@guilz-dev/belay 0.9.4 → 0.10.1

package/dist/adapters/shared/gate-runtime.js

@@ -5,7 +5,6 @@ import path from 'node:path';
 import { compactApprovals, createApprovalRecordWithEnvelope } from '../../core/approval.js';
 import { buildReplayHint, buildRetryInstructionForConfig, canAutoReplay, getExecutionLeaseMs, validateReplayEnvelope, } from '../../core/approval-replay.js';
 import { claimApprovedForReplay, gateApprovalStoreFromDeps, recordApproval, } from '../../core/approval-service.js';
-import { issueApprovalToken } from '../../core/approval-token.js';
 import { buildAuditActionSnapshot, buildAuditReplayContext, } from '../../core/audit-replay-context.js';
 import { approvalCorrelationId, serializeAuditRecordV3, toolInvocationCorrelationId, } from '../../core/audit-serialize.js';
 import { boundedUtf8Tail } from '../../core/bounded-output.js';
@@ -31,12 +30,13 @@ import { effectPlanAuditFields, hashEffectPlan } from '../../core/effect-ir/audi
 import { buildCapabilityEffectPlan } from '../../core/effect-ir/build.js';
 import { classifyResultToGateVerdict, unnormalizedGateVerdict, } from '../../core/gate-contract.js';
 import { classifyGatedActionAsync, extractAgentAssessment, GateNormalizationError, gateEnabledForAction, normalizeGatedAction, } from '../../core/gate-engine.js';
-import { approvalCommandMatch, approvedApprovalsFile, belayStateDir, canonicalStringify, classifierOptionsFromConfig, configuredControlPlaneDir, hashValue, pendingApprovalsFile, resolveControlPlaneDir, scrubOptionsFromConfig, scrubString, scrubValue, toolFingerprint, } from '../../core/index.js';
+import { approvalCommandMatch, approvedApprovalsFile, belayStateDir, canonicalStringify, classifierOptionsFromConfig, configuredControlPlaneDir, hashValue, pendingApprovalsFile, resolveControlPlaneDir, scrubOptionsFromConfig, scrubString, scrubValue, } from '../../core/index.js';
 import { extractJudgeFallbackReason, formatJudgeInfrastructureDenyMessage, inferProviderIdFromFallbackReason, isJudgeInfrastructureFailure, } from '../../core/judge-fallback-hints.js';
 import { notifyDeny } from '../../core/notify.js';
 import { canonicalPath } from '../../core/path-utils.js';
 import { recoveryFailClosedResult, recoveryFailReasonFromSkip, } from '../../core/recovery/fail-closed.js';
 import { fingerprintReplayPayload, redactToolInvocationId } from '../../core/replay-scrub.js';
+import { assertRepoConfigTrusted } from '../../core/repo-config-trust.js';
 import { FILE_CHECKPOINT_ISOLATION_UNAVAILABLE, isTransactionalEligible, runTransactionalExecution, TRANSACTIONAL_ALREADY_APPLIED, TRANSACTIONAL_APPROVAL_BYPASS_REASONS, } from '../../core/transactional/index.js';
 import { buildAuditProvenanceFields } from '../../runtime-provenance.js';
 import { egressStatus } from '../../services/egress-service.js';
@@ -91,7 +91,15 @@ async function loadJsonFile(filePath, fallback) {
 export function createDefaultGateRuntimeDeps() {
     return {
         async readConfig(configPath) {
-            return loadJsonFile(configPath, {});
+            try {
+                return JSON.parse(await readFile(configPath, 'utf8'));
+            }
+            catch (error) {
+                if (error.code === 'ENOENT') {
+                    return {};
+                }
+                throw error;
+            }
         },
         async appendAudit(ctx, event) {
             const auditPath = path.join(ctx.repoRoot, ctx.config.audit.logPath);
@@ -149,6 +157,7 @@ export function createDefaultGateRuntimeDeps() {
 }
 export async function resolveGateConfig(ctx, deps) {
     const loaded = await deps.readConfig(ctx.configPath);
+    await assertRepoConfigTrusted(ctx.repoRoot, ctx.layout.name, loaded);
     let teamConfig = null;
     const teamPath = teamConfigPath();
     if (existsSync(teamPath)) {
@@ -817,41 +826,6 @@ export async function evaluateGatedAction(ctx, deps, params) {
         scopeHintPayload: params.payload,
     });
 }
-/** R39: unmapped Codex tools ask via pending approval — not hard deny without approval path. */
-export async function gateUnmappedToolVerdict(ctx, deps, toolName, payload) {
-    const scrubOpts = scrubOptionsFromConfig(ctx.config);
-    const replayPayload = fingerprintReplayPayload('tool', payload, scrubOpts) ?? {};
-    const result = {
-        verdict: 'deny_pending_approval',
-        reason: 'unmapped_tool',
-        summary: toolName,
-        fingerprint: toolFingerprint(toolName, replayPayload, ctx.repoRoot),
-        assessment: {
-            reversibility: 'irreversible',
-            external: false,
-            blastRadius: 'unknown Codex tool action',
-            confidence: 0.5,
-            signals: ['unmapped_tool'],
-        },
-    };
-    return gateDecisionToVerdict(ctx, deps, 'tool', result, {
-        approvalInput: {
-            input: toolName,
-            inputKind: 'tool',
-            cwd: ctx.repoRoot,
-            toolName,
-            payload: replayPayload,
-        },
-        replayAction: {
-            kind: 'tool',
-            cwd: ctx.repoRoot,
-            toolName,
-            payload: replayPayload,
-            fingerprint: result.fingerprint,
-            repoRoot: ctx.repoRoot,
-        },
-    });
-}
 async function consumeCapabilityGrantIfUsed(ctx, deps, result) {
     if (result.reason !== 'capability_grant' &&
         result.authorizationDecision?.matchedRule !== 'grant.exact') {
@@ -937,19 +911,6 @@ async function gateDecisionToVerdict(ctx, deps, kind, result, auditExtras = {})
         if (created) {
             await recordGateApprovalAsk(stateDir, result.reason, false);
         }
-        let approvalToken;
-        try {
-            approvalToken = await issueApprovalToken({
-                approvalId: approval.approvalId,
-                fingerprint: approval.fingerprint,
-                repoRoot: approval.repoRoot,
-                issuedAt: approval.createdAt,
-                expiresAt: approval.expiresAt,
-            }, configuredControlPlaneDir(ctx.config));
-        }
-        catch {
-            approvalToken = undefined;
-        }
         const denialReason = failure?.reason ?? result.reason;
         if (ctx.config.notifications.webhookUrl || ctx.config.notifications.commandHook) {
             await notifyDeny(ctx.config.notifications, {
@@ -958,7 +919,6 @@ async function gateDecisionToVerdict(ctx, deps, kind, result, auditExtras = {})
                 summary: result.normalizedCommand ?? result.summary ?? '',
                 repoRoot: ctx.repoRoot,
                 fingerprint: result.fingerprint,
-                approvalToken,
             });
         }
         const failureAuditFields = typeof failure?.auditFields === 'function'