@code-yeongyu/senpi 0.74.0

package/dist/core/extensions/builtin/permission-system/prompt.js

@@ -0,0 +1,74 @@
+export async function showPermissionPrompt(ctx, request) {
+    const title = `Permission required: ${request.permission}`;
+    const message = formatRequestForDisplay(request);
+    const displayTitle = `${title}\n\n${message}`;
+    const options = ["Allow once", "Allow always", "Deny", "Deny with feedback"];
+    const choice = await ctx.ui.select(displayTitle, options);
+    if (choice === "Deny with feedback") {
+        const feedback = await ctx.ui.input("Feedback", "Why are you denying this permission? (optional)");
+        return {
+            requestID: request.id,
+            reply: "reject",
+            message: feedback || undefined,
+        };
+    }
+    const replyMap = {
+        "Allow once": "once",
+        "Allow always": "always",
+        Deny: "reject",
+    };
+    return {
+        requestID: request.id,
+        reply: choice ? replyMap[choice] : "reject",
+    };
+}
+function formatRequestForDisplay(request) {
+    const parts = [];
+    const meta = request.metadata || {};
+    switch (request.permission) {
+        case "edit":
+            parts.push(`File: ${meta.filepath || "Unknown"}`);
+            break;
+        case "read":
+            parts.push(`Path: ${meta.filePath || "Unknown"}`);
+            break;
+        case "glob":
+        case "grep":
+            parts.push(`Pattern: ${meta.pattern || "Unknown"}`);
+            break;
+        case "list":
+            parts.push(`Path: ${meta.path || "Unknown"}`);
+            break;
+        case "bash":
+            if (meta.description)
+                parts.push(`Description: ${meta.description}`);
+            parts.push(`Command: $ ${meta.command || "Unknown"}`);
+            break;
+        case "task":
+            parts.push(`Type: ${meta.subagent_type || "Unknown"}`);
+            if (meta.description)
+                parts.push(`Description: ${meta.description}`);
+            break;
+        case "websearch":
+        case "codesearch":
+            parts.push(`Query: ${meta.query || "Unknown"}`);
+            break;
+        case "external_directory": {
+            const parent = typeof meta.parentDir === "string" ? meta.parentDir : undefined;
+            const filepath = typeof meta.filepath === "string" ? meta.filepath : undefined;
+            const pattern = request.patterns?.[0];
+            const derived = typeof pattern === "string" ? (pattern.includes("*") ? pattern.split("*")[0] : pattern) : undefined;
+            const dir = parent ?? filepath ?? derived ?? "Unknown";
+            parts.push(`Directory: ${dir}`);
+            break;
+        }
+        default:
+            parts.push(`Tool: ${request.permission}`);
+            break;
+    }
+    if (request.patterns && request.patterns.length > 0) {
+        parts.push(`\nPatterns:\n${request.patterns.map((p) => `  - ${p}`).join("\n")}`);
+    }
+    return parts.join("\n");
+}
+//# sourceMappingURL=prompt.js.map

package/dist/core/extensions/builtin/permission-system/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/prompt.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAqB,EAAE,OAAgB,EAAuB;IACxG,MAAM,KAAK,GAAG,wBAAwB,OAAO,CAAC,UAAU,EAAE,CAAC;IAC3D,MAAM,OAAO,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEjD,MAAM,YAAY,GAAG,GAAG,KAAK,OAAO,OAAO,EAAE,CAAC;IAE9C,MAAM,OAAO,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAE7E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAE1D,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,iDAAiD,CAAC,CAAC;QACnG,OAAO;YACN,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,QAAQ,IAAI,SAAS;SAC9B,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAA0B;QACvC,YAAY,EAAE,MAAM;QACpB,cAAc,EAAE,QAAQ;QACxB,IAAI,EAAE,QAAQ;KACd,CAAC;IAEF,OAAO;QACN,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ;KAC3C,CAAC;AAAA,CACF;AAED,SAAS,uBAAuB,CAAC,OAAgB,EAAU;IAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IAEpC,QAAQ,OAAO,CAAC,UAAU,EAAE,CAAC;QAC5B,KAAK,MAAM;YACV,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC;YAClD,MAAM;QACP,KAAK,MAAM;YACV,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC;YAClD,MAAM;QACP,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACV,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;YACpD,MAAM;QACP,KAAK,MAAM;YACV,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;YAC9C,MAAM;QACP,KAAK,MAAM;YACV,IAAI,IAAI,CAAC,WAAW;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACrE,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;YACtD,MAAM;QACP,KAAK,MAAM;YACV,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,IAAI,SAAS,EAAE,CAAC,CAAC;YACvD,IAAI,IAAI,CAAC,WAAW;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACrE,MAAM;QACP,KAAK,WAAW,CAAC;QACjB,KAAK,YAAY;YAChB,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC;YAChD,MAAM;QACP,KAAK,oBAAoB,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/E,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/E,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,OAAO,GACZ,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACrG,MAAM,GAAG,GAAG,MAAM,IAAI,QAAQ,IAAI,OAAO,IAAI,SAAS,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC;YAChC,MAAM;QACP,CAAC;QACD;YACC,KAAK,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;YAC1C,MAAM;IACR,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,KAAK,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAAA,CACxB","sourcesContent":["import type { ExtensionContext } from \"../../types.js\";\nimport type { Reply, ReplyInput, Request } from \"./types.js\";\n\nexport async function showPermissionPrompt(ctx: ExtensionContext, request: Request): Promise<ReplyInput> {\n\tconst title = `Permission required: ${request.permission}`;\n\tconst message = formatRequestForDisplay(request);\n\n\tconst displayTitle = `${title}\\n\\n${message}`;\n\n\tconst options = [\"Allow once\", \"Allow always\", \"Deny\", \"Deny with feedback\"];\n\n\tconst choice = await ctx.ui.select(displayTitle, options);\n\n\tif (choice === \"Deny with feedback\") {\n\t\tconst feedback = await ctx.ui.input(\"Feedback\", \"Why are you denying this permission? (optional)\");\n\t\treturn {\n\t\t\trequestID: request.id,\n\t\t\treply: \"reject\",\n\t\t\tmessage: feedback || undefined,\n\t\t};\n\t}\n\n\tconst replyMap: Record<string, Reply> = {\n\t\t\"Allow once\": \"once\",\n\t\t\"Allow always\": \"always\",\n\t\tDeny: \"reject\",\n\t};\n\n\treturn {\n\t\trequestID: request.id,\n\t\treply: choice ? replyMap[choice] : \"reject\",\n\t};\n}\n\nfunction formatRequestForDisplay(request: Request): string {\n\tconst parts: string[] = [];\n\tconst meta = request.metadata || {};\n\n\tswitch (request.permission) {\n\t\tcase \"edit\":\n\t\t\tparts.push(`File: ${meta.filepath || \"Unknown\"}`);\n\t\t\tbreak;\n\t\tcase \"read\":\n\t\t\tparts.push(`Path: ${meta.filePath || \"Unknown\"}`);\n\t\t\tbreak;\n\t\tcase \"glob\":\n\t\tcase \"grep\":\n\t\t\tparts.push(`Pattern: ${meta.pattern || \"Unknown\"}`);\n\t\t\tbreak;\n\t\tcase \"list\":\n\t\t\tparts.push(`Path: ${meta.path || \"Unknown\"}`);\n\t\t\tbreak;\n\t\tcase \"bash\":\n\t\t\tif (meta.description) parts.push(`Description: ${meta.description}`);\n\t\t\tparts.push(`Command: $ ${meta.command || \"Unknown\"}`);\n\t\t\tbreak;\n\t\tcase \"task\":\n\t\t\tparts.push(`Type: ${meta.subagent_type || \"Unknown\"}`);\n\t\t\tif (meta.description) parts.push(`Description: ${meta.description}`);\n\t\t\tbreak;\n\t\tcase \"websearch\":\n\t\tcase \"codesearch\":\n\t\t\tparts.push(`Query: ${meta.query || \"Unknown\"}`);\n\t\t\tbreak;\n\t\tcase \"external_directory\": {\n\t\t\tconst parent = typeof meta.parentDir === \"string\" ? meta.parentDir : undefined;\n\t\t\tconst filepath = typeof meta.filepath === \"string\" ? meta.filepath : undefined;\n\t\t\tconst pattern = request.patterns?.[0];\n\t\t\tconst derived =\n\t\t\t\ttypeof pattern === \"string\" ? (pattern.includes(\"*\") ? pattern.split(\"*\")[0] : pattern) : undefined;\n\t\t\tconst dir = parent ?? filepath ?? derived ?? \"Unknown\";\n\t\t\tparts.push(`Directory: ${dir}`);\n\t\t\tbreak;\n\t\t}\n\t\tdefault:\n\t\t\tparts.push(`Tool: ${request.permission}`);\n\t\t\tbreak;\n\t}\n\n\tif (request.patterns && request.patterns.length > 0) {\n\t\tparts.push(`\\nPatterns:\\n${request.patterns.map((p) => `  - ${p}`).join(\"\\n\")}`);\n\t}\n\n\treturn parts.join(\"\\n\");\n}\n"]}

package/dist/core/extensions/builtin/permission-system/service.d.ts

@@ -0,0 +1,27 @@
+import { type PermissionEventEmitter } from "./events.js";
+import { type ReplyInput, type Request, type Ruleset } from "./types.js";
+type RequestInput = Omit<Request, "id"> & {
+    id?: string;
+};
+/** Core service for managing permission requests and rule evaluation */
+export declare class PermissionService {
+    private pending;
+    private approved;
+    private staticRuleset;
+    private emitter;
+    private idCounter;
+    constructor(staticRuleset: Ruleset, approved: Ruleset, emitter?: PermissionEventEmitter);
+    /** Request permission for a tool call. Resolves if allowed, throws on denial. */
+    ask(request: RequestInput): Promise<void>;
+    /** Reply to a pending permission request */
+    reply(input: ReplyInput): void;
+    /** List all pending permission requests */
+    list(): Request[];
+    /** Get the current approved ruleset */
+    getApproved(): Ruleset;
+    private nextRequestID;
+    private rejectPendingInSession;
+    private resolveCoveredPendingInSession;
+}
+export {};
+//# sourceMappingURL=service.d.ts.map

package/dist/core/extensions/builtin/permission-system/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/service.ts"],"names":[],"mappings":"AACA,OAAO,EAA2B,KAAK,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAKN,KAAK,UAAU,EACf,KAAK,OAAO,EACZ,KAAK,OAAO,EACZ,MAAM,YAAY,CAAC;AAEpB,KAAK,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D,wEAAwE;AACxE,qBAAa,iBAAiB;IAC7B,OAAO,CAAC,OAAO,CAAmC;IAClD,OAAO,CAAC,QAAQ,CAAU;IAC1B,OAAO,CAAC,aAAa,CAAU;IAC/B,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,SAAS,CAAK;IAEtB,YAAY,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAE,sBAAkD,EAIjH;IAED,iFAAiF;IAC3E,GAAG,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAkD9C;IAED,4CAA4C;IAC5C,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CA8B7B;IAED,2CAA2C;IAC3C,IAAI,IAAI,OAAO,EAAE,CAQhB;IAED,uCAAuC;IACvC,WAAW,IAAI,OAAO,CAErB;IAED,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,sBAAsB;IAY9B,OAAO,CAAC,8BAA8B;CAmBtC","sourcesContent":["import { evaluate } from \"./evaluate.js\";\nimport { createLocalEventEmitter, type PermissionEventEmitter } from \"./events.js\";\nimport {\n\tCorrectedError,\n\tDeniedError,\n\ttype PendingEntry,\n\tRejectedError,\n\ttype ReplyInput,\n\ttype Request,\n\ttype Ruleset,\n} from \"./types.js\";\n\ntype RequestInput = Omit<Request, \"id\"> & { id?: string };\n\n/** Core service for managing permission requests and rule evaluation */\nexport class PermissionService {\n\tprivate pending = new Map<string, PendingEntry>();\n\tprivate approved: Ruleset;\n\tprivate staticRuleset: Ruleset;\n\tprivate emitter: PermissionEventEmitter;\n\tprivate idCounter = 0;\n\n\tconstructor(staticRuleset: Ruleset, approved: Ruleset, emitter: PermissionEventEmitter = createLocalEventEmitter()) {\n\t\tthis.staticRuleset = [...staticRuleset];\n\t\tthis.approved = [...approved];\n\t\tthis.emitter = emitter;\n\t}\n\n\t/** Request permission for a tool call. Resolves if allowed, throws on denial. */\n\tasync ask(request: RequestInput): Promise<void> {\n\t\tconst info: Request = {\n\t\t\t...request,\n\t\t\tid: request.id ?? this.nextRequestID(),\n\t\t};\n\n\t\tconst deniedPatterns: string[] = [];\n\t\tlet needsAsk = false;\n\n\t\tfor (const pattern of info.patterns) {\n\t\t\tconst rule = evaluate(info.permission, pattern, this.staticRuleset, this.approved);\n\n\t\t\tif (rule.action === \"deny\") {\n\t\t\t\tdeniedPatterns.push(pattern);\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tif (rule.action === \"ask\") {\n\t\t\t\tneedsAsk = true;\n\t\t\t}\n\t\t}\n\n\t\tif (deniedPatterns.length > 0) {\n\t\t\tthrow new DeniedError(deniedPatterns);\n\t\t}\n\n\t\tif (!needsAsk) {\n\t\t\tthis.emitter.emitReplied(info.id, info.sessionID, \"allow\");\n\t\t\treturn;\n\t\t}\n\n\t\tconst pendingPromise = new Promise<void>((resolve, reject) => {\n\t\t\tconst pendingEntry: PendingEntry = {\n\t\t\t\tinfo,\n\t\t\t\tresolve: () => {\n\t\t\t\t\tthis.pending.delete(info.id);\n\t\t\t\t\tresolve();\n\t\t\t\t},\n\t\t\t\treject: (error) => {\n\t\t\t\t\tthis.pending.delete(info.id);\n\t\t\t\t\treject(error);\n\t\t\t\t},\n\t\t\t};\n\n\t\t\tthis.pending.set(info.id, pendingEntry);\n\t\t});\n\n\t\tthis.emitter.emitAsked(info);\n\n\t\tawait pendingPromise;\n\t}\n\n\t/** Reply to a pending permission request */\n\treply(input: ReplyInput): void {\n\t\tconst existing = this.pending.get(input.requestID);\n\t\tif (!existing) {\n\t\t\treturn;\n\t\t}\n\n\t\tthis.pending.delete(input.requestID);\n\t\tthis.emitter.emitReplied(existing.info.id, existing.info.sessionID, input.reply);\n\n\t\tif (input.reply === \"reject\") {\n\t\t\texisting.reject(input.message ? new CorrectedError(input.message) : new RejectedError());\n\t\t\tthis.rejectPendingInSession(existing.info.sessionID);\n\t\t\treturn;\n\t\t}\n\n\t\texisting.resolve();\n\n\t\tif (input.reply === \"once\") {\n\t\t\treturn;\n\t\t}\n\n\t\tfor (const pattern of existing.info.always) {\n\t\t\tthis.approved.push({\n\t\t\t\tpermission: existing.info.permission,\n\t\t\t\tpattern,\n\t\t\t\taction: \"allow\",\n\t\t\t});\n\t\t}\n\n\t\tthis.resolveCoveredPendingInSession(existing.info.sessionID);\n\t}\n\n\t/** List all pending permission requests */\n\tlist(): Request[] {\n\t\treturn Array.from(this.pending.values(), (entry) => ({\n\t\t\t...entry.info,\n\t\t\tpatterns: [...entry.info.patterns],\n\t\t\talways: [...entry.info.always],\n\t\t\tmetadata: { ...entry.info.metadata },\n\t\t\ttool: entry.info.tool ? { ...entry.info.tool } : undefined,\n\t\t}));\n\t}\n\n\t/** Get the current approved ruleset */\n\tgetApproved(): Ruleset {\n\t\treturn this.approved.map((rule) => ({ ...rule }));\n\t}\n\n\tprivate nextRequestID(): string {\n\t\tthis.idCounter += 1;\n\t\treturn `permission-${this.idCounter}`;\n\t}\n\n\tprivate rejectPendingInSession(sessionID: string): void {\n\t\tfor (const [requestID, entry] of Array.from(this.pending.entries())) {\n\t\t\tif (entry.info.sessionID !== sessionID) {\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tthis.pending.delete(requestID);\n\t\t\tthis.emitter.emitReplied(entry.info.id, entry.info.sessionID, \"reject\");\n\t\t\tentry.reject(new RejectedError());\n\t\t}\n\t}\n\n\tprivate resolveCoveredPendingInSession(sessionID: string): void {\n\t\tfor (const [requestID, entry] of Array.from(this.pending.entries())) {\n\t\t\tif (entry.info.sessionID !== sessionID) {\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tconst isAllowed = entry.info.patterns.every((pattern) => {\n\t\t\t\treturn evaluate(entry.info.permission, pattern, this.staticRuleset, this.approved).action === \"allow\";\n\t\t\t});\n\n\t\t\tif (!isAllowed) {\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tthis.pending.delete(requestID);\n\t\t\tthis.emitter.emitReplied(entry.info.id, entry.info.sessionID, \"always\");\n\t\t\tentry.resolve();\n\t\t}\n\t}\n}\n"]}

package/dist/core/extensions/builtin/permission-system/service.js

@@ -0,0 +1,129 @@
+import { evaluate } from "./evaluate.js";
+import { createLocalEventEmitter } from "./events.js";
+import { CorrectedError, DeniedError, RejectedError, } from "./types.js";
+/** Core service for managing permission requests and rule evaluation */
+export class PermissionService {
+    pending = new Map();
+    approved;
+    staticRuleset;
+    emitter;
+    idCounter = 0;
+    constructor(staticRuleset, approved, emitter = createLocalEventEmitter()) {
+        this.staticRuleset = [...staticRuleset];
+        this.approved = [...approved];
+        this.emitter = emitter;
+    }
+    /** Request permission for a tool call. Resolves if allowed, throws on denial. */
+    async ask(request) {
+        const info = {
+            ...request,
+            id: request.id ?? this.nextRequestID(),
+        };
+        const deniedPatterns = [];
+        let needsAsk = false;
+        for (const pattern of info.patterns) {
+            const rule = evaluate(info.permission, pattern, this.staticRuleset, this.approved);
+            if (rule.action === "deny") {
+                deniedPatterns.push(pattern);
+                continue;
+            }
+            if (rule.action === "ask") {
+                needsAsk = true;
+            }
+        }
+        if (deniedPatterns.length > 0) {
+            throw new DeniedError(deniedPatterns);
+        }
+        if (!needsAsk) {
+            this.emitter.emitReplied(info.id, info.sessionID, "allow");
+            return;
+        }
+        const pendingPromise = new Promise((resolve, reject) => {
+            const pendingEntry = {
+                info,
+                resolve: () => {
+                    this.pending.delete(info.id);
+                    resolve();
+                },
+                reject: (error) => {
+                    this.pending.delete(info.id);
+                    reject(error);
+                },
+            };
+            this.pending.set(info.id, pendingEntry);
+        });
+        this.emitter.emitAsked(info);
+        await pendingPromise;
+    }
+    /** Reply to a pending permission request */
+    reply(input) {
+        const existing = this.pending.get(input.requestID);
+        if (!existing) {
+            return;
+        }
+        this.pending.delete(input.requestID);
+        this.emitter.emitReplied(existing.info.id, existing.info.sessionID, input.reply);
+        if (input.reply === "reject") {
+            existing.reject(input.message ? new CorrectedError(input.message) : new RejectedError());
+            this.rejectPendingInSession(existing.info.sessionID);
+            return;
+        }
+        existing.resolve();
+        if (input.reply === "once") {
+            return;
+        }
+        for (const pattern of existing.info.always) {
+            this.approved.push({
+                permission: existing.info.permission,
+                pattern,
+                action: "allow",
+            });
+        }
+        this.resolveCoveredPendingInSession(existing.info.sessionID);
+    }
+    /** List all pending permission requests */
+    list() {
+        return Array.from(this.pending.values(), (entry) => ({
+            ...entry.info,
+            patterns: [...entry.info.patterns],
+            always: [...entry.info.always],
+            metadata: { ...entry.info.metadata },
+            tool: entry.info.tool ? { ...entry.info.tool } : undefined,
+        }));
+    }
+    /** Get the current approved ruleset */
+    getApproved() {
+        return this.approved.map((rule) => ({ ...rule }));
+    }
+    nextRequestID() {
+        this.idCounter += 1;
+        return `permission-${this.idCounter}`;
+    }
+    rejectPendingInSession(sessionID) {
+        for (const [requestID, entry] of Array.from(this.pending.entries())) {
+            if (entry.info.sessionID !== sessionID) {
+                continue;
+            }
+            this.pending.delete(requestID);
+            this.emitter.emitReplied(entry.info.id, entry.info.sessionID, "reject");
+            entry.reject(new RejectedError());
+        }
+    }
+    resolveCoveredPendingInSession(sessionID) {
+        for (const [requestID, entry] of Array.from(this.pending.entries())) {
+            if (entry.info.sessionID !== sessionID) {
+                continue;
+            }
+            const isAllowed = entry.info.patterns.every((pattern) => {
+                return evaluate(entry.info.permission, pattern, this.staticRuleset, this.approved).action === "allow";
+            });
+            if (!isAllowed) {
+                continue;
+            }
+            this.pending.delete(requestID);
+            this.emitter.emitReplied(entry.info.id, entry.info.sessionID, "always");
+            entry.resolve();
+        }
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/core/extensions/builtin/permission-system/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAA+B,MAAM,aAAa,CAAC;AACnF,OAAO,EACN,cAAc,EACd,WAAW,EAEX,aAAa,GAIb,MAAM,YAAY,CAAC;AAIpB,wEAAwE;AACxE,MAAM,OAAO,iBAAiB;IACrB,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC1C,QAAQ,CAAU;IAClB,aAAa,CAAU;IACvB,OAAO,CAAyB;IAChC,SAAS,GAAG,CAAC,CAAC;IAEtB,YAAY,aAAsB,EAAE,QAAiB,EAAE,OAAO,GAA2B,uBAAuB,EAAE,EAAE;QACnH,IAAI,CAAC,aAAa,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAAA,CACvB;IAED,iFAAiF;IACjF,KAAK,CAAC,GAAG,CAAC,OAAqB,EAAiB;QAC/C,MAAM,IAAI,GAAY;YACrB,GAAG,OAAO;YACV,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,IAAI,CAAC,aAAa,EAAE;SACtC,CAAC;QAEF,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAEnF,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5B,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC7B,SAAS;YACV,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC3B,QAAQ,GAAG,IAAI,CAAC;YACjB,CAAC;QACF,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC3D,OAAO;QACR,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;YAC7D,MAAM,YAAY,GAAiB;gBAClC,IAAI;gBACJ,OAAO,EAAE,GAAG,EAAE,CAAC;oBACd,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC7B,OAAO,EAAE,CAAC;gBAAA,CACV;gBACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;oBAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC7B,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAA,CACd;aACD,CAAC;YAEF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAAA,CACxC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAE7B,MAAM,cAAc,CAAC;IAAA,CACrB;IAED,4CAA4C;IAC5C,KAAK,CAAC,KAAiB,EAAQ;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO;QACR,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAEjF,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC;YACzF,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrD,OAAO;QACR,CAAC;QAED,QAAQ,CAAC,OAAO,EAAE,CAAC;QAEnB,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO;QACR,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAClB,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;gBACpC,OAAO;gBACP,MAAM,EAAE,OAAO;aACf,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,8BAA8B,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAAA,CAC7D;IAED,2CAA2C;IAC3C,IAAI,GAAc;QACjB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpD,GAAG,KAAK,CAAC,IAAI;YACb,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YAClC,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YAC9B,QAAQ,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;SAC1D,CAAC,CAAC,CAAC;IAAA,CACJ;IAED,uCAAuC;IACvC,WAAW,GAAY;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IAAA,CAClD;IAEO,aAAa,GAAW;QAC/B,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACpB,OAAO,cAAc,IAAI,CAAC,SAAS,EAAE,CAAC;IAAA,CACtC;IAEO,sBAAsB,CAAC,SAAiB,EAAQ;QACvD,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACrE,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACxC,SAAS;YACV,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACxE,KAAK,CAAC,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC;QACnC,CAAC;IAAA,CACD;IAEO,8BAA8B,CAAC,SAAiB,EAAQ;QAC/D,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACrE,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACxC,SAAS;YACV,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACxD,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC;YAAA,CACtG,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChB,SAAS;YACV,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACxE,KAAK,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IAAA,CACD;CACD","sourcesContent":["import { evaluate } from \"./evaluate.js\";\nimport { createLocalEventEmitter, type PermissionEventEmitter } from \"./events.js\";\nimport {\n\tCorrectedError,\n\tDeniedError,\n\ttype PendingEntry,\n\tRejectedError,\n\ttype ReplyInput,\n\ttype Request,\n\ttype Ruleset,\n} from \"./types.js\";\n\ntype RequestInput = Omit<Request, \"id\"> & { id?: string };\n\n/** Core service for managing permission requests and rule evaluation */\nexport class PermissionService {\n\tprivate pending = new Map<string, PendingEntry>();\n\tprivate approved: Ruleset;\n\tprivate staticRuleset: Ruleset;\n\tprivate emitter: PermissionEventEmitter;\n\tprivate idCounter = 0;\n\n\tconstructor(staticRuleset: Ruleset, approved: Ruleset, emitter: PermissionEventEmitter = createLocalEventEmitter()) {\n\t\tthis.staticRuleset = [...staticRuleset];\n\t\tthis.approved = [...approved];\n\t\tthis.emitter = emitter;\n\t}\n\n\t/** Request permission for a tool call. Resolves if allowed, throws on denial. */\n\tasync ask(request: RequestInput): Promise<void> {\n\t\tconst info: Request = {\n\t\t\t...request,\n\t\t\tid: request.id ?? this.nextRequestID(),\n\t\t};\n\n\t\tconst deniedPatterns: string[] = [];\n\t\tlet needsAsk = false;\n\n\t\tfor (const pattern of info.patterns) {\n\t\t\tconst rule = evaluate(info.permission, pattern, this.staticRuleset, this.approved);\n\n\t\t\tif (rule.action === \"deny\") {\n\t\t\t\tdeniedPatterns.push(pattern);\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tif (rule.action === \"ask\") {\n\t\t\t\tneedsAsk = true;\n\t\t\t}\n\t\t}\n\n\t\tif (deniedPatterns.length > 0) {\n\t\t\tthrow new DeniedError(deniedPatterns);\n\t\t}\n\n\t\tif (!needsAsk) {\n\t\t\tthis.emitter.emitReplied(info.id, info.sessionID, \"allow\");\n\t\t\treturn;\n\t\t}\n\n\t\tconst pendingPromise = new Promise<void>((resolve, reject) => {\n\t\t\tconst pendingEntry: PendingEntry = {\n\t\t\t\tinfo,\n\t\t\t\tresolve: () => {\n\t\t\t\t\tthis.pending.delete(info.id);\n\t\t\t\t\tresolve();\n\t\t\t\t},\n\t\t\t\treject: (error) => {\n\t\t\t\t\tthis.pending.delete(info.id);\n\t\t\t\t\treject(error);\n\t\t\t\t},\n\t\t\t};\n\n\t\t\tthis.pending.set(info.id, pendingEntry);\n\t\t});\n\n\t\tthis.emitter.emitAsked(info);\n\n\t\tawait pendingPromise;\n\t}\n\n\t/** Reply to a pending permission request */\n\treply(input: ReplyInput): void {\n\t\tconst existing = this.pending.get(input.requestID);\n\t\tif (!existing) {\n\t\t\treturn;\n\t\t}\n\n\t\tthis.pending.delete(input.requestID);\n\t\tthis.emitter.emitReplied(existing.info.id, existing.info.sessionID, input.reply);\n\n\t\tif (input.reply === \"reject\") {\n\t\t\texisting.reject(input.message ? new CorrectedError(input.message) : new RejectedError());\n\t\t\tthis.rejectPendingInSession(existing.info.sessionID);\n\t\t\treturn;\n\t\t}\n\n\t\texisting.resolve();\n\n\t\tif (input.reply === \"once\") {\n\t\t\treturn;\n\t\t}\n\n\t\tfor (const pattern of existing.info.always) {\n\t\t\tthis.approved.push({\n\t\t\t\tpermission: existing.info.permission,\n\t\t\t\tpattern,\n\t\t\t\taction: \"allow\",\n\t\t\t});\n\t\t}\n\n\t\tthis.resolveCoveredPendingInSession(existing.info.sessionID);\n\t}\n\n\t/** List all pending permission requests */\n\tlist(): Request[] {\n\t\treturn Array.from(this.pending.values(), (entry) => ({\n\t\t\t...entry.info,\n\t\t\tpatterns: [...entry.info.patterns],\n\t\t\talways: [...entry.info.always],\n\t\t\tmetadata: { ...entry.info.metadata },\n\t\t\ttool: entry.info.tool ? { ...entry.info.tool } : undefined,\n\t\t}));\n\t}\n\n\t/** Get the current approved ruleset */\n\tgetApproved(): Ruleset {\n\t\treturn this.approved.map((rule) => ({ ...rule }));\n\t}\n\n\tprivate nextRequestID(): string {\n\t\tthis.idCounter += 1;\n\t\treturn `permission-${this.idCounter}`;\n\t}\n\n\tprivate rejectPendingInSession(sessionID: string): void {\n\t\tfor (const [requestID, entry] of Array.from(this.pending.entries())) {\n\t\t\tif (entry.info.sessionID !== sessionID) {\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tthis.pending.delete(requestID);\n\t\t\tthis.emitter.emitReplied(entry.info.id, entry.info.sessionID, \"reject\");\n\t\t\tentry.reject(new RejectedError());\n\t\t}\n\t}\n\n\tprivate resolveCoveredPendingInSession(sessionID: string): void {\n\t\tfor (const [requestID, entry] of Array.from(this.pending.entries())) {\n\t\t\tif (entry.info.sessionID !== sessionID) {\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tconst isAllowed = entry.info.patterns.every((pattern) => {\n\t\t\t\treturn evaluate(entry.info.permission, pattern, this.staticRuleset, this.approved).action === \"allow\";\n\t\t\t});\n\n\t\t\tif (!isAllowed) {\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tthis.pending.delete(requestID);\n\t\t\tthis.emitter.emitReplied(entry.info.id, entry.info.sessionID, \"always\");\n\t\t\tentry.resolve();\n\t\t}\n\t}\n}\n"]}

package/dist/core/extensions/builtin/permission-system/settings.d.ts

@@ -0,0 +1,18 @@
+import type { SettingsManager } from "../../../settings-manager.js";
+import type { Ruleset } from "./types.js";
+/**
+ * Load permission settings from global and project settings.json files.
+ *
+ * Merge order (highest precedence last):
+ *   1. Global settings (~/.senpi/agent/settings.json)
+ *   2. Project settings (.senpi/settings.json)
+ *   3. CLI override (passed directly to this function)
+ *
+ * Runtime approvals are stored separately in .senpi/permissions-approved.jsonl
+ * and loaded via loadApproved() from storage.ts.
+ */
+export declare function loadPermissionSettings(settingsManager: SettingsManager, cliOverride: Ruleset, projectDir: string): {
+    staticRuleset: Ruleset;
+    approved: Ruleset;
+};
+//# sourceMappingURL=settings.d.ts.map

package/dist/core/extensions/builtin/permission-system/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/settings.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAY,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAG9E,OAAO,KAAK,EAAoB,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5D;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACrC,eAAe,EAAE,eAAe,EAChC,WAAW,EAAE,OAAO,EACpB,UAAU,EAAE,MAAM,GAChB;IAAE,aAAa,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAW/C","sourcesContent":["import type { Settings, SettingsManager } from \"../../../settings-manager.js\";\nimport { fromConfig, merge } from \"./config.js\";\nimport { loadApproved } from \"./storage.js\";\nimport type { PermissionConfig, Ruleset } from \"./types.js\";\n\n/**\n * Load permission settings from global and project settings.json files.\n *\n * Merge order (highest precedence last):\n *   1. Global settings (~/.senpi/agent/settings.json)\n *   2. Project settings (.senpi/settings.json)\n *   3. CLI override (passed directly to this function)\n *\n * Runtime approvals are stored separately in .senpi/permissions-approved.jsonl\n * and loaded via loadApproved() from storage.ts.\n */\nexport function loadPermissionSettings(\n\tsettingsManager: SettingsManager,\n\tcliOverride: Ruleset,\n\tprojectDir: string,\n): { staticRuleset: Ruleset; approved: Ruleset } {\n\tconst globalSettings = settingsManager.getGlobalSettings() as Settings & { permission?: PermissionConfig };\n\tconst globalRuleset = globalSettings.permission ? fromConfig(globalSettings.permission) : [];\n\n\tconst projectSettings = settingsManager.getProjectSettings() as Settings & { permission?: PermissionConfig };\n\tconst projectRuleset = projectSettings.permission ? fromConfig(projectSettings.permission) : [];\n\n\tconst staticRuleset = merge(globalRuleset, projectRuleset, cliOverride);\n\tconst approved = loadApproved(projectDir);\n\n\treturn { staticRuleset, approved };\n}\n"]}

package/dist/core/extensions/builtin/permission-system/settings.js

@@ -0,0 +1,23 @@
+import { fromConfig, merge } from "./config.js";
+import { loadApproved } from "./storage.js";
+/**
+ * Load permission settings from global and project settings.json files.
+ *
+ * Merge order (highest precedence last):
+ *   1. Global settings (~/.senpi/agent/settings.json)
+ *   2. Project settings (.senpi/settings.json)
+ *   3. CLI override (passed directly to this function)
+ *
+ * Runtime approvals are stored separately in .senpi/permissions-approved.jsonl
+ * and loaded via loadApproved() from storage.ts.
+ */
+export function loadPermissionSettings(settingsManager, cliOverride, projectDir) {
+    const globalSettings = settingsManager.getGlobalSettings();
+    const globalRuleset = globalSettings.permission ? fromConfig(globalSettings.permission) : [];
+    const projectSettings = settingsManager.getProjectSettings();
+    const projectRuleset = projectSettings.permission ? fromConfig(projectSettings.permission) : [];
+    const staticRuleset = merge(globalRuleset, projectRuleset, cliOverride);
+    const approved = loadApproved(projectDir);
+    return { staticRuleset, approved };
+}
+//# sourceMappingURL=settings.js.map

package/dist/core/extensions/builtin/permission-system/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/settings.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAG5C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CACrC,eAAgC,EAChC,WAAoB,EACpB,UAAkB,EAC8B;IAChD,MAAM,cAAc,GAAG,eAAe,CAAC,iBAAiB,EAAkD,CAAC;IAC3G,MAAM,aAAa,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE7F,MAAM,eAAe,GAAG,eAAe,CAAC,kBAAkB,EAAkD,CAAC;IAC7G,MAAM,cAAc,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhG,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAE1C,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;AAAA,CACnC","sourcesContent":["import type { Settings, SettingsManager } from \"../../../settings-manager.js\";\nimport { fromConfig, merge } from \"./config.js\";\nimport { loadApproved } from \"./storage.js\";\nimport type { PermissionConfig, Ruleset } from \"./types.js\";\n\n/**\n * Load permission settings from global and project settings.json files.\n *\n * Merge order (highest precedence last):\n *   1. Global settings (~/.senpi/agent/settings.json)\n *   2. Project settings (.senpi/settings.json)\n *   3. CLI override (passed directly to this function)\n *\n * Runtime approvals are stored separately in .senpi/permissions-approved.jsonl\n * and loaded via loadApproved() from storage.ts.\n */\nexport function loadPermissionSettings(\n\tsettingsManager: SettingsManager,\n\tcliOverride: Ruleset,\n\tprojectDir: string,\n): { staticRuleset: Ruleset; approved: Ruleset } {\n\tconst globalSettings = settingsManager.getGlobalSettings() as Settings & { permission?: PermissionConfig };\n\tconst globalRuleset = globalSettings.permission ? fromConfig(globalSettings.permission) : [];\n\n\tconst projectSettings = settingsManager.getProjectSettings() as Settings & { permission?: PermissionConfig };\n\tconst projectRuleset = projectSettings.permission ? fromConfig(projectSettings.permission) : [];\n\n\tconst staticRuleset = merge(globalRuleset, projectRuleset, cliOverride);\n\tconst approved = loadApproved(projectDir);\n\n\treturn { staticRuleset, approved };\n}\n"]}

package/dist/core/extensions/builtin/permission-system/storage.d.ts

@@ -0,0 +1,6 @@
+import type { Rule, Ruleset } from "./types.js";
+export declare function loadApproved(projectDir: string): Ruleset;
+export declare function appendApproved(projectDir: string, rules: Rule[]): void;
+export declare function clearApproved(projectDir: string): void;
+export declare function compactApproved(projectDir: string): void;
+//# sourceMappingURL=storage.d.ts.map

package/dist/core/extensions/builtin/permission-system/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/storage.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAQhD,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAmBxD;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CActE;AAED,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAMtD;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAkBxD","sourcesContent":["import * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport { CONFIG_DIR_NAME } from \"../../../../config.js\";\nimport type { Rule, Ruleset } from \"./types.js\";\n\nconst PERMISSIONS_FILE = \"permissions-approved.jsonl\";\n\nfunction getPermissionsPath(projectDir: string): string {\n\treturn path.join(projectDir, CONFIG_DIR_NAME, PERMISSIONS_FILE);\n}\n\nexport function loadApproved(projectDir: string): Ruleset {\n\tconst filePath = getPermissionsPath(projectDir);\n\n\tif (!fs.existsSync(filePath)) {\n\t\treturn [];\n\t}\n\n\tconst content = fs.readFileSync(filePath, \"utf-8\");\n\tconst lines = content.split(\"\\n\").filter((line) => line.trim() !== \"\");\n\n\tconst rules: Rule[] = [];\n\tfor (const line of lines) {\n\t\ttry {\n\t\t\tconst rule = JSON.parse(line) as Rule;\n\t\t\trules.push(rule);\n\t\t} catch {}\n\t}\n\n\treturn rules;\n}\n\nexport function appendApproved(projectDir: string, rules: Rule[]): void {\n\tif (rules.length === 0) {\n\t\treturn;\n\t}\n\n\tconst filePath = getPermissionsPath(projectDir);\n\tconst dir = path.dirname(filePath);\n\n\tif (!fs.existsSync(dir)) {\n\t\tfs.mkdirSync(dir, { recursive: true });\n\t}\n\n\tconst lines = `${rules.map((rule) => JSON.stringify(rule)).join(\"\\n\")}\\n`;\n\tfs.appendFileSync(filePath, lines, { flag: \"a\" });\n}\n\nexport function clearApproved(projectDir: string): void {\n\tconst filePath = getPermissionsPath(projectDir);\n\n\tif (fs.existsSync(filePath)) {\n\t\tfs.unlinkSync(filePath);\n\t}\n}\n\nexport function compactApproved(projectDir: string): void {\n\tconst filePath = getPermissionsPath(projectDir);\n\n\tif (!fs.existsSync(filePath)) {\n\t\treturn;\n\t}\n\n\tconst rules = loadApproved(projectDir);\n\tconst seen = new Map<string, Rule>();\n\n\tfor (const rule of rules) {\n\t\tconst key = `${rule.permission}:${rule.pattern}`;\n\t\tseen.set(key, rule);\n\t}\n\n\tconst uniqueRules = Array.from(seen.values());\n\tconst lines = uniqueRules.map((rule) => JSON.stringify(rule)).join(\"\\n\");\n\tfs.writeFileSync(filePath, lines ? `${lines}\\n` : \"\", { flag: \"w\" });\n}\n"]}

package/dist/core/extensions/builtin/permission-system/storage.js

@@ -0,0 +1,58 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { CONFIG_DIR_NAME } from "../../../../config.js";
+const PERMISSIONS_FILE = "permissions-approved.jsonl";
+function getPermissionsPath(projectDir) {
+    return path.join(projectDir, CONFIG_DIR_NAME, PERMISSIONS_FILE);
+}
+export function loadApproved(projectDir) {
+    const filePath = getPermissionsPath(projectDir);
+    if (!fs.existsSync(filePath)) {
+        return [];
+    }
+    const content = fs.readFileSync(filePath, "utf-8");
+    const lines = content.split("\n").filter((line) => line.trim() !== "");
+    const rules = [];
+    for (const line of lines) {
+        try {
+            const rule = JSON.parse(line);
+            rules.push(rule);
+        }
+        catch { }
+    }
+    return rules;
+}
+export function appendApproved(projectDir, rules) {
+    if (rules.length === 0) {
+        return;
+    }
+    const filePath = getPermissionsPath(projectDir);
+    const dir = path.dirname(filePath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    const lines = `${rules.map((rule) => JSON.stringify(rule)).join("\n")}\n`;
+    fs.appendFileSync(filePath, lines, { flag: "a" });
+}
+export function clearApproved(projectDir) {
+    const filePath = getPermissionsPath(projectDir);
+    if (fs.existsSync(filePath)) {
+        fs.unlinkSync(filePath);
+    }
+}
+export function compactApproved(projectDir) {
+    const filePath = getPermissionsPath(projectDir);
+    if (!fs.existsSync(filePath)) {
+        return;
+    }
+    const rules = loadApproved(projectDir);
+    const seen = new Map();
+    for (const rule of rules) {
+        const key = `${rule.permission}:${rule.pattern}`;
+        seen.set(key, rule);
+    }
+    const uniqueRules = Array.from(seen.values());
+    const lines = uniqueRules.map((rule) => JSON.stringify(rule)).join("\n");
+    fs.writeFileSync(filePath, lines ? `${lines}\n` : "", { flag: "w" });
+}
+//# sourceMappingURL=storage.js.map

package/dist/core/extensions/builtin/permission-system/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AAEtD,SAAS,kBAAkB,CAAC,UAAkB,EAAU;IACvD,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;AAAA,CAChE;AAED,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAW;IACzD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAEhD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEvE,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAS,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACX,CAAC;IAED,OAAO,KAAK,CAAC;AAAA,CACb;AAED,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,KAAa,EAAQ;IACvE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;IACR,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAC1E,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;AAAA,CAClD;AAED,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAQ;IACvD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAEhD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;AAAA,CACD;AAED,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAQ;IACzD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAEhD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,OAAO;IACR,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAgB,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;AAAA,CACrE","sourcesContent":["import * as fs from \"node:fs\";\nimport * as path from \"node:path\";\nimport { CONFIG_DIR_NAME } from \"../../../../config.js\";\nimport type { Rule, Ruleset } from \"./types.js\";\n\nconst PERMISSIONS_FILE = \"permissions-approved.jsonl\";\n\nfunction getPermissionsPath(projectDir: string): string {\n\treturn path.join(projectDir, CONFIG_DIR_NAME, PERMISSIONS_FILE);\n}\n\nexport function loadApproved(projectDir: string): Ruleset {\n\tconst filePath = getPermissionsPath(projectDir);\n\n\tif (!fs.existsSync(filePath)) {\n\t\treturn [];\n\t}\n\n\tconst content = fs.readFileSync(filePath, \"utf-8\");\n\tconst lines = content.split(\"\\n\").filter((line) => line.trim() !== \"\");\n\n\tconst rules: Rule[] = [];\n\tfor (const line of lines) {\n\t\ttry {\n\t\t\tconst rule = JSON.parse(line) as Rule;\n\t\t\trules.push(rule);\n\t\t} catch {}\n\t}\n\n\treturn rules;\n}\n\nexport function appendApproved(projectDir: string, rules: Rule[]): void {\n\tif (rules.length === 0) {\n\t\treturn;\n\t}\n\n\tconst filePath = getPermissionsPath(projectDir);\n\tconst dir = path.dirname(filePath);\n\n\tif (!fs.existsSync(dir)) {\n\t\tfs.mkdirSync(dir, { recursive: true });\n\t}\n\n\tconst lines = `${rules.map((rule) => JSON.stringify(rule)).join(\"\\n\")}\\n`;\n\tfs.appendFileSync(filePath, lines, { flag: \"a\" });\n}\n\nexport function clearApproved(projectDir: string): void {\n\tconst filePath = getPermissionsPath(projectDir);\n\n\tif (fs.existsSync(filePath)) {\n\t\tfs.unlinkSync(filePath);\n\t}\n}\n\nexport function compactApproved(projectDir: string): void {\n\tconst filePath = getPermissionsPath(projectDir);\n\n\tif (!fs.existsSync(filePath)) {\n\t\treturn;\n\t}\n\n\tconst rules = loadApproved(projectDir);\n\tconst seen = new Map<string, Rule>();\n\n\tfor (const rule of rules) {\n\t\tconst key = `${rule.permission}:${rule.pattern}`;\n\t\tseen.set(key, rule);\n\t}\n\n\tconst uniqueRules = Array.from(seen.values());\n\tconst lines = uniqueRules.map((rule) => JSON.stringify(rule)).join(\"\\n\");\n\tfs.writeFileSync(filePath, lines ? `${lines}\\n` : \"\", { flag: \"w\" });\n}\n"]}

package/dist/core/extensions/builtin/permission-system/types.d.ts

@@ -0,0 +1,61 @@
+/** Permission action: allow (grant), deny (block), or ask (prompt user) */
+export type Action = "allow" | "deny" | "ask";
+/** A single permission rule with pattern matching */
+export type Rule = {
+    permission: string;
+    pattern: string;
+    action: Action;
+};
+/** Ordered list of rules for evaluation (last match wins) */
+export type Ruleset = Rule[];
+/** Configuration format for settings.json */
+export type PermissionConfig = Record<string, Action | Record<string, Action>>;
+/** User reply to a permission request */
+export type Reply = "once" | "always" | "reject";
+/** Final permission decision: user reply or auto-grant from rules */
+export type PermissionDecision = Reply | "allow";
+/** Permission request sent to user for approval */
+export type Request = {
+    id: string;
+    sessionID: string;
+    permission: string;
+    patterns: string[];
+    always: string[];
+    metadata: Record<string, unknown>;
+    tool?: {
+        messageID: string;
+        callID: string;
+    };
+};
+/** Input for replying to a permission request */
+export type ReplyInput = {
+    requestID: string;
+    reply: Reply;
+    message?: string;
+};
+/** Error thrown when user rejects a permission request */
+export declare class RejectedError extends Error {
+    readonly _tag = "PermissionRejectedError";
+    constructor();
+}
+/** Error thrown when user rejects with feedback for correction */
+export declare class CorrectedError extends Error {
+    readonly feedback: string;
+    readonly _tag = "PermissionCorrectedError";
+    constructor(feedback: string);
+}
+/** Error thrown when a rule denies the permission */
+export declare class DeniedError extends Error {
+    readonly patterns: string[];
+    readonly _tag = "PermissionDeniedError";
+    constructor(patterns: string[]);
+}
+/** Union of all permission-related errors */
+export type PermissionError = RejectedError | CorrectedError | DeniedError;
+/** Internal pending request entry */
+export type PendingEntry = {
+    info: Request;
+    resolve: () => void;
+    reject: (err: RejectedError | CorrectedError) => void;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/extensions/builtin/permission-system/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/types.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,MAAM,MAAM,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AAE9C,qDAAqD;AACrD,MAAM,MAAM,IAAI,GAAG;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,6DAA6D;AAC7D,MAAM,MAAM,OAAO,GAAG,IAAI,EAAE,CAAC;AAE7B,6CAA6C;AAC7C,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE/E,yCAAyC;AACzC,MAAM,MAAM,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEjD,qEAAqE;AACrE,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,OAAO,CAAC;AAEjD,mDAAmD;AACnD,MAAM,MAAM,OAAO,GAAG;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,EAAE;QACN,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KACf,CAAC;CACF,CAAC;AAEF,iDAAiD;AACjD,MAAM,MAAM,UAAU,GAAG;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,0DAA0D;AAC1D,qBAAa,aAAc,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,6BAA6B;IAE1C,cAGC;CACD;AAED,kEAAkE;AAClE,qBAAa,cAAe,SAAQ,KAAK;aAGZ,QAAQ,EAAE,MAAM;IAF5C,QAAQ,CAAC,IAAI,8BAA8B;IAE3C,YAA4B,QAAQ,EAAE,MAAM,EAG3C;CACD;AAED,qDAAqD;AACrD,qBAAa,WAAY,SAAQ,KAAK;aAGT,QAAQ,EAAE,MAAM,EAAE;IAF9C,QAAQ,CAAC,IAAI,2BAA2B;IAExC,YAA4B,QAAQ,EAAE,MAAM,EAAE,EAG7C;CACD;AAED,6CAA6C;AAC7C,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,cAAc,GAAG,WAAW,CAAC;AAE3E,qCAAqC;AACrC,MAAM,MAAM,YAAY,GAAG;IAC1B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,MAAM,EAAE,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,KAAK,IAAI,CAAC;CACtD,CAAC","sourcesContent":["/** Permission action: allow (grant), deny (block), or ask (prompt user) */\nexport type Action = \"allow\" | \"deny\" | \"ask\";\n\n/** A single permission rule with pattern matching */\nexport type Rule = {\n\tpermission: string;\n\tpattern: string;\n\taction: Action;\n};\n\n/** Ordered list of rules for evaluation (last match wins) */\nexport type Ruleset = Rule[];\n\n/** Configuration format for settings.json */\nexport type PermissionConfig = Record<string, Action | Record<string, Action>>;\n\n/** User reply to a permission request */\nexport type Reply = \"once\" | \"always\" | \"reject\";\n\n/** Final permission decision: user reply or auto-grant from rules */\nexport type PermissionDecision = Reply | \"allow\";\n\n/** Permission request sent to user for approval */\nexport type Request = {\n\tid: string;\n\tsessionID: string;\n\tpermission: string;\n\tpatterns: string[];\n\talways: string[];\n\tmetadata: Record<string, unknown>;\n\ttool?: {\n\t\tmessageID: string;\n\t\tcallID: string;\n\t};\n};\n\n/** Input for replying to a permission request */\nexport type ReplyInput = {\n\trequestID: string;\n\treply: Reply;\n\tmessage?: string;\n};\n\n/** Error thrown when user rejects a permission request */\nexport class RejectedError extends Error {\n\treadonly _tag = \"PermissionRejectedError\";\n\n\tconstructor() {\n\t\tsuper(\"The user rejected permission to use this specific tool call.\");\n\t\tthis.name = \"RejectedError\";\n\t}\n}\n\n/** Error thrown when user rejects with feedback for correction */\nexport class CorrectedError extends Error {\n\treadonly _tag = \"PermissionCorrectedError\";\n\n\tconstructor(public readonly feedback: string) {\n\t\tsuper(`The user rejected permission to use this specific tool call with the following feedback: ${feedback}`);\n\t\tthis.name = \"CorrectedError\";\n\t}\n}\n\n/** Error thrown when a rule denies the permission */\nexport class DeniedError extends Error {\n\treadonly _tag = \"PermissionDeniedError\";\n\n\tconstructor(public readonly patterns: string[]) {\n\t\tsuper(`The user has specified a rule which prevents you from using this specific tool call.`);\n\t\tthis.name = \"DeniedError\";\n\t}\n}\n\n/** Union of all permission-related errors */\nexport type PermissionError = RejectedError | CorrectedError | DeniedError;\n\n/** Internal pending request entry */\nexport type PendingEntry = {\n\tinfo: Request;\n\tresolve: () => void;\n\treject: (err: RejectedError | CorrectedError) => void;\n};\n"]}

package/dist/core/extensions/builtin/permission-system/types.js

@@ -0,0 +1,29 @@
+/** Error thrown when user rejects a permission request */
+export class RejectedError extends Error {
+    _tag = "PermissionRejectedError";
+    constructor() {
+        super("The user rejected permission to use this specific tool call.");
+        this.name = "RejectedError";
+    }
+}
+/** Error thrown when user rejects with feedback for correction */
+export class CorrectedError extends Error {
+    feedback;
+    _tag = "PermissionCorrectedError";
+    constructor(feedback) {
+        super(`The user rejected permission to use this specific tool call with the following feedback: ${feedback}`);
+        this.feedback = feedback;
+        this.name = "CorrectedError";
+    }
+}
+/** Error thrown when a rule denies the permission */
+export class DeniedError extends Error {
+    patterns;
+    _tag = "PermissionDeniedError";
+    constructor(patterns) {
+        super(`The user has specified a rule which prevents you from using this specific tool call.`);
+        this.patterns = patterns;
+        this.name = "DeniedError";
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/core/extensions/builtin/permission-system/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/types.ts"],"names":[],"mappings":"AA2CA,0DAA0D;AAC1D,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC9B,IAAI,GAAG,yBAAyB,CAAC;IAE1C,cAAc;QACb,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAAA,CAC5B;CACD;AAED,kEAAkE;AAClE,MAAM,OAAO,cAAe,SAAQ,KAAK;IAGZ,QAAQ;IAF3B,IAAI,GAAG,0BAA0B,CAAC;IAE3C,YAA4B,QAAgB,EAAE;QAC7C,KAAK,CAAC,4FAA4F,QAAQ,EAAE,CAAC,CAAC;wBADnF,QAAQ;QAEnC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAAA,CAC7B;CACD;AAED,qDAAqD;AACrD,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGT,QAAQ;IAF3B,IAAI,GAAG,uBAAuB,CAAC;IAExC,YAA4B,QAAkB,EAAE;QAC/C,KAAK,CAAC,sFAAsF,CAAC,CAAC;wBADnE,QAAQ;QAEnC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAAA,CAC1B;CACD","sourcesContent":["/** Permission action: allow (grant), deny (block), or ask (prompt user) */\nexport type Action = \"allow\" | \"deny\" | \"ask\";\n\n/** A single permission rule with pattern matching */\nexport type Rule = {\n\tpermission: string;\n\tpattern: string;\n\taction: Action;\n};\n\n/** Ordered list of rules for evaluation (last match wins) */\nexport type Ruleset = Rule[];\n\n/** Configuration format for settings.json */\nexport type PermissionConfig = Record<string, Action | Record<string, Action>>;\n\n/** User reply to a permission request */\nexport type Reply = \"once\" | \"always\" | \"reject\";\n\n/** Final permission decision: user reply or auto-grant from rules */\nexport type PermissionDecision = Reply | \"allow\";\n\n/** Permission request sent to user for approval */\nexport type Request = {\n\tid: string;\n\tsessionID: string;\n\tpermission: string;\n\tpatterns: string[];\n\talways: string[];\n\tmetadata: Record<string, unknown>;\n\ttool?: {\n\t\tmessageID: string;\n\t\tcallID: string;\n\t};\n};\n\n/** Input for replying to a permission request */\nexport type ReplyInput = {\n\trequestID: string;\n\treply: Reply;\n\tmessage?: string;\n};\n\n/** Error thrown when user rejects a permission request */\nexport class RejectedError extends Error {\n\treadonly _tag = \"PermissionRejectedError\";\n\n\tconstructor() {\n\t\tsuper(\"The user rejected permission to use this specific tool call.\");\n\t\tthis.name = \"RejectedError\";\n\t}\n}\n\n/** Error thrown when user rejects with feedback for correction */\nexport class CorrectedError extends Error {\n\treadonly _tag = \"PermissionCorrectedError\";\n\n\tconstructor(public readonly feedback: string) {\n\t\tsuper(`The user rejected permission to use this specific tool call with the following feedback: ${feedback}`);\n\t\tthis.name = \"CorrectedError\";\n\t}\n}\n\n/** Error thrown when a rule denies the permission */\nexport class DeniedError extends Error {\n\treadonly _tag = \"PermissionDeniedError\";\n\n\tconstructor(public readonly patterns: string[]) {\n\t\tsuper(`The user has specified a rule which prevents you from using this specific tool call.`);\n\t\tthis.name = \"DeniedError\";\n\t}\n}\n\n/** Union of all permission-related errors */\nexport type PermissionError = RejectedError | CorrectedError | DeniedError;\n\n/** Internal pending request entry */\nexport type PendingEntry = {\n\tinfo: Request;\n\tresolve: () => void;\n\treject: (err: RejectedError | CorrectedError) => void;\n};\n"]}

package/dist/core/extensions/builtin/permission-system/wildcard.d.ts

@@ -0,0 +1,4 @@
+export declare namespace Wildcard {
+    function match(value: string, pattern: string): boolean;
+}
+//# sourceMappingURL=wildcard.d.ts.map

package/dist/core/extensions/builtin/permission-system/wildcard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wildcard.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/wildcard.ts"],"names":[],"mappings":"AAAA,yBAAiB,QAAQ,CAAC,CAAC;IAC1B,SAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAoD7D;CACD","sourcesContent":["export namespace Wildcard {\n\texport function match(value: string, pattern: string): boolean {\n\t\tif (value === \"\" && pattern === \"\") {\n\t\t\treturn true;\n\t\t}\n\t\tif (pattern === \"\") {\n\t\t\treturn false;\n\t\t}\n\t\tif (value === \"\" && pattern === \"*\") {\n\t\t\treturn true;\n\t\t}\n\t\tif (value === \"\") {\n\t\t\tfor (let i = 0; i < pattern.length; i++) {\n\t\t\t\tif (pattern[i] !== \"*\") {\n\t\t\t\t\treturn false;\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn true;\n\t\t}\n\n\t\tlet valueIdx = 0;\n\t\tlet patternIdx = 0;\n\t\tlet starIdx = -1;\n\t\tlet matchIdx = 0;\n\n\t\twhile (valueIdx < value.length) {\n\t\t\tconst patternChar = pattern[patternIdx];\n\t\t\tconst valueChar = value[valueIdx];\n\n\t\t\tif (patternChar === \"?\") {\n\t\t\t\tvalueIdx++;\n\t\t\t\tpatternIdx++;\n\t\t\t} else if (patternChar === \"*\") {\n\t\t\t\tstarIdx = patternIdx;\n\t\t\t\tmatchIdx = valueIdx;\n\t\t\t\tpatternIdx++;\n\t\t\t} else if (patternChar === valueChar) {\n\t\t\t\tvalueIdx++;\n\t\t\t\tpatternIdx++;\n\t\t\t} else if (starIdx >= 0) {\n\t\t\t\tpatternIdx = starIdx + 1;\n\t\t\t\tmatchIdx++;\n\t\t\t\tvalueIdx = matchIdx;\n\t\t\t} else {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t}\n\n\t\twhile (patternIdx < pattern.length && pattern[patternIdx] === \"*\") {\n\t\t\tpatternIdx++;\n\t\t}\n\n\t\treturn patternIdx === pattern.length;\n\t}\n}\n"]}

package/dist/core/extensions/builtin/permission-system/wildcard.js

@@ -0,0 +1,58 @@
+export { Wildcard };
+var Wildcard;
+(function (Wildcard) {
+    function match(value, pattern) {
+        if (value === "" && pattern === "") {
+            return true;
+        }
+        if (pattern === "") {
+            return false;
+        }
+        if (value === "" && pattern === "*") {
+            return true;
+        }
+        if (value === "") {
+            for (let i = 0; i < pattern.length; i++) {
+                if (pattern[i] !== "*") {
+                    return false;
+                }
+            }
+            return true;
+        }
+        let valueIdx = 0;
+        let patternIdx = 0;
+        let starIdx = -1;
+        let matchIdx = 0;
+        while (valueIdx < value.length) {
+            const patternChar = pattern[patternIdx];
+            const valueChar = value[valueIdx];
+            if (patternChar === "?") {
+                valueIdx++;
+                patternIdx++;
+            }
+            else if (patternChar === "*") {
+                starIdx = patternIdx;
+                matchIdx = valueIdx;
+                patternIdx++;
+            }
+            else if (patternChar === valueChar) {
+                valueIdx++;
+                patternIdx++;
+            }
+            else if (starIdx >= 0) {
+                patternIdx = starIdx + 1;
+                matchIdx++;
+                valueIdx = matchIdx;
+            }
+            else {
+                return false;
+            }
+        }
+        while (patternIdx < pattern.length && pattern[patternIdx] === "*") {
+            patternIdx++;
+        }
+        return patternIdx === pattern.length;
+    }
+    Wildcard.match = match;
+})(Wildcard || (Wildcard = {}));
+//# sourceMappingURL=wildcard.js.map

package/dist/core/extensions/builtin/permission-system/wildcard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wildcard.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/wildcard.ts"],"names":[],"mappings":"SAAiB,QAAQ;AAAzB,IAAiB,QAsDhB;AAtDD,WAAiB,QAAQ,EAAC;IACzB,SAAgB,KAAK,CAAC,KAAa,EAAE,OAAe,EAAW;QAC9D,IAAI,KAAK,KAAK,EAAE,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAK,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACxB,OAAO,KAAK,CAAC;gBACd,CAAC;YACF,CAAC;YACD,OAAO,IAAI,CAAC;QACb,CAAC;QAED,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;QACjB,IAAI,QAAQ,GAAG,CAAC,CAAC;QAEjB,OAAO,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;YAElC,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;gBACzB,QAAQ,EAAE,CAAC;gBACX,UAAU,EAAE,CAAC;YACd,CAAC;iBAAM,IAAI,WAAW,KAAK,GAAG,EAAE,CAAC;gBAChC,OAAO,GAAG,UAAU,CAAC;gBACrB,QAAQ,GAAG,QAAQ,CAAC;gBACpB,UAAU,EAAE,CAAC;YACd,CAAC;iBAAM,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBACtC,QAAQ,EAAE,CAAC;gBACX,UAAU,EAAE,CAAC;YACd,CAAC;iBAAM,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;gBACzB,UAAU,GAAG,OAAO,GAAG,CAAC,CAAC;gBACzB,QAAQ,EAAE,CAAC;gBACX,QAAQ,GAAG,QAAQ,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QAED,OAAO,UAAU,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC;YACnE,UAAU,EAAE,CAAC;QACd,CAAC;QAED,OAAO,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC;IAAA,CACrC;IApDe,SAAA,KAAK,QAoDpB,CAAA;AAAA,CACD,EAtDgB,QAAQ,KAAR,QAAQ,QAsDxB","sourcesContent":["export namespace Wildcard {\n\texport function match(value: string, pattern: string): boolean {\n\t\tif (value === \"\" && pattern === \"\") {\n\t\t\treturn true;\n\t\t}\n\t\tif (pattern === \"\") {\n\t\t\treturn false;\n\t\t}\n\t\tif (value === \"\" && pattern === \"*\") {\n\t\t\treturn true;\n\t\t}\n\t\tif (value === \"\") {\n\t\t\tfor (let i = 0; i < pattern.length; i++) {\n\t\t\t\tif (pattern[i] !== \"*\") {\n\t\t\t\t\treturn false;\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn true;\n\t\t}\n\n\t\tlet valueIdx = 0;\n\t\tlet patternIdx = 0;\n\t\tlet starIdx = -1;\n\t\tlet matchIdx = 0;\n\n\t\twhile (valueIdx < value.length) {\n\t\t\tconst patternChar = pattern[patternIdx];\n\t\t\tconst valueChar = value[valueIdx];\n\n\t\t\tif (patternChar === \"?\") {\n\t\t\t\tvalueIdx++;\n\t\t\t\tpatternIdx++;\n\t\t\t} else if (patternChar === \"*\") {\n\t\t\t\tstarIdx = patternIdx;\n\t\t\t\tmatchIdx = valueIdx;\n\t\t\t\tpatternIdx++;\n\t\t\t} else if (patternChar === valueChar) {\n\t\t\t\tvalueIdx++;\n\t\t\t\tpatternIdx++;\n\t\t\t} else if (starIdx >= 0) {\n\t\t\t\tpatternIdx = starIdx + 1;\n\t\t\t\tmatchIdx++;\n\t\t\t\tvalueIdx = matchIdx;\n\t\t\t} else {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t}\n\n\t\twhile (patternIdx < pattern.length && pattern[patternIdx] === \"*\") {\n\t\t\tpatternIdx++;\n\t\t}\n\n\t\treturn patternIdx === pattern.length;\n\t}\n}\n"]}

package/dist/core/extensions/builtin/prompt-preset/claude-opus-4-5.d.ts

@@ -0,0 +1,3 @@
+import { type BuildDynamicSystemPromptOptions } from "../../../dynamic-prompt/build.js";
+export declare function buildClaudeOpus45Prompt(options: BuildDynamicSystemPromptOptions): string;
+//# sourceMappingURL=claude-opus-4-5.d.ts.map

package/dist/core/extensions/builtin/prompt-preset/claude-opus-4-5.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-opus-4-5.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/prompt-preset/claude-opus-4-5.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,+BAA+B,EAA4B,MAAM,kCAAkC,CAAC;AAMlH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,+BAA+B,GAAG,MAAM,CAExF","sourcesContent":["import { type BuildDynamicSystemPromptOptions, buildDynamicSystemPrompt } from \"../../../dynamic-prompt/build.js\";\n\nfunction buildClaudeOpus45Tuning(): string {\n\treturn `Break complex tasks into ordered steps with clear dependencies rather than stating only the outcome. When a task must apply to ALL items in a set, state \"apply to every item\" explicitly. Do not add caveats, qualifications, or \"let me know if...\" closers.`;\n}\n\nexport function buildClaudeOpus45Prompt(options: BuildDynamicSystemPromptOptions): string {\n\treturn buildDynamicSystemPrompt({ ...options, tuningSection: buildClaudeOpus45Tuning() });\n}\n"]}