@whisperr/wizard 0.7.1 → 0.7.2

package/dist/index.js

@@ -2230,6 +2230,7 @@ async function runSelection(provider, models, repoPath, bootstrap, surveyReport,
   const seen = /* @__PURE__ */ new Set();
   const rejected = new Set(rejectedCodes);
   let summary = "";
+  let finished = false;
   const proposeTool = {
     name: "propose_event",
     description: "Propose one important, concretely-anchored product event. Returns ok:true when accepted.",
@@ -2291,6 +2292,7 @@ async function runSelection(provider, models, repoPath, bootstrap, surveyReport,
     },
     handler: async (input) => {
       summary = String(input.summary ?? "");
+      finished = true;
       return { ok: true };
     }
   };
@@ -2314,6 +2316,7 @@ async function runSelection(provider, models, repoPath, bootstrap, surveyReport,
   );
   return {
     outcome: outcome.kind,
+    finished,
     proposed,
     summary,
     surveyReport,
@@ -2596,15 +2599,24 @@ async function runEngine(input) {
         state.tombstonedCodes,
         input.sink
       );
-      if (selection.outcome !== "completed" && selection.proposed.length === 0) {
-        await failRun(`selection ${selection.outcome}`);
-        return { kind: "aborted", reason: `selection ${selection.outcome}` };
+      if (!selection.finished) {
+        const reason = selection.outcome === "completed" ? "selection did not call finish_selection" : `selection ${selection.outcome}`;
+        await failRun(reason);
+        return { kind: "aborted", reason };
+      }
+      if (selection.proposed.length === 0) {
+        await failRun("selection finished with no accepted events");
+        return { kind: "aborted", reason: "selection finished with no accepted events" };
       }
       const approved = await input.callbacks.reviewEvents(selection.proposed);
       if (approved === null) {
         await failRun("selection rejected by user");
         return { kind: "aborted", reason: "selection rejected by user" };
       }
+      if (approved.length === 0) {
+        await failRun("no events accepted for instrumentation");
+        return { kind: "aborted", reason: "no events accepted for instrumentation" };
+      }
       const approvedCodes = new Set(approved.map((event) => event.code));
       for (const event of selection.proposed) {
         if (!approvedCodes.has(event.code) && !state.tombstonedCodes.includes(event.code)) {
@@ -2627,25 +2639,8 @@ async function runEngine(input) {
     input.sink.emit({ phase: "designing", action: `resumed with ${registered.length} registered events` });
   }
   if (registered.length === 0) {
-    await patchPhase("reporting", "no events registered for this project");
-    try {
-      await completeRun(runs, runId, [], /* @__PURE__ */ new Map(), [], true, "unavailable", void 0);
-    } catch (error) {
-      const reason = error instanceof Error ? error.message : String(error);
-      await failRun(`completion failed: ${reason}`);
-      return { kind: "aborted", reason: `completion failed: ${reason}` };
-    }
-    return {
-      kind: "completed",
-      runId,
-      registered,
-      eventStatuses: /* @__PURE__ */ new Map(),
-      reportEvents: [],
-      changedFiles: [],
-      identifyWired: false,
-      applied: false,
-      summary: "No important events found for this project; nothing was instrumented."
-    };
+    await failRun("no events registered for this project");
+    return { kind: "aborted", reason: "no events registered for this project" };
   }
   await patchPhase("binding");
   let worktree;
@@ -3193,6 +3188,12 @@ var WRITE_OUTSIDE_REPO_DENIAL = "blocked: writes must stay inside the target rep
 var SENSITIVE_WRITE_DENIAL = "blocked: refusing to write CI/git configuration";
 var BASH_ALLOWLIST_DENIAL = "blocked: command is outside the Bash allowlist - use package install/add commands, mkdir, or git status/diff/log only";
 var CHAINED_COMMAND_DENIAL = "blocked: chained or substituted shell command - run one command at a time";
+function engineMcpToolName(toolName) {
+  return `mcp__engine__${toolName}`;
+}
+function trustedEngineMcpTools(tools) {
+  return new Set(tools.map((tool2) => engineMcpToolName(tool2.name)));
+}
 var ENV_EXAMPLES = /* @__PURE__ */ new Set([".env.example", ".env.sample", ".env.template"]);
 var SECRET_DIRECTORIES = /* @__PURE__ */ new Set([".aws", ".ssh", ".gnupg"]);
 var SECRET_EXACT_FILES = /* @__PURE__ */ new Set([".netrc", ".npmrc", ".pypirc"]);
@@ -3217,6 +3218,9 @@ var JS_PACKAGE_MANAGERS = /* @__PURE__ */ new Set(["npm", "pnpm", "yarn", "bun"]
 var PYTHON_PACKAGE_MANAGERS = /* @__PURE__ */ new Set(["pip", "pip3", "poetry", "uv"]);
 var RUBY_PACKAGE_MANAGERS = /* @__PURE__ */ new Set(["gem", "bundle"]);
 function evaluateToolUse(toolName, input, context) {
+  if (context.trustedTools?.has(toolName)) {
+    return { behavior: "allow" };
+  }
   switch (toolName) {
     case "Read":
       return evaluateReadLike(readPathInputs(input), readPathInputs(input), context);
@@ -4248,7 +4252,7 @@ async function runPass(opts) {
   }
   return { summary, costUsd, ok, maxedOut };
 }
-function buildToolPolicyHooks(repoPath) {
+function buildToolPolicyHooks(repoPath, trustedTools) {
   return {
     PreToolUse: [
       {
@@ -4256,7 +4260,8 @@ function buildToolPolicyHooks(repoPath) {
           async (input) => {
             if (input.hook_event_name !== "PreToolUse") return { continue: true };
             const decision = evaluateToolUse(input.tool_name, toolInputRecord(input.tool_input), {
-              repoPath
+              repoPath,
+              trustedTools
             });
             if (decision.behavior === "allow") {
               return { continue: true };
@@ -4274,9 +4279,9 @@ function buildToolPolicyHooks(repoPath) {
     ]
   };
 }
-function createToolPermissionCallback(repoPath) {
+function createToolPermissionCallback(repoPath, trustedTools) {
   return async (toolName, input, options) => {
-    const decision = evaluateToolUse(toolName, input, { repoPath });
+    const decision = evaluateToolUse(toolName, input, { repoPath, trustedTools });
     return decision.behavior === "allow" ? { behavior: "allow", toolUseID: options.toolUseID } : {
       behavior: "deny",
       message: decision.message,
@@ -4355,9 +4360,10 @@ function createClaudeProvider(config, session) {
           return { content: [{ type: "text", text: JSON.stringify(result) }] };
         })
       );
+      const trustedTools = trustedEngineMcpTools(invocation.tools);
       const allowedTools = [
         ...invocation.allowRepoWrite ? EDIT_TOOLS : READ_ONLY_TOOLS2,
-        ...invocation.tools.map((engineTool) => `mcp__engine__${engineTool.name}`)
+        ...trustedTools
       ];
       let sessionId = invocation.resumeSessionId;
       let costUsd = 0;
@@ -4375,8 +4381,8 @@ function createClaudeProvider(config, session) {
             ...roleConfig.effort ? { effort: roleConfig.effort } : {},
             tools: [...allowedTools],
             ...hostTools.length > 0 ? { mcpServers: { engine: createSdkMcpServer({ name: "engine", tools: hostTools }) } } : {},
-            hooks: buildToolPolicyHooks(invocation.cwd),
-            canUseTool: createToolPermissionCallback(invocation.cwd),
+            hooks: buildToolPolicyHooks(invocation.cwd, trustedTools),
+            canUseTool: createToolPermissionCallback(invocation.cwd, trustedTools),
             maxTurns: roleConfig.maxTurns,
             ...invocation.resumeSessionId ? { resume: invocation.resumeSessionId } : {},
             settingSources: []

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@whisperr/wizard",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "description": "Whisperr Wizard \u2014 one command to integrate the Whisperr SDK into your app. Authenticates with your onboarded account and uses an AI coding agent to wire up identify() and your business events automatically.",
   "repository": {
     "type": "git",