auto-mode 0.5.0 → 0.6.0

package/README.md

@@ -59,8 +59,9 @@ assessment.
 ## Decisions and failures
 
 Jev evaluates each named rule with a typed choice. auto-mode returns a denial for a confident block,
-approval when every rule confidently allows the action, and manual approval for uncertain decisions.
-The confidence threshold is configurable and needs evaluation against your actions.
+approval when every rule confidently allows the action, and a denial for uncertain decisions. Every
+denial names its rule, the harm, and what clears it, and the agent continues on another path. The
+confidence threshold is configurable and needs evaluation against your actions.
 
 A missing key, failed API call, malformed response, or oversized request follows `onFailure`. The
 default `defer` writes no verdict and keeps the prompt; `deny` fails closed. Failures write a

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { n as parseActionRequest, r as classifyAction, s as loadPolicy, t as renderVerdict, u as loadConfig } from "./render-verdict-FdG6gahX.js";
+import { n as parseActionRequest, r as classifyAction, s as loadPolicy, t as renderVerdict, u as loadConfig } from "./render-verdict-9pnm4JBS.js";
 import { appendFile, mkdir } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
@@ -138,8 +138,7 @@ async function run(explain, localOnly, jevOnly, deadline) {
 	}
 }
 function writeVerdict(verdict) {
-	const rendered = renderVerdict(verdict);
-	if (rendered !== null) process.stdout.write(rendered);
+	process.stdout.write(renderVerdict(verdict));
 }
 function printNote(explain, message) {
 	if (explain) process.stderr.write(`auto-mode: ${message}\n`);

package/dist/index.d.ts

@@ -57,8 +57,6 @@ interface ActionRequest {
 }
 type Verdict = {
   readonly kind: 'allow';
-} | {
-  readonly kind: 'ask';
 } | {
   readonly kind: 'deny';
   readonly rule: string;
@@ -80,7 +78,7 @@ interface DecisionAnswer {
 }
 type DecisionFailureReason = 'request-too-large' | 'aborted' | 'network' | 'http-status' | 'invalid-response';
 interface DecisionDiagnostics {
-  readonly status: 'allow' | 'deny' | 'ask' | 'failure' | 'timeout' | 'cancelled';
+  readonly status: 'allow' | 'deny' | 'failure' | 'timeout' | 'cancelled';
   readonly stage: 'credential' | 'evidence' | 'request' | 'response';
   readonly keyResolved: boolean;
   readonly keySource: 'environment' | 'command' | 'none';
@@ -134,7 +132,7 @@ export declare function loadPolicy(paths?: PolicyPaths, framework?: 'classifier.
 export declare function parseActionRequest(body: unknown): ActionRequest | null;
 //#endregion
 //#region src/request/render-verdict.d.ts
-export declare function renderVerdict(verdict: Verdict): string | null;
+export declare function renderVerdict(verdict: Verdict): string;
 //#endregion
 //#region src/rules/classify-locally.d.ts
 type LocalVerdict = {

package/dist/index.js

@@ -1,2 +1,2 @@
-import { a as classifyWithModel, c as DEFAULT_CONFIG, d as resolveApiKey, f as resolveConfigPath, i as classifyLocally, l as PRESETS, n as parseActionRequest, o as parseModelVerdict, r as classifyAction, s as loadPolicy, t as renderVerdict, u as loadConfig } from "./render-verdict-FdG6gahX.js";
+import { a as classifyWithModel, c as DEFAULT_CONFIG, d as resolveApiKey, f as resolveConfigPath, i as classifyLocally, l as PRESETS, n as parseActionRequest, o as parseModelVerdict, r as classifyAction, s as loadPolicy, t as renderVerdict, u as loadConfig } from "./render-verdict-9pnm4JBS.js";
 export { DEFAULT_CONFIG, PRESETS, classifyAction, classifyLocally, classifyWithModel, loadConfig, loadPolicy, parseActionRequest, parseModelVerdict, renderVerdict, resolveApiKey, resolveConfigPath };

package/dist/{render-verdict-FdG6gahX.js → render-verdict-9pnm4JBS.js}

@@ -5739,25 +5739,27 @@ function resolveApiKey(provider, options = {}) {
 	return readApiKeyFromCommand(provider.apiKeyCommand, options);
 }
 //#endregion
+//#region src/policy/resolve-shipped-policy-dir.ts
+function resolveShippedPolicyDir() {
+	let dir = import.meta.dirname;
+	for (;;) {
+		if (existsSync(join(dir, "policy", "classifier.md"))) return join(dir, "policy");
+		const parent = dirname(dir);
+		if (parent === dir || dir === parse(dir).root) throw new Error("auto-mode cannot find its shipped policy/ directory");
+		dir = parent;
+	}
+}
+//#endregion
 //#region src/policy/load-policy.ts
 const RULES_MARKER = "<rules>";
 async function loadPolicy(paths = {}, framework = "classifier.md") {
-	const shipped = findShippedPolicyDir();
+	const shipped = resolveShippedPolicyDir();
 	const classifierPath = paths.classifierPath ?? join(shipped, framework);
 	const rulesPath = paths.rulesPath ?? join(shipped, "rules.md");
 	const [classifier, rules] = await Promise.all([readFile(classifierPath, "utf8"), readFile(rulesPath, "utf8")]);
 	if (!classifier.includes(RULES_MARKER)) throw new Error(`${classifierPath} has no ${RULES_MARKER} line, so the rules cannot be placed`);
 	return classifier.replace(RULES_MARKER, rules.trim());
 }
-function findShippedPolicyDir() {
-	let dir = import.meta.dirname;
-	for (;;) {
-		if (existsSync(join(dir, "policy", "classifier.md"))) return join(dir, "policy");
-		const parent = dirname(dir);
-		if (parent === dir || dir === parse(dir).root) throw new Error("auto-mode cannot find its shipped policy/ directory");
-		dir = parent;
-	}
-}
 //#endregion
 //#region src/model/anthropic-client.ts
 async function sendMessage(provider, apiKey, request) {
@@ -5946,12 +5948,38 @@ function buildEvidenceGuidance(name) {
 	return "";
 }
 //#endregion
+//#region src/model/classify-decision-answers.ts
+function classifyDecisionAnswers(request, result, minConfidence) {
+	const entries = Object.entries(request.rules).map(([id, rule]) => {
+		const answer = result.answers[id];
+		if (answer === void 0) throw new Error("Decision answer missing");
+		return {
+			rule,
+			answer
+		};
+	});
+	for (const tier of ["hard", "soft"]) for (const entry of entries) if (entry.rule.tier === tier && entry.answer.choice === "block" && entry.answer.confidence >= minConfidence && entry.answer.probabilities.block >= minConfidence) return {
+		kind: "block",
+		rule: entry.rule
+	};
+	let uncertain = null;
+	for (const entry of entries) {
+		const answer = entry.answer;
+		if (!(answer.choice === "allow" && answer.confidence >= minConfidence && answer.probabilities.allow >= minConfidence) && (uncertain === null || answer.probabilities.block > uncertain.answer.probabilities.block)) uncertain = entry;
+	}
+	return uncertain === null ? { kind: "allow" } : {
+		kind: "uncertain",
+		rule: uncertain.rule
+	};
+}
+//#endregion
 //#region src/model/collect-decision-contributors.ts
-function collectDecisionContributors(request, result, verdict, minConfidence) {
+function collectDecisionContributors(request, result, minConfidence) {
+	const decision = classifyDecisionAnswers(request, result, minConfidence);
 	return Object.entries(request.rules).flatMap(([id, rule]) => {
 		const answer = result.answers[id];
 		if (answer === void 0) throw new Error("Decision answer missing");
-		return (verdict.kind === "deny" ? rule.name === verdict.rule : verdict.kind === "ask" && (answer.choice !== "allow" || answer.confidence < minConfidence || answer.probabilities.allow < minConfidence)) ? [{
+		return (decision.kind === "block" ? rule === decision.rule : decision.kind === "uncertain" && (answer.choice !== "allow" || answer.confidence < minConfidence || answer.probabilities.allow < minConfidence)) ? [{
 			rule: rule.source === "shipped" ? rule.name : id,
 			source: rule.source,
 			tier: rule.tier,
@@ -6041,206 +6069,583 @@ function parseReference(content, prefix) {
 	return branch !== "" && branch.length <= 256 && !/\s/u.test(branch) ? branch : null;
 }
 //#endregion
-//#region src/model/pick-decision-verdict.ts
-function pickDecisionVerdict(request, result, minConfidence) {
-	const entries = Object.entries(request.rules);
-	for (const tier of ["hard", "soft"]) for (const [id, rule] of entries) {
-		const answer = result.answers[id];
-		if (answer === void 0) throw new Error("Decision answer missing");
-		if (rule.tier === tier && answer.choice === "block" && answer.confidence >= minConfidence && answer.probabilities.block >= minConfidence) return {
-			kind: "deny",
-			rule: rule.name,
-			reason: `The action matches ${rule.name}.`
-		};
-	}
-	for (const [id] of entries) {
-		const answer = result.answers[id];
-		if (answer === void 0) throw new Error("Decision answer missing");
-		if (answer.choice !== "allow" || answer.confidence < minConfidence || answer.probabilities.allow < minConfidence) return { kind: "ask" };
-	}
-	return { kind: "allow" };
-}
-//#endregion
-//#region src/model/send-decision.ts
-async function sendDecision(provider, apiKey, request, signal) {
-	const input = {
-		model: provider.model,
-		state: { ...request.state },
-		questions: request.questions
-	};
-	let body = JSON.stringify(input);
-	for (const field of ["delegatedTask", "originalUserTask"]) {
-		const context = input.state.taskContext;
-		if (Buffer.byteLength(body) <= 1e5 || context === void 0 || context[field] === null) continue;
-		input.state.taskContext = {
-			...context,
-			[field]: null,
-			omittedTaskContext: [...context.omittedTaskContext.filter((item) => item.field !== field), {
-				field,
-				reason: "budget"
-			}]
-		};
-		body = JSON.stringify(input);
+//#region node_modules/.bun/ts-pattern@5.9.0/node_modules/ts-pattern/dist/index.js
+const t = Symbol.for("@ts-pattern/matcher");
+const e = Symbol.for("@ts-pattern/isVariadic");
+const n = "@ts-pattern/anonymous-select-key";
+const r = (t) => Boolean(t && "object" == typeof t);
+const i = (e) => e && !!e[t];
+const o = (n, s, c) => {
+	if (i(n)) {
+		const { matched: r, selections: i } = n[t]().match(s);
+		return r && i && Object.keys(i).forEach((t) => c(t, i[t])), r;
 	}
-	const requestBytes = Buffer.byteLength(body);
-	if (requestBytes > 1e5) throw new DecisionRequestError("request-too-large", requestBytes, "Decision input exceeds 100000 bytes; refusing to truncate the action or user message");
-	const controller = new AbortController();
-	const stopRequest = () => {
-		controller.abort();
-	};
-	signal?.addEventListener("abort", stopRequest, { once: true });
-	if (signal?.aborted === true) controller.abort();
-	const timer = setTimeout(() => {
-		controller.abort();
-	}, provider.timeoutMs);
-	try {
-		let response;
-		try {
-			response = await fetch(`${provider.baseURL.replace(/\/$/, "")}/v1/systemone`, {
-				method: "POST",
-				signal: controller.signal,
-				headers: {
-					"content-type": "application/json",
-					authorization: `Bearer ${apiKey}`
-				},
-				body
-			});
-		} catch (error) {
-			if (error instanceof Error && error.name === "AbortError") throw new DecisionRequestError("aborted", requestBytes, "Decision request aborted", { cause: error });
-			throw new DecisionRequestError("network", requestBytes, "Decision API request failed");
+	if (r(n)) {
+		if (!r(s)) return !1;
+		if (Array.isArray(n)) {
+			if (!Array.isArray(s)) return !1;
+			let t = [], r = [], u = [];
+			for (const o of n.keys()) {
+				const s = n[o];
+				i(s) && s[e] ? u.push(s) : u.length ? r.push(s) : t.push(s);
+			}
+			if (u.length) {
+				if (u.length > 1) throw new Error("Pattern error: Using `...P.array(...)` several times in a single pattern is not allowed.");
+				if (s.length < t.length + r.length) return !1;
+				const e = s.slice(0, t.length), n = 0 === r.length ? [] : s.slice(-r.length), i = s.slice(t.length, 0 === r.length ? Infinity : -r.length);
+				return t.every((t, n) => o(t, e[n], c)) && r.every((t, e) => o(t, n[e], c)) && (0 === u.length || o(u[0], i, c));
+			}
+			return n.length === s.length && n.every((t, e) => o(t, s[e], c));
 		}
-		if (!response.ok) throw new DecisionRequestError("http-status", requestBytes, `Decision API returned HTTP ${response.status}`);
-		const probability = number().min(0).max(1);
-		const answer = object({
-			type: literal("choice"),
-			choice: _enum([
-				"allow",
-				"block",
-				"ask"
-			]),
-			confidence: probability,
-			probabilities: strictObject({
-				allow: probability,
-				block: probability,
-				ask: probability
-			})
-		});
-		const schema = object({
-			model: string().min(1),
-			answers: record(string(), answer),
-			usage: object({ input_tokens: number().int().nonnegative() })
+		return Reflect.ownKeys(n).every((e) => {
+			const r = n[e];
+			return (e in s || i(u = r) && "optional" === u[t]().matcherType) && o(r, s[e], c);
+			var u;
 		});
-		let responseBody;
-		try {
-			responseBody = await response.json();
-		} catch (error) {
-			if (error instanceof Error && error.name === "AbortError") throw new DecisionRequestError("aborted", requestBytes, "Decision request aborted", { cause: error });
-			throw new DecisionRequestError("invalid-response", requestBytes, "Decision API returned invalid JSON");
-		}
-		const parsedResponse = schema.safeParse(responseBody);
-		if (!parsedResponse.success) throw new DecisionRequestError("invalid-response", requestBytes, "Decision API returned a malformed response");
-		const parsed = parsedResponse.data;
-		if (Object.keys(parsed.answers).length !== Object.keys(request.questions).length) throw new DecisionRequestError("invalid-response", requestBytes, "Decision API returned an incomplete answer set");
-		for (const id of Object.keys(request.questions)) {
-			const value = parsed.answers[id];
-			if (value === void 0) throw new DecisionRequestError("invalid-response", requestBytes, "Decision API omitted a requested answer");
-			const distribution = Object.values(value.probabilities);
-			if (Math.abs(distribution.reduce((sum, p) => sum + p, 0) - 1) > .010000001 || value.probabilities[value.choice] < Math.max(...distribution)) throw new DecisionRequestError("invalid-response", requestBytes, "Decision API returned invalid probabilities");
-		}
-		return {
-			model: parsed.model,
-			answers: parsed.answers,
-			inputTokens: parsed.usage.input_tokens,
-			requestBytes
-		};
-	} finally {
-		clearTimeout(timer);
-		signal?.removeEventListener("abort", stopRequest);
 	}
+	return Object.is(s, n);
+};
+const s = (e) => {
+	var n, o, u;
+	return r(e) ? i(e) ? null != (n = null == (o = (u = e[t]()).getSelectionKeys) ? void 0 : o.call(u)) ? n : [] : Array.isArray(e) ? c(e, s) : c(Object.values(e), s) : [];
+};
+const c = (t, e) => t.reduce((t, n) => t.concat(e(n)), []);
+function a(t) {
+	return Object.assign(t, {
+		optional: () => h(t),
+		and: (e) => d(t, e),
+		or: (e) => y(t, e),
+		select: (e) => void 0 === e ? v(t) : v(e, t)
+	});
 }
-//#endregion
-//#region src/model/classify-with-jev.ts
-async function classifyWithJev(payload, config, options = {}) {
-	const start = performance.now();
-	let key = null;
-	let stage = "credential";
-	const minConfidence = config.minConfidence ?? .8;
-	let keySource = "none";
-	const envKey = config.provider.apiKeyEnv === void 0 ? void 0 : process.env[config.provider.apiKeyEnv];
-	if (envKey !== void 0 && envKey !== "") keySource = "environment";
-	else if (config.provider.apiKeyCommand !== void 0 && config.provider.apiKeyCommand !== "") keySource = "command";
-	try {
-		key = await resolveApiKey(config.provider, options);
-		if (key === null) throw new Error("no API key: set the configured environment variable or key command");
-		stage = "evidence";
-		const directUserText = payload.decisionContext?.agentID === null ? payload.decisionContext.lastDirectUserMessage?.text ?? null : null;
-		const command = payload.toolInput["command"] ?? payload.toolInput["cmd"];
-		const hasGitCommand = typeof command === "string" && /\bgit\s/u.test(command);
-		const isFileEdit = payload.toolName === "Write" || payload.toolName === "Edit";
-		const needsRepositoryContext = hasGitCommand || isFileEdit;
-		const [policy, rules, repositoryContext] = await Promise.all([
-			loadPolicy({
-				classifierPath: config.classifierPath,
-				rulesPath: config.rulesPath
-			}, "decision.md"),
-			loadClaudeRules(config.claudeSettingsPath),
-			needsRepositoryContext ? loadRepositoryContext(payload.cwd) : Promise.resolve(null)
-		]);
-		const request = buildDecisionRequest(payload, policy, rules, directUserText, config.rulesPath === void 0 ? "shipped" : "replacement", repositoryContext);
-		const remainingMs = options.deadlineAt === void 0 ? config.provider.timeoutMs : options.deadlineAt - Date.now();
-		if (remainingMs <= 0 || options.signal?.aborted === true) throw new DOMException("Evaluation deadline expired", "AbortError");
-		const provider = {
-			...config.provider,
-			timeoutMs: Math.min(config.provider.timeoutMs, remainingMs)
-		};
-		stage = "request";
-		const result = await sendDecision(provider, key, request, options.signal);
-		stage = "response";
-		const verdict = pickDecisionVerdict(request, result, minConfidence);
-		return {
-			verdict,
-			diagnostics: {
-				status: verdict.kind,
-				stage,
-				keyResolved: true,
-				keySource,
-				failureReason: null,
-				requestBytes: result.requestBytes,
-				elapsedMs: Math.round(performance.now() - start),
-				minConfidence,
-				contributors: collectDecisionContributors(request, result, verdict, minConfidence)
-			},
-			note: formatClassifierNote(`${config.provider.model}: ${verdict.kind} (${Math.round(performance.now() - start)}ms, ${result.inputTokens} input tokens)`, key)
-		};
-	} catch (error) {
-		let reason = "classifier failed";
-		let status = "failure";
-		if (options.signal?.aborted === true) {
-			reason = "evaluation cancelled";
-			status = "cancelled";
-		} else if (options.deadlineAt !== void 0 && Date.now() >= options.deadlineAt) {
-			reason = "evaluation deadline expired";
-			status = "timeout";
-		} else if (error instanceof Error) {
-			const isTimeout = error.name === "AbortError" || error instanceof DecisionRequestError && error.reason === "aborted";
-			if (isTimeout) status = "timeout";
-			reason = isTimeout ? `timed out after ${config.provider.timeoutMs}ms` : error.message;
-		}
-		const note = formatClassifierNote(`${config.provider.model} unavailable: ${reason}`, key);
-		return {
-			verdict: config.onFailure === "deny" ? {
-				kind: "deny",
-				rule: "Classifier Unavailable",
-				reason: note
-			} : null,
-			note,
-			unavailable: true,
-			diagnostics: {
-				status,
-				stage,
-				keyResolved: key !== null,
-				keySource,
-				failureReason: error instanceof DecisionRequestError ? error.reason : null,
+function h(e) {
+	return a({ [t]: () => ({
+		match: (t) => {
+			let n = {};
+			const r = (t, e) => {
+				n[t] = e;
+			};
+			return void 0 === t ? (s(e).forEach((t) => r(t, void 0)), {
+				matched: !0,
+				selections: n
+			}) : {
+				matched: o(e, t, r),
+				selections: n
+			};
+		},
+		getSelectionKeys: () => s(e),
+		matcherType: "optional"
+	}) });
+}
+function d(...e) {
+	return a({ [t]: () => ({
+		match: (t) => {
+			let n = {};
+			const r = (t, e) => {
+				n[t] = e;
+			};
+			return {
+				matched: e.every((e) => o(e, t, r)),
+				selections: n
+			};
+		},
+		getSelectionKeys: () => c(e, s),
+		matcherType: "and"
+	}) });
+}
+function y(...e) {
+	return a({ [t]: () => ({
+		match: (t) => {
+			let n = {};
+			const r = (t, e) => {
+				n[t] = e;
+			};
+			return c(e, s).forEach((t) => r(t, void 0)), {
+				matched: e.some((e) => o(e, t, r)),
+				selections: n
+			};
+		},
+		getSelectionKeys: () => c(e, s),
+		matcherType: "or"
+	}) });
+}
+function p(e) {
+	return { [t]: () => ({ match: (t) => ({ matched: Boolean(e(t)) }) }) };
+}
+function v(...e) {
+	const r = "string" == typeof e[0] ? e[0] : void 0, i = 2 === e.length ? e[1] : "string" == typeof e[0] ? void 0 : e[0];
+	return a({ [t]: () => ({
+		match: (t) => {
+			let e = { [null != r ? r : n]: t };
+			return {
+				matched: void 0 === i || o(i, t, (t, n) => {
+					e[t] = n;
+				}),
+				selections: e
+			};
+		},
+		getSelectionKeys: () => [null != r ? r : n].concat(void 0 === i ? [] : s(i))
+	}) });
+}
+function b(t) {
+	return !0;
+}
+function w(t) {
+	return "number" == typeof t;
+}
+function S(t) {
+	return "string" == typeof t;
+}
+function j(t) {
+	return "bigint" == typeof t;
+}
+a(p(b));
+a(p(b));
+const x = (t) => Object.assign(a(t), {
+	startsWith: (e) => {
+		return x(d(t, (n = e, p((t) => S(t) && t.startsWith(n)))));
+		var n;
+	},
+	endsWith: (e) => {
+		return x(d(t, (n = e, p((t) => S(t) && t.endsWith(n)))));
+		var n;
+	},
+	minLength: (e) => x(d(t, ((t) => p((e) => S(e) && e.length >= t))(e))),
+	length: (e) => x(d(t, ((t) => p((e) => S(e) && e.length === t))(e))),
+	maxLength: (e) => x(d(t, ((t) => p((e) => S(e) && e.length <= t))(e))),
+	includes: (e) => {
+		return x(d(t, (n = e, p((t) => S(t) && t.includes(n)))));
+		var n;
+	},
+	regex: (e) => {
+		return x(d(t, (n = e, p((t) => S(t) && Boolean(t.match(n))))));
+		var n;
+	}
+});
+x(p(S));
+const N = (t) => Object.assign(a(t), {
+	between: (e, n) => N(d(t, ((t, e) => p((n) => w(n) && t <= n && e >= n))(e, n))),
+	lt: (e) => N(d(t, ((t) => p((e) => w(e) && e < t))(e))),
+	gt: (e) => N(d(t, ((t) => p((e) => w(e) && e > t))(e))),
+	lte: (e) => N(d(t, ((t) => p((e) => w(e) && e <= t))(e))),
+	gte: (e) => N(d(t, ((t) => p((e) => w(e) && e >= t))(e))),
+	int: () => N(d(t, p((t) => w(t) && Number.isInteger(t)))),
+	finite: () => N(d(t, p((t) => w(t) && Number.isFinite(t)))),
+	positive: () => N(d(t, p((t) => w(t) && t > 0))),
+	negative: () => N(d(t, p((t) => w(t) && t < 0)))
+});
+N(p(w));
+const k = (t) => Object.assign(a(t), {
+	between: (e, n) => k(d(t, ((t, e) => p((n) => j(n) && t <= n && e >= n))(e, n))),
+	lt: (e) => k(d(t, ((t) => p((e) => j(e) && e < t))(e))),
+	gt: (e) => k(d(t, ((t) => p((e) => j(e) && e > t))(e))),
+	lte: (e) => k(d(t, ((t) => p((e) => j(e) && e <= t))(e))),
+	gte: (e) => k(d(t, ((t) => p((e) => j(e) && e >= t))(e))),
+	positive: () => k(d(t, p((t) => j(t) && t > 0))),
+	negative: () => k(d(t, p((t) => j(t) && t < 0)))
+});
+k(p(j)), a(p(function(t) {
+	return "boolean" == typeof t;
+})), a(p(function(t) {
+	return "symbol" == typeof t;
+})), a(p(function(t) {
+	return null == t;
+})), a(p(function(t) {
+	return null != t;
+}));
+var I = class extends Error {
+	constructor(t) {
+		let e;
+		try {
+			e = JSON.stringify(t);
+		} catch (n) {
+			e = t;
+		}
+		super(`Pattern matching error: no pattern matches value ${e}`), this.input = void 0, this.input = t;
+	}
+};
+const L = {
+	matched: !1,
+	value: void 0
+};
+function M(t) {
+	return new R(t, L);
+}
+var R = class R {
+	constructor(t, e) {
+		this.input = void 0, this.state = void 0, this.input = t, this.state = e;
+	}
+	with(...t) {
+		if (this.state.matched) return this;
+		const e = t[t.length - 1], r = [t[0]];
+		let i;
+		3 === t.length && "function" == typeof t[1] ? i = t[1] : t.length > 2 && r.push(...t.slice(1, t.length - 1));
+		let s = !1, c = {};
+		const u = (t, e) => {
+			s = !0, c[t] = e;
+		}, a = !r.some((t) => o(t, this.input, u)) || i && !Boolean(i(this.input)) ? L : {
+			matched: !0,
+			value: e(s ? n in c ? c[n] : c : this.input, this.input)
+		};
+		return new R(this.input, a);
+	}
+	when(t, e) {
+		if (this.state.matched) return this;
+		const n = Boolean(t(this.input));
+		return new R(this.input, n ? {
+			matched: !0,
+			value: e(this.input, this.input)
+		} : L);
+	}
+	otherwise(t) {
+		return this.state.matched ? this.state.value : t(this.input);
+	}
+	exhaustive(t = F) {
+		return this.state.matched ? this.state.value : t(this.input);
+	}
+	run() {
+		return this.exhaustive();
+	}
+	returnType() {
+		return this;
+	}
+	narrow() {
+		return this;
+	}
+};
+function F(t) {
+	throw new I(t);
+}
+//#endregion
+//#region src/policy/deny-reasons.ts
+const DENY_REASONS = {
+	"Data Exfiltration": {
+		tier: "hard",
+		harm: "sending sensitive data, such as credentials or private code, off the machine",
+		clears: "No instruction or configuration clears this rule."
+	},
+	"Secret Persistence": {
+		tier: "hard",
+		harm: "writing a credential in plain text into a tracked file, an image, CI configuration, or a shipped log",
+		clears: "No instruction or configuration clears this rule."
+	},
+	"Policy Tampering": {
+		tier: "hard",
+		harm: "changing auto-mode's own configuration, policy, or hook, or the settings that decide whether it runs",
+		clears: "Only a direct user message that explains why this match is wrong clears it; bare consent does not."
+	},
+	"Audit Tampering": {
+		tier: "hard",
+		harm: "deleting or rewriting logs, shell history, audit records, or git history to hide what happened",
+		clears: "Only a direct user message that explains why this match is wrong clears it; bare consent does not."
+	},
+	"Destructive Payload": {
+		tier: "hard",
+		harm: "writing or running code whose purpose is damage or spread",
+		clears: "No instruction or configuration clears this rule."
+	},
+	"Irreversible Deletion": {
+		tier: "soft",
+		harm: "deleting data that no backup, remote, or build step can restore",
+		clears: "A direct user instruction that asks for this deletion and names the path clears it."
+	},
+	"Uncommitted Work Destruction": {
+		tier: "soft",
+		harm: "discarding working-tree changes that exist nowhere else",
+		clears: "A direct user instruction that says those changes go away clears it."
+	},
+	"History Rewrite": {
+		tier: "soft",
+		harm: "rewriting history that others may already hold",
+		clears: "A direct user instruction that names the force push, the rewrite, or the remote branch clears it."
+	},
+	"Default Branch Write": {
+		tier: "soft",
+		harm: "committing, pushing, or merging directly to the default branch",
+		clears: "A direct user instruction that names the branch clears it."
+	},
+	"Publish and Release": {
+		tier: "soft",
+		harm: "putting an artifact where other people install it",
+		clears: "A direct user instruction that says publish, release, or deploy and names the target clears it."
+	},
+	"Outbound Communication": {
+		tier: "soft",
+		harm: "sending content that reaches another person",
+		clears: "A direct user instruction that says the message is sent, and to whom or where, clears it."
+	},
+	"Remote Code Execution": {
+		tier: "soft",
+		harm: "running code fetched from a source the user did not name",
+		clears: "A direct user instruction that names the source clears it."
+	},
+	"Obfuscated Command": {
+		tier: "soft",
+		harm: "running a command whose payload cannot be read",
+		clears: "A direct user message that supplies the decoded command or states what it runs clears it."
+	},
+	"Network Exposure": {
+		tier: "soft",
+		harm: "making this machine or its files reachable from outside it",
+		clears: "A direct user instruction that names the service and says it becomes reachable clears it."
+	},
+	"Unnamed Destination": {
+		tier: "soft",
+		harm: "sending content to a network destination the user never named",
+		clears: "A direct user instruction that names the destination clears it."
+	},
+	"Shared Infrastructure": {
+		tier: "soft",
+		harm: "changing a cluster, a cloud account, a remote host, or a repository's settings",
+		clears: "A direct user instruction that names the environment or the resource clears it."
+	},
+	"Destructive Database Operation": {
+		tier: "soft",
+		harm: "deleting or overwriting stored data wholesale in a database that is not local",
+		clears: "A direct user instruction that names the table or the database, and the operation, clears it."
+	},
+	"Persistent Configuration": {
+		tier: "soft",
+		harm: "a change that outlives the session or widens access on this machine",
+		clears: "A direct user instruction that names the file or the setting clears it."
+	},
+	"Credential Exploration": {
+		tier: "soft",
+		harm: "reading or searching for credentials the task never called for",
+		clears: "A direct user instruction that names the file or the search clears it."
+	},
+	"Interrupted Action Retry": {
+		tier: "soft",
+		harm: "running again an action the user interrupted",
+		clears: "A direct user instruction that asks for the action to run again clears it."
+	},
+	"Security Control Removal": {
+		tier: "soft",
+		harm: "removing a control that protects someone other than the agent",
+		clears: "A direct user instruction that names the control clears it."
+	},
+	"Mass Modification": {
+		tier: "soft",
+		harm: "changing many things at once with no way to restore them",
+		clears: "A direct user instruction that names the scope clears it."
+	}
+};
+//#endregion
+//#region src/policy/build-deny-reason.ts
+function buildDenyReason(rule, basis) {
+	const template = getReasonTemplate(rule);
+	return `${basis === "matched" ? `The action matches this rule: ${template.harm}.` : `The supplied evidence cannot rule out ${template.harm}.`} ${template.clears}`;
+}
+function getReasonTemplate(rule) {
+	return M(rule.source).with("shipped", () => {
+		const template = DENY_REASONS[rule.name];
+		if (template === void 0) throw new Error(`No deny reason for the shipped rule ${rule.name}`);
+		return template;
+	}).with("configured", () => rule.tier === "hard" ? {
+		harm: "an action that a hard deny entry in the user's auto-mode configuration covers",
+		clears: "Only a change to that configuration clears it."
+	} : {
+		harm: "an action that a soft deny entry in the user's auto-mode configuration covers",
+		clears: "A direct user instruction that asks for this specific action clears it."
+	}).with("replacement", () => ({
+		harm: "the harm this rule of the configured replacement policy describes",
+		clears: "The replacement policy defines what clears it."
+	})).exhaustive();
+}
+//#endregion
+//#region src/model/pick-decision-verdict.ts
+function pickDecisionVerdict(request, result, minConfidence) {
+	return M(classifyDecisionAnswers(request, result, minConfidence)).with({ kind: "allow" }, () => ({ kind: "allow" })).with({ kind: "block" }, (decision) => ({
+		kind: "deny",
+		rule: decision.rule.name,
+		reason: buildDenyReason(decision.rule, "matched")
+	})).with({ kind: "uncertain" }, (decision) => ({
+		kind: "deny",
+		rule: decision.rule.name,
+		reason: buildDenyReason(decision.rule, "unresolved")
+	})).exhaustive();
+}
+//#endregion
+//#region src/model/send-decision.ts
+async function sendDecision(provider, apiKey, request, signal) {
+	const input = {
+		model: provider.model,
+		state: { ...request.state },
+		questions: request.questions
+	};
+	let body = JSON.stringify(input);
+	for (const field of ["delegatedTask", "originalUserTask"]) {
+		const context = input.state.taskContext;
+		if (Buffer.byteLength(body) <= 1e5 || context === void 0 || context[field] === null) continue;
+		input.state.taskContext = {
+			...context,
+			[field]: null,
+			omittedTaskContext: [...context.omittedTaskContext.filter((item) => item.field !== field), {
+				field,
+				reason: "budget"
+			}]
+		};
+		body = JSON.stringify(input);
+	}
+	const requestBytes = Buffer.byteLength(body);
+	if (requestBytes > 1e5) throw new DecisionRequestError("request-too-large", requestBytes, "Decision input exceeds 100000 bytes; refusing to truncate the action or user message");
+	const controller = new AbortController();
+	const stopRequest = () => {
+		controller.abort();
+	};
+	signal?.addEventListener("abort", stopRequest, { once: true });
+	if (signal?.aborted === true) controller.abort();
+	const timer = setTimeout(() => {
+		controller.abort();
+	}, provider.timeoutMs);
+	try {
+		let response;
+		try {
+			response = await fetch(`${provider.baseURL.replace(/\/$/, "")}/v1/systemone`, {
+				method: "POST",
+				signal: controller.signal,
+				headers: {
+					"content-type": "application/json",
+					authorization: `Bearer ${apiKey}`
+				},
+				body
+			});
+		} catch (error) {
+			if (error instanceof Error && error.name === "AbortError") throw new DecisionRequestError("aborted", requestBytes, "Decision request aborted", { cause: error });
+			throw new DecisionRequestError("network", requestBytes, "Decision API request failed");
+		}
+		if (!response.ok) throw new DecisionRequestError("http-status", requestBytes, `Decision API returned HTTP ${response.status}`);
+		const probability = number().min(0).max(1);
+		const answer = object({
+			type: literal("choice"),
+			choice: _enum([
+				"allow",
+				"block",
+				"ask"
+			]),
+			confidence: probability,
+			probabilities: strictObject({
+				allow: probability,
+				block: probability,
+				ask: probability
+			})
+		});
+		const schema = object({
+			model: string().min(1),
+			answers: record(string(), answer),
+			usage: object({ input_tokens: number().int().nonnegative() })
+		});
+		let responseBody;
+		try {
+			responseBody = await response.json();
+		} catch (error) {
+			if (error instanceof Error && error.name === "AbortError") throw new DecisionRequestError("aborted", requestBytes, "Decision request aborted", { cause: error });
+			throw new DecisionRequestError("invalid-response", requestBytes, "Decision API returned invalid JSON");
+		}
+		const parsedResponse = schema.safeParse(responseBody);
+		if (!parsedResponse.success) throw new DecisionRequestError("invalid-response", requestBytes, "Decision API returned a malformed response");
+		const parsed = parsedResponse.data;
+		if (Object.keys(parsed.answers).length !== Object.keys(request.questions).length) throw new DecisionRequestError("invalid-response", requestBytes, "Decision API returned an incomplete answer set");
+		for (const id of Object.keys(request.questions)) {
+			const value = parsed.answers[id];
+			if (value === void 0) throw new DecisionRequestError("invalid-response", requestBytes, "Decision API omitted a requested answer");
+			const distribution = Object.values(value.probabilities);
+			if (Math.abs(distribution.reduce((sum, p) => sum + p, 0) - 1) > .010000001 || value.probabilities[value.choice] < Math.max(...distribution)) throw new DecisionRequestError("invalid-response", requestBytes, "Decision API returned invalid probabilities");
+		}
+		return {
+			model: parsed.model,
+			answers: parsed.answers,
+			inputTokens: parsed.usage.input_tokens,
+			requestBytes
+		};
+	} finally {
+		clearTimeout(timer);
+		signal?.removeEventListener("abort", stopRequest);
+	}
+}
+//#endregion
+//#region src/model/classify-with-jev.ts
+async function classifyWithJev(payload, config, options = {}) {
+	const start = performance.now();
+	let key = null;
+	let stage = "credential";
+	const minConfidence = config.minConfidence ?? .8;
+	let keySource = "none";
+	const envKey = config.provider.apiKeyEnv === void 0 ? void 0 : process.env[config.provider.apiKeyEnv];
+	if (envKey !== void 0 && envKey !== "") keySource = "environment";
+	else if (config.provider.apiKeyCommand !== void 0 && config.provider.apiKeyCommand !== "") keySource = "command";
+	try {
+		key = await resolveApiKey(config.provider, options);
+		if (key === null) throw new Error("no API key: set the configured environment variable or key command");
+		stage = "evidence";
+		const directUserText = payload.decisionContext?.agentID === null ? payload.decisionContext.lastDirectUserMessage?.text ?? null : null;
+		const command = payload.toolInput["command"] ?? payload.toolInput["cmd"];
+		const hasGitCommand = typeof command === "string" && /\bgit\s/u.test(command);
+		const isFileEdit = payload.toolName === "Write" || payload.toolName === "Edit";
+		const needsRepositoryContext = hasGitCommand || isFileEdit;
+		const [policy, rules, repositoryContext] = await Promise.all([
+			loadPolicy({
+				classifierPath: config.classifierPath,
+				rulesPath: config.rulesPath
+			}, "decision.md"),
+			loadClaudeRules(config.claudeSettingsPath),
+			needsRepositoryContext ? loadRepositoryContext(payload.cwd) : Promise.resolve(null)
+		]);
+		const request = buildDecisionRequest(payload, policy, rules, directUserText, config.rulesPath === void 0 ? "shipped" : "replacement", repositoryContext);
+		const remainingMs = options.deadlineAt === void 0 ? config.provider.timeoutMs : options.deadlineAt - Date.now();
+		if (remainingMs <= 0 || options.signal?.aborted === true) throw new DOMException("Evaluation deadline expired", "AbortError");
+		const provider = {
+			...config.provider,
+			timeoutMs: Math.min(config.provider.timeoutMs, remainingMs)
+		};
+		stage = "request";
+		const result = await sendDecision(provider, key, request, options.signal);
+		stage = "response";
+		const verdict = pickDecisionVerdict(request, result, minConfidence);
+		return {
+			verdict,
+			diagnostics: {
+				status: verdict.kind,
+				stage,
+				keyResolved: true,
+				keySource,
+				failureReason: null,
+				requestBytes: result.requestBytes,
+				elapsedMs: Math.round(performance.now() - start),
+				minConfidence,
+				contributors: collectDecisionContributors(request, result, minConfidence)
+			},
+			note: formatClassifierNote(`${config.provider.model}: ${verdict.kind} (${Math.round(performance.now() - start)}ms, ${result.inputTokens} input tokens)`, key)
+		};
+	} catch (error) {
+		let reason = "classifier failed";
+		let status = "failure";
+		if (options.signal?.aborted === true) {
+			reason = "evaluation cancelled";
+			status = "cancelled";
+		} else if (options.deadlineAt !== void 0 && Date.now() >= options.deadlineAt) {
+			reason = "evaluation deadline expired";
+			status = "timeout";
+		} else if (error instanceof Error) {
+			const isTimeout = error.name === "AbortError" || error instanceof DecisionRequestError && error.reason === "aborted";
+			if (isTimeout) status = "timeout";
+			reason = isTimeout ? `timed out after ${config.provider.timeoutMs}ms` : error.message;
+		}
+		const note = formatClassifierNote(`${config.provider.model} unavailable: ${reason}`, key);
+		return {
+			verdict: config.onFailure === "deny" ? {
+				kind: "deny",
+				rule: "Classifier Unavailable",
+				reason: note
+			} : null,
+			note,
+			unavailable: true,
+			diagnostics: {
+				status,
+				stage,
+				keyResolved: key !== null,
+				keySource,
+				failureReason: error instanceof DecisionRequestError ? error.reason : null,
 				requestBytes: error instanceof DecisionRequestError ? error.requestBytes : null,
 				elapsedMs: Math.round(performance.now() - start),
 				minConfidence,
@@ -6260,10 +6665,20 @@ function parseModelVerdict(text) {
 	const rule = RULE.exec(text)?.[1]?.trim();
 	if (rule === void 0 || rule === "") return { kind: "allow" };
 	const stripped = (REASON.exec(text)?.[1]?.trim())?.replace(/^\[[^\]]*\]\s*/, "") ?? "";
+	if (stripped !== "") return {
+		kind: "deny",
+		rule,
+		reason: stripped
+	};
+	const template = DENY_REASONS[rule];
 	return {
 		kind: "deny",
 		rule,
-		reason: stripped === "" ? "the policy blocks this action." : stripped
+		reason: template === void 0 ? "The action matches this rule." : buildDenyReason({
+			name: rule,
+			tier: template.tier,
+			source: "shipped"
+		}, "matched")
 	};
 }
 //#endregion
@@ -6321,6 +6736,11 @@ function toMessage(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
+//#region src/policy/read-denial-guidance.ts
+async function readDenialGuidance() {
+	return (await readFile(join(resolveShippedPolicyDir(), "denial.md"), "utf8")).trim();
+}
+//#endregion
 //#region node_modules/.bun/tiny-invariant@1.3.3/node_modules/tiny-invariant/dist/esm/tiny-invariant.js
 var isProduction = process.env.NODE_ENV === "production";
 var prefix = "Invariant failed";
@@ -6557,12 +6977,9 @@ async function classifyAction(request, config, options = {}) {
 	if (config.provider.protocol === "system-one") try {
 		configured = await loadClaudeRules(config.claudeSettingsPath);
 	} catch {
+		const guidance = config.onFailure === "deny" ? await tryReadDenialGuidance() : null;
 		return {
-			verdict: config.onFailure === "deny" ? {
-				kind: "deny",
-				rule: "Classifier Unavailable",
-				reason: "Claude settings unreadable"
-			} : null,
+			verdict: config.onFailure === "deny" ? buildGuidedDeny("Classifier Unavailable", "Claude settings unreadable.", guidance) : null,
 			note: "Claude settings unreadable; classifier unavailable",
 			status: "failure",
 			unavailable: true
@@ -6579,12 +6996,28 @@ async function classifyAction(request, config, options = {}) {
 		note: `${request.toolName} needs the model tier, which this run skipped`,
 		status: "skipped"
 	};
-	const outcome = await classifyWithModel(request, config, options);
+	const [outcome, guidance] = await Promise.all([classifyWithModel(request, config, options), tryReadDenialGuidance()]);
 	return {
 		...outcome,
+		verdict: outcome.verdict?.kind === "deny" ? buildGuidedDeny(outcome.verdict.rule, outcome.verdict.reason, guidance) : outcome.verdict,
 		status: outcome.diagnostics?.status ?? outcome.verdict?.kind ?? "failure"
 	};
 }
+function buildGuidedDeny(rule, reason, guidance) {
+	const sentence = /[.!?]$/u.test(reason) ? reason : `${reason}.`;
+	return {
+		kind: "deny",
+		rule,
+		reason: guidance === null ? sentence : `${sentence} ${guidance}`
+	};
+}
+async function tryReadDenialGuidance() {
+	try {
+		return await readDenialGuidance();
+	} catch {
+		return null;
+	}
+}
 //#endregion
 //#region src/request/parse-action-request.ts
 const userTaskSchema = strictObject({
@@ -6635,257 +7068,9 @@ function parseActionRequest(body) {
 	};
 }
 //#endregion
-//#region node_modules/.bun/ts-pattern@5.9.0/node_modules/ts-pattern/dist/index.js
-const t = Symbol.for("@ts-pattern/matcher");
-const e = Symbol.for("@ts-pattern/isVariadic");
-const n = "@ts-pattern/anonymous-select-key";
-const r = (t) => Boolean(t && "object" == typeof t);
-const i = (e) => e && !!e[t];
-const o = (n, s, c) => {
-	if (i(n)) {
-		const { matched: r, selections: i } = n[t]().match(s);
-		return r && i && Object.keys(i).forEach((t) => c(t, i[t])), r;
-	}
-	if (r(n)) {
-		if (!r(s)) return !1;
-		if (Array.isArray(n)) {
-			if (!Array.isArray(s)) return !1;
-			let t = [], r = [], u = [];
-			for (const o of n.keys()) {
-				const s = n[o];
-				i(s) && s[e] ? u.push(s) : u.length ? r.push(s) : t.push(s);
-			}
-			if (u.length) {
-				if (u.length > 1) throw new Error("Pattern error: Using `...P.array(...)` several times in a single pattern is not allowed.");
-				if (s.length < t.length + r.length) return !1;
-				const e = s.slice(0, t.length), n = 0 === r.length ? [] : s.slice(-r.length), i = s.slice(t.length, 0 === r.length ? Infinity : -r.length);
-				return t.every((t, n) => o(t, e[n], c)) && r.every((t, e) => o(t, n[e], c)) && (0 === u.length || o(u[0], i, c));
-			}
-			return n.length === s.length && n.every((t, e) => o(t, s[e], c));
-		}
-		return Reflect.ownKeys(n).every((e) => {
-			const r = n[e];
-			return (e in s || i(u = r) && "optional" === u[t]().matcherType) && o(r, s[e], c);
-			var u;
-		});
-	}
-	return Object.is(s, n);
-};
-const s = (e) => {
-	var n, o, u;
-	return r(e) ? i(e) ? null != (n = null == (o = (u = e[t]()).getSelectionKeys) ? void 0 : o.call(u)) ? n : [] : Array.isArray(e) ? c(e, s) : c(Object.values(e), s) : [];
-};
-const c = (t, e) => t.reduce((t, n) => t.concat(e(n)), []);
-function a(t) {
-	return Object.assign(t, {
-		optional: () => h(t),
-		and: (e) => d(t, e),
-		or: (e) => y(t, e),
-		select: (e) => void 0 === e ? v(t) : v(e, t)
-	});
-}
-function h(e) {
-	return a({ [t]: () => ({
-		match: (t) => {
-			let n = {};
-			const r = (t, e) => {
-				n[t] = e;
-			};
-			return void 0 === t ? (s(e).forEach((t) => r(t, void 0)), {
-				matched: !0,
-				selections: n
-			}) : {
-				matched: o(e, t, r),
-				selections: n
-			};
-		},
-		getSelectionKeys: () => s(e),
-		matcherType: "optional"
-	}) });
-}
-function d(...e) {
-	return a({ [t]: () => ({
-		match: (t) => {
-			let n = {};
-			const r = (t, e) => {
-				n[t] = e;
-			};
-			return {
-				matched: e.every((e) => o(e, t, r)),
-				selections: n
-			};
-		},
-		getSelectionKeys: () => c(e, s),
-		matcherType: "and"
-	}) });
-}
-function y(...e) {
-	return a({ [t]: () => ({
-		match: (t) => {
-			let n = {};
-			const r = (t, e) => {
-				n[t] = e;
-			};
-			return c(e, s).forEach((t) => r(t, void 0)), {
-				matched: e.some((e) => o(e, t, r)),
-				selections: n
-			};
-		},
-		getSelectionKeys: () => c(e, s),
-		matcherType: "or"
-	}) });
-}
-function p(e) {
-	return { [t]: () => ({ match: (t) => ({ matched: Boolean(e(t)) }) }) };
-}
-function v(...e) {
-	const r = "string" == typeof e[0] ? e[0] : void 0, i = 2 === e.length ? e[1] : "string" == typeof e[0] ? void 0 : e[0];
-	return a({ [t]: () => ({
-		match: (t) => {
-			let e = { [null != r ? r : n]: t };
-			return {
-				matched: void 0 === i || o(i, t, (t, n) => {
-					e[t] = n;
-				}),
-				selections: e
-			};
-		},
-		getSelectionKeys: () => [null != r ? r : n].concat(void 0 === i ? [] : s(i))
-	}) });
-}
-function b(t) {
-	return !0;
-}
-function w(t) {
-	return "number" == typeof t;
-}
-function S(t) {
-	return "string" == typeof t;
-}
-function j(t) {
-	return "bigint" == typeof t;
-}
-a(p(b));
-a(p(b));
-const x = (t) => Object.assign(a(t), {
-	startsWith: (e) => {
-		return x(d(t, (n = e, p((t) => S(t) && t.startsWith(n)))));
-		var n;
-	},
-	endsWith: (e) => {
-		return x(d(t, (n = e, p((t) => S(t) && t.endsWith(n)))));
-		var n;
-	},
-	minLength: (e) => x(d(t, ((t) => p((e) => S(e) && e.length >= t))(e))),
-	length: (e) => x(d(t, ((t) => p((e) => S(e) && e.length === t))(e))),
-	maxLength: (e) => x(d(t, ((t) => p((e) => S(e) && e.length <= t))(e))),
-	includes: (e) => {
-		return x(d(t, (n = e, p((t) => S(t) && t.includes(n)))));
-		var n;
-	},
-	regex: (e) => {
-		return x(d(t, (n = e, p((t) => S(t) && Boolean(t.match(n))))));
-		var n;
-	}
-});
-x(p(S));
-const N = (t) => Object.assign(a(t), {
-	between: (e, n) => N(d(t, ((t, e) => p((n) => w(n) && t <= n && e >= n))(e, n))),
-	lt: (e) => N(d(t, ((t) => p((e) => w(e) && e < t))(e))),
-	gt: (e) => N(d(t, ((t) => p((e) => w(e) && e > t))(e))),
-	lte: (e) => N(d(t, ((t) => p((e) => w(e) && e <= t))(e))),
-	gte: (e) => N(d(t, ((t) => p((e) => w(e) && e >= t))(e))),
-	int: () => N(d(t, p((t) => w(t) && Number.isInteger(t)))),
-	finite: () => N(d(t, p((t) => w(t) && Number.isFinite(t)))),
-	positive: () => N(d(t, p((t) => w(t) && t > 0))),
-	negative: () => N(d(t, p((t) => w(t) && t < 0)))
-});
-N(p(w));
-const k = (t) => Object.assign(a(t), {
-	between: (e, n) => k(d(t, ((t, e) => p((n) => j(n) && t <= n && e >= n))(e, n))),
-	lt: (e) => k(d(t, ((t) => p((e) => j(e) && e < t))(e))),
-	gt: (e) => k(d(t, ((t) => p((e) => j(e) && e > t))(e))),
-	lte: (e) => k(d(t, ((t) => p((e) => j(e) && e <= t))(e))),
-	gte: (e) => k(d(t, ((t) => p((e) => j(e) && e >= t))(e))),
-	positive: () => k(d(t, p((t) => j(t) && t > 0))),
-	negative: () => k(d(t, p((t) => j(t) && t < 0)))
-});
-k(p(j)), a(p(function(t) {
-	return "boolean" == typeof t;
-})), a(p(function(t) {
-	return "symbol" == typeof t;
-})), a(p(function(t) {
-	return null == t;
-})), a(p(function(t) {
-	return null != t;
-}));
-var I = class extends Error {
-	constructor(t) {
-		let e;
-		try {
-			e = JSON.stringify(t);
-		} catch (n) {
-			e = t;
-		}
-		super(`Pattern matching error: no pattern matches value ${e}`), this.input = void 0, this.input = t;
-	}
-};
-const L = {
-	matched: !1,
-	value: void 0
-};
-function M(t) {
-	return new R(t, L);
-}
-var R = class R {
-	constructor(t, e) {
-		this.input = void 0, this.state = void 0, this.input = t, this.state = e;
-	}
-	with(...t) {
-		if (this.state.matched) return this;
-		const e = t[t.length - 1], r = [t[0]];
-		let i;
-		3 === t.length && "function" == typeof t[1] ? i = t[1] : t.length > 2 && r.push(...t.slice(1, t.length - 1));
-		let s = !1, c = {};
-		const u = (t, e) => {
-			s = !0, c[t] = e;
-		}, a = !r.some((t) => o(t, this.input, u)) || i && !Boolean(i(this.input)) ? L : {
-			matched: !0,
-			value: e(s ? n in c ? c[n] : c : this.input, this.input)
-		};
-		return new R(this.input, a);
-	}
-	when(t, e) {
-		if (this.state.matched) return this;
-		const n = Boolean(t(this.input));
-		return new R(this.input, n ? {
-			matched: !0,
-			value: e(this.input, this.input)
-		} : L);
-	}
-	otherwise(t) {
-		return this.state.matched ? this.state.value : t(this.input);
-	}
-	exhaustive(t = F) {
-		return this.state.matched ? this.state.value : t(this.input);
-	}
-	run() {
-		return this.exhaustive();
-	}
-	returnType() {
-		return this;
-	}
-	narrow() {
-		return this;
-	}
-};
-function F(t) {
-	throw new I(t);
-}
-//#endregion
 //#region src/request/render-verdict.ts
 function renderVerdict(verdict) {
-	return M(verdict).with({ kind: "ask" }, () => null).with({ kind: "allow" }, () => JSON.stringify({ decision: "allow" })).with({ kind: "deny" }, (denied) => JSON.stringify({
+	return M(verdict).with({ kind: "allow" }, () => JSON.stringify({ decision: "allow" })).with({ kind: "deny" }, (denied) => JSON.stringify({
 		decision: "deny",
 		reason: `[${denied.rule}] ${denied.reason}`
 	})).exhaustive();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "auto-mode",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "A permission classifier library and Claude Code mod, so agents that are not Claude can run unattended",
   "keywords": [
     "agent",

package/policy/denial.md

@@ -0,0 +1 @@
+Do not retry this action, and do not reach the same result another way: not with a different command, tool, script, file, or agent. Continue the task on a safer path that does not need this action. If no safer path exists for this step, finish the rest of the task first, then tell the user what you need from them for this step.