@swarmify/agents-cli 1.13.3 → 1.14.0

package/dist/lib/permissions.js

@@ -1,1071 +0,0 @@
-/**
- * Permission management for AI coding agents.
- *
- * Provides a canonical permission format (PermissionSet with allow/deny rules)
- * and converters to/from each agent's native format (Claude settings.json,
- * OpenCode opencode.jsonc, Codex config.toml + .rules). Handles discovery,
- * installation, removal, and merging of permission groups stored in
- * ~/.agents/permissions/groups/.
- */
-import * as fs from 'fs';
-import * as path from 'path';
-import * as os from 'os';
-import * as yaml from 'yaml';
-import * as TOML from 'smol-toml';
-import { getPermissionsDir, ensureAgentsDir } from './state.js';
-const HOME = os.homedir();
-/** Agents that support the permissions subsystem. */
-export const PERMISSIONS_CAPABLE_AGENTS = ['claude', 'codex', 'opencode'];
-/** Filename used for Codex Starlark deny-rules generated from permission groups. */
-export const CODEX_RULES_FILENAME = 'agents-deny.rules';
-/**
- * Convert canonical deny rules to Codex Starlark .rules format.
- * E.g. "Bash(git reset:*)" -> prefix_rule(pattern=["git", "reset"], decision="forbidden")
- */
-export function convertDenyToCodexRules(deny) {
-    const rules = [];
-    for (const perm of deny) {
-        const parsed = parseCanonicalPattern(perm);
-        if (!parsed || parsed.tool !== 'bash')
-            continue;
-        // Pattern format: "command arg1 arg2:*" or "command:*"
-        const command = parsed.pattern.replace(/:?\*$/, '').trim();
-        if (!command)
-            continue;
-        const parts = command.split(/\s+/);
-        const patternStr = parts.map(p => `"${p}"`).join(', ');
-        rules.push(`prefix_rule(\n    pattern = [${patternStr}],\n    decision = "forbidden",\n)`);
-    }
-    if (rules.length === 0)
-        return null;
-    return `# Auto-generated by agents-cli from deny permission groups.\n# Do not edit manually — re-run "agents use" to regenerate.\n\n${rules.join('\n\n')}\n`;
-}
-/**
- * Ensure central permissions directory exists.
- */
-export function ensurePermissionsDir() {
-    const dir = getPermissionsDir();
-    if (!fs.existsSync(dir)) {
-        fs.mkdirSync(dir, { recursive: true });
-    }
-}
-/**
- * Parse a permission set from a YAML file.
- */
-export function parsePermissionSet(filePath) {
-    if (!fs.existsSync(filePath)) {
-        return null;
-    }
-    try {
-        const content = fs.readFileSync(filePath, 'utf-8');
-        const parsed = yaml.parse(content);
-        if (!parsed || typeof parsed !== 'object') {
-            return null;
-        }
-        return {
-            name: parsed.name || path.basename(filePath, path.extname(filePath)),
-            description: parsed.description,
-            allow: Array.isArray(parsed.allow) ? parsed.allow : [],
-            deny: Array.isArray(parsed.deny) ? parsed.deny : [],
-            additionalDirectories: Array.isArray(parsed.additionalDirectories) ? parsed.additionalDirectories : undefined,
-        };
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Discover permission sets from a repository.
- */
-export function discoverPermissionsFromRepo(repoPath) {
-    const results = [];
-    // Look for permissions in common locations
-    const searchPaths = [
-        path.join(repoPath, 'permissions'),
-        path.join(repoPath, 'agent-permissions'),
-        repoPath,
-    ];
-    for (const searchPath of searchPaths) {
-        if (!fs.existsSync(searchPath))
-            continue;
-        try {
-            const entries = fs.readdirSync(searchPath, { withFileTypes: true });
-            for (const entry of entries) {
-                if (!entry.isFile())
-                    continue;
-                if (!entry.name.endsWith('.yml') && !entry.name.endsWith('.yaml'))
-                    continue;
-                const filePath = path.join(searchPath, entry.name);
-                const set = parsePermissionSet(filePath);
-                if (set) {
-                    results.push({
-                        name: set.name,
-                        path: filePath,
-                        set,
-                    });
-                }
-            }
-        }
-        catch {
-            // Skip inaccessible directories
-        }
-    }
-    return results;
-}
-/**
- * Discover permission groups from ~/.agents/permissions/groups/.
- * Returns groups with their rule counts.
- */
-export function discoverPermissionGroups() {
-    const groupsDir = path.join(getPermissionsDir(), 'groups');
-    if (!fs.existsSync(groupsDir)) {
-        return [];
-    }
-    const groups = [];
-    try {
-        const entries = fs.readdirSync(groupsDir, { withFileTypes: true });
-        for (const entry of entries) {
-            if (!entry.isFile())
-                continue;
-            if (!entry.name.endsWith('.yml') && !entry.name.endsWith('.yaml'))
-                continue;
-            const filePath = path.join(groupsDir, entry.name);
-            const name = entry.name.replace(/\.(yaml|yml)$/, '');
-            // Count rules in this group
-            let ruleCount = 0;
-            try {
-                const content = fs.readFileSync(filePath, 'utf-8');
-                // Count lines that look like permission entries (start with - " after optional whitespace)
-                const matches = content.match(/^\s*-\s*"/gm);
-                ruleCount = matches ? matches.length : 0;
-            }
-            catch {
-                // Skip files we can't read
-            }
-            groups.push({ name, ruleCount, path: filePath });
-        }
-    }
-    catch {
-        // Skip inaccessible directory
-    }
-    // Sort by name (which sorts by numeric prefix)
-    return groups.sort((a, b) => a.name.localeCompare(b.name));
-}
-/**
- * Get total rule count across all permission groups.
- */
-export function getTotalPermissionRuleCount() {
-    const groups = discoverPermissionGroups();
-    return groups.reduce((sum, g) => sum + g.ruleCount, 0);
-}
-/** Env var that selects which set recipe to apply at sync time. */
-export const PERMISSION_SET_ENV_VAR = 'AGENTS_PERMISSION_SET';
-/**
- * Read a permission set recipe by name from ~/.agents/permissions/sets/.
- * Returns null if the recipe file is missing or malformed.
- */
-export function readPermissionSetRecipe(name) {
-    const setsDir = path.join(getPermissionsDir(), 'sets');
-    for (const ext of ['.yaml', '.yml']) {
-        const filePath = path.join(setsDir, name + ext);
-        if (!fs.existsSync(filePath))
-            continue;
-        try {
-            const content = fs.readFileSync(filePath, 'utf-8');
-            const parsed = yaml.parse(content);
-            if (!parsed || typeof parsed !== 'object')
-                return null;
-            if (!Array.isArray(parsed.includes))
-                return null;
-            return {
-                name: parsed.name || name,
-                description: parsed.description,
-                includes: parsed.includes.filter((v) => typeof v === 'string'),
-            };
-        }
-        catch {
-            return null;
-        }
-    }
-    return null;
-}
-/**
- * Return the active permission set name from AGENTS_PERMISSION_SET env var,
- * or null if unset. Caller decides the default behavior when null.
- */
-export function getActivePermissionSetName() {
-    const v = process.env[PERMISSION_SET_ENV_VAR];
-    return v && v.trim() ? v.trim() : null;
-}
-/**
- * Build a PermissionSet from selected groups.
- * Concatenates allow/deny rules from each group.
- *
- * Uses line-by-line regex extraction instead of YAML parsing because
- * permission files often contain unescaped nested quotes that break YAML.
- */
-export function buildPermissionsFromGroups(groupNames) {
-    const groupsDir = path.join(getPermissionsDir(), 'groups');
-    const allAllow = [];
-    const allDeny = [];
-    for (const groupName of groupNames) {
-        // Try both .yaml and .yml extensions
-        let filePath = path.join(groupsDir, `${groupName}.yaml`);
-        if (!fs.existsSync(filePath)) {
-            filePath = path.join(groupsDir, `${groupName}.yml`);
-        }
-        if (!fs.existsSync(filePath)) {
-            continue;
-        }
-        try {
-            const content = fs.readFileSync(filePath, 'utf-8');
-            // Extract rules using line-by-line regex (more robust than YAML parsing)
-            // Matches lines like: - "Bash(git *)" or   - "WebFetch(domain:example.com)"
-            // Handles nested quotes that break YAML parsers
-            const lines = content.split('\n');
-            for (const line of lines) {
-                // Match: optional whitespace, dash, whitespace, quote, content, quote
-                // Use greedy match to capture everything between first and last quote
-                const match = line.match(/^\s*-\s*"(.+)"$/);
-                if (match) {
-                    const rule = match[1];
-                    // 99-deny group rules go to deny, others to allow
-                    if (groupName === '99-deny' || groupName.includes('-deny')) {
-                        allDeny.push(rule);
-                    }
-                    else {
-                        allAllow.push(rule);
-                    }
-                }
-            }
-        }
-        catch {
-            // Skip files we can't read
-        }
-    }
-    return {
-        name: 'built',
-        description: `Built from groups: ${groupNames.join(', ')}`,
-        allow: allAllow,
-        deny: allDeny.length > 0 ? allDeny : undefined,
-    };
-}
-/**
- * List installed permission sets from central storage.
- */
-export function listInstalledPermissions() {
-    ensureAgentsDir();
-    const dir = getPermissionsDir();
-    if (!fs.existsSync(dir)) {
-        return [];
-    }
-    const results = [];
-    try {
-        const entries = fs.readdirSync(dir, { withFileTypes: true });
-        for (const entry of entries) {
-            if (!entry.isFile())
-                continue;
-            if (!entry.name.endsWith('.yml') && !entry.name.endsWith('.yaml'))
-                continue;
-            const filePath = path.join(dir, entry.name);
-            const set = parsePermissionSet(filePath);
-            if (set) {
-                results.push({
-                    name: set.name,
-                    path: filePath,
-                    set,
-                });
-            }
-        }
-    }
-    catch {
-        // Ignore errors
-    }
-    return results;
-}
-/**
- * Get a specific permission set by name.
- */
-export function getPermissionSet(name) {
-    const dir = getPermissionsDir();
-    for (const ext of ['.yml', '.yaml']) {
-        const filePath = path.join(dir, name + ext);
-        if (fs.existsSync(filePath)) {
-            const set = parsePermissionSet(filePath);
-            if (set) {
-                return { name: set.name, path: filePath, set };
-            }
-        }
-    }
-    return null;
-}
-/**
- * Install a permission set to central storage.
- */
-export function installPermissionSet(sourcePath, name) {
-    ensurePermissionsDir();
-    const set = parsePermissionSet(sourcePath);
-    if (!set) {
-        return { success: false, error: 'Invalid permission file' };
-    }
-    const targetPath = path.join(getPermissionsDir(), name + '.yml');
-    try {
-        fs.copyFileSync(sourcePath, targetPath);
-        return { success: true };
-    }
-    catch (err) {
-        return { success: false, error: err.message };
-    }
-}
-/**
- * Remove a permission set from central storage.
- */
-export function removePermissionSet(name) {
-    const dir = getPermissionsDir();
-    for (const ext of ['.yml', '.yaml']) {
-        const filePath = path.join(dir, name + ext);
-        if (fs.existsSync(filePath)) {
-            try {
-                fs.unlinkSync(filePath);
-                return { success: true };
-            }
-            catch (err) {
-                return { success: false, error: err.message };
-            }
-        }
-    }
-    return { success: false, error: `Permission set '${name}' not found` };
-}
-// ============================================================================
-// Agent-specific converters
-// ============================================================================
-/**
- * Convert canonical permission set to Claude format.
- * Claude uses: { permissions: { allow: ["Bash(*)", "Read(**)"], deny: [] } }
- */
-export function convertToClaudeFormat(set) {
-    const permissions = {
-        allow: [...set.allow],
-        deny: set.deny ? [...set.deny] : [],
-    };
-    if (set.additionalDirectories?.length) {
-        permissions.additionalDirectories = [...set.additionalDirectories];
-    }
-    return { permissions };
-}
-/**
- * Parse canonical permission pattern to extract tool and pattern.
- * "Bash(git *)" -> { tool: "bash", pattern: "git *" }
- * "Read(**)" -> { tool: "read", pattern: "**" }
- */
-function parseCanonicalPattern(permission) {
-    const match = permission.match(/^(\w+)\((.+)\)$/);
-    if (!match)
-        return null;
-    return { tool: match[1].toLowerCase(), pattern: match[2] };
-}
-/**
- * Convert canonical permission set to OpenCode format.
- * OpenCode uses: { permission: { bash: { "git *": "allow", "rm *": "deny" } } }
- */
-export function convertToOpenCodeFormat(set) {
-    const bashPermissions = {};
-    // Process allow list
-    for (const perm of set.allow) {
-        const parsed = parseCanonicalPattern(perm);
-        if (parsed && parsed.tool === 'bash') {
-            bashPermissions[parsed.pattern] = 'allow';
-        }
-    }
-    // Process deny list
-    if (set.deny) {
-        for (const perm of set.deny) {
-            const parsed = parseCanonicalPattern(perm);
-            if (parsed && parsed.tool === 'bash') {
-                bashPermissions[parsed.pattern] = 'deny';
-            }
-        }
-    }
-    return {
-        permission: {
-            bash: bashPermissions,
-        },
-    };
-}
-/**
- * Convert canonical permission set to Codex format.
- * Codex uses coarse-grained modes, so we infer the best fit.
- */
-export function convertToCodexFormat(set, cwd) {
-    const result = {};
-    // Check for broad bash permissions -> suggest full-auto
-    const hasBroadBash = set.allow.some((p) => {
-        const parsed = parseCanonicalPattern(p);
-        return parsed && parsed.tool === 'bash' && (parsed.pattern === '*' || parsed.pattern === '**');
-    });
-    if (hasBroadBash) {
-        result.approval_policy = 'never';
-        result.sandbox_mode = 'workspace-write';
-    }
-    else if (set.allow.length > 0) {
-        result.approval_policy = 'on-request';
-        result.sandbox_mode = 'workspace-write';
-    }
-    // Check for network/web permissions
-    const hasNetwork = set.allow.some((p) => {
-        const parsed = parseCanonicalPattern(p);
-        return parsed && (parsed.tool === 'websearch' || parsed.tool === 'webfetch');
-    });
-    if (hasNetwork) {
-        result.sandbox_workspace_write = {
-            network_access: true,
-        };
-    }
-    return result;
-}
-// ============================================================================
-// Read agent permissions from native configs
-// ============================================================================
-/**
- * Strip JSON comments for JSONC parsing.
- */
-function stripJsonComments(content) {
-    let result = '';
-    let inString = false;
-    let escape = false;
-    let i = 0;
-    while (i < content.length) {
-        const char = content[i];
-        const next = content[i + 1];
-        if (escape) {
-            result += char;
-            escape = false;
-            i++;
-            continue;
-        }
-        if (char === '\\' && inString) {
-            result += char;
-            escape = true;
-            i++;
-            continue;
-        }
-        if (char === '"') {
-            inString = !inString;
-            result += char;
-            i++;
-            continue;
-        }
-        if (!inString) {
-            if (char === '/' && next === '/') {
-                while (i < content.length && content[i] !== '\n') {
-                    i++;
-                }
-                continue;
-            }
-            if (char === '/' && next === '*') {
-                i += 2;
-                while (i < content.length && !(content[i] === '*' && content[i + 1] === '/')) {
-                    i++;
-                }
-                i += 2;
-                continue;
-            }
-        }
-        result += char;
-        i++;
-    }
-    return result;
-}
-/**
- * Read Claude's current permissions from settings.json.
- */
-export function readClaudePermissions(scope = 'user', cwd, options) {
-    const home = options?.home || HOME;
-    const configPath = scope === 'user'
-        ? path.join(home, '.claude', 'settings.json')
-        : path.join(cwd || process.cwd(), '.claude', 'settings.json');
-    if (!fs.existsSync(configPath)) {
-        return null;
-    }
-    try {
-        const content = fs.readFileSync(configPath, 'utf-8');
-        const config = JSON.parse(content);
-        if (config.permissions) {
-            return {
-                permissions: {
-                    allow: config.permissions.allow || [],
-                    deny: config.permissions.deny || [],
-                },
-            };
-        }
-        return null;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Read OpenCode's current permissions from opencode.jsonc.
- */
-export function readOpenCodePermissions(scope = 'user', cwd, options) {
-    const home = options?.home || HOME;
-    const configPath = scope === 'user'
-        ? path.join(home, '.opencode', 'opencode.jsonc')
-        : path.join(cwd || process.cwd(), '.opencode', 'opencode.jsonc');
-    if (!fs.existsSync(configPath)) {
-        return null;
-    }
-    try {
-        const content = stripJsonComments(fs.readFileSync(configPath, 'utf-8'));
-        const config = JSON.parse(content);
-        if (config.permission) {
-            return {
-                permission: {
-                    bash: config.permission.bash || {},
-                },
-            };
-        }
-        return null;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Read Codex's current permissions from config.toml.
- */
-export function readCodexPermissions(scope = 'user', cwd, options) {
-    const home = options?.home || HOME;
-    const configPath = scope === 'user'
-        ? path.join(home, '.codex', 'config.toml')
-        : path.join(cwd || process.cwd(), '.codex', 'config.toml');
-    if (!fs.existsSync(configPath)) {
-        return null;
-    }
-    try {
-        const content = fs.readFileSync(configPath, 'utf-8');
-        const config = TOML.parse(content);
-        const result = {};
-        if (config.approval_policy) {
-            result.approval_policy = config.approval_policy;
-        }
-        if (config.sandbox_mode) {
-            result.sandbox_mode = config.sandbox_mode;
-        }
-        if (config.sandbox_workspace_write) {
-            const sw = config.sandbox_workspace_write;
-            result.sandbox_workspace_write = {
-                network_access: sw.network_access,
-                writable_roots: sw.writable_roots,
-            };
-        }
-        return result;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Read agent permissions based on agent ID.
- */
-export function readAgentPermissions(agentId, scope = 'user', cwd, options) {
-    switch (agentId) {
-        case 'claude':
-            return readClaudePermissions(scope, cwd, options);
-        case 'opencode':
-            return readOpenCodePermissions(scope, cwd, options);
-        case 'codex':
-            return readCodexPermissions(scope, cwd, options);
-        default:
-            return null;
-    }
-}
-// ============================================================================
-// Apply permissions to agents
-// ============================================================================
-/**
- * Apply a permission set to Claude's settings.json.
- */
-export function applyClaudePermissions(set, scope = 'user', cwd, merge = true) {
-    const configDir = scope === 'user'
-        ? path.join(HOME, '.claude')
-        : path.join(cwd || process.cwd(), '.claude');
-    const configPath = path.join(configDir, 'settings.json');
-    try {
-        // Ensure directory exists
-        if (!fs.existsSync(configDir)) {
-            fs.mkdirSync(configDir, { recursive: true });
-        }
-        // Read existing config
-        let config = {};
-        if (fs.existsSync(configPath)) {
-            config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
-        }
-        const newPermissions = convertToClaudeFormat(set);
-        if (merge && config.permissions) {
-            const existing = config.permissions;
-            const mergedAllow = new Set([...(existing.allow || []), ...newPermissions.permissions.allow]);
-            const mergedDeny = new Set([...(existing.deny || []), ...newPermissions.permissions.deny]);
-            config.permissions = {
-                allow: [...mergedAllow],
-                deny: [...mergedDeny],
-            };
-        }
-        else {
-            config.permissions = newPermissions.permissions;
-        }
-        fs.writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');
-        return { success: true };
-    }
-    catch (err) {
-        return { success: false, error: err.message };
-    }
-}
-/**
- * Apply a permission set to OpenCode's opencode.jsonc.
- */
-export function applyOpenCodePermissions(set, scope = 'user', cwd, merge = true) {
-    const configDir = scope === 'user'
-        ? path.join(HOME, '.opencode')
-        : path.join(cwd || process.cwd(), '.opencode');
-    const configPath = path.join(configDir, 'opencode.jsonc');
-    try {
-        // Ensure directory exists
-        if (!fs.existsSync(configDir)) {
-            fs.mkdirSync(configDir, { recursive: true });
-        }
-        // Read existing config
-        let config = {};
-        if (fs.existsSync(configPath)) {
-            const content = stripJsonComments(fs.readFileSync(configPath, 'utf-8'));
-            config = JSON.parse(content);
-        }
-        const newPermissions = convertToOpenCodeFormat(set);
-        if (merge && config.permission) {
-            const existing = config.permission;
-            config.permission = {
-                ...existing,
-                bash: {
-                    ...(existing.bash || {}),
-                    ...newPermissions.permission.bash,
-                },
-            };
-        }
-        else {
-            config.permission = newPermissions.permission;
-        }
-        // Write without comments (they'll be lost)
-        fs.writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');
-        return { success: true };
-    }
-    catch (err) {
-        return { success: false, error: err.message };
-    }
-}
-/**
- * Apply a permission set to Codex's config.toml.
- */
-export function applyCodexPermissions(set, scope = 'user', cwd, merge = true) {
-    const configDir = scope === 'user'
-        ? path.join(HOME, '.codex')
-        : path.join(cwd || process.cwd(), '.codex');
-    const configPath = path.join(configDir, 'config.toml');
-    try {
-        // Ensure directory exists
-        if (!fs.existsSync(configDir)) {
-            fs.mkdirSync(configDir, { recursive: true });
-        }
-        // Read existing config
-        let config = {};
-        if (fs.existsSync(configPath)) {
-            const content = fs.readFileSync(configPath, 'utf-8');
-            config = TOML.parse(content);
-        }
-        const newPermissions = convertToCodexFormat(set, cwd);
-        // Merge or replace
-        if (newPermissions.approval_policy) {
-            config.approval_policy = newPermissions.approval_policy;
-        }
-        if (newPermissions.sandbox_mode) {
-            config.sandbox_mode = newPermissions.sandbox_mode;
-        }
-        if (newPermissions.sandbox_workspace_write) {
-            const existing = config.sandbox_workspace_write;
-            config.sandbox_workspace_write = merge
-                ? { ...existing, ...newPermissions.sandbox_workspace_write }
-                : newPermissions.sandbox_workspace_write;
-        }
-        fs.writeFileSync(configPath, TOML.stringify(config), 'utf-8');
-        // Write .rules file for deny permissions
-        if (set.deny && set.deny.length > 0) {
-            const rulesContent = convertDenyToCodexRules(set.deny);
-            if (rulesContent) {
-                const rulesDir = path.join(configDir, 'rules');
-                fs.mkdirSync(rulesDir, { recursive: true });
-                fs.writeFileSync(path.join(rulesDir, CODEX_RULES_FILENAME), rulesContent, 'utf-8');
-            }
-        }
-        return { success: true };
-    }
-    catch (err) {
-        return { success: false, error: err.message };
-    }
-}
-/**
- * Apply a permission set to an agent (global config).
- */
-export function applyPermissionsToAgent(agentId, set, scope = 'user', cwd, merge = true) {
-    switch (agentId) {
-        case 'claude':
-            return applyClaudePermissions(set, scope, cwd, merge);
-        case 'opencode':
-            return applyOpenCodePermissions(set, scope, cwd, merge);
-        case 'codex':
-            return applyCodexPermissions(set, scope, cwd, merge);
-        default:
-            return { success: false, error: `Agent '${agentId}' does not support permissions` };
-    }
-}
-/**
- * Apply a permission set to a specific version's home directory.
- * This writes to {versionHome}/.{agent}/settings.json (or equivalent).
- */
-export function applyPermissionsToVersion(agentId, set, versionHome, merge = true) {
-    const configDir = path.join(versionHome, `.${agentId}`);
-    try {
-        fs.mkdirSync(configDir, { recursive: true });
-        if (agentId === 'claude') {
-            const configPath = path.join(configDir, 'settings.json');
-            let config = {};
-            if (fs.existsSync(configPath)) {
-                config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
-            }
-            const newPermissions = convertToClaudeFormat(set);
-            if (merge && config.permissions) {
-                const existing = config.permissions;
-                const mergedAllow = new Set([...(existing.allow || []), ...newPermissions.permissions.allow]);
-                const mergedDeny = new Set([...(existing.deny || []), ...newPermissions.permissions.deny]);
-                const mergedDirs = new Set([...(existing.additionalDirectories || []), ...(newPermissions.permissions.additionalDirectories || [])]);
-                const perms = {
-                    allow: [...mergedAllow],
-                    deny: [...mergedDeny],
-                };
-                if (mergedDirs.size > 0) {
-                    perms.additionalDirectories = [...mergedDirs];
-                }
-                config.permissions = perms;
-            }
-            else {
-                config.permissions = newPermissions.permissions;
-            }
-            fs.writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');
-            return { success: true };
-        }
-        if (agentId === 'opencode') {
-            const configPath = path.join(configDir, 'opencode.jsonc');
-            let config = {};
-            if (fs.existsSync(configPath)) {
-                const content = stripJsonComments(fs.readFileSync(configPath, 'utf-8'));
-                config = JSON.parse(content);
-            }
-            const newPermissions = convertToOpenCodeFormat(set);
-            if (merge && config.permission) {
-                const existing = config.permission;
-                config.permission = {
-                    ...existing,
-                    bash: {
-                        ...(existing.bash || {}),
-                        ...newPermissions.permission.bash,
-                    },
-                };
-            }
-            else {
-                config.permission = newPermissions.permission;
-            }
-            fs.writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');
-            return { success: true };
-        }
-        if (agentId === 'codex') {
-            const configPath = path.join(configDir, 'config.toml');
-            let config = {};
-            if (fs.existsSync(configPath)) {
-                const content = fs.readFileSync(configPath, 'utf-8');
-                config = TOML.parse(content);
-            }
-            const newPermissions = convertToCodexFormat(set);
-            if (newPermissions.approval_policy) {
-                config.approval_policy = newPermissions.approval_policy;
-            }
-            if (newPermissions.sandbox_mode) {
-                config.sandbox_mode = newPermissions.sandbox_mode;
-            }
-            if (newPermissions.sandbox_workspace_write) {
-                const existing = config.sandbox_workspace_write;
-                config.sandbox_workspace_write = merge
-                    ? { ...existing, ...newPermissions.sandbox_workspace_write }
-                    : newPermissions.sandbox_workspace_write;
-            }
-            fs.writeFileSync(configPath, TOML.stringify(config), 'utf-8');
-            // Write .rules file for deny permissions
-            if (set.deny && set.deny.length > 0) {
-                const rulesContent = convertDenyToCodexRules(set.deny);
-                if (rulesContent) {
-                    const rulesDir = path.join(configDir, 'rules');
-                    fs.mkdirSync(rulesDir, { recursive: true });
-                    fs.writeFileSync(path.join(rulesDir, CODEX_RULES_FILENAME), rulesContent, 'utf-8');
-                }
-            }
-            return { success: true };
-        }
-        return { success: false, error: `Agent '${agentId}' does not support permissions` };
-    }
-    catch (err) {
-        return { success: false, error: err.message };
-    }
-}
-// ============================================================================
-// Export canonical format from agent
-// ============================================================================
-/**
- * Convert Claude permissions back to canonical format.
- */
-export function claudeToCanonical(perms) {
-    const result = {
-        name: 'exported',
-        allow: perms.permissions.allow,
-        deny: perms.permissions.deny.length > 0 ? perms.permissions.deny : undefined,
-    };
-    if (perms.permissions.additionalDirectories?.length) {
-        result.additionalDirectories = perms.permissions.additionalDirectories;
-    }
-    return result;
-}
-/**
- * Convert OpenCode permissions back to canonical format.
- */
-export function openCodeToCanonical(perms) {
-    const allow = [];
-    const deny = [];
-    for (const [pattern, action] of Object.entries(perms.permission.bash)) {
-        if (action === 'allow') {
-            allow.push(`Bash(${pattern})`);
-        }
-        else if (action === 'deny') {
-            deny.push(`Bash(${pattern})`);
-        }
-    }
-    return {
-        name: 'exported',
-        allow,
-        deny: deny.length > 0 ? deny : undefined,
-    };
-}
-/**
- * Convert Codex permissions back to canonical format (approximation).
- */
-export function codexToCanonical(perms) {
-    const allow = [];
-    if (perms.approval_policy === 'never' || perms.sandbox_mode === 'danger-full-access') {
-        allow.push('Bash(*)');
-        allow.push('Read(**)');
-        allow.push('Write(**)');
-        allow.push('Edit(**)');
-    }
-    else if (perms.sandbox_mode === 'workspace-write') {
-        allow.push('Bash(*)');
-        allow.push('Read(**)');
-    }
-    if (perms.sandbox_workspace_write?.network_access) {
-        allow.push('WebSearch(*)');
-        allow.push('WebFetch(*)');
-    }
-    return {
-        name: 'exported',
-        allow,
-    };
-}
-/**
- * Export agent's current permissions to canonical format.
- */
-export function exportAgentPermissions(agentId, scope = 'user', cwd) {
-    const perms = readAgentPermissions(agentId, scope, cwd);
-    if (!perms)
-        return null;
-    switch (agentId) {
-        case 'claude':
-            return claudeToCanonical(perms);
-        case 'opencode':
-            return openCodeToCanonical(perms);
-        case 'codex':
-            return codexToCanonical(perms);
-        default:
-            return null;
-    }
-}
-/**
- * Export permissions from a specific config file path to canonical format.
- * Auto-detects agent type from file path/name.
- */
-export function exportPermissionsFromPath(filePath) {
-    if (!fs.existsSync(filePath)) {
-        return null;
-    }
-    const content = fs.readFileSync(filePath, 'utf-8');
-    const fileName = path.basename(filePath);
-    const parentDir = path.basename(path.dirname(filePath));
-    // Detect agent type from path
-    let agentId = null;
-    if (fileName === 'settings.json' && parentDir === '.claude') {
-        agentId = 'claude';
-    }
-    else if (fileName === 'opencode.jsonc' || parentDir === '.opencode') {
-        agentId = 'opencode';
-    }
-    else if (fileName === 'config.toml' && parentDir === '.codex') {
-        agentId = 'codex';
-    }
-    else if (filePath.includes('.claude')) {
-        agentId = 'claude';
-    }
-    else if (filePath.includes('.opencode')) {
-        agentId = 'opencode';
-    }
-    else if (filePath.includes('.codex')) {
-        agentId = 'codex';
-    }
-    if (!agentId) {
-        return null;
-    }
-    try {
-        switch (agentId) {
-            case 'claude': {
-                const config = JSON.parse(content);
-                if (config.permissions) {
-                    return claudeToCanonical({
-                        permissions: {
-                            allow: config.permissions.allow || [],
-                            deny: config.permissions.deny || [],
-                        },
-                    });
-                }
-                return null;
-            }
-            case 'opencode': {
-                // Strip JSONC comments
-                const jsonContent = content.replace(/\/\/.*$/gm, '').replace(/\/\*[\s\S]*?\*\//g, '');
-                const config = JSON.parse(jsonContent);
-                if (config.permission) {
-                    return openCodeToCanonical({
-                        permission: {
-                            bash: config.permission.bash || {},
-                        },
-                    });
-                }
-                return null;
-            }
-            case 'codex': {
-                const config = TOML.parse(content);
-                const perms = {};
-                if (config.approval_policy) {
-                    perms.approval_policy = config.approval_policy;
-                }
-                if (config.sandbox_mode) {
-                    perms.sandbox_mode = config.sandbox_mode;
-                }
-                if (config.sandbox_workspace_write) {
-                    const sw = config.sandbox_workspace_write;
-                    perms.sandbox_workspace_write = {
-                        network_access: sw.network_access,
-                        writable_roots: sw.writable_roots,
-                    };
-                }
-                return codexToCanonical(perms);
-            }
-            default:
-                return null;
-        }
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Save a permission set to central storage.
- */
-export function savePermissionSet(set) {
-    ensurePermissionsDir();
-    const filePath = path.join(getPermissionsDir(), set.name + '.yml');
-    try {
-        const content = yaml.stringify({
-            name: set.name,
-            description: set.description,
-            allow: set.allow,
-            deny: set.deny,
-        });
-        fs.writeFileSync(filePath, content, 'utf-8');
-        return { success: true };
-    }
-    catch (err) {
-        return { success: false, error: err.message };
-    }
-}
-/** Name used for the default permission set in central storage. */
-const DEFAULT_PERMISSION_SET_NAME = 'default';
-/**
- * Get the default permission set from central storage.
- */
-export function getDefaultPermissionSet() {
-    const existing = getPermissionSet(DEFAULT_PERMISSION_SET_NAME);
-    if (existing) {
-        return existing.set;
-    }
-    return {
-        name: DEFAULT_PERMISSION_SET_NAME,
-        description: 'Default permission set',
-        allow: [],
-        deny: [],
-    };
-}
-/**
- * Compute diff between existing and new permissions.
- * Returns { added, existing, removed } for both allow and deny rules.
- */
-export function computePermissionsDiff(existing, incoming) {
-    const existingAllowSet = new Set(existing.allow);
-    const existingDenySet = new Set(existing.deny || []);
-    const allowAdded = incoming.allow.filter((r) => !existingAllowSet.has(r));
-    const allowExisting = incoming.allow.filter((r) => existingAllowSet.has(r));
-    const incomingDeny = incoming.deny || [];
-    const denyAdded = incomingDeny.filter((r) => !existingDenySet.has(r));
-    const denyExisting = incomingDeny.filter((r) => existingDenySet.has(r));
-    return {
-        allow: { added: allowAdded, existing: allowExisting },
-        deny: { added: denyAdded, existing: denyExisting },
-    };
-}
-/**
- * Merge incoming permissions into existing, deduplicating.
- */
-export function mergePermissionSets(existing, incoming) {
-    const allowSet = new Set([...existing.allow, ...incoming.allow]);
-    const denySet = new Set([...(existing.deny || []), ...(incoming.deny || [])]);
-    const dirsSet = new Set([...(existing.additionalDirectories || []), ...(incoming.additionalDirectories || [])]);
-    const result = {
-        name: existing.name,
-        description: existing.description,
-        allow: Array.from(allowSet).sort(),
-        deny: Array.from(denySet).sort(),
-    };
-    if (dirsSet.size > 0) {
-        result.additionalDirectories = Array.from(dirsSet).sort();
-    }
-    return result;
-}
-/**
- * Save the default permission set.
- */
-export function saveDefaultPermissionSet(set) {
-    set.name = DEFAULT_PERMISSION_SET_NAME;
-    return savePermissionSet(set);
-}
-//# sourceMappingURL=permissions.js.map