daycare-cli 2026.2.9 → 2026.2.12

package/dist/engine/permissions/permissionDescribeDecision.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionDescribeDecision.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionDescribeDecision.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAE7E,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC7B,MAAM,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/engine/permissions/permissionEnsureDefaultFile.d.ts

@@ -1,3 +0,0 @@
-import type { SessionPermissions } from "../permissions.js";
-export declare function permissionEnsureDefaultFile(permissions: SessionPermissions, defaults: Pick<SessionPermissions, "writeDirs" | "readDirs">): void;
-//# sourceMappingURL=permissionEnsureDefaultFile.d.ts.map

package/dist/engine/permissions/permissionEnsureDefaultFile.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionEnsureDefaultFile.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionEnsureDefaultFile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,wBAAgB,2BAA2B,CACvC,WAAW,EAAE,kBAAkB,EAC/B,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,GAAG,UAAU,CAAC,GAC7D,IAAI,CAKN"}

package/dist/engine/permissions/permissionEnsureDefaultFile.js

@@ -1,7 +0,0 @@
-export function permissionEnsureDefaultFile(permissions, defaults) {
-    const nextWrite = new Set([...permissions.writeDirs, ...defaults.writeDirs]);
-    const nextRead = new Set([...permissions.readDirs, ...defaults.readDirs]);
-    permissions.writeDirs = Array.from(nextWrite.values());
-    permissions.readDirs = Array.from(nextRead.values());
-}
-//# sourceMappingURL=permissionEnsureDefaultFile.js.map

package/dist/engine/permissions/permissionEnsureDefaultFile.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionEnsureDefaultFile.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionEnsureDefaultFile.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,2BAA2B,CACvC,WAA+B,EAC/B,QAA4D;IAE5D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,QAAQ,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1E,WAAW,CAAC,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,WAAW,CAAC,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AACzD,CAAC"}

package/dist/engine/permissions/permissionEnsureDefaultFile.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=permissionEnsureDefaultFile.spec.d.ts.map

package/dist/engine/permissions/permissionEnsureDefaultFile.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionEnsureDefaultFile.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionEnsureDefaultFile.spec.ts"],"names":[],"mappings":""}

package/dist/engine/permissions/permissionEnsureDefaultFile.spec.js

@@ -1,20 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { permissionEnsureDefaultFile } from "./permissionEnsureDefaultFile.js";
-describe("permissionEnsureDefaultFile", () => {
-    it("merges default read/write directories", () => {
-        const permissions = {
-            workingDir: "/workspace",
-            writeDirs: ["/write"],
-            readDirs: ["/read"],
-            network: false,
-            events: false
-        };
-        permissionEnsureDefaultFile(permissions, {
-            writeDirs: ["/write", "/extra-write"],
-            readDirs: ["/read", "/extra-read"]
-        });
-        expect(permissions.writeDirs).toEqual(expect.arrayContaining(["/write", "/extra-write"]));
-        expect(permissions.readDirs).toEqual(expect.arrayContaining(["/read", "/extra-read"]));
-    });
-});
-//# sourceMappingURL=permissionEnsureDefaultFile.spec.js.map

package/dist/engine/permissions/permissionEnsureDefaultFile.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionEnsureDefaultFile.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionEnsureDefaultFile.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG9C,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAE/E,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC7C,MAAM,WAAW,GAAuB;YACpC,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,CAAC,QAAQ,CAAC;YACrB,QAAQ,EAAE,CAAC,OAAO,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC;QAEF,2BAA2B,CAAC,WAAW,EAAE;YACrC,SAAS,EAAE,CAAC,QAAQ,EAAE,cAAc,CAAC;YACrC,QAAQ,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC;SACrC,CAAC,CAAC;QAEH,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;QAC1F,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/engine/permissions/permissionFormatTag.d.ts

@@ -1,3 +0,0 @@
-import type { PermissionAccess } from "@/types";
-export declare function permissionFormatTag(access: PermissionAccess): string;
-//# sourceMappingURL=permissionFormatTag.d.ts.map

package/dist/engine/permissions/permissionFormatTag.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionFormatTag.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionFormatTag.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAWpE"}

package/dist/engine/permissions/permissionFormatTag.js

@@ -1,13 +0,0 @@
-export function permissionFormatTag(access) {
-    if (access.kind === "network") {
-        return "@network";
-    }
-    if (access.kind === "events") {
-        return "@events";
-    }
-    if (access.kind === "workspace") {
-        return "@workspace";
-    }
-    return `@${access.kind}:${access.path}`;
-}
-//# sourceMappingURL=permissionFormatTag.js.map

package/dist/engine/permissions/permissionFormatTag.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionFormatTag.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionFormatTag.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IACxD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC;IACtB,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,OAAO,YAAY,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;AAC5C,CAAC"}

package/dist/engine/permissions/permissionFormatTag.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=permissionFormatTag.spec.d.ts.map

package/dist/engine/permissions/permissionFormatTag.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionFormatTag.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionFormatTag.spec.ts"],"names":[],"mappings":""}

package/dist/engine/permissions/permissionFormatTag.spec.js

@@ -1,17 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { permissionFormatTag } from "./permissionFormatTag.js";
-describe("permissionFormatTag", () => {
-    it("formats network permissions", () => {
-        expect(permissionFormatTag({ kind: "network" })).toBe("@network");
-    });
-    it("formats events permissions", () => {
-        expect(permissionFormatTag({ kind: "events" })).toBe("@events");
-    });
-    it("formats workspace permissions", () => {
-        expect(permissionFormatTag({ kind: "workspace" })).toBe("@workspace");
-    });
-    it("formats path permissions", () => {
-        expect(permissionFormatTag({ kind: "read", path: "/tmp" })).toBe("@read:/tmp");
-    });
-});
-//# sourceMappingURL=permissionFormatTag.spec.js.map

package/dist/engine/permissions/permissionFormatTag.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionFormatTag.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionFormatTag.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/engine/permissions/permissionMergeDefault.d.ts

@@ -1,3 +0,0 @@
-import type { SessionPermissions } from "../permissions.js";
-export declare function permissionMergeDefault(permissions: SessionPermissions, defaultPermissions: SessionPermissions): SessionPermissions;
-//# sourceMappingURL=permissionMergeDefault.d.ts.map

package/dist/engine/permissions/permissionMergeDefault.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionMergeDefault.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionMergeDefault.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,wBAAgB,sBAAsB,CAClC,WAAW,EAAE,kBAAkB,EAC/B,kBAAkB,EAAE,kBAAkB,GACvC,kBAAkB,CAYpB"}

package/dist/engine/permissions/permissionMergeDefault.js

@@ -1,14 +0,0 @@
-export function permissionMergeDefault(permissions, defaultPermissions) {
-    const nextWrite = new Set([...defaultPermissions.writeDirs, ...permissions.writeDirs]);
-    const nextRead = new Set([...defaultPermissions.readDirs, ...permissions.readDirs]);
-    return {
-        workspaceDir: permissions.workspaceDir?.trim() || defaultPermissions.workspaceDir,
-        // Use nullish coalescing to properly handle empty string
-        workingDir: permissions.workingDir?.trim() || defaultPermissions.workingDir,
-        writeDirs: Array.from(nextWrite.values()),
-        readDirs: Array.from(nextRead.values()),
-        network: permissions.network || defaultPermissions.network,
-        events: permissions.events || defaultPermissions.events
-    };
-}
-//# sourceMappingURL=permissionMergeDefault.js.map

package/dist/engine/permissions/permissionMergeDefault.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionMergeDefault.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionMergeDefault.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,sBAAsB,CAClC,WAA+B,EAC/B,kBAAsC;IAEtC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,kBAAkB,CAAC,SAAS,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,kBAAkB,CAAC,QAAQ,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,OAAO;QACH,YAAY,EAAE,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,kBAAkB,CAAC,YAAY;QACjF,yDAAyD;QACzD,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,kBAAkB,CAAC,UAAU;QAC3E,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACzC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,kBAAkB,CAAC,OAAO;QAC1D,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,kBAAkB,CAAC,MAAM;KAC1D,CAAC;AACN,CAAC"}

package/dist/engine/permissions/permissionMergeDefault.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=permissionMergeDefault.spec.d.ts.map

package/dist/engine/permissions/permissionMergeDefault.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionMergeDefault.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionMergeDefault.spec.ts"],"names":[],"mappings":""}

package/dist/engine/permissions/permissionMergeDefault.spec.js

@@ -1,72 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { permissionMergeDefault } from "./permissionMergeDefault.js";
-describe("permissionMergeDefault", () => {
-    it("falls back to defaults and merges directories", () => {
-        const permissions = {
-            workspaceDir: "",
-            workingDir: "",
-            writeDirs: ["/custom-write"],
-            readDirs: [],
-            network: false,
-            events: false
-        };
-        const defaults = {
-            workspaceDir: "/workspace",
-            workingDir: "/workspace",
-            writeDirs: ["/base-write"],
-            readDirs: ["/base-read"],
-            network: true,
-            events: true
-        };
-        const merged = permissionMergeDefault(permissions, defaults);
-        expect(merged.workspaceDir).toBe("/workspace");
-        expect(merged.workingDir).toBe("/workspace");
-        expect(merged.network).toBe(true);
-        expect(merged.events).toBe(true);
-        expect(merged.writeDirs).toEqual(expect.arrayContaining(["/base-write", "/custom-write"]));
-        expect(merged.readDirs).toEqual(expect.arrayContaining(["/base-read"]));
-    });
-    it("falls back to defaults when workingDir is whitespace-only", () => {
-        const permissions = {
-            workspaceDir: "   ",
-            workingDir: "   ",
-            writeDirs: [],
-            readDirs: [],
-            network: false,
-            events: false
-        };
-        const defaults = {
-            workspaceDir: "/workspace",
-            workingDir: "/workspace",
-            writeDirs: [],
-            readDirs: [],
-            network: false,
-            events: false
-        };
-        const merged = permissionMergeDefault(permissions, defaults);
-        expect(merged.workspaceDir).toBe("/workspace");
-        expect(merged.workingDir).toBe("/workspace");
-    });
-    it("preserves valid workingDir from permissions", () => {
-        const permissions = {
-            workspaceDir: "/workspace",
-            workingDir: "/custom-workspace",
-            writeDirs: [],
-            readDirs: [],
-            network: false,
-            events: false
-        };
-        const defaults = {
-            workspaceDir: "/default-workspace",
-            workingDir: "/workspace",
-            writeDirs: [],
-            readDirs: [],
-            network: false,
-            events: false
-        };
-        const merged = permissionMergeDefault(permissions, defaults);
-        expect(merged.workspaceDir).toBe("/workspace");
-        expect(merged.workingDir).toBe("/custom-workspace");
-    });
-});
-//# sourceMappingURL=permissionMergeDefault.spec.js.map

package/dist/engine/permissions/permissionMergeDefault.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionMergeDefault.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionMergeDefault.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACrD,MAAM,WAAW,GAAuB;YACpC,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,CAAC,eAAe,CAAC;YAC5B,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC;QACF,MAAM,QAAQ,GAAuB;YACjC,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,CAAC,aAAa,CAAC;YAC1B,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI;SACf,CAAC;QAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7D,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACjE,MAAM,WAAW,GAAuB;YACpC,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,KAAK;YACjB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC;QACF,MAAM,QAAQ,GAAuB;YACjC,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC;QAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7D,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACnD,MAAM,WAAW,GAAuB;YACpC,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,mBAAmB;YAC/B,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC;QACF,MAAM,QAAQ,GAAuB;YACjC,YAAY,EAAE,oBAAoB;YAClC,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC;QAEF,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAE7D,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/engine/permissions/permissionTagsApply.d.ts

@@ -1,7 +0,0 @@
-import type { SessionPermissions } from "@/types";
-/**
- * Applies permission tags to a permissions object.
- * Expects: tags are @network, @events, @workspace, @read:<path>, or @write:<path>.
- */
-export declare function permissionTagsApply(permissions: SessionPermissions, tags: string[]): void;
-//# sourceMappingURL=permissionTagsApply.d.ts.map

package/dist/engine/permissions/permissionTagsApply.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionTagsApply.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsApply.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAIlD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAQzF"}

package/dist/engine/permissions/permissionTagsApply.js

@@ -1,16 +0,0 @@
-import { permissionAccessApply } from "./permissionAccessApply.js";
-import { permissionAccessParse } from "./permissionAccessParse.js";
-/**
- * Applies permission tags to a permissions object.
- * Expects: tags are @network, @events, @workspace, @read:<path>, or @write:<path>.
- */
-export function permissionTagsApply(permissions, tags) {
-    for (const tag of tags) {
-        const access = permissionAccessParse(tag);
-        const applied = permissionAccessApply(permissions, access);
-        if (!applied) {
-            throw new Error(`Invalid permission tag: ${tag}`);
-        }
-    }
-}
-//# sourceMappingURL=permissionTagsApply.js.map

package/dist/engine/permissions/permissionTagsApply.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionTagsApply.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsApply.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAA+B,EAAE,IAAc;IAC/E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,qBAAqB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACtD,CAAC;IACL,CAAC;AACL,CAAC"}

package/dist/engine/permissions/permissionTagsApply.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=permissionTagsApply.spec.d.ts.map

package/dist/engine/permissions/permissionTagsApply.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionTagsApply.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsApply.spec.ts"],"names":[],"mappings":""}

package/dist/engine/permissions/permissionTagsApply.spec.js

@@ -1,22 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { permissionTagsApply } from "./permissionTagsApply.js";
-describe("permissionTagsApply", () => {
-    it("applies tags to permissions", () => {
-        const permissions = {
-            workspaceDir: "/workspace",
-            workingDir: "/tmp",
-            writeDirs: [],
-            readDirs: [],
-            network: false,
-            events: false
-        };
-        permissionTagsApply(permissions, ["@network", "@events", "@workspace", "@read:/tmp", "@write:/var/tmp"]);
-        expect(permissions.network).toBe(true);
-        expect(permissions.events).toBe(true);
-        expect(permissions.writeDirs).toContain("/workspace");
-        expect(permissions.readDirs).toContain("/tmp");
-        expect(permissions.readDirs).toContain("/var/tmp");
-        expect(permissions.writeDirs).toContain("/var/tmp");
-    });
-});
-//# sourceMappingURL=permissionTagsApply.spec.js.map

package/dist/engine/permissions/permissionTagsApply.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionTagsApply.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsApply.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACnC,MAAM,WAAW,GAAG;YAChB,YAAY,EAAE,YAAY;YAC1B,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC;QACF,mBAAmB,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACzG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/engine/permissions/permissionTagsNormalize.d.ts

@@ -1,6 +0,0 @@
-/**
- * Normalizes an unknown permissions list into unique permission tags.
- * Expects: entries are @network, @events, @workspace, @read:<path>, or @write:<path>.
- */
-export declare function permissionTagsNormalize(value: unknown): string[];
-//# sourceMappingURL=permissionTagsNormalize.d.ts.map

package/dist/engine/permissions/permissionTagsNormalize.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionTagsNormalize.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsNormalize.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAmChE"}

package/dist/engine/permissions/permissionTagsNormalize.js

@@ -1,43 +0,0 @@
-import { permissionAccessParse } from "./permissionAccessParse.js";
-/**
- * Normalizes an unknown permissions list into unique permission tags.
- * Expects: entries are @network, @events, @workspace, @read:<path>, or @write:<path>.
- */
-export function permissionTagsNormalize(value) {
-    if (!value) {
-        return [];
-    }
-    const entries = Array.isArray(value) ? value : [value];
-    const normalized = [];
-    const seen = new Set();
-    for (const entry of entries) {
-        if (typeof entry !== "string") {
-            continue;
-        }
-        const trimmed = entry.trim();
-        if (!trimmed) {
-            continue;
-        }
-        const access = permissionAccessParse(trimmed);
-        let tag;
-        if (access.kind === "network") {
-            tag = "@network";
-        }
-        else if (access.kind === "events") {
-            tag = "@events";
-        }
-        else if (access.kind === "workspace") {
-            tag = "@workspace";
-        }
-        else {
-            tag = `${access.kind === "read" ? "@read" : "@write"}:${access.path}`;
-        }
-        if (seen.has(tag)) {
-            continue;
-        }
-        seen.add(tag);
-        normalized.push(tag);
-    }
-    return normalized;
-}
-//# sourceMappingURL=permissionTagsNormalize.js.map

package/dist/engine/permissions/permissionTagsNormalize.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionTagsNormalize.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsNormalize.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAc;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,SAAS;QACb,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,SAAS;QACb,CAAC;QACD,MAAM,MAAM,GAAqB,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,GAAW,CAAC;QAChB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,GAAG,GAAG,UAAU,CAAC;QACrB,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,GAAG,GAAG,SAAS,CAAC;QACpB,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACrC,GAAG,GAAG,YAAY,CAAC;QACvB,CAAC;aAAM,CAAC;YACJ,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAChB,SAAS;QACb,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,UAAU,CAAC;AACtB,CAAC"}

package/dist/engine/permissions/permissionTagsNormalize.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=permissionTagsNormalize.spec.d.ts.map

package/dist/engine/permissions/permissionTagsNormalize.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionTagsNormalize.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsNormalize.spec.ts"],"names":[],"mappings":""}

package/dist/engine/permissions/permissionTagsNormalize.spec.js

@@ -1,19 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { permissionTagsNormalize } from "./permissionTagsNormalize.js";
-describe("permissionTagsNormalize", () => {
-    it("normalizes and dedupes permission tags", () => {
-        const result = permissionTagsNormalize([
-            " @network ",
-            "@events",
-            "@workspace",
-            "@read:/tmp",
-            "@read:/tmp",
-            "@write:/var/log"
-        ]);
-        expect(result).toEqual(["@network", "@events", "@workspace", "@read:/tmp", "@write:/var/log"]);
-    });
-    it("returns empty for missing values", () => {
-        expect(permissionTagsNormalize(undefined)).toEqual([]);
-    });
-});
-//# sourceMappingURL=permissionTagsNormalize.spec.js.map

package/dist/engine/permissions/permissionTagsNormalize.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionTagsNormalize.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsNormalize.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACnC,YAAY;YACZ,SAAS;YACT,YAAY;YACZ,YAAY;YACZ,YAAY;YACZ,iBAAiB;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/engine/permissions/permissionTagsValidate.d.ts

@@ -1,9 +0,0 @@
-import type { SessionPermissions } from "@/types";
-/**
- * Validates that all permission tags are allowed by current permissions.
- * Throws an error if any permission is not already held by the caller.
- *
- * Expects: tags are @network, @events, @workspace, @read:<path>, or @write:<path>.
- */
-export declare function permissionTagsValidate(permissions: SessionPermissions, tags: string[]): Promise<void>;
-//# sourceMappingURL=permissionTagsValidate.d.ts.map

package/dist/engine/permissions/permissionTagsValidate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionTagsValidate.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsValidate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAIlD;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ3G"}

package/dist/engine/permissions/permissionTagsValidate.js

@@ -1,18 +0,0 @@
-import { permissionAccessAllows } from "./permissionAccessAllows.js";
-import { permissionAccessParse } from "./permissionAccessParse.js";
-/**
- * Validates that all permission tags are allowed by current permissions.
- * Throws an error if any permission is not already held by the caller.
- *
- * Expects: tags are @network, @events, @workspace, @read:<path>, or @write:<path>.
- */
-export async function permissionTagsValidate(permissions, tags) {
-    for (const tag of tags) {
-        const access = permissionAccessParse(tag);
-        const allowed = await permissionAccessAllows(permissions, access);
-        if (!allowed) {
-            throw new Error(`Cannot attach permission '${tag}' - you don't have it.`);
-        }
-    }
-}
-//# sourceMappingURL=permissionTagsValidate.js.map

package/dist/engine/permissions/permissionTagsValidate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionTagsValidate.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsValidate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,WAA+B,EAAE,IAAc;IACxF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,wBAAwB,CAAC,CAAC;QAC9E,CAAC;IACL,CAAC;AACL,CAAC"}

package/dist/engine/permissions/permissionTagsValidate.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=permissionTagsValidate.spec.d.ts.map

package/dist/engine/permissions/permissionTagsValidate.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionTagsValidate.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsValidate.spec.ts"],"names":[],"mappings":""}

package/dist/engine/permissions/permissionTagsValidate.spec.js

@@ -1,96 +0,0 @@
-import { promises as fs } from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { afterEach, describe, expect, it } from "vitest";
-import { permissionTagsValidate } from "./permissionTagsValidate.js";
-describe("permissionTagsValidate", () => {
-    const tempDirs = [];
-    afterEach(async () => {
-        await Promise.all(tempDirs.map((dir) => fs.rm(dir, { recursive: true, force: true })));
-        tempDirs.length = 0;
-    });
-    it("allows tags the caller already has", async () => {
-        const dir = await fs.mkdtemp(path.join(os.tmpdir(), "perm-validate-"));
-        tempDirs.push(dir);
-        const target = path.join(dir, "file.txt");
-        await fs.writeFile(target, "ok", "utf8");
-        const permissions = {
-            workspaceDir: dir,
-            workingDir: dir,
-            writeDirs: [dir],
-            readDirs: [dir],
-            network: true,
-            events: true
-        };
-        // Should not throw
-        await permissionTagsValidate(permissions, [
-            "@network",
-            "@events",
-            "@workspace",
-            `@read:${target}`,
-            `@write:${dir}`
-        ]);
-    });
-    it("rejects network permission when caller lacks it", async () => {
-        const permissions = {
-            workingDir: "/tmp",
-            writeDirs: [],
-            readDirs: [],
-            network: false,
-            events: false
-        };
-        await expect(permissionTagsValidate(permissions, ["@network"])).rejects.toThrow("Cannot attach permission '@network' - you don't have it.");
-    });
-    it("rejects workspace permission when caller lacks it", async () => {
-        const permissions = {
-            workspaceDir: "/tmp/workspace",
-            workingDir: "/tmp/workspace/apps/my-app/data",
-            writeDirs: ["/tmp/workspace/apps/my-app/data"],
-            readDirs: ["/tmp/workspace"],
-            network: false,
-            events: false
-        };
-        await expect(permissionTagsValidate(permissions, ["@workspace"])).rejects.toThrow("Cannot attach permission '@workspace' - you don't have it.");
-    });
-    it("rejects events permission when caller lacks it", async () => {
-        const permissions = {
-            workingDir: "/tmp",
-            writeDirs: [],
-            readDirs: [],
-            network: false,
-            events: false
-        };
-        await expect(permissionTagsValidate(permissions, ["@events"])).rejects.toThrow("Cannot attach permission '@events' - you don't have it.");
-    });
-    it("rejects write permission outside allowed directories", async () => {
-        const permissions = {
-            workingDir: "/tmp",
-            writeDirs: ["/tmp"],
-            readDirs: [],
-            network: false,
-            events: false
-        };
-        await expect(permissionTagsValidate(permissions, ["@write:/etc"])).rejects.toThrow("Cannot attach permission '@write:/etc' - you don't have it.");
-    });
-    it("rejects read permission outside allowed directories", async () => {
-        const permissions = {
-            workingDir: "/tmp",
-            writeDirs: [],
-            readDirs: ["/tmp"],
-            network: false,
-            events: false
-        };
-        await expect(permissionTagsValidate(permissions, ["@read:/etc"])).rejects.toThrow("Cannot attach permission '@read:/etc' - you don't have it.");
-    });
-    it("allows read tags for any absolute path when readDirs are empty", async () => {
-        const permissions = {
-            workingDir: "/tmp",
-            writeDirs: [],
-            readDirs: [],
-            network: false,
-            events: false
-        };
-        await expect(permissionTagsValidate(permissions, ["@read:/etc"])).resolves.toBeUndefined();
-    });
-});
-//# sourceMappingURL=permissionTagsValidate.spec.js.map

package/dist/engine/permissions/permissionTagsValidate.spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionTagsValidate.spec.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionTagsValidate.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACpC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,SAAS,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvF,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACvE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC1C,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAEzC,MAAM,WAAW,GAAG;YAChB,YAAY,EAAE,GAAG;YACjB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,CAAC,GAAG,CAAC;YAChB,QAAQ,EAAE,CAAC,GAAG,CAAC;YACf,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI;SACf,CAAC;QAEF,mBAAmB;QACnB,MAAM,sBAAsB,CAAC,WAAW,EAAE;YACtC,UAAU;YACV,SAAS;YACT,YAAY;YACZ,SAAS,MAAM,EAAE;YACjB,UAAU,GAAG,EAAE;SAClB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,WAAW,GAAG;YAChB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC3E,0DAA0D,CAC7D,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,WAAW,GAAG;YAChB,YAAY,EAAE,gBAAgB;YAC9B,UAAU,EAAE,iCAAiC;YAC7C,SAAS,EAAE,CAAC,iCAAiC,CAAC;YAC9C,QAAQ,EAAE,CAAC,gBAAgB,CAAC;YAC5B,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC7E,4DAA4D,CAC/D,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,WAAW,GAAG;YAChB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC1E,yDAAyD,CAC5D,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,WAAW,GAAG;YAChB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC9E,6DAA6D,CAChE,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,WAAW,GAAG;YAChB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC7E,4DAA4D,CAC/D,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,WAAW,GAAG;YAChB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SAChB,CAAC;QAEF,MAAM,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IAC/F,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/engine/permissions/permissionWorkspaceGranted.d.ts

@@ -1,7 +0,0 @@
-import type { SessionPermissions } from "@/types";
-/**
- * Checks whether @workspace access is currently granted.
- * Expects: permissions are normalized absolute paths.
- */
-export declare function permissionWorkspaceGranted(permissions: SessionPermissions): boolean;
-//# sourceMappingURL=permissionWorkspaceGranted.d.ts.map

package/dist/engine/permissions/permissionWorkspaceGranted.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionWorkspaceGranted.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionWorkspaceGranted.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAIlD;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,kBAAkB,GAAG,OAAO,CAGnF"}

package/dist/engine/permissions/permissionWorkspaceGranted.js

@@ -1,12 +0,0 @@
-import path from "node:path";
-import { isWithinSecure } from "./pathResolveSecure.js";
-import { permissionWorkspacePathResolve } from "./permissionWorkspacePathResolve.js";
-/**
- * Checks whether @workspace access is currently granted.
- * Expects: permissions are normalized absolute paths.
- */
-export function permissionWorkspaceGranted(permissions) {
-    const workspacePath = permissionWorkspacePathResolve(permissions);
-    return permissions.writeDirs.some((entry) => isWithinSecure(path.resolve(entry), workspacePath));
-}
-//# sourceMappingURL=permissionWorkspaceGranted.js.map

package/dist/engine/permissions/permissionWorkspaceGranted.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionWorkspaceGranted.js","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionWorkspaceGranted.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AAErF;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,WAA+B;IACtE,MAAM,aAAa,GAAG,8BAA8B,CAAC,WAAW,CAAC,CAAC;IAClE,OAAO,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;AACrG,CAAC"}

package/dist/engine/permissions/permissionWorkspaceGranted.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=permissionWorkspaceGranted.spec.d.ts.map

package/dist/engine/permissions/permissionWorkspaceGranted.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"permissionWorkspaceGranted.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/permissions/permissionWorkspaceGranted.spec.ts"],"names":[],"mappings":""}