open-multi-agent-kit 0.80.5 → 0.80.7

package/dist/core/lean-context-policy.js

@@ -0,0 +1,108 @@
+import { createHash } from "node:crypto";
+const CHARS_PER_TOKEN_ESTIMATE = 4;
+const TRACKING_KEY_SEPARATOR = "\u0000";
+export const LEAN_CONTEXT_DEFAULT_MIN_STUB_TOKENS = 256;
+export const LEAN_CONTEXT_NEVER_STUB_FILENAMES = ["AGENTS.md", "CLAUDE.md", "SYSTEM.md"];
+const DEFAULT_SECRET_PATTERNS = [
+    /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----/i,
+    /\b(?:api[_-]?key|access[_-]?token|auth[_-]?token|refresh[_-]?token|client[_-]?secret|password|passwd|pwd)\b\s*[:=]\s*["']?[^\s"']{8,}/i,
+    /\bauthorization\s*:\s*bearer\s+[A-Za-z0-9._~+/=-]{10,}/i,
+    /\b(?:gh[pousr]_|sk-|xox[baprs]-)[A-Za-z0-9_=-]{10,}/i,
+];
+export function createLeanContextPolicyState(hashesByToolKey = {}) {
+    return { hashesByToolKey: { ...hashesByToolKey } };
+}
+export function decideLeanContextEmission(input) {
+    const contentSha256 = sha256Text(input.content);
+    const trackingKey = createLeanContextTrackingKey(input.tool, input.key);
+    const previousSha256 = input.state.hashesByToolKey[trackingKey];
+    const estimatedTokens = estimateLeanContextTokens(input.content);
+    const nextState = updateTrackedHash(input.state, trackingKey, contentSha256);
+    const baseDecision = {
+        contentSha256,
+        previousSha256,
+        estimatedTokens,
+        nextState,
+    };
+    if (previousSha256 === undefined) {
+        return { ...baseDecision, emit: "full", reason: "first-pass" };
+    }
+    if (previousSha256 !== contentSha256) {
+        return { ...baseDecision, emit: "full", reason: "changed" };
+    }
+    if (isNeverStubParentInstruction(input.path ?? input.key, input.neverStubFilenames)) {
+        return { ...baseDecision, emit: "full", reason: "never-stub-parent-instruction" };
+    }
+    if (containsSecretPattern(input.content, input.secretPatterns)) {
+        return { ...baseDecision, emit: "full", reason: "secret-pattern" };
+    }
+    const minStubTokens = normalizeMinStubTokens(input.minStubTokens);
+    if (estimatedTokens < minStubTokens) {
+        return { ...baseDecision, emit: "full", reason: "below-min-token-threshold" };
+    }
+    return {
+        ...baseDecision,
+        emit: "stub",
+        reason: "unchanged",
+        stub: formatLeanContextUnchangedStub({
+            tool: input.tool,
+            key: input.key,
+            contentSha256,
+            estimatedTokens,
+        }),
+    };
+}
+export function getLeanContextTrackingHash(state, tool, key) {
+    return state.hashesByToolKey[createLeanContextTrackingKey(tool, key)];
+}
+export function createLeanContextTrackingKey(tool, key) {
+    return `${tool}${TRACKING_KEY_SEPARATOR}${key}`;
+}
+export function estimateLeanContextTokens(content) {
+    if (content.length === 0)
+        return 0;
+    return Math.ceil(content.length / CHARS_PER_TOKEN_ESTIMATE);
+}
+export function formatLeanContextUnchangedStub(input) {
+    return `[lean-context] ${input.tool} result for ${input.key} unchanged; omitted ${input.estimatedTokens} estimated tokens (sha256:${input.contentSha256.slice(0, 12)}).`;
+}
+function updateTrackedHash(state, trackingKey, contentSha256) {
+    if (state.hashesByToolKey[trackingKey] === contentSha256) {
+        return state;
+    }
+    return {
+        hashesByToolKey: {
+            ...state.hashesByToolKey,
+            [trackingKey]: contentSha256,
+        },
+    };
+}
+function sha256Text(content) {
+    return createHash("sha256").update(content, "utf8").digest("hex");
+}
+function isNeverStubParentInstruction(pathOrKey, filenames) {
+    const allowedNames = filenames ?? LEAN_CONTEXT_NEVER_STUB_FILENAMES;
+    const basename = getBasename(pathOrKey).toUpperCase();
+    return allowedNames.some((name) => name.toUpperCase() === basename);
+}
+function getBasename(pathOrKey) {
+    const normalized = pathOrKey.replaceAll("\\", "/");
+    const parts = normalized.split("/");
+    return parts.at(-1) ?? normalized;
+}
+function containsSecretPattern(content, patterns) {
+    const activePatterns = patterns ?? DEFAULT_SECRET_PATTERNS;
+    return activePatterns.some((pattern) => regexTestStateless(pattern, content));
+}
+function regexTestStateless(pattern, content) {
+    const flags = pattern.flags.replace(/[gy]/g, "");
+    return new RegExp(pattern.source, flags).test(content);
+}
+function normalizeMinStubTokens(value) {
+    if (value === undefined)
+        return LEAN_CONTEXT_DEFAULT_MIN_STUB_TOKENS;
+    if (!Number.isFinite(value) || value <= 0)
+        return 0;
+    return Math.ceil(value);
+}
+//# sourceMappingURL=lean-context-policy.js.map

package/dist/core/lean-context-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lean-context-policy.js","sourceRoot":"","sources":["../../src/core/lean-context-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AACnC,MAAM,sBAAsB,GAAG,QAAQ,CAAC;AAExC,MAAM,CAAC,MAAM,oCAAoC,GAAG,GAAG,CAAC;AACxD,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAElG,MAAM,uBAAuB,GAAsB;IAClD,wCAAwC;IACxC,wIAAwI;IACxI,yDAAyD;IACzD,sDAAsD;CACtD,CAAC;AA6CF,MAAM,UAAU,4BAA4B,CAC3C,eAAe,GAAqC,EAAE,EAC7B;IACzB,OAAO,EAAE,eAAe,EAAE,EAAE,GAAG,eAAe,EAAE,EAAE,CAAC;AAAA,CACnD;AAED,MAAM,UAAU,yBAAyB,CAAC,KAA6B,EAA6B;IACnG,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACxE,MAAM,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,eAAe,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG;QACpB,aAAa;QACb,cAAc;QACd,eAAe;QACf,SAAS;KACT,CAAC;IAEF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,cAAc,KAAK,aAAa,EAAE,CAAC;QACtC,OAAO,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC7D,CAAC;IAED,IAAI,4BAA4B,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACrF,OAAO,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IACnF,CAAC;IAED,IAAI,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,aAAa,GAAG,sBAAsB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClE,IAAI,eAAe,GAAG,aAAa,EAAE,CAAC;QACrC,OAAO,EAAE,GAAG,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAC/E,CAAC;IAED,OAAO;QACN,GAAG,YAAY;QACf,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,8BAA8B,CAAC;YACpC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,aAAa;YACb,eAAe;SACf,CAAC;KACF,CAAC;AAAA,CACF;AAED,MAAM,UAAU,0BAA0B,CACzC,KAA6B,EAC7B,IAAY,EACZ,GAAW,EACU;IACrB,OAAO,KAAK,CAAC,eAAe,CAAC,4BAA4B,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AAAA,CACtE;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAY,EAAE,GAAW,EAAU;IAC/E,OAAO,GAAG,IAAI,GAAG,sBAAsB,GAAG,GAAG,EAAE,CAAC;AAAA,CAChD;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAe,EAAU;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,wBAAwB,CAAC,CAAC;AAAA,CAC5D;AAED,MAAM,UAAU,8BAA8B,CAAC,KAK9C,EAAU;IACV,OAAO,kBAAkB,KAAK,CAAC,IAAI,eAAe,KAAK,CAAC,GAAG,uBAAuB,KAAK,CAAC,eAAe,6BAA6B,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;AAAA,CACzK;AAED,SAAS,iBAAiB,CACzB,KAA6B,EAC7B,WAAmB,EACnB,aAAqB,EACI;IACzB,IAAI,KAAK,CAAC,eAAe,CAAC,WAAW,CAAC,KAAK,aAAa,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO;QACN,eAAe,EAAE;YAChB,GAAG,KAAK,CAAC,eAAe;YACxB,CAAC,WAAW,CAAC,EAAE,aAAa;SAC5B;KACD,CAAC;AAAA,CACF;AAED,SAAS,UAAU,CAAC,OAAe,EAAU;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAClE;AAED,SAAS,4BAA4B,CAAC,SAAiB,EAAE,SAA6B,EAAW;IAChG,MAAM,YAAY,GAAG,SAAS,IAAI,iCAAiC,CAAC;IACpE,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,CAAC;AAAA,CACpE;AAED,SAAS,WAAW,CAAC,SAAiB,EAAU;IAC/C,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC;AAAA,CAClC;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,QAA4B,EAAW;IACtF,MAAM,cAAc,GAAG,QAAQ,IAAI,uBAAuB,CAAC;IAC3D,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAAA,CAC9E;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,OAAe,EAAW;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACjD,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAAA,CACvD;AAED,SAAS,sBAAsB,CAAC,KAAyB,EAAU;IAClE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,oCAAoC,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CACxB","sourcesContent":["import { createHash } from \"node:crypto\";\n\nconst CHARS_PER_TOKEN_ESTIMATE = 4;\nconst TRACKING_KEY_SEPARATOR = \"\\u0000\";\n\nexport const LEAN_CONTEXT_DEFAULT_MIN_STUB_TOKENS = 256;\nexport const LEAN_CONTEXT_NEVER_STUB_FILENAMES = [\"AGENTS.md\", \"CLAUDE.md\", \"SYSTEM.md\"] as const;\n\nconst DEFAULT_SECRET_PATTERNS: readonly RegExp[] = [\n\t/-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----/i,\n\t/\\b(?:api[_-]?key|access[_-]?token|auth[_-]?token|refresh[_-]?token|client[_-]?secret|password|passwd|pwd)\\b\\s*[:=]\\s*[\"']?[^\\s\"']{8,}/i,\n\t/\\bauthorization\\s*:\\s*bearer\\s+[A-Za-z0-9._~+/=-]{10,}/i,\n\t/\\b(?:gh[pousr]_|sk-|xox[baprs]-)[A-Za-z0-9_=-]{10,}/i,\n];\n\nexport type LeanContextEmission = \"full\" | \"stub\";\n\nexport type LeanContextDecisionReason =\n\t| \"first-pass\"\n\t| \"changed\"\n\t| \"unchanged\"\n\t| \"never-stub-parent-instruction\"\n\t| \"secret-pattern\"\n\t| \"below-min-token-threshold\";\n\nexport interface LeanContextPolicyState {\n\treadonly hashesByToolKey: Readonly<Record<string, string>>;\n}\n\nexport interface LeanContextPolicyOptions {\n\t/** Repeated unchanged outputs below this token estimate stay full. */\n\treadonly minStubTokens?: number;\n\t/** Basenames that must never be replaced with an unchanged stub. */\n\treadonly neverStubFilenames?: readonly string[];\n\t/** Patterns that force full output when matched. */\n\treadonly secretPatterns?: readonly RegExp[];\n}\n\nexport interface LeanContextPolicyInput extends LeanContextPolicyOptions {\n\treadonly state: LeanContextPolicyState;\n\treadonly tool: string;\n\t/** Stable caller-defined identity inside the tool, such as path or request key. */\n\treadonly key: string;\n\treadonly content: string;\n\t/** Optional path used for parent-instruction filename checks. Defaults to key. */\n\treadonly path?: string;\n}\n\nexport interface LeanContextPolicyDecision {\n\treadonly emit: LeanContextEmission;\n\treadonly reason: LeanContextDecisionReason;\n\treadonly contentSha256: string;\n\treadonly previousSha256?: string;\n\treadonly estimatedTokens: number;\n\treadonly nextState: LeanContextPolicyState;\n\treadonly stub?: string;\n}\n\nexport function createLeanContextPolicyState(\n\thashesByToolKey: Readonly<Record<string, string>> = {},\n): LeanContextPolicyState {\n\treturn { hashesByToolKey: { ...hashesByToolKey } };\n}\n\nexport function decideLeanContextEmission(input: LeanContextPolicyInput): LeanContextPolicyDecision {\n\tconst contentSha256 = sha256Text(input.content);\n\tconst trackingKey = createLeanContextTrackingKey(input.tool, input.key);\n\tconst previousSha256 = input.state.hashesByToolKey[trackingKey];\n\tconst estimatedTokens = estimateLeanContextTokens(input.content);\n\tconst nextState = updateTrackedHash(input.state, trackingKey, contentSha256);\n\tconst baseDecision = {\n\t\tcontentSha256,\n\t\tpreviousSha256,\n\t\testimatedTokens,\n\t\tnextState,\n\t};\n\n\tif (previousSha256 === undefined) {\n\t\treturn { ...baseDecision, emit: \"full\", reason: \"first-pass\" };\n\t}\n\n\tif (previousSha256 !== contentSha256) {\n\t\treturn { ...baseDecision, emit: \"full\", reason: \"changed\" };\n\t}\n\n\tif (isNeverStubParentInstruction(input.path ?? input.key, input.neverStubFilenames)) {\n\t\treturn { ...baseDecision, emit: \"full\", reason: \"never-stub-parent-instruction\" };\n\t}\n\n\tif (containsSecretPattern(input.content, input.secretPatterns)) {\n\t\treturn { ...baseDecision, emit: \"full\", reason: \"secret-pattern\" };\n\t}\n\n\tconst minStubTokens = normalizeMinStubTokens(input.minStubTokens);\n\tif (estimatedTokens < minStubTokens) {\n\t\treturn { ...baseDecision, emit: \"full\", reason: \"below-min-token-threshold\" };\n\t}\n\n\treturn {\n\t\t...baseDecision,\n\t\temit: \"stub\",\n\t\treason: \"unchanged\",\n\t\tstub: formatLeanContextUnchangedStub({\n\t\t\ttool: input.tool,\n\t\t\tkey: input.key,\n\t\t\tcontentSha256,\n\t\t\testimatedTokens,\n\t\t}),\n\t};\n}\n\nexport function getLeanContextTrackingHash(\n\tstate: LeanContextPolicyState,\n\ttool: string,\n\tkey: string,\n): string | undefined {\n\treturn state.hashesByToolKey[createLeanContextTrackingKey(tool, key)];\n}\n\nexport function createLeanContextTrackingKey(tool: string, key: string): string {\n\treturn `${tool}${TRACKING_KEY_SEPARATOR}${key}`;\n}\n\nexport function estimateLeanContextTokens(content: string): number {\n\tif (content.length === 0) return 0;\n\treturn Math.ceil(content.length / CHARS_PER_TOKEN_ESTIMATE);\n}\n\nexport function formatLeanContextUnchangedStub(input: {\n\treadonly tool: string;\n\treadonly key: string;\n\treadonly contentSha256: string;\n\treadonly estimatedTokens: number;\n}): string {\n\treturn `[lean-context] ${input.tool} result for ${input.key} unchanged; omitted ${input.estimatedTokens} estimated tokens (sha256:${input.contentSha256.slice(0, 12)}).`;\n}\n\nfunction updateTrackedHash(\n\tstate: LeanContextPolicyState,\n\ttrackingKey: string,\n\tcontentSha256: string,\n): LeanContextPolicyState {\n\tif (state.hashesByToolKey[trackingKey] === contentSha256) {\n\t\treturn state;\n\t}\n\treturn {\n\t\thashesByToolKey: {\n\t\t\t...state.hashesByToolKey,\n\t\t\t[trackingKey]: contentSha256,\n\t\t},\n\t};\n}\n\nfunction sha256Text(content: string): string {\n\treturn createHash(\"sha256\").update(content, \"utf8\").digest(\"hex\");\n}\n\nfunction isNeverStubParentInstruction(pathOrKey: string, filenames?: readonly string[]): boolean {\n\tconst allowedNames = filenames ?? LEAN_CONTEXT_NEVER_STUB_FILENAMES;\n\tconst basename = getBasename(pathOrKey).toUpperCase();\n\treturn allowedNames.some((name) => name.toUpperCase() === basename);\n}\n\nfunction getBasename(pathOrKey: string): string {\n\tconst normalized = pathOrKey.replaceAll(\"\\\\\", \"/\");\n\tconst parts = normalized.split(\"/\");\n\treturn parts.at(-1) ?? normalized;\n}\n\nfunction containsSecretPattern(content: string, patterns?: readonly RegExp[]): boolean {\n\tconst activePatterns = patterns ?? DEFAULT_SECRET_PATTERNS;\n\treturn activePatterns.some((pattern) => regexTestStateless(pattern, content));\n}\n\nfunction regexTestStateless(pattern: RegExp, content: string): boolean {\n\tconst flags = pattern.flags.replace(/[gy]/g, \"\");\n\treturn new RegExp(pattern.source, flags).test(content);\n}\n\nfunction normalizeMinStubTokens(value: number | undefined): number {\n\tif (value === undefined) return LEAN_CONTEXT_DEFAULT_MIN_STUB_TOKENS;\n\tif (!Number.isFinite(value) || value <= 0) return 0;\n\treturn Math.ceil(value);\n}\n"]}

package/dist/core/loadout-access-policy.d.ts

@@ -0,0 +1,41 @@
+import type { LoadoutAccessEntry, LoadoutCommands } from "./loadouts.ts";
+export type LoadoutAccessOperation = "read" | "write" | "execute";
+export interface CreateLoadoutAccessPolicyOptions {
+    cwd: string;
+    activeTools: readonly string[];
+    readSet?: readonly LoadoutAccessEntry[];
+    writeSet?: readonly LoadoutAccessEntry[];
+    blockedPaths?: readonly string[];
+    commands?: LoadoutCommands;
+}
+export interface LoadoutAccessPolicy {
+    cwd: string;
+    activeTools: readonly string[];
+    readRoots: readonly string[];
+    writeRoots: readonly string[];
+    blockedPaths: readonly string[];
+    commands: LoadoutCommands;
+}
+export interface LoadoutPathAccessRequest {
+    operation: "read" | "write";
+    toolName: string;
+    path: string;
+}
+export interface LoadoutCommandAccessRequest {
+    operation: "execute";
+    toolName: string;
+    command: string;
+}
+export type LoadoutAccessRequest = LoadoutPathAccessRequest | LoadoutCommandAccessRequest;
+export interface LoadoutAccessDecision {
+    allowed: boolean;
+    reason: string;
+    normalizedPath?: string;
+    normalizedCommand?: string;
+}
+export type LoadoutAccessGuard = (request: LoadoutAccessRequest) => LoadoutAccessDecision;
+export declare function assertLoadoutAccess(guard: LoadoutAccessGuard | undefined, request: LoadoutAccessRequest): void;
+export declare function createLoadoutAccessPolicy(options: CreateLoadoutAccessPolicyOptions): LoadoutAccessPolicy;
+export declare function isActiveLoadoutTool(policy: Pick<LoadoutAccessPolicy, "activeTools">, toolName: string): boolean;
+export declare function decideLoadoutAccess(policy: LoadoutAccessPolicy, request: LoadoutAccessRequest): LoadoutAccessDecision;
+//# sourceMappingURL=loadout-access-policy.d.ts.map

package/dist/core/loadout-access-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadout-access-policy.d.ts","sourceRoot":"","sources":["../../src/core/loadout-access-policy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEzE,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;AAElE,MAAM,WAAW,gCAAgC;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,OAAO,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACxC,QAAQ,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACzC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,EAAE,eAAe,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACxC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,2BAA2B;IAC3C,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,oBAAoB,GAAG,wBAAwB,GAAG,2BAA2B,CAAC;AAE1F,MAAM,WAAW,qBAAqB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,oBAAoB,KAAK,qBAAqB,CAAC;AAE1F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,GAAG,SAAS,EAAE,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAM9G;AAID,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,gCAAgC,GAAG,mBAAmB,CAYxG;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE/G;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,oBAAoB,GAAG,qBAAqB,CAMrH","sourcesContent":["import { existsSync, realpathSync } from \"node:fs\";\nimport { basename, dirname, isAbsolute, relative, resolve } from \"node:path\";\nimport type { LoadoutAccessEntry, LoadoutCommands } from \"./loadouts.ts\";\n\nexport type LoadoutAccessOperation = \"read\" | \"write\" | \"execute\";\n\nexport interface CreateLoadoutAccessPolicyOptions {\n\tcwd: string;\n\tactiveTools: readonly string[];\n\treadSet?: readonly LoadoutAccessEntry[];\n\twriteSet?: readonly LoadoutAccessEntry[];\n\tblockedPaths?: readonly string[];\n\tcommands?: LoadoutCommands;\n}\n\nexport interface LoadoutAccessPolicy {\n\tcwd: string;\n\tactiveTools: readonly string[];\n\treadRoots: readonly string[];\n\twriteRoots: readonly string[];\n\tblockedPaths: readonly string[];\n\tcommands: LoadoutCommands;\n}\n\nexport interface LoadoutPathAccessRequest {\n\toperation: \"read\" | \"write\";\n\ttoolName: string;\n\tpath: string;\n}\n\nexport interface LoadoutCommandAccessRequest {\n\toperation: \"execute\";\n\ttoolName: string;\n\tcommand: string;\n}\n\nexport type LoadoutAccessRequest = LoadoutPathAccessRequest | LoadoutCommandAccessRequest;\n\nexport interface LoadoutAccessDecision {\n\tallowed: boolean;\n\treason: string;\n\tnormalizedPath?: string;\n\tnormalizedCommand?: string;\n}\n\nexport type LoadoutAccessGuard = (request: LoadoutAccessRequest) => LoadoutAccessDecision;\n\nexport function assertLoadoutAccess(guard: LoadoutAccessGuard | undefined, request: LoadoutAccessRequest): void {\n\tif (!guard) return;\n\tconst decision = guard(request);\n\tif (!decision.allowed) {\n\t\tthrow new Error(`loadout: ${decision.reason}`);\n\t}\n}\n\nconst DEFAULT_BLOCKED_PATHS = [\"**/.env*\", \"**/*secret*\", \"**/*key*\", \"**/.git\", \"**/.git/*\"] as const;\n\nexport function createLoadoutAccessPolicy(options: CreateLoadoutAccessPolicyOptions): LoadoutAccessPolicy {\n\tconst cwd = normalizeRootPath(options.cwd);\n\treturn {\n\t\tcwd,\n\t\tactiveTools: uniqueSorted(\n\t\t\toptions.activeTools.map((toolName) => toolName.trim()).filter((toolName) => toolName !== \"\"),\n\t\t),\n\t\treadRoots: normalizeAccessSet(cwd, options.readSet),\n\t\twriteRoots: normalizeAccessSet(cwd, options.writeSet),\n\t\tblockedPaths: uniqueSorted(options.blockedPaths ?? DEFAULT_BLOCKED_PATHS),\n\t\tcommands: options.commands ?? { mode: \"none\" },\n\t};\n}\n\nexport function isActiveLoadoutTool(policy: Pick<LoadoutAccessPolicy, \"activeTools\">, toolName: string): boolean {\n\treturn policy.activeTools.includes(toolName.trim());\n}\n\nexport function decideLoadoutAccess(policy: LoadoutAccessPolicy, request: LoadoutAccessRequest): LoadoutAccessDecision {\n\tif (!isActiveLoadoutTool(policy, request.toolName)) {\n\t\treturn deny(`inactive tool: ${request.toolName}`);\n\t}\n\tif (request.operation === \"execute\") return decideCommandAccess(policy, request);\n\treturn decidePathAccess(policy, request);\n}\n\nfunction decidePathAccess(policy: LoadoutAccessPolicy, request: LoadoutPathAccessRequest): LoadoutAccessDecision {\n\tconst normalizedPath = normalizeRequestPath(policy.cwd, request.path);\n\tif (!normalizedPath) return deny(\"invalid path\");\n\tif (isBlockedPath(policy, normalizedPath)) return deny(\"blocked path\", normalizedPath);\n\n\tif (request.operation === \"read\") {\n\t\tconst roots = uniqueSorted([...policy.readRoots, ...policy.writeRoots]);\n\t\tif (roots.length === 0) return deny(\"outside read scope: empty read/write set\", normalizedPath);\n\t\tif (roots.some((root) => containsPath(root, normalizedPath))) return allow(normalizedPath);\n\t\treturn deny(\"outside read scope\", normalizedPath);\n\t}\n\n\tif (policy.writeRoots.length === 0) return deny(\"outside write scope: empty write set\", normalizedPath);\n\tif (policy.writeRoots.some((root) => containsPath(root, normalizedPath))) return allow(normalizedPath);\n\treturn deny(\"outside write scope\", normalizedPath);\n}\n\nfunction decideCommandAccess(policy: LoadoutAccessPolicy, request: LoadoutCommandAccessRequest): LoadoutAccessDecision {\n\tconst normalizedCommand = request.command.trim();\n\tif (normalizedCommand === \"\" || normalizedCommand.includes(\"\\0\")) return denyCommand(\"invalid command\");\n\tif (policy.commands.mode === \"none\") return denyCommand(\"command mode none\");\n\tif (policy.commands.blockPatterns?.some((pattern) => commandMatchesPattern(pattern, normalizedCommand))) {\n\t\treturn denyCommand(\"blocked command pattern\");\n\t}\n\tif (policy.commands.allowPatterns?.some((pattern) => commandMatchesPattern(pattern, normalizedCommand))) {\n\t\treturn { allowed: true, reason: \"allowed\", normalizedCommand };\n\t}\n\treturn denyCommand(`command mode ${policy.commands.mode} requires an explicit allow pattern`);\n}\n\nfunction allow(normalizedPath: string): LoadoutAccessDecision {\n\treturn { allowed: true, reason: \"allowed\", normalizedPath };\n}\n\nfunction deny(reason: string, normalizedPath?: string): LoadoutAccessDecision {\n\treturn { allowed: false, reason, normalizedPath };\n}\n\nfunction denyCommand(reason: string): LoadoutAccessDecision {\n\treturn { allowed: false, reason };\n}\n\nfunction normalizeRootPath(path: string): string {\n\tconst normalized = normalizePathSeparators(path);\n\tif (normalized.trim() === \"\" || normalized.includes(\"\\0\")) {\n\t\tthrow new Error(\"loadout access policy cwd must be a non-empty path\");\n\t}\n\treturn stripTrailingSeparator(canonicalizeExistingPrefix(resolve(normalized)));\n}\n\nfunction normalizeRequestPath(cwd: string, requestedPath: string): string | undefined {\n\tconst normalized = normalizePathSeparators(requestedPath);\n\tif (normalized.trim() === \"\" || normalized.includes(\"\\0\")) return undefined;\n\treturn stripTrailingSeparator(canonicalizeExistingPrefix(resolve(cwd, normalized)));\n}\n\nfunction normalizeAccessSet(cwd: string, accessSet: readonly LoadoutAccessEntry[] | undefined): string[] {\n\tif (!accessSet) return [];\n\tconst roots: string[] = [];\n\tfor (const entry of accessSet) {\n\t\tif (entry.symbols && entry.symbols.length > 0) continue;\n\t\tconst normalized = normalizePathSeparators(entry.path);\n\t\tif (normalized.trim() === \"\" || normalized.includes(\"\\0\")) continue;\n\t\troots.push(stripTrailingSeparator(canonicalizeExistingPrefix(resolve(cwd, normalized))));\n\t}\n\treturn uniqueSorted(roots);\n}\n\nfunction canonicalizeExistingPrefix(path: string): string {\n\ttry {\n\t\treturn realpathSync.native(path);\n\t} catch {\n\t\tif (existsSync(path)) return resolve(path);\n\t\tconst parent = dirname(path);\n\t\tif (parent === path) return resolve(path);\n\t\treturn resolve(canonicalizeExistingPrefix(parent), basename(path));\n\t}\n}\n\nfunction containsPath(root: string, candidate: string): boolean {\n\tif (candidate === root) return true;\n\tconst relativePath = relative(root, candidate);\n\treturn relativePath !== \"\" && !relativePath.startsWith(\"..\") && !isAbsolute(relativePath);\n}\n\nfunction isBlockedPath(policy: LoadoutAccessPolicy, normalizedPath: string): boolean {\n\tconst relativeCandidate = toForwardSlashes(relative(policy.cwd, normalizedPath));\n\tconst candidates = uniqueSorted([toForwardSlashes(normalizedPath), relativeCandidate]);\n\treturn policy.blockedPaths.some((pattern) => candidates.some((candidate) => globMatch(pattern, candidate)));\n}\n\nfunction commandMatchesPattern(pattern: string, command: string): boolean {\n\treturn pattern === command || globMatch(pattern, command);\n}\n\nfunction normalizePathSeparators(path: string): string {\n\treturn path.replaceAll(\"\\\\\", \"/\");\n}\n\nfunction stripTrailingSeparator(path: string): string {\n\tif (path === \"/\") return path;\n\treturn path.endsWith(\"/\") ? path.slice(0, -1) : path;\n}\n\nfunction toForwardSlashes(path: string): string {\n\treturn path.replaceAll(\"\\\\\", \"/\");\n}\n\nfunction globMatch(glob: string, value: string): boolean {\n\treturn globToRegExp(normalizePathSeparators(glob)).test(toForwardSlashes(value));\n}\n\nfunction globToRegExp(glob: string): RegExp {\n\tlet pattern = \"\";\n\tfor (let index = 0; index < glob.length; index++) {\n\t\tconst char = glob[index];\n\t\tif (char === \"*\") {\n\t\t\tif (glob[index + 1] === \"*\") {\n\t\t\t\tif (glob[index + 2] === \"/\") {\n\t\t\t\t\tpattern += \"(?:.*/)?\";\n\t\t\t\t\tindex += 2;\n\t\t\t\t} else {\n\t\t\t\t\tpattern += \".*\";\n\t\t\t\t\tindex++;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tpattern += \"[^/]*\";\n\t\t\t}\n\t\t} else if (char === \"?\") {\n\t\t\tpattern += \"[^/]\";\n\t\t} else {\n\t\t\tpattern += char.replace(/[.+^${}()|[\\]\\\\]/g, \"\\\\$&\");\n\t\t}\n\t}\n\treturn new RegExp(`^${pattern}$`);\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values)].sort((a, b) => {\n\t\tif (a < b) return -1;\n\t\tif (a > b) return 1;\n\t\treturn 0;\n\t});\n}\n"]}

package/dist/core/loadout-access-policy.js

@@ -0,0 +1,182 @@
+import { existsSync, realpathSync } from "node:fs";
+import { basename, dirname, isAbsolute, relative, resolve } from "node:path";
+export function assertLoadoutAccess(guard, request) {
+    if (!guard)
+        return;
+    const decision = guard(request);
+    if (!decision.allowed) {
+        throw new Error(`loadout: ${decision.reason}`);
+    }
+}
+const DEFAULT_BLOCKED_PATHS = ["**/.env*", "**/*secret*", "**/*key*", "**/.git", "**/.git/*"];
+export function createLoadoutAccessPolicy(options) {
+    const cwd = normalizeRootPath(options.cwd);
+    return {
+        cwd,
+        activeTools: uniqueSorted(options.activeTools.map((toolName) => toolName.trim()).filter((toolName) => toolName !== "")),
+        readRoots: normalizeAccessSet(cwd, options.readSet),
+        writeRoots: normalizeAccessSet(cwd, options.writeSet),
+        blockedPaths: uniqueSorted(options.blockedPaths ?? DEFAULT_BLOCKED_PATHS),
+        commands: options.commands ?? { mode: "none" },
+    };
+}
+export function isActiveLoadoutTool(policy, toolName) {
+    return policy.activeTools.includes(toolName.trim());
+}
+export function decideLoadoutAccess(policy, request) {
+    if (!isActiveLoadoutTool(policy, request.toolName)) {
+        return deny(`inactive tool: ${request.toolName}`);
+    }
+    if (request.operation === "execute")
+        return decideCommandAccess(policy, request);
+    return decidePathAccess(policy, request);
+}
+function decidePathAccess(policy, request) {
+    const normalizedPath = normalizeRequestPath(policy.cwd, request.path);
+    if (!normalizedPath)
+        return deny("invalid path");
+    if (isBlockedPath(policy, normalizedPath))
+        return deny("blocked path", normalizedPath);
+    if (request.operation === "read") {
+        const roots = uniqueSorted([...policy.readRoots, ...policy.writeRoots]);
+        if (roots.length === 0)
+            return deny("outside read scope: empty read/write set", normalizedPath);
+        if (roots.some((root) => containsPath(root, normalizedPath)))
+            return allow(normalizedPath);
+        return deny("outside read scope", normalizedPath);
+    }
+    if (policy.writeRoots.length === 0)
+        return deny("outside write scope: empty write set", normalizedPath);
+    if (policy.writeRoots.some((root) => containsPath(root, normalizedPath)))
+        return allow(normalizedPath);
+    return deny("outside write scope", normalizedPath);
+}
+function decideCommandAccess(policy, request) {
+    const normalizedCommand = request.command.trim();
+    if (normalizedCommand === "" || normalizedCommand.includes("\0"))
+        return denyCommand("invalid command");
+    if (policy.commands.mode === "none")
+        return denyCommand("command mode none");
+    if (policy.commands.blockPatterns?.some((pattern) => commandMatchesPattern(pattern, normalizedCommand))) {
+        return denyCommand("blocked command pattern");
+    }
+    if (policy.commands.allowPatterns?.some((pattern) => commandMatchesPattern(pattern, normalizedCommand))) {
+        return { allowed: true, reason: "allowed", normalizedCommand };
+    }
+    return denyCommand(`command mode ${policy.commands.mode} requires an explicit allow pattern`);
+}
+function allow(normalizedPath) {
+    return { allowed: true, reason: "allowed", normalizedPath };
+}
+function deny(reason, normalizedPath) {
+    return { allowed: false, reason, normalizedPath };
+}
+function denyCommand(reason) {
+    return { allowed: false, reason };
+}
+function normalizeRootPath(path) {
+    const normalized = normalizePathSeparators(path);
+    if (normalized.trim() === "" || normalized.includes("\0")) {
+        throw new Error("loadout access policy cwd must be a non-empty path");
+    }
+    return stripTrailingSeparator(canonicalizeExistingPrefix(resolve(normalized)));
+}
+function normalizeRequestPath(cwd, requestedPath) {
+    const normalized = normalizePathSeparators(requestedPath);
+    if (normalized.trim() === "" || normalized.includes("\0"))
+        return undefined;
+    return stripTrailingSeparator(canonicalizeExistingPrefix(resolve(cwd, normalized)));
+}
+function normalizeAccessSet(cwd, accessSet) {
+    if (!accessSet)
+        return [];
+    const roots = [];
+    for (const entry of accessSet) {
+        if (entry.symbols && entry.symbols.length > 0)
+            continue;
+        const normalized = normalizePathSeparators(entry.path);
+        if (normalized.trim() === "" || normalized.includes("\0"))
+            continue;
+        roots.push(stripTrailingSeparator(canonicalizeExistingPrefix(resolve(cwd, normalized))));
+    }
+    return uniqueSorted(roots);
+}
+function canonicalizeExistingPrefix(path) {
+    try {
+        return realpathSync.native(path);
+    }
+    catch {
+        if (existsSync(path))
+            return resolve(path);
+        const parent = dirname(path);
+        if (parent === path)
+            return resolve(path);
+        return resolve(canonicalizeExistingPrefix(parent), basename(path));
+    }
+}
+function containsPath(root, candidate) {
+    if (candidate === root)
+        return true;
+    const relativePath = relative(root, candidate);
+    return relativePath !== "" && !relativePath.startsWith("..") && !isAbsolute(relativePath);
+}
+function isBlockedPath(policy, normalizedPath) {
+    const relativeCandidate = toForwardSlashes(relative(policy.cwd, normalizedPath));
+    const candidates = uniqueSorted([toForwardSlashes(normalizedPath), relativeCandidate]);
+    return policy.blockedPaths.some((pattern) => candidates.some((candidate) => globMatch(pattern, candidate)));
+}
+function commandMatchesPattern(pattern, command) {
+    return pattern === command || globMatch(pattern, command);
+}
+function normalizePathSeparators(path) {
+    return path.replaceAll("\\", "/");
+}
+function stripTrailingSeparator(path) {
+    if (path === "/")
+        return path;
+    return path.endsWith("/") ? path.slice(0, -1) : path;
+}
+function toForwardSlashes(path) {
+    return path.replaceAll("\\", "/");
+}
+function globMatch(glob, value) {
+    return globToRegExp(normalizePathSeparators(glob)).test(toForwardSlashes(value));
+}
+function globToRegExp(glob) {
+    let pattern = "";
+    for (let index = 0; index < glob.length; index++) {
+        const char = glob[index];
+        if (char === "*") {
+            if (glob[index + 1] === "*") {
+                if (glob[index + 2] === "/") {
+                    pattern += "(?:.*/)?";
+                    index += 2;
+                }
+                else {
+                    pattern += ".*";
+                    index++;
+                }
+            }
+            else {
+                pattern += "[^/]*";
+            }
+        }
+        else if (char === "?") {
+            pattern += "[^/]";
+        }
+        else {
+            pattern += char.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+        }
+    }
+    return new RegExp(`^${pattern}$`);
+}
+function uniqueSorted(values) {
+    return [...new Set(values)].sort((a, b) => {
+        if (a < b)
+            return -1;
+        if (a > b)
+            return 1;
+        return 0;
+    });
+}
+//# sourceMappingURL=loadout-access-policy.js.map

package/dist/core/loadout-access-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadout-access-policy.js","sourceRoot":"","sources":["../../src/core/loadout-access-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA8C7E,MAAM,UAAU,mBAAmB,CAAC,KAAqC,EAAE,OAA6B,EAAQ;IAC/G,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,YAAY,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;AAAA,CACD;AAED,MAAM,qBAAqB,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAU,CAAC;AAEvG,MAAM,UAAU,yBAAyB,CAAC,OAAyC,EAAuB;IACzG,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO;QACN,GAAG;QACH,WAAW,EAAE,YAAY,CACxB,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,EAAE,CAAC,CAC5F;QACD,SAAS,EAAE,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC;QACnD,UAAU,EAAE,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC;QACrD,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;QACzE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;KAC9C,CAAC;AAAA,CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAgD,EAAE,QAAgB,EAAW;IAChH,OAAO,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;AAAA,CACpD;AAED,MAAM,UAAU,mBAAmB,CAAC,MAA2B,EAAE,OAA6B,EAAyB;IACtH,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC,kBAAkB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjF,OAAO,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAAA,CACzC;AAED,SAAS,gBAAgB,CAAC,MAA2B,EAAE,OAAiC,EAAyB;IAChH,MAAM,cAAc,GAAG,oBAAoB,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC;IACjD,IAAI,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IAEvF,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACxE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,0CAA0C,EAAE,cAAc,CAAC,CAAC;QAChG,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC,cAAc,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,sCAAsC,EAAE,cAAc,CAAC,CAAC;IACxG,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,cAAc,CAAC,CAAC;IACvG,OAAO,IAAI,CAAC,qBAAqB,EAAE,cAAc,CAAC,CAAC;AAAA,CACnD;AAED,SAAS,mBAAmB,CAAC,MAA2B,EAAE,OAAoC,EAAyB;IACtH,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,iBAAiB,KAAK,EAAE,IAAI,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC,iBAAiB,CAAC,CAAC;IACxG,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC;QACzG,OAAO,WAAW,CAAC,yBAAyB,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC;QACzG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAChE,CAAC;IACD,OAAO,WAAW,CAAC,gBAAgB,MAAM,CAAC,QAAQ,CAAC,IAAI,qCAAqC,CAAC,CAAC;AAAA,CAC9F;AAED,SAAS,KAAK,CAAC,cAAsB,EAAyB;IAC7D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;AAAA,CAC5D;AAED,SAAS,IAAI,CAAC,MAAc,EAAE,cAAuB,EAAyB;IAC7E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AAAA,CAClD;AAED,SAAS,WAAW,CAAC,MAAc,EAAyB;IAC3D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAAA,CAClC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAU;IAChD,MAAM,UAAU,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,sBAAsB,CAAC,0BAA0B,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAAA,CAC/E;AAED,SAAS,oBAAoB,CAAC,GAAW,EAAE,aAAqB,EAAsB;IACrF,MAAM,UAAU,GAAG,uBAAuB,CAAC,aAAa,CAAC,CAAC;IAC1D,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,OAAO,sBAAsB,CAAC,0BAA0B,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;AAAA,CACpF;AAED,SAAS,kBAAkB,CAAC,GAAW,EAAE,SAAoD,EAAY;IACxG,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACxD,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QACpE,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;AAAA,CAC3B;AAED,SAAS,0BAA0B,CAAC,IAAY,EAAU;IACzD,IAAI,CAAC;QACJ,OAAO,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACR,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC,0BAA0B,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,CAAC;AAAA,CACD;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,SAAiB,EAAW;IAC/D,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/C,OAAO,YAAY,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAAA,CAC1F;AAED,SAAS,aAAa,CAAC,MAA2B,EAAE,cAAsB,EAAW;IACpF,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;AAAA,CAC5G;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,OAAe,EAAW;IACzE,OAAO,OAAO,KAAK,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAAA,CAC1D;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAU;IACtD,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAAA,CAClC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAU;IACrD,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAAA,CACrD;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAU;IAC/C,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAAA,CAClC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAa,EAAW;IACxD,OAAO,YAAY,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CACjF;AAED,SAAS,YAAY,CAAC,IAAY,EAAU;IAC3C,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAClB,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC7B,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBAC7B,OAAO,IAAI,UAAU,CAAC;oBACtB,KAAK,IAAI,CAAC,CAAC;gBACZ,CAAC;qBAAM,CAAC;oBACP,OAAO,IAAI,IAAI,CAAC;oBAChB,KAAK,EAAE,CAAC;gBACT,CAAC;YACF,CAAC;iBAAM,CAAC;gBACP,OAAO,IAAI,OAAO,CAAC;YACpB,CAAC;QACF,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACzB,OAAO,IAAI,MAAM,CAAC;QACnB,CAAC;aAAM,CAAC;YACP,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;IACF,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;AAAA,CAClC;AAED,SAAS,YAAY,CAAC,MAAyB,EAAY;IAC1D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;QACpB,OAAO,CAAC,CAAC;IAAA,CACT,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { existsSync, realpathSync } from \"node:fs\";\nimport { basename, dirname, isAbsolute, relative, resolve } from \"node:path\";\nimport type { LoadoutAccessEntry, LoadoutCommands } from \"./loadouts.ts\";\n\nexport type LoadoutAccessOperation = \"read\" | \"write\" | \"execute\";\n\nexport interface CreateLoadoutAccessPolicyOptions {\n\tcwd: string;\n\tactiveTools: readonly string[];\n\treadSet?: readonly LoadoutAccessEntry[];\n\twriteSet?: readonly LoadoutAccessEntry[];\n\tblockedPaths?: readonly string[];\n\tcommands?: LoadoutCommands;\n}\n\nexport interface LoadoutAccessPolicy {\n\tcwd: string;\n\tactiveTools: readonly string[];\n\treadRoots: readonly string[];\n\twriteRoots: readonly string[];\n\tblockedPaths: readonly string[];\n\tcommands: LoadoutCommands;\n}\n\nexport interface LoadoutPathAccessRequest {\n\toperation: \"read\" | \"write\";\n\ttoolName: string;\n\tpath: string;\n}\n\nexport interface LoadoutCommandAccessRequest {\n\toperation: \"execute\";\n\ttoolName: string;\n\tcommand: string;\n}\n\nexport type LoadoutAccessRequest = LoadoutPathAccessRequest | LoadoutCommandAccessRequest;\n\nexport interface LoadoutAccessDecision {\n\tallowed: boolean;\n\treason: string;\n\tnormalizedPath?: string;\n\tnormalizedCommand?: string;\n}\n\nexport type LoadoutAccessGuard = (request: LoadoutAccessRequest) => LoadoutAccessDecision;\n\nexport function assertLoadoutAccess(guard: LoadoutAccessGuard | undefined, request: LoadoutAccessRequest): void {\n\tif (!guard) return;\n\tconst decision = guard(request);\n\tif (!decision.allowed) {\n\t\tthrow new Error(`loadout: ${decision.reason}`);\n\t}\n}\n\nconst DEFAULT_BLOCKED_PATHS = [\"**/.env*\", \"**/*secret*\", \"**/*key*\", \"**/.git\", \"**/.git/*\"] as const;\n\nexport function createLoadoutAccessPolicy(options: CreateLoadoutAccessPolicyOptions): LoadoutAccessPolicy {\n\tconst cwd = normalizeRootPath(options.cwd);\n\treturn {\n\t\tcwd,\n\t\tactiveTools: uniqueSorted(\n\t\t\toptions.activeTools.map((toolName) => toolName.trim()).filter((toolName) => toolName !== \"\"),\n\t\t),\n\t\treadRoots: normalizeAccessSet(cwd, options.readSet),\n\t\twriteRoots: normalizeAccessSet(cwd, options.writeSet),\n\t\tblockedPaths: uniqueSorted(options.blockedPaths ?? DEFAULT_BLOCKED_PATHS),\n\t\tcommands: options.commands ?? { mode: \"none\" },\n\t};\n}\n\nexport function isActiveLoadoutTool(policy: Pick<LoadoutAccessPolicy, \"activeTools\">, toolName: string): boolean {\n\treturn policy.activeTools.includes(toolName.trim());\n}\n\nexport function decideLoadoutAccess(policy: LoadoutAccessPolicy, request: LoadoutAccessRequest): LoadoutAccessDecision {\n\tif (!isActiveLoadoutTool(policy, request.toolName)) {\n\t\treturn deny(`inactive tool: ${request.toolName}`);\n\t}\n\tif (request.operation === \"execute\") return decideCommandAccess(policy, request);\n\treturn decidePathAccess(policy, request);\n}\n\nfunction decidePathAccess(policy: LoadoutAccessPolicy, request: LoadoutPathAccessRequest): LoadoutAccessDecision {\n\tconst normalizedPath = normalizeRequestPath(policy.cwd, request.path);\n\tif (!normalizedPath) return deny(\"invalid path\");\n\tif (isBlockedPath(policy, normalizedPath)) return deny(\"blocked path\", normalizedPath);\n\n\tif (request.operation === \"read\") {\n\t\tconst roots = uniqueSorted([...policy.readRoots, ...policy.writeRoots]);\n\t\tif (roots.length === 0) return deny(\"outside read scope: empty read/write set\", normalizedPath);\n\t\tif (roots.some((root) => containsPath(root, normalizedPath))) return allow(normalizedPath);\n\t\treturn deny(\"outside read scope\", normalizedPath);\n\t}\n\n\tif (policy.writeRoots.length === 0) return deny(\"outside write scope: empty write set\", normalizedPath);\n\tif (policy.writeRoots.some((root) => containsPath(root, normalizedPath))) return allow(normalizedPath);\n\treturn deny(\"outside write scope\", normalizedPath);\n}\n\nfunction decideCommandAccess(policy: LoadoutAccessPolicy, request: LoadoutCommandAccessRequest): LoadoutAccessDecision {\n\tconst normalizedCommand = request.command.trim();\n\tif (normalizedCommand === \"\" || normalizedCommand.includes(\"\\0\")) return denyCommand(\"invalid command\");\n\tif (policy.commands.mode === \"none\") return denyCommand(\"command mode none\");\n\tif (policy.commands.blockPatterns?.some((pattern) => commandMatchesPattern(pattern, normalizedCommand))) {\n\t\treturn denyCommand(\"blocked command pattern\");\n\t}\n\tif (policy.commands.allowPatterns?.some((pattern) => commandMatchesPattern(pattern, normalizedCommand))) {\n\t\treturn { allowed: true, reason: \"allowed\", normalizedCommand };\n\t}\n\treturn denyCommand(`command mode ${policy.commands.mode} requires an explicit allow pattern`);\n}\n\nfunction allow(normalizedPath: string): LoadoutAccessDecision {\n\treturn { allowed: true, reason: \"allowed\", normalizedPath };\n}\n\nfunction deny(reason: string, normalizedPath?: string): LoadoutAccessDecision {\n\treturn { allowed: false, reason, normalizedPath };\n}\n\nfunction denyCommand(reason: string): LoadoutAccessDecision {\n\treturn { allowed: false, reason };\n}\n\nfunction normalizeRootPath(path: string): string {\n\tconst normalized = normalizePathSeparators(path);\n\tif (normalized.trim() === \"\" || normalized.includes(\"\\0\")) {\n\t\tthrow new Error(\"loadout access policy cwd must be a non-empty path\");\n\t}\n\treturn stripTrailingSeparator(canonicalizeExistingPrefix(resolve(normalized)));\n}\n\nfunction normalizeRequestPath(cwd: string, requestedPath: string): string | undefined {\n\tconst normalized = normalizePathSeparators(requestedPath);\n\tif (normalized.trim() === \"\" || normalized.includes(\"\\0\")) return undefined;\n\treturn stripTrailingSeparator(canonicalizeExistingPrefix(resolve(cwd, normalized)));\n}\n\nfunction normalizeAccessSet(cwd: string, accessSet: readonly LoadoutAccessEntry[] | undefined): string[] {\n\tif (!accessSet) return [];\n\tconst roots: string[] = [];\n\tfor (const entry of accessSet) {\n\t\tif (entry.symbols && entry.symbols.length > 0) continue;\n\t\tconst normalized = normalizePathSeparators(entry.path);\n\t\tif (normalized.trim() === \"\" || normalized.includes(\"\\0\")) continue;\n\t\troots.push(stripTrailingSeparator(canonicalizeExistingPrefix(resolve(cwd, normalized))));\n\t}\n\treturn uniqueSorted(roots);\n}\n\nfunction canonicalizeExistingPrefix(path: string): string {\n\ttry {\n\t\treturn realpathSync.native(path);\n\t} catch {\n\t\tif (existsSync(path)) return resolve(path);\n\t\tconst parent = dirname(path);\n\t\tif (parent === path) return resolve(path);\n\t\treturn resolve(canonicalizeExistingPrefix(parent), basename(path));\n\t}\n}\n\nfunction containsPath(root: string, candidate: string): boolean {\n\tif (candidate === root) return true;\n\tconst relativePath = relative(root, candidate);\n\treturn relativePath !== \"\" && !relativePath.startsWith(\"..\") && !isAbsolute(relativePath);\n}\n\nfunction isBlockedPath(policy: LoadoutAccessPolicy, normalizedPath: string): boolean {\n\tconst relativeCandidate = toForwardSlashes(relative(policy.cwd, normalizedPath));\n\tconst candidates = uniqueSorted([toForwardSlashes(normalizedPath), relativeCandidate]);\n\treturn policy.blockedPaths.some((pattern) => candidates.some((candidate) => globMatch(pattern, candidate)));\n}\n\nfunction commandMatchesPattern(pattern: string, command: string): boolean {\n\treturn pattern === command || globMatch(pattern, command);\n}\n\nfunction normalizePathSeparators(path: string): string {\n\treturn path.replaceAll(\"\\\\\", \"/\");\n}\n\nfunction stripTrailingSeparator(path: string): string {\n\tif (path === \"/\") return path;\n\treturn path.endsWith(\"/\") ? path.slice(0, -1) : path;\n}\n\nfunction toForwardSlashes(path: string): string {\n\treturn path.replaceAll(\"\\\\\", \"/\");\n}\n\nfunction globMatch(glob: string, value: string): boolean {\n\treturn globToRegExp(normalizePathSeparators(glob)).test(toForwardSlashes(value));\n}\n\nfunction globToRegExp(glob: string): RegExp {\n\tlet pattern = \"\";\n\tfor (let index = 0; index < glob.length; index++) {\n\t\tconst char = glob[index];\n\t\tif (char === \"*\") {\n\t\t\tif (glob[index + 1] === \"*\") {\n\t\t\t\tif (glob[index + 2] === \"/\") {\n\t\t\t\t\tpattern += \"(?:.*/)?\";\n\t\t\t\t\tindex += 2;\n\t\t\t\t} else {\n\t\t\t\t\tpattern += \".*\";\n\t\t\t\t\tindex++;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tpattern += \"[^/]*\";\n\t\t\t}\n\t\t} else if (char === \"?\") {\n\t\t\tpattern += \"[^/]\";\n\t\t} else {\n\t\t\tpattern += char.replace(/[.+^${}()|[\\]\\\\]/g, \"\\\\$&\");\n\t\t}\n\t}\n\treturn new RegExp(`^${pattern}$`);\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values)].sort((a, b) => {\n\t\tif (a < b) return -1;\n\t\tif (a > b) return 1;\n\t\treturn 0;\n\t});\n}\n"]}

package/dist/core/loadout-runtime.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Loadout runtime wiring — pure algorithms.
+ *
+ * Converts the pure loadout decisions in `loadouts.ts` into runtime-ready
+ * capability inventories, lane grants, and scheduler fields without mutating
+ * `AgentSession`.
+ */
+import type { ToolDefinition } from "./extensions/types.ts";
+import { type HookInventory } from "./hook-inventory.ts";
+import { type LoadoutAccessPolicy } from "./loadout-access-policy.ts";
+import { type AppliedLoadout, type CapabilityInventory, type LoadoutAuthority, type LoadoutCommands, type LoadoutProfile, type LoadoutRole, type SchedulerFields } from "./loadouts.ts";
+import type { ResourceLoader } from "./resource-loader.ts";
+import type { SourceInfo } from "./source-info.ts";
+interface ExtensionRunnerLike {
+    getAllRegisteredTools(): Array<{
+        definition: {
+            name: string;
+        };
+        sourceInfo: SourceInfo;
+    }>;
+}
+/**
+ * Subset of `AgentSession` fields needed to build a capability inventory.
+ * Callers (including `AgentSession` itself) can cast the session to this
+ * interface because the fields are read-only for inventory construction.
+ */
+export interface LoadoutRuntimeSession {
+    _baseToolDefinitions: Map<string, ToolDefinition>;
+    _extensionRunner: ExtensionRunnerLike;
+    _customTools: ToolDefinition[];
+}
+export interface LoadoutRuntimeState {
+    profileName: string;
+    authority: LoadoutAuthority;
+    activeTools: string[];
+    activeSkills: string[];
+    activeMcp: string[];
+    activeHooks: string[];
+    schedulerFields: SchedulerFields;
+    blockers: string[];
+    warnings: string[];
+}
+export interface BuildLoadoutAccessPolicyOptions {
+    cwd: string;
+    blockedPaths?: readonly string[];
+    commands?: LoadoutCommands;
+}
+export declare function buildLoadoutAccessPolicy(state: LoadoutRuntimeState, options: BuildLoadoutAccessPolicyOptions): LoadoutAccessPolicy;
+export interface SubagentLaneGrant {
+    laneId: string;
+    agent: string;
+    task: string;
+    scope: string;
+    authority: LoadoutAuthority;
+    allowedPaths: string[];
+    blockedPaths: string[];
+    skills: string[];
+    mcp: string[];
+    hooks: string[];
+    commands: LoadoutCommands;
+    evidenceOutput?: string;
+    scheduler: SchedulerFields;
+}
+export declare function buildCapabilityInventory(session: LoadoutRuntimeSession, resourceLoader: ResourceLoader, cwd: string, hookInventory: HookInventory): CapabilityInventory;
+export interface ApplyLoadoutToRuntimeRequest {
+    profile: LoadoutProfile;
+    role: LoadoutRole;
+    grantAuthority?: LoadoutAuthority;
+    assignedReadPaths?: readonly string[];
+    assignedWritePaths?: readonly string[];
+}
+export declare function applyLoadoutToRuntime(session: LoadoutRuntimeSession, resourceLoader: ResourceLoader, cwd: string, agentDir: string, request: ApplyLoadoutToRuntimeRequest): LoadoutRuntimeState;
+export interface BuildSubagentLaneGrantOptions {
+    allowedReadPaths?: readonly string[];
+    allowedWritePaths?: readonly string[];
+    evidenceOutputPattern?: string;
+    runId?: string;
+    profile?: {
+        commands?: LoadoutCommands;
+    };
+}
+export declare function buildSubagentLaneGrant(nodeId: string, role: LoadoutRole, task: string, applied: AppliedLoadout, schedulerFields: SchedulerFields, options?: BuildSubagentLaneGrantOptions): SubagentLaneGrant;
+export {};
+//# sourceMappingURL=loadout-runtime.d.ts.map

package/dist/core/loadout-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadout-runtime.d.ts","sourceRoot":"","sources":["../../src/core/loadout-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,KAAK,aAAa,EAAqB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAA6B,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjG,OAAO,EACN,KAAK,cAAc,EAEnB,KAAK,mBAAmB,EAExB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,WAAW,EAEhB,KAAK,eAAe,EAEpB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,UAAU,mBAAmB;IAC5B,qBAAqB,IAAI,KAAK,CAAC;QAAE,UAAU,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CACzF;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACrC,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,gBAAgB,EAAE,mBAAmB,CAAC;IACtC,YAAY,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,+BAA+B;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC3B;AAED,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE,+BAA+B,GACtC,mBAAmB,CASrB;AAED,MAAM,WAAW,iBAAiB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,gBAAgB,CAAC;IAC5B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,eAAe,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,eAAe,CAAC;CAC3B;AAED,wBAAgB,wBAAwB,CACvC,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,aAAa,GAC1B,mBAAmB,CA6DrB;AAED,MAAM,WAAW,4BAA4B;IAC5C,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,wBAAgB,qBAAqB,CACpC,OAAO,EAAE,qBAAqB,EAC9B,cAAc,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,4BAA4B,GACnC,mBAAmB,CAkDrB;AAED,MAAM,WAAW,6BAA6B;IAC7C,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;CACzC;AAED,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,cAAc,EACvB,eAAe,EAAE,eAAe,EAChC,OAAO,GAAE,6BAAkC,GACzC,iBAAiB,CA4BnB","sourcesContent":["/**\n * Loadout runtime wiring — pure algorithms.\n *\n * Converts the pure loadout decisions in `loadouts.ts` into runtime-ready\n * capability inventories, lane grants, and scheduler fields without mutating\n * `AgentSession`.\n */\n\nimport type { ToolDefinition } from \"./extensions/types.ts\";\nimport { type HookInventory, loadHookInventory } from \"./hook-inventory.ts\";\nimport { createLoadoutAccessPolicy, type LoadoutAccessPolicy } from \"./loadout-access-policy.ts\";\nimport {\n\ttype AppliedLoadout,\n\tapplyLoadoutProfile,\n\ttype CapabilityInventory,\n\tderiveSchedulerFields,\n\ttype LoadoutAuthority,\n\ttype LoadoutCommands,\n\ttype LoadoutProfile,\n\ttype LoadoutRole,\n\ttype NamedResource,\n\ttype SchedulerFields,\n\tvalidateLoadoutProfile,\n} from \"./loadouts.ts\";\nimport { loadMcpInventory } from \"./mcp-inventory.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\nimport type { SourceInfo } from \"./source-info.ts\";\n\ninterface ExtensionRunnerLike {\n\tgetAllRegisteredTools(): Array<{ definition: { name: string }; sourceInfo: SourceInfo }>;\n}\n\n/**\n * Subset of `AgentSession` fields needed to build a capability inventory.\n * Callers (including `AgentSession` itself) can cast the session to this\n * interface because the fields are read-only for inventory construction.\n */\nexport interface LoadoutRuntimeSession {\n\t_baseToolDefinitions: Map<string, ToolDefinition>;\n\t_extensionRunner: ExtensionRunnerLike;\n\t_customTools: ToolDefinition[];\n}\n\nexport interface LoadoutRuntimeState {\n\tprofileName: string;\n\tauthority: LoadoutAuthority;\n\tactiveTools: string[];\n\tactiveSkills: string[];\n\tactiveMcp: string[];\n\tactiveHooks: string[];\n\tschedulerFields: SchedulerFields;\n\tblockers: string[];\n\twarnings: string[];\n}\n\nexport interface BuildLoadoutAccessPolicyOptions {\n\tcwd: string;\n\tblockedPaths?: readonly string[];\n\tcommands?: LoadoutCommands;\n}\n\nexport function buildLoadoutAccessPolicy(\n\tstate: LoadoutRuntimeState,\n\toptions: BuildLoadoutAccessPolicyOptions,\n): LoadoutAccessPolicy {\n\treturn createLoadoutAccessPolicy({\n\t\tcwd: options.cwd,\n\t\tactiveTools: state.activeTools,\n\t\treadSet: state.schedulerFields.readSet,\n\t\twriteSet: state.schedulerFields.writeSet,\n\t\tblockedPaths: options.blockedPaths,\n\t\tcommands: options.commands,\n\t});\n}\n\nexport interface SubagentLaneGrant {\n\tlaneId: string;\n\tagent: string;\n\ttask: string;\n\tscope: string;\n\tauthority: LoadoutAuthority;\n\tallowedPaths: string[];\n\tblockedPaths: string[];\n\tskills: string[];\n\tmcp: string[];\n\thooks: string[];\n\tcommands: LoadoutCommands;\n\tevidenceOutput?: string;\n\tscheduler: SchedulerFields;\n}\n\nexport function buildCapabilityInventory(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\thookInventory: HookInventory,\n): CapabilityInventory {\n\tconst tools: NamedResource[] = [];\n\n\tfor (const [name] of session._baseToolDefinitions) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname,\n\t\t\tsource: \"builtin\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tfor (const registered of session._extensionRunner.getAllRegisteredTools()) {\n\t\tconst { sourceInfo } = registered;\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: registered.definition.name,\n\t\t\tsource: sourceInfo.source,\n\t\t\tscope: sourceInfo.scope,\n\t\t\torigin: sourceInfo.origin,\n\t\t\tpath: sourceInfo.path,\n\t\t});\n\t}\n\n\tfor (const definition of session._customTools) {\n\t\ttools.push({\n\t\t\tkind: \"tool\",\n\t\t\tname: definition.name,\n\t\t\tsource: \"sdk\",\n\t\t\tscope: \"temporary\",\n\t\t\torigin: \"top-level\",\n\t\t});\n\t}\n\n\tconst skills: NamedResource[] = resourceLoader.getSkills().skills.map((skill) => ({\n\t\tkind: \"skill\",\n\t\tname: skill.name,\n\t\tsource: skill.sourceInfo.source,\n\t\tscope: skill.sourceInfo.scope,\n\t\torigin: skill.sourceInfo.origin,\n\t\tpath: skill.filePath,\n\t}));\n\n\tconst mcp: NamedResource[] = loadMcpInventory(cwd).entries.map((entry) => ({\n\t\tkind: \"mcp\",\n\t\tname: entry.name,\n\t\tsource: entry.source,\n\t\tscope: \"project\",\n\t\torigin: \"top-level\",\n\t}));\n\n\tconst hooks: NamedResource[] = hookInventory.hooks.map((descriptor) => ({\n\t\tkind: \"hook\",\n\t\tname: descriptor.name,\n\t\tsource: descriptor.scriptPath ?? \"builtin\",\n\t\tscope: \"builtin\",\n\t\torigin: \"top-level\",\n\t}));\n\n\treturn { tools, skills, mcp, hooks };\n}\n\nexport interface ApplyLoadoutToRuntimeRequest {\n\tprofile: LoadoutProfile;\n\trole: LoadoutRole;\n\tgrantAuthority?: LoadoutAuthority;\n\tassignedReadPaths?: readonly string[];\n\tassignedWritePaths?: readonly string[];\n}\n\nexport function applyLoadoutToRuntime(\n\tsession: LoadoutRuntimeSession,\n\tresourceLoader: ResourceLoader,\n\tcwd: string,\n\tagentDir: string,\n\trequest: ApplyLoadoutToRuntimeRequest,\n): LoadoutRuntimeState {\n\tconst validation = validateLoadoutProfile(request.profile);\n\tif (!validation.valid) {\n\t\treturn {\n\t\t\tprofileName: request.profile.name,\n\t\t\tauthority: request.profile.authority,\n\t\t\tactiveTools: [],\n\t\t\tactiveSkills: [],\n\t\t\tactiveMcp: [],\n\t\t\tactiveHooks: [],\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: validation.errors,\n\t\t\twarnings: [],\n\t\t};\n\t}\n\n\tconst hookInventory = loadHookInventory(agentDir);\n\tconst inventory = buildCapabilityInventory(session, resourceLoader, cwd, hookInventory);\n\tconst applied = applyLoadoutProfile(request.profile, inventory, { grantAuthority: request.grantAuthority });\n\tif (applied.blockers.length > 0) {\n\t\treturn {\n\t\t\tprofileName: applied.profileName,\n\t\t\tauthority: applied.authority,\n\t\t\tactiveTools: applied.activeTools,\n\t\t\tactiveSkills: applied.activeSkills,\n\t\t\tactiveMcp: applied.activeMcp,\n\t\t\tactiveHooks: applied.activeHooks,\n\t\t\tschedulerFields: { readSet: [], writeSet: [], parallelizable: true },\n\t\t\tblockers: applied.blockers,\n\t\t\twarnings: applied.warnings,\n\t\t};\n\t}\n\n\tconst schedulerFields = deriveSchedulerFields({\n\t\trole: request.role,\n\t\tassignedReadPaths: request.assignedReadPaths,\n\t\tassignedWritePaths: request.assignedWritePaths,\n\t});\n\n\treturn {\n\t\tprofileName: applied.profileName,\n\t\tauthority: applied.authority,\n\t\tactiveTools: applied.activeTools,\n\t\tactiveSkills: applied.activeSkills,\n\t\tactiveMcp: applied.activeMcp,\n\t\tactiveHooks: applied.activeHooks,\n\t\tschedulerFields,\n\t\tblockers: applied.blockers,\n\t\twarnings: applied.warnings,\n\t};\n}\n\nexport interface BuildSubagentLaneGrantOptions {\n\tallowedReadPaths?: readonly string[];\n\tallowedWritePaths?: readonly string[];\n\tevidenceOutputPattern?: string;\n\trunId?: string;\n\tprofile?: { commands?: LoadoutCommands };\n}\n\nexport function buildSubagentLaneGrant(\n\tnodeId: string,\n\trole: LoadoutRole,\n\ttask: string,\n\tapplied: AppliedLoadout,\n\tschedulerFields: SchedulerFields,\n\toptions: BuildSubagentLaneGrantOptions = {},\n): SubagentLaneGrant {\n\tconst allowedPaths = uniqueSorted([...(options.allowedReadPaths ?? []), ...(options.allowedWritePaths ?? [])]);\n\tconst blockedPaths = [\"**/.env*\", \"**/*secret*\", \"**/*key*\", \"**/.git/*\"];\n\n\tlet evidenceOutput: string | undefined;\n\tif (options.evidenceOutputPattern) {\n\t\tevidenceOutput = options.runId\n\t\t\t? options.evidenceOutputPattern.replace(\"<goal>\", options.runId)\n\t\t\t: options.evidenceOutputPattern;\n\t}\n\n\tconst commands = options.profile?.commands ?? { mode: \"none\" };\n\n\treturn {\n\t\tlaneId: nodeId,\n\t\tagent: `omk-${role}`,\n\t\ttask,\n\t\tscope: \"loadout-derived lane grant\",\n\t\tauthority: applied.authority,\n\t\tallowedPaths,\n\t\tblockedPaths,\n\t\tskills: applied.activeSkills,\n\t\tmcp: applied.activeMcp,\n\t\thooks: applied.activeHooks,\n\t\tcommands,\n\t\tevidenceOutput,\n\t\tscheduler: schedulerFields,\n\t};\n}\n\nfunction uniqueSorted(values: readonly string[]): string[] {\n\treturn [...new Set(values)]\n\t\t.map((value) => value.trim())\n\t\t.filter((value) => value !== \"\")\n\t\t.sort();\n}\n"]}