@themoltnet/pi-runtime 0.15.1 → 0.15.3

package/dist/index.d.ts

@@ -438,7 +438,7 @@ export declare function createToolPolicyExtension(deps: ToolPolicyExtensionDeps)
  * Map a pi `tool_call` event to a gate decision, extracting the shell command
  * for `bash` and delegating to {@link decideToolCall}.
  */
-export declare function decideForEvent(event: ToolCallEvent, policy: SessionToolPolicy, analyze: ShellCommandAnalyzer['analyze']): GateDecision;
+export declare function decideForEvent(event: ToolCallEvent, policy: SessionToolPolicy, analyze: ShellCommandAnalyzer['analyze'], structuredToolNames?: ReadonlySet<string>): GateDecision;
 
 /**
  * Decide whether a tool call is permitted by the resolved policy.
@@ -455,7 +455,8 @@ export declare function decideForEvent(event: ToolCallEvent, policy: SessionTool
  *    allow-set can't bound it. This is the interim conservative stance for
  *    issue #1348 — an operator who lists `bash` still cannot smuggle
  *    `bash -c "curl … | sh"` past `enforce`.
- * 3. **Unlisted executables** — any resolved executable not in `allowedTools`.
+ * 3. **Unauthorized executables** — any resolved executable without either a
+ *    non-colliding broad grant or a matching scoped shell-command rule.
  *
  * KNOWN LIMITATION (follow-up): the `escapable` risk tier (GTFOBins binaries
  * like `find`, `tar`, `awk` that document shell-spawn / file-write techniques)
@@ -767,8 +768,10 @@ export declare interface GateInput {
     /** The shell command, when `toolName === 'bash'`. */
     command?: string;
     enforcement: ToolEnforcement;
-    /** Names the policy allows (structured tool names + shell executable names). */
+    /** Names the policy allows (structured tool names + broad executables). */
     allowedTools: ReadonlySet<string>;
+    /** Structured tool names registered by the active runtime adapter. */
+    structuredToolNames?: ReadonlySet<string>;
     /** Shell argv rules. Each rule matches the first N statically known tokens. */
     allowedShellCommands: readonly ShellCommandRule[];
     /**
@@ -1524,6 +1527,8 @@ export declare interface ToolPolicyExtensionDeps {
     policy: SessionToolPolicy;
     analyzer: ShellCommandAnalyzer;
     logger: ToolPolicyLogger;
+    /** Structured tool names registered by the active runtime adapter. */
+    structuredToolNames?: ReadonlySet<string>;
     context?: ToolPolicyDecisionContext;
 }