@defai.digital/ax-cli 4.4.7 → 4.4.11

package/dist/permissions/permission-manager.d.ts

@@ -1,149 +0,0 @@
-/**
- * Permission System (Phase 3)
- *
- * Based on Claude Code's permission-first architecture.
- * Implements a tiered permission system for tool execution.
- *
- * Permission Tiers:
- * - auto_approve: Safe, read-only operations (view_file, list_files)
- * - notify: Show notification, continue (bash safe commands, create_file)
- * - confirm: Require explicit approval (bash dangerous, str_replace_editor)
- * - block: Never allow (dangerous patterns)
- */
-import { EventEmitter } from 'events';
-/**
- * Permission tiers from most to least restrictive
- */
-export declare enum PermissionTier {
-    AutoApprove = "auto_approve",
-    Notify = "notify",
-    Confirm = "confirm",
-    Block = "block"
-}
-/**
- * Risk levels for operations
- */
-export type RiskLevel = 'low' | 'medium' | 'high' | 'critical';
-/**
- * Permission request for a tool operation
- */
-export interface PermissionRequest {
-    tool: string;
-    args: Record<string, unknown>;
-    context: {
-        filePath?: string;
-        command?: string;
-        riskLevel: RiskLevel;
-        description?: string;
-    };
-}
-/**
- * Permission check result
- */
-export interface PermissionResult {
-    allowed: boolean;
-    tier: PermissionTier;
-    reason?: string;
-    userApproved?: boolean;
-    requiresNotification?: boolean;
-}
-/**
- * Pattern-based permission rule
- */
-interface PermissionPattern {
-    pattern: string;
-    tier: PermissionTier;
-    description?: string;
-}
-/**
- * Tool-specific permission configuration
- */
-interface ToolPermissionConfig {
-    tier: PermissionTier;
-    patterns?: PermissionPattern[];
-    confirmFor?: {
-        files?: string[];
-        commands?: string[];
-    };
-}
-/**
- * Full permission configuration
- */
-interface PermissionConfig {
-    permissions: {
-        default_tier: PermissionTier;
-        tools: Record<string, ToolPermissionConfig>;
-        session_approvals: {
-            allow_all_bash: boolean;
-            trust_current_directory: boolean;
-        };
-    };
-}
-/**
- * Permission Manager
- *
- * Manages permission checks for tool execution with configurable tiers.
- */
-export declare class PermissionManager extends EventEmitter {
-    private config;
-    private configPath;
-    /** Session-level approvals (cleared on session end) */
-    private sessionApprovals;
-    /** Pending approval requests */
-    private pendingApprovals;
-    constructor();
-    /**
-     * Initialize the permission manager (load config)
-     */
-    initialize(): Promise<void>;
-    /**
-     * Check permission for a tool operation
-     */
-    checkPermission(request: PermissionRequest): Promise<PermissionResult>;
-    /**
-     * Request user approval for an operation
-     * Returns a promise that resolves when user responds
-     */
-    requestUserApproval(request: PermissionRequest): Promise<boolean>;
-    /**
-     * Respond to a pending approval request
-     */
-    respondToApproval(requestId: string, approved: boolean, grantSession?: boolean): void;
-    /**
-     * Grant session-level approval for a pattern
-     */
-    grantSessionApproval(pattern: string): void;
-    /**
-     * Revoke session-level approval for a pattern
-     */
-    revokeSessionApproval(pattern: string): void;
-    /**
-     * Clear all session approvals
-     */
-    clearSessionApprovals(): void;
-    /**
-     * Get current permission configuration
-     */
-    getConfig(): PermissionConfig;
-    /**
-     * Update permission configuration
-     */
-    updateConfig(updates: Partial<PermissionConfig['permissions']>): Promise<void>;
-    /**
-     * Assess risk level for a request
-     */
-    assessRisk(request: PermissionRequest): RiskLevel;
-    private getToolConfig;
-    private checkPatterns;
-    private matchesFilePatterns;
-    private getApprovalSignature;
-    private loadConfig;
-    private saveConfig;
-    /**
-     * Clean up resources and remove all event listeners.
-     */
-    destroy(): void;
-}
-export declare function getPermissionManager(): PermissionManager;
-export declare function initializePermissionManager(): Promise<PermissionManager>;
-export {};

package/dist/permissions/permission-manager.js

@@ -1,410 +0,0 @@
-/**
- * Permission System (Phase 3)
- *
- * Based on Claude Code's permission-first architecture.
- * Implements a tiered permission system for tool execution.
- *
- * Permission Tiers:
- * - auto_approve: Safe, read-only operations (view_file, list_files)
- * - notify: Show notification, continue (bash safe commands, create_file)
- * - confirm: Require explicit approval (bash dangerous, str_replace_editor)
- * - block: Never allow (dangerous patterns)
- */
-import { EventEmitter } from 'events';
-import { readFile, writeFile, mkdir } from 'fs/promises';
-import { homedir } from 'os';
-import { join, dirname } from 'path';
-import * as yaml from 'js-yaml';
-import { CONFIG_DIR_NAME, TIMEOUT_CONFIG } from '../constants.js';
-/**
- * Permission tiers from most to least restrictive
- */
-export var PermissionTier;
-(function (PermissionTier) {
-    PermissionTier["AutoApprove"] = "auto_approve";
-    PermissionTier["Notify"] = "notify";
-    PermissionTier["Confirm"] = "confirm";
-    PermissionTier["Block"] = "block";
-})(PermissionTier || (PermissionTier = {}));
-/**
- * Default permission configuration
- */
-const DEFAULT_CONFIG = {
-    permissions: {
-        default_tier: PermissionTier.Notify,
-        tools: {
-            // Read-only operations - auto approve
-            view_file: { tier: PermissionTier.AutoApprove },
-            read_file: { tier: PermissionTier.AutoApprove },
-            list_files: { tier: PermissionTier.AutoApprove },
-            search: { tier: PermissionTier.AutoApprove },
-            search_files: { tier: PermissionTier.AutoApprove },
-            // File creation - notify
-            create_file: {
-                tier: PermissionTier.Notify,
-                confirmFor: {
-                    files: ['*.config.*', '.env*', 'package.json', '*.key', '*.pem'],
-                },
-            },
-            // File editing - notify with confirmations
-            str_replace_editor: {
-                tier: PermissionTier.Notify,
-                confirmFor: {
-                    files: ['*.config.*', '.env*', 'package.json', 'tsconfig.json'],
-                },
-            },
-            // Bash - tier depends on command
-            bash: {
-                tier: PermissionTier.Confirm,
-                patterns: [
-                    // Safe commands - auto approve
-                    { pattern: '^(ls|cat|echo|pwd|date|whoami|which|type|file)\\b', tier: PermissionTier.AutoApprove },
-                    { pattern: '^(npm (test|run|list|ls)|npx|node|pnpm|yarn)\\b', tier: PermissionTier.Notify },
-                    { pattern: '^(git (status|log|diff|branch|show))\\b', tier: PermissionTier.AutoApprove },
-                    { pattern: '^(git (add|commit|push|pull|checkout|merge))\\b', tier: PermissionTier.Notify },
-                    // Dangerous commands - confirm
-                    { pattern: '^(rm|sudo|chmod|chown|mv|cp)\\b', tier: PermissionTier.Confirm, description: 'File system modification' },
-                    { pattern: '\\|\\s*(sh|bash|zsh)\\b', tier: PermissionTier.Confirm, description: 'Pipe to shell' },
-                    { pattern: '(&&|;|\\|).*rm\\b', tier: PermissionTier.Confirm, description: 'Chained delete command' },
-                    // Block dangerous patterns
-                    { pattern: 'rm\\s+-rf\\s+/', tier: PermissionTier.Block, description: 'Recursive delete from root' },
-                    { pattern: ':(){ :|:& };:', tier: PermissionTier.Block, description: 'Fork bomb' },
-                    { pattern: '\\bdd\\b.*of=/dev/', tier: PermissionTier.Block, description: 'Direct disk write' },
-                ],
-            },
-            // MCP tools - confirm by default
-            'mcp__*': { tier: PermissionTier.Confirm },
-        },
-        session_approvals: {
-            allow_all_bash: false,
-            trust_current_directory: true,
-        },
-    },
-};
-/**
- * Permission Manager
- *
- * Manages permission checks for tool execution with configurable tiers.
- */
-export class PermissionManager extends EventEmitter {
-    config;
-    configPath;
-    /** Session-level approvals (cleared on session end) */
-    sessionApprovals = new Set();
-    /** Pending approval requests */
-    pendingApprovals = new Map();
-    constructor() {
-        super();
-        this.configPath = join(homedir(), CONFIG_DIR_NAME, 'permissions.yaml');
-        this.config = DEFAULT_CONFIG;
-    }
-    /**
-     * Initialize the permission manager (load config)
-     */
-    async initialize() {
-        try {
-            await this.loadConfig();
-        }
-        catch {
-            // Use default config if loading fails
-            console.warn('Using default permission configuration');
-        }
-    }
-    /**
-     * Check permission for a tool operation
-     */
-    async checkPermission(request) {
-        const toolConfig = this.getToolConfig(request.tool);
-        let tier = toolConfig?.tier || this.config.permissions.default_tier;
-        // Check patterns for bash commands
-        if ((request.tool === 'bash' || request.tool === 'execute_bash') && request.context.command) {
-            const patternTier = this.checkPatterns(toolConfig?.patterns, request.context.command);
-            if (patternTier) {
-                tier = patternTier;
-            }
-        }
-        // Check file-specific confirmations
-        if (request.context.filePath && toolConfig?.confirmFor?.files) {
-            if (this.matchesFilePatterns(request.context.filePath, toolConfig.confirmFor.files)) {
-                tier = PermissionTier.Confirm;
-            }
-        }
-        // Check session approvals
-        const signature = this.getApprovalSignature(request);
-        if (this.sessionApprovals.has(signature)) {
-            return {
-                allowed: true,
-                tier,
-                reason: 'Session approval granted',
-                userApproved: true,
-            };
-        }
-        // Handle based on tier
-        switch (tier) {
-            case PermissionTier.AutoApprove:
-                return {
-                    allowed: true,
-                    tier,
-                    reason: 'Auto-approved (safe operation)',
-                };
-            case PermissionTier.Notify:
-                // Emit notification but allow
-                this.emit('permission:notify', request);
-                return {
-                    allowed: true,
-                    tier,
-                    reason: 'Allowed with notification',
-                    requiresNotification: true,
-                };
-            case PermissionTier.Confirm:
-                // Requires explicit user approval
-                return {
-                    allowed: false,
-                    tier,
-                    reason: 'Requires user confirmation',
-                };
-            case PermissionTier.Block:
-                return {
-                    allowed: false,
-                    tier,
-                    reason: 'Operation blocked by security policy',
-                };
-            default:
-                return {
-                    allowed: false,
-                    tier: PermissionTier.Confirm,
-                    reason: 'Unknown permission tier',
-                };
-        }
-    }
-    /**
-     * Request user approval for an operation
-     * Returns a promise that resolves when user responds
-     */
-    async requestUserApproval(request) {
-        // BUG FIX: Replace deprecated substr() with substring()
-        const requestId = `${Date.now()}-${Math.random().toString(36).substring(2, 11)}`;
-        return new Promise((resolve) => {
-            // Emit approval request event
-            this.emit('permission:approval_required', {
-                requestId,
-                request,
-                risk: this.assessRisk(request),
-            });
-            // Set timeout (configurable, default 5 minutes)
-            const timeout = setTimeout(() => {
-                this.pendingApprovals.delete(requestId);
-                resolve(false); // Auto-reject on timeout
-            }, TIMEOUT_CONFIG.TOOL_APPROVAL);
-            // Store pending approval
-            this.pendingApprovals.set(requestId, {
-                request,
-                resolve,
-                timeout,
-            });
-        });
-    }
-    /**
-     * Respond to a pending approval request
-     */
-    respondToApproval(requestId, approved, grantSession = false) {
-        const pending = this.pendingApprovals.get(requestId);
-        if (!pending)
-            return;
-        clearTimeout(pending.timeout);
-        this.pendingApprovals.delete(requestId);
-        // Grant session approval if requested
-        if (approved && grantSession) {
-            const signature = this.getApprovalSignature(pending.request);
-            this.sessionApprovals.add(signature);
-        }
-        pending.resolve(approved);
-    }
-    /**
-     * Grant session-level approval for a pattern
-     */
-    grantSessionApproval(pattern) {
-        this.sessionApprovals.add(pattern);
-        this.emit('permission:session_granted', pattern);
-    }
-    /**
-     * Revoke session-level approval for a pattern
-     */
-    revokeSessionApproval(pattern) {
-        this.sessionApprovals.delete(pattern);
-        this.emit('permission:session_revoked', pattern);
-    }
-    /**
-     * Clear all session approvals
-     */
-    clearSessionApprovals() {
-        this.sessionApprovals.clear();
-        this.emit('permission:session_cleared');
-    }
-    /**
-     * Get current permission configuration
-     */
-    getConfig() {
-        return { ...this.config };
-    }
-    /**
-     * Update permission configuration
-     */
-    async updateConfig(updates) {
-        this.config.permissions = {
-            ...this.config.permissions,
-            ...updates,
-        };
-        await this.saveConfig();
-    }
-    /**
-     * Assess risk level for a request
-     */
-    assessRisk(request) {
-        // Check for dangerous bash patterns
-        if ((request.tool === 'bash' || request.tool === 'execute_bash') && request.context.command) {
-            const cmd = request.context.command.toLowerCase();
-            if (cmd.includes('rm -rf') || cmd.includes('sudo')) {
-                return 'critical';
-            }
-            if (cmd.includes('rm ') || cmd.includes('mv ') || cmd.includes('chmod')) {
-                return 'high';
-            }
-            if (cmd.includes('git push') || cmd.includes('npm publish')) {
-                return 'medium';
-            }
-        }
-        // Check for sensitive file operations
-        if (request.context.filePath) {
-            const path = request.context.filePath.toLowerCase();
-            if (path.includes('.env') || path.includes('secret') || path.includes('credential')) {
-                return 'high';
-            }
-            if (path.includes('config') || path.includes('package.json')) {
-                return 'medium';
-            }
-        }
-        return request.context.riskLevel || 'low';
-    }
-    // ============================================================================
-    // Private Methods
-    // ============================================================================
-    getToolConfig(tool) {
-        // Direct match
-        if (this.config.permissions.tools[tool]) {
-            return this.config.permissions.tools[tool];
-        }
-        // Wildcard match (e.g., mcp__*)
-        for (const [pattern, config] of Object.entries(this.config.permissions.tools)) {
-            if (pattern.endsWith('*') && tool.startsWith(pattern.slice(0, -1))) {
-                return config;
-            }
-        }
-        return undefined;
-    }
-    checkPatterns(patterns, command) {
-        if (!patterns)
-            return null;
-        for (const { pattern, tier } of patterns) {
-            try {
-                const regex = new RegExp(pattern, 'i');
-                if (regex.test(command)) {
-                    return tier;
-                }
-            }
-            catch {
-                // Invalid regex, skip
-            }
-        }
-        return null;
-    }
-    matchesFilePatterns(filePath, patterns) {
-        for (const pattern of patterns) {
-            // Simple glob matching with ReDoS prevention
-            // SECURITY FIX: Use [^/]* instead of .* to prevent catastrophic backtracking
-            // .* can cause exponential time complexity on patterns like "a*b*c*d*"
-            const regexPattern = '^' + pattern
-                .replace(/[.+^${}()|[\]\\]/g, '\\$&') // Escape special regex chars
-                .replace(/\*/g, '[^/]*') // Non-greedy match that doesn't cross directories
-                .replace(/\?/g, '[^/]') + '$'; // Single char that doesn't cross directories
-            try {
-                const regex = new RegExp(regexPattern, 'i');
-                if (regex.test(filePath)) {
-                    return true;
-                }
-            }
-            catch {
-                // Invalid pattern, skip
-            }
-        }
-        return false;
-    }
-    getApprovalSignature(request) {
-        if (request.context.command) {
-            // For bash, use command prefix (first word)
-            const cmdPrefix = request.context.command.split(/\s+/)[0];
-            return `${request.tool}:${cmdPrefix}`;
-        }
-        if (request.context.filePath) {
-            return `${request.tool}:${request.context.filePath}`;
-        }
-        return `${request.tool}:${JSON.stringify(request.args)}`;
-    }
-    async loadConfig() {
-        try {
-            const content = await readFile(this.configPath, 'utf-8');
-            const loaded = yaml.load(content);
-            // Merge with defaults
-            this.config = {
-                permissions: {
-                    ...DEFAULT_CONFIG.permissions,
-                    ...loaded?.permissions,
-                    tools: {
-                        ...DEFAULT_CONFIG.permissions.tools,
-                        ...loaded?.permissions?.tools,
-                    },
-                    session_approvals: {
-                        ...DEFAULT_CONFIG.permissions.session_approvals,
-                        ...loaded?.permissions?.session_approvals,
-                    },
-                },
-            };
-        }
-        catch {
-            // File doesn't exist or is invalid, use defaults
-            this.config = DEFAULT_CONFIG;
-        }
-    }
-    async saveConfig() {
-        try {
-            const dir = dirname(this.configPath);
-            await mkdir(dir, { recursive: true });
-            await writeFile(this.configPath, yaml.dump(this.config), 'utf-8');
-        }
-        catch (error) {
-            console.warn('Failed to save permission config:', error);
-        }
-    }
-    /**
-     * Clean up resources and remove all event listeners.
-     */
-    destroy() {
-        this.removeAllListeners();
-    }
-}
-/**
- * Singleton instance
- */
-let permissionManagerInstance = null;
-export function getPermissionManager() {
-    if (!permissionManagerInstance) {
-        permissionManagerInstance = new PermissionManager();
-    }
-    return permissionManagerInstance;
-}
-export async function initializePermissionManager() {
-    const manager = getPermissionManager();
-    await manager.initialize();
-    return manager;
-}
-//# sourceMappingURL=permission-manager.js.map

package/dist/permissions/permission-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permission-manager.js","sourceRoot":"","sources":["../../src/permissions/permission-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,KAAK,IAAI,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAElE;;GAEG;AACH,MAAM,CAAN,IAAY,cAKX;AALD,WAAY,cAAc;IACxB,8CAA4B,CAAA;IAC5B,mCAAiB,CAAA;IACjB,qCAAmB,CAAA;IACnB,iCAAe,CAAA;AACjB,CAAC,EALW,cAAc,KAAd,cAAc,QAKzB;AAmED;;GAEG;AACH,MAAM,cAAc,GAAqB;IACvC,WAAW,EAAE;QACX,YAAY,EAAE,cAAc,CAAC,MAAM;QACnC,KAAK,EAAE;YACL,sCAAsC;YACtC,SAAS,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,WAAW,EAAE;YAC/C,SAAS,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,WAAW,EAAE;YAC/C,UAAU,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,WAAW,EAAE;YAChD,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,WAAW,EAAE;YAC5C,YAAY,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,WAAW,EAAE;YAElD,yBAAyB;YACzB,WAAW,EAAE;gBACX,IAAI,EAAE,cAAc,CAAC,MAAM;gBAC3B,UAAU,EAAE;oBACV,KAAK,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC;iBACjE;aACF;YAED,2CAA2C;YAC3C,kBAAkB,EAAE;gBAClB,IAAI,EAAE,cAAc,CAAC,MAAM;gBAC3B,UAAU,EAAE;oBACV,KAAK,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,CAAC;iBAChE;aACF;YAED,iCAAiC;YACjC,IAAI,EAAE;gBACJ,IAAI,EAAE,cAAc,CAAC,OAAO;gBAC5B,QAAQ,EAAE;oBACR,+BAA+B;oBAC/B,EAAE,OAAO,EAAE,mDAAmD,EAAE,IAAI,EAAE,cAAc,CAAC,WAAW,EAAE;oBAClG,EAAE,OAAO,EAAE,iDAAiD,EAAE,IAAI,EAAE,cAAc,CAAC,MAAM,EAAE;oBAC3F,EAAE,OAAO,EAAE,yCAAyC,EAAE,IAAI,EAAE,cAAc,CAAC,WAAW,EAAE;oBACxF,EAAE,OAAO,EAAE,iDAAiD,EAAE,IAAI,EAAE,cAAc,CAAC,MAAM,EAAE;oBAE3F,+BAA+B;oBAC/B,EAAE,OAAO,EAAE,iCAAiC,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,0BAA0B,EAAE;oBACrH,EAAE,OAAO,EAAE,yBAAyB,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE;oBAClG,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,wBAAwB,EAAE;oBAErG,2BAA2B;oBAC3B,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,4BAA4B,EAAE;oBACpG,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE;oBAClF,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAAE;iBAChG;aACF;YAED,iCAAiC;YACjC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO,EAAE;SAC3C;QACD,iBAAiB,EAAE;YACjB,cAAc,EAAE,KAAK;YACrB,uBAAuB,EAAE,IAAI;SAC9B;KACF;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IACzC,MAAM,CAAmB;IACzB,UAAU,CAAS;IAE3B,uDAAuD;IAC/C,gBAAgB,GAAgB,IAAI,GAAG,EAAE,CAAC;IAElD,gCAAgC;IACxB,gBAAgB,GAInB,IAAI,GAAG,EAAE,CAAC;IAEf;QACE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;YACtC,OAAO,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,OAA0B;QAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,IAAI,GAAG,UAAU,EAAE,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC;QAEpE,mCAAmC;QACnC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5F,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACtF,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,GAAG,WAAW,CAAC;YACrB,CAAC;QACH,CAAC;QAED,oCAAoC;QACpC,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;YAC9D,IAAI,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpF,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC;YAChC,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI;gBACJ,MAAM,EAAE,0BAA0B;gBAClC,YAAY,EAAE,IAAI;aACnB,CAAC;QACJ,CAAC;QAED,uBAAuB;QACvB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,cAAc,CAAC,WAAW;gBAC7B,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,IAAI;oBACJ,MAAM,EAAE,gCAAgC;iBACzC,CAAC;YAEJ,KAAK,cAAc,CAAC,MAAM;gBACxB,8BAA8B;gBAC9B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;gBACxC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,IAAI;oBACJ,MAAM,EAAE,2BAA2B;oBACnC,oBAAoB,EAAE,IAAI;iBAC3B,CAAC;YAEJ,KAAK,cAAc,CAAC,OAAO;gBACzB,kCAAkC;gBAClC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,IAAI;oBACJ,MAAM,EAAE,4BAA4B;iBACrC,CAAC;YAEJ,KAAK,cAAc,CAAC,KAAK;gBACvB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,IAAI;oBACJ,MAAM,EAAE,sCAAsC;iBAC/C,CAAC;YAEJ;gBACE,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,cAAc,CAAC,OAAO;oBAC5B,MAAM,EAAE,yBAAyB;iBAClC,CAAC;QACN,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAA0B;QAClD,wDAAwD;QACxD,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAEjF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,8BAA8B;YAC9B,IAAI,CAAC,IAAI,CAAC,8BAA8B,EAAE;gBACxC,SAAS;gBACT,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;aAC/B,CAAC,CAAC;YAEH,gDAAgD;YAChD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACxC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB;YAC3C,CAAC,EAAE,cAAc,CAAC,aAAa,CAAC,CAAC;YAEjC,yBAAyB;YACzB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE;gBACnC,OAAO;gBACP,OAAO;gBACP,OAAO;aACR,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,SAAiB,EAAE,QAAiB,EAAE,eAAwB,KAAK;QACnF,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAExC,sCAAsC;QACtC,IAAI,QAAQ,IAAI,YAAY,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,OAAe;QAClC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,OAAe;QACnC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,OAAiD;QAClE,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG;YACxB,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;YAC1B,GAAG,OAAO;SACX,CAAC;QACF,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,OAA0B;QACnC,oCAAoC;QACpC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5F,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YAElD,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnD,OAAO,UAAU,CAAC;YACpB,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxE,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC5D,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACpD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpF,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC7D,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC5C,CAAC;IAED,+EAA+E;IAC/E,kBAAkB;IAClB,+EAA+E;IAEvE,aAAa,CAAC,IAAY;QAChC,eAAe;QACf,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC;QAED,gCAAgC;QAChC,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9E,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,aAAa,CAAC,QAAyC,EAAE,OAAe;QAC9E,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvC,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACxB,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,mBAAmB,CAAC,QAAgB,EAAE,QAAkB;QAC9D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,6CAA6C;YAC7C,6EAA6E;YAC7E,uEAAuE;YACvE,MAAM,YAAY,GAAG,GAAG,GAAG,OAAO;iBAC/B,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAE,6BAA6B;iBACnE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAE,kDAAkD;iBAC3E,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,CAAE,6CAA6C;YAE/E,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;gBAC5C,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACzB,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,oBAAoB,CAAC,OAA0B;QACrD,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5B,4CAA4C;YAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;QACxC,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC7B,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvD,CAAC;QAED,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3D,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAqB,CAAC;YAEtD,sBAAsB;YACtB,IAAI,CAAC,MAAM,GAAG;gBACZ,WAAW,EAAE;oBACX,GAAG,cAAc,CAAC,WAAW;oBAC7B,GAAG,MAAM,EAAE,WAAW;oBACtB,KAAK,EAAE;wBACL,GAAG,cAAc,CAAC,WAAW,CAAC,KAAK;wBACnC,GAAG,MAAM,EAAE,WAAW,EAAE,KAAK;qBAC9B;oBACD,iBAAiB,EAAE;wBACjB,GAAG,cAAc,CAAC,WAAW,CAAC,iBAAiB;wBAC/C,GAAG,MAAM,EAAE,WAAW,EAAE,iBAAiB;qBAC1C;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;YACjD,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC;QAC/B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;CAEF;AAED;;GAEG;AACH,IAAI,yBAAyB,GAA6B,IAAI,CAAC;AAE/D,MAAM,UAAU,oBAAoB;IAClC,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC/B,yBAAyB,GAAG,IAAI,iBAAiB,EAAE,CAAC;IACtD,CAAC;IACD,OAAO,yBAAyB,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;IACvC,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;IAC3B,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/planner/dependency-resolver.d.ts

@@ -1,72 +0,0 @@
-/**
- * Dependency Resolver
- *
- * Resolves phase dependencies using topological sort.
- * Groups phases into execution batches that can run in parallel.
- */
-import { TaskPhase } from "./types.js";
-/**
- * A batch of phases that can execute together
- */
-export interface ExecutionBatch {
-    /** Batch index (0-based) */
-    index: number;
-    /** Phases in this batch */
-    phases: TaskPhase[];
-    /** Whether phases in this batch can run in parallel */
-    canRunInParallel: boolean;
-    /** Estimated tokens for this batch */
-    estimatedTokens: number;
-}
-/**
- * Result of dependency resolution
- */
-export interface DependencyResolutionResult {
-    /** Ordered batches of phases */
-    batches: ExecutionBatch[];
-    /** Whether the dependency graph is valid (no cycles) */
-    isValid: boolean;
-    /** Error message if invalid */
-    error?: string;
-    /** Phases that form a cycle (if any) */
-    cyclicPhases?: string[];
-}
-export declare class DependencyResolver {
-    /**
-     * Resolve dependencies and create execution batches
-     *
-     * Uses Kahn's algorithm for topological sorting.
-     * Groups phases that have no dependencies between them into batches.
-     */
-    resolve(phases: TaskPhase[]): DependencyResolutionResult;
-    /**
-     * Get phases that can execute immediately (no pending dependencies)
-     */
-    getReadyPhases(phases: TaskPhase[], completedPhaseIds: Set<string>): TaskPhase[];
-    /**
-     * Check if a phase can be executed given current state
-     */
-    canExecutePhase(phase: TaskPhase, completedPhaseIds: Set<string>): {
-        canExecute: boolean;
-        blockedBy: string[];
-    };
-    /**
-     * Get the critical path (longest dependency chain)
-     */
-    getCriticalPath(phases: TaskPhase[]): TaskPhase[];
-    /**
-     * Validate dependency graph
-     */
-    validate(phases: TaskPhase[]): {
-        isValid: boolean;
-        errors: string[];
-    };
-    /**
-     * Get a visualization of the dependency graph (ASCII)
-     */
-    visualize(phases: TaskPhase[]): string;
-}
-/**
- * Get the singleton DependencyResolver instance
- */
-export declare function getDependencyResolver(): DependencyResolver;