@flanksource/clicky-ui 0.3.29 → 0.3.31

package/dist/index.js

@@ -2,6 +2,11 @@ import { cn } from "./lib/utils.js";
 import { duplicateIndex, isPlainObject, moveItem, removeIndex, setIndex } from "./lib/collections.js";
 import { AVATAR_PALETTE, fnv1a32, paletteClass } from "./lib/palette.js";
 import { SIZE_TOKENS, resolveSize } from "./lib/size.js";
+import { COMBOBOX_MENU_MAX_HEIGHT_PX, COMBOBOX_MENU_MAX_WIDTH_PX, COMBOBOX_MOBILE_QUERY, calculateComboboxMenuPosition } from "./lib/combobox.js";
+import { comboboxLabelPadding, createComboboxCustomEntry, multipleComboboxLabel, splitOnComboboxSeparators, withSelectedComboboxOptions } from "./lib/combobox-values.js";
+import { SPEC_RUNTIME_MODES, familyForModel, isSpecRuntimeMode, modeOptionFor, runtimeModeFromModel } from "./lib/runtime-family.js";
+import { authoredRuntimeSpec, duplicateName, duplicateRecord, mergeRuntimeSpec, newPresetRecord, newProfileRecord, nextNewName, permissionTarget, presetForRef, presetsOf, referencedBy, reorderProfilePresets, selectionAfterDelete, uniqueName } from "./lib/runtime-profile-model.js";
+import { HINT_FIELDS, MATCH_FIELDS, MATCH_FIELD_OPTIONS, PATTERN_FIELDS, STRATEGY_PRESETS, activeMatchFields, addCondition, applyStrategyPreset, conditionText, isHintField, matchingTools, patternValues, patternsText, removeCondition, replaceMatchField, strategyPreset, toolFieldSuggestions, updateCondition, updatePatternCondition } from "./lib/permission-strategies.js";
 import { PATH_SEPARATOR, buildPathTree, foldersFirst, isPathTreeFolder, splitPath } from "./lib/path-tree.js";
 import { CLICKY_COLUMN_FORMAT_OPTIONS, CLICKY_COLUMN_UNIT_OPTIONS, formatBytes, formatBytesPerSecond, formatDuration, formatShort, formatUnit } from "./lib/format.js";
 import { useOptionalTheme, useResolvedTheme, useTheme } from "./hooks/use-theme.js";
@@ -602,6 +607,7 @@ import { UiWrench, UiWrenchFilled } from "./icons/components/UiWrench.js";
 import { UiZap, UiZapFilled } from "./icons/components/UiZap.js";
 import { UiZoomIn, UiZoomInFilled } from "./icons/components/UiZoomIn.js";
 import { UiZoomOut, UiZoomOutFilled } from "./icons/components/UiZoomOut.js";
+import { VerificationResults } from "./data/verification/VerificationResults.js";
 import { annotateRoutePaths, findNodeByRoutePath, slugify } from "./data/test-runner/routePath.js";
 import { applyFixtureFrontmatterRaw, applyFixtureFrontmatterState, fixtureFrontmatterState, parseFixtureFrontmatter } from "./data/FixtureEditor/fixture-frontmatter.js";
 import { cacheQueryKeys, createCacheClient } from "./data/cache-browser/api.js";
@@ -609,10 +615,13 @@ import { changeIconAliases, getChangeIcon } from "./icons/changeIconAliases.js";
 import { clickyIconProvider, iconsByConsumerName } from "./icons/registry.js";
 import { createChecklistMarkdown, createFenceMarkdown, fixtureFenceKind, fixtureFenceSchemaAliases, fixtureFenceSnippetInfo, parseFixtureYaml, resolveFixtureFenceSchema, schemaKeys, stringifyFixtureYaml } from "./data/FixtureEditor/fixture-blocks.js";
 import { cycleFilterState, decodeFilterState, emptyTestFilters, encodeFilterState, filterStateToRecord, matchesFilterState, recordToFilterState } from "./data/test-runner/filterState.js";
+import { emptyVerifySummary, summarizeVerifyNodes } from "./data/verification/verify-report.js";
 import { formatGitCommitDateHeader } from "./data/git/git-dates.js";
 import { frameworkIcon } from "./data/test-runner/frameworkIcon.js";
 import { isLeaf } from "./data/cache-browser/types.js";
 import { useClickyExport } from "./data/clicky-export/useClickyExport.js";
+import { verificationAdapters } from "./data/verification/adapters.js";
+import { verifyReportCounts, verifyReportTests } from "./data/verification/verifyReportTests.js";
 export {
   ACCEPT_OPTIONS,
   AVATAR_PALETTE,
@@ -631,6 +640,9 @@ export {
   CLICKY_COLUMN_FORMAT_OPTIONS,
   CLICKY_COLUMN_UNIT_OPTIONS,
   CLICKY_FORMAT_OPTIONS,
+  COMBOBOX_MENU_MAX_HEIGHT_PX,
+  COMBOBOX_MENU_MAX_WIDTH_PX,
+  COMBOBOX_MOBILE_QUERY,
   CONNECTION_LOG_LEVELS,
   COUNTRY_OPTIONS,
   CacheAdapterRegistry,
@@ -719,6 +731,7 @@ export {
   GitDiffPanel,
   GitFileList,
   GroupedComments,
+  HINT_FIELDS,
   HarPanel,
   HoverCard,
   Icon,
@@ -749,6 +762,8 @@ export {
   MARKDOWN_EDITOR_PREVIEW_FORMATS,
   MARKDOWN_SYNTAX_DOCUMENT,
   MARKDOWN_SYNTAX_SECTIONS,
+  MATCH_FIELDS,
+  MATCH_FIELD_OPTIONS,
   MAX_INLINE_SELECTION_ACTIONS,
   Markdown,
   MarkdownEditor,
@@ -769,6 +784,7 @@ export {
   OperationResultView,
   OperationsApiClientError,
   PATH_SEPARATOR,
+  PATTERN_FIELDS,
   Panel,
   PrettyStackTrace,
   ProgressBar,
@@ -783,8 +799,10 @@ export {
   RangeSlider,
   RouterProvider,
   SIZE_TOKENS,
+  SPEC_RUNTIME_MODES,
   STATUS_LABELS,
   STATUS_TOKEN_GROUPS,
+  STRATEGY_PRESETS,
   SchemaActionForm,
   SchemaViewer as SchemaBrowser,
   SchemaFieldMetaPanel,
@@ -1460,10 +1478,13 @@ export {
   UiZoomOut,
   UiZoomOutFilled,
   VIEW_OPTIONS,
+  VerificationResults,
   Version,
   WorkloadCard,
   WorkloadPicker,
   Workspace,
+  activeMatchFields,
+  addCondition,
   aggregateStatusCounts,
   allGroupsTerminal,
   annotateRoutePaths,
@@ -1474,9 +1495,11 @@ export {
   applyFixtureFrontmatterRaw,
   applyFixtureFrontmatterState,
   applyPostExtensions,
+  applyStrategyPreset,
   assertCalloutValue,
   assignAxes,
   authorDisplayName,
+  authoredRuntimeSpec,
   badgeVariants,
   bucketTasks,
   buildCommandHref,
@@ -1491,6 +1514,7 @@ export {
   buildThreadListHandlers,
   buttonVariants,
   cacheQueryKeys,
+  calculateComboboxMenuPosition,
   calloutVariantStyles,
   changeIconAliases,
   chooseTimestampFormat,
@@ -1500,9 +1524,11 @@ export {
   cn,
   collapseSingleChildChains,
   collectFrameworks,
+  comboboxLabelPadding,
   commentCountForPrefix,
   compactStackPath,
   computeLineDiff,
+  conditionText,
   contextItemFromEntityRow,
   copyText,
   countGoroutinesByState,
@@ -1513,6 +1539,7 @@ export {
   createCacheClient,
   createCacheRegistry,
   createChecklistMarkdown,
+  createComboboxCustomEntry,
   createFenceMarkdown,
   createLazyJSONPathTree,
   createOperationsApiClient,
@@ -1531,14 +1558,18 @@ export {
   detectDumpFormat,
   dottedAnchorResolver,
   duplicateIndex,
+  duplicateName,
+  duplicateRecord,
   effectiveProperties,
   emptyCommentFilters,
   emptyLogTailBuffer,
   emptyTestFilters,
+  emptyVerifySummary,
   encodeFilterState,
   encodeTailParams,
   entityContextItemID,
   exactAnchorResolver,
+  familyForModel,
   filterOperationsByDomain,
   filterStateToRecord,
   filterTests,
@@ -1591,6 +1622,7 @@ export {
   isCountryCode,
   isFailedOrWarn,
   isGroupCollapsedByDefault,
+  isHintField,
   isLeaf,
   isNearTop,
   isOpenStringMap,
@@ -1599,6 +1631,7 @@ export {
   isPlainObject,
   isPositionalParam,
   isRuntimeFrame,
+  isSpecRuntimeMode,
   isTerminalSessionState,
   isTerminalStatus,
   isTourFinished,
@@ -1614,12 +1647,19 @@ export {
   matchMentionsInBody,
   matchesFilterState,
   matchesIf,
+  matchingTools,
   memoryTourStorage,
+  mergeRuntimeSpec,
   mergeSeries,
   mockMarkdownPreview,
+  modeOptionFor,
   modeToFormat,
   moveItem,
+  multipleComboboxLabel,
+  newPresetRecord,
+  newProfileRecord,
   nextChecklistStatus,
+  nextNewName,
   nextTriState,
   normalizeErrorDiagnostics,
   normalizeLogsTableRows,
@@ -1648,17 +1688,26 @@ export {
   parseUnitAwareValue,
   parseWorkloadKey,
   pathParamNames,
+  patternValues,
+  patternsText,
+  permissionTarget,
   preferredEndpointPort,
   prefixAdapter,
+  presetForRef,
+  presetsOf,
   processLabel,
   processStateColor,
   processStateIcon,
   pruneNullNodes,
   readPreferences,
   recordToFilterState,
+  referencedBy,
   registerDebugConsole,
   rehydrateRefs,
+  removeCondition,
   removeIndex,
+  reorderProfilePresets,
+  replaceMatchField,
   resolveBreakdown,
   resolveControl,
   resolveFacetOption,
@@ -1669,10 +1718,12 @@ export {
   resolveSize,
   resolveStatusConfig,
   revealDebugConsole,
+  runtimeModeFromModel,
   schemaKeys,
   segment,
   selectAnchorThreads,
   selectUnresolvedThreads,
+  selectionAfterDelete,
   serializeEndpointValue,
   serializeMultiFilterValue,
   serializeSecretRef,
@@ -1690,18 +1741,21 @@ export {
   slugify,
   sortReplies,
   splitCommaValues,
+  splitOnComboboxSeparators,
   splitPath,
   splitSelectionActions,
   splitTagToken,
   statusIconFor,
   statusToneFor,
   stopLogSession,
+  strategyPreset,
   strictAnchorResolver,
   stringifyFixtureYaml,
   submitValue,
   subscribeToDebugConsole,
   sum,
   sumNonTaskTests,
+  summarizeVerifyNodes,
   tagActionsFromRecord,
   tagFilterTokens,
   taskGroupErrorCount,
@@ -1717,9 +1771,13 @@ export {
   templateValuePre,
   testStatus,
   toneToBadgeTone,
+  toolFieldSuggestions,
   totalDuration,
   truncatePlain,
+  uniqueName,
+  updateCondition,
   updateFilterSelection,
+  updatePatternCondition,
   useBrowserRouter,
   useClickyExport,
   useCommentAnchorActionsOptional,
@@ -1758,8 +1816,12 @@ export {
   useToast,
   useTour,
   useTourLayer,
+  verificationAdapters,
+  verifyReportCounts,
+  verifyReportTests,
   visibleConnectionLogEvents,
   withBasePath,
+  withSelectedComboboxOptions,
   workloadKey,
   workloadKindLabel,
   workloadStatusLabel,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/lib/permission-strategies.cjs

@@ -0,0 +1,155 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const toolPolicy = require("../data/chat/tool-policy.cjs");
+const PATTERN_FIELDS = [
+  "name",
+  "group",
+  "parent",
+  "entity",
+  "action",
+  "verb",
+  "method",
+  "scope"
+];
+const HINT_FIELDS = ["readOnly", "destructive", "idempotent"];
+const MATCH_FIELDS = [...PATTERN_FIELDS, ...HINT_FIELDS];
+const STRATEGY_PRESETS = [
+  {
+    value: "all",
+    label: "All tools",
+    description: "Match every tool in the catalog."
+  },
+  {
+    value: "read-only",
+    label: "Read-only tools",
+    description: "Match tools explicitly marked read-only."
+  },
+  {
+    value: "destructive",
+    label: "Destructive tools",
+    description: "Match tools explicitly marked destructive."
+  },
+  {
+    value: "idempotent",
+    label: "Idempotent tools",
+    description: "Match tools safe to repeat."
+  },
+  {
+    value: "custom",
+    label: "Custom conditions",
+    description: "Combine tool metadata and safety annotations."
+  }
+];
+const MATCH_FIELD_OPTIONS = [
+  { value: "name", label: "Tool name" },
+  { value: "group", label: "Group" },
+  { value: "parent", label: "Parent" },
+  { value: "entity", label: "Entity" },
+  { value: "action", label: "Action" },
+  { value: "verb", label: "Verb" },
+  { value: "method", label: "HTTP method" },
+  { value: "scope", label: "Scope" },
+  { value: "readOnly", label: "Read only" },
+  { value: "destructive", label: "Destructive" },
+  { value: "idempotent", label: "Idempotent" }
+];
+function strategyPreset(rule) {
+  const fields = activeMatchFields(rule);
+  if (fields.length !== 1) return "custom";
+  if (fields[0] === "name" && patternsText(rule.name) === "*") return "all";
+  if (fields[0] === "readOnly" && rule.readOnly === true) return "read-only";
+  if (fields[0] === "destructive" && rule.destructive === true) {
+    return "destructive";
+  }
+  if (fields[0] === "idempotent" && rule.idempotent === true) {
+    return "idempotent";
+  }
+  return "custom";
+}
+function applyStrategyPreset(rule, preset) {
+  if (preset === "all") return { name: "*", policy: rule.policy };
+  if (preset === "read-only") return { readOnly: true, policy: rule.policy };
+  if (preset === "destructive")
+    return { destructive: true, policy: rule.policy };
+  return { idempotent: true, policy: rule.policy };
+}
+function activeMatchFields(rule) {
+  return MATCH_FIELDS.filter((field) => rule[field] !== void 0);
+}
+function patternsText(value) {
+  return typeof value === "string" ? value : (value ?? []).join(", ");
+}
+function patternValues(value) {
+  return typeof value === "string" ? value ? [value] : [] : value ?? [];
+}
+function updatePatternCondition({
+  rule,
+  field,
+  value
+}) {
+  return { ...rule, [field]: value };
+}
+function conditionText(rule, field) {
+  if (isHintField(field)) return String(rule[field]);
+  return patternsText(rule[field]);
+}
+function replaceMatchField(rule, current, next) {
+  if (current === next) return rule;
+  const match = { ...rule };
+  const previous = match[current];
+  delete match[current];
+  match[next] = isHintField(next) ? typeof previous === "boolean" ? previous : true : typeof previous === "string" || Array.isArray(previous) ? previous : "*";
+  return match;
+}
+function updateCondition(rule, field, value) {
+  if (isHintField(field)) return { ...rule, [field]: value === "true" };
+  const patterns = value.split(",").map((item) => item.trim()).filter(Boolean);
+  return {
+    ...rule,
+    [field]: patterns.length <= 1 ? patterns[0] ?? "" : patterns
+  };
+}
+function removeCondition(rule, field) {
+  const next = { ...rule };
+  delete next[field];
+  if (activeMatchFields(next).length === 0) next.name = "*";
+  return next;
+}
+function addCondition(rule, field) {
+  if (rule[field] !== void 0) return rule;
+  return { ...rule, [field]: isHintField(field) ? true : "*" };
+}
+function isHintField(field) {
+  return HINT_FIELDS.includes(field);
+}
+function matchingTools(rule, tools) {
+  return tools.filter((tool) => toolPolicy.matchesTool(rule, tool));
+}
+function toolFieldSuggestions(tools, field) {
+  const values = /* @__PURE__ */ new Set();
+  for (const tool of tools) {
+    const value = tool[field === "name" ? "name" : field];
+    if (typeof value === "string" && value.trim()) values.add(value);
+  }
+  return Array.from(values).sort((left, right) => left.localeCompare(right));
+}
+exports.HINT_FIELDS = HINT_FIELDS;
+exports.MATCH_FIELDS = MATCH_FIELDS;
+exports.MATCH_FIELD_OPTIONS = MATCH_FIELD_OPTIONS;
+exports.PATTERN_FIELDS = PATTERN_FIELDS;
+exports.STRATEGY_PRESETS = STRATEGY_PRESETS;
+exports.activeMatchFields = activeMatchFields;
+exports.addCondition = addCondition;
+exports.applyStrategyPreset = applyStrategyPreset;
+exports.conditionText = conditionText;
+exports.isHintField = isHintField;
+exports.matchingTools = matchingTools;
+exports.patternValues = patternValues;
+exports.patternsText = patternsText;
+exports.removeCondition = removeCondition;
+exports.replaceMatchField = replaceMatchField;
+exports.strategyPreset = strategyPreset;
+exports.toolFieldSuggestions = toolFieldSuggestions;
+exports.updateCondition = updateCondition;
+exports.updatePatternCondition = updatePatternCondition;
+//# sourceMappingURL=permission-strategies.cjs.map

package/dist/lib/permission-strategies.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-strategies.cjs","sources":["../../src/lib/permission-strategies.ts"],"sourcesContent":["import {\n  matchesTool,\n  type MatchPatterns,\n  type PermissionRule,\n} from \"../data/chat/tool-policy\";\nimport type { ToolMeta } from \"../data/chat/types\";\n\nexport const PATTERN_FIELDS = [\n  \"name\",\n  \"group\",\n  \"parent\",\n  \"entity\",\n  \"action\",\n  \"verb\",\n  \"method\",\n  \"scope\",\n] as const;\nexport const HINT_FIELDS = [\"readOnly\", \"destructive\", \"idempotent\"] as const;\nexport const MATCH_FIELDS = [...PATTERN_FIELDS, ...HINT_FIELDS] as const;\n\nexport type MatchField = (typeof MATCH_FIELDS)[number];\nexport type StrategyPreset =\n  | \"all\"\n  | \"read-only\"\n  | \"destructive\"\n  | \"idempotent\"\n  | \"custom\";\n\nexport const STRATEGY_PRESETS: Array<{\n  value: StrategyPreset;\n  label: string;\n  description: string;\n}> = [\n  {\n    value: \"all\",\n    label: \"All tools\",\n    description: \"Match every tool in the catalog.\",\n  },\n  {\n    value: \"read-only\",\n    label: \"Read-only tools\",\n    description: \"Match tools explicitly marked read-only.\",\n  },\n  {\n    value: \"destructive\",\n    label: \"Destructive tools\",\n    description: \"Match tools explicitly marked destructive.\",\n  },\n  {\n    value: \"idempotent\",\n    label: \"Idempotent tools\",\n    description: \"Match tools safe to repeat.\",\n  },\n  {\n    value: \"custom\",\n    label: \"Custom conditions\",\n    description: \"Combine tool metadata and safety annotations.\",\n  },\n];\n\nexport const MATCH_FIELD_OPTIONS: Array<{ value: MatchField; label: string }> =\n  [\n    { value: \"name\", label: \"Tool name\" },\n    { value: \"group\", label: \"Group\" },\n    { value: \"parent\", label: \"Parent\" },\n    { value: \"entity\", label: \"Entity\" },\n    { value: \"action\", label: \"Action\" },\n    { value: \"verb\", label: \"Verb\" },\n    { value: \"method\", label: \"HTTP method\" },\n    { value: \"scope\", label: \"Scope\" },\n    { value: \"readOnly\", label: \"Read only\" },\n    { value: \"destructive\", label: \"Destructive\" },\n    { value: \"idempotent\", label: \"Idempotent\" },\n  ];\n\nexport function strategyPreset(rule: PermissionRule): StrategyPreset {\n  const fields = activeMatchFields(rule);\n  if (fields.length !== 1) return \"custom\";\n  if (fields[0] === \"name\" && patternsText(rule.name) === \"*\") return \"all\";\n  if (fields[0] === \"readOnly\" && rule.readOnly === true) return \"read-only\";\n  if (fields[0] === \"destructive\" && rule.destructive === true) {\n    return \"destructive\";\n  }\n  if (fields[0] === \"idempotent\" && rule.idempotent === true) {\n    return \"idempotent\";\n  }\n  return \"custom\";\n}\n\nexport function applyStrategyPreset(\n  rule: PermissionRule,\n  preset: Exclude<StrategyPreset, \"custom\">,\n): PermissionRule {\n  if (preset === \"all\") return { name: \"*\", policy: rule.policy };\n  if (preset === \"read-only\") return { readOnly: true, policy: rule.policy };\n  if (preset === \"destructive\")\n    return { destructive: true, policy: rule.policy };\n  return { idempotent: true, policy: rule.policy };\n}\n\nexport function activeMatchFields(rule: PermissionRule): MatchField[] {\n  return MATCH_FIELDS.filter((field) => rule[field] !== undefined);\n}\n\nexport function patternsText(value: MatchPatterns | undefined): string {\n  return typeof value === \"string\" ? value : (value ?? []).join(\", \");\n}\n\nexport function patternValues(value: MatchPatterns | undefined): string[] {\n  return typeof value === \"string\" ? (value ? [value] : []) : (value ?? []);\n}\n\nexport function updatePatternCondition({\n  rule,\n  field,\n  value,\n}: {\n  rule: PermissionRule;\n  field: (typeof PATTERN_FIELDS)[number];\n  value: MatchPatterns;\n}): PermissionRule {\n  return { ...rule, [field]: value };\n}\n\nexport function conditionText(rule: PermissionRule, field: MatchField): string {\n  if (isHintField(field)) return String(rule[field]);\n  return patternsText(rule[field]);\n}\n\nexport function replaceMatchField(\n  rule: PermissionRule,\n  current: MatchField,\n  next: MatchField,\n): PermissionRule {\n  if (current === next) return rule;\n  const match = { ...rule } as Record<string, unknown>;\n  const previous = match[current];\n  delete match[current];\n  match[next] = isHintField(next)\n    ? typeof previous === \"boolean\"\n      ? previous\n      : true\n    : typeof previous === \"string\" || Array.isArray(previous)\n      ? previous\n      : \"*\";\n  return match as PermissionRule;\n}\n\nexport function updateCondition(\n  rule: PermissionRule,\n  field: MatchField,\n  value: string,\n): PermissionRule {\n  if (isHintField(field)) return { ...rule, [field]: value === \"true\" };\n  const patterns = value\n    .split(\",\")\n    .map((item) => item.trim())\n    .filter(Boolean);\n  return {\n    ...rule,\n    [field]: patterns.length <= 1 ? (patterns[0] ?? \"\") : patterns,\n  };\n}\n\nexport function removeCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  const next = { ...rule } as Record<string, unknown>;\n  delete next[field];\n  if (activeMatchFields(next as PermissionRule).length === 0) next.name = \"*\";\n  return next as PermissionRule;\n}\n\nexport function addCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  if (rule[field] !== undefined) return rule;\n  return { ...rule, [field]: isHintField(field) ? true : \"*\" };\n}\n\nexport function isHintField(\n  field: MatchField,\n): field is (typeof HINT_FIELDS)[number] {\n  return (HINT_FIELDS as readonly MatchField[]).includes(field);\n}\n\nexport function matchingTools(rule: PermissionRule, tools: ToolMeta[]) {\n  return tools.filter((tool) => matchesTool(rule, tool));\n}\n\nexport function toolFieldSuggestions(\n  tools: ToolMeta[],\n  field: Exclude<MatchField, (typeof HINT_FIELDS)[number]>,\n) {\n  const values = new Set<string>();\n  for (const tool of tools) {\n    const value = tool[field === \"name\" ? \"name\" : field];\n    if (typeof value === \"string\" && value.trim()) values.add(value);\n  }\n  return Array.from(values).sort((left, right) => left.localeCompare(right));\n}\n"],"names":["matchesTool"],"mappings":";;;AAOO,MAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,cAAc,CAAC,YAAY,eAAe,YAAY;AAC5D,MAAM,eAAe,CAAC,GAAG,gBAAgB,GAAG,WAAW;AAUvD,MAAM,mBAIR;AAAA,EACH;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAEjB;AAEO,MAAM,sBACX;AAAA,EACE,EAAE,OAAO,QAAQ,OAAO,YAAA;AAAA,EACxB,EAAE,OAAO,SAAS,OAAO,QAAA;AAAA,EACzB,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,QAAQ,OAAO,OAAA;AAAA,EACxB,EAAE,OAAO,UAAU,OAAO,cAAA;AAAA,EAC1B,EAAE,OAAO,SAAS,OAAO,QAAA;AAAA,EACzB,EAAE,OAAO,YAAY,OAAO,YAAA;AAAA,EAC5B,EAAE,OAAO,eAAe,OAAO,cAAA;AAAA,EAC/B,EAAE,OAAO,cAAc,OAAO,aAAA;AAChC;AAEK,SAAS,eAAe,MAAsC;AACnE,QAAM,SAAS,kBAAkB,IAAI;AACrC,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,MAAI,OAAO,CAAC,MAAM,UAAU,aAAa,KAAK,IAAI,MAAM,IAAK,QAAO;AACpE,MAAI,OAAO,CAAC,MAAM,cAAc,KAAK,aAAa,KAAM,QAAO;AAC/D,MAAI,OAAO,CAAC,MAAM,iBAAiB,KAAK,gBAAgB,MAAM;AAC5D,WAAO;AAAA,EACT;AACA,MAAI,OAAO,CAAC,MAAM,gBAAgB,KAAK,eAAe,MAAM;AAC1D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,oBACd,MACA,QACgB;AAChB,MAAI,WAAW,MAAO,QAAO,EAAE,MAAM,KAAK,QAAQ,KAAK,OAAA;AACvD,MAAI,WAAW,YAAa,QAAO,EAAE,UAAU,MAAM,QAAQ,KAAK,OAAA;AAClE,MAAI,WAAW;AACb,WAAO,EAAE,aAAa,MAAM,QAAQ,KAAK,OAAA;AAC3C,SAAO,EAAE,YAAY,MAAM,QAAQ,KAAK,OAAA;AAC1C;AAEO,SAAS,kBAAkB,MAAoC;AACpE,SAAO,aAAa,OAAO,CAAC,UAAU,KAAK,KAAK,MAAM,MAAS;AACjE;AAEO,SAAS,aAAa,OAA0C;AACrE,SAAO,OAAO,UAAU,WAAW,SAAS,SAAS,CAAA,GAAI,KAAK,IAAI;AACpE;AAEO,SAAS,cAAc,OAA4C;AACxE,SAAO,OAAO,UAAU,WAAY,QAAQ,CAAC,KAAK,IAAI,CAAA,IAAO,SAAS,CAAA;AACxE;AAEO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AACF,GAImB;AACjB,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,MAAA;AAC7B;AAEO,SAAS,cAAc,MAAsB,OAA2B;AAC7E,MAAI,YAAY,KAAK,UAAU,OAAO,KAAK,KAAK,CAAC;AACjD,SAAO,aAAa,KAAK,KAAK,CAAC;AACjC;AAEO,SAAS,kBACd,MACA,SACA,MACgB;AAChB,MAAI,YAAY,KAAM,QAAO;AAC7B,QAAM,QAAQ,EAAE,GAAG,KAAA;AACnB,QAAM,WAAW,MAAM,OAAO;AAC9B,SAAO,MAAM,OAAO;AACpB,QAAM,IAAI,IAAI,YAAY,IAAI,IAC1B,OAAO,aAAa,YAClB,WACA,OACF,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,IACpD,WACA;AACN,SAAO;AACT;AAEO,SAAS,gBACd,MACA,OACA,OACgB;AAChB,MAAI,YAAY,KAAK,EAAG,QAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,UAAU,OAAA;AAC7D,QAAM,WAAW,MACd,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAA,CAAM,EACzB,OAAO,OAAO;AACjB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,CAAC,KAAK,GAAG,SAAS,UAAU,IAAK,SAAS,CAAC,KAAK,KAAM;AAAA,EAAA;AAE1D;AAEO,SAAS,gBACd,MACA,OACgB;AAChB,QAAM,OAAO,EAAE,GAAG,KAAA;AAClB,SAAO,KAAK,KAAK;AACjB,MAAI,kBAAkB,IAAsB,EAAE,WAAW,QAAQ,OAAO;AACxE,SAAO;AACT;AAEO,SAAS,aACd,MACA,OACgB;AAChB,MAAI,KAAK,KAAK,MAAM,OAAW,QAAO;AACtC,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,YAAY,KAAK,IAAI,OAAO,IAAA;AACzD;AAEO,SAAS,YACd,OACuC;AACvC,SAAQ,YAAsC,SAAS,KAAK;AAC9D;AAEO,SAAS,cAAc,MAAsB,OAAmB;AACrE,SAAO,MAAM,OAAO,CAAC,SAASA,WAAAA,YAAY,MAAM,IAAI,CAAC;AACvD;AAEO,SAAS,qBACd,OACA,OACA;AACA,QAAM,6BAAa,IAAA;AACnB,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,KAAK,UAAU,SAAS,SAAS,KAAK;AACpD,QAAI,OAAO,UAAU,YAAY,MAAM,OAAQ,QAAO,IAAI,KAAK;AAAA,EACjE;AACA,SAAO,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AAC3E;;;;;;;;;;;;;;;;;;;;"}

package/dist/lib/permission-strategies.d.ts

@@ -0,0 +1,35 @@
+import { MatchPatterns, PermissionRule } from '../data/chat/tool-policy';
+import { ToolMeta } from '../data/chat/types';
+export declare const PATTERN_FIELDS: readonly ["name", "group", "parent", "entity", "action", "verb", "method", "scope"];
+export declare const HINT_FIELDS: readonly ["readOnly", "destructive", "idempotent"];
+export declare const MATCH_FIELDS: readonly ["name", "group", "parent", "entity", "action", "verb", "method", "scope", "readOnly", "destructive", "idempotent"];
+export type MatchField = (typeof MATCH_FIELDS)[number];
+export type StrategyPreset = "all" | "read-only" | "destructive" | "idempotent" | "custom";
+export declare const STRATEGY_PRESETS: Array<{
+    value: StrategyPreset;
+    label: string;
+    description: string;
+}>;
+export declare const MATCH_FIELD_OPTIONS: Array<{
+    value: MatchField;
+    label: string;
+}>;
+export declare function strategyPreset(rule: PermissionRule): StrategyPreset;
+export declare function applyStrategyPreset(rule: PermissionRule, preset: Exclude<StrategyPreset, "custom">): PermissionRule;
+export declare function activeMatchFields(rule: PermissionRule): MatchField[];
+export declare function patternsText(value: MatchPatterns | undefined): string;
+export declare function patternValues(value: MatchPatterns | undefined): string[];
+export declare function updatePatternCondition({ rule, field, value, }: {
+    rule: PermissionRule;
+    field: (typeof PATTERN_FIELDS)[number];
+    value: MatchPatterns;
+}): PermissionRule;
+export declare function conditionText(rule: PermissionRule, field: MatchField): string;
+export declare function replaceMatchField(rule: PermissionRule, current: MatchField, next: MatchField): PermissionRule;
+export declare function updateCondition(rule: PermissionRule, field: MatchField, value: string): PermissionRule;
+export declare function removeCondition(rule: PermissionRule, field: MatchField): PermissionRule;
+export declare function addCondition(rule: PermissionRule, field: MatchField): PermissionRule;
+export declare function isHintField(field: MatchField): field is (typeof HINT_FIELDS)[number];
+export declare function matchingTools(rule: PermissionRule, tools: ToolMeta[]): ToolMeta[];
+export declare function toolFieldSuggestions(tools: ToolMeta[], field: Exclude<MatchField, (typeof HINT_FIELDS)[number]>): string[];
+//# sourceMappingURL=permission-strategies.d.ts.map

package/dist/lib/permission-strategies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-strategies.d.ts","sourceRoot":"","sources":["../../src/lib/permission-strategies.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD,eAAO,MAAM,cAAc,qFASjB,CAAC;AACX,eAAO,MAAM,WAAW,oDAAqD,CAAC;AAC9E,eAAO,MAAM,YAAY,8HAA+C,CAAC;AAEzE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AACvD,MAAM,MAAM,cAAc,GACtB,KAAK,GACL,WAAW,GACX,aAAa,GACb,YAAY,GACZ,QAAQ,CAAC;AAEb,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC;IACnC,KAAK,EAAE,cAAc,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CA0BA,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAazE,CAAC;AAEJ,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc,CAYnE;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,GACxC,cAAc,CAMhB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,UAAU,EAAE,CAEpE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,CAErE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,GAAG,MAAM,EAAE,CAExE;AAED,wBAAgB,sBAAsB,CAAC,EACrC,IAAI,EACJ,KAAK,EACL,KAAK,GACN,EAAE;IACD,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,EAAE,aAAa,CAAC;CACtB,GAAG,cAAc,CAEjB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CAG7E;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE,UAAU,GACf,cAAc,CAahB;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,MAAM,GACZ,cAAc,CAUhB;AAED,wBAAgB,eAAe,CAC7B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,UAAU,GAChB,cAAc,CAKhB;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,UAAU,GAChB,cAAc,CAGhB;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,UAAU,GAChB,KAAK,IAAI,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAEvC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,cAEpE;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,QAAQ,EAAE,EACjB,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,YAQzD"}

package/dist/lib/permission-strategies.js

@@ -0,0 +1,155 @@
+import { matchesTool } from "../data/chat/tool-policy.js";
+const PATTERN_FIELDS = [
+  "name",
+  "group",
+  "parent",
+  "entity",
+  "action",
+  "verb",
+  "method",
+  "scope"
+];
+const HINT_FIELDS = ["readOnly", "destructive", "idempotent"];
+const MATCH_FIELDS = [...PATTERN_FIELDS, ...HINT_FIELDS];
+const STRATEGY_PRESETS = [
+  {
+    value: "all",
+    label: "All tools",
+    description: "Match every tool in the catalog."
+  },
+  {
+    value: "read-only",
+    label: "Read-only tools",
+    description: "Match tools explicitly marked read-only."
+  },
+  {
+    value: "destructive",
+    label: "Destructive tools",
+    description: "Match tools explicitly marked destructive."
+  },
+  {
+    value: "idempotent",
+    label: "Idempotent tools",
+    description: "Match tools safe to repeat."
+  },
+  {
+    value: "custom",
+    label: "Custom conditions",
+    description: "Combine tool metadata and safety annotations."
+  }
+];
+const MATCH_FIELD_OPTIONS = [
+  { value: "name", label: "Tool name" },
+  { value: "group", label: "Group" },
+  { value: "parent", label: "Parent" },
+  { value: "entity", label: "Entity" },
+  { value: "action", label: "Action" },
+  { value: "verb", label: "Verb" },
+  { value: "method", label: "HTTP method" },
+  { value: "scope", label: "Scope" },
+  { value: "readOnly", label: "Read only" },
+  { value: "destructive", label: "Destructive" },
+  { value: "idempotent", label: "Idempotent" }
+];
+function strategyPreset(rule) {
+  const fields = activeMatchFields(rule);
+  if (fields.length !== 1) return "custom";
+  if (fields[0] === "name" && patternsText(rule.name) === "*") return "all";
+  if (fields[0] === "readOnly" && rule.readOnly === true) return "read-only";
+  if (fields[0] === "destructive" && rule.destructive === true) {
+    return "destructive";
+  }
+  if (fields[0] === "idempotent" && rule.idempotent === true) {
+    return "idempotent";
+  }
+  return "custom";
+}
+function applyStrategyPreset(rule, preset) {
+  if (preset === "all") return { name: "*", policy: rule.policy };
+  if (preset === "read-only") return { readOnly: true, policy: rule.policy };
+  if (preset === "destructive")
+    return { destructive: true, policy: rule.policy };
+  return { idempotent: true, policy: rule.policy };
+}
+function activeMatchFields(rule) {
+  return MATCH_FIELDS.filter((field) => rule[field] !== void 0);
+}
+function patternsText(value) {
+  return typeof value === "string" ? value : (value ?? []).join(", ");
+}
+function patternValues(value) {
+  return typeof value === "string" ? value ? [value] : [] : value ?? [];
+}
+function updatePatternCondition({
+  rule,
+  field,
+  value
+}) {
+  return { ...rule, [field]: value };
+}
+function conditionText(rule, field) {
+  if (isHintField(field)) return String(rule[field]);
+  return patternsText(rule[field]);
+}
+function replaceMatchField(rule, current, next) {
+  if (current === next) return rule;
+  const match = { ...rule };
+  const previous = match[current];
+  delete match[current];
+  match[next] = isHintField(next) ? typeof previous === "boolean" ? previous : true : typeof previous === "string" || Array.isArray(previous) ? previous : "*";
+  return match;
+}
+function updateCondition(rule, field, value) {
+  if (isHintField(field)) return { ...rule, [field]: value === "true" };
+  const patterns = value.split(",").map((item) => item.trim()).filter(Boolean);
+  return {
+    ...rule,
+    [field]: patterns.length <= 1 ? patterns[0] ?? "" : patterns
+  };
+}
+function removeCondition(rule, field) {
+  const next = { ...rule };
+  delete next[field];
+  if (activeMatchFields(next).length === 0) next.name = "*";
+  return next;
+}
+function addCondition(rule, field) {
+  if (rule[field] !== void 0) return rule;
+  return { ...rule, [field]: isHintField(field) ? true : "*" };
+}
+function isHintField(field) {
+  return HINT_FIELDS.includes(field);
+}
+function matchingTools(rule, tools) {
+  return tools.filter((tool) => matchesTool(rule, tool));
+}
+function toolFieldSuggestions(tools, field) {
+  const values = /* @__PURE__ */ new Set();
+  for (const tool of tools) {
+    const value = tool[field === "name" ? "name" : field];
+    if (typeof value === "string" && value.trim()) values.add(value);
+  }
+  return Array.from(values).sort((left, right) => left.localeCompare(right));
+}
+export {
+  HINT_FIELDS,
+  MATCH_FIELDS,
+  MATCH_FIELD_OPTIONS,
+  PATTERN_FIELDS,
+  STRATEGY_PRESETS,
+  activeMatchFields,
+  addCondition,
+  applyStrategyPreset,
+  conditionText,
+  isHintField,
+  matchingTools,
+  patternValues,
+  patternsText,
+  removeCondition,
+  replaceMatchField,
+  strategyPreset,
+  toolFieldSuggestions,
+  updateCondition,
+  updatePatternCondition
+};
+//# sourceMappingURL=permission-strategies.js.map

package/dist/lib/permission-strategies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-strategies.js","sources":["../../src/lib/permission-strategies.ts"],"sourcesContent":["import {\n  matchesTool,\n  type MatchPatterns,\n  type PermissionRule,\n} from \"../data/chat/tool-policy\";\nimport type { ToolMeta } from \"../data/chat/types\";\n\nexport const PATTERN_FIELDS = [\n  \"name\",\n  \"group\",\n  \"parent\",\n  \"entity\",\n  \"action\",\n  \"verb\",\n  \"method\",\n  \"scope\",\n] as const;\nexport const HINT_FIELDS = [\"readOnly\", \"destructive\", \"idempotent\"] as const;\nexport const MATCH_FIELDS = [...PATTERN_FIELDS, ...HINT_FIELDS] as const;\n\nexport type MatchField = (typeof MATCH_FIELDS)[number];\nexport type StrategyPreset =\n  | \"all\"\n  | \"read-only\"\n  | \"destructive\"\n  | \"idempotent\"\n  | \"custom\";\n\nexport const STRATEGY_PRESETS: Array<{\n  value: StrategyPreset;\n  label: string;\n  description: string;\n}> = [\n  {\n    value: \"all\",\n    label: \"All tools\",\n    description: \"Match every tool in the catalog.\",\n  },\n  {\n    value: \"read-only\",\n    label: \"Read-only tools\",\n    description: \"Match tools explicitly marked read-only.\",\n  },\n  {\n    value: \"destructive\",\n    label: \"Destructive tools\",\n    description: \"Match tools explicitly marked destructive.\",\n  },\n  {\n    value: \"idempotent\",\n    label: \"Idempotent tools\",\n    description: \"Match tools safe to repeat.\",\n  },\n  {\n    value: \"custom\",\n    label: \"Custom conditions\",\n    description: \"Combine tool metadata and safety annotations.\",\n  },\n];\n\nexport const MATCH_FIELD_OPTIONS: Array<{ value: MatchField; label: string }> =\n  [\n    { value: \"name\", label: \"Tool name\" },\n    { value: \"group\", label: \"Group\" },\n    { value: \"parent\", label: \"Parent\" },\n    { value: \"entity\", label: \"Entity\" },\n    { value: \"action\", label: \"Action\" },\n    { value: \"verb\", label: \"Verb\" },\n    { value: \"method\", label: \"HTTP method\" },\n    { value: \"scope\", label: \"Scope\" },\n    { value: \"readOnly\", label: \"Read only\" },\n    { value: \"destructive\", label: \"Destructive\" },\n    { value: \"idempotent\", label: \"Idempotent\" },\n  ];\n\nexport function strategyPreset(rule: PermissionRule): StrategyPreset {\n  const fields = activeMatchFields(rule);\n  if (fields.length !== 1) return \"custom\";\n  if (fields[0] === \"name\" && patternsText(rule.name) === \"*\") return \"all\";\n  if (fields[0] === \"readOnly\" && rule.readOnly === true) return \"read-only\";\n  if (fields[0] === \"destructive\" && rule.destructive === true) {\n    return \"destructive\";\n  }\n  if (fields[0] === \"idempotent\" && rule.idempotent === true) {\n    return \"idempotent\";\n  }\n  return \"custom\";\n}\n\nexport function applyStrategyPreset(\n  rule: PermissionRule,\n  preset: Exclude<StrategyPreset, \"custom\">,\n): PermissionRule {\n  if (preset === \"all\") return { name: \"*\", policy: rule.policy };\n  if (preset === \"read-only\") return { readOnly: true, policy: rule.policy };\n  if (preset === \"destructive\")\n    return { destructive: true, policy: rule.policy };\n  return { idempotent: true, policy: rule.policy };\n}\n\nexport function activeMatchFields(rule: PermissionRule): MatchField[] {\n  return MATCH_FIELDS.filter((field) => rule[field] !== undefined);\n}\n\nexport function patternsText(value: MatchPatterns | undefined): string {\n  return typeof value === \"string\" ? value : (value ?? []).join(\", \");\n}\n\nexport function patternValues(value: MatchPatterns | undefined): string[] {\n  return typeof value === \"string\" ? (value ? [value] : []) : (value ?? []);\n}\n\nexport function updatePatternCondition({\n  rule,\n  field,\n  value,\n}: {\n  rule: PermissionRule;\n  field: (typeof PATTERN_FIELDS)[number];\n  value: MatchPatterns;\n}): PermissionRule {\n  return { ...rule, [field]: value };\n}\n\nexport function conditionText(rule: PermissionRule, field: MatchField): string {\n  if (isHintField(field)) return String(rule[field]);\n  return patternsText(rule[field]);\n}\n\nexport function replaceMatchField(\n  rule: PermissionRule,\n  current: MatchField,\n  next: MatchField,\n): PermissionRule {\n  if (current === next) return rule;\n  const match = { ...rule } as Record<string, unknown>;\n  const previous = match[current];\n  delete match[current];\n  match[next] = isHintField(next)\n    ? typeof previous === \"boolean\"\n      ? previous\n      : true\n    : typeof previous === \"string\" || Array.isArray(previous)\n      ? previous\n      : \"*\";\n  return match as PermissionRule;\n}\n\nexport function updateCondition(\n  rule: PermissionRule,\n  field: MatchField,\n  value: string,\n): PermissionRule {\n  if (isHintField(field)) return { ...rule, [field]: value === \"true\" };\n  const patterns = value\n    .split(\",\")\n    .map((item) => item.trim())\n    .filter(Boolean);\n  return {\n    ...rule,\n    [field]: patterns.length <= 1 ? (patterns[0] ?? \"\") : patterns,\n  };\n}\n\nexport function removeCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  const next = { ...rule } as Record<string, unknown>;\n  delete next[field];\n  if (activeMatchFields(next as PermissionRule).length === 0) next.name = \"*\";\n  return next as PermissionRule;\n}\n\nexport function addCondition(\n  rule: PermissionRule,\n  field: MatchField,\n): PermissionRule {\n  if (rule[field] !== undefined) return rule;\n  return { ...rule, [field]: isHintField(field) ? true : \"*\" };\n}\n\nexport function isHintField(\n  field: MatchField,\n): field is (typeof HINT_FIELDS)[number] {\n  return (HINT_FIELDS as readonly MatchField[]).includes(field);\n}\n\nexport function matchingTools(rule: PermissionRule, tools: ToolMeta[]) {\n  return tools.filter((tool) => matchesTool(rule, tool));\n}\n\nexport function toolFieldSuggestions(\n  tools: ToolMeta[],\n  field: Exclude<MatchField, (typeof HINT_FIELDS)[number]>,\n) {\n  const values = new Set<string>();\n  for (const tool of tools) {\n    const value = tool[field === \"name\" ? \"name\" : field];\n    if (typeof value === \"string\" && value.trim()) values.add(value);\n  }\n  return Array.from(values).sort((left, right) => left.localeCompare(right));\n}\n"],"names":[],"mappings":";AAOO,MAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AACO,MAAM,cAAc,CAAC,YAAY,eAAe,YAAY;AAC5D,MAAM,eAAe,CAAC,GAAG,gBAAgB,GAAG,WAAW;AAUvD,MAAM,mBAIR;AAAA,EACH;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAEjB;AAEO,MAAM,sBACX;AAAA,EACE,EAAE,OAAO,QAAQ,OAAO,YAAA;AAAA,EACxB,EAAE,OAAO,SAAS,OAAO,QAAA;AAAA,EACzB,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,UAAU,OAAO,SAAA;AAAA,EAC1B,EAAE,OAAO,QAAQ,OAAO,OAAA;AAAA,EACxB,EAAE,OAAO,UAAU,OAAO,cAAA;AAAA,EAC1B,EAAE,OAAO,SAAS,OAAO,QAAA;AAAA,EACzB,EAAE,OAAO,YAAY,OAAO,YAAA;AAAA,EAC5B,EAAE,OAAO,eAAe,OAAO,cAAA;AAAA,EAC/B,EAAE,OAAO,cAAc,OAAO,aAAA;AAChC;AAEK,SAAS,eAAe,MAAsC;AACnE,QAAM,SAAS,kBAAkB,IAAI;AACrC,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,MAAI,OAAO,CAAC,MAAM,UAAU,aAAa,KAAK,IAAI,MAAM,IAAK,QAAO;AACpE,MAAI,OAAO,CAAC,MAAM,cAAc,KAAK,aAAa,KAAM,QAAO;AAC/D,MAAI,OAAO,CAAC,MAAM,iBAAiB,KAAK,gBAAgB,MAAM;AAC5D,WAAO;AAAA,EACT;AACA,MAAI,OAAO,CAAC,MAAM,gBAAgB,KAAK,eAAe,MAAM;AAC1D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,oBACd,MACA,QACgB;AAChB,MAAI,WAAW,MAAO,QAAO,EAAE,MAAM,KAAK,QAAQ,KAAK,OAAA;AACvD,MAAI,WAAW,YAAa,QAAO,EAAE,UAAU,MAAM,QAAQ,KAAK,OAAA;AAClE,MAAI,WAAW;AACb,WAAO,EAAE,aAAa,MAAM,QAAQ,KAAK,OAAA;AAC3C,SAAO,EAAE,YAAY,MAAM,QAAQ,KAAK,OAAA;AAC1C;AAEO,SAAS,kBAAkB,MAAoC;AACpE,SAAO,aAAa,OAAO,CAAC,UAAU,KAAK,KAAK,MAAM,MAAS;AACjE;AAEO,SAAS,aAAa,OAA0C;AACrE,SAAO,OAAO,UAAU,WAAW,SAAS,SAAS,CAAA,GAAI,KAAK,IAAI;AACpE;AAEO,SAAS,cAAc,OAA4C;AACxE,SAAO,OAAO,UAAU,WAAY,QAAQ,CAAC,KAAK,IAAI,CAAA,IAAO,SAAS,CAAA;AACxE;AAEO,SAAS,uBAAuB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AACF,GAImB;AACjB,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,MAAA;AAC7B;AAEO,SAAS,cAAc,MAAsB,OAA2B;AAC7E,MAAI,YAAY,KAAK,UAAU,OAAO,KAAK,KAAK,CAAC;AACjD,SAAO,aAAa,KAAK,KAAK,CAAC;AACjC;AAEO,SAAS,kBACd,MACA,SACA,MACgB;AAChB,MAAI,YAAY,KAAM,QAAO;AAC7B,QAAM,QAAQ,EAAE,GAAG,KAAA;AACnB,QAAM,WAAW,MAAM,OAAO;AAC9B,SAAO,MAAM,OAAO;AACpB,QAAM,IAAI,IAAI,YAAY,IAAI,IAC1B,OAAO,aAAa,YAClB,WACA,OACF,OAAO,aAAa,YAAY,MAAM,QAAQ,QAAQ,IACpD,WACA;AACN,SAAO;AACT;AAEO,SAAS,gBACd,MACA,OACA,OACgB;AAChB,MAAI,YAAY,KAAK,EAAG,QAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,UAAU,OAAA;AAC7D,QAAM,WAAW,MACd,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,KAAA,CAAM,EACzB,OAAO,OAAO;AACjB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,CAAC,KAAK,GAAG,SAAS,UAAU,IAAK,SAAS,CAAC,KAAK,KAAM;AAAA,EAAA;AAE1D;AAEO,SAAS,gBACd,MACA,OACgB;AAChB,QAAM,OAAO,EAAE,GAAG,KAAA;AAClB,SAAO,KAAK,KAAK;AACjB,MAAI,kBAAkB,IAAsB,EAAE,WAAW,QAAQ,OAAO;AACxE,SAAO;AACT;AAEO,SAAS,aACd,MACA,OACgB;AAChB,MAAI,KAAK,KAAK,MAAM,OAAW,QAAO;AACtC,SAAO,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,YAAY,KAAK,IAAI,OAAO,IAAA;AACzD;AAEO,SAAS,YACd,OACuC;AACvC,SAAQ,YAAsC,SAAS,KAAK;AAC9D;AAEO,SAAS,cAAc,MAAsB,OAAmB;AACrE,SAAO,MAAM,OAAO,CAAC,SAAS,YAAY,MAAM,IAAI,CAAC;AACvD;AAEO,SAAS,qBACd,OACA,OACA;AACA,QAAM,6BAAa,IAAA;AACnB,aAAW,QAAQ,OAAO;AACxB,UAAM,QAAQ,KAAK,UAAU,SAAS,SAAS,KAAK;AACpD,QAAI,OAAO,UAAU,YAAY,MAAM,OAAQ,QAAO,IAAI,KAAK;AAAA,EACjE;AACA,SAAO,MAAM,KAAK,MAAM,EAAE,KAAK,CAAC,MAAM,UAAU,KAAK,cAAc,KAAK,CAAC;AAC3E;"}