auto-mode 0.5.0 → 0.7.0

package/README.md

@@ -31,14 +31,14 @@ Create the classifier configuration:
 
 ```json
 {
-  "preset": "jev",
-  "provider": { "apiKeyEnv": "TYPESAFE_API_KEY" }
+  "classifiers": { "jev": { "apiKeyEnv": "TYPESAFE_API_KEY" } },
+  "decision": { "classifier": "jev" }
 }
 ```
 
-Save it as `~/.config/auto-mode/config.json` and export your TypeSafe API key, or set
-`provider.apiKeyCommand` to a command that prints it.
-[Configuration](./docs/guides/configuration.md) covers credentials and provider overrides.
+Save it as `~/.config/auto-mode/config.json` and export your TypeSafe API key, or set the entry's
+`apiKeyCommand` to a command that prints it. [Configuration](./docs/guides/configuration.md) covers
+the registries, credentials, and migrating an older file.
 
 ## Standing permissions
 
@@ -59,12 +59,14 @@ assessment.
 ## Decisions and failures
 
 Jev evaluates each named rule with a typed choice. auto-mode returns a denial for a confident block,
-approval when every rule confidently allows the action, and manual approval for uncertain decisions.
-The confidence threshold is configurable and needs evaluation against your actions.
+approval when every rule confidently allows the action, and a denial for uncertain decisions. Every
+denial names its rule, the harm, and what clears it, and the agent continues on another path. The
+confidence threshold is configurable and needs evaluation against your actions.
 
-A missing key, failed API call, malformed response, or oversized request follows `onFailure`. The
-default `defer` writes no verdict and keeps the prompt; `deny` fails closed. Failures write a
-diagnostic to stderr. auto-mode never truncates a Jev action to make it fit.
+A missing key, failed API call, malformed response, or oversized request follows
+`decision.onFailure`. The default `defer` writes no verdict and keeps the prompt; `deny` fails
+closed. Failures write a diagnostic to stderr. auto-mode never truncates a Jev action to make it
+fit.
 
 ## Commands
 
@@ -75,10 +77,11 @@ diagnostic to stderr. auto-mode never truncates a Jev action to make it fit.
 | `auto-mode run --local-only` | Skip the model tier                       |
 | `auto-mode run --jev-only`   | Require Jev with a 5-second API timeout   |
 | `auto-mode print-prompt`     | Print the selected provider's base policy |
+| `auto-mode config migrate`   | Rewrite an older config file in place     |
 
 The mod evaluates only ask decisions and preserves existing allow and deny decisions. It runs the
-CLI as a bounded child process with `--jev-only`. The `spark`, `claude`, and `glm` presets use the
-Messages API and serve library callers.
+CLI as a bounded child process with `--jev-only`. The `spark`, `claude`, `glm`, and `messages`
+classifier kinds use the Messages API and serve library callers.
 
 ## Library
 

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { n as parseActionRequest, r as classifyAction, s as loadPolicy, t as renderVerdict, u as loadConfig } from "./render-verdict-FdG6gahX.js";
-import { appendFile, mkdir } from "node:fs/promises";
+import { d as resolveConfigPath, f as normalizeConfigFile, l as loadConfig, n as parseActionRequest, r as classifyAction, s as loadPolicy, t as renderVerdict } from "./render-verdict-CAg3AKWH.js";
+import { appendFile, constants, copyFile, mkdir, readFile, rename, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { createHash, randomUUID } from "node:crypto";
@@ -18,6 +18,36 @@ function buildJevOnlyConfig(config) {
 	};
 }
 //#endregion
+//#region src/config/write-migrated-config.ts
+async function writeMigratedConfig(path) {
+	let raw;
+	try {
+		raw = await readFile(path, "utf8");
+	} catch (error) {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return `${path} does not exist; nothing to migrate`;
+		throw new Error(`${path} is unreadable`, { cause: error });
+	}
+	let json;
+	try {
+		json = JSON.parse(raw);
+	} catch {
+		throw new Error(`${path} is not valid JSON`);
+	}
+	const normalized = normalizeConfigFile(json, path);
+	if (!normalized.isLegacy) return `${path} already uses the current shape`;
+	const backup = `${path}.bak`;
+	const staged = `${path}.migrating`;
+	try {
+		await copyFile(path, backup, constants.COPYFILE_EXCL);
+	} catch (error) {
+		if (error instanceof Error && "code" in error && error.code === "EEXIST") throw new Error(`${backup} already exists; move it aside and run the migration again`, { cause: error });
+		throw error;
+	}
+	await writeFile(staged, `${JSON.stringify(normalized.file, null, 2)}\n`, { mode: 384 });
+	await rename(staged, path);
+	return `rewrote ${path} in the current shape; the old file is at ${backup}`;
+}
+//#endregion
 //#region src/diagnostics/write-action-diagnostic.ts
 async function writeActionDiagnostic(payload, entry) {
 	const stateHome = process.env["XDG_STATE_HOME"];
@@ -54,6 +84,7 @@ const USAGE = `auto-mode — a permission classifier for the auto-mode Claude Co
 Usage:
   auto-mode run              Read an action request on stdin, write a verdict on stdout
   auto-mode print-prompt     Print the system prompt the classifier receives
+  auto-mode config migrate   Rewrite the config file from the old keys into the current shape
 
 Options:
   --classifier <path>   Use this framework file instead of the shipped one
@@ -92,6 +123,7 @@ async function run(explain, localOnly, jevOnly, deadline) {
 		});
 		return printNote(true, "configuration unreadable; no verdict");
 	}
+	printWarnings(loaded.warnings);
 	const config = jevOnly ? buildJevOnlyConfig(loaded) : loaded;
 	if (config === null) {
 		await writeActionDiagnostic(request, {
@@ -138,8 +170,10 @@ async function run(explain, localOnly, jevOnly, deadline) {
 	}
 }
 function writeVerdict(verdict) {
-	const rendered = renderVerdict(verdict);
-	if (rendered !== null) process.stdout.write(rendered);
+	process.stdout.write(renderVerdict(verdict));
+}
+function printWarnings(warnings = []) {
+	for (const warning of warnings) process.stderr.write(`auto-mode: ${warning}\n`);
 }
 function printNote(explain, message) {
 	if (explain) process.stderr.write(`auto-mode: ${message}\n`);
@@ -175,6 +209,7 @@ async function main(argv) {
 	}
 	if (command === "print-prompt") {
 		const config = await loadConfig();
+		printWarnings(config.warnings);
 		const framework = config.provider.protocol === "system-one" ? "decision.md" : "classifier.md";
 		const prompt = await loadPolicy({
 			classifierPath: args.values.classifier ?? config.classifierPath,
@@ -183,9 +218,21 @@ async function main(argv) {
 		process.stdout.write(`${prompt}\n`);
 		return 0;
 	}
+	if (command === "config" && args.positionals[1] === "migrate") return runConfigMigration();
 	process.stderr.write(`auto-mode: unknown command '${command}'\n\n${USAGE}`);
 	return 2;
 }
+async function runConfigMigration() {
+	const path = resolveConfigPath();
+	try {
+		const result = await writeMigratedConfig(path);
+		process.stdout.write(`${result}\n`);
+		return 0;
+	} catch (error) {
+		process.stderr.write(`auto-mode: ${error instanceof Error ? error.message : "config migration failed"}\n`);
+		return 1;
+	}
+}
 process.exitCode = await main(process.argv.slice(2));
 //#endregion
 export {};

package/dist/index.d.ts

@@ -4,6 +4,9 @@ interface EvaluationOptions {
   readonly signal?: Readonly<AbortSignal> | undefined;
 }
 //#endregion
+//#region src/config/presets.d.ts
+export declare const PRESETS: Readonly<Record<string, ProviderConfig>>;
+//#endregion
 //#region src/config/config.d.ts
 interface ProviderConfig {
   readonly protocol?: 'messages' | 'system-one';
@@ -15,16 +18,24 @@ interface ProviderConfig {
   readonly maxTokens: number;
   readonly timeoutMs: number;
 }
+interface ScopeSource {
+  readonly kind: ScopeSourceKind;
+  readonly paths?: readonly string[];
+}
+type ScopeSourceKind = (typeof SCOPE_SOURCE_KINDS)[number];
+declare const SCOPE_SOURCE_KINDS: readonly ['cwd', 'session', 'globs', 'atc'];
 interface Config {
   readonly provider: ProviderConfig;
+  readonly judge?: ProviderConfig | null;
+  readonly scopeSources?: Readonly<Record<string, ScopeSource>>;
   readonly classifierPath?: string | undefined;
   readonly rulesPath?: string | undefined;
   readonly onFailure: 'defer' | 'deny';
   readonly claudeSettingsPath?: string | null | undefined;
   readonly minConfidence?: number | undefined;
+  readonly warnings?: readonly string[];
 }
 export declare const DEFAULT_CONFIG: Config;
-export declare const PRESETS: Readonly<Record<string, ProviderConfig>>;
 export declare function resolveConfigPath(): string;
 export declare function loadConfig(path?: string): Promise<Config>;
 export declare function resolveApiKey(provider: ProviderConfig, options?: EvaluationOptions): Promise<string | null>;
@@ -57,8 +68,6 @@ interface ActionRequest {
 }
 type Verdict = {
   readonly kind: 'allow';
-} | {
-  readonly kind: 'ask';
 } | {
   readonly kind: 'deny';
   readonly rule: string;
@@ -80,7 +89,7 @@ interface DecisionAnswer {
 }
 type DecisionFailureReason = 'request-too-large' | 'aborted' | 'network' | 'http-status' | 'invalid-response';
 interface DecisionDiagnostics {
-  readonly status: 'allow' | 'deny' | 'ask' | 'failure' | 'timeout' | 'cancelled';
+  readonly status: 'allow' | 'deny' | 'failure' | 'timeout' | 'cancelled';
   readonly stage: 'credential' | 'evidence' | 'request' | 'response';
   readonly keyResolved: boolean;
   readonly keySource: 'environment' | 'command' | 'none';
@@ -134,7 +143,7 @@ export declare function loadPolicy(paths?: PolicyPaths, framework?: 'classifier.
 export declare function parseActionRequest(body: unknown): ActionRequest | null;
 //#endregion
 //#region src/request/render-verdict.d.ts
-export declare function renderVerdict(verdict: Verdict): string | null;
+export declare function renderVerdict(verdict: Verdict): string;
 //#endregion
 //#region src/rules/classify-locally.d.ts
 type LocalVerdict = {
@@ -145,4 +154,4 @@ type LocalVerdict = {
 };
 export declare function classifyLocally(payload: ActionRequest): LocalVerdict;
 //#endregion
-export type { ActionOutcome, ActionRequest, ClassifyOptions, Config, DecisionContext, LocalVerdict, ModelOutcome, PolicyPaths, ProviderConfig, Verdict };
+export type { ActionOutcome, ActionRequest, ClassifyOptions, Config, DecisionContext, LocalVerdict, ModelOutcome, PolicyPaths, ProviderConfig, ScopeSource, Verdict };

package/dist/index.js

@@ -1,2 +1,2 @@
-import { a as classifyWithModel, c as DEFAULT_CONFIG, d as resolveApiKey, f as resolveConfigPath, i as classifyLocally, l as PRESETS, n as parseActionRequest, o as parseModelVerdict, r as classifyAction, s as loadPolicy, t as renderVerdict, u as loadConfig } from "./render-verdict-FdG6gahX.js";
+import { a as classifyWithModel, c as DEFAULT_CONFIG, d as resolveConfigPath, i as classifyLocally, l as loadConfig, n as parseActionRequest, o as parseModelVerdict, p as PRESETS, r as classifyAction, s as loadPolicy, t as renderVerdict, u as resolveApiKey } from "./render-verdict-CAg3AKWH.js";
 export { DEFAULT_CONFIG, PRESETS, classifyAction, classifyLocally, classifyWithModel, loadConfig, loadPolicy, parseActionRequest, parseModelVerdict, renderVerdict, resolveApiKey, resolveConfigPath };