@gotgenes/pi-permission-system 18.1.2 → 19.0.0

package/src/types.ts

@@ -1,20 +1,21 @@
-export type PermissionState = "allow" | "deny" | "ask";
-
+import type {
+  DenyWithReason,
+  FlatPermissionConfig,
+  PatternValue,
+  PermissionState,
+} from "./config-schema";
 import type { RuleOrigin } from "./rule";
 
-export type { RuleOrigin };
-
-/**
- * A deny action with an optional reason annotation, used when a pattern maps
- * to an object instead of a plain PermissionState string.
- */
-export interface DenyWithReason {
-  action: "deny";
-  reason?: string;
-}
-
-/** A pattern value: a PermissionState string OR a DenyWithReason object. */
-export type PatternValue = PermissionState | DenyWithReason;
+// The config-file shape types are derived from the zod schema
+// (config-schema.ts) — the single source of truth — and re-exported here so
+// existing importers keep their import path.
+export type {
+  DenyWithReason,
+  FlatPermissionConfig,
+  PatternValue,
+  PermissionState,
+  RuleOrigin,
+};
 
 /**
  * Predicate deciding whether a bare bash token should be promoted into the
@@ -27,17 +28,6 @@ export type PatternValue = PermissionState | DenyWithReason;
  */
 export type PathRuleTokenMatcher = (token: string) => boolean;
 
-/**
- * The on-disk permission shape inside the `"permission"` key.
- * A surface value is a PermissionState string (shorthand for `{ "*": action }`)
- * or a pattern→value map. Pattern values may be a PermissionState string or a
- * DenyWithReason object. A top-level value is never a bare DenyWithReason.
- */
-export type FlatPermissionConfig = Record<
-  string,
-  PermissionState | Record<string, PatternValue>
->;
-
 /**
  * Per-scope permission config shape after loading and validation.
  * Holds only the flat permission map — all policy is expressed there.

package/src/value-guards.ts

@@ -17,23 +17,6 @@ export function getNonEmptyString(value: unknown): string | null {
   return trimmed.length > 0 ? trimmed : null;
 }
 
-/** Returns `raw` if it is an array of strings; otherwise `undefined`. */
-export function normalizeOptionalStringArray(
-  raw: unknown,
-): string[] | undefined {
-  return Array.isArray(raw) &&
-    raw.every((p): p is string => typeof p === "string")
-    ? raw
-    : undefined;
-}
-
-/** Returns `raw` if it is a positive integer; otherwise `undefined`. */
-export function normalizeOptionalPositiveInt(raw: unknown): number | undefined {
-  return typeof raw === "number" && Number.isInteger(raw) && raw > 0
-    ? raw
-    : undefined;
-}
-
 export function isPermissionState(value: unknown): value is PermissionState {
   return value === "allow" || value === "deny" || value === "ask";
 }

package/src/yolo-mode.ts

@@ -1,30 +0,0 @@
-import type { PermissionSystemExtensionConfig } from "./extension-config";
-import type { PermissionState } from "./types";
-
-export interface AskPermissionResolutionOptions {
-  config: PermissionSystemExtensionConfig;
-  hasUI: boolean;
-  isSubagent: boolean;
-}
-
-export function isYoloModeEnabled(
-  config: PermissionSystemExtensionConfig,
-): boolean {
-  // eslint-disable-next-line @typescript-eslint/no-unnecessary-type-conversion -- typed as boolean but may be undefined at runtime (untyped callers); Boolean() guards against that
-  return Boolean(config.yoloMode);
-}
-
-export function shouldAutoApprovePermissionState(
-  state: PermissionState,
-  config: PermissionSystemExtensionConfig,
-): boolean {
-  return state === "ask" && isYoloModeEnabled(config);
-}
-
-export function canResolveAskPermissionRequest(
-  options: AskPermissionResolutionOptions,
-): boolean {
-  return (
-    options.hasUI || options.isSubagent || isYoloModeEnabled(options.config)
-  );
-}