@agentdeck/bridge 0.2.2 → 1.0.0

package/dist/check-deps.js

@@ -13,6 +13,12 @@ const AGENT_DEPS = {
         required: true,
         installHint: 'npm install -g @openai/codex',
     },
+    'opencode': {
+        name: 'opencode',
+        command: 'opencode --version',
+        required: true,
+        installHint: 'brew install sst/tap/opencode  (or: npm i -g opencode-ai)',
+    },
 };
 /** Shared optional dependencies */
 const SHARED_DEPS = [
@@ -39,9 +45,15 @@ export function checkDependencies(agentType) {
     const warnings = [];
     let ok = true;
     let agentVersion;
-    // Use login shell so profile-added PATHs (pnpm, nvm, etc.) are available
+    // POSIX: invoke via login shell so profile-added PATHs (pnpm, nvm, etc.) are
+    // visible. Windows: PATH is system-managed (no shell profile), so a direct
+    // execSync is correct — the POSIX wrapper would try `/bin/zsh` which doesn't
+    // exist and every check would fail with "system cannot find the path".
+    const isWin = process.platform === 'win32';
     const loginShell = process.env.SHELL || '/bin/zsh';
-    const shellExec = (cmd, opts) => execSync(`${loginShell} -l -c '${cmd}'`, opts);
+    const shellExec = (cmd, opts) => isWin
+        ? execSync(cmd, opts)
+        : execSync(`${loginShell} -l -c '${cmd}'`, opts);
     // Check agent-specific binary
     const agentDep = agentType ? AGENT_DEPS[agentType] : AGENT_DEPS['claude-code'];
     if (agentDep) {
@@ -54,13 +66,17 @@ export function checkDependencies(agentType) {
             ok = false;
         }
     }
-    // Check shared optional deps
-    for (const dep of SHARED_DEPS) {
-        try {
-            shellExec(dep.command, { stdio: 'ignore' });
-        }
-        catch {
-            warnings.push(`${dep.name} not found — ${dep.installHint}`);
+    // Check shared optional deps. All current entries use `which` + brew install
+    // hints — they're macOS voice features. Skip on Windows so we don't emit
+    // bogus warnings.
+    if (!isWin) {
+        for (const dep of SHARED_DEPS) {
+            try {
+                shellExec(dep.command, { stdio: 'ignore' });
+            }
+            catch {
+                warnings.push(`${dep.name} not found — ${dep.installHint}`);
+            }
         }
     }
     return { ok, warnings, agentVersion };

package/dist/check-deps.js.map

@@ -1 +1 @@
-{"version":3,"file":"check-deps.js","sourceRoot":"","sources":["../src/check-deps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAUzC,yCAAyC;AACzC,MAAM,UAAU,GAAyC;IACvD,aAAa,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,0CAA0C;KACxD;IACD,WAAW,EAAE;QACX,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,iBAAiB;QAC1B,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,8BAA8B;KAC5C;CACF,CAAC;AAEF,mCAAmC;AACnC,MAAM,WAAW,GAAe;IAC9B;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,mBAAmB;QAC5B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,yEAAyE;KACvF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,oDAAoD;KAClE;CACF,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,SAAqB;IACrD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,EAAE,GAAG,IAAI,CAAC;IACd,IAAI,YAAgC,CAAC;IAErC,yEAAyE;IACzE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC;IACnD,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,IAAqC,EAAE,EAAE,CACvE,QAAQ,CAAC,GAAG,UAAU,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC;IAEjD,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAC/E,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YACnG,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,QAAQ,CAAC,IAAI,wBAAwB,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC;YAC1G,EAAE,GAAG,KAAK,CAAC;QACb,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,gBAAgB,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACxC,CAAC"}
+{"version":3,"file":"check-deps.js","sourceRoot":"","sources":["../src/check-deps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAUzC,yCAAyC;AACzC,MAAM,UAAU,GAAyC;IACvD,aAAa,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,0CAA0C;KACxD;IACD,WAAW,EAAE;QACX,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,iBAAiB;QAC1B,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,8BAA8B;KAC5C;IACD,UAAU,EAAE;QACV,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,2DAA2D;KACzE;CACF,CAAC;AAEF,mCAAmC;AACnC,MAAM,WAAW,GAAe;IAC9B;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,mBAAmB;QAC5B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,yEAAyE;KACvF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,oDAAoD;KAClE;CACF,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,SAAqB;IACrD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,EAAE,GAAG,IAAI,CAAC;IACd,IAAI,YAAgC,CAAC;IAErC,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,uEAAuE;IACvE,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC;IACnD,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,IAAqC,EAAE,EAAE,CACvE,KAAK;QACH,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;QACrB,CAAC,CAAC,QAAQ,CAAC,GAAG,UAAU,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC;IAErD,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAC/E,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YACnG,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,QAAQ,CAAC,IAAI,wBAAwB,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC;YAC1G,EAAE,GAAG,KAAK,CAAC;QACb,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,yEAAyE;IACzE,kBAAkB;IAClB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,gBAAgB,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACxC,CAAC"}

package/dist/claude-permission-rules.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Conservative predictor for "would Claude Code actually prompt the user for
+ * this tool call?" — the precision guard for the observed-session PreToolUse
+ * device-approval gate.
+ *
+ * HISTORY (why precision-first): the first PreToolUse gate held EVERY gated
+ * tool call, so tools Claude auto-approves (allowlist rules, acceptEdits,
+ * session "always allow") still popped Allow/Deny on devices — the reported
+ * false-attention bug that got the gate removed (DEVELOPMENT_LOG 2026-05).
+ * This module exists so the reinstated gate only ever holds calls we are
+ * CONFIDENT Claude will prompt for. Every uncertainty resolves to "don't
+ * hold": a missed hold just means the user answers in the terminal (the
+ * pre-gate status quo), while a false hold nags the user with a popup Claude
+ * never asked for.
+ *
+ * Rule semantics mirror Claude Code `permissions.allow/deny/ask` entries:
+ *   "Bash"                → every Bash call
+ *   "Bash(git status)"    → exact command
+ *   "Bash(git status:*)"  → command prefix
+ *   "Read(...)"/"WebFetch(domain:x)"/"mcp__srv__tool" → tool + spec
+ * Matching is deliberately asymmetric:
+ *   - allow/deny rules match LOOSELY (tool-name match with any spec counts)
+ *     because a loose match only suppresses a hold (safe direction).
+ *   - ask rules match STRICTLY (tool-only, or exact/prefix Bash) because an
+ *     ask match *causes* a hold and must not fire on a spec we can't parse.
+ */
+export type RuleVerdict = 'allow' | 'deny' | 'ask' | 'none' | 'unknown';
+interface MergedRules {
+    allow: string[];
+    deny: string[];
+    ask: string[];
+}
+export declare function isNeverPromptTool(tool: string): boolean;
+export declare function isPromptProneTool(tool: string): boolean;
+export declare function _setHomeOverrideForTests(path: string | null): void;
+/**
+ * Load and merge permission rules from every settings file Claude Code reads
+ * for this cwd. Returns null ("unknown") when any EXISTING file fails to
+ * parse — we can no longer trust our picture of the allowlist, so the caller
+ * must not hold anything.
+ */
+export declare function loadMergedPermissionRules(cwd: string | undefined): MergedRules | null;
+/** Test helper. */
+export declare function _clearRulesCache(): void;
+/**
+ * Predict Claude's permission-rule verdict for a tool call.
+ *   'deny'    → a deny rule may match: Claude auto-denies (or prompts) — don't hold
+ *   'allow'   → an allow rule may match: Claude may auto-approve — don't hold
+ *   'ask'     → an ask rule definitely matches: Claude will prompt — hold-eligible
+ *   'none'    → no rule matches: default behavior for the tool applies
+ *   'unknown' → settings unreadable: don't hold
+ */
+export declare function evaluatePermissionRules(tool: string, toolInput: Record<string, unknown> | undefined, cwd: string | undefined): RuleVerdict;
+export {};
+//# sourceMappingURL=claude-permission-rules.d.ts.map

package/dist/claude-permission-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-permission-rules.d.ts","sourceRoot":"","sources":["../src/claude-permission-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAOH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAExE,UAAU,WAAW;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,EAAE,CAAC;CACf;AAkBD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAYD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAGlE;AAiBD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,IAAI,CA+BrF;AAED,mBAAmB;AACnB,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AA6CD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC9C,GAAG,EAAE,MAAM,GAAG,SAAS,GACtB,WAAW,CAkBb"}

package/dist/claude-permission-rules.js

@@ -0,0 +1,197 @@
+/**
+ * Conservative predictor for "would Claude Code actually prompt the user for
+ * this tool call?" — the precision guard for the observed-session PreToolUse
+ * device-approval gate.
+ *
+ * HISTORY (why precision-first): the first PreToolUse gate held EVERY gated
+ * tool call, so tools Claude auto-approves (allowlist rules, acceptEdits,
+ * session "always allow") still popped Allow/Deny on devices — the reported
+ * false-attention bug that got the gate removed (DEVELOPMENT_LOG 2026-05).
+ * This module exists so the reinstated gate only ever holds calls we are
+ * CONFIDENT Claude will prompt for. Every uncertainty resolves to "don't
+ * hold": a missed hold just means the user answers in the terminal (the
+ * pre-gate status quo), while a false hold nags the user with a popup Claude
+ * never asked for.
+ *
+ * Rule semantics mirror Claude Code `permissions.allow/deny/ask` entries:
+ *   "Bash"                → every Bash call
+ *   "Bash(git status)"    → exact command
+ *   "Bash(git status:*)"  → command prefix
+ *   "Read(...)"/"WebFetch(domain:x)"/"mcp__srv__tool" → tool + spec
+ * Matching is deliberately asymmetric:
+ *   - allow/deny rules match LOOSELY (tool-name match with any spec counts)
+ *     because a loose match only suppresses a hold (safe direction).
+ *   - ask rules match STRICTLY (tool-only, or exact/prefix Bash) because an
+ *     ask match *causes* a hold and must not fire on a spec we can't parse.
+ */
+import { readFileSync, statSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+import { debug } from './logger.js';
+/** Tools that never trigger a permission prompt — holding them can only ever
+ *  be a false positive. Kept intentionally tight (unknown tools are excluded
+ *  by the prompt-prone check below, not this list). */
+const NEVER_PROMPT_TOOLS = new Set([
+    'Read', 'Glob', 'Grep', 'LS',
+    'TodoWrite', 'TodoRead', 'NotebookRead',
+    'Task', 'TaskOutput', 'BashOutput',
+]);
+/** Tools that DO prompt in default/auto permission mode unless allowlisted.
+ *  Anything outside this set (including every mcp__* tool, whose per-server
+ *  trust state we cannot see) is never held. */
+const PROMPT_PRONE_TOOLS = new Set([
+    'Bash', 'Write', 'Edit', 'MultiEdit', 'NotebookEdit', 'WebFetch', 'WebSearch',
+]);
+export function isNeverPromptTool(tool) {
+    return NEVER_PROMPT_TOOLS.has(tool);
+}
+export function isPromptProneTool(tool) {
+    return PROMPT_PRONE_TOOLS.has(tool);
+}
+const RULES_CACHE_TTL_MS = 10_000;
+const rulesCache = new Map();
+/** Test seam: isolates rule loading from the developer's real ~/.claude. */
+let homeOverride = null;
+export function _setHomeOverrideForTests(path) {
+    homeOverride = path;
+    rulesCache.clear();
+}
+function settingsCandidates(cwd) {
+    const home = homeOverride ?? homedir();
+    const files = [
+        // Enterprise managed policy (rare; parse failure here must also disable holds)
+        '/Library/Application Support/ClaudeCode/managed-settings.json',
+        join(home, '.claude', 'settings.json'),
+        join(home, '.claude', 'settings.local.json'),
+    ];
+    if (cwd) {
+        files.push(join(cwd, '.claude', 'settings.json'));
+        files.push(join(cwd, '.claude', 'settings.local.json'));
+    }
+    return files;
+}
+/**
+ * Load and merge permission rules from every settings file Claude Code reads
+ * for this cwd. Returns null ("unknown") when any EXISTING file fails to
+ * parse — we can no longer trust our picture of the allowlist, so the caller
+ * must not hold anything.
+ */
+export function loadMergedPermissionRules(cwd) {
+    const key = cwd ?? '';
+    const cached = rulesCache.get(key);
+    if (cached && Date.now() - cached.loadedAt < RULES_CACHE_TTL_MS)
+        return cached.rules;
+    const merged = { allow: [], deny: [], ask: [] };
+    let unknown = false;
+    for (const file of settingsCandidates(cwd)) {
+        let exists = false;
+        try {
+            exists = statSync(file).isFile();
+        }
+        catch {
+            exists = false;
+        }
+        if (!exists)
+            continue;
+        try {
+            const parsed = JSON.parse(readFileSync(file, 'utf-8'));
+            const perms = parsed?.permissions;
+            if (perms && typeof perms === 'object') {
+                for (const bucket of ['allow', 'deny', 'ask']) {
+                    const arr = perms[bucket];
+                    if (Array.isArray(arr)) {
+                        for (const r of arr)
+                            if (typeof r === 'string')
+                                merged[bucket].push(r);
+                    }
+                }
+            }
+        }
+        catch {
+            debug('permission', `settings parse failed: ${file} — disabling holds for cwd=${cwd ?? '?'}`);
+            unknown = true;
+            break;
+        }
+    }
+    const rules = unknown ? null : merged;
+    rulesCache.set(key, { rules, loadedAt: Date.now() });
+    return rules;
+}
+/** Test helper. */
+export function _clearRulesCache() {
+    rulesCache.clear();
+}
+function parseRule(rule) {
+    const m = /^([A-Za-z][A-Za-z0-9_]*)(?:\((.*)\))?$/.exec(rule.trim());
+    if (!m)
+        return null;
+    return { tool: m[1], spec: m[2] };
+}
+function bashSpecMatches(spec, command) {
+    if (spec === '*')
+        return true;
+    if (spec.endsWith(':*'))
+        return command.startsWith(spec.slice(0, -2));
+    return command === spec;
+}
+/** Loose match (allow/deny direction): a tool-name match with ANY spec counts,
+ *  except Bash specs which we can compare precisely. */
+function matchesLoose(rule, tool, command) {
+    if (rule.tool !== tool)
+        return false;
+    if (rule.spec === undefined)
+        return true;
+    if (tool === 'Bash') {
+        if (command === undefined)
+            return true; // malformed input — assume covered
+        return bashSpecMatches(rule.spec, command)
+            // Compound commands: Claude prompts unless every segment is allowed; we
+            // only need "might be auto-approved", so a prefix match on the first
+            // segment is enough to suppress the hold.
+            || bashSpecMatches(rule.spec, command.split(/&&|\|\||;|\|/)[0]?.trim() ?? command);
+    }
+    // Non-Bash specs (paths, domains, globs): we don't replicate the matcher —
+    // any spec on the right tool MIGHT match, so treat it as covered.
+    return true;
+}
+/** Strict match (ask direction): only patterns we can evaluate exactly. */
+function matchesStrict(rule, tool, command) {
+    if (rule.tool !== tool)
+        return false;
+    if (rule.spec === undefined)
+        return true;
+    if (tool === 'Bash' && command !== undefined)
+        return bashSpecMatches(rule.spec, command);
+    return false;
+}
+/**
+ * Predict Claude's permission-rule verdict for a tool call.
+ *   'deny'    → a deny rule may match: Claude auto-denies (or prompts) — don't hold
+ *   'allow'   → an allow rule may match: Claude may auto-approve — don't hold
+ *   'ask'     → an ask rule definitely matches: Claude will prompt — hold-eligible
+ *   'none'    → no rule matches: default behavior for the tool applies
+ *   'unknown' → settings unreadable: don't hold
+ */
+export function evaluatePermissionRules(tool, toolInput, cwd) {
+    const rules = loadMergedPermissionRules(cwd);
+    if (rules === null)
+        return 'unknown';
+    const command = typeof toolInput?.command === 'string' ? toolInput.command : undefined;
+    for (const r of rules.deny) {
+        const parsed = parseRule(r);
+        if (parsed && matchesLoose(parsed, tool, command))
+            return 'deny';
+    }
+    for (const r of rules.allow) {
+        const parsed = parseRule(r);
+        if (parsed && matchesLoose(parsed, tool, command))
+            return 'allow';
+    }
+    for (const r of rules.ask) {
+        const parsed = parseRule(r);
+        if (parsed && matchesStrict(parsed, tool, command))
+            return 'ask';
+    }
+    return 'none';
+}
+//# sourceMappingURL=claude-permission-rules.js.map

package/dist/claude-permission-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-permission-rules.js","sourceRoot":"","sources":["../src/claude-permission-rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAUpC;;uDAEuD;AACvD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI;IAC5B,WAAW,EAAE,UAAU,EAAE,cAAc;IACvC,MAAM,EAAE,YAAY,EAAE,YAAY;CACnC,CAAC,CAAC;AAEH;;gDAEgD;AAChD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW;CAC9E,CAAC,CAAC;AAEH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAOD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;AAEjD,4EAA4E;AAC5E,IAAI,YAAY,GAAkB,IAAI,CAAC;AACvC,MAAM,UAAU,wBAAwB,CAAC,IAAmB;IAC1D,YAAY,GAAG,IAAI,CAAC;IACpB,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAuB;IACjD,MAAM,IAAI,GAAG,YAAY,IAAI,OAAO,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG;QACZ,+EAA+E;QAC/E,+DAA+D;QAC/D,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,CAAC;KAC7C,CAAC;IACF,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAuB;IAC/D,MAAM,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,kBAAkB;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IAErF,MAAM,MAAM,GAAgB,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,GAAG,KAAK,CAAC;QAAC,CAAC;QACnE,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA4B,CAAC;YAClF,MAAM,KAAK,GAAG,MAAM,EAAE,WAAkD,CAAC;YACzE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvC,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAU,EAAE,CAAC;oBACvD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;wBACvB,KAAK,MAAM,CAAC,IAAI,GAAG;4BAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;gCAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACzE,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,YAAY,EAAE,0BAA0B,IAAI,8BAA8B,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;YAC9F,OAAO,GAAG,IAAI,CAAC;YACf,MAAM;QACR,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACtC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mBAAmB;AACnB,MAAM,UAAU,gBAAgB;IAC9B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAOD,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,CAAC,GAAG,wCAAwC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,OAAe;IACpD,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,OAAO,KAAK,IAAI,CAAC;AAC1B,CAAC;AAED;wDACwD;AACxD,SAAS,YAAY,CAAC,IAAgB,EAAE,IAAY,EAAE,OAA2B;IAC/E,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,CAAC,mCAAmC;QAC3E,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YACxC,wEAAwE;YACxE,qEAAqE;YACrE,0CAA0C;eACvC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,CAAC;IACvF,CAAC;IACD,2EAA2E;IAC3E,kEAAkE;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,SAAS,aAAa,CAAC,IAAgB,EAAE,IAAY,EAAE,OAA2B;IAChF,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,SAA8C,EAC9C,GAAuB;IAEvB,MAAM,KAAK,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,OAAO,GAAG,OAAO,SAAS,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAEvF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,MAAM,CAAC;IACnE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;IACpE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,MAAM,IAAI,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cli.d.ts

@@ -1,3 +1,17 @@
 #!/usr/bin/env node
-export {};
+import { Command } from 'commander';
+export declare const ESP32_OTA_BY_TARGET: Record<string, {
+    env: string;
+    board: string;
+}>;
+/**
+ * Resolve an esp32-ota `target` (alias, canonical board string, or an IP) to the
+ * canonical `device_info.board` string the daemon matches against. Unknown
+ * targets (e.g. a raw IP or one-off board) pass through unchanged so IP-based
+ * and future targeting still works. Exported for testing.
+ */
+export declare function resolveEsp32OtaDaemonTarget(target: string): string;
+declare const program: Command;
+export declare function runCli(argv?: string[]): Promise<void>;
+export { program };
 //# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAyLpC,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAM,CAAC;AAOtF;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAElE;AAoBD,QAAA,MAAM,OAAO,SAAgB,CAAC;AAg6D9B,wBAAsB,MAAM,CAAC,IAAI,GAAE,MAAM,EAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMzE;AAED,OAAO,EAAE,OAAO,EAAE,CAAC"}