fullcourtdefense-cli 1.35.7 → 1.35.9

package/dist/actionIdentity.js

@@ -2,10 +2,11 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.identityPart = identityPart;
 exports.captureActionIdentity = captureActionIdentity;
+const callerEnv_1 = require("./callerEnv");
 function identityPart(value) {
     return typeof value === 'string' && /^[A-Za-z0-9_.:@/-]{1,200}$/.test(value) ? value : undefined;
 }
-function captureActionIdentity(payload = {}, env = process.env) {
+function captureActionIdentity(payload = {}, env = (0, callerEnv_1.callerEnv)()) {
     return {
         sessionId: identityPart(payload.conversation_id || payload.conversationId || payload.session_id || payload.sessionId
             || env.FCD_SESSION_ID || env.CLAUDE_CODE_SESSION_ID || env.CODEX_THREAD_ID),

package/dist/actionPolicyEngine.d.ts

@@ -212,6 +212,7 @@ export declare function effectiveApprovalScope(approval: ActionPolicyApproval |
  */
 export declare function deriveToolOperations(toolName: string, declaredActions?: string[]): string[];
 export declare function toolCapabilities(value: string): Set<string>;
+export declare function canonicalAgentClient(value: string): string;
 /**
  * "Contains a secret" means a secret VALUE is present — never that the text
  * talks about secrets. Source code, docs, grep patterns and commit messages in
@@ -234,6 +235,43 @@ export declare function toolCapabilities(value: string): Set<string>;
  */
 export type SecretKind = 'github_token' | 'aws_access_key' | 'google_api_key' | 'openai_key' | 'slack_token' | 'jwt' | 'private_key' | 'assignment' | 'high_entropy' | 'none';
 export declare function detectSecretKind(raw: string): SecretKind;
+export type ShellAstMode = 'off' | 'shadow' | 'primary';
+/** Structural subset of shellAst.ts ShellFacts that the engine reads. */
+export interface ShellAstFactsLike {
+    complete: boolean;
+    commands: Array<{
+        name: string;
+        argv: string[];
+        literal: boolean[];
+        text: string;
+        pipeline: number;
+        cwdScope: 'scoped' | 'unscoped' | 'unknown';
+        depth?: {
+            subshell: number;
+            function: number;
+            loop: number;
+            conditional: number;
+            substitution: number;
+        };
+        wrapper?: {
+            kind: string;
+            program: string;
+            inner?: ShellAstFactsLike;
+        };
+    }>;
+}
+export interface ShellAstOperationComparison {
+    mode: ShellAstMode;
+    complete: boolean;
+    regex: string;
+    ast?: string;
+    agree: boolean;
+}
+export declare function setShellAstProvider(provider: ((command: string) => ShellAstFactsLike | undefined) | undefined): void;
+export declare function setShellAstMode(mode: ShellAstMode): void;
+export declare function getShellAstMode(): ShellAstMode;
+/** Shadow telemetry: the comparison recorded by the most recent top-level shell classification (consumed once). */
+export declare function takeShellAstOperationComparison(): ShellAstOperationComparison | undefined;
 /**
  * Check a tool call against action policies.
  * Returns the most restrictive matching verdict (pure — callers do their own logging).