@guilz-dev/belay 0.3.0 → 0.6.0

package/README.md

@@ -244,7 +244,13 @@ Notable settings:
   (`judge.providerId`); **driver** is the API compatibility layer (`judge.provider`:
   `ollama`, `openai-compatible`, or `anthropic`); **host** is where hooks install
   (`config.adapter`: `cursor`, `claude`, `codex`). Set `judge.endpoint` when needed;
-  credentials via `belay config credential mode project|apiKey` or env vars. Record egress
+  credentials via `belay config credential mode project|apiKey` or env vars. **`project`**
+  reads API keys from the shell environment at runtime (`BELAY_JUDGE_API_KEY`, then provider
+  vars such as `OPENAI_API_KEY` / `ANTHROPIC_API_KEY` / `CURSOR_API_KEY`); Belay does **not**
+  load `.env` files for Judge. When the native CLI is available, `project` can also use the
+  host login session without a stored key. **`apiKey`** stores a key in Belay's credential store
+  (`credentials.json`, mode `0600`; under `~/.config/belay/` when control plane is enabled).
+  Record egress
   consent during `belay config` or via `belay judge consent` → `belay approve` →
   `belay judge use … --cloud-consent-approval-id`. Cloud providers can use native CLI
   transport without `judge.endpoint` when the host CLI is available (`codex-cli`,

package/dist/adapters/cursor/runtime-entry.js

@@ -44,6 +44,7 @@ export async function runBeforeSubmitPromptHook() {
         jsonResponse({
             continue: result.continue,
             ...(result.user_message ? { user_message: result.user_message } : {}),
+            ...(result.replay ? { replay: result.replay } : {}),
         });
     }
     catch {

package/dist/adapters/layouts/scope.js

@@ -1,5 +1,6 @@
 import os from 'node:os';
 import path from 'node:path';
+import { isPathOutsideRoot } from '../../core/path-utils.js';
 function agentHomeDir(adapter) {
     const home = os.homedir();
     if (adapter === 'cursor') {
@@ -23,13 +24,13 @@ export function isPathInside(child, parent) {
     const resolvedChild = path.resolve(child);
     const resolvedParent = path.resolve(parent);
     const relative = path.relative(resolvedParent, resolvedChild);
-    return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
+    return relative === '' || (!isPathOutsideRoot(relative) && !path.isAbsolute(relative));
 }
 export function buildRunnerInvocation(platform, hooksDir, repoRoot, hookScript, ...args) {
     const runnerFile = platform === 'win32' ? 'belay-runner.cmd' : 'belay-runner';
     const runnerAbs = path.resolve(hooksDir, runnerFile);
     const relative = path.relative(path.resolve(repoRoot), runnerAbs);
-    const useRelative = relative.length > 0 && !relative.startsWith('..') && !path.isAbsolute(relative);
+    const useRelative = relative.length > 0 && !isPathOutsideRoot(relative) && !path.isAbsolute(relative);
     const runnerRef = useRelative
         ? platform === 'win32'
             ? `.\\${relative.split(path.sep).join('\\')}`

package/dist/adapters/shared/gate-runtime.d.ts

@@ -1,9 +1,14 @@
-import type { GatedActionKind } from '../../core/gate-contract.js';
-import { type GatePermissionResponse, type GateVerdict } from '../../core/gate-contract.js';
+import { type ApprovalReplayHint } from '../../core/approval-replay.js';
+import { type GatedActionKind, type GatePermissionResponse, type GateVerdict } from '../../core/gate-contract.js';
 import { GateNormalizationError } from '../../core/gate-engine.js';
-import { type ApprovalStateFile, type BelayConfigV3 } from '../../core/index.js';
-import type { ClassifierOptions } from '../../core/types.js';
+import { type BelayConfigV3 } from '../../core/index.js';
+import type { ApprovalStateFile, ClassifierOptions } from '../../core/types.js';
 import type { AdapterLayout } from '../layouts/types.js';
+export interface ApprovalPromptResult {
+    continue: boolean;
+    user_message?: string;
+    replay?: ApprovalReplayHint;
+}
 export interface GateRuntimeContext {
     layout: AdapterLayout;
     repoRoot: string;
@@ -32,20 +37,11 @@ export declare function evaluateGatedAction(ctx: GateRuntimeContext, deps: GateR
 }): Promise<GateVerdict>;
 /** R39: unmapped Codex tools ask via pending approval — not hard deny without approval path. */
 export declare function gateUnmappedToolVerdict(ctx: GateRuntimeContext, deps: GateRuntimeDeps, toolName: string, payload: Record<string, unknown>): Promise<GateVerdict>;
-export declare function processApprovalPrompt(ctx: GateRuntimeContext, deps: GateRuntimeDeps, prompt: string): Promise<{
-    continue: boolean;
-    user_message?: string;
-}>;
+export declare function processApprovalPrompt(ctx: GateRuntimeContext, deps: GateRuntimeDeps, prompt: string): Promise<ApprovalPromptResult>;
 export declare function gateVerdictToCursorResponse(verdict: GateVerdict): GatePermissionResponse;
 export declare function gateVerdictToClaudePreToolUseResponse(verdict: GateVerdict): Record<string, unknown>;
-export declare function gateVerdictToClaudeUserPromptResponse(verdict: {
-    continue: boolean;
-    user_message?: string;
-}): Record<string, unknown>;
+export declare function gateVerdictToClaudeUserPromptResponse(verdict: ApprovalPromptResult): Record<string, unknown>;
 export declare function gateVerdictToCodexPreToolUseResponse(verdict: GateVerdict): Record<string, unknown>;
-export declare function gateVerdictToCodexUserPromptResponse(verdict: {
-    continue: boolean;
-    user_message?: string;
-}): Record<string, unknown>;
+export declare function gateVerdictToCodexUserPromptResponse(verdict: ApprovalPromptResult): Record<string, unknown>;
 export declare function appendObservedAudit(ctx: GateRuntimeContext, deps: GateRuntimeDeps, eventName: string, payload: Record<string, unknown>): Promise<void>;
 export { GateNormalizationError };