@kilnai/cli 0.23.2 → 1.0.0

package/dist/wrapper/opencode-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-session.js","sourceRoot":"","sources":["../../src/wrapper/opencode-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAUjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAuDlD,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,GAAG,KAAwG,CAAC;IACnH,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAA4B,CAAC;AACtC,CAAC;AAmDD,MAAM,wBAAwB,GAC5B,yHAAyH,CAAC;AAE5H,SAAS,sBAAsB,CAC7B,iBAA0B,EAC1B,WAA6B,EAC7B,QAA+B;IAE/B,IAAI,iBAAiB,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,IAAI,WAAW,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,iBAAiB,KAAK,MAAM,EAAE,CAAC;QACjC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,QAAQ,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,sBAAsB,CAAC,MAA6B;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QAC7D,QAAQ,CAAC,GAAG,CACV,0BAA0B,MAAM,CAAC,WAAW,wEAAwE,CACrH,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5D,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;AACvB,CAAC;AAUD,SAAS,yBAAyB,CAAC,MAA4B;IAC7D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;QACnH,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,mBAAmB,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC5F,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,UAAU,KAAK,UAAU,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QACtF,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAClC,OAAO,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,KAAK,CAAC;AAC3E,CAAC;AAED,SAAS,gCAAgC,CACvC,IAA+B,EAC/B,WAAwC;IAExC,MAAM,IAAI,GAA8B,EAAE,GAAG,IAAI,EAAE,CAAC;IACpD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAE9B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;QACrC,MAAM,aAAa,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,aAAa,CAAC,GAAG,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;QACxC,IACE,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC;eAC9B,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,EAC9E,CAAC;YACD,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,+BAA+B,CACtC,WAAwC;IAExC,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,CAAC,gDAAgD,EAAE,GAAG,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,4BAA4B,CACnC,MAAc,EACd,sBAA0C,EAC1C,WAAwC;IAExC,MAAM,QAAQ,GAAa,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,sBAAsB,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,0BAA0B,GAAG,+BAA+B,CAAC,WAAW,CAAC,CAAC;IAChF,IAAI,0BAA0B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC9E,CAAC;AAMD,MAAM,OAAO,eAAe;IACjB,SAAS,CAAS;IAC3B,YAAY,GAAoC,IAAI,CAAC;IAEpC,OAAO,CAAwB;IAC/B,aAAa,CAAoE;IAC1F,gBAAgB,GAAkB,IAAI,CAAC;IACvC,gBAAgB,GAAkB,IAAI,CAAC;IACvC,YAAY,GAAG,CAAC,CAAC;IACjB,gBAAgB,GAA2B,IAAI,CAAC;IAChD,qBAAqB,GAA2B,IAAI,CAAC;IACrD,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,MAA6B;QACvC,IAAI,CAAC,SAAS,GAAG,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,aAAa,GAAG;YACnB,GAAG,EAAE,IAAI;YACT,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,MAAM,CAAC,eAAe,KAAK,SAAS;YAC/C,MAAM,EAAE,MAAM,CAAC,eAAe,KAAK,SAAS;YAC5C,gBAAgB,EAAE,QAAQ;YAC1B,cAAc,EAAE,EAAE;YAClB,gBAAgB,EAAE,IAAI;YACtB,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,IAAI;YAChB,gBAAgB,EAAE,sBAAsB,CACtC,MAAM,CAAC,iBAAiB,EACxB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,gBAAgB,CACxB;SACF,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,KAAK,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,CAAC,GAAG,CAAC,OAA0B;QACnC,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;QAC9C,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAC;QACxC,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,2DAA2D;QACxG,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QAE5C,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,IAAI,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBAChC,eAAe,CAAC,KAAK,EAAE,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAClC,OAAO,EACP,GAAG,EAAE;oBACH,eAAe,CAAC,KAAK,EAAE,CAAC;oBACxB,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC3B,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,IAAI,OAAe,CAAC;YACpB,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,KAAK,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC;YAExF,IAAI,qBAAyC,CAAC;YAC9C,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;oBAC/C,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;wBACjD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;wBAC9D,IAAI,MAAM,EAAE,iBAAiB,EAAE,CAAC;4BAC9B,qBAAqB,GAAG,MAAM,CAAC,iBAAiB,CAAC;wBACnD,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;oBAClF,CAAC;gBACH,CAAC;gBACD,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;oBACzB,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;gBACjC,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;oBACpC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBAChF,OAAO,GAAG,oBAAoB,UAAU,EAAE,CAAC;gBAC7C,CAAC;gBACD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,IAAI,CAAC,gBAAiB,CAAC;YACnC,CAAC;YAED,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAEnE,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,QAAQ,CAAC;gBAC9D,MAAM,SAAS,GACb,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;gBAC7E,MAAM,iBAAiB,GAAG,gCAAgC,CACxD;oBACE,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,SAAS;iBACpB,EACD,IAAI,CAAC,OAAO,CAAC,WAAW,CACzB,CAAC;gBACF,MAAM,MAAM,CAAC,MAAM;qBAChB,MAAM,CAAC;oBACN,IAAI,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE;oBACvC,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE;iBAC1B,CAAC;qBACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;oBACtB,OAAO,CAAC,KAAK,CACX,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACvF,CAAC;gBACJ,CAAC,CAAC,CAAC;gBAEL,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;gBACrD,IAAI,YAAY,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC7C,MAAM,QAAQ,GAA4B;wBACxC,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;wBAC/B,OAAO,EAAE,IAAI;qBACd,CAAC;oBACF,MAAM,MAAM,CAAC,MAAM;yBAChB,MAAM,CAAC;wBACN,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;wBACjC,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE;qBAC1B,CAAC;yBACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;wBACtB,OAAO,CAAC,KAAK,CACX,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC3F,CAAC;oBACJ,CAAC,CAAC,CAAC;gBACP,CAAC;qBAAM,IAAI,YAAY,EAAE,CAAC;oBACxB,KAAK,CAAC,iCAAiC,YAAY,qCAAqC,CAAC,CAAC;gBAC5F,CAAC;gBAED,MAAM,MAAM,CAAC,MAAM;qBAChB,MAAM,CAAC;oBACN,IAAI,EAAE,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;oBAC5C,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE;iBAC1B,CAAC;qBACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;oBACtB,OAAO,CAAC,KAAK,CACX,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClG,CAAC;gBACJ,CAAC,CAAC,CAAC;gBAEL,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;oBACvB,MAAM,MAAM,CAAC,MAAM;yBAChB,MAAM,CAAC;wBACN,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAA6B;wBAC9D,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE;qBAC1B,CAAC;yBACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;wBACtB,OAAO,CAAC,KAAK,CACX,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7F,CAAC;oBACJ,CAAC,CAAC,CAAC;gBACP,CAAC;YACH,CAAC;YAED,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;oBACxC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CACxC,EAAE,SAAS,EAAE,qBAAqB,EAAE,SAAS,EAAE,GAAG,EAAE,EACpD,EAAE,YAAY,EAAE,IAAI,EAAE,CACvB,CAAC;oBACF,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC,IAAK,CAAC,EAAE,CAAC;gBAC7C,CAAC;qBAAM,CAAC;oBACN,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAC9C,EAAE,SAAS,EAAE,GAAG,EAAE,EAClB,EAAE,YAAY,EAAE,IAAI,EAAE,CACvB,CAAC;oBACF,IAAI,CAAC,gBAAgB,GAAG,YAAY,CAAC,IAAK,CAAC,EAAE,CAAC;gBAChD,CAAC;YACH,CAAC;YAED,IAAI,CAAC,qBAAqB,GAAG,IAAI,eAAe,EAAE,CAAC;YACnD,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7C,MAAM,EAAE,IAAI,CAAC,qBAAqB,CAAC,MAAM;aAC1C,CAAC,CAAC;YAEH,MAAM,UAAU,GAAuB,EAAE,CAAC;YAK1C,IAAI,UAAU,GAAiD,IAAI,CAAC;YACpE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;YAExC,kBAAkB;iBACf,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;gBACzB,IAAI,CAAC;oBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;wBACjC,IAAI,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,OAAO;4BAAE,MAAM;wBACtD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;4BACxB,MAAM,OAAO,GAAG,UAAU,CAAC;4BAC3B,UAAU,GAAG,IAAI,CAAC;4BAClB,OAAO,CAAC,KAAK,CAAC,CAAC;wBACjB,CAAC;6BAAM,CAAC;4BACN,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBACzB,CAAC;oBACH,CAAC;oBACD,KAAK,MAAM,MAAM,IAAI,SAAS;wBAAE,MAAM,EAAE,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACP,KAAK,MAAM,MAAM,IAAI,SAAS;wBAAE,MAAM,EAAE,CAAC;gBAC3C,CAAC;YACH,CAAC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE;gBACV,KAAK,MAAM,MAAM,IAAI,SAAS;oBAAE,MAAM,EAAE,CAAC;YAC3C,CAAC,CAAC,CAAC;YAEL,MAAM,YAAY,GAAG,GAAgC,EAAE;gBACrD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,EAAG,CAAC,CAAC;gBACvE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;oBAC7B,UAAU,GAAG,OAAO,CAAC;oBACrB,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrC,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;YAEF,MAAM,2BAA2B,GAAG,uBAAuB,CACzD,OAAO,CAAC,MAAM,EACd,wBAAwB,CAAC;gBACvB,kBAAkB,EAAE,UAAU;gBAC9B,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;aACpC,CAAC,CACH,CAAC;YACF,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,OAAO;iBACtC,MAAM,CACL;gBACE,SAAS,EAAE,IAAI,CAAC,gBAAiB;gBACjC,KAAK,EAAE,CAAC;wBACN,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,4BAA4B,CAChC,2BAA2B,EAC3B,IAAI,CAAC,OAAO,CAAC,sBAAsB,EACnC,IAAI,CAAC,OAAO,CAAC,WAAW,CACzB;qBACF,CAAC;gBACF,SAAS,EAAE,GAAG;aACf,EACD,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB;iBACA,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAEtC,IAAI,CAAC,YAAY,GAAG,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC;YAExE,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;gBACnC,IAAI,CAAC,KAAK;oBAAE,MAAM;gBAElB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oBAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAIf,CAAC;oBACd,IAAI,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC,gBAAgB;wBAAE,SAAS;oBACzD,IAAI,KAAK,EAAE,IAAI,KAAK,cAAc,IAAI,KAAK,EAAE,IAAI,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;wBACxE,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;wBACtC,MAAM;4BACJ,IAAI,EAAE,aAAa;4BACnB,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;4BACtB,IAAI,EAAE,QAAiB;4BACvB,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;4BACnC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY;4BACrC,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,eAAe;yBAC5C,CAAC;oBACJ,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;oBAChD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAKf,CAAC;oBACd,IAAI,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC,gBAAgB;wBAAE,SAAS;oBACzD,IAAI,KAAK,EAAE,KAAK,KAAK,MAAM,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC;wBAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBACxE,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;4BAC7B,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;wBACvE,CAAC;6BAAM,CAAC;4BACN,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;wBACrD,CAAC;oBACH,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;oBAClD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAgBf,CAAC;oBACd,IAAI,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC,gBAAgB;wBAAE,SAAS;oBACzD,IAAI,CAAC,KAAK,EAAE,IAAI;wBAAE,SAAS;oBAE3B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI;wBAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;oBAE5D,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBACzB,IAAI,IAAI,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;4BACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC;4BACxC,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;4BAClD,MAAM;gCACJ,IAAI,EAAE,UAAU;gCAChB,QAAQ;gCACR,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;gCAC9B,GAAG,CAAC,SAAS;oCACX,CAAC,CAAC,EAAE,MAAM,EAAE,KAAc,EAAE,WAAW,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EAAE;oCACzE,CAAC,CAAC,EAAE,CAAC;6BACR,CAAC;wBACJ,CAAC;6BAAM,IAAI,IAAI,CAAC,KAAK,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;4BAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;4BAClC,MAAM,SAAS,GACb,MAAM,KAAK,SAAS;gCAClB,CAAC,CAAC,MAAM;gCACR,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,KAAK,SAAS;oCAC1C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;oCACpC,CAAC,CAAC,EAAE,CAAC;4BACX,MAAM;gCACJ,IAAI,EAAE,aAAa;gCACnB,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;gCAChC,MAAM,EAAE,SAAS;6BAClB,CAAC;wBACJ,CAAC;6BAAM,IAAI,IAAI,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;4BAC1C,MAAM;gCACJ,IAAI,EAAE,aAAa;gCACnB,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;gCAChC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,aAAa;6BAC1C,CAAC;wBACJ,CAAC;oBACH,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;oBAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAGf,CAAC;oBACd,IAAI,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC,gBAAgB;wBAAE,SAAS;oBACzD,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;wBACnC,MAAM;oBACR,CAAC;gBACH,CAAC;gBAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;oBAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAGf,CAAC;oBACd,IAAI,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC,gBAAgB;wBAAE,SAAS;oBACzD,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,KAAK,SAAS;wBACxC,CAAC,CAAC,sCAAsC,KAAK,CAAC,MAAM,SAAS;wBAC7D,CAAC,CAAC,mBAAmB,CAAC;oBACxB,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC;oBACrE,SAAS;gBACX,CAAC;gBAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;oBAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAGf,CAAC;oBACd,IAAI,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC,gBAAgB;wBAAE,SAAS;oBACzD,IAAI,KAAK,EAAE,QAAQ,EAAE,CAAC;wBACpB,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;oBACxE,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;oBAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAGf,CAAC;oBACd,IAAI,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC,gBAAgB;wBAAE,SAAS;oBACzD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;oBAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;wBACtC,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAC3D,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAClC,CAAC;oBACH,CAAC;oBACD,iBAAiB,CAAC,KAAK,EAAE,CAAC;oBAC1B,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;wBACxC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBAClC,CAAC;oBACD,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACnE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;oBAC/E,SAAS;gBACX,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC;YACxD,MAAM,OAAO,GAAG,UAAU,KAAK,WAAW,CAAC;YAC3C,MAAM;gBACJ,IAAI,EAAE,WAAW;gBACjB,QAAQ,EAAE,IAAI,CAAC,YAAY;gBAC3B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,OAAO;gBACP,gBAAgB,EAAE,KAAK;aACxB,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACjD,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC7C,MAAM,KAAK,CAAC,MAAM,CAAC;oBACjB,SAAS,EAAE,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,SAAS;oBAClD,QAAQ,EAAE,UAAU;oBACpB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;oBACvB,WAAW;oBACX,IAAI,EAAE,IAAI,CAAC,YAAY;oBACvB,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;oBAC7B,iBAAiB,EAAE,IAAI,CAAC,gBAAgB,IAAI,SAAS;iBACtD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,iDAAiD,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACrH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM;gBACJ,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBACzD,WAAW,EAAE,KAAK;aACnB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC7B,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC;QACpC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,IAAY,EACZ,GAAW,EACX,GAA4B;QAE5B,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;QAE5C,KAAK,CAAC,wBAAwB,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChE,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;QAEhC,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE;YACrC,GAAG;YACH,GAAG,EAAE,QAAQ;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAEzB,IAAI,UAAU,GAAG,IAAI,CAAC;QACtB,IAAI,YAAY,GAAG,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,yCAAyC,CAAC;QAE5D,MAAM,WAAW,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,MAAM,CAAC,IAAI,KAAK,CAAC,6DAA6D,YAAY,EAAE,CAAC,CAAC,CAAC;YACjG,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE;gBAClC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC7B,KAAK,CAAC,6BAA6B,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACpC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACf,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACpC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;oBAChD,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC;YAEF,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACpC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACvC,YAAY,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChC,UAAU,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBAC9B,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,GAAG,CAAC,OAAO,aAAa,YAAY,EAAE,CAAC,CAAC,CAAC;YAC/F,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAmB,EAAE,EAAE;gBACtC,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,KAAK,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAC;gBACnD,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChC,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,IAAI,aAAa,YAAY,EAAE,CAAC,CAAC,CAAC;gBACxF,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,WAAW,CAAC;QAClB,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,iBAAiB;QACvB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QAClE,MAAM,aAAa,GAAG;YACpB,GAAG,OAAO,2BAA2B;YACrC,GAAG,OAAO,uCAAuC;SAClD,CAAC;QACF,MAAM,UAAU,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,GAAG,aAAa,CAAC,CAAC;QAElE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,QAAQ,CAAC,IAAI,SAAS,aAAa,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC1D,OAAO,SAAS,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW;YACb,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,CAAC;IAEO,iBAAiB;QACvB,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YACnD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC;QACpC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;CACF"}

package/dist/wrapper/permission-evaluator.d.ts

@@ -0,0 +1,57 @@
+import { normalizePermissionPolicy } from "./permission-normalizer.js";
+import type { KilnPermissionAction, KilnPermissionPolicy } from "./session.js";
+type NormalizedPermissionPolicy = ReturnType<typeof normalizePermissionPolicy>;
+export interface PermissionScopeInfo {
+    readonly agent?: string;
+    readonly matchedScope: boolean;
+    readonly inherit: boolean;
+    readonly mcpTools?: readonly string[];
+}
+export type PermissionDecisionSource = "tool-rule" | "command-rule" | "file-governance.deny" | "file-governance.ask" | "file-governance.allow" | "data-firewall" | "default";
+export interface PermissionDecisionMatch {
+    readonly source: PermissionDecisionSource;
+    readonly key: string;
+    readonly reason?: string;
+    readonly rule: unknown;
+}
+export interface PermissionDecision {
+    readonly action: KilnPermissionAction;
+    readonly source: PermissionDecisionSource;
+    readonly scope: PermissionScopeInfo;
+    readonly match?: PermissionDecisionMatch;
+    readonly dataFirewallAction?: "allow" | "redact" | "deny";
+}
+export type PermissionEvaluationRequest = {
+    readonly kind: "tool";
+    readonly tool: string;
+} | {
+    readonly kind: "command";
+    readonly command: string;
+    readonly shell?: "bash" | "sh" | "zsh" | "any";
+} | {
+    readonly kind: "file";
+    readonly filePath: string;
+} | {
+    readonly kind: "destination";
+    readonly destination: string;
+    readonly classifications?: readonly string[];
+};
+export interface PermissionEvaluator {
+    readonly scope: PermissionScopeInfo;
+    readonly effectivePolicy: NormalizedPermissionPolicy;
+    evaluate(request: PermissionEvaluationRequest): PermissionDecision;
+    evaluateTool(tool: string): PermissionDecision;
+    evaluateCommand(command: string, shell?: "bash" | "sh" | "zsh" | "any"): PermissionDecision;
+    evaluateFile(filePath: string): PermissionDecision;
+    evaluateDestination(destination: string, classifications?: readonly string[]): PermissionDecision;
+}
+export interface EffectivePermissionPolicyResult {
+    readonly policy: NormalizedPermissionPolicy;
+    readonly scope: PermissionScopeInfo;
+}
+export declare function resolveEffectivePermissionPolicy(policy: KilnPermissionPolicy, agent?: string): EffectivePermissionPolicyResult;
+export declare function createPermissionEvaluator(policy: KilnPermissionPolicy, options?: {
+    readonly agent?: string;
+}): PermissionEvaluator;
+export {};
+//# sourceMappingURL=permission-evaluator.d.ts.map

package/dist/wrapper/permission-evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-evaluator.d.ts","sourceRoot":"","sources":["../../src/wrapper/permission-evaluator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAIV,oBAAoB,EAEpB,oBAAoB,EAErB,MAAM,cAAc,CAAC;AAEtB,KAAK,0BAA0B,GAAG,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE/E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,MAAM,wBAAwB,GAChC,WAAW,GACX,cAAc,GACd,sBAAsB,GACtB,qBAAqB,GACrB,uBAAuB,GACvB,eAAe,GACf,SAAS,CAAC;AAEd,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;CAC3D;AAED,MAAM,MAAM,2BAA2B,GACnC;IACE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,CAAC;CAChD,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C,CAAC;AAEN,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,0BAA0B,CAAC;IACrD,QAAQ,CAAC,OAAO,EAAE,2BAA2B,GAAG,kBAAkB,CAAC;IACnE,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAAC;IAC/C,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,kBAAkB,CAAC;IAC5F,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CAAC;IACnD,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,kBAAkB,CAAC;CACnG;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAED,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,oBAAoB,EAC5B,KAAK,CAAC,EAAE,MAAM,GACb,+BAA+B,CA6CjC;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACpC,mBAAmB,CAyCrB"}

package/dist/wrapper/permission-evaluator.js

@@ -0,0 +1,310 @@
+import { normalizePermissionPolicy } from "./permission-normalizer.js";
+export function resolveEffectivePermissionPolicy(policy, agent) {
+    const normalizedRoot = normalizePermissionPolicy(policy);
+    if (!agent) {
+        return {
+            policy: normalizedRoot,
+            scope: { matchedScope: false, inherit: true },
+        };
+    }
+    const matchedScope = findAgentScope(normalizedRoot.agentScopes, agent);
+    if (!matchedScope) {
+        return {
+            policy: normalizedRoot,
+            scope: { agent, matchedScope: false, inherit: true },
+        };
+    }
+    const inherit = matchedScope.inherit ?? true;
+    const basePolicy = inherit
+        ? normalizedRoot
+        : {
+            approval: normalizedRoot.approval,
+            sandbox: normalizedRoot.sandbox,
+            safeDefaults: false,
+            auditLog: normalizedRoot.auditLog,
+        };
+    const scopedPolicy = {
+        ...basePolicy,
+        tools: mergeToolRules(basePolicy.tools, matchedScope.tools, inherit),
+        commands: mergeCommandRules(basePolicy.commands, matchedScope.commands, inherit),
+        fileGovernance: mergeFileGovernance(basePolicy.fileGovernance, matchedScope.fileGovernance, inherit),
+        dataFirewall: inherit ? basePolicy.dataFirewall : [],
+        agentScopes: [],
+    };
+    return {
+        policy: normalizePermissionPolicy(scopedPolicy),
+        scope: {
+            agent,
+            matchedScope: true,
+            inherit,
+            mcpTools: matchedScope.mcpTools,
+        },
+    };
+}
+export function createPermissionEvaluator(policy, options) {
+    const effective = resolveEffectivePermissionPolicy(policy, options?.agent);
+    return {
+        scope: effective.scope,
+        effectivePolicy: effective.policy,
+        evaluate(request) {
+            switch (request.kind) {
+                case "tool":
+                    return evaluateToolRule(effective.policy, effective.scope, request.tool);
+                case "command":
+                    return evaluateCommandRule(effective.policy, effective.scope, request.command, request.shell ?? "any");
+                case "file":
+                    return evaluateFileGovernanceRule(effective.policy, effective.scope, request.filePath);
+                case "destination":
+                    return evaluateDataFirewallRule(effective.policy, effective.scope, request.destination, request.classifications ?? []);
+            }
+        },
+        evaluateTool(tool) {
+            return evaluateToolRule(effective.policy, effective.scope, tool);
+        },
+        evaluateCommand(command, shell = "any") {
+            return evaluateCommandRule(effective.policy, effective.scope, command, shell);
+        },
+        evaluateFile(filePath) {
+            return evaluateFileGovernanceRule(effective.policy, effective.scope, filePath);
+        },
+        evaluateDestination(destination, classifications = []) {
+            return evaluateDataFirewallRule(effective.policy, effective.scope, destination, classifications);
+        },
+    };
+}
+function evaluateToolRule(policy, scope, tool) {
+    const matched = findLastMatch(policy.tools, (rule) => matchesPattern(tool, rule.tool));
+    if (!matched) {
+        return {
+            action: defaultAction(policy.approval),
+            source: "default",
+            scope,
+        };
+    }
+    return {
+        action: matched.rule.action,
+        source: "tool-rule",
+        scope,
+        match: {
+            source: "tool-rule",
+            key: matched.rule.tool,
+            reason: matched.rule.reason,
+            rule: matched.rule,
+        },
+    };
+}
+function evaluateCommandRule(policy, scope, command, shell) {
+    const matched = findLastMatch(policy.commands, (rule) => {
+        if (rule.shell && rule.shell !== "any" && rule.shell !== shell) {
+            return false;
+        }
+        return matchesPattern(command, rule.pattern);
+    });
+    if (!matched) {
+        return {
+            action: defaultAction(policy.approval),
+            source: "default",
+            scope,
+        };
+    }
+    return {
+        action: matched.rule.action,
+        source: "command-rule",
+        scope,
+        match: {
+            source: "command-rule",
+            key: matched.rule.pattern,
+            reason: matched.rule.reason,
+            rule: matched.rule,
+        },
+    };
+}
+function evaluateFileGovernanceRule(policy, scope, filePath) {
+    const normalizedPath = normalizePath(filePath);
+    const denyMatch = findLastGlobMatch(policy.fileGovernance.denyGlobs ?? [], normalizedPath);
+    if (denyMatch) {
+        return {
+            action: "deny",
+            source: "file-governance.deny",
+            scope,
+            match: {
+                source: "file-governance.deny",
+                key: denyMatch,
+                rule: denyMatch,
+            },
+        };
+    }
+    const askMatch = findLastGlobMatch(policy.fileGovernance.askGlobs ?? [], normalizedPath);
+    if (askMatch) {
+        return {
+            action: "ask",
+            source: "file-governance.ask",
+            scope,
+            match: {
+                source: "file-governance.ask",
+                key: askMatch,
+                rule: askMatch,
+            },
+        };
+    }
+    const allowMatch = findLastGlobMatch(policy.fileGovernance.allowGlobs ?? [], normalizedPath);
+    if (allowMatch) {
+        return {
+            action: "allow",
+            source: "file-governance.allow",
+            scope,
+            match: {
+                source: "file-governance.allow",
+                key: allowMatch,
+                rule: allowMatch,
+            },
+        };
+    }
+    return {
+        action: defaultAction(policy.approval),
+        source: "default",
+        scope,
+    };
+}
+function evaluateDataFirewallRule(policy, scope, destination, classifications) {
+    const normalizedClassifications = new Set(classifications.map((value) => value.toLowerCase()));
+    const matched = findLastMatch(policy.dataFirewall, (rule) => {
+        if (!matchesPattern(destination, rule.destination)) {
+            return false;
+        }
+        if (!rule.classifications || rule.classifications.length === 0) {
+            return true;
+        }
+        return rule.classifications.some((classification) => {
+            return normalizedClassifications.has(classification.toLowerCase());
+        });
+    });
+    if (!matched) {
+        return {
+            action: "allow",
+            source: "default",
+            scope,
+            dataFirewallAction: "allow",
+        };
+    }
+    return {
+        action: matched.rule.action === "deny" ? "deny" : "allow",
+        source: "data-firewall",
+        scope,
+        dataFirewallAction: matched.rule.action,
+        match: {
+            source: "data-firewall",
+            key: matched.rule.destination,
+            reason: matched.rule.reason,
+            rule: matched.rule,
+        },
+    };
+}
+function mergeToolRules(base, scoped, inherit) {
+    if (!scoped || scoped.length === 0) {
+        return inherit ? (base ?? []) : [];
+    }
+    if (!inherit) {
+        return [...scoped];
+    }
+    return [...(base ?? []), ...scoped];
+}
+function mergeCommandRules(base, scoped, inherit) {
+    if (!scoped || scoped.length === 0) {
+        return inherit ? (base ?? []) : [];
+    }
+    if (!inherit) {
+        return [...scoped];
+    }
+    return [...(base ?? []), ...scoped];
+}
+function mergeFileGovernance(base, scoped, inherit) {
+    if (!scoped) {
+        return inherit ? (base ?? {}) : {};
+    }
+    if (!inherit) {
+        return {
+            excludeFromContext: scoped.excludeFromContext,
+            denyGlobs: deduplicateStrings(scoped.denyGlobs ?? []),
+            askGlobs: deduplicateStrings(scoped.askGlobs ?? []),
+            allowGlobs: deduplicateStrings(scoped.allowGlobs ?? []),
+        };
+    }
+    return {
+        excludeFromContext: scoped.excludeFromContext ?? base?.excludeFromContext,
+        denyGlobs: deduplicateStrings([...(base?.denyGlobs ?? []), ...(scoped.denyGlobs ?? [])]),
+        askGlobs: deduplicateStrings([...(base?.askGlobs ?? []), ...(scoped.askGlobs ?? [])]),
+        allowGlobs: deduplicateStrings([...(base?.allowGlobs ?? []), ...(scoped.allowGlobs ?? [])]),
+    };
+}
+function deduplicateStrings(values) {
+    return [...new Set(values)];
+}
+function findAgentScope(scopes, agent) {
+    for (let i = scopes.length - 1; i >= 0; i--) {
+        const scope = scopes[i];
+        if (!scope)
+            continue;
+        if (scope.agent === agent) {
+            return scope;
+        }
+    }
+    return undefined;
+}
+function findLastGlobMatch(globs, value) {
+    for (let i = globs.length - 1; i >= 0; i--) {
+        const glob = globs[i];
+        if (!glob)
+            continue;
+        if (matchesGlob(value, glob)) {
+            return glob;
+        }
+    }
+    return undefined;
+}
+function findLastMatch(values, predicate) {
+    for (let i = values.length - 1; i >= 0; i--) {
+        const value = values[i];
+        if (value === undefined)
+            continue;
+        if (predicate(value)) {
+            return { index: i, rule: value };
+        }
+    }
+    return undefined;
+}
+function defaultAction(approval) {
+    const effectiveApproval = approval ?? "on-request";
+    if (effectiveApproval === "never")
+        return "allow";
+    if (effectiveApproval === "on-failure")
+        return "allow";
+    if (effectiveApproval === "untrusted")
+        return "deny";
+    return "ask";
+}
+function matchesPattern(value, pattern) {
+    const normalizedValue = normalizePath(value);
+    const normalizedPattern = normalizePath(pattern);
+    if (!normalizedPattern.includes("*") && !normalizedPattern.includes("?")) {
+        return normalizedValue === normalizedPattern;
+    }
+    return matchesGlob(normalizedValue, normalizedPattern);
+}
+function matchesGlob(value, glob) {
+    const pattern = globToRegExp(glob);
+    return pattern.test(value);
+}
+function globToRegExp(glob) {
+    const normalized = normalizePath(glob);
+    const escaped = normalized.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+    const withDoubleStarToken = escaped.replace(/\*\*/g, "__DOUBLE_STAR__");
+    const withSingleStars = withDoubleStarToken.replace(/\*/g, "[^/]*");
+    const withQuestionMarks = withSingleStars.replace(/\?/g, "[^/]");
+    const finalPattern = withQuestionMarks.replace(/__DOUBLE_STAR__/g, ".*");
+    return new RegExp(`^${finalPattern}$`);
+}
+function normalizePath(value) {
+    return value.replace(/\\/g, "/");
+}
+//# sourceMappingURL=permission-evaluator.js.map

package/dist/wrapper/permission-evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-evaluator.js","sourceRoot":"","sources":["../../src/wrapper/permission-evaluator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AA+EvE,MAAM,UAAU,gCAAgC,CAC9C,MAA4B,EAC5B,KAAc;IAEd,MAAM,cAAc,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,cAAc,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACvE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,KAAK,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;SACrD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,IAAI,CAAC;IAC7C,MAAM,UAAU,GAAyB,OAAO;QAC9C,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC;YACE,QAAQ,EAAE,cAAc,CAAC,QAAQ;YACjC,OAAO,EAAE,cAAc,CAAC,OAAO;YAC/B,YAAY,EAAE,KAAK;YACnB,QAAQ,EAAE,cAAc,CAAC,QAAQ;SAClC,CAAC;IAEN,MAAM,YAAY,GAAyB;QACzC,GAAG,UAAU;QACb,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC;QACpE,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;QAChF,cAAc,EAAE,mBAAmB,CAAC,UAAU,CAAC,cAAc,EAAE,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC;QACpG,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE;QACpD,WAAW,EAAE,EAAE;KAChB,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,yBAAyB,CAAC,YAAY,CAAC;QAC/C,KAAK,EAAE;YACL,KAAK;YACL,YAAY,EAAE,IAAI;YAClB,OAAO;YACP,QAAQ,EAAE,YAAY,CAAC,QAAQ;SAChC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAA4B,EAC5B,OAAqC;IAErC,MAAM,SAAS,GAAG,gCAAgC,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAE3E,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,eAAe,EAAE,SAAS,CAAC,MAAM;QACjC,QAAQ,CAAC,OAAoC;YAC3C,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrB,KAAK,MAAM;oBACT,OAAO,gBAAgB,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC3E,KAAK,SAAS;oBACZ,OAAO,mBAAmB,CACxB,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,KAAK,EACf,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,KAAK,IAAI,KAAK,CACvB,CAAC;gBACJ,KAAK,MAAM;oBACT,OAAO,0BAA0B,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACzF,KAAK,aAAa;oBAChB,OAAO,wBAAwB,CAC7B,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,KAAK,EACf,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,eAAe,IAAI,EAAE,CAC9B,CAAC;YACN,CAAC;QACH,CAAC;QACD,YAAY,CAAC,IAAY;YACvB,OAAO,gBAAgB,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnE,CAAC;QACD,eAAe,CAAC,OAAe,EAAE,QAAuC,KAAK;YAC3E,OAAO,mBAAmB,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAChF,CAAC;QACD,YAAY,CAAC,QAAgB;YAC3B,OAAO,0BAA0B,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACjF,CAAC;QACD,mBAAmB,CAAC,WAAmB,EAAE,kBAAqC,EAAE;YAC9E,OAAO,wBAAwB,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;QACnG,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAkC,EAClC,KAA0B,EAC1B,IAAY;IAEZ,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;YACtC,MAAM,EAAE,SAAS;YACjB,KAAK;SACN,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;QAC3B,MAAM,EAAE,WAAW;QACnB,KAAK;QACL,KAAK,EAAE;YACL,MAAM,EAAE,WAAW;YACnB,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;YACtB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;YAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAkC,EAClC,KAA0B,EAC1B,OAAe,EACf,KAAoC;IAEpC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;QACtD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;YACtC,MAAM,EAAE,SAAS;YACjB,KAAK;SACN,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;QAC3B,MAAM,EAAE,cAAc;QACtB,KAAK;QACL,KAAK,EAAE;YACL,MAAM,EAAE,cAAc;YACtB,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO;YACzB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;YAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAkC,EAClC,KAA0B,EAC1B,QAAgB;IAEhB,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAE/C,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC;IAC3F,IAAI,SAAS,EAAE,CAAC;QACd,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,sBAAsB;YAC9B,KAAK;YACL,KAAK,EAAE;gBACL,MAAM,EAAE,sBAAsB;gBAC9B,GAAG,EAAE,SAAS;gBACd,IAAI,EAAE,SAAS;aAChB;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC;IACzF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,qBAAqB;YAC7B,KAAK;YACL,KAAK,EAAE;gBACL,MAAM,EAAE,qBAAqB;gBAC7B,GAAG,EAAE,QAAQ;gBACb,IAAI,EAAE,QAAQ;aACf;SACF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC;IAC7F,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,uBAAuB;YAC/B,KAAK;YACL,KAAK,EAAE;gBACL,MAAM,EAAE,uBAAuB;gBAC/B,GAAG,EAAE,UAAU;gBACf,IAAI,EAAE,UAAU;aACjB;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtC,MAAM,EAAE,SAAS;QACjB,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAkC,EAClC,KAA0B,EAC1B,WAAmB,EACnB,eAAkC;IAElC,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;QAC1D,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,EAAE;YAClD,OAAO,yBAAyB,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,SAAS;YACjB,KAAK;YACL,kBAAkB,EAAE,OAAO;SAC5B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QACzD,MAAM,EAAE,eAAe;QACvB,KAAK;QACL,kBAAkB,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;QACvC,KAAK,EAAE;YACL,MAAM,EAAE,eAAe;YACvB,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;YAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,IAAmD,EACnD,MAAqD,EACrD,OAAgB;IAEhB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAsD,EACtD,MAAwD,EACxD,OAAgB;IAEhB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAA0C,EAC1C,MAA4C,EAC5C,OAAgB;IAEhB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,SAAS,EAAE,kBAAkB,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;YACrD,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;YACnD,UAAU,EAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI,EAAE,kBAAkB;QACzE,SAAS,EAAE,kBAAkB,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;QACxF,QAAQ,EAAE,kBAAkB,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;QACrF,UAAU,EAAE,kBAAkB,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;KAC5F,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAyB;IACnD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,cAAc,CACrB,MAA2C,EAC3C,KAAa;IAEb,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAwB,EAAE,KAAa;IAChE,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CACpB,MAAoB,EACpB,SAAgC;IAEhC,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,QAA4C;IACjE,MAAM,iBAAiB,GAAG,QAAQ,IAAI,YAAY,CAAC;IACnD,IAAI,iBAAiB,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IAClD,IAAI,iBAAiB,KAAK,YAAY;QAAE,OAAO,OAAO,CAAC;IACvD,IAAI,iBAAiB,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,OAAe;IACpD,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzE,OAAO,eAAe,KAAK,iBAAiB,CAAC;IAC/C,CAAC;IACD,OAAO,WAAW,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,IAAY;IAC9C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACxE,MAAM,eAAe,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACpE,MAAM,iBAAiB,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;IACzE,OAAO,IAAI,MAAM,CAAC,IAAI,YAAY,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC"}

package/dist/wrapper/permission-normalizer.d.ts

@@ -0,0 +1,13 @@
+import type { KilnPermissionPolicy, KilnToolPermissionRule, KilnCommandPermissionRule, KilnFileGovernancePolicy, KilnDataFirewallRule } from "./session.js";
+export declare const SAFE_DEFAULTS_TOOL_RULES: readonly KilnToolPermissionRule[];
+export declare const SAFE_DEFAULTS_COMMAND_RULES: readonly KilnCommandPermissionRule[];
+export declare const SAFE_DEFAULTS_FILE_GOVERNANCE: KilnFileGovernancePolicy;
+export declare const SAFE_DEFAULTS_DATA_FIREWALL: readonly KilnDataFirewallRule[];
+export declare function normalizePermissionPolicy(policy: KilnPermissionPolicy): KilnPermissionPolicy & {
+    tools: readonly KilnToolPermissionRule[];
+    commands: readonly KilnCommandPermissionRule[];
+    fileGovernance: KilnFileGovernancePolicy;
+    dataFirewall: readonly KilnDataFirewallRule[];
+    agentScopes: readonly import("./session.js").KilnAgentPermissionScope[];
+};
+//# sourceMappingURL=permission-normalizer.d.ts.map

package/dist/wrapper/permission-normalizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-normalizer.d.ts","sourceRoot":"","sources":["../../src/wrapper/permission-normalizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,EACrB,MAAM,cAAc,CAAC;AAEtB,eAAO,MAAM,wBAAwB,EAAE,SAAS,sBAAsB,EAarE,CAAC;AAEF,eAAO,MAAM,2BAA2B,EAAE,SAAS,yBAAyB,EAe3E,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,wBAU3C,CAAC;AAEF,eAAO,MAAM,2BAA2B,EAAE,SAAS,oBAAoB,EAMtE,CAAC;AAEF,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,oBAAoB,GAAG,oBAAoB,GAAG;IAC9F,KAAK,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACzC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC/C,cAAc,EAAE,wBAAwB,CAAC;IACzC,YAAY,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC9C,WAAW,EAAE,SAAS,OAAO,cAAc,EAAE,wBAAwB,EAAE,CAAC;CACzE,CA0BA"}

package/dist/wrapper/permission-normalizer.js

@@ -0,0 +1,88 @@
+export const SAFE_DEFAULTS_TOOL_RULES = [
+    { tool: "Read", action: "allow" },
+    { tool: "Glob", action: "allow" },
+    { tool: "Grep", action: "allow" },
+    { tool: "List", action: "allow" },
+    { tool: "LSP", action: "allow" },
+    { tool: "CodeSearch", action: "allow" },
+    { tool: "Edit", action: "ask" },
+    { tool: "Task", action: "ask" },
+    { tool: "Bash", action: "ask" },
+    { tool: "WebFetch", action: "deny" },
+    { tool: "WebSearch", action: "deny" },
+    { tool: "ExternalDirectory", action: "deny" },
+];
+export const SAFE_DEFAULTS_COMMAND_RULES = [
+    { pattern: "git status*", action: "allow" },
+    { pattern: "git diff*", action: "allow" },
+    { pattern: "git log*", action: "allow" },
+    { pattern: "git show*", action: "allow" },
+    { pattern: "bun test*", action: "ask" },
+    { pattern: "npm test*", action: "ask" },
+    { pattern: "rm *", action: "ask" },
+    { pattern: "mv *", action: "ask" },
+    { pattern: "cp *", action: "ask" },
+    { pattern: "curl *", action: "deny" },
+    { pattern: "gh auth *", action: "deny" },
+    { pattern: "gh secret *", action: "deny" },
+    { pattern: "printenv*", action: "deny" },
+    { pattern: "env", action: "deny" },
+];
+export const SAFE_DEFAULTS_FILE_GOVERNANCE = {
+    excludeFromContext: true,
+    denyGlobs: [
+        "**/.env", "**/.env.*", "**/*.pem", "**/*.key", "**/*.p12", "**/*.pfx",
+        "**/id_rsa", "**/id_ed25519", "**/.ssh/**", "**/.aws/**", "**/.gnupg/**",
+        "**/.npmrc", "**/.pypirc", "**/.docker/config.json", "**/.git-credentials",
+        "**/secrets/**", "**/credentials/**", "**/.git/**", "**/.claude/**",
+        "**/.vscode/**", "**/.idea/**",
+    ],
+    askGlobs: ["**/.env.example", "**/*.example", "**/*.sample"],
+};
+export const SAFE_DEFAULTS_DATA_FIREWALL = [
+    { destination: "logs", action: "redact", classifications: ["pii", "secret", "credential", "token"] },
+    { destination: "ci", action: "deny", classifications: ["secret", "credential", "token"] },
+    { destination: "github-actions", action: "deny", classifications: ["secret", "credential", "token"] },
+    { destination: "small-model", action: "deny", classifications: ["secret", "credential"] },
+    { destination: "webhook", action: "redact", classifications: ["pii", "secret", "credential"] },
+];
+export function normalizePermissionPolicy(policy) {
+    const safeDefaults = policy.safeDefaults ?? false;
+    const baseTools = safeDefaults ? [...SAFE_DEFAULTS_TOOL_RULES] : [];
+    const baseCommands = safeDefaults ? [...SAFE_DEFAULTS_COMMAND_RULES] : [];
+    const baseFileGovernance = safeDefaults ? { ...SAFE_DEFAULTS_FILE_GOVERNANCE } : {};
+    const baseDataFirewall = safeDefaults ? [...SAFE_DEFAULTS_DATA_FIREWALL] : [];
+    const tools = deduplicateByKey([...baseTools, ...(policy.tools ?? [])], (r) => r.tool);
+    const commands = deduplicateByKey([...baseCommands, ...(policy.commands ?? [])], (r) => `${r.pattern}::${r.shell ?? "any"}`);
+    const fileGovernance = mergeFileGovernance(baseFileGovernance, policy.fileGovernance);
+    const dataFirewall = [...baseDataFirewall, ...(policy.dataFirewall ?? [])];
+    return {
+        ...policy,
+        safeDefaults,
+        auditLog: policy.auditLog ?? (safeDefaults ? true : undefined),
+        tools,
+        commands,
+        fileGovernance,
+        dataFirewall,
+        agentScopes: policy.agentScopes ?? [],
+    };
+}
+function deduplicateByKey(arr, key) {
+    const seen = new Map();
+    arr.forEach((item, i) => seen.set(key(item), i));
+    return arr.filter((item, i) => seen.get(key(item)) === i);
+}
+function mergeFileGovernance(base, user) {
+    if (!user)
+        return base;
+    return {
+        excludeFromContext: user.excludeFromContext ?? base.excludeFromContext,
+        denyGlobs: dedupStrings([...(base.denyGlobs ?? []), ...(user.denyGlobs ?? [])]),
+        askGlobs: dedupStrings([...(base.askGlobs ?? []), ...(user.askGlobs ?? [])]),
+        allowGlobs: dedupStrings([...(base.allowGlobs ?? []), ...(user.allowGlobs ?? [])]),
+    };
+}
+function dedupStrings(arr) {
+    return [...new Set(arr)];
+}
+//# sourceMappingURL=permission-normalizer.js.map

package/dist/wrapper/permission-normalizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-normalizer.js","sourceRoot":"","sources":["../../src/wrapper/permission-normalizer.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,MAAM,wBAAwB,GAAsC;IACzE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;IACjC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;IACjC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;IACjC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;IACjC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE;IAChC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE;IACvC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;IAC/B,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;IAC/B,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;IAC/B,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE;IACpC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE;IACrC,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE;CAC9C,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAyC;IAC/E,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE;IAC3C,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE;IACzC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE;IACxC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE;IACzC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE;IACvC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE;IACvC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;IAClC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;IAClC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;IAClC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;IACrC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE;IACxC,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE;IAC1C,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE;IACxC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAA6B;IACrE,kBAAkB,EAAE,IAAI;IACxB,SAAS,EAAE;QACT,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;QACtE,WAAW,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc;QACxE,WAAW,EAAE,YAAY,EAAE,wBAAwB,EAAE,qBAAqB;QAC1E,eAAe,EAAE,mBAAmB,EAAE,YAAY,EAAE,eAAe;QACnE,eAAe,EAAE,aAAa;KAC/B;IACD,QAAQ,EAAE,CAAC,iBAAiB,EAAE,cAAc,EAAE,aAAa,CAAC;CAC7D,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAoC;IAC1E,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE;IACpG,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE;IACzF,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE;IACrG,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE;IACzF,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE;CAC/F,CAAC;AAEF,MAAM,UAAU,yBAAyB,CAAC,MAA4B;IAOpE,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,KAAK,CAAC;IAElD,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,wBAAwB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,kBAAkB,GAA6B,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,6BAA6B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9G,MAAM,gBAAgB,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9E,MAAM,KAAK,GAAG,gBAAgB,CAAC,CAAC,GAAG,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,CAAC,GAAG,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,EAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,IAAI,KAAK,EAAE,CAC3C,CAAC;IACF,MAAM,cAAc,GAAG,mBAAmB,CAAC,kBAAkB,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IACtF,MAAM,YAAY,GAAG,CAAC,GAAG,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;IAE3E,OAAO;QACL,GAAG,MAAM;QACT,YAAY;QACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,KAAK;QACL,QAAQ;QACR,cAAc;QACd,YAAY;QACZ,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAI,GAAQ,EAAE,GAAwB;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA8B,EAAE,IAA0C;IACrG,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO;QACL,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,kBAAkB;QACtE,SAAS,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/E,QAAQ,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5E,UAAU,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;KACnF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAa;IACjC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3B,CAAC"}

package/dist/wrapper/permission-policy-authorizer.d.ts

@@ -0,0 +1,12 @@
+import type { CapabilityAnnotations, ToolAuthorizer, ToolAuthorizationResult } from "@kilnai/core";
+import type { KilnPermissionPolicy } from "./session.js";
+/**
+ * Translates a CLI KilnPermissionPolicy into orchestrator ToolAuthorizationResult calls.
+ * Implements ToolAuthorizer so ModeBOrchestrator respects CLI permission rules.
+ */
+export declare class PermissionPolicyAuthorizer implements ToolAuthorizer {
+    private readonly approval;
+    constructor(policy: KilnPermissionPolicy);
+    authorize(toolName: string, annotations?: CapabilityAnnotations): ToolAuthorizationResult;
+}
+//# sourceMappingURL=permission-policy-authorizer.d.ts.map

package/dist/wrapper/permission-policy-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-policy-authorizer.d.ts","sourceRoot":"","sources":["../../src/wrapper/permission-policy-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACnG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEzD;;;GAGG;AACH,qBAAa,0BAA2B,YAAW,cAAc;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;gBAEhD,MAAM,EAAE,oBAAoB;IAIxC,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,qBAAqB,GAAG,uBAAuB;CAsD1F"}

package/dist/wrapper/permission-policy-authorizer.js

@@ -0,0 +1,64 @@
+/**
+ * Translates a CLI KilnPermissionPolicy into orchestrator ToolAuthorizationResult calls.
+ * Implements ToolAuthorizer so ModeBOrchestrator respects CLI permission rules.
+ */
+export class PermissionPolicyAuthorizer {
+    approval;
+    constructor(policy) {
+        this.approval = policy.approval ?? "on-request";
+    }
+    authorize(toolName, annotations) {
+        const isReadOnly = annotations?.readOnly === true;
+        const isIdempotent = annotations?.idempotent === true;
+        const isDestructive = annotations?.destructive === true;
+        switch (this.approval) {
+            case "never":
+                return {
+                    level: isReadOnly ? 1 : isIdempotent ? 2 : isDestructive ? 4 : 2,
+                    allowed: true,
+                    requiresApproval: false,
+                    reason: "approval=never: all tools auto-authorized",
+                };
+            case "untrusted":
+                return {
+                    level: 4,
+                    allowed: false,
+                    requiresApproval: true,
+                    reason: "approval=untrusted: all tools denied without explicit approval",
+                };
+            case "on-failure":
+            case "on-request": {
+                if (isReadOnly) {
+                    return {
+                        level: 1,
+                        allowed: true,
+                        requiresApproval: false,
+                        reason: `${this.approval}: read-only tool "${toolName}" auto-authorized`,
+                    };
+                }
+                if (isIdempotent) {
+                    return {
+                        level: 2,
+                        allowed: true,
+                        requiresApproval: false,
+                        reason: `${this.approval}: idempotent tool "${toolName}" audited without approval`,
+                    };
+                }
+                return {
+                    level: isDestructive ? 4 : 3,
+                    allowed: false,
+                    requiresApproval: true,
+                    reason: `${this.approval}: tool "${toolName}" requires approval before execution`,
+                };
+            }
+            default:
+                return {
+                    level: 3,
+                    allowed: false,
+                    requiresApproval: true,
+                    reason: `Unknown approval mode "${this.approval}"`,
+                };
+        }
+    }
+}
+//# sourceMappingURL=permission-policy-authorizer.js.map

package/dist/wrapper/permission-policy-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-policy-authorizer.js","sourceRoot":"","sources":["../../src/wrapper/permission-policy-authorizer.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,OAAO,0BAA0B;IACpB,QAAQ,CAAmC;IAE5D,YAAY,MAA4B;QACtC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,YAAY,CAAC;IAClD,CAAC;IAED,SAAS,CAAC,QAAgB,EAAE,WAAmC;QAC7D,MAAM,UAAU,GAAG,WAAW,EAAE,QAAQ,KAAK,IAAI,CAAC;QAClD,MAAM,YAAY,GAAG,WAAW,EAAE,UAAU,KAAK,IAAI,CAAC;QACtD,MAAM,aAAa,GAAG,WAAW,EAAE,WAAW,KAAK,IAAI,CAAC;QAExD,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,KAAK,OAAO;gBACV,OAAO;oBACL,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChE,OAAO,EAAE,IAAI;oBACb,gBAAgB,EAAE,KAAK;oBACvB,MAAM,EAAE,2CAA2C;iBACpD,CAAC;YACJ,KAAK,WAAW;gBACd,OAAO;oBACL,KAAK,EAAE,CAAC;oBACR,OAAO,EAAE,KAAK;oBACd,gBAAgB,EAAE,IAAI;oBACtB,MAAM,EAAE,gEAAgE;iBACzE,CAAC;YACJ,KAAK,YAAY,CAAC;YAClB,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,IAAI,UAAU,EAAE,CAAC;oBACf,OAAO;wBACL,KAAK,EAAE,CAAC;wBACR,OAAO,EAAE,IAAI;wBACb,gBAAgB,EAAE,KAAK;wBACvB,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,qBAAqB,QAAQ,mBAAmB;qBACzE,CAAC;gBACJ,CAAC;gBACD,IAAI,YAAY,EAAE,CAAC;oBACjB,OAAO;wBACL,KAAK,EAAE,CAAC;wBACR,OAAO,EAAE,IAAI;wBACb,gBAAgB,EAAE,KAAK;wBACvB,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,sBAAsB,QAAQ,4BAA4B;qBACnF,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC5B,OAAO,EAAE,KAAK;oBACd,gBAAgB,EAAE,IAAI;oBACtB,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,WAAW,QAAQ,sCAAsC;iBAClF,CAAC;YACJ,CAAC;YACD;gBACE,OAAO;oBACL,KAAK,EAAE,CAAC;oBACR,OAAO,EAAE,KAAK;oBACd,gBAAgB,EAAE,IAAI;oBACtB,MAAM,EAAE,0BAA0B,IAAI,CAAC,QAAQ,GAAG;iBACnD,CAAC;QACN,CAAC;IACH,CAAC;CACF"}