@itphx/synth-core 0.2.0

package/dist/engine/permission/evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../src/engine/permission/evaluator.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAoB,gBAAgB,EAAE,kBAAkB,EAAkB,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAIrL,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,qEAAqE;IACrE,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,oDAAoD;IACpD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;CACzD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,WAAW,GAAG,SAAS,EACpC,QAAQ,EAAE,QAAQ,GAAG,SAAS,EAC9B,YAAY,EAAE,OAAO,GAAG,SAAS,GAChC,OAAO,CAKT;AAED,iEAAiE;AACjE,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAEtF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAG7F;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,GAAG,SAAS,EAC3D,YAAY,EAAE,MAAM,GACnB,mBAAmB,GAAG,SAAS,CASjC;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,gBAAgB;IAEtD,IAAI,MAAM,IAAI,gBAAgB,CAE7B;IAED,KAAK,CAAC,KAAK,EAAE,oBAAoB,GAAG,kBAAkB;IAgBtD,OAAO,CAAC,gBAAgB;IAiFxB,OAAO,CAAC,YAAY;CA4CrB;AAED,8DAA8D;AAC9D,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,UAAU,EAAE,MAAM,GACjB,MAAM,EAAE,CAWV;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAOnG;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAKzE"}

package/dist/engine/permission/evaluator.js

@@ -0,0 +1,236 @@
+import { relative, resolve, isAbsolute, normalize, sep } from 'node:path';
+import { globMatch, ToolCapability } from '@itphx/synth-shared';
+import { resolvePath } from '../tools/path-utils.js';
+import { getToolGroups, TOOL_PATH_PARAMS } from './groups.js';
+/**
+ * AD-025: активна ли рестрикция write-тулов.
+ * - mode === 'plan' — сессия в режиме планирования (plan_enter).
+ * - planMode === 'strict' и план не утверждён — принудительный план перед записью.
+ * - planMode === 'off' — планирование отключено, рестрикция никогда не активна.
+ */
+export function isPlanRestricted(sessionMode, planMode, planApproved) {
+    if (planMode === 'off')
+        return false;
+    if (sessionMode === 'plan')
+        return true;
+    if (planMode === 'strict' && !planApproved)
+        return true;
+    return false;
+}
+/** Является ли тул write/edit/delete (группа edit по AD-029). */
+export function isEditTool(toolName, capabilities) {
+    return getToolGroups(toolName, capabilities).includes('edit');
+}
+/**
+ * AD-025: тулы, блокируемые в plan-режиме (и strict без утверждённого плана):
+ * edit-группа (write/edit/delete файлов) + git-запись (git_commit/git_push/...).
+ * Read-only git-тулы (git_status/git_diff/...) в группу не входят и остаются доступны.
+ */
+export function isPlanBlockedTool(toolName, capabilities) {
+    const groups = getToolGroups(toolName, capabilities);
+    return groups.includes('edit') || groups.includes('git_write');
+}
+/**
+ * Достаёт настройку доступности MCP-инструмента по имени сервера и локальному имени
+ * тула (без префикса). Полное имя инструмента: "{serverName}_{toolName}".
+ * Возвращает undefined, если для сервера/тула нет настроек (доступен по умолчанию).
+ */
+export function getMcpToolAvailability(settings, fullToolName) {
+    if (!settings)
+        return undefined;
+    const idx = fullToolName.indexOf('_');
+    if (idx === -1)
+        return undefined;
+    const serverName = fullToolName.slice(0, idx);
+    const localName = fullToolName.slice(idx + 1);
+    const server = settings[serverName];
+    if (!server)
+        return undefined;
+    return server.tools?.[localName] ?? server.default;
+}
+/**
+ * AD-029: PermissionEvaluator — вычисление решения для одного tool_call.
+ *
+ * Приоритет правил:
+ *   1. Правило по конкретному имени тула (специфичный файловый паттерн > '*')
+ *   2. external_directory (только для путей вне workingDir)
+ *   3. Групповые правила (read/edit/shell/...): специфичный паттерн > '*'
+ *   4. Глобальный '*'
+ *   5. Дефолт: allow
+ *
+ * Файловые паттерны применяются к абсолютному пути файла (resolvePath) и к
+ * относительному пути от workingDir (для внутренних файлов). Это позволяет
+ * использовать как простые паттерны вида `*.env`, так и абсолютные `/tmp/*`.
+ */
+export class PermissionEvaluator {
+    _config;
+    constructor(_config) {
+        this._config = _config;
+    }
+    get config() {
+        return this._config;
+    }
+    check(input) {
+        const decision = this._computeDecision(input);
+        // AD-025-yolo: в режиме yolo все ask-запросы автоматически подтверждаются
+        // (allow) без события permission.asked и без ожидания пользователя.
+        // deny-правила остаются deny — трансформируется только действие ask.
+        if (decision.action === 'ask' && input.sessionMode === 'yolo') {
+            return {
+                ...decision,
+                action: 'allow',
+                reason: `${decision.reason} (yolo-режим: автоподтверждение)`,
+            };
+        }
+        return decision;
+    }
+    _computeDecision(input) {
+        const { toolName, params, workingDir, capabilities, sessionMode, planMode, planApproved, mcpToolSettings } = input;
+        const paths = extractPaths(toolName, params, workingDir);
+        const isFile = paths.length > 0;
+        // AD-025: plan-рестрикция применяется поверх конфига. В режиме plan (или
+        // strict без утверждённого плана) все write/edit/delete тулы и git-запись → deny,
+        // единственное исключение — файлы .synth/plans/*.md для edit-тулов.
+        if (isPlanRestricted(sessionMode, planMode, planApproved) && isPlanBlockedTool(toolName, capabilities)) {
+            if (isEditTool(toolName, capabilities) && isFile && paths.some((p) => matchPathPattern('.synth/plans/*.md', p, workingDir))) {
+                return {
+                    action: 'allow',
+                    reason: 'plan mode: запись в .synth/plans/*.md разрешена',
+                    matchedRule: 'plan.plans',
+                };
+            }
+            const restrictionSource = sessionMode === 'plan' ? 'режим plan' : 'strict: план не утверждён';
+            return {
+                action: 'deny',
+                reason: `plan mode: запись файлов заблокирована (${restrictionSource})`,
+                matchedRule: 'plan.deny',
+            };
+        }
+        // MCP-доступность по режимам (настройки сессии): в plan-режиме инструмент
+        // доступен только если plan=true, в act — act=true. Применяется поверх конфига.
+        if (capabilities?.includes(ToolCapability.MCP) && mcpToolSettings) {
+            const availability = getMcpToolAvailability(mcpToolSettings, toolName);
+            if (availability) {
+                const modeKey = sessionMode === 'plan' ? 'plan' : 'act';
+                if (!availability[modeKey]) {
+                    return {
+                        action: 'deny',
+                        reason: `MCP-инструмент недоступен в режиме ${modeKey}`,
+                        matchedRule: 'mcp.mode',
+                    };
+                }
+            }
+        }
+        // 1. Правило по конкретному имени тула
+        const toolRule = this._config.rules[toolName];
+        if (toolRule !== undefined) {
+            const d = this._resolveRule(toolName, toolRule, paths, workingDir);
+            if (d)
+                return d;
+        }
+        // 2. external_directory — только пути вне workingDir
+        if (isFile) {
+            const extRule = this._config.rules['external_directory'];
+            if (extRule !== undefined) {
+                for (const p of paths) {
+                    if (isInsideWorkingDir(p, workingDir))
+                        continue;
+                    const d = this._resolveRule('external_directory', extRule, [p], workingDir);
+                    if (d)
+                        return d;
+                }
+            }
+        }
+        // 3. Групповые правила
+        for (const group of getToolGroups(toolName, capabilities)) {
+            const groupRule = this._config.rules[group];
+            if (groupRule === undefined)
+                continue;
+            const d = this._resolveRule(group, groupRule, isFile ? paths : [], workingDir);
+            if (d)
+                return d;
+        }
+        // 4. Глобальный '*'
+        const starRule = this._config.rules['*'];
+        if (starRule !== undefined) {
+            const d = this._resolveRule('*', starRule, isFile ? paths : [], workingDir);
+            if (d)
+                return d;
+        }
+        // 5. Дефолт: allow
+        return {
+            action: 'allow',
+            reason: `нет правил permissions для "${toolName}" — разрешено по умолчанию`,
+        };
+    }
+    _resolveRule(key, rule, paths, workingDir) {
+        if (typeof rule === 'string') {
+            return { action: rule, reason: `правило "${key}" → ${rule}`, matchedRule: key };
+        }
+        // Объект — файловые паттерны. Для тулов без путей учитываем только '*'.
+        if (paths.length === 0) {
+            const star = rule['*'];
+            if (star) {
+                return { action: star, reason: `правило "${key}.*" → ${star}`, matchedRule: `${key}.*` };
+            }
+            return undefined;
+        }
+        let starAction;
+        for (const [pattern, action] of Object.entries(rule)) {
+            if (pattern === '*') {
+                starAction = action;
+                continue;
+            }
+            for (const p of paths) {
+                if (matchPathPattern(pattern, p, workingDir)) {
+                    return {
+                        action,
+                        reason: `правило "${key}.${pattern}" → ${action} (путь: ${p})`,
+                        matchedRule: `${key}.${pattern}`,
+                    };
+                }
+            }
+        }
+        if (starAction) {
+            return {
+                action: starAction,
+                reason: `правило "${key}.*" → ${starAction}`,
+                matchedRule: `${key}.*`,
+            };
+        }
+        return undefined;
+    }
+}
+/** Резолвит все файловые параметры тула в абсолютные пути. */
+export function extractPaths(toolName, params, workingDir) {
+    const paramNames = TOOL_PATH_PARAMS[toolName];
+    if (!paramNames || paramNames.length === 0)
+        return [];
+    const result = [];
+    for (const name of paramNames) {
+        const value = params[name];
+        if (typeof value === 'string' && value.trim() !== '') {
+            result.push(resolvePath(value, workingDir));
+        }
+    }
+    return result;
+}
+/** Совпадает ли путь с паттерном (абсолютный или относительный от workingDir). */
+export function matchPathPattern(pattern, absolutePath, workingDir) {
+    if (globMatch(pattern, absolutePath))
+        return true;
+    if (isInsideWorkingDir(absolutePath, workingDir)) {
+        const rel = relative(workingDir, absolutePath);
+        if (globMatch(pattern, rel))
+            return true;
+    }
+    return false;
+}
+export function isInsideWorkingDir(p, workingDir) {
+    const abs = isAbsolute(p) ? normalize(p) : resolve(workingDir, p);
+    const dir = isAbsolute(workingDir) ? normalize(workingDir) : resolve(workingDir);
+    if (abs === dir)
+        return true;
+    return abs.startsWith(dir.endsWith(sep) ? dir : dir + sep);
+}
+//# sourceMappingURL=evaluator.js.map

package/dist/engine/permission/evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.js","sourceRoot":"","sources":["../../../src/engine/permission/evaluator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAiB9D;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAoC,EACpC,QAA8B,EAC9B,YAAiC;IAEjC,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,WAAW,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,YAAgC;IAC3E,OAAO,aAAa,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,YAAgC;IAClF,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAA2D,EAC3D,YAAoB;IAEpB,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,OAAyB;QAAzB,YAAO,GAAP,OAAO,CAAkB;IAAG,CAAC;IAE1D,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,KAA2B;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAE9C,0EAA0E;QAC1E,oEAAoE;QACpE,qEAAqE;QACrE,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;YAC9D,OAAO;gBACL,GAAG,QAAQ;gBACX,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,kCAAkC;aAC7D,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,gBAAgB,CAAC,KAA2B;QAClD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC;QACnH,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAEhC,yEAAyE;QACzE,kFAAkF;QAClF,oEAAoE;QACpE,IAAI,gBAAgB,CAAC,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC,IAAI,iBAAiB,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;YACvG,IAAI,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;gBAC5H,OAAO;oBACL,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,iDAAiD;oBACzD,WAAW,EAAE,YAAY;iBAC1B,CAAC;YACJ,CAAC;YACD,MAAM,iBAAiB,GAAG,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,2BAA2B,CAAC;YAC9F,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,2CAA2C,iBAAiB,GAAG;gBACvE,WAAW,EAAE,WAAW;aACzB,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,gFAAgF;QAChF,IAAI,YAAY,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,eAAe,EAAE,CAAC;YAClE,MAAM,YAAY,GAAG,sBAAsB,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;YACvE,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,OAAO,GAA8B,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;gBACnF,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3B,OAAO;wBACL,MAAM,EAAE,MAAM;wBACd,MAAM,EAAE,sCAAsC,OAAO,EAAE;wBACvD,WAAW,EAAE,UAAU;qBACxB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACnE,IAAI,CAAC;gBAAE,OAAO,CAAC,CAAC;QAClB,CAAC;QAED,qDAAqD;QACrD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACzD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;oBACtB,IAAI,kBAAkB,CAAC,CAAC,EAAE,UAAU,CAAC;wBAAE,SAAS;oBAChD,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;oBAC5E,IAAI,CAAC;wBAAE,OAAO,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,KAAK,MAAM,KAAK,IAAI,aAAa,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;YAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5C,IAAI,SAAS,KAAK,SAAS;gBAAE,SAAS;YACtC,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YAC/E,IAAI,CAAC;gBAAE,OAAO,CAAC,CAAC;QAClB,CAAC;QAED,oBAAoB;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;YAC5E,IAAI,CAAC;gBAAE,OAAO,CAAC,CAAC;QAClB,CAAC;QAED,mBAAmB;QACnB,OAAO;YACL,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,+BAA+B,QAAQ,4BAA4B;SAC5E,CAAC;IACJ,CAAC;IAEO,YAAY,CAClB,GAAW,EACX,IAAoB,EACpB,KAAe,EACf,UAAkB;QAElB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,IAAI,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;QAClF,CAAC;QAED,wEAAwE;QACxE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,GAAG,SAAS,IAAI,EAAE,EAAE,WAAW,EAAE,GAAG,GAAG,IAAI,EAAE,CAAC;YAC3F,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,UAAwC,CAAC;QAC7C,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;gBACpB,UAAU,GAAG,MAAM,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;oBAC7C,OAAO;wBACL,MAAM;wBACN,MAAM,EAAE,YAAY,GAAG,IAAI,OAAO,OAAO,MAAM,WAAW,CAAC,GAAG;wBAC9D,WAAW,EAAE,GAAG,GAAG,IAAI,OAAO,EAAE;qBACjC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YACf,OAAO;gBACL,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,YAAY,GAAG,SAAS,UAAU,EAAE;gBAC5C,WAAW,EAAE,GAAG,GAAG,IAAI;aACxB,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED,8DAA8D;AAC9D,MAAM,UAAU,YAAY,CAC1B,QAAgB,EAChB,MAA+B,EAC/B,UAAkB;IAElB,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,YAAoB,EAAE,UAAkB;IACxF,IAAI,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,kBAAkB,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC/C,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,CAAS,EAAE,UAAkB;IAC9D,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACjF,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;AAC7D,CAAC"}

package/dist/engine/permission/evaluator.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=evaluator.test.d.ts.map

package/dist/engine/permission/evaluator.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.test.d.ts","sourceRoot":"","sources":["../../../src/engine/permission/evaluator.test.ts"],"names":[],"mappings":""}

package/dist/engine/permission/evaluator.test.js

@@ -0,0 +1,367 @@
+import { describe, it, expect } from 'vitest';
+import { join } from 'node:path';
+import { PermissionEvaluator, extractPaths, isInsideWorkingDir } from './evaluator.js';
+import { deriveSubagentPermission } from './derive.js';
+import { globMatch } from '@itphx/synth-shared';
+const CWD = '/workspace/project';
+function evalCheck(config, toolName, params, capabilities) {
+    return new PermissionEvaluator(config).check({ toolName, params, workingDir: CWD, capabilities });
+}
+describe('globMatch', () => {
+    it('базовые паттерны', () => {
+        expect(globMatch('*.env', '.env')).toBe(true);
+        expect(globMatch('*.env', 'config/.env')).toBe(false);
+        expect(globMatch('**/*.env', 'config/.env')).toBe(true);
+        expect(globMatch('**/credentials.*', 'src/credentials.json')).toBe(true);
+        expect(globMatch('/tmp/*', '/tmp/foo.txt')).toBe(true);
+        expect(globMatch('/tmp/*', '/tmp/a/b.txt')).toBe(false);
+        expect(globMatch('src/**/*.ts', 'src/a/b/c.ts')).toBe(true);
+        expect(globMatch('src/*.ts', 'src/a.ts')).toBe(true);
+        expect(globMatch('src/*.ts', 'src/a/b.ts')).toBe(false);
+        expect(globMatch('*.{ts,js}', 'a.ts')).toBe(true);
+        expect(globMatch('*.{ts,js}', 'a.md')).toBe(false);
+    });
+});
+describe('PermissionEvaluator — приоритет правил', () => {
+    it('правило по имени тула приоритетнее группового и "*"', () => {
+        const cfg = {
+            rules: { '*': 'allow', read: { '*': 'allow' }, read_file: 'deny' },
+            askTimeoutMs: 30_000,
+        };
+        expect(evalCheck(cfg, 'read_file', { file_path: 'a.txt' }).action).toBe('deny');
+    });
+    it('групповое правило приоритетнее "*"', () => {
+        const cfg = {
+            rules: { '*': 'allow', read: 'deny' },
+            askTimeoutMs: 30_000,
+        };
+        expect(evalCheck(cfg, 'read_file', { file_path: 'a.txt' }).action).toBe('deny');
+        // не входящий в группу тул — только '*'
+        expect(evalCheck(cfg, 'web_fetch', { url: 'http://x' }).action).toBe('allow');
+    });
+    it('дефолт allow при пустом конфиге', () => {
+        const cfg = { rules: {}, askTimeoutMs: 30_000 };
+        expect(evalCheck(cfg, 'write_file', { file_path: 'a.txt' }).action).toBe('allow');
+    });
+    it('специфичный файловый паттерн побеждает "*" внутри группы', () => {
+        const cfg = {
+            rules: { read: { '*': 'allow', '*.env': 'ask' } },
+            askTimeoutMs: 30_000,
+        };
+        expect(evalCheck(cfg, 'read_file', { file_path: '.env' }).action).toBe('ask');
+        expect(evalCheck(cfg, 'read_file', { file_path: 'src/main.ts' }).action).toBe('allow');
+    });
+});
+describe('PermissionEvaluator — группы', () => {
+    it('read применяется к read_file/list_directory/glob', () => {
+        const cfg = { rules: { read: 'deny' }, askTimeoutMs: 30_000 };
+        expect(evalCheck(cfg, 'read_file', { file_path: 'a.txt' }).action).toBe('deny');
+        expect(evalCheck(cfg, 'list_directory', { path: 'src' }).action).toBe('deny');
+        expect(evalCheck(cfg, 'glob', { pattern: '**/*.ts', path: 'src' }).action).toBe('deny');
+    });
+    it('edit применяется к write_file/edit_file/delete_file/create_directory', () => {
+        const cfg = { rules: { edit: 'deny' }, askTimeoutMs: 30_000 };
+        expect(evalCheck(cfg, 'write_file', { file_path: 'a.txt', content: 'x' }).action).toBe('deny');
+        expect(evalCheck(cfg, 'edit_file', { file_path: 'a.txt', old_string: 'a', new_string: 'b' }).action).toBe('deny');
+        expect(evalCheck(cfg, 'delete_file', { file_path: 'a.txt' }).action).toBe('deny');
+        expect(evalCheck(cfg, 'create_directory', { path: 'new' }).action).toBe('deny');
+    });
+    it('shell применяется к execute_shell', () => {
+        const cfg = { rules: { shell: 'ask' }, askTimeoutMs: 30_000 };
+        expect(evalCheck(cfg, 'execute_shell', { command: 'ls' }).action).toBe('ask');
+    });
+    it('capability-имя группы работает (file_write)', () => {
+        const cfg = { rules: { file_write: 'deny' }, askTimeoutMs: 30_000 };
+        expect(evalCheck(cfg, 'write_file', { file_path: 'a.txt', content: 'x' }, ['file_write']).action).toBe('deny');
+    });
+    it('mcp-группа матчит динамические тулы по capability', () => {
+        const cfg = { rules: { mcp: 'deny' }, askTimeoutMs: 30_000 };
+        expect(evalCheck(cfg, 'some_mcp_tool', {}, ['mcp']).action).toBe('deny');
+    });
+});
+describe('PermissionEvaluator — файловые паттерны', () => {
+    it('паттерн матчится по относительному и абсолютному пути', () => {
+        const cfg = {
+            rules: { read: { '*': 'allow', '**/credentials.*': 'deny', '*.env': 'ask' } },
+            askTimeoutMs: 30_000,
+        };
+        const absCred = join(CWD, 'src', 'credentials.json');
+        expect(evalCheck(cfg, 'read_file', { file_path: absCred }).action).toBe('deny');
+        expect(evalCheck(cfg, 'read_file', { file_path: 'src/credentials.json' }).action).toBe('deny');
+        // *.env — только файлы в корне workingDir (вложенные требуют **)
+        expect(evalCheck(cfg, 'read_file', { file_path: 'config/.env' }).action).toBe('allow');
+        expect(evalCheck(cfg, 'read_file', { file_path: 'config/.env' }).matchedRule).toBe('read.*');
+    });
+    it('паттерн "*.env" матчит файл в корне workingDir', () => {
+        const cfg = {
+            rules: { read: { '*': 'allow', '*.env': 'ask' } },
+            askTimeoutMs: 30_000,
+        };
+        expect(evalCheck(cfg, 'read_file', { file_path: join(CWD, '.env') }).action).toBe('ask');
+        expect(evalCheck(cfg, 'read_file', { file_path: '.env' }).matchedRule).toBe('read.*.env');
+    });
+});
+describe('PermissionEvaluator — external_directory', () => {
+    it('путь вне workingDir проверяется по секции external_directory', () => {
+        const cfg = {
+            rules: { external_directory: { '*': 'ask', '/tmp/*': 'allow' } },
+            askTimeoutMs: 30_000,
+        };
+        expect(evalCheck(cfg, 'read_file', { file_path: '/tmp/x.txt' }).action).toBe('allow');
+        expect(evalCheck(cfg, 'read_file', { file_path: '/etc/passwd' }).action).toBe('ask');
+        // внутри workingDir external_directory не применяется
+        expect(evalCheck(cfg, 'read_file', { file_path: 'a.txt' }).action).toBe('allow');
+    });
+    it('external_directory работает для execute_shell cwd', () => {
+        const cfg = {
+            rules: { external_directory: { '*': 'deny' }, '*': 'allow' },
+            askTimeoutMs: 30_000,
+        };
+        expect(evalCheck(cfg, 'execute_shell', { command: 'ls', cwd: '/elsewhere' }).action).toBe('deny');
+    });
+});
+describe('PermissionEvaluator — plan_enter/plan_exit (имена тулов)', () => {
+    it('слой готов к ещё не реализованным тулам', () => {
+        const cfg = {
+            rules: { '*': 'allow', plan_enter: 'deny', plan_exit: 'deny', doom_loop: 'ask', question: 'deny' },
+            askTimeoutMs: 30_000,
+        };
+        expect(evalCheck(cfg, 'plan_enter', {}).action).toBe('deny');
+        expect(evalCheck(cfg, 'plan_exit', {}).action).toBe('deny');
+        expect(evalCheck(cfg, 'doom_loop', {}).action).toBe('ask');
+        expect(evalCheck(cfg, 'question', {}).action).toBe('deny');
+        expect(evalCheck(cfg, 'read_file', { file_path: 'a.txt' }).action).toBe('allow');
+    });
+});
+describe('PermissionEvaluator — plan mode (AD-025)', () => {
+    function planCheck(toolName, params, opts = {}) {
+        return new PermissionEvaluator({ rules: {}, askTimeoutMs: 30_000 }).check({
+            toolName,
+            params,
+            workingDir: CWD,
+            sessionMode: opts.sessionMode ?? 'act',
+            planMode: opts.planMode ?? 'auto',
+            planApproved: opts.planApproved ?? false,
+        });
+    }
+    it('mode=plan блокирует write/edit/delete тулы', () => {
+        expect(planCheck('write_file', { file_path: 'a.txt', content: 'x' }, { sessionMode: 'plan' }).action).toBe('deny');
+        expect(planCheck('edit_file', { file_path: 'a.txt', old_string: 'a', new_string: 'b' }, { sessionMode: 'plan' }).action).toBe('deny');
+        expect(planCheck('delete_file', { file_path: 'a.txt' }, { sessionMode: 'plan' }).action).toBe('deny');
+        expect(planCheck('create_directory', { path: 'new' }, { sessionMode: 'plan' }).action).toBe('deny');
+    });
+    it('mode=plan разрешает запись в .synth/plans/*.md', () => {
+        const d = planCheck('write_file', { file_path: '.synth/plans/2026-01-01-100000-plan.md', content: 'x' }, { sessionMode: 'plan' });
+        expect(d.action).toBe('allow');
+        expect(d.matchedRule).toBe('plan.plans');
+    });
+    it('mode=plan не блокирует read-тулы', () => {
+        expect(planCheck('read_file', { file_path: 'a.txt' }, { sessionMode: 'plan' }).action).toBe('allow');
+        expect(planCheck('grep_files', { path: 'src', pattern: 'x' }, { sessionMode: 'plan' }).action).toBe('allow');
+    });
+    it('mode=plan не блокирует plan_enter/plan_exit (сами управляют режимом)', () => {
+        expect(planCheck('plan_enter', {}, { sessionMode: 'plan' }).action).toBe('allow');
+        expect(planCheck('plan_exit', { plan: 'x' }, { sessionMode: 'plan' }).action).toBe('allow');
+    });
+    it('strict без утверждённого плана блокирует write', () => {
+        expect(planCheck('write_file', { file_path: 'a.txt', content: 'x' }, { planMode: 'strict', planApproved: false }).action).toBe('deny');
+    });
+    it('strict с утверждённым планом разрешает write', () => {
+        expect(planCheck('write_file', { file_path: 'a.txt', content: 'x' }, { planMode: 'strict', planApproved: true }).action).toBe('allow');
+    });
+    it('strict без плана разрешает чтение', () => {
+        expect(planCheck('read_file', { file_path: 'a.txt' }, { planMode: 'strict', planApproved: false }).action).toBe('allow');
+    });
+    it('mode=plan блокирует git-запись', () => {
+        expect(planCheck('git_commit', { path: '.' }, { sessionMode: 'plan' }).action).toBe('deny');
+        expect(planCheck('git_push', {}, { sessionMode: 'plan' }).action).toBe('deny');
+        expect(planCheck('git_pull', {}, { sessionMode: 'plan' }).action).toBe('deny');
+        expect(planCheck('git_checkout', { branch: 'main' }, { sessionMode: 'plan' }).action).toBe('deny');
+        expect(planCheck('git_stash', { action: 'push' }, { sessionMode: 'plan' }).action).toBe('deny');
+    });
+    it('strict без плана блокирует git-запись', () => {
+        expect(planCheck('git_commit', { path: '.' }, { planMode: 'strict', planApproved: false }).action).toBe('deny');
+    });
+    it('mode=plan оставляет git-чтение доступным', () => {
+        expect(planCheck('git_status', { path: '.' }, { sessionMode: 'plan' }).action).toBe('allow');
+        expect(planCheck('git_diff', {}, { sessionMode: 'plan' }).action).toBe('allow');
+        expect(planCheck('git_log', {}, { sessionMode: 'plan' }).action).toBe('allow');
+        expect(planCheck('git_branch_list', {}, { sessionMode: 'plan' }).action).toBe('allow');
+        expect(planCheck('git_show', {}, { sessionMode: 'plan' }).action).toBe('allow');
+        expect(planCheck('git_blame', {}, { sessionMode: 'plan' }).action).toBe('allow');
+    });
+    it('strict без плана оставляет git-чтение доступным', () => {
+        expect(planCheck('git_status', { path: '.' }, { planMode: 'strict', planApproved: false }).action).toBe('allow');
+    });
+    it('mode=plan в act-режиме не блокирует git-запись', () => {
+        expect(planCheck('git_commit', { path: '.' }, { sessionMode: 'act', planMode: 'auto' }).action).toBe('allow');
+    });
+    it('off никогда не блокирует write', () => {
+        expect(planCheck('write_file', { file_path: 'a.txt', content: 'x' }, { planMode: 'off', sessionMode: 'plan', planApproved: false }).action).toBe('allow');
+    });
+    it('auto в act-режиме не блокирует write', () => {
+        expect(planCheck('write_file', { file_path: 'a.txt', content: 'x' }, { planMode: 'auto', sessionMode: 'act' }).action).toBe('allow');
+    });
+});
+describe('PermissionEvaluator — MCP доступность по режимам (plan/act)', () => {
+    function mcpCheck(mcpToolSettings, opts = {}) {
+        return new PermissionEvaluator({ rules: {}, askTimeoutMs: 30_000 }).check({
+            toolName: 'github_create_issue',
+            params: {},
+            workingDir: CWD,
+            capabilities: ['mcp'],
+            sessionMode: opts.sessionMode ?? 'act',
+            mcpToolSettings,
+        });
+    }
+    it('plan=false в plan-режиме — deny', () => {
+        const d = mcpCheck({ github: { default: { plan: false, act: true } } }, { sessionMode: 'plan' });
+        expect(d.action).toBe('deny');
+        expect(d.matchedRule).toBe('mcp.mode');
+    });
+    it('plan=true в plan-режиме — allow', () => {
+        const d = mcpCheck({ github: { default: { plan: true, act: true } } }, { sessionMode: 'plan' });
+        expect(d.action).toBe('allow');
+    });
+    it('act=false в act-режиме — deny', () => {
+        const d = mcpCheck({ github: { default: { plan: true, act: false } } }, { sessionMode: 'act' });
+        expect(d.action).toBe('deny');
+    });
+    it('act=true в act-режиме — allow', () => {
+        const d = mcpCheck({ github: { default: { plan: true, act: true } } }, { sessionMode: 'act' });
+        expect(d.action).toBe('allow');
+    });
+    it('точечная настройка tools приоритетнее default', () => {
+        const d = mcpCheck({
+            github: { default: { plan: true, act: true }, tools: { create_issue: { plan: false, act: true } } },
+        }, { sessionMode: 'plan' });
+        expect(d.action).toBe('deny');
+    });
+    it('без настроек для сервера — доступен (обратная совместимость)', () => {
+        const d = mcpCheck({ other_server: { default: { plan: false, act: false } } }, { sessionMode: 'plan' });
+        expect(d.action).toBe('allow');
+    });
+    it('без mcpToolSettings — доступен (обратная совместимость)', () => {
+        const d = new PermissionEvaluator({ rules: {}, askTimeoutMs: 30_000 }).check({
+            toolName: 'github_create_issue',
+            params: {},
+            workingDir: CWD,
+            capabilities: ['mcp'],
+            sessionMode: 'plan',
+        });
+        expect(d.action).toBe('allow');
+    });
+    it('не-MCP тулы не затрагиваются настройками', () => {
+        const d = new PermissionEvaluator({ rules: {}, askTimeoutMs: 30_000 }).check({
+            toolName: 'read_file',
+            params: { file_path: 'a.txt' },
+            workingDir: CWD,
+            sessionMode: 'plan',
+            mcpToolSettings: { github: { default: { plan: false, act: false } } },
+        });
+        expect(d.action).toBe('allow');
+    });
+});
+describe('PermissionEvaluator — yolo mode (AD-025)', () => {
+    function yoloCheck(config, toolName, params, opts = {}) {
+        return new PermissionEvaluator(config).check({
+            toolName,
+            params,
+            workingDir: CWD,
+            capabilities: opts.capabilities,
+            sessionMode: opts.sessionMode ?? 'yolo',
+            planMode: opts.planMode ?? 'auto',
+            planApproved: opts.planApproved ?? false,
+        });
+    }
+    it('ask трансформируется в allow (автоподтверждение)', () => {
+        const cfg = { rules: { write_file: 'ask' }, askTimeoutMs: 30_000 };
+        const d = yoloCheck(cfg, 'write_file', { file_path: 'a.txt', content: 'x' });
+        expect(d.action).toBe('allow');
+        expect(d.reason).toContain('yolo');
+    });
+    it('ask на групповом правиле и "*" тоже трансформируется в allow', () => {
+        const cfg = { rules: { shell: 'ask' }, askTimeoutMs: 30_000 };
+        expect(yoloCheck(cfg, 'execute_shell', { command: 'ls' }).action).toBe('allow');
+        const starCfg = { rules: { '*': 'ask' }, askTimeoutMs: 30_000 };
+        expect(yoloCheck(starCfg, 'read_file', { file_path: 'a.txt' }).action).toBe('allow');
+    });
+    it('deny остаётся deny (не трансформируется)', () => {
+        const cfg = { rules: { write_file: 'deny', '*.env': 'deny' }, askTimeoutMs: 30_000 };
+        expect(yoloCheck(cfg, 'write_file', { file_path: 'a.txt', content: 'x' }).action).toBe('deny');
+    });
+    it('allow остаётся allow', () => {
+        const cfg = { rules: { read_file: 'allow' }, askTimeoutMs: 30_000 };
+        expect(yoloCheck(cfg, 'read_file', { file_path: 'a.txt' }).action).toBe('allow');
+    });
+    it('plan-рестрикция не активируется самим режимом yolo', () => {
+        // write не блокируется из-за yolo (режим plan блокирует — но yolo не plan)
+        const cfg = { rules: {}, askTimeoutMs: 30_000 };
+        expect(yoloCheck(cfg, 'write_file', { file_path: 'a.txt', content: 'x' }).action).toBe('allow');
+    });
+    it('в yolo deny от MCP-доступности остаётся deny', () => {
+        const cfg = { rules: {}, askTimeoutMs: 30_000 };
+        const d = new PermissionEvaluator(cfg).check({
+            toolName: 'github_create_issue',
+            params: {},
+            workingDir: CWD,
+            capabilities: ['mcp'],
+            sessionMode: 'yolo',
+            mcpToolSettings: { github: { default: { plan: true, act: false } } },
+        });
+        expect(d.action).toBe('deny');
+    });
+    it('strict без утверждённого плана блокирует write даже в yolo', () => {
+        const cfg = { rules: {}, askTimeoutMs: 30_000 };
+        const d = yoloCheck(cfg, 'write_file', { file_path: 'a.txt', content: 'x' }, { planMode: 'strict', planApproved: false });
+        expect(d.action).toBe('deny');
+    });
+});
+describe('deriveSubagentPermission', () => {
+    it('наследует правила родителя и добавляет deny на question/plan_enter/plan_exit/task', () => {
+        const parent = {
+            rules: { '*': 'allow', read: 'allow' },
+            askTimeoutMs: 10_000,
+        };
+        const derived = deriveSubagentPermission(parent);
+        expect(derived.askTimeoutMs).toBe(10_000);
+        expect(derived.rules['*']).toBe('allow');
+        expect(derived.rules.read).toBe('allow');
+        expect(derived.rules.question).toBe('deny');
+        expect(derived.rules.plan_enter).toBe('deny');
+        expect(derived.rules.plan_exit).toBe('deny');
+        expect(derived.rules.task).toBe('deny');
+        // deny на конкретное имя переопределяет allow из '*'
+        expect(evalCheck(derived, 'task', {}).action).toBe('deny');
+        expect(evalCheck(derived, 'question', {}).action).toBe('deny');
+    });
+    it('без родителя — только deny-дополнения', () => {
+        const derived = deriveSubagentPermission();
+        expect(derived.rules).toEqual({
+            question: 'deny',
+            plan_enter: 'deny',
+            plan_exit: 'deny',
+            task: 'deny',
+        });
+    });
+    it('не мутирует родительский конфиг', () => {
+        const parent = { rules: { '*': 'allow' }, askTimeoutMs: 5000 };
+        deriveSubagentPermission(parent);
+        expect(parent.rules).toEqual({ '*': 'allow' });
+    });
+});
+describe('extractPaths / isInsideWorkingDir', () => {
+    it('extractPaths резолвит файловые параметры', () => {
+        expect(extractPaths('read_file', { file_path: 'a.txt' }, CWD)).toEqual([join(CWD, 'a.txt')]);
+        expect(extractPaths('read_file', { file_path: '/abs/a.txt' }, CWD)).toEqual(['/abs/a.txt']);
+        expect(extractPaths('write_file', { file_path: '' }, CWD)).toEqual([]);
+        expect(extractPaths('execute_shell', { command: 'ls', cwd: 'sub' }, CWD)).toEqual([join(CWD, 'sub')]);
+        expect(extractPaths('web_fetch', { url: 'http://x' }, CWD)).toEqual([]);
+    });
+    it('isInsideWorkingDir', () => {
+        expect(isInsideWorkingDir(join(CWD, 'a.txt'), CWD)).toBe(true);
+        expect(isInsideWorkingDir(CWD, CWD)).toBe(true);
+        expect(isInsideWorkingDir('/tmp/x', CWD)).toBe(false);
+    });
+});
+//# sourceMappingURL=evaluator.test.js.map