@gotgenes/pi-permission-system 31.1.0 → 31.1.2

package/src/service.ts

@@ -18,15 +18,15 @@
  * ensures resilience across `/reload` and load-order edge cases.
  */
 
-import type { Authorizer } from "./authority/authorizer";
-import type { ToolAccessExtractor } from "./tool-access-extractor-registry";
-import type { ToolInputFormatter } from "./tool-input-formatter-registry";
+import type { Authorizer } from "#src/authority/authorizer";
+import type { ToolAccessExtractor } from "#src/tool-input/tool-access-extractor-registry";
+import type { ToolInputFormatter } from "#src/tool-input/tool-input-formatter-registry";
 import type { PermissionCheckResult, PermissionState } from "./types";
 
 export type {
   Authorizer,
   AuthorizerVerdict,
-} from "./authority/authorizer";
+} from "#src/authority/authorizer";
 
 /**
  * The narrow review-log seam handed to a chain link at `authorize` time
@@ -43,19 +43,7 @@ export interface AuthorizerLog {
   review(event: string, details?: Record<string, unknown>): void;
   debug(event: string, details?: Record<string, unknown>): void;
 }
-export type { PromptPermissionDetails } from "./authority/permission-prompter";
-export type {
-  ForwardedPromptContext,
-  PermissionDecisionEvent,
-  PermissionsReadyEvent,
-  PermissionUiPromptEvent,
-  PermissionUiPromptSource,
-} from "./permission-events";
-export {
-  PERMISSIONS_DECISION_CHANNEL,
-  PERMISSIONS_READY_CHANNEL,
-  PERMISSIONS_UI_PROMPT_CHANNEL,
-} from "./permission-events";
+export type { PromptPermissionDetails } from "#src/authority/permission-prompter";
 // The declaration bundle already inlines these through `PromptPermissionDetails`
 // and `PermissionUiPromptEvent`; the named exports are what a consumer needs to
 // annotate a variable of their own.
@@ -66,7 +54,19 @@ export type {
   PromptPayloadKind,
   PromptRequester,
   PromptRequestFacts,
-} from "./presentation/prompt-payload";
+} from "#src/presentation/prompt-payload";
+export type {
+  ForwardedPromptContext,
+  PermissionDecisionEvent,
+  PermissionsReadyEvent,
+  PermissionUiPromptEvent,
+  PermissionUiPromptSource,
+} from "#src/service/permission-events";
+export {
+  PERMISSIONS_DECISION_CHANNEL,
+  PERMISSIONS_READY_CHANNEL,
+  PERMISSIONS_UI_PROMPT_CHANNEL,
+} from "#src/service/permission-events";
 export type { PermissionCheckResult, PermissionState, ToolInputFormatter };
 
 /** Process-global key for the session-keyed service map (ADR 0012 decision 2). */

package/src/{permission-session.ts → session/permission-session.ts}

@@ -1,30 +1,29 @@
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
+import type { AuthorizerSelectionLifecycle } from "#src/authority/authorizer-selection";
 import type { ForwardingController } from "#src/authority/forwarding-manager";
+import type { ShellToolsConfig } from "#src/config/config-schema";
+import type { SessionConfigStore } from "#src/config/config-store";
+import type { PermissionSystemExtensionConfig } from "#src/config/extension-config";
+import type { ExtensionPaths } from "#src/config/extension-paths";
+import type { SkillPromptEntry } from "#src/exposure/skill-prompt-sanitizer";
 import {
-  getActiveAgentName,
-  getActiveAgentNameFromSystemPrompt,
-} from "./active-agent";
-import type { AuthorizerSelectionLifecycle } from "./authority/authorizer-selection";
-import type { ShellToolsConfig } from "./config-schema";
-import type { SessionConfigStore } from "./config-store";
-import type { PermissionSystemExtensionConfig } from "./extension-config";
-import type { ExtensionPaths } from "./extension-paths";
-import type { ToolCallGateInputs } from "./handlers/gates/tool-call-gate-pipeline";
-import type { PathFlavor } from "./path/path-flavor";
-import { PathNormalizer } from "./path-normalizer";
-import type { ScopedPermissionManager } from "./permission-manager";
-
-import type { SessionRules } from "./session-rules";
-import type { SkillPromptEntry } from "./skill-prompt-sanitizer";
+  ToolSurfaceBaseline,
+  type ToolSurfaceObservation,
+  type ToolSurfaceResolution,
+} from "#src/exposure/tool-surface-baseline";
+import type { ToolCallGateInputs } from "#src/handlers/gates/tool-call-gate-pipeline";
+import type { PathFlavor } from "#src/path/path-flavor";
+import { PathNormalizer } from "#src/path/path-normalizer";
+import type { ScopedPermissionManager } from "#src/policy/permission-manager";
 import {
   resolveToolPreviewLimits,
   type ToolPreviewFormatterOptions,
-} from "./tool-preview-formatter";
+} from "#src/tool-input/tool-preview-formatter";
 import {
-  ToolSurfaceBaseline,
-  type ToolSurfaceObservation,
-  type ToolSurfaceResolution,
-} from "./tool-surface-baseline";
+  getActiveAgentName,
+  getActiveAgentNameFromSystemPrompt,
+} from "./active-agent";
+import type { SessionRules } from "./session-rules";
 
 /**
  * Encapsulates all mutable session state and exposes operations instead of

package/src/{session-approval.ts → session/session-approval.ts}

@@ -1,9 +1,9 @@
+import type { ForwardedSessionApproval } from "#src/authority/permission-forwarding";
 import {
   type ApprovalGrant,
   type SessionGrantWidth,
   widenGrant,
-} from "#src/approval-grant";
-import type { ForwardedSessionApproval } from "#src/authority/permission-forwarding";
+} from "./approval-grant";
 
 /**
  * Value object for a session-scoped approval: one or more

package/src/{session-rules.ts → session/session-rules.ts}

@@ -1,5 +1,5 @@
 import { surfaceFamilyMembers } from "#src/access-intent/path-surfaces";
-import type { Ruleset } from "./rule";
+import type { Ruleset } from "#src/policy/rule";
 import type { SessionApproval } from "./session-approval";
 import type { SessionApprovalRecorder } from "./session-approval-recorder";
 

package/src/{builtin-tool-input-formatters.ts → tool-input/builtin-tool-input-formatters.ts}

@@ -5,12 +5,12 @@
  * through exactly the same path a third-party extension would use.
  */
 
+import { toRecord } from "#src/value-guards";
 import type {
   ToolInputFormatter,
   ToolInputFormatterRegistry,
 } from "./tool-input-formatter-registry";
 import { truncateInlineText } from "./tool-input-preview";
-import { toRecord } from "./value-guards";
 
 /** Maximum total length of the generated argument summary (before "with " prefix). */
 const MCP_ARGS_SUMMARY_MAX_LENGTH = 160;

package/src/{tool-input-preview.ts → tool-input/tool-input-preview.ts}

@@ -1,5 +1,5 @@
-import { safeJsonStringify } from "./json-safe-stringify";
-import { redactedJsonStringify } from "./log-redaction";
+import { safeJsonStringify } from "#src/logging/json-safe-stringify";
+import { redactedJsonStringify } from "#src/logging/log-redaction";
 
 export const TOOL_INPUT_PREVIEW_MAX_LENGTH = 200;
 export const TOOL_TEXT_SUMMARY_MAX_LENGTH = 80;

package/src/{tool-input-prompt-formatters.ts → tool-input/tool-input-prompt-formatters.ts}

@@ -1,5 +1,5 @@
+import { getNonEmptyString, toRecord } from "#src/value-guards";
 import { countTextLines, formatCount } from "./tool-input-preview";
-import { getNonEmptyString, toRecord } from "./value-guards";
 
 export function getPromptPath(input: Record<string, unknown>): string | null {
   return getNonEmptyString(input.path) ?? getNonEmptyString(input.file_path);

package/src/{tool-preview-formatter.ts → tool-input/tool-preview-formatter.ts}

@@ -1,4 +1,6 @@
-import { classifyToolKind, isMcpCheck } from "./access-intent/tool-kind";
+import { classifyToolKind, isMcpCheck } from "#src/access-intent/tool-kind";
+import type { PermissionCheckResult } from "#src/types";
+import { getNonEmptyString, toRecord } from "#src/value-guards";
 import type { ToolInputFormatterLookup } from "./tool-input-formatter-registry";
 import {
   serializeRedactedToolInputPreview,
@@ -13,8 +15,6 @@ import {
   formatWriteInputForPrompt,
   getPromptPath,
 } from "./tool-input-prompt-formatters";
-import type { PermissionCheckResult } from "./types";
-import { getNonEmptyString, toRecord } from "./value-guards";
 
 export interface ToolPreviewFormatterOptions {
   toolInputPreviewMaxLength: number;

package/src/types.ts

@@ -3,8 +3,8 @@ import type {
   FlatPermissionConfig,
   PatternValue,
   PermissionState,
-} from "./config-schema";
-import type { RuleOrigin } from "./rule";
+} from "#src/config/config-schema";
+import type { RuleOrigin } from "#src/policy/rule";
 
 // The config-file shape types are derived from the zod schema
 // (config-schema.ts) — the single source of truth — and re-exported here so