@lore-co/cli 0.1.15 → 0.1.16

package/dist/guard.js

@@ -0,0 +1,170 @@
+import { execFile as execFileCallback } from "node:child_process";
+import { promisify } from "node:util";
+import { GuardApproveResponseSchema, WorkspaceGuardPolicySchema, } from "@lore-co/core";
+import { loreApiRequest } from "./api.js";
+import { repositoryScopeFromGitRoot } from "./repository.js";
+const execFile = promisify(execFileCallback);
+const GUARD_HELP = `lore guard
+Control Context Guard: proactive Lore context at action boundaries.
+
+Modes:
+  off      Lore only responds when asked.
+  assist   Lore automatically gives agents relevant context before
+           important actions. Recommended.
+  enforce  Lore can require confirmation for actions that conflict with
+           required (governed) rules.
+
+Usage:
+  lore guard status [--json]
+  lore guard off [--repo [name]]
+  lore guard assist [--repo [name]]
+  lore guard enforce [--repo [name]]
+  lore guard approve <check-id>
+  lore guard clear-override [--repo [name]]
+
+Options:
+  --repo [name]  Apply to one repository instead of the workspace default.
+                 Omit the value to use the current repository.
+  --json         Print machine-readable output
+
+Notes:
+  Workspace-level changes need a token attributed to an owner or admin.
+  Rules only gate actions in enforce mode when an owner or admin marks
+  them "required" in the dashboard.
+
+Examples:
+  lore guard status
+  lore guard assist
+  lore guard enforce --repo
+  lore guard off --repo payments-api
+  lore guard approve 6f1d3f9a-4b7e-4c1e-9a2b-1c3d5e7f9a0b
+`;
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu;
+async function detectRepoScope() {
+    try {
+        const { stdout } = await execFile("git", ["rev-parse", "--show-toplevel"], { timeout: 5_000 });
+        const root = stdout.trim();
+        if (root === "") {
+            return undefined;
+        }
+        return await repositoryScopeFromGitRoot(root);
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Resolves the --repo option: absent → undefined, bare flag → detected from
+ * the current git repository, valued → that value.
+ */
+async function resolveRepoOption(args) {
+    const index = args.indexOf("--repo");
+    if (index < 0) {
+        return undefined;
+    }
+    const next = args[index + 1];
+    if (next !== undefined && !next.startsWith("--")) {
+        return next;
+    }
+    const detected = await detectRepoScope();
+    if (detected === undefined) {
+        throw new Error("Not inside a git repository. Pass the repository name: --repo <name>");
+    }
+    return detected;
+}
+function isGuardMode(value) {
+    return value === "off" || value === "assist" || value === "enforce";
+}
+function describeMode(mode) {
+    switch (mode) {
+        case "off":
+            return "off — Lore only responds when asked";
+        case "assist":
+            return "assist — relevant context is surfaced before important actions";
+        case "enforce":
+            return "enforce — required rules can ask for confirmation";
+    }
+}
+function writeStatus(policy, currentRepo) {
+    const override = currentRepo === undefined
+        ? undefined
+        : policy.overrides.find((entry) => entry.repo === currentRepo);
+    const effective = override?.mode ?? policy.mode;
+    const lines = [
+        "Context Guard",
+        `Mode: ${describeMode(effective)}`,
+        `Scope: ${override === undefined ? "workspace default" : `repo override (${override.repo})`}`,
+        `Workspace default: ${policy.mode}`,
+    ];
+    if (policy.overrides.length > 0) {
+        lines.push("Repo overrides:");
+        for (const entry of policy.overrides) {
+            lines.push(`  ${entry.repo}: ${entry.mode}`);
+        }
+    }
+    else {
+        lines.push("Repo overrides: none");
+    }
+    process.stdout.write(`${lines.join("\n")}\n`);
+}
+export async function runGuardCommand(args, config) {
+    if (args.length === 0 ||
+        args.includes("--help") ||
+        args.includes("-h")) {
+        process.stdout.write(GUARD_HELP);
+        return;
+    }
+    if (config === null) {
+        throw new Error("Lore is not connected. Run: lore connect --token <workspace-token>");
+    }
+    const subcommand = args[0];
+    const rest = args.slice(1);
+    if (subcommand === "status") {
+        const policy = await loreApiRequest(config, "GET", "/v1/guard/policy", WorkspaceGuardPolicySchema);
+        if (args.includes("--json")) {
+            process.stdout.write(`${JSON.stringify(policy, null, 2)}\n`);
+            return;
+        }
+        writeStatus(policy, await detectRepoScope());
+        return;
+    }
+    if (subcommand === "mode" || isGuardMode(subcommand)) {
+        const mode = subcommand === "mode" ? rest[0] : subcommand;
+        if (!isGuardMode(mode)) {
+            throw new Error("Usage: lore guard <off|assist|enforce> [--repo [name]]");
+        }
+        const repo = await resolveRepoOption(subcommand === "mode" ? rest.slice(1) : rest);
+        const policy = await loreApiRequest(config, "PATCH", "/v1/guard/policy", WorkspaceGuardPolicySchema, repo === undefined ? { mode } : { setOverride: { repo, mode } });
+        process.stdout.write(repo === undefined
+            ? `Context Guard workspace default is now ${mode}.\n`
+            : `Context Guard for ${repo} is now ${mode}.\n`);
+        if (mode === "enforce") {
+            process.stdout.write("Enforce gates only rules marked \"required\" in the dashboard.\n");
+        }
+        writeStatus(policy, repo ?? (await detectRepoScope()));
+        return;
+    }
+    if (subcommand === "clear-override") {
+        const repo = await resolveRepoOption(rest.includes("--repo") ? rest : [...rest, "--repo"]);
+        if (repo === undefined) {
+            throw new Error("Usage: lore guard clear-override [--repo [name]]");
+        }
+        const policy = await loreApiRequest(config, "PATCH", "/v1/guard/policy", WorkspaceGuardPolicySchema, { removeOverride: { repo } });
+        process.stdout.write(`Removed the Context Guard override for ${repo}.\n`);
+        writeStatus(policy, await detectRepoScope());
+        return;
+    }
+    if (subcommand === "approve") {
+        const checkId = rest[0];
+        if (checkId === undefined || !UUID_PATTERN.test(checkId)) {
+            throw new Error("Usage: lore guard approve <check-id>");
+        }
+        const result = await loreApiRequest(config, "POST", "/v1/guard/approvals", GuardApproveResponseSchema, { checkId });
+        process.stdout.write(`Approved ${result.approved} rule(s) for this session${result.expiresAt === null
+            ? ""
+            : ` until ${result.expiresAt.slice(0, 16).replace("T", " ")}`}. Retry the action in your agent.\n`);
+        return;
+    }
+    throw new Error(`Unknown guard subcommand: ${subcommand}\nTry: lore guard --help`);
+}
+//# sourceMappingURL=guard.js.map

package/dist/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAG3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1C,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAE7D,MAAM,QAAQ,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAAC;AAE7C,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkClB,CAAC;AAEF,MAAM,YAAY,GAChB,kEAAkE,CAAC;AAErE,KAAK,UAAU,eAAe;IAC5B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAC/B,KAAK,EACL,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAChC,EAAE,OAAO,EAAE,KAAK,EAAE,CACnB,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,iBAAiB,CAC9B,IAAuB;IAEvB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,eAAe,EAAE,CAAC;IACzC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,CAAC;AACtE,CAAC;AAED,SAAS,YAAY,CAAC,IAAe;IACnC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK;YACR,OAAO,qCAAqC,CAAC;QAC/C,KAAK,QAAQ;YACX,OAAO,gEAAgE,CAAC;QAC1E,KAAK,SAAS;YACZ,OAAO,mDAAmD,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,MAA4B,EAC5B,WAA+B;IAE/B,MAAM,QAAQ,GACZ,WAAW,KAAK,SAAS;QACvB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,QAAQ,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC;IAChD,MAAM,KAAK,GAAG;QACZ,eAAe;QACf,SAAS,YAAY,CAAC,SAAS,CAAC,EAAE;QAClC,UAAU,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,kBAAkB,QAAQ,CAAC,IAAI,GAAG,EAAE;QAC7F,sBAAsB,MAAM,CAAC,IAAI,EAAE;KACpC,CAAC;IACF,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAuB,EACvB,MAA8B;IAE9B,IACE,IAAI,CAAC,MAAM,KAAK,CAAC;QACjB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EACnB,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3B,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,MAAM,EACN,KAAK,EACL,kBAAkB,EAClB,0BAA0B,CAC3B,CAAC;QACF,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QACD,WAAW,CAAC,MAAM,EAAE,MAAM,eAAe,EAAE,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,MAAM,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QAC1D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,wDAAwD,CACzD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAClC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC7C,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,MAAM,EACN,OAAO,EACP,kBAAkB,EAClB,0BAA0B,EAC1B,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAChE,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,IAAI,KAAK,SAAS;YAChB,CAAC,CAAC,0CAA0C,IAAI,KAAK;YACrD,CAAC,CAAC,qBAAqB,IAAI,WAAW,IAAI,KAAK,CAClD,CAAC;QACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,eAAe,EAAE,CAAC,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,gBAAgB,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAClC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,CACrD,CAAC;QACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,MAAM,EACN,OAAO,EACP,kBAAkB,EAClB,0BAA0B,EAC1B,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,CAC7B,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,IAAI,KAAK,CACpD,CAAC;QACF,WAAW,CAAC,MAAM,EAAE,MAAM,eAAe,EAAE,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,MAAM,EACN,MAAM,EACN,qBAAqB,EACrB,0BAA0B,EAC1B,EAAE,OAAO,EAAE,CACZ,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,YAAY,MAAM,CAAC,QAAQ,4BACzB,MAAM,CAAC,SAAS,KAAK,IAAI;YACvB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,UAAU,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAC/D,qCAAqC,CACtC,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,IAAI,KAAK,CACb,6BAA6B,UAAU,0BAA0B,CAClE,CAAC;AACJ,CAAC"}

package/dist/runtime.d.ts

@@ -62,6 +62,9 @@ interface HookInput {
     response?: unknown;
     message?: unknown;
     text?: unknown;
+    tool_name?: unknown;
+    tool_input?: unknown;
+    command?: unknown;
 }
 export interface HookRuntimeOptions {
     home?: string;
@@ -74,9 +77,15 @@ export interface HookResult {
     systemMessage?: string;
     outcome?: "accept";
     additional_context?: string;
+    /** Cursor beforeShellExecution verdict ("ask" is unenforced upstream). */
+    permission?: "deny";
+    userMessage?: string;
+    agentMessage?: string;
     hookSpecificOutput?: {
-        hookEventName: "UserPromptSubmit";
-        additionalContext: string;
+        hookEventName: "UserPromptSubmit" | "PreToolUse";
+        additionalContext?: string;
+        permissionDecision?: "ask";
+        permissionDecisionReason?: string;
     };
 }
 export interface LineageMetadata {
@@ -93,6 +102,17 @@ export interface LineageMetadata {
 export declare function readLineageMetadata(home?: string, environment?: NodeJS.ProcessEnv): Promise<LineageMetadata>;
 export declare function redactSecrets(text: string): string;
 export declare function createTurnRequest(input: HookInput, agent: CommandHookAgentName, pending: PendingAssistantMessage, now: Date, lineage?: LineageMetadata): Promise<TurnRequest | null>;
+interface GuardTrigger {
+    action: "edit" | "commit" | "deploy" | "command";
+    files?: string[];
+    command?: string;
+}
+/**
+ * Decides whether a tool call is a meaningful action boundary. File edits
+ * always qualify; shell commands qualify only when they look high-impact
+ * (commit, push, deploy, publish, destructive) to keep the guard quiet.
+ */
+export declare function guardTrigger(toolName: string, toolInput: Record<string, unknown>): GuardTrigger | null;
 export declare function handleHookEvent(value: unknown, agent: CommandHookAgentName, options?: HookRuntimeOptions): Promise<HookResult | undefined>;
 export declare function runHook(args?: readonly string[]): Promise<void>;
 export {};

package/dist/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAiCA,eAAO,MAAM,wBAAwB,qDAK3B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7E,iFAAiF;AACjF,MAAM,MAAM,SAAS,GAAG,oBAAoB,CAAC;AAgB7C,UAAU,uBAAuB;IAC/B,KAAK,EAAE,oBAAoB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,UAAU,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,WAAW,EAAE;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,aAAa,EAAE;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE;QACT,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AA2BD,UAAU,SAAS;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACjC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE;QACnB,aAAa,EAAE,kBAAkB,CAAC;QAClC,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH;AA2DD,MAAM,WAAW,eAAe;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,CAAC,EAAE,MAAM,EACb,WAAW,GAAE,MAAM,CAAC,UAAwB,GAC3C,OAAO,CAAC,eAAe,CAAC,CAyB1B;AA2ID,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgFlD;AA+PD,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,oBAAoB,EAC3B,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,IAAI,EACT,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CA+D7B;AAqdD,wBAAsB,eAAe,CACnC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,oBAAoB,EAC3B,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAiJjC;AAoBD,wBAAsB,OAAO,CAC3B,IAAI,GAAE,SAAS,MAAM,EAA0B,GAC9C,OAAO,CAAC,IAAI,CAAC,CAaf"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAiCA,eAAO,MAAM,wBAAwB,qDAK3B,CAAC;AACX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7E,iFAAiF;AACjF,MAAM,MAAM,SAAS,GAAG,oBAAoB,CAAC;AAgB7C,UAAU,uBAAuB;IAC/B,KAAK,EAAE,oBAAoB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,UAAU,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,WAAW,EAAE;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,aAAa,EAAE;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE;QACT,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AA2BD,UAAU,SAAS;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACjC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE;QACnB,aAAa,EAAE,kBAAkB,GAAG,YAAY,CAAC;QACjD,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,kBAAkB,CAAC,EAAE,KAAK,CAAC;QAC3B,wBAAwB,CAAC,EAAE,MAAM,CAAC;KACnC,CAAC;CACH;AA2DD,MAAM,WAAW,eAAe;IAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,CAAC,EAAE,MAAM,EACb,WAAW,GAAE,MAAM,CAAC,UAAwB,GAC3C,OAAO,CAAC,eAAe,CAAC,CAyB1B;AAmJD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgFlD;AA+PD,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,SAAS,EAChB,KAAK,EAAE,oBAAoB,EAC3B,OAAO,EAAE,uBAAuB,EAChC,GAAG,EAAE,IAAI,EACT,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CA+D7B;AAufD,UAAU,YAAY;IACpB,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjD,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,YAAY,GAAG,IAAI,CAwBrB;AAmVD,wBAAsB,eAAe,CACnC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,oBAAoB,EAC3B,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAyJjC;AAoBD,wBAAsB,OAAO,CAC3B,IAAI,GAAE,SAAS,MAAM,EAA0B,GAC9C,OAAO,CAAC,IAAI,CAAC,CAaf"}

package/dist/runtime.js

@@ -9,7 +9,7 @@ import { promisify } from "node:util";
 import { boundedUtf8Text, repositoryScopeFromGitRoot, } from "./repository.js";
 const RUNTIME_VERSION = typeof __LORE_VERSION__ === "string" && __LORE_VERSION__ !== ""
     ? __LORE_VERSION__
-    : "0.1.15";
+    : "0.1.16";
 const IS_STANDALONE_RUNTIME = typeof __LORE_STANDALONE__ === "boolean" && __LORE_STANDALONE__;
 export const COMMAND_HOOK_AGENT_NAMES = [
     "codex",
@@ -153,10 +153,18 @@ function normalizeHookInput(input, agent, environment) {
             ? "AssistantResponse"
             : rawEventName === "sessionEnd"
                 ? "SessionEnd"
-                : rawEventName;
+                : rawEventName === "beforeShellExecution"
+                    ? "PreToolUse"
+                    : rawEventName;
     return {
         input: {
             ...input,
+            ...(eventName === "PreToolUse"
+                ? {
+                    tool_name: "Bash",
+                    tool_input: { command: input.command },
+                }
+                : {}),
             ...(sessionId === undefined ? {} : { session_id: sessionId }),
             ...(cwd === undefined ? {} : { cwd }),
             ...(stringField(input.prompt_id) !== undefined
@@ -863,6 +871,307 @@ function receiptMessage(config, agent, delivery) {
     }
     return boundedContext(parts.join(" · "));
 }
+// ---------------------------------------------------------------------------
+// Context Guard: proactive checks at tool boundaries (PreToolUse and Cursor
+// beforeShellExecution). Fail-open by design — a slow or unreachable hub must
+// never stall an agent's tool call.
+// ---------------------------------------------------------------------------
+/** How long a locally cached "guard is off" verdict suppresses network calls. */
+const GUARD_MODE_TTL_MS = 5 * 60_000;
+/** How long an already-surfaced action key stays quiet in this session. */
+const GUARD_KEY_COOLDOWN_MS = 15 * 60_000;
+const GUARD_MAX_CACHED_KEYS = 200;
+const GUARD_TIMEOUT_MS = 4_000;
+const GUARD_EDIT_TOOLS = new Set([
+    "Edit",
+    "Write",
+    "MultiEdit",
+    "NotebookEdit",
+    "ApplyPatch",
+    "apply_patch",
+    "edit",
+    "write",
+    "patch",
+    "str_replace_editor",
+]);
+const GUARD_SHELL_TOOLS = new Set(["Bash", "bash", "Shell", "shell"]);
+const GUARD_COMMIT_COMMAND = /\bgit\s+(?:commit|push)\b/iu;
+const GUARD_DEPLOY_COMMAND = /\b(?:terraform\s+(?:apply|destroy)|pulumi\s+up|kubectl\s+(?:apply|delete|rollout)|helm\s+(?:install|upgrade|uninstall)|docker\s+push|fly(?:ctl)?\s+deploy|vercel(?:\s+deploy|\s+--prod)|railway\s+up|serverless\s+deploy|sls\s+deploy|cdk\s+deploy|eb\s+deploy|gcloud\s+(?:app|run|functions)\s+deploy|az\s+webapp\s+(?:up|deploy)|(?:npm|pnpm|yarn)\s+publish|prisma\s+migrate\s+deploy|drizzle-kit\s+(?:push|migrate))\b/iu;
+const GUARD_DESTRUCTIVE_COMMAND = /\b(?:rm\s+(?:-[a-z]*\s+)*-[a-z]*r[a-z]*f|drop\s+(?:table|database)|truncate\s+table)\b/iu;
+/**
+ * Decides whether a tool call is a meaningful action boundary. File edits
+ * always qualify; shell commands qualify only when they look high-impact
+ * (commit, push, deploy, publish, destructive) to keep the guard quiet.
+ */
+export function guardTrigger(toolName, toolInput) {
+    if (GUARD_EDIT_TOOLS.has(toolName)) {
+        const files = [toolInput.file_path, toolInput.notebook_path, toolInput.path]
+            .map((value) => stringField(value))
+            .filter((value) => value !== undefined);
+        return { action: "edit", ...(files.length === 0 ? {} : { files }) };
+    }
+    if (GUARD_SHELL_TOOLS.has(toolName)) {
+        const command = stringField(toolInput.command);
+        if (command === undefined) {
+            return null;
+        }
+        if (GUARD_COMMIT_COMMAND.test(command)) {
+            return { action: "commit", command };
+        }
+        if (GUARD_DEPLOY_COMMAND.test(command)) {
+            return { action: "deploy", command };
+        }
+        if (GUARD_DESTRUCTIVE_COMMAND.test(command)) {
+            return { action: "command", command };
+        }
+        return null;
+    }
+    return null;
+}
+function guardStatePath(agent, sessionId, home) {
+    return resolve(loreDirectory(home), "state", "guard", `${sha256(`${agent}\0${sessionId}`)}.json`);
+}
+async function readGuardState(agent, sessionId, home) {
+    try {
+        const parsed = JSON.parse(await readFile(guardStatePath(agent, sessionId, home), "utf8"));
+        if (isObject(parsed)) {
+            return {
+                ...(typeof parsed.mode === "string" ? { mode: parsed.mode } : {}),
+                ...(typeof parsed.modeCheckedAt === "string"
+                    ? { modeCheckedAt: parsed.modeCheckedAt }
+                    : {}),
+                keys: isObject(parsed.keys)
+                    ? Object.fromEntries(Object.entries(parsed.keys).filter((entry) => typeof entry[1] === "string"))
+                    : {},
+            };
+        }
+    }
+    catch {
+        // First guarded action for this session.
+    }
+    return { keys: {} };
+}
+async function writeGuardState(agent, sessionId, state, home) {
+    const entries = Object.entries(state.keys)
+        .sort((a, b) => (a[1] < b[1] ? 1 : -1))
+        .slice(0, GUARD_MAX_CACHED_KEYS);
+    try {
+        await atomicWriteJson(guardStatePath(agent, sessionId, home), {
+            ...state,
+            keys: Object.fromEntries(entries),
+        });
+    }
+    catch {
+        // Cache misses only cost an extra network round trip.
+    }
+}
+function guardCheckUrl(apiUrl) {
+    return `${apiUrl.replace(/\/+$/u, "")}/v1/guard/check`;
+}
+function guardResultFromResponse(value) {
+    if (!isObject(value) || typeof value.mode !== "string") {
+        return null;
+    }
+    const items = Array.isArray(value.items)
+        ? value.items.flatMap((item) => {
+            if (!isObject(item) || typeof item.content !== "string") {
+                return [];
+            }
+            const scope = isObject(item.scope) ? item.scope : {};
+            const source = isObject(item.source) ? item.source : {};
+            return [
+                {
+                    content: redactSecrets(item.content),
+                    enforcement: typeof item.enforcement === "string"
+                        ? item.enforcement
+                        : "advisory",
+                    ...(typeof scope.repo === "string" ? { repo: scope.repo } : {}),
+                    ...(typeof scope.organization === "string"
+                        ? { organization: scope.organization }
+                        : {}),
+                    ...(typeof source.agent === "string"
+                        ? { sourceAgent: source.agent }
+                        : {}),
+                },
+            ];
+        })
+        : [];
+    const conflictSummaries = Array.isArray(value.conflicts)
+        ? value.conflicts.flatMap((conflict) => isObject(conflict) && typeof conflict.summary === "string"
+            ? [redactSecrets(conflict.summary)]
+            : [])
+        : [];
+    const confirm = isObject(value.confirm) ? value.confirm : {};
+    return {
+        ...(typeof value.checkId === "string" ? { checkId: value.checkId } : {}),
+        mode: value.mode,
+        requiresConfirmation: value.requiresConfirmation === true,
+        ...(typeof confirm.command === "string"
+            ? { confirmCommand: confirm.command }
+            : {}),
+        items,
+        conflictSummaries,
+    };
+}
+function guardItemSource(item) {
+    const scope = item.repo !== undefined
+        ? `${item.repo} repo`
+        : item.organization !== undefined
+            ? "organization rule"
+            : "workspace knowledge";
+    return item.sourceAgent === undefined
+        ? scope
+        : `${scope} · ${item.sourceAgent} session`;
+}
+function guardAssistContext(result) {
+    const lines = ["Relevant Lore context:"];
+    for (const item of result.items) {
+        lines.push(`- ${item.content}`);
+    }
+    lines.push("", "Sources:");
+    for (const item of result.items) {
+        lines.push(`- ${guardItemSource(item)}`);
+    }
+    if (result.conflictSummaries.length > 0) {
+        lines.push("", "Conflicting Lore context (do not silently pick a winner):");
+        for (const summary of result.conflictSummaries) {
+            lines.push(`- ${summary}`);
+        }
+    }
+    return boundedContext(lines.join("\n"));
+}
+function guardConfirmationReason(result) {
+    const required = result.items.filter((item) => item.enforcement === "required");
+    const shown = required.length > 0 ? required : result.items;
+    const lines = [
+        "Lore Guard: this action conflicts with a required rule.",
+        ...shown.map((item) => `- ${item.content} (${guardItemSource(item)})`),
+    ];
+    lines.push(result.confirmCommand === undefined
+        ? "Ask the user to confirm before proceeding."
+        : `Approve here to proceed, or the user can run: ${result.confirmCommand}`);
+    return boundedContext(lines.join("\n"));
+}
+async function postGuardCheck(config, request, fetchImplementation) {
+    const response = await fetchImplementation(guardCheckUrl(config.apiUrl), {
+        method: "POST",
+        headers: {
+            authorization: `Bearer ${config.token}`,
+            "content-type": "application/json",
+            "user-agent": `lore-cli/${RUNTIME_VERSION}`,
+        },
+        body: JSON.stringify(request),
+        signal: AbortSignal.timeout(Math.min(config.timeoutMs ?? GUARD_TIMEOUT_MS, GUARD_TIMEOUT_MS)),
+    });
+    if (!response.ok) {
+        throw new Error(`Lore guard check failed with HTTP ${response.status}`);
+    }
+    return guardResultFromResponse(JSON.parse(await response.text()));
+}
+async function handleGuardEvent(input, agent, config, sessionId, options, now) {
+    if (agent === "polytoken") {
+        // Polytoken has no tool boundary; its guard runs at prompt injection.
+        return undefined;
+    }
+    const toolName = stringField(input.tool_name);
+    if (toolName === undefined) {
+        return undefined;
+    }
+    const trigger = guardTrigger(toolName, isObject(input.tool_input) ? input.tool_input : {});
+    if (trigger === null) {
+        return undefined;
+    }
+    const state = await readGuardState(agent, sessionId, options.home);
+    if (state.mode === "off" &&
+        state.modeCheckedAt !== undefined &&
+        now.getTime() - Date.parse(state.modeCheckedAt) < GUARD_MODE_TTL_MS) {
+        return undefined;
+    }
+    const cwd = stringField(input.cwd);
+    const scope = await repositoryScope(cwd);
+    const root = cwd === undefined ? null : await repositoryRoot(cwd);
+    const files = (trigger.files ?? [])
+        .map((file) => {
+        const absolute = resolve(cwd ?? ".", file);
+        if (root === null) {
+            return normalizedRepositoryPath(file);
+        }
+        const relativePath = relative(root, absolute);
+        return relativePath.startsWith("..")
+            ? normalizedRepositoryPath(file)
+            : normalizedRepositoryPath(relativePath);
+    })
+        .filter((file) => file !== "")
+        .slice(0, 100);
+    const key = sha256([
+        "guard",
+        trigger.action,
+        ...files,
+        trigger.command === undefined ? "" : redactSecrets(trigger.command),
+    ].join("\0"));
+    const cachedAt = state.keys[key];
+    if (cachedAt !== undefined &&
+        now.getTime() - Date.parse(cachedAt) < GUARD_KEY_COOLDOWN_MS) {
+        return undefined;
+    }
+    const result = await postGuardCheck(config, {
+        connector: "lore-cli",
+        agent,
+        sessionId,
+        action: trigger.action,
+        tool: toolName,
+        ...(scope?.repo === undefined ? {} : { repo: scope.repo }),
+        ...(scope?.path === undefined ? {} : { path: scope.path }),
+        ...(files.length === 0 ? {} : { files }),
+        ...(trigger.command === undefined
+            ? {}
+            : { command: redactSecrets(trigger.command).slice(0, 10_000) }),
+    }, options.fetch ?? globalThis.fetch);
+    if (result === null) {
+        return undefined;
+    }
+    state.mode = result.mode;
+    state.modeCheckedAt = now.toISOString();
+    if (!result.requiresConfirmation) {
+        state.keys[key] = now.toISOString();
+    }
+    await writeGuardState(agent, sessionId, state, options.home);
+    if (result.mode === "off") {
+        return undefined;
+    }
+    if (result.requiresConfirmation) {
+        const reason = guardConfirmationReason(result);
+        if (agent === "cursor") {
+            // Cursor's "ask" verdict is unenforced upstream; deny is the only
+            // reliable gate. The message carries the approve-and-retry path.
+            return {
+                permission: "deny",
+                userMessage: reason,
+                agentMessage: reason,
+            };
+        }
+        return {
+            hookSpecificOutput: {
+                hookEventName: "PreToolUse",
+                permissionDecision: "ask",
+                permissionDecisionReason: reason,
+            },
+        };
+    }
+    if (result.items.length === 0 && result.conflictSummaries.length === 0) {
+        return undefined;
+    }
+    if (agent === "cursor") {
+        // Cursor cannot inject agent context at the shell boundary on allow.
+        return undefined;
+    }
+    return {
+        hookSpecificOutput: {
+            hookEventName: "PreToolUse",
+            additionalContext: guardAssistContext(result),
+        },
+    };
+}
 export async function handleHookEvent(value, agent, options = {}) {
     if (!isObject(value)) {
         return undefined;
@@ -889,6 +1198,15 @@ export async function handleHookEvent(value, agent, options = {}) {
         // invocation can still capture a correction.
         return undefined;
     }
+    if (eventName === "PreToolUse") {
+        try {
+            return await handleGuardEvent(input, agent, config, sessionId, options, now);
+        }
+        catch {
+            // Guard checks fail open: never stall or break a tool call.
+            return undefined;
+        }
+    }
     if (eventName !== "UserPromptSubmit") {
         return undefined;
     }