fullcourtdefense-cli 1.35.10 → 1.36.2

package/dist/askDialog.js

@@ -144,12 +144,26 @@ async function resolveAskWithDialog(verdict, options = {}) {
     const allowAlways = envelope.remember !== 'none' && Boolean(grantHash) && Boolean(grantLimits) && (0, devConfirm_1.grantOffered)(envelope.scope);
     const scopeLabel = allowAlways ? (0, devConfirm_1.describeGrantScope)(envelope.scope, { policyId: envelope.policyId, policyName: envelope.policyName }) : undefined;
     const limitsLabel = allowAlways && grantLimits ? (0, devConfirm_1.describeGrantLimits)(grantLimits) : undefined;
+    const alwaysCovers = allowAlways ? (0, devConfirm_1.grantCoverage)(envelope.scope) : undefined;
+    // The scope's own refusal; `remember: none` / org switch-off / no rule identity travel as `subject.alwaysOff`.
+    const alwaysNotOffered = !allowAlways && envelope.remember !== 'none' && grantHash && grantLimits ? (0, devConfirm_1.grantNotOfferedReason)(envelope.scope) : undefined;
+    const subject = {
+        event: envelope.event,
+        operation: envelope.operation,
+        ...(envelope.scope.cloud ? { cloud: envelope.scope.cloud } : {}),
+        ...(envelope.scope.destinationDomain ? { destinationDomain: envelope.scope.destinationDomain } : {}),
+        ...(envelope.scope.credential?.hosts?.length ? { credentialHosts: envelope.scope.credential.hosts } : {}),
+        ...(envelope.policyId ? { ruleId: envelope.policyId } : {}),
+        // The client the runtime record carries; older hook builds leave it off (the `--agent-client` flag then).
+        ...(envelope.agentClient || options.clientLabel ? { agentClient: envelope.agentClient || options.clientLabel } : {}),
+        ...(allowAlways || alwaysNotOffered ? {} : { alwaysOff: envelope.remember === 'none' ? 'rule' : envelope.grantLimits === null ? 'org' : 'no_rule' }),
+    };
     const dialog = options.dialog || devConfirm_1.confirmNativeActionDetailed;
     const reason = options.clientLabel ? `IDE: ${options.clientLabel}\n${envelope.reason}` : envelope.reason;
     let outcome = 'unavailable';
     let latencyMs = 0;
     try {
-        ({ outcome, latencyMs } = await dialog(reason, options.timeoutMs ?? exports.ASK_DIALOG_TIMEOUT_MS, { allowAlways, alwaysScopeLabel: scopeLabel, alwaysLimitsLabel: limitsLabel }));
+        ({ outcome, latencyMs } = await dialog(reason, options.timeoutMs ?? exports.ASK_DIALOG_TIMEOUT_MS, { allowAlways, alwaysScopeLabel: scopeLabel, alwaysLimitsLabel: limitsLabel, alwaysCovers, alwaysNotOffered, subject }));
     }
     catch {
         outcome = 'unavailable';

package/dist/askHeader.d.ts

@@ -0,0 +1,81 @@
+export type EnvironmentTag = 'production' | 'staging' | 'dev';
+/** Facts the ask envelope carries besides the reason text (all optional: the MCP gateway has none). */
+export interface AskSubject {
+    /** Hook event: shell | mcp | file | read. */
+    event?: string;
+    /** Engine operation of the action (read / write / DELETE / SHELL …). */
+    operation?: string;
+    /** Grant scope cloud entries, `gcloud|<how>|<where>`. */
+    cloud?: string[];
+    /** Host the action reaches (engine `destination.domain`). */
+    destinationDomain?: string;
+    /** Hosts a credential line sends to (credential binding). */
+    credentialHosts?: string[];
+    /** Rule id: `local-safety:<item>` or the action policy id. */
+    ruleId?: string;
+    /** Why no "Always allow" when the scope itself did not refuse it. */
+    alwaysOff?: 'rule' | 'org' | 'no_rule';
+    /** The client the hook records as `agentClient` on the runtime event (cursor, claude-code, …). */
+    agentClient?: string;
+}
+export interface AskHeaderInput {
+    /** The full action text: the script, else the "What" line. */
+    command?: string;
+    /** "shell command", "file edit", "MCP tool call" … */
+    kind?: string;
+    /** Tool line (MCP gateway). */
+    tool?: string;
+    /** The rule by name. */
+    policy?: string;
+    /** Local Safety rule detail from the Rule line: "id x, credential_commands". */
+    ruleDetail?: string;
+    /** The `IDE:` line of the reason (MCP gateway, older hook builds). */
+    ide?: string;
+    subject?: AskSubject;
+    /** "Always allow" is offered; `covers` says what it would cover. */
+    alwaysOffered: boolean;
+    alwaysCovers?: string;
+    /** The scope's own reason for not offering it (`grantNotOfferedReason`). */
+    alwaysNotOffered?: string;
+}
+export interface AskHeader {
+    /** Who is asking: "Your AI agent (Claude Code) wants to run this command." */
+    who: string;
+    /** One plain sentence. */
+    why: string;
+    /** What the action would change or remove, when the line names it; absent when unreadable. */
+    affects?: string;
+    /** Removes the home folder, a whole drive or the filesystem root: drawn like production (the words say it too). */
+    danger?: boolean;
+    /** Credential rules: where the token / secret is sent ("firestore.googleapis.com" or "unknown"). */
+    secretSentTo?: {
+        label: 'Token sent to' | 'Secret sent to';
+        value: string;
+    };
+    /** "Command" for shell lines, "Tool" for tool calls, "Target" otherwise. */
+    commandLabel: string;
+    command: string;
+    action: string;
+    /** Where the action lands, without the tag. */
+    where: string;
+    tag?: EnvironmentTag;
+    /** `where` with the tag spelled out: "acme-prod · production (by name)". */
+    whereText: string;
+    always: string;
+    /** Which fact the sentence came from; the dialog skips repeating it under "Why it triggered". */
+    source: 'cloud' | 'credential' | 'operation' | 'rule';
+}
+/** The client id as the console labels it; undefined for a missing or placeholder id. */
+export declare function agentClientLabel(raw?: string): string | undefined;
+/** Name tokens of a project id → environment. Deterministic, and only a hint: the dialog says "(by name)". */
+export declare function environmentTag(projectId: string): EnvironmentTag | undefined;
+interface ProjectRead {
+    /** Literal project ids, in order of appearance, unique. */
+    ids: string[];
+    /** A project reference exists but is computed (`$p`, `$(cat p.txt)`). */
+    computed: boolean;
+}
+/** Literal project ids named on the command: `--project x` / `--project=x` and Google API `projects/<id>` paths. */
+export declare function projectsInCommand(command: string): ProjectRead;
+export declare function buildAskHeader(input: AskHeaderInput): AskHeader;
+export {};