@vigil-guard/vge-cc-guard 0.9.0-beta.1

package/dist/daemon/url-block-decisions.js

@@ -0,0 +1,100 @@
+import { createHash } from 'crypto';
+import { DEFAULT_CONFIG } from '../shared/config-schema.js';
+import { saveConfig } from '../shared/config-io.js';
+import { hostnameMatchesPattern, isValidUrlAllowlistPattern } from '../shared/url-allowlist.js';
+import { applyUrlBlockDecision } from './ask-dialog.js';
+import { debugLogger } from './debug-logger.js';
+import { logPretoolUrlAllowlistedByUser, logPretoolUrlAllowlistBypass, logPretoolUrlAllowOnce, logPretoolUrlBlocked, } from './audit-logger.js';
+import { addToBlocklist, addUrlAllowOnce } from './session-state.js';
+import { getCurrentConfig, reloadConfig } from './tool-policy.js';
+const URL_RESOURCE_PREFIX = 'url:sha256:';
+export function sha256Hex(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+export function urlResourceKey(url) {
+    return `${URL_RESOURCE_PREFIX}${sha256Hex(url)}`;
+}
+export function urlHashFromResourceId(resourceId) {
+    return resourceId.startsWith(URL_RESOURCE_PREFIX)
+        ? resourceId.slice(URL_RESOURCE_PREFIX.length)
+        : resourceId;
+}
+export function findUrlAllowlistMatch(host, patterns) {
+    return patterns.find((pattern) => hostnameMatchesPattern(host, pattern)) ?? null;
+}
+export function addHostToPersistentUrlAllowlist(host) {
+    if (!isValidUrlAllowlistPattern(host))
+        return false;
+    const current = getCurrentConfig() ?? DEFAULT_CONFIG;
+    const existing = current.policy.url_allowlist;
+    const nextAllowlist = existing.includes(host) ? existing : [...existing, host];
+    const next = {
+        ...current,
+        policy: {
+            ...current.policy,
+            url_allowlist: nextAllowlist,
+        },
+    };
+    const saved = saveConfig(next);
+    if (!saved.ok)
+        return false;
+    const reloaded = reloadConfig();
+    if (!reloaded.ok) {
+        debugLogger().error({ error: reloaded.message }, 'failed to reload config after URL allowlist update');
+    }
+    return true;
+}
+export function auditUrlAllowlistBypass(params) {
+    logPretoolUrlAllowlistBypass({
+        ...params,
+        urlHash: urlHashFromResourceId(params.resourceId),
+    });
+}
+export function auditResolvedUrlBlock(sessionId, resolved) {
+    const urlHash = urlHashFromResourceId(resolved.escalation.resourceId);
+    if (resolved.decision === 'allow_once') {
+        logPretoolUrlAllowOnce({
+            sessionId,
+            toolName: resolved.escalation.toolName,
+            resourceId: resolved.escalation.resourceId,
+            urlHash,
+            host: resolved.escalation.host ?? null,
+            vgeDecision: resolved.escalation.vgeDecision,
+            vgeScore: resolved.escalation.vgeScore,
+        });
+    }
+    else if (resolved.decision === 'allow_persist' && resolved.escalation.host) {
+        logPretoolUrlAllowlistedByUser({
+            sessionId,
+            toolName: resolved.escalation.toolName,
+            resourceId: resolved.escalation.resourceId,
+            urlHash,
+            host: resolved.escalation.host,
+            vgeDecision: resolved.escalation.vgeDecision,
+            vgeScore: resolved.escalation.vgeScore,
+        });
+    }
+    else {
+        logPretoolUrlBlocked({
+            sessionId,
+            toolName: resolved.escalation.toolName,
+            resourceId: resolved.escalation.resourceId,
+            urlHash,
+            host: resolved.escalation.host ?? null,
+            vgeDecision: resolved.escalation.vgeDecision,
+            vgeScore: resolved.escalation.vgeScore,
+            reason: resolved.blockReason ?? 'user_block',
+        });
+    }
+}
+export function applyAndAuditUrlBlockDecision(session, decision, escalationId) {
+    const resolved = applyUrlBlockDecision(session, decision, {
+        addUrlAllowOnce,
+        addResourceToBlocklist: addToBlocklist,
+        addHostToUrlAllowlist: addHostToPersistentUrlAllowlist,
+    }, escalationId);
+    if (resolved)
+        auditResolvedUrlBlock(session.sessionId, resolved);
+    return resolved;
+}
+//# sourceMappingURL=url-block-decisions.js.map

package/dist/daemon/url-block-decisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-block-decisions.js","sourceRoot":"","sources":["../../src/daemon/url-block-decisions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAGpC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EACL,8BAA8B,EAC9B,4BAA4B,EAC5B,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAElE,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAE1C,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,GAAG,mBAAmB,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,OAAO,UAAU,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAC/C,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAC9C,CAAC,CAAC,UAAU,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,QAAkB;IACpE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,IAAY;IAC1D,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,OAAO,GAAG,gBAAgB,EAAE,IAAI,cAAc,CAAC;IACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;IAC9C,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAW;QACnB,GAAG,OAAO;QACV,MAAM,EAAE;YACN,GAAG,OAAO,CAAC,MAAM;YACjB,aAAa,EAAE,aAAa;SAC7B;KACF,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,oDAAoD,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAMvC;IACC,4BAA4B,CAAC;QAC3B,GAAG,MAAM;QACT,OAAO,EAAE,qBAAqB,CAAC,MAAM,CAAC,UAAU,CAAC;KAClD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,QAUC;IAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACtE,IAAI,QAAQ,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QACvC,sBAAsB,CAAC;YACrB,SAAS;YACT,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ;YACtC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;YAC1C,OAAO;YACP,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI;YACtC,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,WAAW;YAC5C,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ;SACvC,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,QAAQ,CAAC,QAAQ,KAAK,eAAe,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC7E,8BAA8B,CAAC;YAC7B,SAAS;YACT,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ;YACtC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;YAC1C,OAAO;YACP,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI;YAC9B,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,WAAW;YAC5C,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ;SACvC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,oBAAoB,CAAC;YACnB,SAAS;YACT,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ;YACtC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;YAC1C,OAAO;YACP,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI;YACtC,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,WAAW;YAC5C,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,QAAQ;YACtC,MAAM,EAAE,QAAQ,CAAC,WAAW,IAAI,YAAY;SAC7C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAAoB,EACpB,QAA0B,EAC1B,YAAqB;IAErB,MAAM,QAAQ,GAAG,qBAAqB,CACpC,OAAO,EACP,QAAQ,EACR;QACE,eAAe;QACf,sBAAsB,EAAE,cAAc;QACtC,qBAAqB,EAAE,+BAA+B;KACvD,EACD,YAAY,CACb,CAAC;IACF,IAAI,QAAQ;QAAE,qBAAqB,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjE,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/daemon/url-extractor.d.ts

@@ -0,0 +1,7 @@
+export interface ExtractedUrl {
+    url: string;
+    host: string | null;
+}
+export declare function extractHost(url: string): string | null;
+export declare function extractUrlsFromToolInput(toolName: string, toolInput: Record<string, unknown>): ExtractedUrl[];
+//# sourceMappingURL=url-extractor.d.ts.map

package/dist/daemon/url-extractor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-extractor.d.ts","sourceRoot":"","sources":["../../src/daemon/url-extractor.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAMD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQtD;AA4ED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,YAAY,EAAE,CAahB"}

package/dist/daemon/url-extractor.js

@@ -0,0 +1,101 @@
+const URL_RE = /\b(?:https?|file|gopher|ftp|smb|nfs|ldap|ldaps|dict):\/\/[^\s'"<>`;&|]+/gi;
+function trimTrailingPunctuation(url) {
+    return url.replace(/[),.;\]}]+$/g, '');
+}
+export function extractHost(url) {
+    try {
+        const host = new URL(url).hostname.toLowerCase();
+        return host || null;
+    }
+    catch {
+        const match = /^[a-z][a-z0-9+.-]*:\/\/([^/?#:]+)/i.exec(url);
+        return match?.[1]?.toLowerCase() ?? null;
+    }
+}
+function extractFromText(text) {
+    const seen = new Set();
+    const out = [];
+    const pushUrl = (rawUrl) => {
+        const url = trimTrailingPunctuation(rawUrl);
+        if (seen.has(url))
+            return;
+        seen.add(url);
+        out.push({ url, host: extractHost(url) });
+    };
+    for (const match of text.matchAll(URL_RE)) {
+        pushUrl(match[0]);
+    }
+    for (const url of extractGithubApiUrls(text)) {
+        pushUrl(url);
+    }
+    return out;
+}
+function shellLikeTokens(text) {
+    const tokens = [];
+    const tokenRe = /"([^"]*)"|'([^']*)'|[^\s'"`;&|]+/g;
+    for (const match of text.matchAll(tokenRe)) {
+        tokens.push(match[1] ?? match[2] ?? match[0]);
+    }
+    return tokens;
+}
+const GH_API_OPTIONS_WITH_VALUE = new Set([
+    '-F',
+    '-H',
+    '-X',
+    '-f',
+    '-q',
+    '--cache',
+    '--field',
+    '--header',
+    '--hostname',
+    '--input',
+    '--jq',
+    '--method',
+    '--preview',
+    '--raw-field',
+]);
+function normalizeGithubApiEndpoint(endpoint) {
+    const cleanEndpoint = endpoint.replace(/^\/+/, '');
+    if (!/^repos\/[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+\/contents\/[^\s]+$/i.test(cleanEndpoint)) {
+        return null;
+    }
+    return `https://api.github.com/${cleanEndpoint}`;
+}
+function extractGithubApiUrls(text) {
+    const tokens = shellLikeTokens(text);
+    const out = [];
+    for (let i = 0; i < tokens.length - 1; i++) {
+        if (tokens[i] !== 'gh' || tokens[i + 1] !== 'api')
+            continue;
+        for (let j = i + 2; j < tokens.length; j++) {
+            const token = tokens[j];
+            if (!token)
+                continue;
+            if (token.startsWith('-')) {
+                const option = token.includes('=') ? token.slice(0, token.indexOf('=')) : token;
+                if (!token.includes('=') && GH_API_OPTIONS_WITH_VALUE.has(option))
+                    j++;
+                continue;
+            }
+            const url = normalizeGithubApiEndpoint(token);
+            if (url)
+                out.push(url);
+            break;
+        }
+    }
+    return out;
+}
+export function extractUrlsFromToolInput(toolName, toolInput) {
+    if (toolName === 'Bash') {
+        const command = toolInput['command'];
+        return typeof command === 'string' ? extractFromText(command) : [];
+    }
+    if (toolName === 'WebFetch') {
+        const url = toolInput['url'];
+        if (typeof url !== 'string' || !/^https?:\/\//i.test(url))
+            return [];
+        return [{ url, host: extractHost(url) }];
+    }
+    return [];
+}
+//# sourceMappingURL=url-extractor.js.map

package/dist/daemon/url-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-extractor.js","sourceRoot":"","sources":["../../src/daemon/url-extractor.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,GAAG,2EAA2E,CAAC;AAO3F,SAAS,uBAAuB,CAAC,GAAW;IAC1C,OAAO,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACjD,OAAO,IAAI,IAAI,IAAI,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,KAAK,GAAG,oCAAoC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,MAAc,EAAQ,EAAE;QACvC,MAAM,GAAG,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,mCAAmC,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,SAAS;IACT,SAAS;IACT,UAAU;IACV,YAAY;IACZ,SAAS;IACT,MAAM;IACN,UAAU;IACV,WAAW;IACX,aAAa;CACd,CAAC,CAAC;AAEH,SAAS,0BAA0B,CAAC,QAAgB;IAClD,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,8DAA8D,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,0BAA0B,aAAa,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK;YAAE,SAAS;QAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBAChF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,CAAC,EAAE,CAAC;gBACvE,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,GAAG;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,MAAM;QACR,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,QAAgB,EAChB,SAAkC;IAElC,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,CAAC;IAED,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QACrE,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/daemon/userprompt-decision-escrow.d.ts

@@ -0,0 +1,45 @@
+import type { BlockingDecision, BlockingDecisionChoice, BlockingDecisionKind, GuardResponseSubset } from '../shared/types.js';
+type UserPromptDecisionKind = Extract<BlockingDecisionKind, 'attachment_input' | 'prompt_input'>;
+export type UserPromptEscrowPromptDecision = {
+    matched: false;
+} | {
+    matched: true;
+    ccOutput: {
+        decision?: 'block';
+        reason?: string;
+        continue?: false;
+        stopReason?: string;
+        hookSpecificOutput?: {
+            hookEventName: 'UserPromptSubmit';
+            additionalContext?: string;
+        };
+    } | null;
+};
+export declare function createUserPromptDecisionEscrow(params: {
+    contentBytes: number;
+    contentHash: string;
+    grantAllowOnce?: (sessionId: string, resourceId: string) => void;
+    kind: UserPromptDecisionKind;
+    originalPrompt: string;
+    reason: string;
+    resourceId: string;
+    resourceLabel: string;
+    sessionId: string;
+    timeoutMs: number;
+    vgeResult: GuardResponseSubset;
+}): BlockingDecision;
+export declare function renderUserPromptEscrowStopReason(decision: BlockingDecision): string;
+export declare function activeUserPromptEscrowCountForSession(sessionId: string, kind?: UserPromptDecisionKind): number;
+export declare function activeUserPromptEscrowDecisionsForSession(sessionId: string, kind?: UserPromptDecisionKind): BlockingDecision[];
+export declare function hasUserPromptEscrowDecision(decisionId: string, kind?: UserPromptDecisionKind): boolean;
+export declare function renderActiveUserPromptDecisionReask(sessionId: string, kind?: UserPromptDecisionKind): string | null;
+export declare function resolveUserPromptEscrowCommand(sessionId: string, command: {
+    choice: BlockingDecisionChoice;
+    decisionId: string | null;
+    residual: string;
+}, kind?: UserPromptDecisionKind): UserPromptEscrowPromptDecision;
+export declare function resetUserPromptDecisionEscrowForTests(kind?: UserPromptDecisionKind): void;
+export declare function getUserPromptEscrowDecisionForTests(decisionId: string): BlockingDecision | null;
+export declare function clearUserPromptDecisionEscrowForSession(sessionId: string, kind?: UserPromptDecisionKind): void;
+export {};
+//# sourceMappingURL=userprompt-decision-escrow.d.ts.map

package/dist/daemon/userprompt-decision-escrow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"userprompt-decision-escrow.d.ts","sourceRoot":"","sources":["../../src/daemon/userprompt-decision-escrow.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AA0B9H,KAAK,sBAAsB,GAAG,OAAO,CAAC,oBAAoB,EAAE,kBAAkB,GAAG,cAAc,CAAC,CAAC;AAajG,MAAM,MAAM,8BAA8B,GACtC;IAAE,OAAO,EAAE,KAAK,CAAA;CAAE,GAClB;IACE,OAAO,EAAE,IAAI,CAAC;IACd,QAAQ,EAAE;QACR,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,KAAK,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,kBAAkB,CAAC,EAAE;YACnB,aAAa,EAAE,kBAAkB,CAAC;YAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH,GAAG,IAAI,CAAC;CACV,CAAC;AAgEN,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IACjE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,mBAAmB,CAAC;CAChC,GAAG,gBAAgB,CAiDnB;AAED,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CASnF;AAED,wBAAgB,qCAAqC,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG,MAAM,CAK9G;AAED,wBAAgB,yCAAyC,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG,gBAAgB,EAAE,CAM9H;AAED,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAItG;AAED,wBAAgB,mCAAmC,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG,MAAM,GAAG,IAAI,CAQnH;AAED,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE;IAAE,MAAM,EAAE,sBAAsB,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,EACxF,IAAI,CAAC,EAAE,sBAAsB,GAC5B,8BAA8B,CAsFhC;AAED,wBAAgB,qCAAqC,CAAC,IAAI,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAWzF;AAED,wBAAgB,mCAAmC,CAAC,UAAU,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAG/F;AAED,wBAAgB,uCAAuC,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAI9G"}

package/dist/daemon/userprompt-decision-escrow.js

@@ -0,0 +1,248 @@
+import * as crypto from 'crypto';
+import { addResourceAllow, addResourceBlock, grantAttachmentAllowOnce, } from './session-state.js';
+import { logBlockingDecisionCreated, logBlockingDecisionCapacityEvicted, logBlockingDecisionDeduped, logBlockingDecisionReaskEmitted, logBlockingDecisionResolved, logBlockingDecisionSessionLocked, } from './audit-logger.js';
+import { blockUserPromptWithReason, branchScores, renderConversationApprovalContext, renderConversationDecisionReask, renderConversationDecisionPrompt, } from './conversation-decision-prompt.js';
+import { finishPendingDecision } from './decision-transition.js';
+import { nextDecisionCreationSequence } from './active-conversation-decisions.js';
+const MAX_ESCROWS = 100;
+const byDecisionId = new Map();
+const activeBySession = new Map();
+const activeByDedupKey = new Map();
+function makeDecision(params) {
+    const now = Date.now();
+    return {
+        decisionId: `dec_${crypto.randomUUID()}`,
+        dedupKey: `${params.sessionId}:${params.resourceId}`,
+        sessionId: params.sessionId,
+        kind: params.kind,
+        toolName: 'UserPromptSubmit',
+        resourceId: params.resourceId,
+        resourceLabel: params.resourceLabel,
+        reason: params.reason,
+        createdAt: now,
+        creationSequence: nextDecisionCreationSequence(),
+        expiresAt: now + params.timeoutMs,
+        status: params.status ?? 'pending',
+        vge: {
+            id: params.vgeResult.id ?? null,
+            decision: params.vgeResult.localFallbackReason ? null : params.vgeResult.decision,
+            arbiterSignal: params.vgeResult.localFallbackReason ? undefined : params.vgeResult.arbiterSignal,
+            ruleAction: params.vgeResult.localFallbackReason ? undefined : params.vgeResult.ruleAction,
+            score: params.vgeResult.score,
+            categories: params.vgeResult.categories,
+            blockMessage: params.vgeResult.blockMessage,
+            branches: branchScores(params.vgeResult),
+            origin: params.vgeResult.localFallbackReason ? 'local_fallback' : 'vge',
+        },
+    };
+}
+function removeRecord(decisionId) {
+    const record = byDecisionId.get(decisionId);
+    if (!record)
+        return undefined;
+    byDecisionId.delete(decisionId);
+    if (activeBySession.get(record.sessionId) === decisionId)
+        activeBySession.delete(record.sessionId);
+    activeByDedupKey.delete(record.decision.dedupKey);
+    return record;
+}
+function evictCapacityRecord(decisionId, record) {
+    const transition = finishPendingDecision(record.decision, 'capacity_evicted');
+    if (transition.won)
+        logBlockingDecisionCapacityEvicted(record.decision);
+    removeRecord(decisionId);
+}
+function pruneExpired(now = Date.now()) {
+    void now;
+    // Conversation-native prompt and attachment decisions wait for an explicit user decision.
+}
+export function createUserPromptDecisionEscrow(params) {
+    pruneExpired();
+    while (byDecisionId.size >= MAX_ESCROWS) {
+        const oldest = [...byDecisionId.entries()].sort((a, b) => a[1].createdAt - b[1].createdAt)[0];
+        if (!oldest)
+            break;
+        evictCapacityRecord(oldest[0], oldest[1]);
+    }
+    const dedupKey = `${params.sessionId}:${params.resourceId}`;
+    const existingForResource = activeByDedupKey.get(dedupKey);
+    if (existingForResource) {
+        const existing = byDecisionId.get(existingForResource);
+        if (existing) {
+            logBlockingDecisionDeduped(existing.decision);
+            return existing.decision;
+        }
+        activeByDedupKey.delete(dedupKey);
+    }
+    const existingForSession = activeBySession.get(params.sessionId);
+    if (existingForSession) {
+        const existing = byDecisionId.get(existingForSession);
+        if (existing) {
+            const lockedDecision = makeDecision({
+                ...params,
+                reason: 'another UserPromptSubmit decision is already active for this session',
+                status: 'session_locked_fail_closed',
+            });
+            logBlockingDecisionSessionLocked(lockedDecision);
+            return lockedDecision;
+        }
+        activeBySession.delete(params.sessionId);
+    }
+    const decision = makeDecision(params);
+    byDecisionId.set(decision.decisionId, {
+        contentBytes: params.contentBytes,
+        contentHash: params.contentHash,
+        createdAt: Date.now(),
+        decision,
+        grantAllowOnce: params.grantAllowOnce ?? grantAttachmentAllowOnce,
+        originalPrompt: params.originalPrompt,
+        sessionId: params.sessionId,
+    });
+    activeBySession.set(params.sessionId, decision.decisionId);
+    activeByDedupKey.set(dedupKey, decision.decisionId);
+    logBlockingDecisionCreated(decision, { resolverSurface: 'userprompt_text' });
+    return decision;
+}
+export function renderUserPromptEscrowStopReason(decision) {
+    if (decision.status === 'session_locked_fail_closed') {
+        return [
+            'VGE Agent Guard: another UserPromptSubmit decision is already active for this session.',
+            'The new prompt was blocked fail-closed and was not sent to Claude.',
+            'Resolve the active VGE decision first, then resubmit this prompt.',
+        ].join('\n');
+    }
+    return renderConversationDecisionPrompt(decision);
+}
+export function activeUserPromptEscrowCountForSession(sessionId, kind) {
+    pruneExpired();
+    return [...byDecisionId.values()].filter((record) => {
+        return record.sessionId === sessionId && (kind === undefined || record.decision.kind === kind);
+    }).length;
+}
+export function activeUserPromptEscrowDecisionsForSession(sessionId, kind) {
+    pruneExpired();
+    return [...byDecisionId.values()]
+        .filter((record) => record.sessionId === sessionId && (kind === undefined || record.decision.kind === kind))
+        .map((record) => record.decision)
+        .sort((left, right) => left.createdAt - right.createdAt || left.decisionId.localeCompare(right.decisionId));
+}
+export function hasUserPromptEscrowDecision(decisionId, kind) {
+    pruneExpired();
+    const record = byDecisionId.get(decisionId);
+    return !!record && (kind === undefined || record.decision.kind === kind);
+}
+export function renderActiveUserPromptDecisionReask(sessionId, kind) {
+    pruneExpired();
+    const decisionId = activeBySession.get(sessionId);
+    if (!decisionId)
+        return null;
+    const record = byDecisionId.get(decisionId);
+    if (!record || (kind !== undefined && record.decision.kind !== kind))
+        return null;
+    logBlockingDecisionReaskEmitted(record.decision);
+    return renderConversationDecisionReask(record.decision);
+}
+export function resolveUserPromptEscrowCommand(sessionId, command, kind) {
+    pruneExpired();
+    let decisionId = command.decisionId;
+    if (!decisionId) {
+        const active = activeBySession.get(sessionId);
+        if (!active) {
+            return {
+                matched: true,
+                ccOutput: blockUserPromptWithReason('VGE Agent Guard: there is no active UserPromptSubmit decision to resolve.'),
+            };
+        }
+        decisionId = active;
+    }
+    const record = byDecisionId.get(decisionId);
+    if (!record || (kind !== undefined && record.decision.kind !== kind)) {
+        return {
+            matched: true,
+            ccOutput: blockUserPromptWithReason(`VGE Agent Guard: decision ${decisionId} is no longer available. Resubmit the prompt if you still need it.`),
+        };
+    }
+    if (record.sessionId !== sessionId) {
+        return {
+            matched: true,
+            ccOutput: blockUserPromptWithReason(`VGE Agent Guard: decision ${decisionId} belongs to a different session.`),
+        };
+    }
+    const status = command.choice === 'allow_once'
+        ? 'resolved_allow_once'
+        : command.choice === 'allow_session'
+            ? 'resolved_allow_session'
+            : 'resolved_block';
+    const transition = finishPendingDecision(record.decision, status);
+    if (!transition.won) {
+        return {
+            matched: true,
+            ccOutput: blockUserPromptWithReason(`VGE Agent Guard: decision ${decisionId} is no longer available. Resubmit the prompt if you still need it.`),
+        };
+    }
+    logBlockingDecisionResolved({
+        decision: record.decision,
+        choice: command.choice,
+        clientId: 'userprompt_escrow',
+        elapsedMs: Date.now() - record.decision.createdAt,
+        resolverSurface: 'userprompt_text',
+        originHookEvent: 'UserPromptSubmit',
+        contentHash: record.contentHash,
+        contentSizeBytes: record.contentBytes,
+        oneShotConsumed: false,
+    });
+    if (command.choice === 'block') {
+        addResourceBlock(sessionId, record.decision.resourceId, decisionId);
+        removeRecord(decisionId);
+        return {
+            matched: true,
+            ccOutput: blockUserPromptWithReason(`VGE Agent Guard: decision ${decisionId} recorded as block. The control prompt was not sent to Claude.`),
+        };
+    }
+    if (command.choice === 'allow_session') {
+        addResourceAllow(sessionId, record.decision.resourceId, decisionId);
+    }
+    else {
+        record.grantAllowOnce(sessionId, record.decision.resourceId);
+    }
+    removeRecord(decisionId);
+    return {
+        matched: true,
+        ccOutput: {
+            hookSpecificOutput: {
+                hookEventName: 'UserPromptSubmit',
+                additionalContext: renderConversationApprovalContext({
+                    choice: command.choice,
+                    contentHash: record.contentHash,
+                    contentSizeBytes: record.contentBytes,
+                    decision: record.decision,
+                    originalPrompt: command.residual ? undefined : record.originalPrompt,
+                    residual: command.residual,
+                }),
+            },
+        },
+    };
+}
+export function resetUserPromptDecisionEscrowForTests(kind) {
+    if (kind === undefined) {
+        byDecisionId.clear();
+        activeBySession.clear();
+        activeByDedupKey.clear();
+        return;
+    }
+    for (const [decisionId, record] of byDecisionId) {
+        if (record.decision.kind === kind)
+            removeRecord(decisionId);
+    }
+}
+export function getUserPromptEscrowDecisionForTests(decisionId) {
+    pruneExpired();
+    return byDecisionId.get(decisionId)?.decision ?? null;
+}
+export function clearUserPromptDecisionEscrowForSession(sessionId, kind) {
+    for (const [decisionId, record] of byDecisionId) {
+        if (record.sessionId === sessionId && (kind === undefined || record.decision.kind === kind))
+            removeRecord(decisionId);
+    }
+}
+//# sourceMappingURL=userprompt-decision-escrow.js.map

package/dist/daemon/userprompt-decision-escrow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userprompt-decision-escrow.js","sourceRoot":"","sources":["../../src/daemon/userprompt-decision-escrow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,0BAA0B,EAC1B,kCAAkC,EAClC,0BAA0B,EAC1B,+BAA+B,EAC/B,2BAA2B,EAC3B,gCAAgC,GACjC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,yBAAyB,EACzB,YAAY,EACZ,iCAAiC,EACjC,+BAA+B,EAC/B,gCAAgC,GACjC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAElF,MAAM,WAAW,GAAG,GAAG,CAAC;AA+BxB,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkC,CAAC;AAC/D,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;AAClD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEnD,SAAS,YAAY,CAAC,MASrB;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO;QACL,UAAU,EAAE,OAAO,MAAM,CAAC,UAAU,EAAE,EAAE;QACxC,QAAQ,EAAE,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE;QACpD,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,kBAAkB;QAC5B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,GAAG;QACd,gBAAgB,EAAE,4BAA4B,EAAE;QAChD,SAAS,EAAE,GAAG,GAAG,MAAM,CAAC,SAAS;QACjC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,SAAS;QAClC,GAAG,EAAE;YACH,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,IAAI;YAC/B,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ;YACjF,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa;YAChG,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU;YAC1F,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK;YAC7B,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,UAAU;YACvC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,YAAY;YAC3C,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC;YACxC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK;SACxE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,UAAkB;IACtC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,UAAU;QAAE,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACnG,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkB,EAAE,MAA8B;IAC7E,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC9E,IAAI,UAAU,CAAC,GAAG;QAAE,kCAAkC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxE,YAAY,CAAC,UAAU,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACpC,KAAK,GAAG,CAAC;IACT,0FAA0F;AAC5F,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,MAY9C;IACC,YAAY,EAAE,CAAC;IACf,OAAO,YAAY,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM;YAAE,MAAM;QACnB,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;IAC5D,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3D,IAAI,mBAAmB,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACvD,IAAI,QAAQ,EAAE,CAAC;YACb,0BAA0B,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9C,OAAO,QAAQ,CAAC,QAAQ,CAAC;QAC3B,CAAC;QACD,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,kBAAkB,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjE,IAAI,kBAAkB,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,cAAc,GAAG,YAAY,CAAC;gBAClC,GAAG,MAAM;gBACT,MAAM,EAAE,sEAAsE;gBAC9E,MAAM,EAAE,4BAA4B;aACrC,CAAC,CAAC;YACH,gCAAgC,CAAC,cAAc,CAAC,CAAC;YACjD,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAEtC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE;QACpC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,QAAQ;QACR,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,wBAAwB;QACjE,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3D,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;IACpD,0BAA0B,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC7E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,QAA0B;IACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,4BAA4B,EAAE,CAAC;QACrD,OAAO;YACL,wFAAwF;YACxF,oEAAoE;YACpE,mEAAmE;SACpE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;IACD,OAAO,gCAAgC,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,SAAiB,EAAE,IAA6B;IACpG,YAAY,EAAE,CAAC;IACf,OAAO,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QAClD,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC,MAAM,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,yCAAyC,CAAC,SAAiB,EAAE,IAA6B;IACxG,YAAY,EAAE,CAAC;IACf,OAAO,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;SAC9B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;SAC3G,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;SAChC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AAChH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,UAAkB,EAAE,IAA6B;IAC3F,YAAY,EAAE,CAAC;IACf,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,SAAiB,EAAE,IAA6B;IAClG,YAAY,EAAE,CAAC;IACf,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClF,+BAA+B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjD,OAAO,+BAA+B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,SAAiB,EACjB,OAAwF,EACxF,IAA6B;IAE7B,YAAY,EAAE,CAAC;IACf,IAAI,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,yBAAyB,CAAC,2EAA2E,CAAC;aACjH,CAAC;QACJ,CAAC;QACD,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,yBAAyB,CAAC,6BAA6B,UAAU,oEAAoE,CAAC;SACjJ,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,yBAAyB,CAAC,6BAA6B,UAAU,kCAAkC,CAAC;SAC/G,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,KAAK,YAAY;QAC7B,CAAC,CAAC,qBAAqB;QACvB,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,eAAe;YAClC,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,gBAAgB,CAAC;IACzB,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAClE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,yBAAyB,CAAC,6BAA6B,UAAU,oEAAoE,CAAC;SACjJ,CAAC;IACJ,CAAC;IACD,2BAA2B,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,mBAAmB;QAC7B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS;QACjD,eAAe,EAAE,iBAAiB;QAClC,eAAe,EAAE,kBAAkB;QACnC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,MAAM,CAAC,YAAY;QACrC,eAAe,EAAE,KAAK;KACvB,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/B,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACpE,YAAY,CAAC,UAAU,CAAC,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,yBAAyB,CAAC,6BAA6B,UAAU,gEAAgE,CAAC;SAC7I,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QACvC,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACtE,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC/D,CAAC;IAED,YAAY,CAAC,UAAU,CAAC,CAAC;IACzB,OAAO;QACL,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE;YACR,kBAAkB,EAAE;gBAClB,aAAa,EAAE,kBAAkB;gBACjC,iBAAiB,EAAE,iCAAiC,CAAC;oBACnD,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,gBAAgB,EAAE,MAAM,CAAC,YAAY;oBACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc;oBACpE,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC;aACH;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,IAA6B;IACjF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,YAAY,CAAC,KAAK,EAAE,CAAC;QACrB,eAAe,CAAC,KAAK,EAAE,CAAC;QACxB,gBAAgB,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IAED,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI;YAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,UAAkB;IACpE,YAAY,EAAE,CAAC;IACf,OAAO,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,uCAAuC,CAAC,SAAiB,EAAE,IAA6B;IACtG,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAChD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IACxH,CAAC;AACH,CAAC"}

package/dist/daemon/vge-client.d.ts

@@ -0,0 +1,64 @@
+import type { Config } from '../shared/config-schema.js';
+import type { ConversationMessage, GuardResponseSubset } from '../shared/types.js';
+type GetConfig = () => Config;
+export declare function initClient(getConfig: GetConfig): void;
+export interface AnalyzeToolOutputOptions {
+    userAllowlisted?: boolean;
+    toolInput?: Record<string, unknown>;
+    toolResultContent?: unknown;
+    toolResultIsError?: boolean;
+    escalationId?: string | null;
+    subagent?: boolean;
+    agentId?: string;
+    agentType?: string;
+    parentSessionId?: string | null;
+    conversation?: ConversationMessage[];
+}
+export type L1FailureReason = 'timeout' | 'network_error' | 'vge_error' | 'parse_error';
+export type AttachmentScanFailureReason = L1FailureReason | 'missing_api_key';
+export type PromptScanFailureReason = L1FailureReason | 'missing_api_key';
+export type ToolOutputScanFailureReason = L1FailureReason | 'missing_api_key';
+export interface AttachmentInputScanResult {
+    result: GuardResponseSubset | null;
+    failureReason?: AttachmentScanFailureReason;
+    httpStatus?: number;
+    elapsedMs?: number;
+    localRequestId?: string;
+    attempt?: number;
+    retryAfterMs?: number;
+}
+export interface PromptInputScanResult {
+    result: GuardResponseSubset | null;
+    failureReason?: PromptScanFailureReason;
+    httpStatus?: number;
+    elapsedMs?: number;
+    localRequestId?: string;
+    attempt?: number;
+    retryAfterMs?: number;
+}
+export interface ToolOutputScanResult {
+    result: GuardResponseSubset | null;
+    failureReason?: ToolOutputScanFailureReason;
+    httpStatus?: number;
+    elapsedMs?: number;
+    localRequestId?: string;
+    attempt?: number;
+    retryAfterMs?: number;
+}
+export declare function scanToolOutput(text: string, toolName: string, resourceId: string, sessionId: string, options?: boolean | AnalyzeToolOutputOptions): Promise<ToolOutputScanResult>;
+export declare function analyzeToolOutput(text: string, toolName: string, resourceId: string, sessionId: string, options?: boolean | AnalyzeToolOutputOptions): Promise<GuardResponseSubset | null>;
+export declare function scanAttachmentInput(text: string, params: {
+    conversation?: ConversationMessage[];
+    displayPath: string;
+    resourceId: string;
+    sessionId: string;
+    timeoutMs: number;
+}): Promise<AttachmentInputScanResult>;
+export declare function scanPromptInput(prompt: string, params: {
+    conversation?: ConversationMessage[];
+    resourceId: string;
+    sessionId: string;
+    timeoutMs: number;
+}): Promise<PromptInputScanResult>;
+export {};
+//# sourceMappingURL=vge-client.d.ts.map

package/dist/daemon/vge-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vge-client.d.ts","sourceRoot":"","sources":["../../src/daemon/vge-client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAQnF,KAAK,SAAS,GAAG,MAAM,MAAM,CAAC;AAK9B,wBAAgB,UAAU,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI,CAErD;AAiDD,MAAM,WAAW,wBAAwB;IACvC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,YAAY,CAAC,EAAE,mBAAmB,EAAE,CAAC;CACtC;AAeD,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,eAAe,GAAG,WAAW,GAAG,aAAa,CAAC;AACxF,MAAM,MAAM,2BAA2B,GAAG,eAAe,GAAG,iBAAiB,CAAC;AAC9E,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG,iBAAiB,CAAC;AAC1E,MAAM,MAAM,2BAA2B,GAAG,eAAe,GAAG,iBAAiB,CAAC;AAE9E,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,2BAA2B,CAAC;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC,aAAa,CAAC,EAAE,2BAA2B,CAAC;IAC5C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAwND,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,OAAO,GAAG,wBAAgC,GAClD,OAAO,CAAC,oBAAoB,CAAC,CAyH/B;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,OAAO,GAAG,wBAAgC,GAClD,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAErC;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE;IACN,YAAY,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,yBAAyB,CAAC,CAyDpC;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE;IACN,YAAY,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,qBAAqB,CAAC,CAwDhC"}