pi-codex-auto-review 0.1.0

package/dist/cli.js

@@ -0,0 +1,70 @@
+#!/usr/bin/env node
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { InteractiveMode, runPrintMode, runRpcMode } from '@earendil-works/pi-coding-agent';
+import { createGuardedRuntime } from './startup.js';
+export async function main(argv) {
+    let mode = 'tui', cwd = process.cwd(), agentDir = process.env.PI_CODING_AGENT_DIR ?? join(homedir(), '.pi', 'agent'), settingsPath, isProjectTrusted;
+    let provider, modelId;
+    const prompts = [], trustedExtensionPaths = [];
+    for (let i = 0; i < argv.length; i++) {
+        const item = argv[i];
+        if (item === '--help' || item === '-h') {
+            console.log('사용법: pi-codex-auto-review [--cwd 경로] [--agent-dir 경로] [--policy 파일] [--trust-project] [--extension 경로 ...] [--provider 공급자 --model 모델] [--mode tui|print|json|rpc] [프롬프트]\n--extension(-e)은 반복할 수 있으며, 해당 코드 디렉터리를 신뢰하고 모델 쓰기에서 보호합니다. 경로는 명령을 실행한 디렉터리를 기준으로 해석합니다.');
+            return;
+        }
+        if (item === '--') {
+            prompts.push(...argv.slice(i + 1));
+            break;
+        }
+        if (item === '--trust-project') {
+            isProjectTrusted = true;
+            continue;
+        }
+        if (['--mode', '--cwd', '--agent-dir', '--policy', '--extension', '-e', '--provider', '--model'].includes(item)) {
+            const value = argv[++i];
+            if (!value || value.startsWith('--'))
+                throw new Error(`${item}: 값이 필요합니다`);
+            if (item === '--mode')
+                mode = value;
+            if (item === '--cwd')
+                cwd = value;
+            if (item === '--agent-dir')
+                agentDir = value;
+            if (item === '--policy')
+                settingsPath = value;
+            if (item === '--extension' || item === '-e')
+                trustedExtensionPaths.push(resolve(value));
+            if (item === '--provider')
+                provider = value;
+            if (item === '--model')
+                modelId = value;
+        }
+        else if (item === '-p')
+            mode = 'print';
+        else if (item.startsWith('-'))
+            throw new Error(`지원하지 않는 옵션: ${item}`);
+        else
+            prompts.push(item);
+    }
+    if (!['tui', 'print', 'json', 'rpc'].includes(mode))
+        throw new Error(`지원하지 않는 실행 모드: ${mode}`);
+    if (Boolean(provider) !== Boolean(modelId))
+        throw new Error('--provider와 --model을 함께 지정해야 합니다');
+    const runtime = await createGuardedRuntime({ cwd: resolve(cwd), agentDir: resolve(agentDir), settingsPath: settingsPath ? resolve(settingsPath) : undefined, isProjectTrusted, trustedExtensionPaths, ...(provider && modelId ? { modelSelection: { provider, id: modelId } } : {}) });
+    try {
+        if (mode === 'rpc')
+            await runRpcMode(runtime);
+        else if (mode === 'tui')
+            await new InteractiveMode(runtime, { initialMessage: prompts.join(' ') || undefined }).run();
+        else
+            process.exitCode = await runPrintMode(runtime, { mode: mode === 'json' ? 'json' : 'text', initialMessage: prompts.join(' ') || undefined });
+    }
+    finally {
+        await runtime.dispose();
+    }
+}
+if (process.argv[1] && import.meta.url === pathToFileURL(resolve(process.argv[1])).href)
+    main(process.argv.slice(2)).catch(error => { console.error(`pi-codex-auto-review: ${error.message}`); process.exitCode = 1; });
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc;IACvC,IAAI,IAAI,GAAG,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAC,KAAK,EAAC,OAAO,CAAC,EAAE,YAAgC,EAAE,gBAAqC,CAAC;IAC5L,IAAI,QAA4B,EAAE,OAA2B,CAAC;IAC9D,MAAM,OAAO,GAAa,EAAE,EAAE,qBAAqB,GAAa,EAAE,CAAC;IACnE,KAAK,IAAI,CAAC,GAAC,CAAC,EAAC,CAAC,GAAC,IAAI,CAAC,MAAM,EAAC,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAC,IAAI,CAAC,CAAC,CAAE,CAAC;QACpB,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAAA,OAAO,CAAC,GAAG,CAAC,sQAAsQ,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QACrU,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAAA,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAC,CAAC,CAAC,CAAC,CAAC;YAAA,MAAM;QAAA,CAAC;QAC5D,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAAA,gBAAgB,GAAC,IAAI,CAAC;YAAA,SAAS;QAAA,CAAC;QACjE,IAAI,CAAC,QAAQ,EAAC,OAAO,EAAC,aAAa,EAAC,UAAU,EAAC,aAAa,EAAC,IAAI,EAAC,YAAY,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACzG,MAAM,KAAK,GAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC;YAClG,IAAG,IAAI,KAAG,QAAQ;gBAAC,IAAI,GAAC,KAAK,CAAC;YAAC,IAAG,IAAI,KAAG,OAAO;gBAAC,GAAG,GAAC,KAAK,CAAC;YAAC,IAAG,IAAI,KAAG,aAAa;gBAAC,QAAQ,GAAC,KAAK,CAAC;YAAA,IAAG,IAAI,KAAG,UAAU;gBAAC,YAAY,GAAC,KAAK,CAAC;YAC3I,IAAG,IAAI,KAAG,aAAa,IAAE,IAAI,KAAG,IAAI;gBAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAChF,IAAG,IAAI,KAAG,YAAY;gBAAC,QAAQ,GAAC,KAAK,CAAC;YAAA,IAAG,IAAI,KAAG,SAAS;gBAAC,OAAO,GAAC,KAAK,CAAC;QAC1E,CAAC;aAAM,IAAG,IAAI,KAAG,IAAI;YAAC,IAAI,GAAC,OAAO,CAAC;aAAM,IAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;;YAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnI,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,EAAC,OAAO,EAAC,MAAM,EAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAC3F,IAAG,OAAO,CAAC,QAAQ,CAAC,KAAG,OAAO,CAAC,OAAO,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAC,MAAM,oBAAoB,CAAC,EAAC,GAAG,EAAC,OAAO,CAAC,GAAG,CAAC,EAAC,QAAQ,EAAC,OAAO,CAAC,QAAQ,CAAC,EAAC,YAAY,EAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,EAAC,gBAAgB,EAAC,qBAAqB,EAAC,GAAG,CAAC,QAAQ,IAAE,OAAO,CAAA,CAAC,CAAA,EAAC,cAAc,EAAC,EAAC,QAAQ,EAAC,EAAE,EAAC,OAAO,EAAC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC;IAC9P,IAAI,CAAC;QACH,IAAG,IAAI,KAAG,KAAK;YAAC,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;aACrC,IAAG,IAAI,KAAG,KAAK;YAAC,MAAM,IAAI,eAAe,CAAC,OAAO,EAAC,EAAC,cAAc,EAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,EAAC,CAAC,CAAC,GAAG,EAAE,CAAC;;YACzG,OAAO,CAAC,QAAQ,GAAC,MAAM,YAAY,CAAC,OAAO,EAAC,EAAC,IAAI,EAAC,IAAI,KAAG,MAAM,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,MAAM,EAAC,cAAc,EAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,EAAC,CAAC,CAAC;IACrI,CAAC;YAAS,CAAC;QAAA,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AACtC,CAAC;AACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;IAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA,EAAE,GAAC,OAAO,CAAC,KAAK,CAAC,yBAA0B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA,OAAO,CAAC,QAAQ,GAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC"}

package/dist/context-files.d.ts

@@ -0,0 +1,14 @@
+import { type PermissionProfile } from './contracts.js';
+import type { GuardSettings } from './policy/index.js';
+export interface ContextFile {
+    readonly path: string;
+    readonly content: string;
+}
+/** Codex a956835d/core/src/agents_md.rs precedence, traversal and aggregate byte budget. */
+export declare function loadContextFiles(options: {
+    cwd: string;
+    agentDir: string;
+    profile: PermissionProfile;
+    settings: GuardSettings;
+    isProjectTrusted: boolean;
+}): ContextFile[];

package/dist/context-files.js

@@ -0,0 +1,113 @@
+import { constants, openSync, closeSync, fstatSync, readSync, realpathSync, statSync } from 'node:fs';
+import { dirname, join, resolve, basename } from 'node:path';
+import { GuardError } from './contracts.js';
+import { isWithin } from './policy/paths.js';
+const NAMES = ['AGENTS.override.md', 'AGENTS.md'];
+function isMissing(error) { return ['ENOENT', 'ENOTDIR'].includes(error.code ?? ''); }
+function isFilename(name) {
+    return !!name && !['.', '..'].includes(name) && !name.includes('\0') && basename(name) === name && (process.platform !== 'win32' || !/[\\:]/.test(name));
+}
+function exists(path) {
+    try {
+        statSync(path);
+        return true;
+    }
+    catch (error) {
+        if (isMissing(error))
+            return false;
+        throw error;
+    }
+}
+function choose(directory, names) {
+    for (const name of names) {
+        const path = join(directory, name);
+        try {
+            if (statSync(path).isFile())
+                return path;
+        }
+        catch (error) {
+            if (!isMissing(error))
+                throw error;
+        }
+    }
+}
+function boundedRead(path, maxBytes, profile, isGlobal, agentDir) {
+    const target = realpathSync(path);
+    // Only the specifically selected global instruction file is an internal controller read.
+    const isGlobalInstruction = isGlobal && target === join(realpathSync(agentDir), basename(path)) && NAMES.includes(basename(path));
+    if (!isGlobalInstruction && (profile.denyRead.some(root => isWithin(target, root)) || !profile.readRoots.some(root => isWithin(target, root)))) {
+        throw new GuardError('CONTEXT_FILE_DENIED', `Instruction file crosses a protected read boundary: ${path}`);
+    }
+    const expected = statSync(target);
+    if (!expected.isFile() || expected.nlink > 1)
+        throw new GuardError('CONTEXT_FILE_DENIED', 'Instruction file must be a regular file without hard-link aliases');
+    const fd = openSync(target, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    try {
+        const actual = fstatSync(fd);
+        if (!actual.isFile() || actual.dev !== expected.dev || actual.ino !== expected.ino || actual.nlink > 1 || realpathSync(path) !== target)
+            throw new GuardError('CONTEXT_FILE_CHANGED', 'Instruction file changed during loading');
+        const data = Buffer.alloc(Math.min(actual.size, maxBytes));
+        let count = 0;
+        while (count < data.length) {
+            const read = readSync(fd, data, count, data.length - count, count);
+            if (!read)
+                break;
+            count += read;
+        }
+        const content = data.subarray(0, count).toString('utf8');
+        return content.trim() ? { file: { path, content }, bytesRead: count } : undefined;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Codex a956835d/core/src/agents_md.rs precedence, traversal and aggregate byte budget. */
+export function loadContextFiles(options) {
+    const { settings, profile } = options;
+    const result = [];
+    // The host's agent directory is the Pi equivalent of Codex's instruction home.
+    for (const name of NAMES) {
+        const global = choose(options.agentDir, [name]);
+        if (!global)
+            continue;
+        const file = boundedRead(global, 32768, profile, true, options.agentDir);
+        if (file) {
+            result.push(file.file);
+            break;
+        }
+    }
+    if (!options.isProjectTrusted || settings.projectDocMaxBytes === 0)
+        return result;
+    const cwd = resolve(options.cwd), markers = (settings.projectRootMarkers ?? ['.git']).filter(isFilename);
+    let root;
+    for (let dir = cwd; markers.length; dir = dirname(dir)) {
+        if (markers.some(name => exists(join(dir, name)))) {
+            root = dir;
+            break;
+        }
+        if (dirname(dir) === dir)
+            break;
+    }
+    const directories = [cwd];
+    if (root)
+        for (let dir = cwd; dir !== root;) {
+            dir = dirname(dir);
+            directories.unshift(dir);
+        }
+    const names = [...new Set([...NAMES, ...settings.projectDocFallbackFilenames.filter(isFilename)])];
+    let remaining = settings.projectDocMaxBytes;
+    for (const directory of directories) {
+        if (!remaining)
+            break;
+        const path = choose(directory, names);
+        if (!path || result.some(file => file.path === path))
+            continue;
+        const file = boundedRead(path, remaining, profile, false, options.agentDir);
+        if (file) {
+            result.push(file.file);
+            remaining = Math.max(0, remaining - file.bytesRead);
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=context-files.js.map

package/dist/context-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-files.js","sourceRoot":"","sources":["../src/context-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACtG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,UAAU,EAA0B,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAI7C,MAAM,KAAK,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;AAClD,SAAS,SAAS,CAAC,KAAc,IAAa,OAAO,CAAC,QAAQ,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAClI,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1J,CAAC;AACD,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACzG,CAAC;AACD,SAAS,MAAM,CAAC,SAAiB,EAAE,KAAwB;IACzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC;YAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;IACzG,CAAC;AACH,CAAC;AACD,SAAS,WAAW,CAAC,IAAY,EAAE,QAAgB,EAAE,OAA0B,EAAE,QAAiB,EAAE,QAAgB;IAClH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,yFAAyF;IACzF,MAAM,mBAAmB,GAAG,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAClI,IAAI,CAAC,mBAAmB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/I,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,uDAAuD,IAAI,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,mEAAmE,CAAC,CAAC;IAC/J,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,yCAAyC,CAAC,CAAC;QACjO,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC;YACnE,IAAI,CAAC,IAAI;gBAAE,MAAM;YACjB,KAAK,IAAI,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAC,IAAI,EAAE,EAAC,IAAI,EAAE,OAAO,EAAC,EAAE,SAAS,EAAE,KAAK,EAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,OAAwH;IACvJ,MAAM,EAAC,QAAQ,EAAE,OAAO,EAAC,GAAG,OAAO,CAAC;IACpC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,+EAA+E;IAC/E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzE,IAAI,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,MAAM;QAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,QAAQ,CAAC,kBAAkB,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAClF,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,kBAAkB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACzG,IAAI,IAAwB,CAAC;IAC7B,KAAK,IAAI,GAAG,GAAG,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,GAAG,GAAG,CAAC;YAAC,MAAM;QAAC,CAAC;QACzE,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,MAAM;IAClC,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,IAAI;QAAE,KAAK,IAAI,GAAG,GAAG,GAAG,EAAE,GAAG,KAAK,IAAI,GAAG,CAAC;YAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,QAAQ,CAAC,2BAA2B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACnG,IAAI,SAAS,GAAG,QAAQ,CAAC,kBAAkB,CAAC;IAC5C,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS;YAAE,MAAM;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,SAAS;QAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5E,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/contracts.d.ts

@@ -0,0 +1,258 @@
+import type { ReadToolOptions } from '@earendil-works/pi-coding-agent';
+export type Json = null | boolean | number | string | Json[] | {
+    [key: string]: Json;
+};
+export type DecisionKind = 'allow' | 'ask' | 'deny';
+export type ActionSource = 'model' | 'nested' | 'user-bash' | 'extension';
+export type EvidenceStatus = 'pass' | 'fail' | 'environment-blocked' | 'not-run';
+export type ToolName = 'bash' | 'read' | 'edit' | 'write' | 'grep' | 'find' | 'ls';
+export declare const TOOL_NAMES: readonly ToolName[];
+export interface PermissionProfile {
+    readonly mode: 'read-only' | 'workspace-write';
+    readonly readRoots: readonly string[];
+    readonly writeRoots: readonly string[];
+    readonly denyRead: readonly string[];
+    readonly denyWrite: readonly string[];
+    readonly allowedDomains: readonly string[];
+    readonly deniedDomains: readonly string[];
+    /** Base sandbox metadata protection; unlike denyWrite, eligible exact actions may request review. */
+    readonly readOnlyPaths?: readonly string[];
+}
+export interface PermissionDelta {
+    readonly readPaths: readonly string[];
+    readonly writePaths: readonly string[];
+    readonly domains: readonly string[];
+}
+export declare const EMPTY_DELTA: PermissionDelta;
+export interface GuardAction {
+    readonly schemaVersion: 1;
+    readonly toolCallId: string;
+    readonly tool: string;
+    readonly source: ActionSource;
+    readonly args: Readonly<Record<string, Json>>;
+    readonly cwd: string;
+    readonly sessionId: string;
+    readonly policyRevision: string;
+    readonly permissionDigest: string;
+    readonly digest: string;
+}
+export interface PolicyDecision {
+    readonly kind: DecisionKind;
+    readonly reason: string;
+    readonly actionDigest: string;
+    readonly delta: PermissionDelta;
+    readonly isHardDeny: boolean;
+    readonly approvalCategory?: 'sandbox' | 'rules' | 'mcp_elicitations';
+    readonly requiresFreshReview?: boolean;
+    readonly requiresUserInput?: boolean;
+    readonly authority?: ExecutionAuthority;
+}
+export type ApprovalPolicy = 'on-request' | 'never' | {
+    readonly sandbox: boolean;
+    readonly rules: boolean;
+    readonly mcp_elicitations?: boolean;
+};
+export type RiskLevel = 'low' | 'medium' | 'high' | 'critical';
+export type UserAuthorization = 'unknown' | 'low' | 'medium' | 'high';
+/** Field names intentionally match the pinned Codex assessment wire format. */
+export interface ReviewAssessment {
+    readonly risk_level: RiskLevel;
+    readonly user_authorization: UserAuthorization;
+    readonly outcome: 'allow' | 'deny';
+    readonly rationale: string;
+}
+export type ReviewTerminalState = 'approved' | 'denied' | 'timed-out' | 'aborted' | 'failed';
+export interface ReviewContextItem {
+    readonly id: string;
+    readonly source: 'user' | 'developer' | 'agents' | 'user-confirmation' | 'assistant' | 'tool-call' | 'tool-result';
+    readonly trust: 'authorization' | 'evidence';
+    readonly content: Json;
+    readonly isTruncated?: boolean;
+}
+export interface ReviewContext {
+    readonly sessionId: string;
+    readonly contextId: string;
+    readonly turnId: string;
+    readonly items: readonly ReviewContextItem[];
+    readonly digest: string;
+}
+export interface ReviewBinding {
+    readonly actionDigest: string;
+    readonly contextDigest: string;
+    readonly policyDigest: string;
+}
+export type ReviewResult = ReviewBinding & ({
+    readonly status: 'approved' | 'denied';
+    readonly assessment: ReviewAssessment;
+} | {
+    readonly status: 'timed-out' | 'aborted' | 'failed';
+    readonly failure: 'timeout' | 'cancelled' | 'provider' | 'invalid-output' | 'investigation' | 'context';
+    readonly reason: string;
+});
+export type ExecutionAuthority = {
+    readonly kind: 'sandbox' | 'scoped-permissions';
+    readonly actionDigest: string;
+} | {
+    readonly kind: 'command-rule';
+    readonly actionDigest: string;
+    readonly ruleDigest: string;
+} | {
+    readonly kind: 'reviewed-command';
+    readonly actionDigest: string;
+};
+export interface RetryAuthorization {
+    readonly id: string;
+    readonly denialId: string;
+    readonly actionIdentity: string;
+    readonly sessionId: string;
+    readonly contextId: string;
+}
+export interface RecentDenial {
+    readonly id: string;
+    readonly action: GuardAction;
+    readonly contextId: string;
+    readonly assessment: ReviewAssessment;
+}
+export interface Grant {
+    readonly id: string;
+    readonly scope: 'once' | 'session' | 'persistent';
+    readonly actionDigest: string;
+    readonly ruleDigest: string;
+    readonly sessionId: string;
+    readonly policyRevision: string;
+    readonly permissionDigest: string;
+    readonly delta: PermissionDelta;
+}
+export interface ToolResult {
+    content: ({
+        type: 'text';
+        text: string;
+    } | {
+        type: 'image';
+        data: string;
+        mimeType: string;
+    })[];
+    details?: unknown;
+    structuredContent?: Json;
+    isError?: boolean;
+}
+export interface ExecutionOptions {
+    readonly signal?: AbortSignal;
+    /** Pi BashOperations timeout is in seconds. Review and UI deadlines use milliseconds. */
+    readonly timeoutSeconds?: number;
+    readonly env?: NodeJS.ProcessEnv;
+    readonly onData?: (data: Buffer) => void;
+    readonly onUpdate?: (result: ToolResult) => void;
+    readonly authority?: ExecutionAuthority;
+    readonly onNetworkRequest?: (request: NetworkApprovalRequest, signal: AbortSignal) => Promise<boolean>;
+}
+export interface NetworkApprovalRequest {
+    readonly host: string;
+    readonly port?: number;
+}
+export type WorkerJob = {
+    kind: 'shell';
+    command: string;
+    cwd: string;
+    shellPath?: string;
+    timeoutSeconds?: number;
+    env?: NodeJS.ProcessEnv;
+} | {
+    kind: 'tool';
+    tool: ToolName;
+    args: Record<string, Json>;
+    cwd: string;
+    toolCallId: string;
+    options?: Omit<ReadToolOptions, 'operations'>;
+} | {
+    kind: 'file';
+    operation: 'read' | 'write' | 'mkdir' | 'access' | 'stat' | 'list';
+    path: string;
+    content?: string;
+    cwd: string;
+};
+export type WorkerFrame = {
+    schemaVersion: 1;
+    type: 'data';
+    data: string;
+} | {
+    schemaVersion: 1;
+    type: 'update';
+    result: ToolResult;
+} | {
+    schemaVersion: 1;
+    type: 'result';
+    result: Json;
+} | {
+    schemaVersion: 1;
+    type: 'error';
+    code: string;
+    message: string;
+};
+/** Only the unsandboxed broker's private IPC channel can send this control frame. */
+export interface BrokerControlFrame {
+    readonly schemaVersion: 1;
+    readonly type: 'workload-started';
+    readonly processGroupId: number;
+}
+/** Private controller/broker IPC only. Workload stdout must still reject these frame types. */
+export interface BrokerNetworkRequest {
+    readonly schemaVersion: 1;
+    readonly type: 'network-request';
+    readonly requestId: string;
+    readonly destination: NetworkApprovalRequest;
+}
+export interface TestEvidence {
+    readonly schemaVersion?: 1 | 2;
+    readonly runId?: string;
+    readonly artifactPath?: string;
+    readonly provenance?: 'executed' | 'preserved-legacy' | 'synthetic';
+    readonly startedAt?: string;
+    readonly recordedAt?: string;
+    readonly provider?: {
+        readonly package: string;
+        readonly version: string;
+        readonly id: string;
+        readonly model: string;
+    };
+    readonly imageDigest?: string;
+    readonly pluginArtifactDigest?: string;
+    readonly suite: string;
+    readonly status: EvidenceStatus;
+    readonly command: string;
+    readonly testFiles: readonly string[];
+    readonly coveredBehavior: readonly string[];
+    readonly tests: readonly {
+        name: string;
+        status: EvidenceStatus;
+        isSkipped?: boolean;
+    }[];
+    readonly platform: string;
+    readonly sourceDigest: string;
+    readonly contractDigest: string;
+    readonly runtimeVersions: Readonly<Record<string, string>>;
+    readonly evidenceKind: 'unit-doubles' | 'simulated-provider-ui' | 'native-os' | 'workflow';
+    readonly nativeControls?: readonly {
+        kind: 'allow' | 'deny';
+        effect: string;
+        isObserved: boolean;
+        platform: string;
+    }[];
+    readonly blockedReasons: readonly string[];
+}
+export declare class GuardError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string, options?: ErrorOptions);
+}
+export declare function canonicalJson(value: unknown): string;
+export declare function digest(value: unknown): string;
+export declare function immutable<T>(value: T): T;
+export declare function createProfile(input: PermissionProfile): PermissionProfile;
+export declare function createAction(input: Omit<GuardAction, 'schemaVersion' | 'digest' | 'permissionDigest'>, profile: PermissionProfile): GuardAction;
+/** Reusable grants still bind exact inputs/cwd/source/profile, but not a previous logical call id. */
+export declare function ruleDigest(action: GuardAction): string;
+/** A retry gets a new invocation ID, but cannot change session, semantics or context. */
+export declare function retryIdentity(action: GuardAction, contextId: string): string;
+export declare function approvalEligible(policy: ApprovalPolicy, category: 'sandbox' | 'rules' | 'mcp_elicitations'): boolean;
+export declare function decision(action: GuardAction, kind: DecisionKind, reason: string, delta?: PermissionDelta, isHardDeny?: boolean): PolicyDecision;
+export declare function validateWorkerFrame(value: unknown): WorkerFrame;

package/dist/contracts.js

@@ -0,0 +1,102 @@
+import { isDomainPattern, normalizeHost } from './policy/domains.js';
+import { createHash } from 'node:crypto';
+import { isAbsolute, resolve } from 'node:path';
+export const TOOL_NAMES = Object.freeze(['bash', 'read', 'edit', 'write', 'grep', 'find', 'ls']);
+export const EMPTY_DELTA = Object.freeze({ readPaths: Object.freeze([]), writePaths: Object.freeze([]), domains: Object.freeze([]) });
+export class GuardError extends Error {
+    code;
+    constructor(code, message, options) {
+        super(message, options);
+        this.code = code;
+        this.name = 'GuardError';
+    }
+}
+export function canonicalJson(value) {
+    if (value === null || typeof value === 'string' || typeof value === 'boolean')
+        return JSON.stringify(value);
+    if (typeof value === 'number' && Number.isFinite(value))
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(',')}]`;
+    if (typeof value === 'object' && value !== null && Object.getPrototypeOf(value) === Object.prototype) {
+        return `{${Object.keys(value).sort().map(key => `${JSON.stringify(key)}:${canonicalJson(value[key])}`).join(',')}}`;
+    }
+    throw new GuardError('INVALID_JSON', 'Expected finite JSON data');
+}
+export function digest(value) {
+    return createHash('sha256').update(canonicalJson(value)).digest('hex');
+}
+export function immutable(value) {
+    if (value && typeof value === 'object') {
+        for (const item of Object.values(value))
+            immutable(item);
+        Object.freeze(value);
+    }
+    return value;
+}
+export function createProfile(input) {
+    if (!['read-only', 'workspace-write'].includes(input.mode))
+        throw new GuardError('INVALID_PROFILE', 'Unknown permission mode');
+    for (const key of ['readRoots', 'writeRoots', 'denyRead', 'denyWrite']) {
+        if (!Array.isArray(input[key]) || input[key].some(p => typeof p !== 'string' || !isAbsolute(p) || p.includes('\0')))
+            throw new GuardError('INVALID_PROFILE', `Invalid ${key}`);
+    }
+    if (input.readOnlyPaths !== undefined && (!Array.isArray(input.readOnlyPaths) || input.readOnlyPaths.some(path => typeof path !== 'string' || !isAbsolute(path) || path.includes('\0'))))
+        throw new GuardError('INVALID_PROFILE', 'Invalid readOnlyPaths');
+    if (input.mode === 'read-only' && input.writeRoots.length)
+        throw new GuardError('INVALID_PROFILE', 'Read-only profiles cannot contain write roots');
+    for (const key of ['allowedDomains', 'deniedDomains']) {
+        if (!Array.isArray(input[key]) || input[key].some(p => !isDomainPattern(p)))
+            throw new GuardError('INVALID_PROFILE', `Invalid ${key}`);
+    }
+    return immutable(JSON.parse(canonicalJson({ ...input, allowedDomains: input.allowedDomains.map(normalizeHost), deniedDomains: input.deniedDomains.map(normalizeHost) })));
+}
+export function createAction(input, profile) {
+    for (const key of ['toolCallId', 'tool', 'cwd', 'sessionId', 'policyRevision']) {
+        if (typeof input[key] !== 'string' || !input[key] || input[key].includes('\0'))
+            throw new GuardError('INVALID_ACTION', `Invalid ${key}`);
+    }
+    if (!['model', 'nested', 'user-bash', 'extension'].includes(input.source))
+        throw new GuardError('INVALID_ACTION', 'Invalid action source');
+    if (!input.args || Array.isArray(input.args) || typeof input.args !== 'object')
+        throw new GuardError('INVALID_ACTION', 'Arguments must be an object');
+    const fields = JSON.parse(canonicalJson({ ...input, cwd: resolve(input.cwd), schemaVersion: 1, permissionDigest: digest(profile) }));
+    return immutable({ ...fields, digest: digest(fields) });
+}
+/** Reusable grants still bind exact inputs/cwd/source/profile, but not a previous logical call id. */
+export function ruleDigest(action) {
+    const { digest: ignoredDigest, toolCallId: ignoredId, sessionId: ignoredSession, ...fields } = action;
+    return digest(fields);
+}
+/** A retry gets a new invocation ID, but cannot change session, semantics or context. */
+export function retryIdentity(action, contextId) {
+    // A runtime destination belongs to the same semantic command even though its new
+    // invocation necessarily has a different origin digest. Destination/port stay bound.
+    const { originatingActionDigest: ignoredOrigin, ...networkArgs } = action.args;
+    const semantic = action.args.networkDestination && typeof ignoredOrigin === 'string' ? { ...action, args: networkArgs } : action;
+    return digest({ action: ruleDigest(semantic), sessionId: action.sessionId, contextId });
+}
+export function approvalEligible(policy, category) {
+    return policy === 'on-request' || (typeof policy === 'object' && policy[category] === true);
+}
+export function decision(action, kind, reason, delta = EMPTY_DELTA, isHardDeny = false) {
+    if (!['allow', 'ask', 'deny'].includes(kind) || (isHardDeny && kind !== 'deny'))
+        throw new GuardError('INVALID_DECISION', 'Invalid decision');
+    return immutable({ kind, reason, actionDigest: action.digest, delta: JSON.parse(canonicalJson(delta)), isHardDeny });
+}
+export function validateWorkerFrame(value) {
+    const frame = value;
+    if (!frame || frame.schemaVersion !== 1 || !['data', 'update', 'result', 'error'].includes(frame.type))
+        throw new GuardError('INVALID_IPC', 'Invalid worker frame');
+    canonicalJson(value);
+    if (frame.type === 'data' && typeof frame.data !== 'string')
+        throw new GuardError('INVALID_IPC', 'Invalid data frame');
+    if (frame.type === 'error' && (typeof frame.code !== 'string' || typeof frame.message !== 'string'))
+        throw new GuardError('INVALID_IPC', 'Invalid error frame');
+    if (frame.type === 'result' && !Object.hasOwn(frame, 'result'))
+        throw new GuardError('INVALID_IPC', 'Missing worker result');
+    if (frame.type === 'update' && (!frame.result || !Array.isArray(frame.result.content)))
+        throw new GuardError('INVALID_IPC', 'Invalid update');
+    return frame;
+}
+//# sourceMappingURL=contracts.js.map

package/dist/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQhD,MAAM,CAAC,MAAM,UAAU,GAAwB,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAkBtH,MAAM,CAAC,MAAM,WAAW,GAAoB,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AA6IvJ,MAAM,OAAO,UAAW,SAAQ,KAAK;IACd;IAArB,YAAqB,IAAY,EAAE,OAAe,EAAE,OAAsB;QACxE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QADL,SAAI,GAAJ,IAAI,CAAQ;QAE/B,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5G,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QACrG,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnJ,CAAC;IACD,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;AACpE,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AACD,MAAM,UAAU,SAAS,CAAI,KAAQ;IACnC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAwB;IACpD,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;IAC/H,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,CAAU,EAAE,CAAC;QAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IACjL,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IAC3P,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,+CAA+C,CAAC,CAAC;IACpJ,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAU,EAAE,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IACzI,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAC,GAAG,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,EAAC,CAAC,CAAsB,CAAC,CAAC;AAC/L,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,KAAyE,EAAE,OAA0B;IAChI,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,CAAU,EAAE,CAAC;QACxF,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IAC3I,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;IAC3I,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;IACtJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACrI,OAAO,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC1D,CAAC;AACD,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC5C,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;IACtG,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AACD,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,MAAmB,EAAE,SAAiB;IAClE,iFAAiF;IACjF,qFAAqF;IACrF,MAAM,EAAC,uBAAuB,EAAE,aAAa,EAAE,GAAG,WAAW,EAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAC,GAAG,MAAM,EAAE,IAAI,EAAE,WAAW,EAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/H,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1F,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,MAAsB,EAAE,QAAkD;IACzG,OAAO,MAAM,KAAK,YAAY,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;AAC9F,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,MAAmB,EAAE,IAAkB,EAAE,MAAc,EAAE,QAAyB,WAAW,EAAE,UAAU,GAAG,KAAK;IACxI,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,KAAK,MAAM,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IAC9I,OAAO,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;AACvH,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,KAAK,GAAG,KAAoB,CAAC;IACnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IACpK,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IACvH,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAChK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IAC7H,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC9I,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,28 @@
+import { type ExtensionFactory, type BashToolOptions, type ReadToolOptions, type McpExtensionOptions } from '@earendil-works/pi-coding-agent';
+import { type GuardSettings } from './policy/index.js';
+import { type SandboxExecutor } from './sandbox/executor.js';
+import { GuardController } from './tools/controller.js';
+import type { PermissionProfile } from './contracts.js';
+import type { ReviewProvider } from './reviewer.js';
+import { type McpToolPolicies } from './tools/mcp.js';
+export interface GuardOptions {
+    cwd?: string;
+    agentDir?: string;
+    settings?: Partial<GuardSettings>;
+    settingsPath?: string;
+    profile?: PermissionProfile;
+    executor?: SandboxExecutor;
+    provider?: ReviewProvider;
+    bashOptions?: Omit<BashToolOptions, 'operations'>;
+    readOptions?: Omit<ReadToolOptions, 'operations'>;
+    /** Trusted code directories are protected against model writes, including imported siblings. */
+    trustedExtensionPaths?: readonly string[];
+    mcp?: McpExtensionOptions | false;
+    mcpToolPolicies?: McpToolPolicies;
+}
+export declare function createGuardExtension(options?: GuardOptions): {
+    factory: ExtensionFactory;
+    assertReady(): GuardController;
+};
+declare const _default: ExtensionFactory;
+export default _default;