@guilz-dev/belay 0.9.3 → 0.10.0

package/dist/adapters/shared/gate-runtime.js

@@ -5,7 +5,6 @@ import path from 'node:path';
 import { compactApprovals, createApprovalRecordWithEnvelope } from '../../core/approval.js';
 import { buildReplayHint, buildRetryInstructionForConfig, canAutoReplay, getExecutionLeaseMs, validateReplayEnvelope, } from '../../core/approval-replay.js';
 import { claimApprovedForReplay, gateApprovalStoreFromDeps, recordApproval, } from '../../core/approval-service.js';
-import { issueApprovalToken } from '../../core/approval-token.js';
 import { buildAuditActionSnapshot, buildAuditReplayContext, } from '../../core/audit-replay-context.js';
 import { approvalCorrelationId, serializeAuditRecordV3, toolInvocationCorrelationId, } from '../../core/audit-serialize.js';
 import { boundedUtf8Tail } from '../../core/bounded-output.js';
@@ -37,6 +36,7 @@ import { notifyDeny } from '../../core/notify.js';
 import { canonicalPath } from '../../core/path-utils.js';
 import { recoveryFailClosedResult, recoveryFailReasonFromSkip, } from '../../core/recovery/fail-closed.js';
 import { fingerprintReplayPayload, redactToolInvocationId } from '../../core/replay-scrub.js';
+import { assertRepoConfigTrusted } from '../../core/repo-config-trust.js';
 import { FILE_CHECKPOINT_ISOLATION_UNAVAILABLE, isTransactionalEligible, runTransactionalExecution, TRANSACTIONAL_ALREADY_APPLIED, TRANSACTIONAL_APPROVAL_BYPASS_REASONS, } from '../../core/transactional/index.js';
 import { buildAuditProvenanceFields } from '../../runtime-provenance.js';
 import { egressStatus } from '../../services/egress-service.js';
@@ -91,7 +91,15 @@ async function loadJsonFile(filePath, fallback) {
 export function createDefaultGateRuntimeDeps() {
     return {
         async readConfig(configPath) {
-            return loadJsonFile(configPath, {});
+            try {
+                return JSON.parse(await readFile(configPath, 'utf8'));
+            }
+            catch (error) {
+                if (error.code === 'ENOENT') {
+                    return {};
+                }
+                throw error;
+            }
         },
         async appendAudit(ctx, event) {
             const auditPath = path.join(ctx.repoRoot, ctx.config.audit.logPath);
@@ -149,6 +157,7 @@ export function createDefaultGateRuntimeDeps() {
 }
 export async function resolveGateConfig(ctx, deps) {
     const loaded = await deps.readConfig(ctx.configPath);
+    await assertRepoConfigTrusted(ctx.repoRoot, ctx.layout.name, loaded);
     let teamConfig = null;
     const teamPath = teamConfigPath();
     if (existsSync(teamPath)) {
@@ -675,7 +684,23 @@ export async function evaluateGatedAction(ctx, deps, params) {
         ...authorization,
         egressProxyActive,
     };
-    const predicted = await classifyGatedActionAsync(action, ctx.config, enrichedClassifierOptions);
+    let predicted = await classifyGatedActionAsync(action, ctx.config, enrichedClassifierOptions);
+    if (action.kind === 'tool' &&
+        predicted.reason === 'unclassified_tool' &&
+        (ctx.config.policy.codexUnmappedTool ?? 'deny') === 'deny') {
+        predicted = {
+            ...predicted,
+            verdict: 'deny_pending_approval',
+            reason: 'unmapped_tool',
+            assessment: {
+                reversibility: 'irreversible',
+                external: false,
+                blastRadius: 'unknown tool action',
+                confidence: 0.5,
+                signals: ['unmapped_tool'],
+            },
+        };
+    }
     if (action.kind === 'shell' &&
         action.command &&
         isContainedUnknownExecutionEligible(ctx.config, action, predicted)) {
@@ -910,6 +935,7 @@ async function gateDecisionToVerdict(ctx, deps, kind, result, auditExtras = {})
         event: auditEvent,
         sourceEvent,
         kind,
+        repoLabel: path.basename(ctx.repoRoot),
         ...(auditExtras.toolInvocationCorrelationId
             ? { toolInvocationCorrelationId: auditExtras.toolInvocationCorrelationId }
             : {}),
@@ -936,19 +962,6 @@ async function gateDecisionToVerdict(ctx, deps, kind, result, auditExtras = {})
         if (created) {
             await recordGateApprovalAsk(stateDir, result.reason, false);
         }
-        let approvalToken;
-        try {
-            approvalToken = await issueApprovalToken({
-                approvalId: approval.approvalId,
-                fingerprint: approval.fingerprint,
-                repoRoot: approval.repoRoot,
-                issuedAt: approval.createdAt,
-                expiresAt: approval.expiresAt,
-            }, configuredControlPlaneDir(ctx.config));
-        }
-        catch {
-            approvalToken = undefined;
-        }
         const denialReason = failure?.reason ?? result.reason;
         if (ctx.config.notifications.webhookUrl || ctx.config.notifications.commandHook) {
             await notifyDeny(ctx.config.notifications, {
@@ -957,7 +970,6 @@ async function gateDecisionToVerdict(ctx, deps, kind, result, auditExtras = {})
                 summary: result.normalizedCommand ?? result.summary ?? '',
                 repoRoot: ctx.repoRoot,
                 fingerprint: result.fingerprint,
-                approvalToken,
             });
         }
         const failureAuditFields = typeof failure?.auditFields === 'function'