@code-yeongyu/senpi 2026.5.19 → 2026.5.20-2

package/dist/core/extensions/builtin/openai-web-search/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/openai-web-search/index.ts"],"names":[],"mappings":"AAOA,MAAM,qBAAqB,GAAqB,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,CAAC,CAAC;AACxG,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAC1C,MAAM,6BAA6B,GAAG,oBAAoB,CAAC;AAC3D,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;AACpE,MAAM,UAAU,GAAG,mBAAmB,CAAC;AACvC,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAEvC,SAAS,cAAc,CAAC,MAAc,EAAW;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACjG,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAChG,OAAO,IAAI,CAAC;IACb,CAAC;IAED,mDAAmD;IACnD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,QAAQ,CAAC,KAAc,EAAoC;IACnE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AAAA,CACnD;AAED,SAAS,oBAAoB,CAAC,GAAoB,EAAwD;IACzG,OAAO,GAAG,KAAK,SAAS,IAAI,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAAA,CAC3D;AAED,SAAS,aAAa,CAAC,MAA6B,EAAoC;IACvF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACnG,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,+BAA+B,CAAC,KAA2B,EAAW;IAC9E,IAAI,CAAC;QACJ,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,2BAA2B,CAAC,CAAC,QAAQ,KAAK,gBAAgB,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AAAA,CACD;AAED,MAAM,UAAU,6BAA6B,CAAC,MAA6B,EAAW;IACrF,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,KAAK,wBAAwB,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAA2C,CAAC;IACjE,OAAO,MAAM,EAAE,wBAAwB,IAAI,+BAA+B,CAAC,KAAK,CAAC,CAAC;AAAA,CAClF;AAED,SAAS,2BAA2B,CAAC,KAAc,EAAmE;IACrH,OAAO,KAAK,KAAK,oBAAoB,IAAI,KAAK,KAAK,+BAA+B,CAAC;AAAA,CACnF;AAED,SAAS,0BAA0B,CAAC,KAAc,EAAW;IAC5D,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,KAAK,YAAY,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC3D,CAAC,2BAA2B,CAAC,KAAK,CAAC,CACnC,CAAC;AAAA,CACF;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAW;IACzD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAAA,CACnE;AAWD,SAAS,0BAA0B,CAAC,OAAgB,EAAW;IAC9D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,SAAS,GAA4B,EAAE,GAAG,OAAO,EAAE,CAAC;IAE1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3G,IAAI,cAAc,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5C,OAAO,GAAG,IAAI,CAAC;YACf,SAAS,CAAC,KAAK,GAAG,cAAc,CAAC;QAClC,CAAC;IACF,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,0BAA0B,CAAC,CAAC;QACzF,IAAI,gBAAgB,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAChD,OAAO,GAAG,IAAI,CAAC;YACf,SAAS,CAAC,OAAO,GAAG,gBAAgB,CAAC;QACtC,CAAC;IACF,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,2BAA2B,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5F,OAAO,GAAG,IAAI,CAAC;QACf,OAAO,SAAS,CAAC,WAAW,CAAC;IAC9B,CAAC;IAED,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAAA,CACrC;AAED,SAAS,aAAa,CAAC,KAAgB,EAAE,OAA6B,EAAkB;IACvF,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACV,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,0BAA0B,GAC/B,OAAO,CAAC,sBAAsB,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;QACpG,MAAM,gCAAgC,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC3G,IAAI,0BAA0B,IAAI,gCAAgC,EAAE,CAAC;YACpE,OAAO,GAAG,IAAI,CAAC;QAChB,CAAC;aAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAAA,CACrC;AAED,SAAS,uBAAuB,CAAC,OAAgC,EAAY;IAC5E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QAC7C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAC/E,CAAC,CAAC,EAAE,CAAC;IACN,OAAO,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,EAAE,0BAA0B,CAAC,CAAC;AAAA,CACzG;AAED,MAAM,UAAU,2BAA2B,CAAC,MAA6B,EAAE,OAAgB,EAAW;IACrG,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QACvC,0EAA0E;QAC1E,2EAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,gEAAgE;QAChE,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,MAAM,uBAAuB,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,qBAAqB,GAAG,uBAAuB,IAAI,wBAAwB,EAAE,CAAC;IACpF,MAAM,eAAe,GAAG,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAChG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAChC,OAAO,eAAe,CAAC;IACxB,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,WAAW,GAAG,uBAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC;IACpE,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC1F,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC;IACvC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG,eAAe,KAAK,OAAO,CAAC;QACnD,MAAM,gBAAgB,GAAG,aAAa,CAAC,WAAW,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,cAAc,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAClD,OAAO,eAAe,CAAC;QACxB,CAAC;QAED,OAAO;YACN,GAAG,eAAe;YAClB,KAAK,EAAE,gBAAgB,CAAC,KAAK;SAC7B,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACzB,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO;QACN,GAAG,OAAO;QACV,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC;KACzC,CAAC;AAAA,CACF;AAED,MAAM,UAAU,wBAAwB,GAAY;IACnD,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;AAAA,CAClC;AAED,SAAS,OAAO,CAAC,GAAqB,EAAQ;IAC7C,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO;IACvB,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACxC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;AAAA,CACxC;AAED,SAAS,MAAM,CAAC,GAAqB,EAAQ;IAC5C,OAAO,CAAC,GAAG,CAAC,CAAC;AAAA,CACb;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG;;;;;;CAMxC,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,wBAAwB,CAAC,EAAgB,EAAQ;IACxE,EAAE,CAAC,EAAE,CAAC,yBAAyB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;QAChD,OAAO,2BAA2B,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAAA,CAC7D,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,CAAC;IAAA,CACZ,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC;IAAA,CACZ,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,CAAC;IAAA,CACb,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,OAAO;YACN,YAAY,EAAE,GAAG,KAAK,CAAC,YAAY,KAAK,yBAAyB,EAAE;SACnE,CAAC;IAAA,CACF,CAAC,CAAC;AAAA,CACH","sourcesContent":["import type { Api, Model, OpenAIResponsesCompat } from \"@earendil-works/pi-ai\";\nimport type { ExtensionAPI, ExtensionContext } from \"../../types.js\";\n\ntype ToolDefinition = Record<string, unknown>;\ntype OpenAiWebSearchModel = Pick<Model<Api>, \"api\" | \"baseUrl\" | \"compat\">;\ntype OpenAiWebSearchTarget = Api | OpenAiWebSearchModel | undefined;\n\nconst OPENAI_RESPONSES_APIS: ReadonlySet<Api> = new Set([\"openai-responses\", \"azure-openai-responses\"]);\nconst ENABLE_ENV = \"PI_OPENAI_WEB_SEARCH\";\nconst NATIVE_OPENAI_WEB_SEARCH_TYPE = \"web_search_preview\";\nconst WEB_SEARCH_SOURCES_INCLUDE = \"web_search_call.action.sources\";\nconst STATUS_KEY = \"openai-web-search\";\nconst WIDGET_KEY = \"openai-web-search\";\n\nfunction parseEnableEnv(envVar: string): boolean {\n\tconst envValue = process.env[envVar];\n\tif (!envValue) {\n\t\treturn true;\n\t}\n\n\tconst normalized = envValue.trim().toLowerCase();\n\tif (normalized === \"0\" || normalized === \"false\" || normalized === \"no\" || normalized === \"off\") {\n\t\treturn false;\n\t}\n\n\tif (normalized === \"1\" || normalized === \"true\" || normalized === \"yes\" || normalized === \"on\") {\n\t\treturn true;\n\t}\n\n\t// Unknown values fall back to default-on behavior.\n\treturn true;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null;\n}\n\nfunction isOpenAiResponsesApi(api: Api | undefined): api is \"openai-responses\" | \"azure-openai-responses\" {\n\treturn api !== undefined && OPENAI_RESPONSES_APIS.has(api);\n}\n\nfunction resolveTarget(target: OpenAiWebSearchTarget): OpenAiWebSearchModel | undefined {\n\tif (target === undefined) {\n\t\treturn undefined;\n\t}\n\tif (typeof target === \"string\") {\n\t\treturn { api: target, baseUrl: target === \"openai-responses\" ? \"https://api.openai.com/v1\" : \"\" };\n\t}\n\treturn target;\n}\n\nfunction isOpenAiResponsesNativeEndpoint(model: OpenAiWebSearchModel): boolean {\n\ttry {\n\t\treturn new URL(model.baseUrl || \"https://api.openai.com/v1\").hostname === \"api.openai.com\";\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nexport function supportsNativeOpenAiWebSearch(target: OpenAiWebSearchTarget): boolean {\n\tconst model = resolveTarget(target);\n\tif (!isOpenAiResponsesApi(model?.api)) {\n\t\treturn false;\n\t}\n\tif (model.api === \"azure-openai-responses\") {\n\t\treturn true;\n\t}\n\n\tconst compat = model.compat as OpenAIResponsesCompat | undefined;\n\treturn compat?.supportsWebSearchPreview ?? isOpenAiResponsesNativeEndpoint(model);\n}\n\nfunction isNativeOpenAiWebSearchType(value: unknown): value is \"web_search_preview\" | \"web_search_preview_2025_03_11\" {\n\treturn value === \"web_search_preview\" || value === \"web_search_preview_2025_03_11\";\n}\n\nfunction isUnsupportedWebSearchType(value: unknown): boolean {\n\treturn (\n\t\ttypeof value === \"string\" &&\n\t\t(value === \"web_search\" || value.startsWith(\"web_search_\")) &&\n\t\t!isNativeOpenAiWebSearchType(value)\n\t);\n}\n\nfunction isAnthropicWebFetchType(value: unknown): boolean {\n\treturn typeof value === \"string\" && value.startsWith(\"web_fetch_\");\n}\n\ntype SanitizedTools = {\n\tchanged: boolean;\n\ttools: ToolDefinition[];\n};\n\ntype SanitizeToolsOptions = {\n\tstripFunctionWebSearch: boolean;\n};\n\nfunction stripNativeOpenAiWebSearch(payload: unknown): unknown {\n\tif (!isRecord(payload)) {\n\t\treturn payload;\n\t}\n\n\tlet changed = false;\n\tconst sanitized: Record<string, unknown> = { ...payload };\n\n\tconst tools = payload.tools;\n\tif (Array.isArray(tools)) {\n\t\tconst sanitizedTools = tools.filter((tool) => !(isRecord(tool) && isNativeOpenAiWebSearchType(tool.type)));\n\t\tif (sanitizedTools.length !== tools.length) {\n\t\t\tchanged = true;\n\t\t\tsanitized.tools = sanitizedTools;\n\t\t}\n\t}\n\n\tconst include = payload.include;\n\tif (Array.isArray(include)) {\n\t\tconst sanitizedInclude = include.filter((value) => value !== WEB_SEARCH_SOURCES_INCLUDE);\n\t\tif (sanitizedInclude.length !== include.length) {\n\t\t\tchanged = true;\n\t\t\tsanitized.include = sanitizedInclude;\n\t\t}\n\t}\n\n\tif (isRecord(payload.tool_choice) && isNativeOpenAiWebSearchType(payload.tool_choice.type)) {\n\t\tchanged = true;\n\t\tdelete sanitized.tool_choice;\n\t}\n\n\treturn changed ? sanitized : payload;\n}\n\nfunction sanitizeTools(tools: unknown[], options: SanitizeToolsOptions): SanitizedTools {\n\tconst sanitized: ToolDefinition[] = [];\n\tlet changed = false;\n\tfor (const tool of tools) {\n\t\tif (!isRecord(tool)) {\n\t\t\tchanged = true;\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst type = tool.type;\n\t\tconst shouldStripFunctionVariant =\n\t\t\toptions.stripFunctionWebSearch && tool.name === \"web_search\" && !isNativeOpenAiWebSearchType(type);\n\t\tconst shouldStripProviderNativeVariant = isUnsupportedWebSearchType(type) || isAnthropicWebFetchType(type);\n\t\tif (shouldStripFunctionVariant || shouldStripProviderNativeVariant) {\n\t\t\tchanged = true;\n\t\t} else {\n\t\t\tsanitized.push(tool);\n\t\t}\n\t}\n\n\treturn { changed, tools: sanitized };\n}\n\nfunction includeWebSearchSources(payload: Record<string, unknown>): string[] {\n\tconst include = Array.isArray(payload.include)\n\t\t? payload.include.filter((value): value is string => typeof value === \"string\")\n\t\t: [];\n\treturn include.includes(WEB_SEARCH_SOURCES_INCLUDE) ? include : [...include, WEB_SEARCH_SOURCES_INCLUDE];\n}\n\nexport function addOpenAiWebSearchToPayload(target: OpenAiWebSearchTarget, payload: unknown): unknown {\n\tconst model = resolveTarget(target);\n\tif (!isOpenAiResponsesApi(model?.api)) {\n\t\t// Defense in depth. `web_search_preview` is an OpenAI Responses-only tool\n\t\t// type, but proxies that translate openai-responses → anthropic-messages\n\t\t// (e.g., ccapi/quotio for Claude models) can forward it verbatim, which\n\t\t// Anthropic rejects with `tools.N: Input tag 'web_search_preview'...`.\n\t\t// Strip the OpenAI-native variants for any non-openai-responses payload\n\t\t// so they never leak to Anthropic or Chat Completions backends.\n\t\treturn stripNativeOpenAiWebSearch(payload);\n\t}\n\n\tif (!isRecord(payload)) {\n\t\treturn payload;\n\t}\n\n\tconst supportsNativeWebSearch = supportsNativeOpenAiWebSearch(model);\n\tconst tools = Array.isArray(payload.tools) ? payload.tools : [];\n\tconst shouldInjectWebSearch = supportsNativeWebSearch && isOpenaiWebSearchEnabled();\n\tconst strippedPayload = supportsNativeWebSearch ? payload : stripNativeOpenAiWebSearch(payload);\n\tif (!isRecord(strippedPayload)) {\n\t\treturn strippedPayload;\n\t}\n\n\tconst strippedTools = Array.isArray(strippedPayload.tools) ? strippedPayload.tools : [];\n\tconst activeTools = supportsNativeWebSearch ? tools : strippedTools;\n\tconst sanitized = sanitizeTools(tools, { stripFunctionWebSearch: shouldInjectWebSearch });\n\tconst sanitizedTools = sanitized.tools;\n\tif (!shouldInjectWebSearch) {\n\t\tconst nativeStripped = strippedPayload !== payload;\n\t\tconst passiveSanitized = sanitizeTools(activeTools, { stripFunctionWebSearch: false });\n\t\tif (!nativeStripped && !passiveSanitized.changed) {\n\t\t\treturn strippedPayload;\n\t\t}\n\n\t\treturn {\n\t\t\t...strippedPayload,\n\t\t\ttools: passiveSanitized.tools,\n\t\t};\n\t}\n\n\tconst hasNativeWebSearch = sanitizedTools.some((tool) => isNativeOpenAiWebSearchType(tool.type));\n\n\tif (!hasNativeWebSearch) {\n\t\tsanitizedTools.push({ type: NATIVE_OPENAI_WEB_SEARCH_TYPE });\n\t}\n\n\treturn {\n\t\t...payload,\n\t\ttools: sanitizedTools,\n\t\tinclude: includeWebSearchSources(payload),\n\t};\n}\n\nexport function isOpenaiWebSearchEnabled(): boolean {\n\treturn parseEnableEnv(ENABLE_ENV);\n}\n\nfunction clearUi(ctx: ExtensionContext): void {\n\tif (!ctx.hasUI) return;\n\tctx.ui.setStatus(STATUS_KEY, undefined);\n\tctx.ui.setWidget(WIDGET_KEY, undefined);\n}\n\nfunction syncUi(ctx: ExtensionContext): void {\n\tclearUi(ctx);\n}\n\nexport const OPENAI_WEB_SEARCH_SECTION = `\n## Web Search\n\nNative web search is available in this session.\nUse web search when the user asks for current or online information.\nPrefer web search over guessing when freshness matters.\n`;\n\nexport default function openaiWebSearchExtension(pi: ExtensionAPI): void {\n\tpi.on(\"before_provider_request\", (event, ctx) => {\n\t\treturn addOpenAiWebSearchToPayload(ctx.model, event.payload);\n\t});\n\n\tpi.on(\"session_start\", async (_event, ctx) => {\n\t\tsyncUi(ctx);\n\t});\n\n\tpi.on(\"model_select\", async (_event, ctx) => {\n\t\tsyncUi(ctx);\n\t});\n\n\tpi.on(\"session_shutdown\", async (_event, ctx) => {\n\t\tclearUi(ctx);\n\t});\n\n\tpi.on(\"before_agent_start\", async (event, ctx) => {\n\t\tif (!supportsNativeOpenAiWebSearch(ctx.model)) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tif (!isOpenaiWebSearchEnabled()) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\treturn {\n\t\t\tsystemPrompt: `${event.systemPrompt}\\n${OPENAI_WEB_SEARCH_SECTION}`,\n\t\t};\n\t});\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/openai-web-search/index.ts"],"names":[],"mappings":"AAOA,MAAM,qBAAqB,GAAqB,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,CAAC,CAAC;AACxG,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAC1C,MAAM,6BAA6B,GAAG,oBAAoB,CAAC;AAC3D,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;AACpE,MAAM,UAAU,GAAG,mBAAmB,CAAC;AACvC,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAEvC,SAAS,cAAc,CAAC,MAAc,EAAW;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACjG,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAChG,OAAO,IAAI,CAAC;IACb,CAAC;IAED,mDAAmD;IACnD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,QAAQ,CAAC,KAAc,EAAoC;IACnE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AAAA,CACnD;AAED,SAAS,oBAAoB,CAAC,GAAoB,EAAwD;IACzG,OAAO,GAAG,KAAK,SAAS,IAAI,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAAA,CAC3D;AAED,SAAS,aAAa,CAAC,MAA6B,EAAoC;IACvF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACnG,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,+BAA+B,CAAC,KAA2B,EAAW;IAC9E,IAAI,CAAC;QACJ,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,2BAA2B,CAAC,CAAC,QAAQ,KAAK,gBAAgB,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AAAA,CACD;AAED,MAAM,UAAU,6BAA6B,CAAC,MAA6B,EAAW;IACrF,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,KAAK,wBAAwB,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAA2C,CAAC;IACjE,OAAO,MAAM,EAAE,wBAAwB,IAAI,+BAA+B,CAAC,KAAK,CAAC,CAAC;AAAA,CAClF;AAED,SAAS,2BAA2B,CAAC,KAAc,EAAmE;IACrH,OAAO,KAAK,KAAK,oBAAoB,IAAI,KAAK,KAAK,+BAA+B,CAAC;AAAA,CACnF;AAED,SAAS,0BAA0B,CAAC,KAAc,EAAW;IAC5D,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,KAAK,YAAY,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC3D,CAAC,2BAA2B,CAAC,KAAK,CAAC,CACnC,CAAC;AAAA,CACF;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAW;IACzD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAAA,CACnE;AAWD,SAAS,0BAA0B,CAAC,OAAgB,EAAW;IAC9D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,SAAS,GAA4B,EAAE,GAAG,OAAO,EAAE,CAAC;IAE1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3G,IAAI,cAAc,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5C,OAAO,GAAG,IAAI,CAAC;YACf,SAAS,CAAC,KAAK,GAAG,cAAc,CAAC;QAClC,CAAC;IACF,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,0BAA0B,CAAC,CAAC;QACzF,IAAI,gBAAgB,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAChD,OAAO,GAAG,IAAI,CAAC;YACf,SAAS,CAAC,OAAO,GAAG,gBAAgB,CAAC;QACtC,CAAC;IACF,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,2BAA2B,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5F,OAAO,GAAG,IAAI,CAAC;QACf,OAAO,SAAS,CAAC,WAAW,CAAC;IAC9B,CAAC;IAED,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAAA,CACrC;AAED,SAAS,aAAa,CAAC,KAAgB,EAAE,OAA6B,EAAkB;IACvF,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACV,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,0BAA0B,GAC/B,OAAO,CAAC,sBAAsB,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;QACpG,MAAM,gCAAgC,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC3G,IAAI,0BAA0B,IAAI,gCAAgC,EAAE,CAAC;YACpE,OAAO,GAAG,IAAI,CAAC;QAChB,CAAC;aAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAAA,CACrC;AAED,SAAS,uBAAuB,CAAC,OAAgC,EAAY;IAC5E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QAC7C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAC/E,CAAC,CAAC,EAAE,CAAC;IACN,OAAO,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,EAAE,0BAA0B,CAAC,CAAC;AAAA,CACzG;AAED,MAAM,UAAU,2BAA2B,CAAC,MAA6B,EAAE,OAAgB,EAAW;IACrG,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QACvC,0EAA0E;QAC1E,2EAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,gEAAgE;QAChE,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,MAAM,uBAAuB,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,qBAAqB,GAAG,uBAAuB,IAAI,wBAAwB,EAAE,CAAC;IACpF,MAAM,eAAe,GAAG,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAChG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAChC,OAAO,eAAe,CAAC;IACxB,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,WAAW,GAAG,uBAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC;IACpE,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC1F,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC;IACvC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG,eAAe,KAAK,OAAO,CAAC;QACnD,MAAM,gBAAgB,GAAG,aAAa,CAAC,WAAW,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,cAAc,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAClD,OAAO,eAAe,CAAC;QACxB,CAAC;QAED,OAAO;YACN,GAAG,eAAe;YAClB,KAAK,EAAE,gBAAgB,CAAC,KAAK;SAC7B,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACzB,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO;QACN,GAAG,OAAO;QACV,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC;KACzC,CAAC;AAAA,CACF;AAED,MAAM,UAAU,wBAAwB,GAAY;IACnD,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;AAAA,CAClC;AAED,SAAS,OAAO,CAAC,GAAqB,EAAQ;IAC7C,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO;IACvB,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACxC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;AAAA,CACxC;AAED,SAAS,MAAM,CAAC,GAAqB,EAAQ;IAC5C,OAAO,CAAC,GAAG,CAAC,CAAC;AAAA,CACb;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG;;;;;;CAMxC,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,wBAAwB,CAAC,EAAgB,EAAQ;IACxE,EAAE,CAAC,EAAE,CAAC,yBAAyB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;QAChD,OAAO,2BAA2B,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAAA,CAC7D,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,CAAC;IAAA,CACZ,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC;IAAA,CACZ,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,CAAC;IAAA,CACb,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,OAAO;YACN,YAAY,EAAE,GAAG,KAAK,CAAC,YAAY,KAAK,yBAAyB,EAAE;SACnE,CAAC;IAAA,CACF,CAAC,CAAC;AAAA,CACH","sourcesContent":["import type { Api, Model, OpenAIResponsesCompat } from \"@earendil-works/pi-ai\";\nimport type { ExtensionAPI, ExtensionContext } from \"../../types.ts\";\n\ntype ToolDefinition = Record<string, unknown>;\ntype OpenAiWebSearchModel = Pick<Model<Api>, \"api\" | \"baseUrl\" | \"compat\">;\ntype OpenAiWebSearchTarget = Api | OpenAiWebSearchModel | undefined;\n\nconst OPENAI_RESPONSES_APIS: ReadonlySet<Api> = new Set([\"openai-responses\", \"azure-openai-responses\"]);\nconst ENABLE_ENV = \"PI_OPENAI_WEB_SEARCH\";\nconst NATIVE_OPENAI_WEB_SEARCH_TYPE = \"web_search_preview\";\nconst WEB_SEARCH_SOURCES_INCLUDE = \"web_search_call.action.sources\";\nconst STATUS_KEY = \"openai-web-search\";\nconst WIDGET_KEY = \"openai-web-search\";\n\nfunction parseEnableEnv(envVar: string): boolean {\n\tconst envValue = process.env[envVar];\n\tif (!envValue) {\n\t\treturn true;\n\t}\n\n\tconst normalized = envValue.trim().toLowerCase();\n\tif (normalized === \"0\" || normalized === \"false\" || normalized === \"no\" || normalized === \"off\") {\n\t\treturn false;\n\t}\n\n\tif (normalized === \"1\" || normalized === \"true\" || normalized === \"yes\" || normalized === \"on\") {\n\t\treturn true;\n\t}\n\n\t// Unknown values fall back to default-on behavior.\n\treturn true;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null;\n}\n\nfunction isOpenAiResponsesApi(api: Api | undefined): api is \"openai-responses\" | \"azure-openai-responses\" {\n\treturn api !== undefined && OPENAI_RESPONSES_APIS.has(api);\n}\n\nfunction resolveTarget(target: OpenAiWebSearchTarget): OpenAiWebSearchModel | undefined {\n\tif (target === undefined) {\n\t\treturn undefined;\n\t}\n\tif (typeof target === \"string\") {\n\t\treturn { api: target, baseUrl: target === \"openai-responses\" ? \"https://api.openai.com/v1\" : \"\" };\n\t}\n\treturn target;\n}\n\nfunction isOpenAiResponsesNativeEndpoint(model: OpenAiWebSearchModel): boolean {\n\ttry {\n\t\treturn new URL(model.baseUrl || \"https://api.openai.com/v1\").hostname === \"api.openai.com\";\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nexport function supportsNativeOpenAiWebSearch(target: OpenAiWebSearchTarget): boolean {\n\tconst model = resolveTarget(target);\n\tif (!isOpenAiResponsesApi(model?.api)) {\n\t\treturn false;\n\t}\n\tif (model.api === \"azure-openai-responses\") {\n\t\treturn true;\n\t}\n\n\tconst compat = model.compat as OpenAIResponsesCompat | undefined;\n\treturn compat?.supportsWebSearchPreview ?? isOpenAiResponsesNativeEndpoint(model);\n}\n\nfunction isNativeOpenAiWebSearchType(value: unknown): value is \"web_search_preview\" | \"web_search_preview_2025_03_11\" {\n\treturn value === \"web_search_preview\" || value === \"web_search_preview_2025_03_11\";\n}\n\nfunction isUnsupportedWebSearchType(value: unknown): boolean {\n\treturn (\n\t\ttypeof value === \"string\" &&\n\t\t(value === \"web_search\" || value.startsWith(\"web_search_\")) &&\n\t\t!isNativeOpenAiWebSearchType(value)\n\t);\n}\n\nfunction isAnthropicWebFetchType(value: unknown): boolean {\n\treturn typeof value === \"string\" && value.startsWith(\"web_fetch_\");\n}\n\ntype SanitizedTools = {\n\tchanged: boolean;\n\ttools: ToolDefinition[];\n};\n\ntype SanitizeToolsOptions = {\n\tstripFunctionWebSearch: boolean;\n};\n\nfunction stripNativeOpenAiWebSearch(payload: unknown): unknown {\n\tif (!isRecord(payload)) {\n\t\treturn payload;\n\t}\n\n\tlet changed = false;\n\tconst sanitized: Record<string, unknown> = { ...payload };\n\n\tconst tools = payload.tools;\n\tif (Array.isArray(tools)) {\n\t\tconst sanitizedTools = tools.filter((tool) => !(isRecord(tool) && isNativeOpenAiWebSearchType(tool.type)));\n\t\tif (sanitizedTools.length !== tools.length) {\n\t\t\tchanged = true;\n\t\t\tsanitized.tools = sanitizedTools;\n\t\t}\n\t}\n\n\tconst include = payload.include;\n\tif (Array.isArray(include)) {\n\t\tconst sanitizedInclude = include.filter((value) => value !== WEB_SEARCH_SOURCES_INCLUDE);\n\t\tif (sanitizedInclude.length !== include.length) {\n\t\t\tchanged = true;\n\t\t\tsanitized.include = sanitizedInclude;\n\t\t}\n\t}\n\n\tif (isRecord(payload.tool_choice) && isNativeOpenAiWebSearchType(payload.tool_choice.type)) {\n\t\tchanged = true;\n\t\tdelete sanitized.tool_choice;\n\t}\n\n\treturn changed ? sanitized : payload;\n}\n\nfunction sanitizeTools(tools: unknown[], options: SanitizeToolsOptions): SanitizedTools {\n\tconst sanitized: ToolDefinition[] = [];\n\tlet changed = false;\n\tfor (const tool of tools) {\n\t\tif (!isRecord(tool)) {\n\t\t\tchanged = true;\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst type = tool.type;\n\t\tconst shouldStripFunctionVariant =\n\t\t\toptions.stripFunctionWebSearch && tool.name === \"web_search\" && !isNativeOpenAiWebSearchType(type);\n\t\tconst shouldStripProviderNativeVariant = isUnsupportedWebSearchType(type) || isAnthropicWebFetchType(type);\n\t\tif (shouldStripFunctionVariant || shouldStripProviderNativeVariant) {\n\t\t\tchanged = true;\n\t\t} else {\n\t\t\tsanitized.push(tool);\n\t\t}\n\t}\n\n\treturn { changed, tools: sanitized };\n}\n\nfunction includeWebSearchSources(payload: Record<string, unknown>): string[] {\n\tconst include = Array.isArray(payload.include)\n\t\t? payload.include.filter((value): value is string => typeof value === \"string\")\n\t\t: [];\n\treturn include.includes(WEB_SEARCH_SOURCES_INCLUDE) ? include : [...include, WEB_SEARCH_SOURCES_INCLUDE];\n}\n\nexport function addOpenAiWebSearchToPayload(target: OpenAiWebSearchTarget, payload: unknown): unknown {\n\tconst model = resolveTarget(target);\n\tif (!isOpenAiResponsesApi(model?.api)) {\n\t\t// Defense in depth. `web_search_preview` is an OpenAI Responses-only tool\n\t\t// type, but proxies that translate openai-responses → anthropic-messages\n\t\t// (e.g., ccapi/quotio for Claude models) can forward it verbatim, which\n\t\t// Anthropic rejects with `tools.N: Input tag 'web_search_preview'...`.\n\t\t// Strip the OpenAI-native variants for any non-openai-responses payload\n\t\t// so they never leak to Anthropic or Chat Completions backends.\n\t\treturn stripNativeOpenAiWebSearch(payload);\n\t}\n\n\tif (!isRecord(payload)) {\n\t\treturn payload;\n\t}\n\n\tconst supportsNativeWebSearch = supportsNativeOpenAiWebSearch(model);\n\tconst tools = Array.isArray(payload.tools) ? payload.tools : [];\n\tconst shouldInjectWebSearch = supportsNativeWebSearch && isOpenaiWebSearchEnabled();\n\tconst strippedPayload = supportsNativeWebSearch ? payload : stripNativeOpenAiWebSearch(payload);\n\tif (!isRecord(strippedPayload)) {\n\t\treturn strippedPayload;\n\t}\n\n\tconst strippedTools = Array.isArray(strippedPayload.tools) ? strippedPayload.tools : [];\n\tconst activeTools = supportsNativeWebSearch ? tools : strippedTools;\n\tconst sanitized = sanitizeTools(tools, { stripFunctionWebSearch: shouldInjectWebSearch });\n\tconst sanitizedTools = sanitized.tools;\n\tif (!shouldInjectWebSearch) {\n\t\tconst nativeStripped = strippedPayload !== payload;\n\t\tconst passiveSanitized = sanitizeTools(activeTools, { stripFunctionWebSearch: false });\n\t\tif (!nativeStripped && !passiveSanitized.changed) {\n\t\t\treturn strippedPayload;\n\t\t}\n\n\t\treturn {\n\t\t\t...strippedPayload,\n\t\t\ttools: passiveSanitized.tools,\n\t\t};\n\t}\n\n\tconst hasNativeWebSearch = sanitizedTools.some((tool) => isNativeOpenAiWebSearchType(tool.type));\n\n\tif (!hasNativeWebSearch) {\n\t\tsanitizedTools.push({ type: NATIVE_OPENAI_WEB_SEARCH_TYPE });\n\t}\n\n\treturn {\n\t\t...payload,\n\t\ttools: sanitizedTools,\n\t\tinclude: includeWebSearchSources(payload),\n\t};\n}\n\nexport function isOpenaiWebSearchEnabled(): boolean {\n\treturn parseEnableEnv(ENABLE_ENV);\n}\n\nfunction clearUi(ctx: ExtensionContext): void {\n\tif (!ctx.hasUI) return;\n\tctx.ui.setStatus(STATUS_KEY, undefined);\n\tctx.ui.setWidget(WIDGET_KEY, undefined);\n}\n\nfunction syncUi(ctx: ExtensionContext): void {\n\tclearUi(ctx);\n}\n\nexport const OPENAI_WEB_SEARCH_SECTION = `\n## Web Search\n\nNative web search is available in this session.\nUse web search when the user asks for current or online information.\nPrefer web search over guessing when freshness matters.\n`;\n\nexport default function openaiWebSearchExtension(pi: ExtensionAPI): void {\n\tpi.on(\"before_provider_request\", (event, ctx) => {\n\t\treturn addOpenAiWebSearchToPayload(ctx.model, event.payload);\n\t});\n\n\tpi.on(\"session_start\", async (_event, ctx) => {\n\t\tsyncUi(ctx);\n\t});\n\n\tpi.on(\"model_select\", async (_event, ctx) => {\n\t\tsyncUi(ctx);\n\t});\n\n\tpi.on(\"session_shutdown\", async (_event, ctx) => {\n\t\tclearUi(ctx);\n\t});\n\n\tpi.on(\"before_agent_start\", async (event, ctx) => {\n\t\tif (!supportsNativeOpenAiWebSearch(ctx.model)) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tif (!isOpenaiWebSearchEnabled()) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\treturn {\n\t\t\tsystemPrompt: `${event.systemPrompt}\\n${OPENAI_WEB_SEARCH_SECTION}`,\n\t\t};\n\t});\n}\n"]}

package/dist/core/extensions/builtin/permission-system/arity.d.ts

@@ -1,4 +1,4 @@
-export declare namespace BashArity {
-    function prefix(tokens: string[]): string[];
-}
+export declare const BashArity: {
+    prefix(tokens: string[]): string[];
+};
 //# sourceMappingURL=arity.d.ts.map

package/dist/core/extensions/builtin/permission-system/arity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"arity.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/arity.ts"],"names":[],"mappings":"AAAA,yBAAiB,SAAS,CAAC,CAAC;IAC3B,SAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,YAQtC;CAyJD","sourcesContent":["export namespace BashArity {\n\texport function prefix(tokens: string[]) {\n\t\tfor (let len = tokens.length; len > 0; len--) {\n\t\t\tconst prefix = tokens.slice(0, len).join(\" \");\n\t\t\tconst arity = ARITY[prefix];\n\t\t\tif (arity !== undefined) return tokens.slice(0, arity);\n\t\t}\n\t\tif (tokens.length === 0) return [];\n\t\treturn tokens.slice(0, 1);\n\t}\n\n\t/* Generated with following prompt:\nYou are generating a dictionary of command-prefix arities for bash-style commands.\nThis dictionary is used to identify the \"human-understandable command\" from an input shell command.### **RULES (follow strictly)**1. Each entry maps a **command prefix string → number**, representing how many **tokens** define the command.\n2. **Flags NEVER count as tokens**. Only subcommands count.\n3. **Longest matching prefix wins**.\n4. **Only include a longer prefix if its arity is different from what the shorter prefix already implies**.   * Example: If `git` is 2, then do **not** include `git checkout`, `git commit`, etc. unless they require *different* arity.\n5. The output must be a **single JSON object**. Each entry should have a comment with an example real world matching command. DO NOT MAKE ANY OTHER COMMENTS. Should be alphabetical\n6. Include the **most commonly used commands** across many stacks and languages. More is better.### **Semantics examples*** `touch foo.txt` → `touch` (arity 1, explicitly listed)\n* `git checkout main` → `git checkout` (because `git` has arity 2)\n* `npm install` → `npm install` (because `npm` has arity 2)\n* `npm run dev` → `npm run dev` (because `npm run` has arity 3)\n* `python script.py` → `python script.py` (default: whole input, not in dictionary)### **Now generate the dictionary.**\n*/\n\tconst ARITY: Record<string, number> = {\n\t\tcat: 1, // cat file.txt\n\t\tcd: 1, // cd /path/to/dir\n\t\tchmod: 1, // chmod 755 script.sh\n\t\tchown: 1, // chown user:group file.txt\n\t\tcp: 1, // cp source.txt dest.txt\n\t\techo: 1, // echo \"hello world\"\n\t\tenv: 1, // env\n\t\texport: 1, // export PATH=/usr/bin\n\t\tgrep: 1, // grep pattern file.txt\n\t\tkill: 1, // kill 1234\n\t\tkillall: 1, // killall process\n\t\tln: 1, // ln -s source target\n\t\tls: 1, // ls -la\n\t\tmkdir: 1, // mkdir new-dir\n\t\tmv: 1, // mv old.txt new.txt\n\t\tps: 1, // ps aux\n\t\tpwd: 1, // pwd\n\t\trm: 1, // rm file.txt\n\t\trmdir: 1, // rmdir empty-dir\n\t\tsleep: 1, // sleep 5\n\t\tsource: 1, // source ~/.bashrc\n\t\ttail: 1, // tail -f log.txt\n\t\ttouch: 1, // touch file.txt\n\t\tunset: 1, // unset VAR\n\t\twhich: 1, // which node\n\t\taws: 3, // aws s3 ls\n\t\taz: 3, // az storage blob list\n\t\tbazel: 2, // bazel build\n\t\tbrew: 2, // brew install node\n\t\tbun: 2, // bun install\n\t\t\"bun run\": 3, // bun run dev\n\t\t\"bun x\": 3, // bun x vite\n\t\tcargo: 2, // cargo build\n\t\t\"cargo add\": 3, // cargo add tokio\n\t\t\"cargo run\": 3, // cargo run main\n\t\tcdk: 2, // cdk deploy\n\t\tcf: 2, // cf push app\n\t\tcmake: 2, // cmake build\n\t\tcomposer: 2, // composer require laravel\n\t\tconsul: 2, // consul members\n\t\t\"consul kv\": 3, // consul kv get config/app\n\t\tcrictl: 2, // crictl ps\n\t\tdeno: 2, // deno run server.ts\n\t\t\"deno task\": 3, // deno task dev\n\t\tdoctl: 3, // doctl kubernetes cluster list\n\t\tdocker: 2, // docker run nginx\n\t\t\"docker builder\": 3, // docker builder prune\n\t\t\"docker compose\": 3, // docker compose up\n\t\t\"docker container\": 3, // docker container ls\n\t\t\"docker image\": 3, // docker image prune\n\t\t\"docker network\": 3, // docker network inspect\n\t\t\"docker volume\": 3, // docker volume ls\n\t\teksctl: 2, // eksctl get clusters\n\t\t\"eksctl create\": 3, // eksctl create cluster\n\t\tfirebase: 2, // firebase deploy\n\t\tflyctl: 2, // flyctl deploy\n\t\tgcloud: 3, // gcloud compute instances list\n\t\tgh: 3, // gh pr list\n\t\tgit: 2, // git checkout main\n\t\t\"git config\": 3, // git config user.name\n\t\t\"git remote\": 3, // git remote add origin\n\t\t\"git stash\": 3, // git stash pop\n\t\tgo: 2, // go build\n\t\tgradle: 2, // gradle build\n\t\thelm: 2, // helm install mychart\n\t\theroku: 2, // heroku logs\n\t\thugo: 2, // hugo new site blog\n\t\tip: 2, // ip link show\n\t\t\"ip addr\": 3, // ip addr show\n\t\t\"ip link\": 3, // ip link set eth0 up\n\t\t\"ip netns\": 3, // ip netns exec foo bash\n\t\t\"ip route\": 3, // ip route add default via 1.1.1.1\n\t\tkind: 2, // kind delete cluster\n\t\t\"kind create\": 3, // kind create cluster\n\t\tkubectl: 2, // kubectl get pods\n\t\t\"kubectl kustomize\": 3, // kubectl kustomize overlays/dev\n\t\t\"kubectl rollout\": 3, // kubectl rollout restart deploy/api\n\t\tkustomize: 2, // kustomize build .\n\t\tmake: 2, // make build\n\t\tmc: 2, // mc ls myminio\n\t\t\"mc admin\": 3, // mc admin info myminio\n\t\tminikube: 2, // minikube start\n\t\tmongosh: 2, // mongosh test\n\t\tmysql: 2, // mysql -u root\n\t\tmvn: 2, // mvn compile\n\t\tng: 2, // ng generate component home\n\t\tnpm: 2, // npm install\n\t\t\"npm exec\": 3, // npm exec vite\n\t\t\"npm init\": 3, // npm init vue\n\t\t\"npm run\": 3, // npm run dev\n\t\t\"npm view\": 3, // npm view react version\n\t\tnvm: 2, // nvm use 18\n\t\tnx: 2, // nx build\n\t\topenssl: 2, // openssl genrsa 2048\n\t\t\"openssl req\": 3, // openssl req -new -key key.pem\n\t\t\"openssl x509\": 3, // openssl x509 -in cert.pem\n\t\tpip: 2, // pip install numpy\n\t\tpipenv: 2, // pipenv install flask\n\t\tpnpm: 2, // pnpm install\n\t\t\"pnpm dlx\": 3, // pnpm dlx create-next-app\n\t\t\"pnpm exec\": 3, // pnpm exec vite\n\t\t\"pnpm run\": 3, // pnpm run dev\n\t\tpoetry: 2, // poetry add requests\n\t\tpodman: 2, // podman run alpine\n\t\t\"podman container\": 3, // podman container ls\n\t\t\"podman image\": 3, // podman image prune\n\t\tpsql: 2, // psql -d mydb\n\t\tpulumi: 2, // pulumi up\n\t\t\"pulumi stack\": 3, // pulumi stack output\n\t\tpyenv: 2, // pyenv install 3.11\n\t\tpython: 2, // python -m venv env\n\t\trake: 2, // rake db:migrate\n\t\trbenv: 2, // rbenv install 3.2.0\n\t\t\"redis-cli\": 2, // redis-cli ping\n\t\trustup: 2, // rustup update\n\t\tserverless: 2, // serverless invoke\n\t\tsfdx: 3, // sfdx force:org:list\n\t\tskaffold: 2, // skaffold dev\n\t\tsls: 2, // sls deploy\n\t\tsst: 2, // sst deploy\n\t\tswift: 2, // swift build\n\t\tsystemctl: 2, // systemctl restart nginx\n\t\tterraform: 2, // terraform apply\n\t\t\"terraform workspace\": 3, // terraform workspace select prod\n\t\ttmux: 2, // tmux new -s dev\n\t\tturbo: 2, // turbo run build\n\t\tufw: 2, // ufw allow 22\n\t\tvault: 2, // vault login\n\t\t\"vault auth\": 3, // vault auth list\n\t\t\"vault kv\": 3, // vault kv get secret/api\n\t\tvercel: 2, // vercel deploy\n\t\tvolta: 2, // volta install node\n\t\twp: 2, // wp plugin install\n\t\tyarn: 2, // yarn add react\n\t\t\"yarn dlx\": 3, // yarn dlx create-react-app\n\t\t\"yarn run\": 3, // yarn run dev\n\t};\n}\n"]}
+{"version":3,"file":"arity.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/arity.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS;;CAUrB,CAAC","sourcesContent":["export const BashArity = {\n\tprefix(tokens: string[]): string[] {\n\t\tfor (let len = tokens.length; len > 0; len--) {\n\t\t\tconst prefix = tokens.slice(0, len).join(\" \");\n\t\t\tconst arity = ARITY[prefix];\n\t\t\tif (arity !== undefined) return tokens.slice(0, arity);\n\t\t}\n\t\tif (tokens.length === 0) return [];\n\t\treturn tokens.slice(0, 1);\n\t},\n};\n\n/* Generated with following prompt:\nYou are generating a dictionary of command-prefix arities for bash-style commands.\nThis dictionary is used to identify the \"human-understandable command\" from an input shell command.### **RULES (follow strictly)**1. Each entry maps a **command prefix string → number**, representing how many **tokens** define the command.\n2. **Flags NEVER count as tokens**. Only subcommands count.\n3. **Longest matching prefix wins**.\n4. **Only include a longer prefix if its arity is different from what the shorter prefix already implies**.   * Example: If `git` is 2, then do **not** include `git checkout`, `git commit`, etc. unless they require *different* arity.\n5. The output must be a **single JSON object**. Each entry should have a comment with an example real world matching command. DO NOT MAKE ANY OTHER COMMENTS. Should be alphabetical\n6. Include the **most commonly used commands** across many stacks and languages. More is better.### **Semantics examples*** `touch foo.txt` → `touch` (arity 1, explicitly listed)\n* `git checkout main` → `git checkout` (because `git` has arity 2)\n* `npm install` → `npm install` (because `npm` has arity 2)\n* `npm run dev` → `npm run dev` (because `npm run` has arity 3)\n* `python script.py` → `python script.py` (default: whole input, not in dictionary)### **Now generate the dictionary.**\n*/\nconst ARITY: Record<string, number> = {\n\tcat: 1, // cat file.txt\n\tcd: 1, // cd /path/to/dir\n\tchmod: 1, // chmod 755 script.sh\n\tchown: 1, // chown user:group file.txt\n\tcp: 1, // cp source.txt dest.txt\n\techo: 1, // echo \"hello world\"\n\tenv: 1, // env\n\texport: 1, // export PATH=/usr/bin\n\tgrep: 1, // grep pattern file.txt\n\tkill: 1, // kill 1234\n\tkillall: 1, // killall process\n\tln: 1, // ln -s source target\n\tls: 1, // ls -la\n\tmkdir: 1, // mkdir new-dir\n\tmv: 1, // mv old.txt new.txt\n\tps: 1, // ps aux\n\tpwd: 1, // pwd\n\trm: 1, // rm file.txt\n\trmdir: 1, // rmdir empty-dir\n\tsleep: 1, // sleep 5\n\tsource: 1, // source ~/.bashrc\n\ttail: 1, // tail -f log.txt\n\ttouch: 1, // touch file.txt\n\tunset: 1, // unset VAR\n\twhich: 1, // which node\n\taws: 3, // aws s3 ls\n\taz: 3, // az storage blob list\n\tbazel: 2, // bazel build\n\tbrew: 2, // brew install node\n\tbun: 2, // bun install\n\t\"bun run\": 3, // bun run dev\n\t\"bun x\": 3, // bun x vite\n\tcargo: 2, // cargo build\n\t\"cargo add\": 3, // cargo add tokio\n\t\"cargo run\": 3, // cargo run main\n\tcdk: 2, // cdk deploy\n\tcf: 2, // cf push app\n\tcmake: 2, // cmake build\n\tcomposer: 2, // composer require laravel\n\tconsul: 2, // consul members\n\t\"consul kv\": 3, // consul kv get config/app\n\tcrictl: 2, // crictl ps\n\tdeno: 2, // deno run server.ts\n\t\"deno task\": 3, // deno task dev\n\tdoctl: 3, // doctl kubernetes cluster list\n\tdocker: 2, // docker run nginx\n\t\"docker builder\": 3, // docker builder prune\n\t\"docker compose\": 3, // docker compose up\n\t\"docker container\": 3, // docker container ls\n\t\"docker image\": 3, // docker image prune\n\t\"docker network\": 3, // docker network inspect\n\t\"docker volume\": 3, // docker volume ls\n\teksctl: 2, // eksctl get clusters\n\t\"eksctl create\": 3, // eksctl create cluster\n\tfirebase: 2, // firebase deploy\n\tflyctl: 2, // flyctl deploy\n\tgcloud: 3, // gcloud compute instances list\n\tgh: 3, // gh pr list\n\tgit: 2, // git checkout main\n\t\"git config\": 3, // git config user.name\n\t\"git remote\": 3, // git remote add origin\n\t\"git stash\": 3, // git stash pop\n\tgo: 2, // go build\n\tgradle: 2, // gradle build\n\thelm: 2, // helm install mychart\n\theroku: 2, // heroku logs\n\thugo: 2, // hugo new site blog\n\tip: 2, // ip link show\n\t\"ip addr\": 3, // ip addr show\n\t\"ip link\": 3, // ip link set eth0 up\n\t\"ip netns\": 3, // ip netns exec foo bash\n\t\"ip route\": 3, // ip route add default via 1.1.1.1\n\tkind: 2, // kind delete cluster\n\t\"kind create\": 3, // kind create cluster\n\tkubectl: 2, // kubectl get pods\n\t\"kubectl kustomize\": 3, // kubectl kustomize overlays/dev\n\t\"kubectl rollout\": 3, // kubectl rollout restart deploy/api\n\tkustomize: 2, // kustomize build .\n\tmake: 2, // make build\n\tmc: 2, // mc ls myminio\n\t\"mc admin\": 3, // mc admin info myminio\n\tminikube: 2, // minikube start\n\tmongosh: 2, // mongosh test\n\tmysql: 2, // mysql -u root\n\tmvn: 2, // mvn compile\n\tng: 2, // ng generate component home\n\tnpm: 2, // npm install\n\t\"npm exec\": 3, // npm exec vite\n\t\"npm init\": 3, // npm init vue\n\t\"npm run\": 3, // npm run dev\n\t\"npm view\": 3, // npm view react version\n\tnvm: 2, // nvm use 18\n\tnx: 2, // nx build\n\topenssl: 2, // openssl genrsa 2048\n\t\"openssl req\": 3, // openssl req -new -key key.pem\n\t\"openssl x509\": 3, // openssl x509 -in cert.pem\n\tpip: 2, // pip install numpy\n\tpipenv: 2, // pipenv install flask\n\tpnpm: 2, // pnpm install\n\t\"pnpm dlx\": 3, // pnpm dlx create-next-app\n\t\"pnpm exec\": 3, // pnpm exec vite\n\t\"pnpm run\": 3, // pnpm run dev\n\tpoetry: 2, // poetry add requests\n\tpodman: 2, // podman run alpine\n\t\"podman container\": 3, // podman container ls\n\t\"podman image\": 3, // podman image prune\n\tpsql: 2, // psql -d mydb\n\tpulumi: 2, // pulumi up\n\t\"pulumi stack\": 3, // pulumi stack output\n\tpyenv: 2, // pyenv install 3.11\n\tpython: 2, // python -m venv env\n\trake: 2, // rake db:migrate\n\trbenv: 2, // rbenv install 3.2.0\n\t\"redis-cli\": 2, // redis-cli ping\n\trustup: 2, // rustup update\n\tserverless: 2, // serverless invoke\n\tsfdx: 3, // sfdx force:org:list\n\tskaffold: 2, // skaffold dev\n\tsls: 2, // sls deploy\n\tsst: 2, // sst deploy\n\tswift: 2, // swift build\n\tsystemctl: 2, // systemctl restart nginx\n\tterraform: 2, // terraform apply\n\t\"terraform workspace\": 3, // terraform workspace select prod\n\ttmux: 2, // tmux new -s dev\n\tturbo: 2, // turbo run build\n\tufw: 2, // ufw allow 22\n\tvault: 2, // vault login\n\t\"vault auth\": 3, // vault auth list\n\t\"vault kv\": 3, // vault kv get secret/api\n\tvercel: 2, // vercel deploy\n\tvolta: 2, // volta install node\n\twp: 2, // wp plugin install\n\tyarn: 2, // yarn add react\n\t\"yarn dlx\": 3, // yarn dlx create-react-app\n\t\"yarn run\": 3, // yarn run dev\n};\n"]}

package/dist/core/extensions/builtin/permission-system/arity.js

@@ -1,7 +1,5 @@
-export { BashArity };
-var BashArity;
-(function (BashArity) {
-    function prefix(tokens) {
+export const BashArity = {
+    prefix(tokens) {
         for (let len = tokens.length; len > 0; len--) {
             const prefix = tokens.slice(0, len).join(" ");
             const arity = ARITY[prefix];
@@ -11,158 +9,157 @@ var BashArity;
         if (tokens.length === 0)
             return [];
         return tokens.slice(0, 1);
-    }
-    BashArity.prefix = prefix;
-    /* Generated with following prompt:
-    You are generating a dictionary of command-prefix arities for bash-style commands.
-    This dictionary is used to identify the "human-understandable command" from an input shell command.### **RULES (follow strictly)**1. Each entry maps a **command prefix string → number**, representing how many **tokens** define the command.
-    2. **Flags NEVER count as tokens**. Only subcommands count.
-    3. **Longest matching prefix wins**.
-    4. **Only include a longer prefix if its arity is different from what the shorter prefix already implies**.   * Example: If `git` is 2, then do **not** include `git checkout`, `git commit`, etc. unless they require *different* arity.
-    5. The output must be a **single JSON object**. Each entry should have a comment with an example real world matching command. DO NOT MAKE ANY OTHER COMMENTS. Should be alphabetical
-    6. Include the **most commonly used commands** across many stacks and languages. More is better.### **Semantics examples*** `touch foo.txt` → `touch` (arity 1, explicitly listed)
-    * `git checkout main` → `git checkout` (because `git` has arity 2)
-    * `npm install` → `npm install` (because `npm` has arity 2)
-    * `npm run dev` → `npm run dev` (because `npm run` has arity 3)
-    * `python script.py` → `python script.py` (default: whole input, not in dictionary)### **Now generate the dictionary.**
-    */
-    const ARITY = {
-        cat: 1, // cat file.txt
-        cd: 1, // cd /path/to/dir
-        chmod: 1, // chmod 755 script.sh
-        chown: 1, // chown user:group file.txt
-        cp: 1, // cp source.txt dest.txt
-        echo: 1, // echo "hello world"
-        env: 1, // env
-        export: 1, // export PATH=/usr/bin
-        grep: 1, // grep pattern file.txt
-        kill: 1, // kill 1234
-        killall: 1, // killall process
-        ln: 1, // ln -s source target
-        ls: 1, // ls -la
-        mkdir: 1, // mkdir new-dir
-        mv: 1, // mv old.txt new.txt
-        ps: 1, // ps aux
-        pwd: 1, // pwd
-        rm: 1, // rm file.txt
-        rmdir: 1, // rmdir empty-dir
-        sleep: 1, // sleep 5
-        source: 1, // source ~/.bashrc
-        tail: 1, // tail -f log.txt
-        touch: 1, // touch file.txt
-        unset: 1, // unset VAR
-        which: 1, // which node
-        aws: 3, // aws s3 ls
-        az: 3, // az storage blob list
-        bazel: 2, // bazel build
-        brew: 2, // brew install node
-        bun: 2, // bun install
-        "bun run": 3, // bun run dev
-        "bun x": 3, // bun x vite
-        cargo: 2, // cargo build
-        "cargo add": 3, // cargo add tokio
-        "cargo run": 3, // cargo run main
-        cdk: 2, // cdk deploy
-        cf: 2, // cf push app
-        cmake: 2, // cmake build
-        composer: 2, // composer require laravel
-        consul: 2, // consul members
-        "consul kv": 3, // consul kv get config/app
-        crictl: 2, // crictl ps
-        deno: 2, // deno run server.ts
-        "deno task": 3, // deno task dev
-        doctl: 3, // doctl kubernetes cluster list
-        docker: 2, // docker run nginx
-        "docker builder": 3, // docker builder prune
-        "docker compose": 3, // docker compose up
-        "docker container": 3, // docker container ls
-        "docker image": 3, // docker image prune
-        "docker network": 3, // docker network inspect
-        "docker volume": 3, // docker volume ls
-        eksctl: 2, // eksctl get clusters
-        "eksctl create": 3, // eksctl create cluster
-        firebase: 2, // firebase deploy
-        flyctl: 2, // flyctl deploy
-        gcloud: 3, // gcloud compute instances list
-        gh: 3, // gh pr list
-        git: 2, // git checkout main
-        "git config": 3, // git config user.name
-        "git remote": 3, // git remote add origin
-        "git stash": 3, // git stash pop
-        go: 2, // go build
-        gradle: 2, // gradle build
-        helm: 2, // helm install mychart
-        heroku: 2, // heroku logs
-        hugo: 2, // hugo new site blog
-        ip: 2, // ip link show
-        "ip addr": 3, // ip addr show
-        "ip link": 3, // ip link set eth0 up
-        "ip netns": 3, // ip netns exec foo bash
-        "ip route": 3, // ip route add default via 1.1.1.1
-        kind: 2, // kind delete cluster
-        "kind create": 3, // kind create cluster
-        kubectl: 2, // kubectl get pods
-        "kubectl kustomize": 3, // kubectl kustomize overlays/dev
-        "kubectl rollout": 3, // kubectl rollout restart deploy/api
-        kustomize: 2, // kustomize build .
-        make: 2, // make build
-        mc: 2, // mc ls myminio
-        "mc admin": 3, // mc admin info myminio
-        minikube: 2, // minikube start
-        mongosh: 2, // mongosh test
-        mysql: 2, // mysql -u root
-        mvn: 2, // mvn compile
-        ng: 2, // ng generate component home
-        npm: 2, // npm install
-        "npm exec": 3, // npm exec vite
-        "npm init": 3, // npm init vue
-        "npm run": 3, // npm run dev
-        "npm view": 3, // npm view react version
-        nvm: 2, // nvm use 18
-        nx: 2, // nx build
-        openssl: 2, // openssl genrsa 2048
-        "openssl req": 3, // openssl req -new -key key.pem
-        "openssl x509": 3, // openssl x509 -in cert.pem
-        pip: 2, // pip install numpy
-        pipenv: 2, // pipenv install flask
-        pnpm: 2, // pnpm install
-        "pnpm dlx": 3, // pnpm dlx create-next-app
-        "pnpm exec": 3, // pnpm exec vite
-        "pnpm run": 3, // pnpm run dev
-        poetry: 2, // poetry add requests
-        podman: 2, // podman run alpine
-        "podman container": 3, // podman container ls
-        "podman image": 3, // podman image prune
-        psql: 2, // psql -d mydb
-        pulumi: 2, // pulumi up
-        "pulumi stack": 3, // pulumi stack output
-        pyenv: 2, // pyenv install 3.11
-        python: 2, // python -m venv env
-        rake: 2, // rake db:migrate
-        rbenv: 2, // rbenv install 3.2.0
-        "redis-cli": 2, // redis-cli ping
-        rustup: 2, // rustup update
-        serverless: 2, // serverless invoke
-        sfdx: 3, // sfdx force:org:list
-        skaffold: 2, // skaffold dev
-        sls: 2, // sls deploy
-        sst: 2, // sst deploy
-        swift: 2, // swift build
-        systemctl: 2, // systemctl restart nginx
-        terraform: 2, // terraform apply
-        "terraform workspace": 3, // terraform workspace select prod
-        tmux: 2, // tmux new -s dev
-        turbo: 2, // turbo run build
-        ufw: 2, // ufw allow 22
-        vault: 2, // vault login
-        "vault auth": 3, // vault auth list
-        "vault kv": 3, // vault kv get secret/api
-        vercel: 2, // vercel deploy
-        volta: 2, // volta install node
-        wp: 2, // wp plugin install
-        yarn: 2, // yarn add react
-        "yarn dlx": 3, // yarn dlx create-react-app
-        "yarn run": 3, // yarn run dev
-    };
-})(BashArity || (BashArity = {}));
+    },
+};
+/* Generated with following prompt:
+You are generating a dictionary of command-prefix arities for bash-style commands.
+This dictionary is used to identify the "human-understandable command" from an input shell command.### **RULES (follow strictly)**1. Each entry maps a **command prefix string → number**, representing how many **tokens** define the command.
+2. **Flags NEVER count as tokens**. Only subcommands count.
+3. **Longest matching prefix wins**.
+4. **Only include a longer prefix if its arity is different from what the shorter prefix already implies**.   * Example: If `git` is 2, then do **not** include `git checkout`, `git commit`, etc. unless they require *different* arity.
+5. The output must be a **single JSON object**. Each entry should have a comment with an example real world matching command. DO NOT MAKE ANY OTHER COMMENTS. Should be alphabetical
+6. Include the **most commonly used commands** across many stacks and languages. More is better.### **Semantics examples*** `touch foo.txt` → `touch` (arity 1, explicitly listed)
+* `git checkout main` → `git checkout` (because `git` has arity 2)
+* `npm install` → `npm install` (because `npm` has arity 2)
+* `npm run dev` → `npm run dev` (because `npm run` has arity 3)
+* `python script.py` → `python script.py` (default: whole input, not in dictionary)### **Now generate the dictionary.**
+*/
+const ARITY = {
+    cat: 1, // cat file.txt
+    cd: 1, // cd /path/to/dir
+    chmod: 1, // chmod 755 script.sh
+    chown: 1, // chown user:group file.txt
+    cp: 1, // cp source.txt dest.txt
+    echo: 1, // echo "hello world"
+    env: 1, // env
+    export: 1, // export PATH=/usr/bin
+    grep: 1, // grep pattern file.txt
+    kill: 1, // kill 1234
+    killall: 1, // killall process
+    ln: 1, // ln -s source target
+    ls: 1, // ls -la
+    mkdir: 1, // mkdir new-dir
+    mv: 1, // mv old.txt new.txt
+    ps: 1, // ps aux
+    pwd: 1, // pwd
+    rm: 1, // rm file.txt
+    rmdir: 1, // rmdir empty-dir
+    sleep: 1, // sleep 5
+    source: 1, // source ~/.bashrc
+    tail: 1, // tail -f log.txt
+    touch: 1, // touch file.txt
+    unset: 1, // unset VAR
+    which: 1, // which node
+    aws: 3, // aws s3 ls
+    az: 3, // az storage blob list
+    bazel: 2, // bazel build
+    brew: 2, // brew install node
+    bun: 2, // bun install
+    "bun run": 3, // bun run dev
+    "bun x": 3, // bun x vite
+    cargo: 2, // cargo build
+    "cargo add": 3, // cargo add tokio
+    "cargo run": 3, // cargo run main
+    cdk: 2, // cdk deploy
+    cf: 2, // cf push app
+    cmake: 2, // cmake build
+    composer: 2, // composer require laravel
+    consul: 2, // consul members
+    "consul kv": 3, // consul kv get config/app
+    crictl: 2, // crictl ps
+    deno: 2, // deno run server.ts
+    "deno task": 3, // deno task dev
+    doctl: 3, // doctl kubernetes cluster list
+    docker: 2, // docker run nginx
+    "docker builder": 3, // docker builder prune
+    "docker compose": 3, // docker compose up
+    "docker container": 3, // docker container ls
+    "docker image": 3, // docker image prune
+    "docker network": 3, // docker network inspect
+    "docker volume": 3, // docker volume ls
+    eksctl: 2, // eksctl get clusters
+    "eksctl create": 3, // eksctl create cluster
+    firebase: 2, // firebase deploy
+    flyctl: 2, // flyctl deploy
+    gcloud: 3, // gcloud compute instances list
+    gh: 3, // gh pr list
+    git: 2, // git checkout main
+    "git config": 3, // git config user.name
+    "git remote": 3, // git remote add origin
+    "git stash": 3, // git stash pop
+    go: 2, // go build
+    gradle: 2, // gradle build
+    helm: 2, // helm install mychart
+    heroku: 2, // heroku logs
+    hugo: 2, // hugo new site blog
+    ip: 2, // ip link show
+    "ip addr": 3, // ip addr show
+    "ip link": 3, // ip link set eth0 up
+    "ip netns": 3, // ip netns exec foo bash
+    "ip route": 3, // ip route add default via 1.1.1.1
+    kind: 2, // kind delete cluster
+    "kind create": 3, // kind create cluster
+    kubectl: 2, // kubectl get pods
+    "kubectl kustomize": 3, // kubectl kustomize overlays/dev
+    "kubectl rollout": 3, // kubectl rollout restart deploy/api
+    kustomize: 2, // kustomize build .
+    make: 2, // make build
+    mc: 2, // mc ls myminio
+    "mc admin": 3, // mc admin info myminio
+    minikube: 2, // minikube start
+    mongosh: 2, // mongosh test
+    mysql: 2, // mysql -u root
+    mvn: 2, // mvn compile
+    ng: 2, // ng generate component home
+    npm: 2, // npm install
+    "npm exec": 3, // npm exec vite
+    "npm init": 3, // npm init vue
+    "npm run": 3, // npm run dev
+    "npm view": 3, // npm view react version
+    nvm: 2, // nvm use 18
+    nx: 2, // nx build
+    openssl: 2, // openssl genrsa 2048
+    "openssl req": 3, // openssl req -new -key key.pem
+    "openssl x509": 3, // openssl x509 -in cert.pem
+    pip: 2, // pip install numpy
+    pipenv: 2, // pipenv install flask
+    pnpm: 2, // pnpm install
+    "pnpm dlx": 3, // pnpm dlx create-next-app
+    "pnpm exec": 3, // pnpm exec vite
+    "pnpm run": 3, // pnpm run dev
+    poetry: 2, // poetry add requests
+    podman: 2, // podman run alpine
+    "podman container": 3, // podman container ls
+    "podman image": 3, // podman image prune
+    psql: 2, // psql -d mydb
+    pulumi: 2, // pulumi up
+    "pulumi stack": 3, // pulumi stack output
+    pyenv: 2, // pyenv install 3.11
+    python: 2, // python -m venv env
+    rake: 2, // rake db:migrate
+    rbenv: 2, // rbenv install 3.2.0
+    "redis-cli": 2, // redis-cli ping
+    rustup: 2, // rustup update
+    serverless: 2, // serverless invoke
+    sfdx: 3, // sfdx force:org:list
+    skaffold: 2, // skaffold dev
+    sls: 2, // sls deploy
+    sst: 2, // sst deploy
+    swift: 2, // swift build
+    systemctl: 2, // systemctl restart nginx
+    terraform: 2, // terraform apply
+    "terraform workspace": 3, // terraform workspace select prod
+    tmux: 2, // tmux new -s dev
+    turbo: 2, // turbo run build
+    ufw: 2, // ufw allow 22
+    vault: 2, // vault login
+    "vault auth": 3, // vault auth list
+    "vault kv": 3, // vault kv get secret/api
+    vercel: 2, // vercel deploy
+    volta: 2, // volta install node
+    wp: 2, // wp plugin install
+    yarn: 2, // yarn add react
+    "yarn dlx": 3, // yarn dlx create-react-app
+    "yarn run": 3, // yarn run dev
+};
 //# sourceMappingURL=arity.js.map

package/dist/core/extensions/builtin/permission-system/arity.js.map

@@ -1 +1 @@
-{"version":3,"file":"arity.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/arity.ts"],"names":[],"mappings":"SAAiB,SAAS;AAA1B,IAAiB,SAkKhB;AAlKD,WAAiB,SAAS,EAAC;IAC1B,SAAgB,MAAM,CAAC,MAAgB,EAAE;QACxC,KAAK,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAAA,CAC1B;IARe,UAAA,MAAM,SAQrB,CAAA;IAED;;;;;;;;;;;;MAYC;IACD,MAAM,KAAK,GAA2B;QACrC,GAAG,EAAE,CAAC,EAAE,eAAe;QACvB,EAAE,EAAE,CAAC,EAAE,kBAAkB;QACzB,KAAK,EAAE,CAAC,EAAE,sBAAsB;QAChC,KAAK,EAAE,CAAC,EAAE,4BAA4B;QACtC,EAAE,EAAE,CAAC,EAAE,yBAAyB;QAChC,IAAI,EAAE,CAAC,EAAE,qBAAqB;QAC9B,GAAG,EAAE,CAAC,EAAE,MAAM;QACd,MAAM,EAAE,CAAC,EAAE,uBAAuB;QAClC,IAAI,EAAE,CAAC,EAAE,wBAAwB;QACjC,IAAI,EAAE,CAAC,EAAE,YAAY;QACrB,OAAO,EAAE,CAAC,EAAE,kBAAkB;QAC9B,EAAE,EAAE,CAAC,EAAE,sBAAsB;QAC7B,EAAE,EAAE,CAAC,EAAE,SAAS;QAChB,KAAK,EAAE,CAAC,EAAE,gBAAgB;QAC1B,EAAE,EAAE,CAAC,EAAE,qBAAqB;QAC5B,EAAE,EAAE,CAAC,EAAE,SAAS;QAChB,GAAG,EAAE,CAAC,EAAE,MAAM;QACd,EAAE,EAAE,CAAC,EAAE,cAAc;QACrB,KAAK,EAAE,CAAC,EAAE,kBAAkB;QAC5B,KAAK,EAAE,CAAC,EAAE,UAAU;QACpB,MAAM,EAAE,CAAC,EAAE,mBAAmB;QAC9B,IAAI,EAAE,CAAC,EAAE,kBAAkB;QAC3B,KAAK,EAAE,CAAC,EAAE,iBAAiB;QAC3B,KAAK,EAAE,CAAC,EAAE,YAAY;QACtB,KAAK,EAAE,CAAC,EAAE,aAAa;QACvB,GAAG,EAAE,CAAC,EAAE,YAAY;QACpB,EAAE,EAAE,CAAC,EAAE,uBAAuB;QAC9B,KAAK,EAAE,CAAC,EAAE,cAAc;QACxB,IAAI,EAAE,CAAC,EAAE,oBAAoB;QAC7B,GAAG,EAAE,CAAC,EAAE,cAAc;QACtB,SAAS,EAAE,CAAC,EAAE,cAAc;QAC5B,OAAO,EAAE,CAAC,EAAE,aAAa;QACzB,KAAK,EAAE,CAAC,EAAE,cAAc;QACxB,WAAW,EAAE,CAAC,EAAE,kBAAkB;QAClC,WAAW,EAAE,CAAC,EAAE,iBAAiB;QACjC,GAAG,EAAE,CAAC,EAAE,aAAa;QACrB,EAAE,EAAE,CAAC,EAAE,cAAc;QACrB,KAAK,EAAE,CAAC,EAAE,cAAc;QACxB,QAAQ,EAAE,CAAC,EAAE,2BAA2B;QACxC,MAAM,EAAE,CAAC,EAAE,iBAAiB;QAC5B,WAAW,EAAE,CAAC,EAAE,2BAA2B;QAC3C,MAAM,EAAE,CAAC,EAAE,YAAY;QACvB,IAAI,EAAE,CAAC,EAAE,qBAAqB;QAC9B,WAAW,EAAE,CAAC,EAAE,gBAAgB;QAChC,KAAK,EAAE,CAAC,EAAE,gCAAgC;QAC1C,MAAM,EAAE,CAAC,EAAE,mBAAmB;QAC9B,gBAAgB,EAAE,CAAC,EAAE,uBAAuB;QAC5C,gBAAgB,EAAE,CAAC,EAAE,oBAAoB;QACzC,kBAAkB,EAAE,CAAC,EAAE,sBAAsB;QAC7C,cAAc,EAAE,CAAC,EAAE,qBAAqB;QACxC,gBAAgB,EAAE,CAAC,EAAE,yBAAyB;QAC9C,eAAe,EAAE,CAAC,EAAE,mBAAmB;QACvC,MAAM,EAAE,CAAC,EAAE,sBAAsB;QACjC,eAAe,EAAE,CAAC,EAAE,wBAAwB;QAC5C,QAAQ,EAAE,CAAC,EAAE,kBAAkB;QAC/B,MAAM,EAAE,CAAC,EAAE,gBAAgB;QAC3B,MAAM,EAAE,CAAC,EAAE,gCAAgC;QAC3C,EAAE,EAAE,CAAC,EAAE,aAAa;QACpB,GAAG,EAAE,CAAC,EAAE,oBAAoB;QAC5B,YAAY,EAAE,CAAC,EAAE,uBAAuB;QACxC,YAAY,EAAE,CAAC,EAAE,wBAAwB;QACzC,WAAW,EAAE,CAAC,EAAE,gBAAgB;QAChC,EAAE,EAAE,CAAC,EAAE,WAAW;QAClB,MAAM,EAAE,CAAC,EAAE,eAAe;QAC1B,IAAI,EAAE,CAAC,EAAE,uBAAuB;QAChC,MAAM,EAAE,CAAC,EAAE,cAAc;QACzB,IAAI,EAAE,CAAC,EAAE,qBAAqB;QAC9B,EAAE,EAAE,CAAC,EAAE,eAAe;QACtB,SAAS,EAAE,CAAC,EAAE,eAAe;QAC7B,SAAS,EAAE,CAAC,EAAE,sBAAsB;QACpC,UAAU,EAAE,CAAC,EAAE,yBAAyB;QACxC,UAAU,EAAE,CAAC,EAAE,mCAAmC;QAClD,IAAI,EAAE,CAAC,EAAE,sBAAsB;QAC/B,aAAa,EAAE,CAAC,EAAE,sBAAsB;QACxC,OAAO,EAAE,CAAC,EAAE,mBAAmB;QAC/B,mBAAmB,EAAE,CAAC,EAAE,iCAAiC;QACzD,iBAAiB,EAAE,CAAC,EAAE,qCAAqC;QAC3D,SAAS,EAAE,CAAC,EAAE,oBAAoB;QAClC,IAAI,EAAE,CAAC,EAAE,aAAa;QACtB,EAAE,EAAE,CAAC,EAAE,gBAAgB;QACvB,UAAU,EAAE,CAAC,EAAE,wBAAwB;QACvC,QAAQ,EAAE,CAAC,EAAE,iBAAiB;QAC9B,OAAO,EAAE,CAAC,EAAE,eAAe;QAC3B,KAAK,EAAE,CAAC,EAAE,gBAAgB;QAC1B,GAAG,EAAE,CAAC,EAAE,cAAc;QACtB,EAAE,EAAE,CAAC,EAAE,6BAA6B;QACpC,GAAG,EAAE,CAAC,EAAE,cAAc;QACtB,UAAU,EAAE,CAAC,EAAE,gBAAgB;QAC/B,UAAU,EAAE,CAAC,EAAE,eAAe;QAC9B,SAAS,EAAE,CAAC,EAAE,cAAc;QAC5B,UAAU,EAAE,CAAC,EAAE,yBAAyB;QACxC,GAAG,EAAE,CAAC,EAAE,aAAa;QACrB,EAAE,EAAE,CAAC,EAAE,WAAW;QAClB,OAAO,EAAE,CAAC,EAAE,sBAAsB;QAClC,aAAa,EAAE,CAAC,EAAE,gCAAgC;QAClD,cAAc,EAAE,CAAC,EAAE,4BAA4B;QAC/C,GAAG,EAAE,CAAC,EAAE,oBAAoB;QAC5B,MAAM,EAAE,CAAC,EAAE,uBAAuB;QAClC,IAAI,EAAE,CAAC,EAAE,eAAe;QACxB,UAAU,EAAE,CAAC,EAAE,2BAA2B;QAC1C,WAAW,EAAE,CAAC,EAAE,iBAAiB;QACjC,UAAU,EAAE,CAAC,EAAE,eAAe;QAC9B,MAAM,EAAE,CAAC,EAAE,sBAAsB;QACjC,MAAM,EAAE,CAAC,EAAE,oBAAoB;QAC/B,kBAAkB,EAAE,CAAC,EAAE,sBAAsB;QAC7C,cAAc,EAAE,CAAC,EAAE,qBAAqB;QACxC,IAAI,EAAE,CAAC,EAAE,eAAe;QACxB,MAAM,EAAE,CAAC,EAAE,YAAY;QACvB,cAAc,EAAE,CAAC,EAAE,sBAAsB;QACzC,KAAK,EAAE,CAAC,EAAE,qBAAqB;QAC/B,MAAM,EAAE,CAAC,EAAE,qBAAqB;QAChC,IAAI,EAAE,CAAC,EAAE,kBAAkB;QAC3B,KAAK,EAAE,CAAC,EAAE,sBAAsB;QAChC,WAAW,EAAE,CAAC,EAAE,iBAAiB;QACjC,MAAM,EAAE,CAAC,EAAE,gBAAgB;QAC3B,UAAU,EAAE,CAAC,EAAE,oBAAoB;QACnC,IAAI,EAAE,CAAC,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,CAAC,EAAE,eAAe;QAC5B,GAAG,EAAE,CAAC,EAAE,aAAa;QACrB,GAAG,EAAE,CAAC,EAAE,aAAa;QACrB,KAAK,EAAE,CAAC,EAAE,cAAc;QACxB,SAAS,EAAE,CAAC,EAAE,0BAA0B;QACxC,SAAS,EAAE,CAAC,EAAE,kBAAkB;QAChC,qBAAqB,EAAE,CAAC,EAAE,kCAAkC;QAC5D,IAAI,EAAE,CAAC,EAAE,kBAAkB;QAC3B,KAAK,EAAE,CAAC,EAAE,kBAAkB;QAC5B,GAAG,EAAE,CAAC,EAAE,eAAe;QACvB,KAAK,EAAE,CAAC,EAAE,cAAc;QACxB,YAAY,EAAE,CAAC,EAAE,kBAAkB;QACnC,UAAU,EAAE,CAAC,EAAE,0BAA0B;QACzC,MAAM,EAAE,CAAC,EAAE,gBAAgB;QAC3B,KAAK,EAAE,CAAC,EAAE,qBAAqB;QAC/B,EAAE,EAAE,CAAC,EAAE,oBAAoB;QAC3B,IAAI,EAAE,CAAC,EAAE,iBAAiB;QAC1B,UAAU,EAAE,CAAC,EAAE,4BAA4B;QAC3C,UAAU,EAAE,CAAC,EAAE,eAAe;KAC9B,CAAC;AAAA,CACF,EAlKgB,SAAS,KAAT,SAAS,QAkKzB","sourcesContent":["export namespace BashArity {\n\texport function prefix(tokens: string[]) {\n\t\tfor (let len = tokens.length; len > 0; len--) {\n\t\t\tconst prefix = tokens.slice(0, len).join(\" \");\n\t\t\tconst arity = ARITY[prefix];\n\t\t\tif (arity !== undefined) return tokens.slice(0, arity);\n\t\t}\n\t\tif (tokens.length === 0) return [];\n\t\treturn tokens.slice(0, 1);\n\t}\n\n\t/* Generated with following prompt:\nYou are generating a dictionary of command-prefix arities for bash-style commands.\nThis dictionary is used to identify the \"human-understandable command\" from an input shell command.### **RULES (follow strictly)**1. Each entry maps a **command prefix string → number**, representing how many **tokens** define the command.\n2. **Flags NEVER count as tokens**. Only subcommands count.\n3. **Longest matching prefix wins**.\n4. **Only include a longer prefix if its arity is different from what the shorter prefix already implies**.   * Example: If `git` is 2, then do **not** include `git checkout`, `git commit`, etc. unless they require *different* arity.\n5. The output must be a **single JSON object**. Each entry should have a comment with an example real world matching command. DO NOT MAKE ANY OTHER COMMENTS. Should be alphabetical\n6. Include the **most commonly used commands** across many stacks and languages. More is better.### **Semantics examples*** `touch foo.txt` → `touch` (arity 1, explicitly listed)\n* `git checkout main` → `git checkout` (because `git` has arity 2)\n* `npm install` → `npm install` (because `npm` has arity 2)\n* `npm run dev` → `npm run dev` (because `npm run` has arity 3)\n* `python script.py` → `python script.py` (default: whole input, not in dictionary)### **Now generate the dictionary.**\n*/\n\tconst ARITY: Record<string, number> = {\n\t\tcat: 1, // cat file.txt\n\t\tcd: 1, // cd /path/to/dir\n\t\tchmod: 1, // chmod 755 script.sh\n\t\tchown: 1, // chown user:group file.txt\n\t\tcp: 1, // cp source.txt dest.txt\n\t\techo: 1, // echo \"hello world\"\n\t\tenv: 1, // env\n\t\texport: 1, // export PATH=/usr/bin\n\t\tgrep: 1, // grep pattern file.txt\n\t\tkill: 1, // kill 1234\n\t\tkillall: 1, // killall process\n\t\tln: 1, // ln -s source target\n\t\tls: 1, // ls -la\n\t\tmkdir: 1, // mkdir new-dir\n\t\tmv: 1, // mv old.txt new.txt\n\t\tps: 1, // ps aux\n\t\tpwd: 1, // pwd\n\t\trm: 1, // rm file.txt\n\t\trmdir: 1, // rmdir empty-dir\n\t\tsleep: 1, // sleep 5\n\t\tsource: 1, // source ~/.bashrc\n\t\ttail: 1, // tail -f log.txt\n\t\ttouch: 1, // touch file.txt\n\t\tunset: 1, // unset VAR\n\t\twhich: 1, // which node\n\t\taws: 3, // aws s3 ls\n\t\taz: 3, // az storage blob list\n\t\tbazel: 2, // bazel build\n\t\tbrew: 2, // brew install node\n\t\tbun: 2, // bun install\n\t\t\"bun run\": 3, // bun run dev\n\t\t\"bun x\": 3, // bun x vite\n\t\tcargo: 2, // cargo build\n\t\t\"cargo add\": 3, // cargo add tokio\n\t\t\"cargo run\": 3, // cargo run main\n\t\tcdk: 2, // cdk deploy\n\t\tcf: 2, // cf push app\n\t\tcmake: 2, // cmake build\n\t\tcomposer: 2, // composer require laravel\n\t\tconsul: 2, // consul members\n\t\t\"consul kv\": 3, // consul kv get config/app\n\t\tcrictl: 2, // crictl ps\n\t\tdeno: 2, // deno run server.ts\n\t\t\"deno task\": 3, // deno task dev\n\t\tdoctl: 3, // doctl kubernetes cluster list\n\t\tdocker: 2, // docker run nginx\n\t\t\"docker builder\": 3, // docker builder prune\n\t\t\"docker compose\": 3, // docker compose up\n\t\t\"docker container\": 3, // docker container ls\n\t\t\"docker image\": 3, // docker image prune\n\t\t\"docker network\": 3, // docker network inspect\n\t\t\"docker volume\": 3, // docker volume ls\n\t\teksctl: 2, // eksctl get clusters\n\t\t\"eksctl create\": 3, // eksctl create cluster\n\t\tfirebase: 2, // firebase deploy\n\t\tflyctl: 2, // flyctl deploy\n\t\tgcloud: 3, // gcloud compute instances list\n\t\tgh: 3, // gh pr list\n\t\tgit: 2, // git checkout main\n\t\t\"git config\": 3, // git config user.name\n\t\t\"git remote\": 3, // git remote add origin\n\t\t\"git stash\": 3, // git stash pop\n\t\tgo: 2, // go build\n\t\tgradle: 2, // gradle build\n\t\thelm: 2, // helm install mychart\n\t\theroku: 2, // heroku logs\n\t\thugo: 2, // hugo new site blog\n\t\tip: 2, // ip link show\n\t\t\"ip addr\": 3, // ip addr show\n\t\t\"ip link\": 3, // ip link set eth0 up\n\t\t\"ip netns\": 3, // ip netns exec foo bash\n\t\t\"ip route\": 3, // ip route add default via 1.1.1.1\n\t\tkind: 2, // kind delete cluster\n\t\t\"kind create\": 3, // kind create cluster\n\t\tkubectl: 2, // kubectl get pods\n\t\t\"kubectl kustomize\": 3, // kubectl kustomize overlays/dev\n\t\t\"kubectl rollout\": 3, // kubectl rollout restart deploy/api\n\t\tkustomize: 2, // kustomize build .\n\t\tmake: 2, // make build\n\t\tmc: 2, // mc ls myminio\n\t\t\"mc admin\": 3, // mc admin info myminio\n\t\tminikube: 2, // minikube start\n\t\tmongosh: 2, // mongosh test\n\t\tmysql: 2, // mysql -u root\n\t\tmvn: 2, // mvn compile\n\t\tng: 2, // ng generate component home\n\t\tnpm: 2, // npm install\n\t\t\"npm exec\": 3, // npm exec vite\n\t\t\"npm init\": 3, // npm init vue\n\t\t\"npm run\": 3, // npm run dev\n\t\t\"npm view\": 3, // npm view react version\n\t\tnvm: 2, // nvm use 18\n\t\tnx: 2, // nx build\n\t\topenssl: 2, // openssl genrsa 2048\n\t\t\"openssl req\": 3, // openssl req -new -key key.pem\n\t\t\"openssl x509\": 3, // openssl x509 -in cert.pem\n\t\tpip: 2, // pip install numpy\n\t\tpipenv: 2, // pipenv install flask\n\t\tpnpm: 2, // pnpm install\n\t\t\"pnpm dlx\": 3, // pnpm dlx create-next-app\n\t\t\"pnpm exec\": 3, // pnpm exec vite\n\t\t\"pnpm run\": 3, // pnpm run dev\n\t\tpoetry: 2, // poetry add requests\n\t\tpodman: 2, // podman run alpine\n\t\t\"podman container\": 3, // podman container ls\n\t\t\"podman image\": 3, // podman image prune\n\t\tpsql: 2, // psql -d mydb\n\t\tpulumi: 2, // pulumi up\n\t\t\"pulumi stack\": 3, // pulumi stack output\n\t\tpyenv: 2, // pyenv install 3.11\n\t\tpython: 2, // python -m venv env\n\t\trake: 2, // rake db:migrate\n\t\trbenv: 2, // rbenv install 3.2.0\n\t\t\"redis-cli\": 2, // redis-cli ping\n\t\trustup: 2, // rustup update\n\t\tserverless: 2, // serverless invoke\n\t\tsfdx: 3, // sfdx force:org:list\n\t\tskaffold: 2, // skaffold dev\n\t\tsls: 2, // sls deploy\n\t\tsst: 2, // sst deploy\n\t\tswift: 2, // swift build\n\t\tsystemctl: 2, // systemctl restart nginx\n\t\tterraform: 2, // terraform apply\n\t\t\"terraform workspace\": 3, // terraform workspace select prod\n\t\ttmux: 2, // tmux new -s dev\n\t\tturbo: 2, // turbo run build\n\t\tufw: 2, // ufw allow 22\n\t\tvault: 2, // vault login\n\t\t\"vault auth\": 3, // vault auth list\n\t\t\"vault kv\": 3, // vault kv get secret/api\n\t\tvercel: 2, // vercel deploy\n\t\tvolta: 2, // volta install node\n\t\twp: 2, // wp plugin install\n\t\tyarn: 2, // yarn add react\n\t\t\"yarn dlx\": 3, // yarn dlx create-react-app\n\t\t\"yarn run\": 3, // yarn run dev\n\t};\n}\n"]}
+{"version":3,"file":"arity.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/arity.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,SAAS,GAAG;IACxB,MAAM,CAAC,MAAgB,EAAY;QAClC,KAAK,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAAA,CAC1B;CACD,CAAC;AAEF;;;;;;;;;;;;EAYE;AACF,MAAM,KAAK,GAA2B;IACrC,GAAG,EAAE,CAAC,EAAE,eAAe;IACvB,EAAE,EAAE,CAAC,EAAE,kBAAkB;IACzB,KAAK,EAAE,CAAC,EAAE,sBAAsB;IAChC,KAAK,EAAE,CAAC,EAAE,4BAA4B;IACtC,EAAE,EAAE,CAAC,EAAE,yBAAyB;IAChC,IAAI,EAAE,CAAC,EAAE,qBAAqB;IAC9B,GAAG,EAAE,CAAC,EAAE,MAAM;IACd,MAAM,EAAE,CAAC,EAAE,uBAAuB;IAClC,IAAI,EAAE,CAAC,EAAE,wBAAwB;IACjC,IAAI,EAAE,CAAC,EAAE,YAAY;IACrB,OAAO,EAAE,CAAC,EAAE,kBAAkB;IAC9B,EAAE,EAAE,CAAC,EAAE,sBAAsB;IAC7B,EAAE,EAAE,CAAC,EAAE,SAAS;IAChB,KAAK,EAAE,CAAC,EAAE,gBAAgB;IAC1B,EAAE,EAAE,CAAC,EAAE,qBAAqB;IAC5B,EAAE,EAAE,CAAC,EAAE,SAAS;IAChB,GAAG,EAAE,CAAC,EAAE,MAAM;IACd,EAAE,EAAE,CAAC,EAAE,cAAc;IACrB,KAAK,EAAE,CAAC,EAAE,kBAAkB;IAC5B,KAAK,EAAE,CAAC,EAAE,UAAU;IACpB,MAAM,EAAE,CAAC,EAAE,mBAAmB;IAC9B,IAAI,EAAE,CAAC,EAAE,kBAAkB;IAC3B,KAAK,EAAE,CAAC,EAAE,iBAAiB;IAC3B,KAAK,EAAE,CAAC,EAAE,YAAY;IACtB,KAAK,EAAE,CAAC,EAAE,aAAa;IACvB,GAAG,EAAE,CAAC,EAAE,YAAY;IACpB,EAAE,EAAE,CAAC,EAAE,uBAAuB;IAC9B,KAAK,EAAE,CAAC,EAAE,cAAc;IACxB,IAAI,EAAE,CAAC,EAAE,oBAAoB;IAC7B,GAAG,EAAE,CAAC,EAAE,cAAc;IACtB,SAAS,EAAE,CAAC,EAAE,cAAc;IAC5B,OAAO,EAAE,CAAC,EAAE,aAAa;IACzB,KAAK,EAAE,CAAC,EAAE,cAAc;IACxB,WAAW,EAAE,CAAC,EAAE,kBAAkB;IAClC,WAAW,EAAE,CAAC,EAAE,iBAAiB;IACjC,GAAG,EAAE,CAAC,EAAE,aAAa;IACrB,EAAE,EAAE,CAAC,EAAE,cAAc;IACrB,KAAK,EAAE,CAAC,EAAE,cAAc;IACxB,QAAQ,EAAE,CAAC,EAAE,2BAA2B;IACxC,MAAM,EAAE,CAAC,EAAE,iBAAiB;IAC5B,WAAW,EAAE,CAAC,EAAE,2BAA2B;IAC3C,MAAM,EAAE,CAAC,EAAE,YAAY;IACvB,IAAI,EAAE,CAAC,EAAE,qBAAqB;IAC9B,WAAW,EAAE,CAAC,EAAE,gBAAgB;IAChC,KAAK,EAAE,CAAC,EAAE,gCAAgC;IAC1C,MAAM,EAAE,CAAC,EAAE,mBAAmB;IAC9B,gBAAgB,EAAE,CAAC,EAAE,uBAAuB;IAC5C,gBAAgB,EAAE,CAAC,EAAE,oBAAoB;IACzC,kBAAkB,EAAE,CAAC,EAAE,sBAAsB;IAC7C,cAAc,EAAE,CAAC,EAAE,qBAAqB;IACxC,gBAAgB,EAAE,CAAC,EAAE,yBAAyB;IAC9C,eAAe,EAAE,CAAC,EAAE,mBAAmB;IACvC,MAAM,EAAE,CAAC,EAAE,sBAAsB;IACjC,eAAe,EAAE,CAAC,EAAE,wBAAwB;IAC5C,QAAQ,EAAE,CAAC,EAAE,kBAAkB;IAC/B,MAAM,EAAE,CAAC,EAAE,gBAAgB;IAC3B,MAAM,EAAE,CAAC,EAAE,gCAAgC;IAC3C,EAAE,EAAE,CAAC,EAAE,aAAa;IACpB,GAAG,EAAE,CAAC,EAAE,oBAAoB;IAC5B,YAAY,EAAE,CAAC,EAAE,uBAAuB;IACxC,YAAY,EAAE,CAAC,EAAE,wBAAwB;IACzC,WAAW,EAAE,CAAC,EAAE,gBAAgB;IAChC,EAAE,EAAE,CAAC,EAAE,WAAW;IAClB,MAAM,EAAE,CAAC,EAAE,eAAe;IAC1B,IAAI,EAAE,CAAC,EAAE,uBAAuB;IAChC,MAAM,EAAE,CAAC,EAAE,cAAc;IACzB,IAAI,EAAE,CAAC,EAAE,qBAAqB;IAC9B,EAAE,EAAE,CAAC,EAAE,eAAe;IACtB,SAAS,EAAE,CAAC,EAAE,eAAe;IAC7B,SAAS,EAAE,CAAC,EAAE,sBAAsB;IACpC,UAAU,EAAE,CAAC,EAAE,yBAAyB;IACxC,UAAU,EAAE,CAAC,EAAE,mCAAmC;IAClD,IAAI,EAAE,CAAC,EAAE,sBAAsB;IAC/B,aAAa,EAAE,CAAC,EAAE,sBAAsB;IACxC,OAAO,EAAE,CAAC,EAAE,mBAAmB;IAC/B,mBAAmB,EAAE,CAAC,EAAE,iCAAiC;IACzD,iBAAiB,EAAE,CAAC,EAAE,qCAAqC;IAC3D,SAAS,EAAE,CAAC,EAAE,oBAAoB;IAClC,IAAI,EAAE,CAAC,EAAE,aAAa;IACtB,EAAE,EAAE,CAAC,EAAE,gBAAgB;IACvB,UAAU,EAAE,CAAC,EAAE,wBAAwB;IACvC,QAAQ,EAAE,CAAC,EAAE,iBAAiB;IAC9B,OAAO,EAAE,CAAC,EAAE,eAAe;IAC3B,KAAK,EAAE,CAAC,EAAE,gBAAgB;IAC1B,GAAG,EAAE,CAAC,EAAE,cAAc;IACtB,EAAE,EAAE,CAAC,EAAE,6BAA6B;IACpC,GAAG,EAAE,CAAC,EAAE,cAAc;IACtB,UAAU,EAAE,CAAC,EAAE,gBAAgB;IAC/B,UAAU,EAAE,CAAC,EAAE,eAAe;IAC9B,SAAS,EAAE,CAAC,EAAE,cAAc;IAC5B,UAAU,EAAE,CAAC,EAAE,yBAAyB;IACxC,GAAG,EAAE,CAAC,EAAE,aAAa;IACrB,EAAE,EAAE,CAAC,EAAE,WAAW;IAClB,OAAO,EAAE,CAAC,EAAE,sBAAsB;IAClC,aAAa,EAAE,CAAC,EAAE,gCAAgC;IAClD,cAAc,EAAE,CAAC,EAAE,4BAA4B;IAC/C,GAAG,EAAE,CAAC,EAAE,oBAAoB;IAC5B,MAAM,EAAE,CAAC,EAAE,uBAAuB;IAClC,IAAI,EAAE,CAAC,EAAE,eAAe;IACxB,UAAU,EAAE,CAAC,EAAE,2BAA2B;IAC1C,WAAW,EAAE,CAAC,EAAE,iBAAiB;IACjC,UAAU,EAAE,CAAC,EAAE,eAAe;IAC9B,MAAM,EAAE,CAAC,EAAE,sBAAsB;IACjC,MAAM,EAAE,CAAC,EAAE,oBAAoB;IAC/B,kBAAkB,EAAE,CAAC,EAAE,sBAAsB;IAC7C,cAAc,EAAE,CAAC,EAAE,qBAAqB;IACxC,IAAI,EAAE,CAAC,EAAE,eAAe;IACxB,MAAM,EAAE,CAAC,EAAE,YAAY;IACvB,cAAc,EAAE,CAAC,EAAE,sBAAsB;IACzC,KAAK,EAAE,CAAC,EAAE,qBAAqB;IAC/B,MAAM,EAAE,CAAC,EAAE,qBAAqB;IAChC,IAAI,EAAE,CAAC,EAAE,kBAAkB;IAC3B,KAAK,EAAE,CAAC,EAAE,sBAAsB;IAChC,WAAW,EAAE,CAAC,EAAE,iBAAiB;IACjC,MAAM,EAAE,CAAC,EAAE,gBAAgB;IAC3B,UAAU,EAAE,CAAC,EAAE,oBAAoB;IACnC,IAAI,EAAE,CAAC,EAAE,sBAAsB;IAC/B,QAAQ,EAAE,CAAC,EAAE,eAAe;IAC5B,GAAG,EAAE,CAAC,EAAE,aAAa;IACrB,GAAG,EAAE,CAAC,EAAE,aAAa;IACrB,KAAK,EAAE,CAAC,EAAE,cAAc;IACxB,SAAS,EAAE,CAAC,EAAE,0BAA0B;IACxC,SAAS,EAAE,CAAC,EAAE,kBAAkB;IAChC,qBAAqB,EAAE,CAAC,EAAE,kCAAkC;IAC5D,IAAI,EAAE,CAAC,EAAE,kBAAkB;IAC3B,KAAK,EAAE,CAAC,EAAE,kBAAkB;IAC5B,GAAG,EAAE,CAAC,EAAE,eAAe;IACvB,KAAK,EAAE,CAAC,EAAE,cAAc;IACxB,YAAY,EAAE,CAAC,EAAE,kBAAkB;IACnC,UAAU,EAAE,CAAC,EAAE,0BAA0B;IACzC,MAAM,EAAE,CAAC,EAAE,gBAAgB;IAC3B,KAAK,EAAE,CAAC,EAAE,qBAAqB;IAC/B,EAAE,EAAE,CAAC,EAAE,oBAAoB;IAC3B,IAAI,EAAE,CAAC,EAAE,iBAAiB;IAC1B,UAAU,EAAE,CAAC,EAAE,4BAA4B;IAC3C,UAAU,EAAE,CAAC,EAAE,eAAe;CAC9B,CAAC","sourcesContent":["export const BashArity = {\n\tprefix(tokens: string[]): string[] {\n\t\tfor (let len = tokens.length; len > 0; len--) {\n\t\t\tconst prefix = tokens.slice(0, len).join(\" \");\n\t\t\tconst arity = ARITY[prefix];\n\t\t\tif (arity !== undefined) return tokens.slice(0, arity);\n\t\t}\n\t\tif (tokens.length === 0) return [];\n\t\treturn tokens.slice(0, 1);\n\t},\n};\n\n/* Generated with following prompt:\nYou are generating a dictionary of command-prefix arities for bash-style commands.\nThis dictionary is used to identify the \"human-understandable command\" from an input shell command.### **RULES (follow strictly)**1. Each entry maps a **command prefix string → number**, representing how many **tokens** define the command.\n2. **Flags NEVER count as tokens**. Only subcommands count.\n3. **Longest matching prefix wins**.\n4. **Only include a longer prefix if its arity is different from what the shorter prefix already implies**.   * Example: If `git` is 2, then do **not** include `git checkout`, `git commit`, etc. unless they require *different* arity.\n5. The output must be a **single JSON object**. Each entry should have a comment with an example real world matching command. DO NOT MAKE ANY OTHER COMMENTS. Should be alphabetical\n6. Include the **most commonly used commands** across many stacks and languages. More is better.### **Semantics examples*** `touch foo.txt` → `touch` (arity 1, explicitly listed)\n* `git checkout main` → `git checkout` (because `git` has arity 2)\n* `npm install` → `npm install` (because `npm` has arity 2)\n* `npm run dev` → `npm run dev` (because `npm run` has arity 3)\n* `python script.py` → `python script.py` (default: whole input, not in dictionary)### **Now generate the dictionary.**\n*/\nconst ARITY: Record<string, number> = {\n\tcat: 1, // cat file.txt\n\tcd: 1, // cd /path/to/dir\n\tchmod: 1, // chmod 755 script.sh\n\tchown: 1, // chown user:group file.txt\n\tcp: 1, // cp source.txt dest.txt\n\techo: 1, // echo \"hello world\"\n\tenv: 1, // env\n\texport: 1, // export PATH=/usr/bin\n\tgrep: 1, // grep pattern file.txt\n\tkill: 1, // kill 1234\n\tkillall: 1, // killall process\n\tln: 1, // ln -s source target\n\tls: 1, // ls -la\n\tmkdir: 1, // mkdir new-dir\n\tmv: 1, // mv old.txt new.txt\n\tps: 1, // ps aux\n\tpwd: 1, // pwd\n\trm: 1, // rm file.txt\n\trmdir: 1, // rmdir empty-dir\n\tsleep: 1, // sleep 5\n\tsource: 1, // source ~/.bashrc\n\ttail: 1, // tail -f log.txt\n\ttouch: 1, // touch file.txt\n\tunset: 1, // unset VAR\n\twhich: 1, // which node\n\taws: 3, // aws s3 ls\n\taz: 3, // az storage blob list\n\tbazel: 2, // bazel build\n\tbrew: 2, // brew install node\n\tbun: 2, // bun install\n\t\"bun run\": 3, // bun run dev\n\t\"bun x\": 3, // bun x vite\n\tcargo: 2, // cargo build\n\t\"cargo add\": 3, // cargo add tokio\n\t\"cargo run\": 3, // cargo run main\n\tcdk: 2, // cdk deploy\n\tcf: 2, // cf push app\n\tcmake: 2, // cmake build\n\tcomposer: 2, // composer require laravel\n\tconsul: 2, // consul members\n\t\"consul kv\": 3, // consul kv get config/app\n\tcrictl: 2, // crictl ps\n\tdeno: 2, // deno run server.ts\n\t\"deno task\": 3, // deno task dev\n\tdoctl: 3, // doctl kubernetes cluster list\n\tdocker: 2, // docker run nginx\n\t\"docker builder\": 3, // docker builder prune\n\t\"docker compose\": 3, // docker compose up\n\t\"docker container\": 3, // docker container ls\n\t\"docker image\": 3, // docker image prune\n\t\"docker network\": 3, // docker network inspect\n\t\"docker volume\": 3, // docker volume ls\n\teksctl: 2, // eksctl get clusters\n\t\"eksctl create\": 3, // eksctl create cluster\n\tfirebase: 2, // firebase deploy\n\tflyctl: 2, // flyctl deploy\n\tgcloud: 3, // gcloud compute instances list\n\tgh: 3, // gh pr list\n\tgit: 2, // git checkout main\n\t\"git config\": 3, // git config user.name\n\t\"git remote\": 3, // git remote add origin\n\t\"git stash\": 3, // git stash pop\n\tgo: 2, // go build\n\tgradle: 2, // gradle build\n\thelm: 2, // helm install mychart\n\theroku: 2, // heroku logs\n\thugo: 2, // hugo new site blog\n\tip: 2, // ip link show\n\t\"ip addr\": 3, // ip addr show\n\t\"ip link\": 3, // ip link set eth0 up\n\t\"ip netns\": 3, // ip netns exec foo bash\n\t\"ip route\": 3, // ip route add default via 1.1.1.1\n\tkind: 2, // kind delete cluster\n\t\"kind create\": 3, // kind create cluster\n\tkubectl: 2, // kubectl get pods\n\t\"kubectl kustomize\": 3, // kubectl kustomize overlays/dev\n\t\"kubectl rollout\": 3, // kubectl rollout restart deploy/api\n\tkustomize: 2, // kustomize build .\n\tmake: 2, // make build\n\tmc: 2, // mc ls myminio\n\t\"mc admin\": 3, // mc admin info myminio\n\tminikube: 2, // minikube start\n\tmongosh: 2, // mongosh test\n\tmysql: 2, // mysql -u root\n\tmvn: 2, // mvn compile\n\tng: 2, // ng generate component home\n\tnpm: 2, // npm install\n\t\"npm exec\": 3, // npm exec vite\n\t\"npm init\": 3, // npm init vue\n\t\"npm run\": 3, // npm run dev\n\t\"npm view\": 3, // npm view react version\n\tnvm: 2, // nvm use 18\n\tnx: 2, // nx build\n\topenssl: 2, // openssl genrsa 2048\n\t\"openssl req\": 3, // openssl req -new -key key.pem\n\t\"openssl x509\": 3, // openssl x509 -in cert.pem\n\tpip: 2, // pip install numpy\n\tpipenv: 2, // pipenv install flask\n\tpnpm: 2, // pnpm install\n\t\"pnpm dlx\": 3, // pnpm dlx create-next-app\n\t\"pnpm exec\": 3, // pnpm exec vite\n\t\"pnpm run\": 3, // pnpm run dev\n\tpoetry: 2, // poetry add requests\n\tpodman: 2, // podman run alpine\n\t\"podman container\": 3, // podman container ls\n\t\"podman image\": 3, // podman image prune\n\tpsql: 2, // psql -d mydb\n\tpulumi: 2, // pulumi up\n\t\"pulumi stack\": 3, // pulumi stack output\n\tpyenv: 2, // pyenv install 3.11\n\tpython: 2, // python -m venv env\n\trake: 2, // rake db:migrate\n\trbenv: 2, // rbenv install 3.2.0\n\t\"redis-cli\": 2, // redis-cli ping\n\trustup: 2, // rustup update\n\tserverless: 2, // serverless invoke\n\tsfdx: 3, // sfdx force:org:list\n\tskaffold: 2, // skaffold dev\n\tsls: 2, // sls deploy\n\tsst: 2, // sst deploy\n\tswift: 2, // swift build\n\tsystemctl: 2, // systemctl restart nginx\n\tterraform: 2, // terraform apply\n\t\"terraform workspace\": 3, // terraform workspace select prod\n\ttmux: 2, // tmux new -s dev\n\tturbo: 2, // turbo run build\n\tufw: 2, // ufw allow 22\n\tvault: 2, // vault login\n\t\"vault auth\": 3, // vault auth list\n\t\"vault kv\": 3, // vault kv get secret/api\n\tvercel: 2, // vercel deploy\n\tvolta: 2, // volta install node\n\twp: 2, // wp plugin install\n\tyarn: 2, // yarn add react\n\t\"yarn dlx\": 3, // yarn dlx create-react-app\n\t\"yarn run\": 3, // yarn run dev\n};\n"]}

package/dist/core/extensions/builtin/permission-system/cli.d.ts

@@ -1,5 +1,5 @@
-import type { ExtensionAPI } from "../../types.js";
-import type { Ruleset } from "./types.js";
+import type { ExtensionAPI } from "../../types.ts";
+import type { Ruleset } from "./types.ts";
 export declare function parsePermissionFlag(value: string): Ruleset;
 export declare function registerPermissionFlag(pi: ExtensionAPI): Ruleset;
 export declare function loadPermissionFlag(pi: ExtensionAPI): Ruleset;

package/dist/core/extensions/builtin/permission-system/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/cli.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAgB,OAAO,EAAE,MAAM,YAAY,CAAC;AAExD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAoB1D;AAED,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAOhE;AAED,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAI5D","sourcesContent":["import type { ExtensionAPI } from \"../../types.js\";\nimport type { Action, Rule, Ruleset } from \"./types.js\";\n\nexport function parsePermissionFlag(value: string): Ruleset {\n\tconst rules: Rule[] = [];\n\tconst entries = value.split(\",\");\n\n\tfor (const entry of entries) {\n\t\tconst trimmed = entry.trim();\n\t\tif (!trimmed) continue;\n\n\t\tconst match = trimmed.match(/^([^:=]+)(?::([^=]+))?=(.+)$/);\n\t\tif (!match) continue;\n\n\t\tconst [, permission, pattern, action] = match;\n\t\trules.push({\n\t\t\tpermission: permission.trim(),\n\t\t\tpattern: pattern ? pattern.trim() : \"*\",\n\t\t\taction: action.trim() as Action,\n\t\t});\n\t}\n\n\treturn rules;\n}\n\nexport function registerPermissionFlag(pi: ExtensionAPI): Ruleset {\n\tpi.registerFlag(\"permission\", {\n\t\tdescription: \"Set permission rules (format: tool=action or tool:pattern=action)\",\n\t\ttype: \"string\",\n\t});\n\n\treturn [];\n}\n\nexport function loadPermissionFlag(pi: ExtensionAPI): Ruleset {\n\tconst flagValue = pi.getFlag(\"permission\") as string | undefined;\n\tif (!flagValue) return [];\n\treturn parsePermissionFlag(flagValue);\n}\n"]}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/cli.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAgB,OAAO,EAAE,MAAM,YAAY,CAAC;AAExD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAoB1D;AAED,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAOhE;AAED,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAI5D","sourcesContent":["import type { ExtensionAPI } from \"../../types.ts\";\nimport type { Action, Rule, Ruleset } from \"./types.ts\";\n\nexport function parsePermissionFlag(value: string): Ruleset {\n\tconst rules: Rule[] = [];\n\tconst entries = value.split(\",\");\n\n\tfor (const entry of entries) {\n\t\tconst trimmed = entry.trim();\n\t\tif (!trimmed) continue;\n\n\t\tconst match = trimmed.match(/^([^:=]+)(?::([^=]+))?=(.+)$/);\n\t\tif (!match) continue;\n\n\t\tconst [, permission, pattern, action] = match;\n\t\trules.push({\n\t\t\tpermission: permission.trim(),\n\t\t\tpattern: pattern ? pattern.trim() : \"*\",\n\t\t\taction: action.trim() as Action,\n\t\t});\n\t}\n\n\treturn rules;\n}\n\nexport function registerPermissionFlag(pi: ExtensionAPI): Ruleset {\n\tpi.registerFlag(\"permission\", {\n\t\tdescription: \"Set permission rules (format: tool=action or tool:pattern=action)\",\n\t\ttype: \"string\",\n\t});\n\n\treturn [];\n}\n\nexport function loadPermissionFlag(pi: ExtensionAPI): Ruleset {\n\tconst flagValue = pi.getFlag(\"permission\") as string | undefined;\n\tif (!flagValue) return [];\n\treturn parsePermissionFlag(flagValue);\n}\n"]}

package/dist/core/extensions/builtin/permission-system/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/cli.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAW;IAC3D,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC;YACV,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE;YAC7B,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG;YACvC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAY;SAC/B,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AAAA,CACb;AAED,MAAM,UAAU,sBAAsB,CAAC,EAAgB,EAAW;IACjE,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE;QAC7B,WAAW,EAAE,mEAAmE;QAChF,IAAI,EAAE,QAAQ;KACd,CAAC,CAAC;IAEH,OAAO,EAAE,CAAC;AAAA,CACV;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAgB,EAAW;IAC7D,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAuB,CAAC;IACjE,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAC1B,OAAO,mBAAmB,CAAC,SAAS,CAAC,CAAC;AAAA,CACtC","sourcesContent":["import type { ExtensionAPI } from \"../../types.js\";\nimport type { Action, Rule, Ruleset } from \"./types.js\";\n\nexport function parsePermissionFlag(value: string): Ruleset {\n\tconst rules: Rule[] = [];\n\tconst entries = value.split(\",\");\n\n\tfor (const entry of entries) {\n\t\tconst trimmed = entry.trim();\n\t\tif (!trimmed) continue;\n\n\t\tconst match = trimmed.match(/^([^:=]+)(?::([^=]+))?=(.+)$/);\n\t\tif (!match) continue;\n\n\t\tconst [, permission, pattern, action] = match;\n\t\trules.push({\n\t\t\tpermission: permission.trim(),\n\t\t\tpattern: pattern ? pattern.trim() : \"*\",\n\t\t\taction: action.trim() as Action,\n\t\t});\n\t}\n\n\treturn rules;\n}\n\nexport function registerPermissionFlag(pi: ExtensionAPI): Ruleset {\n\tpi.registerFlag(\"permission\", {\n\t\tdescription: \"Set permission rules (format: tool=action or tool:pattern=action)\",\n\t\ttype: \"string\",\n\t});\n\n\treturn [];\n}\n\nexport function loadPermissionFlag(pi: ExtensionAPI): Ruleset {\n\tconst flagValue = pi.getFlag(\"permission\") as string | undefined;\n\tif (!flagValue) return [];\n\treturn parsePermissionFlag(flagValue);\n}\n"]}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/cli.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAW;IAC3D,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC;YACV,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE;YAC7B,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG;YACvC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAY;SAC/B,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AAAA,CACb;AAED,MAAM,UAAU,sBAAsB,CAAC,EAAgB,EAAW;IACjE,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE;QAC7B,WAAW,EAAE,mEAAmE;QAChF,IAAI,EAAE,QAAQ;KACd,CAAC,CAAC;IAEH,OAAO,EAAE,CAAC;AAAA,CACV;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAgB,EAAW;IAC7D,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAuB,CAAC;IACjE,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAC1B,OAAO,mBAAmB,CAAC,SAAS,CAAC,CAAC;AAAA,CACtC","sourcesContent":["import type { ExtensionAPI } from \"../../types.ts\";\nimport type { Action, Rule, Ruleset } from \"./types.ts\";\n\nexport function parsePermissionFlag(value: string): Ruleset {\n\tconst rules: Rule[] = [];\n\tconst entries = value.split(\",\");\n\n\tfor (const entry of entries) {\n\t\tconst trimmed = entry.trim();\n\t\tif (!trimmed) continue;\n\n\t\tconst match = trimmed.match(/^([^:=]+)(?::([^=]+))?=(.+)$/);\n\t\tif (!match) continue;\n\n\t\tconst [, permission, pattern, action] = match;\n\t\trules.push({\n\t\t\tpermission: permission.trim(),\n\t\t\tpattern: pattern ? pattern.trim() : \"*\",\n\t\t\taction: action.trim() as Action,\n\t\t});\n\t}\n\n\treturn rules;\n}\n\nexport function registerPermissionFlag(pi: ExtensionAPI): Ruleset {\n\tpi.registerFlag(\"permission\", {\n\t\tdescription: \"Set permission rules (format: tool=action or tool:pattern=action)\",\n\t\ttype: \"string\",\n\t});\n\n\treturn [];\n}\n\nexport function loadPermissionFlag(pi: ExtensionAPI): Ruleset {\n\tconst flagValue = pi.getFlag(\"permission\") as string | undefined;\n\tif (!flagValue) return [];\n\treturn parsePermissionFlag(flagValue);\n}\n"]}

package/dist/core/extensions/builtin/permission-system/config.d.ts

@@ -1,4 +1,4 @@
-import type { PermissionConfig, Ruleset } from "./types.js";
+import type { PermissionConfig, Ruleset } from "./types.ts";
 export declare const EDIT_TOOLS: string[];
 export declare function expand(path: string): string;
 export declare function fromConfig(config: PermissionConfig): Ruleset;

package/dist/core/extensions/builtin/permission-system/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAQ,OAAO,EAAE,MAAM,YAAY,CAAC;AAGlE,eAAO,MAAM,UAAU,UAAgD,CAAC;AAExE,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAc3C;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAc5D;AAED,wBAAgB,KAAK,CAAC,GAAG,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAErD;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAgBvE","sourcesContent":["import os from \"node:os\";\nimport type { PermissionConfig, Rule, Ruleset } from \"./types.js\";\nimport { Wildcard } from \"./wildcard.js\";\n\nexport const EDIT_TOOLS = [\"edit\", \"write\", \"apply_patch\", \"multiedit\"];\n\nexport function expand(path: string): string {\n\tif (path.startsWith(\"~/\")) {\n\t\treturn os.homedir() + path.slice(1);\n\t}\n\tif (path === \"~\") {\n\t\treturn os.homedir();\n\t}\n\tif (path.startsWith(\"$HOME/\")) {\n\t\treturn os.homedir() + path.slice(5);\n\t}\n\tif (path.startsWith(\"$HOME\")) {\n\t\treturn os.homedir() + path.slice(5);\n\t}\n\treturn path;\n}\n\nexport function fromConfig(config: PermissionConfig): Ruleset {\n\tconst rules: Rule[] = [];\n\n\tfor (const [permission, value] of Object.entries(config)) {\n\t\tif (typeof value === \"string\") {\n\t\t\trules.push({ permission, pattern: \"*\", action: value });\n\t\t} else {\n\t\t\tfor (const [pattern, action] of Object.entries(value)) {\n\t\t\t\trules.push({ permission, pattern: expand(pattern), action });\n\t\t\t}\n\t\t}\n\t}\n\n\treturn rules;\n}\n\nexport function merge(...rulesets: Ruleset[]): Ruleset {\n\treturn rulesets.flat();\n}\n\nexport function disabled(tools: string[], ruleset: Ruleset): Set<string> {\n\tconst result = new Set<string>();\n\n\tfor (const tool of tools) {\n\t\tconst permission = EDIT_TOOLS.includes(tool) ? \"edit\" : tool;\n\n\t\tconst rule = ruleset.findLast((rule) => {\n\t\t\treturn Wildcard.match(permission, rule.permission);\n\t\t});\n\n\t\tif (rule && rule.pattern === \"*\" && rule.action === \"deny\") {\n\t\t\tresult.add(tool);\n\t\t}\n\t}\n\n\treturn result;\n}\n"]}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAQ,OAAO,EAAE,MAAM,YAAY,CAAC;AAGlE,eAAO,MAAM,UAAU,UAAgD,CAAC;AAExE,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAc3C;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAc5D;AAED,wBAAgB,KAAK,CAAC,GAAG,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAErD;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAgBvE","sourcesContent":["import os from \"node:os\";\nimport type { PermissionConfig, Rule, Ruleset } from \"./types.ts\";\nimport { Wildcard } from \"./wildcard.ts\";\n\nexport const EDIT_TOOLS = [\"edit\", \"write\", \"apply_patch\", \"multiedit\"];\n\nexport function expand(path: string): string {\n\tif (path.startsWith(\"~/\")) {\n\t\treturn os.homedir() + path.slice(1);\n\t}\n\tif (path === \"~\") {\n\t\treturn os.homedir();\n\t}\n\tif (path.startsWith(\"$HOME/\")) {\n\t\treturn os.homedir() + path.slice(5);\n\t}\n\tif (path.startsWith(\"$HOME\")) {\n\t\treturn os.homedir() + path.slice(5);\n\t}\n\treturn path;\n}\n\nexport function fromConfig(config: PermissionConfig): Ruleset {\n\tconst rules: Rule[] = [];\n\n\tfor (const [permission, value] of Object.entries(config)) {\n\t\tif (typeof value === \"string\") {\n\t\t\trules.push({ permission, pattern: \"*\", action: value });\n\t\t} else {\n\t\t\tfor (const [pattern, action] of Object.entries(value)) {\n\t\t\t\trules.push({ permission, pattern: expand(pattern), action });\n\t\t\t}\n\t\t}\n\t}\n\n\treturn rules;\n}\n\nexport function merge(...rulesets: Ruleset[]): Ruleset {\n\treturn rulesets.flat();\n}\n\nexport function disabled(tools: string[], ruleset: Ruleset): Set<string> {\n\tconst result = new Set<string>();\n\n\tfor (const tool of tools) {\n\t\tconst permission = EDIT_TOOLS.includes(tool) ? \"edit\" : tool;\n\n\t\tconst rule = ruleset.findLast((rule) => {\n\t\t\treturn Wildcard.match(permission, rule.permission);\n\t\t});\n\n\t\tif (rule && rule.pattern === \"*\" && rule.action === \"deny\") {\n\t\t\tresult.add(tool);\n\t\t}\n\t}\n\n\treturn result;\n}\n"]}