@code-yeongyu/senpi 0.74.0

package/dist/core/extensions/builtin/permission-system/external-dir.js

@@ -0,0 +1,138 @@
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+export function expandHome(inputPath) {
+    if (inputPath === "~") {
+        return os.homedir();
+    }
+    if (inputPath.startsWith("~/") || inputPath.startsWith("~\\")) {
+        return path.join(os.homedir(), inputPath.slice(2));
+    }
+    if (inputPath.startsWith("$HOME/") || inputPath.startsWith("$HOME\\")) {
+        return path.join(os.homedir(), inputPath.slice(6));
+    }
+    if (inputPath === "$HOME") {
+        return os.homedir();
+    }
+    return inputPath;
+}
+function normalizePath(inputPath) {
+    try {
+        if (fs.existsSync(inputPath)) {
+            return fs.realpathSync(inputPath);
+        }
+    }
+    catch { }
+    return path.normalize(inputPath);
+}
+export function isExternalPath(inputPath, cwd) {
+    const expandedPath = expandHome(inputPath);
+    const absolutePath = path.resolve(cwd, expandedPath);
+    const normalizedTarget = normalizePath(absolutePath);
+    const normalizedCwd = normalizePath(cwd);
+    if (normalizedTarget === normalizedCwd) {
+        return false;
+    }
+    const cwdWithSeparator = normalizedCwd.endsWith(path.sep) ? normalizedCwd : normalizedCwd + path.sep;
+    return !normalizedTarget.startsWith(cwdWithSeparator);
+}
+function tokenizeCommand(command) {
+    const tokens = [];
+    let current = "";
+    let inQuotes = null;
+    let escaped = false;
+    for (let i = 0; i < command.length; i++) {
+        const char = command[i];
+        if (escaped) {
+            current += char;
+            escaped = false;
+            continue;
+        }
+        if (char === "\\") {
+            escaped = true;
+            current += char;
+            continue;
+        }
+        if (inQuotes) {
+            if (char === inQuotes) {
+                inQuotes = null;
+            }
+            current += char;
+            continue;
+        }
+        if (char === '"' || char === "'") {
+            inQuotes = char;
+            current += char;
+            continue;
+        }
+        if (char === " " || char === "\t") {
+            if (current.length > 0) {
+                tokens.push(current);
+                current = "";
+            }
+            continue;
+        }
+        current += char;
+    }
+    if (current.length > 0) {
+        tokens.push(current);
+    }
+    return tokens;
+}
+function unquote(token) {
+    if (token.length < 2)
+        return token;
+    const first = token[0];
+    const last = token[token.length - 1];
+    if ((first === '"' || first === "'") && first === last) {
+        return token.slice(1, -1);
+    }
+    return token;
+}
+function looksLikePath(token) {
+    if (token.startsWith("-"))
+        return false;
+    if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(token))
+        return false;
+    if (["|", "||", "&&", ";", "&", "$(", "${", "`"].some((op) => token.includes(op))) {
+        return false;
+    }
+    if (token.startsWith("/"))
+        return true;
+    if (token.startsWith("~"))
+        return true;
+    if (token.startsWith("$HOME"))
+        return true;
+    if (token.startsWith("./") || token.startsWith("../"))
+        return true;
+    if (token.includes("/"))
+        return true;
+    return false;
+}
+export function extractExternalPaths(command, cwd) {
+    const tokens = tokenizeCommand(command);
+    const externalPaths = [];
+    let startIndex = 0;
+    if (tokens.length > 0) {
+        const firstToken = unquote(tokens[0]);
+        if (!firstToken.startsWith("/") &&
+            !firstToken.startsWith("~") &&
+            !firstToken.startsWith("$") &&
+            !firstToken.startsWith("./") &&
+            !firstToken.startsWith("../") &&
+            !firstToken.includes("/")) {
+            startIndex = 1;
+        }
+    }
+    for (let i = startIndex; i < tokens.length; i++) {
+        const token = unquote(tokens[i]);
+        if (!looksLikePath(token)) {
+            continue;
+        }
+        if (isExternalPath(token, cwd)) {
+            externalPaths.push(token);
+        }
+    }
+    return externalPaths;
+}
+//# sourceMappingURL=external-dir.js.map

package/dist/core/extensions/builtin/permission-system/external-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-dir.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/external-dir.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAU;IACrD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,aAAa,CAAC,SAAiB,EAAU;IACjD,IAAI,CAAC;QACJ,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;IACF,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;AAAA,CACjC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,GAAW,EAAW;IACvE,MAAM,YAAY,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAEzC,IAAI,gBAAgB,KAAK,aAAa,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,gBAAgB,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC;IAErG,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AAAA,CACtD;AAED,SAAS,eAAe,CAAC,OAAe,EAAY;IACnD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAExB,IAAI,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,IAAI,CAAC;YAChB,OAAO,GAAG,KAAK,CAAC;YAChB,SAAS;QACV,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACV,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvB,QAAQ,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACV,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAClC,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACV,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrB,OAAO,GAAG,EAAE,CAAC;YACd,CAAC;YACD,SAAS;QACV,CAAC;QAED,OAAO,IAAI,IAAI,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,OAAO,CAAC,KAAa,EAAU;IACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,aAAa,CAAC,KAAa,EAAW;IAC9C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACnF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,OAAO,KAAK,CAAC;AAAA,CACb;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,GAAW,EAAY;IAC5E,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,IACC,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;YAC3B,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;YAC3B,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;YAC3B,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;YAC5B,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;YAC7B,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EACxB,CAAC;YACF,UAAU,GAAG,CAAC,CAAC;QAChB,CAAC;IACF,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,SAAS;QACV,CAAC;QAED,IAAI,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YAChC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACF,CAAC;IAED,OAAO,aAAa,CAAC;AAAA,CACrB","sourcesContent":["import * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport * as path from \"node:path\";\n\nexport function expandHome(inputPath: string): string {\n\tif (inputPath === \"~\") {\n\t\treturn os.homedir();\n\t}\n\tif (inputPath.startsWith(\"~/\") || inputPath.startsWith(\"~\\\\\")) {\n\t\treturn path.join(os.homedir(), inputPath.slice(2));\n\t}\n\tif (inputPath.startsWith(\"$HOME/\") || inputPath.startsWith(\"$HOME\\\\\")) {\n\t\treturn path.join(os.homedir(), inputPath.slice(6));\n\t}\n\tif (inputPath === \"$HOME\") {\n\t\treturn os.homedir();\n\t}\n\treturn inputPath;\n}\n\nfunction normalizePath(inputPath: string): string {\n\ttry {\n\t\tif (fs.existsSync(inputPath)) {\n\t\t\treturn fs.realpathSync(inputPath);\n\t\t}\n\t} catch {}\n\treturn path.normalize(inputPath);\n}\n\nexport function isExternalPath(inputPath: string, cwd: string): boolean {\n\tconst expandedPath = expandHome(inputPath);\n\tconst absolutePath = path.resolve(cwd, expandedPath);\n\tconst normalizedTarget = normalizePath(absolutePath);\n\tconst normalizedCwd = normalizePath(cwd);\n\n\tif (normalizedTarget === normalizedCwd) {\n\t\treturn false;\n\t}\n\n\tconst cwdWithSeparator = normalizedCwd.endsWith(path.sep) ? normalizedCwd : normalizedCwd + path.sep;\n\n\treturn !normalizedTarget.startsWith(cwdWithSeparator);\n}\n\nfunction tokenizeCommand(command: string): string[] {\n\tconst tokens: string[] = [];\n\tlet current = \"\";\n\tlet inQuotes: string | null = null;\n\tlet escaped = false;\n\n\tfor (let i = 0; i < command.length; i++) {\n\t\tconst char = command[i];\n\n\t\tif (escaped) {\n\t\t\tcurrent += char;\n\t\t\tescaped = false;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (char === \"\\\\\") {\n\t\t\tescaped = true;\n\t\t\tcurrent += char;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (inQuotes) {\n\t\t\tif (char === inQuotes) {\n\t\t\t\tinQuotes = null;\n\t\t\t}\n\t\t\tcurrent += char;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (char === '\"' || char === \"'\") {\n\t\t\tinQuotes = char;\n\t\t\tcurrent += char;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (char === \" \" || char === \"\\t\") {\n\t\t\tif (current.length > 0) {\n\t\t\t\ttokens.push(current);\n\t\t\t\tcurrent = \"\";\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\n\t\tcurrent += char;\n\t}\n\n\tif (current.length > 0) {\n\t\ttokens.push(current);\n\t}\n\n\treturn tokens;\n}\n\nfunction unquote(token: string): string {\n\tif (token.length < 2) return token;\n\tconst first = token[0];\n\tconst last = token[token.length - 1];\n\tif ((first === '\"' || first === \"'\") && first === last) {\n\t\treturn token.slice(1, -1);\n\t}\n\treturn token;\n}\n\nfunction looksLikePath(token: string): boolean {\n\tif (token.startsWith(\"-\")) return false;\n\tif (/^[A-Za-z_][A-Za-z0-9_]*=/.test(token)) return false;\n\tif ([\"|\", \"||\", \"&&\", \";\", \"&\", \"$(\", \"${\", \"`\"].some((op) => token.includes(op))) {\n\t\treturn false;\n\t}\n\tif (token.startsWith(\"/\")) return true;\n\tif (token.startsWith(\"~\")) return true;\n\tif (token.startsWith(\"$HOME\")) return true;\n\tif (token.startsWith(\"./\") || token.startsWith(\"../\")) return true;\n\tif (token.includes(\"/\")) return true;\n\n\treturn false;\n}\n\nexport function extractExternalPaths(command: string, cwd: string): string[] {\n\tconst tokens = tokenizeCommand(command);\n\tconst externalPaths: string[] = [];\n\n\tlet startIndex = 0;\n\tif (tokens.length > 0) {\n\t\tconst firstToken = unquote(tokens[0]);\n\t\tif (\n\t\t\t!firstToken.startsWith(\"/\") &&\n\t\t\t!firstToken.startsWith(\"~\") &&\n\t\t\t!firstToken.startsWith(\"$\") &&\n\t\t\t!firstToken.startsWith(\"./\") &&\n\t\t\t!firstToken.startsWith(\"../\") &&\n\t\t\t!firstToken.includes(\"/\")\n\t\t) {\n\t\t\tstartIndex = 1;\n\t\t}\n\t}\n\n\tfor (let i = startIndex; i < tokens.length; i++) {\n\t\tconst token = unquote(tokens[i]);\n\n\t\tif (!looksLikePath(token)) {\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (isExternalPath(token, cwd)) {\n\t\t\texternalPaths.push(token);\n\t\t}\n\t}\n\n\treturn externalPaths;\n}\n"]}

package/dist/core/extensions/builtin/permission-system/index.d.ts

@@ -0,0 +1,3 @@
+import type { ExtensionAPI } from "../../types.js";
+export default function permissionSystemExtension(pi: ExtensionAPI): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/core/extensions/builtin/permission-system/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAuDnD,MAAM,CAAC,OAAO,UAAU,yBAAyB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAsGxE","sourcesContent":["import { SettingsManager } from \"../../../settings-manager.js\";\nimport type { ExtensionAPI } from \"../../types.js\";\nimport { extractPatchedPaths } from \"../gpt-apply-patch/index.js\";\nimport { parsePermissionFlag } from \"./cli.js\";\nimport { disabled } from \"./config.js\";\nimport { createEventEmitter } from \"./events.js\";\nimport { handleNoUI } from \"./non-interactive.js\";\nimport { createBuiltinParserRegistry, type ParserRegistry } from \"./parsers.js\";\nimport { showPermissionPrompt } from \"./prompt.js\";\nimport { PermissionService } from \"./service.js\";\nimport { loadPermissionSettings } from \"./settings.js\";\nimport { appendApproved } from \"./storage.js\";\nimport { CorrectedError, DeniedError, RejectedError, type Request, type Ruleset } from \"./types.js\";\n\nfunction createRequestIDFactory(): () => string {\n\tlet counter = 0;\n\treturn () => {\n\t\tcounter += 1;\n\t\treturn `permission-${counter}`;\n\t};\n}\n\nfunction getReason(error: unknown): string {\n\tif (error instanceof DeniedError || error instanceof CorrectedError || error instanceof RejectedError) {\n\t\treturn error.message;\n\t}\n\n\tif (error instanceof Error) {\n\t\treturn error.message;\n\t}\n\n\treturn \"Permission request was rejected.\";\n}\n\nfunction createRequestMetadata(toolName: string, input: Record<string, unknown>): Record<string, unknown> {\n\tconst metadata: Record<string, unknown> = {\n\t\ttoolName,\n\t\t...input,\n\t};\n\n\tconst pathValue = typeof input.path === \"string\" ? input.path : undefined;\n\tconst filePathValue = typeof input.file_path === \"string\" ? input.file_path : undefined;\n\tconst patchTextValue =\n\t\ttypeof input.input === \"string\" ? input.input : typeof input.patchText === \"string\" ? input.patchText : undefined;\n\n\tif (toolName === \"edit\" || toolName === \"write\" || toolName === \"apply_patch\" || toolName === \"multiedit\") {\n\t\tmetadata.filepath = pathValue ?? filePathValue ?? extractPatchedPaths(patchTextValue ?? \"\")[0];\n\t}\n\n\tif (toolName === \"read\") {\n\t\tmetadata.filePath = pathValue ?? filePathValue;\n\t}\n\n\treturn metadata;\n}\n\nexport default function permissionSystemExtension(pi: ExtensionAPI): void {\n\tlet service: PermissionService | null = null;\n\tlet parserRegistry: ParserRegistry | null = null;\n\tlet cliRuleset: Ruleset = [];\n\tlet staticRuleset: Ruleset = [];\n\tlet initialApprovedCount = 0;\n\n\tconst nextRequestID = createRequestIDFactory();\n\n\tpi.registerFlag(\"permission\", {\n\t\tdescription: \"Set permission rules (format: tool=action or tool:pattern=action)\",\n\t\ttype: \"string\",\n\t});\n\n\tpi.on(\"session_start\", async (_event, ctx) => {\n\t\tconst settingsManager = SettingsManager.create(ctx.cwd);\n\t\tconst permissionFlag = pi.getFlag(\"permission\");\n\t\tcliRuleset = typeof permissionFlag === \"string\" ? parsePermissionFlag(permissionFlag) : [];\n\n\t\tconst loadedSettings = loadPermissionSettings(settingsManager, cliRuleset, ctx.cwd);\n\t\tstaticRuleset = loadedSettings.staticRuleset;\n\t\tconst approved = loadedSettings.approved;\n\t\tparserRegistry = createBuiltinParserRegistry();\n\t\tservice = new PermissionService(staticRuleset, approved, createEventEmitter(pi));\n\t\tinitialApprovedCount = approved.length;\n\n\t\tconst allTools = pi.getAllTools().map((tool) => tool.name);\n\t\tconst disabledTools = disabled(allTools, staticRuleset);\n\t\tconst activeTools = pi.getActiveTools().filter((toolName) => !disabledTools.has(toolName));\n\t\tpi.setActiveTools(activeTools);\n\t});\n\n\tpi.on(\"tool_call\", async (event, ctx) => {\n\t\tif (!service || !parserRegistry) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tconst permissionRequests = parserRegistry.parse(event.toolName, event.input, ctx.cwd);\n\t\tconst sessionID = ctx.sessionManager.getSessionId();\n\n\t\tfor (const permissionRequest of permissionRequests) {\n\t\t\tconst request: Request = {\n\t\t\t\tid: nextRequestID(),\n\t\t\t\tsessionID,\n\t\t\t\tpermission: permissionRequest.permission,\n\t\t\t\tpatterns: permissionRequest.patterns,\n\t\t\t\talways: permissionRequest.always,\n\t\t\t\tmetadata: createRequestMetadata(event.toolName, event.input),\n\t\t\t};\n\n\t\t\tconst askPromise = service.ask(request);\n\t\t\tconst isPending = service.list().some((pendingRequest) => pendingRequest.id === request.id);\n\n\t\t\tif (!isPending) {\n\t\t\t\ttry {\n\t\t\t\t\tawait askPromise;\n\t\t\t\t} catch (error) {\n\t\t\t\t\treturn { block: true, reason: getReason(error) };\n\t\t\t\t}\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tif (ctx.hasUI) {\n\t\t\t\tconst reply = await showPermissionPrompt(ctx, request);\n\t\t\t\tservice.reply(reply);\n\t\t\t} else {\n\t\t\t\tconst reply = handleNoUI(request, staticRuleset, cliRuleset, (eventName, data) => {\n\t\t\t\t\tif (eventName !== \"permission_asked\") {\n\t\t\t\t\t\tpi.events.emit(eventName, data);\n\t\t\t\t\t}\n\t\t\t\t});\n\t\t\t\tif (reply) {\n\t\t\t\t\tservice.reply(reply);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\ttry {\n\t\t\t\tawait askPromise;\n\t\t\t} catch (error) {\n\t\t\t\treturn { block: true, reason: getReason(error) };\n\t\t\t}\n\t\t}\n\n\t\treturn undefined;\n\t});\n\n\tpi.on(\"session_shutdown\", async (event, ctx) => {\n\t\tvoid event;\n\n\t\tif (!service) {\n\t\t\treturn;\n\t\t}\n\n\t\tconst approved = service.getApproved().slice(initialApprovedCount);\n\t\tif (approved.length > 0) {\n\t\t\tappendApproved(ctx.cwd, approved);\n\t\t}\n\n\t\tfor (const pendingRequest of service.list()) {\n\t\t\tservice.reply({ requestID: pendingRequest.id, reply: \"reject\" });\n\t\t}\n\t});\n}\n"]}

package/dist/core/extensions/builtin/permission-system/index.js

@@ -0,0 +1,134 @@
+import { SettingsManager } from "../../../settings-manager.js";
+import { extractPatchedPaths } from "../gpt-apply-patch/index.js";
+import { parsePermissionFlag } from "./cli.js";
+import { disabled } from "./config.js";
+import { createEventEmitter } from "./events.js";
+import { handleNoUI } from "./non-interactive.js";
+import { createBuiltinParserRegistry } from "./parsers.js";
+import { showPermissionPrompt } from "./prompt.js";
+import { PermissionService } from "./service.js";
+import { loadPermissionSettings } from "./settings.js";
+import { appendApproved } from "./storage.js";
+import { CorrectedError, DeniedError, RejectedError } from "./types.js";
+function createRequestIDFactory() {
+    let counter = 0;
+    return () => {
+        counter += 1;
+        return `permission-${counter}`;
+    };
+}
+function getReason(error) {
+    if (error instanceof DeniedError || error instanceof CorrectedError || error instanceof RejectedError) {
+        return error.message;
+    }
+    if (error instanceof Error) {
+        return error.message;
+    }
+    return "Permission request was rejected.";
+}
+function createRequestMetadata(toolName, input) {
+    const metadata = {
+        toolName,
+        ...input,
+    };
+    const pathValue = typeof input.path === "string" ? input.path : undefined;
+    const filePathValue = typeof input.file_path === "string" ? input.file_path : undefined;
+    const patchTextValue = typeof input.input === "string" ? input.input : typeof input.patchText === "string" ? input.patchText : undefined;
+    if (toolName === "edit" || toolName === "write" || toolName === "apply_patch" || toolName === "multiedit") {
+        metadata.filepath = pathValue ?? filePathValue ?? extractPatchedPaths(patchTextValue ?? "")[0];
+    }
+    if (toolName === "read") {
+        metadata.filePath = pathValue ?? filePathValue;
+    }
+    return metadata;
+}
+export default function permissionSystemExtension(pi) {
+    let service = null;
+    let parserRegistry = null;
+    let cliRuleset = [];
+    let staticRuleset = [];
+    let initialApprovedCount = 0;
+    const nextRequestID = createRequestIDFactory();
+    pi.registerFlag("permission", {
+        description: "Set permission rules (format: tool=action or tool:pattern=action)",
+        type: "string",
+    });
+    pi.on("session_start", async (_event, ctx) => {
+        const settingsManager = SettingsManager.create(ctx.cwd);
+        const permissionFlag = pi.getFlag("permission");
+        cliRuleset = typeof permissionFlag === "string" ? parsePermissionFlag(permissionFlag) : [];
+        const loadedSettings = loadPermissionSettings(settingsManager, cliRuleset, ctx.cwd);
+        staticRuleset = loadedSettings.staticRuleset;
+        const approved = loadedSettings.approved;
+        parserRegistry = createBuiltinParserRegistry();
+        service = new PermissionService(staticRuleset, approved, createEventEmitter(pi));
+        initialApprovedCount = approved.length;
+        const allTools = pi.getAllTools().map((tool) => tool.name);
+        const disabledTools = disabled(allTools, staticRuleset);
+        const activeTools = pi.getActiveTools().filter((toolName) => !disabledTools.has(toolName));
+        pi.setActiveTools(activeTools);
+    });
+    pi.on("tool_call", async (event, ctx) => {
+        if (!service || !parserRegistry) {
+            return undefined;
+        }
+        const permissionRequests = parserRegistry.parse(event.toolName, event.input, ctx.cwd);
+        const sessionID = ctx.sessionManager.getSessionId();
+        for (const permissionRequest of permissionRequests) {
+            const request = {
+                id: nextRequestID(),
+                sessionID,
+                permission: permissionRequest.permission,
+                patterns: permissionRequest.patterns,
+                always: permissionRequest.always,
+                metadata: createRequestMetadata(event.toolName, event.input),
+            };
+            const askPromise = service.ask(request);
+            const isPending = service.list().some((pendingRequest) => pendingRequest.id === request.id);
+            if (!isPending) {
+                try {
+                    await askPromise;
+                }
+                catch (error) {
+                    return { block: true, reason: getReason(error) };
+                }
+                continue;
+            }
+            if (ctx.hasUI) {
+                const reply = await showPermissionPrompt(ctx, request);
+                service.reply(reply);
+            }
+            else {
+                const reply = handleNoUI(request, staticRuleset, cliRuleset, (eventName, data) => {
+                    if (eventName !== "permission_asked") {
+                        pi.events.emit(eventName, data);
+                    }
+                });
+                if (reply) {
+                    service.reply(reply);
+                }
+            }
+            try {
+                await askPromise;
+            }
+            catch (error) {
+                return { block: true, reason: getReason(error) };
+            }
+        }
+        return undefined;
+    });
+    pi.on("session_shutdown", async (event, ctx) => {
+        void event;
+        if (!service) {
+            return;
+        }
+        const approved = service.getApproved().slice(initialApprovedCount);
+        if (approved.length > 0) {
+            appendApproved(ctx.cwd, approved);
+        }
+        for (const pendingRequest of service.list()) {
+            service.reply({ requestID: pendingRequest.id, reply: "reject" });
+        }
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/core/extensions/builtin/permission-system/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAuB,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAA8B,MAAM,YAAY,CAAC;AAEpG,SAAS,sBAAsB,GAAiB;IAC/C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,GAAG,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,CAAC;QACb,OAAO,cAAc,OAAO,EAAE,CAAC;IAAA,CAC/B,CAAC;AAAA,CACF;AAED,SAAS,SAAS,CAAC,KAAc,EAAU;IAC1C,IAAI,KAAK,YAAY,WAAW,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;QACvG,OAAO,KAAK,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,OAAO,kCAAkC,CAAC;AAAA,CAC1C;AAED,SAAS,qBAAqB,CAAC,QAAgB,EAAE,KAA8B,EAA2B;IACzG,MAAM,QAAQ,GAA4B;QACzC,QAAQ;QACR,GAAG,KAAK;KACR,CAAC;IAEF,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,MAAM,aAAa,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,cAAc,GACnB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAEnH,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC3G,QAAQ,CAAC,QAAQ,GAAG,SAAS,IAAI,aAAa,IAAI,mBAAmB,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACzB,QAAQ,CAAC,QAAQ,GAAG,SAAS,IAAI,aAAa,CAAC;IAChD,CAAC;IAED,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,MAAM,CAAC,OAAO,UAAU,yBAAyB,CAAC,EAAgB,EAAQ;IACzE,IAAI,OAAO,GAA6B,IAAI,CAAC;IAC7C,IAAI,cAAc,GAA0B,IAAI,CAAC;IACjD,IAAI,UAAU,GAAY,EAAE,CAAC;IAC7B,IAAI,aAAa,GAAY,EAAE,CAAC;IAChC,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAE7B,MAAM,aAAa,GAAG,sBAAsB,EAAE,CAAC;IAE/C,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE;QAC7B,WAAW,EAAE,mEAAmE;QAChF,IAAI,EAAE,QAAQ;KACd,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QAC7C,MAAM,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,cAAc,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAChD,UAAU,GAAG,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE3F,MAAM,cAAc,GAAG,sBAAsB,CAAC,eAAe,EAAE,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACpF,aAAa,GAAG,cAAc,CAAC,aAAa,CAAC;QAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;QACzC,cAAc,GAAG,2BAA2B,EAAE,CAAC;QAC/C,OAAO,GAAG,IAAI,iBAAiB,CAAC,aAAa,EAAE,QAAQ,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;QACjF,oBAAoB,GAAG,QAAQ,CAAC,MAAM,CAAC;QAEvC,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3F,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAAA,CAC/B,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,kBAAkB,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACtF,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC;QAEpD,KAAK,MAAM,iBAAiB,IAAI,kBAAkB,EAAE,CAAC;YACpD,MAAM,OAAO,GAAY;gBACxB,EAAE,EAAE,aAAa,EAAE;gBACnB,SAAS;gBACT,UAAU,EAAE,iBAAiB,CAAC,UAAU;gBACxC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;gBACpC,MAAM,EAAE,iBAAiB,CAAC,MAAM;gBAChC,QAAQ,EAAE,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;aAC5D,CAAC;YAEF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;YAE5F,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACJ,MAAM,UAAU,CAAC;gBAClB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClD,CAAC;gBACD,SAAS;YACV,CAAC;YAED,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBACvD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACP,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;oBACjF,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;wBACtC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;oBACjC,CAAC;gBAAA,CACD,CAAC,CAAC;gBACH,IAAI,KAAK,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;YACF,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,UAAU,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,CAAC;QACF,CAAC;QAED,OAAO,SAAS,CAAC;IAAA,CACjB,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;QAC/C,KAAK,KAAK,CAAC;QAEX,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO;QACR,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QAED,KAAK,MAAM,cAAc,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,CAAC;IAAA,CACD,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { SettingsManager } from \"../../../settings-manager.js\";\nimport type { ExtensionAPI } from \"../../types.js\";\nimport { extractPatchedPaths } from \"../gpt-apply-patch/index.js\";\nimport { parsePermissionFlag } from \"./cli.js\";\nimport { disabled } from \"./config.js\";\nimport { createEventEmitter } from \"./events.js\";\nimport { handleNoUI } from \"./non-interactive.js\";\nimport { createBuiltinParserRegistry, type ParserRegistry } from \"./parsers.js\";\nimport { showPermissionPrompt } from \"./prompt.js\";\nimport { PermissionService } from \"./service.js\";\nimport { loadPermissionSettings } from \"./settings.js\";\nimport { appendApproved } from \"./storage.js\";\nimport { CorrectedError, DeniedError, RejectedError, type Request, type Ruleset } from \"./types.js\";\n\nfunction createRequestIDFactory(): () => string {\n\tlet counter = 0;\n\treturn () => {\n\t\tcounter += 1;\n\t\treturn `permission-${counter}`;\n\t};\n}\n\nfunction getReason(error: unknown): string {\n\tif (error instanceof DeniedError || error instanceof CorrectedError || error instanceof RejectedError) {\n\t\treturn error.message;\n\t}\n\n\tif (error instanceof Error) {\n\t\treturn error.message;\n\t}\n\n\treturn \"Permission request was rejected.\";\n}\n\nfunction createRequestMetadata(toolName: string, input: Record<string, unknown>): Record<string, unknown> {\n\tconst metadata: Record<string, unknown> = {\n\t\ttoolName,\n\t\t...input,\n\t};\n\n\tconst pathValue = typeof input.path === \"string\" ? input.path : undefined;\n\tconst filePathValue = typeof input.file_path === \"string\" ? input.file_path : undefined;\n\tconst patchTextValue =\n\t\ttypeof input.input === \"string\" ? input.input : typeof input.patchText === \"string\" ? input.patchText : undefined;\n\n\tif (toolName === \"edit\" || toolName === \"write\" || toolName === \"apply_patch\" || toolName === \"multiedit\") {\n\t\tmetadata.filepath = pathValue ?? filePathValue ?? extractPatchedPaths(patchTextValue ?? \"\")[0];\n\t}\n\n\tif (toolName === \"read\") {\n\t\tmetadata.filePath = pathValue ?? filePathValue;\n\t}\n\n\treturn metadata;\n}\n\nexport default function permissionSystemExtension(pi: ExtensionAPI): void {\n\tlet service: PermissionService | null = null;\n\tlet parserRegistry: ParserRegistry | null = null;\n\tlet cliRuleset: Ruleset = [];\n\tlet staticRuleset: Ruleset = [];\n\tlet initialApprovedCount = 0;\n\n\tconst nextRequestID = createRequestIDFactory();\n\n\tpi.registerFlag(\"permission\", {\n\t\tdescription: \"Set permission rules (format: tool=action or tool:pattern=action)\",\n\t\ttype: \"string\",\n\t});\n\n\tpi.on(\"session_start\", async (_event, ctx) => {\n\t\tconst settingsManager = SettingsManager.create(ctx.cwd);\n\t\tconst permissionFlag = pi.getFlag(\"permission\");\n\t\tcliRuleset = typeof permissionFlag === \"string\" ? parsePermissionFlag(permissionFlag) : [];\n\n\t\tconst loadedSettings = loadPermissionSettings(settingsManager, cliRuleset, ctx.cwd);\n\t\tstaticRuleset = loadedSettings.staticRuleset;\n\t\tconst approved = loadedSettings.approved;\n\t\tparserRegistry = createBuiltinParserRegistry();\n\t\tservice = new PermissionService(staticRuleset, approved, createEventEmitter(pi));\n\t\tinitialApprovedCount = approved.length;\n\n\t\tconst allTools = pi.getAllTools().map((tool) => tool.name);\n\t\tconst disabledTools = disabled(allTools, staticRuleset);\n\t\tconst activeTools = pi.getActiveTools().filter((toolName) => !disabledTools.has(toolName));\n\t\tpi.setActiveTools(activeTools);\n\t});\n\n\tpi.on(\"tool_call\", async (event, ctx) => {\n\t\tif (!service || !parserRegistry) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tconst permissionRequests = parserRegistry.parse(event.toolName, event.input, ctx.cwd);\n\t\tconst sessionID = ctx.sessionManager.getSessionId();\n\n\t\tfor (const permissionRequest of permissionRequests) {\n\t\t\tconst request: Request = {\n\t\t\t\tid: nextRequestID(),\n\t\t\t\tsessionID,\n\t\t\t\tpermission: permissionRequest.permission,\n\t\t\t\tpatterns: permissionRequest.patterns,\n\t\t\t\talways: permissionRequest.always,\n\t\t\t\tmetadata: createRequestMetadata(event.toolName, event.input),\n\t\t\t};\n\n\t\t\tconst askPromise = service.ask(request);\n\t\t\tconst isPending = service.list().some((pendingRequest) => pendingRequest.id === request.id);\n\n\t\t\tif (!isPending) {\n\t\t\t\ttry {\n\t\t\t\t\tawait askPromise;\n\t\t\t\t} catch (error) {\n\t\t\t\t\treturn { block: true, reason: getReason(error) };\n\t\t\t\t}\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tif (ctx.hasUI) {\n\t\t\t\tconst reply = await showPermissionPrompt(ctx, request);\n\t\t\t\tservice.reply(reply);\n\t\t\t} else {\n\t\t\t\tconst reply = handleNoUI(request, staticRuleset, cliRuleset, (eventName, data) => {\n\t\t\t\t\tif (eventName !== \"permission_asked\") {\n\t\t\t\t\t\tpi.events.emit(eventName, data);\n\t\t\t\t\t}\n\t\t\t\t});\n\t\t\t\tif (reply) {\n\t\t\t\t\tservice.reply(reply);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\ttry {\n\t\t\t\tawait askPromise;\n\t\t\t} catch (error) {\n\t\t\t\treturn { block: true, reason: getReason(error) };\n\t\t\t}\n\t\t}\n\n\t\treturn undefined;\n\t});\n\n\tpi.on(\"session_shutdown\", async (event, ctx) => {\n\t\tvoid event;\n\n\t\tif (!service) {\n\t\t\treturn;\n\t\t}\n\n\t\tconst approved = service.getApproved().slice(initialApprovedCount);\n\t\tif (approved.length > 0) {\n\t\t\tappendApproved(ctx.cwd, approved);\n\t\t}\n\n\t\tfor (const pendingRequest of service.list()) {\n\t\t\tservice.reply({ requestID: pendingRequest.id, reply: \"reject\" });\n\t\t}\n\t});\n}\n"]}

package/dist/core/extensions/builtin/permission-system/non-interactive.d.ts

@@ -0,0 +1,9 @@
+import type { ReplyInput, Request, Ruleset } from "../permission-system/types.js";
+/**
+ * Handle permission request in no-UI mode (print mode, unbound SDK).
+ * Returns ReplyInput to reject, or undefined to allow.
+ *
+ * Precedence: CLI override > static ruleset > auto-deny
+ */
+export declare function handleNoUI(request: Request, staticRuleset: Ruleset, cliOverride: Ruleset, emitEvent: (event: string, data: unknown) => void): ReplyInput | undefined;
+//# sourceMappingURL=non-interactive.d.ts.map

package/dist/core/extensions/builtin/permission-system/non-interactive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"non-interactive.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/non-interactive.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAElF;;;;;GAKG;AACH,wBAAgB,UAAU,CACzB,OAAO,EAAE,OAAO,EAChB,aAAa,EAAE,OAAO,EACtB,WAAW,EAAE,OAAO,EACpB,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,GAC/C,UAAU,GAAG,SAAS,CAqCxB","sourcesContent":["import { evaluate } from \"../permission-system/evaluate.js\";\nimport type { ReplyInput, Request, Ruleset } from \"../permission-system/types.js\";\n\n/**\n * Handle permission request in no-UI mode (print mode, unbound SDK).\n * Returns ReplyInput to reject, or undefined to allow.\n *\n * Precedence: CLI override > static ruleset > auto-deny\n */\nexport function handleNoUI(\n\trequest: Request,\n\tstaticRuleset: Ruleset,\n\tcliOverride: Ruleset,\n\temitEvent: (event: string, data: unknown) => void,\n): ReplyInput | undefined {\n\t// Emit permission_asked event for logging/telemetry\n\temitEvent(\"permission_asked\", request);\n\n\tconst cliRule = evaluate(request.permission, request.patterns[0], cliOverride);\n\tif (cliRule.action === \"allow\") {\n\t\temitEvent(\"permission_replied\", { requestID: request.id, sessionID: request.sessionID, reply: \"allow\" });\n\t\treturn undefined;\n\t}\n\tif (cliRule.action === \"deny\") {\n\t\treturn {\n\t\t\trequestID: request.id,\n\t\t\treply: \"reject\",\n\t\t\tmessage: `Permission denied by CLI flag: ${request.permission}`,\n\t\t};\n\t}\n\n\tconst staticRule = evaluate(request.permission, request.patterns[0], staticRuleset);\n\tif (staticRule.action === \"allow\") {\n\t\temitEvent(\"permission_replied\", { requestID: request.id, sessionID: request.sessionID, reply: \"allow\" });\n\t\treturn undefined;\n\t}\n\tif (staticRule.action === \"deny\") {\n\t\treturn {\n\t\t\trequestID: request.id,\n\t\t\treply: \"reject\",\n\t\t\tmessage: `Permission denied by config: ${request.permission}`,\n\t\t};\n\t}\n\n\t// Still \"ask\" - auto-deny with helpful message\n\tconst patternsStr = request.patterns.join(\", \");\n\treturn {\n\t\trequestID: request.id,\n\t\treply: \"reject\",\n\t\tmessage: `Permission required for ${request.permission} (${patternsStr}). Use --permission ${request.permission}=allow to override.`,\n\t};\n}\n"]}

package/dist/core/extensions/builtin/permission-system/non-interactive.js

@@ -0,0 +1,43 @@
+import { evaluate } from "../permission-system/evaluate.js";
+/**
+ * Handle permission request in no-UI mode (print mode, unbound SDK).
+ * Returns ReplyInput to reject, or undefined to allow.
+ *
+ * Precedence: CLI override > static ruleset > auto-deny
+ */
+export function handleNoUI(request, staticRuleset, cliOverride, emitEvent) {
+    // Emit permission_asked event for logging/telemetry
+    emitEvent("permission_asked", request);
+    const cliRule = evaluate(request.permission, request.patterns[0], cliOverride);
+    if (cliRule.action === "allow") {
+        emitEvent("permission_replied", { requestID: request.id, sessionID: request.sessionID, reply: "allow" });
+        return undefined;
+    }
+    if (cliRule.action === "deny") {
+        return {
+            requestID: request.id,
+            reply: "reject",
+            message: `Permission denied by CLI flag: ${request.permission}`,
+        };
+    }
+    const staticRule = evaluate(request.permission, request.patterns[0], staticRuleset);
+    if (staticRule.action === "allow") {
+        emitEvent("permission_replied", { requestID: request.id, sessionID: request.sessionID, reply: "allow" });
+        return undefined;
+    }
+    if (staticRule.action === "deny") {
+        return {
+            requestID: request.id,
+            reply: "reject",
+            message: `Permission denied by config: ${request.permission}`,
+        };
+    }
+    // Still "ask" - auto-deny with helpful message
+    const patternsStr = request.patterns.join(", ");
+    return {
+        requestID: request.id,
+        reply: "reject",
+        message: `Permission required for ${request.permission} (${patternsStr}). Use --permission ${request.permission}=allow to override.`,
+    };
+}
+//# sourceMappingURL=non-interactive.js.map

package/dist/core/extensions/builtin/permission-system/non-interactive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"non-interactive.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/non-interactive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAG5D;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CACzB,OAAgB,EAChB,aAAsB,EACtB,WAAoB,EACpB,SAAiD,EACxB;IACzB,oDAAoD;IACpD,SAAS,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAEvC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,SAAS,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACzG,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/B,OAAO;YACN,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,kCAAkC,OAAO,CAAC,UAAU,EAAE;SAC/D,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACpF,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACnC,SAAS,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACzG,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,OAAO;YACN,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,gCAAgC,OAAO,CAAC,UAAU,EAAE;SAC7D,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO;QACN,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,2BAA2B,OAAO,CAAC,UAAU,KAAK,WAAW,uBAAuB,OAAO,CAAC,UAAU,qBAAqB;KACpI,CAAC;AAAA,CACF","sourcesContent":["import { evaluate } from \"../permission-system/evaluate.js\";\nimport type { ReplyInput, Request, Ruleset } from \"../permission-system/types.js\";\n\n/**\n * Handle permission request in no-UI mode (print mode, unbound SDK).\n * Returns ReplyInput to reject, or undefined to allow.\n *\n * Precedence: CLI override > static ruleset > auto-deny\n */\nexport function handleNoUI(\n\trequest: Request,\n\tstaticRuleset: Ruleset,\n\tcliOverride: Ruleset,\n\temitEvent: (event: string, data: unknown) => void,\n): ReplyInput | undefined {\n\t// Emit permission_asked event for logging/telemetry\n\temitEvent(\"permission_asked\", request);\n\n\tconst cliRule = evaluate(request.permission, request.patterns[0], cliOverride);\n\tif (cliRule.action === \"allow\") {\n\t\temitEvent(\"permission_replied\", { requestID: request.id, sessionID: request.sessionID, reply: \"allow\" });\n\t\treturn undefined;\n\t}\n\tif (cliRule.action === \"deny\") {\n\t\treturn {\n\t\t\trequestID: request.id,\n\t\t\treply: \"reject\",\n\t\t\tmessage: `Permission denied by CLI flag: ${request.permission}`,\n\t\t};\n\t}\n\n\tconst staticRule = evaluate(request.permission, request.patterns[0], staticRuleset);\n\tif (staticRule.action === \"allow\") {\n\t\temitEvent(\"permission_replied\", { requestID: request.id, sessionID: request.sessionID, reply: \"allow\" });\n\t\treturn undefined;\n\t}\n\tif (staticRule.action === \"deny\") {\n\t\treturn {\n\t\t\trequestID: request.id,\n\t\t\treply: \"reject\",\n\t\t\tmessage: `Permission denied by config: ${request.permission}`,\n\t\t};\n\t}\n\n\t// Still \"ask\" - auto-deny with helpful message\n\tconst patternsStr = request.patterns.join(\", \");\n\treturn {\n\t\trequestID: request.id,\n\t\treply: \"reject\",\n\t\tmessage: `Permission required for ${request.permission} (${patternsStr}). Use --permission ${request.permission}=allow to override.`,\n\t};\n}\n"]}

package/dist/core/extensions/builtin/permission-system/parsers.d.ts

@@ -0,0 +1,16 @@
+import type { Request } from "../permission-system/types.js";
+/** Simplified permission request without ID/session metadata */
+export type PermissionRequest = Pick<Request, "permission" | "patterns" | "always">;
+/** Parser function that extracts permission requests from tool input */
+export type ToolPermissionParser = (toolName: string, input: Record<string, unknown>, cwd: string) => PermissionRequest[];
+/** Registry for tool-specific permission parsers */
+export declare class ParserRegistry {
+    private readonly parsers;
+    /** Register a parser for a specific tool */
+    register(toolName: string, parser: ToolPermissionParser): void;
+    /** Parse tool input into permission requests */
+    parse(toolName: string, input: Record<string, unknown>, cwd: string): PermissionRequest[];
+}
+/** Create registry with built-in parsers for standard tools */
+export declare function createBuiltinParserRegistry(): ParserRegistry;
+//# sourceMappingURL=parsers.d.ts.map

package/dist/core/extensions/builtin/permission-system/parsers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parsers.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/parsers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAE7D,gEAAgE;AAChE,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC;AAEpF,wEAAwE;AACxE,MAAM,MAAM,oBAAoB,GAAG,CAClC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,EAAE,MAAM,KACP,iBAAiB,EAAE,CAAC;AAoCzB,oDAAoD;AACpD,qBAAa,cAAc;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2C;IAEnE,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAE7D;IAED,gDAAgD;IAChD,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAMxF;CACD;AAED,+DAA+D;AAC/D,wBAAgB,2BAA2B,IAAI,cAAc,CAqH5D","sourcesContent":["import { extractPatchedPaths } from \"../gpt-apply-patch/index.js\";\nimport { BashArity } from \"../permission-system/arity.js\";\nimport { extractExternalPaths } from \"../permission-system/external-dir.js\";\nimport type { Request } from \"../permission-system/types.js\";\n\n/** Simplified permission request without ID/session metadata */\nexport type PermissionRequest = Pick<Request, \"permission\" | \"patterns\" | \"always\">;\n\n/** Parser function that extracts permission requests from tool input */\nexport type ToolPermissionParser = (\n\ttoolName: string,\n\tinput: Record<string, unknown>,\n\tcwd: string,\n) => PermissionRequest[];\n\nfunction fallbackPermissionRequest(permission: string): PermissionRequest {\n\treturn {\n\t\tpermission,\n\t\tpatterns: [\"*\"],\n\t\talways: [\"*\"],\n\t};\n}\n\nfunction getString(input: Record<string, unknown>, ...keys: string[]): string | undefined {\n\tfor (const key of keys) {\n\t\tconst value = input[key];\n\t\tif (typeof value === \"string\") {\n\t\t\treturn value;\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction toParentDirectoryPattern(inputPath: string): string {\n\tif (inputPath === \"~\" || inputPath === \"$HOME\") {\n\t\treturn `${inputPath}/*`;\n\t}\n\n\tif (inputPath.endsWith(\"/\") || inputPath.endsWith(\"\\\\\")) {\n\t\treturn `${inputPath}*`;\n\t}\n\n\treturn inputPath.replace(/[\\\\/][^\\\\/]+$/, \"/*\");\n}\n\nfunction parseFilePath(input: Record<string, unknown>): string | undefined {\n\treturn getString(input, \"path\", \"file_path\");\n}\n\n/** Registry for tool-specific permission parsers */\nexport class ParserRegistry {\n\tprivate readonly parsers = new Map<string, ToolPermissionParser>();\n\n\t/** Register a parser for a specific tool */\n\tregister(toolName: string, parser: ToolPermissionParser): void {\n\t\tthis.parsers.set(toolName, parser);\n\t}\n\n\t/** Parse tool input into permission requests */\n\tparse(toolName: string, input: Record<string, unknown>, cwd: string): PermissionRequest[] {\n\t\tconst parser = this.parsers.get(toolName);\n\t\tif (!parser) {\n\t\t\treturn [fallbackPermissionRequest(toolName)];\n\t\t}\n\t\treturn parser(toolName, input, cwd);\n\t}\n}\n\n/** Create registry with built-in parsers for standard tools */\nexport function createBuiltinParserRegistry(): ParserRegistry {\n\tconst registry = new ParserRegistry();\n\n\tregistry.register(\"bash\", (_toolName, input, cwd) => {\n\t\tconst command = getString(input, \"command\");\n\t\tif (!command) {\n\t\t\treturn [fallbackPermissionRequest(\"bash\")];\n\t\t}\n\n\t\tconst tokens = command.split(/\\s+/).filter(Boolean);\n\t\tconst prefix = BashArity.prefix(tokens).join(\" \");\n\t\tconst always = prefix ? [prefix, `${prefix} *`] : [\"*\"];\n\t\tconst requests: PermissionRequest[] = [\n\t\t\t{\n\t\t\t\tpermission: \"bash\",\n\t\t\t\tpatterns: [prefix || command],\n\t\t\t\talways,\n\t\t\t},\n\t\t];\n\n\t\tconst externalPaths = extractExternalPaths(command, cwd);\n\t\tif (externalPaths.length > 0) {\n\t\t\trequests.push({\n\t\t\t\tpermission: \"external_directory\",\n\t\t\t\tpatterns: externalPaths,\n\t\t\t\talways: externalPaths.map(toParentDirectoryPattern),\n\t\t\t});\n\t\t}\n\n\t\treturn requests;\n\t});\n\n\tconst editParser: ToolPermissionParser = () => {\n\t\treturn [fallbackPermissionRequest(\"edit\")];\n\t};\n\n\tconst parseEditPermission: ToolPermissionParser = (_toolName, input) => {\n\t\tconst filePath = parseFilePath(input);\n\t\tif (filePath) {\n\t\t\treturn [\n\t\t\t\t{\n\t\t\t\t\tpermission: \"edit\",\n\t\t\t\t\tpatterns: [filePath],\n\t\t\t\t\talways: [filePath],\n\t\t\t\t},\n\t\t\t];\n\t\t}\n\n\t\tconst patchText = getString(input, \"input\", \"patchText\");\n\t\tif (!patchText) {\n\t\t\treturn editParser(\"edit\", input, \"\");\n\t\t}\n\n\t\tconst patchedPaths = extractPatchedPaths(patchText);\n\t\tif (patchedPaths.length === 0) {\n\t\t\treturn editParser(\"edit\", input, \"\");\n\t\t}\n\n\t\treturn patchedPaths.map((patchedPath) => ({\n\t\t\tpermission: \"edit\",\n\t\t\tpatterns: [patchedPath],\n\t\t\talways: [patchedPath],\n\t\t}));\n\t};\n\n\tregistry.register(\"edit\", parseEditPermission);\n\tregistry.register(\"write\", parseEditPermission);\n\tregistry.register(\"apply_patch\", parseEditPermission);\n\tregistry.register(\"multiedit\", parseEditPermission);\n\n\tregistry.register(\"read\", (_toolName, input) => {\n\t\tconst filePath = parseFilePath(input);\n\t\tif (!filePath) {\n\t\t\treturn [fallbackPermissionRequest(\"read\")];\n\t\t}\n\n\t\treturn [\n\t\t\t{\n\t\t\t\tpermission: \"read\",\n\t\t\t\tpatterns: [filePath],\n\t\t\t\talways: [filePath],\n\t\t\t},\n\t\t];\n\t});\n\n\tregistry.register(\"grep\", (_toolName, input) => {\n\t\tconst searchPath = getString(input, \"path\");\n\t\tconst pattern = getString(input, \"pattern\");\n\t\tconst permissionPattern = searchPath ?? pattern;\n\t\tif (!permissionPattern) {\n\t\t\treturn [fallbackPermissionRequest(\"grep\")];\n\t\t}\n\n\t\treturn [\n\t\t\t{\n\t\t\t\tpermission: \"grep\",\n\t\t\t\tpatterns: [permissionPattern],\n\t\t\t\talways: [\"*\"],\n\t\t\t},\n\t\t];\n\t});\n\n\tconst listParser: ToolPermissionParser = (_toolName, input) => {\n\t\tconst searchPath = getString(input, \"path\") ?? \".\";\n\t\treturn [\n\t\t\t{\n\t\t\t\tpermission: \"list\",\n\t\t\t\tpatterns: [searchPath],\n\t\t\t\talways: [searchPath],\n\t\t\t},\n\t\t];\n\t};\n\n\tregistry.register(\"find\", listParser);\n\tregistry.register(\"ls\", listParser);\n\n\treturn registry;\n}\n"]}

package/dist/core/extensions/builtin/permission-system/parsers.js

@@ -0,0 +1,150 @@
+import { extractPatchedPaths } from "../gpt-apply-patch/index.js";
+import { BashArity } from "../permission-system/arity.js";
+import { extractExternalPaths } from "../permission-system/external-dir.js";
+function fallbackPermissionRequest(permission) {
+    return {
+        permission,
+        patterns: ["*"],
+        always: ["*"],
+    };
+}
+function getString(input, ...keys) {
+    for (const key of keys) {
+        const value = input[key];
+        if (typeof value === "string") {
+            return value;
+        }
+    }
+    return undefined;
+}
+function toParentDirectoryPattern(inputPath) {
+    if (inputPath === "~" || inputPath === "$HOME") {
+        return `${inputPath}/*`;
+    }
+    if (inputPath.endsWith("/") || inputPath.endsWith("\\")) {
+        return `${inputPath}*`;
+    }
+    return inputPath.replace(/[\\/][^\\/]+$/, "/*");
+}
+function parseFilePath(input) {
+    return getString(input, "path", "file_path");
+}
+/** Registry for tool-specific permission parsers */
+export class ParserRegistry {
+    parsers = new Map();
+    /** Register a parser for a specific tool */
+    register(toolName, parser) {
+        this.parsers.set(toolName, parser);
+    }
+    /** Parse tool input into permission requests */
+    parse(toolName, input, cwd) {
+        const parser = this.parsers.get(toolName);
+        if (!parser) {
+            return [fallbackPermissionRequest(toolName)];
+        }
+        return parser(toolName, input, cwd);
+    }
+}
+/** Create registry with built-in parsers for standard tools */
+export function createBuiltinParserRegistry() {
+    const registry = new ParserRegistry();
+    registry.register("bash", (_toolName, input, cwd) => {
+        const command = getString(input, "command");
+        if (!command) {
+            return [fallbackPermissionRequest("bash")];
+        }
+        const tokens = command.split(/\s+/).filter(Boolean);
+        const prefix = BashArity.prefix(tokens).join(" ");
+        const always = prefix ? [prefix, `${prefix} *`] : ["*"];
+        const requests = [
+            {
+                permission: "bash",
+                patterns: [prefix || command],
+                always,
+            },
+        ];
+        const externalPaths = extractExternalPaths(command, cwd);
+        if (externalPaths.length > 0) {
+            requests.push({
+                permission: "external_directory",
+                patterns: externalPaths,
+                always: externalPaths.map(toParentDirectoryPattern),
+            });
+        }
+        return requests;
+    });
+    const editParser = () => {
+        return [fallbackPermissionRequest("edit")];
+    };
+    const parseEditPermission = (_toolName, input) => {
+        const filePath = parseFilePath(input);
+        if (filePath) {
+            return [
+                {
+                    permission: "edit",
+                    patterns: [filePath],
+                    always: [filePath],
+                },
+            ];
+        }
+        const patchText = getString(input, "input", "patchText");
+        if (!patchText) {
+            return editParser("edit", input, "");
+        }
+        const patchedPaths = extractPatchedPaths(patchText);
+        if (patchedPaths.length === 0) {
+            return editParser("edit", input, "");
+        }
+        return patchedPaths.map((patchedPath) => ({
+            permission: "edit",
+            patterns: [patchedPath],
+            always: [patchedPath],
+        }));
+    };
+    registry.register("edit", parseEditPermission);
+    registry.register("write", parseEditPermission);
+    registry.register("apply_patch", parseEditPermission);
+    registry.register("multiedit", parseEditPermission);
+    registry.register("read", (_toolName, input) => {
+        const filePath = parseFilePath(input);
+        if (!filePath) {
+            return [fallbackPermissionRequest("read")];
+        }
+        return [
+            {
+                permission: "read",
+                patterns: [filePath],
+                always: [filePath],
+            },
+        ];
+    });
+    registry.register("grep", (_toolName, input) => {
+        const searchPath = getString(input, "path");
+        const pattern = getString(input, "pattern");
+        const permissionPattern = searchPath ?? pattern;
+        if (!permissionPattern) {
+            return [fallbackPermissionRequest("grep")];
+        }
+        return [
+            {
+                permission: "grep",
+                patterns: [permissionPattern],
+                always: ["*"],
+            },
+        ];
+    });
+    const listParser = (_toolName, input) => {
+        const searchPath = getString(input, "path") ?? ".";
+        return [
+            {
+                permission: "list",
+                patterns: [searchPath],
+                always: [searchPath],
+            },
+        ];
+    };
+    registry.register("find", listParser);
+    registry.register("ls", listParser);
+    return registry;
+}
+//# sourceMappingURL=parsers.js.map

package/dist/core/extensions/builtin/permission-system/parsers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parsers.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/parsers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAa5E,SAAS,yBAAyB,CAAC,UAAkB,EAAqB;IACzE,OAAO;QACN,UAAU;QACV,QAAQ,EAAE,CAAC,GAAG,CAAC;QACf,MAAM,EAAE,CAAC,GAAG,CAAC;KACb,CAAC;AAAA,CACF;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,GAAG,IAAc,EAAsB;IACzF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,wBAAwB,CAAC,SAAiB,EAAU;IAC5D,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAChD,OAAO,GAAG,SAAS,IAAI,CAAC;IACzB,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,OAAO,GAAG,SAAS,GAAG,CAAC;IACxB,CAAC;IAED,OAAO,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;AAAA,CAChD;AAED,SAAS,aAAa,CAAC,KAA8B,EAAsB;IAC1E,OAAO,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AAAA,CAC7C;AAED,oDAAoD;AACpD,MAAM,OAAO,cAAc;IACT,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;IAEnE,4CAA4C;IAC5C,QAAQ,CAAC,QAAgB,EAAE,MAA4B,EAAQ;QAC9D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAAA,CACnC;IAED,gDAAgD;IAChD,KAAK,CAAC,QAAgB,EAAE,KAA8B,EAAE,GAAW,EAAuB;QACzF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAAA,CACpC;CACD;AAED,+DAA+D;AAC/D,MAAM,UAAU,2BAA2B,GAAmB;IAC7D,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;IAEtC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAwB;YACrC;gBACC,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,CAAC,MAAM,IAAI,OAAO,CAAC;gBAC7B,MAAM;aACN;SACD,CAAC;QAEF,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC;gBACb,UAAU,EAAE,oBAAoB;gBAChC,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,wBAAwB,CAAC;aACnD,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAAA,CAChB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAyB,GAAG,EAAE,CAAC;QAC9C,OAAO,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;IAAA,CAC3C,CAAC;IAEF,MAAM,mBAAmB,GAAyB,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QACvE,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,QAAQ,EAAE,CAAC;YACd,OAAO;gBACN;oBACC,UAAU,EAAE,MAAM;oBAClB,QAAQ,EAAE,CAAC,QAAQ,CAAC;oBACpB,MAAM,EAAE,CAAC,QAAQ,CAAC;iBAClB;aACD,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,OAAO,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACzC,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,CAAC,WAAW,CAAC;YACvB,MAAM,EAAE,CAAC,WAAW,CAAC;SACrB,CAAC,CAAC,CAAC;IAAA,CACJ,CAAC;IAEF,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC/C,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAChD,QAAQ,CAAC,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;IACtD,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAEpD,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO;YACN;gBACC,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,CAAC,QAAQ,CAAC;gBACpB,MAAM,EAAE,CAAC,QAAQ,CAAC;aAClB;SACD,CAAC;IAAA,CACF,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5C,MAAM,iBAAiB,GAAG,UAAU,IAAI,OAAO,CAAC;QAChD,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO;YACN;gBACC,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,CAAC,iBAAiB,CAAC;gBAC7B,MAAM,EAAE,CAAC,GAAG,CAAC;aACb;SACD,CAAC;IAAA,CACF,CAAC,CAAC;IAEH,MAAM,UAAU,GAAyB,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9D,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC;QACnD,OAAO;YACN;gBACC,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,CAAC,UAAU,CAAC;gBACtB,MAAM,EAAE,CAAC,UAAU,CAAC;aACpB;SACD,CAAC;IAAA,CACF,CAAC;IAEF,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAEpC,OAAO,QAAQ,CAAC;AAAA,CAChB","sourcesContent":["import { extractPatchedPaths } from \"../gpt-apply-patch/index.js\";\nimport { BashArity } from \"../permission-system/arity.js\";\nimport { extractExternalPaths } from \"../permission-system/external-dir.js\";\nimport type { Request } from \"../permission-system/types.js\";\n\n/** Simplified permission request without ID/session metadata */\nexport type PermissionRequest = Pick<Request, \"permission\" | \"patterns\" | \"always\">;\n\n/** Parser function that extracts permission requests from tool input */\nexport type ToolPermissionParser = (\n\ttoolName: string,\n\tinput: Record<string, unknown>,\n\tcwd: string,\n) => PermissionRequest[];\n\nfunction fallbackPermissionRequest(permission: string): PermissionRequest {\n\treturn {\n\t\tpermission,\n\t\tpatterns: [\"*\"],\n\t\talways: [\"*\"],\n\t};\n}\n\nfunction getString(input: Record<string, unknown>, ...keys: string[]): string | undefined {\n\tfor (const key of keys) {\n\t\tconst value = input[key];\n\t\tif (typeof value === \"string\") {\n\t\t\treturn value;\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction toParentDirectoryPattern(inputPath: string): string {\n\tif (inputPath === \"~\" || inputPath === \"$HOME\") {\n\t\treturn `${inputPath}/*`;\n\t}\n\n\tif (inputPath.endsWith(\"/\") || inputPath.endsWith(\"\\\\\")) {\n\t\treturn `${inputPath}*`;\n\t}\n\n\treturn inputPath.replace(/[\\\\/][^\\\\/]+$/, \"/*\");\n}\n\nfunction parseFilePath(input: Record<string, unknown>): string | undefined {\n\treturn getString(input, \"path\", \"file_path\");\n}\n\n/** Registry for tool-specific permission parsers */\nexport class ParserRegistry {\n\tprivate readonly parsers = new Map<string, ToolPermissionParser>();\n\n\t/** Register a parser for a specific tool */\n\tregister(toolName: string, parser: ToolPermissionParser): void {\n\t\tthis.parsers.set(toolName, parser);\n\t}\n\n\t/** Parse tool input into permission requests */\n\tparse(toolName: string, input: Record<string, unknown>, cwd: string): PermissionRequest[] {\n\t\tconst parser = this.parsers.get(toolName);\n\t\tif (!parser) {\n\t\t\treturn [fallbackPermissionRequest(toolName)];\n\t\t}\n\t\treturn parser(toolName, input, cwd);\n\t}\n}\n\n/** Create registry with built-in parsers for standard tools */\nexport function createBuiltinParserRegistry(): ParserRegistry {\n\tconst registry = new ParserRegistry();\n\n\tregistry.register(\"bash\", (_toolName, input, cwd) => {\n\t\tconst command = getString(input, \"command\");\n\t\tif (!command) {\n\t\t\treturn [fallbackPermissionRequest(\"bash\")];\n\t\t}\n\n\t\tconst tokens = command.split(/\\s+/).filter(Boolean);\n\t\tconst prefix = BashArity.prefix(tokens).join(\" \");\n\t\tconst always = prefix ? [prefix, `${prefix} *`] : [\"*\"];\n\t\tconst requests: PermissionRequest[] = [\n\t\t\t{\n\t\t\t\tpermission: \"bash\",\n\t\t\t\tpatterns: [prefix || command],\n\t\t\t\talways,\n\t\t\t},\n\t\t];\n\n\t\tconst externalPaths = extractExternalPaths(command, cwd);\n\t\tif (externalPaths.length > 0) {\n\t\t\trequests.push({\n\t\t\t\tpermission: \"external_directory\",\n\t\t\t\tpatterns: externalPaths,\n\t\t\t\talways: externalPaths.map(toParentDirectoryPattern),\n\t\t\t});\n\t\t}\n\n\t\treturn requests;\n\t});\n\n\tconst editParser: ToolPermissionParser = () => {\n\t\treturn [fallbackPermissionRequest(\"edit\")];\n\t};\n\n\tconst parseEditPermission: ToolPermissionParser = (_toolName, input) => {\n\t\tconst filePath = parseFilePath(input);\n\t\tif (filePath) {\n\t\t\treturn [\n\t\t\t\t{\n\t\t\t\t\tpermission: \"edit\",\n\t\t\t\t\tpatterns: [filePath],\n\t\t\t\t\talways: [filePath],\n\t\t\t\t},\n\t\t\t];\n\t\t}\n\n\t\tconst patchText = getString(input, \"input\", \"patchText\");\n\t\tif (!patchText) {\n\t\t\treturn editParser(\"edit\", input, \"\");\n\t\t}\n\n\t\tconst patchedPaths = extractPatchedPaths(patchText);\n\t\tif (patchedPaths.length === 0) {\n\t\t\treturn editParser(\"edit\", input, \"\");\n\t\t}\n\n\t\treturn patchedPaths.map((patchedPath) => ({\n\t\t\tpermission: \"edit\",\n\t\t\tpatterns: [patchedPath],\n\t\t\talways: [patchedPath],\n\t\t}));\n\t};\n\n\tregistry.register(\"edit\", parseEditPermission);\n\tregistry.register(\"write\", parseEditPermission);\n\tregistry.register(\"apply_patch\", parseEditPermission);\n\tregistry.register(\"multiedit\", parseEditPermission);\n\n\tregistry.register(\"read\", (_toolName, input) => {\n\t\tconst filePath = parseFilePath(input);\n\t\tif (!filePath) {\n\t\t\treturn [fallbackPermissionRequest(\"read\")];\n\t\t}\n\n\t\treturn [\n\t\t\t{\n\t\t\t\tpermission: \"read\",\n\t\t\t\tpatterns: [filePath],\n\t\t\t\talways: [filePath],\n\t\t\t},\n\t\t];\n\t});\n\n\tregistry.register(\"grep\", (_toolName, input) => {\n\t\tconst searchPath = getString(input, \"path\");\n\t\tconst pattern = getString(input, \"pattern\");\n\t\tconst permissionPattern = searchPath ?? pattern;\n\t\tif (!permissionPattern) {\n\t\t\treturn [fallbackPermissionRequest(\"grep\")];\n\t\t}\n\n\t\treturn [\n\t\t\t{\n\t\t\t\tpermission: \"grep\",\n\t\t\t\tpatterns: [permissionPattern],\n\t\t\t\talways: [\"*\"],\n\t\t\t},\n\t\t];\n\t});\n\n\tconst listParser: ToolPermissionParser = (_toolName, input) => {\n\t\tconst searchPath = getString(input, \"path\") ?? \".\";\n\t\treturn [\n\t\t\t{\n\t\t\t\tpermission: \"list\",\n\t\t\t\tpatterns: [searchPath],\n\t\t\t\talways: [searchPath],\n\t\t\t},\n\t\t];\n\t};\n\n\tregistry.register(\"find\", listParser);\n\tregistry.register(\"ls\", listParser);\n\n\treturn registry;\n}\n"]}

package/dist/core/extensions/builtin/permission-system/prompt.d.ts

@@ -0,0 +1,4 @@
+import type { ExtensionContext } from "../../types.js";
+import type { ReplyInput, Request } from "./types.js";
+export declare function showPermissionPrompt(ctx: ExtensionContext, request: Request): Promise<ReplyInput>;
+//# sourceMappingURL=prompt.d.ts.map

package/dist/core/extensions/builtin/permission-system/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAS,UAAU,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE7D,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CA6BvG","sourcesContent":["import type { ExtensionContext } from \"../../types.js\";\nimport type { Reply, ReplyInput, Request } from \"./types.js\";\n\nexport async function showPermissionPrompt(ctx: ExtensionContext, request: Request): Promise<ReplyInput> {\n\tconst title = `Permission required: ${request.permission}`;\n\tconst message = formatRequestForDisplay(request);\n\n\tconst displayTitle = `${title}\\n\\n${message}`;\n\n\tconst options = [\"Allow once\", \"Allow always\", \"Deny\", \"Deny with feedback\"];\n\n\tconst choice = await ctx.ui.select(displayTitle, options);\n\n\tif (choice === \"Deny with feedback\") {\n\t\tconst feedback = await ctx.ui.input(\"Feedback\", \"Why are you denying this permission? (optional)\");\n\t\treturn {\n\t\t\trequestID: request.id,\n\t\t\treply: \"reject\",\n\t\t\tmessage: feedback || undefined,\n\t\t};\n\t}\n\n\tconst replyMap: Record<string, Reply> = {\n\t\t\"Allow once\": \"once\",\n\t\t\"Allow always\": \"always\",\n\t\tDeny: \"reject\",\n\t};\n\n\treturn {\n\t\trequestID: request.id,\n\t\treply: choice ? replyMap[choice] : \"reject\",\n\t};\n}\n\nfunction formatRequestForDisplay(request: Request): string {\n\tconst parts: string[] = [];\n\tconst meta = request.metadata || {};\n\n\tswitch (request.permission) {\n\t\tcase \"edit\":\n\t\t\tparts.push(`File: ${meta.filepath || \"Unknown\"}`);\n\t\t\tbreak;\n\t\tcase \"read\":\n\t\t\tparts.push(`Path: ${meta.filePath || \"Unknown\"}`);\n\t\t\tbreak;\n\t\tcase \"glob\":\n\t\tcase \"grep\":\n\t\t\tparts.push(`Pattern: ${meta.pattern || \"Unknown\"}`);\n\t\t\tbreak;\n\t\tcase \"list\":\n\t\t\tparts.push(`Path: ${meta.path || \"Unknown\"}`);\n\t\t\tbreak;\n\t\tcase \"bash\":\n\t\t\tif (meta.description) parts.push(`Description: ${meta.description}`);\n\t\t\tparts.push(`Command: $ ${meta.command || \"Unknown\"}`);\n\t\t\tbreak;\n\t\tcase \"task\":\n\t\t\tparts.push(`Type: ${meta.subagent_type || \"Unknown\"}`);\n\t\t\tif (meta.description) parts.push(`Description: ${meta.description}`);\n\t\t\tbreak;\n\t\tcase \"websearch\":\n\t\tcase \"codesearch\":\n\t\t\tparts.push(`Query: ${meta.query || \"Unknown\"}`);\n\t\t\tbreak;\n\t\tcase \"external_directory\": {\n\t\t\tconst parent = typeof meta.parentDir === \"string\" ? meta.parentDir : undefined;\n\t\t\tconst filepath = typeof meta.filepath === \"string\" ? meta.filepath : undefined;\n\t\t\tconst pattern = request.patterns?.[0];\n\t\t\tconst derived =\n\t\t\t\ttypeof pattern === \"string\" ? (pattern.includes(\"*\") ? pattern.split(\"*\")[0] : pattern) : undefined;\n\t\t\tconst dir = parent ?? filepath ?? derived ?? \"Unknown\";\n\t\t\tparts.push(`Directory: ${dir}`);\n\t\t\tbreak;\n\t\t}\n\t\tdefault:\n\t\t\tparts.push(`Tool: ${request.permission}`);\n\t\t\tbreak;\n\t}\n\n\tif (request.patterns && request.patterns.length > 0) {\n\t\tparts.push(`\\nPatterns:\\n${request.patterns.map((p) => `  - ${p}`).join(\"\\n\")}`);\n\t}\n\n\treturn parts.join(\"\\n\");\n}\n"]}