hoomanjs 1.35.3 → 1.37.0

package/dist/core/approvals/allowlist.js

@@ -0,0 +1,265 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { allowlistJsonPath } from "../utils/paths.js";
+import { normalizeUserPath } from "../utils/normalize-user-path.js";
+import { arityPrefix, splitCommands, tokenize } from "./bash-arity.js";
+import { matchWildcard } from "./wildcard.js";
+/** Sentinel resource/pattern meaning "the whole tool" (no argument dimension). */
+const TOOL_WIDE = "*";
+const SHELL_TOOL = "shell";
+/**
+ * Input keys that carry filesystem paths, per tool. When present, "always
+ * allow" is scoped to those exact paths instead of the whole tool.
+ */
+const PATH_TOOL_KEYS = {
+    read_file: ["path"],
+    read_multiple_files: ["paths"],
+    write_file: ["path"],
+    edit_file: ["path"],
+    create_directory: ["path"],
+    move_file: ["source", "destination"],
+    get_file_info: ["path"],
+};
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Pull the raw command strings out of the shell tool's flexible input. */
+function extractShellCommands(input) {
+    if (!isRecord(input)) {
+        return [];
+    }
+    const raw = input.command;
+    const entries = Array.isArray(raw) ? raw : [raw];
+    const out = [];
+    for (const entry of entries) {
+        if (typeof entry === "string") {
+            if (entry.trim()) {
+                out.push(entry.trim());
+            }
+        }
+        else if (isRecord(entry) &&
+            typeof entry.command === "string" &&
+            entry.command.trim()) {
+            out.push(entry.command.trim());
+        }
+    }
+    return out;
+}
+/** Resolve the filesystem path(s) referenced by a path-bearing tool. */
+function extractPaths(tool, input) {
+    const keys = PATH_TOOL_KEYS[tool];
+    if (!keys) {
+        return null;
+    }
+    if (!isRecord(input)) {
+        return [];
+    }
+    const paths = [];
+    for (const key of keys) {
+        const value = input[key];
+        if (typeof value === "string" && value.trim()) {
+            paths.push(normalizeUserPath(value));
+        }
+        else if (Array.isArray(value)) {
+            for (const item of value) {
+                if (typeof item === "string" && item.trim()) {
+                    paths.push(normalizeUserPath(item));
+                }
+            }
+        }
+    }
+    return paths;
+}
+/**
+ * Reduce a tool call to the resource strings that a rule must match. Shell
+ * calls yield one string per sub-command; path tools yield resolved paths;
+ * everything else is treated as tool-wide.
+ */
+function deriveResources(tool, input) {
+    if (tool === SHELL_TOOL) {
+        const segments = extractShellCommands(input).flatMap(splitCommands);
+        return {
+            kind: "command",
+            values: segments.length > 0 ? segments : [TOOL_WIDE],
+        };
+    }
+    const paths = extractPaths(tool, input);
+    if (paths) {
+        return { kind: "path", values: paths.length > 0 ? paths : [TOOL_WIDE] };
+    }
+    return { kind: "generic", values: [TOOL_WIDE] };
+}
+/**
+ * Given a tool call, propose the reusable patterns that "always allow" should
+ * persist. Shell commands are broadened via {@link arityPrefix} (`git log *`);
+ * path tools keep the exact resolved path; other tools become tool-wide.
+ */
+function deriveProposals(tool, input) {
+    const { kind, values } = deriveResources(tool, input);
+    if (kind === "command") {
+        const patterns = new Set();
+        for (const segment of values) {
+            if (segment === TOOL_WIDE) {
+                patterns.add(TOOL_WIDE);
+                continue;
+            }
+            const prefix = arityPrefix(tokenize(segment));
+            patterns.add(prefix.length > 0 ? `${prefix.join(" ")} *` : TOOL_WIDE);
+        }
+        return [...patterns];
+    }
+    if (kind === "path") {
+        return [...new Set(values)];
+    }
+    return [TOOL_WIDE];
+}
+/**
+ * Disk-backed, pattern-based allowlist for "always allow" tool approvals.
+ *
+ * Rules are keyed by tool name and matched against an argument-derived
+ * resource string using {@link matchWildcard}. The design follows the
+ * opencode/kilocode/Claude Code permission engines: shell commands match on a
+ * (broadened) command prefix, filesystem tools match on resolved paths, and
+ * argument-less tools are stored tool-wide (`*`).
+ */
+export class Allowlist {
+    filePath;
+    /** tool name -> set of allowed argument patterns */
+    store = new Map();
+    constructor(options) {
+        this.filePath = options?.filePath ?? allowlistJsonPath();
+        this.load();
+    }
+    /** Whether a tool call is already covered by a persisted allow rule. */
+    isAllowed(tool, input) {
+        const patterns = this.store.get(tool);
+        if (!patterns || patterns.size === 0) {
+            return false;
+        }
+        const { values } = deriveResources(tool, input);
+        return values.every((resource) => [...patterns].some((pattern) => matchWildcard(resource, pattern)));
+    }
+    /**
+     * Preview the patterns that {@link allowAlways} would persist for a tool
+     * call, without writing anything. Useful for showing the user what "always
+     * allow" will grant.
+     */
+    proposals(tool, input) {
+        return deriveProposals(tool, input);
+    }
+    /**
+     * Persist "always allow" for a tool call. Returns the patterns that were
+     * newly added (already-present patterns are skipped).
+     */
+    allowAlways(tool, input) {
+        const added = [];
+        for (const pattern of deriveProposals(tool, input)) {
+            if (this.addPattern(tool, pattern)) {
+                added.push(pattern);
+            }
+        }
+        if (added.length > 0) {
+            this.persist();
+        }
+        return added;
+    }
+    /** Add an explicit rule. Returns true if it was not already present. */
+    addRule(tool, pattern) {
+        const added = this.addPattern(tool, pattern);
+        if (added) {
+            this.persist();
+        }
+        return added;
+    }
+    /** Remove an explicit rule. Returns true if it existed. */
+    removeRule(tool, pattern) {
+        const patterns = this.store.get(tool);
+        if (!patterns?.delete(pattern.trim())) {
+            return false;
+        }
+        if (patterns.size === 0) {
+            this.store.delete(tool);
+        }
+        this.persist();
+        return true;
+    }
+    /** All persisted rules, flattened. */
+    rules() {
+        const rules = [];
+        for (const [tool, patterns] of this.store) {
+            for (const pattern of patterns) {
+                rules.push({ tool, pattern });
+            }
+        }
+        return rules;
+    }
+    /** Remove every rule and persist the empty allowlist. */
+    clear() {
+        this.store.clear();
+        this.persist();
+    }
+    /** Re-read the allowlist from disk, discarding in-memory state. */
+    reload() {
+        this.load();
+    }
+    addPattern(tool, pattern) {
+        const toolName = tool.trim();
+        const normalized = pattern.trim();
+        if (!toolName || !normalized) {
+            return false;
+        }
+        let patterns = this.store.get(toolName);
+        if (!patterns) {
+            patterns = new Set();
+            this.store.set(toolName, patterns);
+        }
+        if (patterns.has(normalized)) {
+            return false;
+        }
+        patterns.add(normalized);
+        return true;
+    }
+    load() {
+        this.store.clear();
+        if (!existsSync(this.filePath)) {
+            return;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(readFileSync(this.filePath, "utf8"));
+        }
+        catch {
+            return;
+        }
+        if (!isRecord(parsed)) {
+            return;
+        }
+        for (const [tool, value] of Object.entries(parsed)) {
+            if (!Array.isArray(value)) {
+                continue;
+            }
+            for (const pattern of value) {
+                if (typeof pattern === "string") {
+                    this.addPattern(tool, pattern);
+                }
+            }
+        }
+    }
+    persist() {
+        const data = {};
+        for (const [tool, patterns] of this.store) {
+            data[tool] = [...patterns];
+        }
+        mkdirSync(dirname(this.filePath), { recursive: true });
+        writeFileSync(this.filePath, `${JSON.stringify(data, null, 2)}\n`, "utf8");
+    }
+}
+let sharedAllowlist = null;
+/** Process-wide {@link Allowlist} backed by `~/.hooman/allowlist.json`. */
+export function getAllowlist() {
+    if (!sharedAllowlist) {
+        sharedAllowlist = new Allowlist();
+    }
+    return sharedAllowlist;
+}
+//# sourceMappingURL=allowlist.js.map

package/dist/core/approvals/allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.js","sourceRoot":"","sources":["../../../src/core/approvals/allowlist.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,kFAAkF;AAClF,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,MAAM,UAAU,GAAG,OAAO,CAAC;AAE3B;;;GAGG;AACH,MAAM,cAAc,GAAsC;IACxD,SAAS,EAAE,CAAC,MAAM,CAAC;IACnB,mBAAmB,EAAE,CAAC,OAAO,CAAC;IAC9B,UAAU,EAAE,CAAC,MAAM,CAAC;IACpB,SAAS,EAAE,CAAC,MAAM,CAAC;IACnB,gBAAgB,EAAE,CAAC,MAAM,CAAC;IAC1B,SAAS,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC;IACpC,aAAa,EAAE,CAAC,MAAM,CAAC;CACxB,CAAC;AAcF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,2EAA2E;AAC3E,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;IAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;aAAM,IACL,QAAQ,CAAC,KAAK,CAAC;YACf,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EACpB,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wEAAwE;AACxE,SAAS,YAAY,CAAC,IAAY,EAAE,KAAc;IAChD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC5C,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,KAAc;IACnD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;SACrD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;IAC1E,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,KAAc;IACnD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAEtD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9C,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,SAAS,CAAC,CAAC;AACrB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,SAAS;IACH,QAAQ,CAAS;IAClC,oDAAoD;IACnC,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAExD,YAAmB,OAA0B;QAC3C,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,iBAAiB,EAAE,CAAC;QACzD,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAED,wEAAwE;IACjE,SAAS,CAAC,IAAY,EAAE,KAAe;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC/B,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAClE,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,SAAS,CAAC,IAAY,EAAE,KAAe;QAC5C,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IAED;;;OAGG;IACI,WAAW,CAAC,IAAY,EAAE,KAAe;QAC9C,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YACnD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,wEAAwE;IACjE,OAAO,CAAC,IAAY,EAAE,OAAe;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2DAA2D;IACpD,UAAU,CAAC,IAAY,EAAE,OAAe;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sCAAsC;IAC/B,KAAK;QACV,MAAM,KAAK,GAAoB,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,yDAAyD;IAClD,KAAK;QACV,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,mEAAmE;IAC5D,MAAM;QACX,IAAI,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;IAEO,UAAU,CAAC,IAAY,EAAE,OAAe;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,IAAI;QACV,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,SAAS;YACX,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;gBAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAChC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAEO,OAAO;QACb,MAAM,IAAI,GAA6B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC7B,CAAC;QACD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;CACF;AAED,IAAI,eAAe,GAAqB,IAAI,CAAC;AAE7C,2EAA2E;AAC3E,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,eAAe,GAAG,IAAI,SAAS,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/dist/core/approvals/bash-arity.d.ts

@@ -0,0 +1,10 @@
+/** Split a (possibly compound) command into its individual sub-commands. */
+export declare function splitCommands(command: string): string[];
+/** Naive whitespace tokenizer — sufficient for deriving a command prefix. */
+export declare function tokenize(command: string): string[];
+/**
+ * Return the leading tokens that identify the command, using the arity
+ * dictionary. Longest listed prefix wins; unknown commands fall back to their
+ * first token.
+ */
+export declare function arityPrefix(tokens: string[]): string[];

package/dist/core/approvals/bash-arity.js

@@ -0,0 +1,178 @@
+/**
+ * "BashArity": maps a command prefix to the number of leading tokens that
+ * define the human-meaningful command, so that approving one command with
+ * "always allow" can propose a reusable pattern instead of the exact string.
+ *
+ * Example: approving `git log --oneline -5` proposes `git log *` because
+ * `git` has an arity of 2 (the subcommand counts, flags never do).
+ *
+ * Dictionary ported from the opencode/kilocode permission engines. Longest
+ * matching prefix wins; unlisted commands fall back to a single token.
+ */
+const ARITY = {
+    cat: 1,
+    cd: 1,
+    chmod: 1,
+    chown: 1,
+    cp: 1,
+    echo: 1,
+    env: 1,
+    export: 1,
+    grep: 1,
+    kill: 1,
+    killall: 1,
+    ln: 1,
+    ls: 1,
+    mkdir: 1,
+    mv: 1,
+    ps: 1,
+    pwd: 1,
+    rm: 1,
+    rmdir: 1,
+    sleep: 1,
+    source: 1,
+    tail: 1,
+    touch: 1,
+    unset: 1,
+    which: 1,
+    aws: 3,
+    az: 3,
+    bazel: 2,
+    brew: 2,
+    bun: 2,
+    "bun run": 3,
+    "bun x": 3,
+    cargo: 2,
+    "cargo add": 3,
+    "cargo run": 3,
+    cdk: 2,
+    cf: 2,
+    cmake: 2,
+    composer: 2,
+    consul: 2,
+    "consul kv": 3,
+    crictl: 2,
+    deno: 2,
+    "deno task": 3,
+    doctl: 3,
+    docker: 2,
+    "docker builder": 3,
+    "docker compose": 3,
+    "docker container": 3,
+    "docker image": 3,
+    "docker network": 3,
+    "docker volume": 3,
+    eksctl: 2,
+    "eksctl create": 3,
+    firebase: 2,
+    flyctl: 2,
+    gcloud: 3,
+    gh: 3,
+    git: 2,
+    "git config": 3,
+    "git remote": 3,
+    "git stash": 3,
+    go: 2,
+    gradle: 2,
+    helm: 2,
+    heroku: 2,
+    hugo: 2,
+    ip: 2,
+    "ip addr": 3,
+    "ip link": 3,
+    "ip netns": 3,
+    "ip route": 3,
+    kind: 2,
+    "kind create": 3,
+    kubectl: 2,
+    "kubectl kustomize": 3,
+    "kubectl rollout": 3,
+    kustomize: 2,
+    make: 2,
+    mc: 2,
+    "mc admin": 3,
+    minikube: 2,
+    mongosh: 2,
+    mysql: 2,
+    mvn: 2,
+    ng: 2,
+    npm: 2,
+    "npm exec": 3,
+    "npm init": 3,
+    "npm run": 3,
+    "npm view": 3,
+    nvm: 2,
+    nx: 2,
+    openssl: 2,
+    "openssl req": 3,
+    "openssl x509": 3,
+    pip: 2,
+    pipenv: 2,
+    pnpm: 2,
+    "pnpm dlx": 3,
+    "pnpm exec": 3,
+    "pnpm run": 3,
+    poetry: 2,
+    podman: 2,
+    "podman container": 3,
+    "podman image": 3,
+    psql: 2,
+    pulumi: 2,
+    "pulumi stack": 3,
+    pyenv: 2,
+    python: 2,
+    rake: 2,
+    rbenv: 2,
+    "redis-cli": 2,
+    rustup: 2,
+    serverless: 2,
+    sfdx: 3,
+    skaffold: 2,
+    sls: 2,
+    sst: 2,
+    swift: 2,
+    systemctl: 2,
+    terraform: 2,
+    "terraform workspace": 3,
+    tmux: 2,
+    turbo: 2,
+    ufw: 2,
+    vault: 2,
+    "vault auth": 3,
+    "vault kv": 3,
+    vercel: 2,
+    volta: 2,
+    wp: 2,
+    yarn: 2,
+    "yarn dlx": 3,
+    "yarn run": 3,
+};
+/** Command operators that separate a compound command into sub-commands. */
+const COMMAND_SEPARATORS = /\s*(?:&&|\|\||[;|&\n])\s*/;
+/** Split a (possibly compound) command into its individual sub-commands. */
+export function splitCommands(command) {
+    return command
+        .split(COMMAND_SEPARATORS)
+        .map((part) => part.trim())
+        .filter(Boolean);
+}
+/** Naive whitespace tokenizer — sufficient for deriving a command prefix. */
+export function tokenize(command) {
+    return command.trim().split(/\s+/).filter(Boolean);
+}
+/**
+ * Return the leading tokens that identify the command, using the arity
+ * dictionary. Longest listed prefix wins; unknown commands fall back to their
+ * first token.
+ */
+export function arityPrefix(tokens) {
+    for (let len = tokens.length; len > 0; len--) {
+        const candidate = tokens.slice(0, len).join(" ");
+        const arity = ARITY[candidate];
+        if (arity !== undefined) {
+            return tokens.slice(0, arity);
+        }
+    }
+    return tokens.length === 0 ? [] : tokens.slice(0, 1);
+}
+//# sourceMappingURL=bash-arity.js.map

package/dist/core/approvals/bash-arity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash-arity.js","sourceRoot":"","sources":["../../../src/core/approvals/bash-arity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,KAAK,GAA2B;IACpC,GAAG,EAAE,CAAC;IACN,EAAE,EAAE,CAAC;IACL,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;IACR,EAAE,EAAE,CAAC;IACL,IAAI,EAAE,CAAC;IACP,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,OAAO,EAAE,CAAC;IACV,EAAE,EAAE,CAAC;IACL,EAAE,EAAE,CAAC;IACL,KAAK,EAAE,CAAC;IACR,EAAE,EAAE,CAAC;IACL,EAAE,EAAE,CAAC;IACL,GAAG,EAAE,CAAC;IACN,EAAE,EAAE,CAAC;IACL,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;IACR,GAAG,EAAE,CAAC;IACN,EAAE,EAAE,CAAC;IACL,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,GAAG,EAAE,CAAC;IACN,SAAS,EAAE,CAAC;IACZ,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,CAAC;IACd,WAAW,EAAE,CAAC;IACd,GAAG,EAAE,CAAC;IACN,EAAE,EAAE,CAAC;IACL,KAAK,EAAE,CAAC;IACR,QAAQ,EAAE,CAAC;IACX,MAAM,EAAE,CAAC;IACT,WAAW,EAAE,CAAC;IACd,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,WAAW,EAAE,CAAC;IACd,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,CAAC;IACT,gBAAgB,EAAE,CAAC;IACnB,gBAAgB,EAAE,CAAC;IACnB,kBAAkB,EAAE,CAAC;IACrB,cAAc,EAAE,CAAC;IACjB,gBAAgB,EAAE,CAAC;IACnB,eAAe,EAAE,CAAC;IAClB,MAAM,EAAE,CAAC;IACT,eAAe,EAAE,CAAC;IAClB,QAAQ,EAAE,CAAC;IACX,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,EAAE,EAAE,CAAC;IACL,GAAG,EAAE,CAAC;IACN,YAAY,EAAE,CAAC;IACf,YAAY,EAAE,CAAC;IACf,WAAW,EAAE,CAAC;IACd,EAAE,EAAE,CAAC;IACL,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,EAAE,EAAE,CAAC;IACL,SAAS,EAAE,CAAC;IACZ,SAAS,EAAE,CAAC;IACZ,UAAU,EAAE,CAAC;IACb,UAAU,EAAE,CAAC;IACb,IAAI,EAAE,CAAC;IACP,aAAa,EAAE,CAAC;IAChB,OAAO,EAAE,CAAC;IACV,mBAAmB,EAAE,CAAC;IACtB,iBAAiB,EAAE,CAAC;IACpB,SAAS,EAAE,CAAC;IACZ,IAAI,EAAE,CAAC;IACP,EAAE,EAAE,CAAC;IACL,UAAU,EAAE,CAAC;IACb,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,CAAC;IACR,GAAG,EAAE,CAAC;IACN,EAAE,EAAE,CAAC;IACL,GAAG,EAAE,CAAC;IACN,UAAU,EAAE,CAAC;IACb,UAAU,EAAE,CAAC;IACb,SAAS,EAAE,CAAC;IACZ,UAAU,EAAE,CAAC;IACb,GAAG,EAAE,CAAC;IACN,EAAE,EAAE,CAAC;IACL,OAAO,EAAE,CAAC;IACV,aAAa,EAAE,CAAC;IAChB,cAAc,EAAE,CAAC;IACjB,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,CAAC;IACd,UAAU,EAAE,CAAC;IACb,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,kBAAkB,EAAE,CAAC;IACrB,cAAc,EAAE,CAAC;IACjB,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,cAAc,EAAE,CAAC;IACjB,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,CAAC;IACd,MAAM,EAAE,CAAC;IACT,UAAU,EAAE,CAAC;IACb,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;IACX,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,KAAK,EAAE,CAAC;IACR,SAAS,EAAE,CAAC;IACZ,SAAS,EAAE,CAAC;IACZ,qBAAqB,EAAE,CAAC;IACxB,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;IACR,GAAG,EAAE,CAAC;IACN,KAAK,EAAE,CAAC;IACR,YAAY,EAAE,CAAC;IACf,UAAU,EAAE,CAAC;IACb,MAAM,EAAE,CAAC;IACT,KAAK,EAAE,CAAC;IACR,EAAE,EAAE,CAAC;IACL,IAAI,EAAE,CAAC;IACP,UAAU,EAAE,CAAC;IACb,UAAU,EAAE,CAAC;CACd,CAAC;AAEF,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;AAEvD,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,OAAO;SACX,KAAK,CAAC,kBAAkB,CAAC;SACzB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAAgB;IAC1C,KAAK,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/core/approvals/intervention.d.ts

@@ -1,4 +1,4 @@
-import { InterventionHandler, InterventionActions, type BeforeToolCallEvent, type JSONValue } from "@strands-agents/sdk";
+import { InterventionHandler, InterventionActions, type BeforeToolCallEvent } from "@strands-agents/sdk";
 export type ToolApprovalDecision = "allow" | "always";
 export type ToolApprovalResult = ToolApprovalDecision | "reject" | {
     decision: "reject";
@@ -30,5 +30,4 @@ export declare class HoomanToolApprovalIntervention extends InterventionHandler
     beforeToolCall(event: BeforeToolCallEvent): Promise<ReturnType<typeof InterventionActions.proceed> | ReturnType<typeof InterventionActions.deny>>;
     private buildRequest;
 }
-export declare function normalizeApprovalResponse(response: JSONValue): ToolApprovalResult;
 export {};

package/dist/core/approvals/intervention.js

@@ -1,6 +1,7 @@
 import { InterventionHandler, InterventionActions, } from "@strands-agents/sdk";
-import { INTERNAL_ALWAYS_ALLOWED, allowToolForSession, isToolSessionAllowed, planModeWriteEditRejectionMessage, } from "../state/tool-approvals.js";
+import { INTERNAL_ALWAYS_ALLOWED, isImplicitlyAllowed, planModeWriteEditRejectionMessage, } from "../state/tool-approvals.js";
 import { isYoloEnabled } from "../state/yolo.js";
+import { getAllowlist } from "./allowlist.js";
 const INPUT_PREVIEW_LIMIT = 1_024;
 function previewInput(input) {
     try {
@@ -42,7 +43,8 @@ export class HoomanToolApprovalIntervention extends InterventionHandler {
         }
         if (isYoloEnabled(event.agent) ||
             INTERNAL_ALWAYS_ALLOWED.has(toolName) ||
-            isToolSessionAllowed(event.agent, toolName, event.toolUse.input)) {
+            isImplicitlyAllowed(toolName, event.toolUse.input) ||
+            getAllowlist().isAllowed(toolName, event.toolUse.input)) {
             await this.onApproved?.(request, event, "auto");
             return InterventionActions.proceed();
         }
@@ -53,7 +55,7 @@ export class HoomanToolApprovalIntervention extends InterventionHandler {
             return InterventionActions.proceed();
         }
         if (result === "always") {
-            allowToolForSession(event.agent, toolName);
+            getAllowlist().allowAlways(toolName, event.toolUse.input);
             await this.onApproved?.(request, event, "always");
             return InterventionActions.proceed();
         }
@@ -74,21 +76,4 @@ export class HoomanToolApprovalIntervention extends InterventionHandler {
         };
     }
 }
-export function normalizeApprovalResponse(response) {
-    if (response === true) {
-        return "allow";
-    }
-    if (typeof response === "string") {
-        const normalized = response.trim().toLowerCase();
-        if (normalized === "y" || normalized === "yes" || normalized === "allow") {
-            return "allow";
-        }
-        if (normalized === "t" ||
-            normalized === "trust" ||
-            normalized === "always") {
-            return "always";
-        }
-    }
-    return "reject";
-}
 //# sourceMappingURL=intervention.js.map

package/dist/core/approvals/intervention.js.map

@@ -1 +1 @@
-{"version":3,"file":"intervention.js","sourceRoot":"","sources":["../../../src/core/approvals/intervention.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GAGpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,oBAAoB,EACpB,iCAAiC,GAClC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,MAAM,mBAAmB,GAAG,KAAK,CAAC;AA2ClC,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC;QACtD,OAAO,IAAI,CAAC,MAAM,GAAG,mBAAmB;YACtC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,mBAAmB;YAC1D,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,MAA0B;IAClE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QAC3E,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,SAAS,QAAQ,6BAA6B,CAAC;AACxD,CAAC;AAED,MAAM,OAAO,8BAA+B,SAAQ,mBAAmB;IACrD,IAAI,GAAG,sBAAsB,CAAC;IAE7B,GAAG,CAAkB;IACrB,aAAa,CAA0C;IACvD,UAAU,CAAuC;IACjD,UAAU,CAAuC;IAElE,YAAmB,MAA4C;QAC7D,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACtB,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACtC,CAAC;IAEe,KAAK,CAAC,cAAc,CAClC,KAA0B;QAK1B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAEzC,MAAM,UAAU,GAAG,iCAAiC,CAClD,KAAK,CAAC,KAAK,EACX,QAAQ,EACR,KAAK,CAAC,OAAO,CAAC,KAAK,CACpB,CAAC;QACF,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACpD,OAAO,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC;QAED,IACE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;YAC1B,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC;YACrC,oBAAoB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAChE,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAChD,OAAO,mBAAmB,CAAC,OAAO,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YACjD,OAAO,mBAAmB,CAAC,OAAO,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC3C,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAClD,OAAO,mBAAmB,CAAC,OAAO,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAEO,YAAY,CAAC,KAA0B;QAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACpC,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvD,OAAO;YACL,QAAQ;YACR,WAAW;YACX,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;YAC1B,YAAY;YACZ,MAAM,EAAE,SAAS,QAAQ,qCAAqC,YAAY,EAAE;SAC7E,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,yBAAyB,CACvC,QAAmB;IAEnB,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;YACzE,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IACE,UAAU,KAAK,GAAG;YAClB,UAAU,KAAK,OAAO;YACtB,UAAU,KAAK,QAAQ,EACvB,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"intervention.js","sourceRoot":"","sources":["../../../src/core/approvals/intervention.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GAEpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,iCAAiC,GAClC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAyClC,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC;QACtD,OAAO,IAAI,CAAC,MAAM,GAAG,mBAAmB;YACtC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,mBAAmB;YAC1D,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,MAA0B;IAClE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QAC3E,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,SAAS,QAAQ,6BAA6B,CAAC;AACxD,CAAC;AAED,MAAM,OAAO,8BAA+B,SAAQ,mBAAmB;IACrD,IAAI,GAAG,sBAAsB,CAAC;IAE7B,GAAG,CAAkB;IACrB,aAAa,CAA0C;IACvD,UAAU,CAAuC;IACjD,UAAU,CAAuC;IAElE,YAAmB,MAA4C;QAC7D,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACtB,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACtC,CAAC;IAEe,KAAK,CAAC,cAAc,CAClC,KAA0B;QAK1B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAEzC,MAAM,UAAU,GAAG,iCAAiC,CAClD,KAAK,CAAC,KAAK,EACX,QAAQ,EACR,KAAK,CAAC,OAAO,CAAC,KAAK,CACpB,CAAC;QACF,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACpD,OAAO,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC;QAED,IACE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;YAC1B,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC;YACrC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAClD,YAAY,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACvD,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAChD,OAAO,mBAAmB,CAAC,OAAO,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YACjD,OAAO,mBAAmB,CAAC,OAAO,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,YAAY,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1D,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAClD,OAAO,mBAAmB,CAAC,OAAO,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAEO,YAAY,CAAC,KAA0B;QAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACpC,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvD,OAAO;YACL,QAAQ;YACR,WAAW;YACX,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;YAC1B,YAAY;YACZ,MAAM,EAAE,SAAS,QAAQ,qCAAqC,YAAY,EAAE;SAC7E,CAAC;IACJ,CAAC;CACF"}

package/dist/core/approvals/wildcard.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Minimal wildcard matcher used by the approval allowlist.
+ *
+ * Ported from the opencode/kilocode permission engines:
+ * - `*` matches zero or more characters
+ * - `?` matches exactly one character
+ * - a trailing " *" is relaxed to "( .*)?" so a pattern like `git *` also
+ *   matches the bare `git` command (arguments become optional)
+ *
+ * Matching is anchored (`^...$`) and treats the input as a single line so `*`
+ * spans newlines. Backslashes are normalized to forward slashes so path
+ * patterns behave the same on Windows.
+ */
+export declare function matchWildcard(input: string, pattern: string): boolean;

package/dist/core/approvals/wildcard.js

@@ -0,0 +1,27 @@
+/**
+ * Minimal wildcard matcher used by the approval allowlist.
+ *
+ * Ported from the opencode/kilocode permission engines:
+ * - `*` matches zero or more characters
+ * - `?` matches exactly one character
+ * - a trailing " *" is relaxed to "( .*)?" so a pattern like `git *` also
+ *   matches the bare `git` command (arguments become optional)
+ *
+ * Matching is anchored (`^...$`) and treats the input as a single line so `*`
+ * spans newlines. Backslashes are normalized to forward slashes so path
+ * patterns behave the same on Windows.
+ */
+export function matchWildcard(input, pattern) {
+    const normalized = input.replaceAll("\\", "/");
+    let escaped = pattern
+        .replaceAll("\\", "/")
+        .replace(/[.+^${}()|[\]]/g, "\\$&")
+        .replace(/\*/g, ".*")
+        .replace(/\?/g, ".");
+    if (escaped.endsWith(" .*")) {
+        escaped = `${escaped.slice(0, -3)}( .*)?`;
+    }
+    const flags = process.platform === "win32" ? "si" : "s";
+    return new RegExp(`^${escaped}$`, flags).test(normalized);
+}
+//# sourceMappingURL=wildcard.js.map

package/dist/core/approvals/wildcard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wildcard.js","sourceRoot":"","sources":["../../../src/core/approvals/wildcard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,OAAe;IAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/C,IAAI,OAAO,GAAG,OAAO;SAClB,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC;SAClC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC;SACpB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEvB,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5C,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACxD,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC5D,CAAC"}