pi-codex-auto-review 0.1.4 → 0.2.0

package/dist/cli.js

@@ -1,70 +1,99 @@
 #!/usr/bin/env node
-import { homedir } from 'node:os';
-import { join, resolve } from 'node:path';
-import { pathToFileURL } from 'node:url';
-import { InteractiveMode, runPrintMode, runRpcMode } from '@earendil-works/pi-coding-agent';
-import { createGuardedRuntime } from './startup.js';
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+import { InteractiveMode, runPrintMode, runRpcMode, } from "@earendil-works/pi-coding-agent";
+import { createGuardedRuntime } from "./startup.js";
 export async function main(argv) {
-    let mode = 'tui', cwd = process.cwd(), agentDir = process.env.PI_CODING_AGENT_DIR ?? join(homedir(), '.pi', 'agent'), settingsPath, isProjectTrusted;
+    let mode = "tui", cwd = process.cwd(), agentDir = process.env.PI_CODING_AGENT_DIR ?? join(homedir(), ".pi", "agent"), settingsPath, isProjectTrusted;
     let provider, modelId;
     const prompts = [], trustedExtensionPaths = [];
     for (let i = 0; i < argv.length; i++) {
         const item = argv[i];
-        if (item === '--help' || item === '-h') {
-            console.log('Usage: pi-codex-auto-review [--cwd path] [--agent-dir path] [--policy file] [--trust-project] [--extension path ...] [--provider provider --model model] [--mode tui|print|json|rpc] [prompt]\n--extension (-e) can be repeated. It trusts each code directory and rejects direct model tool writes to it. Paths are resolved from the invocation directory.');
+        if (item === undefined)
+            continue;
+        if (item === "--help" || item === "-h") {
+            console.log("Usage: pi-codex-auto-review [--cwd path] [--agent-dir path] [--policy file] [--trust-project] [--extension path ...] [--provider provider --model model] [--mode tui|print|json|rpc] [prompt]\n--extension (-e) can be repeated. It trusts each code directory and rejects direct model tool writes to it. Paths are resolved from the invocation directory.");
             return;
         }
-        if (item === '--') {
+        if (item === "--") {
             prompts.push(...argv.slice(i + 1));
             break;
         }
-        if (item === '--trust-project') {
+        if (item === "--trust-project") {
             isProjectTrusted = true;
             continue;
         }
-        if (['--mode', '--cwd', '--agent-dir', '--policy', '--extension', '-e', '--provider', '--model'].includes(item)) {
+        if ([
+            "--mode",
+            "--cwd",
+            "--agent-dir",
+            "--policy",
+            "--extension",
+            "-e",
+            "--provider",
+            "--model",
+        ].includes(item)) {
             const value = argv[++i];
-            if (!value || value.startsWith('--'))
+            if (!value || value.startsWith("--"))
                 throw new Error(`${item}: a value is required`);
-            if (item === '--mode')
+            if (item === "--mode")
                 mode = value;
-            if (item === '--cwd')
+            if (item === "--cwd")
                 cwd = value;
-            if (item === '--agent-dir')
+            if (item === "--agent-dir")
                 agentDir = value;
-            if (item === '--policy')
+            if (item === "--policy")
                 settingsPath = value;
-            if (item === '--extension' || item === '-e')
+            if (item === "--extension" || item === "-e")
                 trustedExtensionPaths.push(resolve(value));
-            if (item === '--provider')
+            if (item === "--provider")
                 provider = value;
-            if (item === '--model')
+            if (item === "--model")
                 modelId = value;
         }
-        else if (item === '-p')
-            mode = 'print';
-        else if (item.startsWith('-'))
+        else if (item === "-p")
+            mode = "print";
+        else if (item.startsWith("-"))
             throw new Error(`Unsupported option: ${item}`);
         else
             prompts.push(item);
     }
-    if (!['tui', 'print', 'json', 'rpc'].includes(mode))
+    if (!["tui", "print", "json", "rpc"].includes(mode))
         throw new Error(`Unsupported mode: ${mode}`);
     if (Boolean(provider) !== Boolean(modelId))
-        throw new Error('--provider and --model must be specified together');
-    const runtime = await createGuardedRuntime({ cwd: resolve(cwd), agentDir: resolve(agentDir), settingsPath: settingsPath ? resolve(settingsPath) : undefined, isProjectTrusted, trustedExtensionPaths, ...(provider && modelId ? { modelSelection: { provider, id: modelId } } : {}) });
+        throw new Error("--provider and --model must be specified together");
+    const runtime = await createGuardedRuntime({
+        cwd: resolve(cwd),
+        agentDir: resolve(agentDir),
+        settingsPath: settingsPath ? resolve(settingsPath) : undefined,
+        isProjectTrusted,
+        trustedExtensionPaths,
+        ...(provider && modelId
+            ? { modelSelection: { provider, id: modelId } }
+            : {}),
+    });
     try {
-        if (mode === 'rpc')
+        if (mode === "rpc")
             await runRpcMode(runtime);
-        else if (mode === 'tui')
-            await new InteractiveMode(runtime, { initialMessage: prompts.join(' ') || undefined }).run();
+        else if (mode === "tui")
+            await new InteractiveMode(runtime, {
+                initialMessage: prompts.join(" ") || undefined,
+            }).run();
         else
-            process.exitCode = await runPrintMode(runtime, { mode: mode === 'json' ? 'json' : 'text', initialMessage: prompts.join(' ') || undefined });
+            process.exitCode = await runPrintMode(runtime, {
+                mode: mode === "json" ? "json" : "text",
+                initialMessage: prompts.join(" ") || undefined,
+            });
     }
     finally {
         await runtime.dispose();
     }
 }
-if (process.argv[1] && import.meta.url === pathToFileURL(resolve(process.argv[1])).href)
-    main(process.argv.slice(2)).catch(error => { console.error(`pi-codex-auto-review: ${error.message}`); process.exitCode = 1; });
+if (process.argv[1] &&
+    import.meta.url === pathToFileURL(resolve(process.argv[1])).href)
+    main(process.argv.slice(2)).catch((error) => {
+        console.error(`pi-codex-auto-review: ${error.message}`);
+        process.exitCode = 1;
+    });
 //# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC5F,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc;IACvC,IAAI,IAAI,GAAG,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAC,KAAK,EAAC,OAAO,CAAC,EAAE,YAAgC,EAAE,gBAAqC,CAAC;IAC5L,IAAI,QAA4B,EAAE,OAA2B,CAAC;IAC9D,MAAM,OAAO,GAAa,EAAE,EAAE,qBAAqB,GAAa,EAAE,CAAC;IACnE,KAAK,IAAI,CAAC,GAAC,CAAC,EAAC,CAAC,GAAC,IAAI,CAAC,MAAM,EAAC,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAC,IAAI,CAAC,CAAC,CAAE,CAAC;QACpB,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAAA,OAAO,CAAC,GAAG,CAAC,8VAA8V,CAAC,CAAC;YAAA,OAAO;QAAA,CAAC;QAC7Z,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAAA,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAC,CAAC,CAAC,CAAC,CAAC;YAAA,MAAM;QAAA,CAAC;QAC5D,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAAA,gBAAgB,GAAC,IAAI,CAAC;YAAA,SAAS;QAAA,CAAC;QACjE,IAAI,CAAC,QAAQ,EAAC,OAAO,EAAC,aAAa,EAAC,UAAU,EAAC,aAAa,EAAC,IAAI,EAAC,YAAY,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACzG,MAAM,KAAK,GAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC;YAC7G,IAAG,IAAI,KAAG,QAAQ;gBAAC,IAAI,GAAC,KAAK,CAAC;YAAC,IAAG,IAAI,KAAG,OAAO;gBAAC,GAAG,GAAC,KAAK,CAAC;YAAC,IAAG,IAAI,KAAG,aAAa;gBAAC,QAAQ,GAAC,KAAK,CAAC;YAAA,IAAG,IAAI,KAAG,UAAU;gBAAC,YAAY,GAAC,KAAK,CAAC;YAC3I,IAAG,IAAI,KAAG,aAAa,IAAE,IAAI,KAAG,IAAI;gBAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAChF,IAAG,IAAI,KAAG,YAAY;gBAAC,QAAQ,GAAC,KAAK,CAAC;YAAA,IAAG,IAAI,KAAG,SAAS;gBAAC,OAAO,GAAC,KAAK,CAAC;QAC1E,CAAC;aAAM,IAAG,IAAI,KAAG,IAAI;YAAC,IAAI,GAAC,OAAO,CAAC;aAAM,IAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;;YAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3I,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,EAAC,OAAO,EAAC,MAAM,EAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;IAC9F,IAAG,OAAO,CAAC,QAAQ,CAAC,KAAG,OAAO,CAAC,OAAO,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC7G,MAAM,OAAO,GAAC,MAAM,oBAAoB,CAAC,EAAC,GAAG,EAAC,OAAO,CAAC,GAAG,CAAC,EAAC,QAAQ,EAAC,OAAO,CAAC,QAAQ,CAAC,EAAC,YAAY,EAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,EAAC,gBAAgB,EAAC,qBAAqB,EAAC,GAAG,CAAC,QAAQ,IAAE,OAAO,CAAA,CAAC,CAAA,EAAC,cAAc,EAAC,EAAC,QAAQ,EAAC,EAAE,EAAC,OAAO,EAAC,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC;IAC9P,IAAI,CAAC;QACH,IAAG,IAAI,KAAG,KAAK;YAAC,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;aACrC,IAAG,IAAI,KAAG,KAAK;YAAC,MAAM,IAAI,eAAe,CAAC,OAAO,EAAC,EAAC,cAAc,EAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,EAAC,CAAC,CAAC,GAAG,EAAE,CAAC;;YACzG,OAAO,CAAC,QAAQ,GAAC,MAAM,YAAY,CAAC,OAAO,EAAC,EAAC,IAAI,EAAC,IAAI,KAAG,MAAM,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,MAAM,EAAC,cAAc,EAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,EAAC,CAAC,CAAC;IACrI,CAAC;YAAS,CAAC;QAAA,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAAA,CAAC;AACtC,CAAC;AACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;IAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA,EAAE,GAAC,OAAO,CAAC,KAAK,CAAC,yBAA0B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA,OAAO,CAAC,QAAQ,GAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACH,eAAe,EACf,YAAY,EACZ,UAAU,GACb,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc;IACrC,IAAI,IAAI,GAAG,KAAK,EACZ,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EACnB,QAAQ,GACJ,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,EACtE,YAAgC,EAChC,gBAAqC,CAAC;IAC1C,IAAI,QAA4B,EAAE,OAA2B,CAAC;IAC9D,MAAM,OAAO,GAAa,EAAE,EACxB,qBAAqB,GAAa,EAAE,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CACP,8VAA8V,CACjW,CAAC;YACF,OAAO;QACX,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM;QACV,CAAC;QACD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC7B,gBAAgB,GAAG,IAAI,CAAC;YACxB,SAAS;QACb,CAAC;QACD,IACI;YACI,QAAQ;YACR,OAAO;YACP,aAAa;YACb,UAAU;YACV,aAAa;YACb,IAAI;YACJ,YAAY;YACZ,SAAS;SACZ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAClB,CAAC;YACC,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uBAAuB,CAAC,CAAC;YACpD,IAAI,IAAI,KAAK,QAAQ;gBAAE,IAAI,GAAG,KAAK,CAAC;YACpC,IAAI,IAAI,KAAK,OAAO;gBAAE,GAAG,GAAG,KAAK,CAAC;YAClC,IAAI,IAAI,KAAK,aAAa;gBAAE,QAAQ,GAAG,KAAK,CAAC;YAC7C,IAAI,IAAI,KAAK,UAAU;gBAAE,YAAY,GAAG,KAAK,CAAC;YAC9C,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,IAAI;gBACvC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,YAAY;gBAAE,QAAQ,GAAG,KAAK,CAAC;YAC5C,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,GAAG,KAAK,CAAC;QAC5C,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI;YAAE,IAAI,GAAG,OAAO,CAAC;aACpC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;;YAC9C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC;QACvC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;QACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;QAC3B,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;QAC9D,gBAAgB;QAChB,qBAAqB;QACrB,GAAG,CAAC,QAAQ,IAAI,OAAO;YACnB,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;YAC/C,CAAC,CAAC,EAAE,CAAC;KACZ,CAAC,CAAC;IACH,IAAI,CAAC;QACD,IAAI,IAAI,KAAK,KAAK;YAAE,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;aACzC,IAAI,IAAI,KAAK,KAAK;YACnB,MAAM,IAAI,eAAe,CAAC,OAAO,EAAE;gBAC/B,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS;aACjD,CAAC,CAAC,GAAG,EAAE,CAAC;;YAET,OAAO,CAAC,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;gBAC3C,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBACvC,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS;aACjD,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACP,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5B,CAAC;AACL,CAAC;AACD,IACI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACf,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;IAEhE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,OAAO,CAAC,KAAK,CAAC,yBAA0B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC"}

package/dist/context-files.d.ts

@@ -1,5 +1,5 @@
-import { type PermissionProfile } from './contracts.js';
-import type { GuardSettings } from './policy/index.js';
+import { type PermissionProfile } from "./contracts.js";
+import type { GuardSettings } from "./policy/index.js";
 export interface ContextFile {
     readonly path: string;
     readonly content: string;

package/dist/context-files.js

@@ -1,11 +1,17 @@
-import { constants, openSync, closeSync, fstatSync, readSync, realpathSync, statSync } from 'node:fs';
-import { dirname, join, resolve, basename } from 'node:path';
-import { GuardError } from './contracts.js';
-import { isWithin } from './policy/paths.js';
-const NAMES = ['AGENTS.override.md', 'AGENTS.md'];
-function isMissing(error) { return ['ENOENT', 'ENOTDIR'].includes(error.code ?? ''); }
+import { closeSync, constants, fstatSync, openSync, readSync, realpathSync, statSync, } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+import { GuardError } from "./contracts.js";
+import { isWithin } from "./policy/paths.js";
+const NAMES = ["AGENTS.override.md", "AGENTS.md"];
+function isMissing(error) {
+    return ["ENOENT", "ENOTDIR"].includes(error.code ?? "");
+}
 function isFilename(name) {
-    return !!name && !['.', '..'].includes(name) && !name.includes('\0') && basename(name) === name && (process.platform !== 'win32' || !/[\\:]/.test(name));
+    return (!!name &&
+        ![".", ".."].includes(name) &&
+        !name.includes("\0") &&
+        basename(name) === name &&
+        (process.platform !== "win32" || !/[\\:]/.test(name)));
 }
 function exists(path) {
     try {
@@ -34,18 +40,26 @@ function choose(directory, names) {
 function boundedRead(path, maxBytes, profile, isGlobal, agentDir) {
     const target = realpathSync(path);
     // Only the specifically selected global instruction file is an internal controller read.
-    const isGlobalInstruction = isGlobal && target === join(realpathSync(agentDir), basename(path)) && NAMES.includes(basename(path));
-    if (!isGlobalInstruction && (profile.denyRead.some(root => isWithin(target, root)) || !profile.readRoots.some(root => isWithin(target, root)))) {
-        throw new GuardError('CONTEXT_FILE_DENIED', `Instruction file crosses a protected read boundary: ${path}`);
+    const isGlobalInstruction = isGlobal &&
+        target === join(realpathSync(agentDir), basename(path)) &&
+        NAMES.includes(basename(path));
+    if (!isGlobalInstruction &&
+        (profile.denyRead.some((root) => isWithin(target, root)) ||
+            !profile.readRoots.some((root) => isWithin(target, root)))) {
+        throw new GuardError("CONTEXT_FILE_DENIED", `Instruction file crosses a protected read boundary: ${path}`);
     }
     const expected = statSync(target);
     if (!expected.isFile() || expected.nlink > 1)
-        throw new GuardError('CONTEXT_FILE_DENIED', 'Instruction file must be a regular file without hard-link aliases');
+        throw new GuardError("CONTEXT_FILE_DENIED", "Instruction file must be a regular file without hard-link aliases");
     const fd = openSync(target, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
     try {
         const actual = fstatSync(fd);
-        if (!actual.isFile() || actual.dev !== expected.dev || actual.ino !== expected.ino || actual.nlink > 1 || realpathSync(path) !== target)
-            throw new GuardError('CONTEXT_FILE_CHANGED', 'Instruction file changed during loading');
+        if (!actual.isFile() ||
+            actual.dev !== expected.dev ||
+            actual.ino !== expected.ino ||
+            actual.nlink > 1 ||
+            realpathSync(path) !== target)
+            throw new GuardError("CONTEXT_FILE_CHANGED", "Instruction file changed during loading");
         const data = Buffer.alloc(Math.min(actual.size, maxBytes));
         let count = 0;
         while (count < data.length) {
@@ -54,8 +68,10 @@ function boundedRead(path, maxBytes, profile, isGlobal, agentDir) {
                 break;
             count += read;
         }
-        const content = data.subarray(0, count).toString('utf8');
-        return content.trim() ? { file: { path, content }, bytesRead: count } : undefined;
+        const content = data.subarray(0, count).toString("utf8");
+        return content.trim()
+            ? { file: { path, content }, bytesRead: count }
+            : undefined;
     }
     finally {
         closeSync(fd);
@@ -78,10 +94,10 @@ export function loadContextFiles(options) {
     }
     if (!options.isProjectTrusted || settings.projectDocMaxBytes === 0)
         return result;
-    const cwd = resolve(options.cwd), markers = (settings.projectRootMarkers ?? ['.git']).filter(isFilename);
+    const cwd = resolve(options.cwd), markers = (settings.projectRootMarkers ?? [".git"]).filter(isFilename);
     let root;
     for (let dir = cwd; markers.length; dir = dirname(dir)) {
-        if (markers.some(name => exists(join(dir, name)))) {
+        if (markers.some((name) => exists(join(dir, name)))) {
             root = dir;
             break;
         }
@@ -94,13 +110,18 @@ export function loadContextFiles(options) {
             dir = dirname(dir);
             directories.unshift(dir);
         }
-    const names = [...new Set([...NAMES, ...settings.projectDocFallbackFilenames.filter(isFilename)])];
+    const names = [
+        ...new Set([
+            ...NAMES,
+            ...settings.projectDocFallbackFilenames.filter(isFilename),
+        ]),
+    ];
     let remaining = settings.projectDocMaxBytes;
     for (const directory of directories) {
         if (!remaining)
             break;
         const path = choose(directory, names);
-        if (!path || result.some(file => file.path === path))
+        if (!path || result.some((file) => file.path === path))
             continue;
         const file = boundedRead(path, remaining, profile, false, options.agentDir);
         if (file) {

package/dist/context-files.js.map

@@ -1 +1 @@
-{"version":3,"file":"context-files.js","sourceRoot":"","sources":["../src/context-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACtG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,UAAU,EAA0B,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAI7C,MAAM,KAAK,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;AAClD,SAAS,SAAS,CAAC,KAAc,IAAa,OAAO,CAAC,QAAQ,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAClI,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1J,CAAC;AACD,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACzG,CAAC;AACD,SAAS,MAAM,CAAC,SAAiB,EAAE,KAAwB;IACzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC;YAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;IACzG,CAAC;AACH,CAAC;AACD,SAAS,WAAW,CAAC,IAAY,EAAE,QAAgB,EAAE,OAA0B,EAAE,QAAiB,EAAE,QAAgB;IAClH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,yFAAyF;IACzF,MAAM,mBAAmB,GAAG,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAClI,IAAI,CAAC,mBAAmB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/I,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,uDAAuD,IAAI,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,mEAAmE,CAAC,CAAC;IAC/J,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,yCAAyC,CAAC,CAAC;QACjO,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC;YACnE,IAAI,CAAC,IAAI;gBAAE,MAAM;YACjB,KAAK,IAAI,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAC,IAAI,EAAE,EAAC,IAAI,EAAE,OAAO,EAAC,EAAE,SAAS,EAAE,KAAK,EAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,OAAwH;IACvJ,MAAM,EAAC,QAAQ,EAAE,OAAO,EAAC,GAAG,OAAO,CAAC;IACpC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,+EAA+E;IAC/E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzE,IAAI,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,MAAM;QAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,QAAQ,CAAC,kBAAkB,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAClF,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,kBAAkB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACzG,IAAI,IAAwB,CAAC;IAC7B,KAAK,IAAI,GAAG,GAAG,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,GAAG,GAAG,CAAC;YAAC,MAAM;QAAC,CAAC;QACzE,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,MAAM;IAClC,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,IAAI;QAAE,KAAK,IAAI,GAAG,GAAG,GAAG,EAAE,GAAG,KAAK,IAAI,GAAG,CAAC;YAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,QAAQ,CAAC,2BAA2B,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACnG,IAAI,SAAS,GAAG,QAAQ,CAAC,kBAAkB,CAAC;IAC5C,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS;YAAE,MAAM;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,SAAS;QAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5E,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"context-files.js","sourceRoot":"","sources":["../src/context-files.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,YAAY,EACZ,QAAQ,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,UAAU,EAA0B,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAM7C,MAAM,KAAK,GAAG,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;AAClD,SAAS,SAAS,CAAC,KAAc;IAC7B,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAChC,KAA+B,CAAC,IAAI,IAAI,EAAE,CAC9C,CAAC;AACN,CAAC;AACD,SAAS,UAAU,CAAC,IAAY;IAC5B,OAAO,CACH,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC3B,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI;QACvB,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CACxD,CAAC;AACN,CAAC;AACD,SAAS,MAAM,CAAC,IAAY;IACxB,IAAI,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AACD,SAAS,MAAM,CACX,SAAiB,EACjB,KAAwB;IAExB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QACvC,CAAC;IACL,CAAC;AACL,CAAC;AACD,SAAS,WAAW,CAChB,IAAY,EACZ,QAAgB,EAChB,OAA0B,EAC1B,QAAiB,EACjB,QAAgB;IAEhB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,yFAAyF;IACzF,MAAM,mBAAmB,GACrB,QAAQ;QACR,MAAM,KAAK,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvD,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,IACI,CAAC,mBAAmB;QACpB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpD,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAChE,CAAC;QACC,MAAM,IAAI,UAAU,CAChB,qBAAqB,EACrB,uDAAuD,IAAI,EAAE,CAChE,CAAC;IACN,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,GAAG,CAAC;QACxC,MAAM,IAAI,UAAU,CAChB,qBAAqB,EACrB,mEAAmE,CACtE,CAAC;IACN,MAAM,EAAE,GAAG,QAAQ,CACf,MAAM,EACN,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CACnD,CAAC;IACF,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7B,IACI,CAAC,MAAM,CAAC,MAAM,EAAE;YAChB,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;YAC3B,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;YAC3B,MAAM,CAAC,KAAK,GAAG,CAAC;YAChB,YAAY,CAAC,IAAI,CAAC,KAAK,MAAM;YAE7B,MAAM,IAAI,UAAU,CAChB,sBAAsB,EACtB,yCAAyC,CAC5C,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC;YACnE,IAAI,CAAC,IAAI;gBAAE,MAAM;YACjB,KAAK,IAAI,IAAI,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,OAAO,CAAC,IAAI,EAAE;YACjB,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;YAC/C,CAAC,CAAC,SAAS,CAAC;IACpB,CAAC;YAAS,CAAC;QACP,SAAS,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACL,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,OAMhC;IACG,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACtC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,+EAA+E;IAC/E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,IAAI,GAAG,WAAW,CACpB,MAAM,EACN,KAAK,EACL,OAAO,EACP,IAAI,EACJ,OAAO,CAAC,QAAQ,CACnB,CAAC;QACF,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM;QACV,CAAC;IACL,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,QAAQ,CAAC,kBAAkB,KAAK,CAAC;QAC9D,OAAO,MAAM,CAAC;IAClB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAC5B,OAAO,GAAG,CAAC,QAAQ,CAAC,kBAAkB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,IAAwB,CAAC;IAC7B,KAAK,IAAI,GAAG,GAAG,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,IAAI,GAAG,GAAG,CAAC;YACX,MAAM;QACV,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,MAAM;IACpC,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,IAAI;QACJ,KAAK,IAAI,GAAG,GAAG,GAAG,EAAE,GAAG,KAAK,IAAI,GAAI,CAAC;YACjC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YACnB,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;IACL,MAAM,KAAK,GAAG;QACV,GAAG,IAAI,GAAG,CAAC;YACP,GAAG,KAAK;YACR,GAAG,QAAQ,CAAC,2BAA2B,CAAC,MAAM,CAAC,UAAU,CAAC;SAC7D,CAAC;KACL,CAAC;IACF,IAAI,SAAS,GAAG,QAAQ,CAAC,kBAAkB,CAAC;IAC5C,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,CAAC,SAAS;YAAE,MAAM;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,SAAS;QACjE,MAAM,IAAI,GAAG,WAAW,CACpB,IAAI,EACJ,SAAS,EACT,OAAO,EACP,KAAK,EACL,OAAO,CAAC,QAAQ,CACnB,CAAC;QACF,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/contracts.d.ts

@@ -1,14 +1,14 @@
-import type { ReadToolOptions } from '@earendil-works/pi-coding-agent';
+import type { ReadToolOptions } from "@earendil-works/pi-coding-agent";
 export type Json = null | boolean | number | string | Json[] | {
     [key: string]: Json;
 };
-export type DecisionKind = 'allow' | 'ask' | 'deny';
-export type ActionSource = 'model' | 'nested' | 'user-bash' | 'extension';
-export type EvidenceStatus = 'pass' | 'fail' | 'environment-blocked' | 'not-run';
-export type ToolName = 'bash' | 'read' | 'edit' | 'write' | 'grep' | 'find' | 'ls';
+export type DecisionKind = "allow" | "ask" | "deny";
+export type ActionSource = "model" | "nested" | "user-bash" | "extension";
+export type EvidenceStatus = "pass" | "fail" | "environment-blocked" | "not-run";
+export type ToolName = "bash" | "read" | "edit" | "write" | "grep" | "find" | "ls";
 export declare const TOOL_NAMES: readonly ToolName[];
 export interface PermissionProfile {
-    readonly mode: 'read-only' | 'workspace-write';
+    readonly mode: "read-only" | "workspace-write";
     readonly readRoots: readonly string[];
     readonly writeRoots: readonly string[];
     readonly denyRead: readonly string[];
@@ -42,30 +42,30 @@ export interface PolicyDecision {
     readonly actionDigest: string;
     readonly delta: PermissionDelta;
     readonly isHardDeny: boolean;
-    readonly approvalCategory?: 'sandbox' | 'rules' | 'mcp_elicitations';
+    readonly approvalCategory?: "sandbox" | "rules" | "mcp_elicitations";
     readonly requiresFreshReview?: boolean;
     readonly requiresUserInput?: boolean;
     readonly authority?: ExecutionAuthority;
 }
-export type ApprovalPolicy = 'on-request' | 'never' | {
+export type ApprovalPolicy = "on-request" | "never" | {
     readonly sandbox: boolean;
     readonly rules: boolean;
     readonly mcp_elicitations?: boolean;
 };
-export type RiskLevel = 'low' | 'medium' | 'high' | 'critical';
-export type UserAuthorization = 'unknown' | 'low' | 'medium' | 'high';
+export type RiskLevel = "low" | "medium" | "high" | "critical";
+export type UserAuthorization = "unknown" | "low" | "medium" | "high";
 /** Field names intentionally match the pinned Codex assessment wire format. */
 export interface ReviewAssessment {
     readonly risk_level: RiskLevel;
     readonly user_authorization: UserAuthorization;
-    readonly outcome: 'allow' | 'deny';
+    readonly outcome: "allow" | "deny";
     readonly rationale: string;
 }
-export type ReviewTerminalState = 'approved' | 'denied' | 'timed-out' | 'aborted' | 'failed';
+export type ReviewTerminalState = "approved" | "denied" | "timed-out" | "aborted" | "failed";
 export interface ReviewContextItem {
     readonly id: string;
-    readonly source: 'user' | 'developer' | 'agents' | 'user-confirmation' | 'assistant' | 'tool-call' | 'tool-result';
-    readonly trust: 'authorization' | 'evidence';
+    readonly source: "user" | "developer" | "agents" | "user-confirmation" | "assistant" | "tool-call" | "tool-result";
+    readonly trust: "authorization" | "evidence";
     readonly content: Json;
     readonly isTruncated?: boolean;
 }
@@ -82,22 +82,22 @@ export interface ReviewBinding {
     readonly policyDigest: string;
 }
 export type ReviewResult = ReviewBinding & ({
-    readonly status: 'approved' | 'denied';
+    readonly status: "approved" | "denied";
     readonly assessment: ReviewAssessment;
 } | {
-    readonly status: 'timed-out' | 'aborted' | 'failed';
-    readonly failure: 'timeout' | 'cancelled' | 'provider' | 'invalid-output' | 'investigation' | 'context';
+    readonly status: "timed-out" | "aborted" | "failed";
+    readonly failure: "timeout" | "cancelled" | "provider" | "invalid-output" | "investigation" | "context";
     readonly reason: string;
 });
 export type ExecutionAuthority = {
-    readonly kind: 'sandbox' | 'scoped-permissions';
+    readonly kind: "sandbox" | "scoped-permissions";
     readonly actionDigest: string;
 } | {
-    readonly kind: 'command-rule';
+    readonly kind: "command-rule";
     readonly actionDigest: string;
     readonly ruleDigest: string;
 } | {
-    readonly kind: 'reviewed-command';
+    readonly kind: "reviewed-command";
     readonly actionDigest: string;
 };
 export interface RetryAuthorization {
@@ -115,7 +115,7 @@ export interface RecentDenial {
 }
 export interface Grant {
     readonly id: string;
-    readonly scope: 'once' | 'session' | 'persistent';
+    readonly scope: "once" | "session" | "persistent";
     readonly actionDigest: string;
     readonly ruleDigest: string;
     readonly sessionId: string;
@@ -125,10 +125,10 @@ export interface Grant {
 }
 export interface ToolResult {
     content: ({
-        type: 'text';
+        type: "text";
         text: string;
     } | {
-        type: 'image';
+        type: "image";
         data: string;
         mimeType: string;
     })[];
@@ -153,54 +153,54 @@ export interface NetworkApprovalRequest {
     readonly port?: number;
 }
 export type WorkerJob = {
-    kind: 'shell';
+    kind: "shell";
     command: string;
     cwd: string;
     shellPath?: string;
     timeoutSeconds?: number;
     env?: NodeJS.ProcessEnv;
 } | {
-    kind: 'tool';
+    kind: "tool";
     tool: ToolName;
     args: Record<string, Json>;
     cwd: string;
     toolCallId: string;
-    options?: Omit<ReadToolOptions, 'operations'>;
+    options?: Omit<ReadToolOptions, "operations">;
 } | {
-    kind: 'file';
-    operation: 'read' | 'write' | 'mkdir' | 'access' | 'stat' | 'list';
+    kind: "file";
+    operation: "read" | "write" | "mkdir" | "access" | "stat" | "list";
     path: string;
     content?: string;
     cwd: string;
 };
 export type WorkerFrame = {
     schemaVersion: 1;
-    type: 'data';
+    type: "data";
     data: string;
 } | {
     schemaVersion: 1;
-    type: 'update';
+    type: "update";
     result: ToolResult;
 } | {
     schemaVersion: 1;
-    type: 'result';
+    type: "result";
     result: Json;
 } | {
     schemaVersion: 1;
-    type: 'error';
+    type: "error";
     code: string;
     message: string;
 };
 /** Only the unsandboxed broker's private IPC channel can send this control frame. */
 export interface BrokerControlFrame {
     readonly schemaVersion: 1;
-    readonly type: 'workload-started';
+    readonly type: "workload-started";
     readonly processGroupId: number;
 }
 /** Private controller/broker IPC only. Workload stdout must still reject these frame types. */
 export interface BrokerNetworkRequest {
     readonly schemaVersion: 1;
-    readonly type: 'network-request';
+    readonly type: "network-request";
     readonly requestId: string;
     readonly destination: NetworkApprovalRequest;
 }
@@ -208,7 +208,7 @@ export interface TestEvidence {
     readonly schemaVersion?: 1 | 2;
     readonly runId?: string;
     readonly artifactPath?: string;
-    readonly provenance?: 'executed' | 'preserved-legacy' | 'synthetic';
+    readonly provenance?: "executed" | "preserved-legacy" | "synthetic";
     readonly startedAt?: string;
     readonly recordedAt?: string;
     readonly provider?: {
@@ -233,9 +233,9 @@ export interface TestEvidence {
     readonly sourceDigest: string;
     readonly contractDigest: string;
     readonly runtimeVersions: Readonly<Record<string, string>>;
-    readonly evidenceKind: 'unit-doubles' | 'simulated-provider-ui' | 'native-os' | 'workflow';
+    readonly evidenceKind: "unit-doubles" | "simulated-provider-ui" | "native-os" | "workflow";
     readonly nativeControls?: readonly {
-        kind: 'allow' | 'deny';
+        kind: "allow" | "deny";
         effect: string;
         isObserved: boolean;
         platform: string;
@@ -250,11 +250,11 @@ export declare function canonicalJson(value: unknown): string;
 export declare function digest(value: unknown): string;
 export declare function immutable<T>(value: T): T;
 export declare function createProfile(input: PermissionProfile): PermissionProfile;
-export declare function createAction(input: Omit<GuardAction, 'schemaVersion' | 'digest' | 'permissionDigest'>, profile: PermissionProfile): GuardAction;
+export declare function createAction(input: Omit<GuardAction, "schemaVersion" | "digest" | "permissionDigest">, profile: PermissionProfile): GuardAction;
 /** Reusable grants still bind exact inputs/cwd/source/profile, but not a previous logical call id. */
 export declare function ruleDigest(action: GuardAction): string;
 /** A retry gets a new invocation ID, but cannot change session, semantics or context. */
 export declare function retryIdentity(action: GuardAction, contextId: string): string;
-export declare function approvalEligible(policy: ApprovalPolicy, category: 'sandbox' | 'rules' | 'mcp_elicitations'): boolean;
+export declare function approvalEligible(policy: ApprovalPolicy, category: "sandbox" | "rules" | "mcp_elicitations"): boolean;
 export declare function decision(action: GuardAction, kind: DecisionKind, reason: string, delta?: PermissionDelta, isHardDeny?: boolean): PolicyDecision;
 export declare function validateWorkerFrame(value: unknown): WorkerFrame;