@linghun/tui 0.1.0

package/dist/permission-approval-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-approval-runtime.d.ts","sourceRoot":"","sources":["../src/permission-approval-runtime.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAE,KAAK,QAAQ,EAAgB,MAAM,gBAAgB,CAAC;AAoC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAqB3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAWjF,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,QAAQ,GAAG,QAAQ,GAAG,WAAW,EACtC,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,QAAQ,GACf,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CA8Cf;AAED,wBAAsB,6CAA6C,CACjE,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,YAAY,GAAG,SAAS,EACjC,MAAM,EAAE,QAAQ,GACf,OAAO,CAAC,OAAO,CAAC,CAclB;AAsBD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAOxE;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,QAAQ,GACf,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,QAAQ,GACf,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAKpF;AAsDD,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,QAAQ,GACf,OAAO,CAAC,IAAI,CAAC,CAkGf;AAkBD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,UAAU,EACnB,QAAQ,EAAE,QAAQ,GAAG,GAAG,EACxB,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,GACvC,OAAO,CAAC,OAAO,6BAA6B,EAAE,kBAAkB,CAAC,CAEnE;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,oBAAoB,EAC9B,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,YAAY,GAAG,SAAS,EACjC,MAAM,EAAE,QAAQ,GACf,OAAO,CAAC,IAAI,CAAC,CAgOf;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,oBAAoB,EAC9B,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,YAAY,GAAG,SAAS,EACjC,MAAM,EAAE,QAAQ,EAChB,SAAS,EAAE,OAAO,EAClB,cAAc,SAAgC,GAC7C,OAAO,CAAC,IAAI,CAAC,CA2Tf;AA0DD,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,QAAQ,GACf,OAAO,CAAC,IAAI,CAAC,CAuGf"}

package/dist/permission-approval-runtime.js

@@ -0,0 +1,136 @@
+import {
+  addAllowRuleForTest,
+  cancelPendingInteraction,
+  confirmPendingInteraction,
+  cycleMode,
+  executePermissionApprove,
+  executePermissionDeny,
+  handleModeCommand,
+  handlePermissionsCommand,
+  handlePlanCommand,
+  handleTuiKeypress,
+  hasPendingEnterConfirmation,
+  reevaluatePendingLocalApprovalAfterModeChange
+} from "./chunk-4WHZ6JKD.js";
+import "./chunk-SJOS5PM6.js";
+import "./chunk-IN42UISW.js";
+import "./chunk-GC55DMZV.js";
+import "./chunk-DICVLZHH.js";
+import "./chunk-3XNUDLOM.js";
+import "./chunk-ZYSN7AWW.js";
+import "./chunk-RM5QMOFY.js";
+import "./chunk-WKMBK5UP.js";
+import "./chunk-66BNE332.js";
+import "./chunk-UT5BOJKU.js";
+import "./chunk-RM5JDRCW.js";
+import "./chunk-QTDGRZMZ.js";
+import "./chunk-GMUCSNUD.js";
+import "./chunk-VTQL23UM.js";
+import "./chunk-DNQN74CC.js";
+import "./chunk-KQJHVJZB.js";
+import "./chunk-D7TCSOAZ.js";
+import "./chunk-NMNOAFFT.js";
+import "./chunk-JQCRCDOC.js";
+import "./chunk-W6NU7ZAV.js";
+import "./chunk-OF3K3CU5.js";
+import "./chunk-SRZIA6B4.js";
+import "./chunk-OEYW3JE3.js";
+import "./chunk-CRW3636S.js";
+import "./chunk-W3KHJNSH.js";
+import "./chunk-P277M7Z5.js";
+import "./chunk-GKZYTPN2.js";
+import "./chunk-GTP2KPLY.js";
+import "./chunk-7ZE5JFAZ.js";
+import "./chunk-FTAEPAVY.js";
+import "./chunk-2FVEKTKN.js";
+import "./chunk-X7A22JHP.js";
+import "./chunk-WJWYRBWH.js";
+import "./chunk-CFXB5SE5.js";
+import "./chunk-WHFDDZHY.js";
+import "./chunk-WVAQYKGL.js";
+import "./chunk-QIU3FJPC.js";
+import "./chunk-LDABZV5V.js";
+import "./chunk-JO5ANTMR.js";
+import "./chunk-WQMSRO4D.js";
+import "./chunk-V7GDHHBL.js";
+import "./chunk-GCMH5P4W.js";
+import "./chunk-THZBFYAH.js";
+import "./chunk-ECFLCY5V.js";
+import "./chunk-DDXS2RDZ.js";
+import "./chunk-4K6UB524.js";
+import "./chunk-PBIPV4LD.js";
+import "./chunk-ZZ2CNCXJ.js";
+import "./chunk-TYF4GJR3.js";
+import "./chunk-B4GQTZMT.js";
+import "./chunk-L4XXW6Y5.js";
+import "./chunk-CRSLDQOA.js";
+import "./chunk-VIBENDE3.js";
+import "./chunk-LVIM2PA7.js";
+import "./chunk-RVY34HK4.js";
+import "./chunk-JHGWGH2C.js";
+import "./chunk-E72U7WW7.js";
+import "./chunk-AKPXMCVF.js";
+import "./chunk-NKFKOEYX.js";
+import "./chunk-3AKXDMVS.js";
+import "./chunk-H3T4EF5F.js";
+import "./chunk-NSIKYD3X.js";
+import "./chunk-FRIMDSRU.js";
+import "./chunk-RBOQJFIZ.js";
+import "./chunk-KI7C6ZOD.js";
+import "./chunk-3GCIXKCI.js";
+import "./chunk-J7ZE2JKP.js";
+import "./chunk-BOV4K7FP.js";
+import "./chunk-KTWV5JC5.js";
+import "./chunk-PGNALDEH.js";
+import "./chunk-UDQT5CWK.js";
+import "./chunk-6SMM5CMP.js";
+import "./chunk-I3NTAIMF.js";
+import "./chunk-64MJP6FK.js";
+import "./chunk-O7S3HYE6.js";
+import "./chunk-RDGM4RUE.js";
+import "./chunk-IWUIOLMF.js";
+import "./chunk-MLUIOBKL.js";
+import "./chunk-LQTVYUT3.js";
+import "./chunk-K56D3X7S.js";
+import "./chunk-BFVPLGAC.js";
+import "./chunk-6USL33ZO.js";
+import "./chunk-4EIC5BCT.js";
+import "./chunk-AO4CXI37.js";
+import "./chunk-GDQQNPBP.js";
+import "./chunk-RMLTVKOY.js";
+import "./chunk-UT2TYK2A.js";
+import "./chunk-QLRTQHTR.js";
+import "./chunk-ZJK25VFP.js";
+import "./chunk-5H7RRF7C.js";
+import "./chunk-4EP3TUFF.js";
+import "./chunk-EORRZP3F.js";
+import "./chunk-QBCGAIU7.js";
+import "./chunk-K4FSYBSY.js";
+import "./chunk-3LT6OWQ2.js";
+import "./chunk-2YL5VKJ5.js";
+import "./chunk-EBACIBJP.js";
+import "./chunk-OZMX3E35.js";
+import "./chunk-URNQUECO.js";
+import "./chunk-WV6YJGZR.js";
+import "./chunk-4T5DJW54.js";
+import "./chunk-SYBNJZEL.js";
+import "./chunk-OMZYPQVA.js";
+import "./chunk-APJIC2O5.js";
+import "./chunk-HQIJGQYU.js";
+import "./chunk-HAEU6OTS.js";
+import "./chunk-MVONSJEN.js";
+import "./chunk-LHHKPGLX.js";
+export {
+  addAllowRuleForTest,
+  cancelPendingInteraction,
+  confirmPendingInteraction,
+  cycleMode,
+  executePermissionApprove,
+  executePermissionDeny,
+  handleModeCommand,
+  handlePermissionsCommand,
+  handlePlanCommand,
+  handleTuiKeypress,
+  hasPendingEnterConfirmation,
+  reevaluatePendingLocalApprovalAfterModeChange
+};

package/dist/permission-continuation-runtime.d.ts

@@ -0,0 +1,90 @@
+/**
+ * permission-continuation-runtime.ts — Pure permission/tool continuation helpers
+ * extracted from index.ts.
+ *
+ * Contains:
+ * - Permission decision helpers (formatPermissionDenied, formatPermissionSummary,
+ *   formatDiffBeforeWrite, isLowRiskWorkspaceEdit, collectInputFiles, getHardDenyReason,
+ *   findPermissionRule, isPlanAllowedTool, parsePermissionModeInput)
+ * - Permission state formatters (formatPermissionRules, formatRecentDenied,
+ *   hasRepeatedPermissionDenial, formatPermissionDenialPrimary)
+ * - Report write guard helpers (createReportWriteGuard, isReportFileWriteRequest,
+ *   extractRequestedReportPath, normalizeReportPath, shouldSendReportEvidenceReminder,
+ *   shouldSendReportWriteReminder, shouldSendReportFinalReferenceReminder,
+ *   hasReportFinalAnswerShape, doesWriteSatisfyReportGuard, hasReportWriteToolCall,
+ *   createReportFinalReferenceReminder, createReportTaskGuard, createReportWriteReminder,
+ *   formatModelToolOutput)
+ * - Remote redaction (redactRemoteSummary, remoteTranscriptSummary)
+ * - Tool name normalization (normalizeToolName)
+ *
+ * Hard boundary: no sendMessage, no provider stream loop, no TuiContext state machine,
+ * no store/session writes, no gateway calls.
+ */
+import type { Language, PermissionMode } from "@linghun/shared";
+import { type ToolName, type ToolOutput } from "@linghun/tools";
+export type ReportWriteGuard = {
+    requestedPath: string;
+    pathExplicit: boolean;
+    completed: boolean;
+    reminderSent: boolean;
+    evidenceReminderSent: boolean;
+    finalReferenceReminderSent: boolean;
+    nonWriteToolRounds: number;
+    evidenceRead: boolean;
+};
+export type PermissionRule = {
+    id: string;
+    effect: "allow" | "ask" | "deny";
+    toolName: ToolName | "*";
+    risk?: "low" | "medium" | "high";
+};
+export type RecentPermissionRejection = {
+    id: string;
+    toolName: ToolName;
+    mode: PermissionMode;
+    reason: string;
+    createdAt: string;
+};
+export type PermissionState = {
+    rules: PermissionRule[];
+    recentDenied: RecentPermissionRejection[];
+};
+export type ModelToolCallLike = {
+    id: string;
+    name: string;
+    input?: unknown;
+};
+export declare function formatPermissionDenialPrimary(language: Language): string;
+export declare function formatPermissionDenied(reason: string, summary: string): string;
+export declare function formatPermissionSummary(name: ToolName, files: string[], risk: "low" | "medium" | "high"): string;
+export declare function formatDiffBeforeWrite(name: ToolName, files: string[], risk: "low" | "medium" | "high"): string;
+export declare function isLowRiskWorkspaceEdit(name: ToolName, risk: "low" | "medium" | "high", files: string[]): boolean;
+export declare function collectInputFiles(input: unknown): string[];
+export declare function getHardDenyReason(name: ToolName, input: unknown, files: string[], workspaceRoot: string): string | null;
+export declare function findPermissionRule(rules: PermissionRule[], name: ToolName, risk: "low" | "medium" | "high"): PermissionRule | undefined;
+export declare function isPlanAllowedTool(name: ToolName, isReadOnly: boolean): boolean;
+export declare function parsePermissionModeInput(value: string): PermissionMode | null;
+export declare function formatPermissionRules(state: PermissionState): string;
+export declare function formatRecentDenied(state: PermissionState): string;
+export declare function hasRepeatedPermissionDenial(recentDenied: RecentPermissionRejection[]): boolean;
+export declare function createReportWriteGuard(text: string): ReportWriteGuard | undefined;
+export declare function isReportFileWriteRequest(text: string): boolean;
+export declare function extractRequestedReportPath(text: string): string | undefined;
+export declare function normalizeReportPath(path: string): string;
+export declare function shouldSendReportEvidenceReminder(guard: ReportWriteGuard | undefined): boolean;
+export declare function shouldSendReportWriteReminder(guard: ReportWriteGuard | undefined): boolean;
+export declare function shouldSendReportFinalReferenceReminder(guard: ReportWriteGuard, assistantText: string): boolean;
+export declare function hasReportFinalAnswerShape(text: string): boolean;
+export declare function createReportFinalReferenceReminder(guard: ReportWriteGuard, language: Language): string;
+export declare function createReportTaskGuard(guard: ReportWriteGuard, language: Language): string;
+export declare function createReportWriteReminder(guard: ReportWriteGuard, language: Language): string;
+export declare function doesWriteSatisfyReportGuard(guard: ReportWriteGuard | undefined, toolCall: ModelToolCallLike, result: {
+    ok: boolean;
+    tool: string;
+}): guard is ReportWriteGuard;
+export declare function hasReportWriteToolCall(guard: ReportWriteGuard, toolCalls: ModelToolCallLike[]): boolean;
+export declare function formatModelToolOutput(toolName: ToolName, output: ToolOutput, language: Language, evidenceId: string | undefined, reportWriteGuard: ReportWriteGuard | undefined): string;
+export declare function normalizeToolName(name: string): ToolName | null;
+export declare function redactRemoteSummary(value: string): string;
+export declare function remoteTranscriptSummary(value: string): string;
+//# sourceMappingURL=permission-continuation-runtime.d.ts.map

package/dist/permission-continuation-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-continuation-runtime.d.ts","sourceRoot":"","sources":["../src/permission-continuation-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEhE,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,UAAU,EAAgB,MAAM,gBAAgB,CAAC;AAS9E,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,0BAA0B,EAAE,OAAO,CAAC;IACpC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IACjC,QAAQ,EAAE,QAAQ,GAAG,GAAG,CAAC;IACzB,IAAI,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,YAAY,EAAE,yBAAyB,EAAE,CAAC;CAC3C,CAAC;AAGF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAMF,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAIxE;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,MAAM,EAAE,EACf,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAC9B,MAAM,CAGR;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,MAAM,EAAE,EACf,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAC9B,MAAM,CAGR;AAED,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,EAC/B,KAAK,EAAE,MAAM,EAAE,GACd,OAAO,CAMT;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAc1D;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,EAAE,EACf,aAAa,EAAE,MAAM,GACpB,MAAM,GAAG,IAAI,CA0Cf;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,cAAc,EAAE,EACvB,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAC9B,cAAc,GAAG,SAAS,CAK5B;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAE9E;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAG7E;AAMD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CASpE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAOjE;AAED,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,yBAAyB,EAAE,GAAG,OAAO,CAS9F;AAMD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAejF;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAU9D;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAiB3E;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,gBAAgB,GAAG,SAAS,GAAG,OAAO,CAE7F;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,gBAAgB,GAAG,SAAS,GAAG,OAAO,CAE1F;AAED,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,gBAAgB,EACvB,aAAa,EAAE,MAAM,GACpB,OAAO,CAMT;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAI/D;AAED,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,gBAAgB,EACvB,QAAQ,EAAE,QAAQ,GACjB,MAAM,CAIR;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAIzF;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAI7F;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gBAAgB,GAAG,SAAS,EACnC,QAAQ,EAAE,iBAAiB,EAC3B,MAAM,EAAE;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpC,KAAK,IAAI,gBAAgB,CAI3B;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,gBAAgB,EACvB,SAAS,EAAE,iBAAiB,EAAE,GAC7B,OAAO,CAwBT;AAED,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,QAAQ,EAClB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,gBAAgB,EAAE,gBAAgB,GAAG,SAAS,GAC7C,MAAM,CAiBR;AAMD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAK/D;AAMD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAqBzD;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7D"}

package/dist/permission-continuation-runtime.js

@@ -0,0 +1,68 @@
+import {
+  collectInputFiles,
+  createReportFinalReferenceReminder,
+  createReportTaskGuard,
+  createReportWriteGuard,
+  createReportWriteReminder,
+  doesWriteSatisfyReportGuard,
+  extractRequestedReportPath,
+  findPermissionRule,
+  formatDiffBeforeWrite,
+  formatModelToolOutput,
+  formatPermissionDenialPrimary,
+  formatPermissionDenied,
+  formatPermissionRules,
+  formatPermissionSummary,
+  formatRecentDenied,
+  getHardDenyReason,
+  hasRepeatedPermissionDenial,
+  hasReportFinalAnswerShape,
+  hasReportWriteToolCall,
+  isLowRiskWorkspaceEdit,
+  isPlanAllowedTool,
+  isReportFileWriteRequest,
+  normalizeReportPath,
+  normalizeToolName,
+  parsePermissionModeInput,
+  redactRemoteSummary,
+  remoteTranscriptSummary,
+  shouldSendReportEvidenceReminder,
+  shouldSendReportFinalReferenceReminder,
+  shouldSendReportWriteReminder
+} from "./chunk-J7ZE2JKP.js";
+import "./chunk-BOV4K7FP.js";
+import "./chunk-KTWV5JC5.js";
+import "./chunk-OMZYPQVA.js";
+import "./chunk-APJIC2O5.js";
+export {
+  collectInputFiles,
+  createReportFinalReferenceReminder,
+  createReportTaskGuard,
+  createReportWriteGuard,
+  createReportWriteReminder,
+  doesWriteSatisfyReportGuard,
+  extractRequestedReportPath,
+  findPermissionRule,
+  formatDiffBeforeWrite,
+  formatModelToolOutput,
+  formatPermissionDenialPrimary,
+  formatPermissionDenied,
+  formatPermissionRules,
+  formatPermissionSummary,
+  formatRecentDenied,
+  getHardDenyReason,
+  hasRepeatedPermissionDenial,
+  hasReportFinalAnswerShape,
+  hasReportWriteToolCall,
+  isLowRiskWorkspaceEdit,
+  isPlanAllowedTool,
+  isReportFileWriteRequest,
+  normalizeReportPath,
+  normalizeToolName,
+  parsePermissionModeInput,
+  redactRemoteSummary,
+  remoteTranscriptSummary,
+  shouldSendReportEvidenceReminder,
+  shouldSendReportFinalReferenceReminder,
+  shouldSendReportWriteReminder
+};

package/dist/permission-policy-engine.d.ts

@@ -0,0 +1,51 @@
+export type SemanticClass = "readonly" | "mutating" | "destructive" | "network" | "install" | "secret_read" | "outside_workspace" | "unknown";
+export type PathSafetyClass = "workspace_safe" | "workspace_write" | "outside_workspace" | "sensitive_path" | "unknown_path";
+export type PolicyDecision = "auto_allow_readonly" | "require_permission";
+/** Tool request shape the engine consumes. Decoupled from TuiContext. */
+export type PolicyRequest = {
+    toolName: string;
+    /** Raw tool input as the model sent it (may be unknown / object). */
+    input: unknown;
+    /** Absolute workspace root used as the "inside workspace" anchor. */
+    workspaceRoot: string;
+    /**
+     * Marker for deferred/MCP/ExecuteExtraTool dispatch. Built-in tools must
+     * pass `false`. Engine treats `true` paths as `unknown` semantic by default
+     * unless `manifestReadOnly === true` is set explicitly.
+     */
+    isDeferred?: boolean;
+    /**
+     * Set by deferred caller when the tool's manifest declares it readonly with
+     * trusted provenance. Without this, deferred tools fall through to
+     * `require_permission`.
+     */
+    manifestReadOnly?: boolean;
+};
+export type PolicyVerdict = {
+    decision: PolicyDecision;
+    semantic: SemanticClass;
+    pathSafety: PathSafetyClass;
+    /** Short human reason — safe to surface in TUI / event payload. */
+    reason: string;
+    /**
+     * Sanitized command form for events / explainers. Never includes the raw
+     * value of secrets, tokens, or absolute paths to sensitive files.
+     */
+    redactedSummary: string;
+};
+export declare function classifyToolRequest(req: PolicyRequest): PolicyVerdict;
+export declare function classifyBashHead(head: string, args: string[]): SemanticClass;
+export declare function classifyPathString(pathArg: string, workspaceRoot: string): PathSafetyClass;
+/**
+ * Lightweight shell-token splitter.
+ * Honors single and double quotes; does **not** evaluate $(...) / `...` —
+ * those force require_permission upstream via COMPOSITION_OPERATORS_REGEX.
+ *
+ * Backslash handling: outside single quotes, `\` is treated as an escape
+ * **only when it precedes a shell-meta character** (whitespace, quotes, $, #,
+ * the backslash itself). Backslashes followed by alphanumerics or path
+ * separators stay literal so Windows-style paths like `C:\Users\foo`
+ * tokenize as a single token instead of being silently de-slashed.
+ */
+export declare function tokenizeShellCommand(input: string): string[];
+//# sourceMappingURL=permission-policy-engine.d.ts.map

package/dist/permission-policy-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-policy-engine.d.ts","sourceRoot":"","sources":["../src/permission-policy-engine.ts"],"names":[],"mappings":"AAuCA,MAAM,MAAM,aAAa,GACrB,UAAU,GACV,UAAU,GACV,aAAa,GACb,SAAS,GACT,SAAS,GACT,aAAa,GACb,mBAAmB,GACnB,SAAS,CAAC;AAEd,MAAM,MAAM,eAAe,GACvB,gBAAgB,GAChB,iBAAiB,GACjB,mBAAmB,GACnB,gBAAgB,GAChB,cAAc,CAAC;AAEnB,MAAM,MAAM,cAAc,GAAG,qBAAqB,GAAG,oBAAoB,CAAC;AAE1E,yEAAyE;AACzE,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,KAAK,EAAE,OAAO,CAAC;IACf,qEAAqE;IACrE,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,aAAa,CAAC;IACxB,UAAU,EAAE,eAAe,CAAC;IAC5B,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAmQF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,aAAa,GAAG,aAAa,CAwCrE;AAuOD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,CA2D5E;AA4LD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,eAAe,CAyC1F;AA4BD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CA0C5D"}

package/dist/permission-policy-engine.js

@@ -0,0 +1,12 @@
+import {
+  classifyBashHead,
+  classifyPathString,
+  classifyToolRequest,
+  tokenizeShellCommand
+} from "./chunk-LHHKPGLX.js";
+export {
+  classifyBashHead,
+  classifyPathString,
+  classifyToolRequest,
+  tokenizeShellCommand
+};

package/dist/permission-presenter.d.ts

@@ -0,0 +1,13 @@
+import type { Language, PermissionMode } from "@linghun/shared";
+import type { ToolName } from "@linghun/tools";
+export type PermissionPromptView = {
+    toolName: ToolName;
+    decision: "allow" | "ask" | "deny";
+    risk: "low" | "medium" | "high";
+    mode: PermissionMode;
+    reason: string;
+    scope: string[];
+};
+export declare function formatLocalToolPermissionPrompt(permission: PermissionPromptView, language: Language): string;
+export declare function formatModelToolPermissionPrompt(permission: PermissionPromptView, language: Language): string;
+//# sourceMappingURL=permission-presenter.d.ts.map

package/dist/permission-presenter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-presenter.d.ts","sourceRoot":"","sources":["../src/permission-presenter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IACnC,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAChC,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,oBAAoB,EAChC,QAAQ,EAAE,QAAQ,GACjB,MAAM,CAqBR;AAED,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,oBAAoB,EAChC,QAAQ,EAAE,QAAQ,GACjB,MAAM,CAcR"}

package/dist/permission-presenter.js

@@ -0,0 +1,8 @@
+import {
+  formatLocalToolPermissionPrompt,
+  formatModelToolPermissionPrompt
+} from "./chunk-RM5JDRCW.js";
+export {
+  formatLocalToolPermissionPrompt,
+  formatModelToolPermissionPrompt
+};

package/dist/persistent-history.d.ts

@@ -0,0 +1,18 @@
+export type HistoryEntry = {
+    text: string;
+    timestamp: number;
+};
+export type PersistentHistoryOptions = {
+    filePath: string;
+    maxEntries?: number;
+    maxFileLines?: number;
+    trimTarget?: number;
+};
+export type PersistentHistory = {
+    load(): Promise<HistoryEntry[]>;
+    append(text: string): Promise<void>;
+    search(query: string): HistoryEntry[];
+    getEntries(): HistoryEntry[];
+};
+export declare function createPersistentHistory(options: PersistentHistoryOptions): PersistentHistory;
+//# sourceMappingURL=persistent-history.d.ts.map

package/dist/persistent-history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistent-history.d.ts","sourceRoot":"","sources":["../src/persistent-history.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/D,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAChC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,EAAE,CAAC;IACtC,UAAU,IAAI,YAAY,EAAE,CAAC;CAC9B,CAAC;AAMF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CAuD5F"}

package/dist/persistent-history.js

@@ -0,0 +1,126 @@
+// src/persistent-history.ts
+import { mkdir, open, stat, writeFile } from "fs/promises";
+import { createInterface } from "readline";
+import { createReadStream } from "fs";
+import { dirname } from "path";
+var DEFAULT_MAX_ENTRIES = 500;
+var DEFAULT_MAX_FILE_LINES = 1e4;
+var DEFAULT_TRIM_TARGET = 5e3;
+function createPersistentHistory(options) {
+  const {
+    filePath,
+    maxEntries = DEFAULT_MAX_ENTRIES,
+    maxFileLines = DEFAULT_MAX_FILE_LINES,
+    trimTarget = DEFAULT_TRIM_TARGET
+  } = options;
+  let entries = [];
+  async function load() {
+    try {
+      await stat(filePath);
+    } catch {
+      entries = [];
+      return entries;
+    }
+    const loaded = await readTail(filePath, maxEntries);
+    entries = loaded;
+    return entries;
+  }
+  async function append(text) {
+    const entry = { text, timestamp: Date.now() };
+    entries.push(entry);
+    await mkdir(dirname(filePath), { recursive: true });
+    const line = JSON.stringify(entry) + "\n";
+    const fh = await open(filePath, "a");
+    try {
+      await fh.write(line);
+    } finally {
+      await fh.close();
+    }
+    await trimIfNeeded(filePath, maxFileLines, trimTarget);
+  }
+  function search(query) {
+    const lower = query.toLowerCase();
+    const matches = [];
+    for (let i = entries.length - 1; i >= 0; i--) {
+      if (entries[i].text.toLowerCase().includes(lower)) {
+        matches.push(entries[i]);
+      }
+    }
+    return matches;
+  }
+  function getEntries() {
+    return entries;
+  }
+  return { load, append, search, getEntries };
+}
+async function readTail(filePath, maxEntries) {
+  const entries = [];
+  const stream = createReadStream(filePath, { encoding: "utf8" });
+  const rl = createInterface({ input: stream, crlfDelay: Infinity });
+  const ring = [];
+  let ringIdx = 0;
+  let filled = false;
+  for await (const line of rl) {
+    if (!line.trim()) continue;
+    ring[ringIdx] = line;
+    ringIdx++;
+    if (ringIdx >= maxEntries) {
+      ringIdx = 0;
+      filled = true;
+    }
+  }
+  const count = filled ? maxEntries : ringIdx;
+  const startIdx = filled ? ringIdx : 0;
+  for (let i = 0; i < count; i++) {
+    const idx = (startIdx + i) % maxEntries;
+    const raw = ring[idx];
+    const parsed = parseLine(raw);
+    if (parsed) entries.push(parsed);
+  }
+  return entries;
+}
+function parseLine(line) {
+  try {
+    const obj = JSON.parse(line);
+    if (typeof obj.text === "string" && typeof obj.timestamp === "number") {
+      return { text: obj.text, timestamp: obj.timestamp };
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+async function trimIfNeeded(filePath, maxFileLines, trimTarget) {
+  let lineCount = 0;
+  const stream = createReadStream(filePath, { encoding: "utf8" });
+  const rl = createInterface({ input: stream, crlfDelay: Infinity });
+  for await (const _ of rl) {
+    lineCount++;
+    if (lineCount > maxFileLines) break;
+  }
+  if (lineCount <= maxFileLines) return;
+  const keepLines = [];
+  const stream2 = createReadStream(filePath, { encoding: "utf8" });
+  const rl2 = createInterface({ input: stream2, crlfDelay: Infinity });
+  const ring = [];
+  let ringIdx = 0;
+  let filled = false;
+  for await (const line of rl2) {
+    if (!line.trim()) continue;
+    ring[ringIdx] = line;
+    ringIdx++;
+    if (ringIdx >= trimTarget) {
+      ringIdx = 0;
+      filled = true;
+    }
+  }
+  const count = filled ? trimTarget : ringIdx;
+  const startIdx = filled ? ringIdx : 0;
+  for (let i = 0; i < count; i++) {
+    keepLines.push(ring[(startIdx + i) % trimTarget]);
+  }
+  await writeFile(filePath, keepLines.join("\n") + "\n", "utf8");
+}
+export {
+  createPersistentHistory
+};

package/dist/platform-security.d.ts

@@ -0,0 +1,4 @@
+export declare const DANGEROUS_FILES: Set<string>;
+export declare const DANGEROUS_DIRECTORIES: Set<string>;
+export declare function getPlatformPathDenyReason(path: string, workspaceRoot: string): string | null;
+//# sourceMappingURL=platform-security.d.ts.map

package/dist/platform-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-security.d.ts","sourceRoot":"","sources":["../src/platform-security.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,eAAe,aAY1B,CAAC;AAEH,eAAO,MAAM,qBAAqB,aAOhC,CAAC;AAIH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA4B5F"}

package/dist/platform-security.js

@@ -0,0 +1,10 @@
+import {
+  DANGEROUS_DIRECTORIES,
+  DANGEROUS_FILES,
+  getPlatformPathDenyReason
+} from "./chunk-KTWV5JC5.js";
+export {
+  DANGEROUS_DIRECTORIES,
+  DANGEROUS_FILES,
+  getPlatformPathDenyReason
+};

package/dist/process-command-runtime.d.ts

@@ -0,0 +1,9 @@
+export declare function redactedPath(path: string | undefined): string;
+export declare function runCommandCapture(command: string, args: string[], cwd: string, timeoutMs: number): Promise<{
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    summary: string;
+    errorCode?: string;
+}>;
+//# sourceMappingURL=process-command-runtime.d.ts.map

package/dist/process-command-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-command-runtime.d.ts","sourceRoot":"","sources":["../src/process-command-runtime.ts"],"names":[],"mappings":"AAMA,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAK7D;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IACT,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC,CAwDD"}

package/dist/process-command-runtime.js

@@ -0,0 +1,11 @@
+import {
+  redactedPath,
+  runCommandCapture
+} from "./chunk-RVY34HK4.js";
+import "./chunk-JHGWGH2C.js";
+import "./chunk-OMZYPQVA.js";
+import "./chunk-APJIC2O5.js";
+export {
+  redactedPath,
+  runCommandCapture
+};

package/dist/process-guard.d.ts

@@ -0,0 +1,56 @@
+import { spawn } from "node:child_process";
+import type { ChildProcess } from "node:child_process";
+export type ProcessGuardStopKind = "graceful" | "force" | "exit-cleanup";
+export type ProcessGuardTrackedChild = Pick<ChildProcess, "kill"> & {
+    pid?: number;
+    exitCode?: number | null;
+    signalCode?: NodeJS.Signals | null;
+    once: (event: "exit" | "close", listener: (...args: unknown[]) => void) => unknown;
+};
+export type ProcessGuardTrackOptions = {
+    /** True only for children spawned by this process with detached: true. */
+    detached?: boolean;
+    label?: string;
+};
+export type ProcessGuardStopFailure = {
+    pid: number;
+    message: string;
+};
+export type ProcessGuardStopResult = {
+    kind: ProcessGuardStopKind;
+    force: boolean;
+    attempted: number;
+    skipped: number;
+    failures: ProcessGuardStopFailure[];
+};
+export type ProcessGuardDeps = {
+    platform?: NodeJS.Platform;
+    spawn?: typeof spawn;
+    kill?: typeof process.kill;
+};
+export declare class ProcessGuardRegistry {
+    private readonly tracked;
+    track(child: ProcessGuardTrackedChild, options?: ProcessGuardTrackOptions): boolean;
+    untrack(pid: number | undefined): void;
+    snapshot(): ReadonlyArray<{
+        pid: number;
+        detached: boolean;
+        label?: string;
+    }>;
+    stopAll(kind: ProcessGuardStopKind, force: boolean, deps: Required<ProcessGuardDeps>, allowAsyncWindowsTreeKill: boolean, onlyPids?: ReadonlySet<number>): ProcessGuardStopResult;
+}
+export type ProcessGuard = {
+    track: (child: ProcessGuardTrackedChild, options?: ProcessGuardTrackOptions) => boolean;
+    requestStop: (force: boolean) => ProcessGuardStopResult;
+    cleanupForExit: () => ProcessGuardStopResult;
+    snapshot: () => ReturnType<ProcessGuardRegistry["snapshot"]>;
+};
+export declare const PROCESS_GUARD_EXIT_CLEANUP_NOTE = "process.on('exit') cleanup is synchronous best-effort only; it cannot guarantee async taskkill completion or parent hard-kill/crash cleanup.";
+export declare function createProcessGuard(registry?: ProcessGuardRegistry, deps?: ProcessGuardDeps): ProcessGuard;
+export declare function trackChildProcess(child: ProcessGuardTrackedChild, options?: ProcessGuardTrackOptions): boolean;
+export declare function requestTrackedProcessStop(force: boolean): ProcessGuardStopResult;
+export declare function cleanupTrackedProcessesForExit(): ProcessGuardStopResult;
+export declare function consumeProcessGuardStopResultsForTest(): ProcessGuardStopResult[];
+export declare function getTrackedProcessSnapshot(): ReturnType<ProcessGuardRegistry["snapshot"]>;
+export declare function installProcessGuardExitHandlers(): void;
+//# sourceMappingURL=process-guard.d.ts.map