rulesync 16.39.1 → 17.0.0

package/dist/{import-DS3OrTAl.cjs → import-j-fApVPQ.cjs}

@@ -44319,14 +44319,10 @@ function convertRulesyncToCodexProfile({ config, logger }) {
 		}
 		logger?.warn(`Codex CLI permissions support only read/edit/write/webfetch categories. Skipping: ${toolName}`);
 	}
-	for (const [pattern, access] of mergeFilesystemCategoryRules({
+	addCodexFilesystemRules({
 		categoryRules: filesystemCategoryRules,
-		logger
-	})) addFilesystemRule({
 		filesystem,
 		workspaceRootFilesystem,
-		pattern,
-		access,
 		logger
 	});
 	applyDefaultGitWriteRules({
@@ -44351,6 +44347,29 @@ function convertRulesyncToCodexProfile({ config, logger }) {
 		...network ? { network } : {}
 	};
 }
+function addCodexFilesystemRules({ categoryRules, filesystem, workspaceRootFilesystem, logger }) {
+	for (const rule of mergeFilesystemCategoryRules({
+		categoryRules,
+		logger
+	})) {
+		const access = normalizeCodexFilesystemAccess({
+			pattern: rule.pattern,
+			access: rule.access,
+			writeRestriction: rule.writeRestriction,
+			logger
+		});
+		if (access === void 0) continue;
+		if (access === "read" && rule.writeRestriction === "ask") logger?.warn(`Codex CLI cannot express "ask" for filesystem write permissions: pattern "${rule.pattern}" will be emitted as read-only.`);
+		if (access === "read" && rule.writeRestriction === "deny") logger?.warn(`Codex CLI maps a write-side deny to read-only access: pattern "${rule.pattern}" will be emitted as "read". A broader read deny may be overridden by this more-specific path.`);
+		addFilesystemRule({
+			filesystem,
+			workspaceRootFilesystem,
+			pattern: rule.pattern,
+			access,
+			logger
+		});
+	}
+}
 function applyDefaultGitWriteRules({ config, filesystem, workspaceRootFilesystem }) {
 	if (config.codexcli?.git_write_rules === false) return;
 	if (config.codexcli?.base_permission_profile === CODEX_READ_ONLY_BASELINE) return;
@@ -44500,6 +44519,23 @@ function addFilesystemRule({ filesystem, workspaceRootFilesystem, pattern, acces
 	}
 	workspaceRootFilesystem[pattern] = access;
 }
+function normalizeCodexFilesystemAccess({ pattern, access, writeRestriction, logger }) {
+	if ((access === "read" || access === "write") && hasUnsupportedCodexFilesystemGlob(pattern)) {
+		if (writeRestriction !== void 0) {
+			logger?.warn(`Codex CLI only supports deny access for non-trailing filesystem globs: pattern "${pattern}" will be emitted as "deny" because its write-side ${writeRestriction} restriction cannot be represented as read-only access. Use an exact path or trailing "/**" for read/write access.`);
+			return "deny";
+		}
+		logger?.warn(`Skipping unsupported Codex CLI ${access} filesystem glob "${pattern}"; the base permission profile remains in effect. Use an exact path or trailing "/**" for read/write access.`);
+		return;
+	}
+	return access;
+}
+function hasCodexFilesystemGlob(pattern) {
+	return pattern.includes("*") || pattern.includes("?") || pattern.includes("[") || pattern.includes("]");
+}
+function hasUnsupportedCodexFilesystemGlob(pattern) {
+	return hasCodexFilesystemGlob(pattern.endsWith("/**") ? pattern.slice(0, -3) : pattern);
+}
 function canBeCodexFilesystemRoot(pattern) {
 	return (0, node_path.isAbsolute)(pattern) || /^[A-Za-z]:[\\/]/.test(pattern) || pattern.startsWith("~/") || pattern === "~" || pattern.startsWith(":");
 }
@@ -44636,30 +44672,8 @@ function mapReadAction(action) {
 	return action === "allow" ? "read" : "deny";
 }
 function mapWriteAction(action) {
-	return action === "allow" ? "write" : "deny";
-}
-/**
-* Merge the canonical read/edit/write category rules into one Codex access
-* level per path pattern (Codex models a single `deny` < `read` < `write`
-* level, with no `ask`).
-*
-* - `edit` and `write` collapse onto Codex's write side; when both carry the
-*   same pattern, the more restrictive action wins (`deny` > `ask` > `allow`).
-* - `read: allow` + write-side `allow` → `"write"`.
-* - `read: allow` + write-side non-allow → `"read"` (readable but not
-*   writable — exactly what Codex's `"read"` level expresses).
-* - `read` non-allow → `"deny"` regardless of the write side; a contradictory
-*   write-side `allow` (unreadable but writable is not expressible in Codex)
-*   is warned about.
-* - Single-category patterns keep the existing mapReadAction/mapWriteAction
-*   mappings.
-*
-* Iteration order is read → edit → write with first-seen pattern order, so
-* the emitted table is stable regardless of the authored category order.
-* Note the merge is one-way: `"{path}" = "read"` imports back as
-* `read: allow` only (the explicit write-side deny is implied by Codex's
-* access level and not re-materialized).
-*/
+	return action === "allow" ? "write" : "read";
+}
 function mergeFilesystemCategoryRules({ categoryRules, logger }) {
 	const readRules = categoryRules.read ?? {};
 	const writeSideRestrictiveness = {
@@ -44683,19 +44697,33 @@ function mergeFilesystemCategoryRules({ categoryRules, logger }) {
 		const readAction = readRules[pattern];
 		const writeAction = writeSideRules[pattern];
 		if (readAction === void 0) {
-			merged.push([pattern, mapWriteAction(writeAction)]);
+			merged.push({
+				pattern,
+				access: mapWriteAction(writeAction),
+				...writeAction === "ask" || writeAction === "deny" ? { writeRestriction: writeAction } : {}
+			});
 			continue;
 		}
 		if (writeAction === void 0) {
-			merged.push([pattern, mapReadAction(readAction)]);
+			merged.push({
+				pattern,
+				access: mapReadAction(readAction)
+			});
 			continue;
 		}
 		if (readAction === "allow") {
-			merged.push([pattern, writeAction === "allow" ? "write" : "read"]);
+			merged.push({
+				pattern,
+				access: writeAction === "allow" ? "write" : "read",
+				...writeAction === "ask" || writeAction === "deny" ? { writeRestriction: writeAction } : {}
+			});
 			continue;
 		}
 		if (writeAction === "allow") logger?.warn(`Codex CLI cannot express "writable but not readable": pattern "${pattern}" has read: ${readAction} and a write-side allow. Emitting "deny".`);
-		merged.push([pattern, "deny"]);
+		merged.push({
+			pattern,
+			access: "deny"
+		});
 	}
 	return merged;
 }

package/dist/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_import = require("./import-DS3OrTAl.cjs");
+const require_import = require("./import-j-fApVPQ.cjs");
 //#region src/index.ts
 async function generate(options = {}) {
 	const { silent = true, verbose = false, ...rest } = options;

package/dist/index.js

@@ -1,4 +1,4 @@
-import { Mn as ALL_FEATURES, gt as ConsoleLogger, i as inspectInputRoots, nn as ALL_TOOL_TARGETS, o as convertFromTool$1, r as generate$1, st as ConfigResolver, t as importFromTool$1 } from "./import-B2ANxi1V.js";
+import { Mn as ALL_FEATURES, gt as ConsoleLogger, i as inspectInputRoots, nn as ALL_TOOL_TARGETS, o as convertFromTool$1, r as generate$1, st as ConfigResolver, t as importFromTool$1 } from "./import-CEgvxK12.js";
 //#region src/index.ts
 async function generate(options = {}) {
 	const { silent = true, verbose = false, ...rest } = options;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rulesync",
-  "version": "16.39.1",
+  "version": "17.0.0",
   "description": "Unified AI rules management CLI tool that generates configuration files for various AI development tools",
   "keywords": [
     "ai",