@two7722/sentinel-guard 1.1.0

package/dist/lib/daemon.js

@@ -0,0 +1,218 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.daemonStart = daemonStart;
+exports.daemonStop = daemonStop;
+exports.daemonStatus = daemonStatus;
+exports.daemonRestart = daemonRestart;
+exports.daemonInstallLaunchd = daemonInstallLaunchd;
+const child_process_1 = require("child_process");
+const fs_1 = require("fs");
+const path_1 = require("path");
+const os_1 = require("os");
+const keys_1 = require("../crypto/keys");
+const logger_1 = require("./logger");
+const PID_PATH = (0, path_1.join)((0, keys_1.getSentinelDir)(), 'daemon.pid');
+const LOCK_PATH = (0, path_1.join)((0, keys_1.getSentinelDir)(), 'daemon.lock');
+const LOG_PATH = (0, path_1.join)((0, keys_1.getSentinelDir)(), 'daemon.log');
+function savePid(pid) {
+    (0, fs_1.writeFileSync)(PID_PATH, String(pid));
+}
+function readPid() {
+    if (!(0, fs_1.existsSync)(PID_PATH))
+        return null;
+    try {
+        const pid = parseInt((0, fs_1.readFileSync)(PID_PATH, 'utf-8').trim(), 10);
+        return isNaN(pid) ? null : pid;
+    }
+    catch {
+        return null;
+    }
+}
+function isProcessRunning(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function acquireLock() {
+    if ((0, fs_1.existsSync)(LOCK_PATH)) {
+        const lockPid = parseInt((0, fs_1.readFileSync)(LOCK_PATH, 'utf-8').trim(), 10);
+        if (!isNaN(lockPid) && isProcessRunning(lockPid))
+            return false;
+        // Stale lock
+        try {
+            (0, fs_1.unlinkSync)(LOCK_PATH);
+        }
+        catch { }
+    }
+    (0, fs_1.writeFileSync)(LOCK_PATH, String(process.pid));
+    return true;
+}
+function releaseLock() {
+    try {
+        (0, fs_1.unlinkSync)(LOCK_PATH);
+    }
+    catch { }
+}
+/** Start caffeinate to prevent Mac sleep while daemon runs */
+function startCaffeinate(daemonPid) {
+    try {
+        const caf = (0, child_process_1.spawn)('caffeinate', ['-i', '-w', String(daemonPid)], {
+            detached: true,
+            stdio: 'ignore',
+        });
+        caf.unref();
+        logger_1.log.dim(`  caffeinate: preventing sleep (PID: ${caf.pid})`);
+    }
+    catch {
+        // caffeinate not available (Linux)
+    }
+}
+function daemonStart(mode, port, serverUrl) {
+    const existingPid = readPid();
+    if (existingPid && isProcessRunning(existingPid)) {
+        logger_1.log.warn(`Daemon already running (PID: ${existingPid})`);
+        return;
+    }
+    // Lock file check
+    if (!acquireLock()) {
+        logger_1.log.error('Another daemon instance is starting. Remove ~/.sentinel/daemon.lock if stale.');
+        return;
+    }
+    const args = ['start', '--mode', mode, '--port', String(port)];
+    if (serverUrl)
+        args.push('--server', serverUrl);
+    const script = (0, path_1.join)(__dirname, 'index.js');
+    const out = require('fs').openSync(LOG_PATH, 'a');
+    const child = (0, child_process_1.spawn)('node', [script, ...args], {
+        detached: true,
+        stdio: ['ignore', out, out],
+        env: { ...process.env, SENTINEL_DAEMON: '1' },
+    });
+    child.unref();
+    releaseLock();
+    if (child.pid) {
+        savePid(child.pid);
+        startCaffeinate(child.pid);
+        logger_1.log.success(`Sentinel daemon started (PID: ${child.pid})`);
+        logger_1.log.dim(`  Hook server: localhost:${port}`);
+        logger_1.log.dim(`  Mode: ${mode}`);
+        logger_1.log.dim(`  Log: ${LOG_PATH}`);
+        logger_1.log.dim(`  PID file: ${PID_PATH}`);
+    }
+    else {
+        logger_1.log.error('Failed to start daemon');
+    }
+}
+function daemonStop() {
+    const pid = readPid();
+    if (!pid) {
+        logger_1.log.warn('No daemon PID file found');
+        return;
+    }
+    if (!isProcessRunning(pid)) {
+        logger_1.log.warn(`Daemon not running (stale PID: ${pid})`);
+        try {
+            (0, fs_1.unlinkSync)(PID_PATH);
+        }
+        catch { }
+        return;
+    }
+    try {
+        process.kill(pid, 'SIGTERM');
+        // Wait briefly for graceful shutdown using busy-wait with Atomics
+        const start = Date.now();
+        while (Date.now() - start < 2000 && isProcessRunning(pid)) {
+            Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 200);
+        }
+        if (isProcessRunning(pid))
+            process.kill(pid, 'SIGKILL');
+        logger_1.log.success(`Daemon stopped (PID: ${pid})`);
+        try {
+            (0, fs_1.unlinkSync)(PID_PATH);
+        }
+        catch { }
+        releaseLock();
+    }
+    catch (err) {
+        logger_1.log.error(`Failed to stop daemon: ${err.message}`);
+    }
+}
+async function daemonStatus() {
+    const pid = readPid();
+    if (!pid) {
+        logger_1.log.warn('No daemon running (no PID file)');
+        return;
+    }
+    const running = isProcessRunning(pid);
+    if (!running) {
+        logger_1.log.warn(`Daemon not running (stale PID: ${pid})`);
+        try {
+            (0, fs_1.unlinkSync)(PID_PATH);
+        }
+        catch { }
+        return;
+    }
+    logger_1.log.success(`Daemon running (PID: ${pid})`);
+    try {
+        const res = await fetch('http://localhost:7749/status');
+        const data = (await res.json());
+        logger_1.log.info(`  Mode: ${data.mode}`);
+        logger_1.log.info(`  Connected: ${data.connected}`);
+        logger_1.log.info(`  Pending: ${data.pendingRequests}`);
+        logger_1.log.info(`  Uptime: ${Math.round(data.uptime)}s`);
+    }
+    catch {
+        logger_1.log.warn('  Hook server not responding');
+    }
+    // Show log tail
+    if ((0, fs_1.existsSync)(LOG_PATH)) {
+        logger_1.log.dim(`  Log: ${LOG_PATH}`);
+    }
+}
+function daemonRestart(mode, port, serverUrl) {
+    daemonStop();
+    setTimeout(() => daemonStart(mode, port, serverUrl), 800);
+}
+/** Generate macOS launchd plist for auto-start */
+function daemonInstallLaunchd(mode, port) {
+    const plistName = 'com.sentinel.daemon';
+    const plistDir = (0, path_1.join)((0, os_1.homedir)(), 'Library', 'LaunchAgents');
+    const plistPath = (0, path_1.join)(plistDir, `${plistName}.plist`);
+    const nodePath = process.execPath;
+    const scriptPath = (0, path_1.join)(__dirname, 'index.js');
+    const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key><string>${plistName}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${nodePath}</string>
+    <string>${scriptPath}</string>
+    <string>start</string>
+    <string>--mode</string>
+    <string>${mode}</string>
+    <string>--port</string>
+    <string>${port}</string>
+  </array>
+  <key>RunAtLoad</key><true/>
+  <key>KeepAlive</key><true/>
+  <key>StandardOutPath</key><string>${LOG_PATH}</string>
+  <key>StandardErrorPath</key><string>${LOG_PATH}</string>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>SENTINEL_DAEMON</key><string>1</string>
+  </dict>
+</dict>
+</plist>`;
+    (0, fs_1.writeFileSync)(plistPath, plist);
+    logger_1.log.success(`LaunchAgent installed: ${plistPath}`);
+    logger_1.log.dim(`  Will auto-start on login.`);
+    logger_1.log.dim(`  Load now: launchctl load ${plistPath}`);
+    logger_1.log.dim(`  Unload:   launchctl unload ${plistPath}`);
+}
+//# sourceMappingURL=daemon.js.map

package/dist/lib/daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.js","sourceRoot":"","sources":["../../src/lib/daemon.ts"],"names":[],"mappings":";;AA0DA,kCAuCC;AAED,gCAwBC;AAED,oCA4BC;AAED,sCAGC;AAGD,oDAsCC;AAvMD,iDAAsC;AACtC,2BAAyE;AACzE,+BAA4B;AAC5B,2BAA6B;AAC7B,yCAAgD;AAChD,qCAA+B;AAE/B,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAA,qBAAc,GAAE,EAAE,YAAY,CAAC,CAAC;AACtD,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,IAAA,qBAAc,GAAE,EAAE,aAAa,CAAC,CAAC;AACxD,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAA,qBAAc,GAAE,EAAE,YAAY,CAAC,CAAC;AAEtD,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAA,kBAAa,EAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,OAAO;IACd,IAAI,CAAC,IAAA,eAAU,EAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACpE,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,IAAA,eAAU,EAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAA,iBAAY,EAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,gBAAgB,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/D,aAAa;QACb,IAAI,CAAC;YAAC,IAAA,eAAU,EAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACzC,CAAC;IACD,IAAA,kBAAa,EAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,CAAC;QAAC,IAAA,eAAU,EAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACzC,CAAC;AAED,8DAA8D;AAC9D,SAAS,eAAe,CAAC,SAAiB;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,qBAAK,EAAC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE;YAC/D,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,YAAG,CAAC,GAAG,CAAC,wCAAwC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;AACH,CAAC;AAED,SAAgB,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,SAAkB;IACxE,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC;IAC9B,IAAI,WAAW,IAAI,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,YAAG,CAAC,IAAI,CAAC,gCAAgC,WAAW,GAAG,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACnB,YAAG,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;QAC3F,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,IAAI,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAEhD,MAAM,MAAM,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAElD,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE;QAC7C,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC;QAC3B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE;KAC9C,CAAC,CAAC;IAEH,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,WAAW,EAAE,CAAC;IAEd,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,YAAG,CAAC,OAAO,CAAC,iCAAiC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;QAC3D,YAAG,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;QAC5C,YAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAC3B,YAAG,CAAC,GAAG,CAAC,UAAU,QAAQ,EAAE,CAAC,CAAC;QAC9B,YAAG,CAAC,GAAG,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,YAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAgB,UAAU;IACxB,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,YAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAE3D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,YAAG,CAAC,IAAI,CAAC,kCAAkC,GAAG,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC;YAAC,IAAA,eAAU,EAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACtC,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7B,kEAAkE;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,IAAI,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,gBAAgB,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACxD,YAAG,CAAC,OAAO,CAAC,wBAAwB,GAAG,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC;YAAC,IAAA,eAAU,EAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACtC,WAAW,EAAE,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAG,CAAC,KAAK,CAAC,0BAA2B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,YAAY;IAChC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,YAAG,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAAC,OAAO;IAAC,CAAC;IAElE,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,YAAG,CAAC,IAAI,CAAC,kCAAkC,GAAG,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC;YAAC,IAAA,eAAU,EAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACtC,OAAO;IACT,CAAC;IAED,YAAG,CAAC,OAAO,CAAC,wBAAwB,GAAG,GAAG,CAAC,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC3D,YAAG,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,YAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3C,YAAG,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QAC/C,YAAG,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAgB,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,YAAG,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC3C,CAAC;IAED,gBAAgB;IAChB,IAAI,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,YAAG,CAAC,GAAG,CAAC,UAAU,QAAQ,EAAE,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAgB,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,SAAkB;IAC1E,UAAU,EAAE,CAAC;IACb,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;AAC5D,CAAC;AAED,kDAAkD;AAClD,SAAgB,oBAAoB,CAAC,IAAY,EAAE,IAAY;IAC7D,MAAM,SAAS,GAAG,qBAAqB,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,QAAQ,EAAE,GAAG,SAAS,QAAQ,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAE/C,MAAM,KAAK,GAAG;;;;4BAIY,SAAS;;;cAGvB,QAAQ;cACR,UAAU;;;cAGV,IAAI;;cAEJ,IAAI;;;;sCAIoB,QAAQ;wCACN,QAAQ;;;;;;SAMvC,CAAC;IAER,IAAA,kBAAa,EAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChC,YAAG,CAAC,OAAO,CAAC,0BAA0B,SAAS,EAAE,CAAC,CAAC;IACnD,YAAG,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IACvC,YAAG,CAAC,GAAG,CAAC,8BAA8B,SAAS,EAAE,CAAC,CAAC;IACnD,YAAG,CAAC,GAAG,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/lib/diff.d.ts

@@ -0,0 +1,5 @@
+/**
+ * 为 Write/Edit 工具生成简化 diff。
+ * 对比现有文件内容和新内容，输出 Git-style unified diff。
+ */
+export declare function generateDiff(toolName: string, toolInput: Record<string, unknown>): string | undefined;

package/dist/lib/diff.js

@@ -0,0 +1,85 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateDiff = generateDiff;
+const fs_1 = require("fs");
+/**
+ * 为 Write/Edit 工具生成简化 diff。
+ * 对比现有文件内容和新内容，输出 Git-style unified diff。
+ */
+function generateDiff(toolName, toolInput) {
+    const name = toolName.toLowerCase();
+    if (name === 'write') {
+        const filePath = (toolInput.file_path ?? toolInput.path);
+        const newContent = toolInput.content;
+        if (!filePath || !newContent)
+            return undefined;
+        // 读取现有文件
+        let oldContent = '';
+        if ((0, fs_1.existsSync)(filePath)) {
+            try {
+                oldContent = (0, fs_1.readFileSync)(filePath, 'utf-8');
+            }
+            catch { /* new file */ }
+        }
+        return unifiedDiff(filePath, oldContent, newContent);
+    }
+    if (name === 'edit') {
+        const filePath = (toolInput.file_path ?? toolInput.path);
+        const oldStr = toolInput.old_string;
+        const newStr = toolInput.new_string;
+        if (!filePath || !oldStr || !newStr)
+            return undefined;
+        const lines = [
+            `--- a/${filePath}`,
+            `+++ b/${filePath}`,
+            '@@ edit @@',
+        ];
+        for (const line of oldStr.split('\n'))
+            lines.push(`-${line}`);
+        for (const line of newStr.split('\n'))
+            lines.push(`+${line}`);
+        return lines.join('\n');
+    }
+    return undefined;
+}
+/** 简化的 unified diff 生成（逐行对比） */
+function unifiedDiff(path, oldText, newText) {
+    const oldLines = oldText.split('\n');
+    const newLines = newText.split('\n');
+    const lines = [
+        `--- a/${path}`,
+        `+++ b/${path}`,
+    ];
+    if (oldText === '') {
+        // 新文件
+        lines.push(`@@ -0,0 +1,${newLines.length} @@ (new file)`);
+        for (const l of newLines)
+            lines.push(`+${l}`);
+        return lines.join('\n');
+    }
+    // 简单逐行 diff（适合短文件，长文件截断）
+    const maxLines = 50;
+    lines.push(`@@ -1,${Math.min(oldLines.length, maxLines)} +1,${Math.min(newLines.length, maxLines)} @@`);
+    const maxI = Math.max(oldLines.length, newLines.length);
+    let shown = 0;
+    for (let i = 0; i < maxI && shown < maxLines; i++) {
+        const old = i < oldLines.length ? oldLines[i] : null;
+        const nw = i < newLines.length ? newLines[i] : null;
+        if (old === nw) {
+            lines.push(` ${old}`);
+        }
+        else {
+            if (old != null)
+                lines.push(`-${old}`);
+            if (nw != null)
+                lines.push(`+${nw}`);
+        }
+        shown++;
+    }
+    if (maxI > maxLines) {
+        const remaining = maxI - maxLines;
+        lines.push(`\n⚠ Diff truncated: ${remaining} more line${remaining > 1 ? 's' : ''} not shown. Review the full file before approving.`);
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=diff.js.map

package/dist/lib/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/lib/diff.ts"],"names":[],"mappings":";;AAMA,oCAqCC;AA3CD,2BAA8C;AAE9C;;;GAGG;AACH,SAAgB,YAAY,CAC1B,QAAgB,EAChB,SAAkC;IAElC,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAEpC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,CAAC,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,CAAuB,CAAC;QAC/E,MAAM,UAAU,GAAG,SAAS,CAAC,OAA6B,CAAC;QAC3D,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QAE/C,SAAS;QACT,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC;gBAAC,UAAU,GAAG,IAAA,iBAAY,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,WAAW,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,CAAC,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,CAAuB,CAAC;QAC/E,MAAM,MAAM,GAAG,SAAS,CAAC,UAAgC,CAAC;QAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,UAAgC,CAAC;QAC1D,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAEtD,MAAM,KAAK,GAAa;YACtB,SAAS,QAAQ,EAAE;YACnB,SAAS,QAAQ,EAAE;YACnB,YAAY;SACb,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gCAAgC;AAChC,SAAS,WAAW,CAAC,IAAY,EAAE,OAAe,EAAE,OAAe;IACjE,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAa;QACtB,SAAS,IAAI,EAAE;QACf,SAAS,IAAI,EAAE;KAChB,CAAC;IAEF,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,MAAM;QACN,KAAK,CAAC,IAAI,CAAC,cAAc,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,yBAAyB;IACzB,MAAM,QAAQ,GAAG,EAAE,CAAC;IACpB,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAExG,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrD,MAAM,EAAE,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEpD,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;YACvC,IAAI,EAAE,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,EAAE,CAAC;IACV,CAAC;IAED,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,IAAI,GAAG,QAAQ,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,uBAAuB,SAAS,aAAa,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,oDAAoD,CAAC,CAAC;IACxI,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/lib/doctor.d.ts

@@ -0,0 +1 @@
+export declare function runDoctor(): Promise<void>;

package/dist/lib/doctor.js

@@ -0,0 +1,108 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDoctor = runDoctor;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const os_1 = require("os");
+const chalk_1 = __importDefault(require("chalk"));
+const keys_1 = require("../crypto/keys");
+const engine_1 = require("../rules/engine");
+const budget_1 = require("./budget");
+async function runDoctor() {
+    const checks = [];
+    // 1. Claude Code hook
+    const claudeSettings = (0, path_1.join)((0, os_1.homedir)(), '.claude', 'settings.json');
+    if ((0, fs_1.existsSync)(claudeSettings)) {
+        try {
+            const raw = (0, fs_1.readFileSync)(claudeSettings, 'utf-8');
+            const hookInstalled = raw.includes('localhost') && raw.includes('7749');
+            checks.push({
+                label: 'Claude Code hook',
+                ok: hookInstalled,
+                message: hookInstalled ? 'Hook installed' : 'Hook not installed',
+                fix: hookInstalled ? undefined : 'sentinel install',
+            });
+        }
+        catch {
+            checks.push({ label: 'Claude Code hook', ok: false, message: 'Cannot read settings.json', fix: 'sentinel install' });
+        }
+    }
+    else {
+        checks.push({ label: 'Claude Code hook', ok: false, message: 'No ~/.claude/settings.json', fix: 'sentinel install' });
+    }
+    // 2. Hook server
+    try {
+        const res = await fetch('http://localhost:7749/status');
+        const data = (await res.json());
+        checks.push({ label: 'Hook server', ok: true, message: `Running on port 7749 (mode: ${data.mode})` });
+        // 3. iOS connected (from server status)
+        checks.push({
+            label: 'iOS connection',
+            ok: data.connected,
+            message: data.connected ? `Connected (${data.mode} mode)` : 'Not connected',
+            fix: data.connected ? undefined : 'Connect iOS via Settings → 手动连接',
+        });
+    }
+    catch {
+        checks.push({ label: 'Hook server', ok: false, message: 'Not running', fix: 'sentinel start' });
+        checks.push({ label: 'iOS connection', ok: false, message: 'Server not running', fix: 'sentinel start' });
+    }
+    // 4. Rules
+    try {
+        const rules = (0, engine_1.getRules)();
+        const rulesPath = (0, path_1.join)((0, keys_1.getSentinelDir)(), 'rules.json');
+        const hasCustom = (0, fs_1.existsSync)(rulesPath);
+        checks.push({
+            label: 'Rules',
+            ok: true,
+            message: `${rules.length} rules loaded${hasCustom ? '' : ' (defaults only)'}`,
+        });
+    }
+    catch {
+        checks.push({ label: 'Rules', ok: false, message: 'Failed to load rules' });
+    }
+    // 5. Identity
+    const identityPath = (0, path_1.join)((0, keys_1.getSentinelDir)(), 'identity.json');
+    if ((0, fs_1.existsSync)(identityPath)) {
+        const pubKey = (0, keys_1.getPublicKeyBase64)().slice(0, 12);
+        checks.push({ label: 'Identity', ok: true, message: `${pubKey}...` });
+    }
+    else {
+        checks.push({ label: 'Identity', ok: false, message: 'No identity file', fix: 'Created on first start' });
+    }
+    // 6. Budget
+    const b = (0, budget_1.getBudgetStatus)();
+    if (b.limit > 0) {
+        checks.push({
+            label: 'Budget',
+            ok: !b.overBudget,
+            message: `$${b.spent.toFixed(4)} / $${b.limit.toFixed(2)} today${b.overBudget ? ' ⚠ OVER' : ''}`,
+        });
+    }
+    else {
+        checks.push({ label: 'Budget', ok: true, message: 'No limit set' });
+    }
+    // Output
+    console.log(chalk_1.default.bold('\n  🩺 Sentinel Doctor\n'));
+    let issues = 0;
+    for (const c of checks) {
+        const icon = c.ok ? chalk_1.default.green('✓') : chalk_1.default.red('✗');
+        console.log(`  ${icon} ${chalk_1.default.bold(c.label.padEnd(18))} ${c.message}`);
+        if (!c.ok && c.fix) {
+            console.log(`    ${chalk_1.default.dim(`→ ${c.fix}`)}`);
+            issues++;
+        }
+    }
+    console.log('');
+    if (issues === 0) {
+        log(chalk_1.default.green.bold('  All checks passed. Sentinel is ready. ✨\n'));
+    }
+    else {
+        log(chalk_1.default.yellow.bold(`  ${issues} issue${issues > 1 ? 's' : ''} found. Run suggested commands to fix.\n`));
+    }
+}
+function log(msg) { console.log(msg); }
+//# sourceMappingURL=doctor.js.map

package/dist/lib/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/lib/doctor.ts"],"names":[],"mappings":";;;;;AAeA,8BA6FC;AA5GD,2BAA8C;AAC9C,+BAA4B;AAC5B,2BAA6B;AAC7B,kDAA0B;AAC1B,yCAAoE;AACpE,4CAA2C;AAC3C,qCAA2C;AASpC,KAAK,UAAU,SAAS;IAC7B,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,sBAAsB;IACtB,MAAM,cAAc,GAAG,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IACnE,IAAI,IAAA,eAAU,EAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAA,iBAAY,EAAC,cAAc,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxE,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,kBAAkB;gBACzB,EAAE,EAAE,aAAa;gBACjB,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,oBAAoB;gBAChE,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB;aACpD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACvH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACxH,CAAC;IAED,iBAAiB;IACjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,+BAA+B,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAEtG,wCAAwC;QACxC,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,gBAAgB;YACvB,EAAE,EAAE,IAAI,CAAC,SAAoB;YAC7B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,eAAe;YAC3E,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iCAAiC;SACpE,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAChG,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED,WAAW;IACX,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAA,iBAAQ,GAAE,CAAC;QACzB,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,IAAA,qBAAc,GAAE,EAAE,YAAY,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,IAAA,eAAU,EAAC,SAAS,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,OAAO;YACd,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,gBAAgB,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,EAAE;SAC9E,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,cAAc;IACd,MAAM,YAAY,GAAG,IAAA,WAAI,EAAC,IAAA,qBAAc,GAAE,EAAE,eAAe,CAAC,CAAC;IAC7D,IAAI,IAAA,eAAU,EAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAA,yBAAkB,GAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED,YAAY;IACZ,MAAM,CAAC,GAAG,IAAA,wBAAe,GAAE,CAAC;IAC5B,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,QAAQ;YACf,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;YACjB,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;SACjG,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,SAAS;IACT,OAAO,CAAC,GAAG,CAAC,eAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACpD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,eAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,OAAO,eAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,EAAE,CAAC;QACX,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,GAAG,CAAC,eAAK,CAAC,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,eAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,SAAS,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,0CAA0C,CAAC,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,GAAW,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC"}

package/dist/lib/history.d.ts

@@ -0,0 +1,22 @@
+export interface LogEntry {
+    id: string;
+    toolName: string;
+    filePath: string | null;
+    riskLevel: string;
+    decision: string;
+    timestamp: string;
+    result?: string;
+    summary?: string;
+}
+export declare function appendLog(entry: LogEntry): void;
+export declare function getHistory(): LogEntry[];
+export interface DayStats {
+    allowed: number;
+    blocked: number;
+    timeout: number;
+    autoAllow: number;
+    offline: number;
+    total: number;
+    lastRequestTime: string | null;
+}
+export declare function getTodayStats(): DayStats;

package/dist/lib/history.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.appendLog = appendLog;
+exports.getHistory = getHistory;
+exports.getTodayStats = getTodayStats;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const keys_1 = require("../crypto/keys");
+const MAX_ENTRIES = 100;
+const HISTORY_PATH = (0, path_1.join)((0, keys_1.getSentinelDir)(), 'logs.json');
+function loadHistory() {
+    if (!(0, fs_1.existsSync)(HISTORY_PATH))
+        return [];
+    try {
+        return JSON.parse((0, fs_1.readFileSync)(HISTORY_PATH, 'utf-8'));
+    }
+    catch {
+        return [];
+    }
+}
+function saveHistory(entries) {
+    (0, fs_1.writeFileSync)(HISTORY_PATH, JSON.stringify(entries, null, 2), { mode: 0o600 });
+}
+function appendLog(entry) {
+    const history = loadHistory();
+    history.unshift(entry); // newest first
+    if (history.length > MAX_ENTRIES)
+        history.length = MAX_ENTRIES;
+    saveHistory(history);
+}
+function getHistory() {
+    return loadHistory();
+}
+function getTodayStats() {
+    const today = new Date().toISOString().slice(0, 10); // YYYY-MM-DD
+    const entries = loadHistory().filter((e) => e.timestamp.startsWith(today));
+    const stats = {
+        allowed: 0, blocked: 0, timeout: 0, autoAllow: 0, offline: 0, total: entries.length,
+        lastRequestTime: entries[0]?.timestamp ?? null,
+    };
+    for (const e of entries) {
+        switch (e.decision) {
+            case 'allowed':
+                stats.allowed++;
+                break;
+            case 'blocked':
+                stats.blocked++;
+                break;
+            case 'timeout':
+                stats.timeout++;
+                break;
+            case 'auto_allow':
+                stats.autoAllow++;
+                break;
+            case 'offline':
+                stats.offline++;
+                break;
+        }
+    }
+    return stats;
+}
+//# sourceMappingURL=history.js.map

package/dist/lib/history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.js","sourceRoot":"","sources":["../../src/lib/history.ts"],"names":[],"mappings":";;AA+BA,8BAKC;AAED,gCAEC;AAYD,sCAmBC;AAvED,2BAA6D;AAC7D,+BAA4B;AAC5B,yCAAgD;AAEhD,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,YAAY,GAAG,IAAA,WAAI,EAAC,IAAA,qBAAc,GAAE,EAAE,WAAW,CAAC,CAAC;AAazD,SAAS,WAAW;IAClB,IAAI,CAAC,IAAA,eAAU,EAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,YAAY,EAAE,OAAO,CAAC,CAAe,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAmB;IACtC,IAAA,kBAAa,EAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,SAAgB,SAAS,CAAC,KAAe;IACvC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe;IACvC,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW;QAAE,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;IAC/D,WAAW,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC;AAED,SAAgB,UAAU;IACxB,OAAO,WAAW,EAAE,CAAC;AACvB,CAAC;AAYD,SAAgB,aAAa;IAC3B,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa;IAClE,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAE3E,MAAM,KAAK,GAAa;QACtB,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM;QACnF,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI;KAC/C,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YACnB,KAAK,SAAS;gBAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM;YACvC,KAAK,SAAS;gBAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM;YACvC,KAAK,SAAS;gBAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM;YACvC,KAAK,YAAY;gBAAE,KAAK,CAAC,SAAS,EAAE,CAAC;gBAAC,MAAM;YAC5C,KAAK,SAAS;gBAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM;QACzC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/lib/logger.d.ts

@@ -0,0 +1,11 @@
+/** Silence terminal output and redirect logs to ~/.sentinel/run.log */
+export declare function silenceForClaude(): void;
+export declare function unsilence(): void;
+export declare const log: {
+    info: (msg: string) => void;
+    success: (msg: string) => void;
+    warn: (msg: string) => void;
+    error: (msg: string) => void;
+    debug: (msg: string) => void;
+    dim: (msg: string) => void;
+};

package/dist/lib/logger.js

@@ -0,0 +1,62 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.log = void 0;
+exports.silenceForClaude = silenceForClaude;
+exports.unsilence = unsilence;
+const chalk_1 = __importDefault(require("chalk"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const os_1 = __importDefault(require("os"));
+// Log file for sentinel output when Claude TUI is active
+const LOG_DIR = path_1.default.join(os_1.default.homedir(), '.sentinel');
+const LOG_FILE = path_1.default.join(LOG_DIR, 'run.log');
+let silenced = false;
+let logStream = null;
+/** Silence terminal output and redirect logs to ~/.sentinel/run.log */
+function silenceForClaude() {
+    if (silenced)
+        return;
+    silenced = true;
+    try {
+        fs_1.default.mkdirSync(LOG_DIR, { recursive: true });
+        logStream = fs_1.default.createWriteStream(LOG_FILE, { flags: 'a' });
+    }
+    catch {
+        // ignore
+    }
+}
+function unsilence() {
+    silenced = false;
+    logStream?.end();
+    logStream = null;
+}
+function write(prefix, msg) {
+    const line = `${prefix} ${msg}`;
+    if (silenced) {
+        const ts = new Date().toISOString().slice(11, 19);
+        logStream?.write(`${ts} ${line}\n`);
+    }
+    else {
+        console.log(line);
+    }
+}
+exports.log = {
+    info: (msg) => write(chalk_1.default.blue('ℹ'), msg),
+    success: (msg) => write(chalk_1.default.green('✓'), msg),
+    warn: (msg) => write(chalk_1.default.yellow('⚠'), msg),
+    error: (msg) => {
+        // Always print errors, even when silenced
+        const line = `${chalk_1.default.red('✗')} ${msg}`;
+        console.error(line);
+        logStream?.write(`${new Date().toISOString().slice(11, 19)} ${line}\n`);
+    },
+    debug: (msg) => {
+        if (process.env.DEBUG)
+            write(chalk_1.default.gray('⋯'), msg);
+    },
+    dim: (msg) => write(chalk_1.default.dim(msg), ''),
+};
+//# sourceMappingURL=logger.js.map

package/dist/lib/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/lib/logger.ts"],"names":[],"mappings":";;;;;;AAaA,4CASC;AAED,8BAIC;AA5BD,kDAA0B;AAC1B,4CAAoB;AACpB,gDAAwB;AACxB,4CAAoB;AAEpB,yDAAyD;AACzD,MAAM,OAAO,GAAG,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AACrD,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAE/C,IAAI,QAAQ,GAAG,KAAK,CAAC;AACrB,IAAI,SAAS,GAA0B,IAAI,CAAC;AAE5C,uEAAuE;AACvE,SAAgB,gBAAgB;IAC9B,IAAI,QAAQ;QAAE,OAAO;IACrB,QAAQ,GAAG,IAAI,CAAC;IAChB,IAAI,CAAC;QACH,YAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,SAAS,GAAG,YAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,SAAgB,SAAS;IACvB,QAAQ,GAAG,KAAK,CAAC;IACjB,SAAS,EAAE,GAAG,EAAE,CAAC;IACjB,SAAS,GAAG,IAAI,CAAC;AACnB,CAAC;AAED,SAAS,KAAK,CAAC,MAAc,EAAE,GAAW;IACxC,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC;IAChC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAEY,QAAA,GAAG,GAAG;IACjB,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,KAAK,CAAC,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IAClD,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,KAAK,CAAC,eAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IACtD,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,KAAK,CAAC,eAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IACpD,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE;QACrB,0CAA0C;QAC1C,MAAM,IAAI,GAAG,GAAG,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpB,SAAS,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IAC1E,CAAC;IACD,KAAK,EAAE,CAAC,GAAW,EAAE,EAAE;QACrB,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK;YAAE,KAAK,CAAC,eAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,GAAG,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,KAAK,CAAC,eAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;CAChD,CAAC"}

package/dist/lib/modes.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Permission modes (better than Happy's 4 modes):
+ *
+ * strict   — Every non-read tool needs approval (default)
+ * relaxed  — Only Bash and destructive ops need approval
+ * yolo     — All auto-approve, but everything is logged
+ * plan     — Like strict, but groups related calls
+ * lockdown — Block everything (same as sentinel block on)
+ */
+export type PermissionMode = 'strict' | 'relaxed' | 'yolo' | 'plan' | 'lockdown';
+interface ModeConfig {
+    mode: PermissionMode;
+    changedAt: string;
+}
+export declare function getMode(): PermissionMode;
+export declare function setMode(mode: PermissionMode): void;
+export declare function getModeInfo(): ModeConfig;
+/** Check if a tool should be auto-allowed based on current mode */
+export declare function shouldAutoAllow(toolName: string): 'auto_allow' | 'require' | 'block';
+export declare const MODE_DESCRIPTIONS: Record<PermissionMode, string>;
+export declare const ALL_MODES: PermissionMode[];
+export {};