npm - @dsh-cc/command-permissions - Versions diffs - 0.8.0-rc.2 → 0.8.1-rc.1 - Mend

@dsh-cc/command-permissions 0.8.0-rc.2 → 0.8.1-rc.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (12) hide show

package/lib/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;~~AAUlD~~,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAErF,eAAO,MAAM,IAAI,wBAAwB,CAAA;AACzC;;;;;GAKG;AACH,eAAO,MAAM,MAAM,UAAe,CAAA;~~AAqHlC~~;;;;;;;;GAQG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,~~CAUxC~~"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAalD,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,GAC1B,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,WAAW,EAAE,KAAK,SAAS,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAErF,eAAO,MAAM,IAAI,wBAAwB,CAAA;AACzC;;;;;GAKG;AACH,eAAO,MAAM,MAAM,UAAe,CAAA;AA6JlC;;;;;;;;GAQG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAaxC"}

package/lib/index.js CHANGED Viewed

@@ -28,6 +28,9 @@
  * @module @dsh-cc/command-permissions
  */
 import { PERMISSION_COMMAND_MODES } from "./modes.js";
+import { applyUserLint, lintRuleSet, lintUserSection, renderLint } from "./lint.js";
+import { PERMISSION_SETTINGS_NAMESPACE } from '@dsh-cc/permission-rules';
+import { foldPlanMode, foldPermissionMode } from '@dsh-cc/permission-rules';
 import { planPhaseOf } from "./plan-phase.js";
 import { renderPermissions } from "./permissions.js";
 import { helpable } from '@dsh-cc/command-usage';
@@ -45,10 +48,17 @@ export const inject = ['commands'];
 /** The shared modes list — the switch list and the client popup both read it. */
 const MODES = PERMISSION_COMMAND_MODES;
 /** Render the current rule state from a mounted engine. */
-function renderState(service) {
+function renderState(service, agent) {
+    const merged = service.ruleSet;
+    const mode = foldPlanMode(agent?.session.snapshotEvents() ?? [])
+        ? 'plan'
+        : foldPermissionMode(agent?.session.snapshotEvents() ?? []) ?? service.defaultMode;
+    const effective = service.effectiveRuleSet(mode);
     return {
         kind: 'success',
-        text: renderPermissions(service.ruleSet, service.ruleSet.bypassImmune.length),
+        text: renderPermissions(effective, service.ruleSet.bypassImmune.length, {
+            suspendedAllow: merged.allow.length - effective.allow.length,
+        }),
     };
 }
 /**
@@ -69,11 +79,13 @@ async function executePermissions(ctx, invocation) {
         if (service === undefined) {
             return { kind: 'success', text: 'The permission-rules engine is not mounted in this composition.' };
         }
-        return renderState(service);
+        return renderState(service, invocation.agent);
     }
     if (service === undefined) {
         return { kind: 'error', text: 'The permission-rules engine is not mounted in this composition.' };
     }
+    if (raw === 'lint' || raw.startsWith('lint '))
+        return executeLint(ctx, raw);
     const [mode = ''] = raw.split(/\s+/);
     if (!MODES.includes(mode)) {
         return { kind: 'error', text: `unknown permission mode "${mode}"; available: ${MODES.join(', ')}` };
@@ -112,8 +124,36 @@ async function executePermissions(ctx, invocation) {
         return { kind: 'error', text: error instanceof Error ? error.message : String(error) };
     }
 }
-/** Whether this session selected the CC agent preset (last `agent-preset/selected` wins, else the creation header). */
-function isCcSession(agent) {
+/**
+ * Read the raw user-layer `permissions` section from the settings provider's
+ * `describe()` descriptors (the raw user file section, never the merged one).
+ */
+function userSectionOf(settings) {
+    const descriptor = settings
+        .describe?.()
+        ?.find(entry => String(entry.ns) === String(PERMISSION_SETTINGS_NAMESPACE));
+    return descriptor !== undefined && descriptor.user !== null && typeof descriptor.user === 'object'
+        ? descriptor.user
+        : {};
+}
+/**
+ * Execute `/permissions lint [--apply]`. Read-only by default; `--apply`
+ * performs only the user-layer cleanup through `editUserSection`.
+ */
+async function executeLint(ctx, raw) {
+    const service = ctx.get('permissionRules');
+    if (service === undefined) {
+        return { kind: 'error', text: 'The permission-rules engine is not mounted in this composition.' };
+    }
+    const settings = ctx.get('settings');
+    const userLint = settings === undefined ? undefined : lintUserSection(userSectionOf(settings));
+    const report = renderLint(lintRuleSet(service.ruleSet), userLint);
+    if (!raw.includes('--apply'))
+        return { kind: 'success', text: report };
+    const result = await applyUserLint(settings);
+    return { kind: 'success', text: `${report}\n${result}` };
+}
+/** Whether this session selected the CC agent preset (last `agent-preset/selected` wins, else the creation header). */ function isCcSession(agent) {
     const events = agent.session.snapshotEvents();
     for (let index = events.length - 1; index >= 0; index -= 1) {
         const event = events[index];
@@ -158,10 +198,13 @@ export function apply(ctx) {
     ctx.commands.register(helpable({
         name: 'permissions',
         description: 'show or switch the permission mode (default|acceptEdits|plan|auto|bypassPermissions)',
-        input: { hint: '[mode]' },
+        input: { hint: '[mode|lint [--apply]]' },
         handler: (invocation) => executePermissions(ctx, invocation),
     }, {
-        subcommands: PERMISSION_MODE_OPTIONS.map(option => ({ word: option.id, summary: option.detail })),
+        subcommands: [
+            ...PERMISSION_MODE_OPTIONS.map(option => ({ word: option.id, summary: option.detail })),
+            { word: 'lint', summary: 'report rule-hygiene findings; --apply cleans the user layer' },
+        ],
     }));
     if (ctx.get('agent') === undefined)
         installCatalogWrap(ctx);

package/lib/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAMH,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,EAAE,WAAW,EAA0C,MAAM,iBAAiB,CAAA;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAEpD,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,GAGxB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,WAAW,EAA0C,MAAM,iBAAiB,CAAA;AAErF,MAAM,CAAC,MAAM,IAAI,GAAG,qBAAqB,CAAA;AACzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,CAAA;~~AAQlC~~,iFAAiF;AACjF,MAAM,KAAK,GAAG,wBAAwB,CAAA;AAEtC,2DAA2D;AAC3D,SAAS,WAAW,CAAC,OAA4B;~~IAC/C~~,OAAO;QACL,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,iBAAiB,CAAC,OAAO,CAAC,~~OAAgB~~,EAAE,~~OAAO~~,CAAC,~~OAAO~~,CAAC,~~YAAY~~,CAAC,MAAM,CAAC;~~KACvF~~,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAAY,EAAE,KAAY;IAC9C,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAEnC,CAAA;IACb,MAAM,SAAS,GAAG,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAkC,CAAA;IAC9F,OAAO,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,SAAS,CAAC,CAAA;AAC/D,CAAC;AAED,0EAA0E;AAC1E,KAAK,UAAU,kBAAkB,CAAC,GAAY,EAAE,UAA6B;IAC3E,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAoC,CAAA;IAC7E,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;IACtC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,iEAAiE,EAAE,CAAA;QACrG,CAAC;QACD,OAAO,WAAW,CAAC,OAAO,CAAC,CAAA;~~IAC7B~~,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,iEAAiE,EAAE,CAAA;IACnG,CAAC;IACD,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,CAAE,KAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,4BAA4B,IAAI,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAA;IACrG,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA;IAC9B,IAAI,CAAC;QACH,sEAAsE;QACtE,uEAAuE;QACvE,oEAAoE;QACpE,yEAAyE;QACzE,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,IAAI,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBACtC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAA;YACpE,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;YACnF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAA;YAChF,CAAC;YACD,OAAO,SAAS,CAAC,MAAM,CAAA;QACzB,CAAC;QACD,sEAAsE;QACtE,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;YACvF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAA;YAChF,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,SAAS,CAAC,MAAM,CAAA;QAChE,CAAC;QACD,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAC5B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,2BAA2B,IAAI,IAAI,EAAE,CAAA;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IACxF,CAAC;AACH,CAAC;AAED,~~uHAAuH~~;~~AACvH~~,SAAS,WAAW,CAAC,~~KAAY~~;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;IAC7C,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAuD,CAAA;QACjF,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAA;QACzC,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAkC,CAAA;IAC/D,OAAO,MAAM,CAAC,WAAW,KAAK,IAAI,CAAA;AACpC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,GAAY;IACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAA;IAC7B,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAA;IAClC,MAAM,WAAW,GAAG,SAAS,IAAI,CAAwB,KAAY;QACnE,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAA;QAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;QAC9D,OAAO,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC7E,CAAC,CAAA;IACD,QAAQ,CAAC,IAAI,GAAG,WAAmC,CAAA;IACnD,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE;QACpB,QAAQ,CAAC,IAAI,GAAG,YAAY,CAAA;IAC9B,CAAC,EAAE,2DAA2D,CAAC,CAAA;AACjE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,KAAK,CAAC,GAAY;IAChC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,sFAAsF;QACnG,KAAK,EAAE,EAAE,IAAI,EAAE,~~QAAQ~~,EAAE;~~QACzB~~,OAAO,EAAE,CAAC,UAA6B,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,UAAU,CAAC;KAChF,EAAE;QACD,WAAW,EAAE,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;~~KAClG~~,CAAC,CAAC,CAAA;IACH,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS;QAAE,kBAAkB,CAAC,GAAG,CAAC,CAAA;AAC7D,CAAC"}
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAMH,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACnF,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAA;AACxE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC3E,OAAO,EAAE,WAAW,EAA0C,MAAM,iBAAiB,CAAA;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAEpD,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,wBAAwB,EACxB,uBAAuB,GAGxB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,WAAW,EAA0C,MAAM,iBAAiB,CAAA;AAErF,MAAM,CAAC,MAAM,IAAI,GAAG,qBAAqB,CAAA;AACzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,CAAA;AAWlC,iFAAiF;AACjF,MAAM,KAAK,GAAG,wBAAwB,CAAA;AAEtC,2DAA2D;AAC3D,SAAS,WAAW,CAAC,OAA4B,EAAE,KAAa;IAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,OAA0D,CAAA;IACjF,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;QAC9D,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,IAAI,OAAO,CAAC,WAAW,CAAA;IACpF,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;IAChD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,iBAAiB,CAAC,SAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE;YAC/E,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM;SAC7D,CAAC;KACH,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAAY,EAAE,KAAY;IAC9C,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAEnC,CAAA;IACb,MAAM,SAAS,GAAG,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAkC,CAAA;IAC9F,OAAO,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,SAAS,CAAC,CAAA;AAC/D,CAAC;AAED,0EAA0E;AAC1E,KAAK,UAAU,kBAAkB,CAAC,GAAY,EAAE,UAA6B;IAC3E,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAoC,CAAA;IAC7E,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;IACtC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,iEAAiE,EAAE,CAAA;QACrG,CAAC;QACD,OAAO,WAAW,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAA;IAC/C,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,iEAAiE,EAAE,CAAA;IACnG,CAAC;IACD,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC3E,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACpC,IAAI,CAAE,KAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,4BAA4B,IAAI,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAA;IACrG,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAA;IAC9B,IAAI,CAAC;QACH,sEAAsE;QACtE,uEAAuE;QACvE,oEAAoE;QACpE,yEAAyE;QACzE,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,IAAI,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBACtC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAA;YACpE,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;YACnF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAA;YAChF,CAAC;YACD,OAAO,SAAS,CAAC,MAAM,CAAA;QACzB,CAAC;QACD,sEAAsE;QACtE,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;YACvF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAA;YAChF,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,SAAS,CAAC,MAAM,CAAA;QAChE,CAAC;QACD,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAC5B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,2BAA2B,IAAI,IAAI,EAAE,CAAA;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IACxF,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,QAAiB;IACtC,MAAM,UAAU,GAAI,QAAwE;SACzF,QAAQ,EAAE,EAAE;QACb,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,6BAA6B,CAAC,CAAC,CAAA;IAC7E,OAAO,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ;QAChG,CAAC,CAAC,UAAU,CAAC,IAA+B;QAC5C,CAAC,CAAC,EAAE,CAAA;AACR,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CAAC,GAAY,EAAE,GAAW;IAClD,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAoC,CAAA;IAC7E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,iEAAiE,EAAE,CAAA;IACnG,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAY,CAAA;IAC/C,MAAM,QAAQ,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC9F,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,OAAO,CAAC,OAAgB,CAAC,EAAE,QAAQ,CAAC,CAAA;IAC1E,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IACtE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC5C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,MAAM,EAAE,EAAE,CAAA;AAC1D,CAAC;AAED,uHAAuH,CAAA,SAAS,WAAW,CAAC,KAAY;IACtJ,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,CAAA;IAC7C,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAuD,CAAA;QACjF,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAA;QACzC,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAkC,CAAA;IAC/D,OAAO,MAAM,CAAC,WAAW,KAAK,IAAI,CAAA;AACpC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,GAAY;IACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAA;IAC7B,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAA;IAClC,MAAM,WAAW,GAAG,SAAS,IAAI,CAAwB,KAAY;QACnE,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAA;QAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAA;QAC9D,OAAO,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC7E,CAAC,CAAA;IACD,QAAQ,CAAC,IAAI,GAAG,WAAmC,CAAA;IACnD,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE;QACpB,QAAQ,CAAC,IAAI,GAAG,YAAY,CAAA;IAC9B,CAAC,EAAE,2DAA2D,CAAC,CAAA;AACjE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,KAAK,CAAC,GAAY;IAChC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,sFAAsF;QACnG,KAAK,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE;QACxC,OAAO,EAAE,CAAC,UAA6B,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,UAAU,CAAC;KAChF,EAAE;QACD,WAAW,EAAE;YACX,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACvF,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,6DAA6D,EAAE;SACzF;KACF,CAAC,CAAC,CAAA;IACH,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS;QAAE,kBAAkB,CAAC,GAAG,CAAC,CAAA;AAC7D,CAAC"}

package/lib/lint.d.ts ADDED Viewed

@@ -0,0 +1,60 @@
+/**
+ * `/permissions lint` — read-only rule-hygiene report over the permission
+ * engine's cross-source rule set, plus a proposed before/after diff for the
+ * user settings layer. `--apply` performs ONLY the user-layer cleanup through
+ * the settings cascade's `editUserSection` raw-user seam; project/policy/
+ * session layers are never written, and removals never cross behavior groups
+ * (`ruleSubsumes` requires equal behavior).
+ * @module @dsh-cc/command-permissions/lint
+ */
+import type { PermissionBehavior, PermissionRuleSet, PermissionRuleSource } from '@dsh-cc/permission-rules/types';
+/** One hygiene finding about a single rule. */
+export interface LintFinding {
+    kind: 'malformed' | 'duplicate' | 'subsumed' | 'broad' | 'unknownTool';
+    source: PermissionRuleSource;
+    behavior: PermissionBehavior;
+    toolName: string;
+    /** The rule string (raw source string for `malformed`). */
+    rule: string;
+    detail: string;
+}
+declare const BEHAVIORS: readonly ["allow", "deny", "ask"];
+type ListKey = (typeof BEHAVIORS)[number];
+/**
+ * Lint the engine's cross-source rule set: exact duplicates and prefix-subsumed
+ * rules within one source+behavior group, bare whole-tool `Bash` allows, and
+ * unknown tool names. Read-only — the parsed engine rules carry no raw strings,
+ * so malformed strings are reported by the user-layer scan only.
+ */
+export declare function lintRuleSet(rules: PermissionRuleSet): LintFinding[];
+/** The user-layer lint result: malformed findings, and the proposed cleanup. */
+export interface UserLayerLint {
+    findings: LintFinding[];
+    /** Raw user-layer lists as found. */
+    before: Partial<Record<ListKey, string[]>>;
+    /** Raw user-layer lists after removing duplicates and subsumed entries. */
+    after: Partial<Record<ListKey, string[]>>;
+}
+/**
+ * Lint the RAW user settings section (rule strings, not engine rules):
+ * flags malformed strings (kept — apply never rewrites unparseable entries),
+ * and computes the cleaned lists (exact duplicates and same-behavior subsumed
+ * entries removed, first/broader kept). Bare `Bash` allows and unknown tool
+ * names are flagged but kept.
+ */
+export declare function lintUserSection(raw: Record<string, unknown>): UserLayerLint;
+/**
+ * Render the lint report: findings grouped by source/behavior, then the
+ * proposed user-layer before/after diff (removals marked `-`).
+ */
+export declare function renderLint(engineFindings: readonly LintFinding[], userLint: UserLayerLint | undefined): string;
+/**
+ * Apply the proposed cleanup to the RAW user layer only, via
+ * `editUserSection` (never project/policy/session layers; never across
+ * behavior groups — removals come from `ruleSubsumes`, which requires equal
+ * behavior). Returns a result message, or `undefined`-error text on
+ * degradation.
+ */
+export declare function applyUserLint(settings: unknown): Promise<string>;
+export {};
+//# sourceMappingURL=lint.d.ts.map

package/lib/lint.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"lint.d.ts","sourceRoot":"","sources":["../src/lint.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH,OAAO,KAAK,EACV,kBAAkB,EAElB,iBAAiB,EACjB,oBAAoB,EACrB,MAAM,gCAAgC,CAAA;AAIvC,+CAA+C;AAC/C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,OAAO,GAAG,aAAa,CAAA;IACtE,MAAM,EAAE,oBAAoB,CAAA;IAC5B,QAAQ,EAAE,kBAAkB,CAAA;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACf;AAgBD,QAAA,MAAM,SAAS,mCAAoC,CAAA;AACnD,KAAK,OAAO,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,CAAA;AAYzC;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,iBAAiB,GAAG,WAAW,EAAE,CAoCnE;AAED,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,WAAW,EAAE,CAAA;IACvB,qCAAqC;IACrC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;IAC1C,2EAA2E;IAC3E,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;CAC1C;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,aAAa,CA0C3E;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,cAAc,EAAE,SAAS,WAAW,EAAE,EAAE,QAAQ,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,CAkC9G;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBtE"}

package/lib/lint.js ADDED Viewed

@@ -0,0 +1,210 @@
+/**
+ * `/permissions lint` — read-only rule-hygiene report over the permission
+ * engine's cross-source rule set, plus a proposed before/after diff for the
+ * user settings layer. `--apply` performs ONLY the user-layer cleanup through
+ * the settings cascade's `editUserSection` raw-user seam; project/policy/
+ * session layers are never written, and removals never cross behavior groups
+ * (`ruleSubsumes` requires equal behavior).
+ * @module @dsh-cc/command-permissions/lint
+ */
+import { PERMISSION_SETTINGS_NAMESPACE, parseRuleSafe, ruleString, ruleSubsumes, } from '@dsh-cc/permission-rules';
+import { SOURCE_PRIORITY } from '@dsh-cc/permission-rules/types';
+import { KNOWN_HARNESS_TOOLS, ccToolAliases } from '@dsh-cc/tools';
+const FINDING_LABEL = {
+    malformed: 'malformed (unparseable rule string)',
+    duplicate: 'exact duplicate',
+    subsumed: 'subsumed by a broader rule in the same source and behavior group',
+    broad: 'broad grant (whole-tool allow)',
+    unknownTool: 'unknown tool name',
+};
+const BEHAVIORS = ['allow', 'deny', 'ask'];
+/** Whether a tool name is known to the harness or the CC vocabulary. */
+function isKnownTool(toolName) {
+    return ccToolAliases(toolName).some(alias => KNOWN_HARNESS_TOOLS.has(alias));
+}
+/** Whether a rule is a bare whole-tool `Bash` allow (a broad persistent grant). */
+function isBroadBashAllow(rule) {
+    return rule.behavior === 'allow' && rule.toolName === 'Bash' && rule.content === undefined;
+}
+/**
+ * Lint the engine's cross-source rule set: exact duplicates and prefix-subsumed
+ * rules within one source+behavior group, bare whole-tool `Bash` allows, and
+ * unknown tool names. Read-only — the parsed engine rules carry no raw strings,
+ * so malformed strings are reported by the user-layer scan only.
+ */
+export function lintRuleSet(rules) {
+    const findings = [];
+    for (const rule of [...rules.allow, ...rules.deny, ...rules.ask]) {
+        if (isBroadBashAllow(rule)) {
+            findings.push({ kind: 'broad', source: rule.source, behavior: rule.behavior, toolName: rule.toolName, rule: ruleString(rule.toolName, rule.content), detail: 'whole-tool allow; consider a narrower prefix rule' });
+        }
+        if (!isKnownTool(rule.toolName)) {
+            findings.push({ kind: 'unknownTool', source: rule.source, behavior: rule.behavior, toolName: rule.toolName, rule: ruleString(rule.toolName, rule.content), detail: `tool "${rule.toolName}" matches no harness or CC tool name` });
+        }
+    }
+    // Duplication/subsumption only within one source+behavior group, per tool.
+    const groups = new Map();
+    for (const rule of [...rules.allow, ...rules.deny, ...rules.ask]) {
+        if (rule.content === undefined)
+            continue;
+        const key = `${rule.source}|${rule.behavior}|${rule.toolName}`;
+        const group = groups.get(key);
+        if (group === undefined)
+            groups.set(key, [rule]);
+        else
+            group.push(rule);
+    }
+    for (const group of groups.values()) {
+        for (let i = 0; i < group.length; i += 1) {
+            for (let j = 0; j < group.length; j += 1) {
+                if (i === j)
+                    continue;
+                const a = group[i];
+                const b = group[j];
+                if (!ruleSubsumes(a, b))
+                    continue;
+                if (a.content === b.content) {
+                    if (i < j)
+                        findings.push({ kind: 'duplicate', source: b.source, behavior: b.behavior, toolName: b.toolName, rule: ruleString(b.toolName, b.content), detail: `identical to another ${b.source} ${b.behavior} rule` });
+                }
+                else {
+                    findings.push({ kind: 'subsumed', source: b.source, behavior: b.behavior, toolName: b.toolName, rule: ruleString(b.toolName, b.content), detail: `covered by ${ruleString(a.toolName, a.content)}` });
+                }
+                break;
+            }
+        }
+    }
+    return findings;
+}
+/**
+ * Lint the RAW user settings section (rule strings, not engine rules):
+ * flags malformed strings (kept — apply never rewrites unparseable entries),
+ * and computes the cleaned lists (exact duplicates and same-behavior subsumed
+ * entries removed, first/broader kept). Bare `Bash` allows and unknown tool
+ * names are flagged but kept.
+ */
+export function lintUserSection(raw) {
+    const findings = [];
+    const before = {};
+    const after = {};
+    for (const behavior of BEHAVIORS) {
+        const list = raw[behavior];
+        if (!Array.isArray(list))
+            continue;
+        const strings = list.filter((entry) => typeof entry === 'string');
+        before[behavior] = strings;
+        const kept = [];
+        const keptRules = [];
+        for (const entry of strings) {
+            const parsed = parseRuleSafe(entry, behavior, 'userSettings');
+            if (parsed === undefined) {
+                findings.push({ kind: 'malformed', source: 'userSettings', behavior, toolName: '?', rule: entry, detail: 'the rule string does not parse' });
+                kept.push(entry);
+                continue;
+            }
+            if (isBroadBashAllow(parsed)) {
+                findings.push({ kind: 'broad', source: 'userSettings', behavior, toolName: parsed.toolName, rule: entry, detail: 'whole-tool allow; consider a narrower prefix rule' });
+            }
+            if (!isKnownTool(parsed.toolName)) {
+                findings.push({ kind: 'unknownTool', source: 'userSettings', behavior, toolName: parsed.toolName, rule: entry, detail: `tool "${parsed.toolName}" matches no harness or CC tool name` });
+            }
+            const cover = keptRules.find(kept => ruleSubsumes(kept, parsed));
+            if (cover !== undefined) {
+                findings.push({
+                    kind: parsed.content === cover.content ? 'duplicate' : 'subsumed',
+                    source: 'userSettings',
+                    behavior,
+                    toolName: parsed.toolName,
+                    rule: entry,
+                    detail: parsed.content === cover.content ? 'identical to an earlier entry' : `covered by ${ruleString(cover.toolName, cover.content)}`,
+                });
+                continue;
+            }
+            kept.push(entry);
+            keptRules.push(parsed);
+        }
+        after[behavior] = kept;
+    }
+    return { findings, before, after };
+}
+/**
+ * Render the lint report: findings grouped by source/behavior, then the
+ * proposed user-layer before/after diff (removals marked `-`).
+ */
+export function renderLint(engineFindings, userLint) {
+    const lines = ['Permission rules lint (read-only)'];
+    const all = [...engineFindings, ...(userLint?.findings ?? [])];
+    if (all.length === 0) {
+        lines.push('  (no findings)');
+    }
+    else {
+        for (const source of SOURCE_PRIORITY) {
+            for (const behavior of BEHAVIORS) {
+                const rows = all.filter(f => f.source === source && f.behavior === behavior);
+                if (rows.length === 0)
+                    continue;
+                lines.push(`  ${source} ${behavior}:`);
+                for (const f of rows)
+                    lines.push(`    ${f.rule} — ${FINDING_LABEL[f.kind]} (${f.detail})`);
+            }
+        }
+    }
+    lines.push('Proposed user-layer cleanup:');
+    if (userLint === undefined) {
+        lines.push('  (user settings layer not reachable)');
+    }
+    else {
+        let any = false;
+        for (const behavior of BEHAVIORS) {
+            const before = userLint.before[behavior];
+            const after = userLint.after[behavior];
+            if (before === undefined || after === undefined || before.length === after.length)
+                continue;
+            any = true;
+            lines.push(`  ${behavior}:`);
+            for (const entry of before) {
+                if (!after.includes(entry))
+                    lines.push(`    - ${entry}`);
+                else
+                    lines.push(`      ${entry}`);
+            }
+        }
+        if (!any)
+            lines.push('  (no changes proposed)');
+    }
+    return lines.join('\n');
+}
+/**
+ * Apply the proposed cleanup to the RAW user layer only, via
+ * `editUserSection` (never project/policy/session layers; never across
+ * behavior groups — removals come from `ruleSubsumes`, which requires equal
+ * behavior). Returns a result message, or `undefined`-error text on
+ * degradation.
+ */
+export async function applyUserLint(settings) {
+    const provider = settings;
+    if (provider === undefined || typeof provider.editUserSection !== 'function' || provider.writable === false) {
+        return 'Cannot apply — no writable settings provider with a raw user-layer edit seam is mounted.';
+    }
+    let removed = 0;
+    await provider.editUserSection(PERMISSION_SETTINGS_NAMESPACE, raw => {
+        const lint = lintUserSection(raw);
+        removed = 0;
+        for (const behavior of BEHAVIORS) {
+            const before = lint.before[behavior];
+            const after = lint.after[behavior];
+            if (before !== undefined && after !== undefined)
+                removed += before.length - after.length;
+        }
+        if (removed === 0)
+            return undefined;
+        const next = { ...raw };
+        for (const behavior of BEHAVIORS) {
+            if (lint.before[behavior] !== undefined)
+                next[behavior] = lint.after[behavior];
+        }
+        return next;
+    });
+    return removed === 0 ? 'Nothing to apply — the user layer is already clean.' : `Applied: removed ${removed} redundant user-layer rule(s).`;
+}
+//# sourceMappingURL=lint.js.map

package/lib/lint.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"lint.js","sourceRoot":"","sources":["../src/lint.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,6BAA6B,EAC7B,aAAa,EACb,UAAU,EACV,YAAY,GACb,MAAM,0BAA0B,CAAA;AAOjC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAalE,MAAM,aAAa,GAAwC;IACzD,SAAS,EAAE,qCAAqC;IAChD,SAAS,EAAE,iBAAiB;IAC5B,QAAQ,EAAE,kEAAkE;IAC5E,KAAK,EAAE,gCAAgC;IACvC,WAAW,EAAE,mBAAmB;CACjC,CAAA;AAQD,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAU,CAAA;AAGnD,wEAAwE;AACxE,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;AAC9E,CAAC;AAED,mFAAmF;AACnF,SAAS,gBAAgB,CAAC,IAAoB;IAC5C,OAAO,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAA;AAC5F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAwB;IAClD,MAAM,QAAQ,GAAkB,EAAE,CAAA;IAClC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC,CAAA;QACrN,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,IAAI,CAAC,QAAQ,sCAAsC,EAAE,CAAC,CAAA;QACpO,CAAC;IACH,CAAC;IACD,2EAA2E;IAC3E,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAA;IAClD,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,SAAQ;QACxC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAA;QAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC7B,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;;YAC3C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,IAAI,CAAC,KAAK,CAAC;oBAAE,SAAQ;gBACrB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;gBACnB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;gBACnB,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;oBAAE,SAAQ;gBACjC,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC5B,IAAI,CAAC,GAAG,CAAC;wBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAA;gBACvN,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,cAAc,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAA;gBACvM,CAAC;gBACD,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,GAA4B;IAC1D,MAAM,QAAQ,GAAkB,EAAE,CAAA;IAClC,MAAM,MAAM,GAAuC,EAAE,CAAA;IACrD,MAAM,KAAK,GAAuC,EAAE,CAAA;IACpD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAQ;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAA;QAClF,MAAM,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAA;QAC1B,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,MAAM,SAAS,GAAqB,EAAE,CAAA;QACtC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAA;YAC7D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAA;gBAC5I,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBAChB,SAAQ;YACV,CAAC;YACD,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC,CAAA;YACzK,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,MAAM,CAAC,QAAQ,sCAAsC,EAAE,CAAC,CAAA;YAC1L,CAAC;YACD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;YAChE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;oBACjE,MAAM,EAAE,cAAc;oBACtB,QAAQ;oBACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,IAAI,EAAE,KAAK;oBACX,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,cAAc,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;iBACvI,CAAC,CAAA;gBACF,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAChB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACxB,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAA;IACxB,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,cAAsC,EAAE,QAAmC;IACpG,MAAM,KAAK,GAAG,CAAC,mCAAmC,CAAC,CAAA;IACnD,MAAM,GAAG,GAAG,CAAC,GAAG,cAAc,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAA;IAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAC/B,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;YACrC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAA;gBAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAQ;gBAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,QAAQ,GAAG,CAAC,CAAA;gBACtC,KAAK,MAAM,CAAC,IAAI,IAAI;oBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;YAC5F,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAC1C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAA;IACrD,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,GAAG,KAAK,CAAA;QACf,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YACtC,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAAE,SAAQ;YAC3F,GAAG,GAAG,IAAI,CAAA;YACV,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ,GAAG,CAAC,CAAA;YAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAA;;oBACnD,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAA;YACnC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,GAAG;YAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;IACjD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAiB;IACnD,MAAM,QAAQ,GAAG,QAA4C,CAAA;IAC7D,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,eAAe,KAAK,UAAU,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC5G,OAAO,0FAA0F,CAAA;IACnG,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,MAAM,QAAQ,CAAC,eAAe,CAAC,6BAA6B,EAAE,GAAG,CAAC,EAAE;QAClE,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;QACjC,OAAO,GAAG,CAAC,CAAA;QACX,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YAClC,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;QAC1F,CAAC;QACD,IAAI,OAAO,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QACnC,MAAM,IAAI,GAA4B,EAAE,GAAG,GAAG,EAAE,CAAA;QAChD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QAChF,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CAAA;IACF,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC,CAAC,oBAAoB,OAAO,gCAAgC,CAAA;AAC5I,CAAC"}

package/lib/permissions.d.ts CHANGED Viewed

@@ -22,7 +22,11 @@ export interface Totals {
  * Render the effective permission rule state from a rule set.
  * @param rules - the merged rule set (the engine's `ruleSet`).
  * @param bypassImmune - bypass-immune rule count (deny, guard-enforced).
+ * @param opts - when `suspendedAllow` > 0 (auto mode only), annotate the
+ *   count of allow rules suspended at evaluation time (design doc D1).
  * @returns a read-only report of rule counts per source and in total.
  */
-export declare function renderPermissions(rules: PermissionRuleSet, bypassImmune: number): string;
+export declare function renderPermissions(rules: PermissionRuleSet, bypassImmune: number, opts?: {
+    suspendedAllow?: number;
+}): string;
 //# sourceMappingURL=permissions.d.ts.map

package/lib/permissions.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,gCAAgC,CAAA;AAEvC,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,uCAAuC;AACvC,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,MAAM,CAAA;CACrB;AAqBD~~;;;;;GAKG~~;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,~~CAcxF~~"}
1	+ {"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,gCAAgC,CAAA;AAEvC,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,uCAAuC;AACvC,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,MAAM,CAAA;CACrB;AAqBD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,MAAM,CAgBhI"}

package/lib/permissions.js CHANGED Viewed

@@ -29,9 +29,11 @@ function addTotals(total, counts) {
  * Render the effective permission rule state from a rule set.
  * @param rules - the merged rule set (the engine's `ruleSet`).
  * @param bypassImmune - bypass-immune rule count (deny, guard-enforced).
+ * @param opts - when `suspendedAllow` > 0 (auto mode only), annotate the
+ *   count of allow rules suspended at evaluation time (design doc D1).
  * @returns a read-only report of rule counts per source and in total.
  */
-export function renderPermissions(rules, bypassImmune) {
+export function renderPermissions(rules, bypassImmune, opts = {}) {
     const lines = ['Permission rules (read-only)'];
     const total = { allow: 0, deny: 0, ask: 0, bypassImmune };
     let any = false;
@@ -46,6 +48,9 @@ export function renderPermissions(rules, bypassImmune) {
     if (!any)
         lines.push('  (no rules configured)');
     lines.push(`Total: allow=${total.allow} deny=${total.deny} ask=${total.ask} (bypassImmune=${bypassImmune})`);
+    const suspended = opts.suspendedAllow ?? 0;
+    if (suspended > 0)
+        lines.push(`Total: ${suspended} allow rule(s) suspended in auto mode`);
     return lines.join('\n');
 }
 //# sourceMappingURL=permissions.js.map

package/lib/permissions.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"permissions.js","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,eAAe,GAGhB,MAAM,gCAAgC,CAAA;AAkBvC,kEAAkE;AAClE,SAAS,SAAS,CAAC,MAAc,EAAE,KAAgC;IACjE,MAAM,GAAG,GAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;IACxE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,SAAQ;QACpC,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;YAAE,GAAG,CAAC,KAAK,IAAI,CAAC,CAAA;aACxC,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM;YAAE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAA;aAC3C,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK;YAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,qDAAqD;AACrD,SAAS,SAAS,CAAC,KAAa,EAAE,MAAoB;IACpD,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAA;IAC3B,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAA;IACzB,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAA;AACzB,CAAC;AAED~~;;;;;GAKG~~;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAwB,EAAE,YAAoB;~~IAC9E~~,MAAM,KAAK,GAAG,CAAC,8BAA8B,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAW,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,EAAE,CAAA;IACjE,IAAI,GAAG,GAAG,KAAK,CAAA;IACf,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QAC/E,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC;YAAE,SAAQ;QACzE,GAAG,GAAG,IAAI,CAAA;QACV,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,WAAW,MAAM,CAAC,KAAK,SAAS,MAAM,CAAC,IAAI,QAAQ,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;IACxF,CAAC;IACD,IAAI,CAAC,GAAG;QAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;IAC/C,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,KAAK,SAAS,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,GAAG,kBAAkB,YAAY,GAAG,CAAC,CAAA;IAC5G,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}
1	+ {"version":3,"file":"permissions.js","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,eAAe,GAGhB,MAAM,gCAAgC,CAAA;AAkBvC,kEAAkE;AAClE,SAAS,SAAS,CAAC,MAAc,EAAE,KAAgC;IACjE,MAAM,GAAG,GAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;IACxE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,SAAQ;QACpC,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;YAAE,GAAG,CAAC,KAAK,IAAI,CAAC,CAAA;aACxC,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM;YAAE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAA;aAC3C,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK;YAAE,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,qDAAqD;AACrD,SAAS,SAAS,CAAC,KAAa,EAAE,MAAoB;IACpD,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAA;IAC3B,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAA;IACzB,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAA;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAwB,EAAE,YAAoB,EAAE,OAAoC,EAAE;IACtH,MAAM,KAAK,GAAG,CAAC,8BAA8B,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAW,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,EAAE,CAAA;IACjE,IAAI,GAAG,GAAG,KAAK,CAAA;IACf,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QAC/E,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC;YAAE,SAAQ;QACzE,GAAG,GAAG,IAAI,CAAA;QACV,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,WAAW,MAAM,CAAC,KAAK,SAAS,MAAM,CAAC,IAAI,QAAQ,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;IACxF,CAAC;IACD,IAAI,CAAC,GAAG;QAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;IAC/C,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,KAAK,SAAS,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,GAAG,kBAAkB,YAAY,GAAG,CAAC,CAAA;IAC5G,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,CAAA;IAC1C,IAAI,SAAS,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,SAAS,uCAAuC,CAAC,CAAA;IACzF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}

package/package.json CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "name": "@dsh-cc/command-permissions",
   "description": "Human-facing /permissions command (CC rule-engine modes) plus a popupSelect decoration (and TUI overlay) for the bare invocation",
-  "version": "0.8.0-rc.2",
+  "version": "0.8.1-rc.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/dsh-cc/dsh-cc.git",
@@ -38,8 +38,9 @@
     }
   },
   "dependencies": {
-    "@dsh-cc/permission-rules": "^0.8.0-rc.2",
-    "@dsh-cc/command-usage": "^0.8.0-rc.2"
+    "@dsh-cc/command-usage": "^0.8.1-rc.1",
+    "@dsh-cc/tools": "^0.8.1-rc.1",
+    "@dsh-cc/permission-rules": "^0.8.1-rc.1"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": ">=0.1.5-rc.1",