rulesync 9.1.0 → 9.2.0

package/dist/{import-CNtfs80W.cjs → import-H0MKtu9x.cjs}

@@ -7169,6 +7169,12 @@ var CodexcliHooks = class CodexcliHooks extends ToolHooks {
 			relativeFilePath: CODEXCLI_HOOKS_FILE_NAME
 		};
 	}
+	static getExtraSharedWritePaths() {
+		return [{
+			relativeDirPath: CODEXCLI_DIR,
+			relativeFilePath: CODEXCLI_MCP_FILE_NAME
+		}];
+	}
 	static async fromFile({ outputRoot = process.cwd(), validate = true, global = false }) {
 		const paths = CodexcliHooks.getSettablePaths({ global });
 		const fileContent = await readFileContentOrNull((0, node_path.join)(outputRoot, paths.relativeDirPath, paths.relativeFilePath)) ?? "{\"hooks\":{}}";
@@ -9759,6 +9765,12 @@ var VibeHooks = class VibeHooks extends ToolHooks {
 			relativeFilePath: VIBE_HOOKS_FILE_NAME
 		};
 	}
+	static getExtraSharedWritePaths() {
+		return [{
+			relativeDirPath: VIBE_DIR,
+			relativeFilePath: VIBE_CONFIG_FILE_NAME
+		}];
+	}
 	static async fromFile({ outputRoot = process.cwd(), validate = true, global = false }) {
 		const paths = VibeHooks.getSettablePaths({ global });
 		const fileContent = await readFileContentOrNull((0, node_path.join)(outputRoot, paths.relativeDirPath, paths.relativeFilePath)) ?? smol_toml.stringify({});
@@ -10477,6 +10489,66 @@ var AugmentcodeIgnore = class AugmentcodeIgnore extends ToolIgnore {
 	}
 };
 //#endregion
+//#region src/features/claudecode-settings-gateway.ts
+/**
+* Single owner of the `.claude/settings.json` `permissions` block, which both
+* `ignore` (writes `Read(...)` into `permissions.deny`) and `permissions`
+* (writes the whole `allow`/`ask`/`deny`) read-modify-write. The entry format,
+* the merge, and the cross-feature ownership rule (permissions' explicit `Read`
+* rules win over ignore-derived `Read` denies) used to be duplicated across both
+* feature files; they live here once so each feature just states its intent and
+* never reasons about the other's existence.
+*/
+const READ_TOOL_NAME = "Read";
+const isReadDenyEntry = (entry) => entry.startsWith(`${READ_TOOL_NAME}(`) && entry.endsWith(")");
+const buildReadDenyEntry = (pattern) => `${READ_TOOL_NAME}(${pattern})`;
+const parsePermissionsBlock = (settings) => {
+	const permissions = settings.permissions ?? {};
+	return {
+		allow: permissions.allow ?? [],
+		ask: permissions.ask ?? [],
+		deny: permissions.deny ?? []
+	};
+};
+const withPermissions = (settings, next) => {
+	const permissions = { ...settings.permissions };
+	const assign = (key, values) => {
+		if (values.length > 0) permissions[key] = values;
+		else delete permissions[key];
+	};
+	assign("allow", next.allow);
+	assign("ask", next.ask);
+	assign("deny", next.deny);
+	return {
+		...settings,
+		permissions
+	};
+};
+const applyIgnoreReadDenies = (params) => {
+	const { settings, readDenies } = params;
+	const current = parsePermissionsBlock(settings);
+	const preservedDeny = current.deny.filter((entry) => !isReadDenyEntry(entry) || readDenies.includes(entry));
+	return withPermissions(settings, {
+		allow: current.allow,
+		ask: current.ask,
+		deny: (0, es_toolkit.uniq)([...preservedDeny, ...readDenies].toSorted())
+	});
+};
+const applyPermissions = (params) => {
+	const { settings, managedToolNames, toolNameOf, allow, ask, deny, logger } = params;
+	const current = parsePermissionsBlock(settings);
+	const keepUnmanaged = (entries) => entries.filter((entry) => !managedToolNames.has(toolNameOf(entry)));
+	if (logger && managedToolNames.has(READ_TOOL_NAME)) {
+		const overwrittenReadDenies = current.deny.filter((entry) => toolNameOf(entry) === READ_TOOL_NAME);
+		if (overwrittenReadDenies.length > 0) logger.warn(`Permissions feature manages '${READ_TOOL_NAME}' tool and will overwrite ${overwrittenReadDenies.length} existing ${READ_TOOL_NAME} deny entries. Permissions take precedence.`);
+	}
+	return withPermissions(settings, {
+		allow: (0, es_toolkit.uniq)([...keepUnmanaged(current.allow), ...allow].toSorted()),
+		ask: (0, es_toolkit.uniq)([...keepUnmanaged(current.ask), ...ask].toSorted()),
+		deny: (0, es_toolkit.uniq)([...keepUnmanaged(current.deny), ...deny].toSorted())
+	});
+};
+//#endregion
 //#region src/features/ignore/claudecode-ignore.ts
 const DEFAULT_FILE_MODE = "shared";
 /**
@@ -10523,7 +10595,7 @@ var ClaudecodeIgnore = class ClaudecodeIgnore extends ToolIgnore {
 	}
 	toRulesyncIgnore() {
 		const fileContent = this.patterns.map((pattern) => {
-			if (pattern.startsWith("Read(") && pattern.endsWith(")")) return pattern.slice(5, -1);
+			if (isReadDenyEntry(pattern)) return pattern.slice(5, -1);
 			return pattern;
 		}).filter((pattern) => pattern.length > 0).join("\n");
 		return new RulesyncIgnore({
@@ -10534,22 +10606,20 @@ var ClaudecodeIgnore = class ClaudecodeIgnore extends ToolIgnore {
 		});
 	}
 	static async fromRulesyncIgnore({ outputRoot = process.cwd(), rulesyncIgnore, options }) {
-		const deniedValues = rulesyncIgnore.getFileContent().split(/\r?\n|\r/).map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#")).map((pattern) => `Read(${pattern})`);
+		const deniedValues = rulesyncIgnore.getFileContent().split(/\r?\n|\r/).map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#")).map((pattern) => buildReadDenyEntry(pattern));
 		const paths = this.getSettablePaths({ options });
 		const filePath = (0, node_path.join)(outputRoot, paths.relativeDirPath, paths.relativeFilePath);
 		const existingFileContent = await fileExists(filePath) ? await readFileContent(filePath) : "{}";
-		const existingJsonValue = JSON.parse(existingFileContent);
-		const preservedDenies = (existingJsonValue.permissions?.deny ?? []).filter((deny) => {
-			if (deny.startsWith("Read(") && deny.endsWith(")")) return deniedValues.includes(deny);
-			return true;
+		let existingJsonValue;
+		try {
+			existingJsonValue = JSON.parse(existingFileContent);
+		} catch (error) {
+			throw new Error(`Failed to parse existing Claude settings at ${filePath}: ${formatError(error)}`, { cause: error });
+		}
+		const jsonValue = applyIgnoreReadDenies({
+			settings: existingJsonValue,
+			readDenies: deniedValues
 		});
-		const jsonValue = {
-			...existingJsonValue,
-			permissions: {
-				...existingJsonValue.permissions,
-				deny: (0, es_toolkit.uniq)([...preservedDenies, ...deniedValues].toSorted())
-			}
-		};
 		return new ClaudecodeIgnore({
 			outputRoot,
 			relativeDirPath: paths.relativeDirPath,
@@ -17086,31 +17156,15 @@ var ClaudecodePermissions = class ClaudecodePermissions extends ToolPermissions
 		const config = rulesyncPermissions.getJson();
 		const { allow, ask, deny } = convertRulesyncToClaudePermissions(config);
 		const managedToolNames = new Set(Object.keys(config.permission).map((category) => toClaudeToolName(category)));
-		const existingPermissions = settings.permissions ?? {};
-		const preservedAllow = (existingPermissions.allow ?? []).filter((entry) => !managedToolNames.has(parseClaudePermissionEntry(entry).toolName));
-		const preservedAsk = (existingPermissions.ask ?? []).filter((entry) => !managedToolNames.has(parseClaudePermissionEntry(entry).toolName));
-		const preservedDeny = (existingPermissions.deny ?? []).filter((entry) => !managedToolNames.has(parseClaudePermissionEntry(entry).toolName));
-		if (logger && managedToolNames.has("Read")) {
-			const droppedReadDenyEntries = (existingPermissions.deny ?? []).filter((entry) => {
-				const { toolName } = parseClaudePermissionEntry(entry);
-				return toolName === "Read";
-			});
-			if (droppedReadDenyEntries.length > 0) logger.warn(`Permissions feature manages 'Read' tool and will overwrite ${droppedReadDenyEntries.length} existing Read deny entries (possibly from ignore feature). Permissions take precedence.`);
-		}
-		const mergedPermissions = { ...existingPermissions };
-		const mergedAllow = (0, es_toolkit.uniq)([...preservedAllow, ...allow].toSorted());
-		const mergedAsk = (0, es_toolkit.uniq)([...preservedAsk, ...ask].toSorted());
-		const mergedDeny = (0, es_toolkit.uniq)([...preservedDeny, ...deny].toSorted());
-		if (mergedAllow.length > 0) mergedPermissions.allow = mergedAllow;
-		else delete mergedPermissions.allow;
-		if (mergedAsk.length > 0) mergedPermissions.ask = mergedAsk;
-		else delete mergedPermissions.ask;
-		if (mergedDeny.length > 0) mergedPermissions.deny = mergedDeny;
-		else delete mergedPermissions.deny;
-		const merged = {
-			...settings,
-			permissions: mergedPermissions
-		};
+		const merged = applyPermissions({
+			settings,
+			managedToolNames,
+			toolNameOf: (entry) => parseClaudePermissionEntry(entry).toolName,
+			allow,
+			ask,
+			deny,
+			logger
+		});
 		const fileContent = JSON.stringify(merged, null, 2);
 		return new ClaudecodePermissions({
 			outputRoot,
@@ -33788,6 +33842,9 @@ var KiloRule = class KiloRule extends ToolRule {
 			nonRoot: { relativeDirPath: buildToolPath(KILO_DIR, KILO_RULES_DIR_NAME, excludeToolDir) }
 		};
 	}
+	static getExtraSharedWritePaths({ global = false } = {}) {
+		return global ? [] : [KiloMcp.getSettablePaths({ global: false })];
+	}
 	static async fromFile({ outputRoot = process.cwd(), relativeFilePath, validate = true, global = false }) {
 		const paths = this.getSettablePaths({ global });
 		if (relativeFilePath === paths.root.relativeFilePath) {
@@ -34049,6 +34106,9 @@ var OpenCodeRule = class OpenCodeRule extends ToolRule {
 			nonRoot: { relativeDirPath: buildToolPath(OPENCODE_DIR, "memories", excludeToolDir) }
 		};
 	}
+	static getExtraSharedWritePaths({ global = false } = {}) {
+		return global ? [] : [OpencodeMcp.getSettablePaths({ global: false })];
+	}
 	static async fromFile({ outputRoot = process.cwd(), relativeFilePath, validate = true, global = false }) {
 		const paths = this.getSettablePaths({ global });
 		if (relativeFilePath === paths.root.relativeFilePath) {
@@ -34725,6 +34785,37 @@ var RovodevRule = class RovodevRule extends ToolRule {
 			toolTarget: "rovodev"
 		});
 	}
+	/**
+	* Mirror the primary `.rovodev/AGENTS.md` root rule to `./AGENTS.md` so project
+	* memory stays discoverable at the repo root. Empty when `rootRule` is not the primary root.
+	*/
+	static getRootMirrorFiles({ outputRoot, rootRule, content }) {
+		if (!(rootRule instanceof RovodevRule)) return [];
+		const primary = this.getSettablePaths({ global: false }).root;
+		if (rootRule.getRelativeDirPath() !== primary.relativeDirPath || rootRule.getRelativeFilePath() !== primary.relativeFilePath) return [];
+		return [new RovodevRule({
+			outputRoot,
+			relativeDirPath: ".",
+			relativeFilePath: ROVODEV_RULE_FILE_NAME,
+			fileContent: content,
+			validate: true,
+			root: true
+		})];
+	}
+	/**
+	* Globs for mirror deletion: the `./AGENTS.md` mirror (`mirrorGlob`) is deleted
+	* only when the primary `.rovodev/AGENTS.md` (`primaryGlob`) still exists.
+	*/
+	static getRootMirrorDeletionGlobs({ outputRoot }) {
+		return {
+			primaryGlob: (0, node_path.join)(outputRoot, ROVODEV_DIR, ROVODEV_RULE_FILE_NAME),
+			mirrorGlob: (0, node_path.join)(outputRoot, ROVODEV_RULE_FILE_NAME)
+		};
+	}
+	/** Glob for the `separate-local-file` deletion; rovodev writes it at project root, not under `.rovodev/`. */
+	static getLocalRootDeletionGlob({ outputRoot, fileName }) {
+		return (0, node_path.join)(outputRoot, fileName);
+	}
 };
 //#endregion
 //#region src/features/rules/takt-rule.ts
@@ -35447,7 +35538,7 @@ var RulesProcessor = class extends FeatureProcessor {
 		});
 		this.applyRootRuleSections({
 			toolRules,
-			meta
+			factory
 		});
 		return [...toolRules, ...extraFiles];
 	}
@@ -35509,31 +35600,16 @@ var RulesProcessor = class extends FeatureProcessor {
 	* reference and conventions sections to the root rule content. Mutates the
 	* root rule in place.
 	*/
-	applyRootRuleSections({ toolRules, meta }) {
+	applyRootRuleSections({ toolRules, factory }) {
+		const { meta } = factory;
 		const rootRule = toolRules.find((rule) => rule.isRoot());
 		if (!rootRule) return;
 		const newContent = this.generateReferenceSectionFromMeta(meta, toolRules) + (!meta.createsSeparateConventionsRule && meta.additionalConventions ? this.generateAdditionalConventionsSectionFromMeta(meta) : "") + rootRule.getFileContent();
 		rootRule.setFileContent(newContent);
-		if (meta.mirrorsRootToAgentsMd && !this.global) this.mirrorRootRuleToAgentsMd({
-			toolRules,
+		if (meta.mirrorsRootToAgentsMd && !this.global && factory.class.getRootMirrorFiles) toolRules.push(...factory.class.getRootMirrorFiles({
+			outputRoot: this.outputRoot,
 			rootRule,
 			content: newContent
-		});
-	}
-	/**
-	* Mirror the primary root rule to a project-root `AGENTS.md` for tools whose
-	* primary root lives in a subdirectory (rovodev: `.rovodev/AGENTS.md`).
-	*/
-	mirrorRootRuleToAgentsMd({ toolRules, rootRule, content }) {
-		if (!(rootRule instanceof RovodevRule)) return;
-		const primary = RovodevRule.getSettablePaths({ global: false }).root;
-		if (rootRule.getRelativeDirPath() === primary.relativeDirPath && rootRule.getRelativeFilePath() === primary.relativeFilePath) toolRules.push(new RovodevRule({
-			outputRoot: this.outputRoot,
-			relativeDirPath: ".",
-			relativeFilePath: "AGENTS.md",
-			fileContent: content,
-			validate: true,
-			root: true
 		}));
 	}
 	buildSkillList(skillClass) {
@@ -35759,15 +35835,19 @@ As this project's AI coding tool, you must follow the additional conventions bel
 			const localRootToolRules = await (async () => {
 				if (!forDeletion || this.global || factory.meta.localRootMode !== "separate-local-file" || !factory.meta.localRootFileName) return [];
 				const fileName = factory.meta.localRootFileName;
-				if (factory.class === RovodevRule) return buildDeletionRulesFromPaths(await findFilesByGlobs((0, node_path.join)(this.outputRoot, fileName)));
+				if (factory.class.getLocalRootDeletionGlob) return buildDeletionRulesFromPaths(await findFilesByGlobs(factory.class.getLocalRootDeletionGlob({
+					outputRoot: this.outputRoot,
+					fileName
+				})));
 				if (!settablePaths.root) return [];
 				return buildDeletionRulesFromPaths(await findFilesWithFallback((0, node_path.join)(this.outputRoot, settablePaths.root.relativeDirPath ?? ".", fileName), settablePaths.alternativeRoots, (alt) => (0, node_path.join)(this.outputRoot, alt.relativeDirPath, fileName)));
 			})();
 			this.logger.debug(`Found ${localRootToolRules.length} local root tool rule files for deletion`);
 			const rootMirrorDeletionRules = await (async () => {
-				if (!forDeletion || this.global || !factory.meta.mirrorsRootToAgentsMd || factory.class !== RovodevRule) return [];
-				if ((await findFilesByGlobs((0, node_path.join)(this.outputRoot, ".rovodev", "AGENTS.md"))).length === 0) return [];
-				return buildDeletionRulesFromPaths(await findFilesByGlobs((0, node_path.join)(this.outputRoot, "AGENTS.md")));
+				if (!forDeletion || this.global || !factory.meta.mirrorsRootToAgentsMd || !factory.class.getRootMirrorDeletionGlobs) return [];
+				const { primaryGlob, mirrorGlob } = factory.class.getRootMirrorDeletionGlobs({ outputRoot: this.outputRoot });
+				if ((await findFilesByGlobs(primaryGlob)).length === 0) return [];
+				return buildDeletionRulesFromPaths(await findFilesByGlobs(mirrorGlob));
 			})();
 			const nonRootToolRules = await (async () => {
 				if (!settablePaths.nonRoot) return [];
@@ -36281,22 +36361,29 @@ function resolveExecutionOrder(steps) {
 const GENERATION_STEP_GRAPH = [
 	{
 		id: "ignore",
-		writesSharedFile: ["claude-settings", "zed-settings"]
+		writesSharedFile: [".claude/settings.json", ".zed/settings.json"]
 	},
 	{
 		id: "mcp",
 		writesSharedFile: [
-			"kilo-opencode-config",
-			"zed-settings",
-			"qwencode-settings",
-			"augmentcode-settings",
-			"hermesagent-config",
-			"amp-settings",
-			"codexcli-config",
-			"grokcli-config",
-			"vibe-config",
-			"devin-config",
-			"reasonix-config"
+			".amp/settings.json",
+			".augment/settings.json",
+			".codex/config.toml",
+			".config/amp/settings.json",
+			".config/devin/config.json",
+			".config/opencode/opencode.json",
+			".config/zed/settings.json",
+			".devin/config.json",
+			".grok/config.toml",
+			".hermes/config.yaml",
+			".qwen/settings.json",
+			".reasonix/config.toml",
+			".takt/config.yaml",
+			".vibe/config.toml",
+			".zed/settings.json",
+			"kilo.json",
+			"opencode.json",
+			"reasonix.toml"
 		],
 		dependsOn: ["ignore"]
 	},
@@ -36306,33 +36393,39 @@ const GENERATION_STEP_GRAPH = [
 	{
 		id: "hooks",
 		writesSharedFile: [
-			"claude-settings",
-			"qwencode-settings",
-			"augmentcode-settings",
-			"hermesagent-config",
-			"kiro-agent-config",
-			"codexcli-config",
-			"vibe-config",
-			"devin-config"
+			".augment/settings.json",
+			".claude/settings.json",
+			".codex/config.toml",
+			".config/devin/config.json",
+			".hermes/config.yaml",
+			".kiro/agents/default.json",
+			".qwen/settings.json",
+			".vibe/config.toml"
 		],
 		dependsOn: ["ignore", "mcp"]
 	},
 	{
 		id: "permissions",
 		writesSharedFile: [
-			"claude-settings",
-			"kilo-opencode-config",
-			"zed-settings",
-			"qwencode-settings",
-			"augmentcode-settings",
-			"hermesagent-config",
-			"kiro-agent-config",
-			"amp-settings",
-			"codexcli-config",
-			"grokcli-config",
-			"vibe-config",
-			"devin-config",
-			"reasonix-config"
+			".amp/settings.json",
+			".augment/settings.json",
+			".claude/settings.json",
+			".codex/config.toml",
+			".config/amp/settings.json",
+			".config/devin/config.json",
+			".config/opencode/opencode.json",
+			".config/zed/settings.json",
+			".devin/config.json",
+			".grok/config.toml",
+			".hermes/config.yaml",
+			".kiro/agents/default.json",
+			".qwen/settings.json",
+			".reasonix/config.toml",
+			".takt/config.yaml",
+			".vibe/config.toml",
+			".zed/settings.json",
+			"opencode.json",
+			"reasonix.toml"
 		],
 		dependsOn: [
 			"ignore",
@@ -36342,7 +36435,7 @@ const GENERATION_STEP_GRAPH = [
 	},
 	{
 		id: "rules",
-		writesSharedFile: ["kilo-opencode-config"],
+		writesSharedFile: ["kilo.json", "opencode.json"],
 		dependsOn: [
 			"mcp",
 			"skills",

package/dist/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_import = require("./import-CNtfs80W.cjs");
+const require_import = require("./import-H0MKtu9x.cjs");
 //#region src/index.ts
 async function generate(options = {}) {
 	const { silent = true, verbose = false, ...rest } = options;

package/dist/index.js

@@ -1,4 +1,4 @@
-import { Ut as ALL_FEATURES, Y as ConfigResolver, Z as ConsoleLogger, _t as ALL_TOOL_TARGETS, i as convertFromTool$1, n as checkRulesyncDirExists, r as generate$1, t as importFromTool$1 } from "./import-ylOvQDpE.js";
+import { Ut as ALL_FEATURES, Y as ConfigResolver, Z as ConsoleLogger, _t as ALL_TOOL_TARGETS, i as convertFromTool$1, n as checkRulesyncDirExists, r as generate$1, t as importFromTool$1 } from "./import-BkxwFCDM.js";
 //#region src/index.ts
 async function generate(options = {}) {
 	const { silent = true, verbose = false, ...rest } = options;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rulesync",
-  "version": "9.1.0",
+  "version": "9.2.0",
   "description": "Unified AI rules management CLI tool that generates configuration files for various AI development tools",
   "keywords": [
     "ai",
@@ -54,33 +54,33 @@
     "@toon-format/toon": "2.3.0",
     "@valibot/to-json-schema": "1.7.1",
     "commander": "15.0.0",
-    "effect": "3.21.3",
-    "es-toolkit": "1.47.1",
-    "fastmcp": "4.3.0",
+    "effect": "3.21.4",
+    "es-toolkit": "1.49.0",
+    "fastmcp": "4.3.2",
     "globby": "16.2.0",
     "gray-matter": "4.0.3",
     "js-yaml": "4.2.0",
     "jsonc-parser": "3.3.1",
-    "smol-toml": "1.6.1",
+    "smol-toml": "1.7.0",
     "sury": "10.0.4",
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@anthropic-ai/claude-agent-sdk": "0.3.181",
-    "@openrouter/sdk": "0.13.7",
+    "@anthropic-ai/claude-agent-sdk": "0.3.198",
+    "@openrouter/sdk": "0.13.22",
     "@secretlint/secretlint-rule-preset-recommend": "13.0.2",
     "@tsconfig/node24": "24.0.4",
     "@types/js-yaml": "4.0.9",
-    "@types/node": "25.9.3",
-    "@typescript/native-preview": "7.0.0-dev.20260617.2",
+    "@types/node": "26.1.0",
+    "@typescript/native-preview": "7.0.0-dev.20260701.1",
     "@vitest/coverage-v8": "4.1.9",
     "cspell": "10.0.1",
-    "knip": "6.17.1",
-    "lint-staged": "17.0.7",
-    "oxfmt": "0.55.0",
-    "oxlint": "1.70.0",
-    "repomix": "1.14.1",
-    "resend": "6.14.0",
+    "knip": "6.23.0",
+    "lint-staged": "17.0.8",
+    "oxfmt": "0.57.0",
+    "oxlint": "1.72.0",
+    "repomix": "1.16.0",
+    "resend": "6.16.0",
     "secretlint": "13.0.2",
     "simple-git": "3.36.0",
     "simple-git-hooks": "2.13.1",
@@ -88,7 +88,7 @@
     "tsdown": "0.22.3",
     "tsx": "4.22.4",
     "typescript": "6.0.3",
-    "vite": "8.0.16",
+    "vite": "8.1.2",
     "vitepress": "1.6.4",
     "vitest": "4.1.9"
   },