@vigil-guard/vge-cc-guard 0.9.0-beta.1

package/dist/daemon/audit-pretool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-pretool.js","sourceRoot":"","sources":["../../src/daemon/audit-pretool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,MAAM,UAAU,oBAAoB,CAAC,MASpC;IACC,WAAW,CAAC;QACV,UAAU,EAAE,qBAAqB;QACjC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,QAAQ,EAAE,MAAM,CAAC,OAAO;QACxB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;QACxC,SAAS,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;KAC9B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAS5C;IACC,WAAW,CAAC;QACV,UAAU,EAAE,8BAA8B;QAC1C,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,QAAQ,EAAE,MAAM,CAAC,OAAO;QACxB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI;QAC7B,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,iBAAiB,EAAE,MAAM;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAQtC;IACC,WAAW,CAAC;QACV,UAAU,EAAE,wBAAwB;QACpC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,QAAQ,EAAE,MAAM,CAAC,OAAO;QACxB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;QACxC,SAAS,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;QAClC,iBAAiB,EAAE,YAAY;KAChC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAQtC;IACC,WAAW,CAAC;QACV,UAAU,EAAE,wBAAwB;QACpC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,QAAQ,EAAE,MAAM,CAAC,OAAO;QACxB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;QACxC,SAAS,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;KACnC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,MAQ9C;IACC,WAAW,CAAC;QACV,UAAU,EAAE,iCAAiC;QAC7C,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,QAAQ,EAAE,MAAM,CAAC,OAAO;QACxB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;QACxC,SAAS,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;KACnC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAO5C;IACC,WAAW,CAAC;QACV,UAAU,EAAE,8BAA8B;QAC1C,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,QAAQ,EAAE,MAAM,CAAC,OAAO;QACxB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC,CAAC;AACL,CAAC"}

package/dist/daemon/audit-userprompt.d.ts

@@ -0,0 +1,113 @@
+export declare function logUserPromptReceived(params: {
+    sessionId: string;
+    promptHash: string;
+    promptSizeBytes: number;
+    pendingEscalation: boolean;
+    pendingKind?: string | null;
+}): void;
+export declare function logAttachmentInputAnalyzed(params: {
+    sessionId: string;
+    displayPath: string;
+    contentHash: string;
+    contentSizeBytes: number;
+    contentChars: number;
+    vgeDecision: string;
+    vgeScore: number;
+    vgeCategories?: string[];
+    branches: Record<string, number>;
+    enforcementTaken: 'none' | 'hitl';
+}): void;
+export declare function logAttachmentInputScanFailedToHitl(params: {
+    sessionId: string;
+    displayPath: string;
+    contentHash: string;
+    contentSizeBytes: number;
+    contentChars: number;
+    reason: 'attachment_scan_missing_api_key' | 'attachment_scan_timeout' | 'attachment_scan_failed' | 'attachment_too_large_for_full_scan';
+}): void;
+export declare function logAttachmentInputScanFailedOpen(params: {
+    sessionId: string;
+    displayPath: string;
+    contentHash: string;
+    contentSizeBytes: number;
+    contentChars: number;
+    reason: 'attachment_scan_missing_api_key' | 'attachment_scan_timeout' | 'attachment_scan_failed' | 'attachment_too_large_for_full_scan';
+    failureReason?: string;
+    httpStatus?: number;
+    elapsedMs?: number;
+    localRequestId?: string;
+    attempt?: number;
+    retryAfterMs?: number;
+}): void;
+export declare function logAttachmentInputCredentialPathDenied(params: {
+    sessionId: string;
+    displayPath: string;
+    resolvedPath: string;
+    contentHash: string;
+    contentSizeBytes: number;
+    contentChars: number;
+}): void;
+export declare function logAttachmentInputAnalysisSkippedByPolicy(params: {
+    sessionId: string;
+    displayPath: string;
+    contentHash: string;
+    contentSizeBytes: number;
+    contentChars: number;
+}): void;
+export declare function logPromptTextInputAnalyzed(params: {
+    sessionId: string;
+    promptHash: string;
+    promptSizeBytes: number;
+    promptChars: number;
+    resourceId: string;
+    decisionId?: string;
+    vgeDecision: string;
+    vgeScore: number;
+    vgeCategories?: string[];
+    branches: Record<string, number>;
+    enforcementTaken: 'none' | 'hitl';
+}): void;
+export declare function logPromptTextInputScanFailedToHitl(params: {
+    sessionId: string;
+    promptHash: string;
+    promptSizeBytes: number;
+    promptChars: number;
+    resourceId: string;
+    decisionId?: string;
+    reason: 'prompt_scan_missing_api_key' | 'prompt_scan_timeout' | 'prompt_scan_failed' | 'prompt_too_large_for_full_scan';
+}): void;
+export declare function logPromptTextInputScanFailedOpen(params: {
+    sessionId: string;
+    promptHash: string;
+    promptSizeBytes: number;
+    promptChars: number;
+    resourceId: string;
+    reason: 'prompt_scan_missing_api_key' | 'prompt_scan_timeout' | 'prompt_scan_failed' | 'prompt_too_large_for_full_scan';
+    failureReason?: string;
+    httpStatus?: number;
+    elapsedMs?: number;
+    localRequestId?: string;
+    attempt?: number;
+    retryAfterMs?: number;
+}): void;
+export declare function logPromptTextInputAnalysisSkippedByPolicy(params: {
+    sessionId: string;
+    promptHash: string;
+    promptSizeBytes: number;
+    promptChars: number;
+    resourceId: string;
+}): void;
+export declare function logAttachmentAllowOnceConsumed(params: {
+    sessionId: string;
+    resourceId: string;
+    contentHash: string;
+}): void;
+export declare function logAttachmentReferenceWithoutTranscriptRecord(params: {
+    sessionId: string;
+    promptHash: string;
+    promptSizeBytes: number;
+    transcriptPathHash: string | null;
+    cursorOffset: number;
+    nextOffset: number;
+}): void;
+//# sourceMappingURL=audit-userprompt.d.ts.map

package/dist/daemon/audit-userprompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-userprompt.d.ts","sourceRoot":"","sources":["../../src/daemon/audit-userprompt.ts"],"names":[],"mappings":"AAEA,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,GAAG,IAAI,CAUP;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC,GAAG,IAAI,CAcP;AAED,wBAAgB,kCAAkC,CAAC,MAAM,EAAE;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EACF,iCAAiC,GACjC,yBAAyB,GACzB,wBAAwB,GACxB,oCAAoC,CAAC;CAC1C,GAAG,IAAI,CAWP;AAED,wBAAgB,gCAAgC,CAAC,MAAM,EAAE;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EACF,iCAAiC,GACjC,yBAAyB,GACzB,wBAAwB,GACxB,oCAAoC,CAAC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,IAAI,CAiBP;AAED,wBAAgB,sCAAsC,CAAC,MAAM,EAAE;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,IAAI,CAYP;AAED,wBAAgB,yCAAyC,CAAC,MAAM,EAAE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,IAAI,CAWP;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC,GAAG,IAAI,CAeP;AAED,wBAAgB,kCAAkC,CAAC,MAAM,EAAE;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EACF,6BAA6B,GAC7B,qBAAqB,GACrB,oBAAoB,GACpB,gCAAgC,CAAC;CACtC,GAAG,IAAI,CAYP;AAED,wBAAgB,gCAAgC,CAAC,MAAM,EAAE;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EACF,6BAA6B,GAC7B,qBAAqB,GACrB,oBAAoB,GACpB,gCAAgC,CAAC;IACrC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,IAAI,CAiBP;AAED,wBAAgB,yCAAyC,CAAC,MAAM,EAAE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CAWP;AAED,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,IAAI,CAQP;AAED,wBAAgB,6CAA6C,CAAC,MAAM,EAAE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,IAAI,CAUP"}

package/dist/daemon/audit-userprompt.js

@@ -0,0 +1,162 @@
+import { appendEvent } from '../shared/audit-writer.js';
+export function logUserPromptReceived(params) {
+    appendEvent({
+        event_type: 'userprompt_received',
+        session_id: params.sessionId,
+        prompt_hash: params.promptHash,
+        prompt_size_bytes: params.promptSizeBytes,
+        pending_escalation: params.pendingEscalation,
+        pending_kind: params.pendingKind ?? null,
+        enforcement_taken: 'audit_recorded',
+    });
+}
+export function logAttachmentInputAnalyzed(params) {
+    appendEvent({
+        event_type: 'attachment_input_analyzed',
+        session_id: params.sessionId,
+        display_path: params.displayPath,
+        content_hash: params.contentHash,
+        content_size_bytes: params.contentSizeBytes,
+        content_chars: params.contentChars,
+        vge_decision: params.vgeDecision,
+        vge_score: params.vgeScore,
+        vge_categories: params.vgeCategories ?? [],
+        branches: params.branches,
+        enforcement_taken: params.enforcementTaken,
+    });
+}
+export function logAttachmentInputScanFailedToHitl(params) {
+    appendEvent({
+        event_type: 'attachment_input_scan_failed_to_hitl',
+        session_id: params.sessionId,
+        display_path: params.displayPath,
+        content_hash: params.contentHash,
+        content_size_bytes: params.contentSizeBytes,
+        content_chars: params.contentChars,
+        reason: params.reason,
+        enforcement_taken: 'hitl',
+    });
+}
+export function logAttachmentInputScanFailedOpen(params) {
+    appendEvent({
+        event_type: 'attachment_input_scan_failed_open',
+        session_id: params.sessionId,
+        display_path: params.displayPath,
+        content_hash: params.contentHash,
+        content_size_bytes: params.contentSizeBytes,
+        content_chars: params.contentChars,
+        reason: params.reason,
+        ...(params.failureReason ? { failure_reason: params.failureReason } : {}),
+        ...(typeof params.httpStatus === 'number' ? { http_status: params.httpStatus } : {}),
+        ...(typeof params.elapsedMs === 'number' ? { elapsed_ms: params.elapsedMs } : {}),
+        ...(params.localRequestId ? { local_request_id: params.localRequestId } : {}),
+        ...(typeof params.attempt === 'number' ? { attempt: params.attempt } : {}),
+        ...(typeof params.retryAfterMs === 'number' ? { retry_after_ms: params.retryAfterMs } : {}),
+        enforcement_taken: 'ide_compat_allow',
+    });
+}
+export function logAttachmentInputCredentialPathDenied(params) {
+    appendEvent({
+        event_type: 'attachment_input_credential_path_denied',
+        session_id: params.sessionId,
+        display_path: params.displayPath,
+        resolved_path: params.resolvedPath,
+        content_hash: params.contentHash,
+        content_size_bytes: params.contentSizeBytes,
+        content_chars: params.contentChars,
+        reason: 'attachment_credential_path_denied',
+        enforcement_taken: 'hitl',
+    });
+}
+export function logAttachmentInputAnalysisSkippedByPolicy(params) {
+    appendEvent({
+        event_type: 'attachment_input_analysis_skipped_by_policy',
+        session_id: params.sessionId,
+        display_path: params.displayPath,
+        content_hash: params.contentHash,
+        content_size_bytes: params.contentSizeBytes,
+        content_chars: params.contentChars,
+        reason: 'prompt_attachment_analysis_off',
+        enforcement_taken: 'none',
+    });
+}
+export function logPromptTextInputAnalyzed(params) {
+    appendEvent({
+        event_type: 'prompt_text_input_analyzed',
+        session_id: params.sessionId,
+        prompt_hash: params.promptHash,
+        prompt_size_bytes: params.promptSizeBytes,
+        prompt_chars: params.promptChars,
+        resource_id: params.resourceId,
+        decision_id: params.decisionId ?? null,
+        vge_decision: params.vgeDecision,
+        vge_score: params.vgeScore,
+        vge_categories: params.vgeCategories ?? [],
+        branches: params.branches,
+        enforcement_taken: params.enforcementTaken,
+    });
+}
+export function logPromptTextInputScanFailedToHitl(params) {
+    appendEvent({
+        event_type: 'prompt_text_input_scan_failed_to_hitl',
+        session_id: params.sessionId,
+        prompt_hash: params.promptHash,
+        prompt_size_bytes: params.promptSizeBytes,
+        prompt_chars: params.promptChars,
+        resource_id: params.resourceId,
+        decision_id: params.decisionId ?? null,
+        reason: params.reason,
+        enforcement_taken: 'hitl',
+    });
+}
+export function logPromptTextInputScanFailedOpen(params) {
+    appendEvent({
+        event_type: 'prompt_text_input_scan_failed_open',
+        session_id: params.sessionId,
+        prompt_hash: params.promptHash,
+        prompt_size_bytes: params.promptSizeBytes,
+        prompt_chars: params.promptChars,
+        resource_id: params.resourceId,
+        reason: params.reason,
+        ...(params.failureReason ? { failure_reason: params.failureReason } : {}),
+        ...(typeof params.httpStatus === 'number' ? { http_status: params.httpStatus } : {}),
+        ...(typeof params.elapsedMs === 'number' ? { elapsed_ms: params.elapsedMs } : {}),
+        ...(params.localRequestId ? { local_request_id: params.localRequestId } : {}),
+        ...(typeof params.attempt === 'number' ? { attempt: params.attempt } : {}),
+        ...(typeof params.retryAfterMs === 'number' ? { retry_after_ms: params.retryAfterMs } : {}),
+        enforcement_taken: 'ide_compat_allow',
+    });
+}
+export function logPromptTextInputAnalysisSkippedByPolicy(params) {
+    appendEvent({
+        event_type: 'prompt_text_input_analysis_skipped_by_policy',
+        session_id: params.sessionId,
+        prompt_hash: params.promptHash,
+        prompt_size_bytes: params.promptSizeBytes,
+        prompt_chars: params.promptChars,
+        resource_id: params.resourceId,
+        reason: 'prompt_text_analysis_off',
+        enforcement_taken: 'none',
+    });
+}
+export function logAttachmentAllowOnceConsumed(params) {
+    appendEvent({
+        event_type: 'attachment_allow_once_consumed',
+        session_id: params.sessionId,
+        resource_id: params.resourceId,
+        content_hash: params.contentHash,
+        one_shot_consumed: true,
+    });
+}
+export function logAttachmentReferenceWithoutTranscriptRecord(params) {
+    appendEvent({
+        event_type: 'attachment_reference_without_transcript_record',
+        session_id: params.sessionId,
+        prompt_hash: params.promptHash,
+        prompt_size_bytes: params.promptSizeBytes,
+        transcript_path_hash: params.transcriptPathHash,
+        cursor_offset: params.cursorOffset,
+        next_offset: params.nextOffset,
+    });
+}
+//# sourceMappingURL=audit-userprompt.js.map

package/dist/daemon/audit-userprompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-userprompt.js","sourceRoot":"","sources":["../../src/daemon/audit-userprompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,MAAM,UAAU,qBAAqB,CAAC,MAMrC;IACC,WAAW,CAAC;QACV,UAAU,EAAE,qBAAqB;QACjC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,iBAAiB,EAAE,MAAM,CAAC,eAAe;QACzC,kBAAkB,EAAE,MAAM,CAAC,iBAAiB;QAC5C,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;QACxC,iBAAiB,EAAE,gBAAgB;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAW1C;IACC,WAAW,CAAC;QACV,UAAU,EAAE,2BAA2B;QACvC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB;QAC3C,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,cAAc,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;QAC1C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,iBAAiB,EAAE,MAAM,CAAC,gBAAgB;KAC3C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,MAWlD;IACC,WAAW,CAAC;QACV,UAAU,EAAE,sCAAsC;QAClD,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB;QAC3C,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,iBAAiB,EAAE,MAAM;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,MAiBhD;IACC,WAAW,CAAC;QACV,UAAU,EAAE,mCAAmC;QAC/C,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB;QAC3C,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,iBAAiB,EAAE,kBAAkB;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sCAAsC,CAAC,MAOtD;IACC,WAAW,CAAC;QACV,UAAU,EAAE,yCAAyC;QACrD,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB;QAC3C,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,MAAM,EAAE,mCAAmC;QAC3C,iBAAiB,EAAE,MAAM;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yCAAyC,CAAC,MAMzD;IACC,WAAW,CAAC;QACV,UAAU,EAAE,6CAA6C;QACzD,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB;QAC3C,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,MAAM,EAAE,gCAAgC;QACxC,iBAAiB,EAAE,MAAM;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAY1C;IACC,WAAW,CAAC;QACV,UAAU,EAAE,4BAA4B;QACxC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,iBAAiB,EAAE,MAAM,CAAC,eAAe;QACzC,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;QACtC,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,cAAc,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;QAC1C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,iBAAiB,EAAE,MAAM,CAAC,gBAAgB;KAC3C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,MAYlD;IACC,WAAW,CAAC;QACV,UAAU,EAAE,uCAAuC;QACnD,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,iBAAiB,EAAE,MAAM,CAAC,eAAe;QACzC,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;QACtC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,iBAAiB,EAAE,MAAM;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,MAiBhD;IACC,WAAW,CAAC;QACV,UAAU,EAAE,oCAAoC;QAChD,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,iBAAiB,EAAE,MAAM,CAAC,eAAe;QACzC,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,iBAAiB,EAAE,kBAAkB;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yCAAyC,CAAC,MAMzD;IACC,WAAW,CAAC;QACV,UAAU,EAAE,8CAA8C;QAC1D,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,iBAAiB,EAAE,MAAM,CAAC,eAAe;QACzC,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,MAAM,EAAE,0BAA0B;QAClC,iBAAiB,EAAE,MAAM;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,MAI9C;IACC,WAAW,CAAC;QACV,UAAU,EAAE,gCAAgC;QAC5C,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,iBAAiB,EAAE,IAAI;KACxB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6CAA6C,CAAC,MAO7D;IACC,WAAW,CAAC;QACV,UAAU,EAAE,gDAAgD;QAC5D,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,iBAAiB,EAAE,MAAM,CAAC,eAAe;QACzC,oBAAoB,EAAE,MAAM,CAAC,kBAAkB;QAC/C,aAAa,EAAE,MAAM,CAAC,YAAY;QAClC,WAAW,EAAE,MAAM,CAAC,UAAU;KAC/B,CAAC,CAAC;AACL,CAAC"}

package/dist/daemon/blocking-decision-triggers.d.ts

@@ -0,0 +1,5 @@
+import type { GuardResponseSubset } from '../shared/types.js';
+export declare function isVgeAnalysisUnavailable(vgeResult: GuardResponseSubset): boolean;
+export declare function isExplicitVgeBlock(vgeResult: GuardResponseSubset): boolean;
+export declare function describeVgeBlockReason(vgeResult: GuardResponseSubset): string;
+//# sourceMappingURL=blocking-decision-triggers.d.ts.map

package/dist/daemon/blocking-decision-triggers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocking-decision-triggers.d.ts","sourceRoot":"","sources":["../../src/daemon/blocking-decision-triggers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAmB9D,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAOhF;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAO1E;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,mBAAmB,GAAG,MAAM,CAa7E"}

package/dist/daemon/blocking-decision-triggers.js

@@ -0,0 +1,40 @@
+function hasTimeoutOnlyCategories(vgeResult) {
+    const categories = vgeResult.categories ?? [];
+    return categories.length > 0 && categories.every((category) => (category === 'TIMEOUT' ||
+        category === 'API_TIMEOUT'));
+}
+function hasUnavailableDecisionFlag(vgeResult) {
+    return vgeResult.decisionFlags?.some((flag) => (flag === 'API_TIMEOUT' ||
+        flag.endsWith('_DEGRADED') ||
+        flag.includes('FAILOPEN') ||
+        flag.includes('TIMEOUT'))) ?? false;
+}
+export function isVgeAnalysisUnavailable(vgeResult) {
+    if (vgeResult.ruleAction === 'BLOCK' || vgeResult.arbiterSignal === 'BLOCK')
+        return false;
+    return (vgeResult.failOpen === true ||
+        hasUnavailableDecisionFlag(vgeResult) ||
+        hasTimeoutOnlyCategories(vgeResult));
+}
+export function isExplicitVgeBlock(vgeResult) {
+    if (isVgeAnalysisUnavailable(vgeResult))
+        return false;
+    return (vgeResult.ruleAction === 'BLOCK' ||
+        vgeResult.decision === 'BLOCKED' ||
+        vgeResult.arbiterSignal === 'BLOCK');
+}
+export function describeVgeBlockReason(vgeResult) {
+    if (vgeResult.localFallbackReason)
+        return vgeResult.localFallbackReason;
+    const parts = [
+        vgeResult.blockMessage?.trim(),
+        vgeResult.ruleAction === 'BLOCK' ? 'ruleAction=BLOCK' : null,
+        vgeResult.decision === 'BLOCKED' ? 'decision=BLOCKED' : null,
+        vgeResult.arbiterSignal === 'BLOCK' ? 'arbiterSignal=BLOCK' : null,
+        `score=${vgeResult.score}`,
+    ].filter((part) => Boolean(part));
+    return parts.length > 0
+        ? parts.join(' | ')
+        : 'VGE returned an explicit block signal.';
+}
+//# sourceMappingURL=blocking-decision-triggers.js.map

package/dist/daemon/blocking-decision-triggers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocking-decision-triggers.js","sourceRoot":"","sources":["../../src/daemon/blocking-decision-triggers.ts"],"names":[],"mappings":"AAEA,SAAS,wBAAwB,CAAC,SAA8B;IAC9D,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,IAAI,EAAE,CAAC;IAC9C,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAC7D,QAAQ,KAAK,SAAS;QACtB,QAAQ,KAAK,aAAa,CAC3B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAAC,SAA8B;IAChE,OAAO,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAC7C,IAAI,KAAK,aAAa;QACtB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CACzB,CAAC,IAAI,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,SAA8B;IACrE,IAAI,SAAS,CAAC,UAAU,KAAK,OAAO,IAAI,SAAS,CAAC,aAAa,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC1F,OAAO,CACL,SAAS,CAAC,QAAQ,KAAK,IAAI;QAC3B,0BAA0B,CAAC,SAAS,CAAC;QACrC,wBAAwB,CAAC,SAAS,CAAC,CACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAA8B;IAC/D,IAAI,wBAAwB,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,CACL,SAAS,CAAC,UAAU,KAAK,OAAO;QAChC,SAAS,CAAC,QAAQ,KAAK,SAAS;QAChC,SAAS,CAAC,aAAa,KAAK,OAAO,CACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAA8B;IACnE,IAAI,SAAS,CAAC,mBAAmB;QAAE,OAAO,SAAS,CAAC,mBAAmB,CAAC;IACxE,MAAM,KAAK,GAAG;QACZ,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE;QAC9B,SAAS,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI;QAC5D,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI;QAC5D,SAAS,CAAC,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI;QAClE,SAAS,SAAS,CAAC,KAAK,EAAE;KAC3B,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAElD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC;QACrB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QACnB,CAAC,CAAC,wCAAwC,CAAC;AAC/C,CAAC"}

package/dist/daemon/cc-contract-auto-probe.d.ts

@@ -0,0 +1,40 @@
+import { type CcContractHealth, type CcContractStatus } from './cc-contract-status.js';
+import { type CcContractProbeResult } from './cc-contract-probe.js';
+export interface CcContractAutoProbeConfig {
+    autoProbeEnabled: boolean;
+    timeoutMs: number;
+    delayMs?: number;
+}
+export interface CcContractAutoProbePolicy {
+    auto_probe_enabled: boolean;
+    auto_probe_timeout_ms: number;
+}
+interface CcContractAutoProbeRunRequest {
+    binaryPath: string;
+    timeoutMs: number;
+}
+type ProbeScheduleToken = ReturnType<typeof setTimeout>;
+type ProbeSchedule = (work: () => void, delayMs: number) => ProbeScheduleToken | number;
+type ProbeCancel = (token: ProbeScheduleToken | number) => void;
+export interface CcContractAutoProbeOptions {
+    readHealth?: () => CcContractHealth;
+    runProbe?: (request: CcContractAutoProbeRunRequest) => Promise<CcContractProbeResult>;
+    writeStatus?: (status: CcContractStatus) => void;
+    observeRuntime?: () => CcContractHealth;
+    now?: () => Date;
+    schedule?: ProbeSchedule;
+    cancelSchedule?: ProbeCancel;
+}
+export declare function createCcContractAutoProbe(opts?: CcContractAutoProbeOptions): {
+    maybeSchedule: (config: CcContractAutoProbeConfig) => boolean;
+    waitForIdle: () => Promise<void>;
+    dispose: () => void;
+};
+export declare const ccContractAutoProbe: {
+    maybeSchedule: (config: CcContractAutoProbeConfig) => boolean;
+    waitForIdle: () => Promise<void>;
+    dispose: () => void;
+};
+export declare function maybeScheduleCcContractAutoProbe(policy: CcContractAutoProbePolicy): boolean;
+export {};
+//# sourceMappingURL=cc-contract-auto-probe.d.ts.map

package/dist/daemon/cc-contract-auto-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cc-contract-auto-probe.d.ts","sourceRoot":"","sources":["../../src/daemon/cc-contract-auto-probe.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,wBAAwB,CAAC;AAGhC,MAAM,WAAW,yBAAyB;IACxC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,UAAU,6BAA6B;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,KAAK,kBAAkB,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;AACxD,KAAK,aAAa,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,KAAK,kBAAkB,GAAG,MAAM,CAAC;AACxF,KAAK,WAAW,GAAG,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,KAAK,IAAI,CAAC;AAEhE,MAAM,WAAW,0BAA0B;IACzC,UAAU,CAAC,EAAE,MAAM,gBAAgB,CAAC;IACpC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,6BAA6B,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACtF,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAC;IACjD,cAAc,CAAC,EAAE,MAAM,gBAAgB,CAAC;IACxC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,cAAc,CAAC,EAAE,WAAW,CAAC;CAC9B;AAoDD,wBAAgB,yBAAyB,CAAC,IAAI,GAAE,0BAA+B,GAAG;IAChF,aAAa,EAAE,CAAC,MAAM,EAAE,yBAAyB,KAAK,OAAO,CAAC;IAC9D,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB,CAwDA;AAED,eAAO,MAAM,mBAAmB;mBA7Df,CAAC,MAAM,EAAE,yBAAyB,KAAK,OAAO;iBAChD,MAAM,OAAO,CAAC,IAAI,CAAC;aACvB,MAAM,IAAI;CA2DyC,CAAC;AAE/D,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAO3F"}

package/dist/daemon/cc-contract-auto-probe.js

@@ -0,0 +1,101 @@
+import { getCcContractHealth, writeCcContractStatus, } from './cc-contract-status.js';
+import { prepareClaudeCodeContractProbe, runCcContractProbe, } from './cc-contract-probe.js';
+import { ccContractRuntimeMonitor } from './cc-contract-runtime.js';
+function defaultSchedule(work, delayMs) {
+    const timer = setTimeout(work, delayMs);
+    timer.unref();
+    return timer;
+}
+function defaultRunProbe(request) {
+    return runCcContractProbe({
+        binaryPath: request.binaryPath,
+        timeoutMs: request.timeoutMs,
+        prepareCwd: prepareClaudeCodeContractProbe,
+    });
+}
+function hasProbeIdentity(health) {
+    return Boolean(health.claudeVersion && health.binaryPath && health.binarySha256);
+}
+function passedStatus(health, checkedAt) {
+    return {
+        status: 'healthy',
+        claudeVersion: health.claudeVersion,
+        checkedAt,
+        binaryPath: health.binaryPath,
+        binarySha256: health.binarySha256,
+        liveContract: 'passed',
+        reason: 'live contract probe passed',
+    };
+}
+function failedStatus(health, result, checkedAt) {
+    return {
+        status: result.reason === 'binary_missing' ? 'failed' : 'degraded',
+        claudeVersion: health.claudeVersion ?? 'unknown',
+        checkedAt,
+        binaryPath: health.binaryPath,
+        binarySha256: health.binarySha256,
+        liveContract: 'failed',
+        reason: `live contract probe failed: ${result.reason}`,
+    };
+}
+export function createCcContractAutoProbe(opts = {}) {
+    const readHealth = opts.readHealth ?? getCcContractHealth;
+    const runProbe = opts.runProbe ?? defaultRunProbe;
+    const writeStatus = opts.writeStatus ?? writeCcContractStatus;
+    const observeRuntime = opts.observeRuntime ?? (() => ccContractRuntimeMonitor.observe());
+    const now = opts.now ?? (() => new Date());
+    const schedule = opts.schedule ?? defaultSchedule;
+    const cancelSchedule = opts.cancelSchedule ?? ((token) => clearTimeout(token));
+    let scheduled = false;
+    let scheduleToken = null;
+    let inFlight = null;
+    function startProbe(health, timeoutMs) {
+        inFlight = runProbe({ binaryPath: health.binaryPath, timeoutMs })
+            .then((result) => {
+            const checkedAt = now().toISOString();
+            if (result.ok)
+                writeStatus(passedStatus(health, checkedAt));
+            else
+                writeStatus(failedStatus(health, result, checkedAt));
+            observeRuntime();
+        })
+            .finally(() => {
+            inFlight = null;
+        });
+    }
+    return {
+        maybeSchedule(config) {
+            if (!config.autoProbeEnabled || scheduled || inFlight)
+                return false;
+            const health = readHealth();
+            if (health.l0RedactionAvailable || !hasProbeIdentity(health))
+                return false;
+            scheduled = true;
+            const delayMs = config.delayMs ?? 0;
+            scheduleToken = schedule(() => {
+                scheduled = false;
+                scheduleToken = null;
+                startProbe(health, config.timeoutMs);
+            }, delayMs);
+            return true;
+        },
+        waitForIdle() {
+            return inFlight ?? Promise.resolve();
+        },
+        dispose() {
+            if (scheduled && scheduleToken !== null)
+                cancelSchedule(scheduleToken);
+            scheduled = false;
+            scheduleToken = null;
+        },
+    };
+}
+export const ccContractAutoProbe = createCcContractAutoProbe();
+export function maybeScheduleCcContractAutoProbe(policy) {
+    return ccContractAutoProbe.maybeSchedule({
+        autoProbeEnabled: policy.auto_probe_enabled &&
+            process.env['VGE_CC_GUARD_AUTO_PROBE_DISABLED'] !== '1',
+        timeoutMs: policy.auto_probe_timeout_ms,
+    });
+}
+//# sourceMappingURL=cc-contract-auto-probe.js.map

package/dist/daemon/cc-contract-auto-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cc-contract-auto-probe.js","sourceRoot":"","sources":["../../src/daemon/cc-contract-auto-probe.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GAGtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,GAEnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAgCpE,SAAS,eAAe,CAAC,IAAgB,EAAE,OAAe;IACxD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,OAAsC;IAC7D,OAAO,kBAAkB,CAAC;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,8BAA8B;KAC3C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAwB;IAKhD,OAAO,OAAO,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,YAAY,CAAC,MAIrB,EAAE,SAAiB;IAClB,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,SAAS;QACT,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,YAAY,EAAE,QAAQ;QACtB,MAAM,EAAE,4BAA4B;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,MAAwB,EAAE,MAAoD,EAAE,SAAiB;IACrH,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;QAClE,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,SAAS;QAChD,SAAS;QACT,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,YAAY,EAAE,QAAQ;QACtB,MAAM,EAAE,+BAA+B,MAAM,CAAC,MAAM,EAAE;KACvD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAmC,EAAE;IAK7E,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC;IAClD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,qBAAqB,CAAC;IAC9D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC;IAClD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAA2B,CAAC,CAAC,CAAC;IAErG,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,aAAa,GAAuC,IAAI,CAAC;IAC7D,IAAI,QAAQ,GAAyB,IAAI,CAAC;IAE1C,SAAS,UAAU,CAAC,MAInB,EAAE,SAAiB;QAClB,QAAQ,GAAG,QAAQ,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC;aAC9D,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,MAAM,CAAC,EAAE;gBAAE,WAAW,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;;gBACvD,WAAW,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;YAC1D,cAAc,EAAE,CAAC;QACnB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO;QACL,aAAa,CAAC,MAAM;YAClB,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,SAAS,IAAI,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACpE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,IAAI,MAAM,CAAC,oBAAoB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC;YAE3E,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;YACpC,aAAa,GAAG,QAAQ,CAAC,GAAG,EAAE;gBAC5B,SAAS,GAAG,KAAK,CAAC;gBAClB,aAAa,GAAG,IAAI,CAAC;gBACrB,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACvC,CAAC,EAAE,OAAO,CAAC,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,WAAW;YACT,OAAO,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACvC,CAAC;QAED,OAAO;YACL,IAAI,SAAS,IAAI,aAAa,KAAK,IAAI;gBAAE,cAAc,CAAC,aAAa,CAAC,CAAC;YACvE,SAAS,GAAG,KAAK,CAAC;YAClB,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,EAAE,CAAC;AAE/D,MAAM,UAAU,gCAAgC,CAAC,MAAiC;IAChF,OAAO,mBAAmB,CAAC,aAAa,CAAC;QACvC,gBAAgB,EACd,MAAM,CAAC,kBAAkB;YACzB,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,KAAK,GAAG;QACzD,SAAS,EAAE,MAAM,CAAC,qBAAqB;KACxC,CAAC,CAAC;AACL,CAAC"}

package/dist/daemon/cc-contract-probe.d.ts

@@ -0,0 +1,46 @@
+export declare const CC_CONTRACT_PROBE_UPDATED_MARKER = "VGE_CC_GUARD_UPDATED_TOOL_OUTPUT_OK";
+export interface CcContractProbeEvidence {
+    binaryPath: string;
+    marker: string;
+    checkedAt: string;
+}
+export type CcContractProbeFailureReason = 'timeout' | 'binary_missing' | 'exit_nonzero' | 'shape_mismatch' | 'io_error';
+export type CcContractProbeResult = {
+    ok: true;
+    evidence: CcContractProbeEvidence;
+} | {
+    ok: false;
+    reason: CcContractProbeFailureReason;
+    exitCode?: number;
+    stderrPreview?: string;
+};
+export interface CcContractProbeProcessRequest {
+    binaryPath: string;
+    args: string[];
+    cwd: string;
+    timeoutMs: number;
+}
+export interface CcContractProbeProcessResult {
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+    timedOut?: boolean;
+}
+export type CcContractProbeProcessRunner = (request: CcContractProbeProcessRequest) => Promise<CcContractProbeProcessResult>;
+export interface CcContractProbePlan {
+    args: string[];
+    expectedMarker: string;
+}
+export interface CcContractProbeOptions {
+    binaryPath: string | null;
+    args?: string[];
+    expectedMarker?: string;
+    makeTempDir?: () => string;
+    prepareCwd?: (cwd: string) => CcContractProbePlan;
+    runProcess?: CcContractProbeProcessRunner;
+    timeoutMs: number;
+}
+export declare function execFileProbeRunner(request: CcContractProbeProcessRequest): Promise<CcContractProbeProcessResult>;
+export declare function prepareClaudeCodeContractProbe(cwd: string): CcContractProbePlan;
+export declare function runCcContractProbe(opts: CcContractProbeOptions): Promise<CcContractProbeResult>;
+//# sourceMappingURL=cc-contract-probe.d.ts.map

package/dist/daemon/cc-contract-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cc-contract-probe.d.ts","sourceRoot":"","sources":["../../src/daemon/cc-contract-probe.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,gCAAgC,wCAAwC,CAAC;AAGtF,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,4BAA4B,GACpC,SAAS,GACT,gBAAgB,GAChB,cAAc,GACd,gBAAgB,GAChB,UAAU,CAAC;AAEf,MAAM,MAAM,qBAAqB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,uBAAuB,CAAA;CAAE,GAC/C;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,4BAA4B,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEN,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,4BAA4B,GACtC,CAAC,OAAO,EAAE,6BAA6B,KAAK,OAAO,CAAC,4BAA4B,CAAC,CAAC;AAEpF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB;AAQD,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,mBAAmB,CAAC;IAClD,UAAU,CAAC,EAAE,4BAA4B,CAAC;IAC1C,SAAS,EAAE,MAAM,CAAC;CACnB;AAgBD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAkBjH;AAED,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,CAmD/E;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA+CrG"}