@within-7/minto 0.4.1 → 0.4.2

package/dist/core/backupManager.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/core/backupManager.ts"],
-  "sourcesContent": ["/**\n * Backup Manager\n *\n * Provides automatic file backup functionality for Minto.\n * Stores file backups in ~/.minto/backups/ with path-hashed directory names.\n * Keeps up to 10 versions per file using LRU eviction.\n *\n * Features:\n * - Automatic backup creation before file operations\n * - Version history with metadata\n * - Easy restoration to any previous version\n * - Encoding and line ending detection\n * - LRU-based cleanup for old versions\n */\n\nimport { createHash } from 'crypto'\nimport { promises as fs } from 'fs'\nimport { join, dirname } from 'path'\nimport { homedir } from 'os'\nimport { CONFIG_BASE_DIR } from '@constants/product'\nimport {\n  existsAsync,\n  mkdirAsync,\n  readJsonAsync,\n  writeJsonAsync,\n  readdirAsync,\n  unlinkAsync,\n} from '../utils/asyncFile'\n\n// ============================================================================\n// Constants\n// ============================================================================\n\n/** Maximum number of versions to keep per file */\nexport const MAX_VERSIONS_PER_FILE = 10\n\n/**\n * Get the base directory for Minto data files\n * Computed dynamically to support test environment overrides\n */\nfunction getMintoBaseDir(): string {\n  return (\n    process.env.MINTO_CONFIG_DIR ??\n    process.env.CLAUDE_CONFIG_DIR ??\n    join(homedir(), CONFIG_BASE_DIR)\n  )\n}\n\n/**\n * Get the backups directory path\n * Uses a getter function to support dynamic environment configuration\n */\nexport function getBackupsDir(): string {\n  return join(getMintoBaseDir(), 'backups')\n}\n\n/** @deprecated Use getBackupsDir() instead - kept for backward compatibility */\nexport const BACKUPS_DIR = join(getMintoBaseDir(), 'backups')\n\n/** Index file name for each backup directory */\nconst INDEX_FILE = 'index.json'\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Operation types for backup metadata\n */\nexport type BackupOperation = 'create' | 'update' | 'delete'\n\n/**\n * Line ending types\n */\nexport type LineEnding = 'LF' | 'CRLF'\n\n/**\n * Metadata for a single backup version\n */\nexport interface BackupMetadata {\n  /** Version number (1-based, auto-incremented) */\n  version: number\n  /** Timestamp when backup was created (Unix ms) */\n  timestamp: number\n  /** Type of operation that triggered the backup */\n  operation: BackupOperation\n  /** File encoding */\n  encoding: BufferEncoding\n  /** Line ending style */\n  lineEndings: LineEnding\n  /** File size in bytes */\n  size: number\n  /** Optional description of the change */\n  description?: string\n}\n\n/**\n * File backup input for creating a new backup\n */\nexport interface FileBackup {\n  /** Absolute path to the file */\n  filePath: string\n  /** Previous content (null for new files) */\n  oldContent: string | null\n  /** New content (null for deleted files) */\n  newContent: string | null\n  /** Backup metadata */\n  metadata: BackupMetadata\n}\n\n/**\n * Index structure stored in each backup directory\n */\nexport interface BackupIndex {\n  /** Original absolute file path */\n  filePath: string\n  /** SHA256 hash of the path (first 12 chars) */\n  pathHash: string\n  /** When this file was first backed up */\n  createdAt: number\n  /** List of backup versions (sorted by version number) */\n  versions: BackupMetadata[]\n}\n\n/**\n * Summary of a backed-up file for listing\n */\nexport interface BackupFileSummary {\n  /** Original file path */\n  filePath: string\n  /** Path hash (directory name) */\n  pathHash: string\n  /** Number of backup versions */\n  versionCount: number\n  /** Timestamp of most recent backup */\n  lastBackupAt: number\n  /** Most recent operation */\n  lastOperation: BackupOperation\n}\n\n// ============================================================================\n// Utility Functions\n// ============================================================================\n\n/**\n * Generate a path hash for directory naming\n * Uses first 12 characters of SHA256 hash\n */\nexport function getPathHash(filePath: string): string {\n  const hash = createHash('sha256').update(filePath).digest('hex')\n  return hash.slice(0, 12)\n}\n\n/**\n * Get the backup directory for a file\n */\nfunction getBackupDir(filePath: string): string {\n  const pathHash = getPathHash(filePath)\n  return join(getBackupsDir(), pathHash)\n}\n\n/**\n * Get the path to the index file for a file's backups\n */\nfunction getIndexPath(filePath: string): string {\n  return join(getBackupDir(filePath), INDEX_FILE)\n}\n\n/**\n * Get the path to a specific backup version file\n */\nfunction getVersionPath(filePath: string, version: number): string {\n  return join(getBackupDir(filePath), `v${version}.backup`)\n}\n\n/**\n * Detect line endings in content\n */\nexport function detectLineEndings(content: string): LineEnding {\n  // Check for CRLF first (Windows)\n  if (content.includes('\\r\\n')) {\n    return 'CRLF'\n  }\n  return 'LF'\n}\n\n/**\n * Detect file encoding from content\n * Currently defaults to utf8, but can be extended for binary detection\n */\nexport function detectEncoding(_content: string): BufferEncoding {\n  // For now, we assume utf8 for text files\n  // Binary file detection would require buffer analysis\n  return 'utf8'\n}\n\n// ============================================================================\n// Core Functions\n// ============================================================================\n\n/**\n * Create a backup before file operations\n *\n * @param filePath - Absolute path to the file being modified\n * @param oldContent - Previous content (null for new files)\n * @param newContent - New content (null for deleted files)\n * @param operation - Type of operation (create, update, delete)\n * @param description - Optional description of the change\n * @returns The created backup metadata, or null if backup failed\n */\nexport async function createBackup(\n  filePath: string,\n  oldContent: string | null,\n  newContent: string | null,\n  operation: BackupOperation,\n  description?: string,\n): Promise<BackupMetadata | null> {\n  try {\n    const backupDir = getBackupDir(filePath)\n    const indexPath = getIndexPath(filePath)\n\n    // Ensure backup directory exists\n    await mkdirAsync(backupDir, true)\n\n    // Load or create index\n    let index: BackupIndex\n    if (await existsAsync(indexPath)) {\n      const loaded = await readJsonAsync<BackupIndex>(indexPath)\n      if (loaded) {\n        index = loaded\n      } else {\n        // Corrupted index, recreate\n        index = {\n          filePath,\n          pathHash: getPathHash(filePath),\n          createdAt: Date.now(),\n          versions: [],\n        }\n      }\n    } else {\n      index = {\n        filePath,\n        pathHash: getPathHash(filePath),\n        createdAt: Date.now(),\n        versions: [],\n      }\n    }\n\n    // Determine content to backup (old content for updates/deletes, null for creates)\n    const contentToBackup = operation === 'create' ? null : oldContent\n\n    // Calculate next version number\n    const maxVersion =\n      index.versions.length > 0\n        ? Math.max(...index.versions.map(v => v.version))\n        : 0\n    const newVersion = maxVersion + 1\n\n    // Create metadata\n    const metadata: BackupMetadata = {\n      version: newVersion,\n      timestamp: Date.now(),\n      operation,\n      encoding: contentToBackup ? detectEncoding(contentToBackup) : 'utf8',\n      lineEndings: contentToBackup ? detectLineEndings(contentToBackup) : 'LF',\n      size: contentToBackup ? Buffer.byteLength(contentToBackup, 'utf8') : 0,\n      description,\n    }\n\n    // Write backup content if there is content to backup\n    if (contentToBackup !== null) {\n      const versionPath = getVersionPath(filePath, newVersion)\n      await fs.writeFile(versionPath, contentToBackup, {\n        encoding: metadata.encoding,\n      })\n    }\n\n    // Add to versions\n    index.versions.push(metadata)\n\n    // Cleanup old versions if exceeding limit\n    if (index.versions.length > MAX_VERSIONS_PER_FILE) {\n      await cleanupOldVersions(filePath, index)\n    }\n\n    // Save updated index\n    await writeJsonAsync(indexPath, index)\n\n    return metadata\n  } catch (error) {\n    // Log error but don't throw - backup failure shouldn't block operations\n    console.error(\n      `[BackupManager] Failed to create backup for ${filePath}:`,\n      error,\n    )\n    return null\n  }\n}\n\n/**\n * Clean up old versions when exceeding MAX_VERSIONS_PER_FILE\n * Uses LRU strategy - removes oldest versions first\n */\nasync function cleanupOldVersions(\n  filePath: string,\n  index: BackupIndex,\n): Promise<void> {\n  // Sort by version number (oldest first)\n  index.versions.sort((a, b) => a.version - b.version)\n\n  // Calculate how many to remove\n  const toRemove = index.versions.length - MAX_VERSIONS_PER_FILE\n\n  if (toRemove <= 0) return\n\n  // Remove oldest versions\n  const versionsToDelete = index.versions.splice(0, toRemove)\n\n  // Delete the actual backup files\n  for (const version of versionsToDelete) {\n    const versionPath = getVersionPath(filePath, version.version)\n    await unlinkAsync(versionPath)\n  }\n}\n\n/**\n * List all files that have backups, sorted by most recent backup\n *\n * @returns Array of backup file summaries, sorted by most recent first\n */\nexport async function listBackedUpFiles(): Promise<BackupFileSummary[]> {\n  try {\n    const backupsDir = getBackupsDir()\n\n    // Check if backups directory exists\n    if (!(await existsAsync(backupsDir))) {\n      return []\n    }\n\n    // Read all subdirectories in backups\n    const entries = await readdirAsync(backupsDir)\n    const summaries: BackupFileSummary[] = []\n\n    for (const entry of entries) {\n      const indexPath = join(backupsDir, entry, INDEX_FILE)\n\n      if (await existsAsync(indexPath)) {\n        const index = await readJsonAsync<BackupIndex>(indexPath)\n        if (index && index.versions.length > 0) {\n          // Get the most recent version\n          const sortedVersions = [...index.versions].sort(\n            (a, b) => b.timestamp - a.timestamp,\n          )\n          const mostRecent = sortedVersions[0]\n\n          summaries.push({\n            filePath: index.filePath,\n            pathHash: index.pathHash,\n            versionCount: index.versions.length,\n            lastBackupAt: mostRecent.timestamp,\n            lastOperation: mostRecent.operation,\n          })\n        }\n      }\n    }\n\n    // Sort by most recent backup first\n    summaries.sort((a, b) => b.lastBackupAt - a.lastBackupAt)\n\n    return summaries\n  } catch (error) {\n    console.error('[BackupManager] Failed to list backed up files:', error)\n    return []\n  }\n}\n\n/**\n * Get all backup versions for a specific file\n *\n * @param filePath - Absolute path to the file\n * @returns Array of backup metadata, sorted by version (newest first)\n */\nexport async function getBackupVersions(\n  filePath: string,\n): Promise<BackupMetadata[]> {\n  try {\n    const indexPath = getIndexPath(filePath)\n\n    if (!(await existsAsync(indexPath))) {\n      return []\n    }\n\n    const index = await readJsonAsync<BackupIndex>(indexPath)\n    if (!index) {\n      return []\n    }\n\n    // Return sorted by version (newest first)\n    return [...index.versions].sort((a, b) => b.version - a.version)\n  } catch (error) {\n    console.error(\n      `[BackupManager] Failed to get versions for ${filePath}:`,\n      error,\n    )\n    return []\n  }\n}\n\n/**\n * Get the content of a specific backup version\n *\n * @param filePath - Absolute path to the file\n * @param version - Version number to retrieve\n * @returns The backup content, or null if not found\n */\nexport async function getBackupContent(\n  filePath: string,\n  version: number,\n): Promise<string | null> {\n  try {\n    const indexPath = getIndexPath(filePath)\n\n    // Check if index exists\n    if (!(await existsAsync(indexPath))) {\n      return null\n    }\n\n    // Load index to verify version exists\n    const index = await readJsonAsync<BackupIndex>(indexPath)\n    if (!index) {\n      return null\n    }\n\n    // Find the version metadata\n    const versionMeta = index.versions.find(v => v.version === version)\n    if (!versionMeta) {\n      return null\n    }\n\n    // For 'create' operations, there's no previous content\n    if (versionMeta.operation === 'create' && versionMeta.size === 0) {\n      return null\n    }\n\n    // Read the backup file\n    const versionPath = getVersionPath(filePath, version)\n    if (!(await existsAsync(versionPath))) {\n      return null\n    }\n\n    const content = await fs.readFile(versionPath, {\n      encoding: versionMeta.encoding,\n    })\n\n    return content\n  } catch (error) {\n    console.error(\n      `[BackupManager] Failed to get backup content for ${filePath} v${version}:`,\n      error,\n    )\n    return null\n  }\n}\n\n/**\n * Restore a file to a specific backup version\n *\n * @param filePath - Absolute path to the file\n * @param version - Version number to restore to\n * @returns True if restoration was successful, false otherwise\n */\nexport async function restoreBackup(\n  filePath: string,\n  version: number,\n): Promise<boolean> {\n  try {\n    // Get the backup content\n    const content = await getBackupContent(filePath, version)\n\n    // Handle the case where content is null (could be a 'create' backup with no previous content)\n    const indexPath = getIndexPath(filePath)\n    const index = await readJsonAsync<BackupIndex>(indexPath)\n    if (!index) {\n      console.error(`[BackupManager] No backup index found for ${filePath}`)\n      return false\n    }\n\n    const versionMeta = index.versions.find(v => v.version === version)\n    if (!versionMeta) {\n      console.error(\n        `[BackupManager] Version ${version} not found for ${filePath}`,\n      )\n      return false\n    }\n\n    // If this was a 'create' operation, restoring means deleting the file\n    if (versionMeta.operation === 'create' && content === null) {\n      // The file didn't exist before creation, so \"restoring\" means deleting it\n      await fs.unlink(filePath)\n      return true\n    }\n\n    // For other cases, we need content\n    if (content === null) {\n      console.error(\n        `[BackupManager] No content found for ${filePath} v${version}`,\n      )\n      return false\n    }\n\n    // Create a backup of current state before restoring\n    let currentContent: string | null = null\n    try {\n      currentContent = await fs.readFile(filePath, 'utf8')\n    } catch {\n      // File might not exist, that's okay\n    }\n\n    if (currentContent !== null) {\n      await createBackup(\n        filePath,\n        currentContent,\n        content,\n        'update',\n        `Restored from version ${version}`,\n      )\n    }\n\n    // Ensure parent directory exists\n    const parentDir = dirname(filePath)\n    await mkdirAsync(parentDir, true)\n\n    // Write the restored content\n    await fs.writeFile(filePath, content, {\n      encoding: versionMeta.encoding,\n    })\n\n    return true\n  } catch (error) {\n    console.error(\n      `[BackupManager] Failed to restore ${filePath} to v${version}:`,\n      error,\n    )\n    return false\n  }\n}\n\n/**\n * Get the backup index for a file\n * Useful for debugging and advanced operations\n */\nexport async function getBackupIndex(\n  filePath: string,\n): Promise<BackupIndex | null> {\n  const indexPath = getIndexPath(filePath)\n  return await readJsonAsync<BackupIndex>(indexPath)\n}\n\n/**\n * Delete all backups for a specific file\n * Use with caution - this is permanent\n */\nexport async function deleteAllBackups(filePath: string): Promise<boolean> {\n  try {\n    const backupDir = getBackupDir(filePath)\n\n    if (!(await existsAsync(backupDir))) {\n      return true // Nothing to delete\n    }\n\n    // Delete all files in the backup directory\n    const entries = await readdirAsync(backupDir)\n    for (const entry of entries) {\n      await unlinkAsync(join(backupDir, entry))\n    }\n\n    // Remove the directory itself\n    await fs.rmdir(backupDir)\n\n    return true\n  } catch (error) {\n    console.error(\n      `[BackupManager] Failed to delete backups for ${filePath}:`,\n      error,\n    )\n    return false\n  }\n}\n\n/**\n * Get total backup storage usage in bytes\n */\nexport async function getBackupStorageUsage(): Promise<{\n  totalBytes: number\n  fileCount: number\n  versionCount: number\n}> {\n  try {\n    const backupsDir = getBackupsDir()\n\n    if (!(await existsAsync(backupsDir))) {\n      return { totalBytes: 0, fileCount: 0, versionCount: 0 }\n    }\n\n    let totalBytes = 0\n    let fileCount = 0\n    let versionCount = 0\n\n    const entries = await readdirAsync(backupsDir)\n\n    for (const entry of entries) {\n      const indexPath = join(backupsDir, entry, INDEX_FILE)\n      const index = await readJsonAsync<BackupIndex>(indexPath)\n\n      if (index) {\n        fileCount++\n        versionCount += index.versions.length\n\n        // Sum up the sizes from metadata\n        for (const version of index.versions) {\n          totalBytes += version.size\n        }\n      }\n    }\n\n    return { totalBytes, fileCount, versionCount }\n  } catch (error) {\n    console.error('[BackupManager] Failed to get storage usage:', error)\n    return { totalBytes: 0, fileCount: 0, versionCount: 0 }\n  }\n}\n"],
-  "mappings": "AAeA,SAAS,kBAAkB;AAC3B,SAAS,YAAY,UAAU;AAC/B,SAAS,MAAM,eAAe;AAC9B,SAAS,eAAe;AACxB,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOA,MAAM,wBAAwB;AAMrC,SAAS,kBAA0B;AACjC,SACE,QAAQ,IAAI,oBACZ,QAAQ,IAAI,qBACZ,KAAK,QAAQ,GAAG,eAAe;AAEnC;AAMO,SAAS,gBAAwB;AACtC,SAAO,KAAK,gBAAgB,GAAG,SAAS;AAC1C;AAGO,MAAM,cAAc,KAAK,gBAAgB,GAAG,SAAS;AAG5D,MAAM,aAAa;AAwFZ,SAAS,YAAY,UAA0B;AACpD,QAAM,OAAO,WAAW,QAAQ,EAAE,OAAO,QAAQ,EAAE,OAAO,KAAK;AAC/D,SAAO,KAAK,MAAM,GAAG,EAAE;AACzB;AAKA,SAAS,aAAa,UAA0B;AAC9C,QAAM,WAAW,YAAY,QAAQ;AACrC,SAAO,KAAK,cAAc,GAAG,QAAQ;AACvC;AAKA,SAAS,aAAa,UAA0B;AAC9C,SAAO,KAAK,aAAa,QAAQ,GAAG,UAAU;AAChD;AAKA,SAAS,eAAe,UAAkB,SAAyB;AACjE,SAAO,KAAK,aAAa,QAAQ,GAAG,IAAI,OAAO,SAAS;AAC1D;AAKO,SAAS,kBAAkB,SAA6B;AAE7D,MAAI,QAAQ,SAAS,MAAM,GAAG;AAC5B,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAMO,SAAS,eAAe,UAAkC;AAG/D,SAAO;AACT;AAgBA,eAAsB,aACpB,UACA,YACA,YACA,WACA,aACgC;AAChC,MAAI;AACF,UAAM,YAAY,aAAa,QAAQ;AACvC,UAAM,YAAY,aAAa,QAAQ;AAGvC,UAAM,WAAW,WAAW,IAAI;AAGhC,QAAI;AACJ,QAAI,MAAM,YAAY,SAAS,GAAG;AAChC,YAAM,SAAS,MAAM,cAA2B,SAAS;AACzD,UAAI,QAAQ;AACV,gBAAQ;AAAA,MACV,OAAO;AAEL,gBAAQ;AAAA,UACN;AAAA,UACA,UAAU,YAAY,QAAQ;AAAA,UAC9B,WAAW,KAAK,IAAI;AAAA,UACpB,UAAU,CAAC;AAAA,QACb;AAAA,MACF;AAAA,IACF,OAAO;AACL,cAAQ;AAAA,QACN;AAAA,QACA,UAAU,YAAY,QAAQ;AAAA,QAC9B,WAAW,KAAK,IAAI;AAAA,QACpB,UAAU,CAAC;AAAA,MACb;AAAA,IACF;AAGA,UAAM,kBAAkB,cAAc,WAAW,OAAO;AAGxD,UAAM,aACJ,MAAM,SAAS,SAAS,IACpB,KAAK,IAAI,GAAG,MAAM,SAAS,IAAI,OAAK,EAAE,OAAO,CAAC,IAC9C;AACN,UAAM,aAAa,aAAa;AAGhC,UAAM,WAA2B;AAAA,MAC/B,SAAS;AAAA,MACT,WAAW,KAAK,IAAI;AAAA,MACpB;AAAA,MACA,UAAU,kBAAkB,eAAe,eAAe,IAAI;AAAA,MAC9D,aAAa,kBAAkB,kBAAkB,eAAe,IAAI;AAAA,MACpE,MAAM,kBAAkB,OAAO,WAAW,iBAAiB,MAAM,IAAI;AAAA,MACrE;AAAA,IACF;AAGA,QAAI,oBAAoB,MAAM;AAC5B,YAAM,cAAc,eAAe,UAAU,UAAU;AACvD,YAAM,GAAG,UAAU,aAAa,iBAAiB;AAAA,QAC/C,UAAU,SAAS;AAAA,MACrB,CAAC;AAAA,IACH;AAGA,UAAM,SAAS,KAAK,QAAQ;AAG5B,QAAI,MAAM,SAAS,SAAS,uBAAuB;AACjD,YAAM,mBAAmB,UAAU,KAAK;AAAA,IAC1C;AAGA,UAAM,eAAe,WAAW,KAAK;AAErC,WAAO;AAAA,EACT,SAAS,OAAO;AAEd,YAAQ;AAAA,MACN,+CAA+C,QAAQ;AAAA,MACvD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AAMA,eAAe,mBACb,UACA,OACe;AAEf,QAAM,SAAS,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,OAAO;AAGnD,QAAM,WAAW,MAAM,SAAS,SAAS;AAEzC,MAAI,YAAY,EAAG;AAGnB,QAAM,mBAAmB,MAAM,SAAS,OAAO,GAAG,QAAQ;AAG1D,aAAW,WAAW,kBAAkB;AACtC,UAAM,cAAc,eAAe,UAAU,QAAQ,OAAO;AAC5D,UAAM,YAAY,WAAW;AAAA,EAC/B;AACF;AAOA,eAAsB,oBAAkD;AACtE,MAAI;AACF,UAAM,aAAa,cAAc;AAGjC,QAAI,CAAE,MAAM,YAAY,UAAU,GAAI;AACpC,aAAO,CAAC;AAAA,IACV;AAGA,UAAM,UAAU,MAAM,aAAa,UAAU;AAC7C,UAAM,YAAiC,CAAC;AAExC,eAAW,SAAS,SAAS;AAC3B,YAAM,YAAY,KAAK,YAAY,OAAO,UAAU;AAEpD,UAAI,MAAM,YAAY,SAAS,GAAG;AAChC,cAAM,QAAQ,MAAM,cAA2B,SAAS;AACxD,YAAI,SAAS,MAAM,SAAS,SAAS,GAAG;AAEtC,gBAAM,iBAAiB,CAAC,GAAG,MAAM,QAAQ,EAAE;AAAA,YACzC,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE;AAAA,UAC5B;AACA,gBAAM,aAAa,eAAe,CAAC;AAEnC,oBAAU,KAAK;AAAA,YACb,UAAU,MAAM;AAAA,YAChB,UAAU,MAAM;AAAA,YAChB,cAAc,MAAM,SAAS;AAAA,YAC7B,cAAc,WAAW;AAAA,YACzB,eAAe,WAAW;AAAA,UAC5B,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAGA,cAAU,KAAK,CAAC,GAAG,MAAM,EAAE,eAAe,EAAE,YAAY;AAExD,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ,MAAM,mDAAmD,KAAK;AACtE,WAAO,CAAC;AAAA,EACV;AACF;AAQA,eAAsB,kBACpB,UAC2B;AAC3B,MAAI;AACF,UAAM,YAAY,aAAa,QAAQ;AAEvC,QAAI,CAAE,MAAM,YAAY,SAAS,GAAI;AACnC,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,QAAQ,MAAM,cAA2B,SAAS;AACxD,QAAI,CAAC,OAAO;AACV,aAAO,CAAC;AAAA,IACV;AAGA,WAAO,CAAC,GAAG,MAAM,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,OAAO;AAAA,EACjE,SAAS,OAAO;AACd,YAAQ;AAAA,MACN,8CAA8C,QAAQ;AAAA,MACtD;AAAA,IACF;AACA,WAAO,CAAC;AAAA,EACV;AACF;AASA,eAAsB,iBACpB,UACA,SACwB;AACxB,MAAI;AACF,UAAM,YAAY,aAAa,QAAQ;AAGvC,QAAI,CAAE,MAAM,YAAY,SAAS,GAAI;AACnC,aAAO;AAAA,IACT;AAGA,UAAM,QAAQ,MAAM,cAA2B,SAAS;AACxD,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,IACT;AAGA,UAAM,cAAc,MAAM,SAAS,KAAK,OAAK,EAAE,YAAY,OAAO;AAClE,QAAI,CAAC,aAAa;AAChB,aAAO;AAAA,IACT;AAGA,QAAI,YAAY,cAAc,YAAY,YAAY,SAAS,GAAG;AAChE,aAAO;AAAA,IACT;AAGA,UAAM,cAAc,eAAe,UAAU,OAAO;AACpD,QAAI,CAAE,MAAM,YAAY,WAAW,GAAI;AACrC,aAAO;AAAA,IACT;AAEA,UAAM,UAAU,MAAM,GAAG,SAAS,aAAa;AAAA,MAC7C,UAAU,YAAY;AAAA,IACxB,CAAC;AAED,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ;AAAA,MACN,oDAAoD,QAAQ,KAAK,OAAO;AAAA,MACxE;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AASA,eAAsB,cACpB,UACA,SACkB;AAClB,MAAI;AAEF,UAAM,UAAU,MAAM,iBAAiB,UAAU,OAAO;AAGxD,UAAM,YAAY,aAAa,QAAQ;AACvC,UAAM,QAAQ,MAAM,cAA2B,SAAS;AACxD,QAAI,CAAC,OAAO;AACV,cAAQ,MAAM,6CAA6C,QAAQ,EAAE;AACrE,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,MAAM,SAAS,KAAK,OAAK,EAAE,YAAY,OAAO;AAClE,QAAI,CAAC,aAAa;AAChB,cAAQ;AAAA,QACN,2BAA2B,OAAO,kBAAkB,QAAQ;AAAA,MAC9D;AACA,aAAO;AAAA,IACT;AAGA,QAAI,YAAY,cAAc,YAAY,YAAY,MAAM;AAE1D,YAAM,GAAG,OAAO,QAAQ;AACxB,aAAO;AAAA,IACT;AAGA,QAAI,YAAY,MAAM;AACpB,cAAQ;AAAA,QACN,wCAAwC,QAAQ,KAAK,OAAO;AAAA,MAC9D;AACA,aAAO;AAAA,IACT;AAGA,QAAI,iBAAgC;AACpC,QAAI;AACF,uBAAiB,MAAM,GAAG,SAAS,UAAU,MAAM;AAAA,IACrD,QAAQ;AAAA,IAER;AAEA,QAAI,mBAAmB,MAAM;AAC3B,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,yBAAyB,OAAO;AAAA,MAClC;AAAA,IACF;AAGA,UAAM,YAAY,QAAQ,QAAQ;AAClC,UAAM,WAAW,WAAW,IAAI;AAGhC,UAAM,GAAG,UAAU,UAAU,SAAS;AAAA,MACpC,UAAU,YAAY;AAAA,IACxB,CAAC;AAED,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ;AAAA,MACN,qCAAqC,QAAQ,QAAQ,OAAO;AAAA,MAC5D;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AAMA,eAAsB,eACpB,UAC6B;AAC7B,QAAM,YAAY,aAAa,QAAQ;AACvC,SAAO,MAAM,cAA2B,SAAS;AACnD;AAMA,eAAsB,iBAAiB,UAAoC;AACzE,MAAI;AACF,UAAM,YAAY,aAAa,QAAQ;AAEvC,QAAI,CAAE,MAAM,YAAY,SAAS,GAAI;AACnC,aAAO;AAAA,IACT;AAGA,UAAM,UAAU,MAAM,aAAa,SAAS;AAC5C,eAAW,SAAS,SAAS;AAC3B,YAAM,YAAY,KAAK,WAAW,KAAK,CAAC;AAAA,IAC1C;AAGA,UAAM,GAAG,MAAM,SAAS;AAExB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ;AAAA,MACN,gDAAgD,QAAQ;AAAA,MACxD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AAKA,eAAsB,wBAInB;AACD,MAAI;AACF,UAAM,aAAa,cAAc;AAEjC,QAAI,CAAE,MAAM,YAAY,UAAU,GAAI;AACpC,aAAO,EAAE,YAAY,GAAG,WAAW,GAAG,cAAc,EAAE;AAAA,IACxD;AAEA,QAAI,aAAa;AACjB,QAAI,YAAY;AAChB,QAAI,eAAe;AAEnB,UAAM,UAAU,MAAM,aAAa,UAAU;AAE7C,eAAW,SAAS,SAAS;AAC3B,YAAM,YAAY,KAAK,YAAY,OAAO,UAAU;AACpD,YAAM,QAAQ,MAAM,cAA2B,SAAS;AAExD,UAAI,OAAO;AACT;AACA,wBAAgB,MAAM,SAAS;AAG/B,mBAAW,WAAW,MAAM,UAAU;AACpC,wBAAc,QAAQ;AAAA,QACxB;AAAA,MACF;AAAA,IACF;AAEA,WAAO,EAAE,YAAY,WAAW,aAAa;AAAA,EAC/C,SAAS,OAAO;AACd,YAAQ,MAAM,gDAAgD,KAAK;AACnE,WAAO,EAAE,YAAY,GAAG,WAAW,GAAG,cAAc,EAAE;AAAA,EACxD;AACF;",
+  "sourcesContent": ["/**\n * Backup Manager\n *\n * Provides automatic file backup functionality for Minto.\n * Stores file backups in ~/.minto/backups/ with path-hashed directory names.\n * Keeps up to 10 versions per file using LRU eviction.\n *\n * Features:\n * - Automatic backup creation before file operations\n * - Version history with metadata\n * - Easy restoration to any previous version\n * - Encoding and line ending detection\n * - LRU-based cleanup for old versions\n */\n\nimport { createHash } from 'crypto'\nimport { promises as fs } from 'fs'\nimport { join, dirname } from 'path'\nimport { homedir } from 'os'\nimport { CONFIG_BASE_DIR } from '@constants/product'\nimport {\n  existsAsync,\n  mkdirAsync,\n  readJsonAsync,\n  writeJsonAsync,\n  readdirAsync,\n  unlinkAsync,\n} from '../utils/asyncFile'\n\n// ============================================================================\n// Constants\n// ============================================================================\n\n/** Maximum number of versions to keep per file */\nexport const MAX_VERSIONS_PER_FILE = 10\n\n/**\n * Get the base directory for Minto data files\n * Computed dynamically to support test environment overrides\n */\nfunction getMintoBaseDir(): string {\n  return (\n    process.env.MINTO_CONFIG_DIR ??\n    process.env.CLAUDE_CONFIG_DIR ??\n    join(homedir(), CONFIG_BASE_DIR)\n  )\n}\n\n/**\n * Get the backups directory path\n * Uses a getter function to support dynamic environment configuration\n */\nexport function getBackupsDir(): string {\n  return join(getMintoBaseDir(), 'backups')\n}\n\n/** @deprecated Use getBackupsDir() instead - kept for backward compatibility */\nexport const BACKUPS_DIR = join(getMintoBaseDir(), 'backups')\n\n/** Index file name for each backup directory */\nconst INDEX_FILE = 'index.json'\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Operation types for backup metadata\n */\nexport type BackupOperation = 'create' | 'update' | 'delete'\n\n/**\n * Line ending types\n */\nexport type LineEnding = 'LF' | 'CRLF'\n\n/**\n * Metadata for a single backup version\n */\nexport interface BackupMetadata {\n  /** Version number (1-based, auto-incremented) */\n  version: number\n  /** Timestamp when backup was created (Unix ms) */\n  timestamp: number\n  /** Type of operation that triggered the backup */\n  operation: BackupOperation\n  /** File encoding */\n  encoding: BufferEncoding\n  /** Line ending style */\n  lineEndings: LineEnding\n  /** File size in bytes */\n  size: number\n  /** Optional description of the change */\n  description?: string\n}\n\n/**\n * File backup input for creating a new backup\n */\nexport interface FileBackup {\n  /** Absolute path to the file */\n  filePath: string\n  /** Previous content (null for new files) */\n  oldContent: string | null\n  /** New content (null for deleted files) */\n  newContent: string | null\n  /** Backup metadata */\n  metadata: BackupMetadata\n}\n\n/**\n * Index structure stored in each backup directory\n */\nexport interface BackupIndex {\n  /** Original absolute file path */\n  filePath: string\n  /** SHA256 hash of the path (first 12 chars) */\n  pathHash: string\n  /** When this file was first backed up */\n  createdAt: number\n  /** List of backup versions (sorted by version number) */\n  versions: BackupMetadata[]\n}\n\n/**\n * Summary of a backed-up file for listing\n */\nexport interface BackupFileSummary {\n  /** Original file path */\n  filePath: string\n  /** Path hash (directory name) */\n  pathHash: string\n  /** Number of backup versions */\n  versionCount: number\n  /** Timestamp of most recent backup */\n  lastBackupAt: number\n  /** Most recent operation */\n  lastOperation: BackupOperation\n}\n\n// ============================================================================\n// Utility Functions\n// ============================================================================\n\n/**\n * Generate a path hash for directory naming\n * Uses first 12 characters of SHA256 hash\n */\nexport function getPathHash(filePath: string): string {\n  const hash = createHash('sha256').update(filePath).digest('hex')\n  return hash.slice(0, 12)\n}\n\n/**\n * Get the backup directory for a file\n */\nfunction getBackupDir(filePath: string): string {\n  const pathHash = getPathHash(filePath)\n  return join(getBackupsDir(), pathHash)\n}\n\n/**\n * Get the path to the index file for a file's backups\n */\nfunction getIndexPath(filePath: string): string {\n  return join(getBackupDir(filePath), INDEX_FILE)\n}\n\n/**\n * Get the path to a specific backup version file\n */\nfunction getVersionPath(filePath: string, version: number): string {\n  return join(getBackupDir(filePath), `v${version}.backup`)\n}\n\n/**\n * Detect line endings in content\n */\nexport function detectLineEndings(content: string): LineEnding {\n  // Check for CRLF first (Windows)\n  if (content.includes('\\r\\n')) {\n    return 'CRLF'\n  }\n  return 'LF'\n}\n\n/**\n * Detect file encoding from content\n * Currently defaults to utf8, but can be extended for binary detection\n */\nexport function detectEncoding(_content: string): BufferEncoding {\n  // For now, we assume utf8 for text files\n  // Binary file detection would require buffer analysis\n  return 'utf8'\n}\n\n// ============================================================================\n// Core Functions\n// ============================================================================\n\n/**\n * Create a backup before file operations\n *\n * @param filePath - Absolute path to the file being modified\n * @param oldContent - Previous content (null for new files)\n * @param newContent - New content (null for deleted files)\n * @param operation - Type of operation (create, update, delete)\n * @param description - Optional description of the change\n * @returns The created backup metadata, or null if backup failed\n */\nexport async function createBackup(\n  filePath: string,\n  oldContent: string | null,\n  newContent: string | null,\n  operation: BackupOperation,\n  description?: string,\n): Promise<BackupMetadata | null> {\n  try {\n    const backupDir = getBackupDir(filePath)\n    const indexPath = getIndexPath(filePath)\n\n    // Ensure backup directory exists\n    await mkdirAsync(backupDir, true)\n\n    // Load or create index\n    let index: BackupIndex\n    if (await existsAsync(indexPath)) {\n      const loaded = await readJsonAsync<BackupIndex>(indexPath)\n      if (loaded) {\n        index = loaded\n      } else {\n        // Corrupted index, recreate\n        index = {\n          filePath,\n          pathHash: getPathHash(filePath),\n          createdAt: Date.now(),\n          versions: [],\n        }\n      }\n    } else {\n      index = {\n        filePath,\n        pathHash: getPathHash(filePath),\n        createdAt: Date.now(),\n        versions: [],\n      }\n    }\n\n    // Determine content to backup (old content for updates/deletes, null for creates)\n    const contentToBackup = operation === 'create' ? null : oldContent\n\n    // Calculate next version number\n    const maxVersion =\n      index.versions.length > 0\n        ? Math.max(...index.versions.map(v => v.version))\n        : 0\n    const newVersion = maxVersion + 1\n\n    // Create metadata\n    const metadata: BackupMetadata = {\n      version: newVersion,\n      timestamp: Date.now(),\n      operation,\n      encoding: contentToBackup ? detectEncoding(contentToBackup) : 'utf8',\n      lineEndings: contentToBackup ? detectLineEndings(contentToBackup) : 'LF',\n      size: contentToBackup ? Buffer.byteLength(contentToBackup, 'utf8') : 0,\n      description,\n    }\n\n    // Write backup content if there is content to backup\n    if (contentToBackup !== null) {\n      const versionPath = getVersionPath(filePath, newVersion)\n      await fs.writeFile(versionPath, contentToBackup, {\n        encoding: metadata.encoding,\n      })\n    }\n\n    // Add to versions\n    index.versions.push(metadata)\n\n    // Cleanup old versions if exceeding limit\n    if (index.versions.length > MAX_VERSIONS_PER_FILE) {\n      await cleanupOldVersions(filePath, index)\n    }\n\n    // Save updated index\n    await writeJsonAsync(indexPath, index)\n\n    return metadata\n  } catch (error) {\n    // Log error but don't throw - backup failure shouldn't block operations\n    console.error(\n      `[BackupManager] Failed to create backup for ${filePath}:`,\n      error,\n    )\n    return null\n  }\n}\n\n/**\n * Clean up old versions when exceeding MAX_VERSIONS_PER_FILE\n * Uses LRU strategy - removes oldest versions first\n */\nasync function cleanupOldVersions(\n  filePath: string,\n  index: BackupIndex,\n): Promise<void> {\n  // Sort by version number (oldest first)\n  index.versions.sort((a, b) => a.version - b.version)\n\n  // Calculate how many to remove\n  const toRemove = index.versions.length - MAX_VERSIONS_PER_FILE\n\n  if (toRemove <= 0) return\n\n  // Remove oldest versions\n  const versionsToDelete = index.versions.splice(0, toRemove)\n\n  // Delete the actual backup files\n  for (const version of versionsToDelete) {\n    const versionPath = getVersionPath(filePath, version.version)\n    await unlinkAsync(versionPath)\n  }\n}\n\n/**\n * List all files that have backups, sorted by most recent backup\n *\n * @returns Array of backup file summaries, sorted by most recent first\n */\nexport async function listBackedUpFiles(): Promise<BackupFileSummary[]> {\n  try {\n    const backupsDir = getBackupsDir()\n\n    // Check if backups directory exists\n    if (!(await existsAsync(backupsDir))) {\n      return []\n    }\n\n    // Read all subdirectories in backups\n    const entries = await readdirAsync(backupsDir)\n    const summaries: BackupFileSummary[] = []\n\n    for (const entry of entries) {\n      const indexPath = join(backupsDir, entry, INDEX_FILE)\n\n      if (await existsAsync(indexPath)) {\n        const index = await readJsonAsync<BackupIndex>(indexPath)\n        if (index && index.versions.length > 0) {\n          // Get the most recent version\n          const sortedVersions = [...index.versions].sort(\n            (a, b) => b.timestamp - a.timestamp || b.version - a.version,\n          )\n          const mostRecent = sortedVersions[0]\n\n          summaries.push({\n            filePath: index.filePath,\n            pathHash: index.pathHash,\n            versionCount: index.versions.length,\n            lastBackupAt: mostRecent.timestamp,\n            lastOperation: mostRecent.operation,\n          })\n        }\n      }\n    }\n\n    // Sort by most recent backup first\n    summaries.sort((a, b) => b.lastBackupAt - a.lastBackupAt)\n\n    return summaries\n  } catch (error) {\n    console.error('[BackupManager] Failed to list backed up files:', error)\n    return []\n  }\n}\n\n/**\n * Get all backup versions for a specific file\n *\n * @param filePath - Absolute path to the file\n * @returns Array of backup metadata, sorted by version (newest first)\n */\nexport async function getBackupVersions(\n  filePath: string,\n): Promise<BackupMetadata[]> {\n  try {\n    const indexPath = getIndexPath(filePath)\n\n    if (!(await existsAsync(indexPath))) {\n      return []\n    }\n\n    const index = await readJsonAsync<BackupIndex>(indexPath)\n    if (!index) {\n      return []\n    }\n\n    // Return sorted by version (newest first)\n    return [...index.versions].sort((a, b) => b.version - a.version)\n  } catch (error) {\n    console.error(\n      `[BackupManager] Failed to get versions for ${filePath}:`,\n      error,\n    )\n    return []\n  }\n}\n\n/**\n * Get the content of a specific backup version\n *\n * @param filePath - Absolute path to the file\n * @param version - Version number to retrieve\n * @returns The backup content, or null if not found\n */\nexport async function getBackupContent(\n  filePath: string,\n  version: number,\n): Promise<string | null> {\n  try {\n    const indexPath = getIndexPath(filePath)\n\n    // Check if index exists\n    if (!(await existsAsync(indexPath))) {\n      return null\n    }\n\n    // Load index to verify version exists\n    const index = await readJsonAsync<BackupIndex>(indexPath)\n    if (!index) {\n      return null\n    }\n\n    // Find the version metadata\n    const versionMeta = index.versions.find(v => v.version === version)\n    if (!versionMeta) {\n      return null\n    }\n\n    // For 'create' operations, there's no previous content\n    if (versionMeta.operation === 'create' && versionMeta.size === 0) {\n      return null\n    }\n\n    // Read the backup file\n    const versionPath = getVersionPath(filePath, version)\n    if (!(await existsAsync(versionPath))) {\n      return null\n    }\n\n    const content = await fs.readFile(versionPath, {\n      encoding: versionMeta.encoding,\n    })\n\n    return content\n  } catch (error) {\n    console.error(\n      `[BackupManager] Failed to get backup content for ${filePath} v${version}:`,\n      error,\n    )\n    return null\n  }\n}\n\n/**\n * Restore a file to a specific backup version\n *\n * @param filePath - Absolute path to the file\n * @param version - Version number to restore to\n * @returns True if restoration was successful, false otherwise\n */\nexport async function restoreBackup(\n  filePath: string,\n  version: number,\n): Promise<boolean> {\n  try {\n    // Get the backup content\n    const content = await getBackupContent(filePath, version)\n\n    // Handle the case where content is null (could be a 'create' backup with no previous content)\n    const indexPath = getIndexPath(filePath)\n    const index = await readJsonAsync<BackupIndex>(indexPath)\n    if (!index) {\n      console.error(`[BackupManager] No backup index found for ${filePath}`)\n      return false\n    }\n\n    const versionMeta = index.versions.find(v => v.version === version)\n    if (!versionMeta) {\n      console.error(\n        `[BackupManager] Version ${version} not found for ${filePath}`,\n      )\n      return false\n    }\n\n    // If this was a 'create' operation, restoring means deleting the file\n    if (versionMeta.operation === 'create' && content === null) {\n      // The file didn't exist before creation, so \"restoring\" means deleting it\n      await fs.unlink(filePath)\n      return true\n    }\n\n    // For other cases, we need content\n    if (content === null) {\n      console.error(\n        `[BackupManager] No content found for ${filePath} v${version}`,\n      )\n      return false\n    }\n\n    // Create a backup of current state before restoring\n    let currentContent: string | null = null\n    try {\n      currentContent = await fs.readFile(filePath, 'utf8')\n    } catch {\n      // File might not exist, that's okay\n    }\n\n    if (currentContent !== null) {\n      await createBackup(\n        filePath,\n        currentContent,\n        content,\n        'update',\n        `Restored from version ${version}`,\n      )\n    }\n\n    // Ensure parent directory exists\n    const parentDir = dirname(filePath)\n    await mkdirAsync(parentDir, true)\n\n    // Write the restored content\n    await fs.writeFile(filePath, content, {\n      encoding: versionMeta.encoding,\n    })\n\n    return true\n  } catch (error) {\n    console.error(\n      `[BackupManager] Failed to restore ${filePath} to v${version}:`,\n      error,\n    )\n    return false\n  }\n}\n\n/**\n * Get the backup index for a file\n * Useful for debugging and advanced operations\n */\nexport async function getBackupIndex(\n  filePath: string,\n): Promise<BackupIndex | null> {\n  const indexPath = getIndexPath(filePath)\n  return await readJsonAsync<BackupIndex>(indexPath)\n}\n\n/**\n * Delete all backups for a specific file\n * Use with caution - this is permanent\n */\nexport async function deleteAllBackups(filePath: string): Promise<boolean> {\n  try {\n    const backupDir = getBackupDir(filePath)\n\n    if (!(await existsAsync(backupDir))) {\n      return true // Nothing to delete\n    }\n\n    // Delete all files in the backup directory\n    const entries = await readdirAsync(backupDir)\n    for (const entry of entries) {\n      await unlinkAsync(join(backupDir, entry))\n    }\n\n    // Remove the directory itself\n    await fs.rmdir(backupDir)\n\n    return true\n  } catch (error) {\n    console.error(\n      `[BackupManager] Failed to delete backups for ${filePath}:`,\n      error,\n    )\n    return false\n  }\n}\n\n/**\n * Get total backup storage usage in bytes\n */\nexport async function getBackupStorageUsage(): Promise<{\n  totalBytes: number\n  fileCount: number\n  versionCount: number\n}> {\n  try {\n    const backupsDir = getBackupsDir()\n\n    if (!(await existsAsync(backupsDir))) {\n      return { totalBytes: 0, fileCount: 0, versionCount: 0 }\n    }\n\n    let totalBytes = 0\n    let fileCount = 0\n    let versionCount = 0\n\n    const entries = await readdirAsync(backupsDir)\n\n    for (const entry of entries) {\n      const indexPath = join(backupsDir, entry, INDEX_FILE)\n      const index = await readJsonAsync<BackupIndex>(indexPath)\n\n      if (index) {\n        fileCount++\n        versionCount += index.versions.length\n\n        // Sum up the sizes from metadata\n        for (const version of index.versions) {\n          totalBytes += version.size\n        }\n      }\n    }\n\n    return { totalBytes, fileCount, versionCount }\n  } catch (error) {\n    console.error('[BackupManager] Failed to get storage usage:', error)\n    return { totalBytes: 0, fileCount: 0, versionCount: 0 }\n  }\n}\n"],
+  "mappings": "AAeA,SAAS,kBAAkB;AAC3B,SAAS,YAAY,UAAU;AAC/B,SAAS,MAAM,eAAe;AAC9B,SAAS,eAAe;AACxB,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAOA,MAAM,wBAAwB;AAMrC,SAAS,kBAA0B;AACjC,SACE,QAAQ,IAAI,oBACZ,QAAQ,IAAI,qBACZ,KAAK,QAAQ,GAAG,eAAe;AAEnC;AAMO,SAAS,gBAAwB;AACtC,SAAO,KAAK,gBAAgB,GAAG,SAAS;AAC1C;AAGO,MAAM,cAAc,KAAK,gBAAgB,GAAG,SAAS;AAG5D,MAAM,aAAa;AAwFZ,SAAS,YAAY,UAA0B;AACpD,QAAM,OAAO,WAAW,QAAQ,EAAE,OAAO,QAAQ,EAAE,OAAO,KAAK;AAC/D,SAAO,KAAK,MAAM,GAAG,EAAE;AACzB;AAKA,SAAS,aAAa,UAA0B;AAC9C,QAAM,WAAW,YAAY,QAAQ;AACrC,SAAO,KAAK,cAAc,GAAG,QAAQ;AACvC;AAKA,SAAS,aAAa,UAA0B;AAC9C,SAAO,KAAK,aAAa,QAAQ,GAAG,UAAU;AAChD;AAKA,SAAS,eAAe,UAAkB,SAAyB;AACjE,SAAO,KAAK,aAAa,QAAQ,GAAG,IAAI,OAAO,SAAS;AAC1D;AAKO,SAAS,kBAAkB,SAA6B;AAE7D,MAAI,QAAQ,SAAS,MAAM,GAAG;AAC5B,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAMO,SAAS,eAAe,UAAkC;AAG/D,SAAO;AACT;AAgBA,eAAsB,aACpB,UACA,YACA,YACA,WACA,aACgC;AAChC,MAAI;AACF,UAAM,YAAY,aAAa,QAAQ;AACvC,UAAM,YAAY,aAAa,QAAQ;AAGvC,UAAM,WAAW,WAAW,IAAI;AAGhC,QAAI;AACJ,QAAI,MAAM,YAAY,SAAS,GAAG;AAChC,YAAM,SAAS,MAAM,cAA2B,SAAS;AACzD,UAAI,QAAQ;AACV,gBAAQ;AAAA,MACV,OAAO;AAEL,gBAAQ;AAAA,UACN;AAAA,UACA,UAAU,YAAY,QAAQ;AAAA,UAC9B,WAAW,KAAK,IAAI;AAAA,UACpB,UAAU,CAAC;AAAA,QACb;AAAA,MACF;AAAA,IACF,OAAO;AACL,cAAQ;AAAA,QACN;AAAA,QACA,UAAU,YAAY,QAAQ;AAAA,QAC9B,WAAW,KAAK,IAAI;AAAA,QACpB,UAAU,CAAC;AAAA,MACb;AAAA,IACF;AAGA,UAAM,kBAAkB,cAAc,WAAW,OAAO;AAGxD,UAAM,aACJ,MAAM,SAAS,SAAS,IACpB,KAAK,IAAI,GAAG,MAAM,SAAS,IAAI,OAAK,EAAE,OAAO,CAAC,IAC9C;AACN,UAAM,aAAa,aAAa;AAGhC,UAAM,WAA2B;AAAA,MAC/B,SAAS;AAAA,MACT,WAAW,KAAK,IAAI;AAAA,MACpB;AAAA,MACA,UAAU,kBAAkB,eAAe,eAAe,IAAI;AAAA,MAC9D,aAAa,kBAAkB,kBAAkB,eAAe,IAAI;AAAA,MACpE,MAAM,kBAAkB,OAAO,WAAW,iBAAiB,MAAM,IAAI;AAAA,MACrE;AAAA,IACF;AAGA,QAAI,oBAAoB,MAAM;AAC5B,YAAM,cAAc,eAAe,UAAU,UAAU;AACvD,YAAM,GAAG,UAAU,aAAa,iBAAiB;AAAA,QAC/C,UAAU,SAAS;AAAA,MACrB,CAAC;AAAA,IACH;AAGA,UAAM,SAAS,KAAK,QAAQ;AAG5B,QAAI,MAAM,SAAS,SAAS,uBAAuB;AACjD,YAAM,mBAAmB,UAAU,KAAK;AAAA,IAC1C;AAGA,UAAM,eAAe,WAAW,KAAK;AAErC,WAAO;AAAA,EACT,SAAS,OAAO;AAEd,YAAQ;AAAA,MACN,+CAA+C,QAAQ;AAAA,MACvD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AAMA,eAAe,mBACb,UACA,OACe;AAEf,QAAM,SAAS,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,OAAO;AAGnD,QAAM,WAAW,MAAM,SAAS,SAAS;AAEzC,MAAI,YAAY,EAAG;AAGnB,QAAM,mBAAmB,MAAM,SAAS,OAAO,GAAG,QAAQ;AAG1D,aAAW,WAAW,kBAAkB;AACtC,UAAM,cAAc,eAAe,UAAU,QAAQ,OAAO;AAC5D,UAAM,YAAY,WAAW;AAAA,EAC/B;AACF;AAOA,eAAsB,oBAAkD;AACtE,MAAI;AACF,UAAM,aAAa,cAAc;AAGjC,QAAI,CAAE,MAAM,YAAY,UAAU,GAAI;AACpC,aAAO,CAAC;AAAA,IACV;AAGA,UAAM,UAAU,MAAM,aAAa,UAAU;AAC7C,UAAM,YAAiC,CAAC;AAExC,eAAW,SAAS,SAAS;AAC3B,YAAM,YAAY,KAAK,YAAY,OAAO,UAAU;AAEpD,UAAI,MAAM,YAAY,SAAS,GAAG;AAChC,cAAM,QAAQ,MAAM,cAA2B,SAAS;AACxD,YAAI,SAAS,MAAM,SAAS,SAAS,GAAG;AAEtC,gBAAM,iBAAiB,CAAC,GAAG,MAAM,QAAQ,EAAE;AAAA,YACzC,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE;AAAA,UACvD;AACA,gBAAM,aAAa,eAAe,CAAC;AAEnC,oBAAU,KAAK;AAAA,YACb,UAAU,MAAM;AAAA,YAChB,UAAU,MAAM;AAAA,YAChB,cAAc,MAAM,SAAS;AAAA,YAC7B,cAAc,WAAW;AAAA,YACzB,eAAe,WAAW;AAAA,UAC5B,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAGA,cAAU,KAAK,CAAC,GAAG,MAAM,EAAE,eAAe,EAAE,YAAY;AAExD,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ,MAAM,mDAAmD,KAAK;AACtE,WAAO,CAAC;AAAA,EACV;AACF;AAQA,eAAsB,kBACpB,UAC2B;AAC3B,MAAI;AACF,UAAM,YAAY,aAAa,QAAQ;AAEvC,QAAI,CAAE,MAAM,YAAY,SAAS,GAAI;AACnC,aAAO,CAAC;AAAA,IACV;AAEA,UAAM,QAAQ,MAAM,cAA2B,SAAS;AACxD,QAAI,CAAC,OAAO;AACV,aAAO,CAAC;AAAA,IACV;AAGA,WAAO,CAAC,GAAG,MAAM,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,OAAO;AAAA,EACjE,SAAS,OAAO;AACd,YAAQ;AAAA,MACN,8CAA8C,QAAQ;AAAA,MACtD;AAAA,IACF;AACA,WAAO,CAAC;AAAA,EACV;AACF;AASA,eAAsB,iBACpB,UACA,SACwB;AACxB,MAAI;AACF,UAAM,YAAY,aAAa,QAAQ;AAGvC,QAAI,CAAE,MAAM,YAAY,SAAS,GAAI;AACnC,aAAO;AAAA,IACT;AAGA,UAAM,QAAQ,MAAM,cAA2B,SAAS;AACxD,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,IACT;AAGA,UAAM,cAAc,MAAM,SAAS,KAAK,OAAK,EAAE,YAAY,OAAO;AAClE,QAAI,CAAC,aAAa;AAChB,aAAO;AAAA,IACT;AAGA,QAAI,YAAY,cAAc,YAAY,YAAY,SAAS,GAAG;AAChE,aAAO;AAAA,IACT;AAGA,UAAM,cAAc,eAAe,UAAU,OAAO;AACpD,QAAI,CAAE,MAAM,YAAY,WAAW,GAAI;AACrC,aAAO;AAAA,IACT;AAEA,UAAM,UAAU,MAAM,GAAG,SAAS,aAAa;AAAA,MAC7C,UAAU,YAAY;AAAA,IACxB,CAAC;AAED,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ;AAAA,MACN,oDAAoD,QAAQ,KAAK,OAAO;AAAA,MACxE;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AASA,eAAsB,cACpB,UACA,SACkB;AAClB,MAAI;AAEF,UAAM,UAAU,MAAM,iBAAiB,UAAU,OAAO;AAGxD,UAAM,YAAY,aAAa,QAAQ;AACvC,UAAM,QAAQ,MAAM,cAA2B,SAAS;AACxD,QAAI,CAAC,OAAO;AACV,cAAQ,MAAM,6CAA6C,QAAQ,EAAE;AACrE,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,MAAM,SAAS,KAAK,OAAK,EAAE,YAAY,OAAO;AAClE,QAAI,CAAC,aAAa;AAChB,cAAQ;AAAA,QACN,2BAA2B,OAAO,kBAAkB,QAAQ;AAAA,MAC9D;AACA,aAAO;AAAA,IACT;AAGA,QAAI,YAAY,cAAc,YAAY,YAAY,MAAM;AAE1D,YAAM,GAAG,OAAO,QAAQ;AACxB,aAAO;AAAA,IACT;AAGA,QAAI,YAAY,MAAM;AACpB,cAAQ;AAAA,QACN,wCAAwC,QAAQ,KAAK,OAAO;AAAA,MAC9D;AACA,aAAO;AAAA,IACT;AAGA,QAAI,iBAAgC;AACpC,QAAI;AACF,uBAAiB,MAAM,GAAG,SAAS,UAAU,MAAM;AAAA,IACrD,QAAQ;AAAA,IAER;AAEA,QAAI,mBAAmB,MAAM;AAC3B,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,yBAAyB,OAAO;AAAA,MAClC;AAAA,IACF;AAGA,UAAM,YAAY,QAAQ,QAAQ;AAClC,UAAM,WAAW,WAAW,IAAI;AAGhC,UAAM,GAAG,UAAU,UAAU,SAAS;AAAA,MACpC,UAAU,YAAY;AAAA,IACxB,CAAC;AAED,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ;AAAA,MACN,qCAAqC,QAAQ,QAAQ,OAAO;AAAA,MAC5D;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AAMA,eAAsB,eACpB,UAC6B;AAC7B,QAAM,YAAY,aAAa,QAAQ;AACvC,SAAO,MAAM,cAA2B,SAAS;AACnD;AAMA,eAAsB,iBAAiB,UAAoC;AACzE,MAAI;AACF,UAAM,YAAY,aAAa,QAAQ;AAEvC,QAAI,CAAE,MAAM,YAAY,SAAS,GAAI;AACnC,aAAO;AAAA,IACT;AAGA,UAAM,UAAU,MAAM,aAAa,SAAS;AAC5C,eAAW,SAAS,SAAS;AAC3B,YAAM,YAAY,KAAK,WAAW,KAAK,CAAC;AAAA,IAC1C;AAGA,UAAM,GAAG,MAAM,SAAS;AAExB,WAAO;AAAA,EACT,SAAS,OAAO;AACd,YAAQ;AAAA,MACN,gDAAgD,QAAQ;AAAA,MACxD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AAKA,eAAsB,wBAInB;AACD,MAAI;AACF,UAAM,aAAa,cAAc;AAEjC,QAAI,CAAE,MAAM,YAAY,UAAU,GAAI;AACpC,aAAO,EAAE,YAAY,GAAG,WAAW,GAAG,cAAc,EAAE;AAAA,IACxD;AAEA,QAAI,aAAa;AACjB,QAAI,YAAY;AAChB,QAAI,eAAe;AAEnB,UAAM,UAAU,MAAM,aAAa,UAAU;AAE7C,eAAW,SAAS,SAAS;AAC3B,YAAM,YAAY,KAAK,YAAY,OAAO,UAAU;AACpD,YAAM,QAAQ,MAAM,cAA2B,SAAS;AAExD,UAAI,OAAO;AACT;AACA,wBAAgB,MAAM,SAAS;AAG/B,mBAAW,WAAW,MAAM,UAAU;AACpC,wBAAc,QAAQ;AAAA,QACxB;AAAA,MACF;AAAA,IACF;AAEA,WAAO,EAAE,YAAY,WAAW,aAAa;AAAA,EAC/C,SAAS,OAAO;AACd,YAAQ,MAAM,gDAAgD,KAAK;AACnE,WAAO,EAAE,YAAY,GAAG,WAAW,GAAG,cAAc,EAAE;AAAA,EACxD;AACF;",
   "names": []
 }

package/dist/core/permissions/rules/planModeRule.js

@@ -14,7 +14,7 @@ const READ_ONLY_TOOLS = /* @__PURE__ */ new Set([
   "LSP",
   "WebSearch",
   "WebFetch",
-  "Task",
+  "Agent",
   // Can spawn read-only agents
   "TodoWrite",
   // Planning notes

package/dist/core/permissions/rules/planModeRule.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/core/permissions/rules/planModeRule.ts"],
-  "sourcesContent": ["/**\n * Plan Mode Permission Rule\n *\n * Restricts write operations when in plan mode.\n */\n\nimport type {\n  PermissionRule,\n  PermissionContext,\n  PermissionResult,\n} from '../engine/types'\n\n/**\n * Tools that modify state (not allowed in plan mode)\n */\nconst WRITE_TOOLS = new Set([\n  'Edit',\n  'Write',\n  'MultiEdit',\n  'NotebookEdit',\n  'Bash', // May write files\n])\n\n/**\n * Read-only tools (always allowed in plan mode)\n */\nconst READ_ONLY_TOOLS = new Set([\n  'Read',\n  'Glob',\n  'Grep',\n  'LS',\n  'LSP',\n  'WebSearch',\n  'WebFetch',\n  'Task', // Can spawn read-only agents\n  'TodoWrite', // Planning notes\n  'AskUserQuestion',\n  'EnterPlanMode',\n  'ExitPlanMode',\n])\n\n/**\n * Plan Mode Rule\n *\n * When in plan mode, only allow read-only operations.\n */\nexport const planModeRule: PermissionRule = {\n  name: 'plan-mode',\n  description: 'Restricts write operations in plan mode',\n  priority: 100, // High priority\n\n  check(context: PermissionContext): PermissionResult {\n    // Skip if not in plan mode\n    if (!context.planMode) {\n      return { allowed: true }\n    }\n\n    const toolName = context.tool.name\n\n    // Always allow read-only tools\n    if (READ_ONLY_TOOLS.has(toolName)) {\n      return { allowed: true }\n    }\n\n    // Block write tools in plan mode\n    if (WRITE_TOOLS.has(toolName)) {\n      return {\n        allowed: false,\n        reason: `Tool ${toolName} is not allowed in plan mode. Only read-only operations are permitted.`,\n        message:\n          'Cannot modify files while in plan mode. Use ExitPlanMode to implement changes.',\n      }\n    }\n\n    // Check if tool explicitly declares read-only\n    if (context.tool.isReadOnly && context.tool.isReadOnly()) {\n      return { allowed: true }\n    }\n\n    // Default: allow unknown tools but log warning\n    console.warn(`Unknown tool ${toolName} used in plan mode`)\n    return { allowed: true }\n  },\n}\n"],
+  "sourcesContent": ["/**\n * Plan Mode Permission Rule\n *\n * Restricts write operations when in plan mode.\n */\n\nimport type {\n  PermissionRule,\n  PermissionContext,\n  PermissionResult,\n} from '../engine/types'\n\n/**\n * Tools that modify state (not allowed in plan mode)\n */\nconst WRITE_TOOLS = new Set([\n  'Edit',\n  'Write',\n  'MultiEdit',\n  'NotebookEdit',\n  'Bash', // May write files\n])\n\n/**\n * Read-only tools (always allowed in plan mode)\n */\nconst READ_ONLY_TOOLS = new Set([\n  'Read',\n  'Glob',\n  'Grep',\n  'LS',\n  'LSP',\n  'WebSearch',\n  'WebFetch',\n  'Agent', // Can spawn read-only agents\n  'TodoWrite', // Planning notes\n  'AskUserQuestion',\n  'EnterPlanMode',\n  'ExitPlanMode',\n])\n\n/**\n * Plan Mode Rule\n *\n * When in plan mode, only allow read-only operations.\n */\nexport const planModeRule: PermissionRule = {\n  name: 'plan-mode',\n  description: 'Restricts write operations in plan mode',\n  priority: 100, // High priority\n\n  check(context: PermissionContext): PermissionResult {\n    // Skip if not in plan mode\n    if (!context.planMode) {\n      return { allowed: true }\n    }\n\n    const toolName = context.tool.name\n\n    // Always allow read-only tools\n    if (READ_ONLY_TOOLS.has(toolName)) {\n      return { allowed: true }\n    }\n\n    // Block write tools in plan mode\n    if (WRITE_TOOLS.has(toolName)) {\n      return {\n        allowed: false,\n        reason: `Tool ${toolName} is not allowed in plan mode. Only read-only operations are permitted.`,\n        message:\n          'Cannot modify files while in plan mode. Use ExitPlanMode to implement changes.',\n      }\n    }\n\n    // Check if tool explicitly declares read-only\n    if (context.tool.isReadOnly && context.tool.isReadOnly()) {\n      return { allowed: true }\n    }\n\n    // Default: allow unknown tools but log warning\n    console.warn(`Unknown tool ${toolName} used in plan mode`)\n    return { allowed: true }\n  },\n}\n"],
   "mappings": "AAeA,MAAM,cAAc,oBAAI,IAAI;AAAA,EAC1B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AACF,CAAC;AAKD,MAAM,kBAAkB,oBAAI,IAAI;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAOM,MAAM,eAA+B;AAAA,EAC1C,MAAM;AAAA,EACN,aAAa;AAAA,EACb,UAAU;AAAA;AAAA,EAEV,MAAM,SAA8C;AAElD,QAAI,CAAC,QAAQ,UAAU;AACrB,aAAO,EAAE,SAAS,KAAK;AAAA,IACzB;AAEA,UAAM,WAAW,QAAQ,KAAK;AAG9B,QAAI,gBAAgB,IAAI,QAAQ,GAAG;AACjC,aAAO,EAAE,SAAS,KAAK;AAAA,IACzB;AAGA,QAAI,YAAY,IAAI,QAAQ,GAAG;AAC7B,aAAO;AAAA,QACL,SAAS;AAAA,QACT,QAAQ,QAAQ,QAAQ;AAAA,QACxB,SACE;AAAA,MACJ;AAAA,IACF;AAGA,QAAI,QAAQ,KAAK,cAAc,QAAQ,KAAK,WAAW,GAAG;AACxD,aAAO,EAAE,SAAS,KAAK;AAAA,IACzB;AAGA,YAAQ,KAAK,gBAAgB,QAAQ,oBAAoB;AACzD,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AACF;",
   "names": []
 }

package/dist/core/permissions/rules/safeModeRule.js

@@ -1,7 +1,7 @@
 const RESTRICTED_TOOLS = /* @__PURE__ */ new Set([
   "Bash",
   // Can execute arbitrary commands
-  "KillShell"
+  "TaskStop"
   // Can kill processes
 ]);
 const DANGEROUS_COMMAND_PATTERNS = [

package/dist/core/permissions/rules/safeModeRule.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/core/permissions/rules/safeModeRule.ts"],
-  "sourcesContent": ["/**\n * Safe Mode Permission Rule\n *\n * Restricts dangerous operations when in safe mode.\n */\n\nimport type {\n  PermissionRule,\n  PermissionContext,\n  PermissionResult,\n} from '../engine/types'\n\n/**\n * Tools that are restricted in safe mode\n */\nconst RESTRICTED_TOOLS = new Set([\n  'Bash', // Can execute arbitrary commands\n  'KillShell', // Can kill processes\n])\n\n/**\n * Dangerous bash command patterns\n */\nconst DANGEROUS_COMMAND_PATTERNS = [\n  /rm\\s+-rf?\\s+\\//, // rm -rf /\n  /sudo\\s+/, // sudo commands\n  /mkfs/, // formatting\n  /dd\\s+if=/, // disk operations\n  /:\\s*\\(\\)\\s*\\{\\s*:\\|:\\s*&\\s*\\}/, // fork bomb\n  /shutdown|reboot|poweroff/i, // system control\n  /chmod\\s+777/, // overly permissive chmod\n  /curl.*\\|\\s*(bash|sh)/, // piped scripts\n  /wget.*\\|\\s*(bash|sh)/, // piped scripts\n]\n\n/**\n * Safe Mode Rule\n *\n * Restricts potentially dangerous operations.\n */\nexport const safeModeRule: PermissionRule = {\n  name: 'safe-mode',\n  description: 'Restricts dangerous operations in safe mode',\n  priority: 90, // High priority, but below plan mode\n\n  check(context: PermissionContext): PermissionResult {\n    // Skip if not in safe mode\n    if (!context.safeMode) {\n      return { allowed: true }\n    }\n\n    const toolName = context.tool.name\n\n    // Check bash commands specifically\n    if (toolName === 'Bash') {\n      const command = context.input.command as string | undefined\n      if (command) {\n        for (const pattern of DANGEROUS_COMMAND_PATTERNS) {\n          if (pattern.test(command)) {\n            return {\n              allowed: false,\n              reason: `Command matches dangerous pattern in safe mode`,\n              message: `This command is blocked in safe mode for security reasons.`,\n            }\n          }\n        }\n      }\n    }\n\n    // Restricted tools require explicit approval in safe mode\n    if (RESTRICTED_TOOLS.has(toolName)) {\n      return {\n        allowed: true, // Allow but mark for prompting\n        promptUser: true,\n        message: `Tool ${toolName} requires approval in safe mode`,\n      }\n    }\n\n    return { allowed: true }\n  },\n}\n"],
+  "sourcesContent": ["/**\n * Safe Mode Permission Rule\n *\n * Restricts dangerous operations when in safe mode.\n */\n\nimport type {\n  PermissionRule,\n  PermissionContext,\n  PermissionResult,\n} from '../engine/types'\n\n/**\n * Tools that are restricted in safe mode\n */\nconst RESTRICTED_TOOLS = new Set([\n  'Bash', // Can execute arbitrary commands\n  'TaskStop', // Can kill processes\n])\n\n/**\n * Dangerous bash command patterns\n */\nconst DANGEROUS_COMMAND_PATTERNS = [\n  /rm\\s+-rf?\\s+\\//, // rm -rf /\n  /sudo\\s+/, // sudo commands\n  /mkfs/, // formatting\n  /dd\\s+if=/, // disk operations\n  /:\\s*\\(\\)\\s*\\{\\s*:\\|:\\s*&\\s*\\}/, // fork bomb\n  /shutdown|reboot|poweroff/i, // system control\n  /chmod\\s+777/, // overly permissive chmod\n  /curl.*\\|\\s*(bash|sh)/, // piped scripts\n  /wget.*\\|\\s*(bash|sh)/, // piped scripts\n]\n\n/**\n * Safe Mode Rule\n *\n * Restricts potentially dangerous operations.\n */\nexport const safeModeRule: PermissionRule = {\n  name: 'safe-mode',\n  description: 'Restricts dangerous operations in safe mode',\n  priority: 90, // High priority, but below plan mode\n\n  check(context: PermissionContext): PermissionResult {\n    // Skip if not in safe mode\n    if (!context.safeMode) {\n      return { allowed: true }\n    }\n\n    const toolName = context.tool.name\n\n    // Check bash commands specifically\n    if (toolName === 'Bash') {\n      const command = context.input.command as string | undefined\n      if (command) {\n        for (const pattern of DANGEROUS_COMMAND_PATTERNS) {\n          if (pattern.test(command)) {\n            return {\n              allowed: false,\n              reason: `Command matches dangerous pattern in safe mode`,\n              message: `This command is blocked in safe mode for security reasons.`,\n            }\n          }\n        }\n      }\n    }\n\n    // Restricted tools require explicit approval in safe mode\n    if (RESTRICTED_TOOLS.has(toolName)) {\n      return {\n        allowed: true, // Allow but mark for prompting\n        promptUser: true,\n        message: `Tool ${toolName} requires approval in safe mode`,\n      }\n    }\n\n    return { allowed: true }\n  },\n}\n"],
   "mappings": "AAeA,MAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC/B;AAAA;AAAA,EACA;AAAA;AACF,CAAC;AAKD,MAAM,6BAA6B;AAAA,EACjC;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AACF;AAOO,MAAM,eAA+B;AAAA,EAC1C,MAAM;AAAA,EACN,aAAa;AAAA,EACb,UAAU;AAAA;AAAA,EAEV,MAAM,SAA8C;AAElD,QAAI,CAAC,QAAQ,UAAU;AACrB,aAAO,EAAE,SAAS,KAAK;AAAA,IACzB;AAEA,UAAM,WAAW,QAAQ,KAAK;AAG9B,QAAI,aAAa,QAAQ;AACvB,YAAM,UAAU,QAAQ,MAAM;AAC9B,UAAI,SAAS;AACX,mBAAW,WAAW,4BAA4B;AAChD,cAAI,QAAQ,KAAK,OAAO,GAAG;AACzB,mBAAO;AAAA,cACL,SAAS;AAAA,cACT,QAAQ;AAAA,cACR,SAAS;AAAA,YACX;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,QAAI,iBAAiB,IAAI,QAAQ,GAAG;AAClC,aAAO;AAAA,QACL,SAAS;AAAA;AAAA,QACT,YAAY;AAAA,QACZ,SAAS,QAAQ,QAAQ;AAAA,MAC3B;AAAA,IACF;AAEA,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AACF;",
   "names": []
 }