rulesync 9.1.1 → 9.2.0

package/dist/{import-cNqo0ZxT.cjs → import-H0MKtu9x.cjs}

@@ -10489,6 +10489,66 @@ var AugmentcodeIgnore = class AugmentcodeIgnore extends ToolIgnore {
 	}
 };
 //#endregion
+//#region src/features/claudecode-settings-gateway.ts
+/**
+* Single owner of the `.claude/settings.json` `permissions` block, which both
+* `ignore` (writes `Read(...)` into `permissions.deny`) and `permissions`
+* (writes the whole `allow`/`ask`/`deny`) read-modify-write. The entry format,
+* the merge, and the cross-feature ownership rule (permissions' explicit `Read`
+* rules win over ignore-derived `Read` denies) used to be duplicated across both
+* feature files; they live here once so each feature just states its intent and
+* never reasons about the other's existence.
+*/
+const READ_TOOL_NAME = "Read";
+const isReadDenyEntry = (entry) => entry.startsWith(`${READ_TOOL_NAME}(`) && entry.endsWith(")");
+const buildReadDenyEntry = (pattern) => `${READ_TOOL_NAME}(${pattern})`;
+const parsePermissionsBlock = (settings) => {
+	const permissions = settings.permissions ?? {};
+	return {
+		allow: permissions.allow ?? [],
+		ask: permissions.ask ?? [],
+		deny: permissions.deny ?? []
+	};
+};
+const withPermissions = (settings, next) => {
+	const permissions = { ...settings.permissions };
+	const assign = (key, values) => {
+		if (values.length > 0) permissions[key] = values;
+		else delete permissions[key];
+	};
+	assign("allow", next.allow);
+	assign("ask", next.ask);
+	assign("deny", next.deny);
+	return {
+		...settings,
+		permissions
+	};
+};
+const applyIgnoreReadDenies = (params) => {
+	const { settings, readDenies } = params;
+	const current = parsePermissionsBlock(settings);
+	const preservedDeny = current.deny.filter((entry) => !isReadDenyEntry(entry) || readDenies.includes(entry));
+	return withPermissions(settings, {
+		allow: current.allow,
+		ask: current.ask,
+		deny: (0, es_toolkit.uniq)([...preservedDeny, ...readDenies].toSorted())
+	});
+};
+const applyPermissions = (params) => {
+	const { settings, managedToolNames, toolNameOf, allow, ask, deny, logger } = params;
+	const current = parsePermissionsBlock(settings);
+	const keepUnmanaged = (entries) => entries.filter((entry) => !managedToolNames.has(toolNameOf(entry)));
+	if (logger && managedToolNames.has(READ_TOOL_NAME)) {
+		const overwrittenReadDenies = current.deny.filter((entry) => toolNameOf(entry) === READ_TOOL_NAME);
+		if (overwrittenReadDenies.length > 0) logger.warn(`Permissions feature manages '${READ_TOOL_NAME}' tool and will overwrite ${overwrittenReadDenies.length} existing ${READ_TOOL_NAME} deny entries. Permissions take precedence.`);
+	}
+	return withPermissions(settings, {
+		allow: (0, es_toolkit.uniq)([...keepUnmanaged(current.allow), ...allow].toSorted()),
+		ask: (0, es_toolkit.uniq)([...keepUnmanaged(current.ask), ...ask].toSorted()),
+		deny: (0, es_toolkit.uniq)([...keepUnmanaged(current.deny), ...deny].toSorted())
+	});
+};
+//#endregion
 //#region src/features/ignore/claudecode-ignore.ts
 const DEFAULT_FILE_MODE = "shared";
 /**
@@ -10535,7 +10595,7 @@ var ClaudecodeIgnore = class ClaudecodeIgnore extends ToolIgnore {
 	}
 	toRulesyncIgnore() {
 		const fileContent = this.patterns.map((pattern) => {
-			if (pattern.startsWith("Read(") && pattern.endsWith(")")) return pattern.slice(5, -1);
+			if (isReadDenyEntry(pattern)) return pattern.slice(5, -1);
 			return pattern;
 		}).filter((pattern) => pattern.length > 0).join("\n");
 		return new RulesyncIgnore({
@@ -10546,22 +10606,20 @@ var ClaudecodeIgnore = class ClaudecodeIgnore extends ToolIgnore {
 		});
 	}
 	static async fromRulesyncIgnore({ outputRoot = process.cwd(), rulesyncIgnore, options }) {
-		const deniedValues = rulesyncIgnore.getFileContent().split(/\r?\n|\r/).map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#")).map((pattern) => `Read(${pattern})`);
+		const deniedValues = rulesyncIgnore.getFileContent().split(/\r?\n|\r/).map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#")).map((pattern) => buildReadDenyEntry(pattern));
 		const paths = this.getSettablePaths({ options });
 		const filePath = (0, node_path.join)(outputRoot, paths.relativeDirPath, paths.relativeFilePath);
 		const existingFileContent = await fileExists(filePath) ? await readFileContent(filePath) : "{}";
-		const existingJsonValue = JSON.parse(existingFileContent);
-		const preservedDenies = (existingJsonValue.permissions?.deny ?? []).filter((deny) => {
-			if (deny.startsWith("Read(") && deny.endsWith(")")) return deniedValues.includes(deny);
-			return true;
+		let existingJsonValue;
+		try {
+			existingJsonValue = JSON.parse(existingFileContent);
+		} catch (error) {
+			throw new Error(`Failed to parse existing Claude settings at ${filePath}: ${formatError(error)}`, { cause: error });
+		}
+		const jsonValue = applyIgnoreReadDenies({
+			settings: existingJsonValue,
+			readDenies: deniedValues
 		});
-		const jsonValue = {
-			...existingJsonValue,
-			permissions: {
-				...existingJsonValue.permissions,
-				deny: (0, es_toolkit.uniq)([...preservedDenies, ...deniedValues].toSorted())
-			}
-		};
 		return new ClaudecodeIgnore({
 			outputRoot,
 			relativeDirPath: paths.relativeDirPath,
@@ -17098,31 +17156,15 @@ var ClaudecodePermissions = class ClaudecodePermissions extends ToolPermissions
 		const config = rulesyncPermissions.getJson();
 		const { allow, ask, deny } = convertRulesyncToClaudePermissions(config);
 		const managedToolNames = new Set(Object.keys(config.permission).map((category) => toClaudeToolName(category)));
-		const existingPermissions = settings.permissions ?? {};
-		const preservedAllow = (existingPermissions.allow ?? []).filter((entry) => !managedToolNames.has(parseClaudePermissionEntry(entry).toolName));
-		const preservedAsk = (existingPermissions.ask ?? []).filter((entry) => !managedToolNames.has(parseClaudePermissionEntry(entry).toolName));
-		const preservedDeny = (existingPermissions.deny ?? []).filter((entry) => !managedToolNames.has(parseClaudePermissionEntry(entry).toolName));
-		if (logger && managedToolNames.has("Read")) {
-			const droppedReadDenyEntries = (existingPermissions.deny ?? []).filter((entry) => {
-				const { toolName } = parseClaudePermissionEntry(entry);
-				return toolName === "Read";
-			});
-			if (droppedReadDenyEntries.length > 0) logger.warn(`Permissions feature manages 'Read' tool and will overwrite ${droppedReadDenyEntries.length} existing Read deny entries (possibly from ignore feature). Permissions take precedence.`);
-		}
-		const mergedPermissions = { ...existingPermissions };
-		const mergedAllow = (0, es_toolkit.uniq)([...preservedAllow, ...allow].toSorted());
-		const mergedAsk = (0, es_toolkit.uniq)([...preservedAsk, ...ask].toSorted());
-		const mergedDeny = (0, es_toolkit.uniq)([...preservedDeny, ...deny].toSorted());
-		if (mergedAllow.length > 0) mergedPermissions.allow = mergedAllow;
-		else delete mergedPermissions.allow;
-		if (mergedAsk.length > 0) mergedPermissions.ask = mergedAsk;
-		else delete mergedPermissions.ask;
-		if (mergedDeny.length > 0) mergedPermissions.deny = mergedDeny;
-		else delete mergedPermissions.deny;
-		const merged = {
-			...settings,
-			permissions: mergedPermissions
-		};
+		const merged = applyPermissions({
+			settings,
+			managedToolNames,
+			toolNameOf: (entry) => parseClaudePermissionEntry(entry).toolName,
+			allow,
+			ask,
+			deny,
+			logger
+		});
 		const fileContent = JSON.stringify(merged, null, 2);
 		return new ClaudecodePermissions({
 			outputRoot,

package/dist/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_import = require("./import-cNqo0ZxT.cjs");
+const require_import = require("./import-H0MKtu9x.cjs");
 //#region src/index.ts
 async function generate(options = {}) {
 	const { silent = true, verbose = false, ...rest } = options;

package/dist/index.js

@@ -1,4 +1,4 @@
-import { Ut as ALL_FEATURES, Y as ConfigResolver, Z as ConsoleLogger, _t as ALL_TOOL_TARGETS, i as convertFromTool$1, n as checkRulesyncDirExists, r as generate$1, t as importFromTool$1 } from "./import-DywcWsgJ.js";
+import { Ut as ALL_FEATURES, Y as ConfigResolver, Z as ConsoleLogger, _t as ALL_TOOL_TARGETS, i as convertFromTool$1, n as checkRulesyncDirExists, r as generate$1, t as importFromTool$1 } from "./import-BkxwFCDM.js";
 //#region src/index.ts
 async function generate(options = {}) {
 	const { silent = true, verbose = false, ...rest } = options;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rulesync",
-  "version": "9.1.1",
+  "version": "9.2.0",
   "description": "Unified AI rules management CLI tool that generates configuration files for various AI development tools",
   "keywords": [
     "ai",
@@ -54,33 +54,33 @@
     "@toon-format/toon": "2.3.0",
     "@valibot/to-json-schema": "1.7.1",
     "commander": "15.0.0",
-    "effect": "3.21.3",
-    "es-toolkit": "1.47.1",
-    "fastmcp": "4.3.0",
+    "effect": "3.21.4",
+    "es-toolkit": "1.49.0",
+    "fastmcp": "4.3.2",
     "globby": "16.2.0",
     "gray-matter": "4.0.3",
     "js-yaml": "4.2.0",
     "jsonc-parser": "3.3.1",
-    "smol-toml": "1.6.1",
+    "smol-toml": "1.7.0",
     "sury": "10.0.4",
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@anthropic-ai/claude-agent-sdk": "0.3.181",
-    "@openrouter/sdk": "0.13.7",
+    "@anthropic-ai/claude-agent-sdk": "0.3.198",
+    "@openrouter/sdk": "0.13.22",
     "@secretlint/secretlint-rule-preset-recommend": "13.0.2",
     "@tsconfig/node24": "24.0.4",
     "@types/js-yaml": "4.0.9",
-    "@types/node": "25.9.3",
-    "@typescript/native-preview": "7.0.0-dev.20260617.2",
+    "@types/node": "26.1.0",
+    "@typescript/native-preview": "7.0.0-dev.20260701.1",
     "@vitest/coverage-v8": "4.1.9",
     "cspell": "10.0.1",
-    "knip": "6.17.1",
-    "lint-staged": "17.0.7",
-    "oxfmt": "0.55.0",
-    "oxlint": "1.70.0",
-    "repomix": "1.14.1",
-    "resend": "6.14.0",
+    "knip": "6.23.0",
+    "lint-staged": "17.0.8",
+    "oxfmt": "0.57.0",
+    "oxlint": "1.72.0",
+    "repomix": "1.16.0",
+    "resend": "6.16.0",
     "secretlint": "13.0.2",
     "simple-git": "3.36.0",
     "simple-git-hooks": "2.13.1",
@@ -88,7 +88,7 @@
     "tsdown": "0.22.3",
     "tsx": "4.22.4",
     "typescript": "6.0.3",
-    "vite": "8.0.16",
+    "vite": "8.1.2",
     "vitepress": "1.6.4",
     "vitest": "4.1.9"
   },