@within-7/minto 0.4.2 → 0.4.3

package/dist/core/operationTracker.js

@@ -1,212 +0,0 @@
-import { EventEmitter } from "events";
-class OperationTrackerImpl extends EventEmitter {
-  static instance = null;
-  /** All recorded operations in chronological order */
-  operations = [];
-  /** Counter for generating unique IDs */
-  idCounter = 0;
-  constructor() {
-    super();
-    this.setMaxListeners(50);
-  }
-  /**
-   * Get the singleton instance
-   */
-  static getInstance() {
-    if (!OperationTrackerImpl.instance) {
-      OperationTrackerImpl.instance = new OperationTrackerImpl();
-    }
-    return OperationTrackerImpl.instance;
-  }
-  /**
-   * Record a new operation
-   *
-   * @param input - Operation details to record
-   * @returns The recorded operation with generated id and timestamp
-   */
-  record(input) {
-    const record = {
-      id: `op-${++this.idCounter}-${Date.now()}`,
-      type: input.type,
-      description: input.description,
-      timestamp: Date.now(),
-      duration: input.duration,
-      details: input.details
-    };
-    this.operations.push(record);
-    this.emit("operation", record);
-    return record;
-  }
-  /**
-   * Get aggregated summary of all operations
-   */
-  getSummary() {
-    const filesRead = /* @__PURE__ */ new Set();
-    const filesModified = /* @__PURE__ */ new Map();
-    const filesCreated = /* @__PURE__ */ new Set();
-    const commandsRun = [];
-    let tasksCompleted = 0;
-    let totalDuration = 0;
-    let webSearches = 0;
-    for (const op of this.operations) {
-      if (op.duration) {
-        totalDuration += op.duration;
-      }
-      switch (op.type) {
-        case "file_read":
-          if (op.details?.filePath) {
-            filesRead.add(op.details.filePath);
-          }
-          break;
-        case "file_edit":
-          if (op.details?.filePath) {
-            const existing = filesModified.get(op.details.filePath);
-            if (existing) {
-              existing.added += op.details.linesAdded ?? 0;
-              existing.removed += op.details.linesRemoved ?? 0;
-            } else {
-              filesModified.set(op.details.filePath, {
-                path: op.details.filePath,
-                added: op.details.linesAdded ?? 0,
-                removed: op.details.linesRemoved ?? 0
-              });
-            }
-          }
-          break;
-        case "file_create":
-          if (op.details?.filePath) {
-            filesCreated.add(op.details.filePath);
-          }
-          break;
-        case "bash_command":
-          if (op.details?.command) {
-            commandsRun.push(op.details.command);
-          }
-          break;
-        case "web_search":
-          webSearches++;
-          break;
-        case "task":
-          tasksCompleted++;
-          break;
-      }
-    }
-    return {
-      filesRead: Array.from(filesRead),
-      filesModified: Array.from(filesModified.values()),
-      filesCreated: Array.from(filesCreated),
-      commandsRun,
-      tasksCompleted,
-      totalDuration,
-      webSearches
-    };
-  }
-  /**
-   * Get all recorded operations
-   */
-  getOperations() {
-    return [...this.operations];
-  }
-  /**
-   * Get operation count by type
-   */
-  getCountByType(type) {
-    return this.operations.filter((op) => op.type === type).length;
-  }
-  /**
-   * Get total operation count
-   */
-  getTotalCount() {
-    return this.operations.length;
-  }
-  /**
-   * Subscribe to operation events
-   *
-   * @param callback - Called when an operation is recorded
-   * @returns Unsubscribe function
-   */
-  onOperation(callback) {
-    this.on("operation", callback);
-    return () => this.off("operation", callback);
-  }
-  /**
-   * Clear all recorded operations
-   */
-  clear() {
-    this.operations = [];
-    this.idCounter = 0;
-    this.emit("clear");
-  }
-  /**
-   * Reset for testing (only available in test environment)
-   */
-  resetForTests() {
-    if (process.env.NODE_ENV !== "test") {
-      throw new Error("resetForTests can only be called in tests");
-    }
-    this.clear();
-  }
-}
-const operationTracker = OperationTrackerImpl.getInstance();
-function recordOperation(input) {
-  return operationTracker.record(input);
-}
-function getOperationSummary() {
-  return operationTracker.getSummary();
-}
-function recordFileRead(filePath, description) {
-  operationTracker.record({
-    type: "file_read",
-    description: description ?? `Read ${filePath}`,
-    details: { filePath }
-  });
-}
-function recordFileEdit(filePath, linesAdded, linesRemoved, description) {
-  operationTracker.record({
-    type: "file_edit",
-    description: description ?? `Edit ${filePath}`,
-    details: { filePath, linesAdded, linesRemoved }
-  });
-}
-function recordFileCreate(filePath, description) {
-  operationTracker.record({
-    type: "file_create",
-    description: description ?? `Create ${filePath}`,
-    details: { filePath }
-  });
-}
-function recordBashCommand(command, duration, description) {
-  operationTracker.record({
-    type: "bash_command",
-    description: description ?? `Run: ${command}`,
-    duration,
-    details: { command }
-  });
-}
-function recordWebSearch(searchQuery, description) {
-  operationTracker.record({
-    type: "web_search",
-    description: description ?? `Search: ${searchQuery}`,
-    details: { searchQuery }
-  });
-}
-function recordTaskComplete(description, toolCount, duration) {
-  operationTracker.record({
-    type: "task",
-    description,
-    duration,
-    details: { toolCount }
-  });
-}
-export {
-  getOperationSummary,
-  operationTracker,
-  recordBashCommand,
-  recordFileCreate,
-  recordFileEdit,
-  recordFileRead,
-  recordOperation,
-  recordTaskComplete,
-  recordWebSearch
-};
-//# sourceMappingURL=operationTracker.js.map

package/dist/core/operationTracker.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../src/core/operationTracker.ts"],
-  "sourcesContent": ["/**\n * Operation Tracker\n *\n * Tracks file operations, bash commands, and tasks executed during a session.\n * Provides aggregated summaries for user feedback on what changes were made.\n *\n * Architecture:\n * - Singleton pattern for global access\n * - Event-driven updates for real-time UI\n * - Categorized operation tracking (file_read, file_edit, file_create, bash_command, web_search, task)\n *\n * Usage:\n * ```typescript\n * import { operationTracker, recordOperation } from '@core/operationTracker'\n *\n * // Record a file read\n * recordOperation({\n *   type: 'file_read',\n *   description: 'Read configuration file',\n *   details: { filePath: '/path/to/config.json' }\n * })\n *\n * // Get summary of all operations\n * const summary = operationTracker.getSummary()\n *\n * // Subscribe to updates\n * const unsubscribe = operationTracker.onOperation((record) => {\n *   console.log('Operation recorded:', record)\n * })\n * ```\n */\n\nimport { EventEmitter } from 'events'\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Type of operation that can be tracked\n */\nexport type OperationType =\n  | 'file_read'\n  | 'file_edit'\n  | 'file_create'\n  | 'bash_command'\n  | 'web_search'\n  | 'task'\n\n/**\n * Details specific to each operation type\n */\nexport interface OperationDetails {\n  /** File path for file operations */\n  filePath?: string\n\n  /** Command string for bash operations */\n  command?: string\n\n  /** Lines added for file edits */\n  linesAdded?: number\n\n  /** Lines removed for file edits */\n  linesRemoved?: number\n\n  /** Number of tools used for task operations */\n  toolCount?: number\n\n  /** Search query for web search operations */\n  searchQuery?: string\n}\n\n/**\n * A single recorded operation\n */\nexport interface OperationRecord {\n  /** Unique identifier for the operation */\n  id: string\n\n  /** Type of operation */\n  type: OperationType\n\n  /** Human-readable description */\n  description: string\n\n  /** Unix timestamp when operation started */\n  timestamp: number\n\n  /** Duration in milliseconds (if completed) */\n  duration?: number\n\n  /** Additional details specific to operation type */\n  details?: OperationDetails\n}\n\n/**\n * Aggregated summary of all operations\n */\nexport interface OperationSummary {\n  /** List of files that were read */\n  filesRead: string[]\n\n  /** List of files that were modified with change stats */\n  filesModified: { path: string; added: number; removed: number }[]\n\n  /** List of files that were created */\n  filesCreated: string[]\n\n  /** List of bash commands that were run */\n  commandsRun: string[]\n\n  /** Number of tasks completed */\n  tasksCompleted: number\n\n  /** Total duration of all operations in milliseconds */\n  totalDuration: number\n\n  /** Number of web searches performed */\n  webSearches: number\n}\n\n/**\n * Input for recording an operation (id and timestamp auto-generated)\n */\nexport interface OperationInput {\n  type: OperationType\n  description: string\n  duration?: number\n  details?: OperationDetails\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\n/**\n * OperationTrackerImpl - Centralized operation tracking\n */\nclass OperationTrackerImpl extends EventEmitter {\n  private static instance: OperationTrackerImpl | null = null\n\n  /** All recorded operations in chronological order */\n  private operations: OperationRecord[] = []\n\n  /** Counter for generating unique IDs */\n  private idCounter = 0\n\n  private constructor() {\n    super()\n    this.setMaxListeners(50)\n  }\n\n  /**\n   * Get the singleton instance\n   */\n  static getInstance(): OperationTrackerImpl {\n    if (!OperationTrackerImpl.instance) {\n      OperationTrackerImpl.instance = new OperationTrackerImpl()\n    }\n    return OperationTrackerImpl.instance\n  }\n\n  /**\n   * Record a new operation\n   *\n   * @param input - Operation details to record\n   * @returns The recorded operation with generated id and timestamp\n   */\n  record(input: OperationInput): OperationRecord {\n    const record: OperationRecord = {\n      id: `op-${++this.idCounter}-${Date.now()}`,\n      type: input.type,\n      description: input.description,\n      timestamp: Date.now(),\n      duration: input.duration,\n      details: input.details,\n    }\n\n    this.operations.push(record)\n    this.emit('operation', record)\n\n    return record\n  }\n\n  /**\n   * Get aggregated summary of all operations\n   */\n  getSummary(): OperationSummary {\n    const filesRead = new Set<string>()\n    const filesModified = new Map<\n      string,\n      { path: string; added: number; removed: number }\n    >()\n    const filesCreated = new Set<string>()\n    const commandsRun: string[] = []\n    let tasksCompleted = 0\n    let totalDuration = 0\n    let webSearches = 0\n\n    for (const op of this.operations) {\n      // Accumulate duration\n      if (op.duration) {\n        totalDuration += op.duration\n      }\n\n      switch (op.type) {\n        case 'file_read':\n          if (op.details?.filePath) {\n            filesRead.add(op.details.filePath)\n          }\n          break\n\n        case 'file_edit':\n          if (op.details?.filePath) {\n            const existing = filesModified.get(op.details.filePath)\n            if (existing) {\n              // Accumulate changes to the same file\n              existing.added += op.details.linesAdded ?? 0\n              existing.removed += op.details.linesRemoved ?? 0\n            } else {\n              filesModified.set(op.details.filePath, {\n                path: op.details.filePath,\n                added: op.details.linesAdded ?? 0,\n                removed: op.details.linesRemoved ?? 0,\n              })\n            }\n          }\n          break\n\n        case 'file_create':\n          if (op.details?.filePath) {\n            filesCreated.add(op.details.filePath)\n          }\n          break\n\n        case 'bash_command':\n          if (op.details?.command) {\n            commandsRun.push(op.details.command)\n          }\n          break\n\n        case 'web_search':\n          webSearches++\n          break\n\n        case 'task':\n          tasksCompleted++\n          break\n      }\n    }\n\n    return {\n      filesRead: Array.from(filesRead),\n      filesModified: Array.from(filesModified.values()),\n      filesCreated: Array.from(filesCreated),\n      commandsRun,\n      tasksCompleted,\n      totalDuration,\n      webSearches,\n    }\n  }\n\n  /**\n   * Get all recorded operations\n   */\n  getOperations(): OperationRecord[] {\n    return [...this.operations]\n  }\n\n  /**\n   * Get operation count by type\n   */\n  getCountByType(type: OperationType): number {\n    return this.operations.filter(op => op.type === type).length\n  }\n\n  /**\n   * Get total operation count\n   */\n  getTotalCount(): number {\n    return this.operations.length\n  }\n\n  /**\n   * Subscribe to operation events\n   *\n   * @param callback - Called when an operation is recorded\n   * @returns Unsubscribe function\n   */\n  onOperation(callback: (record: OperationRecord) => void): () => void {\n    this.on('operation', callback)\n    return () => this.off('operation', callback)\n  }\n\n  /**\n   * Clear all recorded operations\n   */\n  clear(): void {\n    this.operations = []\n    this.idCounter = 0\n    this.emit('clear')\n  }\n\n  /**\n   * Reset for testing (only available in test environment)\n   */\n  resetForTests(): void {\n    if (process.env.NODE_ENV !== 'test') {\n      throw new Error('resetForTests can only be called in tests')\n    }\n    this.clear()\n  }\n}\n\n// ============================================================================\n// Exports\n// ============================================================================\n\n/** Singleton instance */\nexport const operationTracker = OperationTrackerImpl.getInstance()\n\n/**\n * Record an operation\n *\n * Convenience function for recording operations without accessing the singleton directly.\n */\nexport function recordOperation(input: OperationInput): OperationRecord {\n  return operationTracker.record(input)\n}\n\n/**\n * Get operation summary\n *\n * Convenience function for getting summary without accessing the singleton directly.\n */\nexport function getOperationSummary(): OperationSummary {\n  return operationTracker.getSummary()\n}\n\n/**\n * Record a file read operation\n */\nexport function recordFileRead(filePath: string, description?: string): void {\n  operationTracker.record({\n    type: 'file_read',\n    description: description ?? `Read ${filePath}`,\n    details: { filePath },\n  })\n}\n\n/**\n * Record a file edit operation\n */\nexport function recordFileEdit(\n  filePath: string,\n  linesAdded: number,\n  linesRemoved: number,\n  description?: string,\n): void {\n  operationTracker.record({\n    type: 'file_edit',\n    description: description ?? `Edit ${filePath}`,\n    details: { filePath, linesAdded, linesRemoved },\n  })\n}\n\n/**\n * Record a file create operation\n */\nexport function recordFileCreate(filePath: string, description?: string): void {\n  operationTracker.record({\n    type: 'file_create',\n    description: description ?? `Create ${filePath}`,\n    details: { filePath },\n  })\n}\n\n/**\n * Record a bash command execution\n */\nexport function recordBashCommand(\n  command: string,\n  duration?: number,\n  description?: string,\n): void {\n  operationTracker.record({\n    type: 'bash_command',\n    description: description ?? `Run: ${command}`,\n    duration,\n    details: { command },\n  })\n}\n\n/**\n * Record a web search operation\n */\nexport function recordWebSearch(\n  searchQuery: string,\n  description?: string,\n): void {\n  operationTracker.record({\n    type: 'web_search',\n    description: description ?? `Search: ${searchQuery}`,\n    details: { searchQuery },\n  })\n}\n\n/**\n * Record a task completion\n */\nexport function recordTaskComplete(\n  description: string,\n  toolCount?: number,\n  duration?: number,\n): void {\n  operationTracker.record({\n    type: 'task',\n    description,\n    duration,\n    details: { toolCount },\n  })\n}\n"],
-  "mappings": "AAgCA,SAAS,oBAAoB;AA0G7B,MAAM,6BAA6B,aAAa;AAAA,EAC9C,OAAe,WAAwC;AAAA;AAAA,EAG/C,aAAgC,CAAC;AAAA;AAAA,EAGjC,YAAY;AAAA,EAEZ,cAAc;AACpB,UAAM;AACN,SAAK,gBAAgB,EAAE;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,cAAoC;AACzC,QAAI,CAAC,qBAAqB,UAAU;AAClC,2BAAqB,WAAW,IAAI,qBAAqB;AAAA,IAC3D;AACA,WAAO,qBAAqB;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,OAAO,OAAwC;AAC7C,UAAM,SAA0B;AAAA,MAC9B,IAAI,MAAM,EAAE,KAAK,SAAS,IAAI,KAAK,IAAI,CAAC;AAAA,MACxC,MAAM,MAAM;AAAA,MACZ,aAAa,MAAM;AAAA,MACnB,WAAW,KAAK,IAAI;AAAA,MACpB,UAAU,MAAM;AAAA,MAChB,SAAS,MAAM;AAAA,IACjB;AAEA,SAAK,WAAW,KAAK,MAAM;AAC3B,SAAK,KAAK,aAAa,MAAM;AAE7B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,aAA+B;AAC7B,UAAM,YAAY,oBAAI,IAAY;AAClC,UAAM,gBAAgB,oBAAI,IAGxB;AACF,UAAM,eAAe,oBAAI,IAAY;AACrC,UAAM,cAAwB,CAAC;AAC/B,QAAI,iBAAiB;AACrB,QAAI,gBAAgB;AACpB,QAAI,cAAc;AAElB,eAAW,MAAM,KAAK,YAAY;AAEhC,UAAI,GAAG,UAAU;AACf,yBAAiB,GAAG;AAAA,MACtB;AAEA,cAAQ,GAAG,MAAM;AAAA,QACf,KAAK;AACH,cAAI,GAAG,SAAS,UAAU;AACxB,sBAAU,IAAI,GAAG,QAAQ,QAAQ;AAAA,UACnC;AACA;AAAA,QAEF,KAAK;AACH,cAAI,GAAG,SAAS,UAAU;AACxB,kBAAM,WAAW,cAAc,IAAI,GAAG,QAAQ,QAAQ;AACtD,gBAAI,UAAU;AAEZ,uBAAS,SAAS,GAAG,QAAQ,cAAc;AAC3C,uBAAS,WAAW,GAAG,QAAQ,gBAAgB;AAAA,YACjD,OAAO;AACL,4BAAc,IAAI,GAAG,QAAQ,UAAU;AAAA,gBACrC,MAAM,GAAG,QAAQ;AAAA,gBACjB,OAAO,GAAG,QAAQ,cAAc;AAAA,gBAChC,SAAS,GAAG,QAAQ,gBAAgB;AAAA,cACtC,CAAC;AAAA,YACH;AAAA,UACF;AACA;AAAA,QAEF,KAAK;AACH,cAAI,GAAG,SAAS,UAAU;AACxB,yBAAa,IAAI,GAAG,QAAQ,QAAQ;AAAA,UACtC;AACA;AAAA,QAEF,KAAK;AACH,cAAI,GAAG,SAAS,SAAS;AACvB,wBAAY,KAAK,GAAG,QAAQ,OAAO;AAAA,UACrC;AACA;AAAA,QAEF,KAAK;AACH;AACA;AAAA,QAEF,KAAK;AACH;AACA;AAAA,MACJ;AAAA,IACF;AAEA,WAAO;AAAA,MACL,WAAW,MAAM,KAAK,SAAS;AAAA,MAC/B,eAAe,MAAM,KAAK,cAAc,OAAO,CAAC;AAAA,MAChD,cAAc,MAAM,KAAK,YAAY;AAAA,MACrC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,gBAAmC;AACjC,WAAO,CAAC,GAAG,KAAK,UAAU;AAAA,EAC5B;AAAA;AAAA;AAAA;AAAA,EAKA,eAAe,MAA6B;AAC1C,WAAO,KAAK,WAAW,OAAO,QAAM,GAAG,SAAS,IAAI,EAAE;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA,EAKA,gBAAwB;AACtB,WAAO,KAAK,WAAW;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,YAAY,UAAyD;AACnE,SAAK,GAAG,aAAa,QAAQ;AAC7B,WAAO,MAAM,KAAK,IAAI,aAAa,QAAQ;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA,EAKA,QAAc;AACZ,SAAK,aAAa,CAAC;AACnB,SAAK,YAAY;AACjB,SAAK,KAAK,OAAO;AAAA,EACnB;AAAA;AAAA;AAAA;AAAA,EAKA,gBAAsB;AACpB,QAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,YAAM,IAAI,MAAM,2CAA2C;AAAA,IAC7D;AACA,SAAK,MAAM;AAAA,EACb;AACF;AAOO,MAAM,mBAAmB,qBAAqB,YAAY;AAO1D,SAAS,gBAAgB,OAAwC;AACtE,SAAO,iBAAiB,OAAO,KAAK;AACtC;AAOO,SAAS,sBAAwC;AACtD,SAAO,iBAAiB,WAAW;AACrC;AAKO,SAAS,eAAe,UAAkB,aAA4B;AAC3E,mBAAiB,OAAO;AAAA,IACtB,MAAM;AAAA,IACN,aAAa,eAAe,QAAQ,QAAQ;AAAA,IAC5C,SAAS,EAAE,SAAS;AAAA,EACtB,CAAC;AACH;AAKO,SAAS,eACd,UACA,YACA,cACA,aACM;AACN,mBAAiB,OAAO;AAAA,IACtB,MAAM;AAAA,IACN,aAAa,eAAe,QAAQ,QAAQ;AAAA,IAC5C,SAAS,EAAE,UAAU,YAAY,aAAa;AAAA,EAChD,CAAC;AACH;AAKO,SAAS,iBAAiB,UAAkB,aAA4B;AAC7E,mBAAiB,OAAO;AAAA,IACtB,MAAM;AAAA,IACN,aAAa,eAAe,UAAU,QAAQ;AAAA,IAC9C,SAAS,EAAE,SAAS;AAAA,EACtB,CAAC;AACH;AAKO,SAAS,kBACd,SACA,UACA,aACM;AACN,mBAAiB,OAAO;AAAA,IACtB,MAAM;AAAA,IACN,aAAa,eAAe,QAAQ,OAAO;AAAA,IAC3C;AAAA,IACA,SAAS,EAAE,QAAQ;AAAA,EACrB,CAAC;AACH;AAKO,SAAS,gBACd,aACA,aACM;AACN,mBAAiB,OAAO;AAAA,IACtB,MAAM;AAAA,IACN,aAAa,eAAe,WAAW,WAAW;AAAA,IAClD,SAAS,EAAE,YAAY;AAAA,EACzB,CAAC;AACH;AAKO,SAAS,mBACd,aACA,WACA,UACM;AACN,mBAAiB,OAAO;AAAA,IACtB,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,SAAS,EAAE,UAAU;AAAA,EACvB,CAAC;AACH;",
-  "names": []
-}

package/dist/core/permissions/auditLog.js

@@ -1,204 +0,0 @@
-import { appendFileSync, existsSync, mkdirSync, readFileSync } from "fs";
-import { join } from "path";
-import { homedir } from "os";
-import { getOriginalCwd } from "../../utils/state.js";
-let sessionLog = [];
-let sessionId = generateSessionId();
-function generateSessionId() {
-  return `session_${Date.now()}_${Math.random().toString(36).substring(2, 8)}`;
-}
-function generateEntryId() {
-  return `audit_${Date.now()}_${Math.random().toString(36).substring(2, 6)}`;
-}
-function getAuditLogDir() {
-  return join(homedir(), ".minto", "audit");
-}
-function getAuditLogFilePath() {
-  const dir = getAuditLogDir();
-  const date = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
-  return join(dir, `audit-${date}.jsonl`);
-}
-function ensureAuditLogDir() {
-  const dir = getAuditLogDir();
-  if (!existsSync(dir)) {
-    mkdirSync(dir, { recursive: true });
-  }
-}
-function persistEntry(entry) {
-  try {
-    ensureAuditLogDir();
-    const filePath = getAuditLogFilePath();
-    const line = JSON.stringify(entry) + "\n";
-    appendFileSync(filePath, line, "utf-8");
-  } catch (error) {
-    console.error("[Audit] Failed to persist log entry:", error);
-  }
-}
-function logSecurityEvent(params) {
-  const entry = {
-    id: generateEntryId(),
-    timestamp: Date.now(),
-    eventType: params.eventType,
-    toolName: params.toolName,
-    operation: params.operation,
-    target: params.target,
-    outcome: params.outcome,
-    riskLevel: params.riskLevel,
-    context: params.context,
-    projectDir: getOriginalCwd(),
-    userDecision: params.userDecision,
-    triggeredRule: params.triggeredRule,
-    sessionId
-  };
-  sessionLog.push(entry);
-  persistEntry(entry);
-  return entry;
-}
-function logPermissionGranted(toolName, operation, target, userDecision = "approved", context) {
-  return logSecurityEvent({
-    eventType: "permission_granted",
-    toolName,
-    operation,
-    target,
-    outcome: "allowed",
-    userDecision,
-    context
-  });
-}
-function logPermissionDenied(toolName, operation, target, triggeredRule, context) {
-  return logSecurityEvent({
-    eventType: "permission_denied",
-    toolName,
-    operation,
-    target,
-    outcome: "denied",
-    userDecision: "rejected",
-    triggeredRule,
-    context
-  });
-}
-function logOperationBlocked(toolName, operation, target, triggeredRule, riskLevel, context) {
-  return logSecurityEvent({
-    eventType: "permission_blocked",
-    toolName,
-    operation,
-    target,
-    outcome: "blocked",
-    riskLevel,
-    triggeredRule,
-    context
-  });
-}
-function logSensitivePathAccess(toolName, operation, target, category, outcome, userDecision) {
-  return logSecurityEvent({
-    eventType: "sensitive_path_access",
-    toolName,
-    operation,
-    target,
-    outcome,
-    riskLevel: "high",
-    userDecision,
-    context: { category }
-  });
-}
-function logExternalOperation(toolName, operation, target, riskLevel, outcome, userDecision) {
-  return logSecurityEvent({
-    eventType: "external_operation",
-    toolName,
-    operation,
-    target,
-    outcome,
-    riskLevel,
-    userDecision
-  });
-}
-function logDangerousCommand(command, outcome, pattern, userDecision) {
-  return logSecurityEvent({
-    eventType: "dangerous_command",
-    toolName: "Bash",
-    operation: "execute",
-    target: command,
-    outcome,
-    riskLevel: "high",
-    userDecision,
-    context: pattern ? { matchedPattern: pattern } : void 0
-  });
-}
-function getSessionLog() {
-  return [...sessionLog];
-}
-function getEntriesByType(eventType) {
-  return sessionLog.filter((entry) => entry.eventType === eventType);
-}
-function getEntriesByOutcome(outcome) {
-  return sessionLog.filter((entry) => entry.outcome === outcome);
-}
-function getSessionSecuritySummary() {
-  return {
-    totalEvents: sessionLog.length,
-    allowed: sessionLog.filter((e) => e.outcome === "allowed").length,
-    denied: sessionLog.filter((e) => e.outcome === "denied").length,
-    blocked: sessionLog.filter((e) => e.outcome === "blocked").length,
-    sensitiveAccesses: sessionLog.filter(
-      (e) => e.eventType === "sensitive_path_access"
-    ).length,
-    externalOperations: sessionLog.filter(
-      (e) => e.eventType === "external_operation"
-    ).length,
-    dangerousCommands: sessionLog.filter(
-      (e) => e.eventType === "dangerous_command"
-    ).length,
-    highRiskEvents: sessionLog.filter(
-      (e) => e.riskLevel === "high" || e.riskLevel === "critical"
-    ).length
-  };
-}
-function clearSessionLog() {
-  sessionLog = [];
-}
-function resetSession() {
-  sessionId = generateSessionId();
-  sessionLog = [];
-}
-function readAuditLog(date) {
-  const targetDate = date || (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
-  const filePath = join(getAuditLogDir(), `audit-${targetDate}.jsonl`);
-  if (!existsSync(filePath)) {
-    return [];
-  }
-  try {
-    const content = readFileSync(filePath, "utf-8");
-    return content.split("\n").filter((line) => line.trim()).map((line) => JSON.parse(line));
-  } catch (error) {
-    console.error("[Audit] Failed to read audit log:", error);
-    return [];
-  }
-}
-function getRecentSecurityEvents(count = 10) {
-  return sessionLog.slice(-count);
-}
-function formatAuditEntry(entry) {
-  const timestamp = new Date(entry.timestamp).toISOString();
-  const icon = entry.outcome === "allowed" ? "\u2705" : entry.outcome === "denied" ? "\u274C" : "\u{1F6AB}";
-  const risk = entry.riskLevel ? ` [${entry.riskLevel.toUpperCase()}]` : "";
-  return `${icon} [${timestamp}]${risk} ${entry.eventType}: ${entry.toolName} ${entry.operation} \u2192 ${entry.target}`;
-}
-export {
-  clearSessionLog,
-  formatAuditEntry,
-  getEntriesByOutcome,
-  getEntriesByType,
-  getRecentSecurityEvents,
-  getSessionLog,
-  getSessionSecuritySummary,
-  logDangerousCommand,
-  logExternalOperation,
-  logOperationBlocked,
-  logPermissionDenied,
-  logPermissionGranted,
-  logSecurityEvent,
-  logSensitivePathAccess,
-  readAuditLog,
-  resetSession
-};
-//# sourceMappingURL=auditLog.js.map

package/dist/core/permissions/auditLog.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../src/core/permissions/auditLog.ts"],
-  "sourcesContent": ["/**\n * Security Audit Log\n *\n * Records all security-sensitive operations for accountability and debugging.\n * Logs are stored both in memory (for current session) and optionally on disk.\n */\n\nimport { appendFileSync, existsSync, mkdirSync, readFileSync } from 'fs'\nimport { join } from 'path'\nimport { homedir } from 'os'\nimport { getOriginalCwd } from '@utils/state'\n\n/**\n * Audit log entry type\n */\nexport type AuditEventType =\n  | 'permission_granted' // User granted permission\n  | 'permission_denied' // Permission was denied (user or rule)\n  | 'permission_blocked' // Operation was blocked by security rule\n  | 'sensitive_path_access' // Access to sensitive path\n  | 'external_operation' // Operation outside project directory\n  | 'dangerous_command' // Dangerous command execution\n  | 'security_warning' // Security warning issued\n\n/**\n * Audit log entry\n */\nexport interface AuditLogEntry {\n  /** Unique entry ID */\n  id: string\n  /** Timestamp */\n  timestamp: number\n  /** Event type */\n  eventType: AuditEventType\n  /** Tool name */\n  toolName: string\n  /** Operation details */\n  operation: string\n  /** Target path or command */\n  target: string\n  /** Outcome: allowed, denied, blocked */\n  outcome: 'allowed' | 'denied' | 'blocked'\n  /** Risk level if applicable */\n  riskLevel?: 'low' | 'medium' | 'high' | 'critical'\n  /** Additional context */\n  context?: Record<string, unknown>\n  /** Project directory */\n  projectDir: string\n  /** User decision (if applicable) */\n  userDecision?: 'approved' | 'rejected' | 'auto'\n  /** Rule that triggered (if applicable) */\n  triggeredRule?: string\n  /** Session ID */\n  sessionId: string\n}\n\n/**\n * In-memory audit log for current session\n */\nlet sessionLog: AuditLogEntry[] = []\nlet sessionId: string = generateSessionId()\n\n/**\n * Generate a unique session ID\n */\nfunction generateSessionId(): string {\n  return `session_${Date.now()}_${Math.random().toString(36).substring(2, 8)}`\n}\n\n/**\n * Generate a unique entry ID\n */\nfunction generateEntryId(): string {\n  return `audit_${Date.now()}_${Math.random().toString(36).substring(2, 6)}`\n}\n\n/**\n * Get the audit log directory\n */\nfunction getAuditLogDir(): string {\n  return join(homedir(), '.minto', 'audit')\n}\n\n/**\n * Get the current day's audit log file path\n */\nfunction getAuditLogFilePath(): string {\n  const dir = getAuditLogDir()\n  const date = new Date().toISOString().split('T')[0] // YYYY-MM-DD\n  return join(dir, `audit-${date}.jsonl`)\n}\n\n/**\n * Ensure audit log directory exists\n */\nfunction ensureAuditLogDir(): void {\n  const dir = getAuditLogDir()\n  if (!existsSync(dir)) {\n    mkdirSync(dir, { recursive: true })\n  }\n}\n\n/**\n * Write entry to disk\n */\nfunction persistEntry(entry: AuditLogEntry): void {\n  try {\n    ensureAuditLogDir()\n    const filePath = getAuditLogFilePath()\n    const line = JSON.stringify(entry) + '\\n'\n    appendFileSync(filePath, line, 'utf-8')\n  } catch (error) {\n    // Silently fail - audit logging should not break the application\n    console.error('[Audit] Failed to persist log entry:', error)\n  }\n}\n\n/**\n * Log a security event\n */\nexport function logSecurityEvent(params: {\n  eventType: AuditEventType\n  toolName: string\n  operation: string\n  target: string\n  outcome: 'allowed' | 'denied' | 'blocked'\n  riskLevel?: 'low' | 'medium' | 'high' | 'critical'\n  context?: Record<string, unknown>\n  userDecision?: 'approved' | 'rejected' | 'auto'\n  triggeredRule?: string\n}): AuditLogEntry {\n  const entry: AuditLogEntry = {\n    id: generateEntryId(),\n    timestamp: Date.now(),\n    eventType: params.eventType,\n    toolName: params.toolName,\n    operation: params.operation,\n    target: params.target,\n    outcome: params.outcome,\n    riskLevel: params.riskLevel,\n    context: params.context,\n    projectDir: getOriginalCwd(),\n    userDecision: params.userDecision,\n    triggeredRule: params.triggeredRule,\n    sessionId,\n  }\n\n  // Add to in-memory log\n  sessionLog.push(entry)\n\n  // Persist to disk\n  persistEntry(entry)\n\n  return entry\n}\n\n/**\n * Log permission granted event\n */\nexport function logPermissionGranted(\n  toolName: string,\n  operation: string,\n  target: string,\n  userDecision: 'approved' | 'auto' = 'approved',\n  context?: Record<string, unknown>,\n): AuditLogEntry {\n  return logSecurityEvent({\n    eventType: 'permission_granted',\n    toolName,\n    operation,\n    target,\n    outcome: 'allowed',\n    userDecision,\n    context,\n  })\n}\n\n/**\n * Log permission denied event\n */\nexport function logPermissionDenied(\n  toolName: string,\n  operation: string,\n  target: string,\n  triggeredRule?: string,\n  context?: Record<string, unknown>,\n): AuditLogEntry {\n  return logSecurityEvent({\n    eventType: 'permission_denied',\n    toolName,\n    operation,\n    target,\n    outcome: 'denied',\n    userDecision: 'rejected',\n    triggeredRule,\n    context,\n  })\n}\n\n/**\n * Log operation blocked by security rule\n */\nexport function logOperationBlocked(\n  toolName: string,\n  operation: string,\n  target: string,\n  triggeredRule: string,\n  riskLevel: 'low' | 'medium' | 'high' | 'critical',\n  context?: Record<string, unknown>,\n): AuditLogEntry {\n  return logSecurityEvent({\n    eventType: 'permission_blocked',\n    toolName,\n    operation,\n    target,\n    outcome: 'blocked',\n    riskLevel,\n    triggeredRule,\n    context,\n  })\n}\n\n/**\n * Log sensitive path access\n */\nexport function logSensitivePathAccess(\n  toolName: string,\n  operation: string,\n  target: string,\n  category: string,\n  outcome: 'allowed' | 'denied' | 'blocked',\n  userDecision?: 'approved' | 'rejected',\n): AuditLogEntry {\n  return logSecurityEvent({\n    eventType: 'sensitive_path_access',\n    toolName,\n    operation,\n    target,\n    outcome,\n    riskLevel: 'high',\n    userDecision,\n    context: { category },\n  })\n}\n\n/**\n * Log external operation (outside project directory)\n */\nexport function logExternalOperation(\n  toolName: string,\n  operation: string,\n  target: string,\n  riskLevel: 'low' | 'medium' | 'high' | 'critical',\n  outcome: 'allowed' | 'denied' | 'blocked',\n  userDecision?: 'approved' | 'rejected',\n): AuditLogEntry {\n  return logSecurityEvent({\n    eventType: 'external_operation',\n    toolName,\n    operation,\n    target,\n    outcome,\n    riskLevel,\n    userDecision,\n  })\n}\n\n/**\n * Log dangerous command execution\n */\nexport function logDangerousCommand(\n  command: string,\n  outcome: 'allowed' | 'denied' | 'blocked',\n  pattern?: string,\n  userDecision?: 'approved' | 'rejected',\n): AuditLogEntry {\n  return logSecurityEvent({\n    eventType: 'dangerous_command',\n    toolName: 'Bash',\n    operation: 'execute',\n    target: command,\n    outcome,\n    riskLevel: 'high',\n    userDecision,\n    context: pattern ? { matchedPattern: pattern } : undefined,\n  })\n}\n\n/**\n * Get all entries from current session\n */\nexport function getSessionLog(): AuditLogEntry[] {\n  return [...sessionLog]\n}\n\n/**\n * Get entries filtered by event type\n */\nexport function getEntriesByType(eventType: AuditEventType): AuditLogEntry[] {\n  return sessionLog.filter(entry => entry.eventType === eventType)\n}\n\n/**\n * Get entries filtered by outcome\n */\nexport function getEntriesByOutcome(\n  outcome: 'allowed' | 'denied' | 'blocked',\n): AuditLogEntry[] {\n  return sessionLog.filter(entry => entry.outcome === outcome)\n}\n\n/**\n * Get security summary for current session\n */\nexport function getSessionSecuritySummary(): {\n  totalEvents: number\n  allowed: number\n  denied: number\n  blocked: number\n  sensitiveAccesses: number\n  externalOperations: number\n  dangerousCommands: number\n  highRiskEvents: number\n} {\n  return {\n    totalEvents: sessionLog.length,\n    allowed: sessionLog.filter(e => e.outcome === 'allowed').length,\n    denied: sessionLog.filter(e => e.outcome === 'denied').length,\n    blocked: sessionLog.filter(e => e.outcome === 'blocked').length,\n    sensitiveAccesses: sessionLog.filter(\n      e => e.eventType === 'sensitive_path_access',\n    ).length,\n    externalOperations: sessionLog.filter(\n      e => e.eventType === 'external_operation',\n    ).length,\n    dangerousCommands: sessionLog.filter(\n      e => e.eventType === 'dangerous_command',\n    ).length,\n    highRiskEvents: sessionLog.filter(\n      e => e.riskLevel === 'high' || e.riskLevel === 'critical',\n    ).length,\n  }\n}\n\n/**\n * Clear session log (for testing)\n */\nexport function clearSessionLog(): void {\n  sessionLog = []\n}\n\n/**\n * Reset session (generates new session ID)\n */\nexport function resetSession(): void {\n  sessionId = generateSessionId()\n  sessionLog = []\n}\n\n/**\n * Read audit log entries from disk for a specific date\n */\nexport function readAuditLog(date?: string): AuditLogEntry[] {\n  const targetDate = date || new Date().toISOString().split('T')[0]\n  const filePath = join(getAuditLogDir(), `audit-${targetDate}.jsonl`)\n\n  if (!existsSync(filePath)) {\n    return []\n  }\n\n  try {\n    const content = readFileSync(filePath, 'utf-8')\n    return content\n      .split('\\n')\n      .filter(line => line.trim())\n      .map(line => JSON.parse(line) as AuditLogEntry)\n  } catch (error) {\n    console.error('[Audit] Failed to read audit log:', error)\n    return []\n  }\n}\n\n/**\n * Get recent security events (last N entries)\n */\nexport function getRecentSecurityEvents(count: number = 10): AuditLogEntry[] {\n  return sessionLog.slice(-count)\n}\n\n/**\n * Format audit entry for display\n */\nexport function formatAuditEntry(entry: AuditLogEntry): string {\n  const timestamp = new Date(entry.timestamp).toISOString()\n  const icon =\n    entry.outcome === 'allowed'\n      ? '\u2705'\n      : entry.outcome === 'denied'\n        ? '\u274C'\n        : '\uD83D\uDEAB'\n  const risk = entry.riskLevel ? ` [${entry.riskLevel.toUpperCase()}]` : ''\n\n  return `${icon} [${timestamp}]${risk} ${entry.eventType}: ${entry.toolName} ${entry.operation} \u2192 ${entry.target}`\n}\n"],
-  "mappings": "AAOA,SAAS,gBAAgB,YAAY,WAAW,oBAAoB;AACpE,SAAS,YAAY;AACrB,SAAS,eAAe;AACxB,SAAS,sBAAsB;AAiD/B,IAAI,aAA8B,CAAC;AACnC,IAAI,YAAoB,kBAAkB;AAK1C,SAAS,oBAA4B;AACnC,SAAO,WAAW,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,CAAC,CAAC;AAC5E;AAKA,SAAS,kBAA0B;AACjC,SAAO,SAAS,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,CAAC,CAAC;AAC1E;AAKA,SAAS,iBAAyB;AAChC,SAAO,KAAK,QAAQ,GAAG,UAAU,OAAO;AAC1C;AAKA,SAAS,sBAA8B;AACrC,QAAM,MAAM,eAAe;AAC3B,QAAM,QAAO,oBAAI,KAAK,GAAE,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAClD,SAAO,KAAK,KAAK,SAAS,IAAI,QAAQ;AACxC;AAKA,SAAS,oBAA0B;AACjC,QAAM,MAAM,eAAe;AAC3B,MAAI,CAAC,WAAW,GAAG,GAAG;AACpB,cAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AAAA,EACpC;AACF;AAKA,SAAS,aAAa,OAA4B;AAChD,MAAI;AACF,sBAAkB;AAClB,UAAM,WAAW,oBAAoB;AACrC,UAAM,OAAO,KAAK,UAAU,KAAK,IAAI;AACrC,mBAAe,UAAU,MAAM,OAAO;AAAA,EACxC,SAAS,OAAO;AAEd,YAAQ,MAAM,wCAAwC,KAAK;AAAA,EAC7D;AACF;AAKO,SAAS,iBAAiB,QAUf;AAChB,QAAM,QAAuB;AAAA,IAC3B,IAAI,gBAAgB;AAAA,IACpB,WAAW,KAAK,IAAI;AAAA,IACpB,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,WAAW,OAAO;AAAA,IAClB,QAAQ,OAAO;AAAA,IACf,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,SAAS,OAAO;AAAA,IAChB,YAAY,eAAe;AAAA,IAC3B,cAAc,OAAO;AAAA,IACrB,eAAe,OAAO;AAAA,IACtB;AAAA,EACF;AAGA,aAAW,KAAK,KAAK;AAGrB,eAAa,KAAK;AAElB,SAAO;AACT;AAKO,SAAS,qBACd,UACA,WACA,QACA,eAAoC,YACpC,SACe;AACf,SAAO,iBAAiB;AAAA,IACtB,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAKO,SAAS,oBACd,UACA,WACA,QACA,eACA,SACe;AACf,SAAO,iBAAiB;AAAA,IACtB,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT,cAAc;AAAA,IACd;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAKO,SAAS,oBACd,UACA,WACA,QACA,eACA,WACA,SACe;AACf,SAAO,iBAAiB;AAAA,IACtB,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAKO,SAAS,uBACd,UACA,WACA,QACA,UACA,SACA,cACe;AACf,SAAO,iBAAiB;AAAA,IACtB,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA,SAAS,EAAE,SAAS;AAAA,EACtB,CAAC;AACH;AAKO,SAAS,qBACd,UACA,WACA,QACA,WACA,SACA,cACe;AACf,SAAO,iBAAiB;AAAA,IACtB,WAAW;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAKO,SAAS,oBACd,SACA,SACA,SACA,cACe;AACf,SAAO,iBAAiB;AAAA,IACtB,WAAW;AAAA,IACX,UAAU;AAAA,IACV,WAAW;AAAA,IACX,QAAQ;AAAA,IACR;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA,SAAS,UAAU,EAAE,gBAAgB,QAAQ,IAAI;AAAA,EACnD,CAAC;AACH;AAKO,SAAS,gBAAiC;AAC/C,SAAO,CAAC,GAAG,UAAU;AACvB;AAKO,SAAS,iBAAiB,WAA4C;AAC3E,SAAO,WAAW,OAAO,WAAS,MAAM,cAAc,SAAS;AACjE;AAKO,SAAS,oBACd,SACiB;AACjB,SAAO,WAAW,OAAO,WAAS,MAAM,YAAY,OAAO;AAC7D;AAKO,SAAS,4BASd;AACA,SAAO;AAAA,IACL,aAAa,WAAW;AAAA,IACxB,SAAS,WAAW,OAAO,OAAK,EAAE,YAAY,SAAS,EAAE;AAAA,IACzD,QAAQ,WAAW,OAAO,OAAK,EAAE,YAAY,QAAQ,EAAE;AAAA,IACvD,SAAS,WAAW,OAAO,OAAK,EAAE,YAAY,SAAS,EAAE;AAAA,IACzD,mBAAmB,WAAW;AAAA,MAC5B,OAAK,EAAE,cAAc;AAAA,IACvB,EAAE;AAAA,IACF,oBAAoB,WAAW;AAAA,MAC7B,OAAK,EAAE,cAAc;AAAA,IACvB,EAAE;AAAA,IACF,mBAAmB,WAAW;AAAA,MAC5B,OAAK,EAAE,cAAc;AAAA,IACvB,EAAE;AAAA,IACF,gBAAgB,WAAW;AAAA,MACzB,OAAK,EAAE,cAAc,UAAU,EAAE,cAAc;AAAA,IACjD,EAAE;AAAA,EACJ;AACF;AAKO,SAAS,kBAAwB;AACtC,eAAa,CAAC;AAChB;AAKO,SAAS,eAAqB;AACnC,cAAY,kBAAkB;AAC9B,eAAa,CAAC;AAChB;AAKO,SAAS,aAAa,MAAgC;AAC3D,QAAM,aAAa,SAAQ,oBAAI,KAAK,GAAE,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC;AAChE,QAAM,WAAW,KAAK,eAAe,GAAG,SAAS,UAAU,QAAQ;AAEnE,MAAI,CAAC,WAAW,QAAQ,GAAG;AACzB,WAAO,CAAC;AAAA,EACV;AAEA,MAAI;AACF,UAAM,UAAU,aAAa,UAAU,OAAO;AAC9C,WAAO,QACJ,MAAM,IAAI,EACV,OAAO,UAAQ,KAAK,KAAK,CAAC,EAC1B,IAAI,UAAQ,KAAK,MAAM,IAAI,CAAkB;AAAA,EAClD,SAAS,OAAO;AACd,YAAQ,MAAM,qCAAqC,KAAK;AACxD,WAAO,CAAC;AAAA,EACV;AACF;AAKO,SAAS,wBAAwB,QAAgB,IAAqB;AAC3E,SAAO,WAAW,MAAM,CAAC,KAAK;AAChC;AAKO,SAAS,iBAAiB,OAA8B;AAC7D,QAAM,YAAY,IAAI,KAAK,MAAM,SAAS,EAAE,YAAY;AACxD,QAAM,OACJ,MAAM,YAAY,YACd,WACA,MAAM,YAAY,WAChB,WACA;AACR,QAAM,OAAO,MAAM,YAAY,KAAK,MAAM,UAAU,YAAY,CAAC,MAAM;AAEvE,SAAO,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,MAAM,SAAS,KAAK,MAAM,QAAQ,IAAI,MAAM,SAAS,WAAM,MAAM,MAAM;AACjH;",
-  "names": []
-}

package/dist/core/permissions/engine/index.js

@@ -1,3 +0,0 @@
-export * from "./types.js";
-export * from "./permissionEngine.js";
-//# sourceMappingURL=index.js.map

package/dist/core/permissions/engine/index.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/core/permissions/engine/index.ts"],
-  "sourcesContent": ["/**\n * Permission Engine Index\n */\n\nexport * from './types'\nexport * from './permissionEngine'\n"],
-  "mappings": "AAIA,cAAc;AACd,cAAc;",
-  "names": []
-}

package/dist/core/permissions/engine/permissionEngine.js

@@ -1,106 +0,0 @@
-class PermissionEngine {
-  rules = [];
-  rulesByName = /* @__PURE__ */ new Map();
-  /**
-   * Register a permission rule
-   */
-  registerRule(rule) {
-    this.unregisterRule(rule.name);
-    this.rules.push(rule);
-    this.rulesByName.set(rule.name, rule);
-    this.rules.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0));
-  }
-  /**
-   * Register multiple rules at once
-   */
-  registerRules(rules) {
-    for (const rule of rules) {
-      this.registerRule(rule);
-    }
-  }
-  /**
-   * Unregister a rule by name
-   */
-  unregisterRule(name) {
-    const index = this.rules.findIndex((r) => r.name === name);
-    if (index !== -1) {
-      this.rules.splice(index, 1);
-      this.rulesByName.delete(name);
-      return true;
-    }
-    return false;
-  }
-  /**
-   * Get a rule by name
-   */
-  getRule(name) {
-    return this.rulesByName.get(name);
-  }
-  /**
-   * Get all registered rules
-   */
-  getRules() {
-    return [...this.rules];
-  }
-  /**
-   * Check permission for a tool operation
-   *
-   * Rules are evaluated in priority order. The first rule that
-   * returns a non-allowed result stops evaluation.
-   */
-  async checkPermission(context) {
-    const toolName = context.tool.name;
-    for (const rule of this.rules) {
-      if (rule.appliesTo && rule.appliesTo.length > 0) {
-        if (!rule.appliesTo.includes(toolName)) {
-          continue;
-        }
-      }
-      try {
-        const result = await Promise.resolve(rule.check(context));
-        if (!result.allowed) {
-          return {
-            ...result,
-            reason: result.reason || `Denied by rule: ${rule.name}`
-          };
-        }
-      } catch (error) {
-        console.warn(`Permission rule ${rule.name} threw error:`, error);
-      }
-    }
-    return { allowed: true };
-  }
-  /**
-   * Check if a specific rule would allow the operation
-   */
-  async checkRuleOnly(ruleName, context) {
-    const rule = this.rulesByName.get(ruleName);
-    if (!rule) {
-      return null;
-    }
-    return Promise.resolve(rule.check(context));
-  }
-  /**
-   * Clear all rules
-   */
-  clearRules() {
-    this.rules = [];
-    this.rulesByName.clear();
-  }
-}
-let globalEngine = null;
-function getPermissionEngine() {
-  if (!globalEngine) {
-    globalEngine = new PermissionEngine();
-  }
-  return globalEngine;
-}
-function resetPermissionEngine() {
-  globalEngine = null;
-}
-export {
-  PermissionEngine,
-  getPermissionEngine,
-  resetPermissionEngine
-};
-//# sourceMappingURL=permissionEngine.js.map

package/dist/core/permissions/engine/permissionEngine.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../../src/core/permissions/engine/permissionEngine.ts"],
-  "sourcesContent": ["/**\n * Permission Engine\n *\n * Extensible rule-based permission system for tool access control.\n */\n\nimport type {\n  PermissionContext,\n  PermissionResult,\n  PermissionRule,\n} from './types'\n\n/**\n * Permission Engine\n *\n * Manages permission rules and evaluates tool access requests.\n */\nexport class PermissionEngine {\n  private rules: PermissionRule[] = []\n  private rulesByName: Map<string, PermissionRule> = new Map()\n\n  /**\n   * Register a permission rule\n   */\n  registerRule(rule: PermissionRule): void {\n    // Remove existing rule with same name\n    this.unregisterRule(rule.name)\n\n    this.rules.push(rule)\n    this.rulesByName.set(rule.name, rule)\n\n    // Sort by priority (descending)\n    this.rules.sort((a, b) => (b.priority ?? 0) - (a.priority ?? 0))\n  }\n\n  /**\n   * Register multiple rules at once\n   */\n  registerRules(rules: PermissionRule[]): void {\n    for (const rule of rules) {\n      this.registerRule(rule)\n    }\n  }\n\n  /**\n   * Unregister a rule by name\n   */\n  unregisterRule(name: string): boolean {\n    const index = this.rules.findIndex(r => r.name === name)\n    if (index !== -1) {\n      this.rules.splice(index, 1)\n      this.rulesByName.delete(name)\n      return true\n    }\n    return false\n  }\n\n  /**\n   * Get a rule by name\n   */\n  getRule(name: string): PermissionRule | undefined {\n    return this.rulesByName.get(name)\n  }\n\n  /**\n   * Get all registered rules\n   */\n  getRules(): PermissionRule[] {\n    return [...this.rules]\n  }\n\n  /**\n   * Check permission for a tool operation\n   *\n   * Rules are evaluated in priority order. The first rule that\n   * returns a non-allowed result stops evaluation.\n   */\n  async checkPermission(context: PermissionContext): Promise<PermissionResult> {\n    const toolName = context.tool.name\n\n    for (const rule of this.rules) {\n      // Skip rules that don't apply to this tool\n      if (rule.appliesTo && rule.appliesTo.length > 0) {\n        if (!rule.appliesTo.includes(toolName)) {\n          continue\n        }\n      }\n\n      try {\n        const result = await Promise.resolve(rule.check(context))\n\n        // If not allowed, return immediately\n        if (!result.allowed) {\n          return {\n            ...result,\n            reason: result.reason || `Denied by rule: ${rule.name}`,\n          }\n        }\n      } catch (error) {\n        // Log error but continue to next rule\n        console.warn(`Permission rule ${rule.name} threw error:`, error)\n      }\n    }\n\n    // All rules passed\n    return { allowed: true }\n  }\n\n  /**\n   * Check if a specific rule would allow the operation\n   */\n  async checkRuleOnly(\n    ruleName: string,\n    context: PermissionContext,\n  ): Promise<PermissionResult | null> {\n    const rule = this.rulesByName.get(ruleName)\n    if (!rule) {\n      return null\n    }\n\n    return Promise.resolve(rule.check(context))\n  }\n\n  /**\n   * Clear all rules\n   */\n  clearRules(): void {\n    this.rules = []\n    this.rulesByName.clear()\n  }\n}\n\n// Global singleton instance\nlet globalEngine: PermissionEngine | null = null\n\n/**\n * Get the global permission engine instance\n */\nexport function getPermissionEngine(): PermissionEngine {\n  if (!globalEngine) {\n    globalEngine = new PermissionEngine()\n  }\n  return globalEngine\n}\n\n/**\n * Reset the global permission engine (for testing)\n */\nexport function resetPermissionEngine(): void {\n  globalEngine = null\n}\n"],
-  "mappings": "AAiBO,MAAM,iBAAiB;AAAA,EACpB,QAA0B,CAAC;AAAA,EAC3B,cAA2C,oBAAI,IAAI;AAAA;AAAA;AAAA;AAAA,EAK3D,aAAa,MAA4B;AAEvC,SAAK,eAAe,KAAK,IAAI;AAE7B,SAAK,MAAM,KAAK,IAAI;AACpB,SAAK,YAAY,IAAI,KAAK,MAAM,IAAI;AAGpC,SAAK,MAAM,KAAK,CAAC,GAAG,OAAO,EAAE,YAAY,MAAM,EAAE,YAAY,EAAE;AAAA,EACjE;AAAA;AAAA;AAAA;AAAA,EAKA,cAAc,OAA+B;AAC3C,eAAW,QAAQ,OAAO;AACxB,WAAK,aAAa,IAAI;AAAA,IACxB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,eAAe,MAAuB;AACpC,UAAM,QAAQ,KAAK,MAAM,UAAU,OAAK,EAAE,SAAS,IAAI;AACvD,QAAI,UAAU,IAAI;AAChB,WAAK,MAAM,OAAO,OAAO,CAAC;AAC1B,WAAK,YAAY,OAAO,IAAI;AAC5B,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,QAAQ,MAA0C;AAChD,WAAO,KAAK,YAAY,IAAI,IAAI;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA,EAKA,WAA6B;AAC3B,WAAO,CAAC,GAAG,KAAK,KAAK;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,gBAAgB,SAAuD;AAC3E,UAAM,WAAW,QAAQ,KAAK;AAE9B,eAAW,QAAQ,KAAK,OAAO;AAE7B,UAAI,KAAK,aAAa,KAAK,UAAU,SAAS,GAAG;AAC/C,YAAI,CAAC,KAAK,UAAU,SAAS,QAAQ,GAAG;AACtC;AAAA,QACF;AAAA,MACF;AAEA,UAAI;AACF,cAAM,SAAS,MAAM,QAAQ,QAAQ,KAAK,MAAM,OAAO,CAAC;AAGxD,YAAI,CAAC,OAAO,SAAS;AACnB,iBAAO;AAAA,YACL,GAAG;AAAA,YACH,QAAQ,OAAO,UAAU,mBAAmB,KAAK,IAAI;AAAA,UACvD;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AAEd,gBAAQ,KAAK,mBAAmB,KAAK,IAAI,iBAAiB,KAAK;AAAA,MACjE;AAAA,IACF;AAGA,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,cACJ,UACA,SACkC;AAClC,UAAM,OAAO,KAAK,YAAY,IAAI,QAAQ;AAC1C,QAAI,CAAC,MAAM;AACT,aAAO;AAAA,IACT;AAEA,WAAO,QAAQ,QAAQ,KAAK,MAAM,OAAO,CAAC;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA,EAKA,aAAmB;AACjB,SAAK,QAAQ,CAAC;AACd,SAAK,YAAY,MAAM;AAAA,EACzB;AACF;AAGA,IAAI,eAAwC;AAKrC,SAAS,sBAAwC;AACtD,MAAI,CAAC,cAAc;AACjB,mBAAe,IAAI,iBAAiB;AAAA,EACtC;AACA,SAAO;AACT;AAKO,SAAS,wBAA8B;AAC5C,iBAAe;AACjB;",
-  "names": []
-}

package/dist/core/permissions/engine/types.js

@@ -1 +0,0 @@
-//# sourceMappingURL=types.js.map

package/dist/core/permissions/engine/types.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": [],
-  "sourcesContent": [],
-  "mappings": "",
-  "names": []
-}