@vigil-guard/vge-cc-guard 0.9.0-beta.1

package/dist/daemon/posttool-decision-state.js

@@ -0,0 +1,223 @@
+import * as path from 'path';
+import { expandTilde } from './path-deny.js';
+import { decisionOwnerKey } from './decision-owner.js';
+import { logPostToolAllowOnceConsumed, logPostToolPendingDecisionToolDenied, logPostToolReadReplayRequired, logPostToolReadReplaySatisfied, } from './audit-logger.js';
+const pendingDecisions = new Map();
+const oneShotAllowances = new Map();
+const readReplays = new Map();
+const localFallbackAllowances = new Map();
+const READ_REPLAY_SAFE_TOOLS = new Set(['Read', 'Glob', 'Grep', 'WebFetch', 'WebSearch']);
+const PENDING_DECISION_DENIAL = [
+    'VGE Agent Guard: a PostTool output decision is pending in this session.',
+    'Wait for the user to choose 1, 2, or 3. Do not call tools or use shell/edit workarounds.',
+].join(' ');
+const READ_REPLAY_DENIAL = [
+    'VGE Agent Guard: a previously approved file must be replayed with Read before other tools can run, so Claude Code records the file as read.',
+    'Do not use Bash/sed/python or any other workaround.',
+].join(' ');
+function nowMs() {
+    return Date.now();
+}
+function ownerPrefix(sessionId, owner) {
+    return owner?.kind === 'subagent' ? decisionOwnerKey(owner) : `${sessionId}:session`;
+}
+function oneShotKey(sessionId, owner, toolName, resourceId, contentHash) {
+    return `${ownerPrefix(sessionId, owner)}\0${toolName}\0${resourceId}\0${contentHash}`;
+}
+function readReplayKey(sessionId, owner, filePath) {
+    return `${ownerPrefix(sessionId, owner)}\0${filePath}`;
+}
+function localFallbackKey(sessionId, toolName, reason) {
+    return `${sessionId}\0${toolName}\0${reason}`;
+}
+function pruneExpired(now = nowMs()) {
+    for (const [decisionId, record] of pendingDecisions) {
+        if (record.expiresAt <= now)
+            pendingDecisions.delete(decisionId);
+    }
+    for (const [key, allowance] of oneShotAllowances) {
+        if (allowance.expiresAt <= now)
+            oneShotAllowances.delete(key);
+    }
+    for (const [key, replay] of readReplays) {
+        if (replay.expiresAt <= now)
+            readReplays.delete(key);
+    }
+}
+function normalizeFilePath(rawPath) {
+    if (typeof rawPath !== 'string' || rawPath.trim().length === 0)
+        return null;
+    return path.resolve(expandTilde(rawPath));
+}
+function filePathFromToolInput(toolInput) {
+    return normalizeFilePath(toolInput['file_path']);
+}
+export function registerPostToolPendingDecision(record) {
+    pruneExpired();
+    pendingDecisions.set(record.decisionId, record);
+}
+export function clearPostToolPendingDecision(decisionId) {
+    pendingDecisions.delete(decisionId);
+}
+export function hasActivePostToolConversationDecision(sessionId) {
+    pruneExpired();
+    for (const record of pendingDecisions.values()) {
+        if (record.sessionId === sessionId)
+            return true;
+    }
+    return false;
+}
+export function grantPostToolAllowOnce(params) {
+    pruneExpired();
+    const expiresAt = nowMs() + Math.max(params.timeoutMs, 1);
+    const key = oneShotKey(params.sessionId, params.owner, params.toolName, params.resourceId, params.contentHash);
+    oneShotAllowances.set(key, { ...params, expiresAt });
+}
+export function consumePostToolAllowOnce(params) {
+    pruneExpired();
+    const key = oneShotKey(params.sessionId, params.owner, params.toolName, params.resourceId, params.contentHash);
+    const allowance = oneShotAllowances.get(key);
+    if (!allowance)
+        return false;
+    oneShotAllowances.delete(key);
+    logPostToolAllowOnceConsumed({
+        sessionId: params.sessionId,
+        toolName: params.toolName,
+        resourceId: params.resourceId,
+        contentHash: params.contentHash,
+        decisionId: allowance.decisionId,
+    });
+    return true;
+}
+export function grantPostToolLocalFallbackAllowSession(params) {
+    localFallbackAllowances.set(localFallbackKey(params.sessionId, params.toolName, params.reason), params);
+}
+export function isPostToolLocalFallbackAllowed(params) {
+    return localFallbackAllowances.has(localFallbackKey(params.sessionId, params.toolName, params.reason));
+}
+export function requireReadReplay(params) {
+    const normalized = normalizeFilePath(params.filePath);
+    if (!normalized)
+        return;
+    readReplays.set(readReplayKey(params.sessionId, params.owner, normalized), {
+        decisionId: params.decisionId,
+        expiresAt: nowMs() + Math.max(params.timeoutMs, 1),
+        filePath: normalized,
+        owner: params.owner,
+        requiredAt: nowMs(),
+        sessionId: params.sessionId,
+    });
+    logPostToolReadReplayRequired({
+        sessionId: params.sessionId,
+        filePath: normalized,
+        decisionId: params.decisionId,
+    });
+}
+export function requireReadReplayFromToolInput(sessionId, toolInput, decisionId, timeoutMs, owner) {
+    const filePath = filePathFromToolInput(toolInput);
+    if (filePath)
+        requireReadReplay({ sessionId, filePath, decisionId, timeoutMs, owner });
+}
+export function satisfyReadReplay(sessionId, filePath, owner) {
+    pruneExpired();
+    const normalized = normalizeFilePath(filePath);
+    if (!normalized)
+        return;
+    const key = readReplayKey(sessionId, owner, normalized);
+    const record = readReplays.get(key);
+    if (!record)
+        return;
+    readReplays.delete(key);
+    logPostToolReadReplaySatisfied({
+        sessionId,
+        filePath: normalized,
+        decisionId: record.decisionId,
+        elapsedMs: nowMs() - record.requiredAt,
+    });
+}
+export function satisfyReadReplayFromToolInput(sessionId, toolInput, owner) {
+    const filePath = filePathFromToolInput(toolInput);
+    if (filePath)
+        satisfyReadReplay(sessionId, filePath, owner);
+}
+export function hasPendingReadReplay(sessionId, owner) {
+    pruneExpired();
+    for (const replay of readReplays.values()) {
+        if (replay.sessionId === sessionId && (!owner || ownerPrefix(sessionId, replay.owner) === ownerPrefix(sessionId, owner)))
+            return true;
+    }
+    return false;
+}
+export function shouldDenyForPostToolOperationalState(params) {
+    if (hasActivePostToolConversationDecision(params.sessionId)) {
+        logPostToolPendingDecisionToolDenied({
+            sessionId: params.sessionId,
+            toolName: params.toolName,
+            reason: 'pending_posttool_decision',
+        });
+        return { deny: true, reason: PENDING_DECISION_DENIAL };
+    }
+    if (!hasPendingReadReplay(params.sessionId, params.owner))
+        return { deny: false };
+    if (params.toolName === 'Bash') {
+        logPostToolPendingDecisionToolDenied({
+            sessionId: params.sessionId,
+            toolName: params.toolName,
+            reason: 'read_replay_required',
+        });
+        return { deny: true, reason: READ_REPLAY_DENIAL };
+    }
+    if (params.toolName === 'Edit' || params.toolName === 'Write' || params.toolName === 'MultiEdit') {
+        const filePath = filePathFromToolInput(params.toolInput);
+        if (!filePath) {
+            logPostToolPendingDecisionToolDenied({
+                sessionId: params.sessionId,
+                toolName: params.toolName,
+                reason: 'read_replay_required',
+            });
+            return { deny: true, reason: READ_REPLAY_DENIAL };
+        }
+        if (readReplays.has(readReplayKey(params.sessionId, params.owner, filePath))) {
+            logPostToolPendingDecisionToolDenied({
+                sessionId: params.sessionId,
+                toolName: params.toolName,
+                reason: 'read_replay_required',
+            });
+            return { deny: true, reason: READ_REPLAY_DENIAL };
+        }
+    }
+    if (!READ_REPLAY_SAFE_TOOLS.has(params.toolName)) {
+        logPostToolPendingDecisionToolDenied({
+            sessionId: params.sessionId,
+            toolName: params.toolName,
+            reason: 'read_replay_required',
+        });
+        return { deny: true, reason: READ_REPLAY_DENIAL };
+    }
+    return { deny: false };
+}
+export function clearPostToolDecisionStateForSession(sessionId) {
+    for (const [decisionId, record] of pendingDecisions) {
+        if (record.sessionId === sessionId)
+            pendingDecisions.delete(decisionId);
+    }
+    for (const [key, allowance] of oneShotAllowances) {
+        if (allowance.sessionId === sessionId)
+            oneShotAllowances.delete(key);
+    }
+    for (const [key, replay] of readReplays) {
+        if (replay.sessionId === sessionId)
+            readReplays.delete(key);
+    }
+    for (const [key, allowance] of localFallbackAllowances) {
+        if (allowance.sessionId === sessionId)
+            localFallbackAllowances.delete(key);
+    }
+}
+export function resetPostToolDecisionStateForTests() {
+    pendingDecisions.clear();
+    oneShotAllowances.clear();
+    readReplays.clear();
+    localFallbackAllowances.clear();
+}
+//# sourceMappingURL=posttool-decision-state.js.map

package/dist/daemon/posttool-decision-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"posttool-decision-state.js","sourceRoot":"","sources":["../../src/daemon/posttool-decision-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EACL,4BAA4B,EAC5B,oCAAoC,EACpC,6BAA6B,EAC7B,8BAA8B,GAC/B,MAAM,mBAAmB,CAAC;AAqC3B,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAiC,CAAC;AAClE,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAA4B,CAAC;AAC9D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAiC,CAAC;AAC7D,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAkC,CAAC;AAC1E,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;AAE1F,MAAM,uBAAuB,GAAG;IAC9B,yEAAyE;IACzE,0FAA0F;CAC3F,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,MAAM,kBAAkB,GAAG;IACzB,6IAA6I;IAC7I,qDAAqD;CACtD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,SAAS,KAAK;IACZ,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,KAAqB;IAC3D,OAAO,KAAK,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,UAAU,CAAC;AACvF,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,KAAgC,EAAE,QAAgB,EAAE,UAAkB,EAAE,WAAmB;IAChI,OAAO,GAAG,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,QAAQ,KAAK,UAAU,KAAK,WAAW,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB,EAAE,KAAgC,EAAE,QAAgB;IAC1F,OAAO,GAAG,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB,EAAE,QAAgB,EAAE,MAAc;IAC3E,OAAO,GAAG,SAAS,KAAK,QAAQ,KAAK,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,YAAY,CAAC,GAAG,GAAG,KAAK,EAAE;IACjC,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;QACpD,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG;YAAE,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,iBAAiB,EAAE,CAAC;QACjD,IAAI,SAAS,CAAC,SAAS,IAAI,GAAG;YAAE,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChE,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QACxC,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG;YAAE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAgB;IACzC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5E,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAkC;IAC/D,OAAO,iBAAiB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,MAA6B;IAC3E,YAAY,EAAE,CAAC;IACf,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,UAAkB;IAC7D,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,SAAiB;IACrE,YAAY,EAAE,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAQtC;IACC,YAAY,EAAE,CAAC;IACf,MAAM,SAAS,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAC/G,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAMxC;IACC,YAAY,EAAE,CAAC;IACf,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAC/G,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9B,4BAA4B,CAAC;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,SAAS,CAAC,UAAU;KACjC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sCAAsC,CAAC,MAKtD;IACC,uBAAuB,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,MAI9C;IACC,OAAO,uBAAuB,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAMjC;IACC,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU;QAAE,OAAO;IACxB,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE;QACzE,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAClD,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,KAAK,EAAE;QACnB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,6BAA6B,CAAC;QAC5B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,SAAiB,EACjB,SAAkC,EAClC,UAAkB,EAClB,SAAiB,EACjB,KAAqB;IAErB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,QAAQ;QAAE,iBAAiB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,QAAgB,EAAE,KAAqB;IAC1F,YAAY,EAAE,CAAC;IACf,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU;QAAE,OAAO;IACxB,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,8BAA8B,CAAC;QAC7B,SAAS;QACT,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,UAAU;KACvC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,SAAiB,EAAE,SAAkC,EAAE,KAAqB;IACzH,MAAM,QAAQ,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,QAAQ;QAAE,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAiB,EAAE,KAAqB;IAC3E,YAAY,EAAE,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,IAAI,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IACxI,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,MAKrD;IACC,IAAI,qCAAqC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,oCAAoC,CAAC;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,2BAA2B;SACpC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACzD,CAAC;IAED,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAElF,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC/B,oCAAoC,CAAC;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,sBAAsB;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACjG,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,oCAAoC,CAAC;gBACnC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,sBAAsB;aAC/B,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACpD,CAAC;QACD,IAAI,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC7E,oCAAoC,CAAC;gBACnC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,sBAAsB;aAC/B,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,oCAAoC,CAAC;YACnC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,sBAAsB;SAC/B,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACpD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,SAAiB;IACpE,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;QACpD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1E,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,iBAAiB,EAAE,CAAC;QACjD,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS;YAAE,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QACxC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,uBAAuB,EAAE,CAAC;QACvD,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS;YAAE,uBAAuB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kCAAkC;IAChD,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACzB,iBAAiB,CAAC,KAAK,EAAE,CAAC;IAC1B,WAAW,CAAC,KAAK,EAAE,CAAC;IACpB,uBAAuB,CAAC,KAAK,EAAE,CAAC;AAClC,CAAC"}

package/dist/daemon/posttool-enforcement.d.ts

@@ -0,0 +1,7 @@
+import type { CCPostToolPayload } from '../shared/types.js';
+export interface PostToolEnforcementResult {
+    ccOutput: unknown | null;
+}
+export declare function prunePostToolResponseCache(): void;
+export declare function enforcePostTool(payload: CCPostToolPayload): Promise<PostToolEnforcementResult>;
+//# sourceMappingURL=posttool-enforcement.d.ts.map

package/dist/daemon/posttool-enforcement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"posttool-enforcement.d.ts","sourceRoot":"","sources":["../../src/daemon/posttool-enforcement.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAuB,MAAM,oBAAoB,CAAC;AA8DjF,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;CAC1B;AAED,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD;AA4DD,wBAAsB,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CA4cpG"}