@vigil-guard/vge-cc-guard 0.9.0-beta.1

package/dist/daemon/audit-decisions.js

@@ -0,0 +1,178 @@
+import { appendEvent } from '../shared/audit-writer.js';
+import { recordDecisionCreated, recordDecisionTerminal, } from './decision-metrics.js';
+function decisionStage(decision) {
+    if (decision.kind === 'pretool_url')
+        return 'pretool';
+    if (decision.kind === 'posttool_output')
+        return 'posttool';
+    if (decision.kind === 'attachment_input')
+        return 'attachment';
+    return 'prompt';
+}
+function decisionOwnerId(decision) {
+    return decision.owner?.kind === 'subagent' ? decision.owner.agentId : decision.sessionId;
+}
+function blockingDecisionFields(decision) {
+    return {
+        correlation_id: decision.decisionId,
+        decision_id: decision.decisionId,
+        session_id: decision.sessionId,
+        owner_kind: decision.owner?.kind ?? 'session',
+        owner_id: decisionOwnerId(decision),
+        stage: decisionStage(decision),
+        kind: decision.kind,
+        tool_name: decision.toolName,
+        resource_id: decision.resourceId,
+        vge_origin: decision.vge.origin ?? 'vge',
+        vge_decision: decision.vge.decision,
+        vge_arbiter_signal: decision.vge.arbiterSignal ?? null,
+        vge_rule_action: decision.vge.ruleAction ?? null,
+        vge_score: decision.vge.score,
+        vge_categories: decision.vge.categories ?? [],
+        local_fallback_reason: decision.vge.origin === 'local_fallback' ? decision.reason : null,
+    };
+}
+function resolvedByForSurface(surface) {
+    return surface === 'resolver_stream' ? 'inline_resolver' : 'conversation_prompt';
+}
+function synthesizedByForTerminal(decision) {
+    if (decision.status === 'resolved_allow_once' || decision.status === 'resolved_allow_session' || decision.status === 'resolved_block') {
+        return 'user_decision';
+    }
+    if (decision.vge.origin === 'local_fallback')
+        return 'sidecar_local_fallback';
+    return 'policy_engine';
+}
+export function logBlockingDecisionCreated(decision, params = {}) {
+    recordDecisionCreated(decision);
+    appendEvent({
+        event_type: 'blocking_decision_created',
+        ...blockingDecisionFields(decision),
+        dedup_key: decision.dedupKey,
+        expires_at: new Date(decision.expiresAt).toISOString(),
+        resolver_surface: params.resolverSurface ?? null,
+    });
+}
+export function logBlockingDecisionDeduped(decision) {
+    appendEvent({
+        event_type: 'blocking_decision_deduped',
+        ...blockingDecisionFields(decision),
+        dedup_key: decision.dedupKey,
+    });
+}
+export function logBlockingDecisionReaskEmitted(decision) {
+    appendEvent({
+        event_type: 'blocking_decision_reask_emitted',
+        ...blockingDecisionFields(decision),
+    });
+}
+export function logBlockingDecisionSessionLocked(decision) {
+    appendEvent({
+        event_type: 'blocking_decision_session_locked',
+        ...blockingDecisionFields(decision),
+    });
+}
+export function logBlockingDecisionResolverMissing(decision) {
+    appendEvent({
+        event_type: 'blocking_decision_resolver_missing',
+        ...blockingDecisionFields(decision),
+    });
+}
+export function logBlockingDecisionResolved(params) {
+    recordDecisionTerminal({
+        decision: params.decision,
+        outcome: params.decision.status,
+        resolvedBy: resolvedByForSurface(params.resolverSurface),
+        latencyMs: params.elapsedMs,
+    });
+    appendEvent({
+        event_type: 'blocking_decision_resolved',
+        ...blockingDecisionFields(params.decision),
+        outcome: params.decision.status,
+        resolved_by: resolvedByForSurface(params.resolverSurface),
+        synthesized_by: 'user_decision',
+        latency_ms: params.elapsedMs,
+        choice: params.choice,
+        client_id: params.clientId,
+        elapsed_ms: params.elapsedMs,
+        resolver_surface: params.resolverSurface ?? null,
+        origin_hook_event: params.originHookEvent ?? null,
+        content_hash: params.contentHash ?? null,
+        content_size_bytes: params.contentSizeBytes ?? null,
+        one_shot_consumed: params.oneShotConsumed ?? null,
+        read_replay_required: params.readReplayRequired ?? null,
+    });
+}
+export function logBlockingDecisionCapacityEvicted(decision) {
+    recordDecisionTerminal({
+        decision,
+        outcome: 'capacity_evicted',
+        resolvedBy: 'capacity_eviction',
+        latencyMs: Date.now() - decision.createdAt,
+    });
+    appendEvent({
+        event_type: 'blocking_decision_capacity_evicted',
+        ...blockingDecisionFields(decision),
+        outcome: 'capacity_evicted',
+        resolved_by: 'capacity_eviction',
+        synthesized_by: synthesizedByForTerminal(decision),
+        latency_ms: Date.now() - decision.createdAt,
+    });
+}
+export function logBlockingDecisionDroppedOnRestart(decision) {
+    recordDecisionTerminal({
+        decision,
+        outcome: 'dropped_on_restart',
+        resolvedBy: 'daemon_restart',
+        latencyMs: Date.now() - decision.createdAt,
+    });
+    appendEvent({
+        event_type: 'blocking_decision_dropped_on_restart',
+        ...blockingDecisionFields(decision),
+        outcome: 'dropped_on_restart',
+        resolved_by: 'daemon_restart',
+        synthesized_by: synthesizedByForTerminal(decision),
+        latency_ms: Date.now() - decision.createdAt,
+    });
+}
+export function logBlockingDecisionConflict(params) {
+    appendEvent({
+        event_type: 'blocking_decision_conflict',
+        ...blockingDecisionFields(params.decision),
+        outcome: 'conflict',
+        current_status: params.currentStatus,
+        resolved_by: params.resolvedBy,
+        client_id: params.clientId,
+        conflict_reason: params.reason,
+        latency_ms: params.elapsedMs,
+    });
+}
+export function logVgeLateResponseDropped(params) {
+    appendEvent({
+        event_type: 'vge_late_response_dropped',
+        correlation_id: params.correlationId,
+        local_request_id: params.localRequestId,
+        current_status: params.currentStatus,
+        late_vge_decision: params.lateVgeDecision.decision,
+        late_vge_id: params.lateVgeDecision.id,
+        late_vge_score: params.lateVgeDecision.score,
+        late_vge_rule_action: params.lateVgeDecision.ruleAction,
+        late_vge_arbiter_signal: params.lateVgeDecision.arbiterSignal,
+        elapsed_ms: params.elapsedMs,
+    });
+}
+export function logLegacyPendingEscalationDropped(params) {
+    appendEvent({
+        event_type: 'legacy_pending_escalation_dropped',
+        session_id: params.sessionId,
+        escalation_id: params.escalation.escalationId,
+        kind: params.escalation.kind ?? 'tool-output',
+        tool_name: params.escalation.toolName,
+        resource_id: params.escalation.resourceId,
+        vge_decision: params.escalation.vgeDecision ?? null,
+        vge_arbiter_signal: params.escalation.vgeArbiterSignal ?? null,
+        vge_rule_action: params.escalation.vgeRuleAction ?? null,
+        vge_score: params.escalation.vgeScore ?? null,
+    });
+}
+//# sourceMappingURL=audit-decisions.js.map

package/dist/daemon/audit-decisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-decisions.js","sourceRoot":"","sources":["../../src/daemon/audit-decisions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAU/B,SAAS,aAAa,CAAC,QAA0B;IAC/C,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,QAAQ,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,UAAU,CAAC;IAC3D,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAkB;QAAE,OAAO,YAAY,CAAC;IAC9D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,QAA0B;IACjD,OAAO,QAAQ,CAAC,KAAK,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;AAC3F,CAAC;AAED,SAAS,sBAAsB,CAAC,QAA0B;IACxD,OAAO;QACL,cAAc,EAAE,QAAQ,CAAC,UAAU;QACnC,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,IAAI,SAAS;QAC7C,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;QACnC,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC;QAC9B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,SAAS,EAAE,QAAQ,CAAC,QAAQ;QAC5B,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK;QACxC,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ;QACnC,kBAAkB,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI;QACtD,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI;QAChD,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK;QAC7B,cAAc,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE;QAC7C,qBAAqB,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;KACzF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,OAA0D;IACtF,OAAO,OAAO,KAAK,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,qBAAqB,CAAC;AACnF,CAAC;AAED,SAAS,wBAAwB,CAAC,QAA0B;IAC1D,IAAI,QAAQ,CAAC,MAAM,KAAK,qBAAqB,IAAI,QAAQ,CAAC,MAAM,KAAK,wBAAwB,IAAI,QAAQ,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QACtI,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,gBAAgB;QAAE,OAAO,wBAAwB,CAAC;IAC9E,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAA0B,EAC1B,SAAsE,EAAE;IAExE,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAChC,WAAW,CAAC;QACV,UAAU,EAAE,2BAA2B;QACvC,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QACnC,SAAS,EAAE,QAAQ,CAAC,QAAQ;QAC5B,UAAU,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QACtD,gBAAgB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;KACjD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAA0B;IACnE,WAAW,CAAC;QACV,UAAU,EAAE,2BAA2B;QACvC,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QACnC,SAAS,EAAE,QAAQ,CAAC,QAAQ;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,QAA0B;IACxE,WAAW,CAAC;QACV,UAAU,EAAE,iCAAiC;QAC7C,GAAG,sBAAsB,CAAC,QAAQ,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,QAA0B;IACzE,WAAW,CAAC;QACV,UAAU,EAAE,kCAAkC;QAC9C,GAAG,sBAAsB,CAAC,QAAQ,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,QAA0B;IAC3E,WAAW,CAAC;QACV,UAAU,EAAE,oCAAoC;QAChD,GAAG,sBAAsB,CAAC,QAAQ,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAW3C;IACC,sBAAsB,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QAC/B,UAAU,EAAE,oBAAoB,CAAC,MAAM,CAAC,eAAe,CAAC;QACxD,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,WAAW,CAAC;QACV,UAAU,EAAE,4BAA4B;QACxC,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC1C,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QAC/B,WAAW,EAAE,oBAAoB,CAAC,MAAM,CAAC,eAAe,CAAC;QACzD,cAAc,EAAE,eAAe;QAC/B,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,gBAAgB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;QAChD,iBAAiB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;QACjD,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;QACxC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;QACnD,iBAAiB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;QACjD,oBAAoB,EAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI;KACxD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,QAA0B;IAC3E,sBAAsB,CAAC;QACrB,QAAQ;QACR,OAAO,EAAE,kBAAkB;QAC3B,UAAU,EAAE,mBAAmB;QAC/B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS;KAC3C,CAAC,CAAC;IACH,WAAW,CAAC;QACV,UAAU,EAAE,oCAAoC;QAChD,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,mBAAmB;QAChC,cAAc,EAAE,wBAAwB,CAAC,QAAQ,CAAC;QAClD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,QAA0B;IAC5E,sBAAsB,CAAC;QACrB,QAAQ;QACR,OAAO,EAAE,oBAAoB;QAC7B,UAAU,EAAE,gBAAgB;QAC5B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS;KAC3C,CAAC,CAAC;IACH,WAAW,CAAC;QACV,UAAU,EAAE,sCAAsC;QAClD,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,gBAAgB;QAC7B,cAAc,EAAE,wBAAwB,CAAC,QAAQ,CAAC;QAClD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAO3C;IACC,WAAW,CAAC;QACV,UAAU,EAAE,4BAA4B;QACxC,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC1C,OAAO,EAAE,UAAU;QACnB,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,eAAe,EAAE,MAAM,CAAC,MAAM;QAC9B,UAAU,EAAE,MAAM,CAAC,SAAS;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAMzC;IACC,WAAW,CAAC;QACV,UAAU,EAAE,2BAA2B;QACvC,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,gBAAgB,EAAE,MAAM,CAAC,cAAc;QACvC,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,iBAAiB,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ;QAClD,WAAW,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE;QACtC,cAAc,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK;QAC5C,oBAAoB,EAAE,MAAM,CAAC,eAAe,CAAC,UAAU;QACvD,uBAAuB,EAAE,MAAM,CAAC,eAAe,CAAC,aAAa;QAC7D,UAAU,EAAE,MAAM,CAAC,SAAS;KAC7B,CAAC,CAAC;AACL,CAAC;AAUD,MAAM,UAAU,iCAAiC,CAAC,MAGjD;IACC,WAAW,CAAC;QACV,UAAU,EAAE,mCAAmC;QAC/C,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;QAC7C,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI,aAAa;QAC7C,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;QACrC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU;QACzC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,IAAI,IAAI;QACnD,kBAAkB,EAAE,MAAM,CAAC,UAAU,CAAC,gBAAgB,IAAI,IAAI;QAC9D,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa,IAAI,IAAI;QACxD,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,IAAI,IAAI;KAC9C,CAAC,CAAC;AACL,CAAC"}

package/dist/daemon/audit-logger.d.ts

@@ -0,0 +1,6 @@
+export { cleanupOldLogs } from '../shared/audit-writer.js';
+export * from './audit-posttool.js';
+export * from './audit-pretool.js';
+export * from './audit-userprompt.js';
+export * from './audit-decisions.js';
+//# sourceMappingURL=audit-logger.d.ts.map

package/dist/daemon/audit-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-logger.d.ts","sourceRoot":"","sources":["../../src/daemon/audit-logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC"}

package/dist/daemon/audit-logger.js

@@ -0,0 +1,6 @@
+export { cleanupOldLogs } from '../shared/audit-writer.js';
+export * from './audit-posttool.js';
+export * from './audit-pretool.js';
+export * from './audit-userprompt.js';
+export * from './audit-decisions.js';
+//# sourceMappingURL=audit-logger.js.map

package/dist/daemon/audit-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-logger.js","sourceRoot":"","sources":["../../src/daemon/audit-logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC"}

package/dist/daemon/audit-posttool.d.ts

@@ -0,0 +1,123 @@
+import type { EscalationDecision, RouterOutcome } from '../shared/types.js';
+import type { AnalysisSourceKind } from './analysis-source.js';
+import type { SecurityFrameVariant } from './security-frame.js';
+export type SynthesizedBy = 'vge' | 'sidecar_local_fallback' | 'user_decision' | 'policy_engine';
+export type PostToolKillReason = 'cc_contract_unhealthy' | 'pending_subagent_decision' | 'redaction_failed_invalid_shape' | 'unsupported_tool';
+export declare function logToolOutputEscalated(params: {
+    escalationId: string;
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    analysisId: string | null;
+    branches: Record<string, number>;
+    routerOutcome: RouterOutcome;
+}): void;
+export declare function logEscalationResolved(params: {
+    escalationId: string;
+    sessionId: string;
+    decision: EscalationDecision;
+    enqueuedAt: number;
+}): void;
+export declare function logToolOutputAnalyzed(params: {
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    escalationId?: string | null;
+    userAllowlisted: boolean;
+    routerOutcome: RouterOutcome;
+    enforcementTaken: 'none' | 'tainted' | 'escalated' | 'denied';
+    analysisSource: AnalysisSourceKind;
+    analysisSourceFallbackReason?: string;
+}): void;
+export declare function logSubagentOutputAnalysisSkippedByPolicy(params: {
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    ownerKind: string;
+}): void;
+export declare function logPostToolOutputScanFailedOpen(params: {
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    failureReason: string;
+    httpStatus?: number;
+    elapsedMs?: number;
+    localRequestId?: string;
+    attempt?: number;
+    retryAfterMs?: number;
+    cooldownStarted?: boolean;
+    cooldownMs?: number;
+    cooldownUntilMs?: number;
+}): void;
+export declare function logPostToolOutputScanSkippedFailOpen(params: {
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    skipReason: 'vge_overload_cooldown';
+    cooldownRemainingMs: number;
+    triggerFailureReason: string;
+    triggerHttpStatus?: number;
+    originalHash: string;
+    originalSizeBytes: number;
+}): void;
+export declare function logCredentialPathDenied(params: {
+    sessionId: string;
+    resolvedPath: string;
+    credentialProtectionEnabled: boolean;
+}): void;
+export declare function logPostToolOutputRedacted(params: {
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    routerOutcome: RouterOutcome;
+    originalSizeBytes: number;
+    originalHash: string;
+    synthesizedBy: SynthesizedBy;
+}): void;
+export declare function logPostToolKillTurn(params: {
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    routerOutcome: RouterOutcome;
+    originalSizeBytes: number;
+    originalHash: string;
+    synthesizedBy: SynthesizedBy;
+    killReason: PostToolKillReason;
+    redactionFailureReason?: string;
+}): void;
+export declare function logPostToolFrameInjected(params: {
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    routerOutcome: RouterOutcome;
+    originalSizeBytes: number;
+    originalHash: string;
+    analysisSource: AnalysisSourceKind;
+    analysisSourceFallbackReason?: string;
+    synthesizedBy: SynthesizedBy;
+    frameVariant?: SecurityFrameVariant;
+}): void;
+export declare function logPostToolAllowOnceConsumed(params: {
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    contentHash: string;
+    decisionId: string;
+}): void;
+export declare function logPostToolReadReplayRequired(params: {
+    sessionId: string;
+    filePath: string;
+    decisionId: string;
+}): void;
+export declare function logPostToolReadReplaySatisfied(params: {
+    sessionId: string;
+    filePath: string;
+    decisionId: string;
+    elapsedMs: number;
+}): void;
+export declare function logPostToolPendingDecisionToolDenied(params: {
+    sessionId: string;
+    toolName: string;
+    reason: 'pending_posttool_decision' | 'read_replay_required';
+}): void;
+//# sourceMappingURL=audit-posttool.d.ts.map

package/dist/daemon/audit-posttool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-posttool.d.ts","sourceRoot":"","sources":["../../src/daemon/audit-posttool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAE5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,wBAAwB,GAAG,eAAe,GAAG,eAAe,CAAC;AACjG,MAAM,MAAM,kBAAkB,GAC1B,uBAAuB,GACvB,2BAA2B,GAC3B,gCAAgC,GAChC,kBAAkB,CAAC;AAEvB,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;CAC9B,GAAG,IAAI,CAWP;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CASP;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,aAAa,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC9D,cAAc,EAAE,kBAAkB,CAAC;IACnC,4BAA4B,CAAC,EAAE,MAAM,CAAC;CACvC,GAAG,IAAI,CAeP;AAED,wBAAgB,wCAAwC,CAAC,MAAM,EAAE;IAC/D,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,IAAI,CAUP;AAED,wBAAgB,+BAA+B,CAAC,MAAM,EAAE;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,IAAI,CAiBP;AAED,wBAAgB,oCAAoC,CAAC,MAAM,EAAE;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,uBAAuB,CAAC;IACpC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,GAAG,IAAI,CAcP;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,2BAA2B,EAAE,OAAO,CAAC;CACtC,GAAG,IAAI,CAOP;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,aAAa,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,aAAa,CAAC;CAC9B,GAAG,IAAI,CAWP;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,aAAa,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,aAAa,CAAC;IAC7B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,GAAG,IAAI,CAaP;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,aAAa,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,kBAAkB,CAAC;IACnC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,aAAa,EAAE,aAAa,CAAC;IAC7B,YAAY,CAAC,EAAE,oBAAoB,CAAC;CACrC,GAAG,IAAI,CAgBP;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CAUP;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CAQP;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,IAAI,CASP;AAED,wBAAgB,oCAAoC,CAAC,MAAM,EAAE;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,2BAA2B,GAAG,sBAAsB,CAAC;CAC9D,GAAG,IAAI,CAOP"}

package/dist/daemon/audit-posttool.js

@@ -0,0 +1,173 @@
+import { appendEvent } from '../shared/audit-writer.js';
+export function logToolOutputEscalated(params) {
+    appendEvent({
+        event_type: 'tool_output_escalated',
+        escalation_id: params.escalationId,
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        resource_id: params.resourceId,
+        analysis_id: params.analysisId,
+        branches: params.branches,
+        router_outcome: params.routerOutcome,
+    });
+}
+export function logEscalationResolved(params) {
+    appendEvent({
+        event_type: 'escalation_resolved',
+        escalation_id: params.escalationId,
+        session_id: params.sessionId,
+        decision: params.decision,
+        decision_source: 'user',
+        resolution_delay_ms: Date.now() - params.enqueuedAt,
+    });
+}
+export function logToolOutputAnalyzed(params) {
+    appendEvent({
+        event_type: 'tool_output_analyzed',
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        resource_id: params.resourceId,
+        escalation_id: params.escalationId ?? null,
+        user_allowlisted: params.userAllowlisted,
+        router_outcome: params.routerOutcome,
+        enforcement_taken: params.enforcementTaken,
+        analysis_source: params.analysisSource,
+        ...(params.analysisSourceFallbackReason
+            ? { analysis_source_fallback_reason: params.analysisSourceFallbackReason }
+            : {}),
+    });
+}
+export function logSubagentOutputAnalysisSkippedByPolicy(params) {
+    appendEvent({
+        event_type: 'subagent_output_analysis_skipped_by_policy',
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        resource_id: params.resourceId,
+        owner_kind: params.ownerKind,
+        reason: 'subagent_output_analysis_off',
+        enforcement_taken: 'none',
+    });
+}
+export function logPostToolOutputScanFailedOpen(params) {
+    appendEvent({
+        event_type: 'posttool_output_scan_failed_open',
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        resource_id: params.resourceId,
+        failure_reason: params.failureReason,
+        ...(typeof params.httpStatus === 'number' ? { http_status: params.httpStatus } : {}),
+        ...(typeof params.elapsedMs === 'number' ? { elapsed_ms: params.elapsedMs } : {}),
+        ...(params.localRequestId ? { local_request_id: params.localRequestId } : {}),
+        ...(typeof params.attempt === 'number' ? { attempt: params.attempt } : {}),
+        ...(typeof params.retryAfterMs === 'number' ? { retry_after_ms: params.retryAfterMs } : {}),
+        ...(typeof params.cooldownStarted === 'boolean' ? { cooldown_started: params.cooldownStarted } : {}),
+        ...(typeof params.cooldownMs === 'number' ? { cooldown_ms: params.cooldownMs } : {}),
+        ...(typeof params.cooldownUntilMs === 'number' ? { cooldown_until_ms: params.cooldownUntilMs } : {}),
+        enforcement_taken: 'fail_open',
+    });
+}
+export function logPostToolOutputScanSkippedFailOpen(params) {
+    appendEvent({
+        event_type: 'posttool_output_scan_skipped_fail_open',
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        resource_id: params.resourceId,
+        skip_reason: params.skipReason,
+        cooldown_remaining_ms: params.cooldownRemainingMs,
+        trigger_failure_reason: params.triggerFailureReason,
+        ...(typeof params.triggerHttpStatus === 'number' ? { trigger_http_status: params.triggerHttpStatus } : {}),
+        original_hash: params.originalHash,
+        original_size_bytes: params.originalSizeBytes,
+        enforcement_taken: 'fail_open',
+    });
+}
+export function logCredentialPathDenied(params) {
+    appendEvent({
+        event_type: 'credential_path_denied',
+        session_id: params.sessionId,
+        resolved_path: params.resolvedPath,
+        credential_protection_enabled: params.credentialProtectionEnabled,
+    });
+}
+export function logPostToolOutputRedacted(params) {
+    appendEvent({
+        event_type: 'posttool_output_redacted',
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        resource_id: params.resourceId,
+        router_outcome: params.routerOutcome,
+        original_size_bytes: params.originalSizeBytes,
+        original_hash: params.originalHash,
+        synthesized_by: params.synthesizedBy,
+    });
+}
+export function logPostToolKillTurn(params) {
+    appendEvent({
+        event_type: 'posttool_kill_turn',
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        resource_id: params.resourceId,
+        router_outcome: params.routerOutcome,
+        original_size_bytes: params.originalSizeBytes,
+        original_hash: params.originalHash,
+        synthesized_by: params.synthesizedBy,
+        kill_reason: params.killReason,
+        redaction_failure_reason: params.redactionFailureReason,
+    });
+}
+export function logPostToolFrameInjected(params) {
+    appendEvent({
+        event_type: 'posttool_frame_injected',
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        resource_id: params.resourceId,
+        router_outcome: params.routerOutcome,
+        original_size_bytes: params.originalSizeBytes,
+        original_hash: params.originalHash,
+        analysis_source: params.analysisSource,
+        synthesized_by: params.synthesizedBy,
+        ...(params.frameVariant ? { frame_variant: params.frameVariant } : {}),
+        ...(params.analysisSourceFallbackReason
+            ? { analysis_source_fallback_reason: params.analysisSourceFallbackReason }
+            : {}),
+    });
+}
+export function logPostToolAllowOnceConsumed(params) {
+    appendEvent({
+        event_type: 'posttool_allow_once_consumed',
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        resource_id: params.resourceId,
+        content_hash: params.contentHash,
+        decision_id: params.decisionId,
+        one_shot_consumed: true,
+    });
+}
+export function logPostToolReadReplayRequired(params) {
+    appendEvent({
+        event_type: 'posttool_read_replay_required',
+        session_id: params.sessionId,
+        file_path: params.filePath,
+        decision_id: params.decisionId,
+        read_replay_required: true,
+    });
+}
+export function logPostToolReadReplaySatisfied(params) {
+    appendEvent({
+        event_type: 'posttool_read_replay_satisfied',
+        session_id: params.sessionId,
+        file_path: params.filePath,
+        decision_id: params.decisionId,
+        elapsed_ms: params.elapsedMs,
+        read_replay_required: false,
+    });
+}
+export function logPostToolPendingDecisionToolDenied(params) {
+    appendEvent({
+        event_type: 'posttool_pending_decision_tool_denied',
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        reason: params.reason,
+    });
+}
+//# sourceMappingURL=audit-posttool.js.map

package/dist/daemon/audit-posttool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-posttool.js","sourceRoot":"","sources":["../../src/daemon/audit-posttool.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAWxD,MAAM,UAAU,sBAAsB,CAAC,MAQtC;IACC,WAAW,CAAC;QACV,UAAU,EAAE,uBAAuB;QACnC,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,cAAc,EAAE,MAAM,CAAC,aAAa;KACrC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAKrC;IACC,WAAW,CAAC;QACV,UAAU,EAAE,qBAAqB;QACjC,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,eAAe,EAAE,MAAM;QACvB,mBAAmB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU;KACpD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAUrC;IACC,WAAW,CAAC;QACV,UAAU,EAAE,sBAAsB;QAClC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,aAAa,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;QAC1C,gBAAgB,EAAE,MAAM,CAAC,eAAe;QACxC,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,iBAAiB,EAAE,MAAM,CAAC,gBAAgB;QAC1C,eAAe,EAAE,MAAM,CAAC,cAAc;QACtC,GAAG,CAAC,MAAM,CAAC,4BAA4B;YACrC,CAAC,CAAC,EAAE,+BAA+B,EAAE,MAAM,CAAC,4BAA4B,EAAE;YAC1E,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wCAAwC,CAAC,MAKxD;IACC,WAAW,CAAC;QACV,UAAU,EAAE,4CAA4C;QACxD,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,MAAM,EAAE,8BAA8B;QACtC,iBAAiB,EAAE,MAAM;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,MAa/C;IACC,WAAW,CAAC;QACV,UAAU,EAAE,kCAAkC;QAC9C,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,GAAG,CAAC,OAAO,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,iBAAiB,EAAE,WAAW;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,MAUpD;IACC,WAAW,CAAC;QACV,UAAU,EAAE,wCAAwC;QACpD,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,qBAAqB,EAAE,MAAM,CAAC,mBAAmB;QACjD,sBAAsB,EAAE,MAAM,CAAC,oBAAoB;QACnD,GAAG,CAAC,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,mBAAmB,EAAE,MAAM,CAAC,iBAAiB;QAC7C,iBAAiB,EAAE,WAAW;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAIvC;IACC,WAAW,CAAC;QACV,UAAU,EAAE,wBAAwB;QACpC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,6BAA6B,EAAE,MAAM,CAAC,2BAA2B;KAClE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAQzC;IACC,WAAW,CAAC;QACV,UAAU,EAAE,0BAA0B;QACtC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,mBAAmB,EAAE,MAAM,CAAC,iBAAiB;QAC7C,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,cAAc,EAAE,MAAM,CAAC,aAAa;KACrC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAUnC;IACC,WAAW,CAAC;QACV,UAAU,EAAE,oBAAoB;QAChC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,mBAAmB,EAAE,MAAM,CAAC,iBAAiB;QAC7C,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,wBAAwB,EAAE,MAAM,CAAC,sBAAsB;KACxD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAWxC;IACC,WAAW,CAAC;QACV,UAAU,EAAE,yBAAyB;QACrC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,mBAAmB,EAAE,MAAM,CAAC,iBAAiB;QAC7C,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,eAAe,EAAE,MAAM,CAAC,cAAc;QACtC,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,MAAM,CAAC,4BAA4B;YACrC,CAAC,CAAC,EAAE,+BAA+B,EAAE,MAAM,CAAC,4BAA4B,EAAE;YAC1E,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAM5C;IACC,WAAW,CAAC;QACV,UAAU,EAAE,8BAA8B;QAC1C,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAI7C;IACC,WAAW,CAAC;QACV,UAAU,EAAE,+BAA+B;QAC3C,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,oBAAoB,EAAE,IAAI;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,MAK9C;IACC,WAAW,CAAC;QACV,UAAU,EAAE,gCAAgC;QAC5C,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,oBAAoB,EAAE,KAAK;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,MAIpD;IACC,WAAW,CAAC;QACV,UAAU,EAAE,uCAAuC;QACnD,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC"}

package/dist/daemon/audit-pretool.d.ts

@@ -0,0 +1,56 @@
+export declare function logPretoolUrlBlocked(params: {
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    urlHash: string;
+    host: string | null;
+    vgeDecision?: string;
+    vgeScore?: number;
+    reason?: string;
+}): void;
+export declare function logPretoolUrlDenylistBlocked(params: {
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    urlHash: string;
+    host: string | null;
+    reason: string;
+    preset?: string;
+    matchedRule: string;
+}): void;
+export declare function logPretoolUrlNativeAsk(params: {
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    urlHash: string;
+    host: string | null;
+    vgeDecision?: string;
+    vgeScore?: number;
+}): void;
+export declare function logPretoolUrlAllowOnce(params: {
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    urlHash: string;
+    host: string | null;
+    vgeDecision?: string;
+    vgeScore?: number;
+}): void;
+export declare function logPretoolUrlAllowlistedByUser(params: {
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    urlHash: string;
+    host: string;
+    vgeDecision?: string;
+    vgeScore?: number;
+}): void;
+export declare function logPretoolUrlAllowlistBypass(params: {
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    urlHash: string;
+    host: string;
+    pattern: string;
+}): void;
+//# sourceMappingURL=audit-pretool.d.ts.map

package/dist/daemon/audit-pretool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-pretool.d.ts","sourceRoot":"","sources":["../../src/daemon/audit-pretool.ts"],"names":[],"mappings":"AAEA,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,IAAI,CAYP;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,IAAI,CAaP;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,IAAI,CAYP;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,IAAI,CAWP;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,IAAI,CAWP;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,IAAI,CAUP"}

package/dist/daemon/audit-pretool.js

@@ -0,0 +1,77 @@
+import { appendEvent } from '../shared/audit-writer.js';
+export function logPretoolUrlBlocked(params) {
+    appendEvent({
+        event_type: 'pretool_url_blocked',
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        resource_id: params.resourceId,
+        url_hash: params.urlHash,
+        host: params.host,
+        vge_decision: params.vgeDecision ?? null,
+        vge_score: params.vgeScore ?? null,
+        reason: params.reason ?? null,
+    });
+}
+export function logPretoolUrlDenylistBlocked(params) {
+    appendEvent({
+        event_type: 'pretool_url_denylist_blocked',
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        resource_id: params.resourceId,
+        url_hash: params.urlHash,
+        host: params.host,
+        reason: params.reason,
+        preset: params.preset ?? null,
+        matched_rule: params.matchedRule,
+        enforcement_taken: 'deny',
+    });
+}
+export function logPretoolUrlNativeAsk(params) {
+    appendEvent({
+        event_type: 'pretool_url_native_ask',
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        resource_id: params.resourceId,
+        url_hash: params.urlHash,
+        host: params.host,
+        vge_decision: params.vgeDecision ?? null,
+        vge_score: params.vgeScore ?? null,
+        enforcement_taken: 'native_ask',
+    });
+}
+export function logPretoolUrlAllowOnce(params) {
+    appendEvent({
+        event_type: 'pretool_url_allow_once',
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        resource_id: params.resourceId,
+        url_hash: params.urlHash,
+        host: params.host,
+        vge_decision: params.vgeDecision ?? null,
+        vge_score: params.vgeScore ?? null,
+    });
+}
+export function logPretoolUrlAllowlistedByUser(params) {
+    appendEvent({
+        event_type: 'pretool_url_allowlisted_by_user',
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        resource_id: params.resourceId,
+        url_hash: params.urlHash,
+        host: params.host,
+        vge_decision: params.vgeDecision ?? null,
+        vge_score: params.vgeScore ?? null,
+    });
+}
+export function logPretoolUrlAllowlistBypass(params) {
+    appendEvent({
+        event_type: 'pretool_url_allowlist_bypass',
+        session_id: params.sessionId,
+        tool_name: params.toolName,
+        resource_id: params.resourceId,
+        url_hash: params.urlHash,
+        host: params.host,
+        pattern: params.pattern,
+    });
+}
+//# sourceMappingURL=audit-pretool.js.map