@vigil-guard/vge-cc-guard 0.9.0-beta.1

package/dist/shim/inline-resolver-terminal.js

@@ -0,0 +1,201 @@
+import * as fs from 'fs';
+import * as tty from 'tty';
+import { BLOCKING_DECISION_CHOICES, choiceFromDecisionKey, } from '../shared/blocking-decision-choices.js';
+const TTY_PATH = '/dev/tty';
+const RESET_STYLE = '\x1b[0m';
+const BOLD = '\x1b[1m';
+const DIM = '\x1b[2m';
+const RED = '\x1b[31m';
+const GREEN = '\x1b[32m';
+const YELLOW = '\x1b[33m';
+const SUBMIT_FEEDBACK_MS = 250;
+export function ttyAvailable(ttyPath = TTY_PATH) {
+    let fd = null;
+    try {
+        fd = fs.openSync(ttyPath, 'r+');
+        return true;
+    }
+    catch {
+        return false;
+    }
+    finally {
+        if (fd !== null)
+            fs.closeSync(fd);
+    }
+}
+function rawModeAvailable(input) {
+    return typeof input.setRawMode === 'function';
+}
+export function choiceFromInlineInput(input) {
+    const normalized = input.trim().toLowerCase();
+    const numericChoice = choiceFromDecisionKey(normalized);
+    if (numericChoice)
+        return numericChoice;
+    if (normalized === 'block' || normalized === 'deny')
+        return 'block';
+    if (normalized === 'allow once' || normalized === 'once')
+        return 'allow_once';
+    if (normalized === 'allow session' || normalized === 'session')
+        return 'allow_session';
+    return null;
+}
+function displayKind(kind) {
+    return kind === 'pretool_url' ? 'PreTool URL fetch' : 'PostTool output';
+}
+function impactText(kind) {
+    return kind === 'pretool_url'
+        ? 'The tool has not run yet. Allow starts the fetch; block denies it.'
+        : 'The tool already ran. Allow releases the output; block hides it from Claude.';
+}
+function choiceLabel(choice) {
+    return BLOCKING_DECISION_CHOICES.find((option) => option.choice === choice)?.shortLabel ?? choice;
+}
+function choiceLine(choice) {
+    if (choice.choice === 'block') {
+        return `${RED}${choice.key}) ${choice.shortLabel}${RESET_STYLE}          Deny/redact now and remember this exact resource as blocked.`;
+    }
+    if (choice.choice === 'allow_once') {
+        return `${GREEN}${choice.key}) ${choice.shortLabel}${RESET_STYLE}     Allow only this hook call; ask again next time.`;
+    }
+    return `${GREEN}${choice.key}) ${choice.shortLabel}${RESET_STYLE}  Allow this exact resource until this session ends.`;
+}
+function formatVgeLine(decision) {
+    if (decision.vge.origin === 'local_fallback') {
+        return `local fallback: ${decision.reason}`;
+    }
+    const fields = [
+        `score=${decision.vge.score}`,
+        decision.vge.ruleAction ? `ruleAction=${decision.vge.ruleAction}` : null,
+        decision.vge.decision ? `decision=${decision.vge.decision}` : null,
+        decision.vge.arbiterSignal ? `arbiterSignal=${decision.vge.arbiterSignal}` : null,
+    ].filter((field) => field !== null);
+    return fields.join(' ');
+}
+function wrapLine(line, width) {
+    const max = Math.max(24, width);
+    if (line.length <= max)
+        return [line];
+    const words = line.split(/\s+/);
+    const lines = [];
+    let current = '';
+    for (const word of words) {
+        if (word.length > max) {
+            if (current)
+                lines.push(current);
+            lines.push(word.slice(0, max - 1));
+            current = word.slice(max - 1);
+        }
+        else if (!current) {
+            current = word;
+        }
+        else if (`${current} ${word}`.length <= max) {
+            current = `${current} ${word}`;
+        }
+        else {
+            lines.push(current);
+            current = word;
+        }
+    }
+    if (current)
+        lines.push(current);
+    return lines;
+}
+function wrapped(label, value, width) {
+    const prefix = `${label}: `;
+    const firstWidth = Math.max(20, width - prefix.length);
+    const lines = wrapLine(value, firstWidth);
+    const indent = ' '.repeat(prefix.length);
+    return lines.map((line, index) => (index === 0 ? `${prefix}${line}` : `${indent}${line}`));
+}
+export function formatInlineDecisionPrompt(decision, width = 100, state) {
+    const bodyWidth = Math.max(52, Math.min(width - 4, 118));
+    const selected = state?.selected ? `Selected: ${choiceLabel(state.selected)}. Submitting...` : state?.status;
+    const rule = '-'.repeat(Math.min(bodyWidth, 100));
+    const lines = [
+        '',
+        rule,
+        `${BOLD}${RED}VGE Agent Guard: decision required${RESET_STYLE}`,
+        `${YELLOW}Claude Code is paused. The blocked content is not released until you choose.${RESET_STYLE}`,
+        impactText(decision.kind),
+        '',
+        ...wrapped('Kind', displayKind(decision.kind), bodyWidth),
+        ...wrapped('Tool', decision.toolName, bodyWidth),
+        ...wrapped('Resource', decision.resourceLabel, bodyWidth),
+        ...wrapped('Reason', decision.reason, bodyWidth),
+        ...wrapped('VGE', formatVgeLine(decision), bodyWidth),
+        decision.vge.categories?.length ? `Categories: ${decision.vge.categories.join(', ')}` : null,
+        '',
+        `${BOLD}Choose one option. Press 1, 2, or 3. Enter is not required.${RESET_STYLE}`,
+        ...BLOCKING_DECISION_CHOICES.map(choiceLine),
+        '',
+        selected ? `${BOLD}Status:${RESET_STYLE} ${selected}` : `${BOLD}Status:${RESET_STYLE} waiting for 1 / 2 / 3`,
+        state?.invalid ? `${RED}Invalid key. Press 1, 2, or 3.${RESET_STYLE}` : null,
+        '',
+        `${DIM}This screen is drawn by vge-cc-guard on /dev/tty. stdout remains reserved for Claude Code hook JSON.${RESET_STYLE}`,
+        rule,
+        '',
+    ].filter((line) => line !== null);
+    return `${lines.join('\n')}\n`;
+}
+export function promptBlockingDecisionOnTty(decision, signal, ttyPath = TTY_PATH) {
+    return new Promise((resolve) => {
+        const inputFd = fs.openSync(ttyPath, 'r');
+        const outputFd = fs.openSync(ttyPath, 'w');
+        const input = new tty.ReadStream(inputFd);
+        const output = new tty.WriteStream(outputFd);
+        if (!rawModeAvailable(input)) {
+            output.write('vge-cc-guard inline resolver requires raw terminal input. ' +
+                'On Windows, run Claude Code from Windows Terminal, PowerShell, or cmd.exe.\n');
+            input.destroy();
+            output.end();
+            resolve(null);
+            return;
+        }
+        const previousRaw = input.isRaw;
+        let done = false;
+        let state = { status: 'waiting for 1 / 2 / 3' };
+        const render = () => {
+            output.write(formatInlineDecisionPrompt(decision, output.columns ?? 100, state));
+        };
+        const cleanup = () => {
+            input.off('data', onData);
+            signal.removeEventListener('abort', onAbort);
+            try {
+                input.setRawMode(previousRaw);
+            }
+            catch {
+                // Best-effort terminal cleanup.
+            }
+            input.destroy();
+            output.end();
+        };
+        const finish = (choice) => {
+            if (done)
+                return;
+            done = true;
+            cleanup();
+            resolve(choice);
+        };
+        const onAbort = () => finish(null);
+        const onData = (chunk) => {
+            const inputText = chunk.toString('utf8');
+            if (inputText === '\u0003')
+                return finish(null);
+            const choice = choiceFromInlineInput(inputText);
+            if (choice) {
+                state = { status: `selected ${choiceLabel(choice)}`, selected: choice };
+                render();
+                setTimeout(() => finish(choice), SUBMIT_FEEDBACK_MS).unref?.();
+                return;
+            }
+            state = { status: 'waiting for 1 / 2 / 3', invalid: true };
+            render();
+        };
+        input.setRawMode(true);
+        input.resume();
+        input.on('data', onData);
+        signal.addEventListener('abort', onAbort, { once: true });
+        render();
+    });
+}
+//# sourceMappingURL=inline-resolver-terminal.js.map

package/dist/shim/inline-resolver-terminal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inline-resolver-terminal.js","sourceRoot":"","sources":["../../src/shim/inline-resolver-terminal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAE3B,OAAO,EACL,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,wCAAwC,CAAC;AAEhD,MAAM,QAAQ,GAAG,UAAU,CAAC;AAC5B,MAAM,WAAW,GAAG,SAAS,CAAC;AAC9B,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,GAAG,GAAG,SAAS,CAAC;AACtB,MAAM,GAAG,GAAG,UAAU,CAAC;AACvB,MAAM,KAAK,GAAG,UAAU,CAAC;AACzB,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAQ/B,MAAM,UAAU,YAAY,CAAC,OAAO,GAAG,QAAQ;IAC7C,IAAI,EAAE,GAAkB,IAAI,CAAC;IAC7B,IAAI,CAAC;QACH,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,IAAI;YAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA+B;IACvD,OAAO,OAAO,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,aAAa,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IACxC,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IACpE,IAAI,UAAU,KAAK,YAAY,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC;IAC9E,IAAI,UAAU,KAAK,eAAe,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,IAA8B;IACjD,OAAO,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,iBAAiB,CAAC;AAC1E,CAAC;AAED,SAAS,UAAU,CAAC,IAA8B;IAChD,OAAO,IAAI,KAAK,aAAa;QAC3B,CAAC,CAAC,oEAAoE;QACtE,CAAC,CAAC,8EAA8E,CAAC;AACrF,CAAC;AAED,SAAS,WAAW,CAAC,MAA8B;IACjD,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,UAAU,IAAI,MAAM,CAAC;AACpG,CAAC;AAED,SAAS,UAAU,CAAC,MAAkD;IACpE,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,UAAU,GAAG,WAAW,wEAAwE,CAAC;IACzI,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACnC,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,UAAU,GAAG,WAAW,sDAAsD,CAAC;IACzH,CAAC;IACD,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,UAAU,GAAG,WAAW,sDAAsD,CAAC;AACzH,CAAC;AAED,SAAS,aAAa,CAAC,QAA0B;IAC/C,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAC7C,OAAO,mBAAmB,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,MAAM,GAAG;QACb,SAAS,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE;QAC7B,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI;QACxE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;QAClE,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI;KAClF,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAChC,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACtB,IAAI,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACnC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC9C,OAAO,GAAG,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,KAAa,EAAE,KAAa;IAC1D,MAAM,MAAM,GAAG,GAAG,KAAK,IAAI,CAAC;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAA0B,EAAE,KAAK,GAAG,GAAG,EAAE,KAAmB;IACrG,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,aAAa,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC;IAC7G,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,IAAI;QACJ,GAAG,IAAI,GAAG,GAAG,qCAAqC,WAAW,EAAE;QAC/D,GAAG,MAAM,+EAA+E,WAAW,EAAE;QACrG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QACzB,EAAE;QACF,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;QACzD,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;QAChD,GAAG,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC;QACzD,GAAG,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;QAChD,GAAG,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC;QACrD,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;QAC5F,EAAE;QACF,GAAG,IAAI,8DAA8D,WAAW,EAAE;QAClF,GAAG,yBAAyB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC5C,EAAE;QACF,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,UAAU,WAAW,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,UAAU,WAAW,wBAAwB;QAC5G,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,iCAAiC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;QAC5E,EAAE;QACF,GAAG,GAAG,uGAAuG,WAAW,EAAE;QAC1H,IAAI;QACJ,EAAE;KACH,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAClD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAA0B,EAC1B,MAAmB,EACnB,OAAO,GAAG,QAAQ;IAElB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,KAAK,CACV,4DAA4D;gBAC1D,8EAA8E,CACjF,CAAC;YACF,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC;QAChC,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,KAAK,GAAgB,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QAE7D,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QACnF,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,CAAC;gBACH,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;YACD,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,MAAqC,EAAQ,EAAE;YAC7D,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEzC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE;YACrC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,SAAS,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,MAAM,EAAE,CAAC;gBACX,KAAK,GAAG,EAAE,MAAM,EAAE,YAAY,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;gBACxE,MAAM,EAAE,CAAC;gBACT,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,KAAK,GAAG,EAAE,MAAM,EAAE,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3D,MAAM,EAAE,CAAC;QACX,CAAC,CAAC;QAEF,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/shim/inline-resolver-transport.d.ts

@@ -0,0 +1,15 @@
+import type { BlockingDecision } from '../shared/types.js';
+export interface SseEvent {
+    event: string;
+    data: unknown;
+}
+export declare function postJson(socketPath: string, route: string, body: unknown): Promise<{
+    ok: boolean;
+    status: number;
+}>;
+export declare function parseSseEvents(buffer: string, chunk: string): {
+    buffer: string;
+    events: SseEvent[];
+};
+export declare function isBlockingDecision(value: unknown): value is BlockingDecision;
+//# sourceMappingURL=inline-resolver-transport.d.ts.map

package/dist/shim/inline-resolver-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inline-resolver-transport.d.ts","sourceRoot":"","sources":["../../src/shim/inline-resolver-transport.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAK3D,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;CACf;AAMD,wBAAgB,QAAQ,CACtB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,OAAO,GACZ,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAkC1C;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,EAAE,CAAA;CAAE,CAqBpG;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAS5E"}

package/dist/shim/inline-resolver-transport.js

@@ -0,0 +1,68 @@
+import * as http from 'http';
+import { readDaemonToken, tokenHeader } from '../shared/daemon-token.js';
+const HTTP_TIMEOUT_MS = 5_000;
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+export function postJson(socketPath, route, body) {
+    return new Promise((resolve) => {
+        const payload = JSON.stringify(body);
+        const token = readDaemonToken();
+        const req = http.request({
+            socketPath,
+            path: route,
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Content-Length': Buffer.byteLength(payload),
+                ...(token ? tokenHeader(token) : {}),
+            },
+            timeout: HTTP_TIMEOUT_MS,
+        }, (res) => {
+            res.resume();
+            res.on('end', () => resolve({
+                ok: (res.statusCode ?? 0) >= 200 && (res.statusCode ?? 0) < 300,
+                status: res.statusCode ?? 0,
+            }));
+        });
+        req.on('error', () => resolve({ ok: false, status: 0 }));
+        req.on('timeout', () => {
+            req.destroy();
+            resolve({ ok: false, status: 0 });
+        });
+        req.write(payload);
+        req.end();
+    });
+}
+export function parseSseEvents(buffer, chunk) {
+    const parts = (buffer + chunk).split(/\n\n/);
+    const nextBuffer = parts.pop() ?? '';
+    const events = [];
+    for (const part of parts) {
+        const lines = part.split('\n');
+        const eventLine = lines.find((line) => line.startsWith('event: '));
+        const dataLine = lines.find((line) => line.startsWith('data: '));
+        if (!eventLine || !dataLine)
+            continue;
+        try {
+            events.push({
+                event: eventLine.slice('event: '.length).trim(),
+                data: JSON.parse(dataLine.slice('data: '.length)),
+            });
+        }
+        catch {
+            // Ignore malformed SSE frames; daemon timeout remains fail-closed.
+        }
+    }
+    return { buffer: nextBuffer, events };
+}
+export function isBlockingDecision(value) {
+    if (!isRecord(value))
+        return false;
+    return (typeof value['decisionId'] === 'string' &&
+        typeof value['sessionId'] === 'string' &&
+        typeof value['status'] === 'string' &&
+        typeof value['toolName'] === 'string' &&
+        typeof value['resourceLabel'] === 'string');
+}
+//# sourceMappingURL=inline-resolver-transport.js.map

package/dist/shim/inline-resolver-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inline-resolver-transport.js","sourceRoot":"","sources":["../../src/shim/inline-resolver-transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAEzE,MAAM,eAAe,GAAG,KAAK,CAAC;AAO9B,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,UAAkB,EAClB,KAAa,EACb,IAAa;IAEb,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CACtB;YACE,UAAU;YACV,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;gBAC5C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACrC;YACD,OAAO,EAAE,eAAe;SACzB,EACD,CAAC,GAAG,EAAE,EAAE;YACN,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CACjB,OAAO,CAAC;gBACN,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,GAAG;gBAC/D,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;aAC5B,CAAC,CACH,CAAC;QACJ,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,KAAa;IAC1D,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACrC,MAAM,MAAM,GAAe,EAAE,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;YAAE,SAAS;QACtC,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY;aAC7D,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CACL,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,QAAQ;QACvC,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ;QACtC,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ;QACnC,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ;QACrC,OAAO,KAAK,CAAC,eAAe,CAAC,KAAK,QAAQ,CAC3C,CAAC;AACJ,CAAC"}

package/dist/shim/inline-resolver.d.ts

@@ -0,0 +1,18 @@
+import type { BlockingDecision, BlockingDecisionChoice } from '../shared/types.js';
+export { choiceFromInlineInput, formatInlineDecisionPrompt, promptBlockingDecisionOnTty, ttyAvailable, } from './inline-resolver-terminal.js';
+export type InlinePromptForChoice = (decision: BlockingDecision, signal: AbortSignal) => Promise<BlockingDecisionChoice | null>;
+export interface InlineResolverOptions {
+    clientId?: string;
+    heartbeatIntervalMs?: number;
+    promptForChoice?: InlinePromptForChoice;
+    ttyPath?: string;
+}
+export interface InlineResolverHandle {
+    clientId: string;
+    active: boolean;
+    ready: Promise<boolean>;
+    stop: () => void;
+}
+export declare function sessionIdFromHookPayload(event: string, payload: unknown): string | null;
+export declare function startInlineResolver(socketPath: string, sessionId: string | null, options?: InlineResolverOptions): InlineResolverHandle;
+//# sourceMappingURL=inline-resolver.d.ts.map

package/dist/shim/inline-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inline-resolver.d.ts","sourceRoot":"","sources":["../../src/shim/inline-resolver.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAGnF,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,EAC3B,YAAY,GACb,MAAM,+BAA+B,CAAC;AAUvC,MAAM,MAAM,qBAAqB,GAAG,CAClC,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;AAE5C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACxB,IAAI,EAAE,MAAM,IAAI,CAAC;CAClB;AAUD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAKvF;AAmBD,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,GAAE,qBAA0B,GAClC,oBAAoB,CAuHtB"}

package/dist/shim/inline-resolver.js

@@ -0,0 +1,152 @@
+import * as crypto from 'crypto';
+import * as http from 'http';
+import { readDaemonToken, tokenHeader } from '../shared/daemon-token.js';
+import { isBlockingDecision, parseSseEvents, postJson } from './inline-resolver-transport.js';
+export { choiceFromInlineInput, formatInlineDecisionPrompt, promptBlockingDecisionOnTty, ttyAvailable, } from './inline-resolver-terminal.js';
+import { promptBlockingDecisionOnTty, ttyAvailable, } from './inline-resolver-terminal.js';
+const DEFAULT_HEARTBEAT_INTERVAL_MS = 5_000;
+const READY_TIMEOUT_MS = 1_000;
+const TTY_PATH = '/dev/tty';
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+export function sessionIdFromHookPayload(event, payload) {
+    if (event !== 'pretool' && event !== 'posttool')
+        return null;
+    if (!isRecord(payload))
+        return null;
+    const sessionId = payload['session_id'];
+    return typeof sessionId === 'string' && sessionId.length > 0 ? sessionId : null;
+}
+async function resolveWithRetry(socketPath, decisionId, clientId, choice) {
+    for (let attempt = 0; attempt < 3; attempt += 1) {
+        const result = await postJson(socketPath, `/v1/decisions/${encodeURIComponent(decisionId)}/resolve`, {
+            client_id: clientId,
+            choice,
+        });
+        if (result.ok)
+            return true;
+        await sleep(100 * (attempt + 1));
+    }
+    return false;
+}
+export function startInlineResolver(socketPath, sessionId, options = {}) {
+    const clientId = options.clientId ?? `inline_${crypto.randomUUID()}`;
+    const heartbeatIntervalMs = options.heartbeatIntervalMs ?? DEFAULT_HEARTBEAT_INTERVAL_MS;
+    const ttyPath = options.ttyPath ?? TTY_PATH;
+    const promptForChoice = options.promptForChoice ?? ((decision, signal) => promptBlockingDecisionOnTty(decision, signal, ttyPath));
+    if (!sessionId || (!options.promptForChoice && !ttyAvailable(ttyPath))) {
+        return {
+            clientId,
+            active: false,
+            ready: Promise.resolve(false),
+            stop: () => undefined,
+        };
+    }
+    const abortController = new AbortController();
+    const resolving = new Set();
+    let stopped = false;
+    let req = null;
+    let reconnectTimer = null;
+    let heartbeatTimer = null;
+    let buffer = '';
+    let resolveReady = () => undefined;
+    let readyResolved = false;
+    const ready = new Promise((resolve) => {
+        resolveReady = (value) => {
+            if (readyResolved)
+                return;
+            readyResolved = true;
+            resolve(value);
+        };
+    });
+    const markReady = (value) => resolveReady(value);
+    const heartbeat = async () => {
+        if (stopped)
+            return false;
+        const result = await postJson(socketPath, '/v1/resolver/heartbeat', {
+            client_id: clientId,
+            session_id: sessionId,
+        });
+        return result.ok;
+    };
+    const handleDecision = async (decision) => {
+        if (stopped || decision.sessionId !== sessionId || decision.status !== 'pending')
+            return;
+        if (resolving.has(decision.decisionId))
+            return;
+        resolving.add(decision.decisionId);
+        const choice = await promptForChoice(decision, abortController.signal);
+        if (!choice || stopped)
+            return;
+        await resolveWithRetry(socketPath, decision.decisionId, clientId, choice);
+    };
+    const scheduleReconnect = () => {
+        if (stopped || reconnectTimer)
+            return;
+        reconnectTimer = setTimeout(() => {
+            reconnectTimer = null;
+            connect();
+        }, 250);
+        reconnectTimer.unref?.();
+    };
+    const connect = () => {
+        if (stopped)
+            return;
+        const token = readDaemonToken();
+        req = http.request({
+            socketPath,
+            path: `/v1/decisions/stream?client_id=${encodeURIComponent(clientId)}&session_id=${encodeURIComponent(sessionId)}`,
+            method: 'GET',
+            headers: token ? tokenHeader(token) : {},
+        }, (res) => {
+            if ((res.statusCode ?? 0) >= 200 && (res.statusCode ?? 0) < 300)
+                markReady(true);
+            res.on('data', (chunk) => {
+                const parsed = parseSseEvents(buffer, chunk.toString('utf8'));
+                buffer = parsed.buffer;
+                for (const event of parsed.events) {
+                    if (event.event === 'blocking_decision' && isBlockingDecision(event.data)) {
+                        void handleDecision(event.data);
+                    }
+                }
+            });
+            res.on('end', scheduleReconnect);
+        });
+        req.on('error', scheduleReconnect);
+        req.end();
+    };
+    void (async () => {
+        const heartbeatOk = await heartbeat();
+        if (!heartbeatOk || stopped) {
+            markReady(false);
+            return;
+        }
+        heartbeatTimer = setInterval(() => {
+            void heartbeat();
+        }, heartbeatIntervalMs);
+        heartbeatTimer.unref?.();
+        connect();
+    })();
+    const readyTimer = setTimeout(() => markReady(false), READY_TIMEOUT_MS);
+    readyTimer.unref?.();
+    void ready.finally(() => clearTimeout(readyTimer));
+    return {
+        clientId,
+        active: true,
+        ready,
+        stop: () => {
+            stopped = true;
+            abortController.abort();
+            if (heartbeatTimer)
+                clearInterval(heartbeatTimer);
+            if (reconnectTimer)
+                clearTimeout(reconnectTimer);
+            req?.destroy();
+        },
+    };
+}
+//# sourceMappingURL=inline-resolver.js.map

package/dist/shim/inline-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inline-resolver.js","sourceRoot":"","sources":["../../src/shim/inline-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC9F,OAAO,EACL,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,EAC3B,YAAY,GACb,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,2BAA2B,EAC3B,YAAY,GACb,MAAM,+BAA+B,CAAC;AAEvC,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAC5C,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC;AAqB5B,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,OAAgB;IACtE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACxC,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAClF,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,UAAkB,EAClB,UAAkB,EAClB,QAAgB,EAChB,MAA8B;IAE9B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,iBAAiB,kBAAkB,CAAC,UAAU,CAAC,UAAU,EAAE;YACnG,SAAS,EAAE,QAAQ;YACnB,MAAM;SACP,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,SAAwB,EACxB,UAAiC,EAAE;IAEnC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;IACrE,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,6BAA6B,CAAC;IACzF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC;IAC5C,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CACvE,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAE1D,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO;YACL,QAAQ;YACR,MAAM,EAAE,KAAK;YACb,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;YAC7B,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;SACtB,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,GAAG,GAA8B,IAAI,CAAC;IAC1C,IAAI,cAAc,GAA0B,IAAI,CAAC;IACjD,IAAI,cAAc,GAA0B,IAAI,CAAC;IACjD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,YAAY,GAA6B,GAAG,EAAE,CAAC,SAAS,CAAC;IAC7D,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;QAC7C,YAAY,GAAG,CAAC,KAAK,EAAE,EAAE;YACvB,IAAI,aAAa;gBAAE,OAAO;YAC1B,aAAa,GAAG,IAAI,CAAC;YACrB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,CAAC,KAAc,EAAQ,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAEhE,MAAM,SAAS,GAAG,KAAK,IAAsB,EAAE;QAC7C,IAAI,OAAO;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,wBAAwB,EAAE;YAClE,SAAS,EAAE,QAAQ;YACnB,UAAU,EAAE,SAAS;SACtB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,EAAE,CAAC;IACnB,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAAE,QAA0B,EAAiB,EAAE;QACzE,IAAI,OAAO,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QACzF,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO;QAC/C,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,IAAI,OAAO;YAAE,OAAO;QAC/B,MAAM,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,GAAS,EAAE;QACnC,IAAI,OAAO,IAAI,cAAc;YAAE,OAAO;QACtC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,cAAc,GAAG,IAAI,CAAC;YACtB,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC;IAC3B,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,IAAI,OAAO;YAAE,OAAO;QACpB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAChC,GAAG,GAAG,IAAI,CAAC,OAAO,CAChB;YACE,UAAU;YACV,IAAI,EAAE,kCAAkC,kBAAkB,CAAC,QAAQ,CAAC,eAAe,kBAAkB,CAAC,SAAS,CAAC,EAAE;YAClH,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;SACzC,EACD,CAAC,GAAG,EAAE,EAAE;YACN,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,GAAG;gBAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACjF,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC/B,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC9D,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBACvB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClC,IAAI,KAAK,CAAC,KAAK,KAAK,mBAAmB,IAAI,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC1E,KAAK,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAClC,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QACnC,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACnC,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,MAAM,WAAW,GAAG,MAAM,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,WAAW,IAAI,OAAO,EAAE,CAAC;YAC5B,SAAS,CAAC,KAAK,CAAC,CAAC;YACjB,OAAO;QACT,CAAC;QACD,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YAChC,KAAK,SAAS,EAAE,CAAC;QACnB,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACxB,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACxE,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;IACrB,KAAK,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;IAEnD,OAAO;QACL,QAAQ;QACR,MAAM,EAAE,IAAI;QACZ,KAAK;QACL,IAAI,EAAE,GAAG,EAAE;YACT,OAAO,GAAG,IAAI,CAAC;YACf,eAAe,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,cAAc;gBAAE,aAAa,CAAC,cAAc,CAAC,CAAC;YAClD,IAAI,cAAc;gBAAE,YAAY,CAAC,cAAc,CAAC,CAAC;YACjD,GAAG,EAAE,OAAO,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/shim/lazy-start.d.ts

@@ -0,0 +1,2 @@
+export declare function ensureDaemonRunning(): Promise<void>;
+//# sourceMappingURL=lazy-start.d.ts.map

package/dist/shim/lazy-start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lazy-start.d.ts","sourceRoot":"","sources":["../../src/shim/lazy-start.ts"],"names":[],"mappings":"AA2BA,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAiCzD"}

package/dist/shim/lazy-start.js

@@ -0,0 +1,68 @@
+import { spawn } from 'child_process';
+import fs from 'fs';
+import * as net from 'net';
+import { getIpcAddress } from '../shared/ipc-address.js';
+import { acquireDaemonStartLock } from './daemon-start-lock.js';
+const DAEMON_WAIT_MS = 1_000;
+const POLL_INTERVAL_MS = 50;
+function socketExists(socketPath) {
+    return new Promise((resolve) => {
+        const sock = net.createConnection(socketPath);
+        sock.once('connect', () => {
+            sock.destroy();
+            resolve(true);
+        });
+        sock.once('error', () => {
+            sock.destroy();
+            resolve(false);
+        });
+    });
+}
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+export async function ensureDaemonRunning() {
+    const socketPath = getIpcAddress();
+    if (await socketExists(socketPath))
+        return;
+    const daemonBin = process.argv[1];
+    if (!daemonBin)
+        return;
+    let daemonStat;
+    try {
+        daemonStat = fs.statSync(daemonBin);
+    }
+    catch {
+        return;
+    }
+    if (!daemonStat.isFile())
+        return;
+    const startLock = acquireDaemonStartLock({ socketPath, binaryPath: daemonBin });
+    if (!startLock.ok) {
+        await waitForSocket(socketPath);
+        return;
+    }
+    try {
+        if (await socketExists(socketPath))
+            return;
+        const child = spawn(process.execPath, [daemonBin, 'daemon'], {
+            detached: true,
+            stdio: 'ignore',
+            windowsHide: true,
+        });
+        child.unref();
+        await waitForSocket(socketPath);
+    }
+    finally {
+        startLock.handle.release();
+    }
+}
+async function waitForSocket(socketPath) {
+    const deadline = Date.now() + DAEMON_WAIT_MS;
+    while (Date.now() < deadline) {
+        if (await socketExists(socketPath))
+            return;
+        await sleep(POLL_INTERVAL_MS);
+    }
+}
+//# sourceMappingURL=lazy-start.js.map

package/dist/shim/lazy-start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lazy-start.js","sourceRoot":"","sources":["../../src/shim/lazy-start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,SAAS,YAAY,CAAC,UAAkB;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YACxB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,IAAI,MAAM,YAAY,CAAC,UAAU,CAAC;QAAE,OAAO;IAE3C,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,IAAI,UAAoB,CAAC;IACzB,IAAI,CAAC;QACH,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE;QAAE,OAAO;IAEjC,MAAM,SAAS,GAAG,sBAAsB,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;IAChF,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,IAAI,MAAM,YAAY,CAAC,UAAU,CAAC;YAAE,OAAO;QAE3C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE;YAC3D,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,UAAkB;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;IAC7C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,MAAM,YAAY,CAAC,UAAU,CAAC;YAAE,OAAO;QAC3C,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChC,CAAC;AACH,CAAC"}

package/dist/tui/App.d.ts

@@ -0,0 +1,7 @@
+import React from 'react';
+interface AppProps {
+    onClearScreen?: () => void;
+}
+export declare function App({ onClearScreen }?: AppProps): React.ReactElement;
+export {};
+//# sourceMappingURL=App.d.ts.map

package/dist/tui/App.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"App.d.ts","sourceRoot":"","sources":["../../src/tui/App.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA8B,MAAM,OAAO,CAAC;AAkBnD,UAAU,QAAQ;IAChB,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;CAC5B;AAED,wBAAgB,GAAG,CAAC,EAAE,aAAa,EAAE,GAAE,QAAa,GAAG,KAAK,CAAC,YAAY,CAsDxE"}

package/dist/tui/App.js

@@ -0,0 +1,62 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useEffect, useState } from 'react';
+import { Box, useApp } from 'ink';
+import { Banner } from './components/Banner.js';
+import { S } from './strings.js';
+import { MainMenu } from './screens/MainMenu.js';
+import { ApiKeys } from './screens/ApiKeys.js';
+import { ToolsPolicy } from './screens/ToolsPolicy.js';
+import { NativeCcPermissions } from './screens/NativeCcPermissions.js';
+import { ContextIngressPolicy } from './screens/ContextIngressPolicy.js';
+import { SecurityBaseline } from './screens/SecurityBaseline.js';
+import { ViewConfig } from './screens/ViewConfig.js';
+import { LiveEvents } from './screens/LiveEvents.js';
+import { PendingEscalations } from './screens/PendingEscalations.js';
+import { AuditViewer } from './screens/AuditViewer.js';
+import { Stats } from './screens/Stats.js';
+import { readDaemonStatus } from './lib/daemon-client.js';
+export function App({ onClearScreen } = {}) {
+    const [screen, setScreen] = useState('main-menu');
+    const [daemonStatus, setDaemonStatus] = useState();
+    const { exit } = useApp();
+    useEffect(() => {
+        let active = true;
+        void readDaemonStatus().then((status) => {
+            if (active)
+                setDaemonStatus(status);
+        });
+        return () => { active = false; };
+    }, []);
+    const goBack = () => {
+        onClearScreen?.();
+        setScreen('main-menu');
+    };
+    const renderScreen = () => {
+        switch (screen) {
+            case 'main-menu':
+                return _jsx(MainMenu, { daemonStatus: daemonStatus, onNavigate: setScreen, onQuit: () => exit() });
+            case 'api-keys':
+                return _jsx(ApiKeys, { onBack: goBack });
+            case 'tools-policy':
+                return _jsx(ToolsPolicy, { onBack: goBack });
+            case 'native-cc-permissions':
+                return _jsx(NativeCcPermissions, { onBack: goBack });
+            case 'context-ingress-policy':
+                return _jsx(ContextIngressPolicy, { onBack: goBack });
+            case 'security-baseline':
+                return _jsx(SecurityBaseline, { onBack: goBack });
+            case 'view-config':
+                return _jsx(ViewConfig, { daemonStatus: daemonStatus, onBack: goBack });
+            case 'live-events':
+                return _jsx(LiveEvents, { onBack: goBack });
+            case 'pending-escalations':
+                return _jsx(PendingEscalations, { onBack: goBack });
+            case 'audit-viewer':
+                return _jsx(AuditViewer, { onBack: goBack, onClearScreen: onClearScreen });
+            case 'stats':
+                return _jsx(Stats, { onBack: goBack });
+        }
+    };
+    return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Banner, { subtitle: S.APP_SUBTITLE, tagline: screen === 'main-menu' ? [S.APP_TAGLINE, S.APP_TAGLINE_2] : undefined }), renderScreen()] }));
+}
+//# sourceMappingURL=App.js.map