rulesync 43.6.3 → 43.7.0

package/dist/{import-DCvPujUW.cjs → import-CfxyzbvB.cjs}

@@ -29122,11 +29122,7 @@ var ZoocodeSkill = class extends RooSkill {
 	static toolTarget = "zoocode";
 };
 // src/features/skills/skills-processor.ts
-var skills_processor_exports = /* @__PURE__ */ __exportAll({
-	SkillsProcessor: () => SkillsProcessor,
-	SkillsProcessorToolTargetSchema: () => SkillsProcessorToolTargetSchema,
-	toolSkillFactories: () => toolSkillFactories
-});
+var skills_processor_exports = /* @__PURE__ */ __exportAll({ toolSkillFactories: () => toolSkillFactories });
 const SkillsProcessorToolTargetSchema = zod_mini.z.enum(skillsProcessorToolTargetTuple);
 /**
 * Factory Map mapping tool targets to their skill factories.
@@ -79905,6 +79901,39 @@ const MATCH_ALL_PATH_GLOBS = /* @__PURE__ */ new Set([
 ]);
 const DIRECTORY_CONTENTS_SUFFIX = /\/\*\*(?:\/\*)?$/;
 const HOME_OR_VARIABLE_PATH = /^~(?:\/|$)|^\$[A-Za-z_]|\$\{[A-Za-z_]/;
+const LEADING_HOME = /^~(?:\/|$)/;
+/**
+* The home directory as an Antigravity path: forward slashes, no trailing
+* slash. agy accepts `C:/Users/...` on Windows, so one spelling serves both.
+*/
+function toAntigravityHomePath(homeDirectory) {
+	return homeDirectory.replaceAll("\\", "/").replace(/\/+$/, "");
+}
+/**
+* Rewrite a leading `~` or `~/` of a path target to the absolute home
+* directory. agy 1.5.1 matches `~` literally, so a `~/...` rule would never
+* apply (rulesync#3324). Only a file the user's own home holds, such as the
+* global Antigravity CLI settings, may carry a machine-specific path, so the
+* caller passes `homeDirectory` only then. `$HOME`, `${HOME}`, `%VAR%` and
+* `~user/` are left as written (the variable forms are still warned about).
+*/
+function expandLeadingHome(target, homeDirectory) {
+	if (homeDirectory === void 0 || !LEADING_HOME.test(target)) return target;
+	const home = toAntigravityHomePath(homeDirectory);
+	return target === "~" ? home || "/" : `${home}${target.slice(1)}`;
+}
+/**
+* The reverse of {@link expandLeadingHome} on import: an absolute path in the
+* home directory goes back to `~/...`, so `.rulesync/permissions.jsonc` stays
+* the same on every machine.
+*/
+function collapseLeadingHome(target, homeDirectory) {
+	if (homeDirectory === void 0) return target;
+	const home = toAntigravityHomePath(homeDirectory);
+	if (home.length === 0) return target;
+	if (target === home) return "~";
+	return target.startsWith(`${home}/`) ? `~${target.slice(home.length)}` : target;
+}
 const HOSTNAME = /^[a-z0-9-]+(?:\.[a-z0-9-]+)*$/;
 const DENY_HINTS = {
 	read_file: "deny a directory or file path instead",
@@ -80057,13 +80086,14 @@ function warnHomeOrVariablePath({ action, target, rule, decision, logger, toolLa
 * nothing enforces it, and a widened one is warned about too, because it
 * blocks more than it says.
 */
-function buildAntigravityPermissionEntry({ action: toolAction, category, pattern, decision, logger, toolLabel }) {
+function buildAntigravityPermissionEntry({ action: toolAction, category, pattern, decision, logger, toolLabel, homeDirectory }) {
 	const isMcp = category.startsWith(MCP_CATEGORY_PREFIX);
 	const action = isMcp ? "mcp" : toolAction;
 	const result = isMcp ? toMcpRuleTarget(category, pattern) : pattern === "*" ? { target: "*" } : toTarget(action, pattern);
 	const rule = `${category}: { "${pattern}": "${decision}" }`;
 	if ("skipReason" in result) {
-		const prefix = decision !== "deny" ? void 0 : isMcp ? result.lead : toWidenedDenyTarget(action, pattern);
+		const lead = decision !== "deny" ? void 0 : isMcp ? result.lead : toWidenedDenyTarget(action, pattern);
+		const prefix = lead !== void 0 && PATH_ACTIONS.has(action) ? expandLeadingHome(lead, homeDirectory) : lead;
 		if (prefix !== void 0) {
 			const { entry, scope } = describeWidenedDeny({
 				action,
@@ -80089,22 +80119,23 @@ function buildAntigravityPermissionEntry({ action: toolAction, category, pattern
 		const consequence = decision === "deny" ? ", so the deny also overrides any allow or ask there" : "";
 		logger.warn(`${toolLabel} permissions: ${rule}: ${result.note}${consequence}.`);
 	}
+	const target = PATH_ACTIONS.has(action) ? expandLeadingHome(result.target, homeDirectory) : result.target;
 	warnHomeOrVariablePath({
 		action,
-		target: result.target,
+		target,
 		rule,
 		decision,
 		logger,
 		toolLabel
 	});
-	return result.target === "*" ? action : `${action}(${result.target})`;
+	return target === "*" ? action : `${action}(${target})`;
 }
 /**
 * Convert rulesync permissions config to Antigravity allow/ask/deny arrays,
 * shared by the CLI and IDE generators; `toAction` maps a canonical category to
 * the target's tool or action name.
 */
-function convertRulesyncToAntigravityPermissions({ config, toAction, toolLabel, logger }) {
+function convertRulesyncToAntigravityPermissions({ config, toAction, toolLabel, logger, homeDirectory }) {
 	const allow = [];
 	const ask = [];
 	const deny = [];
@@ -80117,7 +80148,8 @@ function convertRulesyncToAntigravityPermissions({ config, toAction, toolLabel,
 				pattern,
 				decision: permissionAction,
 				logger,
-				toolLabel
+				toolLabel,
+				homeDirectory
 			});
 			if (entry === void 0) continue;
 			switch (permissionAction) {
@@ -80142,7 +80174,7 @@ function convertRulesyncToAntigravityPermissions({ config, toAction, toolLabel,
 * shared by the CLI and IDE adapters; `toCategory` maps the target's tool or
 * action name back to a canonical category.
 */
-function convertAntigravityToRulesyncPermissions({ allow, ask, deny, toCategory, toolLabel, logger }) {
+function convertAntigravityToRulesyncPermissions({ allow, ask, deny, toCategory, toolLabel, logger, homeDirectory }) {
 	const permission = {};
 	const processEntries = (entries, action) => {
 		for (const entry of entries) {
@@ -80154,7 +80186,7 @@ function convertAntigravityToRulesyncPermissions({ allow, ask, deny, toCategory,
 				decision: action,
 				logger,
 				toolLabel
-			}) : target;
+			}) : PATH_ACTIONS.has(toolName) ? collapseLeadingHome(target, homeDirectory) : target;
 			if (isPrototypePollutionKey(canonical) || isPrototypePollutionKey(pattern)) continue;
 			getOrCreateOwn({
 				record: permission,
@@ -80293,7 +80325,8 @@ var AntigravityCliPermissions = class AntigravityCliPermissions extends ToolPerm
 			config,
 			toAction: toAntigravityCliToolName,
 			toolLabel: "Antigravity CLI",
-			logger
+			logger,
+			homeDirectory: outputRoot
 		});
 		const managedToolNames = new Set(Object.keys(config.permission).map((category) => toAntigravityCliToolName(category)));
 		const isManagedToolName = (toolName) => managedToolNames.has(toolName) || managedToolNames.has("mcp") && toolName.startsWith("mcp__");
@@ -80344,7 +80377,8 @@ var AntigravityCliPermissions = class AntigravityCliPermissions extends ToolPerm
 			deny: permissions.deny ?? [],
 			toCategory: toCanonicalToolName$9,
 			toolLabel: "Antigravity CLI",
-			logger: moduleLogger$4
+			logger: moduleLogger$4,
+			homeDirectory: this.getOutputRoot()
 		});
 		const override = {};
 		const toolPermission = pickDocumentedValue({

package/dist/{import-w0JlEoNl.js → import-tr3jHcG2.js}

@@ -29100,11 +29100,7 @@ var ZoocodeSkill = class extends RooSkill {
 	static toolTarget = "zoocode";
 };
 // src/features/skills/skills-processor.ts
-var skills_processor_exports = /* @__PURE__ */ __exportAll({
-	SkillsProcessor: () => SkillsProcessor,
-	SkillsProcessorToolTargetSchema: () => SkillsProcessorToolTargetSchema,
-	toolSkillFactories: () => toolSkillFactories
-});
+var skills_processor_exports = /* @__PURE__ */ __exportAll({ toolSkillFactories: () => toolSkillFactories });
 const SkillsProcessorToolTargetSchema = z.enum(skillsProcessorToolTargetTuple);
 /**
 * Factory Map mapping tool targets to their skill factories.
@@ -79883,6 +79879,39 @@ const MATCH_ALL_PATH_GLOBS = /* @__PURE__ */ new Set([
 ]);
 const DIRECTORY_CONTENTS_SUFFIX = /\/\*\*(?:\/\*)?$/;
 const HOME_OR_VARIABLE_PATH = /^~(?:\/|$)|^\$[A-Za-z_]|\$\{[A-Za-z_]/;
+const LEADING_HOME = /^~(?:\/|$)/;
+/**
+* The home directory as an Antigravity path: forward slashes, no trailing
+* slash. agy accepts `C:/Users/...` on Windows, so one spelling serves both.
+*/
+function toAntigravityHomePath(homeDirectory) {
+	return homeDirectory.replaceAll("\\", "/").replace(/\/+$/, "");
+}
+/**
+* Rewrite a leading `~` or `~/` of a path target to the absolute home
+* directory. agy 1.5.1 matches `~` literally, so a `~/...` rule would never
+* apply (rulesync#3324). Only a file the user's own home holds, such as the
+* global Antigravity CLI settings, may carry a machine-specific path, so the
+* caller passes `homeDirectory` only then. `$HOME`, `${HOME}`, `%VAR%` and
+* `~user/` are left as written (the variable forms are still warned about).
+*/
+function expandLeadingHome(target, homeDirectory) {
+	if (homeDirectory === void 0 || !LEADING_HOME.test(target)) return target;
+	const home = toAntigravityHomePath(homeDirectory);
+	return target === "~" ? home || "/" : `${home}${target.slice(1)}`;
+}
+/**
+* The reverse of {@link expandLeadingHome} on import: an absolute path in the
+* home directory goes back to `~/...`, so `.rulesync/permissions.jsonc` stays
+* the same on every machine.
+*/
+function collapseLeadingHome(target, homeDirectory) {
+	if (homeDirectory === void 0) return target;
+	const home = toAntigravityHomePath(homeDirectory);
+	if (home.length === 0) return target;
+	if (target === home) return "~";
+	return target.startsWith(`${home}/`) ? `~${target.slice(home.length)}` : target;
+}
 const HOSTNAME = /^[a-z0-9-]+(?:\.[a-z0-9-]+)*$/;
 const DENY_HINTS = {
 	read_file: "deny a directory or file path instead",
@@ -80035,13 +80064,14 @@ function warnHomeOrVariablePath({ action, target, rule, decision, logger, toolLa
 * nothing enforces it, and a widened one is warned about too, because it
 * blocks more than it says.
 */
-function buildAntigravityPermissionEntry({ action: toolAction, category, pattern, decision, logger, toolLabel }) {
+function buildAntigravityPermissionEntry({ action: toolAction, category, pattern, decision, logger, toolLabel, homeDirectory }) {
 	const isMcp = category.startsWith(MCP_CATEGORY_PREFIX);
 	const action = isMcp ? "mcp" : toolAction;
 	const result = isMcp ? toMcpRuleTarget(category, pattern) : pattern === "*" ? { target: "*" } : toTarget(action, pattern);
 	const rule = `${category}: { "${pattern}": "${decision}" }`;
 	if ("skipReason" in result) {
-		const prefix = decision !== "deny" ? void 0 : isMcp ? result.lead : toWidenedDenyTarget(action, pattern);
+		const lead = decision !== "deny" ? void 0 : isMcp ? result.lead : toWidenedDenyTarget(action, pattern);
+		const prefix = lead !== void 0 && PATH_ACTIONS.has(action) ? expandLeadingHome(lead, homeDirectory) : lead;
 		if (prefix !== void 0) {
 			const { entry, scope } = describeWidenedDeny({
 				action,
@@ -80067,22 +80097,23 @@ function buildAntigravityPermissionEntry({ action: toolAction, category, pattern
 		const consequence = decision === "deny" ? ", so the deny also overrides any allow or ask there" : "";
 		logger.warn(`${toolLabel} permissions: ${rule}: ${result.note}${consequence}.`);
 	}
+	const target = PATH_ACTIONS.has(action) ? expandLeadingHome(result.target, homeDirectory) : result.target;
 	warnHomeOrVariablePath({
 		action,
-		target: result.target,
+		target,
 		rule,
 		decision,
 		logger,
 		toolLabel
 	});
-	return result.target === "*" ? action : `${action}(${result.target})`;
+	return target === "*" ? action : `${action}(${target})`;
 }
 /**
 * Convert rulesync permissions config to Antigravity allow/ask/deny arrays,
 * shared by the CLI and IDE generators; `toAction` maps a canonical category to
 * the target's tool or action name.
 */
-function convertRulesyncToAntigravityPermissions({ config, toAction, toolLabel, logger }) {
+function convertRulesyncToAntigravityPermissions({ config, toAction, toolLabel, logger, homeDirectory }) {
 	const allow = [];
 	const ask = [];
 	const deny = [];
@@ -80095,7 +80126,8 @@ function convertRulesyncToAntigravityPermissions({ config, toAction, toolLabel,
 				pattern,
 				decision: permissionAction,
 				logger,
-				toolLabel
+				toolLabel,
+				homeDirectory
 			});
 			if (entry === void 0) continue;
 			switch (permissionAction) {
@@ -80120,7 +80152,7 @@ function convertRulesyncToAntigravityPermissions({ config, toAction, toolLabel,
 * shared by the CLI and IDE adapters; `toCategory` maps the target's tool or
 * action name back to a canonical category.
 */
-function convertAntigravityToRulesyncPermissions({ allow, ask, deny, toCategory, toolLabel, logger }) {
+function convertAntigravityToRulesyncPermissions({ allow, ask, deny, toCategory, toolLabel, logger, homeDirectory }) {
 	const permission = {};
 	const processEntries = (entries, action) => {
 		for (const entry of entries) {
@@ -80132,7 +80164,7 @@ function convertAntigravityToRulesyncPermissions({ allow, ask, deny, toCategory,
 				decision: action,
 				logger,
 				toolLabel
-			}) : target;
+			}) : PATH_ACTIONS.has(toolName) ? collapseLeadingHome(target, homeDirectory) : target;
 			if (isPrototypePollutionKey(canonical) || isPrototypePollutionKey(pattern)) continue;
 			getOrCreateOwn({
 				record: permission,
@@ -80271,7 +80303,8 @@ var AntigravityCliPermissions = class AntigravityCliPermissions extends ToolPerm
 			config,
 			toAction: toAntigravityCliToolName,
 			toolLabel: "Antigravity CLI",
-			logger
+			logger,
+			homeDirectory: outputRoot
 		});
 		const managedToolNames = new Set(Object.keys(config.permission).map((category) => toAntigravityCliToolName(category)));
 		const isManagedToolName = (toolName) => managedToolNames.has(toolName) || managedToolNames.has("mcp") && toolName.startsWith("mcp__");
@@ -80322,7 +80355,8 @@ var AntigravityCliPermissions = class AntigravityCliPermissions extends ToolPerm
 			deny: permissions.deny ?? [],
 			toCategory: toCanonicalToolName$9,
 			toolLabel: "Antigravity CLI",
-			logger: moduleLogger$4
+			logger: moduleLogger$4,
+			homeDirectory: this.getOutputRoot()
 		});
 		const override = {};
 		const toolPermission = pickDocumentedValue({
@@ -104059,4 +104093,4 @@ const CHECKS_IMPORT_STRATEGY = {
 };
 export { RulesyncMcp as $, RULESYNC_USER_CONFIG_DIR_NAME as $n, isRootDirPath as $t, CODEBUDDY_LOCAL_RULE_FILE_NAME as A, CURATED_RULES_FEATURE_SUBDIR as An, resetRunWarningState as At, CLAUDECODE_MEMORIES_DIR_NAME as B, RULESYNC_HOOKS_RELATIVE_FILE_PATH as Bn, assertTreeContainsNoSymlinks as Bt, LETTACODE_DIR as C, ALL_TOOL_TARGETS as Cn, findControlCharacter as Ct, COMMANDCODE_DIR as D, ALL_FEATURES as Dn, fallbackLogger as Dt, FACTORYDROID_SETTINGS_LOCAL_FILE_NAME as E, ToolTargetSchema as En, WarningCollectingLogger as Et, CODEXCLI_BASH_RULES_FILE_NAME as F, RULESYNC_COMMANDS_RELATIVE_DIR_PATH as Fn, PathOutsideRootError as Ft, getLocalSkillDirNames as G, RULESYNC_NPM_SOURCES_LOCK_RELATIVE_FILE_PATH as Gn, ensureDir as Gt, CLAUDECODE_SKILLS_DIR_PATH as H, RULESYNC_LOCAL_CONFIG_RELATIVE_FILE_PATH as Hn, checkPathTraversal as Ht, CODEXCLI_DIR as I, RULESYNC_CONFIG_RELATIVE_FILE_PATH as In, applyFileMode as It, RulesyncSkill as J, RULESYNC_RELATIVE_DIR_PATH as Jn, findFilesByGlobs as Jt, RulesyncSubagent as K, RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH as Kn, fileExists as Kt, CLAUDECODE_AGENT_MEMORY_LOCAL_DIR_NAME as L, RULESYNC_CONFIG_SCHEMA_URL as Ln, assertDirectoryIfExists as Lt, AUGMENTCODE_SETTINGS_LOCAL_FILE_NAME as M, MAX_FILE_SIZE as Mn, CLIError as Mt, caseFoldIdentity as N, RULESYNC_AIIGNORE_RELATIVE_FILE_PATH as Nn, ErrorCodes as Nt, COMMANDCODE_SETTINGS_LOCAL_FILE_NAME as O, ALL_FEATURES_WITH_WILDCARD as On, warnOnConflictingFlags as Ot, groupSpellingsByCaseFoldedIdentity as P, RULESYNC_CHECKS_RELATIVE_DIR_PATH as Pn, parseJsonc as Pt, RulesyncPermissions as Q, RULESYNC_SUBAGENTS_RELATIVE_DIR_PATH as Qn, isFileSystemError as Qt, CLAUDECODE_DIR as R, RULESYNC_CURATED_RULES_RELATIVE_DIR_PATH as Rn, assertNoSymlinkBelowRoot as Rt, QWENCODE_LOCAL_RULE_FILE_NAME as S, mapWithConcurrency as Sn, getSourceTransport as St, FACTORYDROID_DIR as T, PACKAGING_TOOL_TARGETS as Tn, JsonLogger as Tt, findProjectInstructionBudgetFindings as U, RULESYNC_MCP_RELATIVE_FILE_PATH as Un, createTempDirectory as Ut, CLAUDECODE_SETTINGS_LOCAL_FILE_NAME as V, RULESYNC_IGNORE_RELATIVE_FILE_PATH as Vn, assertWritablePathInsideRoot as Vt, toInstructionBudgetFile as W, RULESYNC_MCP_SCHEMA_URL as Wn, directoryExists as Wt, RulesyncRule as X, RULESYNC_SKILLS_RELATIVE_DIR_PATH as Xn, getHomeDirectory as Xt, RulesyncSkillFrontmatterSchema as Y, RULESYNC_RULES_RELATIVE_DIR_PATH as Yn, getFileSizeAndExecutableBit as Yt, RulesyncRuleFrontmatterSchema as Z, RULESYNC_SOURCES_LOCK_RELATIVE_FILE_PATH as Zn, isFileNotFoundError as Zt, SkillsProcessor as _, runWithDirectoryRollback as _n, CONFLICTING_TARGET_PAIRS as _t, convertFromTool as a, pathEscapesRoot as an, hasEnclosingMarkOutsideKeycap as ar, RulesyncCommandFrontmatterSchema as at, REASONIX_LOCAL_RULE_FILE_NAME as b, writeFileBuffer as bn, SourceEntrySchema as bt, ELLIPSIS_WIDTH as c, readFileContentOrNull as cn, stripControlCharactersKeepingLineFeeds as cr, stringifyFrontmatter as ct, McpProcessor as d, removeFile as dn, SHARED_USER_MANAGED_CONFIG_PATHS as dt, isSymlink as en, RULESYNC_XDG_CONFIG_HOME_DEFAULT_DIR_NAME as er, RulesyncIgnore as et, IgnoreProcessor as f, removeFileStrict as fn, SKILL_FILE_NAME as ft, SubagentsProcessor as g, resolvedRelativePath as gn, resolveEffectiveInputRoots as gt, RulesProcessor as h, resolvePath as hn, parseConfigFileContent as ht, inspectInputRoots as i, normalizePosixDirPath as in, hasDeceptiveHiddenCharacters as ir, RulesyncCommand as it, AUGMENTCODE_DIR as j, FEATURE_SOURCE_TREE_ENTRIES as jn, withWarnOnceScope as jt, CODEBUDDY_DIR as k, DEPRECATED_FEATURE_REPLACEMENTS as kn, withFallbackLoggerTarget as kt, displayWidthOf as l, removeDirectory as ln, stripControlCharactersKeepingLineFeedsAndTabs as lr, loadYaml as lt, ChecksProcessor as m, removeTempDirectory as mn, mergeInputRootConfigs as mt, formatSourceLoadFailure as n, listFilePathsRecursively as nn, formatError as nr, getRulesyncSourceCandidates as nt, getProcessorRegistryEntry as o, posixRelativePathEscapesRoot as on, quoteForLog as or, RulesyncCheck as ot, HooksProcessor as p, removeFileWithoutFollowingSymlinks as pn, ConfigResolver as pt, RulesyncSubagentFrontmatterSchema as q, RULESYNC_PERMISSIONS_SCHEMA_URL as qn, fileExistsStrict as qt, generate as r, listSubdirectoryNames as rn, truncateText as rr, resolveRulesyncSourceWritePath as rt, parseCommaSeparatedList as s, readFileContent as sn, stripControlCharacters as sr, RulesyncCheckFrontmatterSchema as st, importFromTool as t, listDirectoryEntryNames as tn, formatMegabytes as tr, RulesyncHooks as tt, shortenToWidth as u, removeDirectoryStrict as un, stripHiddenCharacters as ur, isRecord as ut, CRUSH_LOCAL_RULE_FILE_NAME as v, splitPathSegments as vn, ConfigFileSchema as vt, LETTACODE_SETTINGS_LOCAL_FILE_NAME as w, ALL_TOOL_TARGETS_WITH_WILDCARD as wn, ConsoleLogger as wt, QWENCODE_DIR as x, writeFileContent as xn, assertTargetsFeaturesExclusive as xt, CommandsProcessor as y, toPosixPath as yn, GITIGNORE_DESTINATION_KEY as yt, CLAUDECODE_LOCAL_RULE_FILE_NAME as z, RULESYNC_CURATED_SKILLS_RELATIVE_DIR_PATH as zn, assertPathResolvesInsideRoot as zt };
 
-//# sourceMappingURL=import-w0JlEoNl.js.map
+//# sourceMappingURL=import-tr3jHcG2.js.map