@stigmer/runner 3.0.9-dev.20260615153829 → 3.1.0

package/dist/activities/execute-cursor/__test-utils__/gateway-substrate.js

@@ -0,0 +1,123 @@
+/**
+ * Cursor deny-oracle adapter for the HITL gateway Contract Test Kit.
+ *
+ * Drives the REAL out-of-process gateway: the runner writes the approval state
+ * file (with any grants), then the generated bash preToolUse hook makes the
+ * allow/deny decision for the tool the agent would run inside cursor-agent. There
+ * is no in-process execution to observe, so `executed` means "the hook allowed
+ * it" and the substrate cannot count executions (`observesExecution: false`).
+ *
+ * Cross-taxonomy by construction: grants are minted from the STREAM-side identity
+ * (`edit`/`shell`/`delete`), while the hook is fed the HOOK-side payload
+ * (`Write`/`Shell`/`Delete`). So every approve drive exercises the category
+ * collapse that lets a stream-minted grant match a hook-named call. The grant
+ * token binds the exact resource, so this substrate enforces lease isolation
+ * (`enforcesExactResource: true`) and implements `authorizeAfterGrant`.
+ */
+import { setupCursorHookHarness, hasBash, hookWrite, hookShell, hookDelete, hookRead, hookMcp, } from "./cursor-hook-harness.js";
+import { toolIdentity } from "../approval-state.js";
+import { contentDigest } from "../../../shared/file-tools.js";
+/** Build the real preToolUse hook-input payload for an abstract action. */
+function hookInputFor(action) {
+    switch (action.kind) {
+        case "write":
+            return hookWrite(action.resource, action.content ?? "x");
+        case "shell":
+            return hookShell(action.resource);
+        case "delete":
+            return hookDelete(action.resource);
+        case "read":
+            return hookRead(action.resource);
+        case "mcp":
+            return hookMcp(action.mcpToolName ?? "mcp_tool");
+    }
+}
+// Stream-side (SDK) tool name per gated category — deliberately the OTHER
+// taxonomy from the hook input, so a grant minted here matches a hook-named call
+// only via the canonical category, not the raw name.
+const STREAM_NAME = {
+    write: "edit",
+    shell: "shell",
+    delete: "delete",
+};
+/**
+ * Mint the approval grant for an action using its stream-side identity. Only the
+ * gated built-in categories are ever granted in the contract (read is never
+ * gated; the MCP cases under test are auto-approved, needing no grant).
+ */
+function grantFor(action) {
+    if (action.kind === "read" || action.kind === "mcp") {
+        throw new Error(`grantFor: ${action.kind} actions are not granted in the contract`);
+    }
+    const streamName = STREAM_NAME[action.kind];
+    // Mirror hookInputFor: a write carries whole-file content (so its digest is
+    // content-exact and matches the hook's), a delete carries only a path (no
+    // content), and a shell carries its command (the salient is already exact).
+    const args = action.kind === "shell"
+        ? { command: action.resource }
+        : action.kind === "delete"
+            ? { path: action.resource }
+            : { path: action.resource, content: action.content ?? "x" };
+    const identity = toolIdentity(streamName, "", args);
+    return {
+        toolName: streamName,
+        mcpServerSlug: "",
+        key: identity.key,
+        salient: identity.salient,
+        // Content-exact for a write (the sibling-isolation probe), coarse otherwise —
+        // matching how the runner grants from the authoritative captured args.
+        contentDigest: contentDigest(args),
+        sourceToolCallId: `consent-${action.kind}`,
+    };
+}
+async function decide(grants, action) {
+    // MCP cases under test are auto-approved: no policy entry, so the hook allows
+    // them. Built-ins are gated by the script's baked-in category set, not state.
+    const harness = setupCursorHookHarness({ grants });
+    const { permission } = harness.decide(hookInputFor(action));
+    const executed = permission === "allow";
+    return { executed, gated: !executed };
+}
+// A gated built-in's contract kind IS its approval category (write/shell/delete),
+// so it doubles as the leasedCategories entry the hook reads.
+function leaseCategoryOf(action) {
+    if (action.kind === "read" || action.kind === "mcp") {
+        throw new Error(`leaseCategoryOf: ${action.kind} is not a leasable built-in class`);
+    }
+    return action.kind;
+}
+export function createCursorSubstrate() {
+    return {
+        name: "cursor",
+        available: hasBash,
+        capabilities: {
+            observesExecution: false,
+            enforcesExactResource: true,
+            // The grant binds (category, path, contentDigest), so a DIFFERENT edit to
+            // the same file re-gates — the sibling-hole fix.
+            enforcesExactContent: true,
+            appliesRunLifetimeLease: true,
+            // The Cursor hook's deny decision does not carry approval_policy_source;
+            // provenance is projected at message-reconstruction time (message-translator)
+            // and asserted by the corpus + resolveApprovalProvenance suites instead.
+            surfacesGatePolicySource: false,
+        },
+        async authorize(action, decision) {
+            const grants = decision === "approve" ? [grantFor(action)] : [];
+            return decide(grants, action);
+        },
+        async authorizeAfterGrant(granted, probe) {
+            return decide([grantFor(granted)], probe);
+        },
+        async authorizeUnderClassLease(leased, probe) {
+            // A run-lifetime category lease is carried in the state file (no per-call
+            // grant), exactly as the runner writes it after an APPROVE_ALL; the hook
+            // allows a probe iff its category is leased.
+            const harness = setupCursorHookHarness({ leasedCategories: [leaseCategoryOf(leased)] });
+            const { permission } = harness.decide(hookInputFor(probe));
+            const executed = permission === "allow";
+            return { executed, gated: !executed };
+        },
+    };
+}
+//# sourceMappingURL=gateway-substrate.js.map

package/dist/activities/execute-cursor/__test-utils__/gateway-substrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-substrate.js","sourceRoot":"","sources":["../../../../src/activities/execute-cursor/__test-utils__/gateway-substrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACL,sBAAsB,EACtB,OAAO,EACP,SAAS,EACT,SAAS,EACT,UAAU,EACV,QAAQ,EACR,OAAO,GACR,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,YAAY,EAAsB,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAS9D,2EAA2E;AAC3E,SAAS,YAAY,CAAC,MAAsB;IAC1C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,OAAO;YACV,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;QAC3D,KAAK,OAAO;YACV,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,KAAK,QAAQ;YACX,OAAO,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrC,KAAK,MAAM;YACT,OAAO,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnC,KAAK,KAAK;YACR,OAAO,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,UAAU,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,iFAAiF;AACjF,qDAAqD;AACrD,MAAM,WAAW,GAAiD;IAChE,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF;;;;GAIG;AACH,SAAS,QAAQ,CAAC,MAAsB;IACtC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,CAAC,IAAI,0CAA0C,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,MAAM,IAAI,GACR,MAAM,CAAC,IAAI,KAAK,OAAO;QACrB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE;QAC9B,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;YACxB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;YAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;IAClE,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IACpD,OAAO;QACL,QAAQ,EAAE,UAAU;QACpB,aAAa,EAAE,EAAE;QACjB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,8EAA8E;QAC9E,uEAAuE;QACvE,aAAa,EAAE,aAAa,CAAC,IAAI,CAAC;QAClC,gBAAgB,EAAE,WAAW,MAAM,CAAC,IAAI,EAAE;KAC3C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,MAAuB,EAAE,MAAsB;IACnE,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACnD,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,UAAU,KAAK,OAAO,CAAC;IACxC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED,kFAAkF;AAClF,8DAA8D;AAC9D,SAAS,eAAe,CAAC,MAAsB;IAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,IAAI,mCAAmC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,OAAO;QAClB,YAAY,EAAE;YACZ,iBAAiB,EAAE,KAAK;YACxB,qBAAqB,EAAE,IAAI;YAC3B,0EAA0E;YAC1E,iDAAiD;YACjD,oBAAoB,EAAE,IAAI;YAC1B,uBAAuB,EAAE,IAAI;YAC7B,yEAAyE;YACzE,8EAA8E;YAC9E,yEAAyE;YACzE,wBAAwB,EAAE,KAAK;SAChC;QAED,KAAK,CAAC,SAAS,CAAC,MAAsB,EAAE,QAAyB;YAC/D,MAAM,MAAM,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,OAAO,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,KAAK,CAAC,mBAAmB,CAAC,OAAuB,EAAE,KAAqB;YACtE,OAAO,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QAED,KAAK,CAAC,wBAAwB,CAAC,MAAsB,EAAE,KAAqB;YAC1E,0EAA0E;YAC1E,yEAAyE;YACzE,6CAA6C;YAC7C,MAAM,OAAO,GAAG,sBAAsB,CAAC,EAAE,gBAAgB,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;YACxF,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,UAAU,KAAK,OAAO,CAAC;YACxC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/activities/execute-cursor/approval-policy.d.ts

@@ -15,35 +15,27 @@
  * allows or denies the call. For built-in Cursor tools (Shell, Read, etc.),
  * a separate local policy applies.
  */
-import type { ToolApprovalOverride } from "@stigmer/protos/ai/stigmer/agentic/agent/v1/spec_pb";
-import type { ResolvedMcpServer } from "./mcp-resolver.js";
+import { toolApprovalCategory, type ToolApprovalCategory } from "../../shared/tool-kind.js";
+export { mergeApprovalPolicies, lookupMcpToolPolicy, resolveApprovalMessage, POLICY_ENGINE_VERSION, } from "../../shared/approval-policy.js";
+export type { MergedToolPolicy, PolicySource } from "../../shared/approval-policy.js";
 /**
- * A single tool's merged approval decision after evaluating all policy layers.
- */
-export interface MergedToolPolicy {
-    toolName: string;
-    mcpServerSlug: string;
-    requiresApproval: boolean;
-    approvalMessage: string;
-}
-/**
- * Canonical approval category for a gated tool, derived from EITHER taxonomy's
- * name via the shared {@link classifyTool}.
+ * Canonical approval category for a gated tool.
  *
- * The hook (`Write`/`Shell`/`Delete`) and the stream (`edit`/`shell`/`delete`)
- * name the same operation differently, so neither raw name is a stable
- * cross-layer identity. The category collapses both onto one value so the denial
- * ledger (recorded by the hook) correlates to the streamed tool call (read by
- * the runner) and so an approval grant matches the agent's re-attempt on
- * reinvocation regardless of which taxonomy named it. `FILE_WRITE` and
- * `FILE_EDIT` both map to `write` because the Cursor hook reports every file
- * mutation — create or edit — as `Write`.
+ * This is the cross-substrate identity, and it lives in ONE place:
+ * {@link toolApprovalCategory} in shared/tool-kind.ts (shared with the deep-agent
+ * gateway). The names below are kept as the Cursor harness's public surface
+ * (`approvalCategory` / `ApprovalCategory`) so existing imports do not churn, but
+ * they are exact aliases — there is no second implementation to drift.
  *
- * Returns undefined for non-gated tools (read-only built-ins, MCP tools, and
- * anything `classifyTool` does not place in a mutating kind).
+ * Why this matters here: the hook (`Write`/`Shell`/`Delete`) and the stream
+ * (`edit`/`shell`/`delete`) name the same operation differently, so neither raw
+ * name is a stable cross-layer identity. The category collapses both onto one
+ * value so the denial ledger (recorded by the hook) correlates to the streamed
+ * tool call (read by the runner) and an approval grant matches the agent's
+ * re-attempt on reinvocation regardless of which taxonomy named it.
  */
-export type ApprovalCategory = "write" | "delete" | "shell";
-export declare function approvalCategory(toolName: string): ApprovalCategory | undefined;
+export type ApprovalCategory = ToolApprovalCategory;
+export declare const approvalCategory: typeof toolApprovalCategory;
 /**
  * Top-level tool-argument fields, in priority order, that identify the specific
  * resource a built-in tool acts on. The list deliberately spans BOTH taxonomies'
@@ -105,39 +97,3 @@ export declare function getBuiltInApprovalMessage(toolName: string): string | un
  * drift.
  */
 export declare function extractArgKey(args: Record<string, unknown> | undefined): string;
-/**
- * Merge approval policies from all four levels into a single lookup map.
- *
- * Keys are the raw tool name (e.g., "apply_cloud_resource"). Each MCP server
- * contributes its own set of policies, so the map is keyed by
- * "serverSlug/toolName" to avoid collisions between servers.
- *
- * Policy chain (each level overrides the previous):
- * 1. status.toolApprovals — presence means "requires approval"
- * 2. spec.pinnedToolApprovals — presence means "requires approval" (overrides)
- * 3. agent tool_approval_overrides — explicit boolean per tool
- * 4. auto_approve_all — bypasses everything
- *
- * When auto_approve_all is true, the returned map is empty (no tool
- * requires approval).
- */
-export declare function mergeApprovalPolicies(resolvedServers: ResolvedMcpServer[], agentOverrides: ToolApprovalOverride[], autoApproveAll: boolean): Map<string, MergedToolPolicy>;
-/**
- * Look up whether an MCP tool requires approval.
- *
- * @param toolName - The actual MCP tool name (e.g., "apply_cloud_resource")
- * @param mcpServerSlug - The MCP server slug (e.g., "planton")
- * @param policies - The merged policy map from mergeApprovalPolicies()
- * @returns The policy if approval is required, undefined if auto-approved
- */
-export declare function lookupMcpToolPolicy(toolName: string, mcpServerSlug: string, policies: Map<string, MergedToolPolicy>): MergedToolPolicy | undefined;
-/**
- * Resolve {{args.field}} placeholders in an approval message using the
- * tool's actual arguments.
- *
- * Placeholder syntax matches the proto-documented format:
- * - {{args.field_name}} — replaced with the argument value
- * - {{tool_name}} — replaced with the tool name
- * - Missing fields are replaced with "<unknown>"
- */
-export declare function resolveApprovalMessage(template: string, toolName: string, args: Record<string, unknown>): string;

package/dist/activities/execute-cursor/approval-policy.js

@@ -15,8 +15,13 @@
  * allows or denies the call. For built-in Cursor tools (Shell, Read, etc.),
  * a separate local policy applies.
  */
-import { ToolKind } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
-import { classifyTool } from "../../shared/tool-kind.js";
+import { toolApprovalCategory } from "../../shared/tool-kind.js";
+// The four-level MCP policy merge is harness-agnostic and lives in exactly one
+// place (shared/approval-policy.ts) so the Cursor and native harnesses can never
+// diverge. Re-exported here so existing Cursor-harness imports
+// (`from "./approval-policy.js"`) keep working unchanged. This module now owns
+// only the Cursor-specific built-in-tool gating helpers below.
+export { mergeApprovalPolicies, lookupMcpToolPolicy, resolveApprovalMessage, POLICY_ENGINE_VERSION, } from "../../shared/approval-policy.js";
 /**
  * Built-in Cursor tools the preToolUse hook gates, named as the hook receives
  * them.
@@ -36,19 +41,7 @@ const BUILT_IN_GATED = new Set([
     "Shell",
     "Delete",
 ]);
-export function approvalCategory(toolName) {
-    switch (classifyTool(toolName)) {
-        case ToolKind.FILE_WRITE:
-        case ToolKind.FILE_EDIT:
-            return "write";
-        case ToolKind.FILE_DELETE:
-            return "delete";
-        case ToolKind.SHELL:
-            return "shell";
-        default:
-            return undefined;
-    }
-}
+export const approvalCategory = toolApprovalCategory;
 /**
  * Human-readable approval-message template per canonical category. Keyed by
  * category (not raw tool name) so a denial surfaced from either taxonomy renders
@@ -147,109 +140,4 @@ export function extractArgKey(args) {
     }
     return "";
 }
-/**
- * Merge approval policies from all four levels into a single lookup map.
- *
- * Keys are the raw tool name (e.g., "apply_cloud_resource"). Each MCP server
- * contributes its own set of policies, so the map is keyed by
- * "serverSlug/toolName" to avoid collisions between servers.
- *
- * Policy chain (each level overrides the previous):
- * 1. status.toolApprovals — presence means "requires approval"
- * 2. spec.pinnedToolApprovals — presence means "requires approval" (overrides)
- * 3. agent tool_approval_overrides — explicit boolean per tool
- * 4. auto_approve_all — bypasses everything
- *
- * When auto_approve_all is true, the returned map is empty (no tool
- * requires approval).
- */
-export function mergeApprovalPolicies(resolvedServers, agentOverrides, autoApproveAll) {
-    const merged = new Map();
-    if (autoApproveAll)
-        return merged;
-    for (const server of resolvedServers) {
-        const serverPolicies = new Map();
-        // Layer 1: system-generated defaults (presence = requires approval)
-        for (const policy of server.toolApprovals) {
-            if (!policy.toolName)
-                continue;
-            serverPolicies.set(policy.toolName, {
-                requiresApproval: true,
-                message: policy.message || `Execute tool: ${policy.toolName}`,
-            });
-        }
-        // Layer 2: manual overrides (presence = requires approval, overrides layer 1)
-        for (const pinned of server.pinnedToolApprovals) {
-            if (!pinned.toolName)
-                continue;
-            serverPolicies.set(pinned.toolName, {
-                requiresApproval: true,
-                message: pinned.message || serverPolicies.get(pinned.toolName)?.message || `Execute tool: ${pinned.toolName}`,
-            });
-        }
-        // Layer 3: per-agent overrides (explicit boolean, can enable or disable)
-        for (const override of agentOverrides) {
-            if (!override.toolName)
-                continue;
-            const existing = serverPolicies.get(override.toolName);
-            if (existing) {
-                existing.requiresApproval = override.requiresApproval;
-                if (override.message) {
-                    existing.message = override.message;
-                }
-            }
-            else if (override.requiresApproval) {
-                serverPolicies.set(override.toolName, {
-                    requiresApproval: true,
-                    message: override.message || `Execute tool: ${override.toolName}`,
-                });
-            }
-        }
-        // Write merged policies into the result map
-        for (const [toolName, policy] of serverPolicies) {
-            if (!policy.requiresApproval)
-                continue;
-            const key = `${server.slug}/${toolName}`;
-            merged.set(key, {
-                toolName,
-                mcpServerSlug: server.slug,
-                requiresApproval: true,
-                approvalMessage: policy.message,
-            });
-        }
-    }
-    return merged;
-}
-/**
- * Look up whether an MCP tool requires approval.
- *
- * @param toolName - The actual MCP tool name (e.g., "apply_cloud_resource")
- * @param mcpServerSlug - The MCP server slug (e.g., "planton")
- * @param policies - The merged policy map from mergeApprovalPolicies()
- * @returns The policy if approval is required, undefined if auto-approved
- */
-export function lookupMcpToolPolicy(toolName, mcpServerSlug, policies) {
-    return policies.get(`${mcpServerSlug}/${toolName}`);
-}
-/**
- * Resolve {{args.field}} placeholders in an approval message using the
- * tool's actual arguments.
- *
- * Placeholder syntax matches the proto-documented format:
- * - {{args.field_name}} — replaced with the argument value
- * - {{tool_name}} — replaced with the tool name
- * - Missing fields are replaced with "<unknown>"
- */
-export function resolveApprovalMessage(template, toolName, args) {
-    return template
-        .replace(/\{\{tool_name\}\}/g, toolName)
-        .replace(/\{\{args\.(\w+)\}\}/g, (_match, field) => {
-        const value = args[field];
-        if (value === undefined || value === null)
-            return "<unknown>";
-        if (typeof value === "string")
-            return value;
-        return JSON.stringify(value);
-    });
-}
 //# sourceMappingURL=approval-policy.js.map

package/dist/activities/execute-cursor/approval-policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval-policy.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/approval-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,8DAA8D,CAAC;AAExF,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAYzD;;;;;;;;;;;GAWG;AACH,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,OAAO;IACP,YAAY;IACZ,cAAc;IACd,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AAoBH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,QAAQ,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,KAAK,QAAQ,CAAC,UAAU,CAAC;QACzB,KAAK,QAAQ,CAAC,SAAS;YACrB,OAAO,OAAO,CAAC;QACjB,KAAK,QAAQ,CAAC,WAAW;YACvB,OAAO,QAAQ,CAAC;QAClB,KAAK,QAAQ,CAAC,KAAK;YACjB,OAAO,OAAO,CAAC;QACjB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,yBAAyB,GAAqC;IAClE,KAAK,EAAE,2BAA2B;IAClC,MAAM,EAAE,uBAAuB;IAC/B,KAAK,EAAE,+BAA+B;CACvC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,SAAS,CAAU,CAAC;AAE/F;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,GAAG,cAAc,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,KAAK,GAAsC,EAAE,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAyC;IACrE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CACnC,eAAoC,EACpC,cAAsC,EACtC,cAAuB;IAEvB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEnD,IAAI,cAAc;QAAE,OAAO,MAAM,CAAC;IAElC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,cAAc,GAAG,IAAI,GAAG,EAA0D,CAAC;QAEzF,oEAAoE;QACpE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,SAAS;YAC/B,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAClC,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,iBAAiB,MAAM,CAAC,QAAQ,EAAE;aAC9D,CAAC,CAAC;QACL,CAAC;QAED,8EAA8E;QAC9E,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,SAAS;YAC/B,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAClC,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI,iBAAiB,MAAM,CAAC,QAAQ,EAAE;aAC9G,CAAC,CAAC;QACL,CAAC;QAED,yEAAyE;QACzE,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;YACtC,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBAAE,SAAS;YACjC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,QAAQ,EAAE,CAAC;gBACb,QAAQ,CAAC,gBAAgB,GAAG,QAAQ,CAAC,gBAAgB,CAAC;gBACtD,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACrB,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;gBACtC,CAAC;YACH,CAAC;iBAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;gBACrC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE;oBACpC,gBAAgB,EAAE,IAAI;oBACtB,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,iBAAiB,QAAQ,CAAC,QAAQ,EAAE;iBAClE,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,gBAAgB;gBAAE,SAAS;YACvC,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;gBACd,QAAQ;gBACR,aAAa,EAAE,MAAM,CAAC,IAAI;gBAC1B,gBAAgB,EAAE,IAAI;gBACtB,eAAe,EAAE,MAAM,CAAC,OAAO;aAChC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,aAAqB,EACrB,QAAuC;IAEvC,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,aAAa,IAAI,QAAQ,EAAE,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,QAAgB,EAChB,IAA6B;IAE7B,OAAO,QAAQ;SACZ,OAAO,CAAC,oBAAoB,EAAE,QAAQ,CAAC;SACvC,OAAO,CAAC,sBAAsB,EAAE,CAAC,MAAM,EAAE,KAAa,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,WAAW,CAAC;QAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"approval-policy.js","sourceRoot":"","sources":["../../../src/activities/execute-cursor/approval-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,oBAAoB,EAA6B,MAAM,2BAA2B,CAAC;AAE5F,+EAA+E;AAC/E,iFAAiF;AACjF,+DAA+D;AAC/D,+EAA+E;AAC/E,+DAA+D;AAC/D,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAGzC;;;;;;;;;;;GAWG;AACH,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,OAAO;IACP,YAAY;IACZ,cAAc;IACd,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AAoBH,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAErD;;;;;;;GAOG;AACH,MAAM,yBAAyB,GAAqC;IAClE,KAAK,EAAE,2BAA2B;IAClC,MAAM,EAAE,uBAAuB;IAC/B,KAAK,EAAE,+BAA+B;CACvC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,SAAS,CAAU,CAAC;AAE/F;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,GAAG,cAAc,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,KAAK,GAAsC,EAAE,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAyC;IACrE,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}