@guilz-dev/belay 0.6.0 → 0.8.0

package/dist/corpus/must-allow-commands.d.ts

@@ -1,5 +1,6 @@
 /**
- * Structural-suite MUST-ALLOW ledger — keep in sync with standing-allow catalog generation.
+ * Structural-suite MUST-ALLOW CI expectations.
+ * These commands guard classifier availability in tests and never grant runtime authority.
  * @see src/__tests__/verdict/structural-suite.test.ts
  */
 export declare const MUST_ALLOW_SHELL_COMMANDS: readonly ["npm test", "npm run build", "pnpm test", "pnpm build", "pnpm vitest run src/example.test.ts", "bash -lc 'git status'", "belay approve belay_deadbeef1234"];

package/dist/corpus/must-allow-commands.js

@@ -1,5 +1,6 @@
 /**
- * Structural-suite MUST-ALLOW ledger — keep in sync with standing-allow catalog generation.
+ * Structural-suite MUST-ALLOW CI expectations.
+ * These commands guard classifier availability in tests and never grant runtime authority.
  * @see src/__tests__/verdict/structural-suite.test.ts
  */
 export const MUST_ALLOW_SHELL_COMMANDS = [

package/dist/corpus/runtime-match.d.ts

@@ -11,8 +11,9 @@ export declare function defaultCorpusEvalPaths(repoRoot?: string): {
  */
 export declare function deriveShellCorpusRuntimeKey(command: string, repoRoot?: string, cwd?: string): Promise<string>;
 /**
- * Attach derived `runtimeKey` to provably-benign shell cases that omit it.
+ * Attach derived stable CI `runtimeKey` to provably-benign shell cases that omit it.
  * When `runtimeKey` is precomputed in the fixture, verify it matches the derived fingerprint.
+ * The key is retained for corpus compatibility and is not runtime authorization.
  */
 export declare function enrichProvablyBenignRuntimeKeys(cases: CorpusCase[], repoRoot?: string, cwd?: string): Promise<CorpusCase[]>;
 /** Runtime-consumable keys from enriched provably-benign shell fixtures. */

package/dist/corpus/runtime-match.js

@@ -17,8 +17,9 @@ export async function deriveShellCorpusRuntimeKey(command, repoRoot = DEFAULT_CO
     return result.fingerprint;
 }
 /**
- * Attach derived `runtimeKey` to provably-benign shell cases that omit it.
+ * Attach derived stable CI `runtimeKey` to provably-benign shell cases that omit it.
  * When `runtimeKey` is precomputed in the fixture, verify it matches the derived fingerprint.
+ * The key is retained for corpus compatibility and is not runtime authorization.
  */
 export async function enrichProvablyBenignRuntimeKeys(cases, repoRoot = DEFAULT_CORPUS_REPO_ROOT, cwd = path.join(repoRoot, 'src')) {
     return Promise.all(cases.map(async (testCase) => {

package/dist/corpus/types.d.ts

@@ -29,9 +29,9 @@ export interface CorpusCase {
     verdict: HookVerdict;
     reason?: string;
     /**
-     * Stable runtime-facing key for `provably-benign` shell cases (verdict fingerprint).
+     * Stable CI/deduplication key for `provably-benign` shell cases (verdict fingerprint).
      * Offline fixtures may omit this; loaders derive it via `deriveShellCorpusRuntimeKey`.
-     * Consumed by future standing-allow / catalog code — not used by evaluation harness alone.
+     * This key is not runtime authorization.
      */
     runtimeKey?: string;
     /** Optional case origin metadata for quality-loop ratchet and harvest audit. */

package/dist/templates.js

@@ -45,12 +45,17 @@ async function readRuntimeBundle(adapter = 'cursor') {
 }
 export async function renderRuntimeCore(adapter = 'cursor') {
     const bundle = await readRuntimeBundle(adapter);
-    const stamp = `export const RUNTIME_BUILD_STAMP = ${JSON.stringify(`${PACKAGE_VERSION}@${new Date().toISOString()}`)};\n`;
+    const runtimeBuildStamp = `${PACKAGE_VERSION}@${new Date().toISOString()}`;
+    const stamp = `export const RUNTIME_BUILD_STAMP = ${JSON.stringify(runtimeBuildStamp)};\n`;
     const versionLine = `export const RUNTIME_PACKAGE_VERSION = ${JSON.stringify(PACKAGE_VERSION)};\n`;
+    const provenance = `globalThis[Symbol.for("agent-belay.runtime-provenance")] = ${JSON.stringify({
+        runtimeVersion: PACKAGE_VERSION,
+        runtimeBuildStamp,
+    })};\n`;
     const withoutStamp = bundle
         .replace(/^export const RUNTIME_BUILD_STAMP = .*;\n/gm, '')
         .replace(/^export const RUNTIME_PACKAGE_VERSION = .*;\n/gm, '')
         .replace(/^var RUNTIME_PACKAGE_VERSION = .*;\n/gm, '')
         .replace(/\n {2}RUNTIME_PACKAGE_VERSION,\n/, '\n');
-    return `${versionLine}${stamp}${withoutStamp}`;
+    return `${versionLine}${stamp}${provenance}${withoutStamp}`;
 }

package/dist/types.d.ts

@@ -138,6 +138,17 @@ export interface StatusReport {
     dogfood: DogfoodStatus;
     health: HealthSnapshot;
     visibility: AuditVisibilityReport;
+    fileCheckpoint: {
+        enabled: boolean;
+        allowNonGit: boolean;
+        transactionalEnabled: boolean;
+        durableCheckpointEnabled: boolean;
+        maxFiles: number;
+        maxSourceBytes: number;
+        maxWorkspaceBytes: number;
+        prepareTimeoutMs: number;
+        copyConcurrency: number;
+    };
 }
 export interface ReportOptions {
     targetDir?: string;

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const PACKAGE_VERSION = "0.6.0";
+export declare const PACKAGE_VERSION = "0.8.0";

package/dist/version.js

@@ -1,2 +1,2 @@
 // Generated by scripts/sync-version.mjs — do not edit.
-export const PACKAGE_VERSION = '0.6.0';
+export const PACKAGE_VERSION = '0.8.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guilz-dev/belay",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "Belay-style approval and audit gating for agent runtimes.",
   "type": "module",
   "license": "MIT",
@@ -48,7 +48,7 @@
     "agent-belay-logo.png"
   ],
   "scripts": {
-    "build": "rm -rf dist && node scripts/sync-version.mjs && tsc -p tsconfig.build.json && node scripts/generate-standing-allow-catalog.mjs && tsc -p tsconfig.build.json && node scripts/build-runtime.mjs",
+    "build": "rm -rf dist && node scripts/sync-version.mjs && tsc -p tsconfig.build.json && node scripts/build-runtime.mjs",
     "check:version": "node scripts/check-cli-version.mjs",
     "dogfood": "./scripts/dev-dogfood.sh",
     "dev-refresh": "./scripts/dev-refresh.sh",

package/skills/belay/SKILL.md

@@ -37,9 +37,14 @@ setup (or `npx @guilz-dev/belay init` for non-interactive install). Run
 ## When belay blocks an action
 
 1. Read the approval ID in the deny message.
-2. Approve once with `/belay-approve <approval-id>` or `belay approve <approval-id>`.
-3. Retry the original action unchanged (default `approval.flow` is `one_step` for shell — the
-   approval response includes a replay hint when auto-replay is enabled).
+2. In the editor, approve once with `/belay-approve <approval-id>`.
+3. With default `approval.flow: one_step`, editor approval atomically claims the one-shot grant and
+   replays the exact denied shell action through the configured boundary driver. No follow-up prompt
+   is required. Failed or timed-out replay requires fresh approval. Tool and subagent actions still
+   require retrying the original action unchanged.
+
+An instruction may follow the approval line in the same prompt. Belay runs the approved shell action
+first and continues the remaining prompt only after replay succeeds.
 
 For shell-only CLI replay after approval: `belay approve <approval-id> --replay`.
 

package/skills/belay/belay-approve.md

@@ -1,21 +1,24 @@
 Run after belay denies a high-risk action and returns an approval ID.
 
-```bash
-belay approve <approval-id>
+```text
+/belay-approve <approval-id>
 ```
 
-Then retry the original action unchanged.
+With default `approval.flow: one_step`, the editor hook atomically claims the one-shot grant and
+immediately replays the exact denied shell action through the configured boundary driver. No
+follow-up prompt is required. Failed or timed-out replay requires fresh approval. Tool and subagent
+approvals still require a manual retry of the original action unchanged.
 
-With default `approval.flow: one_step`, shell approvals return a replay hint from editor
-hooks. Tool and subagent approvals still require a manual retry.
+An instruction may follow the approval line in the same prompt. Belay runs the approved shell action
+first and continues the remaining prompt only after replay succeeds.
 
-To run a denied shell command from the CLI after approval (explicit opt-in; do not also retry via hooks):
+For CLI approval, replay remains explicit:
 
 ```bash
 belay approve <approval-id> --replay
 ```
 
-Successful CLI replay consumes the one-shot grant. On failure, the approval stays active for one hook retry.
+CLI replay claims the one-shot grant before execution. Failure or timeout requires fresh approval.
 
 Restore legacy two-step UX in `belay.config.json`:
 

package/dist/core/verdict/overrides.d.ts

@@ -1,7 +0,0 @@
-import type { ParsedSegment } from './parser.js';
-import type { InternalSegmentVerdict, VerdictContext } from './types.js';
-export declare function matchesCustomPatterns(command: string, segment: ParsedSegment, patterns: string[] | undefined): boolean;
-export declare function customAllowMatch(command: string, segment: ParsedSegment, context: VerdictContext): boolean;
-export declare function customExternalMatch(command: string, segment: ParsedSegment, context: VerdictContext): boolean;
-export declare function allowFromCustomOverride(opacity: InternalSegmentVerdict['opacity']): InternalSegmentVerdict;
-export declare function askFromCustomExternal(opacity: InternalSegmentVerdict['opacity']): InternalSegmentVerdict;

package/dist/core/verdict/overrides.js

@@ -1,37 +0,0 @@
-import { matchesCustomCommand } from '../custom-command-match.js';
-export function matchesCustomPatterns(command, segment, patterns) {
-    if (!patterns || patterns.length === 0) {
-        return false;
-    }
-    const normalized = command.trim();
-    return patterns.some((pattern) => matchesCustomCommand(normalized, segment.key, pattern) ||
-        matchesCustomCommand(segment.normalized, segment.key, pattern));
-}
-export function customAllowMatch(command, segment, context) {
-    return matchesCustomPatterns(command, segment, context.customAllowCommands);
-}
-export function customExternalMatch(command, segment, context) {
-    return matchesCustomPatterns(command, segment, context.customExternalCommands);
-}
-export function allowFromCustomOverride(opacity) {
-    return {
-        permission: 'allow',
-        location: 'repo_local',
-        opacity,
-        effect: 'unknown',
-        confidence: 'deterministic',
-        reason: 'custom_allow',
-        signals: ['custom_allow'],
-    };
-}
-export function askFromCustomExternal(opacity) {
-    return {
-        permission: 'ask',
-        location: 'external',
-        opacity,
-        effect: 'remote_mutation',
-        confidence: 'deterministic',
-        reason: 'custom_external',
-        signals: ['custom_external'],
-    };
-}

package/dist/core/verdict/shell-policy.d.ts

@@ -1,25 +0,0 @@
-import { type ShellCapabilityAnalysis } from '../capability/policy-engine.js';
-import type { PolicyDecision } from '../capability/policy-types.js';
-import type { CapabilityRequestV1 } from '../capability/request.js';
-import type { VerdictContext, VerdictEffect, VerdictLocation, VerdictOpacity } from './types.js';
-export interface SegmentShellPolicyInput {
-    command: string;
-    segmentHead: string;
-    effect: VerdictEffect;
-    location: VerdictLocation;
-    opacity: VerdictOpacity;
-    egressClass?: ShellCapabilityAnalysis['egressClass'];
-    pathArgs: string[];
-    resolvedPathTargets?: string[];
-    signals: string[];
-    context: VerdictContext;
-}
-export declare function evaluateSegmentShellPolicy(input: SegmentShellPolicyInput): {
-    request: CapabilityRequestV1;
-    decision: PolicyDecision;
-};
-/** Attach capability metadata without influencing the verdict (audit / shadow only). */
-export declare function shellPolicyMetadata(input: SegmentShellPolicyInput): {
-    capabilityRequests: CapabilityRequestV1[];
-    authorizationDecision: PolicyDecision;
-};

package/dist/core/verdict/shell-policy.js

@@ -1,40 +0,0 @@
-import { evaluateShellPolicy } from '../capability/policy-engine.js';
-import { cwdRelative } from './containment.js';
-import { verdictFingerprint } from './fingerprint.js';
-import { redactCommand } from './parser.js';
-function toShellCapabilityAnalysis(input) {
-    const relative = cwdRelative(input.context.repoRoot, input.context.cwd);
-    return {
-        command: input.command,
-        hookKind: 'shell',
-        segmentHead: input.segmentHead,
-        effect: input.effect,
-        location: input.location,
-        opacity: input.opacity,
-        egressClass: input.egressClass,
-        pathArgs: input.pathArgs,
-        resolvedPathTargets: input.resolvedPathTargets,
-        signals: input.signals,
-        cwd: input.context.cwd,
-        repoRoot: input.context.repoRoot,
-        inputFingerprint: verdictFingerprint(relative, redactCommand(input.command)),
-        trustedWorkspaceRoots: input.context.trustedWorkspaceRoots,
-        sensitivePaths: input.context.sensitivePaths,
-        protectedArtifactRoots: input.context.protectedArtifactRoots,
-    };
-}
-export function evaluateSegmentShellPolicy(input) {
-    return evaluateShellPolicy(toShellCapabilityAnalysis(input), input.context.config, {
-        grants: input.context.grants,
-        attestation: input.context.attestation,
-        egressProxyActive: input.context.egressProxyActive,
-    });
-}
-/** Attach capability metadata without influencing the verdict (audit / shadow only). */
-export function shellPolicyMetadata(input) {
-    const result = evaluateSegmentShellPolicy(input);
-    return {
-        capabilityRequests: [result.request],
-        authorizationDecision: result.decision,
-    };
-}

package/dist/corpus/standing-allow-catalog.generated.d.ts

@@ -1,13 +0,0 @@
-export interface StandingAllowCatalogShellEntry {
-    command: string;
-    normalizedCommand: string;
-    runtimeKey: string;
-}
-export interface StandingAllowCatalog {
-    version: 1;
-    shell: {
-        provablyBenign: StandingAllowCatalogShellEntry[];
-        mustAllow: StandingAllowCatalogShellEntry[];
-    };
-}
-export declare const STANDING_ALLOW_CATALOG: StandingAllowCatalog;

package/dist/corpus/standing-allow-catalog.generated.js

@@ -1,99 +0,0 @@
-export const STANDING_ALLOW_CATALOG = {
-    version: 1,
-    shell: {
-        provablyBenign: [
-            {
-                command: 'git status',
-                normalizedCommand: 'git status',
-                runtimeKey: '37e6be21e63e6268ee6e4212ad811f6f48ab3c3c10ce1b971c1a90d92c753a2a',
-            },
-            {
-                command: 'git branch',
-                normalizedCommand: 'git branch',
-                runtimeKey: 'd7f8388c566e751503ab82ba1ed22787389803eb32d8b5f2294cc7ca448fa285',
-            },
-            {
-                command: 'git branch --show-current',
-                normalizedCommand: 'git branch --show-current',
-                runtimeKey: '98d585412d3cd7c3b5a87a417d91bc36d7b6791e11451b52ced7888e003d9d33',
-            },
-            {
-                command: 'rg plan src',
-                normalizedCommand: 'rg plan src',
-                runtimeKey: '68ae7a96158719235d9314da7b00a5f8b2f40668e5d4f7f02e91f22284140a68',
-            },
-            {
-                command: 'ls -la',
-                normalizedCommand: 'ls -la',
-                runtimeKey: '3a665991b52b5f18069889960b957ea37b087859c23e2c87b76ef8d2a1b338fe',
-            },
-            {
-                command: "find . -name '*.ts'",
-                normalizedCommand: "find . -name '*.ts'",
-                runtimeKey: '782298e3015fcb9c17bee2dad12a395a8859043481f93f0ca596499028bb8af2',
-            },
-            {
-                command: 'git -C /workspace/project status',
-                normalizedCommand: 'git -C /workspace/project status',
-                runtimeKey: '9f88bd017c52277f5dbfeafec7d845460035a7a14bfb37b55724d7e2a9fc238b',
-            },
-            {
-                command: 'git show-ref --heads',
-                normalizedCommand: 'git show-ref --heads',
-                runtimeKey: 'aa5aa0106dc7647003f254524becbf549673610d3672f28408ac0f60481124b7',
-            },
-            {
-                command: 'git reflog -5',
-                normalizedCommand: 'git reflog -5',
-                runtimeKey: '9213a9357953c24886a4e82c2c8cdc6db2d106c7ff98af525f7fbc2b70a58ff9',
-            },
-            {
-                command: 'grep -R pattern src',
-                normalizedCommand: 'grep -R pattern src',
-                runtimeKey: '40f5e0328e668909241aa0cd13ce2a51af269aa7ae600cc493dceae7b90dd9d8',
-            },
-            {
-                command: 'jq . package.json',
-                normalizedCommand: 'jq . package.json',
-                runtimeKey: 'dd7b14d350b84a41e0e73eae0d1a643c1b6c262df8d9007696987354f4f993e9',
-            },
-        ],
-        mustAllow: [
-            {
-                command: 'npm test',
-                normalizedCommand: 'npm test',
-                runtimeKey: '1bcafcfef8e1b0138297885032c5e222c4aed19bdcde00e2539aa397fdc877cb',
-            },
-            {
-                command: 'npm run build',
-                normalizedCommand: 'npm run build',
-                runtimeKey: '3138d8a3e9afb60574e29d16c2967f70bb42475e02eadb261f5f2340f376c188',
-            },
-            {
-                command: 'pnpm test',
-                normalizedCommand: 'pnpm test',
-                runtimeKey: 'eaecc988be421de36044932e32d4be807e45baccaa94c2d29d30a34204656551',
-            },
-            {
-                command: 'pnpm build',
-                normalizedCommand: 'pnpm build',
-                runtimeKey: 'a1ec94b6b1f7f17ab0fe468e41c6dc59e04266d34772abcaa9538123601cb46d',
-            },
-            {
-                command: 'pnpm vitest run src/example.test.ts',
-                normalizedCommand: 'pnpm vitest run src/example.test.ts',
-                runtimeKey: '011e12e902154e7cf598f390fc08a50e885b34893deb97d242cf7470e23e617e',
-            },
-            {
-                command: "bash -lc 'git status'",
-                normalizedCommand: "bash -lc 'git status'",
-                runtimeKey: 'dbcc63715f4a8cca2aff988470bb1d52a4841542af9c86776ff2414509508a1f',
-            },
-            {
-                command: 'belay approve belay_deadbeef1234',
-                normalizedCommand: 'belay approve belay_deadbeef1234',
-                runtimeKey: 'bb3f0f1dac3d6c4ef79e17ef4e36f9430195596490bb736cdb8b25a5944d6f81',
-            },
-        ],
-    },
-};