@gendigital/sage-openclaw 0.11.0 → 0.13.0

package/dist/mcp-server.cjs

@@ -46,13 +46,54 @@ function getProcEnv() {
 function getHomeDir() {
   return getProcEnv().HOME || (0, import_node_os.homedir)();
 }
-var fs, fsPromises, import_node_os, name1, name2;
+async function removeStaleFileLock(lockPath, staleAgeMs) {
+  try {
+    const s = await fsPromises.stat(lockPath);
+    if (Date.now() - s.mtimeMs < staleAgeMs)
+      return;
+    await fsPromises.rmdir(lockPath);
+  } catch {
+  }
+}
+async function acquireFileLock(filePath, timeoutMs = 250, staleAgeMs = 3e4) {
+  const lockPath = `${filePath}.lock`;
+  const deadline = Date.now() + timeoutMs;
+  while (true) {
+    try {
+      await fsPromises.mkdir(lockPath);
+      return async () => {
+        try {
+          await fsPromises.rmdir(lockPath);
+        } catch {
+        }
+      };
+    } catch {
+      await removeStaleFileLock(lockPath, staleAgeMs);
+      const remainingMs = deadline - Date.now();
+      if (remainingMs <= 0)
+        return void 0;
+      await (0, import_promises.setTimeout)(Math.min(50, remainingMs));
+    }
+  }
+}
+async function withFileLock(filePath, callback) {
+  const release = await acquireFileLock(filePath);
+  if (!release)
+    return;
+  try {
+    return await callback();
+  } finally {
+    await release();
+  }
+}
+var fs, fsPromises, import_node_os, import_promises, name1, name2;
 var init_file_utils = __esm({
   "../core/dist/file-utils.js"() {
     "use strict";
     fs = __toESM(require("node:fs"), 1);
     fsPromises = __toESM(require("node:fs/promises"), 1);
     import_node_os = require("node:os");
+    import_promises = require("node:timers/promises");
     name1 = "read";
     name2 = "File";
   }
@@ -4165,7 +4206,7 @@ var init_zod = __esm({
 });
 
 // ../core/dist/types.js
-var nullLogger, ArtifactTypeSchema, ArtifactSchema, VerdictSeveritySchema, ThreatSchema, DecisionSchema, SensitivitySchema, UrlCheckConfigSchema, CacheConfigSchema, LoggingConfigSchema, OperationalLogLevelSchema, OperationalLoggingConfigSchema, FileCheckConfigSchema, PackageCheckConfigSchema, AmsiCheckConfigSchema, DEFAULT_PI_HIGH_RISK_THRESHOLD, DEFAULT_PI_MEDIUM_RISK_THRESHOLD, PiCheckConfigSchema, ExceptionDecisionSchema, ExceptionMatchSchema, ExceptionRuleSchema, ExceptionsFileSchema, ExceptionsConfigSchema, ConfigSchema, HookTypeSchema;
+var nullLogger, ArtifactTypeSchema, ArtifactSchema, VerdictSeveritySchema, ThreatSchema, DecisionSchema, SensitivitySchema, UrlCheckConfigSchema, CacheConfigSchema, LoggingConfigSchema, OperationalLogLevelSchema, OperationalLoggingConfigSchema, FileCheckConfigSchema, PackageCheckConfigSchema, AmsiCheckConfigSchema, SkillCheckConfigSchema, PiCheckConfigSchema, ExceptionDecisionSchema, ExceptionMatchSchema, ExceptionRuleSchema, ExceptionsFileSchema, ExceptionsConfigSchema, ConfigSchema, HookTypeSchema;
 var init_types2 = __esm({
   "../core/dist/types.js"() {
     "use strict";
@@ -4189,7 +4230,8 @@ var init_types2 = __esm({
     VerdictSeveritySchema = external_exports.enum(["info", "warning", "critical"]);
     ThreatSchema = external_exports.object({
       id: external_exports.string(),
-      version: external_exports.number().int().optional(),
+      version: external_exports.number().int().positive(),
+      detectionName: external_exports.string(),
       category: external_exports.string(),
       severity: VerdictSeveritySchema,
       confidence: external_exports.number(),
@@ -4242,14 +4284,21 @@ var init_types2 = __esm({
     AmsiCheckConfigSchema = external_exports.object({
       enabled: external_exports.boolean().default(true)
     });
-    DEFAULT_PI_HIGH_RISK_THRESHOLD = 0.99;
-    DEFAULT_PI_MEDIUM_RISK_THRESHOLD = 0.5;
+    SkillCheckConfigSchema = external_exports.object({
+      enabled: external_exports.boolean().default(true),
+      cache_ttl_days: external_exports.number().min(0).default(1),
+      /**
+       * Upload unknown skills (never seen by the analyzer) for deep content
+       * analysis. When false, the scan still looks skills up by content hash and
+       * still flags known-risky ones — but no skill content ever leaves the
+       * machine and the upload worker never runs (lookup-only mode).
+       */
+      upload_enabled: external_exports.boolean().default(true)
+    });
     PiCheckConfigSchema = external_exports.object({
       enabled: external_exports.boolean().default(false),
       max_content_length: external_exports.number().default(16384),
-      model_path: external_exports.string().optional(),
-      high_risk_threshold: external_exports.number().default(DEFAULT_PI_HIGH_RISK_THRESHOLD),
-      medium_risk_threshold: external_exports.number().default(DEFAULT_PI_MEDIUM_RISK_THRESHOLD)
+      model_path: external_exports.string().optional()
     });
     ExceptionDecisionSchema = external_exports.enum(["allow", "deny"]);
     ExceptionMatchSchema = external_exports.enum(["executable", "domain", "path", "plugin", "regex"]);
@@ -4271,6 +4320,7 @@ var init_types2 = __esm({
       file_check: FileCheckConfigSchema.default({}),
       package_check: PackageCheckConfigSchema.default({}),
       amsi_check: AmsiCheckConfigSchema.default({}),
+      skill_check: SkillCheckConfigSchema.default({}),
       pi_check: PiCheckConfigSchema.default({}),
       heuristics_enabled: external_exports.boolean().default(true),
       cache: CacheConfigSchema.default({}),
@@ -4279,6 +4329,8 @@ var init_types2 = __esm({
       operational_logging: OperationalLoggingConfigSchema.default({}),
       sensitivity: SensitivitySchema.default("balanced"),
       disabled_threats: external_exports.array(external_exports.string()).default([]),
+      announce_clean_scans: external_exports.boolean().default(true),
+      manage_status_line: external_exports.boolean().default(true),
       brand_key: external_exports.string().min(1).max(32).regex(/^[a-z0-9_-]+$/u).optional(),
       community_iq: external_exports.boolean().default(true)
     });
@@ -4362,7 +4414,7 @@ function sanitizeBrandKey(data, logger2) {
   if (typeof brandKey === "string" && brandKey.length >= 1 && brandKey.length <= 32 && BRAND_KEY_RE.test(brandKey)) {
     return data;
   }
-  logger2.warn(`Invalid brand_key in config \u2014 ignoring`, { brand_key: brandKey });
+  logger2.warn(`Invalid brand_key in config - ignoring`, { brand_key: brandKey });
   const { brand_key: _, ...rest } = data;
   return rest;
 }
@@ -4414,6 +4466,21 @@ function parseConfig(raw, path2, logger2) {
     return defaultConfig(logger2);
   }
 }
+async function readExplicitSkillUploadEnabled(configPath, logger2 = nullLogger) {
+  const path2 = configPath ? resolvePath(configPath) : defaultConfigPath();
+  try {
+    const data = JSON.parse(await getFileContent(path2));
+    const skillCheck = data.skill_check;
+    if (skillCheck && typeof skillCheck === "object" && !Array.isArray(skillCheck) && "upload_enabled" in skillCheck) {
+      const value = skillCheck.upload_enabled;
+      if (typeof value === "boolean")
+        return { present: true, value };
+      logger2.warn("Config skill_check.upload_enabled is not a boolean; ignoring", { value });
+    }
+  } catch {
+  }
+  return { present: false, value: false };
+}
 async function loadConfig(configPath, logger2 = nullLogger) {
   const path2 = configPath ? resolvePath(configPath) : defaultConfigPath();
   try {
@@ -4422,7 +4489,7 @@ async function loadConfig(configPath, logger2 = nullLogger) {
     return defaultConfig(logger2);
   }
 }
-var import_node_path, SAGE_DIR, BRAND_KEY_RE;
+var import_node_path, SAGE_DIR, MS_PER_DAY, CLOCK_SKEW_TOLERANCE_MS, BRAND_KEY_RE;
 var init_config = __esm({
   "../core/dist/config.js"() {
     "use strict";
@@ -4430,6 +4497,8 @@ var init_config = __esm({
     init_file_utils();
     init_types2();
     SAGE_DIR = "~/.sage";
+    MS_PER_DAY = 24 * 60 * 60 * 1e3;
+    CLOCK_SKEW_TOLERANCE_MS = 5 * 60 * 1e3;
     BRAND_KEY_RE = /^[a-z0-9_-]+$/u;
   }
 });
@@ -20440,7 +20509,7 @@ function resolveBranding(brandKey, logger2) {
     return defaultBranding;
   const entry = BRANDS[brandKey];
   if (!entry) {
-    logger2?.warn(`Unknown brand_key "${brandKey}" in config \u2014 using default branding`);
+    logger2?.warn(`Unknown brand_key "${brandKey}" in config - using default branding`);
     return defaultBranding;
   }
   return { ...entry, brand_key: brandKey };
@@ -20456,88 +20525,74 @@ var APPROVED_TTL_MS = 10 * 60 * 1e3;
 
 // ../core/dist/audit-log.js
 init_config();
+
+// ../core/dist/content-snapshot.js
+var CONTENT_FIELD_LIMITS = Object.freeze({
+  command: 512,
+  url: 512,
+  file_path: 512,
+  package_name: 256,
+  package_version: 128,
+  package_registry: 128
+});
+function safeTruncate(value, maxLen) {
+  if (maxLen <= 0)
+    return "";
+  if (value.length <= maxLen)
+    return value;
+  const cutIndex = maxLen;
+  const codeUnit = value.charCodeAt(cutIndex - 1);
+  if (codeUnit >= 55296 && codeUnit <= 56319) {
+    return value.slice(0, cutIndex - 1);
+  }
+  return value.slice(0, cutIndex);
+}
+
+// ../core/dist/audit-log.js
 init_file_utils();
 
 // ../core/dist/jsonl-log-writer.js
-var import_promises = require("node:fs/promises");
+var import_promises2 = require("node:fs/promises");
 var import_node_path2 = require("node:path");
-var import_promises2 = require("node:timers/promises");
 init_config();
+init_file_utils();
 var writeQueues = /* @__PURE__ */ new Map();
-var ROTATE_LOCK_TIMEOUT_MS = 250;
-var ROTATE_LOCK_STALE_MS = 3e4;
-var ROTATE_LOCK_POLL_MS = 50;
 async function shouldRotate(filePath, maxBytes, maxFiles) {
   if (maxBytes <= 0 || maxFiles <= 0)
     return false;
   try {
-    const s = await (0, import_promises.stat)(filePath);
+    const s = await (0, import_promises2.stat)(filePath);
     return s.size >= maxBytes;
   } catch {
     return false;
   }
 }
-async function removeStaleRotateLock(lockPath) {
-  try {
-    const s = await (0, import_promises.stat)(lockPath);
-    if (Date.now() - s.mtimeMs < ROTATE_LOCK_STALE_MS)
-      return;
-    await (0, import_promises.rmdir)(lockPath);
-  } catch {
-  }
-}
-async function acquireRotateLock(filePath) {
-  const lockPath = `${filePath}.lock`;
-  const deadline = Date.now() + ROTATE_LOCK_TIMEOUT_MS;
-  while (true) {
-    try {
-      await (0, import_promises.mkdir)(lockPath);
-      return async () => {
-        try {
-          await (0, import_promises.rmdir)(lockPath);
-        } catch {
-        }
-      };
-    } catch {
-      await removeStaleRotateLock(lockPath);
-      const remainingMs = deadline - Date.now();
-      if (remainingMs <= 0)
-        return void 0;
-      await (0, import_promises2.setTimeout)(Math.min(ROTATE_LOCK_POLL_MS, remainingMs));
-    }
-  }
-}
 async function rotateIfNeeded(filePath, maxBytes, maxFiles) {
   if (!await shouldRotate(filePath, maxBytes, maxFiles))
     return;
-  const releaseLock = await acquireRotateLock(filePath);
-  if (!releaseLock)
-    return;
-  try {
+  await withFileLock(filePath, async () => {
     if (!await shouldRotate(filePath, maxBytes, maxFiles))
       return;
     try {
-      await (0, import_promises.unlink)(`${filePath}.${maxFiles}`);
+      await (0, import_promises2.unlink)(`${filePath}.${maxFiles}`);
     } catch {
     }
     for (let i = maxFiles - 1; i >= 1; i--) {
       try {
-        await (0, import_promises.rename)(`${filePath}.${i}`, `${filePath}.${i + 1}`);
+        await (0, import_promises2.rename)(`${filePath}.${i}`, `${filePath}.${i + 1}`);
       } catch {
       }
     }
     try {
-      await (0, import_promises.rename)(filePath, `${filePath}.1`);
+      await (0, import_promises2.rename)(filePath, `${filePath}.1`);
     } catch {
     }
-  } finally {
-    await releaseLock();
-  }
+  });
 }
 async function appendJsonlEntryNow(path2, config2, entry) {
-  await (0, import_promises.mkdir)((0, import_node_path2.dirname)(path2), { recursive: true });
+  await (0, import_promises2.mkdir)((0, import_node_path2.dirname)(path2), { recursive: true });
   await rotateIfNeeded(path2, config2.max_bytes, config2.max_files);
-  await (0, import_promises.appendFile)(path2, `${JSON.stringify(entry)}
+  await (0, import_promises2.appendFile)(path2, `${JSON.stringify(entry)}
 `);
 }
 async function appendJsonlEntry(config2, entry) {
@@ -20555,6 +20610,7 @@ async function appendJsonlEntry(config2, entry) {
 }
 
 // ../core/dist/audit-log.js
+init_types2();
 async function getRecentEntries(config2, limit = 100) {
   const path2 = resolvePath(config2.path);
   try {
@@ -20734,7 +20790,7 @@ init_file_utils();
 var import_meta = {};
 function resolveVersion() {
   if (true)
-    return "0.11.0";
+    return "0.13.0";
   try {
     const pkgPath = (0, import_node_path3.join)((0, import_node_path3.dirname)((0, import_node_url.fileURLToPath)(import_meta.url)), "..", "package.json");
     const pkg = JSON.parse(getFileContentSync(pkgPath));
@@ -20753,8 +20809,11 @@ init_config();
 init_types2();
 var STALE_LOCK_MS = 60 * 60 * 1e3;
 
+// ../core/dist/clients/model-manifest.js
+init_config();
+
 // ../core/dist/sage-proxy.js
-function mapSageProxyOs(platform) {
+function mapSageHostOs(platform) {
   switch (platform) {
     case "win32":
       return "WINDOWS";
@@ -20766,21 +20825,37 @@ function mapSageProxyOs(platform) {
       return platform;
   }
 }
-function mapSageProxyArchitecture(arch) {
+function mapSageHostArchitecture(arch) {
   return arch.toUpperCase();
 }
+function buildSageUserConfig(config2) {
+  return {
+    sensitivity: config2.sensitivity,
+    url_check_enabled: config2.url_check.enabled,
+    file_check_enabled: config2.file_check.enabled,
+    package_check_enabled: config2.package_check.enabled,
+    heuristics_enabled: config2.heuristics_enabled,
+    pi_check_enabled: config2.pi_check.enabled,
+    community_iq_enabled: config2.community_iq,
+    // Optional-chained + defaulted: real callers pass a loadConfig result (skill_check
+    // always present via the schema default), but this feeds fail-open telemetry, so a
+    // partial config must never crash the envelope build.
+    skill_check_upload_enabled: config2.skill_check?.upload_enabled ?? true
+  };
+}
 function buildSageProxyEnvelope(args) {
   return {
     identity: { uuid: args.iid },
     product: { version_app: args.versionApp },
     platform: {
-      os: args.platformOs ?? mapSageProxyOs(process.platform),
-      architecture: args.platformArchitecture ?? mapSageProxyArchitecture(process.arch)
+      os: args.platformOs ?? mapSageHostOs(process.platform),
+      architecture: args.platformArchitecture ?? mapSageHostArchitecture(process.arch)
     },
     agent: {
       agent_runtime: args.agentRuntime,
       agent_runtime_version: args.agentRuntimeVersion
-    }
+    },
+    ...args.config ? { config: buildSageUserConfig(args.config) } : {}
   };
 }
 
@@ -20817,39 +20892,24 @@ init_types2();
 // ../core/dist/index.js
 init_pi_deps_installer();
 
+// ../core/dist/clients/skill-analyze.js
+init_types2();
+
 // ../core/dist/clients/skill-check.js
 init_types2();
 
 // ../core/dist/index.js
 init_config();
 
+// ../core/dist/config-defaults.js
+init_file_utils();
+init_types2();
+
 // ../core/dist/config-diagnostics.js
 init_config();
 init_file_utils();
 init_types2();
 
-// ../core/dist/content-snapshot.js
-var CONTENT_FIELD_LIMITS = Object.freeze({
-  command: 512,
-  url: 512,
-  file_path: 512,
-  package_name: 256,
-  package_version: 128,
-  package_registry: 128
-});
-function safeTruncate(value, maxLen) {
-  if (maxLen <= 0)
-    return "";
-  if (value.length <= maxLen)
-    return value;
-  const cutIndex = maxLen;
-  const codeUnit = value.charCodeAt(cutIndex - 1);
-  if (codeUnit >= 55296 && codeUnit <= 56319) {
-    return value.slice(0, cutIndex - 1);
-  }
-  return value.slice(0, cutIndex);
-}
-
 // ../core/dist/extended-info.js
 var import_promises3 = require("node:fs/promises");
 var import_node_os2 = require("node:os");
@@ -21056,6 +21116,9 @@ async function getInstallationId(sageDirPath) {
 // ../core/dist/detection-telemetry.js
 init_types2();
 
+// ../core/dist/e2e-capture.js
+var CAPTURE_MAX_BYTES = 10 * 1024 * 1024;
+
 // ../core/dist/policy.js
 init_types2();
 
@@ -21102,6 +21165,32 @@ init_file_utils();
 init_config();
 init_types2();
 
+// ../core/dist/install-state.js
+init_config();
+init_file_utils();
+
+// ../core/dist/notices.js
+init_config();
+var SKILL_UPLOAD_NOTICE = {
+  id: "skill_upload_v1",
+  body: () => [
+    "unknown skills \u2014 each skill's SKILL.md and every supporting file in its",
+    "folder \u2014 will be uploaded and checked against potential malicious artifacts",
+    "starting next session. To keep skill content on this machine, set",
+    '"skill_check": { "upload_enabled": false } in ~/.sage/config.json.'
+  ],
+  // Suppressed once the user has explicitly set upload_enabled either way: an
+  // explicit choice needs no consent prompt (the rollout obeys it directly).
+  isEligible: async ({ configPath, logger: logger2 }) => !(await readExplicitSkillUploadEnabled(configPath, logger2)).present
+};
+var NOTICES = {
+  [SKILL_UPLOAD_NOTICE.id]: SKILL_UPLOAD_NOTICE
+};
+
+// ../core/dist/install-state.js
+init_types2();
+var SKILL_UPLOAD_NOTICE_ID = SKILL_UPLOAD_NOTICE.id;
+
 // ../core/dist/model-download.js
 init_types2();
 
@@ -21223,6 +21312,7 @@ function createOperationalLogger(config2, runtime) {
 
 // ../core/dist/plugin-scan-cache.js
 var import_node_path6 = require("node:path");
+init_config();
 init_file_utils();
 init_types2();
 var DEFAULT_CACHE_PATH = (0, import_node_path6.join)(getHomeDir(), ".sage", "plugin_scan_cache.json");
@@ -21230,6 +21320,22 @@ var DEFAULT_CACHE_PATH = (0, import_node_path6.join)(getHomeDir(), ".sage", "plu
 // ../core/dist/plugin-scanner.js
 init_config();
 init_file_utils();
+
+// ../core/dist/skill-id.js
+var MAX_SKILL_BYTES = 50 * 1024 * 1024;
+
+// ../core/dist/skill-pending.js
+init_config();
+init_file_utils();
+init_types2();
+var PENDING_TTL_MS = 60 * 60 * 1e3;
+
+// ../core/dist/skill-verdict-cache.js
+init_config();
+init_file_utils();
+init_types2();
+
+// ../core/dist/plugin-scanner.js
 init_types2();
 var MAX_FILE_SIZE = 512 * 1024;
 
@@ -21265,6 +21371,7 @@ init_types2();
 init_types2();
 
 // ../core/dist/version-check.js
+init_config();
 init_types2();
 
 // ../core/dist/tool-names.js
@@ -31332,6 +31439,9 @@ function readContent(entry) {
     return {};
   return raw;
 }
+function readContentSnippet(entry) {
+  return asString(entry.content_snippet);
+}
 function isRuntimeVerdictEntry(v) {
   if (!v || typeof v !== "object" || Array.isArray(v))
     return false;
@@ -31377,9 +31487,10 @@ var ReportInputSchema = external_exports.object({
   entry_ids: external_exports.array(external_exports.string()).optional().describe(`REQUIRED in normal use: list of specific audit entry_ids to report as false positives. ALWAYS call sage_list_audit_entries first to inspect the audit log and identify the exact deny/ask verdict the user considers a false positive, then pass its entry_id here. Up to ${MAX_EXPLICIT_ENTRIES} entry_ids may be provided per call. Omitting this parameter is a fallback that submits up to ${MAX_IMPLICIT_ENTRIES} most recent deny/ask entries for the conversation, which may include irrelevant verdicts and should only be used when entry_id discovery is impossible.`),
   dry_run: external_exports.boolean().optional().describe("If true, do not POST; just show the payload.")
 });
-function parseAuditSignals(raw) {
+function parseAuditSignals(raw, options = {}) {
   if (!raw || typeof raw !== "object" || Array.isArray(raw))
     return {};
+  const includePiContentSnippet = options.includePiContentSnippet ?? true;
   const obj = raw;
   const heuristicsRaw = obj.heuristics;
   const urlChecksRaw = obj.url_checks;
@@ -31391,11 +31502,16 @@ function parseAuditSignals(raw) {
     if (!h || typeof h !== "object" || Array.isArray(h))
       return null;
     const rec = h;
+    const detection_name = asString(rec.detection_name);
     const rule_id = asString(rec.rule_id);
     const rule_version = typeof rec.rule_version === "number" ? Math.trunc(rec.rule_version) : void 0;
     if (!rule_id)
       return null;
-    return { rule_id, rule_version };
+    return {
+      ...detection_name ? { detection_name } : {},
+      rule_id,
+      rule_version
+    };
   }).filter(Boolean) : void 0;
   const url_checks = Array.isArray(urlChecksRaw) ? urlChecksRaw.map((u) => {
     if (!u || typeof u !== "object" || Array.isArray(u))
@@ -31433,12 +31549,20 @@ function parseAuditSignals(raw) {
     if (!m || typeof m !== "object" || Array.isArray(m))
       return null;
     const rec = m;
+    const detection_name = asString(rec.detection_name);
     const risk = typeof rec.risk === "number" ? rec.risk : void 0;
     const model_id = asString(rec.model_id);
     const content_name = asString(rec.content_name);
+    const content_snippet = asString(rec.content_snippet);
     if (risk === void 0 || !model_id || !content_name)
       return null;
-    return { risk, model_id, content_name };
+    return {
+      ...detection_name ? { detection_name } : {},
+      risk,
+      model_id,
+      content_name,
+      ...content_snippet && includePiContentSnippet ? { content_snippet } : {}
+    };
   }).filter(Boolean) : void 0;
   const amsi_checks = Array.isArray(amsiChecksRaw) ? amsiChecksRaw.map((a) => {
     if (!a || typeof a !== "object" || Array.isArray(a))
@@ -31510,7 +31634,11 @@ function registerFalsePositiveTools(server, opts) {
         severity: asString(e.severity),
         source: asString(e.source),
         user_override: e.user_override,
-        signals: parseAuditSignals(e.signals),
+        // PI snippets are untrusted fetched content. Exclude their raw
+        // text—including the generic top-level content_snippet - from this
+        // model-visible response. Retain it only for the backend-only
+        // false-positive report below.
+        signals: parseAuditSignals(e.signals, { includePiContentSnippet: false }),
         content: readContent(e)
       }));
       complete("completed", {
@@ -31627,10 +31755,14 @@ ${reasoning}`;
         const agent_runtime = asString(e.agent_runtime) ?? "unknown";
         const tool_type = asString(e.tool_name) ?? "Unknown";
         const verdict = asString(e.verdict) ?? "deny";
-        const user_action = e.user_override === true ? "allowed" : "blocked";
+        const wasAllowed = verdict === "allow" || e.user_override === true;
+        const user_action = wasAllowed ? "allowed" : "blocked";
         const hook_type = asHookType(e.hook_type) ?? "PreToolUse";
-        const signals = parseAuditSignals(e.signals);
+        const signals = parseAuditSignals(e.signals, {
+          includePiContentSnippet: !dry_run
+        });
         const content = readContent(e);
+        const contentSnippet = readContentSnippet(e);
         const bestEffortSignals = {};
         if (signals.heuristics)
           bestEffortSignals.heuristics = signals.heuristics;
@@ -31649,7 +31781,8 @@ ${reasoning}`;
             iid,
             versionApp,
             agentRuntime: agent_runtime,
-            agentRuntimeVersion: runtimeVersion
+            agentRuntimeVersion: runtimeVersion,
+            config: config2
           }),
           block_event: {
             hook_type,
@@ -31658,7 +31791,8 @@ ${reasoning}`;
             user_action,
             timestamp,
             ...Object.keys(bestEffortSignals).length > 0 ? { signals: bestEffortSignals } : {},
-            content
+            content,
+            ...contentSnippet && !dry_run ? { content_snippet: contentSnippet } : {}
           },
           comment,
           event_id: entry_id ?? (0, import_node_crypto2.randomUUID)()
@@ -31763,7 +31897,7 @@ async function main() {
   );
   const branding = resolveBranding(config2.brand_key, logger);
   await runSageMcpServerStdio({
-    version: "0.11.0",
+    version: "0.13.0",
     logger,
     branding
   });