@wrongstack/core 0.291.0 → 0.291.2

package/dist/kernel/events/tool-events.d.ts

@@ -56,6 +56,30 @@ export interface ToolEventMap {
         id: string;
         event: ToolProgressEvent;
     };
+    /**
+     * Fired once the permission policy and executor-level safety ceilings have
+     * produced the effective authorization decision for a valid tool call.
+     * Raw tool input is deliberately excluded; inputHash is computed after
+     * secret scrubbing so Chronicle can correlate decisions without storing
+     * credentials or command arguments.
+     */
+    'permission.evaluated': {
+        sessionId?: string | undefined;
+        traceId?: string | undefined;
+        agentId?: string | undefined;
+        name: string;
+        id: string;
+        inputHash: string;
+        policyDecision: PermissionDecision['permission'];
+        effectiveDecision: PermissionDecision['permission'];
+        decisionSource: PermissionDecision['source'];
+        reason?: string | undefined;
+        riskTier?: RiskTier | undefined;
+        yoloEnabled: boolean;
+        boundaryDecision?: 'allow' | 'confirm' | 'block' | undefined;
+        boundaryReason?: string | undefined;
+        capabilityDowngraded: boolean;
+    };
     /**
      * Fired when a tool call needs confirmation
      * is registered on the executor. The TUI renders a confirmation dialog

package/dist/kernel/events/tool-events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-events.d.ts","sourceRoot":"","sources":["../../../src/kernel/events/tool-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAE1E,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE;QACd,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;KAC7B,CAAC;IACF;;;OAGG;IACH,gBAAgB,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF;;OAEG;IACH,aAAa,EAAE;QACb,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,iBAAiB,CAAC;QAC5B,SAAS,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACpC,CAAC;IACF;;;;OAIG;IACH,eAAe,EAAE;QACf,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,iBAAiB,CAAC;KAC1B,CAAC;IACF;;;;;OAKG;IACH,qBAAqB,EAAE;QACrB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,IAAI,EAAE,IAAI,CAAC;QACX,KAAK,EAAE,OAAO,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC;QAC1D,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;QAChC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,OAAO,EAAE,CAAC,QAAQ,EAAE,KAAK,GAAG,IAAI,GAAG,QAAQ,GAAG,MAAM,KAAK,IAAI,CAAC;KAC/D,CAAC;IACF;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,oBAAoB,EAAE;QACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,GAAG,EAAE,OAAO,CAAC;QACb,+FAA+F;QAC/F,KAAK,EAAE,MAAM,CAAC;QACd,qHAAqH;QACrH,WAAW,EAAE,MAAM,CAAC;QACpB,2DAA2D;QAC3D,SAAS,EAAE,MAAM,CAAC;QAClB;;;;;WAKG;QACH,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;QAChD;;;;;WAKG;QACH,MAAM,CAAC,EAAE,OAAO,GAAG,KAAK,GAAG,SAAS,CAAC;QACrC;;;;;WAKG;QACH,KAAK,CAAC,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAAC;KAC1C,CAAC;IACF;;;;OAIG;IACH,eAAe,EAAE;QACf,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B;;;;;;WAMG;QACH,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,EAAE,EAAE,OAAO,CAAC;QACZ,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC5B;;;;;;WAMG;QACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC;;;;gEAIwD;QACxD,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAClC;;;;wDAIgD;QAChD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC;;;;;WAKG;QACH,QAAQ,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;KAC3C,CAAC;IACF,sBAAsB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,wBAAwB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,yBAAyB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7D"}
+{"version":3,"file":"tool-events.d.ts","sourceRoot":"","sources":["../../../src/kernel/events/tool-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAE1E,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE;QACd,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;KAC7B,CAAC;IACF;;;OAGG;IACH,gBAAgB,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF;;OAEG;IACH,aAAa,EAAE;QACb,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,iBAAiB,CAAC;QAC5B,SAAS,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACpC,CAAC;IACF;;;;OAIG;IACH,eAAe,EAAE;QACf,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,iBAAiB,CAAC;KAC1B,CAAC;IACF;;;;;;OAMG;IACH,sBAAsB,EAAE;QACtB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACjD,iBAAiB,EAAE,kBAAkB,CAAC,YAAY,CAAC,CAAC;QACpD,cAAc,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC5B,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;QAChC,WAAW,EAAE,OAAO,CAAC;QACrB,gBAAgB,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;QAC7D,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,oBAAoB,EAAE,OAAO,CAAC;KAC/B,CAAC;IACF;;;;;OAKG;IACH,qBAAqB,EAAE;QACrB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,IAAI,EAAE,IAAI,CAAC;QACX,KAAK,EAAE,OAAO,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,gBAAgB,EAAE,MAAM,CAAC;QACzB,cAAc,CAAC,EAAE,kBAAkB,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC;QAC1D,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;QAChC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,OAAO,EAAE,CAAC,QAAQ,EAAE,KAAK,GAAG,IAAI,GAAG,QAAQ,GAAG,MAAM,KAAK,IAAI,CAAC;KAC/D,CAAC;IACF;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,oBAAoB,EAAE;QACpB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,GAAG,EAAE,OAAO,CAAC;QACb,+FAA+F;QAC/F,KAAK,EAAE,MAAM,CAAC;QACd,qHAAqH;QACrH,WAAW,EAAE,MAAM,CAAC;QACpB,2DAA2D;QAC3D,SAAS,EAAE,MAAM,CAAC;QAClB;;;;;WAKG;QACH,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;QAChD;;;;;WAKG;QACH,MAAM,CAAC,EAAE,OAAO,GAAG,KAAK,GAAG,SAAS,CAAC;QACrC;;;;;WAKG;QACH,KAAK,CAAC,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAAC;KAC1C,CAAC;IACF;;;;OAIG;IACH,eAAe,EAAE;QACf,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B;;;;;;WAMG;QACH,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,EAAE,EAAE,OAAO,CAAC;QACZ,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC5B;;;;;;WAMG;QACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC;;;;gEAIwD;QACxD,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAClC;;;;wDAIgD;QAChD,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC;;;;;WAKG;QACH,QAAQ,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;KAC3C,CAAC;IACF,sBAAsB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,wBAAwB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,yBAAyB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7D"}

package/dist/plugins/auto-review-plugin.d.ts

@@ -45,6 +45,16 @@ export interface ResolvedAutoReviewConfig {
     cascadeOn: 'off' | 'critical' | 'high';
     maxCascadeDepth: number;
 }
+/**
+ * Default reviewer rotation chain, used when the configured fallbackProfile is
+ * absent, unknown, or resolves to an empty chain. Without this, the reviewer
+ * would spawn against the bare session model with no fallback; if that model
+ * returns an empty response the subagent dies at 1 iter / 0 tools (surfaced as
+ * provider_auth). Kept in sync with the CLI-side default in
+ * packages/cli/src/execution.ts so both spawn seams share one safety net.
+ * Parsed downstream as `provider/model` refs.
+ */
+export declare const DEFAULT_REVIEW_FALLBACK_MODELS: readonly string[];
 export declare function resolveAutoReviewConfig(cfg: AutoReviewConfig, sessionConfig: Config): ResolvedAutoReviewConfig;
 export interface ParsedSeverities {
     critical: number;

package/dist/plugins/auto-review-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auto-review-plugin.d.ts","sourceRoot":"","sources":["../../src/plugins/auto-review-plugin.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,KAAK,EACV,gBAAgB,EAIjB,MAAM,qBAAqB,CAAC;AAO7B,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,oDAAoD;IACpD,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C;;;;;OAKG;IACH,SAAS,CAAC,EAAE,KAAK,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;IACpD;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,KAAK,GAAG,UAAU,GAAG,MAAM,CAAC;IACvC,eAAe,EAAE,MAAM,CAAC;CACzB;AAOD,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,gBAAgB,EACrB,aAAa,EAAE,MAAM,GACpB,wBAAwB,CAwB1B;AAMD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CA4BlE;AA6BD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,CAoBlG;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,KAAK,GAAG,UAAU,GAAG,MAAM,EACtC,UAAU,EAAE,gBAAgB,GAC3B,MAAM,GAAG,UAAU,GAAG,IAAI,CAK5B;AA4KD,wBAAgB,sBAAsB,IAAI,MAAM,CA4U/C"}
+{"version":3,"file":"auto-review-plugin.d.ts","sourceRoot":"","sources":["../../src/plugins/auto-review-plugin.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,KAAK,EACV,gBAAgB,EAIjB,MAAM,qBAAqB,CAAC;AAO7B,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,oDAAoD;IACpD,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C;;;;;OAKG;IACH,SAAS,CAAC,EAAE,KAAK,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;IACpD;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,KAAK,GAAG,UAAU,GAAG,MAAM,CAAC;IACvC,eAAe,EAAE,MAAM,CAAC;CACzB;AAOD;;;;;;;;GAQG;AACH,eAAO,MAAM,8BAA8B,EAAE,SAAS,MAAM,EAM3D,CAAC;AAEF,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,gBAAgB,EACrB,aAAa,EAAE,MAAM,GACpB,wBAAwB,CAiD1B;AAMD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CA4BlE;AA6BD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,CAoBlG;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,SAAS,EAAE,KAAK,GAAG,UAAU,GAAG,MAAM,EACtC,UAAU,EAAE,gBAAgB,GAC3B,MAAM,GAAG,UAAU,GAAG,IAAI,CAK5B;AA4KD,wBAAgB,sBAAsB,IAAI,MAAM,CA4U/C"}

package/dist/security/index.js

@@ -1859,6 +1859,136 @@ var DefaultPermissionPolicy = class {
     this.sessionAllowed.set(`${rule.tool}::${rule.pattern}`, true);
     this._evalCache.clear();
   }
+  /**
+   * Side-effect-free permission evaluation trace. Mirrors `evaluate()`
+   * step-by-step without prompting the user, writing to trust files, or
+   * mutating session state. Returns the full ordered trace and winner.
+   */
+  async explain(tool, input, ctx) {
+    if (!this.loaded) await this.reload();
+    const subject = subjectForToolInput(tool.name, input, tool.subjectKey);
+    const steps = [];
+    let winnerIndex = -1;
+    const add = (rule, matched, decision, source, detail) => {
+      steps.push({ rule, matched, decision, source, detail });
+    };
+    if (this.policyInvalid) {
+      add("policy invalid", true, "deny", "deny", "trust policy is invalid; all tools are denied");
+      winnerIndex = 0;
+      return { toolName: tool.name, subject, steps, winnerIndex, decision: { permission: "deny", source: "deny", reason: "trust policy is invalid" } };
+    }
+    add("policy valid", false, "auto", "default", "trust policy loaded successfully");
+    const namespaceEntry = this.findNamespaceEntry(tool.name);
+    const entry = this.policy[tool.name] ?? namespaceEntry;
+    const namespaceSource = namespaceEntry ? `wildcard entry matched (${Object.keys(this.policy).find((k) => k.includes("*") && matchGlob(k, tool.name))})` : "no namespace match";
+    const cacheKey = `${tool.name}::${subject ?? tool.name}`;
+    if (this.sessionDenied.has(cacheKey)) {
+      add("session soft deny", true, "deny", "deny", 'user pressed "no" earlier in this session \u2014 blocked until reload');
+      winnerIndex = steps.length - 1;
+      return { toolName: tool.name, subject, steps, winnerIndex, decision: { permission: "deny", source: "deny", reason: "session soft deny (user pressed no)" } };
+    }
+    add("session soft deny", false, "deny", "deny", "no session-level soft deny for this tool+subject");
+    if (this.sessionAllowed.has(cacheKey)) {
+      add("session soft allow", true, "auto", "trust", 'user pressed "yes" in current session \u2014 one-shot auto-approve (consumed)');
+      winnerIndex = steps.length - 1;
+      return { toolName: tool.name, subject, steps, winnerIndex, decision: { permission: "auto", source: "trust", reason: "session one-shot allow (user pressed yes)" } };
+    }
+    add("session soft allow", false, "auto", "trust", "no session-level one-shot allow for this tool+subject");
+    if (entry?.deny && subject && matchesTrust(entry.deny, subject)) {
+      add("trust deny", true, "deny", "deny", `subject "${subject}" matched a deny pattern in trust file`);
+      winnerIndex = steps.length - 1;
+      return { toolName: tool.name, subject, steps, winnerIndex, decision: { permission: "deny", source: "deny", reason: "matched deny pattern" } };
+    }
+    add("trust deny", false, "deny", "deny", `no deny pattern matched (namespace: ${namespaceSource})`);
+    if (tool.permission === "deny") {
+      add("tool default deny", true, "deny", "default", `tool "${tool.name}" has permission: deny by default`);
+      winnerIndex = steps.length - 1;
+      return { toolName: tool.name, subject, steps, winnerIndex, decision: { permission: "deny", source: "default", reason: "tool default deny" } };
+    }
+    add("tool default deny", false, "deny", "default", `tool "${tool.name}" has permission: "${tool.permission}"`);
+    if (entry?.allow && subject && matchesTrust(entry.allow, subject)) {
+      add("trust allow", true, "auto", "trust", `subject "${subject}" matched an allow pattern in trust file`);
+      winnerIndex = steps.length - 1;
+      return { toolName: tool.name, subject, steps, winnerIndex, decision: { permission: "auto", source: "trust", reason: "matched allow pattern" } };
+    }
+    add("trust allow", false, "auto", "trust", `no allow pattern matched (namespace: ${namespaceSource})`);
+    if (entry?.auto) {
+      add("trust auto", true, "auto", "trust", `trust file has auto: true for "${tool.name}"`);
+      winnerIndex = steps.length - 1;
+      return { toolName: tool.name, subject, steps, winnerIndex, decision: { permission: "auto", source: "trust", reason: "trust auto" } };
+    }
+    add("trust auto", false, "auto", "trust", `no auto flag for "${tool.name}" in trust file`);
+    if (!this.yolo && this.isSensitiveReadCall(tool, input)) {
+      const hasDelegate2 = this.promptDelegate !== void 0;
+      add(
+        "sensitive read",
+        true,
+        hasDelegate2 ? "confirm" : "confirm",
+        "default",
+        hasDelegate2 ? "sensitive file read detected \u2014 would prompt user for approval" : "sensitive file read detected \u2014 returns confirm (no prompt delegate)"
+      );
+      winnerIndex = steps.length - 1;
+      return { toolName: tool.name, subject, steps, winnerIndex, decision: { permission: "confirm", source: "default", riskTier: "standard", reason: "sensitive file read needs explicit approval" } };
+    }
+    add("sensitive read", false, "confirm", "default", "not a sensitive read call (or YOLO bypasses this check)");
+    if (this.yolo) {
+      add("yolo", true, "auto", "yolo", "YOLO mode is active \u2014 auto-approving every non-denied call");
+      winnerIndex = steps.length - 1;
+      return { toolName: tool.name, subject, steps, winnerIndex, decision: { permission: "auto", source: "yolo" } };
+    }
+    add("yolo", false, "auto", "yolo", "YOLO mode is not active");
+    if (tool.name === "write" && subject) {
+      const hasRead = ctx.hasRead(subject);
+      add(
+        "write smart bypass",
+        hasRead,
+        "auto",
+        "context",
+        hasRead ? `file "${subject}" was already read in this session \u2014 auto-approving write` : `file "${subject}" was not read in this session \u2014 bypass does not apply`
+      );
+      if (hasRead) {
+        winnerIndex = steps.length - 1;
+        return { toolName: tool.name, subject, steps, winnerIndex, decision: { permission: "auto", source: "context", reason: "file already read in this session" } };
+      }
+    } else {
+      add("write smart bypass", false, "auto", "context", 'tool is not "write" or has no subject \u2014 bypass does not apply');
+    }
+    const hasWriteCap = hasCapability(tool, ToolCapabilities.FS_WRITE);
+    const hasShellCap = hasCapability(tool, [
+      ToolCapabilities.SHELL_ARBITRARY,
+      ToolCapabilities.SHELL_RESTRICTED,
+      ToolCapabilities.SHELL_EXEC
+    ]);
+    const hasInstallCap = hasCapability(tool, ToolCapabilities.PACKAGE_INSTALL);
+    const hasConfigCap = hasCapability(tool, ToolCapabilities.CONFIG_MUTATE);
+    const hasSubagentCap = hasCapability(tool, ToolCapabilities.SUBAGENT_SPAWN);
+    const isMutating = tool.mutating || hasWriteCap || hasShellCap || hasInstallCap || hasConfigCap || hasSubagentCap;
+    if (tool.permission === "auto" && !isMutating) {
+      add("safe default auto", true, "auto", "default", `tool "${tool.name}" has auto permission and is not mutating \u2014 safe to auto-approve`);
+      winnerIndex = steps.length - 1;
+      return { toolName: tool.name, subject, steps, winnerIndex, decision: { permission: "auto", source: "default" } };
+    }
+    add(
+      "mutating default confirm",
+      true,
+      "confirm",
+      "default",
+      isMutating ? `tool "${tool.name}" is mutating (default auto not enough) \u2014 needs confirmation` : `tool "${tool.name}" has "${tool.permission}" permission \u2014 needs confirmation`
+    );
+    winnerIndex = steps.length - 1;
+    const hasDelegate = this.promptDelegate !== void 0;
+    return {
+      toolName: tool.name,
+      subject,
+      steps,
+      winnerIndex,
+      decision: {
+        permission: "confirm",
+        source: "default",
+        ...hasDelegate ? { reason: "would prompt user via delegate" } : {}
+      }
+    };
+  }
   findNamespaceEntry(toolName) {
     for (const { pattern, value } of this.wildcardEntries) {
       if (matchGlob(pattern, toolName)) return value;
@@ -1904,6 +2034,24 @@ var AutoApprovePermissionPolicy = class _AutoApprovePermissionPolicy {
   }
   allowOnce() {
   }
+  async explain(tool) {
+    const decision = await this.evaluate(tool);
+    return {
+      toolName: tool.name,
+      subject: null,
+      steps: [
+        {
+          rule: "subagent auto",
+          matched: decision.permission === "auto",
+          decision: decision.permission,
+          source: decision.source,
+          detail: decision.reason ?? `subagent policy: ${decision.permission}`
+        }
+      ],
+      winnerIndex: 0,
+      decision
+    };
+  }
   async reload() {
   }
 };