@vigil-guard/vge-cc-guard 0.9.0-beta.1

package/dist/daemon/analysis-source.js

@@ -0,0 +1,114 @@
+import * as fs from 'fs';
+import * as path from 'path';
+import { checkPath } from './path-deny.js';
+import { isBinaryBuffer } from './truncate.js';
+export const MAX_RAW_FILE_BYTES = 1 * 1024 * 1024;
+export function analysisAuditFields(source) {
+    return {
+        analysisSource: source.sourceKind,
+        ...(source.fallbackReason ? { analysisSourceFallbackReason: source.fallbackReason } : {}),
+    };
+}
+function errorCode(err) {
+    if (err && typeof err === 'object' && 'code' in err && typeof err.code === 'string') {
+        return err.code;
+    }
+    return 'UNKNOWN';
+}
+function toolResponseSource(payload, fallbackReason, metadata = {}) {
+    return {
+        source: payload.tool_response,
+        sourceKind: 'tool_response',
+        fallbackReason,
+        ...metadata,
+    };
+}
+function resolveReadSource(payload) {
+    const filePath = payload.tool_input['file_path'];
+    if (typeof filePath !== 'string' || filePath.length === 0) {
+        return toolResponseSource(payload, 'missing_file_path');
+    }
+    if (!path.isAbsolute(filePath)) {
+        return toolResponseSource(payload, 'not_absolute');
+    }
+    const credentialMetadata = checkPath(filePath);
+    const fallbackMetadata = credentialMetadata.denied
+        ? { credentialPath: true, sourcePath: credentialMetadata.resolvedPath }
+        : {};
+    let realPath;
+    try {
+        realPath = fs.realpathSync(filePath);
+    }
+    catch (err) {
+        return toolResponseSource(payload, `realpath_failed:${errorCode(err)}`, fallbackMetadata);
+    }
+    let stats;
+    try {
+        stats = fs.statSync(realPath);
+    }
+    catch (err) {
+        return toolResponseSource(payload, `stat_failed:${errorCode(err)}`, fallbackMetadata);
+    }
+    if (stats.size > MAX_RAW_FILE_BYTES) {
+        return toolResponseSource(payload, 'oversized', fallbackMetadata);
+    }
+    let content;
+    try {
+        content = fs.readFileSync(realPath);
+    }
+    catch (err) {
+        return toolResponseSource(payload, `read_failed:${errorCode(err)}`, fallbackMetadata);
+    }
+    return {
+        source: isBinaryBuffer(content.subarray(0, 8)) ? content : content.toString('utf8'),
+        sourceKind: 'raw_file',
+        sourcePath: realPath,
+        credentialPath: credentialMetadata.denied ? true : undefined,
+    };
+}
+function resolveInputString(payload, field) {
+    const value = payload.tool_input[field];
+    if (typeof value !== 'string' || value.length === 0) {
+        return toolResponseSource(payload, `missing_tool_input_field:${field}`);
+    }
+    return {
+        source: value,
+        sourceKind: 'tool_input_field',
+        sourceField: field,
+    };
+}
+function resolveMultiEditSource(payload) {
+    const edits = payload.tool_input['edits'];
+    if (!Array.isArray(edits)) {
+        return toolResponseSource(payload, 'missing_multiedit_edits');
+    }
+    const newStrings = edits.flatMap((edit) => {
+        if (!edit || typeof edit !== 'object' || !('new_string' in edit))
+            return [];
+        const value = edit.new_string;
+        return typeof value === 'string' && value.length > 0 ? [value] : [];
+    });
+    if (newStrings.length === 0) {
+        return toolResponseSource(payload, 'empty_multiedit_new_strings');
+    }
+    return {
+        source: newStrings.join('\n---\n'),
+        sourceKind: 'tool_input_field',
+        sourceField: 'edits.new_string',
+    };
+}
+export function resolveAnalysisSource(payload) {
+    switch (payload.tool_name) {
+        case 'Read':
+            return resolveReadSource(payload);
+        case 'Edit':
+            return resolveInputString(payload, 'new_string');
+        case 'Write':
+            return resolveInputString(payload, 'content');
+        case 'MultiEdit':
+            return resolveMultiEditSource(payload);
+        default:
+            return toolResponseSource(payload);
+    }
+}
+//# sourceMappingURL=analysis-source.js.map

package/dist/daemon/analysis-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analysis-source.js","sourceRoot":"","sources":["../../src/daemon/analysis-source.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAgBlD,MAAM,UAAU,mBAAmB,CAAC,MAA8B;IAIhE,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,UAAU;QACjC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,4BAA4B,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpF,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CACzB,OAA0B,EAC1B,cAAuB,EACvB,WAA0E,EAAE;IAE5E,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,aAAa;QAC7B,UAAU,EAAE,eAAe;QAC3B,cAAc;QACd,GAAG,QAAQ;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA0B;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO,kBAAkB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,kBAAkB,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,MAAM;QAChD,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,CAAC,YAAY,EAAE;QACvE,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,kBAAkB,CAAC,OAAO,EAAE,eAAe,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACxF,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;QACpC,OAAO,kBAAkB,CAAC,OAAO,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,kBAAkB,CAAC,OAAO,EAAE,eAAe,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACxF,CAAC;IAED,OAAO;QACL,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QACnF,UAAU,EAAE,UAAU;QACtB,UAAU,EAAE,QAAQ;QACpB,cAAc,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;KAC7D,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAA0B,EAAE,KAAa;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,kBAAkB,CAAC,OAAO,EAAE,4BAA4B,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO;QACL,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,kBAAkB;QAC9B,WAAW,EAAE,KAAK;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,OAA0B;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACxC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QAC5E,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC;QAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,kBAAkB,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IACpE,CAAC;IAED,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;QAClC,UAAU,EAAE,kBAAkB;QAC9B,WAAW,EAAE,kBAAkB;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA0B;IAC9D,QAAQ,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1B,KAAK,MAAM;YACT,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACpC,KAAK,MAAM;YACT,OAAO,kBAAkB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACnD,KAAK,OAAO;YACV,OAAO,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAChD,KAAK,WAAW;YACd,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACzC;YACE,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;AACH,CAAC"}

package/dist/daemon/ask-dialog.d.ts

@@ -0,0 +1,23 @@
+import type { SessionData, Escalation, EscalationDecision, RouterOutcome, SessionState, UrlBlockDecision } from '../shared/types.js';
+export declare function hasPending(session: SessionData): boolean;
+export declare function enqueue(session: SessionData, escalation: Escalation): RouterOutcome;
+export declare function formatDenyReason(escalation: Escalation, triggerExcerpt: string): string;
+export declare function formatUrlBlockDenyReason(escalation: Escalation): string;
+interface StateStore {
+    transitionState: (sessionId: string, state: SessionState) => void;
+    addToAllowlist: (sessionId: string, key: string, escalationId?: string) => void;
+    addToBlocklist: (sessionId: string, key: string, escalationId?: string) => void;
+}
+export declare function applyDecision(session: SessionData, decision: EscalationDecision, stateStore: StateStore, escalationId?: string): Escalation | undefined;
+interface UrlBlockStateStore {
+    addUrlAllowOnce: (sessionId: string, key: string) => void;
+    addResourceToBlocklist: (sessionId: string, key: string, escalationId?: string) => void;
+    addHostToUrlAllowlist: (host: string) => boolean;
+}
+export declare function applyUrlBlockDecision(session: SessionData, decision: UrlBlockDecision, stateStore: UrlBlockStateStore, escalationId?: string): {
+    escalation: Escalation;
+    decision: UrlBlockDecision;
+    blockReason?: 'user_block' | 'malformed_url' | 'persist_failed';
+} | undefined;
+export {};
+//# sourceMappingURL=ask-dialog.d.ts.map

package/dist/daemon/ask-dialog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask-dialog.d.ts","sourceRoot":"","sources":["../../src/daemon/ask-dialog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAE5B,wBAAgB,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAExD;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,GAAG,aAAa,CAInF;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CA+BvF;AAED,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAqBvE;AAED,UAAU,UAAU;IAClB,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IAClE,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAChF,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CACjF;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,kBAAkB,EAC5B,UAAU,EAAE,UAAU,EACtB,YAAY,CAAC,EAAE,MAAM,GACpB,UAAU,GAAG,SAAS,CAwBxB;AAED,UAAU,kBAAkB;IAC1B,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1D,sBAAsB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACxF,qBAAqB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CAClD;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,gBAAgB,EAC1B,UAAU,EAAE,kBAAkB,EAC9B,YAAY,CAAC,EAAE,MAAM,GACpB;IACD,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,WAAW,CAAC,EAAE,YAAY,GAAG,eAAe,GAAG,gBAAgB,CAAC;CACjE,GAAG,SAAS,CA2BZ"}

package/dist/daemon/ask-dialog.js

@@ -0,0 +1,114 @@
+export function hasPending(session) {
+    return session.pendingEscalations.length > 0;
+}
+export function enqueue(session, escalation) {
+    session.pendingEscalations.push(escalation);
+    session.escalationCount++;
+    return 'ESCALATE';
+}
+export function formatDenyReason(escalation, triggerExcerpt) {
+    if (escalation.kind === 'url-block')
+        return formatUrlBlockDenyReason(escalation);
+    const excerpt = triggerExcerpt.slice(0, 120);
+    const branchSummary = Object.entries(escalation.branches)
+        .filter(([, v]) => v > 0)
+        .map(([k, v]) => `${k}=${v}`)
+        .join(', ') || 'none';
+    return [
+        'VGE Agent Guard: tool output flagged by VGE. Decide before continuing.',
+        '',
+        `  Tool:     ${escalation.toolName}`,
+        `  Resource: ${escalation.resourceId}`,
+        `  Score:    ${Object.values(escalation.branches).reduce((a, b) => Math.max(a, b), 0)}  (${branchSummary})`,
+        excerpt ? `  Trigger:  "...${excerpt}..."` : '',
+        '',
+        '  Why asking: VGE flagged this resource. User confirmation is',
+        '  required before blocking or trusting it.',
+        '',
+        '  Reply:',
+        '    once        — accept this result once; ask again if this exact',
+        '                  (tool, resource) triggers again',
+        '    session     — accept + trust THIS specific resource for the rest',
+        '                  of the session',
+        '    block       — reject this resource and block the same resource',
+        '                  automatically for the rest of the session',
+        '    quarantine  — accept but keep session on caution until reset or SessionEnd',
+    ]
+        .filter((line) => line !== '')
+        .join('\n');
+}
+export function formatUrlBlockDenyReason(escalation) {
+    const categories = escalation.vgeCategories && escalation.vgeCategories.length > 0
+        ? escalation.vgeCategories.join(', ')
+        : 'none';
+    return [
+        'VGE Agent Guard: URL flagged before tool execution. Decide before continuing.',
+        '',
+        `  Tool:   ${escalation.toolName}`,
+        `  URL:    ${escalation.url ?? '(unknown)'}`,
+        `  Host:   ${escalation.host ?? '(unknown)'}`,
+        `  Reason: ${escalation.blockMessage ?? 'Vigil Guard classified this URL as unsafe.'}`,
+        `  VGE:    decision ${escalation.vgeDecision ?? escalation.routerOutcome}, signal ${escalation.vgeArbiterSignal ?? 'n/a'}, action ${escalation.vgeRuleAction ?? 'n/a'}, score ${escalation.vgeScore ?? 0}, categories: [${categories}]`,
+        '',
+        '  Reply:',
+        '    block          — keep this tool call blocked and block this exact URL',
+        '                     automatically for the rest of the session',
+        '    allow once     — allow this exact URL once, then ask again next time',
+        '    session        — allow + add this host to the persistent URL allowlist',
+    ].join('\n');
+}
+export function applyDecision(session, decision, stateStore, escalationId) {
+    const escalationIndex = escalationId === undefined
+        ? 0
+        : session.pendingEscalations.findIndex((esc) => esc.escalationId === escalationId);
+    if (escalationIndex < 0)
+        return undefined;
+    const [esc] = session.pendingEscalations.splice(escalationIndex, 1);
+    if (!esc)
+        return undefined;
+    switch (decision) {
+        case 'once':
+            break;
+        case 'session':
+            // resourceId is already the canonical key (set during PostToolUse processing)
+            stateStore.addToAllowlist(session.sessionId, esc.resourceId, esc.escalationId);
+            break;
+        case 'block':
+            stateStore.addToBlocklist(session.sessionId, esc.resourceId, esc.escalationId);
+            break;
+        case 'quarantine':
+            stateStore.transitionState(session.sessionId, 'caution');
+            break;
+    }
+    return esc;
+}
+export function applyUrlBlockDecision(session, decision, stateStore, escalationId) {
+    const escalationIndex = escalationId === undefined
+        ? 0
+        : session.pendingEscalations.findIndex((esc) => esc.escalationId === escalationId);
+    if (escalationIndex < 0)
+        return undefined;
+    const [esc] = session.pendingEscalations.splice(escalationIndex, 1);
+    if (!esc)
+        return undefined;
+    let effectiveDecision = decision;
+    let blockReason = decision === 'block' ? 'user_block' : undefined;
+    if (decision === 'block') {
+        stateStore.addResourceToBlocklist(session.sessionId, esc.resourceId, esc.escalationId);
+    }
+    if (decision === 'allow_once') {
+        stateStore.addUrlAllowOnce(session.sessionId, esc.resourceId);
+    }
+    else if (decision === 'allow_persist') {
+        if (!esc.host) {
+            effectiveDecision = 'block';
+            blockReason = 'malformed_url';
+        }
+        else if (!stateStore.addHostToUrlAllowlist(esc.host)) {
+            effectiveDecision = 'block';
+            blockReason = 'persist_failed';
+        }
+    }
+    return { escalation: esc, decision: effectiveDecision, blockReason };
+}
+//# sourceMappingURL=ask-dialog.js.map

package/dist/daemon/ask-dialog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask-dialog.js","sourceRoot":"","sources":["../../src/daemon/ask-dialog.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,UAAU,CAAC,OAAoB;IAC7C,OAAO,OAAO,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAoB,EAAE,UAAsB;IAClE,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO,CAAC,eAAe,EAAE,CAAC;IAC1B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAsB,EAAE,cAAsB;IAC7E,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,wBAAwB,CAAC,UAAU,CAAC,CAAC;IAEjF,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;SACtD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;IAExB,OAAO;QACL,wEAAwE;QACxE,EAAE;QACF,eAAe,UAAU,CAAC,QAAQ,EAAE;QACpC,eAAe,UAAU,CAAC,UAAU,EAAE;QACtC,eAAe,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,aAAa,GAAG;QAC3G,OAAO,CAAC,CAAC,CAAC,mBAAmB,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE;QAC/C,EAAE;QACF,+DAA+D;QAC/D,4CAA4C;QAC5C,EAAE;QACF,UAAU;QACV,oEAAoE;QACpE,mDAAmD;QACnD,sEAAsE;QACtE,kCAAkC;QAClC,oEAAoE;QACpE,6DAA6D;QAC7D,gFAAgF;KACjF;SACE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;SAC7B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAAsB;IAC7D,MAAM,UAAU,GACd,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;QAC7D,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QACrC,CAAC,CAAC,MAAM,CAAC;IAEb,OAAO;QACL,+EAA+E;QAC/E,EAAE;QACF,aAAa,UAAU,CAAC,QAAQ,EAAE;QAClC,aAAa,UAAU,CAAC,GAAG,IAAI,WAAW,EAAE;QAC5C,aAAa,UAAU,CAAC,IAAI,IAAI,WAAW,EAAE;QAC7C,aAAa,UAAU,CAAC,YAAY,IAAI,4CAA4C,EAAE;QACtF,sBAAsB,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,aAAa,YAAY,UAAU,CAAC,gBAAgB,IAAI,KAAK,YAAY,UAAU,CAAC,aAAa,IAAI,KAAK,WAAW,UAAU,CAAC,QAAQ,IAAI,CAAC,kBAAkB,UAAU,GAAG;QACvO,EAAE;QACF,UAAU;QACV,2EAA2E;QAC3E,gEAAgE;QAChE,0EAA0E;QAC1E,4EAA4E;KAC7E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAQD,MAAM,UAAU,aAAa,CAC3B,OAAoB,EACpB,QAA4B,EAC5B,UAAsB,EACtB,YAAqB;IAErB,MAAM,eAAe,GAAG,YAAY,KAAK,SAAS;QAChD,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;IACrF,IAAI,eAAe,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,MAAM;QACR,KAAK,SAAS;YACZ,8EAA8E;YAC9E,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/E,MAAM;QACR,KAAK,OAAO;YACV,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/E,MAAM;QACR,KAAK,YAAY;YACf,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACzD,MAAM;IACV,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,MAAM,UAAU,qBAAqB,CACnC,OAAoB,EACpB,QAA0B,EAC1B,UAA8B,EAC9B,YAAqB;IAMrB,MAAM,eAAe,GAAG,YAAY,KAAK,SAAS;QAChD,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;IACrF,IAAI,eAAe,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,IAAI,iBAAiB,GAAG,QAAQ,CAAC;IACjC,IAAI,WAAW,GACb,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAChE,CAAC;SAAM,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,iBAAiB,GAAG,OAAO,CAAC;YAC5B,WAAW,GAAG,eAAe,CAAC;QAChC,CAAC;aAAM,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,iBAAiB,GAAG,OAAO,CAAC;YAC5B,WAAW,GAAG,gBAAgB,CAAC;QACjC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC;AACvE,CAAC"}

package/dist/daemon/attachment-decision-escrow.d.ts

@@ -0,0 +1,27 @@
+import type { BlockingDecision, BlockingDecisionChoice, GuardResponseSubset } from '../shared/types.js';
+import { type UserPromptEscrowPromptDecision } from './userprompt-decision-escrow.js';
+export type AttachmentEscrowPromptDecision = UserPromptEscrowPromptDecision;
+export declare function createAttachmentDecisionEscrow(params: {
+    contentBytes: number;
+    contentHash: string;
+    originalPrompt: string;
+    reason: string;
+    resourceId: string;
+    resourceLabel: string;
+    sessionId: string;
+    timeoutMs: number;
+    vgeResult: GuardResponseSubset;
+}): BlockingDecision;
+export declare function renderAttachmentEscrowStopReason(decision: BlockingDecision): string;
+export declare function activeAttachmentEscrowCountForSession(sessionId: string): number;
+export declare function activeAttachmentEscrowDecisionsForSession(sessionId: string): BlockingDecision[];
+export declare function hasAttachmentEscrowDecision(decisionId: string): boolean;
+export declare function renderActiveAttachmentDecisionReask(sessionId: string): string | null;
+export declare function resolveAttachmentEscrowCommand(sessionId: string, command: {
+    choice: BlockingDecisionChoice;
+    decisionId: string | null;
+    residual: string;
+}): AttachmentEscrowPromptDecision;
+export declare function resetAttachmentDecisionEscrowForTests(): void;
+export declare function clearAttachmentDecisionEscrowForSession(sessionId: string): void;
+//# sourceMappingURL=attachment-decision-escrow.d.ts.map

package/dist/daemon/attachment-decision-escrow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-decision-escrow.d.ts","sourceRoot":"","sources":["../../src/daemon/attachment-decision-escrow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAExG,OAAO,EAUL,KAAK,8BAA8B,EACpC,MAAM,iCAAiC,CAAC;AAEzC,MAAM,MAAM,8BAA8B,GAAG,8BAA8B,CAAC;AAE5E,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,mBAAmB,CAAC;CAChC,GAAG,gBAAgB,CAMnB;AAED,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CAEnF;AAED,wBAAgB,qCAAqC,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/E;AAED,wBAAgB,yCAAyC,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAE/F;AAED,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAEvE;AAED,wBAAgB,mCAAmC,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEpF;AAED,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE;IAAE,MAAM,EAAE,sBAAsB,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACvF,8BAA8B,CAEhC;AAED,wBAAgB,qCAAqC,IAAI,IAAI,CAE5D;AAED,wBAAgB,uCAAuC,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAE/E"}

package/dist/daemon/attachment-decision-escrow.js

@@ -0,0 +1,34 @@
+import { grantAttachmentAllowOnce } from './session-state.js';
+import { activeUserPromptEscrowCountForSession, activeUserPromptEscrowDecisionsForSession, clearUserPromptDecisionEscrowForSession, createUserPromptDecisionEscrow, hasUserPromptEscrowDecision, renderActiveUserPromptDecisionReask, renderUserPromptEscrowStopReason, resetUserPromptDecisionEscrowForTests, resolveUserPromptEscrowCommand, } from './userprompt-decision-escrow.js';
+export function createAttachmentDecisionEscrow(params) {
+    return createUserPromptDecisionEscrow({
+        ...params,
+        grantAllowOnce: grantAttachmentAllowOnce,
+        kind: 'attachment_input',
+    });
+}
+export function renderAttachmentEscrowStopReason(decision) {
+    return renderUserPromptEscrowStopReason(decision);
+}
+export function activeAttachmentEscrowCountForSession(sessionId) {
+    return activeUserPromptEscrowCountForSession(sessionId, 'attachment_input');
+}
+export function activeAttachmentEscrowDecisionsForSession(sessionId) {
+    return activeUserPromptEscrowDecisionsForSession(sessionId, 'attachment_input');
+}
+export function hasAttachmentEscrowDecision(decisionId) {
+    return hasUserPromptEscrowDecision(decisionId, 'attachment_input');
+}
+export function renderActiveAttachmentDecisionReask(sessionId) {
+    return renderActiveUserPromptDecisionReask(sessionId, 'attachment_input');
+}
+export function resolveAttachmentEscrowCommand(sessionId, command) {
+    return resolveUserPromptEscrowCommand(sessionId, command, 'attachment_input');
+}
+export function resetAttachmentDecisionEscrowForTests() {
+    resetUserPromptDecisionEscrowForTests('attachment_input');
+}
+export function clearAttachmentDecisionEscrowForSession(sessionId) {
+    clearUserPromptDecisionEscrowForSession(sessionId, 'attachment_input');
+}
+//# sourceMappingURL=attachment-decision-escrow.js.map

package/dist/daemon/attachment-decision-escrow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-decision-escrow.js","sourceRoot":"","sources":["../../src/daemon/attachment-decision-escrow.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EACL,qCAAqC,EACrC,yCAAyC,EACzC,uCAAuC,EACvC,8BAA8B,EAC9B,2BAA2B,EAC3B,mCAAmC,EACnC,gCAAgC,EAChC,qCAAqC,EACrC,8BAA8B,GAE/B,MAAM,iCAAiC,CAAC;AAIzC,MAAM,UAAU,8BAA8B,CAAC,MAU9C;IACC,OAAO,8BAA8B,CAAC;QACpC,GAAG,MAAM;QACT,cAAc,EAAE,wBAAwB;QACxC,IAAI,EAAE,kBAAkB;KACzB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,QAA0B;IACzE,OAAO,gCAAgC,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,SAAiB;IACrE,OAAO,qCAAqC,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,yCAAyC,CAAC,SAAiB;IACzE,OAAO,yCAAyC,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,UAAkB;IAC5D,OAAO,2BAA2B,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,SAAiB;IACnE,OAAO,mCAAmC,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,SAAiB,EACjB,OAAwF;IAExF,OAAO,8BAA8B,CAAC,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,qCAAqC;IACnD,qCAAqC,CAAC,kBAAkB,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,uCAAuC,CAAC,SAAiB;IACvE,uCAAuC,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;AACzE,CAAC"}

package/dist/daemon/attachment-input-enforcement.d.ts

@@ -0,0 +1,11 @@
+import type { CCUserPromptPayload } from '../shared/types.js';
+import type { Config } from '../shared/config-schema.js';
+import { type UserPromptBlockOutput } from './conversation-decision-prompt.js';
+export type AttachmentEnforcementResult = {
+    blocked: false;
+} | {
+    blocked: true;
+    ccOutput: UserPromptBlockOutput;
+};
+export declare function enforcePromptAttachments(payload: CCUserPromptPayload, config: Config): Promise<AttachmentEnforcementResult>;
+//# sourceMappingURL=attachment-input-enforcement.d.ts.map

package/dist/daemon/attachment-input-enforcement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-input-enforcement.d.ts","sourceRoot":"","sources":["../../src/daemon/attachment-input-enforcement.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,mBAAmB,EAAuB,MAAM,oBAAoB,CAAC;AACnF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAezD,OAAO,EAA2C,KAAK,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAoBxH,MAAM,MAAM,2BAA2B,GACnC;IAAE,OAAO,EAAE,KAAK,CAAA;CAAE,GAClB;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAgMvD,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,2BAA2B,CAAC,CA2QtC"}