@hiro-c/agent-gate 1.0.0

package/dist/config/Config.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Config = exports.DEFAULT_MODEL = void 0;
+exports.DEFAULT_MODEL = 'claude-sonnet-4-6';
+class Config {
+    model;
+    apiKey;
+    cooldown;
+    disabled;
+    useSystemClaude;
+    reasonLang;
+    constructor(options) {
+        this.model = options?.model ?? process.env.AGENT_GATE_MODEL ?? exports.DEFAULT_MODEL;
+        this.apiKey = options?.apiKey ?? process.env.AGENT_GATE_API_KEY;
+        const parsedCooldown = parseInt(process.env.AGENT_GATE_COOLDOWN ?? '0', 10);
+        this.cooldown = options?.cooldown ?? (Number.isNaN(parsedCooldown) ? 0 : parsedCooldown);
+        this.disabled = options?.disabled ?? process.env.AGENT_GATE_DISABLED === 'true';
+        this.useSystemClaude = options?.useSystemClaude ?? process.env.USE_SYSTEM_CLAUDE === 'true';
+        this.reasonLang = options?.reasonLang ?? process.env.AGENT_GATE_REASON_LANG;
+    }
+    get useApi() {
+        return this.apiKey !== undefined && this.apiKey !== '';
+    }
+}
+exports.Config = Config;

package/dist/config/PluginConfigLoader.d.ts

@@ -0,0 +1,3 @@
+import { AgentGatePluginConfig } from './defineConfig';
+export declare function loadPluginConfig(cwd: string): AgentGatePluginConfig;
+//# sourceMappingURL=PluginConfigLoader.d.ts.map

package/dist/config/PluginConfigLoader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PluginConfigLoader.d.ts","sourceRoot":"","sources":["../../src/config/PluginConfigLoader.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AA4EtD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,qBAAqB,CAOnE"}

package/dist/config/PluginConfigLoader.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadPluginConfig = loadPluginConfig;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const jiti_1 = require("jiti");
+const CANDIDATE_FILENAMES = [
+    '.agent-gate.config.ts',
+    '.agent-gate.config.mts',
+    '.agent-gate.config.mjs',
+    '.agent-gate.config.cjs',
+    '.agent-gate.config.js',
+];
+const LEGACY_JSON_FILENAME = '.agent-gate.json';
+function findConfigFile(cwd) {
+    let dir = cwd;
+    while (true) {
+        for (const name of CANDIDATE_FILENAMES) {
+            const p = (0, path_1.join)(dir, name);
+            if ((0, fs_1.existsSync)(p))
+                return p;
+        }
+        const legacy = (0, path_1.join)(dir, LEGACY_JSON_FILENAME);
+        if ((0, fs_1.existsSync)(legacy))
+            return legacy;
+        const parent = (0, path_1.dirname)(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+}
+function normalizeFromJson(raw) {
+    return {
+        disabledRules: Array.isArray(raw.disabled_rules)
+            ? raw.disabled_rules
+            : undefined,
+        protectedBranches: Array.isArray(raw.protected_branches)
+            ? raw.protected_branches
+            : undefined,
+        extraSecretPathPrefixes: Array.isArray(raw.extra_secret_paths)
+            ? raw.extra_secret_paths
+            : undefined,
+    };
+}
+function loadJsonFile(path) {
+    try {
+        const content = (0, fs_1.readFileSync)(path, 'utf-8');
+        const parsed = JSON.parse(content);
+        if (typeof parsed !== 'object' || parsed === null)
+            return {};
+        return normalizeFromJson(parsed);
+    }
+    catch {
+        return {};
+    }
+}
+function loadJsTsFile(path) {
+    try {
+        const jiti = (0, jiti_1.createJiti)(path, { interopDefault: true });
+        const mod = jiti(path);
+        if (typeof mod !== 'object' || mod === null)
+            return {};
+        // `interopDefault: true` unwraps `default` for ESM. Some configs
+        // still export raw modules; treat both as the config.
+        const inner = 'default' in mod &&
+            mod.default !== undefined
+            ? mod.default
+            : mod;
+        if (typeof inner !== 'object' || inner === null)
+            return {};
+        return inner;
+    }
+    catch {
+        return {};
+    }
+}
+function loadPluginConfig(cwd) {
+    const path = findConfigFile(cwd);
+    if (!path)
+        return {};
+    if (path.endsWith('.json')) {
+        return loadJsonFile(path);
+    }
+    return loadJsTsFile(path);
+}

package/dist/config/defineConfig.d.ts

@@ -0,0 +1,23 @@
+import { DeterministicRule } from '../deterministic/types';
+/**
+ * Shape of the object exported by `.agent-gate.config.{ts,js,mjs}`.
+ *
+ * All fields are optional. The plugin loader resolves precedence with
+ * existing `.agent-gate.json` (the richer config file wins on conflict).
+ */
+export interface AgentGatePluginConfig {
+    /** Rule ids that should not run. Merged with AGENT_GATE_DISABLED_RULES. */
+    disabledRules?: string[];
+    /** Override the protected branch list used by prevent-force-push-main. */
+    protectedBranches?: string[];
+    /** Additional path substrings treated as secret targets. */
+    extraSecretPathPrefixes?: string[];
+    /** User-defined deterministic rules appended after the built-ins. */
+    customRules?: DeterministicRule[];
+}
+/**
+ * Identity helper that gives TypeScript users autocomplete and type
+ * checking inside `.agent-gate.config.ts`. Has no runtime behavior.
+ */
+export declare function defineConfig(config: AgentGatePluginConfig): AgentGatePluginConfig;
+//# sourceMappingURL=defineConfig.d.ts.map

package/dist/config/defineConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defineConfig.d.ts","sourceRoot":"","sources":["../../src/config/defineConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAE1D;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,4DAA4D;IAC5D,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAA;IAClC,qEAAqE;IACrE,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAA;CAClC;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,qBAAqB,GAC5B,qBAAqB,CAEvB"}

package/dist/config/defineConfig.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defineConfig = defineConfig;
+/**
+ * Identity helper that gives TypeScript users autocomplete and type
+ * checking inside `.agent-gate.config.ts`. Has no runtime behavior.
+ */
+function defineConfig(config) {
+    return config;
+}

package/dist/contracts/schemas/hookDataSchema.d.ts

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+export declare const HookDataSchema: z.ZodObject<{
+    hook_event_name: z.ZodString;
+    tool_name: z.ZodOptional<z.ZodString>;
+    tool_input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+//# sourceMappingURL=hookDataSchema.d.ts.map

package/dist/contracts/schemas/hookDataSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hookDataSchema.d.ts","sourceRoot":"","sources":["../../../src/contracts/schemas/hookDataSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,eAAO,MAAM,cAAc;;;;iBAIzB,CAAA"}

package/dist/contracts/schemas/hookDataSchema.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HookDataSchema = void 0;
+const zod_1 = require("zod");
+exports.HookDataSchema = zod_1.z.object({
+    hook_event_name: zod_1.z.string(),
+    tool_name: zod_1.z.string().optional(),
+    tool_input: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
+});

package/dist/contracts/types/Action.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Normalized representation of a pre-tool-use event from any AI coding tool.
+ * Adapters convert vendor-specific hook payloads into this shape so that the
+ * deterministic engine and AI validator can run unchanged regardless of
+ * which agent fired the hook.
+ */
+export interface Action {
+    toolName: string;
+    toolInput: Record<string, unknown>;
+}
+/**
+ * Result of parsing a hook payload. An adapter may yield an Action when the
+ * payload represents a pre-tool-use event we care about, or a Skip when the
+ * payload is not a relevant event (post-event, unrecognized shape, disabled).
+ */
+export type ParsedHook = {
+    kind: 'action';
+    action: Action;
+} | {
+    kind: 'skip';
+    reason: string;
+};
+//# sourceMappingURL=Action.d.ts.map

package/dist/contracts/types/Action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Action.d.ts","sourceRoot":"","sources":["../../../src/contracts/types/Action.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,MAAM;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA"}

package/dist/contracts/types/Action.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/contracts/types/ClaudeMdFile.d.ts

@@ -0,0 +1,5 @@
+export type ClaudeMdFile = {
+    path: string;
+    content: string;
+};
+//# sourceMappingURL=ClaudeMdFile.d.ts.map

package/dist/contracts/types/ClaudeMdFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClaudeMdFile.d.ts","sourceRoot":"","sources":["../../../src/contracts/types/ClaudeMdFile.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA"}

package/dist/contracts/types/ClaudeMdFile.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/contracts/types/HookData.d.ts

@@ -0,0 +1,6 @@
+export type HookData = {
+    hook_event_name: string;
+    tool_name?: string;
+    tool_input?: Record<string, unknown>;
+};
+//# sourceMappingURL=HookData.d.ts.map

package/dist/contracts/types/HookData.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HookData.d.ts","sourceRoot":"","sources":["../../../src/contracts/types/HookData.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG;IACrB,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACrC,CAAA"}

package/dist/contracts/types/HookData.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/contracts/types/ModelClient.d.ts

@@ -0,0 +1,4 @@
+export interface IModelClient {
+    ask(prompt: string): Promise<string>;
+}
+//# sourceMappingURL=ModelClient.d.ts.map

package/dist/contracts/types/ModelClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ModelClient.d.ts","sourceRoot":"","sources":["../../../src/contracts/types/ModelClient.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACrC"}

package/dist/contracts/types/ModelClient.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/contracts/types/RuleSource.d.ts

@@ -0,0 +1,7 @@
+export type RuleSourceKind = 'claude-md' | 'agents-md' | 'cursorrules' | 'cursor-mdc' | 'clinerules' | 'windsurf-rule' | 'copilot-instructions' | 'aider-conventions';
+export interface RuleSource {
+    path: string;
+    content: string;
+    kind: RuleSourceKind;
+}
+//# sourceMappingURL=RuleSource.d.ts.map

package/dist/contracts/types/RuleSource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RuleSource.d.ts","sourceRoot":"","sources":["../../../src/contracts/types/RuleSource.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GACtB,WAAW,GACX,WAAW,GACX,aAAa,GACb,YAAY,GACZ,YAAY,GACZ,eAAe,GACf,sBAAsB,GACtB,mBAAmB,CAAA;AAEvB,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,cAAc,CAAA;CACrB"}

package/dist/contracts/types/RuleSource.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/contracts/types/SessionContext.d.ts

@@ -0,0 +1,25 @@
+/**
+ * One past action in an AI coding session, normalized across vendors.
+ * Adapters convert their vendor-specific transcript events into this shape.
+ */
+export interface SessionEvent {
+    kind: 'tool-call' | 'tool-result' | 'user-message' | 'assistant-message';
+    toolName?: string;
+    toolInput?: Record<string, unknown>;
+    /** ISO 8601 timestamp if the adapter can supply one. */
+    timestamp?: string;
+    /** Raw vendor payload for rules that want the original detail. */
+    raw?: unknown;
+}
+/**
+ * Context built once per hook invocation and threaded through the
+ * deterministic engine and AI validator. Rules and prompts can read
+ * `history` to make context-aware decisions (TDD enforcement,
+ * detecting drift, spotting repeated rule violations).
+ */
+export interface SessionContext {
+    cwd: string;
+    projectRoot: string;
+    history: SessionEvent[];
+}
+//# sourceMappingURL=SessionContext.d.ts.map

package/dist/contracts/types/SessionContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionContext.d.ts","sourceRoot":"","sources":["../../../src/contracts/types/SessionContext.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,WAAW,GAAG,aAAa,GAAG,cAAc,GAAG,mBAAmB,CAAA;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kEAAkE;IAClE,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAA;IACX,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,YAAY,EAAE,CAAA;CACxB"}

package/dist/contracts/types/SessionContext.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/contracts/types/ValidationResult.d.ts

@@ -0,0 +1,5 @@
+export type ValidationResult = {
+    decision: 'block' | undefined;
+    reason: string;
+};
+//# sourceMappingURL=ValidationResult.d.ts.map

package/dist/contracts/types/ValidationResult.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ValidationResult.d.ts","sourceRoot":"","sources":["../../../src/contracts/types/ValidationResult.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAA;IAC7B,MAAM,EAAE,MAAM,CAAA;CACf,CAAA"}

package/dist/contracts/types/ValidationResult.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/daemon/client.d.ts

@@ -0,0 +1,17 @@
+import { DaemonRequest, DaemonResponse } from './protocol';
+export interface SendToDaemonOptions {
+    socketPath: string;
+    /** Connection + response timeout in ms. */
+    timeoutMs?: number;
+}
+/**
+ * Connect to a running agent-gate daemon and exchange one request.
+ *
+ * Returns the daemon's DaemonResponse on success.
+ * Returns null when the daemon is not running, the response cannot be
+ * parsed, the daemon reported an error, or the timeout elapsed. The
+ * caller is expected to fall back to direct (one-shot) mode in any of
+ * those cases.
+ */
+export declare function sendToDaemon(request: DaemonRequest, opts: SendToDaemonOptions): Promise<DaemonResponse | null>;
+//# sourceMappingURL=client.d.ts.map

package/dist/daemon/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/daemon/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAE1D,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CA4ChC"}

package/dist/daemon/client.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sendToDaemon = sendToDaemon;
+const net_1 = require("net");
+/**
+ * Connect to a running agent-gate daemon and exchange one request.
+ *
+ * Returns the daemon's DaemonResponse on success.
+ * Returns null when the daemon is not running, the response cannot be
+ * parsed, the daemon reported an error, or the timeout elapsed. The
+ * caller is expected to fall back to direct (one-shot) mode in any of
+ * those cases.
+ */
+function sendToDaemon(request, opts) {
+    const timeoutMs = opts.timeoutMs ?? 2000;
+    return new Promise((resolve) => {
+        let settled = false;
+        const done = (val) => {
+            if (settled)
+                return;
+            settled = true;
+            resolve(val);
+        };
+        const sock = (0, net_1.createConnection)(opts.socketPath);
+        const timer = setTimeout(() => {
+            sock.destroy();
+            done(null);
+        }, timeoutMs);
+        let buffer = '';
+        sock.setEncoding('utf-8');
+        sock.on('connect', () => {
+            sock.write(JSON.stringify(request) + '\n');
+        });
+        sock.on('data', (chunk) => {
+            buffer += chunk;
+        });
+        sock.on('end', () => {
+            clearTimeout(timer);
+            const line = buffer.trim();
+            if (!line)
+                return done(null);
+            try {
+                const parsed = JSON.parse(line);
+                if ('error' in parsed)
+                    return done(null);
+                if (typeof parsed.output !== 'string')
+                    return done(null);
+                done(parsed);
+            }
+            catch {
+                done(null);
+            }
+        });
+        sock.on('error', () => {
+            clearTimeout(timer);
+            done(null);
+        });
+    });
+}

package/dist/daemon/protocol.d.ts

@@ -0,0 +1,17 @@
+export interface DaemonRequest {
+    /** Adapter id (e.g. "claude-code", "cursor"). */
+    adapter: string;
+    /** Raw hook payload (the vendor JSON the hook would have received). */
+    payload: string;
+    /** Working directory the hook is firing from. */
+    cwd: string;
+}
+export interface DaemonResponse {
+    /** Adapter-formatted stdout JSON the hook would have produced. */
+    output: string;
+}
+export interface DaemonErrorResponse {
+    error: string;
+}
+export declare function defaultSocketPath(): string;
+//# sourceMappingURL=protocol.d.ts.map

package/dist/daemon/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/daemon/protocol.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,aAAa;IAC5B,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAA;IACf,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAA;IACf,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAA;CACd;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}

package/dist/daemon/protocol.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultSocketPath = defaultSocketPath;
+const path_1 = require("path");
+const os_1 = require("os");
+function defaultSocketPath() {
+    return (0, path_1.join)((0, os_1.tmpdir)(), 'agent-gate.sock');
+}

package/dist/daemon/server.d.ts

@@ -0,0 +1,27 @@
+import { DaemonRequest, DaemonResponse } from './protocol';
+export type DaemonHandler = (req: DaemonRequest) => Promise<DaemonResponse>;
+export interface DaemonServerOptions {
+    socketPath: string;
+    handler: DaemonHandler;
+}
+/**
+ * Long-lived agent-gate process accepting hook payloads over a Unix socket.
+ *
+ * Wire protocol per connection:
+ *   - client writes one JSON object (DaemonRequest) terminated by '\n'.
+ *   - server writes one JSON object back ({output: "..."} or {error: "..."})
+ *     terminated by '\n', then closes the socket.
+ *
+ * Errors in the handler become {error: ...} responses; the client treats
+ * those as "fall back to direct mode" and the pipeline continues without
+ * blocking the agent.
+ */
+export declare class DaemonServer {
+    private readonly opts;
+    private server;
+    constructor(opts: DaemonServerOptions);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    private handleSocket;
+}
+//# sourceMappingURL=server.d.ts.map

package/dist/daemon/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/daemon/server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAE1D,MAAM,MAAM,aAAa,GAAG,CAC1B,GAAG,EAAE,aAAa,KACf,OAAO,CAAC,cAAc,CAAC,CAAA;AAE5B,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,aAAa,CAAA;CACvB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;IAC1C,OAAO,CAAC,MAAM,CAAsB;gBAExB,IAAI,EAAE,mBAAmB;IAIrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAqBtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAqBrB,OAAO,CAAC,YAAY;CA6BrB"}

package/dist/daemon/server.js

@@ -0,0 +1,100 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DaemonServer = void 0;
+const net_1 = require("net");
+const fs_1 = require("fs");
+/**
+ * Long-lived agent-gate process accepting hook payloads over a Unix socket.
+ *
+ * Wire protocol per connection:
+ *   - client writes one JSON object (DaemonRequest) terminated by '\n'.
+ *   - server writes one JSON object back ({output: "..."} or {error: "..."})
+ *     terminated by '\n', then closes the socket.
+ *
+ * Errors in the handler become {error: ...} responses; the client treats
+ * those as "fall back to direct mode" and the pipeline continues without
+ * blocking the agent.
+ */
+class DaemonServer {
+    opts;
+    server = null;
+    constructor(opts) {
+        this.opts = opts;
+    }
+    start() {
+        return new Promise((resolve, reject) => {
+            try {
+                if ((0, fs_1.existsSync)(this.opts.socketPath)) {
+                    (0, fs_1.unlinkSync)(this.opts.socketPath);
+                }
+            }
+            catch (e) {
+                reject(e);
+                return;
+            }
+            const server = (0, net_1.createServer)((socket) => this.handleSocket(socket));
+            server.on('error', (err) => {
+                if (this.server === null)
+                    reject(err);
+            });
+            server.listen(this.opts.socketPath, () => {
+                this.server = server;
+                resolve();
+            });
+        });
+    }
+    stop() {
+        return new Promise((resolve) => {
+            if (!this.server) {
+                resolve();
+                return;
+            }
+            const s = this.server;
+            this.server = null;
+            s.close(() => {
+                try {
+                    if ((0, fs_1.existsSync)(this.opts.socketPath)) {
+                        (0, fs_1.unlinkSync)(this.opts.socketPath);
+                    }
+                }
+                catch {
+                    // best effort
+                }
+                resolve();
+            });
+        });
+    }
+    handleSocket(socket) {
+        let buffer = '';
+        socket.setEncoding('utf-8');
+        socket.on('data', async (chunk) => {
+            buffer += chunk;
+            const newlineIdx = buffer.indexOf('\n');
+            if (newlineIdx === -1)
+                return;
+            const line = buffer.slice(0, newlineIdx);
+            buffer = '';
+            let req;
+            try {
+                req = JSON.parse(line);
+            }
+            catch (e) {
+                const msg = e instanceof Error ? e.message : 'invalid JSON';
+                socket.end(JSON.stringify({ error: msg }) + '\n');
+                return;
+            }
+            try {
+                const resp = await this.opts.handler(req);
+                socket.end(JSON.stringify(resp) + '\n');
+            }
+            catch (e) {
+                const msg = e instanceof Error ? e.message : 'handler failed';
+                socket.end(JSON.stringify({ error: msg }) + '\n');
+            }
+        });
+        socket.on('error', () => {
+            // ignore — client side disconnected; nothing to do
+        });
+    }
+}
+exports.DaemonServer = DaemonServer;

package/dist/deterministic/defaultRules.d.ts

@@ -0,0 +1,11 @@
+import { DeterministicRule } from './types';
+import { AgentGateConfig } from '../config/AgentGateConfig';
+/**
+ * Builds the deterministic rule list, applying config overrides where the
+ * rule supports them, appending any user-supplied customRules, and
+ * filtering out any rule ids listed in config.disabledRules.
+ * Built-ins come first; custom rules run after them in declaration order.
+ */
+export declare function buildDefaultDeterministicRules(config?: AgentGateConfig): DeterministicRule[];
+export declare const defaultDeterministicRules: DeterministicRule[];
+//# sourceMappingURL=defaultRules.d.ts.map

package/dist/deterministic/defaultRules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultRules.d.ts","sourceRoot":"","sources":["../../src/deterministic/defaultRules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAM3C,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAE3D;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,CAAC,EAAE,eAAe,GACvB,iBAAiB,EAAE,CAgBrB;AAED,eAAO,MAAM,yBAAyB,EAAE,iBAAiB,EACvB,CAAA"}

package/dist/deterministic/defaultRules.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultDeterministicRules = void 0;
+exports.buildDefaultDeterministicRules = buildDefaultDeterministicRules;
+const preventRmRfRoot_1 = require("./rules/preventRmRfRoot");
+const preventSecretFileWrite_1 = require("./rules/preventSecretFileWrite");
+const preventBashSecretWrite_1 = require("./rules/preventBashSecretWrite");
+const preventForcePushMain_1 = require("./rules/preventForcePushMain");
+const preventSystemPathWrite_1 = require("./rules/preventSystemPathWrite");
+/**
+ * Builds the deterministic rule list, applying config overrides where the
+ * rule supports them, appending any user-supplied customRules, and
+ * filtering out any rule ids listed in config.disabledRules.
+ * Built-ins come first; custom rules run after them in declaration order.
+ */
+function buildDefaultDeterministicRules(config) {
+    const builtIn = [
+        preventRmRfRoot_1.preventRmRfRoot,
+        (0, preventSecretFileWrite_1.preventSecretFileWriteWith)({
+            extraSecretPathPrefixes: config?.extraSecretPathPrefixes,
+        }),
+        preventBashSecretWrite_1.preventBashSecretWrite,
+        (0, preventForcePushMain_1.preventForcePushMainWith)({
+            protectedBranches: config?.protectedBranches,
+        }),
+        preventSystemPathWrite_1.preventSystemPathWrite,
+    ];
+    const custom = config?.customRules ?? [];
+    const all = [...builtIn, ...custom];
+    const disabled = new Set(config?.disabledRules ?? []);
+    return all.filter((r) => !disabled.has(r.id));
+}
+exports.defaultDeterministicRules = buildDefaultDeterministicRules();

package/dist/deterministic/engine.d.ts

@@ -0,0 +1,11 @@
+import { DeterministicRule } from './types';
+import { SessionContext } from '../contracts/types/SessionContext';
+export type EngineResult = {
+    kind: 'allow';
+} | {
+    kind: 'block';
+    reason: string;
+    ruleId: string;
+};
+export declare function runDeterministicRules(toolName: string, toolInput: Record<string, unknown>, rules: DeterministicRule[], ctx?: SessionContext): EngineResult;
+//# sourceMappingURL=engine.d.ts.map

package/dist/deterministic/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/deterministic/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAA;AAElE,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAErD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClC,KAAK,EAAE,iBAAiB,EAAE,EAC1B,GAAG,CAAC,EAAE,cAAc,GACnB,YAAY,CAQd"}