@vigil-guard/vge-cc-guard 0.9.0-beta.2 → 0.9.0-beta.4

package/README.md

@@ -5,7 +5,7 @@ Code hooks, gates tool calls before execution, sends configured prompt and tool
 content to Vigil Guard Enterprise (VGE), manages user decisions for blocked
 content, and writes a private local audit trail.
 
-Current package version: `0.9.0-beta.2`.
+Current package version: `0.9.0-beta.4`.
 
 ## Current State
 
@@ -17,6 +17,9 @@ Current package version: `0.9.0-beta.2`.
 - `PostToolUse` supports explicit VGE block HITL/quarantine, research-safe
   `SOFT_TAINT` framing for `WebSearch` and `WebFetch`, and fail-open overload
   backpressure for research-tool scans.
+- Parent `Agent` results receive a structured notice when a child subagent had
+  one or more quarantined tool outputs, so Claude can treat the subagent answer
+  as potentially incomplete without seeing the blocked content.
 
 ## What It Protects
 
@@ -66,7 +69,7 @@ macOS/Linux and ACL tightening on Windows.
 | `SessionStart` | Initializes local session state. |
 | `UserPromptSubmit` | Audits prompt receipt, resolves active control replies, scans prompt text and attachments, and blocks or asks before unsafe input reaches Claude. |
 | `PreToolUse` | Applies credential path protection, URL deny-list rules, session decisions, tainted-session policy, and per-tool gates. |
-| `PostToolUse` | Scans configured tool output, frames `SOFT_TAINT`, quarantines explicit VGE blocks, and handles fail-open scan failures. |
+| `PostToolUse` | Scans configured tool output, frames `SOFT_TAINT`, quarantines explicit VGE blocks, injects parent-visible subagent quarantine notices, and handles fail-open scan failures. |
 | `SessionEnd` | Flushes state and clears active in-memory decisions for the session. |
 | `SubagentStart` / `SubagentStop` | Tracks subagent ownership for owner-scoped decisions and continuation prompts. |
 
@@ -301,6 +304,12 @@ VGE round-trip.
 covered through owner metadata on the underlying tool hooks when
 `policy.subagent_output_analysis` is `enforce`.
 
+When a subagent output is quarantined, the parent `Agent` result can include a
+`[VGE_SUBAGENT_QUARANTINE_NOTICE]` block. The notice contains safe metadata such
+as session, agent ID, decision ID, tool, resource label, reason code, and
+resolution status. It does not include raw blocked tool output, VGE scores,
+classifier categories, or branch scores.
+
 ## Credential And URL Protection
 
 Credential path protection blocks sensitive local paths before content is read
@@ -369,6 +378,11 @@ outcome, resolver source, synthesized source, latency, and VGE or local
 fallback metadata. Raw prompt text, raw tool output, full URLs with query
 strings, and API keys are not written to audit.
 
+Subagent quarantine visibility adds audit events for ledger writes, notice
+injection/degradation/skips, ledger recovery, invalid ledger lines, and missing
+Agent-call correlation. These events are metadata-only and use the same private
+audit log.
+
 The daemon also exposes an authenticated local metrics snapshot:
 
 ```text

package/dist/commands/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AASA,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAuC7D"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAWA,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA0C7D"}

package/dist/commands/doctor.js

@@ -1,6 +1,8 @@
 import { ccContractNextAction, createCcContractStatus, getCcContractHealth, writeCcContractStatus, } from '../daemon/cc-contract-status.js';
 import { checkVgeConnectivity } from '../daemon/vge-connectivity.js';
 import { readConfigOrDefault } from '../shared/config-io.js';
+import { installSystemCAs } from '../shared/system-ca.js';
+import { readDaemonStatus } from '../tui/lib/daemon-client.js';
 export async function runDoctor(args) {
     if (!args.includes('--cc-contract')) {
         const skipVge = args.includes('--no-vge');
@@ -14,6 +16,7 @@ export async function runDoctor(args) {
         console.log(`Checked at: ${health.checkedAt ?? 'never'}`);
         if (skipVge) {
             console.log('VGE connectivity: skipped (--no-vge)');
+            await printSystemCaDiagnostics();
             return;
         }
         const vgeHealth = await checkVgeConnectivity(readConfigOrDefault());
@@ -23,8 +26,11 @@ export async function runDoctor(args) {
         console.log(`VGE output key: ${vgeHealth.outputKey}`);
         if (!vgeHealth.ok) {
             console.log(`VGE reason: ${vgeHealth.failureReason ?? 'unknown'}`);
+            if (vgeHealth.detail)
+                console.log(`VGE detail: ${vgeHealth.detail}`);
             console.log(`VGE next action: ${vgeNextAction(vgeHealth.failureReason)}`);
         }
+        await printSystemCaDiagnostics();
         return;
     }
     const assumeLivePassed = args.includes('--assume-live-pass');
@@ -46,8 +52,30 @@ function vgeNextAction(reason) {
         return 'Verify the input and output key roles for the configured VGE endpoint.';
     }
     if (reason === 'tls_error') {
-        return 'Verify system CA trust for the daemon process and restart the daemon.';
+        return 'Add the VGE root CA to your OS keychain or NODE_EXTRA_CA_CERTS, then run `vge-cc-guard daemon reload`.';
     }
     return 'Check daemon Runtime VGE status and verify endpoint, CA trust, and key role configuration.';
 }
+async function printSystemCaDiagnostics() {
+    const localSnapshot = installSystemCAs();
+    console.log(`System CA store: ${localSnapshot.runtimeSupported ? 'supported' : 'unsupported'}`);
+    console.log(`System CAs loaded: ${localSnapshot.systemCount}`);
+    console.log(`Extra CAs loaded: ${localSnapshot.extraCount}`);
+    const daemonStatus = await readDaemonStatus();
+    if (!daemonStatus.ok || !daemonStatus.caSnapshot) {
+        console.log('Daemon CA snapshot: unavailable');
+        console.log('CA drift: unknown');
+        return;
+    }
+    console.log(`Daemon CA snapshot: ${formatDaemonCaSnapshot(daemonStatus.caSnapshot)}`);
+    console.log(`CA drift: ${hasCaDrift(localSnapshot, daemonStatus.caSnapshot) ? 'yes' : 'no'}`);
+}
+function formatDaemonCaSnapshot(snapshot) {
+    return `systemCount=${snapshot.systemCount} extraCount=${snapshot.extraCount} checkedAt=${snapshot.checkedAt}`;
+}
+function hasCaDrift(localSnapshot, daemonSnapshot) {
+    return localSnapshot.systemCount !== daemonSnapshot.systemCount ||
+        localSnapshot.extraCount !== daemonSnapshot.extraCount ||
+        localSnapshot.runtimeSupported !== daemonSnapshot.runtimeSupported;
+}
 //# sourceMappingURL=doctor.js.map

package/dist/commands/doctor.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAc;IAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,0BAA0B,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,gBAAgB,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,aAAa,IAAI,SAAS,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,YAAY,IAAI,SAAS,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,SAAS,IAAI,OAAO,EAAE,CAAC,CAAC;QAC1D,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,mBAAmB,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,qBAAqB,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,gBAAgB,SAAS,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,kBAAkB,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,mBAAmB,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,eAAe,SAAS,CAAC,aAAa,IAAI,SAAS,EAAE,CAAC,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,oBAAoB,aAAa,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAC7D,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CACV,oKAAoK,CACrK,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,gCAAgC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,YAAY,IAAI,SAAS,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,MAA0B;IAC/C,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,OAAO,wEAAwE,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,OAAO,wEAAwE,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,OAAO,uEAAuE,CAAC;IACjF,CAAC;IACD,OAAO,4FAA4F,CAAC;AACtG,CAAC"}
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAyB,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAyB,MAAM,6BAA6B,CAAC;AAEtF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAc;IAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,0BAA0B,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,gBAAgB,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,aAAa,IAAI,SAAS,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,YAAY,IAAI,SAAS,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,SAAS,IAAI,OAAO,EAAE,CAAC,CAAC;QAC1D,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpD,MAAM,wBAAwB,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,mBAAmB,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,qBAAqB,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,gBAAgB,SAAS,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,kBAAkB,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,mBAAmB,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,eAAe,SAAS,CAAC,aAAa,IAAI,SAAS,EAAE,CAAC,CAAC;YACnE,IAAI,SAAS,CAAC,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,eAAe,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,oBAAoB,aAAa,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,wBAAwB,EAAE,CAAC;QACjC,OAAO;IACT,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAC7D,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CACV,oKAAoK,CACrK,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,gCAAgC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,YAAY,IAAI,SAAS,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,MAA0B;IAC/C,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,OAAO,wEAAwE,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,OAAO,wEAAwE,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,OAAO,wGAAwG,CAAC;IAClH,CAAC;IACD,OAAO,4FAA4F,CAAC;AACtG,CAAC;AAED,KAAK,UAAU,wBAAwB;IACrC,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,oBAAoB,aAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,CAAC,sBAAsB,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,qBAAqB,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC;IAE7D,MAAM,YAAY,GAAG,MAAM,gBAAgB,EAAE,CAAC;IAC9C,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,sBAAsB,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,aAAa,UAAU,CAAC,aAAa,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,sBAAsB,CAAC,QAA0B;IACxD,OAAO,eAAe,QAAQ,CAAC,WAAW,eAAe,QAAQ,CAAC,UAAU,cAAc,QAAQ,CAAC,SAAS,EAAE,CAAC;AACjH,CAAC;AAED,SAAS,UAAU,CAAC,aAA+B,EAAE,cAAgC;IACnF,OAAO,aAAa,CAAC,WAAW,KAAK,cAAc,CAAC,WAAW;QAC7D,aAAa,CAAC,UAAU,KAAK,cAAc,CAAC,UAAU;QACtD,aAAa,CAAC,gBAAgB,KAAK,cAAc,CAAC,gBAAgB,CAAC;AACvE,CAAC"}

package/dist/daemon/active-conversation-decisions.d.ts

@@ -1,7 +1,7 @@
 import type { BlockingDecision } from '../shared/types.js';
 export interface ActiveConversationDecision {
     decision: BlockingDecision;
-    source: 'pretool' | 'posttool' | 'attachment' | 'prompt';
+    source: 'posttool' | 'attachment' | 'prompt';
 }
 export declare function nextDecisionCreationSequence(): number;
 export declare function activeConversationDecisionsForSession(sessionId: string): ActiveConversationDecision[];

package/dist/daemon/active-conversation-decisions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"active-conversation-decisions.d.ts","sourceRoot":"","sources":["../../src/daemon/active-conversation-decisions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAQ3D,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,QAAQ,CAAC;CAC1D;AAID,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAmBD,wBAAgB,qCAAqC,CAAC,SAAS,EAAE,MAAM,GAAG,0BAA0B,EAAE,CAUrG;AAED,wBAAgB,8CAA8C,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CA0BxF"}
+{"version":3,"file":"active-conversation-decisions.d.ts","sourceRoot":"","sources":["../../src/daemon/active-conversation-decisions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAO3D,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,UAAU,GAAG,YAAY,GAAG,QAAQ,CAAC;CAC9C;AAID,wBAAgB,4BAA4B,IAAI,MAAM,CAErD;AAkBD,wBAAgB,qCAAqC,CAAC,SAAS,EAAE,MAAM,GAAG,0BAA0B,EAAE,CASrG;AAED,wBAAgB,8CAA8C,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CA0BxF"}

package/dist/daemon/active-conversation-decisions.js

@@ -1,7 +1,6 @@
 import { activeAttachmentEscrowDecisionsForSession } from './attachment-decision-escrow.js';
 import { decisionOwnerFromDecision, decisionOwnerLabel } from './decision-owner.js';
 import { activePostToolEscrowDecisionsForSession } from './posttool-decision-escrow.js';
-import { activePreToolEscrowDecisionsForSession } from './pretool-decision-escrow.js';
 import { sanitizeDecisionResourceLabel } from './conversation-decision-prompt.js';
 import { activeUserPromptEscrowDecisionsForSession } from './userprompt-decision-escrow.js';
 let decisionCreationSequence = 0;
@@ -20,8 +19,6 @@ function compareActiveDecision(left, right) {
     return a < b ? -1 : a > b ? 1 : 0;
 }
 function sourceLabel(source) {
-    if (source === 'pretool')
-        return 'PreTool';
     if (source === 'posttool')
         return 'PostTool';
     if (source === 'attachment')
@@ -30,7 +27,6 @@ function sourceLabel(source) {
 }
 export function activeConversationDecisionsForSession(sessionId) {
     return [
-        ...activePreToolEscrowDecisionsForSession(sessionId).map((decision) => ({ decision, source: 'pretool' })),
         ...activePostToolEscrowDecisionsForSession(sessionId).map((decision) => ({ decision, source: 'posttool' })),
         ...activeAttachmentEscrowDecisionsForSession(sessionId).map((decision) => ({ decision, source: 'attachment' })),
         ...activeUserPromptEscrowDecisionsForSession(sessionId, 'prompt_input').map((decision) => ({

package/dist/daemon/active-conversation-decisions.js.map

@@ -1 +1 @@
-{"version":3,"file":"active-conversation-decisions.js","sourceRoot":"","sources":["../../src/daemon/active-conversation-decisions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yCAAyC,EAAE,MAAM,iCAAiC,CAAC;AAC5F,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAAE,uCAAuC,EAAE,MAAM,+BAA+B,CAAC;AACxF,OAAO,EAAE,sCAAsC,EAAE,MAAM,8BAA8B,CAAC;AACtF,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,EAAE,yCAAyC,EAAE,MAAM,iCAAiC,CAAC;AAO5F,IAAI,wBAAwB,GAAG,CAAC,CAAC;AAEjC,MAAM,UAAU,4BAA4B;IAC1C,OAAO,EAAE,wBAAwB,CAAC;AACpC,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAgC,EAAE,KAAiC;IAChG,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;IAClE,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;IAC7F,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;IACnC,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,WAAW,CAAC,MAA4C;IAC/D,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC7C,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IACjD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,SAAiB;IACrE,OAAO;QACL,GAAG,sCAAsC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC,CAAC;QAClH,GAAG,uCAAuC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAmB,EAAE,CAAC,CAAC;QACpH,GAAG,yCAAyC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAqB,EAAE,CAAC,CAAC;QACxH,GAAG,yCAAyC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACzF,QAAQ;YACR,MAAM,EAAE,QAAiB;SAC1B,CAAC,CAAC;KACJ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,8CAA8C,CAAC,SAAiB;IAC9E,MAAM,MAAM,GAAG,qCAAqC,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,uEAAuE,CAAC;IACjF,CAAC;IAED,MAAM,KAAK,GAAG;QACZ,oDAAoD;QACpD,6DAA6D;QAC7D,EAAE;KACH,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,gBAAgB,QAAQ,CAAC,UAAU,EAAE,EACrC,UAAU,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EACrC,UAAU,kBAAkB,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,EAAE,EACnE,SAAS,QAAQ,CAAC,QAAQ,EAAE,EAC5B,aAAa,6BAA6B,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,EACpE,uBAAuB,QAAQ,CAAC,UAAU,gBAAgB,QAAQ,CAAC,UAAU,wBAAwB,QAAQ,CAAC,UAAU,EAAE,EAC1H,EAAE,CACH,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AACpC,CAAC"}
+{"version":3,"file":"active-conversation-decisions.js","sourceRoot":"","sources":["../../src/daemon/active-conversation-decisions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yCAAyC,EAAE,MAAM,iCAAiC,CAAC;AAC5F,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAAE,uCAAuC,EAAE,MAAM,+BAA+B,CAAC;AACxF,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,EAAE,yCAAyC,EAAE,MAAM,iCAAiC,CAAC;AAO5F,IAAI,wBAAwB,GAAG,CAAC,CAAC;AAEjC,MAAM,UAAU,4BAA4B;IAC1C,OAAO,EAAE,wBAAwB,CAAC;AACpC,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAgC,EAAE,KAAiC;IAChG,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;IAClE,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;IAC7F,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;IACnC,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,WAAW,CAAC,MAA4C;IAC/D,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAC7C,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IACjD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,SAAiB;IACrE,OAAO;QACL,GAAG,uCAAuC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAmB,EAAE,CAAC,CAAC;QACpH,GAAG,yCAAyC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAqB,EAAE,CAAC,CAAC;QACxH,GAAG,yCAAyC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACzF,QAAQ;YACR,MAAM,EAAE,QAAiB;SAC1B,CAAC,CAAC;KACJ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,8CAA8C,CAAC,SAAiB;IAC9E,MAAM,MAAM,GAAG,qCAAqC,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,uEAAuE,CAAC;IACjF,CAAC;IAED,MAAM,KAAK,GAAG;QACZ,oDAAoD;QACpD,6DAA6D;QAC7D,EAAE;KACH,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,gBAAgB,QAAQ,CAAC,UAAU,EAAE,EACrC,UAAU,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EACrC,UAAU,kBAAkB,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,EAAE,EACnE,SAAS,QAAQ,CAAC,QAAQ,EAAE,EAC5B,aAAa,6BAA6B,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,EACpE,uBAAuB,QAAQ,CAAC,UAAU,gBAAgB,QAAQ,CAAC,UAAU,wBAAwB,QAAQ,CAAC,UAAU,EAAE,EAC1H,EAAE,CACH,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AACpC,CAAC"}

package/dist/daemon/agent-call-correlation.d.ts

@@ -0,0 +1,19 @@
+import type { CCPostToolPayload, CCPreToolPayload, CCSubagentStartPayload } from '../shared/types.js';
+export interface AgentCallCorrelationRecord {
+    sessionId: string;
+    agentCallId: string;
+    toolUseId?: string;
+    agentId?: string;
+    agentType?: string;
+    createdAt: number;
+}
+export declare function recordAgentPreToolUse(payload: CCPreToolPayload): AgentCallCorrelationRecord | null;
+export declare function bindSubagentStartToAgentCall(payload: CCSubagentStartPayload): AgentCallCorrelationRecord | null;
+export declare function resolveAgentPostToolUse(payload: CCPostToolPayload): AgentCallCorrelationRecord | null;
+export declare function findAgentCallForSubagent(params: {
+    sessionId: string;
+    agentId: string;
+}): AgentCallCorrelationRecord | null;
+export declare function resetAgentCallCorrelationForTests(): void;
+export declare function clearAgentCallCorrelationForSession(sessionId: string): void;
+//# sourceMappingURL=agent-call-correlation.d.ts.map

package/dist/daemon/agent-call-correlation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-call-correlation.d.ts","sourceRoot":"","sources":["../../src/daemon/agent-call-correlation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEtG,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAUD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,gBAAgB,GAAG,0BAA0B,GAAG,IAAI,CAiBlG;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,sBAAsB,GAAG,0BAA0B,GAAG,IAAI,CAS/G;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,iBAAiB,GAAG,0BAA0B,GAAG,IAAI,CAerG;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,0BAA0B,GAAG,IAAI,CAIpC;AAED,wBAAgB,iCAAiC,IAAI,IAAI,CAGxD;AAED,wBAAgB,mCAAmC,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAM3E"}

package/dist/daemon/agent-call-correlation.js

@@ -0,0 +1,93 @@
+import crypto from 'crypto';
+const recordsBySession = new Map();
+const recordsByToolUseId = new Map();
+export function recordAgentPreToolUse(payload) {
+    if (payload.tool_name !== 'Agent')
+        return null;
+    const record = {
+        sessionId: payload.session_id,
+        agentCallId: `ac_${crypto.randomUUID()}`,
+        ...(payload.tool_use_id ? { toolUseId: payload.tool_use_id } : {}),
+        createdAt: Date.now(),
+        subagentBound: false,
+        postToolConsumed: false,
+    };
+    const sessionRecords = recordsBySession.get(payload.session_id) ?? [];
+    sessionRecords.push(record);
+    recordsBySession.set(payload.session_id, sessionRecords);
+    if (record.toolUseId)
+        recordsByToolUseId.set(toolUseKey(payload.session_id, record.toolUseId), record);
+    return publicRecord(record);
+}
+export function bindSubagentStartToAgentCall(payload) {
+    const record = (recordsBySession.get(payload.session_id) ?? [])
+        .find((candidate) => !candidate.subagentBound);
+    if (!record)
+        return null;
+    record.agentId = payload.agent_id;
+    if (payload.agent_type)
+        record.agentType = payload.agent_type;
+    record.subagentBound = true;
+    return publicRecord(record);
+}
+export function resolveAgentPostToolUse(payload) {
+    if (payload.tool_name !== 'Agent')
+        return null;
+    const byToolUseId = payload.tool_use_id
+        ? recordsByToolUseId.get(toolUseKey(payload.session_id, payload.tool_use_id))
+        : undefined;
+    const record = byToolUseId && !byToolUseId.postToolConsumed
+        ? byToolUseId
+        : oldestUnconsumedRecord(payload.session_id);
+    if (!record)
+        return null;
+    record.postToolConsumed = true;
+    const resolved = publicRecord(record);
+    removeRecord(record);
+    return resolved;
+}
+export function findAgentCallForSubagent(params) {
+    const record = (recordsBySession.get(params.sessionId) ?? [])
+        .find((candidate) => candidate.agentId === params.agentId);
+    return record ? publicRecord(record) : null;
+}
+export function resetAgentCallCorrelationForTests() {
+    recordsBySession.clear();
+    recordsByToolUseId.clear();
+}
+export function clearAgentCallCorrelationForSession(sessionId) {
+    const sessionRecords = recordsBySession.get(sessionId) ?? [];
+    for (const record of sessionRecords) {
+        if (record.toolUseId)
+            recordsByToolUseId.delete(toolUseKey(record.sessionId, record.toolUseId));
+    }
+    recordsBySession.delete(sessionId);
+}
+function oldestUnconsumedRecord(sessionId) {
+    return (recordsBySession.get(sessionId) ?? [])
+        .find((record) => !record.postToolConsumed) ?? null;
+}
+function toolUseKey(sessionId, toolUseId) {
+    return `${sessionId}\0${toolUseId}`;
+}
+function removeRecord(record) {
+    if (record.toolUseId)
+        recordsByToolUseId.delete(toolUseKey(record.sessionId, record.toolUseId));
+    const sessionRecords = recordsBySession.get(record.sessionId) ?? [];
+    const remainingRecords = sessionRecords.filter((candidate) => candidate !== record);
+    if (remainingRecords.length > 0)
+        recordsBySession.set(record.sessionId, remainingRecords);
+    else
+        recordsBySession.delete(record.sessionId);
+}
+function publicRecord(record) {
+    return {
+        sessionId: record.sessionId,
+        agentCallId: record.agentCallId,
+        ...(record.toolUseId ? { toolUseId: record.toolUseId } : {}),
+        ...(record.agentId ? { agentId: record.agentId } : {}),
+        ...(record.agentType ? { agentType: record.agentType } : {}),
+        createdAt: record.createdAt,
+    };
+}
+//# sourceMappingURL=agent-call-correlation.js.map

package/dist/daemon/agent-call-correlation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-call-correlation.js","sourceRoot":"","sources":["../../src/daemon/agent-call-correlation.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAiB5B,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA6B,CAAC;AAC9D,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA2B,CAAC;AAE9D,MAAM,UAAU,qBAAqB,CAAC,OAAyB;IAC7D,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAE/C,MAAM,MAAM,GAAoB;QAC9B,SAAS,EAAE,OAAO,CAAC,UAAU;QAC7B,WAAW,EAAE,MAAM,MAAM,CAAC,UAAU,EAAE,EAAE;QACxC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,aAAa,EAAE,KAAK;QACpB,gBAAgB,EAAE,KAAK;KACxB,CAAC;IAEF,MAAM,cAAc,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACtE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,SAAS;QAAE,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IACvG,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAA+B;IAC1E,MAAM,MAAM,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;SAC5D,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,OAAO,CAAC,UAAU;QAAE,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IAC9D,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAA0B;IAChE,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAE/C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW;QACrC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAC7E,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GAAG,WAAW,IAAI,CAAC,WAAW,CAAC,gBAAgB;QACzD,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACtC,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAGxC;IACC,MAAM,MAAM,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;SAC1D,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACzB,kBAAkB,CAAC,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,SAAiB;IACnE,MAAM,cAAc,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC7D,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,SAAS;YAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAClG,CAAC;IACD,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAiB;IAC/C,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;SAC3C,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC;AACxD,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,SAAiB;IACtD,OAAO,GAAG,SAAS,KAAK,SAAS,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,MAAuB;IAC3C,IAAI,MAAM,CAAC,SAAS;QAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhG,MAAM,cAAc,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACpE,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC;IACpF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAAE,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;;QACrF,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,MAAuB;IAC3C,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC"}

package/dist/daemon/ask-dialog.d.ts

@@ -1,23 +1,12 @@
-import type { SessionData, Escalation, EscalationDecision, RouterOutcome, SessionState, UrlBlockDecision } from '../shared/types.js';
+import type { SessionData, Escalation, EscalationDecision, RouterOutcome, SessionState } from '../shared/types.js';
 export declare function hasPending(session: SessionData): boolean;
 export declare function enqueue(session: SessionData, escalation: Escalation): RouterOutcome;
 export declare function formatDenyReason(escalation: Escalation, triggerExcerpt: string): string;
-export declare function formatUrlBlockDenyReason(escalation: Escalation): string;
 interface StateStore {
     transitionState: (sessionId: string, state: SessionState) => void;
     addToAllowlist: (sessionId: string, key: string, escalationId?: string) => void;
     addToBlocklist: (sessionId: string, key: string, escalationId?: string) => void;
 }
 export declare function applyDecision(session: SessionData, decision: EscalationDecision, stateStore: StateStore, escalationId?: string): Escalation | undefined;
-interface UrlBlockStateStore {
-    addUrlAllowOnce: (sessionId: string, key: string) => void;
-    addResourceToBlocklist: (sessionId: string, key: string, escalationId?: string) => void;
-    addHostToUrlAllowlist: (host: string) => boolean;
-}
-export declare function applyUrlBlockDecision(session: SessionData, decision: UrlBlockDecision, stateStore: UrlBlockStateStore, escalationId?: string): {
-    escalation: Escalation;
-    decision: UrlBlockDecision;
-    blockReason?: 'user_block' | 'malformed_url' | 'persist_failed';
-} | undefined;
 export {};
 //# sourceMappingURL=ask-dialog.d.ts.map

package/dist/daemon/ask-dialog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ask-dialog.d.ts","sourceRoot":"","sources":["../../src/daemon/ask-dialog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAE5B,wBAAgB,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAExD;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,GAAG,aAAa,CAInF;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CA+BvF;AAED,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,CAqBvE;AAED,UAAU,UAAU;IAClB,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IAClE,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAChF,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CACjF;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,kBAAkB,EAC5B,UAAU,EAAE,UAAU,EACtB,YAAY,CAAC,EAAE,MAAM,GACpB,UAAU,GAAG,SAAS,CAwBxB;AAED,UAAU,kBAAkB;IAC1B,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1D,sBAAsB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACxF,qBAAqB,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CAClD;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,gBAAgB,EAC1B,UAAU,EAAE,kBAAkB,EAC9B,YAAY,CAAC,EAAE,MAAM,GACpB;IACD,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,WAAW,CAAC,EAAE,YAAY,GAAG,eAAe,GAAG,gBAAgB,CAAC;CACjE,GAAG,SAAS,CA2BZ"}
+{"version":3,"file":"ask-dialog.d.ts","sourceRoot":"","sources":["../../src/daemon/ask-dialog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,YAAY,EACb,MAAM,oBAAoB,CAAC;AAE5B,wBAAgB,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAExD;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,GAAG,aAAa,CAInF;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CA6BvF;AAED,UAAU,UAAU;IAClB,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IAClE,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAChF,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CACjF;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,kBAAkB,EAC5B,UAAU,EAAE,UAAU,EACtB,YAAY,CAAC,EAAE,MAAM,GACpB,UAAU,GAAG,SAAS,CAwBxB"}

package/dist/daemon/ask-dialog.js

@@ -7,8 +7,6 @@ export function enqueue(session, escalation) {
     return 'ESCALATE';
 }
 export function formatDenyReason(escalation, triggerExcerpt) {
-    if (escalation.kind === 'url-block')
-        return formatUrlBlockDenyReason(escalation);
     const excerpt = triggerExcerpt.slice(0, 120);
     const branchSummary = Object.entries(escalation.branches)
         .filter(([, v]) => v > 0)
@@ -37,26 +35,6 @@ export function formatDenyReason(escalation, triggerExcerpt) {
         .filter((line) => line !== '')
         .join('\n');
 }
-export function formatUrlBlockDenyReason(escalation) {
-    const categories = escalation.vgeCategories && escalation.vgeCategories.length > 0
-        ? escalation.vgeCategories.join(', ')
-        : 'none';
-    return [
-        'VGE Agent Guard: URL flagged before tool execution. Decide before continuing.',
-        '',
-        `  Tool:   ${escalation.toolName}`,
-        `  URL:    ${escalation.url ?? '(unknown)'}`,
-        `  Host:   ${escalation.host ?? '(unknown)'}`,
-        `  Reason: ${escalation.blockMessage ?? 'Vigil Guard classified this URL as unsafe.'}`,
-        `  VGE:    decision ${escalation.vgeDecision ?? escalation.routerOutcome}, signal ${escalation.vgeArbiterSignal ?? 'n/a'}, action ${escalation.vgeRuleAction ?? 'n/a'}, score ${escalation.vgeScore ?? 0}, categories: [${categories}]`,
-        '',
-        '  Reply:',
-        '    block          — keep this tool call blocked and block this exact URL',
-        '                     automatically for the rest of the session',
-        '    allow once     — allow this exact URL once, then ask again next time',
-        '    session        — allow + add this host to the persistent URL allowlist',
-    ].join('\n');
-}
 export function applyDecision(session, decision, stateStore, escalationId) {
     const escalationIndex = escalationId === undefined
         ? 0
@@ -82,33 +60,4 @@ export function applyDecision(session, decision, stateStore, escalationId) {
     }
     return esc;
 }
-export function applyUrlBlockDecision(session, decision, stateStore, escalationId) {
-    const escalationIndex = escalationId === undefined
-        ? 0
-        : session.pendingEscalations.findIndex((esc) => esc.escalationId === escalationId);
-    if (escalationIndex < 0)
-        return undefined;
-    const [esc] = session.pendingEscalations.splice(escalationIndex, 1);
-    if (!esc)
-        return undefined;
-    let effectiveDecision = decision;
-    let blockReason = decision === 'block' ? 'user_block' : undefined;
-    if (decision === 'block') {
-        stateStore.addResourceToBlocklist(session.sessionId, esc.resourceId, esc.escalationId);
-    }
-    if (decision === 'allow_once') {
-        stateStore.addUrlAllowOnce(session.sessionId, esc.resourceId);
-    }
-    else if (decision === 'allow_persist') {
-        if (!esc.host) {
-            effectiveDecision = 'block';
-            blockReason = 'malformed_url';
-        }
-        else if (!stateStore.addHostToUrlAllowlist(esc.host)) {
-            effectiveDecision = 'block';
-            blockReason = 'persist_failed';
-        }
-    }
-    return { escalation: esc, decision: effectiveDecision, blockReason };
-}
 //# sourceMappingURL=ask-dialog.js.map

package/dist/daemon/ask-dialog.js.map

@@ -1 +1 @@
-{"version":3,"file":"ask-dialog.js","sourceRoot":"","sources":["../../src/daemon/ask-dialog.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,UAAU,CAAC,OAAoB;IAC7C,OAAO,OAAO,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAoB,EAAE,UAAsB;IAClE,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO,CAAC,eAAe,EAAE,CAAC;IAC1B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAsB,EAAE,cAAsB;IAC7E,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,wBAAwB,CAAC,UAAU,CAAC,CAAC;IAEjF,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;SACtD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;IAExB,OAAO;QACL,wEAAwE;QACxE,EAAE;QACF,eAAe,UAAU,CAAC,QAAQ,EAAE;QACpC,eAAe,UAAU,CAAC,UAAU,EAAE;QACtC,eAAe,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,aAAa,GAAG;QAC3G,OAAO,CAAC,CAAC,CAAC,mBAAmB,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE;QAC/C,EAAE;QACF,+DAA+D;QAC/D,4CAA4C;QAC5C,EAAE;QACF,UAAU;QACV,oEAAoE;QACpE,mDAAmD;QACnD,sEAAsE;QACtE,kCAAkC;QAClC,oEAAoE;QACpE,6DAA6D;QAC7D,gFAAgF;KACjF;SACE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;SAC7B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAAsB;IAC7D,MAAM,UAAU,GACd,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;QAC7D,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QACrC,CAAC,CAAC,MAAM,CAAC;IAEb,OAAO;QACL,+EAA+E;QAC/E,EAAE;QACF,aAAa,UAAU,CAAC,QAAQ,EAAE;QAClC,aAAa,UAAU,CAAC,GAAG,IAAI,WAAW,EAAE;QAC5C,aAAa,UAAU,CAAC,IAAI,IAAI,WAAW,EAAE;QAC7C,aAAa,UAAU,CAAC,YAAY,IAAI,4CAA4C,EAAE;QACtF,sBAAsB,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,aAAa,YAAY,UAAU,CAAC,gBAAgB,IAAI,KAAK,YAAY,UAAU,CAAC,aAAa,IAAI,KAAK,WAAW,UAAU,CAAC,QAAQ,IAAI,CAAC,kBAAkB,UAAU,GAAG;QACvO,EAAE;QACF,UAAU;QACV,2EAA2E;QAC3E,gEAAgE;QAChE,0EAA0E;QAC1E,4EAA4E;KAC7E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAQD,MAAM,UAAU,aAAa,CAC3B,OAAoB,EACpB,QAA4B,EAC5B,UAAsB,EACtB,YAAqB;IAErB,MAAM,eAAe,GAAG,YAAY,KAAK,SAAS;QAChD,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;IACrF,IAAI,eAAe,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,MAAM;QACR,KAAK,SAAS;YACZ,8EAA8E;YAC9E,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/E,MAAM;QACR,KAAK,OAAO;YACV,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/E,MAAM;QACR,KAAK,YAAY;YACf,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACzD,MAAM;IACV,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,MAAM,UAAU,qBAAqB,CACnC,OAAoB,EACpB,QAA0B,EAC1B,UAA8B,EAC9B,YAAqB;IAMrB,MAAM,eAAe,GAAG,YAAY,KAAK,SAAS;QAChD,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;IACrF,IAAI,eAAe,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,IAAI,iBAAiB,GAAG,QAAQ,CAAC;IACjC,IAAI,WAAW,GACb,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,UAAU,CAAC,sBAAsB,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAChE,CAAC;SAAM,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,iBAAiB,GAAG,OAAO,CAAC;YAC5B,WAAW,GAAG,eAAe,CAAC;QAChC,CAAC;aAAM,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,iBAAiB,GAAG,OAAO,CAAC;YAC5B,WAAW,GAAG,gBAAgB,CAAC;QACjC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC;AACvE,CAAC"}
+{"version":3,"file":"ask-dialog.js","sourceRoot":"","sources":["../../src/daemon/ask-dialog.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,UAAU,CAAC,OAAoB;IAC7C,OAAO,OAAO,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAoB,EAAE,UAAsB;IAClE,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO,CAAC,eAAe,EAAE,CAAC;IAC1B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAsB,EAAE,cAAsB;IAC7E,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;SACtD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;IAExB,OAAO;QACL,wEAAwE;QACxE,EAAE;QACF,eAAe,UAAU,CAAC,QAAQ,EAAE;QACpC,eAAe,UAAU,CAAC,UAAU,EAAE;QACtC,eAAe,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,aAAa,GAAG;QAC3G,OAAO,CAAC,CAAC,CAAC,mBAAmB,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE;QAC/C,EAAE;QACF,+DAA+D;QAC/D,4CAA4C;QAC5C,EAAE;QACF,UAAU;QACV,oEAAoE;QACpE,mDAAmD;QACnD,sEAAsE;QACtE,kCAAkC;QAClC,oEAAoE;QACpE,6DAA6D;QAC7D,gFAAgF;KACjF;SACE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;SAC7B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAQD,MAAM,UAAU,aAAa,CAC3B,OAAoB,EACpB,QAA4B,EAC5B,UAAsB,EACtB,YAAqB;IAErB,MAAM,eAAe,GAAG,YAAY,KAAK,SAAS;QAChD,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;IACrF,IAAI,eAAe,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,MAAM;QACR,KAAK,SAAS;YACZ,8EAA8E;YAC9E,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/E,MAAM;QACR,KAAK,OAAO;YACV,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/E,MAAM;QACR,KAAK,YAAY;YACf,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACzD,MAAM;IACV,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/daemon/audit-decisions.d.ts

@@ -21,6 +21,13 @@ export declare function logBlockingDecisionResolved(params: {
 }): void;
 export declare function logBlockingDecisionCapacityEvicted(decision: BlockingDecision): void;
 export declare function logBlockingDecisionDroppedOnRestart(decision: BlockingDecision): void;
+export declare function logSnapshotPretoolUrlDecisionDropped(decision: {
+    decisionId?: unknown;
+    sessionId?: unknown;
+    kind?: unknown;
+    toolName?: unknown;
+    resourceId?: unknown;
+}): void;
 export declare function logBlockingDecisionConflict(params: {
     decision: BlockingDecision;
     clientId: string;

package/dist/daemon/audit-decisions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-decisions.d.ts","sourceRoot":"","sources":["../../src/daemon/audit-decisions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAOvH,KAAK,UAAU,GACX,iBAAiB,GACjB,qBAAqB,GACrB,WAAW,GACX,iBAAiB,GACjB,gBAAgB,GAChB,mBAAmB,CAAC;AA8CxB,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,GAAE;IAAE,eAAe,CAAC,EAAE,iBAAiB,GAAG,iBAAiB,CAAA;CAAO,GACvE,IAAI,CASN;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAM3E;AAED,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAKhF;AAED,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAKjF;AAED,wBAAgB,kCAAkC,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAKnF;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,eAAe,CAAC,EAAE,aAAa,GAAG,kBAAkB,GAAG,YAAY,CAAC;IACpE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,eAAe,CAAC,EAAE,iBAAiB,GAAG,iBAAiB,CAAC;CACzD,GAAG,IAAI,CAwBP;AAED,wBAAgB,kCAAkC,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAenF;AAED,wBAAgB,mCAAmC,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAepF;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,sBAAsB,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,UAAU,CAAC;CACxB,GAAG,IAAI,CAWP;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,oBAAoB,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,IAAI,CAaP;AAED,UAAU,oBAAoB;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;CACxB,GAAG,IAAI,CAaP"}
+{"version":3,"file":"audit-decisions.d.ts","sourceRoot":"","sources":["../../src/daemon/audit-decisions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAOvH,KAAK,UAAU,GACX,iBAAiB,GACjB,qBAAqB,GACrB,WAAW,GACX,iBAAiB,GACjB,gBAAgB,GAChB,mBAAmB,CAAC;AA6CxB,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,GAAE;IAAE,eAAe,CAAC,EAAE,iBAAiB,GAAG,iBAAiB,CAAA;CAAO,GACvE,IAAI,CASN;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAM3E;AAED,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAKhF;AAED,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAKjF;AAED,wBAAgB,kCAAkC,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAKnF;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,sBAAsB,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,eAAe,CAAC,EAAE,aAAa,GAAG,kBAAkB,GAAG,YAAY,CAAC;IACpE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,eAAe,CAAC,EAAE,iBAAiB,GAAG,iBAAiB,CAAC;CACzD,GAAG,IAAI,CAwBP;AAED,wBAAgB,kCAAkC,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAenF;AAED,wBAAgB,mCAAmC,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAepF;AAED,wBAAgB,oCAAoC,CAAC,QAAQ,EAAE;IAC7D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,IAAI,CAUP;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE;IAClD,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,sBAAsB,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,UAAU,CAAC;CACxB,GAAG,IAAI,CAWP;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,oBAAoB,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,IAAI,CAaP;AAED,UAAU,oBAAoB;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,UAAU,CAAC;CACxB,GAAG,IAAI,CAaP"}

package/dist/daemon/audit-decisions.js

@@ -1,8 +1,6 @@
 import { appendEvent } from '../shared/audit-writer.js';
 import { recordDecisionCreated, recordDecisionTerminal, } from './decision-metrics.js';
 function decisionStage(decision) {
-    if (decision.kind === 'pretool_url')
-        return 'pretool';
     if (decision.kind === 'posttool_output')
         return 'posttool';
     if (decision.kind === 'attachment_input')
@@ -135,6 +133,17 @@ export function logBlockingDecisionDroppedOnRestart(decision) {
         latency_ms: Date.now() - decision.createdAt,
     });
 }
+export function logSnapshotPretoolUrlDecisionDropped(decision) {
+    appendEvent({
+        event_type: 'snapshot_pretool_url_decision_dropped',
+        decision_id: decision.decisionId,
+        session_id: decision.sessionId,
+        kind: decision.kind,
+        tool_name: decision.toolName,
+        resource_id: decision.resourceId,
+        reason: 'legacy_pretool_url_decision',
+    });
+}
 export function logBlockingDecisionConflict(params) {
     appendEvent({
         event_type: 'blocking_decision_conflict',

package/dist/daemon/audit-decisions.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-decisions.js","sourceRoot":"","sources":["../../src/daemon/audit-decisions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAU/B,SAAS,aAAa,CAAC,QAA0B;IAC/C,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,QAAQ,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,UAAU,CAAC;IAC3D,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAkB;QAAE,OAAO,YAAY,CAAC;IAC9D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,QAA0B;IACjD,OAAO,QAAQ,CAAC,KAAK,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;AAC3F,CAAC;AAED,SAAS,sBAAsB,CAAC,QAA0B;IACxD,OAAO;QACL,cAAc,EAAE,QAAQ,CAAC,UAAU;QACnC,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,IAAI,SAAS;QAC7C,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;QACnC,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC;QAC9B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,SAAS,EAAE,QAAQ,CAAC,QAAQ;QAC5B,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK;QACxC,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ;QACnC,kBAAkB,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI;QACtD,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI;QAChD,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK;QAC7B,cAAc,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE;QAC7C,qBAAqB,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;KACzF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,OAA0D;IACtF,OAAO,OAAO,KAAK,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,qBAAqB,CAAC;AACnF,CAAC;AAED,SAAS,wBAAwB,CAAC,QAA0B;IAC1D,IAAI,QAAQ,CAAC,MAAM,KAAK,qBAAqB,IAAI,QAAQ,CAAC,MAAM,KAAK,wBAAwB,IAAI,QAAQ,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QACtI,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,gBAAgB;QAAE,OAAO,wBAAwB,CAAC;IAC9E,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAA0B,EAC1B,SAAsE,EAAE;IAExE,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAChC,WAAW,CAAC;QACV,UAAU,EAAE,2BAA2B;QACvC,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QACnC,SAAS,EAAE,QAAQ,CAAC,QAAQ;QAC5B,UAAU,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QACtD,gBAAgB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;KACjD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAA0B;IACnE,WAAW,CAAC;QACV,UAAU,EAAE,2BAA2B;QACvC,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QACnC,SAAS,EAAE,QAAQ,CAAC,QAAQ;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,QAA0B;IACxE,WAAW,CAAC;QACV,UAAU,EAAE,iCAAiC;QAC7C,GAAG,sBAAsB,CAAC,QAAQ,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,QAA0B;IACzE,WAAW,CAAC;QACV,UAAU,EAAE,kCAAkC;QAC9C,GAAG,sBAAsB,CAAC,QAAQ,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,QAA0B;IAC3E,WAAW,CAAC;QACV,UAAU,EAAE,oCAAoC;QAChD,GAAG,sBAAsB,CAAC,QAAQ,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAW3C;IACC,sBAAsB,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QAC/B,UAAU,EAAE,oBAAoB,CAAC,MAAM,CAAC,eAAe,CAAC;QACxD,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,WAAW,CAAC;QACV,UAAU,EAAE,4BAA4B;QACxC,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC1C,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QAC/B,WAAW,EAAE,oBAAoB,CAAC,MAAM,CAAC,eAAe,CAAC;QACzD,cAAc,EAAE,eAAe;QAC/B,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,gBAAgB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;QAChD,iBAAiB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;QACjD,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;QACxC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;QACnD,iBAAiB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;QACjD,oBAAoB,EAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI;KACxD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,QAA0B;IAC3E,sBAAsB,CAAC;QACrB,QAAQ;QACR,OAAO,EAAE,kBAAkB;QAC3B,UAAU,EAAE,mBAAmB;QAC/B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS;KAC3C,CAAC,CAAC;IACH,WAAW,CAAC;QACV,UAAU,EAAE,oCAAoC;QAChD,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,mBAAmB;QAChC,cAAc,EAAE,wBAAwB,CAAC,QAAQ,CAAC;QAClD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,QAA0B;IAC5E,sBAAsB,CAAC;QACrB,QAAQ;QACR,OAAO,EAAE,oBAAoB;QAC7B,UAAU,EAAE,gBAAgB;QAC5B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS;KAC3C,CAAC,CAAC;IACH,WAAW,CAAC;QACV,UAAU,EAAE,sCAAsC;QAClD,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,gBAAgB;QAC7B,cAAc,EAAE,wBAAwB,CAAC,QAAQ,CAAC;QAClD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAO3C;IACC,WAAW,CAAC;QACV,UAAU,EAAE,4BAA4B;QACxC,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC1C,OAAO,EAAE,UAAU;QACnB,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,eAAe,EAAE,MAAM,CAAC,MAAM;QAC9B,UAAU,EAAE,MAAM,CAAC,SAAS;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAMzC;IACC,WAAW,CAAC;QACV,UAAU,EAAE,2BAA2B;QACvC,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,gBAAgB,EAAE,MAAM,CAAC,cAAc;QACvC,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,iBAAiB,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ;QAClD,WAAW,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE;QACtC,cAAc,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK;QAC5C,oBAAoB,EAAE,MAAM,CAAC,eAAe,CAAC,UAAU;QACvD,uBAAuB,EAAE,MAAM,CAAC,eAAe,CAAC,aAAa;QAC7D,UAAU,EAAE,MAAM,CAAC,SAAS;KAC7B,CAAC,CAAC;AACL,CAAC;AAUD,MAAM,UAAU,iCAAiC,CAAC,MAGjD;IACC,WAAW,CAAC;QACV,UAAU,EAAE,mCAAmC;QAC/C,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;QAC7C,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI,aAAa;QAC7C,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;QACrC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU;QACzC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,IAAI,IAAI;QACnD,kBAAkB,EAAE,MAAM,CAAC,UAAU,CAAC,gBAAgB,IAAI,IAAI;QAC9D,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa,IAAI,IAAI;QACxD,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,IAAI,IAAI;KAC9C,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"audit-decisions.js","sourceRoot":"","sources":["../../src/daemon/audit-decisions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAU/B,SAAS,aAAa,CAAC,QAA0B;IAC/C,IAAI,QAAQ,CAAC,IAAI,KAAK,iBAAiB;QAAE,OAAO,UAAU,CAAC;IAC3D,IAAI,QAAQ,CAAC,IAAI,KAAK,kBAAkB;QAAE,OAAO,YAAY,CAAC;IAC9D,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,QAA0B;IACjD,OAAO,QAAQ,CAAC,KAAK,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;AAC3F,CAAC;AAED,SAAS,sBAAsB,CAAC,QAA0B;IACxD,OAAO;QACL,cAAc,EAAE,QAAQ,CAAC,UAAU;QACnC,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,IAAI,SAAS;QAC7C,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;QACnC,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC;QAC9B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,SAAS,EAAE,QAAQ,CAAC,QAAQ;QAC5B,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK;QACxC,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ;QACnC,kBAAkB,EAAE,QAAQ,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI;QACtD,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI;QAChD,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK;QAC7B,cAAc,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE;QAC7C,qBAAqB,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;KACzF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,OAA0D;IACtF,OAAO,OAAO,KAAK,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,qBAAqB,CAAC;AACnF,CAAC;AAED,SAAS,wBAAwB,CAAC,QAA0B;IAC1D,IAAI,QAAQ,CAAC,MAAM,KAAK,qBAAqB,IAAI,QAAQ,CAAC,MAAM,KAAK,wBAAwB,IAAI,QAAQ,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QACtI,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,gBAAgB;QAAE,OAAO,wBAAwB,CAAC;IAC9E,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAA0B,EAC1B,SAAsE,EAAE;IAExE,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAChC,WAAW,CAAC;QACV,UAAU,EAAE,2BAA2B;QACvC,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QACnC,SAAS,EAAE,QAAQ,CAAC,QAAQ;QAC5B,UAAU,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;QACtD,gBAAgB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;KACjD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAA0B;IACnE,WAAW,CAAC;QACV,UAAU,EAAE,2BAA2B;QACvC,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QACnC,SAAS,EAAE,QAAQ,CAAC,QAAQ;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,QAA0B;IACxE,WAAW,CAAC;QACV,UAAU,EAAE,iCAAiC;QAC7C,GAAG,sBAAsB,CAAC,QAAQ,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,QAA0B;IACzE,WAAW,CAAC;QACV,UAAU,EAAE,kCAAkC;QAC9C,GAAG,sBAAsB,CAAC,QAAQ,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,QAA0B;IAC3E,WAAW,CAAC;QACV,UAAU,EAAE,oCAAoC;QAChD,GAAG,sBAAsB,CAAC,QAAQ,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAW3C;IACC,sBAAsB,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QAC/B,UAAU,EAAE,oBAAoB,CAAC,MAAM,CAAC,eAAe,CAAC;QACxD,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,WAAW,CAAC;QACV,UAAU,EAAE,4BAA4B;QACxC,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC1C,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QAC/B,WAAW,EAAE,oBAAoB,CAAC,MAAM,CAAC,eAAe,CAAC;QACzD,cAAc,EAAE,eAAe;QAC/B,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,gBAAgB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;QAChD,iBAAiB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;QACjD,YAAY,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;QACxC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;QACnD,iBAAiB,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI;QACjD,oBAAoB,EAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI;KACxD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,QAA0B;IAC3E,sBAAsB,CAAC;QACrB,QAAQ;QACR,OAAO,EAAE,kBAAkB;QAC3B,UAAU,EAAE,mBAAmB;QAC/B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS;KAC3C,CAAC,CAAC;IACH,WAAW,CAAC;QACV,UAAU,EAAE,oCAAoC;QAChD,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE,kBAAkB;QAC3B,WAAW,EAAE,mBAAmB;QAChC,cAAc,EAAE,wBAAwB,CAAC,QAAQ,CAAC;QAClD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,QAA0B;IAC5E,sBAAsB,CAAC;QACrB,QAAQ;QACR,OAAO,EAAE,oBAAoB;QAC7B,UAAU,EAAE,gBAAgB;QAC5B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS;KAC3C,CAAC,CAAC;IACH,WAAW,CAAC;QACV,UAAU,EAAE,sCAAsC;QAClD,GAAG,sBAAsB,CAAC,QAAQ,CAAC;QACnC,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,gBAAgB;QAC7B,cAAc,EAAE,wBAAwB,CAAC,QAAQ,CAAC;QAClD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,QAMpD;IACC,WAAW,CAAC;QACV,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,SAAS,EAAE,QAAQ,CAAC,QAAQ;QAC5B,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,MAAM,EAAE,6BAA6B;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAO3C;IACC,WAAW,CAAC;QACV,UAAU,EAAE,4BAA4B;QACxC,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC1C,OAAO,EAAE,UAAU;QACnB,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,eAAe,EAAE,MAAM,CAAC,MAAM;QAC9B,UAAU,EAAE,MAAM,CAAC,SAAS;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAMzC;IACC,WAAW,CAAC;QACV,UAAU,EAAE,2BAA2B;QACvC,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,gBAAgB,EAAE,MAAM,CAAC,cAAc;QACvC,cAAc,EAAE,MAAM,CAAC,aAAa;QACpC,iBAAiB,EAAE,MAAM,CAAC,eAAe,CAAC,QAAQ;QAClD,WAAW,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE;QACtC,cAAc,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK;QAC5C,oBAAoB,EAAE,MAAM,CAAC,eAAe,CAAC,UAAU;QACvD,uBAAuB,EAAE,MAAM,CAAC,eAAe,CAAC,aAAa;QAC7D,UAAU,EAAE,MAAM,CAAC,SAAS;KAC7B,CAAC,CAAC;AACL,CAAC;AAUD,MAAM,UAAU,iCAAiC,CAAC,MAGjD;IACC,WAAW,CAAC;QACV,UAAU,EAAE,mCAAmC;QAC/C,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;QAC7C,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,IAAI,aAAa;QAC7C,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ;QACrC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU;QACzC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,IAAI,IAAI;QACnD,kBAAkB,EAAE,MAAM,CAAC,UAAU,CAAC,gBAAgB,IAAI,IAAI;QAC9D,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa,IAAI,IAAI;QACxD,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,IAAI,IAAI;KAC9C,CAAC,CAAC;AACL,CAAC"}

package/dist/daemon/audit-posttool.d.ts

@@ -1,6 +1,7 @@
 import type { EscalationDecision, RouterOutcome } from '../shared/types.js';
 import type { AnalysisSourceKind } from './analysis-source.js';
 import type { SecurityFrameVariant } from './security-frame.js';
+import type { SubagentQuarantineLedgerEntry, SubagentQuarantineStatus } from './subagent-quarantine-types.js';
 export type SynthesizedBy = 'vge' | 'sidecar_local_fallback' | 'user_decision' | 'policy_engine';
 export type PostToolKillReason = 'cc_contract_unhealthy' | 'pending_subagent_decision' | 'redaction_failed_invalid_shape' | 'unsupported_tool';
 export declare function logToolOutputEscalated(params: {
@@ -23,7 +24,7 @@ export declare function logToolOutputAnalyzed(params: {
     toolName: string;
     resourceId: string;
     escalationId?: string | null;
-    userAllowlisted: boolean;
+    userApprovedResource: boolean;
     routerOutcome: RouterOutcome;
     enforcementTaken: 'none' | 'tainted' | 'escalated' | 'denied';
     analysisSource: AnalysisSourceKind;
@@ -74,6 +75,16 @@ export declare function logPostToolOutputRedacted(params: {
     originalHash: string;
     synthesizedBy: SynthesizedBy;
 }): void;
+export declare function logPostToolOutputQuarantined(params: {
+    sessionId: string;
+    toolName: string;
+    resourceId: string;
+    decisionId: string;
+    routerOutcome: RouterOutcome;
+    originalSizeBytes: number;
+    originalHash: string;
+    blocksSession: boolean;
+}): void;
 export declare function logPostToolKillTurn(params: {
     sessionId: string;
     toolName: string;
@@ -120,4 +131,63 @@ export declare function logPostToolPendingDecisionToolDenied(params: {
     toolName: string;
     reason: 'pending_posttool_decision' | 'read_replay_required';
 }): void;
+export declare function logSubagentQuarantineLogged(params: {
+    entry: SubagentQuarantineLedgerEntry;
+}): void;
+export declare function logSubagentQuarantineResolved(params: {
+    sessionId: string;
+    agentId: string;
+    agentCallId?: string;
+    decisionId: string;
+    status: Exclude<SubagentQuarantineStatus, 'pending'>;
+    resolvedAt: string;
+}): void;
+export declare function logSubagentQuarantineNoticeInjected(params: {
+    sessionId: string;
+    agentId: string;
+    agentCallId: string;
+    entryCount: number;
+    noticeBytes: number;
+}): void;
+export declare function logSubagentQuarantineNoticeSkipped(params: {
+    sessionId: string;
+    agentId?: string;
+    agentCallId?: string;
+    reason: 'timeout' | 'empty_ledger' | 'correlation_missing' | 'not_agent_tool' | 'lock_timeout';
+}): void;
+export declare function logSubagentQuarantineNoticeDegraded(params: {
+    sessionId: string;
+    agentId: string;
+    agentCallId: string;
+    status: 'ledger_unavailable' | 'lock_timeout';
+}): void;
+export declare function logSubagentQuarantineUpdatePropagated(params: {
+    sessionId: string;
+    agentId: string;
+    propagatedCount: number;
+}): void;
+export declare function logSubagentQuarantineUpdateRecovered(params: {
+    sessionId: string;
+    agentId: string;
+    recoveredCount: number;
+}): void;
+export declare function logSubagentQuarantineLedgerRecovered(params: {
+    sessionId: string;
+    agentId: string;
+    recoveredEntries: number;
+}): void;
+export declare function logSubagentQuarantineLedgerUnavailable(params: {
+    sessionId: string;
+    agentId: string;
+    message?: string;
+}): void;
+export declare function logSubagentQuarantineLedgerInvalidLine(params: {
+    sessionId: string;
+    lineNumber: number;
+}): void;
+export declare function logSubagentQuarantineCorrelationMissing(params: {
+    sessionId: string;
+    toolUseId?: string;
+    reason: 'missing_tool_use_id' | 'missing_agent_call' | 'missing_agent_id' | 'ambiguous_fifo';
+}): void;
 //# sourceMappingURL=audit-posttool.d.ts.map