npm - @caupulican/pi-adaptative - Versions diffs - 0.81.41 → 0.81.43 - Mend

@caupulican/pi-adaptative 0.81.41 → 0.81.43

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1480) hide show

package/dist/core/resource-profile-blocks.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"resource-profile-blocks.d.ts","sourceRoot":"","sources":["../../src/core/resource-profile-blocks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,~~EAAuB~~,uBAAuB,~~EAAE~~,MAAM,uBAAuB,CAAC;~~AAa1F~~,MAAM,WAAW,iCAAiC;IACjD,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,gCAAgC;IAChD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAClD,MAAM,EAAE,MAAM,EAAE,CAAC;CACjB;AAOD,wBAAgB,4BAA4B,CAC3C,IAAI,EAAE,uBAAuB,GAAG,SAAS,EACzC,QAAQ,EAAE,uBAAuB,GAAG,SAAS,GAC3C,uBAAuB,CAazB;AAED,wBAAgB,uBAAuB,CACtC,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAM,EAClD,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAM,GACpD,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAMzC;~~AA+BD~~,wBAAgB,0BAA0B,CACzC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,iCAAsC,GAC7C,gCAAgC,CA0BlC;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,gCAAgC,CAgBvF;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,gCAAgC,CAKzF;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAElE"~~,"sourcesContent":["import type { ResourceProfileKind, ResourceProfileSettings~~ } from \"./settings-manager.ts\";\n\nconst RESOURCE_PROFILE_TAG_RE = /<resource-profile\\b([^>])>([\\s\\S]?)<\\/resource-profile>/gi;\nconst RESOURCE_PROFILE_NAME_RE = /\\bname\\s=\\s(?:\"([^\"]+)\"\|'([^']+)')/i;\nconst RESOURCE_PROFILE_KINDS = new Set<ResourceProfileKind>([\n\t\"extensions\",\n\t\"skills\",\n\t\"prompts\",\n\t\"themes\",\n\t\"agents\",\n\t\"tools\",\n]);\n\nexport interface ParseResourceProfileBlocksOptions {\n\t/** Parse only these tag names. When omitted or empty, parse every resource-profile tag. */\n\tprofileNames?: string[];\n}\n\nexport interface ParseResourceProfileBlocksResult {\n\tprofiles: Record<string, ResourceProfileSettings>;\n\terrors: string[];\n}\n\nfunction mergeStringArrays(target: string[] \| undefined, source: string[] \| undefined): string[] \| undefined {\n\tif (!source \|\| source.length === 0) return target;\n\treturn [...new Set([...(target ?? []), ...source])];\n}\n\nexport function mergeResourceProfileSettings(\n\tbase: ResourceProfileSettings \| undefined,\n\toverride: ResourceProfileSettings \| undefined,\n): ResourceProfileSettings {\n\tconst result: ResourceProfileSettings = { ...(base ?? {}) };\n\tif (!override) return result;\n\tfor (const kind of RESOURCE_PROFILE_KINDS) {\n\t\tconst incoming = override[kind];\n\t\tif (!incoming) continue;\n\t\tconst existing = result[kind] ?? {};\n\t\tresult[kind] = {\n\t\t\tallow: mergeStringArrays(existing.allow, incoming.allow),\n\t\t\tblock: mergeStringArrays(existing.block, incoming.block),\n\t\t};\n\t}\n\treturn result;\n}\n\nexport function mergeResourceProfileMap(\n\tbase: Record<string, ResourceProfileSettings> = {},\n\toverride: Record<string, ResourceProfileSettings> = {},\n): Record<string, ResourceProfileSettings> {\n\tconst result: Record<string, ResourceProfileSettings> = { ...base };\n\tfor (const [name, profile] of Object.entries(override)) {\n\t\tresult[name] = mergeResourceProfileSettings(result[name], profile);\n\t}\n\treturn result;\n}\n\nfunction asStringArray(value: unknown): string[] \| undefined {\n\tif (!Array.isArray(value)) return undefined;\n\tconst values = value.filter((item): item is string => typeof item === \"string\" && item.trim().length > 0);\n\treturn values.length > 0 ? values : undefined;\n}\n\nfunction normalizeResourceProfileSettings(value: unknown): ResourceProfileSettings {\n\tif (!value \|\| typeof value !== \"object\" \|\| Array.isArray(value)) {\n\t\tthrow new Error(\"resource profile JSON must be an object\");\n\t}\n\tconst input = value as Record<string, unknown>;\n\tconst result: ResourceProfileSettings = {};\n\tfor (const [kind, filterValue] of Object.entries(input)) {\n\t\tif (!RESOURCE_PROFILE_KINDS.has(kind as ResourceProfileKind)) continue;\n\t\tif (!filterValue \|\| typeof filterValue !== \"object\" \|\| Array.isArray(filterValue)) continue;\n\t\tconst filter = filterValue as Record<string, unknown>;\n\t\tresult[kind as ResourceProfileKind] = {\n\t\t\tallow: asStringArray(filter.allow),\n\t\t\tblock: asStringArray(filter.block),\n\t\t};\n\t}\n\treturn result;\n}\n\nfunction extractProfileName(attrs: string): string \| undefined {\n\tconst match = attrs.match(RESOURCE_PROFILE_NAME_RE);\n\treturn (match?.[1] ?? match?.[2])?.trim() \|\| undefined;\n}\n\nexport function parseResourceProfileBlocks(\n\tcontent: string,\n\toptions: ParseResourceProfileBlocksOptions = {},\n): ParseResourceProfileBlocksResult {\n\tconst profiles: Record<string, ResourceProfileSettings> = {};\n\tconst errors: string[] = [];\n\tconst activeNames =\n\t\toptions.profileNames && options.profileNames.length > 0 ? new Set(options.profileNames) : undefined;\n\n\tRESOURCE_PROFILE_TAG_RE.lastIndex = 0;\n\tfor (const match of content.matchAll(RESOURCE_PROFILE_TAG_RE)) {\n\t\tconst name = extractProfileName(match[1] ?? \"\");\n\t\tif (!name) {\n\t\t\terrors.push(\"resource-profile block is missing a name attribute\");\n\t\t\tcontinue;\n\t\t}\n\t\tif (activeNames && !activeNames.has(name)) {\n\t\t\tcontinue;\n\t\t}\n\t\ttry {\n\t\t\tconst parsed = JSON.parse((match[2] ?? \"\").trim());\n\t\t\tprofiles[name] = mergeResourceProfileSettings(profiles[name], normalizeResourceProfileSettings(parsed));\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\terrors.push(`resource-profile ${name}: ${message}`);\n\t\t}\n\t}\n\n\treturn { profiles, errors };\n}\n\nexport function parseResourceProfileJson(json: string): ParseResourceProfileBlocksResult {\n\ttry {\n\t\tconst parsed = JSON.parse(json);\n\t\tif (!parsed \|\| typeof parsed !== \"object\" \|\| Array.isArray(parsed)) {\n\t\t\tthrow new Error(\"resource profile JSON must be an object\");\n\t\t}\n\t\tconst input = parsed as Record<string, unknown>;\n\t\tconst profiles: Record<string, ResourceProfileSettings> = {};\n\t\tfor (const [name, value] of Object.entries(input)) {\n\t\t\tprofiles[name] = normalizeResourceProfileSettings(value);\n\t\t}\n\t\treturn { profiles, errors: [] };\n\t} catch (error) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\treturn { profiles: {}, errors: [message] };\n\t}\n}\n\nexport function parseResourceProfileInput(input: string): ParseResourceProfileBlocksResult {\n\tif (/<resource-profile\\b/i.test(input)) {\n\t\treturn parseResourceProfileBlocks(input);\n\t}\n\treturn parseResourceProfileJson(input);\n}\n\nexport function stripResourceProfileBlocks(content: string): string {\n\treturn content.replace(RESOURCE_PROFILE_TAG_RE, \"\").trim();\n}\n"]}
1	+ {"version":3,"file":"resource-profile-blocks.d.ts","sourceRoot":"","sources":["../../src/core/resource-profile-blocks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,6BAA6B,EAE7B,uBAAuB,EACvB,MAAM,uBAAuB,CAAC;AAa/B,MAAM,WAAW,iCAAiC;IACjD,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,gCAAgC;IAChD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAClD,MAAM,EAAE,MAAM,EAAE,CAAC;CACjB;AAOD,wBAAgB,4BAA4B,CAC3C,IAAI,EAAE,uBAAuB,GAAG,SAAS,EACzC,QAAQ,EAAE,uBAAuB,GAAG,SAAS,GAC3C,uBAAuB,CAazB;AAED,wBAAgB,uBAAuB,CACtC,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAM,EAClD,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAM,GACpD,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAMzC;AAQD,oGAAoG;AACpG,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,6BAA6B,CAK7G;AAqBD,wBAAgB,0BAA0B,CACzC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,iCAAsC,GAC7C,gCAAgC,CA0BlC;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,gCAAgC,CAgBvF;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,gCAAgC,CAKzF;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAElE"}

package/dist/core/resource-profile-blocks.js CHANGED Viewed

@@ -42,6 +42,13 @@ function asStringArray(value) {
     const values = value.filter((item) => typeof item === "string" && item.trim().length > 0);
     return values.length > 0 ? values : undefined;
 }
+/** Normalize one already-validated filter object; callers retain their own invalid-input policy. */
+export function normalizeResourceProfileFilter(filter) {
+    return {
+        allow: asStringArray(filter.allow),
+        block: asStringArray(filter.block),
+    };
+}
 function normalizeResourceProfileSettings(value) {
     if (!value || typeof value !== "object" || Array.isArray(value)) {
         throw new Error("resource profile JSON must be an object");
@@ -53,11 +60,7 @@ function normalizeResourceProfileSettings(value) {
             continue;
         if (!filterValue || typeof filterValue !== "object" || Array.isArray(filterValue))
             continue;
-        const filter = filterValue;
-        result[kind] = {
-            allow: asStringArray(filter.allow),
-            block: asStringArray(filter.block),
-        };
+        result[kind] = normalizeResourceProfileFilter(filterValue);
     }
     return result;
 }

package/dist/core/resource-profile-blocks.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"resource-profile-blocks.js","sourceRoot":"","sources":["../../src/core/resource-profile-blocks.ts"],"names":[],"mappings":"AAEA,MAAM,uBAAuB,GAAG,6DAA6D,CAAC;AAC9F,MAAM,wBAAwB,GAAG,uCAAuC,CAAC;AACzE,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAsB;IAC3D,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,OAAO;CACP,CAAC,CAAC;AAYH,SAAS,iBAAiB,CAAC,MAA4B,EAAE,MAA4B,EAAwB;IAC5G,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAClD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;AAAA,CACpD;AAED,MAAM,UAAU,4BAA4B,CAC3C,IAAyC,EACzC,QAA6C,EACnB;IAC1B,MAAM,MAAM,GAA4B,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IAC5D,IAAI,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,sBAAsB,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,GAAG;YACd,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;YACxD,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;SACxD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,MAAM,UAAU,uBAAuB,CACtC,IAAI,GAA4C,EAAE,EAClD,QAAQ,GAA4C,EAAE,EACZ;IAC1C,MAAM,MAAM,GAA4C,EAAE,GAAG,IAAI,EAAE,CAAC;IACpE,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,GAAG,4BAA4B,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,aAAa,CAAC,KAAc,EAAwB;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1G,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CAC9C;AAED,SAAS,gCAAgC,CAAC,KAAc,EAA2B;IAClF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAA2B,CAAC;YAAE,SAAS;QACvE,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,SAAS;QAC5F,MAAM,MAAM,GAAG,WAAsC,CAAC;QACtD,MAAM,CAAC,IAA2B,CAAC,GAAG;YACrC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;YAClC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;SAClC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAsB;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACpD,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AAAA,CACvD;AAED,MAAM,UAAU,0BAA0B,CACzC,OAAe,EACf,OAAO,GAAsC,EAAE,EACZ;IACnC,MAAM,QAAQ,GAA4C,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,WAAW,GAChB,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAErG,uBAAuB,CAAC,SAAS,GAAG,CAAC,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YAClE,SAAS;QACV,CAAC;QACD,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,SAAS;QACV,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,GAAG,4BAA4B,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,gCAAgC,CAAC,MAAM,CAAC,CAAC,CAAC;QACzG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC;IACF,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAAA,CAC5B;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAoC;IACxF,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,KAAK,GAAG,MAAiC,CAAC;QAChD,MAAM,QAAQ,GAA4C,EAAE,CAAC;QAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,CAAC;AAAA,CACD;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAa,EAAoC;IAC1F,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;AAAA,CACvC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe,EAAU;IACnE,OAAO,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAAA,CAC3D","sourcesContent":["import type { ResourceProfileKind, ResourceProfileSettings } from \"./settings-manager.ts\";\n\nconst RESOURCE_PROFILE_TAG_RE = /<resource-profile\\b([^>])>([\\s\\S]?)<\\/resource-profile>/gi;\nconst RESOURCE_PROFILE_NAME_RE = /\\bname\\s=\\s(?:\"([^\"]+)\"\|'([^']+)')/i;\nconst RESOURCE_PROFILE_KINDS = new Set<ResourceProfileKind>([\n\t\"extensions\",\n\t\"skills\",\n\t\"prompts\",\n\t\"themes\",\n\t\"agents\",\n\t\"tools\",\n]);\n\nexport interface ParseResourceProfileBlocksOptions {\n\t/** Parse only these tag names. When omitted or empty, parse every resource-profile tag. */\n\tprofileNames?: string[];\n}\n\nexport interface ParseResourceProfileBlocksResult {\n\tprofiles: Record<string, ResourceProfileSettings>;\n\terrors: string[];\n}\n\nfunction mergeStringArrays(target: string[] \| undefined, source: string[] \| undefined): string[] \| undefined {\n\tif (!source \|\| source.length === 0) return target;\n\treturn [...new Set([...(target ?? []), ...source])];\n}\n\nexport function mergeResourceProfileSettings(\n\tbase: ResourceProfileSettings \| undefined,\n\toverride: ResourceProfileSettings \| undefined,\n): ResourceProfileSettings {\n\tconst result: ResourceProfileSettings = { ...(base ?? {}) };\n\tif (!override) return result;\n\tfor (const kind of RESOURCE_PROFILE_KINDS) {\n\t\tconst incoming = override[kind];\n\t\tif (!incoming) continue;\n\t\tconst existing = result[kind] ?? {};\n\t\tresult[kind] = {\n\t\t\tallow: mergeStringArrays(existing.allow, incoming.allow),\n\t\t\tblock: mergeStringArrays(existing.block, incoming.block),\n\t\t};\n\t}\n\treturn result;\n}\n\nexport function mergeResourceProfileMap(\n\tbase: Record<string, ResourceProfileSettings> = {},\n\toverride: Record<string, ResourceProfileSettings> = {},\n): Record<string, ResourceProfileSettings> {\n\tconst result: Record<string, ResourceProfileSettings> = { ...base };\n\tfor (const [name, profile] of Object.entries(override)) {\n\t\tresult[name] = mergeResourceProfileSettings(result[name], profile);\n\t}\n\treturn result;\n}\n\nfunction asStringArray(value: unknown): string[] \| undefined {\n\tif (!Array.isArray(value)) return undefined;\n\tconst values = value.filter((item): item is string => typeof item === \"string\" && item.trim().length > 0);\n\treturn values.length > 0 ? values : undefined;\n}\n\nfunction normalizeResourceProfileSettings(value: unknown): ResourceProfileSettings {\n\tif (!value \|\| typeof value !== \"object\" \|\| Array.isArray(value)) {\n\t\tthrow new Error(\"resource profile JSON must be an object\");\n\t}\n\tconst input = value as Record<string, unknown>;\n\tconst result: ResourceProfileSettings = {};\n\tfor (const [kind, filterValue] of Object.entries(input)) {\n\t\tif (!RESOURCE_PROFILE_KINDS.has(kind as ResourceProfileKind)) continue;\n\t\tif (!filterValue \|\| typeof filterValue !== \"object\" \|\| Array.isArray(filterValue)) continue;\n\t\tconst filter = filterValue as Record<string, unknown>;\n\t\tresult[kind as ResourceProfileKind] = {\n\t\t\tallow: asStringArray(filter.allow),\n\t\t\tblock: asStringArray(filter.block),\n\t\t};\n\t}\n\treturn result;\n}\n\nfunction extractProfileName(attrs: string): string \| undefined {\n\tconst match = attrs.match(RESOURCE_PROFILE_NAME_RE);\n\treturn (match?.[1] ?? match?.[2])?.trim() \|\| undefined;\n}\n\nexport function parseResourceProfileBlocks(\n\tcontent: string,\n\toptions: ParseResourceProfileBlocksOptions = {},\n): ParseResourceProfileBlocksResult {\n\tconst profiles: Record<string, ResourceProfileSettings> = {};\n\tconst errors: string[] = [];\n\tconst activeNames =\n\t\toptions.profileNames && options.profileNames.length > 0 ? new Set(options.profileNames) : undefined;\n\n\tRESOURCE_PROFILE_TAG_RE.lastIndex = 0;\n\tfor (const match of content.matchAll(RESOURCE_PROFILE_TAG_RE)) {\n\t\tconst name = extractProfileName(match[1] ?? \"\");\n\t\tif (!name) {\n\t\t\terrors.push(\"resource-profile block is missing a name attribute\");\n\t\t\tcontinue;\n\t\t}\n\t\tif (activeNames && !activeNames.has(name)) {\n\t\t\tcontinue;\n\t\t}\n\t\ttry {\n\t\t\tconst parsed = JSON.parse((match[2] ?? \"\").trim());\n\t\t\tprofiles[name] = mergeResourceProfileSettings(profiles[name], normalizeResourceProfileSettings(parsed));\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\terrors.push(`resource-profile ${name}: ${message}`);\n\t\t}\n\t}\n\n\treturn { profiles, errors };\n}\n\nexport function parseResourceProfileJson(json: string): ParseResourceProfileBlocksResult {\n\ttry {\n\t\tconst parsed = JSON.parse(json);\n\t\tif (!parsed \|\| typeof parsed !== \"object\" \|\| Array.isArray(parsed)) {\n\t\t\tthrow new Error(\"resource profile JSON must be an object\");\n\t\t}\n\t\tconst input = parsed as Record<string, unknown>;\n\t\tconst profiles: Record<string, ResourceProfileSettings> = {};\n\t\tfor (const [name, value] of Object.entries(input)) {\n\t\t\tprofiles[name] = normalizeResourceProfileSettings(value);\n\t\t}\n\t\treturn { profiles, errors: [] };\n\t} catch (error) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\treturn { profiles: {}, errors: [message] };\n\t}\n}\n\nexport function parseResourceProfileInput(input: string): ParseResourceProfileBlocksResult {\n\tif (/<resource-profile\\b/i.test(input)) {\n\t\treturn parseResourceProfileBlocks(input);\n\t}\n\treturn parseResourceProfileJson(input);\n}\n\nexport function stripResourceProfileBlocks(content: string): string {\n\treturn content.replace(RESOURCE_PROFILE_TAG_RE, \"\").trim();\n}\n"]}
1	+ {"version":3,"file":"resource-profile-blocks.js","sourceRoot":"","sources":["../../src/core/resource-profile-blocks.ts"],"names":[],"mappings":"AAMA,MAAM,uBAAuB,GAAG,6DAA6D,CAAC;AAC9F,MAAM,wBAAwB,GAAG,uCAAuC,CAAC;AACzE,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAsB;IAC3D,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,OAAO;CACP,CAAC,CAAC;AAYH,SAAS,iBAAiB,CAAC,MAA4B,EAAE,MAA4B;IACpF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAClD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC3C,IAAyC,EACzC,QAA6C;IAE7C,MAAM,MAAM,GAA4B,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IAC5D,IAAI,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,sBAAsB,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,GAAG;YACd,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;YACxD,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;SACxD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CACtC,IAAI,GAA4C,EAAE,EAClD,QAAQ,GAA4C,EAAE;IAEtD,MAAM,MAAM,GAA4C,EAAE,GAAG,IAAI,EAAE,CAAC;IACpE,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,GAAG,4BAA4B,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1G,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,8BAA8B,CAAC,MAA+B;IAC7E,OAAO;QACN,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;QAClC,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;KAClC,CAAC;AACH,CAAC;AAED,SAAS,gCAAgC,CAAC,KAAc;IACvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAA2B,CAAC;YAAE,SAAS;QACvE,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,SAAS;QAC5F,MAAM,CAAC,IAA2B,CAAC,GAAG,8BAA8B,CAAC,WAAsC,CAAC,CAAC;IAC9G,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACpD,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,0BAA0B,CACzC,OAAe,EACf,OAAO,GAAsC,EAAE;IAE/C,MAAM,QAAQ,GAA4C,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,WAAW,GAChB,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAErG,uBAAuB,CAAC,SAAS,GAAG,CAAC,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YAClE,SAAS;QACV,CAAC;QACD,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,SAAS;QACV,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,GAAG,4BAA4B,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,gCAAgC,CAAC,MAAM,CAAC,CAAC,CAAC;QACzG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC;IACF,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACpD,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,KAAK,GAAG,MAAiC,CAAC;QAChD,MAAM,QAAQ,GAA4C,EAAE,CAAC;QAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,CAAC;AACF,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACtD,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACzD,OAAO,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5D,CAAC","sourcesContent":["import type {\n\tResourceProfileFilterSettings,\n\tResourceProfileKind,\n\tResourceProfileSettings,\n} from \"./settings-manager.ts\";\n\nconst RESOURCE_PROFILE_TAG_RE = /<resource-profile\\b([^>])>([\\s\\S]?)<\\/resource-profile>/gi;\nconst RESOURCE_PROFILE_NAME_RE = /\\bname\\s=\\s(?:\"([^\"]+)\"\|'([^']+)')/i;\nconst RESOURCE_PROFILE_KINDS = new Set<ResourceProfileKind>([\n\t\"extensions\",\n\t\"skills\",\n\t\"prompts\",\n\t\"themes\",\n\t\"agents\",\n\t\"tools\",\n]);\n\nexport interface ParseResourceProfileBlocksOptions {\n\t/** Parse only these tag names. When omitted or empty, parse every resource-profile tag. /\n\tprofileNames?: string[];\n}\n\nexport interface ParseResourceProfileBlocksResult {\n\tprofiles: Record<string, ResourceProfileSettings>;\n\terrors: string[];\n}\n\nfunction mergeStringArrays(target: string[] \| undefined, source: string[] \| undefined): string[] \| undefined {\n\tif (!source \|\| source.length === 0) return target;\n\treturn [...new Set([...(target ?? []), ...source])];\n}\n\nexport function mergeResourceProfileSettings(\n\tbase: ResourceProfileSettings \| undefined,\n\toverride: ResourceProfileSettings \| undefined,\n): ResourceProfileSettings {\n\tconst result: ResourceProfileSettings = { ...(base ?? {}) };\n\tif (!override) return result;\n\tfor (const kind of RESOURCE_PROFILE_KINDS) {\n\t\tconst incoming = override[kind];\n\t\tif (!incoming) continue;\n\t\tconst existing = result[kind] ?? {};\n\t\tresult[kind] = {\n\t\t\tallow: mergeStringArrays(existing.allow, incoming.allow),\n\t\t\tblock: mergeStringArrays(existing.block, incoming.block),\n\t\t};\n\t}\n\treturn result;\n}\n\nexport function mergeResourceProfileMap(\n\tbase: Record<string, ResourceProfileSettings> = {},\n\toverride: Record<string, ResourceProfileSettings> = {},\n): Record<string, ResourceProfileSettings> {\n\tconst result: Record<string, ResourceProfileSettings> = { ...base };\n\tfor (const [name, profile] of Object.entries(override)) {\n\t\tresult[name] = mergeResourceProfileSettings(result[name], profile);\n\t}\n\treturn result;\n}\n\nfunction asStringArray(value: unknown): string[] \| undefined {\n\tif (!Array.isArray(value)) return undefined;\n\tconst values = value.filter((item): item is string => typeof item === \"string\" && item.trim().length > 0);\n\treturn values.length > 0 ? values : undefined;\n}\n\n/* Normalize one already-validated filter object; callers retain their own invalid-input policy. */\nexport function normalizeResourceProfileFilter(filter: Record<string, unknown>): ResourceProfileFilterSettings {\n\treturn {\n\t\tallow: asStringArray(filter.allow),\n\t\tblock: asStringArray(filter.block),\n\t};\n}\n\nfunction normalizeResourceProfileSettings(value: unknown): ResourceProfileSettings {\n\tif (!value \|\| typeof value !== \"object\" \|\| Array.isArray(value)) {\n\t\tthrow new Error(\"resource profile JSON must be an object\");\n\t}\n\tconst input = value as Record<string, unknown>;\n\tconst result: ResourceProfileSettings = {};\n\tfor (const [kind, filterValue] of Object.entries(input)) {\n\t\tif (!RESOURCE_PROFILE_KINDS.has(kind as ResourceProfileKind)) continue;\n\t\tif (!filterValue \|\| typeof filterValue !== \"object\" \|\| Array.isArray(filterValue)) continue;\n\t\tresult[kind as ResourceProfileKind] = normalizeResourceProfileFilter(filterValue as Record<string, unknown>);\n\t}\n\treturn result;\n}\n\nfunction extractProfileName(attrs: string): string \| undefined {\n\tconst match = attrs.match(RESOURCE_PROFILE_NAME_RE);\n\treturn (match?.[1] ?? match?.[2])?.trim() \|\| undefined;\n}\n\nexport function parseResourceProfileBlocks(\n\tcontent: string,\n\toptions: ParseResourceProfileBlocksOptions = {},\n): ParseResourceProfileBlocksResult {\n\tconst profiles: Record<string, ResourceProfileSettings> = {};\n\tconst errors: string[] = [];\n\tconst activeNames =\n\t\toptions.profileNames && options.profileNames.length > 0 ? new Set(options.profileNames) : undefined;\n\n\tRESOURCE_PROFILE_TAG_RE.lastIndex = 0;\n\tfor (const match of content.matchAll(RESOURCE_PROFILE_TAG_RE)) {\n\t\tconst name = extractProfileName(match[1] ?? \"\");\n\t\tif (!name) {\n\t\t\terrors.push(\"resource-profile block is missing a name attribute\");\n\t\t\tcontinue;\n\t\t}\n\t\tif (activeNames && !activeNames.has(name)) {\n\t\t\tcontinue;\n\t\t}\n\t\ttry {\n\t\t\tconst parsed = JSON.parse((match[2] ?? \"\").trim());\n\t\t\tprofiles[name] = mergeResourceProfileSettings(profiles[name], normalizeResourceProfileSettings(parsed));\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\terrors.push(`resource-profile ${name}: ${message}`);\n\t\t}\n\t}\n\n\treturn { profiles, errors };\n}\n\nexport function parseResourceProfileJson(json: string): ParseResourceProfileBlocksResult {\n\ttry {\n\t\tconst parsed = JSON.parse(json);\n\t\tif (!parsed \|\| typeof parsed !== \"object\" \|\| Array.isArray(parsed)) {\n\t\t\tthrow new Error(\"resource profile JSON must be an object\");\n\t\t}\n\t\tconst input = parsed as Record<string, unknown>;\n\t\tconst profiles: Record<string, ResourceProfileSettings> = {};\n\t\tfor (const [name, value] of Object.entries(input)) {\n\t\t\tprofiles[name] = normalizeResourceProfileSettings(value);\n\t\t}\n\t\treturn { profiles, errors: [] };\n\t} catch (error) {\n\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\treturn { profiles: {}, errors: [message] };\n\t}\n}\n\nexport function parseResourceProfileInput(input: string): ParseResourceProfileBlocksResult {\n\tif (/<resource-profile\\b/i.test(input)) {\n\t\treturn parseResourceProfileBlocks(input);\n\t}\n\treturn parseResourceProfileJson(input);\n}\n\nexport function stripResourceProfileBlocks(content: string): string {\n\treturn content.replace(RESOURCE_PROFILE_TAG_RE, \"\").trim();\n}\n"]}

package/dist/core/resource-profile-equality.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"resource-profile-equality.d.ts","sourceRoot":"","sources":["../../src/core/resource-profile-equality.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAW1F,wBAAgB,8BAA8B,CAC7C,CAAC,EAAE,uBAAuB,CAAC,mBAAmB,CAAC,GAAG,SAAS,EAC3D,CAAC,EAAE,uBAAuB,CAAC,mBAAmB,CAAC,GAAG,SAAS,GACzD,OAAO,CAET;AAED,wBAAgB,4BAA4B,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAE5G;AAED,wBAAgB,mCAAmC,CAClD,CAAC,EAAE,uBAAuB,EAC1B,CAAC,EAAE,uBAAuB,GACxB,GAAG,CAAC,mBAAmB,CAAC,CAE1B"~~,"sourcesContent":["import type { ResourceProfileKind, ResourceProfileSettings~~ } from \"./settings-manager.ts\";\n\nconst RESOURCE_PROFILE_KINDS: ResourceProfileKind[] = [\"extensions\", \"skills\", \"prompts\", \"themes\", \"agents\", \"tools\"];\n\nfunction stringListsEqual(a: string[] \| undefined, b: string[] \| undefined): boolean {\n\tif ((a?.length ?? 0) !== (b?.length ?? 0)) return false;\n\tconst aValues = a ?? [];\n\tconst bValues = b ?? [];\n\treturn aValues.every((value, index) => value === bValues[index]);\n}\n\nexport function resourceProfileKindFilterEqual(\n\ta: ResourceProfileSettings[ResourceProfileKind] \| undefined,\n\tb: ResourceProfileSettings[ResourceProfileKind] \| undefined,\n): boolean {\n\treturn stringListsEqual(a?.allow, b?.allow) && stringListsEqual(a?.block, b?.block);\n}\n\nexport function resourceProfileSettingsEqual(a: ResourceProfileSettings, b: ResourceProfileSettings): boolean {\n\treturn RESOURCE_PROFILE_KINDS.every((kind) => resourceProfileKindFilterEqual(a[kind], b[kind]));\n}\n\nexport function resourceProfileSettingsChangedKinds(\n\ta: ResourceProfileSettings,\n\tb: ResourceProfileSettings,\n): Set<ResourceProfileKind> {\n\treturn new Set(RESOURCE_PROFILE_KINDS.filter((kind) => !resourceProfileKindFilterEqual(a[kind], b[kind])));\n}\n"]}
1	+ {"version":3,"file":"resource-profile-equality.d.ts","sourceRoot":"","sources":["../../src/core/resource-profile-equality.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAW1F,wBAAgB,8BAA8B,CAC7C,CAAC,EAAE,uBAAuB,CAAC,mBAAmB,CAAC,GAAG,SAAS,EAC3D,CAAC,EAAE,uBAAuB,CAAC,mBAAmB,CAAC,GAAG,SAAS,GACzD,OAAO,CAET;AAED,wBAAgB,4BAA4B,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAE5G;AAED,wBAAgB,mCAAmC,CAClD,CAAC,EAAE,uBAAuB,EAC1B,CAAC,EAAE,uBAAuB,GACxB,GAAG,CAAC,mBAAmB,CAAC,CAE1B"}

package/dist/core/resource-profile-equality.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"resource-profile-equality.js","sourceRoot":"","sources":["../../src/core/resource-profile-equality.ts"],"names":[],"mappings":"AAEA,MAAM,sBAAsB,GAA0B,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAEvH,SAAS,gBAAgB,CAAC,CAAuB,EAAE,CAAuB~~,EAAW~~;~~IACpF~~,IAAI,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;~~AAAA~~,~~CACjE~~;AAED,MAAM,UAAU,8BAA8B,CAC7C,CAA2D,EAC3D,CAA2D~~,EACjD~~;~~IACV~~,OAAO,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;~~AAAA~~,~~CACpF~~;AAED,MAAM,UAAU,4BAA4B,CAAC,CAA0B,EAAE,CAA0B~~,EAAW~~;~~IAC7G~~,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;~~AAAA~~,~~CAChG~~;AAED,MAAM,UAAU,mCAAmC,CAClD,CAA0B,EAC1B,CAA0B~~,EACC~~;~~IAC3B~~,OAAO,IAAI,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;~~AAAA~~,~~CAC3G~~","sourcesContent":["import type { ResourceProfileKind, ResourceProfileSettings } from \"./settings-manager.ts\";\n\nconst RESOURCE_PROFILE_KINDS: ResourceProfileKind[] = [\"extensions\", \"skills\", \"prompts\", \"themes\", \"agents\", \"tools\"];\n\nfunction stringListsEqual(a: string[] \| undefined, b: string[] \| undefined): boolean {\n\tif ((a?.length ?? 0) !== (b?.length ?? 0)) return false;\n\tconst aValues = a ?? [];\n\tconst bValues = b ?? [];\n\treturn aValues.every((value, index) => value === bValues[index]);\n}\n\nexport function resourceProfileKindFilterEqual(\n\ta: ResourceProfileSettings[ResourceProfileKind] \| undefined,\n\tb: ResourceProfileSettings[ResourceProfileKind] \| undefined,\n): boolean {\n\treturn stringListsEqual(a?.allow, b?.allow) && stringListsEqual(a?.block, b?.block);\n}\n\nexport function resourceProfileSettingsEqual(a: ResourceProfileSettings, b: ResourceProfileSettings): boolean {\n\treturn RESOURCE_PROFILE_KINDS.every((kind) => resourceProfileKindFilterEqual(a[kind], b[kind]));\n}\n\nexport function resourceProfileSettingsChangedKinds(\n\ta: ResourceProfileSettings,\n\tb: ResourceProfileSettings,\n): Set<ResourceProfileKind> {\n\treturn new Set(RESOURCE_PROFILE_KINDS.filter((kind) => !resourceProfileKindFilterEqual(a[kind], b[kind])));\n}\n"]}
1	+ {"version":3,"file":"resource-profile-equality.js","sourceRoot":"","sources":["../../src/core/resource-profile-equality.ts"],"names":[],"mappings":"AAEA,MAAM,sBAAsB,GAA0B,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAEvH,SAAS,gBAAgB,CAAC,CAAuB,EAAE,CAAuB;IACzE,IAAI,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC7C,CAA2D,EAC3D,CAA2D;IAE3D,OAAO,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,CAA0B,EAAE,CAA0B;IAClG,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,mCAAmC,CAClD,CAA0B,EAC1B,CAA0B;IAE1B,OAAO,IAAI,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5G,CAAC","sourcesContent":["import type { ResourceProfileKind, ResourceProfileSettings } from \"./settings-manager.ts\";\n\nconst RESOURCE_PROFILE_KINDS: ResourceProfileKind[] = [\"extensions\", \"skills\", \"prompts\", \"themes\", \"agents\", \"tools\"];\n\nfunction stringListsEqual(a: string[] \| undefined, b: string[] \| undefined): boolean {\n\tif ((a?.length ?? 0) !== (b?.length ?? 0)) return false;\n\tconst aValues = a ?? [];\n\tconst bValues = b ?? [];\n\treturn aValues.every((value, index) => value === bValues[index]);\n}\n\nexport function resourceProfileKindFilterEqual(\n\ta: ResourceProfileSettings[ResourceProfileKind] \| undefined,\n\tb: ResourceProfileSettings[ResourceProfileKind] \| undefined,\n): boolean {\n\treturn stringListsEqual(a?.allow, b?.allow) && stringListsEqual(a?.block, b?.block);\n}\n\nexport function resourceProfileSettingsEqual(a: ResourceProfileSettings, b: ResourceProfileSettings): boolean {\n\treturn RESOURCE_PROFILE_KINDS.every((kind) => resourceProfileKindFilterEqual(a[kind], b[kind]));\n}\n\nexport function resourceProfileSettingsChangedKinds(\n\ta: ResourceProfileSettings,\n\tb: ResourceProfileSettings,\n): Set<ResourceProfileKind> {\n\treturn new Set(RESOURCE_PROFILE_KINDS.filter((kind) => !resourceProfileKindFilterEqual(a[kind], b[kind])));\n}\n"]}

package/dist/core/resource-traversal.d.ts ADDED Viewed

@@ -0,0 +1,43 @@
+import { type ResourceIgnoreMatcher } from "./resource-ignore.ts";
+export interface ResourceDirectoryRecord {
+    readonly name: string;
+    isDirectory(): boolean;
+    isFile(): boolean;
+    isSymbolicLink(): boolean;
+}
+export interface ResourceStatRecord {
+    isDirectory(): boolean;
+    isFile(): boolean;
+}
+/** Filesystem boundary used by resource discovery and deterministic traversal tests. */
+export interface ResourceTraversalPort {
+    pathExists(path: string): boolean;
+    readDirectory(path: string): readonly ResourceDirectoryRecord[];
+    stat(path: string): ResourceStatRecord;
+}
+export interface ResourceDirectoryEntry {
+    name: string;
+    path: string;
+    isDirectory: boolean;
+    isFile: boolean;
+    isSymbolicLink: boolean;
+}
+export interface ResourceTraversalOptions {
+    followSymbolicLinks?: boolean;
+    ignoreMatcher?: ResourceIgnoreMatcher;
+    onDirectoryReadError?: (path: string, error: unknown) => void;
+    port?: ResourceTraversalPort;
+    rootDir?: string;
+    skipHidden?: boolean;
+    skipNodeModules?: boolean;
+}
+/** Lexically classify a path under a resource root without accepting prefix-sharing siblings. */
+export declare function isResourcePathWithin(target: string, root: string): boolean;
+/**
+ * Read and classify one directory once. Unreadable directories and broken links are omitted,
+ * matching resource discovery's best-effort startup contract.
+ */
+export declare function readResourceDirectory(dir: string, options?: ResourceTraversalOptions): ResourceDirectoryEntry[];
+/** Collect matching files with one accumulator; nested walks never copy completed prefixes. */
+export declare function collectResourceFilesRecursively(dir: string, matchesFile: (entry: ResourceDirectoryEntry) => boolean, options?: ResourceTraversalOptions): string[];
+//# sourceMappingURL=resource-traversal.d.ts.map

package/dist/core/resource-traversal.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"resource-traversal.d.ts","sourceRoot":"","sources":["../../src/core/resource-traversal.ts"],"names":[],"mappings":"AAEA,OAAO,EAA0B,KAAK,qBAAqB,EAAuB,MAAM,sBAAsB,CAAC;AAE/G,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,WAAW,IAAI,OAAO,CAAC;IACvB,MAAM,IAAI,OAAO,CAAC;IAClB,cAAc,IAAI,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IAClC,WAAW,IAAI,OAAO,CAAC;IACvB,MAAM,IAAI,OAAO,CAAC;CAClB;AAED,wFAAwF;AACxF,MAAM,WAAW,qBAAqB;IACrC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,uBAAuB,EAAE,CAAC;IAChE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAAC;CACvC;AAQD,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACxC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,oBAAoB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAC9D,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,iGAAiG;AACjG,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAM1E;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,wBAA6B,GAAG,sBAAsB,EAAE,CA6CnH;AAED,+FAA+F;AAC/F,wBAAgB,+BAA+B,CAC9C,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,OAAO,EACvD,OAAO,GAAE,wBAA6B,GACpC,MAAM,EAAE,CAiBV"}

package/dist/core/resource-traversal.js ADDED Viewed

@@ -0,0 +1,84 @@
+import { existsSync, readdirSync, statSync } from "node:fs";
+import { isAbsolute, join, relative, resolve, sep } from "node:path";
+import { addResourceIgnoreRules, toPosixResourcePath } from "./resource-ignore.js";
+const NODE_RESOURCE_TRAVERSAL_PORT = {
+    pathExists: existsSync,
+    readDirectory: (path) => readdirSync(path, { withFileTypes: true }),
+    stat: statSync,
+};
+/** Lexically classify a path under a resource root without accepting prefix-sharing siblings. */
+export function isResourcePathWithin(target, root) {
+    const relativePath = relative(resolve(root), resolve(target));
+    return (relativePath === "" ||
+        (relativePath !== ".." && !relativePath.startsWith(`..${sep}`) && !isAbsolute(relativePath)));
+}
+/**
+ * Read and classify one directory once. Unreadable directories and broken links are omitted,
+ * matching resource discovery's best-effort startup contract.
+ */
+export function readResourceDirectory(dir, options = {}) {
+    const port = options.port ?? NODE_RESOURCE_TRAVERSAL_PORT;
+    if (!port.pathExists(dir))
+        return [];
+    const rootDir = options.rootDir ?? dir;
+    if (options.ignoreMatcher) {
+        addResourceIgnoreRules(options.ignoreMatcher, dir, rootDir);
+    }
+    let records;
+    try {
+        records = port.readDirectory(dir);
+    }
+    catch (error) {
+        options.onDirectoryReadError?.(dir, error);
+        return [];
+    }
+    const entries = [];
+    for (const record of records) {
+        if (options.skipHidden && record.name.startsWith("."))
+            continue;
+        if (options.skipNodeModules && record.name === "node_modules")
+            continue;
+        const path = join(dir, record.name);
+        const isSymbolicLink = record.isSymbolicLink();
+        let isDirectory = record.isDirectory();
+        let isFile = record.isFile();
+        if (isSymbolicLink) {
+            if (options.followSymbolicLinks === false)
+                continue;
+            try {
+                const target = port.stat(path);
+                isDirectory = target.isDirectory();
+                isFile = target.isFile();
+            }
+            catch {
+                continue;
+            }
+        }
+        if (options.ignoreMatcher) {
+            const relativePath = toPosixResourcePath(relative(rootDir, path));
+            if (options.ignoreMatcher.ignores(isDirectory ? `${relativePath}/` : relativePath))
+                continue;
+        }
+        entries.push({ name: record.name, path, isDirectory, isFile, isSymbolicLink });
+    }
+    return entries;
+}
+/** Collect matching files with one accumulator; nested walks never copy completed prefixes. */
+export function collectResourceFilesRecursively(dir, matchesFile, options = {}) {
+    const files = [];
+    const rootDir = options.rootDir ?? dir;
+    const traversalOptions = options.rootDir === rootDir ? options : { ...options, rootDir };
+    const visit = (currentDir) => {
+        for (const entry of readResourceDirectory(currentDir, traversalOptions)) {
+            if (entry.isDirectory) {
+                visit(entry.path);
+            }
+            else if (entry.isFile && matchesFile(entry)) {
+                files.push(entry.path);
+            }
+        }
+    };
+    visit(dir);
+    return files;
+}
+//# sourceMappingURL=resource-traversal.js.map

package/dist/core/resource-traversal.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"resource-traversal.js","sourceRoot":"","sources":["../../src/core/resource-traversal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAA8B,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAqB/G,MAAM,4BAA4B,GAA0B;IAC3D,UAAU,EAAE,UAAU;IACtB,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IACnE,IAAI,EAAE,QAAQ;CACd,CAAC;AAoBF,iGAAiG;AACjG,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,IAAY;IAChE,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,OAAO,CACN,YAAY,KAAK,EAAE;QACnB,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAC5F,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW,EAAE,OAAO,GAA6B,EAAE;IACxF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,4BAA4B,CAAC;IAC1D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC;IACvC,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,sBAAsB,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,OAA2C,CAAC;IAChD,IAAI,CAAC;QACJ,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3C,OAAO,EAAE,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAChE,IAAI,OAAO,CAAC,eAAe,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc;YAAE,SAAS;QAExE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QAC/C,IAAI,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7B,IAAI,cAAc,EAAE,CAAC;YACpB,IAAI,OAAO,CAAC,mBAAmB,KAAK,KAAK;gBAAE,SAAS;YACpD,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/B,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;gBACnC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACR,SAAS;YACV,CAAC;QACF,CAAC;QAED,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC3B,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAClE,IAAI,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;gBAAE,SAAS;QAC9F,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,+BAA+B,CAC9C,GAAW,EACX,WAAuD,EACvD,OAAO,GAA6B,EAAE;IAEtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC;IACvC,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;IAEzF,MAAM,KAAK,GAAG,CAAC,UAAkB,EAAQ,EAAE;QAC1C,KAAK,MAAM,KAAK,IAAI,qBAAqB,CAAC,UAAU,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACzE,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACvB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;QACF,CAAC;IACF,CAAC,CAAC;IAEF,KAAK,CAAC,GAAG,CAAC,CAAC;IACX,OAAO,KAAK,CAAC;AACd,CAAC","sourcesContent":["import { existsSync, readdirSync, statSync } from \"node:fs\";\nimport { isAbsolute, join, relative, resolve, sep } from \"node:path\";\nimport { addResourceIgnoreRules, type ResourceIgnoreMatcher, toPosixResourcePath } from \"./resource-ignore.ts\";\n\nexport interface ResourceDirectoryRecord {\n\treadonly name: string;\n\tisDirectory(): boolean;\n\tisFile(): boolean;\n\tisSymbolicLink(): boolean;\n}\n\nexport interface ResourceStatRecord {\n\tisDirectory(): boolean;\n\tisFile(): boolean;\n}\n\n/** Filesystem boundary used by resource discovery and deterministic traversal tests. */\nexport interface ResourceTraversalPort {\n\tpathExists(path: string): boolean;\n\treadDirectory(path: string): readonly ResourceDirectoryRecord[];\n\tstat(path: string): ResourceStatRecord;\n}\n\nconst NODE_RESOURCE_TRAVERSAL_PORT: ResourceTraversalPort = {\n\tpathExists: existsSync,\n\treadDirectory: (path) => readdirSync(path, { withFileTypes: true }),\n\tstat: statSync,\n};\n\nexport interface ResourceDirectoryEntry {\n\tname: string;\n\tpath: string;\n\tisDirectory: boolean;\n\tisFile: boolean;\n\tisSymbolicLink: boolean;\n}\n\nexport interface ResourceTraversalOptions {\n\tfollowSymbolicLinks?: boolean;\n\tignoreMatcher?: ResourceIgnoreMatcher;\n\tonDirectoryReadError?: (path: string, error: unknown) => void;\n\tport?: ResourceTraversalPort;\n\trootDir?: string;\n\tskipHidden?: boolean;\n\tskipNodeModules?: boolean;\n}\n\n/** Lexically classify a path under a resource root without accepting prefix-sharing siblings. */\nexport function isResourcePathWithin(target: string, root: string): boolean {\n\tconst relativePath = relative(resolve(root), resolve(target));\n\treturn (\n\t\trelativePath === \"\" ||\n\t\t(relativePath !== \"..\" && !relativePath.startsWith(`..${sep}`) && !isAbsolute(relativePath))\n\t);\n}\n\n/**\n * Read and classify one directory once. Unreadable directories and broken links are omitted,\n * matching resource discovery's best-effort startup contract.\n */\nexport function readResourceDirectory(dir: string, options: ResourceTraversalOptions = {}): ResourceDirectoryEntry[] {\n\tconst port = options.port ?? NODE_RESOURCE_TRAVERSAL_PORT;\n\tif (!port.pathExists(dir)) return [];\n\n\tconst rootDir = options.rootDir ?? dir;\n\tif (options.ignoreMatcher) {\n\t\taddResourceIgnoreRules(options.ignoreMatcher, dir, rootDir);\n\t}\n\n\tlet records: readonly ResourceDirectoryRecord[];\n\ttry {\n\t\trecords = port.readDirectory(dir);\n\t} catch (error) {\n\t\toptions.onDirectoryReadError?.(dir, error);\n\t\treturn [];\n\t}\n\n\tconst entries: ResourceDirectoryEntry[] = [];\n\tfor (const record of records) {\n\t\tif (options.skipHidden && record.name.startsWith(\".\")) continue;\n\t\tif (options.skipNodeModules && record.name === \"node_modules\") continue;\n\n\t\tconst path = join(dir, record.name);\n\t\tconst isSymbolicLink = record.isSymbolicLink();\n\t\tlet isDirectory = record.isDirectory();\n\t\tlet isFile = record.isFile();\n\t\tif (isSymbolicLink) {\n\t\t\tif (options.followSymbolicLinks === false) continue;\n\t\t\ttry {\n\t\t\t\tconst target = port.stat(path);\n\t\t\t\tisDirectory = target.isDirectory();\n\t\t\t\tisFile = target.isFile();\n\t\t\t} catch {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t}\n\n\t\tif (options.ignoreMatcher) {\n\t\t\tconst relativePath = toPosixResourcePath(relative(rootDir, path));\n\t\t\tif (options.ignoreMatcher.ignores(isDirectory ? `${relativePath}/` : relativePath)) continue;\n\t\t}\n\n\t\tentries.push({ name: record.name, path, isDirectory, isFile, isSymbolicLink });\n\t}\n\treturn entries;\n}\n\n/** Collect matching files with one accumulator; nested walks never copy completed prefixes. */\nexport function collectResourceFilesRecursively(\n\tdir: string,\n\tmatchesFile: (entry: ResourceDirectoryEntry) => boolean,\n\toptions: ResourceTraversalOptions = {},\n): string[] {\n\tconst files: string[] = [];\n\tconst rootDir = options.rootDir ?? dir;\n\tconst traversalOptions = options.rootDir === rootDir ? options : { ...options, rootDir };\n\n\tconst visit = (currentDir: string): void => {\n\t\tfor (const entry of readResourceDirectory(currentDir, traversalOptions)) {\n\t\t\tif (entry.isDirectory) {\n\t\t\t\tvisit(entry.path);\n\t\t\t} else if (entry.isFile && matchesFile(entry)) {\n\t\t\t\tfiles.push(entry.path);\n\t\t\t}\n\t\t}\n\t};\n\n\tvisit(dir);\n\treturn files;\n}\n"]}

package/dist/core/risk-classifier.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"risk-classifier.d.ts","sourceRoot":"","sources":["../../src/core/risk-classifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,cAAc,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAEjH,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,QAAQ,CAAC;AAiFtD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAyFtE;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAE3E;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CA+E9E","sourcesContent":["import type { OperationRisk, RiskAssessment, RiskAssessmentInput, RouteDecision } from \"./autonomy/contracts.ts\";\n\nexport type ModelRouterIntent = \"research\" \| \"modify\";\n\nconst EXPLICIT_MODIFY_REQUEST_RE =\n\t/^(?:can you\|could you\|please\|pls\|go ahead and\|let'?s\|i need you to\|we need to\|you should)\\s+.\\b(add\|apply\|build\|change\|commit\|create\|delete\|edit\|fix\|generate\|implement\|install\|modify\|patch\|remove\|rename\|replace\|run\|test\|update\|write\|publish\|release\|push\|deploy\|tag\|reset\|clean\|rewrite)\\b/i;\nconst READ_ONLY_QUESTION_RE =\n\t/^(?:(?:can you\|could you\|please\|pls\|go ahead and\|let'?s\|i need you to\|we need to\|you should)\\s+)?(?:how\|what\|why\|when\|where\|which\|who\|explain\|summarize\|compare\|describe\|list\|show\|search\|find\|view\|read\|locate)\\b/i;\nconst RELEASE_PUBLISH_RE = /\\b(publish\|release\|push\|deploy\|tag)\\b/i;\nconst SECURITY_AUTH_RE = /\\b(auth\|token\|credential\|credentials\|secret\|api[-_]key)\\b/i;\nconst DESTRUCTIVE_RE = /\\b(delete\|reset\|rm\\s+-rf\|clean)\\b/i;\nconst SELF_MOD_MUTATE_RE =\n\t/\\b(modify\|change\|write\|update\|edit\|delete\|add\|remove\|set)\\s+.\\b(skills\|prompts\|settings\|tools\|behavior)\\b\|self[-_]modification/i;\nconst ARCHITECTURE_MUTATE_RE = /\\b(rewrite\|redesign\|change\|modify\|rearchitect)\\s+.\\b(architecture\|architect)\\b/i;\nconst PLANNING_CORE_RE = /\\b(plan\|planning\|roadmap\|strategy)\\b/i;\nconst PLANNING_DESIGN_WORD_RE = /\\b(design\|architect\\w\|structure\|approach)\\b/i;\nconst PLANNING_PROSPECTIVE_RE =\n\t/\\b(how (?:should\|would\|do we\|can we)\|what(?:'s\| is) the (?:best\|cleanest\|right)\|propose\|draft\|come up with\|figure out\|decide (?:on\|how))\\b/i;\nconst REFACTOR_RE = /\\b(refactor\|refactoring)\\b/i;\nconst TEST_VALIDATION_RE = /\\b(test\|testing\|validation\|lint\|vitest\|jest\|run)\\b/i;\nconst IMPLEMENT_RE = /\\b(implement\|fix\|apply\|change\|update\|create\|write\|generate\|modify\|edit\|patch\|add)\\b/i;\nconst DESTRUCTIVE_CMD_RE =\n\t/\\b(rm(\\s+-r\|\\s+-f\|\\s+-rf\|\\s+-fr)?\|mv\|cp\|chmod\|chown\|install)\\b\|>\\s\\/dev\\/(sda\|hda\|vda)\|\\b(dd\\s+if=)/i;\nconst GIT_MUTATE_CMD_RE = /\\bgit\\s+(commit\|push\|reset\|clean\|stash\|rebase)\\b/i;\nconst PKG_MUTATE_CMD_RE = /\\b(npm\|pnpm\|yarn\|bun)\\s+(install\|i\|update\|up\|publish\|run\|remove\|rm\|uninstall)\\b/i;\nconst RELEASE_DEPLOY_CMD_RE = /\\b(release\|deploy)\\b/i;\nconst PYTHON_HIGH_IMPACT_RE =\n\t/\\b(?:shutil\\.(?:rmtree\|move\|copy\|copy2\|copytree)\|os\\.(?:remove\|unlink\|rmdir\|removedirs\|system)\|subprocess\\.(?:run\|call\|check_call\|check_output\|Popen)\|Path\$[^)]\$\\.(?:unlink\|rmdir))\\b/i;\nconst REDIRECTION_RE = /[<>]/;\n\ninterface RiskSignal {\n\trisk: OperationRisk;\n\tkind: \"release\" \| \"security\" \| \"destructive\" \| \"self-modification\" \| \"architecture\";\n\treason: string;\n}\n\nfunction isPlanningPrompt(text: string): boolean {\n\treturn PLANNING_CORE_RE.test(text) \|\| (PLANNING_DESIGN_WORD_RE.test(text) && PLANNING_PROSPECTIVE_RE.test(text));\n}\n\nfunction highRiskSignal(text: string): RiskSignal \| undefined {\n\tif (RELEASE_PUBLISH_RE.test(text)) {\n\t\treturn {\n\t\t\trisk: \"approval-required\",\n\t\t\tkind: \"release\",\n\t\t\treason: \"Operation mentions releasing, publishing, or deploying\",\n\t\t};\n\t}\n\tif (SECURITY_AUTH_RE.test(text)) {\n\t\treturn {\n\t\t\trisk: \"approval-required\",\n\t\t\tkind: \"security\",\n\t\t\treason: \"Operation mentions authentication or credentials\",\n\t\t};\n\t}\n\tif (DESTRUCTIVE_RE.test(text)) {\n\t\treturn {\n\t\t\trisk: \"approval-required\",\n\t\t\tkind: \"destructive\",\n\t\t\treason: \"Operation involves deleting, resetting, or cleaning\",\n\t\t};\n\t}\n\tif (SELF_MOD_MUTATE_RE.test(text)) {\n\t\treturn {\n\t\t\trisk: \"approval-required\",\n\t\t\tkind: \"self-modification\",\n\t\t\treason: \"Operation modifies settings, tools, skills, or prompts\",\n\t\t};\n\t}\n\tif (ARCHITECTURE_MUTATE_RE.test(text)) {\n\t\treturn {\n\t\t\trisk: \"high-impact\",\n\t\t\tkind: \"architecture\",\n\t\t\treason: \"Operation mentions rewriting or rearchitecting core parts\",\n\t\t};\n\t}\n\treturn undefined;\n}\n\nfunction stripSingleQuotes(command: string): string {\n\treturn command.replace(/'[^']*'/g, \"''\");\n}\n\nexport function classifyModelRouterRoute(prompt: string): RouteDecision {\n\tconst text = prompt.trim();\n\tif (!text) {\n\t\treturn {\n\t\t\ttier: \"cheap\",\n\t\t\trisk: \"read-only\",\n\t\t\tconfidence: 0.1,\n\t\t\treasonCode: \"empty_prompt\",\n\t\t\treasons: [\"Empty or whitespace prompt\"],\n\t\t};\n\t}\n\tif (READ_ONLY_QUESTION_RE.test(text) && !EXPLICIT_MODIFY_REQUEST_RE.test(text)) {\n\t\tif (isPlanningPrompt(text)) {\n\t\t\treturn {\n\t\t\t\ttier: \"medium\",\n\t\t\t\trisk: \"read-only\",\n\t\t\t\tconfidence: 0.75,\n\t\t\t\treasonCode: \"planning_min_medium\",\n\t\t\t\treasons: [\"Planning/design prompts never route cheap by default; a judge may deem them trivial\"],\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\ttier: \"cheap\",\n\t\t\trisk: \"read-only\",\n\t\t\tconfidence: 0.9,\n\t\t\treasonCode: \"read_only_question\",\n\t\t\treasons: [\"Prompt asks a question or requests an explanation, search, or lookup\"],\n\t\t};\n\t}\n\tconst highRisk = highRiskSignal(text);\n\tif (highRisk) {\n\t\tconst reasonCode: Record<RiskSignal[\"kind\"], string> = {\n\t\t\trelease: \"release_or_publish\",\n\t\t\tsecurity: \"security_or_auth\",\n\t\t\tdestructive: \"destructive_or_git_history\",\n\t\t\t\"self-modification\": \"settings_or_self_modification\",\n\t\t\tarchitecture: \"architecture_or_ambiguous\",\n\t\t};\n\t\treturn {\n\t\t\ttier: \"expensive\",\n\t\t\trisk: highRisk.kind === \"security\" ? \"high-impact\" : highRisk.risk,\n\t\t\tconfidence: highRisk.kind === \"security\" ? 0.95 : highRisk.kind === \"destructive\" ? 0.85 : 0.9,\n\t\t\treasonCode: reasonCode[highRisk.kind],\n\t\t\treasons: [highRisk.reason],\n\t\t};\n\t}\n\tif (isPlanningPrompt(text)) {\n\t\treturn {\n\t\t\ttier: \"medium\",\n\t\t\trisk: \"read-only\",\n\t\t\tconfidence: 0.75,\n\t\t\treasonCode: \"planning_min_medium\",\n\t\t\treasons: [\"Planning/design prompts never route cheap by default; a judge may deem them trivial\"],\n\t\t};\n\t}\n\tif (REFACTOR_RE.test(text)) {\n\t\treturn {\n\t\t\ttier: \"medium\",\n\t\t\trisk: \"scoped-write\",\n\t\t\tconfidence: 0.8,\n\t\t\treasonCode: \"mechanical_refactor\",\n\t\t\treasons: [\"Prompt mentions refactoring code structure\"],\n\t\t};\n\t}\n\tif (TEST_VALIDATION_RE.test(text)) {\n\t\treturn {\n\t\t\ttier: \"medium\",\n\t\t\trisk: \"scoped-write\",\n\t\t\tconfidence: 0.8,\n\t\t\treasonCode: \"test_or_validation\",\n\t\t\treasons: [\"Prompt mentions testing, validation, or linting\"],\n\t\t};\n\t}\n\tif (IMPLEMENT_RE.test(text)) {\n\t\treturn {\n\t\t\ttier: \"medium\",\n\t\t\trisk: \"scoped-write\",\n\t\t\tconfidence: 0.85,\n\t\t\treasonCode: \"normal_implementation\",\n\t\t\treasons: [\"Prompt mentions implementing, updating, creating, or modifying code\"],\n\t\t};\n\t}\n\treturn {\n\t\ttier: \"cheap\",\n\t\trisk: \"read-only\",\n\t\tconfidence: 0.5,\n\t\treasonCode: \"default_read_only\",\n\t\treasons: [\"No explicit implementation, destructive, or release patterns detected\"],\n\t};\n}\n\nexport function classifyModelRouterIntent(prompt: string): ModelRouterIntent {\n\treturn classifyModelRouterRoute(prompt).tier === \"cheap\" ? \"research\" : \"modify\";\n}\n\nexport function assessOperationRisk(input: RiskAssessmentInput): RiskAssessment {\n\tconst operation = input.operation.trim();\n\tconst command = input.command?.trim() ?? \"\";\n\tconst cleanCommand = stripSingleQuotes(command);\n\tconst fullText = `${operation} ${command}`.trim();\n\tconst cleanFullText = `${operation} ${cleanCommand}`.trim();\n\tif (!fullText) {\n\t\treturn {\n\t\t\trisk: \"read-only\",\n\t\t\treasonCode: \"empty_operation\",\n\t\t\treasons: [\"Empty operation\"],\n\t\t\trequiresApproval: false,\n\t\t};\n\t}\n\tif (input.toolName === \"secret_store\") {\n\t\treturn {\n\t\t\trisk: \"scoped-write\",\n\t\t\treasonCode: \"native_owner_secret_flow\",\n\t\t\treasons: [\"Native secret-store mutations require model-blind owner input and in-tool confirmation\"],\n\t\t\trequiresApproval: false,\n\t\t};\n\t}\n\tif (READ_ONLY_QUESTION_RE.test(operation) && !EXPLICIT_MODIFY_REQUEST_RE.test(operation)) {\n\t\treturn {\n\t\t\trisk: \"read-only\",\n\t\t\treasonCode: \"read_only_operation\",\n\t\t\treasons: [\"Operation is explicitly read-only (list/show/read/search)\"],\n\t\t\trequiresApproval: false,\n\t\t};\n\t}\n\tconst highRisk = highRiskSignal(cleanFullText);\n\tif (highRisk) {\n\t\tconst reasonCode: Record<RiskSignal[\"kind\"], string> = {\n\t\t\trelease: \"release_publish_operation\",\n\t\t\tsecurity: \"security_auth_operation\",\n\t\t\tdestructive: \"destructive_operation\",\n\t\t\t\"self-modification\": \"self_modification_operation\",\n\t\t\tarchitecture: \"architecture_mutation_operation\",\n\t\t};\n\t\treturn {\n\t\t\trisk: highRisk.risk,\n\t\t\treasonCode: reasonCode[highRisk.kind],\n\t\t\treasons: [highRisk.reason],\n\t\t\trequiresApproval: highRisk.risk === \"approval-required\",\n\t\t};\n\t}\n\tif (\n\t\tcommand &&\n\t\t(DESTRUCTIVE_CMD_RE.test(cleanCommand) \|\|\n\t\t\tGIT_MUTATE_CMD_RE.test(cleanCommand) \|\|\n\t\t\tPKG_MUTATE_CMD_RE.test(cleanCommand) \|\|\n\t\t\tRELEASE_DEPLOY_CMD_RE.test(cleanCommand) \|\|\n\t\t\tPYTHON_HIGH_IMPACT_RE.test(cleanCommand) \|\|\n\t\t\tREDIRECTION_RE.test(cleanCommand))\n\t) {\n\t\treturn {\n\t\t\trisk: \"approval-required\",\n\t\t\treasonCode: \"mutating_command\",\n\t\t\treasons: [\"Command executes a destructive, mutating, or publish operation\"],\n\t\t\trequiresApproval: true,\n\t\t};\n\t}\n\tif (\n\t\tinput.toolName &&\n\t\t![\"read_file\", \"search_web\", \"list_dir\", \"grep_search\", \"view_file\", \"memory\"].includes(input.toolName)\n\t) {\n\t\treturn {\n\t\t\trisk: \"scoped-write\",\n\t\t\treasonCode: \"generic_mutation\",\n\t\t\treasons: [\"Generic mutating operation or command\"],\n\t\t\trequiresApproval: false,\n\t\t};\n\t}\n\treturn {\n\t\trisk: \"read-only\",\n\t\treasonCode: \"default_read_only\",\n\t\treasons: [\"No mutating or high-risk patterns detected\"],\n\t\trequiresApproval: false,\n\t};\n}\n"]}
1	+ {"version":3,"file":"risk-classifier.d.ts","sourceRoot":"","sources":["../../src/core/risk-classifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,cAAc,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAEjH,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,QAAQ,CAAC;AAiFtD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAyFtE;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAE3E;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CA+E9E"}

package/dist/core/risk-classifier.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"risk-classifier.js","sourceRoot":"","sources":["../../src/core/risk-classifier.ts"],"names":[],"mappings":"AAIA,MAAM,0BAA0B,GAC/B,mSAAmS,CAAC;AACrS,MAAM,qBAAqB,GAC1B,qNAAqN,CAAC;AACvN,MAAM,kBAAkB,GAAG,wCAAwC,CAAC;AACpE,MAAM,gBAAgB,GAAG,4DAA4D,CAAC;AACtF,MAAM,cAAc,GAAG,oCAAoC,CAAC;AAC5D,MAAM,kBAAkB,GACvB,kIAAkI,CAAC;AACpI,MAAM,sBAAsB,GAAG,kFAAkF,CAAC;AAClH,MAAM,gBAAgB,GAAG,uCAAuC,CAAC;AACjE,MAAM,uBAAuB,GAAG,+CAA+C,CAAC;AAChF,MAAM,uBAAuB,GAC5B,6IAA6I,CAAC;AAC/I,MAAM,WAAW,GAAG,6BAA6B,CAAC;AAClD,MAAM,kBAAkB,GAAG,qDAAqD,CAAC;AACjF,MAAM,YAAY,GAAG,sFAAsF,CAAC;AAC5G,MAAM,kBAAkB,GACvB,uGAAuG,CAAC;AACzG,MAAM,iBAAiB,GAAG,mDAAmD,CAAC;AAC9E,MAAM,iBAAiB,GAAG,kFAAkF,CAAC;AAC7G,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AACtD,MAAM,qBAAqB,GAC1B,2LAA2L,CAAC;AAC7L,MAAM,cAAc,GAAG,MAAM,CAAC;AAQ9B,SAAS,gBAAgB,CAAC,IAAY,EAAW;IAChD,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAAA,CACjH;AAED,SAAS,cAAc,CAAC,IAAY,EAA0B;IAC7D,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO;YACN,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,wDAAwD;SAChE,CAAC;IACH,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO;YACN,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,kDAAkD;SAC1D,CAAC;IACH,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO;YACN,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,qDAAqD;SAC7D,CAAC;IACH,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO;YACN,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,wDAAwD;SAChE,CAAC;IACH,CAAC;IACD,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO;YACN,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,2DAA2D;SACnE,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAU;IACnD,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAAA,CACzC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAiB;IACvE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO;YACN,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,cAAc;YAC1B,OAAO,EAAE,CAAC,4BAA4B,CAAC;SACvC,CAAC;IACH,CAAC;IACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChF,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACN,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,WAAW;gBACjB,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,qBAAqB;gBACjC,OAAO,EAAE,CAAC,qFAAqF,CAAC;aAChG,CAAC;QACH,CAAC;QACD,OAAO;YACN,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,oBAAoB;YAChC,OAAO,EAAE,CAAC,sEAAsE,CAAC;SACjF,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,UAAU,GAAuC;YACtD,OAAO,EAAE,oBAAoB;YAC7B,QAAQ,EAAE,kBAAkB;YAC5B,WAAW,EAAE,4BAA4B;YACzC,mBAAmB,EAAE,+BAA+B;YACpD,YAAY,EAAE,2BAA2B;SACzC,CAAC;QACF,OAAO;YACN,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI;YAClE,UAAU,EAAE,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG;YAC9F,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrC,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;SAC1B,CAAC;IACH,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO;YACN,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,qBAAqB;YACjC,OAAO,EAAE,CAAC,qFAAqF,CAAC;SAChG,CAAC;IACH,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO;YACN,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,qBAAqB;YACjC,OAAO,EAAE,CAAC,4CAA4C,CAAC;SACvD,CAAC;IACH,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO;YACN,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,oBAAoB;YAChC,OAAO,EAAE,CAAC,iDAAiD,CAAC;SAC5D,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO;YACN,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,uBAAuB;YACnC,OAAO,EAAE,CAAC,qEAAqE,CAAC;SAChF,CAAC;IACH,CAAC;IACD,OAAO;QACN,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,mBAAmB;QAC/B,OAAO,EAAE,CAAC,uEAAuE,CAAC;KAClF,CAAC;AAAA,CACF;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAc,EAAqB;IAC5E,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;AAAA,CACjF;AAED,MAAM,UAAU,mBAAmB,CAAC,KAA0B,EAAkB;IAC/E,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5C,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,aAAa,GAAG,GAAG,SAAS,IAAI,YAAY,EAAE,CAAC,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO;YACN,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,iBAAiB;YAC7B,OAAO,EAAE,CAAC,iBAAiB,CAAC;YAC5B,gBAAgB,EAAE,KAAK;SACvB,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;QACvC,OAAO;YACN,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,0BAA0B;YACtC,OAAO,EAAE,CAAC,wFAAwF,CAAC;YACnG,gBAAgB,EAAE,KAAK;SACvB,CAAC;IACH,CAAC;IACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1F,OAAO;YACN,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,qBAAqB;YACjC,OAAO,EAAE,CAAC,2DAA2D,CAAC;YACtE,gBAAgB,EAAE,KAAK;SACvB,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IAC/C,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,UAAU,GAAuC;YACtD,OAAO,EAAE,2BAA2B;YACpC,QAAQ,EAAE,yBAAyB;YACnC,WAAW,EAAE,uBAAuB;YACpC,mBAAmB,EAAE,6BAA6B;YAClD,YAAY,EAAE,iCAAiC;SAC/C,CAAC;QACF,OAAO;YACN,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrC,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1B,gBAAgB,EAAE,QAAQ,CAAC,IAAI,KAAK,mBAAmB;SACvD,CAAC;IACH,CAAC;IACD,IACC,OAAO;QACP,CAAC,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC;YACrC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC;YACpC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC;YACpC,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC;YACxC,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC;YACxC,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAClC,CAAC;QACF,OAAO;YACN,IAAI,EAAE,mBAAmB;YACzB,UAAU,EAAE,kBAAkB;YAC9B,OAAO,EAAE,CAAC,gEAAgE,CAAC;YAC3E,gBAAgB,EAAE,IAAI;SACtB,CAAC;IACH,CAAC;IACD,IACC,KAAK,CAAC,QAAQ;QACd,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EACtG,CAAC;QACF,OAAO;YACN,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,kBAAkB;YAC9B,OAAO,EAAE,CAAC,uCAAuC,CAAC;YAClD,gBAAgB,EAAE,KAAK;SACvB,CAAC;IACH,CAAC;IACD,OAAO;QACN,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,mBAAmB;QAC/B,OAAO,EAAE,CAAC,4CAA4C,CAAC;QACvD,gBAAgB,EAAE,KAAK;KACvB,CAAC;AAAA,CACF","sourcesContent":["import type { OperationRisk, RiskAssessment, RiskAssessmentInput, RouteDecision } from \"./autonomy/contracts.ts\";\n\nexport type ModelRouterIntent = \"research\" \| \"modify\";\n\nconst EXPLICIT_MODIFY_REQUEST_RE =\n\t/^(?:can you\|could you\|please\|pls\|go ahead and\|let'?s\|i need you to\|we need to\|you should)\\s+.\\b(add\|apply\|build\|change\|commit\|create\|delete\|edit\|fix\|generate\|implement\|install\|modify\|patch\|remove\|rename\|replace\|run\|test\|update\|write\|publish\|release\|push\|deploy\|tag\|reset\|clean\|rewrite)\\b/i;\nconst READ_ONLY_QUESTION_RE =\n\t/^(?:(?:can you\|could you\|please\|pls\|go ahead and\|let'?s\|i need you to\|we need to\|you should)\\s+)?(?:how\|what\|why\|when\|where\|which\|who\|explain\|summarize\|compare\|describe\|list\|show\|search\|find\|view\|read\|locate)\\b/i;\nconst RELEASE_PUBLISH_RE = /\\b(publish\|release\|push\|deploy\|tag)\\b/i;\nconst SECURITY_AUTH_RE = /\\b(auth\|token\|credential\|credentials\|secret\|api[-_]key)\\b/i;\nconst DESTRUCTIVE_RE = /\\b(delete\|reset\|rm\\s+-rf\|clean)\\b/i;\nconst SELF_MOD_MUTATE_RE =\n\t/\\b(modify\|change\|write\|update\|edit\|delete\|add\|remove\|set)\\s+.\\b(skills\|prompts\|settings\|tools\|behavior)\\b\|self[-_]modification/i;\nconst ARCHITECTURE_MUTATE_RE = /\\b(rewrite\|redesign\|change\|modify\|rearchitect)\\s+.\\b(architecture\|architect)\\b/i;\nconst PLANNING_CORE_RE = /\\b(plan\|planning\|roadmap\|strategy)\\b/i;\nconst PLANNING_DESIGN_WORD_RE = /\\b(design\|architect\\w\|structure\|approach)\\b/i;\nconst PLANNING_PROSPECTIVE_RE =\n\t/\\b(how (?:should\|would\|do we\|can we)\|what(?:'s\| is) the (?:best\|cleanest\|right)\|propose\|draft\|come up with\|figure out\|decide (?:on\|how))\\b/i;\nconst REFACTOR_RE = /\\b(refactor\|refactoring)\\b/i;\nconst TEST_VALIDATION_RE = /\\b(test\|testing\|validation\|lint\|vitest\|jest\|run)\\b/i;\nconst IMPLEMENT_RE = /\\b(implement\|fix\|apply\|change\|update\|create\|write\|generate\|modify\|edit\|patch\|add)\\b/i;\nconst DESTRUCTIVE_CMD_RE =\n\t/\\b(rm(\\s+-r\|\\s+-f\|\\s+-rf\|\\s+-fr)?\|mv\|cp\|chmod\|chown\|install)\\b\|>\\s\\/dev\\/(sda\|hda\|vda)\|\\b(dd\\s+if=)/i;\nconst GIT_MUTATE_CMD_RE = /\\bgit\\s+(commit\|push\|reset\|clean\|stash\|rebase)\\b/i;\nconst PKG_MUTATE_CMD_RE = /\\b(npm\|pnpm\|yarn\|bun)\\s+(install\|i\|update\|up\|publish\|run\|remove\|rm\|uninstall)\\b/i;\nconst RELEASE_DEPLOY_CMD_RE = /\\b(release\|deploy)\\b/i;\nconst PYTHON_HIGH_IMPACT_RE =\n\t/\\b(?:shutil\\.(?:rmtree\|move\|copy\|copy2\|copytree)\|os\\.(?:remove\|unlink\|rmdir\|removedirs\|system)\|subprocess\\.(?:run\|call\|check_call\|check_output\|Popen)\|Path\$[^)]\$\\.(?:unlink\|rmdir))\\b/i;\nconst REDIRECTION_RE = /[<>]/;\n\ninterface RiskSignal {\n\trisk: OperationRisk;\n\tkind: \"release\" \| \"security\" \| \"destructive\" \| \"self-modification\" \| \"architecture\";\n\treason: string;\n}\n\nfunction isPlanningPrompt(text: string): boolean {\n\treturn PLANNING_CORE_RE.test(text) \|\| (PLANNING_DESIGN_WORD_RE.test(text) && PLANNING_PROSPECTIVE_RE.test(text));\n}\n\nfunction highRiskSignal(text: string): RiskSignal \| undefined {\n\tif (RELEASE_PUBLISH_RE.test(text)) {\n\t\treturn {\n\t\t\trisk: \"approval-required\",\n\t\t\tkind: \"release\",\n\t\t\treason: \"Operation mentions releasing, publishing, or deploying\",\n\t\t};\n\t}\n\tif (SECURITY_AUTH_RE.test(text)) {\n\t\treturn {\n\t\t\trisk: \"approval-required\",\n\t\t\tkind: \"security\",\n\t\t\treason: \"Operation mentions authentication or credentials\",\n\t\t};\n\t}\n\tif (DESTRUCTIVE_RE.test(text)) {\n\t\treturn {\n\t\t\trisk: \"approval-required\",\n\t\t\tkind: \"destructive\",\n\t\t\treason: \"Operation involves deleting, resetting, or cleaning\",\n\t\t};\n\t}\n\tif (SELF_MOD_MUTATE_RE.test(text)) {\n\t\treturn {\n\t\t\trisk: \"approval-required\",\n\t\t\tkind: \"self-modification\",\n\t\t\treason: \"Operation modifies settings, tools, skills, or prompts\",\n\t\t};\n\t}\n\tif (ARCHITECTURE_MUTATE_RE.test(text)) {\n\t\treturn {\n\t\t\trisk: \"high-impact\",\n\t\t\tkind: \"architecture\",\n\t\t\treason: \"Operation mentions rewriting or rearchitecting core parts\",\n\t\t};\n\t}\n\treturn undefined;\n}\n\nfunction stripSingleQuotes(command: string): string {\n\treturn command.replace(/'[^']*'/g, \"''\");\n}\n\nexport function classifyModelRouterRoute(prompt: string): RouteDecision {\n\tconst text = prompt.trim();\n\tif (!text) {\n\t\treturn {\n\t\t\ttier: \"cheap\",\n\t\t\trisk: \"read-only\",\n\t\t\tconfidence: 0.1,\n\t\t\treasonCode: \"empty_prompt\",\n\t\t\treasons: [\"Empty or whitespace prompt\"],\n\t\t};\n\t}\n\tif (READ_ONLY_QUESTION_RE.test(text) && !EXPLICIT_MODIFY_REQUEST_RE.test(text)) {\n\t\tif (isPlanningPrompt(text)) {\n\t\t\treturn {\n\t\t\t\ttier: \"medium\",\n\t\t\t\trisk: \"read-only\",\n\t\t\t\tconfidence: 0.75,\n\t\t\t\treasonCode: \"planning_min_medium\",\n\t\t\t\treasons: [\"Planning/design prompts never route cheap by default; a judge may deem them trivial\"],\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\ttier: \"cheap\",\n\t\t\trisk: \"read-only\",\n\t\t\tconfidence: 0.9,\n\t\t\treasonCode: \"read_only_question\",\n\t\t\treasons: [\"Prompt asks a question or requests an explanation, search, or lookup\"],\n\t\t};\n\t}\n\tconst highRisk = highRiskSignal(text);\n\tif (highRisk) {\n\t\tconst reasonCode: Record<RiskSignal[\"kind\"], string> = {\n\t\t\trelease: \"release_or_publish\",\n\t\t\tsecurity: \"security_or_auth\",\n\t\t\tdestructive: \"destructive_or_git_history\",\n\t\t\t\"self-modification\": \"settings_or_self_modification\",\n\t\t\tarchitecture: \"architecture_or_ambiguous\",\n\t\t};\n\t\treturn {\n\t\t\ttier: \"expensive\",\n\t\t\trisk: highRisk.kind === \"security\" ? \"high-impact\" : highRisk.risk,\n\t\t\tconfidence: highRisk.kind === \"security\" ? 0.95 : highRisk.kind === \"destructive\" ? 0.85 : 0.9,\n\t\t\treasonCode: reasonCode[highRisk.kind],\n\t\t\treasons: [highRisk.reason],\n\t\t};\n\t}\n\tif (isPlanningPrompt(text)) {\n\t\treturn {\n\t\t\ttier: \"medium\",\n\t\t\trisk: \"read-only\",\n\t\t\tconfidence: 0.75,\n\t\t\treasonCode: \"planning_min_medium\",\n\t\t\treasons: [\"Planning/design prompts never route cheap by default; a judge may deem them trivial\"],\n\t\t};\n\t}\n\tif (REFACTOR_RE.test(text)) {\n\t\treturn {\n\t\t\ttier: \"medium\",\n\t\t\trisk: \"scoped-write\",\n\t\t\tconfidence: 0.8,\n\t\t\treasonCode: \"mechanical_refactor\",\n\t\t\treasons: [\"Prompt mentions refactoring code structure\"],\n\t\t};\n\t}\n\tif (TEST_VALIDATION_RE.test(text)) {\n\t\treturn {\n\t\t\ttier: \"medium\",\n\t\t\trisk: \"scoped-write\",\n\t\t\tconfidence: 0.8,\n\t\t\treasonCode: \"test_or_validation\",\n\t\t\treasons: [\"Prompt mentions testing, validation, or linting\"],\n\t\t};\n\t}\n\tif (IMPLEMENT_RE.test(text)) {\n\t\treturn {\n\t\t\ttier: \"medium\",\n\t\t\trisk: \"scoped-write\",\n\t\t\tconfidence: 0.85,\n\t\t\treasonCode: \"normal_implementation\",\n\t\t\treasons: [\"Prompt mentions implementing, updating, creating, or modifying code\"],\n\t\t};\n\t}\n\treturn {\n\t\ttier: \"cheap\",\n\t\trisk: \"read-only\",\n\t\tconfidence: 0.5,\n\t\treasonCode: \"default_read_only\",\n\t\treasons: [\"No explicit implementation, destructive, or release patterns detected\"],\n\t};\n}\n\nexport function classifyModelRouterIntent(prompt: string): ModelRouterIntent {\n\treturn classifyModelRouterRoute(prompt).tier === \"cheap\" ? \"research\" : \"modify\";\n}\n\nexport function assessOperationRisk(input: RiskAssessmentInput): RiskAssessment {\n\tconst operation = input.operation.trim();\n\tconst command = input.command?.trim() ?? \"\";\n\tconst cleanCommand = stripSingleQuotes(command);\n\tconst fullText = `${operation} ${command}`.trim();\n\tconst cleanFullText = `${operation} ${cleanCommand}`.trim();\n\tif (!fullText) {\n\t\treturn {\n\t\t\trisk: \"read-only\",\n\t\t\treasonCode: \"empty_operation\",\n\t\t\treasons: [\"Empty operation\"],\n\t\t\trequiresApproval: false,\n\t\t};\n\t}\n\tif (input.toolName === \"secret_store\") {\n\t\treturn {\n\t\t\trisk: \"scoped-write\",\n\t\t\treasonCode: \"native_owner_secret_flow\",\n\t\t\treasons: [\"Native secret-store mutations require model-blind owner input and in-tool confirmation\"],\n\t\t\trequiresApproval: false,\n\t\t};\n\t}\n\tif (READ_ONLY_QUESTION_RE.test(operation) && !EXPLICIT_MODIFY_REQUEST_RE.test(operation)) {\n\t\treturn {\n\t\t\trisk: \"read-only\",\n\t\t\treasonCode: \"read_only_operation\",\n\t\t\treasons: [\"Operation is explicitly read-only (list/show/read/search)\"],\n\t\t\trequiresApproval: false,\n\t\t};\n\t}\n\tconst highRisk = highRiskSignal(cleanFullText);\n\tif (highRisk) {\n\t\tconst reasonCode: Record<RiskSignal[\"kind\"], string> = {\n\t\t\trelease: \"release_publish_operation\",\n\t\t\tsecurity: \"security_auth_operation\",\n\t\t\tdestructive: \"destructive_operation\",\n\t\t\t\"self-modification\": \"self_modification_operation\",\n\t\t\tarchitecture: \"architecture_mutation_operation\",\n\t\t};\n\t\treturn {\n\t\t\trisk: highRisk.risk,\n\t\t\treasonCode: reasonCode[highRisk.kind],\n\t\t\treasons: [highRisk.reason],\n\t\t\trequiresApproval: highRisk.risk === \"approval-required\",\n\t\t};\n\t}\n\tif (\n\t\tcommand &&\n\t\t(DESTRUCTIVE_CMD_RE.test(cleanCommand) \|\|\n\t\t\tGIT_MUTATE_CMD_RE.test(cleanCommand) \|\|\n\t\t\tPKG_MUTATE_CMD_RE.test(cleanCommand) \|\|\n\t\t\tRELEASE_DEPLOY_CMD_RE.test(cleanCommand) \|\|\n\t\t\tPYTHON_HIGH_IMPACT_RE.test(cleanCommand) \|\|\n\t\t\tREDIRECTION_RE.test(cleanCommand))\n\t) {\n\t\treturn {\n\t\t\trisk: \"approval-required\",\n\t\t\treasonCode: \"mutating_command\",\n\t\t\treasons: [\"Command executes a destructive, mutating, or publish operation\"],\n\t\t\trequiresApproval: true,\n\t\t};\n\t}\n\tif (\n\t\tinput.toolName &&\n\t\t![\"read_file\", \"search_web\", \"list_dir\", \"grep_search\", \"view_file\", \"memory\"].includes(input.toolName)\n\t) {\n\t\treturn {\n\t\t\trisk: \"scoped-write\",\n\t\t\treasonCode: \"generic_mutation\",\n\t\t\treasons: [\"Generic mutating operation or command\"],\n\t\t\trequiresApproval: false,\n\t\t};\n\t}\n\treturn {\n\t\trisk: \"read-only\",\n\t\treasonCode: \"default_read_only\",\n\t\treasons: [\"No mutating or high-risk patterns detected\"],\n\t\trequiresApproval: false,\n\t};\n}\n"]}
1	+ {"version":3,"file":"risk-classifier.js","sourceRoot":"","sources":["../../src/core/risk-classifier.ts"],"names":[],"mappings":"AAIA,MAAM,0BAA0B,GAC/B,mSAAmS,CAAC;AACrS,MAAM,qBAAqB,GAC1B,qNAAqN,CAAC;AACvN,MAAM,kBAAkB,GAAG,wCAAwC,CAAC;AACpE,MAAM,gBAAgB,GAAG,4DAA4D,CAAC;AACtF,MAAM,cAAc,GAAG,oCAAoC,CAAC;AAC5D,MAAM,kBAAkB,GACvB,kIAAkI,CAAC;AACpI,MAAM,sBAAsB,GAAG,kFAAkF,CAAC;AAClH,MAAM,gBAAgB,GAAG,uCAAuC,CAAC;AACjE,MAAM,uBAAuB,GAAG,+CAA+C,CAAC;AAChF,MAAM,uBAAuB,GAC5B,6IAA6I,CAAC;AAC/I,MAAM,WAAW,GAAG,6BAA6B,CAAC;AAClD,MAAM,kBAAkB,GAAG,qDAAqD,CAAC;AACjF,MAAM,YAAY,GAAG,sFAAsF,CAAC;AAC5G,MAAM,kBAAkB,GACvB,uGAAuG,CAAC;AACzG,MAAM,iBAAiB,GAAG,mDAAmD,CAAC;AAC9E,MAAM,iBAAiB,GAAG,kFAAkF,CAAC;AAC7G,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AACtD,MAAM,qBAAqB,GAC1B,2LAA2L,CAAC;AAC7L,MAAM,cAAc,GAAG,MAAM,CAAC;AAQ9B,SAAS,gBAAgB,CAAC,IAAY;IACrC,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IACnC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO;YACN,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,wDAAwD;SAChE,CAAC;IACH,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO;YACN,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,kDAAkD;SAC1D,CAAC;IACH,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO;YACN,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,qDAAqD;SAC7D,CAAC;IACH,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO;YACN,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,wDAAwD;SAChE,CAAC;IACH,CAAC;IACD,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO;YACN,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,2DAA2D;SACnE,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACzC,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO;YACN,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,cAAc;YAC1B,OAAO,EAAE,CAAC,4BAA4B,CAAC;SACvC,CAAC;IACH,CAAC;IACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChF,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACN,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,WAAW;gBACjB,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,qBAAqB;gBACjC,OAAO,EAAE,CAAC,qFAAqF,CAAC;aAChG,CAAC;QACH,CAAC;QACD,OAAO;YACN,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,oBAAoB;YAChC,OAAO,EAAE,CAAC,sEAAsE,CAAC;SACjF,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,UAAU,GAAuC;YACtD,OAAO,EAAE,oBAAoB;YAC7B,QAAQ,EAAE,kBAAkB;YAC5B,WAAW,EAAE,4BAA4B;YACzC,mBAAmB,EAAE,+BAA+B;YACpD,YAAY,EAAE,2BAA2B;SACzC,CAAC;QACF,OAAO;YACN,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI;YAClE,UAAU,EAAE,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG;YAC9F,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrC,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;SAC1B,CAAC;IACH,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO;YACN,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,qBAAqB;YACjC,OAAO,EAAE,CAAC,qFAAqF,CAAC;SAChG,CAAC;IACH,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO;YACN,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,qBAAqB;YACjC,OAAO,EAAE,CAAC,4CAA4C,CAAC;SACvD,CAAC;IACH,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO;YACN,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,oBAAoB;YAChC,OAAO,EAAE,CAAC,iDAAiD,CAAC;SAC5D,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO;YACN,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,uBAAuB;YACnC,OAAO,EAAE,CAAC,qEAAqE,CAAC;SAChF,CAAC;IACH,CAAC;IACD,OAAO;QACN,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,mBAAmB;QAC/B,OAAO,EAAE,CAAC,uEAAuE,CAAC;KAClF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACvD,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAA0B;IAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5C,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,aAAa,GAAG,GAAG,SAAS,IAAI,YAAY,EAAE,CAAC,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO;YACN,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,iBAAiB;YAC7B,OAAO,EAAE,CAAC,iBAAiB,CAAC;YAC5B,gBAAgB,EAAE,KAAK;SACvB,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;QACvC,OAAO;YACN,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,0BAA0B;YACtC,OAAO,EAAE,CAAC,wFAAwF,CAAC;YACnG,gBAAgB,EAAE,KAAK;SACvB,CAAC;IACH,CAAC;IACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1F,OAAO;YACN,IAAI,EAAE,WAAW;YACjB,UAAU,EAAE,qBAAqB;YACjC,OAAO,EAAE,CAAC,2DAA2D,CAAC;YACtE,gBAAgB,EAAE,KAAK;SACvB,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IAC/C,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,UAAU,GAAuC;YACtD,OAAO,EAAE,2BAA2B;YACpC,QAAQ,EAAE,yBAAyB;YACnC,WAAW,EAAE,uBAAuB;YACpC,mBAAmB,EAAE,6BAA6B;YAClD,YAAY,EAAE,iCAAiC;SAC/C,CAAC;QACF,OAAO;YACN,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrC,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1B,gBAAgB,EAAE,QAAQ,CAAC,IAAI,KAAK,mBAAmB;SACvD,CAAC;IACH,CAAC;IACD,IACC,OAAO;QACP,CAAC,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC;YACrC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC;YACpC,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC;YACpC,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC;YACxC,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC;YACxC,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAClC,CAAC;QACF,OAAO;YACN,IAAI,EAAE,mBAAmB;YACzB,UAAU,EAAE,kBAAkB;YAC9B,OAAO,EAAE,CAAC,gEAAgE,CAAC;YAC3E,gBAAgB,EAAE,IAAI;SACtB,CAAC;IACH,CAAC;IACD,IACC,KAAK,CAAC,QAAQ;QACd,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EACtG,CAAC;QACF,OAAO;YACN,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,kBAAkB;YAC9B,OAAO,EAAE,CAAC,uCAAuC,CAAC;YAClD,gBAAgB,EAAE,KAAK;SACvB,CAAC;IACH,CAAC;IACD,OAAO;QACN,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,mBAAmB;QAC/B,OAAO,EAAE,CAAC,4CAA4C,CAAC;QACvD,gBAAgB,EAAE,KAAK;KACvB,CAAC;AACH,CAAC","sourcesContent":["import type { OperationRisk, RiskAssessment, RiskAssessmentInput, RouteDecision } from \"./autonomy/contracts.ts\";\n\nexport type ModelRouterIntent = \"research\" \| \"modify\";\n\nconst EXPLICIT_MODIFY_REQUEST_RE =\n\t/^(?:can you\|could you\|please\|pls\|go ahead and\|let'?s\|i need you to\|we need to\|you should)\\s+.\\b(add\|apply\|build\|change\|commit\|create\|delete\|edit\|fix\|generate\|implement\|install\|modify\|patch\|remove\|rename\|replace\|run\|test\|update\|write\|publish\|release\|push\|deploy\|tag\|reset\|clean\|rewrite)\\b/i;\nconst READ_ONLY_QUESTION_RE =\n\t/^(?:(?:can you\|could you\|please\|pls\|go ahead and\|let'?s\|i need you to\|we need to\|you should)\\s+)?(?:how\|what\|why\|when\|where\|which\|who\|explain\|summarize\|compare\|describe\|list\|show\|search\|find\|view\|read\|locate)\\b/i;\nconst RELEASE_PUBLISH_RE = /\\b(publish\|release\|push\|deploy\|tag)\\b/i;\nconst SECURITY_AUTH_RE = /\\b(auth\|token\|credential\|credentials\|secret\|api[-_]key)\\b/i;\nconst DESTRUCTIVE_RE = /\\b(delete\|reset\|rm\\s+-rf\|clean)\\b/i;\nconst SELF_MOD_MUTATE_RE =\n\t/\\b(modify\|change\|write\|update\|edit\|delete\|add\|remove\|set)\\s+.\\b(skills\|prompts\|settings\|tools\|behavior)\\b\|self[-_]modification/i;\nconst ARCHITECTURE_MUTATE_RE = /\\b(rewrite\|redesign\|change\|modify\|rearchitect)\\s+.\\b(architecture\|architect)\\b/i;\nconst PLANNING_CORE_RE = /\\b(plan\|planning\|roadmap\|strategy)\\b/i;\nconst PLANNING_DESIGN_WORD_RE = /\\b(design\|architect\\w\|structure\|approach)\\b/i;\nconst PLANNING_PROSPECTIVE_RE =\n\t/\\b(how (?:should\|would\|do we\|can we)\|what(?:'s\| is) the (?:best\|cleanest\|right)\|propose\|draft\|come up with\|figure out\|decide (?:on\|how))\\b/i;\nconst REFACTOR_RE = /\\b(refactor\|refactoring)\\b/i;\nconst TEST_VALIDATION_RE = /\\b(test\|testing\|validation\|lint\|vitest\|jest\|run)\\b/i;\nconst IMPLEMENT_RE = /\\b(implement\|fix\|apply\|change\|update\|create\|write\|generate\|modify\|edit\|patch\|add)\\b/i;\nconst DESTRUCTIVE_CMD_RE =\n\t/\\b(rm(\\s+-r\|\\s+-f\|\\s+-rf\|\\s+-fr)?\|mv\|cp\|chmod\|chown\|install)\\b\|>\\s\\/dev\\/(sda\|hda\|vda)\|\\b(dd\\s+if=)/i;\nconst GIT_MUTATE_CMD_RE = /\\bgit\\s+(commit\|push\|reset\|clean\|stash\|rebase)\\b/i;\nconst PKG_MUTATE_CMD_RE = /\\b(npm\|pnpm\|yarn\|bun)\\s+(install\|i\|update\|up\|publish\|run\|remove\|rm\|uninstall)\\b/i;\nconst RELEASE_DEPLOY_CMD_RE = /\\b(release\|deploy)\\b/i;\nconst PYTHON_HIGH_IMPACT_RE =\n\t/\\b(?:shutil\\.(?:rmtree\|move\|copy\|copy2\|copytree)\|os\\.(?:remove\|unlink\|rmdir\|removedirs\|system)\|subprocess\\.(?:run\|call\|check_call\|check_output\|Popen)\|Path\$[^)]\$\\.(?:unlink\|rmdir))\\b/i;\nconst REDIRECTION_RE = /[<>]/;\n\ninterface RiskSignal {\n\trisk: OperationRisk;\n\tkind: \"release\" \| \"security\" \| \"destructive\" \| \"self-modification\" \| \"architecture\";\n\treason: string;\n}\n\nfunction isPlanningPrompt(text: string): boolean {\n\treturn PLANNING_CORE_RE.test(text) \|\| (PLANNING_DESIGN_WORD_RE.test(text) && PLANNING_PROSPECTIVE_RE.test(text));\n}\n\nfunction highRiskSignal(text: string): RiskSignal \| undefined {\n\tif (RELEASE_PUBLISH_RE.test(text)) {\n\t\treturn {\n\t\t\trisk: \"approval-required\",\n\t\t\tkind: \"release\",\n\t\t\treason: \"Operation mentions releasing, publishing, or deploying\",\n\t\t};\n\t}\n\tif (SECURITY_AUTH_RE.test(text)) {\n\t\treturn {\n\t\t\trisk: \"approval-required\",\n\t\t\tkind: \"security\",\n\t\t\treason: \"Operation mentions authentication or credentials\",\n\t\t};\n\t}\n\tif (DESTRUCTIVE_RE.test(text)) {\n\t\treturn {\n\t\t\trisk: \"approval-required\",\n\t\t\tkind: \"destructive\",\n\t\t\treason: \"Operation involves deleting, resetting, or cleaning\",\n\t\t};\n\t}\n\tif (SELF_MOD_MUTATE_RE.test(text)) {\n\t\treturn {\n\t\t\trisk: \"approval-required\",\n\t\t\tkind: \"self-modification\",\n\t\t\treason: \"Operation modifies settings, tools, skills, or prompts\",\n\t\t};\n\t}\n\tif (ARCHITECTURE_MUTATE_RE.test(text)) {\n\t\treturn {\n\t\t\trisk: \"high-impact\",\n\t\t\tkind: \"architecture\",\n\t\t\treason: \"Operation mentions rewriting or rearchitecting core parts\",\n\t\t};\n\t}\n\treturn undefined;\n}\n\nfunction stripSingleQuotes(command: string): string {\n\treturn command.replace(/'[^']*'/g, \"''\");\n}\n\nexport function classifyModelRouterRoute(prompt: string): RouteDecision {\n\tconst text = prompt.trim();\n\tif (!text) {\n\t\treturn {\n\t\t\ttier: \"cheap\",\n\t\t\trisk: \"read-only\",\n\t\t\tconfidence: 0.1,\n\t\t\treasonCode: \"empty_prompt\",\n\t\t\treasons: [\"Empty or whitespace prompt\"],\n\t\t};\n\t}\n\tif (READ_ONLY_QUESTION_RE.test(text) && !EXPLICIT_MODIFY_REQUEST_RE.test(text)) {\n\t\tif (isPlanningPrompt(text)) {\n\t\t\treturn {\n\t\t\t\ttier: \"medium\",\n\t\t\t\trisk: \"read-only\",\n\t\t\t\tconfidence: 0.75,\n\t\t\t\treasonCode: \"planning_min_medium\",\n\t\t\t\treasons: [\"Planning/design prompts never route cheap by default; a judge may deem them trivial\"],\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\ttier: \"cheap\",\n\t\t\trisk: \"read-only\",\n\t\t\tconfidence: 0.9,\n\t\t\treasonCode: \"read_only_question\",\n\t\t\treasons: [\"Prompt asks a question or requests an explanation, search, or lookup\"],\n\t\t};\n\t}\n\tconst highRisk = highRiskSignal(text);\n\tif (highRisk) {\n\t\tconst reasonCode: Record<RiskSignal[\"kind\"], string> = {\n\t\t\trelease: \"release_or_publish\",\n\t\t\tsecurity: \"security_or_auth\",\n\t\t\tdestructive: \"destructive_or_git_history\",\n\t\t\t\"self-modification\": \"settings_or_self_modification\",\n\t\t\tarchitecture: \"architecture_or_ambiguous\",\n\t\t};\n\t\treturn {\n\t\t\ttier: \"expensive\",\n\t\t\trisk: highRisk.kind === \"security\" ? \"high-impact\" : highRisk.risk,\n\t\t\tconfidence: highRisk.kind === \"security\" ? 0.95 : highRisk.kind === \"destructive\" ? 0.85 : 0.9,\n\t\t\treasonCode: reasonCode[highRisk.kind],\n\t\t\treasons: [highRisk.reason],\n\t\t};\n\t}\n\tif (isPlanningPrompt(text)) {\n\t\treturn {\n\t\t\ttier: \"medium\",\n\t\t\trisk: \"read-only\",\n\t\t\tconfidence: 0.75,\n\t\t\treasonCode: \"planning_min_medium\",\n\t\t\treasons: [\"Planning/design prompts never route cheap by default; a judge may deem them trivial\"],\n\t\t};\n\t}\n\tif (REFACTOR_RE.test(text)) {\n\t\treturn {\n\t\t\ttier: \"medium\",\n\t\t\trisk: \"scoped-write\",\n\t\t\tconfidence: 0.8,\n\t\t\treasonCode: \"mechanical_refactor\",\n\t\t\treasons: [\"Prompt mentions refactoring code structure\"],\n\t\t};\n\t}\n\tif (TEST_VALIDATION_RE.test(text)) {\n\t\treturn {\n\t\t\ttier: \"medium\",\n\t\t\trisk: \"scoped-write\",\n\t\t\tconfidence: 0.8,\n\t\t\treasonCode: \"test_or_validation\",\n\t\t\treasons: [\"Prompt mentions testing, validation, or linting\"],\n\t\t};\n\t}\n\tif (IMPLEMENT_RE.test(text)) {\n\t\treturn {\n\t\t\ttier: \"medium\",\n\t\t\trisk: \"scoped-write\",\n\t\t\tconfidence: 0.85,\n\t\t\treasonCode: \"normal_implementation\",\n\t\t\treasons: [\"Prompt mentions implementing, updating, creating, or modifying code\"],\n\t\t};\n\t}\n\treturn {\n\t\ttier: \"cheap\",\n\t\trisk: \"read-only\",\n\t\tconfidence: 0.5,\n\t\treasonCode: \"default_read_only\",\n\t\treasons: [\"No explicit implementation, destructive, or release patterns detected\"],\n\t};\n}\n\nexport function classifyModelRouterIntent(prompt: string): ModelRouterIntent {\n\treturn classifyModelRouterRoute(prompt).tier === \"cheap\" ? \"research\" : \"modify\";\n}\n\nexport function assessOperationRisk(input: RiskAssessmentInput): RiskAssessment {\n\tconst operation = input.operation.trim();\n\tconst command = input.command?.trim() ?? \"\";\n\tconst cleanCommand = stripSingleQuotes(command);\n\tconst fullText = `${operation} ${command}`.trim();\n\tconst cleanFullText = `${operation} ${cleanCommand}`.trim();\n\tif (!fullText) {\n\t\treturn {\n\t\t\trisk: \"read-only\",\n\t\t\treasonCode: \"empty_operation\",\n\t\t\treasons: [\"Empty operation\"],\n\t\t\trequiresApproval: false,\n\t\t};\n\t}\n\tif (input.toolName === \"secret_store\") {\n\t\treturn {\n\t\t\trisk: \"scoped-write\",\n\t\t\treasonCode: \"native_owner_secret_flow\",\n\t\t\treasons: [\"Native secret-store mutations require model-blind owner input and in-tool confirmation\"],\n\t\t\trequiresApproval: false,\n\t\t};\n\t}\n\tif (READ_ONLY_QUESTION_RE.test(operation) && !EXPLICIT_MODIFY_REQUEST_RE.test(operation)) {\n\t\treturn {\n\t\t\trisk: \"read-only\",\n\t\t\treasonCode: \"read_only_operation\",\n\t\t\treasons: [\"Operation is explicitly read-only (list/show/read/search)\"],\n\t\t\trequiresApproval: false,\n\t\t};\n\t}\n\tconst highRisk = highRiskSignal(cleanFullText);\n\tif (highRisk) {\n\t\tconst reasonCode: Record<RiskSignal[\"kind\"], string> = {\n\t\t\trelease: \"release_publish_operation\",\n\t\t\tsecurity: \"security_auth_operation\",\n\t\t\tdestructive: \"destructive_operation\",\n\t\t\t\"self-modification\": \"self_modification_operation\",\n\t\t\tarchitecture: \"architecture_mutation_operation\",\n\t\t};\n\t\treturn {\n\t\t\trisk: highRisk.risk,\n\t\t\treasonCode: reasonCode[highRisk.kind],\n\t\t\treasons: [highRisk.reason],\n\t\t\trequiresApproval: highRisk.risk === \"approval-required\",\n\t\t};\n\t}\n\tif (\n\t\tcommand &&\n\t\t(DESTRUCTIVE_CMD_RE.test(cleanCommand) \|\|\n\t\t\tGIT_MUTATE_CMD_RE.test(cleanCommand) \|\|\n\t\t\tPKG_MUTATE_CMD_RE.test(cleanCommand) \|\|\n\t\t\tRELEASE_DEPLOY_CMD_RE.test(cleanCommand) \|\|\n\t\t\tPYTHON_HIGH_IMPACT_RE.test(cleanCommand) \|\|\n\t\t\tREDIRECTION_RE.test(cleanCommand))\n\t) {\n\t\treturn {\n\t\t\trisk: \"approval-required\",\n\t\t\treasonCode: \"mutating_command\",\n\t\t\treasons: [\"Command executes a destructive, mutating, or publish operation\"],\n\t\t\trequiresApproval: true,\n\t\t};\n\t}\n\tif (\n\t\tinput.toolName &&\n\t\t![\"read_file\", \"search_web\", \"list_dir\", \"grep_search\", \"view_file\", \"memory\"].includes(input.toolName)\n\t) {\n\t\treturn {\n\t\t\trisk: \"scoped-write\",\n\t\t\treasonCode: \"generic_mutation\",\n\t\t\treasons: [\"Generic mutating operation or command\"],\n\t\t\trequiresApproval: false,\n\t\t};\n\t}\n\treturn {\n\t\trisk: \"read-only\",\n\t\treasonCode: \"default_read_only\",\n\t\treasons: [\"No mutating or high-risk patterns detected\"],\n\t\trequiresApproval: false,\n\t};\n}\n"]}

package/dist/core/runtime-builder.d.ts CHANGED Viewed

@@ -41,6 +41,7 @@ import type { LaneRecord } from "./autonomy/lane-tracker.ts";
 import type { ArtifactStore } from "./context/context-artifacts.ts";
 import type { MemoryPromptInclusionReport, MemoryRetrievalDiagnostics } from "./context/memory-diagnostics.ts";
 import type { ContextGcReport } from "./context-gc.ts";
+import type { WorkerAgentControlPort } from "./delegation/worker-agent-control.ts";
 import type { WorkerDelegationRequest } from "./delegation/worker-delegation-request.ts";
 import type { ExtensionImportAuthority } from "./extension-import-authority.ts";
 import { type ContextUsage, type Extension, type ExtensionCommandContextActions, type ExtensionErrorListener, ExtensionRunner, type ExtensionUIContext, type ShutdownHandler, type ToolDefinition, type ToolInfo } from "./extensions/index.ts";
@@ -58,6 +59,7 @@ import type { ResourceLoader } from "./resource-loader.ts";
 import type { SessionImageStore } from "./session-image-store.ts";
 import { type ResourceProfileFilterSettings, type SettingsManager } from "./settings-manager.ts";
 import type { TaskStepsState } from "./tasks/task-state.ts";
+import { type ToolTaskDependencies } from "./tools/tool-task.ts";
 /**
  * Is `toolCallId` a real, answered tool call on `sessionManager`'s active branch? A
  * toolCallId is "real" iff a toolResult message on that branch responded to it -- the same
@@ -72,6 +74,11 @@ export declare function hasAnsweredToolCallOnBranch(sessionManager: SessionManag
  * production `getOpenTaskSteps` wiring below remains directly testable without another filter.
  */
 export declare function deriveOpenTaskStepRefs(taskStepsState: TaskStepsState | undefined): OpenTaskStepRef[];
+/** Bind goal-selected requirement identity as runtime metadata, outside the model-facing delegate schema. */
+export declare function createGoalWorkerDelegationRequest(args: {
+    requirementId: string;
+    instructions: string;
+}): WorkerDelegationRequest;
 export interface RuntimeBuilderDeps {
     /** Live agent — the snapshot/doctor read and restore its `state.tools` / `state.systemPrompt`. */
     getAgent(): Agent;
@@ -127,7 +134,7 @@ export interface RuntimeBuilderDeps {
     restoreProfileFilterReloadSnapshot(snapshot: ProfileFilterReloadSnapshot): void;
     /** Currently-active tool names (reads agent.state.tools; the pre-filter fallback for a rebuild). */
     getActiveToolNames(): string[];
-    /** Apply the recomputed active set (capability filter + companion auto-activation live here). */
+    /** Apply the recomputed active set (capability filter + required artifact/delegation companions live here). */
     setActiveToolsByName(toolNames: string[]): void;
     /** Normalize a tool's prompt snippet / guidelines through the system-prompt builder. */
     normalizePromptSnippet(text: string | undefined): string | undefined;
@@ -144,6 +151,8 @@ export interface RuntimeBuilderDeps {
     notifyExtensionsChanged(): void;
     /** Session-scoped tool-output artifact store for artifact-producing tools and artifact_retrieve (gated on the profile). */
     getToolArtifactStore(): ArtifactStore;
+    /** Session-owned slow-tool registry. Optional only for narrow RuntimeBuilder test/embedding seams. */
+    getToolTaskDependencies?(): ToolTaskDependencies;
     /** Lazily resolve durable image storage only for a persisted/configured session. */
     getSessionImageStore(): Pick<SessionImageStore, "retainContent"> | undefined;
     /** Live memory manager — its provider tools join the registry. */
@@ -175,6 +184,7 @@ export interface RuntimeBuilderDeps {
         started: true;
         record: LaneRecord;
     };
+    workerAgentControl?: WorkerAgentControlPort;
     getOrchestrationProfileCatalog(): Array<{
         profileId: string;
         role: string;