dsh-permission-rules 0.7.21 → 0.7.22

package/lib/index.js

@@ -512,44 +512,123 @@ var RuleError = class extends Error {
 * Parse one rules file body. Unknown document/rule/match fields, invalid
 * actions, missing reasons, and wrong-shaped collections all throw
 * {@link RuleError} — a malformed file fails loudly at load, never silently.
+* This is the STRICT shape: editor saves use it so a hand edit is refused
+* with its error instead of being silently dropped. The loader uses
+* {@link parseRulesDocumentIsolated} instead, where one bad rule disables
+* only itself.
 * @param text - the raw YAML text.
 * @returns the validated document.
 */
 function parseRulesDocument(text) {
+	return { rules: parseRulesSection(text).map((raw, index) => parseRuleEntry(raw, index)) };
+}
+/**
+* Parse one rules file body with per-rule isolation (issue #49): a rule
+* whose shape is invalid is skipped and reported in
+* {@link RulesFileDoc.issues}, and every other rule still loads. Document
+* STRUCTURE errors (invalid YAML, an unknown top-level field, a `rules`
+* value that is not a list) are still file-level and throw: they leave no
+* rule list to isolate.
+* @param text - the raw YAML text.
+* @returns the validated document plus the skipped-rule reports.
+*/
+function parseRulesDocumentIsolated(text) {
+	const rules = [];
+	const issues = [];
+	parseRulesSection(text).forEach((raw, index) => {
+		try {
+			rules.push(parseRuleEntry(raw, index));
+		} catch (error) {
+			issues.push({
+				index,
+				message: ruleErrorMessage(error)
+			});
+		}
+	});
+	return issues.length === 0 ? { rules } : {
+		rules,
+		issues
+	};
+}
+/**
+* Parse the document SHELL: validate the YAML, the top-level mapping, and
+* the `rules` list, returning the raw rule entries. Everything below this
+* level can be isolated per rule.
+*/
+function parseRulesSection(text) {
 	const parsed = parseYaml(normalizeLineEndings(text));
-	if (parsed === null || parsed === void 0) return { rules: [] };
+	if (parsed === null || parsed === void 0) return [];
 	const root = asRecord(parsed, "rules document root");
 	const unknownRoot = Object.keys(root).filter((key) => key !== "rules");
 	if (unknownRoot.length > 0) throw new RuleError(`unknown top-level field${unknownRoot.length > 1 ? "s" : ""} ${unknownRoot.map((k) => JSON.stringify(k)).join(", ")} (only "rules" is allowed)`);
 	const rawRules = root["rules"];
-	if (rawRules === void 0) return { rules: [] };
+	if (rawRules === void 0) return [];
 	if (!Array.isArray(rawRules)) throw new RuleError("\"rules\" must be a list");
-	return { rules: rawRules.map((raw, index) => parseRuleEntry(raw, index)) };
+	return rawRules;
+}
+/** One error's message, for an isolated-rule report. */
+function ruleErrorMessage(error) {
+	return error instanceof Error ? error.message : String(error);
 }
 /**
-* Compile a parsed document for the hot path: pattern strings become
-* RegExps (invalid globs/regexes throw here, at load), and the rule count
-* is capped by `maxRules`.
+* Compile a parsed document for the hot path STRICTLY: pattern strings
+* become RegExps (invalid globs/regexes throw here), and the rule count is
+* capped by `maxRules`. Used by editor saves (and the generated allow-host
+* rule), so a hand edit never has a rule silently dropped. The loader uses
+* {@link compileRulesText} instead.
 * @param doc - the parsed document.
 * @param options - pattern mode, caps, and case handling.
 * @returns the compiled ruleset (every rule attributed to source 0).
 */
 function compileRules(doc, options) {
 	if (doc.rules.length > options.maxRules) throw new RuleError(`rule count ${doc.rules.length} exceeds maxRules ${options.maxRules}`);
-	return mergeCompiledRules([compileSourceRules(doc, options)], options);
+	return mergeCompiledRules([doc.rules.map((entry) => compileRule(entry, 0, options))], options);
 }
 /**
-* Compile one parsed document into per-source compiled rules. The returned
-* rules carry source-local `index` values and `sourceIndex` 0 — the
-* cacheable unit a runtime can reuse across chains (keyed by source path +
-* content hash). The total-count cap is NOT applied here; it bounds the
-* merged chain in {@link mergeCompiledRules}.
-* @param doc - the parsed document.
+* Compile one parsed document into per-source compiled rules with
+* per-rule isolation (issue #49): a rule whose patterns cannot compile is
+* disabled and reported in {@link CompiledSourceRules.issues}, while every
+* other rule still loads. The returned rules carry source-local `index`
+* values and `sourceIndex` 0 — the cacheable unit a runtime can reuse
+* across chains (keyed by source path + content hash). The total-count cap
+* is NOT applied here; it bounds the merged chain in
+* {@link mergeCompiledRules}.
+* @param doc - the parsed document (isolated or strict).
 * @param options - compile options.
-* @returns the compiled rules of one source.
+* @returns the compiled rules of one source plus the disabled-rule reports.
 */
 function compileSourceRules(doc, options) {
-	return doc.rules.map((entry, index) => compileRule(entry, index, 0, options));
+	const rules = [];
+	const issues = [...doc.issues ?? []];
+	for (const entry of doc.rules) try {
+		rules.push(compileRule(entry, 0, options));
+	} catch (error) {
+		issues.push({
+			index: entry.index,
+			message: ruleErrorMessage(error)
+		});
+	}
+	issues.sort((left, right) => left.index - right.index);
+	return {
+		rules,
+		issues
+	};
+}
+/**
+* Parse and compile one rule-file text with per-rule isolation — the
+* loader-facing entry point for issue #49. A bad rule disables only itself
+* (reported with its 0-based document index); the rest of the file stays
+* active. A file-level failure still throws, so `badFilePolicy` keeps
+* choosing how a whole unreadable/unparseable file is handled.
+* @param text - the raw YAML text.
+* @param options - compile options.
+* @returns the compiled rules plus the disabled-rule reports.
+*/
+function compileRulesText(text, options) {
+	const doc = parseRulesDocumentIsolated(text);
+	const total = doc.rules.length + (doc.issues?.length ?? 0);
+	if (total > options.maxRules) throw new RuleError(`rule count ${total} exceeds maxRules ${options.maxRules}`);
+	return compileSourceRules(doc, options);
 }
 /**
 * Merge per-source compiled rule lists into one chain, assigning the
@@ -575,11 +654,13 @@ function mergeCompiledRules(sources, options) {
 	};
 }
 /**
-* Parse and compile an ordered source chain (nearest file first). Rules
-* keep per-file order and are evaluated in chain order, so a nearer file
-* can override a farther one on first-match semantics; `sourceIndex`
+* Parse and compile an ordered source chain (nearest file first) STRICTLY.
+* Rules keep per-file order and are evaluated in chain order, so a nearer
+* file can override a farther one on first-match semantics; `sourceIndex`
 * attributes every rule to its file. The TOTAL rule count is capped by
-* `maxRules`.
+* `maxRules`. The plugin's loader does not use this helper — it compiles
+* each file through {@link compileRulesText} so one bad rule cannot take
+* the chain down.
 * @param entries - the rule-file texts, nearest file first.
 * @param options - compile options.
 * @returns the merged ruleset and the source paths it references.
@@ -587,12 +668,12 @@ function mergeCompiledRules(sources, options) {
 function compileRulesChain(entries, options) {
 	const sources = entries.map((entry) => entry.path);
 	return {
-		ruleset: mergeCompiledRules(entries.map((entry) => compileSourceRules(parseRulesDocument(entry.text), options)), options),
+		ruleset: mergeCompiledRules(entries.map((entry) => parseRulesDocument(entry.text).rules.map((rule) => compileRule(rule, 0, options))), options),
 		sources
 	};
 }
 /** Compile one parsed rule into its hot-path form. */
-function compileRule(entry, index, sourceIndex, options) {
+function compileRule(entry, sourceIndex, options) {
 	const tools = entry.match.tools.map((pattern) => compileToolPattern(pattern, options.maxGlobStars));
 	const agents = entry.match.agents.map((pattern) => compileToolPattern(pattern, options.maxGlobStars));
 	const params = /* @__PURE__ */ new Map();
@@ -602,7 +683,7 @@ function compileRule(entry, index, sourceIndex, options) {
 	for (const [key, patterns] of Object.entries(entry.match.when.env)) env.set(key, patterns.map((pattern) => compileValuePattern(pattern, options.patternMode, options.maxGlobStars)));
 	const argv = entry.match.argv === void 0 ? void 0 : compileArgv(entry.match.argv, options);
 	return {
-		index,
+		index: entry.index,
 		sourceIndex,
 		action: entry.action,
 		reason: entry.reason,
@@ -917,6 +998,7 @@ function parseRuleEntry(raw, index) {
 	const description = record["description"];
 	if (description !== void 0 && (typeof description !== "string" || description.trim().length === 0)) throw new RuleError(`${at}: description must be a non-empty string`);
 	return {
+		index,
 		match: parseMatch(record["match"], at),
 		action,
 		reason,
@@ -2132,6 +2214,9 @@ const EN = {
 	reloaded: (count, source) => `Reloaded ${count} rule(s) from ${source}.`,
 	reloadFailed: (error) => `Reload failed: ${error}. The previous rules are still active.`,
 	lastReloadWarning: (error) => `Warning: the last reload failed (${error}); the rules listed above are the previous ones.`,
+	degradedRules: (disabled, active) => `Warning: ${disabled} rule(s) could not be loaded and are disabled; the other ${active} rule(s) stay active:`,
+	ruleIssueLine: (source, index, message) => `- ${source.length > 0 ? source : "(unknown file)"}: rule ${index + 1} (disabled): ${message}`,
+	reloadDegraded: (active, source, disabled) => `Reloaded ${active} rule(s) from ${source}; ${disabled} rule(s) are disabled by load errors — fix the entries below and run /rules reload:`,
 	dryRunNotice: "Dry-run mode (enforce: false): deny/ask hits are audit-logged only — every call is passed through.",
 	unknownArg: (arg) => `Unknown /rules argument "${arg}". ${EN.usage}`,
 	usage: "Usage: /rules [list | reload | network | decisions [n] | test <tool> <json-args>]",
@@ -2167,6 +2252,9 @@ const ZH = {
 	reloaded: (count, source) => `已重载 ${count} 条规则，来自 ${source}。`,
 	reloadFailed: (error) => `重载失败：${error}。之前的规则仍然生效。`,
 	lastReloadWarning: (error) => `警告：上次重载失败（${error}）；以上列出的是之前的规则。`,
+	degradedRules: (disabled, active) => `警告：${disabled} 条规则无法加载，已禁用；其余 ${active} 条仍然生效：`,
+	ruleIssueLine: (source, index, message) => `- ${source.length > 0 ? source : "（未知文件）"}：第 ${index + 1} 条（已禁用）：${message}`,
+	reloadDegraded: (active, source, disabled) => `已重载 ${active} 条规则，来自 ${source}；另有 ${disabled} 条因加载错误被禁用——请修正下列条目后执行 /rules reload：`,
 	dryRunNotice: "干跑模式（enforce: false）：deny/ask 命中仅写入审计日志——所有调用照常透传。",
 	unknownArg: (arg) => `未知的 /rules 参数 "${arg}"。${ZH.usage}`,
 	usage: "用法：/rules [list | reload | network | decisions [n] | test <工具名> <json-参数>]",
@@ -2202,6 +2290,9 @@ const ES = {
 	reloaded: (count, source) => `Recargadas ${count} regla(s) desde ${source}.`,
 	reloadFailed: (error) => `Error de recarga: ${error}. Las reglas anteriores siguen activas.`,
 	lastReloadWarning: (error) => `Aviso: la última recarga falló (${error}); las reglas mostradas son las anteriores.`,
+	degradedRules: (disabled, active) => `Aviso: ${disabled} regla(s) no se pudieron cargar y están deshabilitadas; las otras ${active} siguen activas:`,
+	ruleIssueLine: (source, index, message) => `- ${source.length > 0 ? source : "(archivo desconocido)"}: regla ${index + 1} (deshabilitada): ${message}`,
+	reloadDegraded: (active, source, disabled) => `Recargadas ${active} regla(s) desde ${source}; ${disabled} regla(s) están deshabilitadas por errores de carga — corrige las entradas siguientes y ejecuta /rules reload:`,
 	dryRunNotice: "Modo simulación (enforce: false): los aciertos deny/ask solo se registran en auditoría — todas las llamadas pasan.",
 	unknownArg: (arg) => `Argumento de /rules desconocido "${arg}". ${ES.usage}`,
 	usage: "Uso: /rules [list | reload | network | decisions [n] | test <herramienta> <json-args>]",
@@ -2237,6 +2328,9 @@ const PT = {
 	reloaded: (count, source) => `Recarregadas ${count} regra(s) de ${source}.`,
 	reloadFailed: (error) => `Falha ao recarregar: ${error}. As regras anteriores continuam ativas.`,
 	lastReloadWarning: (error) => `Aviso: a última recarga falhou (${error}); as regras listadas são as anteriores.`,
+	degradedRules: (disabled, active) => `Aviso: ${disabled} regra(s) não puderam ser carregadas e estão desativadas; as outras ${active} continuam ativas:`,
+	ruleIssueLine: (source, index, message) => `- ${source.length > 0 ? source : "(arquivo desconhecido)"}: regra ${index + 1} (desativada): ${message}`,
+	reloadDegraded: (active, source, disabled) => `Recarregadas ${active} regra(s) de ${source}; ${disabled} regra(s) estão desativadas por erros de carregamento — corrija as entradas abaixo e execute /rules reload:`,
 	dryRunNotice: "Modo simulação (enforce: false): acertos deny/ask são apenas registrados na auditoria — todas as chamadas passam.",
 	unknownArg: (arg) => `Argumento de /rules desconhecido "${arg}". ${PT.usage}`,
 	usage: "Uso: /rules [list | reload | network | decisions [n] | test <ferramenta> <json-args>]",
@@ -2272,6 +2366,9 @@ const HI = {
 	reloaded: (count, source) => `${count} नियम पुनः लोड किए गए, स्रोत ${source}।`,
 	reloadFailed: (error) => `पुनः लोड विफल: ${error}। पिछले नियम अब भी सक्रिय हैं।`,
 	lastReloadWarning: (error) => `चेतावनी: अंतिम पुनः लोड विफल रहा (${error}); ऊपर सूचीबद्ध नियम पिछले वाले हैं।`,
+	degradedRules: (disabled, active) => `चेतावनी: ${disabled} नियम लोड नहीं हो सके और अक्षम हैं; शेष ${active} नियम सक्रिय रहते हैं:`,
+	ruleIssueLine: (source, index, message) => `- ${source.length > 0 ? source : "(अज्ञात फ़ाइल)"}: नियम ${index + 1} (अक्षम): ${message}`,
+	reloadDegraded: (active, source, disabled) => `${source} से ${active} नियम पुनः लोड हुए; ${disabled} नियम लोड त्रुटियों से अक्षम हैं — नीचे दी प्रविष्टियाँ ठीक करें और /rules reload चलाएँ:`,
 	dryRunNotice: "ड्राई-रन मोड (enforce: false): deny/ask हिट केवल ऑडिट में दर्ज होते हैं — हर कॉल पास हो जाती है।",
 	unknownArg: (arg) => `अज्ञात /rules तर्क "${arg}"। ${HI.usage}`,
 	usage: "उपयोग: /rules [list | reload | network | decisions [n] | test <टूल> <json-args>]",
@@ -3271,10 +3368,17 @@ var PermissionRulesRuntime = class {
 		return [];
 	}
 	/**
-	* Read, parse, and compile the rule-file chain serving `cwd`. Under
-	* `badFilePolicy: 'ignore-with-warning'` a bad file degrades to an empty
-	* rule set with a warning and keeps its source paths (so a later fix is
-	* watched and adopted); under `'fail'` it throws.
+	* Read, parse, and compile the rule-file chain serving `cwd`.
+	*
+	* Per-rule failures (a bad glob/regex, an unknown field or action, a
+	* missing reason) no longer fail the whole load: that rule is disabled,
+	* reported with its 0-based document index and source file, and every
+	* other rule — in that file and in every other file of the chain — stays
+	* active (issue #49). FILE-level failures (unreadable file, invalid YAML,
+	* unknown top-level field, `rules` not a list, or a total over
+	* `maxRules`) still follow `badFilePolicy`: `'ignore-with-warning'`
+	* degrades to an empty rule set with a warning and keeps the source paths
+	* (so a later fix is watched and adopted); `'fail'` throws.
 	* @param cwd - the workspace root.
 	* @returns the loaded state.
 	*/
@@ -3289,10 +3393,22 @@ var PermissionRulesRuntime = class {
 			}
 		};
 		try {
+			const compiledSources = [];
+			const issues = [];
+			for (const path of sources) {
+				const source = this.compileSourceFile(path);
+				compiledSources.push([...source.rules]);
+				for (const issue of source.issues) issues.push({
+					source: path,
+					index: issue.index,
+					message: issue.message
+				});
+			}
 			return {
 				cwd,
 				sources,
-				compiled: mergeCompiledRules(sources.map((path) => this.compileSourceFile(path)), this.compileOptions())
+				compiled: mergeCompiledRules(compiledSources, this.compileOptions()),
+				...issues.length === 0 ? {} : { issues }
 			};
 		} catch (error) {
 			const message = error instanceof Error ? error.message : String(error);
@@ -3316,9 +3432,12 @@ var PermissionRulesRuntime = class {
 	* file's content hash is unchanged. The cache key is the source path plus
 	* the content hash, so the same file read by many workspaces (the
 	* built-in baseline and any shared fallback/absolute `rulesFile`) is
-	* parsed and compiled ONCE, not once per cwd.
+	* parsed and compiled ONCE, not once per cwd. Per-rule failures are
+	* isolated by {@link compileRulesText}; they are logged here (once per
+	* recompiled content, at `error` under `badFilePolicy: 'fail'` and at
+	* `warn` under `'ignore-with-warning'`) instead of being thrown.
 	* @param path - the absolute source path.
-	* @returns that source's compiled rules (source-local index, sourceIndex 0).
+	* @returns that source's compiled rules (source-local index, sourceIndex 0) and disabled-rule reports.
 	*/
 	compileSourceFile(path) {
 		const text = readFileSync(path, "utf8");
@@ -3327,15 +3446,59 @@ var PermissionRulesRuntime = class {
 		if (cached !== void 0 && cached.hash === hash) {
 			this.compileCache.delete(path);
 			this.compileCache.set(path, cached);
-			return cached.rules;
+			return cached;
 		}
-		const rules = compileSourceRules(parseRulesDocument(text), this.compileOptions());
+		const { rules, issues } = compileRulesText(text, this.compileOptions());
 		this.compileCache.set(path, {
 			hash,
-			rules
+			rules,
+			issues
 		});
 		this.evictCompileCache();
-		return rules;
+		this.reportRuleIssues(path, issues);
+		return {
+			rules,
+			issues
+		};
+	}
+	/**
+	* Report the rules an isolated load disabled. The file still loads, so
+	* this is not a file-level failure: `badFilePolicy: 'fail'` reports each
+	* disabled rule at `error` level and `'ignore-with-warning'` at `warn`,
+	* both naming the file and the 1-based rule position the author can find in
+	* the document (the `RuleIssue.index` itself is 0-based). The same errors stay queryable through `/rules`.
+	* @param path - the rule file the rules came from.
+	* @param issues - the disabled-rule reports for that file.
+	*/
+	reportRuleIssues(path, issues) {
+		if (issues.length === 0) return;
+		const log = this.config.badFilePolicy === "fail" ? this.ctx.logger.error.bind(this.ctx.logger) : this.ctx.logger.warn.bind(this.ctx.logger);
+		const shown = issues.slice(0, 5);
+		for (const issue of shown) log(`permission-rules: ${path}: rule ${issue.index + 1} disabled by a load error: ${issue.message}`);
+		if (issues.length > shown.length) log(`permission-rules: ${path}: ${issues.length - shown.length} more rule(s) disabled by load errors (run /rules for the full list)`);
+	}
+	/**
+	* ONE process's startup check: load the chain for `cwd` eagerly and, when
+	* it is degraded, emit a single prominent warning instead of waiting for
+	* the first dangerous tool call. The per-rule errors themselves are logged
+	* by {@link compileSourceFile}; this adds the summary that makes the state
+	* impossible to miss in the host log, and `/rules` stays the
+	* session-visible surface with the detailed list. Never throws: a startup
+	* check must not take the plugin down (issue #49).
+	* @param cwd - the workspace to check (the host cwd at mount, the session cwd on creation).
+	*/
+	startupNotice(cwd = process.cwd()) {
+		let loaded;
+		try {
+			loaded = this.load(cwd);
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			this.ctx.logger.error(`permission-rules: STARTUP: cannot load the rule chain for ${cwd}: ${message} — tool calls in this workspace will fail until the file is fixed (run /rules reload after fixing it)`);
+			return;
+		}
+		const issues = loaded.issues ?? [];
+		if (issues.length > 0) this.ctx.logger.error(`permission-rules: STARTUP: ${issues.length} rule(s) could not be loaded and are disabled; ${loaded.compiled.rules.length} rule(s) from ${loaded.sources.join(", ")} stay active. Run /rules for the per-rule errors, then fix the named entries.`);
+		if (loaded.lastError !== void 0) this.ctx.logger.error(`permission-rules: STARTUP: the rule chain for ${cwd} is degraded (${loaded.lastError}); the previous/empty rule set is in effect. Run /rules for details.`);
 	}
 	/** Bound the compile cache: drop the least-recently-used source beyond the workspace cap (compile results are cheap to rebuild). */
 	evictCompileCache() {
@@ -4186,6 +4349,11 @@ var PermissionRulesRuntime = class {
 			};
 			const rules = reloaded?.compiled.rules ?? [];
 			const source = reloaded === void 0 || reloaded.sources.length === 0 ? prose.emptySource : reloaded.sources.join(", ");
+			const issues = reloaded?.issues ?? [];
+			if (issues.length > 0) return {
+				kind: "error",
+				text: [prose.reloadDegraded(rules.length, source, issues.length), ...issues.map((issue) => prose.ruleIssueLine(this.displaySource(issue.source, cwd), issue.index, issue.message))].join("\n")
+			};
 			return {
 				kind: "success",
 				text: prose.reloaded(rules.length, source)
@@ -4233,9 +4401,14 @@ var PermissionRulesRuntime = class {
 			};
 		}
 		const lines = [];
+		const issues = loaded.issues ?? [];
 		if (loaded.sources.length === 0) lines.push(prose.noRules(cwd, this.config.fallbackPath !== void 0 ? prose.fallbackMissing : ""));
 		else {
 			lines.push(prose.rulesHeader(loaded.compiled.rules.length, loaded.sources, cwd));
+			if (issues.length > 0) {
+				lines.push(prose.degradedRules(issues.length, loaded.compiled.rules.length));
+				for (const issue of issues) lines.push(prose.ruleIssueLine(this.displaySource(issue.source, cwd), issue.index, issue.message));
+			}
 			const multiSource = loaded.sources.length > 1;
 			lines.push(...loaded.compiled.rules.map((rule) => describeRule(rule, DESCRIBE_TOKENS[this.config.language], multiSource ? this.displaySource(loaded.sources[rule.sourceIndex] ?? "", cwd) : void 0)));
 			const unreachable = findUnreachableRules(loaded.compiled);
@@ -4245,7 +4418,7 @@ var PermissionRulesRuntime = class {
 		if (!this.config.enforce) lines.push(prose.dryRunNotice);
 		lines.push(prose.usage);
 		return {
-			kind: "success",
+			kind: issues.length > 0 || loaded.lastError !== void 0 ? "error" : "success",
 			text: lines.join("\n")
 		};
 	}
@@ -4389,9 +4562,13 @@ var PermissionRulesRuntime = class {
 	/**
 	* Validate deployment-level file references at mount — the earliest
 	* resolvable point. An absolute `rulesFile` or a configured
-	* `fallbackPath` must exist and parse; a missing referent fails the mount
-	* loudly instead of silently degrading later.
-	* @throws when a mandated file is missing or invalid.
+	* `fallbackPath` must exist and parse; a missing referent or a FILE-level
+	* failure fails the mount loudly instead of silently degrading later. A
+	* single bad RULE inside such a file no longer fails the mount (issue
+	* #49): it is disabled, reported, and the rest of the file stays active —
+	* otherwise one typo would take the whole plugin (and its protection)
+	* down before any session exists.
+	* @throws when a mandated file is missing or unparseable as a document.
 	*/
 	validateDeploymentFiles() {
 		if (isAbsolute(this.config.rulesFile)) this.loadForValidation(this.config.rulesFile);
@@ -4405,10 +4582,15 @@ var PermissionRulesRuntime = class {
 			this.loadForValidation(this.config.builtin.path);
 		}
 	}
-	/** Parse and compile one mandated file, rethrowing as a mount failure. */
+	/**
+	* Parse and compile one mandated file with per-rule isolation, rethrowing
+	* only a FILE-level failure as a mount failure. The disabled-rule reports
+	* are logged here (the mount is the first place they can be seen).
+	* @param filePath - the deployment-level rule file to validate.
+	*/
 	loadForValidation(filePath) {
 		try {
-			compileRules(parseRulesDocument(readFileSync(filePath, "utf8")), this.compileOptions());
+			this.compileSourceFile(filePath);
 		} catch (error) {
 			const message = error instanceof Error ? error.message : String(error);
 			throw error instanceof RuleError ? error : new RuleError(`permission-rules: cannot load ${filePath}: ${message}`);
@@ -4691,6 +4873,14 @@ async function apply(ctx, config) {
 		input: { hint: "[list | reload | network | decisions [n] | test [--cwd <dir>] [--env K=V] [--agent <sel>] [--platform <name>] <tool> <json-args>]" },
 		handler: (invocation) => runtime.command(invocation)
 	});
+	runtime.startupNotice();
+	ctx.inject(["sessions"], (scope) => {
+		scope.on("session/created", (session) => {
+			try {
+				runtime.startupNotice(session.header.cwd ?? process.cwd());
+			} catch {}
+		});
+	});
 	if (resolved.network.enabled) await runtime.attachNetworkProxy();
 	ctx.inject(["systemPrompt"], (scope) => {
 		const systemPrompt = scope.get("systemPrompt");
@@ -4849,4 +5039,4 @@ const name = "permission-rules";
 /** Consumer — the /rules command handler and the tools/pre-execute waterfall listener consume the injected commands/tools services. */
 const inject = ["commands", "tools"];
 //#endregion
-export { BUILTIN_RULES_FILE, Config, GlobError, NETWORK_MODES, NO_PROXY_ENV_NAMES, NetworkProxy, PATH_CANDIDATE_KEYS, PLATFORMS, PROXY_ENV_NAMES, PermissionRulesRuntime, RULE_ACTIONS, RuleError, SCHEMES, SHIPPED_BUILTIN_RULES, URL_CANDIDATE_KEYS, apply, blockMessage, compileGlob, compilePatternRegex, compileRules, compileRulesChain, compileSourceRules, decideNetworkTarget, decomposeShellCommand, defaultDecision, describeRule, extractPathCandidates, extractUrlCandidates, findUnreachableRules, inject, injectProxyEnv, isIpLiteral, isLoopbackTarget, isMarkedAuditEvent, isShellTool, isUnmarkedHostVersion, matchRules, matchTools, matchWhen, mergeCompiledRules, name, networkModeForSandbox, normalizeHost, normalizeWorkspacePath, parseRulesDocument, parseUrlTarget, plainConfig, readAmbientProxy, redactProxyUrl, resolveBuiltinRulesPath, resolveConfig, targetMatchesNetwork };
+export { BUILTIN_RULES_FILE, Config, GlobError, NETWORK_MODES, NO_PROXY_ENV_NAMES, NetworkProxy, PATH_CANDIDATE_KEYS, PLATFORMS, PROXY_ENV_NAMES, PermissionRulesRuntime, RULE_ACTIONS, RuleError, SCHEMES, SHIPPED_BUILTIN_RULES, URL_CANDIDATE_KEYS, apply, blockMessage, compileGlob, compilePatternRegex, compileRules, compileRulesChain, compileRulesText, compileSourceRules, decideNetworkTarget, decomposeShellCommand, defaultDecision, describeRule, extractPathCandidates, extractUrlCandidates, findUnreachableRules, inject, injectProxyEnv, isIpLiteral, isLoopbackTarget, isMarkedAuditEvent, isShellTool, isUnmarkedHostVersion, matchRules, matchTools, matchWhen, mergeCompiledRules, name, networkModeForSandbox, normalizeHost, normalizeWorkspacePath, parseRulesDocument, parseRulesDocumentIsolated, parseUrlTarget, plainConfig, readAmbientProxy, redactProxyUrl, resolveBuiltinRulesPath, resolveConfig, targetMatchesNetwork };

package/lib/types/config.d.ts

@@ -100,10 +100,15 @@ export interface Config {
      */
     fallbackPath?: string | undefined;
     /**
-     * How an unreadable/invalid rule file is handled at load: `'fail'` throws
-     * (the pending tool call errors loudly; HMR reloads keep the previous
-     * rules and report the error), `'ignore-with-warning'` logs a warning and
-     * continues with an empty (initial) or previous (reload) rule set.
+     * How a FILE-level rule-file failure (unreadable, invalid YAML, unknown
+     * top-level field, `rules` not a list, over `maxRules`) is handled at
+     * load: `'fail'` throws (the pending tool call errors loudly; HMR reloads
+     * keep the previous rules and report the error), `'ignore-with-warning'`
+     * logs a warning and continues with an empty (initial) or previous
+     * (reload) rule set. A single invalid RULE is isolated either way
+     * (issue #49): it is disabled and reported at startup and in `/rules`
+     * while every other rule stays active, so the policy can never disappear
+     * because of one typo.
      */
     badFilePolicy?: BadFilePolicy;
     /** Hard cap on the number of rules across the effective source chain; a larger chain fails the load. */

package/lib/types/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAG/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE5C,wFAAwF;AACxF,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,qBAAqB,CAAA;AAE1D,uEAAuE;AACvE,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,MAAM,CAAA;AAE7C,mDAAmD;AACnD,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,QAAQ,CAAA;AAE/C,oEAAoE;AACpE,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,UAAU,CAAA;AAEhD,6CAA6C;AAC7C,MAAM,WAAW,aAAa;IAC5B,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,wGAAwG;IACxG,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,oGAAoG;IACpG,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAAA;IAC3B,yFAAyF;IACzF,YAAY,CAAC,EAAE,WAAW,CAAA;IAC1B,qFAAqF;IACrF,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iGAAiG;IACjG,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,yEAAyE;IACzE,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,8GAA8G;IAC9G,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAA;IACpC;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,qFAAqF;AACrF,MAAM,MAAM,oBAAoB,GAAG,KAAK,GAAG,SAAS,GAAG,MAAM,CAAA;AAE7D,sFAAsF;AACtF,MAAM,WAAW,MAAM;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,wGAAwG;IACxG,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,2GAA2G;IAC3G,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,uGAAuG;IACvG,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,sEAAsE;IACtE,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,iEAAiE;IACjE,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,oGAAoG;IACpG,QAAQ,CAAC,EAAE,UAAU,CAAA;IACrB,iHAAiH;IACjH,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,oGAAoG;IACpG,KAAK,CAAC,EAAE,gBAAgB,CAAA;IACxB,kGAAkG;IAClG,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,+FAA+F;IAC/F,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;;;;;OASG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,oEAAoE;IACpE,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,CAAA;IACnC,mEAAmE;IACnE,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,CAAA;CACpC;AAED,iGAAiG;AACjG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAA;IACnC,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAA;IAClC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;IAC5C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;CAClC;AAED,gGAAgG;AAChG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,mFAAmF;IACnF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,yFAAyF;AACzF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;IACzC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAA;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAA;IAC1C,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;IACtC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAA;IACpC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;IACvC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;CACxC;AAwBD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAkCjB,CAAA;AAEF,yFAAyF;AACzF,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,MAAM,CAAC,CAAA;AAElD,oFAAoF;AACpF,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,CAAA;AAa7C;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAqBvD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,KAAK,GAAE,WAAgB,GAAG,cAAc,CAqDrE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,CAAC,MAAM,0BAA0B,CAAA;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAG/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE5C,wFAAwF;AACxF,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,qBAAqB,CAAA;AAE1D,uEAAuE;AACvE,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,MAAM,CAAA;AAE7C,mDAAmD;AACnD,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,QAAQ,CAAA;AAE/C,oEAAoE;AACpE,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,UAAU,CAAA;AAEhD,6CAA6C;AAC7C,MAAM,WAAW,aAAa;IAC5B,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,wGAAwG;IACxG,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,oGAAoG;IACpG,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAAA;IAC3B,yFAAyF;IACzF,YAAY,CAAC,EAAE,WAAW,CAAA;IAC1B,qFAAqF;IACrF,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iGAAiG;IACjG,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,yEAAyE;IACzE,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,8GAA8G;IAC9G,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAA;IACpC;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,qFAAqF;AACrF,MAAM,MAAM,oBAAoB,GAAG,KAAK,GAAG,SAAS,GAAG,MAAM,CAAA;AAE7D,sFAAsF;AACtF,MAAM,WAAW,MAAM;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC;;;;;;;;;;OAUG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,wGAAwG;IACxG,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,2GAA2G;IAC3G,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,uGAAuG;IACvG,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,sEAAsE;IACtE,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,iEAAiE;IACjE,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,oGAAoG;IACpG,QAAQ,CAAC,EAAE,UAAU,CAAA;IACrB,iHAAiH;IACjH,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,oGAAoG;IACpG,KAAK,CAAC,EAAE,gBAAgB,CAAA;IACxB,kGAAkG;IAClG,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,+FAA+F;IAC/F,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;;;;;OASG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAA;IAC5B,oEAAoE;IACpE,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,CAAA;IACnC,mEAAmE;IACnE,OAAO,CAAC,EAAE,aAAa,GAAG,SAAS,CAAA;CACpC;AAED,iGAAiG;AACjG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAA;IACnC,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAA;IAClC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAA;IAC5C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;CAClC;AAED,gGAAgG;AAChG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,mFAAmF;IACnF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,yFAAyF;AACzF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;IACzC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAA;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAA;IAC1C,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;IACtC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAA;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAA;IACpC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;IACvC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;CACxC;AAwBD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAkCjB,CAAA;AAEF,yFAAyF;AACzF,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,MAAM,CAAC,CAAA;AAElD,oFAAoF;AACpF,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,CAAA;AAa7C;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAqBvD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,KAAK,GAAE,WAAgB,GAAG,cAAc,CAqDrE"}

package/lib/types/prose.d.ts

@@ -22,6 +22,12 @@ export interface UiProse {
     reloadFailed: (error: string) => string;
     /** Warning appended to a listing whose last reload failed. */
     lastReloadWarning: (error: string) => string;
+    /** Warning header of a listing whose chain disabled rule(s) by isolated load errors. */
+    degradedRules: (disabled: number, active: number) => string;
+    /** One disabled-rule line: source file, 1-based rule number, and the load error. */
+    ruleIssueLine: (source: string, index: number, message: string) => string;
+    /** `/rules reload` result when valid rules loaded but others were disabled. */
+    reloadDegraded: (active: number, source: string, disabled: number) => string;
     /** Notice appended to a listing when dry-run mode (`enforce: false`) is active. */
     dryRunNotice: string;
     /** Rejection of an unknown `/rules` argument. */

package/lib/types/prose.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prose.d.ts","sourceRoot":"","sources":["../../src/prose.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,0CAA0C;AAC1C,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAA;AAEzD,2EAA2E;AAC3E,MAAM,WAAW,OAAO;IACtB,6EAA6E;IAC7E,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IAC/E,iDAAiD;IACjD,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACtD,oEAAoE;IACpE,eAAe,EAAE,MAAM,CAAA;IACvB,uCAAuC;IACvC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IACnD,qCAAqC;IACrC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IACvC,8DAA8D;IAC9D,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IAC5C,mFAAmF;IACnF,YAAY,EAAE,MAAM,CAAA;IACpB,iDAAiD;IACjD,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IACnC,kBAAkB;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,0DAA0D;IAC1D,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IACzD,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAA;IACnB,4HAA4H;IAC5H,mBAAmB,EAAE,MAAM,CAAA;IAC3B,gDAAgD;IAChD,qBAAqB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IAC9C,qEAAqE;IACrE,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,CAAA;IAChL,iCAAiC;IACjC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IACpF,sCAAsC;IACtC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,6DAA6D;IAC7D,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,kDAAkD;IAClD,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACzC,kFAAkF;IAClF,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,kDAAkD;IAClD,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IAC1C,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,qEAAqE;IACrE,kBAAkB,EAAE,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,CAAA;IAC1D,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,eAAe,EAAE,MAAM,CAAA;IACvB,8EAA8E;IAC9E,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,CAAA;IACzI,sCAAsC;IACtC,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,MAAM,CAAA;IAC/D,eAAe,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,SAAS,GAAG,KAAK,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,CAAA;IACzI,yDAAyD;IACzD,eAAe,EAAE,MAAM,CAAA;IACvB,kCAAkC;IAClC,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,CAAA;CACjP;AAED,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAA;CACZ;AAmOD,8CAA8C;AAC9C,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAA8C,CAAA;AAEzG,yDAAyD;AACzD,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAMxE,CAAA"}
+{"version":3,"file":"prose.d.ts","sourceRoot":"","sources":["../../src/prose.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,0CAA0C;AAC1C,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAA;AAEzD,2EAA2E;AAC3E,MAAM,WAAW,OAAO;IACtB,6EAA6E;IAC7E,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IAC/E,iDAAiD;IACjD,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACtD,oEAAoE;IACpE,eAAe,EAAE,MAAM,CAAA;IACvB,uCAAuC;IACvC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IACnD,qCAAqC;IACrC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IACvC,8DAA8D;IAC9D,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IAC5C,wFAAwF;IACxF,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IAC3D,oFAAoF;IACpF,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,CAAA;IACzE,+EAA+E;IAC/E,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAA;IAC5E,mFAAmF;IACnF,YAAY,EAAE,MAAM,CAAA;IACpB,iDAAiD;IACjD,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IACnC,kBAAkB;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,0DAA0D;IAC1D,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IACzD,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAA;IACnB,4HAA4H;IAC5H,mBAAmB,EAAE,MAAM,CAAA;IAC3B,gDAAgD;IAChD,qBAAqB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;IAC9C,qEAAqE;IACrE,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,CAAA;IAChL,iCAAiC;IACjC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IACpF,sCAAsC;IACtC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,6DAA6D;IAC7D,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,kDAAkD;IAClD,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACzC,kFAAkF;IAClF,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IACrC,kDAAkD;IAClD,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IAC1C,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,qEAAqE;IACrE,kBAAkB,EAAE,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,KAAK,MAAM,CAAA;IAC1D,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAA;IACnB,iFAAiF;IACjF,eAAe,EAAE,MAAM,CAAA;IACvB,8EAA8E;IAC9E,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,CAAA;IACzI,sCAAsC;IACtC,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,MAAM,CAAA;IAC/D,eAAe,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG,SAAS,GAAG,KAAK,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,CAAA;IACzI,yDAAyD;IACzD,eAAe,EAAE,MAAM,CAAA;IACvB,kCAAkC;IAClC,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,CAAA;CACjP;AAED,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAA;CACZ;AAkPD,8CAA8C;AAC9C,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAA8C,CAAA;AAEzG,yDAAyD;AACzD,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAMxE,CAAA"}