@vigil-guard/vge-cc-guard 0.9.0-beta.1

package/dist/daemon/path-deny.js

@@ -0,0 +1,88 @@
+import fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { pathStartsWith } from '../shared/path-match.js';
+export function expandTilde(p, opts = {}) {
+    if (p === '~' || p.startsWith('~/') || p.startsWith('~\\')) {
+        const platform = opts.platform ?? process.platform;
+        const pathApi = platform === 'win32' ? path.win32 : path.posix;
+        const tail = p.slice(1).replace(/^[\\/]+/, '');
+        return pathApi.join(opts.homeDir ?? os.homedir(), tail);
+    }
+    return p;
+}
+// Patterns from PRD §7.11 — all 12 (superset of Sprint 2 "8 fixed patterns")
+const HOME_PREFIX_SEGMENTS = [
+    ['.ssh'],
+    ['.aws', 'credentials'],
+    ['.aws', 'config'],
+    ['.kube', 'config'],
+    ['.config', 'gcloud'],
+    ['.gcp'],
+];
+const BASENAME_SUFFIX = ['.env'];
+const BASENAME_STARTS_WITH = ['id_rsa', 'id_ed25519', 'id_ecdsa'];
+const BASENAME_CONTAINS = ['credentials', 'secrets'];
+// User-facing display of the deny list. The TUI's SecurityBaseline screen
+// renders this when the user toggles credential_protection off — they need to
+// see exactly what they're about to expose. Keep in sync with the match logic
+// above (regression test in path-deny-display.test.ts asserts the count).
+export const PATH_DENY_PATTERNS_DISPLAY = [
+    '~/.env, *.env (any name ending in .env)',
+    '~/.ssh/* (everything under .ssh/)',
+    '~/.aws/credentials, ~/.aws/config',
+    '~/.kube/config',
+    '~/.config/gcloud/*, ~/.gcp/*',
+    'id_rsa*, id_ed25519*, id_ecdsa* (any path)',
+    '*credentials*, *secrets* (in filename)',
+];
+function pathApiFor(platform) {
+    return platform === 'win32' ? path.win32 : path.posix;
+}
+function credentialHomePrefixes(opts) {
+    const pathApi = pathApiFor(opts.platform);
+    const prefixes = HOME_PREFIX_SEGMENTS.map((segments) => pathApi.join(opts.homeDir, ...segments));
+    if (opts.platform === 'win32') {
+        const appData = opts.env['APPDATA'] ?? pathApi.join(opts.homeDir, 'AppData', 'Roaming');
+        prefixes.push(pathApi.join(appData, 'gcloud'));
+    }
+    return prefixes;
+}
+function matchesDenyList(resolvedPath, opts) {
+    const pathApi = pathApiFor(opts.platform);
+    const base = pathApi.basename(resolvedPath).toLowerCase();
+    for (const prefix of credentialHomePrefixes(opts)) {
+        if (pathStartsWith(resolvedPath, prefix, { platform: opts.platform }))
+            return true;
+    }
+    if (BASENAME_SUFFIX.some((suffix) => base.endsWith(suffix)))
+        return true;
+    // id_rsa*, id_ed25519*, id_ecdsa* — basename prefix match
+    for (const prefix of BASENAME_STARTS_WITH) {
+        if (base.startsWith(prefix))
+            return true;
+    }
+    // *credentials*, *secrets* — basename contains match
+    for (const fragment of BASENAME_CONTAINS) {
+        if (base.includes(fragment))
+            return true;
+    }
+    return false;
+}
+export function checkPath(rawPath, opts = {}) {
+    const platform = opts.platform ?? process.platform;
+    const pathApi = pathApiFor(platform);
+    const homeDir = opts.homeDir ?? os.homedir();
+    const env = opts.env ?? process.env;
+    const expanded = expandTilde(rawPath, { ...opts, platform, homeDir, env });
+    const resolved = pathApi.resolve(expanded);
+    let finalPath = resolved;
+    try {
+        finalPath = (opts.realpathSync ?? fs.realpathSync)(resolved);
+    }
+    catch {
+        // ENOENT or broken symlink — use pre-realpath result
+    }
+    return { denied: matchesDenyList(finalPath, { platform, homeDir, env }), resolvedPath: finalPath };
+}
+//# sourceMappingURL=path-deny.js.map

package/dist/daemon/path-deny.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-deny.js","sourceRoot":"","sources":["../../src/daemon/path-deny.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AASzD,MAAM,UAAU,WAAW,CAAC,CAAS,EAAE,OAAwB,EAAE;IAC/D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QACnD,MAAM,OAAO,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/D,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,6EAA6E;AAC7E,MAAM,oBAAoB,GAAG;IAC3B,CAAC,MAAM,CAAC;IACR,CAAC,MAAM,EAAE,aAAa,CAAC;IACvB,CAAC,MAAM,EAAE,QAAQ,CAAC;IAClB,CAAC,OAAO,EAAE,QAAQ,CAAC;IACnB,CAAC,SAAS,EAAE,QAAQ,CAAC;IACrB,CAAC,MAAM,CAAC;CACA,CAAC;AAEX,MAAM,eAAe,GAAG,CAAC,MAAM,CAAU,CAAC;AAE1C,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;AAElE,MAAM,iBAAiB,GAAG,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;AAErD,0EAA0E;AAC1E,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,yCAAyC;IACzC,mCAAmC;IACnC,mCAAmC;IACnC,gBAAgB;IAChB,8BAA8B;IAC9B,4CAA4C;IAC5C,wCAAwC;CACzC,CAAC;AAEF,SAAS,UAAU,CAAC,QAAyB;IAC3C,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;AACxD,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAqE;IACnG,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IACjG,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACxF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,YAAoB,EAAE,IAAqE;IAClH,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;IAE1D,KAAK,MAAM,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,IAAI,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;IACrF,CAAC;IAED,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzE,0DAA0D;IAC1D,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IAED,qDAAqD;IACrD,KAAK,MAAM,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,OAAe,EACf,OAAwB,EAAE;IAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE3C,IAAI,SAAS,GAAG,QAAQ,CAAC;IACzB,IAAI,CAAC;QACH,SAAS,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;IACvD,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACrG,CAAC"}

package/dist/daemon/posttool-decision-escrow.d.ts

@@ -0,0 +1,42 @@
+import type { BlockingDecision, BlockingDecisionChoice, DecisionOwner, GuardResponseSubset, RouterOutcome } from '../shared/types.js';
+export type EscrowPromptDecision = {
+    matched: false;
+} | {
+    matched: true;
+    ccOutput: {
+        decision?: 'block';
+        reason?: string;
+        continue?: false;
+        stopReason?: string;
+        hookSpecificOutput?: {
+            hookEventName: 'UserPromptSubmit';
+            additionalContext?: string;
+        };
+    } | null;
+};
+export declare function createPostToolDecisionEscrow(params: {
+    contentBytes: number;
+    contentHash: string;
+    decision: BlockingDecision;
+    resourceId: string;
+    routerOutcome: RouterOutcome;
+    toolInput: Record<string, unknown>;
+    toolName: string;
+    vgeResult: GuardResponseSubset;
+}): BlockingDecision;
+export declare function renderPostToolEscrowStopReason(decision: BlockingDecision): string;
+export declare function renderActivePostToolDecisionReask(sessionId: string): string | null;
+export declare function renderActivePostToolDecisionForParentAgent(sessionId: string): string | null;
+export declare function activePostToolEscrowCountForSession(sessionId: string): number;
+export declare function activePostToolEscrowDecisionsForSession(sessionId: string): BlockingDecision[];
+export declare function renderActivePostToolDecisionReaskForOwner(owner: DecisionOwner): string | null;
+export declare function hasPostToolEscrowDecision(decisionId: string): boolean;
+export declare function resolvePostToolEscrowCommand(sessionId: string, command: {
+    choice: BlockingDecisionChoice;
+    decisionId: string | null;
+    residual: string;
+}): EscrowPromptDecision;
+export declare function resolvePostToolEscrowFromPrompt(sessionId: string, prompt: string): EscrowPromptDecision;
+export declare function resetPostToolDecisionEscrowForTests(): void;
+export declare function clearPostToolDecisionEscrowForSession(sessionId: string): void;
+//# sourceMappingURL=posttool-decision-escrow.d.ts.map

package/dist/daemon/posttool-decision-escrow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"posttool-decision-escrow.d.ts","sourceRoot":"","sources":["../../src/daemon/posttool-decision-escrow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AA0CtI,MAAM,MAAM,oBAAoB,GAC5B;IAAE,OAAO,EAAE,KAAK,CAAA;CAAE,GAClB;IACE,OAAO,EAAE,IAAI,CAAC;IACd,QAAQ,EAAE;QACR,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,KAAK,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,kBAAkB,CAAC,EAAE;YACnB,aAAa,EAAE,kBAAkB,CAAC;YAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH,GAAG,IAAI,CAAC;CACV,CAAC;AA8BN,wBAAgB,4BAA4B,CAAC,MAAM,EAAE;IACnD,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,mBAAmB,CAAC;CAChC,GAAG,gBAAgB,CAgDnB;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CAoBjF;AAED,wBAAgB,iCAAiC,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOlF;AAED,wBAAgB,0CAA0C,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA2B3F;AAiBD,wBAAgB,mCAAmC,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAG7E;AAED,wBAAgB,uCAAuC,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAG7F;AAED,wBAAgB,yCAAyC,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAM7F;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAGrE;AAaD,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE;IAAE,MAAM,EAAE,sBAAsB,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACvF,oBAAoB,CA2HtB;AAED,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,oBAAoB,CAqCvG;AAeD,wBAAgB,mCAAmC,IAAI,IAAI,CAM1D;AAED,wBAAgB,qCAAqC,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAG7E"}

package/dist/daemon/posttool-decision-escrow.js

@@ -0,0 +1,349 @@
+import { addResourceAllow, addResourceBlock } from './session-state.js';
+import { logBlockingDecisionCapacityEvicted, logBlockingDecisionCreated, logBlockingDecisionDeduped, logBlockingDecisionReaskEmitted, logBlockingDecisionResolved, } from './audit-logger.js';
+import { clearPostToolPendingDecision, grantPostToolLocalFallbackAllowSession, grantPostToolAllowOnce, registerPostToolPendingDecision, requireReadReplayFromToolInput, resetPostToolDecisionStateForTests, } from './posttool-decision-state.js';
+import { blockUserPromptWithReason, parseConversationDecisionReply, renderConversationApprovalContext, renderConversationDecisionReask, renderConversationDecisionPrompt, } from './conversation-decision-prompt.js';
+import { decisionOwnerKey, decisionOwnerFromDecision } from './decision-owner.js';
+import { finishPendingDecision } from './decision-transition.js';
+const MAX_ESCROWS = 100;
+const escrowsById = new Map();
+const escrowsByDedupKey = new Map();
+const parentAgentNoticeShown = new Set();
+const decisionPromptShown = new Set();
+function removeRecord(id) {
+    const record = escrowsById.get(id);
+    if (!record)
+        return undefined;
+    escrowsById.delete(id);
+    escrowsByDedupKey.delete(record.decision.dedupKey);
+    parentAgentNoticeShown.delete(id);
+    decisionPromptShown.delete(id);
+    clearPostToolPendingDecision(id);
+    return record;
+}
+function evictCapacityRecord(id, record) {
+    const transition = finishPendingDecision(record.decision, 'capacity_evicted');
+    if (transition.won)
+        logBlockingDecisionCapacityEvicted(record.decision);
+    removeRecord(id);
+}
+function pruneExpired(now = Date.now()) {
+    void now;
+    // Conversation-native PostTool decisions wait for an explicit user decision.
+    // The timestamp remains in audit/snapshots, but it does not auto-resolve.
+}
+export function createPostToolDecisionEscrow(params) {
+    pruneExpired();
+    while (escrowsById.size >= MAX_ESCROWS) {
+        const oldest = [...escrowsById.entries()].sort((a, b) => a[1].createdAt - b[1].createdAt)[0];
+        if (!oldest)
+            break;
+        evictCapacityRecord(oldest[0], oldest[1]);
+    }
+    const existingForResource = escrowsByDedupKey.get(params.decision.dedupKey);
+    if (existingForResource) {
+        const existing = escrowsById.get(existingForResource);
+        if (existing) {
+            logBlockingDecisionDeduped(existing.decision);
+            return existing.decision;
+        }
+        escrowsByDedupKey.delete(params.decision.dedupKey);
+    }
+    const expiresAt = params.decision.expiresAt;
+    const decision = {
+        ...params.decision,
+        status: 'pending',
+        expiresAt,
+    };
+    escrowsById.set(decision.decisionId, {
+        contentBytes: params.contentBytes,
+        contentHash: params.contentHash,
+        createdAt: Date.now(),
+        decision,
+        resourceId: params.resourceId,
+        routerOutcome: params.routerOutcome,
+        sessionId: decision.sessionId,
+        toolInput: params.toolInput,
+        toolName: params.toolName,
+        vgeResult: params.vgeResult,
+    });
+    escrowsByDedupKey.set(decision.dedupKey, decision.decisionId);
+    registerPostToolPendingDecision({
+        decisionId: decision.decisionId,
+        expiresAt: decision.expiresAt,
+        owner: decision.owner,
+        resourceId: params.resourceId,
+        sessionId: decision.sessionId,
+        toolName: params.toolName,
+    });
+    logBlockingDecisionCreated(decision, { resolverSurface: 'userprompt_text' });
+    return decision;
+}
+export function renderPostToolEscrowStopReason(decision) {
+    const current = currentEscrowForSession(decision.sessionId);
+    if (current?.decision.decisionId !== decision.decisionId) {
+        return [
+            'VGE Agent Guard queued another PostTool decision behind the active decision.',
+            `Queued decision ID: ${decision.decisionId}`,
+            'Resolve the active VGE decision first. This queued decision will be shown next.',
+            'Raw tool output is quarantined until its own decision is resolved.',
+        ].join('\n');
+    }
+    if (decisionPromptShown.has(decision.decisionId)) {
+        return [
+            'A VGE decision prompt for this PostTool output is already active in this session.',
+            `Decision ID: ${decision.decisionId}`,
+            'Reply 1, 2, or 3 once in the parent session to resolve it.',
+        ].join('\n');
+    }
+    decisionPromptShown.add(decision.decisionId);
+    return renderConversationDecisionPrompt(decision);
+}
+export function renderActivePostToolDecisionReask(sessionId) {
+    pruneExpired();
+    const active = currentEscrowForSession(sessionId);
+    if (!active)
+        return null;
+    logBlockingDecisionReaskEmitted(active.decision);
+    // Re-asking is observational only. The original expiresAt remains unchanged.
+    return renderConversationDecisionReask(active.decision);
+}
+export function renderActivePostToolDecisionForParentAgent(sessionId) {
+    pruneExpired();
+    const active = activeEscrowsForSession(sessionId);
+    const current = active[0];
+    if (!current)
+        return null;
+    const decision = current.decision;
+    const queuedCount = Math.max(active.length - 1, 0);
+    if (parentAgentNoticeShown.has(decision.decisionId)) {
+        const lines = [
+            'A VGE decision prompt for this subagent output is already active in this session.',
+            `Decision ID: ${decision.decisionId}`,
+            'Reply 1, 2, or 3 once in the parent session to resolve it.',
+            'Additional parallel Agent results stay withheld until then.',
+        ];
+        if (queuedCount > 0)
+            lines.push(`${queuedCount} queued PostTool decision(s) will be shown after this one.`);
+        return lines.join('\n');
+    }
+    parentAgentNoticeShown.add(decision.decisionId);
+    logBlockingDecisionReaskEmitted(decision);
+    if (queuedCount === 0)
+        return renderConversationDecisionPrompt(decision);
+    return [
+        renderConversationDecisionPrompt(decision),
+        '',
+        `${queuedCount} queued PostTool decision(s) will be shown after this one.`,
+    ].join('\n');
+}
+function activeEscrowsForSession(sessionId) {
+    return [...escrowsById.values()]
+        .filter((record) => record.sessionId === sessionId)
+        .sort((a, b) => a.createdAt - b.createdAt);
+}
+function currentEscrowForSession(sessionId) {
+    return activeEscrowsForSession(sessionId)[0] ?? null;
+}
+function activeEscrowsForOwner(owner) {
+    const ownerKey = decisionOwnerKey(owner);
+    return [...escrowsById.values()].filter((record) => decisionOwnerKey(decisionOwnerFromDecision(record.decision)) === ownerKey);
+}
+export function activePostToolEscrowCountForSession(sessionId) {
+    pruneExpired();
+    return activeEscrowsForSession(sessionId).length;
+}
+export function activePostToolEscrowDecisionsForSession(sessionId) {
+    pruneExpired();
+    return activeEscrowsForSession(sessionId).map((record) => record.decision);
+}
+export function renderActivePostToolDecisionReaskForOwner(owner) {
+    pruneExpired();
+    const active = activeEscrowsForOwner(owner);
+    if (active.length === 0)
+        return null;
+    logBlockingDecisionReaskEmitted(active[0].decision);
+    return renderConversationDecisionReask(active[0].decision);
+}
+export function hasPostToolEscrowDecision(decisionId) {
+    pruneExpired();
+    return escrowsById.has(decisionId);
+}
+function approvedContext(record, choice, residual) {
+    return renderConversationApprovalContext({
+        choice: choice === 'allow_session' ? 'allow_session' : 'allow_once',
+        contentHash: record.contentHash,
+        contentSizeBytes: record.contentBytes,
+        decision: record.decision,
+        residual,
+        routerOutcome: record.routerOutcome,
+    });
+}
+export function resolvePostToolEscrowCommand(sessionId, command) {
+    pruneExpired();
+    let decisionId = command.decisionId;
+    if (!decisionId) {
+        const current = currentEscrowForSession(sessionId);
+        if (!current) {
+            return {
+                matched: true,
+                ccOutput: blockUserPromptWithReason('VGE Agent Guard: there is no active PostTool decision to block.'),
+            };
+        }
+        decisionId = current.decision.decisionId;
+    }
+    const record = escrowsById.get(decisionId);
+    if (!record) {
+        return {
+            matched: true,
+            ccOutput: blockUserPromptWithReason(`VGE Agent Guard: decision ${decisionId} is no longer available. Re-run the tool if you still need it.`),
+        };
+    }
+    if (record.sessionId !== sessionId) {
+        return {
+            matched: true,
+            ccOutput: blockUserPromptWithReason(`VGE Agent Guard: decision ${decisionId} belongs to a different session.`),
+        };
+    }
+    const resolvedStatus = command.choice === 'allow_once'
+        ? 'resolved_allow_once'
+        : command.choice === 'allow_session'
+            ? 'resolved_allow_session'
+            : 'resolved_block';
+    const transition = finishPendingDecision(record.decision, resolvedStatus);
+    if (!transition.won) {
+        return {
+            matched: true,
+            ccOutput: blockUserPromptWithReason(`VGE Agent Guard: decision ${decisionId} is no longer available. Re-run the tool if you still need it.`),
+        };
+    }
+    logBlockingDecisionResolved({
+        decision: record.decision,
+        choice: command.choice,
+        clientId: 'userprompt_escrow',
+        elapsedMs: Date.now() - record.decision.createdAt,
+        resolverSurface: 'userprompt_text',
+        originHookEvent: 'UserPromptSubmit',
+        contentHash: record.contentHash,
+        contentSizeBytes: record.contentBytes,
+        oneShotConsumed: false,
+        readReplayRequired: command.choice !== 'block' && record.toolName === 'Read',
+    });
+    if (command.choice === 'block') {
+        addResourceBlock(sessionId, record.resourceId, decisionId);
+        removeRecord(decisionId);
+        const nextPrompt = renderNextPostToolDecisionPrompt(sessionId);
+        if (nextPrompt) {
+            return {
+                matched: true,
+                ccOutput: blockUserPromptWithReason(nextPrompt),
+            };
+        }
+        return {
+            matched: true,
+            ccOutput: blockUserPromptWithReason(`VGE Agent Guard: decision ${decisionId} recorded as block. The control prompt was not sent to Claude.`),
+        };
+    }
+    if (command.choice === 'allow_session' && record.vgeResult.localFallbackReason) {
+        grantPostToolLocalFallbackAllowSession({
+            decisionId,
+            reason: record.vgeResult.localFallbackReason,
+            sessionId,
+            toolName: record.toolName,
+        });
+    }
+    else if (command.choice === 'allow_session') {
+        addResourceAllow(sessionId, record.resourceId, decisionId);
+    }
+    if (command.choice === 'allow_once') {
+        grantPostToolAllowOnce({
+            sessionId,
+            owner: record.decision.owner,
+            toolName: record.toolName,
+            resourceId: record.resourceId,
+            contentHash: record.contentHash,
+            decisionId,
+            timeoutMs: Math.max(record.decision.expiresAt - record.decision.createdAt, 1),
+        });
+    }
+    if (record.toolName === 'Read') {
+        requireReadReplayFromToolInput(sessionId, record.toolInput, decisionId, Math.max(record.decision.expiresAt - record.decision.createdAt, 1), record.decision.owner);
+    }
+    removeRecord(decisionId);
+    const nextPrompt = renderNextPostToolDecisionPrompt(sessionId);
+    if (nextPrompt) {
+        return {
+            matched: true,
+            ccOutput: blockUserPromptWithReason(nextPrompt),
+        };
+    }
+    return {
+        matched: true,
+        ccOutput: {
+            hookSpecificOutput: {
+                hookEventName: 'UserPromptSubmit',
+                additionalContext: approvedContext(record, command.choice, command.residual),
+            },
+        },
+    };
+}
+export function resolvePostToolEscrowFromPrompt(sessionId, prompt) {
+    pruneExpired();
+    const parsed = parseConversationDecisionReply(prompt);
+    if (parsed.matched && parsed.exact) {
+        return resolvePostToolEscrowCommand(sessionId, {
+            choice: parsed.choice,
+            decisionId: parsed.decisionId,
+            residual: parsed.residual,
+        });
+    }
+    const active = activeEscrowsForSession(sessionId);
+    if (active.length === 0) {
+        if (parsed.matched || parsed.looksLikeDecision) {
+            return {
+                matched: true,
+                ccOutput: blockUserPromptWithReason('VGE Agent Guard: there is no active PostTool decision to resolve.'),
+            };
+        }
+        return { matched: false };
+    }
+    if (!parsed.matched) {
+        const current = active[0];
+        logBlockingDecisionReaskEmitted(current.decision);
+        // Re-asking is observational only. The original expiresAt remains unchanged.
+        return {
+            matched: true,
+            ccOutput: blockUserPromptWithReason(renderConversationDecisionReask(current.decision)),
+        };
+    }
+    return resolvePostToolEscrowCommand(sessionId, {
+        choice: parsed.choice,
+        decisionId: active[0].decision.decisionId,
+        residual: parsed.residual,
+    });
+}
+function renderNextPostToolDecisionPrompt(sessionId) {
+    const next = currentEscrowForSession(sessionId);
+    if (!next)
+        return null;
+    decisionPromptShown.add(next.decision.decisionId);
+    logBlockingDecisionReaskEmitted(next.decision);
+    return [
+        'VGE Agent Guard recorded your decision.',
+        'Another queued VGE decision is waiting and must be resolved before the conversation can continue.',
+        '',
+        renderConversationDecisionPrompt(next.decision),
+    ].join('\n');
+}
+export function resetPostToolDecisionEscrowForTests() {
+    escrowsById.clear();
+    escrowsByDedupKey.clear();
+    parentAgentNoticeShown.clear();
+    decisionPromptShown.clear();
+    resetPostToolDecisionStateForTests();
+}
+export function clearPostToolDecisionEscrowForSession(sessionId) {
+    const decisionIds = activeEscrowsForSession(sessionId).map((record) => record.decision.decisionId);
+    for (const decisionId of decisionIds)
+        removeRecord(decisionId);
+}
+//# sourceMappingURL=posttool-decision-escrow.js.map

package/dist/daemon/posttool-decision-escrow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"posttool-decision-escrow.js","sourceRoot":"","sources":["../../src/daemon/posttool-decision-escrow.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EACL,kCAAkC,EAClC,0BAA0B,EAC1B,0BAA0B,EAC1B,+BAA+B,EAC/B,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,4BAA4B,EAC5B,sCAAsC,EACtC,sBAAsB,EACtB,+BAA+B,EAC/B,8BAA8B,EAC9B,kCAAkC,GACnC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,yBAAyB,EACzB,8BAA8B,EAC9B,iCAAiC,EACjC,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,MAAM,WAAW,GAAG,GAAG,CAAC;AA+BxB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAwB,CAAC;AACpD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;AACpD,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;AACjD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE9C,SAAS,YAAY,CAAC,EAAU;IAC9B,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvB,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnD,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/B,4BAA4B,CAAC,EAAE,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAU,EAAE,MAAoB;IAC3D,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC9E,IAAI,UAAU,CAAC,GAAG;QAAE,kCAAkC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxE,YAAY,CAAC,EAAE,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACpC,KAAK,GAAG,CAAC;IACT,6EAA6E;IAC7E,0EAA0E;AAC5E,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAS5C;IACC,YAAY,EAAE,CAAC;IACf,OAAO,WAAW,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7F,IAAI,CAAC,MAAM;YAAE,MAAM;QACnB,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5E,IAAI,mBAAmB,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACtD,IAAI,QAAQ,EAAE,CAAC;YACb,0BAA0B,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9C,OAAO,QAAQ,CAAC,QAAQ,CAAC;QAC3B,CAAC;QACD,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC5C,MAAM,QAAQ,GAAqB;QACjC,GAAG,MAAM,CAAC,QAAQ;QAClB,MAAM,EAAE,SAAS;QACjB,SAAS;KACV,CAAC;IAEF,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE;QACnC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,QAAQ;QACR,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC9D,+BAA+B,CAAC;QAC9B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC;IACH,0BAA0B,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC7E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,QAA0B;IACvE,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,OAAO,EAAE,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QACzD,OAAO;YACL,8EAA8E;YAC9E,uBAAuB,QAAQ,CAAC,UAAU,EAAE;YAC5C,iFAAiF;YACjF,oEAAoE;SACrE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACjD,OAAO;YACL,mFAAmF;YACnF,gBAAgB,QAAQ,CAAC,UAAU,EAAE;YACrC,4DAA4D;SAC7D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IAED,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,gCAAgC,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,SAAiB;IACjE,YAAY,EAAE,CAAC;IACf,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,+BAA+B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjD,6EAA6E;IAC7E,OAAO,+BAA+B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,0CAA0C,CAAC,SAAiB;IAC1E,YAAY,EAAE,CAAC;IACf,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,IAAI,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG;YACZ,mFAAmF;YACnF,gBAAgB,QAAQ,CAAC,UAAU,EAAE;YACrC,4DAA4D;YAC5D,6DAA6D;SAC9D,CAAC;QACF,IAAI,WAAW,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,4DAA4D,CAAC,CAAC;QAC5G,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAChD,+BAA+B,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,WAAW,KAAK,CAAC;QAAE,OAAO,gCAAgC,CAAC,QAAQ,CAAC,CAAC;IACzE,OAAO;QACL,gCAAgC,CAAC,QAAQ,CAAC;QAC1C,EAAE;QACF,GAAG,WAAW,4DAA4D;KAC3E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,SAAiB;IAChD,OAAO,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;SAC7B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC;SAClD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,uBAAuB,CAAC,SAAiB;IAChD,OAAO,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACvD,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAoB;IACjD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,yBAAyB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;AACjI,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,SAAiB;IACnE,YAAY,EAAE,CAAC;IACf,OAAO,uBAAuB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,uCAAuC,CAAC,SAAiB;IACvE,YAAY,EAAE,CAAC;IACf,OAAO,uBAAuB,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,yCAAyC,CAAC,KAAoB;IAC5E,YAAY,EAAE,CAAC;IACf,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,+BAA+B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACpD,OAAO,+BAA+B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAAkB;IAC1D,YAAY,EAAE,CAAC;IACf,OAAO,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,eAAe,CAAC,MAAoB,EAAE,MAA8B,EAAE,QAAgB;IAC7F,OAAO,iCAAiC,CAAC;QACvC,MAAM,EAAE,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,YAAY;QACnE,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,MAAM,CAAC,YAAY;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ;QACR,aAAa,EAAE,MAAM,CAAC,aAAa;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,SAAiB,EACjB,OAAwF;IAExF,YAAY,EAAE,CAAC;IAEf,IAAI,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,yBAAyB,CAAC,iEAAiE,CAAC;aACvG,CAAC;QACJ,CAAC;QACD,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC3C,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,yBAAyB,CAAC,6BAA6B,UAAU,gEAAgE,CAAC;SAC7I,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,yBAAyB,CAAC,6BAA6B,UAAU,kCAAkC,CAAC;SAC/G,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAClB,OAAO,CAAC,MAAM,KAAK,YAAY;QAC7B,CAAC,CAAC,qBAAqB;QACvB,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,eAAe;YAClC,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,gBAAgB,CAAC;IACzB,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC1E,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,yBAAyB,CAAC,6BAA6B,UAAU,gEAAgE,CAAC;SAC7I,CAAC;IACJ,CAAC;IACD,2BAA2B,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,mBAAmB;QAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS;QACjD,eAAe,EAAE,iBAAiB;QAClC,eAAe,EAAE,kBAAkB;QACnC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,MAAM,CAAC,YAAY;QACrC,eAAe,EAAE,KAAK;QACtB,kBAAkB,EAAE,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM;KAC7E,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/B,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAC3D,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,MAAM,UAAU,GAAG,gCAAgC,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,UAAU,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,yBAAyB,CAAC,UAAU,CAAC;aAChD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,yBAAyB,CAAC,6BAA6B,UAAU,gEAAgE,CAAC;SAC7I,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,IAAI,MAAM,CAAC,SAAS,CAAC,mBAAmB,EAAE,CAAC;QAC/E,sCAAsC,CAAC;YACrC,UAAU;YACV,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,mBAAmB;YAC5C,SAAS;YACT,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QAC9C,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACpC,sBAAsB,CAAC;YACrB,SAAS;YACT,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK;YAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,UAAU;YACV,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC/B,8BAA8B,CAC5B,SAAS,EACT,MAAM,CAAC,SAAS,EAChB,UAAU,EACV,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,EAClE,MAAM,CAAC,QAAQ,CAAC,KAAK,CACtB,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,UAAU,CAAC,CAAC;IACzB,MAAM,UAAU,GAAG,gCAAgC,CAAC,SAAS,CAAC,CAAC;IAC/D,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,yBAAyB,CAAC,UAAU,CAAC;SAChD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE;YACR,kBAAkB,EAAE;gBAClB,aAAa,EAAE,kBAAkB;gBACjC,iBAAiB,EAAE,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC;aAC7E;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,SAAiB,EAAE,MAAc;IAC/E,YAAY,EAAE,CAAC;IACf,MAAM,MAAM,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACnC,OAAO,4BAA4B,CAAC,SAAS,EAAE;YAC7C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC/C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,yBAAyB,CAAC,mEAAmE,CAAC;aACzG,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1B,+BAA+B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClD,6EAA6E;QAC7E,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,yBAAyB,CAAC,+BAA+B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;SACvF,CAAC;IACJ,CAAC;IAED,OAAO,4BAA4B,CAAC,SAAS,EAAE;QAC7C,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU;QACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gCAAgC,CAAC,SAAiB;IACzD,MAAM,IAAI,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAClD,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO;QACL,yCAAyC;QACzC,mGAAmG;QACnG,EAAE;QACF,gCAAgC,CAAC,IAAI,CAAC,QAAQ,CAAC;KAChD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mCAAmC;IACjD,WAAW,CAAC,KAAK,EAAE,CAAC;IACpB,iBAAiB,CAAC,KAAK,EAAE,CAAC;IAC1B,sBAAsB,CAAC,KAAK,EAAE,CAAC;IAC/B,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC5B,kCAAkC,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,SAAiB;IACrE,MAAM,WAAW,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACnG,KAAK,MAAM,UAAU,IAAI,WAAW;QAAE,YAAY,CAAC,UAAU,CAAC,CAAC;AACjE,CAAC"}

package/dist/daemon/posttool-decision-state.d.ts

@@ -0,0 +1,65 @@
+import type { DecisionOwner } from '../shared/types.js';
+interface PendingDecisionRecord {
+    decisionId: string;
+    expiresAt: number;
+    owner?: DecisionOwner;
+    resourceId: string;
+    sessionId: string;
+    toolName: string;
+}
+export declare function registerPostToolPendingDecision(record: PendingDecisionRecord): void;
+export declare function clearPostToolPendingDecision(decisionId: string): void;
+export declare function hasActivePostToolConversationDecision(sessionId: string): boolean;
+export declare function grantPostToolAllowOnce(params: {
+    contentHash: string;
+    decisionId: string;
+    owner?: DecisionOwner;
+    resourceId: string;
+    sessionId: string;
+    timeoutMs: number;
+    toolName: string;
+}): void;
+export declare function consumePostToolAllowOnce(params: {
+    contentHash: string;
+    owner?: DecisionOwner;
+    resourceId: string;
+    sessionId: string;
+    toolName: string;
+}): boolean;
+export declare function grantPostToolLocalFallbackAllowSession(params: {
+    decisionId: string;
+    reason: string;
+    sessionId: string;
+    toolName: string;
+}): void;
+export declare function isPostToolLocalFallbackAllowed(params: {
+    reason: string;
+    sessionId: string;
+    toolName: string;
+}): boolean;
+export declare function requireReadReplay(params: {
+    decisionId: string;
+    filePath: string;
+    owner?: DecisionOwner;
+    sessionId: string;
+    timeoutMs: number;
+}): void;
+export declare function requireReadReplayFromToolInput(sessionId: string, toolInput: Record<string, unknown>, decisionId: string, timeoutMs: number, owner?: DecisionOwner): void;
+export declare function satisfyReadReplay(sessionId: string, filePath: string, owner?: DecisionOwner): void;
+export declare function satisfyReadReplayFromToolInput(sessionId: string, toolInput: Record<string, unknown>, owner?: DecisionOwner): void;
+export declare function hasPendingReadReplay(sessionId: string, owner?: DecisionOwner): boolean;
+export declare function shouldDenyForPostToolOperationalState(params: {
+    sessionId: string;
+    owner?: DecisionOwner;
+    toolInput: Record<string, unknown>;
+    toolName: string;
+}): {
+    deny: true;
+    reason: string;
+} | {
+    deny: false;
+};
+export declare function clearPostToolDecisionStateForSession(sessionId: string): void;
+export declare function resetPostToolDecisionStateForTests(): void;
+export {};
+//# sourceMappingURL=posttool-decision-state.d.ts.map

package/dist/daemon/posttool-decision-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"posttool-decision-state.d.ts","sourceRoot":"","sources":["../../src/daemon/posttool-decision-state.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AASxD,UAAU,qBAAqB;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAqFD,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAGnF;AAED,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAErE;AAED,wBAAgB,qCAAqC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAMhF;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CAKP;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAcV;AAED,wBAAgB,sCAAsC,CAAC,MAAM,EAAE;IAC7D,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CAEP;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAEV;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,IAAI,CAgBP;AAED,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,aAAa,GACpB,IAAI,CAGN;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI,CAclG;AAED,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,IAAI,CAGjI;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,OAAO,CAMtF;AAED,wBAAgB,qCAAqC,CAAC,MAAM,EAAE;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,CAmDnD;AAED,wBAAgB,oCAAoC,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAa5E;AAED,wBAAgB,kCAAkC,IAAI,IAAI,CAKzD"}