indusagi-coding-agent 0.2.3 → 0.2.4

package/dist/guardrails.js

@@ -7849,8 +7849,18 @@ function resolveRuleDecision(toolName, input, rules, mode, readOnlyExtra) {
   }
   return "ask";
 }
+function allowAlwaysRuleStrings(toolName, input) {
+  if (isBashTool(toolName)) {
+    const bag = input;
+    const command = typeof input === "string" ? input : bag !== null && typeof bag === "object" && typeof bag.command === "string" ? bag.command : "";
+    if (command.length > 0) {
+      return bashSubcommandSubjects(command).map((subject) => `${toolName}(${subject})`);
+    }
+  }
+  return [toolName];
+}
 function noResolverMessage(toolName) {
-  return `Tool "${toolName}" requires approval, but this session is non-interactive (no approval prompt is available). Denying. Add an allow rule under permissions.allow in settings, or run with --permission-mode acceptEdits/bypass, to permit it.`;
+  return `Tool "${toolName}" requires approval, but no interactive approval prompt is available here (a non-interactive run, or a sub-agent). Denying. Add an allow rule under permissions.allow in settings, or run with --permission-mode acceptEdits/bypass, to permit it.`;
 }
 function declinedMessage(toolName) {
   return `Tool "${toolName}" was denied by the user.`;
@@ -7892,13 +7902,18 @@ function createPermissionGate(config) {
     } catch {
       choice = "deny";
     }
-    if (choice === "deny") {
-      return { behavior: "deny", message: declinedMessage(toolName) };
+    if (choice === "allow-once" || choice === "allow-always") {
+      if (choice === "allow-always" && config.appendAllowRule) {
+        for (const raw of allowAlwaysRuleStrings(toolName, input)) {
+          config.appendAllowRule(makeRule("allow", raw));
+        }
+      }
+      return { behavior: "allow" };
     }
-    if (choice === "allow-always" && config.appendAllowRule) {
-      config.appendAllowRule(makeRule("allow", toolName));
+    if (choice === "unavailable") {
+      return { behavior: "deny", message: noResolverMessage(toolName) };
     }
-    return { behavior: "allow" };
+    return { behavior: "deny", message: declinedMessage(toolName) };
   };
 }