@pentoshi/clai 4.11.5 → 4.11.8

package/dist/agent/turn/tool-call-preparation.js

@@ -0,0 +1,67 @@
+import { stat } from "node:fs/promises";
+import { elidedStubReuseMessage, findElidedStubArg, } from "../../agent/message-slim.js";
+import { resolveFsToolPath } from "../../tools/fs.js";
+export const invalidToolCall = (call) => {
+    if (call.args?.__nativeParseError) {
+        const raw = String(call.args._raw ?? "").slice(0, 200);
+        const reason = "Tool call arguments were not valid JSON (truncated or malformed). " +
+            "Retry with smaller content, or use fs.writeMany / fs.append continuation. " +
+            (raw ? `Partial: ${raw}` : "");
+        return { reason, result: { ok: false, output: reason, exitCode: 1 } };
+    }
+    const elidedStub = findElidedStubArg(call.args);
+    if (!elidedStub)
+        return undefined;
+    const reason = elidedStubReuseMessage(elidedStub.key);
+    return { reason, result: { ok: false, output: reason, exitCode: 1 } };
+};
+export const createPromptMutex = () => {
+    let queue = Promise.resolve();
+    return {
+        acquire: async () => {
+            let release = () => undefined;
+            const next = new Promise((resolve) => {
+                release = resolve;
+            });
+            const current = queue;
+            queue = current.then(() => next);
+            await current;
+            return release;
+        },
+    };
+};
+export const salvagedWriteCall = (salvaged) => {
+    const args = {
+        path: salvaged.path,
+        content: salvaged.content,
+    };
+    if (salvaged.operation === "append") {
+        args.position = "end";
+        if (typeof salvaged.expectedPriorBytes === "number") {
+            args.expectedPriorBytes = salvaged.expectedPriorBytes;
+        }
+    }
+    return {
+        name: salvaged.operation === "append" ? "fs.append" : "fs.write",
+        args,
+    };
+};
+export const readSalvagedWriteReceipt = async (salvaged, executed) => {
+    const ok = executed.ok && executed.result.ok;
+    let bytesOnDisk = Buffer.byteLength(salvaged.content, "utf8");
+    if (ok) {
+        try {
+            const stats = await stat(resolveFsToolPath(salvaged.path));
+            bytesOnDisk = stats.size;
+        }
+        catch {
+        }
+    }
+    return {
+        ok,
+        cancelled: Boolean(executed.blockOrCancel),
+        output: executed.result.output,
+        bytesOnDisk,
+    };
+};
+//# sourceMappingURL=tool-call-preparation.js.map

package/dist/agent/turn/tool-call-preparation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-call-preparation.js","sourceRoot":"","sources":["../../../src/agent/turn/tool-call-preparation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAGxC,OAAO,EACL,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAQtD,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,IAAc,EACe,EAAE;IAC/B,IAAI,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,MAAM,GACV,oEAAoE;YACpE,4EAA4E;YAC5E,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,MAAM,GAAG,sBAAsB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACtD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;AACxE,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAgB,EAAE;IACjD,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7C,OAAO;QACL,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,OAAO,GAAG,GAAS,EAAE,CAAC,SAAS,CAAC;YACpC,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBACzC,OAAO,GAAG,OAAO,CAAC;YACpB,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,CAAC;YACtB,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,OAAO,CAAC;YACd,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAuB,EAAY,EAAE;IACrE,MAAM,IAAI,GAA4B;QACpC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC;IACF,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,IAAI,OAAO,QAAQ,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YACpD,IAAI,CAAC,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB,CAAC;QACxD,CAAC;IACH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;QAChE,IAAI;KACL,CAAC;AACJ,CAAC,CAAC;AASF,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAC3C,QAAuB,EACvB,QAA0B,EACK,EAAE;IACjC,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7C,IAAI,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9D,IAAI,EAAE,EAAE,CAAC;QACP,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3D,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;QACT,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE;QACF,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC1C,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;QAC9B,WAAW;KACZ,CAAC;AACJ,CAAC,CAAC"}

package/dist/agent/turn/tool-evidence-signals.d.ts

@@ -0,0 +1,22 @@
+import type { ToolCall } from "../../types.js";
+export interface ToolEvidenceInput {
+    readonly call: ToolCall;
+    readonly ok: boolean;
+    readonly output: string;
+    readonly pentestTurn: boolean;
+    readonly activeProjectRoot: string | undefined;
+}
+export type LocalProbeOutcome = "none" | "success" | "softSuccess" | "failure";
+export interface ToolEvidenceSignals {
+    readonly mutationLanded: boolean;
+    readonly freshProbeFailure: boolean;
+    readonly evidenceWorkTool: boolean;
+    readonly serverStarted: boolean;
+    readonly serverTailed: boolean;
+    readonly activePentestTest: boolean;
+    readonly localProbe: LocalProbeOutcome;
+    readonly scaffoldCreated: boolean;
+    readonly featureWrite: boolean;
+    readonly localAppMaterialWork: boolean;
+}
+export declare const readToolEvidenceSignals: (input: ToolEvidenceInput) => ToolEvidenceSignals;

package/dist/agent/turn/tool-evidence-signals.js

@@ -0,0 +1,101 @@
+import { isEvidenceWorkTool, isFeatureImplementationCall, isPortListeningOutput, isScaffoldCreateCommand, isServerReadyOutput, } from "../task-evidence.js";
+import { localHttpProbeIsFailure, localHttpProbeIsSuccess, } from "../tool-call-parser.js";
+const MUTATION_TOOLS = new Set([
+    "fs.edit",
+    "fs.write",
+    "fs.writeMany",
+    "fs.replaceLines",
+    "fs.append",
+]);
+const PROBE_TOOLS = new Set([
+    "http.fetch",
+    "web.fetch",
+    "shell.exec",
+]);
+const PENTEST_TOOLS = new Set([
+    "http.fetch",
+    "shell.exec",
+    "net.scan",
+    "pentest.recon",
+]);
+const ACTIVE_PENTEST_PATTERN = /\b(sqlmap|hydra|nikto|nuclei|ffuf|gobuster|exploit|payload|idor|xss|union\s+select)\b/i;
+const LOCAL_URL_PATTERN = /^(?:https?:\/\/)?(?:localhost|127\.0\.0\.1|\[::1\])(?::|\/|$)/i;
+const LOCAL_CURL_PATTERN = /\bcurl\b[\s\S]*\b(?:localhost|127\.0\.0\.1|\[::1\])\b/i;
+const INSTALL_PATTERN = /\b(?:npm|pnpm|yarn|bun)\s+i(?:nstall)?\b/i;
+const stringArg = (call, key) => typeof call.args[key] === "string" ? call.args[key] : "";
+const serverSignals = (input) => {
+    if (!input.ok)
+        return { started: false, tailed: false };
+    if (input.call.name === "shell.start")
+        return { started: true, tailed: false };
+    if (input.call.name === "shell.tail") {
+        return { started: isServerReadyOutput(input.output), tailed: true };
+    }
+    if (input.call.name === "shell.exec" &&
+        isPortListeningOutput(stringArg(input.call, "command"), input.output)) {
+        return { started: true, tailed: false };
+    }
+    return { started: false, tailed: false };
+};
+const isActivePentestTest = (input) => {
+    if (!input.ok || !input.pentestTurn)
+        return false;
+    if (!PENTEST_TOOLS.has(input.call.name))
+        return false;
+    const blob = `${input.call.name} ${JSON.stringify(input.call.args)}`;
+    if (ACTIVE_PENTEST_PATTERN.test(blob))
+        return true;
+    const method = input.call.args.method;
+    return (input.call.name === "http.fetch" &&
+        typeof method === "string" &&
+        !/^get$/i.test(method));
+};
+const targetsLocalHttp = (call) => {
+    if (call.name === "http.fetch") {
+        return LOCAL_URL_PATTERN.test(stringArg(call, "url"));
+    }
+    return (call.name === "shell.exec" &&
+        LOCAL_CURL_PATTERN.test(stringArg(call, "command")));
+};
+const localProbeOutcome = (input) => {
+    if (!input.ok || !targetsLocalHttp(input.call))
+        return "none";
+    if (localHttpProbeIsFailure(input.output))
+        return "failure";
+    if (localHttpProbeIsSuccess(input.output))
+        return "success";
+    return input.call.name === "shell.exec" ? "softSuccess" : "none";
+};
+const materializesLocalApp = (input, command) => {
+    if (INSTALL_PATTERN.test(command))
+        return true;
+    if (input.call.name === "fs.write" ||
+        input.call.name === "fs.writeMany" ||
+        input.call.name === "fs.edit") {
+        return true;
+    }
+    const pathArg = stringArg(input.call, "path");
+    if (!pathArg || !input.activeProjectRoot)
+        return false;
+    return pathArg.includes(input.activeProjectRoot) || !pathArg.startsWith("/");
+};
+export const readToolEvidenceSignals = (input) => {
+    const server = serverSignals(input);
+    const command = input.ok ? stringArg(input.call, "command") : "";
+    const scaffoldCreated = input.ok && isScaffoldCreateCommand(command);
+    const featureWrite = input.ok && isFeatureImplementationCall(input.call);
+    return {
+        mutationLanded: input.ok && MUTATION_TOOLS.has(input.call.name),
+        freshProbeFailure: PROBE_TOOLS.has(input.call.name) && localHttpProbeIsFailure(input.output),
+        evidenceWorkTool: input.ok && isEvidenceWorkTool(input.call.name),
+        serverStarted: server.started,
+        serverTailed: server.tailed,
+        activePentestTest: isActivePentestTest(input),
+        localProbe: localProbeOutcome(input),
+        scaffoldCreated,
+        featureWrite,
+        localAppMaterialWork: input.ok &&
+            (scaffoldCreated || featureWrite || materializesLocalApp(input, command)),
+    };
+};
+//# sourceMappingURL=tool-evidence-signals.js.map

package/dist/agent/turn/tool-evidence-signals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-evidence-signals.js","sourceRoot":"","sources":["../../../src/agent/turn/tool-evidence-signals.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAClB,2BAA2B,EAC3B,qBAAqB,EACrB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,SAAS;IACT,UAAU;IACV,cAAc;IACd,iBAAiB;IACjB,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC;IAC/C,YAAY;IACZ,WAAW;IACX,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAC1B,wFAAwF,CAAC;AAE3F,MAAM,iBAAiB,GACrB,gEAAgE,CAAC;AAEnE,MAAM,kBAAkB,GACtB,wDAAwD,CAAC;AAE3D,MAAM,eAAe,GAAG,2CAA2C,CAAC;AA6BpE,MAAM,SAAS,GAAG,CAAC,IAAc,EAAE,GAAW,EAAU,EAAE,CACxD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAY,CAAC,CAAC,CAAC,EAAE,CAAC;AAEvE,MAAM,aAAa,GAAG,CACpB,KAAwB,EACe,EAAE;IACzC,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACxD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC/E,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACtE,CAAC;IACD,IACE,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY;QAChC,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EACrE,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,KAAwB,EAAW,EAAE;IAChE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACrE,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IACtC,OAAO,CACL,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY;QAChC,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CACvB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,IAAc,EAAW,EAAE;IACnD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,CACL,IAAI,CAAC,IAAI,KAAK,YAAY;QAC1B,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CACpD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,KAAwB,EAAqB,EAAE;IACxE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9D,IAAI,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,KAAwB,EACxB,OAAe,EACN,EAAE;IACX,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IACE,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU;QAC9B,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc;QAClC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB;QAAE,OAAO,KAAK,CAAC;IACvD,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC/E,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,KAAwB,EACH,EAAE;IACvB,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,MAAM,eAAe,GAAG,KAAK,CAAC,EAAE,IAAI,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,KAAK,CAAC,EAAE,IAAI,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzE,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/D,iBAAiB,EACf,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,KAAK,CAAC,MAAM,CAAC;QAC3E,gBAAgB,EAAE,KAAK,CAAC,EAAE,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QACjE,aAAa,EAAE,MAAM,CAAC,OAAO;QAC7B,YAAY,EAAE,MAAM,CAAC,MAAM;QAC3B,iBAAiB,EAAE,mBAAmB,CAAC,KAAK,CAAC;QAC7C,UAAU,EAAE,iBAAiB,CAAC,KAAK,CAAC;QACpC,eAAe;QACf,YAAY;QACZ,oBAAoB,EAClB,KAAK,CAAC,EAAE;YACR,CAAC,eAAe,IAAI,YAAY,IAAI,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;KAC5E,CAAC;AACJ,CAAC,CAAC"}

package/dist/agent/turn/tool-execution/authorization.d.ts

@@ -0,0 +1,32 @@
+import type { ToolCall } from "../../../types.js";
+import type { SessionPolicy } from "../../session-policy.js";
+import type { SingleToolResult } from "../contracts.js";
+import type { ConfirmPort } from "../../confirm-port.js";
+export interface ToolAuthorizationPorts {
+    readonly autoConfirm: boolean;
+    readonly session: SessionPolicy;
+    readonly confirmPort: ConfirmPort;
+    readonly acquirePrompt: () => Promise<() => void>;
+    readonly writeToolBlocked: (toolEventId: string, toolName: string, reason: string) => void;
+    readonly emitToolResult: (toolEventId: string, result: {
+        ok: boolean;
+        output: string;
+        exitCode?: number;
+    }, contextOutput: string) => void;
+}
+export interface ToolAuthorizationInput {
+    readonly call: ToolCall;
+    readonly toolEventId: string;
+    readonly parentSignal: AbortSignal;
+    readonly level: "safe" | "confirm" | "block";
+    readonly reason: string;
+}
+export type ToolAuthorizationOutcome = {
+    readonly kind: "proceed";
+    readonly pentestJustConfirmed: boolean;
+} | {
+    readonly kind: "stop";
+    readonly result: SingleToolResult;
+};
+export declare const requiresPathConfirmation: (call: ToolCall) => boolean;
+export declare const authorizeToolExecution: (input: ToolAuthorizationInput, ports: ToolAuthorizationPorts) => Promise<ToolAuthorizationOutcome>;

package/dist/agent/turn/tool-execution/authorization.js

@@ -0,0 +1,100 @@
+import { getConfig } from "../../../store/config.js";
+import { isPentestToolCall } from "../../../safety/classifier.js";
+import { isOutsideWorkingDirectory, resolveFsToolPath } from "../../../tools/fs.js";
+import { confirmToolExecution, ensurePentestAuthorization, restoreInteractiveStdin, } from "../../confirm-port.js";
+const PATH_CONFIRM_TOOLS = new Set([
+    "fs.write",
+    "fs.writeMany",
+    "fs.edit",
+    "fs.append",
+    "fs.replaceLines",
+    "fs.delete",
+]);
+const collectPaths = (call) => {
+    const paths = [];
+    if (typeof call.args.path === "string")
+        paths.push(call.args.path);
+    if (Array.isArray(call.args.files)) {
+        for (const entry of call.args.files) {
+            const entryPath = entry?.path;
+            if (typeof entryPath === "string")
+                paths.push(entryPath);
+        }
+    }
+    return paths;
+};
+export const requiresPathConfirmation = (call) => {
+    if (call.name === "fs.delete")
+        return true;
+    if (!PATH_CONFIRM_TOOLS.has(call.name))
+        return false;
+    for (const path of collectPaths(call)) {
+        try {
+            if (isOutsideWorkingDirectory(resolveFsToolPath(path)))
+                return true;
+        }
+        catch {
+            return true;
+        }
+    }
+    return false;
+};
+const blockedByClassifier = (input, ports) => {
+    ports.writeToolBlocked(input.toolEventId, input.call.name, input.reason);
+    const message = `Blocked: ${input.call.name} — ${input.reason}`;
+    return {
+        kind: "stop",
+        result: {
+            ok: false,
+            call: input.call,
+            result: { ok: false, output: message, exitCode: 1 },
+            contextOutput: `${message}\nThis tool call did not run. Continue the task using a safer allowed method; do not retry the same blocked command unchanged.`,
+        },
+    };
+};
+const refused = (input, ports, lastAnswer) => {
+    ports.writeToolBlocked(input.toolEventId, input.call.name, lastAnswer);
+    return {
+        kind: "stop",
+        result: {
+            ok: false,
+            call: input.call,
+            result: { ok: false, output: lastAnswer, exitCode: 1 },
+            contextOutput: lastAnswer,
+            lastAnswer,
+            blockOrCancel: true,
+        },
+    };
+};
+const runPrompts = async (input, ports) => {
+    input.parentSignal.throwIfAborted();
+    const needsPentestAuth = isPentestToolCall(input.call) &&
+        !getConfig().pentestAuthorized &&
+        !ports.session.pentestAuthorized.value;
+    const authorized = await ensurePentestAuthorization(input.call, ports.autoConfirm, ports.session, ports.confirmPort);
+    restoreInteractiveStdin();
+    if (!authorized) {
+        return refused(input, ports, "Pentest authorization not confirmed.");
+    }
+    const forceConfirm = requiresPathConfirmation(input.call);
+    if ((input.level !== "confirm" && !forceConfirm) || needsPentestAuth) {
+        return { kind: "proceed", pentestJustConfirmed: needsPentestAuth };
+    }
+    const confirmed = await confirmToolExecution(input.call, forceConfirm ? false : ports.autoConfirm, ports.session, ports.confirmPort, forceConfirm ? { forceConfirm: true } : undefined);
+    restoreInteractiveStdin();
+    if (!confirmed)
+        return refused(input, ports, "Cancelled.");
+    return { kind: "proceed", pentestJustConfirmed: false };
+};
+export const authorizeToolExecution = async (input, ports) => {
+    if (input.level === "block")
+        return blockedByClassifier(input, ports);
+    const releasePrompt = await ports.acquirePrompt();
+    try {
+        return await runPrompts(input, ports);
+    }
+    finally {
+        releasePrompt();
+    }
+};
+//# sourceMappingURL=authorization.js.map

package/dist/agent/turn/tool-execution/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../../../src/agent/turn/tool-execution/authorization.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEpF,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,UAAU;IACV,cAAc;IACd,SAAS;IACT,WAAW;IACX,iBAAiB;IACjB,WAAW;CACZ,CAAC,CAAC;AA+BH,MAAM,YAAY,GAAG,CAAC,IAAc,EAAY,EAAE;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,SAAS,GAAI,KAAkC,EAAE,IAAI,CAAC;YAC5D,IAAI,OAAO,SAAS,KAAK,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,IAAc,EAAW,EAAE;IAClE,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,IAAI,yBAAyB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC1B,KAA6B,EAC7B,KAA6B,EACH,EAAE;IAC5B,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,YAAY,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAChE,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE;YACN,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE;YACnD,aAAa,EAAE,GAAG,OAAO,gIAAgI;SAC1J;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CACd,KAA6B,EAC7B,KAA6B,EAC7B,UAAkB,EACQ,EAAE;IAC5B,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACvE,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE;YACN,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE;YACtD,aAAa,EAAE,UAAU;YACzB,UAAU;YACV,aAAa,EAAE,IAAI;SACpB;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,KAAK,EACtB,KAA6B,EAC7B,KAA6B,EACM,EAAE;IACrC,KAAK,CAAC,YAAY,CAAC,cAAc,EAAE,CAAC;IACpC,MAAM,gBAAgB,GACpB,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC;QAC7B,CAAC,SAAS,EAAE,CAAC,iBAAiB;QAC9B,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,0BAA0B,CACjD,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,WAAW,CAClB,CAAC;IACF,uBAAuB,EAAE,CAAC;IAC1B,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,sCAAsC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,YAAY,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,IAAI,gBAAgB,EAAE,CAAC;QACrE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAC1C,KAAK,CAAC,IAAI,EACV,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EACxC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,WAAW,EACjB,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAClD,CAAC;IACF,uBAAuB,EAAE,CAAC;IAC1B,IAAI,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IAC3D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;AAC1D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EACzC,KAA6B,EAC7B,KAA6B,EACM,EAAE;IACrC,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO;QAAE,OAAO,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,aAAa,EAAE,CAAC;IAClB,CAAC;AACH,CAAC,CAAC"}

package/dist/agent/turn/tool-execution/deps.d.ts

@@ -0,0 +1,74 @@
+import type { AgentEvent } from "../../events.js";
+import type { ChatMessage, ProviderId, ToolCall, ToolResult } from "../../../types.js";
+import type { SessionPlan, TaskEvidence } from "../../../store/plan.js";
+import type { ResponderNotification } from "../../../tools/jobs.js";
+import type { SessionPolicy } from "../../session-policy.js";
+import type { LoopGuard } from "../../loop-guard.js";
+import type { WorkLedger } from "../../durable-envelope.js";
+import type { OutcomeEnvelope } from "../../outcomes.js";
+import type { LooseWorkReceipt } from "../../task-evidence.js";
+import type { TurnState, TurnStateSnapshot } from "../../turn-state.js";
+import type { EngagementPolicyEngine } from "../../../safety/engagement-policy.js";
+import type { McpRuntime } from "../../../mcp/runtime.js";
+import type { ConfirmPort } from "../../confirm-port.js";
+import type { PromptMutex } from "../tool-call-preparation.js";
+import type { ResponderClaimLedger } from "../responder-claims.js";
+import type { TaskUpdateGateResult } from "../task-update-gate.js";
+import type { ToolExecutionState } from "./state.js";
+import type { createTurnEventEmitter } from "../event-emitter.js";
+import type { createMcpAgentToolExecutor } from "../mcp-agent-tools.js";
+export type TurnWriters = ReturnType<typeof createTurnEventEmitter>;
+export interface SingleToolOptions {
+    readonly autoConfirm?: boolean | undefined;
+    readonly requestSecret?: ((request: {
+        title: string;
+        prompt: string;
+    }) => Promise<string | undefined>) | undefined;
+    readonly onToolResult?: ((call: ToolCall, result: ToolResult) => void) | undefined;
+    readonly onToolStart?: ((call: ToolCall) => void) | undefined;
+}
+export interface SingleToolDeps extends TurnWriters {
+    readonly session: SessionPolicy;
+    readonly emit: (event: AgentEvent) => void;
+    readonly destinationHint: string | undefined;
+    readonly options: SingleToolOptions;
+    readonly messages: ChatMessage[];
+    readonly prompt: string;
+    readonly provider: () => ProviderId;
+    readonly model: () => string;
+    readonly step: () => number;
+    readonly isPlanMode: boolean;
+    readonly maxSteps: number;
+    readonly pentestSession: boolean;
+    readonly imageOcrEnabled: boolean;
+    readonly narrowNmapOperation: boolean;
+    readonly scratchDir: string;
+    readonly loopGuard: LoopGuard;
+    readonly mcpRuntime: McpRuntime | undefined;
+    readonly workLedger: WorkLedger;
+    readonly confirmPort: ConfirmPort;
+    readonly promptMutex: PromptMutex;
+    readonly engagementPolicy: EngagementPolicyEngine;
+    readonly responderClaims: ResponderClaimLedger;
+    readonly outcomeState: OutcomeEnvelope;
+    readonly codingSession: () => boolean;
+    readonly toolState: ToolExecutionState;
+    readonly alreadyPrintedIds: Set<string>;
+    readonly sessionLooseWork: LooseWorkReceipt[];
+    readonly deferredPostToolMessages: ChatMessage[];
+    readonly deferredResponderLedgerNotifications: ResponderNotification[];
+    readonly batchRemindCalls: () => Set<ToolCall>;
+    readonly batchReminderNote: () => string;
+    readonly turnState: () => TurnStateSnapshot;
+    readonly probeStateKey: (call: ToolCall) => string | undefined;
+    readonly moveTurn: (to: TurnState, reason?: string) => void;
+    readonly persistTaskEvidence: (taskId: string, evidence: TaskEvidence) => Promise<void>;
+    readonly persistProjectRootOnPlan: (root: string) => Promise<void>;
+    readonly completionGateForTask: (plan: SessionPlan, taskId: string) => TaskUpdateGateResult;
+    readonly matchesWakeRevision: (notification: ResponderNotification) => boolean;
+    readonly executeMcpAgentCall: ReturnType<typeof createMcpAgentToolExecutor>;
+    readonly responderWakeTurn: boolean;
+    readonly responderWakeNotificationId: string | undefined;
+    readonly responderWakeJobId: string | undefined;
+    readonly responderWakeResultRevision: number | undefined;
+}

package/dist/agent/turn/tool-execution/deps.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=deps.js.map

package/dist/agent/turn/tool-execution/deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.js","sourceRoot":"","sources":["../../../../src/agent/turn/tool-execution/deps.ts"],"names":[],"mappings":""}

package/dist/agent/turn/tool-execution/dispatch.d.ts

@@ -0,0 +1,27 @@
+import type { ToolCall } from "../../../types.js";
+import type { SessionPlan } from "../../../store/plan.js";
+import { type TaskWorkLedger } from "../../task-evidence.js";
+export interface ToolDispatchDelegation {
+    id: string;
+    taskId?: string;
+}
+export interface ToolDispatchPorts {
+    readonly mutatePlan: (mutator: (draft: SessionPlan) => boolean) => Promise<{
+        ok: boolean;
+        plan?: SessionPlan | undefined;
+    } | undefined>;
+    readonly renderPlan: (plan: SessionPlan) => void;
+    readonly setPendingSessionStatePlan: (plan: SessionPlan) => void;
+    readonly notify: (level: "info" | "warn", message: string) => void;
+    readonly getLedger: () => TaskWorkLedger | null;
+    readonly setLedger: (ledger: TaskWorkLedger | null) => void;
+}
+export type ToolDispatchOutcome = {
+    readonly kind: "dispatch";
+    readonly dispatchedTaskId: string | undefined;
+    readonly delegation: ToolDispatchDelegation | undefined;
+} | {
+    readonly kind: "reject";
+    readonly reason: string;
+};
+export declare const resolveToolDispatch: (ports: ToolDispatchPorts, call: ToolCall, plan: SessionPlan | undefined) => Promise<ToolDispatchOutcome>;

package/dist/agent/turn/tool-execution/dispatch.js

@@ -0,0 +1,76 @@
+import { randomUUID } from "node:crypto";
+import { appendPlanTask, readyPlanTasks } from "../../../store/plan.js";
+import { ledgerFromTaskEvidence, pickPendingTaskForToolCall, } from "../../task-evidence.js";
+import { delegationTaskTitle, isExplicitResponderDelegation, readDeclaredParentTaskId, resolveResponderParent, } from "../../responder-parent.js";
+const inferDispatchedTaskId = (plan, call) => {
+    const foreground = plan?.tasks.find((task) => task.state === "in_progress" && !task.responderOwned)?.id;
+    if (foreground)
+        return foreground;
+    if (plan?.kind !== "pentest")
+        return undefined;
+    return pickPendingTaskForToolCall(readyPlanTasks(plan), call, plan.tasks.map((task) => task.title))?.id;
+};
+const createDelegationChild = async (ports, call, parentTaskId) => {
+    const delegation = {
+        id: `dg-${randomUUID().slice(0, 8)}`,
+    };
+    const created = await ports
+        .mutatePlan((draft) => {
+        const parentExists = !!parentTaskId && draft.tasks.some((task) => task.id === parentTaskId);
+        const child = appendPlanTask(draft, {
+            title: delegationTaskTitle(call),
+            state: "in_progress",
+            note: `delegation=${delegation.id} awaiting launch`,
+            dependencies: [],
+            resourceLocks: [],
+            ...(parentExists ? { parentTaskId } : {}),
+            responderOwned: true,
+            delegationId: delegation.id,
+        });
+        delegation.taskId = child.id;
+        return true;
+    })
+        .catch(() => undefined);
+    if (!created?.ok || !delegation.taskId) {
+        ports.notify("warn", "Responder delegation record could not be persisted — the job will be linked after launch");
+        return undefined;
+    }
+    if (created.plan) {
+        ports.setPendingSessionStatePlan(created.plan);
+        ports.renderPlan(created.plan);
+    }
+    return delegation;
+};
+const adoptDispatchedLedger = (ports, plan, dispatchedTaskId) => {
+    const ledger = ports.getLedger();
+    if (ledger && ledger.taskId === dispatchedTaskId)
+        return;
+    const dispatchedTask = plan?.tasks.find((task) => task.id === dispatchedTaskId);
+    ports.setLedger(ledgerFromTaskEvidence(dispatchedTaskId, dispatchedTask?.evidence));
+};
+export const resolveToolDispatch = async (ports, call, plan) => {
+    let dispatchedTaskId = inferDispatchedTaskId(plan, call);
+    const declaredParent = readDeclaredParentTaskId(call);
+    if (declaredParent) {
+        const resolvedParent = resolveResponderParent({
+            plan,
+            declared: declaredParent,
+            activeForegroundTaskIds: dispatchedTaskId ? [dispatchedTaskId] : [],
+        });
+        if (!resolvedParent.ok) {
+            return {
+                kind: "reject",
+                reason: `${call.name} failed: ${resolvedParent.reason}`,
+            };
+        }
+        dispatchedTaskId = resolvedParent.taskId ?? dispatchedTaskId;
+    }
+    const delegation = isExplicitResponderDelegation(call) && plan
+        ? await createDelegationChild(ports, call, dispatchedTaskId)
+        : undefined;
+    if (dispatchedTaskId) {
+        adoptDispatchedLedger(ports, plan, dispatchedTaskId);
+    }
+    return { kind: "dispatch", dispatchedTaskId, delegation };
+};
+//# sourceMappingURL=dispatch.js.map

package/dist/agent/turn/tool-execution/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../../../src/agent/turn/tool-execution/dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EACL,sBAAsB,EACtB,0BAA0B,GAE3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,mBAAmB,EACnB,6BAA6B,EAC7B,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AA0BnC,MAAM,qBAAqB,GAAG,CAC5B,IAA6B,EAC7B,IAAc,EACM,EAAE;IACtB,MAAM,UAAU,GAAG,IAAI,EAAE,KAAK,CAAC,IAAI,CACjC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,aAAa,IAAI,CAAC,IAAI,CAAC,cAAc,CAC/D,EAAE,EAAE,CAAC;IACN,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/C,OAAO,0BAA0B,CAC/B,cAAc,CAAC,IAAI,CAAC,EACpB,IAAI,EACJ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CACrC,EAAE,EAAE,CAAC;AACR,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,KAAK,EACjC,KAAwB,EACxB,IAAc,EACd,YAAgC,EACa,EAAE;IAC/C,MAAM,UAAU,GAA2B;QACzC,EAAE,EAAE,MAAM,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;KACrC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,KAAK;SACxB,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,MAAM,YAAY,GAChB,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,EAAE;YAClC,KAAK,EAAE,mBAAmB,CAAC,IAAI,CAAC;YAChC,KAAK,EAAE,aAAa;YACpB,IAAI,EAAE,cAAc,UAAU,CAAC,EAAE,kBAAkB;YACnD,YAAY,EAAE,EAAE;YAChB,aAAa,EAAE,EAAE;YACjB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,cAAc,EAAE,IAAI;YACpB,YAAY,EAAE,UAAU,CAAC,EAAE;SAC5B,CAAC,CAAC;QACH,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE1B,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACvC,KAAK,CAAC,MAAM,CACV,MAAM,EACN,0FAA0F,CAC3F,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,CAAC,0BAA0B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAC5B,KAAwB,EACxB,IAA6B,EAC7B,gBAAwB,EAClB,EAAE;IACR,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;IACjC,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB;QAAE,OAAO;IACzD,MAAM,cAAc,GAAG,IAAI,EAAE,KAAK,CAAC,IAAI,CACrC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,gBAAgB,CACvC,CAAC;IACF,KAAK,CAAC,SAAS,CACb,sBAAsB,CAAC,gBAAgB,EAAE,cAAc,EAAE,QAAQ,CAAC,CACnE,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,KAAwB,EACxB,IAAc,EACd,IAA6B,EACC,EAAE;IAChC,IAAI,gBAAgB,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEzD,MAAM,cAAc,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,cAAc,GAAG,sBAAsB,CAAC;YAC5C,IAAI;YACJ,QAAQ,EAAE,cAAc;YACxB,uBAAuB,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE;SACpE,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,YAAY,cAAc,CAAC,MAAM,EAAE;aACxD,CAAC;QACJ,CAAC;QACD,gBAAgB,GAAG,cAAc,CAAC,MAAM,IAAI,gBAAgB,CAAC;IAC/D,CAAC;IAED,MAAM,UAAU,GACd,6BAA6B,CAAC,IAAI,CAAC,IAAI,IAAI;QACzC,CAAC,CAAC,MAAM,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,gBAAgB,CAAC;QAC5D,CAAC,CAAC,SAAS,CAAC;IAEhB,IAAI,gBAAgB,EAAE,CAAC;QACrB,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;AAC5D,CAAC,CAAC"}

package/dist/agent/turn/tool-execution/engagement-checkpoint.d.ts

@@ -0,0 +1,7 @@
+import type { ToolCall, ToolResult } from "../../../types.js";
+import { type EngagementActionRecord, type EngagementGraph } from "../../../store/engagement.js";
+export declare const recordEngagementOutcome: (graph: EngagementGraph, record: EngagementActionRecord, input: {
+    readonly call: ToolCall;
+    readonly result: ToolResult;
+    readonly artifactPath: string | undefined;
+}) => Promise<void>;

package/dist/agent/turn/tool-execution/engagement-checkpoint.js

@@ -0,0 +1,32 @@
+import { finishEngagementAction, recordEngagementCheckpoint, reconcileEngagementJob, saveEngagement, } from "../../../store/engagement.js";
+const OBSERVATION_LIMIT = 16_000;
+const isScannerLead = (call) => call.name === "net.scan" || call.name.startsWith("pentest.");
+export const recordEngagementOutcome = async (graph, record, input) => {
+    const backgroundJob = input.result.backgroundJob;
+    if (backgroundJob) {
+        const checkpoint = {
+            jobId: backgroundJob.id,
+            status: backgroundJob.status,
+            artifactPath: backgroundJob.artifactPath,
+            offset: backgroundJob.nextOffset ?? 0,
+            observation: input.result.output.slice(0, OBSERVATION_LIMIT),
+        };
+        const reconciled = reconcileEngagementJob(graph, checkpoint);
+        if (!reconciled || reconciled.actionId !== record.id) {
+            recordEngagementCheckpoint(graph, {
+                actionId: record.id,
+                ...checkpoint,
+            });
+        }
+    }
+    else {
+        finishEngagementAction(graph, record.id, {
+            ok: input.result.ok,
+            observation: input.result.output.slice(0, OBSERVATION_LIMIT),
+            ...(input.artifactPath ? { artifactPath: input.artifactPath } : {}),
+            scannerLead: isScannerLead(input.call),
+        });
+    }
+    await saveEngagement(graph);
+};
+//# sourceMappingURL=engagement-checkpoint.js.map

package/dist/agent/turn/tool-execution/engagement-checkpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engagement-checkpoint.js","sourceRoot":"","sources":["../../../../src/agent/turn/tool-execution/engagement-checkpoint.ts"],"names":[],"mappings":"AACA,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,sBAAsB,EACtB,cAAc,GAGf,MAAM,8BAA8B,CAAC;AAEtC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC,MAAM,aAAa,GAAG,CAAC,IAAc,EAAW,EAAE,CAChD,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,EAC1C,KAAsB,EACtB,MAA8B,EAC9B,KAIC,EACc,EAAE;IACjB,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;IACjD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,UAAU,GAAG;YACjB,KAAK,EAAE,aAAa,CAAC,EAAE;YACvB,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,YAAY,EAAE,aAAa,CAAC,YAAY;YACxC,MAAM,EAAE,aAAa,CAAC,UAAU,IAAI,CAAC;YACrC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC;SAC7D,CAAC;QACF,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;YACrD,0BAA0B,CAAC,KAAK,EAAE;gBAChC,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,GAAG,UAAU;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE;YACvC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;YACnB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,WAAW,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC,CAAC"}

package/dist/agent/turn/tool-execution/engagement-gate.d.ts

@@ -0,0 +1,16 @@
+import type { ToolCall } from "../../../types.js";
+import type { EngagementScope } from "../../../store/scope.js";
+import type { EngagementAction } from "../../../safety/engagement-policy.js";
+import { evaluateEngagementAction } from "../../../safety/engagement-policy.js";
+import { type EngagementActionRecord, type EngagementGraph } from "../../../store/engagement.js";
+export interface EngagementGatePorts {
+    readonly scope: EngagementScope | undefined;
+    readonly audit: (event: string, payload: Readonly<Record<string, string | boolean | undefined>>) => Promise<void>;
+}
+export interface EngagementGateOutcome {
+    readonly blockedReason: string | undefined;
+    readonly decision: ReturnType<typeof evaluateEngagementAction> | undefined;
+    readonly graph: EngagementGraph | undefined;
+    readonly record: EngagementActionRecord | undefined;
+}
+export declare const evaluateEngagementGate: (ports: EngagementGatePorts, call: ToolCall, actions: readonly EngagementAction[], scopeTarget: string | undefined) => Promise<EngagementGateOutcome>;