@vitos-pizza/vitos-pizza 0.1.0 → 0.2.0

package/packages/permission-system/extensions/index.ts

@@ -1,162 +1,162 @@
-/**
- * @vitos-pizza/permission-system — permission enforcement for Vito's Pizzeria.
- */
-
-import { copyFileSync, existsSync, mkdirSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-import type {
-	ExtensionAPI,
-	ExtensionContext,
-} from "@earendil-works/pi-coding-agent";
-import { getAgentDir } from "@earendil-works/pi-coding-agent";
-import {
-	getGlobalConfigPath,
-	getProjectConfigPath,
-} from "../src/config-paths.ts";
-import { startPermissionRpcServer } from "../src/forwarding/forwarder.ts";
-import {
-	getSubagentSessionRegistry,
-	subscribeSubagentLifecycle,
-} from "../src/forwarding/subagent-registry.ts";
-import { registerBeforeAgentStart } from "../src/handlers/before-agent-start.ts";
-import {
-	registerSkillInputGate,
-	registerToolCallGate,
-} from "../src/handlers/tool-call-gate.ts";
-import { PERMISSION_RELOAD_CONFIG_EVENT } from "../src/mode-api.ts";
-import { PermissionSession } from "../src/permission-session.ts";
-import { loadConfigFile, saveConfigFile } from "../src/policy-loader.ts";
-import {
-	createPermissionsService,
-	emitPermissionEvent,
-	setPermissionsService,
-} from "../src/service.ts";
-import {
-	buildApprovalSummary,
-	buildApprovalTitle,
-} from "../src/ui/approval-summary.ts";
-import { showPermissionSystemModal } from "../src/ui/config-modal.ts";
-import { requestPermissionDecisionFromUi } from "../src/ui/permission-dialog.ts";
-import { installYoloRuntimeApi } from "../src/yolo/runtime-api.ts";
-
-const moduleDir = dirname(fileURLToPath(import.meta.url));
-const presetsDir = join(moduleDir, "..", "presets");
-
-function ensureDefaultConfig(cwd: string, agentDir: string): void {
-	const projectPath = getProjectConfigPath(cwd);
-	if (existsSync(projectPath)) return;
-	const globalPath = getGlobalConfigPath(agentDir);
-	if (existsSync(globalPath)) return;
-
-	const presetPath = join(presetsDir, "default.json");
-	if (!existsSync(presetPath)) return;
-	mkdirSync(dirname(projectPath), { recursive: true });
-	copyFileSync(presetPath, projectPath);
-}
-
-export default function (pi: ExtensionAPI) {
-	const agentDir = getAgentDir();
-	const session = new PermissionSession(agentDir);
-	const registry = getSubagentSessionRegistry();
-	let activeUiContext: ExtensionContext | null = null;
-
-	const persistConfig = (
-		cwd: string,
-		config: ReturnType<PermissionSession["getConfig"]>,
-	) => {
-		saveConfigFile(getProjectConfigPath(cwd), config);
-	};
-
-	const yoloApi = installYoloRuntimeApi(
-		() => session.getConfig(),
-		(config) => {
-			const cwd = session.getCwd();
-			persistConfig(cwd, config);
-		},
-		() => {
-			if (activeUiContext) {
-				session.refresh(activeUiContext);
-			}
-		},
-	);
-
-	setPermissionsService(
-		createPermissionsService({
-			getConfig: () => session.getConfig(),
-			evaluator: session.evaluator,
-			sessionApprovals: session.sessionApprovals,
-			getAgentName: () =>
-				session.resolveAgentName({ cwd: session.getCwd() } as never),
-		}),
-	);
-
-	registerBeforeAgentStart(pi, session);
-	registerToolCallGate(pi, session);
-	registerSkillInputGate(pi, session);
-
-	const unsubLifecycle = subscribeSubagentLifecycle(pi.events, registry);
-	const unsubRpc = startPermissionRpcServer(pi.events, async (payload) => {
-		const ctx = activeUiContext;
-		if (!ctx?.hasUI) {
-			return {
-				approved: false,
-				state: "denied",
-				confirmationUnavailable: true,
-			};
-		}
-		emitPermissionEvent(pi, "permissions:ui_prompt", payload);
-		return requestPermissionDecisionFromUi(
-			ctx.ui,
-			payload.title || buildApprovalTitle(payload.surface),
-			payload.message ||
-				buildApprovalSummary({
-					toolName: payload.surface,
-					input: { command: payload.value },
-					cwd: ctx.cwd,
-				}),
-			{
-				sessionLabel: payload.value
-					? `Yes, for this session (${payload.value})`
-					: undefined,
-			},
-		);
-	});
-
-	const unsubReload = pi.events.on(PERMISSION_RELOAD_CONFIG_EVENT, () => {
-		if (activeUiContext) {
-			session.refresh(activeUiContext);
-		}
-	});
-
-	pi.on("session_start", async (_event, ctx) => {
-		activeUiContext = ctx;
-		ensureDefaultConfig(ctx.cwd, agentDir);
-		session.refresh(ctx);
-		session.sessionApprovals.clear();
-		emitPermissionEvent(pi, "permissions:ready", { cwd: ctx.cwd });
-	});
-
-	pi.on("session_shutdown", (_event, _ctx) => {
-		activeUiContext = null;
-		session.sessionApprovals.clear();
-	});
-
-	pi.registerCommand("permission-system", {
-		description: "Open permission system settings (YOLO mode, debug)",
-		handler: async (_args, ctx) => {
-			session.refresh(ctx);
-			const config = session.getConfig();
-			await showPermissionSystemModal(ctx, config, (next) => {
-				persistConfig(ctx.cwd, next);
-				session.refresh(ctx);
-			});
-		},
-	});
-
-	void unsubLifecycle;
-	void unsubRpc;
-	void unsubReload;
-	void loadConfigFile;
-	void yoloApi;
-}
+/**
+ * @vitos-pizza/permission-system — permission enforcement for Vito's Pizzeria.
+ */
+
+import { copyFileSync, existsSync, mkdirSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import type {
+	ExtensionAPI,
+	ExtensionContext,
+} from "@earendil-works/pi-coding-agent";
+import { getAgentDir } from "@earendil-works/pi-coding-agent";
+import {
+	getGlobalConfigPath,
+	getProjectConfigPath,
+} from "../src/config-paths.ts";
+import { startPermissionRpcServer } from "../src/forwarding/forwarder.ts";
+import {
+	getSubagentSessionRegistry,
+	subscribeSubagentLifecycle,
+} from "../src/forwarding/subagent-registry.ts";
+import { registerBeforeAgentStart } from "../src/handlers/before-agent-start.ts";
+import {
+	registerSkillInputGate,
+	registerToolCallGate,
+} from "../src/handlers/tool-call-gate.ts";
+import { PERMISSION_RELOAD_CONFIG_EVENT } from "../src/mode-api.ts";
+import { PermissionSession } from "../src/permission-session.ts";
+import { loadConfigFile, saveConfigFile } from "../src/policy-loader.ts";
+import {
+	createPermissionsService,
+	emitPermissionEvent,
+	setPermissionsService,
+} from "../src/service.ts";
+import {
+	buildApprovalSummary,
+	buildApprovalTitle,
+} from "../src/ui/approval-summary.ts";
+import { showPermissionSystemModal } from "../src/ui/config-modal.ts";
+import { requestPermissionDecisionFromUi } from "../src/ui/permission-dialog.ts";
+import { installYoloRuntimeApi } from "../src/yolo/runtime-api.ts";
+
+const moduleDir = dirname(fileURLToPath(import.meta.url));
+const presetsDir = join(moduleDir, "..", "presets");
+
+function ensureDefaultConfig(cwd: string, agentDir: string): void {
+	const projectPath = getProjectConfigPath(cwd);
+	if (existsSync(projectPath)) return;
+	const globalPath = getGlobalConfigPath(agentDir);
+	if (existsSync(globalPath)) return;
+
+	const presetPath = join(presetsDir, "default.json");
+	if (!existsSync(presetPath)) return;
+	mkdirSync(dirname(projectPath), { recursive: true });
+	copyFileSync(presetPath, projectPath);
+}
+
+export default function (pi: ExtensionAPI) {
+	const agentDir = getAgentDir();
+	const session = new PermissionSession(agentDir);
+	const registry = getSubagentSessionRegistry();
+	let activeUiContext: ExtensionContext | null = null;
+
+	const persistConfig = (
+		cwd: string,
+		config: ReturnType<PermissionSession["getConfig"]>,
+	) => {
+		saveConfigFile(getProjectConfigPath(cwd), config);
+	};
+
+	const yoloApi = installYoloRuntimeApi(
+		() => session.getConfig(),
+		(config) => {
+			const cwd = session.getCwd();
+			persistConfig(cwd, config);
+		},
+		() => {
+			if (activeUiContext) {
+				session.refresh(activeUiContext);
+			}
+		},
+	);
+
+	setPermissionsService(
+		createPermissionsService({
+			getConfig: () => session.getConfig(),
+			evaluator: session.evaluator,
+			sessionApprovals: session.sessionApprovals,
+			getAgentName: () =>
+				session.resolveAgentName({ cwd: session.getCwd() } as never),
+		}),
+	);
+
+	registerBeforeAgentStart(pi, session);
+	registerToolCallGate(pi, session);
+	registerSkillInputGate(pi, session);
+
+	const unsubLifecycle = subscribeSubagentLifecycle(pi.events, registry);
+	const unsubRpc = startPermissionRpcServer(pi.events, async (payload) => {
+		const ctx = activeUiContext;
+		if (!ctx?.hasUI) {
+			return {
+				approved: false,
+				state: "denied",
+				confirmationUnavailable: true,
+			};
+		}
+		emitPermissionEvent(pi, "permissions:ui_prompt", payload);
+		return requestPermissionDecisionFromUi(
+			ctx.ui,
+			payload.title || buildApprovalTitle(payload.surface),
+			payload.message ||
+				buildApprovalSummary({
+					toolName: payload.surface,
+					input: { command: payload.value },
+					cwd: ctx.cwd,
+				}),
+			{
+				sessionLabel: payload.value
+					? `Yes, for this session (${payload.value})`
+					: undefined,
+			},
+		);
+	});
+
+	const unsubReload = pi.events.on(PERMISSION_RELOAD_CONFIG_EVENT, () => {
+		if (activeUiContext) {
+			session.refresh(activeUiContext);
+		}
+	});
+
+	pi.on("session_start", async (_event, ctx) => {
+		activeUiContext = ctx;
+		ensureDefaultConfig(ctx.cwd, agentDir);
+		session.refresh(ctx);
+		session.sessionApprovals.clear();
+		emitPermissionEvent(pi, "permissions:ready", { cwd: ctx.cwd });
+	});
+
+	pi.on("session_shutdown", (_event, _ctx) => {
+		activeUiContext = null;
+		session.sessionApprovals.clear();
+	});
+
+	pi.registerCommand("permission-system", {
+		description: "Open permission system settings (YOLO mode, debug)",
+		handler: async (_args, ctx) => {
+			session.refresh(ctx);
+			const config = session.getConfig();
+			await showPermissionSystemModal(ctx, config, (next) => {
+				persistConfig(ctx.cwd, next);
+				session.refresh(ctx);
+			});
+		},
+	});
+
+	void unsubLifecycle;
+	void unsubRpc;
+	void unsubReload;
+	void loadConfigFile;
+	void yoloApi;
+}

package/packages/permission-system/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@vitos-pizza/permission-system",
-	"version": "0.1.0",
+	"version": "0.2.0",
 	"description": "Permission enforcement for Vito's Pizzeria Pi distribution",
 	"type": "module",
 	"license": "MIT",
@@ -18,7 +18,7 @@
 		"lint:fix": "biome check --write ."
 	},
 	"dependencies": {
-		"@vitos-pizza/keybindings": "0.1.0",
+		"@vitos-pizza/keybindings": "0.2.0",
 		"tree-sitter-bash": "^0.25.1",
 		"web-tree-sitter": "^0.25.10",
 		"zod": "^3.25.76"

package/packages/permission-system/src/bash/matcher.ts

@@ -1,51 +1,54 @@
-import type { PermissionEvaluator } from "../permission-evaluator.ts";
-import type { FlatPermissionConfig, PermissionCheckResult } from "../types.ts";
-import { enumerateBashCommands, isTriviallyEmptyCommand } from "./parser.ts";
-
-export function evaluateBashCommand(
-	command: string,
-	permission: FlatPermissionConfig,
-	evaluator: PermissionEvaluator,
-	options: { yoloMode?: boolean; platform?: NodeJS.Platform },
-): PermissionCheckResult {
-	const units = enumerateBashCommands(command);
-
-	if (units.length === 0) {
-		if (isTriviallyEmptyCommand(command)) {
-			return evaluator.evaluateSurface(
-				permission,
-				"bash",
-				command.trim(),
-				"project",
-				options,
-			);
-		}
-		return {
-			state: "ask",
-			matchedPattern: "<unparseable-bash-command>",
-			surface: "bash",
-			value: command,
-			origin: "builtin",
-		};
-	}
-
-	const results = units.map((unit) => {
-		const base = evaluator.evaluateSurface(
-			permission,
-			"bash",
-			unit.text,
-			"project",
-			options,
-		);
-		if (unit.opaque && base.state === "allow") {
-			return {
-				...base,
-				state: "ask" as const,
-				matchedPattern: "<opaque-bash-wrapper>",
-			};
-		}
-		return base;
-	});
-
-	return evaluator.pickMostRestrictive(results) ?? results[0];
-}
+import type {
+	EvaluateOptions,
+	PermissionEvaluator,
+} from "../permission-evaluator.ts";
+import type { FlatPermissionConfig, PermissionCheckResult } from "../types.ts";
+import { enumerateBashCommands, isTriviallyEmptyCommand } from "./parser.ts";
+
+export function evaluateBashCommand(
+	command: string,
+	permission: FlatPermissionConfig,
+	evaluator: PermissionEvaluator,
+	options: EvaluateOptions = {},
+): PermissionCheckResult {
+	const units = enumerateBashCommands(command);
+
+	if (units.length === 0) {
+		if (isTriviallyEmptyCommand(command)) {
+			return evaluator.evaluateSurface(
+				permission,
+				"bash",
+				command.trim(),
+				"project",
+				options,
+			);
+		}
+		return {
+			state: "ask",
+			matchedPattern: "<unparseable-bash-command>",
+			surface: "bash",
+			value: command,
+			origin: "builtin",
+		};
+	}
+
+	const results = units.map((unit) => {
+		const base = evaluator.evaluateSurface(
+			permission,
+			"bash",
+			unit.text,
+			"project",
+			options,
+		);
+		if (unit.opaque && base.state === "allow") {
+			return {
+				...base,
+				state: "ask" as const,
+				matchedPattern: "<opaque-bash-wrapper>",
+			};
+		}
+		return base;
+	});
+
+	return evaluator.pickMostRestrictive(results) ?? results[0];
+}

package/packages/permission-system/src/bash/parser.ts

@@ -1,40 +1,40 @@
-export interface BashCommandUnit {
-	text: string;
-	opaque?: boolean;
-}
-
-const OPAQUE_WRAPPER_RE = /^(?:bash|sh|zsh|dash|eval)\s+(?:-c\b|eval\b)/;
-
-export function isTriviallyEmptyCommand(command: string): boolean {
-	const lines = command.split("\n").map((line) => line.trim());
-	return lines.every((line) => line.length === 0 || line.startsWith("#"));
-}
-
-export function splitBashProgram(command: string): BashCommandUnit[] {
-	const trimmed = command.trim();
-	if (!trimmed || isTriviallyEmptyCommand(trimmed)) return [];
-	if (isClearlyInvalidCommand(trimmed)) return [];
-
-	const segments = trimmed
-		.split(/(?:&&|\|\||;|\n)/)
-		.map((part) => part.trim())
-		.filter(Boolean);
-
-	if (segments.length === 0) return [];
-
-	return segments.map((text) => ({
-		text,
-		opaque: OPAQUE_WRAPPER_RE.test(text),
-	}));
-}
-
-export function enumerateBashCommands(command: string): BashCommandUnit[] {
-	const units = splitBashProgram(command);
-	if (units.length > 0) return units;
-	if (isTriviallyEmptyCommand(command)) return [];
-	return [];
-}
-
-function isClearlyInvalidCommand(command: string): boolean {
-	return /^[{}<>]+$/.test(command.trim());
-}
+export interface BashCommandUnit {
+	text: string;
+	opaque?: boolean;
+}
+
+const OPAQUE_WRAPPER_RE = /^(?:bash|sh|zsh|dash|eval)\s+(?:-c\b|eval\b)/;
+
+export function isTriviallyEmptyCommand(command: string): boolean {
+	const lines = command.split("\n").map((line) => line.trim());
+	return lines.every((line) => line.length === 0 || line.startsWith("#"));
+}
+
+export function splitBashProgram(command: string): BashCommandUnit[] {
+	const trimmed = command.trim();
+	if (!trimmed || isTriviallyEmptyCommand(trimmed)) return [];
+	if (isClearlyInvalidCommand(trimmed)) return [];
+
+	const segments = trimmed
+		.split(/(?:&&|\|\||;|\n)/)
+		.map((part) => part.trim())
+		.filter(Boolean);
+
+	if (segments.length === 0) return [];
+
+	return segments.map((text) => ({
+		text,
+		opaque: OPAQUE_WRAPPER_RE.test(text),
+	}));
+}
+
+export function enumerateBashCommands(command: string): BashCommandUnit[] {
+	const units = splitBashProgram(command);
+	if (units.length > 0) return units;
+	if (isTriviallyEmptyCommand(command)) return [];
+	return [];
+}
+
+function isClearlyInvalidCommand(command: string): boolean {
+	return /^[{}<>]+$/.test(command.trim());
+}

package/packages/permission-system/src/config-paths.ts

@@ -1,23 +1,23 @@
-import { join } from "node:path";
-
-export const EXTENSION_ID = "pi-permission-system";
-
-export function getGlobalConfigDir(agentDir: string): string {
-	return join(agentDir, "extensions", EXTENSION_ID);
-}
-
-export function getGlobalConfigPath(agentDir: string): string {
-	return join(getGlobalConfigDir(agentDir), "config.json");
-}
-
-export function getProjectConfigPath(cwd: string): string {
-	return join(cwd, ".pi", "extensions", EXTENSION_ID, "config.json");
-}
-
-export function getGlobalAgentsDir(agentDir: string): string {
-	return join(agentDir, "agents");
-}
-
-export function getProjectAgentsDir(cwd: string): string {
-	return join(cwd, ".pi", "agents");
-}
+import { join } from "node:path";
+
+export const EXTENSION_ID = "pi-permission-system";
+
+export function getGlobalConfigDir(agentDir: string): string {
+	return join(agentDir, "extensions", EXTENSION_ID);
+}
+
+export function getGlobalConfigPath(agentDir: string): string {
+	return join(getGlobalConfigDir(agentDir), "config.json");
+}
+
+export function getProjectConfigPath(cwd: string): string {
+	return join(cwd, ".pi", "extensions", EXTENSION_ID, "config.json");
+}
+
+export function getGlobalAgentsDir(agentDir: string): string {
+	return join(agentDir, "agents");
+}
+
+export function getProjectAgentsDir(cwd: string): string {
+	return join(cwd, ".pi", "agents");
+}