@winspan/claude-forge 8.54.4 → 9.2.0

package/dist/daemon/rules/defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.js","sourceRoot":"","sources":["../../../src/daemon/rules/defaults.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,8EAA8E;AAE9E,uEAAuE;AACvE,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,QAAQ,GAAG,CAAC,QAAQ,CAAC;YAAC,GAAG,IAAI,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3E,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,QAAQ,GAAG,CAAC,QAAQ,CAAC;YAAC,GAAG,IAAI,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5C,IAAI,GAAG,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAC,GAAG,GAAG,EAAE,CAAC;YAAC,CAAC;YACxC,SAAS;QACX,CAAC;QACD,GAAG,IAAI,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,GAAG;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,cAAc,CAAC,MAAgB;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,+BAA+B;IAC7D,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC;IACnE,CAAC;IACD,wEAAwE;IACxE,iEAAiE;IACjE,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,oEAAoE;IACpE,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAC5E,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACzE,CAAC;IACD,uFAAuF;IACvF,kDAAkD;IAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS;IACtC,MAAM;IACN,IAAI;IACJ,SAAS;IACT,KAAK;IACL,IAAI;CACL,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,mDAAmD;IACnD,oEAAoE;IACpE,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,2CAA2C;IAC3C,IAAI,KAAK,KAAK,KAAK,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qFAAqF;AACrF,SAAS,kBAAkB,CAAC,MAAgB;IAC1C,uEAAuE;IACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,wBAAwB,CAAC,GAAW;IAC3C,yCAAyC;IACzC,IAAI,4CAA4C,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,2DAA2D;IAC3D,IAAI,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,oEAAoE;IACpE,IAAI,4CAA4C,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,qEAAqE;IACrE,IAAI,iDAAiD,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC3E,SAAS,kBAAkB,CAAC,GAAW;IACrC,wDAAwD;IACxD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnE,2EAA2E;IAC3E,oCAAoC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0EAA0E;AAC1E,SAAS,kBAAkB,CAAC,MAAc;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,OAAO,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;WAC9C,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;WACvB,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;WAC1B,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AACrC,CAAC;AAED,8EAA8E;AAE9E,MAAM,aAAa,GAAG,0FAA0F,CAAC;AAEjH,MAAM,yBAAyB,GAAsB;IACnD,EAAE,EAAE,sBAAsB;IAC1B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,iDAAiD;IAC9D,WAAW,EAAE,uCAAuC;IACpD,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,CAAC,KAAsB,EAAE,GAAgB,EAAE,EAAE;QAClD,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,sEAAsE;QACtE,qEAAqE;QACrE,kEAAkE;QAClE,wEAAwE;QACxE,uCAAuC;QACvC,sEAAsE;QACtE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1C,8EAA8E;QAC9E,IAAI,GAAG,CAAC,kBAAkB;YAAE,OAAO,KAAK,CAAC;QACzC,8EAA8E;QAC9E,sEAAsE;QACtE,2CAA2C;QAC3C,IAAI,kBAAkB,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,EAAE,CAAC,KAAsB,EAAE,EAAE;QAC/B,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO;YACL,uEAAuE;YACvE,MAAM,GAAG,EAAE;YACX,EAAE;YACF,mEAAmE;YACnE,kDAAkD;YAClD,EAAE;YACF,sCAAsC;SACvC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC;IAC/B,CAAC;CACF,CAAC;AAEF,MAAM,qBAAqB,GAAsB;IAC/C,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,qCAAqC;IAClD,WAAW,EAAE,uCAAuC;IACpD,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,CAAC,KAAsB,EAAE,GAAgB,EAAE,EAAE;QAClD,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,GAAG,CAAC,kBAAkB;YAAE,OAAO,KAAK,CAAC;QACzC,sEAAsE;QACtE,wEAAwE;QACxE,sEAAsE;QACtE,+BAA+B;QAC/B,IAAI,uEAAuE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,qDAAqD;QACrD,gEAAgE;QAChE,OAAO,qHAAqH,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzI,CAAC;IACD,IAAI,EAAE,CAAC,KAAsB,EAAE,EAAE;QAC/B,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO;YACL,oDAAoD;YACpD,MAAM,GAAG,EAAE;YACX,EAAE;YACF,kEAAkE;YAClE,+CAA+C;SAChD,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC;IAC/B,CAAC;CACF,CAAC;AAEF,MAAM,yBAAyB,GAAsB;IACnD,EAAE,EAAE,sBAAsB;IAC1B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,2CAA2C;IACxD,WAAW,EAAE,gDAAgD;IAC7D,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,CAAC,KAAsB,EAAE,GAAgB,EAAE,EAAE;QAClD,IAAI,GAAG,CAAC,kBAAkB;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,cAA2B,CAAC;QAChC,IAAI,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzF,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;YACnC,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,GAAG,CAAC,oBAAoB,EAAE,CAAC;gBACpD,IAAI,EAAE,GAAG,GAAG,CAAC,aAAa;oBAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;QACD,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,IAAI,WAAW;YAAE,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACjD,OAAO,cAAc,CAAC,IAAI,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,EAAE,CAAC,KAAsB,EAAE,GAAgB,EAAE,EAAE;QACjD,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1G,OAAO;YACL,kBAAkB,GAAG,iDAAiD;YACtE,EAAE;YACF,qHAAqH;SACtH,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC;IAC/B,CAAC;CACF,CAAC;AAEF,qDAAqD;AACrD,MAAM,0BAA0B,GAAsB;IACpD,GAAG,yBAAyB;IAC5B,EAAE,EAAE,uBAAuB;IAC3B,IAAI,EAAE,OAAO;CACd,CAAC;AAEF,MAAM,8BAA8B,GAAsB;IACxD,EAAE,EAAE,2BAA2B;IAC/B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,iCAAiC;IAC9C,WAAW,EAAE,kDAAkD;IAC/D,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,CAAC,KAAsB,EAAE,GAAgB,EAAE,EAAE;QAClD,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,kEAAkE;QAClE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,IAAI,GAAG,CAAC,kBAAkB;YAAE,OAAO,KAAK,CAAC;QACzC,+DAA+D;QAC/D,kEAAkE;QAClE,sEAAsE;QACtE,IAAI,wBAAwB,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,EAAE,CAAC,KAAsB,EAAE,EAAE;QAC/B,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO;YACL,iEAAiE;YACjE,MAAM,GAAG,EAAE;YACX,EAAE;YACF,OAAO;YACP,iFAAiF;YACjF,mDAAmD;YACnD,wDAAwD;SACzD,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC;IAC/B,CAAC;CACF,CAAC;AAEF,MAAM,qBAAqB,GAAsB;IAC/C,EAAE,EAAE,4BAA4B;IAChC,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,iDAAiD;IAC9D,WAAW,EAAE,kDAAkD;IAC/D,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,CAAC,KAAsB,EAAE,GAAgB,EAAE,EAAE;QAClD,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACtB,IAAI,GAAG,CAAC,kBAAkB;YAAE,OAAO,KAAK,CAAC;QACzC,OAAO,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,EAAE,CAAC,KAAsB,EAAE,GAAgB,EAAE,EAAE;QACjD,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC;YACtD,CAAC,CAAC,+DAA+D;YACjE,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,GAAG,EAAE,+CAA+C;YACpD,EAAE;YACF,8FAA8F;YAC9F,SAAS,EAAE,qCAAqC;YAChD,UAAU;SACX,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC;IAC/C,CAAC;CACF,CAAC;AAEF,MAAM,sBAAsB,GAAsB;IAChD,GAAG,qBAAqB;IACxB,EAAE,EAAE,6BAA6B;IACjC,IAAI,EAAE,OAAO;CACd,CAAC;AAEF,8EAA8E;AAE9E,MAAM,6BAA6B,GAAsB;IACvD,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,sDAAsD;IACnE,WAAW,EAAE,wDAAwD;IACrE,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,CAAC,KAAsB,EAAE,GAAgB,EAAE,EAAE;QAClD,IAAI,GAAG,CAAC,kBAAkB;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,EAAE;YAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,6EAA6E;QAC7E,yDAAyD;QACzD,OAAO,SAAS,CAAC,IAAI,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,EAAE,CAAC,MAAuB,EAAE,GAAgB,EAAE,EAAE;QAClD,OAAO;YACL,iBAAiB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO;YAC9D,kEAAkE;YAClE,EAAE;YACF,4CAA4C;SAC7C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;CACF,CAAC;AAEF,MAAM,8BAA8B,GAAsB;IACxD,GAAG,6BAA6B;IAChC,EAAE,EAAE,2BAA2B;IAC/B,IAAI,EAAE,OAAO;CACd,CAAC;AAEF,gFAAgF;AAEhF;;;;;;;;;;;;;;GAcG;AACH,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC,MAAM,2BAA2B,GAAsB;IACrD,EAAE,EAAE,kCAAkC;IACtC,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,qDAAqD;IAClE,WAAW,EAAE,6EAA6E;IAC1F,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,CAAC,KAAsB,EAAE,GAAgB,EAAW,EAAE;QAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,oBAAoB,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAI,KAAK,GAAG,gBAAgB;YAAE,OAAO,KAAK,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,OAAO,OAAO,KAAK,OAAO,CAAC,sBAAsB,CAAC;IACpD,CAAC;IACD,IAAI,EAAE,CAAC,KAAsB,EAAE,GAAgB,EAAU,EAAE;QACzD,MAAM,OAAO,GAAG,GAAG,CAAC,oBAAoB,CAAC;QACzC,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;QAC5F,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,mCAAmC,OAAO,IAAI,GAAG,aAAa,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;QAC9G,OAAO;YACL,MAAM,MAAM,mBAAmB,OAAO,CAAC,sBAAsB,WAAW,OAAO,CAAC,OAAO,IAAI;YAC3F,OAAO,OAAO,CAAC,MAAM,IAAI,eAAe,EAAE;YAC1C,qBAAqB,OAAO,QAAQ;YACpC,EAAE;YACF,OAAO;YACP,qCAAqC,OAAO,CAAC,sBAAsB,aAAa;YAChF,+EAA+E;SAChF,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC;IAC/B,CAAC;CACF,CAAC;AAEF,6EAA6E;AAC7E,EAAE;AACF,uEAAuE;AACvE,EAAE;AACF,cAAc;AACd,kBAAkB;AAClB,0EAA0E;AAC1E,2EAA2E;AAC3E,iEAAiE;AACjE,+DAA+D;AAC/D,0EAA0E;AAC1E,sEAAsE;AACtE,6EAA6E;AAC7E,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,6EAA6E;AAC7E,qCAAqC;AACrC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS;IACvC,OAAO;IACP,gBAAgB;IAChB,oBAAoB;IACpB,4BAA4B;IAC5B,qBAAqB;CACtB,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAsB;IACvD,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,2CAA2C;IACxD,0EAA0E;IAC1E,wCAAwC;IACxC,WAAW,EAAE,gEAAgE;IAC7E,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,CAAC,KAAsB,EAAE,GAAgB,EAAW,EAAE;QAC3D,qEAAqE;QACrE,mEAAmE;QACnE,IAAI,CAAC,GAAG,CAAC,6BAA6B;YAAE,OAAO,KAAK,CAAC;QACrD,oEAAoE;QACpE,IAAI,GAAG,CAAC,kBAAkB;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5C,4CAA4C;QAC5C,IAAI,oBAAoB,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,EAAE,CAAC,KAAsB,EAAE,IAAiB,EAAU,EAAE;QAC1D,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;QACxF,OAAO;YACL,wCAAwC,GAAG,kBAAkB;YAC7D,uFAAuF;YACvF,6DAA6D;YAC7D,EAAE;YACF,OAAO;YACP,sEAAsE;YACtE,wEAAwE;YACxE,qEAAqE;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC;IAC/B,CAAC;CACF,CAAC;AAEF,4EAA4E;AAC5E,EAAE;AACF,iFAAiF;AACjF,EAAE;AACF,cAAc;AACd,kBAAkB;AAClB,0CAA0C;AAC1C,+EAA+E;AAC/E,2DAA2D;AAC3D,4EAA4E;AAC5E,mCAAmC;AACnC,6EAA6E;AAC7E,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,+CAA+C;AAC/C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS;IACxC,gBAAgB;IAChB,eAAe;IACf,UAAU;IACV,QAAQ;CACT,CAAC,CAAC;AACH,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,4EAA4E;AAC5E,wEAAwE;AACxE,MAAM,qBAAqB,GACzB,oEAAoE,CAAC;AACvE,uEAAuE;AACvE,2EAA2E;AAC3E,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AAExD,2EAA2E;AAC3E,MAAM,wBAAwB,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC/E,gBAAgB,EAAE,gBAAgB;IAClC,eAAe,EAAE,oBAAoB;IACrC,UAAU,EAAE,qBAAqB;IACjC,QAAQ,EAAE,4BAA4B;CACvC,CAAC,CAAC;AAEH,MAAM,sCAAsC,GAAsB;IAChE,EAAE,EAAE,mCAAmC;IACvC,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,2DAA2D;IACxE,WAAW,EAAE,iEAAiE;IAC9E,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,MAAM;IAChB,iBAAiB,EAAE,wBAAwB;IAC3C,KAAK,EAAE,CAAC,KAAsB,EAAE,GAAgB,EAAW,EAAE;QAC3D,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,IAAI,GAAG,KAAK,iBAAiB;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,GAAG,CAAC,kBAAkB;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,uEAAuE;QACvE,gBAAgB;QAChB,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACrD,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/D,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,sBAAsB;YAAE,OAAO,KAAK,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,EAAE,CAAC,MAAuB,EAAE,GAAgB,EAAU,EAAE;QAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,EAAE,aAAa,IAAI,OAAO,CAAC;QAChD,MAAM,WAAW,GAAG,wBAAwB,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC;QAC1E,MAAM,WAAW,GAAG,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;QACxD,OAAO;YACL,+CAA+C,MAAM,OAAO;YAC5D,UAAU,WAAW,IAAI;YACzB,EAAE;YACF,4CAA4C;YAC5C,KAAK,MAAM,iBAAiB,WAAW,6CAA6C;YACpF,EAAE;YACF,4DAA4D;YAC5D,EAAE;YACF,OAAO;YACP,qCAAqC,WAAW,GAAG;YACnD,0FAA0F;SAC3F,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC;IAC/B,CAAC;CACF,CAAC;AAEF,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAwB;IAC/C,kBAAkB;IAClB,yBAAyB;IACzB,qBAAqB;IACrB,8BAA8B;IAC9B,oCAAoC;IACpC,qBAAqB;IACrB,sBAAsB;IACtB,mCAAmC;IACnC,yBAAyB;IACzB,0BAA0B;IAC1B,sEAAsE;IACtE,yEAAyE;IACzE,4EAA4E;IAC5E,oEAAoE;IACpE,sCAAsC;IACtC,wEAAwE;IACxE,2BAA2B;IAC3B,0EAA0E;IAC1E,uEAAuE;IACvE,wEAAwE;IACxE,8CAA8C;IAC9C,6BAA6B;IAC7B,uEAAuE;IACvE,6BAA6B;IAC7B,8BAA8B;CAC/B,CAAC;AAEF,SAAS,qBAAqB,CAAC,EAAU;IACvC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AAC/C,CAAC"}

package/dist/daemon/rules/registry.d.ts

@@ -0,0 +1,47 @@
+/**
+ * RuleRegistry — pluggable rule loader + matching engine (v9.x Phase 1).
+ *
+ * Day-1 shape supports the `RuleKind` discriminator so Phase 5 (workflow
+ * recommender) can plug `workflow_recommend` rules into the SAME registry
+ * with a different consumer (UserPromptHandler).
+ *
+ * Design notes:
+ *   • Rules are loaded once at construction time (defaults + caller-supplied
+ *     overrides). No hot-reload — restart the daemon to pick up new defaults.
+ *   • Matchers are pure functions; the engine does NOT swallow throws —
+ *     a misbehaving rule should be obvious in dev (handlers wrap the call
+ *     in try/catch as a backstop).
+ *   • `findFirstMatch` returns the FIRST rule whose match() returns true.
+ *     Rule order in `defaultRules` is the precedence (deny > warn).
+ */
+import type { ToolInputFields } from '../../core/types.js';
+import type { Rule, RuleContext, ToolInterceptRule, WorkflowRecommendRule, WorkflowMatchResult } from './types.js';
+export declare class RuleRegistry {
+    private rules;
+    constructor(extra?: Rule[]);
+    /** All rules (any kind). Used by Phase 5 once workflow_recommend rules land. */
+    all(): Rule[];
+    /** Filter rules to the tool_intercept bucket; used by PreToolUseHandler. */
+    getToolInterceptRules(toolName?: string): ToolInterceptRule[];
+    /**
+     * Phase 5: filter to workflow_recommend rules. Used by UserPromptHandler
+     * step 5 (workflow recommender).
+     */
+    getWorkflowRules(): WorkflowRecommendRule[];
+    /**
+     * First rule that fires for the given tool input + context. Returns
+     * `undefined` when no rule matches. The handler then decides how to
+     * surface the rule (deny / warn / dry_run).
+     */
+    findFirstMatch(toolName: string, input: ToolInputFields, ctx: RuleContext): ToolInterceptRule | undefined;
+    /**
+     * Phase 5: first workflow rule that fires for a prompt. Returns the rule
+     * plus the match result (matched_keywords + reason) so callers can persist
+     * both without re-running the matcher.
+     */
+    findFirstWorkflowMatch(prompt: string, ctx: RuleContext): {
+        rule: WorkflowRecommendRule;
+        match: WorkflowMatchResult;
+    } | undefined;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/daemon/rules/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/daemon/rules/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EACV,IAAI,EACJ,WAAW,EACX,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAIpB,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAS;gBAEV,KAAK,GAAE,IAAI,EAAO;IAI9B,gFAAgF;IAChF,GAAG,IAAI,IAAI,EAAE;IAIb,4EAA4E;IAC5E,qBAAqB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,iBAAiB,EAAE;IAc7D;;;OAGG;IACH,gBAAgB,IAAI,qBAAqB,EAAE;IAM3C;;;;OAIG;IACH,cAAc,CACZ,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,eAAe,EACtB,GAAG,EAAE,WAAW,GACf,iBAAiB,GAAG,SAAS;IAOhC;;;;OAIG;IACH,sBAAsB,CACpB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,WAAW,GACf;QAAE,IAAI,EAAE,qBAAqB,CAAC;QAAC,KAAK,EAAE,mBAAmB,CAAA;KAAE,GAAG,SAAS;CAO3E"}

package/dist/daemon/rules/registry.js

@@ -0,0 +1,84 @@
+/**
+ * RuleRegistry — pluggable rule loader + matching engine (v9.x Phase 1).
+ *
+ * Day-1 shape supports the `RuleKind` discriminator so Phase 5 (workflow
+ * recommender) can plug `workflow_recommend` rules into the SAME registry
+ * with a different consumer (UserPromptHandler).
+ *
+ * Design notes:
+ *   • Rules are loaded once at construction time (defaults + caller-supplied
+ *     overrides). No hot-reload — restart the daemon to pick up new defaults.
+ *   • Matchers are pure functions; the engine does NOT swallow throws —
+ *     a misbehaving rule should be obvious in dev (handlers wrap the call
+ *     in try/catch as a backstop).
+ *   • `findFirstMatch` returns the FIRST rule whose match() returns true.
+ *     Rule order in `defaultRules` is the precedence (deny > warn).
+ */
+import { defaultRules } from './defaults.js';
+import { defaultWorkflowRules } from './workflow-defaults.js';
+export class RuleRegistry {
+    rules;
+    constructor(extra = []) {
+        this.rules = [...defaultRules, ...defaultWorkflowRules, ...extra];
+    }
+    /** All rules (any kind). Used by Phase 5 once workflow_recommend rules land. */
+    all() {
+        return this.rules;
+    }
+    /** Filter rules to the tool_intercept bucket; used by PreToolUseHandler. */
+    getToolInterceptRules(toolName) {
+        const intercept = this.rules.filter((r) => r.kind === 'tool_intercept');
+        if (toolName === undefined)
+            return intercept;
+        // Spec 1944: `tool` may be a string or string[]. Treat the latter as
+        // "matches any of these tool names" so a single rule can guard several
+        // mutating tools (e.g. decision-hint-pending → Task/Edit/Write/Bash).
+        return intercept.filter((r) => {
+            if (Array.isArray(r.tool))
+                return r.tool.includes(toolName);
+            return r.tool === toolName;
+        });
+    }
+    /**
+     * Phase 5: filter to workflow_recommend rules. Used by UserPromptHandler
+     * step 5 (workflow recommender).
+     */
+    getWorkflowRules() {
+        return this.rules.filter((r) => r.kind === 'workflow_recommend');
+    }
+    /**
+     * First rule that fires for the given tool input + context. Returns
+     * `undefined` when no rule matches. The handler then decides how to
+     * surface the rule (deny / warn / dry_run).
+     */
+    findFirstMatch(toolName, input, ctx) {
+        for (const rule of this.getToolInterceptRules(toolName)) {
+            if (rule.match(input, ctx))
+                return rule;
+        }
+        return undefined;
+    }
+    /**
+     * Phase 5: first workflow rule that fires for a prompt. Returns the rule
+     * plus the match result (matched_keywords + reason) so callers can persist
+     * both without re-running the matcher.
+     */
+    findFirstWorkflowMatch(prompt, ctx) {
+        for (const rule of this.getWorkflowRules()) {
+            const m = safeWorkflowMatch(rule, prompt, ctx);
+            if (m)
+                return { rule, match: m };
+        }
+        return undefined;
+    }
+}
+/** Wrap match() so a misbehaving rule doesn't tank the whole step-5 walk. */
+function safeWorkflowMatch(rule, prompt, ctx) {
+    try {
+        return rule.match(prompt, ctx);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/daemon/rules/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/daemon/rules/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAUH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,OAAO,YAAY;IACf,KAAK,CAAS;IAEtB,YAAY,QAAgB,EAAE;QAC5B,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,oBAAoB,EAAE,GAAG,KAAK,CAAC,CAAC;IACpE,CAAC;IAED,gFAAgF;IAChF,GAAG;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,4EAA4E;IAC5E,qBAAqB,CAAC,QAAiB;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CACjC,CAAC,CAAC,EAA0B,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAC3D,CAAC;QACF,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC7C,qEAAqE;QACrE,uEAAuE;QACvE,sEAAsE;QACtE,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC5D,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CACtB,CAAC,CAAC,EAA8B,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CACnE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,cAAc,CACZ,QAAgB,EAChB,KAAsB,EACtB,GAAgB;QAEhB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC1C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACH,sBAAsB,CACpB,MAAc,EACd,GAAgB;QAEhB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAC/C,IAAI,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACnC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED,6EAA6E;AAC7E,SAAS,iBAAiB,CACxB,IAA2B,EAC3B,MAAc,EACd,GAAgB;IAEhB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/daemon/rules/types.d.ts

@@ -0,0 +1,170 @@
+/**
+ * Rule types — shared by Phase 1 (tool_intercept) and Phase 5 (workflow_recommend).
+ *
+ * The `RuleKind` discriminator is intentional from day 1 so a single
+ * `RuleRegistry` can host both rule families with no schema break later:
+ *
+ *   • Phase 1: `PreToolUseHandler` filters to `kind='tool_intercept'`.
+ *   • Phase 5: `UserPromptHandler` (workflow recommender) filters to
+ *     `kind='workflow_recommend'` (added in a later commit).
+ *
+ * Add a new union member here when introducing a new rule family — the
+ * `Rule` union type forces all downstream switch/filter sites to update.
+ */
+import type { ToolInputFields } from '../../core/types.js';
+export type RuleKind = 'tool_intercept' | 'workflow_recommend';
+export type ToolInterceptDecision = 'deny' | 'warn' | 'ask';
+/**
+ * Per-event context surfaced to rule matchers. The fields are intentionally
+ * narrow — anything richer (session history, KB hits) should be pre-computed
+ * in the handler and threaded through here rather than letting rules reach
+ * back into storage.
+ */
+export interface RuleContext {
+    session_id: string;
+    project_path: string;
+    /** UNIX ms of the pre-tool event for relative-time checks (e.g. "agent fired in last 30s"). */
+    timestamp_ms: number;
+    /**
+     * True if the session has invoked the Agent tool (i.e. spawned a subagent)
+     * within the recent observation window (`PreToolUseHandler` decides the
+     * window — currently 30 s). Used to RELAX rules that should not fire from
+     * inside an already-spawned agent context (CLAUDE.md §"主线程查 KB" 例外).
+     */
+    recent_agent_spawn: boolean;
+    /**
+     * Set of distinct file paths the session has Edited / Written so far.
+     * Computed lazily by the handler from events; populated for Edit/Write
+     * threshold rules. May be empty for sessions where no edits have happened.
+     */
+    edited_files: Set<string>;
+    /**
+     * P0-1 fix (2026-05-27): per-file timestamp of the LAST Edit/Write the
+     * session has observed. Used by `edit-multi-file-hard` to filter out files
+     * that were already edited BEFORE the most recent agent spawn — these are
+     * sub-agent edits whose count we shouldn't hold against the main thread's
+     * post-coordination actions.
+     *
+     * Optional + readonly to keep the older `edited_files` field untouched for
+     * callers that don't need timing data. `ts` is ISO 8601.
+     */
+    edited_files_with_ts?: ReadonlyArray<{
+        path: string;
+        ts: string;
+    }>;
+    /**
+     * P0-1 fix (2026-05-27): ISO timestamp of the most recent PreToolUse
+     * Task/Agent event within the F6 5-min window. `null` when no spawn was
+     * observed in-window. Combined with `edited_files_with_ts` to relax the
+     * HARD multi-file rule when ALL pre-spawn edits should be excluded.
+     */
+    last_spawn_ts?: string | null;
+    /**
+     * Raw user prompt text for the most recent UserPromptSubmit in the session,
+     * if known. Used by rules that want to RELAX deny → warn when the prompt
+     * declares an explicit intent (e.g. "修复 hook 协议错误" for `edit-hook-script`).
+     * Empty string means "unknown / not available".
+     */
+    recent_prompt: string;
+    /**
+     * Phase 5: most-recent PENDING workflow recommendation for this session
+     * (within a 5 min sliding window). PreToolUseHandler pre-computes this so
+     * the `workflow-recommendation-mismatch` rule can stay synchronous —
+     * matchers MUST NOT reach back into storage.
+     *
+     * `null` when:
+     *   • Phase 5 feature flag is OFF
+     *   • no recent recommendation exists
+     *   • all recent recommendations were already accepted/rejected/bypassed
+     */
+    pending_workflow_rec?: PendingWorkflowRec | null;
+    /**
+     * v9.x Phase 2 (2026-05-26): `question_default_bmad.enforce` feature flag
+     * snapshot. PreToolUseHandler reads ConfigStore once per event so the
+     * `task-question-needs-bmad` rule can stay synchronous.
+     *
+     * Default `false` during the 7-day dry_run window after 2026-05-26. When
+     * `false`, RULE_TASK_QUESTION_NEEDS_BMAD short-circuits its match() to
+     * `false` — the soft recommend layer still fires (via
+     * `bmad-question-default` in workflow-defaults), so we still measure
+     * triggering rate without blocking the user.
+     */
+    question_default_bmad_enforce?: boolean;
+}
+/** Compact projection of a `workflow_recommendations` row exposed to rules. */
+export interface PendingWorkflowRec {
+    id: number;
+    rule_id: string;
+    recommended_agent_type: string;
+    recommended_workflow: string;
+    reason: string | null;
+    /** ISO 8601 — the rule converts to age-in-minutes for the hint copy. */
+    timestamp: string;
+}
+/** Base discriminator shared by every rule kind. */
+export interface RuleBase {
+    /** Stable identifier; serialised into `tool_intercepts.rule_id`. */
+    id: string;
+    kind: RuleKind;
+    description: string;
+    /** Optional pointer back into CLAUDE.md / docs so the user can find the rule narrative. */
+    claudemdRef?: string;
+    /**
+     * Phase 2c safety-net #4: observation window. ISO 8601 timestamp.
+     * Before this instant, the rule is force-demoted to `decision='dry_run'`
+     * even if `pre_tool_intercept.enabled='true'`. Lets newly added rules ride
+     * along for 24h without blocking real tool calls so the user can review
+     * the dry_run rows in `tool_intercepts` before committing.
+     *
+     * Unset / past → rule fires normally.
+     */
+    observation_until?: string;
+}
+export interface ToolInterceptRule extends RuleBase {
+    kind: 'tool_intercept';
+    /**
+     * Tool name(s) this rule binds to.
+     *
+     * Spec 1944 (decision-hint chain fix, 2026-05-28): widened from `string` to
+     * `string | string[]` so a single rule can guard several mutating tools
+     * (`['Task', 'Edit', 'Write', 'Bash']` — the original need was
+     * `decision-hint-pending`). Existing rules that only care about one tool
+     * keep using a bare string; the registry handles both shapes.
+     */
+    tool: string | string[];
+    match: (input: ToolInputFields, ctx: RuleContext) => boolean;
+    decision: ToolInterceptDecision;
+    /** Free-form text shown to the AI when the rule fires; should END with bypass instructions. */
+    hint: (input: ToolInputFields, ctx: RuleContext) => string;
+}
+/**
+ * Phase 5 workflow-recommendation rule (D4=strict). UserPromptHandler step 5
+ * iterates `getWorkflowRules()` and picks the FIRST rule whose `match()`
+ * returns non-null. Order in `defaultWorkflowRules` is the precedence
+ * (specific rules before fallbacks).
+ *
+ * Why `match()` returns a richer object than a boolean: we want to log the
+ * actual keywords/files that triggered the match into
+ * `workflow_recommendations.matched_keywords` so the dashboard can answer
+ * "why was X recommended" without re-running the matcher.
+ */
+export type WorkflowName = 'BMAD' | 'harness-hotfix' | 'harness-debug-full' | 'refactor-specialist' | 'hybrid-feature-with-safety' | 'no-spawn';
+export interface WorkflowMatchResult {
+    /** Tokens / phrases / file paths from the prompt that triggered the match. */
+    matched_keywords: string[];
+    /**
+     * Human-readable explanation rendered into the injection block + persisted
+     * to `workflow_recommendations.reason`. SHOULD reference CLAUDE.md anchor.
+     */
+    reason: string;
+}
+export interface WorkflowRecommendRule extends RuleBase {
+    kind: 'workflow_recommend';
+    /** Returns `null` if the rule did not fire. */
+    match: (prompt: string, ctx: RuleContext) => WorkflowMatchResult | null;
+    recommended_workflow: WorkflowName;
+    /** Must match a `.claude/agents/<name>.md` filename (without the .md). */
+    recommended_agent_type: string;
+}
+export type Rule = ToolInterceptRule | WorkflowRecommendRule;
+//# sourceMappingURL=types.d.ts.map

package/dist/daemon/rules/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/daemon/rules/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,MAAM,QAAQ,GAAG,gBAAgB,GAAG,oBAAoB,CAAC;AAC/D,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,+FAA+F;IAC/F,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,kBAAkB,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B;;;;;;;;;OASG;IACH,oBAAoB,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;OAUG;IACH,oBAAoB,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACjD;;;;;;;;;;OAUG;IACH,6BAA6B,CAAC,EAAE,OAAO,CAAC;CACzC;AAED,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,oDAAoD;AACpD,MAAM,WAAW,QAAQ;IACvB,oEAAoE;IACpE,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,QAAQ,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAkB,SAAQ,QAAQ;IACjD,IAAI,EAAE,gBAAgB,CAAC;IACvB;;;;;;;;OAQG;IACH,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,KAAK,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC;IAC7D,QAAQ,EAAE,qBAAqB,CAAC;IAChC,+FAA+F;IAC/F,IAAI,EAAE,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,WAAW,KAAK,MAAM,CAAC;CAC5D;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,gBAAgB,GAChB,oBAAoB,GACpB,qBAAqB,GACrB,4BAA4B,GAC5B,UAAU,CAAC;AAEf,MAAM,WAAW,mBAAmB;IAClC,8EAA8E;IAC9E,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAsB,SAAQ,QAAQ;IACrD,IAAI,EAAE,oBAAoB,CAAC;IAC3B,+CAA+C;IAC/C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,KAAK,mBAAmB,GAAG,IAAI,CAAC;IACxE,oBAAoB,EAAE,YAAY,CAAC;IACnC,0EAA0E;IAC1E,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,MAAM,IAAI,GAAG,iBAAiB,GAAG,qBAAqB,CAAC"}

package/dist/daemon/rules/types.js

@@ -0,0 +1,15 @@
+/**
+ * Rule types — shared by Phase 1 (tool_intercept) and Phase 5 (workflow_recommend).
+ *
+ * The `RuleKind` discriminator is intentional from day 1 so a single
+ * `RuleRegistry` can host both rule families with no schema break later:
+ *
+ *   • Phase 1: `PreToolUseHandler` filters to `kind='tool_intercept'`.
+ *   • Phase 5: `UserPromptHandler` (workflow recommender) filters to
+ *     `kind='workflow_recommend'` (added in a later commit).
+ *
+ * Add a new union member here when introducing a new rule family — the
+ * `Rule` union type forces all downstream switch/filter sites to update.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/daemon/rules/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/daemon/rules/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/daemon/rules/whitelist.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Enforcement bypass whitelist (Phase 2c safety-net #1).
+ *
+ * Tools / Bash command prefixes that ALWAYS pass PreToolUseHandler without
+ * touching the rule engine. Used as an "early-exit" gate before
+ * RuleRegistry.findFirstMatch so:
+ *   • Read / Glob / Grep never write `tool_intercepts` rows (noise reduction)
+ *   • Project-essential commands (`cf bypass`, `npm test`, `node`, etc.) keep
+ *     working after the user flips `pre_tool_intercept.enabled=true` (otherwise
+ *     the very command needed to disable enforcement would be denied — a
+ *     "install-time deadlock").
+ *
+ * Two whitelist tracks:
+ *   1. `tools`            — exact ToolName match (case-sensitive, as emitted by
+ *                           Claude Code). Currently only the read-only triplet.
+ *   2. `bashReadOnly`     — pure read-only shell commands (ls/cat/git status…).
+ *   3. `bashProjectEssential` — non-read-only but mandatory for the project to
+ *                           function (cf CLI itself, npm/tsc/vitest, scripts).
+ *
+ * Bash matching uses a STRICT prefix check on the lowercased command. To avoid
+ * trivial bypass (`ls; rm -rf /` would match `ls` prefix), any command
+ * containing a shell metacharacter (see `hasShellInjectionMetachar`) is refused
+ * whitelist treatment.
+ */
+import type { ToolInputFields } from '../../core/types.js';
+import type { ConfigStore } from '../config-store.js';
+/** Config key holding the comma-separated per-project disable list (Phase D). */
+export declare const PROJECT_DISABLED_PREFIXES_KEY = "pre_tool_intercept.disabled_project_prefixes";
+/**
+ * injection-guard (2026-06-05) — true when `cmd` contains a shell metacharacter
+ * that could chain a second command past a prefix-based whitelist. See
+ * `SHELL_INJECTION_METACHAR` for the exact set and rationale.
+ */
+export declare function hasShellInjectionMetachar(cmd: string): boolean;
+export declare const ENFORCEMENT_BYPASS_WHITELIST: {
+    /** Tool names that bypass enforcement unconditionally. */
+    readonly tools: Set<string>;
+    /**
+     * Read-only Bash command prefixes. Match is case-insensitive against the
+     * trimmed command. Order is irrelevant — `Array.some` covers all.
+     */
+    readonly bashReadOnly: readonly ["ls", "cat", "head", "tail", "find", "git status", "git log", "git diff", "git show", "git blame", "gh pr view", "gh issue view", "wc", "file", "stat", "tree", "pwd", "which", "echo"];
+    /**
+     * Project-essential Bash command prefixes. Not strictly read-only but
+     * required for the user's normal workflow (CLI itself, testing, build).
+     * Without these, flipping enforcement ON would brick the install:
+     *   • `cf` denied → user can't `cf config set pre_tool_intercept.enabled false`
+     *   • `npm test` denied → no way to verify changes
+     *   • `node` / `npx` denied → tooling stalls
+     *
+     * Note the trailing space on `cf ` / `node ` etc. — bare `cf` (no args) is
+     * still allowed because the trimmed command equals `cf` (length 2) and would
+     * be matched by `'cf '` only if we use a more lenient check. We deliberately
+     * include both `'cf '` and `'cf\t'` so tab-separated invocations also match;
+     * the bare-token edge case is rare and not worth special-casing.
+     */
+    readonly bashProjectEssential: readonly ["cf ", "cf\t", "claude-forge ", "npm test", "npm run", "npm install", "npm ci", "npm --", "node ", "node --", "npx ", "vitest", "tsc", "./scripts/dev-daemon.sh", "./scripts/"];
+};
+/**
+ * Returns `true` when the (toolName, input) pair is whitelisted and the
+ * PreToolUseHandler should early-exit (no rule lookup, no row written).
+ *
+ * Bash early-exit honors a safety guard: any command containing a shell
+ * metacharacter (`hasShellInjectionMetachar`: `; & | $ \` > < \n`) is REJECTED
+ * from the whitelist even when the first token would otherwise match, to defeat
+ * trivial bypass like `ls; rm -rf ~` or substitution like `cat $(rm rf)`.
+ */
+export declare function isWhitelisted(toolName: string, input: ToolInputFields): boolean;
+/**
+ * 8-in-1 Phase D (2026-05-27): per-project intercept disable.
+ *
+ * Returns true when the project path falls under one of the user-configured
+ * disabled prefixes (comma-separated `forge_config` key). PreToolUseHandler
+ * calls this BEFORE `isWhitelisted` — projects on the disabled list skip the
+ * rule engine entirely (and never write `tool_intercepts` rows).
+ *
+ * Empty / unset config → returns false (default behaviour unchanged).
+ *
+ * Path matching:
+ *   • String `startsWith` (case-sensitive).
+ *   • Empty prefixes (multiple commas, trailing comma) are ignored.
+ *   • A trailing `/` on either side is NOT required — but users SHOULD
+ *     include one when there's ambiguity (e.g. `/Users/me/proj` would also
+ *     match `/Users/me/proj-fork`; use `/Users/me/proj/` to anchor).
+ *
+ * Failures (storage read throws) degrade silently to `false` — better to
+ * keep enforcement on than crash the pipeline.
+ */
+export declare function isProjectInterceptDisabled(projectPath: string, configStore: ConfigStore): boolean;
+/**
+ * Daemon-startup self-test (called from src/daemon/index.ts).
+ *
+ * Hard-coded assertions that must hold for the project to be usable after
+ * enforcement is enabled. If any of these fail, the daemon refuses to start —
+ * better to fail loudly at boot than brick the install on first user command.
+ *
+ * Throws on first failed assertion with a message identifying the broken
+ * whitelist entry. Callers should treat the throw as fatal.
+ */
+export declare function assertWhitelistInvariants(): void;
+//# sourceMappingURL=whitelist.d.ts.map

package/dist/daemon/rules/whitelist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whitelist.d.ts","sourceRoot":"","sources":["../../../src/daemon/rules/whitelist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,iFAAiF;AACjF,eAAO,MAAM,6BAA6B,iDACM,CAAC;AA2BjD;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED,eAAO,MAAM,4BAA4B;IACvC,0DAA0D;;IAG1D;;;OAGG;;IASH;;;;;;;;;;;;;OAaG;;CAUK,CAAC;AAEX;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAoB/E;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,WAAW,GACvB,OAAO,CAUT;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,IAAI,IAAI,CA4ChD"}