@lingxiao-office/sdk 1.0.0

package/dist/core/PerformanceBaselineTracker.d.ts

@@ -0,0 +1,28 @@
+/**
+ * PerformanceBaselineTracker — P1: Agent 执行性能基线追踪。
+ *
+ * 追踪 agent 执行性能（任务耗时、token 消耗、成功率/失败率），
+ * 按 task_type/role 维度聚合。内存滑动窗口（最近 100 次执行），无持久化。
+ */
+export interface ExecutionMetric {
+    taskType: string;
+    role: string;
+    durationMs: number;
+    tokenUsage: number;
+    success: boolean;
+    timestamp: number;
+}
+export interface Baseline {
+    p50Duration: number;
+    p90Duration: number;
+    avgTokens: number;
+    successRate: number;
+    sampleCount: number;
+}
+export declare class PerformanceBaselineTracker {
+    private readonly samples;
+    recordExecution(metric: ExecutionMetric): void;
+    getBaseline(taskType: string, role?: string): Baseline | null;
+    private findKey;
+}
+//# sourceMappingURL=PerformanceBaselineTracker.d.ts.map

package/dist/core/PerformanceBaselineTracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PerformanceBaselineTracker.d.ts","sourceRoot":"","sources":["../../src/core/PerformanceBaselineTracker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAUD,qBAAa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAEhE,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI;IAQ9C,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI;IAkB7D,OAAO,CAAC,OAAO;CAMhB"}

package/dist/core/PerformanceBaselineTracker.js

@@ -0,0 +1,48 @@
+/**
+ * PerformanceBaselineTracker — P1: Agent 执行性能基线追踪。
+ *
+ * 追踪 agent 执行性能（任务耗时、token 消耗、成功率/失败率），
+ * 按 task_type/role 维度聚合。内存滑动窗口（最近 100 次执行），无持久化。
+ */
+const MAX_SAMPLES = 100;
+function percentile(sorted, p) {
+    if (sorted.length === 0)
+        return 0;
+    const idx = Math.min(sorted.length - 1, Math.floor(sorted.length * p));
+    return sorted[idx];
+}
+export class PerformanceBaselineTracker {
+    samples = new Map();
+    recordExecution(metric) {
+        const key = `${metric.taskType}:${metric.role}`;
+        const list = this.samples.get(key) ?? [];
+        list.push(metric);
+        if (list.length > MAX_SAMPLES)
+            list.shift();
+        this.samples.set(key, list);
+    }
+    getBaseline(taskType, role) {
+        const key = role ? `${taskType}:${role}` : this.findKey(taskType);
+        const list = this.samples.get(key);
+        if (!list || list.length < 3)
+            return null;
+        const durations = list.map((m) => m.durationMs).sort((a, b) => a - b);
+        const tokens = list.map((m) => m.tokenUsage);
+        const successes = list.filter((m) => m.success).length;
+        return {
+            p50Duration: percentile(durations, 0.5),
+            p90Duration: percentile(durations, 0.9),
+            avgTokens: tokens.reduce((sum, t) => sum + t, 0) / tokens.length,
+            successRate: successes / list.length,
+            sampleCount: list.length,
+        };
+    }
+    findKey(taskType) {
+        for (const key of this.samples.keys()) {
+            if (key.startsWith(`${taskType}:`))
+                return key;
+        }
+        return taskType;
+    }
+}
+//# sourceMappingURL=PerformanceBaselineTracker.js.map

package/dist/core/PerformanceBaselineTracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PerformanceBaselineTracker.js","sourceRoot":"","sources":["../../src/core/PerformanceBaselineTracker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAmBH,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB,SAAS,UAAU,CAAC,MAAgB,EAAE,CAAS;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,OAAO,0BAA0B;IACpB,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEhE,eAAe,CAAC,MAAuB;QACrC,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClB,IAAI,IAAI,CAAC,MAAM,GAAG,WAAW;YAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,WAAW,CAAC,QAAgB,EAAE,IAAa;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAE1C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAEvD,OAAO;YACL,WAAW,EAAE,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC;YACvC,WAAW,EAAE,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC;YACvC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM;YAChE,WAAW,EAAE,SAAS,GAAG,IAAI,CAAC,MAAM;YACpC,WAAW,EAAE,IAAI,CAAC,MAAM;SACzB,CAAC;IACJ,CAAC;IAEO,OAAO,CAAC,QAAgB;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC;gBAAE,OAAO,GAAG,CAAC;QACjD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/core/PermissionStore.d.ts

@@ -0,0 +1,14 @@
+import type { DatabaseManager } from './Database.js';
+import { type PermissionUpdate, type ToolPermissionContext } from './PermissionSystem.js';
+export type PermissionUpdateDestination = 'session' | 'project' | 'local' | 'user';
+export declare function loadEffectivePermissionContext(db: DatabaseManager | undefined, workspace: string, sessionId: string): ToolPermissionContext;
+export declare function applyAndPersistPermissionUpdates(db: DatabaseManager | undefined, workspace: string, sessionId: string, updates: PermissionUpdate[], destination: PermissionUpdateDestination): ToolPermissionContext;
+export declare function describePermissionLayers(db: DatabaseManager | undefined, workspace: string, sessionId: string): string;
+export interface PermissionSurfaceItem {
+    id: string;
+    status?: string;
+    preview: string;
+    detail: string;
+}
+export declare function buildPermissionSurfaceItems(db: DatabaseManager | undefined, workspace: string, sessionId: string): PermissionSurfaceItem[];
+//# sourceMappingURL=PermissionStore.d.ts.map

package/dist/core/PermissionStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionStore.d.ts","sourceRoot":"","sources":["../../src/core/PermissionStore.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD,OAAO,EAQL,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC3B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,2BAA2B,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;AAiMnF,wBAAgB,8BAA8B,CAC5C,EAAE,EAAE,eAAe,GAAG,SAAS,EAC/B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,qBAAqB,CAkBvB;AAED,wBAAgB,gCAAgC,CAC9C,EAAE,EAAE,eAAe,GAAG,SAAS,EAC/B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,gBAAgB,EAAE,EAC3B,WAAW,EAAE,2BAA2B,GACvC,qBAAqB,CA0CvB;AAED,wBAAgB,wBAAwB,CACtC,EAAE,EAAE,eAAe,GAAG,SAAS,EAC/B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAmBR;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,2BAA2B,CACzC,EAAE,EAAE,eAAe,GAAG,SAAS,EAC/B,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,qBAAqB,EAAE,CAsEzB"}

package/dist/core/PermissionStore.js

@@ -0,0 +1,318 @@
+import { existsSync, mkdirSync, openSync, closeSync, readFileSync, writeFileSync, unlinkSync, statSync, constants as fsConstants } from 'fs';
+import { dirname, join } from 'path';
+import { CONFIG_DIR } from '../config.js';
+import { SESSION_KEYS } from './SessionStateKeys.js';
+import { applyPermissionUpdates, getPermissionAccessLabel, getDefaultToolPermissionContext, normalizeToolPermissionContext, summarizePermissionContextForDisplay, } from './PermissionSystem.js';
+function getPermissionLayerDescriptors(workspace) {
+    return [
+        {
+            destination: 'user',
+            path: join(CONFIG_DIR, 'permissions.user.json'),
+        },
+        {
+            destination: 'project',
+            path: join(workspace, '.lingxiao', 'permissions.project.json'),
+        },
+        {
+            destination: 'local',
+            path: join(workspace, '.lingxiao', 'permissions.local.json'),
+        },
+        {
+            destination: 'session',
+        },
+    ];
+}
+function readPermissionFile(path) {
+    if (!existsSync(path)) {
+        return null;
+    }
+    try {
+        return JSON.parse(readFileSync(path, 'utf-8'));
+    }
+    catch { /* expected: operation may fail gracefully */
+        return null;
+    }
+}
+function writePermissionFile(path, context) {
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, JSON.stringify(context, null, 2), 'utf-8');
+}
+/**
+ * P1 修复（PermissionStore RMW lost update）：在文件层 read→apply→write 期间持有
+ * 短暂的跨进程锁，防止两个进程同时把对方的更新覆盖掉。
+ *
+ * 单进程内本身就是单线程，但凌霄是多进程（daemon + 子进程 worker / 多个 CLI 实例），
+ * 因此必须用文件锁。这里采用 openSync O_EXCL 的同步实现，加 stale 兜底，
+ * 关键段一般 < 5ms，busy-wait 上限设 2 秒。
+ *
+ * 不复用 AsyncFileLock 是因为 applyAndPersistPermissionUpdates 是 sync 调用链
+ * （LeaderPermissionManager / LeaderAgent.setPermissionMode 都是 sync），改 async 涉及大面积
+ * 接口改动。
+ */
+function withFileLockSync(filePath, fn, timeoutMs = 2000, staleMs = 60_000) {
+    const lockPath = `${filePath}.lock`;
+    mkdirSync(dirname(lockPath), { recursive: true });
+    const start = Date.now();
+    let fd = null;
+    while (true) {
+        try {
+            fd = openSync(lockPath, fsConstants.O_CREAT | fsConstants.O_EXCL | fsConstants.O_RDWR, 0o644);
+            break;
+        }
+        catch (e) {
+            const code = e.code;
+            if (code !== 'EEXIST')
+                throw e;
+            // stale 兜底：锁文件 mtime 超过 staleMs 视为残留（持锁进程异常退出）
+            try {
+                const st = statSync(lockPath);
+                if (Date.now() - st.mtimeMs > staleMs) {
+                    try {
+                        unlinkSync(lockPath);
+                    }
+                    catch { /* 已被别人删了 */ }
+                    continue;
+                }
+            }
+            catch { /* 文件已不存在 */ }
+            if (Date.now() - start > timeoutMs) {
+                throw new Error(`[PermissionStore] timed out acquiring file lock for ${lockPath}`);
+            }
+            // 短忙等。permission 写入很罕见，不会引发持续 CPU 占用。
+            const deadline = Date.now() + 20;
+            while (Date.now() < deadline) { /* spin */ }
+        }
+    }
+    try {
+        return fn();
+    }
+    finally {
+        if (fd !== null) {
+            try {
+                closeSync(fd);
+            }
+            catch { /* ignore */ }
+            try {
+                unlinkSync(lockPath);
+            }
+            catch { /* ignore */ }
+        }
+    }
+}
+function mergePermissionContexts(base, next) {
+    if (!next) {
+        return base;
+    }
+    return normalizeToolPermissionContext({
+        ...base,
+        ...next,
+        allowedHosts: Array.isArray(next.allowedHosts) ? next.allowedHosts : base.allowedHosts,
+    });
+}
+function applyPermissionUpdatesAsLayerDelta(currentLayer, updates) {
+    let layer = { ...(currentLayer || {}) };
+    for (const update of updates) {
+        switch (update.type) {
+            case 'setMode':
+                layer = { ...layer, mode: update.mode };
+                break;
+            case 'addHosts':
+                layer = {
+                    ...layer,
+                    allowedHosts: Array.from(new Set([...(Array.isArray(layer.allowedHosts) ? layer.allowedHosts : []), ...update.hosts])),
+                };
+                break;
+            case 'replaceHosts':
+                layer = { ...layer, allowedHosts: Array.from(new Set(update.hosts)) };
+                break;
+            case 'setSandboxBackend':
+                layer = {
+                    ...layer,
+                    sandboxBackend: update.backend,
+                    allowBackendFallback: update.allowFallback === true,
+                };
+                break;
+            case 'addRules': {
+                const targetKey = update.behavior === 'allow'
+                    ? 'allowRules'
+                    : update.behavior === 'deny'
+                        ? 'denyRules'
+                        : 'askRules';
+                layer = {
+                    ...layer,
+                    [targetKey]: mergeUniquePermissionRules(layer[targetKey] || [], update.rules),
+                };
+                break;
+            }
+            case 'replaceRules': {
+                const targetKey = update.behavior === 'allow'
+                    ? 'allowRules'
+                    : update.behavior === 'deny'
+                        ? 'denyRules'
+                        : 'askRules';
+                layer = { ...layer, [targetKey]: mergeUniquePermissionRules([], update.rules) };
+                break;
+            }
+            case 'removeRules': {
+                const targetKey = update.behavior === 'allow'
+                    ? 'allowRules'
+                    : update.behavior === 'deny'
+                        ? 'denyRules'
+                        : 'askRules';
+                layer = {
+                    ...layer,
+                    [targetKey]: removePermissionRules(layer[targetKey] || [], update.rules),
+                };
+                break;
+            }
+        }
+    }
+    return layer;
+}
+function mergeUniquePermissionRules(current, next) {
+    const seen = new Set();
+    const merged = [];
+    for (const rule of [...current, ...next]) {
+        const key = `${rule.toolName}::${rule.pattern || ''}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        merged.push(rule);
+    }
+    return merged;
+}
+function removePermissionRules(current, removing) {
+    const toRemove = new Set(removing.map((rule) => `${rule.toolName}::${rule.pattern || ''}`));
+    return current.filter((rule) => !toRemove.has(`${rule.toolName}::${rule.pattern || ''}`));
+}
+export function loadEffectivePermissionContext(db, workspace, sessionId) {
+    let context = getDefaultToolPermissionContext();
+    for (const layer of getPermissionLayerDescriptors(workspace)) {
+        if (layer.destination === 'session') {
+            context = mergePermissionContexts(context, db ? db.getSessionState(sessionId, SESSION_KEYS.TOOL_PERMISSION_CONTEXT) : null);
+            continue;
+        }
+        if (layer.path) {
+            context = mergePermissionContexts(context, readPermissionFile(layer.path));
+        }
+    }
+    return context;
+}
+export function applyAndPersistPermissionUpdates(db, workspace, sessionId, updates, destination) {
+    if (destination === 'session') {
+        // P1 修复：原实现 getSessionState + setSessionState 是两次独立 SQL，
+        // 多进程并发下可能 lost update。这里改用 db.updateSessionState（事务化 RMW）。
+        if (db && typeof db.updateSessionState === 'function') {
+            db.updateSessionState(sessionId, SESSION_KEYS.TOOL_PERMISSION_CONTEXT, (currentRaw) => {
+                // session 层的 effective 仍需要叠加 user/project/local 文件层；
+                // 但持久化的只是 session 层增量。读 effective 用于本次返回。
+                const next = applyPermissionUpdatesAsLayerDelta(currentRaw, updates);
+                return next;
+            });
+            // 重新计算 effective（叠加文件层）
+            return loadEffectivePermissionContext(db, workspace, sessionId);
+        }
+        const currentSessionLayer = db
+            ? db.getSessionState(sessionId, SESSION_KEYS.TOOL_PERMISSION_CONTEXT)
+            : null;
+        const next = applyPermissionUpdatesAsLayerDelta(currentSessionLayer, updates);
+        if (db) {
+            db.setSessionState(sessionId, SESSION_KEYS.TOOL_PERMISSION_CONTEXT, next);
+            return loadEffectivePermissionContext(db, workspace, sessionId);
+        }
+        return normalizeToolPermissionContext(next);
+    }
+    const target = getPermissionLayerDescriptors(workspace).find((item) => item.destination === destination);
+    if (!target?.path) {
+        return loadEffectivePermissionContext(db, workspace, sessionId);
+    }
+    // P1 修复：文件层 read-modify-write 必须上跨进程锁，避免多进程并发覆盖。
+    withFileLockSync(target.path, () => {
+        const currentLayer = normalizeToolPermissionContext(readPermissionFile(target.path));
+        const nextLayer = applyPermissionUpdates(currentLayer, updates);
+        writePermissionFile(target.path, nextLayer);
+    });
+    return loadEffectivePermissionContext(db, workspace, sessionId);
+}
+export function describePermissionLayers(db, workspace, sessionId) {
+    const lines = ['Permission layers:'];
+    for (const layer of getPermissionLayerDescriptors(workspace)) {
+        if (layer.destination === 'session') {
+            const value = db ? db.getSessionState(sessionId, SESSION_KEYS.TOOL_PERMISSION_CONTEXT) : null;
+            lines.push(`- session: ${summarizePermissionContextForDisplay(normalizeToolPermissionContext(value))}`);
+            continue;
+        }
+        lines.push(`- ${layer.destination}: ${layer.path && existsSync(layer.path)
+            ? summarizePermissionContextForDisplay(normalizeToolPermissionContext(readPermissionFile(layer.path)))
+            : '(not set)'}`);
+    }
+    lines.push(`- effective: ${summarizePermissionContextForDisplay(loadEffectivePermissionContext(db, workspace, sessionId))}`);
+    return lines.join('\n');
+}
+export function buildPermissionSurfaceItems(db, workspace, sessionId) {
+    const effective = loadEffectivePermissionContext(db, workspace, sessionId);
+    const pendingRequest = db?.getSessionState(sessionId, SESSION_KEYS.PENDING_PERMISSION_REQUEST);
+    const items = [
+        {
+            id: 'effective',
+            status: getPermissionAccessLabel(effective.mode),
+            preview: summarizePermissionContextForDisplay(effective),
+            detail: [
+                '[Effective Permission Context]',
+                summarizePermissionContextForDisplay(effective),
+                `allow_rules: ${effective.allowRules.map((rule) => `${rule.toolName}${rule.pattern ? `:${rule.pattern}` : ''}`).join(', ') || '(none)'}`,
+                `deny_rules: ${effective.denyRules.map((rule) => `${rule.toolName}${rule.pattern ? `:${rule.pattern}` : ''}`).join(', ') || '(none)'}`,
+                `ask_rules: ${effective.askRules.map((rule) => `${rule.toolName}${rule.pattern ? `:${rule.pattern}` : ''}`).join(', ') || '(none)'}`,
+            ].join('\n'),
+        },
+        {
+            id: 'layers',
+            preview: 'user / project / local / session',
+            detail: describePermissionLayers(db, workspace, sessionId),
+        },
+    ];
+    if (pendingRequest) {
+        items.push({
+            id: 'pending_request',
+            status: pendingRequest.source,
+            preview: `${pendingRequest.toolName} · approval pending`,
+            detail: [
+                '[Pending Permission Request]',
+                `request_id: ${pendingRequest.requestId}`,
+                `source: ${pendingRequest.source}${pendingRequest.workerName ? ` @${pendingRequest.workerName}` : ''}`,
+                `tool: ${pendingRequest.toolName}`,
+                `reason: ${pendingRequest.reason}`,
+                'Use /approve or /deny. Optional: /allow-tool /deny-tool /ask-tool /mode.',
+            ].join('\n'),
+        });
+    }
+    const customRoles = db?.getSessionState(sessionId, SESSION_KEYS.CUSTOM_ROLES);
+    const parsedRoles = typeof customRoles === 'string'
+        ? (() => {
+            try {
+                return JSON.parse(customRoles);
+            }
+            catch { /* expected: operation may fail gracefully */
+                return null;
+            }
+        })()
+        : customRoles && typeof customRoles === 'object'
+            ? customRoles
+            : null;
+    if (parsedRoles && Object.keys(parsedRoles).length > 0) {
+        const roleLines = Object.values(parsedRoles).map((role) => {
+            const profile = role.capabilityProfile;
+            const baseline = profile?.baselineRole || '(custom)';
+            const tiers = profile?.allowedTiers?.join('/') || '(unknown)';
+            return `- ${role.name}: baseline=${baseline} · tiers=${tiers}${role.skillNames?.length ? ` · skills=${role.skillNames.join(', ')}` : ''}${role.droppedTools?.length ? ` · dropped=${role.droppedTools.join(', ')}` : ''}`;
+        });
+        items.push({
+            id: 'roles',
+            status: `${Object.keys(parsedRoles).length} roles`,
+            preview: 'baseline / tiers / skills',
+            detail: ['[Role Capability View]', ...roleLines].join('\n'),
+        });
+    }
+    return items;
+}
+//# sourceMappingURL=PermissionStore.js.map

package/dist/core/PermissionStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionStore.js","sourceRoot":"","sources":["../../src/core/PermissionStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,IAAI,CAAC;AAC7I,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,+BAA+B,EAC/B,8BAA8B,EAC9B,oCAAoC,GAKrC,MAAM,uBAAuB,CAAC;AAS/B,SAAS,6BAA6B,CAAC,SAAiB;IACtD,OAAO;QACL;YACE,WAAW,EAAE,MAAM;YACnB,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,uBAAuB,CAAC;SAChD;QACD;YACE,WAAW,EAAE,SAAS;YACtB,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,0BAA0B,CAAC;SAC/D;QACD;YACE,WAAW,EAAE,OAAO;YACpB,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,wBAAwB,CAAC;SAC7D;QACD;YACE,WAAW,EAAE,SAAS;SACvB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAmC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC,CAAA,6CAA6C;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,OAA8B;IACvE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,gBAAgB,CAAI,QAAgB,EAAE,EAAW,EAAE,SAAS,GAAG,IAAI,EAAE,OAAO,GAAG,MAAM;IAC5F,MAAM,QAAQ,GAAG,GAAG,QAAQ,OAAO,CAAC;IACpC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,EAAE,GAAkB,IAAI,CAAC;IAC7B,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC9F,MAAM;QACR,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,IAAI,GAAI,CAAuB,CAAC,IAAI,CAAC;YAC3C,IAAI,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC;YAC/B,+CAA+C;YAC/C,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC9B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,GAAG,OAAO,EAAE,CAAC;oBACtC,IAAI,CAAC;wBAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;oBACpD,SAAS;gBACX,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACxB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,SAAS,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,uDAAuD,QAAQ,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,sCAAsC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,IAAI,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC7C,IAAI,CAAC;gBAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,IAA2B,EAC3B,IAA2C;IAE3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,8BAA8B,CAAC;QACpC,GAAG,IAAI;QACP,GAAG,IAAI;QACP,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY;KACvF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kCAAkC,CACzC,YAAmD,EACnD,OAA2B;IAE3B,IAAI,KAAK,GAAmC,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;IACxE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,SAAS;gBACZ,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;gBACxC,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,GAAG;oBACN,GAAG,KAAK;oBACR,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;iBACvH,CAAC;gBACF,MAAM;YACR,KAAK,cAAc;gBACjB,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACtE,MAAM;YACR,KAAK,mBAAmB;gBACtB,KAAK,GAAG;oBACN,GAAG,KAAK;oBACR,cAAc,EAAE,MAAM,CAAC,OAAO;oBAC9B,oBAAoB,EAAE,MAAM,CAAC,aAAa,KAAK,IAAI;iBACpD,CAAC;gBACF,MAAM;YACR,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,KAAK,OAAO;oBACzB,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM;wBAC1B,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,UAAU,CAAC;gBACnB,KAAK,GAAG;oBACN,GAAG,KAAK;oBACR,CAAC,SAAS,CAAC,EAAE,0BAA0B,CAAE,KAAK,CAAC,SAAS,CAAkC,IAAI,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC;iBAChH,CAAC;gBACF,MAAM;YACR,CAAC;YACD,KAAK,cAAc,CAAC,CAAC,CAAC;gBACpB,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,KAAK,OAAO;oBACzB,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM;wBAC1B,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,UAAU,CAAC;gBACnB,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,0BAA0B,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChF,MAAM;YACR,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,KAAK,OAAO;oBACzB,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM;wBAC1B,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,UAAU,CAAC;gBACnB,KAAK,GAAG;oBACN,GAAG,KAAK;oBACR,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAE,KAAK,CAAC,SAAS,CAAkC,IAAI,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC;iBAC3G,CAAC;gBACF,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAyB,EAAE,IAAsB;IACnF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAyB,EAAE,QAA0B;IAClF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5F,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,EAA+B,EAC/B,SAAiB,EACjB,SAAiB;IAEjB,IAAI,OAAO,GAAG,+BAA+B,EAAE,CAAC;IAEhD,KAAK,MAAM,KAAK,IAAI,6BAA6B,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7D,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,GAAG,uBAAuB,CAC/B,OAAO,EACP,EAAE,CAAC,CAAC,CAAE,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,uBAAuB,CAA2C,CAAC,CAAC,CAAC,IAAI,CAC3H,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,GAAG,uBAAuB,CAAC,OAAO,EAAE,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,EAA+B,EAC/B,SAAiB,EACjB,SAAiB,EACjB,OAA2B,EAC3B,WAAwC;IAExC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,yDAAyD;QACzD,4DAA4D;QAC5D,IAAI,EAAE,IAAI,OAAQ,EAAkD,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;YACtG,EAAsB,CAAC,kBAAkB,CACxC,SAAS,EACT,YAAY,CAAC,uBAAuB,EACpC,CAAC,UAAU,EAAE,EAAE;gBACb,qDAAqD;gBACrD,0CAA0C;gBAC1C,MAAM,IAAI,GAAG,kCAAkC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBACrE,OAAO,IAAI,CAAC;YACd,CAAC,CACF,CAAC;YACF,wBAAwB;YACxB,OAAO,8BAA8B,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,mBAAmB,GAAG,EAAE;YAC5B,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,uBAAuB,CAA0C;YAC9G,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,IAAI,GAAG,kCAAkC,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAC9E,IAAI,EAAE,EAAE,CAAC;YACP,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;YAC1E,OAAO,8BAA8B,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,8BAA8B,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;IACzG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAClB,OAAO,8BAA8B,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAClE,CAAC;IAED,iDAAiD;IACjD,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACjC,MAAM,YAAY,GAAG,8BAA8B,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC,CAAC;QACtF,MAAM,SAAS,GAAG,sBAAsB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAChE,mBAAmB,CAAC,MAAM,CAAC,IAAK,EAAE,SAAS,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,OAAO,8BAA8B,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,EAA+B,EAC/B,SAAiB,EACjB,SAAiB;IAEjB,MAAM,KAAK,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAErC,KAAK,MAAM,KAAK,IAAI,6BAA6B,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7D,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9F,KAAK,CAAC,IAAI,CAAC,cAAc,oCAAoC,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACxG,SAAS;QACX,CAAC;QAED,KAAK,CAAC,IAAI,CACR,KAAK,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;YAC7D,CAAC,CAAC,oCAAoC,CAAC,8BAA8B,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACtG,CAAC,CAAC,WAAW,EAAE,CAClB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,gBAAgB,oCAAoC,CAAC,8BAA8B,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7H,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AASD,MAAM,UAAU,2BAA2B,CACzC,EAA+B,EAC/B,SAAiB,EACjB,SAAiB;IAEjB,MAAM,SAAS,GAAG,8BAA8B,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3E,MAAM,cAAc,GAAG,EAAE,EAAE,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,0BAA0B,CAAoC,CAAC;IAElI,MAAM,KAAK,GAA4B;QACrC;YACE,EAAE,EAAE,WAAW;YACf,MAAM,EAAE,wBAAwB,CAAC,SAAS,CAAC,IAAI,CAAC;YAChD,OAAO,EAAE,oCAAoC,CAAC,SAAS,CAAC;YACxD,MAAM,EAAE;gBACN,gCAAgC;gBAChC,oCAAoC,CAAC,SAAS,CAAC;gBAC/C,gBAAgB,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE;gBACxI,eAAe,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE;gBACtI,cAAc,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE;aACrI,CAAC,IAAI,CAAC,IAAI,CAAC;SACb;QACD;YACE,EAAE,EAAE,QAAQ;YACZ,OAAO,EAAE,kCAAkC;YAC3C,MAAM,EAAE,wBAAwB,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC;SAC3D;KACF,CAAC;IAEF,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,iBAAiB;YACrB,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,OAAO,EAAE,GAAG,cAAc,CAAC,QAAQ,qBAAqB;YACxD,MAAM,EAAE;gBACN,8BAA8B;gBAC9B,eAAe,cAAc,CAAC,SAAS,EAAE;gBACzC,WAAW,cAAc,CAAC,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBACtG,SAAS,cAAc,CAAC,QAAQ,EAAE;gBAClC,WAAW,cAAc,CAAC,MAAM,EAAE;gBAClC,0EAA0E;aAC3E,CAAC,IAAI,CAAC,IAAI,CAAC;SACb,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,EAAE,EAAE,eAAe,CAAC,SAAS,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,OAAO,WAAW,KAAK,QAAQ;QACjD,CAAC,CAAC,CAAC,GAAG,EAAE;YACJ,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAA8B,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC,CAAA,6CAA6C;gBACpD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE;QACN,CAAC,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ;YAC9C,CAAC,CAAC,WAAwC;YAC1C,CAAC,CAAC,IAAI,CAAC;IAEX,IAAI,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACxD,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC;YACvC,MAAM,QAAQ,GAAG,OAAO,EAAE,YAAY,IAAI,UAAU,CAAC;YACrD,MAAM,KAAK,GAAG,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC;YAC9D,OAAO,KAAK,IAAI,CAAC,IAAI,cAAc,QAAQ,YAAY,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC5N,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,OAAO;YACX,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,QAAQ;YAClD,OAAO,EAAE,2BAA2B;YACpC,MAAM,EAAE,CAAC,wBAAwB,EAAE,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/core/PermissionSystem.d.ts

@@ -0,0 +1,79 @@
+import type { ToolContext } from '../contracts/types/Tool.js';
+export declare const PERMISSION_MODES: readonly ["strict", "dev", "networked", "yolo"];
+export type PermissionMode = typeof PERMISSION_MODES[number];
+export type PermissionBehavior = 'allow' | 'deny' | 'ask';
+export declare function isPermissionMode(value: unknown): value is PermissionMode;
+export interface PermissionRule {
+    toolName: string;
+    pattern?: string;
+}
+export interface ToolPermissionContext {
+    mode: PermissionMode;
+    allowedHosts: string[];
+    sandboxBackend: 'app-guard' | 'bubblewrap';
+    allowBackendFallback: boolean;
+    allowRules: PermissionRule[];
+    denyRules: PermissionRule[];
+    askRules: PermissionRule[];
+}
+export type PermissionUpdate = {
+    type: 'setMode';
+    mode: PermissionMode;
+} | {
+    type: 'addHosts';
+    hosts: string[];
+} | {
+    type: 'replaceHosts';
+    hosts: string[];
+} | {
+    type: 'setSandboxBackend';
+    backend: 'app-guard' | 'bubblewrap';
+    allowFallback?: boolean;
+} | {
+    type: 'addRules';
+    behavior: PermissionBehavior;
+    rules: PermissionRule[];
+} | {
+    type: 'replaceRules';
+    behavior: PermissionBehavior;
+    rules: PermissionRule[];
+} | {
+    type: 'removeRules';
+    behavior: PermissionBehavior;
+    rules: PermissionRule[];
+};
+export interface PermissionRequestPayload {
+    requestId: string;
+    source: 'leader' | 'worker';
+    toolName: string;
+    requestedMode?: PermissionMode;
+    requestedHosts?: string[];
+    destination?: 'session' | 'project' | 'local' | 'user';
+    requestedBackend?: 'app-guard' | 'bubblewrap';
+    reason: string;
+    workerName?: string;
+}
+export declare function getDefaultToolPermissionContext(): ToolPermissionContext;
+export declare function getLeaderDefaultPermissionContext(): ToolPermissionContext;
+export declare function normalizeToolPermissionContext(raw: unknown): ToolPermissionContext;
+export declare function applyPermissionUpdates(context: ToolPermissionContext, updates: PermissionUpdate[]): ToolPermissionContext;
+export declare function summarizePermissionContext(context: ToolPermissionContext): string;
+export declare function getPermissionAccessLabel(mode: PermissionMode): string;
+export declare function summarizePermissionContextForDisplay(context: ToolPermissionContext): string;
+export declare function getToolPermissionContextFromToolContext(context?: ToolContext): ToolPermissionContext;
+export declare function isWriteTool(name: string): boolean;
+export declare function isNetworkTool(name: string): boolean;
+export declare function isPrivilegedTool(name: string): boolean;
+/**
+ * Tools that can perform network operations indirectly (via subprocess).
+ * These are subject to network governance via sandbox or code analysis,
+ * but are not gated at the permission evaluation layer like pure network tools.
+ */
+export declare function isExecutionToolWithNetworkCapability(name: string): boolean;
+export declare function isAlwaysAllowedTool(name: string): boolean;
+export declare function extractPermissionSubjects(toolName: string, args: unknown): string[];
+export declare function evaluateToolPermission(toolName: string, args: unknown, context: ToolPermissionContext): {
+    allowed: boolean;
+    reason?: string;
+};
+//# sourceMappingURL=PermissionSystem.d.ts.map

package/dist/core/PermissionSystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PermissionSystem.d.ts","sourceRoot":"","sources":["../../src/core/PermissionSystem.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAK9D,eAAO,MAAM,gBAAgB,iDAAkD,CAAC;AAEhF,MAAM,MAAM,cAAc,GAAG,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAC7D,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AAI1D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc,EAAE,WAAW,GAAG,YAAY,CAAC;IAC3C,oBAAoB,EAAE,OAAO,CAAC;IAC9B,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED,MAAM,MAAM,gBAAgB,GACxB;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,cAAc,CAAC;CACtB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,GACD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,GACD;IACE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,WAAW,GAAG,YAAY,CAAC;IACpC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB,GACD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB,GACD;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB,CAAC;AAEN,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,cAAc,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;IACvD,gBAAgB,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,+BAA+B,IAAI,qBAAqB,CAWvE;AAED,wBAAgB,iCAAiC,IAAI,qBAAqB,CAEzE;AAED,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,OAAO,GACX,qBAAqB,CA0BvB;AAmBD,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,gBAAgB,EAAE,GAC1B,qBAAqB,CAoEvB;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAOjF;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAQrE;AAED,wBAAgB,oCAAoC,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAM3F;AAED,wBAAgB,uCAAuC,CACrD,OAAO,CAAC,EAAE,WAAW,GACpB,qBAAqB,CAEvB;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,oCAAoC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1E;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD;AAsGD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,EAAE,CAkCnF;AA0CD,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,qBAAqB,GAC7B;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CA6CvC"}