@cerbur/clutch-dsh-worktree 0.1.21 → 0.1.22

package/lib/host/worktree-permission-manager.js

@@ -1,115 +0,0 @@
-import { providerError } from '../provider/types.js';
-import { boundSessionCwdMatchesWorktree } from '../provider/worktree-path.js';
-function unverified() {
-    return { status: 'unverified', retryable: true };
-}
-function aggregateNormalization(sessionIds, results) {
-    const hasUnverified = results.some((result) => result.status === 'unverified');
-    const hasNormalized = results.some((result) => result.status === 'normalized-workspace-write');
-    return {
-        status: hasUnverified
-            ? 'unverified'
-            : hasNormalized
-                ? 'normalized-workspace-write'
-                : 'no-op',
-        sessionIds,
-        retryable: results.some((result) => result.retryable),
-    };
-}
-/**
- * Compose the browser-facing permission operation with authoritative Worktree/Session
- * facts. The caller cannot turn this into a general Session permission endpoint because
- * the Host re-checks the active relation on every invocation.
- */
-export function createWorktreePermissionManager(options) {
-    return {
-        async ensureWorktreePermission(input) {
-            const workspace = await options.dsh.getWorkspace(input.workspaceId);
-            if (workspace === undefined) {
-                throw providerError('WORKSPACE_NOT_FOUND', `Workspace "${input.workspaceId}" was not found`, { workspaceId: input.workspaceId });
-            }
-            const [worktrees, bindings] = await Promise.all([
-                options.manager.listWorktrees({ workspaceId: input.workspaceId }),
-                options.manager.listBindings({ workspaceId: input.workspaceId }),
-            ]);
-            const worktree = worktrees.find((candidate) => candidate.workspaceId === input.workspaceId &&
-                candidate.worktreeId === input.worktreeId);
-            if (worktree === undefined) {
-                throw providerError('WORKTREE_NOT_FOUND', `Worktree "${input.worktreeId}" was not found`, { workspaceId: input.workspaceId, worktreeId: input.worktreeId });
-            }
-            if ((worktree.status !== 'active' && worktree.diskCleanup === 'completed') ||
-                worktree.health === 'repair' ||
-                worktree.health === 'recovery-needed') {
-                throw providerError('WORKTREE_REMOVED', `Worktree "${input.worktreeId}" is not active`, { workspaceId: input.workspaceId, worktreeId: input.worktreeId });
-            }
-            const binding = bindings.find((candidate) => candidate.workspaceId === input.workspaceId &&
-                candidate.worktreeId === input.worktreeId &&
-                candidate.sessionId === input.sessionId &&
-                candidate.status === 'active');
-            if (binding === undefined) {
-                throw providerError('WORKTREE_PERMISSION_BINDING_REQUIRED', `Session "${input.sessionId}" is not actively bound to this Worktree`, {
-                    workspaceId: input.workspaceId,
-                    worktreeId: input.worktreeId,
-                    sessionId: input.sessionId,
-                });
-            }
-            const session = await options.dsh.getSession(input.sessionId);
-            if (session === undefined) {
-                throw providerError('SESSION_NOT_FOUND', `Session "${input.sessionId}" was not found`, {
-                    sessionId: input.sessionId,
-                });
-            }
-            const sessionCwdMatches = await boundSessionCwdMatchesWorktree(session.cwd, worktree);
-            if ((session.workspaceId !== undefined && session.workspaceId !== workspace.workspaceId) ||
-                !sessionCwdMatches) {
-                throw providerError('SESSION_CWD_MISMATCH', `Session "${input.sessionId}" does not belong to this Worktree`, {
-                    workspaceId: input.workspaceId,
-                    worktreeId: input.worktreeId,
-                    sessionId: input.sessionId,
-                });
-            }
-            if (options.permissions === undefined)
-                return unverified();
-            return options.permissions.ensure({ ...input, binding: 'active' });
-        },
-        async normalizeDetachedWorktreePermissions(input) {
-            const workspace = await options.dsh.getWorkspace(input.workspaceId);
-            if (workspace === undefined) {
-                throw providerError('WORKSPACE_NOT_FOUND', `Workspace "${input.workspaceId}" was not found`, { workspaceId: input.workspaceId });
-            }
-            const [worktrees, bindings] = await Promise.all([
-                options.manager.listWorktrees({ workspaceId: input.workspaceId }),
-                options.manager.listBindings({ workspaceId: input.workspaceId }),
-            ]);
-            const worktree = worktrees.find((candidate) => candidate.workspaceId === input.workspaceId &&
-                candidate.worktreeId === input.worktreeId);
-            if (worktree === undefined) {
-                throw providerError('WORKTREE_NOT_FOUND', `Worktree "${input.worktreeId}" was not found`, { workspaceId: input.workspaceId, worktreeId: input.worktreeId });
-            }
-            if (worktree.status !== 'removed' || worktree.diskCleanup !== 'completed') {
-                throw providerError('WORKTREE_REMOVED', `Worktree "${input.worktreeId}" is not detached`, { workspaceId: input.workspaceId, worktreeId: input.worktreeId });
-            }
-            const detachedBindings = bindings.filter((binding) => binding.workspaceId === input.workspaceId &&
-                binding.worktreeId === input.worktreeId &&
-                binding.status === 'detached');
-            const sessionIds = detachedBindings.map((binding) => binding.sessionId);
-            if (sessionIds.length === 0) {
-                return { status: 'no-op', sessionIds, retryable: false };
-            }
-            if (options.permissions === undefined) {
-                return { ...unverified(), sessionIds };
-            }
-            const results = [];
-            for (const binding of detachedBindings) {
-                results.push(await options.permissions.normalize({
-                    workspaceId: input.workspaceId,
-                    worktreeId: input.worktreeId,
-                    sessionId: binding.sessionId,
-                    binding: 'detached',
-                }));
-            }
-            return aggregateNormalization(sessionIds, results);
-        },
-    };
-}
-//# sourceMappingURL=worktree-permission-manager.js.map

package/lib/host/worktree-permission-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"worktree-permission-manager.js","sourceRoot":"","sources":["../../src/host/worktree-permission-manager.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAQ9E,SAAS,UAAU;IACjB,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,sBAAsB,CAC7B,UAA6B,EAC7B,OAA4C;IAE5C,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC;IAC/E,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAChC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,4BAA4B,CAC3D,CAAC;IACF,OAAO;QACL,MAAM,EAAE,aAAa;YACnB,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,aAAa;gBACb,CAAC,CAAC,4BAA4B;gBAC9B,CAAC,CAAC,OAAO;QACb,UAAU;QACV,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;KACtD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,OAAyC;IAEzC,OAAO;QACL,KAAK,CAAC,wBAAwB,CAAC,KAAgC;YAC7D,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACpE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,aAAa,CACjB,qBAAqB,EACrB,cAAc,KAAK,CAAC,WAAW,iBAAiB,EAChD,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CACnC,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC9C,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;gBACjE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;aACjE,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAC7B,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;gBAC3C,SAAS,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAC5C,CAAC;YACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,aAAa,CACjB,oBAAoB,EACpB,aAAa,KAAK,CAAC,UAAU,iBAAiB,EAC9C,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CACjE,CAAC;YACJ,CAAC;YACD,IACE,CAAC,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,CAAC;gBACtE,QAAQ,CAAC,MAAM,KAAK,QAAQ;gBAC5B,QAAQ,CAAC,MAAM,KAAK,iBAAiB,EACrC,CAAC;gBACD,MAAM,aAAa,CACjB,kBAAkB,EAClB,aAAa,KAAK,CAAC,UAAU,iBAAiB,EAC9C,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAC3B,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;gBAC3C,SAAS,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;gBACzC,SAAS,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;gBACvC,SAAS,CAAC,MAAM,KAAK,QAAQ,CAChC,CAAC;YACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,aAAa,CACjB,sCAAsC,EACtC,YAAY,KAAK,CAAC,SAAS,0CAA0C,EACrE;oBACE,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CACF,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC9D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,aAAa,CAAC,mBAAmB,EAAE,YAAY,KAAK,CAAC,SAAS,iBAAiB,EAAE;oBACrF,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,iBAAiB,GAAG,MAAM,8BAA8B,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACtF,IACE,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,CAAC;gBACpF,CAAC,iBAAiB,EAClB,CAAC;gBACD,MAAM,aAAa,CACjB,sBAAsB,EACtB,YAAY,KAAK,CAAC,SAAS,oCAAoC,EAC/D;oBACE,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CACF,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;gBAAE,OAAO,UAAU,EAAE,CAAC;YAC3D,OAAO,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,KAAK,CAAC,oCAAoC,CACxC,KAA6C;YAE7C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACpE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,aAAa,CACjB,qBAAqB,EACrB,cAAc,KAAK,CAAC,WAAW,iBAAiB,EAChD,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CACnC,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC9C,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;gBACjE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;aACjE,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAC7B,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;gBAC3C,SAAS,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAC5C,CAAC;YACF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,aAAa,CACjB,oBAAoB,EACpB,aAAa,KAAK,CAAC,UAAU,iBAAiB,EAC9C,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CACjE,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;gBAC1E,MAAM,aAAa,CACjB,kBAAkB,EAClB,aAAa,KAAK,CAAC,UAAU,mBAAmB,EAChD,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CACjE,CAAC;YACJ,CAAC;YAED,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CACtC,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;gBACzC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;gBACvC,OAAO,CAAC,MAAM,KAAK,UAAU,CAChC,CAAC;YACF,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACxE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC3D,CAAC;YACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO,EAAE,GAAG,UAAU,EAAE,EAAE,UAAU,EAAE,CAAC;YACzC,CAAC;YAED,MAAM,OAAO,GAA+B,EAAE,CAAC;YAC/C,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;gBACvC,OAAO,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC;oBAC/C,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,OAAO,EAAE,UAAU;iBACpB,CAAC,CAAC,CAAC;YACN,CAAC;YACD,OAAO,sBAAsB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/lib/host/worktree-permission.d.ts

@@ -1,51 +0,0 @@
-import { type WorktreePermissionApprovalPolicy, type WorktreePermissionPort, type WorktreePermissionSandboxMode } from '../manage/worktree-permission.js';
-interface PermissionEvent {
-    readonly type: string;
-    readonly data?: unknown;
-}
-interface PermissionSession {
-    readonly id: string;
-    readonly events?: readonly PermissionEvent[];
-    snapshotEvents?(): readonly PermissionEvent[];
-    append(type: string, data: unknown): unknown;
-}
-interface PermissionPresetSpec {
-    readonly sandbox: WorktreePermissionSandboxMode;
-    readonly approval: WorktreePermissionApprovalPolicy;
-}
-interface PermissionPresetService {
-    readonly names: readonly string[];
-    current(sessionOrEvents: unknown): string;
-    resolve(name: string): PermissionPresetSpec;
-    set(session: PermissionSession, name: string): void;
-}
-interface SandboxPolicyService {
-    readonly defaultMode?: WorktreePermissionSandboxMode;
-    resolve?(request: {
-        session: PermissionSession;
-    }): {
-        readonly mode: WorktreePermissionSandboxMode;
-    };
-}
-interface ApprovalService {
-    readonly config: {
-        readonly policy?: WorktreePermissionApprovalPolicy;
-    };
-    overrideOf(session: PermissionSession): WorktreePermissionApprovalPolicy | undefined;
-}
-export interface DshWorktreePermissionAdapterOptions {
-    readonly sessions: {
-        get(sessionId: string): unknown;
-    };
-    readonly permissionPresets?: PermissionPresetService;
-    readonly sandboxPolicy?: SandboxPolicyService;
-    readonly approval?: ApprovalService;
-}
-/**
- * Adapt the optional public DSH permission services to the Worktree Manager
- * port. No DSH package is imported at runtime, so an older bundle without the
- * optional service can remain loadable and report an unverified capability.
- */
-export declare function createDshWorktreePermissionAdapter(options: DshWorktreePermissionAdapterOptions): WorktreePermissionPort;
-export {};
-//# sourceMappingURL=worktree-permission.d.ts.map

package/lib/host/worktree-permission.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"worktree-permission.d.ts","sourceRoot":"","sources":["../../src/host/worktree-permission.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,gCAAgC,EAErC,KAAK,sBAAsB,EAG3B,KAAK,6BAA6B,EACnC,MAAM,kCAAkC,CAAC;AAE1C,UAAU,eAAe;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,UAAU,iBAAiB;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,cAAc,CAAC,IAAI,SAAS,eAAe,EAAE,CAAC;IAC9C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;CAC9C;AAED,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;CACrD;AAED,UAAU,uBAAuB;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,OAAO,CAAC,eAAe,EAAE,OAAO,GAAG,MAAM,CAAC;IAC1C,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAAC;IAC5C,GAAG,CAAC,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrD;AAED,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,6BAA6B,CAAC;IACrD,OAAO,CAAC,CAAC,OAAO,EAAE;QAAE,OAAO,EAAE,iBAAiB,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAA;KAAE,CAAC;CACrG;AAED,UAAU,eAAe;IACvB,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,gCAAgC,CAAA;KAAE,CAAC;IACxE,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,gCAAgC,GAAG,SAAS,CAAC;CACtF;AAED,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,QAAQ,EAAE;QACjB,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;KACjC,CAAC;IACF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;IACrD,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;CACrC;AA+ID;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,mCAAmC,GAC3C,sBAAsB,CA2HxB"}

package/lib/host/worktree-permission.js

@@ -1,251 +0,0 @@
-import { decideWorktreePermission, WORKTREE_FULL_ACCESS_PRESET, } from '../manage/worktree-permission.js';
-const WORKSPACE_WRITE_PRESET = 'workspace-write';
-function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-function stringValue(value) {
-    return typeof value === 'string' ? value : undefined;
-}
-function lastEventValue(events, type, key) {
-    for (let index = events.length - 1; index >= 0; index -= 1) {
-        const event = events[index];
-        if (event.type !== type || !isRecord(event.data))
-            continue;
-        const value = stringValue(event.data[key]);
-        if (value !== undefined)
-            return value;
-    }
-    return undefined;
-}
-function hasFullThenRestriction(events) {
-    let fullSeen = false;
-    for (const event of events) {
-        if (event.type === 'sandbox/mode' && isRecord(event.data)) {
-            if (event.data.mode === 'danger-full-access')
-                fullSeen = true;
-            else if (fullSeen && (event.data.mode === 'workspace-write' || event.data.mode === 'read-only'))
-                return true;
-        }
-        if (event.type !== 'permission/preset' || !isRecord(event.data))
-            continue;
-        const preset = stringValue(event.data.preset);
-        if (preset === WORKTREE_FULL_ACCESS_PRESET) {
-            fullSeen = true;
-        }
-        else if (fullSeen && preset !== undefined) {
-            return true;
-        }
-    }
-    return false;
-}
-function resolveCurrentPreset(permissionPresets, session, events) {
-    if (permissionPresets === undefined || typeof permissionPresets.current !== 'function') {
-        return undefined;
-    }
-    try {
-        return permissionPresets.current(session);
-    }
-    catch {
-        try {
-            return permissionPresets.current(events);
-        }
-        catch {
-            return undefined;
-        }
-    }
-}
-function readCurrentState(session, permissionPresets, sandboxPolicy, pluginApplied, approval) {
-    const events = getSessionEvents(session);
-    const preset = resolveCurrentPreset(permissionPresets, session, events);
-    let presetSpec;
-    if (preset !== undefined && preset !== 'custom') {
-        try {
-            presetSpec = permissionPresets?.resolve(preset);
-        }
-        catch {
-            presetSpec = undefined;
-        }
-    }
-    let sandboxMode = lastEventValue(events, 'sandbox/mode', 'mode') ??
-        presetSpec?.sandbox ??
-        sandboxPolicy?.defaultMode;
-    let approvalPolicy = lastEventValue(events, 'approval/policy', 'policy') ??
-        presetSpec?.approval;
-    // When available these are the actual consumers of the durable knob events,
-    // not merely the configured preset (which may no longer match the Session).
-    if (typeof sandboxPolicy?.resolve === 'function' && typeof approval?.overrideOf === 'function') {
-        try {
-            sandboxMode = sandboxPolicy.resolve({ session }).mode;
-            approvalPolicy = approval.overrideOf(session) ?? approval.config.policy ?? 'ask';
-            if (!['read-only', 'workspace-write', 'danger-full-access'].includes(sandboxMode) ||
-                !['ask', 'never'].includes(approvalPolicy))
-                throw new Error('Unsupported native permission state');
-        }
-        catch {
-            return { ...(preset === undefined ? {} : { preset }), explicitUserOverride: false, unavailable: true };
-        }
-    }
-    const pluginChangedThisRuntime = pluginApplied.has(session.id);
-    const currentIsRestricted = pluginChangedThisRuntime && sandboxMode !== 'danger-full-access' ||
-        hasFullThenRestriction(events) ||
-        (preset !== undefined && sandboxMode === 'read-only') ||
-        (preset !== undefined &&
-            preset !== WORKSPACE_WRITE_PRESET &&
-            preset !== WORKTREE_FULL_ACCESS_PRESET &&
-            preset !== 'danger-full-access' &&
-            !(preset === 'custom' && sandboxMode === 'danger-full-access'));
-    return {
-        ...(preset === undefined ? {} : { preset }),
-        ...(sandboxMode === undefined ? {} : { sandboxMode }),
-        ...(approvalPolicy === undefined ? {} : { approvalPolicy }),
-        explicitUserOverride: currentIsRestricted,
-    };
-}
-function resultFromCurrent(status, current, retryable) {
-    return {
-        status,
-        ...(current.preset === undefined ? {} : { preset: current.preset }),
-        ...(current.sandboxMode === undefined ? {} : { sandboxMode: current.sandboxMode }),
-        ...(current.approvalPolicy === undefined ? {} : { approvalPolicy: current.approvalPolicy }),
-        retryable,
-    };
-}
-function serviceAvailable(permissionPresets) {
-    return (permissionPresets !== undefined &&
-        Array.isArray(permissionPresets.names) &&
-        typeof permissionPresets.current === 'function' &&
-        typeof permissionPresets.resolve === 'function' &&
-        typeof permissionPresets.set === 'function');
-}
-/**
- * Adapt the optional public DSH permission services to the Worktree Manager
- * port. No DSH package is imported at runtime, so an older bundle without the
- * optional service can remain loadable and report an unverified capability.
- */
-export function createDshWorktreePermissionAdapter(options) {
-    const pluginApplied = new Set();
-    const apply = (input, binding) => {
-        const session = options.sessions.get(input.sessionId);
-        if (!isPermissionSession(session)) {
-            return { status: 'unverified', retryable: true };
-        }
-        const permissionPresets = options.permissionPresets;
-        const sandboxPolicy = options.sandboxPolicy;
-        const approval = options.approval;
-        const readState = () => readCurrentState(session, permissionPresets, sandboxPolicy, pluginApplied, approval);
-        const current = readState();
-        const hasService = serviceAvailable(permissionPresets);
-        if (current.unavailable || (hasService && current.preset === undefined)) {
-            return resultFromCurrent('unverified', current, true);
-        }
-        const sessionPolicyAvailable = hasService && typeof sandboxPolicy?.resolve === 'function' &&
-            typeof approval?.overrideOf === 'function' && current.sandboxMode !== undefined &&
-            current.approvalPolicy !== undefined;
-        const namedFullAvailable = hasService && permissionPresets.names.includes(WORKTREE_FULL_ACCESS_PRESET);
-        const verifiedResult = (status, mode, retryable = false) => {
-            const next = readState();
-            const verified = !next.unavailable && next.sandboxMode === mode && next.approvalPolicy === 'ask';
-            return resultFromCurrent(verified ? status : 'unverified', next, !verified || retryable);
-        };
-        const decision = decideWorktreePermission({
-            binding,
-            current,
-            capability: {
-                permissionService: hasService,
-                fullPreset: namedFullAvailable,
-                sessionPolicy: sessionPolicyAvailable,
-                workspaceWrite: hasService && permissionPresets.names.includes(WORKSPACE_WRITE_PRESET),
-            },
-        });
-        if (binding === 'active' &&
-            decision.kind === 'apply-full' &&
-            input.confirmed !== true) {
-            return { status: 'confirmation-required', retryable: false };
-        }
-        switch (decision.kind) {
-            case 'apply-full':
-                if (!hasService)
-                    return resultFromCurrent('unverified', current, true);
-                if (namedFullAvailable) {
-                    const spec = permissionPresets.resolve(decision.preset);
-                    if (spec.sandbox !== 'danger-full-access' || spec.approval !== 'ask') {
-                        return resultFromCurrent('unverified', current, true);
-                    }
-                    permissionPresets.set(session, decision.preset);
-                }
-                else if (sessionPolicyAvailable) {
-                    // Same durable path as native setApprovalPolicy/setSandboxMode. Set
-                    // approval first: a failed write must not widen filesystem access.
-                    // No fabricated preset identity or native provider mutation.
-                    session.append('approval/policy', { policy: 'ask' });
-                    session.append('sandbox/mode', { mode: 'danger-full-access' });
-                }
-                else
-                    return resultFromCurrent('unverified', current, true);
-                pluginApplied.add(session.id);
-                return verifiedResult('full-applied', 'danger-full-access');
-            case 'preserve-user-restriction':
-                return resultFromCurrent('user-restricted', current, false);
-            case 'unverified':
-                return resultFromCurrent('unverified', current, true);
-            case 'fallback-workspace-write':
-                if (!hasService)
-                    return resultFromCurrent('unverified', current, true);
-                {
-                    const spec = permissionPresets.resolve(WORKSPACE_WRITE_PRESET);
-                    if (spec.sandbox !== 'workspace-write' || spec.approval !== 'ask') {
-                        return resultFromCurrent('unverified', current, true);
-                    }
-                }
-                permissionPresets.set(session, WORKSPACE_WRITE_PRESET);
-                return verifiedResult('fallback-workspace-write', 'workspace-write', true);
-            case 'normalize-workspace-write':
-                if (!hasService) {
-                    return resultFromCurrent('unverified', current, true);
-                }
-                if (permissionPresets.names.includes(WORKSPACE_WRITE_PRESET)) {
-                    const spec = permissionPresets.resolve(WORKSPACE_WRITE_PRESET);
-                    if (spec.sandbox !== 'workspace-write' || spec.approval !== 'ask') {
-                        return resultFromCurrent('unverified', current, true);
-                    }
-                    permissionPresets.set(session, WORKSPACE_WRITE_PRESET);
-                }
-                else if (sessionPolicyAvailable) {
-                    session.append('sandbox/mode', { mode: 'workspace-write' });
-                    session.append('approval/policy', { policy: 'ask' });
-                }
-                else
-                    return resultFromCurrent('unverified', current, true);
-                pluginApplied.delete(session.id);
-                return verifiedResult('normalized-workspace-write', 'workspace-write');
-            case 'no-op':
-                return resultFromCurrent(binding === 'active' && isFullAccessState(current) ? 'already-full' : 'no-op', current, false);
-        }
-    };
-    return {
-        async ensure(input) {
-            return apply(input, 'active');
-        },
-        async normalize(input) {
-            return apply(input, 'detached');
-        },
-    };
-}
-function isPermissionSession(value) {
-    return (isRecord(value) &&
-        typeof value.id === 'string' &&
-        (typeof value.snapshotEvents === 'function' ||
-            Array.isArray(value.events)) &&
-        typeof value.append === 'function');
-}
-function getSessionEvents(session) {
-    if (typeof session.snapshotEvents === 'function') {
-        return session.snapshotEvents();
-    }
-    return Array.isArray(session.events) ? session.events : [];
-}
-function isFullAccessState(current) {
-    return (current.preset === WORKTREE_FULL_ACCESS_PRESET ||
-        current.sandboxMode === 'danger-full-access');
-}
-//# sourceMappingURL=worktree-permission.js.map

package/lib/host/worktree-permission.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"worktree-permission.js","sourceRoot":"","sources":["../../src/host/worktree-permission.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAO5B,MAAM,kCAAkC,CAAC;AA6C1C,MAAM,sBAAsB,GAAG,iBAAiB,CAAC;AAEjD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,cAAc,CACrB,MAAkC,EAClC,IAAY,EACZ,GAAW;IAEX,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAC3D,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;IACxC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAkC;IAChE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,oBAAoB;gBAAE,QAAQ,GAAG,IAAI,CAAC;iBACzD,IAAI,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC/G,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,2BAA2B,EAAE,CAAC;YAC3C,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,IAAI,QAAQ,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAC3B,iBAAsD,EACtD,OAA0B,EAC1B,MAAkC;IAElC,IAAI,iBAAiB,KAAK,SAAS,IAAI,OAAO,iBAAiB,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACvF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,OAAO,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,OAA0B,EAC1B,iBAAsD,EACtD,aAA+C,EAC/C,aAAkC,EAClC,QAA0B;IAE1B,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,oBAAoB,CAAC,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACxE,IAAI,UAA4C,CAAC;IACjD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,UAAU,GAAG,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,SAAS,CAAC;QACzB,CAAC;IACH,CAAC;IACD,IAAI,WAAW,GACZ,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAA+C;QAC7F,UAAU,EAAE,OAAO;QACnB,aAAa,EAAE,WAAW,CAAC;IAC7B,IAAI,cAAc,GACf,cAAc,CAAC,MAAM,EAAE,iBAAiB,EAAE,QAAQ,CAAkD;QACrG,UAAU,EAAE,QAAQ,CAAC;IACvB,4EAA4E;IAC5E,4EAA4E;IAC5E,IAAI,OAAO,aAAa,EAAE,OAAO,KAAK,UAAU,IAAI,OAAO,QAAQ,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;QAC/F,IAAI,CAAC;YACH,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC;YACtD,cAAc,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;YACjF,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAC/E,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACvG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACzG,CAAC;IACH,CAAC;IACD,MAAM,wBAAwB,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/D,MAAM,mBAAmB,GACvB,wBAAwB,IAAI,WAAW,KAAK,oBAAoB;QAChE,sBAAsB,CAAC,MAAM,CAAC;QAC9B,CAAC,MAAM,KAAK,SAAS,IAAI,WAAW,KAAK,WAAW,CAAC;QACrD,CAAC,MAAM,KAAK,SAAS;YACnB,MAAM,KAAK,sBAAsB;YACjC,MAAM,KAAK,2BAA2B;YACtC,MAAM,KAAK,oBAAoB;YAC/B,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,WAAW,KAAK,oBAAoB,CAAC,CAAC,CAAC;IACpE,OAAO;QACL,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;QAC3D,oBAAoB,EAAE,mBAAmB;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,MAA0C,EAC1C,OAAuC,EACvC,SAAkB;IAElB,OAAO;QACL,MAAM;QACN,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;QAClF,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3F,SAAS;KACV,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,iBAAsD;IAEtD,OAAO,CACL,iBAAiB,KAAK,SAAS;QAC/B,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC;QACtC,OAAO,iBAAiB,CAAC,OAAO,KAAK,UAAU;QAC/C,OAAO,iBAAiB,CAAC,OAAO,KAAK,UAAU;QAC/C,OAAO,iBAAiB,CAAC,GAAG,KAAK,UAAU,CAC5C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kCAAkC,CAChD,OAA4C;IAE5C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAExC,MAAM,KAAK,GAAG,CACZ,KAAgC,EAChC,OAA8B,EACJ,EAAE;QAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACnD,CAAC;QACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACpD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,gBAAgB,CACtC,OAAO,EACP,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,QAAQ,CACT,CAAC;QACF,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;YACxE,OAAO,iBAAiB,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,sBAAsB,GAAG,UAAU,IAAI,OAAO,aAAa,EAAE,OAAO,KAAK,UAAU;YACvF,OAAO,QAAQ,EAAE,UAAU,KAAK,UAAU,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;YAC/E,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC;QACvC,MAAM,kBAAkB,GAAG,UAAU,IAAI,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC;QACvG,MAAM,cAAc,GAAG,CACrB,MAA0C,EAC1C,IAAmC,EACnC,SAAS,GAAG,KAAK,EACS,EAAE;YAC5B,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC;YACjG,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC;QAC3F,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,wBAAwB,CAAC;YACxC,OAAO;YACP,OAAO;YACP,UAAU,EAAE;gBACV,iBAAiB,EAAE,UAAU;gBAC7B,UAAU,EAAE,kBAAkB;gBAC9B,aAAa,EAAE,sBAAsB;gBACrC,cAAc,EAAE,UAAU,IAAI,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC;aACvF;SACF,CAAC,CAAC;QAEH,IACE,OAAO,KAAK,QAAQ;YACpB,QAAQ,CAAC,IAAI,KAAK,YAAY;YAC9B,KAAK,CAAC,SAAS,KAAK,IAAI,EACxB,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC/D,CAAC;QAED,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtB,KAAK,YAAY;gBACf,IAAI,CAAC,UAAU;oBAAE,OAAO,iBAAiB,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;gBACvE,IAAI,kBAAkB,EAAE,CAAC;oBACvB,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACxD,IAAI,IAAI,CAAC,OAAO,KAAK,oBAAoB,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;wBACrE,OAAO,iBAAiB,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;oBACxD,CAAC;oBACD,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAClD,CAAC;qBAAM,IAAI,sBAAsB,EAAE,CAAC;oBAClC,oEAAoE;oBACpE,mEAAmE;oBACnE,6DAA6D;oBAC7D,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;oBACrD,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBACjE,CAAC;;oBAAM,OAAO,iBAAiB,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC7D,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC9B,OAAO,cAAc,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;YAC9D,KAAK,2BAA2B;gBAC9B,OAAO,iBAAiB,CAAC,iBAAiB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9D,KAAK,YAAY;gBACf,OAAO,iBAAiB,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YACxD,KAAK,0BAA0B;gBAC7B,IAAI,CAAC,UAAU;oBAAE,OAAO,iBAAiB,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;gBACvE,CAAC;oBACC,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;oBAC/D,IAAI,IAAI,CAAC,OAAO,KAAK,iBAAiB,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;wBAClE,OAAO,iBAAiB,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;oBACxD,CAAC;gBACH,CAAC;gBACD,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;gBACvD,OAAO,cAAc,CAAC,0BAA0B,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;YAC7E,KAAK,2BAA2B;gBAC9B,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,OAAO,iBAAiB,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;gBACxD,CAAC;gBACD,IAAI,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;oBAC7D,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;oBAC/D,IAAI,IAAI,CAAC,OAAO,KAAK,iBAAiB,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;wBAClE,OAAO,iBAAiB,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;oBACxD,CAAC;oBACD,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;gBACzD,CAAC;qBAAM,IAAI,sBAAsB,EAAE,CAAC;oBAClC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;oBAC5D,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvD,CAAC;;oBAAM,OAAO,iBAAiB,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC7D,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACjC,OAAO,cAAc,CAAC,4BAA4B,EAAE,iBAAiB,CAAC,CAAC;YACzE,KAAK,OAAO;gBACV,OAAO,iBAAiB,CACtB,OAAO,KAAK,QAAQ,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,EAC7E,OAAO,EACP,KAAK,CACN,CAAC;QACN,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,OAAO,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,KAAK;YACnB,OAAO,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAClC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,CAAC,OAAO,KAAK,CAAC,cAAc,KAAK,UAAU;YACzC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,MAAM,KAAK,UAAU,CACnC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA0B;IAClD,IAAI,OAAO,OAAO,CAAC,cAAc,KAAK,UAAU,EAAE,CAAC;QACjD,OAAO,OAAO,CAAC,cAAc,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAuC;IAChE,OAAO,CACL,OAAO,CAAC,MAAM,KAAK,2BAA2B;QAC9C,OAAO,CAAC,WAAW,KAAK,oBAAoB,CAC7C,CAAC;AACJ,CAAC"}

package/lib/manage/worktree-permission.d.ts

@@ -1,3 +0,0 @@
-/** Compatibility barrel for the browser-safe Worktree permission contract. */
-export * from '../contract/worktree-permission.js';
-//# sourceMappingURL=worktree-permission.d.ts.map

package/lib/manage/worktree-permission.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"worktree-permission.d.ts","sourceRoot":"","sources":["../../src/manage/worktree-permission.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,cAAc,oCAAoC,CAAC"}

package/lib/manage/worktree-permission.js

@@ -1,3 +0,0 @@
-/** Compatibility barrel for the browser-safe Worktree permission contract. */
-export * from '../contract/worktree-permission.js';
-//# sourceMappingURL=worktree-permission.js.map

package/lib/manage/worktree-permission.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"worktree-permission.js","sourceRoot":"","sources":["../../src/manage/worktree-permission.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,cAAc,oCAAoC,CAAC"}