pi-codex-auto-review 0.1.3 → 0.2.0

package/dist/contracts.js

@@ -1,33 +1,52 @@
-import { isDomainPattern, normalizeHost } from './policy/domains.js';
-import { createHash } from 'node:crypto';
-import { isAbsolute, resolve } from 'node:path';
-export const TOOL_NAMES = Object.freeze(['bash', 'read', 'edit', 'write', 'grep', 'find', 'ls']);
-export const EMPTY_DELTA = Object.freeze({ readPaths: Object.freeze([]), writePaths: Object.freeze([]), domains: Object.freeze([]) });
+import { createHash } from "node:crypto";
+import { isAbsolute, resolve } from "node:path";
+import { isDomainPattern, normalizeHost } from "./policy/domains.js";
+export const TOOL_NAMES = Object.freeze([
+    "bash",
+    "read",
+    "edit",
+    "write",
+    "grep",
+    "find",
+    "ls",
+]);
+export const EMPTY_DELTA = Object.freeze({
+    readPaths: Object.freeze([]),
+    writePaths: Object.freeze([]),
+    domains: Object.freeze([]),
+});
 export class GuardError extends Error {
     code;
     constructor(code, message, options) {
         super(message, options);
         this.code = code;
-        this.name = 'GuardError';
+        this.name = "GuardError";
     }
 }
 export function canonicalJson(value) {
-    if (value === null || typeof value === 'string' || typeof value === 'boolean')
+    if (value === null ||
+        typeof value === "string" ||
+        typeof value === "boolean")
         return JSON.stringify(value);
-    if (typeof value === 'number' && Number.isFinite(value))
+    if (typeof value === "number" && Number.isFinite(value))
         return JSON.stringify(value);
     if (Array.isArray(value))
-        return `[${value.map(canonicalJson).join(',')}]`;
-    if (typeof value === 'object' && value !== null && Object.getPrototypeOf(value) === Object.prototype) {
-        return `{${Object.keys(value).sort().map(key => `${JSON.stringify(key)}:${canonicalJson(value[key])}`).join(',')}}`;
+        return `[${value.map(canonicalJson).join(",")}]`;
+    if (typeof value === "object" &&
+        value !== null &&
+        Object.getPrototypeOf(value) === Object.prototype) {
+        return `{${Object.keys(value)
+            .sort()
+            .map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`)
+            .join(",")}}`;
     }
-    throw new GuardError('INVALID_JSON', 'Expected finite JSON data');
+    throw new GuardError("INVALID_JSON", "Expected finite JSON data");
 }
 export function digest(value) {
-    return createHash('sha256').update(canonicalJson(value)).digest('hex');
+    return createHash("sha256").update(canonicalJson(value)).digest("hex");
 }
 export function immutable(value) {
-    if (value && typeof value === 'object') {
+    if (value && typeof value === "object") {
         for (const item of Object.values(value))
             immutable(item);
         Object.freeze(value);
@@ -35,32 +54,62 @@ export function immutable(value) {
     return value;
 }
 export function createProfile(input) {
-    if (!['read-only', 'workspace-write'].includes(input.mode))
-        throw new GuardError('INVALID_PROFILE', 'Unknown permission mode');
-    for (const key of ['readRoots', 'writeRoots', 'denyRead', 'denyWrite']) {
-        if (!Array.isArray(input[key]) || input[key].some(p => typeof p !== 'string' || !isAbsolute(p) || p.includes('\0')))
-            throw new GuardError('INVALID_PROFILE', `Invalid ${key}`);
+    if (!["read-only", "workspace-write"].includes(input.mode))
+        throw new GuardError("INVALID_PROFILE", "Unknown permission mode");
+    for (const key of [
+        "readRoots",
+        "writeRoots",
+        "denyRead",
+        "denyWrite",
+    ]) {
+        if (!Array.isArray(input[key]) ||
+            input[key].some((p) => typeof p !== "string" || !isAbsolute(p) || p.includes("\0")))
+            throw new GuardError("INVALID_PROFILE", `Invalid ${key}`);
     }
-    if (input.readOnlyPaths !== undefined && (!Array.isArray(input.readOnlyPaths) || input.readOnlyPaths.some(path => typeof path !== 'string' || !isAbsolute(path) || path.includes('\0'))))
-        throw new GuardError('INVALID_PROFILE', 'Invalid readOnlyPaths');
-    if (input.mode === 'read-only' && input.writeRoots.length)
-        throw new GuardError('INVALID_PROFILE', 'Read-only profiles cannot contain write roots');
-    for (const key of ['allowedDomains', 'deniedDomains']) {
-        if (!Array.isArray(input[key]) || input[key].some(p => !isDomainPattern(p)))
-            throw new GuardError('INVALID_PROFILE', `Invalid ${key}`);
+    if (input.readOnlyPaths !== undefined &&
+        (!Array.isArray(input.readOnlyPaths) ||
+            input.readOnlyPaths.some((path) => typeof path !== "string" ||
+                !isAbsolute(path) ||
+                path.includes("\0"))))
+        throw new GuardError("INVALID_PROFILE", "Invalid readOnlyPaths");
+    if (input.mode === "read-only" && input.writeRoots.length)
+        throw new GuardError("INVALID_PROFILE", "Read-only profiles cannot contain write roots");
+    for (const key of ["allowedDomains", "deniedDomains"]) {
+        if (!Array.isArray(input[key]) ||
+            input[key].some((p) => !isDomainPattern(p)))
+            throw new GuardError("INVALID_PROFILE", `Invalid ${key}`);
     }
-    return immutable(JSON.parse(canonicalJson({ ...input, allowedDomains: input.allowedDomains.map(normalizeHost), deniedDomains: input.deniedDomains.map(normalizeHost) })));
+    return immutable(JSON.parse(canonicalJson({
+        ...input,
+        allowedDomains: input.allowedDomains.map(normalizeHost),
+        deniedDomains: input.deniedDomains.map(normalizeHost),
+    })));
 }
 export function createAction(input, profile) {
-    for (const key of ['toolCallId', 'tool', 'cwd', 'sessionId', 'policyRevision']) {
-        if (typeof input[key] !== 'string' || !input[key] || input[key].includes('\0'))
-            throw new GuardError('INVALID_ACTION', `Invalid ${key}`);
+    for (const key of [
+        "toolCallId",
+        "tool",
+        "cwd",
+        "sessionId",
+        "policyRevision",
+    ]) {
+        if (typeof input[key] !== "string" ||
+            !input[key] ||
+            input[key].includes("\0"))
+            throw new GuardError("INVALID_ACTION", `Invalid ${key}`);
     }
-    if (!['model', 'nested', 'user-bash', 'extension'].includes(input.source))
-        throw new GuardError('INVALID_ACTION', 'Invalid action source');
-    if (!input.args || Array.isArray(input.args) || typeof input.args !== 'object')
-        throw new GuardError('INVALID_ACTION', 'Arguments must be an object');
-    const fields = JSON.parse(canonicalJson({ ...input, cwd: resolve(input.cwd), schemaVersion: 1, permissionDigest: digest(profile) }));
+    if (!["model", "nested", "user-bash", "extension"].includes(input.source))
+        throw new GuardError("INVALID_ACTION", "Invalid action source");
+    if (!input.args ||
+        Array.isArray(input.args) ||
+        typeof input.args !== "object")
+        throw new GuardError("INVALID_ACTION", "Arguments must be an object");
+    const fields = JSON.parse(canonicalJson({
+        ...input,
+        cwd: resolve(input.cwd),
+        schemaVersion: 1,
+        permissionDigest: digest(profile),
+    }));
     return immutable({ ...fields, digest: digest(fields) });
 }
 /** Reusable grants still bind exact inputs/cwd/source/profile, but not a previous logical call id. */
@@ -73,30 +122,47 @@ export function retryIdentity(action, contextId) {
     // A runtime destination belongs to the same semantic command even though its new
     // invocation necessarily has a different origin digest. Destination/port stay bound.
     const { originatingActionDigest: ignoredOrigin, ...networkArgs } = action.args;
-    const semantic = action.args.networkDestination && typeof ignoredOrigin === 'string' ? { ...action, args: networkArgs } : action;
-    return digest({ action: ruleDigest(semantic), sessionId: action.sessionId, contextId });
+    const semantic = action.args.networkDestination && typeof ignoredOrigin === "string"
+        ? { ...action, args: networkArgs }
+        : action;
+    return digest({
+        action: ruleDigest(semantic),
+        sessionId: action.sessionId,
+        contextId,
+    });
 }
 export function approvalEligible(policy, category) {
-    return policy === 'on-request' || (typeof policy === 'object' && policy[category] === true);
+    return (policy === "on-request" ||
+        (typeof policy === "object" && policy[category] === true));
 }
 export function decision(action, kind, reason, delta = EMPTY_DELTA, isHardDeny = false) {
-    if (!['allow', 'ask', 'deny'].includes(kind) || (isHardDeny && kind !== 'deny'))
-        throw new GuardError('INVALID_DECISION', 'Invalid decision');
-    return immutable({ kind, reason, actionDigest: action.digest, delta: JSON.parse(canonicalJson(delta)), isHardDeny });
+    if (!["allow", "ask", "deny"].includes(kind) ||
+        (isHardDeny && kind !== "deny"))
+        throw new GuardError("INVALID_DECISION", "Invalid decision");
+    return immutable({
+        kind,
+        reason,
+        actionDigest: action.digest,
+        delta: JSON.parse(canonicalJson(delta)),
+        isHardDeny,
+    });
 }
 export function validateWorkerFrame(value) {
     const frame = value;
-    if (!frame || frame.schemaVersion !== 1 || !['data', 'update', 'result', 'error'].includes(frame.type))
-        throw new GuardError('INVALID_IPC', 'Invalid worker frame');
+    if (frame?.schemaVersion !== 1 ||
+        !["data", "update", "result", "error"].includes(frame.type))
+        throw new GuardError("INVALID_IPC", "Invalid worker frame");
     canonicalJson(value);
-    if (frame.type === 'data' && typeof frame.data !== 'string')
-        throw new GuardError('INVALID_IPC', 'Invalid data frame');
-    if (frame.type === 'error' && (typeof frame.code !== 'string' || typeof frame.message !== 'string'))
-        throw new GuardError('INVALID_IPC', 'Invalid error frame');
-    if (frame.type === 'result' && !Object.hasOwn(frame, 'result'))
-        throw new GuardError('INVALID_IPC', 'Missing worker result');
-    if (frame.type === 'update' && (!frame.result || !Array.isArray(frame.result.content)))
-        throw new GuardError('INVALID_IPC', 'Invalid update');
+    if (frame.type === "data" && typeof frame.data !== "string")
+        throw new GuardError("INVALID_IPC", "Invalid data frame");
+    if (frame.type === "error" &&
+        (typeof frame.code !== "string" || typeof frame.message !== "string"))
+        throw new GuardError("INVALID_IPC", "Invalid error frame");
+    if (frame.type === "result" && !Object.hasOwn(frame, "result"))
+        throw new GuardError("INVALID_IPC", "Missing worker result");
+    if (frame.type === "update" &&
+        (!frame.result || !Array.isArray(frame.result.content)))
+        throw new GuardError("INVALID_IPC", "Invalid update");
     return frame;
 }
 //# sourceMappingURL=contracts.js.map

package/dist/contracts.js.map

@@ -1 +1 @@
-{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQhD,MAAM,CAAC,MAAM,UAAU,GAAwB,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAkBtH,MAAM,CAAC,MAAM,WAAW,GAAoB,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AA+IvJ,MAAM,OAAO,UAAW,SAAQ,KAAK;IACd;IAArB,YAAqB,IAAY,EAAE,OAAe,EAAE,OAAsB;QACxE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QADL,SAAI,GAAJ,IAAI,CAAQ;QAE/B,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5G,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QACrG,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnJ,CAAC;IACD,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;AACpE,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AACD,MAAM,UAAU,SAAS,CAAI,KAAQ;IACnC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAwB;IACpD,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;IAC/H,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,CAAU,EAAE,CAAC;QAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IACjL,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IAC3P,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,+CAA+C,CAAC,CAAC;IACpJ,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAU,EAAE,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IACzI,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAC,GAAG,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,EAAC,CAAC,CAAsB,CAAC,CAAC;AAC/L,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,KAAyE,EAAE,OAA0B;IAChI,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,CAAU,EAAE,CAAC;QACxF,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IAC3I,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;IAC3I,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;IACtJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACrI,OAAO,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC1D,CAAC;AACD,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC5C,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;IACtG,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AACD,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,MAAmB,EAAE,SAAiB;IAClE,iFAAiF;IACjF,qFAAqF;IACrF,MAAM,EAAC,uBAAuB,EAAE,aAAa,EAAE,GAAG,WAAW,EAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAC,GAAG,MAAM,EAAE,IAAI,EAAE,WAAW,EAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/H,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1F,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,MAAsB,EAAE,QAAkD;IACzG,OAAO,MAAM,KAAK,YAAY,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;AAC9F,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,MAAmB,EAAE,IAAkB,EAAE,MAAc,EAAE,QAAyB,WAAW,EAAE,UAAU,GAAG,KAAK;IACxI,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,KAAK,MAAM,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IAC9I,OAAO,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;AACvH,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,KAAK,GAAG,KAAoB,CAAC;IACnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IACpK,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IACvH,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAChK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IAC7H,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC9I,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAwBrE,MAAM,CAAC,MAAM,UAAU,GAAwB,MAAM,CAAC,MAAM,CAAC;IACzD,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,IAAI;CACP,CAAC,CAAC;AAkBH,MAAM,CAAC,MAAM,WAAW,GAAoB,MAAM,CAAC,MAAM,CAAC;IACtD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;CAC7B,CAAC,CAAC;AA+OH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAEpB;IADb,YACa,IAAY,EACrB,OAAe,EACf,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAJf,SAAI,GAAJ,IAAI,CAAQ;QAKrB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC7B,CAAC;CACJ;AAED,MAAM,UAAU,aAAa,CAAC,KAAc;IACxC,IACI,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS;QAE1B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACnD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IACI,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,EACnD,CAAC;QACC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aACxB,IAAI,EAAE;aACN,GAAG,CACA,CAAC,GAAG,EAAE,EAAE,CACJ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,EAAE,CACzF;aACA,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACtB,CAAC;IACD,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;AACtE,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,KAAc;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AACD,MAAM,UAAU,SAAS,CAAI,KAAQ;IACjC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAwB;IAClD,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QACtD,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,CAAC;IACvE,KAAK,MAAM,GAAG,IAAI;QACd,WAAW;QACX,YAAY;QACZ,UAAU;QACV,WAAW;KACL,EAAE,CAAC;QACT,IACI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CACX,CAAC,CAAC,EAAE,EAAE,CACF,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAClE;YAED,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IACI,KAAK,CAAC,aAAa,KAAK,SAAS;QACjC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;YAChC,KAAK,CAAC,aAAa,CAAC,IAAI,CACpB,CAAC,IAAI,EAAE,EAAE,CACL,OAAO,IAAI,KAAK,QAAQ;gBACxB,CAAC,UAAU,CAAC,IAAI,CAAC;gBACjB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC1B,CAAC;QAEN,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM;QACrD,MAAM,IAAI,UAAU,CAChB,iBAAiB,EACjB,+CAA+C,CAClD,CAAC;IACN,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAU,EAAE,CAAC;QAC7D,IACI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAE3C,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,SAAS,CACZ,IAAI,CAAC,KAAK,CACN,aAAa,CAAC;QACV,GAAG,KAAK;QACR,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC;QACvD,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC;KACxD,CAAC,CACgB,CACzB,CAAC;AACN,CAAC;AACD,MAAM,UAAU,YAAY,CACxB,KAAyE,EACzE,OAA0B;IAE1B,KAAK,MAAM,GAAG,IAAI;QACd,YAAY;QACZ,MAAM;QACN,KAAK;QACL,WAAW;QACX,gBAAgB;KACV,EAAE,CAAC;QACT,IACI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ;YAC9B,CAAC,KAAK,CAAC,GAAG,CAAC;YACX,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAEzB,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QACrE,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;IACpE,IACI,CAAC,KAAK,CAAC,IAAI;QACX,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QACzB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAE9B,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACrB,aAAa,CAAC;QACV,GAAG,KAAK;QACR,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;QACvB,aAAa,EAAE,CAAC;QAChB,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC;KACpC,CAAC,CACL,CAAC;IACF,OAAO,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC5D,CAAC;AACD,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC1C,MAAM,EACF,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,SAAS,EACrB,SAAS,EAAE,cAAc,EACzB,GAAG,MAAM,EACZ,GAAG,MAAM,CAAC;IACX,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC;AACD,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,MAAmB,EAAE,SAAiB;IAChE,iFAAiF;IACjF,qFAAqF;IACrF,MAAM,EAAE,uBAAuB,EAAE,aAAa,EAAE,GAAG,WAAW,EAAE,GAC5D,MAAM,CAAC,IAAI,CAAC;IAChB,MAAM,QAAQ,GACV,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,OAAO,aAAa,KAAK,QAAQ;QAC/D,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE;QAClC,CAAC,CAAC,MAAM,CAAC;IACjB,OAAO,MAAM,CAAC;QACV,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC;QAC5B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS;KACZ,CAAC,CAAC;AACP,CAAC;AACD,MAAM,UAAU,gBAAgB,CAC5B,MAAsB,EACtB,QAAkD;IAElD,OAAO,CACH,MAAM,KAAK,YAAY;QACvB,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAC5D,CAAC;AACN,CAAC;AACD,MAAM,UAAU,QAAQ,CACpB,MAAmB,EACnB,IAAkB,EAClB,MAAc,EACd,QAAyB,WAAW,EACpC,UAAU,GAAG,KAAK;IAElB,IACI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxC,CAAC,UAAU,IAAI,IAAI,KAAK,MAAM,CAAC;QAE/B,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IACjE,OAAO,SAAS,CAAC;QACb,IAAI;QACJ,MAAM;QACN,YAAY,EAAE,MAAM,CAAC,MAAM;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACvC,UAAU;KACb,CAAC,CAAC;AACP,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAC9C,MAAM,KAAK,GAAG,KAAoB,CAAC;IACnC,IACI,KAAK,EAAE,aAAa,KAAK,CAAC;QAC1B,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAE3D,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IAChE,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QACvD,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAC9D,IACI,KAAK,CAAC,IAAI,KAAK,OAAO;QACtB,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;QAErE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC1D,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IACjE,IACI,KAAK,CAAC,IAAI,KAAK,QAAQ;QACvB,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEvD,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC;AACjB,CAAC"}

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-import { type ExtensionFactory, type BashToolOptions, type ReadToolOptions, type McpExtensionOptions } from '@earendil-works/pi-coding-agent';
-import { type GuardSettings } from './policy/index.js';
-import { type ToolExecutor } from './tools/executor.js';
-import { GuardController } from './tools/controller.js';
-import type { PermissionProfile } from './contracts.js';
-import type { ReviewProvider } from './reviewer.js';
-import { type McpToolPolicies } from './tools/mcp.js';
+import { type BashToolOptions, type ExtensionFactory, type McpExtensionOptions, type ReadToolOptions } from "@earendil-works/pi-coding-agent";
+import type { PermissionProfile } from "./contracts.js";
+import { type GuardSettings } from "./policy/index.js";
+import type { ReviewProvider } from "./reviewer.js";
+import { GuardController } from "./tools/controller.js";
+import { type ToolExecutor } from "./tools/executor.js";
+import { type McpToolPolicies } from "./tools/mcp.js";
 export interface GuardOptions {
     cwd?: string;
     agentDir?: string;
@@ -13,8 +13,8 @@ export interface GuardOptions {
     profile?: PermissionProfile;
     executor?: ToolExecutor;
     provider?: ReviewProvider;
-    bashOptions?: Omit<BashToolOptions, 'operations'>;
-    readOptions?: Omit<ReadToolOptions, 'operations'>;
+    bashOptions?: Omit<BashToolOptions, "operations">;
+    readOptions?: Omit<ReadToolOptions, "operations">;
     /** Trusted code directories are protected against model writes, including imported siblings. */
     trustedExtensionPaths?: readonly string[];
     mcp?: McpExtensionOptions | false;

package/dist/index.js

@@ -1,16 +1,16 @@
-import { join, resolve } from 'node:path';
-import { homedir } from 'node:os';
-import { createBashToolDefinition, createReadToolDefinition, createEditToolDefinition, createWriteToolDefinition, createGrepToolDefinition, createFindToolDefinition, createLsToolDefinition } from '@earendil-works/pi-coding-agent';
-import { defaultProfile } from './policy/index.js';
-import { ApprovalManager, FileGrantPersistence } from './approvals.js';
-import { AuditLog } from './audit.js';
-import { PiExecutor } from './tools/executor.js';
-import { GuardController } from './tools/controller.js';
-import { AUTHORIZATION_ENTRY, safeEvidence } from './review/context.js';
-import { createProfile } from './contracts.js';
-import { createGuardedMcpExtension } from './tools/mcp.js';
-import { ApprovalSettingsStore } from './approval-settings.js';
-import { registerApprovalCommands } from './approval-commands.js';
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+import { createBashToolDefinition, createEditToolDefinition, createFindToolDefinition, createGrepToolDefinition, createLsToolDefinition, createReadToolDefinition, createWriteToolDefinition, } from "@earendil-works/pi-coding-agent";
+import { registerApprovalCommands } from "./approval-commands.js";
+import { ApprovalSettingsStore } from "./approval-settings.js";
+import { ApprovalManager, FileGrantPersistence } from "./approvals.js";
+import { AuditLog } from "./audit.js";
+import { createProfile } from "./contracts.js";
+import { defaultProfile } from "./policy/index.js";
+import { AUTHORIZATION_ENTRY, REVIEW_CONTEXT_ENTRY, safeEvidence, } from "./review/context.js";
+import { GuardController } from "./tools/controller.js";
+import { PiExecutor } from "./tools/executor.js";
+import { createGuardedMcpExtension, } from "./tools/mcp.js";
 export function createGuardExtension(options = {}) {
     let controller;
     const factory = async (pi) => {
@@ -18,19 +18,52 @@ export function createGuardExtension(options = {}) {
         controller = undefined;
         await previous?.close();
         const cwd = options.cwd ?? process.cwd();
-        const agentDir = options.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join(homedir(), '.pi', 'agent');
-        const controlDir = join(agentDir, 'guard');
-        const settingsPath = options.settingsPath ? resolve(options.settingsPath) : join(controlDir, 'settings.json');
+        const agentDir = options.agentDir ??
+            process.env.PI_CODING_AGENT_DIR ??
+            join(homedir(), ".pi", "agent");
+        const controlDir = join(agentDir, "guard");
+        const settingsPath = options.settingsPath
+            ? resolve(options.settingsPath)
+            : join(controlDir, "settings.json");
         const settingsStore = new ApprovalSettingsStore(settingsPath, options.settings, Boolean(options.settingsPath));
         const settings = await settingsStore.load();
         const baseline = await defaultProfile(cwd, settings, [agentDir, settingsPath], options.trustedExtensionPaths);
-        const profile = options.profile ? createProfile({ ...options.profile,
-            denyRead: [...new Set([...options.profile.denyRead, ...baseline.denyRead])],
-            denyWrite: [...new Set([...options.profile.denyWrite, ...baseline.denyWrite])],
-        }) : baseline;
-        const audit = new AuditLog(join(controlDir, 'audit.jsonl'));
-        const approvals = new ApprovalManager({ reviewTimeoutMs: settings.reviewTimeoutMs, approvalTimeoutMs: settings.approvalTimeoutMs, approvalPolicy: settings.approvalPolicy, approvalsReviewer: settings.approvalsReviewer, audit, persistence: new FileGrantPersistence(join(controlDir, 'grants.json')) });
-        controller = new GuardController({ profile, settings, executor: options.executor ?? new PiExecutor(), approvals, audit, provider: options.provider, shellPath: options.bashOptions?.shellPath });
+        const profile = options.profile
+            ? createProfile({
+                ...options.profile,
+                denyRead: [
+                    ...new Set([
+                        ...options.profile.denyRead,
+                        ...baseline.denyRead,
+                    ]),
+                ],
+                denyWrite: [
+                    ...new Set([
+                        ...options.profile.denyWrite,
+                        ...baseline.denyWrite,
+                    ]),
+                ],
+            })
+            : baseline;
+        const audit = new AuditLog(join(controlDir, "audit.jsonl"));
+        const approvals = new ApprovalManager({
+            reviewTimeoutMs: settings.reviewTimeoutMs,
+            approvalTimeoutMs: settings.approvalTimeoutMs,
+            approvalPolicy: settings.approvalPolicy,
+            approvalsReviewer: settings.approvalsReviewer,
+            audit,
+            persistence: new FileGrantPersistence(join(controlDir, "grants.json")),
+        });
+        controller = new GuardController({
+            profile,
+            settings,
+            executor: options.executor ?? new PiExecutor(),
+            approvals,
+            audit,
+            provider: options.provider,
+            shellPath: options.bashOptions?.shellPath,
+            persistContext: (item) => pi.appendEntry(REVIEW_CONTEXT_ENTRY, item),
+        });
         try {
             await controller.initialize(cwd);
         }
@@ -42,36 +75,100 @@ export function createGuardExtension(options = {}) {
         const guard = controller;
         pi.registerTool(guard.wrapTool(createBashToolDefinition(cwd, options.bashOptions), options.bashOptions));
         pi.registerTool(guard.wrapTool(createReadToolDefinition(cwd, options.readOptions), options.readOptions));
-        for (const create of [createEditToolDefinition, createWriteToolDefinition, createGrepToolDefinition, createFindToolDefinition, createLsToolDefinition])
-            pi.registerTool(guard.wrapTool(create(cwd)));
-        pi.on('session_start', (_event, context) => { guard.assertReady(); guard.reset(context.sessionManager.getSessionId(), context.sessionManager); });
-        pi.on('session_tree', (_event, context) => { guard.reset(context.sessionManager.getSessionId(), context.sessionManager); });
-        pi.on('input', event => {
-            if (event.source === 'interactive' || event.source === 'rpc') {
+        pi.registerTool(guard.wrapTool(createEditToolDefinition(cwd)));
+        pi.registerTool(guard.wrapTool(createWriteToolDefinition(cwd)));
+        pi.registerTool(guard.wrapTool(createGrepToolDefinition(cwd)));
+        pi.registerTool(guard.wrapTool(createFindToolDefinition(cwd)));
+        pi.registerTool(guard.wrapTool(createLsToolDefinition(cwd)));
+        pi.on("session_start", (_event, context) => {
+            guard.assertReady();
+            guard.reset(context.sessionManager.getSessionId(), context.sessionManager);
+        });
+        pi.on("session_tree", (_event, context) => {
+            guard.reset(context.sessionManager.getSessionId(), context.sessionManager);
+        });
+        pi.on("session_compact", (event) => {
+            guard.reviewContext.summary(event.compactionEntry.summary, event.compactionEntry.id);
+        });
+        pi.on("input", (event) => {
+            if (event.source === "interactive" || event.source === "rpc") {
                 guard.authorizeUser(event.text);
-                pi.appendEntry(AUTHORIZATION_ENTRY, { text: safeEvidence(event.text), source: event.source });
+                pi.appendEntry(AUTHORIZATION_ENTRY, {
+                    text: safeEvidence(event.text),
+                    source: event.source,
+                });
             }
         });
-        pi.on('before_agent_start', event => { guard.reviewContext.instructions(event); });
-        pi.on('agent_start', () => { guard.startTurn(); });
-        pi.on('message_end', event => { guard.reviewContext.message(event.message); });
-        pi.on('tool_call', event => {
+        pi.on("before_agent_start", (event) => {
+            guard.reviewContext.instructions(event);
+        });
+        pi.on("agent_start", (_event, context) => {
+            guard.startTurn(context);
+        });
+        pi.on("message_end", (event) => {
+            guard.reviewContext.message(event.message);
+        });
+        pi.on("tool_call", (event) => {
             guard.assertReady();
             guard.noteCall(event);
-            if (!['bash', 'read', 'edit', 'write', 'grep', 'find', 'ls', 'codemode', ...guard.options.settings.trustedTools].includes(event.toolName) && !guard.isExternalTool(event.toolName))
-                return { block: true, reason: 'Unknown tool needs an explicit trusted adapter' };
+            if (![
+                "bash",
+                "read",
+                "edit",
+                "write",
+                "grep",
+                "find",
+                "ls",
+                "codemode",
+                ...guard.options.settings.trustedTools,
+            ].includes(event.toolName) &&
+                !guard.isExternalTool(event.toolName))
+                return {
+                    block: true,
+                    reason: "Unknown tool needs an explicit trusted adapter",
+                };
         });
-        pi.on('tool_result', event => {
-            guard.reviewContext.toolResult({ tool: event.toolName, content: event.content.filter(item => item.type === 'text').map(item => ({ type: 'text', text: item.text })) }, event.toolCallId);
+        pi.on("tool_execution_end", (event) => {
+            const result = event.result ?? {}, callIdentity = guard.reviewContext.callIdentity(event.toolCallId);
+            guard.reviewContext.toolResult({
+                tool: event.toolName,
+                toolCallId: event.toolCallId,
+                callIdentity,
+                isError: event.isError,
+                content: (result.content ?? [])
+                    .filter((item) => item.type === "text")
+                    .map((item) => ({
+                    type: "text",
+                    text: item.text,
+                })),
+                ...(result.structuredContent !== undefined
+                    ? {
+                        structuredContent: JSON.parse(JSON.stringify(result.structuredContent)),
+                    }
+                    : {}),
+                ...(event.parentToolCallId
+                    ? {
+                        parentToolCallId: event.parentToolCallId,
+                        parentCallIdentity: guard.reviewContext.callIdentity(event.parentToolCallId),
+                    }
+                    : {}),
+            }, callIdentity);
             guard.completeCall(event.toolCallId);
         });
-        pi.on('user_bash', (event, context) => { guard.assertReady(); return { operations: guard.userBashOperations(context, event.command) }; });
-        pi.on('session_shutdown', async () => { await guard.close(); });
+        pi.on("user_bash", (event, context) => {
+            guard.assertReady();
+            return {
+                operations: guard.userBashOperations(context, event.command),
+            };
+        });
+        pi.on("session_shutdown", async () => {
+            await guard.close();
+        });
         registerApprovalCommands(pi, guard, settingsStore);
         if (options.mcp !== false) {
             try {
                 const mcp = await createGuardedMcpExtension(agentDir, () => guard, options.mcp, options.mcpToolPolicies);
-                await (typeof mcp === 'function' ? mcp : mcp.factory)(pi);
+                await (typeof mcp === "function" ? mcp : mcp.factory)(pi);
             }
             catch (error) {
                 await guard.close();
@@ -80,8 +177,15 @@ export function createGuardExtension(options = {}) {
             }
         }
     };
-    return { factory, assertReady() { if (!controller)
-            throw new Error('pi-codex-auto-review extension failed to load'); controller.assertReady(); return controller; } };
+    return {
+        factory,
+        assertReady() {
+            if (!controller)
+                throw new Error("pi-codex-auto-review extension failed to load");
+            controller.assertReady();
+            return controller;
+        },
+    };
 }
 export default createGuardExtension().factory;
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,sBAAsB,EAA+F,MAAM,iCAAiC,CAAC;AACnU,OAAO,EAAE,cAAc,EAAsB,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAqB,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAwB,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAgBlE,MAAM,UAAU,oBAAoB,CAAC,UAAwB,EAAE;IAC7D,IAAI,UAAuC,CAAC;IAC5C,MAAM,OAAO,GAAqB,KAAK,EAAC,EAAE,EAAC,EAAE;QAC3C,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC5B,UAAU,GAAG,SAAS,CAAC;QACvB,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACxG,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAC,eAAe,CAAC,CAAC;QAC7G,MAAM,aAAa,GAAG,IAAI,qBAAqB,CAAC,YAAY,EAAC,OAAO,CAAC,QAAQ,EAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAC7G,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAC,YAAY,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC7G,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,EAAC,GAAG,OAAO,CAAC,OAAO;YACjE,QAAQ,EAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACzE,SAAS,EAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;SAC7E,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACd,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,eAAe,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3S,UAAU,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QACjM,IAAI,CAAC;YAAC,MAAM,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;YAAC,UAAU,GAAG,SAAS,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAC1H,MAAM,KAAK,GAAG,UAAU,CAAC;QACzB,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACzG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACzG,KAAK,MAAM,MAAM,IAAI,CAAC,wBAAwB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,sBAAsB,CAAC;YAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrM,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClJ,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5H,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;YACrB,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC7D,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,EAAE,CAAC,WAAW,CAAC,mBAAmB,EAAE,EAAC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAC,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE;YACzB,KAAK,CAAC,WAAW,EAAE,CAAC;YAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,CAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAC,MAAM,EAAC,IAAI,EAAC,UAAU,EAAC,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAC,IAAI,EAAE,MAAM,EAAC,gDAAgD,EAAE,CAAC;QAC7P,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE;YAC3B,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,EAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,EAAC,CAAC,CAAC,EAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAClL,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1I,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,wBAAwB,CAAC,EAAE,EAAC,KAAK,EAAC,aAAa,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;gBACzG,MAAM,CAAC,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;gBAAC,UAAU,GAAG,SAAS,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;QAC/E,CAAC;IACH,CAAC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;AACxK,CAAC;AACD,eAAe,oBAAoB,EAAE,CAAC,OAAO,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAEH,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,GAI5B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAsB,MAAM,mBAAmB,CAAC;AACvE,OAAO,EACH,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,GACf,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAqB,MAAM,qBAAqB,CAAC;AACpE,OAAO,EACH,yBAAyB,GAE5B,MAAM,gBAAgB,CAAC;AAgBxB,MAAM,UAAU,oBAAoB,CAAC,UAAwB,EAAE;IAC3D,IAAI,UAAuC,CAAC;IAC5C,MAAM,OAAO,GAAqB,KAAK,EAAE,EAAE,EAAE,EAAE;QAC3C,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC5B,UAAU,GAAG,SAAS,CAAC;QACvB,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACzC,MAAM,QAAQ,GACV,OAAO,CAAC,QAAQ;YAChB,OAAO,CAAC,GAAG,CAAC,mBAAmB;YAC/B,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY;YACrC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;YAC/B,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QACxC,MAAM,aAAa,GAAG,IAAI,qBAAqB,CAC3C,YAAY,EACZ,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAChC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,cAAc,CACjC,GAAG,EACH,QAAQ,EACR,CAAC,QAAQ,EAAE,YAAY,CAAC,EACxB,OAAO,CAAC,qBAAqB,CAChC,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;YAC3B,CAAC,CAAC,aAAa,CAAC;gBACV,GAAG,OAAO,CAAC,OAAO;gBAClB,QAAQ,EAAE;oBACN,GAAG,IAAI,GAAG,CAAC;wBACP,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ;wBAC3B,GAAG,QAAQ,CAAC,QAAQ;qBACvB,CAAC;iBACL;gBACD,SAAS,EAAE;oBACP,GAAG,IAAI,GAAG,CAAC;wBACP,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS;wBAC5B,GAAG,QAAQ,CAAC,SAAS;qBACxB,CAAC;iBACL;aACJ,CAAC;YACJ,CAAC,CAAC,QAAQ,CAAC;QACf,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;YAClC,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,KAAK;YACL,WAAW,EAAE,IAAI,oBAAoB,CACjC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAClC;SACJ,CAAC,CAAC;QACH,UAAU,GAAG,IAAI,eAAe,CAAC;YAC7B,OAAO;YACP,QAAQ;YACR,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,UAAU,EAAE;YAC9C,SAAS;YACT,KAAK;YACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS;YACzC,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CACrB,EAAE,CAAC,WAAW,CAAC,oBAAoB,EAAE,IAAI,CAAC;SACjD,CAAC,CAAC;QACH,IAAI,CAAC;YACD,MAAM,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,UAAU,CAAC,KAAK,EAAE,CAAC;YACzB,UAAU,GAAG,SAAS,CAAC;YACvB,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC;QACzB,EAAE,CAAC,YAAY,CACX,KAAK,CAAC,QAAQ,CACV,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,EAClD,OAAO,CAAC,WAAW,CACtB,CACJ,CAAC;QACF,EAAE,CAAC,YAAY,CACX,KAAK,CAAC,QAAQ,CACV,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,EAClD,OAAO,CAAC,WAAW,CACtB,CACJ,CAAC;QACF,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/D,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/D,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/D,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7D,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;YACvC,KAAK,CAAC,WAAW,EAAE,CAAC;YACpB,KAAK,CAAC,KAAK,CACP,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,EACrC,OAAO,CAAC,cAAc,CACzB,CAAC;QACN,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;YACtC,KAAK,CAAC,KAAK,CACP,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,EACrC,OAAO,CAAC,cAAc,CACzB,CAAC;QACN,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC/B,KAAK,CAAC,aAAa,CAAC,OAAO,CACvB,KAAK,CAAC,eAAe,CAAC,OAAO,EAC7B,KAAK,CAAC,eAAe,CAAC,EAAE,CAC3B,CAAC;QACN,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACrB,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC3D,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,EAAE,CAAC,WAAW,CAAC,mBAAmB,EAAE;oBAChC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;oBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;iBACvB,CAAC,CAAC;YACP,CAAC;QACL,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE;YAClC,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;YACrC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,KAAK,CAAC,WAAW,EAAE,CAAC;YACpB,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACtB,IACI,CAAC;gBACG,MAAM;gBACN,MAAM;gBACN,MAAM;gBACN,OAAO;gBACP,MAAM;gBACN,MAAM;gBACN,IAAI;gBACJ,UAAU;gBACV,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY;aACzC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC1B,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAErC,OAAO;oBACH,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,gDAAgD;iBAC3D,CAAC;QACV,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE;YAClC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,EAC7B,YAAY,GAAG,KAAK,CAAC,aAAa,CAAC,YAAY,CAC3C,KAAK,CAAC,UAAU,CACnB,CAAC;YACN,KAAK,CAAC,aAAa,CAAC,UAAU,CAC1B;gBACI,IAAI,EAAE,KAAK,CAAC,QAAQ;gBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,YAAY;gBACZ,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;qBAC1B,MAAM,CACH,CAAC,IAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CACnD;qBACA,GAAG,CAAC,CAAC,IAAsB,EAAE,EAAE,CAAC,CAAC;oBAC9B,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;iBAClB,CAAC,CAAC;gBACP,GAAG,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS;oBACtC,CAAC,CAAC;wBACI,iBAAiB,EAAE,IAAI,CAAC,KAAK,CACzB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAC3C;qBACJ;oBACH,CAAC,CAAC,EAAE,CAAC;gBACT,GAAG,CAAC,KAAK,CAAC,gBAAgB;oBACtB,CAAC,CAAC;wBACI,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;wBACxC,kBAAkB,EACd,KAAK,CAAC,aAAa,CAAC,YAAY,CAC5B,KAAK,CAAC,gBAAgB,CACzB;qBACR;oBACH,CAAC,CAAC,EAAE,CAAC;aACZ,EACD,YAAY,CACf,CAAC;YACF,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAClC,KAAK,CAAC,WAAW,EAAE,CAAC;YACpB,OAAO;gBACH,UAAU,EAAE,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;aAC/D,CAAC;QACN,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;YACjC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,wBAAwB,CAAC,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,yBAAyB,CACvC,QAAQ,EACR,GAAG,EAAE,CAAC,KAAK,EACX,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,eAAe,CAC1B,CAAC;gBACF,MAAM,CAAC,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,UAAU,GAAG,SAAS,CAAC;gBACvB,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC;IACL,CAAC,CAAC;IACF,OAAO;QACH,OAAO;QACP,WAAW;YACP,IAAI,CAAC,UAAU;gBACX,MAAM,IAAI,KAAK,CACX,+CAA+C,CAClD,CAAC;YACN,UAAU,CAAC,WAAW,EAAE,CAAC;YACzB,OAAO,UAAU,CAAC;QACtB,CAAC;KACJ,CAAC;AACN,CAAC;AACD,eAAe,oBAAoB,EAAE,CAAC,OAAO,CAAC"}

package/dist/pi-host.js

@@ -1,7 +1,7 @@
-import { resolve } from 'node:path';
-import { getPackageDir } from '@earendil-works/pi-coding-agent';
+import { resolve } from "node:path";
+import { getPackageDir } from "@earendil-works/pi-coding-agent";
 /** Resolve the SDK supplied by Pi's extension loader, including global installs. */
 export function getPiSDKEntryPath() {
-    return resolve(getPackageDir(), 'dist/index.js');
+    return resolve(getPackageDir(), "dist/index.js");
 }
 //# sourceMappingURL=pi-host.js.map

package/dist/pi-host.js.map

@@ -1 +1 @@
-{"version":3,"file":"pi-host.js","sourceRoot":"","sources":["../src/pi-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAEhE,oFAAoF;AACpF,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,CAAC,aAAa,EAAE,EAAE,eAAe,CAAC,CAAC;AACnD,CAAC"}
+{"version":3,"file":"pi-host.js","sourceRoot":"","sources":["../src/pi-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAEhE,oFAAoF;AACpF,MAAM,UAAU,iBAAiB;IAC7B,OAAO,OAAO,CAAC,aAAa,EAAE,EAAE,eAAe,CAAC,CAAC;AACrD,CAAC"}

package/dist/policy/domains.js

@@ -1,18 +1,28 @@
-import { isIP } from 'node:net';
+import { isIP } from "node:net";
 export function normalizeHost(host) {
-    const value = host.toLowerCase().replace(/\.+$/, '');
-    const literal = value.startsWith('[') && value.endsWith(']') ? value.slice(1, -1) : value;
-    return isIP(literal) === 6 ? new URL(`http://[${literal}]/`).hostname.slice(1, -1) : value;
+    const value = host.toLowerCase().replace(/\.+$/, "");
+    const literal = value.startsWith("[") && value.endsWith("]")
+        ? value.slice(1, -1)
+        : value;
+    return isIP(literal) === 6
+        ? new URL(`http://[${literal}]/`).hostname.slice(1, -1)
+        : value;
 }
 export function isNetworkHost(host) {
-    return typeof host === 'string' && (isIP(normalizeHost(host)) === 6 || /^[a-z0-9][a-z0-9.-]*$/i.test(host));
+    return (typeof host === "string" &&
+        (isIP(normalizeHost(host)) === 6 || /^[a-z0-9][a-z0-9.-]*$/i.test(host)));
 }
 export function isDomainPattern(pattern) {
-    return typeof pattern === 'string' && (isNetworkHost(pattern) || pattern.startsWith('*.') && /^[a-z0-9][a-z0-9.-]*$/i.test(pattern.slice(2)));
+    return (typeof pattern === "string" &&
+        (isNetworkHost(pattern) ||
+            (pattern.startsWith("*.") &&
+                /^[a-z0-9][a-z0-9.-]*$/i.test(pattern.slice(2)))));
 }
 /** Shared with the native configuration so policy and transport agree on subdomains. */
 export function matchesDomain(host, pattern) {
     const value = normalizeHost(host), rule = normalizeHost(pattern);
-    return rule.startsWith('*.') ? value.endsWith(rule.slice(1)) && value !== rule.slice(2) : value === rule;
+    return rule.startsWith("*.")
+        ? value.endsWith(rule.slice(1)) && value !== rule.slice(2)
+        : value === rule;
 }
 //# sourceMappingURL=domains.js.map