auto-mode 3.0.1 → 3.1.0

package/dist/index.d.ts

@@ -68,6 +68,7 @@ interface TaskScopeSummary {
 interface OutputStream {
   readonly write: (text: string) => unknown;
 }
+type TextFileReader = (path: string) => Promise<string>;
 interface HostEnvironment {
   readonly env: Readonly<Record<string, string | undefined>>;
   readonly home: string;
@@ -79,6 +80,7 @@ interface Runtime {
   readonly timeout: (timeoutMs: number) => AbortSignal;
   readonly fetch: (url: string, init: Readonly<RequestInit>) => Promise<Response>;
   readonly readCheckout: CheckoutReader;
+  readonly readTextFile: TextFileReader;
 }
 interface ClaudeRules {
   readonly environment: readonly string[];
@@ -114,7 +116,7 @@ interface ScopeSource {
   readonly paths?: readonly string[];
 }
 type ScopeSourceKind = (typeof SCOPE_SOURCE_KINDS)[number];
-declare const SCOPE_SOURCE_KINDS: readonly ['cwd', 'session', 'globs', 'atc'];
+declare const SCOPE_SOURCE_KINDS: readonly ['cwd', 'session', 'globs', 'launcher', 'atc'];
 interface CaptureConfig {
   readonly enabled: boolean;
   readonly directory?: string | undefined;

package/dist/index.js

@@ -1,4 +1,4 @@
-import { b as loadConfig$1, i as classifyAction$1, n as readRuntime, r as readHostEnvironment, t as parseActionRequest } from "./parse-action-request-CaQy7FA3.js";
+import { b as loadConfig$1, i as classifyAction$1, n as readRuntime, r as readHostEnvironment, t as parseActionRequest } from "./parse-action-request-DySYvZxl.js";
 //#region src/index.ts
 function classifyAction(request, config, options = {}) {
 	return classifyAction$1(request, config, {

package/dist/{parse-action-request-CaQy7FA3.js → parse-action-request-DySYvZxl.js}

@@ -1,5 +1,6 @@
-import { a as literal, c as object, d as string, f as union, l as record, m as prettifyError, n as array, o as looseObject, p as unknown, r as boolean, s as number, t as _enum, u as strictObject } from "./schemas-B_w83Dze.js";
+import { a as literal, c as object, d as string, f as union, l as record, m as prettifyError, n as array, o as looseObject, p as unknown, r as boolean, s as number, t as _enum, u as strictObject } from "./schemas-B80Yxv6m.js";
 import { t as findEditFields } from "./find-edit-fields-CzkhPA4j.js";
+import { t as findSecret } from "./find-secret-DUEWxfkc.js";
 import { createHash, randomUUID } from "node:crypto";
 import { access, appendFile, link, lstat, mkdir, open, readFile, realpath, rename, rm, stat, writeFile } from "node:fs/promises";
 import { basename, dirname, isAbsolute, join, matchesGlob, normalize, parse, relative, resolve } from "node:path";
@@ -268,7 +269,7 @@ function resolveXDGDir(host, kind) {
 	return join(root, "auto-mode");
 }
 //#endregion
-//#region node_modules/.bun/ts-pattern@5.9.0/node_modules/ts-pattern/dist/index.js
+//#region node_modules/.bun/ts-pattern@5.9.2/node_modules/ts-pattern/dist/index.js
 const t = Symbol.for("@ts-pattern/matcher");
 const e = Symbol.for("@ts-pattern/isVariadic");
 const n = "@ts-pattern/anonymous-select-key";
@@ -692,6 +693,7 @@ const SCOPE_SOURCE_KINDS = [
 	"cwd",
 	"session",
 	"globs",
+	"launcher",
 	"atc"
 ];
 const DEFAULT_PROVIDER = findPreset("jev");
@@ -704,6 +706,7 @@ const DEFAULT_DENIAL_BUDGET = {
 const DEFAULT_SCOPE_SOURCES = {
 	cwd: { kind: "cwd" },
 	session: { kind: "session" },
+	launcher: { kind: "launcher" },
 	atc: { kind: "atc" }
 };
 const DEFAULT_CONFIG = {
@@ -1005,7 +1008,7 @@ async function tryClassifyEdit(request, scope, host, reader = {}) {
 		]);
 		if (target === null || GIT_OVERRIDES.some((name) => host.env[name] !== void 0)) return null;
 		const [checkout, current] = await Promise.all([files.readCheckout(dirname(target), host.env), request.toolName === "Edit" ? files.readFile(target).catch(() => null) : null]);
-		return (await import("./classify-edit-B660kX2I.js")).classifyEdit({
+		return (await import("./classify-edit-O8JNCVde.js")).classifyEdit({
 			toolName: request.toolName,
 			toolInput: request.toolInput,
 			requested,
@@ -1095,6 +1098,11 @@ const SCRATCH_PATHS = [
 	"/dev/stderr"
 ];
 //#endregion
+//#region src/scope/find-reply-channel.ts
+function findReplyChannel(tool, input, channels) {
+	return channels.find((channel) => channel.tool === tool && input[channel.field] === channel.recipient) ?? null;
+}
+//#endregion
 //#region src/shell/is-unresolved-word.ts
 function isUnresolvedWord(word) {
 	return /[$`]/u.test(word);
@@ -1834,7 +1842,7 @@ function toRepositorySlug(reference) {
 //#endregion
 //#region src/containment/is-in-scope.ts
 function isInScope(path, scope, scratchPaths) {
-	if (scratchPaths.some((entry) => isUnder$2(path, entry)) || scope.pathGlobs.some((glob) => matchesGlob(path, glob))) return true;
+	if (scratchPaths.some((entry) => isUnder$2(path, entry)) || scope.paths.some((owned) => isUnder$2(path, owned)) || scope.pathGlobs.some((glob) => matchesGlob(path, glob))) return true;
 	return scope.worktrees.some((worktree) => {
 		const isNested = isUnder$2(path, join(worktree, ".worktrees"));
 		const isOtherOwned = scope.worktrees.some((other) => other !== worktree && isUnder$2(path, other));
@@ -1842,7 +1850,8 @@ function isInScope(path, scope, scratchPaths) {
 	});
 }
 function isUnder$2(path, root) {
-	return path === root || path.startsWith(`${root}/`);
+	const prefix = root.endsWith("/") ? root : `${root}/`;
+	return path === root || path.startsWith(prefix);
 }
 //#endregion
 //#region src/containment/collect-target-findings.ts
@@ -2688,7 +2697,7 @@ function collectScopeFindings(action, scope, scratchPaths = SCRATCH_PATHS) {
 }
 function collectToolFindings(action, scope) {
 	const verb = action.tool.split("__").at(-1) ?? "";
-	if (!/merge|create|comment|update|delete|push|close|review/u.test(verb)) return [];
+	if (!/merge|create|comment|update|delete|push|close|review/u.test(verb) || findReplyChannel(action.tool, action.input, scope.replyChannels) !== null) return [];
 	const number = action.input["pullNumber"] ?? action.input["pull_number"] ?? action.input["issue_number"];
 	const owner = action.input["owner"];
 	const name = action.input["repo"];
@@ -3059,14 +3068,30 @@ function isUnder(path, root) {
 	return path === root || root === "/" || path.startsWith(`${root}/`);
 }
 //#endregion
+//#region src/secrets/build-secret-free-text.ts
+const MAX_SECRET_PASSES = 50;
+function buildSecretFreeText(text, toReplacement) {
+	let current = text;
+	for (let pass = 0; pass < MAX_SECRET_PASSES; pass += 1) {
+		const finding = findSecret({
+			text: current,
+			path: null
+		});
+		if (finding === null || finding.secret === "" || !current.includes(finding.secret)) return current;
+		current = current.replaceAll(finding.secret, toReplacement(finding.secret));
+	}
+	return current;
+}
+//#endregion
 //#region src/diagnostics/write-action-diagnostic.ts
 async function writeActionDiagnostic(payload, entry, host, warnings) {
 	const path = host.env["AUTO_MODE_DIAGNOSTICS_PATH"] ?? join(resolveXDGDir(host, "state"), "actions.jsonl");
 	if (path === "") return;
 	const agentID = payload.decisionContext?.agentID ?? null;
 	const agentKey = agentID === null ? payload.sessionID : `${payload.sessionID}\0${agentID}`;
+	const isReviewed = entry.judge !== void 0 || entry.grant !== void 0;
 	const record = {
-		schemaVersion: 6,
+		schemaVersion: 7,
 		time: (/* @__PURE__ */ new Date()).toISOString(),
 		invocationID: entry.invocationID,
 		sessionHash: toHash(payload.sessionID),
@@ -3079,7 +3104,8 @@ async function writeActionDiagnostic(payload, entry, host, warnings) {
 		escalation: entry.escalation ?? false,
 		diagnostics: entry.diagnostics ?? null,
 		judge: entry.judge ?? null,
-		grant: entry.grant ?? null
+		grant: entry.grant ?? null,
+		action: isReviewed ? buildLoggedAction(payload) : null
 	};
 	try {
 		await mkdir(dirname(path), {
@@ -3094,6 +3120,34 @@ async function writeActionDiagnostic(payload, entry, host, warnings) {
 function toHash(value) {
 	return createHash("sha256").update(value).digest("hex").slice(0, 16);
 }
+const LOGGED_INPUT_MAX_CHARS = 2e3;
+function buildLoggedAction(payload) {
+	const redacted = buildSecretFreeValue(payload.toolInput);
+	const input = JSON.stringify(redacted);
+	return {
+		tool: payload.toolName,
+		cwd: payload.cwd,
+		input: hasSecret(redacted) || findSecret({
+			text: input,
+			path: null
+		}) !== null ? null : input.slice(0, LOGGED_INPUT_MAX_CHARS)
+	};
+}
+function buildSecretFreeValue(value) {
+	if (typeof value === "string") return buildSecretFreeText(value, () => "[secret]");
+	if (Array.isArray(value)) return value.map((item) => buildSecretFreeValue(item));
+	if (typeof value === "object" && value !== null) return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, buildSecretFreeValue(item)]));
+	return value;
+}
+function hasSecret(value) {
+	if (typeof value === "string") return findSecret({
+		text: value,
+		path: null
+	}) !== null;
+	if (Array.isArray(value)) return value.some((item) => hasSecret(item));
+	if (typeof value === "object" && value !== null) return Object.values(value).some((item) => hasSecret(item));
+	return false;
+}
 //#endregion
 //#region src/git/build-repository-context.ts
 function buildRepositoryContext(facts) {
@@ -3754,7 +3808,7 @@ function sendJudgeMessage(provider, request, transport, signal) {
 }
 async function sendToAgentSDK(provider, request, transport, signal) {
 	if (transport.session !== void 0) return transport.session.review(provider.model, request, signal);
-	const session = (await import("./start-judge-session-B-KYQG13.js")).startJudgeSession(transport.env);
+	const session = (await import("./start-judge-session-C0eRJFlg.js")).startJudgeSession(transport.env);
 	try {
 		return await session.review(provider.model, request, signal);
 	} finally {
@@ -4832,7 +4886,7 @@ function findReviewedRule(request, result, blockThreshold) {
 	const blocking = collectBlockingRules(request, result, blockThreshold);
 	const chosen = blocking.find((entry) => entry.rule.tier === "hard") ?? blocking[0];
 	if (chosen === void 0) return null;
-	const misreadClears = chosen.rule.tier === "hard" && chosen.rule.source !== "configured" && chosen.answer.choice === "allow" && chosen.answer.probabilities.block <= .35 && blocking.length === 1;
+	const misreadClears = chosen.rule.tier === "hard" && blocking.every((entry) => entry.rule.source !== "configured" && entry.answer.choice === "allow" && entry.answer.probabilities.block <= .35 && (entry === chosen || entry.rule.tier === "soft"));
 	return {
 		rule: chosen.rule,
 		basis: chosen.answer.choice === "block" ? "matched" : "unresolved",
@@ -5521,11 +5575,19 @@ function isPlainOperand(word) {
 function mergeScopeFacts(all) {
 	const pullRequests = /* @__PURE__ */ new Map();
 	for (const pull of all.flatMap((facts) => facts.pullRequests)) pullRequests.set(`${pull.repository}#${String(pull.number)}`, pull);
+	const replyChannels = /* @__PURE__ */ new Map();
+	for (const channel of all.flatMap((facts) => facts.replyChannels)) replyChannels.set(JSON.stringify([
+		channel.tool,
+		channel.field,
+		channel.recipient
+	]), channel);
 	return {
 		worktrees: [...new Set(all.flatMap((facts) => facts.worktrees))],
 		branches: [...new Set(all.flatMap((facts) => facts.branches))],
 		pullRequests: [...pullRequests.values()],
-		pathGlobs: [...new Set(all.flatMap((facts) => facts.pathGlobs))]
+		pathGlobs: [...new Set(all.flatMap((facts) => facts.pathGlobs))],
+		paths: [...new Set(all.flatMap((facts) => facts.paths))],
+		replyChannels: [...replyChannels.values()]
 	};
 }
 //#endregion
@@ -5545,17 +5607,37 @@ function buildTaskScope(input) {
 		currentBranch: input.currentBranch,
 		remotes: input.remotes,
 		pullRequests,
-		pathGlobs: merged.pathGlobs
+		pathGlobs: merged.pathGlobs,
+		paths: merged.paths,
+		replyChannels: merged.replyChannels
 	};
 }
 //#endregion
-//#region src/scope/build-atc-scope-facts.ts
-function buildAtcScopeFacts(record, isInRepository) {
-	const scope = record.scope;
-	const checkouts = [scope.workspace, ...scope.worktrees];
+//#region src/scope/types.ts
+const EMPTY_SCOPE_FACTS = {
+	worktrees: [],
+	branches: [],
+	pullRequests: [],
+	pathGlobs: [],
+	paths: [],
+	replyChannels: []
+};
+const EMPTY_SESSION_SCOPE = {
+	worktrees: [],
+	branches: [],
+	pullRequests: []
+};
+//#endregion
+//#region src/scope/build-declared-scope-facts.ts
+function buildDeclaredScopeFacts(scope, isInRepository) {
+	const checkouts = scope.workspace === void 0 ? scope.worktrees : [scope.workspace, ...scope.worktrees];
 	return {
+		...EMPTY_SCOPE_FACTS,
 		worktrees: checkouts.map((checkout) => checkout.path),
-		branches: [...checkouts.flatMap((checkout) => checkout.branch !== null && isInRepository(checkout.path) ? [checkout.branch] : []), ...scope.branches.flatMap((branch) => isInRepository(branch.repo ?? scope.workspace.path) ? [branch.name] : [])],
+		branches: [...checkouts.flatMap((checkout) => checkout.branch !== null && isInRepository(checkout.path) ? [checkout.branch] : []), ...scope.branches.flatMap((branch) => {
+			const repo = branch.repo ?? scope.workspace?.path;
+			return repo !== void 0 && isInRepository(repo) ? [branch.name] : [];
+		})],
 		pullRequests: scope.pullRequests.flatMap((pull) => {
 			const repository = toRepositorySlug(`https://${getHost(pull.url)}/${pull.repo}`);
 			return pull.branch === null || repository === null ? [] : [{
@@ -5563,8 +5645,7 @@ function buildAtcScopeFacts(record, isInRepository) {
 				head: pull.branch,
 				repository
 			}];
-		}),
-		pathGlobs: []
+		})
 	};
 }
 function getHost(url) {
@@ -5572,33 +5653,33 @@ function getHost(url) {
 }
 //#endregion
 //#region src/scope/load-atc-session-record.ts
-const name$1 = string().min(1);
-const path = name$1.refine(isAbsolute, "an absolute path");
-const checkoutSchema = object({
-	path,
-	branch: name$1.nullable()
+const name$2 = string().min(1);
+const path$1 = name$2.refine(isAbsolute, "an absolute path");
+const checkoutSchema$1 = object({
+	path: path$1,
+	branch: name$2.nullable()
 }).readonly();
-const branchSchema$1 = object({
-	name: name$1,
-	repo: path.optional()
+const branchSchema$2 = object({
+	name: name$2,
+	repo: path$1.optional()
 }).readonly();
 const pullNumber = number().int().positive();
-const pullRequestSchema$1 = object({
-	repo: name$1,
+const pullRequestSchema$2 = object({
+	repo: name$2,
 	number: pullNumber,
-	url: name$1.optional(),
-	branch: name$1.nullable()
+	url: name$2.optional(),
+	branch: name$2.nullable()
 }).readonly();
 const scopeSchema = object({
-	workspace: checkoutSchema,
-	worktrees: array(checkoutSchema).readonly(),
-	branches: array(branchSchema$1).readonly(),
-	pullRequests: array(pullRequestSchema$1).readonly()
+	workspace: checkoutSchema$1,
+	worktrees: array(checkoutSchema$1).readonly(),
+	branches: array(branchSchema$2).readonly(),
+	pullRequests: array(pullRequestSchema$2).readonly()
 }).readonly();
 const recordSchema = object({
 	format: literal("atc.session-record"),
 	version: literal(1),
-	session: name$1,
+	session: name$2,
 	scope: scopeSchema
 }).readonly();
 async function loadAtcSessionRecord(location, sessionID) {
@@ -5611,7 +5692,7 @@ async function loadAtcSessionRecord(location, sessionID) {
 	try {
 		raw = await readFile(location, "utf8");
 	} catch (error) {
-		return isMissing(error) ? { kind: "absent" } : {
+		return isMissing$1(error) ? { kind: "absent" } : {
 			kind: "malformed",
 			diagnostic: `atc session record unreadable: ${location}`
 		};
@@ -5646,22 +5727,94 @@ async function loadAtcSessionRecord(location, sessionID) {
 		record: result.data
 	};
 }
-function isMissing(error) {
+function isMissing$1(error) {
 	return error instanceof Error && "code" in error && error.code === "ENOENT";
 }
 //#endregion
-//#region src/scope/types.ts
-const EMPTY_SCOPE_FACTS = {
-	worktrees: [],
-	branches: [],
-	pullRequests: [],
-	pathGlobs: []
-};
-const EMPTY_SESSION_SCOPE = {
-	worktrees: [],
-	branches: [],
-	pullRequests: []
-};
+//#region src/scope/load-scope-file.ts
+const name$1 = string().min(1);
+const path = name$1.refine(isAbsolute, "an absolute path").transform((value) => resolve(value));
+const checkoutSchema = strictObject({
+	path,
+	branch: name$1.nullable()
+}).readonly();
+const branchSchema$1 = strictObject({
+	name: name$1,
+	repo: path.optional()
+}).readonly();
+const pullRequestSchema$1 = strictObject({
+	repo: name$1,
+	number: number().int().positive(),
+	url: name$1.optional(),
+	branch: name$1
+}).readonly();
+const replyChannelSchema = strictObject({
+	tool: name$1,
+	field: name$1,
+	recipient: name$1
+}).readonly();
+const scopeFileSchema = strictObject({
+	format: literal("auto-mode.scope"),
+	version: literal(1),
+	paths: array(path).readonly().default([]),
+	workspace: checkoutSchema.optional(),
+	worktrees: array(checkoutSchema).readonly().default([]),
+	branches: array(branchSchema$1).readonly().default([]),
+	pullRequests: array(pullRequestSchema$1).readonly().default([]),
+	replyChannels: array(replyChannelSchema).readonly().default([])
+}).superRefine((file, context) => {
+	if (file.workspace !== void 0) return;
+	for (const [index, branch] of file.branches.entries()) if (branch.repo === void 0) context.addIssue({
+		code: "custom",
+		path: [
+			"branches",
+			index,
+			"repo"
+		],
+		message: "a branch needs a repo when the file declares no workspace"
+	});
+}).readonly();
+async function loadScopeFile(location, readTextFile) {
+	if (location === void 0 || location === "") return { kind: "absent" };
+	if (!isAbsolute(location)) return {
+		kind: "malformed",
+		diagnostic: `scope file path is not absolute: ${location}`
+	};
+	let raw;
+	try {
+		raw = await readTextFile(location);
+	} catch (error) {
+		return isMissing(error) ? { kind: "absent" } : {
+			kind: "malformed",
+			diagnostic: `scope file unreadable: ${location}`
+		};
+	}
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		return {
+			kind: "malformed",
+			diagnostic: `scope file is not JSON: ${location}`
+		};
+	}
+	const result = scopeFileSchema.safeParse(parsed);
+	if (!result.success) {
+		const [issue] = result.error.issues;
+		const refused = issue?.code === "unrecognized_keys" ? [...issue.path, ...issue.keys.slice(0, 1)] : issue?.path;
+		return {
+			kind: "malformed",
+			diagnostic: `scope file ignored: ${refused === void 0 || refused.length === 0 ? "file" : refused.join(".")} does not match version 1: ${location}`
+		};
+	}
+	return {
+		kind: "scope",
+		scope: result.data
+	};
+}
+function isMissing(error) {
+	return error instanceof Error && "code" in error && error.code === "ENOENT";
+}
 //#endregion
 //#region src/scope/load-session-scope.ts
 const name = string().min(1);
@@ -5701,7 +5854,7 @@ function makeScopeSourceReader(source, readSourceCheckout = readCheckout) {
 			branches: scope.branches.filter((branch) => branch.commonDir === context.commonDir).map((branch) => branch.name),
 			pullRequests: scope.pullRequests
 		});
-	}).with("globs", () => () => Promise.resolve(buildFacts({ pathGlobs: source.paths ?? [] }))).with("atc", () => (context) => readAtcScopeFacts(context, readSourceCheckout)).exhaustive();
+	}).with("globs", () => () => Promise.resolve(buildFacts({ pathGlobs: source.paths ?? [] }))).with("launcher", () => (context) => readLauncherScopeFacts(context, readSourceCheckout)).with("atc", () => (context) => readAtcScopeFacts(context, readSourceCheckout)).exhaustive();
 }
 function buildFacts(facts) {
 	return {
@@ -5709,23 +5862,39 @@ function buildFacts(facts) {
 		...facts
 	};
 }
-async function readAtcScopeFacts(context, readSourceCheckout) {
-	const loaded = await loadAtcSessionRecord(context.atcRecordPath, context.atcSessionID);
+async function readLauncherScopeFacts(context, readSourceCheckout) {
+	const loaded = await loadScopeFile(context.scopeFilePath, context.readTextFile);
 	if (loaded.kind === "malformed") context.stderr.write(`auto-mode: ${loaded.diagnostic}\n`);
-	if (loaded.kind !== "record") return EMPTY_SCOPE_FACTS;
-	const scope = loaded.record.scope;
+	if (loaded.kind !== "scope") return EMPTY_SCOPE_FACTS;
+	return {
+		...await readDeclaredScopeFacts(loaded.scope, context, readSourceCheckout),
+		paths: loaded.scope.paths,
+		replyChannels: loaded.scope.replyChannels
+	};
+}
+async function readDeclaredScopeFacts(scope, context, readSourceCheckout) {
+	const workspace = scope.workspace?.path;
 	const paths = /* @__PURE__ */ new Set([
-		scope.workspace.path,
+		...workspace === void 0 ? [] : [workspace],
 		...scope.worktrees.map((worktree) => worktree.path),
-		...scope.branches.map((branch) => branch.repo ?? scope.workspace.path)
+		...scope.branches.flatMap((branch) => {
+			const repo = branch.repo ?? workspace;
+			return repo === void 0 ? [] : [repo];
+		})
 	]);
 	const entries = await Promise.all([...paths].map((path) => readCommonDirEntry(path, context.env, readSourceCheckout)));
 	const commonDirs = new Map(entries);
-	return buildAtcScopeFacts(loaded.record, (path) => context.commonDir !== null && commonDirs.get(path) === context.commonDir);
+	return buildDeclaredScopeFacts(scope, (path) => context.commonDir !== null && commonDirs.get(path) === context.commonDir);
 }
 async function readCommonDirEntry(path, env, readSourceCheckout) {
 	return [path, (await readSourceCheckout(path, env))?.commonDir ?? null];
 }
+async function readAtcScopeFacts(context, readSourceCheckout) {
+	const loaded = await loadAtcSessionRecord(context.atcRecordPath, context.atcSessionID);
+	if (loaded.kind === "malformed") context.stderr.write(`auto-mode: ${loaded.diagnostic}\n`);
+	if (loaded.kind !== "record") return EMPTY_SCOPE_FACTS;
+	return readDeclaredScopeFacts(loaded.record.scope, context, readSourceCheckout);
+}
 //#endregion
 //#region src/scope/load-task-scope.ts
 async function loadTaskScope(request, sources, host, stderr) {
@@ -5743,6 +5912,8 @@ async function loadTaskScope(request, sources, host, stderr) {
 		stateDir: request.stateDir,
 		atcRecordPath: host.env["ATC_SESSION_RECORD"],
 		atcSessionID: host.env["ATC_SESSION_ID"],
+		scopeFilePath: host.env["AUTO_MODE_SCOPE_FILE"],
+		readTextFile: request.readTextFile,
 		stderr
 	};
 	const sourceFacts = await Promise.all(Object.values(sources).map((source) => makeScopeSourceReader(source, request.readCheckout)(sourceContext)));
@@ -5829,6 +6000,7 @@ const STAGES = [
 	{ decide: classifyContainment },
 	{ decide: classifyRegenerable },
 	{ decide: classifyEditBypass },
+	{ decide: classifyReplyChannel },
 	{ decide: classifyLocalOnly }
 ];
 const FINAL_STAGE = { decide: classifyJev };
@@ -5892,7 +6064,8 @@ async function classifyContainment(ctx) {
 		sessionID: request.sessionID,
 		cwd: request.cwd,
 		checkout,
-		readCheckout: ctx.readCheckout
+		readCheckout: ctx.readCheckout,
+		readTextFile: ctx.options.runtime.readTextFile
 	}, ctx.config, host, ctx.options.stderr);
 	const containment = scope === null ? null : checkContainment(request, scope, host.scratchPaths);
 	if (scope === null || containment === null) return {
@@ -5994,6 +6167,20 @@ async function classifyEditBypass(ctx) {
 		}
 	};
 }
+async function classifyReplyChannel(ctx) {
+	const channel = ctx.hasConfiguredDenies || ctx.scope === null ? null : findReplyChannel(ctx.request.toolName, ctx.request.toolInput, ctx.scope.replyChannels);
+	if (channel === null) return { kind: "pass" };
+	if ((await import("./classify-reply-message-CrZ6S-AR.js")).classifyReplyMessage(ctx.request.toolInput).kind !== "bypass") return { kind: "pass" };
+	return {
+		kind: "decided",
+		outcome: {
+			verdict: { kind: "allow" },
+			decidingStage: "bypass",
+			note: `allowed by the reply channel: ${channel.tool} to ${channel.recipient}`,
+			status: "allow"
+		}
+	};
+}
 function classifyLocalOnly(ctx) {
 	if (ctx.options.localOnly !== true) return { kind: "pass" };
 	return {
@@ -6076,6 +6263,11 @@ function readHostEnvironment() {
 	};
 }
 //#endregion
+//#region src/config/read-text-file.ts
+function readTextFile(path) {
+	return readFile(path, "utf8");
+}
+//#endregion
 //#region src/config/read-runtime.ts
 function readRuntime() {
 	return {
@@ -6083,7 +6275,8 @@ function readRuntime() {
 		now: Date.now,
 		timeout: (timeoutMs) => AbortSignal.timeout(timeoutMs),
 		fetch: sendThroughGlobalFetch,
-		readCheckout: (start, env) => readCheckout(start, env)
+		readCheckout: (start, env) => readCheckout(start, env),
+		readTextFile
 	};
 }
 function sendThroughGlobalFetch(url, init) {