rulesync 16.22.0 → 16.22.1

package/dist/{import-CUyeYGxZ.cjs → import-B7o8So93.cjs}

@@ -3385,6 +3385,47 @@ var RulesyncFile = class extends AiFile {
 	}
 };
 //#endregion
+//#region src/utils/bounded-walk.ts
+const ALIAS_HINT = "(a chain of YAML aliases may be amplifying the document)";
+/**
+* Create the bookkeeping for one walk. `subject` names the document kind in
+* every error ("Frontmatter", "Shared config"); `root`, when given, is entered
+* up front so the root object counts as the first nesting level, matching the
+* +1 that `enter` applies to every container nested inside it.
+*/
+function createBoundedWalk({ subject, limits, root }) {
+	const ancestors = /* @__PURE__ */ new WeakSet();
+	let valuesRemaining = limits.maxValues;
+	let stringCharsRemaining = limits.maxStringChars;
+	let depth = 0;
+	const chargeChars = (chars) => {
+		stringCharsRemaining -= chars;
+		if (stringCharsRemaining < 0) throw new Error(`${subject}'s string values expand to more than ${limits.maxStringChars} characters; refusing to process it ${ALIAS_HINT}`);
+	};
+	const chargeValue = (stringChars = 0) => {
+		valuesRemaining -= 1;
+		if (valuesRemaining < 0) throw new Error(`${subject} expands to more than ${limits.maxValues} values; refusing to process it ${ALIAS_HINT}`);
+		chargeChars(stringChars);
+	};
+	const enter = (container) => {
+		depth += 1;
+		if (depth > limits.maxDepth) throw new Error(`${subject} nests more than ${limits.maxDepth} levels deep; refusing to process it ${ALIAS_HINT}`);
+		ancestors.add(container);
+	};
+	const leave = (container) => {
+		ancestors.delete(container);
+		depth -= 1;
+	};
+	if (root !== void 0) enter(root);
+	return {
+		chargeValue,
+		chargeChars,
+		isAncestor: (container) => ancestors.has(container),
+		enter,
+		leave
+	};
+}
+//#endregion
 //#region src/utils/prototype-pollution.ts
 /**
 * Keys that, if walked into when constructing or merging objects from
@@ -3524,30 +3565,6 @@ const MAX_FRONTMATTER_STRING_CHARS = 4e6;
 * manifest stays well under this.
 */
 const MAX_FRONTMATTER_RAW_CHARS = 65536;
-/** Charge string content (a string leaf or an object key) against the character budget. */
-function chargeStringChars({ options, chars }) {
-	options.budget.stringCharsRemaining -= chars;
-	if (options.budget.stringCharsRemaining < 0) throw new Error(`Frontmatter's string values expand to more than ${MAX_FRONTMATTER_STRING_CHARS} characters; refusing to process it (a chain of YAML aliases may be amplifying the document)`);
-}
-function consumeBudget({ options, stringChars = 0 }) {
-	options.budget.remaining -= 1;
-	if (options.budget.remaining < 0) throw new Error(`Frontmatter expands to more than ${MAX_FRONTMATTER_VALUES} values; refusing to process it (a chain of YAML aliases may be amplifying the document)`);
-	chargeStringChars({
-		options,
-		chars: stringChars
-	});
-}
-/** Enter one more container level, throwing if the depth cap is exceeded. */
-function enterContainer({ options, container }) {
-	options.depth += 1;
-	if (options.depth > 64) throw new Error(`Frontmatter nests more than 64 levels deep; refusing to process it (a chain of YAML aliases may be amplifying the document)`);
-	options.ancestors.add(container);
-}
-/** Leave a container level entered via {@link enterContainer}. */
-function leaveContainer({ options, container }) {
-	options.ancestors.delete(container);
-	options.depth -= 1;
-}
 /**
 * Estimate the serialized character cost of a leaf that is not a string (a
 * string leaf is charged by its own length instead).
@@ -3570,40 +3587,26 @@ function estimateLeafChars(value) {
 * bounded by {@link MAX_FRONTMATTER_VALUES} instead.
 */
 function deepCleanValue(value, options) {
-	consumeBudget({
-		options,
-		stringChars: typeof value === "string" ? value.length : estimateLeafChars(value)
-	});
+	const leafChars = typeof value === "string" ? value.length : estimateLeafChars(value);
+	options.walk.chargeValue(leafChars);
 	if (value === null || value === void 0) return;
 	if (typeof value === "string") return options.transformString ? options.transformString(value) : value;
 	if (Array.isArray(value)) {
-		if (options.ancestors.has(value)) return;
-		enterContainer({
-			options,
-			container: value
-		});
+		if (options.walk.isAncestor(value)) return;
+		options.walk.enter(value);
 		const cleanedArray = [];
 		for (const item of value) {
 			const cleaned = deepCleanValue(item, options);
 			if (cleaned !== void 0) cleanedArray.push(cleaned);
 		}
-		leaveContainer({
-			options,
-			container: value
-		});
+		options.walk.leave(value);
 		return cleanedArray;
 	}
 	if (isPlainObject$1(value)) {
-		if (options.ancestors.has(value)) return;
-		enterContainer({
-			options,
-			container: value
-		});
+		if (options.walk.isAncestor(value)) return;
+		options.walk.enter(value);
 		const result = cleanOwnEntries(value, options);
-		leaveContainer({
-			options,
-			container: value
-		});
+		options.walk.leave(value);
 		return result;
 	}
 	return value;
@@ -3622,10 +3625,7 @@ function deepCleanValue(value, options) {
 function cleanOwnEntries(obj, options) {
 	const result = {};
 	for (const [key, val] of Object.entries(obj)) {
-		chargeStringChars({
-			options,
-			chars: key.length
-		});
+		options.walk.chargeChars(key.length);
 		const cleaned = deepCleanValue(val, options);
 		if (isPrototypePollutionKey(key)) continue;
 		if (cleaned !== void 0) result[key] = cleaned;
@@ -3636,12 +3636,15 @@ function deepCleanObject(obj, options) {
 	if (!obj || typeof obj !== "object") return {};
 	return cleanOwnEntries(obj, {
 		...options,
-		ancestors: new WeakSet([obj]),
-		budget: {
-			remaining: MAX_FRONTMATTER_VALUES,
-			stringCharsRemaining: MAX_FRONTMATTER_STRING_CHARS
-		},
-		depth: 1
+		walk: createBoundedWalk({
+			subject: "Frontmatter",
+			limits: {
+				maxValues: MAX_FRONTMATTER_VALUES,
+				maxStringChars: MAX_FRONTMATTER_STRING_CHARS,
+				maxDepth: 64
+			},
+			root: obj
+		})
 	});
 }
 /** Drop null and undefined values, recursively. */
@@ -11483,6 +11486,21 @@ function stripStrings(_key, value) {
 //#endregion
 //#region src/features/shared/shared-config-gateway.ts
 /**
+* Upper bound on the number of values a shared config document may expand
+* to once every YAML alias is written out. Real config files hold a few
+* hundred values at most; even a large MCP server catalog stays orders of
+* magnitude below the limit.
+*/
+const MAX_SHARED_CONFIG_VALUES = 1e5;
+/**
+* Upper bound on the total character count of the string leaves and keys a
+* shared config document may expand to. The value budget bounds how many
+* values are visited, but one long string aliased thousands of times fits
+* that budget while the duplicated output balloons; charging every visited
+* string's length separately bounds the output regardless of alias count.
+*/
+const MAX_SHARED_CONFIG_STRING_CHARS = 4e6;
+/**
 * Rebuild a parsed document without its prototype-pollution keys.
 *
 * Every object is rebuilt, not just the ones that are already plain: a literal
@@ -11497,15 +11515,61 @@ function stripStrings(_key, value) {
 *
 * Dates are the one object the YAML and TOML parsers produce that is not a
 * mapping, so they are passed through rather than flattened into `{}`.
+*
+* The rebuild is bounded, because a YAML alias makes one parsed container
+* reachable from many keys and every alias is copied out independently (the
+* writers dump with `noRefs: true`, so memoizing here would only move the
+* blowup into serialization). A small "alias bomb" of nested anchors would
+* otherwise cost exponential time and memory, and a self-referencing anchor
+* would recurse until the stack overflowed — both reachable from a config
+* file committed to a cloned repository. The walk therefore charges every
+* value against {@link MAX_SHARED_CONFIG_VALUES}, every string and key
+* against {@link MAX_SHARED_CONFIG_STRING_CHARS}, caps nesting at
+* {@link MAX_SHARED_CONFIG_DEPTH}, and refuses a reference back to an
+* ancestor outright, each with a clear error instead of a hang or a crash.
 */
 function sanitizeSharedConfigValue(value) {
-	if (Array.isArray(value)) return value.map(sanitizeSharedConfigValue);
+	return sanitizeSharedConfigValueBounded(value, createBoundedWalk({
+		subject: "Shared config",
+		limits: {
+			maxValues: MAX_SHARED_CONFIG_VALUES,
+			maxStringChars: MAX_SHARED_CONFIG_STRING_CHARS,
+			maxDepth: 64
+		}
+	}));
+}
+/**
+* Refuse a container that is already on the descent path. Unlike the
+* frontmatter cleaner, which drops such a cycle and keeps the rest of the
+* document, a shared config file is refused outright: silently dropping part
+* of a user's settings file would let a later write-back persist the loss.
+*/
+function enterSharedConfigContainer(walk, container) {
+	if (walk.isAncestor(container)) throw new Error("Shared config contains a value that refers back to itself (a circular YAML alias); refusing to process it");
+	walk.enter(container);
+}
+function sanitizeSharedConfigValueBounded(value, walk) {
+	if (typeof value === "string") {
+		walk.chargeValue(value.length);
+		return value;
+	}
+	walk.chargeValue();
+	if (Array.isArray(value)) {
+		enterSharedConfigContainer(walk, value);
+		const items = value.map((item) => sanitizeSharedConfigValueBounded(item, walk));
+		walk.leave(value);
+		return items;
+	}
 	if (value === null || typeof value !== "object" || value instanceof Date) return value;
+	enterSharedConfigContainer(walk, value);
 	const result = {};
 	for (const [key, nested] of Object.entries(value)) {
+		walk.chargeChars(key.length);
+		const sanitized = sanitizeSharedConfigValueBounded(nested, walk);
 		if (isPrototypePollutionKey(key)) continue;
-		result[key] = sanitizeSharedConfigValue(nested);
+		result[key] = sanitized;
 	}
+	walk.leave(value);
 	return result;
 }
 /**
@@ -11534,7 +11598,12 @@ function parseSharedConfig({ format, fileContent, filePath, invalidRootPolicy =
 		throw new Error(`Failed to parse shared config${at}: ${formatError(error)}`, { cause: error });
 	}
 	if (parsed === void 0 || parsed === null) return {};
-	const sanitized = sanitizeSharedConfigValue(parsed);
+	let sanitized;
+	try {
+		sanitized = sanitizeSharedConfigValue(parsed);
+	} catch (error) {
+		throw new Error(`Failed to parse shared config${at}: ${formatError(error)}`, { cause: error });
+	}
 	if (!isPlainObject$1(sanitized)) {
 		if (invalidRootPolicy === "error") throw new Error(`Failed to parse shared config${at}: expected a mapping at the root`);
 		return {};

package/dist/{import-BKqbq4Ut.js → import-DUE1P1zV.js}

@@ -3360,6 +3360,47 @@ var RulesyncFile = class extends AiFile {
 	}
 };
 //#endregion
+//#region src/utils/bounded-walk.ts
+const ALIAS_HINT = "(a chain of YAML aliases may be amplifying the document)";
+/**
+* Create the bookkeeping for one walk. `subject` names the document kind in
+* every error ("Frontmatter", "Shared config"); `root`, when given, is entered
+* up front so the root object counts as the first nesting level, matching the
+* +1 that `enter` applies to every container nested inside it.
+*/
+function createBoundedWalk({ subject, limits, root }) {
+	const ancestors = /* @__PURE__ */ new WeakSet();
+	let valuesRemaining = limits.maxValues;
+	let stringCharsRemaining = limits.maxStringChars;
+	let depth = 0;
+	const chargeChars = (chars) => {
+		stringCharsRemaining -= chars;
+		if (stringCharsRemaining < 0) throw new Error(`${subject}'s string values expand to more than ${limits.maxStringChars} characters; refusing to process it ${ALIAS_HINT}`);
+	};
+	const chargeValue = (stringChars = 0) => {
+		valuesRemaining -= 1;
+		if (valuesRemaining < 0) throw new Error(`${subject} expands to more than ${limits.maxValues} values; refusing to process it ${ALIAS_HINT}`);
+		chargeChars(stringChars);
+	};
+	const enter = (container) => {
+		depth += 1;
+		if (depth > limits.maxDepth) throw new Error(`${subject} nests more than ${limits.maxDepth} levels deep; refusing to process it ${ALIAS_HINT}`);
+		ancestors.add(container);
+	};
+	const leave = (container) => {
+		ancestors.delete(container);
+		depth -= 1;
+	};
+	if (root !== void 0) enter(root);
+	return {
+		chargeValue,
+		chargeChars,
+		isAncestor: (container) => ancestors.has(container),
+		enter,
+		leave
+	};
+}
+//#endregion
 //#region src/utils/prototype-pollution.ts
 /**
 * Keys that, if walked into when constructing or merging objects from
@@ -3499,30 +3540,6 @@ const MAX_FRONTMATTER_STRING_CHARS = 4e6;
 * manifest stays well under this.
 */
 const MAX_FRONTMATTER_RAW_CHARS = 65536;
-/** Charge string content (a string leaf or an object key) against the character budget. */
-function chargeStringChars({ options, chars }) {
-	options.budget.stringCharsRemaining -= chars;
-	if (options.budget.stringCharsRemaining < 0) throw new Error(`Frontmatter's string values expand to more than ${MAX_FRONTMATTER_STRING_CHARS} characters; refusing to process it (a chain of YAML aliases may be amplifying the document)`);
-}
-function consumeBudget({ options, stringChars = 0 }) {
-	options.budget.remaining -= 1;
-	if (options.budget.remaining < 0) throw new Error(`Frontmatter expands to more than ${MAX_FRONTMATTER_VALUES} values; refusing to process it (a chain of YAML aliases may be amplifying the document)`);
-	chargeStringChars({
-		options,
-		chars: stringChars
-	});
-}
-/** Enter one more container level, throwing if the depth cap is exceeded. */
-function enterContainer({ options, container }) {
-	options.depth += 1;
-	if (options.depth > 64) throw new Error(`Frontmatter nests more than 64 levels deep; refusing to process it (a chain of YAML aliases may be amplifying the document)`);
-	options.ancestors.add(container);
-}
-/** Leave a container level entered via {@link enterContainer}. */
-function leaveContainer({ options, container }) {
-	options.ancestors.delete(container);
-	options.depth -= 1;
-}
 /**
 * Estimate the serialized character cost of a leaf that is not a string (a
 * string leaf is charged by its own length instead).
@@ -3545,40 +3562,26 @@ function estimateLeafChars(value) {
 * bounded by {@link MAX_FRONTMATTER_VALUES} instead.
 */
 function deepCleanValue(value, options) {
-	consumeBudget({
-		options,
-		stringChars: typeof value === "string" ? value.length : estimateLeafChars(value)
-	});
+	const leafChars = typeof value === "string" ? value.length : estimateLeafChars(value);
+	options.walk.chargeValue(leafChars);
 	if (value === null || value === void 0) return;
 	if (typeof value === "string") return options.transformString ? options.transformString(value) : value;
 	if (Array.isArray(value)) {
-		if (options.ancestors.has(value)) return;
-		enterContainer({
-			options,
-			container: value
-		});
+		if (options.walk.isAncestor(value)) return;
+		options.walk.enter(value);
 		const cleanedArray = [];
 		for (const item of value) {
 			const cleaned = deepCleanValue(item, options);
 			if (cleaned !== void 0) cleanedArray.push(cleaned);
 		}
-		leaveContainer({
-			options,
-			container: value
-		});
+		options.walk.leave(value);
 		return cleanedArray;
 	}
 	if (isPlainObject$1(value)) {
-		if (options.ancestors.has(value)) return;
-		enterContainer({
-			options,
-			container: value
-		});
+		if (options.walk.isAncestor(value)) return;
+		options.walk.enter(value);
 		const result = cleanOwnEntries(value, options);
-		leaveContainer({
-			options,
-			container: value
-		});
+		options.walk.leave(value);
 		return result;
 	}
 	return value;
@@ -3597,10 +3600,7 @@ function deepCleanValue(value, options) {
 function cleanOwnEntries(obj, options) {
 	const result = {};
 	for (const [key, val] of Object.entries(obj)) {
-		chargeStringChars({
-			options,
-			chars: key.length
-		});
+		options.walk.chargeChars(key.length);
 		const cleaned = deepCleanValue(val, options);
 		if (isPrototypePollutionKey(key)) continue;
 		if (cleaned !== void 0) result[key] = cleaned;
@@ -3611,12 +3611,15 @@ function deepCleanObject(obj, options) {
 	if (!obj || typeof obj !== "object") return {};
 	return cleanOwnEntries(obj, {
 		...options,
-		ancestors: new WeakSet([obj]),
-		budget: {
-			remaining: MAX_FRONTMATTER_VALUES,
-			stringCharsRemaining: MAX_FRONTMATTER_STRING_CHARS
-		},
-		depth: 1
+		walk: createBoundedWalk({
+			subject: "Frontmatter",
+			limits: {
+				maxValues: MAX_FRONTMATTER_VALUES,
+				maxStringChars: MAX_FRONTMATTER_STRING_CHARS,
+				maxDepth: 64
+			},
+			root: obj
+		})
 	});
 }
 /** Drop null and undefined values, recursively. */
@@ -11458,6 +11461,21 @@ function stripStrings(_key, value) {
 //#endregion
 //#region src/features/shared/shared-config-gateway.ts
 /**
+* Upper bound on the number of values a shared config document may expand
+* to once every YAML alias is written out. Real config files hold a few
+* hundred values at most; even a large MCP server catalog stays orders of
+* magnitude below the limit.
+*/
+const MAX_SHARED_CONFIG_VALUES = 1e5;
+/**
+* Upper bound on the total character count of the string leaves and keys a
+* shared config document may expand to. The value budget bounds how many
+* values are visited, but one long string aliased thousands of times fits
+* that budget while the duplicated output balloons; charging every visited
+* string's length separately bounds the output regardless of alias count.
+*/
+const MAX_SHARED_CONFIG_STRING_CHARS = 4e6;
+/**
 * Rebuild a parsed document without its prototype-pollution keys.
 *
 * Every object is rebuilt, not just the ones that are already plain: a literal
@@ -11472,15 +11490,61 @@ function stripStrings(_key, value) {
 *
 * Dates are the one object the YAML and TOML parsers produce that is not a
 * mapping, so they are passed through rather than flattened into `{}`.
+*
+* The rebuild is bounded, because a YAML alias makes one parsed container
+* reachable from many keys and every alias is copied out independently (the
+* writers dump with `noRefs: true`, so memoizing here would only move the
+* blowup into serialization). A small "alias bomb" of nested anchors would
+* otherwise cost exponential time and memory, and a self-referencing anchor
+* would recurse until the stack overflowed — both reachable from a config
+* file committed to a cloned repository. The walk therefore charges every
+* value against {@link MAX_SHARED_CONFIG_VALUES}, every string and key
+* against {@link MAX_SHARED_CONFIG_STRING_CHARS}, caps nesting at
+* {@link MAX_SHARED_CONFIG_DEPTH}, and refuses a reference back to an
+* ancestor outright, each with a clear error instead of a hang or a crash.
 */
 function sanitizeSharedConfigValue(value) {
-	if (Array.isArray(value)) return value.map(sanitizeSharedConfigValue);
+	return sanitizeSharedConfigValueBounded(value, createBoundedWalk({
+		subject: "Shared config",
+		limits: {
+			maxValues: MAX_SHARED_CONFIG_VALUES,
+			maxStringChars: MAX_SHARED_CONFIG_STRING_CHARS,
+			maxDepth: 64
+		}
+	}));
+}
+/**
+* Refuse a container that is already on the descent path. Unlike the
+* frontmatter cleaner, which drops such a cycle and keeps the rest of the
+* document, a shared config file is refused outright: silently dropping part
+* of a user's settings file would let a later write-back persist the loss.
+*/
+function enterSharedConfigContainer(walk, container) {
+	if (walk.isAncestor(container)) throw new Error("Shared config contains a value that refers back to itself (a circular YAML alias); refusing to process it");
+	walk.enter(container);
+}
+function sanitizeSharedConfigValueBounded(value, walk) {
+	if (typeof value === "string") {
+		walk.chargeValue(value.length);
+		return value;
+	}
+	walk.chargeValue();
+	if (Array.isArray(value)) {
+		enterSharedConfigContainer(walk, value);
+		const items = value.map((item) => sanitizeSharedConfigValueBounded(item, walk));
+		walk.leave(value);
+		return items;
+	}
 	if (value === null || typeof value !== "object" || value instanceof Date) return value;
+	enterSharedConfigContainer(walk, value);
 	const result = {};
 	for (const [key, nested] of Object.entries(value)) {
+		walk.chargeChars(key.length);
+		const sanitized = sanitizeSharedConfigValueBounded(nested, walk);
 		if (isPrototypePollutionKey(key)) continue;
-		result[key] = sanitizeSharedConfigValue(nested);
+		result[key] = sanitized;
 	}
+	walk.leave(value);
 	return result;
 }
 /**
@@ -11509,7 +11573,12 @@ function parseSharedConfig({ format, fileContent, filePath, invalidRootPolicy =
 		throw new Error(`Failed to parse shared config${at}: ${formatError(error)}`, { cause: error });
 	}
 	if (parsed === void 0 || parsed === null) return {};
-	const sanitized = sanitizeSharedConfigValue(parsed);
+	let sanitized;
+	try {
+		sanitized = sanitizeSharedConfigValue(parsed);
+	} catch (error) {
+		throw new Error(`Failed to parse shared config${at}: ${formatError(error)}`, { cause: error });
+	}
 	if (!isPlainObject$1(sanitized)) {
 		if (invalidRootPolicy === "error") throw new Error(`Failed to parse shared config${at}: expected a mapping at the root`);
 		return {};
@@ -68635,4 +68704,4 @@ async function importChecksCore(params) {
 //#endregion
 export { RulesyncCheckFrontmatterSchema as $, ALL_TOOL_TARGETS_WITH_WILDCARD as $t, FACTORYDROID_DIR as A, RULESYNC_SUBAGENTS_RELATIVE_DIR_PATH as An, fileExists as At, RulesyncSkillFrontmatterSchema as B, stripControlCharacters as Bn, readFileContent as Bt, CODEXCLI_BASH_RULES_FILE_NAME as C, RULESYNC_PERMISSIONS_LEGACY_FILE_NAME as Cn, assertDirectoryIfExists as Ct, CLAUDECODE_MEMORIES_DIR_NAME as D, RULESYNC_RULES_RELATIVE_DIR_PATH as Dn, createTempDirectory as Dt, CLAUDECODE_LOCAL_RULE_FILE_NAME as E, RULESYNC_RELATIVE_DIR_PATH as En, checkPathTraversal as Et, AUGMENTCODE_SETTINGS_LOCAL_FILE_NAME as F, formatError as Fn, isSymlink as Ft, RulesyncIgnore as G, removeFileStrict as Gt, RulesyncRuleFrontmatterSchema as H, stripHiddenCharacters as Hn, removeDirectory as Ht, getLocalSkillDirNames as I, truncateText as In, listDirectoryEntryNames as It, resolveRulesyncSourceWritePath as J, runWithDirectoryRollback as Jt, RulesyncHooks as K, removeTempDirectory as Kt, RulesyncSubagent as L, hasDeceptiveHiddenCharacters as Ln, listFilePathsRecursively as Lt, caseFoldIdentity as M, ALL_FEATURES as Mn, getHomeDirectory as Mt, groupSpellingsByCaseFoldedIdentity as N, ALL_FEATURES_WITH_WILDCARD as Nn, isFileNotFoundError as Nt, CLAUDECODE_SETTINGS_LOCAL_FILE_NAME as O, RULESYNC_SKILLS_RELATIVE_DIR_PATH as On, directoryExists as Ot, AUGMENTCODE_DIR as P, DEPRECATED_FEATURE_REPLACEMENTS as Pn, isFileSystemError as Pt, RulesyncCheck as Q, ALL_TOOL_TARGETS as Qt, RulesyncSubagentFrontmatterSchema as R, hasEnclosingMarkOutsideKeycap as Rn, listSubdirectoryNames as Rt, ChecksProcessor as S, RULESYNC_PERMISSIONS_FILE_NAME as Sn, applyFileMode as St, CLAUDECODE_DIR as T, RULESYNC_PERMISSIONS_SCHEMA_URL as Tn, assertWritablePathInsideRoot as Tt, RulesyncPermissions as U, removeDirectoryStrict as Ut, RulesyncRule as V, stripControlCharactersKeepingLineFeeds as Vn, readFileContentOrNull as Vt, RulesyncMcp as W, removeFile as Wt, RulesyncCommand as X, writeFileBuffer as Xt, parseJsonc as Y, toPosixPath as Yt, RulesyncCommandFrontmatterSchema as Z, writeFileContent as Zt, IgnoreProcessor as _, RULESYNC_MCP_FILE_NAME as _n, withFallbackLoggerTarget as _t, getProcessorRegistryEntry as a, RULESYNC_AIIGNORE_RELATIVE_FILE_PATH as an, mergeInputRootConfigs as at, QWENCODE_DIR as b, RULESYNC_MCP_SCHEMA_URL as bn, CLIError as bt, RulesProcessor as c, RULESYNC_CONFIG_RELATIVE_FILE_PATH as cn, ConfigFileSchema as ct, CODEBUDDY_DIR as d, RULESYNC_CURATED_SKILLS_RELATIVE_DIR_PATH as dn, findControlCharacter as dt, PACKAGING_TOOL_TARGETS as en, stringifyFrontmatter as et, CODEBUDDY_LOCAL_RULE_FILE_NAME as f, RULESYNC_HOOKS_FILE_NAME as fn, ConsoleLogger as ft, McpProcessor as g, RULESYNC_LOCAL_CONFIG_RELATIVE_FILE_PATH as gn, warnOnConflictingFlags as gt, shortenToWidth as h, RULESYNC_IGNORE_RELATIVE_FILE_PATH as hn, fallbackLogger as ht, inspectInputRoots as i, RULESYNC_AIIGNORE_FILE_NAME as in, ConfigResolver as it, FACTORYDROID_SETTINGS_LOCAL_FILE_NAME as j, parseCommaSeparatedList as jn, getFileSize as jt, CLAUDECODE_SKILLS_DIR_PATH as k, RULESYNC_SOURCES_LOCK_RELATIVE_FILE_PATH as kn, ensureDir as kt, SubagentsProcessor as l, RULESYNC_CONFIG_SCHEMA_URL as ln, GITIGNORE_DESTINATION_KEY as lt, displayWidthOf as m, RULESYNC_HOOKS_RELATIVE_FILE_PATH as mn, WarningCollectingLogger as mt, formatSourceLoadFailure as n, CURATED_RULES_FEATURE_SUBDIR as nn, SHARED_USER_MANAGED_CONFIG_PATHS as nt, convertFromTool as o, RULESYNC_CHECKS_RELATIVE_DIR_PATH as on, resolveEffectiveInputRoots as ot, ELLIPSIS_WIDTH as p, RULESYNC_HOOKS_LEGACY_FILE_NAME as pn, JsonLogger as pt, getRulesyncSourceCandidates as q, resolvePath as qt, generate as r, MAX_FILE_SIZE as rn, SKILL_FILE_NAME as rt, isPackagingToolTarget as s, RULESYNC_COMMANDS_RELATIVE_DIR_PATH as sn, CONFLICTING_TARGET_PAIRS as st, importFromTool as t, ToolTargetSchema as tn, loadYaml as tt, SkillsProcessor as u, RULESYNC_CURATED_RULES_RELATIVE_DIR_PATH as un, SourceEntrySchema as ut, HooksProcessor as v, RULESYNC_MCP_LEGACY_FILE_NAME as vn, resetRunWarningState as vt, CODEXCLI_DIR as w, RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH as wn, assertTreeContainsNoSymlinks as wt, QWENCODE_LOCAL_RULE_FILE_NAME as x, RULESYNC_NPM_SOURCES_LOCK_RELATIVE_FILE_PATH as xn, ErrorCodes as xt, CommandsProcessor as y, RULESYNC_MCP_RELATIVE_FILE_PATH as yn, withWarnOnceScope as yt, RulesyncSkill as z, quoteForLog as zn, pathEscapesRoot as zt };
 
-//# sourceMappingURL=import-BKqbq4Ut.js.map
+//# sourceMappingURL=import-DUE1P1zV.js.map