACnC;;;;;;;sDAOkD;IAClD,UAAU,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzC,KAAK,CAAC,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GAAG,aAAa,CAgB7E"}

package/dist/approvals/settings.js

@@ -0,0 +1,32 @@
+export const DEFAULT_SETTINGS = { version: 1, threshold: 5, captureRawArgs: false };
+function coerce(v) {
+    if (!v || typeof v !== 'object' || Array.isArray(v))
+        return { ...DEFAULT_SETTINGS };
+    const o = v;
+    const t = typeof o.threshold === 'number' && Number.isFinite(o.threshold) ? Math.max(0, Math.floor(o.threshold)) : DEFAULT_SETTINGS.threshold;
+    return { version: 1, threshold: t, captureRawArgs: o.captureRawArgs === true };
+}
+export function createSettingsStore(opts) {
+    const parse = (raw) => {
+        if (raw == null)
+            return { ...DEFAULT_SETTINGS };
+        try {
+            return coerce(JSON.parse(raw));
+        }
+        catch {
+            return { ...DEFAULT_SETTINGS };
+        }
+    };
+    return {
+        async read() {
+            return parse(await opts.store.read().catch(() => null));
+        },
+        async readStrict() {
+            return parse(await opts.store.read());
+        },
+        async write(s) {
+            await opts.store.write(JSON.stringify(coerce(s), null, 2) + '\n');
+        },
+    };
+}
+//# sourceMappingURL=settings.js.map

package/dist/approvals/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../approvals/settings.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,MAAM,gBAAgB,GAAsB,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;AAEvG,SAAS,MAAM,CAAC,CAAU;IACxB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACpF,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC;IAC9I,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;AACjF,CAAC;AAgBD,MAAM,UAAU,mBAAmB,CAAC,IAA0B;IAC5D,MAAM,KAAK,GAAG,CAAC,GAAkB,EAAqB,EAAE;QACtD,IAAI,GAAG,IAAI,IAAI;YAAE,OAAO,EAAE,GAAG,gBAAgB,EAAE,CAAC;QAChD,IAAI,CAAC;YAAC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,GAAG,gBAAgB,EAAE,CAAC;QAAC,CAAC;IACnF,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,IAAI;YACR,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,UAAU;YACd,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,CAAC;YACX,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACpE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/approvals/shellTools.d.ts

@@ -0,0 +1,10 @@
+import type { ApprovalSubject } from '@corenel/protocol';
+export declare function isShellToolKey(key: string): boolean;
+export declare function isShellTool(subject: ApprovalSubject): boolean;
+/** Never answered by a standing rule and never offered as one: a shell-type
+ * tool (above) or a checkpoint (plan, push, pull request, delegation --
+ * @corenel/protocol CHECKPOINT_TOOLS, decided by a person every time). The
+ * one predicate a prompt-side lookup (the daemon's, the ACP gate's) uses to
+ * mark an ask standing-eligible, so it agrees with createApprovals. */
+export declare function isNeverStanding(subject: ApprovalSubject): boolean;
+//# sourceMappingURL=shellTools.d.ts.map

package/dist/approvals/shellTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shellTools.d.ts","sourceRoot":"","sources":["../../approvals/shellTools.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAKzD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAE7D;AAED;;;;uEAIuE;AACvE,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAEjE"}

package/dist/approvals/shellTools.js

@@ -0,0 +1,17 @@
+import { isCheckpointTool } from '@corenel/protocol';
+const SHELL_KEYS = new Set(['sidecar:shell_exec', 'shell', 'sidecar_shell_exec', 'proc_start', 'proc_stop', 'sidecar:run_check', 'sidecar_run_check']);
+export function isShellToolKey(key) {
+    return key.startsWith('shell:') || SHELL_KEYS.has(key);
+}
+export function isShellTool(subject) {
+    return isShellToolKey(subject.name) || (!!subject.address && isShellToolKey(subject.address));
+}
+/** Never answered by a standing rule and never offered as one: a shell-type
+ * tool (above) or a checkpoint (plan, push, pull request, delegation --
+ * @corenel/protocol CHECKPOINT_TOOLS, decided by a person every time). The
+ * one predicate a prompt-side lookup (the daemon's, the ACP gate's) uses to
+ * mark an ask standing-eligible, so it agrees with createApprovals. */
+export function isNeverStanding(subject) {
+    return isShellTool(subject) || isCheckpointTool(subject);
+}
+//# sourceMappingURL=shellTools.js.map

package/dist/approvals/shellTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shellTools.js","sourceRoot":"","sources":["../../approvals/shellTools.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAE5K,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAwB;IAClD,OAAO,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAChG,CAAC;AAED;;;;uEAIuE;AACvE,MAAM,UAAU,eAAe,CAAC,OAAwB;IACtD,OAAO,WAAW,CAAC,OAAO,CAAC,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC3D,CAAC"}

package/dist/approvals/standingStore.d.ts

@@ -0,0 +1,15 @@
+import type { ApprovalSubject, Dismissal, StandingFile, StandingRule } from '@corenel/protocol';
+import type { TextStore } from './textStore';
+export declare function subjectMatchesRule(subject: ApprovalSubject, tool: string): boolean;
+export interface StandingStore {
+    read(): Promise<StandingFile>;
+    matches(subject: ApprovalSubject): Promise<boolean>;
+    addRule(tool: string, source: StandingRule['source']): Promise<void>;
+    removeRule(tool: string): Promise<void>;
+    setDismissal(d: Dismissal): Promise<void>;
+}
+export declare function createStandingStore(opts: {
+    store: TextStore;
+    now?: () => string;
+}): StandingStore;
+//# sourceMappingURL=standingStore.d.ts.map

package/dist/approvals/standingStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standingStore.d.ts","sourceRoot":"","sources":["../../approvals/standingStore.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAChG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAI7C,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAElF;AAgBD,MAAM,WAAW,aAAa;IAC5B,IAAI,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9B,OAAO,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,YAAY,CAAC,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAE,GAAG,aAAa,CA8BjG"}