@dv.nghiem/flowdeck 0.4.11 → 0.5.0

package/dist/hooks/tool-guard.d.ts

@@ -3,14 +3,23 @@
  * Pattern matching on tool arguments to prevent destructive commands.
  * D-04: pure string.includes() matching, no path filtering, no regex/glob.
  * Also enforces architectural constraints from .codebase/CONSTRAINTS.md.
- * To enable: set FLOWDECK_TOOL_GUARD_ENABLED=on. Default is OFF.
+ *
+ * The exported evaluate() function returns a PolicyDecision so the harness
+ * can compose it with other governance layers. The legacy toolGuardHook
+ * remains a thin adapter that throws on deny for existing hook wiring.
  */
+import type { PolicyDecision, PolicyInput } from "../services/harness-types";
 export type BlockReason = string | null;
+/**
+ * Extract the target path from tool arguments using the canonical key precedence:
+ * path > file_path > filename > filePath.
+ */
+export declare function extractTargetPath(args: Record<string, unknown>): string;
 /**
  * Check if a tool operation should be blocked.
  * Returns error message if blocked, null if allowed.
  */
-export declare function isBlocked(tool: string, args: any): BlockReason;
+export declare function isBlocked(tool: string, args: Record<string, unknown>): BlockReason;
 /**
  * Architectural Constraint Guard.
  * Reads .codebase/CONSTRAINTS.md for forbidden path patterns and boundary rules.
@@ -27,6 +36,13 @@ export declare function checkArchConstraint(directory: string, filePath: string)
  * Prevents writing to the codebase during planning phases.
  */
 export declare function checkPhaseEnforcement(directory: string): BlockReason;
+/**
+ * Evaluate a tool call against dangerous-pattern, phase, and arch-constraint rules.
+ *
+ * No longer gated by environment variables — the harness decides whether to
+ * invoke this layer via `governance.toolGuard` in flowdeck.json.
+ */
+export declare function evaluate(input: PolicyInput): PolicyDecision;
 /**
  * HOOK-04: Tool guard hook
  * Called on tool.execute.before for all tools.
@@ -37,6 +53,6 @@ export declare function toolGuardHook(ctx: {
 }, input: {
     tool: string;
 }, output: {
-    args: any;
+    args: Record<string, unknown>;
 }): Promise<void>;
 //# sourceMappingURL=tool-guard.d.ts.map

package/dist/hooks/tool-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-guard.d.ts","sourceRoot":"","sources":["../../src/hooks/tool-guard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAiBH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;AAEvC;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,WAAW,CAsC9D;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,WAAW,CAepF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,CAmBpE;AAkBD;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAC1B,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EACvB,MAAM,EAAE;IAAE,IAAI,EAAE,GAAG,CAAA;CAAE,GACpB,OAAO,CAAC,IAAI,CAAC,CA4Bf"}
+{"version":3,"file":"tool-guard.d.ts","sourceRoot":"","sources":["../../src/hooks/tool-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAQH,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAiB,MAAM,2BAA2B,CAAA;AAyB3F,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,IAAI,CAAA;AAEvC;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAEvE;AAuDD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,CAwBlF;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,WAAW,CAepF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,CAmBpE;AAgCD;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,cAAc,CA+B3D;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EAC1B,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EACvB,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACxC,OAAO,CAAC,IAAI,CAAC,CAaf"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AA4GjD,QAAA,MAAM,MAAM,EAAE,MA4Rb,CAAA;AAED,eAAe,MAAM,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAwGjD,QAAA,MAAM,MAAM,EAAE,MAqSb,CAAA;AAED,eAAe,MAAM,CAAA"}