pi-codex-auto-review 0.1.0

package/dist/policy/paths.js

@@ -0,0 +1,54 @@
+import { realpath, access } from 'node:fs/promises';
+import { dirname, isAbsolute, relative, resolve, sep, join } from 'node:path';
+import { homedir } from 'node:os';
+import { fileURLToPath } from 'node:url';
+import { GuardError } from '../contracts.js';
+export function isWithin(path, root) {
+    const rel = relative(root, path);
+    return rel === '' || (!rel.startsWith(`..${sep}`) && rel !== '..' && !isAbsolute(rel));
+}
+/** Pi 0.99.1 file-input semantics, including its screenshot filename variants. */
+export async function resolveToolPath(input, cwd, isRead = false, homeDir = homedir()) {
+    if (typeof input !== 'string' || input.includes('\0'))
+        throw new GuardError('INVALID_PATH', 'Invalid file input');
+    let path = input.replace(/[\u00A0\u2000-\u200A\u202F\u205F\u3000]/g, ' ').replace(/^@/, '');
+    if (path === '~')
+        path = homeDir;
+    else if (path.startsWith('~/'))
+        path = join(homeDir, path.slice(2));
+    else if (path.startsWith('file://'))
+        path = fileURLToPath(path);
+    const resolved = resolve(cwd, path);
+    if (!isRead)
+        return resolved;
+    const nfd = resolved.normalize('NFD');
+    for (const candidate of [...new Set([resolved, resolved.replace(/ (AM|PM)\./gi, '\u202F$1.'), nfd, resolved.replace(/'/g, '\u2019'), nfd.replace(/'/g, '\u2019')])]) {
+        try {
+            await access(candidate);
+            return candidate;
+        }
+        catch { }
+    }
+    return resolved;
+}
+/** Resolve existing ancestors as well as missing write targets, never just string prefixes. */
+export async function canonicalPath(path, cwd) {
+    if (typeof path !== 'string' || !path || path.includes('\0'))
+        throw new GuardError('INVALID_PATH', 'Invalid path');
+    const absolute = resolve(cwd, path);
+    let ancestor = absolute;
+    for (;;) {
+        try {
+            return resolve(await realpath(ancestor), relative(ancestor, absolute));
+        }
+        catch (error) {
+            if (!['ENOENT', 'ENOTDIR'].includes(error.code ?? ''))
+                throw error;
+            const parent = dirname(ancestor);
+            if (parent === ancestor)
+                throw new GuardError('INVALID_PATH', 'Cannot resolve path', { cause: error });
+            ancestor = parent;
+        }
+    }
+}
+//# sourceMappingURL=paths.js.map

package/dist/policy/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/policy/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY;IACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACzF,CAAC;AACD,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAa,EAAE,GAAW,EAAE,MAAM,GAAG,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE;IACnG,IAAG,OAAO,KAAK,KAAG,QAAQ,IAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAC,MAAM,IAAI,UAAU,CAAC,cAAc,EAAC,oBAAoB,CAAC,CAAC;IAC3G,IAAI,IAAI,GAAC,KAAK,CAAC,OAAO,CAAC,0CAA0C,EAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAC,EAAE,CAAC,CAAC;IACxF,IAAG,IAAI,KAAG,GAAG;QAAC,IAAI,GAAC,OAAO,CAAC;SAAK,IAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAC,IAAI,GAAC,IAAI,CAAC,OAAO,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;SACrF,IAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAC,IAAI,GAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAC,OAAO,CAAC,GAAG,EAAC,IAAI,CAAC,CAAC;IACjC,IAAG,CAAC,MAAM;QAAC,OAAO,QAAQ,CAAC;IAC3B,MAAM,GAAG,GAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpC,KAAI,MAAM,SAAS,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAC,WAAW,CAAC,EAAC,GAAG,EAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,QAAQ,CAAC,EAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5J,IAAG,CAAC;YAAA,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAAA,OAAO,SAAS,CAAC;QAAA,CAAC;QAAA,MAAK,CAAC,CAAA,CAAC;IACvD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AACD,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,GAAW;IAC3D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IACnH,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpC,IAAI,QAAQ,GAAG,QAAQ,CAAC;IACxB,SAAS,CAAC;QACR,IAAI,CAAC;YAAC,OAAO,OAAO,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAAC,CAAC;QAC/E,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC9F,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,MAAM,KAAK,QAAQ;gBAAE,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,qBAAqB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACvG,QAAQ,GAAG,MAAM,CAAC;QACpB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/policy/rules.d.ts

@@ -0,0 +1,36 @@
+export interface PrefixRule {
+    readonly pattern: readonly (string | readonly string[])[];
+    readonly decision: 'allow' | 'prompt' | 'forbidden';
+    readonly justification?: string;
+}
+export declare function matchesRule(argv: readonly string[], rule: PrefixRule): boolean;
+export declare const CODEX_EXECPOLICY_REVISION = "a956835d020762cb2b570053af06f643a11c0ecc";
+export interface RuleSource {
+    readonly name: string;
+    readonly source: string;
+}
+export interface RuleMatch {
+    readonly decision: PrefixRule['decision'];
+    readonly justification?: string | null;
+    readonly matchedPrefix: readonly string[];
+    readonly resolvedProgram?: string | null;
+}
+export interface CompiledRules {
+    readonly revision: string;
+    readonly rules: readonly PrefixRule[];
+    readonly matches: readonly (readonly RuleMatch[])[];
+    readonly allowedDomains: readonly string[];
+    readonly deniedDomains: readonly string[];
+    readonly networkRules: readonly {
+        host: string;
+        protocol: string;
+        decision: PrefixRule['decision'];
+        justification?: string | null;
+    }[];
+    readonly hostExecutables: Readonly<Record<string, readonly string[]>>;
+}
+/** Compatibility reader; parsing and example validation run in Codex's actual Starlark engine. */
+export declare function parseRules(source: string): readonly PrefixRule[];
+export declare function evaluateRules(sources: readonly RuleSource[], commands?: readonly (readonly string[])[], signal?: AbortSignal): Promise<CompiledRules>;
+/** Advanced scripts are matched as the real outer shell invocation, never as a safe inner prefix. */
+export declare function ruleCommands(command: string, shellPath?: string, depth?: number): readonly (readonly string[])[];

package/dist/policy/rules.js

@@ -0,0 +1,61 @@
+import { basename } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { execFile, spawnSync } from 'node:child_process';
+import { promisify } from 'node:util';
+import { GuardError, immutable } from '../contracts.js';
+import { analyzeShell } from './shell.js';
+export function matchesRule(argv, rule) {
+    return rule.pattern.length <= argv.length && rule.pattern.every((part, index) => typeof part === 'string' ? part === argv[index] : part.includes(argv[index]));
+}
+export const CODEX_EXECPOLICY_REVISION = 'a956835d020762cb2b570053af06f643a11c0ecc';
+const MAX_BYTES = 8 * 1024 * 1024;
+const helper = fileURLToPath(new URL(`../native/${process.platform}-${process.arch}/pi-guard-execpolicy${process.platform === 'win32' ? '.exe' : ''}`, import.meta.url));
+const helperEnvironment = process.platform === 'win32' ? { SystemRoot: process.env.SystemRoot } : {};
+const execute = promisify(execFile);
+function request(sources, commands) {
+    const input = JSON.stringify({ sources, commands });
+    if (Buffer.byteLength(input) > MAX_BYTES)
+        throw new GuardError('INVALID_RULES', 'Rule request exceeds the supported size');
+    return input;
+}
+function decode(stdout) {
+    const result = JSON.parse(stdout);
+    if (result.revision !== CODEX_EXECPOLICY_REVISION || !Array.isArray(result.rules) || !Array.isArray(result.matches) || !Array.isArray(result.allowedDomains) || !Array.isArray(result.deniedDomains))
+        throw new GuardError('INVALID_RULES', 'Unexpected Codex rule engine response');
+    return immutable(result);
+}
+/** Compatibility reader; parsing and example validation run in Codex's actual Starlark engine. */
+export function parseRules(source) {
+    const result = spawnSync(helper, [], { input: request([{ name: 'inline.rules', source }], []), encoding: 'utf8', timeout: 10000, killSignal: 'SIGKILL', maxBuffer: MAX_BYTES, env: helperEnvironment });
+    if (result.error || result.status !== 0)
+        throw new GuardError('INVALID_RULES', `Codex rule engine failed: ${result.stderr?.slice(0, 4000) || result.error?.message || result.signal}`, { cause: result.error });
+    return decode(result.stdout).rules;
+}
+export async function evaluateRules(sources, commands = [], signal) {
+    const input = request(sources, commands);
+    try {
+        const running = execute(helper, [], { encoding: 'utf8', timeout: 10000, killSignal: 'SIGKILL', maxBuffer: MAX_BYTES, env: helperEnvironment, signal });
+        running.child.stdin?.end(input);
+        // A failed spawn can close stdin before its queued input has been delivered.
+        running.child.stdin?.on('error', () => { });
+        return decode((await running).stdout);
+    }
+    catch (error) {
+        throw new GuardError('INVALID_RULES', 'Codex rule engine could not evaluate the trusted rules', { cause: error });
+    }
+}
+/** Advanced scripts are matched as the real outer shell invocation, never as a safe inner prefix. */
+export function ruleCommands(command, shellPath = '/bin/bash', depth = 0) {
+    const parsed = analyzeShell(command);
+    if (!parsed.isSupported || parsed.commands.some(item => item.reads.length || item.writes.length) || depth > 4)
+        return [[shellPath, '-c', command]];
+    return parsed.commands.flatMap(item => {
+        if (['bash', 'sh', 'zsh', 'dash'].includes(basename(item.argv[0])) && item.argv.length === 3 && ['-c', '-lc'].includes(item.argv[1])) {
+            const inner = analyzeShell(item.argv[2]);
+            if (inner.isSupported && inner.commands.every(part => !part.reads.length && !part.writes.length))
+                return ruleCommands(item.argv[2], item.argv[0], depth + 1);
+        }
+        return [item.argv];
+    });
+}
+//# sourceMappingURL=rules.js.map

package/dist/policy/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/policy/rules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAO1C,MAAM,UAAU,WAAW,CAAC,IAAuB,EAAE,IAAgB;IACnE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAE,CAAC,CAAC,CAAC;AAClK,CAAC;AACD,MAAM,CAAC,MAAM,yBAAyB,GAAG,0CAA0C,CAAC;AAYpF,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAClC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,aAAa,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,uBAAuB,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACzK,MAAM,iBAAiB,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnG,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACpC,SAAS,OAAO,CAAC,OAA8B,EAAE,QAAwC;IACvF,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAC,OAAO,EAAE,QAAQ,EAAC,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,yCAAyC,CAAC,CAAC;IAC3H,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,MAAM,CAAC,MAAc;IAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAkB,CAAC;IACnD,IAAI,MAAM,CAAC,QAAQ,KAAK,yBAAyB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,uCAAuC,CAAC,CAAC;IACrR,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AACD,kGAAkG;AAClG,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,EAAE,EAAE,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC,EAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAC,CAAC,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,iBAAiB,EAAC,CAAC,CAAC;IACpM,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,6BAA6B,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,EAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAC,CAAC,CAAC;IAC9M,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC;AACrC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA8B,EAAE,WAA2C,EAAE,EAAE,MAAoB;IACrI,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,EAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAC,CAAC,CAAC;QACrJ,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,6EAA6E;QAC7E,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,wDAAwD,EAAE,EAAC,KAAK,EAAE,KAAK,EAAC,CAAC,CAAC;IAAC,CAAC;AACtI,CAAC;AACD,qGAAqG;AACrG,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,SAAS,GAAG,WAAW,EAAE,KAAK,GAAG,CAAC;IAC9E,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnJ,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QACpC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;YACvI,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;YAC1C,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACjK,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/policy/shell.d.ts

@@ -0,0 +1,14 @@
+export interface ParsedCommand {
+    readonly argv: readonly string[];
+    readonly writes: readonly string[];
+    readonly reads: readonly string[];
+}
+export interface ShellAnalysis {
+    readonly commands: readonly ParsedCommand[];
+    readonly isSupported: boolean;
+    readonly reason?: string;
+}
+/** A bounded literal grammar. Expansion/interpreters cannot borrow permission from their first word. */
+export declare function analyzeShell(command: string): ShellAnalysis;
+export declare function matchesPrefix(argv: readonly string[], prefix: readonly string[]): boolean;
+export declare const INTERPRETERS: Set<string>;

package/dist/policy/shell.js

@@ -0,0 +1,122 @@
+import { GuardError } from '../contracts.js';
+/** A bounded literal grammar. Expansion/interpreters cannot borrow permission from their first word. */
+export function analyzeShell(command) {
+    if (typeof command !== 'string' || !command.trim() || command.includes('\0'))
+        throw new GuardError('INVALID_COMMAND', 'Invalid shell command');
+    if (command.length > 100_000)
+        return { commands: [], isSupported: false, reason: 'Command too long for literal analysis' };
+    const commands = [];
+    let argv = [], writes = [], reads = [], word = '', hasWord = false, quote = '', redirect = '';
+    let isSupported = true, reason;
+    const unsupported = (text) => { isSupported = false; reason ??= text; };
+    const finishWord = () => {
+        if (!hasWord)
+            return;
+        if (redirect === '>')
+            writes.push(word);
+        else if (redirect === '<')
+            reads.push(word);
+        else
+            argv.push(word);
+        word = '';
+        hasWord = false;
+        redirect = '';
+    };
+    const finishCommand = () => {
+        finishWord();
+        if (redirect)
+            unsupported('Missing redirection target');
+        if (argv.length)
+            commands.push({ argv, writes, reads });
+        else if (writes.length || reads.length)
+            unsupported('Redirection without literal command');
+        argv = [];
+        writes = [];
+        reads = [];
+        redirect = '';
+    };
+    for (let i = 0; i < command.length; i++) {
+        const ch = command[i];
+        if (quote === "'") {
+            if (ch === "'")
+                quote = '';
+            else
+                word += ch;
+            continue;
+        }
+        if (ch === '\\' && quote !== "'") {
+            if (i + 1 >= command.length)
+                unsupported('Trailing escape');
+            else {
+                word += command[++i];
+                hasWord = true;
+            }
+            continue;
+        }
+        if (ch === '"') {
+            quote = quote === '"' ? '' : '"';
+            hasWord = true;
+            continue;
+        }
+        if (ch === "'" && !quote) {
+            quote = "'";
+            hasWord = true;
+            continue;
+        }
+        if (ch === '$' || ch === '`')
+            unsupported('Shell expansion requires review');
+        if (quote) {
+            word += ch;
+            continue;
+        }
+        if ('(){}*?~'.includes(ch))
+            unsupported('Non-literal shell syntax requires review');
+        if (ch === '#' && !hasWord) {
+            unsupported('Comments require review');
+            break;
+        }
+        if (/\s/.test(ch) && ch !== '\n') {
+            finishWord();
+            continue;
+        }
+        if (ch === ';' || ch === '|' || ch === '&' || ch === '\n') {
+            finishCommand();
+            if (command[i + 1] === ch && '|&'.includes(ch))
+                i++;
+            else if (ch === '&')
+                unsupported('Background execution requires review');
+            continue;
+        }
+        if (ch === '>' || ch === '<') {
+            if (hasWord && /^\d+$/.test(word)) {
+                word = '';
+                hasWord = false;
+            }
+            finishWord();
+            redirect = ch;
+            if (command[i + 1] === ch) {
+                i++;
+                if (ch === '<')
+                    unsupported('Here-documents require review');
+            }
+            if (command[i + 1] === '&')
+                unsupported('Descriptor redirection requires review');
+            continue;
+        }
+        word += ch;
+        hasWord = true;
+    }
+    if (quote)
+        unsupported('Unclosed quote');
+    finishCommand();
+    if (!commands.length)
+        unsupported('No literal command');
+    if (commands.some(c => c.argv.some(a => /^\w+=/.test(a))))
+        unsupported('Environment assignments require review');
+    return { commands, isSupported, ...(reason ? { reason } : {}) };
+}
+export function matchesPrefix(argv, prefix) {
+    return prefix.length > 0 && prefix.length <= argv.length && prefix.every((arg, i) => argv[i] === arg);
+}
+export const INTERPRETERS = new Set(['bash', 'sh', 'zsh', 'fish', 'dash', 'node', 'python', 'python3', 'perl', 'ruby', 'env', 'eval', 'source', 'exec', 'xargs', 'sudo', 'osascript']);
+//# sourceMappingURL=shell.js.map

package/dist/policy/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/policy/shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAI7C,wGAAwG;AACxG,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IAC/I,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IAC3H,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,IAAI,GAAa,EAAE,EAAE,MAAM,GAAa,EAAE,EAAE,KAAK,GAAa,EAAE,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,GAAG,KAAK,EAAE,KAAK,GAAG,EAAE,EAAE,QAAQ,GAAG,EAAE,CAAC;IAC5H,IAAI,WAAW,GAAG,IAAI,EAAE,MAA0B,CAAC;IACnD,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,GAAG,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,QAAQ,KAAK,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACnC,IAAI,QAAQ,KAAK,GAAG;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACvC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,GAAG,EAAE,CAAC;QAAC,OAAO,GAAG,KAAK,CAAC;QAAC,QAAQ,GAAG,EAAE,CAAC;IAC5C,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,UAAU,EAAE,CAAC;QACb,IAAI,QAAQ;YAAE,WAAW,CAAC,4BAA4B,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,MAAM;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;aACnD,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM;YAAE,WAAW,CAAC,qCAAqC,CAAC,CAAC;QAC3F,IAAI,GAAG,EAAE,CAAC;QAAC,MAAM,GAAG,EAAE,CAAC;QAAC,KAAK,GAAG,EAAE,CAAC;QAAC,QAAQ,GAAG,EAAE,CAAC;IACpD,CAAC,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAAC,IAAI,EAAE,KAAK,GAAG;gBAAE,KAAK,GAAG,EAAE,CAAC;;gBAAM,IAAI,IAAI,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC7E,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM;gBAAE,WAAW,CAAC,iBAAiB,CAAC,CAAC;iBACvD,CAAC;gBAAC,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;YAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAAC,KAAK,GAAG,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/E,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,KAAK,GAAG,GAAG,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QACpE,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;YAAE,WAAW,CAAC,iCAAiC,CAAC,CAAC;QAC7E,IAAI,KAAK,EAAE,CAAC;YAAC,IAAI,IAAI,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACpC,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,WAAW,CAAC,0CAA0C,CAAC,CAAC;QACpF,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC;YAAC,MAAM;QAAC,CAAC;QAC9E,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAAC,UAAU,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC7D,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAC1D,aAAa,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,CAAC,EAAE,CAAC;iBAC/C,IAAI,EAAE,KAAK,GAAG;gBAAE,WAAW,CAAC,sCAAsC,CAAC,CAAC;YACzE,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAC,IAAI,GAAG,EAAE,CAAC;gBAAC,OAAO,GAAG,KAAK,CAAC;YAAC,CAAC;YAClE,UAAU,EAAE,CAAC;YAAC,QAAQ,GAAG,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,IAAI,EAAE,KAAK,GAAG;oBAAE,WAAW,CAAC,+BAA+B,CAAC,CAAC;YAAC,CAAC;YACjG,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;gBAAE,WAAW,CAAC,wCAAwC,CAAC,CAAC;YAClF,SAAS;QACX,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;QAAC,OAAO,GAAG,IAAI,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK;QAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC;IACzC,aAAa,EAAE,CAAC;IAChB,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,WAAW,CAAC,oBAAoB,CAAC,CAAC;IACxD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,WAAW,CAAC,wCAAwC,CAAC,CAAC;IACjH,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAClE,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,IAAuB,EAAE,MAAyB;IAC9E,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;AACxG,CAAC;AACD,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC"}

package/dist/reports.d.ts

@@ -0,0 +1,21 @@
+import { type TestEvidence } from './contracts.js';
+export declare function validateEvidence(evidence: TestEvidence, requiredBehavior: readonly string[], expected?: {
+    contractDigest: string;
+    sourceDigest: string;
+    platform?: string;
+    requireRun?: boolean;
+}): void;
+export declare function validatePlatformEvidence(record: {
+    platform: string;
+    status: string;
+    sourceDigest: string;
+    contractDigest: string;
+    runId?: string;
+    results: Record<string, TestEvidence>;
+}, requirements: Record<string, {
+    behavior: readonly string[];
+}>, expected: {
+    platform: string;
+    sourceDigest: string;
+    contractDigest: string;
+}): void;

package/dist/reports.js

@@ -0,0 +1,42 @@
+import { GuardError } from './contracts.js';
+export function validateEvidence(evidence, requiredBehavior, expected) {
+    if (!evidence || !['pass', 'fail', 'environment-blocked', 'not-run'].includes(evidence.status))
+        throw new GuardError('INVALID_EVIDENCE', 'Unknown evidence status');
+    if (!evidence.testFiles?.length || new Set(evidence.testFiles).size !== evidence.testFiles.length || !evidence.tests?.length)
+        throw new GuardError('MISSING_EVIDENCE', 'Missing or duplicate test files / empty suite');
+    if (new Set(evidence.tests.map(t => t.name)).size !== evidence.tests.length)
+        throw new GuardError('DUPLICATE_EVIDENCE', 'Duplicate test names');
+    if (!evidence.contractDigest || !evidence.sourceDigest || !evidence.platform || !evidence.runtimeVersions || !Object.keys(evidence.runtimeVersions).length)
+        throw new GuardError('STALE_EVIDENCE', 'Missing evidence versions');
+    if (expected && (expected.contractDigest !== evidence.contractDigest || expected.sourceDigest !== evidence.sourceDigest))
+        throw new GuardError('STALE_EVIDENCE', 'Evidence does not match current source');
+    if (expected?.platform && evidence.platform !== expected.platform)
+        throw new GuardError('WRONG_PLATFORM', 'Evidence does not match the required platform and architecture');
+    if (expected?.requireRun && (evidence.schemaVersion !== 2 || !evidence.runId || !evidence.artifactPath || !evidence.startedAt || !evidence.recordedAt || evidence.provenance !== 'executed'))
+        throw new GuardError('MISSING_PROVENANCE', 'Qualification requires an executed, addressable run');
+    if (evidence.provenance === 'synthetic' && evidence.evidenceKind === 'native-os')
+        throw new GuardError('FALSE_NATIVE', 'Synthetic storage fixtures cannot qualify native execution');
+    if (evidence.status === 'pass') {
+        if (evidence.blockedReasons.length || evidence.tests.some(t => t.status !== 'pass' || t.isSkipped))
+            throw new GuardError('FALSE_PASS', 'Skipped, blocked or failed tests cannot pass');
+        for (const requirement of requiredBehavior) {
+            if (!evidence.coveredBehavior.includes(requirement) || !evidence.tests.some(t => t.name.includes(`[${requirement}]`) && t.status === 'pass'))
+                throw new GuardError('MISSING_COVERAGE', `Missing executed proof for ${requirement}`);
+        }
+        if (evidence.suite === 'native' && evidence.evidenceKind !== 'native-os')
+            throw new GuardError('FALSE_NATIVE', 'Native evidence requires OS controls');
+        if (evidence.suite === 'native' && (!evidence.nativeControls?.some(control => control.kind === 'allow' && control.isObserved && control.platform === evidence.platform) || !evidence.nativeControls.some(control => control.kind === 'deny' && control.isObserved && control.platform === evidence.platform)))
+            throw new GuardError('FALSE_NATIVE', 'Native evidence requires observed permitted and denied controls');
+    }
+}
+export function validatePlatformEvidence(record, requirements, expected) {
+    if (!record || record.status !== 'pass' || !record.runId || record.platform !== expected.platform || record.sourceDigest !== expected.sourceDigest || record.contractDigest !== expected.contractDigest)
+        throw new GuardError('STALE_PLATFORM', 'Missing matching platform qualification');
+    for (const [name, suite] of Object.entries(requirements)) {
+        const result = record.results?.[name];
+        validateEvidence(result, suite.behavior, { ...expected, requireRun: true });
+        if (result.suite !== name || result.runId !== record.runId || result.status !== 'pass')
+            throw new GuardError('INCOMPLETE_PLATFORM', 'Platform suites must pass in the recorded run');
+    }
+}
+//# sourceMappingURL=reports.js.map

package/dist/reports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reports.js","sourceRoot":"","sources":["../src/reports.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAqB,MAAM,gBAAgB,CAAC;AAE/D,MAAM,UAAU,gBAAgB,CAAC,QAAsB,EAAE,gBAAmC,EAAE,QAAoG;IAChM,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,yBAAyB,CAAC,CAAC;IACpK,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,+CAA+C,CAAC,CAAC;IACxN,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;IAChJ,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,MAAM;QAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,2BAA2B,CAAC,CAAC;IAChO,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc,IAAI,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,wCAAwC,CAAC,CAAC;IAC3M,IAAI,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,gEAAgE,CAAC,CAAC;IAC5K,IAAI,QAAQ,EAAE,UAAU,IAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,qDAAqD,CAAC,CAAC;IAChS,IAAI,QAAQ,CAAC,UAAU,KAAK,WAAW,IAAI,QAAQ,CAAC,YAAY,KAAK,WAAW;QAAE,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,4DAA4D,CAAC,CAAC;IACrL,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/B,IAAI,QAAQ,CAAC,cAAc,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,8CAA8C,CAAC,CAAC;QACvL,KAAK,MAAM,WAAW,IAAI,gBAAgB,EAAE,CAAC;YAC3C,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,8BAA8B,WAAW,EAAE,CAAC,CAAC;QACtO,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,YAAY,KAAK,WAAW;YAAE,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,sCAAsC,CAAC,CAAC;QACvJ,IAAG,QAAQ,CAAC,KAAK,KAAG,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAA,EAAE,CAAA,OAAO,CAAC,IAAI,KAAG,OAAO,IAAE,OAAO,CAAC,UAAU,IAAE,OAAO,CAAC,QAAQ,KAAG,QAAQ,CAAC,QAAQ,CAAC,IAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAA,EAAE,CAAA,OAAO,CAAC,IAAI,KAAG,MAAM,IAAE,OAAO,CAAC,UAAU,IAAE,OAAO,CAAC,QAAQ,KAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAAC,MAAM,IAAI,UAAU,CAAC,cAAc,EAAC,iEAAiE,CAAC,CAAC;IAC9X,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAiJ,EACjJ,YAA6D,EAC7D,QAA4E;IAE5E,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,IAAI,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;QAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,yCAAyC,CAAC,CAAC;IAC3R,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QACtC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,+CAA+C,CAAC,CAAC;IACvL,CAAC;AACH,CAAC"}

package/dist/review/context.d.ts

@@ -0,0 +1,25 @@
+import type { BeforeAgentStartEvent, ExtensionContext } from '@earendil-works/pi-coding-agent';
+import { type Json, type ReviewContext } from '../contracts.js';
+export declare const AUTHORIZATION_ENTRY = "pi-codex-auto-review.authorization.v1";
+export declare function safeEvidence(value: Json): Json;
+/** Retains genuine authorization separately from summaries and extension-generated messages. */
+export declare class ReviewContextStore {
+    private items;
+    private sessionId;
+    private contextId;
+    private turnId;
+    private authorizationVersion;
+    get identity(): string;
+    get turnIdentity(): string;
+    get scopeVersion(): number;
+    reset(sessionId: string, manager?: ExtensionContext['sessionManager']): void;
+    startTurn(): void;
+    authorize(text: string, id?: string): void;
+    confirm(content: Json, id?: string): void;
+    instructions(event: BeforeAgentStartEvent): void;
+    message(message: unknown, id?: string): void;
+    toolCall(content: Json, id: string): void;
+    toolResult(content: Json, id: string): void;
+    private add;
+    snapshot(maxChars: number, exactActionChars?: number): ReviewContext;
+}

package/dist/review/context.js

@@ -0,0 +1,108 @@
+import { randomUUID } from 'node:crypto';
+import { canonicalJson, digest, GuardError, immutable } from '../contracts.js';
+import { redact } from '../audit.js';
+export const AUTHORIZATION_ENTRY = 'pi-codex-auto-review.authorization.v1';
+export function safeEvidence(value) {
+    if (typeof value === 'string')
+        return redact(value);
+    if (Array.isArray(value))
+        return value.map(safeEvidence);
+    if (value && typeof value === 'object')
+        return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, /^(authorization|api[_-]?key|token|password|secret)$/i.test(key) ? '[REDACTED]' : safeEvidence(item)]));
+    return value;
+}
+function visibleMessage(message) {
+    if (!message || typeof message !== 'object')
+        return;
+    const raw = message;
+    if (!['assistant', 'toolResult', 'user'].includes(raw.role ?? ''))
+        return;
+    const content = typeof raw.content === 'string' ? raw.content : Array.isArray(raw.content) ? raw.content.flatMap(item => {
+        if (item.type === 'text')
+            return [{ type: 'text', text: String(item.text) }];
+        if (item.type === 'toolCall')
+            return [{ type: 'toolCall', id: String(item.id), name: String(item.name), arguments: JSON.parse(canonicalJson(item.arguments)) }];
+        return []; // Private reasoning, signatures and binary payloads never enter review.
+    }) : [];
+    return safeEvidence({ role: raw.role, content, ...(raw.toolCallId ? { toolCallId: raw.toolCallId } : {}) });
+}
+/** Retains genuine authorization separately from summaries and extension-generated messages. */
+export class ReviewContextStore {
+    items = new Map();
+    sessionId = '';
+    contextId = randomUUID();
+    turnId = randomUUID();
+    authorizationVersion = 0;
+    get identity() { return this.contextId; }
+    get turnIdentity() { return this.turnId; }
+    get scopeVersion() { return this.authorizationVersion; }
+    reset(sessionId, manager) {
+        this.sessionId = sessionId;
+        this.contextId = randomUUID();
+        this.turnId = randomUUID();
+        this.items.clear();
+        this.authorizationVersion++;
+        for (const entry of manager?.getBranch?.() ?? []) {
+            if (entry.type === 'custom' && entry.customType === AUTHORIZATION_ENTRY) {
+                const data = entry.data;
+                if (typeof data?.text === 'string' && ['interactive', 'rpc'].includes(String(data.source)))
+                    this.authorize(data.text, entry.id);
+            }
+            else if (entry.type === 'message')
+                this.message(entry.message, entry.id);
+            else if (entry.type === 'compaction' || entry.type === 'branch_summary')
+                this.add('assistant', 'evidence', entry.summary, entry.id);
+        }
+    }
+    startTurn() { this.turnId = randomUUID(); }
+    authorize(text, id = randomUUID()) { this.add('user', 'authorization', text, id); }
+    confirm(content, id = randomUUID()) { this.add('user-confirmation', 'authorization', content, id); }
+    instructions(event) {
+        // The structured runtime source establishes provenance, never a filename found in tool output.
+        const current = new Set(event.systemPromptOptions.contextFiles.map(file => `agents:${file.path}`));
+        for (const [id, item] of this.items)
+            if (item.source === 'agents' && !current.has(id)) {
+                this.items.delete(id);
+                this.authorizationVersion++;
+            }
+        for (const file of event.systemPromptOptions.contextFiles)
+            this.add('agents', 'authorization', { path: file.path, content: file.content }, `agents:${file.path}`);
+        for (const [name, content] of [['customPrompt', event.systemPromptOptions.customPrompt], ['appendSystemPrompt', event.systemPromptOptions.appendSystemPrompt]]) {
+            if (content)
+                this.add('developer', 'authorization', content, `runtime:${name}`);
+        }
+    }
+    message(message, id = randomUUID()) {
+        const content = visibleMessage(message);
+        if (content !== undefined)
+            this.add(message.role === 'toolResult' ? 'tool-result' : 'assistant', 'evidence', content, id);
+    }
+    toolCall(content, id) { this.add('tool-call', 'evidence', content, `call:${id}`); }
+    toolResult(content, id) { this.add('tool-result', 'evidence', content, `result:${id}`); }
+    add(source, trust, content, id) {
+        if (trust === 'authorization' && source !== 'user-confirmation' && canonicalJson(this.items.get(id)?.content ?? null) !== canonicalJson(safeEvidence(content)))
+            this.authorizationVersion++;
+        this.items.set(id, immutable({ id, source, trust, content: safeEvidence(content) }));
+    }
+    snapshot(maxChars, exactActionChars = 0) {
+        const authorization = [...this.items.values()].filter(item => item.trust === 'authorization');
+        const evidence = [...this.items.values()].filter(item => item.trust === 'evidence');
+        const fields = { sessionId: this.sessionId, contextId: this.contextId, turnId: this.turnId };
+        let remaining = maxChars - exactActionChars - canonicalJson({ ...fields, items: authorization }).length - 512;
+        if (remaining < 0)
+            throw new GuardError('REVIEW_CONTEXT_OVERFLOW', 'Required authorization and exact action exceed review context capacity');
+        const retained = [];
+        for (const item of evidence.reverse()) {
+            const text = canonicalJson(item);
+            if (text.length <= remaining) {
+                retained.unshift(item);
+                remaining -= text.length;
+            }
+        }
+        if (retained.length !== evidence.length)
+            retained.unshift({ id: 'omission', source: 'assistant', trust: 'evidence', content: '<truncated reason="review-context-budget" />', isTruncated: true });
+        const data = { ...fields, items: [...authorization, ...retained] };
+        return immutable({ ...data, digest: digest(data) });
+    }
+}
+//# sourceMappingURL=context.js.map

package/dist/review/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/review/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAyD,MAAM,iBAAiB,CAAC;AACtI,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,CAAC,MAAM,mBAAmB,GAAG,uCAAuC,CAAC;AAC3E,MAAM,UAAU,YAAY,CAAC,KAAW;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,sDAAsD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3N,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,cAAc,CAAC,OAAgB;IACtC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO;IACpD,MAAM,GAAG,GAAG,OAAoE,CAAC;IACjF,IAAI,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAAE,OAAO;IAC1E,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAO,IAAI,CAAC,EAAE;QAC5H,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,CAAC,EAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAC,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,CAAC,EAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAC,CAAC,CAAC;QAC9J,OAAO,EAAE,CAAC,CAAC,wEAAwE;IACrF,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACR,OAAO,YAAY,CAAC,EAAC,IAAI,EAAE,GAAG,CAAC,IAAK,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAC,UAAU,EAAE,GAAG,CAAC,UAAU,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAC,CAAC,CAAC;AAC3G,CAAC;AAED,gGAAgG;AAChG,MAAM,OAAO,kBAAkB;IACrB,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC7C,SAAS,GAAG,EAAE,CAAC;IACf,SAAS,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,GAAG,UAAU,EAAE,CAAC;IACtB,oBAAoB,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ,KAAa,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,IAAI,YAAY,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,IAAI,YAAY,KAAa,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAChE,KAAK,CAAC,SAAiB,EAAE,OAA4C;QACnE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAAC,IAAI,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;QAAC,IAAI,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACvI,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;YACjD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,mBAAmB,EAAE,CAAC;gBACxE,MAAM,IAAI,GAAG,KAAK,CAAC,IAA0C,CAAC;gBAC9D,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YAClI,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;iBACtE,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;gBAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACtI,CAAC;IACH,CAAC;IACD,SAAS,KAAW,IAAI,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC;IACjD,SAAS,CAAC,IAAY,EAAE,KAAa,UAAU,EAAE,IAAU,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACzG,OAAO,CAAC,OAAa,EAAE,KAAa,UAAU,EAAE,IAAU,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACxH,YAAY,CAAC,KAA4B;QACvC,+FAA+F;QAC/F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACnG,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAAC,CAAC;QAC9I,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,mBAAmB,CAAC,YAAY;YAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,EAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAC,EAAE,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAChK,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAU,EAAE,CAAC;YACxK,IAAI,OAAO;gBAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,OAAO,CAAC,OAAgB,EAAE,KAAa,UAAU,EAAE;QACjD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,CAAE,OAAyB,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/I,CAAC;IACD,QAAQ,CAAC,OAAa,EAAE,EAAU,IAAU,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACvG,UAAU,CAAC,OAAa,EAAE,EAAU,IAAU,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACrG,GAAG,CAAC,MAAmC,EAAE,KAAiC,EAAE,OAAa,EAAE,EAAU;QAC3G,IAAI,KAAK,KAAK,eAAe,IAAI,MAAM,KAAK,mBAAmB,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,KAAK,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAAE,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC5L,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,EAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAAC,CAAC,CAAC,CAAC;IACrF,CAAC;IACD,QAAQ,CAAC,QAAgB,EAAE,gBAAgB,GAAG,CAAC;QAC7C,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,eAAe,CAAC,CAAC;QAC9F,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,EAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAC,CAAC;QAC3F,IAAI,SAAS,GAAG,QAAQ,GAAG,gBAAgB,GAAG,aAAa,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC;QAC9G,IAAI,SAAS,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,yBAAyB,EAAE,wEAAwE,CAAC,CAAC;QAC7I,MAAM,QAAQ,GAAwB,EAAE,CAAC;QACzC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;gBAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC;YAAC,CAAC;QACrF,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YAAE,QAAQ,CAAC,OAAO,CAAC,EAAC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,8CAA8C,EAAE,WAAW,EAAE,IAAI,EAAC,CAAC,CAAC;QAChM,MAAM,IAAI,GAAG,EAAC,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,aAAa,EAAE,GAAG,QAAQ,CAAC,EAAC,CAAC;QACjE,OAAO,SAAS,CAAC,EAAC,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAC,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/review/investigation.d.ts

@@ -0,0 +1,39 @@
+import { type PermissionProfile } from '../contracts.js';
+import type { SandboxExecutor } from '../sandbox/executor.js';
+export declare const INVESTIGATION_TOOLS: readonly [{
+    readonly name: "inspect_file";
+    readonly description: "Read local text without modifying it; use only when it changes the review decision.";
+    readonly parameters: {
+        readonly type: "object";
+        readonly properties: {
+            readonly path: {
+                readonly type: "string";
+            };
+        };
+        readonly required: readonly ["path"];
+        readonly additionalProperties: false;
+    };
+}, {
+    readonly name: "inspect_directory";
+    readonly description: "List local directory metadata without modifying it.";
+    readonly parameters: {
+        readonly type: "object";
+        readonly properties: {
+            readonly path: {
+                readonly type: "string";
+            };
+        };
+        readonly required: readonly ["path"];
+        readonly additionalProperties: false;
+    };
+}];
+export interface ReviewInvestigation {
+    execute(name: string, args: unknown, signal: AbortSignal): Promise<string>;
+}
+export declare class NativeInvestigation implements ReviewInvestigation {
+    private readonly executor;
+    private readonly profile;
+    private readonly cwd;
+    constructor(executor: SandboxExecutor, profile: PermissionProfile, cwd: string);
+    execute(name: string, args: unknown, signal: AbortSignal): Promise<string>;
+}

package/dist/review/investigation.js

@@ -0,0 +1,36 @@
+import { randomUUID } from 'node:crypto';
+import { createProfile, EMPTY_DELTA, GuardError, canonicalJson } from '../contracts.js';
+import { canonicalPath, isWithin } from '../policy/paths.js';
+import { safeEvidence } from './context.js';
+export const INVESTIGATION_TOOLS = [
+    { name: 'inspect_file', description: 'Read local text without modifying it; use only when it changes the review decision.', parameters: { type: 'object', properties: { path: { type: 'string' } }, required: ['path'], additionalProperties: false } },
+    { name: 'inspect_directory', description: 'List local directory metadata without modifying it.', parameters: { type: 'object', properties: { path: { type: 'string' } }, required: ['path'], additionalProperties: false } },
+];
+export class NativeInvestigation {
+    executor;
+    profile;
+    cwd;
+    constructor(executor, profile, cwd) {
+        this.executor = executor;
+        this.profile = profile;
+        this.cwd = cwd;
+    }
+    async execute(name, args, signal) {
+        signal.throwIfAborted();
+        if (!['inspect_file', 'inspect_directory'].includes(name) || !args || typeof args !== 'object' || Array.isArray(args) || Object.keys(args).length !== 1 || typeof args.path !== 'string')
+            throw new GuardError('REVIEW_INVESTIGATION', 'Only bounded read-only inspection is supported');
+        const path = await canonicalPath(args.path, this.cwd);
+        const denies = await Promise.all(this.profile.denyRead.map(value => canonicalPath(value, this.cwd)));
+        if (denies.some(root => isWithin(path, root)))
+            throw new GuardError('REVIEW_INVESTIGATION', 'Protected paths cannot be inspected');
+        const profile = createProfile({ ...this.profile, mode: 'read-only', readRoots: ['/'], writeRoots: [], denyWrite: ['/'], allowedDomains: [], deniedDomains: [] });
+        const tool = name === 'inspect_file' ? 'read' : 'ls';
+        const result = await this.executor.execute({ kind: 'tool', tool, args: { path, limit: tool === 'read' ? 120 : 100 }, cwd: this.cwd, toolCallId: `review-${randomUUID()}` }, profile, EMPTY_DELTA, { signal, timeoutSeconds: 15 });
+        signal.throwIfAborted();
+        const raw = result;
+        const visible = raw.content?.filter(item => item.type === 'text').map(item => ({ type: 'text', text: item.text ?? '' })) ?? [];
+        const text = canonicalJson(safeEvidence(visible));
+        return text.length <= 12000 ? text : `${text.slice(0, 12000)}\n<truncated reason="inspection-output-limit" />`;
+    }
+}
+//# sourceMappingURL=investigation.js.map

package/dist/review/investigation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"investigation.js","sourceRoot":"","sources":["../../src/review/investigation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAqC,MAAM,iBAAiB,CAAC;AAE3H,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,EAAC,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,qFAAqF,EAAE,UAAU,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAC,IAAI,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC,EAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAC,EAAC;IAC/O,EAAC,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,qDAAqD,EAAE,UAAU,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAC,IAAI,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC,EAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAC,EAAC;CAC5M,CAAC;AAEX,MAAM,OAAO,mBAAmB;IACD;IAA4C;IAA6C;IAAtH,YAA6B,QAAyB,EAAmB,OAA0B,EAAmB,GAAW;QAApG,aAAQ,GAAR,QAAQ,CAAiB;QAAmB,YAAO,GAAP,OAAO,CAAmB;QAAmB,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IACrI,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,IAAa,EAAE,MAAmB;QAC5D,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAQ,IAAwB,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,gDAAgD,CAAC,CAAC;QAC9S,MAAM,IAAI,GAAG,MAAM,aAAa,CAAE,IAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,qCAAqC,CAAC,CAAC;QACnI,MAAM,OAAO,GAAG,aAAa,CAAC,EAAC,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAC,CAAC,CAAC;QAC/J,MAAM,IAAI,GAAG,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,UAAU,EAAE,EAAE,EAAC,EAAE,OAAO,EAAE,WAAW,EAAE,EAAC,MAAM,EAAE,cAAc,EAAE,EAAE,EAAC,CAAC,CAAC;QAC5N,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,MAAmD,CAAC;QAChE,MAAM,OAAO,GAAS,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChI,MAAM,IAAI,GAAG,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,kDAAkD,CAAC;IACjH,CAAC;CACF"}