@daniel.stefan/metalink 1.3.1

package/packages/cli/dist/commands/safety/add-safe.d.ts

@@ -0,0 +1,12 @@
+import { Command } from '@oclif/core';
+export default class SafetyAddSafe extends Command {
+    static description: string;
+    static args: {
+        tool: import("@oclif/core/lib/interfaces/parser.js").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        reason: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=add-safe.d.ts.map

package/packages/cli/dist/commands/safety/add-safe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-safe.d.ts","sourceRoot":"","sources":["../../../src/commands/safety/add-safe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,MAAM,aAAa,CAAC;AAGnD,MAAM,CAAC,OAAO,OAAO,aAAc,SAAQ,OAAO;IAChD,MAAM,CAAC,WAAW,SAA2D;IAE7E,MAAM,CAAC,IAAI;;MAKT;IAEF,MAAM,CAAC,KAAK;;MAKV;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAuC3B"}

package/packages/cli/dist/commands/safety/add-safe.js

@@ -0,0 +1,52 @@
+import { Command, Args, Flags } from '@oclif/core';
+import { getDaemonEndpoint } from '../../utils/daemon-endpoint.js';
+class SafetyAddSafe extends Command {
+    async run() {
+        const { args, flags } = await this.parse(SafetyAddSafe);
+        // Normalize tool identifier: convert - to :
+        const toolId = args.tool.includes(':') ? args.tool : args.tool.replace('-', ':');
+        try {
+            const response = await fetch(`${getDaemonEndpoint()}/api/v1/safety/tools/safe`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({
+                    tool: toolId,
+                }),
+            });
+            if (!response.ok) {
+                const data = await response.json();
+                this.error(`Failed to add safe override: ${data.error || 'Unknown error'}`);
+            }
+            const result = await response.json();
+            if (result.success) {
+                this.log(`✓ Tool '${toolId}' marked as safe`);
+                if (flags.reason) {
+                    this.log(`  Reason: ${flags.reason}`);
+                }
+            }
+            else {
+                this.error(result.message || 'Failed to add safe override');
+            }
+        }
+        catch (error) {
+            this.error(`Failed to add safe override: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+}
+SafetyAddSafe.description = 'Mark a tool as safe (override default classification)';
+SafetyAddSafe.args = {
+    tool: Args.string({
+        description: 'Tool identifier (server:toolName or server-toolName)',
+        required: true,
+    }),
+};
+SafetyAddSafe.flags = {
+    reason: Flags.string({
+        char: 'r',
+        description: 'Optional reason for marking as safe',
+    }),
+};
+export default SafetyAddSafe;
+//# sourceMappingURL=add-safe.js.map

package/packages/cli/dist/commands/safety/add-safe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-safe.js","sourceRoot":"","sources":["../../../src/commands/safety/add-safe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAEnE,MAAqB,aAAc,SAAQ,OAAO;IAiBhD,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAExD,4CAA4C;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAEjF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,iBAAiB,EAAE,2BAA2B,EACjD;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI,EAAE,MAAM;iBACb,CAAC;aACH,CACF,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAwB,CAAC;gBACzD,IAAI,CAAC,KAAK,CAAC,gCAAgC,IAAI,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;YAC9E,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA4C,CAAC;YAE/E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,IAAI,CAAC,GAAG,CAAC,WAAW,MAAM,kBAAkB,CAAC,CAAC;gBAC9C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjB,IAAI,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,6BAA6B,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;;AAtDM,yBAAW,GAAG,uDAAuD,CAAC;AAEtE,kBAAI,GAAG;IACZ,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAChB,WAAW,EAAE,sDAAsD;QACnE,QAAQ,EAAE,IAAI;KACf,CAAC;CACH,CAAC;AAEK,mBAAK,GAAG;IACb,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,GAAG;QACT,WAAW,EAAE,qCAAqC;KACnD,CAAC;CACH,CAAC;eAfiB,aAAa"}

package/packages/cli/dist/commands/safety/check.d.ts

@@ -0,0 +1,9 @@
+import { Command } from '@oclif/core';
+export default class SafetyCheck extends Command {
+    static description: string;
+    static args: {
+        tool: import("@oclif/core/lib/interfaces/parser.js").Arg<string, Record<string, unknown>>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=check.d.ts.map

package/packages/cli/dist/commands/safety/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../../src/commands/safety/check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,MAAM,aAAa,CAAC;AAG5C,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,OAAO;IAC9C,MAAM,CAAC,WAAW,SAAsC;IAExD,MAAM,CAAC,IAAI;;MAKT;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAkC3B"}

package/packages/cli/dist/commands/safety/check.js

@@ -0,0 +1,36 @@
+import { Command, Args } from '@oclif/core';
+import { getDaemonEndpoint } from '../../utils/daemon-endpoint.js';
+class SafetyCheck extends Command {
+    async run() {
+        const { args } = await this.parse(SafetyCheck);
+        // Normalize tool identifier: convert - to :
+        const [server, tool] = args.tool.replace('-', ':').split(':');
+        if (!server || !tool) {
+            this.error('Invalid format. Use: server:toolName or server-toolName');
+        }
+        try {
+            const response = await fetch(`${getDaemonEndpoint()}/api/v1/safety/check/${encodeURIComponent(server)}/${encodeURIComponent(tool)}`);
+            if (!response.ok) {
+                const data = await response.json();
+                this.error(`Failed to check tool: ${data.error || 'Unknown error'}`);
+            }
+            const data = await response.json();
+            this.log(`Tool: ${server}:${tool}`);
+            this.log(`Safety Level: ${data.safety}`);
+            this.log(`Reason: ${data.reason}`);
+            this.log(`Requires Confirmation: ${data.requiresConfirmation ? 'Yes' : 'No'}`);
+        }
+        catch (error) {
+            this.error(`Failed to check tool safety: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+}
+SafetyCheck.description = 'Check if a tool is safe or risky';
+SafetyCheck.args = {
+    tool: Args.string({
+        description: 'Tool identifier (server-toolName or server:toolName)',
+        required: true,
+    }),
+};
+export default SafetyCheck;
+//# sourceMappingURL=check.js.map

package/packages/cli/dist/commands/safety/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../../src/commands/safety/check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAEnE,MAAqB,WAAY,SAAQ,OAAO;IAU9C,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAE/C,4CAA4C;QAC5C,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE9D,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,iBAAiB,EAAE,wBAAwB,kBAAkB,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CACvG,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAwB,CAAC;gBACzD,IAAI,CAAC,KAAK,CAAC,yBAAyB,IAAI,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAI/B,CAAC;YAEF,IAAI,CAAC,GAAG,CAAC,SAAS,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,0BAA0B,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;;AA1CM,uBAAW,GAAG,kCAAkC,CAAC;AAEjD,gBAAI,GAAG;IACZ,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAChB,WAAW,EAAE,sDAAsD;QACnE,QAAQ,EAAE,IAAI;KACf,CAAC;CACH,CAAC;eARiB,WAAW"}

package/packages/cli/dist/commands/safety/export.d.ts

@@ -0,0 +1,10 @@
+import { Command } from '@oclif/core';
+export default class SafetyExport extends Command {
+    static description: string;
+    static flags: {
+        output: import("@oclif/core/lib/interfaces/parser.js").OptionFlag<string, import("@oclif/core/lib/interfaces/parser.js").CustomOptions>;
+        pretty: import("@oclif/core/lib/interfaces/parser.js").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=export.d.ts.map

package/packages/cli/dist/commands/safety/export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.d.ts","sourceRoot":"","sources":["../../../src/commands/safety/export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAS,MAAM,aAAa,CAAC;AAK7C,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,OAAO;IAC/C,MAAM,CAAC,WAAW,SAAwC;IAE1D,MAAM,CAAC,KAAK;;;MAWV;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAsC3B"}

package/packages/cli/dist/commands/safety/export.js

@@ -0,0 +1,48 @@
+import { Command, Flags } from '@oclif/core';
+import { getDaemonEndpoint } from '../../utils/daemon-endpoint.js';
+import * as fs from 'fs';
+import * as path from 'path';
+class SafetyExport extends Command {
+    async run() {
+        const { flags } = await this.parse(SafetyExport);
+        try {
+            const response = await fetch(`${getDaemonEndpoint()}/api/v1/safety?include_patterns=true`);
+            if (!response.ok) {
+                const data = await response.json();
+                this.error(`Failed to fetch rules: ${data.error || 'Unknown error'}`);
+            }
+            const data = await response.json();
+            const outputPath = path.resolve(flags.output);
+            const outputDir = path.dirname(outputPath);
+            // Ensure output directory exists
+            if (!fs.existsSync(outputDir)) {
+                fs.mkdirSync(outputDir, { recursive: true });
+            }
+            const jsonContent = flags.pretty ? JSON.stringify(data, null, 2) : JSON.stringify(data);
+            fs.writeFileSync(outputPath, jsonContent, 'utf-8');
+            this.log(`✓ Safety rules exported to: ${outputPath}`);
+            this.log(`  - Safe tool overrides: ${data.safeToolOverrides?.length || 0}`);
+            this.log(`  - Risky tool overrides: ${data.riskyToolOverrides?.length || 0}`);
+            this.log(`  - Safe patterns: ${data.safePatterns?.length || 0}`);
+            this.log(`  - Risky patterns: ${data.riskyPatterns?.length || 0}`);
+        }
+        catch (error) {
+            this.error(`Failed to export rules: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+}
+SafetyExport.description = 'Export safety rules to a JSON file';
+SafetyExport.flags = {
+    output: Flags.string({
+        char: 'o',
+        description: 'Output file path (default: safety-rules.json)',
+        default: 'safety-rules.json',
+    }),
+    pretty: Flags.boolean({
+        char: 'p',
+        description: 'Pretty-print JSON output',
+        default: true,
+    }),
+};
+export default SafetyExport;
+//# sourceMappingURL=export.js.map

package/packages/cli/dist/commands/safety/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../../../src/commands/safety/export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,MAAqB,YAAa,SAAQ,OAAO;IAgB/C,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;YAE3F,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAwB,CAAC;gBACzD,IAAI,CAAC,KAAK,CAAC,0BAA0B,IAAI,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAK/B,CAAC;YAEF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAE3C,iCAAiC;YACjC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACxF,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAEnD,IAAI,CAAC,GAAG,CAAC,+BAA+B,UAAU,EAAE,CAAC,CAAC;YACtD,IAAI,CAAC,GAAG,CAAC,4BAA4B,IAAI,CAAC,iBAAiB,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5E,IAAI,CAAC,GAAG,CAAC,6BAA6B,IAAI,CAAC,kBAAkB,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9E,IAAI,CAAC,GAAG,CAAC,sBAAsB,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;;AApDM,wBAAW,GAAG,oCAAoC,CAAC;AAEnD,kBAAK,GAAG;IACb,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,GAAG;QACT,WAAW,EAAE,+CAA+C;QAC5D,OAAO,EAAE,mBAAmB;KAC7B,CAAC;IACF,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC;QACpB,IAAI,EAAE,GAAG;QACT,WAAW,EAAE,0BAA0B;QACvC,OAAO,EAAE,IAAI;KACd,CAAC;CACH,CAAC;eAdiB,YAAY"}

package/packages/cli/dist/commands/safety/import.d.ts

@@ -0,0 +1,12 @@
+import { Command } from '@oclif/core';
+export default class SafetyImport extends Command {
+    static description: string;
+    static args: {
+        file: import("@oclif/core/lib/interfaces/parser.js").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        merge: import("@oclif/core/lib/interfaces/parser.js").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=import.d.ts.map

package/packages/cli/dist/commands/safety/import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import.d.ts","sourceRoot":"","sources":["../../../src/commands/safety/import.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAe,MAAM,aAAa,CAAC;AAInD,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,OAAO;IAC/C,MAAM,CAAC,WAAW,SAA0C;IAE5D,MAAM,CAAC,IAAI;;MAKT;IAEF,MAAM,CAAC,KAAK;;MAMV;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA0E3B"}

package/packages/cli/dist/commands/safety/import.js

@@ -0,0 +1,78 @@
+import { Command, Args, Flags } from '@oclif/core';
+import { getDaemonEndpoint } from '../../utils/daemon-endpoint.js';
+import * as fs from 'fs';
+class SafetyImport extends Command {
+    async run() {
+        const { args, flags } = await this.parse(SafetyImport);
+        try {
+            // Read and parse the JSON file
+            if (!fs.existsSync(args.file)) {
+                this.error(`File not found: ${args.file}`);
+            }
+            const fileContent = fs.readFileSync(args.file, 'utf-8');
+            let importData;
+            try {
+                importData = JSON.parse(fileContent);
+            }
+            catch {
+                this.error(`Invalid JSON in file: ${args.file}`);
+            }
+            // Validate structure
+            if (typeof importData !== 'object' || importData === null) {
+                this.error('Invalid safety rules format: expected object');
+            }
+            const response = await fetch(`${getDaemonEndpoint()}/api/v1/safety/import`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({
+                    rules: importData,
+                    merge: flags.merge,
+                }),
+            });
+            if (!response.ok) {
+                if (response.status === 404) {
+                    this.error('Import endpoint not yet implemented on the server. Phase 2 CLI development pending.');
+                }
+                const data = await response.json();
+                this.error(`Failed to import rules: ${data.error || 'Unknown error'}`);
+            }
+            const result = await response.json();
+            if (result.success) {
+                this.log(`✓ Safety rules imported successfully`);
+                if (result.imported) {
+                    this.log(`  - Safe tools: ${result.imported.safeTools}`);
+                    this.log(`  - Risky tools: ${result.imported.riskyTools}`);
+                    this.log(`  - Safe patterns: ${result.imported.safePatterns}`);
+                    this.log(`  - Risky patterns: ${result.imported.riskyPatterns}`);
+                }
+                if (flags.merge) {
+                    this.log(`  (merged with existing rules)`);
+                }
+            }
+            else {
+                this.error(result.message || 'Failed to import rules');
+            }
+        }
+        catch (error) {
+            this.error(`Failed to import rules: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+}
+SafetyImport.description = 'Import safety rules from a JSON file';
+SafetyImport.args = {
+    file: Args.string({
+        description: 'JSON file to import',
+        required: true,
+    }),
+};
+SafetyImport.flags = {
+    merge: Flags.boolean({
+        char: 'm',
+        description: 'Merge with existing rules instead of replacing',
+        default: false,
+    }),
+};
+export default SafetyImport;
+//# sourceMappingURL=import.js.map

package/packages/cli/dist/commands/safety/import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import.js","sourceRoot":"","sources":["../../../src/commands/safety/import.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,MAAqB,YAAa,SAAQ,OAAO;IAkB/C,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAEvD,IAAI,CAAC;YACH,+BAA+B;YAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,KAAK,CAAC,mBAAmB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC;YAED,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxD,IAAI,UAAmB,CAAC;YAExB,IAAI,CAAC;gBACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,KAAK,CAAC,yBAAyB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;YAED,qBAAqB;YACrB,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBAC1D,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,iBAAiB,EAAE,uBAAuB,EAC7C;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,UAAU;oBACjB,KAAK,EAAE,KAAK,CAAC,KAAK;iBACnB,CAAC;aACH,CACF,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,CAAC,qFAAqF,CAAC,CAAC;gBACpG,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAwB,CAAC;gBACzD,IAAI,CAAC,KAAK,CAAC,2BAA2B,IAAI,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EASjC,CAAC;YAEF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,IAAI,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;gBACjD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACpB,IAAI,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;oBACzD,IAAI,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;oBAC3D,IAAI,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;oBAC/D,IAAI,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;oBAChB,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,wBAAwB,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;;AA1FM,wBAAW,GAAG,sCAAsC,CAAC;AAErD,iBAAI,GAAG;IACZ,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAChB,WAAW,EAAE,qBAAqB;QAClC,QAAQ,EAAE,IAAI;KACf,CAAC;CACH,CAAC;AAEK,kBAAK,GAAG;IACb,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QACnB,IAAI,EAAE,GAAG;QACT,WAAW,EAAE,gDAAgD;QAC7D,OAAO,EAAE,KAAK;KACf,CAAC;CACH,CAAC;eAhBiB,YAAY"}

package/packages/cli/dist/commands/safety/index.d.ts

@@ -0,0 +1,8 @@
+import { Command } from '@oclif/core';
+export default class SafetyIndex extends Command {
+    static description: string;
+    static examples: string[];
+    static strict: boolean;
+    run(): Promise<void>;
+}
+//# sourceMappingURL=index.d.ts.map

package/packages/cli/dist/commands/safety/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/safety/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,OAAO;IAC9C,MAAM,CAAC,WAAW,SAAkD;IAEpE,MAAM,CAAC,QAAQ,WAYb;IAEF,MAAM,CAAC,MAAM,UAAS;IAEhB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA0B3B"}

package/packages/cli/dist/commands/safety/index.js

@@ -0,0 +1,46 @@
+import { Command } from '@oclif/core';
+class SafetyIndex extends Command {
+    async run() {
+        this.log('Safety Rule Management Commands');
+        this.log('');
+        this.log('Usage:');
+        this.log('  <%= config.bin %> safety COMMAND [OPTIONS]');
+        this.log('');
+        this.log('Commands:');
+        this.log('  list                  List all safety rules and patterns');
+        this.log('  check TOOL            Check if a tool is safe or risky');
+        this.log('  add-safe TOOL         Mark a tool as safe');
+        this.log('  add-risky TOOL        Mark a tool as risky');
+        this.log('  remove TOOL           Remove a tool override (revert to default)');
+        this.log('  add-safe-pattern PAT  Add a regex pattern for safe tools');
+        this.log('  add-risky-pattern PAT Add a regex pattern for risky tools');
+        this.log('  validate SERVER       Validate rules for a specific server');
+        this.log('  reset                 Reset all rules to defaults');
+        this.log('  export                Export rules to JSON file');
+        this.log('  import FILE           Import rules from JSON file');
+        this.log('');
+        this.log('Examples:');
+        this.log('  metalink safety list');
+        this.log('  metalink safety check memory-search_nodes');
+        this.log('  metalink safety add-safe memory-search_nodes');
+        this.log('  metalink safety add-risky file-write');
+        this.log('  metalink safety export --output backup.json');
+    }
+}
+SafetyIndex.description = 'Manage tool safety rules and classifications';
+SafetyIndex.examples = [
+    '<%= config.bin %> safety list',
+    '<%= config.bin %> safety check memory-search_nodes',
+    '<%= config.bin %> safety add-safe memory-search_nodes',
+    '<%= config.bin %> safety add-risky file-write',
+    '<%= config.bin %> safety remove memory-search_nodes',
+    '<%= config.bin %> safety add-safe-pattern "memory-.*"',
+    '<%= config.bin %> safety add-risky-pattern ".*-delete"',
+    '<%= config.bin %> safety validate memory',
+    '<%= config.bin %> safety reset --force',
+    '<%= config.bin %> safety export --output rules.json',
+    '<%= config.bin %> safety import rules.json --merge',
+];
+SafetyIndex.strict = false;
+export default SafetyIndex;
+//# sourceMappingURL=index.js.map

package/packages/cli/dist/commands/safety/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/safety/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,MAAqB,WAAY,SAAQ,OAAO;IAmB9C,KAAK,CAAC,GAAG;QACP,IAAI,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnB,IAAI,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QACvE,IAAI,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;QAC/E,IAAI,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QACvE,IAAI,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;QACzE,IAAI,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QAC9D,IAAI,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QACxD,IAAI,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAC5D,CAAC;;AA3CM,uBAAW,GAAG,8CAA8C,CAAC;AAE7D,oBAAQ,GAAG;IAChB,+BAA+B;IAC/B,oDAAoD;IACpD,uDAAuD;IACvD,+CAA+C;IAC/C,qDAAqD;IACrD,uDAAuD;IACvD,wDAAwD;IACxD,0CAA0C;IAC1C,wCAAwC;IACxC,qDAAqD;IACrD,oDAAoD;CACrD,CAAC;AAEK,kBAAM,GAAG,KAAK,CAAC;eAjBH,WAAW"}

package/packages/cli/dist/commands/safety/list.d.ts

@@ -0,0 +1,6 @@
+import { Command } from '@oclif/core';
+export default class SafetyList extends Command {
+    static description: string;
+    run(): Promise<void>;
+}
+//# sourceMappingURL=list.d.ts.map

package/packages/cli/dist/commands/safety/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/commands/safety/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAGtC,MAAM,CAAC,OAAO,OAAO,UAAW,SAAQ,OAAO;IAC7C,MAAM,CAAC,WAAW,SAAwC;IAEpD,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAsF3B"}

package/packages/cli/dist/commands/safety/list.js

@@ -0,0 +1,77 @@
+import { Command } from '@oclif/core';
+import { getDaemonEndpoint } from '../../utils/daemon-endpoint.js';
+class SafetyList extends Command {
+    async run() {
+        try {
+            const response = await fetch(`${getDaemonEndpoint()}/api/v1/safety?include_patterns=true`);
+            if (!response.ok) {
+                const data = await response.json();
+                this.error(`Failed to fetch rules: ${data.error || 'Unknown error'}`);
+            }
+            const data = await response.json();
+            this.log('=== Safe Tool Overrides ===');
+            if (data.safeToolOverrides && data.safeToolOverrides.length > 0) {
+                for (const tool of data.safeToolOverrides) {
+                    this.log(`  ✓ ${tool}`);
+                }
+            }
+            else {
+                this.log('  (none)');
+            }
+            this.log('\n=== Risky Tool Overrides ===');
+            if (data.riskyToolOverrides && data.riskyToolOverrides.length > 0) {
+                for (const tool of data.riskyToolOverrides) {
+                    this.log(`  ✗ ${tool}`);
+                }
+            }
+            else {
+                this.log('  (none)');
+            }
+            this.log('\n=== Safe Patterns ===');
+            if (data.safePatterns && data.safePatterns.length > 0) {
+                for (const pattern of data.safePatterns) {
+                    this.log(`  ~ ${pattern}`);
+                }
+            }
+            else {
+                this.log('  (none)');
+            }
+            this.log('\n=== Risky Patterns ===');
+            if (data.riskyPatterns && data.riskyPatterns.length > 0) {
+                for (const pattern of data.riskyPatterns) {
+                    this.log(`  ~ ${pattern}`);
+                }
+            }
+            else {
+                this.log('  (none)');
+            }
+            // Display argument inspection rules (v1.1.29+)
+            if (data.argumentInspectionRules && data.argumentInspectionRules.length > 0) {
+                this.log('\n=== Argument Inspection Rules ===');
+                for (const rule of data.argumentInspectionRules) {
+                    this.log(`\n  Tool: ${rule.tool}`);
+                    this.log(`  Argument Field: ${rule.argumentField}`);
+                    this.log(`  Mode: ${rule.whitelistMode ? 'Whitelist (only safe patterns allowed)' : 'Blacklist (risky patterns blocked)'}`);
+                    if (rule.safeCommandPatterns && rule.safeCommandPatterns.length > 0) {
+                        this.log(`  Safe Patterns (${rule.safeCommandPatterns.length}):`);
+                        for (const pattern of rule.safeCommandPatterns) {
+                            this.log(`    ✓ ${pattern}`);
+                        }
+                    }
+                    if (rule.riskyCommandPatterns && rule.riskyCommandPatterns.length > 0) {
+                        this.log(`  Risky Patterns (${rule.riskyCommandPatterns.length}):`);
+                        for (const pattern of rule.riskyCommandPatterns) {
+                            this.log(`    ✗ ${pattern}`);
+                        }
+                    }
+                }
+            }
+        }
+        catch (error) {
+            this.error(`Failed to list safety rules: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+}
+SafetyList.description = 'List all safety rules and patterns';
+export default SafetyList;
+//# sourceMappingURL=list.js.map

package/packages/cli/dist/commands/safety/list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../../src/commands/safety/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAEnE,MAAqB,UAAW,SAAQ,OAAO;IAG7C,KAAK,CAAC,GAAG;QACP,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;YAE3F,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAwB,CAAC;gBACzD,IAAI,CAAC,KAAK,CAAC,0BAA0B,IAAI,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAY/B,CAAC;YAEF,IAAI,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBAC1C,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACvB,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YAC3C,IAAI,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAC3C,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACvB,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YACpC,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACxC,IAAI,CAAC,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACvB,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;oBACzC,IAAI,CAAC,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACvB,CAAC;YAED,+CAA+C;YAC/C,IAAI,IAAI,CAAC,uBAAuB,IAAI,IAAI,CAAC,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5E,IAAI,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;gBAChD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;oBAChD,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;oBACnC,IAAI,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;oBACpD,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,oCAAoC,EAAE,CAAC,CAAC;oBAE5H,IAAI,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACpE,IAAI,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,mBAAmB,CAAC,MAAM,IAAI,CAAC,CAAC;wBAClE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;4BAC/C,IAAI,CAAC,GAAG,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;wBAC/B,CAAC;oBACH,CAAC;oBAED,IAAI,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACtE,IAAI,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,oBAAoB,CAAC,MAAM,IAAI,CAAC,CAAC;wBACpE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;4BAChD,IAAI,CAAC,GAAG,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;wBAC/B,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;;AAvFM,sBAAW,GAAG,oCAAoC,CAAC;eADvC,UAAU"}

package/packages/cli/dist/commands/safety/remove.d.ts

@@ -0,0 +1,9 @@
+import { Command } from '@oclif/core';
+export default class SafetyRemove extends Command {
+    static description: string;
+    static args: {
+        rule: import("@oclif/core/lib/interfaces/parser.js").Arg<string, Record<string, unknown>>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=remove.d.ts.map

package/packages/cli/dist/commands/safety/remove.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.d.ts","sourceRoot":"","sources":["../../../src/commands/safety/remove.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,MAAM,aAAa,CAAC;AAG5C,MAAM,CAAC,OAAO,OAAO,YAAa,SAAQ,OAAO;IAC/C,MAAM,CAAC,WAAW,SAA0E;IAE5F,MAAM,CAAC,IAAI;;MAKT;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAuC3B"}

package/packages/cli/dist/commands/safety/remove.js

@@ -0,0 +1,46 @@
+import { Command, Args } from '@oclif/core';
+import { getDaemonEndpoint } from '../../utils/daemon-endpoint.js';
+class SafetyRemove extends Command {
+    async run() {
+        const { args } = await this.parse(SafetyRemove);
+        // Normalize rule identifier: convert - to : for tool names
+        // (patterns may contain dashes, so only convert if it looks like a tool)
+        let normalizedRule = args.rule;
+        if (!args.rule.includes(':') && args.rule.includes('-') && !args.rule.includes('*')) {
+            // Looks like server-tool format, convert to server:tool
+            normalizedRule = args.rule.replace('-', ':');
+        }
+        try {
+            const response = await fetch(`${getDaemonEndpoint()}/api/v1/safety/rules/${encodeURIComponent(normalizedRule)}`, {
+                method: 'DELETE',
+                headers: {
+                    'Content-Type': 'application/json',
+                },
+            });
+            if (!response.ok) {
+                const data = await response.json();
+                this.error(`Failed to remove rule: ${data.error || 'Unknown error'}`);
+            }
+            const result = await response.json();
+            if (result.success) {
+                this.log(`✓ Rule '${normalizedRule}' removed`);
+                this.log(`  Tool will now use default safety classification`);
+            }
+            else {
+                this.error(result.message || 'Failed to remove rule');
+            }
+        }
+        catch (error) {
+            this.error(`Failed to remove rule: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+}
+SafetyRemove.description = 'Remove safety override for a tool (revert to default classification)';
+SafetyRemove.args = {
+    rule: Args.string({
+        description: 'Rule name to remove',
+        required: true,
+    }),
+};
+export default SafetyRemove;
+//# sourceMappingURL=remove.js.map

package/packages/cli/dist/commands/safety/remove.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove.js","sourceRoot":"","sources":["../../../src/commands/safety/remove.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAEnE,MAAqB,YAAa,SAAQ,OAAO;IAU/C,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAEhD,2DAA2D;QAC3D,yEAAyE;QACzE,IAAI,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpF,wDAAwD;YACxD,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,iBAAiB,EAAE,wBAAwB,kBAAkB,CAAC,cAAc,CAAC,EAAE,EAClF;gBACE,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;aACF,CACF,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAwB,CAAC;gBACzD,IAAI,CAAC,KAAK,CAAC,0BAA0B,IAAI,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA4C,CAAC;YAE/E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,IAAI,CAAC,GAAG,CAAC,WAAW,cAAc,WAAW,CAAC,CAAC;gBAC/C,IAAI,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YAChE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,uBAAuB,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;;AA/CM,wBAAW,GAAG,sEAAsE,CAAC;AAErF,iBAAI,GAAG;IACZ,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAChB,WAAW,EAAE,qBAAqB;QAClC,QAAQ,EAAE,IAAI;KACf,CAAC;CACH,CAAC;eARiB,YAAY"}

package/packages/cli/dist/commands/safety/reset.d.ts

@@ -0,0 +1,9 @@
+import { Command } from '@oclif/core';
+export default class SafetyReset extends Command {
+    static description: string;
+    static flags: {
+        force: import("@oclif/core/lib/interfaces/parser.js").BooleanFlag<boolean>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=reset.d.ts.map

package/packages/cli/dist/commands/safety/reset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset.d.ts","sourceRoot":"","sources":["../../../src/commands/safety/reset.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAS,MAAM,aAAa,CAAC;AAG7C,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,OAAO;IAC9C,MAAM,CAAC,WAAW,SAAwC;IAE1D,MAAM,CAAC,KAAK;;MAKV;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CAuC3B"}

package/packages/cli/dist/commands/safety/reset.js

@@ -0,0 +1,46 @@
+import { Command, Flags } from '@oclif/core';
+import { getDaemonEndpoint } from '../../utils/daemon-endpoint.js';
+class SafetyReset extends Command {
+    async run() {
+        const { flags } = await this.parse(SafetyReset);
+        if (!flags.force) {
+            this.log('WARNING: This will reset all safety rule customizations to defaults.');
+            this.log('All custom safe/risky tool overrides and patterns will be removed.');
+            this.error('Use --force to confirm reset');
+        }
+        try {
+            const response = await fetch(`${getDaemonEndpoint()}/api/v1/safety/reset`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({
+                    force: true,
+                }),
+            });
+            if (!response.ok) {
+                const data = await response.json();
+                this.error(`Failed to reset rules: ${data.error || 'Unknown error'}`);
+            }
+            const result = await response.json();
+            if (result.success) {
+                this.log('✓ All safety rules reset to defaults');
+            }
+            else {
+                this.error(result.message || 'Failed to reset rules');
+            }
+        }
+        catch (error) {
+            this.error(`Failed to reset rules: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+}
+SafetyReset.description = 'Reset all safety rules to defaults';
+SafetyReset.flags = {
+    force: Flags.boolean({
+        char: 'f',
+        description: 'Skip confirmation prompt',
+    }),
+};
+export default SafetyReset;
+//# sourceMappingURL=reset.js.map

package/packages/cli/dist/commands/safety/reset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset.js","sourceRoot":"","sources":["../../../src/commands/safety/reset.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAEnE,MAAqB,WAAY,SAAQ,OAAO;IAU9C,KAAK,CAAC,GAAG;QACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAEhD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAAC;YACjF,IAAI,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;YAC/E,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,iBAAiB,EAAE,sBAAsB,EAC5C;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,IAAI;iBACZ,CAAC;aACH,CACF,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAwB,CAAC;gBACzD,IAAI,CAAC,KAAK,CAAC,0BAA0B,IAAI,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA4C,CAAC;YAE/E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,IAAI,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,uBAAuB,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;;AA/CM,uBAAW,GAAG,oCAAoC,CAAC;AAEnD,iBAAK,GAAG;IACb,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;QACnB,IAAI,EAAE,GAAG;QACT,WAAW,EAAE,0BAA0B;KACxC,CAAC;CACH,CAAC;eARiB,WAAW"}

package/packages/cli/dist/commands/safety/validate.d.ts

@@ -0,0 +1,9 @@
+import { Command } from '@oclif/core';
+export default class SafetyValidate extends Command {
+    static description: string;
+    static args: {
+        server: import("@oclif/core/lib/interfaces/parser.js").Arg<string, Record<string, unknown>>;
+    };
+    run(): Promise<void>;
+}
+//# sourceMappingURL=validate.d.ts.map

package/packages/cli/dist/commands/safety/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/commands/safety/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,MAAM,aAAa,CAAC;AAG5C,MAAM,CAAC,OAAO,OAAO,cAAe,SAAQ,OAAO;IACjD,MAAM,CAAC,WAAW,SAA+D;IAEjF,MAAM,CAAC,IAAI;;MAKT;IAEI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC;CA8C3B"}