rulesync 16.39.1 → 17.0.0

package/dist/{import-B2ANxi1V.js → import-CEgvxK12.js}

@@ -44294,14 +44294,10 @@ function convertRulesyncToCodexProfile({ config, logger }) {
 		}
 		logger?.warn(`Codex CLI permissions support only read/edit/write/webfetch categories. Skipping: ${toolName}`);
 	}
-	for (const [pattern, access] of mergeFilesystemCategoryRules({
+	addCodexFilesystemRules({
 		categoryRules: filesystemCategoryRules,
-		logger
-	})) addFilesystemRule({
 		filesystem,
 		workspaceRootFilesystem,
-		pattern,
-		access,
 		logger
 	});
 	applyDefaultGitWriteRules({
@@ -44326,6 +44322,29 @@ function convertRulesyncToCodexProfile({ config, logger }) {
 		...network ? { network } : {}
 	};
 }
+function addCodexFilesystemRules({ categoryRules, filesystem, workspaceRootFilesystem, logger }) {
+	for (const rule of mergeFilesystemCategoryRules({
+		categoryRules,
+		logger
+	})) {
+		const access = normalizeCodexFilesystemAccess({
+			pattern: rule.pattern,
+			access: rule.access,
+			writeRestriction: rule.writeRestriction,
+			logger
+		});
+		if (access === void 0) continue;
+		if (access === "read" && rule.writeRestriction === "ask") logger?.warn(`Codex CLI cannot express "ask" for filesystem write permissions: pattern "${rule.pattern}" will be emitted as read-only.`);
+		if (access === "read" && rule.writeRestriction === "deny") logger?.warn(`Codex CLI maps a write-side deny to read-only access: pattern "${rule.pattern}" will be emitted as "read". A broader read deny may be overridden by this more-specific path.`);
+		addFilesystemRule({
+			filesystem,
+			workspaceRootFilesystem,
+			pattern: rule.pattern,
+			access,
+			logger
+		});
+	}
+}
 function applyDefaultGitWriteRules({ config, filesystem, workspaceRootFilesystem }) {
 	if (config.codexcli?.git_write_rules === false) return;
 	if (config.codexcli?.base_permission_profile === CODEX_READ_ONLY_BASELINE) return;
@@ -44475,6 +44494,23 @@ function addFilesystemRule({ filesystem, workspaceRootFilesystem, pattern, acces
 	}
 	workspaceRootFilesystem[pattern] = access;
 }
+function normalizeCodexFilesystemAccess({ pattern, access, writeRestriction, logger }) {
+	if ((access === "read" || access === "write") && hasUnsupportedCodexFilesystemGlob(pattern)) {
+		if (writeRestriction !== void 0) {
+			logger?.warn(`Codex CLI only supports deny access for non-trailing filesystem globs: pattern "${pattern}" will be emitted as "deny" because its write-side ${writeRestriction} restriction cannot be represented as read-only access. Use an exact path or trailing "/**" for read/write access.`);
+			return "deny";
+		}
+		logger?.warn(`Skipping unsupported Codex CLI ${access} filesystem glob "${pattern}"; the base permission profile remains in effect. Use an exact path or trailing "/**" for read/write access.`);
+		return;
+	}
+	return access;
+}
+function hasCodexFilesystemGlob(pattern) {
+	return pattern.includes("*") || pattern.includes("?") || pattern.includes("[") || pattern.includes("]");
+}
+function hasUnsupportedCodexFilesystemGlob(pattern) {
+	return hasCodexFilesystemGlob(pattern.endsWith("/**") ? pattern.slice(0, -3) : pattern);
+}
 function canBeCodexFilesystemRoot(pattern) {
 	return isAbsolute(pattern) || /^[A-Za-z]:[\\/]/.test(pattern) || pattern.startsWith("~/") || pattern === "~" || pattern.startsWith(":");
 }
@@ -44611,30 +44647,8 @@ function mapReadAction(action) {
 	return action === "allow" ? "read" : "deny";
 }
 function mapWriteAction(action) {
-	return action === "allow" ? "write" : "deny";
-}
-/**
-* Merge the canonical read/edit/write category rules into one Codex access
-* level per path pattern (Codex models a single `deny` < `read` < `write`
-* level, with no `ask`).
-*
-* - `edit` and `write` collapse onto Codex's write side; when both carry the
-*   same pattern, the more restrictive action wins (`deny` > `ask` > `allow`).
-* - `read: allow` + write-side `allow` → `"write"`.
-* - `read: allow` + write-side non-allow → `"read"` (readable but not
-*   writable — exactly what Codex's `"read"` level expresses).
-* - `read` non-allow → `"deny"` regardless of the write side; a contradictory
-*   write-side `allow` (unreadable but writable is not expressible in Codex)
-*   is warned about.
-* - Single-category patterns keep the existing mapReadAction/mapWriteAction
-*   mappings.
-*
-* Iteration order is read → edit → write with first-seen pattern order, so
-* the emitted table is stable regardless of the authored category order.
-* Note the merge is one-way: `"{path}" = "read"` imports back as
-* `read: allow` only (the explicit write-side deny is implied by Codex's
-* access level and not re-materialized).
-*/
+	return action === "allow" ? "write" : "read";
+}
 function mergeFilesystemCategoryRules({ categoryRules, logger }) {
 	const readRules = categoryRules.read ?? {};
 	const writeSideRestrictiveness = {
@@ -44658,19 +44672,33 @@ function mergeFilesystemCategoryRules({ categoryRules, logger }) {
 		const readAction = readRules[pattern];
 		const writeAction = writeSideRules[pattern];
 		if (readAction === void 0) {
-			merged.push([pattern, mapWriteAction(writeAction)]);
+			merged.push({
+				pattern,
+				access: mapWriteAction(writeAction),
+				...writeAction === "ask" || writeAction === "deny" ? { writeRestriction: writeAction } : {}
+			});
 			continue;
 		}
 		if (writeAction === void 0) {
-			merged.push([pattern, mapReadAction(readAction)]);
+			merged.push({
+				pattern,
+				access: mapReadAction(readAction)
+			});
 			continue;
 		}
 		if (readAction === "allow") {
-			merged.push([pattern, writeAction === "allow" ? "write" : "read"]);
+			merged.push({
+				pattern,
+				access: writeAction === "allow" ? "write" : "read",
+				...writeAction === "ask" || writeAction === "deny" ? { writeRestriction: writeAction } : {}
+			});
 			continue;
 		}
 		if (writeAction === "allow") logger?.warn(`Codex CLI cannot express "writable but not readable": pattern "${pattern}" has read: ${readAction} and a write-side allow. Emitting "deny".`);
-		merged.push([pattern, "deny"]);
+		merged.push({
+			pattern,
+			access: "deny"
+		});
 	}
 	return merged;
 }
@@ -82224,4 +82252,4 @@ async function importChecksCore(params) {
 //#endregion
 export { RulesyncCommand as $, toPosixPath as $t, CLAUDECODE_MEMORIES_DIR_NAME as A, RULESYNC_XDG_CONFIG_HOME_DEFAULT_DIR_NAME as An, checkPathTraversal as At, RulesyncSubagent as B, stripControlCharacters as Bn, listDirectoryEntryNames as Bt, COMMANDCODE_DIR as C, RULESYNC_PERMISSIONS_SCHEMA_URL as Cn, withWarnOnceScope as Ct, CODEXCLI_DIR as D, RULESYNC_SOURCES_LOCK_RELATIVE_FILE_PATH as Dn, assertDirectoryIfExists as Dt, CODEXCLI_BASH_RULES_FILE_NAME as E, RULESYNC_SKILLS_RELATIVE_DIR_PATH as En, applyFileMode as Et, caseFoldIdentity as F, formatError as Fn, getFileSize as Ft, RulesyncRuleFrontmatterSchema as G, readFileContentOrNull as Gt, RulesyncSkill as H, stripHiddenCharacters as Hn, listSubdirectoryNames as Ht, groupSpellingsByCaseFoldedIdentity as I, truncateText as In, getHomeDirectory as It, RulesyncIgnore as J, removeFile as Jt, RulesyncPermissions as K, removeDirectory as Kt, AUGMENTCODE_DIR as L, hasDeceptiveHiddenCharacters as Ln, isFileNotFoundError as Lt, CLAUDECODE_SKILLS_DIR_PATH as M, ALL_FEATURES as Mn, directoryExists as Mt, FACTORYDROID_DIR as N, ALL_FEATURES_WITH_WILDCARD as Nn, ensureDir as Nt, CLAUDECODE_DIR as O, RULESYNC_SUBAGENTS_RELATIVE_DIR_PATH as On, assertTreeContainsNoSymlinks as Ot, FACTORYDROID_SETTINGS_LOCAL_FILE_NAME as P, DEPRECATED_FEATURE_REPLACEMENTS as Pn, fileExists as Pt, parseJsonc as Q, runWithDirectoryRollback as Qt, AUGMENTCODE_SETTINGS_LOCAL_FILE_NAME as R, hasEnclosingMarkOutsideKeycap as Rn, isFileSystemError as Rt, QWENCODE_LOCAL_RULE_FILE_NAME as S, RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH as Sn, resetRunWarningState as St, ChecksProcessor as T, RULESYNC_RULES_RELATIVE_DIR_PATH as Tn, ErrorCodes as Tt, RulesyncSkillFrontmatterSchema as U, pathEscapesRoot as Ut, RulesyncSubagentFrontmatterSchema as V, stripControlCharactersKeepingLineFeeds as Vn, listFilePathsRecursively as Vt, RulesyncRule as W, readFileContent as Wt, getRulesyncSourceCandidates as X, removeTempDirectory as Xt, RulesyncHooks as Y, removeFileStrict as Yt, resolveRulesyncSourceWritePath as Z, resolvePath as Zt, IgnoreProcessor as _, RULESYNC_IGNORE_RELATIVE_FILE_PATH as _n, JsonLogger as _t, getProcessorRegistryEntry as a, ToolTargetSchema as an, SHARED_USER_MANAGED_CONFIG_PATHS as at, CommandsProcessor as b, RULESYNC_MCP_SCHEMA_URL as bn, warnOnConflictingFlags as bt, RulesProcessor as c, MAX_FILE_SIZE as cn, mergeInputRootConfigs as ct, CODEBUDDY_DIR as d, RULESYNC_COMMANDS_RELATIVE_DIR_PATH as dn, ConfigFileSchema as dt, writeFileBuffer as en, RulesyncCommandFrontmatterSchema as et, CODEBUDDY_LOCAL_RULE_FILE_NAME as f, RULESYNC_CONFIG_RELATIVE_FILE_PATH as fn, GITIGNORE_DESTINATION_KEY as ft, McpProcessor as g, RULESYNC_HOOKS_RELATIVE_FILE_PATH as gn, ConsoleLogger as gt, shortenToWidth as h, RULESYNC_CURATED_SKILLS_RELATIVE_DIR_PATH as hn, findControlCharacter as ht, inspectInputRoots as i, PACKAGING_TOOL_TARGETS as in, loadYaml as it, CLAUDECODE_SETTINGS_LOCAL_FILE_NAME as j, parseCommaSeparatedList as jn, createTempDirectory as jt, CLAUDECODE_LOCAL_RULE_FILE_NAME as k, RULESYNC_USER_CONFIG_DIR_NAME as kn, assertWritablePathInsideRoot as kt, SubagentsProcessor as l, RULESYNC_AIIGNORE_RELATIVE_FILE_PATH as ln, resolveEffectiveInputRoots as lt, displayWidthOf as m, RULESYNC_CURATED_RULES_RELATIVE_DIR_PATH as mn, assertTargetsFeaturesExclusive as mt, formatSourceLoadFailure as n, ALL_TOOL_TARGETS as nn, RulesyncCheckFrontmatterSchema as nt, convertFromTool as o, CURATED_RULES_FEATURE_SUBDIR as on, SKILL_FILE_NAME as ot, ELLIPSIS_WIDTH as p, RULESYNC_CONFIG_SCHEMA_URL as pn, SourceEntrySchema as pt, RulesyncMcp as q, removeDirectoryStrict as qt, generate as r, ALL_TOOL_TARGETS_WITH_WILDCARD as rn, stringifyFrontmatter as rt, isPackagingToolTarget as s, FEATURE_SOURCE_TREE_ENTRIES as sn, ConfigResolver as st, importFromTool as t, writeFileContent as tn, RulesyncCheck as tt, SkillsProcessor as u, RULESYNC_CHECKS_RELATIVE_DIR_PATH as un, CONFLICTING_TARGET_PAIRS as ut, HooksProcessor as v, RULESYNC_LOCAL_CONFIG_RELATIVE_FILE_PATH as vn, WarningCollectingLogger as vt, COMMANDCODE_SETTINGS_LOCAL_FILE_NAME as w, RULESYNC_RELATIVE_DIR_PATH as wn, CLIError as wt, QWENCODE_DIR as x, RULESYNC_NPM_SOURCES_LOCK_RELATIVE_FILE_PATH as xn, withFallbackLoggerTarget as xt, CRUSH_LOCAL_RULE_FILE_NAME as y, RULESYNC_MCP_RELATIVE_FILE_PATH as yn, fallbackLogger as yt, getLocalSkillDirNames as z, quoteForLog as zn, isSymlink as zt };
 
-//# sourceMappingURL=import-B2ANxi1V.js.map
+//# sourceMappingURL=import-CEgvxK12.js.map