duocode 0.1.0

package/dist/security/credentials.d.ts

@@ -0,0 +1,6 @@
+import type { Command } from "commander";
+/**
+ * Pre-action hook: ensures credentials are loaded from ~/.duocode/config.yaml.
+ * If no global config exists yet, runs the interactive setup wizard.
+ */
+export declare function ensureInteractiveCredentials(_command: Command): Promise<void>;

package/dist/security/credentials.js

@@ -0,0 +1,16 @@
+import { loadGlobalConfig, applyCredentialsToEnv, } from "../setup/global_config.js";
+import { runSetupIfNeeded } from "../setup/wizard.js";
+/**
+ * Pre-action hook: ensures credentials are loaded from ~/.duocode/config.yaml.
+ * If no global config exists yet, runs the interactive setup wizard.
+ */
+export async function ensureInteractiveCredentials(_command) {
+    const config = loadGlobalConfig();
+    if (config) {
+        applyCredentialsToEnv(config);
+        return;
+    }
+    // No saved config — run the wizard inline
+    await runSetupIfNeeded(process.cwd());
+}
+//# sourceMappingURL=credentials.js.map

package/dist/security/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/security/credentials.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,QAAiB;IAClE,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAElC,IAAI,MAAM,EAAE,CAAC;QACX,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,0CAA0C;IAC1C,MAAM,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AACxC,CAAC"}

package/dist/setup/browser.d.ts

@@ -0,0 +1 @@
+export declare function openBrowser(url: string): void;

package/dist/setup/browser.js

@@ -0,0 +1,12 @@
+import { exec } from "node:child_process";
+export function openBrowser(url) {
+    const cmd = process.platform === "darwin"
+        ? `open "${url}"`
+        : process.platform === "win32"
+            ? `start "" "${url}"`
+            : `xdg-open "${url}"`;
+    exec(cmd, () => {
+        // fire-and-forget — ignore errors (user sees the URL in terminal)
+    });
+}
+//# sourceMappingURL=browser.js.map

package/dist/setup/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/setup/browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAE1C,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,GAAG,GACP,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAC3B,CAAC,CAAC,SAAS,GAAG,GAAG;QACjB,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B,CAAC,CAAC,aAAa,GAAG,GAAG;YACrB,CAAC,CAAC,aAAa,GAAG,GAAG,CAAC;IAE5B,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;QACb,kEAAkE;IACpE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/setup/global_config.d.ts

@@ -0,0 +1,14 @@
+export interface GlobalConfig {
+    version: string;
+    credentials: {
+        openrouter_api_key?: string;
+        openai_api_key?: string;
+        anthropic_api_key?: string;
+        github_token?: string;
+    };
+}
+export declare function globalConfigPath(): string;
+export declare function globalConfigExists(): boolean;
+export declare function loadGlobalConfig(): GlobalConfig | null;
+export declare function saveGlobalConfig(config: GlobalConfig): void;
+export declare function applyCredentialsToEnv(config: GlobalConfig): void;

package/dist/setup/global_config.js

@@ -0,0 +1,54 @@
+import fs from "node:fs";
+import path from "node:path";
+import os from "node:os";
+import YAML from "yaml";
+const CONFIG_DIR = path.join(os.homedir(), ".duocode");
+const CONFIG_FILE = path.join(CONFIG_DIR, "config.yaml");
+export function globalConfigPath() {
+    return CONFIG_FILE;
+}
+export function globalConfigExists() {
+    return fs.existsSync(CONFIG_FILE);
+}
+export function loadGlobalConfig() {
+    if (!fs.existsSync(CONFIG_FILE)) {
+        return null;
+    }
+    try {
+        const raw = fs.readFileSync(CONFIG_FILE, "utf8");
+        const parsed = YAML.parse(raw);
+        return parsed ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+export function saveGlobalConfig(config) {
+    fs.mkdirSync(CONFIG_DIR, { recursive: true });
+    const content = YAML.stringify(config);
+    fs.writeFileSync(CONFIG_FILE, content, { mode: 0o600 });
+}
+export function applyCredentialsToEnv(config) {
+    // OpenRouter uses the OpenAI-compatible API — set OPENAI_API_KEY + OPENAI_BASE_URL
+    if (config.credentials.openrouter_api_key) {
+        if (!process.env.OPENROUTER_API_KEY) {
+            process.env.OPENROUTER_API_KEY = config.credentials.openrouter_api_key;
+        }
+        if (!process.env.OPENAI_API_KEY) {
+            process.env.OPENAI_API_KEY = config.credentials.openrouter_api_key;
+        }
+        if (!process.env.OPENAI_BASE_URL) {
+            process.env.OPENAI_BASE_URL = "https://openrouter.ai/api/v1";
+        }
+    }
+    if (config.credentials.openai_api_key && !process.env.OPENAI_API_KEY) {
+        process.env.OPENAI_API_KEY = config.credentials.openai_api_key;
+    }
+    if (config.credentials.anthropic_api_key && !process.env.ANTHROPIC_API_KEY) {
+        process.env.ANTHROPIC_API_KEY = config.credentials.anthropic_api_key;
+    }
+    if (config.credentials.github_token && !process.env.GITHUB_TOKEN) {
+        process.env.GITHUB_TOKEN = config.credentials.github_token;
+    }
+}
+//# sourceMappingURL=global_config.js.map

package/dist/setup/global_config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"global_config.js","sourceRoot":"","sources":["../../src/setup/global_config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,MAAM,CAAC;AAYxB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AACvD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAEzD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QACtD,OAAO,MAAM,IAAI,IAAI,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAoB;IACnD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvC,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAoB;IACxD,mFAAmF;IACnF,IAAI,MAAM,CAAC,WAAW,CAAC,kBAAkB,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,8BAA8B,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC;IACjE,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC;IAC7D,CAAC;AACH,CAAC"}

package/dist/setup/wizard.d.ts

@@ -0,0 +1,2 @@
+export declare function runSetupIfNeeded(cwd: string): Promise<void>;
+export declare function runReconfigure(): Promise<void>;

package/dist/setup/wizard.js

@@ -0,0 +1,206 @@
+import fs from "node:fs";
+import path from "node:path";
+import { createInterface } from "node:readline/promises";
+import { globalConfigExists, globalConfigPath, loadGlobalConfig, saveGlobalConfig, applyCredentialsToEnv, } from "./global_config.js";
+import { findConfigPath, defaultConfigYaml, loadConfig } from "../config/loader.js";
+import { initDatabase } from "../db/schema.js";
+import { openBrowser } from "./browser.js";
+import { R, B, DM, DCY, GRN, YLW, MAG } from "../ui/colors.js";
+import { createLogger } from "../ui/logger.js";
+const RESET = R;
+const BOLD = B;
+const DIM = DM;
+const GREEN = GRN;
+const CYAN = DCY;
+const YELLOW = YLW;
+const MAGENTA = MAG;
+const log = createLogger("wizard");
+function write(text) {
+    log.raw(text);
+}
+function ok(msg) {
+    log.raw(`  ${GREEN}${BOLD}\u2713${RESET} ${msg}\n`);
+}
+function info(msg) {
+    log.raw(`  ${DIM}${msg}${RESET}\n`);
+}
+function heading(msg) {
+    log.raw(`\n  ${BOLD}${msg}${RESET}\n\n`);
+}
+async function ask(question, secret = false) {
+    if (secret && process.stdin.isTTY && process.stdout.isTTY) {
+        return askSecret(question);
+    }
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        const answer = await rl.question(`  ${question}`);
+        return answer.trim();
+    }
+    finally {
+        rl.close();
+    }
+}
+function askSecret(question) {
+    return new Promise((resolve, reject) => {
+        const stdin = process.stdin;
+        const stdout = process.stdout;
+        let value = "";
+        const cleanup = () => {
+            stdin.off("data", onData);
+            if (stdin.isTTY)
+                stdin.setRawMode(false);
+            stdin.pause();
+            stdout.write("\n");
+        };
+        const onData = (chunk) => {
+            const chars = chunk.toString("utf8");
+            for (const ch of chars) {
+                if (ch === "\u0003") {
+                    cleanup();
+                    reject(new Error("Setup cancelled."));
+                    return;
+                }
+                if (ch === "\r" || ch === "\n") {
+                    cleanup();
+                    resolve(value.trim());
+                    return;
+                }
+                if (ch === "\u007f") {
+                    if (value.length > 0) {
+                        value = value.slice(0, -1);
+                        stdout.write("\b \b");
+                    }
+                    continue;
+                }
+                if (ch >= " ") {
+                    value += ch;
+                    stdout.write("\u2022");
+                }
+            }
+        };
+        stdout.write(`  ${question}`);
+        stdin.setRawMode(true);
+        stdin.setEncoding("utf8");
+        stdin.resume();
+        stdin.on("data", onData);
+    });
+}
+async function runCredentialSetup() {
+    heading("API Setup");
+    info("Keys are saved locally to ~/.duocode/config.yaml (mode 600).");
+    info("Environment variables override saved keys.\n");
+    write(`  ${MAGENTA}Opening${RESET} ${CYAN}openrouter.ai/keys${RESET} ${DIM}— grab a key and paste it below${RESET}\n`);
+    info("If the browser didn't open: https://openrouter.ai/keys\n");
+    openBrowser("https://openrouter.ai/keys");
+    const openRouterKey = await ask(`${CYAN}OpenRouter API Key${RESET} ${DIM}(sk-or-...)${RESET}: `, true);
+    if (!openRouterKey) {
+        throw new Error("OpenRouter API Key is required.");
+    }
+    let openaiKey = "";
+    let anthropicKey = "";
+    const fallbackAnswer = await ask(`${CYAN}Add fallback provider keys now?${RESET} ${DIM}(OpenAI/Anthropic) (y/N)${RESET}: `);
+    const wantsFallback = fallbackAnswer.toLowerCase() === "y" || fallbackAnswer.toLowerCase() === "yes";
+    if (wantsFallback) {
+        openaiKey = await ask(`${CYAN}OpenAI API Key${RESET} ${DIM}(optional, sk-... or Enter to skip)${RESET}: `, true);
+        anthropicKey = await ask(`${CYAN}Anthropic API Key${RESET} ${DIM}(optional, sk-ant-... or Enter to skip)${RESET}: `, true);
+    }
+    const githubToken = await ask(`${CYAN}GitHub Token${RESET} ${DIM}(optional, Enter to skip)${RESET}: `, true);
+    const config = {
+        version: "1",
+        credentials: {
+            ...(openRouterKey ? { openrouter_api_key: openRouterKey } : {}),
+            ...(openaiKey ? { openai_api_key: openaiKey } : {}),
+            ...(anthropicKey ? { anthropic_api_key: anthropicKey } : {}),
+            ...(githubToken ? { github_token: githubToken } : {}),
+        },
+    };
+    saveGlobalConfig(config);
+    write("\n");
+    ok(`Saved to ${DIM}${globalConfigPath()}${RESET}`);
+    return config;
+}
+function isGitRepo(dir) {
+    try {
+        let current = dir;
+        while (true) {
+            if (fs.existsSync(path.join(current, ".git")))
+                return true;
+            const parent = path.dirname(current);
+            if (parent === current)
+                return false;
+            current = parent;
+        }
+    }
+    catch {
+        return false;
+    }
+}
+async function maybeInitProject(cwd) {
+    if (findConfigPath(cwd)) {
+        return;
+    }
+    // Only offer project init when inside a git repo — otherwise skip silently
+    if (!isGitRepo(cwd)) {
+        return;
+    }
+    write("\n");
+    const answer = await ask(`${YELLOW}No duocode.yaml found.${RESET} Initialize this repo? ${DIM}(y/N)${RESET} `);
+    if (!answer || (answer.toLowerCase() !== "y" && answer.toLowerCase() !== "yes")) {
+        info(`Skipped. Run ${CYAN}duocode init${RESET} when ready.`);
+        return;
+    }
+    const configPath = path.join(cwd, "duocode.yaml");
+    fs.writeFileSync(configPath, defaultConfigYaml(), "utf8");
+    const config = loadConfig(cwd, configPath);
+    const duocodeDir = path.join(cwd, ".duocode");
+    const worktreesDir = path.resolve(cwd, config.worktrees.root);
+    const dbPath = path.resolve(cwd, config.database.path);
+    fs.mkdirSync(duocodeDir, { recursive: true });
+    fs.mkdirSync(worktreesDir, { recursive: true });
+    const db = initDatabase(dbPath);
+    db.close();
+    ok(`Initialized in ${DIM}${cwd}${RESET}`);
+    info(`Config: ${configPath}`);
+    info(`Database: ${dbPath}`);
+}
+export async function runSetupIfNeeded(cwd) {
+    // Step 1: Load or create global credentials
+    let config = loadGlobalConfig();
+    if (!config || !globalConfigExists()) {
+        config = await runCredentialSetup();
+    }
+    applyCredentialsToEnv(config);
+    // Step 2: Offer project init if in a git repo without duocode.yaml
+    await maybeInitProject(cwd);
+    // Step 3: Show ready state
+    const hasProject = !!findConfigPath(cwd);
+    write("\n");
+    ok("Ready");
+    write("\n");
+    write(`  ${DIM}$${RESET} ${CYAN}duocode${RESET} start ${DIM}"describe what you want built"${RESET}\n`);
+    write(`  ${DIM}$${RESET} ${CYAN}duocode${RESET} man          ${DIM}Show all commands and usage${RESET}\n`);
+    if (hasProject) {
+        write(`  ${DIM}$${RESET} ${CYAN}duocode${RESET} task create ${DIM}"my task"${RESET}\n`);
+        write(`  ${DIM}$${RESET} ${CYAN}duocode${RESET} github sync ${DIM}--owner org --repo name${RESET}\n`);
+    }
+    write("\n");
+}
+export async function runReconfigure() {
+    heading("Reconfigure API Keys");
+    const existing = loadGlobalConfig();
+    const fresh = await runCredentialSetup();
+    // Merge: new values override, but keep existing keys that weren't re-entered
+    if (existing) {
+        const merged = {
+            ...fresh,
+            credentials: { ...existing.credentials, ...fresh.credentials },
+        };
+        saveGlobalConfig(merged);
+        applyCredentialsToEnv(merged);
+    }
+    else {
+        applyCredentialsToEnv(fresh);
+    }
+    write("\n");
+}
+//# sourceMappingURL=wizard.js.map

package/dist/setup/wizard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wizard.js","sourceRoot":"","sources":["../../src/setup/wizard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAEL,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,KAAK,GAAG,CAAC,CAAC;AAChB,MAAM,IAAI,GAAG,CAAC,CAAC;AACf,MAAM,GAAG,GAAG,EAAE,CAAC;AACf,MAAM,KAAK,GAAG,GAAG,CAAC;AAClB,MAAM,IAAI,GAAG,GAAG,CAAC;AACjB,MAAM,MAAM,GAAG,GAAG,CAAC;AACnB,MAAM,OAAO,GAAG,GAAG,CAAC;AAEpB,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AAEnC,SAAS,KAAK,CAAC,IAAY;IACzB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,EAAE,CAAC,GAAW;IACrB,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,IAAI,SAAS,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,GAAG,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,GAAG,GAAG,KAAK,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,QAAgB,EAAE,MAAM,GAAG,KAAK;IACjD,IAAI,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1D,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,KAAK,GAAG,EAAE,CAAC;QAEf,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1B,IAAI,KAAK,CAAC,KAAK;gBAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACzC,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACrC,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;oBACpB,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;oBACtC,OAAO;gBACT,CAAC;gBACD,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;oBAC/B,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;oBACtB,OAAO;gBACT,CAAC;gBACD,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;oBACpB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACrB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;wBAC3B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBACxB,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC;oBACd,KAAK,IAAI,EAAE,CAAC;oBACZ,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC;QAC9B,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,OAAO,CAAC,WAAW,CAAC,CAAC;IAErB,IAAI,CAAC,8DAA8D,CAAC,CAAC;IACrE,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAErD,KAAK,CAAC,KAAK,OAAO,UAAU,KAAK,IAAI,IAAI,qBAAqB,KAAK,IAAI,GAAG,kCAAkC,KAAK,IAAI,CAAC,CAAC;IACvH,IAAI,CAAC,0DAA0D,CAAC,CAAC;IACjE,WAAW,CAAC,4BAA4B,CAAC,CAAC;IAE1C,MAAM,aAAa,GAAG,MAAM,GAAG,CAC7B,GAAG,IAAI,qBAAqB,KAAK,IAAI,GAAG,cAAc,KAAK,IAAI,EAC/D,IAAI,CACL,CAAC;IACF,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,YAAY,GAAG,EAAE,CAAC;IAEtB,MAAM,cAAc,GAAG,MAAM,GAAG,CAC9B,GAAG,IAAI,kCAAkC,KAAK,IAAI,GAAG,2BAA2B,KAAK,IAAI,CAC1F,CAAC;IACF,MAAM,aAAa,GAAG,cAAc,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,cAAc,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;IAErG,IAAI,aAAa,EAAE,CAAC;QAClB,SAAS,GAAG,MAAM,GAAG,CACnB,GAAG,IAAI,iBAAiB,KAAK,IAAI,GAAG,sCAAsC,KAAK,IAAI,EACnF,IAAI,CACL,CAAC;QAEF,YAAY,GAAG,MAAM,GAAG,CACtB,GAAG,IAAI,oBAAoB,KAAK,IAAI,GAAG,0CAA0C,KAAK,IAAI,EAC1F,IAAI,CACL,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,GAAG,CAC3B,GAAG,IAAI,eAAe,KAAK,IAAI,GAAG,4BAA4B,KAAK,IAAI,EACvE,IAAI,CACL,CAAC;IAEF,MAAM,MAAM,GAAiB;QAC3B,OAAO,EAAE,GAAG;QACZ,WAAW,EAAE;YACX,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD;KACF,CAAC;IAEF,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,EAAE,CAAC,YAAY,GAAG,GAAG,gBAAgB,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAEnD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,IAAI,OAAO,GAAG,GAAG,CAAC;QAClB,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,OAAO;gBAAE,OAAO,KAAK,CAAC;YACrC,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAW;IACzC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,2EAA2E;IAC3E,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,GAAG,MAAM,yBAAyB,KAAK,0BAA0B,GAAG,QAAQ,KAAK,GAAG,CACrF,CAAC;IAEF,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;QAChF,IAAI,CAAC,gBAAgB,IAAI,eAAe,KAAK,cAAc,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAClD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,iBAAiB,EAAE,EAAE,MAAM,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEvD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAChC,EAAE,CAAC,KAAK,EAAE,CAAC;IAEX,EAAE,CAAC,kBAAkB,GAAG,GAAG,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,WAAW,UAAU,EAAE,CAAC,CAAC;IAC9B,IAAI,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW;IAChD,4CAA4C;IAC5C,IAAI,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAEhC,IAAI,CAAC,MAAM,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,MAAM,kBAAkB,EAAE,CAAC;IACtC,CAAC;IAED,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAE9B,mEAAmE;IACnE,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAE5B,2BAA2B;IAC3B,MAAM,UAAU,GAAG,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,EAAE,CAAC,OAAO,CAAC,CAAC;IACZ,KAAK,CAAC,IAAI,CAAC,CAAC;IAEZ,KAAK,CAAC,KAAK,GAAG,IAAI,KAAK,IAAI,IAAI,UAAU,KAAK,UAAU,GAAG,iCAAiC,KAAK,IAAI,CAAC,CAAC;IACvG,KAAK,CAAC,KAAK,GAAG,IAAI,KAAK,IAAI,IAAI,UAAU,KAAK,iBAAiB,GAAG,8BAA8B,KAAK,IAAI,CAAC,CAAC;IAE3G,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,CAAC,KAAK,GAAG,IAAI,KAAK,IAAI,IAAI,UAAU,KAAK,gBAAgB,GAAG,YAAY,KAAK,IAAI,CAAC,CAAC;QACxF,KAAK,CAAC,KAAK,GAAG,IAAI,KAAK,IAAI,IAAI,UAAU,KAAK,gBAAgB,GAAG,0BAA0B,KAAK,IAAI,CAAC,CAAC;IACxG,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAEzC,6EAA6E;IAC7E,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAiB;YAC3B,GAAG,KAAK;YACR,WAAW,EAAE,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE;SAC/D,CAAC;QACF,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,CAAC;AACd,CAAC"}

package/dist/tools/agent_loop.d.ts

@@ -0,0 +1,38 @@
+/**
+ * The agentic tool-use loop.
+ *
+ * Sends messages + tool definitions to a model, executes any tool calls
+ * the model requests, appends results, and repeats until the model
+ * produces a final text response with no tool calls.
+ */
+import type { ToolCall, ToolDefinition } from "../providers/base.js";
+import type { ProviderRouter } from "../providers/router.js";
+import type { ToolResult, FileChange } from "./tool_types.js";
+import type { PermissionConfig } from "./permissions.js";
+export interface AgentLoopOptions {
+    providerRouter: ProviderRouter;
+    /** Explicit model to use (bypasses capability routing) */
+    model: string;
+    systemPrompt: string;
+    userPrompt: string;
+    projectRoot: string;
+    permissions: PermissionConfig;
+    tools?: ToolDefinition[];
+    /** Max generate→tool→generate iterations (default 25) */
+    maxIterations?: number;
+    temperature?: number;
+    maxOutputTokens?: number;
+    /** Called after each tool execution */
+    onToolCall?: (call: ToolCall, result: ToolResult) => void;
+    /** Called when the model emits text */
+    onText?: (text: string) => void;
+}
+export interface AgentLoopResult {
+    /** Concatenated text output from all model turns */
+    text: string;
+    toolCallCount: number;
+    fileChanges: FileChange[];
+    totalCostUsd: number;
+    iterations: number;
+}
+export declare function runAgentLoop(options: AgentLoopOptions): Promise<AgentLoopResult>;

package/dist/tools/agent_loop.js

@@ -0,0 +1,72 @@
+import { ALL_TOOLS } from "./definitions.js";
+import { executeTool } from "./executor.js";
+import { createLogger } from "../ui/logger.js";
+const log = createLogger("agent-loop");
+// ── Loop implementation ──────────────────────────────────────────
+export async function runAgentLoop(options) {
+    const { providerRouter, model, systemPrompt, projectRoot, permissions, maxIterations = 25, temperature = 0.2, maxOutputTokens, } = options;
+    const tools = options.tools ?? ALL_TOOLS;
+    const fileChanges = [];
+    const messages = [
+        { role: "system", content: systemPrompt },
+        { role: "user", content: options.userPrompt },
+    ];
+    let totalCostUsd = 0;
+    let toolCallCount = 0;
+    let iterations = 0;
+    const textParts = [];
+    while (iterations < maxIterations) {
+        iterations++;
+        const result = await providerRouter.generate({
+            model,
+            messages,
+            tools,
+            toolChoice: "auto",
+            temperature,
+            maxOutputTokens,
+        });
+        totalCostUsd += result.costUsd;
+        const response = result.response;
+        if (response.text) {
+            textParts.push(response.text);
+            if (options.onText)
+                options.onText(response.text);
+        }
+        // No tool calls → model is done
+        if (response.toolCalls.length === 0) {
+            break;
+        }
+        // Append the assistant turn (with tool calls attached)
+        messages.push({
+            role: "assistant",
+            content: response.text || "",
+            toolCalls: response.toolCalls,
+        });
+        // Execute each requested tool
+        for (const call of response.toolCalls) {
+            toolCallCount++;
+            log.debug("Tool call", { tool: call.name });
+            const toolResult = await executeTool({ projectRoot, permissions, fileChanges }, call);
+            log.debug("Tool result", { tool: call.name, success: toolResult.success, durationMs: toolResult.durationMs });
+            if (options.onToolCall)
+                options.onToolCall(call, toolResult);
+            // Feed the result back to the model
+            messages.push({
+                role: "tool",
+                content: toolResult.output,
+                toolCallId: call.id,
+            });
+        }
+    }
+    if (iterations >= maxIterations) {
+        log.warn("Agent loop reached max iterations", { maxIterations });
+    }
+    return {
+        text: textParts.join(""),
+        toolCallCount,
+        fileChanges,
+        totalCostUsd,
+        iterations,
+    };
+}
+//# sourceMappingURL=agent_loop.js.map

package/dist/tools/agent_loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent_loop.js","sourceRoot":"","sources":["../../src/tools/agent_loop.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;AAgCvC,oEAAoE;AAEpE,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAyB;IAEzB,MAAM,EACJ,cAAc,EACd,KAAK,EACL,YAAY,EACZ,WAAW,EACX,WAAW,EACX,aAAa,GAAG,EAAE,EAClB,WAAW,GAAG,GAAG,EACjB,eAAe,GAChB,GAAG,OAAO,CAAC;IAEZ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;IACzC,MAAM,WAAW,GAAiB,EAAE,CAAC;IAErC,MAAM,QAAQ,GAAkB;QAC9B,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;QACzC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE;KAC9C,CAAC;IAEF,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,OAAO,UAAU,GAAG,aAAa,EAAE,CAAC;QAClC,UAAU,EAAE,CAAC;QAEb,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC;YAC3C,KAAK;YACL,QAAQ;YACR,KAAK;YACL,UAAU,EAAE,MAAM;YAClB,WAAW;YACX,eAAe;SAChB,CAAC,CAAC;QAEH,YAAY,IAAI,MAAM,CAAC,OAAO,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAEjC,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClB,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,OAAO,CAAC,MAAM;gBAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;QAED,gCAAgC;QAChC,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM;QACR,CAAC;QAED,uDAAuD;QACvD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE;YAC5B,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC,CAAC;QAEH,8BAA8B;QAC9B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACtC,aAAa,EAAE,CAAC;YAChB,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAE5C,MAAM,UAAU,GAAG,MAAM,WAAW,CAClC,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,EACzC,IAAI,CACL,CAAC;YAEF,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;YAE9G,IAAI,OAAO,CAAC,UAAU;gBAAE,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAE7D,oCAAoC;YACpC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,UAAU,CAAC,MAAM;gBAC1B,UAAU,EAAE,IAAI,CAAC,EAAE;aACpB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,UAAU,IAAI,aAAa,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,aAAa;QACb,WAAW;QACX,YAAY;QACZ,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/tools/approval.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Tool approval system — controls which tool actions require user confirmation.
+ * Configurable per-category and per-tool, with session-level overrides.
+ */
+import type { ToolAction, ToolCategory, FileChange } from "./tool_types.js";
+import { type RenderOptions } from "./diff_display.js";
+export type ApprovalDecision = "allow" | "deny" | "ask";
+export interface ApprovalRule {
+    /** Match tool name (exact) or "*" for all tools in category */
+    tool: string;
+    /** Category to match */
+    category?: ToolCategory;
+    /** What to do when this rule matches */
+    decision: ApprovalDecision;
+    /** Optional path glob for file-based rules (e.g. "*.env" → deny) */
+    pathPattern?: string;
+}
+export interface ApprovalPolicy {
+    /** Default decision when no rule matches */
+    defaultDecision: ApprovalDecision;
+    /** Category-level defaults (overrides defaultDecision) */
+    categoryDefaults: Partial<Record<ToolCategory, ApprovalDecision>>;
+    /** Specific rules (evaluated in order, first match wins) */
+    rules: ApprovalRule[];
+}
+/**
+ * Sensible default: reads auto-approved, writes/executes require user approval.
+ */
+export declare const DEFAULT_APPROVAL_POLICY: ApprovalPolicy;
+export type UserPromptFn = (action: ToolAction, displayText: string) => Promise<boolean>;
+export declare class ApprovalEngine {
+    private policy;
+    private sessionOverrides;
+    private autoApproveAll;
+    constructor(policy?: ApprovalPolicy);
+    /**
+     * Toggle auto-approve mode (skips all checks, allows everything).
+     */
+    setAutoApprove(value: boolean): void;
+    getAutoApprove(): boolean;
+    /**
+     * Set a session-level override for a specific tool.
+     * "allow-always" persists for the session.
+     */
+    setToolOverride(toolName: string, decision: ApprovalDecision): void;
+    clearOverrides(): void;
+    getPolicy(): Readonly<ApprovalPolicy>;
+    updatePolicy(patch: Partial<ApprovalPolicy>): void;
+    /**
+     * Evaluate whether an action should proceed without asking the user.
+     * Returns the decision without prompting.
+     */
+    evaluate(action: ToolAction): ApprovalDecision;
+    /**
+     * Check approval and prompt user if needed.
+     * Returns true if the action should proceed, false if denied.
+     */
+    check(action: ToolAction, promptFn: UserPromptFn, fileChange?: FileChange, renderOpts?: RenderOptions): Promise<boolean>;
+}
+export declare function formatActionSummary(action: ToolAction): string;
+/**
+ * Format a batch of actions into a compact approval prompt.
+ */
+export declare function formatBatchSummary(actions: ToolAction[]): string;