ccjk 15.28.2 → 15.29.0

package/dist/chunks/permission-manager.mjs

@@ -0,0 +1,250 @@
+import { existsSync, mkdirSync, readFileSync } from 'node:fs';
+import process__default from 'node:process';
+import a from './index5.mjs';
+import { CCJK_CONFIG_DIR, SETTINGS_FILE, CLAVUE_DIR } from './constants.mjs';
+import { STATUS } from './banner.mjs';
+import { writeFileAtomic } from './fs-operations.mjs';
+import { j as join } from '../shared/ccjk.bQ7Dh1g4.mjs';
+import '../shared/ccjk.BAGoDD49.mjs';
+import 'node:os';
+import './index2.mjs';
+import 'node:url';
+import '../shared/ccjk.gDEDGD_t.mjs';
+import 'node:crypto';
+import 'node:fs/promises';
+
+const PERMISSION_CONFIG_FILE = join(CCJK_CONFIG_DIR, "permissions.json");
+function stringArray(value) {
+  return Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
+}
+function permissionArray(value) {
+  return stringArray(value).filter(
+    (item) => [
+      "file-read",
+      "file-write",
+      "file-delete",
+      "git-operations",
+      "npm-commands",
+      "node-execution",
+      "system-commands",
+      "network-access",
+      "mcp-server"
+    ].includes(item)
+  );
+}
+function mapClaudeRuleToPermission(rule) {
+  const normalized = rule.toLowerCase();
+  if (normalized.startsWith("read(")) {
+    return "file-read";
+  }
+  if (normalized.startsWith("edit(") || normalized.startsWith("write(") || normalized.startsWith("notebookedit(")) {
+    return "file-write";
+  }
+  if (normalized.startsWith("bash(")) {
+    if (/\b(git|gh)\b/.test(normalized)) {
+      return "git-operations";
+    }
+    if (/\b(npm|pnpm|yarn|bun)\b/.test(normalized)) {
+      return "npm-commands";
+    }
+    if (/\b(node|tsx|ts-node)\b/.test(normalized)) {
+      return "node-execution";
+    }
+    if (/\b(curl|wget|scp|ssh)\b/.test(normalized)) {
+      return "network-access";
+    }
+    if (/\b(rm|trash|unlink|rmdir|mv)\b/.test(normalized)) {
+      return "file-delete";
+    }
+    return "system-commands";
+  }
+  if (normalized.startsWith("webfetch(") || normalized.startsWith("websearch(")) {
+    return "network-access";
+  }
+  if (normalized.startsWith("mcp__")) {
+    return "mcp-server";
+  }
+  return null;
+}
+function mapClaudeRulesToPermissions(rules) {
+  return [...new Set(rules.map(mapClaudeRuleToPermission).filter((item) => Boolean(item)))];
+}
+function sortedArray(items) {
+  return [...items].sort();
+}
+function normalizePermissions(input) {
+  const obj = input && typeof input === "object" && !Array.isArray(input) ? input : {};
+  return {
+    allowed: [
+      ...permissionArray(obj.allowed),
+      ...mapClaudeRulesToPermissions(stringArray(obj.allow))
+    ].filter((item, index, array) => array.indexOf(item) === index),
+    denied: [
+      ...permissionArray(obj.denied),
+      ...mapClaudeRulesToPermissions(stringArray(obj.deny))
+    ].filter((item, index, array) => array.indexOf(item) === index),
+    trustedDirectories: [
+      ...stringArray(obj.trustedDirectories),
+      ...stringArray(obj.additionalDirectories)
+    ].filter((item, index, array) => array.indexOf(item) === index),
+    autoApprovePatterns: stringArray(obj.autoApprovePatterns)
+  };
+}
+function getClavueSettingsFile() {
+  return join(process__default.env.CLAVUE_CONFIG_DIR || CLAVUE_DIR, "settings.json");
+}
+function shouldPreferClavueSettings() {
+  return Boolean(
+    process__default.env.CLAVUE_CONFIG_DIR || process__default.env.CLAVUE_DISABLE_LEGACY_CLAUDE_CONFIG || process__default.env.CLAVUE_DISABLE_LEGACY_CLAUDE_COMMANDS || existsSync(getClavueSettingsFile())
+  );
+}
+function readJsonFile(path) {
+  try {
+    return JSON.parse(readFileSync(path, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function getPermissionFallbackFiles() {
+  const clavueSettingsFile = getClavueSettingsFile();
+  const orderedFiles = shouldPreferClavueSettings() ? [clavueSettingsFile, SETTINGS_FILE] : [SETTINGS_FILE, clavueSettingsFile];
+  return [...new Set(orderedFiles)];
+}
+const PERMISSION_TEMPLATES = [
+  {
+    id: "development",
+    name: "Development",
+    description: "Standard development permissions - file read/write, git, npm, node execution",
+    permissions: {
+      allowed: ["file-read", "file-write", "git-operations", "npm-commands", "node-execution", "mcp-server"],
+      denied: ["system-commands", "network-access", "file-delete"],
+      trustedDirectories: [],
+      autoApprovePatterns: ["*.ts", "*.js", "*.json", "*.md", "*.css", "*.html"]
+    }
+  },
+  {
+    id: "readonly",
+    name: "Read Only",
+    description: "Read-only access - no file modifications or command execution",
+    permissions: {
+      allowed: ["file-read"],
+      denied: ["file-write", "file-delete", "git-operations", "npm-commands", "node-execution", "system-commands", "network-access"],
+      trustedDirectories: [],
+      autoApprovePatterns: []
+    }
+  },
+  {
+    id: "full-trust",
+    name: "Full Trust",
+    description: "All operations pre-authorized - use with caution",
+    permissions: {
+      allowed: ["file-read", "file-write", "file-delete", "git-operations", "npm-commands", "node-execution", "system-commands", "network-access", "mcp-server"],
+      denied: [],
+      trustedDirectories: [],
+      autoApprovePatterns: ["*"]
+    }
+  },
+  {
+    id: "restricted",
+    name: "Restricted",
+    description: "Minimal permissions - all operations require confirmation",
+    permissions: {
+      allowed: [],
+      denied: ["file-read", "file-write", "file-delete", "git-operations", "npm-commands", "node-execution", "system-commands", "network-access"],
+      trustedDirectories: [],
+      autoApprovePatterns: []
+    }
+  }
+];
+function readPermissions() {
+  if (existsSync(PERMISSION_CONFIG_FILE)) {
+    const permissions = readJsonFile(PERMISSION_CONFIG_FILE);
+    if (permissions) {
+      return normalizePermissions(permissions);
+    }
+  }
+  for (const settingsFile of getPermissionFallbackFiles()) {
+    if (existsSync(settingsFile)) {
+      const settings = readJsonFile(settingsFile);
+      if (settings?.permissions) {
+        return normalizePermissions(settings.permissions);
+      }
+    }
+  }
+  return PERMISSION_TEMPLATES.find((t) => t.id === "development").permissions;
+}
+function writePermissions(permissions) {
+  try {
+    const normalizedPermissions = normalizePermissions(permissions);
+    if (!existsSync(CCJK_CONFIG_DIR)) {
+      mkdirSync(CCJK_CONFIG_DIR, { recursive: true });
+    }
+    writeFileAtomic(PERMISSION_CONFIG_FILE, JSON.stringify(normalizedPermissions, null, 2));
+    return true;
+  } catch {
+    return false;
+  }
+}
+function repairPermissions(trustedDirectory = process__default.cwd()) {
+  const template = PERMISSION_TEMPLATES.find((t) => t.id === "development");
+  const permissions = normalizePermissions(template.permissions);
+  if (trustedDirectory && !permissions.trustedDirectories.includes(trustedDirectory)) {
+    permissions.trustedDirectories.push(trustedDirectory);
+  }
+  return writePermissions(permissions);
+}
+function getCurrentTemplateId() {
+  const permissions = readPermissions();
+  for (const template of PERMISSION_TEMPLATES) {
+    if (JSON.stringify(sortedArray(permissions.allowed)) === JSON.stringify(sortedArray(template.permissions.allowed)) && JSON.stringify(sortedArray(permissions.denied)) === JSON.stringify(sortedArray(template.permissions.denied))) {
+      return template.id;
+    }
+  }
+  return null;
+}
+function displayPermissions() {
+  const permissions = readPermissions();
+  const templateId = getCurrentTemplateId();
+  console.log(a.green("\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 Claude Code Permissions \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n"));
+  console.log(a.white.bold("Trusted Directories:"));
+  if (permissions.trustedDirectories.length === 0) {
+    console.log(a.gray("  (none)"));
+  } else {
+    for (const dir of permissions.trustedDirectories) {
+      console.log(STATUS.success(dir));
+    }
+  }
+  console.log("");
+  console.log(a.white.bold("Pre-authorized Operations:"));
+  const allPermissions = [
+    "file-read",
+    "file-write",
+    "file-delete",
+    "git-operations",
+    "npm-commands",
+    "node-execution",
+    "system-commands",
+    "network-access",
+    "mcp-server"
+  ];
+  for (const perm of allPermissions) {
+    const label = perm.replace(/-/g, " ").replace(/\b\w/g, (l) => l.toUpperCase());
+    if (permissions.allowed.includes(perm)) {
+      console.log(STATUS.success(label));
+    } else if (permissions.denied.includes(perm)) {
+      console.log(STATUS.error(`${label} (denied)`));
+    } else {
+      console.log(STATUS.warning(`${label} (requires confirmation)`));
+    }
+  }
+  console.log("");
+  if (templateId) {
+    const template = PERMISSION_TEMPLATES.find((t) => t.id === templateId);
+    console.log(a.gray(`Template: ${a.green(template?.name || templateId)}`));
+  } else {
+    console.log(a.gray("Template: custom"));
+  }
+  console.log("");
+}
+
+export { PERMISSION_TEMPLATES, displayPermissions, getCurrentTemplateId, normalizePermissions, readPermissions, repairPermissions, writePermissions };

package/dist/chunks/permissions.mjs

@@ -0,0 +1,265 @@
+import process__default from 'node:process';
+import a from './index5.mjs';
+import { i as inquirer } from './index6.mjs';
+import './main.mjs';
+import { i18n } from './index2.mjs';
+import { g as getPermissionManager } from '../shared/ccjk.DsZsc4LR.mjs';
+import '../shared/ccjk.BAGoDD49.mjs';
+import 'node:readline';
+import 'stream';
+import 'node:tty';
+import 'node:async_hooks';
+import '../shared/ccjk.Cjgrln_h.mjs';
+import 'node:util';
+import 'tty';
+import 'fs';
+import 'child_process';
+import 'node:path';
+import 'node:os';
+import 'node:crypto';
+import 'buffer';
+import 'string_decoder';
+import 'module';
+import 'node:child_process';
+import 'node:stream';
+import 'node:fs';
+import 'node:url';
+import '../shared/ccjk.bQ7Dh1g4.mjs';
+
+const permissionManager = getPermissionManager();
+async function listPermissions(options) {
+  const format = options.format || "table";
+  const verbose = options.verbose || false;
+  const category = options.category;
+  const type = options.type;
+  let rules = permissionManager.getAllRules();
+  if (type) {
+    rules = rules.filter((r) => r.type === type);
+  }
+  if (category) {
+    rules = rules.filter((r) => r.category === category);
+  }
+  if (format === "json") {
+    console.log(JSON.stringify(rules, null, 2));
+    return;
+  }
+  console.log("");
+  console.log(a.bold("\u{1F4CB} CCJK Permissions\n"));
+  const stats = permissionManager.getStats();
+  console.log(a.dim(`Total: ${stats.total} | Allow: ${stats.allow} | Deny: ${stats.deny}
+`));
+  if (rules.length === 0) {
+    console.log(a.yellow("No permissions configured."));
+    return;
+  }
+  if (format === "list") {
+    for (const rule of rules) {
+      const typeColor = rule.type === "allow" ? a.green : a.red;
+      console.log(`${typeColor(rule.type.padEnd(6))} ${a.cyan(rule.pattern)} (${rule.category})`);
+      if (verbose) {
+        if (rule.description) {
+          console.log(a.gray(`    Description: ${rule.description}`));
+        }
+        console.log(a.gray(`    Source: ${rule.source}`));
+        if (rule.priority !== void 0) {
+          console.log(a.gray(`    Priority: ${rule.priority}`));
+        }
+      }
+    }
+  } else {
+    console.log(
+      a.bold("Type".padEnd(8)) + a.bold("Pattern".padEnd(40)) + a.bold("Category".padEnd(12)) + a.bold("Source")
+    );
+    console.log(a.dim("\u2500".repeat(80)));
+    for (const rule of rules) {
+      const typeColor = rule.type === "allow" ? a.green : a.red;
+      const type2 = typeColor(rule.type.padEnd(8));
+      const pattern = a.cyan(rule.pattern.padEnd(40));
+      const category2 = a.yellow(rule.category.padEnd(12));
+      const source = a.dim(rule.source);
+      console.log(`${type2}${pattern}${category2}${source}`);
+      if (verbose && rule.description) {
+        console.log(a.gray(`  \u2514\u2500 ${rule.description}`));
+      }
+    }
+  }
+  console.log("");
+}
+async function checkPermission(resource, options) {
+  const isZh = i18n.language === "zh-CN";
+  if (!resource) {
+    console.error(a.red(isZh ? "\u9519\u8BEF\uFF1A\u9700\u8981\u6307\u5B9A\u8D44\u6E90" : "Error: Resource is required"));
+    console.log(isZh ? "\u7528\u6CD5: ccjk permissions check <resource>" : "Usage: ccjk permissions check <resource>");
+    process__default.exit(1);
+  }
+  const action = options.action || "execute";
+  const verbose = options.verbose || false;
+  console.log("");
+  console.log(a.bold(`${a.cyan("\u{1F50D}")} ${isZh ? "\u68C0\u67E5\u6743\u9650" : "Checking Permission"}: ${a.cyan(resource)}
+`));
+  const result = await permissionManager.checkPermission(action, resource);
+  if (result.allowed) {
+    console.log(a.green(`\u2713 ${isZh ? "\u5141\u8BB8" : "ALLOWED"}`));
+    console.log(`  ${a.dim("Reason:")} ${result.reason}`);
+    if (verbose && result.matchedRule) {
+      console.log(`  ${a.dim("Matched rule:")} ${a.cyan(result.matchedRule.pattern)}`);
+      console.log(`  ${a.dim("Rule type:")} ${result.matchedRule.type}`);
+      console.log(`  ${a.dim("Source:")} ${result.matchedRule.source}`);
+    }
+  } else {
+    console.log(a.red(`\u2717 ${isZh ? "\u62D2\u7EDD" : "DENIED"}`));
+    console.log(`  ${a.dim("Reason:")} ${result.reason}`);
+    console.log(a.yellow(isZh ? '  \u63D0\u793A\uFF1A\u4F7F\u7528 "ccjk permissions add" \u6DFB\u52A0\u6743\u9650' : '  Tip: Use "ccjk permissions add" to grant permission'));
+  }
+  console.log("");
+}
+async function grantPermission(resource, options) {
+  const isZh = i18n.language === "zh-CN";
+  if (!resource) {
+    console.error(a.red(isZh ? "\u9519\u8BEF\uFF1A\u9700\u8981\u6307\u5B9A\u8D44\u6E90" : "Error: Resource is required"));
+    console.log(isZh ? "\u7528\u6CD5: ccjk permissions grant <pattern>" : "Usage: ccjk permissions grant <pattern>");
+    process__default.exit(1);
+  }
+  const validation = permissionManager.validatePattern(resource);
+  if (!validation.valid) {
+    console.error(a.red(`${isZh ? "\u9519\u8BEF" : "Error"}: ${validation.error}`));
+    process__default.exit(1);
+  }
+  console.log("");
+  console.log(a.bold(`${a.cyan("\u2713")} ${isZh ? "\u6388\u4E88\u6743\u9650" : "Granting Permission"}: ${a.cyan(resource)}
+`));
+  const permission = {
+    type: "allow",
+    pattern: resource,
+    scope: "global",
+    description: options.description || "Granted via CLI"
+  };
+  permissionManager.addPermission(permission);
+  console.log(a.green(isZh ? "\u6743\u9650\u5DF2\u6210\u529F\u6388\u4E88\uFF01" : "Permission granted successfully!"));
+  console.log("");
+}
+async function revokePermission(resource, _options) {
+  const isZh = i18n.language === "zh-CN";
+  if (!resource) {
+    console.error(a.red(isZh ? "\u9519\u8BEF\uFF1A\u9700\u8981\u6307\u5B9A\u8D44\u6E90" : "Error: Resource is required"));
+    console.log(isZh ? "\u7528\u6CD5: ccjk permissions revoke <pattern>" : "Usage: ccjk permissions revoke <pattern>");
+    process__default.exit(1);
+  }
+  console.log("");
+  console.log(a.bold(`${a.red("\u2717")} ${isZh ? "\u64A4\u9500\u6743\u9650" : "Revoking Permission"}: ${a.cyan(resource)}
+`));
+  const removed = permissionManager.removePermission(resource);
+  if (removed) {
+    console.log(a.green(isZh ? "\u6743\u9650\u5DF2\u6210\u529F\u64A4\u9500\uFF01" : "Permission revoked successfully!"));
+  } else {
+    console.log(a.yellow(isZh ? "\u672A\u627E\u5230\u5339\u914D\u7684\u6743\u9650\u89C4\u5219" : "No matching permission found"));
+  }
+  console.log("");
+}
+async function resetPermissions(_options) {
+  const isZh = i18n.language === "zh-CN";
+  console.log("");
+  console.log(a.bold.yellow(`${a.yellow("\u26A0\uFE0F")} ${isZh ? "\u91CD\u7F6E\u6240\u6709\u6743\u9650" : "Resetting All Permissions"}
+`));
+  const { confirm } = await inquirer.prompt({
+    type: "confirm",
+    name: "confirm",
+    message: isZh ? "\u786E\u5B9A\u8981\u6E05\u9664\u6240\u6709\u6743\u9650\u89C4\u5219\u5417\uFF1F" : "Are you sure you want to reset all permissions?",
+    default: false
+  });
+  if (!confirm) {
+    console.log(a.gray(isZh ? "\u64CD\u4F5C\u5DF2\u53D6\u6D88" : "Operation cancelled"));
+    return;
+  }
+  permissionManager.clearPermissions();
+  console.log(a.green(isZh ? "\u6240\u6709\u6743\u9650\u5DF2\u6E05\u9664\uFF01" : "All permissions have been reset!"));
+  console.log("");
+}
+async function exportPermissions(filePath, _options) {
+  const fs = await import('node:fs/promises');
+  const path = await import('node:path');
+  const outputPath = filePath || path.join(process__default.cwd(), "permissions.json");
+  console.log("");
+  console.log(a.bold(`\u{1F4E4} ${a.cyan("Exporting Permissions")} ${a.dim("to")} ${a.cyan(outputPath)}
+`));
+  const permissions = permissionManager.exportPermissions();
+  await fs.writeFile(outputPath, JSON.stringify(permissions, null, 2), "utf-8");
+  const totalCount = (permissions.allow?.length || 0) + (permissions.deny?.length || 0);
+  console.log(a.green(`\u2713 Exported ${totalCount} permission(s) successfully!`));
+  console.log("");
+}
+async function importPermissions(filePath, options) {
+  const isZh = i18n.language === "zh-CN";
+  if (!filePath) {
+    console.error(a.red(isZh ? "\u9519\u8BEF\uFF1A\u9700\u8981\u6307\u5B9A\u6587\u4EF6\u8DEF\u5F84" : "Error: File path is required"));
+    console.log(isZh ? "\u7528\u6CD5: ccjk permissions import <file>" : "Usage: ccjk permissions import <file>");
+    process__default.exit(1);
+  }
+  const fs = await import('node:fs/promises');
+  console.log("");
+  console.log(a.bold(`\u{1F4E5} ${a.cyan("Importing Permissions")} ${a.dim("from")} ${a.cyan(filePath)}
+`));
+  try {
+    const content = await fs.readFile(filePath, "utf-8");
+    const config = JSON.parse(content);
+    if (!config.allow && !config.deny) {
+      throw new TypeError(isZh ? "\u65E0\u6548\u7684\u6743\u9650\u6587\u4EF6\u683C\u5F0F\u3002\u671F\u671B { allow: [], deny: [] }" : "Invalid permissions file format. Expected { allow: [], deny: [] }");
+    }
+    const merge = options.merge ?? false;
+    permissionManager.importPermissions(config, merge);
+    const totalCount = (config.allow?.length || 0) + (config.deny?.length || 0);
+    console.log(a.green(`\u2713 Imported ${totalCount} permission(s) successfully!`));
+  } catch (error) {
+    console.error(a.red(`${isZh ? "\u5BFC\u5165\u6743\u9650\u65F6\u51FA\u9519" : "Error importing permissions"}:`), error);
+    process__default.exit(1);
+  }
+  console.log("");
+}
+function permissionsHelp(_options) {
+  const isZh = i18n.language === "zh-CN";
+  console.log("");
+  console.log(a.bold.cyan(`\u{1F4CB} ${isZh ? "CCJK \u6743\u9650\u7BA1\u7406" : "CCJK Permissions Management"}
+`));
+  console.log(a.bold(isZh ? "\u7528\u6CD5\uFF1A" : "Usage:"));
+  console.log("  ccjk permissions [action] [...args]\n");
+  console.log(a.bold(isZh ? "\u64CD\u4F5C\uFF1A" : "Actions:"));
+  console.log(`  list              ${isZh ? "\u5217\u51FA\u6240\u6709\u6743\u9650" : "List all permissions"}`);
+  console.log(`  search [query]    ${isZh ? "\u4EA4\u4E92\u5F0F\u641C\u7D22\u6743\u9650" : "Interactive permission search"}`);
+  console.log(`  check <resource>  ${isZh ? "\u68C0\u67E5\u8D44\u6E90\u6743\u9650" : "Check permission for a resource"}`);
+  console.log(`  grant <pattern>   ${isZh ? "\u6388\u4E88\u6743\u9650" : "Grant permission for a pattern"}`);
+  console.log(`  revoke <pattern>  ${isZh ? "\u64A4\u9500\u6743\u9650" : "Revoke permission for a pattern"}`);
+  console.log(`  reset             ${isZh ? "\u91CD\u7F6E\u6240\u6709\u6743\u9650" : "Reset all permissions"}`);
+  console.log(`  test <pattern>    ${isZh ? "\u6D4B\u8BD5\u6A21\u5F0F\u5339\u914D" : "Test pattern matching"}`);
+  console.log(`  diagnose [pattern] ${isZh ? "\u663E\u793A\u89C4\u5219\u8BCA\u65AD" : "Show rule diagnostics"}`);
+  console.log(`  examples          ${isZh ? "\u663E\u793A\u6A21\u5F0F\u793A\u4F8B" : "Show pattern examples"}`);
+  console.log(`  export [file]     ${isZh ? "\u5BFC\u51FA\u6743\u9650\u5230\u6587\u4EF6" : "Export permissions to a file"}`);
+  console.log(`  import <file>     ${isZh ? "\u4ECE\u6587\u4EF6\u5BFC\u5165\u6743\u9650" : "Import permissions from a file"}
+`);
+  console.log(a.bold(isZh ? "\u9009\u9879\uFF1A" : "Options:"));
+  console.log(`  --format, -f      ${isZh ? "\u8F93\u51FA\u683C\u5F0F (table|json|list)" : "Output format (table|json|list)"}`);
+  console.log(`  --verbose, -v     ${isZh ? "\u8BE6\u7EC6\u8F93\u51FA" : "Verbose output"}`);
+  console.log(`  --type, -t        ${isZh ? "\u8FC7\u6EE4\u7C7B\u578B (allow|deny)" : "Filter by type (allow|deny)"}`);
+  console.log(`  --category, -c    ${isZh ? "\u8FC7\u6EE4\u5206\u7C7B" : "Filter by category"}`);
+  console.log(`  --action, -a      ${isZh ? "\u68C0\u67E5\u7684\u64CD\u4F5C" : "Action to check"}`);
+  console.log(`  --description, -d ${isZh ? "\u89C4\u5219\u63CF\u8FF0" : "Rule description"}`);
+  console.log(`  --merge           ${isZh ? "\u5408\u5E76\u5BFC\u5165\uFF08\u800C\u4E0D\u662F\u66FF\u6362\uFF09" : "Merge on import (not replace)"}
+`);
+  console.log(a.bold(isZh ? "\u793A\u4F8B\uFF1A" : "Examples:"));
+  console.log("  ccjk permissions list");
+  console.log("  ccjk permissions search");
+  console.log('  ccjk permissions check "Bash(npm install)"');
+  console.log('  ccjk permissions grant "Bash(npm *)"');
+  console.log('  ccjk permissions test "mcp__server__*"');
+  console.log("  ccjk permissions diagnose");
+  console.log("  ccjk permissions examples\n");
+  console.log(a.bold(isZh ? "\u6A21\u5F0F\u683C\u5F0F\uFF1A" : "Pattern Formats:"));
+  console.log(`  Bash(npm install)  ${isZh ? "\u7CBE\u786E\u5339\u914D Bash \u547D\u4EE4" : "Exact Bash command match"}`);
+  console.log(`  Bash(npm *)        ${isZh ? "\u5339\u914D\u6240\u6709 npm \u547D\u4EE4" : "Match all npm commands"}`);
+  console.log(`  Bash(* install)    ${isZh ? '\u5339\u914D\u4EFB\u610F "* install" \u547D\u4EE4' : 'Match any "* install" command'}`);
+  console.log(`  mcp__server__*     ${isZh ? "\u5339\u914D MCP \u670D\u52A1\u5668\u5DE5\u5177" : "Match MCP server tools"}`);
+  console.log(`  /home/user/*       ${isZh ? "\u5339\u914D\u8DEF\u5F84\u6A21\u5F0F" : "Match path patterns"}`);
+  console.log(`  https://api.*      ${isZh ? "\u5339\u914D URL \u6A21\u5F0F" : "Match URL patterns"}
+`);
+}
+
+export { checkPermission, exportPermissions, grantPermission, importPermissions, listPermissions, permissionsHelp, resetPermissions, revokePermission };