@flanksource/clicky-ui 0.3.28 → 0.3.30

package/dist/lib/combobox.js

@@ -0,0 +1,93 @@
+const COMBOBOX_MENU_MAX_WIDTH_PX = 400;
+const COMBOBOX_MENU_MAX_HEIGHT_PX = 256;
+const COMBOBOX_MOBILE_QUERY = "(max-width: 639px)";
+const COMBOBOX_MENU_EDGE_INSET_PX = 8;
+const COMBOBOX_MENU_ANCHOR_GAP_PX = 4;
+const COMBOBOX_MOBILE_HORIZONTAL_INSET_PX = 16;
+function calculateComboboxMenuPosition({
+  anchor,
+  viewportWidth,
+  viewportHeight,
+  mobile,
+  naturalHeight
+}) {
+  if (mobile) {
+    const spaceBelow2 = Math.max(
+      0,
+      viewportHeight - anchor.bottom - COMBOBOX_MENU_ANCHOR_GAP_PX - COMBOBOX_MENU_EDGE_INSET_PX
+    );
+    const spaceAbove2 = Math.max(
+      0,
+      anchor.top - COMBOBOX_MENU_ANCHOR_GAP_PX - COMBOBOX_MENU_EDGE_INSET_PX
+    );
+    const openUp2 = naturalHeight != null && naturalHeight > spaceBelow2 && spaceAbove2 > spaceBelow2;
+    const width = Math.max(
+      0,
+      viewportWidth - COMBOBOX_MOBILE_HORIZONTAL_INSET_PX * 2
+    );
+    return menuPosition({
+      strategy: "mobile",
+      anchor,
+      viewportHeight,
+      openUp: openUp2,
+      left: COMBOBOX_MOBILE_HORIZONTAL_INSET_PX,
+      width,
+      maxWidth: width,
+      maxHeight: openUp2 ? spaceAbove2 : spaceBelow2
+    });
+  }
+  const spaceBelow = Math.max(
+    0,
+    viewportHeight - anchor.bottom - COMBOBOX_MENU_ANCHOR_GAP_PX - COMBOBOX_MENU_EDGE_INSET_PX
+  );
+  const spaceAbove = Math.max(
+    0,
+    anchor.top - COMBOBOX_MENU_ANCHOR_GAP_PX - COMBOBOX_MENU_EDGE_INSET_PX
+  );
+  const openUp = spaceBelow < COMBOBOX_MENU_MAX_HEIGHT_PX && spaceAbove > spaceBelow;
+  return menuPosition({
+    strategy: "desktop",
+    anchor,
+    viewportHeight,
+    openUp,
+    left: anchor.left,
+    width: anchor.width,
+    maxWidth: Math.max(
+      anchor.width,
+      Math.min(
+        COMBOBOX_MENU_MAX_WIDTH_PX,
+        viewportWidth - anchor.left - COMBOBOX_MENU_EDGE_INSET_PX
+      )
+    ),
+    maxHeight: Math.min(
+      COMBOBOX_MENU_MAX_HEIGHT_PX,
+      openUp ? spaceAbove : spaceBelow
+    )
+  });
+}
+function menuPosition({
+  strategy,
+  anchor,
+  viewportHeight,
+  openUp,
+  left,
+  width,
+  maxWidth,
+  maxHeight
+}) {
+  return {
+    strategy,
+    ...openUp ? { bottom: viewportHeight - anchor.top + COMBOBOX_MENU_ANCHOR_GAP_PX } : { top: anchor.bottom + COMBOBOX_MENU_ANCHOR_GAP_PX },
+    left,
+    width,
+    maxWidth,
+    maxHeight
+  };
+}
+export {
+  COMBOBOX_MENU_MAX_HEIGHT_PX,
+  COMBOBOX_MENU_MAX_WIDTH_PX,
+  COMBOBOX_MOBILE_QUERY,
+  calculateComboboxMenuPosition
+};
+//# sourceMappingURL=combobox.js.map

package/dist/lib/combobox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"combobox.js","sources":["../../src/lib/combobox.ts"],"sourcesContent":["export const COMBOBOX_MENU_MAX_WIDTH_PX = 400;\nexport const COMBOBOX_MENU_MAX_HEIGHT_PX = 256;\nexport const COMBOBOX_MOBILE_QUERY = \"(max-width: 639px)\";\n\nconst COMBOBOX_MENU_EDGE_INSET_PX = 8;\nconst COMBOBOX_MENU_ANCHOR_GAP_PX = 4;\nconst COMBOBOX_MOBILE_HORIZONTAL_INSET_PX = 16;\n\nexport type ComboboxMenuPosition = {\n  strategy: \"desktop\" | \"mobile\";\n  top?: number;\n  bottom?: number;\n  left: number;\n  width: number;\n  maxWidth: number;\n  maxHeight: number;\n};\n\nexport function calculateComboboxMenuPosition({\n  anchor,\n  viewportWidth,\n  viewportHeight,\n  mobile,\n  naturalHeight,\n}: {\n  anchor: Pick<DOMRect, \"top\" | \"bottom\" | \"left\" | \"width\">;\n  viewportWidth: number;\n  viewportHeight: number;\n  mobile: boolean;\n  naturalHeight?: number;\n}): ComboboxMenuPosition {\n  if (mobile) {\n    const spaceBelow = Math.max(\n      0,\n      viewportHeight -\n        anchor.bottom -\n        COMBOBOX_MENU_ANCHOR_GAP_PX -\n        COMBOBOX_MENU_EDGE_INSET_PX,\n    );\n    const spaceAbove = Math.max(\n      0,\n      anchor.top - COMBOBOX_MENU_ANCHOR_GAP_PX - COMBOBOX_MENU_EDGE_INSET_PX,\n    );\n    const openUp =\n      naturalHeight != null &&\n      naturalHeight > spaceBelow &&\n      spaceAbove > spaceBelow;\n    const width = Math.max(\n      0,\n      viewportWidth - COMBOBOX_MOBILE_HORIZONTAL_INSET_PX * 2,\n    );\n    return menuPosition({\n      strategy: \"mobile\",\n      anchor,\n      viewportHeight,\n      openUp,\n      left: COMBOBOX_MOBILE_HORIZONTAL_INSET_PX,\n      width,\n      maxWidth: width,\n      maxHeight: openUp ? spaceAbove : spaceBelow,\n    });\n  }\n\n  const spaceBelow = Math.max(\n    0,\n    viewportHeight -\n      anchor.bottom -\n      COMBOBOX_MENU_ANCHOR_GAP_PX -\n      COMBOBOX_MENU_EDGE_INSET_PX,\n  );\n  const spaceAbove = Math.max(\n    0,\n    anchor.top - COMBOBOX_MENU_ANCHOR_GAP_PX - COMBOBOX_MENU_EDGE_INSET_PX,\n  );\n  const openUp =\n    spaceBelow < COMBOBOX_MENU_MAX_HEIGHT_PX && spaceAbove > spaceBelow;\n  return menuPosition({\n    strategy: \"desktop\",\n    anchor,\n    viewportHeight,\n    openUp,\n    left: anchor.left,\n    width: anchor.width,\n    maxWidth: Math.max(\n      anchor.width,\n      Math.min(\n        COMBOBOX_MENU_MAX_WIDTH_PX,\n        viewportWidth - anchor.left - COMBOBOX_MENU_EDGE_INSET_PX,\n      ),\n    ),\n    maxHeight: Math.min(\n      COMBOBOX_MENU_MAX_HEIGHT_PX,\n      openUp ? spaceAbove : spaceBelow,\n    ),\n  });\n}\n\nfunction menuPosition({\n  strategy,\n  anchor,\n  viewportHeight,\n  openUp,\n  left,\n  width,\n  maxWidth,\n  maxHeight,\n}: Omit<ComboboxMenuPosition, \"top\" | \"bottom\"> & {\n  anchor: Pick<DOMRect, \"top\" | \"bottom\">;\n  viewportHeight: number;\n  openUp: boolean;\n}): ComboboxMenuPosition {\n  return {\n    strategy,\n    ...(openUp\n      ? { bottom: viewportHeight - anchor.top + COMBOBOX_MENU_ANCHOR_GAP_PX }\n      : { top: anchor.bottom + COMBOBOX_MENU_ANCHOR_GAP_PX }),\n    left,\n    width,\n    maxWidth,\n    maxHeight,\n  };\n}\n"],"names":["spaceBelow","spaceAbove","openUp"],"mappings":"AAAO,MAAM,6BAA6B;AACnC,MAAM,8BAA8B;AACpC,MAAM,wBAAwB;AAErC,MAAM,8BAA8B;AACpC,MAAM,8BAA8B;AACpC,MAAM,sCAAsC;AAYrC,SAAS,8BAA8B;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAMyB;AACvB,MAAI,QAAQ;AACV,UAAMA,cAAa,KAAK;AAAA,MACtB;AAAA,MACA,iBACE,OAAO,SACP,8BACA;AAAA,IAAA;AAEJ,UAAMC,cAAa,KAAK;AAAA,MACtB;AAAA,MACA,OAAO,MAAM,8BAA8B;AAAA,IAAA;AAE7C,UAAMC,UACJ,iBAAiB,QACjB,gBAAgBF,eAChBC,cAAaD;AACf,UAAM,QAAQ,KAAK;AAAA,MACjB;AAAA,MACA,gBAAgB,sCAAsC;AAAA,IAAA;AAExD,WAAO,aAAa;AAAA,MAClB,UAAU;AAAA,MACV;AAAA,MACA;AAAA,MACA,QAAAE;AAAAA,MACA,MAAM;AAAA,MACN;AAAA,MACA,UAAU;AAAA,MACV,WAAWA,UAASD,cAAaD;AAAAA,IAAA,CAClC;AAAA,EACH;AAEA,QAAM,aAAa,KAAK;AAAA,IACtB;AAAA,IACA,iBACE,OAAO,SACP,8BACA;AAAA,EAAA;AAEJ,QAAM,aAAa,KAAK;AAAA,IACtB;AAAA,IACA,OAAO,MAAM,8BAA8B;AAAA,EAAA;AAE7C,QAAM,SACJ,aAAa,+BAA+B,aAAa;AAC3D,SAAO,aAAa;AAAA,IAClB,UAAU;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM,OAAO;AAAA,IACb,OAAO,OAAO;AAAA,IACd,UAAU,KAAK;AAAA,MACb,OAAO;AAAA,MACP,KAAK;AAAA,QACH;AAAA,QACA,gBAAgB,OAAO,OAAO;AAAA,MAAA;AAAA,IAChC;AAAA,IAEF,WAAW,KAAK;AAAA,MACd;AAAA,MACA,SAAS,aAAa;AAAA,IAAA;AAAA,EACxB,CACD;AACH;AAEA,SAAS,aAAa;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAIyB;AACvB,SAAO;AAAA,IACL;AAAA,IACA,GAAI,SACA,EAAE,QAAQ,iBAAiB,OAAO,MAAM,4BAAA,IACxC,EAAE,KAAK,OAAO,SAAS,4BAAA;AAAA,IAC3B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;"}

package/dist/lib/permission-strategies.cjs

@@ -0,0 +1,155 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const toolPolicy = require("../data/chat/tool-policy.cjs");
+const PATTERN_FIELDS = [
+  "name",
+  "group",
+  "parent",
+  "entity",
+  "action",
+  "verb",
+  "method",
+  "scope"
+];
+const HINT_FIELDS = ["readOnly", "destructive", "idempotent"];
+const MATCH_FIELDS = [...PATTERN_FIELDS, ...HINT_FIELDS];
+const STRATEGY_PRESETS = [
+  {
+    value: "all",
+    label: "All tools",
+    description: "Match every tool in the catalog."
+  },
+  {
+    value: "read-only",
+    label: "Read-only tools",
+    description: "Match tools explicitly marked read-only."
+  },
+  {
+    value: "destructive",
+    label: "Destructive tools",
+    description: "Match tools explicitly marked destructive."
+  },
+  {
+    value: "idempotent",
+    label: "Idempotent tools",
+    description: "Match tools safe to repeat."
+  },
+  {
+    value: "custom",
+    label: "Custom conditions",
+    description: "Combine tool metadata and safety annotations."
+  }
+];
+const MATCH_FIELD_OPTIONS = [
+  { value: "name", label: "Tool name" },
+  { value: "group", label: "Group" },
+  { value: "parent", label: "Parent" },
+  { value: "entity", label: "Entity" },
+  { value: "action", label: "Action" },
+  { value: "verb", label: "Verb" },
+  { value: "method", label: "HTTP method" },
+  { value: "scope", label: "Scope" },
+  { value: "readOnly", label: "Read only" },
+  { value: "destructive", label: "Destructive" },
+  { value: "idempotent", label: "Idempotent" }
+];
+function strategyPreset(rule) {
+  const fields = activeMatchFields(rule);
+  if (fields.length !== 1) return "custom";
+  if (fields[0] === "name" && patternsText(rule.name) === "*") return "all";
+  if (fields[0] === "readOnly" && rule.readOnly === true) return "read-only";
+  if (fields[0] === "destructive" && rule.destructive === true) {
+    return "destructive";
+  }
+  if (fields[0] === "idempotent" && rule.idempotent === true) {
+    return "idempotent";
+  }
+  return "custom";
+}
+function applyStrategyPreset(rule, preset) {
+  if (preset === "all") return { name: "*", policy: rule.policy };
+  if (preset === "read-only") return { readOnly: true, policy: rule.policy };
+  if (preset === "destructive")
+    return { destructive: true, policy: rule.policy };
+  return { idempotent: true, policy: rule.policy };
+}
+function activeMatchFields(rule) {
+  return MATCH_FIELDS.filter((field) => rule[field] !== void 0);
+}
+function patternsText(value) {
+  return typeof value === "string" ? value : (value ?? []).join(", ");
+}
+function patternValues(value) {
+  return typeof value === "string" ? value ? [value] : [] : value ?? [];
+}
+function updatePatternCondition({
+  rule,
+  field,
+  value
+}) {
+  return { ...rule, [field]: value };
+}
+function conditionText(rule, field) {
+  if (isHintField(field)) return String(rule[field]);
+  return patternsText(rule[field]);
+}
+function replaceMatchField(rule, current, next) {
+  if (current === next) return rule;
+  const match = { ...rule };
+  const previous = match[current];
+  delete match[current];
+  match[next] = isHintField(next) ? typeof previous === "boolean" ? previous : true : typeof previous === "string" || Array.isArray(previous) ? previous : "*";
+  return match;
+}
+function updateCondition(rule, field, value) {
+  if (isHintField(field)) return { ...rule, [field]: value === "true" };
+  const patterns = value.split(",").map((item) => item.trim()).filter(Boolean);
+  return {
+    ...rule,
+    [field]: patterns.length <= 1 ? patterns[0] ?? "" : patterns
+  };
+}
+function removeCondition(rule, field) {
+  const next = { ...rule };
+  delete next[field];
+  if (activeMatchFields(next).length === 0) next.name = "*";
+  return next;
+}
+function addCondition(rule, field) {
+  if (rule[field] !== void 0) return rule;
+  return { ...rule, [field]: isHintField(field) ? true : "*" };
+}
+function isHintField(field) {
+  return HINT_FIELDS.includes(field);
+}
+function matchingTools(rule, tools) {
+  return tools.filter((tool) => toolPolicy.matchesTool(rule, tool));
+}
+function toolFieldSuggestions(tools, field) {
+  const values = /* @__PURE__ */ new Set();
+  for (const tool of tools) {
+    const value = tool[field === "name" ? "name" : field];
+    if (typeof value === "string" && value.trim()) values.add(value);
+  }
+  return Array.from(values).sort((left, right) => left.localeCompare(right));
+}
+exports.HINT_FIELDS = HINT_FIELDS;
+exports.MATCH_FIELDS = MATCH_FIELDS;
+exports.MATCH_FIELD_OPTIONS = MATCH_FIELD_OPTIONS;
+exports.PATTERN_FIELDS = PATTERN_FIELDS;
+exports.STRATEGY_PRESETS = STRATEGY_PRESETS;
+exports.activeMatchFields = activeMatchFields;
+exports.addCondition = addCondition;
+exports.applyStrategyPreset = applyStrategyPreset;
+exports.conditionText = conditionText;
+exports.isHintField = isHintField;
+exports.matchingTools = matchingTools;
+exports.patternValues = patternValues;
+exports.patternsText = patternsText;
+exports.removeCondition = removeCondition;
+exports.replaceMatchField = replaceMatchField;
+exports.strategyPreset = strategyPreset;
+exports.toolFieldSuggestions = toolFieldSuggestions;
+exports.updateCondition = updateCondition;
+exports.updatePatternCondition = updatePatternCondition;
+//# sourceMappingURL=permission-strategies.cjs.map

package/dist/lib/permission-strategies.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-strategies.cjs","sources":["../../src/lib/permission-strategies.ts"],"sourcesContent":["import {\n  matchesTool,\n  type MatchPatterns,\n  type PermissionRule,\n} from \"../data/chat/tool-policy\";\nimport type { ToolMeta } from \"../data/chat/types\";\n\nexport const PATTERN_FIELDS = [\n  \"name\",\n  \"group\",\n  \"parent\",\n  \"entity\",\n  \"action\",\n  \"verb\",\n  \"method\",\n  \"scope\",\n] as const;\nexport const HINT_FIELDS = [\"readOnly\", \"destructive\", \"idempotent\"] as const;\nexport const MATCH_FIELDS = [...PATTERN_FIELDS, ...HINT_FIELDS] as const;\n\nexport type MatchField = (typeof MATCH_FIELDS)[number];\nexport type StrategyPreset =\n  | \"all\"\n  | \"read-only\"\n  | \"destructive\"\n  | \"idempotent\"\n  | \"custom\";\n\nexport const STRATEGY_PRESETS: Array<{\n  value: StrategyPreset;\n  label: string;\n  description: string;\n}> = [\n  {\n    value: \"all\",\n    label: \"All tools\",\n    description: \"Match every tool in the catalog.\",\n  },\n  {\n    value: \"read-only\",\n    label: \"Read-only tools\",\n    description: \"Match tools explicitly marked read-only.\",\n  },\n  {\n    value: \"destructive\",\n    label: \"Destructive tools\",\n    description: \"Match tools explicitly marked destructive.\",\n  },\n  {\n    value: \"idempotent\",\n    label: \"Idempotent tools\",\n    description: \"Match tools safe to repeat.\",\n  },\n  {\n    value: \"custom\",\n    label: \"Custom conditions\",\n    description: \"Combine tool metadata and safety annotations.\",\n  },\n];\n\nexport const MATCH_FIELD_OPTIONS: Array<{ value: MatchField; label: string }> =\n  [\n    { value: \"name\", label: \"Tool name\" },\n    { value: \"group\", label: \"Group\" },\n    { value: \"parent\", label: \"Parent\" },\n    { value: \"entity\", label: \"Entity\" },\n    { value: \"action\", label: \"Action\" },\n    { value: \"verb\", label: \"Verb\" },\n    { value: \"method\", label: \"HTTP method\" },\n    { value: \"scope\", label: \"Scope\" },\n    { value: \"readOnly\", label: \"Read only\" },\n    { value: \"destructive\", label: \"Destructive\" },\n    { value: \"idempotent\", label: \"Idempotent\" },\n  ];\n\nexport function strategyPreset(rule: PermissionRule): StrategyPreset {\n  const fields = activeMatchFields(rule);\n  if (fields.length !== 1) return \"custom\";\n  if (fields[0] === \"name\" && patternsText(rule.name) === \"*\") return \"all\";\n  if (fields[0] === \"readOnly\" && rule.readOnly === true) return \"read-only\";\n  if (fields[0] === \"destructive\" && rule.destructive === true) {\n    return \"destructive\";\n  }\n  if (fields[0] === \"idempotent\" && rule.idempotent === true) {\n    return \"idempotent\";\n  }\n  return \"custom\";\n}\n\nexport function applyStrategyPreset(\n  rule: PermissionRule,\n  preset: Exclude<StrategyPreset, \"custom\">,\n): PermissionRule {\n  if (preset === \"all\") return { name: \"*\", policy: rule.policy };\n  if (preset === \"read-only\") return { readOnly: true, policy: rule.policy };\n  if (preset === \"destructive\")\n    return { destructive: true, policy: rule.policy };\n  return { idempotent: true, policy: rule.policy };\n}\n\nexport function activeMatchFields(rule: PermissionRule): MatchField[] {\n  return MATCH_FIELDS.filter((field) => rule[field] !== undefined);\n}\n\nexport function patternsText(value: MatchPatterns | undefined): string {\n  return typeof value === \"string\" ? value : (value ?? []).join(\", \");\n}\n\nexport function patternValues(value: MatchPatterns | undefined): string[] {\n  return typeof value === \"string\" ? (value ? [value] : []) : (value ?? []);\n}\n\nexport function updatePatternCondition({\n  rule,\n  field,\n  value,\n}: {\n  rule: PermissionRule;\n  field: (typeof PATTERN_FIELDS)[number];\n  value: MatchPatterns;\n}): PermissionRule {\n  return { ...rule, [field]: value };\n}\n\nexport function conditionText(rule: PermissionRule, field: MatchField): string {\n  if (isHintField(field)) return String(rule[field]);\n  return patternsText(rule[field]);\n}\n\nexport function replaceMatchField(\n  rule: PermissionRule,\n  current: MatchField,\n  next: MatchField,\n): PermissionRule {\n  if (current === next) return rule;\n  const match = { ...rule } as Record<string, unknown>;\n  const previous = match[current];\n  delete match[current];\n  match[next] = isHintField(next)\n    ? typeof previous === \"boolean\"\n      ? previous\n      : true\n    : typeof previous === \"string\" || Array.isArray(previous)\n      ? previous\n      : \"*\";\n  return match as PermissionRule;\n}\n\nexport function updateCondition(\n  rule: PermissionRule,\n  field: MatchField,\n  value: string,\n): PermissionRule {\n  if (isHintField(field)) return { ...rule, [field]: value === \"true\" };\n  const patterns = value\n    .split(\",\")\n    .map((item) => item.trim())\n    .filter(Boolean);\n  return {\n    ...rule,\n    [field]: patterns.length <= 1 ? (patterns[0] ?? \"\") : patterns,\n  };\n}\n\nexport function removeCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  const next = { ...rule } as Record<string, unknown>;\n  delete next[field];\n  if (activeMatchFields(next as PermissionRule).length === 0) next.name = \"*\";\n  return next as PermissionRule;\n}\n\nexport function addCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  if (rule[field] !== undefined) return rule;\n  return { ...rule, [field]: isHintField(field) ? true : \"*\" };\n}\n\nexport function isHintField(\n  field: MatchField,\n): field is (typeof HINT_FIELDS)[number] {\n  return (HINT_FIELDS as readonly MatchField[]).includes(field);\n}\n\nexport function matchingTools(rule: PermissionRule, tools: ToolMeta[]) {\n  return tools.filter((tool) => matchesTool(rule, tool));\n}\n\nexport function toolFieldSuggestions(\n  tools: ToolMeta[],\n  field: Exclude<MatchField, (typeof HINT_FIELDS)[number]>,\n) {\n  const values = new Set<string>();\n  for (const tool of tools) {\n    const value = tool[field === \"name\" ? \"name\" : field];\n    if (typeof value === \"string\" && value.trim()) values.add(value);\n  }\n  return Array.from(values).sort((left, right) => left.localeCompare(right));\n}\n"],"names":["matchesTool"],"mappings":";;;AAOO,MAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,cAAc,CAAC,YAAY,eAAe,YAAY;AAC5D,MAAM,eAAe,CAAC,GAAG,gBAAgB,GAAG,WAAW;AAUvD,MAAM,mBAIR;AAAA,EACH;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAEjB;AAEO,MAAM,sBACX;AAAA,EACE,EAAE,OAAO,QAAQ,OAAO,YAAA;AAAA,EACxB,EAAE,OAAO,SAAS,OAAO,QAAA;AAAA,EACzB,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,QAAQ,OAAO,OAAA;AAAA,EACxB,EAAE,OAAO,UAAU,OAAO,cAAA;AAAA,EAC1B,EAAE,OAAO,SAAS,OAAO,QAAA;AAAA,EACzB,EAAE,OAAO,YAAY,OAAO,YAAA;AAAA,EAC5B,EAAE,OAAO,eAAe,OAAO,cAAA;AAAA,EAC/B,EAAE,OAAO,cAAc,OAAO,aAAA;AAChC;AAEK,SAAS,eAAe,MAAsC;AACnE,QAAM,SAAS,kBAAkB,IAAI;AACrC,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,MAAI,OAAO,CAAC,MAAM,UAAU,aAAa,KAAK,IAAI,MAAM,IAAK,QAAO;AACpE,MAAI,OAAO,CAAC,MAAM,cAAc,KAAK,aAAa,KAAM,QAAO;AAC/D,MAAI,OAAO,CAAC,MAAM,iBAAiB,KAAK,gBAAgB,MAAM;AAC5D,WAAO;AAAA,EACT;AACA,MAAI,OAAO,CAAC,MAAM,gBAAgB,KAAK,eAAe,MAAM;AAC1D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,oBACd,MACA,QACgB;AAChB,MAAI,WAAW,MAAO,QAAO,EAAE,MAAM,KAAK,QAAQ,KAAK,OAAA;AACvD,MAAI,WAAW,YAAa,QAAO,EAAE,UAAU,MAAM,QAAQ,KAAK,OAAA;AAClE,MAAI,WAAW;AACb,WAAO,EAAE,aAAa,MAAM,QAAQ,KAAK,OAAA;AAC3C,SAAO,EAAE,YAAY,MAAM,QAAQ,KAAK,OAAA;AAC1C;AAEO,SAAS,kBAAkB,MAAoC;AACpE,SAAO,aAAa,OAAO,CAAC,UAAU,KAAK,KAAK,MAAM,MAAS;AACjE;AAEO,SAAS,aAAa,OAA0C;AACrE,SAAO,OAAO,UAAU,WAAW,SAAS,SAAS,CAAA,GAAI,KAAK,IAAI;AACpE;AAEO,SAAS,cAAc,OAA4C;AACxE,SAAO,OAAO,UAAU,WAAY,QAAQ,CAAC,KAAK,IAAI,CAAA,IAAO,SAAS,CAAA;AACxE;AAEO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AACF,GAImB;AACjB,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,MAAA;AAC7B;AAEO,SAAS,cAAc,MAAsB,OAA2B;AAC7E,MAAI,YAAY,KAAK,UAAU,OAAO,KAAK,KAAK,CAAC;AACjD,SAAO,aAAa,KAAK,KAAK,CAAC;AACjC;AAEO,SAAS,kBACd,MACA,SACA,MACgB;AAChB,MAAI,YAAY,KAAM,QAAO;AAC7B,QAAM,QAAQ,EAAE,GAAG,KAAA;AACnB,QAAM,WAAW,MAAM,OAAO;AAC9B,SAAO,MAAM,OAAO;AACpB,QAAM,IAAI,IAAI,YAAY,IAAI,IAC1B,OAAO,aAAa,YAClB,WACA,OACF,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,IACpD,WACA;AACN,SAAO;AACT;AAEO,SAAS,gBACd,MACA,OACA,OACgB;AAChB,MAAI,YAAY,KAAK,EAAG,QAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,UAAU,OAAA;AAC7D,QAAM,WAAW,MACd,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAA,CAAM,EACzB,OAAO,OAAO;AACjB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,CAAC,KAAK,GAAG,SAAS,UAAU,IAAK,SAAS,CAAC,KAAK,KAAM;AAAA,EAAA;AAE1D;AAEO,SAAS,gBACd,MACA,OACgB;AAChB,QAAM,OAAO,EAAE,GAAG,KAAA;AAClB,SAAO,KAAK,KAAK;AACjB,MAAI,kBAAkB,IAAsB,EAAE,WAAW,QAAQ,OAAO;AACxE,SAAO;AACT;AAEO,SAAS,aACd,MACA,OACgB;AAChB,MAAI,KAAK,KAAK,MAAM,OAAW,QAAO;AACtC,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,YAAY,KAAK,IAAI,OAAO,IAAA;AACzD;AAEO,SAAS,YACd,OACuC;AACvC,SAAQ,YAAsC,SAAS,KAAK;AAC9D;AAEO,SAAS,cAAc,MAAsB,OAAmB;AACrE,SAAO,MAAM,OAAO,CAAC,SAASA,WAAAA,YAAY,MAAM,IAAI,CAAC;AACvD;AAEO,SAAS,qBACd,OACA,OACA;AACA,QAAM,6BAAa,IAAA;AACnB,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,KAAK,UAAU,SAAS,SAAS,KAAK;AACpD,QAAI,OAAO,UAAU,YAAY,MAAM,OAAQ,QAAO,IAAI,KAAK;AAAA,EACjE;AACA,SAAO,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AAC3E;;;;;;;;;;;;;;;;;;;;"}

package/dist/lib/permission-strategies.d.ts

@@ -0,0 +1,35 @@
+import { MatchPatterns, PermissionRule } from '../data/chat/tool-policy';
+import { ToolMeta } from '../data/chat/types';
+export declare const PATTERN_FIELDS: readonly ["name", "group", "parent", "entity", "action", "verb", "method", "scope"];
+export declare const HINT_FIELDS: readonly ["readOnly", "destructive", "idempotent"];
+export declare const MATCH_FIELDS: readonly ["name", "group", "parent", "entity", "action", "verb", "method", "scope", "readOnly", "destructive", "idempotent"];
+export type MatchField = (typeof MATCH_FIELDS)[number];
+export type StrategyPreset = "all" | "read-only" | "destructive" | "idempotent" | "custom";
+export declare const STRATEGY_PRESETS: Array<{
+    value: StrategyPreset;
+    label: string;
+    description: string;
+}>;
+export declare const MATCH_FIELD_OPTIONS: Array<{
+    value: MatchField;
+    label: string;
+}>;
+export declare function strategyPreset(rule: PermissionRule): StrategyPreset;
+export declare function applyStrategyPreset(rule: PermissionRule, preset: Exclude<StrategyPreset, "custom">): PermissionRule;
+export declare function activeMatchFields(rule: PermissionRule): MatchField[];
+export declare function patternsText(value: MatchPatterns | undefined): string;
+export declare function patternValues(value: MatchPatterns | undefined): string[];
+export declare function updatePatternCondition({ rule, field, value, }: {
+    rule: PermissionRule;
+    field: (typeof PATTERN_FIELDS)[number];
+    value: MatchPatterns;
+}): PermissionRule;
+export declare function conditionText(rule: PermissionRule, field: MatchField): string;
+export declare function replaceMatchField(rule: PermissionRule, current: MatchField, next: MatchField): PermissionRule;
+export declare function updateCondition(rule: PermissionRule, field: MatchField, value: string): PermissionRule;
+export declare function removeCondition(rule: PermissionRule, field: MatchField): PermissionRule;
+export declare function addCondition(rule: PermissionRule, field: MatchField): PermissionRule;
+export declare function isHintField(field: MatchField): field is (typeof HINT_FIELDS)[number];
+export declare function matchingTools(rule: PermissionRule, tools: ToolMeta[]): ToolMeta[];
+export declare function toolFieldSuggestions(tools: ToolMeta[], field: Exclude<MatchField, (typeof HINT_FIELDS)[number]>): string[];
+//# sourceMappingURL=permission-strategies.d.ts.map

package/dist/lib/permission-strategies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-strategies.d.ts","sourceRoot":"","sources":["../../src/lib/permission-strategies.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD,eAAO,MAAM,cAAc,qFASjB,CAAC;AACX,eAAO,MAAM,WAAW,oDAAqD,CAAC;AAC9E,eAAO,MAAM,YAAY,8HAA+C,CAAC;AAEzE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AACvD,MAAM,MAAM,cAAc,GACtB,KAAK,GACL,WAAW,GACX,aAAa,GACb,YAAY,GACZ,QAAQ,CAAC;AAEb,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC;IACnC,KAAK,EAAE,cAAc,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CA0BA,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAazE,CAAC;AAEJ,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc,CAYnE;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,GACxC,cAAc,CAMhB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,UAAU,EAAE,CAEpE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,CAErE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,EAAE,CAExE;AAED,wBAAgB,sBAAsB,CAAC,EACrC,IAAI,EACJ,KAAK,EACL,KAAK,GACN,EAAE;IACD,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,EAAE,aAAa,CAAC;CACtB,GAAG,cAAc,CAEjB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CAG7E;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE,UAAU,GACf,cAAc,CAahB;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,MAAM,GACZ,cAAc,CAUhB;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,UAAU,GAChB,cAAc,CAKhB;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,UAAU,GAChB,cAAc,CAGhB;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,UAAU,GAChB,KAAK,IAAI,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAEvC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,cAEpE;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,QAAQ,EAAE,EACjB,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,YAQzD"}

package/dist/lib/permission-strategies.js

@@ -0,0 +1,155 @@
+import { matchesTool } from "../data/chat/tool-policy.js";
+const PATTERN_FIELDS = [
+  "name",
+  "group",
+  "parent",
+  "entity",
+  "action",
+  "verb",
+  "method",
+  "scope"
+];
+const HINT_FIELDS = ["readOnly", "destructive", "idempotent"];
+const MATCH_FIELDS = [...PATTERN_FIELDS, ...HINT_FIELDS];
+const STRATEGY_PRESETS = [
+  {
+    value: "all",
+    label: "All tools",
+    description: "Match every tool in the catalog."
+  },
+  {
+    value: "read-only",
+    label: "Read-only tools",
+    description: "Match tools explicitly marked read-only."
+  },
+  {
+    value: "destructive",
+    label: "Destructive tools",
+    description: "Match tools explicitly marked destructive."
+  },
+  {
+    value: "idempotent",
+    label: "Idempotent tools",
+    description: "Match tools safe to repeat."
+  },
+  {
+    value: "custom",
+    label: "Custom conditions",
+    description: "Combine tool metadata and safety annotations."
+  }
+];
+const MATCH_FIELD_OPTIONS = [
+  { value: "name", label: "Tool name" },
+  { value: "group", label: "Group" },
+  { value: "parent", label: "Parent" },
+  { value: "entity", label: "Entity" },
+  { value: "action", label: "Action" },
+  { value: "verb", label: "Verb" },
+  { value: "method", label: "HTTP method" },
+  { value: "scope", label: "Scope" },
+  { value: "readOnly", label: "Read only" },
+  { value: "destructive", label: "Destructive" },
+  { value: "idempotent", label: "Idempotent" }
+];
+function strategyPreset(rule) {
+  const fields = activeMatchFields(rule);
+  if (fields.length !== 1) return "custom";
+  if (fields[0] === "name" && patternsText(rule.name) === "*") return "all";
+  if (fields[0] === "readOnly" && rule.readOnly === true) return "read-only";
+  if (fields[0] === "destructive" && rule.destructive === true) {
+    return "destructive";
+  }
+  if (fields[0] === "idempotent" && rule.idempotent === true) {
+    return "idempotent";
+  }
+  return "custom";
+}
+function applyStrategyPreset(rule, preset) {
+  if (preset === "all") return { name: "*", policy: rule.policy };
+  if (preset === "read-only") return { readOnly: true, policy: rule.policy };
+  if (preset === "destructive")
+    return { destructive: true, policy: rule.policy };
+  return { idempotent: true, policy: rule.policy };
+}
+function activeMatchFields(rule) {
+  return MATCH_FIELDS.filter((field) => rule[field] !== void 0);
+}
+function patternsText(value) {
+  return typeof value === "string" ? value : (value ?? []).join(", ");
+}
+function patternValues(value) {
+  return typeof value === "string" ? value ? [value] : [] : value ?? [];
+}
+function updatePatternCondition({
+  rule,
+  field,
+  value
+}) {
+  return { ...rule, [field]: value };
+}
+function conditionText(rule, field) {
+  if (isHintField(field)) return String(rule[field]);
+  return patternsText(rule[field]);
+}
+function replaceMatchField(rule, current, next) {
+  if (current === next) return rule;
+  const match = { ...rule };
+  const previous = match[current];
+  delete match[current];
+  match[next] = isHintField(next) ? typeof previous === "boolean" ? previous : true : typeof previous === "string" || Array.isArray(previous) ? previous : "*";
+  return match;
+}
+function updateCondition(rule, field, value) {
+  if (isHintField(field)) return { ...rule, [field]: value === "true" };
+  const patterns = value.split(",").map((item) => item.trim()).filter(Boolean);
+  return {
+    ...rule,
+    [field]: patterns.length <= 1 ? patterns[0] ?? "" : patterns
+  };
+}
+function removeCondition(rule, field) {
+  const next = { ...rule };
+  delete next[field];
+  if (activeMatchFields(next).length === 0) next.name = "*";
+  return next;
+}
+function addCondition(rule, field) {
+  if (rule[field] !== void 0) return rule;
+  return { ...rule, [field]: isHintField(field) ? true : "*" };
+}
+function isHintField(field) {
+  return HINT_FIELDS.includes(field);
+}
+function matchingTools(rule, tools) {
+  return tools.filter((tool) => matchesTool(rule, tool));
+}
+function toolFieldSuggestions(tools, field) {
+  const values = /* @__PURE__ */ new Set();
+  for (const tool of tools) {
+    const value = tool[field === "name" ? "name" : field];
+    if (typeof value === "string" && value.trim()) values.add(value);
+  }
+  return Array.from(values).sort((left, right) => left.localeCompare(right));
+}
+export {
+  HINT_FIELDS,
+  MATCH_FIELDS,
+  MATCH_FIELD_OPTIONS,
+  PATTERN_FIELDS,
+  STRATEGY_PRESETS,
+  activeMatchFields,
+  addCondition,
+  applyStrategyPreset,
+  conditionText,
+  isHintField,
+  matchingTools,
+  patternValues,
+  patternsText,
+  removeCondition,
+  replaceMatchField,
+  strategyPreset,
+  toolFieldSuggestions,
+  updateCondition,
+  updatePatternCondition
+};
+//# sourceMappingURL=permission-strategies.js.map

package/dist/lib/permission-strategies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-strategies.js","sources":["../../src/lib/permission-strategies.ts"],"sourcesContent":["import {\n  matchesTool,\n  type MatchPatterns,\n  type PermissionRule,\n} from \"../data/chat/tool-policy\";\nimport type { ToolMeta } from \"../data/chat/types\";\n\nexport const PATTERN_FIELDS = [\n  \"name\",\n  \"group\",\n  \"parent\",\n  \"entity\",\n  \"action\",\n  \"verb\",\n  \"method\",\n  \"scope\",\n] as const;\nexport const HINT_FIELDS = [\"readOnly\", \"destructive\", \"idempotent\"] as const;\nexport const MATCH_FIELDS = [...PATTERN_FIELDS, ...HINT_FIELDS] as const;\n\nexport type MatchField = (typeof MATCH_FIELDS)[number];\nexport type StrategyPreset =\n  | \"all\"\n  | \"read-only\"\n  | \"destructive\"\n  | \"idempotent\"\n  | \"custom\";\n\nexport const STRATEGY_PRESETS: Array<{\n  value: StrategyPreset;\n  label: string;\n  description: string;\n}> = [\n  {\n    value: \"all\",\n    label: \"All tools\",\n    description: \"Match every tool in the catalog.\",\n  },\n  {\n    value: \"read-only\",\n    label: \"Read-only tools\",\n    description: \"Match tools explicitly marked read-only.\",\n  },\n  {\n    value: \"destructive\",\n    label: \"Destructive tools\",\n    description: \"Match tools explicitly marked destructive.\",\n  },\n  {\n    value: \"idempotent\",\n    label: \"Idempotent tools\",\n    description: \"Match tools safe to repeat.\",\n  },\n  {\n    value: \"custom\",\n    label: \"Custom conditions\",\n    description: \"Combine tool metadata and safety annotations.\",\n  },\n];\n\nexport const MATCH_FIELD_OPTIONS: Array<{ value: MatchField; label: string }> =\n  [\n    { value: \"name\", label: \"Tool name\" },\n    { value: \"group\", label: \"Group\" },\n    { value: \"parent\", label: \"Parent\" },\n    { value: \"entity\", label: \"Entity\" },\n    { value: \"action\", label: \"Action\" },\n    { value: \"verb\", label: \"Verb\" },\n    { value: \"method\", label: \"HTTP method\" },\n    { value: \"scope\", label: \"Scope\" },\n    { value: \"readOnly\", label: \"Read only\" },\n    { value: \"destructive\", label: \"Destructive\" },\n    { value: \"idempotent\", label: \"Idempotent\" },\n  ];\n\nexport function strategyPreset(rule: PermissionRule): StrategyPreset {\n  const fields = activeMatchFields(rule);\n  if (fields.length !== 1) return \"custom\";\n  if (fields[0] === \"name\" && patternsText(rule.name) === \"*\") return \"all\";\n  if (fields[0] === \"readOnly\" && rule.readOnly === true) return \"read-only\";\n  if (fields[0] === \"destructive\" && rule.destructive === true) {\n    return \"destructive\";\n  }\n  if (fields[0] === \"idempotent\" && rule.idempotent === true) {\n    return \"idempotent\";\n  }\n  return \"custom\";\n}\n\nexport function applyStrategyPreset(\n  rule: PermissionRule,\n  preset: Exclude<StrategyPreset, \"custom\">,\n): PermissionRule {\n  if (preset === \"all\") return { name: \"*\", policy: rule.policy };\n  if (preset === \"read-only\") return { readOnly: true, policy: rule.policy };\n  if (preset === \"destructive\")\n    return { destructive: true, policy: rule.policy };\n  return { idempotent: true, policy: rule.policy };\n}\n\nexport function activeMatchFields(rule: PermissionRule): MatchField[] {\n  return MATCH_FIELDS.filter((field) => rule[field] !== undefined);\n}\n\nexport function patternsText(value: MatchPatterns | undefined): string {\n  return typeof value === \"string\" ? value : (value ?? []).join(\", \");\n}\n\nexport function patternValues(value: MatchPatterns | undefined): string[] {\n  return typeof value === \"string\" ? (value ? [value] : []) : (value ?? []);\n}\n\nexport function updatePatternCondition({\n  rule,\n  field,\n  value,\n}: {\n  rule: PermissionRule;\n  field: (typeof PATTERN_FIELDS)[number];\n  value: MatchPatterns;\n}): PermissionRule {\n  return { ...rule, [field]: value };\n}\n\nexport function conditionText(rule: PermissionRule, field: MatchField): string {\n  if (isHintField(field)) return String(rule[field]);\n  return patternsText(rule[field]);\n}\n\nexport function replaceMatchField(\n  rule: PermissionRule,\n  current: MatchField,\n  next: MatchField,\n): PermissionRule {\n  if (current === next) return rule;\n  const match = { ...rule } as Record<string, unknown>;\n  const previous = match[current];\n  delete match[current];\n  match[next] = isHintField(next)\n    ? typeof previous === \"boolean\"\n      ? previous\n      : true\n    : typeof previous === \"string\" || Array.isArray(previous)\n      ? previous\n      : \"*\";\n  return match as PermissionRule;\n}\n\nexport function updateCondition(\n  rule: PermissionRule,\n  field: MatchField,\n  value: string,\n): PermissionRule {\n  if (isHintField(field)) return { ...rule, [field]: value === \"true\" };\n  const patterns = value\n    .split(\",\")\n    .map((item) => item.trim())\n    .filter(Boolean);\n  return {\n    ...rule,\n    [field]: patterns.length <= 1 ? (patterns[0] ?? \"\") : patterns,\n  };\n}\n\nexport function removeCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  const next = { ...rule } as Record<string, unknown>;\n  delete next[field];\n  if (activeMatchFields(next as PermissionRule).length === 0) next.name = \"*\";\n  return next as PermissionRule;\n}\n\nexport function addCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  if (rule[field] !== undefined) return rule;\n  return { ...rule, [field]: isHintField(field) ? true : \"*\" };\n}\n\nexport function isHintField(\n  field: MatchField,\n): field is (typeof HINT_FIELDS)[number] {\n  return (HINT_FIELDS as readonly MatchField[]).includes(field);\n}\n\nexport function matchingTools(rule: PermissionRule, tools: ToolMeta[]) {\n  return tools.filter((tool) => matchesTool(rule, tool));\n}\n\nexport function toolFieldSuggestions(\n  tools: ToolMeta[],\n  field: Exclude<MatchField, (typeof HINT_FIELDS)[number]>,\n) {\n  const values = new Set<string>();\n  for (const tool of tools) {\n    const value = tool[field === \"name\" ? \"name\" : field];\n    if (typeof value === \"string\" && value.trim()) values.add(value);\n  }\n  return Array.from(values).sort((left, right) => left.localeCompare(right));\n}\n"],"names":[],"mappings":";AAOO,MAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,cAAc,CAAC,YAAY,eAAe,YAAY;AAC5D,MAAM,eAAe,CAAC,GAAG,gBAAgB,GAAG,WAAW;AAUvD,MAAM,mBAIR;AAAA,EACH;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAEjB;AAEO,MAAM,sBACX;AAAA,EACE,EAAE,OAAO,QAAQ,OAAO,YAAA;AAAA,EACxB,EAAE,OAAO,SAAS,OAAO,QAAA;AAAA,EACzB,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,QAAQ,OAAO,OAAA;AAAA,EACxB,EAAE,OAAO,UAAU,OAAO,cAAA;AAAA,EAC1B,EAAE,OAAO,SAAS,OAAO,QAAA;AAAA,EACzB,EAAE,OAAO,YAAY,OAAO,YAAA;AAAA,EAC5B,EAAE,OAAO,eAAe,OAAO,cAAA;AAAA,EAC/B,EAAE,OAAO,cAAc,OAAO,aAAA;AAChC;AAEK,SAAS,eAAe,MAAsC;AACnE,QAAM,SAAS,kBAAkB,IAAI;AACrC,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,MAAI,OAAO,CAAC,MAAM,UAAU,aAAa,KAAK,IAAI,MAAM,IAAK,QAAO;AACpE,MAAI,OAAO,CAAC,MAAM,cAAc,KAAK,aAAa,KAAM,QAAO;AAC/D,MAAI,OAAO,CAAC,MAAM,iBAAiB,KAAK,gBAAgB,MAAM;AAC5D,WAAO;AAAA,EACT;AACA,MAAI,OAAO,CAAC,MAAM,gBAAgB,KAAK,eAAe,MAAM;AAC1D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,oBACd,MACA,QACgB;AAChB,MAAI,WAAW,MAAO,QAAO,EAAE,MAAM,KAAK,QAAQ,KAAK,OAAA;AACvD,MAAI,WAAW,YAAa,QAAO,EAAE,UAAU,MAAM,QAAQ,KAAK,OAAA;AAClE,MAAI,WAAW;AACb,WAAO,EAAE,aAAa,MAAM,QAAQ,KAAK,OAAA;AAC3C,SAAO,EAAE,YAAY,MAAM,QAAQ,KAAK,OAAA;AAC1C;AAEO,SAAS,kBAAkB,MAAoC;AACpE,SAAO,aAAa,OAAO,CAAC,UAAU,KAAK,KAAK,MAAM,MAAS;AACjE;AAEO,SAAS,aAAa,OAA0C;AACrE,SAAO,OAAO,UAAU,WAAW,SAAS,SAAS,CAAA,GAAI,KAAK,IAAI;AACpE;AAEO,SAAS,cAAc,OAA4C;AACxE,SAAO,OAAO,UAAU,WAAY,QAAQ,CAAC,KAAK,IAAI,CAAA,IAAO,SAAS,CAAA;AACxE;AAEO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AACF,GAImB;AACjB,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,MAAA;AAC7B;AAEO,SAAS,cAAc,MAAsB,OAA2B;AAC7E,MAAI,YAAY,KAAK,UAAU,OAAO,KAAK,KAAK,CAAC;AACjD,SAAO,aAAa,KAAK,KAAK,CAAC;AACjC;AAEO,SAAS,kBACd,MACA,SACA,MACgB;AAChB,MAAI,YAAY,KAAM,QAAO;AAC7B,QAAM,QAAQ,EAAE,GAAG,KAAA;AACnB,QAAM,WAAW,MAAM,OAAO;AAC9B,SAAO,MAAM,OAAO;AACpB,QAAM,IAAI,IAAI,YAAY,IAAI,IAC1B,OAAO,aAAa,YAClB,WACA,OACF,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,IACpD,WACA;AACN,SAAO;AACT;AAEO,SAAS,gBACd,MACA,OACA,OACgB;AAChB,MAAI,YAAY,KAAK,EAAG,QAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,UAAU,OAAA;AAC7D,QAAM,WAAW,MACd,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAA,CAAM,EACzB,OAAO,OAAO;AACjB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,CAAC,KAAK,GAAG,SAAS,UAAU,IAAK,SAAS,CAAC,KAAK,KAAM;AAAA,EAAA;AAE1D;AAEO,SAAS,gBACd,MACA,OACgB;AAChB,QAAM,OAAO,EAAE,GAAG,KAAA;AAClB,SAAO,KAAK,KAAK;AACjB,MAAI,kBAAkB,IAAsB,EAAE,WAAW,QAAQ,OAAO;AACxE,SAAO;AACT;AAEO,SAAS,aACd,MACA,OACgB;AAChB,MAAI,KAAK,KAAK,MAAM,OAAW,QAAO;AACtC,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,YAAY,KAAK,IAAI,OAAO,IAAA;AACzD;AAEO,SAAS,YACd,OACuC;AACvC,SAAQ,YAAsC,SAAS,KAAK;AAC9D;AAEO,SAAS,cAAc,MAAsB,OAAmB;AACrE,SAAO,MAAM,OAAO,CAAC,SAAS,YAAY,MAAM,IAAI,CAAC;AACvD;AAEO,SAAS,qBACd,OACA,OACA;AACA,QAAM,6BAAa,IAAA;AACnB,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,KAAK,UAAU,SAAS,SAAS,KAAK;AACpD,QAAI,OAAO,UAAU,YAAY,MAAM,OAAQ,QAAO,IAAI,KAAK;AAAA,EACjE;AACA,SAAO,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AAC3E;"}

package/dist/lib/runtime-family.cjs

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const SPEC_RUNTIME_MODES = ["api", "agent", "cli", "cmux"];
+const RUNTIME_MODES = new Set(SPEC_RUNTIME_MODES);
+function isSpecRuntimeMode(value) {
+  return RUNTIME_MODES.has(value ?? "");
+}
+function runtimeModeFromModel(model) {
+  const [prefix] = (model ?? "").trim().toLowerCase().split(":");
+  return isSpecRuntimeMode(prefix) ? prefix : void 0;
+}
+function familyForModel(families, models, modelId) {
+  var _a;
+  if (!modelId) return void 0;
+  const selected = models.find(
+    (model) => {
+      var _a2, _b;
+      return model.id === modelId || ((_a2 = model.runtime) == null ? void 0 : _a2.model) === modelId || ((_b = model.runtime) == null ? void 0 : _b.id) === modelId;
+    }
+  );
+  const compact = ((_a = modelId.split(",")[0]) == null ? void 0 : _a.trim()) ?? "";
+  const [prefix, inlineModel] = compact.split(":");
+  const canonicalModel = RUNTIME_MODES.has((prefix == null ? void 0 : prefix.toLowerCase()) ?? "") && inlineModel ? inlineModel : compact;
+  const slash = canonicalModel.indexOf("/");
+  const provider = (selected == null ? void 0 : selected.provider) ?? (slash > 0 ? canonicalModel.slice(0, slash) : void 0);
+  if (!provider) return void 0;
+  return families.find(
+    (family) => family.provider === provider || family.catalogPrefix === provider || family.modes.some((mode) => mode.provider === provider)
+  );
+}
+function modeOptionFor(families, mode, preferredFamily) {
+  const target = (mode ?? "").toLowerCase();
+  if (!target) return void 0;
+  const ordered = preferredFamily ? [
+    ...families.filter((family) => family.id === preferredFamily),
+    ...families.filter((family) => family.id !== preferredFamily)
+  ] : families;
+  for (const family of ordered) {
+    const entry = family.modes.find(
+      (candidate) => candidate.id.toLowerCase() === target
+    );
+    if (entry) return entry;
+  }
+  return void 0;
+}
+exports.SPEC_RUNTIME_MODES = SPEC_RUNTIME_MODES;
+exports.familyForModel = familyForModel;
+exports.isSpecRuntimeMode = isSpecRuntimeMode;
+exports.modeOptionFor = modeOptionFor;
+exports.runtimeModeFromModel = runtimeModeFromModel;
+//# sourceMappingURL=runtime-family.cjs.map

package/dist/lib/runtime-family.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-family.cjs","sources":["../../src/lib/runtime-family.ts"],"sourcesContent":["type RuntimeModelIdentity = {\n  id: string;\n  provider: string;\n  runtime?: { id?: string; model?: string } | undefined;\n};\n\ntype RuntimeFamilyIdentity = {\n  id: string;\n  provider: string;\n  catalogPrefix?: string | undefined;\n  modes: Array<{ id: string; provider?: string | undefined }>;\n};\n\nexport const SPEC_RUNTIME_MODES = [\"api\", \"agent\", \"cli\", \"cmux\"] as const;\nexport type SpecRuntimeMode = (typeof SPEC_RUNTIME_MODES)[number];\nconst RUNTIME_MODES = new Set<string>(SPEC_RUNTIME_MODES);\n\nexport function isSpecRuntimeMode(\n  value: string | undefined,\n): value is SpecRuntimeMode {\n  return RUNTIME_MODES.has(value ?? \"\");\n}\n\nexport function runtimeModeFromModel(\n  model: string | undefined,\n): SpecRuntimeMode | undefined {\n  const [prefix] = (model ?? \"\").trim().toLowerCase().split(\":\");\n  return isSpecRuntimeMode(prefix) ? prefix : undefined;\n}\n\nexport function familyForModel<T extends RuntimeFamilyIdentity>(\n  families: T[],\n  models: RuntimeModelIdentity[],\n  modelId: string | undefined,\n): T | undefined {\n  if (!modelId) return undefined;\n  const selected = models.find(\n    (model) =>\n      model.id === modelId ||\n      model.runtime?.model === modelId ||\n      model.runtime?.id === modelId,\n  );\n  const compact = modelId.split(\",\")[0]?.trim() ?? \"\";\n  const [prefix, inlineModel] = compact.split(\":\");\n  const canonicalModel =\n    RUNTIME_MODES.has(prefix?.toLowerCase() ?? \"\") && inlineModel\n      ? inlineModel\n      : compact;\n  const slash = canonicalModel.indexOf(\"/\");\n  const provider =\n    selected?.provider ??\n    (slash > 0 ? canonicalModel.slice(0, slash) : undefined);\n  if (!provider) return undefined;\n  return families.find(\n    (family) =>\n      family.provider === provider ||\n      family.catalogPrefix === provider ||\n      family.modes.some((mode) => mode.provider === provider),\n  );\n}\n\nexport function modeOptionFor<T extends RuntimeFamilyIdentity>(\n  families: T[],\n  mode: string | undefined,\n  preferredFamily?: string | undefined,\n): T[\"modes\"][number] | undefined {\n  const target = (mode ?? \"\").toLowerCase();\n  if (!target) return undefined;\n  const ordered = preferredFamily\n    ? [\n        ...families.filter((family) => family.id === preferredFamily),\n        ...families.filter((family) => family.id !== preferredFamily),\n      ]\n    : families;\n  for (const family of ordered) {\n    const entry = family.modes.find(\n      (candidate) => candidate.id.toLowerCase() === target,\n    );\n    if (entry) return entry;\n  }\n  return undefined;\n}\n"],"names":["_a"],"mappings":";;AAaO,MAAM,qBAAqB,CAAC,OAAO,SAAS,OAAO,MAAM;AAEhE,MAAM,gBAAgB,IAAI,IAAY,kBAAkB;AAEjD,SAAS,kBACd,OAC0B;AAC1B,SAAO,cAAc,IAAI,SAAS,EAAE;AACtC;AAEO,SAAS,qBACd,OAC6B;AAC7B,QAAM,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,YAAA,EAAc,MAAM,GAAG;AAC7D,SAAO,kBAAkB,MAAM,IAAI,SAAS;AAC9C;AAEO,SAAS,eACd,UACA,QACA,SACe;;AACf,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,WAAW,OAAO;AAAA,IACtB,CAAC,UAAA;;AACC,mBAAM,OAAO,aACbA,MAAA,MAAM,YAAN,gBAAAA,IAAe,WAAU,aACzB,WAAM,YAAN,mBAAe,QAAO;AAAA;AAAA,EAAA;AAE1B,QAAM,YAAU,aAAQ,MAAM,GAAG,EAAE,CAAC,MAApB,mBAAuB,WAAU;AACjD,QAAM,CAAC,QAAQ,WAAW,IAAI,QAAQ,MAAM,GAAG;AAC/C,QAAM,iBACJ,cAAc,KAAI,iCAAQ,kBAAiB,EAAE,KAAK,cAC9C,cACA;AACN,QAAM,QAAQ,eAAe,QAAQ,GAAG;AACxC,QAAM,YACJ,qCAAU,cACT,QAAQ,IAAI,eAAe,MAAM,GAAG,KAAK,IAAI;AAChD,MAAI,CAAC,SAAU,QAAO;AACtB,SAAO,SAAS;AAAA,IACd,CAAC,WACC,OAAO,aAAa,YACpB,OAAO,kBAAkB,YACzB,OAAO,MAAM,KAAK,CAAC,SAAS,KAAK,aAAa,QAAQ;AAAA,EAAA;AAE5D;AAEO,SAAS,cACd,UACA,MACA,iBACgC;AAChC,QAAM,UAAU,QAAQ,IAAI,YAAA;AAC5B,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,UAAU,kBACZ;AAAA,IACE,GAAG,SAAS,OAAO,CAAC,WAAW,OAAO,OAAO,eAAe;AAAA,IAC5D,GAAG,SAAS,OAAO,CAAC,WAAW,OAAO,OAAO,eAAe;AAAA,EAAA,IAE9D;AACJ,aAAW,UAAU,SAAS;AAC5B,UAAM,QAAQ,OAAO,MAAM;AAAA,MACzB,CAAC,cAAc,UAAU,GAAG,kBAAkB;AAAA,IAAA;AAEhD,QAAI,MAAO,QAAO;AAAA,EACpB;AACA,SAAO;AACT;;;;;;"}

package/dist/lib/runtime-family.d.ts

@@ -0,0 +1,25 @@
+type RuntimeModelIdentity = {
+    id: string;
+    provider: string;
+    runtime?: {
+        id?: string;
+        model?: string;
+    } | undefined;
+};
+type RuntimeFamilyIdentity = {
+    id: string;
+    provider: string;
+    catalogPrefix?: string | undefined;
+    modes: Array<{
+        id: string;
+        provider?: string | undefined;
+    }>;
+};
+export declare const SPEC_RUNTIME_MODES: readonly ["api", "agent", "cli", "cmux"];
+export type SpecRuntimeMode = (typeof SPEC_RUNTIME_MODES)[number];
+export declare function isSpecRuntimeMode(value: string | undefined): value is SpecRuntimeMode;
+export declare function runtimeModeFromModel(model: string | undefined): SpecRuntimeMode | undefined;
+export declare function familyForModel<T extends RuntimeFamilyIdentity>(families: T[], models: RuntimeModelIdentity[], modelId: string | undefined): T | undefined;
+export declare function modeOptionFor<T extends RuntimeFamilyIdentity>(families: T[], mode: string | undefined, preferredFamily?: string | undefined): T["modes"][number] | undefined;
+export {};
+//# sourceMappingURL=runtime-family.d.ts.map

package/dist/lib/runtime-family.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-family.d.ts","sourceRoot":"","sources":["../../src/lib/runtime-family.ts"],"names":[],"mappings":"AAAA,KAAK,oBAAoB,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;CACvD,CAAC;AAEF,KAAK,qBAAqB,GAAG;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;CAC7D,CAAC;AAEF,eAAO,MAAM,kBAAkB,0CAA2C,CAAC;AAC3E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAGlE,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,KAAK,IAAI,eAAe,CAE1B;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,eAAe,GAAG,SAAS,CAG7B;AAED,wBAAgB,cAAc,CAAC,CAAC,SAAS,qBAAqB,EAC5D,QAAQ,EAAE,CAAC,EAAE,EACb,MAAM,EAAE,oBAAoB,EAAE,EAC9B,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,CAAC,GAAG,SAAS,CAyBf;AAED,wBAAgB,aAAa,CAAC,CAAC,SAAS,qBAAqB,EAC3D,QAAQ,EAAE,CAAC,EAAE,EACb,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,GACnC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,CAgBhC"}

package/dist/lib/runtime-family.js

@@ -0,0 +1,51 @@
+const SPEC_RUNTIME_MODES = ["api", "agent", "cli", "cmux"];
+const RUNTIME_MODES = new Set(SPEC_RUNTIME_MODES);
+function isSpecRuntimeMode(value) {
+  return RUNTIME_MODES.has(value ?? "");
+}
+function runtimeModeFromModel(model) {
+  const [prefix] = (model ?? "").trim().toLowerCase().split(":");
+  return isSpecRuntimeMode(prefix) ? prefix : void 0;
+}
+function familyForModel(families, models, modelId) {
+  var _a;
+  if (!modelId) return void 0;
+  const selected = models.find(
+    (model) => {
+      var _a2, _b;
+      return model.id === modelId || ((_a2 = model.runtime) == null ? void 0 : _a2.model) === modelId || ((_b = model.runtime) == null ? void 0 : _b.id) === modelId;
+    }
+  );
+  const compact = ((_a = modelId.split(",")[0]) == null ? void 0 : _a.trim()) ?? "";
+  const [prefix, inlineModel] = compact.split(":");
+  const canonicalModel = RUNTIME_MODES.has((prefix == null ? void 0 : prefix.toLowerCase()) ?? "") && inlineModel ? inlineModel : compact;
+  const slash = canonicalModel.indexOf("/");
+  const provider = (selected == null ? void 0 : selected.provider) ?? (slash > 0 ? canonicalModel.slice(0, slash) : void 0);
+  if (!provider) return void 0;
+  return families.find(
+    (family) => family.provider === provider || family.catalogPrefix === provider || family.modes.some((mode) => mode.provider === provider)
+  );
+}
+function modeOptionFor(families, mode, preferredFamily) {
+  const target = (mode ?? "").toLowerCase();
+  if (!target) return void 0;
+  const ordered = preferredFamily ? [
+    ...families.filter((family) => family.id === preferredFamily),
+    ...families.filter((family) => family.id !== preferredFamily)
+  ] : families;
+  for (const family of ordered) {
+    const entry = family.modes.find(
+      (candidate) => candidate.id.toLowerCase() === target
+    );
+    if (entry) return entry;
+  }
+  return void 0;
+}
+export {
+  SPEC_RUNTIME_MODES,
+  familyForModel,
+  isSpecRuntimeMode,
+  modeOptionFor,
+  runtimeModeFromModel
+};
+//# sourceMappingURL=runtime-family.js.map