rulesync 9.1.1 → 9.2.0

package/dist/{import-DywcWsgJ.js → import-BkxwFCDM.js}

@@ -10462,6 +10462,66 @@ var AugmentcodeIgnore = class AugmentcodeIgnore extends ToolIgnore {
 	}
 };
 //#endregion
+//#region src/features/claudecode-settings-gateway.ts
+/**
+* Single owner of the `.claude/settings.json` `permissions` block, which both
+* `ignore` (writes `Read(...)` into `permissions.deny`) and `permissions`
+* (writes the whole `allow`/`ask`/`deny`) read-modify-write. The entry format,
+* the merge, and the cross-feature ownership rule (permissions' explicit `Read`
+* rules win over ignore-derived `Read` denies) used to be duplicated across both
+* feature files; they live here once so each feature just states its intent and
+* never reasons about the other's existence.
+*/
+const READ_TOOL_NAME = "Read";
+const isReadDenyEntry = (entry) => entry.startsWith(`${READ_TOOL_NAME}(`) && entry.endsWith(")");
+const buildReadDenyEntry = (pattern) => `${READ_TOOL_NAME}(${pattern})`;
+const parsePermissionsBlock = (settings) => {
+	const permissions = settings.permissions ?? {};
+	return {
+		allow: permissions.allow ?? [],
+		ask: permissions.ask ?? [],
+		deny: permissions.deny ?? []
+	};
+};
+const withPermissions = (settings, next) => {
+	const permissions = { ...settings.permissions };
+	const assign = (key, values) => {
+		if (values.length > 0) permissions[key] = values;
+		else delete permissions[key];
+	};
+	assign("allow", next.allow);
+	assign("ask", next.ask);
+	assign("deny", next.deny);
+	return {
+		...settings,
+		permissions
+	};
+};
+const applyIgnoreReadDenies = (params) => {
+	const { settings, readDenies } = params;
+	const current = parsePermissionsBlock(settings);
+	const preservedDeny = current.deny.filter((entry) => !isReadDenyEntry(entry) || readDenies.includes(entry));
+	return withPermissions(settings, {
+		allow: current.allow,
+		ask: current.ask,
+		deny: uniq([...preservedDeny, ...readDenies].toSorted())
+	});
+};
+const applyPermissions = (params) => {
+	const { settings, managedToolNames, toolNameOf, allow, ask, deny, logger } = params;
+	const current = parsePermissionsBlock(settings);
+	const keepUnmanaged = (entries) => entries.filter((entry) => !managedToolNames.has(toolNameOf(entry)));
+	if (logger && managedToolNames.has(READ_TOOL_NAME)) {
+		const overwrittenReadDenies = current.deny.filter((entry) => toolNameOf(entry) === READ_TOOL_NAME);
+		if (overwrittenReadDenies.length > 0) logger.warn(`Permissions feature manages '${READ_TOOL_NAME}' tool and will overwrite ${overwrittenReadDenies.length} existing ${READ_TOOL_NAME} deny entries. Permissions take precedence.`);
+	}
+	return withPermissions(settings, {
+		allow: uniq([...keepUnmanaged(current.allow), ...allow].toSorted()),
+		ask: uniq([...keepUnmanaged(current.ask), ...ask].toSorted()),
+		deny: uniq([...keepUnmanaged(current.deny), ...deny].toSorted())
+	});
+};
+//#endregion
 //#region src/features/ignore/claudecode-ignore.ts
 const DEFAULT_FILE_MODE = "shared";
 /**
@@ -10508,7 +10568,7 @@ var ClaudecodeIgnore = class ClaudecodeIgnore extends ToolIgnore {
 	}
 	toRulesyncIgnore() {
 		const fileContent = this.patterns.map((pattern) => {
-			if (pattern.startsWith("Read(") && pattern.endsWith(")")) return pattern.slice(5, -1);
+			if (isReadDenyEntry(pattern)) return pattern.slice(5, -1);
 			return pattern;
 		}).filter((pattern) => pattern.length > 0).join("\n");
 		return new RulesyncIgnore({
@@ -10519,22 +10579,20 @@ var ClaudecodeIgnore = class ClaudecodeIgnore extends ToolIgnore {
 		});
 	}
 	static async fromRulesyncIgnore({ outputRoot = process.cwd(), rulesyncIgnore, options }) {
-		const deniedValues = rulesyncIgnore.getFileContent().split(/\r?\n|\r/).map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#")).map((pattern) => `Read(${pattern})`);
+		const deniedValues = rulesyncIgnore.getFileContent().split(/\r?\n|\r/).map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#")).map((pattern) => buildReadDenyEntry(pattern));
 		const paths = this.getSettablePaths({ options });
 		const filePath = join(outputRoot, paths.relativeDirPath, paths.relativeFilePath);
 		const existingFileContent = await fileExists(filePath) ? await readFileContent(filePath) : "{}";
-		const existingJsonValue = JSON.parse(existingFileContent);
-		const preservedDenies = (existingJsonValue.permissions?.deny ?? []).filter((deny) => {
-			if (deny.startsWith("Read(") && deny.endsWith(")")) return deniedValues.includes(deny);
-			return true;
+		let existingJsonValue;
+		try {
+			existingJsonValue = JSON.parse(existingFileContent);
+		} catch (error) {
+			throw new Error(`Failed to parse existing Claude settings at ${filePath}: ${formatError(error)}`, { cause: error });
+		}
+		const jsonValue = applyIgnoreReadDenies({
+			settings: existingJsonValue,
+			readDenies: deniedValues
 		});
-		const jsonValue = {
-			...existingJsonValue,
-			permissions: {
-				...existingJsonValue.permissions,
-				deny: uniq([...preservedDenies, ...deniedValues].toSorted())
-			}
-		};
 		return new ClaudecodeIgnore({
 			outputRoot,
 			relativeDirPath: paths.relativeDirPath,
@@ -17071,31 +17129,15 @@ var ClaudecodePermissions = class ClaudecodePermissions extends ToolPermissions
 		const config = rulesyncPermissions.getJson();
 		const { allow, ask, deny } = convertRulesyncToClaudePermissions(config);
 		const managedToolNames = new Set(Object.keys(config.permission).map((category) => toClaudeToolName(category)));
-		const existingPermissions = settings.permissions ?? {};
-		const preservedAllow = (existingPermissions.allow ?? []).filter((entry) => !managedToolNames.has(parseClaudePermissionEntry(entry).toolName));
-		const preservedAsk = (existingPermissions.ask ?? []).filter((entry) => !managedToolNames.has(parseClaudePermissionEntry(entry).toolName));
-		const preservedDeny = (existingPermissions.deny ?? []).filter((entry) => !managedToolNames.has(parseClaudePermissionEntry(entry).toolName));
-		if (logger && managedToolNames.has("Read")) {
-			const droppedReadDenyEntries = (existingPermissions.deny ?? []).filter((entry) => {
-				const { toolName } = parseClaudePermissionEntry(entry);
-				return toolName === "Read";
-			});
-			if (droppedReadDenyEntries.length > 0) logger.warn(`Permissions feature manages 'Read' tool and will overwrite ${droppedReadDenyEntries.length} existing Read deny entries (possibly from ignore feature). Permissions take precedence.`);
-		}
-		const mergedPermissions = { ...existingPermissions };
-		const mergedAllow = uniq([...preservedAllow, ...allow].toSorted());
-		const mergedAsk = uniq([...preservedAsk, ...ask].toSorted());
-		const mergedDeny = uniq([...preservedDeny, ...deny].toSorted());
-		if (mergedAllow.length > 0) mergedPermissions.allow = mergedAllow;
-		else delete mergedPermissions.allow;
-		if (mergedAsk.length > 0) mergedPermissions.ask = mergedAsk;
-		else delete mergedPermissions.ask;
-		if (mergedDeny.length > 0) mergedPermissions.deny = mergedDeny;
-		else delete mergedPermissions.deny;
-		const merged = {
-			...settings,
-			permissions: mergedPermissions
-		};
+		const merged = applyPermissions({
+			settings,
+			managedToolNames,
+			toolNameOf: (entry) => parseClaudePermissionEntry(entry).toolName,
+			allow,
+			ask,
+			deny,
+			logger
+		});
 		const fileContent = JSON.stringify(merged, null, 2);
 		return new ClaudecodePermissions({
 			outputRoot,
@@ -37065,4 +37107,4 @@ async function importPermissionsCore(params) {
 //#endregion
 export { CLIError as $, IgnoreProcessor as A, RULESYNC_LOCAL_CONFIG_RELATIVE_FILE_PATH as At, toolCommandFactories as B, RULESYNC_SOURCES_LOCK_RELATIVE_FILE_PATH as Bt, PermissionsProcessorToolTargetSchema as C, RULESYNC_COMMANDS_RELATIVE_DIR_PATH as Ct, McpProcessorToolTargetSchema as D, RULESYNC_HOOKS_FILE_NAME as Dt, McpProcessor as E, RULESYNC_CURATED_SKILLS_RELATIVE_DIR_PATH as Et, HooksProcessorToolTargetSchema as F, RULESYNC_PERMISSIONS_FILE_NAME as Ft, CLAUDECODE_SKILLS_DIR_PATH as G, CLAUDECODE_LOCAL_RULE_FILE_NAME as H, formatError as Ht, toolHooksFactories as I, RULESYNC_PERMISSIONS_RELATIVE_FILE_PATH as It, stringifyFrontmatter as J, RulesyncCommand as K, RulesyncHooks as L, RULESYNC_RELATIVE_DIR_PATH as Lt, toolIgnoreFactories as M, RULESYNC_MCP_RELATIVE_FILE_PATH as Mt, RulesyncIgnore as N, RULESYNC_MCP_SCHEMA_URL as Nt, toolMcpFactories as O, RULESYNC_HOOKS_RELATIVE_FILE_PATH as Ot, HooksProcessor as P, RULESYNC_OVERVIEW_FILE_NAME as Pt, JsonLogger as Q, CommandsProcessor as R, RULESYNC_RULES_RELATIVE_DIR_PATH as Rt, PermissionsProcessor as S, RULESYNC_AIIGNORE_RELATIVE_FILE_PATH as St, RulesyncPermissions as T, RULESYNC_CONFIG_SCHEMA_URL as Tt, CLAUDECODE_MEMORIES_DIR_NAME as U, ALL_FEATURES as Ut, CLAUDECODE_DIR as V, RULESYNC_SUBAGENTS_RELATIVE_DIR_PATH as Vt, CLAUDECODE_SETTINGS_LOCAL_FILE_NAME as W, ALL_FEATURES_WITH_WILDCARD as Wt, findControlCharacter as X, ConfigResolver as Y, ConsoleLogger as Z, toolSkillFactories as _, ALL_TOOL_TARGETS as _t, RulesProcessor as a, fileExists as at, RulesyncSkillFrontmatterSchema as b, MAX_FILE_SIZE as bt, RulesyncRule as c, getHomeDirectory as ct, SubagentsProcessorToolTargetSchema as d, readFileContent as dt, ErrorCodes as et, toolSubagentFactories as f, removeDirectory as ft, SkillsProcessorToolTargetSchema as g, writeFileContent as gt, SkillsProcessor as h, toPosixPath as ht, convertFromTool as i, ensureDir as it, IgnoreProcessorToolTargetSchema as j, RULESYNC_MCP_FILE_NAME as jt, RulesyncMcp as k, RULESYNC_IGNORE_RELATIVE_FILE_PATH as kt, RulesyncRuleFrontmatterSchema as l, isSymlink as lt, RulesyncSubagentFrontmatterSchema as m, removeTempDirectory as mt, checkRulesyncDirExists as n, createTempDirectory as nt, RulesProcessorToolTargetSchema as o, findFilesByGlobs as ot, RulesyncSubagent as p, removeFile as pt, RulesyncCommandFrontmatterSchema as q, generate as r, directoryExists as rt, toolRuleFactories as s, getFileSize as st, importFromTool as t, checkPathTraversal as tt, SubagentsProcessor as u, listDirectoryFiles as ut, getLocalSkillDirNames as v, ALL_TOOL_TARGETS_WITH_WILDCARD as vt, toolPermissionsFactories as w, RULESYNC_CONFIG_RELATIVE_FILE_PATH as wt, SKILL_FILE_NAME as x, RULESYNC_AIIGNORE_FILE_NAME as xt, RulesyncSkill as y, ToolTargetSchema as yt, CommandsProcessorToolTargetSchema as z, RULESYNC_SKILLS_RELATIVE_DIR_PATH as zt };
 
-//# sourceMappingURL=import-DywcWsgJ.js.map
+//# sourceMappingURL=import-BkxwFCDM.js.map