@namzu/cli 2.0.0 → 2.1.1

package/dist/permissions/__tests__/mode.test.js

@@ -1,115 +0,0 @@
-/**
- * The mode, and its precedence against the config file.
- *
- * The rule being protected is one sentence: a mode governs only the calls no
- * rule decided, so it can never reopen what a rule closed. The tests that
- * matter are the ones that would catch a future change making
- * `--permission-mode auto` able to run something the operator wrote `deny` for.
- */
-import { VerificationGate, configureLogger, getRootLogger } from '@namzu/sdk';
-import { describe, expect, it } from 'vitest';
-import { makeResumeHandler } from '../../tui/agent.js';
-import { PERMISSION_MODES, isPermissionMode, resolvePermissionMode } from '../mode.js';
-import { compilePermissions } from '../rules.js';
-configureLogger({ level: 'silent' });
-describe('resolving the mode from flag, alias and terminal', () => {
-    it('takes an explicit flag over everything else', () => {
-        expect(resolvePermissionMode({ flag: 'strict', interactive: true })).toEqual({ mode: 'strict' });
-        expect(resolvePermissionMode({ flag: 'prompt', skipPermissions: true, interactive: false })).toEqual({ mode: 'prompt' });
-    });
-    it('refuses a mode it does not know, and names the ones it does', () => {
-        const result = resolvePermissionMode({ flag: 'yolo', interactive: false });
-        expect('error' in result && result.error).toContain('prompt, auto, strict');
-    });
-    it('maps the bypass aliases to auto', () => {
-        expect(resolvePermissionMode({ skipPermissions: true, interactive: true })).toEqual({
-            mode: 'auto',
-        });
-    });
-    it('asks when there is someone to ask, and does not when there is not', () => {
-        // `prompt` without a terminal would silently become `auto` anyway;
-        // resolving it as `auto` makes the resolved mode honest in a log.
-        expect(resolvePermissionMode({ interactive: true })).toEqual({ mode: 'prompt' });
-        expect(resolvePermissionMode({ interactive: false })).toEqual({ mode: 'auto' });
-    });
-    it('exposes exactly the modes it accepts', () => {
-        expect(PERMISSION_MODES.every(isPermissionMode)).toBe(true);
-        expect(isPermissionMode('trusted')).toBe(false);
-    });
-});
-describe('a mode decides only what no rule decided', () => {
-    function gate(config) {
-        const { rules } = compilePermissions(config);
-        return new VerificationGate({
-            enabled: true,
-            rules: [...rules],
-            allowReadOnlyTools: false,
-            denyDangerousPatterns: false,
-            logDecisions: false,
-        }, getRootLogger());
-    }
-    it('a denied call never reaches the mode at all', async () => {
-        // THE precedence test. `deny` is settled by the gate, so no mode — not
-        // even the one spelled --yolo — is ever consulted about it. If this ever
-        // fails, a flag has become able to lift a prohibition someone wrote down.
-        const decision = gate({ bash: 'deny' }).evaluate({
-            toolName: 'bash',
-            toolInput: { command: 'rm -rf /tmp/x' },
-            toolDef: undefined,
-        });
-        expect(decision.decision).toBe('deny');
-    });
-    it('an allowed call never reaches the mode either', () => {
-        const decision = gate({ bash: { 'git status*': 'allow' } }).evaluate({
-            toolName: 'bash',
-            toolInput: { command: 'git status' },
-            toolDef: undefined,
-        });
-        expect(decision.decision).toBe('allow');
-    });
-});
-describe('what each mode does with an undecided call', () => {
-    const destructive = [
-        { id: '1', name: 'write', input: { path: 'a.txt' }, isDestructive: true },
-    ];
-    it('auto approves it', async () => {
-        const handler = makeResumeHandler({ all: false }, undefined, 'auto');
-        const decision = await handler({ type: 'tool_review', toolCalls: destructive });
-        expect(decision).toEqual({ action: 'approve_tools' });
-    });
-    it('strict refuses it, and says asking again will not help', async () => {
-        // The mode that did not exist: an unattended run could only be `auto`, so
-        // a CI job either trusted the agent with everything or could not use it.
-        const handler = makeResumeHandler({ all: false }, undefined, 'strict');
-        const decision = (await handler({
-            type: 'tool_review',
-            toolCalls: destructive,
-        }));
-        expect(decision.action).toBe('reject_tools');
-        expect(decision.feedback).toContain('Asking again will not change it');
-    });
-    it('prompt asks the human, and honours the answer', async () => {
-        let asked = false;
-        const handler = makeResumeHandler({ all: false }, async () => {
-            asked = true;
-            return { kind: 'reject', feedback: 'not that one' };
-        }, 'prompt');
-        const decision = (await handler({
-            type: 'tool_review',
-            toolCalls: destructive,
-        }));
-        expect(asked).toBe(true);
-        expect(decision.action).toBe('reject_tools');
-        expect(decision.feedback).toBe('not that one');
-    });
-    it('read-only batches run under every mode, including strict', async () => {
-        // `strict` refuses what needs asking, and a read never needed asking.
-        // Refusing reads would make the mode unusable rather than strict.
-        const readOnly = [{ id: '1', name: 'read', input: {}, isDestructive: false }];
-        const handler = makeResumeHandler({ all: false }, undefined, 'strict');
-        expect(await handler({ type: 'tool_review', toolCalls: readOnly })).toEqual({
-            action: 'approve_tools',
-        });
-    });
-});
-//# sourceMappingURL=mode.test.js.map

package/dist/permissions/__tests__/mode.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mode.test.js","sourceRoot":"","sources":["../../../src/permissions/__tests__/mode.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAEhD,eAAe,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;AAEpC,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QAChG,MAAM,CACL,qBAAqB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CACpF,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACtE,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;QAE1E,MAAM,CAAC,OAAO,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,qBAAqB,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACnF,IAAI,EAAE,MAAM;SACZ,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC5E,mEAAmE;QACnE,kEAAkE;QAClE,MAAM,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QAChF,MAAM,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3D,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACzD,SAAS,IAAI,CAAC,MAAgD;QAC7D,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAC5C,OAAO,IAAI,gBAAgB,CAC1B;YACC,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC;YACjB,kBAAkB,EAAE,KAAK;YACzB,qBAAqB,EAAE,KAAK;YAC5B,YAAY,EAAE,KAAK;SACnB,EACD,aAAa,EAAE,CACf,CAAA;IACF,CAAC;IAED,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC5D,uEAAuE;QACvE,yEAAyE;QACzE,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC;YAChD,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE;YACvC,OAAO,EAAE,SAAS;SAClB,CAAC,CAAA;QAEF,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC;YACpE,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;YACpC,OAAO,EAAE,SAAS;SAClB,CAAC,CAAA;QAEF,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC3D,MAAM,WAAW,GAAG;QACnB,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;KAChE,CAAA;IAEV,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;QACjC,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;QAEpE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAW,CAAC,CAAA;QAExF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;QAEtE,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC;YAC/B,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,WAAW;SACb,CAAC,CAAyC,CAAA;QAEpD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC5C,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC9D,IAAI,KAAK,GAAG,KAAK,CAAA;QACjB,MAAM,OAAO,GAAG,iBAAiB,CAChC,EAAE,GAAG,EAAE,KAAK,EAAE,EACd,KAAK,IAAI,EAAE;YACV,KAAK,GAAG,IAAI,CAAA;YACZ,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAA;QACpD,CAAC,EACD,QAAQ,CACR,CAAA;QAED,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC;YAC/B,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,WAAW;SACb,CAAC,CAAyC,CAAA;QAEpD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC5C,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACzE,sEAAsE;QACtE,kEAAkE;QAClE,MAAM,QAAQ,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAU,CAAA;QACtF,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;QAEtE,MAAM,CAAC,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAW,CAAC,CAAC,CAAC,OAAO,CAAC;YACpF,MAAM,EAAE,eAAe;SACvB,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/permissions/__tests__/rules.test.d.ts

@@ -1,10 +0,0 @@
-/**
- * The rule compiler.
- *
- * The load-bearing case is the LAST one: a tool nobody wrote a rule for must
- * still be asked about. A declarative permission model that quietly widened the
- * default would be a security downgrade wearing a feature's clothes, and it
- * would look exactly like this change from the outside.
- */
-export {};
-//# sourceMappingURL=rules.test.d.ts.map

package/dist/permissions/__tests__/rules.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rules.test.d.ts","sourceRoot":"","sources":["../../../src/permissions/__tests__/rules.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/permissions/__tests__/rules.test.js

@@ -1,196 +0,0 @@
-/**
- * The rule compiler.
- *
- * The load-bearing case is the LAST one: a tool nobody wrote a rule for must
- * still be asked about. A declarative permission model that quietly widened the
- * default would be a security downgrade wearing a feature's clothes, and it
- * would look exactly like this change from the outside.
- */
-import { VerificationGate, configureLogger, getRootLogger } from '@namzu/sdk';
-import { describe, expect, it } from 'vitest';
-import { bySpecificity, compilePermissions, matchesPattern, patternToRegExpSource, } from '../rules.js';
-describe('pattern matching', () => {
-    it('matches a literal command exactly', () => {
-        expect(matchesPattern('git status', 'git status')).toBe(true);
-        expect(matchesPattern('git statuses', 'git status')).toBe(false);
-    });
-    it('lets * stand for any run of characters and ? for one', () => {
-        expect(matchesPattern('git push --force', 'git push*')).toBe(true);
-        expect(matchesPattern('cat a.ts', 'cat ?.ts')).toBe(true);
-        expect(matchesPattern('cat ab.ts', 'cat ?.ts')).toBe(false);
-    });
-    it('matches the bare command for a trailing " *"', () => {
-        // `git push *` is the obvious way to write "any git push". Without this
-        // the rule silently misses the exact invocation it was written for.
-        expect(matchesPattern('git push', 'git push *')).toBe(true);
-        expect(matchesPattern('git push origin main', 'git push *')).toBe(true);
-    });
-    it('treats a backslash path as its forward-slash self, both sides', () => {
-        // One rule has to work on every platform; an operator should not have to
-        // write the same path twice.
-        expect(matchesPattern('src\\index.ts', 'src/*.ts')).toBe(true);
-        expect(matchesPattern('src/index.ts', 'src\\*.ts')).toBe(true);
-    });
-    it('does not let a pattern character smuggle in a regex', () => {
-        // `.` is a literal dot, not "any character", or a rule meant to allow
-        // `a.ts` would also allow `axts`.
-        expect(matchesPattern('axts', 'a.ts')).toBe(false);
-        expect(matchesPattern('a.ts', 'a.ts')).toBe(true);
-        expect(patternToRegExpSource('a+b')).toBe('^a\\+b$');
-    });
-    it('anchors, so a pattern is not a substring search', () => {
-        expect(matchesPattern('sudo git status', 'git status')).toBe(false);
-    });
-});
-describe('specificity ordering', () => {
-    // The kernel evaluates first-match-wins, so order decides meaning: a bare
-    // `*` sorted first would make every rule after it dead config.
-    it('puts a bare star last', () => {
-        expect(['*', 'git push*', 'git status'].sort(bySpecificity)).toEqual([
-            'git status',
-            'git push*',
-            '*',
-        ]);
-    });
-    it('puts a longer literal prefix first', () => {
-        expect(['git*', 'git push*'].sort(bySpecificity)).toEqual(['git push*', 'git*']);
-    });
-    it('is stable for two patterns of equal specificity', () => {
-        expect(['b*', 'a*'].sort(bySpecificity)).toEqual(['a*', 'b*']);
-    });
-});
-describe('compiling a permissions table', () => {
-    it('turns a bare allow and deny into by-name rules', () => {
-        const { rules } = compilePermissions({ read: 'allow', bash: 'deny' });
-        expect(rules).toEqual([
-            { type: 'allow_by_name', toolNames: ['read'] },
-            { type: 'deny_by_name', toolNames: ['bash'] },
-        ]);
-    });
-    it('emits pattern rules most-specific-first', () => {
-        const { rules } = compilePermissions({ bash: { '*': 'deny', 'git status*': 'allow' } });
-        expect(rules.map((r) => ('decision' in r ? r.decision : r.type))).toEqual(['allow', 'deny']);
-    });
-    it('emits nothing for ask, because the gate already asks by default', () => {
-        // If "ask" emitted a rule it would have to mean something different from
-        // the absence of a rule, and it does not.
-        const { rules } = compilePermissions({ edit: 'ask', bash: { 'rm *': 'ask' } });
-        expect(rules).toEqual([]);
-    });
-    it('reports a bad effect instead of dropping it in silence', () => {
-        // A permission someone believes is in force and which was quietly
-        // discarded is the worst outcome here — worse than refusing to start.
-        const { rules, diagnostics } = compilePermissions({
-            bash: { 'git push*': 'maybe' },
-        });
-        expect(rules).toEqual([]);
-        expect(diagnostics).toHaveLength(1);
-        expect(diagnostics[0]?.tool).toBe('bash');
-        expect(diagnostics[0]?.pattern).toBe('git push*');
-    });
-    it('keeps the other rules when one line is unreadable', () => {
-        const { rules, diagnostics } = compilePermissions({
-            read: 'allow',
-            bash: 7,
-            glob: 'allow',
-        });
-        expect(rules).toHaveLength(2);
-        expect(diagnostics).toHaveLength(1);
-    });
-    it('a tool nobody wrote a rule for produces no rule, so the gate asks', () => {
-        // THE case. The kernel's fallback for an unmatched call is `review`, so
-        // emitting nothing is what makes an unconfigured or newly bridged tool
-        // prompt. There is deliberately no way to spell "allow by omission":
-        // widening the default has to be something an operator typed.
-        const { rules } = compilePermissions({ read: 'allow' });
-        expect(rules.some((r) => 'toolNames' in r && r.toolNames.includes('some_new_tool'))).toBe(false);
-        expect(rules).toHaveLength(1);
-    });
-    it('is empty for absent config, which is the same as asking about everything', () => {
-        expect(compilePermissions(undefined)).toEqual({ rules: [], diagnostics: [] });
-    });
-});
-configureLogger({ level: 'silent' });
-describe('the rules actually decide a real call', () => {
-    // The compiler tests above assert the SHAPE of the emitted rules. Shape is
-    // not behaviour: the first version of this compiler emitted `target: 'args'`
-    // with an anchored pattern, which matches `JSON.stringify(input)` — so
-    // `^git push.*$` could never match `{"command":"git push origin main"}` and
-    // every pattern rule decided nothing at all. It looked correct in every
-    // shape assertion. These drive the kernel's own gate instead.
-    function decide(config, tool, input) {
-        const { rules } = compilePermissions(config);
-        const gate = new VerificationGate({
-            enabled: true,
-            rules: [...rules],
-            allowReadOnlyTools: false,
-            denyDangerousPatterns: false,
-            logDecisions: false,
-        }, getRootLogger());
-        return gate.evaluate({ toolName: tool, toolInput: input, toolDef: undefined });
-    }
-    it('allows the command an operator allowed', () => {
-        expect(decide({ bash: { 'git status*': 'allow' } }, 'bash', { command: 'git status' }).decision).toBe('allow');
-    });
-    it('denies the command an operator denied', () => {
-        const result = decide({ bash: { 'git push*': 'deny' } }, 'bash', {
-            command: 'git push origin main',
-        });
-        expect(result.decision).toBe('deny');
-    });
-    it('does not let one tool rule decide another tool call', () => {
-        // A rule written under `bash` must not decide an `edit` call whose
-        // arguments happen to contain the same text. The kernel's pattern rules
-        // carry no tool scope, so this is the CLI's job and it is easy to lose.
-        const result = decide({ bash: { 'git push*': 'deny' } }, 'edit', {
-            content: 'run git push to deploy',
-        });
-        expect(result.decision).toBe('review');
-    });
-    it('asks about a tool nobody wrote a rule for', () => {
-        // The load-bearing case, driven end to end rather than inferred.
-        expect(decide({ read: 'allow' }, 'some_new_bridged_tool', { x: 1 }).decision).toBe('review');
-    });
-    it('prefers the specific rule over the catch-all, whatever the config order', () => {
-        const config = { bash: { '*': 'allow', 'git push*': 'deny' } };
-        expect(decide(config, 'bash', { command: 'git push --force' }).decision).toBe('deny');
-        expect(decide(config, 'bash', { command: 'ls' }).decision).toBe('allow');
-    });
-});
-describe('what a denial actually says to the model', () => {
-    // The decision was never the part that was broken. A model told only
-    // "denied" rewords the command and tries again; a model told WHICH rule
-    // stopped it, and whether a different input could ever pass, can stop and
-    // say so. These assert the sentence, not the verdict.
-    function reasonFor(config, tool, input) {
-        const { rules } = compilePermissions(config);
-        const gate = new VerificationGate({
-            enabled: true,
-            rules: [...rules],
-            allowReadOnlyTools: false,
-            denyDangerousPatterns: false,
-            logDecisions: false,
-        }, getRootLogger());
-        return gate.evaluate({ toolName: tool, toolInput: input, toolDef: undefined }).reason;
-    }
-    it('a by-name denial says the tool is refused, so a reworded input will not help', () => {
-        const reason = reasonFor({ bash: 'deny' }, 'bash', { command: 'ls' });
-        expect(reason).toContain('bash');
-        // The part that stops the retry loop.
-        expect(reason).toContain('a different input will not change it');
-    });
-    it('a pattern denial quotes the rule that matched', () => {
-        const reason = reasonFor({ bash: { 'git push*': 'deny' } }, 'bash', {
-            command: 'git push --force',
-        });
-        expect(reason).toContain('pattern rule');
-        // The model is shown the rule itself, not the name of its category, so
-        // it can tell which of its options are closed and which are not.
-        expect(reason).toContain('git push');
-    });
-    it('an unmatched call says nothing matched, rather than naming a rule', () => {
-        const reason = reasonFor({ read: 'allow' }, 'some_new_tool', {});
-        expect(reason).toBe('No matching rule found');
-    });
-});
-//# sourceMappingURL=rules.test.js.map

package/dist/permissions/__tests__/rules.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rules.test.js","sourceRoot":"","sources":["../../../src/permissions/__tests__/rules.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EACN,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,qBAAqB,GACrB,MAAM,aAAa,CAAA;AAEpB,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,cAAc,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC7D,MAAM,CAAC,cAAc,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,cAAc,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClE,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzD,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACvD,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3D,MAAM,CAAC,cAAc,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACxE,yEAAyE;QACzE,6BAA6B;QAC7B,MAAM,CAAC,cAAc,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9D,MAAM,CAAC,cAAc,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC9D,sEAAsE;QACtE,kCAAkC;QAClC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClD,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjD,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,cAAc,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACrC,0EAA0E;IAC1E,+DAA+D;IAC/D,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,CAAC,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;YACpE,YAAY;YACZ,WAAW;YACX,GAAG;SACH,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACzD,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;QAErE,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACrB,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;YAC9C,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE;SAC7C,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QAClD,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;QAEvF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QAC1E,yEAAyE;QACzE,0CAA0C;QAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;QAE9E,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QACjE,kEAAkE;QAClE,sEAAsE;QACtE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAAC;YACjD,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,EAAW;SACvC,CAAC,CAAA;QAEF,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACzB,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACzC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC5D,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAAC;YACjD,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,CAAU;YAChB,IAAI,EAAE,OAAO;SACb,CAAC,CAAA;QAEF,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC5E,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,8DAA8D;QAC9D,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QAEvD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChG,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QACnF,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,eAAe,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;AAEpC,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACtD,2EAA2E;IAC3E,6EAA6E;IAC7E,uEAAuE;IACvE,4EAA4E;IAC5E,wEAAwE;IACxE,8DAA8D;IAC9D,SAAS,MAAM,CAAC,MAAgD,EAAE,IAAY,EAAE,KAAc;QAC7F,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAC5C,MAAM,IAAI,GAAG,IAAI,gBAAgB,CAChC;YACC,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC;YACjB,kBAAkB,EAAE,KAAK;YACzB,qBAAqB,EAAE,KAAK;YAC5B,YAAY,EAAE,KAAK;SACnB,EACD,aAAa,EAAE,CACf,CAAA;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAA;IAC/E,CAAC;IAED,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QACjD,MAAM,CACL,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,CACxF,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAChB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE;YAChE,OAAO,EAAE,sBAAsB;SAC/B,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC9D,mEAAmE;QACnE,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE;YAChE,OAAO,EAAE,wBAAwB;SACjC,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACpD,iEAAiE;QACjE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,uBAAuB,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QAClF,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,EAAW,CAAA;QACvE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrF,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACzD,qEAAqE;IACrE,wEAAwE;IACxE,0EAA0E;IAC1E,sDAAsD;IACtD,SAAS,SAAS,CACjB,MAAgD,EAChD,IAAY,EACZ,KAAc;QAEd,MAAM,EAAE,KAAK,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;QAC5C,MAAM,IAAI,GAAG,IAAI,gBAAgB,CAChC;YACC,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC;YACjB,kBAAkB,EAAE,KAAK;YACzB,qBAAqB,EAAE,KAAK;YAC5B,YAAY,EAAE,KAAK;SACnB,EACD,aAAa,EAAE,CACf,CAAA;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAA;IACtF,CAAC;IAED,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACvF,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAErE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAChC,sCAAsC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE;YACnE,OAAO,EAAE,kBAAkB;SAC3B,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QACxC,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC5E,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC,CAAA;QAEhE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/skills/store.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=store.test.d.ts.map

package/dist/skills/store.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.test.d.ts","sourceRoot":"","sources":["../../src/skills/store.test.ts"],"names":[],"mappings":""}

package/dist/skills/store.test.js

@@ -1,80 +0,0 @@
-import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { afterEach, beforeEach, describe, expect, it } from 'vitest';
-import { composeSkillsPrompt, discoverSkills, loadSkillBody, parseSkillMarkdown } from './store.js';
-let home;
-let cwd;
-function writeSkill(root, dir, contents) {
-    const skillDir = join(root, 'skills', dir);
-    mkdirSync(skillDir, { recursive: true });
-    writeFileSync(join(skillDir, 'SKILL.md'), contents);
-}
-beforeEach(() => {
-    home = mkdtempSync(join(tmpdir(), 'namzu-skh-'));
-    cwd = mkdtempSync(join(tmpdir(), 'namzu-skc-'));
-    mkdirSync(join(home, '.namzu'), { recursive: true });
-});
-afterEach(() => {
-    rmSync(home, { recursive: true, force: true });
-    rmSync(cwd, { recursive: true, force: true });
-});
-describe('parseSkillMarkdown', () => {
-    it('splits frontmatter from body', () => {
-        const parsed = parseSkillMarkdown('---\nname: Pirate\ndescription: talk like a pirate\n---\nArr matey.');
-        expect(parsed.name).toBe('Pirate');
-        expect(parsed.description).toBe('talk like a pirate');
-        expect(parsed.body).toBe('Arr matey.');
-    });
-    it('treats a file with no frontmatter as all body', () => {
-        const parsed = parseSkillMarkdown('just a body');
-        expect(parsed.name).toBeUndefined();
-        expect(parsed.body).toBe('just a body');
-    });
-    it('tolerates malformed frontmatter', () => {
-        const parsed = parseSkillMarkdown('---\n: : bad yaml :\n---\nbody here');
-        expect(parsed.body).toBe('body here');
-    });
-});
-describe('discoverSkills', () => {
-    it('returns empty when no skill dirs exist', () => {
-        expect(discoverSkills({ home, cwd })).toEqual([]);
-    });
-    it('discovers user + project skills, falling back to dir name', () => {
-        writeSkill(join(home, '.namzu'), 'greet', '---\ndescription: greets\n---\nSay hi.');
-        writeSkill(cwd, 'lint', 'no frontmatter body');
-        const skills = discoverSkills({ home, cwd });
-        expect(skills.map((s) => s.name).sort()).toEqual(['greet', 'lint']);
-        const greet = skills.find((s) => s.name === 'greet');
-        expect(greet?.source).toBe('user');
-        expect(greet?.description).toBe('greets');
-        expect(skills.find((s) => s.name === 'lint')?.description).toBe('(no description)');
-    });
-    it('lets a project skill shadow a user skill of the same name', () => {
-        writeSkill(join(home, '.namzu'), 'dup', '---\nname: dup\ndescription: user version\n---\nU');
-        writeSkill(cwd, 'dup', '---\nname: dup\ndescription: project version\n---\nP');
-        const skills = discoverSkills({ home, cwd });
-        const dup = skills.filter((s) => s.name === 'dup');
-        expect(dup).toHaveLength(1);
-        expect(dup[0]?.source).toBe('project');
-        expect(dup[0]?.description).toBe('project version');
-    });
-});
-describe('loadSkillBody', () => {
-    it('returns the body of a discovered skill', () => {
-        writeSkill(cwd, 'greet', '---\nname: greet\n---\nAlways greet warmly.');
-        const info = discoverSkills({ home, cwd }).find((s) => s.name === 'greet');
-        expect(info && loadSkillBody(info)).toBe('Always greet warmly.');
-    });
-});
-describe('composeSkillsPrompt', () => {
-    it('returns null when nothing is active', () => {
-        expect(composeSkillsPrompt([])).toBeNull();
-    });
-    it('frames each active skill', () => {
-        const prompt = composeSkillsPrompt([{ name: 'greet', body: 'Say hi.' }]);
-        expect(prompt).toContain('### Skill: greet');
-        expect(prompt).toContain('Say hi.');
-    });
-});
-//# sourceMappingURL=store.test.js.map

package/dist/skills/store.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.test.js","sourceRoot":"","sources":["../../src/skills/store.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAEpE,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAEnG,IAAI,IAAY,CAAA;AAChB,IAAI,GAAW,CAAA;AAEf,SAAS,UAAU,CAAC,IAAY,EAAE,GAAW,EAAE,QAAgB;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAA;IAC1C,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAA;AACpD,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACf,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAA;IAChD,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAA;IAC/C,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AACrD,CAAC,CAAC,CAAA;AACF,SAAS,CAAC,GAAG,EAAE;IACd,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9C,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAC9C,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,kBAAkB,CAChC,qEAAqE,CACrE,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QACrD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAA;QAChD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAA;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;QACxE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACpE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,wCAAwC,CAAC,CAAA;QACnF,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAA;QAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAA;QACpD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAClC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACpE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,mDAAmD,CAAC,CAAA;QAC5F,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,sDAAsD,CAAC,CAAA;QAC9E,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAA;QAClD,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QACjD,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,6CAA6C,CAAC,CAAA;QACvE,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAA;QAC1E,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;QACxE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;QAC5C,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/tui/__tests__/context-gauge.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=context-gauge.test.d.ts.map

package/dist/tui/__tests__/context-gauge.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"context-gauge.test.d.ts","sourceRoot":"","sources":["../../../src/tui/__tests__/context-gauge.test.ts"],"names":[],"mappings":""}

package/dist/tui/__tests__/context-gauge.test.js

@@ -1,83 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { buildGauge } from '../StatusBar.js';
-/**
- * What the footer's context bar may honestly claim.
- *
- * Two rules, and the second is the one with a history. The gauge must show no
- * proportion it cannot ground — it previously grounded one on a two-branch
- * guess at the window and a counter that measured something else entirely. And
- * when it does show one, the reader must be able to tell a measurement from an
- * inference, because a bar that looks measured and is not is the same defect
- * in miniature.
- */
-describe('buildGauge grounds the ratio or shows nothing', () => {
-    const measured = { measuredBy: 'provider', windowSource: 'model-table' };
-    it('divides context by window, not spend by a guess', () => {
-        const gauge = buildGauge({ tokens: 50_000, windowTokens: 200_000, ...measured });
-        expect(gauge?.pct).toBe(25);
-    });
-    it('shows nothing when the window is missing', () => {
-        expect(buildGauge({ tokens: 50_000, ...measured })).toBeNull();
-    });
-    it('shows nothing when the measurement is missing', () => {
-        expect(buildGauge({ windowTokens: 200_000, ...measured })).toBeNull();
-    });
-    it('shows nothing at all rather than a partial gauge', () => {
-        expect(buildGauge(null)).toBeNull();
-        expect(buildGauge(undefined)).toBeNull();
-        expect(buildGauge({})).toBeNull();
-    });
-    it('refuses a zero window instead of dividing by it', () => {
-        // Not reachable from today's kernel, which always resolves a positive
-        // window when it reports one — but Infinity rendered as a bar is a
-        // worse outcome than silence, and the guard costs one comparison.
-        expect(buildGauge({ tokens: 10, windowTokens: 0, ...measured })).toBeNull();
-    });
-    it('clamps rather than reporting over 100 percent', () => {
-        const gauge = buildGauge({ tokens: 400_000, windowTokens: 200_000, ...measured });
-        expect(gauge?.pct).toBe(100);
-        expect(gauge?.bar).not.toContain('░');
-    });
-});
-describe('buildGauge marks a ratio no stronger than its weaker term', () => {
-    it('presents a provider count against a known window as measured', () => {
-        const gauge = buildGauge({
-            tokens: 50_000,
-            windowTokens: 200_000,
-            measuredBy: 'provider',
-            windowSource: 'model-table',
-        });
-        expect(gauge?.approximate).toBe(false);
-    });
-    it('marks an estimated numerator', () => {
-        const gauge = buildGauge({
-            tokens: 50_000,
-            windowTokens: 200_000,
-            measuredBy: 'estimate',
-            windowSource: 'model-table',
-        });
-        expect(gauge?.approximate).toBe(true);
-    });
-    it('marks an assumed window even when the count is exact', () => {
-        // The case that makes this rule more than a rename of `measuredBy`.
-        // `windowSource: 'default'` is the kernel falling back to an assumed
-        // 128k because it recognised neither a configured window nor the
-        // model. An exact numerator over an invented denominator is a guess
-        // wearing a precise-looking figure, and marking only the numerator
-        // would repeat one level down the error this whole change fixes.
-        const gauge = buildGauge({
-            tokens: 50_000,
-            windowTokens: 128_000,
-            measuredBy: 'provider',
-            windowSource: 'default',
-        });
-        expect(gauge?.approximate).toBe(true);
-    });
-    it('treats an unstated provenance as not measured', () => {
-        // Silence is not a claim of accuracy. Defaulting the other way would
-        // let any future producer that forgets the field render as exact.
-        const gauge = buildGauge({ tokens: 50_000, windowTokens: 200_000 });
-        expect(gauge?.approximate).toBe(true);
-    });
-});
-//# sourceMappingURL=context-gauge.test.js.map

package/dist/tui/__tests__/context-gauge.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"context-gauge.test.js","sourceRoot":"","sources":["../../../src/tui/__tests__/context-gauge.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE5C;;;;;;;;;GASG;AACH,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC9D,MAAM,QAAQ,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAW,CAAA;IAEjF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAA;QAEhF,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACtE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACnC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACxC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC1D,sEAAsE;QACtE,mEAAmE;QACnE,kEAAkE;QAClE,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACxD,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAA;QAEjF,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,2DAA2D,EAAE,GAAG,EAAE;IAC1E,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACvE,MAAM,KAAK,GAAG,UAAU,CAAC;YACxB,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,OAAO;YACrB,UAAU,EAAE,UAAU;YACtB,YAAY,EAAE,aAAa;SAC3B,CAAC,CAAA;QAEF,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACvC,MAAM,KAAK,GAAG,UAAU,CAAC;YACxB,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,OAAO;YACrB,UAAU,EAAE,UAAU;YACtB,YAAY,EAAE,aAAa;SAC3B,CAAC,CAAA;QAEF,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC/D,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,oEAAoE;QACpE,mEAAmE;QACnE,iEAAiE;QACjE,MAAM,KAAK,GAAG,UAAU,CAAC;YACxB,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,OAAO;YACrB,UAAU,EAAE,UAAU;YACtB,YAAY,EAAE,SAAS;SACvB,CAAC,CAAA;QAEF,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACxD,qEAAqE;QACrE,kEAAkE;QAClE,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAA;QAEnE,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/tui/__tests__/deferred-tool-discovery.test.d.ts

@@ -1,24 +0,0 @@
-/**
- * `search_tools` is mounted where there is something to find, and not where
- * there is not.
- *
- * The two registries come from the same builder, so "does the CLI register
- * search_tools" has one answer from one call site and a different correct
- * answer from the other — the shape that hides behind a green suite. The
- * session passes a `taskStore`, so `query()` registers the task tools deferred
- * and the search has a roster of three. A sub-agent is built with no task
- * store, so nothing in its registry is deferred and the tool could only ever
- * answer "no deferred tools matching X" — a capability advertised every turn
- * that costs a turn to discover it is unusable.
- *
- * Removing the peer-daemon catalog is what created the asymmetry: that catalog
- * used to supply BOTH registries, so both were justified in mounting the tool.
- * Only one lost its supplier, and from the side that still works the loss is
- * invisible.
- *
- * So this asserts the CONTRAST, not either half: a test that only checked the
- * session would pass with the tool wrongly mounted on the sub-agent, which is
- * exactly the state this file was written against.
- */
-export {};
-//# sourceMappingURL=deferred-tool-discovery.test.d.ts.map

package/dist/tui/__tests__/deferred-tool-discovery.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"deferred-tool-discovery.test.d.ts","sourceRoot":"","sources":["../../../src/tui/__tests__/deferred-tool-discovery.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG"}