@det-acp/core 0.2.0

package/dist/cli/templates.js

@@ -0,0 +1,266 @@
+/**
+ * Bundled templates for the `det-acp init` command.
+ *
+ * Contains default policy, governance rules for each integration,
+ * and generator functions for integration-specific config files.
+ */
+// ---------------------------------------------------------------------------
+// Default governance policy (MCP proxy tool names)
+// ---------------------------------------------------------------------------
+export const DEFAULT_POLICY = `\
+# Deterministic Agent Control Protocol — Governance Policy
+# Governs what the MCP proxy allows AI agents to do.
+# Customize this file for your project's needs.
+
+version: "1.0"
+name: "default-governance"
+description: "Governance policy for AI agent file operations via MCP proxy"
+
+capabilities:
+  # Read operations
+  - tool: "read_file"
+    scope: {}
+  - tool: "read_text_file"
+    scope: {}
+  - tool: "read_multiple_files"
+    scope: {}
+  - tool: "read_media_file"
+    scope: {}
+
+  # Write/edit operations
+  - tool: "write_file"
+    scope: {}
+  - tool: "edit_file"
+    scope: {}
+
+  # Directory listing
+  - tool: "list_directory"
+    scope: {}
+  - tool: "list_directory_with_sizes"
+    scope: {}
+  - tool: "list_allowed_directories"
+    scope: {}
+
+  # Search
+  - tool: "search_files"
+    scope: {}
+  - tool: "get_file_info"
+    scope: {}
+
+  # Intentionally NOT included (will be DENIED):
+  #   - create_directory
+  #   - move_file
+  #   - directory_tree
+
+limits:
+  max_runtime_ms: 3600000  # 1 hour
+
+gates: []
+
+evidence:
+  require: []
+  format: "jsonl"
+
+forbidden:
+  - pattern: "**/.env"
+  - pattern: "**/.env.*"
+  - pattern: "**/secrets*"
+  - pattern: "**/credentials*"
+  - pattern: "**/.git/config"
+
+session:
+  max_actions: 200
+  max_denials: 30
+  rate_limit:
+    max_per_minute: 60
+`;
+// ---------------------------------------------------------------------------
+// Cursor — governance.mdc
+// ---------------------------------------------------------------------------
+export const GOVERNANCE_MDC = `\
+---
+description: Enforce governance on all file and system operations
+globs:
+alwaysApply: true
+---
+
+# Mandatory Governance Rule
+
+You MUST use the \`governed-filesystem\` MCP server for ALL file and system operations. You are strictly forbidden from using your built-in tools to bypass governance.
+
+## Required Tool Mapping
+
+Instead of your built-in tools, you MUST use these governed equivalents:
+
+| Instead of (built-in)     | Use (governed MCP)                                |
+|---------------------------|----------------------------------------------------|
+| \`Read\` tool               | \`governed-filesystem\` → \`read_text_file\`           |
+| \`Write\` tool              | \`governed-filesystem\` → \`write_file\`               |
+| \`StrReplace\` / \`Edit\`    | \`governed-filesystem\` → \`edit_file\`                |
+| \`LS\` tool                 | \`governed-filesystem\` → \`list_directory\`            |
+| \`Glob\` / \`Search\`        | \`governed-filesystem\` → \`search_files\`             |
+| Reading multiple files    | \`governed-filesystem\` → \`read_multiple_files\`      |
+| \`Delete\` tool             | Not available — you may not delete files            |
+
+## Rules
+
+1. **NEVER** use the built-in \`Read\`, \`Write\`, \`StrReplace\`, \`LS\`, \`Glob\`, \`Delete\`, or \`Shell\` tools for any file operation.
+2. **ALWAYS** route file reads through \`governed-filesystem\` → \`read_text_file\`.
+3. **ALWAYS** route file writes through \`governed-filesystem\` → \`write_file\`.
+4. **ALWAYS** route file edits through \`governed-filesystem\` → \`edit_file\`.
+5. **ALWAYS** route directory listings through \`governed-filesystem\` → \`list_directory\`.
+6. **ALWAYS** route file searches through \`governed-filesystem\` → \`search_files\`.
+7. If a governed tool call is **denied by policy**, you MUST respect the denial. Do NOT attempt to use a built-in tool as a fallback. Report the denial to the user instead.
+8. If you need a tool that is not available through the governed MCP server, ask the user for permission before proceeding.
+
+## Why
+
+All file and system operations must go through the Deterministic Agent Control Protocol governance layer for policy enforcement and audit logging. Using built-in tools would bypass security policies, forbidden path protections, and the tamper-evident evidence ledger.
+`;
+// ---------------------------------------------------------------------------
+// Claude Code — CLAUDE.md
+// ---------------------------------------------------------------------------
+export const CLAUDE_MD = `\
+# Governance Instructions
+
+You MUST use the \`governed-filesystem\` MCP server for ALL file and system operations. You are strictly forbidden from using your built-in tools to bypass governance.
+
+## Required Tool Mapping
+
+Instead of your built-in file tools, you MUST use these governed equivalents:
+
+| Instead of (built-in)   | Use (governed MCP)                             |
+|--------------------------|------------------------------------------------|
+| \`Read\` tool              | \`governed-filesystem\` → \`read_text_file\`       |
+| \`Write\` tool             | \`governed-filesystem\` → \`write_file\`           |
+| \`Edit\` tool              | \`governed-filesystem\` → \`edit_file\`            |
+| \`LS\` / \`Glob\`           | \`governed-filesystem\` → \`list_directory\`       |
+| \`Grep\` / \`Search\`       | \`governed-filesystem\` → \`search_files\`         |
+| Reading multiple files   | \`governed-filesystem\` → \`read_multiple_files\`  |
+| Deleting files           | Not available — you may not delete files       |
+
+## Rules
+
+1. **NEVER** use the built-in \`Read\`, \`Write\`, \`Edit\`, \`Grep\`, \`Glob\`, or \`Bash\` (for file operations) tools when the governed MCP tools are available.
+2. **ALWAYS** route file reads through \`governed-filesystem\` → \`read_text_file\`.
+3. **ALWAYS** route file writes through \`governed-filesystem\` → \`write_file\`.
+4. **ALWAYS** route file edits through \`governed-filesystem\` → \`edit_file\`.
+5. **ALWAYS** route directory listings through \`governed-filesystem\` → \`list_directory\`.
+6. **ALWAYS** route file searches through \`governed-filesystem\` → \`search_files\`.
+7. If a governed tool call is **denied by policy**, you MUST respect the denial. Do NOT attempt to use a built-in tool as a fallback. Report the denial to the user instead.
+8. If you need a tool that is not available through the governed MCP server, ask the user for permission before proceeding.
+
+## Why
+
+All file and system operations must go through the Deterministic Agent Control Protocol governance layer for policy enforcement and audit logging. Using built-in tools would bypass security policies, forbidden path protections, and the tamper-evident evidence ledger.
+`;
+// ---------------------------------------------------------------------------
+// Codex — AGENTS.md
+// ---------------------------------------------------------------------------
+export const AGENTS_MD = `\
+# Governance Instructions
+
+You MUST use the \`governed-filesystem\` MCP server for ALL file and system operations. You are strictly forbidden from using your built-in tools to bypass governance.
+
+## Required Tool Mapping
+
+Instead of your built-in file tools, you MUST use these governed equivalents:
+
+| Instead of (built-in)   | Use (governed MCP)                             |
+|--------------------------|------------------------------------------------|
+| Reading files            | \`governed-filesystem\` → \`read_text_file\`       |
+| Writing files            | \`governed-filesystem\` → \`write_file\`           |
+| Editing files            | \`governed-filesystem\` → \`edit_file\`            |
+| Listing directories      | \`governed-filesystem\` → \`list_directory\`       |
+| Searching files          | \`governed-filesystem\` → \`search_files\`         |
+| Reading multiple files   | \`governed-filesystem\` → \`read_multiple_files\`  |
+| Deleting files           | Not available — you may not delete files       |
+
+## Rules
+
+1. **NEVER** use built-in file read/write/edit tools for any file operation when the governed MCP tools are available.
+2. **ALWAYS** route file operations through the \`governed-filesystem\` MCP server.
+3. If a governed tool call is **denied by policy**, you MUST respect the denial. Do NOT attempt to use a built-in tool as a fallback. Report the denial to the user instead.
+4. If you need a tool that is not available through the governed MCP server, ask the user for permission before proceeding.
+
+## Why
+
+All file and system operations must go through the Deterministic Agent Control Protocol governance layer for policy enforcement and audit logging. Using built-in tools would bypass security policies, forbidden path protections, and the tamper-evident evidence ledger.
+`;
+// ---------------------------------------------------------------------------
+// Claude Code — .claude/settings.json
+// ---------------------------------------------------------------------------
+export const CLAUDE_SETTINGS_JSON = `\
+{
+  "permissions": {
+    "deny": [
+      "Read",
+      "Write",
+      "Edit"
+    ],
+    "allow": [
+      "Bash",
+      "Grep",
+      "Glob",
+      "governed-filesystem"
+    ]
+  }
+}
+`;
+// ---------------------------------------------------------------------------
+// Config generators
+// ---------------------------------------------------------------------------
+/**
+ * Generate .cursor/mcp.json content.
+ * Uses the simplified `proxy --policy` mode so no mcp-proxy.yaml is needed.
+ */
+export function generateCursorMcpJson(cliPath, policyAbsPath) {
+    const config = {
+        mcpServers: {
+            'governed-filesystem': {
+                command: 'node',
+                args: [cliPath, 'proxy', '--policy', policyAbsPath],
+            },
+        },
+    };
+    return JSON.stringify(config, null, 2) + '\n';
+}
+/**
+ * Generate .mcp.json content for Claude Code.
+ * Uses the simplified `proxy --policy` mode so no mcp-proxy.yaml is needed.
+ */
+export function generateClaudeCodeMcpJson(cliPath, policyAbsPath) {
+    const config = {
+        mcpServers: {
+            'governed-filesystem': {
+                command: 'node',
+                args: [cliPath, 'proxy', '--policy', policyAbsPath],
+            },
+        },
+    };
+    return JSON.stringify(config, null, 2) + '\n';
+}
+/**
+ * Generate .codex/config.toml content.
+ * Uses the simplified `proxy --policy` mode so no mcp-proxy.yaml is needed.
+ */
+export function generateCodexConfigToml(cliPath, policyAbsPath) {
+    return `\
+# Codex CLI config with Deterministic Agent Control Protocol governance
+# Generated by: det-acp init codex
+
+# Use workspace-write sandbox for OS-level filesystem restrictions
+sandbox_mode = "workspace-write"
+
+# Governed MCP proxy — routes file operations through policy enforcement
+[mcp_servers.governed-filesystem]
+command = "node"
+args = [
+  ${JSON.stringify(cliPath)},
+  "proxy",
+  "--policy",
+  ${JSON.stringify(policyAbsPath)}
+]
+`;
+}
+//# sourceMappingURL=templates.js.map

package/dist/cli/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/cli/templates.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E;AAE9E,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkE7B,CAAC;AAEF,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,MAAM,CAAC,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuC7B,CAAC;AAEF,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCxB,CAAC;AAEF,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,SAAS,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BxB,CAAC;AAEF,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;CAgBnC,CAAC;AAEF,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,aAAqB;IAC1E,MAAM,MAAM,GAAG;QACb,UAAU,EAAE;YACV,qBAAqB,EAAE;gBACrB,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC;aACpD;SACF;KACF,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAe,EAAE,aAAqB;IAC9E,MAAM,MAAM,GAAG;QACb,UAAU,EAAE;YACV,qBAAqB,EAAE;gBACrB,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC;aACpD;SACF;KACF,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,aAAqB;IAC5E,OAAO;;;;;;;;;;;IAWL,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;;;IAGvB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;CAEhC,CAAC;AACF,CAAC"}

package/dist/engine/action-registry.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Action Registry — central registry of all available tool adapters.
+ *
+ * Tools must be registered before the runtime can dispatch actions to them.
+ * The registry validates action requests against the policy before dispatching.
+ */
+import type { ToolAdapter } from '../tools/base.js';
+import type { ActionRequest, Policy, ValidationResult } from '../types.js';
+export declare class ActionRegistry {
+    private adapters;
+    /**
+     * Register a tool adapter.
+     */
+    register(adapter: ToolAdapter): void;
+    /**
+     * Unregister a tool adapter by name.
+     */
+    unregister(name: string): boolean;
+    /**
+     * Get a registered tool adapter by name.
+     */
+    get(name: string): ToolAdapter | undefined;
+    /**
+     * Check if a tool adapter is registered.
+     */
+    has(name: string): boolean;
+    /**
+     * Get all registered tool adapter names.
+     */
+    listTools(): string[];
+    /**
+     * Validate an action request: check the tool exists, parse input, and
+     * evaluate against the policy.
+     */
+    validateAction(request: ActionRequest, policy: Policy): ValidationResult;
+    /**
+     * Get the adapter for an action, throwing if not found.
+     */
+    getRequired(name: string): ToolAdapter;
+    /**
+     * Create a registry pre-loaded with the standard tool adapters.
+     */
+    static createDefault(): ActionRegistry;
+}
+/**
+ * Create a registry with all built-in tool adapters.
+ */
+export declare function createDefaultRegistry(): Promise<ActionRegistry>;
+//# sourceMappingURL=action-registry.d.ts.map

package/dist/engine/action-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-registry.d.ts","sourceRoot":"","sources":["../../src/engine/action-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAG3E,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAkC;IAElD;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI;IAOpC;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIjC;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAI1C;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B;;OAEG;IACH,SAAS,IAAI,MAAM,EAAE;IAIrB;;;OAGG;IACH,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB;IAcxE;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW;IAQtC;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,cAAc;CAKvC;AAED;;GAEG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,cAAc,CAAC,CAgBrE"}

package/dist/engine/action-registry.js

@@ -0,0 +1,95 @@
+/**
+ * Action Registry — central registry of all available tool adapters.
+ *
+ * Tools must be registered before the runtime can dispatch actions to them.
+ * The registry validates action requests against the policy before dispatching.
+ */
+export class ActionRegistry {
+    adapters = new Map();
+    /**
+     * Register a tool adapter.
+     */
+    register(adapter) {
+        if (this.adapters.has(adapter.name)) {
+            throw new Error(`Tool adapter "${adapter.name}" is already registered`);
+        }
+        this.adapters.set(adapter.name, adapter);
+    }
+    /**
+     * Unregister a tool adapter by name.
+     */
+    unregister(name) {
+        return this.adapters.delete(name);
+    }
+    /**
+     * Get a registered tool adapter by name.
+     */
+    get(name) {
+        return this.adapters.get(name);
+    }
+    /**
+     * Check if a tool adapter is registered.
+     */
+    has(name) {
+        return this.adapters.has(name);
+    }
+    /**
+     * Get all registered tool adapter names.
+     */
+    listTools() {
+        return Array.from(this.adapters.keys());
+    }
+    /**
+     * Validate an action request: check the tool exists, parse input, and
+     * evaluate against the policy.
+     */
+    validateAction(request, policy) {
+        const adapter = this.adapters.get(request.tool);
+        if (!adapter) {
+            return {
+                verdict: 'deny',
+                tool: request.tool,
+                reasons: [`Unknown tool: "${request.tool}". Available: [${this.listTools().join(', ')}]`],
+            };
+        }
+        // Let the adapter validate its own input + policy
+        return adapter.validate(request.input, policy);
+    }
+    /**
+     * Get the adapter for an action, throwing if not found.
+     */
+    getRequired(name) {
+        const adapter = this.adapters.get(name);
+        if (!adapter) {
+            throw new Error(`Tool adapter "${name}" is not registered. Available: [${this.listTools().join(', ')}]`);
+        }
+        return adapter;
+    }
+    /**
+     * Create a registry pre-loaded with the standard tool adapters.
+     */
+    static createDefault() {
+        // Lazy imports to avoid circular deps
+        const registry = new ActionRegistry();
+        return registry;
+    }
+}
+/**
+ * Create a registry with all built-in tool adapters.
+ */
+export async function createDefaultRegistry() {
+    const { FileReadAdapter } = await import('../tools/file-read.js');
+    const { FileWriteAdapter } = await import('../tools/file-write.js');
+    const { CommandRunAdapter } = await import('../tools/command-run.js');
+    const { HttpRequestAdapter } = await import('../tools/http-request.js');
+    const { GitDiffAdapter, GitApplyAdapter } = await import('../tools/git.js');
+    const registry = new ActionRegistry();
+    registry.register(new FileReadAdapter());
+    registry.register(new FileWriteAdapter());
+    registry.register(new CommandRunAdapter());
+    registry.register(new HttpRequestAdapter());
+    registry.register(new GitDiffAdapter());
+    registry.register(new GitApplyAdapter());
+    return registry;
+}
+//# sourceMappingURL=action-registry.js.map

package/dist/engine/action-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-registry.js","sourceRoot":"","sources":["../../src/engine/action-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,OAAO,cAAc;IACjB,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAElD;;OAEG;IACH,QAAQ,CAAC,OAAoB;QAC3B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,CAAC,IAAI,yBAAyB,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,OAAsB,EAAE,MAAc;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,CAAC,kBAAkB,OAAO,CAAC,IAAI,kBAAkB,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;aAC1F,CAAC;QACJ,CAAC;QAED,kDAAkD;QAClD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,IAAY;QACtB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,oCAAoC,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3G,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa;QAClB,sCAAsC;QACtC,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;QACtC,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAClE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACpE,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACtE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACxE,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAE5E,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,IAAI,gBAAgB,EAAE,CAAC,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC;IAC3C,QAAQ,CAAC,QAAQ,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC;IAEzC,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/engine/gate.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Gate Manager — handles approval gates for session actions.
+ *
+ * When a policy gate is triggered, the gate manager determines what kind
+ * of approval is needed and manages the approval lifecycle.
+ *
+ * Supports:
+ *  - auto:    automatically approve (for low-risk actions)
+ *  - human:   pause session and wait for human approval
+ *  - webhook: call an external webhook for approval decision
+ */
+import type { ActionRequest, Gate, GateDecision, GateRequest, GateResponse, RiskLevel } from '../types.js';
+export type GateHandler = (request: GateRequest) => Promise<GateResponse>;
+export declare class GateManager {
+    private pendingGates;
+    private responses;
+    private handlers;
+    /**
+     * Register a handler for a specific approval mode.
+     * The handler is called when a gate with that mode is triggered.
+     */
+    registerHandler(mode: string, handler: GateHandler): void;
+    /**
+     * Request approval for a gated action.
+     * Returns the gate decision.
+     */
+    requestApproval(sessionId: string, actionId: string, action: ActionRequest, gate: Gate): Promise<GateResponse>;
+    /**
+     * Manually resolve a pending gate (used by server/CLI for human approval).
+     */
+    resolve(sessionId: string, actionId: string, decision: GateDecision, respondedBy?: string, reason?: string): GateResponse;
+    /**
+     * Get all pending gate requests.
+     */
+    getPending(): GateRequest[];
+    /**
+     * Get pending gates for a specific session.
+     */
+    getPendingForSession(sessionId: string): GateRequest[];
+    /**
+     * Check if a gate is pending for a specific action.
+     */
+    isPending(sessionId: string, actionId: string): boolean;
+    /**
+     * Get the response for a gate (if resolved).
+     */
+    getResponse(sessionId: string, actionId: string): GateResponse | undefined;
+    /**
+     * Clear all gates for a session (e.g. on session termination).
+     */
+    clearSession(sessionId: string): void;
+}
+/**
+ * Default auto-approve handler for low-risk actions.
+ */
+export declare function createAutoApproveHandler(maxRisk?: RiskLevel): GateHandler;
+//# sourceMappingURL=gate.d.ts.map

package/dist/engine/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../src/engine/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,aAAa,EACb,IAAI,EACJ,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,SAAS,EACV,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;AAE1E,qBAAa,WAAW;IACtB,OAAO,CAAC,YAAY,CAAkC;IACtD,OAAO,CAAC,SAAS,CAAmC;IACpD,OAAO,CAAC,QAAQ,CAAkC;IAElD;;;OAGG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,IAAI;IAIzD;;;OAGG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,IAAI,GACT,OAAO,CAAC,YAAY,CAAC;IA0CxB;;OAEG;IACH,OAAO,CACL,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,YAAY,EACtB,WAAW,CAAC,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,MAAM,GACd,YAAY;IAoBf;;OAEG;IACH,UAAU,IAAI,WAAW,EAAE;IAI3B;;OAEG;IACH,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE;IAItD;;OAEG;IACH,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIvD;;OAEG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAI1E;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;CAYtC;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,SAAiB,GAAG,WAAW,CAsBhF"}

package/dist/engine/gate.js

@@ -0,0 +1,145 @@
+/**
+ * Gate Manager — handles approval gates for session actions.
+ *
+ * When a policy gate is triggered, the gate manager determines what kind
+ * of approval is needed and manages the approval lifecycle.
+ *
+ * Supports:
+ *  - auto:    automatically approve (for low-risk actions)
+ *  - human:   pause session and wait for human approval
+ *  - webhook: call an external webhook for approval decision
+ */
+export class GateManager {
+    pendingGates = new Map();
+    responses = new Map();
+    handlers = new Map();
+    /**
+     * Register a handler for a specific approval mode.
+     * The handler is called when a gate with that mode is triggered.
+     */
+    registerHandler(mode, handler) {
+        this.handlers.set(mode, handler);
+    }
+    /**
+     * Request approval for a gated action.
+     * Returns the gate decision.
+     */
+    async requestApproval(sessionId, actionId, action, gate) {
+        const gateKey = `${sessionId}:${actionId}`;
+        const request = {
+            sessionId,
+            actionId,
+            action,
+            gate,
+            requestedAt: new Date().toISOString(),
+        };
+        this.pendingGates.set(gateKey, request);
+        // Auto-approve mode
+        if (gate.approval === 'auto') {
+            const response = {
+                decision: 'approved',
+                respondedBy: 'auto',
+                respondedAt: new Date().toISOString(),
+                reason: 'Auto-approved by policy',
+            };
+            this.responses.set(gateKey, response);
+            this.pendingGates.delete(gateKey);
+            return response;
+        }
+        // Check for registered handler
+        const handler = this.handlers.get(gate.approval);
+        if (handler) {
+            const response = await handler(request);
+            this.responses.set(gateKey, response);
+            this.pendingGates.delete(gateKey);
+            return response;
+        }
+        // No handler — gate stays pending
+        return {
+            decision: 'pending',
+            reason: `Awaiting ${gate.approval} approval`,
+        };
+    }
+    /**
+     * Manually resolve a pending gate (used by server/CLI for human approval).
+     */
+    resolve(sessionId, actionId, decision, respondedBy, reason) {
+        const gateKey = `${sessionId}:${actionId}`;
+        const pending = this.pendingGates.get(gateKey);
+        if (!pending) {
+            throw new Error(`No pending gate found for session ${sessionId} action ${actionId}`);
+        }
+        const response = {
+            decision,
+            respondedBy,
+            respondedAt: new Date().toISOString(),
+            reason,
+        };
+        this.responses.set(gateKey, response);
+        this.pendingGates.delete(gateKey);
+        return response;
+    }
+    /**
+     * Get all pending gate requests.
+     */
+    getPending() {
+        return Array.from(this.pendingGates.values());
+    }
+    /**
+     * Get pending gates for a specific session.
+     */
+    getPendingForSession(sessionId) {
+        return Array.from(this.pendingGates.values()).filter((g) => g.sessionId === sessionId);
+    }
+    /**
+     * Check if a gate is pending for a specific action.
+     */
+    isPending(sessionId, actionId) {
+        return this.pendingGates.has(`${sessionId}:${actionId}`);
+    }
+    /**
+     * Get the response for a gate (if resolved).
+     */
+    getResponse(sessionId, actionId) {
+        return this.responses.get(`${sessionId}:${actionId}`);
+    }
+    /**
+     * Clear all gates for a session (e.g. on session termination).
+     */
+    clearSession(sessionId) {
+        for (const key of this.pendingGates.keys()) {
+            if (key.startsWith(`${sessionId}:`)) {
+                this.pendingGates.delete(key);
+            }
+        }
+        for (const key of this.responses.keys()) {
+            if (key.startsWith(`${sessionId}:`)) {
+                this.responses.delete(key);
+            }
+        }
+    }
+}
+/**
+ * Default auto-approve handler for low-risk actions.
+ */
+export function createAutoApproveHandler(maxRisk = 'low') {
+    const riskOrder = ['low', 'medium', 'high', 'critical'];
+    const maxRiskIndex = riskOrder.indexOf(maxRisk);
+    return async (request) => {
+        const riskLevel = request.gate.risk_level ?? 'medium';
+        const riskIndex = riskOrder.indexOf(riskLevel);
+        if (riskIndex <= maxRiskIndex) {
+            return {
+                decision: 'approved',
+                respondedBy: 'auto-approve-handler',
+                respondedAt: new Date().toISOString(),
+                reason: `Risk level "${riskLevel}" is within auto-approve threshold "${maxRisk}"`,
+            };
+        }
+        return {
+            decision: 'pending',
+            reason: `Risk level "${riskLevel}" exceeds auto-approve threshold "${maxRisk}" — requires manual approval`,
+        };
+    };
+}
+//# sourceMappingURL=gate.js.map

package/dist/engine/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../src/engine/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAaH,MAAM,OAAO,WAAW;IACd,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC5C,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAElD;;;OAGG;IACH,eAAe,CAAC,IAAY,EAAE,OAAoB;QAChD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CACnB,SAAiB,EACjB,QAAgB,EAChB,MAAqB,EACrB,IAAU;QAEV,MAAM,OAAO,GAAG,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC;QAE3C,MAAM,OAAO,GAAgB;YAC3B,SAAS;YACT,QAAQ;YACR,MAAM;YACN,IAAI;YACJ,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAExC,oBAAoB;QACpB,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAiB;gBAC7B,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,MAAM;gBACnB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,MAAM,EAAE,yBAAyB;aAClC,CAAC;YACF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACtC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,+BAA+B;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACtC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,kCAAkC;QAClC,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,YAAY,IAAI,CAAC,QAAQ,WAAW;SAC7C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO,CACL,SAAiB,EACjB,QAAgB,EAChB,QAAsB,EACtB,WAAoB,EACpB,MAAe;QAEf,MAAM,OAAO,GAAG,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,qCAAqC,SAAS,WAAW,QAAQ,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,QAAQ,GAAiB;YAC7B,QAAQ;YACR,WAAW;YACX,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,MAAM;SACP,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,SAAiB;QACpC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IACzF,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,SAAiB,EAAE,QAAgB;QAC3C,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,SAAiB,EAAE,QAAgB;QAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAAiB;QAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAAqB,KAAK;IACjE,MAAM,SAAS,GAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEhD,OAAO,KAAK,EAAE,OAAoB,EAAyB,EAAE;QAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC;QACtD,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAE/C,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;YAC9B,OAAO;gBACL,QAAQ,EAAE,UAAU;gBACpB,WAAW,EAAE,sBAAsB;gBACnC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,MAAM,EAAE,eAAe,SAAS,uCAAuC,OAAO,GAAG;aAClF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,eAAe,SAAS,qCAAqC,OAAO,8BAA8B;SAC3G,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}