@code-yeongyu/senpi 2026.6.4 → 2026.6.10

package/dist/core/extensions/builtin/openai-web-search/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/openai-web-search/index.ts"],"names":[],"mappings":"AAOA,MAAM,qBAAqB,GAAqB,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,CAAC,CAAC;AACxG,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAC1C,MAAM,6BAA6B,GAAG,oBAAoB,CAAC;AAC3D,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;AACpE,MAAM,UAAU,GAAG,mBAAmB,CAAC;AACvC,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAEvC,SAAS,cAAc,CAAC,MAAc,EAAW;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACjG,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAChG,OAAO,IAAI,CAAC;IACb,CAAC;IAED,mDAAmD;IACnD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,QAAQ,CAAC,KAAc,EAAoC;IACnE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AAAA,CACnD;AAED,SAAS,oBAAoB,CAAC,GAAoB,EAAwD;IACzG,OAAO,GAAG,KAAK,SAAS,IAAI,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAAA,CAC3D;AAED,SAAS,aAAa,CAAC,MAA6B,EAAoC;IACvF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACnG,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,+BAA+B,CAAC,KAA2B,EAAW;IAC9E,IAAI,CAAC;QACJ,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,2BAA2B,CAAC,CAAC,QAAQ,KAAK,gBAAgB,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AAAA,CACD;AAED,MAAM,UAAU,6BAA6B,CAAC,MAA6B,EAAW;IACrF,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,KAAK,wBAAwB,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAA2C,CAAC;IACjE,OAAO,MAAM,EAAE,wBAAwB,IAAI,+BAA+B,CAAC,KAAK,CAAC,CAAC;AAAA,CAClF;AAED,SAAS,2BAA2B,CAAC,KAAc,EAAmE;IACrH,OAAO,KAAK,KAAK,oBAAoB,IAAI,KAAK,KAAK,+BAA+B,CAAC;AAAA,CACnF;AAED,SAAS,0BAA0B,CAAC,KAAc,EAAW;IAC5D,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,KAAK,YAAY,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC3D,CAAC,2BAA2B,CAAC,KAAK,CAAC,CACnC,CAAC;AAAA,CACF;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAW;IACzD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAAA,CACnE;AAWD,SAAS,0BAA0B,CAAC,OAAgB,EAAW;IAC9D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,SAAS,GAA4B,EAAE,GAAG,OAAO,EAAE,CAAC;IAE1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3G,IAAI,cAAc,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5C,OAAO,GAAG,IAAI,CAAC;YACf,SAAS,CAAC,KAAK,GAAG,cAAc,CAAC;QAClC,CAAC;IACF,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,0BAA0B,CAAC,CAAC;QACzF,IAAI,gBAAgB,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAChD,OAAO,GAAG,IAAI,CAAC;YACf,SAAS,CAAC,OAAO,GAAG,gBAAgB,CAAC;QACtC,CAAC;IACF,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,2BAA2B,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5F,OAAO,GAAG,IAAI,CAAC;QACf,OAAO,SAAS,CAAC,WAAW,CAAC;IAC9B,CAAC;IAED,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAAA,CACrC;AAED,SAAS,aAAa,CAAC,KAAgB,EAAE,OAA6B,EAAkB;IACvF,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACV,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,0BAA0B,GAC/B,OAAO,CAAC,sBAAsB,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;QACpG,MAAM,gCAAgC,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC3G,IAAI,0BAA0B,IAAI,gCAAgC,EAAE,CAAC;YACpE,OAAO,GAAG,IAAI,CAAC;QAChB,CAAC;aAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAAA,CACrC;AAED,SAAS,uBAAuB,CAAC,OAAgC,EAAY;IAC5E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QAC7C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAC/E,CAAC,CAAC,EAAE,CAAC;IACN,OAAO,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,EAAE,0BAA0B,CAAC,CAAC;AAAA,CACzG;AAED,MAAM,UAAU,2BAA2B,CAAC,MAA6B,EAAE,OAAgB,EAAW;IACrG,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QACvC,0EAA0E;QAC1E,2EAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,gEAAgE;QAChE,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,MAAM,uBAAuB,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,qBAAqB,GAAG,uBAAuB,IAAI,wBAAwB,EAAE,CAAC;IACpF,MAAM,eAAe,GAAG,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAChG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAChC,OAAO,eAAe,CAAC;IACxB,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,WAAW,GAAG,uBAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC;IACpE,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC1F,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC;IACvC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG,eAAe,KAAK,OAAO,CAAC;QACnD,MAAM,gBAAgB,GAAG,aAAa,CAAC,WAAW,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,cAAc,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAClD,OAAO,eAAe,CAAC;QACxB,CAAC;QAED,OAAO;YACN,GAAG,eAAe;YAClB,KAAK,EAAE,gBAAgB,CAAC,KAAK;SAC7B,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACzB,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO;QACN,GAAG,OAAO;QACV,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC;KACzC,CAAC;AAAA,CACF;AAED,MAAM,UAAU,wBAAwB,GAAY;IACnD,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;AAAA,CAClC;AAED,SAAS,OAAO,CAAC,GAAqB,EAAQ;IAC7C,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO;IACvB,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACxC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;AAAA,CACxC;AAED,SAAS,MAAM,CAAC,GAAqB,EAAQ;IAC5C,OAAO,CAAC,GAAG,CAAC,CAAC;AAAA,CACb;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG;;;;;;CAMxC,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,wBAAwB,CAAC,EAAgB,EAAQ;IACxE,EAAE,CAAC,EAAE,CAAC,yBAAyB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;QAChD,OAAO,2BAA2B,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAAA,CAC7D,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,CAAC;IAAA,CACZ,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC;IAAA,CACZ,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,CAAC;IAAA,CACb,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,OAAO;YACN,YAAY,EAAE,GAAG,KAAK,CAAC,YAAY,KAAK,yBAAyB,EAAE;SACnE,CAAC;IAAA,CACF,CAAC,CAAC;AAAA,CACH","sourcesContent":["import type { Api, Model, OpenAIResponsesCompat } from \"@earendil-works/pi-ai\";\nimport type { ExtensionAPI, ExtensionContext } from \"../../types.ts\";\n\ntype ToolDefinition = Record<string, unknown>;\ntype OpenAiWebSearchModel = Pick<Model<Api>, \"api\" | \"baseUrl\" | \"compat\">;\ntype OpenAiWebSearchTarget = Api | OpenAiWebSearchModel | undefined;\n\nconst OPENAI_RESPONSES_APIS: ReadonlySet<Api> = new Set([\"openai-responses\", \"azure-openai-responses\"]);\nconst ENABLE_ENV = \"PI_OPENAI_WEB_SEARCH\";\nconst NATIVE_OPENAI_WEB_SEARCH_TYPE = \"web_search_preview\";\nconst WEB_SEARCH_SOURCES_INCLUDE = \"web_search_call.action.sources\";\nconst STATUS_KEY = \"openai-web-search\";\nconst WIDGET_KEY = \"openai-web-search\";\n\nfunction parseEnableEnv(envVar: string): boolean {\n\tconst envValue = process.env[envVar];\n\tif (!envValue) {\n\t\treturn true;\n\t}\n\n\tconst normalized = envValue.trim().toLowerCase();\n\tif (normalized === \"0\" || normalized === \"false\" || normalized === \"no\" || normalized === \"off\") {\n\t\treturn false;\n\t}\n\n\tif (normalized === \"1\" || normalized === \"true\" || normalized === \"yes\" || normalized === \"on\") {\n\t\treturn true;\n\t}\n\n\t// Unknown values fall back to default-on behavior.\n\treturn true;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null;\n}\n\nfunction isOpenAiResponsesApi(api: Api | undefined): api is \"openai-responses\" | \"azure-openai-responses\" {\n\treturn api !== undefined && OPENAI_RESPONSES_APIS.has(api);\n}\n\nfunction resolveTarget(target: OpenAiWebSearchTarget): OpenAiWebSearchModel | undefined {\n\tif (target === undefined) {\n\t\treturn undefined;\n\t}\n\tif (typeof target === \"string\") {\n\t\treturn { api: target, baseUrl: target === \"openai-responses\" ? \"https://api.openai.com/v1\" : \"\" };\n\t}\n\treturn target;\n}\n\nfunction isOpenAiResponsesNativeEndpoint(model: OpenAiWebSearchModel): boolean {\n\ttry {\n\t\treturn new URL(model.baseUrl || \"https://api.openai.com/v1\").hostname === \"api.openai.com\";\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nexport function supportsNativeOpenAiWebSearch(target: OpenAiWebSearchTarget): boolean {\n\tconst model = resolveTarget(target);\n\tif (!isOpenAiResponsesApi(model?.api)) {\n\t\treturn false;\n\t}\n\tif (model.api === \"azure-openai-responses\") {\n\t\treturn true;\n\t}\n\n\tconst compat = model.compat as OpenAIResponsesCompat | undefined;\n\treturn compat?.supportsWebSearchPreview ?? isOpenAiResponsesNativeEndpoint(model);\n}\n\nfunction isNativeOpenAiWebSearchType(value: unknown): value is \"web_search_preview\" | \"web_search_preview_2025_03_11\" {\n\treturn value === \"web_search_preview\" || value === \"web_search_preview_2025_03_11\";\n}\n\nfunction isUnsupportedWebSearchType(value: unknown): boolean {\n\treturn (\n\t\ttypeof value === \"string\" &&\n\t\t(value === \"web_search\" || value.startsWith(\"web_search_\")) &&\n\t\t!isNativeOpenAiWebSearchType(value)\n\t);\n}\n\nfunction isAnthropicWebFetchType(value: unknown): boolean {\n\treturn typeof value === \"string\" && value.startsWith(\"web_fetch_\");\n}\n\ntype SanitizedTools = {\n\tchanged: boolean;\n\ttools: ToolDefinition[];\n};\n\ntype SanitizeToolsOptions = {\n\tstripFunctionWebSearch: boolean;\n};\n\nfunction stripNativeOpenAiWebSearch(payload: unknown): unknown {\n\tif (!isRecord(payload)) {\n\t\treturn payload;\n\t}\n\n\tlet changed = false;\n\tconst sanitized: Record<string, unknown> = { ...payload };\n\n\tconst tools = payload.tools;\n\tif (Array.isArray(tools)) {\n\t\tconst sanitizedTools = tools.filter((tool) => !(isRecord(tool) && isNativeOpenAiWebSearchType(tool.type)));\n\t\tif (sanitizedTools.length !== tools.length) {\n\t\t\tchanged = true;\n\t\t\tsanitized.tools = sanitizedTools;\n\t\t}\n\t}\n\n\tconst include = payload.include;\n\tif (Array.isArray(include)) {\n\t\tconst sanitizedInclude = include.filter((value) => value !== WEB_SEARCH_SOURCES_INCLUDE);\n\t\tif (sanitizedInclude.length !== include.length) {\n\t\t\tchanged = true;\n\t\t\tsanitized.include = sanitizedInclude;\n\t\t}\n\t}\n\n\tif (isRecord(payload.tool_choice) && isNativeOpenAiWebSearchType(payload.tool_choice.type)) {\n\t\tchanged = true;\n\t\tdelete sanitized.tool_choice;\n\t}\n\n\treturn changed ? sanitized : payload;\n}\n\nfunction sanitizeTools(tools: unknown[], options: SanitizeToolsOptions): SanitizedTools {\n\tconst sanitized: ToolDefinition[] = [];\n\tlet changed = false;\n\tfor (const tool of tools) {\n\t\tif (!isRecord(tool)) {\n\t\t\tchanged = true;\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst type = tool.type;\n\t\tconst shouldStripFunctionVariant =\n\t\t\toptions.stripFunctionWebSearch && tool.name === \"web_search\" && !isNativeOpenAiWebSearchType(type);\n\t\tconst shouldStripProviderNativeVariant = isUnsupportedWebSearchType(type) || isAnthropicWebFetchType(type);\n\t\tif (shouldStripFunctionVariant || shouldStripProviderNativeVariant) {\n\t\t\tchanged = true;\n\t\t} else {\n\t\t\tsanitized.push(tool);\n\t\t}\n\t}\n\n\treturn { changed, tools: sanitized };\n}\n\nfunction includeWebSearchSources(payload: Record<string, unknown>): string[] {\n\tconst include = Array.isArray(payload.include)\n\t\t? payload.include.filter((value): value is string => typeof value === \"string\")\n\t\t: [];\n\treturn include.includes(WEB_SEARCH_SOURCES_INCLUDE) ? include : [...include, WEB_SEARCH_SOURCES_INCLUDE];\n}\n\nexport function addOpenAiWebSearchToPayload(target: OpenAiWebSearchTarget, payload: unknown): unknown {\n\tconst model = resolveTarget(target);\n\tif (!isOpenAiResponsesApi(model?.api)) {\n\t\t// Defense in depth. `web_search_preview` is an OpenAI Responses-only tool\n\t\t// type, but proxies that translate openai-responses → anthropic-messages\n\t\t// (e.g., ccapi/quotio for Claude models) can forward it verbatim, which\n\t\t// Anthropic rejects with `tools.N: Input tag 'web_search_preview'...`.\n\t\t// Strip the OpenAI-native variants for any non-openai-responses payload\n\t\t// so they never leak to Anthropic or Chat Completions backends.\n\t\treturn stripNativeOpenAiWebSearch(payload);\n\t}\n\n\tif (!isRecord(payload)) {\n\t\treturn payload;\n\t}\n\n\tconst supportsNativeWebSearch = supportsNativeOpenAiWebSearch(model);\n\tconst tools = Array.isArray(payload.tools) ? payload.tools : [];\n\tconst shouldInjectWebSearch = supportsNativeWebSearch && isOpenaiWebSearchEnabled();\n\tconst strippedPayload = supportsNativeWebSearch ? payload : stripNativeOpenAiWebSearch(payload);\n\tif (!isRecord(strippedPayload)) {\n\t\treturn strippedPayload;\n\t}\n\n\tconst strippedTools = Array.isArray(strippedPayload.tools) ? strippedPayload.tools : [];\n\tconst activeTools = supportsNativeWebSearch ? tools : strippedTools;\n\tconst sanitized = sanitizeTools(tools, { stripFunctionWebSearch: shouldInjectWebSearch });\n\tconst sanitizedTools = sanitized.tools;\n\tif (!shouldInjectWebSearch) {\n\t\tconst nativeStripped = strippedPayload !== payload;\n\t\tconst passiveSanitized = sanitizeTools(activeTools, { stripFunctionWebSearch: false });\n\t\tif (!nativeStripped && !passiveSanitized.changed) {\n\t\t\treturn strippedPayload;\n\t\t}\n\n\t\treturn {\n\t\t\t...strippedPayload,\n\t\t\ttools: passiveSanitized.tools,\n\t\t};\n\t}\n\n\tconst hasNativeWebSearch = sanitizedTools.some((tool) => isNativeOpenAiWebSearchType(tool.type));\n\n\tif (!hasNativeWebSearch) {\n\t\tsanitizedTools.push({ type: NATIVE_OPENAI_WEB_SEARCH_TYPE });\n\t}\n\n\treturn {\n\t\t...payload,\n\t\ttools: sanitizedTools,\n\t\tinclude: includeWebSearchSources(payload),\n\t};\n}\n\nexport function isOpenaiWebSearchEnabled(): boolean {\n\treturn parseEnableEnv(ENABLE_ENV);\n}\n\nfunction clearUi(ctx: ExtensionContext): void {\n\tif (!ctx.hasUI) return;\n\tctx.ui.setStatus(STATUS_KEY, undefined);\n\tctx.ui.setWidget(WIDGET_KEY, undefined);\n}\n\nfunction syncUi(ctx: ExtensionContext): void {\n\tclearUi(ctx);\n}\n\nexport const OPENAI_WEB_SEARCH_SECTION = `\n## Web Search\n\nNative web search is available in this session.\nUse web search when the user asks for current or online information.\nPrefer web search over guessing when freshness matters.\n`;\n\nexport default function openaiWebSearchExtension(pi: ExtensionAPI): void {\n\tpi.on(\"before_provider_request\", (event, ctx) => {\n\t\treturn addOpenAiWebSearchToPayload(ctx.model, event.payload);\n\t});\n\n\tpi.on(\"session_start\", async (_event, ctx) => {\n\t\tsyncUi(ctx);\n\t});\n\n\tpi.on(\"model_select\", async (_event, ctx) => {\n\t\tsyncUi(ctx);\n\t});\n\n\tpi.on(\"session_shutdown\", async (_event, ctx) => {\n\t\tclearUi(ctx);\n\t});\n\n\tpi.on(\"before_agent_start\", async (event, ctx) => {\n\t\tif (!supportsNativeOpenAiWebSearch(ctx.model)) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tif (!isOpenaiWebSearchEnabled()) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\treturn {\n\t\t\tsystemPrompt: `${event.systemPrompt}\\n${OPENAI_WEB_SEARCH_SECTION}`,\n\t\t};\n\t});\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/openai-web-search/index.ts"],"names":[],"mappings":"AAOA,MAAM,qBAAqB,GAAqB,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,CAAC,CAAC;AACxG,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAC1C,MAAM,6BAA6B,GAAG,oBAAoB,CAAC;AAC3D,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;AACpE,MAAM,UAAU,GAAG,mBAAmB,CAAC;AACvC,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAEvC,SAAS,cAAc,CAAC,MAAc;IACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACjG,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAChG,OAAO,IAAI,CAAC;IACb,CAAC;IAED,mDAAmD;IACnD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACpD,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAoB;IACjD,OAAO,GAAG,KAAK,SAAS,IAAI,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CAAC,MAA6B;IACnD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACnG,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,+BAA+B,CAAC,KAA2B;IACnE,IAAI,CAAC;QACJ,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,2BAA2B,CAAC,CAAC,QAAQ,KAAK,gBAAgB,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAA6B;IAC1E,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,KAAK,wBAAwB,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAA2C,CAAC;IACjE,OAAO,MAAM,EAAE,wBAAwB,IAAI,+BAA+B,CAAC,KAAK,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IAClD,OAAO,KAAK,KAAK,oBAAoB,IAAI,KAAK,KAAK,+BAA+B,CAAC;AACpF,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IACjD,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,KAAK,YAAY,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC3D,CAAC,2BAA2B,CAAC,KAAK,CAAC,CACnC,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACpE,CAAC;AAWD,SAAS,0BAA0B,CAAC,OAAgB;IACnD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,SAAS,GAA4B,EAAE,GAAG,OAAO,EAAE,CAAC;IAE1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3G,IAAI,cAAc,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC5C,OAAO,GAAG,IAAI,CAAC;YACf,SAAS,CAAC,KAAK,GAAG,cAAc,CAAC;QAClC,CAAC;IACF,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,0BAA0B,CAAC,CAAC;QACzF,IAAI,gBAAgB,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAChD,OAAO,GAAG,IAAI,CAAC;YACf,SAAS,CAAC,OAAO,GAAG,gBAAgB,CAAC;QACtC,CAAC;IACF,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,2BAA2B,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5F,OAAO,GAAG,IAAI,CAAC;QACf,OAAO,SAAS,CAAC,WAAW,CAAC;IAC9B,CAAC;IAED,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AACtC,CAAC;AAED,SAAS,aAAa,CAAC,KAAgB,EAAE,OAA6B;IACrE,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACV,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,0BAA0B,GAC/B,OAAO,CAAC,sBAAsB,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;QACpG,MAAM,gCAAgC,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC3G,IAAI,0BAA0B,IAAI,gCAAgC,EAAE,CAAC;YACpE,OAAO,GAAG,IAAI,CAAC;QAChB,CAAC;aAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAgC;IAChE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QAC7C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAC/E,CAAC,CAAC,EAAE,CAAC;IACN,OAAO,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,EAAE,0BAA0B,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAA6B,EAAE,OAAgB;IAC1F,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;QACvC,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,gEAAgE;QAChE,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,MAAM,uBAAuB,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,qBAAqB,GAAG,uBAAuB,IAAI,wBAAwB,EAAE,CAAC;IACpF,MAAM,eAAe,GAAG,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAChG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAChC,OAAO,eAAe,CAAC;IACxB,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,WAAW,GAAG,uBAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC;IACpE,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC1F,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC;IACvC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG,eAAe,KAAK,OAAO,CAAC;QACnD,MAAM,gBAAgB,GAAG,aAAa,CAAC,WAAW,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,cAAc,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAClD,OAAO,eAAe,CAAC;QACxB,CAAC;QAED,OAAO;YACN,GAAG,eAAe;YAClB,KAAK,EAAE,gBAAgB,CAAC,KAAK;SAC7B,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEjG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACzB,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO;QACN,GAAG,OAAO;QACV,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC;KACzC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB;IACvC,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,OAAO,CAAC,GAAqB;IACrC,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO;IACvB,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACxC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,MAAM,CAAC,GAAqB;IACpC,OAAO,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG;;;;;;CAMxC,CAAC;AAEF,MAAM,CAAC,OAAO,UAAU,wBAAwB,CAAC,EAAgB;IAChE,EAAE,CAAC,EAAE,CAAC,yBAAyB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC/C,OAAO,2BAA2B,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC3C,MAAM,CAAC,GAAG,CAAC,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC/C,OAAO,CAAC,GAAG,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAChD,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,OAAO;YACN,YAAY,EAAE,GAAG,KAAK,CAAC,YAAY,KAAK,yBAAyB,EAAE;SACnE,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { Api, Model, OpenAIResponsesCompat } from \"@earendil-works/pi-ai\";\nimport type { ExtensionAPI, ExtensionContext } from \"../../types.ts\";\n\ntype ToolDefinition = Record<string, unknown>;\ntype OpenAiWebSearchModel = Pick<Model<Api>, \"api\" | \"baseUrl\" | \"compat\">;\ntype OpenAiWebSearchTarget = Api | OpenAiWebSearchModel | undefined;\n\nconst OPENAI_RESPONSES_APIS: ReadonlySet<Api> = new Set([\"openai-responses\", \"azure-openai-responses\"]);\nconst ENABLE_ENV = \"PI_OPENAI_WEB_SEARCH\";\nconst NATIVE_OPENAI_WEB_SEARCH_TYPE = \"web_search_preview\";\nconst WEB_SEARCH_SOURCES_INCLUDE = \"web_search_call.action.sources\";\nconst STATUS_KEY = \"openai-web-search\";\nconst WIDGET_KEY = \"openai-web-search\";\n\nfunction parseEnableEnv(envVar: string): boolean {\n\tconst envValue = process.env[envVar];\n\tif (!envValue) {\n\t\treturn true;\n\t}\n\n\tconst normalized = envValue.trim().toLowerCase();\n\tif (normalized === \"0\" || normalized === \"false\" || normalized === \"no\" || normalized === \"off\") {\n\t\treturn false;\n\t}\n\n\tif (normalized === \"1\" || normalized === \"true\" || normalized === \"yes\" || normalized === \"on\") {\n\t\treturn true;\n\t}\n\n\t// Unknown values fall back to default-on behavior.\n\treturn true;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null;\n}\n\nfunction isOpenAiResponsesApi(api: Api | undefined): api is \"openai-responses\" | \"azure-openai-responses\" {\n\treturn api !== undefined && OPENAI_RESPONSES_APIS.has(api);\n}\n\nfunction resolveTarget(target: OpenAiWebSearchTarget): OpenAiWebSearchModel | undefined {\n\tif (target === undefined) {\n\t\treturn undefined;\n\t}\n\tif (typeof target === \"string\") {\n\t\treturn { api: target, baseUrl: target === \"openai-responses\" ? \"https://api.openai.com/v1\" : \"\" };\n\t}\n\treturn target;\n}\n\nfunction isOpenAiResponsesNativeEndpoint(model: OpenAiWebSearchModel): boolean {\n\ttry {\n\t\treturn new URL(model.baseUrl || \"https://api.openai.com/v1\").hostname === \"api.openai.com\";\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nexport function supportsNativeOpenAiWebSearch(target: OpenAiWebSearchTarget): boolean {\n\tconst model = resolveTarget(target);\n\tif (!isOpenAiResponsesApi(model?.api)) {\n\t\treturn false;\n\t}\n\tif (model.api === \"azure-openai-responses\") {\n\t\treturn true;\n\t}\n\n\tconst compat = model.compat as OpenAIResponsesCompat | undefined;\n\treturn compat?.supportsWebSearchPreview ?? isOpenAiResponsesNativeEndpoint(model);\n}\n\nfunction isNativeOpenAiWebSearchType(value: unknown): value is \"web_search_preview\" | \"web_search_preview_2025_03_11\" {\n\treturn value === \"web_search_preview\" || value === \"web_search_preview_2025_03_11\";\n}\n\nfunction isUnsupportedWebSearchType(value: unknown): boolean {\n\treturn (\n\t\ttypeof value === \"string\" &&\n\t\t(value === \"web_search\" || value.startsWith(\"web_search_\")) &&\n\t\t!isNativeOpenAiWebSearchType(value)\n\t);\n}\n\nfunction isAnthropicWebFetchType(value: unknown): boolean {\n\treturn typeof value === \"string\" && value.startsWith(\"web_fetch_\");\n}\n\ntype SanitizedTools = {\n\tchanged: boolean;\n\ttools: ToolDefinition[];\n};\n\ntype SanitizeToolsOptions = {\n\tstripFunctionWebSearch: boolean;\n};\n\nfunction stripNativeOpenAiWebSearch(payload: unknown): unknown {\n\tif (!isRecord(payload)) {\n\t\treturn payload;\n\t}\n\n\tlet changed = false;\n\tconst sanitized: Record<string, unknown> = { ...payload };\n\n\tconst tools = payload.tools;\n\tif (Array.isArray(tools)) {\n\t\tconst sanitizedTools = tools.filter((tool) => !(isRecord(tool) && isNativeOpenAiWebSearchType(tool.type)));\n\t\tif (sanitizedTools.length !== tools.length) {\n\t\t\tchanged = true;\n\t\t\tsanitized.tools = sanitizedTools;\n\t\t}\n\t}\n\n\tconst include = payload.include;\n\tif (Array.isArray(include)) {\n\t\tconst sanitizedInclude = include.filter((value) => value !== WEB_SEARCH_SOURCES_INCLUDE);\n\t\tif (sanitizedInclude.length !== include.length) {\n\t\t\tchanged = true;\n\t\t\tsanitized.include = sanitizedInclude;\n\t\t}\n\t}\n\n\tif (isRecord(payload.tool_choice) && isNativeOpenAiWebSearchType(payload.tool_choice.type)) {\n\t\tchanged = true;\n\t\tdelete sanitized.tool_choice;\n\t}\n\n\treturn changed ? sanitized : payload;\n}\n\nfunction sanitizeTools(tools: unknown[], options: SanitizeToolsOptions): SanitizedTools {\n\tconst sanitized: ToolDefinition[] = [];\n\tlet changed = false;\n\tfor (const tool of tools) {\n\t\tif (!isRecord(tool)) {\n\t\t\tchanged = true;\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst type = tool.type;\n\t\tconst shouldStripFunctionVariant =\n\t\t\toptions.stripFunctionWebSearch && tool.name === \"web_search\" && !isNativeOpenAiWebSearchType(type);\n\t\tconst shouldStripProviderNativeVariant = isUnsupportedWebSearchType(type) || isAnthropicWebFetchType(type);\n\t\tif (shouldStripFunctionVariant || shouldStripProviderNativeVariant) {\n\t\t\tchanged = true;\n\t\t} else {\n\t\t\tsanitized.push(tool);\n\t\t}\n\t}\n\n\treturn { changed, tools: sanitized };\n}\n\nfunction includeWebSearchSources(payload: Record<string, unknown>): string[] {\n\tconst include = Array.isArray(payload.include)\n\t\t? payload.include.filter((value): value is string => typeof value === \"string\")\n\t\t: [];\n\treturn include.includes(WEB_SEARCH_SOURCES_INCLUDE) ? include : [...include, WEB_SEARCH_SOURCES_INCLUDE];\n}\n\nexport function addOpenAiWebSearchToPayload(target: OpenAiWebSearchTarget, payload: unknown): unknown {\n\tconst model = resolveTarget(target);\n\tif (!isOpenAiResponsesApi(model?.api)) {\n\t\t// Defense in depth. `web_search_preview` is an OpenAI Responses-only tool\n\t\t// type, but proxies that translate openai-responses → anthropic-messages\n\t\t// (e.g., ccapi/quotio for Claude models) can forward it verbatim, which\n\t\t// Anthropic rejects with `tools.N: Input tag 'web_search_preview'...`.\n\t\t// Strip the OpenAI-native variants for any non-openai-responses payload\n\t\t// so they never leak to Anthropic or Chat Completions backends.\n\t\treturn stripNativeOpenAiWebSearch(payload);\n\t}\n\n\tif (!isRecord(payload)) {\n\t\treturn payload;\n\t}\n\n\tconst supportsNativeWebSearch = supportsNativeOpenAiWebSearch(model);\n\tconst tools = Array.isArray(payload.tools) ? payload.tools : [];\n\tconst shouldInjectWebSearch = supportsNativeWebSearch && isOpenaiWebSearchEnabled();\n\tconst strippedPayload = supportsNativeWebSearch ? payload : stripNativeOpenAiWebSearch(payload);\n\tif (!isRecord(strippedPayload)) {\n\t\treturn strippedPayload;\n\t}\n\n\tconst strippedTools = Array.isArray(strippedPayload.tools) ? strippedPayload.tools : [];\n\tconst activeTools = supportsNativeWebSearch ? tools : strippedTools;\n\tconst sanitized = sanitizeTools(tools, { stripFunctionWebSearch: shouldInjectWebSearch });\n\tconst sanitizedTools = sanitized.tools;\n\tif (!shouldInjectWebSearch) {\n\t\tconst nativeStripped = strippedPayload !== payload;\n\t\tconst passiveSanitized = sanitizeTools(activeTools, { stripFunctionWebSearch: false });\n\t\tif (!nativeStripped && !passiveSanitized.changed) {\n\t\t\treturn strippedPayload;\n\t\t}\n\n\t\treturn {\n\t\t\t...strippedPayload,\n\t\t\ttools: passiveSanitized.tools,\n\t\t};\n\t}\n\n\tconst hasNativeWebSearch = sanitizedTools.some((tool) => isNativeOpenAiWebSearchType(tool.type));\n\n\tif (!hasNativeWebSearch) {\n\t\tsanitizedTools.push({ type: NATIVE_OPENAI_WEB_SEARCH_TYPE });\n\t}\n\n\treturn {\n\t\t...payload,\n\t\ttools: sanitizedTools,\n\t\tinclude: includeWebSearchSources(payload),\n\t};\n}\n\nexport function isOpenaiWebSearchEnabled(): boolean {\n\treturn parseEnableEnv(ENABLE_ENV);\n}\n\nfunction clearUi(ctx: ExtensionContext): void {\n\tif (!ctx.hasUI) return;\n\tctx.ui.setStatus(STATUS_KEY, undefined);\n\tctx.ui.setWidget(WIDGET_KEY, undefined);\n}\n\nfunction syncUi(ctx: ExtensionContext): void {\n\tclearUi(ctx);\n}\n\nexport const OPENAI_WEB_SEARCH_SECTION = `\n## Web Search\n\nNative web search is available in this session.\nUse web search when the user asks for current or online information.\nPrefer web search over guessing when freshness matters.\n`;\n\nexport default function openaiWebSearchExtension(pi: ExtensionAPI): void {\n\tpi.on(\"before_provider_request\", (event, ctx) => {\n\t\treturn addOpenAiWebSearchToPayload(ctx.model, event.payload);\n\t});\n\n\tpi.on(\"session_start\", async (_event, ctx) => {\n\t\tsyncUi(ctx);\n\t});\n\n\tpi.on(\"model_select\", async (_event, ctx) => {\n\t\tsyncUi(ctx);\n\t});\n\n\tpi.on(\"session_shutdown\", async (_event, ctx) => {\n\t\tclearUi(ctx);\n\t});\n\n\tpi.on(\"before_agent_start\", async (event, ctx) => {\n\t\tif (!supportsNativeOpenAiWebSearch(ctx.model)) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tif (!isOpenaiWebSearchEnabled()) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\treturn {\n\t\t\tsystemPrompt: `${event.systemPrompt}\\n${OPENAI_WEB_SEARCH_SECTION}`,\n\t\t};\n\t});\n}\n"]}

package/dist/core/extensions/builtin/permission-system/arity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"arity.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/arity.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS;;CAUrB,CAAC","sourcesContent":["export const BashArity = {\n\tprefix(tokens: string[]): string[] {\n\t\tfor (let len = tokens.length; len > 0; len--) {\n\t\t\tconst prefix = tokens.slice(0, len).join(\" \");\n\t\t\tconst arity = ARITY[prefix];\n\t\t\tif (arity !== undefined) return tokens.slice(0, arity);\n\t\t}\n\t\tif (tokens.length === 0) return [];\n\t\treturn tokens.slice(0, 1);\n\t},\n};\n\n/* Generated with following prompt:\nYou are generating a dictionary of command-prefix arities for bash-style commands.\nThis dictionary is used to identify the \"human-understandable command\" from an input shell command.### **RULES (follow strictly)**1. Each entry maps a **command prefix string → number**, representing how many **tokens** define the command.\n2. **Flags NEVER count as tokens**. Only subcommands count.\n3. **Longest matching prefix wins**.\n4. **Only include a longer prefix if its arity is different from what the shorter prefix already implies**.   * Example: If `git` is 2, then do **not** include `git checkout`, `git commit`, etc. unless they require *different* arity.\n5. The output must be a **single JSON object**. Each entry should have a comment with an example real world matching command. DO NOT MAKE ANY OTHER COMMENTS. Should be alphabetical\n6. Include the **most commonly used commands** across many stacks and languages. More is better.### **Semantics examples*** `touch foo.txt` → `touch` (arity 1, explicitly listed)\n* `git checkout main` → `git checkout` (because `git` has arity 2)\n* `npm install` → `npm install` (because `npm` has arity 2)\n* `npm run dev` → `npm run dev` (because `npm run` has arity 3)\n* `python script.py` → `python script.py` (default: whole input, not in dictionary)### **Now generate the dictionary.**\n*/\nconst ARITY: Record<string, number> = {\n\tcat: 1, // cat file.txt\n\tcd: 1, // cd /path/to/dir\n\tchmod: 1, // chmod 755 script.sh\n\tchown: 1, // chown user:group file.txt\n\tcp: 1, // cp source.txt dest.txt\n\techo: 1, // echo \"hello world\"\n\tenv: 1, // env\n\texport: 1, // export PATH=/usr/bin\n\tgrep: 1, // grep pattern file.txt\n\tkill: 1, // kill 1234\n\tkillall: 1, // killall process\n\tln: 1, // ln -s source target\n\tls: 1, // ls -la\n\tmkdir: 1, // mkdir new-dir\n\tmv: 1, // mv old.txt new.txt\n\tps: 1, // ps aux\n\tpwd: 1, // pwd\n\trm: 1, // rm file.txt\n\trmdir: 1, // rmdir empty-dir\n\tsleep: 1, // sleep 5\n\tsource: 1, // source ~/.bashrc\n\ttail: 1, // tail -f log.txt\n\ttouch: 1, // touch file.txt\n\tunset: 1, // unset VAR\n\twhich: 1, // which node\n\taws: 3, // aws s3 ls\n\taz: 3, // az storage blob list\n\tbazel: 2, // bazel build\n\tbrew: 2, // brew install node\n\tbun: 2, // bun install\n\t\"bun run\": 3, // bun run dev\n\t\"bun x\": 3, // bun x vite\n\tcargo: 2, // cargo build\n\t\"cargo add\": 3, // cargo add tokio\n\t\"cargo run\": 3, // cargo run main\n\tcdk: 2, // cdk deploy\n\tcf: 2, // cf push app\n\tcmake: 2, // cmake build\n\tcomposer: 2, // composer require laravel\n\tconsul: 2, // consul members\n\t\"consul kv\": 3, // consul kv get config/app\n\tcrictl: 2, // crictl ps\n\tdeno: 2, // deno run server.ts\n\t\"deno task\": 3, // deno task dev\n\tdoctl: 3, // doctl kubernetes cluster list\n\tdocker: 2, // docker run nginx\n\t\"docker builder\": 3, // docker builder prune\n\t\"docker compose\": 3, // docker compose up\n\t\"docker container\": 3, // docker container ls\n\t\"docker image\": 3, // docker image prune\n\t\"docker network\": 3, // docker network inspect\n\t\"docker volume\": 3, // docker volume ls\n\teksctl: 2, // eksctl get clusters\n\t\"eksctl create\": 3, // eksctl create cluster\n\tfirebase: 2, // firebase deploy\n\tflyctl: 2, // flyctl deploy\n\tgcloud: 3, // gcloud compute instances list\n\tgh: 3, // gh pr list\n\tgit: 2, // git checkout main\n\t\"git config\": 3, // git config user.name\n\t\"git remote\": 3, // git remote add origin\n\t\"git stash\": 3, // git stash pop\n\tgo: 2, // go build\n\tgradle: 2, // gradle build\n\thelm: 2, // helm install mychart\n\theroku: 2, // heroku logs\n\thugo: 2, // hugo new site blog\n\tip: 2, // ip link show\n\t\"ip addr\": 3, // ip addr show\n\t\"ip link\": 3, // ip link set eth0 up\n\t\"ip netns\": 3, // ip netns exec foo bash\n\t\"ip route\": 3, // ip route add default via 1.1.1.1\n\tkind: 2, // kind delete cluster\n\t\"kind create\": 3, // kind create cluster\n\tkubectl: 2, // kubectl get pods\n\t\"kubectl kustomize\": 3, // kubectl kustomize overlays/dev\n\t\"kubectl rollout\": 3, // kubectl rollout restart deploy/api\n\tkustomize: 2, // kustomize build .\n\tmake: 2, // make build\n\tmc: 2, // mc ls myminio\n\t\"mc admin\": 3, // mc admin info myminio\n\tminikube: 2, // minikube start\n\tmongosh: 2, // mongosh test\n\tmysql: 2, // mysql -u root\n\tmvn: 2, // mvn compile\n\tng: 2, // ng generate component home\n\tnpm: 2, // npm install\n\t\"npm exec\": 3, // npm exec vite\n\t\"npm init\": 3, // npm init vue\n\t\"npm run\": 3, // npm run dev\n\t\"npm view\": 3, // npm view react version\n\tnvm: 2, // nvm use 18\n\tnx: 2, // nx build\n\topenssl: 2, // openssl genrsa 2048\n\t\"openssl req\": 3, // openssl req -new -key key.pem\n\t\"openssl x509\": 3, // openssl x509 -in cert.pem\n\tpip: 2, // pip install numpy\n\tpipenv: 2, // pipenv install flask\n\tpnpm: 2, // pnpm install\n\t\"pnpm dlx\": 3, // pnpm dlx create-next-app\n\t\"pnpm exec\": 3, // pnpm exec vite\n\t\"pnpm run\": 3, // pnpm run dev\n\tpoetry: 2, // poetry add requests\n\tpodman: 2, // podman run alpine\n\t\"podman container\": 3, // podman container ls\n\t\"podman image\": 3, // podman image prune\n\tpsql: 2, // psql -d mydb\n\tpulumi: 2, // pulumi up\n\t\"pulumi stack\": 3, // pulumi stack output\n\tpyenv: 2, // pyenv install 3.11\n\tpython: 2, // python -m venv env\n\trake: 2, // rake db:migrate\n\trbenv: 2, // rbenv install 3.2.0\n\t\"redis-cli\": 2, // redis-cli ping\n\trustup: 2, // rustup update\n\tserverless: 2, // serverless invoke\n\tsfdx: 3, // sfdx force:org:list\n\tskaffold: 2, // skaffold dev\n\tsls: 2, // sls deploy\n\tsst: 2, // sst deploy\n\tswift: 2, // swift build\n\tsystemctl: 2, // systemctl restart nginx\n\tterraform: 2, // terraform apply\n\t\"terraform workspace\": 3, // terraform workspace select prod\n\ttmux: 2, // tmux new -s dev\n\tturbo: 2, // turbo run build\n\tufw: 2, // ufw allow 22\n\tvault: 2, // vault login\n\t\"vault auth\": 3, // vault auth list\n\t\"vault kv\": 3, // vault kv get secret/api\n\tvercel: 2, // vercel deploy\n\tvolta: 2, // volta install node\n\twp: 2, // wp plugin install\n\tyarn: 2, // yarn add react\n\t\"yarn dlx\": 3, // yarn dlx create-react-app\n\t\"yarn run\": 3, // yarn run dev\n};\n"]}
+{"version":3,"file":"arity.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/arity.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS;IACrB,MAAM,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE;CASlC,CAAC"}

package/dist/core/extensions/builtin/permission-system/arity.js.map

@@ -1 +1 @@
-{"version":3,"file":"arity.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/arity.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,SAAS,GAAG;IACxB,MAAM,CAAC,MAAgB,EAAY;QAClC,KAAK,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAAA,CAC1B;CACD,CAAC;AAEF;;;;;;;;;;;;EAYE;AACF,MAAM,KAAK,GAA2B;IACrC,GAAG,EAAE,CAAC,EAAE,eAAe;IACvB,EAAE,EAAE,CAAC,EAAE,kBAAkB;IACzB,KAAK,EAAE,CAAC,EAAE,sBAAsB;IAChC,KAAK,EAAE,CAAC,EAAE,4BAA4B;IACtC,EAAE,EAAE,CAAC,EAAE,yBAAyB;IAChC,IAAI,EAAE,CAAC,EAAE,qBAAqB;IAC9B,GAAG,EAAE,CAAC,EAAE,MAAM;IACd,MAAM,EAAE,CAAC,EAAE,uBAAuB;IAClC,IAAI,EAAE,CAAC,EAAE,wBAAwB;IACjC,IAAI,EAAE,CAAC,EAAE,YAAY;IACrB,OAAO,EAAE,CAAC,EAAE,kBAAkB;IAC9B,EAAE,EAAE,CAAC,EAAE,sBAAsB;IAC7B,EAAE,EAAE,CAAC,EAAE,SAAS;IAChB,KAAK,EAAE,CAAC,EAAE,gBAAgB;IAC1B,EAAE,EAAE,CAAC,EAAE,qBAAqB;IAC5B,EAAE,EAAE,CAAC,EAAE,SAAS;IAChB,GAAG,EAAE,CAAC,EAAE,MAAM;IACd,EAAE,EAAE,CAAC,EAAE,cAAc;IACrB,KAAK,EAAE,CAAC,EAAE,kBAAkB;IAC5B,KAAK,EAAE,CAAC,EAAE,UAAU;IACpB,MAAM,EAAE,CAAC,EAAE,mBAAmB;IAC9B,IAAI,EAAE,CAAC,EAAE,kBAAkB;IAC3B,KAAK,EAAE,CAAC,EAAE,iBAAiB;IAC3B,KAAK,EAAE,CAAC,EAAE,YAAY;IACtB,KAAK,EAAE,CAAC,EAAE,aAAa;IACvB,GAAG,EAAE,CAAC,EAAE,YAAY;IACpB,EAAE,EAAE,CAAC,EAAE,uBAAuB;IAC9B,KAAK,EAAE,CAAC,EAAE,cAAc;IACxB,IAAI,EAAE,CAAC,EAAE,oBAAoB;IAC7B,GAAG,EAAE,CAAC,EAAE,cAAc;IACtB,SAAS,EAAE,CAAC,EAAE,cAAc;IAC5B,OAAO,EAAE,CAAC,EAAE,aAAa;IACzB,KAAK,EAAE,CAAC,EAAE,cAAc;IACxB,WAAW,EAAE,CAAC,EAAE,kBAAkB;IAClC,WAAW,EAAE,CAAC,EAAE,iBAAiB;IACjC,GAAG,EAAE,CAAC,EAAE,aAAa;IACrB,EAAE,EAAE,CAAC,EAAE,cAAc;IACrB,KAAK,EAAE,CAAC,EAAE,cAAc;IACxB,QAAQ,EAAE,CAAC,EAAE,2BAA2B;IACxC,MAAM,EAAE,CAAC,EAAE,iBAAiB;IAC5B,WAAW,EAAE,CAAC,EAAE,2BAA2B;IAC3C,MAAM,EAAE,CAAC,EAAE,YAAY;IACvB,IAAI,EAAE,CAAC,EAAE,qBAAqB;IAC9B,WAAW,EAAE,CAAC,EAAE,gBAAgB;IAChC,KAAK,EAAE,CAAC,EAAE,gCAAgC;IAC1C,MAAM,EAAE,CAAC,EAAE,mBAAmB;IAC9B,gBAAgB,EAAE,CAAC,EAAE,uBAAuB;IAC5C,gBAAgB,EAAE,CAAC,EAAE,oBAAoB;IACzC,kBAAkB,EAAE,CAAC,EAAE,sBAAsB;IAC7C,cAAc,EAAE,CAAC,EAAE,qBAAqB;IACxC,gBAAgB,EAAE,CAAC,EAAE,yBAAyB;IAC9C,eAAe,EAAE,CAAC,EAAE,mBAAmB;IACvC,MAAM,EAAE,CAAC,EAAE,sBAAsB;IACjC,eAAe,EAAE,CAAC,EAAE,wBAAwB;IAC5C,QAAQ,EAAE,CAAC,EAAE,kBAAkB;IAC/B,MAAM,EAAE,CAAC,EAAE,gBAAgB;IAC3B,MAAM,EAAE,CAAC,EAAE,gCAAgC;IAC3C,EAAE,EAAE,CAAC,EAAE,aAAa;IACpB,GAAG,EAAE,CAAC,EAAE,oBAAoB;IAC5B,YAAY,EAAE,CAAC,EAAE,uBAAuB;IACxC,YAAY,EAAE,CAAC,EAAE,wBAAwB;IACzC,WAAW,EAAE,CAAC,EAAE,gBAAgB;IAChC,EAAE,EAAE,CAAC,EAAE,WAAW;IAClB,MAAM,EAAE,CAAC,EAAE,eAAe;IAC1B,IAAI,EAAE,CAAC,EAAE,uBAAuB;IAChC,MAAM,EAAE,CAAC,EAAE,cAAc;IACzB,IAAI,EAAE,CAAC,EAAE,qBAAqB;IAC9B,EAAE,EAAE,CAAC,EAAE,eAAe;IACtB,SAAS,EAAE,CAAC,EAAE,eAAe;IAC7B,SAAS,EAAE,CAAC,EAAE,sBAAsB;IACpC,UAAU,EAAE,CAAC,EAAE,yBAAyB;IACxC,UAAU,EAAE,CAAC,EAAE,mCAAmC;IAClD,IAAI,EAAE,CAAC,EAAE,sBAAsB;IAC/B,aAAa,EAAE,CAAC,EAAE,sBAAsB;IACxC,OAAO,EAAE,CAAC,EAAE,mBAAmB;IAC/B,mBAAmB,EAAE,CAAC,EAAE,iCAAiC;IACzD,iBAAiB,EAAE,CAAC,EAAE,qCAAqC;IAC3D,SAAS,EAAE,CAAC,EAAE,oBAAoB;IAClC,IAAI,EAAE,CAAC,EAAE,aAAa;IACtB,EAAE,EAAE,CAAC,EAAE,gBAAgB;IACvB,UAAU,EAAE,CAAC,EAAE,wBAAwB;IACvC,QAAQ,EAAE,CAAC,EAAE,iBAAiB;IAC9B,OAAO,EAAE,CAAC,EAAE,eAAe;IAC3B,KAAK,EAAE,CAAC,EAAE,gBAAgB;IAC1B,GAAG,EAAE,CAAC,EAAE,cAAc;IACtB,EAAE,EAAE,CAAC,EAAE,6BAA6B;IACpC,GAAG,EAAE,CAAC,EAAE,cAAc;IACtB,UAAU,EAAE,CAAC,EAAE,gBAAgB;IAC/B,UAAU,EAAE,CAAC,EAAE,eAAe;IAC9B,SAAS,EAAE,CAAC,EAAE,cAAc;IAC5B,UAAU,EAAE,CAAC,EAAE,yBAAyB;IACxC,GAAG,EAAE,CAAC,EAAE,aAAa;IACrB,EAAE,EAAE,CAAC,EAAE,WAAW;IAClB,OAAO,EAAE,CAAC,EAAE,sBAAsB;IAClC,aAAa,EAAE,CAAC,EAAE,gCAAgC;IAClD,cAAc,EAAE,CAAC,EAAE,4BAA4B;IAC/C,GAAG,EAAE,CAAC,EAAE,oBAAoB;IAC5B,MAAM,EAAE,CAAC,EAAE,uBAAuB;IAClC,IAAI,EAAE,CAAC,EAAE,eAAe;IACxB,UAAU,EAAE,CAAC,EAAE,2BAA2B;IAC1C,WAAW,EAAE,CAAC,EAAE,iBAAiB;IACjC,UAAU,EAAE,CAAC,EAAE,eAAe;IAC9B,MAAM,EAAE,CAAC,EAAE,sBAAsB;IACjC,MAAM,EAAE,CAAC,EAAE,oBAAoB;IAC/B,kBAAkB,EAAE,CAAC,EAAE,sBAAsB;IAC7C,cAAc,EAAE,CAAC,EAAE,qBAAqB;IACxC,IAAI,EAAE,CAAC,EAAE,eAAe;IACxB,MAAM,EAAE,CAAC,EAAE,YAAY;IACvB,cAAc,EAAE,CAAC,EAAE,sBAAsB;IACzC,KAAK,EAAE,CAAC,EAAE,qBAAqB;IAC/B,MAAM,EAAE,CAAC,EAAE,qBAAqB;IAChC,IAAI,EAAE,CAAC,EAAE,kBAAkB;IAC3B,KAAK,EAAE,CAAC,EAAE,sBAAsB;IAChC,WAAW,EAAE,CAAC,EAAE,iBAAiB;IACjC,MAAM,EAAE,CAAC,EAAE,gBAAgB;IAC3B,UAAU,EAAE,CAAC,EAAE,oBAAoB;IACnC,IAAI,EAAE,CAAC,EAAE,sBAAsB;IAC/B,QAAQ,EAAE,CAAC,EAAE,eAAe;IAC5B,GAAG,EAAE,CAAC,EAAE,aAAa;IACrB,GAAG,EAAE,CAAC,EAAE,aAAa;IACrB,KAAK,EAAE,CAAC,EAAE,cAAc;IACxB,SAAS,EAAE,CAAC,EAAE,0BAA0B;IACxC,SAAS,EAAE,CAAC,EAAE,kBAAkB;IAChC,qBAAqB,EAAE,CAAC,EAAE,kCAAkC;IAC5D,IAAI,EAAE,CAAC,EAAE,kBAAkB;IAC3B,KAAK,EAAE,CAAC,EAAE,kBAAkB;IAC5B,GAAG,EAAE,CAAC,EAAE,eAAe;IACvB,KAAK,EAAE,CAAC,EAAE,cAAc;IACxB,YAAY,EAAE,CAAC,EAAE,kBAAkB;IACnC,UAAU,EAAE,CAAC,EAAE,0BAA0B;IACzC,MAAM,EAAE,CAAC,EAAE,gBAAgB;IAC3B,KAAK,EAAE,CAAC,EAAE,qBAAqB;IAC/B,EAAE,EAAE,CAAC,EAAE,oBAAoB;IAC3B,IAAI,EAAE,CAAC,EAAE,iBAAiB;IAC1B,UAAU,EAAE,CAAC,EAAE,4BAA4B;IAC3C,UAAU,EAAE,CAAC,EAAE,eAAe;CAC9B,CAAC","sourcesContent":["export const BashArity = {\n\tprefix(tokens: string[]): string[] {\n\t\tfor (let len = tokens.length; len > 0; len--) {\n\t\t\tconst prefix = tokens.slice(0, len).join(\" \");\n\t\t\tconst arity = ARITY[prefix];\n\t\t\tif (arity !== undefined) return tokens.slice(0, arity);\n\t\t}\n\t\tif (tokens.length === 0) return [];\n\t\treturn tokens.slice(0, 1);\n\t},\n};\n\n/* Generated with following prompt:\nYou are generating a dictionary of command-prefix arities for bash-style commands.\nThis dictionary is used to identify the \"human-understandable command\" from an input shell command.### **RULES (follow strictly)**1. Each entry maps a **command prefix string → number**, representing how many **tokens** define the command.\n2. **Flags NEVER count as tokens**. Only subcommands count.\n3. **Longest matching prefix wins**.\n4. **Only include a longer prefix if its arity is different from what the shorter prefix already implies**.   * Example: If `git` is 2, then do **not** include `git checkout`, `git commit`, etc. unless they require *different* arity.\n5. The output must be a **single JSON object**. Each entry should have a comment with an example real world matching command. DO NOT MAKE ANY OTHER COMMENTS. Should be alphabetical\n6. Include the **most commonly used commands** across many stacks and languages. More is better.### **Semantics examples*** `touch foo.txt` → `touch` (arity 1, explicitly listed)\n* `git checkout main` → `git checkout` (because `git` has arity 2)\n* `npm install` → `npm install` (because `npm` has arity 2)\n* `npm run dev` → `npm run dev` (because `npm run` has arity 3)\n* `python script.py` → `python script.py` (default: whole input, not in dictionary)### **Now generate the dictionary.**\n*/\nconst ARITY: Record<string, number> = {\n\tcat: 1, // cat file.txt\n\tcd: 1, // cd /path/to/dir\n\tchmod: 1, // chmod 755 script.sh\n\tchown: 1, // chown user:group file.txt\n\tcp: 1, // cp source.txt dest.txt\n\techo: 1, // echo \"hello world\"\n\tenv: 1, // env\n\texport: 1, // export PATH=/usr/bin\n\tgrep: 1, // grep pattern file.txt\n\tkill: 1, // kill 1234\n\tkillall: 1, // killall process\n\tln: 1, // ln -s source target\n\tls: 1, // ls -la\n\tmkdir: 1, // mkdir new-dir\n\tmv: 1, // mv old.txt new.txt\n\tps: 1, // ps aux\n\tpwd: 1, // pwd\n\trm: 1, // rm file.txt\n\trmdir: 1, // rmdir empty-dir\n\tsleep: 1, // sleep 5\n\tsource: 1, // source ~/.bashrc\n\ttail: 1, // tail -f log.txt\n\ttouch: 1, // touch file.txt\n\tunset: 1, // unset VAR\n\twhich: 1, // which node\n\taws: 3, // aws s3 ls\n\taz: 3, // az storage blob list\n\tbazel: 2, // bazel build\n\tbrew: 2, // brew install node\n\tbun: 2, // bun install\n\t\"bun run\": 3, // bun run dev\n\t\"bun x\": 3, // bun x vite\n\tcargo: 2, // cargo build\n\t\"cargo add\": 3, // cargo add tokio\n\t\"cargo run\": 3, // cargo run main\n\tcdk: 2, // cdk deploy\n\tcf: 2, // cf push app\n\tcmake: 2, // cmake build\n\tcomposer: 2, // composer require laravel\n\tconsul: 2, // consul members\n\t\"consul kv\": 3, // consul kv get config/app\n\tcrictl: 2, // crictl ps\n\tdeno: 2, // deno run server.ts\n\t\"deno task\": 3, // deno task dev\n\tdoctl: 3, // doctl kubernetes cluster list\n\tdocker: 2, // docker run nginx\n\t\"docker builder\": 3, // docker builder prune\n\t\"docker compose\": 3, // docker compose up\n\t\"docker container\": 3, // docker container ls\n\t\"docker image\": 3, // docker image prune\n\t\"docker network\": 3, // docker network inspect\n\t\"docker volume\": 3, // docker volume ls\n\teksctl: 2, // eksctl get clusters\n\t\"eksctl create\": 3, // eksctl create cluster\n\tfirebase: 2, // firebase deploy\n\tflyctl: 2, // flyctl deploy\n\tgcloud: 3, // gcloud compute instances list\n\tgh: 3, // gh pr list\n\tgit: 2, // git checkout main\n\t\"git config\": 3, // git config user.name\n\t\"git remote\": 3, // git remote add origin\n\t\"git stash\": 3, // git stash pop\n\tgo: 2, // go build\n\tgradle: 2, // gradle build\n\thelm: 2, // helm install mychart\n\theroku: 2, // heroku logs\n\thugo: 2, // hugo new site blog\n\tip: 2, // ip link show\n\t\"ip addr\": 3, // ip addr show\n\t\"ip link\": 3, // ip link set eth0 up\n\t\"ip netns\": 3, // ip netns exec foo bash\n\t\"ip route\": 3, // ip route add default via 1.1.1.1\n\tkind: 2, // kind delete cluster\n\t\"kind create\": 3, // kind create cluster\n\tkubectl: 2, // kubectl get pods\n\t\"kubectl kustomize\": 3, // kubectl kustomize overlays/dev\n\t\"kubectl rollout\": 3, // kubectl rollout restart deploy/api\n\tkustomize: 2, // kustomize build .\n\tmake: 2, // make build\n\tmc: 2, // mc ls myminio\n\t\"mc admin\": 3, // mc admin info myminio\n\tminikube: 2, // minikube start\n\tmongosh: 2, // mongosh test\n\tmysql: 2, // mysql -u root\n\tmvn: 2, // mvn compile\n\tng: 2, // ng generate component home\n\tnpm: 2, // npm install\n\t\"npm exec\": 3, // npm exec vite\n\t\"npm init\": 3, // npm init vue\n\t\"npm run\": 3, // npm run dev\n\t\"npm view\": 3, // npm view react version\n\tnvm: 2, // nvm use 18\n\tnx: 2, // nx build\n\topenssl: 2, // openssl genrsa 2048\n\t\"openssl req\": 3, // openssl req -new -key key.pem\n\t\"openssl x509\": 3, // openssl x509 -in cert.pem\n\tpip: 2, // pip install numpy\n\tpipenv: 2, // pipenv install flask\n\tpnpm: 2, // pnpm install\n\t\"pnpm dlx\": 3, // pnpm dlx create-next-app\n\t\"pnpm exec\": 3, // pnpm exec vite\n\t\"pnpm run\": 3, // pnpm run dev\n\tpoetry: 2, // poetry add requests\n\tpodman: 2, // podman run alpine\n\t\"podman container\": 3, // podman container ls\n\t\"podman image\": 3, // podman image prune\n\tpsql: 2, // psql -d mydb\n\tpulumi: 2, // pulumi up\n\t\"pulumi stack\": 3, // pulumi stack output\n\tpyenv: 2, // pyenv install 3.11\n\tpython: 2, // python -m venv env\n\trake: 2, // rake db:migrate\n\trbenv: 2, // rbenv install 3.2.0\n\t\"redis-cli\": 2, // redis-cli ping\n\trustup: 2, // rustup update\n\tserverless: 2, // serverless invoke\n\tsfdx: 3, // sfdx force:org:list\n\tskaffold: 2, // skaffold dev\n\tsls: 2, // sls deploy\n\tsst: 2, // sst deploy\n\tswift: 2, // swift build\n\tsystemctl: 2, // systemctl restart nginx\n\tterraform: 2, // terraform apply\n\t\"terraform workspace\": 3, // terraform workspace select prod\n\ttmux: 2, // tmux new -s dev\n\tturbo: 2, // turbo run build\n\tufw: 2, // ufw allow 22\n\tvault: 2, // vault login\n\t\"vault auth\": 3, // vault auth list\n\t\"vault kv\": 3, // vault kv get secret/api\n\tvercel: 2, // vercel deploy\n\tvolta: 2, // volta install node\n\twp: 2, // wp plugin install\n\tyarn: 2, // yarn add react\n\t\"yarn dlx\": 3, // yarn dlx create-react-app\n\t\"yarn run\": 3, // yarn run dev\n};\n"]}
+{"version":3,"file":"arity.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/arity.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,SAAS,GAAG;IACxB,MAAM,CAAC,MAAgB;QACtB,KAAK,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,CAAC;CACD,CAAC;AAEF;;;;;;;;;;;;EAYE;AACF,MAAM,KAAK,GAA2B;IACrC,GAAG,EAAE,CAAC,EAAE,eAAe;IACvB,EAAE,EAAE,CAAC,EAAE,kBAAkB;IACzB,KAAK,EAAE,CAAC,EAAE,sBAAsB;IAChC,KAAK,EAAE,CAAC,EAAE,4BAA4B;IACtC,EAAE,EAAE,CAAC,EAAE,yBAAyB;IAChC,IAAI,EAAE,CAAC,EAAE,qBAAqB;IAC9B,GAAG,EAAE,CAAC,EAAE,MAAM;IACd,MAAM,EAAE,CAAC,EAAE,uBAAuB;IAClC,IAAI,EAAE,CAAC,EAAE,wBAAwB;IACjC,IAAI,EAAE,CAAC,EAAE,YAAY;IACrB,OAAO,EAAE,CAAC,EAAE,kBAAkB;IAC9B,EAAE,EAAE,CAAC,EAAE,sBAAsB;IAC7B,EAAE,EAAE,CAAC,EAAE,SAAS;IAChB,KAAK,EAAE,CAAC,EAAE,gBAAgB;IAC1B,EAAE,EAAE,CAAC,EAAE,qBAAqB;IAC5B,EAAE,EAAE,CAAC,EAAE,SAAS;IAChB,GAAG,EAAE,CAAC,EAAE,MAAM;IACd,EAAE,EAAE,CAAC,EAAE,cAAc;IACrB,KAAK,EAAE,CAAC,EAAE,kBAAkB;IAC5B,KAAK,EAAE,CAAC,EAAE,UAAU;IACpB,MAAM,EAAE,CAAC,EAAE,mBAAmB;IAC9B,IAAI,EAAE,CAAC,EAAE,kBAAkB;IAC3B,KAAK,EAAE,CAAC,EAAE,iBAAiB;IAC3B,KAAK,EAAE,CAAC,EAAE,YAAY;IACtB,KAAK,EAAE,CAAC,EAAE,aAAa;IACvB,GAAG,EAAE,CAAC,EAAE,YAAY;IACpB,EAAE,EAAE,CAAC,EAAE,uBAAuB;IAC9B,KAAK,EAAE,CAAC,EAAE,cAAc;IACxB,IAAI,EAAE,CAAC,EAAE,oBAAoB;IAC7B,GAAG,EAAE,CAAC,EAAE,cAAc;IACtB,SAAS,EAAE,CAAC,EAAE,cAAc;IAC5B,OAAO,EAAE,CAAC,EAAE,aAAa;IACzB,KAAK,EAAE,CAAC,EAAE,cAAc;IACxB,WAAW,EAAE,CAAC,EAAE,kBAAkB;IAClC,WAAW,EAAE,CAAC,EAAE,iBAAiB;IACjC,GAAG,EAAE,CAAC,EAAE,aAAa;IACrB,EAAE,EAAE,CAAC,EAAE,cAAc;IACrB,KAAK,EAAE,CAAC,EAAE,cAAc;IACxB,QAAQ,EAAE,CAAC,EAAE,2BAA2B;IACxC,MAAM,EAAE,CAAC,EAAE,iBAAiB;IAC5B,WAAW,EAAE,CAAC,EAAE,2BAA2B;IAC3C,MAAM,EAAE,CAAC,EAAE,YAAY;IACvB,IAAI,EAAE,CAAC,EAAE,qBAAqB;IAC9B,WAAW,EAAE,CAAC,EAAE,gBAAgB;IAChC,KAAK,EAAE,CAAC,EAAE,gCAAgC;IAC1C,MAAM,EAAE,CAAC,EAAE,mBAAmB;IAC9B,gBAAgB,EAAE,CAAC,EAAE,uBAAuB;IAC5C,gBAAgB,EAAE,CAAC,EAAE,oBAAoB;IACzC,kBAAkB,EAAE,CAAC,EAAE,sBAAsB;IAC7C,cAAc,EAAE,CAAC,EAAE,qBAAqB;IACxC,gBAAgB,EAAE,CAAC,EAAE,yBAAyB;IAC9C,eAAe,EAAE,CAAC,EAAE,mBAAmB;IACvC,MAAM,EAAE,CAAC,EAAE,sBAAsB;IACjC,eAAe,EAAE,CAAC,EAAE,wBAAwB;IAC5C,QAAQ,EAAE,CAAC,EAAE,kBAAkB;IAC/B,MAAM,EAAE,CAAC,EAAE,gBAAgB;IAC3B,MAAM,EAAE,CAAC,EAAE,gCAAgC;IAC3C,EAAE,EAAE,CAAC,EAAE,aAAa;IACpB,GAAG,EAAE,CAAC,EAAE,oBAAoB;IAC5B,YAAY,EAAE,CAAC,EAAE,uBAAuB;IACxC,YAAY,EAAE,CAAC,EAAE,wBAAwB;IACzC,WAAW,EAAE,CAAC,EAAE,gBAAgB;IAChC,EAAE,EAAE,CAAC,EAAE,WAAW;IAClB,MAAM,EAAE,CAAC,EAAE,eAAe;IAC1B,IAAI,EAAE,CAAC,EAAE,uBAAuB;IAChC,MAAM,EAAE,CAAC,EAAE,cAAc;IACzB,IAAI,EAAE,CAAC,EAAE,qBAAqB;IAC9B,EAAE,EAAE,CAAC,EAAE,eAAe;IACtB,SAAS,EAAE,CAAC,EAAE,eAAe;IAC7B,SAAS,EAAE,CAAC,EAAE,sBAAsB;IACpC,UAAU,EAAE,CAAC,EAAE,yBAAyB;IACxC,UAAU,EAAE,CAAC,EAAE,mCAAmC;IAClD,IAAI,EAAE,CAAC,EAAE,sBAAsB;IAC/B,aAAa,EAAE,CAAC,EAAE,sBAAsB;IACxC,OAAO,EAAE,CAAC,EAAE,mBAAmB;IAC/B,mBAAmB,EAAE,CAAC,EAAE,iCAAiC;IACzD,iBAAiB,EAAE,CAAC,EAAE,qCAAqC;IAC3D,SAAS,EAAE,CAAC,EAAE,oBAAoB;IAClC,IAAI,EAAE,CAAC,EAAE,aAAa;IACtB,EAAE,EAAE,CAAC,EAAE,gBAAgB;IACvB,UAAU,EAAE,CAAC,EAAE,wBAAwB;IACvC,QAAQ,EAAE,CAAC,EAAE,iBAAiB;IAC9B,OAAO,EAAE,CAAC,EAAE,eAAe;IAC3B,KAAK,EAAE,CAAC,EAAE,gBAAgB;IAC1B,GAAG,EAAE,CAAC,EAAE,cAAc;IACtB,EAAE,EAAE,CAAC,EAAE,6BAA6B;IACpC,GAAG,EAAE,CAAC,EAAE,cAAc;IACtB,UAAU,EAAE,CAAC,EAAE,gBAAgB;IAC/B,UAAU,EAAE,CAAC,EAAE,eAAe;IAC9B,SAAS,EAAE,CAAC,EAAE,cAAc;IAC5B,UAAU,EAAE,CAAC,EAAE,yBAAyB;IACxC,GAAG,EAAE,CAAC,EAAE,aAAa;IACrB,EAAE,EAAE,CAAC,EAAE,WAAW;IAClB,OAAO,EAAE,CAAC,EAAE,sBAAsB;IAClC,aAAa,EAAE,CAAC,EAAE,gCAAgC;IAClD,cAAc,EAAE,CAAC,EAAE,4BAA4B;IAC/C,GAAG,EAAE,CAAC,EAAE,oBAAoB;IAC5B,MAAM,EAAE,CAAC,EAAE,uBAAuB;IAClC,IAAI,EAAE,CAAC,EAAE,eAAe;IACxB,UAAU,EAAE,CAAC,EAAE,2BAA2B;IAC1C,WAAW,EAAE,CAAC,EAAE,iBAAiB;IACjC,UAAU,EAAE,CAAC,EAAE,eAAe;IAC9B,MAAM,EAAE,CAAC,EAAE,sBAAsB;IACjC,MAAM,EAAE,CAAC,EAAE,oBAAoB;IAC/B,kBAAkB,EAAE,CAAC,EAAE,sBAAsB;IAC7C,cAAc,EAAE,CAAC,EAAE,qBAAqB;IACxC,IAAI,EAAE,CAAC,EAAE,eAAe;IACxB,MAAM,EAAE,CAAC,EAAE,YAAY;IACvB,cAAc,EAAE,CAAC,EAAE,sBAAsB;IACzC,KAAK,EAAE,CAAC,EAAE,qBAAqB;IAC/B,MAAM,EAAE,CAAC,EAAE,qBAAqB;IAChC,IAAI,EAAE,CAAC,EAAE,kBAAkB;IAC3B,KAAK,EAAE,CAAC,EAAE,sBAAsB;IAChC,WAAW,EAAE,CAAC,EAAE,iBAAiB;IACjC,MAAM,EAAE,CAAC,EAAE,gBAAgB;IAC3B,UAAU,EAAE,CAAC,EAAE,oBAAoB;IACnC,IAAI,EAAE,CAAC,EAAE,sBAAsB;IAC/B,QAAQ,EAAE,CAAC,EAAE,eAAe;IAC5B,GAAG,EAAE,CAAC,EAAE,aAAa;IACrB,GAAG,EAAE,CAAC,EAAE,aAAa;IACrB,KAAK,EAAE,CAAC,EAAE,cAAc;IACxB,SAAS,EAAE,CAAC,EAAE,0BAA0B;IACxC,SAAS,EAAE,CAAC,EAAE,kBAAkB;IAChC,qBAAqB,EAAE,CAAC,EAAE,kCAAkC;IAC5D,IAAI,EAAE,CAAC,EAAE,kBAAkB;IAC3B,KAAK,EAAE,CAAC,EAAE,kBAAkB;IAC5B,GAAG,EAAE,CAAC,EAAE,eAAe;IACvB,KAAK,EAAE,CAAC,EAAE,cAAc;IACxB,YAAY,EAAE,CAAC,EAAE,kBAAkB;IACnC,UAAU,EAAE,CAAC,EAAE,0BAA0B;IACzC,MAAM,EAAE,CAAC,EAAE,gBAAgB;IAC3B,KAAK,EAAE,CAAC,EAAE,qBAAqB;IAC/B,EAAE,EAAE,CAAC,EAAE,oBAAoB;IAC3B,IAAI,EAAE,CAAC,EAAE,iBAAiB;IAC1B,UAAU,EAAE,CAAC,EAAE,4BAA4B;IAC3C,UAAU,EAAE,CAAC,EAAE,eAAe;CAC9B,CAAC","sourcesContent":["export const BashArity = {\n\tprefix(tokens: string[]): string[] {\n\t\tfor (let len = tokens.length; len > 0; len--) {\n\t\t\tconst prefix = tokens.slice(0, len).join(\" \");\n\t\t\tconst arity = ARITY[prefix];\n\t\t\tif (arity !== undefined) return tokens.slice(0, arity);\n\t\t}\n\t\tif (tokens.length === 0) return [];\n\t\treturn tokens.slice(0, 1);\n\t},\n};\n\n/* Generated with following prompt:\nYou are generating a dictionary of command-prefix arities for bash-style commands.\nThis dictionary is used to identify the \"human-understandable command\" from an input shell command.### **RULES (follow strictly)**1. Each entry maps a **command prefix string → number**, representing how many **tokens** define the command.\n2. **Flags NEVER count as tokens**. Only subcommands count.\n3. **Longest matching prefix wins**.\n4. **Only include a longer prefix if its arity is different from what the shorter prefix already implies**.   * Example: If `git` is 2, then do **not** include `git checkout`, `git commit`, etc. unless they require *different* arity.\n5. The output must be a **single JSON object**. Each entry should have a comment with an example real world matching command. DO NOT MAKE ANY OTHER COMMENTS. Should be alphabetical\n6. Include the **most commonly used commands** across many stacks and languages. More is better.### **Semantics examples*** `touch foo.txt` → `touch` (arity 1, explicitly listed)\n* `git checkout main` → `git checkout` (because `git` has arity 2)\n* `npm install` → `npm install` (because `npm` has arity 2)\n* `npm run dev` → `npm run dev` (because `npm run` has arity 3)\n* `python script.py` → `python script.py` (default: whole input, not in dictionary)### **Now generate the dictionary.**\n*/\nconst ARITY: Record<string, number> = {\n\tcat: 1, // cat file.txt\n\tcd: 1, // cd /path/to/dir\n\tchmod: 1, // chmod 755 script.sh\n\tchown: 1, // chown user:group file.txt\n\tcp: 1, // cp source.txt dest.txt\n\techo: 1, // echo \"hello world\"\n\tenv: 1, // env\n\texport: 1, // export PATH=/usr/bin\n\tgrep: 1, // grep pattern file.txt\n\tkill: 1, // kill 1234\n\tkillall: 1, // killall process\n\tln: 1, // ln -s source target\n\tls: 1, // ls -la\n\tmkdir: 1, // mkdir new-dir\n\tmv: 1, // mv old.txt new.txt\n\tps: 1, // ps aux\n\tpwd: 1, // pwd\n\trm: 1, // rm file.txt\n\trmdir: 1, // rmdir empty-dir\n\tsleep: 1, // sleep 5\n\tsource: 1, // source ~/.bashrc\n\ttail: 1, // tail -f log.txt\n\ttouch: 1, // touch file.txt\n\tunset: 1, // unset VAR\n\twhich: 1, // which node\n\taws: 3, // aws s3 ls\n\taz: 3, // az storage blob list\n\tbazel: 2, // bazel build\n\tbrew: 2, // brew install node\n\tbun: 2, // bun install\n\t\"bun run\": 3, // bun run dev\n\t\"bun x\": 3, // bun x vite\n\tcargo: 2, // cargo build\n\t\"cargo add\": 3, // cargo add tokio\n\t\"cargo run\": 3, // cargo run main\n\tcdk: 2, // cdk deploy\n\tcf: 2, // cf push app\n\tcmake: 2, // cmake build\n\tcomposer: 2, // composer require laravel\n\tconsul: 2, // consul members\n\t\"consul kv\": 3, // consul kv get config/app\n\tcrictl: 2, // crictl ps\n\tdeno: 2, // deno run server.ts\n\t\"deno task\": 3, // deno task dev\n\tdoctl: 3, // doctl kubernetes cluster list\n\tdocker: 2, // docker run nginx\n\t\"docker builder\": 3, // docker builder prune\n\t\"docker compose\": 3, // docker compose up\n\t\"docker container\": 3, // docker container ls\n\t\"docker image\": 3, // docker image prune\n\t\"docker network\": 3, // docker network inspect\n\t\"docker volume\": 3, // docker volume ls\n\teksctl: 2, // eksctl get clusters\n\t\"eksctl create\": 3, // eksctl create cluster\n\tfirebase: 2, // firebase deploy\n\tflyctl: 2, // flyctl deploy\n\tgcloud: 3, // gcloud compute instances list\n\tgh: 3, // gh pr list\n\tgit: 2, // git checkout main\n\t\"git config\": 3, // git config user.name\n\t\"git remote\": 3, // git remote add origin\n\t\"git stash\": 3, // git stash pop\n\tgo: 2, // go build\n\tgradle: 2, // gradle build\n\thelm: 2, // helm install mychart\n\theroku: 2, // heroku logs\n\thugo: 2, // hugo new site blog\n\tip: 2, // ip link show\n\t\"ip addr\": 3, // ip addr show\n\t\"ip link\": 3, // ip link set eth0 up\n\t\"ip netns\": 3, // ip netns exec foo bash\n\t\"ip route\": 3, // ip route add default via 1.1.1.1\n\tkind: 2, // kind delete cluster\n\t\"kind create\": 3, // kind create cluster\n\tkubectl: 2, // kubectl get pods\n\t\"kubectl kustomize\": 3, // kubectl kustomize overlays/dev\n\t\"kubectl rollout\": 3, // kubectl rollout restart deploy/api\n\tkustomize: 2, // kustomize build .\n\tmake: 2, // make build\n\tmc: 2, // mc ls myminio\n\t\"mc admin\": 3, // mc admin info myminio\n\tminikube: 2, // minikube start\n\tmongosh: 2, // mongosh test\n\tmysql: 2, // mysql -u root\n\tmvn: 2, // mvn compile\n\tng: 2, // ng generate component home\n\tnpm: 2, // npm install\n\t\"npm exec\": 3, // npm exec vite\n\t\"npm init\": 3, // npm init vue\n\t\"npm run\": 3, // npm run dev\n\t\"npm view\": 3, // npm view react version\n\tnvm: 2, // nvm use 18\n\tnx: 2, // nx build\n\topenssl: 2, // openssl genrsa 2048\n\t\"openssl req\": 3, // openssl req -new -key key.pem\n\t\"openssl x509\": 3, // openssl x509 -in cert.pem\n\tpip: 2, // pip install numpy\n\tpipenv: 2, // pipenv install flask\n\tpnpm: 2, // pnpm install\n\t\"pnpm dlx\": 3, // pnpm dlx create-next-app\n\t\"pnpm exec\": 3, // pnpm exec vite\n\t\"pnpm run\": 3, // pnpm run dev\n\tpoetry: 2, // poetry add requests\n\tpodman: 2, // podman run alpine\n\t\"podman container\": 3, // podman container ls\n\t\"podman image\": 3, // podman image prune\n\tpsql: 2, // psql -d mydb\n\tpulumi: 2, // pulumi up\n\t\"pulumi stack\": 3, // pulumi stack output\n\tpyenv: 2, // pyenv install 3.11\n\tpython: 2, // python -m venv env\n\trake: 2, // rake db:migrate\n\trbenv: 2, // rbenv install 3.2.0\n\t\"redis-cli\": 2, // redis-cli ping\n\trustup: 2, // rustup update\n\tserverless: 2, // serverless invoke\n\tsfdx: 3, // sfdx force:org:list\n\tskaffold: 2, // skaffold dev\n\tsls: 2, // sls deploy\n\tsst: 2, // sst deploy\n\tswift: 2, // swift build\n\tsystemctl: 2, // systemctl restart nginx\n\tterraform: 2, // terraform apply\n\t\"terraform workspace\": 3, // terraform workspace select prod\n\ttmux: 2, // tmux new -s dev\n\tturbo: 2, // turbo run build\n\tufw: 2, // ufw allow 22\n\tvault: 2, // vault login\n\t\"vault auth\": 3, // vault auth list\n\t\"vault kv\": 3, // vault kv get secret/api\n\tvercel: 2, // vercel deploy\n\tvolta: 2, // volta install node\n\twp: 2, // wp plugin install\n\tyarn: 2, // yarn add react\n\t\"yarn dlx\": 3, // yarn dlx create-react-app\n\t\"yarn run\": 3, // yarn run dev\n};\n"]}

package/dist/core/extensions/builtin/permission-system/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/cli.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAgB,OAAO,EAAE,MAAM,YAAY,CAAC;AAExD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAoB1D;AAED,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAOhE;AAED,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAI5D","sourcesContent":["import type { ExtensionAPI } from \"../../types.ts\";\nimport type { Action, Rule, Ruleset } from \"./types.ts\";\n\nexport function parsePermissionFlag(value: string): Ruleset {\n\tconst rules: Rule[] = [];\n\tconst entries = value.split(\",\");\n\n\tfor (const entry of entries) {\n\t\tconst trimmed = entry.trim();\n\t\tif (!trimmed) continue;\n\n\t\tconst match = trimmed.match(/^([^:=]+)(?::([^=]+))?=(.+)$/);\n\t\tif (!match) continue;\n\n\t\tconst [, permission, pattern, action] = match;\n\t\trules.push({\n\t\t\tpermission: permission.trim(),\n\t\t\tpattern: pattern ? pattern.trim() : \"*\",\n\t\t\taction: action.trim() as Action,\n\t\t});\n\t}\n\n\treturn rules;\n}\n\nexport function registerPermissionFlag(pi: ExtensionAPI): Ruleset {\n\tpi.registerFlag(\"permission\", {\n\t\tdescription: \"Set permission rules (format: tool=action or tool:pattern=action)\",\n\t\ttype: \"string\",\n\t});\n\n\treturn [];\n}\n\nexport function loadPermissionFlag(pi: ExtensionAPI): Ruleset {\n\tconst flagValue = pi.getFlag(\"permission\") as string | undefined;\n\tif (!flagValue) return [];\n\treturn parsePermissionFlag(flagValue);\n}\n"]}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/cli.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAgB,OAAO,EAAE,MAAM,YAAY,CAAC;AAExD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAoB1D;AAED,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAOhE;AAED,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAI5D"}

package/dist/core/extensions/builtin/permission-system/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/cli.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAW;IAC3D,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC;YACV,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE;YAC7B,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG;YACvC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAY;SAC/B,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AAAA,CACb;AAED,MAAM,UAAU,sBAAsB,CAAC,EAAgB,EAAW;IACjE,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE;QAC7B,WAAW,EAAE,mEAAmE;QAChF,IAAI,EAAE,QAAQ;KACd,CAAC,CAAC;IAEH,OAAO,EAAE,CAAC;AAAA,CACV;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAgB,EAAW;IAC7D,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAuB,CAAC;IACjE,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAC1B,OAAO,mBAAmB,CAAC,SAAS,CAAC,CAAC;AAAA,CACtC","sourcesContent":["import type { ExtensionAPI } from \"../../types.ts\";\nimport type { Action, Rule, Ruleset } from \"./types.ts\";\n\nexport function parsePermissionFlag(value: string): Ruleset {\n\tconst rules: Rule[] = [];\n\tconst entries = value.split(\",\");\n\n\tfor (const entry of entries) {\n\t\tconst trimmed = entry.trim();\n\t\tif (!trimmed) continue;\n\n\t\tconst match = trimmed.match(/^([^:=]+)(?::([^=]+))?=(.+)$/);\n\t\tif (!match) continue;\n\n\t\tconst [, permission, pattern, action] = match;\n\t\trules.push({\n\t\t\tpermission: permission.trim(),\n\t\t\tpattern: pattern ? pattern.trim() : \"*\",\n\t\t\taction: action.trim() as Action,\n\t\t});\n\t}\n\n\treturn rules;\n}\n\nexport function registerPermissionFlag(pi: ExtensionAPI): Ruleset {\n\tpi.registerFlag(\"permission\", {\n\t\tdescription: \"Set permission rules (format: tool=action or tool:pattern=action)\",\n\t\ttype: \"string\",\n\t});\n\n\treturn [];\n}\n\nexport function loadPermissionFlag(pi: ExtensionAPI): Ruleset {\n\tconst flagValue = pi.getFlag(\"permission\") as string | undefined;\n\tif (!flagValue) return [];\n\treturn parsePermissionFlag(flagValue);\n}\n"]}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/cli.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAChD,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC;YACV,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE;YAC7B,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG;YACvC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAY;SAC/B,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,EAAgB;IACtD,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE;QAC7B,WAAW,EAAE,mEAAmE;QAChF,IAAI,EAAE,QAAQ;KACd,CAAC,CAAC;IAEH,OAAO,EAAE,CAAC;AACX,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAgB;IAClD,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAuB,CAAC;IACjE,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAC1B,OAAO,mBAAmB,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC","sourcesContent":["import type { ExtensionAPI } from \"../../types.ts\";\nimport type { Action, Rule, Ruleset } from \"./types.ts\";\n\nexport function parsePermissionFlag(value: string): Ruleset {\n\tconst rules: Rule[] = [];\n\tconst entries = value.split(\",\");\n\n\tfor (const entry of entries) {\n\t\tconst trimmed = entry.trim();\n\t\tif (!trimmed) continue;\n\n\t\tconst match = trimmed.match(/^([^:=]+)(?::([^=]+))?=(.+)$/);\n\t\tif (!match) continue;\n\n\t\tconst [, permission, pattern, action] = match;\n\t\trules.push({\n\t\t\tpermission: permission.trim(),\n\t\t\tpattern: pattern ? pattern.trim() : \"*\",\n\t\t\taction: action.trim() as Action,\n\t\t});\n\t}\n\n\treturn rules;\n}\n\nexport function registerPermissionFlag(pi: ExtensionAPI): Ruleset {\n\tpi.registerFlag(\"permission\", {\n\t\tdescription: \"Set permission rules (format: tool=action or tool:pattern=action)\",\n\t\ttype: \"string\",\n\t});\n\n\treturn [];\n}\n\nexport function loadPermissionFlag(pi: ExtensionAPI): Ruleset {\n\tconst flagValue = pi.getFlag(\"permission\") as string | undefined;\n\tif (!flagValue) return [];\n\treturn parsePermissionFlag(flagValue);\n}\n"]}

package/dist/core/extensions/builtin/permission-system/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAQ,OAAO,EAAE,MAAM,YAAY,CAAC;AAGlE,eAAO,MAAM,UAAU,UAAgD,CAAC;AAExE,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAc3C;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAc5D;AAED,wBAAgB,KAAK,CAAC,GAAG,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAErD;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAgBvE","sourcesContent":["import os from \"node:os\";\nimport type { PermissionConfig, Rule, Ruleset } from \"./types.ts\";\nimport { Wildcard } from \"./wildcard.ts\";\n\nexport const EDIT_TOOLS = [\"edit\", \"write\", \"apply_patch\", \"multiedit\"];\n\nexport function expand(path: string): string {\n\tif (path.startsWith(\"~/\")) {\n\t\treturn os.homedir() + path.slice(1);\n\t}\n\tif (path === \"~\") {\n\t\treturn os.homedir();\n\t}\n\tif (path.startsWith(\"$HOME/\")) {\n\t\treturn os.homedir() + path.slice(5);\n\t}\n\tif (path.startsWith(\"$HOME\")) {\n\t\treturn os.homedir() + path.slice(5);\n\t}\n\treturn path;\n}\n\nexport function fromConfig(config: PermissionConfig): Ruleset {\n\tconst rules: Rule[] = [];\n\n\tfor (const [permission, value] of Object.entries(config)) {\n\t\tif (typeof value === \"string\") {\n\t\t\trules.push({ permission, pattern: \"*\", action: value });\n\t\t} else {\n\t\t\tfor (const [pattern, action] of Object.entries(value)) {\n\t\t\t\trules.push({ permission, pattern: expand(pattern), action });\n\t\t\t}\n\t\t}\n\t}\n\n\treturn rules;\n}\n\nexport function merge(...rulesets: Ruleset[]): Ruleset {\n\treturn rulesets.flat();\n}\n\nexport function disabled(tools: string[], ruleset: Ruleset): Set<string> {\n\tconst result = new Set<string>();\n\n\tfor (const tool of tools) {\n\t\tconst permission = EDIT_TOOLS.includes(tool) ? \"edit\" : tool;\n\n\t\tconst rule = ruleset.findLast((rule) => {\n\t\t\treturn Wildcard.match(permission, rule.permission);\n\t\t});\n\n\t\tif (rule && rule.pattern === \"*\" && rule.action === \"deny\") {\n\t\t\tresult.add(tool);\n\t\t}\n\t}\n\n\treturn result;\n}\n"]}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAQ,OAAO,EAAE,MAAM,YAAY,CAAC;AAGlE,eAAO,MAAM,UAAU,UAAgD,CAAC;AAExE,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAc3C;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAc5D;AAED,wBAAgB,KAAK,CAAC,GAAG,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,CAErD;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAgBvE"}

package/dist/core/extensions/builtin/permission-system/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;AAExE,MAAM,UAAU,MAAM,CAAC,IAAY,EAAU;IAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,MAAM,UAAU,UAAU,CAAC,MAAwB,EAAW;IAC7D,MAAM,KAAK,GAAW,EAAE,CAAC;IAEzB,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACP,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9D,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,KAAK,CAAC;AAAA,CACb;AAED,MAAM,UAAU,KAAK,CAAC,GAAG,QAAmB,EAAW;IACtD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AAAA,CACvB;AAED,MAAM,UAAU,QAAQ,CAAC,KAAe,EAAE,OAAgB,EAAe;IACxE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QAE7D,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,OAAO,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAAA,CACnD,CAAC,CAAC;QAEH,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACF,CAAC;IAED,OAAO,MAAM,CAAC;AAAA,CACd","sourcesContent":["import os from \"node:os\";\nimport type { PermissionConfig, Rule, Ruleset } from \"./types.ts\";\nimport { Wildcard } from \"./wildcard.ts\";\n\nexport const EDIT_TOOLS = [\"edit\", \"write\", \"apply_patch\", \"multiedit\"];\n\nexport function expand(path: string): string {\n\tif (path.startsWith(\"~/\")) {\n\t\treturn os.homedir() + path.slice(1);\n\t}\n\tif (path === \"~\") {\n\t\treturn os.homedir();\n\t}\n\tif (path.startsWith(\"$HOME/\")) {\n\t\treturn os.homedir() + path.slice(5);\n\t}\n\tif (path.startsWith(\"$HOME\")) {\n\t\treturn os.homedir() + path.slice(5);\n\t}\n\treturn path;\n}\n\nexport function fromConfig(config: PermissionConfig): Ruleset {\n\tconst rules: Rule[] = [];\n\n\tfor (const [permission, value] of Object.entries(config)) {\n\t\tif (typeof value === \"string\") {\n\t\t\trules.push({ permission, pattern: \"*\", action: value });\n\t\t} else {\n\t\t\tfor (const [pattern, action] of Object.entries(value)) {\n\t\t\t\trules.push({ permission, pattern: expand(pattern), action });\n\t\t\t}\n\t\t}\n\t}\n\n\treturn rules;\n}\n\nexport function merge(...rulesets: Ruleset[]): Ruleset {\n\treturn rulesets.flat();\n}\n\nexport function disabled(tools: string[], ruleset: Ruleset): Set<string> {\n\tconst result = new Set<string>();\n\n\tfor (const tool of tools) {\n\t\tconst permission = EDIT_TOOLS.includes(tool) ? \"edit\" : tool;\n\n\t\tconst rule = ruleset.findLast((rule) => {\n\t\t\treturn Wildcard.match(permission, rule.permission);\n\t\t});\n\n\t\tif (rule && rule.pattern === \"*\" && rule.action === \"deny\") {\n\t\t\tresult.add(tool);\n\t\t}\n\t}\n\n\treturn result;\n}\n"]}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;AAExE,MAAM,UAAU,MAAM,CAAC,IAAY;IAClC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAwB;IAClD,MAAM,KAAK,GAAW,EAAE,CAAC;IAEzB,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACP,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvD,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9D,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAG,QAAmB;IAC3C,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAe,EAAE,OAAgB;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QAE7D,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE;YACtC,OAAO,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACF,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC","sourcesContent":["import os from \"node:os\";\nimport type { PermissionConfig, Rule, Ruleset } from \"./types.ts\";\nimport { Wildcard } from \"./wildcard.ts\";\n\nexport const EDIT_TOOLS = [\"edit\", \"write\", \"apply_patch\", \"multiedit\"];\n\nexport function expand(path: string): string {\n\tif (path.startsWith(\"~/\")) {\n\t\treturn os.homedir() + path.slice(1);\n\t}\n\tif (path === \"~\") {\n\t\treturn os.homedir();\n\t}\n\tif (path.startsWith(\"$HOME/\")) {\n\t\treturn os.homedir() + path.slice(5);\n\t}\n\tif (path.startsWith(\"$HOME\")) {\n\t\treturn os.homedir() + path.slice(5);\n\t}\n\treturn path;\n}\n\nexport function fromConfig(config: PermissionConfig): Ruleset {\n\tconst rules: Rule[] = [];\n\n\tfor (const [permission, value] of Object.entries(config)) {\n\t\tif (typeof value === \"string\") {\n\t\t\trules.push({ permission, pattern: \"*\", action: value });\n\t\t} else {\n\t\t\tfor (const [pattern, action] of Object.entries(value)) {\n\t\t\t\trules.push({ permission, pattern: expand(pattern), action });\n\t\t\t}\n\t\t}\n\t}\n\n\treturn rules;\n}\n\nexport function merge(...rulesets: Ruleset[]): Ruleset {\n\treturn rulesets.flat();\n}\n\nexport function disabled(tools: string[], ruleset: Ruleset): Set<string> {\n\tconst result = new Set<string>();\n\n\tfor (const tool of tools) {\n\t\tconst permission = EDIT_TOOLS.includes(tool) ? \"edit\" : tool;\n\n\t\tconst rule = ruleset.findLast((rule) => {\n\t\t\treturn Wildcard.match(permission, rule.permission);\n\t\t});\n\n\t\tif (rule && rule.pattern === \"*\" && rule.action === \"deny\") {\n\t\t\tresult.add(tool);\n\t\t}\n\t}\n\n\treturn result;\n}\n"]}

package/dist/core/extensions/builtin/permission-system/evaluate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evaluate.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/evaluate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAGnE,OAAO,CAAC,MAAM,CAAC,CAAC;IACf,UAAU,KAAK,CAAC,CAAC;QAChB,QAAQ,CAAC,CAAC,SAAS,CAAC,EACnB,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,EAC9D,OAAO,CAAC,EAAE,OAAO,GACf,CAAC,GAAG,SAAS,CAAC;QACjB,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC;KACxG;CACD;AAED,wBAAgB,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,CAU1F","sourcesContent":["import type { Rule, Ruleset } from \"../permission-system/types.ts\";\nimport { Wildcard } from \"./wildcard.ts\";\n\ndeclare global {\n\tinterface Array<T> {\n\t\tfindLast<S extends T>(\n\t\t\tpredicate: (value: T, index: number, array: T[]) => value is S,\n\t\t\tthisArg?: unknown,\n\t\t): S | undefined;\n\t\tfindLast(predicate: (value: T, index: number, array: T[]) => unknown, thisArg?: unknown): T | undefined;\n\t}\n}\n\nexport function evaluate(permission: string, pattern: string, ...rulesets: Ruleset[]): Rule {\n\tconst matchedRule = rulesets.flat().findLast((rule) => {\n\t\treturn Wildcard.match(permission, rule.permission) && matchesPattern(pattern, rule.pattern);\n\t});\n\n\tif (matchedRule) {\n\t\treturn matchedRule;\n\t}\n\n\treturn { action: \"ask\", permission, pattern: \"*\" };\n}\n\nfunction matchesPattern(value: string, pattern: string): boolean {\n\treturn Wildcard.match(value, pattern) || (pattern.endsWith(\" *\") && Wildcard.match(value, pattern.slice(0, -2)));\n}\n"]}
+{"version":3,"file":"evaluate.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/evaluate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAGnE,OAAO,CAAC,MAAM,CAAC;IACd,UAAU,KAAK,CAAC,CAAC;QAChB,QAAQ,CAAC,CAAC,SAAS,CAAC,EACnB,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,KAAK,IAAI,CAAC,EAC9D,OAAO,CAAC,EAAE,OAAO,GACf,CAAC,GAAG,SAAS,CAAC;QACjB,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC;KACxG;CACD;AAED,wBAAgB,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,CAU1F"}

package/dist/core/extensions/builtin/permission-system/evaluate.js.map

@@ -1 +1 @@
-{"version":3,"file":"evaluate.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/evaluate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAYzC,MAAM,UAAU,QAAQ,CAAC,UAAkB,EAAE,OAAe,EAAE,GAAG,QAAmB,EAAQ;IAC3F,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACtD,OAAO,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAAA,CAC5F,CAAC,CAAC;IAEH,IAAI,WAAW,EAAE,CAAC;QACjB,OAAO,WAAW,CAAC;IACpB,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAAA,CACnD;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,OAAe,EAAW;IAChE,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAAA,CACjH","sourcesContent":["import type { Rule, Ruleset } from \"../permission-system/types.ts\";\nimport { Wildcard } from \"./wildcard.ts\";\n\ndeclare global {\n\tinterface Array<T> {\n\t\tfindLast<S extends T>(\n\t\t\tpredicate: (value: T, index: number, array: T[]) => value is S,\n\t\t\tthisArg?: unknown,\n\t\t): S | undefined;\n\t\tfindLast(predicate: (value: T, index: number, array: T[]) => unknown, thisArg?: unknown): T | undefined;\n\t}\n}\n\nexport function evaluate(permission: string, pattern: string, ...rulesets: Ruleset[]): Rule {\n\tconst matchedRule = rulesets.flat().findLast((rule) => {\n\t\treturn Wildcard.match(permission, rule.permission) && matchesPattern(pattern, rule.pattern);\n\t});\n\n\tif (matchedRule) {\n\t\treturn matchedRule;\n\t}\n\n\treturn { action: \"ask\", permission, pattern: \"*\" };\n}\n\nfunction matchesPattern(value: string, pattern: string): boolean {\n\treturn Wildcard.match(value, pattern) || (pattern.endsWith(\" *\") && Wildcard.match(value, pattern.slice(0, -2)));\n}\n"]}
+{"version":3,"file":"evaluate.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/evaluate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAYzC,MAAM,UAAU,QAAQ,CAAC,UAAkB,EAAE,OAAe,EAAE,GAAG,QAAmB;IACnF,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE;QACrD,OAAO,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,IAAI,WAAW,EAAE,CAAC;QACjB,OAAO,WAAW,CAAC;IACpB,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,OAAe;IACrD,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClH,CAAC","sourcesContent":["import type { Rule, Ruleset } from \"../permission-system/types.ts\";\nimport { Wildcard } from \"./wildcard.ts\";\n\ndeclare global {\n\tinterface Array<T> {\n\t\tfindLast<S extends T>(\n\t\t\tpredicate: (value: T, index: number, array: T[]) => value is S,\n\t\t\tthisArg?: unknown,\n\t\t): S | undefined;\n\t\tfindLast(predicate: (value: T, index: number, array: T[]) => unknown, thisArg?: unknown): T | undefined;\n\t}\n}\n\nexport function evaluate(permission: string, pattern: string, ...rulesets: Ruleset[]): Rule {\n\tconst matchedRule = rulesets.flat().findLast((rule) => {\n\t\treturn Wildcard.match(permission, rule.permission) && matchesPattern(pattern, rule.pattern);\n\t});\n\n\tif (matchedRule) {\n\t\treturn matchedRule;\n\t}\n\n\treturn { action: \"ask\", permission, pattern: \"*\" };\n}\n\nfunction matchesPattern(value: string, pattern: string): boolean {\n\treturn Wildcard.match(value, pattern) || (pattern.endsWith(\" *\") && Wildcard.match(value, pattern.slice(0, -2)));\n}\n"]}

package/dist/core/extensions/builtin/permission-system/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE9D;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAE3C;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,kBAAkB,CAAC;CAC1B,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACtC;;;OAGG;IACH,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAElC;;;;;OAKG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACnF;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,YAAY,GAAG,sBAAsB,CAS3E;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,sBAAsB,GAAG;IACnE;;;;OAIG;IACH,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAEzD;;;;OAIG;IACH,SAAS,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAExE;;OAEG;IACH,KAAK,IAAI,IAAI,CAAC;CACd,CAyCA","sourcesContent":["import type { ExtensionAPI } from \"../../types.ts\";\nimport type { PermissionDecision, Request } from \"./types.ts\";\n\n/**\n * Event type for when a permission is asked.\n * Contains the full request information.\n */\nexport type PermissionAskedEvent = Request;\n\n/**\n * Event type for when a permission is replied to.\n * Contains the reply and identifiers to correlate with the request.\n */\nexport type PermissionRepliedEvent = {\n\trequestID: string;\n\tsessionID: string;\n\treply: PermissionDecision;\n};\n\n/**\n * Event emitter interface for permission events.\n * Injectable into services for loose coupling.\n */\nexport interface PermissionEventEmitter {\n\t/**\n\t * Emit a permission_asked event.\n\t * @param request - The permission request being asked\n\t */\n\temitAsked(request: Request): void;\n\n\t/**\n\t * Emit a permission_replied event.\n\t * @param requestID - The ID of the request being replied to\n\t * @param sessionID - The session ID associated with the request\n\t * @param reply - The user's reply (once, always, or reject)\n\t */\n\temitReplied(requestID: string, sessionID: string, reply: PermissionDecision): void;\n}\n\n/**\n * Creates an event emitter that wraps pi.events for inter-extension communication.\n * Use this when running within the pi extension system.\n *\n * @param pi - The ExtensionAPI provided by the pi extension system\n * @returns PermissionEventEmitter that emits via pi.events\n */\nexport function createEventEmitter(pi: ExtensionAPI): PermissionEventEmitter {\n\treturn {\n\t\temitAsked: (request: Request) => {\n\t\t\tpi.events.emit(\"permission_asked\", request);\n\t\t},\n\t\temitReplied: (requestID: string, sessionID: string, reply: PermissionDecision) => {\n\t\t\tpi.events.emit(\"permission_replied\", { requestID, sessionID, reply });\n\t\t},\n\t};\n}\n\n/**\n * Local event emitter implementation for standalone or test usage.\n * Uses a simple callback registry when pi.events is not available.\n *\n * @returns PermissionEventEmitter with local event handling\n */\nexport function createLocalEventEmitter(): PermissionEventEmitter & {\n\t/**\n\t * Register a handler for permission_asked events.\n\t * @param handler - Callback invoked when a permission is asked\n\t * @returns Unsubscribe function\n\t */\n\tonAsked(handler: (request: Request) => void): () => void;\n\n\t/**\n\t * Register a handler for permission_replied events.\n\t * @param handler - Callback invoked when a permission is replied to\n\t * @returns Unsubscribe function\n\t */\n\tonReplied(handler: (event: PermissionRepliedEvent) => void): () => void;\n\n\t/**\n\t * Clear all registered handlers.\n\t */\n\tclear(): void;\n} {\n\tconst askedHandlers = new Set<(request: Request) => void>();\n\tconst repliedHandlers = new Set<(event: PermissionRepliedEvent) => void>();\n\n\treturn {\n\t\temitAsked: (request: Request) => {\n\t\t\tfor (const handler of askedHandlers) {\n\t\t\t\ttry {\n\t\t\t\t\thandler(request);\n\t\t\t\t} catch (err) {\n\t\t\t\t\tconsole.error(\"Error in permission_asked handler:\", err);\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\n\t\temitReplied: (requestID: string, sessionID: string, reply: PermissionDecision) => {\n\t\t\tconst event: PermissionRepliedEvent = { requestID, sessionID, reply };\n\t\t\tfor (const handler of repliedHandlers) {\n\t\t\t\ttry {\n\t\t\t\t\thandler(event);\n\t\t\t\t} catch (err) {\n\t\t\t\t\tconsole.error(\"Error in permission_replied handler:\", err);\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\n\t\tonAsked: (handler: (request: Request) => void): (() => void) => {\n\t\t\taskedHandlers.add(handler);\n\t\t\treturn () => askedHandlers.delete(handler);\n\t\t},\n\n\t\tonReplied: (handler: (event: PermissionRepliedEvent) => void): (() => void) => {\n\t\t\trepliedHandlers.add(handler);\n\t\t\treturn () => repliedHandlers.delete(handler);\n\t\t},\n\n\t\tclear: () => {\n\t\t\taskedHandlers.clear();\n\t\t\trepliedHandlers.clear();\n\t\t},\n\t};\n}\n"]}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE9D;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAE3C;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,kBAAkB,CAAC;CAC1B,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACtC;;;OAGG;IACH,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IAElC;;;;;OAKG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACnF;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,YAAY,GAAG,sBAAsB,CAS3E;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,IAAI,sBAAsB,GAAG;IACnE;;;;OAIG;IACH,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAEzD;;;;OAIG;IACH,SAAS,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAExE;;OAEG;IACH,KAAK,IAAI,IAAI,CAAC;CACd,CAyCA"}

package/dist/core/extensions/builtin/permission-system/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/events.ts"],"names":[],"mappings":"AAuCA;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAgB,EAA0B;IAC5E,OAAO;QACN,SAAS,EAAE,CAAC,OAAgB,EAAE,EAAE,CAAC;YAChC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAAA,CAC5C;QACD,WAAW,EAAE,CAAC,SAAiB,EAAE,SAAiB,EAAE,KAAyB,EAAE,EAAE,CAAC;YACjF,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAAA,CACtE;KACD,CAAC;AAAA,CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,GAmBrC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC5D,MAAM,eAAe,GAAG,IAAI,GAAG,EAA2C,CAAC;IAE3E,OAAO;QACN,SAAS,EAAE,CAAC,OAAgB,EAAE,EAAE,CAAC;YAChC,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACJ,OAAO,CAAC,OAAO,CAAC,CAAC;gBAClB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;gBAC1D,CAAC;YACF,CAAC;QAAA,CACD;QAED,WAAW,EAAE,CAAC,SAAiB,EAAE,SAAiB,EAAE,KAAyB,EAAE,EAAE,CAAC;YACjF,MAAM,KAAK,GAA2B,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACtE,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;gBACvC,IAAI,CAAC;oBACJ,OAAO,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;gBAC5D,CAAC;YACF,CAAC;QAAA,CACD;QAED,OAAO,EAAE,CAAC,OAAmC,EAAgB,EAAE,CAAC;YAC/D,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3B,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAA,CAC3C;QAED,SAAS,EAAE,CAAC,OAAgD,EAAgB,EAAE,CAAC;YAC9E,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAA,CAC7C;QAED,KAAK,EAAE,GAAG,EAAE,CAAC;YACZ,aAAa,CAAC,KAAK,EAAE,CAAC;YACtB,eAAe,CAAC,KAAK,EAAE,CAAC;QAAA,CACxB;KACD,CAAC;AAAA,CACF","sourcesContent":["import type { ExtensionAPI } from \"../../types.ts\";\nimport type { PermissionDecision, Request } from \"./types.ts\";\n\n/**\n * Event type for when a permission is asked.\n * Contains the full request information.\n */\nexport type PermissionAskedEvent = Request;\n\n/**\n * Event type for when a permission is replied to.\n * Contains the reply and identifiers to correlate with the request.\n */\nexport type PermissionRepliedEvent = {\n\trequestID: string;\n\tsessionID: string;\n\treply: PermissionDecision;\n};\n\n/**\n * Event emitter interface for permission events.\n * Injectable into services for loose coupling.\n */\nexport interface PermissionEventEmitter {\n\t/**\n\t * Emit a permission_asked event.\n\t * @param request - The permission request being asked\n\t */\n\temitAsked(request: Request): void;\n\n\t/**\n\t * Emit a permission_replied event.\n\t * @param requestID - The ID of the request being replied to\n\t * @param sessionID - The session ID associated with the request\n\t * @param reply - The user's reply (once, always, or reject)\n\t */\n\temitReplied(requestID: string, sessionID: string, reply: PermissionDecision): void;\n}\n\n/**\n * Creates an event emitter that wraps pi.events for inter-extension communication.\n * Use this when running within the pi extension system.\n *\n * @param pi - The ExtensionAPI provided by the pi extension system\n * @returns PermissionEventEmitter that emits via pi.events\n */\nexport function createEventEmitter(pi: ExtensionAPI): PermissionEventEmitter {\n\treturn {\n\t\temitAsked: (request: Request) => {\n\t\t\tpi.events.emit(\"permission_asked\", request);\n\t\t},\n\t\temitReplied: (requestID: string, sessionID: string, reply: PermissionDecision) => {\n\t\t\tpi.events.emit(\"permission_replied\", { requestID, sessionID, reply });\n\t\t},\n\t};\n}\n\n/**\n * Local event emitter implementation for standalone or test usage.\n * Uses a simple callback registry when pi.events is not available.\n *\n * @returns PermissionEventEmitter with local event handling\n */\nexport function createLocalEventEmitter(): PermissionEventEmitter & {\n\t/**\n\t * Register a handler for permission_asked events.\n\t * @param handler - Callback invoked when a permission is asked\n\t * @returns Unsubscribe function\n\t */\n\tonAsked(handler: (request: Request) => void): () => void;\n\n\t/**\n\t * Register a handler for permission_replied events.\n\t * @param handler - Callback invoked when a permission is replied to\n\t * @returns Unsubscribe function\n\t */\n\tonReplied(handler: (event: PermissionRepliedEvent) => void): () => void;\n\n\t/**\n\t * Clear all registered handlers.\n\t */\n\tclear(): void;\n} {\n\tconst askedHandlers = new Set<(request: Request) => void>();\n\tconst repliedHandlers = new Set<(event: PermissionRepliedEvent) => void>();\n\n\treturn {\n\t\temitAsked: (request: Request) => {\n\t\t\tfor (const handler of askedHandlers) {\n\t\t\t\ttry {\n\t\t\t\t\thandler(request);\n\t\t\t\t} catch (err) {\n\t\t\t\t\tconsole.error(\"Error in permission_asked handler:\", err);\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\n\t\temitReplied: (requestID: string, sessionID: string, reply: PermissionDecision) => {\n\t\t\tconst event: PermissionRepliedEvent = { requestID, sessionID, reply };\n\t\t\tfor (const handler of repliedHandlers) {\n\t\t\t\ttry {\n\t\t\t\t\thandler(event);\n\t\t\t\t} catch (err) {\n\t\t\t\t\tconsole.error(\"Error in permission_replied handler:\", err);\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\n\t\tonAsked: (handler: (request: Request) => void): (() => void) => {\n\t\t\taskedHandlers.add(handler);\n\t\t\treturn () => askedHandlers.delete(handler);\n\t\t},\n\n\t\tonReplied: (handler: (event: PermissionRepliedEvent) => void): (() => void) => {\n\t\t\trepliedHandlers.add(handler);\n\t\t\treturn () => repliedHandlers.delete(handler);\n\t\t},\n\n\t\tclear: () => {\n\t\t\taskedHandlers.clear();\n\t\t\trepliedHandlers.clear();\n\t\t},\n\t};\n}\n"]}
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/events.ts"],"names":[],"mappings":"AAuCA;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAgB;IAClD,OAAO;QACN,SAAS,EAAE,CAAC,OAAgB,EAAE,EAAE;YAC/B,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QACD,WAAW,EAAE,CAAC,SAAiB,EAAE,SAAiB,EAAE,KAAyB,EAAE,EAAE;YAChF,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,CAAC;KACD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB;IAoBtC,MAAM,aAAa,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC5D,MAAM,eAAe,GAAG,IAAI,GAAG,EAA2C,CAAC;IAE3E,OAAO;QACN,SAAS,EAAE,CAAC,OAAgB,EAAE,EAAE;YAC/B,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACJ,OAAO,CAAC,OAAO,CAAC,CAAC;gBAClB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;gBAC1D,CAAC;YACF,CAAC;QACF,CAAC;QAED,WAAW,EAAE,CAAC,SAAiB,EAAE,SAAiB,EAAE,KAAyB,EAAE,EAAE;YAChF,MAAM,KAAK,GAA2B,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACtE,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;gBACvC,IAAI,CAAC;oBACJ,OAAO,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;gBAC5D,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,EAAE,CAAC,OAAmC,EAAgB,EAAE;YAC9D,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3B,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,SAAS,EAAE,CAAC,OAAgD,EAAgB,EAAE;YAC7E,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAED,KAAK,EAAE,GAAG,EAAE;YACX,aAAa,CAAC,KAAK,EAAE,CAAC;YACtB,eAAe,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;KACD,CAAC;AACH,CAAC","sourcesContent":["import type { ExtensionAPI } from \"../../types.ts\";\nimport type { PermissionDecision, Request } from \"./types.ts\";\n\n/**\n * Event type for when a permission is asked.\n * Contains the full request information.\n */\nexport type PermissionAskedEvent = Request;\n\n/**\n * Event type for when a permission is replied to.\n * Contains the reply and identifiers to correlate with the request.\n */\nexport type PermissionRepliedEvent = {\n\trequestID: string;\n\tsessionID: string;\n\treply: PermissionDecision;\n};\n\n/**\n * Event emitter interface for permission events.\n * Injectable into services for loose coupling.\n */\nexport interface PermissionEventEmitter {\n\t/**\n\t * Emit a permission_asked event.\n\t * @param request - The permission request being asked\n\t */\n\temitAsked(request: Request): void;\n\n\t/**\n\t * Emit a permission_replied event.\n\t * @param requestID - The ID of the request being replied to\n\t * @param sessionID - The session ID associated with the request\n\t * @param reply - The user's reply (once, always, or reject)\n\t */\n\temitReplied(requestID: string, sessionID: string, reply: PermissionDecision): void;\n}\n\n/**\n * Creates an event emitter that wraps pi.events for inter-extension communication.\n * Use this when running within the pi extension system.\n *\n * @param pi - The ExtensionAPI provided by the pi extension system\n * @returns PermissionEventEmitter that emits via pi.events\n */\nexport function createEventEmitter(pi: ExtensionAPI): PermissionEventEmitter {\n\treturn {\n\t\temitAsked: (request: Request) => {\n\t\t\tpi.events.emit(\"permission_asked\", request);\n\t\t},\n\t\temitReplied: (requestID: string, sessionID: string, reply: PermissionDecision) => {\n\t\t\tpi.events.emit(\"permission_replied\", { requestID, sessionID, reply });\n\t\t},\n\t};\n}\n\n/**\n * Local event emitter implementation for standalone or test usage.\n * Uses a simple callback registry when pi.events is not available.\n *\n * @returns PermissionEventEmitter with local event handling\n */\nexport function createLocalEventEmitter(): PermissionEventEmitter & {\n\t/**\n\t * Register a handler for permission_asked events.\n\t * @param handler - Callback invoked when a permission is asked\n\t * @returns Unsubscribe function\n\t */\n\tonAsked(handler: (request: Request) => void): () => void;\n\n\t/**\n\t * Register a handler for permission_replied events.\n\t * @param handler - Callback invoked when a permission is replied to\n\t * @returns Unsubscribe function\n\t */\n\tonReplied(handler: (event: PermissionRepliedEvent) => void): () => void;\n\n\t/**\n\t * Clear all registered handlers.\n\t */\n\tclear(): void;\n} {\n\tconst askedHandlers = new Set<(request: Request) => void>();\n\tconst repliedHandlers = new Set<(event: PermissionRepliedEvent) => void>();\n\n\treturn {\n\t\temitAsked: (request: Request) => {\n\t\t\tfor (const handler of askedHandlers) {\n\t\t\t\ttry {\n\t\t\t\t\thandler(request);\n\t\t\t\t} catch (err) {\n\t\t\t\t\tconsole.error(\"Error in permission_asked handler:\", err);\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\n\t\temitReplied: (requestID: string, sessionID: string, reply: PermissionDecision) => {\n\t\t\tconst event: PermissionRepliedEvent = { requestID, sessionID, reply };\n\t\t\tfor (const handler of repliedHandlers) {\n\t\t\t\ttry {\n\t\t\t\t\thandler(event);\n\t\t\t\t} catch (err) {\n\t\t\t\t\tconsole.error(\"Error in permission_replied handler:\", err);\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\n\t\tonAsked: (handler: (request: Request) => void): (() => void) => {\n\t\t\taskedHandlers.add(handler);\n\t\t\treturn () => askedHandlers.delete(handler);\n\t\t},\n\n\t\tonReplied: (handler: (event: PermissionRepliedEvent) => void): (() => void) => {\n\t\t\trepliedHandlers.add(handler);\n\t\t\treturn () => repliedHandlers.delete(handler);\n\t\t},\n\n\t\tclear: () => {\n\t\t\taskedHandlers.clear();\n\t\t\trepliedHandlers.clear();\n\t\t},\n\t};\n}\n"]}

package/dist/core/extensions/builtin/permission-system/external-dir.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"external-dir.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/external-dir.ts"],"names":[],"mappings":"AAIA,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAcpD;AAWD,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAatE;AAgFD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAgC3E","sourcesContent":["import * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport * as path from \"node:path\";\n\nexport function expandHome(inputPath: string): string {\n\tif (inputPath === \"~\") {\n\t\treturn os.homedir();\n\t}\n\tif (inputPath.startsWith(\"~/\") || inputPath.startsWith(\"~\\\\\")) {\n\t\treturn path.join(os.homedir(), inputPath.slice(2));\n\t}\n\tif (inputPath.startsWith(\"$HOME/\") || inputPath.startsWith(\"$HOME\\\\\")) {\n\t\treturn path.join(os.homedir(), inputPath.slice(6));\n\t}\n\tif (inputPath === \"$HOME\") {\n\t\treturn os.homedir();\n\t}\n\treturn inputPath;\n}\n\nfunction normalizePath(inputPath: string): string {\n\ttry {\n\t\tif (fs.existsSync(inputPath)) {\n\t\t\treturn fs.realpathSync(inputPath);\n\t\t}\n\t} catch {}\n\treturn path.normalize(inputPath);\n}\n\nexport function isExternalPath(inputPath: string, cwd: string): boolean {\n\tconst expandedPath = expandHome(inputPath);\n\tconst absolutePath = path.resolve(cwd, expandedPath);\n\tconst normalizedTarget = normalizePath(absolutePath);\n\tconst normalizedCwd = normalizePath(cwd);\n\n\tif (normalizedTarget === normalizedCwd) {\n\t\treturn false;\n\t}\n\n\tconst cwdWithSeparator = normalizedCwd.endsWith(path.sep) ? normalizedCwd : normalizedCwd + path.sep;\n\n\treturn !normalizedTarget.startsWith(cwdWithSeparator);\n}\n\nfunction tokenizeCommand(command: string): string[] {\n\tconst tokens: string[] = [];\n\tlet current = \"\";\n\tlet inQuotes: string | null = null;\n\tlet escaped = false;\n\n\tfor (let i = 0; i < command.length; i++) {\n\t\tconst char = command[i];\n\n\t\tif (escaped) {\n\t\t\tcurrent += char;\n\t\t\tescaped = false;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (char === \"\\\\\") {\n\t\t\tescaped = true;\n\t\t\tcurrent += char;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (inQuotes) {\n\t\t\tif (char === inQuotes) {\n\t\t\t\tinQuotes = null;\n\t\t\t}\n\t\t\tcurrent += char;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (char === '\"' || char === \"'\") {\n\t\t\tinQuotes = char;\n\t\t\tcurrent += char;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (char === \" \" || char === \"\\t\") {\n\t\t\tif (current.length > 0) {\n\t\t\t\ttokens.push(current);\n\t\t\t\tcurrent = \"\";\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\n\t\tcurrent += char;\n\t}\n\n\tif (current.length > 0) {\n\t\ttokens.push(current);\n\t}\n\n\treturn tokens;\n}\n\nfunction unquote(token: string): string {\n\tif (token.length < 2) return token;\n\tconst first = token[0];\n\tconst last = token[token.length - 1];\n\tif ((first === '\"' || first === \"'\") && first === last) {\n\t\treturn token.slice(1, -1);\n\t}\n\treturn token;\n}\n\nfunction looksLikePath(token: string): boolean {\n\tif (token.startsWith(\"-\")) return false;\n\tif (/^[A-Za-z_][A-Za-z0-9_]*=/.test(token)) return false;\n\tif ([\"|\", \"||\", \"&&\", \";\", \"&\", \"$(\", \"${\", \"`\"].some((op) => token.includes(op))) {\n\t\treturn false;\n\t}\n\tif (token.startsWith(\"/\")) return true;\n\tif (token.startsWith(\"~\")) return true;\n\tif (token.startsWith(\"$HOME\")) return true;\n\tif (token.startsWith(\"./\") || token.startsWith(\"../\")) return true;\n\tif (token.includes(\"/\")) return true;\n\n\treturn false;\n}\n\nexport function extractExternalPaths(command: string, cwd: string): string[] {\n\tconst tokens = tokenizeCommand(command);\n\tconst externalPaths: string[] = [];\n\n\tlet startIndex = 0;\n\tif (tokens.length > 0) {\n\t\tconst firstToken = unquote(tokens[0]);\n\t\tif (\n\t\t\t!firstToken.startsWith(\"/\") &&\n\t\t\t!firstToken.startsWith(\"~\") &&\n\t\t\t!firstToken.startsWith(\"$\") &&\n\t\t\t!firstToken.startsWith(\"./\") &&\n\t\t\t!firstToken.startsWith(\"../\") &&\n\t\t\t!firstToken.includes(\"/\")\n\t\t) {\n\t\t\tstartIndex = 1;\n\t\t}\n\t}\n\n\tfor (let i = startIndex; i < tokens.length; i++) {\n\t\tconst token = unquote(tokens[i]);\n\n\t\tif (!looksLikePath(token)) {\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (isExternalPath(token, cwd)) {\n\t\t\texternalPaths.push(token);\n\t\t}\n\t}\n\n\treturn externalPaths;\n}\n"]}
+{"version":3,"file":"external-dir.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/external-dir.ts"],"names":[],"mappings":"AAIA,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAcpD;AAWD,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAatE;AAgFD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAgC3E"}

package/dist/core/extensions/builtin/permission-system/external-dir.js.map

@@ -1 +1 @@
-{"version":3,"file":"external-dir.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/external-dir.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAU;IACrD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,aAAa,CAAC,SAAiB,EAAU;IACjD,IAAI,CAAC;QACJ,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;IACF,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;AAAA,CACjC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,GAAW,EAAW;IACvE,MAAM,YAAY,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAEzC,IAAI,gBAAgB,KAAK,aAAa,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,gBAAgB,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC;IAErG,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AAAA,CACtD;AAED,SAAS,eAAe,CAAC,OAAe,EAAY;IACnD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAExB,IAAI,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,IAAI,CAAC;YAChB,OAAO,GAAG,KAAK,CAAC;YAChB,SAAS;QACV,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACV,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvB,QAAQ,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACV,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAClC,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACV,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrB,OAAO,GAAG,EAAE,CAAC;YACd,CAAC;YACD,SAAS;QACV,CAAC;QAED,OAAO,IAAI,IAAI,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,OAAO,CAAC,KAAa,EAAU;IACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,aAAa,CAAC,KAAa,EAAW;IAC9C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACnF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,OAAO,KAAK,CAAC;AAAA,CACb;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,GAAW,EAAY;IAC5E,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,IACC,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;YAC3B,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;YAC3B,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;YAC3B,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;YAC5B,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;YAC7B,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EACxB,CAAC;YACF,UAAU,GAAG,CAAC,CAAC;QAChB,CAAC;IACF,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,SAAS;QACV,CAAC;QAED,IAAI,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YAChC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACF,CAAC;IAED,OAAO,aAAa,CAAC;AAAA,CACrB","sourcesContent":["import * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport * as path from \"node:path\";\n\nexport function expandHome(inputPath: string): string {\n\tif (inputPath === \"~\") {\n\t\treturn os.homedir();\n\t}\n\tif (inputPath.startsWith(\"~/\") || inputPath.startsWith(\"~\\\\\")) {\n\t\treturn path.join(os.homedir(), inputPath.slice(2));\n\t}\n\tif (inputPath.startsWith(\"$HOME/\") || inputPath.startsWith(\"$HOME\\\\\")) {\n\t\treturn path.join(os.homedir(), inputPath.slice(6));\n\t}\n\tif (inputPath === \"$HOME\") {\n\t\treturn os.homedir();\n\t}\n\treturn inputPath;\n}\n\nfunction normalizePath(inputPath: string): string {\n\ttry {\n\t\tif (fs.existsSync(inputPath)) {\n\t\t\treturn fs.realpathSync(inputPath);\n\t\t}\n\t} catch {}\n\treturn path.normalize(inputPath);\n}\n\nexport function isExternalPath(inputPath: string, cwd: string): boolean {\n\tconst expandedPath = expandHome(inputPath);\n\tconst absolutePath = path.resolve(cwd, expandedPath);\n\tconst normalizedTarget = normalizePath(absolutePath);\n\tconst normalizedCwd = normalizePath(cwd);\n\n\tif (normalizedTarget === normalizedCwd) {\n\t\treturn false;\n\t}\n\n\tconst cwdWithSeparator = normalizedCwd.endsWith(path.sep) ? normalizedCwd : normalizedCwd + path.sep;\n\n\treturn !normalizedTarget.startsWith(cwdWithSeparator);\n}\n\nfunction tokenizeCommand(command: string): string[] {\n\tconst tokens: string[] = [];\n\tlet current = \"\";\n\tlet inQuotes: string | null = null;\n\tlet escaped = false;\n\n\tfor (let i = 0; i < command.length; i++) {\n\t\tconst char = command[i];\n\n\t\tif (escaped) {\n\t\t\tcurrent += char;\n\t\t\tescaped = false;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (char === \"\\\\\") {\n\t\t\tescaped = true;\n\t\t\tcurrent += char;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (inQuotes) {\n\t\t\tif (char === inQuotes) {\n\t\t\t\tinQuotes = null;\n\t\t\t}\n\t\t\tcurrent += char;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (char === '\"' || char === \"'\") {\n\t\t\tinQuotes = char;\n\t\t\tcurrent += char;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (char === \" \" || char === \"\\t\") {\n\t\t\tif (current.length > 0) {\n\t\t\t\ttokens.push(current);\n\t\t\t\tcurrent = \"\";\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\n\t\tcurrent += char;\n\t}\n\n\tif (current.length > 0) {\n\t\ttokens.push(current);\n\t}\n\n\treturn tokens;\n}\n\nfunction unquote(token: string): string {\n\tif (token.length < 2) return token;\n\tconst first = token[0];\n\tconst last = token[token.length - 1];\n\tif ((first === '\"' || first === \"'\") && first === last) {\n\t\treturn token.slice(1, -1);\n\t}\n\treturn token;\n}\n\nfunction looksLikePath(token: string): boolean {\n\tif (token.startsWith(\"-\")) return false;\n\tif (/^[A-Za-z_][A-Za-z0-9_]*=/.test(token)) return false;\n\tif ([\"|\", \"||\", \"&&\", \";\", \"&\", \"$(\", \"${\", \"`\"].some((op) => token.includes(op))) {\n\t\treturn false;\n\t}\n\tif (token.startsWith(\"/\")) return true;\n\tif (token.startsWith(\"~\")) return true;\n\tif (token.startsWith(\"$HOME\")) return true;\n\tif (token.startsWith(\"./\") || token.startsWith(\"../\")) return true;\n\tif (token.includes(\"/\")) return true;\n\n\treturn false;\n}\n\nexport function extractExternalPaths(command: string, cwd: string): string[] {\n\tconst tokens = tokenizeCommand(command);\n\tconst externalPaths: string[] = [];\n\n\tlet startIndex = 0;\n\tif (tokens.length > 0) {\n\t\tconst firstToken = unquote(tokens[0]);\n\t\tif (\n\t\t\t!firstToken.startsWith(\"/\") &&\n\t\t\t!firstToken.startsWith(\"~\") &&\n\t\t\t!firstToken.startsWith(\"$\") &&\n\t\t\t!firstToken.startsWith(\"./\") &&\n\t\t\t!firstToken.startsWith(\"../\") &&\n\t\t\t!firstToken.includes(\"/\")\n\t\t) {\n\t\t\tstartIndex = 1;\n\t\t}\n\t}\n\n\tfor (let i = startIndex; i < tokens.length; i++) {\n\t\tconst token = unquote(tokens[i]);\n\n\t\tif (!looksLikePath(token)) {\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (isExternalPath(token, cwd)) {\n\t\t\texternalPaths.push(token);\n\t\t}\n\t}\n\n\treturn externalPaths;\n}\n"]}
+{"version":3,"file":"external-dir.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/external-dir.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC3C,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACvC,IAAI,CAAC;QACJ,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;IACF,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,GAAW;IAC5D,MAAM,YAAY,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAEzC,IAAI,gBAAgB,KAAK,aAAa,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,gBAAgB,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC;IAErG,OAAO,CAAC,gBAAgB,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACvC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAExB,IAAI,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,IAAI,CAAC;YAChB,OAAO,GAAG,KAAK,CAAC;YAChB,SAAS;QACV,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACV,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvB,QAAQ,GAAG,IAAI,CAAC;YACjB,CAAC;YACD,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACV,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAClC,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,IAAI,IAAI,CAAC;YAChB,SAAS;QACV,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrB,OAAO,GAAG,EAAE,CAAC;YACd,CAAC;YACD,SAAS;QACV,CAAC;QAED,OAAO,IAAI,IAAI,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IACnC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACnF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,GAAW;IAChE,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,IACC,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;YAC3B,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;YAC3B,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;YAC3B,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;YAC5B,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;YAC7B,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EACxB,CAAC;YACF,UAAU,GAAG,CAAC,CAAC;QAChB,CAAC;IACF,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,SAAS;QACV,CAAC;QAED,IAAI,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YAChC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACF,CAAC;IAED,OAAO,aAAa,CAAC;AACtB,CAAC","sourcesContent":["import * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport * as path from \"node:path\";\n\nexport function expandHome(inputPath: string): string {\n\tif (inputPath === \"~\") {\n\t\treturn os.homedir();\n\t}\n\tif (inputPath.startsWith(\"~/\") || inputPath.startsWith(\"~\\\\\")) {\n\t\treturn path.join(os.homedir(), inputPath.slice(2));\n\t}\n\tif (inputPath.startsWith(\"$HOME/\") || inputPath.startsWith(\"$HOME\\\\\")) {\n\t\treturn path.join(os.homedir(), inputPath.slice(6));\n\t}\n\tif (inputPath === \"$HOME\") {\n\t\treturn os.homedir();\n\t}\n\treturn inputPath;\n}\n\nfunction normalizePath(inputPath: string): string {\n\ttry {\n\t\tif (fs.existsSync(inputPath)) {\n\t\t\treturn fs.realpathSync(inputPath);\n\t\t}\n\t} catch {}\n\treturn path.normalize(inputPath);\n}\n\nexport function isExternalPath(inputPath: string, cwd: string): boolean {\n\tconst expandedPath = expandHome(inputPath);\n\tconst absolutePath = path.resolve(cwd, expandedPath);\n\tconst normalizedTarget = normalizePath(absolutePath);\n\tconst normalizedCwd = normalizePath(cwd);\n\n\tif (normalizedTarget === normalizedCwd) {\n\t\treturn false;\n\t}\n\n\tconst cwdWithSeparator = normalizedCwd.endsWith(path.sep) ? normalizedCwd : normalizedCwd + path.sep;\n\n\treturn !normalizedTarget.startsWith(cwdWithSeparator);\n}\n\nfunction tokenizeCommand(command: string): string[] {\n\tconst tokens: string[] = [];\n\tlet current = \"\";\n\tlet inQuotes: string | null = null;\n\tlet escaped = false;\n\n\tfor (let i = 0; i < command.length; i++) {\n\t\tconst char = command[i];\n\n\t\tif (escaped) {\n\t\t\tcurrent += char;\n\t\t\tescaped = false;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (char === \"\\\\\") {\n\t\t\tescaped = true;\n\t\t\tcurrent += char;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (inQuotes) {\n\t\t\tif (char === inQuotes) {\n\t\t\t\tinQuotes = null;\n\t\t\t}\n\t\t\tcurrent += char;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (char === '\"' || char === \"'\") {\n\t\t\tinQuotes = char;\n\t\t\tcurrent += char;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (char === \" \" || char === \"\\t\") {\n\t\t\tif (current.length > 0) {\n\t\t\t\ttokens.push(current);\n\t\t\t\tcurrent = \"\";\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\n\t\tcurrent += char;\n\t}\n\n\tif (current.length > 0) {\n\t\ttokens.push(current);\n\t}\n\n\treturn tokens;\n}\n\nfunction unquote(token: string): string {\n\tif (token.length < 2) return token;\n\tconst first = token[0];\n\tconst last = token[token.length - 1];\n\tif ((first === '\"' || first === \"'\") && first === last) {\n\t\treturn token.slice(1, -1);\n\t}\n\treturn token;\n}\n\nfunction looksLikePath(token: string): boolean {\n\tif (token.startsWith(\"-\")) return false;\n\tif (/^[A-Za-z_][A-Za-z0-9_]*=/.test(token)) return false;\n\tif ([\"|\", \"||\", \"&&\", \";\", \"&\", \"$(\", \"${\", \"`\"].some((op) => token.includes(op))) {\n\t\treturn false;\n\t}\n\tif (token.startsWith(\"/\")) return true;\n\tif (token.startsWith(\"~\")) return true;\n\tif (token.startsWith(\"$HOME\")) return true;\n\tif (token.startsWith(\"./\") || token.startsWith(\"../\")) return true;\n\tif (token.includes(\"/\")) return true;\n\n\treturn false;\n}\n\nexport function extractExternalPaths(command: string, cwd: string): string[] {\n\tconst tokens = tokenizeCommand(command);\n\tconst externalPaths: string[] = [];\n\n\tlet startIndex = 0;\n\tif (tokens.length > 0) {\n\t\tconst firstToken = unquote(tokens[0]);\n\t\tif (\n\t\t\t!firstToken.startsWith(\"/\") &&\n\t\t\t!firstToken.startsWith(\"~\") &&\n\t\t\t!firstToken.startsWith(\"$\") &&\n\t\t\t!firstToken.startsWith(\"./\") &&\n\t\t\t!firstToken.startsWith(\"../\") &&\n\t\t\t!firstToken.includes(\"/\")\n\t\t) {\n\t\t\tstartIndex = 1;\n\t\t}\n\t}\n\n\tfor (let i = startIndex; i < tokens.length; i++) {\n\t\tconst token = unquote(tokens[i]);\n\n\t\tif (!looksLikePath(token)) {\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (isExternalPath(token, cwd)) {\n\t\t\texternalPaths.push(token);\n\t\t}\n\t}\n\n\treturn externalPaths;\n}\n"]}

package/dist/core/extensions/builtin/permission-system/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAuDnD,MAAM,CAAC,OAAO,UAAU,yBAAyB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAsGxE","sourcesContent":["import { SettingsManager } from \"../../../settings-manager.ts\";\nimport type { ExtensionAPI } from \"../../types.ts\";\nimport { extractPatchedPaths } from \"../gpt-apply-patch/index.ts\";\nimport { parsePermissionFlag } from \"./cli.ts\";\nimport { disabled } from \"./config.ts\";\nimport { createEventEmitter } from \"./events.ts\";\nimport { handleNoUI } from \"./non-interactive.ts\";\nimport { createBuiltinParserRegistry, type ParserRegistry } from \"./parsers.ts\";\nimport { showPermissionPrompt } from \"./prompt.ts\";\nimport { PermissionService } from \"./service.ts\";\nimport { loadPermissionSettings } from \"./settings.ts\";\nimport { appendApproved } from \"./storage.ts\";\nimport { CorrectedError, DeniedError, RejectedError, type Request, type Ruleset } from \"./types.ts\";\n\nfunction createRequestIDFactory(): () => string {\n\tlet counter = 0;\n\treturn () => {\n\t\tcounter += 1;\n\t\treturn `permission-${counter}`;\n\t};\n}\n\nfunction getReason(error: unknown): string {\n\tif (error instanceof DeniedError || error instanceof CorrectedError || error instanceof RejectedError) {\n\t\treturn error.message;\n\t}\n\n\tif (error instanceof Error) {\n\t\treturn error.message;\n\t}\n\n\treturn \"Permission request was rejected.\";\n}\n\nfunction createRequestMetadata(toolName: string, input: Record<string, unknown>): Record<string, unknown> {\n\tconst metadata: Record<string, unknown> = {\n\t\ttoolName,\n\t\t...input,\n\t};\n\n\tconst pathValue = typeof input.path === \"string\" ? input.path : undefined;\n\tconst filePathValue = typeof input.file_path === \"string\" ? input.file_path : undefined;\n\tconst patchTextValue =\n\t\ttypeof input.input === \"string\" ? input.input : typeof input.patchText === \"string\" ? input.patchText : undefined;\n\n\tif (toolName === \"edit\" || toolName === \"write\" || toolName === \"apply_patch\" || toolName === \"multiedit\") {\n\t\tmetadata.filepath = pathValue ?? filePathValue ?? extractPatchedPaths(patchTextValue ?? \"\")[0];\n\t}\n\n\tif (toolName === \"read\") {\n\t\tmetadata.filePath = pathValue ?? filePathValue;\n\t}\n\n\treturn metadata;\n}\n\nexport default function permissionSystemExtension(pi: ExtensionAPI): void {\n\tlet service: PermissionService | null = null;\n\tlet parserRegistry: ParserRegistry | null = null;\n\tlet cliRuleset: Ruleset = [];\n\tlet staticRuleset: Ruleset = [];\n\tlet initialApprovedCount = 0;\n\n\tconst nextRequestID = createRequestIDFactory();\n\n\tpi.registerFlag(\"permission\", {\n\t\tdescription: \"Set permission rules (format: tool=action or tool:pattern=action)\",\n\t\ttype: \"string\",\n\t});\n\n\tpi.on(\"session_start\", async (_event, ctx) => {\n\t\tconst settingsManager = SettingsManager.create(ctx.cwd);\n\t\tconst permissionFlag = pi.getFlag(\"permission\");\n\t\tcliRuleset = typeof permissionFlag === \"string\" ? parsePermissionFlag(permissionFlag) : [];\n\n\t\tconst loadedSettings = loadPermissionSettings(settingsManager, cliRuleset, ctx.cwd);\n\t\tstaticRuleset = loadedSettings.staticRuleset;\n\t\tconst approved = loadedSettings.approved;\n\t\tparserRegistry = createBuiltinParserRegistry();\n\t\tservice = new PermissionService(staticRuleset, approved, createEventEmitter(pi));\n\t\tinitialApprovedCount = approved.length;\n\n\t\tconst allTools = pi.getAllTools().map((tool) => tool.name);\n\t\tconst disabledTools = disabled(allTools, staticRuleset);\n\t\tconst activeTools = pi.getActiveTools().filter((toolName) => !disabledTools.has(toolName));\n\t\tpi.setActiveTools(activeTools);\n\t});\n\n\tpi.on(\"tool_call\", async (event, ctx) => {\n\t\tif (!service || !parserRegistry) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tconst permissionRequests = parserRegistry.parse(event.toolName, event.input, ctx.cwd);\n\t\tconst sessionID = ctx.sessionManager.getSessionId();\n\n\t\tfor (const permissionRequest of permissionRequests) {\n\t\t\tconst request: Request = {\n\t\t\t\tid: nextRequestID(),\n\t\t\t\tsessionID,\n\t\t\t\tpermission: permissionRequest.permission,\n\t\t\t\tpatterns: permissionRequest.patterns,\n\t\t\t\talways: permissionRequest.always,\n\t\t\t\tmetadata: createRequestMetadata(event.toolName, event.input),\n\t\t\t};\n\n\t\t\tconst askPromise = service.ask(request);\n\t\t\tconst isPending = service.list().some((pendingRequest) => pendingRequest.id === request.id);\n\n\t\t\tif (!isPending) {\n\t\t\t\ttry {\n\t\t\t\t\tawait askPromise;\n\t\t\t\t} catch (error) {\n\t\t\t\t\treturn { block: true, reason: getReason(error) };\n\t\t\t\t}\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tif (ctx.hasUI) {\n\t\t\t\tconst reply = await showPermissionPrompt(ctx, request);\n\t\t\t\tservice.reply(reply);\n\t\t\t} else {\n\t\t\t\tconst reply = handleNoUI(request, staticRuleset, cliRuleset, (eventName, data) => {\n\t\t\t\t\tif (eventName !== \"permission_asked\") {\n\t\t\t\t\t\tpi.events.emit(eventName, data);\n\t\t\t\t\t}\n\t\t\t\t});\n\t\t\t\tif (reply) {\n\t\t\t\t\tservice.reply(reply);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\ttry {\n\t\t\t\tawait askPromise;\n\t\t\t} catch (error) {\n\t\t\t\treturn { block: true, reason: getReason(error) };\n\t\t\t}\n\t\t}\n\n\t\treturn undefined;\n\t});\n\n\tpi.on(\"session_shutdown\", async (event, ctx) => {\n\t\tvoid event;\n\n\t\tif (!service) {\n\t\t\treturn;\n\t\t}\n\n\t\tconst approved = service.getApproved().slice(initialApprovedCount);\n\t\tif (approved.length > 0) {\n\t\t\tappendApproved(ctx.cwd, approved);\n\t\t}\n\n\t\tfor (const pendingRequest of service.list()) {\n\t\t\tservice.reply({ requestID: pendingRequest.id, reply: \"reject\" });\n\t\t}\n\t});\n}\n"]}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAuDnD,MAAM,CAAC,OAAO,UAAU,yBAAyB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAsGxE"}

package/dist/core/extensions/builtin/permission-system/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAuB,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAA8B,MAAM,YAAY,CAAC;AAEpG,SAAS,sBAAsB,GAAiB;IAC/C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,GAAG,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,CAAC;QACb,OAAO,cAAc,OAAO,EAAE,CAAC;IAAA,CAC/B,CAAC;AAAA,CACF;AAED,SAAS,SAAS,CAAC,KAAc,EAAU;IAC1C,IAAI,KAAK,YAAY,WAAW,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;QACvG,OAAO,KAAK,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,OAAO,kCAAkC,CAAC;AAAA,CAC1C;AAED,SAAS,qBAAqB,CAAC,QAAgB,EAAE,KAA8B,EAA2B;IACzG,MAAM,QAAQ,GAA4B;QACzC,QAAQ;QACR,GAAG,KAAK;KACR,CAAC;IAEF,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,MAAM,aAAa,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,cAAc,GACnB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAEnH,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC3G,QAAQ,CAAC,QAAQ,GAAG,SAAS,IAAI,aAAa,IAAI,mBAAmB,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACzB,QAAQ,CAAC,QAAQ,GAAG,SAAS,IAAI,aAAa,CAAC;IAChD,CAAC;IAED,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,MAAM,CAAC,OAAO,UAAU,yBAAyB,CAAC,EAAgB,EAAQ;IACzE,IAAI,OAAO,GAA6B,IAAI,CAAC;IAC7C,IAAI,cAAc,GAA0B,IAAI,CAAC;IACjD,IAAI,UAAU,GAAY,EAAE,CAAC;IAC7B,IAAI,aAAa,GAAY,EAAE,CAAC;IAChC,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAE7B,MAAM,aAAa,GAAG,sBAAsB,EAAE,CAAC;IAE/C,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE;QAC7B,WAAW,EAAE,mEAAmE;QAChF,IAAI,EAAE,QAAQ;KACd,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QAC7C,MAAM,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,cAAc,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAChD,UAAU,GAAG,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE3F,MAAM,cAAc,GAAG,sBAAsB,CAAC,eAAe,EAAE,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACpF,aAAa,GAAG,cAAc,CAAC,aAAa,CAAC;QAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;QACzC,cAAc,GAAG,2BAA2B,EAAE,CAAC;QAC/C,OAAO,GAAG,IAAI,iBAAiB,CAAC,aAAa,EAAE,QAAQ,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;QACjF,oBAAoB,GAAG,QAAQ,CAAC,MAAM,CAAC;QAEvC,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3F,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAAA,CAC/B,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,kBAAkB,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACtF,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC;QAEpD,KAAK,MAAM,iBAAiB,IAAI,kBAAkB,EAAE,CAAC;YACpD,MAAM,OAAO,GAAY;gBACxB,EAAE,EAAE,aAAa,EAAE;gBACnB,SAAS;gBACT,UAAU,EAAE,iBAAiB,CAAC,UAAU;gBACxC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;gBACpC,MAAM,EAAE,iBAAiB,CAAC,MAAM;gBAChC,QAAQ,EAAE,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;aAC5D,CAAC;YAEF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;YAE5F,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACJ,MAAM,UAAU,CAAC;gBAClB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClD,CAAC;gBACD,SAAS;YACV,CAAC;YAED,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBACvD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACP,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;oBACjF,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;wBACtC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;oBACjC,CAAC;gBAAA,CACD,CAAC,CAAC;gBACH,IAAI,KAAK,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;YACF,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,UAAU,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,CAAC;QACF,CAAC;QAED,OAAO,SAAS,CAAC;IAAA,CACjB,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;QAC/C,KAAK,KAAK,CAAC;QAEX,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO;QACR,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QAED,KAAK,MAAM,cAAc,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,CAAC;IAAA,CACD,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { SettingsManager } from \"../../../settings-manager.ts\";\nimport type { ExtensionAPI } from \"../../types.ts\";\nimport { extractPatchedPaths } from \"../gpt-apply-patch/index.ts\";\nimport { parsePermissionFlag } from \"./cli.ts\";\nimport { disabled } from \"./config.ts\";\nimport { createEventEmitter } from \"./events.ts\";\nimport { handleNoUI } from \"./non-interactive.ts\";\nimport { createBuiltinParserRegistry, type ParserRegistry } from \"./parsers.ts\";\nimport { showPermissionPrompt } from \"./prompt.ts\";\nimport { PermissionService } from \"./service.ts\";\nimport { loadPermissionSettings } from \"./settings.ts\";\nimport { appendApproved } from \"./storage.ts\";\nimport { CorrectedError, DeniedError, RejectedError, type Request, type Ruleset } from \"./types.ts\";\n\nfunction createRequestIDFactory(): () => string {\n\tlet counter = 0;\n\treturn () => {\n\t\tcounter += 1;\n\t\treturn `permission-${counter}`;\n\t};\n}\n\nfunction getReason(error: unknown): string {\n\tif (error instanceof DeniedError || error instanceof CorrectedError || error instanceof RejectedError) {\n\t\treturn error.message;\n\t}\n\n\tif (error instanceof Error) {\n\t\treturn error.message;\n\t}\n\n\treturn \"Permission request was rejected.\";\n}\n\nfunction createRequestMetadata(toolName: string, input: Record<string, unknown>): Record<string, unknown> {\n\tconst metadata: Record<string, unknown> = {\n\t\ttoolName,\n\t\t...input,\n\t};\n\n\tconst pathValue = typeof input.path === \"string\" ? input.path : undefined;\n\tconst filePathValue = typeof input.file_path === \"string\" ? input.file_path : undefined;\n\tconst patchTextValue =\n\t\ttypeof input.input === \"string\" ? input.input : typeof input.patchText === \"string\" ? input.patchText : undefined;\n\n\tif (toolName === \"edit\" || toolName === \"write\" || toolName === \"apply_patch\" || toolName === \"multiedit\") {\n\t\tmetadata.filepath = pathValue ?? filePathValue ?? extractPatchedPaths(patchTextValue ?? \"\")[0];\n\t}\n\n\tif (toolName === \"read\") {\n\t\tmetadata.filePath = pathValue ?? filePathValue;\n\t}\n\n\treturn metadata;\n}\n\nexport default function permissionSystemExtension(pi: ExtensionAPI): void {\n\tlet service: PermissionService | null = null;\n\tlet parserRegistry: ParserRegistry | null = null;\n\tlet cliRuleset: Ruleset = [];\n\tlet staticRuleset: Ruleset = [];\n\tlet initialApprovedCount = 0;\n\n\tconst nextRequestID = createRequestIDFactory();\n\n\tpi.registerFlag(\"permission\", {\n\t\tdescription: \"Set permission rules (format: tool=action or tool:pattern=action)\",\n\t\ttype: \"string\",\n\t});\n\n\tpi.on(\"session_start\", async (_event, ctx) => {\n\t\tconst settingsManager = SettingsManager.create(ctx.cwd);\n\t\tconst permissionFlag = pi.getFlag(\"permission\");\n\t\tcliRuleset = typeof permissionFlag === \"string\" ? parsePermissionFlag(permissionFlag) : [];\n\n\t\tconst loadedSettings = loadPermissionSettings(settingsManager, cliRuleset, ctx.cwd);\n\t\tstaticRuleset = loadedSettings.staticRuleset;\n\t\tconst approved = loadedSettings.approved;\n\t\tparserRegistry = createBuiltinParserRegistry();\n\t\tservice = new PermissionService(staticRuleset, approved, createEventEmitter(pi));\n\t\tinitialApprovedCount = approved.length;\n\n\t\tconst allTools = pi.getAllTools().map((tool) => tool.name);\n\t\tconst disabledTools = disabled(allTools, staticRuleset);\n\t\tconst activeTools = pi.getActiveTools().filter((toolName) => !disabledTools.has(toolName));\n\t\tpi.setActiveTools(activeTools);\n\t});\n\n\tpi.on(\"tool_call\", async (event, ctx) => {\n\t\tif (!service || !parserRegistry) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tconst permissionRequests = parserRegistry.parse(event.toolName, event.input, ctx.cwd);\n\t\tconst sessionID = ctx.sessionManager.getSessionId();\n\n\t\tfor (const permissionRequest of permissionRequests) {\n\t\t\tconst request: Request = {\n\t\t\t\tid: nextRequestID(),\n\t\t\t\tsessionID,\n\t\t\t\tpermission: permissionRequest.permission,\n\t\t\t\tpatterns: permissionRequest.patterns,\n\t\t\t\talways: permissionRequest.always,\n\t\t\t\tmetadata: createRequestMetadata(event.toolName, event.input),\n\t\t\t};\n\n\t\t\tconst askPromise = service.ask(request);\n\t\t\tconst isPending = service.list().some((pendingRequest) => pendingRequest.id === request.id);\n\n\t\t\tif (!isPending) {\n\t\t\t\ttry {\n\t\t\t\t\tawait askPromise;\n\t\t\t\t} catch (error) {\n\t\t\t\t\treturn { block: true, reason: getReason(error) };\n\t\t\t\t}\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tif (ctx.hasUI) {\n\t\t\t\tconst reply = await showPermissionPrompt(ctx, request);\n\t\t\t\tservice.reply(reply);\n\t\t\t} else {\n\t\t\t\tconst reply = handleNoUI(request, staticRuleset, cliRuleset, (eventName, data) => {\n\t\t\t\t\tif (eventName !== \"permission_asked\") {\n\t\t\t\t\t\tpi.events.emit(eventName, data);\n\t\t\t\t\t}\n\t\t\t\t});\n\t\t\t\tif (reply) {\n\t\t\t\t\tservice.reply(reply);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\ttry {\n\t\t\t\tawait askPromise;\n\t\t\t} catch (error) {\n\t\t\t\treturn { block: true, reason: getReason(error) };\n\t\t\t}\n\t\t}\n\n\t\treturn undefined;\n\t});\n\n\tpi.on(\"session_shutdown\", async (event, ctx) => {\n\t\tvoid event;\n\n\t\tif (!service) {\n\t\t\treturn;\n\t\t}\n\n\t\tconst approved = service.getApproved().slice(initialApprovedCount);\n\t\tif (approved.length > 0) {\n\t\t\tappendApproved(ctx.cwd, approved);\n\t\t}\n\n\t\tfor (const pendingRequest of service.list()) {\n\t\t\tservice.reply({ requestID: pendingRequest.id, reply: \"reject\" });\n\t\t}\n\t});\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAuB,MAAM,cAAc,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAA8B,MAAM,YAAY,CAAC;AAEpG,SAAS,sBAAsB;IAC9B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,GAAG,EAAE;QACX,OAAO,IAAI,CAAC,CAAC;QACb,OAAO,cAAc,OAAO,EAAE,CAAC;IAChC,CAAC,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAChC,IAAI,KAAK,YAAY,WAAW,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;QACvG,OAAO,KAAK,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,OAAO,kCAAkC,CAAC;AAC3C,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB,EAAE,KAA8B;IAC9E,MAAM,QAAQ,GAA4B;QACzC,QAAQ;QACR,GAAG,KAAK;KACR,CAAC;IAEF,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,MAAM,aAAa,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,cAAc,GACnB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAEnH,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC3G,QAAQ,CAAC,QAAQ,GAAG,SAAS,IAAI,aAAa,IAAI,mBAAmB,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACzB,QAAQ,CAAC,QAAQ,GAAG,SAAS,IAAI,aAAa,CAAC;IAChD,CAAC;IAED,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,OAAO,UAAU,yBAAyB,CAAC,EAAgB;IACjE,IAAI,OAAO,GAA6B,IAAI,CAAC;IAC7C,IAAI,cAAc,GAA0B,IAAI,CAAC;IACjD,IAAI,UAAU,GAAY,EAAE,CAAC;IAC7B,IAAI,aAAa,GAAY,EAAE,CAAC;IAChC,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAE7B,MAAM,aAAa,GAAG,sBAAsB,EAAE,CAAC;IAE/C,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE;QAC7B,WAAW,EAAE,mEAAmE;QAChF,IAAI,EAAE,QAAQ;KACd,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,cAAc,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAChD,UAAU,GAAG,OAAO,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE3F,MAAM,cAAc,GAAG,sBAAsB,CAAC,eAAe,EAAE,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACpF,aAAa,GAAG,cAAc,CAAC,aAAa,CAAC;QAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;QACzC,cAAc,GAAG,2BAA2B,EAAE,CAAC;QAC/C,OAAO,GAAG,IAAI,iBAAiB,CAAC,aAAa,EAAE,QAAQ,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;QACjF,oBAAoB,GAAG,QAAQ,CAAC,MAAM,CAAC;QAEvC,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3F,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACvC,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,kBAAkB,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACtF,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC;QAEpD,KAAK,MAAM,iBAAiB,IAAI,kBAAkB,EAAE,CAAC;YACpD,MAAM,OAAO,GAAY;gBACxB,EAAE,EAAE,aAAa,EAAE;gBACnB,SAAS;gBACT,UAAU,EAAE,iBAAiB,CAAC,UAAU;gBACxC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;gBACpC,MAAM,EAAE,iBAAiB,CAAC,MAAM;gBAChC,QAAQ,EAAE,qBAAqB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;aAC5D,CAAC;YAEF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;YAE5F,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACJ,MAAM,UAAU,CAAC;gBAClB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClD,CAAC;gBACD,SAAS;YACV,CAAC;YAED,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBACvD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACP,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE;oBAChF,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;wBACtC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;oBACjC,CAAC;gBACF,CAAC,CAAC,CAAC;gBACH,IAAI,KAAK,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;YACF,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,UAAU,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,CAAC;QACF,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC9C,KAAK,KAAK,CAAC;QAEX,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO;QACR,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QAED,KAAK,MAAM,cAAc,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { SettingsManager } from \"../../../settings-manager.ts\";\nimport type { ExtensionAPI } from \"../../types.ts\";\nimport { extractPatchedPaths } from \"../gpt-apply-patch/index.ts\";\nimport { parsePermissionFlag } from \"./cli.ts\";\nimport { disabled } from \"./config.ts\";\nimport { createEventEmitter } from \"./events.ts\";\nimport { handleNoUI } from \"./non-interactive.ts\";\nimport { createBuiltinParserRegistry, type ParserRegistry } from \"./parsers.ts\";\nimport { showPermissionPrompt } from \"./prompt.ts\";\nimport { PermissionService } from \"./service.ts\";\nimport { loadPermissionSettings } from \"./settings.ts\";\nimport { appendApproved } from \"./storage.ts\";\nimport { CorrectedError, DeniedError, RejectedError, type Request, type Ruleset } from \"./types.ts\";\n\nfunction createRequestIDFactory(): () => string {\n\tlet counter = 0;\n\treturn () => {\n\t\tcounter += 1;\n\t\treturn `permission-${counter}`;\n\t};\n}\n\nfunction getReason(error: unknown): string {\n\tif (error instanceof DeniedError || error instanceof CorrectedError || error instanceof RejectedError) {\n\t\treturn error.message;\n\t}\n\n\tif (error instanceof Error) {\n\t\treturn error.message;\n\t}\n\n\treturn \"Permission request was rejected.\";\n}\n\nfunction createRequestMetadata(toolName: string, input: Record<string, unknown>): Record<string, unknown> {\n\tconst metadata: Record<string, unknown> = {\n\t\ttoolName,\n\t\t...input,\n\t};\n\n\tconst pathValue = typeof input.path === \"string\" ? input.path : undefined;\n\tconst filePathValue = typeof input.file_path === \"string\" ? input.file_path : undefined;\n\tconst patchTextValue =\n\t\ttypeof input.input === \"string\" ? input.input : typeof input.patchText === \"string\" ? input.patchText : undefined;\n\n\tif (toolName === \"edit\" || toolName === \"write\" || toolName === \"apply_patch\" || toolName === \"multiedit\") {\n\t\tmetadata.filepath = pathValue ?? filePathValue ?? extractPatchedPaths(patchTextValue ?? \"\")[0];\n\t}\n\n\tif (toolName === \"read\") {\n\t\tmetadata.filePath = pathValue ?? filePathValue;\n\t}\n\n\treturn metadata;\n}\n\nexport default function permissionSystemExtension(pi: ExtensionAPI): void {\n\tlet service: PermissionService | null = null;\n\tlet parserRegistry: ParserRegistry | null = null;\n\tlet cliRuleset: Ruleset = [];\n\tlet staticRuleset: Ruleset = [];\n\tlet initialApprovedCount = 0;\n\n\tconst nextRequestID = createRequestIDFactory();\n\n\tpi.registerFlag(\"permission\", {\n\t\tdescription: \"Set permission rules (format: tool=action or tool:pattern=action)\",\n\t\ttype: \"string\",\n\t});\n\n\tpi.on(\"session_start\", async (_event, ctx) => {\n\t\tconst settingsManager = SettingsManager.create(ctx.cwd);\n\t\tconst permissionFlag = pi.getFlag(\"permission\");\n\t\tcliRuleset = typeof permissionFlag === \"string\" ? parsePermissionFlag(permissionFlag) : [];\n\n\t\tconst loadedSettings = loadPermissionSettings(settingsManager, cliRuleset, ctx.cwd);\n\t\tstaticRuleset = loadedSettings.staticRuleset;\n\t\tconst approved = loadedSettings.approved;\n\t\tparserRegistry = createBuiltinParserRegistry();\n\t\tservice = new PermissionService(staticRuleset, approved, createEventEmitter(pi));\n\t\tinitialApprovedCount = approved.length;\n\n\t\tconst allTools = pi.getAllTools().map((tool) => tool.name);\n\t\tconst disabledTools = disabled(allTools, staticRuleset);\n\t\tconst activeTools = pi.getActiveTools().filter((toolName) => !disabledTools.has(toolName));\n\t\tpi.setActiveTools(activeTools);\n\t});\n\n\tpi.on(\"tool_call\", async (event, ctx) => {\n\t\tif (!service || !parserRegistry) {\n\t\t\treturn undefined;\n\t\t}\n\n\t\tconst permissionRequests = parserRegistry.parse(event.toolName, event.input, ctx.cwd);\n\t\tconst sessionID = ctx.sessionManager.getSessionId();\n\n\t\tfor (const permissionRequest of permissionRequests) {\n\t\t\tconst request: Request = {\n\t\t\t\tid: nextRequestID(),\n\t\t\t\tsessionID,\n\t\t\t\tpermission: permissionRequest.permission,\n\t\t\t\tpatterns: permissionRequest.patterns,\n\t\t\t\talways: permissionRequest.always,\n\t\t\t\tmetadata: createRequestMetadata(event.toolName, event.input),\n\t\t\t};\n\n\t\t\tconst askPromise = service.ask(request);\n\t\t\tconst isPending = service.list().some((pendingRequest) => pendingRequest.id === request.id);\n\n\t\t\tif (!isPending) {\n\t\t\t\ttry {\n\t\t\t\t\tawait askPromise;\n\t\t\t\t} catch (error) {\n\t\t\t\t\treturn { block: true, reason: getReason(error) };\n\t\t\t\t}\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tif (ctx.hasUI) {\n\t\t\t\tconst reply = await showPermissionPrompt(ctx, request);\n\t\t\t\tservice.reply(reply);\n\t\t\t} else {\n\t\t\t\tconst reply = handleNoUI(request, staticRuleset, cliRuleset, (eventName, data) => {\n\t\t\t\t\tif (eventName !== \"permission_asked\") {\n\t\t\t\t\t\tpi.events.emit(eventName, data);\n\t\t\t\t\t}\n\t\t\t\t});\n\t\t\t\tif (reply) {\n\t\t\t\t\tservice.reply(reply);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\ttry {\n\t\t\t\tawait askPromise;\n\t\t\t} catch (error) {\n\t\t\t\treturn { block: true, reason: getReason(error) };\n\t\t\t}\n\t\t}\n\n\t\treturn undefined;\n\t});\n\n\tpi.on(\"session_shutdown\", async (event, ctx) => {\n\t\tvoid event;\n\n\t\tif (!service) {\n\t\t\treturn;\n\t\t}\n\n\t\tconst approved = service.getApproved().slice(initialApprovedCount);\n\t\tif (approved.length > 0) {\n\t\t\tappendApproved(ctx.cwd, approved);\n\t\t}\n\n\t\tfor (const pendingRequest of service.list()) {\n\t\t\tservice.reply({ requestID: pendingRequest.id, reply: \"reject\" });\n\t\t}\n\t});\n}\n"]}

package/dist/core/extensions/builtin/permission-system/non-interactive.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"non-interactive.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/non-interactive.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAElF;;;;;GAKG;AACH,wBAAgB,UAAU,CACzB,OAAO,EAAE,OAAO,EAChB,aAAa,EAAE,OAAO,EACtB,WAAW,EAAE,OAAO,EACpB,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,GAC/C,UAAU,GAAG,SAAS,CAqCxB","sourcesContent":["import { evaluate } from \"../permission-system/evaluate.ts\";\nimport type { ReplyInput, Request, Ruleset } from \"../permission-system/types.ts\";\n\n/**\n * Handle permission request in no-UI mode (print mode, unbound SDK).\n * Returns ReplyInput to reject, or undefined to allow.\n *\n * Precedence: CLI override > static ruleset > auto-deny\n */\nexport function handleNoUI(\n\trequest: Request,\n\tstaticRuleset: Ruleset,\n\tcliOverride: Ruleset,\n\temitEvent: (event: string, data: unknown) => void,\n): ReplyInput | undefined {\n\t// Emit permission_asked event for logging/telemetry\n\temitEvent(\"permission_asked\", request);\n\n\tconst cliRule = evaluate(request.permission, request.patterns[0], cliOverride);\n\tif (cliRule.action === \"allow\") {\n\t\temitEvent(\"permission_replied\", { requestID: request.id, sessionID: request.sessionID, reply: \"allow\" });\n\t\treturn undefined;\n\t}\n\tif (cliRule.action === \"deny\") {\n\t\treturn {\n\t\t\trequestID: request.id,\n\t\t\treply: \"reject\",\n\t\t\tmessage: `Permission denied by CLI flag: ${request.permission}`,\n\t\t};\n\t}\n\n\tconst staticRule = evaluate(request.permission, request.patterns[0], staticRuleset);\n\tif (staticRule.action === \"allow\") {\n\t\temitEvent(\"permission_replied\", { requestID: request.id, sessionID: request.sessionID, reply: \"allow\" });\n\t\treturn undefined;\n\t}\n\tif (staticRule.action === \"deny\") {\n\t\treturn {\n\t\t\trequestID: request.id,\n\t\t\treply: \"reject\",\n\t\t\tmessage: `Permission denied by config: ${request.permission}`,\n\t\t};\n\t}\n\n\t// Still \"ask\" - auto-deny with helpful message\n\tconst patternsStr = request.patterns.join(\", \");\n\treturn {\n\t\trequestID: request.id,\n\t\treply: \"reject\",\n\t\tmessage: `Permission required for ${request.permission} (${patternsStr}). Use --permission ${request.permission}=allow to override.`,\n\t};\n}\n"]}
+{"version":3,"file":"non-interactive.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/non-interactive.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAElF;;;;;GAKG;AACH,wBAAgB,UAAU,CACzB,OAAO,EAAE,OAAO,EAChB,aAAa,EAAE,OAAO,EACtB,WAAW,EAAE,OAAO,EACpB,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,GAC/C,UAAU,GAAG,SAAS,CAqCxB"}

package/dist/core/extensions/builtin/permission-system/non-interactive.js.map

@@ -1 +1 @@
-{"version":3,"file":"non-interactive.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/non-interactive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAG5D;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CACzB,OAAgB,EAChB,aAAsB,EACtB,WAAoB,EACpB,SAAiD,EACxB;IACzB,oDAAoD;IACpD,SAAS,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAEvC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,SAAS,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACzG,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/B,OAAO;YACN,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,kCAAkC,OAAO,CAAC,UAAU,EAAE;SAC/D,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACpF,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACnC,SAAS,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACzG,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,OAAO;YACN,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,gCAAgC,OAAO,CAAC,UAAU,EAAE;SAC7D,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO;QACN,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,2BAA2B,OAAO,CAAC,UAAU,KAAK,WAAW,uBAAuB,OAAO,CAAC,UAAU,qBAAqB;KACpI,CAAC;AAAA,CACF","sourcesContent":["import { evaluate } from \"../permission-system/evaluate.ts\";\nimport type { ReplyInput, Request, Ruleset } from \"../permission-system/types.ts\";\n\n/**\n * Handle permission request in no-UI mode (print mode, unbound SDK).\n * Returns ReplyInput to reject, or undefined to allow.\n *\n * Precedence: CLI override > static ruleset > auto-deny\n */\nexport function handleNoUI(\n\trequest: Request,\n\tstaticRuleset: Ruleset,\n\tcliOverride: Ruleset,\n\temitEvent: (event: string, data: unknown) => void,\n): ReplyInput | undefined {\n\t// Emit permission_asked event for logging/telemetry\n\temitEvent(\"permission_asked\", request);\n\n\tconst cliRule = evaluate(request.permission, request.patterns[0], cliOverride);\n\tif (cliRule.action === \"allow\") {\n\t\temitEvent(\"permission_replied\", { requestID: request.id, sessionID: request.sessionID, reply: \"allow\" });\n\t\treturn undefined;\n\t}\n\tif (cliRule.action === \"deny\") {\n\t\treturn {\n\t\t\trequestID: request.id,\n\t\t\treply: \"reject\",\n\t\t\tmessage: `Permission denied by CLI flag: ${request.permission}`,\n\t\t};\n\t}\n\n\tconst staticRule = evaluate(request.permission, request.patterns[0], staticRuleset);\n\tif (staticRule.action === \"allow\") {\n\t\temitEvent(\"permission_replied\", { requestID: request.id, sessionID: request.sessionID, reply: \"allow\" });\n\t\treturn undefined;\n\t}\n\tif (staticRule.action === \"deny\") {\n\t\treturn {\n\t\t\trequestID: request.id,\n\t\t\treply: \"reject\",\n\t\t\tmessage: `Permission denied by config: ${request.permission}`,\n\t\t};\n\t}\n\n\t// Still \"ask\" - auto-deny with helpful message\n\tconst patternsStr = request.patterns.join(\", \");\n\treturn {\n\t\trequestID: request.id,\n\t\treply: \"reject\",\n\t\tmessage: `Permission required for ${request.permission} (${patternsStr}). Use --permission ${request.permission}=allow to override.`,\n\t};\n}\n"]}
+{"version":3,"file":"non-interactive.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/non-interactive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAG5D;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CACzB,OAAgB,EAChB,aAAsB,EACtB,WAAoB,EACpB,SAAiD;IAEjD,oDAAoD;IACpD,SAAS,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAEvC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,SAAS,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACzG,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/B,OAAO;YACN,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,kCAAkC,OAAO,CAAC,UAAU,EAAE;SAC/D,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACpF,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACnC,SAAS,CAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACzG,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAClC,OAAO;YACN,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,gCAAgC,OAAO,CAAC,UAAU,EAAE;SAC7D,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO;QACN,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,2BAA2B,OAAO,CAAC,UAAU,KAAK,WAAW,uBAAuB,OAAO,CAAC,UAAU,qBAAqB;KACpI,CAAC;AACH,CAAC","sourcesContent":["import { evaluate } from \"../permission-system/evaluate.ts\";\nimport type { ReplyInput, Request, Ruleset } from \"../permission-system/types.ts\";\n\n/**\n * Handle permission request in no-UI mode (print mode, unbound SDK).\n * Returns ReplyInput to reject, or undefined to allow.\n *\n * Precedence: CLI override > static ruleset > auto-deny\n */\nexport function handleNoUI(\n\trequest: Request,\n\tstaticRuleset: Ruleset,\n\tcliOverride: Ruleset,\n\temitEvent: (event: string, data: unknown) => void,\n): ReplyInput | undefined {\n\t// Emit permission_asked event for logging/telemetry\n\temitEvent(\"permission_asked\", request);\n\n\tconst cliRule = evaluate(request.permission, request.patterns[0], cliOverride);\n\tif (cliRule.action === \"allow\") {\n\t\temitEvent(\"permission_replied\", { requestID: request.id, sessionID: request.sessionID, reply: \"allow\" });\n\t\treturn undefined;\n\t}\n\tif (cliRule.action === \"deny\") {\n\t\treturn {\n\t\t\trequestID: request.id,\n\t\t\treply: \"reject\",\n\t\t\tmessage: `Permission denied by CLI flag: ${request.permission}`,\n\t\t};\n\t}\n\n\tconst staticRule = evaluate(request.permission, request.patterns[0], staticRuleset);\n\tif (staticRule.action === \"allow\") {\n\t\temitEvent(\"permission_replied\", { requestID: request.id, sessionID: request.sessionID, reply: \"allow\" });\n\t\treturn undefined;\n\t}\n\tif (staticRule.action === \"deny\") {\n\t\treturn {\n\t\t\trequestID: request.id,\n\t\t\treply: \"reject\",\n\t\t\tmessage: `Permission denied by config: ${request.permission}`,\n\t\t};\n\t}\n\n\t// Still \"ask\" - auto-deny with helpful message\n\tconst patternsStr = request.patterns.join(\", \");\n\treturn {\n\t\trequestID: request.id,\n\t\treply: \"reject\",\n\t\tmessage: `Permission required for ${request.permission} (${patternsStr}). Use --permission ${request.permission}=allow to override.`,\n\t};\n}\n"]}

package/dist/core/extensions/builtin/permission-system/parsers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parsers.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/parsers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAE7D,gEAAgE;AAChE,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC;AAEpF,wEAAwE;AACxE,MAAM,MAAM,oBAAoB,GAAG,CAClC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,EAAE,MAAM,KACP,iBAAiB,EAAE,CAAC;AAoCzB,oDAAoD;AACpD,qBAAa,cAAc;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2C;IAEnE,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAE7D;IAED,gDAAgD;IAChD,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAMxF;CACD;AAED,+DAA+D;AAC/D,wBAAgB,2BAA2B,IAAI,cAAc,CAqH5D","sourcesContent":["import { extractPatchedPaths } from \"../gpt-apply-patch/index.ts\";\nimport { BashArity } from \"../permission-system/arity.ts\";\nimport { extractExternalPaths } from \"../permission-system/external-dir.ts\";\nimport type { Request } from \"../permission-system/types.ts\";\n\n/** Simplified permission request without ID/session metadata */\nexport type PermissionRequest = Pick<Request, \"permission\" | \"patterns\" | \"always\">;\n\n/** Parser function that extracts permission requests from tool input */\nexport type ToolPermissionParser = (\n\ttoolName: string,\n\tinput: Record<string, unknown>,\n\tcwd: string,\n) => PermissionRequest[];\n\nfunction fallbackPermissionRequest(permission: string): PermissionRequest {\n\treturn {\n\t\tpermission,\n\t\tpatterns: [\"*\"],\n\t\talways: [\"*\"],\n\t};\n}\n\nfunction getString(input: Record<string, unknown>, ...keys: string[]): string | undefined {\n\tfor (const key of keys) {\n\t\tconst value = input[key];\n\t\tif (typeof value === \"string\") {\n\t\t\treturn value;\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction toParentDirectoryPattern(inputPath: string): string {\n\tif (inputPath === \"~\" || inputPath === \"$HOME\") {\n\t\treturn `${inputPath}/*`;\n\t}\n\n\tif (inputPath.endsWith(\"/\") || inputPath.endsWith(\"\\\\\")) {\n\t\treturn `${inputPath}*`;\n\t}\n\n\treturn inputPath.replace(/[\\\\/][^\\\\/]+$/, \"/*\");\n}\n\nfunction parseFilePath(input: Record<string, unknown>): string | undefined {\n\treturn getString(input, \"path\", \"file_path\");\n}\n\n/** Registry for tool-specific permission parsers */\nexport class ParserRegistry {\n\tprivate readonly parsers = new Map<string, ToolPermissionParser>();\n\n\t/** Register a parser for a specific tool */\n\tregister(toolName: string, parser: ToolPermissionParser): void {\n\t\tthis.parsers.set(toolName, parser);\n\t}\n\n\t/** Parse tool input into permission requests */\n\tparse(toolName: string, input: Record<string, unknown>, cwd: string): PermissionRequest[] {\n\t\tconst parser = this.parsers.get(toolName);\n\t\tif (!parser) {\n\t\t\treturn [fallbackPermissionRequest(toolName)];\n\t\t}\n\t\treturn parser(toolName, input, cwd);\n\t}\n}\n\n/** Create registry with built-in parsers for standard tools */\nexport function createBuiltinParserRegistry(): ParserRegistry {\n\tconst registry = new ParserRegistry();\n\n\tregistry.register(\"bash\", (_toolName, input, cwd) => {\n\t\tconst command = getString(input, \"command\");\n\t\tif (!command) {\n\t\t\treturn [fallbackPermissionRequest(\"bash\")];\n\t\t}\n\n\t\tconst tokens = command.split(/\\s+/).filter(Boolean);\n\t\tconst prefix = BashArity.prefix(tokens).join(\" \");\n\t\tconst always = prefix ? [prefix, `${prefix} *`] : [\"*\"];\n\t\tconst requests: PermissionRequest[] = [\n\t\t\t{\n\t\t\t\tpermission: \"bash\",\n\t\t\t\tpatterns: [prefix || command],\n\t\t\t\talways,\n\t\t\t},\n\t\t];\n\n\t\tconst externalPaths = extractExternalPaths(command, cwd);\n\t\tif (externalPaths.length > 0) {\n\t\t\trequests.push({\n\t\t\t\tpermission: \"external_directory\",\n\t\t\t\tpatterns: externalPaths,\n\t\t\t\talways: externalPaths.map(toParentDirectoryPattern),\n\t\t\t});\n\t\t}\n\n\t\treturn requests;\n\t});\n\n\tconst editParser: ToolPermissionParser = () => {\n\t\treturn [fallbackPermissionRequest(\"edit\")];\n\t};\n\n\tconst parseEditPermission: ToolPermissionParser = (_toolName, input) => {\n\t\tconst filePath = parseFilePath(input);\n\t\tif (filePath) {\n\t\t\treturn [\n\t\t\t\t{\n\t\t\t\t\tpermission: \"edit\",\n\t\t\t\t\tpatterns: [filePath],\n\t\t\t\t\talways: [filePath],\n\t\t\t\t},\n\t\t\t];\n\t\t}\n\n\t\tconst patchText = getString(input, \"input\", \"patchText\");\n\t\tif (!patchText) {\n\t\t\treturn editParser(\"edit\", input, \"\");\n\t\t}\n\n\t\tconst patchedPaths = extractPatchedPaths(patchText);\n\t\tif (patchedPaths.length === 0) {\n\t\t\treturn editParser(\"edit\", input, \"\");\n\t\t}\n\n\t\treturn patchedPaths.map((patchedPath) => ({\n\t\t\tpermission: \"edit\",\n\t\t\tpatterns: [patchedPath],\n\t\t\talways: [patchedPath],\n\t\t}));\n\t};\n\n\tregistry.register(\"edit\", parseEditPermission);\n\tregistry.register(\"write\", parseEditPermission);\n\tregistry.register(\"apply_patch\", parseEditPermission);\n\tregistry.register(\"multiedit\", parseEditPermission);\n\n\tregistry.register(\"read\", (_toolName, input) => {\n\t\tconst filePath = parseFilePath(input);\n\t\tif (!filePath) {\n\t\t\treturn [fallbackPermissionRequest(\"read\")];\n\t\t}\n\n\t\treturn [\n\t\t\t{\n\t\t\t\tpermission: \"read\",\n\t\t\t\tpatterns: [filePath],\n\t\t\t\talways: [filePath],\n\t\t\t},\n\t\t];\n\t});\n\n\tregistry.register(\"grep\", (_toolName, input) => {\n\t\tconst searchPath = getString(input, \"path\");\n\t\tconst pattern = getString(input, \"pattern\");\n\t\tconst permissionPattern = searchPath ?? pattern;\n\t\tif (!permissionPattern) {\n\t\t\treturn [fallbackPermissionRequest(\"grep\")];\n\t\t}\n\n\t\treturn [\n\t\t\t{\n\t\t\t\tpermission: \"grep\",\n\t\t\t\tpatterns: [permissionPattern],\n\t\t\t\talways: [\"*\"],\n\t\t\t},\n\t\t];\n\t});\n\n\tconst listParser: ToolPermissionParser = (_toolName, input) => {\n\t\tconst searchPath = getString(input, \"path\") ?? \".\";\n\t\treturn [\n\t\t\t{\n\t\t\t\tpermission: \"list\",\n\t\t\t\tpatterns: [searchPath],\n\t\t\t\talways: [searchPath],\n\t\t\t},\n\t\t];\n\t};\n\n\tregistry.register(\"find\", listParser);\n\tregistry.register(\"ls\", listParser);\n\n\treturn registry;\n}\n"]}
+{"version":3,"file":"parsers.d.ts","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/parsers.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAE7D,gEAAgE;AAChE,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC;AAEpF,wEAAwE;AACxE,MAAM,MAAM,oBAAoB,GAAG,CAClC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,EAAE,MAAM,KACP,iBAAiB,EAAE,CAAC;AAoCzB,oDAAoD;AACpD,qBAAa,cAAc;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2C;IAEnE,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAE7D;IAED,gDAAgD;IAChD,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAMxF;CACD;AAED,+DAA+D;AAC/D,wBAAgB,2BAA2B,IAAI,cAAc,CAqH5D"}

package/dist/core/extensions/builtin/permission-system/parsers.js

@@ -31,7 +31,9 @@ function parseFilePath(input) {
 }
 /** Registry for tool-specific permission parsers */
 export class ParserRegistry {
-    parsers = new Map();
+    constructor() {
+        this.parsers = new Map();
+    }
     /** Register a parser for a specific tool */
     register(toolName, parser) {
         this.parsers.set(toolName, parser);

package/dist/core/extensions/builtin/permission-system/parsers.js.map

@@ -1 +1 @@
-{"version":3,"file":"parsers.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/parsers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAa5E,SAAS,yBAAyB,CAAC,UAAkB,EAAqB;IACzE,OAAO;QACN,UAAU;QACV,QAAQ,EAAE,CAAC,GAAG,CAAC;QACf,MAAM,EAAE,CAAC,GAAG,CAAC;KACb,CAAC;AAAA,CACF;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,GAAG,IAAc,EAAsB;IACzF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,wBAAwB,CAAC,SAAiB,EAAU;IAC5D,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAChD,OAAO,GAAG,SAAS,IAAI,CAAC;IACzB,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,OAAO,GAAG,SAAS,GAAG,CAAC;IACxB,CAAC;IAED,OAAO,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;AAAA,CAChD;AAED,SAAS,aAAa,CAAC,KAA8B,EAAsB;IAC1E,OAAO,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AAAA,CAC7C;AAED,oDAAoD;AACpD,MAAM,OAAO,cAAc;IACT,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;IAEnE,4CAA4C;IAC5C,QAAQ,CAAC,QAAgB,EAAE,MAA4B,EAAQ;QAC9D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAAA,CACnC;IAED,gDAAgD;IAChD,KAAK,CAAC,QAAgB,EAAE,KAA8B,EAAE,GAAW,EAAuB;QACzF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAAA,CACpC;CACD;AAED,+DAA+D;AAC/D,MAAM,UAAU,2BAA2B,GAAmB;IAC7D,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;IAEtC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAwB;YACrC;gBACC,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,CAAC,MAAM,IAAI,OAAO,CAAC;gBAC7B,MAAM;aACN;SACD,CAAC;QAEF,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC;gBACb,UAAU,EAAE,oBAAoB;gBAChC,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,wBAAwB,CAAC;aACnD,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IAAA,CAChB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAyB,GAAG,EAAE,CAAC;QAC9C,OAAO,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;IAAA,CAC3C,CAAC;IAEF,MAAM,mBAAmB,GAAyB,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QACvE,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,QAAQ,EAAE,CAAC;YACd,OAAO;gBACN;oBACC,UAAU,EAAE,MAAM;oBAClB,QAAQ,EAAE,CAAC,QAAQ,CAAC;oBACpB,MAAM,EAAE,CAAC,QAAQ,CAAC;iBAClB;aACD,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,OAAO,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACzC,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,CAAC,WAAW,CAAC;YACvB,MAAM,EAAE,CAAC,WAAW,CAAC;SACrB,CAAC,CAAC,CAAC;IAAA,CACJ,CAAC;IAEF,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC/C,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAChD,QAAQ,CAAC,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;IACtD,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAEpD,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO;YACN;gBACC,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,CAAC,QAAQ,CAAC;gBACpB,MAAM,EAAE,CAAC,QAAQ,CAAC;aAClB;SACD,CAAC;IAAA,CACF,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5C,MAAM,iBAAiB,GAAG,UAAU,IAAI,OAAO,CAAC;QAChD,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO;YACN;gBACC,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,CAAC,iBAAiB,CAAC;gBAC7B,MAAM,EAAE,CAAC,GAAG,CAAC;aACb;SACD,CAAC;IAAA,CACF,CAAC,CAAC;IAEH,MAAM,UAAU,GAAyB,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9D,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC;QACnD,OAAO;YACN;gBACC,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,CAAC,UAAU,CAAC;gBACtB,MAAM,EAAE,CAAC,UAAU,CAAC;aACpB;SACD,CAAC;IAAA,CACF,CAAC;IAEF,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAEpC,OAAO,QAAQ,CAAC;AAAA,CAChB","sourcesContent":["import { extractPatchedPaths } from \"../gpt-apply-patch/index.ts\";\nimport { BashArity } from \"../permission-system/arity.ts\";\nimport { extractExternalPaths } from \"../permission-system/external-dir.ts\";\nimport type { Request } from \"../permission-system/types.ts\";\n\n/** Simplified permission request without ID/session metadata */\nexport type PermissionRequest = Pick<Request, \"permission\" | \"patterns\" | \"always\">;\n\n/** Parser function that extracts permission requests from tool input */\nexport type ToolPermissionParser = (\n\ttoolName: string,\n\tinput: Record<string, unknown>,\n\tcwd: string,\n) => PermissionRequest[];\n\nfunction fallbackPermissionRequest(permission: string): PermissionRequest {\n\treturn {\n\t\tpermission,\n\t\tpatterns: [\"*\"],\n\t\talways: [\"*\"],\n\t};\n}\n\nfunction getString(input: Record<string, unknown>, ...keys: string[]): string | undefined {\n\tfor (const key of keys) {\n\t\tconst value = input[key];\n\t\tif (typeof value === \"string\") {\n\t\t\treturn value;\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction toParentDirectoryPattern(inputPath: string): string {\n\tif (inputPath === \"~\" || inputPath === \"$HOME\") {\n\t\treturn `${inputPath}/*`;\n\t}\n\n\tif (inputPath.endsWith(\"/\") || inputPath.endsWith(\"\\\\\")) {\n\t\treturn `${inputPath}*`;\n\t}\n\n\treturn inputPath.replace(/[\\\\/][^\\\\/]+$/, \"/*\");\n}\n\nfunction parseFilePath(input: Record<string, unknown>): string | undefined {\n\treturn getString(input, \"path\", \"file_path\");\n}\n\n/** Registry for tool-specific permission parsers */\nexport class ParserRegistry {\n\tprivate readonly parsers = new Map<string, ToolPermissionParser>();\n\n\t/** Register a parser for a specific tool */\n\tregister(toolName: string, parser: ToolPermissionParser): void {\n\t\tthis.parsers.set(toolName, parser);\n\t}\n\n\t/** Parse tool input into permission requests */\n\tparse(toolName: string, input: Record<string, unknown>, cwd: string): PermissionRequest[] {\n\t\tconst parser = this.parsers.get(toolName);\n\t\tif (!parser) {\n\t\t\treturn [fallbackPermissionRequest(toolName)];\n\t\t}\n\t\treturn parser(toolName, input, cwd);\n\t}\n}\n\n/** Create registry with built-in parsers for standard tools */\nexport function createBuiltinParserRegistry(): ParserRegistry {\n\tconst registry = new ParserRegistry();\n\n\tregistry.register(\"bash\", (_toolName, input, cwd) => {\n\t\tconst command = getString(input, \"command\");\n\t\tif (!command) {\n\t\t\treturn [fallbackPermissionRequest(\"bash\")];\n\t\t}\n\n\t\tconst tokens = command.split(/\\s+/).filter(Boolean);\n\t\tconst prefix = BashArity.prefix(tokens).join(\" \");\n\t\tconst always = prefix ? [prefix, `${prefix} *`] : [\"*\"];\n\t\tconst requests: PermissionRequest[] = [\n\t\t\t{\n\t\t\t\tpermission: \"bash\",\n\t\t\t\tpatterns: [prefix || command],\n\t\t\t\talways,\n\t\t\t},\n\t\t];\n\n\t\tconst externalPaths = extractExternalPaths(command, cwd);\n\t\tif (externalPaths.length > 0) {\n\t\t\trequests.push({\n\t\t\t\tpermission: \"external_directory\",\n\t\t\t\tpatterns: externalPaths,\n\t\t\t\talways: externalPaths.map(toParentDirectoryPattern),\n\t\t\t});\n\t\t}\n\n\t\treturn requests;\n\t});\n\n\tconst editParser: ToolPermissionParser = () => {\n\t\treturn [fallbackPermissionRequest(\"edit\")];\n\t};\n\n\tconst parseEditPermission: ToolPermissionParser = (_toolName, input) => {\n\t\tconst filePath = parseFilePath(input);\n\t\tif (filePath) {\n\t\t\treturn [\n\t\t\t\t{\n\t\t\t\t\tpermission: \"edit\",\n\t\t\t\t\tpatterns: [filePath],\n\t\t\t\t\talways: [filePath],\n\t\t\t\t},\n\t\t\t];\n\t\t}\n\n\t\tconst patchText = getString(input, \"input\", \"patchText\");\n\t\tif (!patchText) {\n\t\t\treturn editParser(\"edit\", input, \"\");\n\t\t}\n\n\t\tconst patchedPaths = extractPatchedPaths(patchText);\n\t\tif (patchedPaths.length === 0) {\n\t\t\treturn editParser(\"edit\", input, \"\");\n\t\t}\n\n\t\treturn patchedPaths.map((patchedPath) => ({\n\t\t\tpermission: \"edit\",\n\t\t\tpatterns: [patchedPath],\n\t\t\talways: [patchedPath],\n\t\t}));\n\t};\n\n\tregistry.register(\"edit\", parseEditPermission);\n\tregistry.register(\"write\", parseEditPermission);\n\tregistry.register(\"apply_patch\", parseEditPermission);\n\tregistry.register(\"multiedit\", parseEditPermission);\n\n\tregistry.register(\"read\", (_toolName, input) => {\n\t\tconst filePath = parseFilePath(input);\n\t\tif (!filePath) {\n\t\t\treturn [fallbackPermissionRequest(\"read\")];\n\t\t}\n\n\t\treturn [\n\t\t\t{\n\t\t\t\tpermission: \"read\",\n\t\t\t\tpatterns: [filePath],\n\t\t\t\talways: [filePath],\n\t\t\t},\n\t\t];\n\t});\n\n\tregistry.register(\"grep\", (_toolName, input) => {\n\t\tconst searchPath = getString(input, \"path\");\n\t\tconst pattern = getString(input, \"pattern\");\n\t\tconst permissionPattern = searchPath ?? pattern;\n\t\tif (!permissionPattern) {\n\t\t\treturn [fallbackPermissionRequest(\"grep\")];\n\t\t}\n\n\t\treturn [\n\t\t\t{\n\t\t\t\tpermission: \"grep\",\n\t\t\t\tpatterns: [permissionPattern],\n\t\t\t\talways: [\"*\"],\n\t\t\t},\n\t\t];\n\t});\n\n\tconst listParser: ToolPermissionParser = (_toolName, input) => {\n\t\tconst searchPath = getString(input, \"path\") ?? \".\";\n\t\treturn [\n\t\t\t{\n\t\t\t\tpermission: \"list\",\n\t\t\t\tpatterns: [searchPath],\n\t\t\t\talways: [searchPath],\n\t\t\t},\n\t\t];\n\t};\n\n\tregistry.register(\"find\", listParser);\n\tregistry.register(\"ls\", listParser);\n\n\treturn registry;\n}\n"]}
+{"version":3,"file":"parsers.js","sourceRoot":"","sources":["../../../../../src/core/extensions/builtin/permission-system/parsers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAa5E,SAAS,yBAAyB,CAAC,UAAkB;IACpD,OAAO;QACN,UAAU;QACV,QAAQ,EAAE,CAAC,GAAG,CAAC;QACf,MAAM,EAAE,CAAC,GAAG,CAAC;KACb,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,GAAG,IAAc;IACnE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,SAAiB;IAClD,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAChD,OAAO,GAAG,SAAS,IAAI,CAAC;IACzB,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,OAAO,GAAG,SAAS,GAAG,CAAC;IACxB,CAAC;IAED,OAAO,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,aAAa,CAAC,KAA8B;IACpD,OAAO,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AAED,oDAAoD;AACpD,MAAM,OAAO,cAAc;IAA3B;QACkB,YAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;IAepE,CAAC;IAbA,4CAA4C;IAC5C,QAAQ,CAAC,QAAgB,EAAE,MAA4B;QACtD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,QAAgB,EAAE,KAA8B,EAAE,GAAW;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;CACD;AAED,+DAA+D;AAC/D,MAAM,UAAU,2BAA2B;IAC1C,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;IAEtC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAwB;YACrC;gBACC,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,CAAC,MAAM,IAAI,OAAO,CAAC;gBAC7B,MAAM;aACN;SACD,CAAC;QAEF,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC;gBACb,UAAU,EAAE,oBAAoB;gBAChC,QAAQ,EAAE,aAAa;gBACvB,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,wBAAwB,CAAC;aACnD,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAyB,GAAG,EAAE;QAC7C,OAAO,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAyB,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QACtE,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,QAAQ,EAAE,CAAC;YACd,OAAO;gBACN;oBACC,UAAU,EAAE,MAAM;oBAClB,QAAQ,EAAE,CAAC,QAAQ,CAAC;oBACpB,MAAM,EAAE,CAAC,QAAQ,CAAC;iBAClB;aACD,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,OAAO,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACzC,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,CAAC,WAAW,CAAC;YACvB,MAAM,EAAE,CAAC,WAAW,CAAC;SACrB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAC/C,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAChD,QAAQ,CAAC,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;IACtD,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAEpD,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO;YACN;gBACC,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,CAAC,QAAQ,CAAC;gBACpB,MAAM,EAAE,CAAC,QAAQ,CAAC;aAClB;SACD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QAC9C,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5C,MAAM,iBAAiB,GAAG,UAAU,IAAI,OAAO,CAAC;QAChD,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO;YACN;gBACC,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,CAAC,iBAAiB,CAAC;gBAC7B,MAAM,EAAE,CAAC,GAAG,CAAC;aACb;SACD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAyB,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QAC7D,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC;QACnD,OAAO;YACN;gBACC,UAAU,EAAE,MAAM;gBAClB,QAAQ,EAAE,CAAC,UAAU,CAAC;gBACtB,MAAM,EAAE,CAAC,UAAU,CAAC;aACpB;SACD,CAAC;IACH,CAAC,CAAC;IAEF,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAEpC,OAAO,QAAQ,CAAC;AACjB,CAAC","sourcesContent":["import { extractPatchedPaths } from \"../gpt-apply-patch/index.ts\";\nimport { BashArity } from \"../permission-system/arity.ts\";\nimport { extractExternalPaths } from \"../permission-system/external-dir.ts\";\nimport type { Request } from \"../permission-system/types.ts\";\n\n/** Simplified permission request without ID/session metadata */\nexport type PermissionRequest = Pick<Request, \"permission\" | \"patterns\" | \"always\">;\n\n/** Parser function that extracts permission requests from tool input */\nexport type ToolPermissionParser = (\n\ttoolName: string,\n\tinput: Record<string, unknown>,\n\tcwd: string,\n) => PermissionRequest[];\n\nfunction fallbackPermissionRequest(permission: string): PermissionRequest {\n\treturn {\n\t\tpermission,\n\t\tpatterns: [\"*\"],\n\t\talways: [\"*\"],\n\t};\n}\n\nfunction getString(input: Record<string, unknown>, ...keys: string[]): string | undefined {\n\tfor (const key of keys) {\n\t\tconst value = input[key];\n\t\tif (typeof value === \"string\") {\n\t\t\treturn value;\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction toParentDirectoryPattern(inputPath: string): string {\n\tif (inputPath === \"~\" || inputPath === \"$HOME\") {\n\t\treturn `${inputPath}/*`;\n\t}\n\n\tif (inputPath.endsWith(\"/\") || inputPath.endsWith(\"\\\\\")) {\n\t\treturn `${inputPath}*`;\n\t}\n\n\treturn inputPath.replace(/[\\\\/][^\\\\/]+$/, \"/*\");\n}\n\nfunction parseFilePath(input: Record<string, unknown>): string | undefined {\n\treturn getString(input, \"path\", \"file_path\");\n}\n\n/** Registry for tool-specific permission parsers */\nexport class ParserRegistry {\n\tprivate readonly parsers = new Map<string, ToolPermissionParser>();\n\n\t/** Register a parser for a specific tool */\n\tregister(toolName: string, parser: ToolPermissionParser): void {\n\t\tthis.parsers.set(toolName, parser);\n\t}\n\n\t/** Parse tool input into permission requests */\n\tparse(toolName: string, input: Record<string, unknown>, cwd: string): PermissionRequest[] {\n\t\tconst parser = this.parsers.get(toolName);\n\t\tif (!parser) {\n\t\t\treturn [fallbackPermissionRequest(toolName)];\n\t\t}\n\t\treturn parser(toolName, input, cwd);\n\t}\n}\n\n/** Create registry with built-in parsers for standard tools */\nexport function createBuiltinParserRegistry(): ParserRegistry {\n\tconst registry = new ParserRegistry();\n\n\tregistry.register(\"bash\", (_toolName, input, cwd) => {\n\t\tconst command = getString(input, \"command\");\n\t\tif (!command) {\n\t\t\treturn [fallbackPermissionRequest(\"bash\")];\n\t\t}\n\n\t\tconst tokens = command.split(/\\s+/).filter(Boolean);\n\t\tconst prefix = BashArity.prefix(tokens).join(\" \");\n\t\tconst always = prefix ? [prefix, `${prefix} *`] : [\"*\"];\n\t\tconst requests: PermissionRequest[] = [\n\t\t\t{\n\t\t\t\tpermission: \"bash\",\n\t\t\t\tpatterns: [prefix || command],\n\t\t\t\talways,\n\t\t\t},\n\t\t];\n\n\t\tconst externalPaths = extractExternalPaths(command, cwd);\n\t\tif (externalPaths.length > 0) {\n\t\t\trequests.push({\n\t\t\t\tpermission: \"external_directory\",\n\t\t\t\tpatterns: externalPaths,\n\t\t\t\talways: externalPaths.map(toParentDirectoryPattern),\n\t\t\t});\n\t\t}\n\n\t\treturn requests;\n\t});\n\n\tconst editParser: ToolPermissionParser = () => {\n\t\treturn [fallbackPermissionRequest(\"edit\")];\n\t};\n\n\tconst parseEditPermission: ToolPermissionParser = (_toolName, input) => {\n\t\tconst filePath = parseFilePath(input);\n\t\tif (filePath) {\n\t\t\treturn [\n\t\t\t\t{\n\t\t\t\t\tpermission: \"edit\",\n\t\t\t\t\tpatterns: [filePath],\n\t\t\t\t\talways: [filePath],\n\t\t\t\t},\n\t\t\t];\n\t\t}\n\n\t\tconst patchText = getString(input, \"input\", \"patchText\");\n\t\tif (!patchText) {\n\t\t\treturn editParser(\"edit\", input, \"\");\n\t\t}\n\n\t\tconst patchedPaths = extractPatchedPaths(patchText);\n\t\tif (patchedPaths.length === 0) {\n\t\t\treturn editParser(\"edit\", input, \"\");\n\t\t}\n\n\t\treturn patchedPaths.map((patchedPath) => ({\n\t\t\tpermission: \"edit\",\n\t\t\tpatterns: [patchedPath],\n\t\t\talways: [patchedPath],\n\t\t}));\n\t};\n\n\tregistry.register(\"edit\", parseEditPermission);\n\tregistry.register(\"write\", parseEditPermission);\n\tregistry.register(\"apply_patch\", parseEditPermission);\n\tregistry.register(\"multiedit\", parseEditPermission);\n\n\tregistry.register(\"read\", (_toolName, input) => {\n\t\tconst filePath = parseFilePath(input);\n\t\tif (!filePath) {\n\t\t\treturn [fallbackPermissionRequest(\"read\")];\n\t\t}\n\n\t\treturn [\n\t\t\t{\n\t\t\t\tpermission: \"read\",\n\t\t\t\tpatterns: [filePath],\n\t\t\t\talways: [filePath],\n\t\t\t},\n\t\t];\n\t});\n\n\tregistry.register(\"grep\", (_toolName, input) => {\n\t\tconst searchPath = getString(input, \"path\");\n\t\tconst pattern = getString(input, \"pattern\");\n\t\tconst permissionPattern = searchPath ?? pattern;\n\t\tif (!permissionPattern) {\n\t\t\treturn [fallbackPermissionRequest(\"grep\")];\n\t\t}\n\n\t\treturn [\n\t\t\t{\n\t\t\t\tpermission: \"grep\",\n\t\t\t\tpatterns: [permissionPattern],\n\t\t\t\talways: [\"*\"],\n\t\t\t},\n\t\t];\n\t});\n\n\tconst listParser: ToolPermissionParser = (_toolName, input) => {\n\t\tconst searchPath = getString(input, \"path\") ?? \".\";\n\t\treturn [\n\t\t\t{\n\t\t\t\tpermission: \"list\",\n\t\t\t\tpatterns: [searchPath],\n\t\t\t\talways: [searchPath],\n\t\t\t},\n\t\t];\n\t};\n\n\tregistry.register(\"find\", listParser);\n\tregistry.register(\"ls\", listParser);\n\n\treturn registry;\n}\n"]}