@cmodjs/core 0.1.14 → 0.2.1

package/records.js

@@ -1,4 +1,9 @@
 import { listed, messageOf } from './utils/text.js';
+export const listPermissions = ['network', 'run', 'files'];
+export const flagPermissions = ['conversation', 'prompt', 'model', 'agents', 'tools', 'config', 'approve'];
+const permissionNames = [...listPermissions, ...flagPermissions];
+const hostName = /^[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?(\.[A-Za-z0-9]([A-Za-z0-9-]*[A-Za-z0-9])?)*$/;
+const programName = /^[A-Za-z0-9][A-Za-z0-9._+-]*$/;
 export const pluginName = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 export function storeFolder(env) {
     const dataHome = env['XDG_DATA_HOME'];
@@ -94,7 +99,104 @@ export function readSteps(pkg) {
     const program = steps['program'];
     if (program !== undefined && (typeof program !== 'string' || !pluginName.test(program)))
         throw new Error('package.json "cmod.program" must be the program\'s command, such as "hello".');
-    return { ...readCommand(steps, 'install'), ...readCommand(steps, 'uninstall'), ...(program === undefined ? {} : { program }), ...readKeys(steps['keys']) };
+    const permissions = readPermissions(steps);
+    return {
+        ...readCommand(steps, 'install'),
+        ...readCommand(steps, 'uninstall'),
+        ...(program === undefined ? {} : { program }),
+        ...readKeys(steps['keys']),
+        ...(permissions.length === 0 ? {} : { permissions }),
+    };
+}
+function readPermissions(steps) {
+    const declared = steps['permissions'];
+    if (declared === undefined)
+        return [];
+    const at = 'package.json "cmod.permissions"';
+    if (!isObject(declared))
+        throw new Error(`${at} must be an object, such as { "network": ["api.github.com"], "prompt": true }.`);
+    const items = [];
+    for (const [name, value] of Object.entries(declared)) {
+        if (!permissionNames.includes(name))
+            throw new Error(`${at} names "${name}", which is not a permission. Use ${listed(permissionNames.map((each) => `"${each}"`))}.`);
+        if (flagPermissions.includes(name)) {
+            if (value !== true)
+                throw new Error(`${at} sets "${name}" to ${JSON.stringify(value)}. Write "${name}": true, or leave it out.`);
+            items.push(name);
+            continue;
+        }
+        if (name === 'run' && value === '*') {
+            items.push('run:*');
+            continue;
+        }
+        const example = name === 'network' ? '["api.github.com"]' : name === 'run' ? '["gh"], or "*" for any program' : '["~/.zshrc"]';
+        if (!Array.isArray(value) || value.length === 0 || !value.every((each) => typeof each === 'string'))
+            throw new Error(`${at} sets "${name}" to ${JSON.stringify(value)}. Write a list, such as "${name}": ${example}.`);
+        for (const each of value) {
+            const isPath = /^(~\/|\/)/.test(each) && !each.split('/').includes('..');
+            const isValid = name === 'network' ? hostName.test(each) || isPath : name === 'run' ? programName.test(each) : isPath;
+            if (!isValid)
+                throw new Error(`${at} lists "${each}" under "${name}". Write ${name === 'network' ? 'a host alone, such as "api.github.com", or a socket path, such as "/var/run/docker.sock"' : name === 'run' ? 'a program\'s command, such as "gh"' : 'a path that starts with ~/ or /, such as "~/.zshrc"'}.`);
+            items.push(`${name}:${each}`);
+        }
+    }
+    return items;
+}
+export function permissionWords(item) {
+    const split = item.indexOf(':');
+    const target = item.slice(split + 1);
+    switch (split === -1 ? item : item.slice(0, split)) {
+        case 'network':
+            return `Connect to ${target}`;
+        case 'run':
+            return target === '*' ? 'Run any program on your computer' : `Run ${target} on your computer`;
+        case 'files':
+            return `Change ${target}`;
+        case 'conversation':
+            return 'Read this conversation';
+        case 'prompt':
+            return 'Add text Claude reads and start turns';
+        case 'model':
+            return 'Ask a model, which uses your plan';
+        case 'agents':
+            return 'Start agents';
+        case 'tools':
+            return "Use and change Claude's tool calls";
+        case 'config':
+            return 'Change your Claude Code settings';
+        case 'approve':
+            return "Approve Claude's tool calls for you";
+        default:
+            return item;
+    }
+}
+export const settingsPagesMethod = 'cmod:settingsPages';
+export const openPageMethod = 'cmod:openPage';
+export const pendingStepsMethod = 'cmod:pendingSteps';
+export const finishStepsMethod = 'cmod:finishSteps';
+export function marketplaceOf(root, name) {
+    const installed = /\/cache\/([^/]+)\/([^/]+)\/[^/]+\/?$/.exec(root);
+    return installed?.[2] === name ? installed[1] : undefined;
+}
+export function updatesToTurnOn(marketplace, settings, known) {
+    if (marketplace === undefined)
+        return undefined;
+    const declared = isObject(settings) && isObject(settings['extraKnownMarketplaces']) ? settings['extraKnownMarketplaces'][marketplace] : undefined;
+    const fetched = isObject(known) ? known[marketplace] : undefined;
+    const isDecided = [declared, fetched].some((entry) => isObject(entry) && typeof entry['autoUpdate'] === 'boolean');
+    const hasSource = [declared, fetched].some((entry) => isObject(entry) && isObject(entry['source']));
+    return isDecided || !hasSource ? undefined : marketplace;
+}
+export function consentPath(store) {
+    return `${store}/consent.json`;
+}
+export function parseConsent(value, path) {
+    if (value === undefined)
+        return Object.create(null);
+    if (!isObject(value) || Object.values(value).some((items) => !Array.isArray(items) || items.some((item) => typeof item !== 'string'))) {
+        throw new Error(`${path} is not a map of plugin names to what each was approved for. Delete it, and cmod asks again.`);
+    }
+    return Object.assign(Object.create(null), value);
 }
 function readKeys(keys) {
     if (keys === undefined)
@@ -110,8 +212,10 @@ function readKeys(keys) {
     }
     return { keys: commands };
 }
-export function oldestCmodFor(keys) {
-    return Object.keys(keys).length > 0 ? '0.1.12' : '0.0.0';
+export function oldestCmodFor(steps) {
+    if (steps.permissions !== undefined)
+        return '0.2.0';
+    return Object.keys(steps.keys ?? {}).length > 0 ? '0.1.12' : '0.0.0';
 }
 export function keyWords(keys) {
     return listed(Object.entries(keys ?? {}).map(([key, command]) => `${key} to /${command}`));
@@ -155,7 +259,13 @@ export async function scriptsSha256(steps, files) {
         for (const folder of scriptFolders)
             folders.add(folder);
     }
-    let text = [steps.install ?? '', steps.uninstall ?? '', steps.program ?? '', ...(steps.keys === undefined ? [] : [JSON.stringify(Object.entries(steps.keys).sort())])].join('\0');
+    let text = [
+        steps.install ?? '',
+        steps.uninstall ?? '',
+        steps.program ?? '',
+        ...(steps.keys === undefined ? [] : [JSON.stringify(Object.entries(steps.keys).sort())]),
+        ...(steps.permissions === undefined ? [] : [JSON.stringify([...steps.permissions].sort())]),
+    ].join('\0');
     for (const folder of [...folders].sort()) {
         for (const name of (await files.list(folder)).sort()) {
             const path = `${folder}/${name}`;
@@ -175,7 +285,7 @@ export function formatEvent(event) {
         case 'log':
             return `log ${event.text}`;
         case 'needs-consent':
-            return `needs-consent ${event.sha256}\t${event.install}\t${event.uninstall}\t${event.keys}`;
+            return `needs-consent ${[event.sha256, event.install, event.uninstall, event.keys, ...event.permissions].join('\t')}`;
         case 'done':
             return event.version === undefined ? `done ${event.name}` : `done ${event.name} ${event.version}`;
         case 'missing':
@@ -189,8 +299,10 @@ export function parseEvent(line) {
     if (progress !== null)
         return { kind: 'progress', done: Number(progress[1]), total: Number(progress[2]), label: progress[3] ?? '' };
     const consent = /^needs-consent (\S+)\t([^\t]*)\t([^\t]*)(?:\t(.*))?$/.exec(line);
-    if (consent !== null)
-        return { kind: 'needs-consent', sha256: consent[1], install: consent[2], uninstall: consent[3], keys: consent[4] ?? '' };
+    if (consent !== null) {
+        const [keys = '', ...permissions] = (consent[4] ?? '').split('\t');
+        return { kind: 'needs-consent', sha256: consent[1], install: consent[2], uninstall: consent[3], keys, permissions: permissions.filter((item) => item !== '') };
+    }
     const done = /^done (\S+)(?: (\S+))?$/.exec(line);
     if (done !== null)
         return { kind: 'done', name: done[1], ...(done[2] === undefined ? {} : { version: done[2] }) };

package/register.d.ts

@@ -1,5 +1,7 @@
-import type { On } from 'claude-code';
+import type { On, PluginOptions } from 'claude-code';
 import type { ModDefinition } from './mod.js';
-export declare function registerMod<State extends object>(addHook: On, definition: ModDefinition<State>): void;
+import type { Options } from './options.js';
+export declare function registeredMod(): ModDefinition<object> | undefined;
+export declare function registerMod<State extends object, Declared extends Options>(addHook: On, definition: ModDefinition<State, string, Declared>, options: PluginOptions): void;
 export declare function registerPermissionCheck(addHook: On): void;
 //# sourceMappingURL=register.d.ts.map

package/register.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["src/register.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAoD,EAAE,EAAgB,MAAM,aAAa,CAAA;AACrG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAkF7C,wBAAgB,WAAW,CAAC,KAAK,SAAS,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,GAAG,IAAI,CA8BrG;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,CAIzD"}
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["src/register.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAoD,EAAE,EAAE,aAAa,EAAgB,MAAM,aAAa,CAAA;AACpH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAW3C,wBAAgB,aAAa,IAAI,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,CAEjE;AA4ED,wBAAgB,WAAW,CAAC,KAAK,SAAS,MAAM,EAAE,QAAQ,SAAS,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,aAAa,GAAG,IAAI,CA+BzK;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,CAIzD"}

package/register.js

@@ -1,6 +1,10 @@
 import { createLifecycle, readPlugin } from './runtime/lifecycle.js';
 let lifecycle;
 let checksPermissions = false;
+let registered;
+export function registeredMod() {
+    return registered;
+}
 async function startMod($, eventInput, passOn) {
     const claude = {
         plugin: { name: $.plugin.name, root: $.plugin.root },
@@ -30,6 +34,7 @@ async function startMod($, eventInput, passOn) {
         },
         http: { fetch: (url, init) => $.http.fetch(url, init) },
         settings: { read: (args) => $.settings.read(args) },
+        config: { list: () => $.config.list(), set: (args) => $.config.set(args) },
         store: {
             get: (key) => $.store.get(key),
             set: (key, value) => $.store.set(key, value),
@@ -72,9 +77,10 @@ async function startMod($, eventInput, passOn) {
 function routeToMod(_$, eventInput, passOn) {
     return lifecycle.route(passOn.event, eventInput, (passed) => passOn(passed));
 }
-export function registerMod(addHook, definition) {
+export function registerMod(addHook, definition, options) {
     checksPermissions = false;
-    lifecycle = createLifecycle(definition, () => checksPermissions);
+    registered = definition;
+    lifecycle = createLifecycle(definition, () => checksPermissions, options);
     addHook('session.start', startMod);
     addHook('classic.SessionStart', routeToMod);
     addHook('classic.SessionEnd', routeToMod);

package/runtime/claude.d.ts

@@ -1,4 +1,4 @@
-import type { AgentInfo, AgentSpawnArgs, AgentSpawnResult, Args, EngineInterface, AskOptions, CommandSpec, ElementTable, FsEntry, FsStat, FsStatOptions, HookStream, HttpInit, HttpResponse, InvalidatableEventName, PaneCloseArgs, PaneOpenArgs, ProcessRunInit, ProcessRunResult, ProcessSpawnChunk, ProcessSpawnRequest, ProcessSpawnResult, RenderSurface, ResolveInput, SessionUsage, Settings, SettingsReadArgs, Timer, ToastOptions, ToolSpec, UiLogOptions, UiOpenResult, UiPane, UiScrollArgs, UiScrollResult } from 'claude-code';
+import type { AgentInfo, AgentSpawnArgs, AgentSpawnResult, Args, EngineInterface, AskOptions, CommandSpec, ConfigRow, ElementTable, FsEntry, FsStat, FsStatOptions, HookStream, HttpInit, HttpResponse, InvalidatableEventName, PaneCloseArgs, PaneOpenArgs, ProcessRunInit, ProcessRunResult, ProcessSpawnChunk, ProcessSpawnRequest, ProcessSpawnResult, RenderSurface, ResolveInput, SessionUsage, Settings, SettingsReadArgs, Timer, ToastOptions, ToolSpec, UiLogOptions, UiOpenResult, UiPane, UiScrollArgs, UiScrollResult } from 'claude-code';
 export type Claude = {
     readonly plugin: {
         readonly name: string;
@@ -34,6 +34,10 @@ export type Claude = {
     readonly settings: {
         read(args?: SettingsReadArgs): Promise<Settings>;
     };
+    readonly config: {
+        list(): Promise<ConfigRow[]>;
+        set: EngineInterface['config']['set'];
+    };
     readonly store: {
         get(key: string): Promise<unknown>;
         set(key: string, value: unknown): Promise<void>;

package/runtime/claude.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../src/runtime/claude.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,IAAI,EACJ,eAAe,EACf,UAAU,EACV,WAAW,EACX,YAAY,EACZ,OAAO,EACP,MAAM,EACN,aAAa,EACb,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,sBAAsB,EACtB,aAAa,EACb,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,gBAAgB,EAChB,KAAK,EACL,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,YAAY,EACZ,cAAc,EACf,MAAM,aAAa,CAAA;AAEpB,MAAM,MAAM,MAAM,GAAG;IACnB,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACjE,QAAQ,CAAC,EAAE,EAAE;QACX,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,IAAI,CAAA;QACjD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;QACtC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,IAAI,CAAA;QAC/C,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;QACzD,UAAU,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAAA;QAC/C,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;QAC/C,KAAK,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QACzC,KAAK,IAAI,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;QACnD,OAAO,CAAC,CAAC,EAAE,YAAY,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;KACtD,CAAA;IACD,QAAQ,CAAC,OAAO,EAAE;QAChB,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAC9E,KAAK,CAAC,OAAO,EAAE,mBAAmB,GAAG,UAAU,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAA;KACvF,CAAA;IACD,QAAQ,CAAC,EAAE,EAAE;QACX,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QACnC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAChD,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;QACvC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QACtC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;KAC7D,CAAA;IACD,QAAQ,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;KAAE,CAAA;IAC7E,QAAQ,CAAC,QAAQ,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;KAAE,CAAA;IACvE,QAAQ,CAAC,KAAK,EAAE;QACd,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QAClC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;KAC1B,CAAA;IACD,QAAQ,CAAC,KAAK,EAAE;QACd,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;QACtB,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,IAAI,GAAG,KAAK,CAAA;QACxC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,IAAI,GAAG,KAAK,CAAA;KACzC,CAAA;IACD,QAAQ,CAAC,OAAO,EAAE;QAChB,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;QACrB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;QACvB,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;QACtB,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;QACxB,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,CAAA;QAC9B,QAAQ,IAAI,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAAA;QAC7C,QAAQ,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAAA;QAChD,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAA;KAC7C,CAAA;IACD,QAAQ,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAA;KAAE,CAAA;IAChE,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAA;KAAE,CAAA;IAClE,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAA;IAClF,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAAC,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAA;KAAE,CAAA;IAC7G,QAAQ,CAAC,KAAK,EAAE;QACd,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;QAC5B,KAAK,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;KACvD,CAAA;IACD,QAAQ,CAAC,GAAG,EAAE;QACZ,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;QACnC,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;QACvC,UAAU,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;KAC1C,CAAA;IACD,QAAQ,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAA;CACpE,CAAA"}
+{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../src/runtime/claude.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,IAAI,EACJ,eAAe,EACf,UAAU,EACV,WAAW,EACX,SAAS,EACT,YAAY,EACZ,OAAO,EACP,MAAM,EACN,aAAa,EACb,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,sBAAsB,EACtB,aAAa,EACb,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,gBAAgB,EAChB,KAAK,EACL,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,YAAY,EACZ,cAAc,EACf,MAAM,aAAa,CAAA;AAEpB,MAAM,MAAM,MAAM,GAAG;IACnB,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACjE,QAAQ,CAAC,EAAE,EAAE;QACX,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,IAAI,CAAA;QACjD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;QACtC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,IAAI,CAAA;QAC/C,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;QACzD,UAAU,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAAA;QAC/C,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAChF,IAAI,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;QAC/C,KAAK,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QACzC,KAAK,IAAI,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;QACnD,OAAO,CAAC,CAAC,EAAE,YAAY,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;KACtD,CAAA;IACD,QAAQ,CAAC,OAAO,EAAE;QAChB,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAC9E,KAAK,CAAC,OAAO,EAAE,mBAAmB,GAAG,UAAU,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAA;KACvF,CAAA;IACD,QAAQ,CAAC,EAAE,EAAE;QACX,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QACnC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAChD,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;QACvC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QACtC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;KAC7D,CAAA;IACD,QAAQ,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;KAAE,CAAA;IAC7E,QAAQ,CAAC,QAAQ,EAAE;QAAE,IAAI,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;KAAE,CAAA;IACvE,QAAQ,CAAC,MAAM,EAAE;QAAE,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QAAC,GAAG,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAA;KAAE,CAAA;IACxF,QAAQ,CAAC,KAAK,EAAE;QACd,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QAClC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;KAC1B,CAAA;IACD,QAAQ,CAAC,KAAK,EAAE;QACd,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;QACtB,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,IAAI,GAAG,KAAK,CAAA;QACxC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,IAAI,GAAG,KAAK,CAAA;KACzC,CAAA;IACD,QAAQ,CAAC,OAAO,EAAE;QAChB,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;QACrB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;QACvB,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;QACtB,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;QACxB,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,CAAA;QAC9B,QAAQ,IAAI,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAAA;QAC7C,QAAQ,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAAA;QAChD,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAA;KAC7C,CAAA;IACD,QAAQ,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAA;KAAE,CAAA;IAChE,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAA;KAAE,CAAA;IAClE,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAA;IAClF,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAAC,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAA;KAAE,CAAA;IAC7G,QAAQ,CAAC,KAAK,EAAE;QACd,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;QAC5B,KAAK,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;KACvD,CAAA;IACD,QAAQ,CAAC,GAAG,EAAE;QACZ,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;QACnC,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;QACvC,UAAU,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;KAC1C,CAAA;IACD,QAAQ,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAA;CACpE,CAAA"}

package/runtime/grants.d.ts

@@ -0,0 +1,28 @@
+import type { Claude } from './claude.js';
+import type { RoutedEvent } from './hooks.js';
+export type Grants = {
+    readonly name: string;
+    readonly declared: readonly string[];
+    readonly granted: () => ReadonlySet<string>;
+    readonly refresh: () => Promise<void>;
+    readonly home: string | undefined;
+    readonly configRoot: string | undefined;
+    readonly projectRoot: () => string;
+    readonly freeFolders: () => readonly string[];
+};
+export declare class PermissionRefused extends Error {
+}
+export declare function checkWrite(grants: Grants, call: string, path: string): Promise<void>;
+export declare function checkingGrants(claude: Claude, grants: Grants): Claude;
+export declare function itemOf(name: string, value?: string): string;
+export declare function isCovered(granted: ReadonlySet<string>, item: string, home: string | undefined): boolean;
+export declare function refusal(grants: Pick<Grants, 'name' | 'declared' | 'home'>, call: string, item: string): string;
+export type AnswerCheck = {
+    readonly plugin: string;
+    isGranted(item: string): boolean;
+    dropped(item: string, part: string): void;
+};
+export declare function checksAnswers(event: RoutedEvent): boolean;
+export declare function passedDown(event: RoutedEvent, original: unknown, passed: unknown, check: AnswerCheck): unknown;
+export declare function checkedAnswer(event: RoutedEvent, e: unknown, answer: unknown, below: () => Promise<unknown>, check: AnswerCheck): Promise<unknown>;
+//# sourceMappingURL=grants.d.ts.map

package/runtime/grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../src/runtime/grants.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,MAAM,MAAM,MAAM,GAAG;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAA;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,MAAM,CAAA;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,SAAS,MAAM,EAAE,CAAA;CAC9C,CAAA;AAED,qBAAa,iBAAkB,SAAQ,KAAK;CAAG;AAc/C,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpF;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CA6ErE;AAmBD,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAUvG;AAcD,wBAAgB,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAI9G;AA4BD,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IAChC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1C,CAAA;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAEzD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAa9G;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CA+BxJ"}

package/runtime/grants.js

@@ -0,0 +1,286 @@
+import { permissionWords } from '../records.js';
+import { relativePath } from '../utils/paths.js';
+export class PermissionRefused extends Error {
+}
+const configFiles = ['.claude/settings.json', '.claude/settings.local.json', '.mcp.json'];
+const startsTurns = ['CronCreate'];
+const ownSchedule = ['CronDelete', 'CronList'];
+async function checkGrant(grants, call, item) {
+    if (item === undefined)
+        return;
+    await grants.refresh();
+    if (!isCovered(grants.granted(), item, grants.home))
+        throw new PermissionRefused(refusal(grants, call, item));
+}
+export function checkWrite(grants, call, path) {
+    return checkGrant(grants, call, writeItem(grants, path));
+}
+export function checkingGrants(claude, grants) {
+    const gate = (call, item) => checkGrant(grants, call, item);
+    return {
+        ...claude,
+        process: {
+            async run(argv, init) {
+                await gate(`process.run(${argv.join(' ')})`, `run:${programOf(argv)}`);
+                return claude.process.run(argv, init);
+            },
+            spawn(request) {
+                const started = gate(`process.spawn(${request.argv.join(' ')})`, `run:${programOf(request.argv)}`).then(() => claude.process.spawn(request));
+                return spawned(started);
+            },
+        },
+        fs: {
+            ...claude.fs,
+            async read(path) {
+                await gate(`fs.read(${path})`, readItem(grants, path));
+                return claude.fs.read(path);
+            },
+            async write(path, text) {
+                await gate(`fs.write(${path})`, writeItem(grants, path));
+                return claude.fs.write(path, text);
+            },
+        },
+        http: {
+            async fetch(url, init) {
+                await gate(`http.fetch(${url})`, `network:${init?.socketPath ?? hostOf(url)}`);
+                return claude.http.fetch(url, init);
+            },
+        },
+        config: {
+            ...claude.config,
+            set: (async (args) => {
+                await gate('config.set', 'config');
+                return claude.config.set(args);
+            }),
+        },
+        session: {
+            ...claude.session,
+            messages: (async (...args) => {
+                await gate('session.messages', 'conversation');
+                return claude.session.messages(...args);
+            }),
+            append: (async (args) => {
+                await gate('session.append', 'prompt');
+                return claude.session.append(args);
+            }),
+        },
+        prompt: {
+            submit: (async (args) => {
+                await gate('session.submit', 'prompt');
+                return claude.prompt.submit(args);
+            }),
+        },
+        model: {
+            complete: (async (...args) => {
+                await gate('model.complete', 'model');
+                return claude.model.complete(...args);
+            }),
+        },
+        agent: {
+            ...claude.agent,
+            async spawn(args) {
+                await gate('agent.spawn', 'agents');
+                return claude.agent.spawn(args);
+            },
+        },
+        tool: {
+            ...claude.tool,
+            call: (async (input) => {
+                const item = startsTurns.includes(input.tool) ? 'prompt' : ownSchedule.includes(input.tool) ? undefined : 'tools';
+                await gate(`tool.call(${input.tool})`, item);
+                return claude.tool.call(input);
+            }),
+        },
+    };
+}
+function spawned(started) {
+    const result = started.then((stream) => stream.result);
+    result.catch(() => undefined);
+    const stream = {
+        next: async () => (await started).next(),
+        async return(value) {
+            const running = await started.catch(() => undefined);
+            return (await running?.return?.(value)) ?? { done: true, value };
+        },
+        [Symbol.asyncIterator]: () => stream,
+        result,
+    };
+    return stream;
+}
+export function itemOf(name, value) {
+    return value === undefined ? name : `${name}:${value}`;
+}
+export function isCovered(granted, item, home) {
+    if (granted.has(item))
+        return true;
+    const split = item.indexOf(':');
+    if (split === -1)
+        return false;
+    const name = item.slice(0, split);
+    const target = expanded(item.slice(split + 1), home);
+    const values = [...granted].filter((each) => each.startsWith(`${name}:`)).map((each) => expanded(each.slice(name.length + 1), home));
+    if (name === 'run')
+        return values.includes('*') || values.includes(target);
+    if (name === 'files')
+        return values.some((each) => relativePath(each, target) !== undefined);
+    return values.includes(target);
+}
+function readItem(grants, path) {
+    if (grants.configRoot === undefined)
+        return undefined;
+    return relativePath(`${grants.configRoot}/projects`, path) === undefined ? undefined : 'conversation';
+}
+function writeItem(grants, path) {
+    const root = grants.projectRoot();
+    if (configFiles.some((file) => `${root}/${file}` === path))
+        return 'config';
+    if (grants.freeFolders().some((folder) => relativePath(folder, path) !== undefined))
+        return undefined;
+    return `files:${path}`;
+}
+export function refusal(grants, call, item) {
+    const { name } = grants;
+    if (isCovered(new Set(grants.declared), item, grants.home))
+        return `${name} calls ${call} without your grant to "${permissionWords(item)}". Turn it on in /mods ${name}.`;
+    return `${name} calls ${call}, which needs ${declaration(item, grants.home)} in package.json "cmod".`;
+}
+function declaration(item, home) {
+    const split = item.indexOf(':');
+    if (split === -1)
+        return `"permissions": { "${item}": true }`;
+    const name = item.slice(0, split);
+    const target = item.slice(split + 1);
+    const fromHome = home === undefined ? undefined : relativePath(home, target);
+    const shown = name !== 'run' && fromHome !== undefined ? `~/${fromHome}` : target;
+    return `"permissions": { "${name}": ["${shown}"] }`;
+}
+const classicParts = {
+    additionalContext: 'prompt',
+    initialUserMessage: 'prompt',
+    suppressOriginalPrompt: 'prompt',
+    updatedToolOutput: 'prompt',
+    updatedMCPToolOutput: 'prompt',
+    updatedInput: 'tools',
+    retry: 'approve',
+};
+const blocksKeepWorking = ['classic.Stop', 'classic.PostToolUse'];
+const reservedToolKeys = ['tool', 'tool_use_id'];
+export function checksAnswers(event) {
+    return event.startsWith('classic.') || event === 'tool.check' || event === 'tool.call' || event === 'prompt.context' || event === 'prompt.submit';
+}
+export function passedDown(event, original, passed, check) {
+    if (passed === original)
+        return passed;
+    if (event === 'tool.call') {
+        if (sameExcept(original, passed, reservedToolKeys) || check.isGranted('tools'))
+            return passed;
+        check.dropped('tools', 'a changed tool input');
+        return original;
+    }
+    if (event === 'prompt.context' || event === 'prompt.submit') {
+        if (same(original, passed) || check.isGranted('prompt'))
+            return passed;
+        check.dropped('prompt', event === 'prompt.submit' ? 'a rewritten prompt' : 'changed context');
+        return original;
+    }
+    return passed;
+}
+export async function checkedAnswer(event, e, answer, below, check) {
+    if (!isFields(answer))
+        return answer;
+    if (event === 'tool.check')
+        return decided(answer['decision'], answer, below, check);
+    if (event === 'classic.PermissionRequest') {
+        const decision = isFields(answer['decision']) ? answer['decision']['behavior'] : undefined;
+        return decided(decision, answer, below, check);
+    }
+    if (event.startsWith('classic.'))
+        return classicAnswer(event, answer, below, check);
+    if (event === 'tool.call') {
+        if (answer['deny'] !== undefined || check.isGranted('prompt'))
+            return answer;
+        const tool = isFields(e) ? e['tool'] : undefined;
+        if (typeof tool === 'string' && tool.startsWith(`mcp__${check.plugin}__`)) {
+            if (answer['context'] === undefined)
+                return answer;
+            check.dropped('prompt', 'context after a tool call');
+            const { context: _context, ...rest } = answer;
+            return rest;
+        }
+        const theirs = await below();
+        if (same(answer, theirs))
+            return answer;
+        check.dropped('prompt', same(contextOf(answer), contextOf(theirs)) ? 'a changed tool result' : 'context after a tool call');
+        return theirs;
+    }
+    if (event === 'prompt.submit' && answer['drop'] !== undefined)
+        return answer;
+    if (event === 'prompt.context' || event === 'prompt.submit') {
+        if (check.isGranted('prompt'))
+            return answer;
+        const theirs = await below();
+        if (same(answer, theirs))
+            return answer;
+        check.dropped('prompt', event === 'prompt.submit' ? 'a rewritten prompt' : 'changed context');
+        return theirs;
+    }
+    return answer;
+}
+async function decided(decision, answer, below, check) {
+    if ((decision !== 'allow' && decision !== 'ask') || check.isGranted('approve'))
+        return answer;
+    const theirs = await below();
+    if (same(answer, theirs))
+        return answer;
+    check.dropped('approve', `${decision} on a tool call`);
+    return theirs;
+}
+async function classicAnswer(event, answer, below, check) {
+    const blocks = blocksKeepWorking.includes(event) ? [['block', 'prompt']] : [];
+    const parts = [...Object.entries(classicParts), ...blocks].filter(([part, item]) => answer[part] !== undefined && !check.isGranted(item));
+    if (parts.length === 0)
+        return answer;
+    const theirs = await below();
+    const kept = { ...answer };
+    const theirFields = isFields(theirs) ? theirs : {};
+    for (const [part, item] of parts) {
+        if (same(answer[part], theirFields[part]))
+            continue;
+        check.dropped(item, part);
+        if (theirFields[part] === undefined)
+            delete kept[part];
+        else
+            kept[part] = theirFields[part];
+    }
+    return kept;
+}
+function contextOf(answer) {
+    return isFields(answer) ? answer['context'] : undefined;
+}
+function same(left, right) {
+    return left === right || JSON.stringify(left) === JSON.stringify(right);
+}
+function sameExcept(left, right, keys) {
+    if (!isFields(left) || !isFields(right))
+        return same(left, right);
+    const without = (fields) => Object.fromEntries(Object.entries(fields).filter(([key]) => !keys.includes(key)));
+    return same(without(left), without(right));
+}
+function isFields(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function programOf(argv) {
+    const command = argv[0] ?? '';
+    return command.slice(command.lastIndexOf('/') + 1);
+}
+function hostOf(url) {
+    try {
+        return new URL(url).hostname;
+    }
+    catch {
+        return url;
+    }
+}
+function expanded(path, home) {
+    return path.startsWith('~/') && home !== undefined ? `${home}${path.slice(1)}` : path;
+}

package/runtime/installer.d.ts

@@ -0,0 +1,24 @@
+import type { Args, Frozen, RenderElement } from 'claude-code';
+import type { Step } from '../installer.js';
+import type { Mod } from '../mod.js';
+import type { Option } from '../options.js';
+import type { Claude } from './claude.js';
+export declare const installerPaneId = "cmod-installer";
+export type Consent = {
+    readonly install: string;
+    readonly uninstall: string;
+    readonly keys: string;
+    readonly permissions: readonly string[];
+    readonly updates?: string | undefined;
+};
+export type Installer = {
+    draws(e: Frozen<Args<'ui.render'>>): boolean;
+    draw(e: Frozen<Args<'ui.render'>>): RenderElement;
+    closed(id: string): void;
+    consent(consent: Consent): Promise<boolean>;
+    options(missing: readonly (readonly [string, Option])[], save: (key: string, value: string) => Promise<string | undefined>): Promise<boolean>;
+    step<State extends object>(mod: Mod<State>, step: Step<State>, index: number, total: number): Promise<boolean>;
+    close(): Promise<void>;
+};
+export declare function createInstaller(name: string, claude: () => Claude): Installer;
+//# sourceMappingURL=installer.d.ts.map

package/runtime/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../src/runtime/installer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAiB,MAAM,aAAa,CAAA;AAC7E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAI3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAEzC,eAAO,MAAM,eAAe,mBAAmB,CAAA;AAE/C,MAAM,MAAM,OAAO,GAAG;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACtC,CAAA;AAOD,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,OAAO,CAAA;IAC5C,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,aAAa,CAAA;IACjD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3C,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7I,IAAI,CAAC,KAAK,SAAS,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC9G,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB,CAAA;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,MAAM,GAAG,SAAS,CAsI7E"}