@vigil-guard/vge-cc-guard 0.9.0-beta.1

package/dist/daemon/debug-logger.js

@@ -0,0 +1,247 @@
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import pino from 'pino';
+import { chmodPrivateSync } from '../shared/private-file.js';
+// Always redact these field names regardless of nesting depth. Anything that
+// could carry raw tool content, prompts, or credentials is dropped before it
+// hits disk.
+const REDACT_PATHS = [
+    '*.api_key_input',
+    '*.api_key_output',
+    '*.apiKey',
+    '*.api_key',
+    '*.authorization',
+    '*.Authorization',
+    '*.bearer',
+    '*.daemon_token',
+    '*.daemonToken',
+    '*.password',
+    '*.prompt',
+    '*.tool_response',
+    '*.toolResponse',
+    '*.text',
+    '*.sanitizedText',
+    '*.redactedText',
+    '*.content',
+    'apiKey',
+    'api_key',
+    'api_key_input',
+    'api_key_output',
+    'authorization',
+    'Authorization',
+    'bearer',
+    'daemon_token',
+    'daemonToken',
+    '["x-vge-cc-guard-token"]',
+    '["X-VGE-CC-Guard-Token"]',
+    'headers["x-vge-cc-guard-token"]',
+    'headers["X-VGE-CC-Guard-Token"]',
+    '*.headers["x-vge-cc-guard-token"]',
+    '*.headers["X-VGE-CC-Guard-Token"]',
+    '*.headers.authorization',
+    '*.headers.Authorization',
+    '*.config.headers["x-vge-cc-guard-token"]',
+    '*.config.headers["X-VGE-CC-Guard-Token"]',
+    '*.config.headers.authorization',
+    '*.config.headers.Authorization',
+    'password',
+    'prompt',
+    'tool_response',
+    'toolResponse',
+    'text',
+    'sanitizedText',
+    'redactedText',
+];
+let cached = null;
+const DESTINATION_REGISTRY_KEY = '__vgeCcGuardDebugDestinations';
+let activeLog = null;
+let rotationTimer = null;
+function configDir() {
+    return process.env['VGE_CC_GUARD_CONFIG_DIR'] ?? path.join(os.homedir(), '.vge-cc-guard');
+}
+const MAX_FILE_BYTES = 50 * 1024 * 1024;
+const KEEP_FILES = 5;
+const ROTATE_CHECK_INTERVAL_MS = 60_000;
+function ensurePrivateLogFile(logFile) {
+    const fd = fs.openSync(logFile, 'a', process.platform === 'win32' ? undefined : 0o600);
+    fs.closeSync(fd);
+    chmodPrivateSync(logFile);
+}
+function renamePrivateLog(src, dst) {
+    fs.renameSync(src, dst);
+    chmodPrivateSync(dst);
+}
+function rotateIfNeeded(logFile) {
+    try {
+        const stats = fs.statSync(logFile);
+        if (stats.size < MAX_FILE_BYTES)
+            return false;
+    }
+    catch {
+        return false; // file does not exist yet
+    }
+    // Shift debug.log -> debug.log.1 -> debug.log.2 ... up to KEEP_FILES
+    for (let i = KEEP_FILES - 1; i >= 1; i--) {
+        const src = `${logFile}.${i}`;
+        const dst = `${logFile}.${i + 1}`;
+        try {
+            renamePrivateLog(src, dst);
+        }
+        catch { /* missing — ignore */ }
+    }
+    try {
+        renamePrivateLog(logFile, `${logFile}.1`);
+    }
+    catch { /* race — ignore */ }
+    // Trim oldest beyond KEEP_FILES
+    try {
+        fs.unlinkSync(`${logFile}.${KEEP_FILES + 1}`);
+    }
+    catch { /* missing — ignore */ }
+    return true;
+}
+function debugLogNeedsRotation(logFile) {
+    try {
+        return fs.statSync(logFile).size >= MAX_FILE_BYTES;
+    }
+    catch {
+        return false;
+    }
+}
+function rotateActiveLogIfNeeded() {
+    if (!activeLog)
+        return;
+    let descriptorClosed = false;
+    try {
+        activeLog.destination.flushSync?.();
+        if (!debugLogNeedsRotation(activeLog.logFile))
+            return;
+        descriptorClosed = closeDebugFileDescriptorForRotation(activeLog.destination);
+        if (!rotateIfNeeded(activeLog.logFile))
+            return;
+        ensurePrivateLogFile(activeLog.logFile);
+        activeLog.destination.reopen?.();
+        descriptorClosed = false;
+    }
+    catch {
+        // Debug logging must never affect hook enforcement.
+    }
+    finally {
+        if (descriptorClosed) {
+            try {
+                activeLog?.destination.reopen?.();
+            }
+            catch { /* keep debug logging best-effort */ }
+        }
+    }
+}
+function startRotationTimer() {
+    if (rotationTimer)
+        return;
+    rotationTimer = setInterval(rotateActiveLogIfNeeded, ROTATE_CHECK_INTERVAL_MS);
+    rotationTimer.unref?.();
+}
+function debugDestinationRegistry() {
+    const globalState = globalThis;
+    globalState[DESTINATION_REGISTRY_KEY] ??= [];
+    return globalState[DESTINATION_REGISTRY_KEY];
+}
+function registerDebugDestination(logFile, destination) {
+    debugDestinationRegistry().push({ logFile, destination });
+}
+function buildLogger() {
+    const level = process.env['VGE_CC_GUARD_LOG_LEVEL'] ?? 'info';
+    const dir = configDir();
+    fs.mkdirSync(dir, { recursive: true });
+    const logFile = path.join(dir, 'debug.log');
+    rotateIfNeeded(logFile);
+    ensurePrivateLogFile(logFile);
+    const destination = pino.destination({ dest: logFile, sync: true, mkdir: true });
+    activeLog = { logFile, destination };
+    registerDebugDestination(logFile, destination);
+    startRotationTimer();
+    return pino({
+        level,
+        base: { svc: 'vge-cc-guard' },
+        redact: { paths: REDACT_PATHS, censor: '[REDACTED]' },
+        timestamp: pino.stdTimeFunctions.isoTime,
+    }, destination);
+}
+export function debugLogger() {
+    if (!cached)
+        cached = buildLogger();
+    return cached;
+}
+// Test-only: drop cached instances so fresh CONFIG_DIR values are honoured.
+export function _resetForTests(configDirScope) {
+    const registry = debugDestinationRegistry();
+    const activeEntry = activeLog;
+    const entries = new Map();
+    for (const entry of registry) {
+        if (entryMatchesScope(entry, configDirScope))
+            entries.set(entry.destination, entry);
+    }
+    if (activeEntry && entryMatchesScope(activeEntry, configDirScope)) {
+        entries.set(activeEntry.destination, activeEntry);
+        activeLog = null;
+        cached = null;
+    }
+    else if (!configDirScope) {
+        activeLog = null;
+        cached = null;
+    }
+    if (!activeLog || !configDirScope) {
+        if (rotationTimer)
+            clearInterval(rotationTimer);
+        rotationTimer = null;
+    }
+    for (const { destination } of entries.values())
+        closeDebugDestinationForTests(destination);
+    if (configDirScope) {
+        for (let i = registry.length - 1; i >= 0; i -= 1) {
+            if (entryMatchesScope(registry[i], configDirScope))
+                registry.splice(i, 1);
+        }
+    }
+    else {
+        registry.length = 0;
+    }
+}
+function entryMatchesScope(entry, configDirScope) {
+    if (!configDirScope)
+        return true;
+    const scopedDir = path.resolve(configDirScope);
+    const logFile = path.resolve(entry.logFile);
+    return logFile === path.join(scopedDir, 'debug.log') || logFile.startsWith(`${scopedDir}${path.sep}`);
+}
+function closeDebugDestinationForTests(destination) {
+    try {
+        destination.flushSync?.();
+    }
+    catch { /* already closed */ }
+    try {
+        if (destination._periodicFlushTimer)
+            clearInterval(destination._periodicFlushTimer);
+        closeDebugFileDescriptorForRotation(destination);
+        destination.destroyed = true;
+    }
+    catch {
+        // Repeated test resets should remain idempotent.
+    }
+}
+function closeDebugFileDescriptorForRotation(destination) {
+    if (typeof destination.fd !== 'number' || destination.fd < 0)
+        return false;
+    try {
+        fs.fsyncSync(destination.fd);
+    }
+    catch { /* some descriptors do not fsync */ }
+    fs.closeSync(destination.fd);
+    destination.fd = -1;
+    return true;
+}
+export function _rotateDebugLogIfNeededForTests() {
+    rotateActiveLogIfNeeded();
+}
+//# sourceMappingURL=debug-logger.js.map

package/dist/daemon/debug-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug-logger.js","sourceRoot":"","sources":["../../src/daemon/debug-logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,6EAA6E;AAC7E,6EAA6E;AAC7E,aAAa;AACb,MAAM,YAAY,GAAG;IACnB,iBAAiB;IACjB,kBAAkB;IAClB,UAAU;IACV,WAAW;IACX,iBAAiB;IACjB,iBAAiB;IACjB,UAAU;IACV,gBAAgB;IAChB,eAAe;IACf,YAAY;IACZ,UAAU;IACV,iBAAiB;IACjB,gBAAgB;IAChB,QAAQ;IACR,iBAAiB;IACjB,gBAAgB;IAChB,WAAW;IACX,QAAQ;IACR,SAAS;IACT,eAAe;IACf,gBAAgB;IAChB,eAAe;IACf,eAAe;IACf,QAAQ;IACR,cAAc;IACd,aAAa;IACb,0BAA0B;IAC1B,0BAA0B;IAC1B,iCAAiC;IACjC,iCAAiC;IACjC,mCAAmC;IACnC,mCAAmC;IACnC,yBAAyB;IACzB,yBAAyB;IACzB,0CAA0C;IAC1C,0CAA0C;IAC1C,gCAAgC;IAChC,gCAAgC;IAChC,UAAU;IACV,QAAQ;IACR,eAAe;IACf,cAAc;IACd,MAAM;IACN,eAAe;IACf,cAAc;CACf,CAAC;AAEF,IAAI,MAAM,GAAkB,IAAI,CAAC;AAcjC,MAAM,wBAAwB,GAAG,+BAA+B,CAAC;AAEjE,IAAI,SAAS,GAAqB,IAAI,CAAC;AACvC,IAAI,aAAa,GAA0B,IAAI,CAAC;AAEhD,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAExC,SAAS,oBAAoB,CAAC,OAAe;IAC3C,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvF,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACjB,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,GAAW;IAChD,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,gBAAgB,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,IAAI,GAAG,cAAc;YAAE,OAAO,KAAK,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,0BAA0B;IAC1C,CAAC;IACD,qEAAqE;IACrE,KAAK,IAAI,CAAC,GAAG,UAAU,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC;YAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC;QAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;IAChF,gCAAgC;IAChC,IAAI,CAAC;QAAC,EAAE,CAAC,UAAU,CAAC,GAAG,OAAO,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC5C,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,cAAc,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB;IAC9B,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,CAAC;QACH,SAAS,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,OAAO;QACtD,gBAAgB,GAAG,mCAAmC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC9E,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,OAAO;QAC/C,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACxC,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;QACjC,gBAAgB,GAAG,KAAK,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;YAAS,CAAC;QACT,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAI,CAAC;gBAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB;IACzB,IAAI,aAAa;QAAE,OAAO;IAC1B,aAAa,GAAG,WAAW,CAAC,uBAAuB,EAAE,wBAAwB,CAAC,CAAC;IAC/E,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,wBAAwB;IAC/B,MAAM,WAAW,GAAG,UAEnB,CAAC;IACF,WAAW,CAAC,wBAAwB,CAAC,KAAK,EAAE,CAAC;IAC7C,OAAO,WAAW,CAAC,wBAAwB,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe,EAAE,WAA6B;IAC9E,wBAAwB,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,MAAM,CAAC;IAC9D,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAE5C,cAAc,CAAC,OAAO,CAAC,CAAC;IACxB,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjF,SAAS,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACrC,wBAAwB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/C,kBAAkB,EAAE,CAAC;IAErB,OAAO,IAAI,CACT;QACE,KAAK;QACL,IAAI,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE;QAC7B,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE;QACrD,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO;KACzC,EACD,WAAW,CACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC,MAAM;QAAE,MAAM,GAAG,WAAW,EAAE,CAAC;IACpC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,cAAuB;IACpD,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAG,SAAS,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2C,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,iBAAiB,CAAC,KAAK,EAAE,cAAc,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,WAAW,IAAI,iBAAiB,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAClD,SAAS,GAAG,IAAI,CAAC;QACjB,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;SAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3B,SAAS,GAAG,IAAI,CAAC;QACjB,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;QAClC,IAAI,aAAa;YAAE,aAAa,CAAC,aAAa,CAAC,CAAC;QAChD,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,MAAM,EAAE,WAAW,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE;QAAE,6BAA6B,CAAC,WAAW,CAAC,CAAC;IAC3F,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,cAAc,CAAC;gBAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA4B,EAAE,cAAkC;IACzF,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,OAAO,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,6BAA6B,CAAC,WAA6B;IAClE,IAAI,CAAC;QAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,IAAI,WAAW,CAAC,mBAAmB;YAAE,aAAa,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;QACpF,mCAAmC,CAAC,WAAW,CAAC,CAAC;QACjD,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;AACH,CAAC;AAED,SAAS,mCAAmC,CAAC,WAA6B;IACxE,IAAI,OAAO,WAAW,CAAC,EAAE,KAAK,QAAQ,IAAI,WAAW,CAAC,EAAE,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,IAAI,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,mCAAmC,CAAC,CAAC;IACnF,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,uBAAuB,EAAE,CAAC;AAC5B,CAAC"}

package/dist/daemon/decision-broker.d.ts

@@ -0,0 +1,58 @@
+import type { BlockingDecision, BlockingDecisionChoice, BlockingDecisionKind, BlockingDecisionStatus, DecisionOwner, GuardResponseSubset } from '../shared/types.js';
+export type BlockingDecisionFailReason = 'resolver_missing' | 'session_locked' | 'terminal_without_choice';
+export interface CreateBlockingDecisionInput {
+    sessionId: string;
+    owner?: DecisionOwner;
+    kind: BlockingDecisionKind;
+    toolName: string;
+    resourceId: string;
+    resourceLabel: string;
+    reason: string;
+    vgeResult: GuardResponseSubset;
+    timeoutMs: number;
+    resolverStaleMs: number;
+}
+export type CreateOrJoinBlockingDecisionResult = {
+    type: 'waiting';
+    decisionId: string;
+    decision: BlockingDecision;
+    deduped: boolean;
+} | {
+    type: 'fail_closed';
+    reason: 'resolver_missing' | 'session_locked';
+    decision: BlockingDecision;
+};
+export interface DecisionWaitResult {
+    decision: BlockingDecision;
+    status: BlockingDecisionStatus;
+    choice?: BlockingDecisionChoice;
+    failClosedReason?: BlockingDecisionFailReason;
+}
+type DecisionStreamCallback = (eventName: string, payload: unknown) => void;
+export declare function hasActiveDecisionResolver(staleMs: number, sessionId?: string): boolean;
+export declare function sweepExpiredBlockingDecisions(now?: number): number;
+export declare function sweepExpiredBlockingDecisionsForTests(now?: number): number;
+export declare function heartbeatResolver(clientId: string, sessionId?: string | null, now?: number): void;
+export declare function resolverStatus(staleMs: number): {
+    active: boolean;
+    activeClients: number;
+    pendingDecisionCount: number;
+    staleAfterMs: number;
+};
+export declare function createOrJoinBlockingDecision(input: CreateBlockingDecisionInput): CreateOrJoinBlockingDecisionResult;
+export declare function waitForDecision(decisionId: string): Promise<DecisionWaitResult>;
+export declare function resolveDecision(decisionId: string, choice: BlockingDecisionChoice, clientId: string): {
+    ok: true;
+    decision: BlockingDecision;
+} | {
+    ok: false;
+    status: 404 | 409;
+    error: string;
+};
+export declare function getPendingDecisions(): BlockingDecision[];
+export declare function pendingDecisionsForResolver(clientId: string): BlockingDecision[];
+export declare function subscribeDecisionStream(clientId: string, callback: DecisionStreamCallback): () => void;
+export declare function cleanupPersistedBlockingDecisionsOnStartup(): void;
+export declare function resetDecisionBrokerForTests(): void;
+export {};
+//# sourceMappingURL=decision-broker.d.ts.map

package/dist/daemon/decision-broker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-broker.d.ts","sourceRoot":"","sources":["../../src/daemon/decision-broker.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,EACtB,aAAa,EACb,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAmB5B,MAAM,MAAM,0BAA0B,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,yBAAyB,CAAC;AAE3G,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,oBAAoB,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,mBAAmB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,kCAAkC,GAC1C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACrF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,kBAAkB,GAAG,gBAAgB,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAEvG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;CAC/C;AAUD,KAAK,sBAAsB,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;AA6I5E,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAMtF;AAcD,wBAAgB,6BAA6B,CAAC,GAAG,SAAa,GAAG,MAAM,CAGtE;AAED,wBAAgB,qCAAqC,CAAC,GAAG,SAAa,GAAG,MAAM,CAE9E;AA6BD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,GAAE,MAAM,GAAG,IAAW,EAAE,GAAG,SAAa,GAAG,IAAI,CAM3G;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG;IAC/C,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;CACtB,CAQA;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,2BAA2B,GAAG,kCAAkC,CAgCnH;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAgB/E;AAED,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,sBAAsB,EAC9B,QAAQ,EAAE,MAAM,GACf;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAmC5F;AAED,wBAAgB,mBAAmB,IAAI,gBAAgB,EAAE,CAIxD;AAED,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAEhF;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,sBAAsB,GAAG,MAAM,IAAI,CAStG;AAED,wBAAgB,0CAA0C,IAAI,IAAI,CAiBjE;AAED,wBAAgB,2BAA2B,IAAI,IAAI,CAUlD"}

package/dist/daemon/decision-broker.js

@@ -0,0 +1,340 @@
+import * as crypto from 'crypto';
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { logBlockingDecisionCreated, logBlockingDecisionDeduped, logBlockingDecisionDroppedOnRestart, logBlockingDecisionConflict, logBlockingDecisionResolverMissing, logBlockingDecisionResolved, } from './audit-logger.js';
+import { decisionOwnerKey, sessionDecisionOwner } from './decision-owner.js';
+import { finishPendingDecision } from './decision-transition.js';
+import { nextDecisionCreationSequence } from './active-conversation-decisions.js';
+import { writePrivateFileAtomicSync } from '../shared/private-file.js';
+import { recordDecisionInvariantViolation, recordDecisionResolverMissing, setInlineResolverQueueDepth, } from './decision-metrics.js';
+const decisionsById = new Map();
+const activeByDedupKey = new Map();
+const resolverHeartbeats = new Map();
+const streamClients = new Map();
+const resolverByDecisionId = new Map();
+const RESOLVED_DECISION_RETENTION_MS = 60_000;
+function configDir() {
+    return process.env['VGE_CC_GUARD_CONFIG_DIR'] ?? path.join(os.homedir(), '.vge-cc-guard');
+}
+function snapshotPath() {
+    return path.join(configDir(), 'blocking-decisions.json');
+}
+function decisionStatusFromChoice(choice) {
+    if (choice === 'allow_once')
+        return 'resolved_allow_once';
+    if (choice === 'allow_session')
+        return 'resolved_allow_session';
+    return 'resolved_block';
+}
+function branchScores(vgeResult) {
+    return {
+        heuristics: vgeResult.branches.heuristics?.score ?? 0,
+        semantic: vgeResult.branches.semantic?.score ?? 0,
+        llmGuard: vgeResult.branches.llmGuard?.score ?? 0,
+    };
+}
+function makeDecision(input, status = 'pending') {
+    const owner = input.owner ?? sessionDecisionOwner(input.sessionId);
+    const ownerKey = decisionOwnerKey(owner);
+    const now = Date.now();
+    return {
+        decisionId: `dec_${crypto.randomUUID()}`,
+        dedupKey: `${ownerKey}:${input.resourceId}`,
+        sessionId: input.sessionId,
+        owner,
+        kind: input.kind,
+        toolName: input.toolName,
+        resourceId: input.resourceId,
+        resourceLabel: input.resourceLabel,
+        reason: input.reason,
+        createdAt: now,
+        creationSequence: nextDecisionCreationSequence(),
+        expiresAt: now + input.timeoutMs,
+        status,
+        vge: {
+            id: input.vgeResult.id ?? null,
+            decision: input.vgeResult.localFallbackReason ? null : input.vgeResult.decision,
+            arbiterSignal: input.vgeResult.localFallbackReason ? undefined : input.vgeResult.arbiterSignal,
+            ruleAction: input.vgeResult.localFallbackReason ? undefined : input.vgeResult.ruleAction,
+            score: input.vgeResult.score,
+            categories: input.vgeResult.categories,
+            blockMessage: input.vgeResult.blockMessage,
+            branches: branchScores(input.vgeResult),
+            origin: input.vgeResult.localFallbackReason ? 'local_fallback' : 'vge',
+        },
+    };
+}
+function writeSnapshot() {
+    const pending = [...decisionsById.values()]
+        .filter((record) => record.decision.status === 'pending')
+        .map((record) => snapshotDecision(record.decision));
+    fs.mkdirSync(configDir(), { recursive: true });
+    writePrivateFileAtomicSync(snapshotPath(), JSON.stringify({ pending }, null, 2));
+}
+function snapshotDecision(decision) {
+    return { ...decision, resourceLabel: decision.resourceId };
+}
+function safeWriteSnapshot() {
+    try {
+        writeSnapshot();
+    }
+    catch {
+        // Audit is the source of truth; snapshot persistence is best-effort recovery aid.
+    }
+}
+function isBlockingDecisionPayload(payload) {
+    return (typeof payload === 'object' &&
+        payload !== null &&
+        'decisionId' in payload &&
+        'status' in payload);
+}
+function refreshResolverQueueDepth() {
+    setInlineResolverQueueDepth(getPendingDecisions().length);
+}
+function assignDecisionToResolver(clientId, decision) {
+    if (decision.status !== 'pending')
+        return false;
+    const resolver = resolverHeartbeats.get(clientId);
+    if (resolver?.sessionId && resolver.sessionId !== decision.sessionId)
+        return false;
+    const currentClientId = resolverByDecisionId.get(decision.decisionId);
+    if (currentClientId && streamClients.has(currentClientId))
+        return currentClientId === clientId;
+    resolverByDecisionId.set(decision.decisionId, clientId);
+    return true;
+}
+function releaseResolverAssignments(clientId) {
+    const released = [];
+    for (const [decisionId, assignedClientId] of resolverByDecisionId) {
+        if (assignedClientId !== clientId)
+            continue;
+        resolverByDecisionId.delete(decisionId);
+        const record = decisionsById.get(decisionId);
+        if (record?.decision.status === 'pending')
+            released.push(record.decision);
+    }
+    refreshResolverQueueDepth();
+    return released;
+}
+function emit(eventName, payload) {
+    if (eventName === 'blocking_decision' && isBlockingDecisionPayload(payload)) {
+        for (const [clientId, client] of streamClients) {
+            if (assignDecisionToResolver(clientId, payload))
+                client(eventName, payload);
+        }
+        return;
+    }
+    for (const client of streamClients.values())
+        client(eventName, payload);
+}
+function cleanupResolverHeartbeats(staleMs, now = Date.now()) {
+    for (const [clientId, heartbeat] of resolverHeartbeats) {
+        if (now - heartbeat.lastSeen > staleMs)
+            resolverHeartbeats.delete(clientId);
+    }
+}
+export function hasActiveDecisionResolver(staleMs, sessionId) {
+    cleanupResolverHeartbeats(staleMs);
+    for (const heartbeat of resolverHeartbeats.values()) {
+        if (!heartbeat.sessionId || !sessionId || heartbeat.sessionId === sessionId)
+            return true;
+    }
+    return false;
+}
+function scheduleResolvedRecordPrune(record) {
+    if (record.pruneTimer)
+        clearTimeout(record.pruneTimer);
+    record.pruneTimer = setTimeout(() => {
+        const current = decisionsById.get(record.decision.decisionId);
+        if (current === record && current.decision.status !== 'pending') {
+            decisionsById.delete(record.decision.decisionId);
+            safeWriteSnapshot();
+        }
+    }, RESOLVED_DECISION_RETENTION_MS);
+    record.pruneTimer.unref?.();
+}
+export function sweepExpiredBlockingDecisions(now = Date.now()) {
+    void now;
+    return 0;
+}
+export function sweepExpiredBlockingDecisionsForTests(now = Date.now()) {
+    return sweepExpiredBlockingDecisions(now);
+}
+function finishRecord(record, result) {
+    const transition = finishPendingDecision(record.decision, result.status);
+    if (!transition.won) {
+        recordDecisionInvariantViolation('terminal_transition_lost');
+        return null;
+    }
+    record.choice = result.choice;
+    record.failClosedReason = result.failClosedReason;
+    activeByDedupKey.delete(record.decision.dedupKey);
+    resolverByDecisionId.delete(record.decision.decisionId);
+    const fullResult = { ...result, decision: record.decision };
+    const waiters = [...record.waiters];
+    record.waiters = [];
+    for (const waiter of waiters)
+        waiter(fullResult);
+    safeWriteSnapshot();
+    emit('decision_resolved', {
+        decision_id: record.decision.decisionId,
+        status: record.decision.status,
+    });
+    scheduleResolvedRecordPrune(record);
+    refreshResolverQueueDepth();
+    return fullResult;
+}
+export function heartbeatResolver(clientId, sessionId = null, now = Date.now()) {
+    const existing = resolverHeartbeats.get(clientId);
+    resolverHeartbeats.set(clientId, {
+        lastSeen: now,
+        sessionId: sessionId ?? existing?.sessionId ?? null,
+    });
+}
+export function resolverStatus(staleMs) {
+    cleanupResolverHeartbeats(staleMs);
+    return {
+        active: resolverHeartbeats.size > 0,
+        activeClients: resolverHeartbeats.size,
+        pendingDecisionCount: getPendingDecisions().length,
+        staleAfterMs: staleMs,
+    };
+}
+export function createOrJoinBlockingDecision(input) {
+    const owner = input.owner ?? sessionDecisionOwner(input.sessionId);
+    const ownerKey = decisionOwnerKey(owner);
+    const dedupKey = `${ownerKey}:${input.resourceId}`;
+    const existingForResource = activeByDedupKey.get(dedupKey);
+    if (existingForResource) {
+        const record = decisionsById.get(existingForResource);
+        if (record) {
+            logBlockingDecisionDeduped(record.decision);
+            return { type: 'waiting', decisionId: record.decision.decisionId, decision: record.decision, deduped: true };
+        }
+    }
+    if (!hasActiveDecisionResolver(input.resolverStaleMs, input.sessionId)) {
+        const decision = makeDecision(input, 'resolver_missing_fail_closed');
+        recordDecisionResolverMissing(decision);
+        logBlockingDecisionResolverMissing(decision);
+        return { type: 'fail_closed', reason: 'resolver_missing', decision };
+    }
+    const decision = makeDecision(input);
+    const record = {
+        decision,
+        waiters: [],
+    };
+    decisionsById.set(decision.decisionId, record);
+    activeByDedupKey.set(dedupKey, decision.decisionId);
+    logBlockingDecisionCreated(decision);
+    safeWriteSnapshot();
+    refreshResolverQueueDepth();
+    emit('blocking_decision', decision);
+    return { type: 'waiting', decisionId: decision.decisionId, decision, deduped: false };
+}
+export function waitForDecision(decisionId) {
+    const record = decisionsById.get(decisionId);
+    if (!record) {
+        return Promise.reject(new Error(`unknown decision: ${decisionId}`));
+    }
+    if (record.decision.status !== 'pending') {
+        return Promise.resolve({
+            decision: record.decision,
+            status: record.decision.status,
+            choice: record.choice,
+            failClosedReason: record.failClosedReason,
+        });
+    }
+    return new Promise((resolve) => {
+        record.waiters.push(resolve);
+    });
+}
+export function resolveDecision(decisionId, choice, clientId) {
+    const record = decisionsById.get(decisionId);
+    if (!record)
+        return { ok: false, status: 404, error: 'decision not found' };
+    if (record.decision.status !== 'pending') {
+        logBlockingDecisionConflict({
+            decision: record.decision,
+            clientId,
+            currentStatus: record.decision.status,
+            elapsedMs: Date.now() - record.decision.createdAt,
+            reason: 'decision_already_terminal',
+            resolvedBy: 'inline_resolver',
+        });
+        return { ok: false, status: 409, error: `decision already ${record.decision.status}` };
+    }
+    const elapsedMs = Date.now() - record.decision.createdAt;
+    const result = finishRecord(record, { status: decisionStatusFromChoice(choice), choice });
+    if (!result) {
+        logBlockingDecisionConflict({
+            decision: record.decision,
+            clientId,
+            currentStatus: record.decision.status,
+            elapsedMs,
+            reason: 'decision_already_terminal',
+            resolvedBy: 'inline_resolver',
+        });
+        return { ok: false, status: 409, error: `decision already ${record.decision.status}` };
+    }
+    logBlockingDecisionResolved({
+        decision: result.decision,
+        choice,
+        clientId,
+        elapsedMs,
+        resolverSurface: 'resolver_stream',
+    });
+    return { ok: true, decision: result.decision };
+}
+export function getPendingDecisions() {
+    return [...decisionsById.values()]
+        .filter((record) => record.decision.status === 'pending')
+        .map((record) => record.decision);
+}
+export function pendingDecisionsForResolver(clientId) {
+    return getPendingDecisions().filter((decision) => assignDecisionToResolver(clientId, decision));
+}
+export function subscribeDecisionStream(clientId, callback) {
+    streamClients.set(clientId, callback);
+    return () => {
+        if (streamClients.get(clientId) === callback) {
+            streamClients.delete(clientId);
+            const released = releaseResolverAssignments(clientId);
+            for (const decision of released)
+                emit('blocking_decision', decision);
+        }
+    };
+}
+export function cleanupPersistedBlockingDecisionsOnStartup() {
+    const file = snapshotPath();
+    if (!fs.existsSync(file))
+        return;
+    try {
+        const raw = JSON.parse(fs.readFileSync(file, 'utf-8'));
+        const pending = Array.isArray(raw.pending) ? raw.pending : [];
+        for (const item of pending) {
+            const decision = item;
+            if (decision?.status === 'pending') {
+                decision.status = 'dropped_on_restart';
+                logBlockingDecisionDroppedOnRestart(decision);
+            }
+        }
+        writePrivateFileAtomicSync(file, JSON.stringify({ pending: [] }, null, 2));
+    }
+    catch {
+        writePrivateFileAtomicSync(file, JSON.stringify({ pending: [] }, null, 2));
+    }
+}
+export function resetDecisionBrokerForTests() {
+    for (const record of decisionsById.values()) {
+        if (record.pruneTimer)
+            clearTimeout(record.pruneTimer);
+    }
+    decisionsById.clear();
+    activeByDedupKey.clear();
+    resolverHeartbeats.clear();
+    streamClients.clear();
+    resolverByDecisionId.clear();
+    refreshResolverQueueDepth();
+}
+//# sourceMappingURL=decision-broker.js.map