pi-codex-auto-review 0.1.2 → 0.1.3

package/README.md

@@ -1,6 +1,8 @@
 # pi-codex-auto-review
 
-Codex의 ‘Approve for me’에서 영감을 받은 Pi 자동 실행 승인 검토 확장입니다. Pi 도구 실행을 규칙과 현재 모델로 검토하고, 필요하면 사용자 승인을 요청합니다. Codex 공개 소스 [`rust-v0.160.0`](https://github.com/openai/codex/tree/a956835d020762cb2b570053af06f643a11c0ecc)의 실행 승인 동작을 참고한 독립 구현을 Pi 0.99.1·1.0.0의 공개 API와 운영체제 샌드박스에 연결했습니다. 설치·설정 방법은 [사용법](https://github.com/buYoung/pi-codex-auto-review/blob/HEAD/docs/usage.md) 문서에 있습니다.
+Codex의 ‘Approve for me’에서 영감을 받은 Pi 자동 실행 승인 검토 확장입니다. 승인 요청을 규칙과 보조 모델로 검토하거나 사용자가 직접 승인하도록 설정합니다. 승인된 도구는 Pi의 원래 실행기로 실행합니다. OS 샌드박스나 파일·네트워크 격리를 구성하지 않습니다. Codex 공개 소스 [`rust-v0.160.0`](https://github.com/openai/codex/tree/a956835d020762cb2b570053af06f643a11c0ecc)의 공개 승인 정책을 참고했습니다.
+
+현재 소스의 샌드박스 제거와 설정 메뉴 변경은 아직 npm에 게시되지 않았습니다. 기존 `0.1.2`에는 이전 실행 구조가 들어 있습니다. 새 배포 전에는 [소스 빌드와 로컬 등록](docs/usage.md#소스에서-빌드)으로 확인합니다.
 
 ## 설치
 
@@ -18,7 +20,14 @@ pi list
 1. **정책 판단** — 절대 차단 경로와 `commandRules`를 먼저 평가합니다. 차단 경로는 모델 검토나 저장 승인으로 해제하지 않습니다.
 2. **자동 검토** — 남은 작업은 현재 모델이 위험 등급과 결과를 판정합니다.
 3. **승인** — 남은 범위는 사용자가 확정합니다.
-4. **격리 실행** — 승인된 작업은 OS 샌드박스 안에서 실행합니다.
+4. **Pi 실행** — 승인된 작업을 원래 SDK 도구로 실행하며 취소 신호와 호출자 옵션을 전달합니다.
+
+## 승인 설정
+
+- `/approve`: **Approve for me**(보조 모델 검토) 또는 **Ask for approval**(사용자 승인)을 선택합니다.
+- `/approve-model`: 등록된 모델을 검색해 보조 검토 모델을 선택합니다. **현재 Pi 모델 사용**으로 되돌릴 수 있습니다.
+
+선택은 `<agentDir>/guard/settings.json`에 저장되고 다음 실행에도 적용됩니다. 주 대화 모델은 바뀌지 않습니다. 취소하면 기존 설정을 유지합니다.
 
 ## 요구 사항
 
@@ -27,13 +36,13 @@ pi list
 | Node.js | 22.19 이상 |
 | Pi | 0.99.1 또는 1.0.0 |
 | Rust | 소스 빌드에만 1.95 이상 필요 |
-| 운영체제 | npm 배포 대상은 macOS ARM64와 Linux x64. Windows는 네이티브 격리를 지원하지 않습니다 |
+| 규칙 엔진 배포 | macOS ARM64와 Linux x64 |
 
 ## 보호 경계
 
 - 모드는 `workspace-write`(작업 공간과 기본 임시 경로 쓰기 허용)와 `read-only`입니다.
 - 제어·인증 경로와 프로젝트의 `.pi` 설정·확장 코드, 신뢰한 확장의 코드 디렉터리는 모델 쓰기를 절대 차단합니다.
-- 명령·인터프리터는 OS 격리 안에서 실행하고, 경계를 넘는 접근과 새 네트워크 목적지는 검토를 거칩니다.
+- 일반 범위를 넘는 파일 접근, 검토 규칙, 해석하지 못하는 명령은 실행 전에 검토합니다. 읽기와 기존 범위 안의 일반 작업은 정책에 따라 실행합니다.
 - 승인은 한 번, 세션, 규칙 저장 중 선택하며, 저장 승인은 정확한 도구·입력·정책에 묶입니다.
 - 자동 검토는 현재 모델로 수행하고, 반복 거부되면 실제 작업을 중단합니다. 검토 오류는 승인으로 바뀌지 않습니다.
 - MCP 도구 승인과 프로젝트 지침 탐색도 같은 신뢰·검토 경계 안에 둡니다.
@@ -42,9 +51,9 @@ pi list
 
 ## 한계와 비보장
 
-- Pi와 명시적으로 신뢰한 확장은 제어 계층입니다. 같은 프로세스 확장 코드나 원격 MCP 서버 내부까지 이 샌드박스가 보호하지는 않습니다.
-- 하드링크 검사는 실행과 동시에 격리 밖 호스트 프로그램이 링크 구조를 바꾸는 공격까지 방어한다고 보장하지 않습니다.
-- Linux의 상위 디렉터리 쓰기 승인이 단일 파일 생성 권한과 완전히 같다고 보장하지 않습니다.
+- 승인된 셸과 인터프리터는 호스트 권한으로 실행합니다. 검토에 표시한 파일·도메인 범위는 OS가 강제하는 접근 제한이 아닙니다.
+- 재귀 디렉터리 탐색·하드링크 전수 검사·네트워크 프록시를 구성하지 않습니다. 간접 파일 접근과 실행 중 목적지 변경을 격리하지 않습니다.
+- Pi, 신뢰한 확장 코드와 외부 MCP 서버의 내부 실행은 신뢰 경계에 포함됩니다.
 - 이미 MCP 서버에 전달한 요청의 취소 효과는 외부 공급자의 구현에 달려 있습니다.
 - 공개 정책·흐름의 호환성 검증은 독점 Codex 모델과 모든 판단이 같다는 뜻이 아닙니다.
 - 별도로 설치한 Pi 호스트의 의존성을 자동으로 교체하지 않습니다. 이 저장소의 조치 근거는 [의존성 보안](https://github.com/buYoung/pi-codex-auto-review/blob/HEAD/docs/security/dependencies.md) 문서에 있습니다.
@@ -55,12 +64,12 @@ pi list
 npm run verify:guard
 ```
 
-`verify:guard`는 빌드와 전체 로컬 검증을 실행하고, 같은 소스의 `darwin-arm64`·`linux-x64` 전체 결과와 Linux x64 이미지의 실모델 결과를 하나로 묶습니다. 필요한 플랫폼 결과가 없거나 차단·실패·오래됐으면 종료 코드는 1입니다.
+`verify:guard`는 빌드와 현재 운영체제의 전체 로컬 검증을 실행합니다. 다른 운영체제와 실모델의 결과는 별도 실행 근거로 기록하며 로컬 통과로 대신하지 않습니다.
 
 - `npm run test:*` 단일 검증은 실제 자격 증명이나 유료 모델을 사용하지 않습니다. 환경 제한·의존성 부재는 통과로 처리하지 않습니다.
 - `npm run verify:platform`은 현재 운영체제의 전체 검증을 실행합니다.
 - GitHub Actions의 `자동 검토 운영체제 검증`은 실제 Linux x64 검사와 Docker 이미지·결과 반출을 수행합니다. workflow에는 Ollama 키를 전달하지 않습니다.
-- Windows의 `verify:windows`는 원본 규칙 엔진·승인 정책과 미지원 시작의 거부를 검증합니다.
+- Windows의 `verify:windows`는 규칙 엔진·승인 정책·파일 실행과 취소를 검증합니다. 전체 셸 실행 지원을 검증하는 명령은 아닙니다.
 - Docker 컨테이너 검증 활용은 [사용법](https://github.com/buYoung/pi-codex-auto-review/blob/HEAD/docs/usage.md) 문서의 Docker 절에 있습니다.
 - 각 실행은 `.reports/pi-guard/runs/<실행 ID>/<플랫폼>/`에 저장되고, 보호·허용·차단 사례는 [보호 경계 검증표](https://github.com/buYoung/pi-codex-auto-review/blob/HEAD/docs/testing/auto-review-protection.md)에 있습니다.
 
@@ -70,7 +79,7 @@ npm run verify:guard
 - [배포 안내](https://github.com/buYoung/pi-codex-auto-review/blob/HEAD/docs/publishing.md) — pnpm release, Trusted Publishing 설정과 GitHub Actions의 자동 npm 게시
 - [의존성 보안](https://github.com/buYoung/pi-codex-auto-review/blob/HEAD/docs/security/dependencies.md) — 높은 심각도 감사 항목의 적용 근거와 재생성 방법
 - [보호 경계 검증표](https://github.com/buYoung/pi-codex-auto-review/blob/HEAD/docs/testing/auto-review-protection.md) — 보호·허용·검토 실패·취소 사례와 검증하지 않은 범위
-- [인계 자료](https://github.com/buYoung/pi-codex-auto-review/tree/HEAD/docs/handoffs/auto-review) — 플랫폼·실모델 검증의 실행 근거와 소스 해시. 새 변경의 완료 여부는 이 기준으로 확인합니다.
+- [인계 자료](https://github.com/buYoung/pi-codex-auto-review/tree/HEAD/docs/handoffs/auto-review) — 이전 플랫폼·실모델 검증의 실행 근거와 소스 해시. 과거 결과와 현재 소스를 구분합니다.
 
 ## 라이선스
 

package/dist/approval-commands.d.ts

@@ -0,0 +1,4 @@
+import { type ExtensionAPI } from '@earendil-works/pi-coding-agent';
+import type { GuardController } from './tools/controller.js';
+import type { ApprovalSettingsStore } from './approval-settings.js';
+export declare function registerApprovalCommands(pi: ExtensionAPI, guard: GuardController, store: ApprovalSettingsStore): void;

package/dist/approval-commands.js

@@ -0,0 +1,103 @@
+import { getSelectListTheme } from '@earendil-works/pi-coding-agent';
+import { Container, Input, SelectList, Spacer, Text, Key, matchesKey, fuzzyFilter } from '@earendil-works/pi-tui';
+import { canonicalJson, GuardError } from './contracts.js';
+import { validateSettings } from './policy/index.js';
+const CURRENT_MODEL = 'current';
+const modeNames = { auto_review: 'Approve for me', user: 'Ask for approval' };
+class ApprovalModelPicker extends Container {
+    items;
+    finish;
+    input = new Input();
+    list;
+    results = new Container();
+    filtered;
+    get focused() { return this.input.focused; }
+    set focused(value) { this.input.focused = value; }
+    constructor(items, selected, finish, search) {
+        super();
+        this.items = items;
+        this.finish = finish;
+        this.addChild(new Text('승인 검토 모델 선택', 0, 0));
+        this.addChild(new Spacer(1));
+        this.addChild(this.input);
+        this.addChild(new Spacer(1));
+        this.addChild(this.results);
+        this.addChild(new Text('검색 · ↑↓ 선택 · Enter 적용 · Esc 취소', 0, 0));
+        this.filtered = items;
+        this.input.setValue(search);
+        this.filter(search);
+        const index = this.filtered.findIndex(item => item.value === selected);
+        if (index >= 0)
+            this.list.setSelectedIndex(index);
+    }
+    filter(query) {
+        this.filtered = query ? fuzzyFilter(this.items, query, item => `${item.label} ${item.description ?? ''}`) : this.items;
+        this.list = new SelectList(this.filtered, 12, getSelectListTheme());
+        this.list.onSelect = item => this.finish(item.value);
+        this.list.onCancel = () => this.finish(undefined);
+        this.results.clear();
+        this.results.addChild(this.filtered.length ? this.list : new Text('일치하는 모델이 없습니다.', 0, 0));
+    }
+    handleInput(data) {
+        if (matchesKey(data, Key.escape))
+            this.finish(undefined);
+        else if (matchesKey(data, Key.enter) || matchesKey(data, Key.up) || matchesKey(data, Key.down))
+            this.list.handleInput(data);
+        else {
+            const before = this.input.getValue();
+            this.input.handleInput(data);
+            if (this.input.getValue() !== before)
+                this.filter(this.input.getValue());
+        }
+    }
+}
+async function chooseReviewModel(context, current, search) {
+    const models = context.modelRegistry.getAvailable();
+    const items = [
+        { value: CURRENT_MODEL, label: '현재 Pi 모델 사용', description: '주 작업 모델의 선택을 따릅니다.' },
+        ...models.map(model => ({ value: canonicalJson({ provider: model.provider, id: model.id }), label: model.name || model.id, description: `${model.provider}/${model.id}` })),
+    ];
+    const selected = current ? canonicalJson(current) : CURRENT_MODEL;
+    const result = context.mode === 'rpc'
+        ? await context.ui.select('승인 검토 모델 선택', items.map(item => `${item.label} — ${item.description}`)).then(value => value === undefined ? undefined : items[items.findIndex(item => `${item.label} — ${item.description}` === value)]?.value)
+        : await context.ui.custom((_tui, _theme, _keys, done) => new ApprovalModelPicker(items, selected, done, search));
+    if (result === undefined)
+        return undefined;
+    return result === CURRENT_MODEL ? null : JSON.parse(result);
+}
+export function registerApprovalCommands(pi, guard, store) {
+    const requireUI = (context) => {
+        if (!context.hasUI)
+            throw new GuardError('APPROVAL_UI_UNAVAILABLE', 'Approval settings require an interactive Pi session');
+    };
+    const apply = async (patch, context) => {
+        await guard.updateSettings(current => validateSettings({ ...current, ...patch }), context.cwd, settings => store.save(settings));
+        context.ui.setStatus('auto-review', undefined);
+    };
+    pi.registerCommand('approve', { description: 'Approve for me 또는 Ask for approval 승인 방식을 설정합니다.', handler: async (_args, context) => {
+            requireUI(context);
+            await context.waitForIdle();
+            const current = guard.options.settings;
+            const choice = await context.ui.select(`실행 승인 방식 — 현재 ${modeNames[current.approvalsReviewer]}`, Object.values(modeNames));
+            if (choice === undefined)
+                return;
+            const reviewer = choice === modeNames.auto_review ? 'auto_review' : choice === modeNames.user ? 'user' : undefined;
+            if (!reviewer)
+                return;
+            await apply({ approvalsReviewer: reviewer }, context);
+            context.ui.notify(`승인 방식: ${modeNames[reviewer]}`, 'info');
+        } });
+    pi.registerCommand('approve-model', { description: '승인 검토에 사용할 보조모델을 선택합니다.', handler: async (args, context) => {
+            requireUI(context);
+            await context.waitForIdle();
+            const current = guard.options.settings;
+            const model = await chooseReviewModel(context, current.reviewModel, args.trim());
+            if (model === undefined)
+                return;
+            if (model && !context.modelRegistry.find(model.provider, model.id))
+                throw new GuardError('MODEL_UNAVAILABLE', 'Selected review model is no longer registered');
+            await apply({ reviewModel: model }, context);
+            context.ui.notify(`승인 검토 모델: ${model ? `${model.provider}/${model.id}` : '현재 Pi 모델 사용'}`, 'info');
+        } });
+}
+//# sourceMappingURL=approval-commands.js.map

package/dist/approval-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-commands.js","sourceRoot":"","sources":["../src/approval-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAmD,MAAM,iCAAiC,CAAC;AACtH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAmC,MAAM,wBAAwB,CAAC;AACnJ,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAsB,MAAM,mBAAmB,CAAC;AAKzE,MAAM,aAAa,GAAG,SAAS,CAAC;AAChC,MAAM,SAAS,GAAG,EAAC,WAAW,EAAC,gBAAgB,EAAC,IAAI,EAAC,kBAAkB,EAAU,CAAC;AAElF,MAAM,mBAAoB,SAAQ,SAAS;IAOZ;IAAwD;IANpE,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;IAC7B,IAAI,CAAc;IACT,OAAO,GAAG,IAAI,SAAS,EAAE,CAAC;IACnC,QAAQ,CAAe;IAC/B,IAAI,OAAO,KAAc,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,KAAc,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC;IAC3D,YAA6B,KAAmB,EAAE,QAAgB,EAAmB,MAA2C,EAAE,MAAc;QAC9I,KAAK,EAAE,CAAC;QADmB,UAAK,GAAL,KAAK,CAAc;QAAqC,WAAM,GAAN,MAAM,CAAqC;QAE9H,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,aAAa,EAAC,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,gCAAgC,EAAC,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;QACvE,IAAI,KAAK,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IACO,MAAM,CAAC,KAAa;QAC1B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAC,KAAK,EAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACrH,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAC,EAAE,EAAC,kBAAkB,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAC,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,WAAW,CAAC,IAAY;QACtB,IAAI,UAAU,CAAC,IAAI,EAAC,GAAG,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;aACnD,IAAI,UAAU,CAAC,IAAI,EAAC,GAAG,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,EAAC,GAAG,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,IAAI,EAAC,GAAG,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;aACpH,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,MAAM;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,iBAAiB,CAAC,OAAgC,EAAE,OAAoB,EAAE,MAAc;IACrG,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;IACpD,MAAM,KAAK,GAAiB;QAC1B,EAAC,KAAK,EAAC,aAAa,EAAC,KAAK,EAAC,aAAa,EAAC,WAAW,EAAC,oBAAoB,EAAC;QAC1E,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAC,KAAK,EAAC,aAAa,CAAC,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,EAAE,EAAC,KAAK,CAAC,EAAE,EAAC,CAAC,EAAC,KAAK,EAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,EAAC,WAAW,EAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,EAAE,EAAC,CAAC,CAAC;KAChK,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,KAAK,KAAK;QACnC,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,EAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;QACzO,CAAC,CAAC,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CAAqB,CAAC,IAAI,EAAC,MAAM,EAAC,KAAK,EAAC,IAAI,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,KAAK,EAAC,QAAQ,EAAC,IAAI,EAAC,MAAM,CAAC,CAAC,CAAC;IACjI,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAgB,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,EAAgB,EAAE,KAAsB,EAAE,KAA4B;IAC7G,MAAM,SAAS,GAAG,CAAC,OAAgC,EAAE,EAAE;QACrD,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,yBAAyB,EAAC,qDAAqD,CAAC,CAAC;IAC5H,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,EAAE,KAAqE,EAAE,OAAgC,EAAE,EAAE;QAC9H,MAAM,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAC,GAAG,OAAO,EAAC,GAAG,KAAK,EAAC,CAAC,EAAC,OAAO,CAAC,GAAG,EAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5H,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,EAAC,SAAS,CAAC,CAAC;IAChD,CAAC,CAAC;IACF,EAAE,CAAC,eAAe,CAAC,SAAS,EAAC,EAAC,WAAW,EAAC,kDAAkD,EAAC,OAAO,EAAC,KAAK,EAAC,KAAK,EAAC,OAAO,EAAE,EAAE;YAC1H,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,EAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACzH,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO;YACjC,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACnH,IAAI,CAAC,QAAQ;gBAAE,OAAO;YACtB,MAAM,KAAK,CAAC,EAAC,iBAAiB,EAAC,QAAQ,EAAC,EAAC,OAAO,CAAC,CAAC;YAClD,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAC,MAAM,CAAC,CAAC;QAC5D,CAAC,EAAC,CAAC,CAAC;IACJ,EAAE,CAAC,eAAe,CAAC,eAAe,EAAC,EAAC,WAAW,EAAC,yBAAyB,EAAC,OAAO,EAAC,KAAK,EAAC,IAAI,EAAC,OAAO,EAAE,EAAE;YACtG,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAC,OAAO,CAAC,WAAW,EAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/E,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO;YAChC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAC,+CAA+C,CAAC,CAAC;YAC7J,MAAM,KAAK,CAAC,EAAC,WAAW,EAAC,KAAK,EAAC,EAAC,OAAO,CAAC,CAAC;YACzC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,EAAC,MAAM,CAAC,CAAC;QACnG,CAAC,EAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/approval-settings.d.ts

@@ -0,0 +1,9 @@
+import { type GuardSettings } from './policy/index.js';
+export declare class ApprovalSettingsStore {
+    readonly path: string;
+    private readonly defaults;
+    private readonly isRequired;
+    constructor(path: string, defaults?: Partial<GuardSettings>, isRequired?: boolean);
+    load(): Promise<GuardSettings>;
+    save(settings: GuardSettings): Promise<void>;
+}

package/dist/approval-settings.js

@@ -0,0 +1,40 @@
+import { randomUUID } from 'node:crypto';
+import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { canonicalJson, GuardError } from './contracts.js';
+import { validateSettings } from './policy/index.js';
+export class ApprovalSettingsStore {
+    path;
+    defaults;
+    isRequired;
+    constructor(path, defaults = {}, isRequired = false) {
+        this.path = path;
+        this.defaults = defaults;
+        this.isRequired = isRequired;
+    }
+    async load() {
+        try {
+            const stored = JSON.parse(await readFile(this.path, 'utf8'));
+            validateSettings(stored);
+            return validateSettings({ ...this.defaults, ...stored });
+        }
+        catch (error) {
+            if (!this.isRequired && error.code === 'ENOENT')
+                return validateSettings(this.defaults);
+            throw new GuardError('INVALID_SETTINGS', 'Approval settings could not be loaded', { cause: error });
+        }
+    }
+    async save(settings) {
+        validateSettings(settings);
+        await mkdir(dirname(this.path), { recursive: true, mode: 0o700 });
+        const temporary = `${this.path}.${randomUUID()}.tmp`;
+        try {
+            await writeFile(temporary, canonicalJson(settings) + '\n', { flag: 'wx', mode: 0o600 });
+            await rename(temporary, this.path);
+        }
+        finally {
+            await rm(temporary, { force: true });
+        }
+    }
+}
+//# sourceMappingURL=approval-settings.js.map

package/dist/approval-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-settings.js","sourceRoot":"","sources":["../src/approval-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAsB,MAAM,mBAAmB,CAAC;AAEzE,MAAM,OAAO,qBAAqB;IACX;IAA+B;IAAwD;IAA5G,YAAqB,IAAY,EAAmB,WAAmC,EAAE,EAAmB,aAAa,KAAK;QAAzG,SAAI,GAAJ,IAAI,CAAQ;QAAmB,aAAQ,GAAR,QAAQ,CAA6B;QAAmB,eAAU,GAAV,UAAU,CAAQ;IAAG,CAAC;IAClI,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC,CAAC;YACrE,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACzB,OAAO,gBAAgB,CAAC,EAAC,GAAG,IAAI,CAAC,QAAQ,EAAC,GAAG,MAAgC,EAAC,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,UAAU,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACnH,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAC,uCAAuC,EAAC,EAAC,KAAK,EAAC,KAAK,EAAC,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,QAAuB;QAChC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAC,EAAC,SAAS,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,EAAC,aAAa,CAAC,QAAQ,CAAC,GAAC,IAAI,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;YAC/E,MAAM,MAAM,CAAC,SAAS,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;gBAAS,CAAC;YAAC,MAAM,EAAE,CAAC,SAAS,EAAC,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC;QAAC,CAAC;IACjD,CAAC;CACF"}

package/dist/contracts.d.ts

@@ -143,6 +143,8 @@ export interface ExecutionOptions {
     readonly env?: NodeJS.ProcessEnv;
     readonly onData?: (data: Buffer) => void;
     readonly onUpdate?: (result: ToolResult) => void;
+    /** Execute the original Pi definition after admission, in the same process. */
+    readonly delegate?: (signal: AbortSignal) => Promise<Json>;
     readonly authority?: ExecutionAuthority;
     readonly onNetworkRequest?: (request: NetworkApprovalRequest, signal: AbortSignal) => Promise<boolean>;
 }

package/dist/contracts.js.map

@@ -1 +1 @@
-{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQhD,MAAM,CAAC,MAAM,UAAU,GAAwB,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAkBtH,MAAM,CAAC,MAAM,WAAW,GAAoB,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AA6IvJ,MAAM,OAAO,UAAW,SAAQ,KAAK;IACd;IAArB,YAAqB,IAAY,EAAE,OAAe,EAAE,OAAsB;QACxE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QADL,SAAI,GAAJ,IAAI,CAAQ;QAE/B,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5G,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QACrG,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnJ,CAAC;IACD,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;AACpE,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AACD,MAAM,UAAU,SAAS,CAAI,KAAQ;IACnC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAwB;IACpD,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;IAC/H,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,CAAU,EAAE,CAAC;QAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IACjL,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IAC3P,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,+CAA+C,CAAC,CAAC;IACpJ,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAU,EAAE,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IACzI,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAC,GAAG,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,EAAC,CAAC,CAAsB,CAAC,CAAC;AAC/L,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,KAAyE,EAAE,OAA0B;IAChI,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,CAAU,EAAE,CAAC;QACxF,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IAC3I,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;IAC3I,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;IACtJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACrI,OAAO,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC1D,CAAC;AACD,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC5C,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;IACtG,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AACD,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,MAAmB,EAAE,SAAiB;IAClE,iFAAiF;IACjF,qFAAqF;IACrF,MAAM,EAAC,uBAAuB,EAAE,aAAa,EAAE,GAAG,WAAW,EAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAC,GAAG,MAAM,EAAE,IAAI,EAAE,WAAW,EAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/H,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1F,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,MAAsB,EAAE,QAAkD;IACzG,OAAO,MAAM,KAAK,YAAY,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;AAC9F,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,MAAmB,EAAE,IAAkB,EAAE,MAAc,EAAE,QAAyB,WAAW,EAAE,UAAU,GAAG,KAAK;IACxI,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,KAAK,MAAM,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IAC9I,OAAO,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;AACvH,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,KAAK,GAAG,KAAoB,CAAC;IACnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IACpK,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IACvH,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAChK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IAC7H,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC9I,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQhD,MAAM,CAAC,MAAM,UAAU,GAAwB,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAkBtH,MAAM,CAAC,MAAM,WAAW,GAAoB,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AA+IvJ,MAAM,OAAO,UAAW,SAAQ,KAAK;IACd;IAArB,YAAqB,IAAY,EAAE,OAAe,EAAE,OAAsB;QACxE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QADL,SAAI,GAAJ,IAAI,CAAQ;QAE/B,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5G,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QACrG,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnJ,CAAC;IACD,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;AACpE,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AACD,MAAM,UAAU,SAAS,CAAI,KAAQ;IACnC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAwB;IACpD,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;IAC/H,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,CAAU,EAAE,CAAC;QAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IACjL,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IAC3P,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,+CAA+C,CAAC,CAAC;IACpJ,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAU,EAAE,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IACzI,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAC,GAAG,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,EAAC,CAAC,CAAsB,CAAC,CAAC;AAC/L,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,KAAyE,EAAE,OAA0B;IAChI,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,CAAU,EAAE,CAAC;QACxF,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IAC3I,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;IAC3I,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;IACtJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACrI,OAAO,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC1D,CAAC;AACD,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC5C,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;IACtG,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AACD,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,MAAmB,EAAE,SAAiB;IAClE,iFAAiF;IACjF,qFAAqF;IACrF,MAAM,EAAC,uBAAuB,EAAE,aAAa,EAAE,GAAG,WAAW,EAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAC,GAAG,MAAM,EAAE,IAAI,EAAE,WAAW,EAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/H,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1F,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,MAAsB,EAAE,QAAkD;IACzG,OAAO,MAAM,KAAK,YAAY,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;AAC9F,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,MAAmB,EAAE,IAAkB,EAAE,MAAc,EAAE,QAAyB,WAAW,EAAE,UAAU,GAAG,KAAK;IACxI,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,KAAK,MAAM,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IAC9I,OAAO,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;AACvH,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,KAAK,GAAG,KAAoB,CAAC;IACnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IACpK,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IACvH,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAChK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IAC7H,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC9I,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { type ExtensionFactory, type BashToolOptions, type ReadToolOptions, type McpExtensionOptions } from '@earendil-works/pi-coding-agent';
 import { type GuardSettings } from './policy/index.js';
-import { type SandboxExecutor } from './sandbox/executor.js';
+import { type ToolExecutor } from './tools/executor.js';
 import { GuardController } from './tools/controller.js';
 import type { PermissionProfile } from './contracts.js';
 import type { ReviewProvider } from './reviewer.js';
@@ -11,7 +11,7 @@ export interface GuardOptions {
     settings?: Partial<GuardSettings>;
     settingsPath?: string;
     profile?: PermissionProfile;
-    executor?: SandboxExecutor;
+    executor?: ToolExecutor;
     provider?: ReviewProvider;
     bashOptions?: Omit<BashToolOptions, 'operations'>;
     readOptions?: Omit<ReadToolOptions, 'operations'>;

package/dist/index.js

@@ -1,30 +1,36 @@
 import { join, resolve } from 'node:path';
 import { homedir } from 'node:os';
 import { createBashToolDefinition, createReadToolDefinition, createEditToolDefinition, createWriteToolDefinition, createGrepToolDefinition, createFindToolDefinition, createLsToolDefinition } from '@earendil-works/pi-coding-agent';
-import { defaultProfile, loadSettings, validateSettings } from './policy/index.js';
+import { defaultProfile } from './policy/index.js';
 import { ApprovalManager, FileGrantPersistence } from './approvals.js';
 import { AuditLog } from './audit.js';
-import { NativeExecutor } from './sandbox/executor.js';
+import { PiExecutor } from './tools/executor.js';
 import { GuardController } from './tools/controller.js';
 import { AUTHORIZATION_ENTRY, safeEvidence } from './review/context.js';
-import { canonicalJson, createProfile, GuardError } from './contracts.js';
-import { redact } from './audit.js';
+import { createProfile } from './contracts.js';
 import { createGuardedMcpExtension } from './tools/mcp.js';
+import { ApprovalSettingsStore } from './approval-settings.js';
+import { registerApprovalCommands } from './approval-commands.js';
 export function createGuardExtension(options = {}) {
     let controller;
     const factory = async (pi) => {
+        const previous = controller;
+        controller = undefined;
+        await previous?.close();
         const cwd = options.cwd ?? process.cwd();
-        const settings = options.settingsPath ? await loadSettings(options.settingsPath) : validateSettings(options.settings ?? {});
         const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join(homedir(), '.pi', 'agent');
         const controlDir = join(agentDir, 'guard');
-        const baseline = await defaultProfile(cwd, settings, [agentDir, ...(options.settingsPath ? [resolve(options.settingsPath)] : [])], options.trustedExtensionPaths);
+        const settingsPath = options.settingsPath ? resolve(options.settingsPath) : join(controlDir, 'settings.json');
+        const settingsStore = new ApprovalSettingsStore(settingsPath, options.settings, Boolean(options.settingsPath));
+        const settings = await settingsStore.load();
+        const baseline = await defaultProfile(cwd, settings, [agentDir, settingsPath], options.trustedExtensionPaths);
         const profile = options.profile ? createProfile({ ...options.profile,
             denyRead: [...new Set([...options.profile.denyRead, ...baseline.denyRead])],
             denyWrite: [...new Set([...options.profile.denyWrite, ...baseline.denyWrite])],
         }) : baseline;
         const audit = new AuditLog(join(controlDir, 'audit.jsonl'));
         const approvals = new ApprovalManager({ reviewTimeoutMs: settings.reviewTimeoutMs, approvalTimeoutMs: settings.approvalTimeoutMs, approvalPolicy: settings.approvalPolicy, approvalsReviewer: settings.approvalsReviewer, audit, persistence: new FileGrantPersistence(join(controlDir, 'grants.json')) });
-        controller = new GuardController({ profile, settings, executor: options.executor ?? new NativeExecutor(), approvals, audit, provider: options.provider, shellPath: options.bashOptions?.shellPath });
+        controller = new GuardController({ profile, settings, executor: options.executor ?? new PiExecutor(), approvals, audit, provider: options.provider, shellPath: options.bashOptions?.shellPath });
         try {
             await controller.initialize(cwd);
         }
@@ -52,7 +58,7 @@ export function createGuardExtension(options = {}) {
         pi.on('tool_call', event => {
             guard.assertReady();
             guard.noteCall(event);
-            if (!['bash', 'read', 'edit', 'write', 'grep', 'find', 'ls', 'codemode', ...settings.trustedTools].includes(event.toolName) && !guard.isExternalTool(event.toolName))
+            if (!['bash', 'read', 'edit', 'write', 'grep', 'find', 'ls', 'codemode', ...guard.options.settings.trustedTools].includes(event.toolName) && !guard.isExternalTool(event.toolName))
                 return { block: true, reason: 'Unknown tool needs an explicit trusted adapter' };
         });
         pi.on('tool_result', event => {
@@ -61,32 +67,7 @@ export function createGuardExtension(options = {}) {
         });
         pi.on('user_bash', (event, context) => { guard.assertReady(); return { operations: guard.userBashOperations(context, event.command) }; });
         pi.on('session_shutdown', async () => { await guard.close(); });
-        pi.registerCommand('approve', { description: '최근 자동 검토 거부 중 정확한 작업 하나를 한 번 재검토합니다.', handler: async (args, context) => {
-                await context.waitForIdle();
-                const denials = guard.approvals.lifecycle.recentDenials;
-                if (!denials.length) {
-                    context.ui.notify('재검토할 최근 거부가 없습니다.', 'info');
-                    return;
-                }
-                let id = args.trim();
-                if (!id) {
-                    if (!context.hasUI)
-                        throw new GuardError('APPROVAL_UI_UNAVAILABLE', 'Use /approve <denial-id> to select one exact recent denial');
-                    const choices = denials.map(item => `${item.id} | ${item.action.tool} | ${redact(canonicalJson(item.action.args))} | ${item.assessment.rationale}`);
-                    const selected = await context.ui.select('자동 검토 거부 — 한 번 재검토할 작업 선택', choices);
-                    if (!selected)
-                        return;
-                    id = denials[choices.indexOf(selected)].id;
-                }
-                const retry = await guard.authorizeRetry(id, context);
-                if (retry.denial.action.source === 'user-bash' && !retry.denial.action.args.networkDestination) {
-                    await guard.retryUserBash(retry.denial.action, context);
-                    context.ui.notify('선택한 명령을 다시 검토하고 실행했습니다.', 'info');
-                    return;
-                }
-                const nested = retry.denial.action.source === 'nested' ? 'Invoke only this exact tool through codemode to preserve the original nested source.' : 'Retry only this exact tool action.';
-                pi.sendUserMessage(`${nested}\nTool: ${retry.denial.action.tool}\nArguments: ${canonicalJson(retry.args)}\nThe user selected denial ${id} for one retry. The controller holds a one-use exact-action marker; automatic review and policy still apply. Do not repeat unrelated earlier side effects.`, { expandPromptTemplates: false });
-            } });
+        registerApprovalCommands(pi, guard, settingsStore);
         if (options.mcp !== false) {
             try {
                 const mcp = await createGuardedMcpExtension(agentDir, () => guard, options.mcp, options.mcpToolPolicies);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,sBAAsB,EAA+F,MAAM,iCAAiC,CAAC;AACnU,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAsB,MAAM,mBAAmB,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,cAAc,EAAwB,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,yBAAyB,EAAwB,MAAM,gBAAgB,CAAC;AAgBjF,MAAM,UAAU,oBAAoB,CAAC,UAAwB,EAAE;IAC7D,IAAI,UAAuC,CAAC;IAC5C,MAAM,OAAO,GAAqB,KAAK,EAAC,EAAE,EAAC,EAAE;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC5H,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACxG,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAClK,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,EAAC,GAAG,OAAO,CAAC,OAAO;YACjE,QAAQ,EAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACzE,SAAS,EAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;SAC7E,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACd,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3S,UAAU,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,cAAc,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QACrM,IAAI,CAAC;YAAC,MAAM,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;YAAC,UAAU,GAAG,SAAS,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAC1H,MAAM,KAAK,GAAG,UAAU,CAAC;QACzB,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACzG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACzG,KAAK,MAAM,MAAM,IAAI,CAAC,wBAAwB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,sBAAsB,CAAC;YAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrM,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClJ,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5H,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;YACrB,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC7D,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,EAAE,CAAC,WAAW,CAAC,mBAAmB,EAAE,EAAC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAC,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE;YACzB,KAAK,CAAC,WAAW,EAAE,CAAC;YAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,CAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAC,MAAM,EAAC,IAAI,EAAC,UAAU,EAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAC,IAAI,EAAE,MAAM,EAAC,gDAAgD,EAAE,CAAC;QAC/O,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE;YAC3B,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,EAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,EAAC,CAAC,CAAC,EAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAClL,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1I,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,EAAC,WAAW,EAAC,sCAAsC,EAAC,OAAO,EAAC,KAAK,EAAC,IAAI,EAAC,OAAO,EAAC,EAAE;gBAC7G,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,CAAC;gBACtD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;oBAAA,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,EAAC,MAAM,CAAC,CAAC;oBAAA,OAAO;gBAAA,CAAC;gBAC5E,IAAI,EAAE,GAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnB,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,IAAI,CAAC,OAAO,CAAC,KAAK;wBAAE,MAAM,IAAI,UAAU,CAAC,yBAAyB,EAAC,4DAA4D,CAAC,CAAC;oBACjI,MAAM,OAAO,GAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA,EAAE,CAAA,GAAG,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC;oBAChJ,MAAM,QAAQ,GAAC,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,2BAA2B,EAAC,OAAO,CAAC,CAAC;oBAC5E,IAAI,CAAC,QAAQ;wBAAE,OAAO;oBAAC,EAAE,GAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAE,CAAC,EAAE,CAAC;gBACnE,CAAC;gBACD,MAAM,KAAK,GAAC,MAAM,KAAK,CAAC,cAAc,CAAC,EAAE,EAAC,OAAO,CAAC,CAAC;gBACnD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAG,WAAW,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAC7F,MAAM,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAC,OAAO,CAAC,CAAC;oBAAA,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,yBAAyB,EAAC,MAAM,CAAC,CAAC;oBAAA,OAAO;gBACpH,CAAC;gBACD,MAAM,MAAM,GAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAG,QAAQ,CAAA,CAAC,CAAA,sFAAsF,CAAA,CAAC,CAAA,oCAAoC,CAAC;gBAC/K,EAAE,CAAC,eAAe,CAAC,GAAG,MAAM,WAAW,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,gBAAgB,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,8BAA8B,EAAE,4JAA4J,EAAC,EAAC,qBAAqB,EAAC,KAAK,EAAC,CAAC,CAAC;YACtU,CAAC,EAAC,CAAC,CAAC;QACJ,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;gBACzG,MAAM,CAAC,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,UAAU,GAAG,SAAS,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;QAC/E,CAAC;IACH,CAAC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;AACxK,CAAC;AACD,eAAe,oBAAoB,EAAE,CAAC,OAAO,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,sBAAsB,EAA+F,MAAM,iCAAiC,CAAC;AACnU,OAAO,EAAE,cAAc,EAAsB,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAqB,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAwB,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAgBlE,MAAM,UAAU,oBAAoB,CAAC,UAAwB,EAAE;IAC7D,IAAI,UAAuC,CAAC;IAC5C,MAAM,OAAO,GAAqB,KAAK,EAAC,EAAE,EAAC,EAAE;QAC3C,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC5B,UAAU,GAAG,SAAS,CAAC;QACvB,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACxG,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAC,eAAe,CAAC,CAAC;QAC7G,MAAM,aAAa,GAAG,IAAI,qBAAqB,CAAC,YAAY,EAAC,OAAO,CAAC,QAAQ,EAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAC7G,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAC,YAAY,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC7G,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,EAAC,GAAG,OAAO,CAAC,OAAO;YACjE,QAAQ,EAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACzE,SAAS,EAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;SAC7E,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACd,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3S,UAAU,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QACjM,IAAI,CAAC;YAAC,MAAM,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;YAAC,UAAU,GAAG,SAAS,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAC1H,MAAM,KAAK,GAAG,UAAU,CAAC;QACzB,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACzG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACzG,KAAK,MAAM,MAAM,IAAI,CAAC,wBAAwB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,sBAAsB,CAAC;YAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrM,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClJ,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5H,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;YACrB,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC7D,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,EAAE,CAAC,WAAW,CAAC,mBAAmB,EAAE,EAAC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAC,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE;YACzB,KAAK,CAAC,WAAW,EAAE,CAAC;YAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,CAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAC,MAAM,EAAC,IAAI,EAAC,UAAU,EAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAC,IAAI,EAAE,MAAM,EAAC,gDAAgD,EAAE,CAAC;QAC7P,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE;YAC3B,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,EAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,EAAC,CAAC,CAAC,EAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAClL,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1I,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,wBAAwB,CAAC,EAAE,EAAC,KAAK,EAAC,aAAa,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;gBACzG,MAAM,CAAC,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,UAAU,GAAG,SAAS,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;QAC/E,CAAC;IACH,CAAC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;AACxK,CAAC;AACD,eAAe,oBAAoB,EAAE,CAAC,OAAO,CAAC"}

package/dist/policy/index.d.ts

@@ -52,5 +52,4 @@ export declare class PolicyEngine {
     evaluate(action: GuardAction, signal?: AbortSignal): Promise<PolicyDecision>;
     private shellDecision;
     private resolvedProfile;
-    private nativeWriteScope;
 }

package/dist/policy/index.js

@@ -8,8 +8,6 @@ import { analyzeShell, matchesPrefix } from './shell.js';
 import { reviewPolicy } from '../review/policy.js';
 import { matchesDomain, isNetworkHost, isDomainPattern, normalizeHost } from './domains.js';
 import { evaluateRules, ruleCommands, matchesRule } from './rules.js';
-import { runtimeWritePaths } from '../sandbox/runtime-write-paths.js';
-import { hasNativePatternChars } from '../sandbox/paths.js';
 export { canonicalPath, isWithin, analyzeShell, matchesPrefix, resolveToolPath };
 export const DEFAULT_SETTINGS = immutable({
     mode: 'workspace-write', commandRules: [], allowedDomains: [], reviewTimeoutMs: 20_000, approvalTimeoutMs: 60_000, executionTimeoutSeconds: 120, trustedTools: [],
@@ -163,10 +161,7 @@ export class PolicyEngine {
         const canWrite = !isWrite || profile.writeRoots.some(p => isWithin(target, p)) && !(profile.readOnlyPaths ?? []).some(p => isWithin(target, p));
         if (canRead && canWrite)
             return decision(action, 'allow', 'Within current filesystem permissions');
-        const writePath = isWrite && !canWrite ? await this.nativeWriteScope(target, action.cwd) : target;
-        if ((!canRead && hasNativePatternChars(target)) || (!canWrite && hasNativePatternChars(writePath)))
-            return decision(action, 'deny', 'Native permission roots containing *, ?, [ or ] cannot be approved as literal paths', EMPTY_DELTA, true);
-        return decision(action, 'ask', writePath === target ? 'Filesystem permission required' : 'The native backend requires the enclosing directory in this invocation; review this full write scope', { readPaths: canRead ? [] : [target], writePaths: canWrite ? [] : [writePath], domains: [] });
+        return decision(action, 'ask', 'Action outside the ordinary approval scope', { readPaths: canRead ? [] : [target], writePaths: canWrite ? [] : [target], domains: [] });
     }
     async shellDecision(action, signal) {
         const profile = await this.resolvedProfile(action.cwd);
@@ -174,7 +169,7 @@ export class PolicyEngine {
         if (typeof command !== 'string')
             return decision(action, 'deny', 'Invalid command input', EMPTY_DELTA, true);
         const analysis = analyzeShell(command);
-        let shouldAsk = false;
+        let shouldAsk = !analysis.isSupported;
         const delta = { readPaths: [], writePaths: [], domains: [] };
         const commandGroups = ruleCommands(command, typeof action.args.shellPath === 'string' ? action.args.shellPath : '/bin/bash');
         const key = digest(commandGroups);
@@ -210,6 +205,8 @@ export class PolicyEngine {
         for (const item of analysis.commands) {
             const executable = basename(item.argv[0]);
             const isSafeRead = ['pwd', 'echo', 'printf', 'ls', 'cat', 'head', 'tail', 'wc', 'rg', 'grep', 'find', 'stat', 'true', 'false'].includes(executable);
+            if (!isSafeRead && !['touch', 'mkdir', 'rmdir', 'rm', 'truncate', 'tee', 'chmod', 'chown', 'cp', 'mv', 'git', 'curl', 'wget'].includes(executable))
+                shouldAsk = true;
             const operands = item.argv.slice(1).filter(arg => !arg.startsWith('-'));
             const reads = [...item.reads], writes = [...item.writes];
             if (analysis.isSupported) {
@@ -261,16 +258,12 @@ export class PolicyEngine {
             delta[key] = [...new Set(await Promise.all(delta[key].map(path => canonicalPath(path, action.cwd))))];
         if (delta.readPaths.some(path => profile.denyRead.some(root => isWithin(path, root))) || delta.writePaths.some(path => [...profile.denyRead, ...profile.denyWrite].some(root => isWithin(path, root))) || delta.domains.some(host => !isNetworkHost(host) || profile.deniedDomains.some(pattern => matchesDomain(host, pattern))))
             return decision(action, 'deny', 'Requested permissions target an absolute deny', EMPTY_DELTA, true);
-        const writeScopes = await Promise.all(delta.writePaths.map(path => this.nativeWriteScope(path, action.cwd)));
-        const hasCreationScope = writeScopes.some((path, index) => path !== delta.writePaths[index]);
-        const boundDelta = { ...delta, writePaths: [...new Set(writeScopes)], domains: [...new Set(delta.domains.map(normalizeHost))] };
-        if ([...boundDelta.readPaths, ...boundDelta.writePaths].some(hasNativePatternChars))
-            return decision(action, 'deny', 'Native permission roots containing *, ?, [ or ] cannot be approved as literal paths', EMPTY_DELTA, true);
+        const boundDelta = { ...delta, domains: [...new Set(delta.domains.map(normalizeHost))] };
         if (isRuleAllowed)
             return immutable({ ...decision(action, 'allow', 'Trusted prefix rule authorizes this command', boundDelta), authority: { kind: 'command-rule', actionDigest: action.digest, ruleDigest: digest(matches) } });
         const isFullRequest = action.args.sandbox_permissions === 'require_escalated' && explicit === undefined;
         shouldAsk ||= action.args.sandbox_permissions === 'require_escalated';
-        const reason = hasCreationScope ? 'The native backend requires the enclosing directory in this invocation; review this full write scope' : prompted?.justification ?? (shouldAsk ? 'Command requires permission review' : 'Execute within the current native sandbox');
+        const reason = prompted?.justification ?? (shouldAsk ? 'Command requires approval review' : 'Within the ordinary approval scope');
         return immutable({ ...decision(action, shouldAsk ? 'ask' : 'allow', reason, boundDelta), approvalCategory: prompted ? 'rules' : 'sandbox', ...(isFullRequest ? { authority: { kind: 'reviewed-command', actionDigest: action.digest } } : {}) });
     }
     async resolvedProfile(cwd) {
@@ -281,24 +274,5 @@ export class PolicyEngine {
             result.readOnlyPaths = await Promise.all(this.profile.readOnlyPaths.map(path => canonicalPath(path, cwd)));
         return result;
     }
-    async nativeWriteScope(target, cwd) {
-        let candidate = target;
-        while (process.platform === 'linux') {
-            try {
-                await stat(candidate);
-                break;
-            }
-            catch (error) {
-                if (error.code !== 'ENOENT')
-                    throw error;
-                const parent = dirname(candidate);
-                if (parent === candidate)
-                    throw error;
-                candidate = parent;
-            }
-        }
-        const defaults = await runtimeWritePaths(cwd);
-        return defaults.find(root => isWithin(candidate, root)) ?? candidate;
-    }
 }
 //# sourceMappingURL=index.js.map