dsh-permission-rules 0.2.0

package/lib/types/index.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `dsh-permission-rules` — Claude Code-style declarative permission rules
+ * for DeepSeek Harness. A `tools/pre-execute` waterfall listener evaluates
+ * an ordered `allow`/`deny`/`ask` rule list (tool-name globs, argument
+ * glob/regex matching, workspace-path matching) per session cwd; deny and
+ * ask decisions short-circuit the chain, while allow and passthrough always
+ * delegate via `next()`. `ask` rides the official approval seam, where
+ * answerers such as `dsh-auto-review` or a human UI decide — the plugin
+ * itself never runs a reviewer. Every decision is audit-logged.
+ *
+ * Function plugin — no default export (the Loader unwraps
+ * `exports.default ?? exports`, and a stray default would discard
+ * `name`/`inject`/`Config`/`apply`).
+ * @module dsh-permission-rules
+ */
+import { apply } from './runtime.ts';
+export declare const name = "permission-rules";
+export declare const inject: string[];
+export { apply };
+export { PermissionRulesRuntime } from './runtime.ts';
+export * from './config.ts';
+export * from './events.ts';
+export * from './rules.ts';
+export * from './glob.ts';
+//# sourceMappingURL=index.d.ts.map

package/lib/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AAEpC,eAAO,MAAM,IAAI,qBAAqB,CAAA;AACtC,eAAO,MAAM,MAAM,UAAwB,CAAA;AAE3C,OAAO,EAAE,KAAK,EAAE,CAAA;AAChB,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,WAAW,CAAA"}

package/lib/types/index.js

@@ -0,0 +1,25 @@
+/**
+ * `dsh-permission-rules` — Claude Code-style declarative permission rules
+ * for DeepSeek Harness. A `tools/pre-execute` waterfall listener evaluates
+ * an ordered `allow`/`deny`/`ask` rule list (tool-name globs, argument
+ * glob/regex matching, workspace-path matching) per session cwd; deny and
+ * ask decisions short-circuit the chain, while allow and passthrough always
+ * delegate via `next()`. `ask` rides the official approval seam, where
+ * answerers such as `dsh-auto-review` or a human UI decide — the plugin
+ * itself never runs a reviewer. Every decision is audit-logged.
+ *
+ * Function plugin — no default export (the Loader unwraps
+ * `exports.default ?? exports`, and a stray default would discard
+ * `name`/`inject`/`Config`/`apply`).
+ * @module dsh-permission-rules
+ */
+import { apply } from "./runtime.js";
+export const name = 'permission-rules';
+export const inject = ['commands', 'tools'];
+export { apply };
+export { PermissionRulesRuntime } from "./runtime.js";
+export * from "./config.js";
+export * from "./events.js";
+export * from "./rules.js";
+export * from "./glob.js";
+//# sourceMappingURL=index.js.map

package/lib/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AAEpC,MAAM,CAAC,MAAM,IAAI,GAAG,kBAAkB,CAAA;AACtC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;AAE3C,OAAO,EAAE,KAAK,EAAE,CAAA;AAChB,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,YAAY,CAAA;AAC1B,cAAc,WAAW,CAAA"}

package/lib/types/prose.d.ts

@@ -0,0 +1,66 @@
+/**
+ * UI-facing prose for the `/rules` session command, per language. Only the
+ * command surface localizes: rule `reason`s are author-provided and are
+ * never translated, and logger diagnostics stay English for greppability.
+ * `en` and `zh` are the reference translations; `es`/`pt`/`hi` are
+ * community-quality.
+ * @module dsh-permission-rules/prose
+ */
+/** Supported command-output languages. */
+export type UiLanguage = 'en' | 'zh' | 'es' | 'pt' | 'hi';
+/** The localized strings one language provides for the command surface. */
+export interface UiProse {
+    /** Header line naming the active rules, their sources, and the workspace. */
+    rulesHeader: (count: number, sources: readonly string[], cwd: string) => string;
+    /** Line shown when no rule file is in effect. */
+    noRules: (cwd: string, fallbackNote: string) => string;
+    /** Note appended when a fallback path is configured but missing. */
+    fallbackMissing: string;
+    /** Success line of `/rules reload`. */
+    reloaded: (count: number, source: string) => string;
+    /** Error line of a failed reload. */
+    reloadFailed: (error: string) => string;
+    /** Warning appended to a listing whose last reload failed. */
+    lastReloadWarning: (error: string) => string;
+    /** Rejection of an unknown `/rules` argument. */
+    unknownArg: (arg: string) => string;
+    /** Usage hint. */
+    usage: string;
+    /** Header for `/rules decisions` when decisions exist. */
+    decisionsHeader: (shown: number, total: number) => string;
+    /** Line shown when the session log holds no audit decisions. */
+    noDecisions: string;
+    /** Rejection of a malformed decisions count. */
+    invalidDecisionsCount: (arg: string) => string;
+    /** One audit-decision row. */
+    decisionLine: (seq: number, action: string, toolName: string, ruleIndex: number | undefined, reason: string | undefined) => string;
+    /** Hit line of `/rules test`. */
+    testHit: (tool: string, ruleIndex: number, action: string, reason: string) => string;
+    /** No-match line of `/rules test`. */
+    testNoMatch: (tool: string) => string;
+    /** Rejection of unparseable `/rules test` JSON arguments. */
+    testBadJson: (text: string) => string;
+    /** Usage hint of `/rules test`. */
+    testUsage: string;
+    /** Warning naming shadowed (unreachable) rules by 1-based number. */
+    unreachableWarning: (numbers: readonly number[]) => string;
+    /** Empty-source placeholder in the rules header. */
+    emptySource: string;
+}
+/** Tokens `describeRule` uses for its match-dimension prefixes. */
+export interface DescribeTokens {
+    allTools: string;
+    tools: string;
+    params: string;
+    paths: string;
+    absent: string;
+    when: string;
+    platform: string;
+    disabled: string;
+    tags: string;
+}
+/** The localized prose tables by language. */
+export declare const UI_PROSE: Readonly<Record<UiLanguage, UiProse>>;
+/** `describeRule` match-dimension tokens by language. */
+export declare const DESCRIBE_TOKENS: Readonly<Record<UiLanguage, DescribeTokens>>;
+//# sourceMappingURL=prose.d.ts.map

package/lib/types/prose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prose.d.ts","sourceRoot":"","sources":["../../src/prose.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,0CAA0C;AAC1C,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAA;AAEzD,2EAA2E;AAC3E,MAAM,WAAW,OAAO;IACtB,6EAA6E;IAC7E,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IAC/E,iDAAiD;IACjD,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACtD,oEAAoE;IACpE,eAAe,EAAE,MAAM,CAAA;IACvB,uCAAuC;IACvC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IACnD,qCAAqC;IACrC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IACvC,8DAA8D;IAC9D,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IAC5C,iDAAiD;IACjD,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IACnC,kBAAkB;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,0DAA0D;IAC1D,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IACzD,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAA;IACnB,gDAAgD;IAChD,qBAAqB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IAC9C,8BAA8B;IAC9B,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,CAAA;IAClI,iCAAiC;IACjC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IACpF,sCAAsC;IACtC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,6DAA6D;IAC7D,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,qEAAqE;IACrE,kBAAkB,EAAE,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,CAAA;IAC1D,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb;AAoID,8CAA8C;AAC9C,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAA8C,CAAA;AAEzG,yDAAyD;AACzD,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAMxE,CAAA"}

package/lib/types/prose.js

@@ -0,0 +1,143 @@
+/**
+ * UI-facing prose for the `/rules` session command, per language. Only the
+ * command surface localizes: rule `reason`s are author-provided and are
+ * never translated, and logger diagnostics stay English for greppability.
+ * `en` and `zh` are the reference translations; `es`/`pt`/`hi` are
+ * community-quality.
+ * @module dsh-permission-rules/prose
+ */
+/** Truncate long reasons/descriptions in one-line displays. */
+function short(text, limit = 120) {
+    return text.length > limit ? `${text.slice(0, limit)}…` : text;
+}
+const EN = {
+    rulesHeader: (count, sources, cwd) => `Permission rules: ${count} rule(s) from ${sources.join(', ')} (workspace ${cwd}).`,
+    noRules: (cwd, fallbackNote) => `No permission rules active: no rule file found for workspace ${cwd}${fallbackNote}; the empty rule set passes everything through.`,
+    fallbackMissing: ' (and the configured fallback path is missing)',
+    reloaded: (count, source) => `Reloaded ${count} rule(s) from ${source}.`,
+    reloadFailed: error => `Reload failed: ${error}. The previous rules are still active.`,
+    lastReloadWarning: error => `Warning: the last reload failed (${error}); the rules listed above are the previous ones.`,
+    unknownArg: arg => `Unknown /rules argument "${arg}". ${EN.usage}`,
+    usage: 'Usage: /rules [reload | decisions [n] | test <tool> <json-args>]',
+    decisionsHeader: (shown, total) => `Last ${shown} of ${total} permission decision(s) for this session:`,
+    noDecisions: 'No permission decisions recorded in this session yet.',
+    invalidDecisionsCount: arg => `Invalid decisions count "${arg}": give a positive integer (default 10).`,
+    decisionLine: (seq, action, toolName, ruleIndex, reason) => {
+        const rule = ruleIndex === undefined ? '' : ` (rule ${ruleIndex + 1})`;
+        const why = reason === undefined ? '' : `: ${short(reason)}`;
+        return `- #${seq} ${action} ${toolName}${rule}${why}`;
+    },
+    testHit: (tool, ruleIndex, action, reason) => `"${tool}" matches rule ${ruleIndex + 1} (${action}): ${short(reason)}`,
+    testNoMatch: tool => `"${tool}" matches no rule — the call passes through.`,
+    testBadJson: text => `Invalid JSON arguments "${text}": the arguments must parse as JSON.`,
+    testUsage: 'Usage: /rules test <tool> <json-args>, e.g. /rules test bash {"command":"git push origin main"}',
+    unreachableWarning: numbers => `Warning: rule${numbers.length > 1 ? 's' : ''} ${numbers.join(', ')} ${numbers.length > 1 ? 'are' : 'is'} unreachable (shadowed by an earlier catch-all rule).`,
+    emptySource: '(no rule file — empty rule set)',
+};
+const ZH = {
+    rulesHeader: (count, sources, cwd) => `权限规则：共 ${count} 条，来自 ${sources.join('、')}（工作区 ${cwd}）。`,
+    noRules: (cwd, fallbackNote) => `当前没有生效的权限规则：工作区 ${cwd} 未找到规则文件${fallbackNote}；空规则集全部放行。`,
+    fallbackMissing: '（且配置的回退路径不存在）',
+    reloaded: (count, source) => `已重载 ${count} 条规则，来自 ${source}。`,
+    reloadFailed: error => `重载失败：${error}。之前的规则仍然生效。`,
+    lastReloadWarning: error => `警告：上次重载失败（${error}）；以上列出的是之前的规则。`,
+    unknownArg: arg => `未知的 /rules 参数 "${arg}"。${ZH.usage}`,
+    usage: '用法：/rules [reload | decisions [n] | test <工具名> <json-参数>]',
+    decisionsHeader: (shown, total) => `本会话最近 ${shown}/${total} 条权限裁决：`,
+    noDecisions: '本会话还没有记录任何权限裁决。',
+    invalidDecisionsCount: arg => `无效的裁决条数 "${arg}"：请给正整数（默认 10）。`,
+    decisionLine: (seq, action, toolName, ruleIndex, reason) => {
+        const rule = ruleIndex === undefined ? '' : `（规则 ${ruleIndex + 1}）`;
+        const why = reason === undefined ? '' : `：${short(reason)}`;
+        return `- #${seq} ${action} ${toolName}${rule}${why}`;
+    },
+    testHit: (tool, ruleIndex, action, reason) => `"${tool}" 命中规则 ${ruleIndex + 1}（${action}）：${short(reason)}`,
+    testNoMatch: tool => `"${tool}" 未命中任何规则——该调用将透传。`,
+    testBadJson: text => `无效的 JSON 参数 "${text}"：参数必须能被解析为 JSON。`,
+    testUsage: '用法：/rules test <工具名> <json-参数>，例如 /rules test bash {"command":"git push origin main"}',
+    unreachableWarning: numbers => `警告：规则 ${numbers.join('、')} 不可达（被前面的通配规则遮蔽）。`,
+    emptySource: '（无规则文件——空规则集）',
+};
+const ES = {
+    rulesHeader: (count, sources, cwd) => `Reglas de permiso: ${count} regla(s) desde ${sources.join(', ')} (espacio de trabajo ${cwd}).`,
+    noRules: (cwd, fallbackNote) => `No hay reglas de permiso activas: no se encontró archivo de reglas para el espacio de trabajo ${cwd}${fallbackNote}; el conjunto vacío lo permite todo.`,
+    fallbackMissing: ' (y la ruta de respaldo configurada no existe)',
+    reloaded: (count, source) => `Recargadas ${count} regla(s) desde ${source}.`,
+    reloadFailed: error => `Error de recarga: ${error}. Las reglas anteriores siguen activas.`,
+    lastReloadWarning: error => `Aviso: la última recarga falló (${error}); las reglas mostradas son las anteriores.`,
+    unknownArg: arg => `Argumento de /rules desconocido "${arg}". ${ES.usage}`,
+    usage: 'Uso: /rules [reload | decisions [n] | test <herramienta> <json-args>]',
+    decisionsHeader: (shown, total) => `Últimas ${shown} de ${total} decisión(es) de permiso de esta sesión:`,
+    noDecisions: 'Esta sesión aún no registra decisiones de permiso.',
+    invalidDecisionsCount: arg => `Cantidad de decisiones inválida "${arg}": indique un entero positivo (por defecto 10).`,
+    decisionLine: (seq, action, toolName, ruleIndex, reason) => {
+        const rule = ruleIndex === undefined ? '' : ` (regla ${ruleIndex + 1})`;
+        const why = reason === undefined ? '' : `: ${short(reason)}`;
+        return `- #${seq} ${action} ${toolName}${rule}${why}`;
+    },
+    testHit: (tool, ruleIndex, action, reason) => `"${tool}" coincide con la regla ${ruleIndex + 1} (${action}): ${short(reason)}`,
+    testNoMatch: tool => `"${tool}" no coincide con ninguna regla — la llamada pasa sin restricciones.`,
+    testBadJson: text => `Argumentos JSON inválidos "${text}": los argumentos deben poderse analizar como JSON.`,
+    testUsage: 'Uso: /rules test <herramienta> <json-args>, p. ej. /rules test bash {"command":"git push origin main"}',
+    unreachableWarning: numbers => `Aviso: ${numbers.length > 1 ? 'las reglas' : 'la regla'} ${numbers.join(', ')} ${numbers.length > 1 ? 'son inalcanzables' : 'es inalcanzable'} (tapada por una regla general anterior).`,
+    emptySource: '(sin archivo de reglas — conjunto vacío)',
+};
+const PT = {
+    rulesHeader: (count, sources, cwd) => `Regras de permissão: ${count} regra(s) de ${sources.join(', ')} (workspace ${cwd}).`,
+    noRules: (cwd, fallbackNote) => `Nenhuma regra de permissão ativa: nenhum arquivo de regras encontrado para o workspace ${cwd}${fallbackNote}; o conjunto vazio permite tudo.`,
+    fallbackMissing: ' (e o caminho de fallback configurado não existe)',
+    reloaded: (count, source) => `Recarregadas ${count} regra(s) de ${source}.`,
+    reloadFailed: error => `Falha ao recarregar: ${error}. As regras anteriores continuam ativas.`,
+    lastReloadWarning: error => `Aviso: a última recarga falhou (${error}); as regras listadas são as anteriores.`,
+    unknownArg: arg => `Argumento de /rules desconhecido "${arg}". ${PT.usage}`,
+    usage: 'Uso: /rules [reload | decisions [n] | test <ferramenta> <json-args>]',
+    decisionsHeader: (shown, total) => `Últimas ${shown} de ${total} decisão(ões) de permissão desta sessão:`,
+    noDecisions: 'Esta sessão ainda não registrou decisões de permissão.',
+    invalidDecisionsCount: arg => `Quantidade de decisões inválida "${arg}": informe um inteiro positivo (padrão 10).`,
+    decisionLine: (seq, action, toolName, ruleIndex, reason) => {
+        const rule = ruleIndex === undefined ? '' : ` (regra ${ruleIndex + 1})`;
+        const why = reason === undefined ? '' : `: ${short(reason)}`;
+        return `- #${seq} ${action} ${toolName}${rule}${why}`;
+    },
+    testHit: (tool, ruleIndex, action, reason) => `"${tool}" corresponde à regra ${ruleIndex + 1} (${action}): ${short(reason)}`,
+    testNoMatch: tool => `"${tool}" não corresponde a nenhuma regra — a chamada passa livremente.`,
+    testBadJson: text => `Argumentos JSON inválidos "${text}": os argumentos precisam ser JSON analisável.`,
+    testUsage: 'Uso: /rules test <ferramenta> <json-args>, ex.: /rules test bash {"command":"git push origin main"}',
+    unreachableWarning: numbers => `Aviso: ${numbers.length > 1 ? 'as regras' : 'a regra'} ${numbers.join(', ')} ${numbers.length > 1 ? 'são inalcançáveis' : 'é inalcançável'} (encoberta por uma regra geral anterior).`,
+    emptySource: '(sem arquivo de regras — conjunto vazio)',
+};
+const HI = {
+    rulesHeader: (count, sources, cwd) => `अनुमति नियम: ${count} नियम, स्रोत ${sources.join(', ')} (कार्यक्षेत्र ${cwd})।`,
+    noRules: (cwd, fallbackNote) => `कोई अनुमति नियम सक्रिय नहीं: कार्यक्षेत्र ${cwd} के लिए नियम फ़ाइल नहीं मिली${fallbackNote}; खाली नियम-समूह सब कुछ पास कर देता है।`,
+    fallbackMissing: ' (और कॉन्फ़िगर किया गया फ़ॉलबैक पथ मौजूद नहीं है)',
+    reloaded: (count, source) => `${count} नियम पुनः लोड किए गए, स्रोत ${source}।`,
+    reloadFailed: error => `पुनः लोड विफल: ${error}। पिछले नियम अब भी सक्रिय हैं।`,
+    lastReloadWarning: error => `चेतावनी: अंतिम पुनः लोड विफल रहा (${error}); ऊपर सूचीबद्ध नियम पिछले वाले हैं।`,
+    unknownArg: arg => `अज्ञात /rules तर्क "${arg}"। ${HI.usage}`,
+    usage: 'उपयोग: /rules [reload | decisions [n] | test <टूल> <json-args>]',
+    decisionsHeader: (shown, total) => `इस सत्र के अंतिम ${shown}/${total} अनुमति निर्णय:`,
+    noDecisions: 'इस सत्र में अभी कोई अनुमति निर्णय दर्ज नहीं है।',
+    invalidDecisionsCount: arg => `अमान्य निर्णय-संख्या "${arg}": एक धनात्मक पूर्णांक दें (डिफ़ॉल्ट 10)।`,
+    decisionLine: (seq, action, toolName, ruleIndex, reason) => {
+        const rule = ruleIndex === undefined ? '' : ` (नियम ${ruleIndex + 1})`;
+        const why = reason === undefined ? '' : `: ${short(reason)}`;
+        return `- #${seq} ${action} ${toolName}${rule}${why}`;
+    },
+    testHit: (tool, ruleIndex, action, reason) => `"${tool}" नियम ${ruleIndex + 1} से मेल खाता है (${action}): ${short(reason)}`,
+    testNoMatch: tool => `"${tool}" किसी नियम से मेल नहीं खाता — कॉल बिना रोक पास होगी।`,
+    testBadJson: text => `अमान्य JSON तर्क "${text}": तर्क JSON के रूप में पार्स होने चाहिए।`,
+    testUsage: 'उपयोग: /rules test <टूल> <json-args>, जैसे /rules test bash {"command":"git push origin main"}',
+    unreachableWarning: numbers => `चेतावनी: नियम ${numbers.join(', ')} अप्राप्य हैं (पहले वाले सर्व-मिलान नियम से ढके हुए)।`,
+    emptySource: '(कोई नियम फ़ाइल नहीं — खाली नियम-समूह)',
+};
+/** The localized prose tables by language. */
+export const UI_PROSE = { en: EN, zh: ZH, es: ES, pt: PT, hi: HI };
+/** `describeRule` match-dimension tokens by language. */
+export const DESCRIBE_TOKENS = {
+    en: { allTools: 'all tools', tools: 'tools', params: 'params', paths: 'paths', absent: 'absent', when: 'when', platform: 'platform', disabled: 'disabled', tags: 'tags' },
+    zh: { allTools: '全部工具', tools: '工具', params: '参数', paths: '路径', absent: '缺省键', when: '条件', platform: '平台', disabled: '已禁用', tags: '标签' },
+    es: { allTools: 'todas las herramientas', tools: 'herramientas', params: 'parámetros', paths: 'rutas', absent: 'ausentes', when: 'cuándo', platform: 'plataforma', disabled: 'deshabilitada', tags: 'etiquetas' },
+    pt: { allTools: 'todas as ferramentas', tools: 'ferramentas', params: 'parâmetros', paths: 'caminhos', absent: 'ausentes', when: 'quando', platform: 'plataforma', disabled: 'desativada', tags: 'etiquetas' },
+    hi: { allTools: 'सभी टूल', tools: 'टूल', params: 'पैरामीटर', paths: 'पथ', absent: 'अनुपस्थित', when: 'शर्त', platform: 'प्लेटफ़ॉर्म', disabled: 'अक्षम', tags: 'टैग' },
+};
+//# sourceMappingURL=prose.js.map

package/lib/types/prose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prose.js","sourceRoot":"","sources":["../../src/prose.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA0DH,+DAA+D;AAC/D,SAAS,KAAK,CAAC,IAAY,EAAE,KAAK,GAAG,GAAG;IACtC,OAAO,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;AAChE,CAAC;AAED,MAAM,EAAE,GAAY;IAClB,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,qBAAqB,KAAK,iBAAiB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI;IACzH,OAAO,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,gEAAgE,GAAG,GAAG,YAAY,iDAAiD;IACnK,eAAe,EAAE,gDAAgD;IACjE,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,YAAY,KAAK,iBAAiB,MAAM,GAAG;IACxE,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC,kBAAkB,KAAK,wCAAwC;IACtF,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,oCAAoC,KAAK,kDAAkD;IACvH,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,4BAA4B,GAAG,MAAM,EAAE,CAAC,KAAK,EAAE;IAClE,KAAK,EAAE,kEAAkE;IACzE,eAAe,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,KAAK,OAAO,KAAK,2CAA2C;IACvG,WAAW,EAAE,uDAAuD;IACpE,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,4BAA4B,GAAG,0CAA0C;IACvG,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;QACzD,MAAM,IAAI,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,SAAS,GAAG,CAAC,GAAG,CAAA;QACtE,MAAM,GAAG,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAA;QAC5D,OAAO,MAAM,GAAG,IAAI,MAAM,IAAI,QAAQ,GAAG,IAAI,GAAG,GAAG,EAAE,CAAA;IACvD,CAAC;IACD,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,kBAAkB,SAAS,GAAG,CAAC,KAAK,MAAM,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE;IACrH,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,8CAA8C;IAC3E,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,2BAA2B,IAAI,sCAAsC;IAC1F,SAAS,EAAE,iGAAiG;IAC5G,kBAAkB,EAAE,OAAO,CAAC,EAAE,CAAC,gBAAgB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,uDAAuD;IAC9L,WAAW,EAAE,iCAAiC;CAC/C,CAAA;AAED,MAAM,EAAE,GAAY;IAClB,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,UAAU,KAAK,SAAS,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI;IAC9F,OAAO,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,mBAAmB,GAAG,WAAW,YAAY,YAAY;IACzF,eAAe,EAAE,eAAe;IAChC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,KAAK,WAAW,MAAM,GAAG;IAC7D,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC,QAAQ,KAAK,aAAa;IACjD,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,aAAa,KAAK,gBAAgB;IAC9D,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,kBAAkB,GAAG,KAAK,EAAE,CAAC,KAAK,EAAE;IACvD,KAAK,EAAE,2DAA2D;IAClE,eAAe,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,KAAK,SAAS;IACnE,WAAW,EAAE,iBAAiB;IAC9B,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,YAAY,GAAG,iBAAiB;IAC9D,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;QACzD,MAAM,IAAI,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,SAAS,GAAG,CAAC,GAAG,CAAA;QACnE,MAAM,GAAG,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAA;QAC3D,OAAO,MAAM,GAAG,IAAI,MAAM,IAAI,QAAQ,GAAG,IAAI,GAAG,GAAG,EAAE,CAAA;IACvD,CAAC;IACD,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,UAAU,SAAS,GAAG,CAAC,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE;IAC3G,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,oBAAoB;IACjD,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,gBAAgB,IAAI,mBAAmB;IAC5D,SAAS,EAAE,uFAAuF;IAClG,kBAAkB,EAAE,OAAO,CAAC,EAAE,CAAC,SAAS,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB;IAC5E,WAAW,EAAE,eAAe;CAC7B,CAAA;AAED,MAAM,EAAE,GAAY;IAClB,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,sBAAsB,KAAK,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,GAAG,IAAI;IACrI,OAAO,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,iGAAiG,GAAG,GAAG,YAAY,sCAAsC;IACzL,eAAe,EAAE,gDAAgD;IACjE,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,cAAc,KAAK,mBAAmB,MAAM,GAAG;IAC5E,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC,qBAAqB,KAAK,yCAAyC;IAC1F,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,mCAAmC,KAAK,6CAA6C;IACjH,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,oCAAoC,GAAG,MAAM,EAAE,CAAC,KAAK,EAAE;IAC1E,KAAK,EAAE,uEAAuE;IAC9E,eAAe,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,KAAK,OAAO,KAAK,0CAA0C;IACzG,WAAW,EAAE,oDAAoD;IACjE,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,oCAAoC,GAAG,iDAAiD;IACtH,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;QACzD,MAAM,IAAI,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,SAAS,GAAG,CAAC,GAAG,CAAA;QACvE,MAAM,GAAG,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAA;QAC5D,OAAO,MAAM,GAAG,IAAI,MAAM,IAAI,QAAQ,GAAG,IAAI,GAAG,GAAG,EAAE,CAAA;IACvD,CAAC;IACD,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,2BAA2B,SAAS,GAAG,CAAC,KAAK,MAAM,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE;IAC9H,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,sEAAsE;IACnG,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,8BAA8B,IAAI,qDAAqD;IAC5G,SAAS,EAAE,wGAAwG;IACnH,kBAAkB,EAAE,OAAO,CAAC,EAAE,CAAC,UAAU,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,iBAAiB,2CAA2C;IACxN,WAAW,EAAE,0CAA0C;CACxD,CAAA;AAED,MAAM,EAAE,GAAY;IAClB,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,wBAAwB,KAAK,gBAAgB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI;IAC3H,OAAO,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,0FAA0F,GAAG,GAAG,YAAY,kCAAkC;IAC9K,eAAe,EAAE,mDAAmD;IACpE,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,gBAAgB,KAAK,gBAAgB,MAAM,GAAG;IAC3E,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC,wBAAwB,KAAK,0CAA0C;IAC9F,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,mCAAmC,KAAK,0CAA0C;IAC9G,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,qCAAqC,GAAG,MAAM,EAAE,CAAC,KAAK,EAAE;IAC3E,KAAK,EAAE,sEAAsE;IAC7E,eAAe,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,KAAK,OAAO,KAAK,0CAA0C;IACzG,WAAW,EAAE,wDAAwD;IACrE,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,oCAAoC,GAAG,6CAA6C;IAClH,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;QACzD,MAAM,IAAI,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,SAAS,GAAG,CAAC,GAAG,CAAA;QACvE,MAAM,GAAG,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAA;QAC5D,OAAO,MAAM,GAAG,IAAI,MAAM,IAAI,QAAQ,GAAG,IAAI,GAAG,GAAG,EAAE,CAAA;IACvD,CAAC;IACD,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,yBAAyB,SAAS,GAAG,CAAC,KAAK,MAAM,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE;IAC5H,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,iEAAiE;IAC9F,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,8BAA8B,IAAI,gDAAgD;IACvG,SAAS,EAAE,qGAAqG;IAChH,kBAAkB,EAAE,OAAO,CAAC,EAAE,CAAC,UAAU,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,4CAA4C;IACtN,WAAW,EAAE,0CAA0C;CACxD,CAAA;AAED,MAAM,EAAE,GAAY;IAClB,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,gBAAgB,KAAK,gBAAgB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,GAAG,IAAI;IACtH,OAAO,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,6CAA6C,GAAG,+BAA+B,YAAY,yCAAyC;IACpK,eAAe,EAAE,mDAAmD;IACpE,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,KAAK,gCAAgC,MAAM,GAAG;IAC9E,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC,kBAAkB,KAAK,gCAAgC;IAC9E,iBAAiB,EAAE,KAAK,CAAC,EAAE,CAAC,qCAAqC,KAAK,sCAAsC;IAC5G,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,uBAAuB,GAAG,MAAM,EAAE,CAAC,KAAK,EAAE;IAC7D,KAAK,EAAE,iEAAiE;IACxE,eAAe,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,KAAK,IAAI,KAAK,iBAAiB;IACtF,WAAW,EAAE,iDAAiD;IAC9D,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,yBAAyB,GAAG,2CAA2C;IACrG,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;QACzD,MAAM,IAAI,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,SAAS,GAAG,CAAC,GAAG,CAAA;QACtE,MAAM,GAAG,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAA;QAC5D,OAAO,MAAM,GAAG,IAAI,MAAM,IAAI,QAAQ,GAAG,IAAI,GAAG,GAAG,EAAE,CAAA;IACvD,CAAC;IACD,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,UAAU,SAAS,GAAG,CAAC,oBAAoB,MAAM,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE;IAC5H,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,uDAAuD;IACpF,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,qBAAqB,IAAI,2CAA2C;IACzF,SAAS,EAAE,gGAAgG;IAC3G,kBAAkB,EAAE,OAAO,CAAC,EAAE,CAAC,iBAAiB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,uDAAuD;IACzH,WAAW,EAAE,wCAAwC;CACtD,CAAA;AAED,8CAA8C;AAC9C,MAAM,CAAC,MAAM,QAAQ,GAA0C,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAA;AAEzG,yDAAyD;AACzD,MAAM,CAAC,MAAM,eAAe,GAAiD;IAC3E,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IACzK,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE;IACxI,EAAE,EAAE,EAAE,QAAQ,EAAE,wBAAwB,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE;IACjN,EAAE,EAAE,EAAE,QAAQ,EAAE,sBAAsB,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE;IAC9M,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE;CACvK,CAAA"}

package/lib/types/rules.d.ts

@@ -0,0 +1,226 @@
+/**
+ * The pure rule vocabulary: parsing a `.dsh/rules.yaml` document into a
+ * validated {@link RulesFileDoc}, compiling patterns, and first-match
+ * evaluation. Every function here is pure — no filesystem, clock, or
+ * process state — so the parser, the matcher, and the failure modes are all
+ * unit-testable and replayable.
+ * @module dsh-permission-rules/rules
+ */
+/** What one matched rule does to a pending tool call. */
+export type RuleAction = 'allow' | 'deny' | 'ask';
+/** How param, path, and env patterns are interpreted. */
+export type PatternMode = 'glob' | 'regex';
+/** Closed action list for runtime normalization of untrusted values. */
+export declare const RULE_ACTIONS: readonly RuleAction[];
+/** Platform names a `when.platform` entry may name (Node `process.platform` values). */
+export declare const PLATFORMS: readonly string[];
+/**
+ * Raised when a rule document cannot be parsed or compiled. The message
+ * names the failing rule and field; loading code maps it onto the
+ * `badFilePolicy`.
+ */
+export declare class RuleError extends Error {
+    constructor(message: string);
+}
+/** A parsed, shape-validated rule document (patterns not yet compiled). */
+export interface RulesFileDoc {
+    rules: RuleDocEntry[];
+}
+/** One parsed rule: match dimensions plus the action, reason, and metadata. */
+export interface RuleDocEntry {
+    match: RuleMatchDoc;
+    action: RuleAction;
+    reason: string;
+    /** `false` keeps the rule visible but inert (displayed as disabled). */
+    enabled: boolean;
+    /** Optional one-line explanation shown by `/rules`. */
+    description?: string;
+    /** Free-form labels shown by `/rules`. */
+    tags: string[];
+}
+/** The parsed match dimensions; absent dimensions are empty (= no restriction). */
+export interface RuleMatchDoc {
+    /** Tool-name globs; empty matches every tool. */
+    tools: string[];
+    /** Param key → patterns; EVERY key must be present and match (AND). A `!`-prefixed pattern negates. */
+    params: Record<string, string[]>;
+    /** Workspace-path globs/regexes; ANY candidate matching ANY pattern satisfies the dimension. */
+    paths: string[];
+    /** Argument keys that must be ABSENT; every listed key must be missing. */
+    absent: string[];
+    /** Environment/platform conditions; every listed env key must be present and match. */
+    when: WhenDoc;
+}
+/** The parsed `when` conditions. */
+export interface WhenDoc {
+    /** Env var name → glob/regex patterns; EVERY key must be present and match (AND). */
+    env: Record<string, string[]>;
+    /** Platform names; ANY match satisfies the dimension. */
+    platform: string[];
+}
+/** One compiled rule, ready for the `tools/pre-execute` hot path. */
+export interface CompiledRule {
+    /** 0-based position in the merged rule chain. */
+    readonly index: number;
+    /** 0-based index into the merged source-chain paths (audit attribution). */
+    readonly sourceIndex: number;
+    readonly action: RuleAction;
+    readonly reason: string;
+    readonly enabled: boolean;
+    readonly description?: string;
+    readonly tags: readonly string[];
+    readonly tools: readonly RegExp[];
+    /** Param key → positive/negative pattern lists. */
+    readonly params: ReadonlyMap<string, {
+        positive: readonly RegExp[];
+        negative: readonly RegExp[];
+    }>;
+    readonly paths: readonly RegExp[];
+    readonly absent: readonly string[];
+    readonly when?: {
+        readonly env: ReadonlyMap<string, readonly RegExp[]>;
+        readonly platform: readonly string[];
+    };
+    /** The original source strings, kept for the `/rules` display. */
+    readonly source: RuleDocEntry;
+}
+/** A compiled, size-capped ruleset. */
+export interface CompiledRuleset {
+    readonly rules: readonly CompiledRule[];
+    /** Whether path patterns (and workspace-path normalization) ignore ASCII case. */
+    readonly caseInsensitivePaths: boolean;
+}
+/** Compile options for {@link compileRules}. */
+export interface CompileOptions {
+    /** Glob or regex interpretation of `params`/`paths`/`when.env` patterns. */
+    readonly patternMode: PatternMode;
+    /** Hard cap on rule count; exceeding it fails the compile loudly. */
+    readonly maxRules: number;
+    /** Hard cap on unbounded glob-star quantifiers per pattern (ReDoS degree bound). */
+    readonly maxGlobStars: number;
+    /** Whether path patterns compile with the `i` flag. */
+    readonly caseInsensitivePaths: boolean;
+}
+/** One rule-file text for {@link compileRulesChain}. */
+export interface RulesChainEntry {
+    /** Absolute rule-file path, for audit attribution and error messages. */
+    readonly path: string;
+    /** The raw YAML text. */
+    readonly text: string;
+}
+/** Host facts a `when` dimension evaluates against. */
+export interface MatchContext {
+    /** Node platform name; defaults to `process.platform` when omitted. */
+    readonly platform?: string;
+    /** Environment table; defaults to `process.env` when omitted. */
+    readonly env?: Readonly<Record<string, string | undefined>>;
+}
+/**
+ * Parse one rules file body. Unknown document/rule/match fields, invalid
+ * actions, missing reasons, and wrong-shaped collections all throw
+ * {@link RuleError} — a malformed file fails loudly at load, never silently.
+ * @param text - the raw YAML text.
+ * @returns the validated document.
+ */
+export declare function parseRulesDocument(text: string): RulesFileDoc;
+/**
+ * Compile a parsed document for the hot path: pattern strings become
+ * RegExps (invalid globs/regexes throw here, at load), and the rule count
+ * is capped by `maxRules`.
+ * @param doc - the parsed document.
+ * @param options - pattern mode, caps, and case handling.
+ * @returns the compiled ruleset (every rule attributed to source 0).
+ */
+export declare function compileRules(doc: RulesFileDoc, options: CompileOptions): CompiledRuleset;
+/**
+ * Parse and compile an ordered source chain (nearest file first). Rules
+ * keep per-file order and are evaluated in chain order, so a nearer file
+ * can override a farther one on first-match semantics; `sourceIndex`
+ * attributes every rule to its file. The TOTAL rule count is capped by
+ * `maxRules`.
+ * @param entries - the rule-file texts, nearest file first.
+ * @param options - compile options.
+ * @returns the merged ruleset and the source paths it references.
+ */
+export declare function compileRulesChain(entries: readonly RulesChainEntry[], options: CompileOptions): {
+    ruleset: CompiledRuleset;
+    sources: string[];
+};
+/** A matched rule: its index and the compiled rule that fired. */
+export interface RuleHit {
+    /** 0-based index of the first matching rule. */
+    readonly ruleIndex: number;
+    readonly rule: CompiledRule;
+}
+/**
+ * Evaluate rules in order against one pending tool call. First match wins;
+ * no match returns `undefined` (passthrough). Pure and synchronous — this
+ * is the `tools/pre-execute` hot path, so it runs no I/O.
+ * @param ruleset - compiled rules.
+ * @param toolName - the tool being called.
+ * @param args - the parsed (JSON) tool arguments; non-object values satisfy
+ *   only tools/when/absent rules.
+ * @param cwd - the session's absolute workspace root, for path normalization.
+ * @param context - host facts for `when` evaluation; defaults resolve at match time.
+ * @returns the first hit, or undefined when every rule passed.
+ */
+export declare function matchRules(ruleset: CompiledRuleset, toolName: string, args: unknown, cwd: string, context?: MatchContext): RuleHit | undefined;
+/**
+ * Indices of rules that can never fire: every ENABLED rule after the first
+ * enabled rule whose every dimension is empty (an unconditional catch-all).
+ * Disabled rules are excluded from both roles. Conservative on purpose —
+ * pattern-set inclusion across globs is not analyzed.
+ * @param ruleset - the compiled rules.
+ * @returns 0-based indices of unreachable rules.
+ */
+export declare function findUnreachableRules(ruleset: CompiledRuleset): number[];
+/**
+ * One-line human summary of a compiled rule, for `/rules` output. The
+ * 1-based number, action, match dimensions, and reason render first; a
+ * disabled marker, tags, and a truncated description follow.
+ * @param rule - the compiled rule.
+ * @param tokens - dimension-prefix vocabulary for the configured language.
+ * @returns a single display line.
+ */
+export declare function describeRule(rule: CompiledRule, tokens: DescribeTokens): string;
+/** The localized dimension-prefix vocabulary {@link describeRule} renders. */
+export interface DescribeTokens {
+    readonly allTools: string;
+    readonly tools: string;
+    readonly params: string;
+    readonly paths: string;
+    readonly absent: string;
+    readonly when: string;
+    readonly platform: string;
+    readonly disabled: string;
+    readonly tags: string;
+}
+/** Top-level argument keys whose string values are path candidates. */
+export declare const PATH_CANDIDATE_KEYS: readonly string[];
+/**
+ * Collect path-candidate strings from tool arguments at ANY nesting depth
+ * (capped at {@link MAX_ARGUMENT_DEPTH}): scalar strings under the
+ * documented {@link PATH_CANDIDATE_KEYS}, plus string elements of arrays
+ * under those keys. Nested objects are walked so MCP-style
+ * `{ arguments: { path } }` shapes still feed path matching. Iterates the
+ * argument object's own key order, so extraction order is deterministic.
+ * @param args - the parsed tool arguments.
+ * @returns candidate strings in argument key order (duplicates kept).
+ */
+export declare function extractPathCandidates(args: Record<string, unknown>): string[];
+/**
+ * Normalize one candidate path against the workspace root: separators
+ * become `/`, `./` prefixes drop, and in-root paths become workspace
+ * relative. Candidates OUTSIDE the root (absolute or drive-prefixed
+ * elsewhere) yield `''` — path patterns address workspace-relative paths
+ * only; a still-relative `../…` input is kept so explicit out-of-root
+ * globs like `../shared/**` can address it. When `caseInsensitive` is set
+ * (Windows default), the drive and root-prefix comparisons ignore ASCII
+ * case, matching the case-insensitive filesystem.
+ * @param cwd - the session's absolute workspace root (any separator).
+ * @param candidate - the raw candidate path.
+ * @param caseInsensitive - compare root prefixes without ASCII case.
+ * @returns the workspace-relative posix path, or `''` to drop the candidate.
+ */
+export declare function normalizeWorkspacePath(cwd: string, candidate: string, caseInsensitive?: boolean): string;
+//# sourceMappingURL=rules.d.ts.map

package/lib/types/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../src/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,yDAAyD;AACzD,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAA;AAEjD,yDAAyD;AACzD,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,OAAO,CAAA;AAE1C,wEAAwE;AACxE,eAAO,MAAM,YAAY,EAAE,SAAS,UAAU,EAA6B,CAAA;AAE3E,wFAAwF;AACxF,eAAO,MAAM,SAAS,EAAE,SAAS,MAAM,EAAkF,CAAA;AAQzH;;;;GAIG;AACH,qBAAa,SAAU,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM;CAI5B;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,YAAY,EAAE,CAAA;CACtB;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,YAAY,CAAA;IACnB,MAAM,EAAE,UAAU,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAA;IAChB,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,EAAE,CAAA;CACf;AAED,mFAAmF;AACnF,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,uGAAuG;IACvG,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAChC,gGAAgG;IAChG,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,2EAA2E;IAC3E,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,uFAAuF;IACvF,IAAI,EAAE,OAAO,CAAA;CACd;AAED,oCAAoC;AACpC,MAAM,WAAW,OAAO;IACtB,qFAAqF;IACrF,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAC7B,yDAAyD;IACzD,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,qEAAqE;AACrE,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,mDAAmD;IACnD,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;IAClG,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE;QACd,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAA;QACpD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;KACrC,CAAA;IACD,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAC9B;AAED,uCAAuC;AACvC,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAA;IACvC,kFAAkF;IAClF,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;CACvC;AAED,gDAAgD;AAChD,MAAM,WAAW,cAAc;IAC7B,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,oFAAoF;IACpF,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,uDAAuD;IACvD,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;CACvC;AAED,wDAAwD;AACxD,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,yBAAyB;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,iEAAiE;IACjE,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;CAC5D;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAa7D;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,GAAG,eAAe,CAQxF;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,EAAE,OAAO,EAAE,cAAc,GAAG;IAAE,OAAO,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAa/I;AA+BD,kEAAkE;AAClE,MAAM,WAAW,OAAO;IACtB,gDAAgD;IAChD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;CAC5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,YAAiB,GACzB,OAAO,GAAG,SAAS,CAYrB;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,EAAE,CAYvE;AAOD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,GAAG,MAAM,CAmB/E;AAED,8EAA8E;AAC9E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAiPD,uEAAuE;AACvE,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAehD,CAAA;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAuB7E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,UAAQ,GAAG,MAAM,CAiBtG"}