@roackb2/heddle 1.4.0 → 1.5.0

package/dist/src/core/approvals/policies.d.ts

@@ -0,0 +1,20 @@
+import type { ToolCall } from '../../core/types.js';
+import type { ToolApprovalPolicy, ToolApprovalPolicyContext, ToolApprovalSurface } from './types.js';
+/**
+ * Owns reusable approval policy constructors and the default policy chain.
+ */
+export declare class ToolApprovalPolicies {
+    static default(): ToolApprovalPolicy[];
+    static toolRequiresApproval(): ToolApprovalPolicy;
+    static outsideWorkspaceInspection(): ToolApprovalPolicy;
+    static rememberedProjectRule(args: {
+        isApproved: (context: ToolApprovalPolicyContext) => boolean;
+        reason?: string;
+    }): ToolApprovalPolicy;
+    static humanSurface(surface: ToolApprovalSurface): ToolApprovalPolicy;
+    static isOutsideWorkspaceInspectionCall(args: {
+        call: ToolCall;
+        workspaceRoot?: string;
+    }): boolean;
+}
+//# sourceMappingURL=policies.d.ts.map

package/dist/src/core/approvals/policies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.d.ts","sourceRoot":"","sources":["../../../../src/core/approvals/policies.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,KAAK,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAErG;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,OAAO,IAAI,kBAAkB,EAAE;IAOtC,MAAM,CAAC,oBAAoB,IAAI,kBAAkB;IAKjD,MAAM,CAAC,0BAA0B,IAAI,kBAAkB;IAOvD,MAAM,CAAC,qBAAqB,CAAC,IAAI,EAAE;QACjC,UAAU,EAAE,CAAC,OAAO,EAAE,yBAAyB,KAAK,OAAO,CAAC;QAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,kBAAkB;IAOtB,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,kBAAkB;IASrE,MAAM,CAAC,gCAAgC,CAAC,IAAI,EAAE;QAC5C,IAAI,EAAE,QAAQ,CAAC;QACf,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO;CAyBZ"}

package/dist/src/core/approvals/policies.js

@@ -0,0 +1,56 @@
+import { isAbsolute, relative, resolve } from 'node:path';
+/**
+ * Owns reusable approval policy constructors and the default policy chain.
+ */
+export class ToolApprovalPolicies {
+    static default() {
+        return [
+            ToolApprovalPolicies.toolRequiresApproval(),
+            ToolApprovalPolicies.outsideWorkspaceInspection(),
+        ];
+    }
+    static toolRequiresApproval() {
+        return ({ tool }) => tool.requiresApproval ? { type: 'request', reason: `${tool.name} requires approval` } : undefined;
+    }
+    static outsideWorkspaceInspection() {
+        return ({ call, workspaceRoot }) => ToolApprovalPolicies.isOutsideWorkspaceInspectionCall({ call, workspaceRoot }) ?
+            { type: 'request', reason: `${call.tool} targets a path outside the workspace` }
+            : undefined;
+    }
+    static rememberedProjectRule(args) {
+        return (context) => args.isApproved(context) ?
+            { type: 'allow', reason: args.reason ?? 'Approved by saved project rule' }
+            : undefined;
+    }
+    static humanSurface(surface) {
+        return async (context) => {
+            const decision = await surface(context);
+            return decision.approved ?
+                { type: 'allow', reason: decision.reason }
+                : { type: 'deny', reason: decision.reason };
+        };
+    }
+    static isOutsideWorkspaceInspectionCall(args) {
+        const { call, workspaceRoot = process.cwd() } = args;
+        if (!['read_file', 'list_files', 'search_files', 'edit_file'].includes(call.tool)) {
+            return false;
+        }
+        const input = call.input;
+        if (!input || typeof input !== 'object' || Array.isArray(input)) {
+            return false;
+        }
+        const record = input;
+        const rawPath = typeof record.path === 'string'
+            ? record.path
+            : call.tool === 'search_files' ? '.'
+                : undefined;
+        if (!rawPath) {
+            return false;
+        }
+        const resolvedWorkspaceRoot = resolve(workspaceRoot);
+        const resolvedTarget = resolve(resolvedWorkspaceRoot, rawPath);
+        const relativeTarget = relative(resolvedWorkspaceRoot, resolvedTarget);
+        return relativeTarget.startsWith('..') || isAbsolute(relativeTarget);
+    }
+}
+//# sourceMappingURL=policies.js.map

package/dist/src/core/approvals/policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../../../src/core/approvals/policies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAI1D;;GAEG;AACH,MAAM,OAAO,oBAAoB;IAC/B,MAAM,CAAC,OAAO;QACZ,OAAO;YACL,oBAAoB,CAAC,oBAAoB,EAAE;YAC3C,oBAAoB,CAAC,0BAA0B,EAAE;SAClD,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,oBAAoB;QACzB,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAClB,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,CAAC;IAED,MAAM,CAAC,0BAA0B;QAC/B,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CACjC,oBAAoB,CAAC,gCAAgC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;YAC9E,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,uCAAuC,EAAE;YAClF,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,qBAAqB,CAAC,IAG5B;QACC,OAAO,CAAC,OAAO,EAAE,EAAE,CACjB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YACxB,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,gCAAgC,EAAE;YAC5E,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,OAA4B;QAC9C,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;YACvB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACtB,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;gBAC5C,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QAChD,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,gCAAgC,CAAC,IAGvC;QACC,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;QACrD,IAAI,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC7C,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG;gBACpC,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;QACrD,MAAM,cAAc,GAAG,OAAO,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,QAAQ,CAAC,qBAAqB,EAAE,cAAc,CAAC,CAAC;QACvE,OAAO,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;IACvE,CAAC;CACF"}

package/dist/src/core/approvals/remembered-rules/codec.d.ts

@@ -0,0 +1,17 @@
+import type { ProjectApprovalRule } from './types.js';
+/**
+ * Owns persisted approval-rule JSON validation and tolerant legacy parsing.
+ *
+ * Reads are forgiving so a malformed or older approval file does not crash the
+ * host. Writes are strict and go through the same Zod schema used for reads.
+ */
+export declare class ProjectApprovalRuleCodec {
+    static parseList(value: unknown): ProjectApprovalRule[];
+    static serialize(rules: ProjectApprovalRule[]): string;
+    private static parseRule;
+    private static parseShellRule;
+    private static dedupeRules;
+    private static normalizeShellCapability;
+    private static readonly SHELL_CAPABILITIES;
+}
+//# sourceMappingURL=codec.d.ts.map

package/dist/src/core/approvals/remembered-rules/codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.d.ts","sourceRoot":"","sources":["../../../../../src/core/approvals/remembered-rules/codec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAKtD;;;;;GAKG;AACH,qBAAa,wBAAwB;IACnC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,EAAE;IAUvD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,mBAAmB,EAAE,GAAG,MAAM;IAItD,OAAO,CAAC,MAAM,CAAC,SAAS;IA+CxB,OAAO,CAAC,MAAM,CAAC,cAAc;IAmC7B,OAAO,CAAC,MAAM,CAAC,WAAW;IAa1B,OAAO,CAAC,MAAM,CAAC,wBAAwB;IAMvC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAcvC;CACJ"}

package/dist/src/core/approvals/remembered-rules/codec.js

@@ -0,0 +1,117 @@
+import { ProjectApprovalRules } from './service.js';
+import { ProjectApprovalRuleCandidateSchema, ProjectApprovalRuleListSchema } from './schemas.js';
+/**
+ * Owns persisted approval-rule JSON validation and tolerant legacy parsing.
+ *
+ * Reads are forgiving so a malformed or older approval file does not crash the
+ * host. Writes are strict and go through the same Zod schema used for reads.
+ */
+export class ProjectApprovalRuleCodec {
+    static parseList(value) {
+        if (!Array.isArray(value)) {
+            return [];
+        }
+        return ProjectApprovalRuleCodec.dedupeRules(value.flatMap((rule) => ProjectApprovalRuleCodec.parseRule(rule)));
+    }
+    static serialize(rules) {
+        return `${JSON.stringify(ProjectApprovalRuleListSchema.parse(rules), null, 2)}\n`;
+    }
+    static parseRule(value) {
+        const parsed = ProjectApprovalRuleCandidateSchema.safeParse(value);
+        if (!parsed.success) {
+            return [];
+        }
+        const candidate = parsed.data;
+        if (candidate.tool === 'run_shell_mutate' && typeof candidate.command === 'string' && typeof candidate.createdAt === 'string') {
+            return ProjectApprovalRuleCodec.parseShellRule({
+                mode: candidate.mode,
+                command: candidate.command,
+                scope: candidate.scope,
+                capability: candidate.capability,
+                createdAt: candidate.createdAt,
+            });
+        }
+        if (candidate.tool === 'edit_file' && candidate.mode === 'tool' && typeof candidate.createdAt === 'string') {
+            return [{
+                    tool: 'edit_file',
+                    mode: 'tool',
+                    command: '*',
+                    scope: 'workspace',
+                    capability: 'file_edit',
+                    createdAt: candidate.createdAt,
+                }];
+        }
+        if ((candidate.tool === 'read_file' || candidate.tool === 'list_files') &&
+            candidate.mode === 'exact' &&
+            typeof candidate.command === 'string' &&
+            typeof candidate.createdAt === 'string') {
+            return [{
+                    tool: candidate.tool,
+                    mode: 'exact',
+                    command: ProjectApprovalRules.normalizePath(candidate.command),
+                    scope: 'outside_workspace',
+                    capability: 'file_inspection',
+                    createdAt: candidate.createdAt,
+                }];
+        }
+        return [];
+    }
+    static parseShellRule(value) {
+        if (value.mode === 'exact' || value.mode === 'prefix') {
+            return [{
+                    tool: 'run_shell_mutate',
+                    mode: value.mode,
+                    command: ProjectApprovalRules.normalizeCommand(value.command),
+                    scope: value.scope === 'external' ? 'external' : value.scope === 'inspect' ? 'inspect' : 'workspace',
+                    capability: ProjectApprovalRuleCodec.normalizeShellCapability(value.capability),
+                    createdAt: value.createdAt,
+                }];
+        }
+        const normalizedCommand = ProjectApprovalRules.normalizeCommand(value.command);
+        const legacyVerificationPrefix = ProjectApprovalRules.buildLegacyVerificationPrefix(normalizedCommand);
+        if (legacyVerificationPrefix) {
+            return [{
+                    tool: 'run_shell_mutate',
+                    mode: 'prefix',
+                    command: legacyVerificationPrefix,
+                    scope: 'workspace',
+                    capability: 'verification',
+                    createdAt: value.createdAt,
+                }];
+        }
+        const migrated = ProjectApprovalRules.createForCommand(normalizedCommand);
+        return [{ ...migrated, createdAt: value.createdAt }];
+    }
+    static dedupeRules(rules) {
+        const seen = new Set();
+        return rules.filter((rule) => {
+            const key = `${rule.tool}:${rule.mode}:${rule.command}`;
+            if (seen.has(key)) {
+                return false;
+            }
+            seen.add(key);
+            return true;
+        });
+    }
+    static normalizeShellCapability(value) {
+        return ProjectApprovalRuleCodec.SHELL_CAPABILITIES.has(value)
+            ? value
+            : 'unknown_workspace';
+    }
+    static SHELL_CAPABILITIES = new Set([
+        'workspace_listing',
+        'file_inspection',
+        'workspace_search',
+        'structured_inspection',
+        'environment_inspection',
+        'git_inspection',
+        'dependency',
+        'verification',
+        'formatting',
+        'file_operation',
+        'git_staging',
+        'project_script',
+        'unknown_workspace',
+    ]);
+}
+//# sourceMappingURL=codec.js.map

package/dist/src/core/approvals/remembered-rules/codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.js","sourceRoot":"","sources":["../../../../../src/core/approvals/remembered-rules/codec.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,kCAAkC,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAEjG;;;;;GAKG;AACH,MAAM,OAAO,wBAAwB;IACnC,MAAM,CAAC,SAAS,CAAC,KAAc;QAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,wBAAwB,CAAC,WAAW,CACzC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAClE,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,KAA4B;QAC3C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,6BAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACpF,CAAC;IAEO,MAAM,CAAC,SAAS,CAAC,KAAc;QACrC,MAAM,MAAM,GAAG,kCAAkC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;QAC9B,IAAI,SAAS,CAAC,IAAI,KAAK,kBAAkB,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC9H,OAAO,wBAAwB,CAAC,cAAc,CAAC;gBAC7C,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,SAAS,EAAE,SAAS,CAAC,SAAS;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3G,OAAO,CAAC;oBACN,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,GAAG;oBACZ,KAAK,EAAE,WAAW;oBAClB,UAAU,EAAE,WAAW;oBACvB,SAAS,EAAE,SAAS,CAAC,SAAS;iBAC/B,CAAC,CAAC;QACL,CAAC;QAED,IACE,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,CAAC;YACnE,SAAS,CAAC,IAAI,KAAK,OAAO;YAC1B,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;YACrC,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,EACvC,CAAC;YACD,OAAO,CAAC;oBACN,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,oBAAoB,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC;oBAC9D,KAAK,EAAE,mBAAmB;oBAC1B,UAAU,EAAE,iBAAiB;oBAC7B,SAAS,EAAE,SAAS,CAAC,SAAS;iBAC/B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,MAAM,CAAC,cAAc,CAAC,KAM7B;QACC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtD,OAAO,CAAC;oBACN,IAAI,EAAE,kBAAkB;oBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,oBAAoB,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC;oBAC7D,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;oBACpG,UAAU,EAAE,wBAAwB,CAAC,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC;oBAC/E,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/E,MAAM,wBAAwB,GAAG,oBAAoB,CAAC,6BAA6B,CAAC,iBAAiB,CAAC,CAAC;QACvG,IAAI,wBAAwB,EAAE,CAAC;YAC7B,OAAO,CAAC;oBACN,IAAI,EAAE,kBAAkB;oBACxB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,wBAAwB;oBACjC,KAAK,EAAE,WAAW;oBAClB,UAAU,EAAE,cAAc;oBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAC1E,OAAO,CAAC,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACvD,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,KAA4B;QACrD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC3B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,wBAAwB,CAAC,KAAyB;QAC/D,OAAO,wBAAwB,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAA2B,CAAC;YACjF,CAAC,CAAC,KAA2B;YAC7B,CAAC,CAAC,mBAAmB,CAAC;IAC1B,CAAC;IAEO,MAAM,CAAU,kBAAkB,GAAG,IAAI,GAAG,CAAqB;QACvE,mBAAmB;QACnB,iBAAiB;QACjB,kBAAkB;QAClB,uBAAuB;QACvB,wBAAwB;QACxB,gBAAgB;QAChB,YAAY;QACZ,cAAc;QACd,YAAY;QACZ,gBAAgB;QAChB,aAAa;QACb,gBAAgB;QAChB,mBAAmB;KACpB,CAAC,CAAC"}

package/dist/src/core/approvals/remembered-rules/index.d.ts

@@ -0,0 +1,5 @@
+export { ProjectApprovalRuleCodec } from './codec.js';
+export { FileProjectApprovalRuleRepository } from './repository.js';
+export { ProjectApprovalRules } from './service.js';
+export type { ApprovalMode, ApprovalRuleTool, ProjectApprovalRule } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/core/approvals/remembered-rules/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/approvals/remembered-rules/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,iCAAiC,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC"}

package/dist/src/core/approvals/remembered-rules/index.js

@@ -0,0 +1,4 @@
+export { ProjectApprovalRuleCodec } from './codec.js';
+export { FileProjectApprovalRuleRepository } from './repository.js';
+export { ProjectApprovalRules } from './service.js';
+//# sourceMappingURL=index.js.map

package/dist/src/core/approvals/remembered-rules/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/approvals/remembered-rules/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,iCAAiC,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC"}

package/dist/src/core/approvals/remembered-rules/repository.d.ts

@@ -0,0 +1,11 @@
+import type { ProjectApprovalRule } from './types.js';
+/**
+ * Owns file IO for remembered project approval rules.
+ */
+export declare class FileProjectApprovalRuleRepository {
+    private readonly filePath;
+    constructor(filePath: string);
+    list(): ProjectApprovalRule[];
+    save(rules: ProjectApprovalRule[]): void;
+}
+//# sourceMappingURL=repository.d.ts.map

package/dist/src/core/approvals/remembered-rules/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../src/core/approvals/remembered-rules/repository.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD;;GAEG;AACH,qBAAa,iCAAiC;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,MAAM;IAE7C,IAAI,IAAI,mBAAmB,EAAE;IAe7B,IAAI,CAAC,KAAK,EAAE,mBAAmB,EAAE,GAAG,IAAI;CAIzC"}

package/dist/src/core/approvals/remembered-rules/repository.js

@@ -0,0 +1,29 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { ProjectApprovalRuleCodec } from './codec.js';
+/**
+ * Owns file IO for remembered project approval rules.
+ */
+export class FileProjectApprovalRuleRepository {
+    filePath;
+    constructor(filePath) {
+        this.filePath = filePath;
+    }
+    list() {
+        try {
+            if (!existsSync(this.filePath)) {
+                return [];
+            }
+            return ProjectApprovalRuleCodec.parseList(JSON.parse(readFileSync(this.filePath, 'utf8')));
+        }
+        catch (error) {
+            process.stderr.write(`Failed to load project approval rules from ${this.filePath}: ${error instanceof Error ? error.message : String(error)}\n`);
+            return [];
+        }
+    }
+    save(rules) {
+        mkdirSync(dirname(this.filePath), { recursive: true });
+        writeFileSync(this.filePath, ProjectApprovalRuleCodec.serialize(rules));
+    }
+}
+//# sourceMappingURL=repository.js.map

package/dist/src/core/approvals/remembered-rules/repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../../../../src/core/approvals/remembered-rules/repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAGtD;;GAEG;AACH,MAAM,OAAO,iCAAiC;IACf;IAA7B,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAEjD,IAAI;QACF,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,OAAO,wBAAwB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAY,CAAC,CAAC;QACxG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8CAA8C,IAAI,CAAC,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAC3H,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,KAA4B;QAC/B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1E,CAAC;CACF"}

package/dist/src/core/approvals/remembered-rules/schemas.d.ts

@@ -0,0 +1,55 @@
+import { z } from 'zod';
+export declare const ApprovalModeSchema: z.ZodEnum<{
+    tool: "tool";
+    exact: "exact";
+    prefix: "prefix";
+}>;
+export declare const ApprovalRuleToolSchema: z.ZodEnum<{
+    list_files: "list_files";
+    read_file: "read_file";
+    edit_file: "edit_file";
+    run_shell_mutate: "run_shell_mutate";
+}>;
+export declare const ProjectApprovalRuleSchema: z.ZodObject<{
+    tool: z.ZodEnum<{
+        list_files: "list_files";
+        read_file: "read_file";
+        edit_file: "edit_file";
+        run_shell_mutate: "run_shell_mutate";
+    }>;
+    mode: z.ZodEnum<{
+        tool: "tool";
+        exact: "exact";
+        prefix: "prefix";
+    }>;
+    command: z.ZodString;
+    scope: z.ZodString;
+    capability: z.ZodString;
+    createdAt: z.ZodString;
+}, z.core.$strip>;
+export declare const ProjectApprovalRuleListSchema: z.ZodArray<z.ZodObject<{
+    tool: z.ZodEnum<{
+        list_files: "list_files";
+        read_file: "read_file";
+        edit_file: "edit_file";
+        run_shell_mutate: "run_shell_mutate";
+    }>;
+    mode: z.ZodEnum<{
+        tool: "tool";
+        exact: "exact";
+        prefix: "prefix";
+    }>;
+    command: z.ZodString;
+    scope: z.ZodString;
+    capability: z.ZodString;
+    createdAt: z.ZodString;
+}, z.core.$strip>>;
+export declare const ProjectApprovalRuleCandidateSchema: z.ZodObject<{
+    tool: z.ZodOptional<z.ZodString>;
+    mode: z.ZodOptional<z.ZodString>;
+    command: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    capability: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/src/core/approvals/remembered-rules/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../../../src/core/approvals/remembered-rules/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,kBAAkB;;;;EACsC,CAAC;AAEtE,eAAO,MAAM,sBAAsB;;;;;EACyB,CAAC;AAE7D,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;iBAOoB,CAAC;AAE3D,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;kBACyB,CAAC;AAEpE,eAAO,MAAM,kCAAkC;;;;;;;iBAO2C,CAAC"}

package/dist/src/core/approvals/remembered-rules/schemas.js

@@ -0,0 +1,24 @@
+import { z } from 'zod';
+export const ApprovalModeSchema = z.enum(['exact', 'prefix', 'tool'])
+    .describe('How the remembered approval matches future tool calls.');
+export const ApprovalRuleToolSchema = z.enum(['run_shell_mutate', 'edit_file', 'read_file', 'list_files'])
+    .describe('Tool covered by the remembered approval rule.');
+export const ProjectApprovalRuleSchema = z.object({
+    tool: ApprovalRuleToolSchema,
+    mode: ApprovalModeSchema,
+    command: z.string().describe('Normalized command, path, or wildcard target covered by the rule.'),
+    scope: z.string().describe('Execution or file scope covered by the approval.'),
+    capability: z.string().describe('Capability category covered by the approval.'),
+    createdAt: z.string().describe('ISO timestamp for when the rule was created.'),
+}).describe('Persisted remembered project approval rule.');
+export const ProjectApprovalRuleListSchema = z.array(ProjectApprovalRuleSchema)
+    .describe('Persisted list of remembered project approval rules.');
+export const ProjectApprovalRuleCandidateSchema = z.object({
+    tool: z.string().optional().describe('Persisted tool name from current or legacy approval data.'),
+    mode: z.string().optional().describe('Persisted match mode from current or legacy approval data.'),
+    command: z.string().optional().describe('Persisted command, path, or wildcard target.'),
+    scope: z.string().optional().describe('Persisted execution or file scope.'),
+    capability: z.string().optional().describe('Persisted capability category.'),
+    createdAt: z.string().optional().describe('Persisted creation timestamp.'),
+}).passthrough().describe('Tolerant approval-rule candidate used when reading disk data.');
+//# sourceMappingURL=schemas.js.map

package/dist/src/core/approvals/remembered-rules/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../../../../src/core/approvals/remembered-rules/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;KAClE,QAAQ,CAAC,wDAAwD,CAAC,CAAC;AAEtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;KACvG,QAAQ,CAAC,+CAA+C,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,sBAAsB;IAC5B,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IACjG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;IAC9E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAC/E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;CAC/E,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;KAC5E,QAAQ,CAAC,sDAAsD,CAAC,CAAC;AAEpE,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;IACjG,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4DAA4D,CAAC;IAClG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACvF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAC3E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;CAC3E,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,+DAA+D,CAAC,CAAC"}

package/dist/src/core/approvals/remembered-rules/service.d.ts

@@ -0,0 +1,28 @@
+import type { ToolCall } from '../../../core/types.js';
+import type { ProjectApprovalRule } from './types.js';
+/**
+ * Owns remembered approval rule semantics: target extraction, matching,
+ * normalization, rule creation, and user-facing descriptions.
+ */
+export declare class ProjectApprovalRules {
+    static normalizeCommand(command: string): string;
+    static findMatching(args: {
+        rules: ProjectApprovalRule[];
+        tool: string;
+        input: unknown;
+    }): ProjectApprovalRule | undefined;
+    static createForCommand(command: string): ProjectApprovalRule;
+    static createForCall(call: ToolCall): ProjectApprovalRule | undefined;
+    static describe(rule: ProjectApprovalRule): string;
+    static extractTarget(args: {
+        tool: string;
+        input: unknown;
+    }): string | undefined;
+    static normalizePath(path: string): string;
+    static buildLegacyVerificationPrefix(command: string): string | undefined;
+    private static createShellRule;
+    private static shouldUseVerificationPrefixApproval;
+    private static buildVerificationPrefix;
+    private static canonicalizeVerificationCommand;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/src/core/approvals/remembered-rules/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../../src/core/approvals/remembered-rules/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAOhD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD;;;GAGG;AACH,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAIhD,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE;QACxB,KAAK,EAAE,mBAAmB,EAAE,CAAC;QAC7B,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,OAAO,CAAC;KAChB,GAAG,mBAAmB,GAAG,SAAS;IA0BnC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,mBAAmB;IAI7D,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,mBAAmB,GAAG,SAAS;IAgCrE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM;IAgBlD,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,OAAO,CAAC;KAChB,GAAG,MAAM,GAAG,SAAS;IA8BtB,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAS1C,MAAM,CAAC,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAczE,OAAO,CAAC,MAAM,CAAC,eAAe;IAuC9B,OAAO,CAAC,MAAM,CAAC,mCAAmC;IAYlD,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAqBtC,OAAO,CAAC,MAAM,CAAC,+BAA+B;CAgC/C"}

package/dist/src/core/approvals/remembered-rules/service.js

@@ -0,0 +1,200 @@
+import { classifyShellCommandPolicy, DEFAULT_MUTATE_RULES, } from '../../../core/tools/toolkits/shell-process/run-shell.js';
+/**
+ * Owns remembered approval rule semantics: target extraction, matching,
+ * normalization, rule creation, and user-facing descriptions.
+ */
+export class ProjectApprovalRules {
+    static normalizeCommand(command) {
+        return ProjectApprovalRules.canonicalizeVerificationCommand(command.trim().replace(/\s+/g, ' '));
+    }
+    static findMatching(args) {
+        const target = ProjectApprovalRules.extractTarget({
+            tool: args.tool,
+            input: args.input,
+        });
+        if (!target) {
+            return undefined;
+        }
+        return args.rules.find((rule) => {
+            if (rule.tool !== args.tool) {
+                return false;
+            }
+            if (rule.mode === 'tool') {
+                return true;
+            }
+            if (rule.mode === 'prefix') {
+                return target === rule.command || target.startsWith(`${rule.command} `);
+            }
+            return rule.command === target;
+        });
+    }
+    static createForCommand(command) {
+        return ProjectApprovalRules.createShellRule(ProjectApprovalRules.normalizeCommand(command));
+    }
+    static createForCall(call) {
+        if (call.tool === 'edit_file') {
+            return {
+                tool: 'edit_file',
+                mode: 'tool',
+                command: '*',
+                scope: 'workspace',
+                capability: 'file_edit',
+                createdAt: new Date().toISOString(),
+            };
+        }
+        if (call.tool === 'read_file' || call.tool === 'list_files') {
+            const target = ProjectApprovalRules.extractTarget({ tool: call.tool, input: call.input });
+            return target ? {
+                tool: call.tool,
+                mode: 'exact',
+                command: target,
+                scope: 'outside_workspace',
+                capability: 'file_inspection',
+                createdAt: new Date().toISOString(),
+            } : undefined;
+        }
+        if (call.tool !== 'run_shell_mutate') {
+            return undefined;
+        }
+        const target = ProjectApprovalRules.extractTarget({ tool: call.tool, input: call.input });
+        return target ? ProjectApprovalRules.createShellRule(target) : undefined;
+    }
+    static describe(rule) {
+        if (rule.tool === 'edit_file') {
+            return 'allow edit_file for this project';
+        }
+        if (rule.tool === 'read_file' || rule.tool === 'list_files') {
+            return `allow ${rule.tool} for this project`;
+        }
+        if (rule.mode === 'prefix') {
+            return `allow ${rule.command} command family for this project`;
+        }
+        return 'allow exact command';
+    }
+    static extractTarget(args) {
+        if (args.tool === 'run_shell_mutate') {
+            if (typeof args.input === 'string') {
+                return ProjectApprovalRules.normalizeCommand(args.input);
+            }
+            if (!args.input || typeof args.input !== 'object' || Array.isArray(args.input)) {
+                return undefined;
+            }
+            const command = args.input.command;
+            return typeof command === 'string' && command.trim() ? ProjectApprovalRules.normalizeCommand(command) : undefined;
+        }
+        if (args.tool === 'edit_file' || args.tool === 'read_file' || args.tool === 'list_files') {
+            if (typeof args.input === 'string') {
+                return ProjectApprovalRules.normalizePath(args.input);
+            }
+            if (!args.input || typeof args.input !== 'object' || Array.isArray(args.input)) {
+                return undefined;
+            }
+            const path = args.input.path;
+            return typeof path === 'string' && path.trim() ? ProjectApprovalRules.normalizePath(path) : undefined;
+        }
+        return undefined;
+    }
+    static normalizePath(path) {
+        const trimmed = path.trim();
+        if (trimmed === './' || trimmed === '.') {
+            return '.';
+        }
+        return trimmed.replace(/\/+$/, '') || '.';
+    }
+    static buildLegacyVerificationPrefix(command) {
+        const argv = command.split(' ').filter(Boolean);
+        if (argv[0] !== 'yarn') {
+            return undefined;
+        }
+        const subcommand = argv[1];
+        if (subcommand === 'test' || subcommand === 'build' || subcommand === 'lint' || subcommand === 'vitest') {
+            return `yarn ${subcommand}`;
+        }
+        return undefined;
+    }
+    static createShellRule(command) {
+        const policy = classifyShellCommandPolicy(command, {
+            toolName: 'run_shell_mutate',
+            rules: DEFAULT_MUTATE_RULES,
+            allowUnknown: true,
+        });
+        if (!('error' in policy) && ProjectApprovalRules.shouldUseVerificationPrefixApproval(command, policy.scope, policy.capability)) {
+            return {
+                tool: 'run_shell_mutate',
+                mode: 'prefix',
+                command: ProjectApprovalRules.buildVerificationPrefix(command),
+                scope: policy.scope,
+                capability: policy.capability,
+                createdAt: new Date().toISOString(),
+            };
+        }
+        if (!('error' in policy)) {
+            return {
+                tool: 'run_shell_mutate',
+                mode: 'exact',
+                command,
+                scope: policy.scope,
+                capability: policy.capability,
+                createdAt: new Date().toISOString(),
+            };
+        }
+        return {
+            tool: 'run_shell_mutate',
+            mode: 'exact',
+            command,
+            scope: 'workspace',
+            capability: 'unknown_workspace',
+            createdAt: new Date().toISOString(),
+        };
+    }
+    static shouldUseVerificationPrefixApproval(command, scope, capability) {
+        if (scope !== 'workspace' || capability !== 'verification') {
+            return false;
+        }
+        return ProjectApprovalRules.buildVerificationPrefix(command) !== command;
+    }
+    static buildVerificationPrefix(command) {
+        const argv = command.split(' ').filter(Boolean);
+        if (argv.length === 0) {
+            return command;
+        }
+        if (argv[0] === 'yarn' && typeof argv[1] === 'string' && !argv[1].startsWith('-')) {
+            return `${argv[0]} ${argv[1]}`;
+        }
+        if (argv[0] === 'vitest' && typeof argv[1] === 'string' && !argv[1].startsWith('-')) {
+            return `${argv[0]} ${argv[1]}`;
+        }
+        if (argv[0] === 'tsc') {
+            return 'tsc';
+        }
+        return command;
+    }
+    static canonicalizeVerificationCommand(command) {
+        const argv = command.split(' ').filter(Boolean);
+        if (argv.length === 0) {
+            return command;
+        }
+        if (argv[0] === 'npx' && typeof argv[1] === 'string') {
+            if (argv[1] === 'tsc') {
+                return ['tsc', ...argv.slice(2)].join(' ');
+            }
+            if (argv[1] === 'vitest') {
+                return ['vitest', ...argv.slice(2)].join(' ');
+            }
+            if (argv[1] === 'eslint') {
+                return ['eslint', ...argv.slice(2)].join(' ');
+            }
+        }
+        if (argv[0] === './node_modules/.bin/tsc' || argv[0] === 'node_modules/.bin/tsc') {
+            return ['tsc', ...argv.slice(1)].join(' ');
+        }
+        if (argv[0] === './node_modules/.bin/vitest' || argv[0] === 'node_modules/.bin/vitest') {
+            return ['vitest', ...argv.slice(1)].join(' ');
+        }
+        if (argv[0] === './node_modules/.bin/eslint' || argv[0] === 'node_modules/.bin/eslint') {
+            return ['eslint', ...argv.slice(1)].join(' ');
+        }
+        return command;
+    }
+}
+//# sourceMappingURL=service.js.map