@vigil-guard/vge-cc-guard 0.9.0-beta.1

package/dist/tui/App.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"App.js","sourceRoot":"","sources":["../../src/tui/App.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,CAAC,EAAE,MAAM,cAAc,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,gBAAgB,EAA4B,MAAM,wBAAwB,CAAC;AAMpF,MAAM,UAAU,GAAG,CAAC,EAAE,aAAa,KAAe,EAAE;IAClD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAS,WAAW,CAAC,CAAC;IAC1D,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,EAAmC,CAAC;IACpF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;IAE1B,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,KAAK,gBAAgB,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACtC,IAAI,MAAM;gBAAE,eAAe,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,aAAa,EAAE,EAAE,CAAC;QAClB,SAAS,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,GAAuB,EAAE;QAC5C,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,WAAW;gBACd,OAAO,KAAC,QAAQ,IAAC,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,GAAI,CAAC;YAC/F,KAAK,UAAU;gBACb,OAAO,KAAC,OAAO,IAAC,MAAM,EAAE,MAAM,GAAI,CAAC;YACrC,KAAK,cAAc;gBACjB,OAAO,KAAC,WAAW,IAAC,MAAM,EAAE,MAAM,GAAI,CAAC;YACzC,KAAK,uBAAuB;gBAC1B,OAAO,KAAC,mBAAmB,IAAC,MAAM,EAAE,MAAM,GAAI,CAAC;YACjD,KAAK,wBAAwB;gBAC3B,OAAO,KAAC,oBAAoB,IAAC,MAAM,EAAE,MAAM,GAAI,CAAC;YAClD,KAAK,mBAAmB;gBACtB,OAAO,KAAC,gBAAgB,IAAC,MAAM,EAAE,MAAM,GAAI,CAAC;YAC9C,KAAK,aAAa;gBAChB,OAAO,KAAC,UAAU,IAAC,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAI,CAAC;YACpE,KAAK,aAAa;gBAChB,OAAO,KAAC,UAAU,IAAC,MAAM,EAAE,MAAM,GAAI,CAAC;YACxC,KAAK,qBAAqB;gBACxB,OAAO,KAAC,kBAAkB,IAAC,MAAM,EAAE,MAAM,GAAI,CAAC;YAChD,KAAK,cAAc;gBACjB,OAAO,KAAC,WAAW,IAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,GAAI,CAAC;YACvE,KAAK,OAAO;gBACV,OAAO,KAAC,KAAK,IAAC,MAAM,EAAE,MAAM,GAAI,CAAC;QACrC,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,aACzB,KAAC,MAAM,IACL,QAAQ,EAAE,CAAC,CAAC,YAAY,EACxB,OAAO,EAAE,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,GAC9E,EACD,YAAY,EAAE,IACX,CACP,CAAC;AACJ,CAAC"}

package/dist/tui/components/Banner.d.ts

@@ -0,0 +1,9 @@
+import React from 'react';
+export declare const BRAND_CYAN = "#00D4FF";
+interface BannerProps {
+    subtitle?: string;
+    tagline?: string[];
+}
+export declare function Banner({ subtitle, tagline }: BannerProps): React.ReactElement;
+export {};
+//# sourceMappingURL=Banner.d.ts.map

package/dist/tui/components/Banner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Banner.d.ts","sourceRoot":"","sources":["../../../src/tui/components/Banner.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,eAAO,MAAM,UAAU,YAAY,CAAC;AAapC,UAAU,WAAW;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAUD,wBAAgB,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,WAAW,GAAG,KAAK,CAAC,YAAY,CAiC7E"}

package/dist/tui/components/Banner.js

@@ -0,0 +1,29 @@
+import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
+import { Box, Text } from 'ink';
+export const BRAND_CYAN = '#00D4FF';
+const LOGO_LINES = [
+    '██╗   ██╗ ██████╗ ███████╗      ██████╗ ██╗   ██╗  █████╗  ██████╗  ██████╗ ',
+    '██║   ██║██╔════╝ ██╔════╝     ██╔════╝ ██║   ██║ ██╔══██╗ ██╔══██╗ ██╔══██╗',
+    '██║   ██║██║  ███╗█████╗       ██║  ███╗██║   ██║ ███████║ ██████╔╝ ██║  ██║',
+    '██║   ██║██║   ██║██╔══╝       ██║   ██║██║   ██║ ██╔══██║ ██╔══██╗ ██║  ██║',
+    '╚██╗ ██╔╝╚██████╔╝███████╗     ╚██████╔╝╚██████╔╝ ██║  ██║ ██║  ██║ ██████╔╝',
+    ' ╚═╝ ╚═╝  ╚═════╝ ╚══════╝      ╚═════╝  ╚═════╝  ╚═╝  ╚═╝ ╚═╝  ╚═╝ ╚═════╝ ',
+];
+const LOGO_WIDTH = 76;
+function termWidth() {
+    return process.stdout.columns && process.stdout.columns > 0 ? process.stdout.columns : 80;
+}
+function centerPadding(content, total) {
+    return Math.max(0, Math.floor((total - content) / 2));
+}
+export function Banner({ subtitle, tagline }) {
+    const width = termWidth();
+    const logoPad = ' '.repeat(centerPadding(LOGO_WIDTH, width));
+    const subtitleLen = subtitle ? subtitle.length : 0;
+    const subPad = ' '.repeat(centerPadding(subtitleLen, width));
+    return (_jsxs(Box, { flexDirection: "column", marginTop: 1, marginBottom: 1, children: [LOGO_LINES.map((line, i) => (_jsxs(Text, { color: BRAND_CYAN, bold: true, children: [logoPad, line] }, i))), subtitle ? (_jsxs(Box, { marginTop: 1, children: [_jsx(Text, { children: subPad }), _jsx(Text, { bold: true, color: BRAND_CYAN, children: subtitle })] })) : null, tagline?.map((line, i) => {
+                const pad = ' '.repeat(centerPadding(line.length, width));
+                return (_jsxs(Text, { dimColor: true, children: [pad, line] }, i));
+            })] }));
+}
+//# sourceMappingURL=Banner.js.map

package/dist/tui/components/Banner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Banner.js","sourceRoot":"","sources":["../../../src/tui/components/Banner.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AAEhC,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CAAC;AAEpC,MAAM,UAAU,GAAG;IACjB,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;CAC/E,CAAC;AAEF,MAAM,UAAU,GAAG,EAAE,CAAC;AAOtB,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,KAAa;IACnD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAe;IACvD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;IAE7D,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,aACtD,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAC3B,MAAC,IAAI,IAAS,KAAK,EAAE,UAAU,EAAE,IAAI,mBAClC,OAAO,EACP,IAAI,KAFI,CAAC,CAGL,CACR,CAAC,EACD,QAAQ,CAAC,CAAC,CAAC,CACV,MAAC,GAAG,IAAC,SAAS,EAAE,CAAC,aACf,KAAC,IAAI,cAAE,MAAM,GAAQ,EACrB,KAAC,IAAI,IAAC,IAAI,QAAC,KAAK,EAAE,UAAU,YACzB,QAAQ,GACJ,IACH,CACP,CAAC,CAAC,CAAC,IAAI,EACP,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gBACxB,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC1D,OAAO,CACL,MAAC,IAAI,IAAS,QAAQ,mBACnB,GAAG,EACH,IAAI,KAFI,CAAC,CAGL,CACR,CAAC;YACJ,CAAC,CAAC,IACE,CACP,CAAC;AACJ,CAAC"}

package/dist/tui/components/BlockingDecisionModal.d.ts

@@ -0,0 +1,11 @@
+import React from 'react';
+import type { BlockingDecision, BlockingDecisionChoice } from '../../shared/types.js';
+interface Props {
+    decision: BlockingDecision;
+    status?: string | null;
+    disabled?: boolean;
+    onResolve: (choice: BlockingDecisionChoice) => void;
+}
+export declare function BlockingDecisionModal({ decision, status, disabled, onResolve, }: Props): React.ReactElement;
+export {};
+//# sourceMappingURL=BlockingDecisionModal.d.ts.map

package/dist/tui/components/BlockingDecisionModal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BlockingDecisionModal.d.ts","sourceRoot":"","sources":["../../../src/tui/components/BlockingDecisionModal.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAItF,UAAU,KAAK;IACb,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,CAAC;CACrD;AAuBD,wBAAgB,qBAAqB,CAAC,EACpC,QAAQ,EACR,MAAM,EACN,QAAgB,EAChB,SAAS,GACV,EAAE,KAAK,GAAG,KAAK,CAAC,YAAY,CA8D5B"}

package/dist/tui/components/BlockingDecisionModal.js

@@ -0,0 +1,34 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Box, Text, useInput } from 'ink';
+import { BLOCKING_DECISION_CHOICES } from '../../shared/blocking-decision-choices.js';
+import { BRAND_CYAN, SCREEN_BLOCK_WIDTH } from './ScreenChrome.js';
+function short(value, max = 72) {
+    return value.length > max ? `${value.slice(0, max - 1)}...` : value;
+}
+function title(kind) {
+    return kind === 'pretool_url' ? 'URL access requires approval' : 'Tool output requires approval';
+}
+function ownerLabel(decision) {
+    const owner = decision.owner;
+    if (!owner || owner.kind === 'session')
+        return 'parent session';
+    return owner.agentType ? `subagent ${owner.agentId} (${owner.agentType})` : `subagent ${owner.agentId}`;
+}
+function vgeLine(decision) {
+    if (decision.vge.origin === 'local_fallback')
+        return `local fallback: ${decision.reason}`;
+    return `score=${decision.vge.score} decision=${decision.vge.decision}`
+        + (decision.vge.ruleAction ? ` rule=${decision.vge.ruleAction}` : '')
+        + (decision.vge.arbiterSignal ? ` arbiter=${decision.vge.arbiterSignal}` : '');
+}
+export function BlockingDecisionModal({ decision, status, disabled = false, onResolve, }) {
+    useInput((input) => {
+        if (disabled)
+            return;
+        const selected = BLOCKING_DECISION_CHOICES.find((choice) => choice.key === input);
+        if (selected)
+            onResolve(selected.choice);
+    });
+    return (_jsxs(Box, { borderStyle: "round", borderColor: "yellow", flexDirection: "column", paddingX: 2, paddingY: 1, width: SCREEN_BLOCK_WIDTH, children: [_jsx(Text, { bold: true, color: "yellow", children: title(decision.kind) }), _jsxs(Text, { dimColor: true, children: ["decision=", decision.decisionId, " session=", short(decision.sessionId, 18)] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsxs(Text, { children: [_jsx(Text, { color: BRAND_CYAN, children: "Tool: " }), decision.toolName] }), _jsxs(Text, { children: [_jsx(Text, { color: BRAND_CYAN, children: "Resource: " }), short(decision.resourceLabel)] }), _jsxs(Text, { children: [_jsx(Text, { color: BRAND_CYAN, children: "Owner: " }), short(ownerLabel(decision))] }), _jsxs(Text, { children: [_jsx(Text, { color: BRAND_CYAN, children: "VGE: " }), vgeLine(decision)] })] }), _jsx(Box, { marginTop: 1, flexDirection: "column", children: _jsx(Text, { color: "yellow", children: short(decision.reason) }) }), _jsx(Box, { marginTop: 1, flexDirection: "column", children: BLOCKING_DECISION_CHOICES.map((choice) => (_jsxs(Text, { children: [_jsxs(Text, { color: BRAND_CYAN, children: [choice.key, ". "] }), _jsx(Text, { bold: true, children: choice.label }), _jsx(Text, { dimColor: true, children: ` - ${choice.description}` })] }, choice.key))) }), _jsx(Box, { marginTop: 1, children: _jsx(Text, { dimColor: true, children: "This hook is paused until you choose. Timeout fails closed." }) }), status ? (_jsx(Box, { marginTop: 1, children: _jsx(Text, { color: disabled ? 'yellow' : undefined, children: status }) })) : null] }));
+}
+//# sourceMappingURL=BlockingDecisionModal.js.map

package/dist/tui/components/BlockingDecisionModal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BlockingDecisionModal.js","sourceRoot":"","sources":["../../../src/tui/components/BlockingDecisionModal.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAE1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AASnE,SAAS,KAAK,CAAC,KAAa,EAAE,GAAG,GAAG,EAAE;IACpC,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;AACtE,CAAC;AAED,SAAS,KAAK,CAAC,IAA8B;IAC3C,OAAO,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,+BAA+B,CAAC;AACnG,CAAC;AAED,SAAS,UAAU,CAAC,QAA0B;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,gBAAgB,CAAC;IAChE,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC;AAC1G,CAAC;AAED,SAAS,OAAO,CAAC,QAA0B;IACzC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,gBAAgB;QAAE,OAAO,mBAAmB,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC1F,OAAO,SAAS,QAAQ,CAAC,GAAG,CAAC,KAAK,aAAa,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE;UAClE,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;UACnE,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,EACpC,QAAQ,EACR,MAAM,EACN,QAAQ,GAAG,KAAK,EAChB,SAAS,GACH;IACN,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE;QACjB,IAAI,QAAQ;YAAE,OAAO;QACrB,MAAM,QAAQ,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;QAClF,IAAI,QAAQ;YAAE,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,OAAO,CACL,MAAC,GAAG,IACF,WAAW,EAAC,OAAO,EACnB,WAAW,EAAC,QAAQ,EACpB,aAAa,EAAC,QAAQ,EACtB,QAAQ,EAAE,CAAC,EACX,QAAQ,EAAE,CAAC,EACX,KAAK,EAAE,kBAAkB,aAEzB,KAAC,IAAI,IAAC,IAAI,QAAC,KAAK,EAAC,QAAQ,YAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAQ,EACvD,MAAC,IAAI,IAAC,QAAQ,gCACF,QAAQ,CAAC,UAAU,eAAW,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,IAChE,EACP,MAAC,GAAG,IAAC,SAAS,EAAE,CAAC,EAAE,aAAa,EAAC,QAAQ,aACvC,MAAC,IAAI,eACH,KAAC,IAAI,IAAC,KAAK,EAAE,UAAU,uBAAe,EACrC,QAAQ,CAAC,QAAQ,IACb,EACP,MAAC,IAAI,eACH,KAAC,IAAI,IAAC,KAAK,EAAE,UAAU,2BAAmB,EACzC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IACzB,EACP,MAAC,IAAI,eACH,KAAC,IAAI,IAAC,KAAK,EAAE,UAAU,wBAAgB,EACtC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IACvB,EACP,MAAC,IAAI,eACH,KAAC,IAAI,IAAC,KAAK,EAAE,UAAU,sBAAc,EACpC,OAAO,CAAC,QAAQ,CAAC,IACb,IACH,EACN,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,EAAE,aAAa,EAAC,QAAQ,YACvC,KAAC,IAAI,IAAC,KAAK,EAAC,QAAQ,YAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAQ,GAChD,EACN,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,EAAE,aAAa,EAAC,QAAQ,YACtC,yBAAyB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CACzC,MAAC,IAAI,eACH,MAAC,IAAI,IAAC,KAAK,EAAE,UAAU,aAAG,MAAM,CAAC,GAAG,UAAU,EAC9C,KAAC,IAAI,IAAC,IAAI,kBAAE,MAAM,CAAC,KAAK,GAAQ,EAChC,KAAC,IAAI,IAAC,QAAQ,kBAAE,MAAM,MAAM,CAAC,WAAW,EAAE,GAAQ,KAHzC,MAAM,CAAC,GAAG,CAId,CACR,CAAC,GACE,EACN,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,YACf,KAAC,IAAI,IAAC,QAAQ,kFAEP,GACH,EACL,MAAM,CAAC,CAAC,CAAC,CACR,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,YACf,KAAC,IAAI,IAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,YAAG,MAAM,GAAQ,GACzD,CACP,CAAC,CAAC,CAAC,IAAI,IACJ,CACP,CAAC;AACJ,CAAC"}

package/dist/tui/components/ScreenChrome.d.ts

@@ -0,0 +1,20 @@
+import React from 'react';
+export declare const BRAND_CYAN = "#00D4FF";
+export declare const SCREEN_BLOCK_WIDTH = 78;
+interface LayoutProps {
+    children: React.ReactNode;
+}
+export declare function ScreenLayout({ children }: LayoutProps): React.ReactElement;
+interface HeaderProps {
+    title: string;
+    description?: string | string[];
+    hint?: string;
+}
+export declare function ScreenHeader({ title, description, hint }: HeaderProps): React.ReactElement;
+interface FooterProps {
+    hint: string;
+    status?: React.ReactNode;
+}
+export declare function ScreenFooter({ hint, status }: FooterProps): React.ReactElement;
+export {};
+//# sourceMappingURL=ScreenChrome.d.ts.map

package/dist/tui/components/ScreenChrome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScreenChrome.d.ts","sourceRoot":"","sources":["../../../src/tui/components/ScreenChrome.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,eAAO,MAAM,UAAU,YAAY,CAAC;AACpC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAcrC,UAAU,WAAW;IACnB,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED,wBAAgB,YAAY,CAAC,EAAE,QAAQ,EAAE,EAAE,WAAW,GAAG,KAAK,CAAC,YAAY,CAM1E;AAED,UAAU,WAAW;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,WAAW,GAAG,KAAK,CAAC,YAAY,CAgC1F;AAED,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;CAC1B;AAED,wBAAgB,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,GAAG,KAAK,CAAC,YAAY,CAS9E"}

package/dist/tui/components/ScreenChrome.js

@@ -0,0 +1,30 @@
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { Box, Text } from 'ink';
+export const BRAND_CYAN = '#00D4FF';
+export const SCREEN_BLOCK_WIDTH = 78;
+function termWidth() {
+    return process.stdout.columns && process.stdout.columns > 0 ? process.stdout.columns : 80;
+}
+function leftPad() {
+    return Math.max(0, Math.floor((termWidth() - SCREEN_BLOCK_WIDTH) / 2));
+}
+function ruleWidth() {
+    return SCREEN_BLOCK_WIDTH;
+}
+export function ScreenLayout({ children }) {
+    return (_jsx(Box, { flexDirection: "column", paddingLeft: leftPad(), children: children }));
+}
+export function ScreenHeader({ title, description, hint }) {
+    const rule = '─'.repeat(ruleWidth());
+    const descLines = description
+        ? Array.isArray(description)
+            ? description
+            : [description]
+        : [];
+    return (_jsxs(Box, { flexDirection: "column", marginBottom: 1, children: [_jsxs(Box, { children: [_jsx(Text, { bold: true, color: BRAND_CYAN, children: title }), hint ? (_jsxs(_Fragment, { children: [_jsx(Text, { dimColor: true, children: '   ' }), _jsx(Text, { dimColor: true, children: hint })] })) : null] }), _jsx(Text, { color: BRAND_CYAN, children: rule }), descLines.length > 0 ? (_jsx(Box, { flexDirection: "column", marginTop: 1, children: descLines.map((line, i) => (_jsx(Text, { dimColor: true, children: line }, i))) })) : null] }));
+}
+export function ScreenFooter({ hint, status }) {
+    const rule = '─'.repeat(ruleWidth());
+    return (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [status ? _jsx(Box, { marginBottom: 1, children: status }) : null, _jsx(Text, { color: BRAND_CYAN, children: rule }), _jsx(Text, { dimColor: true, children: hint })] }));
+}
+//# sourceMappingURL=ScreenChrome.js.map

package/dist/tui/components/ScreenChrome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScreenChrome.js","sourceRoot":"","sources":["../../../src/tui/components/ScreenChrome.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AAEhC,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CAAC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAErC,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED,SAAS,OAAO;IACd,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAMD,MAAM,UAAU,YAAY,CAAC,EAAE,QAAQ,EAAe;IACpD,OAAO,CACL,KAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,WAAW,EAAE,OAAO,EAAE,YAC/C,QAAQ,GACL,CACP,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAe;IACpE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,WAAW;QAC3B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAC1B,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,CAAC,WAAW,CAAC;QACjB,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,YAAY,EAAE,CAAC,aACzC,MAAC,GAAG,eACF,KAAC,IAAI,IAAC,IAAI,QAAC,KAAK,EAAE,UAAU,YACzB,KAAK,GACD,EACN,IAAI,CAAC,CAAC,CAAC,CACN,8BACE,KAAC,IAAI,IAAC,QAAQ,kBAAE,KAAK,GAAQ,EAC7B,KAAC,IAAI,IAAC,QAAQ,kBAAE,IAAI,GAAQ,IAC3B,CACJ,CAAC,CAAC,CAAC,IAAI,IACJ,EACN,KAAC,IAAI,IAAC,KAAK,EAAE,UAAU,YAAG,IAAI,GAAQ,EACrC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CACtB,KAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,SAAS,EAAE,CAAC,YACrC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAC1B,KAAC,IAAI,IAAS,QAAQ,kBACnB,IAAI,IADI,CAAC,CAEL,CACR,CAAC,GACE,CACP,CAAC,CAAC,CAAC,IAAI,IACJ,CACP,CAAC;AACJ,CAAC;AAOD,MAAM,UAAU,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAe;IACxD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACrC,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,SAAS,EAAE,CAAC,aACrC,MAAM,CAAC,CAAC,CAAC,KAAC,GAAG,IAAC,YAAY,EAAE,CAAC,YAAG,MAAM,GAAO,CAAC,CAAC,CAAC,IAAI,EACrD,KAAC,IAAI,IAAC,KAAK,EAAE,UAAU,YAAG,IAAI,GAAQ,EACtC,KAAC,IAAI,IAAC,QAAQ,kBAAE,IAAI,GAAQ,IACxB,CACP,CAAC;AACJ,CAAC"}

package/dist/tui/components/SelectList.d.ts

@@ -0,0 +1,14 @@
+import React from 'react';
+export interface SelectItem<K extends string = string> {
+    key: K;
+    label: string;
+    description?: string;
+}
+interface Props<K extends string> {
+    items: readonly SelectItem<K>[];
+    onSelect: (key: K) => void;
+    initialIndex?: number;
+}
+export declare function SelectList<K extends string>({ items, onSelect, initialIndex }: Props<K>): React.ReactElement;
+export {};
+//# sourceMappingURL=SelectList.d.ts.map

package/dist/tui/components/SelectList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SelectList.d.ts","sourceRoot":"","sources":["../../../src/tui/components/SelectList.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAmB,MAAM,OAAO,CAAC;AAGxC,MAAM,WAAW,UAAU,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM;IACnD,GAAG,EAAE,CAAC,CAAC;IACP,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,KAAK,CAAC,CAAC,SAAS,MAAM;IAC9B,KAAK,EAAE,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAChC,QAAQ,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,UAAU,CAAC,CAAC,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAgB,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,YAAY,CAiChH"}

package/dist/tui/components/SelectList.js

@@ -0,0 +1,22 @@
+import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
+import { useState } from 'react';
+import { Box, Text, useInput } from 'ink';
+export function SelectList({ items, onSelect, initialIndex = 0 }) {
+    const [idx, setIdx] = useState(initialIndex);
+    useInput((input, key) => {
+        if (key.upArrow)
+            setIdx((i) => Math.max(0, i - 1));
+        else if (key.downArrow)
+            setIdx((i) => Math.min(items.length - 1, i + 1));
+        else if (key.return) {
+            const cur = items[idx];
+            if (cur)
+                onSelect(cur.key);
+        }
+    });
+    return (_jsx(Box, { flexDirection: "column", children: items.map((it, i) => {
+            const selected = i === idx;
+            return (_jsxs(Box, { flexDirection: "column", children: [_jsxs(Text, { color: selected ? 'cyan' : undefined, children: [selected ? '› ' : '  ', it.label] }), it.description ? (_jsxs(Text, { dimColor: true, children: ['    ', it.description] })) : null] }, it.key));
+        }) }));
+}
+//# sourceMappingURL=SelectList.js.map

package/dist/tui/components/SelectList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SelectList.js","sourceRoot":"","sources":["../../../src/tui/components/SelectList.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAc1C,MAAM,UAAU,UAAU,CAAmB,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,GAAG,CAAC,EAAY;IAC1F,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IAE7C,QAAQ,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtB,IAAI,GAAG,CAAC,OAAO;YAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aAC9C,IAAI,GAAG,CAAC,SAAS;YAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACpE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,GAAG;gBAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CACL,KAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,YACxB,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE;YACnB,MAAM,QAAQ,GAAG,CAAC,KAAK,GAAG,CAAC;YAC3B,OAAO,CACL,MAAC,GAAG,IAAc,aAAa,EAAC,QAAQ,aACtC,MAAC,IAAI,IAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,aACvC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EACtB,EAAE,CAAC,KAAK,IACJ,EACN,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAChB,MAAC,IAAI,IAAC,QAAQ,mBACX,MAAM,EACN,EAAE,CAAC,WAAW,IACV,CACR,CAAC,CAAC,CAAC,IAAI,KAVA,EAAE,CAAC,GAAG,CAWV,CACP,CAAC;QACJ,CAAC,CAAC,GACE,CACP,CAAC;AACJ,CAAC"}

package/dist/tui/components/TextField.d.ts

@@ -0,0 +1,11 @@
+import React from 'react';
+interface Props {
+    label: string;
+    value: string;
+    active: boolean;
+    mask?: boolean;
+    onChange: (v: string) => void;
+}
+export declare function TextField({ label, value, active, mask, onChange }: Props): React.ReactElement;
+export {};
+//# sourceMappingURL=TextField.d.ts.map

package/dist/tui/components/TextField.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TextField.d.ts","sourceRoot":"","sources":["../../../src/tui/components/TextField.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,UAAU,KAAK;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AAKD,wBAAgB,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC,YAAY,CAsC7F"}

package/dist/tui/components/TextField.js

@@ -0,0 +1,34 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Box, Text, useInput } from 'ink';
+// Minimal text input — appends to / backspaces from the value while active.
+// We deliberately skip cursor positioning / selection / kill-line; the form has
+// four fields and the user can clear with Ctrl-U if we ever wire it.
+export function TextField({ label, value, active, mask, onChange }) {
+    useInput((input, key) => {
+        if (key.return || key.tab || key.escape)
+            return;
+        if (key.ctrl && (input === 'u')) {
+            onChange('');
+            return;
+        }
+        if (key.backspace || key.delete) {
+            onChange(value.slice(0, -1));
+            return;
+        }
+        // Filter to printable chars; ignore arrow / function keys. Pasted text
+        // can include newlines / tabs / other control bytes — strip them so we
+        // never end up with an embedded \n inside a Bearer token.
+        if (input && !key.upArrow && !key.downArrow && !key.leftArrow && !key.rightArrow) {
+            // eslint-disable-next-line no-control-regex
+            const cleaned = input.replace(/[\x00-\x1f\x7f]/g, '');
+            if (cleaned.length > 0)
+                onChange(value + cleaned);
+        }
+    }, { isActive: active });
+    // For masked fields show a short run of dots plus the live char count so
+    // long keys (40+ chars) don't wrap onto two lines, while backspace is still
+    // visibly reflected by the decreasing count.
+    const display = mask && value.length > 0 ? `•••••••• (${value.length})` : value;
+    return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Text, { dimColor: !active, children: label }), _jsxs(Text, { color: active ? 'cyan' : undefined, children: [active ? '› ' : '  ', display, active ? '_' : ''] })] }));
+}
+//# sourceMappingURL=TextField.js.map

package/dist/tui/components/TextField.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TextField.js","sourceRoot":"","sources":["../../../src/tui/components/TextField.tsx"],"names":[],"mappings":";AACA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAU1C,4EAA4E;AAC5E,gFAAgF;AAChF,qEAAqE;AACrE,MAAM,UAAU,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAS;IACvE,QAAQ,CACN,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACb,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM;YAAE,OAAO;QAChD,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAChC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,uEAAuE;QACvE,uEAAuE;QACvE,0DAA0D;QAC1D,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YACjF,4CAA4C;YAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,EACD,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC;IAEF,yEAAyE;IACzE,4EAA4E;IAC5E,6CAA6C;IAC7C,MAAM,OAAO,GAAG,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;IAChF,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,aACzB,KAAC,IAAI,IAAC,QAAQ,EAAE,CAAC,MAAM,YAAG,KAAK,GAAQ,EACvC,MAAC,IAAI,IAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,aACrC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EACpB,OAAO,EACP,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IACb,IACH,CACP,CAAC;AACJ,CAAC"}

package/dist/tui/lib/audit-log.d.ts

@@ -0,0 +1,19 @@
+export interface AuditEvent {
+    ts?: string;
+    event_type?: string;
+    decision_id?: string;
+    session_id?: string;
+    tool_name?: string;
+    resource_id?: string;
+    router_outcome?: string;
+    decision?: string;
+    choice?: string;
+    vge_decision?: string;
+    vge_arbiter_signal?: string | null;
+    vge_rule_action?: string | null;
+    raw: string;
+}
+export declare function auditLogPath(): string;
+export declare function readLastEvents(limit?: number): AuditEvent[];
+export declare function decisionColor(outcome: string | undefined): 'red' | 'yellow' | 'green' | 'blue' | undefined;
+//# sourceMappingURL=audit-log.d.ts.map

package/dist/tui/lib/audit-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../../src/tui/lib/audit-log.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,UAAU;IACzB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,GAAG,EAAE,MAAM,CAAC;CACb;AAMD,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wBAAgB,cAAc,CAAC,KAAK,SAAK,GAAG,UAAU,EAAE,CA2BvD;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAQ1G"}

package/dist/tui/lib/audit-log.js

@@ -0,0 +1,49 @@
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+function configDir() {
+    return process.env['VGE_CC_GUARD_CONFIG_DIR'] ?? path.join(os.homedir(), '.vge-cc-guard');
+}
+export function auditLogPath() {
+    return path.join(configDir(), 'audit.log');
+}
+export function readLastEvents(limit = 50) {
+    const file = auditLogPath();
+    if (!fs.existsSync(file))
+        return [];
+    const lines = fs.readFileSync(file, 'utf-8').split('\n').filter((l) => l.trim() !== '');
+    const slice = lines.slice(-limit);
+    return slice.map((line) => {
+        try {
+            const parsed = JSON.parse(line);
+            return {
+                ts: (parsed['timestamp'] ?? parsed['ts']),
+                event_type: parsed['event_type'],
+                decision_id: parsed['decision_id'],
+                session_id: parsed['session_id'],
+                tool_name: parsed['tool_name'],
+                resource_id: parsed['resource_id'],
+                router_outcome: parsed['router_outcome'],
+                decision: parsed['decision'],
+                choice: parsed['choice'],
+                vge_decision: parsed['vge_decision'],
+                vge_arbiter_signal: parsed['vge_arbiter_signal'],
+                vge_rule_action: parsed['vge_rule_action'],
+                raw: line,
+            };
+        }
+        catch {
+            return { raw: line };
+        }
+    });
+}
+export function decisionColor(outcome) {
+    switch (outcome) {
+        case 'HARD_TAINT': return 'red';
+        case 'ESCALATE': return 'yellow';
+        case 'ALLOW': return 'green';
+        case 'SOFT_TAINT': return 'blue';
+        default: return undefined;
+    }
+}
+//# sourceMappingURL=audit-log.js.map

package/dist/tui/lib/audit-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.js","sourceRoot":"","sources":["../../../src/tui/lib/audit-log.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAkB7B,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAK,GAAG,EAAE;IACvC,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YAC3D,OAAO;gBACL,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAuB;gBAC/D,UAAU,EAAE,MAAM,CAAC,YAAY,CAAuB;gBACtD,WAAW,EAAE,MAAM,CAAC,aAAa,CAAuB;gBACxD,UAAU,EAAE,MAAM,CAAC,YAAY,CAAuB;gBACtD,SAAS,EAAE,MAAM,CAAC,WAAW,CAAuB;gBACpD,WAAW,EAAE,MAAM,CAAC,aAAa,CAAuB;gBACxD,cAAc,EAAE,MAAM,CAAC,gBAAgB,CAAuB;gBAC9D,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAuB;gBAClD,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAuB;gBAC9C,YAAY,EAAE,MAAM,CAAC,cAAc,CAAuB;gBAC1D,kBAAkB,EAAE,MAAM,CAAC,oBAAoB,CAA8B;gBAC7E,eAAe,EAAE,MAAM,CAAC,iBAAiB,CAA8B;gBACvE,GAAG,EAAE,IAAI;aACV,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAA2B;IACvD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,YAAY,CAAC,CAAC,OAAO,KAAK,CAAC;QAChC,KAAK,UAAU,CAAC,CAAC,OAAO,QAAQ,CAAC;QACjC,KAAK,OAAO,CAAC,CAAC,OAAO,OAAO,CAAC;QAC7B,KAAK,YAAY,CAAC,CAAC,OAAO,MAAM,CAAC;QACjC,OAAO,CAAC,CAAC,OAAO,SAAS,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/tui/lib/cc-permissions-audit.d.ts

@@ -0,0 +1,24 @@
+import { appendEvent } from '../../shared/audit-writer.js';
+import { saveCcPermissions, type CcPermissionsDraft, type SaveOutcome } from './cc-permissions-io.js';
+import type { CcPermissionsScope } from './cc-permissions-scope.js';
+type SaveWithAuditOutcome = (Extract<SaveOutcome, {
+    ok: true;
+}> & ({
+    audit: 'written';
+} | {
+    audit: 'failed';
+    auditMessage: string;
+})) | Extract<SaveOutcome, {
+    ok: false;
+}>;
+export declare function saveCcPermissionsWithAudit(input: {
+    scope: CcPermissionsScope;
+    settingsPath: string;
+    installKey: string;
+    settings: Record<string, unknown>;
+    permissions: CcPermissionsDraft;
+    savePermissions?: typeof saveCcPermissions;
+    writeAudit?: typeof appendEvent;
+}): SaveWithAuditOutcome;
+export {};
+//# sourceMappingURL=cc-permissions-audit.d.ts.map

package/dist/tui/lib/cc-permissions-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cc-permissions-audit.d.ts","sourceRoot":"","sources":["../../../src/tui/lib/cc-permissions-audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EACL,iBAAiB,EACjB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE,KAAK,oBAAoB,GACrB,CAAC,OAAO,CAAC,WAAW,EAAE;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,GAAG,CAClC;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,QAAQ,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAC5C,CAAC,GACF,OAAO,CAAC,WAAW,EAAE;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC,CAAC;AAExC,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,KAAK,EAAE,kBAAkB,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,WAAW,EAAE,kBAAkB,CAAC;IAChC,eAAe,CAAC,EAAE,OAAO,iBAAiB,CAAC;IAC3C,UAAU,CAAC,EAAE,OAAO,WAAW,CAAC;CACjC,GAAG,oBAAoB,CAoCvB"}

package/dist/tui/lib/cc-permissions-audit.js

@@ -0,0 +1,40 @@
+import { appendEvent } from '../../shared/audit-writer.js';
+import { saveCcPermissions, } from './cc-permissions-io.js';
+export function saveCcPermissionsWithAudit(input) {
+    const savePermissions = input.savePermissions ?? saveCcPermissions;
+    const writeAudit = input.writeAudit ?? appendEvent;
+    const outcome = savePermissions({
+        settingsPath: input.settingsPath,
+        installKey: input.installKey,
+        settings: input.settings,
+        permissions: input.permissions,
+    });
+    if (!outcome.ok)
+        return outcome;
+    try {
+        const auditOutcome = writeAudit({
+            event_type: 'cc_permissions_edit',
+            event: 'cc_permissions_edit',
+            kind: 'cc-permissions-edit',
+            scope: input.scope,
+            install_key: input.installKey,
+            counts: {
+                allow: input.permissions.allow.length,
+                ask: input.permissions.ask.length,
+                deny: input.permissions.deny.length,
+            },
+        });
+        if (auditOutcome?.ok === false) {
+            return { ...outcome, audit: 'failed', auditMessage: auditOutcome.reason };
+        }
+        return { ...outcome, audit: 'written' };
+    }
+    catch (error) {
+        return {
+            ...outcome,
+            audit: 'failed',
+            auditMessage: error instanceof Error ? error.message : 'audit write failed',
+        };
+    }
+}
+//# sourceMappingURL=cc-permissions-audit.js.map

package/dist/tui/lib/cc-permissions-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cc-permissions-audit.js","sourceRoot":"","sources":["../../../src/tui/lib/cc-permissions-audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EACL,iBAAiB,GAGlB,MAAM,wBAAwB,CAAC;AAUhC,MAAM,UAAU,0BAA0B,CAAC,KAQ1C;IACC,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,IAAI,iBAAiB,CAAC;IACnE,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,WAAW,CAAC;IACnD,MAAM,OAAO,GAAG,eAAe,CAAC;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,UAAU,CAAC;YAC9B,UAAU,EAAE,qBAAqB;YACjC,KAAK,EAAE,qBAAqB;YAC5B,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM;gBACrC,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM;gBACjC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM;aACpC;SACF,CAAC,CAAC;QACH,IAAI,YAAY,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;YAC/B,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;QAC5E,CAAC;QACD,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,GAAG,OAAO;YACV,KAAK,EAAE,QAAQ;YACf,YAAY,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB;SAC5E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/tui/lib/cc-permissions-defaults.d.ts

@@ -0,0 +1,32 @@
+import type { CcPermissionKind, CcPermissionsDraft } from './cc-permissions-io.js';
+export declare const MANAGED_DEFAULT_DENY_RULES: readonly ["Bash(rm -rf *)", "Bash(rm -rf /*)", "Bash(sudo *)", "Bash(dd if=* of=/dev/*)", "Bash(mkfs*)", "Bash(chmod -R 777 *)", "Bash(curl * | sh)", "Bash(curl * | bash)", "Bash(wget * | sh)"];
+export interface ManagedDefaultsEntry {
+    enabled: boolean;
+    settingsPath: string;
+    baselineVersion: number;
+    managed: CcPermissionsDraft;
+}
+export interface ManagedDefaultsRead {
+    entry: ManagedDefaultsEntry;
+    warning?: string;
+}
+export declare function readManagedDefaults(installKey: string, settingsPath: string): ManagedDefaultsEntry;
+export declare function readManagedDefaultsWithStatus(installKey: string, settingsPath: string): ManagedDefaultsRead;
+export declare function saveManagedDefaults(installKey: string, entry: ManagedDefaultsEntry): {
+    ok: true;
+} | {
+    ok: false;
+    message: string;
+};
+export declare function isManagedRule(entry: ManagedDefaultsEntry, kind: CcPermissionKind, rule: string): boolean;
+export declare function enableManagedDefaults(permissions: CcPermissionsDraft, settingsPath: string): {
+    permissions: CcPermissionsDraft;
+    entry: ManagedDefaultsEntry;
+    alreadyPresent: number;
+};
+export declare function disableManagedDefaults(permissions: CcPermissionsDraft, entry: ManagedDefaultsEntry): {
+    permissions: CcPermissionsDraft;
+    entry: ManagedDefaultsEntry;
+};
+export declare function unmanageRule(entry: ManagedDefaultsEntry, rule: string): ManagedDefaultsEntry;
+//# sourceMappingURL=cc-permissions-defaults.d.ts.map

package/dist/tui/lib/cc-permissions-defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cc-permissions-defaults.d.ts","sourceRoot":"","sources":["../../../src/tui/lib/cc-permissions-defaults.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEnF,eAAO,MAAM,0BAA0B,mMAU7B,CAAC;AAEX,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,kBAAkB,CAAC;CAC7B;AAYD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA4FD,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,oBAAoB,CAElG;AAED,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GACnB,mBAAmB,CAMrB;AAED,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,oBAAoB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAM/C;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,gBAAgB,EACtB,IAAI,EAAE,MAAM,GACX,OAAO,CAET;AAED,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,kBAAkB,EAC/B,YAAY,EAAE,MAAM,GACnB;IAAE,WAAW,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,oBAAoB,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAwB1F;AAED,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,kBAAkB,EAC/B,KAAK,EAAE,oBAAoB,GAC1B;IAAE,WAAW,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,oBAAoB,CAAA;CAAE,CAalE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAS5F"}