@oxagen/cli 0.5.0 → 0.6.1

package/dist/settings/__tests__/hooks.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=hooks.test.d.ts.map

package/dist/settings/__tests__/hooks.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.test.d.ts","sourceRoot":"","sources":["../../../src/settings/__tests__/hooks.test.ts"],"names":[],"mappings":""}

package/dist/settings/__tests__/hooks.test.js

@@ -0,0 +1,103 @@
+import { describe, it, expect } from "vitest";
+import { runHooks } from "../hooks.js";
+const CWD = process.cwd();
+describe("runHooks", () => {
+    it("returns a no-op outcome when there are no hooks", async () => {
+        expect(await runHooks(undefined, { event: "SessionStart", cwd: CWD })).toEqual({
+            blocked: false,
+            output: "",
+        });
+    });
+    it("captures SessionStart stdout as context", async () => {
+        const hooks = {
+            SessionStart: [{ hooks: [{ type: "command", command: "echo 'on-call: alice'" }] }],
+        };
+        const out = await runHooks(hooks, { event: "SessionStart", cwd: CWD });
+        expect(out.blocked).toBe(false);
+        expect(out.output).toContain("on-call: alice");
+    });
+    it("feeds the event payload to the hook on stdin", async () => {
+        const hooks = {
+            PreToolUse: [{ matcher: "*", hooks: [{ type: "command", command: "cat" }] }],
+        };
+        const out = await runHooks(hooks, {
+            event: "PreToolUse",
+            cwd: CWD,
+            tool: { name: "bash", input: { command: "ls" } },
+        });
+        expect(out.output).toContain('"name":"bash"');
+        expect(out.output).toContain('"command":"ls"');
+    });
+    it("blocks a PreToolUse tool when a hook exits non-zero, surfacing stderr", async () => {
+        const hooks = {
+            PreToolUse: [{ matcher: "bash", hooks: [{ type: "command", command: 'echo "no shell here" >&2; exit 1' }] }],
+        };
+        const out = await runHooks(hooks, {
+            event: "PreToolUse",
+            cwd: CWD,
+            tool: { name: "bash", input: { command: "ls" } },
+        });
+        expect(out.blocked).toBe(true);
+        expect(out.reason).toContain("no shell here");
+    });
+    it("does not block when the PreToolUse hook exits zero", async () => {
+        const hooks = {
+            PreToolUse: [{ matcher: "bash", hooks: [{ type: "command", command: "true" }] }],
+        };
+        const out = await runHooks(hooks, {
+            event: "PreToolUse",
+            cwd: CWD,
+            tool: { name: "bash", input: {} },
+        });
+        expect(out.blocked).toBe(false);
+    });
+    it("only runs hooks whose matcher globs the tool name", async () => {
+        const hooks = {
+            PreToolUse: [{ matcher: "write_file", hooks: [{ type: "command", command: "exit 1" }] }],
+        };
+        // tool is bash → matcher write_file does not apply → not blocked
+        const bash = await runHooks(hooks, {
+            event: "PreToolUse",
+            cwd: CWD,
+            tool: { name: "bash", input: {} },
+        });
+        expect(bash.blocked).toBe(false);
+        // tool is write_file → matcher applies → blocked
+        const write = await runHooks(hooks, {
+            event: "PreToolUse",
+            cwd: CWD,
+            tool: { name: "write_file", input: {} },
+        });
+        expect(write.blocked).toBe(true);
+    });
+    it("never blocks on PostToolUse, even on a non-zero exit", async () => {
+        const hooks = {
+            PostToolUse: [{ matcher: "*", hooks: [{ type: "command", command: "echo done; exit 3" }] }],
+        };
+        const out = await runHooks(hooks, {
+            event: "PostToolUse",
+            cwd: CWD,
+            tool: { name: "write_file", input: {} },
+        });
+        expect(out.blocked).toBe(false);
+        expect(out.output).toContain("done");
+    });
+    it("kills and blocks a PreToolUse hook that exceeds its timeout", async () => {
+        const hooks = {
+            PreToolUse: [{ matcher: "*", hooks: [{ type: "command", command: "sleep 5", timeoutMs: 50 }] }],
+        };
+        const out = await runHooks(hooks, {
+            event: "PreToolUse",
+            cwd: CWD,
+            tool: { name: "bash", input: {} },
+        });
+        expect(out.blocked).toBe(true);
+        expect(out.reason).toContain("timed out");
+    });
+    it("returns a no-op when the event has no registered matchers", async () => {
+        const hooks = { SessionStart: [{ hooks: [{ type: "command", command: "echo x" }] }] };
+        expect(await runHooks(hooks, { event: "PreToolUse", cwd: CWD, tool: { name: "bash", input: {} } }))
+            .toEqual({ blocked: false, output: "" });
+    });
+});
+//# sourceMappingURL=hooks.test.js.map

package/dist/settings/__tests__/hooks.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.test.js","sourceRoot":"","sources":["../../../src/settings/__tests__/hooks.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAE1B,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7E,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,EAAE;SACX,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,KAAK,GAAU;YACnB,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,EAAE,CAAC;SACnF,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,KAAK,GAAU;YACnB,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;SAC7E,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE;YAChC,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;SACjD,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,KAAK,GAAU;YACnB,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,EAAE,CAAC;SAC7G,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE;YAChC,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;SACjD,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,KAAK,GAAU;YACnB,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;SACjF,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE;YAChC,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,KAAK,GAAU;YACnB,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;SACzF,CAAC;QACF,iEAAiE;QACjE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE;YACjC,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,iDAAiD;QACjD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE;YAClC,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,KAAK,GAAU;YACnB,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC;SAC5F,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE;YAChC,KAAK,EAAE,aAAa;YACpB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,KAAK,GAAU;YACnB,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;SAChG,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE;YAChC,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;SAClC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,GAAU,EAAE,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7F,MAAM,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;aAChG,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/settings/__tests__/mcp-write.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mcp-write.test.d.ts.map

package/dist/settings/__tests__/mcp-write.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-write.test.d.ts","sourceRoot":"","sources":["../../../src/settings/__tests__/mcp-write.test.ts"],"names":[],"mappings":""}

package/dist/settings/__tests__/mcp-write.test.js

@@ -0,0 +1,77 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { writeMcpServer, removeMcpServer, setMcpServerDisabled, findServerScope, } from "../mcp-write.js";
+import { loadSettings, clearSettingsCache } from "../resolve.js";
+let dir;
+let userPath;
+const ctx = () => ({ cwd: dir, userSettingsPath: userPath });
+const resolve = () => loadSettings({ ...ctx(), noCache: true }).settings;
+beforeEach(() => {
+    dir = mkdtempSync(join(tmpdir(), "oxagen-mcpwrite-"));
+    userPath = join(dir, "user-settings.json");
+    clearSettingsCache();
+});
+afterEach(() => {
+    rmSync(dir, { recursive: true, force: true });
+    clearSettingsCache();
+});
+describe("writeMcpServer", () => {
+    it("adds a stdio server to the project scope", () => {
+        writeMcpServer({
+            ...ctx(),
+            name: "fs",
+            config: { transport: "stdio", command: "npx", args: ["-y", "server-fs"] },
+        });
+        const fs = resolve().mcpServers?.fs;
+        expect(fs?.transport).toBe("stdio");
+        if (fs?.transport === "stdio")
+            expect(fs.command).toBe("npx");
+    });
+    it("adds an http server to a chosen scope", () => {
+        writeMcpServer({
+            ...ctx(),
+            scope: "local",
+            name: "remote",
+            config: { transport: "streamable-http", url: "https://mcp.example.com", auth: "none" },
+        });
+        expect(findServerScope("remote", ctx())?.scope).toBe("local");
+    });
+});
+describe("findServerScope", () => {
+    it("returns the highest-precedence scope that defines a server", () => {
+        writeMcpServer({ ...ctx(), scope: "project", name: "s", config: { transport: "stdio", command: "a", args: [] } });
+        writeMcpServer({ ...ctx(), scope: "local", name: "s", config: { transport: "stdio", command: "b", args: [] } });
+        expect(findServerScope("s", ctx())?.scope).toBe("local");
+    });
+    it("returns null when the server is unknown", () => {
+        expect(findServerScope("ghost", ctx())).toBeNull();
+    });
+});
+describe("removeMcpServer", () => {
+    it("removes an existing server (auto-detecting its scope)", () => {
+        writeMcpServer({ ...ctx(), scope: "project", name: "s", config: { transport: "stdio", command: "a", args: [] } });
+        const res = removeMcpServer({ ...ctx(), name: "s" });
+        expect(res.found).toBe(true);
+        expect(resolve().mcpServers?.s).toBeUndefined();
+    });
+    it("reports not-found for an unknown server", () => {
+        expect(removeMcpServer({ ...ctx(), name: "ghost" }).found).toBe(false);
+    });
+});
+describe("setMcpServerDisabled", () => {
+    it("toggles the disabled flag", () => {
+        writeMcpServer({ ...ctx(), name: "s", config: { transport: "stdio", command: "a", args: [] } });
+        expect(setMcpServerDisabled({ ...ctx(), name: "s", disabled: true }).found).toBe(true);
+        const s = resolve().mcpServers?.s;
+        expect(s && "disabled" in s && s.disabled).toBe(true);
+        setMcpServerDisabled({ ...ctx(), name: "s", disabled: false });
+        const s2 = resolve().mcpServers?.s;
+        expect(s2 && "disabled" in s2 && s2.disabled).toBe(false);
+    });
+    it("reports not-found for an unknown server", () => {
+        expect(setMcpServerDisabled({ ...ctx(), name: "ghost", disabled: true }).found).toBe(false);
+    });
+});
+//# sourceMappingURL=mcp-write.test.js.map

package/dist/settings/__tests__/mcp-write.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-write.test.js","sourceRoot":"","sources":["../../../src/settings/__tests__/mcp-write.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEjE,IAAI,GAAW,CAAC;AAChB,IAAI,QAAgB,CAAC;AAErB,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC7D,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC;AAEzE,UAAU,CAAC,GAAG,EAAE;IACd,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACtD,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC3C,kBAAkB,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,kBAAkB,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,cAAc,CAAC;YACb,GAAG,GAAG,EAAE;YACR,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE;SAC1E,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,EAAE,EAAE,SAAS,KAAK,OAAO;YAAE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,cAAc,CAAC;YACb,GAAG,GAAG,EAAE;YACR,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,EAAE,yBAAyB,EAAE,IAAI,EAAE,MAAM,EAAE;SACvF,CAAC,CAAC;QACH,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,cAAc,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAClH,cAAc,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAChH,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,cAAc,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAClH,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,eAAe,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,cAAc,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAChG,MAAM,CAAC,oBAAoB,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,oBAAoB,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,IAAI,UAAU,IAAI,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,oBAAoB,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/settings/__tests__/permissions-gate.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=permissions-gate.test.d.ts.map

package/dist/settings/__tests__/permissions-gate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-gate.test.d.ts","sourceRoot":"","sources":["../../../src/settings/__tests__/permissions-gate.test.ts"],"names":[],"mappings":""}

package/dist/settings/__tests__/permissions-gate.test.js

@@ -0,0 +1,75 @@
+import { describe, it, expect } from "vitest";
+import { evaluateLocalPermission, parseRule } from "../permissions-gate.js";
+describe("parseRule", () => {
+    it("parses a bare tool", () => {
+        expect(parseRule("Edit")).toEqual({ tool: "Edit" });
+    });
+    it("parses a tool with a pattern", () => {
+        expect(parseRule("Bash(git push*)")).toEqual({ tool: "Bash", pattern: "git push*" });
+    });
+    it("keeps parens inside the pattern when the rule ends with ')'", () => {
+        expect(parseRule("Bash(echo (hi))")).toEqual({ tool: "Bash", pattern: "echo (hi)" });
+    });
+});
+describe("evaluateLocalPermission", () => {
+    it("allows everything when no permissions are configured", () => {
+        expect(evaluateLocalPermission("bash", { command: "rm -rf /" }, undefined).decision).toBe("allow");
+    });
+    it("denies a matching deny rule (bash command subject)", () => {
+        const perms = { deny: ["Bash(rm -rf*)"] };
+        const r = evaluateLocalPermission("bash", { command: "rm -rf /tmp/x" }, perms);
+        expect(r.decision).toBe("deny");
+        expect(r.rule).toBe("Bash(rm -rf*)");
+    });
+    it("maps write_file to Write and matches on the path subject", () => {
+        const perms = { deny: ["Write(.env*)"] };
+        expect(evaluateLocalPermission("write_file", { path: ".env.local" }, perms).decision).toBe("deny");
+        expect(evaluateLocalPermission("write_file", { path: "src/app.ts" }, perms).decision).toBe("allow");
+    });
+    it("deny wins over allow at the same scope", () => {
+        const perms = { allow: ["Bash(git*)"], deny: ["Bash(git push*)"] };
+        expect(evaluateLocalPermission("bash", { command: "git push origin" }, perms).decision).toBe("deny");
+        expect(evaluateLocalPermission("bash", { command: "git status" }, perms).decision).toBe("allow");
+    });
+    it("allow rule overrides defaultMode deny", () => {
+        const perms = { defaultMode: "deny", allow: ["Read"] };
+        expect(evaluateLocalPermission("read_file", { path: "x.ts" }, perms).decision).toBe("allow");
+        expect(evaluateLocalPermission("bash", { command: "ls" }, perms).decision).toBe("deny");
+    });
+    it("bypassPermissions allows anything not explicitly denied", () => {
+        const perms = { defaultMode: "bypassPermissions" };
+        expect(evaluateLocalPermission("bash", { command: "anything" }, perms).decision).toBe("allow");
+        const denied = { defaultMode: "bypassPermissions", deny: ["Bash"] };
+        expect(evaluateLocalPermission("bash", { command: "x" }, denied).decision).toBe("deny");
+    });
+    it("a bare tool rule matches every subject for that tool", () => {
+        const perms = { deny: ["Bash"] };
+        expect(evaluateLocalPermission("bash", { command: "echo hi" }, perms).decision).toBe("deny");
+    });
+    it("default mode allows when nothing matches", () => {
+        const perms = { deny: ["Write(.env*)"] };
+        expect(evaluateLocalPermission("read_file", { path: "x.ts" }, perms).decision).toBe("allow");
+    });
+    it("handles unknown tools and malformed input safely", () => {
+        expect(evaluateLocalPermission("mystery", null, { deny: ["mystery"] }).decision).toBe("deny");
+        expect(evaluateLocalPermission("bash", undefined, { deny: ["Bash(x*)"] }).decision).toBe("allow");
+    });
+    describe("MCP tool name globbing", () => {
+        it("denies an mcp__server__tool via a glob rule", () => {
+            const perms = { deny: ["mcp__github__delete_*"] };
+            expect(evaluateLocalPermission("mcp__github__delete_repo", {}, perms).decision).toBe("deny");
+            expect(evaluateLocalPermission("mcp__github__create_issue", {}, perms).decision).toBe("allow");
+        });
+        it("lets allow rules whitelist MCP tools under defaultMode deny", () => {
+            const perms = { defaultMode: "deny", allow: ["mcp__github__*", "Read"] };
+            expect(evaluateLocalPermission("mcp__github__create_issue", {}, perms).decision).toBe("allow");
+            expect(evaluateLocalPermission("mcp__other__tool", {}, perms).decision).toBe("deny");
+        });
+        it("does not let an MCP glob bleed into local tools", () => {
+            const perms = { deny: ["mcp__*"] };
+            expect(evaluateLocalPermission("bash", { command: "ls" }, perms).decision).toBe("allow");
+            expect(evaluateLocalPermission("mcp__x__y", {}, perms).decision).toBe("deny");
+        });
+    });
+});
+//# sourceMappingURL=permissions-gate.test.js.map

package/dist/settings/__tests__/permissions-gate.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-gate.test.js","sourceRoot":"","sources":["../../../src/settings/__tests__/permissions-gate.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAG5E,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,GAAG,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/E,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,uBAAuB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnG,MAAM,CAAC,uBAAuB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,KAAK,GAAgB,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAChF,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrG,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,KAAK,GAAgB,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QACpE,MAAM,CAAC,uBAAuB,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7F,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,KAAK,GAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;QAChE,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/F,MAAM,MAAM,GAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QACjF,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,uBAAuB,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,uBAAuB,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9F,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAC/D,MAAM,CAAC,uBAAuB,CAAC,0BAA0B,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7F,MAAM,CAAC,uBAAuB,CAAC,2BAA2B,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,KAAK,GAAgB,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC;YACtF,MAAM,CAAC,uBAAuB,CAAC,2BAA2B,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/F,MAAM,CAAC,uBAAuB,CAAC,kBAAkB,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,MAAM,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzF,MAAM,CAAC,uBAAuB,CAAC,WAAW,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/settings/__tests__/resolve.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=resolve.test.d.ts.map

package/dist/settings/__tests__/resolve.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.test.d.ts","sourceRoot":"","sources":["../../../src/settings/__tests__/resolve.test.ts"],"names":[],"mappings":""}

package/dist/settings/__tests__/resolve.test.js

@@ -0,0 +1,109 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { loadSettings, getScopePaths, clearSettingsCache } from "../resolve.js";
+let dir;
+let userPath;
+function write(scope, body) {
+    const paths = getScopePaths({ cwd: dir, userSettingsPath: userPath });
+    mkdirSync(join(paths[scope], ".."), { recursive: true });
+    writeFileSync(paths[scope], JSON.stringify(body), "utf8");
+}
+function resolve() {
+    return loadSettings({ cwd: dir, userSettingsPath: userPath, noCache: true }).settings;
+}
+beforeEach(() => {
+    dir = mkdtempSync(join(tmpdir(), "oxagen-settings-"));
+    userPath = join(dir, "user-settings.json");
+    clearSettingsCache();
+});
+afterEach(() => {
+    rmSync(dir, { recursive: true, force: true });
+    clearSettingsCache();
+});
+describe("loadSettings precedence", () => {
+    it("returns empty settings when no files exist", () => {
+        expect(resolve()).toEqual({});
+    });
+    it("local overrides project overrides user for scalars", () => {
+        write("user", { model: "u/model", apiUrl: "https://u.example.com" });
+        write("project", { model: "p/model" });
+        write("local", { model: "l/model" });
+        const s = resolve();
+        expect(s.model).toBe("l/model");
+        // apiUrl only set at user scope — survives the merge
+        expect(s.apiUrl).toBe("https://u.example.com");
+    });
+    it("merges env keys across scopes, higher scope winning per key", () => {
+        write("user", { env: { A: "1", B: "1" } });
+        write("project", { env: { B: "2", C: "2" } });
+        expect(resolve().env).toEqual({ A: "1", B: "2", C: "2" });
+    });
+    it("concatenates and dedupes permission allow/deny; higher scope's mode wins", () => {
+        write("user", { permissions: { defaultMode: "default", deny: ["Bash(rm*)"], allow: ["Read"] } });
+        write("project", {
+            permissions: { defaultMode: "deny", deny: ["Bash(rm*)", "Write(.env*)"] },
+        });
+        const p = resolve().permissions;
+        expect(p.defaultMode).toBe("deny");
+        expect(p.deny).toEqual(["Bash(rm*)", "Write(.env*)"]); // deduped
+        expect(p.allow).toEqual(["Read"]);
+    });
+    it("concatenates hooks per event across scopes", () => {
+        write("user", { hooks: { PreToolUse: [{ matcher: "bash", hooks: [{ type: "command", command: "a" }] }] } });
+        write("local", { hooks: { PreToolUse: [{ matcher: "write_file", hooks: [{ type: "command", command: "b" }] }] } });
+        const pre = resolve().hooks?.PreToolUse;
+        expect(pre).toHaveLength(2);
+        expect(pre?.[0]?.matcher).toBe("bash");
+        expect(pre?.[1]?.matcher).toBe("write_file");
+    });
+    it("merges mcpServers by key", () => {
+        write("user", { mcpServers: { a: { transport: "stdio", command: "x", args: [] } } });
+        write("project", { mcpServers: { b: { transport: "stdio", command: "y", args: [] } } });
+        expect(Object.keys(resolve().mcpServers ?? {})).toEqual(["a", "b"]);
+    });
+});
+describe("env var expansion", () => {
+    const KEY = "OXAGEN_TEST_EXPAND_VAL";
+    afterEach(() => {
+        delete process.env[KEY];
+    });
+    it("expands ${VAR} in string values", () => {
+        process.env[KEY] = "expanded";
+        write("project", { env: { TOKEN: `pre-\${${KEY}}-post` } });
+        expect(resolve().env?.TOKEN).toBe("pre-expanded-post");
+    });
+});
+describe("invalid files", () => {
+    it("records a scope error but still merges the valid scopes", () => {
+        write("project", { model: "good/model" });
+        // hand-write an invalid local file (bad apiUrl)
+        const paths = getScopePaths({ cwd: dir, userSettingsPath: userPath });
+        writeFileSync(paths.local, JSON.stringify({ apiUrl: "nope" }), "utf8");
+        const resolved = loadSettings({ cwd: dir, userSettingsPath: userPath, noCache: true });
+        expect(resolved.settings.model).toBe("good/model");
+        const local = resolved.scopes.find((s) => s.scope === "local");
+        expect(local?.error).toBeTruthy();
+    });
+    it("records an error for malformed JSON", () => {
+        const paths = getScopePaths({ cwd: dir, userSettingsPath: userPath });
+        mkdirSync(join(paths.project, ".."), { recursive: true });
+        writeFileSync(paths.project, "{ not json", "utf8");
+        const resolved = loadSettings({ cwd: dir, userSettingsPath: userPath, noCache: true });
+        expect(resolved.scopes.find((s) => s.scope === "project")?.error).toContain("invalid JSON");
+    });
+});
+describe("cache", () => {
+    it("caches by scope paths and clears on demand", () => {
+        write("project", { model: "v1/model" });
+        const first = loadSettings({ cwd: dir, userSettingsPath: userPath });
+        expect(first.settings.model).toBe("v1/model");
+        // overwrite on disk; cached read still returns the old value
+        write("project", { model: "v2/model" });
+        expect(loadSettings({ cwd: dir, userSettingsPath: userPath }).settings.model).toBe("v1/model");
+        clearSettingsCache();
+        expect(loadSettings({ cwd: dir, userSettingsPath: userPath }).settings.model).toBe("v2/model");
+    });
+});
+//# sourceMappingURL=resolve.test.js.map

package/dist/settings/__tests__/resolve.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.test.js","sourceRoot":"","sources":["../../../src/settings/__tests__/resolve.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGhF,IAAI,GAAW,CAAC;AAChB,IAAI,QAAgB,CAAC;AAErB,SAAS,KAAK,CAAC,KAAmC,EAAE,IAAoB;IACtE,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,OAAO;IACd,OAAO,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC;AACxF,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACtD,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC3C,kBAAkB,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,kBAAkB,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACrE,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACvC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,qDAAqD;QACrD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC3C,KAAK,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,KAAK,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QACjG,KAAK,CAAC,SAAS,EAAE;YACf,WAAW,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE;SAC1E,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC,WAAY,CAAC;QACjC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU;QACjE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5G,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACnH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,KAAK,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACrF,KAAK,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,MAAM,GAAG,GAAG,wBAAwB,CAAC;IACrC,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;QAC9B,KAAK,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,GAAG,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC1C,gDAAgD;QAChD,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;IACrB,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,6DAA6D;QAC7D,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/F,kBAAkB,EAAE,CAAC;QACrB,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/settings/__tests__/runtime.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=runtime.test.d.ts.map

package/dist/settings/__tests__/runtime.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.test.d.ts","sourceRoot":"","sources":["../../../src/settings/__tests__/runtime.test.ts"],"names":[],"mappings":""}

package/dist/settings/__tests__/runtime.test.js

@@ -0,0 +1,72 @@
+import { describe, it, expect, beforeEach, afterEach } from "vitest";
+import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { applySettingsToEnv } from "../runtime.js";
+import { getScopePaths, clearSettingsCache } from "../resolve.js";
+let dir;
+let userPath;
+const TOUCHED = ["OXAGEN_MODEL", "OXAGEN_API_URL", "OXAGEN_RT_TEST_A", "OXAGEN_RT_TEST_B"];
+const saved = {};
+function writeProject(body) {
+    const path = getScopePaths({ cwd: dir, userSettingsPath: userPath }).project;
+    mkdirSync(join(path, ".."), { recursive: true });
+    writeFileSync(path, JSON.stringify(body), "utf8");
+}
+function apply() {
+    return applySettingsToEnv({ cwd: dir, userSettingsPath: userPath, noCache: true });
+}
+beforeEach(() => {
+    dir = mkdtempSync(join(tmpdir(), "oxagen-runtime-"));
+    userPath = join(dir, "user-settings.json");
+    for (const k of TOUCHED) {
+        saved[k] = process.env[k];
+        delete process.env[k];
+    }
+    clearSettingsCache();
+});
+afterEach(() => {
+    rmSync(dir, { recursive: true, force: true });
+    for (const k of TOUCHED) {
+        if (saved[k] === undefined)
+            delete process.env[k];
+        else
+            process.env[k] = saved[k];
+    }
+    clearSettingsCache();
+});
+describe("applySettingsToEnv", () => {
+    it("fills unset env vars from settings.env", () => {
+        writeProject({ env: { OXAGEN_RT_TEST_A: "from-settings" } });
+        const applied = apply();
+        expect(process.env["OXAGEN_RT_TEST_A"]).toBe("from-settings");
+        expect(applied.envKeys).toContain("OXAGEN_RT_TEST_A");
+    });
+    it("does not override an env var the shell already set", () => {
+        process.env["OXAGEN_RT_TEST_B"] = "from-shell";
+        writeProject({ env: { OXAGEN_RT_TEST_B: "from-settings" } });
+        const applied = apply();
+        expect(process.env["OXAGEN_RT_TEST_B"]).toBe("from-shell");
+        expect(applied.envKeys).not.toContain("OXAGEN_RT_TEST_B");
+    });
+    it("projects apiUrl and model into OXAGEN_API_URL / OXAGEN_MODEL when unset", () => {
+        writeProject({ model: "vendor/model", apiUrl: "https://api.example.com" });
+        const applied = apply();
+        expect(process.env["OXAGEN_MODEL"]).toBe("vendor/model");
+        expect(process.env["OXAGEN_API_URL"]).toBe("https://api.example.com");
+        expect(applied.model).toBe(true);
+        expect(applied.apiUrl).toBe(true);
+    });
+    it("leaves a shell-set OXAGEN_MODEL untouched", () => {
+        process.env["OXAGEN_MODEL"] = "shell/model";
+        writeProject({ model: "settings/model" });
+        const applied = apply();
+        expect(process.env["OXAGEN_MODEL"]).toBe("shell/model");
+        expect(applied.model).toBe(false);
+    });
+    it("is a no-op when there are no settings", () => {
+        const applied = apply();
+        expect(applied).toEqual({ envKeys: [], apiUrl: false, model: false });
+    });
+});
+//# sourceMappingURL=runtime.test.js.map

package/dist/settings/__tests__/runtime.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.test.js","sourceRoot":"","sources":["../../../src/settings/__tests__/runtime.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGlE,IAAI,GAAW,CAAC;AAChB,IAAI,QAAgB,CAAC;AACrB,MAAM,OAAO,GAAG,CAAC,cAAc,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;AAC3F,MAAM,KAAK,GAAuC,EAAE,CAAC;AAErD,SAAS,YAAY,CAAC,IAAoB;IACxC,MAAM,IAAI,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC;IAC7E,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,KAAK;IACZ,OAAO,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,UAAU,CAAC,GAAG,EAAE;IACd,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACrD,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,kBAAkB,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;;YAC7C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,kBAAkB,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,YAAY,CAAC,EAAE,GAAG,EAAE,EAAE,gBAAgB,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC;QACxB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,GAAG,YAAY,CAAC;QAC/C,YAAY,CAAC,EAAE,GAAG,EAAE,EAAE,gBAAgB,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC;QACxB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3D,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,YAAY,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC;QACxB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,aAAa,CAAC;QAC5C,YAAY,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC;QACxB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACxD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC;QACxB,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/settings/__tests__/schema.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=schema.test.d.ts.map

package/dist/settings/__tests__/schema.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.d.ts","sourceRoot":"","sources":["../../../src/settings/__tests__/schema.test.ts"],"names":[],"mappings":""}

package/dist/settings/__tests__/schema.test.js

@@ -0,0 +1,55 @@
+import { describe, it, expect } from "vitest";
+import { oxagenSettingsSchema, permissionsSchema, hooksSchema } from "../schema.js";
+describe("oxagenSettingsSchema", () => {
+    it("parses a full settings document", () => {
+        const parsed = oxagenSettingsSchema.parse({
+            model: "anthropic/claude-sonnet-4.6",
+            apiUrl: "https://api.oxagen.sh",
+            env: { FOO: "bar" },
+            permissions: { defaultMode: "default", deny: ["Bash(rm -rf*)"], allow: ["Bash(git*)"] },
+            hooks: { PreToolUse: [{ matcher: "bash", hooks: [{ type: "command", command: "echo hi" }] }] },
+            mcpServers: {
+                github: { transport: "stdio", command: "npx", args: ["-y", "server-github"] },
+            },
+            toolVisibility: { github: { include: ["create_*"] } },
+        });
+        expect(parsed.model).toBe("anthropic/claude-sonnet-4.6");
+        expect(parsed.permissions?.deny).toContain("Bash(rm -rf*)");
+        expect(parsed.mcpServers?.github?.transport).toBe("stdio");
+    });
+    it("defaults a hook action's type to 'command'", () => {
+        const parsed = hooksSchema.parse({
+            PreToolUse: [{ hooks: [{ command: "echo hi" }] }],
+        });
+        expect(parsed.PreToolUse?.[0]?.hooks[0]?.type).toBe("command");
+    });
+    it("rejects an invalid apiUrl", () => {
+        expect(() => oxagenSettingsSchema.parse({ apiUrl: "not-a-url" })).toThrow();
+    });
+    it("rejects an unknown permission mode", () => {
+        expect(() => permissionsSchema.parse({ defaultMode: "yolo" })).toThrow();
+    });
+    it("rejects a hook matcher with no actions", () => {
+        expect(() => hooksSchema.parse({ PreToolUse: [{ matcher: "*", hooks: [] }] })).toThrow();
+    });
+    it("passes through forward-compat sections (commands/skills)", () => {
+        const parsed = oxagenSettingsSchema.parse({
+            model: "x/y",
+            commands: ["./.oxagen/commands"],
+            skills: ["./.oxagen/skills"],
+        });
+        expect(parsed["commands"]).toEqual(["./.oxagen/commands"]);
+        expect(parsed["skills"]).toEqual(["./.oxagen/skills"]);
+    });
+    it("validates inline agent definitions (prompt required)", () => {
+        const parsed = oxagenSettingsSchema.parse({
+            agents: { reviewer: { description: "d", prompt: "You review.", tools: ["Read"], model: "z" } },
+        });
+        expect(parsed.agents?.reviewer?.prompt).toBe("You review.");
+        expect(() => oxagenSettingsSchema.parse({ agents: { bad: { model: "z" } } })).toThrow();
+    });
+    it("accepts an empty document", () => {
+        expect(oxagenSettingsSchema.parse({})).toEqual({});
+    });
+});
+//# sourceMappingURL=schema.test.js.map

package/dist/settings/__tests__/schema.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.test.js","sourceRoot":"","sources":["../../../src/settings/__tests__/schema.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEpF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC;YACxC,KAAK,EAAE,6BAA6B;YACpC,MAAM,EAAE,uBAAuB;YAC/B,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE;YACnB,WAAW,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,EAAE;YACvF,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE;YAC9F,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE;aAC9E;YACD,cAAc,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE;SACtD,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC;YAC/B,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC;YACxC,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,CAAC,oBAAoB,CAAC;YAChC,MAAM,EAAE,CAAC,kBAAkB,CAAC;SAC7B,CAA4B,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC;YACxC,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;SAC/F,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/settings/__tests__/write.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=write.test.d.ts.map

package/dist/settings/__tests__/write.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.test.d.ts","sourceRoot":"","sources":["../../../src/settings/__tests__/write.test.ts"],"names":[],"mappings":""}